Fix crew upgrade, llvm => 18.1.3, upx => 4.2.3, update ca-certificates (#9641)

* llvm => 18.1.3, upx => 4.2.3 Signed-off-by: Satadru Pramanik <satadru@gmail.com> * update ca_certificates Signed-off-by: Satadru Pramanik <satadru@gmail.com> * Fix verbose crew remove Signed-off-by: Satadru Pramanik <satadru@gmail.com> * bump crew version Signed-off-by: Satadru Pramanik <satadru@gmail.com> * Update ca_certificates postinstall Signed-off-by: Satadru Pramanik <satadru@gmail.com> * Add verbose pkg is fake check to crew Signed-off-by: Satadru Pramanik <satadru@gmail.com> * add color Signed-off-by: Satadru Pramanik <satadru@gmail.com> * add more verbosity to crew is_fake report Signed-off-by: Satadru Pramanik <satadru@gmail.com> * better is_fake debug reporting Signed-off-by: Satadru Pramanik <satadru@gmail.com> * more debug verbosity Signed-off-by: Satadru Pramanik <satadru@gmail.com> * Adding attr_accessor to all boolean_property entries appears to fix #9642 Signed-off-by: Satadru Pramanik <satadru@gmail.com> * debug cleanup Signed-off-by: Satadru Pramanik <satadru@gmail.com> * fix ca_certificates date Signed-off-by: Satadru Pramanik <satadru@gmail.com> * add more is_fake debug code Signed-off-by: Satadru Pramanik <satadru@gmail.com> * Update debug code, add suggested changes Signed-off-by: Satadru Pramanik <satadru@gmail.com> * fixup Signed-off-by: Satadru Pramanik <satadru@gmail.com> * fixup Signed-off-by: Satadru Pramanik <satadru@gmail.com> * further debugging code added Signed-off-by: Satadru Pramanik <satadru@gmail.com> * further debugging code added Signed-off-by: Satadru Pramanik <satadru@gmail.com> * Adjust is_fake to is_fake? Signed-off-by: Satadru Pramanik <satadru@gmail.com> * revert package.rb changes Signed-off-by: Satadru Pramanik <satadru@gmail.com> * add binaries properly for llvm18 Signed-off-by: Satadru Pramanik <satadru@gmail.com> * cleanup debug code Signed-off-by: Satadru Pramanik <satadru@gmail.com> * readd space Signed-off-by: Satadru Pramanik <satadru@gmail.com> --------- Signed-off-by: Satadru Pramanik <satadru@gmail.com>
2026-01-08 23:18:10 -05:00 · 2024-04-12 15:31:34 -04:00
parent 2cad31ec17
commit e89be60b8a
18 changed files with 142 additions and 110 deletions
--- a/bin/crew
+++ b/bin/crew
@@ -358,7 +358,7 @@ def upgrade(*pkgs, build_from_source: false)
    pkg_hash_latest    = PackageUtils.get_sha256(Package.load_package(pkg_file, pkg_name))
    pkg_hash_installed = @device[:installed_packages].select { |pkg| pkg[:name] == pkg_name } [0][:sha256]

-    return pkg_hash_latest != pkg_hash_installed unless !pkg_hash_installed || pkg_hash_latest.to_s.empty? || Package.load_package(pkg_file, pkg_name).is_fake
+    return pkg_hash_latest != pkg_hash_installed unless !pkg_hash_installed || pkg_hash_latest.to_s.empty? || Package.load_package(pkg_file, pkg_name).is_fake?
    return pkg_ver_latest != pkg_ver_installed
  end

@@ -1258,7 +1258,9 @@ def install
    Command.remove(@pkg, @opt_verbose)
  end

-  unless @pkg.is_fake?
+  if @pkg.is_fake?
+    puts "Install will be skipped since #{@pkg.name} is a fake package.".orange if @opt_verbose
+  else
    # perform pre-install process
    pre_install dest_dir

--- a/commands/remove.rb
+++ b/commands/remove.rb
@@ -54,7 +54,7 @@ class Command
    end

    # Remove the package from the list of installed packages in device.json.
-    puts "Removing package #{pkg_name} from device.json".yellow if verbose
+    puts "Removing package #{pkg.name} from device.json".yellow if verbose
    device_json['installed_packages'].delete_if { |entry| entry['name'] == pkg.name }

    # Update device.json with our changes.
--- a/lib/const.rb
+++ b/lib/const.rb
@@ -1,7 +1,7 @@
 # lib/const.rb
 # Defines common constants used in different parts of crew

-CREW_VERSION = '1.46.7'
+CREW_VERSION = '1.46.8'

