doc: Updated fonts/vera-ttf to 1.10nb6

(maya)

vera-ttf: use fonts.mk

bump PKGREVISION for paranoia.

(maya)

culmus: use fonts.mk

(maya)

overpass: use fonts.mk

(maya)

Add a generic fonts.mk makefile fragment.

Reviewed by rillig in
pkg/2019/03/05/msg020895.html">http://mail-index.netbsd.org/tech-pkg/2019/03/05/msg020895.html

I am only adding TTF and OTF handling because I don't know enough about
the other font formats. :)

(maya)

libblkid: Bump revision for previous commit

(bsiegert)

libblkid: Re-add libuuid dependency.

Fixes a build failure seen in the Joyent Linux builds.

(bsiegert)

Updated devel/py-setuptools, www/py-terminado

(adam)

py-terminado: updated to 0.8.2

0.8.2:
Bug fixes.

(adam)

Updated www/p5-HTML-Restrict to 3.0.0

(wen)

py-setuptools: updated to 40.9.0

v40.9.0
* Added support for setup.cfg-only projects when using the setuptools.build_meta backend. Projects that have enabled PEP 517 no longer need to have a setup.py and can use the purely declarative setup.cfg configuration file instead.
* Added support for pkg_resources.parse_requirements-style requirements in setup_requires when setup.py is invoked from the setuptools.build_meta build backend.
* Added the path to the PKG-INFO or METADATA file in the exception text when the Version: header can't be found.
* Removed some placeholder documentation sections referring to deprecated features.

(adam)

Update to 3.0.0

Upstream changes:
v3.0.0    2019-03-11 13:52:08Z
        - Better fix for handling malformed tags. Removes max_parser_loops(),
          which was introduced in 2.4.0 (GH#37) (Graham Knop)

(wen)

Updated www/p5-HTML-Form to 6.04

(wen)

Update to 6.04

Upstream changes:
6.04      2019-03-25 18:22:51Z
    - Convert to Dist::Zilla
    - Add an autocomplete method (GH #13) (Olaf Alders)

(wen)

Updated www/p5-CGI-Fast to 2.15

(wen)

Update to 2.15

Upstream changes:
2.15 2019-03-29
    [FIX]
    - ensure upload hooks are passed to CGI.pm constructor
    (GH #19, thanks to ikegami)

2.14 2019-03-26
    [DOCUMENTATION]
    - Add a link to the "you probably shouldn't use CGI.pm" docs

(wen)

Updated www/p5-CGI to 4.42

(wen)

Update to 4.42

Upstream changes:
4.42 2019-03-26

    [ DOCUMENTATION ]
    - clarify licence also in Makefile.PL (GH #232)

4.41 2019-03-26

    [ DOCUMENTATION ]
    - clarify licence (GH #232)

(wen)

Updated www/p5-Dancer to 1.3512

(wen)

py-soupsieve: Remove no longer needed/used patch

setup.py was differently adjusted upstream to exclude all tests.

(leot)

Update to 1.3512

Upstream changes:
1.3512    2019-03-31 20:10:08+01:00 Europe/London
Promoting previous trial release 1.3511 to stable.

1.3511    2019-03-29 11:16:08+00:00 Europe/London (TRIAL RELEASE)
[BUG FIXES]
- More session cookie handling fun - avoid causing test failures in dependencies
  in some cases (e.g. RT #128911 and others)

[ENHANCEMENTS]
- hold session in SharedData, to avoid reading the session contents every time
  anything is requested, could be a performance win

1.3510    2019-03-19 14:42:26+00:00 Europe/London
Promoting previous trial release 1.3501  to stable.
Fix #1204 - more proxy-related test failure fun

1.3501    2019-03-14 19:19:49+00:00 Europe/London (TRIAL RELEASE)
[BUG FIXES]
Fix "too late to set cookie" errors if you access a session within an after hook
after using send_file().

(wen)

README.Linux: minor tweak to a sentence

(gutteridge)

doc: Updated x11/xfce4-screenshooter to 1.9.5

(gutteridge)

xfce4-screenshooter: update to 1.9.5

=== Version 1.9.5 ===
  * Bugs fixed:
    - Panel plugin: allow it to save files (bug #15187)

(gutteridge)

doc: Updated devel/geany to 1.34.1nb3

(gutteridge)

geany: note explicit dependency on adwaita-icon-theme

If GTK3 is selected (now the default), we must explicitly depend on
adwaita-icon-theme, otherwise various fundamental toolbar icons will be
missing (unless, of course, another package has already installed it,
which is why I didn't notice before). Bump PKGREVISION to note this
fix.

(gutteridge)

Simplify distfile metadata for chunkwm and skhd by using GITHUB_TAG.

Based on suggestion from leot@.

(jmmv)

doc/pkgsrc.*: regen

(sevan)

typo found with xmllint

(sevan)

doc: Updated pkgtools/pkglint to 5.7.4

(rillig)

pkgtools/pkglint: update to 5.7.4

Changes since 5.7.3:

* Warn about dependency patterns that are missing a version number,
  such as ${PYPKGPREFIX}-sqlite3:../../databases/py-sqlite3.

* Suggest to replace the := assignment operator with the :sh modifier,
  in some cases where the variable is not obviously used at load time.

(rillig)

mk/configure: allow strict option checking for GNU configure scripts

When a GNU configure script is run with unknown --enable, --disable,
--with or --without options, it doesn't fail but just prints a warning.
This hides outdated package definitions that may still pass options that
have been removed already.

See https://mail-index.netbsd.org/pkgsrc-users/2019/04/02/msg028272.html
for a recent case.

The default behavior doesn't change. After a period of testing this new
check, the check is expected to become enabled by default so that future
problems like this are prevented.

(rillig)

mk/pkgformat: add show-all-depends target

(rillig)

mk/tools/replace.mk: take versions of FLEX_REQD into account

If a package had said FLEX_REQD=1000.0, the actual dependency had still
been flex>=2.5.4. Now all version numbers from FLEX_REQD are taken into
account, too.

(rillig)

lang/rust: Extend BROKEN to all NetBSD before 8

As discussed on pkgsrc-users, rust does not work on any NetBSD before
8, for any architecture.  Omit NetBSD 1 from the broken list, so that
this doesn't match NetBSD 10.

(gdt)

Switch to using cdn.NetBSD.org
pkg-vulnerabilities file is fetched from ftp.NetBSD.org via http, see
tnf_vulnerability_base in pkgtools/pkg_install/files/lib/parse-config.c

(sevan)

lang/rust: Mark BROKEN_ON_PLATFORM for NetBSD-7*-i386

As discussed on pkgsrc-users, mark rust as BROKEN_ON for NetBSD 7
i386.  The bootstrap is built for 8, apparently because it doens't
build on 7.  This is BROKEN_ON not NOT_FOR because it does make sense
to want rust on 7 -- it just won't build.

(Probably this should be expanded to all arches and all versions < 8.)

(gdt)

Updated print/py-reportlab, textproc/py-rst2pdf

(adam)

py-rst2pdf: updated to 0.94

0.94:
Added: :hl_lines: code directive allows highlighting of specific lines
Added: repeat_table_rows is now supported in Sphinx
Added: scale_width is now supported for --fit-background-mode
Added: Extension metadata for Sphinx is now returned in pdfbuilder
Added: The Sphinx today config setting is now used if it is set
Changed: :start-after: will now render the next line
Changed: Updated reportlab dependency to 3.5.12 and Sphinx to 1.7.9
Changed: We no longer logging.basicConfig configuration
Changed: We now use PILLOW rather than PIL
Fixed bug in token replacement that broke tables in headers/footers
Fixed handling of empty documents, they now generate a single empty page
Fixed: :alt: option now works for plantuml extension
Fixed: :linenos_offset: now works again
Fixed: rst2pdf.createpdf.main now releases the input file handle
Fixed: CreationDate metadata shows correct date using Sphinx
Fixed: Error when using --date-invariant with newer reportlab versions
Fixed: handling of non-http/ftp URLs
Fixed: Inline :math: works again as we now use quoted attributes for HTML <img> tags
Fixed: Made literal block shrinking work again
Fixed: Removed debugging print statement when using line blocks
Fixed: Removed uniconverter from setup
Fixed: Renamed links now work
Fixed: Sphinx config setting pdf_invariant works properly now
Fixed: sphinx+rst2pdf now works with automodule directive Sphinx >= 1.4
Fixed: Using :start-after: with linenos_offset now displays the correct line number
Fixed: Using :start-at: with linenos_offset now displays the correct line number
Removed: Our own copy of smartypants. We now use the PyPI package instead
Removed: Tenjin has been switched to Jinja2
Removed: The QT4 GUI is no more

(adam)

py-reportlab: updated to 3.5.17

RELEASE 3.5.17:
* more FrameBG fixes; added canvas cross method, frame static drawBoundary

RELEASE 3.5.16:
* fix stroking for frame background in container

RELEASE 3.5.15:
* add stroking for frame background

RELEASE 3.5.14:
* added axes tickStrokeWidth etc etc

(adam)

Added textproc/py-smartypants, time/py-relativetimebuilder

(adam)

py-relativetimebuilder: added version 1.0.0

aniso8601 builder for dateutil relativedeltas

Features
* Provides RelativeTimeBuilder compatible with aniso8601
* Returns dateutil relativedelta objects for durations

(adam)

Split documentation to doc option

It is enabled by default and no revbump is needed.

(ryoon)

py-smartypants: added version 2.0.1

smartypants can perform the following transformations:
* Straight quotes (" and ') into "curly" quote HTML entities
* Backticks-style quotes (``like this'') into "curly" quote HTML entities
* Dashes (-- and ---) into en- and em-dash entities
* Three consecutive dots (... or . . .) into an ellipsis entity

This means you can write, edit, and save your posts using plain old ASCII
straight quotes, plain dashes, and plain dots, but your published posts (and
final HTML output) will appear with smart quotes, em-dashes, and proper
ellipses.

smartypants does not modify contents in some HTML element. Typically, these
tags are used to display text where smart quotes and other "smart punctuation"
would not be appropriate, such as source code or example markup.

(adam)

Switch http links for ftp.NetBSD.org to https links for cdn.NetBSD.org

(sevan)

Updated net/samba4, security/gpgme

(adam)

gpgme: updated to 1.13.0

Noteworthy changes in version 1.13.0:
* Support GPGME_AUDITLOG_DIAG for gpgsm.
* New context flag "trust-model".
* Removed support for WindowsCE and Windows ME.
* Aligned the gpgrt-config code with our other libaries.
* Auto-check for all installed Python versions.
* Fixed generating card key in the C++ bindings.
* Fixed a segv due to bad parameters in genkey.
* Fixed crash if the plaintext is ignored in a CMS verify.
* Fixed memleak on Windows.
* Tweaked the Windows I/O code.
* Fixed random crashes on Windows due to closing an arbitrary
  handle.
* Fixed a segv on Windows.
* Fixed test suite problems related to dtags.
* Fixed bunch of python bugs.
* Several fixes to the Common Lisp bindings.
* Fixed minor bugs in gpgme-json.
* Require trace level 8 to dump all I/O data.
* The compiler must now support variadic macros.

(adam)

samba4: updated to 4.10.1

Changes since 4.10.0:
* BUG 13837: py/kcc_utils: py2.6 compatibility.
* BUG 13869: libcli: permit larger values of DataLength in
  SMB2_ENCRYPTION_CAPABILITIES of negotiate response.
* BUG 13840: regfio: Improve handling of malformed registry hive files.
* BUG 13789: ctdb-version: Simplify version string usage.
* BUG 13859: lib: Make fd_load work for non-regular files.
* BUG 13816: dbcheck in the middle of the tombstone garbage collection causes
  replication failures, dbcheck: add --selftest-check-expired-tombstones
  cmdline option.
* BUG 13818: ndr_spoolss_buf: Fix out of scope use of stack variable in
  NDR_SPOOLSS_PUSH_ENUM_OUT().
* BUG 13854: s4/messaging: Fix undefined reference in linking
  libMESSAGING-samba4.so.
* BUG 13836: acl_read: Fix regression for empty lists.
* BUG 13841: s4:dlz make b9_has_soa check dc=@ node.
* BUG 13832: s3:client: Fix printing via smbspool backend with kerberos auth.
* BUG 13847: s4:librpc: Fix installation of Samba.
* BUG 13848: s3:lib: Fix the debug message for adding cache entries.
* BUG 13793: s3:utils: Add 'smbstatus -L --resolve-uids' to show username.
* BUG 13848: s3:lib: Fix the debug message for adding cache entries.
* BUG 13853: s3:waf: Fix the detection of makdev() macro on Linux.
* BUG 13789: ctdb-build: Drop creation of .distversion in tarball.
* BUG 13838: ctdb-packaging: Test package requires tcpdump, ctdb package
  should not own system library directory.

(adam)

Updated misc/libreoffice to 6.2.2.2nb4

(ryoon)

Use harfbuzz-2.4.0 as internal harfbuzz

* Improve handling of additional distfiles
* Bump PKGREVISION

(ryoon)

python*: rework logic used to determine if PLIST.nis is used.

Match the logic used by setup.py: it looks for two headers in the default
include path. This helps newer glibc linux.

Omit PLIST.dll on python3* because it doesn't appear in the PLIST.
Make PLIST.dll true on all non-IRIX.

tested: NetBSD-current, FreeBSD 11.2, Ubuntu 18.10, CentOS 6.9, Source Mage

From Dr. Thomas Orgis, myself, and with pointers to a change from leot.

PR pkg/53673

(maya)

Updated www/py-soupsieve, time/py-aniso8601

(adam)

py-aniso8601: updated to 6.0.0

aniso8601 6.0.0
Remove previously deprecated built in version of relativetimebuilder
Python 2 support will be removed in 7.0.0

aniso8601 5.0.0
Previously deprecated relative keyword removed
Move builders to builders module
aniso8601.builder.PythonTimeBuilder -> aniso8601.builders.python.PythonTimeBuilder
aniso8601.builder.RelativeTimeBuilder -> aniso8601.builders.relative.RelativeTimeBuilder
aniso8601.builder.TupleBuilder -> aniso8601.builders.TupleBuilder
UTCOffset moved out of builder (aniso8601.builder.UTCOffset -> aniso8601.utcoffset.UTCOffset)
Fractional arguments are now handled with greater precision
When build_time is called with only hh 24<=hh<25, a MidnightBoundsError is raised, this used to be a HoursOutOfBoundsError
Promote interval components to datetime objects if the given duration has second or microsecond resolution, or if the duration tuple has hour, minute, or second components
Before promotion would only happen if the duration tuple had hour, minute, or second components
The built in RelativeTimeBuilder is deprecated, it will be removed in aniso8601 6.0.0, use RelativeTimeBuilder from relativetimebuilder instead

(adam)

py-soupsieve: updated to 1.9.0

1.9.0:
NEW: Allow :contains() to accept a list of text to search for.
NEW: Add new escape function for escaping CSS identifiers.
NEW: Deprecate comments and icomments functions in the API to ensure Soup Sieve focuses only in CSS selectors. comments and icomments will most likely be removed in 2.0.
NEW: Add Python 3.8 support.
FIX: Don't install test files when installing the soupsieve package.
FIX: Improve efficiency of :contains() comparison.
FIX: Null characters should translate to the Unicode REPLACEMENT CHARACTER (U+FFFD) according to the specification. This applies to CSS escaped NULL characters as well.
FIX: Escaped EOF should translate to U+FFFD outside of CSS strings. In a string, they should just be ignored, but as there is no case where we could resolve such a string and still have a valid selector, string handling remains the same.

(adam)

Updated graphics/openjpeg, graphics/py-Pillow

(adam)

py-Pillow: updated to 6.0.0

6.0.0:
Python 2.7 support will be removed in Pillow 7.0.0
Add EXIF class
Add ImageOps exif_transpose method
Added warnings to deprecated CMSProfile attributes
Documented reading TIFF multiframe images
Improved speed of opening an MPO file
Update palette in quantize
Improvements to TIFF is_animated and n_frames
Fixed incompatible pointer type warnings
Improvements to PA and LA conversion and palette operations
Consistent DPI rounding
Change size of MPO image to match frame
Read Photoshop resolution data
Ensure image is mutable before saving
Correct remap_palette documentation
Promote P images to PA in putalpha
Allow RGB and RGBA values for new P images
Fixed TIFF bug when seeking backwards and then forwards
Cache EXIF information
Added transparency for all PNG greyscale modes
Fix deprecation warnings in Python 3.8
Fixed GIF bug when rewinding to a non-zero frame
Only close original fp in __del__ and __exit__ if original fp is exclusive
Fix BytesWarning in Tests/test_numpy.py
Add missing MIME types and extensions
Add I;16 PNG save
Add support for BMP RGBA bitfield compression
Added ability to set language for text rendering
Only close exclusive fp on Image __exit__
Changed EPS subprocess stdout from devnull to None
Add reading old-JPEG compressed TIFFs
Add EXIF support for PNG
Add option to set dither param on quantize
Add reading of DDS uncompressed RGB data
Correct length of Tiff BYTE tags
Add DIB saving and loading through Image open
Removed deprecated VERSION
Fix 'BytesWarning: Comparison between bytes and string' in PdfDict
Do not resize in Image.thumbnail if already the destination size
Replace .seek() magic numbers with io.SEEK_* constants
Make ContainerIO.isatty() return a bool, not int
Add support to all transpose operations for I;16 modes
Deprecate support for PyQt4 and PySide
Add TIFF compression codecs: LZMA, Zstd, WebP
Fixed pickling of iTXt class with protocol > 1
_util.isPath returns True for pathlib.Path objects
Remove unnecessary unittest.main() boilerplate from test files
Exif: Seek to IFD offset
Deprecate PIL.*ImagePlugin.__version__ attributes
Docs: Add note about ImageDraw operations that exceed image bounds
Allow for unknown PNG chunks after image data
Changed EPS subprocess stdin from devnull to None
Fix possible integer overflow
Catch BaseException for resource cleanup handlers
Improve pytest configuration to allow specific tests as CLI args
Drop support for Python 3.4
Remove deprecated PIL.OleFileIO
Remove deprecated ImageOps undocumented functions
Depends: Update libwebp to 1.0.2
Detect MIME types

(adam)

openjpeg: updated to 2.3.1

v2.3.1:
v2.2.0 regression for decoding images where TNsot == 0
Int overflow in jp3d
Heap buffer overflow in opj_j2k_update_image_data() triggered with Ghostscript
LINUX install doesn't work when building shared libraries is disabled
OPENJPEG null ptr dereference in openjpeg-2.3.0/src/bin/jp2/convert.c:2243
How to drop certain subbands/layers in DWT
where is the MQ-Coder ouput stream in t2.c?
OpenJPEG 2.3 (and 2.2?) multi component image fails to decode with KDU v7.10
Missing checks for header_info.height and header_info.width in function pnmtoimage in src/bin/jpwl/convert.c, which can lead to heap buffer overflow
Assertion Failure in jp2.c
Division-by-zero vulnerabilities in the function pi_next_pcrl, pi_next_cprl and pi_next_rpcl in src/lib/openjp3d/pi.c
Precinct switch (-c) doesn't right-shift last record to remaining resolution levels
Sample: encode J2K a data using streams???
HIGH THROUGHPUT JPEG 2000 (HTJ2K)
How to build openjpeg for arm linux?
crash
JP2000 returning OPJ_CLRSPC_UNKNOWN color space
Compilation successful but install unsuccessful: Calling executables throws libraries missing error
fprintf format string requires 1 parameter but only 0 are given
fprintf format string requires 1 parameter but only 0 are given
sprintf buffer overflow
sprintf buffer overflow
Infinite loop when reading jp2
missing format string parameter
Excessive Iteration in opj_t1_encode_cblks (src/lib/openjp2/t1.c)
Out-of-bound left shift in opj_j2k_setup_encoder (src/lib/openjp2/j2k.c)
Encode image on Unsplash
Integer overflow in opj_t1_encode_cblks (src/lib/openjp2/t1.c)
Signed Integer Overflow - 68065512
Similar vulnerable functions related to CVE-2017-14041
[ERROR] COD marker already read. No more than one COD marker per tile.
failing to install latest version of openjpeg from source
Trouble compressing large raw image
Download and installed code from 2.3 archive. Installing 2.2?
missing fclose
NULL Pointer Access in function imagetopnm of convert.c(jp2):1289
NULL Pointer Access in function imagetopnm of convert.c:2226(jp2)
Heap Buffer Overflow in function imagetotga of convert.c(jp2):942

Merged pull requests:
abi-check.sh: fix broken download URL
opj_t1_encode_cblks: fix UBSAN signed integer overflow
convertbmp: detect invalid file dimensions early (CVE-2018-6616)
color_apply_icc_profile: avoid potential heap buffer overflow
Fix multiple potential vulnerabilities and bugs
Fix several memory and resource leaks
Fix some potential overflow issues
jp3d/jpwl convert: fix write stack buffer overflow
Int overflow fixed
Update knownfailures- files given current configurations
CVE-2018-5785: fix issues with zero bitmasks
openjp2/jp2: Fix two format strings
Changes in pnmtoimage if image data are missing
Relative path to header files is hardcoded in OpenJPEGConfig.cmake.in file
Cast on uint ceildiv
Add -DBUILD_PKGCONFIG_FILES to install instructions
Fix some typos in code comments and documentation
Fix regression in reading files with TNsot == 0 (refs
Use local type declaration for POSIX standard type only for MS compiler
Fix Mac builds
jp3d: Replace sprintf() by snprintf() in volumetobin()
opj_mj2_extract: Rename output_location to output_prefix
mj2: Add missing variable to format string in fprintf() invocation in meta_out.c
Convert files to UTF-8 encoding
fix unchecked integer multiplication overflow
Fixed typos
Note that seek uses SEEK_SET behavior.
Some Doxygen tags are removed
Fix resource leak (CID 179466)
Changed cmake version test to allow for cmake 2.8.11.x
Add missing fclose() statement in error condition.

(adam)

doc: Updated graphics/gimp to 2.10.8nb6

(wiz)

gimp: svg support is not optional any longer.

Bump PKGREVISION.

Investigated by Mayuresh <mayuresh@acm.org> on pkgsrc-users.

(wiz)

Recursive revbump from textproc/icu

(ryoon)

Updated textproc/icu to 64.1

(ryoon)

Update to 64.1

Changelog:
Common Changes

    Unicode 12: 554 new characters, including 4 new scripts and 61 new emoji characters.
    CLDR 35
        Somali and Javanese data now up to modern level
        Cebuano, Hausa, Igbo, and Yoruba data now up to basic level
        23 additional measurement units
        Many data additions and corrections in many other languages
        The following language has been added to ICU: Cebuano
        This version of ICU does not yet implement the Indic Grapheme Cluster improvements from CLDR 35.
    New Japanese calendar era from 2019: CLDR and ICU include data for testing that can be enabled. (ICU #12973, CLDR #10750)
        To enable CLDR new Japanese era placeholder name, set environment variable (and Java system property for ICU4J) ICU_ENABLE_TENTATIVE_ERA=true (This was added in ICU 63).
        Support added for Gannen year numbering (using 元 for the first year of an era) in the Japanese locale Japanese-calendar full, long, and medium formats. Gannen year support is also automatically added for other non-numeric formats (those containing other kanji characters such as 年) derived from pattern skeletons unless specifically overridden. (ICU #20441, CLDR #11843, CLDR #11819)
        We are planning for an ICU 64.2 update in 2019-April which will add the new Japanese era with its real name.
    ICU 64 now uses "rearguard" TZ data. (Recent versions have used "vanguard" data with certain overrides.) (ICU-20398)
    ICU data filtering: The ICU4C build accepts an optional filter script that specifies a subset of the data to be built, with whitelists and blacklists for locales and for resource bundle paths. (ICU-10923, design doc)
        See this new documentation page: userguide/icu_data/buildtool.md
    MessageFormat has new pattern syntax for specifying the style of a date/time argument via a locale-independent skeleton rather than a locale-specific pattern. (ICU-9622)
        Date/time skeletons use the same "::" prefix as number skeletons.
        Example MessageFormat pattern string: "We close on {closing,date,::MMMMd} at {closing,time,::jm}."
    Many formatting APIs can now output a new type of result object which is-a FormattedValue (Java & C++), or convertible to a UFormattedValue (C).
        These combine the result strings with easy iteration over FieldPosition metadata.

ICU4C Specific Changes

    New C++ class LocaleBuilder for building a Locale from subtags, keywords, and extensions. (ICU-20328)
        Parallel to the existing ICU4J ULocale.Builder class.
    For C++ MeasureUnit instances, there are now additional factory methods that return units by value, not by pointer-with-ownership. (ICU-20337)
    Various Out-Of-Memory (OOM) issues have been fixed. (ticket query)

(ryoon)

Updated security/stunnel to 5.50

(ryoon)

Update to 5.50

Changelog:
Version 5.50, 2018.12.02, urgency: MEDIUM
* New features
  - 32-bit Windows builds replaced with 64-bit builds.
  - OpenSSL DLLs updated to version 1.1.1.
  - Check whether "output" is not a relative file name.
  - Major code cleanup in the configuration file parser.
  - Added sslVersion, sslVersionMin and sslVersionMax
    for OpenSSL 1.1.0 and later.
* Bugfixes
  - Fixed PSK session resumption with TLS 1.3.
  - Fixed a memory leak in WIN32 logging subsystem.
  - Allow for zero value (ignored) TLS options.
  - Partially refactored configuration file parsing
    and logging subsystems for clearer code and minor
        bugfixes.
* Caveats
  - We removed FIPS support from our standard builds.
    FIPS will still be available with bespoke builds.

(ryoon)

unrealircd: set DIST_SUBDIR for new distfile

(wiz)

doc: Updated graphics/papirus-folders to 1.3.1

(nia)

graphics/papirus-folders: Update to 1.3.1

Changes:

New colours: pink, purple, indigo, white
Improved the message of usage
Removed LOGNAME support #9

(nia)

doc: Updated graphics/papirus-icon-theme to 20190331

(nia)

graphics/papirus-icon-theme: Update to 20190331

Changes in 20190331:

Added icons

    Allegorithmic Substance Suite #1685
    Brave Browser #1657
    Brave Web Browser (dev) and Brave Web Browser (nightly)
    DiRT 4
    DockStation #1664
    ePDFviewer #1688
    Ephoto
    Epulse
    FontForge (Flatpak)
    Google Web Designer #1661
    Guitarix tray icon
    IBus Anthy #1690
    Kajongg #1675
    KAppTemplate #1675
    KBackup #1675
    KCachegrind #1675
    kDots
    KeePassXC action icons
    KGraphViewer #1675
    KImageMapEditor #1675
    Kitematic #1686
    KNights #1675
    KRecipes #1675
    KTimer #1675
    KUIViewer #1675
    KXStitch #1675
    LanguageTool #1670
    LMMS (Flatpak)
    OBS tray icons #460
    OpenAudible #1678
    OpenDrive (Flatpak)
    Optimizer #1659
    pgAdmin4 #1684
    Plexamp
    RSIBreak #1675
    Simon #1675
    Sublime Merge #1669
    Substance Launcher #1689
    SymbolEditor #1675
    Taxi #1665
    Todoist Linux #1666
    Tomboy (Flatpak)
    Umbrello #1675
    Unity Hub #1689
    Void Wizard #1688
    Widelands (Flatpak)
    Yate Client (app and tray icons) #1687
    Plasmoid icons:
        AppMenu
        Device
        EqMenu
        Keyboard Indicator
        Latte Separator
        Latte Spacer
        Termoid

Updated icons

    application-x-object #1651
    Aseprite #1662
    Fragments #1683
    Hydrogen Drum Machine #1679
    Qtractor #1691
    Racket and Racket SlideShow icons #1681
    Soundnode
    Steam (app & tray icons) #1668

Changes and fixes

    Added missing icons for apps in GNOME 3.32 #1671 #1673 #1674
    Fixed alignment of 16px apps icons for a better experience in vertical docks and panels #1658
    Removed useless transforms on a lot of apps icons

Changes in 20190302:

Added icons

    Added symlinks for new Flatpak apps hosted on Flathub:
        chat.delta.desktop
        com.github.PintaProject.Pinta
        com.jetbrains.WebStorm
        com.teamspeak.TeamSpeak
        com.wings3d.WINGS
        com.wps.Office
        net.mancubus.SLADE
        org.gnome.OCRFeeder
        org.phoenicis.playonlinux
        org.wireshark.Wireshark
    Plasmoid icons:
        AlphaBlack Control
        Bugzilla
        Daily Forecast
        Desktop Pager Wheel
        Digital Clock BeClock style
        File Drawer
        GitHub Issues
        KDE Connect Device
        Public IP Address
        Shutdown or Switch
        Simple Weather
    Akira #1627
    Apache Directory Studio #1618
    Cacher #1644
    Clockify #1647
    Cronopete #1645
    Cuyo #1642
    Emby Server
    Freeter #1649
    gtklick #1620
    GNOME Color Viewer
    GNU Backgammon #1621
    gxi #1631
    GameHub #1648
    HiFi #1633
    Hotspot #1650
    Jellyfin
    KRegExpEditor #1627
    KTechlab #1619
    Lingot #1625
    Lyrics #1654
    Meet Alva #1652
    Meteo #1624
    ODrive (app and tray icons)
    Pacman #1639
    Robocraft #1634
    SVG Cleaner #1627
    Schism Tracker
    Simple Terminal #1627
    Spec Ops The Line #1634
    Tusk #1646
    Unison #1635
    Void Linux #1632

Updated icons

    GSConnect #1132
    KDEConnect
    phone, smartphone, and laptop monochrome icons
    qBittorrent tray icon
    Riot (app and tray icons) #1640
    Transmission (app and tray icons)

Changes and fixes

    Added indigo folder color #1632
    Added white folder color #1641
    Changed color of screens for devices #1626
    Changed highlight color for monochrome icons
    Increased height of 22/24px gnome-mpv icons #1638
    Fixed pixel align for Inkscape icon
    Removed purple folder color #1590

Others

    Optimized a lot of SVG icons #1656

(nia)

unrealircd: bump PKGREVISION for distinfo change

(nia)

chat/unrealircd: update distinfo.

