similarity index 95%
rename from meta-oe/recipes-devtools/capnproto/capnproto_1.4.0.bb
rename to meta-oe/recipes-devtools/capnproto/capnproto_1.5.0.bb
@@ -7,7 +7,7 @@ LIC_FILES_CHKSUM = "file://../LICENSE;md5=a05663ae6cca874123bf667a60dca8c9"
SRC_URI = "git://github.com/sandstorm-io/capnproto.git;branch=release-${PV};protocol=https;tag=v${PV} \
file://0001-Export-binaries-only-for-native-build.patch"
-SRCREV = "8b892a8a11a632f5d52b877a49728808a142379a"
+SRCREV = "373e61ec89e2359f1c362e9b2eadc552f4779306"
S = "${UNPACKDIR}/${BP}/c++"
Cap'n Proto 1.5.0 is primarily a KJ-HTTP security release. It hardens the plain-HTTP serialization path against request smuggling / HTTP desync: serializeRequest/serializeConnectRequest now reject request targets containing whitespace or control characters and serializeResponse rejects status text containing CR, LF or NUL (GHSL-2026-146, reported by Kevin Stubbings), and the header parser no longer accepts whitespace between a field name and the colon. It also picks up compatibility fixes: builds against OpenSSL 4.0 while remaining compatible with older OpenSSL, Bazel 9 support, boringssl Bzlmod repo_name, an MSVC build fix, tolerating ERROR_INVALID_FUNCTION from GetFileInformationByHandleEx under Wine, replacing the c++/LICENSE.txt symlink with a real file, and scoping CTest to the project. LICENSE is unchanged and 0001-Export-binaries-only-for-native-build.patch still applies cleanly. AI-Generated: Uses Claude Code Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> --- .../capnproto/{capnproto_1.4.0.bb => capnproto_1.5.0.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-devtools/capnproto/{capnproto_1.4.0.bb => capnproto_1.5.0.bb} (95%)