Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (1h)  pkgsrc-2024Q1 (14d)  pkgsrc-2023Q4 (42d)  pkgsrc-2023Q2 (74d)  pkgsrc-2023Q3 (154d) 

2024-05-12 21:03:50 UTC Now

2018-01-07 19:17:28 UTC MAIN commitmail json YAML

grafana/Makefile: revert rev 1.6-1.7

Actual problem was that EXTRACT_SUFX must be set earlier for intended
Makefile variable expansion.
It used to be set but got lost in the 4.6.2 update commit.

(tnn)

2018-01-07 19:05:02 UTC MAIN commitmail json YAML

grafana: fix build

XXX I'm positive this worked before

(tnn)

2018-01-07 18:19:23 UTC MAIN commitmail json YAML

doc/TODO: add some

+ ImageMagick-7.0.7.21, geeqie-1.4, gmime3-3.0.5, gnumeric112-1.12.38,
  goffice0.10-0.10.38, gtk-doc-1.27, gtksourceview3-3.24.6,
  libfilezilla-0.11.2, libmspub-0.1.3, librsvg-2.40.20, musicpd-0.20.15,
  py-Unidecode-1.0.22, py-borg-1.1.4, py-numpy-1.14.0,
  py-setuptools-38.4.0, unixodbc-2.3.5, vala-0.38.4, vim-8.0.1428,
  vim-share-8.0.1428.

(wiz)

2018-01-07 18:14:16 UTC MAIN commitmail json YAML

doc/CHANGES-2018: mention {py-,}bdb-xml removal

(wiz)

2018-01-07 18:13:35 UTC MAIN commitmail json YAML

2018-01-07 18:02:30 UTC pkgsrc-2017Q4 commitmail json YAML

Pullup ticket #5677 - requested by taca
converters/php-iconv: reset PKGREVISION
databases/php-pdo_sqlite: reset PKGREVISION
textproc/php-intl: reset PKGREVISION
textproc/php-json: reset PKGREVISION

Revisions pulled up:
- converters/php-iconv/Makefile                                1.13
- databases/php-pdo_sqlite/Makefile                            1.29
- textproc/php-intl/Makefile                                    1.34
- textproc/php-json/Makefile                                    1.6

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Jan  5 03:14:52 UTC 2018

  Modified Files:
  pkgsrc/converters/php-iconv: Makefile
  pkgsrc/databases/php-pdo_sqlite: Makefile
  pkgsrc/textproc/php-intl: Makefile
  pkgsrc/textproc/php-json: Makefile

  Log Message:
  lang/php: reset PKGREVISION

  Reset PKGREVISION with updating of all lang/php* packages.

(bsiegert)

2018-01-07 18:01:22 UTC pkgsrc-2017Q4 commitmail json YAML

Pullup ticket #5676 - requested by taca
lang/php72: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.201
- lang/php72/distinfo                                          1.11

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Jan  5 03:12:12 UTC 2018

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php72: distinfo

  Log Message:
  lang/php72: update to 7.2.1

  04 Jan 2018, PHP 7.2.1

  - Core:
    . Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence)
    . Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
      (Anatol)
    . Fixed bug #75525 (Access Violation in vcruntime140.dll). (Anatol)
    . Fixed bug #74862 (Unable to clone instance when private __clone defined).
      (Daniel Ciochiu)
    . Fixed bug #75074 (php-process crash when is_file() is used with strings
      longer 260 chars). (Anatol)

  - CLI server:
    . Fixed bug #73830 (Directory does not exist). (Anatol)

  - FPM:
    . Fixed bug #64938 (libxml_disable_entity_loader setting is shared between
      requests). (Remi)

  - GD:
    . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx).
      (Christoph)

  - Opcache:
    . Fixed bug #75608 ("Narrowing occurred during type inference" error).
      (Laruence, Dmitry)
    . Fixed bug #75579 (Interned strings buffer overflow may cause crash).
      (Dmitry)
    . Fixed bug #75570 ("Narrowing occurred during type inference" error).
      (Dmitry)
    . Fixed bug #75556 (Invalid opcode 138/1/1). (Laruence)

  - PCRE:
    . Fixed bug #74183 (preg_last_error not returning error code after error).
      (Andrew Nester)

  - Phar:
    . Fixed bug #74782 (remove file name from output to avoid XSS). (stas)

  - Standard:
    . Fixed bug #75511 (fread not free unused buffer). (Laruence)
    . Fixed bug #75514 (mt_rand returns value outside [$min,$max]+ on 32-bit)
      (Remi)
    . Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP
      segment fault). (Nikita)
    . Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator
      that getrandom() is missing). (sarciszewski)
    . Fixed bug #73124 (php_ini_scanned_files() not reporting correctly).
      (John Stevenson)
    . Fixed bug #75574 (putenv does not work properly if parameter contains
      non-ASCII unicode character). (Anatol)

  - Zip:
    . Fixed bug #75540 (Segfault with libzip 1.3.1). (Remi)

(bsiegert)

2018-01-07 17:39:56 UTC pkgsrc-2017Q4 commitmail json YAML

Pullup ticket #5675 - requested by taca
lang/php71: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.200
- lang/php71/distinfo                                          1.31

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Jan  5 03:11:13 UTC 2018

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php71: distinfo

  Log Message:
  lang/php71: update to 7.1.13

  04 Jan 2018, PHP 7.1.13

  - Core:
    . Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence)
    . Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
      (Anatol)
    . Fixed bug #74862 (Unable to clone instance when private __clone defined).
      (Daniel Ciochiu)
    . Fixed bug #75074 (php-process crash when is_file() is used with strings
      longer 260 chars). (Anatol)

  - CLI Server:
    . Fixed bug #60471 (Random "Invalid request (unexpected EOF)" using a router
      script). (SammyK)
    . Fixed bug #73830 (Directory does not exist). (Anatol)

  - FPM:
    . Fixed bug #64938 (libxml_disable_entity_loader setting is shared between
      requests). (Remi)

  - GD:
    . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx).
      (Christoph)

  - Opcache:
    . Fixed bug #75608 ("Narrowing occurred during type inference" error).
      (Laruence, Dmitry)
    . Fixed bug #75579 (Interned strings buffer overflow may cause crash).
      (Dmitry)
    . Fixed bug #75570 ("Narrowing occurred during type inference" error).
      (Dmitry)

  - PCRE:
    . Fixed bug #74183 (preg_last_error not returning error code after error).
      (Andrew Nester)

  - Phar:
    . Fixed bug #74782 (remove file name from output to avoid XSS). (stas)

  - Standard:
    . Fixed bug #75511 (fread not free unused buffer). (Laruence)
    . Fixed bug #75514 (mt_rand returns value outside [$min,$max]+ on 32-bit)
      (Remi)
    . Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP
      segment fault). (Nikita)
    . Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator
      that getrandom() is missing). (sarciszewski)
    . Fixed bug #73124 (php_ini_scanned_files() not reporting correctly).
      (John Stevenson)
    . Fixed bug #75574 (putenv does not work properly if parameter contains
      non-ASCII unicode character). (Anatol)

  - Zip:
    . Fixed bug #75540 (Segfault with libzip 1.3.1). (Remi)

(bsiegert)

2018-01-07 17:36:23 UTC pkgsrc-2017Q4 commitmail json YAML

Pullup ticket #5674 - requested by taca
lang/php70: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.199
- lang/php70/distinfo                                          1.41

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Jan  5 03:09:59 UTC 2018

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php70: distinfo

  Log Message:
  lang/php70: update to 7.0.27

  04 Jan 2018 PHP 7.0.27

  - CLI Server:
    . Fixed bug #60471 (Random "Invalid request (unexpected EOF)" using a router
      script). (SammyK)

  - Core:
    . Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
      (Anatol)
    . Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence)

  - FPM:
    . Fixed bug #64938 (libxml_disable_entity_loader setting is shared between
      requests). (Remi)

  - GD:
    . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx). (cmb)

  - Opcache:
    . Fixed bug #75579 (Interned strings buffer overflow may cause crash).
      (Dmitry)

  - PCRE:
    . Fixed bug #74183 (preg_last_error not returning error code after error).
      (Andrew Nester)

  - Phar:
    . Fixed bug #74782 (Reflected XSS in .phar 404 page). (Stas)

  - Standard:
    . Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP
      segment fault). (Nikita)
    . Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator
      that getrandom() is missing). (sarciszewski)

  - Zip:
    . Fixed bug #75540 (Segfault with libzip 1.3.1). (Remi)

(bsiegert)

2018-01-07 17:30:26 UTC pkgsrc-2017Q4 commitmail json YAML

Pullup ticket #5673 - requested by taca
lang/php56: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.198
- lang/php56/distinfo                                          1.44

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Jan  5 03:08:36 UTC 2018

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php56: distinfo

  Log Message:
  lang/php56: update to 5.6.33

  04 Jan 2017, PHP 5.6.33

  - GD:
    . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx). (cmb)

  - Phar:
    . Fixed bug #74782 (Reflected XSS in .phar 404 page). (Stas)

(bsiegert)

2018-01-07 17:08:24 UTC MAIN commitmail json YAML

doc: Updated pkgtools/pkglint to 5.4.26

(rillig)

2018-01-07 17:08:15 UTC MAIN commitmail json YAML

Updated pkglint to 5.4.26.

Changes since 5.4.25:

* When autofixing a patch, fix the corresponding distinfo file as well.

* Properly parse ${VARNAME:[\#]};
  the # was interpreted as a comment before.

* Don't add unnecessary :Q to PKG_OPTIONS and related variables.

* Don't warn about missing manual pages. While Debian and other
  distributions do this work, pkgsrc keeps the packages as original as
  possible.

* Autofix redundant ".gz" for manual pages in PLISTs.

(rillig)

2018-01-07 17:04:38 UTC MAIN commitmail json YAML

amanda-server: Sort PLIST

(rillig)

2018-01-07 15:09:02 UTC MAIN commitmail json YAML

doc: Updated www/privoxy to 3.0.26

(leot)

2018-01-07 15:08:50 UTC MAIN commitmail json YAML

privoxy: Update www/privoxy to 3.0.26

pkgsrc changes:
- Add user.filter to CONF_FILES_PERMS, it is used by default in the privoxy
  config and if not present privoxy will refuse to start.

Changes:
*** Version 3.0.26 stable ***

- Bug fixes:
  - Fixed crashes with "listen-addr :8118" (SF Bug #902).
    The regression was introduced in 3.0.25 beta and reported
    by Marvin Renich in Debian bug #834941.

- General improvements:
  - Log when privoxy is toggled on or off via cgi interface.
  - Highlight the "Info: Now toggled " on/off log message
    in the Windows log viewer.
  - Highlight the loading actions/filter file log message
    in the Windows log viewer.
  - Mention client-specific tags on the toggle page as a
    potentionally more appropriate alternative.

- Documentation improvements:
  - Update download section on the homepage.
    The downloads are available from the website now.
  - Add sponsor FAQ.
  - Remove obsolete reference to mailing lists hosted at SourceForge.
  - Update the "Before the Release" section of the developer manual.

- Infrastructure improvements:
  - Add perl script to generate an RSS feed for the packages
    Submitted by "Unknown".

- Build system improvements:
  - strptime.h: fix a compiler warning about ambiguous else.
  - configure.in: Check for Docbook goo on the BSDs as well.
  - GNUMakefile.in: Let the dok-user target remove temporary files.

*** Version 3.0.25 beta ***

- Bug fixes:
  - Always use the current toggle state for new requests.
    Previously new requests on reused connections inherited
    the toggle state from the previous request even though
    the toggle state could have changed.
    Reported by Robert Klemme.
  - Fixed two buffer-overflows in the (deprecated) static
    pcre code. These bugs are not considered security issues
    as the input is trusted.
    Found with afl-fuzz and ASAN.

