profiles: Sync with Gentoo

It's from Gentoo commit 35188e8a69e7eb0925036e2d7843c44563d36a27.

Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

sdk_container/src/third_party/portage-stable/profiles/arch/alpha/package.use.mask

@@ -1,6 +1,10 @@
 # Copyright 1999-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Viorel Munteanu <ceamac@gentoo.org> (2025-11-09)
+# Needs media-video/pipewire, not keyworded here
+net-misc/tigervnc wayland
+
 # PPN-SD <nicolas.parlant@parhuet.fr> (2025-10-04)
 # media-libs/libemf is not keyworded here
 app-office/dia wmf

sdk_container/src/third_party/portage-stable/profiles/arch/amd64/no-multilib/package.use.mask

@@ -31,7 +31,3 @@ dev-embedded/urjtag ftd2xx
 # Yixun Lan <dlan@gentoo.org> (2017-07-12)
 # GLEP 73 Immutability, USE=ovmf requires hvm
 app-emulation/xen-tools ovmf
-
-# Alexis Ballier <aballier@gentoo.org> (2009-08-13)
-# Requires wine
-media-sound/lmms vst

sdk_container/src/third_party/portage-stable/profiles/arch/amd64/package.use.stable.mask

@@ -45,10 +45,6 @@ dev-python/qtpy remoteobjects
 # No stable versions of ROCm at the moment
 sys-apps/hwloc rocm
 
-# Nowa Ammerlaan <nowa@gentoo.org> (2024-03-17)
-# Experimental, virt-firmware is keyworded only unstable
-sys-kernel/installkernel efistub
-
 # Ionen Wolkens <ionen@gentoo.org> (2024-01-16)
 # cuda (and thus cudnn) are not available in stable
 media-libs/opencv cudnn
@@ -57,10 +53,6 @@ media-libs/opencv cudnn
 # Pulls in pandoc with all of its glory (haskell). #921501
 www-apps/hugo test
 
-# Jon Janzen <jon@jonjanzen.com> (2023-09-11)
-# librttopo has not been stabalized on this arch yet
-dev-db/spatialite rttopo
-
 # Michał Górny <mgorny@gentoo.org> (2023-04-22)
 # pandoc is stable here.
 dev-python/nbclassic -doc
@@ -76,11 +68,6 @@ llvm-runtimes/openmp llvm_targets_AMDGPU
 # net-libs/rustls-ffi is not yet marked stable
 net-misc/curl rustls curl_ssl_rustls ech
 
-# Adel Kara Slimane <adel.ks@zegrapher.com> (2022-03-14)
-# needs stabilizing
-media-video/ffmpeg vmaf
-media-video/ffmpeg-compat vmaf
-
 # Joonas Niilola <juippis@gentoo.org> (2021-08-13)
 # dev-libs/efl is stabilized on amd64.
 app-crypt/pinentry -efl
@@ -113,10 +100,6 @@ sys-auth/pambase -sssd
 # Thomas Deutschmann <whissi@gentoo.org> (2018-06-01)
 net-analyzer/wireshark -doc
 
-# Thomas Beierlein <tomjbe@gentoo.org> (2018-04-20)
-# Needs asciidoctor which pulls a lot unstable ruby deps
-media-radio/wsjtx doc
-
 # Mikle Kolyada <zlogene@gentoo.org> (2018-03-18)
 # Pulls too much unstable ruby deps (some are not even keyworded)
 net-misc/chrony html

sdk_container/src/third_party/portage-stable/profiles/arch/amd64/x32/package.use.mask

@@ -16,6 +16,7 @@ dev-lang/php jit
 mail-filter/rspamd jit
 net-proxy/haproxy pcre-jit
 www-servers/varnish jit
+www-apache/mod_security jit
 
 # Andreas Sturmlechner <asturm@gentoo.org> (2024-03-24)
 # Requires unkeyworded dev-qt/qtwebengine

sdk_container/src/third_party/portage-stable/profiles/arch/arm/armv4/package.use.mask

@@ -1,4 +1,4 @@
-# Copyright 2024 Gentoo Authors
+# Copyright 2024-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 # Sam James <sam@gentoo.org> (2024-02-17)
@@ -7,3 +7,4 @@ dev-libs/libpcre2 jit
 dev-lang/php jit
 net-proxy/haproxy pcre-jit
 www-servers/varnish jit
+www-apache/mod_security jit

sdk_container/src/third_party/portage-stable/profiles/arch/arm/armv4t/package.use.mask

@@ -1,4 +1,4 @@
-# Copyright 2024 Gentoo Authors
+# Copyright 2024-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 # Sam James <sam@gentoo.org> (2024-02-17)
@@ -7,3 +7,4 @@ dev-libs/libpcre2 jit
 dev-lang/php jit
 net-proxy/haproxy pcre-jit
 www-servers/varnish jit
+www-apache/mod_security jit

sdk_container/src/third_party/portage-stable/profiles/arch/arm/armv5te/package.use.mask

