View Issue Details

IDProjectCategoryView StatusLast Update
0010140Talerwallet-corepublic2025-07-09 12:49
Reporteroec Assigned Toavalos  
PriorityhighSeveritymajorReproducibilityhave not tried
Status assignedResolutionopen 
Product Versiongit (master) 
Target Version1.0 stretch goals 
Summary0010140: Update third party dependencies [6h]
DescriptionThe versions of the dependencies of the embedded code are outdated:

curl: 7.86.0 vs 8.14.1
sqlite: 3.42.0 vs 3.50.2
c-ares: 1.25.0 vs 1.34.5
mbedtls: 3.3.0 vs 3.6.3.1
zlib: 1.2.13 vs 1.3
libsodium: 1.0.18 vs 1.0.20
quickjs: 2024-01-13 vs 2025-04-26

Some of them even contain security fixes, many of them recommend upgrades.
TagsNo tags attached.

Activities

avalos

2025-07-07 23:23

developer   ~0025438

@fdold I could maybe take over this, but did you do any modifications to any of those libraries? I noticed that the meson scripts are not in the official release tarballs of some of those libraries, did you write them by hand?

As for qtart, however, is the situation better now in terms of separation of changes? Otherwise, I think you are the best person to tackle it, since you have a better picture of the modifications that you did to the codebase.

Christian Grothoff

2025-07-09 08:53

manager   ~0025453

Ivan: maybe start with the libraries that were not modified (or where only meson scripts were added)?

Florian Dold

2025-07-09 12:49

manager   ~0025455

The last quickjs upgrade actually went very smoothly.

The dependencies (in the subprojects/ folder) indeed use custom meson files *unless* they already come with their own meson build system.

Issue History

Date Modified Username Field Change
2025-06-29 14:40 oec New Issue
2025-06-30 14:02 Christian Grothoff Assigned To => Florian Dold
2025-06-30 14:02 Christian Grothoff Priority normal => high
2025-06-30 14:02 Christian Grothoff Status new => assigned
2025-06-30 14:02 Christian Grothoff Target Version post-1.0 => 1.0 stretch goals
2025-07-07 23:23 avalos Note Added: 0025438
2025-07-09 01:59 Florian Dold Summary Update third party dependencies => Update third party dependencies [6h]
2025-07-09 08:52 Christian Grothoff Assigned To Florian Dold => avalos
2025-07-09 08:53 Christian Grothoff Note Added: 0025453
2025-07-09 12:49 Florian Dold Note Added: 0025455