Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (4m)  pkgsrc-2024Q1 (14d)  pkgsrc-2023Q4 (42d)  pkgsrc-2023Q2 (74d)  pkgsrc-2023Q3 (153d) 

2024-05-12 16:08:34 UTC Now

2022-09-10 12:46:38 UTC MAIN commitmail json YAML

mail/ruby-actionmailer70: update to 7.0.4

No change except version.

(taca)

2022-09-10 12:46:12 UTC MAIN commitmail json YAML

devel/ruby-activestorage70: update to 7.0.4

* Fixes proxy downloads of files over 5MiB

  Previously, trying to view and/or download files larger than 5mb stored in
  services like S3 via proxy mode could return corrupted files at around
  5.2mb or cause random halts in the download.  Now,
  ActiveStorage::Blobs::ProxyController correctly handles streaming these
  larger files from the service to the client without any issues.

  Fixes

  Felipe Raul

(taca)

2022-09-10 12:45:48 UTC MAIN commitmail json YAML

databases/ruby-activerecord70: update to 7.0.4

* Symbol is allowed by default for YAML columns

  Étienne Barrié

* Fix ActiveRecord::Store to serialize as a regular Hash

  Previously it would serialize as an
  ActiveSupport::HashWithIndifferentAccess which is wasteful and cause
  problem with YAML safe_load.

  Jean Boussier

* Add timestamptz as a time zone aware type for PostgreSQL

  This is required for correctly parsing timestamp with time zone values in
  your database.

  If you don't want this, you can opt out by adding this initializer:

ActiveRecord::Base.time_zone_aware_types -= [:timestamptz]

  Alex Ghiculescu

* Fix supporting timezone awareness for tsrange and tstzrange array columns.

# In database migrations
add_column :shops, :open_hours, :tsrange, array: true
# In app config
ActiveRecord::Base.time_zone_aware_types += [:tsrange]
# In the code times are properly converted to app time zone
Shop.create!(open_hours: [Time.current..8.hour.from_now])

  Wojciech Wnętrzak

* Resolve issue where a relation cache_version could be left stale.

  Previously, when reset was called on a relation object it did not reset
  the cache_versions ivar.  This led to a confusing situation where despite
  having the correct data the relation still reported a stale cache_version.

  Usage:

developers = Developer.all
developers.cache_version

Developer.update_all(updated_at: Time.now.utc + 1.second)

developers.cache_version # Stale cache_version
developers.reset
developers.cache_version # Returns the current correct cache_version

  Fixes .

  Austen Madden

* Fix load_async when called on an association proxy.

  Calling load_async directly an association would schedule a query but
  never use it.

comments = post.comments.load_async # schedule a query
comments.to_a # perform an entirely new sync query

  Now it does use the async query, however note that it doesn't cause the
  association to be loaded.

  Jean Boussier

* Fix eager loading for models without primary keys.

  Anmol Chopra, Matt Lawrence, and Jonathan Hefner

* rails db:schema:{dump,load} now checks ENV["SCHEMA_FORMAT"] before config

  Since rails db:structure:{dump,load} was deprecated there wasn't a simple
  way to dump a schema to both SQL and Ruby formats.  You can now do this
  with an environment variable. For example:

SCHEMA_FORMAT=sql rake db:schema:dump

  Alex Ghiculescu

* Fix Hstore deserialize regression.

  edsharp

(taca)

2022-09-10 12:45:13 UTC MAIN commitmail json YAML

www/ruby-actionpack70: update to 7.0.4

* Prevent ActionDispatch::ServerTiming from overwriting existing values in
  Server-Timing.

  Previously, if another middleware down the chain set Server-Timing header,
  it would overwritten by ActionDispatch::ServerTiming.

  Jakub Malinowski

(taca)

2022-09-10 12:44:34 UTC MAIN commitmail json YAML

www/ruby-actionview70: update to 7.0.4

* Guard against ActionView::Helpers::FormTagHelper#field_name calls with nil
  object_name arguments. For example:

<%= fields do |f| %>
  <%= f.field_name :body %>
<% end %>

  Sean Doyle

* Strings returned from strip_tags are correctly tagged html_safe?

  Because these strings contain no HTML elements and the basic entities are
  escaped, they are safe to be included as-is as PCDATA in HTML content.
  Tagging them as html-safe avoids double-escaping entities when being
  concatenated to a SafeBuffer during rendering.

  Fixes rails/rails-html-sanitizer#124

  Mike Dalessio

(taca)

2022-09-10 12:43:58 UTC MAIN commitmail json YAML

devel/ruby-activejob70: update to 7.0.4

* Update ActiveJob::QueueAdapters::QueAdapter to remove deprecation warning.

  Remove a deprecation warning introduced in que 1.2 to prepare for changes
  in que 2.0 necessary for Ruby 3 compatibility.

  Damir Zekic and Adis Hasovic

(taca)

2022-09-10 12:43:05 UTC MAIN commitmail json YAML

devel/ruby-activemodel70: update to 7.0.4

* Handle name clashes in attribute methods code generation cache.

* When two distinct attribute methods would generate similar names, the
  first implementation would be incorrectly re-used.

class A
  attribute_method_suffix "_changed?"
  define_attribute_methods :x
end

class B
  attribute_method_suffix "?"
  define_attribute_methods :x_changed
end

  Jean Boussier

(taca)

2022-09-10 12:41:51 UTC MAIN commitmail json YAML

devel/ruby-activesupport70: update to 7.0.4

7.0.4 (2022-09-09)

* Redis cache store is now compatible with redis-rb 5.0.

  Jean Boussier

* Fix NoMethodError on custom ActiveSupport::Deprecation behavior.

  ActiveSupport::Deprecation.behavior= was supposed to accept any object
  that responds to call, but in fact its internal implementation assumed
  that this object could respond to arity, so it was restricted to only Proc
  objects.

  This change removes this arity restriction of custom behaviors.

  Ryo Nakamura

(taca)

2022-09-10 12:40:14 UTC MAIN commitmail json YAML

lang/ruby: start update of Ruby on Rails 7.0

Start update of Ruby on Rails to 7.0.4.

(taca)

2022-09-10 11:27:52 UTC MAIN commitmail json YAML

babl: append to PKG_SUGGESTED_OPTIONS

(tnn)

2022-09-10 10:38:47 UTC MAIN commitmail json YAML

doc: Updated editors/PageEdit to 1.9.20

(wiz)

2022-09-10 10:38:36 UTC MAIN commitmail json YAML

PageEdit: update to 1.9.20.

New Features

    add Preferences settings to disable gpu acceleration

Bug Fixes

    workaround linux g++/gcc issues with -flto
    make keyboard shortcuts for Upper and Lower casing intl keyboard friendly
    more fixes for building and running under Qt6
    fix issues with inserting links when anchor text contains characters that need to be xml escaped

(wiz)

2022-09-10 09:48:03 UTC MAIN commitmail json YAML

doc: Updated x11/gtk4 to 4.8.0

(wiz)

2022-09-10 09:47:52 UTC MAIN commitmail json YAML

gtk4: update to 4.8.0.

Overview of Changes in 4.8.0, 06-09-2022
========================================

* GtkTreeView:
- Fix a problem with scrolling animations
- Fix some event handling problems
- Drop unreachable code

* GtkText:
- Respect the no-emoji input hint fully

* GtkEmojiChooser:
- Fix arrow key navigation

* GtkFontChooser:
- Improve the handling of OpenType font features

* GtkTreeListModel:
- Fix handling of collapsed child nodes

* GtkInscription:
- Fix accessible name

* Theme:
- Fix placeholder text in HighContrast

* Increase the memory limit for the jpeg loader to 300M

* Miscellaneous memory leak fixes

* Wayland:
- Refactor handling of text protocol client updates

* Windows:
- Support high-resolution scroll wheel events
- Generate GdkWin32.gir
- Implement color picking

Overview of Changes in 4.7.2, 10-08-2022
========================================

* GtkTextView:
- Fix child positioning with gutters

* GtkText:
- Update placeholder visibility when necessary

* GtkPicture:
- Add a content-fit property

* GtkPopover:
- Fix a size allocation problem with the arrow

* GtkTreeView:
- Fix a problem with DND

* GtkTreePopover:
- Support scrolling

* GtkGridView:
- Fix issues with rubberband selection

* GtkLabel:
- Add a tabs property

* GtkSnapshot:
- Make GtkSnapshot work from bindings

* GtkScrolledWindow:
- Scroll at a reasonable speed

* GtkPaned:
- Avoid an infinite loop

* GtkWindow:
- Improve generation and handling of crossing events

* CSS:
- Fix handling of certain transform values

* Media support:
- Add audio support to the ffmpeg backend
- Avoid oom with pathological jpeg images

* GDK:
- Fix handling of touchpad hold events
- Add support for hi-resolution scroll events

* X11:
- Fix preferred action for DND

* Windows:
- Fix DND

* List models:
- Fix items-changed emission
- Add more list model tests

* Demos:
- Add a winning sound to game demos
- Make app icons work uninstalled

Overview of Changes in 4.7.1, 12-07-2022
========================================

* GtkInscription:
- A new label-like widget for use in list views

* GtkColorChooser:
- Style improvements

* GtkFontChooser:
- Improve support for OpenType features a bit

* GtkLabel:
- Allow selectable labels to be activated via mnemonic

* GtkTextView:
- Implement GetCharacterExtents for accessibility

* GtkStack:
- Fix a poblem with stack page accessibility

* GtkListView:
- Cull listitems that are out of view
- Make all our list models implement ::n-items and
  ::item-type properties

* Translations:
- Stop translating property nicks and blurbs
- Fix extracting translations from ui files

* Debugging:
- Support GTK_DEBUG=invert-text-dir
- Allow inspecting inspectors
- Replace GTK_USE_PORTAL with GDK_DEBUG=portals
- Improve responsiveness of the inspector

* CSS:
- Allow fractional letterspacing

* Theme:
- Improve legibility of selectable labels

* Demos:
- Improve the font features demo
- Add demos for GtkInscription

* Wayland:
- Freeze popups when hidden
- Only send smooth scroll events for tablet tools
- Make scaled cursor image have the right size
- Fix problems with the activation protocol
- Don't force the HighContrast icon theme
- Support xdg_toplevel.bounds

* X11:
- Always update the shadoe size

* Windows:
- Improve touchpad support by using DirectManipulation
- Add more directories to the builtin hicolor icon theme

Overview of Changes in 4.7.0, 07-05-2022
========================================

* GtkTextView:
- Reduce overdraws

* GtkViewport:
- Default scroll-to-focus to TRUE

* GtkText:
- Stop blinking when we lose focus

* GtkSearchEntry:
- Make search delay configurable

* GtkPopoverMenu:
- Fix RTL positioning of buttons

* GtkLabel:
- Fix focus keynav with links

* GtkFileChooser:
- Prevent undesirable completion popups
- Fix a corner case in save mode
- Keep the portal filechooser alive long enough

* GtkCheckButton:
- Allow setting a custom child

* GtkEditableLabel:
- Make the :editing property writable

* GtkColumnView:
- Various optimizations to improve scrolling performance

* GtkTreeStore:
- Allow populating tree stores from ui files

* GtkBoxLayout:
- Avoid infinite loops

* CSS:
- Optimize reordering within the same parent

* Emoji:
- Update to CLDR v40 / Unicode 14
- Add more locales

* Input:
- Add scroll unit handling
- Handle display changes in GtkIMMultiContext
- Always populate GDK_AXIS_X/Y in event history
- Don't crash for large compose tables

* Accessibility:
- Fix a crash at start when orca is running

* Theme:
- Refresh icons
- Fix selection in vertical spin buttons
- Fix selection in editable labels

* gdk:
- Optimize pixel format conversions
- Use EGL_KHR_swap_buffers_with_damage for NVidia

* gsk:
- Handle large viewports
- Prepare texture libraries for glyphy rendering
- Don't leak big glyphs in the glyph cache
- Align offscreen rendering with th pixel grid
- Check for half-float support before using it

* Wayland:
- Use xdg-activation protocol
- Fix text caret coordinates
- Fix on-screen keyboard activation

* MacOS:
- Fix sluggish and reversed scrolling
- Improve monitor detection
- Event handling fixes
- Fix keyboard input on popovers
- Support OpenGL-based video playback
- Suport fullscreen
- Improve native filechoooser size allocation
- Use CALayer and IOSurface for rendering
- Use a per-monitor CVDisplayLink
- Fix kinetic scrolling
- Improve window placement
- Improve multi-monitor handling
- Start applications in the foreground
- Fix cursor blink time

* Windows:
- Fix preedit window placement on HiDPI

* Tools:
- gtk4-builder-tool: Don't require a display for all commands
- gtk4-builder-tool: Add a screenshot command
- gtk4-node-editor: Install this utility

* Debugging:
- inspector: Show more application data
- inspector: Allow viewing PangoAttrList properties

* Documentation:
- Use the gtk-builder-tool to generate screenshots

* Build:
- Fix cross-compilation
- Fix build on aarch64
- Fix build with gcc 12

(wiz)

2022-09-10 09:34:27 UTC MAIN commitmail json YAML

doc: Updated graphics/babl to 0.1.96

(wiz)

2022-09-10 09:34:16 UTC MAIN commitmail json YAML

babl: update to 0.1.96.

2022-08-23 babl-0.1.96
Minor changes from 0.1.94, fixing build.

2022-08-21 babl-0.1.94
Fix of crash on non-aligned data for SIMD, add commandline tool, improve vala
compatibility of introspection info.

(wiz)

2022-09-10 09:32:33 UTC MAIN commitmail json YAML

mp-devel: intltool is not needed any longer

(wiz)

2022-09-10 09:31:17 UTC MAIN commitmail json YAML

doc/TODO: + gtk4-4.8.0.

(wiz)

2022-09-10 09:25:11 UTC MAIN commitmail json YAML

doc: Updated graphics/gimp-devel to 2.99.12

(wiz)

2022-09-10 09:24:48 UTC MAIN commitmail json YAML

gimp-devel: update to 2.99.12.

Switch built to use meson.

