chore: update dependencies

[renovate]

Update Request | Renovate Bot

This PR contains the following updates:

Package	Update	Change
Perl/perl5	patch	5.42.1 → 5.42.2
git://git.kernel.org/pub/scm/libs/libcap/libcap.git	minor	2.77 → 2.78
git://git.kernel.org/pub/scm/utils/util-linux/util-linux.git	minor	2.41.4 → 2.42
git://git.savannah.gnu.org/autoconf.git	minor	2.72 → 2.73
git://git.savannah.gnu.org/libtool.git	minor	2.5.4 → 2.6.0
https://gitlab.inria.fr/mpc/mpc.git	minor	1.3.1 → 1.4.0
https://gitlab.kitware.com/cmake/cmake.git	minor	4.2.3 → 4.3.1
libbpf/libbpf	minor	v1.6.3 → v1.7.0
libexpat/libexpat	patch	2_7_4 → 2_7_5
llvm/llvm-project	patch	22.1.2 → 22.1.3
mesonbuild/meson	patch	1.10.1 → 1.10.2
pypa/build	patch	1.4.0 → 1.4.2
pypa/installer	major	0.7.0 → 1.0.0
python/cpython	patch	3.14.3 → 3.14.4

---

Release Notes

Perl/perl5 (Perl/perl5)

v5.42.2

Compare Source

mpc/mpc (https://gitlab.inria.fr/mpc/mpc.git)

v1.4.0

Compare Source

cmake/cmake (https://gitlab.kitware.com/cmake/cmake.git)

v4.3.1

Compare Source

v4.3.0

Compare Source

v4.2.4

Compare Source

libbpf/libbpf (libbpf/libbpf)

v1.7.0: libbpf v1.7.0

Compare Source

User space-side features

• bpf_map__set_exclusive_program() and bpf_map__exclusive_program() APIs for exclusive map creation;
• bpf_program__assoc_struct_ops() and bpf_prog_assoc_struct_ops() APIs to associate a non-struct_ops BPF program with a struct_ops map;
• btf__permute() API to rearrange BTF types in-place according to a provided mapping;
• BTF type lookup optimization: binary search for btf__find_by_name() and btf__find_by_name_kind();
• btf__add_btf() now accepts split BTF sources;
• fsession support (SEC("fsession+") / SEC("fsession.s+"));
• BPF_F_CPU and BPF_F_ALL_CPUS flags support for per-CPU map operations;
• arena globals are moved to the end of the arena mmap region if kernel supports it;
• support for LLVM-generated indirect jump tables (BPF ISA v4) via .jumptables ELF section and BPF_MAP_TYPE_INSN_ARRAY maps;
• avoid expensive kallsyms parsing when kprobe.session target is an exact function match;
• new dont_enable option in struct bpf_perf_event_opts to suppress perf event auto-enablement;

BPF-side features

• USDT SIB (Scale-Index-Base) addressing support;
• dynptr helper signatures (bpf_dynptr_from_mem, bpf_dynptr_read, bpf_dynptr_write, bpf_dynptr_data) widened from 32-bit to 64-bit size/offset parameters;

Bug fixes

As usual, a number of bug fixes included, see full commit log for details.

Full Changelog: libbpf/libbpf@v1.6.0...v1.7.0

libexpat/libexpat (libexpat/libexpat)

v2_7_5: 2.7.5

Compare Source

Original change log

llvm/llvm-project (llvm/llvm-project)

v22.1.3: LLVM 22.1.3

Compare Source

LLVM 22.1.3 Release

• Linux x86_64 (signature)
• Linux Arm64 (signature)

• macOS Apple Silicon (ARM64) (signature)

• Windows x64 (64-bit): installer (signature), archive (signature)

• Windows on Arm (ARM64): installer (signature), archive (signature)

Download links for common platforms will appear above once builds have completed, if they are available. Check the full list of release packages at the bottom of this release page if you do not find a link above.

If you do not find a release package for your platform, you may be able to find a community built package on the LLVM Discourse forum thread for this release. Remember that these are built by volunteers and may not always be available. If you rely on a platform or configuration that is not one of the defaults, we suggest you use the binaries that your platform provides, or build your own release packages.

