security/ruby-metasploit-payloads: update to 2.0.149

2.0.149 (2023-07-11)

* Land #667, fix androidpayload dump_contacts failing on Android 10 or
  higher

(taca)

doc: Updated mail/postfix to 3.8.1

(otis)

postfix: Update to 3.8.1

Major changes with Postfix 3.8.1
================================

- Security: the Postfix SMTP server optionally disconnects remote SMTP clients
  that violate RFC 2920 (or 5321) command pipelining constraints. The server
  replies with "554 5.5.0 Error: SMTP protocol synchronization" and logs the
  unexpected remote SMTP client input. Specify "smtpd_forbid_unauth_pipelining
  = yes" to enable. This feature is enabled by default in Postfix 3.9 and
  later.

- Workaround to limit collateral damage from OS distributions that crank up
  security to 11, increasing the number of plaintext email deliveries. This
  introduces basic OpenSSL configuration file support, with two new parameters
  "tls_config_file" and "tls_config_name". Details are in the postconf(5)
  manpage under "tls_config_file" and "tls_config_name".

Full release notes:
http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.8.1.RELEASE_NOTES

(otis)

doc: Updated print/ruby-rbpdf to 1.21.3

(taca)

print/ruby-rbpdf: update to 1.21.3

1.21.3 (2023-07-15)

* Javascript Form & XHTML Form support (#84)

(taca)

doc: Updated devel/ruby-rspec-mocks to 3.12.6

(taca)

devel/ruby-rspec-mocks: update to 3.12.6

3.12.6 (2023-07-11)

Bug Fixes:

* Fix an issue with and_call_original when using the method_missing fallback
  with keyword arguments. (Igor Drozdov, #1552)

(taca)

doc: Updated devel/ruby-rgl to 0.6.6

(taca)

devel/ruby-rgl: update to 0.6.6

0.6.6 (2023-07-10)

* Bump GoogleCloudPlatform/release-please-action from 2 to 3 (#120, #122)
  (3e804d4)

(taca)

doc: Updated devel/ruby-parser to 3.20.3

(taca)

devel/ruby-parser: update to 3.20.3

3.20.3 (2023-07-11)

2 minor enhancements:

* Added Parser#in_argdef and integrated into 3.x parsers.
* Improved tools/munge.rb to handler MRI 3.2 output

2 bug fixes:

* Fixed process_dots to properly deal with paren-less forward_args. (eric1234)
* Fixed tools/ripper.rb to properly print ripper sexp at the end

(taca)

doc: Updated devel/ruby-minitest to 5.18.1

(taca)

devel/ruby-minitest: update to 5.18.1

3 bug fixes:

* Avoid extra string allocations when filtering tests. (tenderlove)
* Only mention deprecated ENV if it is an integer string.
* Push up test_order to Minitest::Runnable to fix minitest/hell. (koic)

(taca)

Revbump all Go packages after go120 update

(bsiegert)

doc: Updated lang/go120 to 1.20.6

(bsiegert)

go120: update to 1.20.6 (security)

This minor release includes 1 security fix following the security policy:

net/http: insufficient sanitization of Host header

The HTTP/1 client did not fully validate the contents of the Host header. A
maliciously crafted Host header could inject additional headers or entire
requests. The HTTP/1 client now refuses to send requests containing an invalid
Request.Host or Request.URL.Host value.

Thanks to Bartek Nowotarski for reporting this issue.

Includes security fixes for CVE-2023-29406 and Go issue
https://go.dev/issue/60374

(bsiegert)

doc: Updated lang/go119 to 1.19.11

(bsiegert)

go119: update to 1.19.11 (security)

This minor release includes 1 security fix following the security policy:

net/http: insufficient sanitization of Host header

The HTTP/1 client did not fully validate the contents of the Host header. A
maliciously crafted Host header could inject additional headers or entire
requests. The HTTP/1 client now refuses to send requests containing an invalid
Request.Host or Request.URL.Host value.

Thanks to Bartek Nowotarski for reporting this issue.

