[rpms/trafficserver] f43: Merge branch 'rawhide' of ssh://pkgs.fedoraproject.org/rpms/trafficserver into rawhide

[rpms/trafficserver] f43: Merge branch 'rawhide' of ssh://pkgs.fedoraproject.org/rpms/trafficserver into rawhide

[Jered Floyd]

A new commit has been pushed.

Repo   : rpms/trafficserver
Branch : f43
Commit : f0c0661dc02b500a8ab0ffdf7e0781ecb7c316a8
Author : Jered Floyd <jered@redhat.com>
Date   : 2026-08-11T14:53:34+00:00
Stats  : +36/-122 in 6 file(s)
URL    : https://src.fedoraproject.org/rpms/trafficserver/c/f0c0661dc02b500a8ab0ffdf7e0781ecb7c316a8?branch=f43

Log:
Merge branch 'rawhide' of ssh://pkgs.fedoraproject.org/rpms/trafficserver into rawhide

---
diff --git a/trafficserver.spec b/trafficserver.spec
index 8f85495..4022a70 100644
--- a/trafficserver.spec
+++ b/trafficserver.spec
@@ -30,7 +30,7 @@ Patch4:         fastlz-cast.patch
 
 # Upstream does not support 32-bit architectures:
 # https://github.com/apache/trafficserver/issues/4432
-# riscv64 and s390x are also not a supported architectures and do not build
+# riscv64 and s390x are also not supported architectures and do not build
 ExcludeArch:    %{arm} %{ix86} riscv64 s390x
 
 BuildRequires:  gdb
@@ -271,6 +271,9 @@ fi
 * Tue Aug 11 2026 Jered Floyd <jered@redhat.com> - 10.2.0-1
 - Update to upstream 10.2.0
 
+* Fri Jul 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 10.1.3-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
+
 * Wed Jul 15 2026 Jered Floyd <jered@redhat.com> - 10.1.3-1
 - Update to upstream 10.1.3
 

diff --git a/convert-ip-to-bind.patch b/convert-ip-to-bind.patch
deleted file mode 100644
index 99461f7..0000000
--- a/convert-ip-to-bind.patch
+++ /dev/null
@@ -1,56 +0,0 @@
---- tests/gold_tests/records/gold/renamed_records.gold
-+++ tests/gold_tests/records/gold/renamed_records.gold
-@@ -1,5 +1,5 @@
- ```
--┌■ 8 Renamed records:
-+┌■ 11 Renamed records:
- └┬──» #1 : proxy.config.output.logfile -> proxy.config.output.logfile.name
-  ├──» #2 : proxy.config.exec_thread.autoconfig -> proxy.config.exec_thread.autoconfig.enabled
-  ├──» #3 : proxy.config.hostdb -> proxy.config.hostdb.enabled
-@@ -7,5 +7,8 @@
-  ├──» #5 : proxy.config.ssl.origin_session_cache -> proxy.config.ssl.origin_session_cache.enabled
-  ├──» #6 : proxy.config.ssl.session_cache -> proxy.config.ssl.session_cache.mode
-  ├──» #7 : proxy.config.ssl.TLSv1_3 -> proxy.config.ssl.TLSv1_3.enabled
-- └──» #8 : proxy.config.ssl.client.TLSv1_3 -> proxy.config.ssl.client.TLSv1_3.enabled
-+ ├──» #8 : proxy.config.ssl.client.TLSv1_3 -> proxy.config.ssl.client.TLSv1_3.enabled
-+ ├──» #9 : proxy.local.incoming_ip_to_bind -> proxy.config.incoming_ip_to_bind
-+ ├──» #10 : proxy.local.outgoing_ip_to_bind -> proxy.config.outgoing_ip_to_bind
-+ └──» #11 : proxy.local.http.parent_proxy.disable_connect_tunneling -> proxy.config.http.parent_proxy.disable_connect_tunneling
- ```
---- tests/gold_tests/records/gold/renamed_records.yaml
-+++ tests/gold_tests/records/gold/renamed_records.yaml
-@@ -4,6 +4,11 @@ records:
-       enabled: 1
-   hostdb:
-     enabled: 1
-+  http:
-+    parent_proxy:
-+      disable_connect_tunneling: 0
-+  incoming_ip_to_bind: 0.0.0.0
-+  outgoing_ip_to_bind: 0.0.0.0
-   output:
-     logfile:
-       name: traffic.out
---- tests/gold_tests/records/legacy_config/old_records.config
-+++ tests/gold_tests/records/legacy_config/old_records.config
-@@ -7,3 +7,6 @@ CONFIG proxy.config.ssl.origin_session_cache INT 0
- CONFIG proxy.config.ssl.session_cache INT 0
- CONFIG proxy.config.ssl.TLSv1_3 INT 0
- CONFIG proxy.config.ssl.client.TLSv1_3 INT 0
-+CONFIG proxy.local.incoming_ip_to_bind STRING 0.0.0.0
-+CONFIG proxy.local.outgoing_ip_to_bind STRING 0.0.0.0
-+CONFIG proxy.local.http.parent_proxy.disable_connect_tunneling INT 0
---- tools/records/convert2yaml.py
-+++ tools/records/convert2yaml.py
-@@ -48,7 +48,10 @@
-     'proxy.config.ssl.origin_session_cache': 'proxy.config.ssl.origin_session_cache.enabled',
-     'proxy.config.ssl.session_cache': 'proxy.config.ssl.session_cache.mode',
-     'proxy.config.ssl.TLSv1_3': 'proxy.config.ssl.TLSv1_3.enabled',
--    'proxy.config.ssl.client.TLSv1_3': 'proxy.config.ssl.client.TLSv1_3.enabled'
-+    'proxy.config.ssl.client.TLSv1_3': 'proxy.config.ssl.client.TLSv1_3.enabled',
-+    'proxy.local.incoming_ip_to_bind': 'proxy.config.incoming_ip_to_bind',
-+    'proxy.local.outgoing_ip_to_bind': 'proxy.config.outgoing_ip_to_bind',
-+    'proxy.local.http.parent_proxy.disable_connect_tunneling': 'proxy.config.http.parent_proxy.disable_connect_tunneling'
- }
- 
- ###############################################################################################

