Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (1h)  pkgsrc-2024Q1 (14d)  pkgsrc-2023Q4 (42d)  pkgsrc-2023Q2 (74d)  pkgsrc-2023Q3 (154d) 

2024-05-12 21:01:44 UTC Now

2022-02-23 16:17:07 UTC MAIN commitmail json YAML

devel/hs-pattern-arrows: import hs-pattern-arrows-0.0.2

A library for generating concise pretty printers based on precedence rules.

(pho)

2022-02-23 16:16:47 UTC MAIN commitmail json YAML

devel/Makefile: + hs-monad-logger

(pho)

2022-02-23 16:16:39 UTC MAIN commitmail json YAML

doc: Added devel/hs-monad-logger version 0.3.36

(pho)

2022-02-23 16:16:33 UTC MAIN commitmail json YAML

devel/hs-monad-logger: import hs-monad-logger-0.3.36

A monad transformer approach for logging.

This package provides Template Haskell functions for determining source
code locations of messages.

(pho)

2022-02-23 16:16:10 UTC MAIN commitmail json YAML

devel/Makefile: + hs-monad-loops

(pho)

2022-02-23 16:16:03 UTC MAIN commitmail json YAML

doc: Added devel/hs-monad-loops version 0.4.3

(pho)

2022-02-23 16:15:57 UTC MAIN commitmail json YAML

2022-02-23 16:15:35 UTC MAIN commitmail json YAML

devel/Makefile: + hs-stm-chans

(pho)

2022-02-23 16:15:28 UTC MAIN commitmail json YAML

doc: Added devel/hs-stm-chans version 3.0.0.6

(pho)

2022-02-23 16:15:22 UTC MAIN commitmail json YAML

devel/hs-stm-chans: import hs-stm-chans-3.0.0.6

This package offers a collection of channel types, similar to
Control.Concurrent.STM.{TChan,TQueue} but with additional features. In
particular we offer the following data types:

Control.Concurrent.STM.TBChan:
    Bounded FIFO channels. When the channel is full, writers will
    block/retry. This ensures that the writers do not get too far ahead of
    the readers, which helps to make sure that memory and cpu resources are
    used responsibly.

Control.Concurrent.STM.TMChan:
    Closeable FIFO channels.

Control.Concurrent.STM.TMQueue:
    Closeable FIFO queues. Like TChan (Maybe a) but with a monotonicity
    guarantee that once Nothing is returned all future reads will be
    Nothing as well.

Control.Concurrent.STM.TBMChan:
    Bounded Closeable FIFO channels.

Control.Concurrent.STM.TBMQueue:
    Bounded Closeable FIFO queues. Combines the capabilities of TBChan and
    TMChan.

(pho)

2022-02-23 16:15:01 UTC MAIN commitmail json YAML

devel/Makefile: + hs-microlens-platform

(pho)

2022-02-23 16:14:52 UTC MAIN commitmail json YAML

doc: Added devel/hs-microlens-platform version 0.4.2.1

(pho)

2022-02-23 16:14:46 UTC MAIN commitmail json YAML

devel/hs-microlens-platform: import hs-microlens-platform-0.4.2.1

This package exports a module which is the recommended starting point for
using microlens if you aren't trying to keep your dependencies minimal. By
importing Lens.Micro.Platform you get all functions and instances from
microlens, microlens-th, microlens-mtl, microlens-ghc, as well as instances
for Vector, Text, and HashMap.

(pho)

2022-02-23 16:14:27 UTC MAIN commitmail json YAML

devel/Makefile: + hs-microlens-mtl

(pho)

2022-02-23 16:14:20 UTC MAIN commitmail json YAML

doc: Added devel/hs-microlens-mtl version 0.2.0.1

(pho)

2022-02-23 16:14:13 UTC MAIN commitmail json YAML

devel/hs-microlens-mtl: import hs-microlens-mtl-0.2.0.1

This package contains functions (like view or +=) which work on
MonadReader, MonadWriter, and MonadState from the mtl package.

(pho)

2022-02-23 16:13:37 UTC MAIN commitmail json YAML

devel/Makefile: + hs-microlens-ghc

(pho)

2022-02-23 16:13:30 UTC MAIN commitmail json YAML

doc: Added devel/hs-microlens-ghc version 0.4.13.1

(pho)

2022-02-23 16:13:23 UTC MAIN commitmail json YAML

devel/hs-microlens-ghc: import hs-microlens-ghc-0.4.13.1

Use this package instead of microlens if you don't mind depending on all
dependencies here -- Lens.Micro.GHC reexports everything from Lens.Micro
and additionally provides orphan instances of microlens classes for
packages coming with GHC (array, bytestring, containers, transformers).

(pho)

2022-02-23 16:13:01 UTC MAIN commitmail json YAML

devel/Makefile: + hs-lifted-async

(pho)

2022-02-23 16:12:53 UTC MAIN commitmail json YAML

doc: Added devel/hs-lifted-async version 0.10.2.2

(pho)

2022-02-23 16:12:47 UTC MAIN commitmail json YAML

devel/hs-lifted-async: import hs-lifted-async-0.10.2.2

This package provides IO operations from async package lifted to any
instance of MonadBase or MonadBaseControl from monad-control package.

(pho)

2022-02-23 16:12:27 UTC MAIN commitmail json YAML

lang/Makefile: + hs-language-javascript

(pho)

2022-02-23 16:12:19 UTC MAIN commitmail json YAML

doc: Added lang/hs-language-javascript version 0.7.1.0

(pho)

2022-02-23 16:12:12 UTC MAIN commitmail json YAML

2022-02-23 16:11:47 UTC MAIN commitmail json YAML

devel/Makefile: + hs-cborg

(pho)

2022-02-23 16:11:38 UTC MAIN commitmail json YAML

doc: Added devel/hs-cborg version 0.2.6.0

(pho)

2022-02-23 16:11:32 UTC MAIN commitmail json YAML

devel/hs-cborg: import hs-cborg-0.2.6.0

This package provides an efficient implementation of the Concise Binary
Object Representation (CBOR), as specified by RFC 7049
(https:/tools.ietf.orghtml/rfc7049).

(pho)

2022-02-23 16:11:15 UTC MAIN commitmail json YAML

devel/Makefile: + hs-half

(pho)

2022-02-23 16:11:06 UTC MAIN commitmail json YAML

doc: Added devel/hs-half version 0.3.1

(pho)

2022-02-23 16:11:00 UTC MAIN commitmail json YAML

devel/hs-half: import hs-half-0.3.1

This package supplies half-precision floating point values w/ 1 bit of
sign, 5 bits of exponent, 11 bits of mantissa trailing a leading 1 bit with
proper underflow.

These arise commonly in GPU applications.

(pho)

2022-02-23 16:10:41 UTC MAIN commitmail json YAML

textproc/Makefile: + hs-boxes

(pho)

2022-02-23 16:10:32 UTC MAIN commitmail json YAML

doc: Added textproc/hs-boxes version 0.1.5

(pho)

2022-02-23 16:10:26 UTC MAIN commitmail json YAML

textproc/hs-boxes: import hs-boxes-0.1.5

A pretty-printing library for laying out text in two dimensions, using a
simple box model.

(pho)

2022-02-23 16:10:03 UTC MAIN commitmail json YAML

www/Makefile: + hs-bower-json

(pho)

2022-02-23 16:09:49 UTC MAIN commitmail json YAML

doc: Added www/hs-bower-json version 1.0.0.1

(pho)

2022-02-23 16:09:43 UTC MAIN commitmail json YAML

www/hs-bower-json: import hs-bower-json-1.0.0.1

Bower is a package manager for the web (see http://bower.io). This package
provides a data type and ToJSON/FromJSON instances for Bower's package
manifest file, bower.json.

(pho)

2022-02-23 16:09:10 UTC MAIN commitmail json YAML

converters/Makefile: + hs-aeson-better-errors

(pho)

2022-02-23 16:09:00 UTC MAIN commitmail json YAML

doc: Added converters/hs-aeson-better-errors version 0.9.1.0

(pho)

2022-02-23 16:08:53 UTC MAIN commitmail json YAML

2022-02-23 16:08:02 UTC MAIN commitmail json YAML

devel/hs-optparse-applicative: Add a mk fragment application.mk

optparse-applicative has a really nice feature that enables any tools
parsing command-line arguments with the library to automatically generate
bash, fish, and zsh completion scripts via hidden options, by hidden it
means they aren't shown in the "--help" message.

Packages that install executables using optparse-applicative can now
include this file to automatically generate and install such scripts.

(pho)

2022-02-23 16:03:00 UTC MAIN commitmail json YAML

mk/haskell.mk: Add a package-settable variable HASKELL_ENABLE_DYNAMIC_EXECUTABLE

Prior to this change, packages that install both libraries and executables
were both linked dynamically when HASKELL_ENABLE_SHARED_LIBRARY is set to
yes. This turned out to be problematic when the executables end up
depending on hundreds of shared objects (which occurs rather frequently for
tools written in Haskell): the dynamic linker spends several seconds upon
loading the executables to resolve all the symbols.

Now we can selectively opt out from dynamic linkage by setting
HASKELL_ENABLE_DYNAMIC_EXECUTABLE to no. This should be done carefully,
because linking executables with static Haskell libraries means that those
executables will also use static RTS. This causes problems if they use GHC
API to interpret Haskell code at run time: static RTS would violate PaX
MPROTECT and suffer from ASLR while loading static objects.

(pho)

2022-02-23 16:01:20 UTC MAIN commitmail json YAML

ghc92: Only pass -pie if it is supported.

This isn't ideal, _OPSYS_SUPPORTS_MKPIE is an internal variable and we are
assuming if it's defined it's enabled, but for now it's the best we have.

(jperkin)

2022-02-23 15:53:25 UTC MAIN commitmail json YAML

ruby: Fix extension installs on non-NetBSD.

For some reason NetBSD does not append an OS version like pretty much all other
OS, and so installs of arch-specific extensions directories were broken due to
the triple containing a dash before the version and causing PLIST failures.

Introduce a new RUBY_EXTARCH variable that has a special-case for NetBSD, and
use it for GEM_EXTSBASE.  Fixes many packages, but notably ruby31-base.

(jperkin)

2022-02-23 11:46:07 UTC MAIN commitmail json YAML

Updated devel/py-attrs, devel/py-py

(adam)

2022-02-23 11:45:52 UTC MAIN commitmail json YAML

py-py: updated to 1.11.0

1.11.0 (2021-11-04)

Support Python 3.11
Support NO_COLOR environment variable
Update vendored apipkg: 1.5 => 2.0

(adam)

2022-02-23 11:43:41 UTC MAIN commitmail json YAML

py-attrs: updated to 21.4.0

21.4.0 (2021-12-29)
-------------------

Changes
^^^^^^^

- Fixed the test suite on PyPy3.8 where ``cloudpickle`` does not work.
- Fixed ``coverage report`` for projects that use ``attrs`` and don't set a ``--source``.

----

21.3.0 (2021-12-28)
-------------------

Backward-incompatible Changes
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- When using ``@define``, converters are now run by default when setting an attribute on an instance -- additionally to validators.
  I.e. the new default is ``on_setattr=[attrs.setters.convert, attrs.setters.validate]``.

  This is unfortunately a breaking change, but it was an oversight, impossible to raise a ``DeprecationWarning`` about, and it's better to fix it now while the APIs are very fresh with few users.
- ``import attrs`` has finally landed!
  As of this release, you can finally import ``attrs`` using its proper name.

