xfce4: bump for xfce4-settings 4.18.3

(gutteridge)

doc: Updated x11/xfce4-settings to 4.18.3

(gutteridge)

xfce4-settings: update to 4.18.3

Change log:

4.18.3 (2023-07-04)
======
- Displays: Fix finding a valid mode by refresh rate
- dialogs: Secure use of GSettings
- xfsettingsd: Fix wrong test for property removal
- xfsettingsd: Update also the type when updating a value
- keyboard-settings: Fix critical when opening layout selection dialog
- appearance-install-theme: Fix error message
- appearance-install-theme: Do not mention file size in error message
- appearance-install-theme: Check for theme package validity
- appearance-install-theme: Update GTK icon cache after installing
- appearance-install-theme: detect icon themes first (#271)
- appearance-install-theme: make cleanup safer
- appearance-install-theme: Use recommended way of command substitution.
- appearance-install-theme: Convert to POSIX
- Update bug report address
- display: Check for XError on transform apply
- Translation Updates:
  Albanian, Arabic, Armenian (Armenia), Asturian, Basque, Belarusian,
  Belarusian (Tarask), Bulgarian, Catalan, Chinese (China), Chinese
  (Hong Kong), Chinese (Taiwan), Croatian, Czech, Danish, Dutch,
  Eastern Armenian, English (Australia), English (Canada), English
  (United Kingdom), Estonian, Finnish, French, Galician, German, Greek,
  Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian,
  Japanese, Kazakh, Korean, Lithuanian, Malay, Norwegian Bokm奪l,
  Norwegian Nynorsk, Occitan (post 1500), Polish, Portuguese,
  Portuguese (Brazil), Romanian, Russian, Serbian, Slovak, Slovenian,
  Spanish, Swedish, Thai, Turkish, Ukrainian, Uyghur

(gutteridge)

doc: Updated net/samba4 to 4.18.5

(taca)

net/samba4: update to 4.18.5

                  ==============================
                  Release Notes for Samba 4.18.5
                          July 19, 2023
                  ==============================

This is a security release in order to address the following defects:

o CVE-2022-2127:  When winbind is used for NTLM authentication, a maliciously
                  crafted request can trigger an out-of-bounds read in winbind
                  and possibly crash it.
                  https://www.samba.org/samba/security/CVE-2022-2127.html

o CVE-2023-3347:  SMB2 packet signing is not enforced if an admin configured
                  "server signing = required" or for SMB2 connections to Domain
                  Controllers where SMB2 packet signing is mandatory.
                  https://www.samba.org/samba/security/CVE-2023-3347.html

o CVE-2023-34966: An infinite loop bug in Samba's mdssvc RPC service for
                  Spotlight can be triggered by an unauthenticated attacker by
                  issuing a malformed RPC request.
                  https://www.samba.org/samba/security/CVE-2023-34966.html

o CVE-2023-34967: Missing type validation in Samba's mdssvc RPC service for
                  Spotlight can be used by an unauthenticated attacker to
                  trigger a process crash in a shared RPC mdssvc worker process.
                  https://www.samba.org/samba/security/CVE-2023-34967.html

o CVE-2023-34968: As part of the Spotlight protocol Samba discloses the server-
                  side absolute path of shares and files and directories in
                  search results.
                  https://www.samba.org/samba/security/CVE-2023-34968.html

Changes since 4.18.4
--------------------

o  Ralph Boehme <slow@samba.org>
  * BUG 15072: CVE-2022-2127.
  * BUG 15340: CVE-2023-34966.
  * BUG 15341: CVE-2023-34967.
  * BUG 15388: CVE-2023-34968.
  * BUG 15397: CVE-2023-3347.

o  Volker Lendecke <vl@samba.org>
  * BUG 15072: CVE-2022-2127.

o  Stefan Metzmacher <metze@samba.org>
  * BUG 15418: Secure channel faulty since Windows 10/11 update 07/2023.

(taca)

devel/scons: Stop self-conflicting

While this installs "scons", scons4 installs e.g. scons-310, so scons
3 (py27 only) and scons 4 (python 3 only) can coexist.

(gdt)

qt5-*: remove another ld(1) option for Darwin

(tnn)

qt5-*: add BUILDLINK_TRANSFORM that used to live in Darwin.mk

(tnn)

mysql57: Add pkg-config to USE_TOOLS

(nia)

gnome-desktop3: make seccomp dependency optional

(nia)

mariadb*-client: Ensure the wide ncurses library is picked if the user chose it

(nia)

qt5-qtwebkit: also buildlink x11/qt5-qtmultimedia

(adam)

MesaLib: fix build on Linux

(tnn)

geography/gama: Require C++14

Believe configure.ac and cmake config over the README :-(

(gdt)

doc: Updated devel/py-nihtest to 1.2.0

(wiz)

py-nihtest: update to 1.2.0.

# 1.2.0 [2023-07-19]

- Explicitly specify encoding for stdout of subcommands.

(wiz)

doc: Updated www/py-google-api-python-client to 2.93.0

(wiz)

py-google-api-python-client: update to 2.93.0.

API updates.

(wiz)

doc: Updated fonts/harfbuzz to 8.0.1

(wiz)

harfbuzz: update to 8.0.1.

