Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (2m)  pkgsrc-2024Q1 (15d)  pkgsrc-2023Q4 (43d)  pkgsrc-2023Q2 (75d)  pkgsrc-2023Q3 (154d) 

2024-05-13 16:03:05 UTC Now

2021-07-04 07:30:48 UTC MAIN commitmail json YAML

Update to 0.002009

Upstream changes:
0.002009 - 2021-05-25
  - fix warnings from Test::Builder if Test::Needs is loaded first, and is
    used to check for a Test module.
  - fix location in code reported when a module check fails.
  - support short forms of perl versions
  - support perl versions greater than 5
  - fix handling of v-string versions on perl 5.6

0.002_008 - 2019-07-12
  - fix test compatibility with Windows.

0.002_007 - 2019-07-09
  - fix tests when @INC includes directories that shouldn't have their
    archname or version subdirectories added.

(wen)

2021-07-04 07:14:46 UTC MAIN commitmail json YAML

2021-07-04 07:13:46 UTC MAIN commitmail json YAML

2021-07-04 07:00:11 UTC MAIN commitmail json YAML

doc: update www/ruby-rails60 related pacakges to 6.0.4

devel/ruby-activesupport60
devel/ruby-activemodel60
devel/ruby-activejob60
www/ruby-actionview60
www/ruby-actionpack60
databases/ruby-activerecord60
mail/ruby-actionmailer60
mail/ruby-actionmailbox60
www/ruby-actioncable60
devel/ruby-railties60
devel/ruby-activestorage60
textproc/ruby-actiontext60
www/ruby-rails60

(taca)

2021-07-04 06:58:38 UTC MAIN commitmail json YAML

www/ruby-rails60: update to 6.0.4

Ruby on Rails 6.0.4 (2021-06-15), including security fixes.

Active Support

* Fixed issue in ActiveSupport::Cache::RedisCacheStore not passing
  options to read_multi causing fetch_multi to not work properly.
  (Rajesh Sharma)

* with_options copies its options hash again to avoid leaking mutations.
  Fixes #39343.  (Eugene Kenny)

Active Record

* Only warn about negative enums if a positive form that would cause
  conflicts exists.  Fixes #39065.  (Alex Ghiculescu)

* Allow the inverse of a has_one association that was previously
  autosaved to be loaded.  Fixes #34255.  (Steven Weber)

* Reset statement cache for association if table_name is changed.
  Fixes #36453.  (Ryuta Kamizono)

* Type cast extra select for eager loading.  (Ryuta Kamizono)

* Prevent collection associations from being autosaved multiple times.
  Fixes #39173.  (Eugene Kenny)

* Resolve issue with insert_all unique_by option when used with
  expression index.

  When the :unique_by option of ActiveRecord::Persistence.insert_all
  and ActiveRecord::Persistence.upsert_all was used with the name of
  an expression index, an error was raised.  Adding a guard around the
  formatting behavior for the :unique_by corrects this.

  Usage:

create_table :books, id: :integer, force: true do |t|
  t.column :name, :string
  t.index "lower(name)", unique: true
end

  Book.insert_all [{ name: "MyTest" }], unique_by: :index_books_on_lower_name

  Fixes #39516.  (Austen Madden)

* Fix preloading for polymorphic association with custom scope.
  (Ryuta Kamizono)

* Allow relations with different SQL comments in the or method.
  (Takumi Shotoku)

* Resolve conflict between counter cache and optimistic locking.

  Bump an Active Record instance's lock version after updating its
  counter cache.  This avoids raising an unnecessary
  ActiveRecord::StaleObjectError upon subsequent transactions by
  maintaining parity with the corresponding database record's
  lock_version column.  Fixes #16449.  (Aaron Lipman)

* Fix through association with source/through scope which has joins.
  (Ryuta Kamizono)

* Fix through association to respect source scope for includes/preload.
  (Ryuta Kamizono)

* Fix eager load with Arel joins to maintain the original joins order.
  (Ryuta Kamizono)

* Fix group by count with eager loading + order + limit/offset.
  (Ryuta Kamizono)

* Fix left joins order when merging multiple left joins from different
  associations.  (Ryuta Kamizono)

* Fix index creation to preserve index comment in bulk change table on
  MySQL.  (Ryuta Kamizono)

* Change remove_foreign_key to not check :validate option if database
  doesn't support the feature.  (Ryuta Kamizono)

* Fix the result of aggregations to maintain duplicated "group by"
  fields.  (Ryuta Kamizono)

* Do not return duplicated records when using preload.  (Bogdan Gusiev)

Action View

* SanitizeHelper.sanitized_allowed_attributes and
  SanitizeHelper.sanitized_allowed_tags call safe_list_sanitizer's
  class method.  Fixes #39586.  (Taufiq Muhammadi)

Action Pack

* Accept base64_urlsafe CSRF tokens to make forward compatible.

* Base64 strict-encoded CSRF tokens are not inherently websafe, which
  makes them difficult to deal with.  For example, the common practice
  of sending the CSRF token to a browser in a client-readable cookie
  does not work properly out of the box: the value has to be
  url-encoded and decoded to survive transport.

  In Rails 6.1, we generate Base64 urlsafe-encoded CSRF tokens, which
  are inherently safe to transport.  Validation accepts both urlsafe
  tokens, and strict-encoded tokens for backwards compatibility.

  In Rails 5.2.5, the CSRF token format is accidentally changed to
  urlsafe-encoded.  If you upgrade apps from 5.2.5, set the config
  urlsafe_csrf_tokens = true.

Rails.application.config.action_controller.urlsafe_csrf_tokens = true

  (Scott Blum, Étienne Barrié)

* Signed and encrypted cookies can now store false as their value when
  action_dispatch.use_cookies_with_metadata is enabled.  (Rolandas
  Barysas)

Active Storage

* The Poppler PDF previewer renders a preview image using the original
  document's crop box rather than its media box, hiding print
  margins. This matches the behavior of the MuPDF previewer.  (Vincent
  Robert)

Railties

* Allow relative paths with trailing slashes to be passed to rails
  test.  (Eugene Kenny)

* Return a 405 Method Not Allowed response when a request uses an
  unknown HTTP method.  Fixes #38998.  (Loren Norman)

(taca)

2021-07-04 06:27:12 UTC MAIN commitmail json YAML

doc: Note update of ruby-rails52 and related packages to 5.2.6

devel/ruby-activesupport52
devel/ruby-activemodel52
devel/ruby-activejob52
www/ruby-actionview52
www/ruby-actionpack52
www/ruby-actioncable52
databases/ruby-activerecord52
devel/ruby-activestorage52
mail/ruby-actionmailer52
devel/ruby-railties52
www/ruby-rails52

(taca)

2021-07-04 06:24:47 UTC MAIN commitmail json YAML

www/ruby-rails52: update to 5.2.6

Ruby on Rails 5.2.6 (2021-05-05)

There are changes in www/ruby-actionpack52 only, including security fix.

Action Pack

* Accept base64_urlsafe CSRF tokens to make forward compatible.

  Base64 strict-encoded CSRF tokens are not inherently websafe, which
  makes them difficult to deal with.  For example, the common practice
  of sending the CSRF token to a browser in a client-readable cookie
  does not work properly out of the box: the value has to be
  url-encoded and decoded to survive transport.

  In this version, we generate Base64 urlsafe-encoded CSRF tokens,
  which are inherently safe to transport.  Validation accepts both
  urlsafe tokens, and strict-encoded tokens for backwards
  compatibility.

  How the tokes are encoded is controllr by the
  action_controller.urlsafe_csrf_tokens config.

  In Rails 5.2.5, the CSRF token format was accidentally changed to
  urlsafe-encoded.

  Atention: If you already upgraded your application to 5.2.5, set the
  config urlsafe_csrf_tokens to true, otherwise your form submission
  will start to fail during the deploy of this new version.

Rails.application.config.action_controller.urlsafe_csrf_tokens = true

  If you are upgrading from 5.2.4.x, you don't need to change this
  configuration.

  Scott Blum, Étienne Barrié

(taca)

2021-07-03 21:02:54 UTC MAIN commitmail json YAML

py-spake2: add do-test target

From Matthias Ferdinand.

(wiz)

2021-07-03 21:02:45 UTC MAIN commitmail json YAML

security/p11-kit: make gettext-lib dependency explicit

It uses gettext, libintl. Enough said.

(thor)

2021-07-03 21:01:48 UTC MAIN commitmail json YAML

Fix PLIST by conditionally including rocksdb plugin files that are optional

(manu)

2021-07-03 21:00:31 UTC MAIN commitmail json YAML

2021-07-03 19:12:44 UTC MAIN commitmail json YAML

doc: Updated x11/gnome-shell to 40.2

(cirnatdan)

2021-07-03 19:12:10 UTC MAIN commitmail json YAML

gnome-shell: Update x11/gnome-shell to 40.2

40.2
====
* Unbreak Xwayland apps when not using systemd in user session [Olivier; !1850]
* Fix distributed man pages [Florian; !1859]
* Avoid unnecessary icon shadow changes [Daniel; !1869]
* Immediately start app grid drags for non-touch devices [Georges; !1872]
* Handle screencast failures more gracefully [Florian; !1878]
* Fixed crashes [Gustavo; !1848]
* Misc. bug fixes [Georges, Florian, Daniel; !1867, !1854, !1860, !1876]

Contributors:
  Olivier Fourdan, Florian Müllner, Georges Basile Stavracas Neto,
  Gustavo Noronha Silva, Daniel van Vugt

Translators:
  Quentin PAGÈS [oc], Cheng-Chia Tseng [zh_TW], Hugo Carvalho [pt]

(cirnatdan)

2021-07-03 18:07:56 UTC MAIN commitmail json YAML

doc: Updated wm/mutter to 40.2

(cirnatdan)

2021-07-03 17:47:03 UTC MAIN commitmail json YAML

mutter: Update wm/mutter to 40.2

40.2
====
* Fix mouse position in remote desktop with fractional scaling [Pascal; !1867]
* Fix fd leak [Carlos; !1875]
* Disable KMS modifiers on radeon driver [Carlos; !1872]
* Fix adding virtual monitor to physical session [Jonas; !1891]
* Unbreak press-drag-release to pop up and select right click menus
  [Carlos; !1885]
* Fix VKMS detection [Jonas; !1892]
* Misc. bug fixes [Jonas, Daniel, Florian; !1876, !1873, !1890, !1884]

Contributors:
  Jonas Ådahl, Carlos Garnacho, Florian Müllner, Pascal Nowack, Daniel van Vugt

Translators:
  Pawan Chitrakar [ne], Charles Monzat [fr]

(cirnatdan)

2021-07-03 14:36:11 UTC MAIN commitmail json YAML

gramps3: remove

This is the last release of the 3.x branch from 2014.
We have a current release in pkgsrc in the gramps5 package.

(wiz)

2021-07-03 10:29:26 UTC MAIN commitmail json YAML

lang/go14: use awk and fix a script for it

(thor)

2021-07-03 10:08:42 UTC MAIN commitmail json YAML

graphics/viu: add maintainer

Reclaim maintainership

(pin)

2021-07-03 10:07:41 UTC MAIN commitmail json YAML

doc: Added graphics/lsix version 1.7.4

(pin)

2021-07-03 10:07:04 UTC MAIN commitmail json YAML

2021-07-03 10:05:54 UTC MAIN commitmail json YAML

graphics/lsix: import package

Like ls, but for images. Shows thumbnails in terminal using sixel graphics.

Just typing lsix will show images in the current working directory.
You can also specify filenames and, of course, use shell wild cards.
Because lsix uses ImageMagick pretty much any image format will be supported.
However, some may be slow to render (like PDF), so lsix doesn't show them
unless you ask specifically.

(pin)

2021-07-03 09:56:25 UTC MAIN commitmail json YAML

2021-07-03 09:51:23 UTC MAIN commitmail json YAML

2021-07-03 09:49:50 UTC MAIN commitmail json YAML

2021-07-03 09:48:44 UTC MAIN commitmail json YAML

2021-07-03 09:47:00 UTC MAIN commitmail json YAML

2021-07-03 09:45:08 UTC MAIN commitmail json YAML

2021-07-03 09:43:06 UTC MAIN commitmail json YAML

2021-07-03 09:41:57 UTC MAIN commitmail json YAML

2021-07-03 09:41:02 UTC MAIN commitmail json YAML

2021-07-03 09:38:08 UTC MAIN commitmail json YAML

2021-07-03 09:37:02 UTC MAIN commitmail json YAML

2021-07-03 09:35:50 UTC MAIN commitmail json YAML

2021-07-03 09:35:09 UTC MAIN commitmail json YAML

go-ace: remove

deprecated go-package; no users in pkgsrc

(nia)

2021-07-03 09:33:52 UTC MAIN commitmail json YAML

2021-07-03 09:23:45 UTC MAIN commitmail json YAML

2021-07-02 22:49:39 UTC MAIN commitmail json YAML

devel/libcfg+: re-generate src/Makefile.in patch to contain more context

This fixes the patch on one of my Linux systems. I just did mkpatches
on a box where the old patch works. It adds to lines of context that
make another box happy that failed to apply the patch before.

(thor)

2021-07-02 22:01:27 UTC MAIN commitmail json YAML

doc: Added textproc/xsv version 0.13.0

(pin)

2021-07-02 22:00:55 UTC MAIN commitmail json YAML

Add textproc/xsv

(pin)

2021-07-02 21:59:54 UTC MAIN commitmail json YAML

textproc/xsv: import package

Packaged in wip by Michael-John Turner

xsv is a command line program for indexing, slicing, analyzing, splitting
and joining CSV files. Commands should be simple, fast and composable:

1. Simple tasks should be easy.
2. Performance trade offs should be exposed in the CLI interface.
3. Composition should not come at the expense of performance.