The tarball was silently updated without a release. After diffing this
against the git tag, the updated tarball seems to change some if statements
from if (x = y) to if (x == y)...

https://github.com/unrealircd/unrealircd/commit/766055d5c0399fa55d03ac6ab33804dc084e2547

The bug fixed by this change is apparently not exploitable.

(nia)

doc: Updated net/dnscrypt-proxy2 to 2.0.22

(nia)

net/dnscrypt-proxy2: Update to 2.0.22

The previous version had issues with the .org TLD when used in conjunction with dnsmasq.

This has been fixed.

(nia)

Updated devel/py-hypothesis, devel/py-test

(adam)

py-test: updated to 4.4.0

pytest 4.4.0:

Features
* async test functions are skipped and a warning is emitted when a suitable async plugin is not installed (such as pytest-asyncio or pytest-trio).
Previously async functions would not execute at all but still be marked as 窶徘assed窶�.

* Include new disable_test_id_escaping_and_forfeit_all_rights_to_community_support option to disable ascii-escaping in parametrized values. This may cause a series of problems and as the name makes clear, use at your own risk.
* The -p option can now be used to early-load plugins also by entry-point name, instead of just by module name.
This makes it possible to early load external plugins like pytest-cov in the command-line:
pytest -p pytest_cov

* The --pdbcls option handles classes via module attributes now (e.g. pdb:pdb.Pdb with pdb++), and its validation was improved.
* The testpaths configuration option is now displayed next to the rootdir and inifile lines in the pytest header if the option is in effect, i.e., directories or file names were not explicitly passed in the command line.
Also, inifile is only displayed if there窶冱 a configuration file, instead of an empty inifile: string.

* Doctests can be skipped now dynamically using pytest.skip().
* Internal refactorings have been made in order to make the implementation of the pytest-subtests plugin possible, which adds unittest sub-test support and a new subtests fixture as discussed in 1367.
For details on the internal refactorings, please see the details on the related PR.

* pytester窶冱 LineMatcher asserts that the passed lines are a sequence.
* Handle -p plug after -p no:plug.
This can be used to override a blocked plugin (e.g. in 窶彗ddopts窶�) from the command line etc.

* Output capturing is handled correctly when only capturing via fixtures (capsys, capfs) with pdb.set_trace().
* pytester sets $HOME and $USERPROFILE to the temporary directory during test runs.
This ensures to not load configuration files from the real user窶冱 home directory.

* Namespace packages are handled better with monkeypatch.syspath_prepend and testdir.syspathinsert (via pkg_resources.fixup_namespace_packages).
* The stepwise plugin reports status information now.
* If a setup.cfg file contains [tool:pytest] and also the no longer supported [pytest] section, pytest will use [tool:pytest] ignoring [pytest]. Previously it would unconditionally error out.
This makes it simpler for plugins to support old pytest versions.

Bug Fixes
* Fix bug where fixtures requested dynamically via request.getfixturevalue() might be teardown before the requesting fixture.
* pytester unsets PYTEST_ADDOPTS now to not use outer options with testdir.runpytest().
* Use the correct modified time for years after 2038 in rewritten .pyc files.
* Fix line offsets with ScopeMismatch errors.
* -p no:plugin is handled correctly for default (internal) plugins now, e.g. with -p no:capture.
Previously they were loaded (imported) always, making e.g. the capfd fixture available.

* The pdb quit command is handled properly when used after the debug command with pdb++.
* Fix the interpretation of -qq option where it was being considered as -v instead.
* outcomes.Exit is not swallowed in assertrepr_compare anymore.
* Close logging窶冱 file handler explicitly when the session finishes.
* Fix line offset with mark collection error (off by one).

Improved Documentation
* Update docs for pytest_cmdline_parse hook to note availability liminations
Trivial/Internal Changes
* pluggy>=0.9 is now required.
* funcsigs>=1.0 is now required for Python 2.7.
* Some left-over internal code related to yield tests has been removed.
* Remove internally unused anypython fixture from the pytester plugin.
* Remove deprecated Sphinx directive, add_description_unit(), pin sphinx-removed-in to >= 0.2.0 to support Sphinx 2.0.
* Fix pytest tests invocation with custom PYTHONPATH.
* New pytest_report_to_serializable and pytest_report_from_serializable experimental hooks.
These hooks will be used by pytest-xdist, pytest-subtests, and the replacement for resultlog to serialize and customize reports.
They are experimental, meaning that their details might change or even be removed completely in future patch releases without warning.

Feedback is welcome from plugin authors and users alike.

* Collector.repr_failure respects the --tb option, but only defaults to short now (with auto).

(adam)

py-hypothesis: updated to 4.14.2

4.14.2
This patch improves the error message if the function f in :ref:s.flatmap(f) <flatmap> does not return a strategy.

4.14.1
This release modifies how Hypothesis selects operations to run during shrinking, by causing it to deprioritise previously useless classes of shrink until others have reached a fixed point.

This avoids certain pathological cases where the shrinker gets very close to finishing and then takes a very long time to finish the last small changes because it tries many useless shrinks for each useful one towards the end. It also should cause a more modest improvement (probably no more than about 30%) in shrinking performance for most tests.

4.14.0
This release blocks installation of Hypothesis on Python 3.4, which :PEP:reached its end of life date on 2019-03-18 <429>.

This should not be of interest to anyone but downstream maintainers - if you are affected, migrate to a secure version of Python as soon as possible or at least seek commercial support.

4.13.0
This release makes it an explicit error to call :func:floats(min_value=inf, exclude_min=True) <hypothesis.strategies.floats> or :func:floats(max_value=-inf, exclude_max=True) <hypothesis.strategies.floats>, as there are no possible values that can be generated (:issue:1859).

:func:floats(min_value=0.0, max_value=-0.0) <hypothesis.strategies.floats> is now deprecated. While 0. == -0. and we could thus generate either if comparing by value, violating the sequence ordering of floats is a special case we don't want or need.

4.12.1
This release should significantly reduce the amount of memory that Hypothesis uses for representing large test cases, by storing information in a more compact representation and only unpacking it lazily when it is first needed.

4.12.0
This update adds the :obj:~hypothesis.settings.report_multiple_bugs setting, which you can use to disable multi-bug reporting and only raise whichever bug had the smallest minimal example. This is occasionally useful when using a debugger or tools that annotate tracebacks via introspection.