@@ -1,4 +1,4 @@
-# Copyright 2024 Gentoo Authors
+# Copyright 2024-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 # Sam James <sam@gentoo.org> (2024-02-17)
@@ -7,3 +7,4 @@ dev-libs/libpcre2 jit
 dev-lang/php jit
 net-proxy/haproxy pcre-jit
 www-servers/varnish jit
+www-apache/mod_security jit

sdk_container/src/third_party/portage-stable/profiles/arch/arm/package.use.mask

@@ -1,6 +1,11 @@
 # Copyright 1999-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Sam James <sam@gentoo.org> (2025-11-16)
+# Needs unkeyworded dev-libs/capstone which fails tests on arm (bug #924922)
+app-emulation/qemu capstone
+dev-util/perf capstone
+
 # Sam James <sam@gentoo.org> (2025-11-01)
 # Needs pandoc.
 media-sound/bluez-alsa man

sdk_container/src/third_party/portage-stable/profiles/arch/arm64/package.use.mask

@@ -275,11 +275,6 @@ app-metrics/collectd collectd_plugins_varnish
 # app-text/nuspell is not keyworded
 app-text/enchant nuspell
 
-# Adel Kara Slimane <adel.ks@zegrapher.com> (2022-03-14)
-# Untested useflag on other arches, needs keywording
-media-video/ffmpeg vmaf
-media-video/ffmpeg-compat vmaf
-
 # Sam James <sam@gentoo.org> (2022-02-26)
 # Supports 64-bit NEON
 >=media-libs/libjpeg-turbo-2.1.3 -cpu_flags_arm_neon

sdk_container/src/third_party/portage-stable/profiles/arch/arm64/package.use.stable.mask

@@ -20,10 +20,6 @@ dev-build/meson test-full
 # mongodb needed for tests which is not stable keyworded for arm64
 dev-libs/mongo-c-driver test
 
-# Nowa Ammerlaan <nowa@gentoo.org> (2024-03-21)
-# Experimental, virt-firmware is keyworded only unstable
-sys-kernel/installkernel efistub
-
 # Michał Górny <mgorny@gentoo.org> (2023-04-22)
 # Needs unkeyworded dev-python/sympy
 dev-python/nbval test

sdk_container/src/third_party/portage-stable/profiles/arch/base/package.use.mask

@@ -461,10 +461,6 @@ sys-kernel/installkernel systemd-boot ukify uki
 # Mask bdplus support and unmask on arches where libbdplus is keyworded.
 media-libs/libbluray bdplus
 
-# Lars Wendler <polynomial-c@gentoo.org> (2014-04-23)
-# Not working on 64bit systems
-media-sound/lmms vst
-
 # Andreas K. Huettel <dilfridge@gentoo.org> (2014-01-04)
 # Mask until dependencies are keyworded (bug 497068)
 dev-vcs/git mediawiki

sdk_container/src/third_party/portage-stable/profiles/arch/hppa/make.defaults

@@ -22,3 +22,10 @@ CHOST_hppa="${CHOST}"
 # Donnie Berkholz <dberkholz@gentoo.org> (2006-08-18)
 # Defaults for video drivers
 VIDEO_CARDS="fbdev"
+
+# Sam James <sam@gentoo.org> (2025-11-05)
+# Since Python 3.14 is masked on HPPA, we need to re-enable Python 3.13
+# and explicitly disable 3.14. See bug #959416.
+PYTHON_SINGLE_TARGET="python3_13 -python3_14 -python3_14t"
+PYTHON_TARGETS="python3_13 -python3_14 -python3_14t"
+BOOTSTRAP_USE="unicode pkg-config split-usr xml python_targets_python3_13 python_single_target_python3_13"

sdk_container/src/third_party/portage-stable/profiles/arch/hppa/package.mask

@@ -1,6 +1,13 @@
 # Copyright 2019-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Sam James <sam@gentoo.org> (2025-11-05)
+# Fails to build on HPPA (stack size calculation goes wrong), bug #959416.
+dev-lang/python:3.14
+dev-lang/python:3.14t
+dev-python/python-tests:3.14
+dev-python/python-tests:3.14t
+
 # Sam James <sam@gentoo.org> (2025-03-24)
 # Affected by a data corruption bug on HPPA
 # https://lore.kernel.org/linux-parisc/84d7b3e1053b2a8397bcc7fc8eee8106@matoro.tk/

sdk_container/src/third_party/portage-stable/profiles/arch/hppa/use.mask

@@ -7,6 +7,13 @@
 # NOTE: When masking a USE flag due to missing keywords, please file a keyword
 # request bug for the hppa arch.
 