- General improvements:
  - Added support for client-specific tags which allow Privoxy
    admins to pre-define tags that are set for all requests from
    clients that previously opted in through the CGI interface.
    They are useful in multi-user setups where admins may
    want to allow users to disable certain actions and filters
    for themselves without affecting others.
    In single-user setups they are useful to allow more fine-grained
    toggling. For example to disable request blocking while still
    crunching cookies, or to disable experimental filters only.
    This is an experimental feature, the syntax and behaviour may
    change in future versions.
    Sponsored by Robert Klemme.
  - Dynamic filters and taggers now support a $listen-address variable
    which contains the address the request came in on.
    For external filters the variable is called $PRIVOXY_LISTEN_ADDRESS.
    Original patch contributed by pursievro.
  - Add client-header-tagger 'listen-address'.
  - Include the listen-address in the log message when logging new requests.
    Patch contributed by pursievro.
  - Turn invalid max-client-connections values into fatal errors.
  - The show-status page now shows whether or not dates before 1970
    and after 2038 are expected to be handled properly.
    This is mainly useful for Privoxy-Regression-Test but could
    also come handy when dealing with time-related support requests.
  - On Mac OS X the thread id in log messages are more likely to
    be unique now.
  - When complaining about missing filters, the filter type is logged
    as well.
  - A couple of harmless coverity warnings were silenced
    (CID #161202, CID #161203, CID #161211).

- Action file improvements:
  - Filtering is disabled for Range requests to let download resumption
    and Windows updates work with the default configuration.
  - Unblock ".ardmediathek.de/".
    Reported by ThTomate in #932.

- Documentation improvements:
  - Add FAQ entry for crashes caused by memory limits.
  - Remove obsolete FAQ entry about a bug in PHP 4.2.3.
  - Mention the new mailing lists were appropriate.
    As the archives have not been migrated, continue to
    mention the archives at SF in the contacting section
    for now.
  - Note that the templates should be adjusted if Privoxy is
    running as intercepting proxy without getting all requests.
  - A bunch of links were converted to https://.
  - Rephrase onion service paragraph to make it more obvious
    that Tor is involved and that the whole website (and not
    just the homepage) is available as onion service.
  - Streamline the "More information" section on the homepage further
    by additionally ditching the link to the 'See also' section
    of the user manual. The section contains mostly links that are
    directly reachable from the homepage already and the rest is
    not significant enough to get a link from the homepage.
  - Change the add-header{} example to set the DNT header
    and use a complete section to make copy and pasting
    more convenient.
    Add a comment to make it obvious that adding the
    header is not recommended for obvious reasons.
    Using the DNT header as example was suggested by
    Leo Wzukw.
  - Streamline the support-and-service template
    Instead of linking to the various support trackers
    (whose URLs hopefully change soon), link to the
    contact section of the user manual to increase the
    chances that users actually read it.
  - Add a FAQ entry for tainted sockets.
  - More sections in the documentation have stable URLs now.
  - FAQ: Explain why 'ping config.privoxy.org' is not expected
    to reach a local Privoxy installation.
  - Note that donations done through Zwiebelfreunde e.V. currently
    can't be checked automatically.
  - Updated section regarding starting Privoxy under OS X.
  - Use dedicated start instructions for FreeBSD and ElectroBSD.
  - Removed release instructions for AIX. They haven't been working
    for years and unsurprisingly nobody seems to care.
  - Removed obsolete reference to the solaris-dist target.
  - Updated the release instructions for FreeBSD.
  - Removed unfinished release instructions for Amiga OS and HP-UX 11.
  - Added a pointer to the Cygwin Time Machine for getting the last release of
    Cygwin version 1.5 to use for building Privoxy on Windows.
  - Various typos have been fixed.

- Infrastructure improvements:
  - The website is no longer hosted at SourceForge and
    can be reached through https now.
  - The mailing lists at SourceForge have been deprecated,
    you can subscribe to the new ones at: https://lists.privoxy.org/
  - Migrating the remaining services from SourceForge is
    work in progress (TODO list item #53).

- Build system improvements:
  - Add configure argument to optimistically redefine FD_SETSIZE
    with the intent to change the maximum number of client
    connections Privoxy can handle. Only works with some libcs.
    Sponsored by Robert Klemme.
  - Let the tarball-dist target skip files in ".git".
  - Let the tarball-dist target work in cwds other than current.
  - Make the 'clean' target faster when run from a git repository.
  - Include tools in the generic distribution.
  - Let the gen-dist target work in cwds other than current.
  - Sort find output that is used for distribution tarballs
    to get reproducible results.
  - Don't add '-src' to the name of the tar ball generated by the
    gen-dist target. The package isn't a source distribution but a
    binary package.
    While at it, use a variable for the name to reduce the chances
    that the various references get out of sync and fix the gen-upload
    target which was looking in the wrong directory.
  - Add regression-tests.action to the files that are distributed.
  - The gen-dist target which was broken since 2002 (r1.92) has been fixed.
  - Remove genclspec.sh which has been obsolete since 2009.
  - Remove obsolete reference to Redhat spec file.
  - Remove the obsolete announce target which has been commented out years ago.
  - Let rsync skip files if the checksums match.

- Privoxy-Regression-Test:
  - Add a "Default level offset" directive which can be used to
    change the default level by a given value.
    This directive affects all tests located after it until the end
    of the file or a another "Default level offset" directive is reached.
    The purpose of this directive is to make it more convenient to skip
    similar tests in a given file without having to remove or disable
    the tests completely.
  - Let test level 17 depend on FEATURE_64_BIT_TIME_T
    instead of FEATURE_PTHREAD which has no direct connection
    to the time_t size.
  - Fix indentation in perldoc examples.
  - Don't overlook directives in the first line of the action file.
  - Bump version to 0.7.
  - Fix detection of the Privoxy version now that https://
    is used for the website.

*** Version 3.0.24 stable ***

- Security fixes (denial of service):
  - Prevent invalid reads in case of corrupt chunk-encoded content.
    CVE-2016-1982. Bug discovered with afl-fuzz and AddressSanitizer.
  - Remove empty Host headers in client requests.
    Previously they would result in invalid reads. CVE-2016-1983.
    Bug discovered with afl-fuzz and AddressSanitizer.

- Bug fixes:
  - When using socks5t, send the request body optimistically as well.
    Previously the request body wasn't guaranteed to be sent at all
    and the error message incorrectly blamed the server.
    Fixes #1686 reported by Peter M�ller and G4JC.
  - Fixed buffer scaling in execute_external_filter() that could lead
    to crashes. Submitted by Yang Xia in #892.
  - Fixed crashes when executing external filters on platforms like
    Mac OS X. Reported by Jonathan McKenzie on ijbswa-users@.
  - Properly parse ACL directives with ports when compiled with HAVE_RFC2553.
    Previously the port wasn't removed from the host and in case of
    'permit-access 127.0.0.1 example.org:80' Privoxy would try (and fail)
    to resolve "example.org:80" instead of example.org.
    Reported by Pak Chan on ijbswa-users@.
  - Check requests more carefully before serving them forcefully
    when blocks aren't enforced. Privoxy always adds the force token
    at the beginning of the path, but would previously accept it anywhere
    in the request line. This could result in requests being served that
    should be blocked. For example in case of pages that were loaded with
    force and contained JavaScript to create additionally requests that
    embed the origin URL (thus inheriting the force prefix).
    The bug is not considered a security issue and the fix does not make
    it harder for remote sites to intentionally circumvent blocks if
    Privoxy isn't configured to enforce them.
    Fixes #1695 reported by Korda.
  - Normalize the request line in intercepted requests to make rewriting
    the destination more convenient. Previously rewrites for intercepted
    requests were expected to fail unless $hostport was being used, but
    they failed "the wrong way" and would result in an out-of-memory
    message (vanilla host patterns) or a crash (extended host patterns).
    Reported by "Guybrush Threepwood" in #1694.
  - Enable socket lingering for the correct socket.
    Previously it was repeatedly enabled for the listen socket
    instead of for the accepted socket. The bug was found by
    code inspection and did not cause any (reported) issues.
  - Detect and reject parameters for parameter-less actions.
    Previously they were silently ignored.
  - Fixed invalid reads in internal and outdated pcre code.
    Found with afl-fuzz and AddressSanitizer.
  - Prevent invalid read when loading invalid action files.
    Found with afl-fuzz and AddressSanitizer.
  - Windows build: Use the correct function to close the event handle.
    It's unclear if this bug had a negative impact on Privoxy's behaviour.
    Reported by Jarry Xu in #891.
  - In case of invalid forward-socks5(t) directives, use the
    correct directive name in the error messages. Previously they
    referred to forward-socks4t failures.
    Reported by Joel Verhagen in #889.

- General improvements:
  - Set NO_DELAY flag for the accepting socket. This significantly reduces
    the latency if the operating system is not configured to set the flag
    by default. Reported by Johan Sintorn in #894.
  - Allow to build with mingw x86_64. Submitted by Rustam Abdullaev in #135.
  - Introduce the new forwarding type 'forward-webserver'.
    Currently it is only supported by the forward-override{} action and
    there's no config directive with the same name. The forwarding type
    is similar to 'forward', but the request line only contains the path
    instead of the complete URL.
  - The CGI editor no longer treats 'standard.action' special.
    Nowadays the official "standards" are part of default.action
    and there's no obvious reason to disallow editing them through
    the cgi editor anyway (if the user decided that the lack of
    authentication isn't an issue in her environment).
  - Improved error messages when rejecting intercepted requests
    with unknown destination.
  - A couple of log messages now include the number of active threads.
  - Removed non-standard Proxy-Agent headers in HTTP snipplets
    to make testing more convenient.
  - Include the error code for pcre errors Privoxy does not recognize.
  - Config directives with numerical arguments are checked more carefully.
  - Privoxy's malloc() wrapper has been changed to prevent zero-size
    allocations which should only occur as the result of bugs.
  - Various cosmetic changes.

- Action file improvements:
  - Unblock ".deutschlandradiokultur.de/".
    Reported by u302320 in #924.
  - Add two fast-redirect exceptions for "yandex.ru".
  - Disable filter{banners-by-size} for ".plasmaservice.de/".
  - Unblock "klikki.fi/adv/".
  - Block requests for "resources.infolinks.com/".
    Reported by "Black Rider" on ijbswa-users@.
  - Block a bunch of criteo domains.
    Reported by Black Rider.
  - Block "abs.proxistore.com/abe/".
    Reported by Black Rider.
  - Disable filter{banners-by-size} for ".black-mosquito.org/".
  - Disable fast-redirects for "disqus.com/".

- Documentation improvements:
  - FAQ: Explicitly point fingers at ASUS as an example of a
    company that has been reported to force malware based on
    Privoxy upon its customers.
  - Correctly document the action type for a bunch of "multi-value"
    actions that were incorrectly documented to be "parameterized".
    Reported by Gregory Seidman on ijbswa-users@.
  - Fixed the documented type of the forward-override{} action
    which is obviously 'parameterized'.

- Website improvements:
  - Users who don't trust binaries served by SourceForge
    can get them from a mirror. Migrating away from SourceForge
    is planned for 2016 (TODO list item #53).
  - The website is now available as onion service
    (http://jvauzb4sb3bwlsnc.onion/).