 # kernel architecture
 KERN_ARCH = `uname -m`.chomp
--- a/manifest/armv7l/c/ca_certificates.filelist
+++ b/manifest/armv7l/c/ca_certificates.filelist
@@ -14,8 +14,11 @@
 /usr/local/etc/ssl/certs/Amazon_Root_CA_3.pem
 /usr/local/etc/ssl/certs/Amazon_Root_CA_4.pem
 /usr/local/etc/ssl/certs/Atos_TrustedRoot_2011.pem
+/usr/local/etc/ssl/certs/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem
+/usr/local/etc/ssl/certs/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem
 /usr/local/etc/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
-/usr/local/etc/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.pem
+/usr/local/etc/ssl/certs/BJCA_Global_Root_CA1.pem
+/usr/local/etc/ssl/certs/BJCA_Global_Root_CA2.pem
 /usr/local/etc/ssl/certs/Baltimore_CyberTrust_Root.pem
 /usr/local/etc/ssl/certs/Buypass_Class_2_Root_CA.pem
 /usr/local/etc/ssl/certs/Buypass_Class_3_Root_CA.pem
@@ -32,6 +35,10 @@
 /usr/local/etc/ssl/certs/Certum_Trusted_Network_CA.pem
 /usr/local/etc/ssl/certs/Certum_Trusted_Network_CA_2.pem
 /usr/local/etc/ssl/certs/Certum_Trusted_Root_CA.pem
+/usr/local/etc/ssl/certs/CommScope_Public_Trust_ECC_Root-01.pem
+/usr/local/etc/ssl/certs/CommScope_Public_Trust_ECC_Root-02.pem
+/usr/local/etc/ssl/certs/CommScope_Public_Trust_RSA_Root-01.pem
+/usr/local/etc/ssl/certs/CommScope_Public_Trust_RSA_Root-02.pem
 /usr/local/etc/ssl/certs/Comodo_AAA_Services_root.pem
 /usr/local/etc/ssl/certs/D-TRUST_BR_Root_CA_1_2020.pem
 /usr/local/etc/ssl/certs/D-TRUST_EV_Root_CA_1_2020.pem
@@ -47,9 +54,6 @@
 /usr/local/etc/ssl/certs/DigiCert_TLS_ECC_P384_Root_G5.pem
 /usr/local/etc/ssl/certs/DigiCert_TLS_RSA4096_Root_G5.pem
 /usr/local/etc/ssl/certs/DigiCert_Trusted_Root_G4.pem
-/usr/local/etc/ssl/certs/E-Tugra_Certification_Authority.pem
-/usr/local/etc/ssl/certs/E-Tugra_Global_Root_CA_ECC_v3.pem
-/usr/local/etc/ssl/certs/E-Tugra_Global_Root_CA_RSA_v3.pem
 /usr/local/etc/ssl/certs/Entrust.net_Premium_2048_Secure_Server_CA.pem
 /usr/local/etc/ssl/certs/Entrust_Root_Certification_Authority.pem
 /usr/local/etc/ssl/certs/Entrust_Root_Certification_Authority_-_EC1.pem
@@ -75,7 +79,6 @@
 /usr/local/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem
 /usr/local/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem
 /usr/local/etc/ssl/certs/HiPKI_Root_CA_-_G1.pem
-/usr/local/etc/ssl/certs/Hongkong_Post_Root_CA_1.pem
 /usr/local/etc/ssl/certs/Hongkong_Post_Root_CA_3.pem
 /usr/local/etc/ssl/certs/ISRG_Root_X1.pem
 /usr/local/etc/ssl/certs/ISRG_Root_X2.pem
@@ -98,7 +101,11 @@
 /usr/local/etc/ssl/certs/SSL.com_EV_Root_Certification_Authority_RSA_R2.pem
 /usr/local/etc/ssl/certs/SSL.com_Root_Certification_Authority_ECC.pem
 /usr/local/etc/ssl/certs/SSL.com_Root_Certification_Authority_RSA.pem
+/usr/local/etc/ssl/certs/SSL.com_TLS_ECC_Root_CA_2022.pem
+/usr/local/etc/ssl/certs/SSL.com_TLS_RSA_Root_CA_2022.pem
 /usr/local/etc/ssl/certs/SZAFIR_ROOT_CA2.pem
+/usr/local/etc/ssl/certs/Sectigo_Public_Server_Authentication_Root_E46.pem
+/usr/local/etc/ssl/certs/Sectigo_Public_Server_Authentication_Root_R46.pem
 /usr/local/etc/ssl/certs/SecureSign_RootCA11.pem
 /usr/local/etc/ssl/certs/SecureTrust_CA.pem
 /usr/local/etc/ssl/certs/Secure_Global_CA.pem
@@ -118,9 +125,8 @@
 /usr/local/etc/ssl/certs/TWCA_Root_Certification_Authority.pem
 /usr/local/etc/ssl/certs/TeliaSonera_Root_CA_v1.pem
 /usr/local/etc/ssl/certs/Telia_Root_CA_v2.pem
-/usr/local/etc/ssl/certs/TrustCor_ECA-1.pem
-/usr/local/etc/ssl/certs/TrustCor_RootCert_CA-1.pem
-/usr/local/etc/ssl/certs/TrustCor_RootCert_CA-2.pem
+/usr/local/etc/ssl/certs/TrustAsia_Global_Root_CA_G3.pem
+/usr/local/etc/ssl/certs/TrustAsia_Global_Root_CA_G4.pem
 /usr/local/etc/ssl/certs/Trustwave_Global_Certification_Authority.pem
 /usr/local/etc/ssl/certs/Trustwave_Global_ECC_P256_Certification_Authority.pem
 /usr/local/etc/ssl/certs/Trustwave_Global_ECC_P384_Certification_Authority.pem
@@ -155,8 +161,11 @@
 /usr/local/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt
 /usr/local/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt
 /usr/local/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt
+/usr/local/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.crt
+/usr/local/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.crt
 /usr/local/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
-/usr/local/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.crt
+/usr/local/share/ca-certificates/mozilla/BJCA_Global_Root_CA1.crt
+/usr/local/share/ca-certificates/mozilla/BJCA_Global_Root_CA2.crt
 /usr/local/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt
 /usr/local/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt
 /usr/local/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt
@@ -173,6 +182,10 @@
 /usr/local/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt
 /usr/local/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt
 /usr/local/share/ca-certificates/mozilla/Certum_Trusted_Root_CA.crt
+/usr/local/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-01.crt
+/usr/local/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-02.crt
+/usr/local/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-01.crt
+/usr/local/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-02.crt
 /usr/local/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt
 /usr/local/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_1_2020.crt
 /usr/local/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_1_2020.crt
@@ -188,9 +201,6 @@
 /usr/local/share/ca-certificates/mozilla/DigiCert_TLS_ECC_P384_Root_G5.crt
 /usr/local/share/ca-certificates/mozilla/DigiCert_TLS_RSA4096_Root_G5.crt
 /usr/local/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt
-/usr/local/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt
-/usr/local/share/ca-certificates/mozilla/E-Tugra_Global_Root_CA_ECC_v3.crt
-/usr/local/share/ca-certificates/mozilla/E-Tugra_Global_Root_CA_RSA_v3.crt
 /usr/local/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt
 /usr/local/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt
 /usr/local/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt
@@ -216,7 +226,6 @@
 /usr/local/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt
 /usr/local/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt
 /usr/local/share/ca-certificates/mozilla/HiPKI_Root_CA_-_G1.crt
-/usr/local/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt
 /usr/local/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt
 /usr/local/share/ca-certificates/mozilla/ISRG_Root_X1.crt
 /usr/local/share/ca-certificates/mozilla/ISRG_Root_X2.crt
@@ -239,7 +248,11 @@
 /usr/local/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt
 /usr/local/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt
 /usr/local/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt
+/usr/local/share/ca-certificates/mozilla/SSL.com_TLS_ECC_Root_CA_2022.crt
+/usr/local/share/ca-certificates/mozilla/SSL.com_TLS_RSA_Root_CA_2022.crt
 /usr/local/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt
+/usr/local/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_E46.crt
+/usr/local/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_R46.crt
 /usr/local/share/ca-certificates/mozilla/SecureSign_RootCA11.crt
 /usr/local/share/ca-certificates/mozilla/SecureTrust_CA.crt