+# Sam James <sam@gentoo.org> (2025-11-05)
+# Fails to build on HPPA (stack size calculation goes wrong), bug #959416.
+python_targets_python3_14
+python_targets_python3_14t
+python_single_target_python3_14
+python_single_target_python3_14t
+
 # Andreas Sturmlechner <asturm@gentoo.org> (2025-06-12)
 # x11-drivers/xf86-input-wacom is not keyworded here
 input_devices_wacom

sdk_container/src/third_party/portage-stable/profiles/arch/loong/package.use.mask

@@ -1,6 +1,10 @@
 # Copyright 2022-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Ionen Wolkens <ionen@gentoo.org> (2025-11-13)
+# media-libs/libvmaf is keyworded here
+media-libs/x265 -vmaf
+
 # PPN-SD <nicolas.parlant@parhuet.fr> (2025-10-04)
 # media-libs/libemf is not keyworded here
 app-office/dia wmf
@@ -382,5 +386,6 @@ sys-libs/libxcrypt compat
 # These aren't ported to LoongArch yet
 dev-libs/libpcre jit
 www-servers/nginx pcre-jit
+www-apache/mod_security jit
 
 # End snippets taken from riscv

sdk_container/src/third_party/portage-stable/profiles/arch/m68k/package.mask

@@ -1,4 +1,4 @@
-# Copyright 2024 Gentoo Authors
+# Copyright 2024-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 # Andreas K. Hüttel <dilfridge@gentoo.org>
@@ -8,3 +8,7 @@ dev-lang/python:3.13
 dev-lang/python:3.14
 dev-lang/python:3.13t
 dev-lang/python:3.14t
+dev-python/python-tests:3.13
+dev-python/python-tests:3.13t
+dev-python/python-tests:3.14
+dev-python/python-tests:3.14t

sdk_container/src/third_party/portage-stable/profiles/arch/m68k/use.mask

@@ -164,3 +164,7 @@ python_targets_python3_13
 python_targets_python3_13t
 python_targets_python3_14
 python_targets_python3_14t
+python_single_target_python3_13
+python_single_target_python3_13t
+python_single_target_python3_14
+python_single_target_python3_14t

sdk_container/src/third_party/portage-stable/profiles/arch/mips/package.use.mask

@@ -1,6 +1,14 @@
 # Copyright 1999-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Sam James <sam@gentoo.org> (2025-11-15)
+# sys-block/thin-provisioning-tools not keyworded here
+sys-fs/lvm2 thin
+
+# Sam James <sam@gentoo.org> (2025-11-15)
+# gnuplot not keyworded here
+net-misc/ntpsec ntpviz
+
 # Sam James <sam@gentoo.org> (2025-10-31)
 # Needs asciidoctor (ruby)
 net-misc/chrony html

sdk_container/src/third_party/portage-stable/profiles/arch/ppc/package.use.mask

@@ -1,6 +1,10 @@
 # Copyright 2023-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Alfred Wingate <parona@protonmail.com> (2025-11-15)
+# sci-libs/libaec is not keyworded here (bug #966099)
+sci-libs/gdal libaec
+
 # Philipp Rösner <rndxelement@protonmail.com> (2025-09-23)
 # media-libs/zxingcpp is not keyworded here
 app-text/mupdf barcode

sdk_container/src/third_party/portage-stable/profiles/arch/riscv/package.use.mask

@@ -274,3 +274,4 @@ sci-libs/opencascade vtk
 # This doesn't work for (any) riscv yet.
 dev-libs/libpcre jit
 www-servers/nginx pcre-jit
+www-apache/mod_security jit

sdk_container/src/third_party/portage-stable/profiles/arch/s390/package.use.mask

@@ -1,6 +1,14 @@
 # Copyright 1999-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Sam James <sam@gentoo.org> (2025-11-15)
+# sys-block/thin-provisioning-tools not keyworded here
+sys-fs/lvm2 thin
+
+# Sam James <sam@gentoo.org> (2025-11-15)
+# net-misc/pps-tools not keyworded here, nor is gnuplot
+net-misc/ntpsec oncore pps ntpviz
+
 # Sam James <sam@gentoo.org> (2025-10-31)
 # Needs asciidoctor (ruby)
 net-misc/chrony html

sdk_container/src/third_party/portage-stable/profiles/arch/x86/package.use.mask

@@ -1,6 +1,10 @@
 # Copyright 1999-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Ionen Wolkens <ionen@gentoo.org> (2025-11-13)
+# media-libs/libvmaf is keyworded here
+media-libs/x265 -vmaf
+
 # Michał Górny <mgorny@gentoo.org> (2025-10-03)
 # Now keyworded on x86 too.
 sci-libs/flexiblas -system-blas
@@ -231,11 +235,6 @@ app-vim/jedi test
 # Disable 64bit builds on x86
 sys-apps/memtest86+ bios64 uefi64 iso64
 