(leot)

2018-01-07 14:42:53 UTC MAIN commitmail json YAML

py-borgbackup-1.1.4

(bsiegert)

2018-01-07 14:42:08 UTC MAIN commitmail json YAML

Update borgbackup to 1.1.4.

Fixes:

- check: data corruption fix: fix for borg check --repair malfunction, #3444.
  See the more detailled notes close to the top of this document.
- delete: also delete security dir when deleting a repo, #3427
- prune: fix building the "borg prune" man page, #3398
- init: use given --storage-quota for local repo, #3470
- init: properly quote repo path in output
- fix startup delay with dns-only own fqdn resolving, #3471

New features:

- added zstd compression. try it!
- added placeholder {reverse-fqdn} for fqdn in reverse notation
- added BORG_BASE_DIR environment variable, #3338

Other changes:

- list help topics when invalid topic is requested
- fix lz4 deprecation warning, requires lz4 >= 1.7.0 (r129)
- add parens for C preprocessor macro argument usages (did not cause malfunction)
- exclude broken pytest 3.3.0 release
- updated fish/bash completions
- init: more clear exception messages for borg create, #3465
- docs:

  - add auto-generated docs for borg config
  - don't generate HTML docs page for borgfs, #3404
  - docs update for lz4 b2 zstd changes
  - add zstd to compression help, readme, docs
  - update requirements and install docs about bundled lz4 and zstd
- refactored build of the compress and crypto.low_level extensions, #3415:

  - move some lib/build related code to setup_{zstd,lz4,b2}.py
  - bundle lz4 1.8.0 (requirement: >= 1.7.0 / r129)
  - bundle zstd 1.3.2 (requirement: >= 1.3.0)
  - blake2 was already bundled
  - rename BORG_LZ4_PREFIX env var to BORG_LIBLZ4_PREFIX for better consistency:
    we also have BORG_LIBB2_PREFIX and BORG_LIBZSTD_PREFIX now.
  - add prefer_system_lib* = True settings to setup.py - by default the build
    will prefer a shared library over the bundled code, if library and headers
    can be found and meet the minimum requirements.

Pre-1.1.4 potential data corruption issue
-----------------------------------------

A data corruption bug was discovered in borg check --repair, see issue #3444.

This is a 1.1.x regression, releases < 1.1 (e.g. 1.0.x) are not affected.

To avoid data loss, you must not run borg check --repair using an unfixed version
of borg 1.1.x. The first official release that has the fix is 1.1.4.

Package maintainers may have applied the fix to updated packages of 1.1.x (x<4)
though, see the package maintainer's package changelog to make sure.

If you never had missing item metadata chunks, the bug has not affected you
even if you did run borg check --repair with an unfixed version.

When borg check --repair tried to repair corrupt archives that miss item metadata
chunks, the resync to valid metadata in still present item metadata chunks
malfunctioned. This was due to a broken validator that considered all (even valid)
item metadata as invalid. As they were considered invalid, borg discarded them.
Practically, that means the affected files, directories or other fs objects were
discarded from the archive.

Due to the malfunction, the process was extremely slow, but if you let it
complete, borg would have created a "repaired" archive that has lost a lot of items.
If you interrupted borg check --repair because it was so strangely slow (killing
borg somehow, e.g. Ctrl-C) the transaction was rolled back and no corruption occurred.

The log message indicating the precondition for the bug triggering looks like:

    item metadata chunk missing [chunk: 001056_bdee87d...a3e50d]

If you never had that in your borg check --repair runs, you're not affected.

But if you're unsure or you actually have seen that, better check your archives.
By just using "borg list repo::archive" you can see if all expected filesystem
items are listed.

(bsiegert)

2018-01-07 14:20:24 UTC MAIN commitmail json YAML

doc: Updated devel/ruby-diva to 0.3.1

(tsutsui)

2018-01-07 14:19:04 UTC MAIN commitmail json YAML

ruby-diva: update to 0.3.1.

Upstream changes:
- support export/import of models with time field in ISO 8601 format strings

(tsutsui)

2018-01-07 13:09:43 UTC MAIN commitmail json YAML

doc/TODO: Add a comment to the mpv-0.28 entry and assign it to myself

mpv-0.28 at the moment needs a not-yet-released ffmpeg3 (ffmpeg3>3.4)
so for the moment it's better to stick with mpv-0.27 to avoid to pick up mpv
fork of ffmpeg3.

(leot)

2018-01-07 13:06:04 UTC MAIN commitmail json YAML

doc/TODO: Adjust webkit-gtk-2.18.4 entry

webkit-gtk in pkgsrc-wip was updated to 2.18.4, unify the two webkit-gtk
entries.

(leot)

2018-01-07 13:04:44 UTC MAIN commitmail json YAML

2018-01-07 13:01:45 UTC MAIN commitmail json YAML

doc: Updated print/zathura-pdf-mupdf to 0.3.2

(leot)

2018-01-07 13:01:32 UTC MAIN commitmail json YAML

zathura-pdf-mupdf: Update print/zathura-pdf-mupdf to 0.3.2

pkgsrc changes:
- Remove patches/patch-image.c, patches/patch-index.c, patches/patch-page.c,
  patches/patch-plugin.h, patches/patch-render.c, patches/patch-select.c,
  patches/patch-utils.c . They were all applied upstream and no more needed.

Changes:
0.3.2
-----
* Compatible with mupdf 1.12
* Adapt to new plugin interface

(leot)

2018-01-07 13:01:05 UTC MAIN commitmail json YAML

doc: Updated print/zathura-pdf-poppler to 0.2.8

(leot)

2018-01-07 13:00:52 UTC MAIN commitmail json YAML

zathura-pdf-poppler: Update print/zathura-pdf-poppler to 0.2.8

Changes:
0.2.8
-----
* Adapt to new plugin interface

(leot)

2018-01-07 13:00:24 UTC MAIN commitmail json YAML

doc: Updated print/zathura-ps to 0.2.5

(leot)

2018-01-07 13:00:07 UTC MAIN commitmail json YAML

zathura-ps: Update print/zathura-ps to 0.2.5

Changes:
0.2.5
-----
* Adapt to new plugin interface

(leot)

2018-01-07 12:59:40 UTC MAIN commitmail json YAML

doc: Updated graphics/zathura-djvu to 0.2.7

(leot)

2018-01-07 12:59:27 UTC MAIN commitmail json YAML

zathura-djvu: Update graphics/zathura-djvu to 0.2.7

Changes:
0.2.7
-----
* Adapt to new plugin interface

(leot)

2018-01-07 12:58:57 UTC MAIN commitmail json YAML

doc: Updated graphics/zathura-cb to 0.1.7

(leot)

2018-01-07 12:58:43 UTC MAIN commitmail json YAML

zathura-cb: Update graphics/zathura-cb to 0.1.7

pkgsrc changes:
- Inject LIBARCHIVE_{INC,LIB} via MAKE_FLAGS.
  When builtin libarchive is used, `libarchive.pc' is not always available
  (e.g. on NetBSD).

Changes:
0.1.7
-----
* Adapt to new plugin interface

(leot)

2018-01-07 12:58:12 UTC MAIN commitmail json YAML

doc: Updated print/zathura to 0.3.8

(leot)

2018-01-07 12:57:59 UTC MAIN commitmail json YAML

zathura: Update print/zathura to 0.3.8

Changes:
0.3.8
-----
* Fix memory leaks
* Rework plugin initialization
* Various fixes and improvements
* Updated translations

(leot)

2018-01-07 12:57:24 UTC MAIN commitmail json YAML

doc: Updated graphics/girara to 0.2.8

(leot)

2018-01-07 12:57:03 UTC MAIN commitmail json YAML

girara: Update graphics/girara to 0.2.8

pkgsrc changes:
- Bump BUILDLINK_API_DEPENDS.girara due to API and ABI changes and delete
  BUILDLINK_ABI_DEPENDS.girara that is no more needed.

Changes:
0.2.8
-----
* Adopt CSS to newer GTK+ 3 releases
* Remove obsolete features
* Various fixes and improvments
* Update translations

(leot)

2018-01-07 12:21:04 UTC MAIN commitmail json YAML

nano had been updated to 2.9.2

(wen)

2018-01-07 12:20:06 UTC MAIN commitmail json YAML

Updated math/R-sp to 1.2.6

(wen)

2018-01-07 12:18:11 UTC MAIN commitmail json YAML

Update to 1.2.6

No upstream changelog found.

(wen)

2018-01-07 11:50:06 UTC MAIN commitmail json YAML

Updated editors/nano to 2.9.2

(wen)

2018-01-07 11:49:10 UTC MAIN commitmail json YAML

Update to 2.9.2

Upstream changes:
2018 January 2

GNU nano 2.9.2 "Pussy Riot" correctly displays the Modified
state when undoing/redoing (also when the file was saved
somewhere midway), improves the undoing of an automatic
linefeed at EOF, fixes a build issue on the BSDs, shows
the cursor again when compiled with --withslang, renames
the option 'justifytrim' to 'trimblanks' because it will
now snip trailing whitespace also while you are typing
(and hard-wrapping is enabled), continues pushing words
to the next line much longer (when hard-wrapping), makes
and  indent and unindent a marked region,
allows unindenting when not all lines are indented, lets a
region marked with Shift persist when indenting/unindenting
or commenting/uncommenting it, and in those cases excludes
the last line of the region when it is not visibly marked
(which makes for a more intuitive behavior).

(wen)

2018-01-07 11:42:47 UTC MAIN commitmail json YAML

Added missing LICENSE declaration.

(rillig)

2018-01-07 11:40:57 UTC MAIN commitmail json YAML

Improved documentation for "make help".

(rillig)

2018-01-07 11:39:36 UTC MAIN commitmail json YAML

Fixed typo in OS_VERSION checks.

This doesn't influence anything since NetBSD-4.90 has never been released.
Still it produced a pkglint warning.

(rillig)

2018-01-07 11:26:04 UTC MAIN commitmail json YAML

Updated cad/gerbv to 2.6.2

(wen)

2018-01-07 11:24:57 UTC MAIN commitmail json YAML

Update to 2.6.2

Upstream changes:
Release Notes for gerbv-2.6.2
========================================================================
This is a minor patch release on top of gerbv-2.6.1.  The change
is to property create the tarball with the build framework so that
the automake/autoconf/etc generated files are included.

========================================================================
Release Notes for gerbv-2.6.0
========================================================================
The following is a summary of the changes which went into gerbv-2.6.0.
For a complete list of changes, refer to ChangeLog.  This release
is primarily a bug fix release.

(wen)

2018-01-07 11:23:37 UTC MAIN commitmail json YAML

Improved documentation for "make help".

The check for target(help) prevents a warning when "make help" is run from
a category directory.

(rillig)

2018-01-07 11:20:19 UTC MAIN commitmail json YAML

Update url2pkg-2.29: Fix generation of Perl packages.

The WriteMakefile subroutine was not exported properly.

(rillig)

2018-01-07 10:27:14 UTC MAIN commitmail json YAML

Updated textproc/p5-Text-Xslate to 3.5.5

(wen)

2018-01-07 10:25:59 UTC MAIN commitmail json YAML

Update to 3.5.5

Upstream changes:
v3.5.5 2018-01-05T02:53:17Z
    - Ensure that test cleans up after itself (jkeenan #190)

(wen)

2018-01-07 01:31:31 UTC MAIN commitmail json YAML

Updated devel/p5-Tree-Simple to 1.33

(wen)

2018-01-07 01:28:28 UTC MAIN commitmail json YAML

Update to 1.33

Upstream changes:
1.33  2018-01-06T16:57:00
- Fix traverse() so it does not assume user functions and traverse() itself return a defined
value. This stops undef warnings when the return value is tested for error propagation.
Thanx to Jason Tibbitts for reporting this.
- Add t/00.versions.* to display the version #s of all pre-reqs.

