[Buildroot] [PATCH] package/libbson: remove package

[Titouan Christophe]

The upstream libbson repository has been archived since october 2020,
and there is a known vulnerabilities affecting it (CVE-2025-0755).

Since no other package depends on libbson, and it hasn't seen any recent
activity, let's simply remove it from Buildroot. In case anyone needs a
bson implementation, one could integrate the replacement from mongo-c-driver
instead, see https://github.com/mongodb/mongo-c-driver/tree/master/src/libbson

Signed-off-by: Titouan Christophe <titouan.christophe at mind.be>
---
 Config.in.legacy             |  6 ++++++
 DEVELOPERS                   |  1 -
 package/Config.in            |  1 -
 package/libbson/Config.in    | 11 -----------
 package/libbson/libbson.hash |  4 ----
 package/libbson/libbson.mk   | 22 ----------------------
 6 files changed, 6 insertions(+), 39 deletions(-)
 delete mode 100644 package/libbson/Config.in
 delete mode 100644 package/libbson/libbson.hash
 delete mode 100644 package/libbson/libbson.mk

diff --git a/Config.in.legacy b/Config.in.legacy
index ffcd53930a..2c5b389dc8 100644
--- a/Config.in.legacy
+++ b/Config.in.legacy
@@ -146,6 +146,12 @@ endif
 
 comment "Legacy options removed in 2025.11"
 
+config BR2_PACKAGE_LIBBSON
+	bool "libbson has been removed"
+	select BR2_LEGACY
+	help
+	  libbson is officially deprecated upstream and has been removed
+
 config BR2_TARGET_ROOTFS_AXFS
 	bool "AXFS root filesystem has been removed"
 	select BR2_LEGACY
diff --git a/DEVELOPERS b/DEVELOPERS
index d3fdbb49a0..e00a8a48ea 100644
--- a/DEVELOPERS
+++ b/DEVELOPERS
@@ -2994,7 +2994,6 @@ F:	package/wlr-randr/
 
 N:	Semyon Kolganov <semenak94 at mail.ru>
 F:	package/fmt/
-F:	package/libbson/
 F:	package/lua-resty-http/
 F:	package/mpir/
 
diff --git a/package/Config.in b/package/Config.in
index 756f48266e..e9906b066e 100644
--- a/package/Config.in
+++ b/package/Config.in
@@ -1924,7 +1924,6 @@ menu "JSON/XML"
 	source "package/json-for-modern-cpp/Config.in"
 	source "package/json-glib/Config.in"
 	source "package/jsoncpp/Config.in"
-	source "package/libbson/Config.in"
 	source "package/libfastjson/Config.in"
 	source "package/libjson/Config.in"
 	source "package/libjwt/Config.in"
diff --git a/package/libbson/Config.in b/package/libbson/Config.in
deleted file mode 100644
index 95f224e29e..0000000000
--- a/package/libbson/Config.in
+++ /dev/null
@@ -1,11 +0,0 @@
-config BR2_PACKAGE_LIBBSON
-	bool "libbson"
-	depends on BR2_TOOLCHAIN_HAS_THREADS
-	help
-	  libbson is a library providing useful routines related to
-	  building, parsing, and iterating BSON documents.
-
-	  http://mongoc.org/libbson/
-
-comment "libbson needs a toolchain w/ threads"
-	depends on !BR2_TOOLCHAIN_HAS_THREADS
diff --git a/package/libbson/libbson.hash b/package/libbson/libbson.hash
deleted file mode 100644
index e4b636d2fd..0000000000
--- a/package/libbson/libbson.hash
+++ /dev/null
@@ -1,4 +0,0 @@
-# Locally calculated
-sha256  6bb51b863a4641d6d7729e4b55df8f4389ed534c34eb3a1cda906a53df11072c  libbson-1.9.5.tar.gz
-sha256  cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30  COPYING
-sha256  8dc5cb3146b026715e6c145621c7732f36c295d825b7b3a03076ad3f238db48e  THIRD_PARTY_NOTICES
diff --git a/package/libbson/libbson.mk b/package/libbson/libbson.mk
deleted file mode 100644
index 1ac7202830..0000000000
--- a/package/libbson/libbson.mk
+++ /dev/null
@@ -1,22 +0,0 @@
-################################################################################
-#
-# libbson
-#
-################################################################################
-
-LIBBSON_VERSION = 1.9.5
-LIBBSON_SITE = https://github.com/mongodb/libbson/releases/download/$(LIBBSON_VERSION)
-LIBBSON_LICENSE = Apache-2.0, MIT (jsonl), ISC (b64), Zlib (md5)
-LIBBSON_LICENSE_FILES = COPYING THIRD_PARTY_NOTICES
-LIBBSON_CPE_ID_VENDOR = mongodb
-LIBBSON_CONF_OPTS = \
-	--disable-tests \
-	--disable-examples \
-	--disable-man-pages \
-	--disable-html-docs
-
-LIBBSON_INSTALL_STAGING = YES
-
-# Also has CMake support, but that forces shared+static libs and static
-# lib has a different name.
-$(eval $(autotools-package))
-- 
2.51.0