  Not all names from the ``attr`` namespace have been transferred; most notably ``attr.s`` and ``attr.ib`` are missing.
  See ``attrs.define`` and ``attrs.field`` if you haven't seen our next-generation APIs yet.
  A more elaborate explanation can be found `On The Core API Names <https://www.attrs.org/en/latest/names.html>`_

  This feature is at least for one release **provisional**.
  We don't *plan* on changing anything, but such a big change is unlikely to go perfectly on the first strike.

  The API docs have been mostly updated, but it will be an ongoing effort to change everything to the new APIs.
  Please note that we have **not** moved -- or even removed -- anything from ``attr``!

  Please do report any bugs or documentation inconsistencies!

Changes
^^^^^^^

- ``attr.asdict(retain_collection_types=False)`` (default) dumps collection-esque keys as tuples.
- ``__match_args__`` are now generated to support Python 3.10's
  `Structural Pattern Matching <https://docs.python.org/3.10/whatsnew/3.10.html#pep-634-structural-pattern-matching>`_.
  This can be controlled by the ``match_args`` argument to the class decorators on Python 3.10 and later.
  On older versions, it is never added and the argument is ignored.
- If the class-level *on_setattr* is set to ``attrs.setters.validate`` (default in ``@define`` and ``@mutable``) but no field defines a validator, pretend that it's not set.
- The generated ``__repr__`` is significantly faster on Pythons with f-strings.
- Attributes transformed via ``field_transformer`` are wrapped with ``AttrsClass`` again.
- Generated source code is now cached more efficiently for identical classes.
- Added ``attrs.converters.to_bool()``.
- ``attrs.resolve_types()`` now resolves types of subclasses after the parents are resolved.
- Added new validators: ``lt(val)`` (< val), ``le(va)`` (≤ val), ``ge(val)`` (≥ val), ``gt(val)`` (> val), and ``maxlen(n)``.
- ``attrs`` classes are now fully compatible with `cloudpickle <https://github.com/cloudpipe/cloudpickle>`_ (no need to disable ``repr`` anymore).
- Added new context manager ``attrs.validators.disabled()`` and functions ``attrs.validators.(set|get)_disabled()``.
  They deprecate ``attrs.(set|get)_run_validators()``.
  All functions are interoperable and modify the same internal state.
  They are not – and never were – thread-safe, though.
- ``attrs.validators.matches_re()`` now accepts pre-compiled regular expressions in addition to pattern strings.

21.2.0 (2021-05-07)
-------------------

Backward-incompatible Changes
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- We had to revert the recursive feature for ``attr.evolve()`` because it broke some use-cases -- sorry!
- Python 3.4 is now blocked using packaging metadata because ``attrs`` can't be imported on it anymore.
  To ensure that 3.4 users can keep installing  ``attrs`` easily, we will `yank <https://pypi.org/help/#yanked>`_ 21.1.0 from PyPI.
  This has **no** consequences if you pin ``attrs`` to 21.1.0.

21.1.0 (2021-05-06)
-------------------

Deprecations
^^^^^^^^^^^^

- The long-awaited, much-talked-about, little-delivered ``import attrs`` is finally upon us!

  Since the NG APIs have now been proclaimed stable, the **next** release of ``attrs`` will allow you to actually ``import attrs``.
  We're taking this opportunity to replace some defaults in our APIs that made sense in 2015, but don't in 2021.

  So please, if you have any pet peeves about defaults in ``attrs``'s APIs, *now* is the time to air your grievances in 487!
  We're not gonna get such a chance for a second time, without breaking our backward-compatibility guarantees, or long deprecation cycles.
  Therefore, speak now or forever hold you peace!
- The *cmp* argument to ``attr.s()`` and `attr.ib()` has been **undeprecated**
  It will continue to be supported as syntactic sugar to set *eq* and *order* in one go.

  I'm terribly sorry for the hassle around this argument!
  The reason we're bringing it back is it's usefulness regarding customization of equality/ordering.

  The ``cmp`` attribute and argument on ``attr.Attribute`` remains deprecated and will be removed later this year.

Changes
^^^^^^^

- It's now possible to customize the behavior of ``eq`` and ``order`` by passing in a callable.
- The instant favorite next-generation APIs are not provisional anymore!

  They are also officially supported by Mypy as of their `0.800 release <https://mypy-lang.blogspot.com/2021/01/mypy-0800-released.html>`_.

  We hope the next release will already contain an (additional) importable package called ``attrs``.
- If an attribute defines a converter, the type of its parameter is used as type annotation for its corresponding ``__init__`` parameter.

  If an ``attr.converters.pipe`` is used, the first one's is used.
- Fixed the creation of an extra slot for an ``attr.ib`` when the parent class already has a slot with the same name.
- ``__attrs__init__()`` will now be injected if ``init=False``, or if ``auto_detect=True`` and a user-defined ``__init__()`` exists.

  This enables users to do "pre-init" work in their ``__init__()`` (such as ``super().__init__()``).

  ``__init__()`` can then delegate constructor argument processing to ``self.__attrs_init__(*args, **kwargs)``.
- ``bool(attr.NOTHING)`` is now ``False``.
- It's now possible to use ``super()`` inside of properties of slotted classes.
- Allow for a ``__attrs_pre_init__()`` method that -- if defined -- will get called at the beginning of the ``attrs``-generated ``__init__()`` method.
- Added forgotten ``attr.Attribute.evolve()`` to type stubs.
- ``attrs.evolve()`` now works recursively with nested ``attrs`` classes.
- Python 3.10 is now officially supported.
- ``attr.resolve_types()`` now takes an optional *attrib* argument to work inside a ``field_transformer``.
- ``ClassVar``\ s are now also detected if they come from `typing-extensions <https://pypi.org/project/typing-extensions/>`_.
- To make it easier to customize attribute comparison, we have added the ``attr.cmp_with()`` helper.

  See the `new docs on comparison <https://www.attrs.org/en/stable/comparison.html>`_ for more details.
- Added **provisional** support for static typing in ``pyright`` via the `dataclass_transforms specification <https://github.com/microsoft/pyright/blob/main/specs/dataclass_transforms.md>`_.
  Both the ``pyright`` specification and ``attrs`` implementation may change in future versions of both projects.

(adam)

2022-02-23 11:41:27 UTC MAIN commitmail json YAML

py-mccabe: add missing test dependency

All tests now pass.

(wiz)

2022-02-23 11:40:30 UTC MAIN commitmail json YAML

doc: Added devel/py-hypothesmith version 0.2.0

(wiz)

2022-02-23 11:40:21 UTC MAIN commitmail json YAML

devel/Makefile: + py-hypothesmith

(wiz)

2022-02-23 11:40:06 UTC MAIN commitmail json YAML

devel/py-hypothesmith: import py-hypothesmith-0.2.0

Hypothesis strategies for generating Python programs, something
like CSmith.

This is definitely pre-alpha, but if you want to play with it feel
free! You can even keep the shiny pieces when - not if - it breaks.

(wiz)

2022-02-23 11:36:55 UTC MAIN commitmail json YAML

doc: Added lang/py-lark-parser version 0.12.0

(wiz)

2022-02-23 11:36:31 UTC MAIN commitmail json YAML

lang/Makefile: + py-lark-parser

(wiz)

2022-02-23 11:36:12 UTC MAIN commitmail json YAML

lang/py-lark-parser: import py-lark-parser-0.12.0

Lark is a modern general-purpose parsing library for Python.
With Lark, you can parse any context-free grammar, efficiently,
with very little code.

(wiz)

2022-02-23 11:33:15 UTC MAIN commitmail json YAML

doc: Added lang/py-libcst version 0.4.1

(wiz)

2022-02-23 11:33:07 UTC MAIN commitmail json YAML

lang/Makefile: + py-libcst

(wiz)

2022-02-23 11:32:52 UTC MAIN commitmail json YAML

lang/py-libcst: import py-libcst-0.4.1

Packaged by adam and myself in wip.

LibCST parses Python 3.0 -> 3.11 source code as a CST tree that
keeps all formatting details (comments, whitespaces, parentheses,
etc). It's useful for building automated refactoring (codemod)
applications and linters.

LibCST creates a compromise between an Abstract Syntax Tree (AST)
and a traditional Concrete Syntax Tree (CST). By carefully reorganizing
and naming node types and fields, we've created a lossless CST that
looks and feels like an AST.

(wiz)

2022-02-23 11:30:57 UTC MAIN commitmail json YAML

doc: Added devel/py-typing-inspect version 0.7.1

(wiz)

2022-02-23 11:30:47 UTC MAIN commitmail json YAML

devel/Makefile: + py-typing-inspect

(wiz)

2022-02-23 11:30:04 UTC MAIN commitmail json YAML

devel/py-typing-inspect: import py-typing-inspect-0.7.1

The 'typing_inspect' module defines experimental API for runtime
inspection of types defined in the Python standard 'typing' module.

(wiz)

2022-02-23 10:56:01 UTC MAIN commitmail json YAML

doc: Updated www/so to 0.4.6

(pin)

2022-02-23 10:55:44 UTC MAIN commitmail json YAML

www/so: update to 0.4.6

-Update cursive to 0.17
-Use Google as the default search engine

(pin)

2022-02-23 09:51:55 UTC pkgsrc-2021Q4 commitmail json YAML

Pullup tickets up to #6585

(bsiegert)

2022-02-23 09:36:11 UTC pkgsrc-2021Q4 commitmail json YAML

Pullup ticket #6585 - requested by nia
databases/mariadb106-client, databases/mariadb106-server: security fix

Revisions pulled up:
- databases/mariadb106-client/Makefile                          1.6
- databases/mariadb106-client/Makefile.common                  1.7
- databases/mariadb106-client/PLIST                            1.3
- databases/mariadb106-client/distinfo                          1.6
- databases/mariadb106-client/patches/patch-storage_innobase_include_transactional__lock__guard.h 1.2
- databases/mariadb106-server/Makefile                          1.12

---
  Module Name: pkgsrc
  Committed By: nia
  Date: Sat Feb 19 09:13:21 UTC 2022

  Modified Files:
  pkgsrc/databases/mariadb106-client: Makefile Makefile.common PLIST
      distinfo
  pkgsrc/databases/mariadb106-client/patches:
      patch-storage_innobase_include_transactional__lock__guard.h
  pkgsrc/databases/mariadb106-server: Makefile

  Log Message:
  mariadb106: update to 10.6.7

                            MariaDB 10.6.7 Release Notes

    InnoDB

        * Set innodb_change_buffering=none by default (MDEV-27734)

    Security

        * Fixes for the following security vulnerabilities:
            * CVE-2021-46665
            * CVE-2021-46664
            * CVE-2021-46661
            * CVE-2021-46668
            * CVE-2021-46663

                            MariaDB 10.6.6 Release Notes

  Notable Items

    InnoDB

        * --skip-symbolic-links does not disallow .isl file creation
          (MDEV-26870)
        * Indexed CHAR columns are broken with NO_PAD collations (MDEV-25440)
        * insert-intention lock conflicts with waiting ORDINARY lock
          (MDEV-27025)
        * Crash recovery improvements (MDEV-26784, MDEV-27022, MDEV-27183,
          MDEV-27610)
        * mariabackup skips valid .ibd file (MDEV-26326)
        * Allow seamless upgrade despite ROW_FORMAT=COMPRESSED (MDEV-27736)

    Galera

        * Galera updated to 26.4.11
        * Galera SST scripts should use ssl_capath (not ssl_ca) for CA directory
          (MDEV-27181)
        * Alter Sequence do not replicate to another nodes with in Galera
          Cluster (MDEV-19353)
        * Galera crash - Assertion. Possible parallel writeset problem
          (MDEV-26803)
        * CREATE TABLE with FOREIGN KEY constraint fails to apply in parallel
          (MDEV-27276)
        * Galera cluster node consider old server_id value even after
          modification of server_id [wsrep_gtid_mode=ON] (MDEV-26223)