(wen)

2018-01-07 01:13:31 UTC MAIN commitmail json YAML

doc: Updated pkgtools/pkglint to 5.4.25

(rillig)

2018-01-07 01:13:21 UTC MAIN commitmail json YAML

Updated pkglint to 5.4.25.

Changes since 5.4.24:

* More specific warning for "exitcode with pipe shell commands"
* Don't warn that the echo in "echo | sed" could fail
* Allow packages to define custom make targets
* Don't warn about a misplaced LICENSE when a package doesn't define it
* Skip .git directories
* Reduce number of hicolor-icon-theme error messages in PLIST files
* Remove MKCRYPTO, USE_CRYPTO, CRYPTO variable definitions

(rillig)

2018-01-06 23:14:09 UTC pkgsrc-2017Q4 commitmail json YAML

2018-01-06 23:06:27 UTC pkgsrc-2017Q4 commitmail json YAML

Pullup ticket #5672 - requested by dholland
lang/micropython: build fix

Revisions pulled up:
- lang/micropython/distinfo                                    1.7
- lang/micropython/patches/patch-py_nlrx64.c                    1.1

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: dholland
  Date: Mon Jan  1 00:47:42 UTC 2018

  Modified Files:
  pkgsrc/lang/micropython: distinfo
  Added Files:
  pkgsrc/lang/micropython/patches: patch-py_nlrx64.c

  Log Message:
  Remove illegal cpp abuse that fails the clang build.

  To generate a diff of this commit:
  cvs rdiff -u -r1.6 -r1.7 pkgsrc/lang/micropython/distinfo
  cvs rdiff -u -r0 -r1.1 pkgsrc/lang/micropython/patches/patch-py_nlrx64.c

(spz)

2018-01-06 22:51:51 UTC pkgsrc-2017Q4 commitmail json YAML

Pullup ticket #5671 - requested by snj
net/rsync: security patch

Revisions pulled up:
- net/rsync/Makefile                                            1.106
- net/rsync/distinfo                                            1.46
- net/rsync/patches/patch-receiver.c                            1.1
- net/rsync/patches/patch-rsync.c                              1.1

-------------------------------------------------------------------
  Module Name:    pkgsrc
  Committed By:  snj
  Date:          Sun Dec 31 20:55:43 UTC 2017

  Modified Files:
          pkgsrc/net/rsync: Makefile distinfo
  Added Files:
          pkgsrc/net/rsync/patches: patch-receiver.c patch-rsync.c

  Log Message:
  net/rsync: Fix CVE-2017-17433 and CVE-2017-17434.

  Bump PKGREVISION to 2.

  To generate a diff of this commit:
  cvs rdiff -u -r1.105 -r1.106 pkgsrc/net/rsync/Makefile
  cvs rdiff -u -r1.45 -r1.46 pkgsrc/net/rsync/distinfo
  cvs rdiff -u -r0 -r1.1 pkgsrc/net/rsync/patches/patch-receiver.c \
      pkgsrc/net/rsync/patches/patch-rsync.c

(spz)

2018-01-06 21:41:09 UTC MAIN commitmail json YAML

Bumps from fixes last weekend that I forgot to commit at the time.

(dholland)

2018-01-06 15:49:51 UTC MAIN commitmail json YAML

doc: Updated devel/php-xdebug-devel to 2.6.0beta1

(jdolecek)

2018-01-06 15:48:45 UTC MAIN commitmail json YAML

Update php-xdebug-devel to 2.6.0beta1

Changes:

Added features:

Fixed bug #1059: Add filter capabilities to tracing, stack traces, and code coverage.
Fixed bug #1437: Add X-Profile-File-Name header when a profile file has been generated.

Improvements:

Fixed bug #1493: Run test suite in AppVeyor for Windows CI.
Fixed bug #1498: Use new ZEND_EXTENSION API in config.w32 build scripts. (Kalle)

Fixed bugs:

Fixed bug #702: Check whether variables tracing also works with =&.
Fixed bug #1501: Xdebug var dump tries casting properties.
Fixed bug #1502: SEND_REF lines are not marked as covered.

(jdolecek)

2018-01-06 11:32:03 UTC MAIN commitmail json YAML

Updated graphics/cairo, graphics/cairo-gobject

(adam)

2018-01-06 11:30:56 UTC MAIN commitmail json YAML

cairo: updated to 1.14.12

Release 1.14.12:
Another bugfix release rolling up backported fixes for the past half year.

Features
--------
None

API Changes
-----------
None

Dependency Changes
------------------
None

Performance Optimizations
-------------------------
None

Bug Fixes
---------
* Fix assertion hit with PDFs using Type 4 fonts rendered with user
  fonts, due to error when destroying glyph page.
* Fix build error with util/font-view
* Fix handling of truetype fonts with excessively long font names
* Fix falling back to system font with PDFs using certain embedded
  fonts, due to truncated font names.
* Fix sigabrt printing documents with fonts lacking the mandatory .nodef
  glyph.
* Fix undefined-behavior with integer math.
* Fix various warnings and typos

(adam)

2018-01-06 09:00:04 UTC MAIN commitmail json YAML

Updated sysutils/dtc

(adam)

2018-01-06 08:55:46 UTC MAIN commitmail json YAML

2018-01-05 16:34:42 UTC MAIN commitmail json YAML

Updated math/py-pandas, sysutils/salt-docs

(adam)

2018-01-05 16:33:48 UTC MAIN commitmail json YAML

salt-docs: updated to 2017.7.2 (sync with sysutils/salt)

(adam)

2018-01-05 16:13:51 UTC MAIN commitmail json YAML

py-pandas: updated to 0.22.0

v0.22.0:

This is a major release from 0.21.1 and includes a single, API-breaking change. We recommend that all users upgrade to this version after carefully reading the release note.

The only changes are:
* The sum of an empty or all-NA Series is now 0
* The product of an empty or all-NA Series is now 1
* We窶况e added a min_count parameter to .sum() and .prod() controlling the minimum number of valid values for the result to be valid. If fewer than min_count non-NA values are present, the result is NA. The default is 0. To return NaN, the 0.21 behavior, use min_count=1.

(adam)

2018-01-05 15:36:44 UTC MAIN commitmail json YAML

Updated textproc/py-markdown, devel/py-test, textproc/py-pyaml

(adam)

2018-01-05 15:35:52 UTC MAIN commitmail json YAML

py-pyaml: updated to 17.12.1

17.12.1:
Bug fixes.

(adam)

2018-01-05 15:28:37 UTC MAIN commitmail json YAML

py-test: updated to 3.3.2

Pytest 3.3.2:

Bug Fixes
- pytester: ignore files used to obtain current user metadata in the fd leak
  detector.
- Fix **memory leak** where objects returned by fixtures were never destructed
  by the garbage collector.
- Fix conversion of pyargs to filename to not convert symlinks and not use
  deprecated features on Python 3.
- PYTEST_DONT_REWRITE is now checked for plugins too rather than only for
  test modules.

Improved Documentation
- Add clarifying note about behavior of multiple parametrized arguments

Trivial/Internal Changes
- Code cleanup.
- Clean up code by replacing imports and references of _ast to ast.

(adam)

2018-01-05 15:20:58 UTC MAIN commitmail json YAML

py-markdown: updated to 2.6.11

Released version 2.6.11 (a bug-fix release).
Added a new BACKLINK-TITLE option to the footnote extension so that non-English users can provide a custom title to back links.

(adam)

2018-01-05 15:00:34 UTC MAIN commitmail json YAML

doc: Updated lang/nodejs8 to 8.9.4

(fhajny)

2018-01-05 15:00:25 UTC MAIN commitmail json YAML

Update lang/nodejs8 to 8.9.4.

- deps: upgrade npm to 5.6.0
- build: configure can now be run from any directory

(fhajny)

2018-01-05 12:23:18 UTC MAIN commitmail json YAML

Updated time/p5-Time-HiRes to 1.9752

(wen)

2018-01-05 12:21:13 UTC MAIN commitmail json YAML

Update to 1.9752

Upstream changes:
1.9752 [2018-01-04]
- fix an error in the error message of utimensat() not available:
  it said futimens() not available
- add --force alias for Makefile.PL --configure

(wen)

2018-01-05 12:00:44 UTC MAIN commitmail json YAML

Updated print/py-weasyprint, time/py-arrow; Added devel/py-chai

(adam)

2018-01-05 12:00:01 UTC MAIN commitmail json YAML

py-arrow: updated to 0.12.0

0.12.0
- [FIX] Compatibility fix for Python 2.x

0.11.0
- [FIX] Fix grammar of ArabicLocale
- [NEW] Add Nepali Locale
- [FIX] Fix month name + rename AustriaLocale -> AustrianLocale
- [FIX] Fix typo in Basque Locale
- [FIX] Fix grammar in PortugueseBrazilian locale
- [FIX] Remove pip --user-mirrors flag
- [NEW] Add Indonesian Locale

(adam)

2018-01-05 11:59:06 UTC MAIN commitmail json YAML

py-chai: added version 1.1.2

Chai provides a very easy to use api for mocking, stubbing and spying your
python objects, patterned after the Mocha library for Ruby.

(adam)

2018-01-05 11:35:07 UTC MAIN commitmail json YAML

py-weasyprint: updated to 0.42

Version 0.42
New features:
* Support relative file URIs when using CLI.

Bug fixes:
* Fix slow performance for pre-formatted boxes with a lot of children.
* Don't crash when rendering some tables.
* Fix rendering of floats in inlines.
* Split lines carefully.
* Fix root when frozen with Pyinstaller.
* Handle SVGs containing images embedded as data URIs.
* Fix border-radius rendering problem with some PDF readers.
* Fix pipenv support.
* Smartly handle replaced boxes with percentage width in auto-width parents.
* Don't ignore CSS @page rules that are imported by an @import rule.

(adam)

2018-01-05 08:23:21 UTC MAIN commitmail json YAML

Updated www/py-yarl, www/py-flask-testing

(adam)

2018-01-05 08:22:32 UTC MAIN commitmail json YAML

py-flask-testing: updated to 0.7.1

0.7.1:
Reverts the request context changes from 0.7.0. This change broke backwards compatibility so it will be moved to a major version release instead.

0.7.0:
Changes the way request contexts are managed. Let窶冱 Flask be responsible for the context, which fixes some subtle bugs.

(adam)

2018-01-05 08:16:19 UTC MAIN commitmail json YAML

py-yarl: updated to 0.17.0

0.17.0:
Bug fixes.

(adam)

2018-01-05 07:54:39 UTC MAIN commitmail json YAML

Improved license detection for the guess-license target.

Before, the first file that looked like a license file was considered.
The others were completely ignored. This led to a wrong license for
cross/arm-none-eabi-gcc. To prevent these cases in the future, the license
is only guessed if there is exactly one file with a typical license name.

This approach is still naive, but at least a little more precise. Replacing
the guess-license with a determine-licenses is much more complicated
though, since each source code file may have its own license declared, and
handling all these special cases leads to very complex license expressions
(like "gnu-gpl-v3 for all files, except for special.c, which is apache-2.0
or mit). This is very hard to do correctly.

