py-argcomplete: updated to 1.12.2

Changes for v1.12.2
- Update importlib-metadata dependency pin
- Add change log project URL
- Replace Travis CI with GitHub Actions

(adam)

Updated devel/py-xopen, www/py-google-api-python-client

(adam)

py-google-api-python-client: updated to 1.12.8

1.12.8

Documentation
add httplib2 authorization to thread_safety

1.12.7

Documentation
Update Webmasters API sample

1.12.6

Documentation
Change error parsing to check for 'message'
Update oauth docs to include snippet to get email address of authenticated user

(adam)

py-xopen: updated to 1.0.1

v1.0.1
Fix ResourceWarnings when opening many piped processes

v1.0.0
flake8 should not be in deploy stage

(adam)

Updated mail/postfix, devel/py-more-itertools

(adam)

py-more-itertools: updated to 8.6.0

8.6.0
-----
* New itertools
    * :func:`all_unique`
    * :func:`nth_product` and :func:`nth_permutation`

* Changes to existing itertools
    * :func:`chunked` and :func:`sliced` now accept a ``strict`` parameter

* Other changes
    * Python 3.5 has reached its end of life and is no longer supported.
    * Python 3.9 is officially supported.
    * Various documentation fixes

(adam)

postfix: updated to 3.5.8

Fixed in Postfix version 3.5.8:

[Postfix 3.5 and later] The Postfix SMTP client inserted <CR><LF> into message headers with lines longer than $line_length_limit (default: 2048), causing all subsequent header content to become message body content. Reported by Andreas Weigel.

Fixed in Postfix versions 3.5.8, 3.4.18, 3.3.15, 3.2.20:

[Postfix 2.8 and later] The postscreen daemon did not save a copy of the postscreen_dnsbl_reply_map lookup result. This has no effect when the recommended texthash: lookup table is used, but it could result in stale data with other lookup tables.

[Postfix 2.3 and later] After deleting a recipient with a Milter, the Postfix recipient duplicate filter was not updated; the filter suppressed requests to add the recipient back. Reported by Mehmet Avcioglu.

[Postfix 2.3 and later] Memory leak: the static: maps did not free their casefolding buffer.

[Postfix 2.2 and later] With "smtpd_tls_wrappermode = yes", the smtps service was waiting for a TLS handshake, after processing an XCLIENT command. Reported by Aki Tuomi.

[Postfix 2.0 and later] The smtp_sasl_mechanism_filter implementation ignored table lookup errors, treating them as 'not found'.

[Postfix alpha and later] The code that looks for Delivered-To: headers ignored headers longer than $line_length_limit (default: 2048).

(adam)

Updated databases/py-pymysql, devel/py-pygit2

(adam)

py-pygit2: updated to 1.4.0

1.4.0
- Upgrade to libgit2 1.1, new ``GIT_BLAME_IGNORE_WHITESPACE`` constant
- Add wheels for Python 3.9
- Drop support for PyPy3 7.2
- New optional ``flags`` argument in ``Repository.__init__(...)``,
  new ``GIT_REPOSITORY_OPEN_*`` constants
- Documentation

(adam)

py-pymysql: updated to 0.10.1

v0.10.1
* Fix missing import of ProgrammingError.
* Fix auth switch request handling.

(adam)

Updated net/libtorrent-rasterbar, net/qbittorrent

(adam)

qbittorrent: updated to 4.3.0.1

v4.3.0
- FEATURE: Many UI elements colors are themeable now (jagannatharjun)
- FEATURE: Allow changing GUI icons from theme bundles (jagannatharjun)
- FEATURE: Notify user when torrent moving finished (glassez)
- FEATURE: Shortcut CTRL + I opens Statistics window (LoopsGod)
- FEATURE: Add RSS functionality in Web UI (Sepro)
- FEATURE: Drop ".unwanted folder" feature (glassez)
- FEATURE: Expose libtorrent peer_turnover, max_concurrent_http_announces, no_connect_privileged_ports settings (Sophist, an0n666, NotTsunami)
- BUGFIX: Fix typo in Options dialog (Andrei Stepanov)
- BUGFIX: Remove "requires restart" from network interface settings (an0n666)
- BUGFIX: Rename "Create subfolder" to "Keep top-level folder" (thalieht)
- BUGFIX: Show tooltip for some properties in transfer list (Nick Korotysh)
- BUGFIX: Fix calculation of torrent current state (glassez)
- BUGFIX: Improve detecting completed files when adding, rechecking or moving a torrent (glassez)
- BUGFIX: Fixed broken announce logic in embedded tracker causing failures in some cases (FranciscoPombal)
- BUGFIX: Disable checkbox if torrent doesn't have root folder (thalieht)
- BUGFIX: Update country flag icons with upstream (Chocobo1)
- BUGFIX: Private torrent: If tracker entry is edited clear old peer list. Also don't allow user to manually add peers. (an0n666)
- BUGFIX: Fix large strings not visible in log widget (jagannatharjun)
- BUGFIX: Disable edit action in Peer list widget (Chocobo1)
- BUGFIX: Add a scroll area to torrent creator dialog (Ernesto Castellotti)
- BUGFIX: Content tab: Open double-clicked folder regardless on which column the click happens (Chocobo1)
- BUGFIX: "Open containing folder" on a folder now opens it in its parent folder (Chocobo1)
- BUGFIX: Fix GeoDB download in systems with non-C locales (FranciscoPombal)
- BUGFIX: Fix peer blocked message (FranciscoPombal)
- BUGFIX: Make more robust the banning of selected peers from the list (NotTsunami)
- BUGFIX: Use toned green color for downloading pieces in Pieces bar (jagannatharjun)
- BUGFIX: Correctly fill whole width of speed graph (jagannatharjun)
- BUGFIX: Fix impossible speed in speed graph (jagannatharjun)
- WEBUI: Hide additional search filters on small screens (Thomas Piccirello)
- WEBUI: Shrink search bar on small screens (Thomas Piccirello)
- WEBUI: Fix search categories only working in English (Thomas Piccirello)
- WEBUI: Add Trackers section to sidebar (Thomas Piccirello)
- WEBUI: Fix Enter button behavior in textarea (Tom Piccirello)
- WEBUI: Fix wrong file renaming selection range (MR)
- WEBUI: Preselect "Default save path" in watched folders (thalieht)
- WEBUI: Fix banning peers (brvphoenix)
- WEBUI: Fix seeding time checkbox placement (Chocobo1)
- WEBUI: Bump Web API version (Thomas Piccirello)
- RSS: Fix renaming RSS autodownload rule (glassez)
- RSS: Fix RSS article is not marked as "read" when torrent is downloaded (glassez)
- SEARCH: Update minimum Python version to 3.5.0 (ngosang)
- SEARCH: Make middle-click close search tabs (Will Da Silva)
- WINDOWS: NSIS: Update Dutch translation (Thomas De Rocker)
- WINDOWS: NSIS: Change the installers uninstallation question to clear confusion (an0n666)
- LINUX: Fix typo in systemd service file (Shane Allgeier)
- LINUX: Don't use HTML in tray tooltip (thalieht)
- LINUX: Don't create 'data' subdirectory in XDG_DATA_HOME (lbilli)
- LINUX/MACOS: Add HTTPS tracker certificate validation option (NotTsunami)
- OTHER: Many CMake improvements (FranciscoPombal)
- OTHER: Support for libtorrent 1.1.x is dropped (Chocobo1)
- OTHER: Many code cleanups and improvements (FranciscoPombal, Chocobo1, glassez)

(adam)

libtorrent-rasterbar: updated to 1.2.11

libtorrent-1.2.11

Fixes since the 1.2.10 release:

fix issue with moving the session object
deprecate torrent_status::allocating. This state is no longer used
fix bug creating torrents with symbolic links
remove special case to save metadata in resume data unconditionally when added throught magnet link
fix bugs in mutable-torrent support (reusing identical files from different torrents)
fix incorrectly inlined move-assignment of file_storage
add session::paused flag, and the ability to construct a session in paused mode
fix session-pause causing tracker announces to fail
fix peer-exchange flags bug
allow saving resume data before metadata has been downloaded (for magnet links)
record blocks in the disk queue as downloaded in the resume data
fix bug in set_piece_deadline() when set in a zero-priority piece
fix issue in URL parser, causing issues with certain tracker URLs
use a different error code than host-unreachable, when skipping tracker announces

(adam)

Updated x11/qt5, devel/meson, devel/glib2

(adam)

gdbus-codegen glib2 glib2-tools: updated to 2.66.3

Overview of changes in GLib 2.66.3
==================================

* Fix awkward bug with `GPollFD` handling in some situations (work by Claudio
  Saavedra and Eugene M)

* Fix sending FDs attached to very large D-Bus messages (work by Simon McVittie
  and Giovanni Campagna)

* Bugs fixed:
- Main loop ignores GPollFD sources when there is at least one source ready with priority higher than default one
- Backport !1718 “gtrace: Add G_GNUC_PRINTF annotation” to glib-2-66
- Backport !1713 “gmain: g_main_context_check() can skip updating polled FD sources” to glib-2-66
- Backport !1711 “Fix race in socketclient-slow test” to glib-2-66
- Backport !1725 “gdbus: Cope with sending fds in a message that takes multiple writes” to glib-2-66
- Backport !1734 “glocalfileinfo: Use a single timeout source at a time for hidden file cache” to glib-2-66

Overview of changes in GLib 2.66.2
==================================

* Important and time-critical fix to DST transitions which will happen in Europe
  on 2020-10-25 on distributions which use the ‘slim’ tzdata format (which is
  now the default in tzdata/tzcode 2020b) (work by Claudi M., LRN)

* Further timezone handling changes to restore support for changing the timezone
  when `/etc/localtime/` changes (work by António Fernandes, Sebastian Keller)

* Fix deadlock on Windows when `G_SLICE` is set in the environment (diagnosis by
  Christoph Reiter)

* Fix UTF-8 validation when escaping URI components (thanks to Marc-André Lureau) (!1680)

* Bugs fixed:
- fstatat is available only on macOS 10.10+
- top bar time is incorrect, timezone map in control center is broken
- Setting G_SLICE makes Windows programs hang since 2.66
- Backport !1680 “guri: Fix UTF-8 validation when escaping URI components” to glib-2-66
- Backport !1684 “glocalfileinfo: Fix use of fstatat() on macOS < 10.10” to glib-2-66
- uri: add missing (not)nullable annotations
- Backport !1691 “gmain: Fix possible locking issue in source unref” to glib-2-66
- Backport !1692 “gsignal: Plug g_signal_connect_object leak” to glib-2-66
- Backport !1661 “Lookup fallback time zones in the cache to improve performance” to glib-2-66
- Backport !1698 “gslice: Inline win32 implementation of g_getenv() to avoid deadlock” to glib-2-66
- Backport !1683 “Fix the 6-days-until-the-end-of-the-month bug” to glib-2-66
- Backport !1706 “Add various missing nullable annotations” to glib-2-66

* Translation updates:
- Chinese (Taiwan)
- Portuguese
- Slovak

Overview of changes in GLib 2.66.1
==================================

* A performance problem where timezones were reloaded from disk every time a
  `GTimeZone` was created has been fixed
  `/etc/localtime` will not take effect until a process restarts; future changes
  in a subsequent 2.66.x release will improve this

* Security fix for incorrect scope/zone ID parsing in URIs (!1669)

* Bugs fixed:
- Invalid Pointer Arithmetic in g_path_get_basename
- GDBus DBUS_COOKIE_SHA1 mechanism may use too old a key
- gtk3/glib crash on gimp
- Time zone cache is constantly invalidated if TZ is NULL
- gthreadedresolver: faulty logic in parse_res_txt
- Define G_MSVC_SYMBOL_PREFIX correctly for ARM
- Minor Coverity fixes
- Fix various signedness warnings
- glocalfile: Never require G_LOCAL_FILE_STAT_FIELD_ATIME
- trash portal: Handle portal failures
- gio-tool-trash: Prevent recursion to speed up emptying trash
- glist: Clarify that g_list_free() and friends only free an entire list
- utils: Limit the scope of the variable `max`
- Fix g_module_symbol() under Windows sometimes not succeeding
- guri: Fix URI scope parsing
- gdatetime: Avoid integer overflow creating dates too far in the past

* Translation updates:
- Danish
- Greek, Modern (1453-)
- Hebrew
- Latvian
- Portuguese
- Russian

(adam)

meson: updated to 0.56.0

0.56.0:
* meson test can now filter tests by subproject
* Native (build machine) compilers not always required by project()
* New extra_files key in target introspection
* Preliminary AIX support
* Wraps from subprojects are automatically promoted
* meson.build_root() and meson.source_root() are deprecated
* dep.as_link_whole()
* Add support for all Windows subsystem types
* Added NVidia HPC SDK compilers
* Project and built-in options can be set in native or cross files
* unstable-keyval is now stable keyval
* CMake subproject cross compilation support
* Machine file keys are stored case sensitive
* Consistency between declare_dependency() and pkgconfig.generate() variables
* Qt5 compile_translations now supports qresource preprocessing
* Controlling subproject dependencies with dependency(allow_fallback: ...)
* Custom standard library
* Improvements for the builtin curses dependency
* HDF5 dependency improvements
* External projects
* Per subproject warning_level option
* meson subprojects command
* Added CompCert C compiler
* Dependencies listed in test and benchmark introspection
* include_type support for the CMake subproject object dependency method
* Deprecate Dependency.get_pkgconfig_variable and Dependency.get_configtool_variable

(adam)

qt5: updated to 5.15.2

5.12.2:
Bug fix release.

(adam)

Updated archivers/lz4, archivers/py-lz4

(adam)

py-lz4: updated to 3.1.1

3.1.1:
Correct how pkgconfig is handled in setup.py to account for multiple build flags
Improve how CHAR_BIT is handled

(adam)

lz4: updated to 1.9.3

LZ4 v1.9.3 is a maintenance release, offering more than 200+ commits to fix multiple corner cases and build scenarios. Update is recommended. Existing liblz4 API is not modified, so it should be a drop-in replacement.

Changes list

Here is a more detailed list of updates introduced in v1.9.3 :

perf: highly improved speed in kernel space, by @terrelln
perf: faster speed with Visual Studio, thanks to @wolfpld and @remittor
perf: improved dictionary compression speed, by @felixhandte
perf: fixed LZ4_compress_HC_destSize() ratio, detected by @hsiangkao
perf: reduced stack usage in high compression mode, by @Yanpas
api : LZ4_decompress_safe_partial() supports unknown compressed size, requested by @jfkthame
api : improved LZ4F_compressBound() with automatic flushing, by Christopher Harvie
api : can (de)compress to/from NULL without UBs
api : fix alignment test on 32-bit systems (state initialization)
api : fix LZ4_saveDictHC() in corner case scenario, detected by @IgorKorkin
cli : compress multiple files using the legacy format, by Filipe Calasans
cli : benchmark mode supports dictionary, by @rkoradi
cli : fix --fast with large argument, detected by @picoHz
build: link to user-defined memory functions with LZ4_USER_MEMORY_FUNCTIONS
build: contrib/cmake_unofficial/ moved to build/cmake/
build: visual/* moved to build/
build: updated meson script, by @neheb
build: tinycc support, by Anton Kochkov
install: Haiku support, by Jerome Duval
doc : updated LZ4 frame format, clarify EndMark

(adam)

Updated devel/py-test-pylint, net/py-prometheus_client

(adam)

py-prometheus_client: updated to 0.9.0

0.9.0:
[ENHANCEMENT] Add support for python3.9
[ENHANCEMENT] Various updates for latest OpenMetrics draft spec

(adam)

py-test-pylint: updated to 0.18.0

0.18.0
Added support for creating missing folders when using --pylint-output-file
Now when pylint's ignore_patterns is blank, we don't ignore all files
Added cache invalidation when your pylintrc changes
Verified support for latest pytest and Python 3.9
Corrected badly named nodes (duplicated path) thanks to yanqd0
Added tests to source distribution thanks to sbraz

(adam)

Updated www/py-aiohttp, devel/py-ruamel-ordereddict

(adam)

py-ruamel-ordereddict: updated to 0.4.15

0.4.15:
Bug fixes

(adam)

py-aiohttp: updated to 3.7.3

3.7.3
=====

Features
--------
- Use Brotli instead of brotlipy
- Made exceptions pickleable. Also changed the repr of some exceptions.