 /usr/local/share/ca-certificates/mozilla/Secure_Global_CA.crt
@@ -259,9 +272,8 @@
 /usr/local/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt
 /usr/local/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt
 /usr/local/share/ca-certificates/mozilla/Telia_Root_CA_v2.crt
-/usr/local/share/ca-certificates/mozilla/TrustCor_ECA-1.crt
-/usr/local/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt
-/usr/local/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt
+/usr/local/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G3.crt
+/usr/local/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G4.crt
 /usr/local/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt
 /usr/local/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt
 /usr/local/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt
--- a/manifest/armv7l/l/llvm18_build.filelist
+++ b/manifest/armv7l/l/llvm18_build.filelist
@@ -4434,7 +4434,7 @@
 /usr/local/lib/libclang-cpp.so.18.1
 /usr/local/lib/libclang.so
 /usr/local/lib/libclang.so.18.1
-/usr/local/lib/libclang.so.18.1.2
+/usr/local/lib/libclang.so.18.1.3
 /usr/local/lib/libclangAPINotes.a
 /usr/local/lib/libclangARCMigrate.a
 /usr/local/lib/libclangAST.a
@@ -4535,7 +4535,7 @@
 /usr/local/lib/liblldWasm.a
 /usr/local/lib/liblldb.so
 /usr/local/lib/liblldb.so.18.1
-/usr/local/lib/liblldb.so.18.1.2
+/usr/local/lib/liblldb.so.18.1.3
 /usr/local/lib/liblldbIntelFeatures.so
 /usr/local/lib/liblldbIntelFeatures.so.18.1
 /usr/local/lib/libscanbuild/__init__.py
--- a/manifest/armv7l/l/llvm18_dev.filelist
+++ b/manifest/armv7l/l/llvm18_dev.filelist
@@ -4430,7 +4430,7 @@
 /usr/local/lib/libclang-cpp.so.18.1
 /usr/local/lib/libclang.so
 /usr/local/lib/libclang.so.18.1
-/usr/local/lib/libclang.so.18.1.2
+/usr/local/lib/libclang.so.18.1.3
 /usr/local/lib/libclangAPINotes.a
 /usr/local/lib/libclangARCMigrate.a
 /usr/local/lib/libclangAST.a
@@ -4531,7 +4531,7 @@
 /usr/local/lib/liblldWasm.a
 /usr/local/lib/liblldb.so
 /usr/local/lib/liblldb.so.18.1
-/usr/local/lib/liblldb.so.18.1.2
+/usr/local/lib/liblldb.so.18.1.3
 /usr/local/lib/liblldbIntelFeatures.so
 /usr/local/lib/liblldbIntelFeatures.so.18.1
 /usr/local/lib/libscanbuild/__init__.py
--- a/manifest/i686/c/ca_certificates.filelist
+++ b/manifest/i686/c/ca_certificates.filelist
@@ -14,8 +14,11 @@
 /usr/local/etc/ssl/certs/Amazon_Root_CA_3.pem
 /usr/local/etc/ssl/certs/Amazon_Root_CA_4.pem
 /usr/local/etc/ssl/certs/Atos_TrustedRoot_2011.pem
+/usr/local/etc/ssl/certs/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem
+/usr/local/etc/ssl/certs/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem
 /usr/local/etc/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
-/usr/local/etc/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.pem
+/usr/local/etc/ssl/certs/BJCA_Global_Root_CA1.pem
+/usr/local/etc/ssl/certs/BJCA_Global_Root_CA2.pem
 /usr/local/etc/ssl/certs/Baltimore_CyberTrust_Root.pem
 /usr/local/etc/ssl/certs/Buypass_Class_2_Root_CA.pem
 /usr/local/etc/ssl/certs/Buypass_Class_3_Root_CA.pem
@@ -32,6 +35,10 @@
 /usr/local/etc/ssl/certs/Certum_Trusted_Network_CA.pem
 /usr/local/etc/ssl/certs/Certum_Trusted_Network_CA_2.pem
 /usr/local/etc/ssl/certs/Certum_Trusted_Root_CA.pem
+/usr/local/etc/ssl/certs/CommScope_Public_Trust_ECC_Root-01.pem
+/usr/local/etc/ssl/certs/CommScope_Public_Trust_ECC_Root-02.pem
+/usr/local/etc/ssl/certs/CommScope_Public_Trust_RSA_Root-01.pem
+/usr/local/etc/ssl/certs/CommScope_Public_Trust_RSA_Root-02.pem
 /usr/local/etc/ssl/certs/Comodo_AAA_Services_root.pem
 /usr/local/etc/ssl/certs/D-TRUST_BR_Root_CA_1_2020.pem
 /usr/local/etc/ssl/certs/D-TRUST_EV_Root_CA_1_2020.pem
@@ -47,9 +54,6 @@
 /usr/local/etc/ssl/certs/DigiCert_TLS_ECC_P384_Root_G5.pem
 /usr/local/etc/ssl/certs/DigiCert_TLS_RSA4096_Root_G5.pem
 /usr/local/etc/ssl/certs/DigiCert_Trusted_Root_G4.pem
-/usr/local/etc/ssl/certs/E-Tugra_Certification_Authority.pem
-/usr/local/etc/ssl/certs/E-Tugra_Global_Root_CA_ECC_v3.pem
-/usr/local/etc/ssl/certs/E-Tugra_Global_Root_CA_RSA_v3.pem
 /usr/local/etc/ssl/certs/Entrust.net_Premium_2048_Secure_Server_CA.pem
 /usr/local/etc/ssl/certs/Entrust_Root_Certification_Authority.pem
 /usr/local/etc/ssl/certs/Entrust_Root_Certification_Authority_-_EC1.pem
@@ -75,7 +79,6 @@
 /usr/local/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem
 /usr/local/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem
 /usr/local/etc/ssl/certs/HiPKI_Root_CA_-_G1.pem
-/usr/local/etc/ssl/certs/Hongkong_Post_Root_CA_1.pem
 /usr/local/etc/ssl/certs/Hongkong_Post_Root_CA_3.pem
 /usr/local/etc/ssl/certs/ISRG_Root_X1.pem
 /usr/local/etc/ssl/certs/ISRG_Root_X2.pem
@@ -98,7 +101,11 @@
 /usr/local/etc/ssl/certs/SSL.com_EV_Root_Certification_Authority_RSA_R2.pem
 /usr/local/etc/ssl/certs/SSL.com_Root_Certification_Authority_ECC.pem
 /usr/local/etc/ssl/certs/SSL.com_Root_Certification_Authority_RSA.pem
+/usr/local/etc/ssl/certs/SSL.com_TLS_ECC_Root_CA_2022.pem
+/usr/local/etc/ssl/certs/SSL.com_TLS_RSA_Root_CA_2022.pem
 /usr/local/etc/ssl/certs/SZAFIR_ROOT_CA2.pem
+/usr/local/etc/ssl/certs/Sectigo_Public_Server_Authentication_Root_E46.pem
+/usr/local/etc/ssl/certs/Sectigo_Public_Server_Authentication_Root_R46.pem
 /usr/local/etc/ssl/certs/SecureSign_RootCA11.pem
 /usr/local/etc/ssl/certs/SecureTrust_CA.pem
 /usr/local/etc/ssl/certs/Secure_Global_CA.pem
@@ -118,9 +125,8 @@
 /usr/local/etc/ssl/certs/TWCA_Root_Certification_Authority.pem
 /usr/local/etc/ssl/certs/TeliaSonera_Root_CA_v1.pem
 /usr/local/etc/ssl/certs/Telia_Root_CA_v2.pem
-/usr/local/etc/ssl/certs/TrustCor_ECA-1.pem
-/usr/local/etc/ssl/certs/TrustCor_RootCert_CA-1.pem
-/usr/local/etc/ssl/certs/TrustCor_RootCert_CA-2.pem
+/usr/local/etc/ssl/certs/TrustAsia_Global_Root_CA_G3.pem
+/usr/local/etc/ssl/certs/TrustAsia_Global_Root_CA_G4.pem
 /usr/local/etc/ssl/certs/Trustwave_Global_Certification_Authority.pem
 /usr/local/etc/ssl/certs/Trustwave_Global_ECC_P256_Certification_Authority.pem
 /usr/local/etc/ssl/certs/Trustwave_Global_ECC_P384_Certification_Authority.pem
@@ -155,8 +161,11 @@
 /usr/local/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt
 /usr/local/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt
 /usr/local/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt
+/usr/local/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.crt
+/usr/local/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.crt
 /usr/local/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
-/usr/local/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.crt
+/usr/local/share/ca-certificates/mozilla/BJCA_Global_Root_CA1.crt
+/usr/local/share/ca-certificates/mozilla/BJCA_Global_Root_CA2.crt
 /usr/local/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt
 /usr/local/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt
 /usr/local/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt
@@ -173,6 +182,10 @@
 /usr/local/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt
 /usr/local/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt
 /usr/local/share/ca-certificates/mozilla/Certum_Trusted_Root_CA.crt
+/usr/local/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-01.crt
+/usr/local/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-02.crt
+/usr/local/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-01.crt
