Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (3h)  pkgsrc-2024Q1 (14d)  pkgsrc-2023Q4 (42d)  pkgsrc-2023Q2 (74d)  pkgsrc-2023Q3 (154d) 

2024-05-13 04:26:59 UTC Now

2021-06-06 11:48:40 UTC MAIN commitmail json YAML

2021-06-06 11:46:56 UTC MAIN commitmail json YAML

doc: Updated pkgtools/pkglint to 21.1.4

(rillig)

2021-06-06 11:46:44 UTC MAIN commitmail json YAML

2021-06-06 11:42:15 UTC MAIN commitmail json YAML

2021-06-06 11:34:20 UTC MAIN commitmail json YAML

2021-06-06 11:31:17 UTC MAIN commitmail json YAML

(math/R-classInt) Add compiler.mk buildlink

Without this change, I have following error with 9.99.82 host (amd64) which
has gcc-10. And buildlink for libgfortran was only made for gcc-10 side.
Adding this line makes both gcc-7 and gcc-10 buildlinked.

The error I had was: ( the line folded)
** libs
----------
gcc -shared -Wl,-R/usr/pkg/lib/R/lib -L/usr/pkg/lib/R/lib
  -L/usr/pkg/lib -L/usr/lib -Wl,-R/usr/lib -Wl,-R/usr/pkg/lib -pthrea d
  -L/usr/X11R7/lib -Wl,-R/usr/X11R7/lib -o classInt.so fish1.o init.o
  -L/usr/pkg/gcc7/lib/gcc/x86_64--netbsd/7.5.0 -L/usr/pkg/gcc7/lib
  -Wl,-R/usr/pkg/gcc7/x86_64--netbsd/lib/. -Wl,-R/usr/pkg/gcc7/lib/. -lgfortran
  -lm -lquadmath -lpthread -Wl,-R/usr/pkg/lib/R/lib -L/usr/pkg/lib/R/lib
  -lR
ld: cannot find -lgfortran
ld: cannot find -lquadmath
*** Error code 1
----------
Please correct me if my understanding (or correction) is wrong, sorry and tks

(mef)

2021-06-06 11:29:00 UTC MAIN commitmail json YAML

2021-06-06 11:14:36 UTC MAIN commitmail json YAML

2021-06-06 11:09:50 UTC MAIN commitmail json YAML

tex-luaotfload{,-doc}: update to 3.18

*  Allow using variable fonts without explicitly specifying any
  axis values
*  The fontloader has been synced with the context code from
  2021-05-20
*  Multiple small fixes, mostly concerning discretionaries in harf
  mode.

(markd)

2021-06-06 11:01:49 UTC MAIN commitmail json YAML

tex-lualibs{,.-doc}: update to 2.74

This version syncs the files with the ConTeXt files from 2021-05-20.

(markd)

2021-06-06 10:56:33 UTC MAIN commitmail json YAML

tex-luacolor{,-doc}: update to 1.17

Allow coloring of foreground and background material inserted with shipout
hooks when used with new kernel versions.

(markd)

2021-06-06 10:51:46 UTC MAIN commitmail json YAML

tex-l3experimental: update to 2021

### Added
- `\benchmark_silent:n` and `\benchmark_once_silent:n` added to
`l3benchmark`

### Changed
- store results of `l3benchmark` in documented user-level instead of
private variables

(markd)

2021-06-06 10:50:05 UTC MAIN commitmail json YAML

tex-l3packages{,-doc}: update to 2021

### Fixed
- Restore one parameter in `xfrac`

### Fixed
- Implmentation of `\DeclareRestrictedTemplate`
- Incorrect use of restricted template in `xfrac`

### Fixed
- Pass options to frozen `xparse`

(markd)

2021-06-06 10:47:45 UTC MAIN commitmail json YAML

tex-l3kernel{,-doc}: update to 2021

### Fixed
- Loading when `\expanded` is not available

### Added
- `\msg_note:nnnnnn`
- `\str_compare:nNnTF`
- `\sys_timer:`
- `\prop_concat:NNN`, `\prop_put_from_keyval:Nn`
- Functions to show and log various datatypes
  `\coffin_show:Nnn`, `\coffin_show:N`, `\coffin_log:Nnn`, `\coffin_log:N`,
  `\color_log:n`, `\group_show_list:`, `\group_log_list:`,
  `\ior_show:N`, `\ior_log:N`, `\iow_show:N`, `\iow_log:N`,
  `\tl_log_analysis:N`, `\tl_log_analysis:n`
- `\legacy_if_set_true:n`, `\legacy_if_set_false:n`, `\legacy_if_set:nn`

### Fixed
- Checking brace balance in all regex functions
- Removing duplicates in clists when items contain commas

### Changed
- Slight speed up in some elementary int/dim/skip/muskip operations and
  in setting tl or clist variables equal.
- Speed up mapping functions in l3clist, l3prop, l3seq, l3tl

### Added
- `\cctab_item:Nn`
- `\clist_use:nnnn` and `\clist_use:nn`

### Fixed
- Loading of backend in generic DVI mode
- Make `\keyval_parse:nnn` alignment-safe
- Control sequences and category codes in regex replacements

### Changed
- Speed up \group_align_safe_begin:

### Added
- Color export in comma-separated format
- `\ur{...}` escape in `l3regex` to compose regexes
- `\seq_set_split_keep_spaces:Nnn`
- `\seq_set_item:Nnn(TF)` and `\seq_pop_item:NnN(TF)`
- `\box_ht_plus_dp:N`
- `\clist_map_tokens:nn`, `\clist_map_tokens:Nn`,
  `\str_map_tokens:nn`, `\str_map_tokens:Nn`

### Changed
- Use prevailing catcodes instead of string in regex replacement
  (*Breaking change*)
- `\__kernel_file_name_sanitize:n` now uses a faster `\csname`-based
  approach to expand the file name
- Improved performance for basic conditionals
- `\pdf_version_gset:n` support for `dvips`
- Improve handling of `\exp_not:n` in `\text_expand:n`
- `\file_full_name:n` now avoids calling `\pdffilesize` primitive multiple times
  on the same file
- Show printable characters explicitly in `\regex_show:n`
- Regex replacement now errors when using a submatch (`\1` etc) for which
  the regex has too few groups
- Showing complex datatypes now validates their internal structure
- Indexing in l3doc: all page references before codeline references,
  improve target placement, solve pdfTeX and makeindex warnings

### Fixed
- Evalutate integer constants only once
- Detect `\ior_map_inline:Nn` calls on undefined streams

### Deprecated
- `l3docstrip` converted to a stub which simply loads DocStrip: use
  the latter directly

(markd)

2021-06-06 10:42:46 UTC MAIN commitmail json YAML

tex-l3backend{,-doc}: update to 2021

### Changed
- `\pdf_version_gset:n` in `dvips` now sets `\pdf_version_minor:` and
  `\pdf_version_major:`. This doesn't set the PDF version but allows to test
  which version the user intents to create.

### Fixed
- Maintain stack color correctly with `(x)dvipdfmx`

(markd)

2021-06-06 10:12:20 UTC MAIN commitmail json YAML

chat/matrix-synapse: Add missing py-ijson dependency

(js)

2021-06-06 10:06:04 UTC MAIN commitmail json YAML

doc: Added devel/py-ijson version 3.1.4

(js)

2021-06-06 10:05:42 UTC MAIN commitmail json YAML

Add devel/py-ijson

This is a new dependency for chat/matrix-synapse that I forgot to add.

(js)

2021-06-06 09:44:23 UTC pkgsrc-2021Q1 commitmail json YAML

Pullup tickets up to #6468

(bsiegert)

2021-06-06 09:44:05 UTC pkgsrc-2021Q1 commitmail json YAML

Pullup ticket #6468 - requested by nia
www/firefox78-l10n: dependent update

Revisions pulled up:
- www/firefox78-l10n/Makefile                                  1.14
- www/firefox78-l10n/distinfo                                  1.14

---
  Module Name: pkgsrc
  Committed By: nia
  Date: Tue Jun  1 21:12:37 UTC 2021

  Modified Files:
  pkgsrc/www/firefox78-l10n: Makefile distinfo

  Log Message:
  firefox78-l10n: sync with firefox78

(bsiegert)

2021-06-06 09:40:34 UTC MAIN commitmail json YAML

2021-06-06 09:34:53 UTC pkgsrc-2021Q1 commitmail json YAML

Pullup ticket #6467 - requested by nia
www/firefox78: security fix

Revisions pulled up:
- www/firefox78/Makefile                                        1.30
- www/firefox78/PLIST                                          1.3
- www/firefox78/distinfo                                        1.17

---
  Module Name: pkgsrc
  Committed By: nia
  Date: Tue Jun  1 21:07:21 UTC 2021

  Modified Files:
  pkgsrc/www/firefox78: Makefile PLIST distinfo

  Log Message:
  firefox78: update to 78.11.0

  Security fixes:
  https://www.mozilla.org/en-US/security/advisories/mfsa2021-24/

(bsiegert)

2021-06-06 09:32:36 UTC MAIN commitmail json YAML

doc: Updated devel/tig to 2.5.4

(fcambus)

2021-06-06 09:32:23 UTC MAIN commitmail json YAML

tig: update to 2.5.4.

tig-2.5.4
---------

Improvements:

- Add FreeBSD installation instructions. (#1093)
- Add TIG_EDITOR environment variable to configure editor. (#889, #1098)
- Enable mailmap by default to match git log's behaviour. (#1104, #1105)
- Enable tilde expansion for diff-highlight. (#1107)

Bug fixes:

- Escape variables with %% in external commands. (#1091, #1095)
- Fix parsing of -L argument. (#1100)
- Bugfix: smart-case does not work when search term contains a space. (#1108)
- Use ncursesw by default on Linux. (#920)
- Replace obsolete macro `AC_CONFIG_HEADER' in configure.ac.

(fcambus)

2021-06-06 09:18:26 UTC MAIN commitmail json YAML

doc: Updated chat/element-web to 1.7.29

(js)

2021-06-06 09:17:49 UTC MAIN commitmail json YAML

Update chat/element-web to 1.7.29

Changes in [1.7.29](https://github.com/vector-im/element-web/releases/tag/v1.7.29) (2021-05-24)
===============================================================================================
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.29-rc.1...v1.7.29)

## Security notice

Element Web 1.7.29 fixes (by upgrading to olm 3.2.3) an issue in code used for
decrypting server-side stored secrets. The issue could potentially allow a
malicious homeserver to cause a stack buffer overflow in the affected function
and to control that function's local variables.

## All changes

* Upgrade to React SDK 3.22.0 and JS SDK 11.1.0
* [Release] Bump libolm dependency, and update package name
  [\#17456](https://github.com/vector-im/element-web/pull/17456)

Changes in [1.7.29-rc.1](https://github.com/vector-im/element-web/releases/tag/v1.7.29-rc.1) (2021-05-19)
=========================================================================================================
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.28...v1.7.29-rc.1)

* Upgrade to React SDK 3.22.0-rc.1 and JS SDK 11.1.0-rc.1
* Translations update from Weblate
  [\#17384](https://github.com/vector-im/element-web/pull/17384)
* Prevent minification of `.html` files
  [\#17349](https://github.com/vector-im/element-web/pull/17349)
* Update matrix-widget-api/react-sdk dependency reference
  [\#17346](https://github.com/vector-im/element-web/pull/17346)
* Add `yarn start:https`
  [\#16989](https://github.com/vector-im/element-web/pull/16989)
* Translations update from Weblate
  [\#17239](https://github.com/vector-im/element-web/pull/17239)
* Remove "in development" flag from voice messages labs documentation
  [\#17204](https://github.com/vector-im/element-web/pull/17204)
* Add required webpack+jest config to load Safari support modules
  [\#17193](https://github.com/vector-im/element-web/pull/17193)

Changes in [1.7.28](https://github.com/vector-im/element-web/releases/tag/v1.7.28) (2021-05-17)
===============================================================================================
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.28-rc.1...v1.7.28)

## Security notice

Element Web 1.7.28 fixes (by upgrading to matrix-react-sdk 3.21.0) a low
severity issue (GHSA-8796-gc9j-63rv) related to file upload. When uploading a
file, the local file preview can lead to execution of scripts embedded in the
uploaded file, but only after several user interactions to open the preview in
a separate tab. This only impacts the local user while in the process of
uploading. It cannot be exploited remotely or by other users. Thanks to
[Muhammad Zaid Ghifari](https://github.com/MR-ZHEEV) for responsibly disclosing
this via Matrix's Security Disclosure Policy.

## All changes

* Upgrade to React SDK 3.21.0 and JS SDK 11.0.0

Changes in [1.7.28-rc.1](https://github.com/vector-im/element-web/releases/tag/v1.7.28-rc.1) (2021-05-11)
=========================================================================================================
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.27...v1.7.28-rc.1)

* Upgrade to React SDK 3.21.0-rc.1 and JS SDK 11.0.0-rc.1
* Switch back to release version of `sanitize-html`
  [\#17231](https://github.com/vector-im/element-web/pull/17231)
* Bump url-parse from 1.4.7 to 1.5.1
  [\#17199](https://github.com/vector-im/element-web/pull/17199)
* Bump lodash from 4.17.20 to 4.17.21
  [\#17205](https://github.com/vector-im/element-web/pull/17205)
* Bump hosted-git-info from 2.8.8 to 2.8.9
  [\#17219](https://github.com/vector-im/element-web/pull/17219)
* Disable host checking on the webpack dev server
  [\#17194](https://github.com/vector-im/element-web/pull/17194)
* Bump ua-parser-js from 0.7.23 to 0.7.24
  [\#17190](https://github.com/vector-im/element-web/pull/17190)

Changes in [1.7.27](https://github.com/vector-im/element-web/releases/tag/v1.7.27) (2021-05-10)
===============================================================================================
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.27-rc.1...v1.7.27)

* Upgrade to React SDK 3.20.0 and JS SDK 10.1.0

Changes in [1.7.27-rc.1](https://github.com/vector-im/element-web/releases/tag/v1.7.27-rc.1) (2021-05-04)
=========================================================================================================
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.26...v1.7.27-rc.1)

* Upgrade to React SDK 3.20.0-rc.1 and JS SDK 10.1.0-rc.1
* Translations update from Weblate
  [\#17160](https://github.com/vector-im/element-web/pull/17160)
* Document option for obeying asserted identity
  [\#17008](https://github.com/vector-im/element-web/pull/17008)
* Implement IPC call to Electron to set language
  [\#17052](https://github.com/vector-im/element-web/pull/17052)
* Convert Vector skin react components to Typescript
  [\#17061](https://github.com/vector-im/element-web/pull/17061)
* Add code quality review policy
  [\#16980](https://github.com/vector-im/element-web/pull/16980)
* Register RecorderWorklet from react-sdk
  [\#17013](https://github.com/vector-im/element-web/pull/17013)
* Preload Inter font to avoid FOIT on slow connections
  [\#17039](https://github.com/vector-im/element-web/pull/17039)
* Disable `postcss-calc`'s noisy `warnWhenCannotResolve` option
  [\#17041](https://github.com/vector-im/element-web/pull/17041)

(js)

2021-06-06 09:04:03 UTC MAIN commitmail json YAML

doc: Updated textproc/ruby-kramdown-rfc2629 to 1.4.14

(taca)

2021-06-06 09:03:44 UTC MAIN commitmail json YAML

doc: Updated net/youtube-dl to 20210606

(leot)

2021-06-06 09:03:44 UTC MAIN commitmail json YAML

textproc/ruby-kramdown-rfc2629: update to 1.4.14

1.4.14 (2021-06-05)

* refactor-command kdrfc: -f as abbreviation for --pdf
* Include "SDO-3GPP" as a weirder and incomplete alternative to "3GPP"
* Do not generate bad XML for reference anchor starting with a digit
* origin/refactor-command Prepare 1.4.14.pre
* 124 Refactor kramdown option handling

(taca)

2021-06-06 09:03:31 UTC MAIN commitmail json YAML

youtube-dl: Update to 20210606

Changes:
20210606
--------
Extractors
* [facebook] Improve login required detection
* [youporn] Fix formats and view count extraction (#29216)
* [orf:tvthek] Fix thumbnails extraction (#29217)
* [formula1] Fix extraction (#29206)
* [ard] Relax URL regular expression and fix video ids (#22724, #29091)
+ [ustream] Detect https embeds (#29133)
* [ted] Prefer own formats over external sources (#29142)
* [twitch:clips] Improve extraction (#29149)
+ [twitch:clips] Add access token query to download URLs (#29136)
* [youtube] Fix get_video_info request (#29086, #29165)
* [vimeo] Fix vimeo pro embed extraction (#29126)
* [redbulltv] Fix embed data extraction (#28770)
* [shahid] Relax URL regular expression (#28772, #28930)

20210516
--------
Core
* [options] Fix thumbnail option group name (#29042)
* [YoutubeDL] Improve extract_info doc (#28946)

Extractors
+ [playstuff] Add support for play.stuff.co.nz (#28901, #28931)
* [eroprofile] Fix extraction (#23200, #23626, #29008)
+ [vivo] Add support for vivo.st (#29009)
+ [generic] Add support for og:audio (#28311, #29015)
* [phoenix] Fix extraction (#29057)
+ [generic] Add support for sibnet embeds
+ [vk] Add support for sibnet embeds (#9500)
+ [generic] Add Referer header for direct videojs download URLs (#2879,
  #20217, #29053)
* [orf:radio] Switch download URLs to HTTPS (#29012, #29046)
- [blinkx] Remove extractor (#28941)
* [medaltv] Relax URL regular expression (#28884)
+ [funimation] Add support for optional lang code in URLs (#28950)
+ [gdcvault] Add support for HTML5 videos
* [dispeak] Improve FLV extraction (#13513, #28970)
* [kaltura] Improve iframe extraction (#28969)
* [kaltura] Make embed code alternatives actually work
* [cda] Improve extraction (#28709, #28937)
* [twitter] Improve formats extraction from vmap URL (#28909)
* [xtube] Fix formats extraction (#28870)
* [svtplay] Improve extraction (#28507, #28876)
* [tv2dk] Fix extraction (#28888)

(leot)

2021-06-06 08:58:54 UTC MAIN commitmail json YAML

doc: Updated print/ruby-pdf-reader to 2.5.0

(taca)

2021-06-06 08:58:34 UTC MAIN commitmail json YAML

print/ruby-pdf-reader: update to 2.5.0

2.5.0 (2021-06-06)

* bump minimum ruby version to 2.0
* Correctly handle trascoding to UTF-8 from some fonts that use a difference
  table [#344](https://github.com/yob/pdf-reader/pull/344/)
* Fix some character spacing issues with the TJ operator
  [#343](https://github.com/yob/pdf-reader/pull/343)
* Fix crash with some encrypted PDFs
  [#348](https://github.com/yob/pdf-reader/pull/348/)
* Fix positions of text on some PDFs with pages rotated 90 degree
  [#350](https://github.com/yob/pdf-reader/pull/350/)

(taca)

2021-06-06 08:09:59 UTC MAIN commitmail json YAML

(math/Makefile, doc/CHANGES-2021) Two packages Updated, one added

Updated math/R-mapproj to 1.2.7
Updated geography/R-maptools to 1.1.1
Added math/R-proxy version 0.4.25

(mef)

2021-06-06 08:07:17 UTC MAIN commitmail json YAML

math/R-proxy: import R-proxy-0.4.25

Provides an extensible framework for the efficient calculation of
auto- and cross-proximities, along with implementations of the most
popular ones.

(mef)

2021-06-06 07:57:48 UTC MAIN commitmail json YAML

(geography/R-rgeos) Updated 0.5.2  to 0.5.5

2020-09-01 12:38  rsbivand

        * man/labelpt.Rd, man/misc-gDistance.Rd,
          man/topo-unary-gDelaunayTriangulation.Rd,
          man/topo-unary-gSimplify.Rd, man/wkt-functions.Rd: tidy

2020-09-01 11:38  rsbivand

        * DESCRIPTION, configure, configure.ac: add stdlib.h declaration to
          configure.ac where missing

2020-08-06 09:57  rsbivand

        * DESCRIPTION, NAMESPACE, R/rgeos_topology.R, configure,
          src/init.c, src/rgeos.h, src/rgeos_topology.c: add CoverageUnion

(mef)

2021-06-06 07:53:49 UTC MAIN commitmail json YAML

(geography/R-maptools) Updated 0.9.5 to 1.1.1

# Version 1.1-1 (development, rev. 381-382)
* Upgrade **spatstat**-family reverse dependencies

# Version 1.0-2 (2020-08-24, rev. 371-380)
* New `as.im.RasterLayer()` version

* Update stored **sp** objects

# Version 1.0-1 (2020-05-14, rev. -370)

* Update for `linnet` coercion methods

* Added read support for (very) legacy MAP objects

(mef)

2021-06-06 07:41:48 UTC MAIN commitmail json YAML

doc: Updated pkgtools/pkglint to 21.1.3

(rillig)

2021-06-06 07:41:34 UTC MAIN commitmail json YAML

pkgtools/pkglint: update to 21.1.3

Changes since 21.1.2:

The entries in doc/CHANGES are checked more strictly, they must always
consist of 4 words (for removed packages) or 6 words (for all other
changes).

Packages that include curses.buildlink3.mk may use all buildlink3
variables with the identifier "curses".  The previous pkglint warnings
had been wrong.

Python packages that directly contain .egg-info in their PLIST files
should include egg.mk instead.  Pkglint can now fix these packages
automatically.

(rillig)

2021-06-06 07:22:40 UTC MAIN commitmail json YAML

(math/R-mapproj) Updated 1.2.6 to 1.2.7, NEWS.md unknown

(mef)

2021-06-06 07:20:26 UTC MAIN commitmail json YAML

doc: Updated security/php-gnupg to 1.5.0

(taca)

2021-06-06 07:20:05 UTC MAIN commitmail json YAML

security/php-gnupg: update to 1.5.0

pkgsrc change: remove restriction to depeding package, requirement gpgme
package to using gnupg1 PKG_OPTIONS.

Approved by tpaul@.

1.5.0 (2021-04-10)

* Added new README.md

1.5.0RC2 (2021-03-07)

* Fixed build with libgpgme 1.3
* Fixed largefile support on 32-bit platforms
* Fixed tests in PECL archive

1.5.0RC1 (2021-02-14)

* Added support for PHP 8
* Added support for GnuPG 2.1+
* Added argument info for all functions and methods (reflection support)
* Added new function `gnupg_getengineinfo`
* Added new function `gnupg_geterrorinfo`
* Added init array argument for setting home dir and gpg binary file name
* Added additional fields to `gnupg_keyinfo` returned array
* Added parameter to `gnupg_keyinfo` to use `secret_only`
* Fixed `gnupg_deletekey` to use boolean for `allow_secret` parameter

(taca)

2021-06-06 06:54:33 UTC MAIN commitmail json YAML

(graphics/Makefile, doc/CHANGES-2021, TODO) Three packages updated, one added

Updated devel/R-bit64 to 4.0.5
Updated graphics/R-colorspace to 2.0.1
Updated math/R-reshape2 to 1.4.4
Added graphics/R-isoband version 0.2.4

(mef)

2021-06-06 06:50:17 UTC MAIN commitmail json YAML

graphics/R-isoband: import R-isoband-0.2.4

A fast C++ implementation to generate contour lines (isolines) and
contour polygons (isobands) from regularly spaced grids containing
elevation data.

(mef)

2021-06-06 06:38:30 UTC MAIN commitmail json YAML

(math/R-reshape2) Updated 1.4.3 to 1.4.4

# reshape2 1.4.4

* Fix R CMD check failure in R-devel.

(mef)

2021-06-06 06:19:31 UTC MAIN commitmail json YAML

(graphics/R-colorspace) Updated 1.4.1 to 2.0.1

# colorspace 2.0-1

* Added two new palettes from the viridis family (_viridis_/_viridisLite_),
  namely `"Rocket"` and `"Mako"` in `sequential_hcl()`.

* Assure that all `do.call()` for the `ggplot2` scale functions are made with
  `envir = parent.frame()` in order to avoid problems with non-standard
  evaluation, as reported in:
  <https://stackoverflow.com/questions/66049336/paste-name-in-scale-fill-color-in-colorspace-does-not-work-in-a-loop>

* New function `extract_transparency()` for extracting alpha transparency
  from color specifications, either as numeric, integer, character or hexmode vectors.
  This accompanies the previously available function `adjust_transparency()`
  allowing for more flexible modifications of alpha transparencies in colors.

# colorspace 2.0-0

* Release of version 2.0-0 accompanying the publication of the paper
  "colorspace: A Toolbox for Manipulating and Assessing Colors and Palettes"
  in the _Journal of Statistcal Software_ at <https://doi.org/10.18637/jss.v096.i01>.
  The paper is a compact version of the package web page
  (<https://colorspace.R-Forge.R-project.org/>) including some more discussion
  of related methods and software along with some more references to the
  scientific literature.

* New function `adjust_transparency()` that adjusts the alpha transparency
  of some color specification and returns a hexadecimal string where
  the alpha component is modified, added, or removed.

* Added three more palettes from Fabio Crameri's scientific color maps
  (_scico_), namely `"Hawaii"` and `"Batlow"` in `sequential_hcl()` and
  `"Roma"` in `divergingx_hcl()`.

* Additional option `cvd` in `swatchplot()` so that color vision deficiency
  emulation can be included on the fly.

* Added _binned_ _ggplot2_ color scales (in addition to _discrete_ and
  _continuous_).

* Changed the default colors in `specplot()` from `rainbow_hcl(3)` to
  `qualitative_hcl(3)` which is darker and has more chroma. Also, the order
  of the legend has been reversed (Luminance / Chroma / Hue) so that the
  legend labels are closer to the axis that they pertain to.

* Improve the documentation of the `LUV()` and `LAB()` color spaces,
  pointing out that the `U`/`V` and `A`/`B` coordinates are _typically_
  in [-100, 100] but can actually be exceeded by highly saturated colors.

* Bug fix in `diverging_hcl()` and `divergingx_hcl()` where the central color
  of the diverging palette could sometimes collapse to transparent white
  due to numerical inaccuracies on 32-bit platforms.

* Improve the documentation of the `HSV()` and `HLS()` color spaces.
  These do NOT necessarily correspond to sRGB;  we can convert from
  these to any RGB space that we choose (linear or non-linear,
  any whitepoint).  In particular, if we want to convert from one of
  these color spaces to XYZ or beyond, we must first convert to a
  specific RGB color space.

(mef)

2021-06-06 06:03:47 UTC MAIN commitmail json YAML

(devel/R-bit64) Updated 0.9.7 to 4.0.5

    CHANGES IN bit64 VERSION 4.0.5
BUG FIXES
    o PKG_LIBS=-lm added to Makevars
      (fixes https://bugzilla.redhat.com/show_bug.cgi?id=1763127
      thanks to Elliott Sales de Andrade)

    CHANGES IN bit64 VERSION 4.0.4
BUG FIXES
    o runif64() no longer long long overflows
      for the maximum integer64 range
    o UBSAN false alarms removed with
      __attribute__((no_sanitize("signed-integer-overflow")))
    o added temporary flags to Makefile
      for UBSAN checks

    CHANGES IN bit64 VERSION 4.0.3
BUG FIXES
    o added Makefile with temporary -flto
      and removed LTO error regarding runif_integer64

    CHANGES IN bit64 VERSION 4.0.2
BUG FIXES
    o now DESCRIPTION URL points to github

    CHANGES IN bit64 VERSION 4.0.1
BUG FIXES
    o removed pragma because no longer needed with recent compilers
    o removed a clang warning

    CHANGES IN bit64 VERSION 4.0.0
NEW FEATURES
    o new method all.equal.integer64
      (contributed by Leonardo Silvestri)

USER VISIBLE CHANGES
    o license has been extendend from GPL-2 to GPL-2 | GPL-3
    o still.identical is now exported from package bit

BUG FIXES
    o removed unused SEXP ret_ from r_ram_integer64_sortnut and
      r_ram_integer64_ordernut (LTO problems reported by Brian Ripley)
    o min, max and range now give correct results for multiple arguments
      (reported by Colin Umanski)
    o r_ram_integer64_ordertab_asc and r_ram_integer64_sortordertab_asc
      now properly PROTECT their shortened return vector before R_Busy(0)
      (Thanks to Tomas Kalibera)
    o operations on zero length integer64 now return
      zero length integer64 instead of throwing an error
      (reported by Xianying Tan)
    o match.integer64 (and %in%) now coerce the second argument to integer64
      instead of throwing an error (reported by Xianying Tan)
    o zero-length integer64() no longer prints as `character(0)`
      (reported by Xianying Tan)

    CHANGES IN bit64 VERSION 0.9-8
NEW FEATURES
    o New function runif64 which can sample from finite
      and infinite populations (wish of Dan Reznik)

    o New methods as.integer64.bitstring
      and print.bitstring (wish of Dan Reznik)

USER VISIBLE CHANGES
    o [.integer64 now returns NA where the subscripts require this
      (contributed by Leonardo Silvestri)
    o binary operators now handle attributes more like R
      (new binattr() code contributed by Leonardo Silvestri)
    o as.bitstring.integer64 now returns its string vector
      with class 'bitstring'
    o round.integer64 with a negative digits argument now rounds
      like round(integer) would do (wish of Ian Lyttle)
    o range.integer64 now has an argument finite=FALSE for compatibility
      with range.default (wish of Sergio Oller)

BUG FIXES
    o calculating hashbits in hashfun, hashmap, hashmaptab and hashmapuni
      now gives 0 instead of stopping (bug reported by Jakob Schelbert)

(mef)

2021-06-06 02:08:55 UTC MAIN commitmail json YAML

texlive 2021 updates

(markd)

2021-06-06 02:04:52 UTC MAIN commitmail json YAML

tex-tex: update to 3.141592653

minor changes

(markd)

2021-06-06 01:48:18 UTC MAIN commitmail json YAML

tex-graphics-def{,-doc}: update to 2021

- Disable use of new (x)dvipdfmx color stacks pending further testing
- Correct error given if .gz files are given as graphics with (x)dvipdfmx

Further work to support multiple color stacks in (x)dvipdfmx

This update allows use of new colour stacks in dvipdfmx/XeTeX.

(markd)

2021-06-06 01:41:38 UTC MAIN commitmail json YAML

2021-06-06 01:36:13 UTC MAIN commitmail json YAML

(devel/py-angr) Fix build by adding LDFLAGS+=  rpath link to pyvex/lib

The error message was:

=> Checking file-check results for py38-angr-9.0.7491
=> Checking for non-existent script interpreters in py38-angr-9.0.7491
=> Checking file permissions in py38-angr-9.0.7491
=> Checking for missing run-time search paths in py38-angr-9.0.7491
ERROR: lib/python3.8/site-packages/angr/lib/angr_native.so: missing library: libpyvex.so
*** Error code 1

(mef)

2021-06-06 01:33:13 UTC MAIN commitmail json YAML

2021-06-06 01:23:14 UTC MAIN commitmail json YAML

2021-06-06 01:20:41 UTC MAIN commitmail json YAML

2021-06-06 01:17:20 UTC MAIN commitmail json YAML

texlive: update to TeXLive 2021

General:
* Donald Knuth窶冱 changes for his 2021 tuneup of TeX and Metafont are
  incorporated (https://tug.org/TUGboat/tb42-1/tb130knuth-tuneup21.pdf). They
  are also available on CTAN as the knuth-dist and knuth-local packages. As
  expected, the �ャ』es are for obscure cases and do not affect any behavior in
  practice.
* Except in original TeX: if \tracinglostchars is set to 3 or more, missing
  characters will result in an error, not just a message in the log �ャ〕e, and
  the missing character code will be shown in hex.
* Except in original TeX: a new integer parameter \tracingstacklevels, if
  positive, and \tracingmacros is also positive, causes a pre�ャ』 indicating the
  macro expansion depth to be output on each relevant log line (e.g., ~.. at
  depth 2). Also, macro logging is truncated at a depth 竕・ the parameter value.

Aleph: The Aleph-based LaTeX format, named lamed, has been removed. The aleph
  binary itself is still included and supported.

LuaTeX:
* Lua 5.3.6.
* Callback for nesting level used in \tracingmacros, as generalized variant
  of the new \tracingstacklevels.
* Mark math glyphs as protected to prevent processing as text.
* Removed width/ic compensation for traditional math code path.

MetaPost:
* SOURCE_DATE_EPOCH environment variable support for reproducible output.
* Avoid wrong �ャ]al % in mpto.
* Document -T option, other �ャ』es to manual.
* Value of epsilon changed in binary and decimal modes, so mp_solve_rising_cubic
  works as expected.

pdfTeX:
* New primitives \pdfrunninglinkoff and \pdfrunninglinkon; e.g., for
  disabling generation of links in headers and footers.
* Warn instead of aborting when 窶彌pdfendlink ended up in di�ャ�erent nesting
  level than \pdfstartlink窶�.
* Dump \pdfglyphtounicode assignments in fmt �ャ〕e.
* Source: poppler support removed, as it was too hard to keep in sync with
  upstream. In native TL, pdfTeX has always used libs/xpdf, which is cut-down
  and adapted code from xpdf.

XeTeX: Fixes for math kerning.

Dvipdfmx:
* Ghostscript is now invoked safely by default; to override (assuming all
  input �ャ〕es are trusted), use -i dvipdfmx-unsafe.cfg. To use PSTricks with
  XeTeX, this is required, as in:
  xetex -output-driver="xdvipdfmx -i dvipdfmx-unsafe.cfg -q -E" ...
* If an image �ャ〕e is not found, exit with bad status.
* Extended special syntax for color support.
* Specials for manipulating ExtGState.
* Compatibility specials pdfcolorstack and pdffontattr.
* Experimental support for dviluatex窶冱 extended fnt_def.
* Support new feature of virtual font to fallback Japanese font de�ャ]ition.

Dvips:
* Default PostScript document title is now the basename of the input �ャ〕e,
  and can be overridden with the new option -title.
* If an .eps or other image �ャ〕e is not found, exit with bad status.
* Support new feature of virtual font to fallback Japanese font de�ャ]ition.

(markd)

2021-06-05 20:07:41 UTC MAIN commitmail json YAML

doc: Updated security/gpg-tui to 0.3.0

(pin)

2021-06-05 20:07:17 UTC MAIN commitmail json YAML

security/gpg-tui: update to 0.3.0

[0.3.0] - 2021-06-05

Added:
-Add packaging status badge to README.md
-Add Matrix room link to social media section in README.md

Changed:
-Display notations of the signatures (#8)
-Update README.md about Docker alias
-Update README.md about the format of notations
-Update the example notation in README.md
-Update the style of flags

Fixed:
-Run container process as unprivileged user

(pin)

2021-06-05 19:13:05 UTC MAIN commitmail json YAML

doc: Updated sysutils/xplr to 0.13.7

(pin)

2021-06-05 19:12:45 UTC MAIN commitmail json YAML

sysutils/xplr: update to 0.13.7

0.13.7
======
-Implemented basic CLI arguments.

0.13.6
======
-Removed --locked to use the latest versions of dependencies.

0.13.5
======
-Started publishing PGP signature for the source archive.

0.13.4
======
-Fix pgp publishing attempt.

0.13.3
======
-Fix pgp publishing attempt.

0.13.2
======
Changes & fixes:
-No need to Refresh explicitly. xplr with auto Refresh after each batch of
messages. i.e. you can remove all the Refresh from your init.lua.
-Mouse will be disabled by default. Use :m key binding or
{Enable|Disable|Toggle}Mouse messages to enable/disable mouse.
-Fixed focus jumping to the first file after deleting a file.
-Upgraded dependencies.
-Polished xplr library API.

(pin)

2021-06-05 17:35:43 UTC MAIN commitmail json YAML

CHANGES for mpg123 update

(thor)

2021-06-05 17:30:01 UTC MAIN commitmail json YAML

mpg123: update to 1.28.0

1.28.0
------
- build:
-- Fix up the build to actually build all library objects with libtool
  consistently, also ensuring no pointless static archives for output
  modules.
-- Adapted things to autoconf 2.71, requiring 2.69 now (the latter tested
  on Debian, with their patches).
-- Improved configure to be more useful --with-default-audio to define
  the search order, fix static build for --with-audio being a list
  (just choosing the first one).
-- Ensure consistent use of LINK_MPG123_DLL in headers.
- build (ports/cmake):
-- Thanks to Evgeni Poberezhnikov for working with us on that.
-- Fix up ports/cmake to really work in MSVC also for users of the lib
  (tested in vcpkg, bug 310).
-- Hardcode ports/cmake CPU detection for x64 and ARM as
  CMAKE_SYSTEM_PROCESSOR is useless crap (bug 298 for real).
-- Add missing io.h for _setmode() MSVC warned about (bug 311).
-- Added BUILD_NO_LARGENAME define to be used by MSVC builds. Note that
  an MSVC build of libmpg123 does not support 64 bit file offsets.
  That would need more morting to the explicit API. Thanks to MS for
  making off_t even more messy and less useful.
-- Added JACK output, fixed handling of compat_str there and in win32_wasapi.
- libsyn123: Fix syn123_mix() to actually do intermediate conversion
  when input and output encoding are the same but non-float. This makes
  out123 --mix work with s16 input and output, which is not that special!
- libmpg123: Fix misguided handling of part2_3_length checks in
  III_get_scale_factors_1() and III_get_scale_factors_2() which invalidated
  decoding of a mono source encoded as ms+i-stereo (bug 312). This was
  a regression introduced with version 1.25.7.
- libout123:
-- Print basic module loading errors only for last one in list.
  This enables use of an output module search list that anticipates module
  files not installed with the main package.
-- Fixes for win32_wasapi build with MSVC.

(thor)

2021-06-05 15:39:45 UTC MAIN commitmail json YAML

doc: Updated chat/matrix-synapse to 1.35.1

(js)

2021-06-05 15:28:02 UTC MAIN commitmail json YAML

Update chat/matrix-synapses to 1.35.1

Synapse 1.35.1 (2021-06-03)
===========================

Bugfixes
--------

- Fix a bug introduced in v1.35.0 where invite-only rooms would be shown to all users in a space, regardless of if the user had access to it. ([\#10109](https://github.com/matrix-org/synapse/issues/10109))

Synapse 1.35.0 (2021-06-01)
===========================

Note that [the tag](https://github.com/matrix-org/synapse/releases/tag/v1.35.0rc3) and [docker images](https://hub.docker.com/layers/matrixdotorg/synapse/v1.35.0rc3/images/sha256-34ccc87bd99a17e2cbc0902e678b5937d16bdc1991ead097eee6096481ecf2c4?context=explore) for `v1.35.0rc3` were incorrectly built. If you are experiencing issues with either, it is recommended to upgrade to the equivalent tag or docker image for the `v1.35.0` release.

Deprecations and Removals
-------------------------

- The core Synapse development team plan to drop support for the [unstable API of MSC2858](https://github.com/matrix-org/matrix-doc/blob/master/proposals/2858-Multiple-SSO-Identity-Providers.md#unstable-prefix), including the undocumented `experimental.msc2858_enabled` config option, in August 2021. Client authors should ensure that their clients are updated to use the stable API (which has been supported since Synapse 1.30) well before that time, to give their users time to upgrade. ([\#10101](https://github.com/matrix-org/synapse/issues/10101))

Bugfixes
--------

- Fixed a bug causing replication requests to fail when receiving a lot of events via federation. Introduced in v1.33.0. ([\#10082](https://github.com/matrix-org/synapse/issues/10082))
- Fix HTTP response size limit to allow joining very large rooms over federation. Introduced in v1.33.0. ([\#10093](https://github.com/matrix-org/synapse/issues/10093))

Internal Changes
----------------

- Log method and path when dropping request due to size limit. ([\#10091](https://github.com/matrix-org/synapse/issues/10091))

Synapse 1.35.0rc2 (2021-05-27)
==============================

Bugfixes
--------

- Fix a bug introduced in v1.35.0rc1 when calling the spaces summary API via a GET request. ([\#10079](https://github.com/matrix-org/synapse/issues/10079))

Synapse 1.35.0rc1 (2021-05-25)
==============================

Features
--------

- Add experimental support to allow a user who could join a restricted room to view it in the spaces summary. ([\#9922](https://github.com/matrix-org/synapse/issues/9922), [\#10007](https://github.com/matrix-org/synapse/issues/10007), [\#10038](https://github.com/matrix-org/synapse/issues/10038))
- Reduce memory usage when joining very large rooms over federation. ([\#9958](https://github.com/matrix-org/synapse/issues/9958))
- Add a configuration option which allows enabling opentracing by user id. ([\#9978](https://github.com/matrix-org/synapse/issues/9978))
- Enable experimental support for [MSC2946](https://github.com/matrix-org/matrix-doc/pull/2946) (spaces summary API) and [MSC3083](https://github.com/matrix-org/matrix-doc/pull/3083) (restricted join rules) by default. ([\#10011](https://github.com/matrix-org/synapse/issues/10011))

Bugfixes
--------

- Fix a bug introduced in v1.26.0 which meant that `synapse_port_db` would not correctly initialise some postgres sequences, requiring manual updates afterwards. ([\#9991](https://github.com/matrix-org/synapse/issues/9991))
- Fix `synctl`'s `--no-daemonize` parameter to work correctly with worker processes. ([\#9995](https://github.com/matrix-org/synapse/issues/9995))
- Fix a validation bug introduced in v1.34.0 in the ordering of spaces in the space summary API. ([\#10002](https://github.com/matrix-org/synapse/issues/10002))
- Fixed deletion of new presence stream states from database. ([\#10014](https://github.com/matrix-org/synapse/issues/10014), [\#10033](https://github.com/matrix-org/synapse/issues/10033))
- Fixed a bug with very high resolution image uploads throwing internal server errors. ([\#10029](https://github.com/matrix-org/synapse/issues/10029))

Updates to the Docker image
---------------------------

- Fix bug introduced in Synapse 1.33.0 which caused a `Permission denied: '/homeserver.log'` error when starting Synapse with the generated log configuration. Contributed by Sergio Migu辿ns Iglesias. ([\#10045](https://github.com/matrix-org/synapse/issues/10045))

Improved Documentation
----------------------

- Add hardened systemd files as proposed in [#9760](https://github.com/matrix-org/synapse/issues/9760) and added them to `contrib/`. Change the docs to reflect the presence of these files. ([\#9803](https://github.com/matrix-org/synapse/issues/9803))
- Clarify documentation around SSO mapping providers generating unique IDs and localparts. ([\#9980](https://github.com/matrix-org/synapse/issues/9980))
- Updates to the PostgreSQL documentation (`postgres.md`). ([\#9988](https://github.com/matrix-org/synapse/issues/9988), [\#9989](https://github.com/matrix-org/synapse/issues/9989))
- Fix broken link in user directory documentation. Contributed by @junquera. ([\#10016](https://github.com/matrix-org/synapse/issues/10016))
- Add missing room state entry to the table of contents of room admin API. ([\#10043](https://github.com/matrix-org/synapse/issues/10043))

Deprecations and Removals
-------------------------

- Removed support for the deprecated `tls_fingerprints` configuration setting. Contributed by Jerin J Titus. ([\#9280](https://github.com/matrix-org/synapse/issues/9280))

Internal Changes
----------------

- Allow sending full presence to users via workers other than the one that called `ModuleApi.send_local_online_presence_to`. ([\#9823](https://github.com/matrix-org/synapse/issues/9823))
- Update comments in the space summary handler. ([\#9974](https://github.com/matrix-org/synapse/issues/9974))
- Minor enhancements to the `@cachedList` descriptor. ([\#9975](https://github.com/matrix-org/synapse/issues/9975))
- Split multipart email sending into a dedicated handler. ([\#9977](https://github.com/matrix-org/synapse/issues/9977))
- Run `black` on files in the `scripts` directory. ([\#9981](https://github.com/matrix-org/synapse/issues/9981))
- Add missing type hints to `synapse.util` module. ([\#9982](https://github.com/matrix-org/synapse/issues/9982))
- Simplify a few helper functions. ([\#9984](https://github.com/matrix-org/synapse/issues/9984), [\#9985](https://github.com/matrix-org/synapse/issues/9985), [\#9986](https://github.com/matrix-org/synapse/issues/9986))
- Remove unnecessary property from SQLBaseStore. ([\#9987](https://github.com/matrix-org/synapse/issues/9987))
- Remove `keylen` param on `LruCache`. ([\#9993](https://github.com/matrix-org/synapse/issues/9993))
- Update the Grafana dashboard in `contrib/`. ([\#10001](https://github.com/matrix-org/synapse/issues/10001))
- Add a batching queue implementation. ([\#10017](https://github.com/matrix-org/synapse/issues/10017))
- Reduce memory usage when verifying signatures on large numbers of events at once. ([\#10018](https://github.com/matrix-org/synapse/issues/10018))
- Properly invalidate caches for destination retry timings every (instead of expiring entries every 5 minutes). ([\#10036](https://github.com/matrix-org/synapse/issues/10036))
- Fix running complement tests with Synapse workers. ([\#10039](https://github.com/matrix-org/synapse/issues/10039))
- Fix typo in `get_state_ids_for_event` docstring where the return type was incorrect. ([\#10050](https://github.com/matrix-org/synapse/issues/10050))

(js)

2021-06-05 15:14:13 UTC MAIN commitmail json YAML

doc: Updated math/R-generics to 0.1.0

(mef)

2021-06-05 15:14:01 UTC MAIN commitmail json YAML

(math/R-generics) Updated 0.0.2 to 0.1.0
# generics 0.1.0

* Maintainer changed to Hadley Wickham.

* Re-licensed with MIT license.

* New `min_grid()`, `required_pkgs()`, and `tunable()` generics.

# `generics` 0.0.2

* Removed the `data` argument to `augment` to resolve issues with `broom`

(mef)

2021-06-05 14:17:32 UTC MAIN commitmail json YAML

pkg_install: remove MESSAGE_SUBST

(nia)

2021-06-05 14:17:05 UTC MAIN commitmail json YAML

pkg_install: remove MESSAGE file

this completely fills the screen when it gets printed in the NetBSD
installer, and contains documentation that belongs (and is) elsewhere.

(nia)

2021-06-05 13:08:09 UTC MAIN commitmail json YAML

Updated net/amule, net/wireshark

(adam)

2021-06-05 13:07:21 UTC MAIN commitmail json YAML

wireshark: updated to 3.4.6

Wireshark 3.4.6 Release Notes

What’s New

  The Windows installers now ship with Npcap 1.31. They previously
  shipped with Npcap 1.10.

  The Windows installers now ship with Qt 5.15.2. They previously
  shipped with Qt 5.12.1.

  Bug Fixes

    • wnpa-sec-2021-04[1] DVB-S2-BB dissector infinite loop

  The following bugs have been fixed:

    • Macro filters can’t handle escaped characters Issue 17160[2].

    • Display filter crashes Wireshark Issue 17316[3].

    • IEEE-1588 Signalling Unicast TLV incorrectly reported as being
      malformed Issue 17355[4].

    • IETF QUIC TLS decryption error with extraneous packets during the
      handshake Issue 17383[5].

    • Statistics → Resolved Addresses: multi-protocol (TCP/UDP/…<U+200B>)
      ports not displayed Issue 17395[6].

  New and Updated Features

  New Protocol Support

  There are no new protocols in this release.

  Updated Protocol Support

  DNP, DVB-S2-BB, ProtoBuf, PTP, QUIC, RANAP, and TACACS

  New and Updated Capture File Support

  Ascend, ERF, K12, NetScaler, and pcapng

(adam)

2021-06-05 13:06:52 UTC MAIN commitmail json YAML

doc: Updated devel/R-rlang to 0.4.11

(mef)

2021-06-05 13:06:41 UTC MAIN commitmail json YAML

(devel/R-lang) Updated 0.4.10 to 0.4.11

# rlang 0.4.11

* Fix for CRAN checks.

* Fixed a gcc11 warning related to `hash()` (#1088).

(mef)

2021-06-05 13:05:56 UTC MAIN commitmail json YAML

amule: updated to 2.3.3

2.3.3 - The "delayed too many times, but still not too late" version

Yes, it's been delayed too many times, but finally it's out! With all the new features and bug fixes from the past four years! Let me highlight some for you:

CMake support. CMake provides us platform-independent configuration files and generates native makefiles and workspaces for the compiler of your choice. It's highly experimental in its current state, but it aims to take the place of good old autoconf/automake one day.
Command completion with the TAB key in amulecmd.
Supports compilation with the latest C++ standard (C++17).
Scope graphs now (should) work on Mac.
Notification when a download completes.

(adam)

2021-06-05 12:55:42 UTC MAIN commitmail json YAML

doc: Updated textproc/R-xml2 to 1.3.2

(mef)

2021-06-05 12:55:25 UTC MAIN commitmail json YAML

(textproc/R-xml2) Updated 1.2.2 to 1.3.2

# xml2 1.3.2

* `read_html()` and `read_xml()` now error if passed strings of length
  greater than one (#121)

* `read_xml.raw()` had an inadvertent regression in 1.3.0 and is now
  again fixed (#300)

* Compilation fix on macOS 10.15.4 (@kevinushey, #296)

# xml2 1.3.1

* `read_html()` now again works with HTML files with non-ASCII encodings (#293).

# xml2 1.3.0

* Removes the Rcpp dependency

# xml2 1.2.5

* Fix compilation issue on macOS versions after High Sierra when not
  using homebrew supplied libxml2

# xml2 1.2.4

* Fix potential dangling pointer with internal `asXmlChar()` function
  (@michaelquinn32, #287).

* `as_xml_document()` now handles cases with text nodes trailing
  normal nodes (#274).

* `xml_add_child()` can now create nodes with a `par` attribute. These
  previously errored due to partial name matching of the `parent`
  function in the internal `create_node()` function. (@jennybc, #285)

* `libxml2_version()` now returns a semantic version rather than
  alphanumeric version, so "2.9.10" > "2.9.9" (#277)

(mef)

2021-06-05 12:50:54 UTC MAIN commitmail json YAML

doc: Updated www/R-shiny to 1.6.0

(mef)

2021-06-05 12:50:41 UTC MAIN commitmail json YAML

(www/R-shiny) Updated 1.3.2 to 1.6.0

shiny 1.6.0
================

This release focuses on improvements in three main areas:

1. Better theming (and Bootstrap 4) support:

  * The `theme` argument of `fluidPage()`, `navbarPage()`, and
    `bootstrapPage()` all now understand `bslib::bs_theme()` objects,
    which can be used to opt-into Bootstrap 4, use any Bootswatch
    theme, and/or implement custom themes without writing any CSS.

  * The `session` object now includes `$setCurrentTheme()` and
    `$getCurrentTheme()` methods to dynamically update (or obtain) the
    page's `theme` after initial load, which is useful for things such
    as [adding a dark mode switch to an
    app](https://rstudio.github.io/bslib/articles/theming.html#dynamic-shiny)
    or some other "real-time" theming tool like `bslib::bs_themer()`.

  * For more details, see [`{bslib}`'s
    website](https://rstudio.github.io/bslib/)

2. Caching of `reactive()` and `render*()` (e.g. `renderText()`,
  `renderTable()`, etc) expressions.

  * Such expressions automatically cache their _most recent value_,
    which helps to avoid redund ant computation within a single "flush" of
    reactivity. The new `bindCache()` function can be used to cache _all
    previous values_ (as long as they fit in the cache). This cache may be
    optionally scoped within and/or across user sessions, possibly leading
    to huge performance gains, especially when deployed at scale across
    user sessions.

  * For more details, see `help(bindCache, package = "shiny")`

3. Various improvements to accessibility for screen-reader and keyboard users.
  * For more details, see the accessibility section below.

## Full changelog

### Breaking changes

* Closed #3074: Shiny no longer supports file uploads for Internet Explorer 8 or 9. (#3075)

* Subtle changes, and some soft-deprecations, have come to
  `freezeReactiveValue` and `freezeReactiveVal` (#3055). These functions
  have been fragile at best in previous releases (issues #1791, #2463,
  #2946). In this release, we've solved all the problems we know about with
  `freezeReactiveValue(input, "x")`, by 1) invalidating `input$x` and set
  it to `NULL` whenever we freeze, and 2) ensuring that, after a freeze,
  even if the effect of `renderUI` or `updateXXXInput` is to set `input$x`
  to the same value it already has, this will result in an invalidation
  (whereas by default, Shiny filters out such spurious assignments).

  Similar problems may exist when using `freezeReactiveVal`, and when using
  `freezeReactiveValue` with non-`input` reactive values objects. But
  support for those was added mostly for symmetry with
  `freezeReactiveValue(input)`, and given the above issues, it's not clear
  to us how you could have used these successfully in the past, or why you
  would even want to. For this release, we're soft-deprecating both of
  those uses, but we're more than willing to un-deprecate if it turns out
  people are using these; if that includes you, please join the
  conversation at https://github.com/rstudio/shiny/issues/3063. In the
  meantime, you can squelch the deprecation messages for these functions
  specifically, by setting `options(shiny.deprecation.messages.freeze =
  FALSE)`.

### Accessibility

* Added [bootstrap accessibility
  plugin](https://github.com/paypal/bootstrap-accessibility-plugin) under
  the hood to improve accessibility of shiny apps for screen-reader and
  keyboard users: the enhancements include better navigations for alert,
  tooltip, popover, modal dialog, dropdown, tab Panel, collapse, and
  carousel elements. (#2911)

* Closed #2987: Improved accessibility of "live regions" -- namely,
  `*Output()` bindings and `update*Input()`. (#3042)

* Added appropriate labels to `icon()` element to provide screen-reader
  users with alternative descriptions for the `fontawesome` and
  `glyphicon`: `aria-label` is automatically applied based on the
  fontawesome name. For example, `icon("calendar")` will be announced as
  "calendar icon" to screen readers. "presentation" aria role has also been
  attached to `icon()` to remove redundant semantic info for screen
  readers. (#2917)

* Closed #2929: Fixed keyboard accessibility for file picker button:
  keyboard users can now tab to focus on `fileInput()` widget. (#2937)

* Fixed #2951: screen readers correctly announce labels and date formats
  for `dateInput()` and `dateRangeInput()` widgets. (#2978)

* Closed #2847: `selectInput()` is reasonably accessible for screen readers
  even when `selectize` option is set to TRUE. To improve `selectize.js`
  accessibility, we have added
  [selectize-plugin-a11y](https://github.com/SLMNBJ/selectize-plugin-a11y)
  by default. (#2993)

* Closed #612: Added `alt` argument to `renderPlot()` and
  `renderCachedPlot()` to specify descriptive texts for `plotOutput()`
  objects, which is essential for screen readers. By default, alt text is
  set to the static text, "Plot object," but even dynamic text can be made
  with reactive function. (#3006, thanks @trafficonese and @leonawicz for
  the original PR and discussion via #2494)

* Added semantic landmarks for `mainPanel()` and `sidebarPanel()` so that
  assistive technologies can recognize them as "main" and "complementary"
  region respectively. (#3009)

* Closed #2844: Added `lang` argument to ui `*Page()` functions (e.g.,
  `fluidPage`, `bootstrapPage`) that specifies document-level language
  within the app for the accessibility of screen readers and search-engine
  parsers. By default, it is set to empty string which is commonly
  recognized as a browser's default locale. (#2920)

* Improved accessibility for `radioButtons()` and `checkboxGroupInput()`:
  All options are now grouped together semantically for assistive
  technologies. (thanks @jooyoungseo, #3187).

### Minor new features and improvements

* Added support for Shiny Developer Mode. Developer Mode enables a number
  of `options()` to make a developer's life easier, like enabling
  non-minified JS and printing messages about deprecated functions and
  options. See `?devmode()` for more details. (#3174)

* New `reactiveConsole()` makes it easier to interactively experiment with
  reactivity at the console (#2518).

* When UI is specified as a function (e.g. `ui <- function(req) { ... }`),
  the response can now be an HTTP response as returned from the (newly
  exported) `httpResponse()` function. (#2970)

* `selectInput` and `selectizeInput` now warn about performance
  implications when thousands of choices are used, and recommend
  [server-side
  selectize](https://shiny.rstudio.com/articles/selectize.html) be used
  instead. (#2959)

* Closed #2980: `addResourcePath()` now allows paths with a leading `.`
  (thanks to @ColinFay). (#2981)

* Closed #2972: `runExample()` now supports the `shiny.port` option (thanks
  to @ColinFay). (#2982)

* Closed #2692: `downloadButton()` icon can now be changed via the `icon`
  parameter (thanks to @ColinFay). (#3010)

* Closed #2984: improved documentation for `renderCachedPlot()` (thanks to
  @aalucaci). (#3016)

* `reactiveValuesToList()` will save its `reactlog` label as
  `reactiveValuesToList(<ID>)` vs `as.list(<ID>)` (#3017)

* Removed unused (and non-exported) `cacheContext` class.

* `testServer()` can accept a single server function as input (#2965).

* `shinyOptions()` now has session-level scoping, in addition to global and
  application-level scoping. (#3080)

* `runApp()` now warns when running an application in an R package
  directory. (#3114)

* Shiny now uses `cache_mem` from the cachem package, instead of
  `memoryCache` and `diskCache`. (#3118)

* Closed #3140: Added support for `...` argument in `icon()`. (#3143)

* Closed #629: All `update*` functions now have a default value for
  `session`, and issue an informative warning if it is missing. (#3195,
  #3199)

* Improved error messages when reading reactive values outside of a
  reactive domain (e.g., `reactiveVal()()`). (#3007)

### Bug fixes

* Fixed #1942: Calling `runApp("app.R")` no longer ignores options passed
  into `shinyApp()`. This makes it possible for Shiny apps to specify what
  port/host should be used by default. (#2969)

* Fixed #3033: When a `DiskCache` was created with both `max_n` and
  `max_size`, too many items could get pruned when `prune()` was
  called. (#3034)

* Fixed #2703: Fixed numerous issues with some combinations of
  `min`/`value`/`max` causing issues with `date[Range]Input()` and
  `updateDate[Range]Input()`. (#3038, #3201)

* Fixed #2936: `dateYMD` was giving a warning when passed a vector of dates
  from `dateInput` which was greater than length 1. The length check was
  removed because it was not needed. (#3061)

* Fixed #2266, #2688: `radioButtons` and `updateRadioButtons` now accept
  `character(0)` to indicate that none of the options should be selected
  (thanks to @ColinFay). (#3043)

* Fixed a bug that `textAreaInput()` doesn't work as expected for relative
  `width` (thanks to @shrektan). (#2049)

* Fixed #2859: `renderPlot()` wasn't correctly setting
  `showtext::showtext_opts()`'s `dpi` setting with the correct resolution
  on high resolution displays; which means, if the font was rendered by
  showtext, font sizes would look smaller than they should on such
  displays. (#2941)

* Closed #2910, #2909, #1552: `sliderInput()` warns if the `value` is
  outside of `min` and `max`, and errors if `value` is `NULL` or
  `NA`. (#3194)

### Library updates

* Removed html5shiv and respond.js, which were used for IE 8 and IE 9
  compatibility. (#2973)

* Removed es5-shim library, which was internally used within
  `selectInput()` for ECMAScript 5 compatibility. (#2993)

shiny 1.5.0
===========

## Full changelog

### Breaking changes

* Fixed #2869: Until this release, `renderImage()` had a dangerous default
  of `deleteFile = TRUE`. (Sorry!) Going forward, calls to `renderImage()`
  will need an explicit `deleteFile` argument; for now, failing to provide
  one will result in a warning message, and the file will be deleted if it
  appears to be within the `tempdir()`. (#2881)

### New features

* The new `shinyAppTemplate()` function creates a new template Shiny
  application, where components are optional, such as helper files in an R/
  subdirectory, a module, and various kinds of tests. (#2704)

* `runTests()` is a new function that behaves much like R CMD
  check. `runTests()` invokes all of the top-level R files in the tests/
  directory inside an application, in that application's
  environment. (#2585)

* `testServer()` is a new function for testing reactive behavior inside
  server functions and
  modules. ([#2682](https://github.com/rstudio/shiny/pull/2682),
  [#2764](https://github.com/rstudio/shiny/pull/2764),
  [#2807](https://github.com/rstudio/shiny/pull/2807))

* The new `moduleServer` function provides a simpler interface for creating
  and using modules. (#2773)

* Resolved #2732: `markdown()` is a new function for writing Markdown with
  Github extensions directly in Shiny UIs. Markdown rendering is performed
  by the [commonmark](https://github.com/jeroen/commonmark)
  package. (#2737)

* The `getCurrentOutputInfo()` function can now return the background color
  (`bg`), foreground color (`fg`), `accent` (i.e., hyperlink) color, and
  `font` information of the output's HTML container. This information is
  reported by `plotOutput()`, `imageOutput()`, and any other output
  bindings containing a class of `.shiny-report-theme`. This feature allows
  developers to style an output's contents based on the container's CSS
  styling.  (#2740)

### Minor new features and improvements

* Fixed #2042, #2628: In a `dateInput` and `dateRangeInput`, disabled
  months and years are now a lighter gray, to make it easier to see that
  they are disabled. (#2690)

* `getCurrentOutputInfo()` previously threw an error when called from
  outside of an output; now it returns `NULL`. (#2707 and #2858)

* Added a label to observer that auto-reloads `R/` directory to avoid
  confusion when using `reactlog`. (#58)

* `getDefaultReactiveDomain()` can now be called inside a
  `session$onSessionEnded` callback and will return the calling `session`
  information. (#2757)

* Added a `'function'` class to `reactive()` and `reactiveVal()`
  objects. (#2793)

* Added a new option (`type = "hidden"`) to `tabsetPanel()`, making it
  easier to set the active tab via other input controls (e.g.,
  `radioButtons()`) rather than tabs or pills. Use this option in
  conjunction with `updateTabsetPanel()` and the new `tabsetPanelBody()`
  function (see `help(tabsetPanel)` for an example and more details).
  (#2814)

* Added function `updateActionLink()` to update an `actionLink()` label
  and/or icon value. (#2811)

* Fixed #2856: Bumped jQuery 3 from 3.4.1 to 3.5.1. (#2857)

### Bug fixes

* Fixed #2606: `debounce()` would not work properly if the code in the
  reactive expression threw an error on the first run. (#2652)

* Fixed #2653: The `dataTableOutput()` could have incorrect output if
  certain characters were in the column names. (#2658)

### Documentation Updates

### Library updates

* Updated from Font-Awesome 5.3.1 to 5.13.0, which includes icons related
  to COVID-19. For upgrade notes, see
  https://github.com/FortAwesome/Font-Awesome/blob/master/UPGRADING.md. (#2891)

shiny 1.4.0.2
===========

Minor patch release: fixed some timing-dependent tests failed
intermittently on CRAN build machines.

shiny 1.4.0.1
===========

Minor patch release to account for changes to the grid package that will be
upcoming in the R 4.0 release (#2776).

shiny 1.4.0
===========

## Full changelog

### Breaking changes

* Resolved #2554: Upgraded jQuery from v.1.12.4 to v3.4.1 and bootstrap
  from v3.3.7 to v3.4.1. (#2557). Since the jQuery upgrade may introduce
  breaking changes to user code, there is an option to switch back to the
  old version by setting `options(shiny.jquery.version = 1)`. If you've
  hard-coded `shared/jquery[.min].js` in the HTML of your Shiny app, in
  order to downgrade, you'll have to change that filepath to
  `shared/legacy/jquery[.min].js`.

### Improvements

* Resolved #1433: `plotOutput()`'s coordmap info now includes discrete axis
  limits for **ggplot2** plots. As a result, any **shinytest** tests that
  contain **ggplot2** plots with discrete axes (that were recorded before
  this change) will now report differences that can safely be updated. This
  new coordmap info was added to correctly infer what data points are
  within an input brush and/or near input click/hover in scenarios where a
  non-trivial discrete axis scale is involved (e.g., whenever
  `scale_[x/y]_discrete(limits = ...)` and/or free scales across multiple
  discrete axes are used). (#2410)

* Resolved #2402: An informative warning is now thrown for mis-specified
  (date) strings in `dateInput()`, `updateDateInput()`, `dateRangeInput()`,
  and `updateDateRangeInput()`. (#2403)

* If the `shiny.autoload.r` option is set to `TRUE`, all files ending in
  `.r` or `.R` contained in a directory named `R/` adjacent to your
  application are sourced when your app is started. This will become the
  default Shiny behavior in a future release (#2547)

* Resolved #2442: The `shiny:inputchanged` JavaScript event now triggers on
  the related input element instead of `document`. Existing event listeners
  bound to `document` will still detect the event due to event
  bubbling. (#2446)

* Fixed #1393, #2223: For plots with any interactions enabled, the image is
  no longer draggable. (#2460)

* Resolved #2469: `renderText` now takes a `sep` argument that is passed to `cat`. (#2497)

* Added `resourcePaths()` and `removeResourcePaths()` functions. (#2459)

* Resolved #2433: An informative warning is now thrown if subdirectories of
  the app's `www/` directory are masked by other resource prefixes and/or
  the same resource prefix is mapped to different local file paths. (#2434)

* Resolved #2478: `cmd + shift + f3` and `ctrl + shift + f3` can now be
  used to add a reactlog mark. If reactlog keybindings are used and the
  reactlog is not enabled, an error page is displayed showing how to enable
  reactlog recordings. (#2560)

### Bug fixes

* Partially resolved #2423: Reactivity in Shiny leaked some memory, because
  R can leak memory whenever a new symbols is interned, which happens
  whenever a new name/key is used in an environment. R now uses the fastmap
  package, which avoids this problem. (#2429)

* Fixed #2267: Fixed a memory leak with `invalidateLater`. (#2555)

* Fixed #1548: The `reactivePoll` function leaked an observer; that is the
  observer would continue to exist even if the `reactivePoll` object was no
  longer accessible. #2522

* Fixed #2116: Fixed an issue where dynamic tabs could not be added when on
  a hosted platform. (#2545)

* Resolved #2515: `selectInput()` and `selectizeInput()` now deal
  appropriately with named factors. Note that `updateSelectInput()` and
  `updateSelectizeInput()` **do not** yet handle factors; their behavior is
  unchanged. (#2524, #2540, #2625)

* Resolved #2471: Large file uploads to a Windows computer were
  slow. (#2579)

* Fixed #2387: Updating a `sliderInput()`'s type from numeric to date no
  longer changes the rate policy from debounced to immediate. More
  generally, updating an input binding with a new type should (no longer)
  incorrectly alter the input rate policy. (#2404)

* Fixed #868: If an input is initialized with a `NULL` label, it can now be
  updated with a string. Moreover, if an input label is initialized with a
  string, it can now be removed by updating with `label=character(0)`
  (similar to how `choices` and `selected` can be cleared in
  `updateSelectInput()`). (#2406)

* Fixed #2250: `updateSliderInput()` now works with un-specified (or
  zero-length) `min`, `max`, and `value`. (#2416)

* Fixed #2396: `selectInput("myID", ...)` resulting in an extra
  `myID-selectized` input (introduced in v1.2.0). (#2418)

* Fixed #2233: `verbatimTextOutput()` produced wrapped text on Safari, but
  the text should not be wrapped. (#2353)

* Fixed #2335: When `dateInput()`'s `value` was unspecified, and `max`
  and/or `min` was set to `Sys.Date()`, the value was not being set
  properly. (#2526)

* Fixed #2591: Providing malformed date-strings to `min` or `max` no longer
  results in JS errors for `dateInput()` and `dateRangeInput()`. (#2592)

* Fixed
  [rstudio/reactlog#36](https://github.com/rstudio/reactlog/issues/36):
  Changes to reactive values not displaying accurately in reactlog. (#2424)

* Fixed #2598: Showcase files don't appear with a wide window. (#2582)

* Fixed #2329, #1817: These bugs were reported as fixed in Shiny 1.3.0 but
  were not actually fixed because some JavaScript changes were accidentally
  not included in the release. The fix resolves issues that occur when
  `withProgressBar()` or bookmarking are combined with the
  [networkD3](https://christophergandrud.github.io/networkD3/) package's
  Sankey plot.

(mef)

2021-06-05 12:40:39 UTC MAIN commitmail json YAML

doc: Updated lang/go116 to 1.16.5nb1

(bsiegert)

2021-06-05 12:40:07 UTC MAIN commitmail json YAML

Update go116 to 1.16.5.

go1.16.5 (released 2021-06-03) includes security fixes to the archive/zip, math
/big, net, and net/http/httputil packages, as well as bug fixes to the linker,
the go command, and the net/http package. See the Go 1.16.5 milestone on our
issue tracker for details.

The SetString and UnmarshalText methods of math/big.Rat
<https://pkg.go.dev/math/big#Rat> may cause a panic or an unrecoverable
fatal error if passed inputs with very large exponents.
This is issue <https://github.com/golang/go/issues/44910> and
CVE-2021-33198.

Thanks to the OSS-Fuzz project for discovering this issue and to Emmanuel
Odeke for reporting it.

ReverseProxy in net/http/httputil <https://pkg.go.dev/net/http/httputil> could
be made to forward certain hop-by-hop headers, including Connection. In
case the target of the ReverseProxy was itself a reverse proxy, this would
let an attacker drop arbitrary headers, including those set by the
ReverseProxy.Director.
This is issue <https://github.com/golang/go/issues/46313> and
CVE-2021-33197.

Thanks to Mattias Grenfeldt (https://grenfeldt.dev) and Asta Olofsson for
reporting this issue.

The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions in
net <https://pkg.go.dev/net>, and their respective methods on the Resolver
<https://pkg.go.dev/net#Resolver> type may return arbitrary values
retrieved from DNS which do not follow the established RFC 1035
<https://datatracker.ietf.org/doc/html/rfc1035>rules for domain names. If
these names are used without further sanitization, for instance unsafely
included in HTML, they may allow for injection of unexpected content. Note
that LookupTXT may still return arbitrary values that could require
sanitization before further use.
This is issue <https://github.com/golang/go/issues/46241> and
CVE-2021-33195.

Thanks to Philipp Jeitner and Haya Shulman from Fraunhofer SIT for
reporting this issue.

The NewReader and OpenReader functions in archive/zip
<https://pkg.go.dev/archive/zip> can cause a panic or an unrecoverable
fatal error when reading an archive that claims to contain a large number
of files, regardless of its actual size.
This is issue <https://github.com/golang/go/issues/46242>and
CVE-2021-33196.

Thanks to the OSS-Fuzz project for discovering this issue and to Emmanuel
Odeke for reporting it.

(bsiegert)

2021-06-05 12:27:25 UTC MAIN commitmail json YAML

Added www/R-jquerylib version 0.1.4

(mef)

2021-06-05 12:25:36 UTC MAIN commitmail json YAML

www/R-jquerylib: import R-jquerylib-0.1.4

Obtain any major version of 'jQuery' (<https://code.jquery.com/>) and
use it in any webpage generated by 'htmltools' (e.g. 'shiny',
'htmlwidgets', and 'rmarkdown'). Most R users don't need to use this
package directly, but other R packages (e.g. 'shiny', 'rmarkdown',
etc.) depend on this package to avoid bundling redundant copies of
'jQuery'.

(mef)

2021-06-05 12:04:01 UTC MAIN commitmail json YAML

Added www/R-sass version 0.4.0

(mef)

2021-06-05 12:02:02 UTC MAIN commitmail json YAML

www/R-sass: import R-sass-0.4.0

An 'SCSS' compiler, powered by the 'LibSass' library. With this, R
developers can use variables, inheritance, and functions to generate
dynamic style sheets. The package uses the 'Sass CSS' extension
language, which is stable, powerful, and CSS compatible.

(mef)

2021-06-05 09:17:25 UTC MAIN commitmail json YAML

(doc/CHANGES-2021) Updated textproc/R-stringr to 1.4.0

(mef)

2021-06-05 09:14:49 UTC MAIN commitmail json YAML

(doc/CHANGES-2021, doc/TODO) ten packages updated

Updated textproc/R-markdown to 1.1
Updated print/R-tinytex to 0.32
Updated textproc/R-htmltools to 0.5.1.1
Updated devel/R-fansi to 0.5.0
Updated textproc/R-utf8 to 1.2.1
Updated math/R-tibble to 3.1.2
Updated textproc/R-highr to 0.9
Updated sysutils/R-later to 1.2.0
Updated parallel/R-promises to 1.2.0.1
Updated www/R-httpuv to 1.6.1

(mef)

2021-06-05 08:55:13 UTC MAIN commitmail json YAML



(mef)

2021-06-05 08:50:42 UTC MAIN commitmail json YAML

doc: Updated x11/xscreensaver to 5.45nb4

(wiz)

2021-06-05 08:50:31 UTC MAIN commitmail json YAML

xscreensaver: update to 5.45nb4.

Fix vulnerability when disconnecting screens.

(wiz)

2021-06-05 08:43:54 UTC MAIN commitmail json YAML

(parallel/promises) Updated 1.0.1 to 1.2.0.1

promises 1.2.0.1
==============

* Added `future_promise()` which returns a `promise` that executes the
  expression using `future::future()`. `future_promise()` should
  (typically) be a drop-in replacement for any `future::future()`
  function call. `future_promise()` will not execute `future` work
  faster than `future::future()`, but `future_promise()` will only
  submit `future` jobs if a worker is available. If no workers are
  available, `future_promise()` will hold the expression information
  in a `promise` until a worker does become available to better take
  advantage of computing resources available to the main R
  session. For more information, please see the [`future_promise()`
  article](https://rstudio.github.io/promises/articles/future_promise.html). (#62)

* Added visibility support for `Promise$then(onFulfilled)`. (#59)

promises 1.1.1
==============

* Fix handling of FutureErrors during `future::resolved()` and
  `future::value()` by discarding the corrupt future. (#37)

promises 1.1.0
==============

* Fixed #49: `promise_all()` previously did not handle `NULL` values correctly. (#50))

* `new_promise_domain` now takes a `wrapOnFinally` argument, which can
  be used to intercept registration of `finally()`. Previous versions
  treated `finally` as passing the same callback to
  `then(onFulfilled=..., onRejected=...)`, and ignoring the result;
  for backward compatibility, promise domains will still treat
  `finally` that way by default (i.e. if `wrapOnFinally` is `NULL`,
  then `finally` will result in `wrapOnFulfilled` and `wrapOnRejected`
  being called, but if `wrapOnFinally` is provided then only
  `wrapOnFinally` will be called). (#43)

(mef)

2021-06-05 08:37:14 UTC MAIN commitmail json YAML

(sysutils/R-later) Updated 1.0.0 to 1.2.0

## later 1.2.0

* Closed #138: later is now licensed as MIT. (#139)

* Closed #140: Previously, the event loop stopped running if the R
  process was forked. (#141)

* Closed #143: Packages which link to later no longer need to take a
  direct dependency on Rcpp, because `later.h` no longer includes
  `Rcpp.h`. (#144)

* Removed dependency on the BH package. C++11 is now required. (#147)

## later 1.1.0.1

* Private event loops are now automatically run by their parent. That
  is, whenever an event loop is run, its children event loops are
  automatically run. The `create_loop()` function has a new parameter
  `parent`, which defaults to the current loop. The auto-running
  behavior can be disabled by using `create_loop(parent=NULL)`. (#119)

* Fixed #73, #109: Previously, later did not build on some platforms,
  notably ARM, because the `-latomic` linker was needed on those
  platforms. A configure script now detects when `-latomic` is
  needed. (#114)

* Previously, `execLaterNative` was initialized when the package was
  loaded, but not `execLaterNative2`, resulting in a warning message
  in some cases. (#116)

(mef)

2021-06-05 08:33:02 UTC MAIN commitmail json YAML

(textproc/R-highr) Updated 0.8 to 0.9, NEWS.md unknown

(mef)

2021-06-05 08:30:24 UTC MAIN commitmail json YAML

(math/R-tibble)  Updated 2.1.3 to 3.1.2

# tibble 3.1.2

- Bump required versions of ellipsis and vctrs to avoid warning during package load.

# tibble 3.1.1

- `num()` and `char()` are reexported from pillar (#880).
- `tribble()` and `frame_matrix()` give an error if values are named (#871, @lorenzwalthert).
- Document `cli.num_colors` option (#410).
- Fix `new_tibble()` examples for compatibility with pillar 1.6.0.

# tibble 3.1.0

## Bug fixes

- `has_rownames()` now works correctly for data frames with a `"row.names"` attribute malformed due to a problem in `structure()` (#852).

- `tbl[FALSE, "column"] <- x` adds new column again (#846).

## Features

- Importing pillar 1.5.0, cli and crayon are now suggested packages (#475).

- `size_sum()` is now reexported from pillar (#850, @topepo).

- `as_tibble()` hints more often to use the `.name_repair` argument if column names are invalid (#855).

- `as_tibble.table()` mentions `.name_repair` argument in the error message (#839).

## Internal

- Remove compatibility code for pillar < 1.5.0 (#861).

- Moved most functions to the "stable" lifecycle (#860).

# tibble 3.0.6

- `vec_ptype_abbr.tbl_df()` and `type_sum.tbl_df()` now uses the name of the topmost class for subclasses of `"tbl_df"` (#843).
- Ignore errors in `formats.Rmd` vignette.
- Avoid tidy evaluation in pillar compatibility code.

# tibble 3.0.5

- Use testthat edition 3, compatible with testthat 3.0.1 (#827, #832).

# tibble 3.0.4

## Compatibility

- Establish compatibility with upcoming pillar 1.5.0 (#818).

- `tbl_sum()` shows "data frame" instead of "tibble" for objects inheriting from `"tbl"` but not `"tbl_df"` (#818).

- Register `format.tbl()` and `print.tbl()` methods only if pillar doesn't (#816).

- Use `vctrs::num_as_location()` internally for subset assignment of rows and columns for better error messages (#746).

- Adapt tests to the development version of testthat.

## Bug fixes

- Fix documentation link to `base::Extract`.

- `add_row(df)` adds an empty row again (#809, @DavisVaughan).

# tibble 3.0.3

- Fix test compatibility with rlang 0.4.7.

- Fix warning about `needs_dots` arguments with pillar >= 1.4.5 (#798).

# tibble 3.0.2

## Bug fixes

- `[[` works with classed indexes again, e.g. created with `glue::glue()` (#778).

- `add_column()` works without warning for 0-column data frames (#786).

- `tribble()` now better handles named inputs (#775) and objects of non-vtrs classes like `lubridate::Period` (#784) and `formattable::formattable` (#785).

## Performance

- Subsetting and subassignment are faster (#780, #790, #794).

- `is.null()` is preferred over `is_null()` for speed.

- Implement continuous benchmarking (#793).

## Compatibility

- `is_vector_s3()` is no longer reexported from pillar (#789).

# tibble 3.0.1

## Compatibility fixes

- `[<-.tbl_df()` coerces matrices to data frames (#762).

- Use delayed import for cli to work around unload problems in downstream packages (#754).

## Bug fixes

- More soft-deprecation warnings are actually visible.

- If `.name_repair` is a function, no repair messages are shown (#763).

- Remove superseded signal for `as_tibble.list()`, because `as_tibble_row()` only works for size 1.

## Enhancements

- `as_tibble(validate = )` now always triggers a deprecation warning.

- Subsetting and subassignment of rows with one-column matrices work again, with a deprecation warning (#760).

- Attempts to update a tibble row with an atomic vector give a clearer error message. Recycling message for subassignment appears only if target size is != 1.

- Tweak title of "Invariants" vignette.

# tibble 3.0.0

## Major breaking changes

- Subset assignment ("subassignment") and also subsetting has become stricter. Symptoms:

    - Error: No common type for ...

    - Error: Assigned data `...` must be compatible with ...

    - `i` must have one dimension, not 2

    - Error: Lossy cast from ... to ...

    The "invariants" article at https://tibble.tidyverse.org/dev/articles/invariants.html describes the invariants that the operations follow in tibble, and the most important differences to data frames. We tried to make subsetting and subassignment as safe as possible, so that errors are caught early on, while introducing as little friction as possible.

- List classes are no longer automatically treated as vectors. Symptoms:

    - Error: All columns in a tibble must be vectors

    - Error: Expected a vector, not a `...` object

    If you implement a class that wraps a list as S3 vector, you need to include `"list"` in the class:

    ```r
    structure(x, class = c("your_s3_class", "list"))
    ```

    Alternatively, implement a `vec_proxy()` method as described in https://vctrs.r-lib.org/reference/vec_data.html, or construct your class with `list_of()`.

- Added experimental support for inner names for all columns, of the form `tibble(a = c(b = 1))`. Inner names are no longer stripped when creating a tibble. They are maintained for slicing operations but not yet updated when assigning with a row subscript. This is a change that may break existing comparison tests that don't expect names in columns (#630). Symptoms:

    - "names for target but not for current" when comparing

## Breaking changes

- `tibble()` now splices anonymous data frames, `tibble(tibble(a = 1), b = a)` is equivalent to `tibble(a = 1, b = a)`. This means that `tibble(iris)` now has five columns, use `tibble(iris = iris)` if the intention is to create a packed data frame (#581).

- The `name-repair` help topic is gone, refer to `?vctrs::vec_as_names` instead.

- `expression()` columns are converted to lists as a workaround for lacking support in vctrs (#657).

- `tribble()` is now stricter when combining values. All values in a column must be compatible, otherwise an error occurs (#204). The criteria for wrapping in a list column are now based on vctrs principles: non-vectors or vectors with `vctrs::vec_size()` unequal 1 are wrapped in lists.

- `$` warns unconditionally if column not found, `[[` doesn't warn.

- `add_row()` now uses `vctrs::vec_rbind()` under the hood, this means that all columns are combined with `vctrs::vec_c()`. In particular, factor columns will be converted to character if one of the columns is a character column.

## Soft deprecations

- Soft-deprecate `subclass` argument to `new_tibble()`.

- Soft-deprecate `as_tibble()` without arguments (#683).

- Preparing to move `glimpse()` and `tbl_sum()` to the pillar package. If your package implements these methods, please import the generics from pillar as soon as they become available there.

## Features

- Internals now make heavy use of the vctrs package, following most of the invariants defined there. Name repair is the responsibility of vctrs now (#464).

- All errors emitted directly by the package inherit from the `"tibble_error"` and `"rlang_error"` classes. In some cases, `"vctrs_error"` errors may be passed through. The exact subclass is subject to change.

    Example: `tibble(a = quote(b))` raises an error that inherits from `"tibble_error_column_must_be_vector"`, `"tibble_error"` and `"rlang_error"`, and from `"error"` and `"condition"` like all errors. Do not rely on the wording of `"tibble_error_column_must_be_vector"`, this is likely to change.

    Use the following pattern to catch errors emitted by tibble:

    ```r
    tryCatch(
      your_code(),
      tibble_error = function(cnd) {
      }
    )
    ```

- New `tibble_row()` constructs tibbles that have exactly one row, or fails. Non-vector objects are automatically wrapped in a list, vectors (including lists) must have length one (#205).

- New `as_tibble_row()` and `as_tibble_col()` convert a bare vector to a one-row or one-column tibble, respectively. `as_tibble_col()` also works for non-bare vectors. Using `as_tibble()` for bare vectors is superseded (#447).

- `as_tibble.data.frame()` uses implicit row names if asked to create a column from row names. This allows lossless direct conversion of matrices with row names to tibbles (#567, @stufield).

- Implement `str.tbl_df()` (#480).

- `tribble()` now returns columns with `"unspecified"` type for 0-row tibbles.

- `add_row()` and `add_column()` now restore attributes to avoid errors when appending to sf objects or other tibble subclasses (#662).

- `add_column()` gains `.name_repair` argument. If not given, `.data` must have unique columns, with a deprecation message.

- Allow `POSIXlt` columns, they are now better supported by dplyr and other tools thanks to vctrs (#626).

- `tibble()` ignores NULL arguments, named or unnamed (#580).

- `view()` works for remote data sources by applying the same strategy as `print()` and `glimpse()`. The maximum number of rows in this case can be specified using the new `n` argument, by default it is taken from the new `"tibble.view_max"` option (#695).

## Output

- Formatting dimensions never uses scientific notation.

- `glimpse()` uses "Rows" and "Columns" instead of "Variables" and "Observations", because we're not sure if the data is tidy here (#614).

- `view()` now uses the created (or passed) title argument (#610, @xvrdm).

## Performance

- Construction and subsetting of large data frames is faster now (#717, @romainfrancois).

## Internal

- Import lifecycle package (#669).

- `new_tibble()` removes redundant subclasses from the `"class"` attribute.

- Using classed conditions. All classes start with `"tibble_error_"` and also contain `"tibble_error"` (#659).

- The magrittr pipe `%>%` is reexported.

(mef)

2021-06-05 08:13:46 UTC MAIN commitmail json YAML

(textproc/R-utf8) Updated 1.1.4 to 1.2.1, NEWS.md unknown

(mef)

2021-06-05 08:05:51 UTC MAIN commitmail json YAML

(devel/R-fansi) Updated 0.4.0 to 0.5.0

# fansi Release Notes

## v0.5.0

* [#65](https://github.com/brodieG/fansi/issues/65): `sgr_to_html` optionally
  converts CSI SGR to classes instead of inline styles (h/t @hadley).
* [#69](https://github.com/brodieG/fansi/issues/69): `sgr_to_html` is more
  disciplined about emitting unnecessary HTML (h/t @hadley).
* New functions:
    * `sgr_256`: Display all 256 8-bit colors.
    * `in_html`: Easily output HTML in a web page.
    * `make_styles`: Easily produce CSS that matches 8-bit colors.
* Adjust for changes to `nchar(..., type='width')` for C0-C1 control characters
  in R 4.1.
* Restore tests bypassed in 0.4.2.

## v0.4.2

* Temporarily bypass tests due to R bug introduced in R-devel 79799.

## v0.4.1

* Correctly define/declare global symbols as per WRE 1.6.4.1, (h/t Professor
  Ripley, Joshua Ulrich for example fixes).
* [#59](https://github.com/brodieG/fansi/issues/59): Provide a `split.nl` option
  to `set_knit_hooks` to mitigate white space issues when using blackfriday for
  the markdown->html conversion (@krlmlr).

(mef)

2021-06-05 08:02:32 UTC MAIN commitmail json YAML

^(textproc/R-htmltools) Updated 0.3.6 to 0.5.1.1

htmltools 0.5.1.1
--------------------------------------------------------------------------------

* Added shiny as a suggested package.

htmltools 0.5.1
--------------------------------------------------------------------------------

## New Features & Improvements

* Added a new `tagFunction()` for generating `tags` and/or
  `htmlDependency()`s conditional on the rendering context. For an
  example, see `?tagFunction`. (#180)

* Closed #104: `save_html()`'s `file` argument now properly handles
  relative paths. (@haozhu233, #105, #192)

* `save_html()` now has a `lang` parameter that can be used to set the
  lang attribute of `<html>`. (@ColinFay, #185)

* Closed #101: `htmlDependency` & `renderDependencies` now allow the
  `script` argument to be given as a named list containing the
  elements: `src`, `integrity`, `crossorigin`. (@matthewstrasiotto,
  #188)

* Closed #189: `validateCssUnit()` now accepts `fit-content`. (#190)

* `htmlPreserve()` can now optionally use the Pandoc `raw_attribute`
  extension to enclose HTML.

## Breaking Changes

* Closed #161: `parseCssColors(x)` now requires `x` to be a character
  vector (it no longer accepts a `list()` of strings) and an error is
  no longer thrown when `mustWork = FALSE` and `x` contains `NA`
  value(s). (#194)

## Bug fixes

* `print(as.tags(x))` no longer results in error when `x` is a generic
  `list()` of tag-like objects. (#181)

htmltools 0.5.0
--------------------------------------------------------------------------------

* `tags` is now generated by a script which collects all
  [HTML](https://developer.mozilla.org/en-US/docs/Web/HTML/Element) and
  [SVG](https://developer.mozilla.org/en-US/docs/Web/SVG/Element) element tags
  documented in [MDN Web Docs](https://developer.mozilla.org).  This feature
  only appends to the existing set of `tags` (#159)

* Removed the Rcpp depedency and the compiled code now uses C rather than C++ (#158)

* BREAKING CHANGE: Fixed #57, #153: `htmlTemplate` output no longer inserts
  extra whitespace around {{...}} replacement values. (#154)

* `HTML()` now takes `.noWS` argument, which can be used to suppress surrounding
  whitespace (similar to the new argument for tags in htmltools 0.4.0). (#154)

* `css()` now returns `NULL` instead of `""` when no non-empty properties are
  specified. (#145)

* `save_html(tags$body(...))` no longer results in double <body> tags being
  written to the .html file. (Note that `save_html(tags$html(...))` is not
  supported at this time.) (#145)

* Trailing commas now permited in `...` arguments to `css()`, `tagList()`, and
  the var-arg mutation functions: `tagAppendAttributes()`, `tagSetChildren()`,
  and `tagAppendChildren()`. (#145)

* Added `capturePlot` and `plotTag` functions, for easily creating image files
  and HTML <img> tags (respectively) from plot expressions. (#150)

* Added `parseCssColors` function, for normalizing the various CSS
  color formats into #RRGGBB(AA) strings. (#155)

* Fixed #156: Now `extractPreserveChunks()` handles strings contain
  Emoji Unicode strings correctly on Windows. (#157)

* The `.noWS` parameter for suppressing whitespace can now take an `"inside"`
  value (equivalent to `c("after-start", "before-end")`). (#163)

htmltools 0.4.0
--------------------------------------------------------------------------------

* Fixed #128: Added support for trailing commas in tagLists and the predefined
  tags. (#135)

* Added some HTML tag functions to `tags` that were missing. (#111)

* Updated RcppExports for new version of Rcpp. (#93)

* `as.character.shiny.tags()` will handle non-ASCII attributes correctly if they
  are not encoded in native encoding.

* Fixed #99: `NA` attributes were sometimes rendered as `"NA"` in the HTML,
  instead of being blank. (#100)

* The error message for trailing commas in tag functions now provides context
  and useful information. (#109)

* Stopped using inline styles to set background color for `save_html`, as doing so
  makes it difficult to override using other CSS rules. (#123)

* Added a `.noWS` argument to `tag()` and `tags` which can be used to suppress
  the automatically generated whitespace around a particular tag. (#131)

* Added a shim for `system.file()` so that htmltools works with `htmlDependency`
  objects created by a package that was loaded with `devtools::load_all()`.
  (#129)

* `validateCssUnit()` now accepts `ch`, `rem`, and `calc()`. (#134)

* Fixed #125: `print.html` removes html dependencies. (#126)

* Stopped extra carriage returns from being inserted by `save_html` on Windows.
  (#137)

(mef)

2021-06-05 07:51:33 UTC MAIN commitmail json YAML

(print/R-tinytex) Updated 0.31 to 0.32, NEWS.md unknown

(mef)

2021-06-05 07:32:59 UTC MAIN commitmail json YAML

(textproc/R-stringr) Add TEST_DEPENDS+= lines

(mef)

2021-06-05 07:30:58 UTC MAIN commitmail json YAML

(print/R-knitr) Update TEST_DEPENDS+= info, not compelete yet

(mef)

2021-06-05 07:25:56 UTC MAIN commitmail json YAML

Updated net/py-smb, misc/py-tqdm, www/py-django3, www/py-django2

(adam)

2021-06-05 07:24:55 UTC MAIN commitmail json YAML

py-django2: updated to 2.2.24

Django 2.2.24 fixes two security issues in 2.2.23.

CVE-2021-33203: Potential directory traversal via admindocs

Staff members could use the admindocs TemplateDetailView view to check the existence of arbitrary files. Additionally, if (and only if) the default admindocs templates have been customized by the developers to also expose the file contents, then not only the existence but also the file contents would have been exposed.

As a mitigation, path sanitation is now applied and only files within the template root directories can be loaded.

CVE-2021-33571: Possible indeterminate SSRF, RFI, and LFI attacks since validators accepted leading zeros in IPv4 addresses¶

URLValidator, validate_ipv4_address(), and validate_ipv46_address() didn’t prohibit leading zeros in octal literals. If you used such values you could suffer from indeterminate SSRF, RFI, and LFI attacks.

validate_ipv4_address() and validate_ipv46_address() validators were not affected on Python 3.9.5+.

(adam)

2021-06-05 07:24:24 UTC MAIN commitmail json YAML

tex package updates

(markd)

2021-06-05 07:22:34 UTC MAIN commitmail json YAML

2021-06-05 07:22:03 UTC MAIN commitmail json YAML

py-django3: updated to 3.2.4

Django 3.2.4 fixes two security issues and several bugs in 3.2.3.

CVE-2021-33203: Potential directory traversal via admindocs

Staff members could use the admindocs TemplateDetailView view to check the existence of arbitrary files. Additionally, if (and only if) the default admindocs templates have been customized by the developers to also expose the file contents, then not only the existence but also the file contents would have been exposed.

As a mitigation, path sanitation is now applied and only files within the template root directories can be loaded.

CVE-2021-33571: Possible indeterminate SSRF, RFI, and LFI attacks since validators accepted leading zeros in IPv4 addresses其

URLValidator, validate_ipv4_address(), and validate_ipv46_address() didn���t prohibit leading zeros in octal literals. If you used such values you could suffer from indeterminate SSRF, RFI, and LFI attacks.

validate_ipv4_address() and validate_ipv46_address() validators were not affected on Python 3.9.5+.

Bugfixes

Fixed a bug in Django 3.2 where a final catch-all view in the admin didn���t respect the server-provided value of SCRIPT_NAME when redirecting unauthenticated users to the login page
Fixed a bug in Django 3.2 where a system check would crash on an abstract model
Prevented unnecessary initialization of unused caches following a regression in Django 3.2
Fixed a crash in Django 3.2 that could occur when running mod_wsgi with the recommended settings while the Windows colorama library was installed
Fixed a bug in Django 3.2 that would trigger the auto-reloader for template changes when directory paths were specified with strings
Fixed a regression in Django 3.2 that caused a crash of auto-reloader with AttributeError, e.g. inside a Conda environment
Fixed a regression in Django 3.2 that caused a loss of precision for operations with DecimalField on MySQL

(adam)

2021-06-05 07:17:56 UTC MAIN commitmail json YAML

2021-06-05 07:17:32 UTC MAIN commitmail json YAML

py-tqdm: updated to 4.61.0

tqdm v4.61.0 stable

keras support for initial_epoch
misc documentation updates
update & shorten URLs
fix typos
fix & update tests
minor framework updates

(adam)

2021-06-05 07:17:09 UTC MAIN commitmail json YAML

(textproc/R-markdown) Updated 1.0 to 1.1

    CHANGES IN markdown VERSION 1.1
MAJOR CHANGES

  o renderMarkdown() and markdownToHTML() will signal an error if the input file
  is not encoded in "UTF-8".

(mef)

2021-06-05 07:15:36 UTC MAIN commitmail json YAML

py-smb: updated to 1.2.7

pysmb-1.2.7, 30 May 2021
========================
- Fix compatibility issues on file retrievals with Likewise servers
- Improve SMBConnection's connect() method to remove the need to provide sock_family
  parameter for IPv6 addresses in Python 3.x

(adam)

2021-06-05 07:13:03 UTC MAIN commitmail json YAML

Updated finance/py-stripe, sysutils/ansible-lint

(adam)

2021-06-05 07:12:45 UTC MAIN commitmail json YAML

ansible-lint: updated to 5.0.12

v5.0.12:
Bugfixes

Document syntax-check as unskippable
Fail NoLogPassword only when loops are used
Allow use of ansible debug mode
Fixed typo in .ansible-lint
Remove include missing file rule

(adam)

2021-06-05 07:11:25 UTC MAIN commitmail json YAML

2021-06-05 07:09:27 UTC MAIN commitmail json YAML

py-stripe: updated to 2.58.0

2.58.0:
* Add support for new `TaxCode` API.

(adam)

2021-06-05 07:04:22 UTC MAIN commitmail json YAML

tex-udesoftec{,-doc}: update to 1.7.1

* [udesoftec-bibcommon.sty] fixing \bbldoi by switching to pkg:uri
* [udesoftec.cls] re-enabled auto-output of glossary if existing
* [udesoftec.cls] add pkg:bookmark to replace bookmarks from pkg:hyperref
* [udesoftec-biblatex.sty] fix deprecated extrayear
* [udesoftec-bibcommon.sty] fix deprecated \ifnumber
* [udesoftec.cls] remove supervisor from example front page
* [udesoftec.cls] remove deprecationwarnings for \clearscr*

(markd)

2021-06-05 06:59:38 UTC MAIN commitmail json YAML

tex-todonotes{,-doc}: update to 1.1.4

Fix issue 51 (synctex issue on overleaf) by avoid loading the tikz shadows
library by default.

(markd)

2021-06-05 06:55:25 UTC MAIN commitmail json YAML

tex-tcolorbox{,-doc}: update to 4.50

- bug fix: 'tcbincludepdf' ignored some raster options
- bug fix: visible seam for 'bicolor' and 'tile' in 'sidebyside' mode
    around the lower (i.e. rightward) part
- Using group around arguments for title in the examples
- Allocate write registers \tcb at out and \tcb at record@out only when needed
- Documentation: recommend to use initialization options after loading hyperref
- Documentation: warn user about white title color becoming invisible
  for the skin 'empty'
- documentation correction
- documentation of library skins is split into a general part and the catalog
  of skins
- '\tcblistof' enhanced to take an optional short title and mimic
  '\listoffigures' where applicable
- library 'skins':
  * new option 'opacitybacklower'
  * new jigsaw variant of 'bicolor':
    'bicolor jigsaw', 'bicolorfirst jigsaw', 'bicolormiddle jigsaw',
    'bicolorlast jigsaw'
  * implementation of bicolor overhauled
  * skin documentation complemented with sidebyside examples.
- library 'theorems':
  * new option 'theorem hanging indent'
- library 'vignette':
  * documentation examples for fading styles for every side added
- library 'raster':
  * '\thetcbrasternum' changed output the content of a counter.
    LaTeX counter 'tcbrasterrow', 'tcbrastercolumn', 'tcbrasternum' documented.

(markd)

2021-06-05 06:47:48 UTC MAIN commitmail json YAML

tex-tikzmark{,-doc}: update to 1.10

There are occasions where a tikzmarknode is used inside a box which is then
thrown away (such as in a mathchoice) which can lead to the wrong location
on the page being associated with the remembered node.  This introduces a fix
for that, and also makes tikzmarknode work with node prefixes and suffixes.

(markd)

2021-06-05 06:41:15 UTC MAIN commitmail json YAML

2021-06-05 06:32:36 UTC MAIN commitmail json YAML

tex-texinfo: update to 5.1.57911

changes unknown

(markd)

2021-06-05 06:27:38 UTC MAIN commitmail json YAML

tex-stix2-otf{,-doc}: update to 2.12

This release fixes a number of small inconsistencies in the STIX Two Math.
The most significant change is that the widths of many of the mathematical
operators and related characters have been revised to be more consistent
with one another.

(markd)

2021-06-05 06:27:32 UTC MAIN commitmail json YAML

(math/R-ellipsis) LICENSE= mit

(mef)

2021-06-05 06:20:51 UTC MAIN commitmail json YAML

tex-siunitx{,-doc}: update to 3.0.9

3.0.9
### Changed
- Documentation improvements
- Add a hint for formatting regression tables

### Fixed
- Suppress some spurious overfull box warnings
- Issue an error with `output-product`
- Rounding of uncertainties falling in the integer part
- Printing in text mode for compound quantities
- Correctly handle `\protect` in literal units
- Interpretation of uncertainties in integers

3.0.8
### Changed
- Documentation improvements
- Add `\barn`, `\knot`, `\mmHg`, `\nauticalmile` to list of
  deprecated units
- Provide a fallback route for deprecated units

### Fixed
- Correct printing of `10^{0}`
- Emulation of `group-four-digits`

3.0.7
### Fixed
- Formatting of some literal units
- Issue a warning for removed option `load-configurations`
- Printing of `\times` and `\cdot` in text mode when using a
  locale
- Implement missing `output-exponent-marker`

3.0.6
### Changed
- Documentation improvements

### Fixed
- Avoid error if `forbid-literal-units` is set in the preamble
- Format separate uncertainty correctly where it falls purely
  in the integer part

(markd)

2021-06-05 06:11:23 UTC MAIN commitmail json YAML

doc: Updated math/R-prettyunits to 1.1.1

(mef)

2021-06-05 06:11:08 UTC MAIN commitmail json YAML

(math/R-prettyunits) Updated 1.0.2 to 1.1.1

# 1.1.1

* Fix spurious zero fractions in `pretty_bytes()` when formatting
  vectors of sizes (#23).

# 1.1.0

* `pretty_dt()`, `pretty_ms()` and `pretty_sec()` now handle `NA` values
  properly, and return `NA_character_` for them (#10, @petermeissner).

* `pretty_bytes()` now formats quantities just below the units better.
  E.g. 1MB - 1B is formatted as `"1 MB"` instead of `""1000 kB"` (#18).

* `pretty_bytes()` now has multiple styles. In particular, a fixed width
  style is useful for progress bars. Another style avoids the left-padding
  with spaces.

* The new low level `compute_bytes()` function can be used to create
  custom formatters for bytes.

(mef)

2021-06-05 06:09:38 UTC MAIN commitmail json YAML

tex-ragged2e{,-doc}: update to 3.0

Package status back to maintained.
Switched from everysel to lthooks if format allows to.

(markd)

2021-06-05 05:54:14 UTC MAIN commitmail json YAML

2021-06-05 05:48:04 UTC MAIN commitmail json YAML

tex-pst-circ{,-doc}: update to 2.18

Added new transistors: JFET (N and P channels),
  D-MOSFET (N and P channels), and IGBT

(markd)

2021-06-05 05:42:52 UTC MAIN commitmail json YAML

tex-powerdot: update to 1.7

1.7
Added paper with 16:9 ratio

1.6
fixed issue with references due to reusing a LaTeX resource
fixed issue with the rotation of the clock on smartboard paper

(markd)

2021-06-05 05:38:32 UTC MAIN commitmail json YAML

2021-06-05 05:31:03 UTC MAIN commitmail json YAML

tex-pgfplots{,-doc}: update to 1.18.1

1.18.1
- fixed a compatibility issue with PGF that slipped in right after
running the release tests.

1.18
- new feature: 'contour lua', implemented and contributed by
Francesco Poli
- new feature: ignore empty coordinates when computing regression
lines
- new feature: improve log-regression fitting of exponential
functions (using variance format=linear)
- fixed bug: image plots in log mode failed to work. Also fixed
issues with mesh/ordering=y varies
- fixed bug: handle NaN in stacked plots

(markd)

2021-06-05 05:24:41 UTC MAIN commitmail json YAML

tex-pgf{,-doc}: update to 3.1.9a

Emergency release to fix pgfplots which depends on unreleased parts of
PGF.

(markd)

2021-06-05 05:08:28 UTC MAIN commitmail json YAML

tex-pdfpages{,-doc}: update to 0.5t

This release fixes an issue with page rotations
when used together with the new pdfmanagement code.

(markd)

2021-06-05 05:03:32 UTC MAIN commitmail json YAML

2021-06-05 04:57:49 UTC MAIN commitmail json YAML

tex-jlreq-deluxe{,-doc}: update to 0.4.0

New features:
- Compact virtual fonts.
- Add support for the ruby family.

This version requires a new version of DVI driver that supports
new feature of virtual font to fallback Japanese font definition
available in TeX Live 2021.

(markd)

2021-06-05 04:52:28 UTC MAIN commitmail json YAML

tex-jlreq{,-doc}: update to 2021

- Extended `caption_align` in `\jlreqsetup`.
- Removed some `\ifthenelse`.

(markd)

2021-06-05 04:47:09 UTC MAIN commitmail json YAML

2021-06-05 04:45:08 UTC MAIN commitmail json YAML

doc: Updated devel/R-caTools to 1.18.2

(mef)

2021-06-05 04:44:57 UTC MAIN commitmail json YAML

(devel/R-caTools) Updated 1.18.0 to 1.18.2

  14) caTools-0.1.18.1 (January 2021)
  - function sample.split, documentation updated to explain subset assumptions
  - function runmad, NA/NaN handling corrected. Thanks to suggestion by W.C. May.
  15) caTools-0.1.18.2 (March 2021)
  - function documentations, missing/broken links fixed

(mef)

2021-06-05 04:43:46 UTC MAIN commitmail json YAML

2021-06-05 04:38:51 UTC MAIN commitmail json YAML

2021-06-05 04:31:51 UTC MAIN commitmail json YAML

tex-musixtex{,-doc}: update to 1.32a

Includes a new add-on package musixvbm to support vectorized beams.
Two minor corrections to musixtex.tex.

(markd)

2021-06-05 04:28:50 UTC MAIN commitmail json YAML

doc: Updated devel/R-brio to 1.1.2

(mef)

2021-06-05 04:28:38 UTC MAIN commitmail json YAML

(devel/R-brio) Updated 1.1.0 to 1.1.2

# brio 1.1.2

* Input filenames are now automatically converted to UTF-8 from the native encoding (@gaborcsardi, #15)

* `read_file_raw()` now closes file handles (@pbarber, #16)

# brio 1.1.1

* `file_line_endings()` now works as expected on ARM systems (#8)

(mef)

2021-06-05 04:28:33 UTC MAIN commitmail json YAML

2021-06-05 04:26:35 UTC MAIN commitmail json YAML

tex-mparhack{,-doc}: update to 1.5

This corrects the redefinition of an internal command, which
clashed with other usages, e.g. in the shipout hooks.

(markd)

2021-06-05 04:23:35 UTC MAIN commitmail json YAML

2021-06-05 04:21:30 UTC MAIN commitmail json YAML

tex-memoir{,-doc}: update to 3.7o

-- \footref will be added to the kernel, so we now "provide" it instead
-- as of late 2020 the caption package will now adjust it self to the
  class. It will even map several of the caption styling macros the
  class provides onto the the corresponding setup in the caption
  package. Special thanks to Axel Sommerfeldt for this
  feature. Therefore we no longer reset in preparation for caption.
-- The mparhack package is no longer marked as emulated as we did not
  emulate the fix for the bug regarding \if at firstcolumn. If a document
  specifies as twocolumn, we automatically load mparhack
-- some internal cleanup and added some recommended alternatives

(markd)

2021-06-05 04:18:55 UTC MAIN commitmail json YAML

(security/clamav-doc) regen PLIST

(mef)

2021-06-05 04:18:00 UTC MAIN commitmail json YAML

2021-06-05 04:14:03 UTC MAIN commitmail json YAML

tex-mcf2graph{,-doc}: update to 4.65

4.65
-add parameter for sw_output
  None_Info_t  :  output font,'temp-info.aux'
  None_Mcode_t :  output font,'temp-mc.aux'
  None_Report_t : output font,'temp-report.aux'
  None_Info_Mcode_t :
    output font,'temp-info.aux','temp-mc.aux'
-update mcf_data_base.mcf
-update MCF manual,example

4.64
-add parameter for sw_output
    Mcode  : output MCF aux files
    Mcode_t : output 'temp-mc.aux'
    Info_t  : output 'temp-info.aux'
-update MCF manual,example

4.63
-add option parameter sw_output
    sw_calc  =1 => sw_output=None
    sw_aux_out=1 => sw_output=Info1
    sw_aux_out=2 => sw_output=Info2
    sw_rep_out=1 => sw_output=Report
    sw_mol_out=1 => sw_output=MOL2k
    sw_mol_out=2 => sw_output=MOL3k
-delete option parameters
    sw_calc,sw_aux_out,sw_rep_out,sw_mol_out,
    sw_file_open
-change molecular data base format
    end MCF : "-" => "+"
-update MCF manual,example

4.62
-add molecular data base file
    'mcf_data_base.mcf'
-improve function beginfont()
    able to use molecular data base file
-add option parameter sw_file_open
-improve function check()
-update MCF manual,example

4.61
-change syntax
    @.$n => @$n
    &.$n => &$n
-change function name
    check_mc() => check()
-improve function check()
-update MCF manual,example

(markd)

2021-06-05 04:08:02 UTC MAIN commitmail json YAML

tex-mathtools: update to 1.27

1.27:
* fixed issue #25: Two typos in \MultlinedHook for lualatex

1.26
* LuaLaTeX has cramped primitives build in. We ought to use those when
  LuaLaTeX is used.
  LuaLaTeX brances added.
  Special thanks to Marcel Kr端ger, Ulrike Fischer and Philipp Stephani.

(markd)

2021-06-05 04:03:46 UTC MAIN commitmail json YAML

tex-lm{,-doc}: update to 2.005

A bug in some (*lm*tt.fd) LaTeX support files fixed: font substitution for
(not-existent)
light tt is now properly done.

(markd)

2021-06-05 04:00:34 UTC MAIN commitmail json YAML

2021-06-05 03:58:00 UTC MAIN commitmail json YAML

2021-06-05 02:58:18 UTC MAIN commitmail json YAML

(security/yara) build fix: ERROR: [check-portability.awk]

(mef)

2021-06-05 02:48:21 UTC MAIN commitmail json YAML

(net/frr) regen PLIST

(mef)

2021-06-05 02:35:52 UTC MAIN commitmail json YAML

(net/radsecproxy) regen PLIST

(mef)

2021-06-05 01:48:05 UTC MAIN commitmail json YAML

Updated print/tex-babel to 3.60, print/tex-babel-doc to 3.60

(mef)

2021-06-05 01:46:19 UTC MAIN commitmail json YAML

(print/tex-babel{,-doc}) Updated 3.59 to 3.60

* Fix for a critical bug with the latest LaTeX releases:
  class options were messed up.

* Improved justification=kashida/elongated: lists, vowelized texts.

* Fix: Underfull \hbox with amsmath (#133).

* Improved the ini file for Basque (captions).

(mef)

2021-06-04 21:57:57 UTC MAIN commitmail json YAML

TODO: note inkscape update in wip

(wiz)

2021-06-04 21:56:50 UTC MAIN commitmail json YAML

bind916: Fix build on SmartOS

Do not use priorities attribute as they are not supported
at least on SmartOS with gcc 7.5

(otis)

2021-06-04 19:04:11 UTC MAIN commitmail json YAML

2021-06-04 18:59:19 UTC MAIN commitmail json YAML

fuse.buildlink3.mk: on macOS, allow to use macFUSE (formerly OSXFUSE)

(adam)

2021-06-04 18:58:06 UTC MAIN commitmail json YAML

Updated net/libupnp, net/miniupnpc

(adam)

2021-06-04 18:57:46 UTC MAIN commitmail json YAML

miniupnpc: updated to 2.2.2

2.2.2:
miniupnpcmodule.c: throw an exception in UPnP_discover()
Fix usage of IP_MULTICAST_IF with struct ip_mreqn

(adam)

2021-06-04 18:56:40 UTC MAIN commitmail json YAML

libupnp: updated to 1.14.7

Version 1.14.7
Fixes broken windows build.

Version 1.14.6
Fix for a DNS Rebind exploit. A special thanks for the collaboration
of the following people:
- Alaric Senat
- Fabrice Fontaine
- Gabriel Corona
- Ian Whyman
- Jean-Francois Dockes
- Marvin Scholz
- Werner Mahr

When upnp uses ixml to parse SOAP messages which contains too many node,
services are unavailable.

Version 1.14.5
Avoid potential memory leak in http_SendMessage()

Get rid of alloca()'s.

Non-recursive version of ixmlNode_free() avoids stack overflow attack.
Fixes CVE-2021-28302.

Version 1.14.4
Add more missing CMake infrastructure to the tarball.

Version 1.14.3
Add CMake infrastructure to the tarball.

Fix for gena leak.

Version 1.14.2
upnpapi.c: Fix crash in UpnpGetIfInfo

Per getifaddrs documentation, the ifa_addr field of an ifaddrs structure
can be null. In a real world example, an entry may be provided for the
non-existent hardware address of a tunnel device. This behavior was
observed with the netlink based getifaddrs implementation in glibc.

Handle interfaces without address

I got a crash on gerbera startup because at least one interface did not have `ifa_addr` set.

The reason is quite simple: they are the physical interfaces which are part of my channel
```
2: eth1: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc fq_codel master bond0 state UP group default qlen 1000
    link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
3: eth0: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc fq_codel master bond0 state UP group default qlen 1000
    link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
4: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
```

CMake:
- Fix tests for all occasions. (Hopefully)
- Set right so-version and don't yell commands.
- Reverted libname-change till decided

Fix IPv6 GENA subscription

Use LOCAL_PORT_V6_ULA_GUA or LOCAL_PORT_V6 depending on the IPv6 address

samples: allow the user to specify the control point interface

This is useful to test UPnP on specific interface (e.g. IPv6-only).
This was already possible on the device sample.

upnp/src/api/upnpapi.c: don't set gIF_IPV4 if there is no IPv4

Don't set gIF_IPV4 if no IPv4 is found to keep the default value of '\0'
otherwise SSDP will try to register IPv4 multicast with address 0.0.0.0
which will result in a runtime failure

Version 1.14.1
CMake Github Actions, including windows build.

upnpapi.c: assume that getifaddrs is available

Assume that getifaddrs is available even if it is not POSIX-compliant,
this will simplify the code and, as a side effect, this allow pupnp to
work on an interface that does not have an IPv4 address.

CMake support.

Fixes the inclusion of alloca.h in WIN32.

Remove the now unused file ClientSubscription.c.

Remove port >= 49152 restriction.

Version 1.14.0
Reworked the miniserver code to deal with SO_REUSEADDR

Factored the common socket code and test for EADDRINUSE returning from
listen() when SO_REUSEADDR is turned on.

Removed template classes.

The files generated through template classes had some drawbacks:

1 - You could not read the code.
2 - You could not step through the code with a debugger.
3 - Doxygen was unable to document it.

This patch removes the templates and creates an auto generator for these
boilerplate generated code in the same spirit of the templates, but
solves the above problems.

Still, dealing with documentation still needs some work, but should be
much easier now.

upnpapi.c: retrieve gIF_IPV4_NETMASK with BSD

BSD is using getifaddrs, update the code to retrieve the IPv4 netmask
(used in the CallStranger fix)

Signed-off-by: Fabrice Fontaine fontaine.fabrice@gmail.com

Drop UpnpInit

This function is deprecated since a long time moreover it is vulnerable
to CallStranger a.k.a. CVE-2020-12695 and can't be fixed without
breaking the API as HostIP only allows the user to pass an IP address
and not a netmask.

If we want to discover the netmask from the HostIP provided in UPnPInit,
we'll have to loop through all the available interfaces to find the
interface with the given IP address to finally retrieve the netmask.
This is a lot of work/modification for a deprecated function. Moreover,
in the end UPnPInit will be like a "deprecated" (i.e. IPv4-only) version
of UPnPInit2.

So it is time to remove this deprecated function.

As a result, also remove getlocalhostname and DEFAULT_INTERFACE which
are not needed anymore and replace UpnpInit by UpnpInit2 in comments.

Signed-off-by: Fabrice Fontaine fontaine.fabrice@gmail.com

Partial fix for CallStranger on IPv4

This is a partial fix for CallStranger a.k.a. CVE-2020-12695

Check that DeliveryURLs are in the expected network segment as requested
by the new UPnP UDA:
https://openconnectivity.org/upnp-specs/UPnP-arch-DeviceArchitecture-v2.0-20200417.pdf.

Here is an extract of the new requirement:

The subscription request containing a delivery URL not on the same
network segment as the fully qualified event subscription URL shall not
be accepted. For private networks this means that the delivery URL
provided will adhere to the following IP ranges:

. 10.0.0.0 - 10.255.255.255 (10/8 prefix)
. 172.16.0.0 - 172.31.255.255 (172.16/12 prefix)
. 192.168.0.0 - 192.168.255.255 (192.168/16 prefix)

In the context of pupnp, this means that the IPv4 netmask is now
retrieved when using UPnPInit2. Then, each DeliveryURL is checked
against the device's IPv4 address and netmask. If one of them are not
compliant, the whole subscription is rejected.

This first commit should be enhanced / updated to:

. remove UPnPInit (it is deprecated for a long time) or update it so
. the user can also pass the netmask
. fix IPv6
. fix Windows code
. retrieve the netmask in the BSD code of UPnPInit2

Signed-off-by: Fabrice Fontaine fontaine.fabrice@gmail.com

NULL pointer dereference in FindServiceControlURLPath

Version 1.12.1
setsockopt(IP_MULTICAST_IF) fails on 64-bit CPUs

Do not use usleep when using newer POSIX C source.

usleep is deprecated and is optionally unavailable with uClibc-ng.

Add Os/UserAgent information to UpnpActionRequest and UpnpFileInfo

Add CtrlPtIPAddr to UpnpFileInfo class

List: Add extern C for C++ users

Version 1.12.0
    Reduce spurious HTTP 416 errors due to ill-defined bytes header

    I (re)discovered this behavior trying to use the Gerbera media server
    with Chromecast (built in to my Vizio P55-F1 TV).  Chromecast specifies
    "bytes:0-" with no end range, which caused pupnp to return
    RANGE_NOT_SATISFIABLE.  Jin, the author of MediaTomb, of which Gerbera
    is a continuation, fixed this in 2007 in MediaTomb's fork of pupnp, see
    gerbera@ccd7994d45 "made sure that range requests specified as
    "bytes=0-" do not trigger...", but never passed the fix upstream.  When
    restarted as Gerbera, pupnp was removed from the local tree in favor of
    using the upstream version, and the patch was lost which lead to me
    rediscovering it recently.

    This is Jin's original patch applied to pupnp 1.8.  This teaches pupnp to
    ignore the bytes header if it matches "0-" and return HTTP_OK.

When building v1.8.6 (on GNU/Linux) with --disable-device, pupnp doesn't build:
/bin/bash ../libtool  --tag=CC  --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -I../upnp/inc  -I./inc -I../ixml/inc  -DNDEBUG -I./src/inc -I./src/threadutil -I/foo/contrib/x86_64-linux-gnu/include -fPIC  -pthread  -I/foo/contrib/x86_64-linux-gnu/include -DNDEBUG=1 -O3  -DUPNP_STATIC_LIB -Os -Wall -c -o src/genlib/util/libupnp_la-util.lo `test -f 'src/genlib/util/util.c' || echo './'`src/genlib/util/util.c
In file included from src/genlib/miniserver/miniserver.c:58:0:
./src/inc/upnpapi.h:208:2: error: unknown type name 'service_info'
service_info **serv_info
^~~~~~~~~~~~

This patch fixes compilation for the --disable-device case.

GitHub PRs:
* Remove unused files
* UpnpEnableWebserver: Error correctly when web server compiled-out
* CI: Remove .travis.yml
* Remove TRUE/FALSE defines and BOOL typedef
* CI: Add address sanitizer and leak sanitizer enabled test run
* Add list test
* Add -Wextra and -Wpedantic to get more warnings
* More warning fixes
* Doxygen changes
* Remove unused headers
* Remove IN, OUT and INOUT defines
* Remove unused defines in uri.h
* Use stdbool.h instead of BOOL typedef and defines
* Various compiler warning fixes
* configure.ac: Fix Windows detection
* configure.ac: Enable silent rules
* LinkedList: Simplify _WIN32 check
* Remove checks of __OSX__ define
* Add Github Actions based CI

Github PR * Add forgotten Windows dll export qualifiers

Github PR * Remove and replace the list.h file

Github PRs:
* Overhaul list.h to fix various issues
* Use rand_s in get_random_info on Windows
* Do not redeclare timezone struct if already defined in Mingw
* Fix interface filtering for Windows
- The mentioned fix is not only needed for MSVC, but when
cross-compiling for Windows with mingw-w64 too.
* config.h: Remove DEBUG_TARGET
- The DEBUG_TARGET is no longer used, it was previously used in
upnpdebug.c to disable logging to a file, which now is done
by just not calling UpnpSetLogFileNames.
* Check for -lpthread too
- Updates pthread m4 check from upstream

Version 1.10.1
Fix format string for ExtraHeaders

Version 1.10.0
Fix sed command for upnp patch in configure.ac

Proper allocation for an array of structs and a check for an unlikely
overflow when calling the SIOCGIFCONF ioctl().

It still bugs me the stack requirements of getlocalhostname() and
UpnpGetIfInfo().

Version 1.8.6
Fix format string for ExtraHeaders

Version 1.8.5
Fixed a wrong ifdef in ssdp_device.c that was causing problems with
ipv6.

(adam)

2021-06-04 16:43:43 UTC MAIN commitmail json YAML

doc: Updated lang/go115 to 1.15.13nb1

(bsiegert)

2021-06-04 16:43:21 UTC MAIN commitmail json YAML

Update go115 to 1.15.13.

go1.15.13 (released 2021-06-03) includes security fixes to the archive/zip,
math/big, net, and net/http/httputil packages, as well as bug fixes to the
linker, the go command, and the math/big and net/http packages. See the Go
1.15.13 milestone on our issue tracker for details.

The SetString and UnmarshalText methods of math/big.Rat
<https://pkg.go.dev/math/big#Rat> may cause a panic or an unrecoverable
fatal error if passed inputs with very large exponents.
This is issue <https://github.com/golang/go/issues/44910> and
CVE-2021-33198.

Thanks to the OSS-Fuzz project for discovering this issue and to Emmanuel
Odeke for reporting it.

ReverseProxy in net/http/httputil <https://pkg.go.dev/net/http/httputil> could
be made to forward certain hop-by-hop headers, including Connection. In
case the target of the ReverseProxy was itself a reverse proxy, this would
let an attacker drop arbitrary headers, including those set by the
ReverseProxy.Director.
This is issue <https://github.com/golang/go/issues/46313> and
CVE-2021-33197.

Thanks to Mattias Grenfeldt (https://grenfeldt.dev) and Asta Olofsson for
reporting this issue.

The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions in
net <https://pkg.go.dev/net>, and their respective methods on the Resolver
<https://pkg.go.dev/net#Resolver> type may return arbitrary values
retrieved from DNS which do not follow the established RFC 1035
<https://datatracker.ietf.org/doc/html/rfc1035>rules for domain names. If
these names are used without further sanitization, for instance unsafely
included in HTML, they may allow for injection of unexpected content. Note
that LookupTXT may still return arbitrary values that could require
sanitization before further use.
This is issue <https://github.com/golang/go/issues/46241> and
CVE-2021-33195.

Thanks to Philipp Jeitner and Haya Shulman from Fraunhofer SIT for
reporting this issue.

The NewReader and OpenReader functions in archive/zip
<https://pkg.go.dev/archive/zip> can cause a panic or an unrecoverable
fatal error when reading an archive that claims to contain a large number
of files, regardless of its actual size.
This is issue <https://github.com/golang/go/issues/46242>and
CVE-2021-33196.

Thanks to the OSS-Fuzz project for discovering this issue and to Emmanuel
Odeke for reporting it.

(bsiegert)

2021-06-04 16:06:11 UTC MAIN commitmail json YAML

nbpatch: Needs C99.  Fixes PR#56033.

(jperkin)

2021-06-04 14:33:53 UTC MAIN commitmail json YAML

doc/TODO: remove recent Ruby packages

- ruby-html-proofer-3.19.1, ruby-nexpose-7.3.0, ruby-nokogumbo-2.0.5,
  ruby-rails52-5.2.5, ruby-rails60-6.0.3.6, ruby-rails61-6.1.3.1,
  ruby-redmine-4.2.0, ruby-redmine-4.1.2, ruby-redmine-4.2.0,
  ruby-redmine41-4.2.0.

(taca)

2021-06-04 14:32:21 UTC MAIN commitmail json YAML

doc: Updated sysutils/ruby-inspec-core to 4.37.23

(taca)

2021-06-04 14:31:52 UTC MAIN commitmail json YAML

sysutils/ruby-inspec-core: update to 4.37.23

4.37.23 (2021-06-03)

Merged Pull Requests

* Update inspec init plugin #5536 (Vasu1105)
* Removed support for compliance and a1 server from InSpec compliance #5534
  (Nik08)
* Add Ubuntu to list of FIPS platforms #5533 (clintoncwolfe)

(taca)

2021-06-04 14:26:09 UTC MAIN commitmail json YAML

doc: Updated devel/ruby-test-unit to 3.4.4

(taca)

2021-06-04 14:25:45 UTC MAIN commitmail json YAML

devel/ruby-test-unit: update to 3.4.4

3.4.4 (2021-06-04)

Improvements

* Rename assert_all? to assert_all. assert_all? is deprecated but is
  available.

3.4.3 (2021-06-04)

Improvements

* Stopped to change result value of Test::Unit::TestCase#include.
* Added assert_all?.
* Added support for assert_raise_with_message.

(taca)

2021-06-04 14:14:08 UTC MAIN commitmail json YAML

doc: Updated devel/php-xdebug to 3.0.4

(taca)

2021-06-04 14:13:37 UTC MAIN commitmail json YAML

devel/php-xdebug: update to 3.0.4

3.0.4 (2021-04-08)

Fixed bugs:

- Fixed issue #1802: Improve xdebug.org home page
- Fixed issue #1944: tracing is started without trigger, when profiler is
  also enabled
- Fixed issue #1947: xdebug_info() settings section does not show the modes
  that are overridden by XDEBUG_MODE
- Fixed issue #1950: Assignment trace with ASSIGN_OBJ_REF crashes
- Fixed issue #1954: Calling xdebug_start_trace without mode including
  tracing results in a fatal error

(taca)

2021-06-04 14:01:41 UTC MAIN commitmail json YAML

doc: Updated databases/php-mongodb to 1.9.1

(taca)

2021-06-04 14:01:20 UTC MAIN commitmail json YAML

databases/php-mongodb: reset PKGREVISION

(taca)

2021-06-04 14:00:35 UTC MAIN commitmail json YAML

databases/php-mongodb: update to 1.9.1

1.9.1 (2021-04-07)

Bug
* [PHPC-1713] - Ensure Cursor::current returns null on invalid positions
* [PHPC-1748] - Cursor::key returns valid values on invalid positions
* [PHPC-1774] - platform field in connection meta data cuts off PHP version
* [PHPC-1775] - php_phongo_dbpointer_init uses incorrect size for strncpy
* [PHPC-1793] - Compile failure with PHP's master branch (8.1-dev)
* [PHPC-1801] - Fix arginfo for Manager::selectServer

Task
* [PHPC-1739] - Move CI from travis-ci to GitHub Actions
* [PHPC-1808] - Upgrade libbson and libmongoc to 1.17.4

Improvement
* [PHPC-1795] - Remove usages of xtrace in shell scripts

(taca)

2021-06-04 13:56:57 UTC MAIN commitmail json YAML

doc: Updated lang/php80 to 8.0.7

(taca)

2021-06-04 13:56:31 UTC MAIN commitmail json YAML

lang/php80: update to 8.0.7

03 Jun 2021, PHP 8.0.7

- Core:
  . Fixed bug #80960 (opendir() warning wrong info when failed on Windows).
    (cmb)
  . Fixed bug #67792 (HTTP Authorization schemes are treated as case-sensitive).
    (cmb)
  . Fixed bug #80972 (Memory exhaustion on invalid string offset). (girgias)

- FPM:
  . Fixed bug #65800 (Events port mechanism). (psumbera)

- FTP:
  . Fixed bug #80901 (Info leak in ftp extension). (cmb)
  . Fixed bug #79100 (Wrong FTP error messages). (cmb)

- GD:
  . Fixed bug #81032 (GD install is affected by external libgd installation).
    (Flavio Heleno, cmb)

- Intl:
  . Fixed bug #81019 (Unable to clone NumberFormatter after failed parse()).
    (Nikita)

- MBString:
  . Fixed bug #81011 (mb_convert_encoding removes references from arrays). (cmb)

- ODBC:
  . Fixed bug #80460 (ODBC doesn't account for SQL_NO_TOTAL indicator). (cmb)

- Opcache:
  . Fixed bug #81007 (JIT "not supported" on 32-bit x86 -- build problem?).
    (Nikita)
  . Fixed bug #81015 (Opcache optimization assumes wrong part of ternary
    operator in if-condition). (Nikita)
  . Fixed bug #81046 (Literal compaction merges non-equal related literals).
    (Nikita)

- PDO_MySQL:
  . Fixed bug #81037 (PDO discards error message text from prepared
    statement). (Kamil Tekiela)

- PDO_ODBC:
  . Fixed bug #44643 (bound parameters ignore explicit type definitions). (cmb)

- pgsql:
  . Fixed php_pgsql_fd_cast() wrt. php_stream_can_cast(). (cmb)

- SPL:
  . Fixed bug #80933 (SplFileObject::DROP_NEW_LINE is broken for NUL and CR).
    (cmb, Nikita)

- XMLReader:
  . Fixed bug #73246 (XMLReader: encoding length not checked). (cmb)

- Zip:
  . Fixed bug #80863 (ZipArchive::extractTo() ignores references). (cmb)

(taca)

2021-06-04 13:44:21 UTC MAIN commitmail json YAML

mysql80-client: Remove deleted MESSAGE_SRC.

(jperkin)

2021-06-04 13:32:32 UTC MAIN commitmail json YAML

doc: Updated multimedia/vlc to 3.0.14nb2

(wiz)

2021-06-04 13:32:20 UTC MAIN commitmail json YAML

vlc: force libintl acceptance by the configure script

Add locale files to PLIST.

Bump PKGREVISION.