(pin)

2021-07-02 17:32:30 UTC MAIN commitmail json YAML

doc: Updated lang/php73 to 7.3.29

(taca)

2021-07-02 17:32:06 UTC MAIN commitmail json YAML

lang/php73: update to 7.3.29

01 Jul 2021, PHP 7.3.29

- Core:
  . Fixed bug #81122: SSRF bypass in FILTER_VALIDATE_URL. (CVE-2021-21705) (cmb)

- PDO_Firebird:
  . Fixed bug #76448: Stack buffer overflow in firebird_info_cb.
    (CVE-2021-21704) (cmb)
  . Fixed bug #76449: SIGSEGV in firebird_handle_doer. (CVE-2021-21704) (cmb)
  . Fixed bug #76450: SIGSEGV in firebird_stmt_execute. (CVE-2021-21704) (cmb)
  . Fixed bug #76452: Crash while parsing blob data in firebird_fetch_blob.
    (CVE-2021-21704) (cmb)

(taca)

2021-07-02 17:31:05 UTC MAIN commitmail json YAML

doc: Updated lang/php80 to 8.0.8

(taca)

2021-07-02 17:30:35 UTC MAIN commitmail json YAML

lang/php80: update to 8.0.8

01 Jul 2021, PHP 8.0.8

- Core:
  . Fixed bug #81076 (incorrect debug info on Closures with implicit binds).
    (krakjoe)
  . Fixed bug #81068 (Double free in realpath_cache_clean()). (Dimitry Andric)
  . Fixed bug #76359 (open_basedir bypass through adding ".."). (cmb)
  . Fixed bug #81090 (Typed property performance degradation with .= operator).
    (Nikita)
  . Fixed bug #81070 (Integer underflow in memory limit comparison).
    (Peter van Dommelen)
  . Fixed bug #81122 (SSRF bypass in FILTER_VALIDATE_URL).
    (CVE-2021-21705) (cmb)

- Bzip2:
  . Fixed bug #81092 (fflush before stream_filter_remove corrupts stream).
    (cmb)

- Fileinfo:
  . Fixed bug #80197 (implicit declaration of function 'magic_stream' is
    invalid). (Nikita)

- GMP:
  . Fixed bug #81119 (GMP operators throw errors with wrong parameter names).
    (Nikita)

- OCI8:
  . Fixed bug #81088 (error in regression test for oci_fetch_object() and
    oci_fetch_array()). (M叩t辿)

- Opcache:
  . Fixed bug #81051 (Broken property type handling after incrementing
    reference). (Dmitry)
  . Fixed bug #80968 (JIT segfault with return from required file). (Dmitry)

- OpenSSL:
  . Fixed bug #76694 (native Windows cert verification uses CN as sever name).
    (cmb)

- MySQLnd:
  . Fixed bug #80761 (PDO uses too much memory). (Nikita)

- PDO_Firebird:
  . Fixed bug #76448 (Stack buffer overflow in firebird_info_cb).
    (CVE-2021-21704) (cmb)
  . Fixed bug #76449 (SIGSEGV in firebird_handle_doer).
    (CVE-2021-21704) (cmb)
  . Fixed bug #76450 (SIGSEGV in firebird_stmt_execute).
    (CVE-2021-21704) (cmb)
  . Fixed bug #76452 (Crash while parsing blob data in firebird_fetch_blob).
    (CVE-2021-21704) (cmb)

- readline:
  . Fixed bug #72998 (invalid read in readline completion). (krakjoe)

- Standard:
  . Fixed bug #81048 (phpinfo(INFO_VARIABLES) "Array to string conversion").
    (cmb)
  . Fixed bug #77627 (method_exists on Closure::__invoke inconsistency).
    (krakjoe)

- Windows:
  . Fixed bug #81120 (PGO data for main PHP DLL are not used). (cmb)

(taca)

2021-07-02 17:28:58 UTC MAIN commitmail json YAML

doc: Updated lang/php74 to 7.4.21

(taca)

2021-07-02 17:28:28 UTC MAIN commitmail json YAML

lang/php74: update to 7.4.21

01 Jul 2021, PHP 7.4.21

- Core:
  . Fixed bug #81068 (Double free in realpath_cache_clean()). (Dimitry Andric)
  . Fixed bug #76359 (open_basedir bypass through adding ".."). (cmb)
  . Fixed bug #81090 (Typed property performance degradation with .= operator).
    (Nikita)
  . Fixed bug #81070 (Integer underflow in memory limit comparison).
    (Peter van Dommelen)
  . Fixed bug #81122 (SSRF bypass in FILTER_VALIDATE_URL).
    (CVE-2021-21705) (cmb)

- Bzip2:
  . Fixed bug #81092 (fflush before stream_filter_remove corrupts stream).
    (cmb)

- OpenSSL:
  . Fixed bug #76694 (native Windows cert verification uses CN as sever name).
    (cmb)

- PDO_Firebird:
  . Fixed bug #76448 (Stack buffer overflow in firebird_info_cb).
    (CVE-2021-21704) (cmb)
  . Fixed bug #76449 (SIGSEGV in firebird_handle_doer).
    (CVE-2021-21704) (cmb)
  . Fixed bug #76450 (SIGSEGV in firebird_stmt_execute).
    (CVE-2021-21704) (cmb)
  . Fixed bug #76452 (Crash while parsing blob data in firebird_fetch_blob).
    (CVE-2021-21704) (cmb)

- Standard:
  . Fixed bug #81048 (phpinfo(INFO_VARIABLES) "Array to string conversion").
    (cmb)

(taca)

2021-07-02 17:04:09 UTC MAIN commitmail json YAML

modular-xorg-drivers: don't build intel driver on non-x86

remove some drivers that no longer exist

(nia)

2021-07-02 15:51:17 UTC MAIN commitmail json YAML

py-mercurial: unzip is a test dependency

(wiz)

2021-07-02 15:21:35 UTC MAIN commitmail json YAML

2021-07-02 15:21:12 UTC MAIN commitmail json YAML

2021-07-02 15:19:30 UTC MAIN commitmail json YAML

2021-07-02 15:18:42 UTC MAIN commitmail json YAML

php-mysqli: split options.mk into separate file

(nia)

2021-07-02 14:04:06 UTC MAIN commitmail json YAML

2021-07-02 12:42:59 UTC MAIN commitmail json YAML

inkscape: unbreak Darwin

(adam)

2021-07-02 12:17:49 UTC MAIN commitmail json YAML

Updated devel/py-fasteners, x11/gtk-mac-integration

(adam)

2021-07-02 12:17:32 UTC MAIN commitmail json YAML

gtk-mac-integration: updated to 3.0.1

3.0.1
* Fix localization of the Apple menu when running in a bundle.
* Fix gettext configuration when building from a clean git repo.
* Change the GtkosxApplicationAttentionType enums to avoid namespace pollution.
* New/Updated translations: Basque, Catalan, Galician, Swedish.

(adam)

2021-07-02 12:16:56 UTC MAIN commitmail json YAML

2021-07-02 12:04:22 UTC MAIN commitmail json YAML

p5-Math-Int128: doesn't work on 32-bit platforms

(nia)

2021-07-02 12:03:24 UTC MAIN commitmail json YAML

mk: Add LP32PLATFORMS

(nia)

2021-07-02 11:47:28 UTC MAIN commitmail json YAML

doc: Updated emulators/mame to 0.233

(wiz)

2021-07-02 11:47:16 UTC MAIN commitmail json YAML

mame: update to 0.233.

Are you ready for MAME 0.233? With dozens of reported issues fixed,
over a hundred pull requests merged, and a flurry of development
across all areas, our mid-year release is huge! Some of the more
interesting machines added this month include several prototype
JAKKS Pacific TV Games, the elusive English version of Namco窶冱
Armadillo Racing, and the LCD hand-held game Space Mission from
Tronica.

There are lots of new Apple IIgs and Macintosh software list items,
tying in nicely with the recently improved emulation of these
systems, as well as an update to the Colour Genie collection, and
a massive haul of MicroBee floppy dumps. A few more Mattel Juice
Box cartridges have been dumped, allowing you to marvel at the
poor-quality, 6 frames-per-second video.

Significantly improved systems include the Atari Portfolio, Tandy
MC-10, and Tandy VIS. Carl has continued to work on Japanese home
computers, and Ville Linde is back this month, bringing a batch of
updates for the Konami Hornet platform. Juno First, The Tin Star,
The Empire Strikes Back have all had bugs squashed, and some of
the last remaining regressions from the Yamaha FM synthesis rewrite
have been resolved. David Haywood has turned his attention to
bootlegs of games including Final Lap 3, Guttang Gottong, and Alien
Storm.

This release includes preliminary sound support for the Super A'Can
console. On the topic of sound, some Yamaha synthesisers have been
promoted to working, and MAME can now play back standard MIDI files
to exercise machines that take MIDI input.

There are several general usability improvements in this release,
including updated Chinese and Greek translations, better configuration
handling for slot devices, and a few small enhancements to the
built-in user interface. Issues with artwork using SVG and Windows
DIB (BMP) images on ARM/AArch64-based Linux systems should also be
fixed.

(wiz)

2021-07-02 11:27:43 UTC MAIN commitmail json YAML

doc: Updated security/p5-Crypt-CBC to 3.04

(nia)

2021-07-02 11:27:21 UTC MAIN commitmail json YAML

p5-Crypt-CBC: Update to 3.04.

Fix packaging on 32-bit platforms by disabling int128 dependency.

3.04 Mon 17 May 2021 10:58:37 AM EDT
        - Fixed bug involving manually-specified IV not being used in some circumstances.

(nia)

2021-07-02 10:51:16 UTC MAIN commitmail json YAML

2021-07-02 10:45:07 UTC MAIN commitmail json YAML

firefox: PLIST.Linux: a new file appeared

(tnn)

2021-07-02 09:54:33 UTC MAIN commitmail json YAML

Updated net/py-lexicon, net/py-zeroconf

(adam)

2021-07-02 09:54:09 UTC MAIN commitmail json YAML

py-zeroconf: updated to 0.32.0

0.32.0

This release offers 100% line and branch coverage.

Made ServiceInfo first question QU

We want an immediate response when requesting with ServiceInfo by asking a QU question; most responders will not delay the response and respond right away to our question. This also improves compatibility with split networks as we may not have been able to see the response otherwise. If the responder has not multicast the record recently, it may still choose to do so in addition to responding via unicast

Reduces traffic when there are multiple zeroconf instances running on the network running ServiceBrowsers

If we don't get an answer on the first try, we ask a QM question in the event, we can't receive a unicast response for some reason

This change puts ServiceInfo inline with ServiceBrowser which also asks the first question as QU since ServiceInfo is commonly called from ServiceBrowser callbacks

Limited duplicate packet suppression to 1s intervals

Only suppress duplicate packets that happen within the same second. Legitimate queriers will retry the question if they are suppressed. The limit was reduced to one second to be in line with rfc6762

Made multipacket known answer suppression per interface

The suppression was happening per instance of Zeroconf instead of per interface. Since the same network can be seen on multiple interfaces (usually and wifi and ethernet), this would confuse the multi-packet known answer supression since it was not expecting to get the same data more than once

New ServiceBrowsers now request QU in the first outgoing when unspecified

https://datatracker.ietf.org/doc/html/rfc6762#section-5.4 When we start a ServiceBrowser and zeroconf has just started up, the known answer list will be small. By asking a QU question first, it is likely that we have a large known answer list by the time we ask the QM question a second later (current default which is likely too low but would be a breaking change to increase). This reduces the amount of traffic on the network, and has the secondary advantage that most responders will answer a QU question without the typical delay answering QM questions.

IPv6 link-local addresses are now qualified with scope_id

When a service is advertised on an IPv6 address where the scope is link local, i.e. fe80::/64 (see RFC 4007) the resolved IPv6 address must be extended with the scope_id that identifies through the "%" symbol the local interface to be used when routing to that address. A new API parsed_scoped_addresses() is provided to return qualified addresses to avoid breaking compatibility on the existing parsed_addresses().

Network adapters that are disconnected are now skipped

Fixed listeners missing initial packets if Engine starts too quickly

When manually creating a zeroconf.Engine object, it is no longer started automatically. It must manually be started by calling .start() on the created object.

The Engine thread is now started after all the listeners have been added to avoid a race condition where packets could be missed at startup.

Fixed answering matching PTR queries with the ANY query

Fixed lookup of uppercase names in the registry

If the ServiceInfo was registered with an uppercase name and the query was for a lowercase name, it would not be found and vice-versa.

Fixed unicast responses from any source port

Unicast responses were only being sent if the source port was 53, this prevented responses when testing with dig:

dig -p 5353 @224.0.0.251 media-12.local
The above query will now see a response

Fixed queries for AAAA records not being answered

Removed second level caching from ServiceBrowsers

The ServiceBrowser had its own cache of the last time it saw a service that was reimplementing the DNSCache and presenting a source of truth problem that lead to unexpected queries when the two disagreed.

Fixed server cache not being case-insensitive

If the server name had uppercase chars and any of the matching records were lowercase, and the server would not be found

Fixed cache handling of records with different TTLs

There should only be one unique record in the cache at a time as having multiple unique records will different TTLs in the cache can result in unexpected behavior since some functions returned all matching records and some fetched from the right side of the list to return the newest record. Instead we now store the records in a dict to ensure that the newest record always replaces the same unique record, and we never have a source of truth problem determining the TTL of a record from the cache.

Fixed ServiceInfo with multiple A records

If there were multiple A records for the host, ServiceInfo would always return the last one that was in the incoming packet, which was usually not the one that was wanted.

Fixed stale unique records expiring too quickly

Records now expire 1s in the future instead of instant removal.

tools.ietf.org/html/rfc6762#section-10.2 Queriers receiving a Multicast DNS response with a TTL of zero SHOULD NOT immediately delete the record from the cache, but instead record a TTL of 1 and then delete the record one second later. In the case of multiple Multicast DNS responders on the network described in Section 6.6 above, if one of the responders shuts down and incorrectly sends goodbye packets for its records, it gives the other cooperating responders one second to send out their own response to "rescue" the records before they expire and are deleted.