diff --git a/fastlz-cast.patch b/fastlz-cast.patch
new file mode 100644
index 0000000..afb8fc4
--- /dev/null
+++ b/fastlz-cast.patch
@@ -0,0 +1,11 @@
+--- lib/fastlz/fastlz.cc.orig	2026-08-11 13:28:37.082400955 +0000
++++ lib/fastlz/fastlz.cc	2026-08-11 13:30:18.842803728 +0000
+@@ -162,7 +162,7 @@
+ }
+ 
+ /* special case of memcpy: exactly MAX_COPY bytes */
+-static void flz_maxcopy(void* dest, const void* src) {
++static void flz_maxcopy(uint8_t* dest, const uint8_t* src) {
+ #if defined(FLZ_ARCH64)
+   const uint32_t* p = (const uint32_t*)src;
+   uint32_t* q = (uint32_t*)dest;

diff --git a/kernel-72-errno.patch b/kernel-72-errno.patch
new file mode 100644
index 0000000..dd5a833
--- /dev/null
+++ b/kernel-72-errno.patch
@@ -0,0 +1,11 @@
+--- lib/swoc/unit_tests/test_bw_format.cc	2026-08-11 13:18:40.628212580 +0000
++++ lib/swoc/unit_tests/test_bw_format.cc	2026-08-11 13:18:54.252399059 +0000
+@@ -525,7 +525,7 @@
+ 
+   w.print("{}", swoc::bwf::Errno(13));
+   REQUIRE(w.view() == "EACCES: Permission denied [13]"sv);
+-  w.clear().print("{}", swoc::bwf::Errno(134));
++  w.clear().print("{}", swoc::bwf::Errno(192));
+   REQUIRE(w.view().substr(0, 22) == "Unknown: Unknown error"sv);
+   w.clear().print("{:s}", swoc::bwf::Errno(13));
+   REQUIRE(w.view() == "EACCES: Permission denied"sv);

diff --git a/remove-openssl-engine.patch b/remove-openssl-engine.patch
deleted file mode 100644
index 0361ee5..0000000
--- a/remove-openssl-engine.patch
+++ /dev/null
@@ -1,28 +0,0 @@
---- src/iocore/net/SSLUtils.cc	2025-01-09 22:39:31.823534630 +0000
-+++ src/iocore/net/SSLUtils.cc	2025-01-09 22:40:21.834084401 +0000
-@@ -65,7 +65,6 @@
- #include <openssl/conf.h>
- #include <openssl/dh.h>
- #include <openssl/ec.h>
--#include <openssl/engine.h>
- #include <openssl/err.h>
- #include <openssl/evp.h>
- #include <openssl/pem.h>
-@@ -866,16 +865,7 @@
- SSLPostConfigInitialize()
- {
-   if (SSLConfigParams::engine_conf_file) {
--#if HAVE_ENGINE_LOAD_DYNAMIC
--    ENGINE_load_dynamic();
--#endif
--
--    OPENSSL_load_builtin_modules();
--    if (CONF_modules_load_file(SSLConfigParams::engine_conf_file, nullptr, 0) <= 0) {
--      char err_buf[256] = {0};
--      ERR_error_string_n(ERR_get_error(), err_buf, sizeof(err_buf));
--      Error("Could not load SSL engine configuration file %s: %s", SSLConfigParams::engine_conf_file, err_buf);
--    }
-+    Error("OpenSSL engines no longer supported; please remove engine_conf_file.");
-   }
- }
- 