4.11.7
This change makes a tiny improvement to the core engine's bookkeeping. There is no user-visible change.

4.11.6
This release changes some of Hypothesis's internal shrinking behaviour in order to reduce memory usage and hopefully improve performance.

4.11.5
This release adds a micro-optimisation to how Hypothesis handles debug reporting internally. Hard to shrink test may see a slight performance improvement, but in most common scenarios it is unlikely to be noticeable.

4.11.4
This release removes some redundant code that was no longer needed but was still running a significant amount of computation and allocation on the hot path. This should result in a modest speed improvement for most tests, especially those with large test cases.

4.11.3
This release adds a micro-optimisation to how Hypothesis caches test cases. This will cause a small improvement in speed and memory usage for large test cases, but in most common scenarios it is unlikely to be noticeable.

4.11.2
This release removes some internal code that populates a field that is no longer used anywhere. This should result in some modest performance and speed improvements and no other user visible effects.

(adam)

Updated databases/py-sqlalchemy, databases/py-alembic

(adam)

py-alembic: updated to 1.0.8

1.0.8
bug
[bug] [operations] Removed use of deprecated force parameter for SQLAlchemy quoting functions as this parameter will be removed in a future release. Pull request courtesy Parth Shandilya(ParthS007).

[bug] [autogenerate] [postgresql] [py3k] Fixed issue where server default comparison on the PostgreSQL dialect would fail for a blank string on Python 3.7 only, due to a change in regular expression behavior in Python 3.7.

(adam)

py-sqlalchemy: updated to 1.3.1

1.3.1
orm
[orm] [bug] [ext] Fixed regression where an association proxy linked to a synonym would no longer work, both at instance level and at class level.

mssql

[mssql] [bug] A commit() is emitted after an isolation level change to SNAPSHOT, as both pyodbc and pymssql open an implicit transaction which blocks subsequent SQL from being emitted in the current transaction.

This change is also backported to: 1.2.19

[mssql] [bug] Fixed regression in SQL Server reflection due to 4393 where the removal of open-ended **kw from the Float datatype caused reflection of this type to fail due to a 窶徭cale窶� argument being passed.

1.3.0
orm

[orm] [feature] The Query.get() method can now accept a dictionary of attribute keys and values as a means of indicating the primary key value to load; is particularly useful for composite primary keys. Pull request courtesy Sanjana S.

[orm] [feature] A SQL expression can now be assigned to a primary key attribute for an ORM flush in the same manner as ordinary attributes as described in Embedding SQL Insert/Update Expressions into a Flush where the expression will be evaulated and then returned to the ORM using RETURNING, or in the case of pysqlite, works using the cursor.lastrowid attribute.Requires either a database that supports RETURNING (e.g. Postgresql, Oracle, SQL Server) or pysqlite.

engine

[engine] [feature] Revised the formatting for StatementError when stringified. Each error detail is broken up over multiple newlines instead of spaced out on a single line. Additionally, the SQL representation now stringifies the SQL statement rather than using repr(), so that newlines are rendered as is. Pull request courtesy Nate Clark.

See also
Changed StatementError formatting (newlines and %s)

sql
[sql] [bug] The Alias class and related subclasses CTE, Lateral and TableSample have been reworked so that it is not possible for a user to construct the objects directly. These constructs require that the standalone construction function or selectable-bound method be used to instantiate new objects.

schema
[schema] [feature] Added new parameters Table.resolve_fks and MetaData.reflect.resolve_fks which when set to False will disable the automatic reflection of related tables encountered in ForeignKey objects, which can both reduce SQL overhead for omitted tables as well as avoid tables that can窶冲 be reflected for database-specific reasons. Two Table objects present in the same MetaData collection can still refer to each other even if the reflection of the two tables occurred separately

(adam)

doc: Updated fonts/harfbuzz to 2.4.0

(wiz)

harfbuzz: update to 2.4.0.

Overview of changes leading to 2.4.0
Monday, March 25, 2019
====================================
- Unicode 12.
- Misc fixes.
- Subsetter improvements.
- New API:
HB_BUFFER_FLAG_DO_NOT_INSERT_DOTTED_CIRCLE
hb_directwrite_face_create()

(wiz)

Updated devel/py-execnet, devel/py-test-mock

(adam)

py-test-mock: updated to 1.10.3

1.10.3
* Fix test suite in Python 3.8.

(adam)

doc: Updated time/khal to 0.10.1

(wiz)

khal: update to 0.10.1.

0.10.1
======
2019-03-30

* FIX error with the new color priority system and `discover` calendar type
* FIX search results in ikhal are ordered, same as in `khal search`

0.10.0
======
2019-03-25

* only dateutil < 2.7 is supported

* NEW DEPENDENCY added click_log  >= 0.2.0
* NEW DEPENDENCY for Python 3.4: typing
* UPDATED DEPENDENCY icalendar>=4.03
* DROPPED support for Python 3.3
* vdirsyncer is still a test dependency (and always has been)

* FIX ordinal numbers in birthday entries (before, all number would end on `th`)
* FIX `search` will no longer break on overwritten events with a master event
* FIX when using short dates, khal infers that you meant next year, when date
  is before today
* FIX Check for multi_uid .ics files in vdirs and don't import those events
  (All .ics files in vdirs should only contain VEVENTS with the same UID.)

* CHANGE only searched configuration file paths are now
  $XDG_CONFIG_HOME/khal/config and $XDG_CONFIG_HOME/khal/khal.conf (deprecated)
* CHANGE removed default command
* CHANGE default date/time formats to be the system's locale's formats
* CHANGE ``--verbose`` flag to ``--verbosity``, allowing finer granularity
* CHANGE `search` will now print one line for every different event in a
  recurrence set, that is one line for the master event, and one line for every
  different overwritten event
* CHANGE khal learned to read .ics files with nonsenscial TZOFFSETs > 24h and
  prints a warning
* CHANGE better error message for a specific kind of invalid config file

* NEW khal learned the ``--logfile/-l LOGFILE`` flag which allows logging to a
  file
* NEW format can now print the duration of an event with `{duration}`
* NEW configuration option: [view]monthdisplay = firstday|firstfullweek,
  if set to 'firstday', khal displays the month name as soon as any day
  in the week is within the new month. If set to 'firstfullweek', khal
  displays the month name only if the first day of the week is within
  the new month.