Fixed exception when unregistering a service multiple times

Added an AsyncZeroconfServiceTypes to mirror ZeroconfServiceTypes to zeroconf.asyncio

Fixed interface_index_to_ip6_address not skiping ipv4 adapters

Added async_unregister_all_services to AsyncZeroconf

Fixed services not being removed from the registry when calling unregister_all_services

There was a race condition where a query could be answered for a service in the registry, while goodbye packets which could result in a fresh record being broadcast after the goodbye if a query came in at just the right time. To avoid this, we now remove the services from the registry right after we generate the goodbye packet

Fixed zeroconf exception on load when the system disables IPv6

Fixed the QU bit missing from for probe queries

The bit should be set per datatracker.ietf.org/doc/html/rfc6762#section-8.1

Fixed the TC bit missing for query packets where the known answers span multiple packets

Fixed packets not being properly separated when exceeding maximum size

Ensure that questions that exceed the max packet size are moved to the next packet. This fixes DNSQuestions being sent in multiple packets in violation of: datatracker.ietf.org/doc/html/rfc6762#section-7.2

Ensure only one resource record is sent when a record exceeds _MAX_MSG_TYPICAL datatracker.ietf.org/doc/html/rfc6762#section-17

Fixed PTR questions asked in uppercase not being answered

Added Support for context managers in Zeroconf and AsyncZeroconf

Implemented an AsyncServiceBrowser to compliment the sync ServiceBrowser

Added async_get_service_info to AsyncZeroconf and async_request to AsyncServiceInfo

Implemented allowing passing in a sync Zeroconf instance to AsyncZeroconf

Fixed IPv6 setup under MacOS when binding to ""

Fixed ZeroconfServiceTypes.find not always cancels the ServiceBrowser

There was a short window where the ServiceBrowser thread could be left running after Zeroconf is closed because the .join() was never waited for when a new Zeroconf object was created

Fixed duplicate packets triggering duplicate updates

If TXT or SRV records update was already processed and then received again, it was possible for a second update to be called back in the ServiceBrowser

Fixed ServiceStateChange.Updated event happening for IPs that already existed

Fixed RFC6762 Section 10.2 paragraph 2 compliance

Reduced length of ServiceBrowser thread name with many types

Fixed empty answers being added in ServiceInfo.request

Fixed ServiceInfo not populating all AAAA records

Use get_all_by_details to ensure all records are loaded into addresses.

Only load A/AAAA records from the cache once in load_from_cache if there is a SRV record present

Move duplicate code that checked if the ServiceInfo was complete into its own function

Fixed a case where the cache list can change during iteration

Return task objects created by AsyncZeroconf

Traffic Reduction:

Added support for handling QU questions

Implements RFC 6762 sec 5.4: Questions Requesting Unicast Responses datatracker.ietf.org/doc/html/rfc6762#section-5.4

Implemented protect the network against excessive packet flooding

Additionals are now suppressed when they are already in the answers section

Additionals are no longer included when the answer is suppressed by known-answer suppression

Implemented multi-packet known answer supression

Implements datatracker.ietf.org/doc/html/rfc6762#section-7.2

Implemented efficient bucketing of queries with known answers

Implemented duplicate question suppression

http://datatracker.ietf.org/doc/html/rfc6762#section-7.3

Technically backwards incompatible:

Update internal version check to match docs (3.6+)

Python version earlier then 3.6 were likely broken with zeroconf already, however, the version is now explicitly checked.

Update python compatibility as PyPy3 7.2 is required

Backwards incompatible:

Drop oversize packets before processing them

Oversized packets can quickly overwhelm the system and deny service to legitimate queriers. In practice, this is usually due to broken mDNS implementations rather than malicious actors.

Guard against excessive ServiceBrowser queries from PTR records significantly lowerthan recommended

We now enforce a minimum TTL for PTR records to avoid ServiceBrowsers generating excessive queries refresh queries. Apple uses a 15s minimum TTL, however, we do not have the same level of rate limit and safeguards, so we use 1/4 of the recommended value.

RecordUpdateListener now uses async_update_records instead of update_record

This allows the listener to receive all the records that have been updated in a single transaction such as a packet or cache expiry.

update_record has been deprecated in favor of async_update_records A compatibility shim exists to ensure classes that use RecordUpdateListener as a base class continue to have update_record called, however, they should be updated as soon as possible.

A new method async_update_records_complete is now called on each listener when all listeners have completed processing updates and the cache has been updated. This allows ServiceBrowsers to delay calling handlers until they are sure the cache has been updated as its a common pattern to call for ServiceInfo when a ServiceBrowser handler fires.

The async_ prefix was chosen to make it clear that these functions run in the eventloop and should never do blocking I/O. Before 0.32+ these functions ran in a select() loop and should not have been doing any blocking I/O, but it was not clear to implementors that I/O would block the loop.

Pass both the new and old records to async_update_records

Pass the old_record (cached) as the value and the new_record (wire) to async_update_records instead of forcing each consumer to check the cache since we will always have the old_record when generating the async_update_records call. This avoids the overhead of multiple cache lookups for each listener.

(adam)

2021-07-02 09:49:42 UTC MAIN commitmail json YAML

py-lexicon: updated to 3.6.1

3.6.1:

Modified

Support deprecated method_whitelist parameter in urllib3.util.retry.Retry for urllib3<1.26
Fix support of registered domains for INWX provider
Update mypy and use external types modules

(adam)

2021-07-02 09:24:50 UTC MAIN commitmail json YAML

Updated devel/atkmm, devel/libsigc++3, devel/glibmm2.68, net/qbittorrent

(adam)

2021-07-02 09:24:30 UTC MAIN commitmail json YAML

qbittorrent: updated to 4.3.6

v4.3.6
- FEATURE: New languages: Mongolian, Persian, Thai
- BUGFIX: Provide correct error description in "upload mode"
- BUGFIX: Allow adding torrents with relative save path
- BUGFIX: Fix main window turns blank after restoring from tray
- BUGFIX: Remove the lockfile on exit
- BUGFIX: Improve "Watched folders" feature
- BUGFIX: Keep sub-sorting order
- BUGFIX: Properly add torrent with new tags
- WINDOWS: NSIS: Update Japanese, Turkish, Hungarian, Swedish translation

(adam)

2021-07-02 09:15:30 UTC MAIN commitmail json YAML

glibmm2.68: updated to 2.68.1

2.68.1 (stable):

Glib:
* Variant: Fix template constructors so they work with C++20

Build:
* Meson build: Use relative paths to untracked/
* [gio|glib]mmconfig.h.*: Don't dllimport on MinGW
* Meson build: examples and tests: Add dependency('threads')
* Meson build: Make it possible to use glibmm as a subproject
* Meson build: No implicit_include_directories
* Meson build: Make quiet installations possible
* MSVC build: Avoid exporting classes with std::string members

Tests:
* glibmm_ustring_compare: Fix so it works for C++20

(adam)

2021-07-02 09:12:17 UTC MAIN commitmail json YAML

libsigc++3: updated to 3.0.7

3.0.7 (stable)

Meson build:
* Make it possible to use sigc++ as a subproject
* No implicit_include_directories
* Fix build as subproject without building documentation

(adam)

2021-07-02 09:07:12 UTC MAIN commitmail json YAML

atkmm: updated to 2.28.2

atkmm 2.28.2 (stable):

Build:
* Meson build: Use relative paths to untracked/
* atkmmconfig.h.*: Don't dllimport on MinGW
* Meson build: Make it possible to use atkmm as a subproject
* Meson build: No implicit_include_directories

(adam)

2021-07-02 09:02:17 UTC MAIN commitmail json YAML

Updated devel/libsigc++, devel/glibmm, graphics/cairomm, devel/pangomm

(adam)

2021-07-02 09:01:51 UTC MAIN commitmail json YAML

pangomm: updated to 2.46.1

2.46.1 (stable):

Build:
* Meson build: Use relative paths to untracked/
* pangommconfig.h.*: Don't dllimport on MinGW
* Meson build: Make it possible to use pangomm as a subproject
* Meson build: No implicit_include_directories

(adam)

2021-07-02 09:01:07 UTC MAIN commitmail json YAML

cairomm: updated to 1.14.3

1.14.3 (stable):

Build:
* cairommconfig.h.*: Don't dllimport on MinGW
* Meson build: Make it possible to use cairomm as a subproject
* Meson build: No implicit_include_directories
* MSVC build: exception.h: Export Cairo::logic_error selectively

(adam)

2021-07-02 09:00:22 UTC MAIN commitmail json YAML

glibmm: updated to 2.66.1

2.66.1 (stable):

Glib:
* Variant: Fix template constructors so they work with C++20

Build:
* Meson build: Use relative paths to untracked/
* MSVC build: Export Glib::manage()
* [gio|glib]mmconfig.h.*: Don't dllimport on MinGW
* Meson build: examples and tests: Add dependency('threads')
* Meson build: Make it possible to use glibmm as a subproject
* Meson build: No implicit_include_directories
* Meson build: Make quiet installations possible
* MSVC build: Avoid exporting classes with std::string members

(adam)

2021-07-02 08:59:05 UTC MAIN commitmail json YAML

libsigc++: updated to 2.10.7

2.10.7 (stable)

Meson build:
* Make it possible to use sigc++ as a subproject
* Fix dependency on files generated from .h.m4 files
* No implicit_include_directories
* Make quiet installations possible
* Fix build as subproject without building documentation

Documentation:
* Links to *.gnome.org refer to sigc++-2.0 and gtkmm-3.0 versions
  instead of latest versions

(adam)

2021-07-02 06:59:28 UTC MAIN commitmail json YAML

doc: Updated graphics/inkscape to 1.1

(wiz)

2021-07-02 06:59:15 UTC MAIN commitmail json YAML

inkscape: update to 1.1.

Much help provided by Nathan Lee in fixing a startup issue.

Inkscape 1.1 is the latest major Inkscape release that brings users
many fresh new features and new functionality.

The most notable changes include:

    A Welcome dialog, where the look of Inkscape can be selected,
    and some choices for the new document's size or file to open
    are available

    A Command palette that opens when the ? key is pressed and that
    allows to search and use many functions without having to use
    a keyboard shortcut or going through the menus

    It is now possible to copy, cut and paste parts of paths with
    the Node tool

    The dialog docking system has been rewritten, which resolves
    many issues with Inkscape's docked dialogs and allows you to
    dock dialogs on either side of the screen

    New Outline Overlay mode that displays object outlines while
    also showing their real colors

    Preferences options are now easier to find by using the new
    search field

    It is no longer necessary to remember to click on 'Export' in
    the PNG Export dialog, as the exporting will already happen
    after the click on 'Save' in the file selection dialog.

    Export as JPG, TIFF, optimized PNG and WebP directly from
    Inkscape

    When pasting a copied object, Inkscape now pastes it directly
    on top of the currently selected object by default

    An extension for updating extensions and installing additional
    extensions, called the Extension Manager (currently in beta
    stage)

(wiz)

2021-07-01 22:40:27 UTC MAIN commitmail json YAML

Updated databases/mongo-c-driver, databases/mongodb

(adam)

2021-07-01 22:40:03 UTC MAIN commitmail json YAML

mongodb: updated to 4.2.14

Issues fixed in 4.2.14:

SERVER-54710: Large number of $or clauses can create profiling entry exceeding max BSON size, causing the query to fail when it should not
SERVER-54136: Make the authenticate command respect enforceUserClusterSeparation
SERVER-53566: Investigate and reproduce 窶徙pCtx != nullptr && _opCtx == nullptr窶� invariant
SERVER-52564: Deadlock between step down and MongoDOperationContextSession
WT-7373: Improve slow random cursor operations on oplog

Issues fixed in 4.2.13:

SERVER-46686: Explain does not respect maxTimeMS
SERVER-46740: establishCursors() must always drain the AsyncRequestsSender::_baton
SERVER-46876: During the eviction pressure, we should quit the compact operation instead of crashing the process
SERVER-53394: Make ShardingTaskExecutorPoolReplicaSetMatching default to disabled for MongoD
WT-7028: Sweep thread shouldn窶冲 lock during checkpoint gathering handles

(adam)

2021-07-01 22:37:34 UTC MAIN commitmail json YAML

mongo-c-driver: updated to 1.17.6

mongo-c-driver 1.17.6
=====================
Bug fixes:
* Fix possible crash when speculative authentication fails with network error.

mongo-c-driver 1.17.5
=====================
Improvements:
* Fix documentation regarding when to call mongoc_log_set_handler

(adam)

2021-07-01 21:47:30 UTC MAIN commitmail json YAML

Updated devel/py-astroid, devel/py-pylint

(adam)

2021-07-01 21:13:05 UTC MAIN commitmail json YAML

chat/matrix-synapse: Fix dependencies

(js)

2021-07-01 21:03:13 UTC MAIN commitmail json YAML

py-pylint: updated to 2.9.3

What's New in Pylint 2.9.3?
===========================

* Fix a crash that happened when analysing empty function with docstring
  in the ``similarity`` checker.

* The ``similarity`` checker no longer add three trailing whitespaces for
  empty lines in its report.

What's New in Pylint 2.9.2?
===========================

* Fix a crash that happened when analysing code using ``type(self)`` to access
  a class attribute in the ``unused-private-member`` checker.

* Fix a false positive for ``unused-private-member`` when accessing a private variable
  with ``self``

* Fix false-positive of ``unnecessary-dict-index-lookup`` and ``consider-using-dict-items``
  for reassigned dict index lookups

What's New in Pylint 2.9.1?
===========================

* Upgrade astroid to 2.6.2

(adam)

2021-07-01 21:01:20 UTC MAIN commitmail json YAML

py-astroid: updated to 2.6.2

v2.6.2

Fix a crash when the inference of the length of a node failed

Fix unhandled StopIteration during inference, following the implementation
of PEP479 in python 3.7+

(adam)

2021-07-01 20:03:39 UTC MAIN commitmail json YAML

Disallow for-pay distribution, e.g. on CDROMs (does anybody do that
these days?)

(hauke)

2021-07-01 17:10:04 UTC MAIN commitmail json YAML

doc: Updated net/dbip-country-lite to 2021.07

(fcambus)

2021-07-01 17:09:53 UTC MAIN commitmail json YAML

dbip-country-lite: update to 2021-07.

No upstream ChangeLog.