(rillig)

2018-01-05 03:16:10 UTC MAIN commitmail json YAML

doc: note update of lang/php* pacakges

lang/php56 5.6.33
lang/php70 7.0.27
lang/php71 7.1.13
lang/php72 7.2.1

(taca)

2018-01-05 03:14:52 UTC MAIN commitmail json YAML

2018-01-05 03:12:12 UTC MAIN commitmail json YAML

lang/php72: update to 7.2.1

04 Jan 2018, PHP 7.2.1

- Core:
  . Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence)
  . Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
    (Anatol)
  . Fixed bug #75525 (Access Violation in vcruntime140.dll). (Anatol)
  . Fixed bug #74862 (Unable to clone instance when private __clone defined).
    (Daniel Ciochiu)
  . Fixed bug #75074 (php-process crash when is_file() is used with strings
    longer 260 chars). (Anatol)

- CLI server:
  . Fixed bug #73830 (Directory does not exist). (Anatol)

- FPM:
  . Fixed bug #64938 (libxml_disable_entity_loader setting is shared between
    requests). (Remi)

- GD:
  . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx).
    (Christoph)

- Opcache:
  . Fixed bug #75608 ("Narrowing occurred during type inference" error).
    (Laruence, Dmitry)
  . Fixed bug #75579 (Interned strings buffer overflow may cause crash).
    (Dmitry)
  . Fixed bug #75570 ("Narrowing occurred during type inference" error).
    (Dmitry)
  . Fixed bug #75556 (Invalid opcode 138/1/1). (Laruence)

- PCRE:
  . Fixed bug #74183 (preg_last_error not returning error code after error).
    (Andrew Nester)

- Phar:
  . Fixed bug #74782 (remove file name from output to avoid XSS). (stas)

- Standard:
  . Fixed bug #75511 (fread not free unused buffer). (Laruence)
  . Fixed bug #75514 (mt_rand returns value outside [$min,$max]+ on 32-bit)
    (Remi)
  . Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP
    segment fault). (Nikita)
  . Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator
    that getrandom() is missing). (sarciszewski)
  . Fixed bug #73124 (php_ini_scanned_files() not reporting correctly).
    (John Stevenson)
  . Fixed bug #75574 (putenv does not work properly if parameter contains
    non-ASCII unicode character). (Anatol)

- Zip:
  . Fixed bug #75540 (Segfault with libzip 1.3.1). (Remi)

(taca)

2018-01-05 03:11:13 UTC MAIN commitmail json YAML

lang/php71: update to 7.1.13

04 Jan 2018, PHP 7.1.13

- Core:
  . Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence)
  . Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
    (Anatol)
  . Fixed bug #74862 (Unable to clone instance when private __clone defined).
    (Daniel Ciochiu)
  . Fixed bug #75074 (php-process crash when is_file() is used with strings
    longer 260 chars). (Anatol)

- CLI Server:
  . Fixed bug #60471 (Random "Invalid request (unexpected EOF)" using a router
    script). (SammyK)
  . Fixed bug #73830 (Directory does not exist). (Anatol)

- FPM:
  . Fixed bug #64938 (libxml_disable_entity_loader setting is shared between
    requests). (Remi)

- GD:
  . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx).
    (Christoph)

- Opcache:
  . Fixed bug #75608 ("Narrowing occurred during type inference" error).
    (Laruence, Dmitry)
  . Fixed bug #75579 (Interned strings buffer overflow may cause crash).
    (Dmitry)
  . Fixed bug #75570 ("Narrowing occurred during type inference" error).
    (Dmitry)

- PCRE:
  . Fixed bug #74183 (preg_last_error not returning error code after error).
    (Andrew Nester)

- Phar:
  . Fixed bug #74782 (remove file name from output to avoid XSS). (stas)

- Standard:
  . Fixed bug #75511 (fread not free unused buffer). (Laruence)
  . Fixed bug #75514 (mt_rand returns value outside [$min,$max]+ on 32-bit)
    (Remi)
  . Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP
    segment fault). (Nikita)
  . Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator
    that getrandom() is missing). (sarciszewski)
  . Fixed bug #73124 (php_ini_scanned_files() not reporting correctly).
    (John Stevenson)
  . Fixed bug #75574 (putenv does not work properly if parameter contains
    non-ASCII unicode character). (Anatol)

- Zip:
  . Fixed bug #75540 (Segfault with libzip 1.3.1). (Remi)

(taca)

2018-01-05 03:09:59 UTC MAIN commitmail json YAML

lang/php70: update to 7.0.27

04 Jan 2018 PHP 7.0.27

- CLI Server:
  . Fixed bug #60471 (Random "Invalid request (unexpected EOF)" using a router
    script). (SammyK)

- Core:
  . Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
    (Anatol)
  . Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence)

- FPM:
  . Fixed bug #64938 (libxml_disable_entity_loader setting is shared between
    requests). (Remi)

- GD:
  . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx). (cmb)

- Opcache:
  . Fixed bug #75579 (Interned strings buffer overflow may cause crash).
    (Dmitry)

- PCRE:
  . Fixed bug #74183 (preg_last_error not returning error code after error).
    (Andrew Nester)

- Phar:
  . Fixed bug #74782 (Reflected XSS in .phar 404 page). (Stas)

- Standard:
  . Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP
    segment fault). (Nikita)
  . Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator
    that getrandom() is missing). (sarciszewski)

- Zip:
  . Fixed bug #75540 (Segfault with libzip 1.3.1). (Remi)

(taca)

2018-01-05 03:08:36 UTC MAIN commitmail json YAML

lang/php56: update to 5.6.33

04 Jan 2017, PHP 5.6.33

- GD:
  . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx). (cmb)

- Phar:
  . Fixed bug #74782 (Reflected XSS in .phar 404 page). (Stas)

(taca)

2018-01-04 22:20:47 UTC pkgsrc-2017Q4 commitmail json YAML

pullups 5667 5668 5669

(spz)

2018-01-04 21:32:52 UTC MAIN commitmail json YAML

Updated graphics/py-Pillow, graphics/py-aafigure, devel/py-requests-file, devel/py-construct, www/py-scrapy

(adam)

2018-01-04 21:31:41 UTC MAIN commitmail json YAML

py-scrapy: updated to 1.5.0

Scrapy 1.5.0:
This release brings small new features and improvements across the codebase.
Some highlights:

* Google Cloud Storage is supported in FilesPipeline and ImagesPipeline.
* Crawling with proxy servers becomes more efficient, as connections
  to proxies can be reused now.
* Warnings, exception and logging messages are improved to make debugging
  easier.
* scrapy parse command now allows to set custom request meta via
  --meta argument.
* Compatibility with Python 3.6, PyPy and PyPy3 is improved;
  PyPy and PyPy3 are now supported officially, by running tests on CI.
* Better default handling of HTTP 308, 522 and 524 status codes.
* Documentation is improved, as usual.

Backwards Incompatible Changes
* Scrapy 1.5 drops support for Python 3.3.
* Default Scrapy User-Agent now uses https link to scrapy.org.
  **This is technically backwards-incompatible**; override
  :setting:USER_AGENT if you relied on old value.
* Logging of settings overridden by custom_settings is fixed;
  **this is technically backwards-incompatible** because the logger
  changes from [scrapy.utils.log] to [scrapy.crawler]. If you're
  parsing Scrapy logs, please update your log parsers.
* LinkExtractor now ignores m4v extension by default, this is change
  in behavior.
* 522 and 524 status codes are added to RETRY_HTTP_CODES

New features
- Support <link> tags in Response.follow
- Support for ptpython REPL
- Google Cloud Storage support for FilesPipeline and ImagesPipeline
- New --meta option of the "scrapy parse" command allows to pass additional
  request.meta
- Populate spider variable when using shell.inspect_response
- Handle HTTP 308 Permanent Redirect
- Add 522 and 524 to RETRY_HTTP_CODES
- Log versions information at startup
- scrapy.mail.MailSender now works in Python 3 (it requires Twisted 17.9.0)
- Connections to proxy servers are reused
- Add template for a downloader middleware
- Explicit message for NotImplementedError when parse callback not defined
- CrawlerProcess got an option to disable installation of root log handler
- LinkExtractor now ignores m4v extension by default
- Better log messages for responses over :setting:DOWNLOAD_WARNSIZE and
  :setting:DOWNLOAD_MAXSIZE limits
- Show warning when a URL is put to Spider.allowed_domains instead of
  a domain.

Bug fixes
- Fix logging of settings overridden by custom_settings;
  **this is technically backwards-incompatible** because the logger
  changes from [scrapy.utils.log] to [scrapy.crawler], so please
  update your log parsers if needed
- Default Scrapy User-Agent now uses https link to scrapy.org.
  **This is technically backwards-incompatible**; override
  :setting:USER_AGENT if you relied on old value.
- Fix PyPy and PyPy3 test failures, support them officially
- Fix DNS resolver when DNSCACHE_ENABLED=False
- Add cryptography for Debian Jessie tox test env
- Add verification to check if Request callback is callable
- Port extras/qpsclient.py to Python 3
- Use getfullargspec under the scenes for Python 3 to stop DeprecationWarning
- Update deprecated test aliases
- Fix SitemapSpider support for alternate links

(adam)

2018-01-04 21:14:56 UTC MAIN commitmail json YAML

py-construct: updated to 2.8.20

2.8.20:
Bug fixes.

(adam)

2018-01-04 21:13:18 UTC pkgsrc-2017Q4 commitmail json YAML

Pullup ticket #5669 - requested by bsiegert
net/go-net: build fix

Revisions pulled up:
- net/go-net/Makefile                                          1.18
- net/go-net/PLIST                                              1.6

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: bsiegert
  Date: Sun Dec 31 15:59:25 UTC 2017

  Modified Files:
    pkgsrc/net/go-net: Makefile PLIST

  Log Message:
  Fix build on Linux.

  Linux has h2i but not the (BSD-specific) route package. Instead of having
  a PLIST var named notsunos, create two separate ones for h2i and route.

  To generate a diff of this commit:
  cvs rdiff -u -r1.17 -r1.18 pkgsrc/net/go-net/Makefile
  cvs rdiff -u -r1.5 -r1.6 pkgsrc/net/go-net/PLIST

(spz)

2018-01-04 21:09:29 UTC MAIN commitmail json YAML

py-requests-file: updated to 1.4.3

1.4.3:
Skip the permissions test when running as root
Handle missing locale in tests

(adam)

2018-01-04 21:07:13 UTC pkgsrc-2017Q4 commitmail json YAML

Pullup ticket #5668 - requested by bsiegert
math/nickle: build fix

Revisions pulled up:
- math/nickle/distinfo                                          1.13
- math/nickle/patches/patch-builtin-date.c                      1.1

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: jperkin
  Date: Wed Jan  3 12:12:07 UTC 2018

  Modified Files:
    pkgsrc/math/nickle: distinfo
  Added Files:
    pkgsrc/math/nickle/patches: patch-builtin-date.c

  Log Message:
  nickle: Fix build on SunOS and systems without timelocal().

  To generate a diff of this commit:
  cvs rdiff -u -r1.12 -r1.13 pkgsrc/math/nickle/distinfo
  cvs rdiff -u -r0 -r1.1 pkgsrc/math/nickle/patches/patch-builtin-date.c

(spz)

2018-01-04 21:07:12 UTC MAIN commitmail json YAML

2018-01-04 21:05:09 UTC pkgsrc-2017Q4 commitmail json YAML

Pullup ticket #5667 - requested by bacon
devel/netcdf: build fix

Revisions pulled up:
- devel/netcdf/Makefile                                        1.46

-------------------------------------------------------------------
  Module Name:    pkgsrc
  Committed By:   bacon
  Date:           Sat Dec 30 22:43:25 UTC 2017

  Modified Files:
            pkgsrc/devel/netcdf: Makefile

  Log Message:
  devel/netcdf: Add missing m4 dependency for Linux

  ok gdt

  To generate a diff of this commit:
  cvs rdiff -u -r1.45 -r1.46 pkgsrc/devel/netcdf/Makefile

(spz)

2018-01-04 20:59:50 UTC MAIN commitmail json YAML

py-Pillow: updated to 5.0.0

5.0.0:
Docs: Added docstrings from documentation
Test: Switch from nose to pytest
Rework Source directory layout, preventing accidental import of PIL.
Dynamically link libraqm
Removed scripts directory
TIFF: Run all compressed tiffs through libtiff decoder
GIF: Add disposal option when saving GIFs [linnil1, wiredfool]
EPS: Allow for an empty line in EPS header data
PNG: Add support for sRGB and cHRM chunks, permit sRGB when no iCCP chunk present
Dependencies: Update Tk Tcl to 8.6.8
Decompression bomb error now raised for images 2x larger than a decompression bomb warning
Test: avoid random failure in test_effect_noise
Increased epsilon for test_file_eps.py:test_showpage due to Arch update.
Removed check parameter from _save in BmpImagePlugin, PngImagePlugin, ImImagePlugin, PalmImagePlugin, and PcxImagePlugin.
Make PngImagePlugin.add_text() zip argument type bool
Depends: Updated libwebp to 0.6.1
Remove unnecessary bool() calls in Image.registered_extensions and skipKnownBadTests
Fix count of BITSPERSAMPLE items in broken TIFF files
Fillcolor parameter for Image.Transform
Test: Display differences for test failures
Added executable flag to file with shebang line
Setup: Specify compatible Python versions for pip
Dependencies: Updated libimagequant to 2.11.4
Setup: Warn if trying to install for Py3.7 on Windows
Doc: Fonts can be loaded from a file-like object, not just filename [robin-norwood]
Add eog support for Ubuntu Image Viewer [NafisFaysal]
Test: Test on 3.7-dev on Travis.ci
Dependencies: Update libtiff to 4.0.9
Setup: Replace deprecated platform.dist with file existence check
Build: Fix setup.py on Debian
Docs: Correct error in ImageDraw documentation
Test: Drop Ubuntu Precise, Fedora 24, Fedora 25, add Fedora 27, Centos 7, Amazon v2 CI Support,,,
Dependencies: Updated libimagequant to 2.11.3
Test: Fix test_image.py to use tempfile
Replace PIL.OleFileIO deprecation warning with descriptive ImportError
WebP: Add support for animated WebP files [jd20]
PDF: Set encoderinfo for images when saving multi-page PDF. Fixes.
Allow the olefile dependency to be optional
GIF: Permit LZW code lengths up to 12 bits in GIF decode
Fix unterminiated string and unchecked exception in _font_text_asBytes.
PPM: Use fixed list of whitespace, rather relying on locale, fixes.
Added support for generators when using append_images,
Doc: Correct PixelAccess.rst
Depends: Update raqm to 0.3.0
Docs: Link to maintained version of aggdraw
Include license file in the generated wheel packages
Depends: Update openjpeg to 2.3.0
Add option to Makefile to build and install with C coverage
Add context manager support to ImageFile.Parser and PngImagePlugin.ChunkStream
ImageDraw.textsize: fix zero length error

(adam)

2018-01-04 20:48:18 UTC MAIN commitmail json YAML

Updated parallel/openmpi, fonts/py-fonttools, misc/py-stdnum, www/py-selenium

(adam)

2018-01-04 20:46:21 UTC MAIN commitmail json YAML

py-selenium: updated to 3.8.1

Selenium 3.8.1
* Fix bug when creating an Opera driver
* Stop sending sessionId in w3c payload.
* Fix issue with w3c actions releasing on element
* A more descriptive log message is displayed if the port cannot be connected
* Initialize Alert object by calling alert.text
* PhantomJS is now deprecated, please use either Chrome or Firefox in headless mode
* Legacy Firefox driver: ensuring copy of profile dir, its 'extensions' subdir and 'user.js' file are writable.

(adam)

2018-01-04 20:44:10 UTC MAIN commitmail json YAML

py-stdnum: updated to 1.8

changes from 1.7 to 1.8
* add modules for the following number formats:
- NCF (Nç‚­meros de Comprobante Fiscal, Dominican Republic receipt number)
- Euro banknote serial numbers
- CAS RN (Chemical Abstracts Service Registry Number)
- Aadhaar (Indian digital resident personal identity number)
  (thanks Srikanth Lakshmanan)
- PAN (Permanent Account Number, Indian income tax identifier)
  (thanks Srikanth Lakshmanan)
* add functions for using the Dominican Republic DGII web service to validate
  and search for RNC and NCF numbers
* add/update whitelists for Dominican Republic RNC and Cedula
* support zeep as preferred SOAP library (suds and pysimplesoap are tried
  as fallback)
* rename stdnum.iso9362 to stdnum.bic (iso9362 is deprecated but still
  available for compatibility)
* add tests for web services (not normally run to avoid unnecessary load)
* fixes and improvement to the sample online validation service

(adam)

2018-01-04 20:40:36 UTC MAIN commitmail json YAML

py-fonttools: updated to 3.21.1

3.21.1:
- [feaLib] Allow mixed single/multiple substitutions
- Added missing ``*.afm`` test assets to MAINFEST.in
- Fixed dumping ``SVG`` tables containing color palettes

(adam)

2018-01-04 20:32:19 UTC MAIN commitmail json YAML

Added CONFLICTS; removed unused lines

(adam)

2018-01-04 20:31:28 UTC MAIN commitmail json YAML

openmpi: updated to 1.10.7

1.10.7:
- Fix bug in TCP BTL that impacted performance on 10GbE (and faster)
  networks by not adjusting the TCP send/recv buffer sizes and using
  system default values
- Add missing MPI_AINT_ADD and MPI_AINT_DIFF function delcarations in
  mpif.h
- Fixed time reported by MPI_WTIME; it was previously reported as
  dependent upon the CPU frequency.
- Fix platform detection on FreeBSD
- Fix a bug in the handling of MPI_TYPE_CREATE_DARRAY in
  MPI_(R)(GET_)ACCUMULATE
- Fix openib memory registration limit calculation
- Add missing MPI_T_PVAR_SESSION_NULL in mpi.h
- Fix "make distcheck" when using external hwloc and/or libevent packages
- Add latest ConnectX-5 vendor part id to OpenIB device params
- Fix race condition in the UCX PML
- Fix signal handling for rsh launcher
- Fix Fortran compilation errors by removing MPI_SIZEOF in the Fortran
  interfaces when the compiler does not support it
- Fixes for the pre-ignore-TKR "mpi" Fortran module implementation
  (i.e., for older Fortran compilers -- these problems did not exist
  in the "mpi" module implementation for modern Fortran compilers):
  - Add PMPI_* interfaces
  - Fix typo in MPI_FILE_WRITE_AT_ALL_BEGIN interface name
  - Fix typo in MPI_FILE_READ_ORDERED_BEGIN interface name
- Fixed the type of MPI_DISPLACEMENT_CURRENT in all Fortran interfaces
  to be an INTEGER(KIND=MPI_OFFSET_KIND).
- Fixed typos in MPI_INFO_GET_* man pages.  Thanks to Nicolas Joly for
  the patch
- Fix typo bugs in wrapper compiler script

(adam)

2018-01-04 16:49:55 UTC MAIN commitmail json YAML

Updated emulators/qemu to 2.11.0nb2

(gson)

2018-01-04 16:48:17 UTC MAIN commitmail json YAML

emulators/qemu: check for posix_memalign in configure script

qemu incorrectly checks for the presence of posix_memalign() by
testing whether the preprocessor symbol _POSIX_C_SOURCE is defined.
This causes qemu to use valloc() instead of posix_memalign() on NetBSD,
even on versions where posix_memalign() is supported, wasting
memory when the required alignment is smaller than a page.  Fix this
by checking for posix_memalign() support in the configure script.

(gson)

2018-01-04 16:38:10 UTC MAIN commitmail json YAML

bbdb: Support emacs25nox.

(jperkin)

2018-01-04 16:38:00 UTC MAIN commitmail json YAML

mailcrypt: Support emacs25nox.

(jperkin)

2018-01-04 16:36:53 UTC MAIN commitmail json YAML

js2-mode: Support emacs25nox.

(jperkin)

2018-01-04 16:36:42 UTC MAIN commitmail json YAML

apel: Support emacs25nox.

(jperkin)

2018-01-04 16:36:29 UTC MAIN commitmail json YAML

riece: Support emacs25nox.

(jperkin)

2018-01-04 16:29:36 UTC MAIN commitmail json YAML

xfce4-notifyd: Requires gdbus-codegen.

(jperkin)

2018-01-04 15:42:42 UTC MAIN commitmail json YAML

2018-01-04 15:18:51 UTC MAIN commitmail json YAML

2018-01-04 14:47:26 UTC MAIN commitmail json YAML

doc: Updated lang/sbcl to 1.4.3

(jperkin)

2018-01-04 14:47:17 UTC MAIN commitmail json YAML

sbcl: Update to 1.4.3.  Changes since 1.3.21:

changes in sbcl-1.4.3 relative to sbcl-1.4.2:
  * enhancement: SLEEP respects deadlines established by SB-SYS:WITH-DEADLINE.
  * bug fix: DECODE-TIMEOUT and operators accepting a timeout no longer signal
    an error when called with an argument that is of type (real 0) but not
    (unsigned-byte 62) (lp#1727789)
  * bug fix: fixed heap exhaustion bug when consing millions of small objects
  * bug fix: sb-safepoint builds are now a lot less prone to deadlocks and odd
    crashes (lp#1424031, lp#1268710)
  * bug fix: argumentless CALL-NEXT-METHOD where specialized-to-T or
    unspecialized parameters are mutated now uses the original (non-mutated)
    parameter values (lp#1734771)
  * bug fix: memory faults from lisp no longer use (thread-and-interrupt
    unsafe) global storage for fault addresses (everywhere), and now have
    cleaner backtraces (on x86 and x86-64). (lp#309068)
  * bug fix: pathnames with a directory component of the form
    (:absolute {:up,:wild,:wild-inferiors}) no longer fail to unparse.
    (lp#1738775)
  * bug fix: more reliable signal handling on macOS.