+/usr/local/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-02.crt
 /usr/local/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt
 /usr/local/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_1_2020.crt
 /usr/local/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_1_2020.crt
@@ -188,9 +201,6 @@
 /usr/local/share/ca-certificates/mozilla/DigiCert_TLS_ECC_P384_Root_G5.crt
 /usr/local/share/ca-certificates/mozilla/DigiCert_TLS_RSA4096_Root_G5.crt
 /usr/local/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt
-/usr/local/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt
-/usr/local/share/ca-certificates/mozilla/E-Tugra_Global_Root_CA_ECC_v3.crt
-/usr/local/share/ca-certificates/mozilla/E-Tugra_Global_Root_CA_RSA_v3.crt
 /usr/local/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt
 /usr/local/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt
 /usr/local/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt
@@ -216,7 +226,6 @@
 /usr/local/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt
 /usr/local/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt
 /usr/local/share/ca-certificates/mozilla/HiPKI_Root_CA_-_G1.crt
-/usr/local/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt
 /usr/local/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt
 /usr/local/share/ca-certificates/mozilla/ISRG_Root_X1.crt
 /usr/local/share/ca-certificates/mozilla/ISRG_Root_X2.crt
@@ -239,7 +248,11 @@
 /usr/local/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt
 /usr/local/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt
 /usr/local/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt
+/usr/local/share/ca-certificates/mozilla/SSL.com_TLS_ECC_Root_CA_2022.crt
+/usr/local/share/ca-certificates/mozilla/SSL.com_TLS_RSA_Root_CA_2022.crt
 /usr/local/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt
+/usr/local/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_E46.crt
+/usr/local/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_R46.crt
 /usr/local/share/ca-certificates/mozilla/SecureSign_RootCA11.crt
 /usr/local/share/ca-certificates/mozilla/SecureTrust_CA.crt
 /usr/local/share/ca-certificates/mozilla/Secure_Global_CA.crt
@@ -259,9 +272,8 @@
 /usr/local/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt
 /usr/local/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt
 /usr/local/share/ca-certificates/mozilla/Telia_Root_CA_v2.crt
-/usr/local/share/ca-certificates/mozilla/TrustCor_ECA-1.crt
-/usr/local/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt
-/usr/local/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt
+/usr/local/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G3.crt
+/usr/local/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G4.crt
 /usr/local/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt
 /usr/local/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt
 /usr/local/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt
--- a/manifest/i686/l/llvm18_build.filelist
+++ b/manifest/i686/l/llvm18_build.filelist
@@ -4429,7 +4429,7 @@
 /usr/local/lib/libclang-cpp.so.18.1
 /usr/local/lib/libclang.so
 /usr/local/lib/libclang.so.18.1
-/usr/local/lib/libclang.so.18.1.2
+/usr/local/lib/libclang.so.18.1.3
 /usr/local/lib/libclangAPINotes.a
 /usr/local/lib/libclangARCMigrate.a
 /usr/local/lib/libclangAST.a
@@ -4530,7 +4530,7 @@
 /usr/local/lib/liblldWasm.a
 /usr/local/lib/liblldb.so
 /usr/local/lib/liblldb.so.18.1
-/usr/local/lib/liblldb.so.18.1.2
+/usr/local/lib/liblldb.so.18.1.3
 /usr/local/lib/liblldbIntelFeatures.so
 /usr/local/lib/liblldbIntelFeatures.so.18.1
 /usr/local/lib/libscanbuild/__init__.py
--- a/manifest/i686/l/llvm18_dev.filelist
+++ b/manifest/i686/l/llvm18_dev.filelist
@@ -4425,7 +4425,7 @@
 /usr/local/lib/libclang-cpp.so.18.1
 /usr/local/lib/libclang.so
 /usr/local/lib/libclang.so.18.1
-/usr/local/lib/libclang.so.18.1.2
+/usr/local/lib/libclang.so.18.1.3
 /usr/local/lib/libclangAPINotes.a
 /usr/local/lib/libclangARCMigrate.a
 /usr/local/lib/libclangAST.a
@@ -4526,7 +4526,7 @@
 /usr/local/lib/liblldWasm.a
 /usr/local/lib/liblldb.so
 /usr/local/lib/liblldb.so.18.1
-/usr/local/lib/liblldb.so.18.1.2
+/usr/local/lib/liblldb.so.18.1.3
 /usr/local/lib/liblldbIntelFeatures.so
 /usr/local/lib/liblldbIntelFeatures.so.18.1
 /usr/local/lib/libscanbuild/__init__.py
--- a/manifest/x86_64/c/ca_certificates.filelist
+++ b/manifest/x86_64/c/ca_certificates.filelist
@@ -14,8 +14,11 @@
 /usr/local/etc/ssl/certs/Amazon_Root_CA_3.pem
 /usr/local/etc/ssl/certs/Amazon_Root_CA_4.pem
 /usr/local/etc/ssl/certs/Atos_TrustedRoot_2011.pem
+/usr/local/etc/ssl/certs/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem
+/usr/local/etc/ssl/certs/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem
 /usr/local/etc/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
-/usr/local/etc/ssl/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.pem
+/usr/local/etc/ssl/certs/BJCA_Global_Root_CA1.pem
+/usr/local/etc/ssl/certs/BJCA_Global_Root_CA2.pem
 /usr/local/etc/ssl/certs/Baltimore_CyberTrust_Root.pem
 /usr/local/etc/ssl/certs/Buypass_Class_2_Root_CA.pem
 /usr/local/etc/ssl/certs/Buypass_Class_3_Root_CA.pem
@@ -32,6 +35,10 @@
 /usr/local/etc/ssl/certs/Certum_Trusted_Network_CA.pem
 /usr/local/etc/ssl/certs/Certum_Trusted_Network_CA_2.pem
 /usr/local/etc/ssl/certs/Certum_Trusted_Root_CA.pem
+/usr/local/etc/ssl/certs/CommScope_Public_Trust_ECC_Root-01.pem
+/usr/local/etc/ssl/certs/CommScope_Public_Trust_ECC_Root-02.pem
+/usr/local/etc/ssl/certs/CommScope_Public_Trust_RSA_Root-01.pem
+/usr/local/etc/ssl/certs/CommScope_Public_Trust_RSA_Root-02.pem
 /usr/local/etc/ssl/certs/Comodo_AAA_Services_root.pem
 /usr/local/etc/ssl/certs/D-TRUST_BR_Root_CA_1_2020.pem
 /usr/local/etc/ssl/certs/D-TRUST_EV_Root_CA_1_2020.pem
@@ -47,9 +54,6 @@
 /usr/local/etc/ssl/certs/DigiCert_TLS_ECC_P384_Root_G5.pem
 /usr/local/etc/ssl/certs/DigiCert_TLS_RSA4096_Root_G5.pem
 /usr/local/etc/ssl/certs/DigiCert_Trusted_Root_G4.pem
-/usr/local/etc/ssl/certs/E-Tugra_Certification_Authority.pem
-/usr/local/etc/ssl/certs/E-Tugra_Global_Root_CA_ECC_v3.pem
-/usr/local/etc/ssl/certs/E-Tugra_Global_Root_CA_RSA_v3.pem
 /usr/local/etc/ssl/certs/Entrust.net_Premium_2048_Secure_Server_CA.pem
 /usr/local/etc/ssl/certs/Entrust_Root_Certification_Authority.pem
 /usr/local/etc/ssl/certs/Entrust_Root_Certification_Authority_-_EC1.pem
@@ -75,7 +79,6 @@
 /usr/local/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem
 /usr/local/etc/ssl/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem
 /usr/local/etc/ssl/certs/HiPKI_Root_CA_-_G1.pem
-/usr/local/etc/ssl/certs/Hongkong_Post_Root_CA_1.pem
 /usr/local/etc/ssl/certs/Hongkong_Post_Root_CA_3.pem
 /usr/local/etc/ssl/certs/ISRG_Root_X1.pem
 /usr/local/etc/ssl/certs/ISRG_Root_X2.pem
@@ -98,7 +101,11 @@
 /usr/local/etc/ssl/certs/SSL.com_EV_Root_Certification_Authority_RSA_R2.pem
 /usr/local/etc/ssl/certs/SSL.com_Root_Certification_Authority_ECC.pem
 /usr/local/etc/ssl/certs/SSL.com_Root_Certification_Authority_RSA.pem
+/usr/local/etc/ssl/certs/SSL.com_TLS_ECC_Root_CA_2022.pem
+/usr/local/etc/ssl/certs/SSL.com_TLS_RSA_Root_CA_2022.pem
 /usr/local/etc/ssl/certs/SZAFIR_ROOT_CA2.pem
+/usr/local/etc/ssl/certs/Sectigo_Public_Server_Authentication_Root_E46.pem