Overview of changes leading to 8.0.1
Wednesday, July 12, 2023
====================================
- Build fix on 32-bit arm.

- More speed optimizations:
  - 60% speedup in retaingids subsetting SourceHanSans-VF.
  - 38% speed up in subsetting (beyond-64k) mega-merged Noto.
  - 16% speed up in retain-gid (used for IFT) subsetting of NotoSansCJKkr.

Overview of changes leading to 8.0.0
Sunday, July 9, 2023
====================================
- New, experimental, WebAssembly (WASM) shaper, that provides greater
  flexibility over OpenType/AAT/Graphite shaping, using WebAssembly embedded
  inside the font file. Currently WASM shaper is disabled by default and needs
  to be enabled at build time. For details, see:

    https://github.com/harfbuzz/harfbuzz/blob/main/docs/wasm-shaper.md

  For example fonts making use of the WASM shaper, see:

    https://github.com/simoncozens/wasm-examples

- Improvements to Experimental features introduced in earlier releases:
  - Support for subsetting beyond-64k and VarComposites fonts.
  - Support for instancing variable fonts with cubic ���glyf��� table.

- Many big speed optimizations:
  - Up to 89% speedup loading variable fonts for shaping.
  - Up to 88% speedup in small subsets of large (eg. CJK) fonts (both TTF and
    OTF), essential for Incremental Font Transfer (IFT).
  - Over 50% speedup in loading Roboto font for shaping.
  - Up to 40% speed up in loading (sanitizing) complex fonts.
  - 30% speed up in shaping Gulzar font.
  - Over 25% speedup in glyph loading Roboto font.
  - 10% speed up loading glyph shapes in VarComposite Hangul font.
  - hb-hashmap optimizations & hashing improvements.

- New macro HB_ALWAYS_INLINE. HarfBuzz now inlines functions more aggressively,
  which results in some speedup at the expense of bigger code size. To disable
  this feature define the macro to just inline.

- New API:
+HB_CODEPOINT_INVALID
+hb_ot_layout_get_baseline2()
+hb_ot_layout_get_baseline_with_fallback2()
+hb_ot_layout_get_font_extents()
+hb_ot_layout_get_font_extents2()
+hb_subset_input_set_axis_range()

(wiz)

doc: Updated net/samba4 to 4.18.4

(wiz)

samba: update to 4.18.4.

Changes since 4.18.3
--------------------

o  Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
  * BUG 15404: Backport --pidl-developer fixes.

o  Samuel Cabrero <scabrero@samba.org>
  * BUG 14030: Named crashes on DLZ zone update.

o  Bj旦rn Jacke <bj@sernet.de>
  * BUG 2312: smbcacls and smbcquotas do not check // before the server.

o  Volker Lendecke <vl@samba.org>
  * BUG 15382: cli_list loops 100% CPU against pre-lanman2 servers.
  * BUG 15391: smbclient leaks fds with showacls.
  * BUG 15402: smbd returns NOT_FOUND when creating files on a r/o filesystem.

o  Stefan Metzmacher <metze@samba.org>
  * BUG 15355: NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry and
    causes test timeouts.

o  Noel Power <noel.power@suse.com>
  * BUG 15384: net ads lookup (with unspecified realm) fails.

o  Christof Schmitt <cs@samba.org>
  * BUG 15381: Register Samba processes with GPFS.

o  Andreas Schneider <asn@samba.org>
  * BUG 15390: Python tarfile extraction needs change to avoid a warning
    (CVE-2007-4559 mitigation).
  * BUG 15398: The winbind child segfaults when listing users with `winbind
    scan trusted domains = yes`.

o  Jones Syue <jonessyue@qnap.com>
  * BUG 15383: Remove comments about deprecated 'write cache size'.
  * BUG 15403: smbget memory leak if failed to download files recursively.

(wiz)

lmdbg: Disable FORTIFY on Linux only

(nia)

liburing: Require a c11 compiler for stdatomic.

(nia)

doc: Updated net/bind918 to 9.18.17

(taca)

net/bind918: update to 9.18.17

9.18.17 released

6206. [bug] Add shutdown checks in dns_catz_dbupdate_callback() to
avoid a race with dns_catz_shutdown_catzs(). [GL #4171]

6205. [bug] Restore support to read legacy HMAC-MD5 K file pairs.
[GL #4154]

6204. [bug] Use NS records for relaxed QNAME-minimization mode.
This reduces the number of queries named makes when
resolving, as it allows the non-existence of NS RRsets
at non-referral nodes to be cached in addition to the
referrals that are normally cached. [GL #3325]

6200. [bug] Fix nslookup erroneously reporting a timeout when the
input is delayed. [GL #4044]

6199. [bug] Improve HTTP Connection: header protocol conformance
in the statistics channel. [GL #4126]

6198. [func] Remove the holes in the isc_result_t enum to compact
the isc_result tables. [GL #4149]

6197. [bug] Fix a data race between the dns_zone and dns_catz
modules when registering/unregistering a database
update notification callback for a catalog zone.
[GL #4132]

6196. [cleanup] Report "permission denied" instead of "unexpected error"
when trying to update a zone file on a read-only file
system. Thanks to Midnight Veil. [GL #4134]

6193. [bug] Fix a catz db update notification callback registration
logic error, which could crash named when receiving an
AXFR update for a catalog zone while the previous update
process of the catalog zone was already running.
[GL #4136]

6166. [func] Retry without DNS COOKIE on FORMERR if it appears that
the FORMERR was due to the presence of a DNS COOKIE
option. [GL #4049]

(taca)

librlog: In patch, include stdint.h before using max int type.