Bugfixes
--------
- Raise a ClientResponseError instead of an AssertionError for a blank
  HTTP Reason Phrase.
- Fix ``web_middlewares.normalize_path_middleware`` behavior for patch without slash.
- Fix overshadowing of overlapped sub-applications prefixes.
- Make `BaseConnector.close()` a coroutine and wait until the client closes all connections. Drop deprecated "with Connector():" syntax.
- Reset the ``sock_read`` timeout each time data is received for a ``aiohttp.client`` response.
- Fixed type annotation for add_view method of UrlDispatcher to accept any subclass of View
- Fixed querying the address families from DNS that the current host supports.
- Change return type of MultipartReader.__aiter__() and BodyPartReader.__aiter__() to AsyncIterator.
- Provide x86 Windows wheels.

Improved Documentation
----------------------
- Add documentation for ``aiohttp.web.FileResponse``.
- Removed deprecation warning in tracing example docs
- Fixed wrong "Usage" docstring of ``aiohttp.client.request``.
- Add aiohttp-pydantic to third party libraries

(adam)

Updated security/gnupg2

(adam)

gnupg2: updated to 2.2.24

Noteworthy changes in version 2.2.24
------------------------------------

  * Allow Unicode file names on Windows almost everywhere.  Note that
    it is still not possible to use Unicode strings on the command
    line.  This change also fixes a regression in 2.2.22 related to
    non-ascii file names.

  * Fix localized time printing on Windows.

  * gpg: New command --quick-revoke-sig.

  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt.

  * gpg: Switch to AES256 for symmetric encryption in de-vs mode.

  * gpg: Silence weak digest warnings with --quiet.

  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption.

  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys.

  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519 keys.

  * agent: Keep some permissions of private-keys-v1.d.

  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds.

  * dirmngr: Fix the pool keyserver case for a single host in the
    pool.

  * scd: Fix the use case of verify_chv2 by CHECKPIN.

  * scd: Various improvements to the ccid-driver.

  * scd: Minor fixes for Yubikey

  * gpgconf: New option --show-versions.

  * w32: Install gpg-check-pattern and example profiles.  Install
    Windows subsystem variant of gpgconf (gpgconf-w32).

  * i18n: Complete overhaul and completion of the Italian translation.
    Thanks to Denis Renzi.

  * Require Libgcrypt 1.8 because 1.7 has long reached end-of-life.

(adam)

Updated net/openvpn, security/easy-rsa

(adam)

easy-rsa: updated to 3.0.8

3.0.8 (2020-09-09)
* Provide --version option
* Version information now within generated certificates like on *nix
* Fixed issue where gen-dh overwrote existing files without warning
* Fixed issue with ED/EC certificates were still signed by RSA
* Added support for export-p8
* Clarified error message
* 2->3 upgrade now errors and prints message when vars isn't found
* Update OpenSSL Windows binaries to 1.1.1g

(adam)

openvpn: updated to 2.5.0

Overview of changes in 2.5
==========================

New features
------------
Client-specific tls-crypt keys (``--tls-crypt-v2``)
    ``tls-crypt-v2`` adds the ability to supply each client with a unique
    tls-crypt key.  This allows large organisations and VPN providers to profit
    from the same DoS and TLS stack protection that small deployments can
    already achieve using ``tls-auth`` or ``tls-crypt``.

ChaCha20-Poly1305 cipher support
    Added support for using the ChaCha20-Poly1305 cipher in the OpenVPN data
    channel.

Improved Data channel cipher negotiation
    The option ``ncp-ciphers`` has been renamed to ``data-ciphers``.
    The old name is still accepted. The change in name signals that
    ``data-ciphers`` is the preferred way to configure data channel
    ciphers and the data prefix is chosen to avoid the ambiguity that
    exists with ``--cipher`` for the data cipher and ``tls-cipher``
    for the TLS ciphers.

    OpenVPN clients will now signal all supported ciphers from the
    ``data-ciphers`` option to the server via ``IV_CIPHERS``. OpenVPN
    servers will select the first common cipher from the ``data-ciphers``
    list instead of blindly pushing the first cipher of the list. This
    allows to use a configuration like
    ``data-ciphers ChaCha20-Poly1305:AES-256-GCM`` on the server that
    prefers ChaCha20-Poly1305 but uses it only if the client supports it.

    See the data channel negotiation section in the manual for more details.

Removal of BF-CBC support in default configuration:
    By default OpenVPN 2.5 will only accept AES-256-GCM and AES-128-GCM as
    data ciphers. OpenVPN 2.4 allows AES-256-GCM,AES-128-GCM and BF-CBC when
    no --cipher and --ncp-ciphers options are present. Accepting BF-CBC can be
    enabled by adding

        data-ciphers AES-256-GCM:AES-128-GCM:BF-CBC

    and when you need to support very old peers also

        data-ciphers-fallback BF-CBC

    To offer backwards compatibility with older configs an *explicit*

        cipher BF-CBC

    in the configuration will be automatically translated into adding BF-CBC
    to the data-ciphers option and setting data-ciphers-fallback to BF-CBC
    (as in the example commands above). We strongly recommend to switching
    away from BF-CBC to a more secure cipher.

Asynchronous (deferred) authentication support for auth-pam plugin.
    See src/plugins/auth-pam/README.auth-pam for details.

Deferred client-connect
    The ``--client-connect`` option and the connect plugin API allow
    asynchronous/deferred return of the configuration file in the same way
    as the auth-plugin.

Faster connection setup
    A client will signal in the ``IV_PROTO`` variable that it is in pull
    mode. This allows the server to push the configuration options to
    the client without waiting for a ``PULL_REQUEST`` message. The feature
    is automatically enabled if both client and server support it and
    significantly reduces the connection setup time by avoiding one
    extra packet round-trip and 1s of internal event delays.

Netlink support
    On Linux, if configured without ``--enable-iproute2``, configuring IP
    addresses and adding/removing routes is now done via the netlink(3)
    kernel interface.  This is much faster than calling ``ifconfig`` or
    ``route`` and also enables OpenVPN to run with less privileges.

    If configured with --enable-iproute2, the ``ip`` command is used
    (as in 2.4).  Support for ``ifconfig`` and ``route`` is gone.

Wintun support
    On Windows, OpenVPN can now use ``wintun`` devices.  They are faster
    than the traditional ``tap9`` tun/tap devices, but do not provide
    ``--dev tap`` mode - so the official installers contain both.  To use
    a wintun device, add ``--windows-driver wintun`` to your config
    (and use of the interactive service is required as wintun needs
    SYSTEM privileges to enable access).

IPv6-only operation
    It is now possible to have only IPv6 addresses inside the VPN tunnel,
    and IPv6-only address pools (2.4 always required IPv4 config/pools
    and IPv6 was the "optional extra").

Improved Windows 10 detection
    Correctly log OS on Windows 10 now.

Linux VRF support
    Using the new ``--bind-dev`` option, the OpenVPN outside socket can
    now be put into a Linux VRF.  See the "Virtual Routing and Forwarding"
    documentation in the man page.

TLS 1.3 support
    TLS 1.3 support has been added to OpenVPN.  Currently, this requires
    OpenSSL 1.1.1+.
    The options ``--tls-ciphersuites`` and ``--tls-groups`` have been
    added to fine tune TLS protocol options.  Most of the improvements
    were also backported to OpenVPN 2.4 as part of the maintainance
    releases.

Support setting DHCP search domain
    A new option ``--dhcp-option DOMAIN-SEARCH my.example.com`` has been
    defined, and Windows support for it is implemented (tun/tap only, no
    wintun support yet).  Other platforms need to support this via ``--up``
    script (Linux) or GUI (OSX/Tunnelblick).

per-client changing of ``--data-ciphers`` or ``data-ciphers-fallback``
    from client-connect script/dir (NOTE: this only changes preference of
    ciphers for NCP, but can not override what the client announces as
    "willing to accept")

Handle setting of tun/tap interface MTU on Windows
    If IPv6 is in use, MTU must be >= 1280 (Windows enforces IETF requirements)

Add support for OpenSSL engines to access private key material (like TPM).

HMAC based auth-token support
    The ``--auth-gen-token`` support has been improved and now generates HMAC
    based user token. If the optional ``--auth-gen-token-secret`` option is
    used clients will be able to seamlessly reconnect to a different server
    using the same secret file or to the same server after a server restart.

Improved support for pending authentication
    The protocol has been enhanced to be able to signal that
    the authentication should use a secondary authentication
    via web (like SAML) or a two factor authentication without
    disconnecting the OpenVPN session with AUTH_FAILED. The
    session will instead be stay in a authenticated state and
    wait for the second factor authentication to complete.

    This feature currently requires usage of the managent interface
    on both client and server side. See the `management-notes.txt`
    ``client-pending-auth`` and ``cr-response`` commands for more
    details.

VLAN support
    OpenVPN servers in TAP mode can now use 802.1q tagged VLANs
    on the TAP interface to separate clients into different groups
    that can then be handled differently (different subnets / DHCP,
    firewall zones, ...) further down the network.  See the new
    options ``--vlan-tagging``, ``--vlan-accept``, ``--vlan-pvid``.

    802.1q tagging on the client side TAP interface is not handled
    today (= tags are just forwarded transparently to the server).

Support building of .msi installers for Windows

Allow unicode search string in ``--cryptoapicert`` option (Windows)

Support IPv4 configs with /31 netmasks now
    (By no longer trying to configure ``broadcast x.x.x.x'' in
    ifconfig calls, /31 support "just works")

New option ``--block-ipv6`` to reject all IPv6 packets (ICMPv6)
    this is useful if the VPN service has no IPv6, but the clients
    might have (LAN), to avoid client connections to IPv6-enabled
    servers leaking "around" the IPv4-only VPN.

``--ifconfig-ipv6`` and ``--ifconfig-ipv6-push`` will now accept
    hostnames and do a DNS lookup to get the IPv6 address to use

Deprecated features
-------------------
For an up-to-date list of all deprecated options, see this wiki page:
https://community.openvpn.net/openvpn/wiki/DeprecatedOptions

- ``ncp-disable`` has been deprecated
    With the improved and matured data channel cipher negotiation, the use
    of ``ncp-disable`` should not be necessary anymore.

- ``inetd`` has been deprecated
  This is a very limited and not-well-tested way to run OpenVPN, on TCP
  and TAP mode only, which complicates the code quite a bit for little gain.
  To be removed in OpenVPN 2.6 (unless users protest).

- ``no-iv`` has been removed
  This option was made into a NOOP option with OpenVPN 2.4.  This has now
  been completely removed.

- ``--client-cert-not-required`` has been removed
  This option will now cause server configurations to not start.  Use
  ``--verify-client-cert none`` instead.

- ``--ifconfig-pool-linear`` has been removed
  This option is removed.  Use ``--topology p2p`` or ``--topology subnet``
  instead.

- ``--compress xxx`` is considered risky and is warned against, see below.

- ``--key-method 1`` has been removed

User-visible Changes
--------------------
- If multiple connect handlers are used (client-connect, ccd, connect
  plugin) and one of the handler succeeds but a subsequent fails, the
  client-disconnect-script is now called immediately. Previously it
  was called, when the VPN session was terminated.

- Support for building with OpenSSL 1.0.1 has been removed. The minimum
  supported OpenSSL version is now 1.0.2.

- The GET_CONFIG management state is omitted if the server pushes
  the client configuration almost immediately as result of the
  faster connection setup feature.

- ``--compress`` is nowadays considered risky, because attacks exist
  leveraging compression-inside-crypto to reveal plaintext (VORACLE).  So
  by default, ``--compress xxx`` will now accept incoming compressed
  packets (for compatibility with peers that have not been upgraded yet),
  but will not use compression outgoing packets.  This can be controlled with
  the new option ``--allow-compression yes|no|asym``.

- Stop changing ``--txlen`` aways from OS defaults unless explicitly specified
  in config file.  OS defaults nowadays are actually larger then what we used
  to configure, so our defaults sometimes caused packet drops = bad performance.

- remove ``--writepid`` pid file on exit now

- plugin-auth-pam now logs via OpenVPN logging method, no longer to stderr
  (this means you'll have log messages in syslog or openvpn log file now)

- use ISO 8601 time format for file based logging now (YYYY-MM-DD hh:mm:dd)
  (syslog is not affected, nor is ``--machine-readable-output``)

- ``--clr-verify`` now loads all CRLs if more than one CRL is in the same
  file (OpenSSL backend only, mbedTLS always did that)

- when ``--auth-user-pass file`` has no password, and the management interface
  is active, query management interface (instead of trying console query,
  which does not work on windows)

- skip expired certificates in Windows certificate store (``--cryptoapicert``)

- ``--socks-proxy`` + ``--proto udp*`` will now allways use IPv4, even if
  IPv6 is requested and available.  Our SOCKS code does not handle IPv6+UDP,
  and before that change it would just fail in non-obvious ways.

- TCP listen() backlog queue is now set to 32 - this helps TCP servers that
  receive lots of "invalid" connects by TCP port scanners

- do no longer print OCC warnings ("option mismatch") about ``key-method``,
  ``keydir``, ``tls-auth`` and ``cipher`` - these are either gone now, or
  negotiated, and the warnings do not serve a useful purpose.

- ``dhcp-option DNS`` and ``dhcp-option DNS6`` are now treated identically
  (= both accept an IPv4 or IPv6 address for the nameserver)

Maintainer-visible changes
--------------------------
- the man page is now in maintained in .rst format, so building the openvpn.8
  manpage from a git checkout now requires python-docutils (if this is missing,
  the manpage will not be built - which is not considered an error generally,
  but for package builders or ``make distcheck`` it is).  Release tarballs
  contain the openvpn.8 file, so unless some .rst is changed, doc-utils are
  not needed for building.

- OCC support can no longer be disabled

- AEAD support is now required in the crypto library

- ``--disable-server`` has been removed from configure (so it is no longer
  possible to build a client-/p2p-only OpenVPN binary) - the saving in code
  size no longer outweighs the extra maintenance effort.

- ``--enable-iproute2`` will disable netlink(3) support, so maybe remove
  that from package building configs (see above)

- support building with MSVC 2019

- cmocka based unit tests are now only run if cmocka is installed externally
  (2.4 used to ship a local git submodule which was painful to maintain)

- ``--disable-crypto`` configure option has been removed.  OpenVPN is now always
  built with crypto support, which makes the code much easier to maintain.
  This does not affect ``--cipher none`` to do a tunnel without encryption.

- ``--disable-multi`` configure option has been removed

(adam)

Correct prometheus version

(adam)

Reset PKGREVISION

(adam)

Updated lang/nodejs, lang/nodejs12

(adam)

nodejs12: updated to 12.19.1

Version 12.19.1 'Erbium' (LTS)

Notable changes

This is a security release.

Vulnerabilities fixed:

CVE-2020-8277: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service by getting the application to resolve a DNS record with a larger number of responses.

(adam)

nodejs: updayed to 14.15.1

Version 14.15.1 'Fermium' (LTS)

Notable changes

This is a security release.

Vulnerabilities fixed:

CVE-2020-8277: Denial of Service through DNS request (High). A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service by getting the application to resolve a DNS record with a larger number of responses.

(adam)

Updated databases/py-pypika, databases/py-tortoise-orm

(adam)

py-tortoise-orm: updated to 0.16.18

0.16.18

Support custom function in update.
Add Model.refresh_from_db.
Add timezone support, be careful to upgrade to this version, see docs for details.
Remove aerich in case of cyclic dependency.

(adam)

py-pypika: updated to 0.44.0

0.44.0:
Unknown changes

(adam)

Updated textproc/py-rapidjson, time/py-pytz

(adam)

py-pytz: updated to 2020.4

2020.4:
Unknown changes

(adam)

py-rapidjson: updated to 0.9.4

0.9.4:
* Fix memory leak loading an invalid JSON

(adam)

Updated graphics/libjpeg-turbo, databases/prometheus

(adam)

prometheus: updated to 2.22.2

2.22.2:
[BUGFIX] Fix race condition in syncing/stopping/reloading scrapers.

(adam)

libjpeg-turbo: updated to 2.0.6

2.0.6

Significant changes relative to 2.0.5:

Fixed "using JNI after critical get" errors that occurred on Android platforms when using any of the YUV encoding/compression/decompression/decoding methods in the TurboJPEG Java API.

Fixed or worked around multiple issues with jpeg_skip_scanlines():

Fixed segfaults or "Corrupt JPEG data: premature end of data segment" errors in jpeg_skip_scanlines() that occurred when decompressing 4:2:2 or 4:2:0 JPEG images using merged (non-fancy) upsampling/color conversion (that is, when setting cinfo.do_fancy_upsampling to FALSE.) 2.0.0[6] was a similar fix, but it did not cover all cases.
jpeg_skip_scanlines() now throws an error if two-pass color quantization is enabled. Two-pass color quantization never worked properly with jpeg_skip_scanlines(), and the issues could not readily be fixed.
Fixed an issue whereby jpeg_skip_scanlines() always returned 0 when skipping past the end of an image.
The Arm 64-bit (Armv8) Neon SIMD extensions can now be built using MinGW toolchains targetting Arm64 (AArch64) Windows binaries.

Fixed unexpected visual artifacts that occurred when using jpeg_crop_scanline() and interblock smoothing while decompressing only the DC scan of a progressive JPEG image.

Fixed an issue whereby libjpeg-turbo would not build if 12-bit-per-component JPEG support (WITH_12BIT) was enabled along with libjpeg v7 or libjpeg v8 API/ABI emulation (WITH_JPEG7 or WITH_JPEG8.)

(adam)

Updated textproc/py-xmlschema, databases/py-multidict, www/py-yarl, graphics/py-graphviz

(adam)

py-graphviz: updated to 0.15

Version 0.15
------------

``Graph`` and ``Digraph`` instances created via the context-manager returned
by ``subgraph()`` now (re)use ``directory``, ``format``, ``engine``, and
``encoding`` from the parent instead of using defaults (behavioral change).
Note that these attributes are only relevant when rendering the
subgraph independently (i.e. as a stand-alone graph) from within the
``with``-block, which was previously underdocumented. To reflect that
the DOT language does not allow subgraph statements to specify ``strict``
(i.e. no way to override the setting of the containing graph), instances
created via the context-manager are now ``strict=None`` instead of ``False``
(so they continue to render stand-alone as non-strict by default).

Drop Python 3.5 support and tag Python 3.9 support.

Add documentation link to new upstream installation procedure for Windows.

(adam)

py-yarl: updated to 1.6.3

1.6.3:
Bugfixes
- No longer loose characters when decoding incorrect percent-sequences (like ``%e2%82%f8``). All non-decodable percent-sequences are now preserved.
- Provide x86 Windows wheels.

(adam)

py-multidict: updated to 5.0.2

multidict 5.0.2 release

Fox a bug in release process, upload x86 Windows wheels

multidict 5.0.1 release

Bugfixes
Provide x86 Windows wheels

(adam)

py-xmlschema: updated to 1.3.1

v1.3.1:
* Apply patches for packaging

(adam)

Updated databases/postgresqlNN

(adam)

postgresql: updated to 13.1, 12.5, 11.10, 10.15, 9.6.20, and 9.5.24

PostgreSQL 13.1, 12.5, 11.10, 10.15, 9.6.20, and 9.5.24

Security Issues

* CVE-2020-25695: Multiple features escape "security restricted operation" sandbox
* CVE-2020-25694: Reconnection can downgrade connection security settings
* CVE-2020-25696: psql's \gset allows overwriting specially treated variables

Bug Fixes and Improvements

This update also fixes over 65 bugs that were reported in the last several months. Some of these issues only affect version 13, but may also apply to other supported versions.

Some of these fixes include:

Fix a breakage in the replication protocol by ensuring that two "command completion" events are expected for START_REPLICATION.
Ensure fsync is called on the SLRU caches that PostgreSQL maintains. This prevents potential data loss due to an operating system crash.
Fix ALTER ROLE usage for users with the BYPASSRLS permission.
ALTER TABLE ONLY ... DROP EXPRESSION is disallowed on partitioned tables when there are child tables.
Ensure that ALTER TABLE ONLY ... ENABLE/DISABLE TRIGGER does not apply to child tables.
Fix for ALTER TABLE ... SET NOT NULL on partitioned tables to avoid a potential deadlock in parallel pg_restore.
Fix handling of expressions in CREATE TABLE LIKE with inheritance.
DROP INDEX CONCURRENTLY is disallowed on partitioned tables.
Allow LOCK TABLE to succeed on a self-referential view instead of throwing an error.
Several fixes around statistics collection and progress reporting for REINDEX CONCURRENTLY.
Ensure that GENERATED columns are updated when any columns they depend on are updated via a rule or an updatable view.
Support hash partitioning with text array columns as partition keys.
Allow the jsonpath .datetime() method to accept ISO 8601-format timestamps.
During a "smart" shutdown, ensure background processes are not terminated until all foreground client sessions are completed, fixing an issue that broke the processing of parallel queries.
Several fixes for the query planner and optimizer.
Ensure that data is de-toasted before being inserted into a BRIN index. This could manifest itself with errors like "missing chunk number 0 for toast value NNN". If you have seen a similar error in an existing BRIN index, you should be able to correct it by using REINDEX on the index.
Fix the output of EXPLAIN to have the correct XML tag nesting for incremental sort plans.
Several fixes for memory leaks, including ones involving RLS policies, using CALL with PL/pgSQL, SIGHUP processing a configuration parameter that cannot be applied without a restart, and an edge-case for index lookup for a partition.
libpq can now support arbitrary-length lines in the .pgpass file.
On Windows, psql now reads the output of a backtick command in text mode, not binary mode, so it can now properly handle newlines.
Fix how pg_dump, pg_restore, clusterdb, reindexdb, and vacuumdb use complex connection-string parameters.
When the \connect command of psql reuses connection parameters, ensure that all non-overridden parameters from a previous connection string are also re-used.
Ensure that pg_dump collects per-column information about extension configuration tables, avoiding crashes when specifying --inserts.
Ensure that parallel pg_restore processes foreign keys referencing partitioned tables in the correct order.
Several fixes for contrib/pgcrypto, including a memory leak fix.

(adam)

Updated devel/protobuf, devel/py-protobuf

(adam)

py-protobuf: updated to 3.14.0

Protocol Buffers v3.14.0

Python

Print google.protobuf.NullValue as null instead of "NULL_VALUE" when it is
used outside WKT Value/Struct.
Fix bug occurring when attempting to deep copy an enum type in python 3.
Add a setuptools extension for generating Python protobufs
Remove uses of pkg_resources in non-namespace packages.
[bazel/py] Omit google/init.py from the Protobuf runtime.
Removed the unnecessary setuptools package dependency for Python package
Fix PyUnknownFields memory leak

(adam)

protobuf: updated to 3.14.0

Protocol Buffers v3.14.0

Protocol Compiler

The proto compiler no longer requires a .proto filename when it is not
generating code.
Added flag --deterministic_output to protoc --encode=....
Fixed deadlock when using google.protobuf.Any embedded in aggregate options.

C++

Arenas are now unconditionally enabled. cc_enable_arenas no longer has
any effect.
Removed inlined string support, which is incompatible with arenas.
Fix a memory corruption bug in reflection when mixing optional and
non-optional fields.
Make SpaceUsed() calculation more thorough for map fields.
Add stack overflow protection for text format with unknown field values.
FieldPath::FollowAll() now returns a bool to signal if an out-of-bounds
error was encountered.
Performance improvements for Map.
Minor formatting fix when dumping a descriptor to .proto format with
DebugString.
UBSAN fix in RepeatedField.
When running under ASAN, skip a test that makes huge allocations.
Fixed a crash that could happen when creating more than 256 extensions in
a single message.
Fix a crash in BuildFile when passing in invalid descriptor proto.
Parser security fix when operating with CodedInputStream.
Warn against the use of AllowUnknownExtension.
Migrated to C++11 for-range loops instead of index-based loops where
possible. This fixes a lot of warnings when compiling with -Wsign-compare.
Fix segment fault for proto3 optional
Adds a CMake option to build libprotoc separately

(adam)

rust: update CKSUMS

(adam)

Updated x11/py-pyperclip, devel/py-approvaltests

(adam)

py-approvaltests: updated to 0.2.8

0.2.8:
Unknown changes

(adam)

py-pyperclip: updated to 1.8.1

1.8.1:
Unknown changes

(adam)

Updated lang/nodejs10, net/wireshark, databases/sqlitebrowser

(adam)

wireshark: updated to 3.4.0

Wireshark 3.4.0

New and Updated Features

The following features are new (or have been significantly updated) since version 3.4.0rc1:

Nothing of note.

The following features are new (or have been significantly updated) since version 3.3.1:

The Protobuf fields defined as google.protobuf.Timestamp type of Protobuf standard library can now be dissected as Wireshark fields of absolute time type.

The following features are new (or have been significantly updated) since version 3.3.0:

The Windows installers now ship with Npcap 1.00. They previously shipped with Npcap 0.9997.

The Windows installers now ship with Qt 5.15.1. They previously shipped with Qt 5.12.8.

The following features are new (or have been significantly updated) since version 3.2.0:

Windows executables and installers are now signed using SHA-2 only.

Save RTP stream to .au supports any codec with 8000 Hz rate supported by Wireshark (shown in RTP player). If save of audio is not possible (unsupported codec or rate), silence of same length is saved and warning is shown.

Asynchronous DNS resolution is always enabled. As a result, the c-ares library is now a required dependency.

Protobuf fields can be dissected as Wireshark (header) fields that allows user input the full names of Protobuf fields or messages in Filter toolbar for searching.

Dissectors based on Protobuf can register themselves to a new 'protobuf_field' dissector table, which is keyed with the full names of fields, for further parsing fields of BYTES or STRING type.

Wireshark is able to decode, play, and save iLBC payload on platforms where the iLBC library is available.

Wireshark is able to decode, play, and save opus payload on platforms where the opus library is available.

“Decode As” entries can now be copied from other profiles using a button in the dialog.

sshdump can now be copied to multiple instances. Each instance will show up a different interface and will have its own profile.

The main window now supports a packet diagram view, which shows each packet as a textbook-style diagram.

Filter buttons (“Preferences → Filter Buttons”) can be grouped by using “//” as a path separator in the filter button label.

IPP Over USB packets can now be dissected and displayed

New Protocol Support

Arinc 615A (A615A), Asphodel Protocol, AudioCodes Debug Recording (ACDR), Bluetooth HCI ISO (BT HCI ISO), Cisco MisCabling Protocol (MCP), Community ID Flow Hashing (CommunityID), DCE/RPC IRemoteWinspool SubSystem, (IREMOTEWINSPOOL), Dynamic Link Exchange Protocol (DLEP), EAP Generalized Pre-Shared Key (EAP-GPSK), EAP Password Authenticated Exchange (EAP-PAX), EAP Pre-Shared Key (EAP-PSK), EAP Shared-secret Authentication and Key Establishment (EAP-SAKE), Fortinet Single Sign-on (FSSO), FTDI Multi-Protocol Synchronous Serial Engine (FTDI MPSSE), Hypertext Transfer Protocol Version 3 (HTTP3), ILDA Digital Network (IDN), Java Debug Wire Protocol (JDWP), LBM Stateful Resolution Service (LBMSRS), Lithionics Battery Management, .NET Message Framing Protocol (MC-NMF), .NET NegotiateStream Protocol (MS-NNS), OBSAI UDP-based Communication Protocol (UDPCP), Palo Alto Heartbeat Backup (PA-HB-Bak), ScyllaDB RPC, Technically Enhanced Capture Module Protocol (TECMP), Tunnel Extensible Aut
hentication Protocol (TEAP), UDP based FTP w/ multicast V5 (UFTP5), and USB Printer (USBPRINTER)

Updated Protocol Support

Too many protocols have been updated to list here.

New and Updated Capture File Support

MP4 (ISO/IEC 14496-12)

(adam)

sqlitebrowser: updated to 3.12.1

DB Browser for SQLite 3.12.1

This is the first bug fix release for our 3.12.x series.

There aren't any "super critical must upgrade" bugs fixed, so updating isn't urgent. �沽�

The changes in this over the 3.12.0 release include:

Enhancements

Completely reworked interface for accessing DBHub.io
Add .Net DateTime.Ticks to list of supported display formats
Add more options for setting font sizes
New predefined settings for simplified window layout

Bug fixes

Fix loading of project files with empty filter values
Fix initial table view when using the -t / --table command line option
Add status message when opening a file from the recent file list (4dfe4f7)
Make sure to not show "NULL" for empty but non-NULL values in the Edit dialog
Fix plot being drawn before all data is loaded
Restore original default for having condition format in filter line (f28ecc0)
Fix default font in the format toolbar (c4b2ffc)
Improve binary detection for cases starting by chance by a BOM
Make sure the order of the statements in the SQL log is correct (05db901)
Fix executing selected SQL text when there are multi-byte characters
Fix executing SQL queries with compound operators
Fix SQL import of files with BOM
Also update schema when clicking the Refresh button in Browse Data tab (16c3d8d)
Select column in table results when column header is pressed
Tweak the output wording for command line options
Remove the default property of the cancel button in the "Fetching data..." dialog
Fix not being saved and not applied when modifying database cells in Windows external program (f2d8f79)
Fix incorrect display of SQL calltips containing non-US-ASCII characters (9f7851b)
Fix to 'Window Layout' options work properly

Building and packaging

Fix CMake warning during compilation (115aa00)
snap: Add environment variables to set Qt theme (7b5d652)
Updated to OpenSSL 1.1.1h for the Windows and macOS builds

Platform specific

No longer force Light theme on macOS when "Follow the desktop style" is chosen (508118f)
Keep registry key consistent on Windows
Allow use of integrated graphics card instead of high performance graphics card in macOS
Use native path separators in Preferences dialog (f38b829)
Added message box for informative command line arguments for Windows

(adam)

nodejs10: updated to 10.23.0

Version 10.23.0 'Dubnium' (LTS)

Notable changes

deps:
upgrade npm to 6.14.8

n-api:
create N-API version 7
expose napi_build_version variable

tools:
add debug entitlements for macOS 10.15+

(adam)

postgresql13-contrib: PLIST fix for uuid

(adam)

Updated databases/prometheus, graphics/jasper

(adam)

jasper: updated to 2.0.22

2.0.22:
* Update manual
* Remove JPEG dummy codec. Jasper needs libjpeg for JPEG support
* Fix test suite build failure regarding disabled MIF codec
* Fix OpenGL/glut detection

(adam)

prometheus: updated to 2.22.1

2.22.1
* [BUGFIX] Fix potential "mmap: invalid argument" errors in loading the head chunks, after an unclean shutdown, by performing read repairs.
* [BUGFIX] Fix serving metrics and API when reloading scrape config.
* [BUGFIX] Fix head chunk size calculation for size based retention.

(adam)

Updated devel/waf, textproc/py-css-parser

(adam)

py-css-parser: updated to 1.0.6

1.0.6:
Unknown changes

(adam)

waf: updated to 2.0.21

NEW IN WAF 2.0.21
-----------------
* Set the default --msvc_version from VSCMD_VER if present
* Force unit-test reruns on ut_str, ut_cmd or ut_path changes
* Describe Qt5's library detection
* Introduce conf.env.ASMDEFINES_ST to enable assembly-specific define flags
* Update extras/xcode6 to Python3
* Enable parameter "always" in extras/doxygen
* Fix extras/c_dumbpreproc as it was previously broken
* Fix extras/gccdeps and extras/msvcdeps on header renaming
* Improve extras/msvcdeps debug outputs and flags
* Add add MCST Elbrus CPU detection in c config
* Add minio object copies to extras/wafcache

(adam)

Updated net/py-botocore, net/py-boto3, net/py-awscli

(adam)

py-awscli: updated to 1.18.176

1.18.176
api-change:amplify: Update amplify command to latest version
api-change:databrew: Update databrew command to latest version
api-change:servicecatalog: Update servicecatalog command to latest version
api-change:quicksight: Update quicksight command to latest version
api-change:mediaconvert: Update mediaconvert command to latest version
api-change:forecast: Update forecast command to latest version

1.18.175
api-change:elbv2: Update elbv2 command to latest version
api-change:ssm: Update ssm command to latest version
api-change:autoscaling: Update autoscaling command to latest version
api-change:ec2: Update ec2 command to latest version

1.18.174
api-change:s3: Update s3 command to latest version
api-change:iotanalytics: Update iotanalytics command to latest version
api-change:macie2: Update macie2 command to latest version
api-change:es: Update es command to latest version
api-change:ssm: Update ssm command to latest version
api-change:storagegateway: Update storagegateway command to latest version
api-change:dynamodb: Update dynamodb command to latest version
api-change:datasync: Update datasync command to latest version
api-change:ecs: Update ecs command to latest version
api-change:fsx: Update fsx command to latest version

1.18.173
api-change:medialive: Update medialive command to latest version
api-change:ec2: Update ec2 command to latest version
api-change:dlm: Update dlm command to latest version
api-change:iotsitewise: Update iotsitewise command to latest version
api-change:ssm: Update ssm command to latest version

1.18.172
api-change:frauddetector: Update frauddetector command to latest version
api-change:events: Update events command to latest version
api-change:dynamodb: Update dynamodb command to latest version
api-change:lambda: Update lambda command to latest version
api-change:appmesh: Update appmesh command to latest version
api-change:ec2: Update ec2 command to latest version
api-change:rds: Update rds command to latest version
api-change:kendra: Update kendra command to latest version
api-change:es: Update es command to latest version

1.18.171
api-change:iot: Update iot command to latest version
api-change:ec2: Update ec2 command to latest version
api-change:cloudwatch: Update cloudwatch command to latest version
api-change:xray: Update xray command to latest version
api-change:es: Update es command to latest version
api-change:mq: Update mq command to latest version
api-change:autoscaling: Update autoscaling command to latest version
api-change:servicecatalog: Update servicecatalog command to latest version
api-change:meteringmarketplace: Update meteringmarketplace command to latest version

1.18.170
api-change:ec2: Update ec2 command to latest version

1.18.169
api-change:elasticache: Update elasticache command to latest version
api-change:imagebuilder: Update imagebuilder command to latest version
api-change:macie2: Update macie2 command to latest version
api-change:medialive: Update medialive command to latest version
api-change:braket: Update braket command to latest version
api-change:dms: Update dms command to latest version
api-change:sns: Update sns command to latest version

1.18.168
api-change:elbv2: Update elbv2 command to latest version
api-change:codeartifact: Update codeartifact command to latest version
api-change:sesv2: Update sesv2 command to latest version
api-change:marketplacecommerceanalytics: Update marketplacecommerceanalytics command to latest version
api-change:apigateway: Update apigateway command to latest version
api-change:ec2: Update ec2 command to latest version
api-change:storagegateway: Update storagegateway command to latest version

1.18.167
api-change:ec2: Update ec2 command to latest version
api-change:workmail: Update workmail command to latest version
api-change:iot: Update iot command to latest version

1.18.166
api-change:glue: Update glue command to latest version

1.18.165
api-change:neptune: Update neptune command to latest version
api-change:kendra: Update kendra command to latest version
api-change:sagemaker: Update sagemaker command to latest version

1.18.164
api-change:macie2: Update macie2 command to latest version
api-change:mediatailor: Update mediatailor command to latest version
api-change:quicksight: Update quicksight command to latest version

1.18.163
api-change:servicecatalog: Update servicecatalog command to latest version
api-change:appflow: Update appflow command to latest version
api-change:sns: Update sns command to latest version
api-change:accessanalyzer: Update accessanalyzer command to latest version

(adam)

py-boto3: updated to 1.16.16

1.16.16
api-change:mediaconvert: [botocore] Update mediaconvert client to latest version
api-change:servicecatalog: [botocore] Update servicecatalog client to latest version
api-change:databrew: [botocore] Update databrew client to latest version
api-change:forecast: [botocore] Update forecast client to latest version
api-change:amplify: [botocore] Update amplify client to latest version
api-change:quicksight: [botocore] Update quicksight client to latest version

1.16.15
api-change:ec2: [botocore] Update ec2 client to latest version
api-change:elbv2: [botocore] Update elbv2 client to latest version
api-change:autoscaling: [botocore] Update autoscaling client to latest version
api-change:ssm: [botocore] Update ssm client to latest version

1.16.14
api-change:dynamodb: [botocore] Update dynamodb client to latest version
api-change:es: [botocore] Update es client to latest version
api-change:fsx: [botocore] Update fsx client to latest version
api-change:macie2: [botocore] Update macie2 client to latest version
api-change:iotanalytics: [botocore] Update iotanalytics client to latest version
api-change:s3: [botocore] Update s3 client to latest version
api-change:storagegateway: [botocore] Update storagegateway client to latest version
api-change:ssm: [botocore] Update ssm client to latest version
api-change:ecs: [botocore] Update ecs client to latest version
api-change:datasync: [botocore] Update datasync client to latest version

1.16.13
api-change:ssm: [botocore] Update ssm client to latest version
api-change:ec2: [botocore] Update ec2 client to latest version
api-change:iotsitewise: [botocore] Update iotsitewise client to latest version
api-change:medialive: [botocore] Update medialive client to latest version
api-change:dlm: [botocore] Update dlm client to latest version

1.16.12
api-change:frauddetector: [botocore] Update frauddetector client to latest version
api-change:rds: [botocore] Update rds client to latest version
api-change:kendra: [botocore] Update kendra client to latest version
api-change:events: [botocore] Update events client to latest version
api-change:dynamodb: [botocore] Update dynamodb client to latest version
api-change:lambda: [botocore] Update lambda client to latest version
api-change:es: [botocore] Update es client to latest version
api-change:ec2: [botocore] Update ec2 client to latest version
api-change:appmesh: [botocore] Update appmesh client to latest version

1.16.11
api-change:cloudwatch: [botocore] Update cloudwatch client to latest version
api-change:es: [botocore] Update es client to latest version
api-change:xray: [botocore] Update xray client to latest version
api-change:mq: [botocore] Update mq client to latest version
api-change:iot: [botocore] Update iot client to latest version
api-change:meteringmarketplace: [botocore] Update meteringmarketplace client to latest version
api-change:autoscaling: [botocore] Update autoscaling client to latest version
api-change:ec2: [botocore] Update ec2 client to latest version
api-change:servicecatalog: [botocore] Update servicecatalog client to latest version

1.16.10
api-change:ec2: [botocore] Update ec2 client to latest version

1.16.9
api-change:medialive: [botocore] Update medialive client to latest version
api-change:dms: [botocore] Update dms client to latest version
api-change:macie2: [botocore] Update macie2 client to latest version
api-change:imagebuilder: [botocore] Update imagebuilder client to latest version
api-change:braket: [botocore] Update braket client to latest version
api-change:sns: [botocore] Update sns client to latest version
api-change:elasticache: [botocore] Update elasticache client to latest version

1.16.8
api-change:elbv2: [botocore] Update elbv2 client to latest version
api-change:codeartifact: [botocore] Update codeartifact client to latest version
api-change:marketplacecommerceanalytics: [botocore] Update marketplacecommerceanalytics client to latest version
api-change:apigateway: [botocore] Update apigateway client to latest version
api-change:sesv2: [botocore] Update sesv2 client to latest version
api-change:ec2: [botocore] Update ec2 client to latest version
api-change:storagegateway: [botocore] Update storagegateway client to latest version

1.16.7
api-change:ec2: [botocore] Update ec2 client to latest version
api-change:iot: [botocore] Update iot client to latest version
api-change:workmail: [botocore] Update workmail client to latest version

1.16.6
api-change:glue: [botocore] Update glue client to latest version

1.16.5
api-change:sagemaker: [botocore] Update sagemaker client to latest version
api-change:neptune: [botocore] Update neptune client to latest version
api-change:kendra: [botocore] Update kendra client to latest version

1.16.4
api-change:mediatailor: [botocore] Update mediatailor client to latest version
api-change:quicksight: [botocore] Update quicksight client to latest version
api-change:macie2: [botocore] Update macie2 client to latest version

1.16.3
api-change:servicecatalog: [botocore] Update servicecatalog client to latest version
api-change:sns: [botocore] Update sns client to latest version
api-change:accessanalyzer: [botocore] Update accessanalyzer client to latest version
api-change:appflow: [botocore] Update appflow client to latest version

(adam)

py-botocore: updated to 1.19.16

1.19.16
api-change:mediaconvert: Update mediaconvert client to latest version
api-change:servicecatalog: Update servicecatalog client to latest version
api-change:databrew: Update databrew client to latest version
api-change:forecast: Update forecast client to latest version
api-change:amplify: Update amplify client to latest version
api-change:quicksight: Update quicksight client to latest version

1.19.15
api-change:ec2: Update ec2 client to latest version
api-change:elbv2: Update elbv2 client to latest version
api-change:autoscaling: Update autoscaling client to latest version
api-change:ssm: Update ssm client to latest version

1.19.14
api-change:dynamodb: Update dynamodb client to latest version
api-change:es: Update es client to latest version
api-change:fsx: Update fsx client to latest version
api-change:macie2: Update macie2 client to latest version
api-change:iotanalytics: Update iotanalytics client to latest version
api-change:s3: Update s3 client to latest version
api-change:storagegateway: Update storagegateway client to latest version
api-change:ssm: Update ssm client to latest version
api-change:ecs: Update ecs client to latest version
api-change:datasync: Update datasync client to latest version

1.19.13
api-change:ssm: Update ssm client to latest version
api-change:ec2: Update ec2 client to latest version
api-change:iotsitewise: Update iotsitewise client to latest version
api-change:medialive: Update medialive client to latest version
api-change:dlm: Update dlm client to latest version

1.19.12
api-change:frauddetector: Update frauddetector client to latest version
api-change:rds: Update rds client to latest version
api-change:kendra: Update kendra client to latest version
api-change:events: Update events client to latest version
api-change:dynamodb: Update dynamodb client to latest version
api-change:lambda: Update lambda client to latest version
api-change:es: Update es client to latest version
api-change:ec2: Update ec2 client to latest version
api-change:appmesh: Update appmesh client to latest version

1.19.11
api-change:cloudwatch: Update cloudwatch client to latest version
api-change:es: Update es client to latest version
api-change:xray: Update xray client to latest version
api-change:mq: Update mq client to latest version
api-change:iot: Update iot client to latest version
api-change:meteringmarketplace: Update meteringmarketplace client to latest version
api-change:autoscaling: Update autoscaling client to latest version
api-change:ec2: Update ec2 client to latest version
api-change:servicecatalog: Update servicecatalog client to latest version

1.19.10
api-change:ec2: Update ec2 client to latest version

1.19.9
api-change:medialive: Update medialive client to latest version
api-change:dms: Update dms client to latest version
api-change:macie2: Update macie2 client to latest version
api-change:imagebuilder: Update imagebuilder client to latest version
api-change:braket: Update braket client to latest version
api-change:sns: Update sns client to latest version
api-change:elasticache: Update elasticache client to latest version

1.19.8
api-change:elbv2: Update elbv2 client to latest version
api-change:codeartifact: Update codeartifact client to latest version
api-change:marketplacecommerceanalytics: Update marketplacecommerceanalytics client to latest version
api-change:apigateway: Update apigateway client to latest version
api-change:sesv2: Update sesv2 client to latest version
api-change:ec2: Update ec2 client to latest version
api-change:storagegateway: Update storagegateway client to latest version

1.19.7
api-change:ec2: Update ec2 client to latest version
api-change:iot: Update iot client to latest version
api-change:workmail: Update workmail client to latest version

1.19.6
api-change:glue: Update glue client to latest version

1.19.5
api-change:sagemaker: Update sagemaker client to latest version
api-change:neptune: Update neptune client to latest version
api-change:kendra: Update kendra client to latest version

1.19.4
api-change:mediatailor: Update mediatailor client to latest version
api-change:quicksight: Update quicksight client to latest version
api-change:macie2: Update macie2 client to latest version

1.19.3
api-change:servicecatalog: Update servicecatalog client to latest version
api-change:sns: Update sns client to latest version
api-change:accessanalyzer: Update accessanalyzer client to latest version
api-change:appflow: Update appflow client to latest version

(adam)

Updated net/py-smbc, devel/py-requests

(adam)

py-requests: updated to 2.25.0

2.25.0

Improvements
Added support for NETRC environment variable.

Dependencies
Requests now supports urllib3 v1.26.

Deprecations
Requests v2.25.x will be the last release series with support for Python 3.5.
The requests[security] extra is officially deprecated and will be removed in Requests v2.26.0.

(adam)

py-smbc: updated to 1.0.23

1.0.23:
Unknown changes

(adam)

Updated www/py-urllib3, www/py-bottle

(adam)

py-bottle: updated to 0.12.19

0.12.19:
Bug fixes

(adam)

py-urllib3: updated to 1.26.1

1.26.1 (2020-11-11)
-------------------
* Fixed an issue where two ``User-Agent`` headers would be sent if a
  ``User-Agent`` header key is passed as ``bytes``

1.26.0 (2020-11-10)
-------------------
* **NOTE: urllib3 v2.0 will drop support for Python 2**.
  `Read more in the v2.0 Roadmap <https://urllib3.readthedocs.io/en/latest/v2-roadmap.html>`_.
* Added support for HTTPS proxies contacting HTTPS servers
* Deprecated negotiating TLSv1 and TLSv1.1 by default. Users that
  still wish to use TLS earlier than 1.2 without a deprecation warning
  should opt-in explicitly by setting ``ssl_version=ssl.PROTOCOL_TLSv1_1``
  **Starting in urllib3 v2.0: Connections that receive a ``DeprecationWarning`` will fail**
* Deprecated ``Retry`` options ``Retry.DEFAULT_METHOD_WHITELIST``, ``Retry.DEFAULT_REDIRECT_HEADERS_BLACKLIST``
  and ``Retry(method_whitelist=...)`` in favor of ``Retry.DEFAULT_ALLOWED_METHODS``,
  ``Retry.DEFAULT_REMOVE_HEADERS_ON_REDIRECT``, and ``Retry(allowed_methods=...)``
* Added default ``User-Agent`` header to every request
* Added ``urllib3.util.SKIP_HEADER`` for skipping ``User-Agent``, ``Accept-Encoding``,
  and ``Host`` headers from being automatically emitted with requests
* Collapse ``transfer-encoding: chunked`` request data and framing into
  the same ``socket.send()`` call
* Send ``http/1.1`` ALPN identifier with every TLS handshake by default
* Properly terminate SecureTransport connections when CA verification fails
* Don't emit an ``SNIMissingWarning`` when passing ``server_hostname=None``
  to SecureTransport
* Disabled requesting TLSv1.2 session tickets as they weren't being used by urllib3
* Suppress ``BrokenPipeError`` when writing request body after the server
  has closed the socket
* Wrap ``ssl.SSLError`` that can be raised from reading a socket (e.g. "bad MAC")
  into an ``urllib3.exceptions.SSLError``

(adam)

Updated databases/ldb, net/samba4

(adam)

samba4: updated to 4.13.2

Changes since 4.13.1
--------------------
  * BUG 14486: s3: modules: vfs_glusterfs: Fix leak of char
    **lines onto mem_ctx on return.
  * BUG 14471: RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special.
  * BUG 14538: smb.conf.5: Add clarification how configuration changes
    reflected by Samba.
  * BUG 14552: daemons: Report status to systemd even when running in
    foreground.
  * BUG 14553: DNS Resolver: Support both dnspython before and after 2.0.0.
  * BUG 14486: s3-vfs_glusterfs: Refuse connection when write-behind xlator is
    present.
  * BUG 14487: provision: Add support for BIND 9.16.x.
  * BUG 14537: ctdb-common: Avoid aliasing errors during code optimization.
  * BUG 14541: libndr: Avoid assigning duplicate versions to symbols.
  * BUG 14522: docs: Fix default value of spoolss:architecture.
  * BUG 14388: winbind: Fix a memleak.
  * BUG 14531: s4:dsdb:acl_read: Implement "List Object" mode feature.
  * BUG 14486: docs-xml/manpages: Add warning about write-behind translator for
    vfs_glusterfs.
  * nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h.
  * BUG 14530: vfs_shadow_copy2: Avoid closing snapsdir twice.
  * BUG 14547: third_party: Update resolv_wrapper to version 1.1.7.
  * BUG 14550: examples:auth: Do not install example plugin.
  * BUG 14513: ctdb-recoverd: Drop unnecessary and broken code.
  * BUG 14471: RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special.