diff --git a/remove-rpath.patch b/remove-rpath.patch
deleted file mode 100644
index ade6e28..0000000
--- a/remove-rpath.patch
+++ /dev/null
@@ -1,13 +0,0 @@
---- CMakeLists.txt	2024-11-15 23:55:31.179190618 +0000
-+++ CMakeLists.txt	2024-11-15 23:55:53.939278178 +0000
-@@ -588,10 +588,6 @@
-   set(THREADS_PREFER_PTHREAD_FLAG ON)
- endif()
- 
--# Set the rpath for installed binaries
--set(CMAKE_INSTALL_RPATH "${CMAKE_INSTALL_PREFIX}/lib;${CMAKE_INSTALL_PREFIX}/lib64")
--set(CMAKE_INSTALL_RPATH_USE_LINK_PATH TRUE)
--
- add_compile_definitions(${HOST_OS} PACKAGE_NAME="Apache Traffic Server" PACKAGE_VERSION="${TS_VERSION_STRING}")
- add_compile_options($<$<COMPILE_LANGUAGE:CXX>:-Wno-invalid-offsetof>)
- 

diff --git a/trafficserver.spec b/trafficserver.spec
index 9bb9fb2..4022a70 100644
--- a/trafficserver.spec
+++ b/trafficserver.spec
@@ -3,8 +3,8 @@
 %global selinuxtype targeted
 
 Name:           trafficserver
-Version:        10.1.3
-Release:        2%{?dist}
+Version:        10.2.0
+Release:        1%{?dist}
 Summary:        Fast, scalable and extensible HTTP/1.1 and HTTP/2 caching proxy server
 
 License:        Apache-2.0
@@ -24,13 +24,13 @@ Source10:       %{name}-10-update.service
 # Use Crypto Policies, don't set rpath as per Fedora policy
 Patch0:         trafficserver-crypto-policy.patch
 Patch1:         fix-rpath.patch
-Patch2:         remove-openssl-engine.patch
-Patch3:         config-path-fix.patch
-Patch4:         convert-ip-to-bind.patch
+Patch2:         config-path-fix.patch
+Patch3:         kernel-72-errno.patch
+Patch4:         fastlz-cast.patch
 
 # Upstream does not support 32-bit architectures:
 # https://github.com/apache/trafficserver/issues/4432
-# riscv64 and s390x are also not a supported architectures and do not build
+# riscv64 and s390x are also not supported architectures and do not build
 ExcludeArch:    %{arm} %{ix86} riscv64 s390x
 
 BuildRequires:  gdb
@@ -41,22 +41,12 @@ BuildRequires:  cmake
 BuildRequires:  libcap-devel
 BuildRequires:  systemd-rpm-macros
 BuildRequires:  openssl-devel
-# pcre is removed from RHEL 10
-%if 0%{?rhel} >= 10
-%else
-BuildRequires:  pcre-devel
-%endif
 BuildRequires:  yaml-cpp-devel
 
 Requires:       expat hwloc pcre2 xz ncurses pkgconfig
 Requires:       openssl
 Requires:       systemd
 Requires(postun): systemd
-# pcre is removed from RHEL 10
-%if 0%{?rhel} >= 10
-%else
-Requires:  pcre
-%endif
 # For convert2yaml.py
 Requires:       python3 python3-colorama python3-jsonschema python3-pyyaml
 
@@ -65,7 +55,7 @@ Requires:       (%{name}-selinux = %{version}-%{release} if selinux-policy-%{sel
 %endif
 
 # swoc is not separately packaged for Fedora -- literally nothing else uses this
-Provides:       bundled(swoc) =  1.5.12
+Provides:       bundled(swoc) =  1.5.15
 
 # Exclude our own internal libraries from requires
 %global __requires_exclude ^lib(swoc.*|ts.*)\\.so.*$
@@ -131,13 +121,6 @@ rm -r lib/yamlcpp
 
 %build
 
-# This is not working properly with cmake for an unclear reason; linking fails
-%define _lto_cflags %{nil}
-# GCC 16 is finding something maybe bad but impossible to debu
-%if 0%{?fedora} >= 44
-%define  _pkg_extra_cxxflags -Wno-error=maybe-uninitialized
-%endif
-
 %cmake \
     -DCMAKE_BUILD_TYPE=Release \
     -DCMAKE_INSTALL_PREFIX=/usr \
@@ -285,6 +268,9 @@ fi
 
 
 %changelog
+* Tue Aug 11 2026 Jered Floyd <jered@redhat.com> - 10.2.0-1
+- Update to upstream 10.2.0
+
 * Fri Jul 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 10.1.3-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild