restish: update to 0.13.1.

0.13.1

    fix: improved shell completion for URLs by @danielgtaylor in #95
    fix: simplify option handling, send explicitly passed defaults by @danielgtaylor in #96

0.13.0

    feat: cache parsed/loaded APIs for faster access by @danielgtaylor in #83
    fix: sending non-structured-object input via stdin, fixes #81 by @danielgtaylor in #84
    fix: better handling of params with unknown types, fixes #63 by @danielgtaylor in #85
    fix: trim trailing slashes from OpenAPI servers by @danielgtaylor in #86
    fix: custom server usage, fixes #54 by @danielgtaylor in #87
    feat: enabled & document raw mode for saving files by @danielgtaylor in #88
    fix: parameter serialization for style: form, fixes #47 by @danielgtaylor in #89
    fix: handle recursive schemas without crashing, fixes #21 by @danielgtaylor in #90
    feat: add api sync command by @danielgtaylor in #91
    feat: update dependencies by @danielgtaylor in #92
    fix: simplify edit resource command code by @danielgtaylor in #93
    fix: panic when multiple configured APIs have the same base URL by @danielgtaylor in #94

0.12.0

    b8773c1 Merge pull request #82 from danielgtaylor/completion
    b600019 feat: add auth-header command
    b9d6da4 feat: completion of URI templates
    b0b14ed feat: dynamic shell completion for OpenAPI operations
    593acaf fix: utilize existing API loading for completion

(wiz)

doc: Updated textproc/json-c to 0.16

(wiz)

json-c: update to 0.16.

0.16 (up to commit 66dcdf5, 2022-04-13)
========================================

Deprecated and removed features:
--------------------------------
* JSON_C_OBJECT_KEY_IS_CONSTANT is deprecated in favor of
  JSON_C_OBJECT_ADD_CONSTANT_KEY
* Direct access to lh_table and lh_entry structure members is deprecated.
  Use access functions instead, lh_table_head(), lh_entry_next(), etc...
* Drop REFCOUNT_DEBUG code.

New features
------------
* The 0.16 release introduces no new features

Build changes
-------------
* Add a DISABLE_EXTRA_LIBS option to skip using libbsd
* Add a DISABLE_JSON_POINTER option to skip compiling in json_pointer support.

Significant changes and bug fixes
---------------------------------
* Cap string length at INT_MAX to avoid various issues with very long strings.
* json_object_deep_copy: fix deep copy of strings containing '\0'
* Fix read past end of buffer in the "json_parse" command
* Avoid out of memory accesses in the locally provided vasprintf() function
  (for those platforms that use it)
* Handle allocation failure in json_tokener_new_ex
* Fix use-after-free in json_tokener_new_ex() in the event of printbuf_new() returning NULL
* printbuf_memset(): set gaps to zero - areas within the print buffer which
  have not been initialized by using printbuf_memset
* printbuf: return -1 on invalid arguments (len < 0 or total buffer > INT_MAX)
* sprintbuf(): propagate printbuf_memappend errors back to the caller

Optimizations
--------------
* Speed up parsing by replacing ctype functions with simplified, faster
  non-locale-sensitive ones in json_tokener and json_object_to_json_string.
* Neither vertical tab nor formfeed are considered whitespace per the JSON spec
* json_object: speed up creation of objects, calloc() -> malloc() + set fields
* Avoid needless extra strlen() call in json_c_shallow_copy_default() and
  json_object_equal() when the object is known to be a json_type_string.

Other changes
-------------
* Validate size arguments in arraylist functions.
* Use getrandom() if available; with GRND_NONBLOCK to allow use of json-c
  very early during boot, such as part of cryptsetup.
* Use arc4random() if it's available.
* random_seed: on error, continue to next method instead of exiting the process
* Close file when unable to read from /dev/urandom in get_dev_random_seed()

(wiz)

doc: Updated devel/diff-so-fancy to 1.4.3

(wiz)

diff-so-fancy: update to 1.4.3.

This is a maintenance release. This code was already "released"
but wasn't official on Github. This just makes it official on
Github.

(wiz)

doc: Updated graphics/openexr to 3.1.5

(wiz)

openexr: update to 3.1.5.

## Version 3.1.5 (April 11, 2022)

Patch release that address various bug/build/doc issues:

* Add backwards-compatibilty flags to the core library to match
  original behavior of the the c++ library. Fixes reading of certain
  files by the new core.
* Fix build failures on MSVC14 and MSVC 2022
* Fix build failure on latest 64-bit Ubuntu
* Documentation refers to primary branch as "main"
* Update the CI workflow matrix to VFX-CY2022
* Update auto-fetch Imath version to v3.1.5

(wiz)

doc: Updated graphics/libepoxy to 1.5.9

(wiz)

libepoxy: update to 1.5.9.

Changes since 1.5.8

    Allow libopengl.so to be used when GLX_LIB is missing [#257, John Bates]

Changes since 1.5.7

    Revert changes from PR #238 / #229
    Fixes regressions: #240, #252, #253

Changes since Epoxy 1.5.6

    Remove type redefinition [#249]

Changes since 1.5.5

    Fix issue with loading OpenGL/GLX/EGL libraries [#238, Yaroslav Isakov]
    Expose dependency variables in pkg-config file [#231, Xavier Claessens]
    Support Win64 pointer-sized types [#246]
    Close output objects when generating files [#242, Aleksandr]

Changes since 1.5.4

    Remove Python 2 support [#213]
    Remove Autotools support [#212]
    Use EGL_NO_X11 to disable X11 headers [#216]
    Use call convention for mock function [crziter, #220]
    Return correct version of GLSL on GLES2 [Eric Anholt, #223]
    Rely on Meson's darwin_versions option [#225]

(wiz)

doc: Updated fonts/harfbuzz to 4.2.0

(wiz)

harfbuzz: update to 4.2.0.

Overview of changes leading to 4.2.0
Wednesday, March 30, 2022
====================================
- Source code reorganization, splitting large hb-ot-layout files into smaller,
  per-subtable ones under OT/Layout/*. Code for more tables will follow suit in
  later releases. (Garret Rieger, Behdad Esfahbod)
- Revert Indic shaper change in previous release that broke some fonts and
  instead make per-syllable restriction of 窶廨SUB窶� application limited to
  script-specific Indic features, while applying them and discretionary
  features in one go. (Behdad Esfahbod)
- Fix decoding of private in gvar table. (Behdad Esfahbod)
- Fix handling of contextual lookups that delete too many glyphs. (Behdad Esfahbod)
- Make 窶徇orx窶� deleted glyphs don窶冲 block 窶廨POS窶� application. (Behdad Esfahbod)
- Various build fixes. (Chun-wei Fan, Khaled Hosny)

- New API
+hb_set_next_many() (Andrew John)

(wiz)

doc: Updated archivers/minizip to 1.2.12

(wiz)

minizip: update to 1.2.12.

