py-asgiref: updated to 2.1.5

2.1.5:
* Fixed issues with async_to_sync not setting the event loop correctly
* Stop async_to_sync being called from threads with an active event loop

(adam)

doc: Updated sysutils/gnome-vfs to 2.24.4nb34

(wiz)

gnome-vfs: fix build with openssl-1.1.

struct SSL is opaque in openssl-1.1; and the SSL_free() man page
says that one should not free members of it manually (in both
the openssl-1.0 and openssl-1.1 man pages).

Regen two other patches (NFC for these).

Bump PKGREVISION.

(wiz)

ocp: allow building with gcc-6 and higher.

(wiz)

doc: Updated sysutils/dupeguru to 4.0.3nb1

(wiz)

dupeguru: fix PLIST after py-sphinx update.

Bump PKGREVISION.

(wiz)

doc: Updated net/transmission to 2.92nb7

(wiz)

transmission*: fix build with openssl-1.1.

From upstream via Peter Hjalmarsson via
https://bugzilla.redhat.com/show_bug.cgi?id=1468077

Bump PKGREVISION.

(wiz)

pup: Use lang/go/go-package.mk (NFCI)

Instead of (re)defining logic to build packages with Go in
`post-extract' and `do-build' directly use lang/go/go-package.mk
and adjust `do-install' target accordingly.

Discussed with <fhajny>.

(leot)

Updated net/py-botocore, net/py-s3transfer, net/py-boto3, net/py-awscli

(adam)

py-awscli: updated to 1.14.40

1.14.40
api-change:gamelift: Update gamelift command to latest version
api-change:mediaconvert: Update mediaconvert command to latest version

1.14.39
api-change:appsync: Update appsync command to latest version
api-change:lex-models: Update lex-models command to latest version

1.14.38
api-change:route53: Update route53 command to latest version
api-change:glacier: Update glacier command to latest version

1.14.37
api-change:cognito-idp: Update cognito-idp command to latest version
api-change:ec2: Update ec2 command to latest version
api-change:rds: Update rds command to latest version
api-change:guardduty: Update guardduty command to latest version
api-change:kms: Update kms command to latest version

1.14.36
api-change:lex-runtime: Update lex-runtime command to latest version
api-change:ec2: Update ec2 command to latest version
api-change:lex-models: Update lex-models command to latest version

1.14.35
api-change:budgets: Update budgets command to latest version
api-change:gamelift: Update gamelift command to latest version
api-change:ds: Update ds command to latest version
api-change:mediastore: Update mediastore command to latest version
api-change:appstream: Update appstream command to latest version
api-change:dynamodb: Update dynamodb command to latest version
api-change:medialive: Update medialive command to latest version
api-change:dms: Update dms command to latest version

(adam)

py-boto3: updated to 1.5.30

1.5.30
api-change:mediaconvert: [botocore] Update mediaconvert client to latest version
api-change:gamelift: [botocore] Update gamelift client to latest version

1.5.29
api-change:appsync: [botocore] Update appsync client to latest version
api-change:lex-models: [botocore] Update lex-models client to latest version

1.5.28
api-change:glacier: [botocore] Update glacier client to latest version
api-change:route53: [botocore] Update route53 client to latest version

1.5.27
api-change:guardduty: [botocore] Update guardduty client to latest version
api-change:cognito-idp: [botocore] Update cognito-idp client to latest version
api-change:rds: [botocore] Update rds client to latest version
api-change:ec2: [botocore] Update ec2 client to latest version
api-change:kms: [botocore] Update kms client to latest version

1.5.26
api-change:lex-runtime: [botocore] Update lex-runtime client to latest version
api-change:ec2: [botocore] Update ec2 client to latest version
api-change:lex-models: [botocore] Update lex-models client to latest version

1.5.25
api-change:ds: [botocore] Update ds client to latest version
api-change:appstream: [botocore] Update appstream client to latest version
api-change:medialive: [botocore] Update medialive client to latest version
api-change:budgets: [botocore] Update budgets client to latest version
api-change:gamelift: [botocore] Update gamelift client to latest version
api-change:dynamodb: [botocore] Update dynamodb client to latest version
api-change:dms: [botocore] Update dms client to latest version
api-change:mediastore: [botocore] Update mediastore client to latest version

(adam)

py-s3transfer: updated to 0.1.13:

0.1.13
bugfix:RequestPayer: Plumb RequestPayer argument to the CompleteMultipartUpload operation

(adam)

py-botocore: updated to 1.8.44

1.8.44
api-change:mediaconvert: Update mediaconvert client to latest version
api-change:gamelift: Update gamelift client to latest version

1.8.43
api-change:appsync: Update appsync client to latest version
api-change:lex-models: Update lex-models client to latest version

1.8.42
api-change:glacier: Update glacier client to latest version
api-change:route53: Update route53 client to latest version

1.8.41
api-change:guardduty: Update guardduty client to latest version
api-change:cognito-idp: Update cognito-idp client to latest version
api-change:rds: Update rds client to latest version
api-change:ec2: Update ec2 client to latest version
api-change:kms: Update kms client to latest version

1.8.40
api-change:lex-runtime: Update lex-runtime client to latest version
api-change:ec2: Update ec2 client to latest version
api-change:lex-models: Update lex-models client to latest version

1.8.39
api-change:ds: Update ds client to latest version
api-change:appstream: Update appstream client to latest version
api-change:medialive: Update medialive client to latest version
api-change:budgets: Update budgets client to latest version
api-change:gamelift: Update gamelift client to latest version
api-change:dynamodb: Update dynamodb client to latest version
api-change:dms: Update dms client to latest version
api-change:mediastore: Update mediastore client to latest version

(adam)

doc: Updated lang/nodejs6 to 6.13.0

(fhajny)

lang/nodejs6: Update to 6.13.0.