Includes security fixes for CVE-2023-29406 and Go issue
https://go.dev/issue/60374

(bsiegert)

doc: Updated graphics/ruby-cairo to 1.17.12

(tsutsui)

ruby-cairo: update to 1.17.12.

Upstream changes (from NEWS):

Release 1.17.12 (2023-06-17) Sutou Kouhei <kou@cozmixng.org>
============================================================

Improvements
------------

  * Added support for Gentoo Linux.

Fixes
-----

  * Fixed ALT Linux dependencies.

Release 1.17.11 (2023-06-16) Sutou Kouhei <kou@cozmixng.org>
============================================================

Improvements
------------

  * Added support for ALT Linux.

Fixes
-----

  * Fixed conda dependencies.

Release 1.17.10 (2023-06-16) Sutou Kouhei <kou@cozmixng.org>
============================================================

Improvements
------------

  * Added missing dependency packages for conda.

Release 1.17.9 (2023-06-14) Sutou Kouhei <kou@cozmixng.org>
===========================================================

Improvements
------------

  * Dropped support for fat gem.
    [GH-78][https://github.com/rcairo/rcairo/issues/78]
    [Reported by Largo]

  * Added support for auto native package installation with conda.

  * Added support for cairo 1.17.8:

    * Added Cairo::SVGFontError.

    * Added Cairo::ColorMode.

    * Added Cairo::FontOptions#color_mode.

    * Added Cairo::FontOptions#color_mode=.

    * Added Cairo::ColorPalette.

    * Added Cairo::FontOptions#color_palette.

    * Added Cairo::FontOptions#color_palette=.

    * Added Cairo::FontOptions#set_custom_palette_color.

Fixes
-----

  * Fixed the number of arguments of Cairo::GLSurface#initialize and
    Cairo::GLTextureSurface#initialize.
    [GH-79][https://github.com/rcairo/rcairo/issues/79]
    [Patch by Dimitry Andric]

Thanks
------

  * Largo

  * Dimitry Andric

(tsutsui)

doc: Updated shells/oh-my-posh to 17.11.2

(pin)

shells/oh-my-posh: update to 17.11.2

v17.11.2
Bug Fixes
- os: use correct Android platform name (1f28305)

v17.11.1
Bug Fixes
- android: update version based on bash capabilities (9b011b4)

v17.11.0
Bug Fixes
- android: correct version number trimming (2bfd08e)

Features
- kubectl: specify context aliases (b27608d)

v17.10.0
Features
- build for android (7d5c731)

(pin)

gimp: Restore patch-ab to fix CC_VERSION variable

(ryoon)

doc/pkgsrc.*: regen

(gutteridge)

gnustep-base: drop redundant commented-out PKGREVISION

(Which was right above another, active PKGREVISION of the same value.
Seems like a scripting issue.)

(gutteridge)

doc: Updated wm/enlightenment16 to 1.0.28

(gutteridge)

enlightenment16: update to 1.0.28

e16 v1.0.28 - 2023-07-13
------------------------
- 1.0.28
- Update po
- Fix a couple of bugs in new quoting/comment handling
- bindings: Handle quoting in AclassConfigLineParse()
- ipc: Avoid potential crash in AclassConfigParseIpc()
- Move some string handling functions around
- eesh: Workaround problem with _FORTIFY_SOURCE=3
- events: Fetch events also when blocked
- events: Separate event fetching and processing
- events: Change some variable names
- eesh: Trivial cleanups
- GSOD: Ungrab server before opening new connection
- startup: Only repaint if animating
- desks: Prevent nested desk switches
- Revert "ewins: Remove redundant container window move"
- menus: Expose option to show/hide menu icons in configuration dialog
- e_gen_menu.pl: Fix for new IPC parser
- Add missing include
- cursors: Rework cursor creation
- cursors: Mostly cosmetic function name changes
- cursors: Mostly cosmetic adjustments around fore/background colors
- extinitwin: Move null cursor definition to separate function
- eimage: Split EImageDefineCursor
- Some include tweaks
- matches.cfg: Ignore virtualbox move requests
- pagers: Avoid some overhead
- Forgot some 2022
- ewins: Tweak spurious MapRequest handling
- ewins: Remove redundant container window move
- memory.c: Consistently use EMALLOC()
- focus: Keep focus when un-fullscreened

