Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (7m)  pkgsrc-2024Q1 (15d)  pkgsrc-2023Q4 (43d)  pkgsrc-2023Q2 (75d)  pkgsrc-2023Q3 (154d) 

2024-05-13 16:07:39 UTC Now

2022-08-14 03:06:41 UTC MAIN commitmail json YAML

lintpkgsrc: clean up debug logging

(rillig)

2022-08-13 22:39:29 UTC MAIN commitmail json YAML

clang: fix more PLIST errors under non-default PKG_OPTIONs

(tnn)

2022-08-13 15:19:15 UTC MAIN commitmail json YAML

doc: Updated devel/gopls to 0.9.3

(bsiegert)

2022-08-13 15:18:51 UTC MAIN commitmail json YAML

gopls: update to 0.9.3

gopls v0.9.3

Move fast and fix things... it appears that v0.9.2 exposed a latent crasher in
gopls (golang/go#54395). This crash occurs when a new workspace is incorrectly
configured, and so is likely to be rather confusing for new users. On that
basis, the fix warranted a patch release.

As always, thank you for filing issues!

gopls v0.9.2

This release contains many bug fixes, particularly related to problems that
would require restarting gopls.

Note about network usage: among these fixes was a change to allow network usage
when reloading the workspace. Reloading occurs when a go.mod, go.sum, or
go.work file changes on disk. In the past, gopls would only allow network
during the first workspace load. This resulted in confusing behavior when, for
example, a new dependency is added to a go.mod file and gopls could not load
it, but loading succeeded on restart.

(bsiegert)

2022-08-13 13:24:19 UTC MAIN commitmail json YAML

Mark as only for x86_64.  The ffts library does support some other
platforms, but the pkgsrc package currently does not yet support
configuring the library for them.

(gson)

2022-08-13 12:59:13 UTC MAIN commitmail json YAML

doc: Updated www/firefox-l10n to 103.0.2

(ryoon)

2022-08-13 12:58:47 UTC MAIN commitmail json YAML

firefox-l10n: Update to 103.0.2

* Sync with www/firefox-103.0.2.

(ryoon)

2022-08-13 12:58:11 UTC MAIN commitmail json YAML

doc: Updated www/firefox to 103.0.2

(ryoon)

2022-08-13 12:57:43 UTC MAIN commitmail json YAML

forefox: Reset PKGREVISION

(ryoon)

2022-08-13 12:56:39 UTC MAIN commitmail json YAML

firefox: Update to 103.0.2

CHangelog:
Fixed

  * Fixed menu shortcuts for users of the JAWS screen reader.

  * Fixed an occasional non-overridable certificate error when accessing device
    configuration pages.

  * Fixed an issue with Picture-in-Picture displaying in fullscreen on macOS.

(ryoon)

2022-08-13 12:42:45 UTC MAIN commitmail json YAML

wasi-libcxx: Fix build

I have no idea how to generate __config_site file and include it.
This patch is obviously wrong, however it fixes wasi-libcxx-14.0.6b build.

(ryoon)

2022-08-13 12:30:09 UTC MAIN commitmail json YAML

doc: Updated pkgtools/lintpkgsrc to 2022.08.13

(rillig)

2022-08-13 12:30:00 UTC MAIN commitmail json YAML

lintpkgsrc: update to 2022.08.13

Changes since 2022.08.12:

In package makefiles, the ':U' modifier is evaluated more correctly than
before, handling the values '' and '0' correctly.

Running 'lintpkgsrc --help' produces a clean usage message.

Distinfo files are checked more strictly than before.

Running 'lintpkgsrc -D .' does not produce Perl warnings anymore when
falling back to running bmake to determine the PKGNAME.

When parsing package makefiles, the debug log for evaluating
conditionals is easier to read.

(rillig)

2022-08-13 12:22:20 UTC MAIN commitmail json YAML

2022-08-13 11:34:39 UTC MAIN commitmail json YAML

lintpkgsrc: clean up the output of running 'lintpkgsrc --help'

(rillig)

2022-08-13 11:27:56 UTC MAIN commitmail json YAML

w3m: remove -Wnull_reference to fix build with gcc5 (NetBSD 8)

(wiz)

2022-08-13 11:27:32 UTC MAIN commitmail json YAML

lintpkgsrc: make distinfo parsing stricter

There are no distinfo files anymore in which the filename starts with
'./', so remove that check.

Complain about invalid distinfo lines. This flags a few pkgsrc-wip
packages, but none in main pkgsrc.

Extract load_distinfo into a separate subroutine, improve local variable
names.

Document that only the first distinfo algorithm (currently BLAKE2s) is
ever checked.

(rillig)

2022-08-13 10:51:28 UTC MAIN commitmail json YAML

lintpkgsrc: cleanup: rename cache subroutines to be more expressive

It was easily possible to confuse scan_pkgsrc_makefiles with
load_pkgsrc_makefiles, so rename the latter to load_pkgdb_from_cache.

(rillig)

2022-08-13 10:41:21 UTC MAIN commitmail json YAML

lintpkgsrc: remove extra code for determining the pkg_install version

There is no apparent reason for this code. Lintpkgsrc could already
parse the version of pkg_install, by falling back to running bmake.

When run in debug mode, 'lintpkgsrc -D .' failed because lintpkgsrc used
a wrong regular expression instead of just calling dirname. While here,
fix the variable name 'pkgsrcdir' to simply 'pkgdir', as the previous
name was highly confusing.

(rillig)

2022-08-13 10:23:40 UTC MAIN commitmail json YAML

lintpkgsrc: clean up evaluation of conditions in makefiles

Having a variable named 'false' was confusing. Having a stack of
if-states in which 0 means true and 1 means false was even more
confusing. Using these magic numbers in the debug log without any
explanation was misleading.

The code, as well as the debug log, now uses the strings 'not_yet',
'active' and 'done' for the state of the conditionals. While it still
requires a bit of thought to read the debug log, it's at least possible
now.

(rillig)

2022-08-13 10:07:26 UTC MAIN commitmail json YAML

wasi-compiler-rt: delint, to extent possible

(tnn)

2022-08-13 09:58:04 UTC MAIN commitmail json YAML

2022-08-13 09:56:45 UTC MAIN commitmail json YAML

wasi-libcxx: delint, to extent possible

(tnn)

2022-08-13 09:38:09 UTC MAIN commitmail json YAML

2022-08-13 09:33:43 UTC MAIN commitmail json YAML

lintpkgsrc: cleanup: reduce line noise

(rillig)

2022-08-13 09:11:12 UTC MAIN commitmail json YAML

2022-08-13 09:09:54 UTC MAIN commitmail json YAML

mk: describe some llvm options

(tnn)

2022-08-13 09:03:55 UTC MAIN commitmail json YAML

libcxxabi: reduce compiler requirement, delint

(tnn)

2022-08-13 09:00:23 UTC MAIN commitmail json YAML

2022-08-13 08:59:32 UTC MAIN commitmail json YAML

ansible: add missing CHECK_INTERPRETER_SKIP

(tnn)

2022-08-12 22:52:09 UTC MAIN commitmail json YAML

doc: Updated pkgtools/lintpkgsrc to 2022.08.12

(rillig)

2022-08-12 22:51:59 UTC MAIN commitmail json YAML

lintpkgsrc: update to 2022.08.13

Changes since 2022.08.10:

Improve parsing of conditions, continuation lines, comments in
makefiles.

Replace hard-coded paths to /etc/mk.conf and /usr/pkg with the proper
paths that correspond to the pkgsrc installation.

If pkglint is run with unknown or invalid options, exit with an error
status.

(rillig)

2022-08-12 22:45:14 UTC MAIN commitmail json YAML

2022-08-12 22:40:40 UTC MAIN commitmail json YAML

2022-08-12 22:32:21 UTC MAIN commitmail json YAML

2022-08-12 22:18:35 UTC MAIN commitmail json YAML

2022-08-12 20:53:01 UTC MAIN commitmail json YAML

2022-08-12 20:38:12 UTC MAIN commitmail json YAML

2022-08-12 20:37:24 UTC MAIN commitmail json YAML

doc: Updated lang/go118 to 1.18.5

(bsiegert)

2022-08-12 19:03:39 UTC MAIN commitmail json YAML

clang: fix PLIST error when llvm does not have llvm-target-riscv enabled

(tnn)

2022-08-12 16:15:04 UTC MAIN commitmail json YAML

go118: update to 1.18.5 (security)

1 security fix following the security policy:

encoding/gob & math/big: decoding big.Float and big.Rat can panic

Decoding big.Float and big.Rat types can panic if the encoded message is too
short.
This is CVE-2022-32189 and Go issue https://go.dev/issue/53871.

(bsiegert)

2022-08-12 15:59:31 UTC MAIN commitmail json YAML

llvm: add wasi-compiler-rt & wasi-libcxx to dependencies comment

(gutteridge)

2022-08-12 15:48:36 UTC MAIN commitmail json YAML

go117: update to 1.17.13 (security).

1 security fix following the security policy:

encoding/gob & math/big: decoding big.Float and big.Rat can panic

Decoding big.Float and big.Rat types can panic if the encoded message is too
short.
This is CVE-2022-32189 and Go issue https://go.dev/issue/53871.

(bsiegert)

2022-08-12 15:02:24 UTC MAIN commitmail json YAML

Note update of net/routinator to 0.11.2.

(he)

2022-08-12 15:01:42 UTC MAIN commitmail json YAML

Upgrade net/routinator to version 0.11.2.

Pkgsrc changes:
* Checksum updates.
* Tidy up GITHUB tag & associated stuff from using 0.11.0-rc1.

Upstream changes:

## 0.11.2

Released 2022-04-20.

Bug Fixes

* Fixes an issue that caused the RTR server to possibly skip over some
  withdrawn VRPs in response to a serial query. (Found by Jay Borkenhagen,
  [#747])

[#747]: https://github.com/NLnetLabs/routinator/pull/747

## 0.11.1

Released 2022-04-07

No changes since 0.11.1-rc1.

## 0.11.1-rc1

Released 2022-04-04.

New

* The `dump` command now also copies the stored trust anchor certificates.
  The certificates are named in the same way as they are internally using
  the hash over their URI. Please consult the [manual][dump-manual] for
  details. ([#740])

Bug Fixes

* The `dump` command now removes the internal header before copying
  the objects retained by the RRDP collector, i.e., the files copied into
  the `rrdp` sub-directory now contain the actual DER encoded data only.
  ([#735])
* Correctly set the idle time for TCP keepalives on incoming RTR
  connections on systems that support it. ([#736])
* Fix an encoding error in the `/delta-json` output. ([#737])
* Truncate the PID file before writing the current PID to it. ([#738])
* Exit with a status of 1 if an error happened. ([#739])

[#735]: https://github.com/NLnetLabs/routinator/pull/735
[#736]: https://github.com/NLnetLabs/routinator/pull/736
[#737]: https://github.com/NLnetLabs/routinator/pull/737
[#738]: https://github.com/NLnetLabs/routinator/pull/738
[#739]: https://github.com/NLnetLabs/routinator/pull/739
[#740]: https://github.com/NLnetLabs/routinator/pull/740
[dump-manual]: https://routinator.docs.nlnetlabs.nl/en/v0.11.1-rc1/dump.html

(he)

2022-08-12 14:08:20 UTC MAIN commitmail json YAML

doc: Updated lang/wasi-libcxx to 14.0.6

(gutteridge)

2022-08-12 14:07:48 UTC MAIN commitmail json YAML

doc: Updated lang/wasi-compiler-rt to 14.0.6

(gutteridge)

2022-08-12 13:59:52 UTC MAIN commitmail json YAML

2022-08-12 13:55:48 UTC MAIN commitmail json YAML

2022-08-12 08:59:00 UTC MAIN commitmail json YAML

doc: Updated lang/compiler-rt to 14.0.6

(pin)

2022-08-12 08:58:41 UTC MAIN commitmail json YAML

2022-08-12 08:56:20 UTC MAIN commitmail json YAML

doc: Updated devel/include-what-you-use to 0.18

(pin)

2022-08-12 08:56:01 UTC MAIN commitmail json YAML

2022-08-12 08:54:50 UTC MAIN commitmail json YAML

doc: Updated devel/lldb to 14.0.6

(pin)

2022-08-12 08:54:31 UTC MAIN commitmail json YAML

2022-08-12 08:53:10 UTC MAIN commitmail json YAML

doc: Updated devel/lld to 14.0.6

(pin)

2022-08-12 08:52:51 UTC MAIN commitmail json YAML

2022-08-12 08:51:17 UTC MAIN commitmail json YAML

doc: Updated lang/clang-tools-extra to 14.0.6

(pin)

2022-08-12 08:50:58 UTC MAIN commitmail json YAML

2022-08-12 08:49:39 UTC MAIN commitmail json YAML

doc: Updated parallel/openmp to 14.0.6

(pin)

2022-08-12 08:49:21 UTC MAIN commitmail json YAML

2022-08-12 08:47:49 UTC MAIN commitmail json YAML

doc: Updated devel/polly to 14.0.6

(pin)

2022-08-12 08:47:29 UTC MAIN commitmail json YAML

2022-08-12 08:46:04 UTC MAIN commitmail json YAML

doc: Updated lang/clang to 14.0.6

(pin)

2022-08-12 08:45:44 UTC MAIN commitmail json YAML

2022-08-12 08:44:48 UTC MAIN commitmail json YAML

vulkan-headers: does not need any languages

(adam)

2022-08-12 08:43:58 UTC MAIN commitmail json YAML

2022-08-12 08:42:19 UTC MAIN commitmail json YAML

doc: Updated lang/libcxxabi to 14.0.6

(pin)

2022-08-12 08:41:58 UTC MAIN commitmail json YAML

2022-08-12 08:40:18 UTC MAIN commitmail json YAML

doc: Updated lang/libunwind to 14.0.6

(pin)

2022-08-12 08:39:57 UTC MAIN commitmail json YAML

2022-08-12 08:38:22 UTC MAIN commitmail json YAML

doc: Updated lang/llvm to 14.0.6

(pin)

2022-08-12 08:37:58 UTC MAIN commitmail json YAML

lang/llvm: update to 14.0.6

Updated in wip by @wiz and myself.

14.0.6
-This release is a bug-fix release and is API and ABI compatible with 14.0.0.
This release fixes a bug that was introduced in 14.0.5.
This will likely be the last 14.0.x release.