(nia)

librlog: Set LICENSE

(nia)

libdnsres: Even when PKGSRC_MKPIE is off, need to use -fPIC here due
to shared object creation.

(nia)

libsigc++3: Dependent packages need C++17 support to build

(nia)

doc: Updated devel/py-hg-evolve to 11.0.2

(wiz)

py-hg-evolve: update to 11.0.2.

This is a bugfix release. The most notable change is compatibility with
the upcoming Mercurial 6.5.

(wiz)

xmlsec1: Assumes compiler defaults to c99.

(nia)

doc/TODO: sudo updated

+ sudo-1.9.14p2.

(taca)

mdds: Require a C++17 compiler, as the configure script does.

(nia)

doc: Updated archivers/php-pecl-zip to 1.22.1

(taca)

archivers/php-pecl-zip: update to 1.22.1

1.22.0 (2023-06-27)

* compatibility with 8.3
* add new error macros (ER_DATA_LENGTH and ER_NOT_ALLOWED) with libzip >=
  1.10.0
* add new archive global flags (ER_AFL_*) with libzip >= 1.10.0
* add ZipArchive::setArchiveFlag and ZipArchive::getArchiveFlag methods

1.22.1 (2023-06-29)

* add more tests
* ZipArchive::FL_RECOMPRESS constant is deprecated and will be removed in a
  future version of libzip
* add ZipArchive::FL_OPEN_FILE_NOW to open the file when added instead of
  waiting for archive to be closed

(taca)

libatomic: Require a c11 compiler for stdatomic.h.

(nia)

capnproto: Require a C++14 compiler, as the configure script does.

(nia)

libuv: c11 is a C dialect, so use USE_CC_FEATURES

(nia)

print/mupdf: fix broken build on Linux (opengl enabled).

Aside from NetBSD, `-lGL' is required by the linker on Linux too.
Pass it to LDFLAGS by default on all platforms when building the
OpenGL viewer (default: on).

Also fix PLIST when mupdf is built with curl support.

(vins)

doc: Updated security/openssh to 9.3p2

(wiz)

openssh: update to 9.3p2.

    OpenSSH 9.3p2
    update version in README
    update RPM spec versions

    disallow remote addition of FIDO/PKCS11 keys

    Depends on the local client performing the session-bind@openssh.com
    operation, so non-OpenSSH local client may circumvent this.

    terminate pkcs11 process for bad libraries
    depend
    crank version

(wiz)

doc: Updated devel/py-mercurial to 6.5

(wiz)

py-mercurial: update to 6.5.

New Features

    Improved Python 3.12 compatiblity
    configitems: enable changegroup3 by default (unless using infinitepush)
    extras: expose 'retained_extras' for extensions to extend
    stabletailgraph: implement stable-tail sort
    stabletailgraph: naive version of leap computation
    bundle: introduce a "v3" spec
    clone-bundles: add a basic first version of automatic bundle generation
    clone-bundles: garbage collect older bundle when generating new ones
    clone-bundles: only regenerate the clone bundle when cached ration is low
    clone-bundles: also control automation based on absolute number of revisions
    clone-bundles: add a configuration to control auto-generation on changes
    clone-bundles: introduce a command to refresh bundle
    clone-bundles: add a command to clear all bundles
    clone-bundles: add an option to generate bundles in the background
    clonebundles: add support for inline (streaming) clonebundles
    clonebundles: adds a auto-generate.serve-inline option
    match: add filepath: pattern to match an exact filepath relative to the root
    hgweb: add "children" into the JSON template for a changeset
    hgweb: add support to explicitly access hidden changesets
    pull: add --remote-hidden option and pass it through peer creation
    hidden: add support for --remote-hidden to HTTP peer
    hidden: support passing --hidden with serve --stdio
    hidden: add support to explicitly access hidden changesets with SSH peers
    perf: introduce a perf::stream-locked-section command
    perf: add a function to find a stream version generator
    perf: add support for stream-v3 during benchmark
    perf: add a perf::stream-generate command
    perf: add a perf::stream-consume
    cli: make debugnodemap capable of inspecting an arbitrary nodemap
    rust: configure MSRV in Clippy
    rhg: make rhg files work if ui.relative-files=true is specified
    rhg: support rhg files with ui.relative-paths=false
    rhg: support status --print0
    tree-manifest: allow debugupgraderepo to run on tree manifest repo
    library: enable runpy invocation on mercurial package
    library: incorporate demandimport into runpy invocation
    exchange: allow passing no includes/excludes to pull()

New Experimental Features

    stream-clone: add an experimental v3 version of the protocol
    stream-clone: support streamv3 on the cli [hg bundle]