(gutteridge)

Updated graphics/gimp, net/glib-networking

(adam)

glib-networking: updated to 2.76.1

2.76.1 - June 29, 2023
- Fix proxy tests when built against libproxy 0.5
- Updated translations

2.76.0 - March 17, 2023
- Fix OpenSSL sessions becoming unresumable
- Fix installed libproxy test

(adam)

gimp: updated to 2.10.34

Overview of Changes from GIMP 2.10.32 to GIMP 2.10.34
=====================================================

Core:

  - Check for updates now works on macOS (backported from 2.99.14).
  - Update help IDs for better integration with the documentation website.
  - Symmetry dockable contents is now shown, yet deactivated, when no images are
    opened, improving discoverability (backported from 2.99.14).
  - DBus fully disabled on macOS (in some case, it could even freeze GIMP
    process when dbus is present yet not responding). Open With feature (e.g.
    from file browsers) still work fine as it uses a different code path on
    macOS. Other features using dbus (opening files or running batch commands
    from a separate GIMP process) won't work, but they probably never did on
    macOS anyway.
  - "Canvas Size" dialog took too much vertical space and now better uses the
    horizontal space by moving the preview and offset fiels to the right side,
    and the "Center" button just below (backported from 2.99.8).
  - Template selector (backported from 2.99.6) in resize dialog.
  - Color scale preferences (0..255/0..100 and LCh/HSV settings in Colors
    selection dialogs) are now remembered across sessions.
  - Eye icon header added to the item tree views to make it more obvious where
    to click for item visibility and links (backported from 2.99.10)
  - Revert color proofing behavior changed in 2.10.32 which resulted in
    inconsistent past workflows.
  - "Lock path strokes" tooltip for the dockable icon was renamed "Lock path".

Plug-ins:

  - DDS: make GUI translatable.
  - file-raw: added high bit depth precision export (partial backport from
    2.99.12).
  - TIFF:
    * Various bug fixes;
    * better check for invalid resolutions on import;
    * do not generated warnings for incorrect RichTIFFIPTC tags produced by
      Adobe products (only output a message to stderr, for not completely
      ignoring these);
    * Loading "reduced" image or not is now an option. We use a heuristic for
      the default value of said option (trying to guess if it's a thumbnail by
      using common usage), but final decision is now up to one knowing the image
      you load (backported from 2.99.14);
    * Default TIFF export format is "normal" TIFF, not BigTIFF (making it
      default was definitely an error in 2.10.32).
  - PSD:
    * Various bug fixes;
    * Useless physical unit conversion removed;
    * Backported improvement (2.99.10) for importing layers with clipping set
      (leading to color bleeding);
    * Backported improvements (2.99.10) for importing clipping layers;
    * Paths are now exported (backported from 2.99.14).
  - WebP: more informative error messages in some cases.
  - Flame: various bug fixes.
  - JPEG-XL:
    * metadata import backported from 2.99.14 - (requires libjxl 0.7.0)
    * Partial backport (2.99.8) of JPEG-XL export; export is always in 8bit
      lossless.
  - HEIF: various bug fixes.
  - Dicom: various bug fixes.
  - help:
    * macOS: https support now working fine for help files (bypassing
      lack of support in GIO for macOS platform).
  - animation-play: fixed on macOS.
  - PDF:
    * Import: new option "Fill transparent areas with white" to fill the
      background in white (ON by default as most office PDF writers seem to rely
      on readers filling the background with white), allowing importing
      transparent PDF files.
    * Export: new option "Fill transparent areas with background color" allowing
      to decide whether to export a PDF with transparent background.
  - TGA:
    * Added a workaround to load wrongful TGA files exported by Krita (which
      they fixed on their side too now, see Krita bug 464484).
  - ICO and CUR:
    * Magics detection for these formats has been removed (now using only using
      filename extension) because it was interfering with the detection of
      certain types of TGA images (which are likely more common than ICO and CUR
      files, and extension for these should be reliable enough).