14.0.5
-This release is a bug-fix release and is API and ABI compatible with 14.0.0.
Note that we have adopted a new release schedule for the project, so there
will be a new bug-fix release (14.0.x) every 2 weeks.
14.0.5 is the last planned release, but we may do a 14.0.6 release if there
are critical issues found in 14.0.5.

14.0.4
-This release is a bug-fix release and is API and ABI compatible with 14.0.0.

14.0.0

Changes to the LLVM IR
    Using the legacy pass manager for the optimization pipeline is deprecated
    and will be removed after LLVM 14. In the meantime, only minimal effort will
    be made to maintain the legacy pass manager for the optimization pipeline.

    Max allowed integer type was reduced from 2^24-1 bits to 2^23 bits.

    Max allowed alignment was increased from 2^29 to 2^32.

Changes to building LLVM
    Building LLVM with Visual Studio now requires version 2019 or later.

Changes to the AArch64 Backend
    Added support for the Armv9-A, Armv9.1-A and Armv9.2-A architectures.

    The compiler now recognises the 窶徼une-cpu窶� function attribute to support
    the use of the -mtune frontend flag. This allows certain scheduling features
    and optimisations to be enabled independently of the architecture.
    If the 窶徼une-cpu窶� attribute is absent it tunes according to the
    窶徼arget-cpu窶�.

    Fixed relocations against temporary symbols (e.g. in jump tables and
    constant pools) in large COFF object files.

    Auto-vectorization now targets SVE by default when available.

Changes to the ARM Backend
    Added support for the Armv9-A, Armv9.1-A and Armv9.2-A architectures.

    Added support for the Armv8.1-M PACBTI-M extension.

    Changed the assembly comment string for MSVC targets to @ (consistent with
    the MinGW and ELF targets), freeing up ; to be used as statement separator.

Changes to the PowerPC Target
Linux improvements:
    Provided a number of builtins for compatibility with the XL compiler.

    Allow MMA builtin types in pre-P10 compilation units.

    Add support for Return Oriented Programming (ROP) protection for 32 bit.

    Refactored code to use more inclusive language.

    Switched to LLD as the default linker for pre-built Linux binaries.

    Enabled IEEE quad long double on Linux via PPC_LINUX_DEFAULT_IEEELONGDOUBLE
    in cmake config.

        Added __ibm128 type to represent IBM double-double format, also
        available as __attribute__((mode(IF))).

        -mfloat128 can now be used in Linux subtargets with VSX enabled.

    Added quadword atomic load/store support in codegen; not enabled by default.

    Codegen improvements for splat load, byval parameter, stack lowering, etc.

    Implemented P10 instruction scheduling model.

    Implemented P10 instruction fusion pairs.

    Improved handling of #pragma clang loop unroll_and_jam.

    Various bug fixes.

AIX Support/improvements:
    Variadic (ellipsis) functions with C complex types are now supported.

    Added toc-data support for AIX 64-bit.

    Added toc-data support for read-only globals.

    Updated default target on AIX from pwr4 to pwr7.

    AIX 64-bit code generation now uses fast-isel for O0.

    Added DWARF support for 32-bit XCOFF.

Changes to the RISC-V Target
    Codegen improvements for RV64 around the selection of addw/subw/mulw/slliw
    instructions and removal of redundant sext.w instructions (using the new
    RISCVSExtWRemoval pass).

    The various RISC-V vector extensions were updated to version 1.0 and are no
    longer experimental.

    The Zba, Zbb, Zbc, and Zbs bit-manipulation extensions were updated to
    version 1.0 and are no longer experimental.

    Added MC layer support for the ratified scalar cryptography extensions.

    The Zfh and Zfhmin extensions for half-precision floating point were updated
    to version 1.0 and are no longer experimental.

    Added support for the .insn directive.

    Various improvements to immediate materialisation, including when
    bit-manipulation extensions are enabled. Additionally, the constant pool is
    now used for large integers.

    Added support for constrained FP intrinsics for scalar types.

    Added support for CSRs introduced in the Sscofpmf, Smstateen, and Sstc
    extensions.

    The experimental 窶六bproposedc窶� extension was removed, as was the 窶錬窶�
    extension (including all bit-manipulation sub-extensions). Individual 窶六b*窶�
    extensions should be used instead.

Changes to the X86 Target
    Support for AVX512-FP16 instructions has been added.

    Removed incomplete support for Intel MPX. (D111517)

Changes to the AMDGPU Target

Changes to the Windows Target

    Changed how the .pdata sections refer to the code they窶决e describing, to
    avoid conflicting unwind info if weak symbols are overridden.

    Fixed code generation for calling support routines for converting 128 bit
    integers from/to floats on x86_64.

    The preferred path separator form (backslashes or forward slashes) can be
    configured in Windows builds of LLVM now, with the
    LLVM_WINDOWS_PREFER_FORWARD_SLASH CMake option. This defaults to true in
    MinGW builds of LLVM.

    Set proper COFF symbol types for function aliases (e.g. for Itanium C++
    constructors), making sure that GNU ld exports all of them correctly as
    functions, not data, when linking a DLL.

    Handling of temporary files on more uncommon file systems (network mounts,
    ramdisks) on Windows is fixed now (which previously either errored out or
    left stray files behind).

Changes to the C API

    LLVMSetInstDebugLocation has been deprecated in favor of the more general
    LLVMAddMetadataToInst.

    Fixed building LLVM-C.dll for i386 targets with MSVC, which had been broken
    since the LLVM 8.0.0 release.

Changes to the LLVM tools

    llvm-cov: -name-allowlist is now accepted in addition to -name-whitelist.
    -name-whitelist is marked as deprecated and to be removed in future
    releases.

    llvm-ar now supports --thin for creating a thin archive. The modifier T has
    a different meaning in some ar implementations. (D116979)

    llvm-ar now supports reading big archives for XCOFF. (D111889)

    llvm-nm now demangles Rust symbols. (D111937)

    llvm-objcopy窶冱 ELF port now avoids reordering section headers to preserve
    st_shndx fields of dynamic symbols. (D107653)

    llvm-objcopy now supports --update-section for ELF and Mach-O. (D112116)
    (D117281)

    llvm-objcopy now supports --subsystem for PE/COFF. (D116556)

    llvm-objcopy now supports mips64le relocations for ELF. (D115635)

    llvm-objcopy --rename-section now renames relocation sections together with
    their targets. (D110352)

    llvm-objdump --symbolize-operands now supports PowerPC. (D114492)

    llvm-objdump -p now dumps PE header. (D113356)

    llvm-objdump -R now supports ELF position-dependent executables. (D110595)

    llvm-objdump -T now prints symbol versions. (D108097)

    llvm-readobj: Improved printing of symbols in Windows unwind data.

    llvm-readobj now supports --elf-output-style=JSON for JSON output and
    --pretty-print for pretty printing of this output. (D114225)

    llvm-readobj now supports several dump styles (--needed-libs, --relocs,
    --syms) for XCOFF.

    llvm-symbolizer now supports 窶電ebuginfod. (D113717)

    llvm-cov now accepts 窶彗llowlist窶� spelling for -name-allowlist.

    llvm-nm now supports XCOFF object files.

    Added --needed-libs, aux header, and symbols support in llvm-readobj.

    Added --symbolize-operands support in llvm-objdump.

    Tools that read archive files now support reading AIX big format archive
    files.

    Added dump section support in obj2yaml.

    Added yaml2obj support for 64-bit XCOFF.

Changes to LLDB

    A change in Clang窶冱 type printing has changed the way LLDB names array types
    (from int [N] to int[N]) - LLDB pretty printer type name matching code may
    need to be updated to handle this.

    The following commands now ignore non-address bits (e.g. AArch64 pointer
    signatures) in address arguments. In addition, non-address bits will not be
    shown in the output of the commands.

        memory find

        memory read

        memory region (see below)

        memory tag read

        memory tag write

    The memory region command and GetMemoryRegionInfo API method now ignore
    non-address bits in the address parameter. This also means that on systems
    with non-address bits the last (usually unmapped) memory region will not
    extend to 0xF窶ヲF. Instead it will end at the end of the mappable range that
    the virtual address size allows.

    The memory read command has a new option --show-tags. Use this option to
    show memory tags beside the contents of tagged memory ranges.

    Fixed continuing from breakpoints and singlestepping on Windows on ARM/ARM64.

    LLDB has been included in Windows on ARM64 binary release with Python
    support disabled.

Changes to BOLT

    BOLT project is added to the LLVM monorepo. BOLT is a post-link optimizer
    developed to speed up large applications. Build and usage instructions are
    given in README.

Additional Information

A wide variety of additional information is available on the LLVM web page, in
particular in the documentation section. The web page also contains versions of
the API documentation which is up-to-date with the Git version of the source
code. You can access versions of these documents specific to this release by
going into the llvm/docs/ directory in the LLVM tree.

If you have any questions or comments about LLVM, please feel free to contact
us via the mailing lists.

(pin)

2022-08-12 08:28:01 UTC MAIN commitmail json YAML

shared-desktop-ontologies: does not need any languages

(adam)

2022-08-12 08:26:32 UTC MAIN commitmail json YAML

extra-cmake-modules: does not need any languages

(adam)

2022-08-12 08:26:01 UTC MAIN commitmail json YAML

cmake.mk: strip only for targets have USE_LANGUAGES

(adam)

2022-08-12 08:21:38 UTC MAIN commitmail json YAML

Updated devel/git, devel/py-aiounittest, sysutils/ansible

(adam)

2022-08-12 08:18:20 UTC MAIN commitmail json YAML

ansible: updated to 6.2.0

v6.2.0
======

.. contents::
  :local:
  :depth: 2

Release Summary
---------------

Release Date: 2022-08-02

`Porting Guide <https://docs.ansible.com/ansible/devel/porting_guides.html>`_

Added Collections
-----------------

- ibm.spectrum_virtualize (version 1.9.0)

Ansible-core
------------

Ansible 6.2.0 contains Ansible-core version 2.13.2.
This is a newer version than version 2.13.1 contained in the previous Ansible release.

The changes are reported in the combined changelog below.

Changed Collections
-------------------

If not mentioned explicitly, the changes are reported in the combined changelog below.

+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| Collection                    | Ansible 6.1.0 | Ansible 6.2.0 | Notes                                                                                                                        |
+===============================+===============+===============+==============================================================================================================================+
| awx.awx                      | 21.2.0        | 21.4.0        | Unfortunately, this collection does not provide changelog data in a format that can be processed by the changelog generator. |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| cisco.dnac                    | 6.5.0        | 6.5.2        |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| cisco.meraki                  | 2.10.0        | 2.10.1        |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| community.dns                | 2.2.1        | 2.3.0        |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| community.general            | 5.3.0        | 5.4.0        |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| community.grafana            | 1.5.0        | 1.5.1        |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| community.hashi_vault        | 3.0.0        | 3.1.0        |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| community.hrobot              | 1.4.0        | 1.5.0        |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| community.mongodb            | 1.4.1        | 1.4.2        | There are no changes recorded in the changelog.                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| community.postgresql          | 2.1.5        | 2.2.0        |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| community.rabbitmq            | 1.2.1        | 1.2.2        |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| community.routeros            | 2.1.0        | 2.2.0        |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| community.sap_libs            | 1.1.0        | 1.2.0        |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| ibm.spectrum_virtualize      |              | 1.9.0        | The collection was added to Ansible                                                                                          |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| netapp.ontap                  | 21.20.0      | 21.21.0      |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| ovirt.ovirt                  | 2.1.0        | 2.2.0        |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+
| t_systems_mms.icinga_director | 1.30.0        | 1.30.1        |                                                                                                                              |
+-------------------------------+---------------+---------------+------------------------------------------------------------------------------------------------------------------------------+

Major Changes
-------------

community.postgresql
~~~~~~~~~~~~~~~~~~~~

- postgresql_user - the ``groups`` argument has been deprecated and will be removed in ``community.postgresql 3.0.0``. Please use the ``postgresql_membership`` module to specify group/role memberships instead (https://github.com/ansible-collections/community.postgresql/issues/277).

Minor Changes
-------------

Ansible-core
~~~~~~~~~~~~

- ansible-test - An improved error message is shown when the download of a pip bootstrap script fails. The download now uses ``urllib2`` instead of ``urllib`` on Python 2.

cisco.meraki
~~~~~~~~~~~~

- Change shebang in Sublime utils to point to env instead of direct to the path

community.dns
~~~~~~~~~~~~~

- All software licenses are now in the ``LICENSES/`` directory of the collection root. Moreover, ``SPDX-License-Identifier:`` is used to declare the applicable license for every file that is not automatically generated (https://github.com/ansible-collections/community.dns/pull/109).

community.general
~~~~~~~~~~~~~~~~~

- ModuleHelper module utils - added property ``verbosity`` to base class (https://github.com/ansible-collections/community.general/pull/5035).
- apk - add ``world`` parameter for supporting a custom world file (https://github.com/ansible-collections/community.general/pull/4976).
- consul - adds ``ttl`` parameter for session  (https://github.com/ansible-collections/community.general/pull/4996).
- dig lookup plugin - add option ``fail_on_error`` to allow stopping execution on lookup failures (https://github.com/ansible-collections/community.general/pull/4973).
- keycloak_* modules - add ``http_agent`` parameter with default value ``Ansible`` (https://github.com/ansible-collections/community.general/issues/5023).
- lastpass - use config manager for handling plugin options (https://github.com/ansible-collections/community.general/pull/5022).
- listen_ports_facts - add new ``include_non_listening`` option which adds ``-a`` option to ``netstat`` and ``ss``. This shows both listening and non-listening (for TCP this means established connections) sockets, and returns ``state`` and ``foreign_address`` (https://github.com/ansible-collections/community.general/issues/4762, https://github.com/ansible-collections/community.general/pull/4953).
- maven_artifact - add a new ``unredirected_headers`` option that can be used with ansible-core 2.12 and above. The default value is to not use ``Authorization`` and ``Cookie`` headers on redirects for security reasons. With ansible-core 2.11, all headers are still passed on for redirects (https://github.com/ansible-collections/community.general/pull/4812).
- pacman - added parameters ``reason`` and ``reason_for`` to set/change the install reason of packages (https://github.com/ansible-collections/community.general/pull/4956).
- xfconf - add ``stdout``, ``stderr`` and ``cmd`` to the module results (https://github.com/ansible-collections/community.general/pull/5037).
- xfconf - use ``do_raise()`` instead of defining custom exception class (https://github.com/ansible-collections/community.general/pull/4975).
- xfconf_info - use ``do_raise()`` instead of defining custom exception class (https://github.com/ansible-collections/community.general/pull/4975).

community.grafana
~~~~~~~~~~~~~~~~~

