glibmm2.68: update to 2.78.1.

2.78.1 (stable):

Glib:
* Dispatcher: Allow destroy during emit
  (Kjell Ahlstedt) Issue #116 (PBS)

gmmproc:
* h2def.py: Make return types that are unsigned work.
  Required by gtkmm4, GdkDmabufTextureBuilder
  (Kjell Ahlstedt)

Build:
* Meson build: Don't fail if warning_level=everything
  (Daniel Boles, Kjell Ahlstedt) Merge request gtkmm!87
* MSVC, NMake: Make dep paths configurable
  (Chun-wei Fan)

2.78.0 (stable):

Glib:
* ustring: Add a std::hash<> specialization
  Not included by #include <glibmm.h>.
  Activate with #include <glibmm/ustring_hash.h>.
  (Kjell Ahlstedt) Issue #16 (Murray Cumming), merge request !61

2.77.0 (unstable):

Glib, Gio:
* Use callback functions with C linkage
  (Kjell Ahlstedt) Issue #1 (Murray Cumming)

Glib:
* Add create_variant()
  (Kjell Ahlstedt) Issue #109 (ilya-fedin)
* Add VariantBase::get_dynamic()
  (Kjell Ahlstedt) Issue #110 (ilya-fedin)
* Variant: Provide Variant<long long> whenever possible
  (Kjell Ahlstedt) Issue #111 (ilya-fedin)
* VariantContainerBase: Add a const version of get_child()
  and deprecate the non-const version
  (Kjell Ahlstedt) Issue #112 (ilya-fedin)
* Add DBusHandle and Variant<DBusHandle>
  (Kjell Ahlstedt) Issue #113 (ilya-fedin)
* ustring: Add truncate_middle()
  (Kjell Ahlstedt)

Gio:
* Add Subprocess and SubprocessLauncher
  (Kjell Ahlstedt) Issue #106 (ilya-fedin)
* Resolver: Add set/get/property_timeout()
  (Kjell Ahlstedt)

Documentation:
* Gio::File: Fix various spelling errors
  (Daniel Boles)
* Remove AUTHORS and README.SUN; add info to README.md
  (Kjell Ahlstedt) Issue gtkmm#140

gmmproc:
* Generate callback functions with C linkage
  (Kjell Ahlstedt) Issue #1 (Murray Cumming)

Examples:
* Add subprocess example
  (Kjell Ahlstedt) Issue #106 (ilya-fedin)

Tests:
* Giomm tests: Test for /etc/passwd instead of /etc/fstab
  (Jeremy Bicha) Merge request !60

Build:
* Require glib-2.0 >= 2.77.0
* Autotools build: Don't include config.h in ustring.cc
  (Kjell Ahlstedt)

2.76.0 (stable):

Glib:
* Dispatcher: Don't warn when a Dispatcher is deleted while
  messages are pending.
  (Kjell Ahlstedt) Issue #108 (PBS)
* Dispatcher: Add const versions of emit() and operator()()
  and deprecate the non-const versions.
  (Kjell Ahlstedt) Issue #103 (PBS)

Gio:
* ListModel: Add get_typed_object()
  (Kjell Ahlstedt) See issue gtkmm#132

2.75.0 (unstable):

Glib:
* Module: Deprecate build_path()
* Binding: Fix the bind_property() with two transformation functions
* Add the GLIBMM_CHECK_VERSION() preprocessor macro
  (Kjell Ahlstedt)

Gio:
* NetworkMonitor::get_default(): Add refreturn
  (Kjell Ahlstedt) Issue #104 (ilya-fedin)
* AppInfo: Add get_[recommended|fallback]_for_type()
  (Kjell Ahlstedt) Issue #105 (ilya-fedin)
* Add BytesIcon
  (Kjell Ahlstedt) Issue #107 (ilya-fedin)
* ListStore: Rename a local variable
  (Chun-wei Fan) Merge request !59
* Settings: Add bind() with mapping functions and unbind()
  (Kjell Ahlstedt)

Documentation:
* Glib::Binding::unbind(): Fix documentation
  (Kjell Ahlstedt)

gmmproc:
* generate_wrap_init.pl.in: Disable warning C4273 on Visual Studio
  (Chun-wei Fan) Merge request !57

Tests:
* Fix giomm_simple test on Windows
  (Chun-wei Fan) Merge request !58

Meson build:
* Detect if we build from a git subtree
  (William Roy) Merge request gtkmm!72
  (Kjell Ahlstedt) Issue gtkmm#131 (William Roy)
* Don't copy files with configure_file()
  (Kjell Ahlstedt)

2.74.0 (stable):

Gio:
* ListStore: Add find()
* File: Add create_tmp()
  (Kjell Ahlstedt)

Documentation:
* File: Document create_for_parse_name()
  (Kjell Ahlstedt)

2.73.2 (unstable):

Glib:
* ustring: Add release()
  (Kjell Ahlstedt) Issue #101 (PBS)

Gio:
* ListStore: Don't derive a gtkmm__GListStore GType
  (Kjell Ahlstedt) Issue glib#2661
* DBus::Proxy: get_connection(), get_interface_info(): Add refreturn
  (Kjell Ahlstedt) Issue #102 (우정모)
* AppInfo: Add get_default_for_type_async/finish(),
  get_default_for_uri_scheme_async/finish()
* File: Add make_symbolic_link_async/finish()
* ListStore: Add property_n_items()
* Resolver: Add lookup_by_name_with_flags(),
  lookup_by_name_with_flags_async/finish()
  (Kjell Ahlstedt)

Documentation:
* Glib::RefPtr: Improve the documentation
  (Kjell Ahlstedt) Issue gtkmm#119 (David Marceau)
* Gio::Action: Improve the documentation
  (Kjell Ahlstedt) Issue #100 (Diederik van Lierop)

gmmproc:
* Improved handling of final types
  (Kjell Ahlstedt) Issue glib#2661
* Improve handling of gi-docgen syntax in C documentation
  (Kjell Ahlstedt)

Build:
* Meson build: Avoid unnecessary configuration warnings
  (Kjell Ahlstedt)
* Meson/MSVC: Add more warnings to ignore
  (Chun-wei Fan)
* NMake Makefiles: Ensure g[lib|io]mm[config.h|.rc] are created
  (Chun-wei Fan) Issue #99 (Martin Ammermüller)
* Require glib-2.0 >= 2.73.2
  (Kjell Ahlstedt)

2.72.1 (stable):

Glib:
* ustring_Iterator: Don't declare copy constructor =default.
  A fix in the 2.72.0 release broke ABI.
  (Kjell Ahlstedt) Issue #98 (Scotty Trees)

2.72.0 (stable):

Glib:
* MainContext: Add create(MainContextFlags flags)
  (Kjell Ahlstedt)

Gio:
* Add AppInfoMonitor
  (Kjell Ahlstedt, technic93) Issue #97
* DBus::Proxy: signal_signal() accepts a signal name
* File: Add move_async() and move_finish()
* SocketClient: Deprecate set/get/property_tls_validation_flags()
* TlsCertificate: Add properties private_key, private_key_pem,
pkcs11_uri, private_key_pkcs11_uri. Fix the create*() methods.
* TlsClientConnection.hg: Deprecate set/get/property_validation_flags()
  (Kjell Ahlstedt)

gmmproc:
* Add "ignore_deprecations" argument in _WRAP_METHOD()
  (Kjell Ahlstedt)

Build:
* Require glib-2.0 >= 2.71.2
  (Kjell Ahlstedt)
* MSVC build: Support VS2022 builds
  (Chun-wei Fan)
* Meson build: Specify 'check' option in run_command()
  Require Meson >= 0.55.0
  (Kjell Ahlstedt)

2.70.0 (stable):

Glib:
* Timer: Add resume() and is_active()
  (Kjell Ahlstedt) Issue #87 (chamignoom)
* Add the Environ class
  (Kjell Ahlstedt) Issue #89 (Alexander Shaduri)
* Binding: Add dup_source(), dup_target().
    Deprecate get_source(), get_target().
  TimeZone: Add operator bool(), create_identifier(). Deprecate create().
  (Kjell Ahlstedt)

Gio:
* FileInfo: Add get/set_access_date(), get/set_creation_date().
  Notification: Add set_category().
  TlsCertificate: Add property/get_not_valid_before(),
    property/get_not_valid_after(), property/get_subject_name(),
    property/get_issuer_name().
  TlsConnection: Add property/get_protocol_version(),
    property/get_ciphersuite_name().
  (Kjell Ahlstedt)

Tests:
* Add test of Glib::Environ
  (Kjell Ahlstedt) Issue #89 (Alexander Shaduri)

gmmproc:
* Handle gi-docgen syntax in C documentation
  (Kjell Ahlstedt)

Build:
* Require glib-2.0 >= 2.69.1
  (Kjell Ahlstedt)

2.68.2 (stable):

Glib:
* Replace all g_quark_from_static_string() by g_quark_from_string()
  (Kjell Ahlstedt) Issue #96 (小太)

Gio:
* FileEnumerator: Remove refreturn to avoid memory leak
  (talisein) Merge request !53
* ListModel::get_object(): Make it work for interface classes
  (Kjell Ahlstedt) Issue #93 (pumkinpal)
* AppInfo::get_all(): Avoid a crash on Windows
  (Kjell Ahlstedt) Issue #94 (Lawrence37)

Build:
* MSVC build: Remove extraneous GLIBMM_API in Glib::ustring
  (Kjell Ahlstedt) Issue #92 (Christoph Reiter)

(wiz)

ksanecore: update to 23.08.4

part of KDE Gear update

(markd)

doc: Updated net/transmission-gtk to 4.0.5nb1

(wiz)

transmission-gtk: switch back to gtkmm4 now that it's new enough

Bump PKGREVISION.

(wiz)

doc: Updated x11/gtkmm4 to 4.12.0

(wiz)

gtkmm4: update to 4.12.0.

4.12.0 (stable):

Gtk:
* AboutDialog: Deprecate ctor with use_header_bar.
  (Daniel Boles) Merge request !74
* Add SymbolicPaintable.
* Add ScrollInfo and enum ListScrollFlags.
* ColumnView, GridView, ListView, Viewport: Add scroll_to().
* ColumnViewRow, ListItem: Add set/get/property_accessible_description()
  and set/get/property_accessible_label().
* DropDown: Add set/get/property_header_factory()
  and set/get/property_search_match_mode().
* FileLauncher: Add set/get/property_always_ask().
* Window: Add is_suspended() and property_suspened().
  (Kjell Ahlstedt)

Documentation:
* Remove README.SUN and other obsolete files
  (Kjell Ahlstedt) Issue #140
* Gtk::Widget: Describe managed and non-managed widgets
  (Kjell Ahlstedt) Issue #138 (Daniel Boles)

Build:
* recentinfo.hg: Fix Visual Studio build
  (Chun-wei Fan) Merge request !75
* Require gtk4 >= 4.12.0
  (Kjell Ahlstedt)

4.11.3 (unstable):

Gdk:
* Pixbuf: Deprecate the create() method taking a Cairo::Surface.
  (Kjell Ahlstedt)

Gtk:
* Snapshot: Add some #includes.
  (Kjell Ahlstedt) Issue #137 (Daniel Boles)
* Image: Deprecate the set() method taking a Pixbuf.
* Notebook: Wrap the object returned from get_pages() in a
  SelectionListModelImpl (like Stack::get_pages()).
* Picture: Deprecate set_pixbuf().
* ColumnView: Add set/get/property_header_factory().
* CssProvider: Deprecate load_from_data(). Add load_from_string()
  and load_from_bytes().
  (Kjell Ahlstedt)

Documentation:
* Group some classes in the new ListView group and note that
  all classes in the TreeView group are deprecated.
  (Kjell Ahlstedt)

Build:
* Require gtk4 >= 4.11.3
  (Kjell Ahlstedt)

4.11.2 (unstable):

Gdk:
* GLTexture: Deprecate create().
* Add GLTextureBuilder.
  (Kjell Ahlstedt)

Gtk:
* Box, BoxLayout: Add set/get/property_baseline_child().
* Button: Add set/get/property_can_shrink().
* CenterBox, CenterLayout: Add set/get/property_shrink_center_last().
* GLArea: Deprecate set/get/property_use_es().
  Add set/get/property_allowed_apis(), get/property_api().
* Add ListHeader, SectionModel.
* ListView: Add set/get/property_header_factory().
* MenuButton: Add set/get/property_can_shrink().
* SortListModel: Add set/get/property_section_sorter().
* Widget: Deprecate get_allocation(),
  get_allocated_width/height/baseline(). Add get_baseline().
  (Kjell Ahlstedt)

Build:
* MSVC build: Mark GTKMM_API for the Entry class
  (Chun-wei Fan) Merge request !73
* Require gtk4 >= 4.11.2
  (Kjell Ahlstedt)

4.11.1 (unstable):

Gdk and Gtk:
* Use callback functions with C linkage.
  (Kjell Ahlstedt) Issue glibmm#1 (Murray Cumming)

Gdk:
* Add Gdk::Graphene::Point, Rect and Size.
  They wrap the corresponding classes in the Graphene library.
  (Kjell Ahlstedt)
* Add class DragSurfaceSize.
* DragSurface: Add signal_compute_size().
* Surface: Add get/property_scale(). Deprecate create_similar_surface().
  (Kjell Ahlstedt)

Gtk:
* Snapshot: Add push_repeat(), push_clip(), append_cairo(),
  append_texture(), append_color() with Gdk::Graphene::Rect.
  Deprecate other push_clip(), push_clip(), append_cairo(),
  append_texture(), append_color() overloads. Add translate().
* Widget: Add compute_bounds() and compute_point().
  Deprecate translate_coordinates().
  (Kjell Ahlstedt)
* Add classes ColumnViewCell and ColumnViewRow.
* ColumnView: Add set/get/property_tab_behavior() and
  set/get/property_row_factory().
* Add enum ListTabBehavior.
* FlowBox and ListBox: Add remove_all().
* GridView and ListView: Add set/get/property_tab_behavior().
* ListItem: Add set/get/property_focusable().
  (Kjell Ahlstedt)

Build:
* Require gtk4 >= 4.11.1
  (Kjell Ahlstedt)

4.10.0 (stable):

Gdk:
* Add TextureDownloader
* Add enum MemoryFormat, identical to MemoryTexture::Format
* Texture: Add get_format()
  (Kjell Ahlstedt)

Gtk:
* VolumeButton: Deprecated
* ProgressBar: Deprecate property_ellipsize()
  (Kjell Ahlstedt)
* FileDialog: open_multiple_finish() and select_multiple_folders_finish()
  return std::vector<Glib::RefPtr<Gio::File>> instead of
  Glib::RefPtr<Gio::ListModel>.
  FileChooser: Deprecate get_files() and get_shortcut_folders().
  Add get_files2() and get_shortcut_folders2().
  (Kjell Ahlstedt) Issue #132
* FileDialog: Make open[_finish](), select_folder[_finish](),
  save[_finish](), open_multiple[_finish](),
  select_multiple_folders[_finish]() non-const.
* FontDialog: Make choose_family[_finish]() and
  choose_face[_finish]() non-const.
* Accessible: Add set_accessible_parent(), update_next_accessible_sibling()
* MenuButton: Add set/get/property_active().
* ScaleButton: Add get/property_active().
* SearchEntry: Add set/get_placeholder_text().
  (Kjell Ahlstedt)

Tests:
* Add filedialog test
  (Kjell Ahlstedt)

Build:
* Require gtk4 >= 4.10.0
  (Kjell Ahlstedt)

4.9.3 (unstable):

Gdk:
* Display: Deprecate get_startup_notification_id().
* Monitor: Add get/property_description().
  (Kjell Ahlstedt)

Gtk:
* Deprecated classes: Assistant, AssistantPage, LockButton, Statusbar
* Gesture: Deprecate set_sequence_state().
* Accessible: Add enum Accessible::PlatformState. Add get_at_context(),
  get_platform_state(), get_accessible_parent(), get_bounds(),
  get_first_accessible_child(), get_next_accessible_sibling().
* Add ATContext and UriLauncher.
  (Kjell Ahlstedt)

Documentation:
* Gtk::Image, Picture, StringList, StringObject: Improve class descriptions
  (Kjell Ahlstedt)

Build:
* Require gtk4 >= 4.9.3
  (Kjell Ahlstedt)

4.9.2 (unstable):

Gdk:
* Display: Deprecate notify_startup_complete() and put_event().
  (Kjell Ahlstedt)

Gtk:
* Widget: Deprecate show() and hide(). (Use set_visible().)
* Add FileLauncher.
* CenterBox: Add property_[start|center|end]_widget().
* FileDialog: Rename get/set/property_current_filter() to
    get/set/property_default_filter(). Rename get/set/property_current_folder() to
    get/set/property_initial_folder(). Add get/set/property_initial_name(),
    get/set/property_initial_file(), get/set/property_accept_label().
    Remove current_file parameter from open(), current_folder parameter from
    select_folder(). Delete get/set/property_shortcut_folders().
* GestureStylus: Add get/set/property_stylus_only().
* TreeExpander: Add get/set/property_indent_for_depth()
  and get/set/property_hide_expander().
* ToggleButton: Deprecate toggled().
  (Kjell Ahlstedt)

Build:
* Require gtk4 >= 4.9.2
  (Kjell Ahlstedt)
* Meson build: Fix the evaluation of is_git_build on Windows
  (Kjell Ahlstedt) Issue #131 (William Roy)

4.9.1 (unstable):

Gtk:
* Deprecate about 50 classes:
  AppChooser, AppChooserButton, AppChooserDialog,
  AppChooserWidget, CellArea, CellAreaBox, CellAreaContext,
  CellLayout, CellRenderer, CellRendererAccel, CellRendererCombo,
  CellRendererPixbuf, CellRendererProgress, CellRendererSpin,
  CellRendererSpinner, CellRendererText, CellRendererToggle, CellView,
  ComboBox, ComboBoxText, EntryCompletion, IconView, ListStore,
  ListViewText, StyleContext, TreeDragDest, TreeDragSource,
  TreeIter and other classes in treeiter.hg,
  TreeModel, TreeModelFilter, TreeModelSort, TreePath, TreeRowReference,
  TreeSelection, TreeSortable, TreeStore, TreeView, TreeViewColumn,
  namespace CellRenderer_Generation, namespace TreeView_Private,
  ColorButton, ColorChooser, ColorChooserDialog,
  FileChooser, FileChooserDialog, FileChooserNative, FileChooserWidget,
  FontButton, FontChooser, FontChooserDialog, FontChooserWidget,
  MessageDialog, TreeModelColumn, TreeModelColumnRecord, InfoBar
* Deprecate Window::signal_keys_changed()
* Add ColumnViewColumn::set/get/property_id(), enum Collation,
  StringSorter::set/get/property_collation(), Widget::get_color,
  StyleProvider::add/remove_provider_for_display()
* StringList::create(): Add default value (empty vector) to parameter
* Add classes AlertDialog, ColorDialog, ColorDialogButton,
  ColumnViewSorter, FileDialog, FontDialog, FontDialogButton,
  enums DialogError, FontLevel
  (Kjell Ahlstedt)

Demos:
* Don't use deprecated API.
  Some demo programs have been renamed.
  (Kjell Ahlstedt)

Build:
* Meson build: Detect if we build from a git subtree
  (William Roy) Merge request !72
* Require gtk4 >= 4.9.1
  (Kjell Ahlstedt)

4.8.0 (stable):

Gtk:
* TextView::get_tabs(): Fix a memory leak
* Add enum ContentFit
* Label: Add set/get/property_tabs()
* Picture: Add set/get/property_content_fit()
  (Kjell Ahlstedt)

Demos:
* Dialog demo: Add a non-modal dialog
  (Kjell Ahlstedt) Issue #123 (PBS)

Documentation:
* Don't translate the preprocessor macro name GDK_MODIFIER_MASK
  (Kjell Ahlstedt) Issue #124 (PBS)

Build:
* Require gtk4 >= 4.7.2
  (Kjell Ahlstedt)

4.7.1 (unstable):

Gdk:
* Add enum Gdk::GLApi, deprecate enum Gdk::GLAPI
  (Kjell Ahlstedt) Issue #113 (PBS)
* Add enum ScrollUnit
* Event: Add get_scroll_unit()
  (Kjell Ahlstedt)

Gtk:
* Allow managed Gtk::Window's
  (Kjell Ahlstedt) Issue #24 (Daniel Elstner)
* Gtk::Object::_release_c_instance(): Unref orphan managed widgets
  (Kjell Ahlstedt) Issue #115 (PBS)
* Entry: Add signal_activate()
  (Kjell Ahlstedt) Issue #100 (RedDocMD)
* Don't derive gtkmm__GtkXxx GTypes from final types
  (Kjell Ahlstedt) Issue glib#2661
* Application: Only create window on first activate
  (Andrew Potter) Merge request !70
* CheckButton: Add set/unset/get/property_child()
* EventControllerScroll: Add get_unit()
* Picture: Deprecate set/get/property_keep_aspect_ratio()
* SearchEntry: Add set/get/property_search_delay()
* DirectoryList, FilterListModel, FlattenListModel, MultiFilter,
  MultiSelection, MultiSorter, NoSelection, SelectionFilterModel,
  ShortcutController, SingleSelection, SliceListModel, SortListModel,
  TreeListModel: Add property_item_type(), property_n_items()
  (Kjell Ahlstedt)
* ApplicationWindow: Disambiguate activate_action()
  (Kjell Ahlstedt) Issue #122 (PBS)
* Add class Inscription
  (Kjell Ahlstedt)
* Widget: Add signal_destroy()
  (Baldvin Kovacs) Merge request !71

Documentation:
* Gdk::Drag, Gdk::Drop, Gtk::Dialog, Gtk::Widget: Improve class descriptions
  (Kjell Ahlstedt)

Build:
* Meson build: Avoid configuration warnings
  (Kjell Ahlstedt)
* Meson build: Fix builds with Vulkan-enabled GTK
  (Chun-wei Fan) Merge request !68
* Require gtk4 >= 4.7.1
  (Kjell Ahlstedt)

4.6.1 (stable):

Gdk:
* Surface::signal_render(): Fix ref count of Cairo::Region
  (Baldvin Kovacs) Merge request !66
* enum GLAPI: Partially fix name clash with epoxy/gl.h
  A complete fix requires new API; will have to wait until gtkmm 4.8
  (Kjell Ahlstedt) Issue #113 (PBS)

Gtk:
* Application::make_window_and_run(): Delay the deletion of Window
  (Kjell Ahlstedt) Issue #114 (PBS)

Build with Meson:
* Don't use deprecated execute(..., gui_app: ...)
  Require meson >= 0.56.0
  (Kjell Ahlstedt) Issue #111
* Check if Perl is required for building documentation
  (Kjell Ahlstedt)

4.6.0 (stable):