Libgimpbase:

  - GimpMetadata API (in particular the gimp_metadata_set_from_*() functions)
    are now much less memory-hungry (backported from the main dev branch) when
    using GExiv 0.12.2 or over. With some huge metadata, it could cause long
    freeze or even crashes of plug-ins.

Libgimpwidgets:

  - Color-picking with X11 is now the default when compiled with X11, even if a
    color-picking portal also exists, because it is always right, whereas
    portals return color in display space without the space information itself
    (i.e. without profiles).
  - New dedicated GimpPickButton implementation for Windows (backported from
    2.99.14).

Libgimp:

  - New wrapper functions around GEGL ops, which also map to items in our Color
    menu:
    * gimp_drawable_shadows_highlights()
    * gimp_drawable_extract_component()

Build:

  - Bumping minimum GEGL to version 0.4.38.
  - Bumping minimum libjxl to version 0.7.0.
  - New GIMP_RELEASE macro to tell if code is a release or in-between release
    (different from GIMP_UNSTABLE which was telling if we are in a stable or
    development branch).
  - Our stable CI now uses Debian stable where Python2 is still present.

(adam)

gimp: Fix configure with graphics/babl-0.1.106

(ryoon)

p5-DBD-MariaDB: use MARIADB_VERSIONS_ALL

(nia)

mk: Add a MARIADB_VERSIONS_ALL variable

The intent of this variable is that it can be used as a value for
MYSQL_VERSIONS_ACCEPTED if a package wants to indicate that it only
accepts MariaDB.

(nia)

Add mariadb1011 to MYSQL_VERSIONS_ACCEPTED for p5-DBD-MariaDB

(abs)

doc: Updated devel/pycharm-bin to 2022.1.4

(hauke)

Update devel/pycharm-bin to 2022.1.4

Newer versions are built with a java version newer than what we ship,
leading to binary incompatibility.

This version breaks with java 17, see
<https://intellij-support.jetbrains.com/hc/en-us/community/posts/5961640280210-Can-t-start-IntelliJ-Idea-Error-LinkageError-occurred-while-loading-main-class-com-intellij-idea-Main>,
and unfortunately the pkgsrc USE_JAVA2 is "version N or newer", which
does not help here.

Changes are too numerous to list, see
<https://youtrack.jetbrains.com/articles/PY-A-233537986/PyCharm-2022.1.4-221.6008.17-build-Release-Notes> etc.
("Neue Schraube! Ganz neue Schraube!")

(hauke)

doc: Updated shells/oh-my-posh to 17.9.1

(pin)

shells/oh-my-posh: update to 17.9.1

Bug Fixes
- azure: correct Azure icon (bce149b), closes #4056

(pin)

nmap: Add missing climits header inclusion. Spotted in SunOS bulk build.

(nia)

powerdns: include stdexcept for std::runtime_error. Spotted in the SunOS
bulk build.

(nia)

bulk-test-essential: PKG_JVM_DEFAULT is not necessarily set. Use the
internal variable to ensure this package gets built regardless.

(nia)

doc: Updated x11/xlockmore-lite to 5.72

(micha)

doc: Updated x11/xlockmore to 5.72

(micha)

x11/xlockmore: Update to 5.72

5.72
  Update for OpenVMS for x86_64, small change to xshm.h and new make.com
    to work with clang and xmlock/xawlock thanks to Jouk Jansen.  I hear
    its now possible to get a virtual OpenVMS on your Linux machine. :)
  Update for xscreensaver-6.06 port to use grabclient instead of
    grabscreen.
  configure now configures xmlock for Athena if you do not want Motif.
    Should work with most popular versions of Athena.  You may want
    to change the name from xmlock to xawlock if you are using Athena.
    xawlock directory removed and was not meant to be distributed.