- console:
  - added console.count() and console.clear()
- crypto:
  - expose ECDH class
  - added cypto.randomFill() and crypto.randomFillSync()
  - warn on invalid authentication tag length
- deps:
  - upgrade libuv to 1.16.1
- dgram:
  - added socket.setMulticastInterface()
- http:
  - add agent.keepSocketAlive and agent.reuseSocket as to allow
    overridable keep-alive behavior of `Agent`
- lib:
  - return this from net.Socket.end()
- module:
  - add builtinModules api that provides list of all builtin modules
    in Node
- net:
  - return this from getConnections()
- promises:
  - more robust stringification for unhandled rejections
- repl:
  - improve require() autocompletion
- src:
  - add openssl-system-ca-path configure option
  - add --use-bundled-ca --use-openssl-ca check
  - add process.ppid
- tls:
  - accept `lookup` option for `tls.connect()`
- tools, build:
  - a new macOS installer!
- url:
  - WHATWG URL api support
- util:
  - add %i and %f formatting specifiers

(fhajny)

doc: Updated x11/xf86-video-vesa to 2.4.0

(wiz)

xf86-video-vesa: update to 2.4.0.

Nothing terribly exciting, but enough bug fixes to justify a release.

Adam Jackson (4):
      Don't build old probe method on sufficiently new servers
      Fall back to VGA if the palette API isn't supported
      Use VBEFreeVBEInfo not free
      vesa 2.4.0

Emil Velikov (1):
      autogen.sh: use quoted string variables

Ian Lepore (1):
      Honor Option "NoDDC" correctly

Matthew Green (1):
      When debugging, print the VGAbase as well.

Mihail Konev (1):
      autogen: add default patch prefix

Peter Hutterer (1):
      autogen.sh: use exec instead of waiting for configure to finish

Stefan Dirsch (1):
      Use default refresh by default

(wiz)

doc: Added security/duo-unix version 1.10.1

(fhajny)

Import duo_unix 1.10.1 as security/duo_unix.

Duo two-factor authentication for Unix systems.

(fhajny)

doc: Updated www/lynx to 2.8.8.2nb8

(wiz)

lynx: fix build with openssl-1.1.

Bump PKGREVISION to be on the safe side.

(wiz)

doc: Updated www/php-apcu to 5.1.10

(jdolecek)

Update php-apcu to 5.1.10 - small bugfixes

Changes since 5.1.9:

- fix gh#247 when a NUL char is used as key, apcu_fetch(array) truncates the key
- fix gh#248 apcu_fetch may return values causing zend_mm_corruption or segfaults
when custom serializer is used
- fix gh#260 apcu.serializer=default results in segfault
- fix gh#274 non-portable shell == in config.m4
- fix crash when passing bad array to apcu_delete
- improve fix gh#266 refcounting errors in APCIterator
- fix for PHP 7.3 compatibility

(jdolecek)

doc: Updated chat/irssi to 1.1.1

(maya)

irssi: update to 1.1.1

irssi-{xmpp,icb}: catch up with distinfo file.

1.1.1:
Restore compatibility with OpenSSL < 1.0.2 (#820, #831)
Fix test compilation on some platforms (#815, #816)
Fix portability and backwards compatibility of test runner (#818, #845)

Also contains all changes from 1.0.7:
Prevent use after free error during the execution of some commands. Found by Joseph Bisch (GL#17, GL!24).
Revert netsplit print optimisation due to crashes (#465, #809, #812, #819, #824).
Fix use after free when SASL messages are received in unexpected order (GL#26, GL!33).
Fix null pointer dereference in the tab completion when an empty nick is joined (GL#24, GL!31).
Fix use after free when entering oper password (GL#22, GL!32).
Fix null pointer dereference when too many windows are opened (GL#27, #837).
Fix out of bounds access in theme strings when the last escape is incomplete. Credit to Oss-Fuzz (#842).
Fix out of bounds write when using negative counts on window resize (GL#25, GL#29, #836).
Minor help correction. By William Jackson (#834).

(maya)

doc: Added devel/py-restructuredtext_lint version 1.1.2

(minskim)

devel/Makefile: Add py-restructuredtext_lint

(minskim)

devel/py-restructuredtext_lint: Import version 1.1.2

restructuredtext_lint is a reStructuredText linter.

(minskim)

doc: Updated security/liboauth to 1.0.3nb7

(wiz)

liboauth: update to 1.0.3nb7.

Support building with openssl-1.1.

(wiz)

doc: Updated sysutils/fzf to 0.17.3nb1

(leot)

fzf: Use `do-install' to install only needed files

lang/go/go-package.mk install several files that are not needed for packages
that just install a program. Define `do-install' target to avoid that.

While here also install fzf-tmux in bin/, man pages under ${PKGMANDIR}
accordingly and shell completions/bindings and vim plugin under
share/fzf.  Update MESSAGE to reflect this change.

PKGREVISION++

Discussed with <maya>.

(leot)

chmlib: Add a MESSAGE describing how to use chm_http

Requested by trebol

(wiz)

Updated emulators/qemu

(adam)

qemu: updated to 2.11.1

2.11.1:
Bug-fix release.