+/usr/local/etc/ssl/certs/Sectigo_Public_Server_Authentication_Root_R46.pem
 /usr/local/etc/ssl/certs/SecureSign_RootCA11.pem
 /usr/local/etc/ssl/certs/SecureTrust_CA.pem
 /usr/local/etc/ssl/certs/Secure_Global_CA.pem
@@ -118,9 +125,8 @@
 /usr/local/etc/ssl/certs/TWCA_Root_Certification_Authority.pem
 /usr/local/etc/ssl/certs/TeliaSonera_Root_CA_v1.pem
 /usr/local/etc/ssl/certs/Telia_Root_CA_v2.pem
-/usr/local/etc/ssl/certs/TrustCor_ECA-1.pem
-/usr/local/etc/ssl/certs/TrustCor_RootCert_CA-1.pem
-/usr/local/etc/ssl/certs/TrustCor_RootCert_CA-2.pem
+/usr/local/etc/ssl/certs/TrustAsia_Global_Root_CA_G3.pem
+/usr/local/etc/ssl/certs/TrustAsia_Global_Root_CA_G4.pem
 /usr/local/etc/ssl/certs/Trustwave_Global_Certification_Authority.pem
 /usr/local/etc/ssl/certs/Trustwave_Global_ECC_P256_Certification_Authority.pem
 /usr/local/etc/ssl/certs/Trustwave_Global_ECC_P384_Certification_Authority.pem
@@ -155,8 +161,11 @@
 /usr/local/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt
 /usr/local/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt
 /usr/local/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt
+/usr/local/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.crt
+/usr/local/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.crt
 /usr/local/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt
-/usr/local/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068_2.crt
+/usr/local/share/ca-certificates/mozilla/BJCA_Global_Root_CA1.crt
+/usr/local/share/ca-certificates/mozilla/BJCA_Global_Root_CA2.crt
 /usr/local/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt
 /usr/local/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt
 /usr/local/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt
@@ -173,6 +182,10 @@
 /usr/local/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt
 /usr/local/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt
 /usr/local/share/ca-certificates/mozilla/Certum_Trusted_Root_CA.crt
+/usr/local/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-01.crt
+/usr/local/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-02.crt
+/usr/local/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-01.crt
+/usr/local/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-02.crt
 /usr/local/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt
 /usr/local/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_1_2020.crt
 /usr/local/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_1_2020.crt
@@ -188,9 +201,6 @@
 /usr/local/share/ca-certificates/mozilla/DigiCert_TLS_ECC_P384_Root_G5.crt
 /usr/local/share/ca-certificates/mozilla/DigiCert_TLS_RSA4096_Root_G5.crt
 /usr/local/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt
-/usr/local/share/ca-certificates/mozilla/E-Tugra_Certification_Authority.crt
-/usr/local/share/ca-certificates/mozilla/E-Tugra_Global_Root_CA_ECC_v3.crt
-/usr/local/share/ca-certificates/mozilla/E-Tugra_Global_Root_CA_RSA_v3.crt
 /usr/local/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt
 /usr/local/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt
 /usr/local/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt
@@ -216,7 +226,6 @@
 /usr/local/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt
 /usr/local/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt
 /usr/local/share/ca-certificates/mozilla/HiPKI_Root_CA_-_G1.crt
-/usr/local/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_1.crt
 /usr/local/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt
 /usr/local/share/ca-certificates/mozilla/ISRG_Root_X1.crt
 /usr/local/share/ca-certificates/mozilla/ISRG_Root_X2.crt
@@ -239,7 +248,11 @@
 /usr/local/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt
 /usr/local/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt
 /usr/local/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt
+/usr/local/share/ca-certificates/mozilla/SSL.com_TLS_ECC_Root_CA_2022.crt
+/usr/local/share/ca-certificates/mozilla/SSL.com_TLS_RSA_Root_CA_2022.crt
 /usr/local/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt
+/usr/local/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_E46.crt
+/usr/local/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_R46.crt
 /usr/local/share/ca-certificates/mozilla/SecureSign_RootCA11.crt
 /usr/local/share/ca-certificates/mozilla/SecureTrust_CA.crt
 /usr/local/share/ca-certificates/mozilla/Secure_Global_CA.crt
@@ -259,9 +272,8 @@
 /usr/local/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt
 /usr/local/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt
 /usr/local/share/ca-certificates/mozilla/Telia_Root_CA_v2.crt
-/usr/local/share/ca-certificates/mozilla/TrustCor_ECA-1.crt
-/usr/local/share/ca-certificates/mozilla/TrustCor_RootCert_CA-1.crt
-/usr/local/share/ca-certificates/mozilla/TrustCor_RootCert_CA-2.crt
+/usr/local/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G3.crt
+/usr/local/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G4.crt
 /usr/local/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt
 /usr/local/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt
 /usr/local/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt
--- a/manifest/x86_64/l/llvm18_build.filelist
+++ b/manifest/x86_64/l/llvm18_build.filelist
@@ -4456,7 +4456,7 @@
 /usr/local/lib64/libclang-cpp.so.18.1
 /usr/local/lib64/libclang.so
 /usr/local/lib64/libclang.so.18.1
-/usr/local/lib64/libclang.so.18.1.2
+/usr/local/lib64/libclang.so.18.1.3
 /usr/local/lib64/libclangAPINotes.a
 /usr/local/lib64/libclangARCMigrate.a
 /usr/local/lib64/libclangAST.a
@@ -4557,7 +4557,7 @@
 /usr/local/lib64/liblldWasm.a
 /usr/local/lib64/liblldb.so
 /usr/local/lib64/liblldb.so.18.1
-/usr/local/lib64/liblldb.so.18.1.2
+/usr/local/lib64/liblldb.so.18.1.3
 /usr/local/lib64/liblldbIntelFeatures.so
 /usr/local/lib64/liblldbIntelFeatures.so.18.1
 /usr/local/lib64/libscanbuild/__init__.py
--- a/manifest/x86_64/l/llvm18_dev.filelist
+++ b/manifest/x86_64/l/llvm18_dev.filelist
@@ -4452,7 +4452,7 @@
 /usr/local/lib64/libclang-cpp.so.18.1
 /usr/local/lib64/libclang.so
 /usr/local/lib64/libclang.so.18.1
-/usr/local/lib64/libclang.so.18.1.2
+/usr/local/lib64/libclang.so.18.1.3
 /usr/local/lib64/libclangAPINotes.a
 /usr/local/lib64/libclangARCMigrate.a
 /usr/local/lib64/libclangAST.a
@@ -4553,7 +4553,7 @@
 /usr/local/lib64/liblldWasm.a
 /usr/local/lib64/liblldb.so
 /usr/local/lib64/liblldb.so.18.1
-/usr/local/lib64/liblldb.so.18.1.2
+/usr/local/lib64/liblldb.so.18.1.3
 /usr/local/lib64/liblldbIntelFeatures.so
 /usr/local/lib64/liblldbIntelFeatures.so.18.1
 /usr/local/lib64/libscanbuild/__init__.py
--- a/packages/ca_certificates.rb
+++ b/packages/ca_certificates.rb
@@ -3,18 +3,18 @@ require 'package'
 class Ca_certificates < Package
  description 'Common CA Certificates PEM files'
  homepage 'https://salsa.debian.org/debian/ca-certificates'
-  version '20230311' # Do not replace version with @_ver, the install will break.
+  version '20240204' # Do not replace version with @_ver, the install will break.
  license 'MPL-1.1'
  compatibility 'all'
  source_url 'https://salsa.debian.org/debian/ca-certificates.git'
-  git_hashtag '2c507f8c5aac8b50e35291739ffd40676ab08993'
+  git_hashtag 'ee6e0484031314090a11c04ee82689acb73d7ad8'
  binary_compression 'tar.zst'