(micha)

devel/ecore: Fix build with GCC 10

(pho)

wm/ccsm: Fix an issue where CCSM displays no text or icons

(pho)

Updated graphics/babl, graphics/gegl

(adam)

gegl: updated to GEGL-0.4.46 2023-06-1x

Core:

New simpler API for connecting pads, gegl_node_connect which can be
used instead of either gegl_node_connect_from or gegl_node_connect_to
by autosensing the neccesary direction of the connection.

Operations:

Clean up various bits of ill or undefiend code based on stricter
compiler warnings.

Use gegl_node_connect in all ops.

ff-load,ff-save: clean up of deprecated API - hope fully covering more
ffmpeg versions.

New operation: adaptive-threshold, this is equivalent to doing an
unsharp mask with a large radius, followed by scaling the image up
applying threshold and scaling down by the inverse. The scalings are
only done if antialias is higher than 1. To speed up processing the
first thing done in the graph is conversion to grayscale.

Updated vendored libraries

ctx and libnsgif have been updated from upstream.

Build:

  • Depend on meson 0.55.0

  • various cleanups including re-enabling of deprecation warnings.

  • make ctx be an internal library.

GEGL-0.4.44 2023-03-26

GeglBuffer:

Fixed a invalid free that gets umasked by GLib 2.75.3 and newer.

ctx:

Updated vendored library from upstream.

GEGL-0.4.42 2023-02-20

Operations:

  • raw-load: add conditional support for 0.21.0 API

  • rgb-clib: improved ui-ranges

  • perlin, mosiac, c2g, long-shadow: small cleanups

  • gif-load: update vendored dependency, including code updates.

Build:

  • keeping up with babl0.4.46

(adam)

babl: updated to 0.1.106

babl-0.1.106
Disable LUTs on big-endian, fix to 1bpp->4bpp LUTs, faster startup by caching
balanced RGB to XYZ matrices.

babl-0.1.104
LUT code-paths re-enabled, some array overflow proofing.

babl-0.1.102
Brown paper bag release - LUT code-paths now disabled by default.

babl-0.1.100
Stop double processing with LUT+normal fishes.
Support for non-ASCII characters in file paths on windows. Improved wrap build
support.

(adam)

devel/libcompizconfig: Fix a run-time issue on platforms without native inotify

This is probably an upstream issue. Its "configure" script can correctly
find our libinotify headers but doesn't pass -linotify to the linker. This
makes the resulting .so unloadable.

(pho)

doc: Updated x11/xeyes to 1.3.0

(wiz)

xeyes: update to 1.3.0.

xeyes is a simple utility used by X users to help them find lost cursors,
and by Wayland users to help see which windows are run via Xwayland vs.
natively.

This release adds a -biblicallyAccurate option for extra amusement.

Alan Coopersmith (8):
      gitlab CI: add a basic build test
      Build xz tarballs instead of bzip2
      Fix spelling/wording issues
      man page: remove out-of-date reference to X(7)
      gitlab CI: stop requiring Signed-off-by in commits
      Add -help & -version options
      Print which argument was unknown before giving usage message
      xeyes 1.3.0

Serge Bazanski (1):
      Implement multi-ocular support, add biblical example

(wiz)

graphics/MesaLib: Work around an issue with xf86-video-vmware

(pho)

sysutils/open-vm-tools/MESSAGE.x11: Clarify that clipboard synchronization also requires that vmtoolsd is running

(pho)

doc: Added www/seaward version 1.0.1

(pin)

Add seaward

(pin)

www/seaward: import package

Seaward is a crawler used to discover every link on a web page and its linked
pages without duplicates or to search for a word starting from the given URL.

If you want to save the links inside a file, you can run
'seaward <URL> --silent > file.txt', and if you experience many timeout errors
try using a higher timeout with '-t'.
With the '-d 0' option you crawl only the web page passed in the URL parameter,
with '-d 1' also the pages linked to it (always within the same web site) and
so on.

(pin)

doc: Added audio/spotifyd version 0.3.5

(pin)

Add spotifyd

(pin)

audio/spotifyd: import package from wip

Packaged by base in wip with work from tnn.

An open source Spotify client running as a UNIX daemon. Spotifyd streams music
just like the official client, but is more lightweight and supports more
platforms. Spotifyd also supports the Spotify Connect protocol which makes it
show up as a device that can be controlled from the official clients.