Bug Fixes

    mail: add a missing argument to properly override starttls
    bundle: include required phases when saving a bundle (issue6794)
    outgoing: fix common-heads computation from missingroots argument
    strip: do not include internal changeset in the strip backup
    bundle: abort if the user request bundling of internal changesets
    bundle: prevent implicit bundling of internal changeset
    encoding: avoid quadratic time complexity when json-encoding non-UTF8 strings
    sha1dc: Make sure SHA1DC_BIGENDIAN is set on Darwin/PowerPC
    zstd: hack include order to ensure that our zstd.h is found
    dirstate: better error messages when dirstate is corrupted
    stream-clone: avoid opening a revlog in case we do not need it
    treemanifest: make updatecaches update the nodemaps for all directories
    rust-hg-core: move from ouroboros to self_cell
    rust-dependencies: switch from users to whoami
    dirstate-v2: actually fix the dirstate-v2 upgrade race
    dirstate: avoid leaking disk space in hg debugrebuilddirstate
    clonebundles: add warning if auto-generate is enabled without formats
    win32mbcs: unbyteify some strings for py3 support
    rust-revlog: fix incorrect results with NULL_NODE prefixes
    rust-revlog: fix RevlogEntry.data() for NULL_REVISION

Backwards Compatibility Changes

    infinitepush: aggressively deprecated infinite push
    narrow: indicated the default of 'Yes' when confirming auto-remove-includes

Internal API Changes

    Store walk was reworked to fix small race conditions in stream-clone and
        greatly improve its API robustness and flexibility.

Miscellaneous

    Typechecking support was improved in a lot of places
    Removed more useless compat code for now unsupported Python versions
    Sped up zstd usage in Rust contexts
    revlog: add an exception hint when processing LFS flags without the extension
    ui: keep the progress bar around when writing if stdout is not a tty
    transaction: use a ".bck" extension for all backup file

(wiz)

doc: Updated net/dhcpcd to 10.0.2

(roy)

Import dhcpcd-10.0.2 with the following changes:
* OpenBSD: add RTM_DESYNC to route(4) filter.
* Linux: fix disabling of kernel RA autoconf
* Linux: Improve learning IPv6 address flags
* Linux: risc-v fix vendor error
* Linux: consider IFF_LOWER_UP and !IFF_DORMANT for LINK_UP
* BSD: When we get RTM_NEWADDR the interface must have IFF_UP
* BSD: Fix non INET6 builds
* DHCP: Don't enforce the message came port 67
* privsep: Allow zero length messages through
* dhcpcd: deal with HANGUP and EPIPE better
* dhcpcd: Fix waitip address family
* privsep: Check if we have a root process before sending it stuff
* privsep: Only unlink control sockets if we created them
* common: Improve valid_domain and check correct return
* common: Allow hwaddr_ntoa to print an empty string
* privsep: Send only what we have put in the buffer to script env

(roy)

audio/alsa-utils: fix broken build on Linux due to linker error.

(vins)

Added net/nagios-plugin-apachecerts version 0.6

Never miss a ceritificate expiration because you forgot to monitor ir.
This Nagios plugins checks certificate validity for a VirtualHost list
dumped from the local Apache configuration.

(manu)

Updated mbone/mdd to 20230428

Options were added to skip bytes at the beginning of the sent file, and
to stop after a certain amount of bytes has been sent.

(manu)

doc: Updated devel/py-tortoisehg to 6.4.5

(wiz)

py-tortoisehg: update to 6.4.5.

Changes not found.

(wiz)

doc: Updated security/py-pip-audit to 2.6.0

(wiz)

py-pip_audit: update to 2.6.0.

## [2.6.0]

### Added

* Added option to skip dependency resolution via `pip` with the `--disable-pip`
  flag. This option can only be used with hashed requirements files or when the
  `--no-deps` flag has been provided
  ([#610](https://github.com/pypa/pip-audit/pull/610))

(wiz)

doc: Updated net/filezilla to 3.65.0

(wiz)

filezilla: update to 3.65.0.

3.65.0 (2023-07-10)

+ Comparative search can now also be used if sorted by path
- Fixed an issue in comparative search in directories with uppercase letters

3.65.0-rc1 (2023-06-29)

- Fixed potential crashes
- Updated to libfilezilla 0.44.0

(wiz)

doc: Updated net/libfilezilla to 0.44.0

(wiz)

libfilezilla: update to 0.44.0.

0.44.0 (2023-06-28)

+ Exportable hash accumulator state
+ Add for RSA key support for JWS
+ JWT creation
+ Conversion functions from X.509 private keys to JWK
- Added logging when certificate is untrusted by system trust store

0.43.0 (2023-05-26)

+ Added fz::tls_layer::generate_cert_from_csr
- fz::event_loop performance improvements when timers are in use

(wiz)

doc: Updated multimedia/svt-av1 to 1.5.0

(wiz)

svt-av1: update to 1.5.0.