Overview of Changes from GIMP 2.99.10 to GIMP 2.99.12
=====================================================

Core:

  - Added concept of "hidden item" to a GimpImage. This would allow to
    process non attached items for internal processing more easily.
  - Do not show a crosshair anymore when "Show brush outline" is
    checked and "Show pointer for paint tools" is unchecked, if the
    brush outline cannot be drawn (in which case a fallback 4-arcs
    generic outline showing the size is displayed), for instance because
    using a dynamic changing the size.
  - When both "Show brush outline" and "Show pointer for paint tools"
    are unchecked, show a minimal visual feedback of a few pixels only,
    as inconspicuous as possible, instead of a crosshair.
  - Move and reorganize pointer-related settings in Preferences from
    "Image Windows" to "Input Devices" tabs.
  - On macOS, delay opening new images dropped on the application icon
    in the dock to after GIMP is fully initialized.
  - Some code reorganization and factorization of image colormap and
    palette handling.
  - Language changes will trigger plug-in query() call at next GIMP
    restart. This allows to have strings in query() and stored in GIMP
    config being re-localized. This implies both explicit language
    changes in Preferences or system language changes when GIMP is set
    to follow system language.
  - Keyboard grab removed from the canvas display, hence getting rid of
    annoying grab permission warnings on Wayland.
  - Preferences > Display > Transparency > Check style has now a new
    option "Custom checks" allowing to select any RGB colors.
  - Full migration from intltool to gettext only.
  - The soft-proof profile, soft-proofing rendering intent and whether
    black point compensation is used when soft-proofing are now image
    data. These have also been moved to the Image menu (out of View).
    These 3 simulation data are also stored in the XCF file now.
  - Hacks on canvas rulers and statusbar added in GIMP 2.99.10 for macOS
    triggering too big redraws were removed. This depends on patches
    added to upcoming GTK+ 3.24.35.
  - CMYK color picking and sample point now use babl and the space
    specified by the soft-proof profile set on the image, if any.
  - The "Create New Image" dialog now has settings for the simulation
    profile, intent and black point compensation. This is also shown in
    templates and the "Default Image" tab in Preferences, and has been
    removed from the "Color Management" tab, because these are now first
    and foremost image data.
  - GimpColorFrame is now current image's simulation profile/intent/bpc
    aware. In other words, CMYK shown by the color picker or in sample
    point shows values in the correct simulation space (not in some
    default CMYK space).
  - A new default action to change the current brush size was mapped to
    Alt + right button click.
  - Some Preferences settings have been moved to a new Preferences >
    Canvas Interaction tab.
  - All on-canvas interactions (panning, canvas rotation, etc.) are now
    customizable in Preferences > Canvas Interaction > Modifiers tab. It
    allows to switch/change the modifiers used for an action, or even
    just remove some modifiers mapping (when you never use an action,
    e.g. some people say the canvas rotation is not useful to them).
  - GtkAction-s can also be mapped to modifiers now through the same
    settings.
  - GIMP themes can now have a "gimp-dark.css" file which will be used
    if the "Use dark theme variant if available" option was checked.
  - The FG/BG editor area in the toolbox is now sized relatively to
    toolbox icon size, allowing for it to be much bigger when using big
    icons, or smaller when using small icons (which can e.g. be aligned
    on a very narrow single column for people who appreciate this
    organization).

Tools:

  - The "Fill by line art detection" mode of the Bucket Fill tool got
    the following improvements:
    * New "Stroke borders" option where you can select a paint tool
      (except source tools) to stroke the fill mask before filling with
      the color. The settings will be the ones as set on the
      corresponding tool (except for the color).
    * The options got reorganized in 3 sections (Line Art Detection,
      Line Art Closure and Fill Borders) and some options were reworded.
      This should hopefully make the now many options more
      understandable.
  - Full text layer's text size will now be changed when changing font
    size in the text editor window, when no text is selected.
  - Raise tool options before blinking specific settings widgets when
    some tools fail to work because of various tool options settings
    (e.g. selection tool cannot remove from an empty selection; warp
    tool cannot stroke; move tool cannot move because of the types of
    object to move isn't selected; and so on).

Graphical User Interface:

  - New "Drag to Zoom" mode and speed settings in Preferences. Existing
    drag-to-zoom behavior was linear depending only on pointer direction
    (which makes it more or less time-based if we consider that pointer
    events are regular). The new mode will take the actual distance
    moved into account allowing to go faster or slower by dragging
    further or not. The "speed" settings allows a finer zoom speed
    control for both the old and new modes.
  - Touchpad gesture rotation (2-finger pinch) on canvas now
    implemented. Note that rotation or scaling by pinch are exclusive so
    GIMP will detect the expected behavior through the initial movement
    and will therefore lock on either rotation or scaling for the whole
    duration of the pinch.
  - Slight tweak of the "You will have to restart GIMP" popup: the list
    now uses nicer "bullet point" characters and the nick (short
    description) is shown rather than the internal property name.
  - New soft-proof toggle in status bar to see the soft-proofing status
    and enable/disable it. It is only active when a soft-proof profile
    was set.
  - GimpContainerTreeView (e.g. Layers/Channels/Vectors dockables) now
    have zooming through ctrl+mouse wheel (for preview size).
  - GimpContainerTreeView (e.g. Layers/Channels/Vectors dockables) now
    have zooming with touchpad pinch (touchscreen pinch now kinda exists
    but is not so usable in our tests, at least on Linux through
    libinput) for preview size.
  - Gradient editor now has zooming with touchpad pinch (touchscreen
    pinch not so fancy either, at least on Linux through libinput,
    similar to GimpContainerTreeView case).
  - A new soft-proofing pop-over dialog appears when right-clicking the
    new soft-proof toggle in the status bar. It allows to view or change
    all soft-proofing related settings (whether they are associated to
    the image, such as the profile, intent or black-point compensation;
    or to the view, such as the out-of-gamut check) very easily.
  - New "Default" theme containing a dark and light variant. As the name
    implies, this theme is now made the default theme on new
    installations.
  - New "Compact" theme containing a dark and light variant.

Command Line Interface:

  - Unless only one batch interpreter is available, there is no default
    interpreter anymore (it used to be script-fu). Therefore if you set
    `--batch` but not `--batch-interpreter`, GIMP will output an error
    message and will list the available interpreters.
  - GIMP will stop running the batch commands as soon as one command
    fails (it won't try the following ones).
  - A new `--quit` option allows you to quit GIMP immediately after
    running the batch commands.
  - If `--quit` is set and batch commands are run, the GIMP binary exit
    code will propagate errors from any batch failure. Exit codes are
    taken from command Linux error codes: 0 for success, 69 for service
    unavailable (e.g. setting a non-existing interpreter name), 64 for
    usage (e.g. not specifying any interpreter or calling errors), 70
    for execution errors (bugs in the interpreter plug-in) and 130 for
    canceling the call.

Plug-ins:

  - BigTIFF: our TIFF plug-in now officially supports BigTIFF import and
    export.
    * Import was actually already working transparently if you had
      a recent enough libtiff. Now the recent libtiff is enforced by
      dependency requirements.
    * Export support was added with a checkbox in the interactive dialog
      and a new "bigtiff" argument in the "file-tiff-save" PDB
      procedure.
    * When an interactive export of ClassicTIFF fails for the explicit
      reason of "Maximum TIFF file size exceeded", the export dialog is
      raised again with a message proposing to try again as BigTIFF or
      trying another compression algorithm.
      This allows because discoverability and understandibility of the
      issue, while not forcing BigTIFF export (since it might not be
      supported everywhere).
  - GIF: new option to specify a number of repeat for animated GIF
    (rather than single run vs. infinite loop only).
  - help-browser: rewritten to use GtkAction and GtkApplication, even
    though it's now a deprecated plug-in (though it's a good example for
    porting other plug-ins the same way).
  - PNG:
    * the format does not have any flag for linear RGB, but it can
      simply include a linear profile (or a 1.0 gAMA chunk). Therefore
      since we always attach the profile when importing (or transform
      the gAMA chunk into a profile), we now always load PNG images as
      non-linear backend.
    * Add toggle to choose PNG bit depth behavior.
  - python-fu-eval and plug-in-script-fu-eval ported to new
    GimpBatchProcedure class.
  - JPEG:
    * CMYK export is now possible. It uses the "Soft-proofing"
      profile set on the image.
    * CMYK import ported to GEGL/babl conversion. The CMYK profile in
      the JPEG image will be stored as soft-proof profile on the image.
  - WebP:
    * new option "Use Sharp YUV" available in non-lossless export.
      It renders sharper edges at the cost of a slower export.
    * On export, the "bad image dimensions" error message is now more
      accurate and tells the max dimension possible for WebP images
      (16383 as it's stored on 14 bits).
  - DDS:
    * 16-bit masks now supported.
    * DDS images with single 16-bit channel support added.
    * DDS images with 2 16-bit channels correctly converted to 16-bit
      RGB images.
    * More robust DDS loading.
    * New "Flip image" option: some game engine require a flipped image.
      Rather than flipping, exporting, unflipping process, let's have an
      option to flip the result at export time.
  - script-fu:
    * Various updates to get the API back in shape.
    * Porting doc updated.
    * "script-fu-server" was now extracted into its own separate
      plug-in so that it doesn't need to run permanently with the
      script-fu extension (could be seen as security hazard too) and it
      also makes each of these plug-ins more robust by being on their
      own process each.
    * A new `gimp-script-fu-interpreter-3.0` binary is installed
      globally to be used to create Scheme plug-ins, similarly to other
      plug-ins, in particular in the plug-ins/ directory, not the
      scripts/ directory anymore. Moreover it makes the whole script-fu
      infrastructure much more robust as script-fu individual scripts
      won't crash the whole script-fu extension any longer (they only
      crash themselves).
      Note: this is not a GObject Introspected Scheme binding, just our
      own binding based on script-fu interpreter. Script-fu plug-ins
      still don't have access to the whole of libgimp.
    * New function 'script-fu-register-filter' to declare a multi-layer
      capable script.
    * Many script-fu scripts were ported to newer API.
  - FLI:
    * Internal type usage improvements, mnemonics added, etc.
    * 1-frame animation now loaded correctly (it's not really an
      animation then, yet it should still open!).
    * Better error handling.
    * Layer names now include the delay in ms.
    * More robust FLI/FLC loading, double-checking data rather than
      assuming that the file writer properly followed the specs.
  - Several plug-ins now follow the user-set checkboard color
    preferences, when relevant.
  - RAW data:
    * Improved export dialog with better labels and ported to new dialog
      generation API.
    * Improved import dialog, ported to new dialog generation API, with
      factorized code to more easily handle more cases.
    * All the exportable formats can now be loaded back.
    * "file-raw-load" and "file-raw-save" procedures API are now much
      better with all relevant arguments.
    * "file-hgt-load" doesn't show a dialog anymore when sample spacing
      detection worked correctly since we already have all the necessary
      information.
  - WBMP: new plug-in to load WBPM image files. It is still limited
    support and doesn't support all types of WBMP images.
  - TIFF:
    * 8 and 16-bit CMYK(A) TIFF files can be exported, using the
      image soft-proof profile.
    * Imported CMYK TIFF profiles are now set as soft-proof profile
      on the image.
  - SVG: on import, when parsing fails, GIMP will propose to disable
    size parsing limitations, while explaining this has security
    implications and should only be done on SVG files from trusted
    sources.
  - PSD:
    * Import now uses babl conversion inconditionally, even for CMYK
      images, using the soft-proof profile set on the image.
    * Improved error logging during load.
    * CMYK profile on a CMYK PSD file is now stored as soft-proof
      profile in the image.
    * Added support for extra layer mask: According to the specs the
      extra mask (which they call real user supplied layer mask) is used
      "when both a user mask and a vector mask are present".
      We haven't seen an example that has the extra mask, so not sure
      which of the masks would appear first.
      For now assuming that the extra mask will be first. The advantage
      of adding this here now, is that we won't try to add a mask
      channel as a normal channel.
    * Minimal support of duotone data: on import, a duotone image will
      be imported as grayscale image with an alert and the color
      information will be stored in a parasite; on export, a dialog will
      propose you to re-include the duotone data if the image is still
      grayscale. This allows for a roundtrip in GIMP without losing the
      duotone information.
  - ANI: new import/export support.

API:

  - Changes in libgimpbase:
    * gimp_checks_get_colors() added.
    * gimp_checks_get_shades() removed (replaced by gimp_checks_get_colors())
  - Changes in libgimpcolor:
    * New functions:
      + gimp_color_managed_get_simulation_profile()
      + gimp_color_managed_simulation_profile_changed()
      + gimp_color_managed_get_simulation_bpc()
      + gimp_color_managed_get_simulation_intent()
      + gimp_color_managed_simulation_bpc_changed()
      + gimp_color_managed_simulation_intent_changed()
  - Changes in libgimp:
    * New functions:
      + gimp_image_metadata_save_filter()
      + gimp_check_custom_color1()
      + gimp_check_custom_color2()
      + gimp_procedure_dialog_get_int_radio()
      + gimp_procedure_dialog_get_file_chooser()
      + gimp_image_get_simulation_profile()
      + gimp_image_set_simulation_profile()
      + gimp_image_set_simulation_profile_from_file()
      + gimp_image_get_selected_drawables()
      + gimp_image_get_simulation_bpc()
      + gimp_image_get_simulation_intent()
      + gimp_image_set_simulation_bpc()
      + gimp_image_set_simulation_intent()
    * Removed functions:
      + gimp_plug_in_set_translation_domain()
      + image_get_active_drawable()
      + image_get_active_layer()
      + image_set_active_layer()
      + image_get_active_channel()
      + image_set_active_channel()
      + image_get_active_vectors()
      + image_set_active_vectors()
    * Updated functions:
      + gimp_procedure_dialog_get_widget() now supports
        %G_TYPE_PARAM_FILE and %G_TYPE_PARAM_ENUM properties.
      + gimp_prop_file_chooser_button_new() now works with
        G_PARAM_SPEC_OBJECT having a value_type == G_TYPE_FILE
        (additionally to GIMP_PARAM_SPEC_CONFIG_PATH properties).
    * Functions skipped by bindings:
      + gimp_get_images() (in favor of gimp_list_*() variant)
      + gimp_image_get_layers() (in favor of gimp_image_list_*() variant)
      + gimp_image_get_channels() (in favor of gimp_image_list_*() variant)
      + gimp_image_get_vectors() (in favor of gimp_image_list_*() variant)
      + gimp_image_get_selected_layers() (in favor of gimp_image_list_*()
        variant)
      + gimp_item_get_children() (in favor of gimp_item_list_*() variant)
    * New class:
      + GimpBatchProcedure: procedure usable as a batch interpreter on
        command line.
    * Protocol bumped to handle the check colors passed at call time on
      the wire.
    * Plug-ins are now expected to have their localization in a Gettext
      catalog folder locale/ under their main directory, named the same
      way as this directory (i.e. usually the plug-in name). If the
      catalog is absent, a message will be outputted on stderr. To
      override this behavior, a GimpPlugIn is encouraged to override the
      new set_i18n() method. If it returns FALSE, localization is
      disabled (or it may be implemented in a different way, for
      instance with another system than Gettext); if it returns TRUE,
      you can set a different subfolder and catalog name.
    * The core does not localize menu items from plug-ins anymore. All
      plug-ins are now expected to handle their localization within
      their code. In particular gimp_procedure_set_menu_label() and
      gimp_procedure_set_documentation() should now pass the localized
      text. With gettext, it usually means passing arguments through
      gettext() and not just marking them with N_().
  - Changes in libgimpwidgets:
    * Freedesktop portal implementation of GimpPickButton now checks the
      version of the XDG portal since `PickColor()` API only got added
      in version 2.
    * New classes:
      + GimpIntRadioFrame
    * New functions:
      + gimp_color_notebook_set_simulation()
      + gimp_color_selection_set_simulation()
      + gimp_color_selector_set_simulation()
    * Removed functions:
      + gimp_prop_int_radio_box_new()
    * Updated functions:
      + GimpColorNotebook, GimpColorSelection and GimpColorSelector are
        now ported to babl code and are simulation space aware.
      + GimpPickButton will now use the X11 color picking API as a
        default when GIMP is running on X11 (instead of trying the
        portals first), because it has color space information of the
        display (so we can convert back the color from display space to
        image space); and also on some desktop, the portal looks
        available while it's actually not implemented (hence picking
        fails).
        This fixes or improves the color picking in the Colors dockable,
        in Change Foreground/Background Color dialogs, etc.
  - Changes in PDB:
    * gimp-plug-in-domain-register removed.