Gdk:
* Deprecate Gdk::Cairo::draw_from_gl().
* Display: Add create_gl_context().
* Texture: Add create_from_filename(), create_from_bytes(),
  save_to_png_bytes(), save_to_tiff(), save_to_tiff_bytes().
* GLContext: Deprecate set_use_es() and unset_use_es().
  Add set/get/property_allowed_apis() and get/property_api().
  (Kjell Ahlstedt)

Gtk:
* DropDown: Add set/get/property_show_arrow().
* FlowBox: Add prepend(), append().
* Label: Add set/get/property_natural_wrap_mode().
* MenuButton: Add set/unset/get/property_child().
* Settings: Add property_gtk_hint_font_metrics().
* TextChildAnchor: Add create(replacement_character).
* TextTag: Add properties line_height(), text_transform(),
  word(), sentence(), line_height_set(), text_transform_set(),
  word_set(), sentence_set().
* TreeExpander: Add set/get/property_indent_for_icon().
* Window: Add property_titlebar().
  (Kjell Ahlstedt)

Documentation:
* Gtk::Object: Change deprecated `pack_start` to `append`.
  (LI Daobing) Merge request !65

Build:
* MSVC build: Support Visual Studio 2022.
  NMake Makefiles: Fix header installation.
  (Chun-wei Fan)
* Require pangomm-2.48 >= 2.50.0, gtk4 >= 4.6.0
  (Kjell Ahlstedt)

4.4.0 (stable):

Gdk:
* PixbufAnimation: Add create_from_stream(), create_from_stream_async(),
  create_from_stream_finish(), create_from_resource().
  (Kjell Ahlstedt)
* ContentFormats: Add parse().
  Display: Add prepare_gl().
  GLContext: Deprecate get/property_shared_context(). Add is_shared().
  (Kjell Ahlstedt)

Gtk:
* Add EventControllerLegacy.
  (BogDan Vatra) Merge request !64
* DropDown::get_selected_item(), ListItem::get_item(),
  SingleSelection::get_selected_item(), TreeExpander::get_item(),
  TreeListRow::get_item(): Don't try to dynamic_cast the return value
  to Glib::Object. It fails if the object has been constructed as
  an interface.
  (Kjell Ahlstedt)
* Fixed the const versions of Assistant::get_page(), NoteBook::get_page()
  and Stack::get_page(). Fixed MediaControls::set_media_stream() and
  Video::set_media_stream().
  (Kjell Ahlstedt)
* Application, Window: Swap inclusions. Include window.h in application.h
  instead of application.h in window.h.
  === Note === This will affect compilation of code that uses Application
  without including gtkmm/application.h.
  (Kjell Ahlstedt)
* DropTarget: Deprecate get/property_drop(). Add get/property_current_drop().
  FileFilter: Add add_suffix().
  MediaStream: Deprecate prepared(), unprepared() and ended().
  Add stream_prepared(), stream_unprepared() and stream_ended().
  MenuButton: Add set/get/property_always_show_arrow() and
  set/get/property_primary().
  TextView: Add set/get_rtl_context() and set/get_ltr_context().
  (Kjell Ahlstedt)

Demos:
* Images, SizeGroup, ListStore and TreeStore demos: Minor fixes.
  (Kjell Ahlstedt)
* Add Add ColumnView demo.
  (Kjell Ahlstedt)

Build:
* Require gtk4 >= 4.4.0.
  (Kjell Ahlstedt)

(wiz)

transmission-qt: reset PKGREVISION after update

(wiz)

doc: Updated devel/pangomm2.48 to 2.50.2

(wiz)

pangomm2.48: update to 2.50.2.

2.50.2 (stable):

* Fontset: Use callback functions with C linkage
  (Kjell Ahlstedt) Issue glibmm#1 (Murray Cumming)
* Coverage: Don't use deprecated pango_coverage_ref/unref()
  (Kjell Ahlstedt)

Documentation:
* Doxyfile.in: Don't hide undocumented classes
  (Kjell Ahlstedt)
* README.win32: Convert to MarkDown and rename to README.win32.md
  Make dependencies clearer
  (Chun-wei Fan)
* Remove AUTHORS, HACKING, README.SUN; add general info to README.md
  (Kjell Ahlstedt) Issue gtkmm#140

Meson build:
* Detect if we build from a git subtree
  (William Roy) Merge request gtkmm!72
* Don't copy files with configure_file()
  (Kjell Ahlstedt)
* Fix the evaluation of is_git_build on Windows
  (Kjell Ahlstedt) Issue gtkmm#131 (William Roy)
* Don't fail if warning_level=everything
  (Daniel Boles, Kjell Ahlstedt) Merge request gtkmm!87

2.50.1 (stable):

* Context::get_font_map(): Fix reference count
  (Kjell Ahlstedt)

Build:
* Meson build: Specify 'check' option in run_command()
  Will be necessary with future versions of Meson.
  Require Meson >= 0.55.0
* Meson build: Check if Perl is required for building documentation
* Meson build: Avoid unnecessary configuration warnings
  (Kjell Ahlstedt)
* Meson build: Re-organize warning-related compiler flags for MSVC
  (Chun-wei Fan)

2.50.0 (stable):

* AttrList: Add get_attributes(), update(), equal()
  (Kjell Ahlstedt) Issue #12 (misos1)
* Make CairoFontMap::set_resolution() usable
  by adding the CairoFontMapImpl class
  (Kjell Ahlstedt) Issue #15 (Ievgenii Meshcheriakov)
* Add FontMap::get_family()
  (Kjell Ahlstedt)
* AttrList: Add to_string() and from_string()
  Attribute: Add TextTransform, BaselineShift and FontScle enums
  and some create_attr_*() methods
  (Kjell Ahlstedt)

Build:
* Don't include individual pango headers
  (Matthias Clasen, Kjell Ahlstedt) Merge request !22
* Support Visual Studio 2022 builds
  (Chun-wei Fan)
* Require pango >= 1.49.4
  (Kjell Ahlstedt)

2.49.1 (unstable)

* Layout, LayoutIter: Add get_const_line() and get_const_lines()
  (Kjell Ahlstedt) Issue #10 (misos1)
* GlyphItem: Make most methods public
  (Kjell Ahlstedt) Issue #11 (Josh Bialkowski)

(wiz)

qt5-qtwebengine: revert libxml2 2.12 fixes

For some reason they are not needed here and break the build.

(wiz)

doc: webkit-gtk 2.42.5 out

(wiz)

doc: Updated sysutils/grub2 to 2.12

(wiz)

grub2: update to 2.12.

With help from Anon.

New in 2.12:

* GCC 13 support.
* clang 14 support.
* binutils 2.38 support.
* Unification of EFI Linux kernel loader across architectures.
* Transition to EFI Linux kernel stub loader for x86 architecture.
* Initial support for Boot Loader Interface.
* Support for dynamic GRUB runtime memory addition using firmware calls.
* PCI and MMIO UARTs support.
* SDL2 support.
* LoongArch support.
* TPM driver fixes.
* Many filesystems fixes.
* Many CVE and Coverity fixes.
* Debugging support improvements.
* Tests improvements.
* Documentation improvements.
* ...and tons of other fixes and cleanups...

New in 2.06:

* GCC 10 support.
* clang 10 support.
* SBAT support.
* LUKS2 support.
* Drop small MBR gap support.
* Xen Security Modules (XSM/FLASK) support.
* The lockdown mechanism similar to the Linux kernel one.
* Disable the os-prober by default.
* Many backports of GRUB distros specific patches.
* BootHole and BootHole2 fixes.
* ...and tons of other fixes and cleanups...

(wiz)

doc: Updated pkgtools/plist-utils to 20240207

(wiz)

plist-utils: fix regex so that plist-sort starts up and sorts

Bump version

(wiz)

doc: expat vulns

(wiz)

doc: Updated lang/gleam to 0.34.1

(nikita)

gleam: update to version 0.34.1

Changelog:

v0.34.1 - 2023-01-17
Build tool changes

    Support has been added for using SourceHut as a repository.

Bug fixes

    Fixed a bug where long function headers with external implementations could format incorrectly.
    The @deprecated attribute can now be used to annotate module constants. This will cause a warning to be emitted when the constant is used.

v0.34.0 - 2023-01-16
v0.34.0-rc3 - 2023-01-12
Language changes

    "echo" is now a reserved word.
    A warning is no longer emitted when a function has a Gleam implementation as well as external implementations for both targets. This is because having a default Gleam implementation means the code is future-proof and continues to be cross platform even if a new target is added.

Bug fixes

    Fixed a bug where function heads would go over the line limit in the formatter.

v0.34.0-rc2 - 2023-01-11
Bug fixes

    Fixed a bug where gleam run would fail when the current directory is not the root of the project and using the JavaScript target.
    Fixed a bug where the compiler would in some cases fail to error when an application uses functions that do not support the current compilation target.

v0.34.0-rc1 - 2024-01-07
Language changes

    Warn about function body not being used, because it already has external implementations for all targets.
    It's now possible to compile a project with external functions in dependency packages that are not supported by the compilation target so long as they are not used on the current target.
    The error message for when one imports a constructor instead of an homonymous type has been improved.

Language Server Changes

    Added a View on HexDocs link on function hover.

Formatter

    Fixed some quirk with the formatting of binary operators.
    Fixed a bug where the formatter would move a function call's closed parentheses on a new line instead of splitting the function's arguments.
    Now the formatter will format tuples as if they were functions, trying to first split just the last element before splitting the whole tuple.
    Improved the formatting of multiline strings in string concatenation.

Build tool changes

    The gleam new command now accepts any existing path, as long as there are no conflicts with already existing files. Examples: gleam new ., gleam new .., gleam new ~/projects/test.
    The format for the README created by gleam new has been altered.
    The gleam.toml created by gleam new now has a link to the full reference for its available options.
    The gleam binary is now statically linked on Windows.
    New projects are created requiring between versions of v0.34.0 inclusive and exclusive v2.0.0.
    The repository section now supports additional VCS types in the form of codeberg, forgejo and gitea allowing a user, repo and additionally a host url.
    TypeScript declaration for the prelude exports previously missing functions and classes. Additionally, swaps interfaces for classes and adds missing attributes to classes.
    gleam commands now look in parent directories for a gleam.toml file.

Bug fixes

    Fixed a bug where gleam add would not update manifest.toml correctly.
    Fixed a bug where fn() { Nil }() could generate invalid JavaScript code.
    Fixed a bug where the build tool would make unnecessary calls to the Hex API when path dependencies are used.
    Fixed a bug where gleam new would generate a gitignore with build rather than /build.
    Fixed where the types of generic constants could be incorrecly inferred.
    Utf8Codepoint has been renamed to UtfCodepoint in prelude.d.mts.
    Fixed a bug where gleam deps list would look in filesystem root instead of the current directory.
    Fixed a bug with the isEqual function in prelude.js where RegExps were being incorrectly structurally compared and being falsely reported as being equal.
    JavaScript: export from prelude.d.mts in gleam.d.mts to fix the error: "Type 'Result' is not generic".
    Not providing a definition after some attributes is now a parse error.

v0.33.0 - 2023-12-18
v0.33.0-rc4 - 2023-12-17

    The deprecated bit array options binary and bit_string have been removed.
    The deprecated ambiguous type import syntax has been removed.
    The deprecated BitString type has been removed.
    The deprecated inspect functions and BitString type has been removed from the JavaScript prelude.

v0.33.0-rc3 - 2023-12-17
Formatter

    The formatter now tries to split long chains of binary operations around the operator itself, rather than around other elements like lists or function calls.

Bug fixes

    Fixed a bug where string prefix aliases defined in alternative case branches would all be bound to the same constant.

v0.33.0-rc2 - 2023-12-07
Language changes

    The \e string escape sequence has been removed. Use \u{001b} instead.
    Generated Erlang now disabled redundant case clause warnings as these are now redundant due to exhaustiveness checking.

Bug fixes

    Fixed a bug where the \u string escape sequence would not work with on Erlang on the right hand side of a string concatenation.

v0.33.0-rc1 - 2023-12-06
Formatter

    The formatter now tries to keep a function body and its arguments on a single line by first trying to split only its last argument on multiple lines.
    Fixed a bug where the formatter would move comments out of blocks.
    gleam format now ignores the Gleam build directory by default, even when not in a git repository.

Language changes

    Gleam now has full exhaustiveness checking. Exhaustiveness issues have been downgraded from errors to warnings so that existing Gleam code can be upgraded to be exhaustive without breaking existing code. In a future version they will be upgraded to errors.
    The ! operator can now be used in clause guards.
    The words auto, delegate, derive, else, implement, macro, and test are now reserved for future use. If used they will emit a warning. In a future version this may be upgraded to an error.
    The \u{...} syntax can be used in strings to specify unicode codepoints via a hexadecimal number with 1 to 6 digits.
    The todo as and panic as syntaxes now accept an expression that evaluates to a string rather than just a string literal.

Build tool changes

    The gleam run and gleam test commands gain the -t flag, which is an alias of the --target flag.
    The gleam build, gleam check, gleam run and gleam test commands now also accept js and erl as values for the --target flag.
    The gleam new command now creates packages at version 1.0.0.
    The gleam publish command now asks for confirmation if the package being published is not yet version 1.0.0.
    The gleam publish command now asks for confirmation if the package name is one that implies the package is maintained by the Gleam core team.
    The error messages shown when dependency resolution fails have been improved.

Compiler WASM API

    The WASM API for the compiler has been rewritten to be simpler.
    The WASM API for the compiler now exposes warnings.

HTML documentation generator

    Searching in rendered HTML documentation now also matches words that do not start with the input but do contain it.

Bug fixes

    Fixed a bug where the JavaScript code generator could generate invalid code when pretty printing a zero arity function call when the line is over 80 columns wide.
    Fixed a bug where the build directory could be left in an invalid state if there is Elixir code to compile and running on Windows without permission to create symlinks.
    Fixed a bug where numbers with preceeding zeros could generate incorrect JavaScript.
    The Erlang code generated by the /. operator no longer generates a warning for the upcoming negative zero float change in Erlang OTP 27.
    Fixed a bug where using only types from an aliased import, wouldn't stop the compiler from emitting an unused alias warning for that import.
    Fixed a bug where the formatter would remove the  as name from string prefix patterns.
    Fixed a bug where the formatter would misplace comments at the start of a block.
    Fixed a bug where using a string prefix pattern in let assert would generate incorrect JavaScript.

v0.32.4 - 2023-11-09
Build tool changes

    The build tool now supports rebar3 and mix hex packages where the package name differs from the otp application name.

bug fixes

    Fixed a bug where invalid javascript code could be generated when a module function calls another function that was passed as an argument and the argument has the same name as the module function.
    Fixed the target property of gleam.toml being ignored for local path dependencies by gleam run -m module/name

v0.32.3 - 2023-11-07
Language changes

    Imported modules can now be discarded by giving them an alias starting with _.

Build tool changes

    New projects are now generated with the call to gleam format coming last in the GitHub Actions workflow. This is so that feedback from tests is presented even if formatting is incorrect.
    Added Windows support for the gleam export erlang-shipment command.

Bug fixes

    Fixed a bug where some nested pipelines could fail to type check.

v0.32.2 - 2023-11-03
Build tool changes

    New Gleam projects are created with gleam_stdlib v0.32 and gleeunit v1.0.

Bug fixes

    Fixed a bug where gleam fix would not produce correct results for code that shadowed a prelude name with an import of the same name but a different kind.
    Fixed a bug where documentation would not publish to Hexdocs for packages with a number in the name.
    Fixed a bug where aliased unqualified types and values of the same name could produce an incorrect error.

v0.32.1 - 2023-11-02
Bug fixes

    Fixed a bug where gleam fix would not produce correct results for code that shadowed a prelude name with an import of the same name but a different kind.
    Fixed a bug where incorrect JavaScript could be generated due to backwards compatibility with the deprecated import syntax.

v0.32.0 - 2023-11-01
Bug fixes

    Fixed a bug where running gleam fix multiple times could produce incorrect results.

v0.32.0-rc3 - 2023-10-26
Bug fixes

    Fixed a bug where gleam fix would fail to update the deprecated type import syntax for aliased unqualified types.

v0.32.0-rc2 - 2023-10-26
Bug fixes

    Fixed a bug where the backward compatibility for the deprecated import syntax could result in an import error with some valid imports.

v0.32.0-rc1 - 2023-10-25
Language changes

    Using import module.{TypeName} to import a type has been deprecated, replaced by import module.{type TypeName}. In a future version of Gleam the old syntax will only import the value of the same name. Run gleam fix to update your code.
    The BitString type has been renamed to BitArray. Run gleam fix to update your code.
    The binary and bit_string bit array modifier have been deprecated in favour of bytes and bits.
    The error message for when one element in a list doesn't match the others has been improved.
    The error message for when the elements of a list's tail don't match the previous ones has been improved.
    The error message for when one tries to access an unknown field has been improved.
    The __gleam_prelude_variant__ property has been removed from the classes defined in the JavaScript prelude.
    The deprecated todo("...") syntax has been removed.
    Module access can now be used in case clause guards.
    The JS target now supports bit syntax for module constants.
    The Erlang compiler will no longer emit a duplicate warning for unused functions.
    The @deprecated attribute can now be used with type definitions.
    A warning is now emitted if a module alias is unused.

Language server changes

    The language server now has a code action for removing unused items.
    The language server now shows the type of variables defined using use on hover.

Build tool changes

    The gleam check command supports the target flag.
    The gleam fix command updates code to use BitArray rather than BitString.
    The gleam fix command updates code to use the new import type syntax.
    gleam fix sets the gleam version constraint in gleam.toml to >= 0.32.0.
    The gleam version constraint field in gleam.toml now disregards pre and build components when checking for compatibility.
    The prelude is no longer rendered once per package when compiling to JavaScript, instead one copy is rendered for the entire project. If you are using the gleam compile-package API you now need to give a path to the prelude using the --javascript-prelude flag.
    The gleam export javascript-prelude and gleam export typescript-prelude commands have been added to export a copy of the prelude. This command may be useful for build tools that use the compiler via the gleam compile-package API.
    Fixed a bug where some deprecation messages would not be printed.
    The content has been made wider in rendered HTML documentation.
    Dependencies that can be built with both mix and rebar3 are now built with mix if it exists on the system, and with rebar3 if it doesn't.

Bug fixes

    "Compiling $package" is now only printed when a package has new changes to compile.
    The main process started with gleam run no longer traps exits on Erlang.
    The formatting of code in rendered HTML documentation has been improved.
    The formatter no longer moves trailing comments out of custom type definitions.
    Fixed a bug where some hexidecimal numbers would generate incorrect Erlang.
    Fixed a bug where markdown tables would not render correctly in HTML documentation.
    The float 0.0 is now rendered in Erlang as +0.0 to silence warnings in Erlang/OTP 27.

v0.31.0 - 2023-09-25

    New Gleam projects are created with gleam_stdlib v0.31, actions/checkout v3.*, and erlef/setup-beam v1.*.
    A note is included in the generated HTML documentation if a function is deprecated.

v0.31.0-rc1 - 2023-09-18

    The @deprecated("...") attribute can be used to mark a function as deprecated. This will cause a warning to be emitted when the function is used.
    A warning is now emitted if a module from a transitive dependency is imported.
    Record access can now be used in case clause guards.
    Fixed a bug where manifest.toml could contain absolute paths for path dependencies.
    The as keyword can now be used to assign the literal prefix to a variable when pattern matching on a string.
    The if conditional compilation, external fn, and external type syntaxes have been removed.
    The description flag for the gleam new command has been removed.
    The highlight.js grammar included with generated HTML documentation has been updated for the latest syntax.
    Packages are no longer precompiled to Erlang when publishing to Hex if the package target is set to JavaScript.
    An exception is now raised if JavaScript code uses the BitString class constructor and passes in the incorrect argument type.
    Fixed a bug where mutually recursive functions could be incorrectly inferred as having an overly general type.
    Fixed a bug where recursive type constructors could incorrectly infer a type error.
    Fixed a bug where some mutually recursive functions would be inferred as having too general a type.
    Fixed a bug where constants where not being correctly inlined when used in the size option of a bit string pattern match.
    Fixed a bug where anonymous functions could parse successfully when missing a body.
    Fixed a bug where incorrect unused variable warnings could be emitted for code that doesn't type check.
    Fixed a bug where packages defaulting to the JavaScript target could have modules missing from their HTML documentation when published.
    Corrected some outdated links in error messages.
    Hovering over a function definition will now display the function signature, or the type of the hovered argument.
    Use import type for importing types from typescript declarations.
    Use .d.mts extension for typescript declarations to match .mjs.
    Prefix module names with dollar sign in typescript to avoid name collisions.

(nikita)

Revbump all Go packages after go121 update

(bsiegert)

doc: Updated lang/go121 to 1.21.7

(bsiegert)

go121: update 1.21.7

go1.21.7 (released 2024-02-06) includes fixes to the compiler, the go command,
the runtime, and the crypto/x509 package. See the Go 1.21.7 milestone on the Go
issue tracker for details.

(bsiegert)

doc: Updated lang/go120 to 1.20.14

(bsiegert)

go120: update to 1.20.14

go1.20.14 (released 2024-02-06) includes fixes to the crypto/x509 package.
See the Go 1.20.14 milestone on the issue tracker for details.

(bsiegert)

Updated textproc/expat, devel/libgit2

(adam)

libgit2: updated to 1.7.2

v1.7.2
------

What's Changed

This release fixes three bugs that can cause undefined behavior when given well-crafted inputs, either in input files or over network connections. These bugs may be able to be leveraged to cause denial of service attacks or unauthorized code execution.

Two of these issues were discovered and reported by security engineers at Amazon Web Services. We thank the AWS Security team for their efforts to identify these issues, provide helpful reproduction cases, and responsibly disclose their findings.

Security fixes

* transport: safely handle messages with no caps
* revparse: fix parsing bug for trailing `@`
* index: correct index has_dir_name check

(adam)

expat: updated to 2.6.0

Release 2.6.0 Tue February 6 2024
    Security fixes:
  * *  CVE-2023-52425 -- Fix quadratic runtime issues with big tokens
              that can cause denial of service, in partial where
              dealing with compressed XML input.  Applications
              that parsed a document in one go -- a single call to
              functions XML_Parse or XML_ParseBuffer -- were not affected.
              The smaller the chunks/buffers you use for parsing
              previously, the bigger the problem prior to the fix.
              Backporters should be careful to no omit parts of
              pull request * and to include earlier pull request *,
              in order to not break the fix.
      *  CVE-2023-52426 -- Fix billion laughs attacks for users
              compiling *without* XML_DTD defined (which is not common).
              Users with XML_DTD defined have been protected since
              Expat >=2.4.0 (and that was CVE-2013-0340 back then).

    Bug fixes:
        *  Fix parse-size-dependent "invalid token" error for
                external entities that start with a byte order mark
        *  Fix NULL pointer dereference in setContext via
                XML_ExternalEntityParserCreate for compilation with
                XML_DTD undefined
  * *  Protect against closing entities out of order

    Other changes:
        *  Improve support for arc4random/arc4random_buf
  * *  Improve buffer growth in XML_GetBuffer and XML_Parse
  * *  xmlwf: Support --help and --version
  * *  xmlwf: Support custom buffer size for XML_GetBuffer and read
        *  xmlwf: Improve language and URL clickability in help output
        *  examples: Add new example "element_declarations.c"
        *  Be stricter about macro XML_CONTEXT_BYTES at build time
        *  Make inclusion to expat_config.h consistent
  * *  Autotools: configure.ac: Support --disable-maintainer-mode
* * ..
  * * *  Autotools: Sync CMake templates with CMake 3.26
        *  Autotools: Make installation of shipped man page doc/xmlwf.1
                independent of docbook2man availability
        *  Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
                section "Cflags.private" in order to fix compilation
                against static libexpat using pkg-config on Windows
  * *  Autotools|CMake: Require a C99 compiler
                (a de-facto requirement already since Expat 2.2.2 of 2017)
        *  Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  * *  Autotools|CMake: Make test suite require a C++11 compiler
        *  CMake: Require CMake >=3.5.0
        *  CMake: Lowercase off_t and size_t to help a bug in Meson
        *  CMake: Sort xmlwf sources alphabetically
        *  CMake|Windows: Fix generation of DLL file version info
        *  CMake: Build tests/benchmark/benchmark.c as well for
                a build with -DEXPAT_BUILD_TESTS=ON
  * *  docs: Document the importance of isFinal + adjust tests
                accordingly
        *  docs: Improve use of "NULL" and "null"
        *  docs: Be specific about version of XML (XML 1.0r4)
                and version of C (C99); (XML 1.0r5 will need a sponsor.)
        *  docs: reference.html: Promote function XML_ParseBuffer more
        *  docs: reference.html: Add HTML anchors to XML_* macros
        *  docs: reference.html: Upgrade to OK.css 1.2.0
  * *  docs: Fix typos
        *  docs|CI: Use HTTPS URLs instead of HTTP at various places
* * ..
* * ..
  * *  Address compiler warnings
  * *  Address clang-tidy warnings
  * *  Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
                to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
                for what these numbers do

    Infrastructure:
  * *  docs: Document security policy in file SECURITY.md
        *  docs: Improve parse buffer variables in-code documentation
* * ..
* * ..
  * * *  Refactor coverage and conformance tests
  * *  Refactor debug level variables to unsigned long
        *  Improve handling of empty environment variable value
                in function getDebugLevel (without visible user effect)
* * ..
* * ..
  * *  tests: Improve test coverage with regard to parse chunk size
  * * *  Fuzzing: Improve fuzzing coverage
  * *  Fuzzing|CI: Start running OSS-Fuzz fuzzing regression tests
  * *  CI: Resolve some Travis CI leftovers
        *  CI: Be robust towards absence of Git tags
  * *  CI: Set permissions to "contents: read" for security
        *  CI: Pin all GitHub Actions to specific commits for security
        *  CI: Reject spelling errors using codespell
        *  CI: Enforce clang-tidy clean code
* * ..
  * *  CI: Upgrade Clang from 15 to 18
        *  CI: Start using Clang's Control Flow Integrity sanitizer
  * * *  CI: Adapt to breaking changes in GitHub Actions Ubuntu images
        *  CI: Adapt to breaking changes in Clang/LLVM Debian packaging
        *  CI: Adapt to breaking changes in codespell
        *  CI: Adapt to breaking changes in Cppcheck

(adam)

Updated converters/py-confusable_homoglyphs, devel/py-doc8

(adam)

py-doc8: updated to 1.1.1

v1.1.1

Minor Changes

Remove support for py37 and enable support for py312

Bugfixes

Remove use of pbr
Allow PEP links with anchors
PEP 621: Migrate more config into pyproject.toml

v1.0.0

Major Changes

Drop support for python 3.6

Bugfixes

Address some deprecation warnings
Make toml support implicit
Remove pip from pyproject.toml
Add support for python 3.11

(adam)

py-confusable_homoglyphs: updated to 3.3.1

3.3.0

- Drop support for Python 2
- Drop support for Python < 3.7, add support for Python up to 3.12
- Allow using data files from a custom location set with the
  CONFUSABLE_DATA environment variable.
- Fix the return value of confusables.is_dangerous() to the documented
  API of a boolean value. It used to return either False or the list
  output of confusable.is_confusable().
- Added a check command for command line use.

3.3.1

- Update unicode data

(adam)

Updated devel/py-ailment, devel/py-angr, devel/py-archinfo, devel/py-cle, devel/py-pyvex, math/py-claripy

(adam)

py-angr: updated to 9.2.89

9.2.89
Bug fixes

(adam)

Updated devel/capstone, devel/py-capstone

(adam)

capstone py-capstone: updated to 5.0.1

Version 5.0.1

[ARM] Fix VFP feature check
Restore the ARM register naming from v4.
Use OS independent printf formatting.
Cherry-pick from next for v5.0.1
Add Python bindings for WASM
Sync Python bindings for x86, m68k, and mos65xx
Add Python bindings for SH
Update Python binding constants
Fixing TriCore disasm instructions
allow absolute CMAKE_INSTALL_*DIR

Version 5.0

[workflows] Remove deprecated image versions
Fix capstone_test.c
Support repz prefix on X86 ret instructions
fix for msvc static lib, dll build error and warnings
use calloc for cs_insn instead of malloc
Fix access bug for TEST op
Update Cython bindings
Use Intel register syntax for Tricore
Add # prefix to tricore imm operand
Revert "Mark cs_* as thread local to avoid race condition in multithreads"
Replace strncpy with memcpy to fix compiler warning.
Remove outdated and irrelevant TODO

(adam)

doc/TODO: + expat-2.6.0.

(wiz)

Added lang/py-pyformlang; Updated devel/py-ruamel-yaml

(adam)

py-ruamel-yaml: updated to 0.18.6

0.18.6
- fixed an issue with dataclass loading when the fields were collections (bug found
  as a result of a question by [FibroMyAlgebra](https://stackoverflow.com/users/6855070/fibromyalgebra)
  on [StackOverflow](https://stackoverflow.com/a/77485786/1307905))
- fixed an issue loading dataclasses with `InitVar` fields when `from __future__ import
  annotations` was used to delay evaluation of typing.

(adam)

py-pyformlang: added version 1.0.6

A Python library to manipulate formal grammar. In general, it can be used to
better understand algorithms in a formal way.

(adam)

Updated lang/python311, lang/python312, lang/py311-html-docs, lang/py312-html-docs

(adam)

python312 py312-html-docs: updated to 3.12.2

Python 3.12.2 final

Security
gh-113659: Skip .pth files with names starting with a dot or hidden file attribute.
Core and Builtins
gh-114887: Changed socket type validation in create_datagram_endpoint() to accept all non-stream sockets. This fixes a regression in compatibility with raw sockets.

gh-114388: Fix a RuntimeWarning emitted when assign an integer-like value that is not an instance of int to an attribute that corresponds to a C struct member of type T_UINT and T_ULONG. Fix a double RuntimeWarning emitted when assign a negative integer value to an attribute that corresponds to a C struct member of type T_UINT.

gh-113703: Fix a regression in the codeop module that was causing it to incorrectly identify incomplete f-strings. Patch by Pablo Galindo

gh-89811: Check for a valid tp_version_tag before performing bytecode specializations that rely on this value being usable.

gh-113602: Fix an error that was causing the parser to try to overwrite existing errors and crashing in the process. Patch by Pablo Galindo

gh-113297: Fix segfault in the compiler on with statement with 19 context managers.

gh-106905: Use per AST-parser state rather than global state to track recursion depth within the AST parser to prevent potential race condition due to simultaneous parsing.

The issue primarily showed up in 3.11 by multithreaded users of ast.parse(). In 3.12 a change to when garbage collection can be triggered prevented the race condition from occurring.

gh-112943: Correctly compute end column offsets for multiline tokens in the tokenize module. Patch by Pablo Galindo

gh-112716: Fix SystemError in the import statement and in __reduce__() methods of builtin types when __builtins__ is not a dict.