-# Adel Kara Slimane <adel.ks@zegrapher.com> (2022-03-14)
-# Untested useflag on other arches, needs keywording
-media-video/ffmpeg vmaf
-media-video/ffmpeg-compat vmaf
-
 # Sam James <sam@gentoo.org> (2022-03-10)
 # dev-util/hip and its rocm dependencies not keyworded here
 sci-physics/lammps hip
@@ -479,10 +478,6 @@ sys-kernel/installkernel -systemd-boot -ukify -uki
 # media-libs/libbdplus is keyworded on x86, so unmask the useflag
 media-libs/libbluray -bdplus
 
-# Lars Wendler <polynomial-c@gentoo.org> (2014-04-23)
-# Works on 32bit x86
-media-sound/lmms -vst
-
 # Samuli Suominen <ssuominen@gentoo.org> (2014-02-16)
 # Still considered experimental by upstream:
 # https://sourceforge.net/p/mikmod/bugs/16/#17ea

sdk_container/src/third_party/portage-stable/profiles/arch/x86/package.use.stable.mask

@@ -75,10 +75,6 @@ virtual/notification-daemon kde
 # sys-block/nbdkit is not yet marked stable here
 app-emulation/libvirt nbd
 
-# Nowa Ammerlaan <nowa@gentoo.org> (2024-03-21)
-# Experimental, virt-firmware is keyworded only unstable
-sys-kernel/installkernel efistub
-
 # Arthur Zamarin <arthurzam@gentoo.org> (2023-06-03)
 # Destabilizing x86 keywords on sci-*/* packages
 app-metrics/collectd collectd_plugins_gps

sdk_container/src/third_party/portage-stable/profiles/base/package.use.mask

@@ -32,10 +32,6 @@ mail-mta/exim pam
 <=dev-games/openscenegraph-3.6.5-r117 las
 <=dev-games/openscenegraph-openmw-3.6_p20251012 las
 
-# Volkmar W. Pogatzki <gentoo@pogatzki.net> (2025-10-03)
-# No suitable versions of dev-libs/protobuf available.
-~dev-java/protobuf-java-4.32.1 system-protoc
-
 # Michał Górny <mgorny@gentoo.org> (2025-09-27)
 # Building NumPy with ILP64 LAPACK can cause revdeps to segfault if they
 # link to LP64 LAPACK.  To support this properly, we either need to
@@ -508,8 +504,13 @@ gnome-base/gnome-extra-apps tracker
 # USE=compat / possibly allowing sys-libs/zlib needs to be figured out,
 # but packages want to use the actual zlib-ng library, so we need to
 # mask it and can't hold the whole thing up on the compat effort.
-sys-libs/zlib-ng compat
+#
-sys-libs/minizip-ng compat
+# Michał Górny <mgorny@gentoo.org> (2025-11-04)
+# Unmasking on the revbumped versions that install both the compat
+# library and the regular zlib-ng/minizip-ng library for dependency
+# compatibility.
+<sys-libs/zlib-ng-2.2.5-r1 compat
+<sys-libs/minizip-ng-4.0.10-r1 compat
 
 # Georgy Yakovlev <gyakovlev@gentoo.org> (2022-09-17)
 # po4a crashes while translating
@@ -799,10 +800,6 @@ net-libs/ngtcp2 openssl
 # PGO not yet supported for comm-central, bug #693160
 >=mail-client/thunderbird-68 pgo
 
-# Matt Turner <mattst88@gentoo.org> (2019-09-01)
-# <dev-scheme/guile-2 is package.mask'd
-www-client/elinks guile
-
 # Kent Fredric <kentnl@gentoo.org> (2019-08-07)
 # Newer versions of nqp need newer versions of jdk to run on the jvm,
 # but these currently don't exist in gentoo. The USE flags have to be
@@ -969,10 +966,6 @@ media-libs/libsdl2 custom-cflags
 # Broken for now (segmentation fault on play)
 gnustep-apps/cynthiune flac
 
-# Tom Wijsman <TomWij@gentoo.org> (2013-03-10)
-# Experimental, masked until it compiles and works.
-media-libs/avidemux-core system-ffmpeg
-
 # Jory A. Pratt <anarchy@gentoo.org> (2012-12-15)
 # PGO is known to be busted with most configurations
 www-client/firefox pgo

sdk_container/src/third_party/portage-stable/profiles/base/package.use.stable.mask

@@ -72,11 +72,6 @@ app-text/nuspell doc
 # due to network access issues #829430
 net-libs/grpc test
 
-# Sergey Popov <pinkbyte@gentoo.org> (2021-10-14)
-# net-libs/grpc is not yet stabilized,
-# so mask optional use flag on net-misc/frr
-net-misc/frr grpc
-
 # Joonas Niilola <juippis@gentoo.org> (2021-08-13)
 # dev-libs/efl is only stabilized on two arches.
 app-crypt/pinentry efl
@@ -167,10 +162,6 @@ app-backup/backup-manager s3
 # The go flag requires stable masked dev-lang/go[gccgo].
 www-servers/uwsgi go uwsgi_plugins_alarm_xmpp
 
-# Tim Harder <radhermit@gentoo.org> (2017-09-11)
-# Requires guile-2 which is still unstable.
->=net-irc/weechat-1.7 guile
-
 # Michael Palimaka <kensington@gentoo.org> (2017-08-11)
 # Unstable dependencies.
 dev-util/rpmdevtools emacs

sdk_container/src/third_party/portage-stable/profiles/default/linux/amd64/17.1/clang/package.use.force

@@ -14,3 +14,4 @@ sys-libs/libunwind abi_x86_32 abi_x86_64
 llvm-runtimes/libunwind abi_x86_32 abi_x86_64
 sys-libs/ncurses abi_x86_32 abi_x86_64
 sys-libs/zlib abi_x86_32 abi_x86_64
+virtual/zlib abi_x86_32 abi_x86_64

sdk_container/src/third_party/portage-stable/profiles/default/linux/amd64/17.1/systemd/clang/package.use.force

@@ -14,3 +14,4 @@ sys-libs/libunwind abi_x86_32 abi_x86_64
 llvm-runtimes/libunwind abi_x86_32 abi_x86_64
 sys-libs/ncurses abi_x86_32 abi_x86_64
 sys-libs/zlib abi_x86_32 abi_x86_64
+virtual/zlib abi_x86_32 abi_x86_64

sdk_container/src/third_party/portage-stable/profiles/default/linux/amd64/23.0/llvm/package.use.force

@@ -14,6 +14,7 @@ sys-libs/libunwind abi_x86_32 abi_x86_64
 llvm-runtimes/libunwind abi_x86_32 abi_x86_64
 sys-libs/ncurses abi_x86_32 abi_x86_64
 sys-libs/zlib abi_x86_32 abi_x86_64
+virtual/zlib abi_x86_32 abi_x86_64
 
 # new in 23.0
 app-arch/xz-utils abi_x86_32 abi_x86_64

sdk_container/src/third_party/portage-stable/profiles/default/linux/amd64/23.0/musl/llvm/package.mask

@@ -0,0 +1,6 @@
+# Copyright 2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+# Sam James <sam@gentoo.org> (2025-11-05)
+# rust-bin is available on amd64 musl
+-dev-lang/rust-bin

sdk_container/src/third_party/portage-stable/profiles/default/linux/amd64/23.0/split-usr/llvm/package.use.force

@@ -14,6 +14,7 @@ sys-libs/libunwind abi_x86_32 abi_x86_64
 llvm-runtimes/libunwind abi_x86_32 abi_x86_64
 sys-libs/ncurses abi_x86_32 abi_x86_64
 sys-libs/zlib abi_x86_32 abi_x86_64
+virtual/zlib abi_x86_32 abi_x86_64
 
 # new in 23.0
 app-arch/xz-utils abi_x86_32 abi_x86_64

sdk_container/src/third_party/portage-stable/profiles/default/linux/amd64/package.use.mask

@@ -1,6 +1,10 @@
 # Copyright 1999-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Jaco Kroon <jkroon@gentoo.org> (2052-11-11)
+# This target has the dependencies keyworded.
+dev-db/mariadb -aws-km
+
 # idealseal <realidealseal@protonmail.com> (2025-07-08)
 # This target support distributing tasks.
 dev-util/sccache -dist-server

sdk_container/src/third_party/portage-stable/profiles/default/linux/arm64/23.0/musl/llvm/package.mask

@@ -0,0 +1,6 @@
+# Copyright 2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+# Sam James <sam@gentoo.org> (2025-11-05)
+# rust-bin is available on amd64 musl
+-dev-lang/rust-bin

sdk_container/src/third_party/portage-stable/profiles/default/linux/m68k/23.0/time64/use.mask