(wiz)

2021-06-04 12:48:12 UTC MAIN commitmail json YAML

Updated www/py-websockets, www/py-uvicorn

(adam)

2021-06-04 12:47:54 UTC MAIN commitmail json YAML

py-uvicorn: updated to 0.14.0

0.14.0

Added

Defaults ws max_size on server to 16MB
Improve user feedback if no ws library installed
Support 'reason' field in 'websocket.close' messages
Implemented lifespan.shutdown.failed

Changed

Upgraded websockets requirements
Switch to asyncio streams API
Update httptools from 0.1.* to 0.2.*
Allow Click 8.0
Add search for a trusted host in ProxyHeadersMiddleware
Up wsproto to 1.0.0

Fixed

Force reload_dirs to be a list
Fix gunicorn worker not running if extras not installed
Fix socket port 0
Prevent garbage collection of main lifespan task

(adam)

2021-06-04 12:46:55 UTC MAIN commitmail json YAML

py-websockets: updated to 9.1

9.1

Version 9.1 fixes a security issue introduced in version 8.0.
Version 8.0 was vulnerable to timing attacks on HTTP Basic Auth passwords.

(adam)

2021-06-04 12:32:17 UTC MAIN commitmail json YAML

sysutils/psmisc: Drop MESSAGE

As containing a hint that is mostly in the docs, and if actually
needed, should be added to those docs.

(gdt)

2021-06-04 12:31:24 UTC MAIN commitmail json YAML

sysutils/psmisc: Update HOMEPAGE

Also note new MASTER_SITES on gitlab.

(gdt)

2021-06-04 12:26:00 UTC MAIN commitmail json YAML

sysutils/smartmontools: Drop MESSAGE

It described update issues from 2013, and is duplicative with the
installed documentation.

(gdt)

2021-06-04 12:21:55 UTC MAIN commitmail json YAML

security/sudo: Drop MESSAGE (as hints to read docs)

(gdt)

2021-06-04 12:20:53 UTC MAIN commitmail json YAML

print/xpdf: Drop MESSAGE

Upgrade hints from 2011 are not useful.

(gdt)

2021-06-04 12:19:30 UTC MAIN commitmail json YAML

vlc: sort API depends next to includes, and remove an outdated one

(wiz)

2021-06-04 11:55:45 UTC MAIN commitmail json YAML

net/ntp4: Drop MESSAGE (as pointer to docs)

(gdt)

2021-06-04 11:32:24 UTC MAIN commitmail json YAML

audio/ampache: Drop MESSAGE

This only suggests reading the INSTALL document and repeats things
that should be in there.

(gdt)

2021-06-04 11:30:35 UTC MAIN commitmail json YAML

audio/abcde: Trim MESSAGE

Remove suggestion to look at example and content from the docs.

(gdt)

2021-06-04 11:28:30 UTC MAIN commitmail json YAML

audio/SDL_mixer: Drop MESSAGE

It merely suggests packages that can use facilities in this package.

(gdt)

2021-06-04 11:27:17 UTC MAIN commitmail json YAML

doc: Updated sysutils/gnome-control-center to 40.0

(cirnatdan)

2021-06-04 11:27:01 UTC MAIN commitmail json YAML

gnome-control-center: Update sysutils/gnome-control-center to 40.0

================
Version 40
================

- Updated translations

================
Version 40.rc
================

- Various fixes to the language chooser
- Updated translations

Location
- Wrap label to fit smaller window sizes

Mouse & Touchpad
- Allow horizontal scrolling in test page

Network
- Fix creation of the netmask widget

================
Version 40.beta
================

- Various improvements to fingerprint management
- Show hardware model and vendor in the About panel
- New Keyboard panel design
- New power mode selector in the Power panel
- Updated translations

About
- Show hardware model and vendor
- Use os-release to search for the OS logo

Accessibility
- Major code cleanup

Display
- Try harder to select a good and working scale

Keyboard
- Handle input sources

Power
- Rearrange battery code to a new widget
- Add a new "Power Mode" section

Sharing
- Also disable Traker3

Sound
- Update mute button icon when volume changes

User Accounts
- Fix free of constant string
- Use properly translated fingerprint strings
- Improve transition to parental controls window
- Many improvements to fingerprint management

(cirnatdan)

2021-06-04 09:58:12 UTC MAIN commitmail json YAML

doc: Updated devel/nss to 3.66

(wiz)

2021-06-04 09:58:03 UTC MAIN commitmail json YAML

nss: update to 3.66.

Bugs fixed:
* Bug 1710716 - Remove Expired Sonera Class2 CA from NSS.
* Bug 1710716 - Remove Expired Root Certificates from NSS - QuoVadis Root Certification Authority.
* Bug 1708307 - Remove Trustis FPS Root CA from NSS.
* Bug 1707097 - Add Certum Trusted Root CA to NSS.
* Bug 1707097 - Add Certum EC-384 CA to NSS.
* Bug 1703942 - Add ANF Secure Server Root CA to NSS.
* Bug 1697071 - Add GLOBALTRUST 2020 root cert to NSS.
* Bug 1712184 - NSS tools manpages need to be updated to reflect that sqlite is the default database.
* Bug 1712230 - Don't build ppc-gcm.s with clang integrated assembler.
* Bug 1712211 - Strict prototype error when trying to compile nss code that includes blapi.h.
* Bug 1710773 - NSS needs FIPS 180-3 FIPS indicators.
* Bug 1709291 - Add VerifyCodeSigningCertificateChain.
* Use GNU tar for the release helper script.

(wiz)

2021-06-04 09:47:27 UTC MAIN commitmail json YAML

doc: Updated www/apache24 to 2.4.48

(wiz)

2021-06-04 09:47:16 UTC MAIN commitmail json YAML

apache: update to 2.4.48.

Changes with Apache 2.4.48

  *) mod_proxy_wstunnel: Add ProxyWebsocketFallbackToProxyHttp to opt-out the
    fallback to mod_proxy_http for WebSocket upgrade and tunneling.
    [Yann Ylavic]

  *) mod_proxy: Fix flushing of THRESHOLD_MIN_WRITE data while tunneling.
    BZ 65294.  [Yann Ylavic]

  *) core: Fix a regression that stripped the ETag header from 304 responses.
    PR 61820 [Ruediger Pluem, Roy T. Fielding]

  *) core: Adding SSL related inquiry functions to the server API.
    These function are always available, even when no module providing
    SSL is loaded. They provide their own "shadowing" implementation for
    the optional functions of similar name that mod_ssl and impersonators
    of mod_ssl provide.
    This enables loading of several SSL providing modules when all but
    one of them registers itself into the new hooks. Two old-style SSL
    modules will not work, as they replace the others optional functions
    with their own.
    Modules using the old-style optional functions will continue to work
    as core supplies its own versions of those.
    The following has been added so far:
    - ap_ssl_conn_is_ssl() to query if a connection is using SSL.
    - ap_ssl_var_lookup() to query SSL related variables for a
      server/connection/request.
    - Hooks for 'ssl_conn_is_ssl' and 'ssl_var_lookup' where modules
      providing SSL can install their own value supplying functions.
    - ap_ssl_add_cert_files() to enable other modules like mod_md to provide
      certificate and keys for an SSL module like mod_ssl.
    - ap_ssl_add_fallback_cert_files() to enable other modules like mod_md to
      provide a fallback certificate in case no 'proper' certificate is
      available for an SSL module like mod_ssl.
    - ap_ssl_answer_challenge() to enable other modules like mod_md to
      provide a certificate as used in the RFC 8555 'tls-alpn-01' challenge
      for the ACME protocol for an SSL module like mod_ssl. The function
      and its hook provide PEM encoded data instead of file names.
    - Hooks for 'ssl_add_cert_files', 'ssl_add_fallback_cert_files' and
      'ssl_answer_challenge' where modules like mod_md can provide providers
      to the above mentioned functions.
    - These functions reside in the new 'http_ssl.h' header file.
    [Stefan Eissing]

  *) core/mod_ssl/mod_md: adding OCSP response provisioning as core feature. This
    allows modules to access and provide OCSP response data without being tied
    of each other. The data is exchanged in standard, portable formats (PEM encoded
    certificates and DER encoded responses), so that the actual SSL/crypto
    implementations used by the modules are independant of each other.
    Registration and retrieval happen in the context of a server (server_rec)
    which modules may use to decide if they are configured for this or not.
    The area of changes:
    1. core: defines 2 functions in include/http_ssl.h, so that modules may
        register a certificate, together with its issuer certificate for OCSP
        response provisioning and ask for current response data (DER bytes) later.
        Also, 2 hooks are defined that allow modules to implement this OCSP
        provisioning.
    2. mod_ssl uses the new functions, in addition to what it did already, to
        register its certificates this way. If no one is interested in providing
        OCSP, it falls back to its own (if configured) stapling implementation.
    3. mod_md registers itself at the core hooks for OCSP provisioning. Depending
        on configuration, it will accept registrations of its own certificates only,
        all certificates or none.
    [Stefan Eissing]

*) mod_md: v2.4.0 with improvements and bugfixes
    - MDPrivateKeys allows the specification of several types. Beside "RSA" plus
    optional key lengths elliptic curves can be configured. This means you can
    have multiple certificates for a Managed Domain with different key types.
    With ```MDPrivateKeys secp384r1 rsa2048``` you get one ECDSA  and one RSA
    certificate and all modern client will use the shorter ECDSA, while older
    client will get the RSA certificate.
    Many thanks to @tlhackque who pushed and helped on this.
    - Support added for MDomains consisting of a wildcard. Configuring
    ```MDomain *.host.net``` will match all virtual hosts matching that pattern
    and obtain one certificate for it (assuming you have 'dns-01' challenge
    support configured). Addresses #239.
    - Removed support for ACMEv1 servers. The only known installation used to
    be Let's Encrypt which has disabled that version more than a year ago for
    new accounts.
    - Andreas Ulm (<https://github.com/root360-AndreasUlm>) implemented the
    ```renewing``` call to ```MDMessageCmd``` that can deny a certificate
    renewal attempt. This is useful in clustered installations, as
    discussed in #233).
    - New event ```challenge-setup:<type>:<domain>```, triggered when the
    challenge data for a domain has been created. This is invoked before the
    ACME server is told to check for it. The type is one of the ACME challenge
    types. This is invoked for every DNS name in a MDomain.
    - The max delay for retries has been raised to daily (this is like all
    retries jittered somewhat to avoid repeats at fixed time of day).
    - Certain error codes reported by the ACME server that indicate a problem
    with the configured data now immediately switch to daily retries. For
    example: if the ACME server rejects a contact email or a domain name,
    frequent retries will most likely not solve the problem. But daily retries
    still make sense as there might be an error at the server and un-supervised
    certificate renewal is the goal. Refs #222.
    - Test case and work around for domain names > 64 octets. Fixes #227.
    When the first DNS name of an MD is longer than 63 octets, the certificate
    request will not contain a CN field, but leave it up to the CA to choose one.
    Currently, Lets Encrypt looks for a shorter name in the SAN list given and
    fails the request if none is found. But it is really up to the CA (and what
    browsers/libs accept here) and may change over the years. That is why
    the decision is best made at the CA.
    - Retry delays now have a random +/-[0-50]% modification applied to let
    retries from several servers spread out more, should they have been
    restarted at the same time of day.
    - Fixed several places where the 'badNonce' return code from an ACME server
    was not handled correctly. The test server 'pebble' simulates this behaviour
    by default and helps nicely in verifying this behaviour. Thanks, pebble!
    - Set the default `MDActivationDelay` to 0. This was confusing to users that
    new certificates were deemed not usably before a day of delay. When clocks are
    correct, using a new certificate right away should not pose a problem.
    - When handling ACME authorization resources, the module no longer requires
    the server to return a "Location" header, as was necessary in ACMEv1.
    Fixes #216.
    - Fixed a theoretical uninitialized read when testing for JSON error responses
    from the ACME CA. Reported at <https://bz.apache.org/bugzilla/show_bug.cgi?id=64297>.
    - ACME problem reports from CAs that include parameters in the Content-Type
    header are handled correctly. (Previously, the problem text would not be
    reported and retries could exceed CA limits.)
    - Account Update transactions to V2 CAs now use the correct POST-AS-GET method.
    Previously, an empty JSON object was sent - which apparently LE accepted,
    but others reject.
    [Stefan Eissing, @tlhackque, Andreas Ulm]

Changes with Apache 2.4.47

  *) mod_dav_fs: Improve logging output when failing to open files for
    writing.  PR 64413.  [Bingyu Shen <ahshenbingyu gmail.com>]

  *) mod_http2: Fixed a race condition that could lead to streams being
    aborted (RST to the client), although a response had been produced.
    [Stefan Eissing]

  *) mod_lua: Add support to Lua 5.4  [Joe Orton, Giovanni Bechis, Ruediger Pluem]

  *) MPM event/worker: Fix possible crash in child process on early signal
    delivery.  PR 64533.  [Ruediger Pluem]

  *) mod_http2: sync with github standalone version 1.15.17
    - Log requests and sent the configured error response in case of early detected
      errors like too many or too long headers. [Ruediger Pluem]
    - new option 'H2OutputBuffering on/off' which controls the buffering of stream output.
      The default is on, which is the behaviour of older mod-h2 versions. When off, all
      bytes are made available immediately to the main connection for sending them
      out to the client. This fixes interop issues with certain flavours of gRPC, see
      also <https://github.com/icing/mod_h2/issues/207>.
      [Stefan Eissing]

  *) mod_unique_id: Fix potential duplicated ID generation under heavy load.
    PR 65159
    [Jonas Müntener <jonas.muentener ergon.ch>, Christophe Jaillet]

  *) "[mod_dav_fs etag handling] should really honor the FileETag setting".
    - It now does.
    - Add "Digest" to FileETag directive, allowing a strong ETag to be
      generated using a file digest.
    - Add ap_make_etag_ex() and ap_set_etag_fd() to allow full control over
      ETag generation.
    - Add concept of "binary notes" to request_rec, allowing packed bit flags
      to be added to a request.
    - First binary note - AP_REQUEST_STRONG_ETAG - allows modules to force
      the ETag to a strong ETag to comply with RFC requirements, such as those
      mandated by various WebDAV extensions.
    [Graham Leggett]

  *) mod_proxy_http: Fix a possibly crash when the origin connection gets
    interrupted before completion.  PR 64234.
    [Barnim Dzwillo <dzwillo strato.de>, Ruediger Pluem]

  *) mod_ssl: Do not keep connections to OCSP responders alive when doing
    OCSP requests.  PR 64135.  [Ruediger Pluem]

  *) mod_ssl: Improve the coalescing filter to buffer into larger TLS
    records, and avoid revealing the HTTP header size via TLS record
    boundaries (for common response generators).
    [Joe Orton, Ruediger Pluem]

  *) mod_proxy_hcheck: Don't pile up health checks if the previous one did
    not finish before hcinterval.  PR 63010.  [Yann Ylavic]

  *) mod_session: Improve session parsing.  [Yann Yalvic]

  *) mod_authnz_ldap: Prevent authentications with empty passwords for the
    initial bind to fail with status 500. [Ruediger Pluem]

  *) mod_auth_digest: Fast validation of the nonce's base64 to fail early if
    the format can't match anyway.  [Yann Ylavic]

  *) mod_proxy_fcgi: Honor "SetEnv proxy-sendcl" to forward a chunked
    Transfer-Encoding from the client, spooling the request body when needed
    to provide a Content-Length to the backend.  PR 57087.  [Yann Ylavic]

  *) mod_proxy: Put mod_proxy_{connect,wstunnel} tunneling code in common in
    proxy_util.  [Yann Ylavic]

  *) mod_proxy: Improve tunneling loop to support half closed connections and
    pending data draining (for protocols like rsync). PR 61616. [Yann Ylavic]

  *) mod_proxy_http: handle Upgrade request, 101 (Switching Protocol) response
    and switched protocol forwarding.  [Yann Ylavic]

  *) mod_proxy_wstunnel: Leave Upgrade requests handling to mod_proxy_http,
    allowing for (non-)Upgrade negotiation with the origin server.
    [Yann Ylavic]

  *) mod_proxy: Allow ProxyErrorOverride to be restricted to specific status
    codes.  PR63628. [Martin Drößler <mail martindroessler.de>]

  *) core: Add ReadBufferSize, FlushMaxThreshold and FlushMaxPipelined
    directives.  [Yann Ylavic]

  *) core: Ensure that aborted connections are logged as such. PR 62823
    [Arnaud Grandville <contact@grandville.net>]

  *) http: Allow unknown response status' lines returned in the form of
    "HTTP/x.x xxx Status xxx".  [Yann Ylavic]

  *) mod_proxy_http: Fix 100-continue deadlock for spooled request bodies,
    leading to Request Timeout (408).  PR 63855.  [Yann Ylavic]

  *) core: Remove headers on 304 Not Modified as specified by RFC7234, as
    opposed to passing an explicit subset of headers. PR 61820.
    [Giovanni Bechis]

  *) mpm_event: Don't reset connections after lingering close, restoring prior
    to 2.4.28 behaviour.  [Yann Ylavic]

  *) mpm_event: Kill connections in keepalive state only when there is no more
    workers available, not when the maximum number of connections is reached,
    restoring prior to 2.4.30 behaviour.  [Yann Ylavic]

  *) mod_unique_id: Use base64url encoding for UNIQUE_ID variable,
    avoiding the use of '@'.  PR 57044.
    [Michael Kaufmann <apache-bugzilla michael-kaufmann.ch>]

  *) mod_rewrite: Extend the [CO] (cookie) flag of RewriteRule to accept a
    SameSite attribute. [Eric Covener]

  *) mod_proxy: Add proxy check_trans hook.  This allows proxy
    modules to decline request handling at early stage.

  *) mod_proxy_wstunnel: Decline requests without an Upgrade
    header so ws/wss can be enabled overlapping with later
    http/https.

  *) mod_http2: Log requests and sent the configured error response in case of
    early detected errors like too many or too long headers.
    [Ruediger Pluem, Stefan Eissing]

  *) mod_md: Lowered the required minimal libcurl version from 7.50 to 7.29
    as proposed by <alexander.gerasimov codeit.pro>. [Stefan Eissing]

  *) mod_ssl: Fix request body buffering with PHA in TLSv1.3.  [Joe Orton]

  *) mod_proxy_uwsgi: Fix a crash when sending environment variables with no
    value. PR 64598 [Ruediger Pluem]

  *) mod_proxy: Recognize parameters from ProxyPassMatch workers with dollar
    substitution, such that they apply to the backend connection.  Note that
    connection reuse is disabled by default to avoid compatibility issues.
    [Takashi Sato, Jan Kaluza, Eric Covener, Yann Ylavic, Jean-Frederic Clere]

(wiz)