doc: Updated devel/go-i18n to 1.10.0

(minskim)

devel/go-i18n: Update to 1.10.0

Changes since 1.8.1:
- Export language.RegisterPluralFunc
- Export language.Operand
- Update to CLDR 31.0.1
- Fix panic in goi18n command
- Export language.GetPluralSpec

(minskim)

doc: Updated comms/asterisk to 11.25.3

(jnemeth)

Update to Asterisk 11.25.3.  This is a security update to fix
AST-2017-005, AST-2017-006, and AST-2017-008.  There was no release
announcement as only security patches were issued.  I just found
this update while looking to see what updates I was missing for
more recent versions of Asterisk.  The Asterisk 11.x series was
declared end-of-life on Oct. 25th, 2017, so there will not be any
more updates to this package (other then PKGREVISION bumps for
dependencies) before it gets deleted.  There is a reasonable chance
that there are unpatched vulnerabilities in this package.  Anybody
still using it should upgrade a newer version as soon as possibble.

-----  AST-2017-2005  -----

    Description  The "strictrtp" option in rtp.conf enables a feature of the
                RTP stack that learns the source address of media for a
                session and drops any packets that do not originate from
                the expected address. This option is enabled by default in
                Asterisk 11 and above.

                The "nat" and "rtp_symmetric" options for chan_sip and
                chan_pjsip respectively enable symmetric RTP support in the
                RTP stack. This uses the source address of incoming media
                as the target address of any sent media. This option is not
                enabled by default but is commonly enabled to handle
                devices behind NAT.

                A change was made to the strict RTP support in the RTP
                stack to better tolerate late media when a reinvite occurs.
                When combined with the symmetric RTP support this
                introduced an avenue where media could be hijacked. Instead
                of only learning a new address when expected the new code
                allowed a new source address to be learned at all times.

                If a flood of RTP traffic was received the strict RTP
                support would allow the new address to provide media and
                with symmetric RTP enabled outgoing traffic would be sent
                to this new address, allowing the media to be hijacked.
                Provided the attacker continued to send traffic they would
                continue to receive traffic as well.

    Resolution  The RTP stack will now only learn a new source address if it
                has been told to expect the address to change. The RTCP
                support has now also been updated to drop RTCP reports that
                are not regarding the RTP session currently in progress. The
                strict RTP learning progress has also been improved to guard
                against a flood of RTP packets attempting to take over the
                media stream.

-----  AST-2017-006  -----

    Description  The app_minivm module has an "externnotify" program
                configuration option that is executed by the MinivmNotify
                dialplan application. The application uses the caller-id
                name and number as part of a built string passed to the OS
                shell for interpretation and execution. Since the caller-id
                name and number can come from an untrusted source, a
                crafted caller-id name or number allows an arbitrary shell
                command injection.

    Resolution  Patched Asterisk's app_minivm module to use a different
                system call that passes argument strings in an array instead
                of having the OS shell determine the application parameter
                boundaries.

-----  AST-2017-008  -----

    Description  This is a follow up advisory to AST-2017-005.

                Insufficient RTCP packet validation could allow reading
                stale buffer contents and when combined with the "nat" and
                "symmetric_rtp" options allow redirecting where Asterisk
                sends the next RTCP report.

                The RTP stream qualification to learn the source address of
                media always accepted the first RTP packet as the new
                source and allowed what AST-2017-005 was mitigating. The
                intent was to qualify a series of packets before accepting
                the new source address.

    Resolution  The RTP/RTCP stack will now validate RTCP packets before
                processing them. Packets failing validation are discarded.
                RTP stream qualification now requires the intended series of
                packets from the same address without seeing packets from a
                different source address to accept a new source address.

(jnemeth)

+ asterisk15

(joerg)

doc: Added comms/asterisk15 version 15.4.1

(joerg)

Add Asterisk 15.4.1:

Asterisk is a complete PBX in software.  It provides all of the
features you would expect from a PBX and more. Asterisk does voice
over IP in three protocols, and can interoperate with almost all
standards-based telephony equipment using relatively inexpensive
hardware.

Asterisk provides Voicemail services with Directory, Call Conferencing,
Interactive Voice Response, Call Queuing. It has support for
three-way calling, caller ID services, ADSI, SIP and H.323 (as both
client and gateway).

This is a standard version.  It is scheduled to go to security
fixes only on October 3th, 2018, and EOL on October 3th, 2019.
See here for more information about Asterisk versions:
https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions

(joerg)

asterisk18 has been deleted

(jnemeth)

libaudiofile: be explicit about needing C99.

PR pkg/43947

(maya)

Deleting comms/asterisk18 (Asterisk 1.8.*) as mentioned on
pkgsrc-users@ a few weeks ago.  This package is ancient and has
been EOL for a couple of years.  It likely has numerous security
issues.  Also, the PKGNAME will conflict with the upcoming Asterisk
18.* in a couple of years times.  There were no objections.

(jnemeth)

doc: Removed comms/asterisk18

(jnemeth)

doc: Updated mail/neomutt to 20180716

(wiz)

neomutt: update to 20180716.

2018-07-16  Richard Russon  <rich@flatcap.org>
* Features
  - <check-stats> function
* Bug Fixes
  - Lots

(wiz)

mips64 is more likely not 64bit.

(maya)

doc: Updated chat/py-hangups to 0.4.5

(leot)

py-hangups: Update chat/py-hangups to 0.4.5

Changes:
0.4.5
-----
* raise minimum Python version to 3.5.3
* add support for Python 3.7
* improve markup parsing
* fix crash on event for unloaded conversion
* add compatibility with aiohttp 3

(leot)

Pullup ticket #5790 - requested by ryoon
www/firefox60-l10n: build fix

Revisions pulled up:
- www/firefox60-l10n/distinfo                                  1.2

---
  Module Name:    pkgsrc
  Committed By:  ryoon
  Date:          Thu Jul 12 12:56:56 UTC 2018

  Modified Files:
          pkgsrc/www/firefox60-l10n: distinfo

  Log Message:
  Fix PR pkg/53428. Regen distinfo with changed PKGNAME

(bsiegert)

Updated www/e2guardian to 5.1.1

(sborrill)

Add missing file from 5.1.1 upgrade

(sborrill)

e2guardian: update to 5.1.1

Note that large sections of the code has been re-written and there are
significant changes to the configuration files in this release.

The v5 is written in c++11 and so to compile it you will need gcc v5.4
or later. (or another complier that supports the full c++11).
Note that the target systems may also need an c++11 library update.