Changes since 4.13.0
--------------------
  * BUG 14434: CVE-2020-14318: s3: smbd: Ensure change notifies can't get set
    unless the directory handle is open for SEC_DIR_LIST.
  * BUG 12795: CVE-2020-14383: Remote crash after adding NS or MX records using
    'samba-tool'.
  * BUG 14472: CVE-2020-14383: Remote crash after adding MX records.
  * BUG 14436: CVE-2020-14323: winbind: Fix invalid lookupsids DoS.

4.31.0:
NEW FEATURES/CHANGES
====================

Python 3.6 or later required
----------------------------
Samba's minimum runtime requirement for python was raised to Python
3.5 with samba 4.12.  Samba 4.13 raises this minimum version to Python
3.6 both to access new features and because this is the oldest version
we test with in our CI infrastructure.

This is also the last release where it will be possible to build Samba
(just the file server) with Python versions 2.6 and 2.7.

As Python 2.7 has been End Of Life upstream since April 2020, Samba
is dropping ALL Python 2.x support in the NEXT release.

Samba 4.14 to be released in March 2021 will require Python 3.6 or
later to build.

wide links functionality
------------------------
For this release, the code implementing the insecure "wide links = yes"
functionality has been moved out of the core smbd code and into a separate
VFS module, vfs_widelinks. Currently this vfs module is implicitly loaded
by smbd as the last but one module before vfs_default if "wide links = yes"
is enabled on the share (note, the existing restrictions on enabling wide
links around the SMB1 "unix extensions" and the "allow insecure wide links"
parameters are still in force). The implicit loading was done to allow
existing users of "wide links = yes" to keep this functionality without
having to make a change to existing working smb.conf files.

Please note that the Samba developers recommend changing any Samba
installations that currently use "wide links = yes" to use bind mounts
as soon as possible, as "wide links = yes" is an inherently insecure
configuration which we would like to remove from Samba. Moving the
feature into a VFS module allows this to be done in a cleaner way
in future.

A future release to be determined will remove this implicit linkage,
causing administrators who need this functionality to have to explicitly
add the vfs_widelinks module into the "vfs objects =" parameter lists.
The release notes will be updated to note this change when it occurs.

NT4-like 'classic' Samba domain controllers
-------------------------------------------
Samba 4.13 deprecates Samba's original domain controller mode.

Sites using Samba as a Domain Controller should upgrade from the
NT4-like 'classic' Domain Controller to a Samba Active Directory DC
to ensure full operation with modern windows clients.

SMBv1 only protocol options deprecated
--------------------------------------
A number of smb.conf parameters for less-secure authentication methods
which are only possible over SMBv1 are deprecated in this release.

(adam)

ldb: updated to 2.2.0

2.2.0:
Unknown changes

(adam)

Updated databases/openldap

(adam)

openldap: updated to 2.4.56

OpenLDAP 2.4.56
Fixed slapd to remove assert in certificateListValidate
Fixed slapd to remove assert in csnNormalize23
Fixed slapd to better parse ldapi listener URIs

(adam)

Updated textproc/py-xmlschema, net/py-lexicon

(adam)

py-lexicon: updated to 3.4.5

3.4.5:

Added

Add pagination support to Google Cloud DNS provider
Add official support to Python 3.9
Add SSHFP record support to CloudFlare provider (library only)

Modified

Fix create/update operations when CAA records are presents in GoDaddy provider
Fix Hover provider with new authentication URL

(adam)

py-xmlschema: updated to 1.3.0

v1.3.0:
* Drop support for Python 3.5
* Add XmlDocument and Wsdl11Document classes
* Refactoring of XMLResource to support ElementTree-like XPath API
  on both full and lazy modes

(adam)

Updated finance/py-braintree, www/py-asgiref

(adam)

py-asgiref: update to 3.3.1

3.3.1:
Unknown changes

(adam)

py-braintree: updated to 4.5.0

4.5.0
Add acquirer_reference_number to Transaction
Deprecate recurring in Transaction sale requests

(adam)

Updated lang/py-mypy, security/py-josepy

(adam)

py-josepy: updated to 1.5.0

1.5.0
* Added support for Python 3.9.
* Dropped support for Python 3.5.
* Stopped supporting running tests with ``python setup.py test`` which is
  deprecated in favor of ``python -m pytest``.

(adam)

py-mypy: updated to 0.790

0.790:
Bug Fixes
Fix disable_error_code config file option
Fix partial type crash during protocol checking
Store the type for assignment expression
Always type check arguments when using --disallow-untyped-calls
Make None compatible with Hashable
Don't infinite loop on self dependencies in --follow-imports=normal
Don't simplify away Any when joining union types
Check for deleted vars in raise from
Fix corner case for comparing nested overloads
Fix issues with async for and with statements
Fix internal error on list/dict comprehension with walrus operator in global scope
Fix propagation of module-specific options to the parser
Fix crash when super is called outside a method
Fix untyped decorator overload error on class decorator with __call__ overloads
Clean up terminal width handling
Add keyword arguments for functional Enum API
Validate follow_imports values in mypy.ini
Fix *expr in an assigned expression
Don't consider comparing True and False as a dangerous comparison
Make reveal_type work with call expressions returning None

Error Reporting Improvements
Improve missing module error for subdirectories
Clarify bytes formatting error messages
Fix misleading follow_imports error message in dmypy
Use [arg-type] error code for additional argument type error messages
Report some additional serious errors in junit.xml
Report note about binary operation on the same location as error message

Documentation Updates
Document disable_error_code config file option
Add cross references to config file values
Add cross references to additional config values, and missing plugins config value, and document --help option for stubgen
Remove note that Final is experimental and suggest importing it from typing
Discuss unreachable code as a common issue

Stubgen Improvements
Improve property type detection in extension modules
Fix type stubgen crash caused by invalid type annotation
Import Iterable and Iterator from typing in generated stubs

Other Improvements
Speed up type checking of unions containing many literal string types
Add scripts to misc/

(adam)

Updated security/py-google-auth, security/py-google-auth-oauthlib, devel/py-google-api-core, www/py-google-api-python-client

(adam)

py-google-api-python-client: updated to 1.12.5

1.12.5:
Bug Fixes
don't raise when downloading zero byte files

(adam)

py-google-api-core: updated to 1.23.0

1.23.0:

Features

api-core: pass retry from result() to done()

Bug Fixes

map LRO errors to library exception types
harden install to use full paths, and windows separators on windows
update out-of-date comment in exceptions.py

(adam)

py-google-auth-oauthlib: updated to 0.4.2

0.4.2:
Bug Fixes
don't open browser if port is occupied

(adam)

py-google-auth: updated to 1.23.0

1.23.0:

Features

Add custom scopes for access tokens from the metadata service

Bug Fixes

deps: Revert "fix: pin 'aoihttp < 3.7.0dev'
pin 'aoihttp < 3.7.0dev'
remove checks for ancient versions of Cryptography

(adam)

Updated sysutils/py-sh, devel/py-dotenv

(adam)

py-dotenv: updated to 0.15.0

0.15.0:

Added
- Add `--export` option to `set` to make it prepend the binding with `export`

Changed
- Make `set` command create the `.env` file in the current directory if no `.env` file was
  found.

Fixed
- Fix potentially empty expanded value for duplicate key.
- Fix import error on Python 3.5.0 and 3.5.1.
- Fix parsing of unquoted values containing several adjacent space or tab characters

(adam)

py-sh: updated to 1.14.1

1.14.1:
* bugfix where setting `_ok_code` to not include 0, but 0 was the exit code

1.14.0:
* `_env` now more lenient in accepting dictionary-like objects
* `None` and `False` arguments now do not pass through to underlying command
* Implemented `find_spec` on the fancy importer, which fixes some Python3.4+

(adam)

Updated databases/py-peewee, devel/py-pathspec

(adam)

py-pathspec: updated to 0.8.1

0.8.1:
Add support for addition operator.

(adam)

py-peewee: updated to 3.14.0

3.14.0

This release has been a bit overdue and there are numerous small improvements
and bug-fixes. The bugfix that prompted this release is 2293, which is a
regression in the Django-inspired .filter() APIs that could cause some
filter expressions to be discarded from the generated SQL. Many thanks for the
excellent bug report, Jakub.

Add an experimental helper, shortcuts.resolve_multimodel_query(), for resolving multiple models used in a compound select query.
Add a lateral() method to select query for use with lateral joins.
Added support for nested transactions (savepoints) in cockroach-db (requires 20.1 or newer).
Automatically escape wildcards passed to string-matching methods.
Allow index-type to be specified on MySQL.
Added a new API, converter() to be used for specifying a function to use to convert a row-value pulled off the cursor.
Add set() and clear() method to the bitfield flag descriptor.
Add support for range types with IN and other expressions.
Support CTEs bound to compound select queries.

Bug-fixes

Fix to return related object id when accessing via the object-id descriptor, when the related object is not populated.
Fix to ensure we do not insert a NULL value for a primary key.
Fix to conditionally set the field/column on an added column in a migration.
Apply field conversion logic to model-class values.
Clone node before modifying it to be flat in an enclosed nodelist expr.
Fix an invalid item assignment in nodelist.
Fix an incorrect truthiness check used with save() and only=.
Fix regression in filter() where using both *args and **kwargs caused the expressions passed as args to be discarded.

(adam)

Updated security/py-cryptodome, textproc/py-elementpath

(adam)

py-elementpath: updated to 2.0.4

v2.0.4:
* Lazy tokenizer for parser classes in order to minimize import time

(adam)

py-cryptodome: updated to 3.9.9

3.9.9:

Resolved issues
* Fixed ``Crypto.Util.number.size`` for negative numbers.

New features
* Build Python 3.9 wheels on Windows.

(adam)

Updated textproc/py-ICU, databases/py-pypika

(adam)

py-pypika: updated to 0.43.1

0.43.1:
Unknown changes

(adam)

py-ICU: updated to 2.6

Version 2.5 -> 2.6
------------------
- added missing BreakIterator.getRuleStatus() wrapper
- added wrappers for UBiDi API
- added wrappers for UBiDiTransform API
- added support for ICU 68.1
- added wrappers for DateIntervalFormat.get/setContext()
- added wrapper for LocaleMatcher.isMatch()
- added wrapper for LocaleMatcherBuilder.setDirection()
- added wrappers LocaleMatcherBuilder.setMaxDistance(), setNoDefaultLocale()
- added wrappers for MeasureUnit.getComplexity() and UMeasureUnitComplexity
- added wrapper for MeasureUnit.getIdentifier()
- switched MeasureUnit.__str__() to use MeasureUnit::getIdentifier()
- added wrappers for new MeasureUnit static factory methods
- added wrapper for FormattedNumber.getOutputUnit()
- added wrapper for FormattedNumberRange.getDecimalNumbers()
- added wrappers for PluralRules.select(FormattedNumber|Range)

(adam)

libxml2: Fix building with ICU 68.1

(adam)

Updated graphics/py-pygraphviz, textproc/py-regex, devel/py-ipython, devel/py-pip

(adam)

py-pip: updated to 20.2.4

20.2.4 (2020-10-16)
===================

Deprecations and Removals
-------------------------
- Document that certain removals can be fast tracked.
- Document that Python versions are generally supported until PyPI usage falls below 5%.

Features
--------
- New resolver: Avoid accessing indexes when the installed candidate is preferred
  and considered good enough.
- Improve error message friendliness when an environment has packages with
  corrupted metadata.
- Cache package listings on index packages so they are guarenteed to stay stable
  during a pip command session. This also improves performance when a index page
  is accessed multiple times during the command session.
- New resolver: Tweak resolution logic to improve user experience when
  user-supplied requirements conflict.

Bug Fixes
---------
- New resolver: Correctly respect ``Requires-Python`` metadata to reject
  incompatible packages in ``--no-deps`` mode.
- New resolver: Pick up hash declarations in constraints files and use them to
  filter available distributions.
- New resolver: If a package appears multiple times in user specification with
  different ``--hash`` options, only hashes that present in all specifications
  should be allowed.

Improved Documentation
----------------------
- Add ux documentation

(adam)

py-ipython: updated to 7.19.0

IPython 7.19 accumulative two month of works, bug fixes and improvements, there
was exceptionally no release last month.

- Fix to restore the ability to specify more than one extension using command
  line flags when using traitlets 5.0
- Docs docs formatting that make the install commands work on zsh
- Always display the last frame in tracebacks even if hidden with
  ``__traceback_hide__``
- Avoid an issue where a callback can be registered multiple times.
- Avoid an issue in debugger mode where frames changes could be lost.
- Never hide the frames that invoke a debugger, even if marked as hidden by
  ``__traceback_hide__``
- Fix calling the debugger in a recursive manner

(adam)

py-regex: updated to 2020.10.28

2020.10.28:
Unknown changes

(adam)

py-pygraphviz: updated to 1.6

pygraphviz-1.6

Add Python 3.8 support
Drop Python 2.7 support
Update to SWIG 4.0.1

(adam)

Updated www/py-bleach, textproc/py-readme_renderer

(adam)

py-readme_renderer: updated to 28.0

28.0
Support Python 3.9

27.0
Add support for align attribute rendering Markdown headers

(adam)

py-bleach: updated to 3.2.1

Version 3.2.1
* change linkifier to add rel="nofollow" as documented.
* suppress html5lib sanitizer DeprecationWarnings

Version 3.2.0
* ``html5lib`` dependency to version 1.1.0.
* update tests_website terminology.

(adam)

Updated www/py-django2, www/py-django3

(adam)

py-django3: updated to 3.1.3

Django 3.1.3 fixes several bugs in 3.1.2 and adds compatibility with Python 3.9.

Bugfixes

Fixed a regression in Django 3.1.2 that caused the incorrect height of the admin changelist search bar
Fixed a regression in Django 3.1.2 that caused the incorrect width of the admin changelist search bar on a filtered page
Fixed displaying Unicode characters in forms.JSONField and read-only models.JSONField values in the admin
Fixed a regression in Django 3.1 that caused a crash of ArrayAgg and StringAgg with ordering on key transforms for JSONField
Fixed a regression in Django 3.1 that caused a crash of __in lookup when using key transforms for JSONField in the lookup value
Fixed a regression in Django 3.1 that caused a crash of ExpressionWrapper with key transforms for JSONField
Fixed a regression in Django 3.1 that caused a migrations crash on PostgreSQL when adding an ExclusionConstraint with key transforms for JSONField in expressions
Fixed a regression in Django 3.1 where ProtectedError.protected_objects and RestrictedError.restricted_objects attributes returned iterators instead of set of objects
Fixed a regression in Django 3.1.2 that caused incorrect form input layout on small screens in the admin change form view
Fixed a regression in Django 3.1 that invalidated pre-Django 3.1 password reset tokens
Added support for asgiref 3.3
Fixed a regression in Django 3.1 that caused incorrect textarea layout on medium-sized screens in the admin change form view with the sidebar open
Fixed a regression in Django 3.0.7 that didn窶冲 use Subquery() aliases in the GROUP BY clause

(adam)

py-django2: updated to 2.2.17

Django 2.2.17 adds compatibility with Python 3.9.

(adam)

Updated textproc/py-toml, databases/py-aiosqlite

(adam)

py-aiosqlite: updated to 0.16.0

v0.16.0
-------
Feature release
* Improved performance for async iteration on cursors
* Support for deterministic user functions in Python 3.8+
* Reduced logging severity for exceptions returned from children
* Fix InvalidStateError when setting future results
* Allow user to catch exceptions from `close()`
* Tested under Python 3.9

(adam)

py-toml: updated to 0.10.2

0.10.2:
Unknown changes

(adam)

Updated devel/git, devel/py-gitpython

(adam)

py-gitpython: updated to 3.1.11

3.1.11

Fixes regression of 3.1.10.

See the following for details:
https://github.com/gitpython-developers/gitpython/milestone/43?closed=1*

(adam)

git: updated to 2.29.2

Git v2.29.2 Release Notes
=========================

This release is primarily to fix brown-paper-bag breakages in the
2.29.0 release.

Fixes since v2.29.1
-------------------

* In 2.29, "--committer-date-is-author-date" option of "rebase" and
  "am" subcommands lost the e-mail address by mistake, which has been
  corrected.

Git v2.29.1 Release Notes
=========================

This is to fix the build procedure change in 2.28 where we failed to
install a few programs that should be installed in /usr/bin (namely,
receive-pack, upload-archive and upload-pack) when the non-default
SKIP_DASHED_BUILT_INS installation option is in effect.

A minor glitch in a non-default installation may usually not deserve
a hotfix, but I know Git for Windows ship binaries built with this
option, so let's make an exception.

Git 2.29 Release Notes
======================

Updates since v2.28
-------------------

UI, Workflows & Features

* "git help log" has been enhanced by sharing more material from the
  documentation for the underlying "git rev-list" command.

* "git for-each-ref --format=<>" learned %(contents:size).

* "git merge" learned to selectively omit " into <branch>" at the end
  of the title of default merge message with merge.suppressDest
  configuration.

* The component to respond to "git fetch" request is made more
  configurable to selectively allow or reject object filtering
  specification used for partial cloning.

* Stop when "sendmail.*" configuration variables are defined, which
  could be a mistaken attempt to define "sendemail.*" variables.

* The existing backends for "git mergetool" based on variants of vim
  have been refactored and then support for "nvim" has been added.

* "git bisect" learns the "--first-parent" option to find the first
  breakage along the first-parent chain.

* "git log --first-parent -p" showed patches only for single-parent
  commits on the first-parent chain; the "--first-parent" option has
  been made to imply "-m".  Use "--no-diff-merges" to restore the
  previous behaviour to omit patches for merge commits.

* The commit labels used to explain each side of conflicted hunks
  placed by the sequencer machinery have been made more readable by
  humans.

* The "--batch-size" option of "git multi-pack-index repack" command
  is now used to specify that very small packfiles are collected into
  one until the total size roughly exceeds it.

* The recent addition of SHA-256 support is marked as experimental in
  the documentation.

* "git fetch" learned --no-write-fetch-head option to avoid writing
  the FETCH_HEAD file.

* Command line completion (in contrib/) usually omits redundant,
  deprecated and/or dangerous options from its output; it learned to
  optionally include all of them.

* The output from the "diff" family of the commands had abbreviated
  object names of blobs involved in the patch, but its length was not
  affected by the --abbrev option.  Now it is.

* "git worktree" gained a "repair" subcommand to help users recover
  after moving the worktrees or repository manually without telling
  Git.  Also, "git init --separate-git-dir" no longer corrupts
  administrative data related to linked worktrees.

* The "--format=" option to the "for-each-ref" command and friends
  learned a few more tricks, e.g. the ":short" suffix that applies to
  "objectname" now also can be used for "parent", "tree", etc.

* "git worktree add" learns that the "-d" is a synonym to "--detach"
  option to create a new worktree without being on a branch.

* "format-patch --range-diff=<prev> <origin>..HEAD" has been taught
  not to ignore <origin> when <prev> is a single version.

* "add -p" now allows editing paths that were only added in intent.

* The 'meld' backend of the "git mergetool" learned to give the
  underlying 'meld' the '--auto-merge' option, which would help
  reduce the amount of text that requires manual merging.

* "git for-each-ref" and friends that list refs used to allow only
  one --merged or --no-merged to filter them; they learned to take
  combination of both kind of filtering.

* "git maintenance", a "git gc"'s big brother, has been introduced to
  take care of more repository maintenance tasks, not limited to the
  object database cleaning.

* "git receive-pack" that accepts requests by "git push" learned to
  outsource most of the ref updates to the new "proc-receive" hook.

* "git push" that wants to be atomic and wants to send push
  certificate learned not to prepare and sign the push certificate
  when it fails the local check (hence due to atomicity it is known
  that no certificate is needed).

* "git commit-graph write" learned to limit the number of bloom
  filters that are computed from scratch with the --max-new-filters
  option.

* The transport protocol v2 has become the default again.

* The installation procedure learned to optionally omit "git-foo"
  executable files for each 'foo' built-in subcommand, which are only
  required by old timers that still rely on the age old promise that
  prepending "git --exec-path" output to PATH early in their script
  will keep the "git-foo" calls they wrote working.

* The command line completion (in contrib/) learned that "git restore
  -s <TAB>" is often followed by a refname.

* "git shortlog" has been taught to group commits by the contents of
  the trailer lines, like "Reviewed-by:", "Coauthored-by:", etc.

* "git archive" learns the "--add-file" option to include untracked
  files into a snapshot from a tree-ish.

* "git fetch" and "git push" support negative refspecs.

* "git format-patch" learns to take "whenAble" as a possible value
  for the format.useAutoBase configuration variable to become no-op
  when the  automatically computed base does not make sense.

* Credential helpers are now allowed to terminate lines with CRLF
  line ending, as well as LF line ending.

Performance, Internal Implementation, Development Support etc.

* The changed-path Bloom filter is improved using ideas from an
  independent implementation.

* Updates to the changed-paths bloom filter.

* The test framework has been updated so that most tests will run
  with predictable (artificial) timestamps.

* Preliminary clean-up of the refs API in preparation for adding a
  new refs backend "reftable".

* Dev support to limit the use of test_must_fail to only git commands.

* While packing many objects in a repository with a promissor remote,
  lazily fetching missing objects from the promissor remote one by
  one may be inefficient---the code now attempts to fetch all the
  missing objects in batch (obviously this won't work for a lazy
  clone that lazily fetches tree objects as you cannot even enumerate
  what blobs are missing until you learn which trees are missing).

* The pretend-object mechanism checks if the given object already
  exists in the object store before deciding to keep the data
  in-core, but the check would have triggered lazy fetching of such
  an object from a promissor remote.

* The argv_array API is useful for not just managing argv but any
  "vector" (NULL-terminated array) of strings, and has seen adoption
  to a certain degree.  It has been renamed to "strvec" to reduce the
  barrier to adoption.

* The final leg of SHA-256 transition plus doc updates.  Note that
  there is no interoperability between SHA-1 and SHA-256
  repositories yet.

* CMake support to build with MSVC for Windows bypassing the Makefile.

* A new helper function has_object() has been introduced to make it
  easier to mark object existence checks that do and don't want to
  trigger lazy fetches, and a few such checks are converted using it.

* A no-op replacement function implemented as a C preprocessor macro
  does not perform as good a job as one implemented as a "static
  inline" function in catching errors in parameters; replace the
  former with the latter in <git-compat-util.h> header.

* Test framework update.
  (merge d572f52a64 es/test-cmp-typocatcher later to maint).

* Updates to "git merge" tests, in preparation for a new merge
  strategy backend.

* midx and commit-graph files now use the byte defined in their file
  format specification for identifying the hash function used for
  object names.

* The FETCH_HEAD is now always read from the filesystem regardless of
  the ref backend in use, as its format is much richer than the
  normal refs, and written directly by "git fetch" as a plain file..

* An unused binary has been discarded, and and a bunch of commands
  have been turned into into built-in.

* A handful of places in in-tree code still relied on being able to
  execute the git subcommands, especially built-ins, in "git-foo"
  form, which have been corrected.

* When a packfile is removed by "git repack", multi-pack-index gets
  cleared; the code was taught to do so less aggressively by first
  checking if the midx actually refers to a pack that no longer
  exists.

* Internal API clean-up to handle two options "diff-index" and "log"
  have, which happen to share the same short form, more sensibly.

* The "add -i/-p" machinery has been written in C but it is not used
  by default yet.  It is made default to those who are participating
  in feature.experimental experiment.

* Allow maintainers to tweak $(TAR) invocations done while making
  distribution tarballs.

* "git index-pack" learned to resolve deltified objects with greater
  parallelism.

* "diff-highlight" (in contrib/) had a logic to flush its output upon
  seeing a blank line but the way it detected a blank line was broken.

* The logic to skip testing on the tagged commit and the tag itself
  was not quite consistent which led to failure of Windows test
  tasks.  It has been revamped to consistently skip revisions that
  have already been tested, based on the tree object of the revision.

Fixes since v2.28
-----------------

* The "mediawiki" remote backend which lives in contrib/mw-to-git/
  and is not built with git by default, had an RCE bug allowing a
  malicious MediaWiki server operator to inject arbitrary commands
  for execution by a cloning client. This has been fixed.

  The bug was discovered and reported by Joern Schneeweisz of GitLab
  to the git-security mailing list. Its practical impact due to the
  obscurity of git-remote-mediawiki was deemed small enough to forgo
  a dedicated security release.

* "git clone --separate-git-dir=$elsewhere" used to stomp on the
  contents of the existing directory $elsewhere, which has been
  taught to fail when $elsewhere is not an empty directory.
  (merge dfaa209a79 bw/fail-cloning-into-non-empty later to maint).

* With the base fix to 2.27 regresion, any new extensions in a v0
  repository would still be silently honored, which is not quite
  right.  Instead, complain and die loudly.
  (merge ec91ffca04 jk/reject-newer-extensions-in-v0 later to maint).

* Fetching from a lazily cloned repository resulted at the server
  side in attempts to lazy fetch objects that the client side has,
  many of which will not be available from the third-party anyway.
  (merge 77aa0941ce jt/avoid-lazy-fetching-upon-have-check later to maint).

* Fix to an ancient bug caused by an over-eager attempt for
  optimization.
  (merge a98f7fb366 rs/add-index-entry-optim-fix later to maint).

* Pushing a ref whose name contains non-ASCII character with the
  "--force-with-lease" option did not work over smart HTTP protocol,
  which has been corrected.
  (merge cd85b447bf bc/push-cas-cquoted-refname later to maint).

* "git mv src dst", when src is an unmerged path, errored out
  correctly but with an incorrect error message to claim that src is
  not tracked, which has been clarified.
  (merge 9b906af657 ct/mv-unmerged-path-error later to maint).

* Fix to a regression introduced during 2.27 cycle.
  (merge cada7308ad en/fill-directory-exponential later to maint).

* Command line completion (in contrib/) update.
  (merge 688b87c81b mp/complete-show-color-moved later to maint).

* All "mergy" operations that internally use the merge-recursive
  machinery should honor the merge.renormalize configuration, but
  many of them didn't.

* Doc cleanup around "worktree".
  (merge dc9c144be5 es/worktree-doc-cleanups later to maint).

* The "git blame --first-parent" option was not documented, but now
  it is.
  (merge 11bc12ae1e rp/blame-first-parent-doc later to maint).

* The logic to find the ref transaction hook script attempted to
  cache the path to the found hook without realizing that it needed
  to keep a copied value, as the API it used returned a transitory
  buffer space.  This has been corrected.
  (merge 09b2aa30c9 ps/ref-transaction-hook later to maint).

* Recent versions of "git diff-files" shows a diff between the index
  and the working tree for "intent-to-add" paths as a "new file"
  patch; "git apply --cached" should be able to take "git diff-files"
  and should act as an equivalent to "git add" for the path, but the
  command failed to do so for such a path.
  (merge 4c025c667e rp/apply-cached-with-i-t-a later to maint).

* "git diff [<tree-ish>] $path" for a $path that is marked with i-t-a
  bit was not showing the mode bits from the working tree.
  (merge cb0dd22b82 rp/ita-diff-modefix later to maint).

* Ring buffer with size 4 used for bin-hex translation resulted in a
  wrong object name in the sequencer's todo output, which has been
  corrected.
  (merge 5da69c0dac ak/sequencer-fix-find-uniq-abbrev later to maint).

* When given more than one target line ranges, "git blame -La,b
  -Lc,d" was over-eager to coalesce groups of original lines and
  showed incorrect results, which has been corrected.
  (merge c2ebaa27d6 jk/blame-coalesce-fix later to maint).

* The regexp to identify the function boundary for FORTRAN programs
  has been updated.
  (merge 75c3b6b2e8 pb/userdiff-fortran-update later to maint).

* A few end-user facing messages have been updated to be
  hash-algorithm agnostic.
  (merge 4279000d3e jc/object-names-are-not-sha-1 later to maint).

* "unlink" emulation on MinGW has been optimized.
  (merge 680e0b4524 jh/mingw-unlink later to maint).

* The purpose of "git init --separate-git-dir" is to initialize a
  new project with the repository separate from the working tree,
  or, in the case of an existing project, to move the repository
  (the .git/ directory) out of the working tree. It does not make
  sense to use --separate-git-dir with a bare repository for which
  there is no working tree, so disallow its use with bare
  repositories.
  (merge ccf236a23a es/init-no-separate-git-dir-in-bare later to maint).

* "ls-files -o" mishandled the top-level directory of another git
  working tree that hangs in the current git working tree.
  (merge ab282aa548 en/dir-nonbare-embedded later to maint).

* Fix some incorrect UNLEAK() annotations.
  (merge 3e19816dc0 jk/unleak-fixes later to maint).

* Use more buffered I/O where we used to call many small write(2)s.
  (merge a698d67b08 rs/more-buffered-io later to maint).

* The patch-id computation did not ignore the "incomplete last line"
  marker like whitespaces.
  (merge 82a62015a7 rs/patch-id-with-incomplete-line later to maint).

* Updates into a lazy/partial clone with a submodule did not work
  well with transfer.fsckobjects set.

* The parser for "git for-each-ref --format=..." was too loose when
  parsing the "%(trailers...)" atom, and forgot that "trailers" and
  "trailers:<modifiers>" are the only two allowed forms, which has
  been corrected.
  (merge 2c22e102f8 hv/ref-filter-trailers-atom-parsing-fix later to maint).

* Long ago, we decided to use 3 threads by default when running the
  index-pack task in parallel, which has been adjusted a bit upwards.
  (merge fbff95b67f jk/index-pack-w-more-threads later to maint).

* "git restore/checkout --no-overlay" with wildcarded pathspec
  mistakenly removed matching paths in subdirectories, which has been
  corrected.
  (merge bfda204ade rs/checkout-no-overlay-pathspec-fix later to maint).