Changes: not found.

(wiz)

doc: Updated math/imath to 3.1.5

(wiz)

imath: update to 3.1.5.

## Version 3.1.5 (March 28, 2022)

Patch release with miscellaneous bug/doc/build fixes.

In particular, this fixes an issue that could lead to incorrect values
for `numeric_limits<half>`. This also updates the CI workflow matrix
to VFX-CY2022.

(wiz)

doc: Updated textproc/enchant2 to 2.3.3

(wiz)

enchant2: update to 2.3.3.

2.3.3 (April 16, 2022)
----------------------

Update Nuspell provider, requiring Nuspell 5.1.0. The new provider takes
advantage of recently-added Nuspell APIs to be smaller and simpler.

Fix the C++ API is_added() method to return a boolean rather than void.

Require C99 and POSIX 2008, and as a result use fewer gnulib modules,
which gives a modest build time reduction.

(wiz)

doc: Updated devel/pcre2 to 10.40

(wiz)

doc: Updated audio/libshout to 2.4.6

(wiz)

libshout: update to 2.4.6.

libshout 2.4.6 (20220410)

* Fixed pkg-config file (#2329)
* Made vorbis an optional codec
* Do not pass to small headers to libspeex
  (see also the same mirror-patch in Icecast)
* Updated documentation, mostly in regard of making it clearer
  which functions are now obsoleted
* General code cleanup
* Added compiler warnings about obsoleted functions and
  ignored return values
* Replaced old shout_set_metadata() with new shout_set_metadata_utf8()
* Added support for plain text streaming
* Fixed shout_set_metadata*() sometimes returning SHOUTERR_RETRY (#2328)
* Workaround old clients by emulating SHOUTERR_RETRY with SHOUTERR_BUSY (#2316)
* Remove our re-implementation of X509_check_host()
* Allow to disable building tools (#2331)

(wiz)

doc: Updated math/libnumbertext to 1.0.10

(wiz)

libnumbertext: update to 1.0.10.

2022-04-01: 1.0.10 release:
* hu_Hung.sor: fix regression of transliteration on Windows
- non-BMP characters aren't supported in bracket expressions in regex of MS Visual C++,
  resulting missing transliteration on Windows. Replaced by branches separated by |.

2022-04-01: 1.0.9 release:
* hu_Hung.sor: fix regression of transliteration of punctuation marks

(wiz)

doc: Updated net/rsync to 3.2.4

(wiz)

rsync: update to 3.2.4.

# NEWS for rsync 3.2.4 (15 Apr 2022)

## Changes in this version:

### BEHAVIOR CHANGES:

- A new form of arg protection was added that works similarly to the older
  [`--protect-args`](rsync.1#opt) (`-s`) option but in a way that avoids
  breaking things like rrsync (the restricted rsync script): rsync now uses
  backslash escaping for sending "shell-active" characters to the remote
  shell. This includes spaces, so fetching a remote file via a simple quoted
  filename value now works by default without any extra quoting:

  ```shell
      rsync -aiv host:'a simple file.pdf' .
  ```

  Wildcards are not escaped in filename args, but they are escaped in options
  like the [`--suffix`](rsync.1#opt) and [`--usermap`](rsync.1#opt) values.
  If your rsync script depends on the old arg-splitting behavior, either run
  it with the [`--old-args`](rsync.1#opt) option or `export RSYNC_OLD_ARGS=1`
  in the script's environment.  See also the [ADVANCED USAGE](rsync.1#)
  section of rsync's manpage for how to use a more modern arg style.

- A long-standing bug was preventing rsync from figuring out the current
  locale's decimal point character, which made rsync always output numbers
  using the "C" locale.  Since this is now fixed in 3.2.4, a script that
  parses rsync's decimal numbers (e.g. from the verbose footer) may want to
  setup the environment in a way that the output continues to be in the C
  locale.  For instance, one of the following should work fine:

  ```shell
      export LC_ALL=C.UTF-8
  ```

  or if iconv translations are needed:

  ```shell
      if [ "${LC_ALL:-}" ]; then
          export LANG="$LC_ALL"
          export LC_CTYPE="$LC_ALL"
          unset LC_ALL
      fi
      export LC_NUMERIC=C.UTF-8
  ```

### SECURITY FIXES:

- A fix for CVE-2018-25032 in the bundled zlib (memory corruption issue).

### BUG FIXES:

- Fixed a bug with [`--inplace`](rsync.1#opt) + [`--sparse`](rsync.1#opt) (and
  a lack of [`--whole-file`](rsync.1#opt)) where the destination file could
  get reconstructed with bogus data.  Since the bug can also be avoided by
  using (the seemingly redundant) [`--no-W`](rsync.1#opt) on the receiving
  side, the latest rsync will now send `--no-W` to a remote receiver when this
  option combination occurs.  If your client rsync is not new enough to do
  this for you (or if you're just paranoid), you can manually specify `--no-W
  -M--no-W` (when not using [`--whole-file`](rsync.1#opt)) to make sure the
  bug is avoided.

- Fixed a bug with [`--mkpath`](rsync.1#opt) if a single-file copy specifies
  an existing destination dir with a non-existing destination filename.

- Fixed `--update -vv` to output "is uptodate" instead of "is newer" messages
  for files that are being skipped due to an identical modify time.  (This was
  a new output quirk in 3.2.3.)

- When doing an append transfer, the sending side's file must not get shorter
  or it is skipped. Fixes a crash that could occur when the size changes to 0
  in the middle of the send negotiations.

- When dealing with special files (see [`--specials`](rsync.1#opt)) in an
  alt-dest hierarchy, rsync now checks the non-permission mode bits to ensure
  that the 2 special files are really the same before hard-linking them
  together.

- Fixed a bug where [`--delay-updates`](rsync.1#opt) with stale partial data
  could cause a file to fail to update.

- Fixed a few places that would output an INFO message with
  [`--info=NAME`](rsync.1#opt) that should only have been output given
  [`--verbose`](rsync.1#opt) or [`--itemize-changes`](rsync.1#opt).

- Avoid a weird failure if you run a local copy with a (useless)
  [`--rsh`](rsync.1#opt) option that contains a `V` in the command.

- Fixed a long-standing compression bug where the compression level of the
  first file transferred affected the level for all future files.  Also, the
  per-file compression skipping has apparently never worked, so it is now
  documented as being ineffective.