REVISED LIST and STORYBOARDING MODEL

Version 5 has a completely revised model for defining and using lists.

List definition is now separated from list application. Lists are no longer
hard-coded, but mapped to a function using a storyboard.

Filtering logic flow is simplified and made more consistent.  Requests are
analysed first and flags set (exception, grey, blocked etc) and once this
checking is complete actions are taken.  Large sections of duplicate logic
has been removed from ConnectionHandler and large sections are now
separate functions.

Storyboarding is a simple scripting language that maps lists to functions
and allows flags to be set.

This means that new lists can be added without changing the code, by adding
a new list definition and then applying it in a revised storyboard.

A different storyboard can be applied to each filtergroup, so if required,
each filtergroup can have a different logic flow.

Please read notes/V5_list_definition.pdf & notes/V5_Storyboard.pdf for
details.

TRANSPARENT HTTPS

    Detects SNI and flags whether traffic is TLS.
    Currently limited to port 443 traffic.

ICAP SERVER

    REQMOD and RESPMOD mode supported.
    See notes/icap.

DIRECT UPSTREAM ACCESS I.e. not via proxy.

    To implement globaly comment out 'proxyip =' in e2guardian.conf.

    The storyboard action setgodirect can be used within checkrequest functions
    to enable selected protocols/site/urls to godirect.
    e.g. to send all connect requests directly add
if(connect) setgodirect
to a requestchecks function.
    This can be also useful to by-pass squid for some requests (e.g. os update
    sites) when squid authentication methods are being used.

STORYBOARD TRACING

    New option 'storyboardtrace' to enable tracing output -
    for storyboard bug-fixing

READABLE THREAD_ID FOR LOGS & DEBUG

    Most debug and syslog messages are now prefixed with a thread ID as
    follows:-

    master: for master thread

    listen1_proxy:  normal proxy listener
    listen1_thttps: tranparent https listener
    listen1_icap: icap listener

    where '1' is index

    hw10: for http_worker threads where '10' is the thread number

    log: for logging thread

REVISED DEBUG STAGE 1

    The following low level debugs are no longer enabled by DGDEBUG:

    Network sockets - use NETDEBUG instead

    Regular expressions - use REDEBUG instead

    This reduces the volume of information and makes the debug
    log easier to read.

REVISED DEBUG STAGE 2

    New debuglevel option in e2guardian.conf.  Allows some debuging on
    production systems.  Currently just for ICAP and CLAMAV.  Will be
    extended to other sections of code in future releases.

HTTP/1.1

    Support for HTTP v1.1 completed - including Chunked encoding

ANTI-VIRUS PLUGINS

    Anti-virus plugins implimented for proxy, trans and ICAP

INCLUDE FILES IN e2guardianf1.conf

    Filtergroup configuration files may now include other files, enabling
    a more DRY approach to configuration. So configuration common to several
    filtergroups can be placed in a file which is included in the filtergroup
    config file.

    Syntax is same as list includes  -
    .include<full_path_to_file>

    Where single options and list defines with the same name are
    repeated only the last one read will be actioned.  This differs
    from pre-v5 versions where the first single option was actioned and any
    repeats ignored.  This allows the overwriting of single options and
    re-definion of lists in a structured way.

LIST INPUT VIA STDIN

This replaces the totalblocklist in previous versions allowing multiple
lists to be loaded via stdin.  See notes/lists_via_stdin.

OPENSSL v1.1 SUPPORT

    Will now support OpenSSL v1.1 as well as v1.0.2 or above

------------------------------
New in v4 (v4.1).

The v4 is written in c++11 and so to compile it you will need gcc v5.4
or later. (or another complier that supports the c++11 std::thread library).
Note that the target systems may also need an c++11 library update.

REVISED PROCESS MODEL

The parent children process model (which does not scale for very large numbers
of connections) is replaced with a queue/threads based model.

The main thread now only deals with set-up of the logging, listener, and worker
threads, the input (and reinput) of the lists, signals and statistics.

The treads communicate via fi-fo queues within memory and so there is no need
for ipc pipes.

A listener thread is set up for each ip/port combination. They listen for a
connection, accept it and then push the new connection socket on the
appropriate worker queue.

The worker threads pop connections from the worker queue and deal with the
connection.

When a worker wants to log a request it pushes the logging data onto the log
queue. The logging thread will pop the data from the queue, format it and
write it to the log.

Most of the above logic is in FatControler.cpp.  The logic is now much simpler
and has reduced the amount of code in FatControler by over 50%.

Socket classes have been extensively modified to remove interrupt handling (for
list reload etc) and all select calls are removed.  So there is no longer a
need to modify FD_SETSIZE.

New LOptionContainer class has been written to hold list and filter group
setings.  On gentle restart a new LOptionContainer object is created and
loaded with filter group and list settings.  Once fully read in a global
shared pointer is switched from the old list to the new, making actioning
list changes immediate an with no interruption to service.

NOTES FOR PREVIOUS VERSION  - v4.0.1

All pics support has been removed
Mail option not yet implemented.
Url cache not implimented
IP cache not implimented
Auth plugins - tested and working
Scan plugins - some tested
New e2guardian.conf options
  httpworkers
  enablessl

(sborrill)

Pullup ticket #5786

(bsiegert)

Pullup ticket #5786 - requested by taca
www/wordpress: security fix

Revisions pulled up:
- www/wordpress/Makefile                                        1.79-1.80
- www/wordpress/distinfo                                        1.64

---
  Module Name: pkgsrc
  Committed By: jperkin
  Date: Wed Jul  4 13:40:45 UTC 2018

  Modified Files:
  pkgsrc/www/wordpress: Makefile

  Log Message:
  *: Move SUBST_STAGE from post-patch to pre-configure

  Performing substitutions during post-patch breaks tools such as mkpatches,
  making it very difficult to regenerate correct patches after making changes,
  and often leading to substituted string replacements being committed.

---
  Module Name: pkgsrc
  Committed By: wen
  Date: Sat Jul  7 02:55:25 UTC 2018

  Modified Files:
  pkgsrc/www/wordpress: Makefile distinfo

  Log Message:
  Update to 4.9.7

  Upstream changes:
  WordPress 4.9.7 is now available. This is a security and maintenance release for all versions since WordPress 3.7. We strongly encourage you to update your sites immediately.

  WordPress versions 4.9.6 and earlier are affected by a media issue that could potentially allow a user with certain capabilities to attempt to delete files outside the uploads directory.

  Thank you to Slavco for reporting the original issue and Matt Barry for reporting related issues.