(fcambus)

2021-07-01 17:08:55 UTC MAIN commitmail json YAML

doc: Updated net/dbip-city-lite to 2021.07

(fcambus)

2021-07-01 17:08:39 UTC MAIN commitmail json YAML

dbip-city-lite: update to 2021-07.

No upstream ChangeLog.

(fcambus)

2021-07-01 17:07:57 UTC MAIN commitmail json YAML

doc: Updated net/dbip-asn-lite to 2021.07

(fcambus)

2021-07-01 17:07:45 UTC MAIN commitmail json YAML

dbip-asn-lite: update to 2021-07.

No upstream ChangeLog.

(fcambus)

2021-07-01 14:54:01 UTC MAIN commitmail json YAML

Remove 36 from accepted pythons

(nia)

2021-07-01 14:48:31 UTC MAIN commitmail json YAML

Ensure PYTHON_VERSIONS_INCOMPATIBLE is set before pyversion.mk is included

(nia)

2021-07-01 13:43:09 UTC MAIN commitmail json YAML

doc: Updated chat/matrix-synapse to 1.37.1

(wiz)

2021-07-01 13:42:59 UTC MAIN commitmail json YAML

matrix-synapse: update to 1.37.1.

Synapse 1.37.1 (2021-06-30) ===========================

This release resolves issues (such as
[#9490](https://github.com/matrix-org/synapse/issues/9490)) where
one busy room could cause head-of-line blocking, starving Synapse
from processing events in other rooms, and causing all federated
traffic to fall behind. Synapse 1.37.1 processes inbound federation
traffic asynchronously, ensuring that one busy room won't impact
others. Please upgrade to Synapse 1.37.1 as soon as possible, in
order to increase resilience to other traffic spikes.

No significant changes since v1.37.1rc1.

Synapse 1.37.1rc1 (2021-06-29) ==============================

Features --------

- Handle inbound events from federation asynchronously.
([\#10269](https://github.com/matrix-org/synapse/issues/10269),
[\#10272](https://github.com/matrix-org/synapse/issues/10272))

(wiz)

2021-07-01 08:40:25 UTC MAIN commitmail json YAML

doc: Updated chat/matrix-synapse to 1.37.0

(wiz)

2021-07-01 08:40:14 UTC MAIN commitmail json YAML

matrix-synapse: update to 1.37.0.

Synapse 1.37.0 (2021-06-29)
===========================

This release deprecates the current spam checker interface. See the [upgrade notes](https://matrix-org.github.io/synapse/develop/upgrade#deprecation-of-the-current-spam-checker-interface) for more information on how to update to the new generic module interface.

This release also removes support for fetching and renewing TLS certificates using the ACME v1 protocol, which has been fully decommissioned by Let's Encrypt on June 1st 2021. Admins previously using this feature should use a [reverse proxy](https://matrix-org.github.io/synapse/develop/reverse_proxy.html) to handle TLS termination, or use an external ACME client (such as [certbot](https://certbot.eff.org/)) to retrieve a certificate and key and provide them to Synapse using the `tls_certificate_path` and `tls_private_key_path` configuration settings.

Synapse 1.37.0rc1 (2021-06-24)
==============================

Features
--------

- Implement "room knocking" as per [MSC2403](https://github.com/matrix-org/matrix-doc/pull/2403). Contributed by @Sorunome and anoa. ([\#6739](https://github.com/matrix-org/synapse/issues/6739), [\#9359](https://github.com/matrix-org/synapse/issues/9359), [\#10167](https://github.com/matrix-org/synapse/issues/10167), [\#10212](https://github.com/matrix-org/synapse/issues/10212), [\#10227](https://github.com/matrix-org/synapse/issues/10227))
- Add experimental support for backfilling history into rooms ([MSC2716](https://github.com/matrix-org/matrix-doc/pull/2716)). ([\#9247](https://github.com/matrix-org/synapse/issues/9247))
- Implement a generic interface for third-party plugin modules. ([\#10062](https://github.com/matrix-org/synapse/issues/10062), [\#10206](https://github.com/matrix-org/synapse/issues/10206))
- Implement config option `sso.update_profile_information` to sync SSO users' profile information with the identity provider each time they login. Currently only displayname is supported. ([\#10108](https://github.com/matrix-org/synapse/issues/10108))
- Ensure that errors during startup are written to the logs and the console. ([\#10191](https://github.com/matrix-org/synapse/issues/10191))

Bugfixes
--------

- Fix a bug introduced in Synapse v1.25.0 that prevented the `ip_range_whitelist` configuration option from working for federation and identity servers. Contributed by @mikure. ([\#10115](https://github.com/matrix-org/synapse/issues/10115))
- Remove a broken import line in Synapse's `admin_cmd` worker. Broke in Synapse v1.33.0. ([\#10154](https://github.com/matrix-org/synapse/issues/10154))
- Fix a bug introduced in Synapse v1.21.0 which could cause `/sync` to return immediately with an empty response. ([\#10157](https://github.com/matrix-org/synapse/issues/10157), [\#10158](https://github.com/matrix-org/synapse/issues/10158))
- Fix a minor bug in the response to `/_matrix/client/r0/user/{user}/openid/request_token` causing `expires_in` to be a float instead of an integer. Contributed by @lukaslihotzki. ([\#10175](https://github.com/matrix-org/synapse/issues/10175))
- Always require users to re-authenticate for dangerous operations: deactivating an account, modifying an account password, and adding 3PIDs. ([\#10184](https://github.com/matrix-org/synapse/issues/10184))
- Fix a bug introduced in Synpase v1.7.2 where remote server count metrics collection would be incorrectly delayed on startup. Found by @heftig. ([\#10195](https://github.com/matrix-org/synapse/issues/10195))
- Fix a bug introduced in Synapse v1.35.1 where an `allow` key of a `m.room.join_rules` event could be applied for incorrect room versions and configurations. ([\#10208](https://github.com/matrix-org/synapse/issues/10208))
- Fix performance regression in responding to user key requests over federation. Introduced in Synapse v1.34.0rc1. ([\#10221](https://github.com/matrix-org/synapse/issues/10221))

Improved Documentation
----------------------

- Add a new guide to decoding request logs. ([\#8436](https://github.com/matrix-org/synapse/issues/8436))
- Mention in the sample homeserver config that you may need to configure max upload size in your reverse proxy. Contributed by @aaronraimist. ([\#10122](https://github.com/matrix-org/synapse/issues/10122))
- Fix broken links in documentation. ([\#10180](https://github.com/matrix-org/synapse/issues/10180))
- Deploy a snapshot of the documentation website upon each new Synapse release. ([\#10198](https://github.com/matrix-org/synapse/issues/10198))

Deprecations and Removals
-------------------------

- The current spam checker interface is deprecated in favour of a new generic modules system. See the [upgrade notes](https://matrix-org.github.io/synapse/develop/upgrade#deprecation-of-the-current-spam-checker-interface) for more information on how to update to the new system. ([\#10062](https://github.com/matrix-org/synapse/issues/10062), [\#10210](https://github.com/matrix-org/synapse/issues/10210), [\#10238](https://github.com/matrix-org/synapse/issues/10238))
- Stop supporting the unstable spaces prefixes from MSC1772. ([\#10161](https://github.com/matrix-org/synapse/issues/10161))
- Remove Synapse's support for automatically fetching and renewing certificates using the ACME v1 protocol. This protocol has been fully turned off by Let's Encrypt for existing installations on June 1st 2021. Admins previously using this feature should use a [reverse proxy](https://matrix-org.github.io/synapse/develop/reverse_proxy.html) to handle TLS termination, or use an external ACME client (such as [certbot](https://certbot.eff.org/)) to retrieve a certificate and key and provide them to Synapse using the `tls_certificate_path` and `tls_private_key_path` configuration settings. ([\#10194](https://github.com/matrix-org/synapse/issues/10194))

Internal Changes
----------------

- Update the database schema versioning to support gradual migration away from legacy tables. ([\#9933](https://github.com/matrix-org/synapse/issues/9933))
- Add type hints to the federation servlets. ([\#10080](https://github.com/matrix-org/synapse/issues/10080))
- Improve OpenTracing for event persistence. ([\#10134](https://github.com/matrix-org/synapse/issues/10134), [\#10193](https://github.com/matrix-org/synapse/issues/10193))
- Clean up the interface for injecting OpenTracing over HTTP. ([\#10143](https://github.com/matrix-org/synapse/issues/10143))
- Limit the number of in-flight `/keys/query` requests from a single device. ([\#10144](https://github.com/matrix-org/synapse/issues/10144))
- Refactor EventPersistenceQueue. ([\#10145](https://github.com/matrix-org/synapse/issues/10145))
- Document `SYNAPSE_TEST_LOG_LEVEL` to see the logger output when running tests. ([\#10148](https://github.com/matrix-org/synapse/issues/10148))
- Update the Complement build tags in GitHub Actions to test currently experimental features. ([\#10155](https://github.com/matrix-org/synapse/issues/10155))
- Add a `synapse_federation_soft_failed_events_total` metric to track how often events are soft failed. ([\#10156](https://github.com/matrix-org/synapse/issues/10156))
- Fetch the corresponding complement branch when performing CI. ([\#10160](https://github.com/matrix-org/synapse/issues/10160))
- Add some developer documentation about boolean columns in database schemas. ([\#10164](https://github.com/matrix-org/synapse/issues/10164))
- Add extra logging fields to better debug where events are being soft failed. ([\#10168](https://github.com/matrix-org/synapse/issues/10168))
- Add debug logging for when we enter and exit `Measure` blocks. ([\#10183](https://github.com/matrix-org/synapse/issues/10183))
- Improve comments in structured logging code. ([\#10188](https://github.com/matrix-org/synapse/issues/10188))
- Update [MSC3083](https://github.com/matrix-org/matrix-doc/pull/3083) support with modifications from the MSC. ([\#10189](https://github.com/matrix-org/synapse/issues/10189))
- Remove redundant DNS lookup limiter. ([\#10190](https://github.com/matrix-org/synapse/issues/10190))
- Upgrade `black` linting tool to 21.6b0. ([\#10197](https://github.com/matrix-org/synapse/issues/10197))
- Expose OpenTracing trace id in response headers. ([\#10199](https://github.com/matrix-org/synapse/issues/10199))

Synapse 1.36.0 (2021-06-15)
===========================

No significant changes.

Synapse 1.36.0rc2 (2021-06-11)
==============================

Bugfixes
--------

- Fix a bug which caused  presence updates to stop working some time after a restart, when using a presence writer worker. Broke in v1.33.0. ([\#10149](https://github.com/matrix-org/synapse/issues/10149))
- Fix a bug when using federation sender worker where it would send out more presence updates than necessary, leading to high resource usage. Broke in v1.33.0. ([\#10163](https://github.com/matrix-org/synapse/issues/10163))
- Fix a bug where Synapse could send the same presence update to a remote twice. ([\#10165](https://github.com/matrix-org/synapse/issues/10165))

Synapse 1.36.0rc1 (2021-06-08)
==============================

Features
--------

- Add new endpoint `/_matrix/client/r0/rooms/{roomId}/aliases` from Client-Server API r0.6.1 (previously [MSC2432](https://github.com/matrix-org/matrix-doc/pull/2432)). ([\#9224](https://github.com/matrix-org/synapse/issues/9224))
- Improve performance of incoming federation transactions in large rooms. ([\#9953](https://github.com/matrix-org/synapse/issues/9953), [\#9973](https://github.com/matrix-org/synapse/issues/9973))
- Rewrite logic around verifying JSON object and fetching server keys to be more performant and use less memory. ([\#10035](https://github.com/matrix-org/synapse/issues/10035))
- Add new admin APIs for unprotecting local media from quarantine. Contributed by @dklimpel. ([\#10040](https://github.com/matrix-org/synapse/issues/10040))
- Add new admin APIs to remove media by media ID from quarantine. Contributed by @dklimpel. ([\#10044](https://github.com/matrix-org/synapse/issues/10044))
- Make reason and score parameters optional for reporting content. Implements [MSC2414](https://github.com/matrix-org/matrix-doc/pull/2414). Contributed by Callum Brown. ([\#10077](https://github.com/matrix-org/synapse/issues/10077))
- Add support for routing more requests to workers. ([\#10084](https://github.com/matrix-org/synapse/issues/10084))
- Report OpenTracing spans for database activity. ([\#10113](https://github.com/matrix-org/synapse/issues/10113), [\#10136](https://github.com/matrix-org/synapse/issues/10136), [\#10141](https://github.com/matrix-org/synapse/issues/10141))
- Significantly reduce memory usage of joining large remote rooms. ([\#10117](https://github.com/matrix-org/synapse/issues/10117))

Bugfixes
--------

- Fixed a bug causing replication requests to fail when receiving a lot of events via federation. ([\#10082](https://github.com/matrix-org/synapse/issues/10082))
- Fix a bug in the `force_tracing_for_users` option introduced in Synapse v1.35 which meant that the OpenTracing spans produced were missing most tags. ([\#10092](https://github.com/matrix-org/synapse/issues/10092))
- Fixed a bug that could cause Synapse to stop notifying application services. Contributed by Willem Mulder. ([\#10107](https://github.com/matrix-org/synapse/issues/10107))
- Fix bug where the server would attempt to fetch the same history in the room from a remote server multiple times in parallel. ([\#10116](https://github.com/matrix-org/synapse/issues/10116))
- Fix a bug introduced in Synapse 1.33.0 which caused replication requests to fail when receiving a lot of very large events via federation. ([\#10118](https://github.com/matrix-org/synapse/issues/10118))
- Fix bug when using workers where pagination requests failed if a remote server returned zero events from `/backfill`. Introduced in 1.35.0. ([\#10133](https://github.com/matrix-org/synapse/issues/10133))