* NEW ikhal learned to show log messages in the header and in a new log pane,
  access with default keybinding `L`

* NEW python 3.7 is now officially supported.

* NEW configuration option [[per_calendar]]priority = int (default 10). If
  multiple calendars events are on the same day, the day will be colored with
  the color of the calendar with highest priority. If multiple calendars have
  the same highest priority, it falls back to the previous system.

* NEW format can now print the organizer of the event with '(organizer)'

(wiz)

py-execnet: updated to 1.6.0

1.6.0:
* execnet no longer supports Python 2.6 and 3.3. Users of those Python versions
  using a recent enough pip should not be affected, as pip will only install
  1.5.0 for them.
* Update test suite to support pytest>4.

(adam)

Updated www/py-cherrypy, databases/py-redis

(adam)

py-redis: updated to 3.2.1

3.2.1
* Fix SentinelConnectionPool to work in multiprocess/forked environments.

(adam)

py-cherrypy: updated to 18.1.1

v18.1.1
* :pr:1774 reverts :pr:1759 as new evidence emerged that
  the original behavior was intentional. Re-opens :issue:1758.

(adam)

Updated graphics/freetype2, www/apache24, multimedia/ffmpeg4, databases/redis

(adam)

redis: updated to 5.0.4

Redis 5.0.4

Upgrade urgency HIGH: This release fixes several Redis stability issues.

Dear Redis users, this release includes a number of fixes for bugs that may
result in Redis crashing in special conditions (not normal usage, but specific
artificial conditions), fixes to certain Redis behaviors especially around
Redis streams, and finally a set of new APIs for Redis Modules.

Specifically:
* Hyperloglog different coding errors leading to potential crashes were fixed.
* A replication bug leading to a potential crash in case of plain misuse of handshake commands was fixed.
* XCLAIM command incrementing of number of deliveries was fixed.
* LFU field management in objects was improved.
* A potential overflow in the redis-check-aof was fixed.
* A memory leak in case of API misuse was fixed.
* ZPOP* behavior when count is 0 is fixed.
* A few redis-cli --cluster bugs were fixed, plus a few improvements.
* Many other smaller bugs.

(adam)

ffmpeg4: updated to 4.1.3

version 4.1.3:
- avcodec/rscc: Check that the to be uncompressed input is large enough
- avformat/movenc: free eac3 private data only when closing the stream
- avcodec/hevcdec: Avoid only partly skiping duplicate first slices
- lavc/bmp: Avoid a heap buffer overwrite for 1bpp input.
- avcodec/mpegpicture: Check size of edge_emu_buffer
- avformat/mov: Fix potential integer overflow in entry check in mov_read_trun()
- avcodec/truemotion2: Fix integer overflow in tm2_null_res_block()
- avcodec/cbs_av1: fix range of values for Mastering Display Color Volume Metadata OBUs
- avcodec/av1_parser: don't abort parsing the first frame if extradata parsing fails

(adam)

apache24: updated to 2.4.39

Changes with Apache 2.4.39

*) mod_proxy/ssl: Cleanup per-request SSL configuration anytime a backend
  connection is recycled/reused to avoid a possible crash with some SSLProxy
  configurations in <Location> or <Proxy> context.

*) mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA failure.

*) mod_log_config: Support %{c}h for conn-hostname, %h for useragent_host

*) mod_socache_redis: Support for Redis as socache storage provider.

*) core: new configuration option 'MergeSlashes on|off' that controls handling of
  multiple, consecutive slash ('/') characters in the path component of the request URL.

*) mod_http2: when SSL renegotiation is inhibited and a 403 ErrorDocument is
  in play, the proper HTTP/2 stream reset did not trigger with H2_ERR_HTTP_1_1_REQUIRED.

*) mod_http2: new configuration directive: `H2Padding numbits` to control
  padding of HTTP/2 payload frames. 'numbits' is a number from 0-8,
  controlling the range of padding bytes added to a frame. The actual number
  added is chosen randomly per frame. This applies to HEADERS, DATA and PUSH_PROMISE
  frames equally. The default continues to be 0, e.g. no padding.

*) mod_http2: ripping out all the h2_req_engine internal features now that mod_proxy_http2
  has no more need for it. Optional functions are still declared but no longer implemented.
  While previous mod_proxy_http2 will work with this, it is recommeneded to run the matching
  versions of both modules.

*) mod_proxy_http2: changed mod_proxy_http2 implementation and fixed several bugs which
  resolve bug 63170. The proxy module does now a single h2 request on the (reused)
  connection and returns.

*) mod_http2/mod_proxy_http2: proxy_http2 checks correct master connection aborted status
  to trigger immediate shutdown of backend connections. This is now always signalled
  by mod_http2 when the the session is being released.
  proxy_http2 now only sends a PING frame to the backend when there is not already one
  in flight.

*) mod_proxy_http2: fixed an issue where a proxy_http2 handler entered an infinite
  loop when encountering certain errors on the backend connection.

*) mod_http2: Configuration directives H2Push and H2Upgrade can now be specified per
  Location/Directory, e.g. disabling PUSH for a specific set of resources.

*) mod_http2: HEAD requests to some module such as mod_cgid caused the stream to
  terminate improperly and cause a HTTP/2 PROTOCOL_ERROR.

*) http: Fix possible empty response with mod_ratelimit for HEAD requests.

*) mod_cache_socache: Avoid reallocations and be safe with outgoing data
  lifetime.

*) MPMs unix: bind the bucket number of each child to its slot number, for a
  more efficient per bucket maintenance.

*) mod_auth_digest: Fix a race condition. Authentication with valid
  credentials could be refused in case of concurrent accesses from
  different users.

*) mod_http2: enable re-use of slave connections again. Fixed slave connection
  keepalives counter.

*) mod_reqtimeout: Allow to configure (TLS-)handshake timeouts.

*) mod_proxy_wstunnel: Fix websocket proxy over UDS.

*) mod_ssl: Don't unset FIPS mode on restart unless it's forced by
  configuration (SSLFIPS on) and not active by default in OpenSSL.

(adam)