    Replication

        * Seconds behind master corrected from artificial spikes at relay-log
          rotation (MDEV-16091)
        * Statement rollback in binlog when transaction creates or drop
          temporary table is set right (MDEV-26833)
        * CREATE-or-REPLACE SEQUENCE is made to binlog with the DDL flag to
          stabilize its parallel execution on slave (MDEV-27365)

    Security

        * Fixes for the following security vulnerabilities:
            * CVE-2022-24052
            * CVE-2022-24051
            * CVE-2022-24050
            * CVE-2022-24048
            * CVE-2021-46659

(bsiegert)

2022-02-23 09:36:05 UTC pkgsrc-2021Q4 commitmail json YAML

Pullup ticket #6584 - requested by nia
databases/mariadb105-client, databases/mariadb105-server: security fix

Revisions pulled up:
- databases/mariadb105-client/Makefile                          1.10
- databases/mariadb105-client/Makefile.common                  1.15
- databases/mariadb105-client/PLIST                            1.4
- databases/mariadb105-client/distinfo                          1.11
- databases/mariadb105-server/Makefile                          1.23

---
  Module Name: pkgsrc
  Committed By: nia
  Date: Sat Feb 19 09:57:51 UTC 2022

  Modified Files:
  pkgsrc/databases/mariadb105-client: Makefile Makefile.common PLIST
      distinfo
  pkgsrc/databases/mariadb105-server: Makefile

  Log Message:
  mariadb105: update to 10.5.15

                            MariaDB 10.5.15 Release Notes

  Notable Items

    InnoDB

        * Set innodb_change_buffering=none by default (MDEV-27734)

    Security

        * Fixes for the following security vulnerabilities:
            * CVE-2021-46665
            * CVE-2021-46664
            * CVE-2021-46661
            * CVE-2021-46668
            * CVE-2021-46663

                            MariaDB 10.5.14 Release Notes

  Notable Items

    InnoDB

        * --skip-symbolic-links does not disallow .isl file creation
          (MDEV-26870)
        * Indexed CHAR columns are broken with NO_PAD collations (MDEV-25440)
        * insert-intention lock conflicts with waiting ORDINARY lock
          (MDEV-27025)
        * Crash recovery improvements (MDEV-26784, MDEV-27022, MDEV-27183,
          MDEV-27610)

    Galera

        * Galera updated to 26.4.11
        * Galera SST scripts should use ssl_capath (not ssl_ca) for CA directory
          (MDEV-27181)
        * Alter Sequence do not replicate to another nodes with in Galera
          Cluster (MDEV-19353)
        * Galera crash - Assertion. Possible parallel writeset problem
          (MDEV-26803)
        * CREATE TABLE with FOREIGN KEY constraint fails to apply in parallel
          (MDEV-27276)
        * Galera cluster node consider old server_id value even after
          modification of server_id [wsrep_gtid_mode=ON] (MDEV-26223)

    Replication

        * Seconds behind master corrected from artificial spikes at relay-log
          rotation (MDEV-16091)
        * Statement rollback in binlog when transaction creates or drop
          temporary table is set right (MDEV-26833)
        * CREATE-or-REPLACE SEQUENCE is made to binlog with the DDL flag to
          stabilize its parallel execution on slave (MDEV-27365)

    Security

        * Fixes for the following security vulnerabilities:
            * CVE-2022-24052
            * CVE-2022-24051
            * CVE-2022-24050
            * CVE-2022-24048
            * CVE-2021-46659

(bsiegert)

2022-02-23 08:48:27 UTC MAIN commitmail json YAML

py-setuptools-rust: add missing build dependency; fix path

(wiz)

2022-02-23 08:27:52 UTC MAIN commitmail json YAML

Updated devel/py-setuptools-rust, www/py-httptools

(adam)

2022-02-23 08:27:29 UTC MAIN commitmail json YAML

py-httptools: updated to 0.4.0

v0.4.0
Changes

Bump bundled http-parser to 2.9.4 and llhttp to 6.0.6
fixes CVE-2021-22959 & CVE-2021-22960

(adam)

2022-02-23 08:22:46 UTC MAIN commitmail json YAML

py-setuptools-rust: updated to 1.1.2

1.1.2 (2021-12-05)

Changed

Removed dependency on tomli to simplify installation.
Improve error messages on invalid inputs to rust_extensions keyword.

1.1.1 (2021-12-01)

Fixed

Fix regression from setuptools-rust 1.1.0 which broke builds for the x86_64-unknown-linux-musl target.
Fix --target command line option being unable to take a value.
Fix regression from setuptools-rust 1.0.0 which broke builds on arm64 macos conda builds.
Fix regression from setuptools-rust 1.1.0 which incorrectly converted library extension suffixes to the "abi3" suffix when py_limited_api was unspecified.

1.1.0 (2021-11-30)

Added

Add support for cross-compiling using cross.

Fixed

Fix incompatibility with Python 3.6.0 using default values for NamedTuple classes.
Stop forcing the msvc Rust toolchain for Windows environments using the gnu toolchain.

1.0.0 (2021-11-21)

Added

Add --target command line option for specifying target triple.
Add new default "auto" setting for RustExtension.py_limited_api.
Support very verbose cargo build.rs output.

Changed

Switch to tomli dependency.

Removed

Remove test_rust command. (python setup.py test is deprecated.)
Remove check_rust command.
Move tomlgen_rust command to separate setuptools-rust-tomlgen package.

Fixed

Use info from sysconfig when cross-compiling.
Put Rust extension module binary under build/lib.* directory.
Fix Exec binding with console scripts.

(adam)

2022-02-23 08:20:43 UTC MAIN commitmail json YAML

doc: Updated textproc/lowdown to 0.11.0

(fcambus)

2022-02-23 08:20:30 UTC MAIN commitmail json YAML

lowdown: update to 0.11.0.

Version 0.11.0, 2022-02-21

Add class and identifier extended attributes to headers. These are
stipulated in PHP Markdown Extra. Documentation in lowdown(5).

When using header identifiers (the default) and the names collide, use
pandoc's method of creating unique header names. Also handle the case of
markup in headers and the identifier created from those to also be like
pandoc. This isn't a fix, but rather make output consistent with other
tools.

Fix output of how links are handled in -Tms when part of headers. The same
applies to other block-level macros with link children such as in
definition lists. This also cleans up how headers are shown in the PDF
TOC. While here, make header identifiers the same as in -Thtml so that
intra-document links are consistent, and enable linking within a document
using the PDF markers.

Fix footnotes to be actual footnotes in -Tlatex and -Tms instead of
endnotes. The other formats (-Tman, etc.) all continue to use endnotes.
The note system has internally been cleaned up and now allows for more
flexible note placement, e.g., side-notes.

Allow footnotes to properly exist in -Tlatex tables. Also allow for table
alignment.

Bump the minor number as the ABI has been tidied up with respect to
footnotes: they're now all in their LOWDOWN_FOOTNOTE blocks instead of
split into definitions and references. The LOWDOWN_DOC_FOOTER element,
which was not used, has also been removed.

The system in general has spent many, many computer-hours being fuzzed
with AFL thanks to hardware donated by Michael Dexter. Thank you!

Finally, make -T be a synonym for the new -t, which is used by pandoc.

(fcambus)

2022-02-23 04:24:38 UTC MAIN commitmail json YAML

2022-02-23 03:10:26 UTC MAIN commitmail json YAML

libXdmcp: fix builds with Solaris 11.3

There are circumstances where getentropy() exists but arc4random_buf()
does not, as reported to be the case with Solaris 11.3 in PR pkg/54628,
report and analysis by Sad Clouds. sys/random.h only needs to be
included on SunOS, in that case (second patch iteration).

(gutteridge)

2022-02-23 01:20:02 UTC MAIN commitmail json YAML

net/unison-snapshot: Fix MKPIE logic

ocaml.mk defines MKPIE_SUPPORTED=no, but this was after bsd.prefs.mk
so _PKGSRC_MKPIE was already set to yes.  This was made harder to
debug by options.mk including bsd.prefs.mk.  Reorder to load ocaml.mk
earlier.

(gdt)

2022-02-22 23:15:35 UTC MAIN commitmail json YAML

Update of wordpress

(morr)

2022-02-22 23:14:24 UTC MAIN commitmail json YAML

Update to version 5.9.1

Changes for 5.9 are too big to list. You can view them here: https://wordpress.org/news/2022/01/josephine/

Changes in 5.9.1:

WordPress 5.9.1 features 33 bug fixes on Core, as well as 52 bug fixes for the Block Editor.
The WordPress 5.9.1 release was led by Jean-Baptiste Audras and George Mamadashvili.
The following core tickets from Trac were fixed:

    #54250  Twenty Twenty One: Editor Buttons margins incompatible with gap
    #54782  Default presets in use by default themes need to be updated
    #54844  Unnecessary database queries when a block theme isn窶冲 in use
    #54849  Site transients cause DB errors when installing
    #54862  FSE Navigation Block Styling Submenu
    #54886  "Show hidden updates" button is invisible
    #54889  Cannot access "Manage menus" in Navigation block toolbar when running a classic theme
    #54896  TT2: Blank screen displayed for custom post type
    #54900  PHP warning in `WP_REST_Global_Styles_Controller` if no `styles` exist in theme.json
    #54902  Media Library Overlay Drag-and-Drop To Reorder Images Does Not Work In WP 5.9
    #54904  Bounce hoverIntent.js version in script-loader to 10.1.2
    #54906  Check _get_cron_array type in upgrade_590 routine
    #54908  Standard post type UI is exposed for templates and template parts
    #54911  Twenty Twenty-Two: Theme Check Plugin issue for the image size
    #54922  Normalizing CSS also catches CSS IDs instead of only URLs
    #54928  Twenty Twenty-Two: 404 search label should be translated
    #54929  Twenty Twenty-Two: Pricing Table pattern header levels should be consistent
    #54944  By applying a background color to a group block, it aligns to the left in the editor
    #54955  Custom fields issue
    #54960  Media Library Dragging Option Isn窶冲 Reflected
    #54977  Dashboard welcome banner: fix bug when displayed in certain contexts
    #55018  Twenty Twenty-Two 窶� Update theme URI link
    #55072  Widgets editor: Widget Group is missing .wp-widget-group__inner-blocks container
    #55103  Twenty Twenty-Two: Restore padding for Group blocks with a background color
    #55109  Plugins no longer download to tmp folder
    #55148  In block themes, styles should load in the head
    #55151  View scripts of blocks are loaded in editor
    #55161  Full Site Editing: PHP Warning with incomplete presets
    #55177  Normalizing relative CSS links should skip data URIs
    #55178  Allow fully extending WP_Theme_JSON and WP_Theme_JSON_Resolver classes
    #55179  Backport bugfixes from Gutenberg into Core for WP 5.9.1
    #55188  Block styles should load after global styles in the editor
    #55190  Global styles duotone not rendering in post editor

The following block editor issues from GitHub were fixed:

    PR38857  Fix for late static binding in the resolver
    PR38780  Block Editor: Add settings to enable/disable auto anchor generation
    PR38750  Load block support styles in the head for block themes
    PR38745  Fix global styles loading logic
    PR38695  Site Editor: Limit template part slugs to Latin chars
    PR38671  Allow extending the WP_Theme_JSON_Gutenberg class
    PR38656  Edit Site: Add template check to 窶�setPage窶� action
    PR38655  Add site editor initial redirect error handling
    PR38649  Fix search block html handling for label and button text
    PR38642  Gallery block: copy all attributes when transforming to Image blocks
    PR38625  Allow child classes to use the private methods and constants
    PR38561  Only apply the social links block migration if there窶冱 a need for a migration
    PR38516  Block preview: fix resize listener
    PR38442  Duotone: Allow users to specify custom filters
    PR38432  Remove the aria-label from the site title block
    PR38399  Images: Try moving responsive rule to common.scss.
    PR38362  Cover block: Add back missing styles
    PR38310  Gallery block: fix bug with link destination default option not being set
    PR38189  Gallery: Ensure the last image takes up all available space
    PR38070  Post Editor: Fix template queries
    PR37983  Tree Grid: Fix keyboard navigation for expand/collapse table rows in Firefox
    PR37954  Fix duotone render in non-fse themes
    PR37941  Unset inherited backgrounds on Posts Lists
    PR37895  Site Editor: Fix broken 窶漏edo窶� by removing faulty logic for discarding unsaved Logo changes
    PR37885  Load the global styles before the theme styles in the editor
    PR37853  Block.json schema: update fontSize and lineHeight props
    PR37840  [History]: Fix redo after update/publish with transient edits
    PR37778  Update core/archive block schema to reflect no block-level settings support
    PR37774  Spacer: Fix unit settings filter
    PR37762  Schema: Fix appearanceTools in theme.json schema
    PR37650  Site Editor: Add keyboard shortcut help modal
    PR37647  Site Editor: Add the 窶廩elp窶� link to the tools menu
    PR37644  Fix: Coloring panel is unusable in RTL
    PR37569  Docs: Add automated theme.json reference documentation
    PR37493  Update: make color style labels simpler
    PR37486  Show UI warning if Pages cannot be retrieved in Page List block
    PR37474  Fix empty gray circle when site has no logo on template list page
    PR37430  Update: Allow color gradient popover to be above the color toggle
    PR37425  Border panel: Collapse color controls
    PR37248  Site editor 窶� try redirecting to homepage before the react render
    PR37165  Remove versioning in theme schema descriptions
    PR37067  Update: PanelColorGradientSettings to use dropdowns
    PR37034  Block Editor: Handle the absence of href attrib in links
    PR36917  Update theme.json version
    PR36746  Update theme.json schema to allow for per-block management of settings
    PR36540  Post Featured Image: Move width and height controls into the Dimensions panel via SlotFill
    PR36411  Schemas: Allow custom blocks in theme.json styles
    PR36343  Add pattern to name key in block.json Schema
    PR36295  Schema: Allow block.json attribute type to be an array
    PR36236  Fix duotone theme cache
    PR36186  Spacer: add custom units for height and width
    PR30873  Focus save button when entities save states panel is opened

(morr)

2022-02-22 22:15:12 UTC MAIN commitmail json YAML

doc/TODO: add librsvg-2.52.6, bump lilypond-2.22.2

(gutteridge)

2022-02-22 22:08:32 UTC MAIN commitmail json YAML

doc: add previously missed entry: textproc/expat to 2.4.6

(gutteridge)

2022-02-22 17:57:02 UTC MAIN commitmail json YAML

doc: Updated devel/meson to 0.61.2nb1

(jperkin)

2022-02-22 17:56:53 UTC MAIN commitmail json YAML

meson: Avoid thin archives on SunOS.

Fixes lots of dependencies.  Bump PKGREVISION.

(jperkin)

2022-02-22 16:39:38 UTC MAIN commitmail json YAML

Updated devel/py-trio, textproc/py-rapidjson

(adam)

2022-02-22 16:39:11 UTC MAIN commitmail json YAML

py-rapidjson: updated to 1.6

1.6 (2022-02-19)
* Fix memory leak when using ``end_array``

(adam)

2022-02-22 13:56:14 UTC MAIN commitmail json YAML

py-trio: updated to 0.20.0

Trio 0.20.0 (2022-02-21)
------------------------

Features
- You can now conveniently spawn a child process in a background task
  and interact it with on the fly using ``process = await
  nursery.start(run_process, ...)``. See `run_process` for more details.
  We recommend most users switch to this new API. Also note that:

  - ``trio.open_process`` has been deprecated in favor of
    `trio.lowlevel.open_process`,
  - The ``aclose`` method on `Process` has been deprecated along with
    ``async with process_obj``.
- Now context variables set with `contextvars` are preserved when running functions
  in a worker thread with `trio.to_thread.run_sync`, or when running
  functions from the worker thread in the parent Trio thread with
  `trio.from_thread.run`, and `trio.from_thread.run_sync`.
  This is done by automatically copying the `contextvars` context.
  `trio.lowlevel.spawn_system_task` now also receives an optional ``context`` argument.

Bugfixes
- Trio now avoids creating cyclic garbage when a `MultiError` is generated and filtered,
  including invisibly within the cancellation system.  This means errors raised
  through nurseries and cancel scopes should result in less GC latency.
- Trio now deterministically cleans up file descriptors that were opened before
  subprocess creation fails. Previously, they would remain open until the next run of
  the garbage collector.
- Add compatibility with OpenSSL 3.0 on newer Python and PyPy versions by working
  around ``SSLEOFError`` not being raised properly.
- Fix a bug that could cause `Process.wait` to hang on Linux systems using pidfds, if
  another task were to access `Process.returncode` after the process exited but before
  ``wait`` woke up

(adam)

2022-02-22 10:12:29 UTC MAIN commitmail json YAML

doc: Added graphics/picat version 0.1.0

(pin)

2022-02-22 10:12:04 UTC MAIN commitmail json YAML

2022-02-22 10:11:01 UTC MAIN commitmail json YAML

graphics/picat: import package

picat - picture cat
Picat converts images to sixel graphics, and outputs them to stdout. The tool
achieves high quality output by making use of the
libimagequant, https://pngquant.org/lib/ library for converting RGBA images
to the sixel palette.

(pin)

2022-02-22 09:52:16 UTC MAIN commitmail json YAML

doc/TODO: + gjs-1.70.1.

(wiz)

2022-02-22 09:08:48 UTC MAIN commitmail json YAML

py-mccabe: update comment on test failure

(wiz)

2022-02-22 08:39:47 UTC MAIN commitmail json YAML

Updated devel/py-bitarray, devel/py-construct

(adam)

2022-02-22 08:39:25 UTC MAIN commitmail json YAML

py-construct: updated to 2.10.68

2.10.68
Unknown changes

(adam)

2022-02-22 08:36:15 UTC MAIN commitmail json YAML

py-bitarray: updated to 2.3.7

2.3.7:
* add optional step argument to `.count()` method
* add tests

(adam)

2022-02-22 08:35:22 UTC MAIN commitmail json YAML

doc: Updated multimedia/minidlna to 1.3.0 [mrg 2022-02-22]

(wiz)

2022-02-22 08:34:38 UTC MAIN commitmail json YAML

doc/TODO: + openblas-0.3.20.

(wiz)

2022-02-22 08:20:28 UTC MAIN commitmail json YAML

doc: Added wm/glazier version 1.1

(pin)

2022-02-22 08:20:03 UTC MAIN commitmail json YAML

Add glazier

(pin)

2022-02-22 08:19:16 UTC MAIN commitmail json YAML

wm/glazier: import package

X windows manipulator.

Windows are manipulated using the mouse, and can be moved/resized in
multiple ways. This utility is better used in combination with others like
[wmutils][0] and [sxhkd][1] which leverage the keyboard interface,
rather than mouse usage.

Features
- Floating window management
- Sloppy Focus
- All manipulations done with the mouse
- Cool operations like teleport, inflate/deflate
- 100% compatible with wmutils(1)
- Optional EWMH support through ewmh(1)
- Multi-monitor support through Xrandr(3)

(pin)

2022-02-22 06:20:55 UTC MAIN commitmail json YAML

update to latest actual release - 1.3.0, but it's not very different from
the snapshot we were using.  no real visible change.

(mrg)

2022-02-21 19:11:07 UTC MAIN commitmail json YAML

Updated net/py-stone, net/py-dropbox

(adam)

2022-02-21 19:10:46 UTC MAIN commitmail json YAML

py-dropbox: updated to 11.27.0

v11.27.0
Automated Spec Update
[Setup] Update deprecated description-file to use description_file

v11.26.0
Add scopes to documentation
Ensure Dropbox error is thrown in refresh access token

(adam)

2022-02-21 19:08:36 UTC MAIN commitmail json YAML

py-stone: updated to 3.3.1

v3.3.1

Small fix to --attribute-comment in backend python client.

v3.3.0

Python

Add attrs export to python client

ApiRoute

ApiRoute: Provide a hash implementation, too.
Add sorting of ApiRoute, guaranteeing stable file output.

Objective C

Fix obj_c types to not overwrite jsonDict with nil
Synchronize access to route singletons
Added Bytes as a primitive that doesn't require serialization
Fix objc generation for Bytes property and for hash methods with switch statements

JavaScript/TypeScript

Fix wrap_error_in generation for TS client
Fix imports for TS autogenerated imports
Add ability to wrap errors in a custom error class for JS/TS
Add ability to dynamically import namespaces from types in the tsd client
Make extra parameters optional for JS/TS backends

(adam)

2022-02-21 17:15:54 UTC MAIN commitmail json YAML

Updated net/haproxy, comms/py-rich

(adam)

2022-02-21 17:15:37 UTC MAIN commitmail json YAML

py-rich: updated to 11.2.0

11.2.0

Added

Add support for US spelling of "gray" in ANSI color names https://github.com/Textualize/rich/issues/1890
Added rich.diagnose.report to expose environment debugging logic as function https://github.com/Textualize/rich/pull/1917
Added classmethod Progress.get_default_columns() to get the default list of progress bar columns https://github.com/Textualize/rich/pull/1894

Fixed

Fixed performance issue in measuring text
Fixed test failures on PyPy3 https://github.com/Textualize/rich/pull/1904

(adam)

2022-02-21 17:13:40 UTC MAIN commitmail json YAML

haproxy: updated to 2.5.3

2.5.3
- MINOR: sock: move the unused socket cleaning code into its own function
- BUG/MEDIUM: mworker: close unused transferred FDs on load failure
- BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
- BUG/MINOR: sink: Use the right field in appctx context in release callback
- BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
- BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
- BUG/MAJOR: compiler: relax alignment constraints on certain structures
- MINOR: httpclient: Don't limit data transfer to 1024 bytes
- BUG/MINOR: httpclient: reinit flags in httpclient_start()
- BUG/MINOR: mailers: negotiate SMTP, not ESMTP
- BUG/MINOR: ssl: Add missing return value check in ssl_ocsp_response_print
- BUG/MINOR: ssl: Fix leak in "show ssl ocsp-response" CLI command
- BUG/MINOR: ssl: Missing return value check in ssl_ocsp_response_print
- CLEANUP: httpclient/cli: fix indentation alignment of the help message
- BUG/MINOR: tools: url2sa reads ipv4 too far
- BUG/MEDIUM: httpclient: limit transfers to the maximum available room
- DEBUG: buffer: check in __b_put_blk() whether the buffer room is respected