@@ -8,3 +8,5 @@
 -python_targets_python3_13t
 -python_single_target_python3_13
 -python_single_target_python3_13
+-python_single_target_python3_14
+-python_single_target_python3_14t

sdk_container/src/third_party/portage-stable/profiles/default/linux/package.mask

@@ -1,6 +1,12 @@
 # Copyright 2023-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Sam James <sam@gentoo.org> (2025-11-05)
+# A libatomic drop-in replacement, which conflicts with sys-devel/gcc,
+# therefore meant only for profiles which can work without GCC being
+# present even as a fallback.
+llvm-runtimes/libatomic-stub
+
 # Michal Rostecki <vadorovsky@protonmail.com> (2025-02-10)
 # A libgcc_s drop-in replacement, which conflicts with sys-devel/gcc,
 # therefore meant only for profiles which can work without GCC being

sdk_container/src/third_party/portage-stable/profiles/default/linux/package.use.mask

@@ -1,6 +1,11 @@
 # Copyright 1999-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Jaco Kroon <jkroon@gentoo.org> (2025-11-11)
+# The depended on packages will need to be keyworded for various arches
+# to which I don't have access.
+dev-db/mariadb aws-km
+
 # Patrick Lauer <patrick@gentoo.org> (2025-09-19)
 # Dependency currently in ::guru
 games-board/lc0 onnx

sdk_container/src/third_party/portage-stable/profiles/features/big-endian/package.mask

@@ -127,10 +127,22 @@ media-libs/zimg
 # https://gitlab.freedesktop.org/wayland/weston/-/issues/739
 dev-libs/weston
 
-# eluks <lschmelting@posteo.com> (2025-09-07)
+# The following packages depend on gui-libs/gtk, while "gui-libs/gtk wayland" is
-# Hard depends on gui-libs/gtk[wayland] since version 48.3,
+# in big-endian package.use.mask:
-# while "gui-libs/gtk wayland" is in big-endian package.use.mask
+# Hard depends on gui-libs/gtk[wayland] since version 48.3
 >=gnome-base/gnome-control-center-48.3
+# Hard depends on gui-libs/gtk[X,wayland] since atleast version 47.4
+gnome-base/nautilus
+# gnome-base/nautilus reverse-dependencies
+dev-python/nautilus-python
+gnome-base/gnome-core-apps
+gnome-base/gnome-light
+gnome-extra/sushi
+# packages affected by nautilus reverse-dependencies
+gnome-base/gnome
+media-gfx/gthumb
+media-sound/rhythmbox
+media-sound/sound-juicer
 
 # matoro <matoro_gentoo@matoro.tk> (2023-04-10)
 # Explicit no-support for BE (#801238)

sdk_container/src/third_party/portage-stable/profiles/features/big-endian/use.mask

@@ -1,6 +1,11 @@
 # Copyright 2023-2024 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Lukas Schmelting <lschmelting@posteo.com> (2025-11-15)
+# gnome-base/nautilus is package.masked on big-endian platforms since it depends
+# on gui-libs/gtk, while "gui-libs/gtk wayland" is in big-endian package.use.mask
+nautilus
+
 # Paul Zander <negril.nx+gentoo@gmail.com> (2025-05-02)
 # media-gfx/alembic is masked (#884295)
 alembic

sdk_container/src/third_party/portage-stable/profiles/features/musl/llvm/package.mask

@@ -1,6 +1,14 @@
 # Copyright 2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Sam James <sam@gentoo.org> (2025-11-05)
+# A libatomic drop-in replacement, which conflicts with sys-devel/gcc,
+# therefore meant only for profiles which can work without GCC being
+# present even as a fallback. Since glibc can't be built with clang,
+# it's possible only on musl/llvm profiles. If that ever changes, we
+# can move this unmask to all llvm profiles.
+-llvm-runtimes/libatomic-stub
+
 # Michal Rostecki <vadorovsky@protonmail.com> (2025-02-09)
 # A libgcc_s drop-in replacement, which conflicts with sys-devel/gcc,
 # therefore meant only for profiles which can work without GCC being

sdk_container/src/third_party/portage-stable/profiles/features/time64/package.mask

@@ -1,6 +1,10 @@
 # Copyright 2024-2025 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Andreas K. Hüttel <dilfridge@gentoo.org> (2025-11-10)
+# Broken, it gets symbols confused. Bug 964410
+=sys-apps/kbd-2.9.0
+
 # Andreas K. Hüttel <dilfridge@gentoo.org> (2025-07-06)
 # gcc[ada] is not available here yet
 dev-ada/ada_language_server

sdk_container/src/third_party/portage-stable/profiles/features/wd40/package.mask

@@ -21,11 +21,12 @@ app-portage/emlop
 
 # Michał Górny <mgorny@gentoo.org> (2024-05-08)
 # Pure Python packages using dev-python/uv-build, and therefore
-# requiring Rust to install, and their dependencies.
+# requiring Rust to install, and their reverse dependencies.
 dev-python/gherkin-official
 dev-python/pytest-bdd
 dev-python/pytest-describe
 dev-python/uv-build
+dev-python/zmq-anyio
 sys-auth/ssh-ldap-pubkey
 