- Export dashboard with pretty printed JSON so that it becomes easier to compare changes with the previous version

community.hrobot
~~~~~~~~~~~~~~~~

- All software licenses are now in the ``LICENSES/`` directory of the collection root. Moreover, ``SPDX-License-Identifier:`` is used to declare the applicable license for every file that is not automatically generated (https://github.com/ansible-collections/community.hrobot/pull/52).

community.postgresql
~~~~~~~~~~~~~~~~~~~~

- postgresql_membership - add the ``exact`` state value to be able to specify a list of only groups a user must be a member of (https://github.com/ansible-collections/community.postgresql/issues/277).
- postgresql_pg_hba - add argument ``overwrite`` (bool, default: false) to remove unmanaged rules (https://github.com/ansible-collections/community.postgresql/issues/297).
- postgresql_pg_hba - add argument ``rules_behavior`` (choices: conflict (default), combine) to fail when ``rules`` and normal rule-specific arguments are given or, when ``combine``, use them as defaults for the ``rules`` items (https://github.com/ansible-collections/community.postgresql/issues/297).
- postgresql_pg_hba - add argument ``rules`` to specify a list of rules using the normal rule-specific argument in each item (https://github.com/ansible-collections/community.postgresql/issues/297).

community.routeros
~~~~~~~~~~~~~~~~~~

- All software licenses are now in the ``LICENSES/`` directory of the collection root. Moreover, ``SPDX-License-Identifier:`` is used to declare the applicable license for every file that is not automatically generated (https://github.com/ansible-collections/community.routeros/pull/101).

netapp.ontap
~~~~~~~~~~~~

- na_ontap_cluster_config role - support ``broadcast_domain`` and ``service_policy`` with REST.
- na_ontap_info - add computed serial_hex and naa_id for lun_info.
- na_ontap_info - add quota-policy-info.
- na_ontap_interface - support ``broadcast_domain`` with REST.
- na_ontap_login_messages - support cluster scope when using REST.
- na_ontap_lun - support ``qos_adaptive_policy_group`` with REST.
- na_ontap_motd - deprecated in favor of ``na_ontap_login_messages``.  Fail when use_rest is set to ``always`` as REST is not supported.
- na_ontap_ntp - new option ``key_id`` added.
- na_ontap_qtree - Added ``unix_user`` and ``unix_group`` options in REST.
- na_ontap_rest_info - add computed serial_hex and naa_id for storage/luns when serial_number is present.
- na_ontap_s3_users - ``secret_key`` and ``access_token`` are now returned when creating a user.
- na_ontap_service_processor_network - Added REST support.
- na_ontap_snapmirror - improve errror messages to be more specific and consistent.
- na_ontap_snapmirror - new option ``validate_source_path`` to disable this validation.
- na_ontap_snapmirror - validate source endpoint for ZAPI and REST, accounting for vserver local name.
- na_ontap_snapmirror - wait for the relationship to come back to idle after a resync.
- na_ontap_unix_group - added REST support.
- na_ontap_unix_user - Added REST support.
- na_ontap_unix_user - Added new option ``primary_gid`` aliased to ``group_id``.
- na_ontap_user - accept ``service_processor`` as an alias for ``service-processor`` with ZAPI, to be consistent with REST.
- na_ontap_volume - now defaults to REST with ``use_rest`` set to ``auto``, like every other module.  ZAPI can be forced with ``use_rest`` set to ``never``.
- na_ontap_vserver_create role - support ``broadcast_domain``, ``ipspace``, and ``service_policy`` with REST.

ovirt.ovirt
~~~~~~~~~~~

- During he_setup, configure ovn with he_host_name for correct operation of ovn (https://github.com/oVirt/ovirt-ansible-collection/pull/563).
- Fix "ansible-lint" version 6.0.0 "yaml" violations for "disaster_recovery" role (https://github.com/oVirt/ovirt-ansible-collection/pull/543).
- Fix "ansible-lint" version 6.0.0 violations for "disaster_recovery" & "remove_stale_lun" roles (https://github.com/oVirt/ovirt-ansible-collection/pull/554).
- Fix ansible-lint for basic roles (https://github.com/oVirt/ovirt-ansible-collection/pull/280).
- Updating the documentation - "vm_name" / "vm_id" and/or disk "id" parameter(s) are required when extending disk with non-unique name (https://github.com/oVirt/ovirt-ansible-collection/pull/559).
- gluster_heal_info - Replacing gluster module to CLI to support RHV automation hub (https://github.com/oVirt/ovirt-ansible-collection/pull/340).
- ovirt_disk - Add warning for disk attachments (https://github.com/oVirt/ovirt-ansible-collection/pull/347).
- ovirt_disk - Fix disk attachment to VM (https://github.com/oVirt/ovirt-ansible-collection/pull/361).
- ovirt_qos, ovirt_disk_profile, ovirt_disk - Add modules to allow for creation and updating of disk_profiles (https://github.com/oVirt/ovirt-ansible-collection/pull/422).
- ovirt_snapshot - Add vm_id to select VM (https://github.com/oVirt/ovirt-ansible-collection/pull/550).
- ovirt_vm - Add reset of VM (https://github.com/oVirt/ovirt-ansible-collection/pull/538).
- ovirt_vm - Add virtio_scsi_enabled and multi_queues_enabled (https://github.com/oVirt/ovirt-ansible-collection/pull/348).
- ovirt_vm - add volatile (https://github.com/oVirt/ovirt-ansible-collection/pull/539).
- repositories - Add ovirt_repositories_rhsm_environment and FIPS fix (https://github.com/oVirt/ovirt-ansible-collection/pull/483).
- repositories - Replace redhat_subscription and rhsm_repository with command (https://github.com/oVirt/ovirt-ansible-collection/pull/346).

Deprecated Features
-------------------

community.hashi_vault
~~~~~~~~~~~~~~~~~~~~~

- vault_kv2_get lookup - the ``engine_mount_point option`` in the ``vault_kv2_get`` lookup only will change its default from ``kv`` to ``secret`` in community.hashi_vault version 4.0.0 (https://github.com/ansible-collections/community.hashi_vault/issues/279).

Bugfixes
--------

Ansible-core
~~~~~~~~~~~~

- Move undefined check from concat to finalize (https://github.com/ansible/ansible/issues/78156)
- ansible-doc - no longer list module and plugin aliases that are created with symlinks (https://github.com/ansible/ansible/pull/78137).
- ansible-doc - when listing modules in collections, proceed recursively. This fixes module listing for community.general 5.x.y and community.network 4.x.y (https://github.com/ansible/ansible/pull/78137).
- ansible-doc will not add 'website for' in ":ref:" substitutions as it made them confusing.
- file backed cache plugins now handle concurrent access by making atomic updates to the files.
- password lookup does not ignore k=v arguments anymore.
- user - Fix error "Permission denied" in user module while generating SSH keys (https://github.com/ansible/ansible/issues/78017).

cisco.dnac
~~~~~~~~~~

- application_sets - delete function fixed.
- applications - delete function fixed.
- event_subscription - delete function fixed.
- file_info - Improve the module documentation.
- sda_fabric_authentication_profile - delete function fixed.
- sda_fabric_border_device - delete function fixed.
- sda_fabric_control_plane_device - delete function fixed.
- sda_fabric_edge_device - Change required payload parameter to deviceManagementIpAddress
- sda_fabric_edge_device - delete function fixed.
- sda_virtual_network - delete function fixed.
- transit_peer_network - Added status check

community.dns
~~~~~~~~~~~~~

- Update Public Suffix List.

community.general
~~~~~~~~~~~~~~~~~

- keyring_info - fix the result from the keyring library never getting returned (https://github.com/ansible-collections/community.general/pull/4964).
- pacman - fixed name resolution of URL packages (https://github.com/ansible-collections/community.general/pull/4959).
- passwordstore lookup plugin - fix ``returnall`` for gopass (https://github.com/ansible-collections/community.general/pull/5027).
- passwordstore lookup plugin - fix password store path detection for gopass (https://github.com/ansible-collections/community.general/pull/4955).
- proxmox - fix error handling when getting VM by name when ``state=absent`` (https://github.com/ansible-collections/community.general/pull/4945).
- proxmox_kvm - fix error handling when getting VM by name when ``state=absent`` (https://github.com/ansible-collections/community.general/pull/4945).
- slack - fix incorrect channel prefix ``#`` caused by incomplete pattern detection by adding ``G0`` and ``GF`` as channel ID patterns (https://github.com/ansible-collections/community.general/pull/5019).
- xfconf - fix setting of boolean values (https://github.com/ansible-collections/community.general/issues/4999, https://github.com/ansible-collections/community.general/pull/5007).

community.hashi_vault
~~~~~~~~~~~~~~~~~~~~~

- Add SPDX license headers to individual files (https://github.com/ansible-collections/community.hashi_vault/pull/282).
- Add missing ``BSD-2-Clause.txt`` file for BSD licensed content (https://github.com/ansible-collections/community.hashi_vault/issues/275).
- Use the correct GPL license for plugin_utils (https://github.com/ansible-collections/community.hashi_vault/issues/276).

community.postgresql
~~~~~~~~~~~~~~~~~~~~

- Include ``simplified_bsd.txt`` license file for various module utils.
- postgresql_info - fix pg version parsing (https://github.com/ansible-collections/community.postgresql/issues/315).
- postgresql_ping - fix pg version parsing (https://github.com/ansible-collections/community.postgresql/issues/315).
- postgresql_privs.py - add functionality when the PostgreSQL version is 9.0.0 or greater to incorporate ``ALL x IN SCHEMA`` syntax (https://github.com/ansible-collections/community.postgresql/pull/282). Please see the official documentation for details regarding grants (https://www.postgresql.org/docs/9.0/sql-grant.html).
- postgresql_subscription - fix idempotence by casting the ``connparams`` dict variable (https://github.com/ansible-collections/community.postgresql/issues/280).
- postgresql_user - add ``alter user``-statements in the return value ``queries`` (https://github.com/ansible-collections/community.postgresql/issues/307).

community.rabbitmq
~~~~~~~~~~~~~~~~~~

- user module - set supports_check_mode flag to False, as the module does not actually support check mode.

community.routeros
~~~~~~~~~~~~~~~~~~

- Include ``LICENSES/BSD-2-Clause.txt`` file for the ``routeros`` module utils (https://github.com/ansible-collections/community.routeros/pull/101).

community.sap_libs
~~~~~~~~~~~~~~~~~~

- syp_system_facts - fix a typo in the usage example which lead to an error if it used as supposed.

netapp.ontap
~~~~~~~~~~~~

- na_ontap_interface - FC interfaces - home_node should not be sent as location.home_node.
- na_ontap_interface - FC interfaces - home_port is not supported for ONTAP 9.7 or earlier.
- na_ontap_interface - FC interfaces - scope is not supported.
- na_ontap_interface - FC interfaces - service_policy is not supported.
- na_ontap_interface - enforce requirement for address/netmask for interfaces other than FC.
- na_ontap_interface - fix idempotency issue for cluster scoped interfaces when using REST.
- na_ontap_interface - fix potential node and uuid issues with LIF migration.
- na_ontap_interface - ignore 'none' when using REST rather than reporting unexpected protocol.
- na_ontap_lun - catch ZAPI error on get LUN.
- na_ontap_lun - ignore resize error if no change was required.
- na_ontap_lun - report error if flexvol_name is missing when using ZAPI.
- na_ontap_net_subnet - fixed ``ipspace`` option ignored in getting net subnet.
- na_ontap_qtree - fix idempotency issue on ``unix_permissions`` option.
- na_ontap_s3_buckets - Module will not fail on create if no ``policy`` is given.
- na_ontap_s3_buckets - Module will set ``enabled`` during create.
- na_ontap_s3_buckets - Module work currently when ``sid`` is a number.
- na_ontap_snapmirror - fix potential issue when destination is using REST but source is using ZAPI.
- na_ontap_snapmirror - relax check for source when using REST.
- na_ontap_svm - KeyError on CIFS when using REST with ONTAP 9.8 or lower.
- na_ontap_volume - ``volume_security_style`` was not modified if other security options were present with ZAPI.
- na_ontap_volume - fix idempotency issue on ``unix_permissions`` option.
- na_ontap_vserver_create role - add rule index as it is now required.

ovirt.ovirt
~~~~~~~~~~~

- HE - Handle migration to hosts that use systemd-coredump (https://github.com/oVirt/ovirt-ansible-collection/pull/557).
- cluster_upgrade - Fix starting up pinned vms (https://github.com/oVirt/ovirt-ansible-collection/pull/532).
- he - Align role with ansible-lint-6.0 (https://github.com/oVirt/ovirt-ansible-collection/pull/545).
- hosted_engine - Specify fqcn for ovirt_system_option_info (https://github.com/oVirt/ovirt-ansible-collection/pull/536).
- hosted_engine_setup - Fix cleanup on el9 (https://github.com/oVirt/ovirt-ansible-collection/pull/533).
- image_template - Remove static (https://github.com/oVirt/ovirt-ansible-collection/pull/537).
- image_template - Remove static no - unsupported in ansible 2.12 (https://github.com/oVirt/ovirt-ansible-collection/pull/341).
- ovirt_host - Fix host wait (https://github.com/oVirt/ovirt-ansible-collection/pull/531).
- ovirt_host - Fix restarted wait condition (https://github.com/oVirt/ovirt-ansible-collection/pull/551).
- ovirt_storage_domain - Fix inaccessible exception (https://github.com/oVirt/ovirt-ansible-collection/pull/534).
- ovirt_vm - check if user inputed graphical protocol (https://github.com/oVirt/ovirt-ansible-collection/pull/542).
- repositories - Move fips check to satellite CA install block (https://github.com/oVirt/ovirt-ansible-collection/pull/553).
- shutdown_env - Align role with ansible-lint-6.0 (https://github.com/oVirt/ovirt-ansible-collection/pull/544).

t_systems_mms.icinga_director
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

- Add exception handling to diff and exist functions (https://github.com/T-Systems-MMS/ansible-collection-icinga-director/pull/176)

Known Issues
------------

netapp.ontap
~~~~~~~~~~~~

- na_ontap_snapshot - added documentation to use UTC format for ``expiry_time``.

New Plugins
-----------

Lookup
~~~~~~

- community.general.bitwarden - Retrieve secrets from Bitwarden

New Modules
-----------

community.general
~~~~~~~~~~~~~~~~~

Remote Management
^^^^^^^^^^^^^^^^^

Redfish
.......