2.5.2
- BUG/MEDIUM: connection: properly leave stopping list on error
- BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
- BUG/MINOR: httpclient: don't send an empty body
- BUG/MINOR: httpclient: set default Accept and User-Agent headers
- BUG/MINOR: httpclient/lua: don't pop the lua stack when getting headers
- BUILD/MINOR: fix solaris build with clang.
- BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
- DOC: management: mark "set server ssl" as deprecated
- MEDIUM: cli: yield between each pipelined command
- MINOR: channel: add new function co_getdelim() to support multiple delimiters
- BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
- MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
- BUG/MEDIUM: cli: Never wait for more data on client shutdown
- BUG/MEDIUM: mcli: do not try to parse empty buffers
- BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
- BUG/MINOR: stream: make the call_rate only count the no-progress calls
- DEBUG: cli: add a new "debug dev fd" expert command
- BUILD: debug/cli: condition test of O_ASYNC to its existence
- DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
- REGTESTS: ssl: Fix ssl_errors regtest with OpenSSL 1.0.2
- BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
- BUG/MINOR: mworker: does not add the -sf in wait mode
- BUG/MINOR: pools: always flush pools about to be destroyed
- DEBUG: pools: add extra sanity checks when picking objects from a local cache
- DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
- DEBUG: pools: replace the link pointer with the caller's address on pool_free()
- BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
- BUG/MINOR: mworker: does not erase the pidfile upon reload
- DEBUG: fd: make sure we never try to insert/delete an impossible FD number
- MINOR: listener: replace the listener's spinlock with an rwlock
- BUG/MEDIUM: listener: read-lock the listener during accept()
- BUG/MINOR: httpclient: Revisit HC request and response buffers allocation
- BUG/MEDIUM: httpclient: Xfer the request when the stream is created
- BUG/MINOR: ssl: Remove empty lines from "show ssl ocsp-response <id>" output
- BUG/MINOR: jwt: Double free in deinit function
- BUG/MINOR: jwt: Missing pkey free during cleanup
- BUG/MINOR: jwt: Memory leak if same key is used in multiple jwt_verify calls
- BUG/MINOR: httpclient/cli: display junk characters in vsn
- BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
- BUG/MAJOR: spoe: properly detach all agents when releasing the applet
- REGTESTS: server: close an occasional race on dynamic_server_ssl.vtc
- REGTESTS: peers: leave a bit more time to peers to synchronize
- BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
- BUG/MINOR: mux-h2: update the session's idle delay before creating the stream

(adam)

2022-02-21 16:51:30 UTC MAIN commitmail json YAML

Updated textproc/ugrep, finance/py-braintree

(adam)

2022-02-21 16:45:43 UTC MAIN commitmail json YAML

py-braintree: updated to 4.14.0

4.14.0

Add PaymentMethodCustomerDataUpdated webhook

(adam)

2022-02-21 16:42:46 UTC MAIN commitmail json YAML

ugrep: updated to 3.7.3

ugrep v3.7.3

New --hexdump options to grep binary files and display binary matches in hexadecimal with n hex lines before and after the match with --hexdump=Cn, --hexdump=An for n lines after and --hexdump=Bn for n lines before. Omitting n defaults to the entire matching line. Option -X is equivalent to --hexdump=2C for 2 hex columns per line and entire matching line as context. Includes user experience improvements, such as additional --help information and --stats details. We also made ugrep faster overall with performance improvements. More coming soon!

(adam)

2022-02-21 13:49:12 UTC pkgsrc-2021Q4 commitmail json YAML

Pullup tickets #6582 and #6583

(bsiegert)

2022-02-21 13:48:50 UTC pkgsrc-2021Q4 commitmail json YAML

Pullup ticket #6583 - requested by nia
www/firefox91-l10n: dependent update

Revisions pulled up:
- www/firefox91-l10n/Makefile                                  1.8
- www/firefox91-l10n/distinfo                                  1.10

---
  Module Name: pkgsrc
  Committed By: nia
  Date: Mon Feb 21 03:51:53 UTC 2022

  Modified Files:
  pkgsrc/www/firefox91-l10n: Makefile distinfo

  Log Message:
  firefox91-l10n: sync with firefox91

(bsiegert)

2022-02-21 13:46:07 UTC MAIN commitmail json YAML

doc: Added textproc/ydiff version 1.2

(fcambus)

2022-02-21 13:45:49 UTC MAIN commitmail json YAML

2022-02-21 13:44:31 UTC MAIN commitmail json YAML

textproc/ydiff: import ydiff-1.2.

Term based tool to view colored, incremental diff in a version controlled
workspace (supports Git, Mercurial, Perforce and SVN so far) or from stdin,
with side by side (similar to diff -y) and auto pager support.

(fcambus)

2022-02-21 13:34:26 UTC pkgsrc-2021Q4 commitmail json YAML

Pullup ticket #6582 - requested by nia
www/firefox91: security fix

Revisions pulled up:
- www/firefox91/Makefile                                        1.13
- www/firefox91/distinfo                                        1.10

---
  Module Name: pkgsrc
  Committed By: nia
  Date: Mon Feb 21 03:43:56 UTC 2022

  Modified Files:
  pkgsrc/www/firefox91: Makefile distinfo

  Log Message:
  firefox91: update to 91.6.0

  Security Vulnerabilities fixed in Firefox ESR 91.6

      #CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance
      Service

      #CVE-2022-22754: Extensions could have bypassed permission confirmation
      during update

      #CVE-2022-22756: Drag and dropping an image could have resulted in the
      dropped object being an executable

      #CVE-2022-22759: Sandboxed iframes could have executed script if the parent
      appended elements

      #CVE-2022-22760: Cross-Origin responses could be distinguished between
      script and non-script content-types

      #CVE-2022-22761: frame-ancestors Content Security Policy directive was not
      enforced for framed extension pages

      #CVE-2022-22763: Script Execution during invalid object state

      #CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6

(bsiegert)

2022-02-21 11:47:53 UTC MAIN commitmail json YAML

doc: Updated devel/mold to 1.1

(fcambus)

2022-02-21 11:47:41 UTC MAIN commitmail json YAML

mold: update to 1.1.

mold 1.1 is a new release of the high-performance linker. It contains
a few new major features and various bug fixes.

New features:

- Native LTO (link-time optimization) support has been added.
  mold used to invoke ld.bfd or ld.lld if it encountered a GCC
  IR (intermediate representation) file or an LLVM IR file to
  delegate the task to the LTO-capable linkers, respectively.
  Now, mold handles IR files directly. This feature is implemented
  using the linker plugin API which is also used by GNU ld and
  GNU gold. Note that the LTO support has been added for completeness
  and not for speed. mold is only marginally faster than the
  other linkers for LTO builds because not linking but code
  optimization dominates. (46995bc)
- RISC-V (RV64) is now supported as both host and target platforms.
  mold can link real-world large programs such as mold itself or
  LLVM Clang for RISC-V. (e76f7c0)
- The -emit-relocs option is supported. If the option is given,
  mold copies relocation sections from input files to an output
  file. This feature is used by some post-link binary optimization
  or analysis tools such as Facebook's Bolt. (26fe71d)
- mold gained the --shuffle-sections option. If the option is
  given, the linker randomly shuffle the order of input sections
  before fixing their addresses in the virtual address space.
  This feature is useful in some situations. First, it can be
  used as a strong form of ASLR (address space layout randomization).
  Second, you can enable it when you are benchmarking some other
  program to get more reliable benchmark numbers, because even
  the same machine code can vary in performance if they are laid
  out differently in the virtual address space. You want to make
  sure that you got good/bad benchmark numbers not by coincidence
  by shuffling input sections. (7e91897)
- The --print-dependencies and --print-dependencies=full options
  were added. They print out dependencies between input files in
  the CSV format. That is, they print out the information as to
  which file depends on which file to use which symbol. We added
  this feature with a few use cases in mind. First, you can use
  this to analyze why some object file was pulled out from an
  archive and got linked to an output file. Second, when you want
  to eliminate all dependencies to some library, you can find
  all of them very easy with this feature. Note that this is an
  experimental feature and may change or removed in feature
  releases of mold. (a1287c2)
- The following options are added: --warn-once (f24b997),
  --warn-textrel (6ffcae4)
- Runtime dependency to libxxhash has been eliminated. (e5f4b96)

Bug fixes and compatibility improvements:

- A PT_GNU_RELRO segment is now aligned up to the next page
  boundary. Previously, mold didn't align it up, and the runtime
  loader align it down, so the last partial page would not be
  protected by the RELRO mechanism. Now, the entire RELRO segment
  is guaranteed to be read-only at runtime. (0a0f9b3)
- The .got.plt section is now protected by RELRO if -z now is
  given. This is possible because writes to .got.plt happen only
  during process startup if all symbols are resolved on process
  startup. (73159e2)
- Previously, mold reported an error if object files created with
  old GCC (with -fgnu-unique) are mixed with ones created with
  newer GCC or Clang (with -fno-gnu-unique) (#324). Now, mold
  accepts such input files. (e65c5d2)
- mold can now be built with musl libc. (42b7eb8)
- mold-generated .symtab section now contains section symbols
  and symbols derived from input shared object files. (e4c03c2,
  1550b5a)
- mold-generated executables can now run under valgrind. Previously,
  valgrind aborted on startup due to an assertion failure because
  it didn't expect for an executable to have both .bss and .dynbss
  sections. mold generated .dynbss to contain copy-relocated
  symbols. The section has been renamed .copyrel to workaround
  the valgrind's issue. (0f8bf23)

(fcambus)

2022-02-21 11:02:19 UTC MAIN commitmail json YAML

doc: Updated devel/py-approvaltests to 3.7.0

(schmonz)

2022-02-21 11:02:13 UTC MAIN commitmail json YAML

Update to 3.7.0. From the changelog:

Options.withComparator: You can now inject a custom comparator to check
if two files are equivalent.

Minor bug fix: delete_approve file will not explode if the file does
not exist.

Minor bug fix: options are passed down the stack where they were not
previously being used.

(schmonz)

2022-02-21 10:27:46 UTC MAIN commitmail json YAML

2022-02-21 09:43:58 UTC MAIN commitmail json YAML

doc: Updated textproc/jless to 0.7.2

(pin)

2022-02-21 09:43:40 UTC MAIN commitmail json YAML

textproc/jless: update to 0.7.2

New features / changes:
-Space now toggles the collapsed state of the currently focused node, rather
than moving down a line. (Functionality was previous available via i, but
was undocumented; i has been unmapped.)

Bug fixes:
-Searching now works even when input is provided via STDIN.

Internal:
-Upgraded from structopt to clap v3

(pin)

2022-02-21 09:42:45 UTC MAIN commitmail json YAML

doc: Updated security/gpg-tui to 0.8.3

(pin)

2022-02-21 09:42:26 UTC MAIN commitmail json YAML

security/gpg-tui: update to 0.8.3

Added:
-Support custom file name for the exported keys (#4)

Changed:
-Switch to clap for argument parsing
-Update license copyright years
-Update lychee arguments
-Apply clippy::needless_borrow suggestion
-Add tests for custom file name
-Bump the Rust version in Dockerfile
-Bump dependencies

(pin)

2022-02-21 09:41:16 UTC MAIN commitmail json YAML

doc: Updated devel/git-cliff to 0.6.0

(pin)

2022-02-21 09:40:57 UTC MAIN commitmail json YAML

devel/git-cliff: update to 0.6.0

Bug Fixes
- Only drop previous releases if skipped (#44)
- Run clippy from nightly toolchain
- Update tests about optional config values
- Set the previous release when using `--unreleased` (#47)
- Lower the priority of global configuration file (#51)
- Update the download link of latest grcov release
- Use the correct tar command for extracting grcov archive
- Update grcov download command
- Update custom error tests

Documentation
- Update template contexts about link_parsers
- Add minimal example
- Update copyright years

Features
- Add `link_parsers` for parsing/extracting links (#42)
- Make the `git` section optional (#45)
- Make the `changelog` section optional (#45)
- [**breaking**] Use conventional commit body to check against commit parsers
- [**breaking**] Replace --topo-order by --date-order (#58)

Miscellaneous Tasks
- Update arg parsing to clap v3 (#49)
- Upgrade dependencies
- Bump the Rust version in Dockerfile
- Run cargo-audit for checking vulnerabilities
- Update the runner to macos-11

Refactor
- Apply clippy suggestions
- [**breaking**] Change the default value of `trim` to `true`
- Unify serde and serde_derive using derive feature (#57)

Styling
- Update the styling
- Comply with MD022 and fix minor typos (#61)

(pin)

2022-02-21 08:50:59 UTC MAIN commitmail json YAML

Updated devel/py-test-asyncio, misc/py-platformdirs

(adam)

2022-02-21 08:33:42 UTC MAIN commitmail json YAML

py-platformdirs: updated to 2.5.1

platformdirs 2.5.1
Add native support for nuitka

platformdirs 2.5.0
Add support for Termux subsystems

(adam)

2022-02-21 08:31:37 UTC MAIN commitmail json YAML

py-test-asyncio: updated to 0.18.1

0.18.1

Fixes a regression that prevented async fixtures from working in
synchronous tests.