Modules:

  - The CMYK color selector is now simulation space aware, i.e. that it
    shows CMYK values in the soft-proof profile space if a soft-proof
    profile has been set.

Translations:

  - New Galician and Georgian translations for the installer.

Build:

  - libtiff dependency's minimum required version bumped to 4.0.0.
  - gexiv2 dependency's minimum required version bumped to 0.14.0.
  - Our meson/Debian CI now runs `meson dist` too.
  - gvfs is marked as an expected dependency for GIMP (as a GIO module)
    on Linux, since it seems we wouldn't have HTTP support without. This
    is only written in the INSTALL file though, no tests are run on
    configure time.
  - The distribution stage now has a new `dev-docs` job containing both
    the C API reference (gi-docgen) and the Python and Javascript (gjs)
    ones (g-ir-doc).
  - The `pdbgen` (generation of PDB source files) build step is finally
    ported to meson too, which is a major step to one day consider this
    build system out of the "experimental" zone.
  - Windows installer's gettext files (.po) will now also contain
    extracted comments from the source to give more context to
    translators.
  - Flatpak manifest upgraded with new version constraints so that the
    flatpak-external-data-checker does not warn wrongly on major update
    when we don't want to or can't update immediately.
  - meson is now recommended for Windows and macOS builds and our
    official installer and DMG respectively are now built (still from
    CI) with meson.
  - Flatpak manifest improved with version constraints for dependencies
    where we should not update just yet (hence don't want new version
    notifications).
  - appstream-util replaced by appstreamcli for AppStream file testing
    (requires appstreamcli 0.15.3 or over).
  - gi-docgen API documentation will now properly link to other API
    namespaces thanks to a new urlmap file.
  - Separate libgimp-scriptfu-3.0 library for a future where it will be
    shared by several binaries.
  - GEGL dependency's minimum required version bumped to 0.4.38.
  - "flatpak" job now uses a gnome-runtime-images migrated to Quay.
  - "win*-nightly" jobs removed.
  - Improved meson infrastructure to support Windows installer languages
    which don't have base language files provided by upstream InnoSetup.
    We started using it for Kabyle (which was showing up as "English"
    otherwise!).
  - After various fixes and implementations of missing build features to
    the meson scripts, we are going to start advising packagers (for all
    platforms) to build GIMP 2.99.12 with meson as a trial by fire to
    make it the new default build system.
  - New "sources-meson" CI job to distribute a tarball built with the
    meson scripts.
  - INSTALL now targets meson build as a test recommendation. We'll see
    if any issue arises from packagers!
  - Improved support for homebrew build on macOS.

Documentation:

  - Draft devel doc for scriptfu v3 script authors.

(wiz)

2022-09-10 08:25:32 UTC MAIN commitmail json YAML

doc: Update Ruby on Rails 6.1 related pacakges to 6.1.7

devel/ruby-activesupport61
devel/ruby-activemodel61
devel/ruby-activejob61
www/ruby-actionview61
www/ruby-actionpack61
databases/ruby-activerecord61
devel/ruby-activestorage61
mail/ruby-actionmailer61
mail/ruby-actionmailbox61
www/ruby-actioncable61
devel/ruby-railties61
textproc/ruby-actiontext61
www/ruby-rails61

(taca)

2022-09-10 08:24:42 UTC MAIN commitmail json YAML

www/ruby-rails61: update to 6.1.7

Ruby on Rails 6.1.7 release on 9th September 2022.
Active Record and Active Storage are updated:

Active Record

* Symbol is allowed by default for YAML columns

  Étienne Barrié

* Fix ActiveRecord::Store to serialize as a regular Hash

  Previously it would serialize as an
  ActiveSupport::HashWithIndifferentAccess which is wasteful and cause
  problem with YAML safe_load.

  Jean Boussier

* Fix PG.connect keyword arguments deprecation warning on ruby 2.7

  Fixes .

  Nikita Vasilevsky

Active Storage

* Respect Active Record's primary_key_type in Active Storage
  migrations. Backported from 7.0.

  fatkodima

(taca)

2022-09-10 08:21:36 UTC MAIN commitmail json YAML

doc: Update Ruby on Rails 6.0 related pacakges to 6.0.6

devel/ruby-activesupport60
devel/ruby-activemodel60
devel/ruby-activejob60
www/ruby-actionview60
www/ruby-actionpack60
databases/ruby-activerecord60
mail/ruby-actionmailer60
devel/ruby-activestorage60
mail/ruby-actionmailbox60
www/ruby-actioncable60
devel/ruby-railties60
textproc/ruby-actiontext60
www/ruby-rails60

(taca)

2022-09-10 08:19:00 UTC MAIN commitmail json YAML

2022-09-10 06:34:46 UTC MAIN commitmail json YAML

doc: Updated graphics/gexiv2 to 0.14.0

(wiz)

2022-09-10 06:34:36 UTC MAIN commitmail json YAML

gexiv2: update to 0.14.0.

gexiv2 0.14.0 - 18 Sep 2021 (stable)

* Fix BMFF compile test

gexiv2 0.13.0 - 15 Aug 2021 (development)

* Enable BMFF support if enabled in exiv2 version
* Update gexiv2-dump tool
* Mark gexiv2_metadata_from_stream as deprecated; it is fundamentally broken
* More additions to API and _try versions that support GErorr if exiv2 might throw
* Some additions to gexiv2-tool
* Changes in build configuration

(wiz)

2022-09-10 06:33:19 UTC MAIN commitmail json YAML

doc: Updated graphics/exiv2 to 0.27.5nb1

(wiz)

2022-09-10 06:33:09 UTC MAIN commitmail json YAML

exiv2: turn on BMFF support

Fix pkg-config file while here.

Bump PKGREVISION.

(wiz)

2022-09-10 02:16:50 UTC MAIN commitmail json YAML

doc: Updated www/otter-browser to 1.0.03

(gutteridge)

2022-09-10 02:16:31 UTC MAIN commitmail json YAML

otter-browser: update to 1.0.03

Upstream summary:

    updated QtWebEngine to (silently) breaking upstream changes;
    updated translations;
    some other backports.

Known issues:

    new browsing history backend does not store favicons yet.

(gutteridge)

2022-09-10 01:21:46 UTC MAIN commitmail json YAML

doc/TODO: add libxslt & py-openpyxl

(gutteridge)

2022-09-10 00:14:19 UTC MAIN commitmail json YAML

mlterm: force consistent builds with posix_openpt(3) on NetBSD

Work around the fact this package tests whether posix_openpt(3) works at
runtime. This fails in typical sandboxed build environments (including
TNF's used for official binary builds), which causes a fallback to use
"old-style" BSD ptys, which can result in runtime failures.

Addresses PR pkg/56936. Needs monitoring to ensure official TNF binary
packages now behave as expected.

(gutteridge)

2022-09-09 22:50:35 UTC MAIN commitmail json YAML

py-apsw: does not support python 2.x any longer

(wiz)

2022-09-09 22:48:02 UTC MAIN commitmail json YAML

doc: Updated devel/py-hatch-fancy-pypi-readme to 22.3.0nb1

(wiz)

2022-09-09 22:47:53 UTC MAIN commitmail json YAML

2022-09-09 18:28:38 UTC MAIN commitmail json YAML

doc: Updated emulators/mame to 0.247

(wiz)

2022-09-09 18:28:26 UTC MAIN commitmail json YAML

mame: update to 0.247.

With a change of season just around the corner, it's time to unveil
MAME 0.247! This is a huge release, and should have something for
everyone!

Newly added systems, and systems promoted to working, include:

    The M&D Monon Color - a low-cost Chinese hand-held console.
    This required finding an exploit to extract the CPU's internal
    ROM as audio. Said CPU is a high-performance derivative of
    Intel's MCS-51 architecture.
    A prototype version of Tecmo龝 Super Pinball Action that used
    separate screens for the simulated backglass and playfield.
    This version was presumably poorly received due to the need
    for an expensive dedicated cabinet.
    An initial driver for second-generation Sony NEWS workstations
    based on MIPS processors. This one has been a long time coming,
    with a lot of preparatory work, but it's finally here!
    The Dracula and Game Pachinko - two Tsukuda hand-held games
    with vacuum fluorescent displays.
    Micom Mahjong - an example of an early CPU-based TV game, and
    possibly the first dedicated electronic mahjong system.
    Three new Casio synthesisers.
    Several Impera Magic Card games. This one's also been a while
    coming, requiring several new devices to be emulated.
    A few Astro Corp. gambling games, including Dino Dino, Magic
    Bomb, Stone Age, and Zoo.
    Some previously missing NO CD versions of Capcom's Red Earth.

You'll also find numerous bug fixes and emulation improvements
across the board. There's better support for low-cost Macintosh
models based on the V8 chipset (including the LC, LC II, and Classic
II). There are quite a few fixes for issues with Nintendo's
NES/Famicom-derived arcade systems, the VS. System and PlayChoice-10.
Several ZX Spectrum derivatives from the Eastern Bloc are in better
shape. The Atari POKEY sounds better. The PC Engine pachinko
controller from Coconuts Japan is now supported. There龝 also an
important fix for extracting CHD CD-ROM images.

The stream of prototype cartridges is still flowing, with a number
of Atari 2600, Game Boy Color, NES, and Super NES additions landing
this month. You稷l also find the Scholastic Microzine disks for
Apple II, and several PC magazine cover disks. The new VGMPlay
music rips include music from the recently-emulated Poly-Net Warriors
arcade game.

(wiz)

2022-09-09 17:24:51 UTC MAIN commitmail json YAML

doc: Updated devel/py-mercurial to 6.2.2

(wiz)

2022-09-09 17:24:41 UTC MAIN commitmail json YAML

py-mercurial: update to 6.2.2.

Mercurial 6.2.2

    fsmonitor: restore functionality by moving to new dirstate APIs
    dirstate-v2: fix data file transaction handling (issue6730)
    rust: fix behavior when matching files with multiple includes
    rust: widen range of compatible crates to help with packaging
    rust-status: ignored directories are now correctly only listed if opted into
    automation: improve Windows packaging tooling
    contrib: update Mercurial install in bootstrap environment
    Remove flakiness in some tests
    Improve portability of certain tar uses in tests

(wiz)

2022-09-09 16:21:27 UTC MAIN commitmail json YAML

doc: Updated print/texlab to 4.2.2

(wiz)

2022-09-09 16:21:18 UTC MAIN commitmail json YAML

texlab: update to 4.2.2.

## [4.2.2] - 28.08.2022

### Fixed

- Do not watch the same directory multiple times, which can result in a memory leak on Windows ([#737](https://github.com/latex-lsp/texlab/issues/679))
- Fix detection of root document when sharing files between projects ([#679](https://github.com/latex-lsp/texlab/issues/679))
- Fix text synchronization problem caused by file watcher ([#724](https://github.com/latex-lsp/texlab/issues/724))

(wiz)

2022-09-09 16:06:37 UTC MAIN commitmail json YAML

doc: Updated security/py-pip-audit to 2.4.4

(wiz)

2022-09-09 16:06:28 UTC MAIN commitmail json YAML

py-pip-audit: update to 2.4.4.

## [2.4.4]

### Changed

* `pip-audit` is now a PyPA member project, and lives under
  [`pypa/pip-audit`](https://github.com/pypa/pip-audit)!

* Improved error message for when unpinned URL requirements are found during an
  audit with the `--no-deps` flag
  ([#355](https://github.com/pypa/pip-audit/pull/355))

### Fixed

* Fixed an issue where packages on PyPI with no published versions trigger a
  dependency resolution failure instead of being skipped
  ([#357](https://github.com/pypa/pip-audit/pull/357))

* Fixed an incorrect assertion triggering for non-editable URL requirements that
  don't have an egg fragment
  ([#359](https://github.com/pypa/pip-audit/pull/359))

(wiz)

2022-09-09 15:52:53 UTC MAIN commitmail json YAML

doc: Updated math/harmbase2 to 20220109

(taca)

2022-09-09 15:49:42 UTC MAIN commitmail json YAML

doc: Updated editors/Sigil to 1.9.20

(wiz)

2022-09-09 15:49:32 UTC MAIN commitmail json YAML

Sigil: update to 1.9.20.