(adam)

gexiv2-0.10.8

(bsiegert)

Update gexiv2 to 0.10.8.

gexiv2 0.10.8 - 5 Feb 2018

  * Do not use linker scripts on Darwin/OS X
  * Fallback to AperturValue if FNumber is absent
  * Fix GIR header and vapi when using meson

Bugs fixed in this release:
- https://bugzilla.gnome.org/show_bug.cgi?id=791941
- https://bugzilla.gnome.org/show_bug.cgi?id=792239
- https://bugzilla.gnome.org/show_bug.cgi?id=792431

gexiv2 0.10.7 - 24 Dec 2017

  * Add meson build support
  * Use glib-mkenums for enum types
  * Update debian
  * Fix make check when running out of tree
  * Use version script to clean up exported functions
  * Fix --disable-vala

Bugs fixed in this release:
- https://bugzilla.gnome.org/show_bug.cgi?id=784045
- https://bugzilla.gnome.org/show_bug.cgi?id=787455

gexiv2 0.10.6 - 21 May 2017

  * Fix missing include file
  * Add a function to save meta-data in XMP sidecar file
  * Add a more complete Python test-suite
  * Fix a potential NULL dereference in _get_comment()
  * Fix compatibility with Exiv2 0.26

Bugs fixed in this release:
- Coverity issue CID 167853
- https://bugs.gentoo.org/show_bug.cgi?id=613778
- https://bugzilla.gnome.org/show_bug.cgi?id=712455
- https://bugzilla.gnome.org/show_bug.cgi?id=780709
- https://bugzilla.gnome.org/show_bug.cgi?id=782449

gexiv2 0.10.5 - 20 March 2017

  * Fix autogen.sh to also run configure
  * Generate gtk-doc and various documentation updates
  * Fix an abort on unhandled Minolta meta-data
  * Fix compilation issues with shadowing variables in StreamIO
  * Fix GPS rational calculations if fraction has 0 numerator and denominator
  * Several build cleanups
  * Add make check to build and run the python tests
  * Add C tests

Bugs fixed in this release:
- https://bugzilla.gnome.org/show_bug.cgi?id=723790
- https://bugzilla.gnome.org/show_bug.cgi?id=774105
- https://bugzilla.gnome.org/show_bug.cgi?id=775249
- https://bugzilla.gnome.org/show_bug.cgi?id=776233
- https://bugzilla.gnome.org/show_bug.cgi?id=779089
- https://bugzilla.gnome.org/show_bug.cgi?id=779551
- https://bugzilla.redhat.com/show_bug.cgi?id=1401706

gexiv2 0.10.4 - 15 August 2016

  * Additions to get_comment based on MWG guidelines (#746424)
  * Fix builddir != srcdir
  * Fix leaks in GPS coordinate handling (#754241)
  * Update build instructions (#749800)
  * Copyright transfer to SFC
  * Use M4 macros for GObject introspection (#765827)
  * Clean-up some introspection warnings
  * Catch exception by reference (CID:112500)
  * Generate the VAPI file from GIR
  * Mark _free() functions as deprecated
  * Fix several g-i-scanner warnings
  * Fix build issue introduced by VAPI changes (#768896)
  * Use AX_COMPILER_FLAGS and fix issues risen by that
  * Remove linker flags from CXXFLAGS
  * Enable maintainer mode and silent rules
  * Fix lookup of XMP tags (#768906)
  * Enable compiling without GObject Introspection

Bugs fixed in this release:
- https://bugzilla.gnome.org/show_bug.cgi?id=746424
- https://bugzilla.gnome.org/show_bug.cgi?id=749800
- https://bugzilla.gnome.org/show_bug.cgi?id=754241
- https://bugzilla.gnome.org/show_bug.cgi?id=765827
- https://bugzilla.gnome.org/show_bug.cgi?id=768896
- https://bugzilla.gnome.org/show_bug.cgi?id=768906

(bsiegert)

py-hangups: propagate incompatibilty from py-aiohttp

(adam)

openct: fix path to libusb buildlink3 file

(wiz)

doc: Added textproc/py-poyo version 0.4.0

(minskim)

textproc/Makefile: Add py-poyo

(minskim)

textproc/py-poyo: Import version 0.4.0 from pkgsrc-wip

A YAML Parser for Python.  Poyo is 100% Python and does not require
any additional libs.

Packaged by Guillaume Delpierre and updated by me.

(minskim)

Updated www/py-daphne, www/py-channels

(adam)

py-channels: updated to 2.0.2

2.0.2:
* SyncConsumer now terminates old database connections, and there is a new
  database_sync_to_async wrapper to allow async connections to do the same.

2.0.1:
* AsyncWebsocketConsumer and AsyncJsonWebsocketConsumer classes added
* OriginValidator and AllowedHostsOriginValidator ASGI middleware is now available
* URLRouter now correctly resolves long lists of URLs

2.0.0:
* Major backwards-incompatible rewrite to move to an asyncio base and remove
  the requirement to transport data over the network, as well as overhauled
  generic consumers, test helpers, routing and more.

(adam)

py-daphne: updated to 2.0.3

2.0.3:
* Unix socket listening no longer errors during startup (introduced in 2.0.2)
* ASGI Applications are now not immediately killed on disconnection but instead
  given --application-close-timeout seconds to exit (defaults to 10)

2.0.2:
* WebSockets are no longer closed after the duration of http_timeout

2.0.1:
* Updated logging to correctly route exceptions through the main Daphne logger

2.0.0:
* Major rewrite to the new async-based ASGI specification and to support
  Channels 2. Not backwards compatible.

(adam)

Updated devel/py-backports.functools_lru_cache, devel/py-greenlet

(adam)

py-greenlet: updated to 0.4.13

0.4.13
- Support for Python 3.7
- Support for MinGW x64

(adam)

py-backports.functools_lru_cache: updated to 1.5

1.5:
Refresh package metadata including publishing license with the wheel.

(adam)

doc: Updated cad/oce to 0.18.3

(fhajny)

cat/oce: Update 0.18.3.

