Add jq (jaq implementation)

[tox-wtf]

Name

jq

Upstream

https://github.com/jqlang/jq

Description

jq is a command-line JSON processor.

Dependencies

• oniguruma (required)

Dependants

No packages depend on jq to my knowledge, but it is commonly used in shell scripts.

Extra information

No response

[renodr]

Having this for me would be huge, I regularly have to use it with @kirb over at LegacyUpdate for scripting on our build server!

[zeckma-tech]

I'm thinking we should wait for jqlang/jq#3432 to get merged. The RE engine jq uses (oniguruma) is no longer being updated and hasn't been for a year. PCRE2 is the next best thing and is oniguruma compatible. The problem is the PR needs to get merged and work being continued. After that, this should come in.

@renodr, if you want to do this now in spite of that, that's okay. But I think waiting until the PR is merged is a good idea.

[tox-wtf]

The PR has been in development since November 2025, and there are still a handful of unresolved TODOs. While I think it's great that there's an active effort to avoid the oniguruma dependency, I'm hesitant to wait indefinitely on the PR.

[renodr]

Hey Tox! I'd like to apologize first for the delayed replies, we've been recovering from a series of severe weather here that struck last week which caused major utility damage (a tornado) and also killed the power supplies in my systems as well as the UPSes they were connected to.

The PSUs for my two IBM xServe servers come in on Tuesday or Wednesday though which should get my NAS back online so I can start doing things again. What an expensive week :(

I have a patch that fixes all known CVEs in this package as well which I'll put in when I add it hopefully Wednesday or Thursday. There are several of them but upstream did a pretty good job getting them! I think we will add Onig as well but yank that out as soon as we can replace it with pcre2

[zeckma-tech]

onig is apparently vendored, so we can use the vendored version potentially.

[tox-wtf]

There's also https://github.com/01mf02/jaq if we'd prefer that implementation. It does not depend on oniguruma.

[zeckma-tech]

I think we should go with jaq.

[tox-wtf]

I'm happy to take this one if we're cool with jaq @renodr.

[zeckma-tech]

He gave the go-ahead.