(adam)

2022-02-21 08:27:54 UTC MAIN commitmail json YAML

Updated www/py-websockets, devel/py-filelock

(adam)

2022-02-21 08:27:37 UTC MAIN commitmail json YAML

py-filelock: updated to 3.6.0

v3.6.0 (2022-02-17)
Fix pylint warning ���Abstract class WindowsFileLock with abstract methods instantiated���
Fix pylint warning ���Abstract class UnixFileLock with abstract methods instantiated���

(adam)

2022-02-21 08:23:53 UTC MAIN commitmail json YAML

py-websockets: updated to 10.2

10.2

Improvements
Made compression negotiation more lax for compatibility with Firefox.
Improved FAQ and quick start guide.

Bug fixes
Fixed backwards-incompatibility in 10.1 for connection handlers created with functools.partial().
Avoided leaking open sockets when connect() is canceled.

(adam)

2022-02-21 08:21:07 UTC MAIN commitmail json YAML

Updated audio/flac, devel/py-setuptools

(adam)

2022-02-21 08:20:53 UTC MAIN commitmail json YAML

py-setuptools: updated to 60.9.3

v60.9.3

Misc

* Repaired automated release process.

v60.9.2

Misc

* When loading distutils from the vendored copy, rewrite __name__ to ensure consistent importing from inside and out.

v60.9.1

Misc

* Prevent vendored importlib_metadata from loading distributions from older importlib_metadata.
* Fixed issue where string-based entry points would be omitted.
* Bump importlib_metadata to 4.11.1 addressing issue with parsing requirements in egg-info as found in PyPy.

v60.9.0

Changes

* In the build backend, allow single config settings to be supplied.
* Removed workaround in distutils hack for get-pip now that pypa/get-pip#137 is closed.
* Setuptools no longer relies on pkg_resources for entry point handling.
* Bump vendored packaging to 21.3.
* Removed bootstrap script.

(adam)

2022-02-21 08:19:41 UTC MAIN commitmail json YAML

flac: updated to 1.3.4

FLAC 1.3.4

This release mostly fixes (security related) bugs. When building with MSVC, using CMake is preferred, see the README under "Building with CMake" for more information. Building with MSVC using solution files is deprecated and these files will be removed in the future.

General:
* Fix 12 decoder bugs found by oss-fuzz, including CVE-2020-0499 (erikd, Martijn van Beurden)
  - Fix encoder bug CVE-2021-0561 (NeelkamalSemwal)
  - Integrate oss-fuzzers (erikd, Guido Vranken)
  - Seeking fixes (NeelkamalSemwal, Robert Kausch)
  - Various fixes and improvements (Andrei Astafev, Rosen Penev, H奪kan Kvist, oreo639, erikd, Tam叩s Zahola, Ulrik Mikaelsson, Tyler Dunn, tmkk)
* FLAC format:
  - (none)
* Ogg FLAC format:
  - (none)
* flac:
  - Various fixes and improvements (Andrei Astafev, Martijn van Beurden)
* metaflac:
  - (none)
* build system:
  - CMake improvements (evpobr, Vitaliy Kirsanov, erikd, Ozkan Sezer, Tyler Dunn, tg-m DeadSix27, ericLemanissier, Chocobo1).
  - Fixes for MinGW and MSVC (Ozkan Sezer).
  - Fix for clang (Ozkan Sezer)
  - Fix for PowerPC (Peter Seiderer, Thomas BERNARD)
  - Fix for FreeBSD PowerPC (pkubaj).
* testing/validation:
  - Add Windows target to CI, improve logging (Ralph Giles)
  - CI improvements (Ralph Giles, Ewout ter Hoeven)
* documentation:
  - Doxygen fixes (Tyler Dunn)
  - Fix typos (Tim Gates, maxz)
*  Interface changes:
  - libFLAC:
    (none)
  - libFLAC++:
    (none)

(adam)

2022-02-21 07:59:49 UTC MAIN commitmail json YAML

expat: update to 2.4.6

Release 2.4.6 Sun February 20 2022
        Bug fixes:
            #566  Fix a regression introduced by the fix for CVE-2022-25313
                    in release 2.4.5 that affects applications that (1)
                    call function XML_SetElementDeclHandler and (2) are
                    parsing XML that contains nested element declarations
                    (e.g. "<!ELEMENT junk ((bar|foo|xyz+), zebra*)>").

        Other changes:
      #567 #568  Version info bumped from 9:5:8 to 9:6:8;
                    see https://verbump.de/ for what these numbers do

(jdolecek)

2022-02-21 03:52:36 UTC MAIN commitmail json YAML

doc: Updated www/firefox91-l10n to 91.6.0

(nia)

2022-02-21 03:51:53 UTC MAIN commitmail json YAML

2022-02-21 03:44:09 UTC MAIN commitmail json YAML

doc: Updated www/firefox91 to 91.6.0

(nia)

2022-02-21 03:43:56 UTC MAIN commitmail json YAML

firefox91: update to 91.6.0

Security Vulnerabilities fixed in Firefox ESR 91.6

    #CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance
    Service

    #CVE-2022-22754: Extensions could have bypassed permission confirmation
    during update

    #CVE-2022-22756: Drag and dropping an image could have resulted in the
    dropped object being an executable

    #CVE-2022-22759: Sandboxed iframes could have executed script if the parent
    appended elements

    #CVE-2022-22760: Cross-Origin responses could be distinguished between
    script and non-script content-types

    #CVE-2022-22761: frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages

    #CVE-2022-22763: Script Execution during invalid object state

    #CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6

(nia)

2022-02-20 22:06:53 UTC MAIN commitmail json YAML

doc: Updated devel/py-mercurial to 6.0.3

(wiz)

2022-02-20 22:06:44 UTC MAIN commitmail json YAML

2022-02-20 21:29:57 UTC MAIN commitmail json YAML

doc: Updated graphics/ImageMagick to 7.1.0.25

(wiz)

2022-02-20 21:29:45 UTC MAIN commitmail json YAML

ImageMagick: update to 7.1.0.25.

2022-02-15  7.1.0-25  <quetzlzacatenango@image...>
  * Release ImageMagick version 7.1.0-25 GIT revision 19704:7f7c90526:20220215

2021-02-13  7.1.0-25  <quetzlzacatenango@image...>
  * incontinuity in straight segment of polyline (reference
    https://github.com/ImageMagick/ImageMagick/issues/4837).

(wiz)

2022-02-20 21:27:44 UTC MAIN commitmail json YAML

doc: Updated security/py-pip-audit to 2.0.0

(wiz)

2022-02-20 21:27:35 UTC MAIN commitmail json YAML

py-pip-audit: update to 2.0.0.

### Added

* CLI: The `--fix` flag has been added, allowing users to attempt to
  automatically upgrade any vulnerable dependencies to the first safe version
  available ([#212](https://github.com/trailofbits/pip-audit/pull/212),
  [#222](https://github.com/trailofbits/pip-audit/pull/222))

* CLI: The combination of `--fix` and `--dry-run` is now supported, causing
  `pip-audit` to perform the auditing step but not any resulting fix steps
  ([#223](https://github.com/trailofbits/pip-audit/pull/223))

* CLI: The `--require-hashes` flag has been added which can be used in
  conjunction with `-r` to check that all requirements in the file have an
  associated hash ([#229](https://github.com/trailofbits/pip-audit/pull/229))

* CLI: The `--index-url` flag has been added, allowing users to use custom
  package indices when running with the `-r` flag
  ([#238](https://github.com/trailofbits/pip-audit/pull/238))

* CLI: The `--extra-index-url` flag has been added, allowing users to use
  multiple package indices when running with the `-r` flag
  ([#238](https://github.com/trailofbits/pip-audit/pull/238))

### Changed

* `pip-audit`'s minimum Python version is now 3.7.

* CLI: The default output format is now correctly pluralized
  ([#221](https://github.com/trailofbits/pip-audit/pull/221))

* Output formats: The SBOM output formats (`--format=cyclonedx-xml` and
  `--format=cyclonedx-json`) now use CycloneDX
  [Schema 1.4](https://cyclonedx.org/docs/1.4/xml/)
  ([#216](https://github.com/trailofbits/pip-audit/pull/216))

* Vulnerability sources: When using PyPI as a vulnerability service, any hashes
  provided in a requirements file are checked against those reported by PyPI
  ([#229](https://github.com/trailofbits/pip-audit/pull/229))

* Vulnerability sources: `pip-audit` now uniques each result based on its
  alias set, reducing the amount of duplicate information in the default
  columnar output format
  ([#232](https://github.com/trailofbits/pip-audit/pull/232))

* CLI: `pip-audit` now prints its output more frequently, including when
  there are no discovered vulnerabilities but packages were skipped.
  Similarly, "manifest" output formats (JSON, CycloneDX) are now emitted
  unconditionally
  ([#240](https://github.com/trailofbits/pip-audit/pull/240))

### Fixed

* CLI: A regression causing excess output during `pip audit -r`
  was fixed ([#226](https://github.com/trailofbits/pip-audit/pull/226))

(wiz)

2022-02-20 21:23:52 UTC MAIN commitmail json YAML

doc: Updated security/py-cyclonedx-python-lib to 1.3.0

(wiz)

2022-02-20 21:23:44 UTC MAIN commitmail json YAML

py-cyclonedx-python-lib: update to 1.3.0.