- Fix some typos / some rephrasing in README
- Update for vtk 8
- Fixed osx issue with xlocale
- Added missing Precision.hxx header
- Added missing header in Quantity_Color_1.hxx
- Fixed MinGW issue in OSD_MemInfo.cxx
- travis-ci (gcc-5/6/7, osx images) and appveyor updates (Mingw)

(fhajny)

Updated net/haproxy, www/py-cherrypy

(adam)

py-cherrypy: updated to 14.0.0

v14.0.0

* Officially deprecated basic_auth and digest_auth
  tools and the httpauth module, triggering DeprecationWarnings
  if they're used. Applications should instead adapt to use the
  more recent auth_basic and auth_digest tools.
  This deprecated functionality will be removed in a subsequent
  release soon.
* Removed DeprecatedTool and the long-deprecated and disabled
  tidy and nsgmls tools.

(adam)

haproxy: updated to 1.8.4

1.8.4
- BUG/MEDIUM: h2: properly handle the END_STREAM flag on empty DATA frames
- BUILD: ssl: silence a warning when building without NPN nor ALPN support
- BUG/MEDIUM: ssl: cache doesn't release shctx blocks
- BUG/MINOR: lua: Fix default value for pattern in Socket.receive
- DOC: lua: Fix typos in comments of hlua_socket_receive
- BUG/MEDIUM: lua: Fix IPv6 with separate port support for Socket.connect
- BUG/MINOR: lua: Fix return value of Socket.settimeout
- MINOR: dns: Handle SRV record weight correctly.
- BUG/MEDIUM: mworker: execvp failure depending on argv[0]
- MINOR: hathreads: add support for gcc < 4.7
- BUILD/MINOR: ancient gcc versions atomic fix
- BUG/MEDIUM: stream: properly handle client aborts during redispatch
- DOC: clarify the scope of ssl_fc_is_resumed
- CONTRIB: debug: fix a few flags definitions
- BUG/MINOR: poll: too large size allocation for FD events
- BUG/MEDIUM: peers: fix expire date wasn't updated if entry is modified remotely.
- MINOR: servers: Don't report duplicate dyncookies for disabled servers.
- MINOR: global/threads: move cpu_map at the end of the global struct
- MINOR: threads: add a MAX_THREADS define instead of LONGBITS
- MINOR: global: add some global activity counters to help debugging
- MINOR: threads/fd: Use a bitfield to know if there are FDs for a thread in the FD cache
- BUG/MEDIUM: threads/polling: Use fd_cache_mask instead of fd_cache_num
- BUG/MEDIUM: fd: maintain a per-thread update mask
- MINOR: fd: add a bitmask to indicate that an FD is known by the poller
- BUG/MEDIUM: epoll/threads: use one epoll_fd per thread
- BUG/MEDIUM: kqueue/threads: use one kqueue_fd per thread
- BUG/MEDIUM: threads/mworker: fix a race on startup
- BUG/MINOR: mworker: only write to pidfile if it exists
- MINOR: threads: Fix build when we're not compiling with threads.
- BUG/MINOR: threads: always set an owner to the thread_sync pipe
- BUG/MEDIUM: threads/server: Fix deadlock in srv_set_stopping/srv_set_admin_flag
- BUG/MEDIUM: checks: Don't try to release undefined conn_stream when a check is freed
- BUG/MINOR: kqueue/threads: Don't forget to close kqueue_fd[tid] on each thread
- MINOR: threads: Use __decl_hathreads instead of #ifdef/#endif
- BUILD: epoll/threads: Add test on MAX_THREADS to avoid warnings when complied without threads
- BUILD: kqueue/threads: Add test on MAX_THREADS to avoid warnings when complied without threads
- CLEANUP: sample: Fix comment encoding of sample.c
- CLEANUP: sample: Fix outdated comment about sample casts functions
- BUG/MINOR: sample: Fix output type of c_ipv62ip
- CLEANUP: Fix typo in ARGT_MSK6 comment
- BUG/MINOR: cli: use global.maxsock and not maxfd to list all FDs
- BUG/MINOR: threads: Update labels array because of changes in lock_label enum
- BUG/MINOR: epoll/threads: only call epoll_ctl(DEL) on polled FDs
- BUG/MEDIUM: spoe: Always try to receive or send the frame to detect shutdowns
- BUG/MEDIUM: spoe: Allow producer to read and to forward shutdown on request side
- BUG/MINOR: time/threads: ensure the adjusted time is always correct
- BUG/MEDIUM: standard: Fix memory leak in str2ip2()
- MINOR: init: emit warning when -sf/-sd cannot parse argument
- DOC: Describe routing impact of using interface keyword on bind lines
- DOC: Mention -Ws in the list of available options
- BUG/MINOR: config: don't emit a warning when global stats is incompletely configured

(adam)

GC hacks.mk -- switching to system malloc has taken care of the issue.

Unbreak package by including options.mk, which keeps configure from
looking fro X11.

(hauke)

doc: Updated devel/py-argcomplete to 1.9.4

(fhajny)

devel/py-argparse: Update to 1.9.4.

- Use the correct interpreter when checking wrappers
- Provide shellcode as a module function

(fhajny)

doc/TODO: + mpv-0.28.2

(leot)

doc: Updated multimedia/mpv to 0.27.2

(leot)

mpv: Update multimedia/mpv to 0.27.2

Changes:
0.27.2
======
This release contains an additional fix for CVE-2018-6360.

Fixes and Minor Enhancements
----------------------------
- ytdl_hook: whitelist subtitle URLs as well (#5456)

(leot)

Updated graphics/leptonica, devel/py-flake8-import-order, textproc/py-jsonpickle, www/py-aiohttp

(adam)

py-aiohttp: updated to 3.0.1

aiohttp 3.0 release:
Major release, many already deprecated things are removed
Minimal supported Python version is 3.5.3.
aiohttp uses shiny async/await syntax everywhere internally (while old yield from is still supported).

Read https://docs.aiohttp.org/en/stable/whats_new_3_0.html for brief information about most important changes.

(adam)

py-jsonpickle: updated to 0.9.6

Version 0.9.6:
* Better support for SQLAlchemy
* Better support for NumPy and SciKit-Learn.
* Better support for dict sub-classes

(adam)

py-flake8-import-order: updated to 0.17

0.17:
Add all Python3 modules to stdlib list (should be no more missing modules).
Clarify the error messages (more context).
Allow styles to override specific checks.
Correct the edited style to match the actual edited style guide.
Add pycharm style, to match the pycharm auto formatter.

(adam)

leptonica: updated to 1.75.2

1.75.2:
Converted several progs to standard regression tests.
Added these tests to the alltests_reg suite:
adaptnorm_reg, binmorph1_reg, binmorph3_reg, equal_reg,
extrema_reg, grayfill_reg, falsecolor_reg, grayquant_reg.
Autotools fix for restricting giflib to 5.1+, and allowing openjpeg 2.3

(adam)

Updated devel/py-ipykernel, devel/py-isort

(adam)

py-isort: updated to 4.3.4

4.3.4:
* Fixed issue: isort is corrupting CRLF files

(adam)

py-ipykernel: updated to 4.8.1

4.8.1
- set zmq.ROUTER_HANDOVER socket option when available
  to workaround libzmq reconnect bug
- Fix sdists including absolute paths for kernelspec files,
  which prevented installation from sdist on Windows

(adam)

Updated devel/py-construct, devel/py-pexpect

(adam)

py-pexpect: updated to 4.4.0

Version 4.4
PopenSpawn now has a preexec_fn parameter, like spawn and subprocess.Popen, for a function to be called in the child process before executing the new command. Like in Popen, this works only in POSIX, and can cause issues if your application also uses threads.
Significant performance improvements when processing large amounts of data.
Ensure that spawn.closed gets set by close(), and improve an example for passing SIGWINCH through to a child process

(adam)

py-construct: updated to 2.9.30

Version 2.9 was released in January 2018. It adds compiler feature (for better performance!), and other major upgrades. Documentation was overhauled (see Core API pages!).

(adam)

devel/py-chai: Fix PLIST for Python 2.x

(minskim)

Removed not-yet-imported DEPENDency

(adam)

doc: Added textproc/py-html-sanitizer version 1.3.0

(joerg)

+ py-html-sanitizer

(joerg)

Add py-html-sanitizer-1.3.0:

html-sanitizer is a whitelist-based and very opinionated HTML sanitizer
that can be used both for untrusted and trusted sources. It attempts to
clean up the mess made by various rich text editors and or copy-pasting
to make styling of webpages simpler and more consistent. It builds on the
excellent HTML cleaner in lxml to make the result both valid and safe.

It goes further than pure tag filtering by transforming the HTML
fragments to normalize formatting and drop redundant or pointless tags.

(joerg)

doc: Updated databases/py-peewee to 3.0.17

(fhajny)

databases/py-peewee: Update to 3.0.17.

3.0.17
- Fix schema inheritance regression
- Add helper method to postgres migrator for setting search_path

3.0.16
- Improve model graph resolution when iterating results of a query
- Allow Model._meta.schema to be changed at run-time

(fhajny)

Note update of net/ldns to 1.6.17nb5 and then 1.6.17nb6.

(he)

Actually bump PKGREVISION for CVE-2017-1000232 as well.

(he)

Apply fix for CVE-2017-1000232 from
https://git.nlnetlabs.nl/ldns/commit/?id=3bdeed02
Also correct previous CVE, it's CVE-2017-100231...
Bump PKGREVISION.

(he)

Apply fix for CVE-2017-10002, via
https://git.nlnetlabs.nl/ldns/commit/?id=c8391790
Bump PKGREVISION.

(he)

Fix RELRO build

(ryoon)

Updated devel/py-test-runner

(adam)

py-test-runner: updated to 4.0

4.0
* Drop support for Setuptools before Setuptools 27.3.0.

(adam)

Updated misc/libreoffice to 6.0.1.1

(ryoon)

Update to 6.0.1.1

* Fix build with GCC 6.4 (PostgreSQL part)

Changelog:
Bugs fixed compared to 6.0.0 RC3:
    deb#887593 add #include <abstractions/X> to oosplash apparmor profile [Vincas Dargis, Rene Engelhard]
    ofz#4728 bad-cast [Caolán McNamara]
    ofz#4753 bad-cast [Caolán McNamara]
    ofz#4767 bad-cast [Caolán McNamara]
    ofz#4817 bad-cast [Caolán McNamara]
    ofz#4848 bad-cast [Caolán McNamara]
    ofz#4872 bad-cast [Caolán McNamara]
    ofz#4971 bad-cast [Caolán McNamara]
    ofz#5007 bad-cast [Caolán McNamara]
    ofz#5235 bad-cast [Caolán McNamara]
    ofz#5254 bad-cast [Caolán McNamara]
    ofz#5435 sw: fix SwCache::Insert() stale pointers [Michael Stahl]
    ofz#5447 on plcf save force current Fkp to stick in cache [Caolán McNamara]
    ofz#5477 if the para is already oversize, nums would go negative [Caolán McNamara]
    ofz#5535 max decimal places for rtl_math_round is 20 [Caolán McNamara]
    ofz#5747 short->sal_Int32 like in StgDataStrm [Caolán McNamara]
    ofz#5909 bad-cast [Caolán McNamara]
    ofz#6064 bad-cast [Caolán McNamara]
    rhbz#1367846 Scrolling is way too fast in writer [Caolán McNamara]
    rhbz#1535541 mimetypes are .macroEnabled not .macroenabled [Caolán McNamara]
    rhbz#1541486 Base table creation dialog window title is shown in different languages [Stephan Bergmann]
    tdf#32935 CSV import dialog doesn't get focus if libreoffice is already running [Mike Kaganski]
    tdf#38915 Multiple soffice.bin soffice.exe [Mike Kaganski]
    tdf#49134 On opening a password-protected file, the LibreOffice dialog is not raised/given focus [Mike Kaganski]
    tdf#70425 EDITING: Embedded Firebird - Copying integer values from Calc to Base impossible [Tamas Bunth]
    tdf#75256 (Icon-Theme-Sifr) [META] Incomplete Sifr icon theme [Matthias Freund]
    tdf#88004 mimetypes are .macroEnabled not .macroenabled [Caolán McNamara]
    tdf#94225 Writer crashes on undo times N (steps in Comment 11 or Comment 38) [Fyodor Yemelyanenko]
    tdf#95024 Support for new Hungarian orthography [László Németh]
    tdf#103174 Very laggy scrolling with trackpad on hidpi screens [Caolán McNamara]
    tdf#103550 JIS function [Winfried Donkers]
    tdf#104016 FILEOPEN: RTF incorrect bullets indentation and spacing [Miklos Vajna]
    tdf#105226 AM/PM locale for it_IT incorrect [Winfried Donkers]
    tdf#106780 FILESAVE, ODF: attribute text:style-name is invalid in table:table-template [Abhishek Shrivastava]
    tdf#108473 Inserting into a Form Table Control Date/Time (Time) field gets stuck [Julien Nabet]
    tdf#109062 Scrolling with touchpad or scrollwheel is not working on Mac [Caolán McNamara]
    tdf#112292 Memory usage is steadily increasing every time when copying something to the clipboard even with 0 undo steps [Noel Grandin]
    tdf#113751 Borders for Merged Cells are Partially Shown [Armin Le Grand]
    tdf#114045 Undo after Clone Formatting changes formatting of entire table [Mark Hung]
    tdf#114173 FILESAVE XLSX Custom size of chart legend is not preserved when the file is saved as XLSX [Caolán McNamara]
    tdf#114182 FILESAVE XLSX Pie chart slice moved back by LibreOffice Calc [Markus Mohrhard]
    tdf#114217 DOCX with floating table having 100% width incorrectly imported [Mike Kaganski]
    tdf#114221 Calc corrupts password-protected XLS on save (Save as works) - newer MSO 2013 encryption saved as unencrypted file with encryption mode [Caolán McNamara]
    tdf#114306 fix unexpected page break in row-spanned table [Manfred Blume]
    tdf#114428 XHTML import: xml declaration results in plain text import into Writer [Miklos Vajna]
    tdf#114460 Some embedded PDFs not exported to pdf [Miklos Vajna]
    tdf#114466 Certain Document in Use dialog does not get focus [Mike Kaganski]
    tdf#114519 Sidebar Number Format drop down does not update cell contents on number format selection change [Jim Raykowski]
    tdf#114596 External forms for a database doesn't save data - closing form with dataloss [Michael Stahl]
    tdf#114625 Calc can not print right border of merged cells from LO 6.0 [Armin Le Grand]
    tdf#114677 Base Form titles incorrect [Szymon Kłos]
    tdf#114731 Firefox themes cannot be installed, it finds nothing [Julien Nabet]
    tdf#114815 Crash in: take_gil on paste from clipboard in Windows [Michael Stahl]
    tdf#114820 FILEOPEN XLSX VLOOKUP/HLOOKUP gives Error:504, with a reference to an external xlsx file cells [Bartosz Kosiorek]
    tdf#114824 Export to PDF and Printing: Borders of Merged Cells Flow to Page Footer [Armin Le Grand]
    tdf#114901 UI: TSCP Classification dialog: too much vertical white space and Part list too wide [Tomaž Vajngerl]
    tdf#114934 (borderline-regressions) [META] borderline regressions [Armin Le Grand]
    tdf#115013 Merge fields aren't substituted after saving/reopening DOC(X) with added mail merge fields, and running mail merge [Mike Kaganski]
    tdf#115044 Calc asks to update links, but already updated them [Vasily Melenchuk]
    tdf#115057 Color picker widget border missing when opened in dialog [Maxim Monastirsky]
    tdf#115065 Crash when dragging table with many rows to a table with less rows [Mike Kaganski]
    tdf#115080 Replace with Pattern Field misbehaves when editing a form's table control [Caolán McNamara]
    tdf#115088 Pasting multi-line text from external source behaves strangely [Tamás Zolnai]
    tdf#115090 Crashes when closing the document running the macro (itself) [Thorsten Behrens]
    tdf#115100 Assertion failed, if I set vertical align for gluepoint [Julien Nabet]
    tdf#115106 Screen corruption in Writer in FullScreen mode. (gtk2) [Caolán McNamara]
    tdf#115153 FILEOPEN: RTF: Incorrect vertical position of lines (follow-up) [Michael Stahl]
    tdf#115155 FILEOPEN: RTF: left indent is lost in second list [Miklos Vajna]
    tdf#115162 FILEOPEN XLSX SUMIFS, AVERAGEIFS, COUNTIFS, MAXIFS, MINIFS functions give Error:504, with reference to external xlsx files cells [Bartosz Kosiorek]
    tdf#115169 Calc: Rotated Cells not shown rotated when using Print/PDF/PrintPreview [Armin Le Grand]
    tdf#115208 Apparmor profile doesn't allow java execution [Olivier Tilloy]
    tdf#115221 PRINTING: CRASH immediately after choosing comment (+doc) printing in the print dialog [Noel Grandin]
    tdf#115269 LO Base Report Builder crashes on modifying Page Header Horizontal or Vertical alignment [Julien Nabet]
    tdf#115369 Icons for the cell's shadows positions are inverted [Caolán McNamara]
    tdf#115416 LibreOffice fails to build with IJG's libjpeg - error: ‘JCS_EXT_BGRA’ was not declared in this scope [Caolán McNamara]