Spotifyd requires a Spotify Premium account.

(pin)

doc: Updated misc/tui-journal to 0.3.0

(pin)

misc/tui-journal: update to 0.3.0

What's Changed
- Fixed: Prevent release generation in forks by @kevinmatthes in #86
- Added: Add package name to CHANGELOG assembly workflow by @kevinmatthes in #85
- Changed: Call Docker images of linters directly by @kevinmatthes in #89
- Fixed: Fix Release action using MakeFile by @AmmarAbouZor in #97
- Added: Fuzzy Finder for Journals by @AmmarAbouZor in #105
- Added: Fuzzy Find Demo by @AmmarAbouZor in #107

(pin)

doc: Updated sysutils/felix to 2.5.0

(pin)

sysutils/felix: update to 2.5.0

v2.5.0 (2023-07-13)
Added
- Ability to exit to LWD (last workind directory): See Integrations for
  details.

(pin)

doc: Updated devel/cargo-c to 0.9.21

(pin)

devel/cargo-c: update to 0.9.21

Pin crates-io to 0.36.0

(pin)

doc: Updated devel/difftastic to 0.48.0

(pin)

devel/difftastic: update to 0.48.0

0.48 (released 12th July 2023)
Parsing
- Updated Scala parser.
- Improved parsing of qualified modules and variables in Haskell.

Diffing
- Replaced strings now have subword highlighting, consistent with replaced
  comments. Thanks @amnore!
- Fixed an issue with the cost model for comment replacement, leading
  difftastic to prefer modified comments even when exact comment matches are
  possible.
- Simplified the cost model, which previously had an inconsistent heuristic
  depending on whether there were multiple items on the same line. This can
  lead to slightly different items being marked as changed, but on average the
  results are better.

Display
- Improved word highlighting in comments when they contain numbers or hyphens.

Internals
- Difftastic's logging is now configured with the environment variable DFT_LOG.
  This was previously RUST_LOG, which could interfere with users configuring
  logging for their own development work.

(pin)

gdb: Do not support Apple M1

(triaxx)

doc: Updated www/ap2-perl to 2.0.12nb3

(jperkin)

ap2-perl: Fix runtime symbol issue with newer perl.

Bump PKGREVISION.

(jperkin)

doc: Removed misc/jive

(nia)

remove misc/jive

This is dead upstream, abuses make variables, and has limited practical
use.  Humour has moved on quite a lot since 90s usenet.

ok pkgsrc-pmc@

(nia)

doc: Updated security/xml-security-c to 2.0.4

(pho)

security/xml-security-c: Update to 2.0.4

--
October 2021

Version 2.0.3 of the Apache XML Security for C++ library has been
released. This release adds support for OpenSSL 3.0.0, though using a
number of now-deprecated function calls.

--
November 2021

Version 2.0.4 of the Apache XML Security for C++ library has been
released. This release fixes a regression in 2.0.3 allowing the code to
build on pre-1.1 OpenSSL versions.

(pho)

Updated net/wireshark, archivers/py-zipp

(adam)

py-zipp: updated to 3.16.1

v3.16.1

Bugfixes
- Replaced the ``fnmatch.translate`` with a fresh glob-to-regex translator for more correct matching behavior.

(adam)

wireshark: updated to 4.0.7

Wireshark 4.0.7 Release Notes

What’s New

  We do not ship official 32-bit Windows packages for Wireshark 4.0 and
  later. If you need to use Wireshark on that platform, we recommend
  using the latest 3.6 release. Issue 17779[1]

  If you’re running Wireshark on macOS and upgraded to macOS 13 from an
  earlier version, you might have to open and run the “Uninstall
  ChmodBPF” package, then open and run “Install ChmodBPF” in order to
  reset the ChmodBPF Launch Daemon. Issue 18734[2].

  Bug Fixes

  The following vulnerabilities have been fixed:

    • wnpa-sec-2023-21[3] Kafka dissector crash. Issue 19105[4].