Improved Documentation
----------------------

- Clarify security note regarding hosting Synapse on the same domain as other web applications. ([\#9221](https://github.com/matrix-org/synapse/issues/9221))
- Update CAPTCHA documentation to mention turning off the verify origin feature. Contributed by @aaronraimist. ([\#10046](https://github.com/matrix-org/synapse/issues/10046))
- Tweak wording of database recommendation in `INSTALL.md`. Contributed by @aaronraimist. ([\#10057](https://github.com/matrix-org/synapse/issues/10057))
- Add initial infrastructure for rendering Synapse documentation with mdbook. ([\#10086](https://github.com/matrix-org/synapse/issues/10086))
- Convert the remaining Admin API documentation files to markdown. ([\#10089](https://github.com/matrix-org/synapse/issues/10089))
- Make a link in docs use HTTPS. Contributed by @RhnSharma. ([\#10130](https://github.com/matrix-org/synapse/issues/10130))
- Fix broken link in Docker docs. ([\#10132](https://github.com/matrix-org/synapse/issues/10132))

Deprecations and Removals
-------------------------

- Remove the experimental `spaces_enabled` flag. The spaces features are always available now. ([\#10063](https://github.com/matrix-org/synapse/issues/10063))

Internal Changes
----------------

- Tell CircleCI to build Docker images from `main` branch. ([\#9906](https://github.com/matrix-org/synapse/issues/9906))
- Simplify naming convention for release branches to only include the major and minor version numbers. ([\#10013](https://github.com/matrix-org/synapse/issues/10013))
- Add `parse_strings_from_args` for parsing an array from query parameters. ([\#10048](https://github.com/matrix-org/synapse/issues/10048), [\#10137](https://github.com/matrix-org/synapse/issues/10137))
- Remove some dead code regarding TLS certificate handling. ([\#10054](https://github.com/matrix-org/synapse/issues/10054))
- Remove redundant, unmaintained `convert_server_keys` script. ([\#10055](https://github.com/matrix-org/synapse/issues/10055))
- Improve the error message printed by synctl when synapse fails to start. ([\#10059](https://github.com/matrix-org/synapse/issues/10059))
- Fix GitHub Actions lint for newsfragments. ([\#10069](https://github.com/matrix-org/synapse/issues/10069))
- Update opentracing to inject the right context into the carrier. ([\#10074](https://github.com/matrix-org/synapse/issues/10074))
- Fix up `BatchingQueue` implementation. ([\#10078](https://github.com/matrix-org/synapse/issues/10078))
- Log method and path when dropping request due to size limit. ([\#10091](https://github.com/matrix-org/synapse/issues/10091))
- In Github Actions workflows, summarize the Sytest results in an easy-to-read format. ([\#10094](https://github.com/matrix-org/synapse/issues/10094))
- Make `/sync` do fewer state resolutions. ([\#10102](https://github.com/matrix-org/synapse/issues/10102))
- Add missing type hints to the admin API servlets. ([\#10105](https://github.com/matrix-org/synapse/issues/10105))
- Improve opentracing annotations for `Notifier`. ([\#10111](https://github.com/matrix-org/synapse/issues/10111))
- Enable Prometheus metrics for the jaeger client library. ([\#10112](https://github.com/matrix-org/synapse/issues/10112))
- Work to improve the responsiveness of `/sync` requests. ([\#10124](https://github.com/matrix-org/synapse/issues/10124))
- OpenTracing: use a consistent name for background processes. ([\#10135](https://github.com/matrix-org/synapse/issues/10135))

(wiz)

2021-07-01 07:42:48 UTC MAIN commitmail json YAML

doc: Updated net/tor to 0.4.6.6

(wiz)

2021-07-01 07:42:38 UTC MAIN commitmail json YAML

tor: update to 0.4.6.6.

Changes in version 0.4.6.6 - 2021-06-30
  Tor 0.4.6.6 makes several small fixes on 0.4.6.5, including one that
  allows Tor to build correctly on older versions of GCC. You should
  upgrade to this version if you were having trouble building Tor
  0.4.6.5; otherwise, there is probably no need.

  o Minor bugfixes (compilation):
    - Fix a compilation error when trying to build Tor with a compiler
      that does not support const variables in static initializers.
      Fixes bug 40410; bugfix on 0.4.6.5.
    - Suppress a strict-prototype warning when building with some
      versions of NSS. Fixes bug 40409; bugfix on 0.3.5.1-alpha.

  o Minor bugfixes (testing):
    - Enable the deterministic RNG for unit tests that covers the
      address set bloomfilter-based API's. Fixes bug 40419; bugfix
      on 0.3.3.2-alpha.

(wiz)

2021-07-01 07:34:47 UTC MAIN commitmail json YAML

doc: Updated devel/nspr to 4.32

(wiz)

2021-07-01 07:24:56 UTC MAIN commitmail json YAML

nspr: remove PLIST_VAR for 32-bit sun that has no corresponding match in PLIST

(wiz)

2021-07-01 07:23:00 UTC MAIN commitmail json YAML

2021-07-01 07:04:31 UTC MAIN commitmail json YAML

2021-07-01 07:04:15 UTC MAIN commitmail json YAML

Update gh to 1.12.1.

GitHub CLI 1.12.1
-----------------

  * Fix bug where branchProtectionRule doesn't exist in enterprise 2.22
  * fix repo create in org with license/ignore

GitHub CLI 1.12.0
-----------------

HELLO and welcome back to GitHub on the command line.

This is a pretty cool release.

gh browse

Taking inspiration from hub, we've added gh browse. This is a multipurpose
command for getting from your terminal to your browser.

My favorite use is to open up lines of code for sharing with others:

gh browse pkg/cmd/repo/garden/garden.go:520

You can also get directly to a repo's settings:

gh browse --settings

The command can do much more, check out gh browse -h!

We're also excited to shout out the contributors who made this new feature
possible, a group of students in the MinT program.

Add .gitignore and LICENSE when creating repositories

When creating a repository from scratch (gh repo create mycoolrepo), you can
now select from GitHub's .gitignore and LICENSE templates to include with the
new repository.

Connect via a unix socket

A new config value http_unix_socket can be configured to a local path to push
all of gh's traffic over a socket.

GitHub CLI 1.11.0
-----------------

  * Add support for environment secrets
  * run list: add "age" column and columns headers in output
  * Add support for XDG Base Directory specification

    Additionally, the default configuration location on Windows is now changed
    from ~/.config/gh/ to %AppData%.

  * Include number alongside the title in issue/pr view

GitHub CLI 1.10.0
-----------------

Improvements to JSON exporting

  * Add gh repo list/view --json support
  * Add gh release view --json support
  * Fixes numerous issues with gh pr list/view --json support
      + fetching closed field
      + fetching date fields like createdAt or mergedAt
      + fetching files field
  * Fix exporting milestone field for issues and PRs
  * Add commits field to JSON export for PRs
  * Show more than 100 comments in gh issue view --json comments
  * Add shell completion for valid --json flag values

New Features

  * Add gh repo fork --org option
  * Allow passinggh alias set value via standard input
  * Prompt for value in gh secret set
  * Update gh api placeholder syntax to {owner}, {repo} to match GitHub API
    documentation
  * Extend our package repository to support Ubuntu Hirsute and Kali linux

(bsiegert)

2021-07-01 06:16:25 UTC MAIN commitmail json YAML

2021-07-01 06:13:45 UTC MAIN commitmail json YAML

py-numpy: set PYTHON_VERSIONS_INCOMPATIBLE in bl3.mk

(nia)

2021-07-01 06:10:32 UTC MAIN commitmail json YAML

2021-07-01 06:08:52 UTC MAIN commitmail json YAML

2021-07-01 06:06:33 UTC MAIN commitmail json YAML

2021-07-01 06:05:31 UTC MAIN commitmail json YAML

2021-07-01 06:04:47 UTC MAIN commitmail json YAML

2021-07-01 06:03:40 UTC MAIN commitmail json YAML

2021-07-01 05:54:12 UTC MAIN commitmail json YAML

security/Makefile: + libuecc.

(wiz)

2021-07-01 05:54:00 UTC MAIN commitmail json YAML

net/Makefile: + fastd.

(wiz)

2021-07-01 05:53:49 UTC MAIN commitmail json YAML

math/Makefile: + smath-studio

(wiz)

2021-07-01 05:47:12 UTC MAIN commitmail json YAML

alsa-lib: remove unused patch

(wiz)

2021-07-01 05:46:29 UTC MAIN commitmail json YAML

2021-06-30 22:20:32 UTC MAIN commitmail json YAML

(net/freeradius) Fix package, adding REPLACE_PERL

(mef)

2021-06-30 15:42:42 UTC MAIN commitmail json YAML

doc: Updated audio/alsa-plugins-{oss|pulse} to 1.2.5

(ryoon)

2021-06-30 15:41:54 UTC MAIN commitmail json YAML

alsa-plugins-{oss|pulse}: Update to 1.2.5

Changelog:
Core

    Release v1.2.5

A52 Output plugin

    pcm_a52: Don't move bytes within the outbuf
    pcm_a52: Don't pass EAGAIN errors from the slave to the caller
    pcm_a52: Determine virtual hardware pointer upon slave pointer

Automatic upmix / downmix plugins

    upmix: complete generalizing format

Jack PCM plugin

    jack: add option to allow non-jack-aligned period size

OSS Mixer -> ALSA Control plugin

    oss: fix the config (port -> device)

PulseAudio -> ALSA plugin

    pulse: pcm - handle reading pulse stream hole

USB stream plugin

    usb_stream: use snd_config_get_card() to decode the card number

(ryoon)

2021-06-30 15:41:10 UTC MAIN commitmail json YAML

doc: Updated audio/alsa-utils to 1.2.5.1

(ryoon)

2021-06-30 15:40:37 UTC MAIN commitmail json YAML

alsa-utils: Update to 1.2.5.1

Changelog:
Core

    Release v1.2.5.1

ALSA Control (alsactl)

    utils.c: Include limits.h explicitly to fix build on musl
    alsactl: load_state: Only delete config if one was loaded
    alsactl: load_state() - initialize config variable for the open_failed case
    alsactl: fix lock_fd unlock in load_configuration() - error path
    alsactl: state - fix ���item��� may be used uninitialized gcc warning
    alsactl: check for error values from snd_config_get...()
    alsactl: init() - return error value from snd_card_iterator_sinit() call
    alsactl: return error value in dump_config_tree()
    alsactl: fix the nested iteration

Audio Transfer utility

    axfer: fix wrong calloc() item size in allocate_containers()

alsatplg (topology)

    topology: fix few coverity detected defects
    topology: fix potential null pointer from strchr

aplay/arecord

    arecord: Inform users when 8-bit sampling is used on tty
    Revert "aplay: try to use 16-bit format to increase capture quality"

aseqnet

    added an option to aseqnet to optionally set the midi process name

(ryoon)

2021-06-30 15:31:18 UTC MAIN commitmail json YAML

doc: Updated chat/weechat to 3.2

(ryoon)

2021-06-30 15:30:57 UTC MAIN commitmail json YAML

weechat: Update to 3.2

Changelog:
== Version 3.2 (2021-06-13)

New features::

  * core: use XDG directories by default (config, data, cache, runtime) (issue 1285)
  * core: add option weechat.network.gnutls_ca_system, rename option weechat.network.gnutls_ca_file to weechat.network.gnutls_ca_user (now evaluated), delete and reload certificates when options are changed (issue 972)
  * core: evaluate option weechat.plugin.path, change default value to "${weechat_data_dir}/plugins"
  * core: add options to customize commands executed on system signals received (SIGHUP, SIGQUIT, SIGTERM, SIGUSR1, SIGUSR2) (issue 1595)
  * core: quit WeeChat by default when signal SIGHUP is received in normal run, reload configuration in weechat-headless (issue 1595)
  * core: add signals "cursor_start" and "cursor_end"
  * api: add function crypto_hmac (issue 1628)
  * api: add translated string in evaluation of expressions with "translate:xxx"
  * api: add evaluation of WeeChat directories with "${weechat_xxx_dir}" in evaluated strings
  * api: add optional key "directory" in hashtable options of function/modifier string_eval_path_home
  * api: add supported prefixes "${weechat_xxx_dir}" in function mkdir_home
  * api: add infos "weechat_config_dir", "weechat_data_dir", "weechat_cache_dir" and "weechat_runtime_dir"
  * api: add support of pointer names in function string_eval_expression (direct and in hdata)
  * api: add info "weechat_daemon"
  * buflist: add option buflist.format.tls_version
  * fifo: change default value of option fifo.file.path to "${weechat_runtime_dir}/weechat_fifo_${info:pid}"
  * irc: add support of SASL mechanisms SCRAM-SHA-1, SCRAM-SHA-256 and SCRAM-SHA-512 (issue 1628)
  * irc: add variable "${target}" (target nick) in commands /kick and /kickban
  * irc: add bar item "tls_version", add options irc.color.item_tls_version_ok, irc.color.item_tls_version_deprecated and irc.color.item_tls_version_insecure (issue 1622)
  * irc: evaluate server options "sasl_key" and "ssl_cert"
  * logger: change default value of option logger.file.path to "${weechat_data_dir}/logs"
  * python: add stub for WeeChat API (issue 1377)
  * relay: evaluate option relay.network.ssl_cert_key, change default value to "${weechat_config_dir}/ssl/relay.pem"
  * script: change default value of option script.scripts.path to "${weechat_cache_dir}/script"
  * trigger: add variables "${tg_shell_argc}" and "${tg_shell_argvN}" in command trigger evaluated strings (issue 1624)
  * xfer: change default value of option xfer.file.download_path to "${weechat_data_dir}/xfer"

Bug fixes::

  * core: split startup commands before evaluating them (issue 1643)
  * core: set server name when connecting to server with TLS (SNI extension) only if it's not an IPV4/IPv6 (issue 1635)
  * core: use function mallinfo2 instead of mallinfo when available (issue 1636)
  * core: display a warning when the file with certificate authorities is not found (option weechat.network.gnutls_ca_file)
  * core: evaluate left/right part of comparison after split on the comparison operator in ${if:xxx} (issue 1627)
  * core: prevent switching to start of visited buffers when jumping to next (issue 1591, issue 1592)
  * core: recreate buflist and fset bars on /reload when WeeChat is started without configuration files (issue 1618)
  * buflist: fix comparison of hotlists in option buflist.look.sort (issue 1621)
  * irc: split server command before evaluating it (issue 1643)
  * xfer: make file transfer fail when option xfer.file.auto_rename is off and file already exists (issue 1633)

Tests::

  * core: switch from Ubuntu 18.04 to 20.04 in CI
  * trigger: add tests on main trigger functions

Build::

  * core: remove build option CA_FILE
  * core: set WeeChat home to empty string by default in CMake and autotools

(ryoon)

2021-06-30 15:11:24 UTC MAIN commitmail json YAML

doc: Updated www/firefox-l10n to 89.0.2

(ryoon)

2021-06-30 15:10:48 UTC MAIN commitmail json YAML

firefox-l10n: Update to 89.0.2

* Sync with www/firefox-89.0.2.