changes in sbcl-1.4.2 relative to sbcl-1.4.1:
  * minor incompatible change: SB-EXT:QUIT is no longer marked as deprecated
    and behaves like SB-EXT:EXIT.
  * enhancement: ASDF updated to 3.3.1. The ASDF release is dedicated to
    the late Elias Pipping who put enormous amounts of work into it despite
    his terminal illness. Thank you and rest in peace.  (lp#1681201)
  * enhancement: alien routines compiled with '-fsanitize=thread' and/or
    '-fsanitize=memory' cause fewer false positives in error reporting.
  * optimization: fewer instances of consing float constants at runtime.
  * bug fix: a number of compiler bugs detected by Paul F. Dietz' randomized
    tester.  (lp#1731503, lp#1730699, lp#1723993, lp#1730434, lp#1661911,
    lp#1729639, lp#1729471, lp#1728692)
  * bug fix: better errors from NAMESTRING and friends on pathnames with no
    namestrings.  (lp#792154)
  * bug fix: EQUAL and EQUALP compiler transforms were too confident in
    deriving a result.  (lp#1732277, lp#1732225)
  * bug fix: FILL sometimes returned the underlying data vector rather than
    the given array.  (lp#1732553)
  * bug fix: SEARCH returned the wrong answer in some cases.  (lp#1732952)
  * bug fix: the type (COMPLEX INTEGER) behaves more as specified by Function
    TYPEP, which has stronger constraints than System Class COMPLEX.
    (Reported by Eric Marsden, lp#1733400)

changes in sbcl-1.4.1 relative to sbcl-1.4.0:
  * optimization: faster foreign callbacks.
  * enhancement: complex arrays can be stack allocated.
  * enhancement: PROCESS-KILL now exists on win32 and PROCESS-PID actually
    returns the PID.
  * optimization: the register allocation method used by the compiler when
    optimizing for speed is now faster for functions with large bodies.
  * bug fix: SB-INTROSPECT:ALLOCATION-INFORMATION works on big-endian CPUs
    (fixes lp#490490 for real rather than by disabling a test)
  * bug fix: code objects and bignums of large enough size to be placed
    on GC pages without any other object no longer cause accidental copying
    during garbage collection. (gencgc only)
  * bug fix: sb-fasteval failure with 0-argument lambdas (lp#1722715)
  * bug fix: RUN-PROGRAM doesn't leak handles on win32 and PROCESS-CLOSE
    doesn't crash. (lp#1724472)

changes in sbcl-1.4.0 relative to sbcl-1.3.21:
  * minor incompatible change: DESTRUCTURING-BIND treats non-toplevel () as
    nested empty pattern. This seems to be what the standard mandates, so
    conforming code should not be affected.
  * ehancement: (GC :GEN 7) with gencgc will zero-fill dead pseudo-static
    objects so that they do not spuriously cause reachability of objects that
    would have been otherwise dead.
  * enhancement: PROCESS-STATUS now tracks stopped and continued processes
    properly (also fixes lp#1624941, based on patch by Elias Pipping).
  * bug fix: INSPECT handles errors signaled while printing slot
    values. (lp#454682)
  * bug fix: DESCRIBE works on classes like it used to.
  * bug fix: *LOAD-PATHNAME* and *LOAD-TRUENAME* are bound to pathnames
    when processing a sysinit or userinit file
  * bug fix: save-lisp-and-die is able to collect more garbage on non-x86oid
    gencgc targets.
  * bug fix: fixed out-of-bounds array read in optimized POSITION on bit-vectors
  * bug fix: signal emulation respects the 128-byte stack red zone on x86-64
    macOS.

(jperkin)

2018-01-04 13:40:52 UTC MAIN commitmail json YAML

doc: Added www/contao45 version 4.5.1

(taca)

2018-01-04 13:40:36 UTC MAIN commitmail json YAML

www/Makefile: add and enable contao45

(taca)

2018-01-04 13:39:46 UTC MAIN commitmail json YAML

www/contao45: add contao 4.5.1

Contao is an Open Source Content Management Framework developed by Leo Feyer
and distributed under the LGPL license.

Its open architecture allows everybody to extend the system to fit his
needs. Contao specializes in accessible websites and is accessbile
itself (front end and back end), rendering valid HTML5.

Contao 4.5 is fifth minor release of Contao 4 and it require PHP 7.1 and
MySQL 5.5.7 with InnoDB as default storage engine and utf8mb4 as default
charset.

Additionally, these new features from 4.5.

* Store the request token as cookie instead of in the session
* Improve the locale handling
* Support use of Symfony translator
* Add the insert tag flag for absolute URLs
* Allow to sort news items by date, headline or randomly
* Use the Symfony assets component for the Contao assets
* Display form fieldsets as wrappers in the back end view
* Support adding external JavaScripts to a page layout
* Add the "require an item" option to the site structure
* Support wildcards in the "iflng" and "ifnlng" insert tags
* Replace the back end "limit width" option with a "fullscreen" option
* Support sorting enclosures
* Add the teaser image as media:content in the RSS/Atom feeds
* Add roles and ARIA landmarks in the back end
* Add all the player options to the YouTube element
* Add the toggle icon of the parent record in parent view
* Add the "event address" field and update the microdata tags
* Use the Symfony security component for authentication

4.5.1 (2018/1/4)

* fixes issues with the Symfony security implementation.

(taca)

2018-01-04 13:23:26 UTC MAIN commitmail json YAML

doc: Updated www/contao44 to 4.4.12

(taca)

2018-01-04 13:23:04 UTC MAIN commitmail json YAML

www/contao44: update to 4.4.12

From release announce:

4.4.9 (2017/12/14)

* Fixes several minor PHP 7.2 related issues.

4.4.10 (2017/12/27)

* Fixes a few minor issues including a problem with the comments bundle.

4.4.11 (2017/12/28)

* Reverts the identifier quoting changes.

  MySQL 8 and MariaDB 10.2

    In MySQL 8.0.2 and MariaDB 10.2.7 rows has been added as reserved
    word. Since we are using a field named rows in the tl_layout
    table, Contao is no longer compatible with the mentioned database
    versions.

    To avoid renaming the field in Contao and potentially causing
    theme import issues, we have added identifier quoting in version
    4.4.10(*1). Unfortunately this led to several unforeseen
    problems(*2), so we had to revert the changes in version 4.4.11.

    (*1) https://github.com/contao/core-bundle/pull/1262
    (*2) https://github.com/contao/core/pull/8813#issuecomment-354094845

4.4.12 (2018/1/3)

* Optimizes adding pages to the search index and fixes a few minor issues.

(taca)

2018-01-04 13:16:51 UTC MAIN commitmail json YAML

doc: Updated devel/ruby-minitest to 5.11.1

(taca)

2018-01-04 13:16:32 UTC MAIN commitmail json YAML

devel/ruby-minitest: update to 5.11.1.

=== 5.11.1 / 2018-01-02

* 1 bug fix:

  * Fixed Result (a superclass of Test) overriding Runnable's name accessors. (y-yagi, MSP-Greg)

=== 5.11.0 / 2018-01-01

* 2 major enhancements:

  * Added Minitest::Result and Minitest::Result.from(runnable).
  * Changed Minitest::Test to subclass Result and refactored methods up.

* 7 minor enhancements:

  * Added --no-plugins and MT_NO_PLUGINS to bypass MT plugin autoloading. Helps with bad actors installed globally.
  * Added bench_performance_{logarithmic,power} for spec-style benchmarks. (rickhull)
  * Added deprecation warning for Runnable#marshal_dump.
  * Minitest.run_one_method now checks for instance of Result, not exact same class.
  * Minitest::Test.run returns a Result version of self, not self.
  * ProgressReporter#prerecord now explicitly prints klass.name. Allows for fakers.

* 4 bug fixes:

  * Object.stub no longer calls the passed block if stubbed with a callable.
  * Object.stub now passes blocks down to the callable result.
  * Pushed Minitest::Test#time & #time_it up to Runnable.
  * Test nil equality directly in assert_equal. Fixes #679. (voxik)

=== 5.11.0b1 / 2017-12-20

* 2 major enhancements:

  * Added Minitest::Result and Minitest::Result.from(runnable).
  * Changed Minitest::Test to subclass Result and refactored methods up.

* 6 minor enhancements:

  * Added --no-plugins and MT_NO_PLUGINS to bypass MT plugin autoloading. Helps with bad actors installed globally.
  * Added bench_performance_{logarithmic,power} for spec-style benchmarks. (rickhull)
  * Minitest.run_one_method now checks for instance of Result, not exact same class.
  * Minitest::Test.run returns a Result version of self, not self.
  * ProgressReporter#prerecord now explicitly prints klass.name. Allows for fakers.
  * Removed Runnable.marshal_dump/load.

* 4 bug fixes:

  * Object.stub no longer calls the passed block if stubbed with a callable.
  * Object.stub now passes blocks down to the callable result.
  * Pushed Minitest::Test#time & #time_it up to Runnable.
  * Test nil equality directly in assert_equal. Fixes #679. (voxik)

(taca)

2018-01-04 13:15:52 UTC MAIN commitmail json YAML

doc: Updated devel/ruby-activesupport42 to 4.2.8nb1

(taca)

2018-01-04 13:15:19 UTC MAIN commitmail json YAML

devel/ruby-activesupport42: improve dependency

No need to depends on ruby-minitest since minimum version of minitest
is bundled with Ruby 2.2 and later.

Bump PKGREVISION.

(taca)

2018-01-04 10:25:55 UTC MAIN commitmail json YAML

doc: Updated devel/boost-headers to 1.66.0nb1

(maya)

2018-01-04 10:25:35 UTC MAIN commitmail json YAML

boost: use c++17 as a test for having string view, not NetBSD macro.

This changes the package for anyone that used it with C++17 experimental
support and now won't get it (we're cutting off at 'actual C++17').

Bump headers PKGREVISION, suggested by joerg.

(maya)

2018-01-04 07:41:54 UTC MAIN commitmail json YAML

doc: update some ruby packages

+ ruby-actionmailer-r.2.0, ruby-actionpack-4.2.10, ruby-activemodel-4.2.10,
  ruby-railties-4.2.10, ruby-redmine-3.3.5, ruby-redmine-3.4.3,
  ruby-selenium-webdriver-3.8.0, ruby-squib-0.14.0
- ruby-builder-3.2.2 (already updated to 3.2.3)
- ruby-ncurses-1.3.1 (no such release)

(taca)

2018-01-04 00:22:02 UTC MAIN commitmail json YAML

dovecot2: remove now redundant patch.

Heads up by jzu, thanks.

(maya)

2018-01-03 22:53:51 UTC MAIN commitmail json YAML

Remove comment no longer relevant

(fhajny)

2018-01-03 22:51:46 UTC MAIN commitmail json YAML

doc: Updated chat/ejabberd to 17.12

(fhajny)

2018-01-03 22:51:30 UTC MAIN commitmail json YAML

Update chat/ejabberd to 17.12.

pkgsrc
- Change installation home for Erlang libs to prevent build conflicts
  with previous versions that may be present on the system, as
  encountered by @gdt.

Core
- Rewrite ejabberd system monitor for efficiency
- Fix incoming XMPP processing order
- Use xmpp:try_subtag/2 wherever possible
- Better process subtag decoding errors
- Only allow compression after SASL as per XEP-0170
- Don't crash on unexpected XML events
- Fix session mnesia table cleanup
- Don't let privacy list prevent local roster update

Encryption
- Rely on Server Name Indication for incoming Direct-TLS connections
- Speedup certificate chains creation and validation
- Log warning on empty wildcard paths
- Don't call pkix_is_self_signed/1 too frequently
- Eat less memory during building certificates graph
- Avoid infinite loop between self-signed certs
- Fix function clause on filelib:wildcard/1
- Use ejabberd_pkix API in mod_sip
- Move 'certfile' based options in a single place

Groupchat
- Don't crash on malformed IQ
- Include x tag in presence errors related to nick change
- Include 110 status on shutdown
- Improve muc#roominfo and muc#roomconfig forms
- mod_mam: Never store MUC messages in user archives

PubSub
- Fix num_subscribers on node metadata
- Fix send last items on initial presence
- Send last PEP items to owner on initial presence
- Support pubsub#publish-options PRECONDITIONs
- Add pubsub#multi-items to features list (Support XEP-0060 v1.14)
- Add missing Nidx building records from sql result
- Don't force RSM in get_items when max_items is not provided

Admin
- Introduce option 'ca_file'
- Set executable permission on mac_listener when installing
- Use /bin/sh as the explicit shell when using su in ejabberdctl.
- Windows does not have /tmp, fallback to $HOME/conf for ODBC
  configuration files

Logging
- Change loglevel of TLS failures
- Log a warning when a disk is almost full
- Disable default alarm handler
- Handle also process_memory_high_watermark alarm
- Kill and restart lager when it's overloaded
- Avoid excessive logging of SQL failures

Commands
- New muc_online_room_by_regex command
- Fix race between join_cluster and ejabberd_mnesia
- Fix commands rooms_unused_list and _destroy
- send_direct_invitations accepts only user jids
- ejabberd_sm: Fix get_session_sid/3

SQL
- Add missing server_host column in pg.new.sql
- Add new schema for MySQL and Sqlite
- Fix SQL serialization

Installer
- MacOS installer is signed. You can now easily install ejabberd on
  your Mac.