    • wnpa-sec-2023-22[5] iSCSI dissector crash. Issue 19164[6].

  The following bugs have been fixed:

    • Crash when (re)loading a capture file after renaming a dfilter
      macro. Issue 13753[7].

    • Moving a column deselects selected packet and moves to beginning
      of packet list. Issue 16251[8].

    • If you set the default interface in the preferences, it doesn’t
      work with TShark. Issue 16593[9].

    • Severe performance issues in Follow → Save As raw workflow. Issue
      17313[10].

    • TShark doesn’t support the tab character as an aggregator
      character in \"-T fields\" Issue 18002[11].

    • On Windows clicking on a link in the 'Software Update' window
      launches, now unsupported, MS Internet Explorer. Issue 18488[12].

    • Wireshark 4.x.x on Win10-x64 crashes after saving a file with a
      name already in use. Issue 18679[13].

    • NAS-5GS Operator-defined Access Category: Multiple Criteria
      values not displayed in dissected packet display. Issue
      18941[14].

    • Server Hello Packet Invisible - during 802.1x Authentication-
      from Wireshark App Version 4.0.3 (v4.0.3-0-gc552f74cdc23) &
      above. Issue 19071[15].

    • TShark reassembled data is incomplete/truncated. Issue 19107[16].

    • CQL protocol parsing issues with `Result` frames from open source
      Cassandra. Issue 19119[17].

    • TLS 1.3 second Key Update doesn’t work. Issue 19120[18].

    • HTTP2 dissector reports an assertion error on large data frames.
      Issue 19121[19].

    • epan: Single letter hostnames aren’t displayed correctly. Issue
      19137[20].

    • BLF: CAN-FD-Message format is missing a field. Issue 19146[21].

    • BLF: last parameter of LIN-Message is not mandatory (BUGFIX)
      Issue 19147[22].

    • PPP IPv6CP: Incorrect payload length warning. Issue 19149[23].

    • INSTALL file needs to be updated for Debian. Issue 19167[24].

    • Some RTP streams make Wireshark crash when trying to play stream.
      Issue 19170[25].

    • Wrong ordering in OpenFlow 1.0 Datapath unique ID. Issue
      19172[26].

    • Incorrect mask in RTCP slice picture ID. Issue 19182[27].

    • Dissection error in AMQP 1.0. Issue 19191[28].

  New and Updated Features

  There are no new or updated features in this release.

  Removed Features and Support

  New Protocol Support

  There are no new protocols in this release.

  Updated Protocol Support

  9P, AMQP, BGP, CQL, DHCPFO, EAP, GlusterFS, GSM MAP, HTTP2, iSCSI,
  Kafka, Kerberos, NAN, NAS-5GS, OCP.1, OpenFlow 1.0, PDCP-NR, PEAP,
  PPPoE, RSL, RTCP, rtnetlink, and XMPP

(adam)

Updated www/nghttp2, www/nghttp2-tools, lang/vala, www/libproxy

(adam)

libproxy: updated to 0.5.3

0.5.3
Fix crash querying URLs without a host
Web: Update application page
Add appplication info about apt and python requests
Bump version to 0.5.3

(adam)

vala: updated to 0.56.9

Vala 0.56.9
===========
* Various improvements and bug fixes:
  - codegen: Add missing EXTERN flag for GType function of error domains
  - codegen: Improve handling of sealed classes
  - vala: Report an error when trying to chain up to inaccessible private
    ctor
  - vala: Fix spaces for attributes when writing property accessors
  - girwriter: Fix c:type attribute for real struct parameters
  - testrunner: Add support to check generated header
  - manual: Update from wiki.gnome.org

* Bindings:
  - gio-2.0: Ease implemention of GLib.ActionGroup
  - glib-2.0: Fix return-type of GLib.SourceOnceFunc
  - glib-2.0: Add ConvertError.{NO_MEMORY,EMBEDDED_NUL}
  - gtk4: Pick up fix for Gdk.Toplevel.compute_size.size parameter
  - vapi: Add documentation to GLib.Math that '-X -lm' may be needed when
    compiling

(adam)

nghttp2, nghttp2-tools: updated to 1.55.0

Nghttp2 v1.55.0

build

The following dependencies have been updated:

ngtcp2
nghttp3
BoringSSL
This release fixes build error without libev.

third-party

llhttp has been updated.