- Fixed a truncate error when a `--write-devices` copy wrote a file onto a
  device that was shorter than the device.

- Made `--write-devices` support both `--checksum` and `--no-whole-file` when
  copying to a device.

- Improved how the [`--stop-at`](rsync.1#opt), [`--stop-after`](rsync.1#opt),
  and (the deprecated) [`--time-limit`](rsync.1#opt) options check to see if
  the allowed time is over, which should make rsync exit more consistently.

- Tweak --progress to display "`??:??:??`" when the time-remaining value is so
  large as to be meaningless.

- Silence some chmod warnings about symlinks when it looks like we have a
  function to set their permissions but they can't really be set.

- Fixed a potential issue in git-set-file-times when handling commits with
  high-bit characters in the description & when handling a description that
  might mimick the git raw-commit deliniators.  (See the support dir.)

- The bundled systemd/rsync.service file now includes `Restart=on-failure`.

### ENHANCEMENTS:

- Use openssl's `-verify_hostname` option in the rsync-ssl script.

- Added extra info to the "FILENAME exists" output of
  [`--ignore-existing`](rsync.1#opt) when [`--info=skip2`](rsync.1#opt) is
  used.  The skip message becomes "FILENAME exists (INFO)" where the INFO is
  one of "type change", "sum change" (requires [`--checksum`](rsync.1#opt)),
  "file change" (based on the quick check), "attr change", or "uptodate".
  Prior versions only supported `--info=skip1`.

- Added the [`--fsync`](rsync.1#opt) option (promoted from the patches repo).

- Added the [`--copy-devices`](rsync.1#opt) option.  Compared to the
  historical version from the rsync-patches repo, this version: properly
  handles `--checksum`; fixes a truncation bug when doing an `--inplace` copy
  onto a longer file; fixes several bugs in the `--itemize` output; and only
  the sending side needs the enhanced rsync for the copy to work.

- Reduced memory usage for an incremental transfer that has a bunch of small
  directories.

- The rsync daemon can now handle a client address with an implied "%scope"
  suffix.

- Added support for [`--atimes`](rsync.1#opt) on macOS and fixed a bug where
  it wouldn't work without [`--times`](rsync.1#opt).

- Rsync can now update the xattrs on a read-only file when your user can
  temporarily add user-write permission to the file. (It always worked for a
  root transfer.)

- Rsync can now work around an [`--inplace`](rsync.1#opt) update of a file
  that is being refused due to the Linux fs.protected_regular sysctl setting.

- When [`--chown`](rsync.1#opt), [`--usermap`](rsync.1#opt), or
  [`--groupmap`](rsync.1#opt) is specified, rsync now makes sure that the
  appropriate [`--owner`](rsync.1#opt) and/or [`--group`](rsync.1#opt) options
  are enabled.

- Added the [`--info=NONREG`](rsync.1#opt) setting to control if rsync should
  warn about non-regular files in the transfer.  This is enabled by default
  (keeping the behavior the same as before), so specifying `--info=nonreg0`
  can be used to turn the warnings off.

- An optional asm optimization for the rolling checksum from Shark64. Enable
  it with `./configure --enable-roll-asm`.

- Using `--debug=FILTER` now outputs a caution message if a filter rule
  has trailing whitespace.

- Transformed rrsync into a python script with improvements:
  - Security has been beefed up.
  - The known rsync options were updated to include recent additions.
  - Make rrsync reject [`--copy-links`](rsync.1#opt) (`-L`),
    [`--copy-dirlinks`](rsync.1#opt) (`-k`), &
    [`--keep-dirlinks`](rsync.1#opt) (`-K`) by default to make it harder to
    exploit any out-of-subdir symlinks.
  - A new rrsync option of [`-munge`](rrsync.1#opt) tells rrsync to always
    enable rsync's [`--munge-links`](rsync.1#opt) option on the server side.
  - A new rrsync option of [`-no-lock`](rrsync.1#opt) disables a new
    single-use locking idiom that is the default when [`-ro`](rrsync.1#opt) is
    not used (useful with [`-munge`](rrsync.1#opt)).
  - A new rrsync option of [`-no-del`](rrsync.1#opt) disables all `--remove*`
    and `--delete*` rsync options on the server side.
  - The log format has been tweaked slightly to add seconds to the timestamp
    and to output the command executed as a tuple (making the args clearer).
  - An rrsync.1 manpage was added (in the support dir with rrsync).

- Added options to the lsh script to facilitate rrsync testing. (See the
  support dir.)

- Transformed the atomic-rsync script into a python script and added the
  ability to ignore one or more non-zero exit codes.  By default, it now
  ignores code 24, the file-vanished exit code. (See the support dir.)

- Transformed the munge-symlinks script into python. (See the support dir.)

- Improved the rsync-no-vanished script to not join stdout & stderr together.
  (See the support dir.)

- Work around a glibc bug where lchmod() breaks in a chroot w/o /proc mounted.

- Try to support a client that sent a remote rsync a wacko stderr file handle
  (such as an older File::RsyncP perl library used by BackupPC).

- Lots of manpage improvements, including better HTML versions.

### PACKAGING RELATED:

- Give configure the `--with-rrsync` option if you want `make install` to
  install the (now python3) rrsync script and its new manpage.

- If the rrsync script is installed, its package should be changed to depend
  on python3 and the (suggested but not mandatory) python3 braceexpand lib.

- When creating a package from a non-release version (w/o a git checkout), the
  packager can elect to create git-version.h and define RSYNC_GITVER to the
  string they want `--version` to output.  (The file is still auto-generated
  using the output of `git describe` when building inside a non-shallow git
  checkout, though.)

- Renamed configure's `--enable-simd` option to `--enable-roll-simd` and added
  the option `--enable-roll-asm` to use the new asm version of the code.  Both
  are x86_64/amd64 only.

- Renamed configure's `--enable-asm` option to `--enable-md5-asm` to avoid
  confusion with the asm option for the rolling checksum.  It is also honored
  even when openssl crypto is in use.  This allows: normal MD4 & MD5, normal
  MD4 + asm MD5, openssl MD4 & MD5, or openssl MD4 + asm MD5 depending on the
  configure options selected.

- Made SIMD & asm configure checks default to "no" on non-Linux hosts due to
  various reports of problems on NetBSD & macOS hosts.  These were also
  tweaked to allow enabling the feature on a host_cpu of amd64 (was only
  allowed on x86_64 before).

- Fixed configure to not fail at the SIMD check when cross-compiling.

- Improved the IPv6 determination in configure.

- Compile the C files with `-pedantic-errors` (when possible) so that we will
  get warned if a static initialization overflows in the future (among other
  things).