- community.general.wdc_redfish_command - Manages WDC UltraStar Data102 Out-Of-Band controllers using Redfish APIs
- community.general.wdc_redfish_info - Manages WDC UltraStar Data102 Out-Of-Band controllers using Redfish APIs

community.routeros
~~~~~~~~~~~~~~~~~~

- community.routeros.api_info - Retrieve information from API
- community.routeros.api_modify - Modify data at paths with API

community.sap_libs
~~~~~~~~~~~~~~~~~~

- community.sap_libs.sap_pyrfc - This module executes rfc functions.

netapp.ontap
~~~~~~~~~~~~

- netapp.ontap.na_ontap_ntp_key - NetApp ONTAP NTP key
- netapp.ontap.na_ontap_s3_groups - NetApp ONTAP S3 groups
- netapp.ontap.na_ontap_s3_policies - NetApp ONTAP S3 Policies

(adam)

2022-08-12 08:09:12 UTC MAIN commitmail json YAML

py-aiounittest: updated to 1.4.2

1.4.2

Don't run @asyncio.coroutine tests with Python 3.11
test_sync_async_add: After closing the default event loop, set a new one
Fixed deps for travis-ci py3.7

(adam)

2022-08-12 08:08:36 UTC MAIN commitmail json YAML

doc/TODO: + calibre-6.3, rust-1.63.0.

(wiz)

2022-08-12 08:06:47 UTC MAIN commitmail json YAML

libcyaml: fix path to itself

(wiz)

2022-08-12 08:06:23 UTC MAIN commitmail json YAML

git: updated to 2.37.2

Git 2.37.2 Release Notes
========================

This primarily is to backport various fixes accumulated on the 'master'
front since 2.37.1.

Fixes since v2.37.1
-------------------

* "git shortlog -n" relied on the underlying qsort() to be stable,
  which shouldn't have.  Fixed.

* Variable quoting fix in the vimdiff driver of "git mergetool".

* An earlier attempt to plug leaks placed a clean-up label to jump to
  at a bogus place, which as been corrected.

* Fixes a long-standing corner case bug around directory renames in
  the merge-ort strategy.

* Recent update to vimdiff layout code has been made more robust
  against different end-user vim settings.

* In a non-bare repository, the behavior of Git when the
  core.worktree configuration variable points at a directory that has
  a repository as its subdirectory, regressed in Git 2.27 days.

* References to commands-to-be-typed-literally in "git rebase"
  documentation mark-up have been corrected.

* Give _() markings to fatal/warning/usage: labels that are shown in
  front of these messages.

* "git mktree --missing" lazily fetched objects that are missing from
  the local object store, which was totally unnecessary for the purpose
  of creating the tree object(s) from its input.

* Fixes for tests when the source directory has unusual characters in
  its path, e.g. whitespaces, double-quotes, etc.

* Adjust technical/bitmap-format to be formatted by AsciiDoc, and
  add some missing information to the documentation.

* Certain diff options are currently ignored when combined-diff is
  shown; mark them as incompatible with the feature.

* "git clone" from a repository with some ref whose HEAD is unborn
  did not set the HEAD in the resulting repository correctly, which
  has been corrected.

* mkstemp() emulation on Windows has been improved.

* Add missing documentation for "include" and "includeIf" features in
  "git config" file format, which incidentally teaches the command
  line completion to include them in its offerings.

* Avoid "white/black-list" in documentation and code comments.

* Workaround for a compiler warning against use of die() in
  osx-keychain (in contrib/).

* Workaround for a false positive compiler warning.

* The resolve-undo information in the index was not protected against
  GC, which has been corrected.

* A corner case bug where lazily fetching objects from a promisor
  remote resulted in infinite recursion has been corrected.

* "git p4" working on UTF-16 files on Windows did not implement
  CRLF-to-LF conversion correctly, which has been corrected.

* "git p4" did not handle non-ASCII client name well, which has been
  corrected.

* "rerere-train" script (in contrib/) used to honor commit.gpgSign
  while recreating the throw-away merges.

* "git checkout" miscounted the paths it updated, which has been
  corrected.

* Fix for a bug that makes write-tree to fail to write out a
  non-existent index as a tree, introduced in 2.37.

* There was a bug in the codepath to upgrade generation information
  in commit-graph from v1 to v2 format, which has been corrected.

Also contains minor documentation updates and code clean-ups.

(adam)

2022-08-11 23:57:05 UTC MAIN commitmail json YAML

ffmpeg5: remove no longer valid configure option

--disable-xvmc doesn't exist anymore. Noted by Mayuresh on pkgsrc-users.

(gutteridge)

2022-08-11 23:23:28 UTC MAIN commitmail json YAML

p5-Crypt-SMIME: add pkg-config to tools to fix build

(wiz)

2022-08-11 18:55:35 UTC MAIN commitmail json YAML

lintpkgsrc: use proper exit status when showing usage

(rillig)

2022-08-11 16:40:18 UTC MAIN commitmail json YAML

doc: Updated fonts/lanna-io to 20220607

(scole)

2022-08-11 16:37:19 UTC MAIN commitmail json YAML

Updated 2022-06-07

Added Noto Sans Thai Looped font family, which is a great substitute
for the loopless Noto Sans Thai font, that has unresolved usability issues.

(scole)

2022-08-11 16:00:17 UTC MAIN commitmail json YAML

sysutils/ups-nut: Install nut-scanner

Depend on libltldl so that nut-scanner is built.  While the program
isn't that useful, it resolves the issue that the package has a man
page for a program that is not install.

(gdt)

2022-08-11 15:58:14 UTC MAIN commitmail json YAML

doc: Updated textproc/split-thai to 2.18

(scole)

2022-08-11 15:55:56 UTC MAIN commitmail json YAML

Update to 2.18
all changes for pthai.el
- small clean-ups, add completing-read a few places
- for pthai-unknowns*, keep word same as found in buffer

(scole)

2022-08-11 15:41:30 UTC MAIN commitmail json YAML

prosody: support Lua 5.4 and improve security

The changes here are:

* prosody can be built with Lua 5.4 (as recommended since the 0.12
  series), also thanks to lua-unbound being available for Lua 5.4
* the prosody user's home directory is back to the default /nonexistent
  (prosody finds its own data directory nonetheless, as it is a
  compile-time option)
* the corresponding directories created (data directory, PID directory,
  logging) do not seem to actually require write access (or not anymore)

These last two changes together get rid of the security report "user
prosody home directory is group writable" from the daily insecurity
checks on NetBSD.

Tested on NetBSD/amd64.

(khorben)

2022-08-11 15:34:51 UTC MAIN commitmail json YAML

lua-unbound: support building with 5.1 <= LUA_VERSION <= 5.4

(khorben)

2022-08-11 14:03:53 UTC MAIN commitmail json YAML

doc: Updated devel/ruby-mocha to 1.14.0

(taca)

2022-08-11 14:03:25 UTC MAIN commitmail json YAML

devel/ruby-mocha: update to 1.14.0

pkgsrc change: update HOMEPAGE.

1.14.0

External changes

* Mock#expects,#stubs should return last expectation - thanks to
  @vlad-pisanov for #524 (b6b637db)

Internal changes

* Avoid breaking change in psych v4 in ruby v3.1 (08b9f4ca)
* Remove broken Dependabot badge from README (d446657a)
* Add Ruby 3.0 to the CI matrix - thanks to @mishina2228 for #526 (65bc626e)
* Move development dependencies from gemspec to Gemfile - thanks to
  @mishina2228 for #527 (dd127f7b)

(taca)

2022-08-11 13:58:59 UTC MAIN commitmail json YAML

doc: Updated devel/hoe to 3.24.0

(taca)

2022-08-11 13:58:30 UTC MAIN commitmail json YAML

devel/hoe: update to 3.24.0

3.24.0 (2022-06-20)

3 minor enhancements:

* Add bindir and homepage accessor methods. (dsisnero)

* Don't auto-intuit values if they're already set. (dsisnero)

* Use bindir to determine executables. (dsisnero)

(taca)

2022-08-11 13:55:41 UTC MAIN commitmail json YAML

doc: Updated devel/ruby-mixlib-shellout to 3.2.7

(taca)

2022-08-11 13:55:17 UTC MAIN commitmail json YAML

devel/ruby-mixlib-shellout: update to 3.2.7

3.2.7 (2022-04-04)

Merged Pull Requests

* Loosen platform regex to allow 64 or 32 bit mingw #234 (clintoncwolfe)
* Hard Coding the gems in the gemfile to overcome a Ruby 3.1 bug #235
  (johnmccrae)

3.2.6 (2022-03-31)

Merged Pull Requests

* Loosen platform regex to allow 64 or 32 bit mingw #234 (clintoncwolfe)

(taca)

2022-08-11 13:37:24 UTC MAIN commitmail json YAML

libXpm: Add USE_EXPLICIT_LIBDEPS, set to no.

This variable controls whether we add the explicit library dependencies from
libiconv and gettext-lib, required by this package as it's a bit special in how
it handles libintl.

(jperkin)

2022-08-11 13:31:49 UTC MAIN commitmail json YAML

doc: Updated devel/ruby-mixlib-config to 3.0.27

(taca)

2022-08-11 13:31:21 UTC MAIN commitmail json YAML

devel/ruby-mixlib-config: update to 3.0.27

3.0.27 (2022-06-08)

Merged Pull Requests

* Update chefstyle requirement from 1.2.1 to 1.3.2 #84
  (dependabot-preview[bot])
* Update chefstyle requirement from 1.3.2 to 1.4.0 #85
  (dependabot-preview[bot])
* Update chefstyle requirement from 1.4.0 to 1.4.2 #86
  (dependabot-preview[bot])
* Update chefstyle requirement from 1.4.2 to 1.4.3 #87
  (dependabot-preview[bot])
* Update chefstyle requirement from 1.4.3 to 1.4.5 #89
  (dependabot-preview[bot])
* Update chefstyle requirement from 1.4.5 to 1.5.0 #90
  (dependabot-preview[bot])
* Update chefstyle requirement from 1.5.0 to 1.5.2 #92
  (dependabot-preview[bot])
* Update chefstyle requirement from 1.5.2 to 1.5.8 #96
  (dependabot-preview[bot])
* Update chefstyle requirement from 1.5.8 to 1.5.9 #97
  (dependabot-preview[bot])
* Remove parallel pin now that it supports Ruby 2.4 again #98 (tas50)
* Add Ruby 2.7 testing + cache gem installs in CI #99 (tas50)
* Update chefstyle requirement from 1.5.9 to 1.6.2 #101
  (dependabot-preview[bot])
* Update chefstyle requirement from 1.6.2 to 1.7.1 #102
  (dependabot-preview[bot])
* Update chefstyle requirement from 1.7.1 to 1.7.2 #104
  (dependabot-preview[bot])
* Update chefstyle requirement from 1.7.2 to 1.7.5 #106
  (dependabot-preview[bot])
* Upgrade to GitHub-native Dependabot #107 (dependabot-preview[bot])
* add ruby tests 3.0 and 3.1 in verify pipeline #109 (jayashrig158)
* Fix in nested_hash parsing in config #115 (Nik08)

(taca)

2022-08-11 13:25:03 UTC MAIN commitmail json YAML

doc: Updated devel/ruby-minitest to 5.16.2

(taca)

2022-08-11 13:24:37 UTC MAIN commitmail json YAML

devel/ruby-minitest: update to 5.16.2

5.16.2 (2022-07-03)

4 bug fixes:

* Added MT_KWARGS_HACK kludge for stub to deal with ruby 2.7 kwargs
  nastiness. (tsugimoto)

* In #expect, pop Hash class from args if $MT_KWARGS_HACK. (casperisfine)

* In above scenario, set expected kwargs (as Objects) based on actual
  kwargs.

* Nuke ivars if exception fails to marshal twice (eg better_errors).
  (irphilli)

5.16.1 (2022-06-20)

2 bug fixes:

* Apparently adding real kwarg support to mocks/stubs broke some
  code. Fixed.

o Use `MT_KWARGS_HACK=1` to activate the kludgy kwargs support w/
  caveats.

* Clarified some doco wrt the block on #stub.

5.16.0 (2022-06-14)

2 major enhancements:

* Added Minitest::TestTask.

* Dropping ruby 2.2 - 2.5. 2.6 is DTM soon too.

11 minor enhancements:

* Added 窶都how-skips option to show skips at end of run but not require
  窶砺erbose. (MSP-Greg)

* Added Minitest.seed, the random seed used by the run.

* Calling `srand Minitest.seed` before all shuffles to ensure determinism.

* Extended #stub to handle kwargs for both block and call args.
  (SampsonCrowley)

* Extended Mock#__call to display kwargs.

* Extended Mock#expect to record kwargs.

* Extended Mock#method_missing to take kwargs & compare them against
  expected.

* Mock#method_missing displays better errors on arity mismatch.

* Removed minor optimization removing empty suites before run.

* Simplified test randomization (test order will change even with fixed
  seed).

* assert_match now returns the MatchData on success. (Nakilon)

3 bug fixes:

* (Re)Fixed marshalling of exceptions, neutering them in 2 passes.

* Fixed more problems with rdoc.

* Had to patch up mock and stub to deal with <=2.7 kwargs oddities

(taca)

2022-08-11 13:16:34 UTC MAIN commitmail json YAML

Updated devel/ruby-logging to 2.3.1

(taca)

2022-08-11 13:16:02 UTC MAIN commitmail json YAML

devel/ruby-logging: update to 2.3.1

pkgsrc change: remove one pkglint warning.

2.3.1 (2022-05-24)

Bug Fixes
- logging hangs on JRuby when the stdout appender is closed [PR #237]
- initialize the Logging framework when a Filter is created [PR #238]

(taca)

2022-08-11 13:07:42 UTC MAIN commitmail json YAML

doc: Updated devel/ruby-inline to 3.12.6

(taca)

2022-08-11 13:07:20 UTC MAIN commitmail json YAML

devel/ruby-inline: update to 3.12.6

3.12.6 (2022-05-23)

1 bug fix:

* Removed rubinius support. LOL.

(taca)

2022-08-11 13:04:44 UTC MAIN commitmail json YAML

doc: Updated devel/ruby-fast_gettext to 2.2.0

(taca)

2022-08-11 13:04:15 UTC MAIN commitmail json YAML

2022-08-11 12:51:45 UTC MAIN commitmail json YAML

doc: Updated devel/ruby-concurrent-ruby to 1.1.10

(taca)

2022-08-11 12:51:13 UTC MAIN commitmail json YAML

devel/ruby-concurrent-ruby: update to 1.1.10

pkgsrc change: remove one pkglint warning.

1.1.10 (2022-03-22)

* (#951) Set the Ruby compatibility version at 2.2

* (#939, #933) The caller_runs fallback policy no longer blocks reads from
  the job queue by worker threads

* (#938, #761, #652) You can now explicitly prune_pool a thread pool
  (Sylvain Joyeux)

* (#937, #757, #670) We switched the Yahoo stock API for demos to Alpha
  Vantage (Gustavo Caso)

* (#932, #931) We changed how SafeTaskExecutor handles local jump errors
  (Aaron Jensen)

* (#927) You can use keyword arguments in your initialize when using Async
  (Matt Larraz)

* (#926, #639) We removed timeout from TimerTask because it wasn't sound,
  and now it's a no-op with a warning (Jacob Atzen)

* (#919) If you double-lock a re-entrant read-write lock, we promote to
  locked for writing (zp yuan)

* (#915) monotonic_time now accepts an optional unit parameter, as Ruby's
  clock_gettime (Jean Boussier)

(taca)

2022-08-11 08:54:45 UTC MAIN commitmail json YAML

doc: Updated sysutils/felix to 1.1.1

(pin)

2022-08-11 08:54:24 UTC MAIN commitmail json YAML

sysutils/felix: update to 1.1.1

v1.1.1 (2022-08-11)
Fixed
    In the filter mode and shell mode, when you don't have any input, backspace
    now means to return to the normal mode. Also, when you press Esc during the
    filter mode, the cursor position is now restored.

(pin)

2022-08-11 07:20:53 UTC MAIN commitmail json YAML

lintpkgsrc: cleanup: remove unused conf_sysconfdir

It has been replaced with conf_makeconf.

(rillig)

2022-08-11 07:18:47 UTC MAIN commitmail json YAML

lintpkgsrc: cleanup: split PkgDb::pkgver into separate subroutines

(rillig)

2022-08-11 07:07:27 UTC MAIN commitmail json YAML

2022-08-11 07:03:59 UTC MAIN commitmail json YAML

py-pygls: add missing patch, spotted by @wiz

(adam)

2022-08-11 06:49:44 UTC MAIN commitmail json YAML

doc: Added security/mbedtls3 version 3.2.1

(wiz)

2022-08-11 06:49:34 UTC MAIN commitmail json YAML

security/Makefile: + mbedtls3

(wiz)

2022-08-11 06:49:16 UTC MAIN commitmail json YAML

security/mbedtls3: import mbedtls3-3.2.1

mbed TLS (formerly known as PolarSSL) makes it trivially easy for
developers to include cryptographic and SSL/TLS capabilities in
their (embedded) products, facilitating this functionality with a
minimal coding footprint.

This contains major version 3 of the library, which is not backwards
compatible to version 2.

(wiz)

2022-08-11 06:46:43 UTC MAIN commitmail json YAML

mbedtls: mark this as the 'old stable 2.x branch'

(wiz)

2022-08-11 06:41:58 UTC MAIN commitmail json YAML

2022-08-11 06:40:48 UTC MAIN commitmail json YAML

doc: Updated security/mbedtls to 2.28.1

(wiz)

2022-08-11 06:40:38 UTC MAIN commitmail json YAML

mbedtls: update to 2.28.1.

= Mbed TLS 2.28.1 branch released 2022-07-11

Default behavior changes
  * mbedtls_cipher_set_iv will now fail with ChaCha20 and ChaCha20+Poly1305
    for IV lengths other than 12. The library was silently overwriting this