 # Sebastian Pipping <sping@gentoo.org> (2025-06-20)
@@ -418,7 +419,7 @@ net-news/newsboat
 net-p2p/deluge
 sci-geosciences/gnome-maps
 >=sys-apps/bat-0.18.1
->=sys-block/thin-provisioning-tools-1.0.6
+sys-block/thin-provisioning-tools
 >=sys-process/glances-4.1.2.1
 sys-fs/bcachefs-tools
 virtual/rust

sdk_container/src/third_party/portage-stable/profiles/features/wd40/package.use.mask

@@ -12,6 +12,7 @@ dev-python/dulwich test
 # Michał Górny <mgorny@gentoo.org> (2025-08-05)
 # Native extensions are using Rust.
 dev-python/fastbencode native-extensions
+dev-python/logbook native-extensions
 
 # Holger Hoffstätte <holger@applied-asynchrony.com> (2025-07-24)
 # dnsdist-2.0.0[yaml] needs Rust
@@ -114,7 +115,7 @@ dev-python/nbconvert test
 
 # Sam James <sam@gentoo.org> (2023-09-06)
 # sys-block/thin-provisioning-tools now needs Rust.
->=sys-fs/lvm2-2.03.22-r2 thin
+sys-fs/lvm2 thin
 
 # Hans de Graaff <graaff@gentoo.org> (2023-09-03)
 # selenium-webdriver is needed for these tests but that requires

sdk_container/src/third_party/portage-stable/profiles/package.deprecated

@@ -17,6 +17,15 @@
 
 #--- END OF EXAMPLES ---
 
+# Michał Górny <mgorny@gentoo.org> (2025-11-04)
+# Please depend on virtual/zlib, unless you are sure that the package
+# in question is not compatible with sys-libs/zlib-ng[compat] and/or
+# sys-libs/minizip-ng[compat].  In the latter case, please report a bug,
+# so that upstream can improve the API/ABI compatibility.
+# This is a temporary deprecation to aid transitioning packages imported
+# from other repositories.
+sys-libs/zlib
+
 # Michał Górny <mgorny@gentoo.org> (2025-10-26)
 # No activity since 2022.  Already requires extensive patching,
 # broken with Python 3.14.

sdk_container/src/third_party/portage-stable/profiles/package.mask

@@ -36,6 +36,54 @@
 
 #--- END OF EXAMPLES ---
 
+# orbea <orbea@riseup.net> (2025-11-16)
+# Dead upstream, non-free licenses, depends on libsdl, no revdeps.
+# Use games-emulation/geolith-jg instead.
+# Bugs #744043, #896336, #926370.
+# Removal on 2025-12-16.
+games-emulation/gngeo
+
+# Ionen Wolkens <ionen@gentoo.org> (2025-11-14)
+# A regression[1][2] is causing many users to be stuck at 1920x1080@60
+# due the drivers seemingly misdetecting capacity of the connection to
+# the monitor when using DisplayPort or HDMI with certain setups.
+#
+# Not everyone is affected, so feel free to unmask if not.
+#
+# [1] https://forums.developer.nvidia.com/t/580-release-feedback-discussion/341205/795
+# [2] https://github.com/NVIDIA/open-gpu-kernel-modules/issues/960
+~x11-drivers/nvidia-drivers-580.105.08
+
+# Petr Vaněk <arkamar@gentoo.org> (2025-11-13)
+# The MDEV-38068 issue has been discovered with MariaDB 11.8.4. The issue
+# caused a partial data deletion when using the DELETE statement on MyISAM or
+# Aria tables under specific conditions. InnoDB tables are not affected by
+# this. See:
+# https://jira.mariadb.org/browse/MDEV-38068
+# https://lists.mariadb.org/hyperkitty/list/packagers@lists.mariadb.org/thread/IT3YIRPIS4ZVDZ5LBIDV7MPUDIL2VGIA/
+#
+# Affected package was removed from the tree, but this message shall be kept
+# untill 2025-12-15.
+~dev-db/mariadb-11.8.4
+
+# Sam James <sam@gentoo.org> (2025-11-13)
+# Reported crashes (https://bugs.gentoo.org/914256#c18)
+=sys-libs/musl-1.2.5-r6
+
+# Sam James <sam@gentoo.org> (2025-11-05)
+# re 8.3.0: Has regressions breaking media-video/subliminal and 8.3.1
+# which fixes some (but not all of those regressions) is semi-released only.
+# re 8.3.1: Release not on PyPI (yet?), causing regressions in dev-python/black.
+# https://github.com/pallets/click/issues/3087
+~dev-python/click-8.3.0
+=dev-python/click-8.3.1
+
+# Andreas Sturmlechner <asturm@gentoo.org> (2025-11-03)
+# Dead upstream, vulernabilities, depends on Qt5, no revdeps.
+# Bugs #752042, #884041, #918096, #948092, #952542.
+# Removal on 2025-12-02.
+media-sound/cadence
+
 # Mike Gilbert <floppym@gentoo.org> (2025-10-29)
 # No longer used by sys-boot/grub.
 # Removal on 2025-11-28.
@@ -51,39 +99,15 @@ dev-libs/eventlog
 # Removal on 2025-11-20.  Bug #964780.
 dev-python/backports-ssl-match-hostname
 