Sigil-1.9.20
    Bug Fixes
      - double width of new Find Replace icons to make them easier to access
      - improve new Find Replace icon tooltips to be include short name on top
      - fix bug that caused file rename changes to fail when updating smil
      - Metadata Editor will now strip out unneeded xmlns:dc attributes on dc tags
      - Metadata Editor is now more robust to language codes that have incorrect case in the metadata
      - clarify Create HTML ToC menu entry works from existing ToC
      - prevent indavertent "\" chars be treated like escapes when updating metadata
      - fix MetaEditor nit of not auto adding "aut" role to Author metadata for epub2
      - make Spellcheck Editor count align column numerically (right)

    New Features
      - add ability for a user-template*.xhtml and user-template*.css
          be read from Sigil Prefs to create new empty xhtml and css files
      - updated to very latest MathJax version 3.2.2 for mathml support in Preview
      - add ability to cycle through 2 different custom stylesheets (and none at all) for use with Preview

(wiz)

2022-09-09 15:41:12 UTC MAIN commitmail json YAML

doc: Updated devel/libatomic_ops to 7.6.14

(wiz)

2022-09-09 15:41:03 UTC MAIN commitmail json YAML

libatomic_ops: update to 7.6.14.

== [7.6.14] 2022-08-25 ==

* Add note to README that AO malloc code has same license as AO stack
* Adjust/reformat content of LICENSING.txt
* Avoid AO_stack_t to cross CPU cache line boundary
* Do not assume 'ordered except earlier write' for UWP/arm64
* Do not name GCC intrinsics as C11 ones in ChangeLog and configure
* Eliminate '-pedantic is not option that controls warnings' GCC-6.3 message
* Ensure result of AO_test_and_set is always AO_TS_CLEAR or AO_TS_SET
* Fix 'AO_malloc redefinition' MS VC warning caused by attributes mismatch
* Fix 'use of undeclared SIG_BLOCK' Clang error if -std=c89 on Cygwin
* Fix AO_compare_and_swap_full asm code for clang on sparc
* Fix a typo in comment of AO_stack_push_explicit_aux_release
* Fix code indentation in main() of test_stack.c
* Refine AO_UNIPROCESSOR macro description in configure
* Remove outdated comment about unsupported Win64 in atomic_ops_stack.h
* Repeat black list check on CAS fail in stack_push_explicit_aux_release

(wiz)

2022-09-09 15:39:57 UTC MAIN commitmail json YAML

doc: Updated lang/vala to 0.56.3

(wiz)

2022-09-09 15:39:48 UTC MAIN commitmail json YAML

vala: update to 0.56.3.

Vala 0.56.3
===========
* Various improvements and bug fixes:
  - vala: Don't unconditionally expect ObjectType of Class [#1341]
  - vala: Make try-statement parsing more resilient [#1304]
  - vala: Avoid problems with '\' in #line directives on Windows [#1353]
  - gidlparser: Set source reference of parameters

* Bindings:
  - atspi-2: Fix a few binding errors
  - glib-2.0: Use g_abort for GLib.Process.abort() beginning with 2.50 [#1350]
  - gtk+-3.0: Correctly unhide BindingSet.by_class to avoid Version attribute

(wiz)

2022-09-09 15:39:32 UTC MAIN commitmail json YAML

math/harmbase2: update to 20220109

20220109
PostgreSQL 14.1.

misc_tests.rb:
Added 1 new test.

importNOS_TideRefs.rb and importNOS_TideSubs.rb:
Flagged guessed geogroups in renamings info.

importNOS_TideSubs.rb:
Removed trailing \n from notes.

importNOS_CurRefs.rb and importNOS_CurSubs.rb:
Persisted name, state, tz from previous year's data.
Added generation of renamings template.
Removed one-time code.

importNOS_CurRefs.rb:
Removed meridian logic obsoleted by GMT phases.

scrape-MDAPI-2-geogroups.rb:
Revised to fetch into separate files instead of concatenating.

importNOS_JsonReaders.rb:
Changed readStationsByGroupTidesJson to read separate files.
Changed getCurrentConstForSid to get majorPhaseGMT.

importNOS_Geogroups.rb:
Interpreted null level as level 7 (for new geogroups 1840-1842).
Nilled out Gulf Coast and Gulf of Alaska in L6rewrite.

importNOS_Queries.rb:
Removed obsolete queries.
Added new queries for currents.

importNOS_DodgyCode.rb:
Added patterns to standardize Vieques Island and Isla de Vieques to
just Vieques.

importNOS_Util.rb:
Removed function mangle.  Use db.escape_string.

sample.rb:
Removed obsolete comment.

(taca)

2022-09-09 15:35:25 UTC MAIN commitmail json YAML

doc: Updated graphics/libheif to 1.13.0

(wiz)

2022-09-09 15:35:16 UTC MAIN commitmail json YAML

libheif: update to 1.13.0.

    pay attention to the correct chroma sample positions
    heif_image now holds a list of decoding warnings
    use AOM AOM_USAGE_ALL_INTRA mode instead of AOM_USAGE_GOOD_QUALITY
    'strict' decoding mode with more checks for standard conformity of input
    support for EXIF data >64k in JPEG output
    proper library initialization and cleanup
    separate quality settings for alpha channel (AOM)
    improve color conversion speed (no lroundf)
    build and packaging fixes

(wiz)

2022-09-09 15:28:25 UTC MAIN commitmail json YAML

doc: Updated x11/libdrm to 2.4.113

(wiz)

2022-09-09 15:28:16 UTC MAIN commitmail json YAML

2022-09-09 15:24:02 UTC MAIN commitmail json YAML

doc: Updated security/libtasn1 to 4.19.0

(wiz)

2022-09-09 15:23:53 UTC MAIN commitmail json YAML

libtasn1: update to 4.19.0.

* Noteworthy changes in release 4.19.0 (2022-08-23) [stable]
- Clarify libtasn1.map license.  Closes: #38.
- Fix ETYPE_OK out of bounds read.  Closes: #32.
- Update gnulib files and various maintenance fixes.

(wiz)

2022-09-09 15:21:23 UTC MAIN commitmail json YAML

doc: Updated graphics/graphene to 1.10.8

(wiz)

2022-09-09 15:21:13 UTC MAIN commitmail json YAML

graphene: update to 1.10.8.

Changes since 1.10.6

    ray: simplify NaN checking [Érico Nogueira]
    Build fixes [Dor Askayo, q66, Chun-wei Fan, Marc-André Lureau]
    SIMD: Make reciprocal operations 0-safe [Dor Askayo]
    SIMD: Add simplified scalar reciprocal [Dor Askayo]
    ray: Improve intersection [Dor Askayo]
    tests: Fix installed introspection test [Matthias Devlamynck]
    Fix detection of AArch64 [Dor Askayo]
    tests: Add ray intersection unit [Sebastian Keller]
    Fix ARM64 build on Windows [Chun-wei Fan]
    Documentation fixes

Issues fixed since 1.10.4

    Hide GRAPHENE_SIMD_S from the introspection data [#211, Simon McVittie]
    Nudge ray axis when intersecting a box [#214, Jonas Ådahl]

Changes since 1.10.2:

    Add ARM NEON support when building with Visual Studio [Chun-wei Fan]
    Build fix on ARM64 Windows [Chun-wei Fan]
    Drop deprecated "python3" Meson module
    Fix detection of non-intersecting boxes [Daniel van Vugt, #201]
    Only enable SSE2 on x86_64 [Xi Ruoyao]
    Use the compiler-appropriate alignment attributes
    Change introspection option to a yielding feature [Xavier Claessens]

(wiz)

2022-09-09 15:17:34 UTC MAIN commitmail json YAML

doc: Updated textproc/hunspell to 1.7.1

(wiz)

2022-09-09 15:17:21 UTC MAIN commitmail json YAML

hunspell: update to 1.7.1.

2022-08-22: Hunspell 1.7.1 release:
  - Merge chromium fix for #714 OOB string write in hunspell
  - Merge firefox fix for #756 various issues parsing incomplete aff files
  - Fix #492 crash with hunspell -l -r
  - Merge in weblate translations

(wiz)

2022-09-09 15:14:48 UTC MAIN commitmail json YAML

doc: Updated devel/cvise to 2.5.0

(wiz)

2022-09-09 15:14:39 UTC MAIN commitmail json YAML

cvise: update to 2.5.0.

Changes done in the release:

    support LLVM 14 and LLVM 15
    new option --skip-after-n-transforms was introduced
    max pass increase limit was introduced (3) that helps passes that run many times (e.g. constant propagation)

(wiz)

2022-09-09 15:04:50 UTC MAIN commitmail json YAML

doc: Updated devel/tomlplusplus to 3.2.0

(wiz)

2022-09-09 15:04:37 UTC MAIN commitmail json YAML

tomlplusplus: update to 3.2.0.

## v3.2.0

#### Fixes:
- fixed `[dotted.table]` source columns sometimes being off by one (#152) (@vaartis)
- fixed spurious `Wnull-dereference` warning on GCC (#164) (@zaporozhets)
- fixed `print_to_stream` ambiguity for `size_t` (#167) (@acronce)

#### Additions:
- added value type deduction to `emplace()` methods
- added `toml::path` utility type (#153, #156, #168) (@jonestristand, @kcsaul)
- added config option `TOML_CALLCONV`
- added missing relational operators for `source_position`

#### Changes:
- relaxed cvref requirements of `is_homogeneous()`, `emplace()`, `emplace_back()`, `emplace_hint()`
- relaxed mantissa and digits10 requirements of extended float support

(wiz)

2022-09-09 13:43:05 UTC MAIN commitmail json YAML

doc: Updated www/ruby-aws-sdk-core to 3.143.0

(taca)

2022-09-09 13:42:37 UTC MAIN commitmail json YAML

www/ruby-aws-sdk-core: update to 3.143.0

3.143.0 (2022-09-08)

* Feature - Updated Aws::SSO::Client with the latest API changes.

3.142.0 (2022-09-07)

* Feature - Updated Aws::SSO::Client with the latest API changes.

3.141.0 (2022-09-06)

* Feature - Updated Aws::SSO::Client with the latest API changes.

(taca)

2022-09-09 13:41:55 UTC MAIN commitmail json YAML

doc: Updated www/ruby-aws-partitions to 1.627.0

(taca)

2022-09-09 13:41:02 UTC MAIN commitmail json YAML

www/ruby-aws-partitions: update to 1.627.0

1.627.0 (2022-09-08)

* Feature - Updated the partitions source data the determines the AWS
  service regions and endpoints.

(taca)

2022-09-09 13:39:04 UTC MAIN commitmail json YAML

doc: Updated security/ruby-sshkit to 1.21.3

(taca)

2022-09-09 13:38:46 UTC MAIN commitmail json YAML

security/ruby-sshkit: update to 1.21.3

Documentation

* In EXAMPLES.md show how to change the SSH port in the DSL (#494)
  @bretweinraub

Housekeeping

* Bump toolmantim/release-drafter from 5.2.0 to 5.20.1 (#498, #500)
  @dependabot
* Include githubactions in the dependabot config (#497) @naveensrinivasan
* Upgrade to GitHub-native Dependabot (#492) @dependabot-preview

(taca)

2022-09-09 13:37:35 UTC MAIN commitmail json YAML

doc: Updated security/ruby-rex-text to 0.2.45

(taca)

2022-09-09 13:37:07 UTC MAIN commitmail json YAML

security/ruby-rex: update to 0.2.45

0.2.45 (2022-09-06)

* Land #55, Adding support for Nim formatting shellcode generation

(taca)

2022-09-09 13:34:39 UTC MAIN commitmail json YAML

doc: Removed devel/ruby-gettext-setup

(taca)

2022-09-09 13:34:21 UTC MAIN commitmail json YAML

devel/ruby-gettext-setup: remove pacakge

This pacakge was added for puppet 4.10.1.  But now, no package depends on
this package and no update for these 3 years.

(taca)

2022-09-09 13:32:39 UTC MAIN commitmail json YAML

devel/Makefile: remove ruby-gettext-setup

(taca)

2022-09-09 13:18:32 UTC MAIN commitmail json YAML

doc: Updated databases/ruby-sqlite3 to 1.5.0

(taca)

2022-09-09 13:17:47 UTC MAIN commitmail json YAML

databases/ruby-sqlite3: update to 1.5.0

Here is quote from release note.

1.5.0 (2022-09-08)

Added

* SQLite3::SQLITE_LOADED_VERSION contains the version string of the sqlite3
  library that is dynamically loaded (compare to SQLite3::SQLITE_VERSION
  which is the version at compile-time).

Fixed

* SQLite3::Database#load_extensions now raises a TypeError unless a String
  is passed as the file path.  Previously it was possible to pass a
  non-string and cause a segfault.  [#339]

(taca)

2022-09-09 13:12:04 UTC MAIN commitmail json YAML

doc: Updated misc/ruby-bundler to 2.3.22

(taca)

2022-09-09 13:11:42 UTC MAIN commitmail json YAML

misc/ruby-bundler: update to 2.3.22

2.3.22 (2022-09-07)

Enhancements:

* Use a more accurate source code uri in gemspec #5896
* Support --path option in bundle add #5897
* Improve lockfile dependency unlocking #5881
* Add platform alias :windows to Gemfile DSL #5650
* Make #to_lock consistent between Gem::Dependency and Bundler::Dependency
  #5872
* Support marshaled index specifications with nil required ruby version
  #5824

Bug fixes:

* Fix resolution hanging on musl platforms #5875
* Fix another regression affecting the sorbet family of gems #5874

Documentation:

* Introduce bundle-console(1) man #5901
* Introduce bundle-version(1) man #5895
* Introduce bundle-help(1) man #5886

(taca)

2022-09-09 10:58:15 UTC MAIN commitmail json YAML

bootstrap: Remove old -isystem hack on macOS.

This was introduced many years ago in PR#26143 to try and work around a
misconfiguration in how Apple's GCC was built at the time.  Newer compilers no
longer look in /usr/local/include, and this workaround can now be harmful when
trying to pick a specific SDK to build against.

(jperkin)

2022-09-09 09:05:47 UTC MAIN commitmail json YAML

Add p5-Net-SSH2.

(he)

2022-09-09 09:05:20 UTC MAIN commitmail json YAML

Note addition of p5-Net-SSH2 version 0.73.

(he)

2022-09-09 09:04:24 UTC MAIN commitmail json YAML

security/p5-Net-SSH2: add Net::SSH2 version 0.73.

Net::SSH2 is a Perl interface to the libssh2 library.  It supports
the SSH2 protocol (there is no support for SSH1) with all of the
key exchanges, ciphers, and compression of libssh2.

(he)

2022-09-09 08:46:50 UTC MAIN commitmail json YAML

doc: Updated textproc/lok to 0.2.2

(pin)

2022-09-09 08:46:31 UTC MAIN commitmail json YAML

textproc/lok: update to 0.2.2

- Update worker.
- Bump dependencies.