## [1.5.0] - 2023-04-25

Encoder
- Optimize the tradeoffs for M0-M13 speeding up M5-M1 by 15-30% and improving the BDR of M6-M13 by 1-3%
- Create a new preset MR (--preset -1) to be the quality reference
- Optimize the tradeoffs for M8-M13 in the low delay encoding mode (!2052 !2096 and !2102) for SC and non-SC modes
- Add dynamic minigop support for the random access configuration enabled by default in M9 and below
- Add support to allow users to specify lambda scaling factors through the commandline
- Rewrite the gstreamer plugin and updating it to be uptodate with the latest API changes
- Add skip frames feature allowing the user to start encoding after n frames in the file
- Add ability to specify a smaller startup minigop size for every gop to enable faster prefetching
- Fix segmentation support and re-enable it with --aq-mode 1 to allow work on the region of interest API
- Add padding bytes to the EbSvtAv1EncConfiguration configuration structure keep its size unchanged until v2.0

Build, Cleanup and Documentation
- Major cleanups for unused variables, static functions, and comments formatting
- Reduce the size of variables
- Refine app level parsing and reference scaling API calls in the application
- Add dynamic minigop documentation along with updating the documentation accordingly

(wiz)

doc: Updated textproc/tree-sitter-cmake to 0.4.0

(wiz)

tree-sitter-cmake: update to 0.4.0.

feat: put arguments in argument_list node
feat: put the body of commands into a body node
refactor: use C for the external scanner (#16)

(wiz)

doc: Updated graphics/zxing-cpp to 2.1.0

(wiz)

zxing-cpp: update to 2.1.0.

Major Changes

    Considerable performance improvements in linear symbol detection (up to 2x speedup in select use cases of ReadBarcodes)
    QRCode: major improvement in detection of high version symbols (see e.g. here)
    DMDetector: reduce runtime overhead of c++-20 builds by around 50%
    Refactor Python wrapper so the sdist includes the core library code by @stumpylog in #530
    wasm wrapper: add function to reader to scan multiple barcode by @Trim in #567
    Added a C wrapper by @siiky in #553. If you find this useful, please have a look at #583.
    new BUILD_EXPERIMENTAL_API cmake option (currently enabling DecodeHints::tryDenoise feature, see 9bcfdb3)
    [EDIT: just noticed that this does not work, see 8202a4e]

Minor Changes

    fix crash when the source image is less than 3 pixels width/height by @liulex in #476
    Android: Enable the saving of images to the phone gallery. by @Sergio- in #483
    WASM wrapper: add symbologyIdentifier into result by @AlexXiong-dev in #576
    CI: build universal2 python module for macos
    Python: compile module with c++20 (position independend DataMatrix support) by default
    Python: improve error reporting
    DMDetector: fix potential dead-lock
    DMDecoder: support 144x144 symbols in legacy and compliant variants
    UPC/EAN: reduce right quiet zone requirement -> fix non-conformant input
    EAN/UPCA: include AddOn in position calculation
    MSVC build option cleanup
    WASM: simplify and cleanup demo_*.html files
    Updated live web demos to latest code (and setup semi-automatic gh-page creation for the future)
    a bunch of minor bug fixes

(wiz)

doc: Updated print/py-pspdfutils to 3.0.6

(wiz)

py-pspdfutils: update to 3.0.6.

Fix Homepage link, and restrict PyPDF to 3.10.x for now, until
later versions can be validated.

(wiz)

doc: Updated misc/py-platformdirs to 3.9.1

(wiz)

py-platformdirs: update to 3.9.1.

3.9.1

unix: Optionally create the opinionated log/ in user_log_dir() by @kemzeb in #208

3.9.0

Added desktop folder by @lukacat10 in #200

(wiz)

doc: Updated textproc/py-pdf to 3.12.2

(wiz)

py-pdf: update to 3.12.2.

## Version 3.12.2, 2023-07-16

### Bug Fixes (BUG)
-  Accept calRGB and calGray color_spaces (#1968)
-  Process 2bits and 4bits images (#1967)
-  Check for AcroForm and ensure it is not None (#1965)

### Developer Experience (DEV)
-  Automate the release process (#1970)

(wiz)

py-supervisor: honor VARBASE in rc.d script

ride bump

(wiz)

doc: Updated sysutils/py-supervisor to 4.2.5nb1

(wiz)

py-supervisor: improvements for running this

Install example config file in expect location.
Adapt paths in example config for pkgsrc.
Add rc.d script and install it.

Bump PKGREVISION.

(wiz)

geography/gama: Move c++11 to FEATURES

configure checks for whether it needs to add --std, so there's no need
to fix it.

(There is an outstanding issue about upstream's mismatch with README
and configure, to be resolved upstream.)

(gdt)

Updated graphics/py-tifffile

(adam)

py-tifffile: updated to 2023.7.10

2023.7.10

- Increase default strip size to 256 KB when writing with compression.
- Fix ZarrTiffStore with non-default chunkmode.

2023.7.4

- Pass 4992 tests.
- Add option to return selection from imread.
- Fix reading OME series with missing trailing frames.
- Fix fsspec reference for WebP compressed segments missing alpha channel.
- Fix linting issues.
- Detect files written by Agilent Technologies.
- Drop support for Python 3.8 and numpy < 1.21 (NEP29).

(adam)

doc: Updated graphics/py-pillow_heif to 0.12.0

(wiz)

py-pillow_heif: update to 0.12.0.

## [0.12.0 - 2023-07-08]

This release is fully compatible with previous versions.

## Added

- (Heif) restored lost ability after `0.9.x` versions to open HDR images in 10/12 bit. #96

### Changed

- `libde265`(HEIF decoder) updated from 1.0.11 to 1.0.12 version. [changelog](https://github.com/strukturag/libde265/releases/tag/v1.0.12)
- `libheif` updated to `1.16.2`.