* The description of --cached/--index options in "git apply --help"
  has been updated.
  (merge d064702be3 rp/apply-cached-doc later to maint).

* Feeding "$ZERO_OID" to "git log --ignore-missing --stdin", and
  running "git log --ignore-missing $ZERO_OID" fell back to start
  digging from HEAD; it has been corrected to become a no-op, like
  "git log --tags=no-tag-matches-this-pattern" does.
  (merge 04a0e98515 jk/rev-input-given-fix later to maint).

* Various callers of run_command API have been modernized.
  (merge afbdba391e jc/run-command-use-embedded-args later to maint).

* List of options offered and accepted by "git add -i/-p" were
  inconsistent, which have been corrected.
  (merge ce910287e7 pw/add-p-allowed-options-fix later to maint).

* "git diff --stat -w" showed 0-line changes for paths whose changes
  were only whitespaces, which was not intuitive.  We now omit such
  paths from the stat output.
  (merge 1cf3d5db9b mr/diff-hide-stat-wo-textual-change later to maint).

* It was possible for xrealloc() to send a non-NULL pointer that has
  been freed, which has been fixed.
  (merge 6479ea4a8a jk/xrealloc-avoid-use-after-free later to maint).

* "git status" has trouble showing where it came from by interpreting
  reflog entries that record certain events, e.g. "checkout @{u}", and
  gives a hard/fatal error.  Even though it inherently is impossible
  to give a correct answer because the reflog entries lose some
  information (e.g. "@{u}" does not record what branch the user was
  on hence which branch 'the upstream' needs to be computed, and even
  if the record were available, the relationship between branches may
  have changed), at least hide the error and allow "status" to show its
  output.

* "git status --short" quoted a path with SP in it when tracked, but
  not those that are untracked, ignored or unmerged.  They are all
  shown quoted consistently.

* "git diff/show" on a change that involves a submodule used to read
  the information on commits in the submodule from a wrong repository
  and gave a wrong information when the commit-graph is involved.
  (merge 85a1ec2c32 mf/submodule-summary-with-correct-repository later to maint).

* Unlike "git config --local", "git config --worktree" did not fail
  early and cleanly when started outside a git repository.
  (merge 378fe5fc3d mt/config-fail-nongit-early later to maint).

* There is a logic to estimate how many objects are in the
  repository, which is meant to run once per process invocation, but
  it ran every time the estimated value was requested.
  (merge 67bb65de5d jk/dont-count-existing-objects-twice later to maint).

* "git remote set-head" that failed still said something that hints
  the operation went through, which was misleading.
  (merge 5a07c6c3c2 cs/don-t-pretend-a-failed-remote-set-head-succeeded later to maint).

* "git fetch --all --ipv4/--ipv6" forgot to pass the protocol options
  to instances of the "git fetch" that talk to individual remotes,
  which has been corrected.
  (merge 4e735c1326 ar/fetch-ipversion-in-all later to maint).

* The "unshelve" subcommand of "git p4" incorrectly used commit^N
  where it meant to say commit~N to name the Nth generation
  ancestor, which has been corrected.
  (merge 0acbf5997f ld/p4-unshelve-fix later to maint).

* "git clone" that clones from SHA-1 repository, while
  GIT_DEFAULT_HASH set to use SHA-256 already, resulted in an
  unusable repository that half-claims to be SHA-256 repository
  with SHA-1 objects and refs.  This has been corrected.

* Adjust sample hooks for hash algorithm other than SHA-1.
  (merge d8d3d632f4 dl/zero-oid-in-hooks later to maint).

* "git range-diff" showed incorrect diffstat, which has been
  corrected.

* Earlier we taught "git pull" to warn when the user does not say the
  histories need to be merged, rebased or accepts only fast-
  forwarding, but the warning triggered for those who have set the
  pull.ff configuration variable.
  (merge 54200cef86 ah/pull later to maint).

* Compilation fix around type punning.
  (merge 176380fd11 jk/drop-unaligned-loads later to maint).

* "git blame --ignore-rev/--ignore-revs-file" failed to validate
  their input are valid revision, and failed to take into account
  that the user may want to give an annotated tag instead of a
  commit, which has been corrected.
  (merge 610e2b9240 jc/blame-ignore-fix later to maint).

* "git bisect start X Y", when X and Y are not valid committish
  object names, should take X and Y as pathspec, but didn't.
  (merge 73c6de06af cc/bisect-start-fix later to maint).

* The explanation of the "scissors line" has been clarified.
  (merge 287416dba6 eg/mailinfo-doc-scissors later to maint).

* A race that leads to an access to a free'd data was corrected in
  the codepath that reads pack files.
  (merge bda959c476 mt/delta-base-cache-races later to maint).

* in_merge_bases_many(), a way to see if a commit is reachable from
  any commit in a set of commits, was totally broken when the
  commit-graph feature was in use, which has been corrected.
  (merge 8791bf1841 ds/in-merge-bases-many-optim-bug later to maint).

* "git submodule update --quiet" did not squelch underlying "rebase"
  and "pull" commands.
  (merge 3ad0401e9e td/submodule-update-quiet later to maint).

* The lazy fetching done internally to make missing objects available
  in a partial clone incorrectly made permanent damage to the partial
  clone filter in the repository, which has been corrected.

* "log -c --find-object=X" did not work well to find a merge that
  involves a change to an object X from only one parent.
  (merge 957876f17d jk/diff-cc-oidfind-fix later to maint).

* Other code cleanup, docfix, build fix, etc.
  (merge 84544f2ea3 sk/typofixes later to maint).
  (merge b17f411ab5 ar/help-guides-doc later to maint).
  (merge 98c6871fad rs/grep-simpler-parse-object-or-die-call later to maint).
  (merge 861c4ce141 en/typofixes later to maint).
  (merge 60e47f6773 sg/ci-git-path-fix-with-pyenv later to maint).
  (merge e2bfa50ac3 jb/doc-packfile-name later to maint).
  (merge 918d8ff780 es/worktree-cleanup later to maint).
  (merge dc156bc31f ma/t1450-quotefix later to maint).
  (merge 56e743426b en/merge-recursive-comment-fixes later to maint).
  (merge 7d23ff818f rs/bisect-oid-to-hex-fix later to maint).
  (merge de20baf2c9 ny/notes-doc-sample-update later to maint).
  (merge f649aaaf82 so/rev-parser-errormessage-fix later to maint).
  (merge 6103d58b7f bc/sha-256-cvs-svn-updates later to maint).
  (merge ac900fddb7 ma/stop-progress-null-fix later to maint).
  (merge e767963ab6 rs/upload-pack-sigchain-fix later to maint).
  (merge a831908599 rs/preserve-merges-unused-code-removal later to maint).
  (merge 6dfefe70a9 jb/commit-graph-doc-fix later to maint).
  (merge 847b37271e pb/set-url-docfix later to maint).
  (merge 748f733d54 mt/checkout-entry-dead-code-removal later to maint).
  (merge ce820cbd58 dl/subtree-docs later to maint).
  (merge 55fe225dde jk/leakfix later to maint).
  (merge ee22a29215 so/pretty-abbrev-doc later to maint).
  (merge 3100fd5588 jc/post-checkout-doc later to maint).
  (merge 17bae89476 pb/doc-external-diff-env later to maint).
  (merge 27ed6ccc12 jk/worktree-check-clean-leakfix later to maint).
  (merge 1302badd16 ea/blame-use-oideq later to maint).
  (merge e6d5a11fed al/t3200-back-on-a-branch later to maint).
  (merge 324efcf6b6 pw/add-p-leakfix later to maint).
  (merge 1c6ffb546b jk/add-i-fixes later to maint).
  (merge e40e936551 cd/commit-graph-doc later to maint).
  (merge 0512eabd91 jc/sequencer-stopped-sha-simplify later to maint).
  (merge d01141de5a so/combine-diff-simplify later to maint).
  (merge 3be01e5ab1 sn/fast-import-doc later to maint).

(adam)

Updated net/grpc, net/py-grpcio, net/py-grpcio-testing, net/py-grpcio-tools

(adam)

grpc py-grpcio py-grpcio-testing py-grpcio-tools: updated to 1.33.2

Release v1.33.2

Please see the notes for the previous releases here: https://github.com/grpc/grpc/releases. Please consult https://grpc.io/ for all
information regarding this product.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

Deprecate GRPC_ARG_HTTP2_MIN_SENT_PING_INTERVAL_WITHOUT_DATA_MS.
Expose Cronet error message to the application layer.
Remove grpc_channel_ping from surface API.
Do not send BDP pings if there is no receive side activity.

C++

Makefile: only support building deps from submodule.

C#

Add trimming attribute to BindServiceMethodAttribute.
Fix incremental build of csproj projects depending on grpc.

Python

[Backport] Implement grpc.Future interface in SingleThreadedRendezvous.
[Backport] Make Python 2 an optional dependency for Bazel build.
Allow asyncio API to be imported as grpc.aio.
[gRPC Easy] Fix import errors on Windows.
Make version check for importlib.abc in grpcio-tools more stringent.

(adam)

Updated databases/py-psycopg2, databases/repmgr

(adam)

repmgr: updated to 5.2.0

repmgr 5.2.0 is a major release.

This release provides support for PostgreSQL 13, released in September 2020.

This release removes support for PostgreSQL 9.3, which was designated EOL in November 2018.

A.1.1. General improvements

Configuration: support include, include_dir and include_if_exists directives (see configuration file include directives).

repmgr standby switchover: Improve sanity check failure log output from the demotion candidate.

If database connection configuration is not consistent across all nodes, it's possible remote repmgr invocations (e.g. during switchover, from the promotion candidate to the demotion candidate) will not be able to connect to the database. This will now be explicitly reported as a database connection failure, rather than as a failure of the respective sanity check.

repmgr cluster crosscheck / repmgr cluster matrix: improve text mode output format, in particular so that node identifiers of arbitrary length are displayed correctly.

repmgr primary unregister: the --force can be provided to unregister an active primary node, provided it has no registered standby nodes.

repmgr standby clone: new option --verify-backup to run PostgreSQL's pg_verifybackup utility after cloning a standby to verify the integrity of the copied data (PostgreSQL 13 and later).

repmgr standby clone: when cloning from Barman, setting --waldir (PostgreSQL 9.6 and earlier: --xlogdir) in pg_basebackup_options will cause repmgr to create a WAL directory outside of the main data directory and symlink it from there, in the same way as would happen when cloning using pg_basebackup.

repmgr standby follow: In PostgreSQL 13 and later, a standby no longer requires a restart to follow a new upstream node.

The old behaviour (always restarting the standby to follow a new node) can be restored by setting the configuration file parameter standby_follow_restart to true.

repmgr node rejoin: enable a node to attach to a target node even the target node has a lower timeline (PostgreSQL 9.6 and later).

repmgr node rejoin: in PostgreSQL 13 and later, support pg_rewind's ability to automatically run crash recovery on a PostgreSQL instance which was not shut down cleanly.

repmgr node check: option --db-connection added to check if repmgr can connect to the database on the local node.

repmgr node check: report database connection error if the --optformat was provided.

Improve handling of pg_control read errors.

It is now possible to dump the contents of repmgr metadata tables with pg_dump.

A.1.2. repmgrd enhancements

Following additional parameters can be provided to failover_validation_command:

%n: node ID
%a: node name
%v: number of visible nodes
%u: number of shared upstream nodes
%t: total number of nodes
Configuration option always_promote (default: false) to control whether a node should be promoted if the repmgr metadata is not up-to-date on that node.

A.1.3. Bug fixes

repmgr standby clone: fix issue with cloning from Barman where the tablespace mapping file was not flushed to disk before attempting to retrieve files from Barman.

repmgr node rejoin: ensure that when verifying a standby node has attached to its upstream, the node has started streaming before confirming the success of the rejoin operation.

repmgrd: ensure primary connection is reset if same as upstream.

(adam)

py-psycopg2: updated to 2.8.6

What's new in psycopg 2.8.6
- Fixed memory leak changing connection encoding to the current one.
- Fixed search of mxDateTime headers in virtualenvs.
- Added missing values from errorcodes.
- `cursor.query` reports the query of the last :sql:`COPY` opearation too.
- `~psycopg2.errorcodes` map and `~psycopg2.errors` classes updated to
  PostgreSQL 13.
- Added wheel packages for ARM architecture.
- Wheel package compiled against OpenSSL 1.1.1g.

What's new in psycopg 2.8.5
- Fixed use of `!connection_factory` and `!cursor_factory` together.
- Added support for `~logging.LoggerAdapter` in
  `~psycopg2.extras.LoggingConnection`.
- `~psycopg2.extensions.Column` objects in `cursor.description` can be sliced.
- Added AIX support.
- Fixed `~copy.copy()` of `~psycopg2.extras.DictCursor` rows

(adam)

Updated devel/py-test, databases/py-pypika

(adam)

py-pypika: updated to 0.43.0

0.43.0:
Unknown changes

(adam)

py-test: updated to 6.1.2

pytest 6.1.2

Bug Fixes
* Fixed an issue where some files in packages are getting lost from --lf even though they contain tests that failed. Regressed in pytest 5.4.0.
* Directories created by tmpdir are now considered stale after 3 days without modification (previous value was 3 hours) to avoid deleting directories still in use in long running test suites.

Improved Documentation
* Improve deprecation warning message for pytest._fillfuncargs().

(adam)

Updated databases/openldap, databases/lmdb

(adam)

openldap: updated to 2.4.55

OpenLDAP 2.4.55 Release
Fixed slapd normalization handling with modrdn
Fixed slapd-meta to check ldap_install_tls return code
Contrib
Fixed nssov misplaced semicolon

(adam)

Updated security/py-authlib, lang/nodejs

(adam)

nodejs: updated to 14.15.0

Version 14.15.0 'Fermium' (LTS)

Notable Changes

This release marks the transition of Node.js 14.x into Long Term Support (LTS) with the codename 'Fermium'. The 14.x release line now moves into "Active LTS" and will remain so until October 2021. After that time, it will move into "Maintenance" until end of life in April 2023.

(adam)

py-authlib: updated to 0.15.2

Version 0.15.2
Fixed httpx authentication bug

(adam)

Updated math/liblinear, net/py-lexicon

(adam)

py-lexicon: updated to 3.4.4

3.4.4:
Modified
Fix Gandi provider to use the new LiveDNS API URL

(adam)

liblinear: updated to 2.41

Version 2.41 released on July 29, 2020 (some bug fixes of version 2.40).