    length with 12, but did not inform the caller about it. Fixes #4301.

Features
  * When MBEDTLS_PSA_CRYPTO_CONFIG is enabled, you may list the PSA crypto
    feature requirements in the file named by the new macro
    MBEDTLS_PSA_CRYPTO_CONFIG_FILE instead of the default psa/crypto_config.h.
    Furthermore you may name an additional file to include after the main
    file with the macro MBEDTLS_PSA_CRYPTO_USER_CONFIG_FILE.

Security
  * Zeroize dynamically-allocated buffers used by the PSA Crypto key storage
    module before freeing them. These buffers contain secret key material, and
    could thus potentially leak the key through freed heap.
  * Fix a potential heap buffer overread in TLS 1.2 server-side when
    MBEDTLS_USE_PSA_CRYPTO is enabled, an opaque key (created with
    mbedtls_pk_setup_opaque()) is provisioned, and a static ECDH ciphersuite
    is selected. This may result in an application crash or potentially an
    information leak.
  * Fix a buffer overread in DTLS ClientHello parsing in servers with
    MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled. An unauthenticated client
    or a man-in-the-middle could cause a DTLS server to read up to 255 bytes
    after the end of the SSL input buffer. The buffer overread only happens
    when MBEDTLS_SSL_IN_CONTENT_LEN is less than a threshold that depends on
    the exact configuration: 258 bytes if using mbedtls_ssl_cookie_check(),
    and possibly up to 571 bytes with a custom cookie check function.
    Reported by the Cybeats PSI Team.

Bugfix
  * Fix a memory leak if mbedtls_ssl_config_defaults() is called twice.
  * Fix several bugs (warnings, compiler and linker errors, test failures)
    in reduced configurations when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Fix a bug in (D)TLS curve negotiation: when MBEDTLS_USE_PSA_CRYPTO was
    enabled and an ECDHE-ECDSA or ECDHE-RSA key exchange was used, the
    client would fail to check that the curve selected by the server for
    ECDHE was indeed one that was offered. As a result, the client would
    accept any curve that it supported, even if that curve was not allowed
    according to its configuration. Fixes #5291.
  * Fix unit tests that used 0 as the file UID. This failed on some
    implementations of PSA ITS. Fixes #3838.
  * Fix API violation in mbedtls_md_process() test by adding a call to
    mbedtls_md_starts(). Fixes #2227.
  * Fix compile errors when MBEDTLS_HAVE_TIME is not defined. Add tests
    to catch bad uses of time.h.
  * Fix the library search path when building a shared library with CMake
    on Windows.
  * Fix bug in the alert sending function mbedtls_ssl_send_alert_message()
    potentially leading to corrupted alert messages being sent in case
    the function needs to be re-called after initially returning
    MBEDTLS_SSL_WANT_WRITE. Fixes #1916.
  * In configurations with MBEDTLS_SSL_DTLS_CONNECTION_ID enabled but none of
    MBEDTLS_SSL_HW_RECORD_ACCEL, MBEDTLS_SSL_EXPORT_KEYS or MBEDTLS_DEBUG_C,
    DTLS handshakes using CID would crash due to a null pointer dereference.
    Fix this. Fixes #3998.
  * Fix incorrect documentation of mbedtls_x509_crt_profile. The previous
    documentation stated that the `allowed_pks` field applies to signatures
    only, but in fact it does apply to the public key type of the end entity
    certificate, too. Fixes #1992.
  * Fix PSA cipher multipart operations using ARC4. Previously, an IV was
    required but discarded. Now, an IV is rejected, as it should be.
  * Fix undefined behavior in mbedtls_asn1_find_named_data(), where val is
    not NULL and val_len is zero.
  * psa_raw_key_agreement() now returns PSA_ERROR_BUFFER_TOO_SMALL when
    applicable. Fixes #5735.
  * Fix a bug in the x25519 example program where the removal of
    MBEDTLS_ECDH_LEGACY_CONTEXT caused the program not to run. Fixes #4901 and
    #3191.
  * Encode X.509 dates before 1/1/2000 as UTCTime rather than
    GeneralizedTime. Fixes #5465.
  * Fix order value of curve x448.
  * Fix string representation of DNs when outputting values containing commas
    and other special characters, conforming to RFC 1779. Fixes #769.
  * Silence a warning from GCC 12 in the selftest program. Fixes #5974.
  * Fix mbedtls_asn1_write_mpi() writing an incorrect encoding of 0.
  * Fix resource leaks in mbedtls_pk_parse_public_key() in low
    memory conditions.
  * Fix server connection identifier setting for outgoing encrypted records
    on DTLS 1.2 session resumption. After DTLS 1.2 session resumption with
    connection identifier, the Mbed TLS client now properly sends the server
    connection identifier in encrypted record headers. Fix #5872.
  * Fix a null pointer dereference when performing some operations on zero
    represented with 0 limbs (specifically mbedtls_mpi_mod_int() dividing
    by 2, and mbedtls_mpi_write_string() in base 2).
  * Fix record sizes larger than 16384 being sometimes accepted despite being
    non-compliant. This could not lead to a buffer overflow. In particular,
    application data size was already checked correctly.

Changes
  * Assume source files are in UTF-8 when using MSVC with CMake.

= mbed TLS 2.28.0 branch released 2021-12-17

API changes
  * Some fields of mbedtls_ssl_session and mbedtls_ssl_config are in a
    different order. This only affects applications that define such
    structures directly or serialize them.

Requirement changes
  * Sign-magnitude and one's complement representations for signed integers are
    not supported. Two's complement is the only supported representation.

Removals
  * Remove config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES,
    which allowed SHA-1 in the default TLS configuration for certificate
    signing. It was intended to facilitate the transition in environments
    with SHA-1 certificates. SHA-1 is considered a weak message digest and
    its use constitutes a security risk.
  * Remove the partial support for running unit tests via Greentea on Mbed OS,
    which had been unmaintained since 2018.

Features
  * The identifier of the CID TLS extension can be configured by defining
    MBEDTLS_TLS_EXT_CID at compile time.
  * Warn if errors from certain functions are ignored. This is currently
    supported on GCC-like compilers and on MSVC and can be configured through
    the macro MBEDTLS_CHECK_RETURN. The warnings are always enabled
    (where supported) for critical functions where ignoring the return
    value is almost always a bug. Enable the new configuration option
    MBEDTLS_CHECK_RETURN_WARNING to get warnings for other functions. This
    is currently implemented in the AES, DES and md modules, and will be
    extended to other modules in the future.
  * Add missing PSA macros declared by PSA Crypto API 1.0.0:
    PSA_ALG_IS_SIGN_HASH, PSA_ALG_NONE, PSA_HASH_BLOCK_LENGTH, PSA_KEY_ID_NULL.
  * Add new API mbedtls_ct_memcmp for constant time buffer comparison.
  * Add PSA API definition for ARIA.

Security
  * Zeroize several intermediate variables used to calculate the expected
    value when verifying a MAC or AEAD tag. This hardens the library in
    case the value leaks through a memory disclosure vulnerability. For
    example, a memory disclosure vulnerability could have allowed a
    man-in-the-middle to inject fake ciphertext into a DTLS connection.
  * In psa_cipher_generate_iv() and psa_cipher_encrypt(), do not read back
    from the output buffer. This fixes a potential policy bypass or decryption
    oracle vulnerability if the output buffer is in memory that is shared with
    an untrusted application.
  * Fix a double-free that happened after mbedtls_ssl_set_session() or
    mbedtls_ssl_get_session() failed with MBEDTLS_ERR_SSL_ALLOC_FAILED
    (out of memory). After that, calling mbedtls_ssl_session_free()
    and mbedtls_ssl_free() would cause an internal session buffer to
    be free()'d twice.

Bugfix
  * Stop using reserved identifiers as local variables. Fixes #4630.
  * The GNU makefiles invoke python3 in preference to python except on Windows.
    The check was accidentally not performed when cross-compiling for Windows
    on Linux. Fix this. Fixes #4774.
  * Prevent divide by zero if either of PSA_CIPHER_ENCRYPT_OUTPUT_SIZE() or
    PSA_CIPHER_UPDATE_OUTPUT_SIZE() were called using an asymmetric key type.
  * Fix a parameter set but unused in psa_crypto_cipher.c. Fixes #4935.
  * Don't use the obsolete header path sys/fcntl.h in unit tests.
    These header files cause compilation errors in musl.
    Fixes #4969.
  * Fix missing constraints on x86_64 and aarch64 assembly code
    for bignum multiplication that broke some bignum operations with
    (at least) Clang 12.
    Fixes #4116, #4786, #4917, #4962.
  * Fix mbedtls_cipher_crypt: AES-ECB when MBEDTLS_USE_PSA_CRYPTO is enabled.
  * Failures of alternative implementations of AES or DES single-block
    functions enabled with MBEDTLS_AES_ENCRYPT_ALT, MBEDTLS_AES_DECRYPT_ALT,
    MBEDTLS_DES_CRYPT_ECB_ALT or MBEDTLS_DES3_CRYPT_ECB_ALT were ignored.
    This does not concern the implementation provided with Mbed TLS,
    where this function cannot fail, or full-module replacements with
    MBEDTLS_AES_ALT or MBEDTLS_DES_ALT. Reported by Armelle Duboc in #1092.
  * Some failures of HMAC operations were ignored. These failures could only
    happen with an alternative implementation of the underlying hash module.
  * Fix the error returned by psa_generate_key() for a public key. Fixes #4551.
  * Fix the build of sample programs when neither MBEDTLS_ERROR_C nor
    MBEDTLS_ERROR_STRERROR_DUMMY is enabled.
  * Fix PSA_ALG_RSA_PSS verification accepting an arbitrary salt length.
    This algorithm now accepts only the same salt length for verification
    that it produces when signing, as documented. Use the new algorithm
    PSA_ALG_RSA_PSS_ANY_SALT to accept any salt length. Fixes #4946.
  * The existing predicate macro name PSA_ALG_IS_HASH_AND_SIGN is now reserved
    for algorithm values that fully encode the hashing step, as per the PSA
    Crypto API specification. This excludes PSA_ALG_RSA_PKCS1V15_SIGN_RAW and
    PSA_ALG_ECDSA_ANY. The new predicate macro PSA_ALG_IS_SIGN_HASH covers
    all algorithms that can be used with psa_{sign,verify}_hash(), including
    these two.
  * Fix issue in Makefile on Linux with SHARED=1, that caused shared libraries
    not to list other shared libraries they need.
  * Fix a bug in mbedtls_gcm_starts() when the bit length of the iv
    exceeds 2^32. Fixes #4884.
  * Fix an uninitialized variable warning in test_suite_ssl.function with GCC
    version 11.
  * Fix the build when no SHA2 module is included. Fixes #4930.
  * Fix the build when only the bignum module is included. Fixes #4929.
  * Fix a potential invalid pointer dereference and infinite loop bugs in
    pkcs12 functions when the password is empty. Fix the documentation to
    better describe the inputs to these functions and their possible values.
    Fixes #5136.
  * The key usage flags PSA_KEY_USAGE_SIGN_MESSAGE now allows the MAC
    operations psa_mac_compute() and psa_mac_sign_setup().
  * The key usage flags PSA_KEY_USAGE_VERIFY_MESSAGE now allows the MAC
    operations psa_mac_verify() and psa_mac_verify_setup().

Changes
  * Set config option MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE to be
    disabled by default.
  * Improve the performance of base64 constant-flow code. The result is still
    slower than the original non-constant-flow implementation, but much faster
    than the previous constant-flow implementation. Fixes #4814.
  * Indicate in the error returned if the nonce length used with
    ChaCha20-Poly1305 is invalid, and not just unsupported.
  * The mbedcrypto library includes a new source code module constant_time.c,
    containing various functions meant to resist timing side channel attacks.
    This module does not have a separate configuration option, and functions
    from this module will be included in the build as required. Currently
    most of the interface of this module is private and may change at any
    time.

= mbed TLS 2.27.0 branch released 2021-07-07

API changes
  * Update AEAD output size macros to bring them in line with the PSA Crypto
    API version 1.0 spec. This version of the spec parameterizes them on the
    key type used, as well as the key bit-size in the case of
    PSA_AEAD_TAG_LENGTH.
    The old versions of these macros were renamed and deprecated as follows:
    - PSA_AEAD_TAG_LENGTH          -> PSA_AEAD_TAG_LENGTH_1_ARG
    - PSA_AEAD_ENCRYPT_OUTPUT_SIZE -> PSA_AEAD_ENCRYPT_OUTPUT_SIZE_2_ARG
    - PSA_AEAD_DECRYPT_OUTPUT_SIZE -> PSA_AEAD_DECRYPT_OUTPUT_SIZE_2_ARG
    - PSA_AEAD_UPDATE_OUTPUT_SIZE  -> PSA_AEAD_UPDATE_OUTPUT_SIZE_2_ARG
    - PSA_AEAD_FINISH_OUTPUT_SIZE  -> PSA_AEAD_FINISH_OUTPUT_SIZE_1_ARG
    - PSA_AEAD_VERIFY_OUTPUT_SIZE  -> PSA_AEAD_VERIFY_OUTPUT_SIZE_1_ARG
  * Implement one-shot cipher functions, psa_cipher_encrypt and
    psa_cipher_decrypt, according to the PSA Crypto API 1.0.0
    specification.

Requirement changes
  * The library now uses the %zu format specifier with the printf() family of
    functions, so requires a toolchain that supports it. This change does not
    affect the maintained LTS branches, so when contributing changes please
    bear this in mind and do not add them to backported code.

Features
  * Add mbedtls_rsa_rsassa_pss_sign_ext() function allowing to generate a
    signature with a specific salt length. This function allows to validate
    test cases provided in the NIST's CAVP test suite. Contributed by C辿dric
    Meuter in PR #3183.
  * Added support for built-in driver keys through the PSA opaque crypto
    driver interface. Refer to the documentation of
    MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS for more information.
  * Implement psa_sign_message() and psa_verify_message().
  * The new function mbedtls_mpi_random() generates a random value in a
    given range uniformly.
  * Implement psa_mac_compute() and psa_mac_verify() as defined in the
    PSA Cryptograpy API 1.0.0 specification.
  * MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
    curves and no longer needs to be configured explicitly to save RAM.

Security
  * Fix a bias in the generation of finite-field Diffie-Hellman-Merkle (DHM)
    private keys and of blinding values for DHM and elliptic curves (ECP)
    computations. Reported by FlorianF89 in #4245.
  * Fix a potential side channel vulnerability in ECDSA ephemeral key generation.
    An adversary who is capable of very precise timing measurements could
    learn partial information about the leading bits of the nonce used for the
    signature, allowing the recovery of the private key after observing a
    large number of signature operations. This completes a partial fix in
    Mbed TLS 2.20.0.
  * It was possible to configure MBEDTLS_ECP_MAX_BITS to a value that is
    too small, leading to buffer overflows in ECC operations. Fail the build
    in such a case.
  * An adversary with access to precise enough information about memory
    accesses (typically, an untrusted operating system attacking a secure
    enclave) could recover an RSA private key after observing the victim
    performing a single private-key operation. Found and reported by
    Zili KOU, Wenjian HE, Sharad Sinha, and Wei ZHANG.
  * An adversary with access to precise enough timing information (typically, a
    co-located process) could recover a Curve25519 or Curve448 static ECDH key
    after inputting a chosen public key and observing the victim performing the
    corresponding private-key operation. Found and reported by Leila Batina,
    Lukas Chmielewski, Bjæ—¦rn Haase, Niels Samwel and Peter Schwabe.

Bugfix
  * Add printf function attributes to mbedtls_debug_print_msg to ensure we
    get printf format specifier warnings.
  * Fix premature fopen() call in mbedtls_entropy_write_seed_file which may
    lead to seed file corruption in the case where the path to the seed file is
    equal to MBEDTLS_PLATFORM_STD_NV_SEED_FILE. Contributed by Victor