(pin)

2022-09-09 08:45:40 UTC MAIN commitmail json YAML

doc: Updated shells/nushell to 0.68.1

(pin)

2022-09-09 08:45:19 UTC MAIN commitmail json YAML

shells/nushell: update to 0.68.1

This is the 0.68.1 release of Nushell. It is a bugfix release of 0.68.
This addresses a bug with blocks and source-env.

For convenience, we are providing full builds for Windows, Linux, and macOS.
These are the "all extra features" builds, so be sure you have the requirements
to enable all capabilities:
https://www.nushell.sh/book/installation.html#dependencies

With this release, we have also statically linked OpenSSL into the binary to
make it easier to use across a larger range of platforms. If you encounter any
issue with this, please let us know.

(pin)

2022-09-09 07:39:45 UTC MAIN commitmail json YAML

oculante: add fontconfig/bl3.mk to fix build with modular X

Bump PKGREVISION.

(wiz)

2022-09-09 06:52:46 UTC MAIN commitmail json YAML

doc/TODO: add some

+ calibre-6.4.0, tor-browser-11.5.2.

(wiz)

2022-09-08 20:29:53 UTC MAIN commitmail json YAML

doc: Updated www/seamonkey-l10n to 2.53.13

(ryoon)

2022-09-08 20:29:21 UTC MAIN commitmail json YAML

seamonkey-l10n: Update to 2.53.13

* Sync with www/seamonkey-2.53.13.

(ryoon)

2022-09-08 20:28:17 UTC MAIN commitmail json YAML

doc: Updated www/seamonkey to 2.53.13

(ryoon)

2022-09-08 20:27:33 UTC MAIN commitmail json YAML

seamonkey: Update to 2.53.13

* Use libwebp from pkgsrc/graphics/libwebp.
* Drop gtk2 dependency.

Changelog:
What's New in SeaMonkey 2.53.13

SeaMonkey 2.53.13 contains (among other changes) the following major changes
relative to SeaMonkey 2.53.12:

  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators bug
    1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.

SeaMonkey 2.53.13 contains (among other changes) the following major changes
relative to SeaMonkey 2.49.5:

  * The Bookmarks Manager has switched its name to Library, and now also
    includes the History list. When History is invoked, the Library will be
    shown with the History list selected. The extensive modifications were
    needed because of Mozilla Gecko platform API changes.
  * Download Manager has been migrated to a new API. Although it looks pretty
    much the same as before, the search option is missing and some other minor
    details work differently. The previous downloads history is removed during
    the upgrade.
  * The layout panel was added to the CSS Grid tools.
  * TLS 1.3 is the default SSL version now.
  * Support for all NPAPI plugins like Flash, Java and Silverlight has been
    removed. For displaying pdf files in the browser you can use
    pdf.js-seamonkey from Isaac Schemm.
  * SeaMonkey now uses a new api for formatting regional data like time and
    date. Default is to use the application locale of the current SeaMonkey
    build. If you use a language pack or a different OS formatting this is
    usually not desired. You can change the formatting from the application
    locale to the regional settings locale (OS) in the preferences dialog under
    "Appearance".

SeaMonkey 2.53.13 uses the same backend as Firefox and contains the relevant
Firefox 60.8 security fixes.

SeaMonkey 2.53.13 shares most parts of the mail and news code with Thunderbird.
Please read the Thunderbird 60.8.0 release notes for specific security fixes in
this release.

Additional important security fixes up to Current Firefox 91.11 and Thunderbird
91.11 ESR plus many enhancements have been backported. We will continue to
enhance SeaMonkey security in subsequent 2.53.x beta and release versions as
fast as we are able to.

SeaMonkey-specific changes

  * SeaMonkey now uses gtk3 on Linux. If you experience a problem because of
    this please file a bug and link it to bug 1367257. Please try another OS
    theme first. Some of them are buggy and cause problems with SeaMonkey,
    Thunderbird and Firefox.

(ryoon)

2022-09-08 19:55:49 UTC MAIN commitmail json YAML

doc: Updated www/firefox-l10n to 104.0.2

(ryoon)

2022-09-08 19:55:15 UTC MAIN commitmail json YAML

firefox-l10n: Update to 104.0.2

* Sync with www/firefox-104.0.2.

(ryoon)

2022-09-08 19:54:55 UTC MAIN commitmail json YAML

doc: Updated www/firefox to 104.0.2

(ryoon)

2022-09-08 19:54:16 UTC MAIN commitmail json YAML

firefox: Update to 104.0.2

Changelog:
Fixed

  * Fixed a bug making it impossible to use touch or a stylus to drag the
    scrollbar on pages (bug 1787361).

  * Fixed an issue causing some users to crash in out-of-memory conditions (bug
    1774155).

  * Fixed an issue that would sometimes affect video & audio playback when
    loaded via a cross-origin iframe src attribute (bug 1781759).

  * Fixed an issue that would sometimes affect video & audio playback when
    served with Content-Security-Policy: sandbox (bug 1781063).

(ryoon)

2022-09-08 18:16:00 UTC MAIN commitmail json YAML

doc: Updated net/gvproxy to 0.4.0

(bsiegert)

2022-09-08 18:15:46 UTC MAIN commitmail json YAML

2022-09-08 17:53:40 UTC MAIN commitmail json YAML

doc: Updated www/caddy to 2.5.2

(bsiegert)

2022-09-08 17:53:22 UTC MAIN commitmail json YAML

caddy: update to 2.5.2. From pkgsrc-wip.

This version builds with Go 1.19.

v2.5.0

- Reverse proxy: Dynamic upstreams, which is the ability to get the list of
  upstreams at every request (more specifically, every iteration in the proxy
  loop of every request) rather than just once at config-load time. Dynamic
  upstream modules can be plugged in to provide Caddy with the latest list of
  backends in real-time. Two standard modules have been implemented which can
  get upstreams from SRV and A/AAAA record lookups.
  This deprecates the lookup_srv JSON field for upstreams (and srv+ scheme
  prefix in the Caddyfile), which will be removed in the future.
- Automatic HTTPS: Caddy will automatically try to get relevant certificates
  from the local Tailscale instance (if running with permission to access the
  Tailscale socket). This makes services running on a Tailscale network
  automatically available over trusted HTTPS with Caddy.
- Tracing: New OpenTelemetry integration with the tracing handler module and
  associated tracing directive.
- Reverse proxy: When using the response handlers, a new handler copy_response
  is available to copy the proxy's response back to the client, and
  copy_response_headers may be used to selectively copy header values from the
  proxy's response.
- API: Added new endpoints /pki/ca/<id> and /pki/ca/<id>/certificates for
  getting information about Caddy's managed CAs, including the chain of root
  and intermediate certificates.

v2.5.1

- Fixed regression in Unix socket admin endpoints.
- Fixed regression in caddy trust commands.
- Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie)
  use an improved highest-random-weight (HRW) algorithm for increased
  consistency. The new rendezvous hash will ensure a client or request is
  consistently mapped to a particular upstream even if the list of upstreams
  changes.
- The reverse proxy is now able to rewrite the method and URI on its internal
  copy of the request that goes to the upstream. Combined with new
  handle_response capabilities, this enables the reverse proxy to fire off
  "pre-check requests" (for lack of a better term) to make routing decisions
  based on the results of that call. This enables a commonly-emerging pattern
  called forward authentication wherein a backend is queried to assess a client's
  authorization to be proxied. The full, verbose config for this is very flexible
  but tedious, so we made a new wrapper directive called forward_auth that
  eliminates the boilerplate.

v2.5.2

- New /adapt admin endpoint: Use your installed config adapters via API in
  addition to the existing caddy adapt CLI command.
- New Etag/If-Match support for config API: Safely update your config
  concurrently and avoid collisions by using our unique Etag implementation.
- Rename copied headers from reverse_proxy: If you're using handle_response,
  you can more easily map headers to a different name for clients.
- Many HTTP matchers have been added to CEL: You can now use the logic of our
  HTTP request matchers in CEL expressions.
- Notable bug fixes: EAB reuse, various QUIC & HTTP/3 fixes, more specific HTTP
  status codes, various reverse proxy fixes.

(bsiegert)

2022-09-08 15:23:41 UTC MAIN commitmail json YAML

Updated devel/py-dotenv, www/py-uvicorn

(adam)

2022-09-08 15:23:24 UTC MAIN commitmail json YAML

py-uvicorn: updated to 0.18.3

0.18.3

Fixed

Remove cyclic references on HTTP implementations.

Changed

reload_delay default changed from None to 0.25 on uvicorn.run() and Config. None is not an acceptable value anymore.

(adam)

2022-09-08 15:21:59 UTC MAIN commitmail json YAML

py-dotenv: updated to 0.21.0

0.21.0

Added
* CLI: add support for invocations via 'python -m'.
* `load_dotenv` function now returns `False`.
* CLI: add --format= option to list command.

Fixed
* Drop Python 3.5 and 3.6 and upgrade GA
* Use `open` instead of `io.open`.
* Improve documentation for variables without a value
* Add `parse_it` to Related Projects by
* Update README.md by
* Improve documentation with direct use of MkDocs by

(adam)

2022-09-08 15:18:49 UTC MAIN commitmail json YAML

mk/haskell.mk: Fix typos in a comment

(pho)

2022-09-08 15:13:38 UTC MAIN commitmail json YAML

Updated security/py-acme, security/py-certbot*

(adam)

2022-09-08 15:12:57 UTC MAIN commitmail json YAML

py-acme py-certbot*: updated to 1.30.0

Changes 1.30.0

acme.client.ClientBase, acme.messages.Authorization.resolved_combinations,
acme.messages.Authorization.combinations, acme.mixins, acme.fields.resource,
and acme.fields.Resource are deprecated and will be removed in a future release.
acme.messages.OLD_ERROR_PREFIX (urn:acme:error:) is deprecated and support for
the old ACME error prefix in Certbot will be removed in the next major release of
Certbot.
acme.messages.Directory.register is deprecated and will be removed in the next
major release of Certbot. Furthermore, .Directory will only support lookups
by the exact resource name string in the ACME directory (e.g. directory['newOrder']).
The certbot-dns-cloudxns plugin is now deprecated and will be removed in the
next major release of Certbot.
The source_address argument for acme.client.ClientNetwork is deprecated
and support for it will be removed in the next major release.
Add UI text suggesting users create certs for multiple domains, when possible

(adam)

2022-09-08 11:23:08 UTC MAIN commitmail json YAML

doc: Updated net/kubectl to 1.22.13

(leot)

2022-09-08 11:23:03 UTC MAIN commitmail json YAML

kubectl: Update to 1.22.13

Changes:
- No significant changes for kubectl except some dependencies bump.

(leot)

2022-09-08 07:46:34 UTC MAIN commitmail json YAML

Updated devel/py-test-randomly, devel/py-virtualenv

(adam)

2022-09-08 07:46:10 UTC MAIN commitmail json YAML

py-virtualenv: updated to 20.16.5

v20.16.5 (2022-09-07)
---------------------

Bugfixes - 20.16.5
~~~~~~~~~~~~~~~~~~
- Do not turn echo off for subsequent commands in batch activators
  (``activate.bat`` and ``deactivate.bat``) - by :user:`pawelszramowski`.

v20.16.4 (2022-08-29)
---------------------

Bugfixes - 20.16.4
~~~~~~~~~~~~~~~~~~
- Bump embed setuptools to ``65.3`` - by :user:`gaborbernat`.

v20.16.3 (2022-08-04)
---------------------

Bugfixes - 20.16.3
~~~~~~~~~~~~~~~~~~
- Upgrade embedded pip to ``22.2.2`` from ``22.2.1`` and setuptools to ``63.4.1`` from ``63.2.0`` - by :user:`gaborbernat`.

v20.16.2 (2022-07-27)
---------------------

Bugfixes - 20.16.2
~~~~~~~~~~~~~~~~~~
- Bump embeded pip from ``22.2`` to ``22.2.1`` - by :user:`gaborbernat`.

v20.16.1 (2022-07-26)
---------------------

Features - 20.16.1
~~~~~~~~~~~~~~~~~~
- Update Nushell activation scripts to version 0.67 - by :user:`kubouch`.

v20.16.0 (2022-07-25)
---------------------

Features - 20.16.0
~~~~~~~~~~~~~~~~~~
- Drop support for running under Python 2 (still can generate Python 2 environments) - by :user:`gaborbernat`.
- Upgrade embedded pip to ``22.2`` from ``22.1.2`` and  setuptools to ``63.2.0`` from ``62.6.0`` -
  by :user:`gaborbernat`.

(adam)

2022-09-08 07:44:36 UTC MAIN commitmail json YAML

py-test-randomly: updated to 3.12.0

3.12.0 (2022-05-11)
-------------------

* Support Python 3.11.

3.11.0 (2022-01-10)
-------------------

* Drop Python 3.6 support.

3.10.3 (2021-11-30)
-------------------

* Work on FIPS Python 3.9+, by declaring use of ``hashlib.md5()`` as not used for security.

3.10.2 (2021-11-10)
-------------------

* Fix crash when pytest窶冱 cacheprovider is disabled.
* Improve group name in ``pytest --help``.

3.10.1 (2021-08-13)
-------------------

* Fix new shuffling to work when one or more test in a class or module have the
  same test id.

3.10.0 (2021-08-13)
-------------------

* Rework shuffling algorithm to use hashing. This means that running a subset
  of tests with the same seed will now produce the same ordering as running the
  full set of tests. This allows narrowing down ordering-related failures.

* Shuffle before other test collection hooks. This allows
  pytest窶冱 `--stepwise flag
  <https://docs.pytest.org/en/latest/cache.html#stepwise>`__ to work, among
  other things.

3.9.0 (2021-08-12)
------------------

* Add type hints.

3.8.0 (2021-05-10)
------------------

* Support Python 3.10.

3.7.0 (2021-04-11)
------------------

* Drop dependency on ``backports.entry-points-selectable`` by depending on
  ``importlib-metadata`` version 3.6.0+.

3.6.0 (2021-04-01)
------------------

* Fix deprecation warning from importlib-metadata 3.9.0+.

* Stop distributing tests to reduce package size. Tests are not intended to be
  run outside of the tox setup in the repository. Repackagers can use GitHub's
  tarballs per tag.

* Drop Python 3.5 support.