## Fixed

- Building from source when using `apt-repository ppa:strukturag/libheif`
- (Heif) `encode` function with `stride` argument correctly saves image.
- (Heif) HeifFile class created with `from_bytes` function with `stride` argument respect `stride` value during save.
- (Heif) HeifFile class created with `from_bytes` function with `stride` argument can correctly translate to numpy array.

(wiz)

doc: Updated textproc/py-pdf to 3.12.1

(wiz)

py-pdf: update to 3.12.1.

## Version 3.12.1, 2023-07-09

### Bug Fixes (BUG)
-  Prevent updating page contents after merging page (stamping/watermarking) (#1952)
-  % to be hex encoded in names (#1958)
-  Inverse color in CMYK images (#1947)
-  Dates conversion not working with Z00\'00\' (#1946)
-  Support UTF-16-LE Strings (#1884)

(wiz)

doc: Updated graphics/lensfun to 0.3.4

(wiz)

lensfun: update to 0.3.4.

Many new camers and lenses.

(wiz)

mirmake: fix typo in MESSAGE.

(vins)

doc: Updated fonts/py-fonttools to 4.41.0

(wiz)

py-fonttools: update to 4.41.0.

4.41.0 (released 2023-07-12)
----------------------------

- [fontBuilder] Fixed bug in setupOS2 with default panose attribute incorrectly being
  set to a dict instead of a Panose object (#3201).
- [name] Added method to ``removeUnusedNameRecords`` in the user range (#3185).
- [varLib.instancer] Fixed issue with L4 instancing (moving default) (#3179).
- [cffLib] Use latin1 so we can roundtrip non-ASCII in {Full,Font,Family}Name (#3202).
- [designspaceLib] Mark <source name="..."> as optional in docs (as it is in the code).
- [glyf-1] Fixed drawPoints() bug whereby last cubic segment becomes quadratic (#3189, #3190).
- [fontBuilder] Propagate the 'hidden' flag to the fvar Axis instance (#3184).
- [fontBuilder] Update setupAvar() to also support avar 2, fixing ``_add_avar()`` call
  site (#3183).
- Added new ``voltLib.voltToFea`` submodule (originally Tiro Typeworks' "Volto") for
  converting VOLT OpenType Layout sources to FEA format (#3164).

(wiz)

Updated devel/py-path, textproc/py-markdown2

(adam)

py-markdown2: updated to 2.4.9

python-markdown2 2.4.9

- Add `<thead>` tag to html-classes extra
- Fix link patterns extra matching against internal hashes
- Replace deprecated `optparse` with `argparse`
- Fix `_uniform_outdent` failing with empty strings
- Fix HTML elements not unhashing correctly
- Remove deprecated `imp` module
- Allow link patterns to be passed via extras dict
- Fix relative links not working in safe mode

(adam)

py-path: updated to 16.7.1

v16.7.1

Bugfixes
- Set ``stacklevel=2`` in deprecation warning for ``.text``.

v16.7.0

Features
- Added ``.permissions`` attribute.
- Require Python 3.8 or later.

(adam)

doc: Updated net/py-dns to 2.4.0

(wiz)

py-dns: update to 2.4.0.

Dnspython 2.4.0 is now available on PyPI. See What窶冱 New! Thank
you to all the contributors to this release. Special thanks to
Jakob Schlyter for writing zone signing code and also refactoring
the DNSSEC code to allow new algorithms to be added more easily.
Dnspython 2.4.0 requires Python 3.8 or later. Also note that this
release drops support for curio and requests (DoH is now done
exclusively with httpx).

(wiz)

doc: Updated multimedia/libva to 2.19.0

(wiz)

libva: update to 2.19.0.

version 2.19.0 - 04.Jul.2023
* docs: fix references and descriptions snf focyhrn mstkup
* ci: add build docs test
* win: change default driver search path to bindir
* win: rely on compiler to define link names
* add: Add mono_chrome to VAEncSequenceParameterBufferAV1
* add: Enable support for license acquisition of multiple protected playbacks
* fix: year for version 2.18.0 in NEWS
* fix: use secure_getenv instead of getenv
* trace: Improve and add VA trace log for AV1 encode
* trace: Unify va log message, replace va_TracePrint with va_TraceMsg.

(wiz)

Updated textproc/ugrep, lang/nodejs18

(adam)

ugrep: updated to 3.12.4

ugrep v3.12.4
Even faster search for common search patterns, such as sets of words, using additional SIMD AVX and neon/AArch64 intrinsics.

(adam)

nodejs18: updated to 18.17.0

Version 18.17.0 'Hydrogen' (LTS), @danielleadams

Notable Changes

Ada 2.0

Node.js v18.17.0 comes with the latest version of the URL parser, Ada. This update brings significant performance improvements
to URL parsing, including enhancements to the url.domainToASCII and url.domainToUnicode functions in node:url.

Ada 2.0 has been integrated into the Node.js codebase, ensuring that all parts of the application can benefit from the
improved performance. Additionally, Ada 2.0 features a significant performance boost over its predecessor, Ada 1.0.4,
while also eliminating the need for the ICU requirement for URL hostname parsing.