(ryoon)

2021-06-30 15:10:28 UTC MAIN commitmail json YAML

doc: Updated www/firefox to 89.0.2

(ryoon)

2021-06-30 15:09:56 UTC MAIN commitmail json YAML

firefox: Update to 89.0.2

Changelog:
89.0.2
Fixed

  * Fix occasional hangs with Software WebRender on Linux (bug 1708224)

89.0.1
Fixed

  * Windows: Resolved an issue causing some screen readers to not interact
    correctly with Firefox anymore (bug 1714212)

  * Updated translations, including full Spanish (Mexico) localization and
    other improvements (bug 1714946)

  * Fix various font related regressions (bug 1694174)

  * Linux: Fix performance and stability regressions with WebRender (bug
    1715895, bug 1715902)

  * macOS: Fix screen flickering when scrolling a page on an external monitor (
    bug 1715452)

  * Enterprise: Fix for the DisableDeveloperTools policy not having effect
    anymore (bug 1715777)

  * Linux: Fix broken scrollbars on some GTK themes (bug 1714103)

  * Various stability and security fixes.

Security fixes:
#CVE-2021-29968: Out of bounds read when drawing text characters onto a Canvas

89.0
New

  * Say hello to a fresh new Firefox, designed to get you where you want to go
    even faster. We??ve redesigned and modernized the core experience to be
    cleaner, more inviting, and easier to use.

    Beginning in 89, you??ll notice a number of changes, including:

    Simplified browser chrome and toolbar: Less frequently used items removed
    to focus on the most important navigation items.

    Simplified browser chrome and toolbar screenshot

    Clear, streamlined menus: Re-organized and prioritized menu content
    according to usage. Updated labels and removed iconography.

    Clear, streamlined menus screenshot

    Updated prompts: Infobars, panels, and modals have a cleaner design and
    clearer language.

    Updated prompts screenshot

    Inspired tab design: Floating tabs neatly contain information and surface
    cues when you need them, like visual indicators for audio controls. The
    rounded design of the active tab supports focus and signals the ability to
    easily move the tab as needed.

    Inspired tab design screenshot

    Fewer interruptions: Reduced number of alerts and messages, so you can
    browse with fewer distractions.

    Cohesive, calmer visuals: Lighter iconography, a refined color palette, and
    more consistent styling throughout.

    This release also includes enhancements to our privacy offerings:

      + We??ve enhanced the privacy of the Firefox Browser??s Private Browsing
        mode with Total Cookie Protection, which confines cookies to the site
        where they were created, preventing companies from using cookies to
        track your browsing across sites. This feature was originally launched
        in Firefox??s ETP Strict mode.
  * For macOS users, we're introducing the elastic overscroll effect known from
    many other applications. A gentle bouncing animation will indicate that you
    reached the end of the page.

    In addition, we added support for smart zoom. Double-tap with two fingers
    on your trackpad, or with a single finger on your Magic Mouse, to zoom the
    content below your cursor into focus.

  * Native context menus: Context menus on macOS are now native and support
    Dark Mode.

    macOS native context menus screenshot

  * WebRender is now enabled on Linux with the NVIDIA binary driver and on all
    desktop environments

#

Fixed

  * Colors in Firefox on macOS will no longer be saturated on wide gamut
    displays, untagged images are properly treated as sRGB, and colors in
    images tagged as sRGB will now match CSS colors.

  * In full screen mode on macOS, moving your mouse to the top of the screen
    will no longer hide your tabs behind the system menu bar.

  * Also in full screen mode on macOS, it is now possible to hide the browser
    toolbars for a fully immersive full screen experience. This brings macOS in
    line with Windows and Linux.

  * Various stability and security fixes.

#

Changed

  * Introducing a non-native implementation of web form controls, which
    delivers a new modern design and some improvements to page load
    performance. Watch for layout bugs in web pages that make assumptions about
    the dimensions or styling of form controls.

  * The screenshots feature is available in the right-click context menu. You
    can also add a screenshots shortcut to your toolbar. Learn more.

Security fixes:
#CVE-2021-29965: Password Manager on Firefox for Android susceptible to domain
spoofing
#CVE-2021-29960: Filenames printed from private browsing mode incorrectly
retained in preferences
#CVE-2021-29961: Firefox UI spoof using `<select>` elements and CSS scaling
#CVE-2021-29963: Shared cookies for search suggestions in private browsing mode
#CVE-2021-29964: Out of bounds-read when parsing a `WM_COPYDATA` message
#CVE-2021-29959: Devices could be re-enabled without additional permission
prompt
#CVE-2021-29962: No rate-limiting for popups on Firefox for Android
#CVE-2021-29967: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
#CVE-2021-29966: Memory safety bugs fixed in Firefox 89

(ryoon)

2021-06-30 14:32:12 UTC MAIN commitmail json YAML

Updated misc/stellarium, databases/mongo-tools

(adam)

2021-06-30 14:31:46 UTC MAIN commitmail json YAML

mongo-tools: updated to 4.2.14

4.2.14:
Unknown changes

(adam)

2021-06-30 14:26:11 UTC MAIN commitmail json YAML

Re-add patches I wrote in October 2018:

    glib2's gobject subsystem is essentially a wrapper for dlopen. In
    view of comments in PR lib/49791 which can be summarised as
    "RTLD_GLOBAL is a bug", make gobject use RTLD_DEFAULT instead.

This should fix PR pkg/56212

The upstream merge request

    https://gitlab.gnome.org/GNOME/glib/-/merge_requests/2171

has been updated - feel free to add a description of the problems you
experienced without this patch to it.

(prlw1)

2021-06-30 14:09:26 UTC MAIN commitmail json YAML

stellarium: updated to 0.21.1

0.21.1 [2021-06-24]
The major changes of this version:
- Updated designations of stars and handling of list of designations
  and common names those stars
- Updated Almagest and al-Sufi skycultures
- Many changes in plugins
- Many fixes in core and plugins for support HiDPI devices
- Enhancements in visualization of markings and in scripting engine

(adam)

2021-06-30 11:33:59 UTC MAIN commitmail json YAML

doc: Updated www/so to 0.4.5

(pin)

2021-06-30 11:33:38 UTC MAIN commitmail json YAML

www/so: update to 0.4.5

[v0.4.5]
Added:
- NetBSD installation option. Thanks voidpin.

Fixed:
- Google parser went out of date.
- Panic from termimad.

[v0.4.4]
-Reduce crate size considerably using 'include' directive in manifest.
-add whole 'themes' folder, it's required during compilation.
-Fix packaging issue due to benchmarks not found.

(pin)

2021-06-30 10:18:26 UTC MAIN commitmail json YAML

doc: Updated x11/gnome-desktop3 to 40.2

(cirnatdan)

2021-06-30 09:36:33 UTC MAIN commitmail json YAML

gnome-desktop: Update x11/gnome-desktop3 to 40.2

============
Version 40.2
============

- Fix crash loading keyboard settings panel (#190, Peter Hutterer)
- Translation updates

(cirnatdan)

2021-06-30 09:02:38 UTC MAIN commitmail json YAML

doc: Updated devel/cvsgraph to 1.7.2

(fcambus)

2021-06-30 09:02:26 UTC MAIN commitmail json YAML

cvsgraph: update to 1.7.2.

ChangeLog:

- Make config option rev_hidenumber function properly for branch boxes
- Also apply rev_hidenumber to folded branch boxes

(fcambus)

2021-06-30 08:52:59 UTC MAIN commitmail json YAML

doc: Updated fonts/Inter-UI to 3.19

(fcambus)

2021-06-30 08:52:47 UTC MAIN commitmail json YAML

Inter-UI: update to 3.19.

Changes since v3.18:

- Fixes a variable-font interpolation bug with Roman numeral eight. #382
- Fixes spacing of the latin epsilon glyph thanks to @hcsch. #377
- Adds new glyph U+25AA "blackSmallSquare" including calt mappings for
  case sensitivity. #373
- Removes U+20E3 "uni20E3" COMBINING ENCLOSING KEYCAP which triggers a
  bug in chromium, causing certain emoji to not render properly. #371
- Improvements to Roman numerals

Changes since v3.17:

- Adjusts vertical metrics metadata to that of v3.15 and older. This
  should fix any vertical alignment issues that might have occurred with
  v3.17. #361
- Fixes several issues with italics introduced by Glyphs 3 upgrade:
- Fixes an issue with backslash in Italic masters. #362
- Fixes issues with afii10026 and uni0376 in italic masters
- Fixes issue with italic q U+0071 by inlining the shape instead of
  using components. #360
- Fixes issue with U+035E COMBINING DOUBLE MACRON and U+20F0 COMBINING
  ASTERISK ABOVE in Thin Italic. #363
- Fixes positioning issue with U+0358 COMBINING DOT ABOVE RIGHT
- Improvements to U+20DC COMBINING FOUR DOTS ABOVE and U+20DB COMBINING
  THREE DOTS ABOVE
- Improvements to U+204E LOW ASTERISK
- Improved positioning via mark anchors of combining glyphs U+20F0,
  U+035E and U+035F. #363
- Changes glyph shape of Latin upper-case iota. #359
- Improved glyph composition via ccmp for enclosed glyphs like
  U+0041,U+20DD. #335

Changes since v3.15:

- Fixes issues with appearance in Microsoft Word. #352 (note that #156
  is still unresolved although we have made some progress in v3.16 toward
  developing workarounds for certain printers.)
- Fixes double grave interpolation issue. #317
- Fixes design issue with glyphs acutedblnosp, dblgravecmb, uni02F6 and
  uni02F5. #339
- Fixes missing or incorrect mark anchors in several turn* glyphs. #336
- Adds Baht currency glyph U+0E3F. #323
- Improvement to Latin iota (lower and upper case) glyphs. #340
- Improvement to some numerical fraction glyphs
- Adds a dummy DSIG table to address issues with Microsoft Office 2003
  and older
- Improvements when using Inter with certain older Microsoft products
  by decomposing any nested components which some of that software has
  issues with
- Addresses a major regression in v3.16 where several italic glyphs got
  messed up due to a Glyphs 3 version upgrade of the source file. This
  only affected users of v3.16 which was only released for about 12 hours
  before being replaced with this release v3.17. #360

Changes since v3.14:

- Fixes an issue with the variable font, where some software would not
  list the various weights correctly. #308
- Fixes an issue with rendering on Windows with ClearType where some
  glyphs using advanced OpenType features (component transformations)
  would render incorrectly, with a slight vertical offset. #251
- Improvements to Elfdalian, improving the /yogonek and /eth glyphs #285
- Improvements to /eth U+00F0 glyph f7924a2#commitcomment-41610142

Changes since v3.13:

- Fixes position of ring at bottom of /Aringbelow U+1E00. #266
- Fixes interpolation issues with /omegatitlocyrillic /omega and
  /pisymbolgreek. #272
- Fixes an issue with /dotmacroncomb.cn used by glyphs like
  /Adotmacron. #298
- Adds /bitcoin glyph U+20BF. #284
- Adds /insertionsymbol U+2380. #290
- Adds specialized glyphs /Aringogonek, /aringogonek, /Yogonek and
  /yogonek to fully support Elfdalian script. #285
- Adds U+EE01, a vertically-centered colon used by Android on the lock
  screen #212
- Improves kerning of /quotedblright,/quoteright and /period,/comma. #299
- Improves design of "Theta" U+03F4, U+0398 and "Fita" U+0472,
  U+0473. #263, #264
- Improves design of /yhook and use /ucyrillic in /Ukcyrillic
  /ukcyrillic. #273
- Improves design of /dzaltone and /dzcurl. #268
- Improves design of /percent, /perthousand and /pertenthousand
  glyphs. #237
- Improves variable-font metadata (STAT table). #265
- Improves (tunes) calt case substitutions, e.g. "x -X". #251
- Changes codepoint mapping of /q.sups from U+146B to private-area
  U+E163. #275

Changes since v3.12:

- Improvements to Greek and Cyrillic glyphs #240
- New stylistic set ss04 which is almost identical to ss02 with the
  exception of no slashed zero #252
- Fixes interpolation issues with several diacritics in the light
  weights #257
- Removes codepoint mappings for some math-related enclosed glyphs that
  would be too large when using the circle-enclosed glyphs #250
- Various improvements and adjustments to glyph shapes, spacing and
  kerning
- Improves OpenType feature name metadata

Changes since v3.11:

- This release includes major improvements Thin, Light and ExtraLight
  styles (including italic counterparts) incorporating months of work
  by @KatjaSchimmel

(fcambus)

2021-06-30 07:56:10 UTC MAIN commitmail json YAML

doc: Updated devel/py-codespell to 2.1.0

(fcambus)

2021-06-30 07:55:58 UTC MAIN commitmail json YAML

py-codespell: update to 2.1.0.

Changes not documented.

(fcambus)

2021-06-30 06:02:32 UTC MAIN commitmail json YAML

Updated devel/py-astroid, devel/py-pylint

(adam)

2021-06-30 06:02:15 UTC MAIN commitmail json YAML

py-pylint: updated to 2.9.0

What's New in Pylint 2.9.0?
===========================
Release date: 2021-06-29

* Python 3.10 is now supported.

* Add type annotations to pyreverse dot files

* Fix missing support for detecting deprecated aliases to existing
  functions/methods.

* astroid has been upgraded to 2.6.1

* Added various deprecated functions/methods for python 3.10, 3.7, 3.6 and 3.3

* Fix false positive ``useless-type-doc`` on ignored argument using ``pylint.extensions.docparams``
  when a function was typed using pep484 but not inside the docstring.