gh-94606: Fix UnicodeEncodeError when email.message.get_payload() reads a message with a Unicode surrogate character and the message content is not well-formed for surrogateescape encoding. Patch by Sidney Markowitz.
Library
gh-114965: Update bundled pip to 24.0
gh-114959: tarfile no longer ignores errors when trying to extract a directory on top of a file.
gh-109475: Fix support of explicit option value 窶懌�凪�� in argparse (e.g. --option=--).
gh-110190: Fix ctypes structs with array on Windows ARM64 platform by setting MAX_STRUCT_SIZE to 32 in stgdict. Patch by Diego Russo
gh-113280: Fix a leak of open socket in rare cases when error occurred in ssl.SSLSocket creation.
gh-77749: email.policy.EmailPolicy.fold() now always encodes non-ASCII characters in headers if utf8 is false.
gh-114492: Make the result of termios.tcgetattr() reproducible on Alpine Linux. Previously it could leave a random garbage in some fields.
gh-113267: Revert changes in gh-106584 which made calls of TestResult methods startTest() and stopTest() unbalanced.
gh-75128: Ignore an OSError in asyncio.BaseEventLoop.create_server() when IPv6 is available but the interface cannot actually support it.
gh-114257: Dismiss the FileNotFound error in ctypes.util.find_library() and just return None on Linux.
gh-114328: The tty.setcbreak() and new tty.cfmakecbreak() no longer clears the terminal input ICRLF flag. This fixes a regression introduced in 3.12 that no longer matched how OSes define cbreak mode in their stty(1) manual pages.
gh-101438: Avoid reference cycle in ElementTree.iterparse. The iterator returned by ElementTree.iterparse may hold on to a file descriptor. The reference cycle prevented prompt clean-up of the file descriptor if the returned iterator was not exhausted.
gh-104522: OSError raised when run a subprocess now only has filename attribute set to cwd if the error was caused by a failed attempt to change the current directory.
gh-114149: Enum: correctly handle tuple subclasses in custom __new__.
gh-109534: Fix a reference leak in asyncio.selector_events.BaseSelectorEventLoop when SSL handshakes fail. Patch contributed by Jamie Phan.
gh-114077: Fix possible OverflowError in socket.socket.sendfile() when pass count larger than 2 GiB on 32-bit platform.
gh-114014: Fixed a bug in fractions.Fraction where an invalid string using d in the decimals part creates a different error compared to other invalid letters/characters. Patch by Jeremiah Gabriel Pascual.
gh-113951: Fix the behavior of tag_unbind() methods of tkinter.Text and tkinter.Canvas classes with three arguments. Previously, widget.tag_unbind(tag, sequence, funcid) destroyed the current binding for sequence, leaving sequence unbound, and deleted the funcid command. Now it removes only funcid from the binding for sequence, keeping other commands, and deletes the funcid command. It leaves sequence unbound only if funcid was the last bound command.
gh-113877: Fix tkinter method winfo_pathname() on 64-bit Windows.
gh-113661: unittest runner: Don窶冲 exit 5 if tests were skipped. The intention of exiting 5 was to detect issues where the test suite wasn窶冲 discovered at all. If we skipped tests, it was correctly discovered.
gh-113781: Silence unraisable AttributeError when warnings are emitted during Python finalization.
gh-112932: Restore the ability for zipfile to extractall from zip files with a 窶�/窶� directory entry in them as is commonly added to zips by some wiki or bug tracker data exporters.
gh-113594: Fix UnicodeEncodeError in email when re-fold lines that contain unknown-8bit encoded part followed by non-unknown-8bit encoded part.
gh-113538: In asyncio.StreamReaderProtocol.connection_made(), there is callback that logs an error if the task wrapping the 窶彡onnected callback窶� fails. This callback would itself fail if the task was cancelled. Prevent this by checking whether the task was cancelled first. If so, close the transport but don窶冲 log an error.
gh-85567: Fix resource warnings for unclosed files in pickle and pickletools command line interfaces.
gh-101225: Increase the backlog for multiprocessing.connection.Listener objects created by multiprocessing.manager and multiprocessing.resource_sharer to significantly reduce the risk of getting a connection refused error when creating a multiprocessing.connection.Connection to them.
gh-113543: Make sure that webbrowser.MacOSXOSAScript sends webbrowser.open audit event.
gh-113028: When a second reference to a string appears in the input to pickle, and the Python implementation is in use, we are guaranteed that a single copy gets pickled and a single object is shared when reloaded. Previously, in protocol 0, when a string contained certain characters (e.g. newline) it resulted in duplicate objects.
gh-113421: Fix multiprocessing logger for %(filename)s.
gh-111784: Fix segfaults in the _elementtree module. Fix first segfault during deallocation of _elementtree.XMLParser instances by keeping strong reference to pyexpat module in module state for capsule lifetime. Fix second segfault which happens in the same deallocation process by keeping strong reference to _elementtree module in XMLParser structure for _elementtree module lifetime.
gh-113407: Fix import of unittest.mock when CPython is built without docstrings.
gh-113320: Fix regression in Python 3.12 where Protocol classes that were not marked as runtime-checkable would be unnecessarily introspected, potentially causing exceptions to be raised if the protocol had problematic members. Patch by Alex Waygood.
gh-113358: Fix rendering tracebacks for exceptions with a broken __getattr__.
gh-113214: Fix an AttributeError during asyncio SSL protocol aborts in SSL-over-SSL scenarios.
gh-113246: Update bundled pip to 23.3.2.
gh-113199: Make http.client.HTTPResponse.read1 and http.client.HTTPResponse.readline close IO after reading all data when content length is known. Patch by Illia Volochii.
gh-113188: Fix shutil.copymode() and shutil.copystat() on Windows. Previously they worked differenly if dst is a symbolic link: they modified the permission bits of dst itself rather than the file it points to if follow_symlinks is true or src is not a symbolic link, and did not modify the permission bits if follow_symlinks is false and src is a symbolic link.
gh-61648: Detect line numbers of properties in doctests.
gh-112559: signal.signal() and signal.getsignal() no longer call repr on callable handlers. asyncio.run() and asyncio.Runner.run() no longer call repr on the task results. Patch by Yilei Yang.
gh-110190: Fix ctypes structs with array on PPC64LE platform by setting MAX_STRUCT_SIZE to 64 in stgdict. Patch by Diego Russo.
gh-79429: Ignore FileNotFoundError when remove a temporary directory in the multiprocessing finalizer.
gh-81194: Fix a crash in socket.if_indextoname() with specific value (UINT_MAX). Fix an integer overflow in socket.if_indextoname() on 64-bit non-Windows platforms.
gh-112343: Improve handling of pdb convenience variables to avoid replacing string contents.
gh-111615: Fix a regression caused by a fix to gh-93162 whereby you couldn窶冲 configure a QueueHandler without specifying handlers.
gh-111049: Fix crash during garbage collection of the io.BytesIO buffer object.
gh-110345: Show the Tcl/Tk patchlevel (rather than version) in tkinter._test().
gh-109858: Protect zipfile from 窶徠uoted-overlap窶� zipbomb. It now raises BadZipFile when try to read an entry that overlaps with other entry or central directory.
gh-114440: On Windows, closing the connection writer when cleaning up a broken multiprocessing.Queue queue is now done for all queues, rather than only in concurrent.futures manager thread. This can prevent a deadlock when a multiprocessing worker process terminates without cleaning up. This completes the backport of patches by Victor Stinner and Serhiy Storchaka.
gh-38807: Fix race condition in trace. Instead of checking if a directory exists and creating it, directly call os.makedirs() with the kwarg exist_ok=True.
gh-75705: Set unixfrom envelope in mailbox.mbox and mailbox.MMDF.
gh-106233: Fix stacklevel in InvalidTZPathWarning during zoneinfo module import.
gh-105102: Allow ctypes.Union to be nested in ctypes.Structure when the system endianness is the opposite of the classes.
gh-104282: Fix null pointer dereference in lzma._decode_filter_properties() due to improper handling of BCJ filters with properties of zero length. Patch by Radislav Chugunov.
gh-102512: When os.fork() is called from a foreign thread (aka _DummyThread), the type of the thread in a child process is changed to _MainThread. Also changed its name and daemonic status, it can be now joined.
bpo-35928: io.TextIOWrapper now correctly handles the decoding buffer after read() and write().
bpo-26791: shutil.move() now moves a symlink into a directory when that directory is the target of the symlink. This provides the same behavior as the mv shell command. The previous behavior raised an exception. Patch by Jeffrey Kintscher.
bpo-36959: Fix some error messages for invalid ISO format string combinations in strptime() that referred to directives not contained in the format string. Patch by Gordon P. Hemsley.
bpo-18060: Fixed a class inheritance issue that can cause segfaults when deriving two or more levels of subclasses from a base class of Structure or Union.
Documentation
gh-110746: Improved markup for valid options/values for methods ttk.treeview.column and ttk.treeview.heading, and for Layouts.
gh-95649: Document that the asyncio module contains code taken from v0.16.0 of the uvloop project, as well as the required MIT licensing information.
Tests
gh-109980: Fix test_tarfile_vs_tar in test_shutil for macOS, where system tar can include more information in the archive than shutil.make_archive.
gh-105089: Fix test.test_zipfile.test_core.TestWithDirectory.test_create_directory_with_write test in AIX by doing a bitwise AND of 0xFFFF on mode , so that it will be in sync with zinfo.external_attr
bpo-40648: Test modes that file can get with chmod() on Windows.
Build
gh-112305: Fixed the check-clean-src step performed on out of tree builds to detect errant $(srcdir)/Python/frozen_modules/*.h files and recommend appropriate source tree cleanup steps to get a working build again.
gh-112867: Fix the build for the case that WITH_PYMALLOC_RADIX_TREE=0 set.
bpo-11102: The os.major(), os.makedev(), and os.minor() functions are now available on HP-UX v3.
bpo-36351: Do not set ipv6type when cross-compiling.
Windows
gh-109991: Update Windows build to use OpenSSL 3.0.13.
gh-111239: Update Windows builds to use zlib v1.3.1.
gh-100107: The py.exe launcher will no longer attempt to run the Microsoft Store redirector when launching a script containing a /usr/bin/env shebang
gh-114096: Process privileges that are activated for creating directory junctions are now restored afterwards, avoiding behaviour changes in other parts of the program.
gh-111877: os.stat() calls were returning incorrect time values for files that could not be accessed directly.
gh-113009: multiprocessing: On Windows, fix a race condition in Process.terminate(): no longer set the returncode attribute to always call WaitForSingleObject() in Process.wait(). Previously, sometimes the process was still running after TerminateProcess() even if GetExitCodeProcess() is not STILL_ACTIVE. Patch by Victor Stinner.
gh-87868: Correctly sort and remove duplicate environment variables in _winapi.CreateProcess().
bpo-37308: Fix mojibake in mmap.mmap when using a non-ASCII tagname argument on Windows.
macOS
gh-115009: Update macOS installer to use SQLite 3.45.1.
gh-109991: Update macOS installer to use OpenSSL 3.0.13.
gh-110459: Running configure ... --with-openssl-rpath=X/Y/Z no longer fails to detect OpenSSL on macOS.
gh-74573: Document that dbm.ndbm can silently corrupt DBM files on updates when exceeding undocumented platform limits, and can crash (segmentation fault) when reading such a corrupted file. (FB8919203)
gh-65701: The freeze tool doesn窶冲 work with framework builds of Python. Document this and bail out early when running the tool with such a build.
gh-108269: Set CFBundleAllowMixedLocalizations to true in the Info.plist for the framework, embedded Python.app and IDLE.app with framework installs on macOS. This allows applications to pick up the user窶冱 preferred locale when that窶冱 different from english.
gh-102362: Make sure the result of sysconfig.get_plaform() includes at least a major and minor versions, even if MACOSX_DEPLOYMENT_TARGET is set to only a major version during build to match the format expected by pip.
gh-110017: Disable a signal handling stress test on macOS due to a bug in macOS (FB13453490).
gh-110820: Make sure the preprocessor definitions for ALIGNOF_MAX_ALIGN_T, SIZEOF_LONG_DOUBLE and HAVE_GCC_ASM_FOR_X64 are correct for Universal 2 builds on macOS.
IDLE
gh-96905: In idlelib code, stop redefining built-ins 窶賄ict窶� and 窶椀bject窶�.
gh-72284: Improve the lists of features, editor key bindings, and shell key bingings in the IDLE doc.
gh-113903: Fix rare failure of test.test_idle, in test_configdialog.
gh-113729: Fix the 窶廩elp -> IDLE Doc窶� menu bug in 3.11.7 and 3.12.1.
gh-113269: Fix test_editor hang on macOS Catalina.
gh-112898: Fix processing unsaved files when quitting IDLE on macOS.
gh-103820: Revise IDLE bindings so that events from mouse button 4/5 on non-X11 windowing systems (i.e. Win32 and Aqua) are not mistaken for scrolling.
bpo-13586: Enter the selected text when opening the 窶彝eplace窶� dialog.
Tools/Demos
gh-109991: Update GitHub CI workflows to use OpenSSL 3.0.13 and multissltests to use 1.1.1w, 3.0.13, 3.1.5, and 3.2.1.
gh-115015: Fix a bug in Argument Clinic that generated incorrect code for methods with no parameters that use the METH_METHOD | METH_FASTCALL | METH_KEYWORDS calling convention. Only the positional parameter count was checked; any keyword argument passed would be silently accepted.

(adam)

python311 py311-html-docs: updated to 3.11.8

Python 3.11.8 final

Security
gh-113659: Skip .pth files with names starting with a dot or hidden file attribute.
Core and Builtins
gh-114887: Changed socket type validation in create_datagram_endpoint() to accept all non-stream sockets. This fixes a regression in compatibility with raw sockets.

gh-114388: Fix a RuntimeWarning emitted when assign an integer-like value that is not an instance of int to an attribute that corresponds to a C struct member of type T_UINT and T_ULONG. Fix a double RuntimeWarning emitted when assign a negative integer value to an attribute that corresponds to a C struct member of type T_UINT.

gh-89811: Check for a valid tp_version_tag before performing bytecode specializations that rely on this value being usable.

gh-113602: Fix an error that was causing the parser to try to overwrite existing errors and crashing in the process. Patch by Pablo Galindo

gh-113566: Fix a 3.11-specific crash when the repr of a Future is requested after the module has already been garbage-collected.

gh-106905: Use per AST-parser state rather than global state to track recursion depth within the AST parser to prevent potential race condition due to simultaneous parsing.