Web Crypto API

Web Crypto API functions' arguments are now coerced and validated as per their WebIDL definitions like in other Web Crypto API implementations.
This further improves interoperability with other implementations of Web Crypto API.

(adam)

xlockmore: comment out MASTER_SITE due to curl being blocked

(tnn)

Updated devel/py-pdm_backend, lang/py-findpython, devel/py-pdm, textproc/py-JWT

(adam)

py-JWT: updated to 2.8.0

v2.8.0

Changed
- Update python version test matrix

Added
- Add ``strict_aud`` as an option to ``jwt.decode``
- Export PyJWKClientConnectionError class
- Allows passing of ssl.SSLContext to PyJWKClient

(adam)

py-pdm: updated to 2.8.0

Release v2.8.0 (2023-07-15)

Features & Improvements

Support target python with other architectures.
Display the help information when running pdm directly.
Allow to change the python providers from the config. Support finding pythons from Rye installation location with the new findpython.
Option to save static URLs in the lockfile. By default only filenames are saved.

Bug Fixes

Fix a bug that egg-info directories are not removed completely, leading to incomplete distribution.
Skip distributions with wrong package meta information and duplicate path.
Avoid mistakenly passing command-line arguments while testing.
Fix a bug that lockfile groups are overwritten when running locking in a preceding step of pdm install.
Tolerate and actually ignore the local versions in version specifiers.
Fix a bug that shared cache cannot support overlapping namespace packages.

Documentation

Add notes about using custom venv path.

(adam)

py-findpython: updated to 0.3.1

0.3.1
Bug Fixes
Make GET_VERSION_TIMEOUT settable via env vars

0.3.0
feat: provider selector
feat: add support for RyeProvider
feat: Add way to filter providers
feat: add register_provider function and change ALL_PROVIDERS to a map
fix: don't import site-packages when running in-process scripts

(adam)

py-pdm_backend: updated to 2.1.4

2.1.4
Bug Fixes
Write version file for sdist build as well

(adam)

mk: Remove generic BUILDLINK_TRANSFORMs on Darwin.

While these were useful in helping many packages to build out of the box,
it ended up resulting in some packages installing broken configuration
files as their configure tests for supported flags were passing.

For example, ruby packages were shipping an rbconfig.rb with LDFLAGS
containing -Wl,--no-as-needed, resulting in any ruby software built
outside of pkgsrc that required a compiler always failing.

These will instead need to be added to packages on an individual basis
where appropriate.

(jperkin)

doc: Updated www/curl to 8.2.0

(wiz)

curl, libcurl-gnutls: update to 8.2.0

This release includes the following changes:

o curl: add --ca-native and --proxy-ca-native [24]
o curl: add --trace-ids [53]
o CURLOPT_MAIL_RCPT_ALLOWFAILS: replace CURLOPT_MAIL_RCPT_ALLLOWFAILS [5]
o haproxy: add --haproxy-clientip flag to set client IPs [23]
o lib: add CURLINFO_CONN_ID and CURLINFO_XFER_ID [54]

This release includes the following bugfixes:

o bufq: make write/pass methods more robust [21]
o build: drop unused/redundant `HAVE_WINLDAP_H` [25]
o cf-socket: don't bypass fclosesocket callback if cancelled before connect [114]
o cf-socket: move ctx declaration under HAVE_GETPEERNAME [91]
o cf-socket: skip getpeername()/getsockname for TFTP [65]
o checksrc: modernise perl file open [87]
o checksrc: quote the file name to work with "funny" letters [93]
o CI: brew fix for openssl in default path [116]
o CI: don't install impacket if tests are not run
o CI: enable parallel make in more builds
o circleci: install impacket & wolfssl 5.6.0 [1]
o cmake: add support for "unity" builds [13]
o cmake: make use of snprintf [102]
o cmake: stop CMake from quietly ignoring missing Brotli [81]
o configure: add check for ldap_init_fd [80]
o configure: fix run-compiler for old /bin/sh [4]
o configure: the --without forms of the options are also gone [79]
o connect-timeout.d: mention that the DNS lookup is included [85]
o curl.h: include <sys/select.h> for vxworks [78]
o curl: count uploaded data to stop at the originally given size [14]
o curl: return error when asked to use an unsupported HTTP version [113]
o curl_easy_nextheader.3: add missing open parenthesis examples [74]
o curl_log: evaluate log statement only when transfer is verbose [8]
o curl_mprintf.3: minor fix of the example
o curl_pushheader_byname/bynum.3: document in their own man pages [37]
o curl_url_set: enforce the max string length check for all parts [38]
o CURLOPT_AWS_SIGV4.3: remove unused variable from example [11]
o CURLOPT_INFILESIZE.3: mention -1 triggers chunked [55]
o CURLOPT_MIMEPOST.3: clarify what setting to NULL means [95]
o CURLOPT_SSH_PRIVATE_KEYFILE.3: expand on the file search [31]
o docs/libcurl/libcurl.3: cleanups and improvements [46]
o docs: add more .IP after .RE to fix indentation of generate paragraphs [82]
o docs: fix missing parameter names in examples [41]
o docs: update CURLOPT_UPLOAD.3 [63]
o docs: update HTTP3.md for newer ngtcp2 and nghttp3 [28]
o docs: use a space after RFC when spelling out RFC numbers [105]
o example/connect-to: show CURLOPT_CONNECT_TO [47]
o example/crawler: also set CURLOPT_AUTOREFERER [35]
o example/crawler: make it use a few more options
o example/default-scheme: set the default scheme for schemeless URLs [67]
o example/hsts-preload: show one way to HSTS preload [68]
o example/http2-download: set CURLOPT_BUFFERSIZE [34]
o example/ipv6: feature CURLOPT_ADDRESS_SCOPE in use [27]
o example/maxconnects: set maxconnect example [98]
o example/opensslthreadlock: remove [59]
o examples/ftpuploadresume.c: add use of CURLOPT_ACCEPTTIMEOUT_MS [39]
o examples/http-options: show how to send "OPTIONS *" [69]
o examples/https.c: use CURLOPT_CA_CACHE_TIMEOUT [19]
o examples/multi-debugcallback.c: avoid the bool typedef [29]
o examples/smtp-mime: use CURLOPT_MAIL_RCPT_ALLOWFAILS [71]
o examples/unixsocket.c: example using CURLOPT_UNIX_SOCKET_PATH [40]
o examples/websocket.c: websocket example using CONNECT_ONLY [17]
o examples: make use of CURLOPT_(REDIR_|)PROTOCOLS_STR [70]
o fopen: fix conversion warning on 32-bit Android [49]
o fopen: optimize [101]
o hostip.c: Move macOS-specific calls into global init call [104]
o HTTP/2: upload handling fixes [56]
o http2: better support for --limit-rate [7]
o http2: error stream resets with code CURLE_HTTP2_STREAM [84]
o http2: fix crash in handling stream weights [76]
o http2: fix variable type [50]
o http2: h2 and h2-PROXY connection alive check fixes [83]
o http2: raise header limitations above and beyond [73]
o http2: send HEADER & DATA together if possible [99]
o http2: treat initial SETTINGS as a WINDOW_UPDATE [100]
o HTTP3.md: update openssl version [57]
o http3/ngtcp2: upload EAGAIN handling [108]
o http: rectify the outgoing Cookie: header field size check [72]
o hyper: fix EOF handling on input [66]
o hyper: unslow [51]
o imap-append.c: update to make it more likely to work [106]
o imap: Provide method to disable SASL if it is advertised [75]
o krb5: add typecast to please Coverity
o libcurl-url.3: also mention CURLUPART_ZONEID
o libcurl-ws.3. WebSocket API overview [48]
o libssh2: provide error message when setting host key type fails [9]
o libssh2: use custom memory functions [12]
o ngtcp2: assigning timeout, but value is overwritten before used [103]
o ngtcp2: build with 0.17.0 and nghttp3 0.13.0 [96]
o ngtcp2: use ever increasing timestamp in io [32]
o quiche: avoid NULL deref in debug logging [97]
o quiche: fix defects found in latest coverity report [94]
o quote.d: fix indentation of generated paragraphs [86]
o runtests: abort test run after failure without -a [3]
o runtests: better handle ^C during slow tests
o runtests: consistently write the test check summary block
o runtests: create multiple test runners when requested [20]
o runtests: include missing valgrind package [89]
o runtests: make test file directories in log/N [44]
o runtests: rename server command file
o runtests: use more consistent failure lines
o runtests: work around a perl without SIGUSR1 [88]
o runtests; give each server a unique log lock file [43]
o scripts: Fix GHA matrix job detection in cijobs.pl
o sectransp: fix EOF handling [92]
o system.h: remove __IBMC__/__IBMCPP__ guards and apply to all z/OS compiles [10]
o test2600: fix the description [90]
o test427: verify sending more cookies than fit in a 8190 bytes line [61]
o tests/http: Add mod_h2 directive `H2ProxyRequests` [77]
o tests/servers.pm: pick unused port number with a server socket [16]
o tests/servers: generate temp names in /tmp for unix domain sockets [6]
o tests: fix error messages & handling around sockets [30]
o tests: improve reliability of TFTP tests
o testutil: allow multiple %-operators on the same line [62]
o timeval: use CLOCK_MONOTONIC_RAW if available [52]
o tls13-ciphers.d: include Schannel [36]
o tool: remove exclamation marks from error/warning messages
o tool: remove newlines from all helpf/notef/warnf/errorf calls [15]
o tool_easysrc.h: correct `easysrc_perform` for `CURL_DISABLE_LIBCURL_OPTION` [109]
o tool_getparam: fix comment [22]
o tool_operate: allow cookie lines up to 8200 bytes [60]
o tool_parsecfg: accept line lengths up to 10M [115]
o tool_urlglob: use curl_off_t instead of longs [2]
o tool_writeout_json: fix encoding of control characters [107]
o transfer: clear credentials when redirecting to absolute URL [64]
o urlapi: have *set(PATH) prepend a slash if one is missing [42]
o urlapi: scheme must start with alpha [26]
o vtls: avoid memory leak if sha256 call fails [58]
o websocket-cb: example doing WebSocket download using callback [18]
o wolfssl: detect when TLS 1.2 support is not built into wolfssl [111]
o wolfssl: support setting CA certificates as blob [110]
o ws: make the curl_ws_meta() return pointer a const [45]

(wiz)