(ryoon)

Updated lang/openjdk8 to 1.8.162

(ryoon)

Update to 1.8.162

* Pass -fno-lifetime-dse for GCC 6 to prevent segfault

Changelog:
Fix security bugs
CVE-2018-2638
CVE-2018-2639
CVE-2018-2633
CVE-2018-2627
CVE-2018-2637
CVE-2018-2634
CVE-2018-2582
CVE-2018-2641
CVE-2018-2618
CVE-2018-2629
CVE-2018-2603
CVE-2018-2657
CVE-2018-2599
CVE-2018-2581
CVE-2018-2602
CVE-2018-2677
CVE-2018-2678
CVE-2018-2588
CVE-2018-2663
CVE-2018-2675
CVE-2018-2579

(ryoon)

Fix build with OpenSSL 1.1 under NetBSD 8.99.12

(ryoon)

Updated x11/xplanet to 1.3.0

(ryoon)

Update to 1.3.0

* Fix build with GCC 6 with patches from Debian

Changelog:
Version 1.3.0 (released 18 Feb 2012)
        * add "outlined" keyword to marker files

        * update JPL ephemeris code for 64 bit machines

        * add bump_shade config file parameter

        * add opacity keyword for markers

        * implement Rayleigh scattering

(ryoon)

Updated textproc/py-openpyxl, devel/py-faker

(adam)

py-faker: updated to 0.8.11

0.8.11:
* Add scheme selection for internet url provider.
* Increase lower bound on AD date generation.
* Add the ability to specify the min and max age for some ssn locales.

(adam)

py-openpyxl: updated to 2.5.0

2.5.0:
Minor changes
Correct definition for Connection Shapes.

2.5.0-b2:
Bugfixes
TableStyleInfo has no required attributes
Cannot read files with 3D drawings
Incorrect version check in installer
Cell merging uses transposed parameters
ExtLst missing keyword for PivotFields
Inf causes problems for Excel
Cannot load table styles with custom names

Major Changes
You can now insert and delete rows and columns in worksheets

Minor Changes
pip now handles which Python versions can be used.

2.5.0-b1:
Bugfixes
Explicitly support for multiple cell ranges in conditonal formatting
Non-contiguous cell ranges in validators get merged
Empty data validators create invalid Excel files
Large validation ranges use lots of memory
Unicode in chart axes not handled correctly in Python 2
ScatterCharts have defective axes
Charts with empty numVal elements cannot be read
Scaling options from existing files ignored
Charts with PivotSource cannot be read
Cannot read gradient fills
Quotes in number formats could be treated as datetimes

(adam)

Updated www/nghttp2, www/nginx-devel

(adam)

nginx-devel: updated to 1.13.8

Changes with nginx 1.13.8:

*) Feature: now nginx automatically preserves the CAP_NET_RAW capability
  in worker processes when using the "transparent" parameter of the
  "proxy_bind", "fastcgi_bind", "memcached_bind", "scgi_bind", and
  "uwsgi_bind" directives.

*) Feature: improved CPU cache line size detection.
  Thanks to Debayan Ghosh.

*) Feature: new directives in vim syntax highlighting scripts.
  Thanks to Gena Makhomed.

*) Bugfix: binary upgrade refused to work if nginx was re-parented to a
  process with PID different from 1 after its parent process has
  finished.

*) Bugfix: the ngx_http_autoindex_module incorrectly handled requests
  with bodies.

*) Bugfix: in the "proxy_limit_rate" directive when used with the
  "keepalive" directive.

*) Bugfix: some parts of a response might be buffered when using
  "proxy_buffering off" if the client connection used SSL.
  Thanks to Patryk Lesiewicz.

*) Bugfix: in the "proxy_cache_background_update" directive.

*) Bugfix: it was not possible to start a parameter with a variable in
  the "${name}" form with the name in curly brackets without enclosing
  the parameter into single or double quotes.

(adam)

nghttp2: updated to 1.30.0

1.30.0:
lib:
This release fixes the bug so that PING frame can be sent after GOAWAY.

nghttpx:
This release fixes the bug that set_header method in mruby script wrongly overwrites other header fields.

upgrade-scheme parameter has been added to backend option to workaround the issue that a backend server requires that HTTP/2 :scheme pseudo header field value should be https.

This release fixes the bug that ALPN validation does not occur if client does not send TLS ALPN extension.

To more compliant to RFC 8297, nghttpx now remembers which resource is pushed per a single request.

(adam)

Updated www/py-uwsgi, time/py-pytz

(adam)

py-pytz: updated to 2018.3

2018.3:
Unknown changes.

(adam)

py-uwsgi: updated to 2.0.16

uWSGI 2.0.16
Security
[CVE-2018-6758] Stack-based buffer overflow in core/utils.c:uwsgi_expand_path()