  binary_sha256({
-    aarch64: 'd2bdc9b48ea268489f2c3ef9ec7a1e2bdca4af60c355463a83bd66714d6cba72',
-     armv7l: 'd2bdc9b48ea268489f2c3ef9ec7a1e2bdca4af60c355463a83bd66714d6cba72',
-       i686: '7c8814ec22eef600c82ef5247df63d3d3a488976c9d7fbeed18bdbe287423079',
-     x86_64: 'ef0260e6c237ee2e23d1571973026a39f37aefb342fa68653777ca97466629e6'
+    aarch64: 'e4f0fa748b7cb6731294ed1f077648e6169bd7147a74962e3778947f5ccd50a9',
+     armv7l: 'e4f0fa748b7cb6731294ed1f077648e6169bd7147a74962e3778947f5ccd50a9',
+       i686: '506dd6d8c7950436669af4c7b763facd884e451f3ce4e17385276f181a5d5965',
+     x86_64: '89a649ea49d4cfddcf0a7e906f6420b959ccd2f686312dfb105b7021c1ff5ea9'
  })

  depends_on 'py3_cryptography' => :build
@@ -123,6 +123,10 @@ class Ca_certificates < Package
  # This isn't run from install.sh, but that's ok. This is for cleanup if updated after an install.
  def self.postinstall
    # Do not call system update-ca-certificates as that tries to update certs in /etc .
-    system "#{CREW_PREFIX}/bin/update-ca-certificates --fresh --certsconf #{CREW_PREFIX}/etc/ca-certificates.conf"
+    if File.file?("#{CREW_PREFIX}/bin/update-ca-certificates")
+      system "#{CREW_PREFIX}/bin/update-ca-certificates --fresh --certsconf #{CREW_PREFIX}/etc/ca-certificates.conf"
+    else
+      puts "#{CREW_PREFIX}/bin/update-ca-certificates is missing!".lightred
+    end
  end
 end
--- a/packages/llvm18_build.rb
+++ b/packages/llvm18_build.rb
@@ -3,7 +3,7 @@ require 'package'
 class Llvm18_build < Package
  description 'The LLVM Project is a collection of modular and reusable compiler and toolchain technologies. The optional packages clang, lld, lldb, polly, compiler-rt, libcxx, and libcxxabi are included.'
  homepage 'http://llvm.org/'
-  version '18.1.2'
+  version '18.1.3'
  license 'Apache-2.0-with-LLVM-exceptions, UoI-NCSA, BSD, public-domain, rc, Apache-2.0 and MIT'
  compatibility 'all'
  source_url 'https://github.com/llvm/llvm-project.git'
@@ -11,10 +11,10 @@ class Llvm18_build < Package
  binary_compression 'tar.zst'