    Krasnoshchok in #3616.
  * PSA functions other than psa_open_key now return PSA_ERROR_INVALID_HANDLE
    rather than PSA_ERROR_DOES_NOT_EXIST for an invalid handle, bringing them
    in line with version 1.0.0 of the specification. Fix #4162.
  * PSA functions creating a key now return PSA_ERROR_INVALID_ARGUMENT rather
    than PSA_ERROR_INVALID_HANDLE when the identifier specified for the key
    to create is not valid, bringing them in line with version 1.0.0 of the
    specification. Fix #4271.
  * Fix some cases in the bignum module where the library constructed an
    unintended representation of the value 0 which was not processed
    correctly by some bignum operations. This could happen when
    mbedtls_mpi_read_string() was called on "-0", or when
    mbedtls_mpi_mul_mpi() and mbedtls_mpi_mul_int() was called with one of
    the arguments being negative and the other being 0. Fixes #4643.
  * Fix a bug in ECDSA that would cause it to fail when the hash is all-bits
    zero. Fixes #1792
  * Fix a compilation error when MBEDTLS_ECP_RANDOMIZE_MXZ_ALT is
    defined. Fixes #4217.
  * Fix an incorrect error code when parsing a PKCS#8 private key.
  * In a TLS client, enforce the Diffie-Hellman minimum parameter size
    set with mbedtls_ssl_conf_dhm_min_bitlen() precisely. Before, the
    minimum size was rounded down to the nearest multiple of 8.
  * In library/net_sockets.c, _POSIX_C_SOURCE and _XOPEN_SOURCE are
    defined to specific values.  If the code is used in a context
    where these are already defined, this can result in a compilation
    error.  Instead, assume that if they are defined, the values will
    be adequate to build Mbed TLS.
  * The cipher suite TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384 was not available
    when SHA-1 was disabled and was offered when SHA-1 was enabled but SHA-384
    was disabled. Fix the dependency. Fixes #4472.
  * Do not offer SHA384 cipher suites when SHA-384 is disabled. Fixes #4499.
  * With MBEDTLS_PSA_CRYPTO_C disabled, some functions were getting built
    nonetheless, resulting in undefined reference errors when building a
    shared library. Reported by Guillermo Garcia M. in #4411.
  * Fix test suite code on platforms where int32_t is not int, such as
    Arm Cortex-M. Fixes #4530.
  * Fix some issues affecting MBEDTLS_ARIA_ALT implementations: a misplaced
    directive in a header and a missing initialization in the self-test.
  * Fix a missing initialization in the Camellia self-test, affecting
    MBEDTLS_CAMELLIA_ALT implementations.
  * Restore the ability to configure PSA via Mbed TLS options to support RSA
    key pair operations but exclude RSA key generation. When MBEDTLS_GENPRIME
    is not defined PSA will no longer attempt to use mbedtls_rsa_gen_key().
    Fixes #4512.
  * Fix a regression introduced in 2.24.0 which broke (D)TLS CBC ciphersuites
    (when the encrypt-then-MAC extension is not in use) with some ALT
    implementations of the underlying hash (SHA-1, SHA-256, SHA-384), causing
    the affected side to wrongly reject valid messages. Fixes #4118.
  * Remove outdated check-config.h check that prevented implementing the
    timing module on Mbed OS. Fixes #4633.
  * Fix PSA_ALG_TLS12_PRF and PSA_ALG_TLS12_PSK_TO_MS being too permissive
    about missing inputs.
  * Fix mbedtls_net_poll() and mbedtls_net_recv_timeout() often failing with
    MBEDTLS_ERR_NET_POLL_FAILED on Windows. Fixes #4465.
  * Fix a resource leak in a test suite with an alternative AES
    implementation. Fixes #4176.
  * Fix a crash in mbedtls_mpi_debug_mpi on a bignum having 0 limbs. This
    could notably be triggered by setting the TLS debug level to 3 or above
    and using a Montgomery curve for the key exchange. Reported by lhuang04
    in #4578. Fixes #4608.
  * psa_verify_hash() was relying on implementation-specific behavior of
    mbedtls_rsa_rsassa_pss_verify() and was causing failures in some _ALT
    implementations. This reliance is now removed. Fixes #3990.
  * Disallow inputs of length different from the corresponding hash when
    signing or verifying with PSA_ALG_RSA_PSS (The PSA Crypto API mandates
    that PSA_ALG_RSA_PSS uses the same hash throughout the algorithm.)
  * Fix a null pointer dereference when mbedtls_mpi_exp_mod() was called with
    A=0 represented with 0 limbs. Up to and including Mbed TLS 2.26, this bug
    could not be triggered by code that constructed A with one of the
    mbedtls_mpi_read_xxx functions (including in particular TLS code) since
    those always built an mpi object with at least one limb.
    Credit to OSS-Fuzz. Fixes #4641.
  * Fix mbedtls_mpi_gcd(G,A,B) when the value of B is zero. This had no
    effect on Mbed TLS's internal use of mbedtls_mpi_gcd(), but may affect
    applications that call mbedtls_mpi_gcd() directly. Fixes #4642.
  * The PSA API no longer allows the creation or destruction of keys with a
    read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
    can now only be used as intended, for keys that cannot be modified through
    normal use of the API.
  * When MBEDTLS_PSA_CRYPTO_SPM is enabled, crypto_spe.h was not included
    in all the right places. Include it from crypto_platform.h, which is
    the natural place. Fixes #4649.
  * mbedtls_pk_sign() and mbedtls_pk_verify() and their extended and
    restartable variants now always honor the specified hash length if
    nonzero. Before, for RSA, hash_len was ignored in favor of the length of
    the specified hash algorithm.
  * Fix which alert is sent in some cases to conform to the
    applicable RFC: on an invalid Finished message value, an
    invalid max_fragment_length extension, or an
    unsupported extension used by the server.
  * Correct (change from 12 to 13 bytes) the value of the macro describing the
    maximum nonce length returned by psa_aead_generate_nonce().

Changes
  * Add extra printf compiler warning flags to builds.
  * Fix memsan build false positive in x509_crt.c with Clang 11
  * Fix the setting of the read timeout in the DTLS sample programs.
  * Remove the AES sample application programs/aes/aescrypt2 which shows
    bad cryptographic practice. Fix #1906.
  * Alternative implementations of CMAC may now opt to not support 3DES as a
    CMAC block cipher, and still pass the CMAC self test.
  * Remove configs/config-psa-crypto.h, which was identical to the default
    configuration except for having some extra cryptographic mechanisms
    enabled and for unintended differences. This configuration was primarily
    intended to demonstrate the PSA API, and lost most of its usefulness when
    MBEDTLS_PSA_CRYPTO_C became enabled by default.
  * When building the test suites with GNU make, invoke python3 or python, not
    python2, which is no longer supported upstream.
  * When using session cache based session resumption on the server,
    double-check that custom session cache implementations return
    sessions which are consistent with the negotiated ciphersuite
    and compression method.
  * Fix build failure on MinGW toolchain when __USE_MING_ANSI_STDIO is on.
    When that flag is on, standard GNU C printf format specifiers
    should be used.
  * Reduce the default value of MBEDTLS_ECP_WINDOW_SIZE. This reduces RAM usage
    during ECC operations at a negligible performance cost.
  * mbedtls_mpi_read_binary(), mbedtls_mpi_read_binary_le() and
    mbedtls_mpi_read_string() now construct an mbedtls_mpi object with 0 limbs
    when their input has length 0. Note that this is an implementation detail
    and can change at any time, so this change should be transparent, but it
    may result in mbedtls_mpi_write_binary() or mbedtls_mpi_write_string()
    now writing an empty string where it previously wrote one or more
    zero digits when operating from values constructed with an mpi_read
    function and some mpi operations.
  * Implicitly add PSA_KEY_USAGE_SIGN_MESSAGE key usage policy flag when
    PSA_KEY_USAGE_SIGN_HASH flag is set and PSA_KEY_USAGE_VERIFY_MESSAGE flag
    when PSA_KEY_USAGE_VERIFY_HASH flag is set. This usage flag extension
    is also applied when loading a key from storage.

(wiz)

2022-08-11 06:29:50 UTC MAIN commitmail json YAML

Updated devel/py-setuptools, devel/py-xopen

(adam)

2022-08-11 06:29:32 UTC MAIN commitmail json YAML

py-xopen: updated to 1.6.0

v1.6.0 (2022-08-10)

When writing gzip files, the timestamp and name of the original file is omitted (equivalent to using gzip --no-name (or -n) on the command line). This allows files to be written in a reproducible manner.

(adam)

2022-08-11 06:23:56 UTC MAIN commitmail json YAML

py-setuptools: updated to 63.4.3

v63.4.3
Misc
* Update to pypa/distutils@b65aa40 including more robust support for library/include dir handling in msvccompiler (pypa/distutils-153) and test suite improvements.

(adam)

2022-08-11 06:09:29 UTC MAIN commitmail json YAML

doc: Updated x11/xorgproto to 2022.2

(wiz)

2022-08-11 06:09:17 UTC MAIN commitmail json YAML

xorgproto: update to 2022.2.

This release introduces an new "XWAYLAND" extension:                                                                i

    This extension exists to serve one purpose: reliably identifying
    Xwayland. Previous attempts at doing so included querying root window
    properties, output names or input device names. All these attempts are
    somewhat unreliable. Instead, let's use an extension - where that
    extension is present we have an Xwayland server.

    Clients should never need to do anything but check whether the extension
    exists through XQueryExtension/XListExtensions.

The DRI3 protocol was bumped to 1.3 and has a new DRI3SetDRMDeviceInUse request:

    This request provides a hint to the server about the device
    in use by this window. This is used to provide
    DRI3GetSupportedModifiers with a hint of what device to
    return modifiers for in the window_modifiers return value.
    Using this hint allows for device-specific modifiers to
    be returned by DRI3GetSupportedModifiers, for example
    when an application is renderoffloaded and eligible for
    direct scanout.

The remaining commits are the usual combination of housekeeping and
maintenance.

Alan Coopersmith (5):
      DBE spec: define j in DBEGetVisualInfo reply encoding
      DBE spec: make titles more consistent in Encoding section
      gitlab CI: enable commit & merge request checks
      gitlab CI: enable gitlab's builtin static analysis
      Build xz tarballs instead of bzip2

Austin Shafer (1):
      DRI3: Add DRI3SetDRMDeviceInUse

Jon Turney (1):
      Win32: Fix collision over 'ControlMask'

Olivier Fourdan (1):
      xorgproto 2022.2

Peter Hutterer (1):
      Add the XWAYLAND extension

(wiz)

2022-08-11 05:11:40 UTC MAIN commitmail json YAML

gtk3: drop BUILDLINK_API_DEPENDS.wayland override

It's now set in wayland itself, since packages other than this one were
affected by the dependency change made.

(gutteridge)

2022-08-11 05:09:36 UTC MAIN commitmail json YAML

2022-08-11 05:06:02 UTC MAIN commitmail json YAML

doc: Updated x11/xfce4-screenshooter to 1.9.11

(gutteridge)

2022-08-11 05:05:52 UTC MAIN commitmail json YAML

xfce4-screenshooter: update to 1.9.11

Change log:

1.9.11 (2022-08-08)
======
- Add support to WebP (#76)
- Fix window capture in HiDPI mode (#73)
- Fix intltool lock file problem during make distcheck
- Add option to Show in File Manager when saving (#47)
- Do not quit after dismissing dialog if invoked from plugin (#71)
- Update COPYING (Issue #70)
- Translation Updates:
  Albanian, Basque, Belarusian, Bulgarian, Catalan, Chinese (China),
  Chinese (Taiwan), Czech, Danish, Dutch, Estonian, Finnish, French,
  Galician, German, Greek, Hebrew, Indonesian, Italian, Japanese,
  Korean, Lithuanian, Malay, Norwegian Bokm奪l, Persian (Iran), Polish,
  Portuguese, Portuguese (Brazil), Russian, Serbian, Slovak, Slovenian,
  Spanish, Swedish, Thai, Turkish, Ukrainian

(gutteridge)

2022-08-11 04:16:50 UTC MAIN commitmail json YAML

doc: Updated databases/ruby-sqlite3 to 1.4.4

(taca)

2022-08-11 04:16:28 UTC MAIN commitmail json YAML

databases/ruby-sqlite3: update to 1.4.4

1.4.4 (2022-06-14)

Fixes

* Compilation no longer fails against SQLite3 versions < 3.29.0. This issue
  was introduced in v1.4.3. [#324] (Thank you, @r6e!)

1.4.3 (2022-05-25)

Enhancements

* Disable non-standard support for double-quoted string literals via the
  :strict option. [#317] (Thank you, @casperisfine!)

* Column type names are now explicitly downcased on platforms where they may
  have been in shoutcaps. [#315] (Thank you, @petergoldstein!)

* Support File or Pathname arguments to Database.new. [#283] (Thank you,
  @yb66!)

* Support building on MSVC. [#285] (Thank you, @jmarrec!)

(taca)

2022-08-11 04:13:41 UTC MAIN commitmail json YAML

doc: Updated databases/ruby-sequel to 5.59.0

(taca)

2022-08-11 04:13:18 UTC MAIN commitmail json YAML

databases/ruby-sequel: update to 5.59.0

5.59.0 (2022-08-01)

* Set :allow_eager association option to false for instance specific
  associations without eager loaders (jeremyevans)

* Add require_valid_schema plugin for checking that model classes have
  schema parsed as expected (jeremyevans)

* Model classes created from aliased expressions and literal strings no
  longer use the simple table optimization (jeremyevans)

* Model code that does not swallow connection errors will now also not
  swallow disconnect errors (jeremyevans) (#1892)

* Add is_json and is_not_json methods to the pg_json_ops extension, for the
  PostgreSQL 15+ IS [NOT] JSON operator (jeremyevans)

* Support :security_invoker view option on PostgreSQL 15+, for views where
  access uses permissions of user instead of owner (jeremyevans)

* Support :nulls_distinct index option on PostgreSQL 15+, for NULLS [NOT]
  DISTINCT (jeremyevans)

* Support sequel-postgres-pr driver in the postgres adapter (jeremyevans)

(taca)

2022-08-11 04:00:43 UTC MAIN commitmail json YAML

doc: Updated databases/ruby-pg to 1.4.3

(taca)

2022-08-11 04:00:18 UTC MAIN commitmail json YAML

databases/ruby-pg: update to 1.4.3

pkgsrc change: Update HOMEPAGE to GitHUb.

Here are quote from changes of two minor release, for full change, please
refer: <https://github.com/ged/ruby-pg/blob/master/History.rdoc>.

1.4.0 (2022-06-20)

Added:
* Add PG::Connection#hostaddr, present since PostgreSQL-12. #453
* Add PG::Connection.conninfo_parse to wrap PQconninfoParse. #453

Bugfixes:
* Try IPv6 and IPv4 addresses, if DNS resolves to both. #452
* Re-add block-call semantics to PG::Connection.new accidently removed in pg-1.3.0. #454
* Handle client error after all data consumed in #copy_data for output. #455
* Avoid spurious keyword argument warning on Ruby 2.7. #456
* Change connection setup to respect connect_timeout parameter. #459
* Fix indefinite hang in case of connection error on Windows #458
* Set connection attribute of PG::Error in various places where it was missing. #461
* Fix transaction leak on early break/return. #463
* Update Windows fat binary gem to OpenSSL-1.1.1o and PostgreSQL-14.4.

Enhancements:
* Don't flush at each put_copy_data call, but flush at get_result. #462

1.3.0 (2022-01-20)

Install Enhancements:
* Print some install help if libpq wasn't found. #396 This should help to
  pick the necessary package without googling.
* Update Windows fat binary gem to OpenSSL-1.1.1m and PostgreSQL-14.1.
* Add binary Windows gems for Ruby 3.0 and 3.1.
* Make the library path of libpq available in ruby as
  PG::POSTGRESQL_LIB_PATH and add it to the search paths on Windows similar
  to rpath on Unix systems. #373
* Fall back to pkg-config if pg_config is not found. #380
* Add option to extconf.rb to disable nogvl-wrapping of libpq functions. All
  methods (except PG::Connection.ping) are nonblocking now, so that GVL
  unlock is in theory no longer necessary. However it can have some
  advantage in concurrency, so that GVL unlock is still enabled by
  default. Use:

gem inst pg ��� ���disable-gvl-unlock