Changes
Backported early_post_jail plugin hook (Bjørnar Ness)
Fixed ipv6 suupport for http-socket (James Brown)
Enable execinfo on DragonFly BSD (Aaron LI)
Fix inet_ntop buffer size (Orivej Desh)
Add worker running time metrics (Serge/yasek)
Backported safe-pidfile, safe-pidfile2 (Nate Coraor)
Stop using libxml2 by default on osx
Fixed uwsgi_kvlist_parse signature
Backport http range fixes from master (Curtis Maloney, Sokolov Yura)
relicensed mod_proxy_uwsgi to Apache 2.0
logging: Add ${millis} support to json encode
plugins/router_xmldir: fixup invalid locale check (Riccardo Magliocchetti)
Add ssl-verify-depth flag to set the max Client CA chain length (Paul Tagliamonte)
Allow to override build date (Bernhard M. Wiedemann)
Python 3 plugin: improved thread names handling (Jyrki Muukkonen, Mark Meyer)
Added uwsgi_resolve_ip for redis host (ahmbas)
plugins/gevent: Fix signal handlers (Maslov Alexander)
Write x509 DER to the uwsgi buffer (Paul Tagliamonte)
plugin/http: Fix compilation (Melvyn Sopacua)
Fixed emperor throttling system (Jeremy Hiatt)
Fix application loading without Plack after excluding “.” from @INC in new Perl versions (Anton Petrusevich)
Fix MULE MSG QUEUE IS FULL message hint (Eugene Tataurov)
Build System: support k_minor has a _xxx suffix (TOGO Li)
Fixed drop-after-* options (Robert DeRose)
Add mule_send_msg success indicator (Josh Tiras)
Properly check item size in uwsgi_queue_push (Josh Tiras)
FastRouter / HTTP Router can now have a ‘fallback’ key configured
HTTP Router now supports post-buffer, just like FastRouter
Fix handling of env in embedded dict in Python plugin (could cause segfaults in single thread mode)
Add support for Brotli (.br) with –static-gzip
Back-ported HTTP/1.1 support (–http11-socket) from 2.1

(adam)

Updated multimedia/ffmpeg3

(adam)

ffmpeg3: updated to 3.4.2

version 3.4.2:
- avcodec/vp3: Error out on invalid num_coeffs in unpack_vlcs()
- avcodec/mpeg4videodec: Ignore multiple VOL headers
- avcodec/vp3: Check eob_run
- avcodec/pafvideo: Check allocated frame size
- avcodec/scpr: Fix reading a pixel before the first
- avcodec/mpeg2dec: Fix field selection for skipped macroblocks
- avcodec/huffyuvdec: Check input buffer size
- avcodec/utvideodec: Fix bytes left check in decode_frame()
- avcodec/wavpack: Fix integer overflow in FFABS
- avcodec/aacsbr_fixed: Fix overflows in rounding in sbr_hf_assemble()
- avcodec/exr: Fix memleaks in decode_header()
- avcodec/mediacodecdec: use ff_hevc_ps_uninit()
- avcodec/hevc_parser: use ff_hevc_uninit_parameter_sets()
- avcodec/hevcdec: use ff_hevc_uninit_parameter_sets()
- avcodec/hevc_ps: add a function to uninitialize parameter set buffers
- avcodec/dirac_dwt: Fix several integer overflows
- avcodec/indeo5: Do not leave frame_type set to an invalid value
- avcodec/hevc_ps: Check log2_sao_offset_scale_*
- avcodec/mpeg4videodec: Avoid possibly aliasing violating casts
- avcodec/get_bits: Document the return code of get_vlc2()
- avcodec/mpeg4videodec: Check mb_num also against 0
- avfilter/vf_transpose: Fix used plane count.
- avcodec/hevc_cabac: Check prefix so as to avoid invalid shifts in coeff_abs_level_remaining_decode()
- avcodec/mjpegdec: Fix integer overflow in DC dequantization
- avcodec/dxtory: Fix bits left checks
- avcodec/hevc_cabac: Move prefix check in coeff_abs_level_remaining_decode() down
- avcodec/truemotion2: Fix integer overflow in TM2_RECALC_BLOCK()
- avcodec/snowdec: Fix integer overflow before htaps check
- avcodec/ulti: Check number of blocks at init
- avcodec/wavpack: Fix integer overflows in wv_unpack_stereo / mono
- avcodec/jpeg2000: Check sum of sizes of band->prec before allocating
- avcodec/ac3dec_fixed: Fix integer overflow in scale_coefs()
- avformat/lrcdec: Fix memory leak in lrc_read_header()
- avformat/matroskadec: Fix float-cast-overflow undefined behavior in matroska_parse_tracks()
- lavfi/deinterlace_vaapi: fix can't show full option information.
- configure:version 3.4.1: bump year
- avcodec/utils: Avoid hardcoding duplicated types in sizeof()
- avcodec/arm/sbrdsp_neon: Use a free register instead of putting 2 things in one
- avcodec/h264addpx_template: Fixes integer overflows
- avcodec/dirac_dwt: Fix overflows in COMPOSE_HAARiH0/COMPOSE_HAARiL0
- avcodec/diracdec: Fix integer overflow with quant
- avcodec/opus_parser: Check payload_len in parse_opus_ts_header()
- avcodec/jpeg2000dsp: Fix integer overflows in ict_int()
- avcodec/h264_slice: Do not attempt to render into frames already output
- avcodec/dnxhddec: Check dc vlc
- avcodec/exr: Check buf_size more completely
- avcodec/flacdec: Fix overflow in multiplication in decode_subframe_fixed()
- avcodec/hevcdsp_template: Fix Invalid shifts in put_hevc_qpel_bi_w_h() and put_hevc_qpel_bi_w_w()
- avcodec/flacdec: avoid undefined shift
- avcodec/hevcdsp_template.c: Fix undefined shift in FUNC(dequant)
- avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0() and COMPOSE_DD137iL0()
- avcodec/hevc_cabac: Fix integer overflow in ff_hevc_cu_qp_delta_abs()
- tests/audiomatch: Add missing return code at the end of main()
- avcodec/hevc_sei: Fix integer overflows in decode_nal_sei_message()
- avcodec/hevcdsp_template: Fix undefined shift in put_hevc_qpel_bi_w_hv()
- avcodec/h264_parse: Treat escaped and unescaped decoding error equal in decode_extradata_ps_mp4()
- avcodec/vp9: mark frame as finished on decode_tiles() failure
- libavfilter/af_dcshift.c: Fixed repeated spelling error
- avfilter/formats: fix wrong function name in error message

(adam)

databases/sqlrelay*: Skip SSP checks for archives

(fhajny)