The issue primarily showed up in 3.11 by multithreaded users of ast.parse(). In 3.12 a change to when garbage collection can be triggered prevented the race condition from occurring.

gh-112716: Fix SystemError in the import statement and in __reduce__() methods of builtin types when __builtins__ is not a dict.

gh-105967: Workaround a bug in Apple窶冱 macOS platform zlib library where zlib.crc32() and binascii.crc32() could produce incorrect results on multi-gigabyte inputs. Including when using zipfile on zips containing large data.

gh-94606: Fix UnicodeEncodeError when email.message.get_payload() reads a message with a Unicode surrogate character and the message content is not well-formed for surrogateescape encoding. Patch by Sidney Markowitz.
Library
gh-114965: Update bundled pip to 24.0
gh-114959: tarfile no longer ignores errors when trying to extract a directory on top of a file.
gh-109475: Fix support of explicit option value 窶懌�凪�� in argparse (e.g. --option=--).
gh-110190: Fix ctypes structs with array on Windows ARM64 platform by setting MAX_STRUCT_SIZE to 32 in stgdict. Patch by Diego Russo
gh-113280: Fix a leak of open socket in rare cases when error occurred in ssl.SSLSocket creation.
gh-77749: email.policy.EmailPolicy.fold() now always encodes non-ASCII characters in headers if utf8 is false.
gh-114492: Make the result of termios.tcgetattr() reproducible on Alpine Linux. Previously it could leave a random garbage in some fields.
gh-75128: Ignore an OSError in asyncio.BaseEventLoop.create_server() when IPv6 is available but the interface cannot actually support it.
gh-114257: Dismiss the FileNotFound error in ctypes.util.find_library() and just return None on Linux.
gh-101438: Avoid reference cycle in ElementTree.iterparse. The iterator returned by ElementTree.iterparse may hold on to a file descriptor. The reference cycle prevented prompt clean-up of the file descriptor if the returned iterator was not exhausted.
gh-104522: OSError raised when run a subprocess now only has filename attribute set to cwd if the error was caused by a failed attempt to change the current directory.
gh-109534: Fix a reference leak in asyncio.selector_events.BaseSelectorEventLoop when SSL handshakes fail. Patch contributed by Jamie Phan.
gh-114077: Fix possible OverflowError in socket.socket.sendfile() when pass count larger than 2 GiB on 32-bit platform.
gh-114014: Fixed a bug in fractions.Fraction where an invalid string using d in the decimals part creates a different error compared to other invalid letters/characters. Patch by Jeremiah Gabriel Pascual.
gh-113951: Fix the behavior of tag_unbind() methods of tkinter.Text and tkinter.Canvas classes with three arguments. Previously, widget.tag_unbind(tag, sequence, funcid) destroyed the current binding for sequence, leaving sequence unbound, and deleted the funcid command. Now it removes only funcid from the binding for sequence, keeping other commands, and deletes the funcid command. It leaves sequence unbound only if funcid was the last bound command.
gh-113877: Fix tkinter method winfo_pathname() on 64-bit Windows.
gh-113781: Silence unraisable AttributeError when warnings are emitted during Python finalization.
gh-113594: Fix UnicodeEncodeError in email when re-fold lines that contain unknown-8bit encoded part followed by non-unknown-8bit encoded part.
gh-113538: In asyncio.StreamReaderProtocol.connection_made(), there is callback that logs an error if the task wrapping the 窶彡onnected callback窶� fails. This callback would itself fail if the task was cancelled. Prevent this by checking whether the task was cancelled first. If so, close the transport but don窶冲 log an error.
gh-85567: Fix resource warnings for unclosed files in pickle and pickletools command line interfaces.
gh-101225: Increase the backlog for multiprocessing.connection.Listener objects created by multiprocessing.manager and multiprocessing.resource_sharer to significantly reduce the risk of getting a connection refused error when creating a multiprocessing.connection.Connection to them.
gh-113543: Make sure that webbrowser.MacOSXOSAScript sends webbrowser.open audit event.
gh-113028: When a second reference to a string appears in the input to pickle, and the Python implementation is in use, we are guaranteed that a single copy gets pickled and a single object is shared when reloaded. Previously, in protocol 0, when a string contained certain characters (e.g. newline) it resulted in duplicate objects.
gh-113421: Fix multiprocessing logger for %(filename)s.
gh-113358: Fix rendering tracebacks for exceptions with a broken __getattr__.
gh-113214: Fix an AttributeError during asyncio SSL protocol aborts in SSL-over-SSL scenarios.
gh-113246: Update bundled pip to 23.3.2.
gh-113199: Make http.client.HTTPResponse.read1 and http.client.HTTPResponse.readline close IO after reading all data when content length is known. Patch by Illia Volochii.
gh-113188: Fix shutil.copymode() and shutil.copystat() on Windows. Previously they worked differenly if dst is a symbolic link: they modified the permission bits of dst itself rather than the file it points to if follow_symlinks is true or src is not a symbolic link, and did not modify the permission bits if follow_symlinks is false and src is a symbolic link.
gh-61648: Detect line numbers of properties in doctests.
gh-112559: signal.signal() and signal.getsignal() no longer call repr on callable handlers. asyncio.run() and asyncio.Runner.run() no longer call repr on the task results. Patch by Yilei Yang.
gh-110190: Fix ctypes structs with array on PPC64LE platform by setting MAX_STRUCT_SIZE to 64 in stgdict. Patch by Diego Russo.
gh-79429: Ignore FileNotFoundError when remove a temporary directory in the multiprocessing finalizer.
gh-79325: Fix an infinite recursion error in tempfile.TemporaryDirectory() cleanup on Windows.
gh-110190: Fix ctypes structs with array on Arm platform by setting MAX_STRUCT_SIZE to 32 in stgdict. Patch by Diego Russo.
gh-81194: Fix a crash in socket.if_indextoname() with specific value (UINT_MAX). Fix an integer overflow in socket.if_indextoname() on 64-bit non-Windows platforms.
gh-75666: Fix the behavior of tkinter widget窶冱 unbind() method with two arguments. Previously, widget.unbind(sequence, funcid) destroyed the current binding for sequence, leaving sequence unbound, and deleted the funcid command. Now it removes only funcid from the binding for sequence, keeping other commands, and deletes the funcid command. It leaves sequence unbound only if funcid was the last bound command.
gh-110345: Show the Tcl/Tk patchlevel (rather than version) in tkinter._test().
gh-109858: Protect zipfile from 窶徠uoted-overlap窶� zipbomb. It now raises BadZipFile when try to read an entry that overlaps with other entry or central directory.
gh-38807: Fix race condition in trace. Instead of checking if a directory exists and creating it, directly call os.makedirs() with the kwarg exist_ok=True.
gh-75705: Set unixfrom envelope in mailbox.mbox and mailbox.MMDF.
gh-105102: Allow ctypes.Union to be nested in ctypes.Structure when the system endianness is the opposite of the classes.
gh-104282: Fix null pointer dereference in lzma._decode_filter_properties() due to improper handling of BCJ filters with properties of zero length. Patch by Radislav Chugunov.
gh-102512: When os.fork() is called from a foreign thread (aka _DummyThread), the type of the thread in a child process is changed to _MainThread. Also changed its name and daemonic status, it can be now joined.
gh-91133: Fix a bug in tempfile.TemporaryDirectory cleanup, which now no longer dereferences symlinks when working around file system permission errors.
bpo-43153: On Windows, tempfile.TemporaryDirectory previously masked a PermissionError with NotADirectoryError during directory cleanup. It now correctly raises PermissionError if errors are not ignored. Patch by Andrei Kulakov and Ken Jin.
bpo-35332: The shutil.rmtree() function now ignores errors when calling os.close() when ignore_errors is True, and os.close() no longer retried after error.
bpo-35928: io.TextIOWrapper now correctly handles the decoding buffer after read() and write().
bpo-26791: shutil.move() now moves a symlink into a directory when that directory is the target of the symlink. This provides the same behavior as the mv shell command. The previous behavior raised an exception. Patch by Jeffrey Kintscher.
bpo-36959: Fix some error messages for invalid ISO format string combinations in strptime() that referred to directives not contained in the format string. Patch by Gordon P. Hemsley.
bpo-18060: Fixed a class inheritance issue that can cause segfaults when deriving two or more levels of subclasses from a base class of Structure or Union.
Documentation
gh-110746: Improved markup for valid options/values for methods ttk.treeview.column and ttk.treeview.heading, and for Layouts.
gh-95649: Document that the asyncio module contains code taken from v0.16.0 of the uvloop project, as well as the required MIT licensing information.
Tests
gh-109980: Fix test_tarfile_vs_tar in test_shutil for macOS, where system tar can include more information in the archive than shutil.make_archive.
gh-112769: The tests now correctly compare zlib version when zlib.ZLIB_RUNTIME_VERSION contains non-integer suffixes. For example zlib-ng defines the version as 1.3.0.zlib-ng.
gh-105089: Fix test.test_zipfile.test_core.TestWithDirectory.test_create_directory_with_write test in AIX by doing a bitwise AND of 0xFFFF on mode , so that it will be in sync with zinfo.external_attr
bpo-40648: Test modes that file can get with chmod() on Windows.
Build
gh-101778: Fix build error when there窶冱 a dangling symlink in the directory containing ffi.h.
gh-112305: Fixed the check-clean-src step performed on out of tree builds to detect errant $(srcdir)/Python/frozen_modules/*.h files and recommend appropriate source tree cleanup steps to get a working build again.
bpo-11102: The os.major(), os.makedev(), and os.minor() functions are now available on HP-UX v3.
bpo-36351: Do not set ipv6type when cross-compiling.
Windows
gh-109991: Update Windows build to use OpenSSL 3.0.13.
gh-111239: Update Windows builds to use zlib v1.3.1.
gh-100107: The py.exe launcher will no longer attempt to run the Microsoft Store redirector when launching a script containing a /usr/bin/env shebang
gh-114096: Process privileges that are activated for creating directory junctions are now restored afterwards, avoiding behaviour changes in other parts of the program.
gh-113009: multiprocessing: On Windows, fix a race condition in Process.terminate(): no longer set the returncode attribute to always call WaitForSingleObject() in Process.wait(). Previously, sometimes the process was still running after TerminateProcess() even if GetExitCodeProcess() is not STILL_ACTIVE. Patch by Victor Stinner.
gh-87868: Correctly sort and remove duplicate environment variables in _winapi.CreateProcess().
bpo-37308: Fix mojibake in mmap.mmap when using a non-ASCII tagname argument on Windows.
macOS
gh-115009: Update macOS installer to use SQLite 3.45.1.
gh-109991: Update macOS installer to use OpenSSL 3.0.13.
gh-74573: Document that dbm.ndbm can silently corrupt DBM files on updates when exceeding undocumented platform limits, and can crash (segmentation fault) when reading such a corrupted file. (FB8919203)
gh-65701: The freeze tool doesn窶冲 work with framework builds of Python. Document this and bail out early when running the tool with such a build.
gh-102362: Make sure the result of sysconfig.get_plaform() includes at least a major and minor versions, even if MACOSX_DEPLOYMENT_TARGET is set to only a major version during build to match the format expected by pip.
gh-110017: Disable a signal handling stress test on macOS due to a bug in macOS (FB13453490).
gh-109981: Use /dev/fd on macOS to determine the number of open files in test.support.os_helper.fd_count to avoid a crash with 窶徃uarded窶� file descriptors when probing for open files.
IDLE
gh-96905: In idlelib code, stop redefining built-ins 窶賄ict窶� and 窶椀bject窶�.
gh-72284: Improve the lists of features, editor key bindings, and shell key bingings in the IDLE doc.
gh-113903: Fix rare failure of test.test_idle, in test_configdialog.
gh-113729: Fix the 窶廩elp -> IDLE Doc窶� menu bug in 3.11.7 and 3.12.1.
gh-113269: Fix test_editor hang on macOS Catalina.
gh-112898: Fix processing unsaved files when quitting IDLE on macOS.
gh-103820: Revise IDLE bindings so that events from mouse button 4/5 on non-X11 windowing systems (i.e. Win32 and Aqua) are not mistaken for scrolling.
bpo-13586: Enter the selected text when opening the 窶彝eplace窶� dialog.
Tools/Demos
gh-109991: Update GitHub CI workflows to use OpenSSL 3.0.13 and multissltests to use 1.1.1w, 3.0.13, 3.1.5, and 3.2.1.
gh-115015: Fix a bug in Argument Clinic that generated incorrect code for methods with no parameters that use the METH_METHOD | METH_FASTCALL | METH_KEYWORDS calling convention. Only the positional parameter count was checked; any keyword argument passed would be silently accepted.