Cross-compiling mruby is now supported.

nghttpx

UDP_GRO is enabled for QUIC socket.

The initial QUIC packet number is now randomized.

h2load

UDP_GRO is enabled for QUIC socket.

(adam)

*: Revert two recent commits that dropped a cwrappers-enforced C++ standard
by packages that already use -std=c++XX until the discussion about C++
standard versions is resolved.

Requested by pkgsrc-pmc@.

(nia)

*: Remove all instances of GCC_REQD where my name is the most recent
in 'cvs annotate' (part 2)

(nia)

*: remove all instances of GCC_REQD where my name is the most recent in
"cvs annotate" (part 1)

Hopefully this commit can be reviewed later if a better replacement
for GCC_REQD is committed.

(nia)

doc/guide: sync binary package creation with reality

For many years now, binary packages have been created before installing
them.

(rillig)

doc/guide: Remove description of GCC_REQD - mostly reverts r1.171.

Requested by pkgsrc-pmc@.

(nia)

This Pycharm version is a bit long in the tooth, and breaks on Java
17, limit the version range.

Remove deprecated VM option.

(hauke)

zabbix60-server: Assumes compiler defaults to c99.

(nia)

py-django, py-django14, py-django2: remove old django versions

Unsupported upstream (support ended 2020, 2013, 2022 resp.)

As proposed on pkgsrc-users on July 3.

(wiz)

*: switch django users to py-django3

(wiz)

py-easy-thumbnails: drop support for Python 2

(wiz)

py-django-appmedia: remove

Dead upstream since 2010, only supports Python 2, no users in pkgsrc

(wiz)

gipfel: fix build with exiv2 0.28.0

Patch mailed upstream.

(wiz)

py-configargparse: not for Python 2

(wiz)

lang/nodejs has version 20 now, update nodeversion.mk

(wiz)

Updated converters/py-reedsolo, net/py-onionbalance

(adam)

py-onionbalance: updated to 0.2.1

0.2.1
v2 codebase now uses Cryptodome instead of the deprecated PyCrypto library.
v3 codebase is now more flexible when it comes to requiring a live consensus. This should increase the reachability of Onionbalance in scenarios where the network is having trouble establishing a new consensus.
v3 support for connecting to the control port through a Unix socket. Patch by Peter Tripp.
Introduce status socket support for v3 onions. Patch by vporton.
Sending a SIGHUP signal now reloads the v3 config. Patch by Peter Chung.

(adam)

py-reedsolo: updated to 1.7.0

ReedSolo v1.7.0
Drop cythonization by default, to avoid installation issues for users with Cython installed but no C++ compiler. Cythonization needs to be requested explictly now, using pip install --upgrade reedsolo --install-option="--cythonize" --verbose.

ReedSolo v1.6.1
Clarify license to ensure Public Domain-like rights are granted to users, via the Unlicense or MIT-0 License at the user's preference

ReedSolo v1.6.0
Fix major issue preventing pip install when both Cython and a C compiler was installed (thanks to @m-rossi for the fix!)
Fix minor inconsistency in reporting errata positions (thanks to @jbosboom!)
Migrate continuous integration unit testing from Travis-CI (now only paid plans are offered since 2020) to GitHub Actions.
Add CI unit testing for Python 3.7 up to 3.12 alpha 3, and PyPy 3.
Drop CI unit testing and support for Python 3.3 to 3.6 included.
fixes uncaught error when RSCodec initialized with too many ECC symbols
fixes support for bytes input for higher galois fields (thanks to @another-pjohnson!)
fix erasures correction for chunked messages (thanks to @another-pjohnson!)
Fixes Cythonized implementation chunking was not implemented in check method (thanks to @henla464!)
Add note about limitation to galois field 8 of C implementation
update install instructions in README.rst
Add mention of other contributors

(adam)