- When linking with an external zlib, rsync renames its `read_buf()` function
  to `read_buf_()` to avoid a symbol clash on an unpatched zlib.

- Added a SECURITY.md file.

(wiz)

TODO: - rust-analyzer, done

(wiz)

doc: Added devel/opa version 0.39.0

(leot)

devel: Add opa

(leot)

opa: Import opa-0.39.0 as devel/opa

Open Policy Agent (OPA) is an open source, general-purpose policy
engine that enables unified, context-aware policy enforcement across
the cloud native stack.

(leot)

felix: regen distinfo after patch removal

(wiz)

sysutils/felix

Remove patch now that we have Rust-1.59

(pin)

doc: Updated shells/starship to 1.6.2

(pin)

shells/starship: update to 1.6.2

1.6.2 (2022-04-15)
Bug Fixes
    trigger another release

1.6.1 (2022-04-15)
Bug Fixes
    fix release-please permissions

1.6.0 (2022-04-14)
Features
    Add a module for C projects
    allow printing config file schema
    aws: add option to force AWS display
    cmd_duration: make notify feature optional (compat with nix darwin)
    spack: Add Spack module
    username: Detect Admin access in Windows

Bug Fixes
    bash: ensure checkwinsize is enabled for $COLUMNS
    directory: enable repo_root_style when truncation_length is zero.
    docker_context: ignore the "default" context
    fish: allow generating session keys in older versions of fish
    init: Change Elvish init to catch for 0.18
    nu: Use = instead of space to pass command line parameters
    nu: use shell-provided terminal width

(pin)

cargo-audit: Fix pkgname.

(nikita)

CHANGES: fix cargo-audit import

(nikita)

doc: Updated security/cargo-audit to v0.16.0

(nikita)

security/cargo-audit: import cargo-audit 0.16.0

Cargo-audit allows you to audit Cargo.lock files for crates with
security vulnerabilities reported to the RustSec Advisory Database.

Cargo-audit is provided as the cargo subcommand "audit".

(nikita)

doc: Added editors/neovim version 0.7.0

(nia)

editors: Add neovim. Based on the pkgsrc-wip package (although
with an update, lots of changes, and unncessary stuff removed).

Thanks to Claes N辰st辿n, snow flurry, kamil, and others.

Neovim is a project that seeks to aggressively refactor the "Vim"
text editor in order to:

* Simplify maintenance and encourage contributions
* Split the work between multiple developers
* Enable advanced UIs without modifications to the core
* Maximize extensibility

(nia)

doc: Added devel/lua-mpack version 1.0.8

(nia)

devel: add lua-mpack from pkgsrc-wip

libmpack Lua binding

(nia)

doc: Updated misc/bbdb3 to 3.2.2anb1

(nikita)

bbdb3: Do not build info documentary. It installs no real content.
really, this is just an example text so far included in it.

This should fix the build failure on 2 reported runs.

(nikita)

doc: Added devel/libmpack version 1.0.5

(nia)

devel: add libmpack

libmpack is a small binary serialization/RPC library that implements both
the msgpack and msgpack-rpc specifications.

(nia)

doc: Added devel/libtermkey version 0.22

(nia)

devel: add libtermkey. Needed by neovim.

libtermkey allows easy processing of keyboard entry from terminal-based
programs. It handles all the necessary logic to recognise special keys,
UTF-8 combining, and so on, with a simple interface.

Note: Use of this library for new programs is discouraged. It is being
maintained for legacy purposes only.

(nia)

mariadb106-server: on illumos smf service move pid file location

SMF is not able to dynamically generate run-folders to store the
mariadb-server pid file. For that reason move the PID file to datadir
which already exists.

(tm)

doc: Added devel/unibilium version 2.1.1

(nia)

devel: Add unibilium, based on the wip package 'libunibilium' with some
modifications.

Unibilium is a very basic terminfo library. It doesn't depend on curses or
any other library. It also doesn't use global variables, so it should be
thread-safe.

(nia)

mariadb106-server: provide auth-pam option

Provide a flexible way to enable auth_pam authentication plugin for
mariadb. Because older Solaris versions (<11.2 SRU 10) lack
getgrouplist() this option is disabled on the OS variant.

(tm)

doc: Added textproc/tree-sitter version 0.20.6

(nia)

textproc: add tree-sitter

Tree-sitter is a parser generator tool and an incremental parsing
library. It can build a concrete syntax tree for a source file and
efficiently update the syntax tree as the source file is edited.

(nia)

doc: Added devel/libvterm01 version 0.1.4

(nia)

devel: Add libvterm01. Based on wip/libvterm in wip, but with some
modifications to install in different directories in order to avoid
conflicts with newer versions of libvterm (0.2.x is out, but incompatible
with neovim)...

(nia)

print/tex-regexpatch-doc: Fix package version

Documentation is for version 0.2f of tex-regexpatch.

(micha)

lua-luv: Install headers and other files required by neovim.

Unfortnately this requires we add a self-conflict.

(nia)

qt5-qtwebengine: fails building with node16, use node14

Suggested by adam

(wiz)

Updated www/py-django2, www/py-django3

(adam)

py-django3: updated to 3.2.13

Django 3.2.13 fixes two security issues with severity ���high��� in 3.2.12 and a regression in 3.2.4.

CVE-2022-28346: Potential SQL injection in QuerySet.annotate(), aggregate(), and extra()

QuerySet.annotate(), aggregate(), and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods.

CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on PostgreSQL

QuerySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument.

Bugfixes

Fixed a regression in Django 3.2.4 that caused the auto-reloader to no longer detect changes when the DIRS option of the TEMPLATES setting contained an empty string

(adam)

py-django2: updated to 2.2.28

Django 2.2.28 fixes two security issues with severity ���high��� in 2.2.27.

CVE-2022-28346: Potential SQL injection in QuerySet.annotate(), aggregate(), and extra()

QuerySet.annotate(), aggregate(), and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods.

CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on PostgreSQL

QuerySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument.