3.5.0 (2020-11-16)
------------------

* Support Python 3.9.
* Move license from BSD to MIT License.

3.4.1 (2020-07-10)
------------------

* Fix numpy error ``ValueError: Seed must be between 0 and 2**32 - 1`` when
  passed a seed outside of this range.

3.4.0 (2020-05-27)
------------------

* Provide a ``faker_seed`` fixture to set the seed for tests using faker's
  pytest fixtures

(adam)

2022-09-08 07:38:50 UTC MAIN commitmail json YAML

mk/haskell.mk: print-PLIST: Prefix optionally-built files with ${PLIST.*}

HASKELL_ENABLE_SHARED_LIBRARY, HASKELL_ENABLE_LIBRARY_PROFILING, and
HASKELL_ENABLE_HADDOCK_DOCUMENTATION are user-settable variables that can
affect the set of installed files. `make print-PLIST' should automatically
handle these.

(pho)

2022-09-08 07:22:24 UTC MAIN commitmail json YAML

doc: Updated graphics/oculante to 0.6.8

(pin)

2022-09-08 07:22:04 UTC MAIN commitmail json YAML

graphics/oculante: update to 0.6.8

0.6.8 (2022-09-07)
Bug Fixes
- Remove offset when initially clicking into OSX window (81544cc4)

Features
- Persistent settings support. Vsync and color theme are now customizable.
  (21ed3954)

Chore
- Update psd, ext, dds-rs (ad2f531b)

0.6.7 (2022-09-06)
Bug Fixes
- Disable image center on window resize, as this caused jumping (ee557d47)

Features
- Add Posterize image effect (3e019728)
- Equalize image operator added (748bf15e)
- Allow editing the export image extension to save as a different image format
  (23519eee)

(pin)

2022-09-08 07:21:25 UTC MAIN commitmail json YAML

doc: Updated benchmarks/hyperfine to 1.15.0

(pin)

2022-09-08 07:21:03 UTC MAIN commitmail json YAML

benchmarks/hyperfine: update to 1.15.0

v1.15.0
Features
- Disable colorized output in case of TERM=dumb or NO_COLOR=1, see #542 and
  #555 (@nabijaczleweli)
- Add new (experimental) --min-benchmarking-time <secs> option, see #527
  (@sharkdp)

Bugfixes
- Fix user and kernel times on Windows, see #368 and #538 (@clemenswasser)

Other
- Improve --help texts of --export-* options, see #506 and #522
  (@Engineer-of-Efficiency)

(pin)

2022-09-08 05:26:16 UTC MAIN commitmail json YAML

mk: fix typos in comments

(wiz)

2022-09-08 05:17:54 UTC MAIN commitmail json YAML

mail/Makefile: sort

(wiz)

2022-09-08 05:09:35 UTC MAIN commitmail json YAML

Updated security/py-cryptography, security/py-cryptography_vectors

(adam)

2022-09-08 05:08:52 UTC MAIN commitmail json YAML

2022-09-08 04:46:41 UTC MAIN commitmail json YAML

lang/purescript/Makefile: Make use of HASKELL_UNRESTRICTED_DEPENDENCIES

(pho)

2022-09-08 04:45:44 UTC MAIN commitmail json YAML

mk/haskell.mk: New package-settable variable "HASKELL_UNRESTRICT_DEPENDENCIES"

It's a list of Cabal package names whose version constraints need to be
relaxed. This should free ourselves from needing to patch *.cabal files
most of the time. Suggested by wiz@

(pho)

2022-09-08 03:42:10 UTC MAIN commitmail json YAML

mk/haskell.mk: Improve `show-all-haskell' outputs

(pho)

2022-09-07 22:42:29 UTC MAIN commitmail json YAML

doc/TODO: new samba

+ samba-4.16.5.

(taca)

2022-09-07 19:51:44 UTC MAIN commitmail json YAML

Updated graphics/oxipng, converters/py-fastbencode

(adam)

2022-09-07 19:51:21 UTC MAIN commitmail json YAML

py-fastbencode: updated to 0.0.11

0.0.11
Unknown changes

(adam)

2022-09-07 19:48:48 UTC MAIN commitmail json YAML

oxipng: updated to 6.0.1

v6.0.1
Bugfix] Fix an issue where Zopfli mode could generate corrupt images

(adam)

2022-09-07 15:34:01 UTC MAIN commitmail json YAML

Updated lang/python38, lang/python39, lang/py38-html-docs, lang/py39-html-docs

(adam)

2022-09-07 15:33:20 UTC MAIN commitmail json YAML

python39 py39-html-docs: updated to 3.9.14

Python 3.9.14

Security
gh-95778: Converting between int and str in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic complexity. This is a mitigation for CVE-2020-10735.

This new limit can be configured or disabled by environment variable, command line flag, or sys APIs. See the integer string conversion length limitation documentation. The default limit is 4300 digits in string form.

Patch by Gregory P. Smith [Google] and Christian Heimes [Red Hat] with feedback from Victor Stinner, Thomas Wouters, Steve Dower, Ned Deily, and Mark Dickinson.
gh-87389: http.server: Fix an open redirection vulnerability in the HTTP server when an URI path starts with //. Vulnerability discovered, and initial fix proposed, by Hamza Avvan.

Core and Builtins
gh-93065: Fix contextvars HAMT implementation to handle iteration over deep trees.

The bug was discovered and fixed by Eli Libman. See MagicStack/immutables#84 for more details.

Library
gh-94821: Fix binding of unix socket to empty address on Linux to use an available address from the abstract namespace, instead of “0”.
gh-91810: Suppress writing an XML declaration in open files in ElementTree.write() with encoding='unicode' and xml_declaration=None.
bpo-45393: Fix the formatting for await x and not x in the operator precedence table when using the help() system.
bpo-46197: Fix ensurepip environment isolation for subprocess running pip.

Tests
gh-95280: Fix problem with test_ssl test_get_ciphers on systems that require perfect forward secrecy (PFS) ciphers.
gh-94208: test_ssl is now checking for supported TLS version and protocols in more tests.
bpo-47016: Create a GitHub Actions workflow for verifying bundled pip and setuptools. Patch by Illia Volochii and Adam Turner.

(adam)

2022-09-07 15:32:34 UTC MAIN commitmail json YAML

python38 py38-html-docs: updated to 3.8.14

Python 3.8.14

Security
gh-95778: Converting between int and str in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic complexity. This is a mitigation for CVE-2020-10735.

This new limit can be configured or disabled by environment variable, command line flag, or sys APIs. See the integer string conversion length limitation documentation. The default limit is 4300 digits in string form.

Patch by Gregory P. Smith [Google] and Christian Heimes [Red Hat] with feedback from Victor Stinner, Thomas Wouters, Steve Dower, Ned Deily, and Mark Dickinson.
gh-87389: http.server: Fix an open redirection vulnerability in the HTTP server when an URI path starts with //. Vulnerability discovered, and initial fix proposed, by Hamza Avvan.

Core and Builtins
gh-93065: Fix contextvars HAMT implementation to handle iteration over deep trees.

The bug was discovered and fixed by Eli Libman. See MagicStack/immutables#84 for more details.

Library
bpo-46197: Fix ensurepip environment isolation for subprocess running pip.
bpo-36073: Raise ProgrammingError instead of segfaulting on recursive usage of cursors in sqlite3 converters. Patch by Sergey Fedoseev.

Documentation
gh-91888: Add a new gh role to the documentation to link to GitHub issues.
bpo-47138: Pin Jinja to a version compatible with Sphinx version 2.4.4.

Tests
gh-94208: test_ssl is now checking for supported TLS version and protocols in more tests.
bpo-47016: Create a GitHub Actions workflow for verifying bundled pip and setuptools. Patch by Illia Volochii and Adam Turner.
bpo-46114: Fix test case for OpenSSL 3.0.1 version. OpenSSL 3.0 uses 0xMNN00PP0L.

Windows
bpo-47194: Update zlib to v1.2.12 to resolve CVE-2018-25032.

(adam)

2022-09-07 15:14:13 UTC MAIN commitmail json YAML

Updated math/py-numpy, fonts/py-fonttools

(adam)

2022-09-07 15:13:52 UTC MAIN commitmail json YAML

py-fonttools: updated to 4.37.1

4.37.1 (released 2022-08-24)
----------------------------

- [subset] Fixed regression introduced with v4.37.0 while subsetting the VarStore of
  ``HVAR`` and ``VVAR`` tables, whereby an ``AttributeError: subset_varidxes`` was
  thrown because an apparently unused import statement (with the side-effect of
  dynamically binding that ``subset_varidxes`` method to the VarStore class) had been
  accidentally deleted in an unrelated PR.
- [pens] Added ``cairoPen``.
- [gvar] Read ``gvar`` more lazily by not parsing all of the ``glyf`` table.
- [ttGlyphSet] Make ``drawPoints(pointPen)`` method work for CFF fonts as well via
  adapter pen.

4.37.0 (released 2022-08-23)
----------------------------

- [varLib.models] Reverted PR 2717 which added support for "narrow tents" in v4.36.0,
  as it introduced a regression. It will be restored in upcoming release
  once we found a solution to the bug.
- [cff.specializer] Fixed issue in charstring generalizer with the ``blend`` operator.
- [varLib.models] Added support for extrapolation.
- [ttGlyphSet] Ensure the newly added ``_TTVarGlyphSet`` inherits from ``_TTGlyphSet``
  to keep backward compatibility with existing API.
- [kern] Allow compiling legacy kern tables with more than 64k entries (d21cfdede).
- [visitor] Added new visitor API to traverse tree of objects and dispatch based
  on the attribute type: cf. ``fontTools.misc.visitor`` and ``fontTools.ttLib.ttVisitor``. Added ``fontTools.ttLib.scaleUpem`` module that uses the latter to
  change a font's units-per-em and scale all the related fields accordingly.

4.36.0 (released 2022-08-17)
----------------------------

- [varLib.models] Use a simpler model that generates narrower "tents" (regions, master
  supports) whenever possible: specifically when any two axes that actively "cooperate"
  (have masters at non-zero positions for both axes) have a complete set of intermediates.
  The simpler algorithm produces fewer overlapping regions and behaves better with
  respect to rounding at the peak positions than the generic solver, always matching
  intermediate masters exactly, instead of maximally 0.5 units off. This may be useful
  when 100% metrics compatibility is desired.
- [feaLib] Remove warning when about ``GDEF`` not being built when explicitly not
  requested; don't build one unconditonally even when not requested.
- [ttFont] ``TTFont.getGlyphSet`` method now supports selecting a location that
  represents an instance of a variable font (supports both user-scale and normalized
  axes coordinates via the ``normalized=False`` parameter). Currently this only works
  for TrueType-flavored variable fonts.

4.35.0 (released 2022-08-15)
----------------------------

- [otData/otConverters] Added support for 'biased' PaintSweepGradient start/end angles
  to match latest COLRv1 spec.
- [varLib.instancer] Fixed bug in ``_instantiateFeatureVariations`` when at the same
  time pinning one axis and restricting the range of a subsequent axis; the wrong axis
  tag was being used in the latter step (as the records' axisIdx was updated in the
  preceding step but looked up using the old axes order in the following step).
- [mtiLib] Pad script tags with space when less than 4 char long.
- [merge] Use ``'.'`` instead of ``'#'`` in duplicate glyph names.
- [gvar] Added support for lazily loading glyph variations.
- [varLib] In ``build_many``, we forgot to pass on ``colr_layer_reuse`` parameter to
  the ``build`` method.
- [svgPathPen] Add a main that prints SVG for input text (6df779fd).
- [cffLib.width] Fixed off-by-one in optimized values; previous code didn't match the
  code block above it (2963fa50).
- [varLib.interpolatable] Support reading .designspace and .glyphs files (via optional
  ``glyphsLib``).
- Compile some modules with Cython when available and building/installing fonttools
  from source: ``varLib.iup`` (35% faster), ``pens.momentsPen`` (makes
  ``varLib.interpolatable`` 3x faster).
- [feaLib] Allow features to be built for VF without also building a GDEF table (e.g.
  only build GSUB); warn when GDEF would be needed but isn't requested.
- [otBase] Fixed ``AttributeError`` when uharfbuzz < 0.23.0 and 'repack' method is
  missing (32aa8eaf). Use new ``uharfbuzz.repack_with_tag`` when available (since
  uharfbuzz>=0.30.0), enables table-specific optimizations to be performed during
  repacking.
- [statisticsPen] By default report all glyphs (4139d891). Avoid division-by-zero
  (52b28f90).
- [feaLib] Added missing required argument to FeatureLibError exception
- [varLib.merge] Fixed error during error reporting. Fixed undefined
  ``NotANone`` variable.

4.34.4 (released 2022-07-07)
----------------------------

- Fixed typo in varLib/merger.py that causes NameError merging COLR glyphs
  containing more than 255 layers.

4.34.3 (released 2022-07-07)
----------------------------

- [designspaceLib] Don't make up bad PS names when no STAT data

4.34.2 (released 2022-07-06)
----------------------------

- [varStore/subset] fixed KeyError exception to do with NO_VARIATION_INDEX while
  subsetting varidxes in GPOS/GDEF (a08140d).

4.34.1 (released 2022-07-06)
----------------------------

- [instancer] When optimizing HVAR/VVAR VarStore, use_NO_VARIATION_INDEX=False to avoid
  including NO_VARIATION_INDEX in AdvWidthMap, RsbMap, LsbMap mappings, which would
  push the VarIdx width to maximum (4bytes), which is not desirable. This also fixes
  a hard crash when attempting to subset a varfont after it had been partially instanced
  with use_NO_VARIATION_INDEX=True.