API Enhancements:

* Add full compatibility to Fiber.scheduler introduced in Ruby-3.0. #397
* Add support for pipeline mode of PostgreSQL-14. #401
* Allow specification of multiple hosts in PostgreSQL URI. #387
* Add new method conn.backend_key - used to implement our own cancel method.

Type cast enhancements:
* Add PG::BasicTypeMapForQueries::BinaryData for encoding of bytea columns. #348
* Reduce time to build coder maps and permit to reuse them for several type
  maps per PG::BasicTypeRegistry::CoderMapsBundle.new(conn) . #376
* Make BasicTypeRegistry a class and use a global default instance of
  it. Now a local type registry can be instanciated and given to the type
  map, to avoid changing shared global states.
* Allow PG::BasicTypeMapForQueries to take a Proc as callback for undefined types.

Other Enhancements:
* Convert all PG classes implemented in C to TypedData objects. #349
* Support ObjectSpace.memsize_of(obj) on all classes implemented in C. #393
* Make all PG objects implemented in C memory moveable and therefore
  GC.compact friendly. #349
* Update errorcodes and error classes to PostgreSQL-14.0.
* Add PG::CONNECTION_* constants for conn.status of newer PostgreSQL versions.
* Add better support for logical replication. #339
* Change conn.socket_io to read+write mode and to a BasicSocket object
  instead of IO.
* Use rb_io_wait() and the conn.socket_io object if available for better
  compatibility to Fiber.scheduler . Fall back to rb_wait_for_single_fd() on
  ruby < 3.0.
* On Windows use a specialized wait function as a workaround for very poor
  performance of rb_io_wait(). #416

Bugfixes:
* Release GVL while calling PQping which is a blocking method, but it didn't
  release GVL so far.
* Fix Connection#transaction to no longer block on interrupts, for instance
  when pressing Ctrl-C and cancel a running query. #390
* Avoid casting of OIDs to fix compat with Redshift database. #369
* Call conn.block before each conn.get_result call to avoid possible
  blocking in case of a slow network and multiple query results.
* Sporadic Errno::ENOTSOCK when using conn.socket_io on Windows #398

Deprecated:
* Add deprecation warning to PG::BasicTypeRegistry.register_type and siblings.

Removed:
* Remove support of ruby-2.2, 2.3 and 2.4. Minimum is ruby-2.5 now.
* Remove support for PostgreSQL-9.2. Minimum is PostgreSQL-9.3 now.
* Remove constant PG::REVISION, which was broken since pg-1.1.4.

Repository:
* Replace Hoe by Bundler for gem packaging
* Add Github Actions CI and testing of source and binary gems.

(taca)

2022-08-11 03:37:14 UTC MAIN commitmail json YAML

doc: Updated databases/ruby-hiera to 3.10.0

(taca)

2022-08-11 03:36:47 UTC MAIN commitmail json YAML

databases/ruby-hiera: update to 3.10.0

3.10.0 (2022-07-22)

* Set minimal ruby version to 2.5 in gemspec

(taca)

2022-08-11 01:33:11 UTC MAIN commitmail json YAML

doc: Updated lang/python27 to 2.7.18nb9

(gutteridge)

2022-08-11 01:32:50 UTC MAIN commitmail json YAML

2022-08-11 01:11:23 UTC MAIN commitmail json YAML

2022-08-10 23:25:07 UTC MAIN commitmail json YAML

xine-lib: Revert back to ffmpeg4 due to API breakage in ffmpeg5.

(nia)

2022-08-10 22:43:55 UTC MAIN commitmail json YAML

lintpkgsrc: fix hardcoded paths

No matter whether lintpkgsrc is built in batch mode, its PREFIX must
always be the actual prefix, not the hardcoded /usr/pkg, as there may
also be bulk builds with --prefix=/opt/pkg. Same for mk.conf.

(rillig)

2022-08-10 21:54:47 UTC MAIN commitmail json YAML

gcc: Switch binutils to DEPENDS instead of bl3.

Both gcc and binutils ship an ansidecl.h.  Until now this hasn't been a
problem, but the recent binutils 2.39 update ships an ansidecl.h that removes
things like "PTR" which GCC depends on, and it seems as though the binutils
version is being chosen ahead of the in-tree GCC version so the build breaks.

Avoiding buildink3 ensures the headers aren't visible, and the builds are
now progressing further.

(jperkin)

2022-08-10 21:48:48 UTC MAIN commitmail json YAML

lintpkgsrc: fix evaluation of conditions in makefiles

Previously, evaluating the conditions was a wild mixture of concepts
taken from bmake's cond.c, without attention to detail. For example, in
the condition 'exists(VAR:Mpattern)', the ':Mpattern' doesn't make any
sense, still lintpkgsrc parsed it as a modifier.

Instead of evaluating the ':M' modifier only in conditions, a better
idea is to have a general subroutine that expands an arbitrary strings,
taking care of all kinds of modifiers.

While the previous code was conceptually wrong, the number of practical
difference is small. Still, it's better to be precise and accurate,
there are enough places with bad heuristics in the rest of the
lintpkgsrc code.

(rillig)

2022-08-10 20:39:06 UTC MAIN commitmail json YAML

doc: Updated audio/spotify-player to 0.9.5

(pin)

2022-08-10 20:38:34 UTC MAIN commitmail json YAML

audio/spotify-player: update to 0.9.5

What's Changed
    Allow play/pause icons to be configurable in #68
    Update dependencies in #71

(pin)

2022-08-10 20:17:05 UTC MAIN commitmail json YAML

doc: Updated pkgtools/lintpkgsrc to 2022.08.10

(rillig)

2022-08-10 20:16:55 UTC MAIN commitmail json YAML

2022-08-10 18:49:39 UTC MAIN commitmail json YAML

comms/syncterm: also recognize __powerpc__.

Fixes build on NetBSD/macppc.

(he)

2022-08-10 18:01:42 UTC MAIN commitmail json YAML

comms/estic: use gnu++03 instead of c++03 for alloca().

Fixes build on NetBSD/macppc at least.

(he)

2022-08-10 13:58:23 UTC MAIN commitmail json YAML

doc: Remove PKGREVISION from coreutils-9.1 update record

It is my mistake.

(ryoon)

2022-08-10 13:55:36 UTC MAIN commitmail json YAML

Updated devel/py-setuptools-rust, sysutils/py-setproctitle

(adam)

2022-08-10 13:55:14 UTC MAIN commitmail json YAML

py-setproctitle: updated to 1.3.1

Version 1.3.1
-------------
- Fixed segfault on macOS 12.5 in forked processes.
  Note that, as a workaround, Activity Monitor will show the title of the
  parent.

(adam)

2022-08-10 13:53:25 UTC MAIN commitmail json YAML

py-setuptools-rust: updated to 1.5.0

1.5.0

Added
- Add support for extension modules built for wasm32-unknown-emscripten with Pyodide.

Changed
- Locate cdylib artifacts by handling messages from cargo instead of searching target dir (fixes build on MSYS2).
- No longer guess cross-compile environment using `HOST_GNU_TYPE` / `BUILD_GNU_TYPE` sysconfig variables.

Fixed
- Fix RustBin build without wheel.
- Fix RustBin setuptools install

(adam)

2022-08-10 13:49:52 UTC MAIN commitmail json YAML

Updated converters/py-zfec, textproc/py-validators

(adam)

2022-08-10 13:48:25 UTC MAIN commitmail json YAML

py-validators: updated to 0.20.0

0.20.0 (2022-06-05)
- Added ipv4 digit lenghts validation
- Fixes error with international URLs that have more than 2 hyphens

0.19.0 (2022-05-04)
- Dropped py34 support
- Improve IPv6 validation

(adam)

2022-08-10 13:40:48 UTC MAIN commitmail json YAML

doc/TODO: add kea

+ kea-2.2.0.

(taca)

2022-08-10 13:40:06 UTC MAIN commitmail json YAML

doc: Updated security/clamav-doc to 0.103.7

(taca)

2022-08-10 13:39:47 UTC MAIN commitmail json YAML

security/clamav-doc: update to 0.103.7

Catch up to clamav 0.103.7.

(taca)

2022-08-10 13:39:19 UTC MAIN commitmail json YAML

py-zfec: updated to 1.5.7.2

1.5.6
This is a maintenance release to add better platform coverage to the published binary wheels.

(adam)

2022-08-10 13:38:32 UTC MAIN commitmail json YAML

doc: Updated security/clamav to 0.103.7

(taca)

2022-08-10 13:38:00 UTC MAIN commitmail json YAML

security/clamav: update to 0.103.7

0.103.7 (2022-07-26)

ClamAV 0.103.7 is a critical patch release with the following fixes:

* Upgrade the vendored UnRAR library to version 6.1.7.

* Fix logical signature "Intermediates" feature.

* Relax constraints on slightly malformed zip archives that contain
  overlapping file entries.

(taca)

2022-08-10 12:29:18 UTC MAIN commitmail json YAML

doc: Updated sysutils/parallel-disk-usage to 0.8.2

(pin)

2022-08-10 12:28:57 UTC MAIN commitmail json YAML

sysutils/parallel-disk-usage: update to 0.8.2

-ValueParserFactory is unnecessary
-Derive thiserror::Error for error types
-Add --version

(pin)

2022-08-10 11:45:20 UTC MAIN commitmail json YAML

Updated lang/py-cmake-language-server, devel/py-more-itertools

(adam)

2022-08-10 11:45:02 UTC MAIN commitmail json YAML

py-more-itertools: updated to 8.14.0

8.14.0
------

* New functions
    * :func:`longest_common_prefix` (thanks to nanouasyn)
    * :func:`iequals` (thanks to nanouasyn)

* Changes to existing functions
    * `concurrent.futures.ThreadPoolExecutor` is now imported lazily in :func:`callback_iter`.
    * :func:`tail` is now optimized for iterables with a fixed length.

* Other changes
    * Some documentation issues were fixed (thanks to pochmann and timgates42)
    * This library is now marked for Python 3.10 compatibility in PyPI (thanks to chayim)

(adam)

2022-08-10 11:42:58 UTC MAIN commitmail json YAML

2022-08-10 10:58:02 UTC MAIN commitmail json YAML

Updated lang/py-pygls, security/py-ecdsa

(adam)

2022-08-10 10:57:45 UTC MAIN commitmail json YAML

py-ecdsa: updated to 0.18.0

Release 0.18.0 (09 Jul 2022)

New API:
* `curve_by_name` in `curves` module to get a `Curve` object by providing curve
  name.

Bug fix:
* Make the `VerifyingKey` encoded with explicit parameters use the same
  kind of point encoding for public key and curve generator.
* Better handling of malformed curve parameters (as in CVE-2022-0778);
  make python-ecdsa raise `MalformedPointError` instead of `AssertionError`.

Doc fix:
* Publish the documentation on https://ecdsa.readthedocs.io/,
  include explanation of basics of handling of ECC data formats and how to use
  the library for elliptic curve arithmetic.
* Make object names more consistent, make them into hyperlinks on the
  readthedocs documentation.
* Make security note more explicit (Ian Rodney)
* Fix the `explicit` vs `named_curve` confusion in `VerifyingKey` docs.

Maintenance:
* Updated black version; slight changes to formatting
* Include interoperability tests for Ed25519 and Ed448 with OpenSSL.

(adam)

2022-08-10 10:51:34 UTC MAIN commitmail json YAML

py-pygls: updated to 0.12.1

0.12.1
Changed
- `Document` objects now expose a text document's `language_id`
- Various Pyodide improvements
- Improved tests for more reliable CI

0.12
Added
- Allow custom word matching for `Document.word_at_point`

Changed
- Upgraded Python support to 3.10, dropping support for 3.6
- Dependency updates, notably Pydantic 1.9 and Websockets 10

(adam)

2022-08-10 10:16:34 UTC MAIN commitmail json YAML

doc: Updated devel/nspr to 4.34.1

(wiz)

2022-08-10 10:16:24 UTC MAIN commitmail json YAML

nspr: update to 4.34.1.

- add file descriptor sanity checks in the NSPR poll function.

(wiz)

2022-08-10 09:22:18 UTC MAIN commitmail json YAML

doc: Updated sysutils/parallel-disk-usage to 0.8.1

(pin)

2022-08-10 09:21:57 UTC MAIN commitmail json YAML

sysutils/parallel-disk-usage: update to 0.8.1

No changelog provided.
Judging from the commit history only CI benchmarks have been updated.

(pin)

2022-08-10 09:18:14 UTC MAIN commitmail json YAML

Updated textproc/py-tomlkit, net/py-ifaddr, net/py-zeroconf, devel/py-pip

(adam)

2022-08-10 09:17:48 UTC MAIN commitmail json YAML

py-pip: updated to 22.2.2

22.2.2 (2022-08-03)
===================

Bug Fixes
- Avoid  ``AttributeError`` when removing the setuptools-provided ``_distutils_hack`` and it is missing its implementation.
- Fix import error when reinstalling pip in user site.
- Show pip deprecation warnings by default.

(adam)

2022-08-10 09:14:23 UTC MAIN commitmail json YAML

py-zeroconf: updated to 0.39.0

0.39.0

Technically backwards incompatible:

Switch to using async_timeout for timeouts
Significantly reduces the number of asyncio tasks that are created when using ServiceInfo or AsyncServiceInfo

(adam)

2022-08-10 09:12:00 UTC MAIN commitmail json YAML

py-ifaddr: updated to 0.2.0

0.2.0

Added an option to include IP-less adapters, thanks to memory
Fixed a bug where an interface's name was bytes, not str, on Windows
Added an implementation of netifaces.interfaces() (available through ifaddr.netifaces.interfaces())
Added type hints

Backwards incompatible/breaking changes:

Dropped Python 3.6 support

(adam)

2022-08-10 09:07:59 UTC MAIN commitmail json YAML

py-tomlkit: updated to 0.11.3

0.11.3

Fixed
- Fix a regression issue that copying an array results in extra `None` items.
- Fix a regression of `array.add_line` that it incorrectly adds a comma to non-value lines.

(adam)

2022-08-10 09:04:05 UTC MAIN commitmail json YAML

Updated net/py-twisted, devel/py-outcome

(adam)

2022-08-10 09:03:46 UTC MAIN commitmail json YAML

py-outcome: updated to 1.2.0

Outcome 1.2.0 (2022-06-14)
--------------------------

Features
- Add support for Python 3.9 and 3.10.

Deprecations and Removals
- Drop support for Python 3.6.

(adam)

2022-08-10 08:59:35 UTC MAIN commitmail json YAML

py-twisted: updated to 22.4.0

Twisted 22.4.0 (2022-04-11)
===========================

Features
--------
- twisted.python.failure.Failure tracebacks now capture module information, improving compatibility with the Raven Sentry client.
- twisted.python.failure.Failure objects are now compatible with dis.distb, improving compatibility with post-mortem debuggers.

Bugfixes
- twisted.internet.interfaces.IReactorSSL.listenSSL now has correct type annotations.
- twisted.internet.test.test_glibbase.GlibReactorBaseTests now passes.

Conch
-----

Features
- twisted.conch.ssh now supports using RSA keys with SHA-2 signatures (RFC 8332) when acting as a server.  The rsa-sha2-512 and rsa-sha2-256 public key signature algorithms are automatically preferred over ssh-rsa if the client advertises support for them; the actual public keys do not need to change.
- twisted.conch.ssh now has an alternative Ed25519 implementation using PyNaCl, in order to support platforms that lack OpenSSL >= 1.1.1b.  The new "conch_nacl" extra has the necessary dependency.

Web
---

Features
- Twisted is now compatible with h2 4.x.x.

Bugfixes
- twisted.web.http had several several defects in HTTP request parsing that could permit HTTP request smuggling. It now disallows signed Content-Length headers, forbids illegal characters in chunked extensions, forbids a ``0x`` prefix to chunk lengths, and only strips spaces and horizontal tab characters from header values. These changes address CVE-2022-24801 and GHSA-c2jg-hw38-jrqq.

Mail
----
Bugfixes
- twisted.mail.pop3.APOPCredentials is now correctly marked as implementing twisted.cred.credentials.IUsernamHashedPassword, rather than IUsernamePassword.

Trial
-----
Features
- `trial --until-failure --jobs=N` now reports the number of each test pass as it begins.

Bugfixes
- twisted.trial.unittest.TestCase now discards cleanup functions after running them.  Notably, this prevents them from being run an ever growing number of times with `trial -u ...`.

Twisted 22.2.0 (2022-03-01)
===========================

Bugfixes
- twisted.internet.gireactor.PortableGIReactor.simulate and twisted.internet.gtk2reactor.PortableGtkReactor.simulate no longer raises TypeError when there are no delayed called. This was a regression introduced with the migration to Python 3 in which the builtin `min` function no longer accepts `None` as an argument.
- twisted.conch.ssh.transport.SSHTransportBase now disconnects the remote peer if the
  SSH version string is not sent in the first 4096 bytes.
  GHSA-rv6r-3f5q-9rgx)

Improved Documentation
- Add type annotations for twisted.web.http.Request.getHeader.

Deprecations and Removals
- Support for Python 3.6, which is EoL as of 2021-09-04, has been deprecated.

(adam)

2022-08-10 07:41:04 UTC MAIN commitmail json YAML

py-distlib: mark as not for Python 2.7

(adam)

2022-08-10 07:25:48 UTC MAIN commitmail json YAML

Updated devel/py-serpent, devel/py-distlib

(adam)

2022-08-10 07:25:25 UTC MAIN commitmail json YAML

py-distlib: updated to 0.3.5

0.3.5
~~~~~