(adam)

Updated comms/py-esptool, www/py-asgiref

(adam)

py-asgiref: updated to 3.5.0

3.5.0 (2022-01-22)
------------------

* Python 3.6 is no longer supported, and asyncio calls have been changed to
  use only the modern versions of the APIs as a result

* Several causes of RuntimeErrors in cases where an event loop was assigned
  to a thread but not running

* Speed improvements in the Local class

(adam)

py-esptool: updated to 3.3

Version 3.3

New Features

Added flash size options up to 128MB.
Added stub flasher support for ESP32-C2.
Added --flash-mmu-page-size option to change flash MMU page size on ESP32-C2.
Added address and dummy cycles configuration to SPI flash commands, allowed reading flash SFDP registers.
Added target-specific flash frequency options.

espsecure.py

Added support for ECDSA P192 and P256 signatures in Secure Boot V2.
Refined Secure Boot V2 ECC support.
Added support for XTS_AES_128 using 128 bit key FE scheme.

espefuse.py

Added execute_scripts nesting support, a script can now be called from another script.
Added ESP32-C2 espefuse.py support.
Fixed power-out time for VDDQ settings for ESP32-S3.
Removed dysfunctional JTAG_SEL_ENABLE on ESP32-C3.
Removed unused eFuse fields on ESP32-C3 and ESP32-H2.
Added execute_scripts error handling in script files.
Added support for running multiple commands at once.
Added checks for secure download mode.
Added a recovery option to fix eFuse blocks after encoding errors.

Internal features

These features are intended for use inside Espressif:

Preview support for ESP32-H2-beta2 has been added. This SoC is not generally available, so it is unsupported in this release. Official support will be added in a later esptool.py release.

Bug Fixes

Fixed autodetection on ESP32-S2 in USB-OTG mode.
Fixed flash.rodata not being recognized as part of IRAM in the ELF parser.
Fixed wrong UART_RXFIFO_CNT_M mask values in the stub flasher.
Added overerase detection and a fix sequence for certain XMC flash chips.
Allowed USB PID detection for USB-JTAG-Serial mode on lowercase port names.
Fixed chip autodetection to work in secure download mode.
Fixed wrong firmware image being returned for beta chips.
Fixed a wrong bootloader flashing offset on ESP32-S3.

Miscellaneous Changes

Launched a new self-hosted esptool.py documentation and heavily updated its contents.
Renamed the ESP8684 target to ESP32-C2 (added alias for compatibility).
Added a warning for flash sizes that are not supported by the stub flasher.

(adam)

Added textproc/py-dill; Updated devel/py-astroid, devel/py-pylint

(adam)

py-pylint: updated to 2.13.6

What's New in Pylint 2.13.6?
============================
* Fix a crash in the ``unsupported-membership-test`` checker when assigning
  multiple constants to class attributes including ``__iter__`` via unpacking.

* Asterisks are no longer required in Sphinx and Google style parameter documentation
  for ``missing-param-doc`` and are parsed correctly.

* Fixed a false positive for ``unused-variable`` when a builtin specified in
  ``--additional-builtins`` is given a type annotation.

* Fixed an ``AstroidError`` in 2.13.0 raised by the ``duplicate-code`` checker with
  ``ignore-imports`` or ``ignore-signatures`` enabled.

What's New in Pylint 2.13.5?
============================
* Fix false positive regression in 2.13.0 for ``used-before-assignment`` for
  homonyms between variable assignments in try/except blocks and variables in
  subscripts in comprehensions.

* ``lru-cache-decorating-method`` has been renamed to ``cache-max-size-none`` and
  will only be emitted when ``maxsize`` is ``None``.

* Fix false positive for ``unused-import`` when disabling both ``used-before-assignment`` and ``undefined-variable``.

* Narrow the scope of the ``unnecessary-ellipsis`` checker to:
  * functions & classes which contain both a docstring and an ellipsis.
  * A body which contains an ellipsis ``nodes.Expr`` node & at least one other statement.

* Fix false positive for ``used-before-assignment`` for assignments taking place via
  nonlocal declarations after an earlier type annotation.

* Fix crash for ``redefined-slots-in-subclass`` when the type of the slot is not a const or a string.

* Only raise ``not-callable`` when all the inferred values of a property are not callable.

* Fix a false negative for ``subclassed-final-class`` when a set of other messages were disabled.

What's New in Pylint 2.13.4?
============================
* Fix false positive regression in 2.13.0 for ``used-before-assignment`` for
  homonyms between variable assignments in try/except blocks and variables in
  a comprehension's filter.

* Include ``testing_pylintrc`` in source and wheel distributions.

* Fix crash in ``super-init-not-called`` checker when using ``ctypes.Union``.

* Fix crash for ``unneccessary-ellipsis`` checker when an ellipsis is used inside of a container or a lambda expression.

What's New in Pylint 2.13.3?
============================
* Fix false positive for ``unnecessary-ellipsis`` when using an ellipsis as a default argument.

* Fix crash involving unbalanced tuple unpacking.

* Fix false positive for 'nonexistent-operator' when repeated '-' are
  separated (e.g. by parens).

What's New in Pylint 2.13.2?
============================
* Fix crash when subclassing a ``namedtuple``.

* Fix false positive for ``superfluous-parens`` for patterns like
  "return (a or b) in iterable".

* Fix a false negative regression in 2.13.0 where ``protected-access`` was not
  raised on functions.

* Better error messages in case of crash if pylint can't write the issue template.

What's New in Pylint 2.13.1?
============================
* Fix a regression in 2.13.0 where ``used-before-assignment`` was emitted for
  the usage of a nonlocal in a try block.

* Avoid emitting ``raising-bad-type`` when there is inference ambiguity on
  the variable being raised.

* Loosen TypeVar default name pattern a bit to allow names with multiple uppercase
  characters. E.g. ``HVACModeT`` or ``IPAddressT``.

* Fixed false positive for ``unused-argument`` when a ``nonlocal`` name is used
  in a nested function that is returned without being called by its parent.

* Fix program crash for ``modified_iterating-list/set/dict`` when the list/dict/set
  being iterated through is a function call.

* Don't emit ``broken-noreturn`` and ``broken-collections-callable`` errors
  inside ``if TYPE_CHECKING`` blocks.

What's New in Pylint 2.13.0?
============================
* Add missing dunder methods to ``unexpected-special-method-signature`` check.

* No longer emit ``no-member`` in for loops that reference ``self`` if the binary operation that
  started the for loop uses a ``self`` that is encapsulated in tuples or lists.

* Output better error message if unsupported file formats are used with ``pyreverse``.

* Fix pyreverse diagrams type hinting for classmethods and staticmethods.

* Fix pyreverse diagrams type hinting for methods returning None.

* Fix matching ``--notes`` options that end in a non-word character.

* Updated the position of messages for class and function defintions to no longer cover
  the complete definition. Only the ``def`` or ``class`` + the name of the class/function
  are covered.

* ``using-f-string-in-unsupported-version`` and ``using-final-decorator-in-unsupported-version`` msgids
    were renamed from ``W1601`` and ``W1602`` to ``W2601`` and ``W2602``. Disabling using these msgids will break.
    This is done in order to restore consistency with the already existing msgids for ``apply-builtin`` and
    ``basestring-builtin`` from the now deleted python 3K+ checker. There is now a check that we're not using
    existing msgids or symbols from deleted checkers.