-# Thomas Beierlein <tomjbe@gentoo.org> (2025-10-14)
-# Depends on Qt5.
-# Superseded by media-radio/wsjtx_improved. While both are based on the same
-# base code wsjtx_improved will be more actual AND provides Qt6 support.
-# Removal on 2025-11-13.  Bug #955965.
-media-radio/wsjtx
-
 # Sam James <sam@gentoo.org> (2025-10-13)
 # Crashes in memtodest when handling PATH. Not yet reported upstream.
 =app-shells/dash-0.5.13.1
 
-# Andreas Sturmlechner <asturm@gentoo.org> (2025-10-12)
-# Dead upstream, depends on Qt5.
-# Bug #949899, #953384. Removal on 2025-11-11.
-games-puzzle/colorcode
-
-# Andreas Sturmlechner <asturm@gentoo.org> (2025-10-12)
-# Dead upstream, broken with CMake-4, no one else packaging this anymore.
-# Bug #958051. Removal on 2025-11-11.
-sci-electronics/Stage
-
 # Michał Górny <mgorny@gentoo.org> (2025-10-12)
 # Requires Rust with RUST_SYSROOTS=bpf, which isn't currently supported
 # by dev-lang/rust-bin.  Also needs net-proxy/mitmproxy-linux updates.
 >=dev-util/bpf-linker-0.9.15-r1
 
-# Andreas Sturmlechner <asturm@gentoo.org> (2025-10-11)
-# Stuck forever in 5.x because in 6.x it was rewritten around proprietary
-# aqlprofile. A potential future 7.x package would require packaging from
-# scratch with several additional new package dependencies.
-# Bugs #904074, #952456. Removal on 2025-11-10.
-dev-util/rocprofiler
-
 # Hans de Graaff <graaff@gentoo.org> (2025-10-10)
 # No longer supported upstream since 2025-04-01. Use Rails 7.2 or newer
 # instead. Masked for removal on 2025-11-10).
@@ -160,15 +184,8 @@ net-libs/NativeThread
 =dev-python/pymongo-4.15.3
 =dev-python/pymongo-4.15.2
 
-# Sam James <sam@gentoo.org> (2025-10-05)
-# Fails to build with to-be-stabled CMake 4, Qt 5, no upstream release in
-# 5 years (despite much activity), and a bunch of other open bugs in need
-# of attention.
-# Removal on 2025-11-04.  Bug #957460.
-media-sound/lmms
-
 # Lukas Schmelting <lschmelting@posteo.com> (2025-10-03)
-# Breaks e.g. in combination with gnome-shell-48.4
+# Breaks e.g. in combination with gnome-shell-48.4, gettext/gjs (bug #963815)
 >=dev-libs/glib-2.86.0
 >=dev-libs/gobject-introspection-1.86.0
 >=dev-libs/gobject-introspection-common-1.86.0
@@ -316,11 +333,11 @@ dev-db/mysql:8.4
 
 # Michał Górny <mgorny@gentoo.org> (2025-03-17)
 # Xfce 4.22 prereleases.  Masked because they tend to be quite unstable.
+>=app-office/orage-4.21
 >=dev-build/xfce4-dev-tools-4.21
 >=xfce-base/exo-4.21
 >=xfce-base/garcon-4.21
 >=xfce-base/libxfce4ui-4.21
->=xfce-base/orage-4.21
 >=xfce-base/thunar-4.21
 >=xfce-base/tumbler-4.21
 >=xfce-base/xfce4-appfinder-4.21

sdk_container/src/third_party/portage-stable/profiles/targets/desktop/plasma/package.use

@@ -47,11 +47,7 @@ net-firewall/nftables json python xtables
 
 # Required by dev-qt/qtwebengine
 sys-libs/zlib minizip
-
+virtual/zlib minizip
-# Keep existing defaults after dropping IUSE=phonon from make.defaults
-<kde-apps/kio-extras-25.08.2 phonon
-<kde-apps/marble-25.08.2 phonon
-<net-p2p/ktorrent-25.08.2 phonon
 
 # Required by kde-plasma/plasma-meta
 kde-plasma/kwin lock