  Seventeen other bugs were fixed in WordPress 4.9.7. Particularly of note were:

      Taxonomy: Improve cache handling for term queries.
      Posts, Post Types: Clear post password cookie when logging out.
      Widgets: Allow basic HTML tags in sidebar descriptions on Widgets admin screen.
      Community Events Dashboard: Always show the nearest WordCamp if one is coming up, even if there are multiple Meetups happening first.
      Privacy: Make sure default privacy policy content does not cause a fatal error when flushing rewrite rules outside of the admin context.

(bsiegert)

doc: Updated cross/avr-binutils to 2.30

(mef)

Update cross/avr-binutils to 2.30

Date: Sat, 27 Jan 2018 16:33:36 +0000
  This release contains numerous bug fixes, and also the
  following new features:

  In the assembler:
      * Add support for location views in DWARF debug line information.

  In the BFD linker:
      * Add -z separate-code to generate separate code PT_LOAD segment.

    * Add "-z undefs" command line option as the inverse of the "-z defs" option.

    * Add -z globalaudit command line option to force audit libraries to be run
      for every dynamic object loaded by an executable - provided that the loader
      supports this functionality.

    * Tighten linker script grammar around file name
      specifiers to prevent the use of SORT_BY_ALIGNMENT and
      SORT_BY_INIT_PRIORITY on filenames.  These would
      previously be accepted but had no effect.

    * The EXCLUDE_FILE directive can now be placed within any
      SORT_* directive within input section lists.

  In the GOLD linker:
    * Add support for .MIPS.options sections (MIPS only).

    * Add support for compound relocations (MIPS only).

    * Add --emit-stub-syms, --no-tls-optimize, --tls-get-addr-optimize
      options (PowerPC only).

    * Add -z text-unlikely-segment option.

    * Add plugin support for adding new input files
      (LDPT_REGISTER_NEW_INPUT_HOOK).

  In the utilities:
    * Add --debug-dump=links option to readelf and
      --dwarf=links option to objdump which displays the
      contents of any .gnu_debuglink or .gnu_debugaltlink
      sections.

    * Add a --debug-dump=follow-links option to readelf and a
      --dwarf=follow-links option to objdump which causes  indirect
      links into separate debug info files to be followed when
      dumping other DWARF sections.

(mef)

Updated devel/p5-App-CLI to 0.50

(wen)

Update to 0.50

Upstream changes:
0.50 Mon May 14 19:41:04 CEST 2018

  * improve 'brief_usage()' output (patch from Ildar Shaimordanov)

(wen)

php

(maya)

php*: disable global regs on i386.
Fixes PR pkg/53222 that resurfaced

Remove the previous workaround to add GCC_REQD, which isn't sufficient
any more, possibly due to enabling ssp/fortify?

XXX bumping PKGREVISION might not be sufficient, for the same reason the
GCC_REQD had to be moved to Makefile.php, it affects modules too.

(maya)

mit-krb5: mmap -Werror=incompatible-pointer-types fixes.

(jperkin)

Updated ham/gnuradio-core (and more) to 3.7.13.3

(mef)

Update ham/gnuradio-* from 3.7.11 to 3.7.13.3

## [3.7.13.3] - 2018-06-13

### Fixed
#### Project Scope
- For non-C++11 compilers, the new cstdint include doesn't work out; conditionalized it.

## [3.7.13.2] - 2018-05-31

### Fixed
#### Project Scope
- Actually bumped version in CMakeLists.txt to 3.7.13.2; the 3.7.13.1 tag was tagged off-branch; maintainer failure to simultaneously push a commit that raises the internal version number to 3.7.14.0: this had to be reverted ASAP.

## [3.7.13.1] - 2018-05-31

### Fixed
#### Project Scope
- Actually bumped version in CMakeLists.txt

## [3.7.13.0] - 2018-05-31

### Fixed
#### Project Scope
- `boost::posix_time::[milli]second` takes integer numbers, and we now at least cast the floats to integers, as Boost 1.67 forced us to realize we're (incorrectly) using floating point her
- CMake: using regex to match compiler against "Clang" now enables correct build on OS X
#### GRC
- Fixed GRC bug which broke WX and Qt (by altering the template code), in multiple (less than awesome) steps
#### gr-blocks
- `float_array_to_int`: int32 limits were wrongly hardcoded.
- Fixed the undefined behaviour happening in `float_to_complex` when accessing the second input_items element in the single-input case

## [3.7.12.0] - 2018-04-01

### Software Engineering
- Changed Changelog format
- Introducing Semantic Versioning
- Change of development model: Rather than merging bugfixes to maint, merging maint to master, and next, if applicable, we'll be moving forward more in a typical management model: Development happens on master, and bugfixes are cherrypicked onto the maint-${RELEASE} branch. More info: http://lists.gnu.org/archive/html/discuss-gnuradio/2018-02/msg00133.html
- First attempt at having a .clang-format file to improve code contribution style quality. This is Work In Progress.

### Fixed
#### Project Scope
- Buildability on systems where custom CMake command would try to find "" (empty string) as executable
- Buildable with C++11 compilers (though deprecation warning-rich, due to `unique_ptr`)
- several previously improperly handled include directories now actually included in individual lib/CMakeLists
- Unit test/QA now parallelizable
- Logger works with log4cpp <= 1.1.2 both in and out of tree
- Python linkage under MinGW64
- Documentation Directory now uniformly "docs/" (instead of sometimes "doc/")
- `log` vs `logf` performance bugs
- on-time `pmt::mp("string")` calls (instead of cached PMTs) performance bug
- Doxygen build now reproducible
#### GRC
- Dialogs' parent windows
- Embedded Python Blocks now work in hierarchical GRC flow graphs
#### gnuradio-runtime
- `random.h`: Uniform integer Generation depended on Boost version > min version
- `random.h`: time-dependency when seeding with `0` replaced with actual standard seed
- block startup now synchronized via barrier
- New tag propagation policy "custom" for own implementation
- `get_tags_in_range` used `v.resize(0)` to clear vectors, which lead to unnecessary memory reallocations
- `logger_ptr` now always a pointer, no matter whether logging is enabled; fixes heap corruption bug
- `buffer[_reader]_sptr` superfluous grab/release performance bug
- BSD threading and shared mem compatibility
- PMT: `equal()` comparison
#### gr-utils
- Sorted files in `gr_modtool` makexml processing, leading to improved reproducibility of builds
#### gr-audio
- OS X: memcpy bug
- OS X: debug mode
- Non-Linux ALSA compatibibilty
#### gr-analog
- `fmdet_cf` now has GRC file
- `fastnoise_source`: non-threadsafe `libc` `rand()` replaced by XOROSHIRO128+
#### gr-blocks
- `simple_copy` Ctrlport example
- Metadata sink/source not closing file on `close()`
- `multiply_matrix` formerly used "magic int" value where its API expected enum (and that int wasn't covered)
- TCP connection ASIO bug
- `tags_strobe`: superfluous tags addition
- `vector_sink`: multithreading hazards on `data` access
- `tuntap_pdu`: MTU-sized IP packet reception
- `socket_pdu`: Garbage Collect closed TCP connections
#### gr-channels
- IQ imbalance block formula now mathematically correct now mathematically correct
- `selective_fading_model`: proper scaling of path length
#### gr-digital
- `additive_scrambler_bb`: tag triggered reset
- `stream_to_tagged_stream`: tag offset after `unlock()`
- `blks2/packet.py`: Flushing for small packets
- `interpolating_resampler`: GCC 4.0 compile error
- `constellation`: 16QAM demapper was wrong for one constellation point
- `chunks_to_symbols`: mutex-guard LUT against modification during use
- MSVC compatibility throug `and` -> `&&` etc
- `crc32_bb`: handle unpacked bytes correctly
- `ofdm_carrier_allocator`: catching wrong allocations instead of crashing
#### gr-dtv
- All examples now are installed
- DVB-T2: Removed L1 post scrambling in spec v1.1.1 mode
#### gr-fcd
- Building on non-Linux systems
- Extended symbol bug in Reed-Solomon encoder
- DVB-T Cell identifier
#### gr-fcd
- Building on non-Linux systems
#### gr-fec
- `channel_construction.py`: return int frozen bit output
- `GSL_LDFLAGS` propagation
- `polar_decoder` used to be flaky
#### gr-fft
- locking of fftw wisdom
- `window.cc`: removed NaN due to FP math
- compilation under MinGW
- `logpwrfft.py` reference scaling integer division bug
#### gr-filter
- Simpson's rule code removed in favor of GSL call
#### gr-qtgui
- Time sink: Segfault with tag trigger
#### gr-uhd
- Antenna selection in UHD apps
- `uhd_fft` scalar gain-capability
- Device selection for multi-device operations in UHD apps
- TX streamer creation
#### gr-zeromq
- Multi-part messages reception

### Added
#### Project Scope
- Ninja (https://ninja-build.org) now a supported build system
#### gnuradio-runtime
- Python can now get `gr.WORK_CALLED_PRODUCE` and `gr.DONE`
#### gr-utils
- `gr_modtool`: Autocompletion, line editing
- `gr_modtool`: `copyrightholder` option
#### GRC
- "Create Duplicate"
- "Save a copy"
- BokehGUI
#### gr-blocks
- New `tag_share` block: take tags from one two input streams to one output stream
- `tag_gate`: tag filtering
- `file_source`: configurable `file_begin` stream tag
- `moving_average`: Vector mode (with element-wise MA)
- `plateau_detector`: threshold get/set
#### gr-digital
- `costas_loop_cc`: Optional loop variable outputs
- New `correlate_access_code_tag` block
- `glfsr` exposed through Python
#### gr-dtv
- 256QAM mode for ITU-T J.83B transmitter
#### gr-fec
- negative Polynomials in `cc_encoder`
#### gr-filter
- `symbol_sync_{cc|ff}`
#### gr-uhd
- `uhd_app.py`: selectable time/clock sources
- make `recv()` call's timeout parameterizable
- message-based RX tuning through sink, TX through source

### Changed
#### Project Scope
- VOLK version requirement: 1.4.0
- Minimal required SWIG version now 2.0.4
- GSL optional dependency
- Threw out completely unused `gr_??int` types
- Doxygen build no longer contains timestamps
- Doxygen build now reproducible
- Though factually before, now officially include ZeroMQ and Sphinx as optional dependencies in docs
#### gnuradio-runtime
- Python gateway allows variable number of ports
#### gr-utils
- `gr_modtool`: Block template now uses `numpy.float32` instead of float. 32bit float is actually the default GNU Radio type.e.
#### gr-blocks
- `vector_sink` can preallocate memory for desired amount of items
#### gr-digital
- `header_format_default` now sps>1-capable
- `correlate_acces_code` uses `GR_LOG`
#### gr-uhd
- `uhd_fft`: respect `lo_offset` in `set_bandwidth`
- `usrp_source`: freq tag now actually reflects last set frequency, even on multiple channels
#### gr-qtgui
- Labels: now with 98.121212388% improved floating point formatting
- Time Sink: Stem plot option exposed

### Deprecated
#### gnuradio-runtime
- `gr::sys_pri`

(mef)

(ham/gnuradio-*) removing PKGREVISION for updating 3.7.11 to 3.7.13.3

(mef)

Adapt for emacs26. version nb1 packaged, but runtime error for make-face

(mef)

Updated www/drupal8 to 8.5.5

(wen)

Update to 8.5.5

Upstream changes:

Release notes

This is a patch release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8.

This release only contains bug fixes, along with documentation and testing improvements. Translators should take note of a minor string change since the last release.
Known issues

    View with user/% path breaks login/logout on 8.5.x - a regression from 8.4.x

    Important: If you have not already upgraded to 8.5.0, read the Drupal 8.5.0 release notes before upgrading to 8.5.5.

Search the issue queue for all known issues.
Changes since 8.5.4:

    #2921661 by heddn, maxocub, alexpott, phenaproxima, Jo Fitzgerald, badmetevils, quietone: Add support to migrate multilingual revisions
    #2977945 by awm: typo in test_node_revision_links views yml file
    Revert "Issue #2971338 by Jo Fitzgerald, quietone, joachim: MigrationLookupTest::testMultipleSourceIds() uses wrong class for mocking"
    #2971338 by Jo Fitzgerald, quietone, joachim: MigrationLookupTest::testMultipleSourceIds() uses wrong class for mocking
    #2887490 by michaellenahan, cilefen, rOprOprOp, catch: Activity Tracker cannot be enabled if there are unpublished nodes
    #2982042 by progga: UUID component's composer.json has wrong description
    #2860760 by Jo Fitzgerald, heddn, quietone, alexpott: Match setup() functionality of MigrateFileTest with MigratePrivateFileTest
    #2979813 by Wim Leers, TwoD: Add TwoD as maintainer for the editor.module component
    #2581557 by dawehner, mxh, xjm, sorabh.v6, JeroenT: Add ltrim($path, '/') in drupalGet method
    #2635046 by neclimdul, dawehner, alexpott: run-test.sh doesn't work in directories with spaces
    #2950158 by Vidushi Mehta, ankitjain28may, Shiva Srikanth T, ckrina, markconroy, Eli-T: Choose policy for defining font-weight on Umami theme
    #2875679 by mondrake, daffie: BasicSyntaxTest::testConcatFields fails with contrib driver
    #2933413 by Graber, alexpott, joelpittet, chanderbhushan, jchand: Improve test coverage of using bulk actions when the view has an exposed form using AJAX
    #2978596 by visshu007, Chi: views_add_contextual_links() references to non existent views_preprocess_page() function
    #2977175 by borisson_, PieterJanPut, tstoeckler, msankhala: DataDefinition::setConstraints() should be on DataDefinitionInterface
    #2822611 by Mile23, Wim Leers, alexpott, Berdir, catch, dawehner, xjm, tstoeckler, borisson_: Document why UserInterface + FileInterface + MenuLinkContentInterface + … extend \Drupal\Core\Entity\ContentEntityInterface
    #2969598 by msankhala, joachim: badly formatted sample code in docs for Select::orderBy()
    Revert "Issue #2886609 by quietone, Jo Fitzgerald, jhodgdon, masipila, heddn, Gábor Hojtsy, mikeryan: Migrate D6 i18n loacalized translations of taxonomy terms"
    #2975751 by msankhala, leolando.tan, joachim, claudiu.cristea: incorrect @return for Tables::getTableMapping()
    #2927723 by longwave, artreaktor, chiranjeeb2410, ankitjain28may, cilefen, dawehner: The URL "/ " with trailing space is not getting recognized as
    #2737773 by antongp, wturrell, pcambra, cilefen, Darvanen, cwells, manningpete, alexpott: Proper way to install Drupal, missing vendor folders, example.gitignore
    #2943107 by mherchel, NicholasS, jordana, finnsky, tomphippen, smaz, markconroy, andrewmacpherson, kjay: Umami support for Internet Explorer 11
    #2979166 by RajeevK, lomasr: Wrong documentation on SiteCacheContext class
    #2749901 by MaskyS, kleog, priya.chat, harsha012, rakesh.gectcr, shobhit_juyal, snehi, SenthilMohith, neerajpandey, gawaksh, thompsizzle, ecrown, mohit1604, andrewmacpherson, surbz, rahulrasgon, riddhi.addweb: Add README.txt to Bartik theme
    #2886609 by quietone, Jo Fitzgerald, jhodgdon, masipila, heddn, Gábor Hojtsy, mikeryan: Migrate D6 i18n loacalized translations of taxonomy terms
    #2772251 by msankhala, markpavlitski, joachim: description for EntityForm::actions() could use rewording
    #2978848 by claudiu.cristea, amateescu: EntityReferenceFieldItemList::referencedEntities() doesn't work for computed fields
    #2073467 by maxocub, Jo Fitzgerald, pobster, masipila, plach, heddn, phenaproxima, catch: Migrate Drupal 7 Entity Translation settings to Drupal 8
    #2877828 by msankhala, joachim: FormInterface::getFormId() should state restrictions on the returned ID string
    #2855054 by alexpott, LoMo, wesleydv, Artusamak, gawaksh, xjm: User cancel link doesn't redirect to the homepage
    #2936821 by msankhala, joachim, lomasr, marxjohnson: unclear docs in MigrateProcessInterface
    #2951715 by dravenk, marvil07, rakesh.gectcr, davidsonjames, heddn, Jo Fitzgerald, quietone, alexpott, maxocub: Log message if static_map plugin skips the row
    #2932777 by mondrake, borisson_, alexpott, daffie: Risky count() in SQLite Statement
    #2951163 by nkoporec, Parvateesam, joachim: CachePluginBase::cacheGet()/::cacheSet() doesn't document @params or @return

(wen)

Updated www/firefox to 61.0.1nb2

(ryoon)

Bump PKGREVISION. Change ffmpeg to 4 from 3

(ryoon)

Updated lang/rust to 1.27.1

(ryoon)

Update to 1.27.1

Changelog:
Version 1.27.1 (2018-07-10)
Security Notes
    rustdoc would execute plugins in the /tmp/rustdoc/plugins directory when running, which enabled executing code as some other user on a given machine. This release fixes that vulnerability; you can read more about this on the blog.

    Thank you to Red Hat for responsibily disclosing this vulnerability to us.

Compatibility Notes
    The borrow checker was fixed to avoid an additional potential unsoundness when using match ergonomics: #51415, #49534

(ryoon)

Updated databases/p5-SQL-Abstract to 1.86

(wen)

Update to 1.86

Upstream changes:
1.86 - 2018-07-09
    - Remove obsolete documentation about arrayrefref as the $source
      argument for ->select (removed in version 1.74)
    - Factor out the field list part of SELECT for subclassability (GH#13)
    - Do not replace literal '0' with empty string in WHERE clauses (GH#14)

(wen)

Updated graphics/gimp to 2.10.4

(ryoon)

Update to 2.10.4

Changelog:
Overview of Changes from GIMP 2.10.2 to GIMP 2.10.4
===================================================

Core:

  - Remove gimp_display_shell_draw_background() and all clipping hacks
    for drawing the canvas background. This optimizes away one entire
    step of drawing of image size, for each expose.
  - Font loading does not block startup anymore. Only consequence is
    that the Text tool may not be usable immediately if fonts are not
    fully loaded yet (and will output an appropriate error if you do
    so). All non-text related activities can be performed right away.
  - Change of the URL from bugzilla to gitlab where appropriate.
  - New tool option manager to better keep track of user context and
    paint options in a consistent manner.

User Interface:

  - The Dashboard dockable dialog now has a 'Memory' group that shows
    memory-usage information: the currently used memory size, the
    available physical memory size, and the total physical memory
    size.  It can also show the tile-cache size, for comparison
    against the other memory stats. Note that the upper-bound of the
    meter is the physical memory size, so the memory usage may be over
    100% when GIMP uses the swap.
  - The Dashboard dockable dialog now has "read" and "written" fields in
    the dashboard swap group, which report the total amount of data
    read-from/written-to the tile swap, respetively. Additionally, the
    swap busy indicator (used as the meter's LED) has been improved,
    so that it's active whenever data has been read-from/written-to
    the swap during the last sampling interval, rather than at the
    point of sampling.
  - Fonts can now be tagged. The user interface is the same as for
    brushes, patterns etc.
  - Some icons fixed: larger spacing between broken chains and
    gimp-tool-ellipse-select made symmetrical.