* The line numbering for messages related to function arguments is now more accurate. This can
  require some message disables to be relocated to updated positions.

* Add ``--recursive`` option to allow recursive discovery of all modules and packages in subtree. Running pylint with
  ``--recursive=y`` option will check all discovered ``.py`` files and packages found inside subtree of directory provided
  as parameter to pylint.

* Add ``modified-iterating-list``, ``modified-iterating-dict`` and ``modified-iterating-set``,
  emitted when items are added to or removed from respectively a list, dictionary or
  set being iterated through.

* Fix false-negative for ``assignment-from-none`` checker using list.sort() method.

* New extension ``import-private-name``: indicate imports of external private packages
  and objects (prefixed with ``_``). It can be loaded using ``load-plugins=pylint.extensions.private_import``.

* Fixed crash from ``arguments-differ`` and ``arguments-renamed`` when methods were
  defined outside the top level of a class.

* Removed the deprecated ``check_docs`` extension. You can use the ``docparams`` checker
  to get the checks previously included in ``check_docs``.

* Added a ``testutil`` extra require to the packaging, as ``gitpython`` should not be a dependency
  all the time but is still required to use the primer helper code in ``pylint.testutil``. You can
  install it with ``pip install pylint[testutil]``.

* Reinstated checks from the python3 checker that are still useful for python 3
  (``eq-without-hash``). This is now in the ``pylint.extensions.eq_without_hash`` optional
  extension.

* Fixed an issue where ``ungrouped-imports`` could not be disabled without raising
  ``useless-suppression``.

* Added several checkers to deal with unicode security issues
  (see `Trojan Sources <https://trojansource.codes/>`_ and
  `PEP 672 <https://peps.python.org/pep-0672/>`_ for details) that also
  concern the readability of the code. In detail the following checks were added:

  * ``bad-file-encoding`` checks that the file is encoded in UTF-8 as suggested by
    `PEP8 <https://peps.python.org/pep-0008/#source-file-encoding>`_.
    UTF-16 and UTF-32 are `not supported by Python <https://bugs.python.org/issue1503789>`_
    at the moment. If this ever changes
    ``invalid-unicode-codec`` checks that they aren't used, to allow for backwards
    compatibility.

  * ``bidirectional-unicode`` checks for bidirectional unicode characters that
    could make code execution different than what the user expects.

  * ``invalid-character-backspace``, ``invalid-character-carriage-return``,
    ``invalid-character-sub``, ``invalid-character-esc``,
    ``invalid-character-zero-width-space`` and ``invalid-character-nul``
    to check for possibly harmful unescaped characters.

* Use the ``tomli`` package instead of ``toml`` to parse ``.toml`` files.

* Fix false positive - Allow unpacking of ``self`` in a subclass of ``typing.NamedTuple``.

* Fixed false negative ``unpacking-non-sequence`` when value is an empty list.

* Better warning messages for useless else or elif when a function returns early.

* Fixed false positive ``consider-using-dict-comprehension`` when creating a dict
  using a list of tuples where key AND value vary depending on the same condition.

* Fixed false positive for ``global-variable-undefined`` when ``global`` is used with a class name

* Fixed false positive for ``unused-variable`` when a ``nonlocal`` name is assigned as part of a multi-name assignment.

* Fixed a crash in ``unspecified-encoding`` checker when providing ``None``
  to the ``mode`` argument of an ``open()`` call.

* Fixed a crash involving a ``NewType`` named with an f-string.

* Improved ``bad-open-mode`` message when providing ``None`` to the ``mode``
  argument of an ``open()`` call.

* Added ``lru-cache-decorating-method`` checker with checks for the use of ``functools.lru_cache``
  on class methods. This is unrecommended as it creates memory leaks by never letting the instance
  getting garbage collected.

* Fixed crash with recursion error for inference of class attributes that referenced
  the class itself.

* Fixed false positive for ``unused-argument`` when a method overridden in a subclass
  does nothing with the value of a keyword-only argument.

* The issue template for crashes is now created for crashes which were previously not covered
  by this mechanism.

* Rewrote checker for ``non-ascii-name``.
  It now ensures __all__ Python names are ASCII and also properly
  checks the names of imports (``non-ascii-module-import``) as
  well as file names (``non-ascii-file-name``) and emits their respective new warnings.

  Non ASCII characters could be homoglyphs (look alike characters) and hard to
  enter on a non specialized keyboard.
  See `Confusable Characters in PEP 672 <https://peps.python.org/pep-0672/#confusing-features>`_

* When run in parallel mode ``pylint`` now pickles the data passed to subprocesses with
  the ``dill`` package. The ``dill`` package has therefore been added as a dependency.

* An astroid issue where symlinks were not being taken into account
  was fixed

* Fix a crash in ``unused-private-member`` checker when analyzing code using
  ``type(self)`` in bound methods.

* Optimize parsing of long lines when ``missing-final-newline`` is enabled.

* Fix false positives for ``used-before-assignment`` from using named
  expressions in a ternary operator test and using that expression as
  a call argument.

* Fix false positive for ``undefined-variable`` when ``namedtuple`` class
  attributes are used as return annotations.

* Fix false negative for ``undefined-variable`` and related variable messages
  when the same undefined variable is used as a type annotation and is
  accessed multiple times, or is used as a default argument to a function.

* Pyreverse - add output in mermaidjs format

* Emit ``used-before-assignment`` instead of ``undefined-variable`` when attempting
  to access unused type annotations.

* Added confidence level ``CONTROL_FLOW`` for warnings relying on assumptions
  about control flow.

* ``used-before-assignment`` now considers that assignments in a try block
  may not have occurred when the except or finally blocks are executed.

* Fixed false negative for ``used-before-assignment`` when a conditional
  or context manager intervened before the try statement that suggested
  it might fail.

* Fixed false negative for ``used-before-assignment`` in finally blocks
  if an except handler did not define the assignment that might have failed
  in the try block.

* Fixed extremely long processing of long lines with comma's.

* Fixed crash on properties and inherited class methods when comparing them for
  equality against an empty dict.

* Fixed a false positive for ``assigning-non-slot`` when the slotted class
  defined ``__setattr__``.

* Fixed a false positive for ``invalid-class-object`` when the object
  being assigned to the ``__class__`` attribute is uninferable.

* Fixed false positive for ``used-before-assignment`` with self-referential type
  annotation in conditional statements within class methods.

* Add checker ``redefined-slots-in-subclass``: Emitted when a slot is redefined in a subclass.