Released: 2022-07-14

- database

    - Fixed 170: Corrected implementation of ``get_required_dists()``.

- index

    - Updated coverage pragmas for tests relating to obsolete PyPI APIs.

- locators

    - Changed the default locator configuration.

- metadata

    - Updates in support of PEP 643 / Metadata 2.2.

- scripts

    - Updated launcher executables. Thanks to Michael Bikovitsky for his help with
      the launcher changes.

    - Fixed 164: Improved support for reproducible builds by allowing a fixed
      date/time to be inserted into created .exe files. Thanks to Somber Night for the
      patch.

- util

    - Fixed 161: Updated test case.

- wheel

    - Updated to write archive path of RECORD to RECORD instead of staging path.
      Thanks to Pieter Pas for the patch.

    - Fixed 169: Removed usage of deprecated imp module in favour of importlib.

    - Fixed 172: Compute ABI correctly for Python < 3.8.

In addition to the above, setup.py was replaced by setup.cfg and pyproject.toml.

(adam)

2022-08-10 07:17:23 UTC MAIN commitmail json YAML

py-serpent: updated to 1.41

release 1.41

support for python 3.11 added (__getstate__ behavior change)
replaced travis CI by Github actions

(adam)

2022-08-10 07:12:52 UTC MAIN commitmail json YAML

lintpkgsrc: cleanup

Mostly remove redundant punctuation around 'push' and 'defined'.

(rillig)

2022-08-10 06:08:15 UTC MAIN commitmail json YAML

lintpkgsrc: cleanup: modernize subroutine signatures

(rillig)

2022-08-10 05:19:57 UTC MAIN commitmail json YAML

2022-08-10 01:25:38 UTC MAIN commitmail json YAML

doc: Updated sysutils/intel-microcode-netbsd to 20220809.

(msaitoh)

2022-08-10 01:23:06 UTC MAIN commitmail json YAML

intel-microcode-netbsd: Update intel-microcode-netbsd to 20220809.

### Purpose

- Security updates for INTEL-SA-00657.
- Update for functional issues. Refer to Intel Xeon Processor Scalable Family
  Specification Update for details.

### New Platforms

None

### Updated Platforms

| Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| SKX-SP        | B1      | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
| SKX-SP        | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
| SKX-D          | M1      | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
| ICX-SP        | D0      | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
| GLK            | B0      | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
| GLK-R          | R0      | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
| ICL-U/Y        | D1      | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
| TGL-R          | C0      | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
| TGL-H          | R0      | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
| RKL-S          | B0      | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
| ADL            | C0      | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
| ADL            | C0      | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
| ADL            | L0      | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
| ADL            | L0      | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
| ADL            | C0      | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
| ADL            | C0      | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12

### Removed Platforms

None

(msaitoh)

2022-08-10 01:01:44 UTC MAIN commitmail json YAML

doc: Updated multimedia/assimp to 5.2.4

(charlotte)

2022-08-10 01:00:08 UTC MAIN commitmail json YAML

assimp: Update to 5.2.4

CHANGELOG:

The Assimp 5.2.4 Bugfix-Release (14 May 2022)

- Use static runtime only when the option is selected
- Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
- Detect Roughness factor exported by Blender
- Updated Android build script
- Prevent nullptr access to normals-array in bitangent computation
- Avoid setting PBR properties when they are not found on mtl file
- Fix ogre xml serializer
- Fix draco building error when import assimp with cmake add_subdirectory
- FbxConverter: update bone mOffsetMatrix
- Some Windows/MSYS2-specific fixes
- Document fuzz folder
- Fix out-of-range access in ASE-Parser
- Disable assertion tests floating point against inf for Intel oneAPI
- Delete README
- Rename TextureTypeToString() to aiTextureTypeToString()
- Fixed library names for MinGW/MSYS2
- Update pugixml dependency to v1.12.1
- Add an option to treat warnings as errors
- Minor updates to ASSIMP Viewer
- Add badge to show open issue in percentage
- Clang-Tidy performance fixes (make values const-ref where needed).
- MMD (pmx) fixes
- Resource script updates
- Accelerate the Merge vertex post processing step

(charlotte)

2022-08-09 22:00:46 UTC MAIN commitmail json YAML

doc: Updated lang/go-bin to 1.18.5

(tnn)

2022-08-09 21:57:44 UTC MAIN commitmail json YAML

go-bin: update to 1.18.5 to fix reported bootstrap issues on macOS/aarch64

NetBSD/aarch64 version (which we maintain locally) is kept back at
1.17.8nb1 since it works OK for bootstrap and I don't feel like regen'ing
the binaries unless there is some bug that warrants it.

(tnn)

2022-08-09 21:45:08 UTC MAIN commitmail json YAML

ke/build.mk: use ${TEST_TARGET} and ${INSTALL_TARGET}

Noted by adam@

(wiz)