Usability:

  - When a plug-in cannot be applied to an image because of mismatch
    in image types (e.g. layer has no alpha or image is greyscale),
    GIMP now displays a message listing supported image types for this
    plug-in.

Tools:

  - The Measurement tool now has an "Auto straighten" option allowing
    to rotate the active drawable (layer, channel…) so that the
    measurement line is used as horizon. As other transform tools, the
    feature will work on linked drawables as well.
  - The Smudge tool now paints correctly on images with a color
    profile other than the GIMP's built-in one.

Build:

  - Installer: set compatibility options to run Python plugins in
    HiDPI-aware mode.
  - Put back compatibility DLLs for really old plugins.
  - Install binary tool `gimp-test-clipboard` on the system to allow
    people to help us debug clipboard bugs.
  - --enable-bundled-mypaint-brushes renamed
    --enable-relocatable-bundle and also make WMF fonts looked up on
    the runtime prefix of GIMP (instead of the build-time path) when
    this build option was set.

Plug-ins:

  - gimptool-2.0 binary now accepts source files with non-standard
    extensions if it can try to guess appropriate language from the
    compiler being used. It will also properly quote arguments for
    shell usage.
  - Run explicitly Python 2 as Python plug-in interpreter to prevent
    breakage on systems where Python 3 is the default.
  - raw_input()'s argument in Python console is now optional, and
    input() support has been added.

File Formats:

  - The PSD loader now provides an option to load "merged",
    pre-composited version of the images that becomes available when a
    PSD file was saved with "Maximize Compatibility" option enabled in
    Photoshop. This is useful when loading PSD files that use features
    that GIMP doesn't currently support, and therefore can't render
    correctly, such as adjustment layers. When loading the merged
    image version, we avoid loading certain additional data from the
    file, such as channels, paths, and guides, while still loading
    metadata. This option is currently exposed as an additional file
    type ("Photoshop image (merged)"), which has to be explicitly
    selected from the file-type list when opening the image.
  - Embedding GIMP's built-in sRGB color profile to exported files is
    now optional. The default choice can be set in the Preferences
    dialog.

Translations:

  - Updated translations: Catalan, Czech, Danish, Dutch, Finnish,
    Greek, Hungarian, Italian, Latvian, Polish, Romanian, Russian,
    Spanish, Swedish, Ukrainian.

(ryoon)

Updated graphics/gegl to 0.4.4

(ryoon)

Update to 0.4.4

* Fix gcut conflict, PR pkg/53236

Changelog:
GEGL-0.4.4 2018-06-02

Core

Point filters with need for format conversion of input are now
parallel. Added swap-reading, swap-writing, swap-read-total and
swap-write-total properties to GeglStats.

Buffer

Trim tile-cache when shrinking. Add reading locks to tiles further
improving concurrent access tolerance of GeglBuffer.

Operations

threshold: operating format changed from linear to perceptual
unsharp-mask: add rename standard-deviation and scale properties to
Radius and Amount, add Threshold property. recursive-transform now
supports applying multiple transformations simultanously. Fix integer
overflow due to logic error in pixelize. new operation: gegl:abs which
negates negative values. new operation in workshop:
selective-hye-saturation.

Contributors

Alan Mortensen, Alexandre Prokoudine, Daniel Korostil, Debarshi Ray,
Dimitris Spingos (Δημήτρης Σπίγγος), Ell, Marco Ciampa, Michael
Schumacher, Miroslav Talasek, orbea, Øyvind Kolås, Øyvind "pippin"
Kolås, Piotr Drąg, Rūdolfs Mazurs, and Tobias.

(ryoon)

Updated graphics/babl to 0.1.52

(ryoon)

Update to 0.1.52

Changelog:
2018-06-02 babl-0.1.52
Concurrency fixes and fixes to handling of 0/1 entry palettes, do not
pre-equalize XYZ conversion matrices for sRGB, internal clean-ups, pre-define
ACES2065-1 and ACEScg BablSpaces, add R~G~B~ set of spaces, which for all
BablSpaces mean use sRGB TRC.

(ryoon)

Updated security/gnupg2 to 2.2.9

(ryoon)

Update to 2.2.9

Changelog:
Noteworthy changes in version 2.2.9 (2018-07-12)
------------------------------------------------

  * dirmngr: Fix recursive resolver mode and other bugs in the libdns
    code.  [#3374,#3803,#3610]

  * dirmngr: When using libgpg-error 1.32 or later a GnuPG build with
    NTBTLS support (e.g. the standard Windows installer) does not
    anymore block for dozens of seconds before returning data.

  * gpg: Fix bug in --show-keys which actually imported revocation
    certificates.  [#4017]

  * gpg: Ignore too long user-ID and comment packets.  [#4022]

  * gpg: Fix crash due to bad German translation.  Improved printf
    format compile time check.

  * gpg: Handle missing ISSUER sub packet gracefully in the presence of
    the new ISSUER_FPR.  [#4046]

  * gpg: Allow decryption using several passphrases in most cases.
    [#3795,#4050]

  * gpg: Command --show-keys now enables the list options
    show-unusable-uids, show-unusable-subkeys, show-notations and
    show-policy-urls by default.

  * gpg: Command --show-keys now prints revocation certificates. [#4018]

  * gpg: Add revocation reason to the "rev" and "rvs" records of the
    option --with-colons.  [#1173]

  * gpg: Export option export-clean does now remove certain expired
    subkeys; export-minimal removes all expired subkeys.  [#3622]

  * gpg: New "usage" property for the drop-subkey filters.  [#4019]

  Release-info: https://dev.gnupg.org/T4036

  See-also: gnupg-announce/2018q3/000427.html

(ryoon)

Updated mail/p5-Mail-Mbox-MessageParser to 1.5111

(wen)

Update to 1.5111

Upstream changes:
Version 1.5111:
- Ensure that temp file is created in temp dir
- Fix Makefile.PL warning
- Fix deleting of inc during release process
- Better fix for AutomatedTester warning

Version 1.5110:
- Updating META.yml

Version 1.5109:
- Switch to File::Slurper

Version 1.5108:
- Trying once again to fix the compile test on windows

Version 1.5107:
- Check in standard tests, including one that skips the compile check on Windows

Version 1.5106:
- Add standard tests
- Detect mailboxes that contain a mix of newline types. Complain about it, but
  also allow the force option to continue processing. Thanks to Pali Roh叩r
  <pali.rohar@gmail.com> for the bug report.
- Avoid OO interface to File::Temp, which in some versions and on some operating
  systems, deletes the file when it is closed. Thanks to Paul Howarth
  <paul@city-fan.org> for the bug report.
  https://rt.cpan.org/Public/Bug/Display.html?id=103835
- Fix compatibility issue with newer versions of perl, which remove "." from
  @INC. https://rt.cpan.org/Ticket/Display.html?id=121466

(wen)

Recursive revbumo from print/qpdf

(ryoon)

Updated print/qpdf to 8.1.0

(ryoon)

Update to 8.1.0

Changelog:
8.1.0: June 23, 2018

        Usability Improvements

            When splitting files, qpdf detects fonts and images that the document metadata claims are referenced from a page but are not actually referenced and omits them from the output file. This change can cause a significant reduction in the size of split PDF files for files created by some software packages. Prior versions of qpdf would believe the document metadata and sometimes include all the images from all the other pages even though the pages were no longer present. In the unlikely event that the old behavior should be desired, it can be enabled by specifying --preserve-unreferenced-resources. For additional details, please see Section 3.6, ���Advanced Transformation Options���.

            When merging multiple PDF files, qpdf no longer leaves all the files open. This makes it possible to merge numbers of files that may exceed the operating system's limit for the maximum number of open files.

            The --rotate option's syntax has been extended to make the page range optional. If you specify --rotate=angle without specifying a page range, the rotation will be applied to all pages. This can be especially useful for adjusting a PDF created from a multi-page document that was scanned upside down.

            When merging multiple files, the --verbose option now prints information about each file as it operates on that file.

            When the --progress option is specified, qpdf will print a running indicator of its best guess at how far through the writing process it is. Note that, as with all progress meters, it's an approximation. This option is implemented in a way that makes it useful for software that uses the qpdf library; see API Enhancements below.

        Bug Fixes

            Properly decrypt files that use revision 3 of the standard security handler but use 40 bit keys (even though revision 3 supports 128-bit keys).

            Limit depth of nested data structures to prevent crashes from certain types of malformed (malicious) PDFs.

            In ���newline before endstream��� mode, insert the required extra newline before the endstream at the end of object streams. This one case was previously omitted.

        API Enhancements

            The first round of higher level ���helper��� interfaces has been introduced. These are designed to provide a more convenient way of interacting with certain document features than using QPDFObjectHandle directly. For details on helpers, see Section 6.3, ���Helper Classes���. Specific additional interfaces are described below.

            Add two new document helper classes: QPDFPageDocumentHelper for working with pages, and QPDFAcroFormDocumentHelper for working with interactive forms. No old methods have been removed, but QPDFPageDocumentHelper is now the preferred way to perform operations on pages rather than calling the old methods in QPDFObjectHandle and QPDF directly. Comments in the header files direct you to the new interfaces. Please see the header files and ChangeLog for additional details.

            Add three new object helper class: QPDFPageObjectHelper for pages, QPDFFormFieldObjectHelper for interactive form fields, and QPDFAnnotationObjectHelper for annotations. All three classes are fairly sparse at the moment, but they have some useful, basic functionality.

            A new example program examples/pdf-set-form-values.cc has been added that illustrates use of the new document and object helpers.

            The method QPDFWriter::registerProgressReporter has been added. This method allows you to register a function that is called by QPDFWriter to update your idea of the percentage it thinks it is through writing its output. Client programs can use this to implement reasonably accurate progress meters. The qpdf command line tool uses this to implement its --progress option.

            New methods QPDFObjectHandle::newUnicodeString and QPDFObject::unparseBinary have been added to allow for more convenient creation of strings that are explicitly encoded using big-endian UTF-16. This is useful for creating strings that appear outside of content streams, such as labels, form fields, outlines, document metadata, etc.

            A new class QPDFObjectHandle::Rectangle has been added to ease working with PDF rectangles, which are just arrays of four numeric values.

(ryoon)

redis: force -march=i586 on x86_32 to allow 8 byte atomics
(netbsd defaults to i486 and doesn't provide magic to hide this)

Fixes PR pkg/53451

(maya)

Fix PR pkg/53429. Use libstdc++ from pkgsrc gcc61-libs to fix runtime error
BUmp PKGREVISION

(ryoon)

doc: Added lang/R-codetools version 0.2.15

(minskim)

lang/Makefile: Add R-codetools

(minskim)

lang/R-codetools: Import version 0.2.15

Code analysis tools for R.

(minskim)

doc: Updated www/surfraw to 2.3.0nb1

(wiz)

surfraw: make perl a runtime dependency, scripts use it.

Remove checksum for non-existent patch from distinfo while here.

Bump PKGREVISION.

(wiz)

Make syncthing build more reliable.

- use $GO as the path to the go tool
- set a cache directory so that the build does not try to cache stuff
  under $HOME.

Prodded by wiz@, thanks for reminding me!

(bsiegert)

dnscrypt-proxy2

(bsiegert)

Add a package for dnscrypt-proxy2.

PR pkg/53384 by Nia Alarie.

A flexible DNS proxy, with support for modern encrypted DNS protocols
such as DNSCrypt v2 and DNS-over-HTTP/2.

(bsiegert)

(Editors/emacs26) Default options adjustment, drop ImageMagick and set gtk3.

1. ImageMagick is listed as buildlink3, but configure stage says no.
  Drop from the default options for now. (need py-wand and ImageMagick 6 ?)
2. gtk/gtk3 logic was not the same as emacs-25.x. Default was gtk2.
  Now default is gtk3 (the same as emacs-25). Option gtk and gtk2
  have the same effect now.

Thanks tsutsui@ for information

(mef)

py-characteristic: updated HOMEPAGE, added USE_LANGUAGES

(adam)

doc: Updated textproc/p5-Search-Xapian to 1.2.25.1

(schmonz)

Update to 1.2.25.1.

- Skip testcase t/parser.t if we're using xapian-core < 1.2.21 which
  doesn't support character '!' in the start of a range.  Reported by
  melmothx on #xapian.
- Add compatibility with Xapian git master.

(schmonz)

doc: Added www/go-webhooks version 3.12.0

(minskim)

www/Makefile: Add go-webhooks

(minskim)

www/go-webhooks: Import version 3.12.0

Webhooks allows for easy receiving and parsing of GitHub, Bitbucket
and GitLab Webhook Events. It only accepts json payloads.