* Fixed false positive for ``global-variable-not-assigned`` when the ``del`` statement is used

* By default, pylint does no longer take files starting with ``.#`` into account. Those are
  considered `emacs file locks`. See
  https://www.gnu.org/software/emacs/manual/html_node/elisp/File-Locks.html.
  This behavior can be reverted by redefining the ``ignore-patterns`` option.

* Fixed a false positive for ``used-before-assignment`` when a named expression
  appears as the first value in a container.

* ``used-before-assignment`` now assumes that assignments in except blocks
  may not have occurred and warns accordingly.

* When evaluating statements after an except block, ``used-before-assignment``
  assumes that assignments in the except blocks took place if the
  corresponding try block contained a return statement.

* Fixed a false negative for ``used-before-assignment`` when some but not all
  except handlers defined a name relied upon after an except block when the
  corresponding try block contained a return statement.

* When evaluating statements in the ``else`` clause of a loop, ``used-before-assignment``
  assumes that assignments in the except blocks took place if the
  except handlers constituted the only ways for the loop to finish without
  breaking early.

* ``used-before-assignment`` now checks names in try blocks.

* Fixed false positive with ``used-before-assignment`` for assignment expressions
  in lambda statements.

* Fixed a false positive (affecting unreleased development) for
  ``used-before-assignment`` involving homonyms between filtered comprehensions
  and assignments in except blocks.

* Fixed crash with slots assignments and annotated assignments.

* Fixed crash on list comprehensions that used ``type`` as inner variable name.

* Fixed crash in ``use-maxsplit-arg`` checker when providing the ``sep`` argument
  to ``str.split()`` by keyword.

* Fix false positive for ``unused-variable`` for a comprehension variable matching
  an outer scope type annotation.

* Fix false negative for ``undefined-variable`` for a variable used multiple times
  in a comprehension matching an unused outer scope type annotation.

* Some files in ``pylint.testutils`` were deprecated. In the future imports should be done from the
  ``pylint.testutils.functional`` namespace directly.

* Fixed false positives for ``no-value-for-parameter`` with variadic
  positional arguments.

* ``safe_infer`` no longer makes an inference when given two function
  definitions with differing numbers of arguments.

* Fix ``comparison-with-callable`` false positive for callables that raise, such
  as typing constants.

* Fixed a crash on ``__init__`` nodes when the attribute was previously uninferable due to a cache
  limit size. This limit can be hit when the inheritance pattern of a class (and therefore of the ``__init__`` attribute) is very large.

* Fix false positive for ``used-before-assignment`` from a class definition
  nested under a function subclassing a class defined outside the function.

* Fix ``unnecessary_dict_index_lookup`` false positive when deleting a dictionary's entry.

* Fix false positive for ``used-before-assignment`` when an except handler
  shares a name with a test in a filtered comprehension.

* Fix crash in ``unnecessary-dict-index-lookup`` checker if the output of
  ``items()`` is assigned to a 1-tuple.

* When invoking ``pylint``, ``epylint``, ``symilar`` or ``pyreverse`` by importing them in a python file
  you can now pass an ``argv`` keyword besides patching ``sys.argv``.

* The ``PyLinter`` class will now be initialized with a ``TextReporter``
  as its reporter if none is provided.

* Fix ``super-init-not-called`` when parent or ``self`` is a ``Protocol``

* Fix false positive ``not-callable`` with attributes that alias ``NamedTuple``

* Emit ``redefined-outer-name`` when a nested except handler shadows an outer one.

* Fix false positive ``super-init-not-called`` for classes that inherit their ``init`` from
  a parent.

* ``encoding`` can now be supplied as a positional argument to calls that open
  files without triggering ``unspecified-encoding``.

* Fatal errors now emit a score of 0.0 regardless of whether the linted module
  contained any statements

* ``fatal`` was added to the variables permitted in score evaluation expressions.

* The default score evaluation now uses a floor of 0.

* Fix false negative for ``consider-iterating-dictionary`` during membership checks encapsulated in iterables
  or ``not in`` checks

* Fixed crash on uninferable decorators on Python 3.6 and 3.7

* Add checker ``unnecessary-ellipsis``: Emitted when the ellipsis constant is used unnecessarily.

* Disable checker ``bad-docstring-quotes`` for Python <= 3.7, because in these versions the line
  numbers for decorated functions and classes are not reliable which interferes with the checker.

* Fixed incorrect classification of Numpy-style docstring as Google-style docstring for
  docstrings with property setter documentation.
  Docstring classification is now based on the highest amount of matched sections instead
  of the order in which the docstring styles were tried.

* Fixed detection of ``arguments-differ`` when superclass static
  methods lacked a ``@staticmethod`` decorator.

* ``TypingChecker``

  * Added new check ``broken-noreturn`` to detect broken uses of ``typing.NoReturn``
    if ``py-version`` is set to Python ``3.7.1`` or below.
    https://bugs.python.org/issue34921

  * Added new check ``broken-collections-callable`` to detect broken uses of ``collections.abc.Callable``
    if ``py-version`` is set to Python ``3.9.1`` or below.
    https://bugs.python.org/issue42965

* The ``testutils`` for unittests now accept ``end_lineno`` and ``end_column``. Tests
  without these will trigger a ``DeprecationWarning``.

* ``arguments-differ`` will no longer complain about method redefinitions with extra parameters
  that have default values.

* Fixed false positive ``unexpected-keyword-arg`` for decorators.

* Importing the deprecated stdlib module ``xml.etree.cElementTree`` now emits ``deprecated_module``.

* Disables for ``deprecated-module`` and similar warnings for stdlib features deprecated
  in newer versions of Python no longer raise ``useless-suppression`` when linting with
  older Python interpreters where those features are not yet deprecated.

* Importing the deprecated stdlib module ``distutils`` now emits ``deprecated_module`` on Python 3.10+.

* ``missing-raises-doc`` will now check the class hierarchy of the raised exceptions

  .. code-block:: python

    def my_function()
      """My function.

      Raises:
        Exception: if something fails
      """
      raise ValueError

* Allow disabling ``duplicate-code`` with a disable comment when running through
  pylint.

* Improve ``invalid-name`` check for ``TypeVar`` names.
  The accepted pattern can be customized with ``--typevar-rgx``.

* Added new checker ``typevar-name-missing-variance``. Emitted when a covariant
  or contravariant ``TypeVar`` does not end with  ``_co`` or ``_contra`` respectively or
  when a ``TypeVar`` is not either but has a suffix.

* Allow usage of mccabe 0.7.x release

* Fix ``unused-private-member`` false positive when accessing private methods through ``property``.

(adam)

py-astroid: updated to 2.11.3

What's New in astroid 2.11.3?
=============================
* Fixed an error in the Qt brain when building ``instance_attrs``.