* ``setuptools_scm`` has been removed and replaced by ``tbump`` in order to not
  have hidden runtime dependencies to setuptools

* Fix a crash when a test function is decorated with ``@pytest.fixture`` and astroid can't
  infer the name of the decorator when using ``open`` without ``with``.

* Added ``deprecated-decorator``: Emitted when deprecated decorator is used.

* Added ``ignore-paths`` behaviour. Defined regex patterns are matched against full file path.

* Fix false negative for ``consider-using-with`` if calls like ``open()`` were used outside of assignment expressions.

* The warning for ``arguments-differ`` now signals explicitly the difference it detected
  by naming the argument or arguments that changed and the type of change that occurred.

* Suppress ``consider-using-with`` inside context managers.

* Added ``--fail-on`` option to return non-zero exit codes regardless of ``--fail-under`` value.

* numversion tuple contains integers again to fix multiple pylint's plugins that relied on it

* Fix false-positive ``too-many-ancestors`` when inheriting from builtin classes,
  especially from the ``collections.abc`` module

* Stdlib deprecated modules check is moved to stdlib checker. New deprecated
  modules are added.

* Fix raising false-positive ``no-member`` on abstract properties

* Created new error message called ``arguments-renamed`` which identifies any changes at the parameter
  names of overridden functions.

* New checker ``consider-using-dict-items``. Emitted  when iterating over dictionary keys and then
  indexing the same dictionary with the key within loop body.

* Don't emit ``import-error`` if import guarded behind ``if sys.version_info >= (x, x)``

* Fix incompatibility with Python 3.6.0 caused by ``typing.Counter`` and ``typing.NoReturn`` usage

* New checker ``use-maxsplit-arg``. Emitted either when accessing only the first or last
  element of ``str.split()``.

* Add ignore_signatures to duplicate code checker

* Fix documentation errors in "Block disables" paragraph of User Guide.

* New checker ``unnecessary-dict-index-lookup``. Emitted when iterating over dictionary items
  (key-value pairs) and accessing the value by index lookup.

* New checker``consider-using-from-import``. Emitted when a submodule/member of a package is imported and aliased
  with the same name.

* Allow comma-separated list in ``output-format`` and separate output files for
  each specified format.

* Make ``using-constant-test`` detect constant tests consisting of list literals like ``[]`` and
  ``[1, 2, 3]``.

* Improved error message of ``unnecessary-comprehension`` checker by providing code suggestion.

* New checker ``unused-private-member``. Emitted when a private member (i.e., starts with ``__``) of a class
  is defined but not used.

* Fix false negative of ``consider-using-enumerate`` when iterating over an attribute.

* New checker ``invalid-class-object``. Emitted when a non-class is assigned to a ``__class__`` attribute.

* Fix a crash when a plugin from the configuration could not be loaded and raise an error
  'bad-plugin-value' instead

* Added handling of floating point values when parsing configuration from pyproject.toml

* ``invalid-length-returned``, now also works when nothing at all is returned
  following an upgrade in astroid.

* ``logging-format-interpolation`` and ``logging-not-lazy``, now works on logger
  class created from renamed logging import following an upgrade in astroid.

* Fix false-positive ``no-member`` with generic base class

* Fix ``assigning-non-slot`` false-positive with base that inherits from ``typing.Generic``

* New checker ``invalid-all-format``. Emitted when ``__all__`` has an invalid format,
  i.e. isn't a ``tuple`` or ``list``.

* Fix false positive ``unused-variable`` and ``undefined-variable`` with
  Pattern Matching in Python 3.10

* New checker ``await-outside-async``. Emitted when await is used outside an async function.

* Clarify documentation for ``typing`` extension.

* Add new extension ``CodeStyleChecker``. It includes checkers that can improve code
  consistency. As such they don't necessarily provide a performance benefit
  and are often times opinionated.

* New checker ``consider-using-tuple``. Emitted when an in-place defined
  list or set can be replaced by a tuple.

* New checker ``consider-using-namedtuple-or-dataclass``. Emitted when dictionary values
  can be replaced by namedtuples or dataclass instances.

* Fix error that occurred when using ``slice`` as subscript for dict.

* Reduce false-positives around inference of ``.value`` and ``.name``
  properties on ``Enum`` subclasses, following an upgrade in astroid

* Fix issue with ``cached_property`` that caused ``invalid-overridden-method`` error
  when overriding a ``property``.

* Fix ``unused-import`` false positive for imported modules referenced in
  attribute lookups in type comments.

What's New in Pylint 2.8.3?
===========================
Release date: 2021-05-31

* Astroid has been pinned to 2.5.6 for the 2.8 branch.

(adam)

2021-06-30 05:59:28 UTC MAIN commitmail json YAML

py-astroid: updated to 2.6.1

What's New in astroid 2.6.1?
============================
Release date: 2021-06-29

* Fix issue with ``TypedDict`` for Python 3.9+

What's New in astroid 2.6.0?
============================
Release date: 2021-06-22

* Appveyor and travis are no longer used in the continuous integration

* ``setuptools_scm`` has been removed and replaced by ``tbump`` in order to not
  have hidden runtime dependencies to setuptools

* ``NodeNg``, the base node class, is now accessible from ``astroid`` or
  ``astroid.nodes`` as it can be used for typing.

* Update enum brain to improve inference of .name and .value dynamic class
  attributes

* Removed ``Repr``, ``Exec``, and ``Print`` nodes as the ``ast`` nodes
  they represented have been removed with the change to Python 3

* Deprecate ``Ellipsis`` node. It will be removed with the next minor release.
  Checkers that already support Python 3.8+ work without issues. It's only
  necessary to remove all references to the ``astroid.Ellipsis`` node.
  This changes will make development of checkers easier as the resulting tree for Ellipsis
  will no longer depend on the python version. **Background**: With Python 3.8 the
  ``ast.Ellipsis`` node, along with ``ast.Str``, ``ast.Bytes``, ``ast.Num``,
  and ``ast.NamedConstant`` were merged into ``ast.Constant``.

* Deprecated ``Index`` and ``ExtSlice`` nodes. They will be removed with the
  next minor release. Both are now part of the ``Subscript`` node.
  Checkers that already support Python 3.9+ work without issues.
  It's only necessary to remove all references to the ``astroid.Index`` and
  ``astroid.ExtSlice`` nodes. This change will make development of checkers
  easier as the resulting tree for ``ast.Subscript`` nodes will no longer
  depend on the python version. **Background**: With Python 3.9 ``ast.Index``
  and ``ast.ExtSlice`` were merged into the ``ast.Subscript`` node.

* Updated all Match nodes to be internally consistent.

* Add ``Pattern`` base class.

What's New in astroid 2.5.8?
============================
Release date: 2021-06-07

* Improve support for Pattern Matching

* Add lineno and col_offset for ``Keyword`` nodes and Python 3.9+

* Add global inference cache to speed up inference of long statement blocks

* Add a limit to the total number of nodes inferred indirectly as a result
  of inferring some node

(adam)

2021-06-29 17:32:52 UTC MAIN commitmail json YAML

openjdk8: backport kqueue fix from openjdk11

Although 8 doesn't seem to use kqueue by default the class is
still compiled so it's a good idea to have the correct values.
Bump PKGREVISION for this and recent changes.

(tnn)

2021-06-29 15:15:28 UTC MAIN commitmail json YAML

doc: Updated www/links-gui to 2.23

(fcambus)

2021-06-29 15:15:15 UTC MAIN commitmail json YAML

links-gui: update to 2.23.

=== RELEASE 2.23 ===

Tue May 18 20:35:55 CEST 2021 mikulas:

Fix a bug that the user could set floating-point parameters to nan
via command-line argument or config file option

Tue May 18 20:22:35 CEST 2021 mikulas:

Fix broken display if the user uses custom font and non-default
aspect ratio

Wed May 12 20:08:48 CEST 2021 mikulas:

Fix a bug that the code incorrectly assumed that mktime returns UTC

Sat May  1 17:56:50 CEST 2021 mikulas:

Add an option that enables cookie saving

(fcambus)

2021-06-29 15:13:36 UTC MAIN commitmail json YAML

doc: Updated www/links to 2.23

(fcambus)

2021-06-29 15:13:24 UTC MAIN commitmail json YAML

links: update to 2.23.

=== RELEASE 2.23 ===

Tue May 18 20:35:55 CEST 2021 mikulas:

Fix a bug that the user could set floating-point parameters to nan
via command-line argument or config file option

Tue May 18 20:22:35 CEST 2021 mikulas:

Fix broken display if the user uses custom font and non-default
aspect ratio

Wed May 12 20:08:48 CEST 2021 mikulas:

Fix a bug that the code incorrectly assumed that mktime returns UTC

Sat May  1 17:56:50 CEST 2021 mikulas:

Add an option that enables cookie saving

(fcambus)

2021-06-29 14:29:26 UTC MAIN commitmail json YAML

doc: Added math/smath-studio version 0.99.7822

(hauke)

2021-06-29 14:28:12 UTC MAIN commitmail json YAML

Add SMath Studio as math/smath-studio.

While the license allows to re-distribute the source tarball
unchanged, an automatic download fails, so it will have to be
downloaded in a browser.

From the upstream description:

SMath Studio is a tiny, powerful, free mathematical program with
WYSIWYG editor and complete units of measurements support.

It provides numerous computing features and rich user interface
translated into about 40 different languages. The application also
contains an integrated mathematical reference book.

It can be easily extended based on your needs. A built-in Extensions
Manager tool allows to get access to hundreds official and third-party
resources of the following types: usage examples, plug-ins, SMath
Viewer based applications, snippets, interface translations,
interactive books, handbooks and tutorials.

(hauke)

2021-06-29 13:36:54 UTC MAIN commitmail json YAML

Updated net/py-grpcio, net/py-grpcio-testing, net/py-grpcio-tools, security/py-asyncssh

(adam)

2021-06-29 13:36:26 UTC MAIN commitmail json YAML

py-asyncssh: updated to 2.7.0

Release 2.7.0 (19 Jun 2021)

Added support for the ProxyCommand config file option and a corresponding proxy_command argument in the SSH connection options, allowing a subprocess to be used to make the connection to the SSH server. When the config option is used, it should be fully compatible with OpenSSH percent expansion in the command to run.
Added support for accessing terminal information as properties in the SSHServerProcess class. As part of this change, both the environment and terminal modes are now available as read-only mappings. Thanks again to velavokr for suggesitng this and submitting a PR with a proposed version of the change.
Fixed terminal information passed to pty_requested() callback to properly reflect requested terminal type, size, and modes. Thanks go to velavokr for reporting this issue and proposing a fix.
Fixed an edge case where a connection object might not be cleaned up properly if the connection request was cancelled before it was fully established.
Fixed an issue where some unit tests weren窶冲 properly closing connection objects before exiting.

(adam)

2021-06-29 13:32:42 UTC MAIN commitmail json YAML

2021-06-29 12:44:20 UTC MAIN commitmail json YAML

Updated lang/python3[6789], lang/py3[6789]-html-docs

(adam)

2021-06-29 12:44:06 UTC pkgsrc-2021Q2 commitmail json YAML

2021-06-29 12:43:50 UTC pkgsrc-2021Q2 commitmail json YAML

Pullup ticket #6474 - requested by nia
multimedia/libaom: arm build fix

Revisions pulled up:
- multimedia/libaom/Makefile                                    1.14

---
  Module Name: pkgsrc
  Committed By: nia
  Date: Mon Jun 28 11:52:42 UTC 2021

  Modified Files:
  pkgsrc/multimedia/libaom: Makefile

  Log Message:
  libaom: fix building on armv7

(bsiegert)

2021-06-29 12:43:42 UTC MAIN commitmail json YAML

python39: updated to 3.9.6

Python 3.9.6 final

Security

bpo-44022: mod:http.client now avoids infinitely reading potential HTTP headers after a 100 Continue status response from the server.
Core and Builtins
bpo-44409: Fix error location information for tokenizer errors raised on initialization of the tokenizer. Patch by Pablo Galindo.
bpo-43667: Improve Unicode support in non-UTF locales on Oracle Solaris. This issue does not affect other Solaris systems.
bpo-44168: Fix error message in the parser involving keyword arguments with invalid expressions. Patch by Pablo Galindo
bpo-44114: Fix incorrect dictkeys_reversed and dictitems_reversed function signatures in C code, which broke webassembly builds.
bpo-44070: No longer eagerly makes import filenames absolute, except for extension modules, which was introduced in 3.9.5.
bpo-28146: Fix a confusing error message in str.format().
bpo-11105: When compiling ast.AST objects with recursive references through compile(), the interpreter doesn窶冲 crash anymore instead it raises a RecursionError.