(adam)

Updated www/py-cheroot, www/py-cherrypy

(adam)

py-cherrypy: updated to 18.9.0

v18.9.0

* Various
  `changes <https://github.com/cherrypy/cherrypy/compare/v18.8.0...v18.9.0>`_.

(adam)

py-cheroot: updated to 10.0.0

v10.0.0

- Cheroot now accepts a
  ``reuse_port`` parameter on the ``HTTPServer`` object.
  Subclasses overriding ``prepare_socket`` will no longer
  work and will need to adapt to the new interface.

v9.0.0

- Cheroot now requires Python
  3.6 or later. Python 3.5 and Python 2.7 are still supported
  by the :gh:`maint/8.x branch
  <cherrypy/cheroot/tree/maint/8.x>` and stabilizing
  bugfixes will be accepted to that branch.

(adam)

py-cbor2: add ALTERNATIVES

(adam)

qmail-run: further wordsmithery.

(schmonz)

doc: Updated devel/SDL2 to 2.30.0

(ryoon)

SDL2: Update to 2.30.0

Changelog:
---------------------------------------------------------------------------
2.30.0:
---------------------------------------------------------------------------

General:
* Added support for 2 bits-per-pixel indexed surface formats
* Added the function SDL_GameControllerGetSteamHandle() to get the Steam API handle for a controller, if available
* Added the event SDL_CONTROLLERSTEAMHANDLEUPDATED which is sent when the Steam API handle for a controller changes. This could also change the name, VID, and PID of the controller.
* Added the environment variable SDL_LOGGING to control default log output

macOS:
* Added the hint SDL_HINT_JOYSTICK_IOKIT to control whether the IOKit controller driver should be used
* Added the hint SDL_HINT_JOYSTICK_MFI to control whether the GCController controller driver should be used
* Added the hint SDL_HINT_RENDER_METAL_PREFER_LOW_POWER_DEVICE to choose whether high or low power GPU should be used for rendering, in the case where there are multiple GPUs available

Xbox:
* Added the function SDL_GDKGetDefaultUser()

(ryoon)

doc: Updated converters/dos2unix to 7.5.2

(ryoon)

dos2unix: Update to 7.5.2

CHangelog:
2024-01-22: Version 7.5.2

  * Dos2unix can print info about the line break type of the last line,
    or indicate there is none.
  * Updated documentation about ASCII mode conversion.

(ryoon)

jose: fix distinfo

(nikita)

doc: Updated textproc/jose to 12

(nikita)

jose: update to version 12

Changelog:

Release version 12

    Clean up some FreeBSD conditions (#98) (5a81837)
    Add ES256K support (#90) (e6a7ae7)
    Meson changes (#135) (c1569b7)
    Update CI (#8) (#129) (253549a)
    lib/openssl/rsaes.c: Fix issue where jose_hook_alg_find failed to find the … …existance of RSA_OAEP algorithm (58112df)
    Increase test program/scripts timeout values (#131) (45367dd)
    Fix test compilation warnings (#127) (aee1096)
    Adapt alg_comp test to different zlib (#142) (4878253)
    Use checkout v3 Github action to avoid warnings (#137) (6a639e2)
    Alternative fix for fedora:rawide (#138) (55b11f5)
    lib/openssl/hmac.c: rename hmac function to jhmac (#130) (33b9e0b)
    jose: build library only as shared (#119) (b72f8ca)
    meson: add option to disable building manpages (#118) (786b426)
    Add a more descriptive error when jwk gen fails (#105) (cdb1030)
    Use "command -v" instead of "which" (deprecated) (#125) (e1d66f1)
    Test for jq existing (used in jose-jwe-enc test) (#124) (ddc0d2a)
    Correct jose_jws.3 man page example (#122) (ad08d70)
    lib/hsh.c: rename hsh local variable (#111) (3d5b287)
    Avoid master word when possible (#120) (5bc6a92)
    Fix github action CI by setting appropriate centos (a091f56)
    Fix format of jose-jwe-enc man page (76924de)
    Meson Fixes (320336b)
    ci: make ubuntu:devel and fedora:rawhide not to fail the pipeline (1d15950)
    ci: retry when installing the deps in debian/ubuntu (bfdbb6e)
    ci: remove travis-ci (05d8e70)

(nikita)

Updated graphics/py-dot, lang/py-pygls, textproc/py-markupsafe, devel/py-astroid

(adam)

py-astroid: updated to 3.0.3

What's New in astroid 3.0.3?

* Fix type of ``UnicodeDecodeError.object`` inferred as ``str`` instead of ``bytes``.
* Fix ``no-member`` false positives for ``args`` and ``kwargs`` on ``ParamSpec`` under Python 3.12.

(adam)

py-markupsafe: updated to 2.1.5

Version 2.1.5
- Fix ``striptags`` not collapsing spaces.

(adam)

py-pygls: updated to 1.3.0

1.3.0

Bug Fixes

Add missing value to pygls.trace.server

CI

Don't let Pyodide test fail the whole build
Don't trigger CI on both push and pull_request

Features

Drop Python 3.7 support
Update dependencies to latest(ish)
Enable debugging of servers in the playground

Miscellaneous Tasks

Update CHANGELOG.md
Update CONTRIBUTORS.md
Cattrs is a direct dependency
Update pytest-asyncio
Add pytest-lsp and lsp-devtools to Implementations.md
Update lsprotocol to 2023.0.1

(adam)

py-dot: updated to 2.0.0

2.0.0 (2023-12-30)
------------------

Changed:
- Broken parsing caused by `pyparsing` updates fixed.
  With this, the pydot project rises from the dead.
- (Internal) CI revived by @ferdnyc.
  Modernized and clarified the development process.
  Testing is done against multiple Python versions.
- Reorganized package/module structure.
  The `pydot` package is installed as a directory now instead of as
  two modules:

      Before (pydot 0.x, 1.x)    After (pydot 2.x)

      site-packages/            site-packages/
      |-- pydot.py              `-- pydot/
      `-- dot_parser.py              |-- __init__.py
                                    |-- core.py
                                    |-- dot_parser.py
                                    `-- exceptions.py

  This is mostly an internal change that should go unnoticed by most
  users, especially those upgrading through `pip` or a software
  distribution. `import pydot` should work as it did before.
  Special cases:
  - `import dot_parser` no longer works. Change it to
    `from pydot import dot_parser` or see if you can use the wrappers
    `pydot.graph_from_dot_data()` or `pydot.graph_from_dot_file()`.

    **USER FEEDBACK REQUESTED**
    We assume pydot users do not often directly `import dot_parser`.
    If you do, please report your reasons, so that we can consider
    making it available again before the final release of pydot 2.0:
    https://github.com/pydot/pydot/issues/230

  - If you use pydot from a (cloned) pydot source tree:
    - The pydot source modules moved from the top directory to
      subdirectory `src/pydot/`.
    - When using a `PYTHONPATH` environment variable: Append `/src`,
      e.g. `PYTHONPATH=~/Development/pydot/src`. If you need to switch
      between pydot 1.x and pydot 2.x, add both, e.g.
      `PYTHONPATH=~/Development/pydot/src:~/Development/pydot`
    - When using an editable install (development mode): Re-run
      `pip install -e .` from the top directory of the source tree to
      update the links.
  - For users of the test suite:
    - The test suite no longer refuses to run from the top of the
      source tree.
    - This makes the test suite option `--no-check` redundant. It has
      no effect except for printing a deprecation warning. It will be
      removed in a future major release (pydot 3 or higher), then
      leading to an error.
- Reorganized exception hierarchy:
  - New base class `PydotException`, derived from Python's `Exception`.
  - Pydot's `Error` exception class is now derived from `PydotException`
    instead of from Python's built-in `Exception` directly. Existing
    handlers should not be affected.
  - Exception class `InvocationException` was removed. It has not been
    raised by pydot since 2016 (v1.2.0).

- API (minor): Renamed the first parameter of the parser functions
  listed below from `str` to `s`. These functions primarily exist for
  internal use and would normally be called using positional arguments,
  so few users should be affected.
      push_top_graph_stmt(s, loc, toks)
      push_graph_stmt(s, loc, toks)
      push_subgraph_stmt(s, loc, toks)
      push_default_stmt(s, loc, toks)
      push_attr_list(s, loc, toks)
      push_edge_stmt(s, loc, toks)

Deprecated:
- Test suite option `--no-check`. See "Reorganized package/module
  structure" above.

Removed:
- Drop support for Python 2 and Python < 3.7.
  **USER FEEDBACK REQUESTED**
  ~~We are considering if pydot 2.0 should drop support for Python 3.5
  and 3.6 as well. If this would affect you, please leave a comment in
  https://github.com/pydot/pydot/issues/268.~~
  EDIT: This was decided to be done, with a lot of time passed since this entry.

(adam)

doc: Updated mail/qmail-run to 20240206

(schmonz)

qmail-run: document DKIM steps. Bump version.

(schmonz)

Updated math/py-numpy, devel/py-ipykernel

(adam)

py-ipykernel: updated to 6.29.1

6.29.1

Bugs fixed

- fix: on exception, return a 0, so that the "sum" still computes
- Fix handling of "silent" in execute request

Maintenance and upkeep improvements

- chore: update pre-commit hooks
- Do git ignore of /node_modules/.cache
- Bump the actions group with 1 update

(adam)

py-numpy: updated to 1.26.4

NumPy 1.26.4 is a maintenance release that fixes bugs and regressions
discovered after the 1.26.3 release. The Python versions supported by this
release are 3.9-3.12. This is the last planned release in the 1.26.x series.

BUG: Restore missing asstr import
MAINT: prepare 1.26.x for further development
BUG: ``numpy.array_api``: fix ``linalg.cholesky`` upper decomp...
CI: Bump azure pipeline timeout to 120 minutes
MAINT, BLD: Fix unused inline functions warnings on clang
BLD: include fix for MinGW platform detection
TST: Fix test_numeric on riscv64
BLD: fix building for windows ARM64
MAINT: add ``newaxis`` to ``__all__`` in ``numpy.array_api``
BUG: Use large file fallocate on 32 bit linux platforms
TST: Fix test_warning_calls on Python 3.12
TST: Bump pytz to 2023.3.post1
BUG: Fix AVX512 build flags on Intel Classic Compiler
BLD: fix potential issue with escape sequences in ``__config__.py``
CI: pin cygwin python to 3.9.16-1 and fix typing tests [skip...
MAINT: Bump cibuildwheel to v2.16.4
BLD: unvendor meson-python on 1.26.x and upgrade to meson-python...
MAINT: Include header defining backtrace
BUG: Fix np.quantile([Fraction(2,1)], 0.5)

(adam)