  binary_sha256({
-    aarch64: '0b1b68e47b2f3c877046516d3666db930e62dc2b5b527c3f83abed518deee2a6',
-     armv7l: '0b1b68e47b2f3c877046516d3666db930e62dc2b5b527c3f83abed518deee2a6',
-       i686: '77242a01f59eddef71c7dd62320f509506a3653a702cbe1f6b151e2892922d9f',
-     x86_64: '3d6c3417662d4350a8f4b735767db937e230761170d5bf87ff1c30550d1d17c7'
+    aarch64: 'c26bd8bb873469e5fd96617de8e63621662089d0bcb4ea7b9d740fe0ceb1b051',
+     armv7l: 'c26bd8bb873469e5fd96617de8e63621662089d0bcb4ea7b9d740fe0ceb1b051',
+       i686: '6d15930acd6df4fc78e8573c8b40847d874e59645852b65823998d2c4113b32b',
+     x86_64: '4bb714ea26be5d8789686bee92e557619e6f8095ea189ea967eb5c3c01b84f4a'
  })

  depends_on 'ccache' => :build
@@ -80,16 +80,11 @@ class Llvm18_build < Package
  LLVM_TARGETS_TO_BUILD = 'all'.freeze

  def self.patch
-    # This patch should be in 18.1.3.
-    # https://github.com/llvm/llvm-project/pull/86106
-    downloader 'https://github.com/llvm/llvm-project/pull/86106.patch', 'e27dcdc571f67605cff7346d919f18a2ac4ec1efaa1f4b4c35d03fecd2140204'
-    system 'patch -Np1 -i 86106.patch'
-
    # Remove rc suffix on final release.
    system "sed -i 's,set(LLVM_VERSION_SUFFIX rc),,' llvm/CMakeLists.txt"

    # Patch for LLVM 15+ because of https://github.com/llvm/llvm-project/issues/58851
-    File.write 'llvm_i686.patch', <<~LLVM_PATCH_EOF
+    File.write 'llvm_crew_lib_prefix.patch', <<~LLVM_PATCH_EOF
      --- a/clang/lib/Driver/ToolChains/Linux.cpp	2022-11-30 15:50:36.777754608 -0500
      +++ b/clang/lib/Driver/ToolChains/Linux.cpp	2022-11-30 15:51:57.004417484 -0500
      @@ -314,6 +314,7 @@ Linux::Linux(const Driver &D, const llvm
@@ -101,7 +96,7 @@ class Llvm18_build < Package
         addPathIfExists(D, concat(SysRoot, "/usr/lib"), Paths);
       }
    LLVM_PATCH_EOF
-    system 'patch -Np1 -i llvm_i686.patch'
+    system 'patch -Np1 -i llvm_crew_lib_prefix.patch'
  end

  def self.build
--- a/packages/llvm18_dev.rb
+++ b/packages/llvm18_dev.rb
@@ -4,7 +4,7 @@ require_relative 'llvm18_build'
 class Llvm18_dev < Package
  description 'LLVM: Everything except libLLVM & llvm-strip'
  homepage Llvm18_build.homepage
-  version '18.1.2'
+  version '18.1.3'
  # When upgrading llvm_build*, be sure to upgrade llvm_lib* and llvm_dev* in tandem.
  puts "#{self} version differs from llvm version #{Llvm18_build.version}".orange if version != Llvm18_build.version
  license Llvm18_build.license
@@ -13,10 +13,10 @@ class Llvm18_dev < Package
  binary_compression 'tar.zst'

  binary_sha256({
-    aarch64: '77092f0de31dec3d4b45ba2636c1d5bebfba150b7467a07f5e3aadddc7957bbc',
-     armv7l: '77092f0de31dec3d4b45ba2636c1d5bebfba150b7467a07f5e3aadddc7957bbc',
-       i686: 'cd8ccbb1acabd021b6cc70c9f4ad90b52a6e7540efaf596a1e57a0fd8ae0847a',
-     x86_64: 'e4af0168404b07b360ecc967a925f77bdc0405f82962972f11e5a6db71277af4'
+    aarch64: '8f13bca489115405dbd09198f12b0b64a4e7476dc02784ea1517b0dd0cba0d48',
+     armv7l: '8f13bca489115405dbd09198f12b0b64a4e7476dc02784ea1517b0dd0cba0d48',
+       i686: '0ac0539f6ffac456202661a54b8560c1dfeb3996295afd9ca6ac8650daba1f21',
+     x86_64: '326151a91632a5b375b285144b2284bf8c451b892b141ac893f4ac730f4865a6'
  })