Library

bpo-44516: Update vendored pip to 21.1.3
bpo-44482: Fix very unlikely resource leak in glob in alternate Python implementations.
bpo-44439: Fix in bz2.BZ2File.write() / lzma.LZMAFile.write() methods, when the input data is an object that supports the buffer protocol, the file length may be wrong.
bpo-44434: _thread.start_new_thread() no longer calls PyThread_exit_thread() explicitly at the thread exit, the call was redundant. On Linux with the glibc, pthread_exit() aborts the whole process if dlopen() fails to open libgcc_s.so file (ex: EMFILE error). Patch by Victor Stinner.
bpo-44422: The threading.enumerate() function now uses a reentrant lock to prevent a hang on reentrant call. Patch by Victor Stinner.
bpo-44395: Fix as_string() to pass unixfrom properly. Patch by Dong-hee Na.
bpo-44342: [Enum] Be more robust in searching for pickle support before making an enum class unpicklable.
bpo-44356: [Enum] Allow multiple data-type mixins if they are all the same.
bpo-44254: On Mac, give turtledemo button text a color that works on both light or dark background. Programmers cannot control the latter.
bpo-44145: hmac computations were not releasing the GIL while calling the OpenSSL HMAC_Update C API (a new feature in 3.9). This unintentionally prevented parallel computation as other hashlib algorithms support.
bpo-37788: Fix a reference leak when a Thread object is never joined.
bpo-44061: Fix regression in previous release when calling pkgutil.iter_modules() with a list of pathlib.Path objects
bpo-36515: The hashlib module no longer does unaligned memory accesses when compiled for ARM platforms.
bpo-44018: random.seed() no longer mutates bytearray inputs.
bpo-38352: Add IO, BinaryIO, TextIO, Match, and Pattern to typing.__all__. Patch by Jelle Zijlstra.
bpo-43972: When http.server.SimpleHTTPRequestHandler sends a 301 (Moved Permanently) for a directory path not ending with /, add a Content-Length: 0 header. This improves the behavior for certain clients.
bpo-28528: Fix a bug in pdb where checkline() raises AttributeError if it is called after reset().
bpo-43776: When subprocess.Popen args are provided as a string or as pathlib.Path, the Popen instance repr now shows the right thing.
bpo-43666: AIX: Lib/_aix_support.get_platform() may fail in an AIX WPAR. The fileset bos.rte appears to have a builddate in both LPAR and WPAR so this fileset is queried rather than bos.mp64. To prevent a similiar situation (no builddate in ODM) a value (9988) sufficient for completing a build is provided. Patch by M Felt.
bpo-43650: Fix MemoryError in shutil.unpack_archive() which fails inside shutil._unpack_zipfile() on large files. Patch by Igor Bolshakov.
bpo-43318: Fix a bug where pdb does not always echo cleared breakpoints.
bpo-43295: datetime.datetime.strptime() now raises ValueError instead of IndexError when matching 'z' with the %z format specifier.
bpo-37022: pdb now displays exceptions from repr() with its p and pp commands.
Documentation
bpo-40620: Convert examples in tutorial controlflow.rst section 4.3 to be interpreter-demo style.
bpo-13814: In the Design FAQ, answer 窶弩hy don窶冲 generators support the with statement?窶�
bpo-44392: Added a new section in the C API documentation for types used in type hinting. Documented Py_GenericAlias and Py_GenericAliasType.
bpo-38291: Mark typing.io and typing.re as deprecated since Python 3.8 in the documentation. They were never properly supported by type checkers.
bpo-44322: Document that SyntaxError args have a details tuple and that details are adjusted for errors in f-string field replacement expressions.
bpo-44195: Corrected references to TraversableResources in docs. There is no TraversableReader.
bpo-41963: Document that ConfigParser strips off comments when reading configuration files.
bpo-44072: Correct where in the numeric ABC hierarchy ** support is added, i.e., in numbers.Complex, not numbers.Integral.
bpo-43558: Add the remark to dataclasses documentation that the __init__() of any base class has to be called in __post_init__(), along with a code example.
bpo-41621: Document that collections.defaultdict parameter default_factory defaults to None and is positional-only.

Tests

bpo-44287: Fix asyncio test_popen() of test_windows_utils by using a longer timeout. Use military grade battle-tested test.support.SHORT_TIMEOUT timeout rather than a hardcoded timeout of 10 seconds: it窶冱 30 seconds by default, but it is made longer on slow buildbots. Patch by Victor Stinner.
bpo-44363: Account for address sanitizer in test_capi. test_capi now passes when run GCC address sanitizer.

Build

bpo-44381: The Windows build now accepts EnableControlFlowGuard set to guard to enable CFG.
Windows
bpo-41299: Fix 16ms jitter when using timeouts in threading, such as with threading.Lock.acquire() or threading.Condition.wait().

macOS

bpo-43568: Relax unnecessarily restrictive MACOSX_DEPLOYMENT_TARGET check when building extension modules for macOS. Patch by Joshua Root.
bpo-43109: Allow 窶努ith-lto configure option to work with Apple-supplied Xcode or Command Line Tools.

IDLE

bpo-40128: Mostly fix completions on macOS when not using tcl/tk 8.6.11 (as with 3.9). The added update_idletask call should be harmless and possibly helpful otherwise.
bpo-33962: Move the indent space setting from the Font tab to the new Windows tab. Patch by Mark Roseman and Terry Jan Reedy.
bpo-40468: Split the settings dialog General tab into Windows and Shell/ED tabs. Move help sources, which extend the Help menu, to the Extensions tab. Make space for new options and shorten the dialog. The latter makes the dialog better fit small screens.
bpo-41611: Avoid uncaught exceptions in AutoCompleteWindow.winconfig_event().
bpo-41611: Fix IDLE sometimes freezing upon tab-completion on macOS.

Tools/Demos

bpo-44074: Make patchcheck automatically detect the correct base branch name (previously it was hardcoded to 窶藁aster窶�)

C API

bpo-44441: Py_RunMain() now resets PyImport_Inittab to its initial value at exit. It must be possible to call PyImport_AppendInittab() or PyImport_ExtendInittab() at each Python initialization. Patch by Victor Stinner.
bpo-42083: Fix crash in PyStructSequence_NewType() when passed NULL in the documentation string slot.

(adam)

2021-06-29 12:41:07 UTC MAIN commitmail json YAML

python38: updated to 3.8.11

Python 3.8.11 final

Security

bpo-44022: mod:http.client now avoids infinitely reading potential HTTP headers after a 100 Continue status response from the server.
bpo-43882: The presence of newline or tab characters in parts of a URL could allow some forms of attacks.

Following the controlling specification for URLs defined by WHATWG urllib.parse() now removes ASCII newlines and tabs from URLs, preventing such attacks.
bpo-42800: Audit hooks are now fired for frame.f_code, traceback.tb_frame, and generator code/frame attribute access.

Core and Builtins

bpo-44070: No longer eagerly makes import filenames absolute, except for extension modules, which was introduced in 3.8.10.

Library

bpo-44061: Fix regression in previous release when calling pkgutil.iter_modules() with a list of pathlib.Path objects

(adam)

2021-06-29 12:39:10 UTC MAIN commitmail json YAML

python37: updated to 3.7.11

Python 3.7.11 final

Security

bpo-44022: mod:http.client now avoids infinitely reading potential HTTP headers after a 100 Continue status response from the server.
bpo-43882: The presence of newline or tab characters in parts of a URL could allow some forms of attacks.

Following the controlling specification for URLs defined by WHATWG urllib.parse() now removes ASCII newlines and tabs from URLs, preventing such attacks.
bpo-42988: CVE-2021-3426: Remove the getfile feature of the pydoc module which could be abused to read arbitrary files on the disk (directory traversal vulnerability). Moreover, even source code of Python modules can contain sensitive data like passwords. Vulnerability reported by David Schwörer.
bpo-43285: ftplib no longer trusts the IP address value returned from the server in response to the PASV command by default. This prevents a malicious FTP server from using the response to probe IPv4 address and port combinations on the client network.

Code that requires the former vulnerable behavior may set a trust_server_pasv_ipv4_address attribute on their ftplib.FTP instances to True to re-enable it.
bpo-43075: Fix Regular Expression Denial of Service (ReDoS) vulnerability in urllib.request.AbstractBasicAuthHandler. The ReDoS-vulnerable regex has quadratic worst-case complexity and it allows cause a denial of service when identifying crafted invalid RFCs. This ReDoS issue is on the client side and needs remote attackers to control the HTTP server.

Core and Builtins

bpo-43660: Fix crash that happens when replacing sys.stderr with a callable that can remove the object while an exception is being printed. Patch by Pablo Galindo.

Tests

bpo-41561: Add workaround for Ubuntu’s custom OpenSSL security level policy.

(adam)

2021-06-29 12:37:47 UTC MAIN commitmail json YAML

python36: updated to 3.6.14

Python 3.6.14 final

Security
bpo-44022: mod:http.client now avoids infinitely reading potential HTTP headers after a 100 Continue status response from the server.
bpo-43882: The presence of newline or tab characters in parts of a URL could allow some forms of attacks.

Following the controlling specification for URLs defined by WHATWG urllib.parse() now removes ASCII newlines and tabs from URLs, preventing such attacks.
bpo-42988: CVE-2021-3426: Remove the getfile feature of the pydoc module which could be abused to read arbitrary files on the disk (directory traversal vulnerability). Moreover, even source code of Python modules can contain sensitive data like passwords. Vulnerability reported by David Schw旦rer.
bpo-43285: ftplib no longer trusts the IP address value returned from the server in response to the PASV command by default. This prevents a malicious FTP server from using the response to probe IPv4 address and port combinations on the client network.

Code that requires the former vulnerable behavior may set a trust_server_pasv_ipv4_address attribute on their ftplib.FTP instances to True to re-enable it.
bpo-43075: Fix Regular Expression Denial of Service (ReDoS) vulnerability in urllib.request.AbstractBasicAuthHandler. The ReDoS-vulnerable regex has quadratic worst-case complexity and it allows cause a denial of service when identifying crafted invalid RFCs. This ReDoS issue is on the client side and needs remote attackers to control the HTTP server.

(adam)

2021-06-29 10:09:36 UTC MAIN commitmail json YAML

doc: Removed go-package packages

(nia)

2021-06-29 10:04:40 UTC MAIN commitmail json YAML

go-godef: remove

deprecated go-package; no users in pkgsrc

(nia)

2021-06-29 10:03:42 UTC MAIN commitmail json YAML

2021-06-29 10:02:11 UTC MAIN commitmail json YAML

2021-06-29 10:01:11 UTC MAIN commitmail json YAML

2021-06-29 10:00:18 UTC MAIN commitmail json YAML

2021-06-29 09:58:34 UTC MAIN commitmail json YAML

2021-06-29 09:57:07 UTC MAIN commitmail json YAML

2021-06-29 09:55:23 UTC MAIN commitmail json YAML

2021-06-29 09:54:25 UTC MAIN commitmail json YAML

2021-06-29 09:23:30 UTC MAIN commitmail json YAML

typo, pointed out by adam

(nia)

2021-06-29 08:42:02 UTC MAIN commitmail json YAML

2021-06-29 08:34:19 UTC MAIN commitmail json YAML

2021-06-29 08:27:17 UTC MAIN commitmail json YAML

freeradius: needs perl at runtime

(nia)

2021-06-29 08:25:35 UTC MAIN commitmail json YAML

capnproto: paper over cmake breakage

(nia)

2021-06-29 06:50:27 UTC MAIN commitmail json YAML

Updated net/rabbitmq, www/py-urllib3

(adam)

2021-06-29 06:50:11 UTC MAIN commitmail json YAML

py-urllib3: updated to 1.26.6

1.26.6 (2021-06-25)
-------------------
* Deprecated the ``urllib3.contrib.ntlmpool`` module. urllib3 is not able to support
  it properly due to `reasons listed in this issue <https://github.com/urllib3/urllib3/issues/2282>`_.
  If you are a user of this module please leave a comment.
* Changed ``HTTPConnection.request_chunked()`` to not erroneously emit multiple
  ``Transfer-Encoding`` headers in the case that one is already specified.
* Fixed typo in deprecation message to recommend ``Retry.DEFAULT_ALLOWED_METHODS``.

(adam)

2021-06-29 06:48:05 UTC MAIN commitmail json YAML

rabbitmq: updated to 3.8.18

3.8.18:
Bug fixes
Security vulnerability patch for CVE-2021-32719

(adam)

2021-06-29 06:45:05 UTC MAIN commitmail json YAML

doc: Updated devel/py-incremental to 21.3.0

(wiz)

2021-06-29 06:44:56 UTC MAIN commitmail json YAML

py-incremental: update to 21.3.0.

Incremental 21.3.0 (2021-03-01)
===============================

Bugfixes
--------

- The output of incremental is now compatible with Black (#56, #60)
- Incremental now properly supports PEP 440-compliant dev, rc, post suffixes (#62)
- Incremental now properly supports PEP 440-compliant post releases (#37)

(wiz)

2021-06-29 06:43:40 UTC MAIN commitmail json YAML

doc: Updated databases/mysql-connector-c++ to 8.0.25

(wiz)

2021-06-29 06:43:30 UTC MAIN commitmail json YAML

mysql-connector-c++: update to 8.0.25.

MySQL Connectors and other MySQL client tools and applications now
synchronize the first digit of their version number with the
(highest) MySQL server version they support. For example, MySQL
Connector/C++ 8.0.12 would be designed to support all features of
MySQL server version 8 (or lower). This change makes it easy and
intuitive to decide which client version to use for which server
version.

(wiz)

2021-06-29 05:19:47 UTC MAIN commitmail json YAML

m4: remove vax patch that is not needed anymore

jklos@ ok

(wiz)

2021-06-29 01:58:55 UTC MAIN commitmail json YAML

polkit: fix sandboxed builds

The newly-added autoreconf processing here requires gtkdocize.

(gutteridge)

2021-06-29 00:09:57 UTC MAIN commitmail json YAML

nagios-plugin-raidctl: pkglint

(tnn)

2021-06-29 00:08:50 UTC MAIN commitmail json YAML

nagios-plugin-raidctl: only for OS with RAIDframe (NetBSD and OpenBSD)

(tnn)

2021-06-28 23:48:25 UTC MAIN commitmail json YAML

m4: be explicit about --disable-nls

(tnn)

2021-06-28 23:12:22 UTC MAIN commitmail json YAML

openjdk11: options: accept jdk-hotspot-vm on arm

(tnn)

2021-06-28 22:53:05 UTC MAIN commitmail json YAML

2021-06-28 20:42:44 UTC MAIN commitmail json YAML

mariadb105-client: add more to CHECK_PORTABILITY_SKIP

(wiz)

2021-06-28 20:38:21 UTC MAIN commitmail json YAML

doc: Updated lang/libduktape to 2.6.0nb2

(wiz)

2021-06-28 20:38:12 UTC MAIN commitmail json YAML

libduktape: fix RELRO build.

Clean up some pkglint.

Bump PKGREVISION.

(wiz)

2021-06-28 20:32:16 UTC MAIN commitmail json YAML

doc: Updated devel/py-approvaltests to 1.0.1

(schmonz)

2021-06-28 20:32:11 UTC MAIN commitmail json YAML

Update to 1.0.1. From the changelog:

- Fixed major bug in the namer with unix and python3.8 and above.

(schmonz)

2021-06-28 20:29:57 UTC MAIN commitmail json YAML

doc: Updated devel/mob to 1.7.0

(schmonz)