4.34.0 (released 2022-07-06)
----------------------------

- [instancer] Set RIBBI bits in head and OS/2 table when cutting instances and the
  subfamily nameID=2 contains strings like 'Italic' or 'Bold'.
- [otTraverse] Addded module containing methods for traversing trees of otData tables
.
- [otTables] Made DeltaSetIndexMap TTX dump less verbose by omitting no-op entries
.
- [colorLib.builder] Added option to disable PaintColrLayers's reuse of layers from
  LayerList.
- [varLib] Added support for merging multiple master COLRv1 tables into a variable
  COLR table. Base color glyphs of same name in different masters must have
  identical paint graph structure (incl. number of layers, palette indices, number
  of color line stops, corresponding paint formats at each level of the graph),
  but can differ in the variable fields (e.g. PaintSolid.Alpha). PaintVar* tables
  are produced when this happens and a VarStore/DeltaSetIndexMap is added to the
  variable COLR table. It is possible for non-default masters to be 'sparse', i.e.
  omit some of the color glyphs present in the default master.
- [feaLib] Let the Parser set nameIDs 1 through 6 that were previously reserved.
- [varLib.varStore] Support NO_VARIATION_INDEX in optimizer and instancer.
- [feaLib] Show all missing glyphs at once at end of parsing.
- [varLib.iup] Rewrite force-set conditions and limit DP loopback length.
  For Noto Sans, IUP time drops from 23s down to 9s, with only a slight size increase
  in the final font. This basically turns the algorithm from O(n^3) into O(n).
- [featureVars] Report about missing glyphs in substitution rules.
- [mutator/instancer] Added CLI flag to --no-recalc-timestamp.
- [SVG] Allow individual SVG documents in SVG OT table to be compressed on uncompressed,
  and remember that when roundtripping to/from ttx. The SVG.docList is now a list
  of SVGDocument namedtuple-like dataclass containing an extra ``compressed`` field,
  and no longer a bare 3-tuple.
- [designspaceLib] Check for descriptor types with hasattr() to allow custom classes
  that don't inherit the default descriptors.
- [subset] Enable sharing across subtables of extension lookups for harfbuzz packing
. Updated how table packing falls back to fontTools from harfbuzz.
- [subset] Updated default feature tags following current Harfbuzz.
- [svgLib] Fixed regex for real number to support e.g. 1e-4 in addition to 1.0e-4.
  Support parsing negative rx, ry on arc commands.
- [subset] Fixed subsetting SinglePosFormat2 when ValueFormat=0.

(adam)

2022-09-07 15:11:56 UTC MAIN commitmail json YAML

py-numpy: updated to 1.23.2

NUMPY 1.23.0 RELEASED

Jun 22, 2022 – NumPy 1.23.0 is now available. The highlights of the release are:

Implementation of loadtxt in C, greatly improving its performance.
Exposure of DLPack at the Python level for easy data exchange.
Changes to the promotion and comparisons of structured dtypes.
Improvements to f2py.
The NumPy 1.23.0 release continues the ongoing work to improve the handling and promotion of dtypes, increase the execution speed, clarify the documentation, and expire old deprecations. It is the work of 151 contributors spread over 494 pull requests. The Python versions supported by this release 3.8-3.10. Python 3.11 will be supported when it reaches the rc stage.

(adam)

2022-09-07 09:37:15 UTC MAIN commitmail json YAML

2022-09-07 09:32:31 UTC MAIN commitmail json YAML

2022-09-07 08:04:43 UTC MAIN commitmail json YAML

Updated security/py-cryptography, security/py-cryptography_vectors

(adam)