Package Types

Each platform has one binary release package. The file name starts with either LLVM- or clang+llvm- and ends with the platform's name. For example, LLVM-22.1.3-Linux-ARM64.tar.xz contains LLVM binaries for Arm64 Linux.

Except for Windows. Where LLVM-*.exe is an installer intended for using LLVM as a toolchain and the archive clang+llvm- contains the contents of the installer, plus libraries and tools not normally used in a toolchain. You most likely want the LLVM- installer, unless you are developing software which itself uses LLVM, in which case choose clang+llvm-.

In addition, source archives are available:

• To get all the llvm-project source code for this release, choose llvm-project-22.1.3.src.tar.xz.
• test-suite-22.1.3.src.tar.xz is an archive of the LLVM Test Suite) for this release.

Verifying Packages

All packages come with a matching .sig and/or .jsonl file. You should use these to verify the integrity of the packages.

If it has a .sig file, it should have been signed by the release managers using GPG. Download the keys from the LLVM website, import them into your keyring and use them to verify the file:

$ gpg --import release-keys.asc
$ gpg --verify <package file name>.sig <package file name>

If it has a .jsonl file, use gh to verify the package:

$ gh attestation verify --repo llvm/llvm-project <package file name>
(if you are able to connect to GitHub)
$ gh attestation verify --repo llvm/llvm-project <package file name> --bundle <package file name>.jsonl
(using attestation file on disk)

mesonbuild/meson (mesonbuild/meson)

v1.10.2

Compare Source

pypa/build (pypa/build)

v1.4.2

Compare Source

What's Changed

• fix(uv): always pass the python to use by @​henryiii in #​996
• 🐛 fix(release): detect pre-commit environment inconsistencies by @​gaborbernat in #​1001
• 🔧 fix(towncrier): match docstrfmt RST formatting expectations by @​gaborbernat in #​1002
• Fix _has_valid_outer_pip when pip is missing by @​notatallshaw in #​1003
• fix: release changelog issue by @​henryiii in #​1006

New Contributors

• @​notatallshaw made their first contribution in #​1003

Full Changelog: pypa/build@1.4.1...1.4.2

v1.4.1

Compare Source

What's Changed

• Fix documentation grammar and typos by @​DimitriPapadopoulos in #​979
• Allow setting build constraints by @​layday in #​963
• fix: pip hack workaround by @​henryiii in #​980
• 📚 docs: reorganize using Diataxis framework by @​gaborbernat in #​988
• ✨ feat(ci): automate releases and harden workflows by @​gaborbernat in #​991
• chore: avoid template injection zizmor issue by @​henryiii in #​994
• chore: fix PR template by @​henryiii in #​995
• chore: fix fix job by @​henryiii in #​997
• 🐛 fix(ci): resolve pre-release auth failure and change detection by @​gaborbernat in #​999
• 🐛 fix(deps): add pre-commit to release dependency group by @​gaborbernat in #​1000

Full Changelog: pypa/build@1.4.0...1.4.1

pypa/installer (pypa/installer)

v1.0.0

Compare Source

v1.0.0 (Mar 28, 2025)

• Drop support for Python 3.9, 3.8, and 3.7 (#​305, #​242, #​206)
• Add support and Python 3.13 and 3.14 (#​201, #​282)
• Add --overwrite-existing CLI option (#​216)
• Add --validate-record CLI option (#​161)
• Support installing multiple wheels (#​203)
• Handle invalid hash algorithms (#​179)
• Stream-based validation instead of in-memory (#​98)
• Add validate_stream methods (#​99)
• Consolidate and refine validation APIs (#​108, #​111)
• Sort entries before writing RECORD (#​245)
• Do not install pycache from wheels (#​307)
• Fix a path traversal bug (#​317)
• Update launcher scripts and Windows behavior (#​212, #​181)
• Fix Windows relpath bug (#​286)
• Migrate to dataclasses (#​200)
• Use cached_property for memoization (#​243)
• Refactor installer.scripts (#​239)
• Decouple test modules (#​104)
• Avoid cross-module imports from .utils (#​102)
• Lazy imports for performance (#​226)
• Complete type annotations and enforce strict mypy (#​173)
• Deprecate RecordEntry.validate (#​186)
• Fix documentation typos and grammar (#​309, #​210)
• Improve docstrings and internal documentation (#​100)

python/cpython (python/cpython)

v3.14.4

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.