1.3.0 (2022-01-24)
Feature

    bom-ref for Component and Vulnerability default to a UUID (#142) (3953bb6)

1.2.0 (2022-01-24)
Feature

    Add CPE to component (#138) (269ee15)

1.1.1 (2022-01-19)
Fix

    Bump dependencies (#136) (18ec498)

1.1.0 (2022-01-13)
Feature

    Add support for bom.metadata.component (#118) (1ac31f4)

1.0.0 (2022-01-13)

Support for CycloneDX schema version 1.4 (#108)
Breaking Changes

Support for CycloneDX 1.4. This includes:

    Support for tools having externalReferences
    Allowing version for a Component to be optional in 1.4
    Support for releaseNotes per Component
    Support for the core schema implementation of Vulnerabilities (VEX)

Features

    $schema is now included in JSON BOMs
    Concrete Parsers how now been moved into downstream projects to keep this libraries focus on modelling and outputting CycloneDX - see https://github.com/CycloneDX/cyclonedx-python

Fixes

    Unit tests now include schema validation (we've left schema validation out of the core library due to dependency bloat)
    Ensure schema is adhered to in 1.0
    URIs are now used throughout the library through a new XsUri class to provide URI validation

Other

    Documentation is now hosted on readthedocs.org (https://cyclonedx-python-library.readthedocs.io/)
    Added reference to release of this library on Anaconda

0.12.3 (2021-12-15)
Fix

    Removed requirements-parser as dependency (temp) as not available for Python 3 as Wheel (#98) (3677d9f)

0.12.2 (2021-12-09)
Fix

    Tightened dependency packageurl-python (#95) (eb4ae5c)

0.12.1 (2021-12-09)
Fix

    Further loosened dependency definitions (8bef6ec)

0.12.0 (2021-12-09)
Feature

    Loosed dependency versions to make this library more consumable (55f10fb)

(wiz)

2022-02-20 21:12:42 UTC MAIN commitmail json YAML

doc: Updated textproc/pugixml to 1.12.1

(wiz)

2022-02-20 21:12:33 UTC MAIN commitmail json YAML

pugixml: update to 1.12.1.

Changes not found.

(wiz)

2022-02-20 21:11:13 UTC MAIN commitmail json YAML

doc: Updated converters/help2man to 1.49.1

(wiz)

2022-02-20 21:11:03 UTC MAIN commitmail json YAML

help2man: update to 1.49.1.

Version 1.49 February 14, 2022

  * Use @samp{} around the option in the menu description for "--help
    recommendations" to avoid rendering the -- as endash.
  * Don't translate @documentencoding.
  * Fall back to forking iconv for encodings which are not supported by
    Perl's Encode module.

(wiz)

2022-02-20 20:43:31 UTC MAIN commitmail json YAML

net/cacti-spine: MySQL 8.0.0 no longer supports my_bool type

(gavan)

2022-02-20 17:27:18 UTC MAIN commitmail json YAML

xscreensaver: update pam comments

(wiz)

2022-02-20 16:00:04 UTC MAIN commitmail json YAML

doc: Note update of ruby31{,-base} packages to 3.1.1

lang/ruby31-base
lang/ruby31

(taca)

2022-02-20 15:59:09 UTC MAIN commitmail json YAML

lang/ruby31-base: update to 3.1.1

>From release announce:

Ruby 3.1.1 Released
Posted by naruse on 18 Feb 2022

Ruby 3.1.1 has been released.

This is the first TEENY version release of the stable 3.1 series.

See the commit logs <https://github.com/ruby/ruby/compare/v3_1_0...v3_1_1> for details.

(taca)

2022-02-20 13:35:58 UTC MAIN commitmail json YAML

doc: Updated databases/php-redis to 5.3.7

(taca)

2022-02-20 13:35:28 UTC MAIN commitmail json YAML

databases/php-redis: update to

5.3.6 (2022-01-17)

* Fix a segfault in RedisArray::del [d2f2a7d9] (Pavlo Yatsukhnenko)

5.3.7 (2022-02-15)

* Fix RedisArray::[hsz]scan and tests [08a9d5db, 0264de18] (Pavlo
  Yatsukhnenko, Michael Grunder)
* Fix RedisArray::scan [8689ab1c] (Pavlo Yatsukhnenko)
* Fix LZF decompression logic [0719c1ec] (Michael Grunder)

(taca)

2022-02-20 13:32:13 UTC MAIN commitmail json YAML

doc: Updated devel/php-igbinary to 3.2.7

(taca)

2022-02-20 13:31:43 UTC MAIN commitmail json YAML

devel/php-igbinary: update to

3.2.7 (2022-01-12)

* Update test expectations for php 8.2.0-dev.  Add
  `#[AllowDynamicProperties]` Attribute to some tests to avoid notices.

* In php 8.1+, make igbinary_unserialize check to see if an equivalent
  interned string already exists when unserializing object property names,
  array keys, and class names and use that instead of creating a brand new
  string.
  (This deliberately doesn't create a new interned string if one doesn't
  already exist.)
  (Before this change, igbinary would deduplicate strings when serializing,
  but would not check if strings were interned by PHP itself when
  unserializing)
* Avoid debug build assertion failure for `HT_ASSERT_RC1` the same way as
  PHP's unserialize - this is a case where ostensibly there are no other
  references to the array being unserialized.

(taca)

2022-02-20 13:29:20 UTC MAIN commitmail json YAML

doc: Updated devel/php-xdebug to 3.1.3

(taca)

2022-02-20 13:28:56 UTC MAIN commitmail json YAML

devel/php-xdebug: update to 3.1.3

3.1.3 (2022-02-01)

Fixed bugs:

* Fixed issue #2049: evaling broken code (still) causes unhandled exception
in PHP 7.4
* Fixed issue #2052: Memory leak when a trace file can't be opened because
  xdebug.trace_output_name is invalid
* Fixed issue #2054: Slowdown when calling a function with long string
  parameters
* Fixed issue #2055: Debugger creates XML with double facet attribute

(taca)

2022-02-20 13:23:40 UTC MAIN commitmail json YAML

doc: Updated graphics/php-imagick to 3.7.0

(taca)

2022-02-20 13:23:16 UTC MAIN commitmail json YAML

graphics/php-imagick: update to 3.7.0

3.7.0RC1 (2022-01-04)

Added:
* function Imagick::deleteOption(string $option): bool {}
* function Imagick::getBackgroundColor(): ImagickPixel {}
* function Imagick::getImageArtifacts(string $pattern = "*"): array {}
* function Imagick::getImageKurtosis(): array {}
* function Imagick::getImageMean(): array {}
* function Imagick::getImageRange(): array {}
* function Imagick::getInterpolateMethod(): int {}
* function Imagick::getOptions(string $pattern = "*"): array {}
* function Imagick::getOrientation(): int {}
* function Imagick::getResolution(): array {}
* function Imagick::getType(): int {}
* function Imagick::implodeImageWithMethod(float $radius, int
  $pixel_interpolate_method): bool {}
* function Imagick::oilPaintImageWithSigma(float $radius, float $sigma)
* function Imagick::polaroidWithTextAndMethod(ImagickDraw $settings, float
  $angle, string $caption, int $method): bool {}
* function Imagick::polynomialImage(array $terms): bool {}
* function Imagick::setDepth(int $depth): bool {}
* function Imagick::setExtract(string $geometry): bool {}
* function Imagick::setInterpolateMethod(int $method): bool{}
* function Imagick::setOrientation(int $orientation): bool {}
* function Imagick::spreadImageWithMethod(float $radius, int
  $interpolate_method): bool {}
* function Imagick::swirlImageWithMethod(float $degrees, int
  $interpolate_method): bool {}
* function Imagick::waveImageWithMethod(float $amplitude, float $length, int
  $interpolate_method): bool {}
* Imagick::IMAGE_TYPE_BILEVEL
* Imagick::IMAGE_TYPE_GRAYSCALE
* Imagick::IMAGE_TYPE_GRAYSCALE_ALPHA
* Imagick::IMAGE_TYPE_PALETTE
* Imagick::IMAGE_TYPE_PALETTE_ALPHA
* Imagick::IMAGE_TYPE_TRUE_COLOR
* Imagick::IMAGE_TYPE_TRUE_COLOR_ALPHA
* Imagick::IMAGE_TYPE_COLOR_SEPARATION
* Imagick::IMAGE_TYPE_COLOR_SEPARATION_ALPHA
* Imagick::IMAGE_TYPE_OPTIMIZE
* Imagick::IMAGE_TYPE_PALETTE_BILEVEL_ALPHA
* Imagick::COMPOSITE_SEAMLESS_BLEND

Changed:
* Imagick::setImageArtifact can now take null for the string value.
* Return type for Imagick::getImageArtifact is string|null instead of
  string.

3.7.0 (2022-01-11)

Added:
* Imagick::COMPOSITE_SALIENCY_BLEND

(taca)

2022-02-20 13:15:38 UTC MAIN commitmail json YAML

doc: Updated security/pear-Crypt_GPG to 1.6.7

(taca)

2022-02-20 13:15:15 UTC MAIN commitmail json YAML

security/pear-Crypt_GPG: update to 1.6.7

1.6.7 (2022-02-16)

* [CVE-2022-24953] Insert the end-of-options marker before operation
  arguments [thomas-chauchefoin-sonarsource].

* Ignore tests/debug.log and .gitattributes itself.

(taca)

2022-02-20 13:11:01 UTC MAIN commitmail json YAML

doc: Updated lang/php81 to 8.1.3

(taca)

2022-02-20 13:10:37 UTC MAIN commitmail json YAML

lang/php81: update to 8.1.3

17 Feb 2022, PHP 8.1.3

- Core:
  . Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    (beberlei)
  . Fixed bug GH-7896 (Environment vars may be mangled on Windows). (cmb)
  . Fixed bug GH-7883 (Segfault when INI file is not readable). (Remi)

- Filter:
  . Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708) (cmb)

- FFI:
  . Fixed bug GH-7867 (FFI::cast() from pointer to array is broken). (cmb,
    dmitry)

- FPM:
  . Fixed memory leak on invalid port. (David Carlier)
  . Fixed bug GH-7842 (Invalid OpenMetrics response format returned by FPM
    status page. (Stefano Arlandini)

- MBString:
  . Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only). (cmb)

- MySQLnd:
  . Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped). (Kamil Tekiela)

- pcntl:
  . Fixed pcntl_rfork build for DragonFlyBSD. (David Carlier)

- Sockets:
  . Fixed bug GH-7978 (sockets extension compilation errors). (David Carlier)

- Standard:
  . Fixed bug GH-7899 (Regression in unpack for negative int value). (Remi)
  . Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
    (cmb)

(taca)

2022-02-20 13:09:17 UTC MAIN commitmail json YAML

doc: Updated lang/php80 to 8.0.16

(taca)

2022-02-20 13:08:53 UTC MAIN commitmail json YAML

lang/php80: update to 8.0.16

17 Feb 2022, PHP 8.0.16

- Core:
  . Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    (beberlei)
  . Fixed bug GH-7896 (Environment vars may be mangled on Windows). (cmb)

- FFI:
  . Fixed bug GH-7867 (FFI::cast() from pointer to array is broken). (cmb,
    dmitry)

- Filter:
  . Fix #81708: UAF due to php_filter_float() failing for ints. (stas)

- FPM:
  . Fixed memory leak on invalid port. (David Carlier)

- MBString:
  . Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only). (cmb)

- MySQLnd:
  . Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped). (Kamil Tekiela)

- Sockets:
  . Fixed ext/sockets build on Haiku. (David Carlier)
  . Fixed bug GH-7978 (sockets extension compilation errors). (David Carlier)

- Standard:
  . Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
    (cmb)

(taca)

2022-02-20 13:04:49 UTC MAIN commitmail json YAML

doc/TODO: correct previous bind

+ bind-9.18.0.

(taca)

2022-02-20 13:04:17 UTC MAIN commitmail json YAML

doc: Updated lang/php74 to 7.4.28

(taca)

2022-02-20 13:03:01 UTC MAIN commitmail json YAML

lang/php74: update to 7.4.28

17 Feb 2022, PHP 7.4.28

- Filter:
  . Fix #81708: UAF due to php_filter_float() failing for ints

(taca)

2022-02-20 13:00:27 UTC MAIN commitmail json YAML

doc/TODO: add bind

+ bind-9.8.0.