Version 2.40 released on July 22, 2020.
A new solver: dual coordinate descent method for linear one-class SVM; see the paper
The Newton solver is updated to have faster training speed; see the release note
A new option -R to allow users not to regularize bias (when -B 1 is used)

(adam)

Updated devel/py-tox, www/py-sanic

(adam)

py-sanic: updated to 20.9.1

Version 20.9.1

Bugfixes
Fix static route registration on blueprints
Removes duplicate headers in ASGI streaming body

(adam)

py-tox: updated to 3.20.1

v3.20.1 (2020-10-09)
--------------------

Bugfixes
- Relax importlib requirement to allow version<3 - by :user:`usamasadiq`

v3.20.0 (2020-09-01)
--------------------

Bugfixes
- Allow hyphens and empty factors in generative section name. - by :user:`tyagdit`
- Support for PEP517 in-tree build backend-path key in ``get-build-requires``. - by :user:`nizox`
- Allow escaping curly braces in setenv. - by :user:`mkenigs`

Features
- Support for comments within ``setenv`` and environment files via the ``files|`` prefix. - by :user:`gaborbernat`

v3.19.0 (2020-08-06)
--------------------

Bugfixes
- skip ``setup.cfg`` if it has no ``tox:tox`` namespace - by :user:`hroncok`

Features
- Implement support for building projects
  having :pep:`517#in-tree-build-backends` ``backend-path`` setting -
- Don't require a tox config file for ``tox --devenv`` - by :user:`hroncok`

Documentation
- Fixed grammar in top-level documentation - by :user:`tfurf`

v3.18.1 (2020-07-28)
--------------------

Bugfixes
- Fix ``TypeError`` when using isolated_build with backends that are not submodules (e.g. ``maturin``)

v3.18.0 (2020-07-23)
--------------------

Deprecations (removal in next major release)
- Add allowlist_externals alias to whitelist_externals (whitelist_externals is now deprecated). - by :user:`dajose`

v3.17.1 (2020-07-15)
--------------------

Bugfixes
- Fix tests when the ``HOSTNAME`` environment variable is set, but empty string - by :user:`hroncok`

v3.17.0 (2020-07-14)
--------------------

Features
- The long arguments ``--verbose`` and ``--quiet`` (rather than only their short forms, ``-v`` and ``-q``) are now accepted.
- The ``ResultLog`` now prefers ``HOSTNAME`` environment variable value (if set) over the full qualified domain name of localhost.
  This makes it possible to disable an undesired DNS lookup,
  which happened on all ``tox`` invocations, including trivial ones - by :user:`hroncok`

Documentation
- Update packaging information for Flit.

v3.16.1 (2020-06-29)
--------------------

Bugfixes
- Fixed the support for using ``{temp_dir}`` in ``tox.ini`` - by :user:`webknjaz`

v3.16.0 (2020-06-26)
--------------------

Features
- Allow skipping the package and installation step when passing the ``--skip-pkg-install``. This should be used in pair with the ``--notest``, so you can separate environment setup and test run:

  .. code-block:: console

      tox -e py --notest
      tox -e py --skip-pkg-install

Miscellaneous
- Improve config parsing performance by precompiling commonly used regular expressions - by :user:`brettlangdon`

v3.15.2 (2020-06-06)
--------------------

Bugfixes
- Add an option to allow a process to suicide before sending the SIGTERM. - by :user:`jhesketh`
- PyPy 7.3.1 on Windows uses the ``Script`` folder instead of ``bin``. - by :user:`gaborbernat`

Miscellaneous
- Allow to run the tests with pip 19.3.1 once again while preserving the ability to use pip 20.1 - by :user:`hroncok`

v3.15.1 (2020-05-20)
--------------------

Bugfixes
- ``tox --showconfig`` no longer tries to interpolate '%' signs.

v3.15.0 (2020-05-02)
--------------------

Bugfixes
- Respect attempts to change ``PATH`` via ``setenv`` - by :user:`aklajnert`.
- Fix parsing of architecture in python interpreter name. - by :user:`bruchar1`
- Prevent exception when command is empty. - by :user:`bruchar1`
- Fix irrelevant Error message for invalid argument when running outside a directory with tox support files by :user:`nkpro2000sr`.

Features
- Allow parallel mode without arguments. - by :user:`ssbarnea`
- Allow generative section name expansion. - by :user:`bruchar1`
- default to passing the env var PIP_EXTRA_INDEX_URL by :user:`georgealton`.

Documentation
- Improve documentation about config by adding tox environment description at start - by :user:`stephenfin`.

v3.14.6 (2020-03-25)
--------------------

Bugfixes
- Exclude virtualenv dependency versions with known
  regressions (20.0.[0-7]) - by :user:`webknjaz`.
- Fix ``tox -h`` and ``tox --hi`` shows an error when run outside a directory with tox support files by :user:`nkpro2000sr`.
- Fix ValueError on ``tox -l`` for a ``tox.ini`` file that does not contain an
  ``envlist`` definition. - by :user:`jquast`.

v3.14.5 (2020-02-16)
--------------------

Features
- Add ``--discover`` (fallback to ``TOX_DISCOVER`` environment variable via path separator) to inject python executables
  to try as first step of a discovery - note the executable still needs to match the environment by :user:`gaborbernat`.

v3.14.4 (2020-02-13)
--------------------

Bugfixes
- Bump minimal six version needed to avoid using one incompatible with newer
  virtualenv. - by :user:`ssbarnea`
- Avoid pypy test failure due to undefined printout var. - by :user:`ssbarnea`

Features
- Add ``interrupt_timeout`` and ``terminate_timeout`` that configure delay between SIGINT, SIGTERM and SIGKILL when tox is interrupted. - by :user:`sileht`
- Add ``HTTP_PROXY``, ``HTTPS_PROXY`` and ``NO_PROXY`` to default passenv. - by :user:`pfmoore`

v3.14.3 (2019-12-27)
--------------------

Bugfixes
- Relax importlib requirement to allow either version 0 or 1 - by :user:`chyzzqo2`

Miscellaneous
- Clarify legacy setup.py error message: python projects should commit to a strong consistency of message regarding packaging. We no-longer tell people to add a setup.py to their already configured pep-517 project, otherwise it could imply that pyproject.toml isn't as well supported and recommended as it truly is - by :user:`graingert`

v3.14.2 (2019-12-02)
--------------------

Bugfixes
- Fix fallback to global configuration when running in Jenkins. - by :user:`daneah`
- Fix colouring on windows: colorama is a dep. - by :user:`1138-4EB`

Miscellaneous
- improve performance with internal lookup of Python version information - by :user:`blueyed`
- Use latest version of importlib_metadata package - by :user:`kammala`
- Mark poetry related tests as xfail since its dependency pyrsistent won't install in ci due to missing wheels/build deps. - by :user:`RonnyPfannschmidt`

v3.14.1 (2019-11-13)
--------------------

Bugfixes
- fix reporting of exiting due to (real) signals - by :user:`blueyed`
- Bump minimal virtualenv to 16.0.0 to improve own transitive
  deps handling in some ancient envs. — by :user:`webknjaz`
- Adds ``CURL_CA_BUNDLE``, ``REQUESTS_CA_BUNDLE``, ``SSL_CERT_FILE`` to the default passenv values. - by :user:`ssbarnea`
- Fix nested tox execution in the parallel mode by separating the environment
  variable that let's tox know it is invoked in the parallel mode
  (``_TOX_PARALLEL_ENV``) from the variable that informs the tests that tox is
  running in parallel mode (``TOX_PARALLEL_ENV``).
- Fix provisioning from a pyvenv interpreter. — by :user:`kentzo`

Deprecations (removal in next major release)
- Python ``3.4`` is no longer supported. — by :user:`gaborbernat`

v3.14.0 (2019-09-03)
--------------------

Bugfixes
- Fix ``PythonSpec`` detection of ``python3.10`` - by :user:`asottile`
- Fix regression failing to detect future and past ``py##`` factors  - by :user:`asottile`
- Fix ``current_tox_py`` for ``pypy`` / ``pypy3`` - by :user:`asottile`
- Honor environment markers in ``requires`` list - by :user:`asottile`
- improve recreate check by allowing directories containing ``.tox-config1`` (the marker file created by tox) - by :user:`asottile`
- Recognize correctly interpreters that have suffixes (like python3.7-dbg).

Features
- Add support for minor versions with multiple digits ``tox -e py310`` works for ``python3.10`` - by :user:`asottile`
- Remove dependence on ``md5`` hashing algorithm - by :user:`asottile`

Documentation
- clarify behaviour if recreate is set to false - by :user:`PJCampi`

Miscellaneous
- Fix relative URLs to files in the repo in ``.github/PULL_REQUEST_TEMPLATE.md`` — by :user:`webknjaz`
- Replace ``importlib_metadata`` backport with ``importlib.metadata``
  from the standard library on Python ``3.8+`` - by :user:`hroncok`
- Render the change fragment help on the ``docs/changelog/`` directory view on GitHub

(adam)

Updated devel/py-aiofiles, www/py-aiohttp

(adam)

py-aiohttp: updated to 3.7.2

3.7.2

Bugfixes
- Fixed static files handling for loops without ``.sendfile()`` support

(adam)

py-aiofiles: updated to 0.6.0

0.6.0:
aiofiles is now tested on ppc64le.
Added name and mode properties to async file objects.
Fixed a DeprecationWarning internally.
Python 3.9 support and tests.

(adam)

Updated textproc/py-rapidjson, devel/py-xdis

(adam)

py-xdis: updated to 5.0.5

5.0.5:
Add support for Python2.7 on Ubuntu 20.04
Bump versions for Python 3.8.6 and 3.5.10
Release instructions moved to wiki
VERSION -> __version__ because Python prefers it that way

(adam)

py-rapidjson: updated to 0.9.3

0.9.3:
* Fix access to ``Encoder`` instance attributes

0.9.2:
* Use `current master`__ version of rapidjson
* Enable GH Actions-based test workflow
* Produce Python 3.9 wheels, disable testing under Python < 3.6
* Make the character used for indentation in pretty mode a parameter
* Handle wider precision range in timestamps fractional seconds
* Add comparison benchmarks against orjson and hyperjson

(adam)

Updated multimedia/libass, devel/py-setuptools

(adam)

py-setuptools: updated to 50.3.2

v50.3.2

Documentation changes
* Extended towncrier news template to include change note categories. This allows to see what types of changes a given version introduces
* Started enforcing strict syntax and reference validation in the Sphinx docs
* Removed redundant Sphinx Makefile support

Misc
* Enabled test results reporting in AppVeyor CI
* Replace Python 3.9.0 beta with 3.9.0 final on GitHub Actions.
* Python 3.9 Trove classifier got added to the dist metadata

v50.3.1

Documentation changes
* Finalized doc revamp.
* doc: simplify index and group deprecated files
* doc overhaul step 2: break main doc into multiple sections
* doc overhaul step 3: update userguide
* Added a :user: role to Sphinx config
* Added an illustrative explanation about the change notes to fragments dir

Misc
* Travis CI test suite now tests against PPC64.
* Suppress EOF errors (and other exceptions) when importing lib2to3.

(adam)

libass: updated to 0.15.0

Release 0.15.0

Boo! Three long years in the making due to large internal changes, this long-awaited release brings bug fixes, speed, and a new mechanism for opting into VSFilter-incompatible features:

Fix backwards/VSFilter-incompatible font sizes with FreeType 2.10+
Improve speed via better caching
Require HarfBuzz unconditionally to ensure good shaping for complex scripts
ass_set_use_margins(true) now simply places text on the whole screen instead of attempting to tie it to video positioning (set by the margin values) and failing in various ways when margins are used to implement pan & scan in a video player
Add ass_track_set_feature() & catch-all ASS_FEATURE_INCOMPATIBLE_EXTENSIONS
Add ASS_FEATURE_BIDI_BRACKETS to enable Unicode 6.3+ bracket matching when applying the Unicode Bidirectional Algorithm (incompatible with VSFilter; requires libass built with FriBidi 1.0+)
Fix stack overflow on deeply nested \t tags
Fix positioning of events with leading line breaks
Fix small but nonzero \bord becoming \bord0 (regression in 0.14.0)
Measure BorderStyle=4 box padding from glyph border, not from glyph fill
Scale everything from script resolution if storage size is not set (including borders and shadows regardless of ScaledBorderAndShadow)
Fix the default aspect ratio calculation when neither ass_set_pixel_aspect() nor ass_set_aspect_ratio() is called
Multiple fixes for karaoke override tags
Handle memory allocation failures better: avoid some crashes and produce images closer to truth
Avoid some integer overflows
Add internal infrastructure for regression testing
Improve VSFilter compatibility:
- Treat invalid nested \t tags like VSFilter
- Make \t(T,T,...) at time exactly T use the post-transition values
- Make lines stack more like they do in VSFilter
- Default ScaledBorderAndShadow to 0 (like VSFilter), except for subtitles that were produced by old FFmpeg/Libav
- Make shadow positioning with 3D transforms match VSFilter窶冱
- Cut out glyphs from border & shadow in all the same cases as VSFilter
- Match VSFilter on animated color tags with negative acceleration
- Fix parsing of some files that VSFilter accepts but libass didn窶冲 by ignoring leading whitespace in each line of an ASS file or CodecPrivate
- Improve font selection with CoreText
- Stop faux-bolding fonts that are too bold to get faux bold in VSFilter
- Ignore leading/trailing spaces when calculating height of nonblank lines
- Match VSFilter on \fade with large alpha value arguments
- Stop splitting bitmaps on font substitution
- Multiple fixes for Banner and Scroll effects
- Multiple fixes for karaoke override tags

(adam)

postgresql-timescaledb: switch to USE_CMAKE; limit supported PostgreSQL versions

(adam)

Updated databases/redis, devel/memcached

(adam)

memcached: updated to 1.6.8

Memcached 1.6.8

Small security related release. A remote crash is possible if UDP is enabled. The remediation is to upgrade or disable UDP. The crash was introduced in the 1.6 series.

UDP has not been enabled by default for years and it has no authentication or security, so it most users should not have a high exposure to this bug.

This also includes two minor fixes.

Fixes
* Improve opening of authentication file
* Fix over-freeing in internal object cache
* udp: crash fix when receiving multi-packet uploads

(adam)

redis: updated to 6.0.9

Redis 6.0.9
===========

Upgrade urgency: SECURITY if you use an affected platform (see below).
                Otherwise the upgrade urgency is MODERATE.

This release fixes a potential heap overflow when using a heap allocator other
than jemalloc or glibc's malloc. See:
https://github.com/redis/redis/pull/7963

Other fixes in this release:

New:
* Memory reporting of clients argv
* Add redis-cli control on raw format line delimiter
* Add redis-cli support for rediss:// -u prefix
* Get rss size support for NetBSD and DragonFlyBSD

Behavior changes:
* WATCH no longer ignores keys which have expired for MULTI/EXEC
* Correct OBJECT ENCODING response for stream type
* Allow blocked XREAD on a cluster replica
* TLS: Do not require CA config if not used

Bug fixes:
* INFO report real peak memory (before eviction)
* Allow requirepass config to clear the password
* Fix config rewrite file handling to make it really atomic
* Fix excessive categories being displayed from ACLs
* Add fsync in replica when full RDB payload was received
* Don't write replies to socket when output buffer limit reached
* Fix redis-check-rdb support for modules aux data
* Other smaller bug fixes

Modules API:
* Add APIs for version and compatibility checks
* Add RM_GetClientCertificate
* Add RM_GetDetachedThreadSafeContext
* Add RM_GetCommandKeys
* Add Swapdb Module Event
* RM_GetContextFlags provides indication of being in a fork child
* RM_GetContextFlags document missing flags: MULTI_DIRTY, IS_CHILD
* Expose real client on connection events
* Minor improvements to module blocked on keys

(adam)

py-rst2pdf: needs py-setuptools_scm

(adam)

Updated www/py-aiohttp, databases/py-tortoise-orm

(adam)

py-tortoise-orm: updated to 0.16.17

0.16.17
Add on_delete in ManyToManyField.
Support F expression in annotate.
Fix QuerySet.select_related in case of join same table twice.
Integrate Aerich into the install.

(adam)

py-aiohttp: updated to 3.7.1

3.7.1

Bugfixes
- Fixed a type error caused by the conditional import of `Protocol`.
- Server doesn't send Content-Length for 1xx or 204
- Fix run_app typing
- Always require ``typing_extensions`` library.
- Fix a variable-shadowing bug causing `ThreadedResolver.resolve` to
  return the resolved IP as the ``hostname`` in each record, which prevented
  validation of HTTPS connections.
- Added annotations to all public attributes.
- Fix flaky test_when_timeout_smaller_second
- Ensure sending a zero byte file does not throw an exception
- Fix a bug in ``web.run_app()`` about Python version checking on Windows

(adam)

Updated misc/py-tqdm, devel/py-test-forked

(adam)

py-test-forked: updated to 1.3.0

v1.3.0
* Add support for pytest 6
* Replace `@pytest.mark.tryfirst` with newer `@pytest.hookimpl`
* Invoke `pytest_runtest_logstart` and `pytest_runtest_logfinish` hooks in `runtest_protocol`

v1.2.0
* Add limited support for xfail marker
* Fix support for pytest 5.4.0+
* Drop support for Python 3.4 as it is EOL

(adam)