2022-09-07 08:04:18 UTC MAIN commitmail json YAML

py-cryptography py-cryptography_vectors: updated to 38.0.0

38.0.0 - 2022-09-06
~~~~~~~~~~~~~~~~~~~

* Final deprecation of OpenSSL 1.1.0. The next release of ``cryptography``
  will drop support.
* We no longer ship ``manylinux2010`` wheels. Users should upgrade to the
  latest ``pip`` to ensure this doesn't cause issues downloading wheels on
  their platform. We now ship ``manylinux_2_28`` wheels for users on new
  enough platforms.
* Updated the minimum supported Rust version (MSRV) to 1.48.0, from 1.41.0.
  Users with the latest ``pip`` will typically get a wheel and not need Rust
  installed, but check :doc:`/installation` for documentation on installing a
  newer ``rustc`` if required.
* :meth:`~cryptography.fernet.Fernet.decrypt` and related methods now accept
  both ``str`` and ``bytes`` tokens.
* Parsing ``CertificateSigningRequest`` restores the behavior of enforcing
  that the ``Extension`` ``critical`` field must be correctly encoded DER. See
  `the issue <https://github.com/pyca/cryptography/issues/6368>`_ for complete
  details.
* Added two new OpenSSL functions to the bindings to support an upcoming
  ``pyOpenSSL`` release.
* When parsing :class:`~cryptography.x509.CertificateRevocationList` and
  :class:`~cryptography.x509.CertificateSigningRequest` values, it is now
  enforced that the ``version`` value in the input must be valid according to
  the rules of :rfc:`2986` and :rfc:`5280`.
* Using MD5 or SHA1 in :class:`~cryptography.x509.CertificateBuilder` and
  other X.509 builders is deprecated and support will be removed in the next
  version.
* Added additional APIs to
  :class:`~cryptography.x509.certificate_transparency.SignedCertificateTimestamp`, including
  :attr:`~cryptography.x509.certificate_transparency.SignedCertificateTimestamp.signature_hash_algorithm`,
  :attr:`~cryptography.x509.certificate_transparency.SignedCertificateTimestamp.signature_algorithm`,
  :attr:`~cryptography.x509.certificate_transparency.SignedCertificateTimestamp.signature`, and
  :attr:`~cryptography.x509.certificate_transparency.SignedCertificateTimestamp.extension_bytes`.
* Added :attr:`~cryptography.x509.Certificate.tbs_precertificate_bytes`, allowing
  users to access the to-be-signed pre-certificate data needed for signed
  certificate timestamp verification.
* :class:`~cryptography.hazmat.primitives.kdf.kbkdf.KBKDFHMAC` and
  :class:`~cryptography.hazmat.primitives.kdf.kbkdf.KBKDFCMAC` now support
  :attr:`~cryptography.hazmat.primitives.kdf.kbkdf.CounterLocation.MiddleFixed`
  counter location.
* Fixed :rfc:`4514` name parsing to reverse the order of the RDNs according
  to the section 2.1 of the RFC, affecting method
  :meth:`~cryptography.x509.Name.from_rfc4514_string`.
* It is now possible to customize some aspects of encryption when serializing
  private keys, using
  :meth:`~cryptography.hazmat.primitives.serialization.PrivateFormat.encryption_builder`.
* Removed several legacy symbols from our OpenSSL bindings. Users of pyOpenSSL
  versions older than 22.0 will need to upgrade.
* Added
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.AES128` and
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.AES256` classes.
  These classes do not replace
  :class:`~cryptography.hazmat.primitives.ciphers.algorithms.AES` (which
  allows all AES key lengths), but are intended for applications where
  developers want to be explicit about key length.

(adam)

2022-09-07 06:50:53 UTC MAIN commitmail json YAML

2022-09-07 06:44:51 UTC MAIN commitmail json YAML

doc: Updated devel/hs-protolude to 0.3.2nb1

(pho)

2022-09-07 06:43:41 UTC MAIN commitmail json YAML

devel/hs-protolude: Update to 0.3.2

0.3.2
* GHC 9.2.2 support
* Drop export executable

0.3.1
* GHC 9.0.1 and 9.2.1 support
* Add HasCallStack to unsafe* functions.
* Banish String on readMaybe and readEither.

(pho)

2022-09-07 06:36:55 UTC MAIN commitmail json YAML

doc: Updated lang/go118 to 1.18.6

(bsiegert)

2022-09-07 06:36:33 UTC MAIN commitmail json YAML

go118: update to 1.18.6 (security)

This minor release includes 2 security fixes following the security policy:

net/http: handle server errors after sending GOAWAY

A closing HTTP/2 server connection could hang forever waiting for a clean
shutdown that was preempted by a subsequent fatal error. This failure mode
could be exploited to cause a denial of service.

Thanks to Bahruz Jabiyev, Tommaso Innocenti, Anthony Gavazzi, Steven Sprecher,
and Kaan Onarlioglu for reporting this.

This is CVE-2022-27664 and Go issue https://go.dev/issue/54658.

net/url: JoinPath does not strip relative path components in all circumstances

JoinPath and URL.JoinPath would not remove ../ path components appended to a
relative path. For example, JoinPath("https://go.dev", "../go") returned the
URL https://go.dev/../go, despite the JoinPath documentation stating that ../
path elements are cleaned from the result.

Thanks to q0jt for reporting this issue.

This is CVE-2022-32190 and Go issue https://go.dev/issue/54385.

(bsiegert)

2022-09-07 02:57:19 UTC MAIN commitmail json YAML

devel/Makefile: + hs-monoidal-containers

(pho)

2022-09-07 02:57:10 UTC MAIN commitmail json YAML

doc: Added devel/hs-monoidal-containers version 0.6.2.0

(pho)

2022-09-07 02:57:02 UTC MAIN commitmail json YAML

devel/hs-monoidal-containers: import hs-monoidal-containers-0.6.2.0

Containers with merging via monoidal accumulation. The Monoid instances
provided by the "containers" and "unordered-containers" packages merge
structures in a left-biased manner instead of using the underlying monoidal
structure of the value.

This package wraps the types provided by these packages, but provides
Monoid instances implemented in terms of the value type's mappend. For
instance, the Monoid Map instance looks like,

  instance (Ord k, Semigroup a) => Monoid (MonoidalMap k a)

(pho)

2022-09-07 02:56:35 UTC MAIN commitmail json YAML

devel/Makefile: + hs-newtype

(pho)

2022-09-07 02:56:07 UTC MAIN commitmail json YAML

doc: Added devel/hs-newtype version 0.2.2.0

(pho)

2022-09-07 02:56:00 UTC MAIN commitmail json YAML

devel/hs-newtype: import hs-newtype-0.2.2.0

Per Conor McBride, the "Newtype" typeclass represents the packing and
unpacking of a newtype, and allows you to operate under that newtype with
functions such as "ala".

(pho)

2022-09-07 02:54:01 UTC MAIN commitmail json YAML

doc: Updated lang/purescript to 0.15.4

(pho)

2022-09-07 02:53:52 UTC MAIN commitmail json YAML

2022-09-07 02:18:16 UTC MAIN commitmail json YAML

doc: Updated sysutils/hs-typed-process to 0.2.10.1

(pho)

2022-09-07 02:18:04 UTC MAIN commitmail json YAML

sysutils/typed-process: Update to 0.2.10.1

0.2.10.0
* Add mkPipeStreamSpec

0.2.9.0
* Re-export StdStream

(pho)

2022-09-07 02:07:01 UTC MAIN commitmail json YAML

devel/hs-memory: Forgot to update buildlink3.mk

(pho)

2022-09-07 01:36:40 UTC MAIN commitmail json YAML

doc: Updated devel/hs-memory to 0.18.0

(pho)

2022-09-07 01:36:31 UTC MAIN commitmail json YAML

devel/hs-memory: Update to 0.18.0

* drop support for ghc < 8.8
* compat with ghc 9.4

(pho)

2022-09-07 00:58:55 UTC MAIN commitmail json YAML

doc: Updated security/hs-cryptonite to 0.30

(pho)

2022-09-07 00:58:46 UTC MAIN commitmail json YAML

security/hs-cryptonite: Update to 0.30

* Fix some C symbol blake2b prefix to be cryptonite_ prefix (fix mixing
  with other C library)
* add hmac-lazy
* Fix compilation with GHC 9.2
* Drop support for GHC8.0, GHC8.2, GHC8.4, GHC8.6

(pho)

2022-09-06 22:47:33 UTC MAIN commitmail json YAML

doc: Updated x11/xfce4-notifyd to 0.6.4

(gutteridge)

2022-09-06 22:47:17 UTC MAIN commitmail json YAML

xfce4-notifyd: update to 0.6.4

Change log:

0.6.4
======
- settings: Improve app icon and name matching
- settings: Sort known apps by notification count
- settings: Show 'Unspecified app' instead of empty line
- daemon: Improve application icon matching
- Correctly reset position during slideout (Fixes #42)
- panel-plugin: Remove duplicate function call (Fixes #40)
- panel-plugin: Fix file monitor (Fixes #40)
- Properly free the GKeyFile
- tests: Add logging test
- Fix compiler warnings
- Fix tooltip grammar
- build: Fix intltool lock file problem during make distcheck
- Update gitignore
- Update COPYING (#61)
- Translation Updates:
  Albanian, Basque, Belarusian, Bulgarian, Catalan, Chinese (China),
  Chinese (Taiwan), Czech, Danish, Dutch, Eastern Armenian, Estonian,
  French, Galician, German, Greek, Hebrew, Indonesian, Italian,
  Japanese, Kazakh, Korean, Lithuanian, Malay, Norwegian Bokm奪l,
  Polish, Portuguese, Portuguese (Brazil), Russian, Serbian, Slovak,
  Slovenian, Spanish, Swedish, Thai, Turkish, Ukrainian

(gutteridge)

2022-09-06 21:04:32 UTC MAIN commitmail json YAML

tex package updates

(markd)

2022-09-06 21:03:06 UTC MAIN commitmail json YAML

2022-09-06 21:01:16 UTC MAIN commitmail json YAML

2022-09-06 20:59:14 UTC MAIN commitmail json YAML

tex-lwarp{,-doc}: update to 0.908

0.908
Fixed obscure reference bug, sometimes seen in citations.

0.907
Fix for SVG images with Windows.

0.906
Improvements for screen readers.

(markd)

2022-09-06 20:54:32 UTC MAIN commitmail json YAML

2022-09-06 20:52:22 UTC MAIN commitmail json YAML

tex-koma-script: update to 3.37

The source code of the KOMA-Script user manuals has been reorganized.
The old 8+3 names of the manuals have been replaced by more canonical names
`scrguide-de.pdf` (German manual) and `scrguide-en.pdf` (English manual).
`README` has been replaced by `README.md`, `manifest.txt` bei `MANIFEST.md`.
The HTML wrapper files have been replaced by individual files for each class
and package linking to the corresponding chapter of the KOMA-Script user
manuals.

Additionally the issues 21, 23, 24, 25, 28, 29, 30, 31, 32, 33
have been fixed.

(markd)

2022-09-06 20:47:39 UTC MAIN commitmail json YAML

tex-etoc{,-doc}: update to 1.09f

Maintenance release with documentation improvements and addition of
\etocimmediatedepthtag.toc as well as some other "immediate" variants of
macros writing to the .toc file.  Refer to README.md for details.

The German language documentation was without updates since April 2015 and
had become obsolete in various ways.  It is not distributed anymore.

(markd)

2022-09-06 20:46:55 UTC MAIN commitmail json YAML

doc: Updated shells/nushell to 0.68.0

(pin)

2022-09-06 20:46:24 UTC MAIN commitmail json YAML

shells/nushell: update to 0.68.0

This is a huge jump over several releases and it's impossible to list changes.
Please visit https://www.nushell.sh/blog/ for the details of every release.

Be aware that there are lots of changes across all aspects of Nushell.

- There's a new engine, new line editor, and new commands.
- Configuration files will not work and have to be re-written.
- Previous scripts will need to be updated, and you'll need to learn some of
  the new ways of doing things in Nushell to get back to the same level of
  comfort.
- Several shell improvements and behavior changes.
- There's also a new plugin architecture and quite a number of breaking
  changes after fixing design flaws, cleaned-up the design, and rethought how
  commands should work.
- New additional startup file (env.nu) which, sets up the environment that
  you'll run Nushell in. As a result, you're able to set up important
  environment variables like $env.NU_LIB_DIRS before 'config.nu' begins to run.
- Deeper integration with SQLite, new completion logic, introduction of
  overlays, hooks, lazy dataframes, input overloading, input/output type,
  new variable naming convention ...

So, please do read about the changes before.

(pin)

2022-09-06 19:51:41 UTC MAIN commitmail json YAML

doc: fix entry

(wiz)

2022-09-06 19:45:11 UTC MAIN commitmail json YAML

doc: Updated parallel/py-ipyparallel to 8.4.1nb1

(wiz)

2022-09-06 19:44:58 UTC MAIN commitmail json YAML

py-ipyparallel: fix PLIST

Bump PKGREVISION.

Fix a pkglint warning while here.

(wiz)

2022-09-06 19:18:50 UTC MAIN commitmail json YAML

doc: Updated time/hs-clock to 0.8.3

(pho)

2022-09-06 19:18:33 UTC MAIN commitmail json YAML

Update to clock-0.8.3

* Dropped support for GHC < 7.8.
* Tested with GHC 7.8 - 9.2.
* TODO: new module System.Clock.Seconds
* TODO: new functions
* TODO: other changes

(pho)

2022-09-06 19:18:14 UTC MAIN commitmail json YAML

Fix a wrong COMMENT

(pho)

2022-09-06 19:14:38 UTC MAIN commitmail json YAML

Updated devel/py-astroid, devel/py-ipython, lang/python310, lang/py310-html-docs

(adam)

2022-09-06 19:13:51 UTC MAIN commitmail json YAML

py310-html-docs: updated to 3.10.7

Match python310 version.

(adam)

2022-09-06 19:13:24 UTC MAIN commitmail json YAML

python310: updated to 3.10.7

Python 3.10.7 final

Security
gh-95778: Converting between int and str in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic complexity. This is a mitigation for CVE-2020-10735.

This new limit can be configured or disabled by environment variable, command line flag, or sys APIs. See the integer string conversion length limitation documentation. The default limit is 4300 digits in string form.

Patch by Gregory P. Smith [Google] and Christian Heimes [Red Hat] with feedback from Victor Stinner, Thomas Wouters, Steve Dower, Ned Deily, and Mark Dickinson.

Core and Builtins
gh-96187: Fixed a bug that caused _PyCode_GetExtra to return garbage for negative indexes. Patch by Pablo Galindo
gh-95876: Fix format string in _PyPegen_raise_error_known_location that can lead to memory corruption on some 64bit systems. The function was building a tuple with i (int) instead of n (Py_ssize_t) for Py_ssize_t arguments.
gh-95605: Fix misleading contents of error message when converting an all-whitespace string to float.
gh-93592: coroutine.throw() now properly initializes the frame.f_back when resuming a stack of coroutines. This allows e.g. traceback.print_stack() to work correctly when an exception (such as CancelledError) is thrown into a coroutine.
gh-94996: ast.parse() will no longer parse function definitions with positional-only params when passed feature_version less than (3, 8). Patch by Shantanu Jain.

Library
gh-68163: Correct conversion of numbers.Rational窶冱 to float.
gh-96159: Fix a performance regression in logging TimedRotatingFileHandler. Only check for special files when the rollover time has passed.
gh-96175: Fix unused localName parameter in the Attr class in xml.dom.minidom.
gh-95609: Update bundled pip to 22.2.2.
gh-95231: Fail gracefully if EPERM or ENOSYS is raised when loading crypt methods. This may happen when trying to load MD5 on a Linux kernel with FIPS enabled.

Documentation
gh-96098: Improve discoverability of the higher level concurrent.futures module by providing clearer links from the lower level threading and multiprocessing modules.
gh-95789: Update the default RFC base URL from deprecated tools.ietf.org to datatracker.ietf.org
gh-91207: Fix stylesheet not working in Windows CHM htmlhelp docs. Contributed by C.A.M. Gerlach.
bpo-47115: The documentation now lists which members of C structs are part of the Limited API/Stable ABI.

Tests
gh-95243: Mitigate the inherent race condition from using find_unused_port() in testSockName() by trying to find an unused port a few times before failing. Patch by Ross Burton.

Build
gh-94682: Build and test with OpenSSL 1.1.1q

IDLE
gh-65802: Document handling of extensions in Save As dialogs.
gh-95191: Include prompts when saving Shell (interactive input and output).

(adam)

2022-09-06 19:12:14 UTC MAIN commitmail json YAML

py-ipython: updated to 8.5.0

IPython 8.5.0
-------------
First release since a couple of month due to various reasons and timing preventing
me for sticking to the usual monthly release the last Friday of each month. This
is of non negligible size as it has more than two dozen PRs with various fixes
an bug fixes.

(adam)

2022-09-06 19:11:39 UTC MAIN commitmail json YAML

doc: Updated lang/go119 to 1.19.1

(bsiegert)

2022-09-06 19:11:13 UTC MAIN commitmail json YAML

go119: update to 1.19.1 (security)

This minor release includes 2 security fixes following the security policy:

net/http: handle server errors after sending GOAWAY

A closing HTTP/2 server connection could hang forever waiting for a clean
shutdown that was preempted by a subsequent fatal error. This failure mode
could be exploited to cause a denial of service.

Thanks to Bahruz Jabiyev, Tommaso Innocenti, Anthony Gavazzi, Steven Sprecher,
and Kaan Onarlioglu for reporting this.

This is CVE-2022-27664 and Go issue https://go.dev/issue/54658.

net/url: JoinPath does not strip relative path components in all circumstances

JoinPath and URL.JoinPath would not remove ../ path components appended to a
relative path. For example, JoinPath("https://go.dev", "../go") returned the
URL https://go.dev/../go, despite the JoinPath documentation stating that ../
path elements are cleaned from the result.

Thanks to q0jt for reporting this issue.

This is CVE-2022-32190 and Go issue https://go.dev/issue/54385.

(bsiegert)

2022-09-06 19:07:54 UTC MAIN commitmail json YAML

py-astroid: updated to 2.12.8

What's New in astroid 2.12.8?
=============================
* Fixed a crash in the ``dataclass`` brain for ``InitVars`` without subscript typing.
* Fixed parsing of default values in ``dataclass`` attributes.

What's New in astroid 2.12.7?
=============================
* Fixed a crash in the ``dataclass`` brain for uninferable bases.

(adam)

2022-09-06 19:03:43 UTC MAIN commitmail json YAML

doc: Updated www/hs-bower-json to 1.1.0.0

(pho)

2022-09-06 19:03:33 UTC MAIN commitmail json YAML

2022-09-06 19:00:22 UTC MAIN commitmail json YAML

Updated databases/sqlite3, databases/sqlite3-docs, databases/sqlite3-tcl, devel/lemon

(adam)

2022-09-06 18:59:11 UTC MAIN commitmail json YAML

sqlite3: updated to 3.39.3

Changes in version 3.39.3 (2022-09-05):

Use a statement journal on DML statement affecting two or more database rows if the statement makes use of a SQL functions that might abort. See forum thread 9b9e4716c0d7bbd1.
Use a mutex to protect the PRAGMA temp_store_directory and PRAGMA data_store_directory statements, even though they are deprecated and documented as not being threadsafe. See forum post 719a11e1314d1c70.
Other bug and warning fixes. See the timeline for details.

(adam)

2022-09-06 18:48:46 UTC MAIN commitmail json YAML

Updated net/nmap, net/ndiff, net/zenmap

(adam)

2022-09-06 18:47:27 UTC MAIN commitmail json YAML

nmap ndiff zenmap: updated to 7.93

Nmap 7.93 [2022-09-01]

o This release commemorates Nmap's 25th anniversary! It all started with this
  September 1, 1997 Phrack article by Fyodor: https://nmap.org/p51-11.html.

o [Windows] Upgraded Npcap (our Windows raw packet capturing and
  transmission driver) from version 1.50 to the latest version 1.71. It
  includes dozens of performance improvements, bug fixes and feature
  enhancements described at https://npcap.com/changelog.

o Ensure Nmap builds with OpenSSL 3.0 using no deprecated API functions.
  Binaries for this release include OpenSSL 3.0.5.

o Upgrade included libraries: libssh2 1.10.0, zlib 1.2.12, Lua 5.3.6, libpcap 1.10.1

o Fix a bug that prevented Nmap from discovering interfaces on Linux
  when no IPv4 addresses were configured. [Daniel Miller, nnposter]

o [NSE] NSE "exception handling" with nmap.new_try() will no longer
  result in a stack traceback in debug output nor a "ERROR: script execution
  failed" message in script output, since the intended behavior has always been
  to end the script immediately without output. [Daniel Miller]

o Update the Nmap output DTD to match actual output since the
  `<hosthint>` element was added in Nmap 7.90.

o [NSE] Fix newtargets support: since Nmap 7.92, scripts could not add
  targets in script pre-scanning phase. [Daniel Miller]

o Scripts dhcp-discover and broadcast-dhcp-discover now support
  setting a client identifier. [nnposter]

o Script oracle-tns-version was not reporting the version
  correctly for Oracle 19c or newer [linholmes]

o Script redis-info was crashing or producing inaccurate
  information about client connections and/or cluster nodes. [nnposter]

o Nmap and Nping were unable to obtain system routes on FreeBSD
  [benpratt, nnposter]

o Script ipidseq was broken due to calling an unreachable library
  function. [nnposter]

o Support for EC crypto was not properly enabled if Nmap
  was compiled with OpenSSL in a custom location. [nnposter]

o [NSE] Improvements to event handling and pcap socket garbage collection,
  fixing potential hangs and crashes. [Daniel Miller]

o We ceased creating the Nmap win32 binary zipfile. It was useful back when
  you could just unzip it and run Nmap from there, but that hasn't worked well
  for many years. The win32 self-installer handles Npcap installation and many
  other dependencies and complexities. Anyone who needs the binaries for some
  reason can still install Nmap on any system and retrieve them from there.
  For now we're keeping the Win32 zipfile in the Nmap OEM Edition
  (https://nmap.org/oem) for companies building Nmap into their own
  products. But even in that case we believe that running the Nmap OEM
  self-installer in silent mode is a better approach.

o Fix TDS7 password encoding for mssql.lua, which had been assuming
  ASCII input even though other parts of the library had been passing it Unicode.

o Replace deprecated CPEs for IIS with their updated identifier,
  cpe:/a:microsoft:internet_information_services [Esa Jokinen]

o [NSE] Fix script-terminating error when unknown BSON data types are
  encountered. Added parsers for most standard data types. [Daniel Miller]

o [Ncat] Fix hostname/certificate comparison and matching to handle ASN.1
  strings without null terminators, a similar bug to OpenSSL's CVE-2021-3712.

o [Ncat] Added support for SOCKS5 proxies that return bind addresses
  as hostnames, instead of IPv4/IPv6 addresses. [pomu0325]

(adam)

2022-09-06 18:41:54 UTC MAIN commitmail json YAML

doc: Updated devel/hs-ansi-terminal to 0.11.3

(pho)

2022-09-06 18:41:45 UTC MAIN commitmail json YAML

Update to ansi-terminal-0.11.3

Version 0.11.3
* Add "hyperlink", "hyperlinkWithId" and "hyperlinkWithParams", and support
  for clicable hyperlinks.

Version 0.11.2
* On Windows, fix compatability with the Windows I/O Manager (WinIO) when
  GHC >= 9.0.1 but Win32 < 2.9.0.0.
* Improvements to Haddock documentation.

(pho)

2022-09-06 18:37:02 UTC MAIN commitmail json YAML

doc: Updated converters/hs-aeson-better-errors to 0.9.1.1

(pho)

2022-09-06 18:36:44 UTC MAIN commitmail json YAML

2022-09-06 15:58:58 UTC MAIN commitmail json YAML

Fix type for misc/open2300-pgsql addition

(martin)

2022-09-06 15:57:34 UTC MAIN commitmail json YAML

doc: Updated misc/open2300-pgsql to 1.10nb1

(martin)

2022-09-06 15:56:53 UTC MAIN commitmail json YAML

2022-09-06 15:42:28 UTC MAIN commitmail json YAML

doc: Updated emulators/sameboy to 0.15.5

(nia)

2022-09-06 15:42:00 UTC MAIN commitmail json YAML

sameboy: Update to 0.15.5

Version 0.15.5

  This version is backwards compatible with save states from SameBoy 0.14.3
  and newer, as well as save states from any BESS compliant emulator

  New/Improved Features

    * Both frontends now include links to the debugger documentation and to
      the GitHub Sponsors page

  Accuracy Improvements/Fixes

    * Fixed a bug where certain color correction modes were desaturating
      colors in an unbalanced manner
    * Accurate emulation of the first-frame-behavior while emulating the
      Game Boy Color and Game Boy Advance; fixes white flashes while playing
      games developed by THQ
    * More accurate emulation of the square channels sample repeat glitch,
      fixing certain audio pops in LSDj and various games while using a
      vibrato effect

  Bug Fixes

    * Fixed a bug where MBC state was not properly reset, fixing bugs
      resulting in some games not booting correctly if they were loaded
      after certain other games in the SDL frontend, libretro, and other
      3rd-party frontends

  Misc Internal Changes

    * New memory management APIs for better integration of SameBoy as a
      library

(nia)

2022-09-06 15:39:21 UTC MAIN commitmail json YAML

doc: Updated www/firefox91 to 91.13.0

(nia)

2022-09-06 15:38:35 UTC MAIN commitmail json YAML

firefox91: update to 91.13.0

Security Vulnerabilities fixed in Firefox ESR 91.13

    #CVE-2022-38472: Address bar spoofing via XSLT error handling

    #CVE-2022-38473: Cross-origin XSLT Documents would have inherited the
    parent's permissions

    #CVE-2022-38478: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13

(nia)