(taca)

2022-02-20 12:58:20 UTC MAIN commitmail json YAML

doc: Updated net/bind916 to 9.16.26

(taca)

2022-02-20 12:57:56 UTC MAIN commitmail json YAML

net/bind916: update to 9.16.26

--- 9.16.26 released ---

5801. [bug] Log "quota reached" message when hard quota
is reached when accepting a connection. [GL #3125]

5800. [func] Add ECS support to the DLZ interface. [GL #3082]

5797. [bug] A failed view configuration during a named
reconfiguration procedure could cause inconsistencies
in BIND internal structures, causing a crash or other
unexpected errors. [GL #3060]

5795. [bug] rndc could crash when interrupted by a signal
before receiving a response. [GL #3080]

5793. [bug] Correctly detect and enable UDP recvmmsg support
in all versions of libuv that support it. [GL #3095]

(taca)

2022-02-20 12:49:01 UTC MAIN commitmail json YAML

doc: Updated textproc/yq to 2.13.0

(fcambus)

2022-02-20 12:48:48 UTC MAIN commitmail json YAML

yq: update to 2.13.0.

Changes for v2.13.0 (2021-12-02)
================================

-  Armor against entity expansion attacks

-  Improve YAML loading performance by using CSafeLoader where available

-  Require PyYAML 5.3.1 or newer

-  Test and release infrastructure improvements

Changes for v2.12.2 (2021-06-13)
================================

-  Handle -n correctly

Changes for v2.12.1 (2021-06-13)
================================

-  Do not close fds on child process

Changes for v2.12.0 (2021-02-05)
================================

-  Add TOML support and the tomlq CLI utility to access it

-  Drop Python 2.7 support

Changes for v2.11.1 (2020-09-26)
================================

Parse correctly when empty string is passed as jq_filter

Changes for v2.11.0 (2020-09-03)
================================

-  Better handling of jq_filter and files arguments (#102)

-  Create **main**.py (#82)

Changes for v2.10.1 (2020-05-11)
================================

-  Add support for xmltodict force_list definition for xq CLI (#95)

-  Support explicit doc markers (#93)

-  Ensure proper ordering of help messages (#90)

Changes for v2.10.0 (2019-12-23)
================================

-  Add support for in-place editing (yq -yi)

-  Add argcomplete integration

-  Docs: Migrate from RTD to gh-pages

(fcambus)

2022-02-20 11:58:26 UTC MAIN commitmail json YAML

2022-02-20 11:03:43 UTC MAIN commitmail json YAML

(ham/gnuradio-core) use '+=' instead of '=' for GCC_REQD

(mef)

2022-02-20 10:46:10 UTC MAIN commitmail json YAML

(ham/gnuradio-core) Add GCC_REQD = 8

[ 12%] Building CXX object gnuradio-runtime/lib/CMakeFiles/gnuradio-runtime.dir/basic_block.cc.o
In file included from /usr/pkg/include/boost/dll/runtime_symbol_info.hpp:11:0,
                from /tmp/ham/gnuradio-core/work/gnuradio-3.10.0.0/build/gnuradio-runtime/lib/constants.cc:16:
/usr/pkg/include/boost/dll/config.hpp:47:22: error: 'filesystem' is not a namespace-name
using namespace std::filesystem;
                      ^~~~~~~~~~
/usr/pkg/include/boost/dll/config.hpp:47:32: error: expected namespace-name before ';' token
using namespace std::filesystem;
                                ^

(mef)

2022-02-20 10:32:06 UTC pkgsrc-2021Q4 commitmail json YAML

Pullup tickets up to #6581

(bsiegert)

2022-02-20 10:31:21 UTC pkgsrc-2021Q4 commitmail json YAML

Pullup ticket #6581 - requested by nia
www/firefox91-l10n: dependent update

Revisions pulled up:
- www/firefox91-l10n/Makefile                                  1.7
- www/firefox91-l10n/distinfo                                  1.9

---
  Module Name: pkgsrc
  Committed By: ryoon
  Date: Wed Jan 26 13:39:12 UTC 2022

  Modified Files:
  pkgsrc/www/firefox91-l10n: Makefile distinfo

  Log Message:
  firefox91-l10n: Update to 91.5.0

  * Sync with www/firefox91-91.5.0.

(bsiegert)

2022-02-20 10:20:22 UTC pkgsrc-2021Q4 commitmail json YAML

Pullup ticket #6580 - requested by nia
www/firefox91: security fix

Revisions pulled up:
- www/firefox91/Makefile                                        1.12
- www/firefox91/distinfo                                        1.9
- www/firefox91/patches/patch-gfx_angle_checkout_src_compiler_translator_InfoSink.h 1.2

---
  Module Name: pkgsrc
  Committed By: ryoon
  Date: Wed Jan 26 13:38:07 UTC 2022

  Modified Files:
  pkgsrc/www/firefox91: Makefile distinfo
  pkgsrc/www/firefox91/patches:
      patch-gfx_angle_checkout_src_compiler_translator_InfoSink.h

  Log Message:
  firefox91: Update to 91.5.0

  Changelog:
  Security fixes:
  #CVE-2022-22746: Calling into reportValidity could have lead to fullscreen
  #CVE-2022-22743: Browser window spoof using fullscreen mode
  #CVE-2022-22742: Out-of-bounds memory access when inserting text in edit mode
  #CVE-2022-22741: Browser window spoof using fullscreen mode
  #CVE-2022-22740: Use-after-free of ChannelEventQueue::mOwner
  #CVE-2022-22738: Heap-buffer-overflow in blendGaussianBlur
  #CVE-2022-22737: Race condition when playing audio files
  #CVE-2021-4140: Iframe sandbox bypass with XSLT
  #CVE-2022-22748: Spoofed origin on external protocol launch dialog
  #CVE-2022-22745: Leaking cross-origin URLs through securitypolicyviolation
    event
  #CVE-2022-22744: The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command injection
  #CVE-2022-22747: Crash when handling empty pkcs7 sequence
  #CVE-2022-22739: Missing throttling on external protocol launch dialog
  #CVE-2022-22751: Memory safety bugs fixed in Firefox 96 and Firefox ESR 91.5

(bsiegert)

2022-02-20 09:34:51 UTC MAIN commitmail json YAML

Note update of the "mutt" package to version 2.2.1

(tron)

2022-02-20 09:34:39 UTC MAIN commitmail json YAML

mutt: Update to version 2.2.1

This is a bug-fix release, fixing a header-cache and body-cache naming
regression.  Some internal URL handling fixes accidentally resulted in the
username being omitted from the header cache in some cases.

(tron)

2022-02-20 08:34:50 UTC MAIN commitmail json YAML

doc: Updated comms/tio to 1.35

(fcambus)

2022-02-20 08:34:39 UTC MAIN commitmail json YAML

tio: update to 1.35.

Changes since tio v1.34:

* Add support for automatically generated log filename

  Automatically generate log filename if none is provided.

  The auto generated file name is on the form:
  "tio_DEVICE_YYYY-MM-DDTHH:MM:SS.log"

* Add support for configurable timestamp format

  Also changes default timestamp format from ISO8601 to classic 24-hour
  format as this is assumed to be the format that most users would prefer.

  And reintroduces strict but optional ISO8601 format.

  This feature allows to easily add more timestamp formats in the future.

* Reintroduce asm-generic/ioctls.h

  It is needed for ppc builds.

* Add macro hack to workaround older buggy glibc

Robey Pointer:

* Add support for high bps on OS X

(fcambus)

2022-02-20 08:06:15 UTC MAIN commitmail json YAML

doc/TODO: add some

+ ImageMagick-7.1.0.25, broot-1.9.3 [needs rust 1.58], help2man-1.49.1,
  pugixml-1.12.1, py-mercurial-6.0.3, py-pip-audit-2.0.0.

(wiz)

2022-02-20 06:15:12 UTC MAIN commitmail json YAML

print/sile: fix on platforms that don't use bash as default shell

./configure: 16205: Syntax error: Bad substitution

(rillig)

2022-02-19 22:13:50 UTC MAIN commitmail json YAML

yq: update HOMEPAGE.

(fcambus)

2022-02-19 21:03:13 UTC MAIN commitmail json YAML

2022-02-19 20:55:31 UTC MAIN commitmail json YAML

2022-02-19 20:47:21 UTC MAIN commitmail json YAML

2022-02-19 20:43:42 UTC MAIN commitmail json YAML

2022-02-19 20:39:58 UTC MAIN commitmail json YAML

lua: Add support for running tests with busted to module.mk

(nia)

2022-02-19 18:49:17 UTC MAIN commitmail json YAML

doc: Updated net/sayaka to 3.5.3

(tsutsui)

2022-02-19 18:48:52 UTC MAIN commitmail json YAML

sayaka: update to 3.5.3.

Upstream changes:

* 3.5.3 (2022/02/15)
- support to specify multiple keywords
- implement --mathalpha option

(tsutsui)

2022-02-19 17:58:22 UTC MAIN commitmail json YAML

xscreensaver: add upstream patch from jwz to fix compilation with gcc 7.5

Addresses PR 56723 by David H. Gutteridge

(wiz)

2022-02-19 17:53:52 UTC MAIN commitmail json YAML

doc: Updated textproc/expat to 2.4.5

(wiz)

2022-02-19 17:53:43 UTC MAIN commitmail json YAML

expat: update to 2.4.5.

Release 2.4.5 Fri February 18 2022
        Security fixes:
            #562  CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
                    sequences (e.g. from start tag names) to the XML
                    processing application on top of Expat can cause
                    arbitrary damage (e.g. code execution) depending
                    on how invalid UTF-8 is handled inside the XML
                    processor; validation was not their job but Expat's.
                    Exploits with code execution are known to exist.
            #561  CVE-2022-25236 -- Passing (one or more) namespace separator
                    characters in "xmlns[:prefix]" attribute values
                    made Expat send malformed tag names to the XML
                    processor on top of Expat which can cause
                    arbitrary damage (e.g. code execution) depending
                    on such unexpectable cases are handled inside the XML
                    processor; validation was not their job but Expat's.
                    Exploits with code execution are known to exist.
            #558  CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
                    that could be triggered by e.g. a 2 megabytes
                    file with a large number of opening braces.
                    Expected impact is denial of service or potentially
                    arbitrary code execution.
            #560  CVE-2022-25314 -- Fix integer overflow in function copyString;
                    only affects the encoding name parameter at parser creation
                    time which is often hardcoded (rather than user input),
                    takes a value in the gigabytes to trigger, and a 64-bit
                    machine.  Expected impact is denial of service.
            #559  CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
                    needs input in the gigabytes and a 64-bit machine.
                    Expected impact is denial of service or potentially
                    arbitrary code execution.

        Other changes:
      #557 #564  Version info bumped from 9:4:8 to 9:5:8;
                    see https://verbump.de/ for what these numbers do

(wiz)

2022-02-19 16:27:10 UTC MAIN commitmail json YAML

doc: Updated net/unison-snapshot to 2.51.70

(gdt)

2022-02-19 16:27:03 UTC MAIN commitmail json YAML

unison-snapshot: Update to 2.51.70

This is an alpha for 2.52.0 and contains significant changes.

While just upgrading and using it should work, it has not received
enough testing to be called beta.  In particular the new formats have
not been tested with big endian processors.

## Changes in 2.52.0

  * Feature negotiation, compatible with 2.51.
  * New archive format (independent of ocaml version, based on umarshal)
    Upgrade is automatic.
  * New wire protocol (independent of ocaml version, based on umarshal)
    New protocol is used if both sides are >= 2.52.0.
  * Support for unix-domain sockets
  * Many bugfixes and minor improvements
  * ocaml compatibility is now >= 4.01
  * NEWS is now in NEWS.md and not in the manual

(gdt)