(minskim)

py-py: add missing build dependency on py-setuptools_scm

Without it, I got:
No local packages or working download links found for setuptools-scm

(wiz)

pullups 5783 5784 5787 5788 5789

(spz)

Pullup ticket #5789 - requested by taca
net/bind99: security update

Revisions pulled up:
- net/bind99/Makefile                                          1.74
- net/bind99/distinfo                                          1.52
- net/bind99/patches/patch-bin_tests_system_metadata_tests.sh  1.2

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: taca
  Date: Sat Jul 14 03:56:28 UTC 2018

  Modified Files:
  pkgsrc/net/bind99: Makefile distinfo
  pkgsrc/net/bind99/patches: patch-bin_tests_system_metadata_tests.sh

  Log Message:
  net/bind99: update to 9.9.13

  This release contains security fix for CVE-2018-5738 and several bug fixes.
  For more detail, please refer CHANGES file.

  To generate a diff of this commit:
  cvs rdiff -u -r1.73 -r1.74 pkgsrc/net/bind99/Makefile
  cvs rdiff -u -r1.51 -r1.52 pkgsrc/net/bind99/distinfo
  cvs rdiff -u -r1.1 -r1.2 \
      pkgsrc/net/bind99/patches/patch-bin_tests_system_metadata_tests.sh

(spz)

Updated mail/dovecot2, mail/dovecot2-pigeonhole

(adam)

dovecot2-pigeonhole: updated to 0.5.2

v0.5.2:
+ Implement plugin for the a vendor-defined IMAP capability called
  "FILTER=SIEVE". It adds the ability to manually invoke Sieve filtering
  in IMAP. More information can be found in
  doc/plugins/imap_filter_sieve.txt.
- The Sieve addess test caused an assertion panic for invalid addresses
  with UTF-8 codepoints in the localpart. Fixed by properly detecting
  invalid addresses with UTF-8 codepoints in the localpart and skipping
  these like other invalid addresses while iterating addresses for the
  address test.
- Make the length of the subject header for the vacation response
  configurable and enforce the limit in UTF-8 codepoints rather than
  bytes. The subject header for a vacation response was statically
  truncated to 256 bytes, which is too limited for multi-byte UTF-8
  characters.
- Sieve editheader extension: Fix assertion panic occurring when it is
  used to manipulate a message header with a very large header field.
- Properly abort execution of the sieve_discard script upon error.
  Before, the LDA Sieve plugin attempted to execute the sieve_discard
  script when an error occurs. This can lead to the message being lost.
- Fix the interaction between quota and the sieve_discard script. When
  quota was used together with a sieve_discard script, the message
  delivery did not bounce when the quota was exceeded.

(adam)

dovecot2: updated to 2.3.2.1

v2.3.2 still had a few unexpected bugs:
- SSL/TLS servers may have crashed during client disconnection
- lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
  sometimes assert-crashed.
- v2.3.2: "make check" may have crashed with 32bit systems

v2.3.2 is mainly a bugfix release. It contains all the changes in v2.2.36, as well as a bunch of other fixes (mainly for v2.3-only bugs). Binary packages are already in https://repo.dovecot.org/
* old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE while
  opening /proc/self/io. This may still cause security problems if the
  process is ptrace()d at the same time. Instead, open it while still
  running as root.
+ doveadm: Added mailbox cache decision&remove commands. See
  doveadm-mailbox(1) man page for details.
+ doveadm: Added rebuild attachments command for rebuilding
  $HasAttachment or $HasNoAttachment flags for matching mails. See
  doveadm-rebuild(1) man page for details.
+ cassandra: Use fallback_consistency on more types of errors
+ lmtp proxy: Support outgoing SSL/TLS connections
+ lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
+ submission: Add support for rawlog_dir
+ submission: Add submission_client_workarounds setting.
+ lua auth: Add password_verify() function and additional fields in
  auth request.
- doveadm-server: TCP connections are hanging when there is a lot of
  network output. This especially caused hangs in dsync-replication.
- Using multiple type=shared mdbox namespaces crashed
- mail_fsync setting was ignored. It was always set to "optimized".
- lua auth: Fix potential crash at deinit
- SSL/TLS servers may have crashed if client disconnected during
  handshake.
- SSL/TLS servers: Don't send extraneous certificates to client when
  alt certs are used.
- lda, lmtp: Return-Path header without '<' may have assert-crashed.
- lda, lmtp: Unencoded UTF-8 in email address headers may assert-crash
- lda: -f parameter didn't allow empty/null/domainless address
- lmtp, submission: Message size limit was hardcoded to 40 MB.
  Exceeding it caused the connection to get dropped during transfer.
- lmtp: Fix potential crash when delivery fails at DATA stage
- lmtp: login_greeting setting was ignored
- Fix to work with OpenSSL v1.0.2f
- systemd unit restrictions were too strict by default
- Fix potential crashes when a lot of log output was produced
- SMTP client may have assert-crashed when sending mail
- IMAP COMPRESS: Send "end of compression" marker when disconnecting.
- cassandra: Fix consistency=quorum to work
- dsync: Lock file generation failed if home directory didn't exist
- Snippet generation for HTML mails didn't ignore &entities inside
  blockquotes, producing strange looking snippets.
- imapc: Fix assert-crash if getting disconnected and after
  reconnection all mails in the selected mailbox are gone.
- pop3c: Handle unexpected server disconnections without assert-crash
- fts: Fixes to indexing mails via virtual mailboxes.
- fts: If mails contained NUL characters, the text around it wasn't
  indexed.
- Obsolete dovecot.index.cache offsets were sometimes used. Trying to
  fetch a field that was just added to cache file may not have always
  found it.

(adam)

Updated devel/py-dash, net/py-ncclient

(adam)

py-ncclient: updated to 0.6.0

0.6.0:
Re-enabled Python 3.7 by changing "async" to "async_mode" in several locations

(adam)

py-dash: updated to 4.6.0

v4.6.0:
Improve performance of the following functions for large datasets:
duplicates
sorted_uniq
sorted_uniq_by
union
union_by
union_with
uniq
uniq_by
uniq_with
xor
xor_by
xor_with

(adam)

Updated devel/talloc, www/py-idna_ssl

(adam)

py-idna_ssl: updated to 1.1.0

v1.1.0:
Merge pull request 11 from aio-libs/pyup-update-pytest-3.6.2-to-3.6.3
Update pytest to 3.6.3

(adam)

talloc: updated to 2.1.14

2.1.14:
Bug fixes.

(adam)

inkscape-0.92.3

(bsiegert)

Updated multimedia/ffmpeg3, databases/py-bsddb3

(adam)

py-bsddb3: updated to 6.2.6

6.2.6:
* Correctly detect Berkeley DB when installed via Homebrew on Mac OS X.
* Python 3.6 and 3.7 are explicitly supported.

(adam)