  depends_on 'gcc_dev' # R
--- a/packages/llvm18_lib.rb
+++ b/packages/llvm18_lib.rb
@@ -4,7 +4,7 @@ require_relative 'llvm18_build'
 class Llvm18_lib < Package
  description 'LibLLVM and llvm-strip'
  homepage Llvm18_build.homepage
-  version '18.1.2'
+  version '18.1.3'
  # When upgrading llvm_build*, be sure to upgrade llvm_lib* and llvm_dev* in tandem.
  puts "#{self} version differs from llvm version #{Llvm18_build.version}".orange if version != Llvm18_build.version
  license Llvm18_build.license
@@ -13,10 +13,10 @@ class Llvm18_lib < Package
  binary_compression 'tar.zst'

  binary_sha256({
-    aarch64: '6b2dcb7102ff12bcf1b412665a6d6377efcddc6d240091344df58693524bfe09',
-     armv7l: '6b2dcb7102ff12bcf1b412665a6d6377efcddc6d240091344df58693524bfe09',
-       i686: 'bd5d0d431f79c5986bf319f6c88faa3073c2bc361cd1aa1e399d0a1a71c5f06e',
-     x86_64: 'ff206fd8cc93fe99c5be427b310aed32ed2b283d3704ff1dd052b20e21335175'
+    aarch64: 'd8fc9c37f92ba7c8e79a7ffd892bf350331d3c16587361c5c8454094731d9819',
+     armv7l: 'd8fc9c37f92ba7c8e79a7ffd892bf350331d3c16587361c5c8454094731d9819',
+       i686: 'bcc2b032e45d19a3501d4861fcaa73f48776c49385a336ff796efb2c341bae65',
+     x86_64: 'bb04562aa7ff0b2157d842bb22c58ca482a3b26b4a97c7f8c02cdc3263729237'
  })

  depends_on 'gcc_lib' # R
--- a/packages/openmp.rb
+++ b/packages/openmp.rb
@@ -7,7 +7,7 @@ require_relative 'llvm18_build'
 class Openmp < Package
  description 'LLVM OpenMP Runtime Library'
  homepage 'https://openmp.llvm.org/'
-  version '18.1.2'
+  version '18.1.3'
  # When upgrading llvm_build*, be sure to upgrade openmp in tandem.
  puts "#{self} version differs from llvm version #{Llvm18_build.version}".orange if version != Llvm18_build.version
  license 'Apache-2.0-with-LLVM-exceptions, UoI-NCSA, BSD, public-domain, rc, Apache-2.0 and MIT'
@@ -17,10 +17,10 @@ class Openmp < Package
  binary_compression 'tar.zst'

  binary_sha256({
-    aarch64: '67aa6450afeb98a16f80888ff0358160447261bea3699406f1dfa438f062c77a',
-     armv7l: '67aa6450afeb98a16f80888ff0358160447261bea3699406f1dfa438f062c77a',
-       i686: '8bbf14efa0adf7d7211d3912520f8b73fd42d1e0193464333ebd82fbd6a0fc58',
-     x86_64: '226f7e50b866a02fdc4d5a455f17b4e3bc57a4002aab07bb9aca2617489509e8'
+    aarch64: 'e689971dd05124b3b96d12458acf186ecca4b43c479746121f575cbf4d192253',
+     armv7l: 'e689971dd05124b3b96d12458acf186ecca4b43c479746121f575cbf4d192253',
+       i686: '9142ec4e8f2cd86e09e83b41d82844a189840421e62803096087bc7c0bc2a6c0',
+     x86_64: 'e78f3760ac45689dfb605dbd45e13142a9a2d345e3a89ffa320ded1acd9eb32f'
  })

  depends_on 'gcc_lib' # R
@@ -33,16 +33,11 @@ class Openmp < Package
  no_env_options

  def self.patch
-    # This patch should be in 18.1.3.
-    # https://github.com/llvm/llvm-project/pull/86106
-    downloader 'https://github.com/llvm/llvm-project/pull/86106.patch', 'e27dcdc571f67605cff7346d919f18a2ac4ec1efaa1f4b4c35d03fecd2140204'
-    system 'patch -Np1 -i 86106.patch'
-
    # Remove rc suffix on final release.
    system "sed -i 's,set(LLVM_VERSION_SUFFIX rc),,' llvm/CMakeLists.txt"

    # Patch for LLVM 15+ because of https://github.com/llvm/llvm-project/issues/58851
-    File.write 'llvm_i686.patch', <<~LLVM_PATCH_EOF
+    File.write 'llvm_crew_lib_prefix.patch', <<~LLVM_PATCH_EOF
      --- a/clang/lib/Driver/ToolChains/Linux.cpp	2022-11-30 15:50:36.777754608 -0500
      +++ b/clang/lib/Driver/ToolChains/Linux.cpp	2022-11-30 15:51:57.004417484 -0500
      @@ -314,6 +314,7 @@ Linux::Linux(const Driver &D, const llvm
@@ -54,7 +49,7 @@ class Openmp < Package
         addPathIfExists(D, concat(SysRoot, "/usr/lib"), Paths);
       }
    LLVM_PATCH_EOF
-    system 'patch -Np1 -i llvm_i686.patch'
+    system 'patch -Np1 -i llvm_crew_lib_prefix.patch'
  end

  def self.build
--- a/packages/upx.rb
+++ b/packages/upx.rb
@@ -6,7 +6,7 @@ require 'buildsystems/cmake'
 class Upx < CMake
  description 'Extendable, high-performance executable packer for several executable formats'
  homepage 'https://github.com/upx/upx'
-  version '4.2.2'
+  version '4.2.3'
  license 'custom GPL2'
  compatibility 'all'
  source_url 'https://github.com/upx/upx.git'
@@ -14,10 +14,10 @@ class Upx < CMake
  binary_compression 'tar.zst'

  binary_sha256({
-    aarch64: '63b9e8eef59a8fb261f4109b771611492542c14af65600a9899bbab7a6439130',
-     armv7l: '63b9e8eef59a8fb261f4109b771611492542c14af65600a9899bbab7a6439130',
-       i686: '78e7e840b8a3ad87b337e500e95dbd3ba7f7958db3af7ca364ec31fcbdc8e47b',
-     x86_64: 'fa3a899c75a7c2f1c563ece13af63e941fcbd16745b041e9b50b28c9f1363e40'
+    aarch64: 'b726185f67f13c82f15467e2c5ce5275fa8f9472b99061a4beee840c5e09af80',
+     armv7l: 'b726185f67f13c82f15467e2c5ce5275fa8f9472b99061a4beee840c5e09af80',
+       i686: '0514f4f8a27c494f28dfabb956ad18deb2cde2a406991999d326ad4c8b579f7f',
+     x86_64: '308e574c0e167177a04693ad203f6ce17b3842784071a331aa966d8794182946'
  })

  depends_on 'gcc_lib' # R