* Fixed a crash in the ``gi`` brain.

What's New in astroid 2.11.2?
=============================
* Avoided adding the name of a parent namedtuple to its child's locals.

What's New in astroid 2.11.1?
=============================
* Promoted ``getattr()`` from ``astroid.scoped_nodes.FunctionDef`` to its parent
  ``astroid.scoped_nodes.Lambda``.

* Fixed crash on direct inference via ``nodes.FunctionDef._infer``.

What's New in astroid 2.11.0?
=============================
* Add new (optional) ``doc_node`` attribute to ``nodes.Module``, ``nodes.ClassDef``,
  and ``nodes.FunctionDef``.

* Accessing the ``doc`` attribute of ``nodes.Module``, ``nodes.ClassDef``, and
  ``nodes.FunctionDef`` has been deprecated in favour of the ``doc_node`` attribute.
  Note: ``doc_node`` is an (optional) ``nodes.Const`` whereas ``doc`` was an (optional) ``str``.

* Passing the ``doc`` argument to the ``__init__`` of ``nodes.Module``, ``nodes.ClassDef``,
  and ``nodes.FunctionDef`` has been deprecated in favour of the ``postinit`` ``doc_node`` attribute.
  Note: ``doc_node`` is an (optional) ``nodes.Const`` whereas ``doc`` was an (optional) ``str``.

* Replace custom ``cachedproperty`` with ``functools.cached_property`` and deprecate it
  for Python 3.8+.

* Set ``end_lineno`` and ``end_col_offset`` attributes to ``None`` for all nodes
  with PyPy 3.8. PyPy 3.8 assigns these attributes inconsistently which could lead
  to unexpected errors. Overwriting them with ``None`` will cause a fallback
  to the already supported way of PyPy 3.7.

* Add missing ``shape`` parameter to numpy ``zeros_like``, ``ones_like``,
  and ``full_like`` methods.

* Only pin ``wrapt`` on the major version.

What's New in astroid 2.10.0?
=============================
* Fixed inference of ``self`` in binary operations in which ``self``
  is part of a list or tuple.

* Fixed builtin inference on `property` calls not calling the `postinit` of the new node, which
  resulted in instance arguments missing on these nodes.

* Fixed a crash on ``Super.getattr`` when the attribute was previously uninferable due to a cache
  limit size. This limit can be hit when the inheritance pattern of a class (and therefore of the
  ``__init__`` attribute) is very large.

* Inlcude names of keyword-only arguments in ``astroid.scoped_nodes.Lambda.argnames``.

* Fixed a crash inferring on a ``NewType`` named with an f-string.

* Add support for [attrs v21.3.0](https://github.com/python-attrs/attrs/releases/tag/21.3.0) which
  added a new `attrs` module alongside the existing `attr`.

* Use the ``end_lineno`` attribute for the ``NodeNG.tolineno`` property
  when it is available.

* Add ``is_dataclass`` attribute to ``ClassDef`` nodes.

* Use ``sysconfig`` instead of ``distutils`` to determine the location of
  python stdlib files and packages.

* Fixed crash with recursion error for inference of class attributes that referenced
  the class itself.

* Fixed crash when trying to infer ``items()`` on the ``__dict__``
  attribute of an imported module.

* Add optional ``NodeNG.position`` attribute.
  Used for block nodes to highlight position of keyword(s) and name
  in cases where the AST doesn't provide good enough positional information.
  E.g. ``nodes.ClassDef``, ``nodes.FunctionDef``.

* Fix ``ClassDef.fromlineno``. For Python < 3.8 the ``lineno`` attribute includes decorators.
  ``fromlineno`` should return the line of the ``class`` statement itself.

* Performance improvements. Only run expensive decorator functions when
  non-default Deprecation warnings are enabled, eg. during a Pytest run.

(adam)

py-dill: added version 0.3.4

dill extends python's pickle module for serializing and de-serializing python
objects to the majority of the built-in python types. Serialization is the
process of converting an object to a byte stream, and the inverse of which is
converting a byte stream back to a python object hierarchy.

(adam)

Remove chat/maubot

This is quite outdated and no plugins have ever been packaged, meaning it was
never useful.

(js)

Add mangos

(khorben)

Add mangos

(khorben)

doc: Updated net/mangos to 3.4.1

(khorben)

Add mangos

(khorben)

mangos: import 3.4.1

Mangos is an implementation in pure Go of the SP (Scalability Protocols)
messaging system. These are colloquially known as nanomsg.

(khorben)

doc: Updated devel/conftest to 0.31.0

(leot)

conftest: Update to 0.31.0

Potentially breaking changes:
- JUnit output now includes OPA namespace in test name for better grouping
- Output for parse command only emits valid JSON

New features:
- Support for JSONC files. Thank you @greggroth!

Other Improvements:
- Bump OPA to v0.39.0
- Bump Golang to v1.18.1
- Builds now include ppc64le architecture. Thank you @seth-priya!

(leot)

tor: reset maintainer

(wiz)

doc: removed mysql-cluster

(nia)

mysql-cluster: remove, BROKEN for a long time, new work in mysql75-cluster

(nia)

doc: Updated sysutils/intel-microcode-netbsd to 20220419.

(msaitoh)

doc: Updated sysutils/intel-microcode-netbsd to 20220419.

Update intel-microcode-netbsd to 20220419.

### Purpose

- Update for functional issues. Refer to errata APLI-11 in
  [Intel Atom Processor E3900 Series]
  (https://cdrdv2.intel.com/v1/dl/getContent/612204) for details.

### Updated Platforms

| Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| APL            | E0      | 06-5c-0a/03 | 00000024 | 00000028 | Atom x5-E39xx

(msaitoh)

doc: Updated x11/xauth to 1.1.2

(wiz)

xauth: update to 1.1.2.

Alan Coopersmith (8):
      tests: make tests work in out-of-tree builds
      tests: Fix failure to make distcheck
      tests: report failure if stderr has unexpected output
      configure.ac: fail build if xtrans is not found
      gitlab CI: add a basic build test
      Build xz tarballs instead of bzip2
      Fix off-by-one in quote-stripping routines
      gitlab CI: stop requiring Signed-off-by in commits

Baptiste Daroussin (1):
      Improve portability

Dr. Tilmann Bubeck (2):
      Removed build requirement "cmdtest".
      Fix warning -Wstringop-truncation for strncpy by using memcpy instead

Larry Doolittle (1):
      Expand checks of socket file with S_ISSOCK

Matt Turner (1):
      xauth 1.1.2

(wiz)

doc: Updated audio/termusic to 0.6.13

(pin)