Build
- Compile sql_pt early
- Binary installer uses OTP 20.2

(fhajny)

2018-01-03 22:43:23 UTC MAIN commitmail json YAML

Removed license again.

The newly introduced guess-license make(1) target is too naive.
In this case, it just looked at the file COPYING, but the actual
rules for this package are much more complicated. Each file has
its own license, and the various COPYING files are only references
to which the files point.

(rillig)

2018-01-03 20:52:56 UTC MAIN commitmail json YAML

doc: Updated net/erlang-esip to 1.0.18

(fhajny)

2018-01-03 20:52:47 UTC MAIN commitmail json YAML

Update net/erlang-esip to 1.0.18.

- Updating stun to version 1.0.17.
- Updating fast_tls to version 1.0.18.

(fhajny)

2018-01-03 20:52:17 UTC MAIN commitmail json YAML

doc: Updated net/erlang-stun to 1.0.17

(fhajny)

2018-01-03 20:52:09 UTC MAIN commitmail json YAML

Update net/erlang-stun to 1.0.17.

- Updating fast_tls to version 1.0.18.

(fhajny)

2018-01-03 20:51:27 UTC MAIN commitmail json YAML

doc: Updated net/erlang-xmpp to 1.1.17

(fhajny)

2018-01-03 20:51:19 UTC MAIN commitmail json YAML

Update net/erlang-xmpp to 1.1.17.

- Register pubsub#multi-items feature and add pubsub#max_items
  field to meta-data
- Mention try_subtag/2 in the README
- Fix formatting in API.md
- New function: xmpp:try_subtag/2
- Make pretty printer understand jid records
- Support XEP-0184: Message Delivery Receipts
- Improve pretty printer and sub-elements processing
- Add PubSub error condition: 'precondition-not-met'
- pubsub_publish_options.xdata: Reject 'secret'
- Allow empty URIs in xmpp_uri:check/1
- Update muc#roominfo form and add validation for
  'muc#room*_pubsub' fields
- Introduce xmpp_uri module

(fhajny)

2018-01-03 20:50:01 UTC MAIN commitmail json YAML

doc: Updated textproc/erlang-fast_xml to 1.1.26

(fhajny)

2018-01-03 20:49:53 UTC MAIN commitmail json YAML

Update textproc/erlang-fast_xml to 1.1.26.

- Simplify pretty printer generation
- Generate get_els/1 and set_els/2
- The pretty printer should traverse elements recursively
- Extra test for too big input

(fhajny)

2018-01-03 20:48:37 UTC MAIN commitmail json YAML

doc: Updated security/erlang-fast_tls to 1.0.18

(fhajny)

2018-01-03 20:48:28 UTC MAIN commitmail json YAML

Update security/erlang-fast_tls to 1.0.18.

- Do not report badly formed Client Hello as a TLS error
- Report meaningful error when SNI callback fails
- Add Server Name Indication support for server connections
- Libressl only offer pre 1.1 api even if it present version > 1.1
- Fix crash on Mac OS X High Sierra due to replacement of system
  OpenSSL with BoringSSL

(fhajny)

2018-01-03 20:46:55 UTC MAIN commitmail json YAML

2018-01-03 15:55:37 UTC MAIN commitmail json YAML

Avoid identifying inotify on modern SunOS platforms, fixes build.

(fhajny)

2018-01-03 13:17:08 UTC MAIN commitmail json YAML

doc: Updated net/rabbitmq to 3.7.2

(fhajny)

2018-01-03 13:16:59 UTC MAIN commitmail json YAML

Update net/rabbitmq to 3.7.2.

3.7.2
- Bug fix in the HTTP auth backend

3.7.1
- Bug fixes

3.7.0
- Minimum required Erlang version is now 19.3
- Automation-friendly cluster formation
- Distributed management plugin, including minor breaking HTTP API changes.
- Simpler, ini-style configuration format
- Per-vhost limits
- Operator policies
- Topic-based authorisation
- Cross-protocol Shovel (currently supports AMQP 0.9.1 and AMQP 1.0)
- Command-line tools are extensible via plugins
- Message store multi-tenancy
- Proxy protocol support
- Web STOMP no longer supports WebSocket emulation
- Java and .NET client releases no longer track RabbitMQ server releases
- .NET client now supports .NET Core.
- Management plugin extensions now must target Cowboy 2.0
- Java client for RabbitMQ HTTP API

(fhajny)

2018-01-03 13:06:53 UTC MAIN commitmail json YAML

doc: Added lang/elixir version 1.5.2

(fhajny)

2018-01-03 13:06:17 UTC MAIN commitmail json YAML

Import elixir-1.5.2 as lang/elixir.

Elixir is a functional, meta-programming aware language built on top of the
Erlang VM. It is a dynamic language that focuses on tooling to leverage
Erlang's abilities to build concurrent, distributed and fault-tolerant
applications with hot code upgrades.

(fhajny)

2018-01-03 12:12:07 UTC MAIN commitmail json YAML

nickle: Fix build on SunOS and systems without timelocal().

(jperkin)

2018-01-03 11:50:39 UTC MAIN commitmail json YAML

xf86-video-vboxvideo: Set DRIVER_MAN_SUFFIX on SunOS.

(jperkin)

2018-01-03 11:10:27 UTC MAIN commitmail json YAML

Updated net/wireshark to 2.4.3

(ryoon)

2018-01-03 11:09:41 UTC MAIN commitmail json YAML

Update to 2.4.3

Changelog:
Bug Fixes

The following bugs have been fixed:

    wnpa-sec-2017-47

    The IWARP_MPA dissector could crash. (Bug 14236)

    wnpa-sec-2017-48

    The NetBIOS dissector could crash. (Bug 14249)

    wnpa-sec-2017-49

    The CIP Safety dissector could crash. (Bug 14250)

    "tshark -G ?" doesn't provide expected help. (Bug 13984)
    File loading is very slow with TRANSUM dissector enabled. (Bug 14094)
    packet-knxnetip.c:936: bad bitmask ?. (Bug 14115)
    packet-q931.c:1306: bad compare ?. (Bug 14116)
    SSL Dissection bug. (Bug 14117)
    Wireshark crashes when exporting various files to .csv, txt and other
      'non-capture file' formats. (Bug 14128)
    RLC reassembly doesn't work for RLC over UDP heuristic dissector.
      Bug 14129)
    HTTP Object export fails with long extension (possibly query string).
      (Bug 14130)
    3GPP Civic Address not displayed in Packet Details. (Bug 14131)
    Wireshark prefers packet.dll in System32\\Npcap over the one in
      System32. (Bug 14134)
    PEEKREMOTE dissector does not decode 11ac MCS rates properly. (Bug 14136)
    Visual Studio Community Edition 2015 lacks tools named in developer
      guide. (Bug 14147)
    TCP: Malformed data with Riverbed Probe option. (Bug 14150)
    Wireshark Crash when trying to use Preferences | Advanced. (Bug 14157)
    Right click on SMB2 Message ID and then Apply as Column causes Runtime
      Error. (Bug 14169)
    Return [Enter] should apply change (Column title - Button Label
      toolbars). (Bug 14191)
    Wireshark crashes if "rip.display_routing_domain" is set to TRUE in
      preferences file. (Bug 14197)
    Entry point inflatePrime not found for androiddump.exe and
      randpktdump.exe. (Bug 14207)
    BGP: IPv6 NLRI is received with Add-path ID, then Wire shark is not
      able to decode the packet correctly. (Bug 14241)
    Wrong SSL decryption when using EXTENDED MASTER SECRET and Client
      certificate request (mutual authentication). (Bug 14243)
    Frame direction isn't always set if it comes from the pcapng record
      header rather than the packet pseudo-header. (Bug 14245)

Updated Protocol Support

3GPP NAS, BGP, CIP Safety, DTLS, IEEE 802.11 Radio, IWARP_MPA,
KNXnet/IP, LCSAP, MQTT, NetBIOS, PEEKREMOTE, Q.931, RIP, RLC, SIP,
SSL/TLS, TCP, and TRANSUM

(ryoon)

2018-01-03 10:55:22 UTC MAIN commitmail json YAML

2018-01-03 10:20:05 UTC MAIN commitmail json YAML

Updated www/php-nextcloud to 12.0.4

(ryoon)

2018-01-03 10:16:54 UTC MAIN commitmail json YAML

Update to 12.0.4

Changelog:
Server
Over 50 fixes were merged in the server.

    Improve text: 'you have now' -> 'you now have (server#6464)
    Fix initializing paged search under some circumstances (server#6502)
    LDAP: simplify returning the homePath (server#6509)
    Fix sharer name overlap with filename (server#6524)
    Allow to close sidebar for text files (server#6525)
    Fix quota new endpoint 12 (server#6527)
    Pass new value to triggerChange (server#6528)
    Throw 101 when an empty group string is provided (server#6547)
    Contacts menu privacy (server#6554)
    Add color-border variable (server#6649)
    Do not stop on scss compilation failure (server#6661)
    Don't pass User object when uid string is expected (server#6674)
    Navigate to the root directory when showing the main filelist (server#6689)
    Fix LDAP User deletion (cleanup) (server#6699)
    Update aws sdk + s3 improvements (server#6737)
    Dont run invalid path repair step when upgrading from 11.0.5.2 and
      later (server#6743)
    Fix language when trying to change password (server#6751)
    Fix postgresql tests (server#6792)
    Also use configured 'cache_path' for new chunking (server#6814)
    Set s3 part size to 500mb (server#6815)
    Fix contacts menu for IE11 (server#6823)
    Still trigger conflict resolution for existing entries when
      the curre (server#6847)
    Propagate multipart upload exception when aborting upload (server#6855)
    Allow to migrate from 10.0.3.3 (server#6878)
    Timespan check (server#6896)
    Do not log WebDAV maintenance mode exception (server#6908)
    Don't reset quota (server#6910)
    Backport of translation string fixes (server#6935)
    Fix class name in exception logger plugin (server#6942)
    Allow quota of 0 again (server#6943)
    Fix uninitialized variable $this->params (server#6944)
    Don't add a LIKE condition when it's not needed (server#6945)
    Fix undefined offset warning when using '/' as external storage
      root (server#6946)
    Fix page title not changed (server#6987)
    Better readability for text on log in page which is directly on
      backgrounds (server#7028)
    Translate Grant Access (server#7040)
    Use fopen directly when reading objects from s3 (server#7079)
    Improve mimetype detection for object storages (server#7081)
    Fix seeking on object storage (server#7082)
    Hide spinner for initial install (server#7095)
    Ensure uid for calendar objects is unique (server#7096)
    Revert "Only allow colons in db host for IPv6 addresses (server#7102)
    Theme flow redirection page (server#7114)
    Fix icon for security settings (server#7116)
    If for some reason the json can't be decoded it is not cached (server#7118)
    Improve performance of UserMountCache with external storage
      folders (server#7120)
    {J,CS}SResourceLocator: account for symlinks in app path server#7170)
    Fix s3 download and touch (server#7186)
    Touch opertation on object storage, don't create the file cache entry
      to early (server#7207)
    Allow migration from upcoming 10.0.4 ownCloud release (server#7245)
    CSSResourceLocator: handle SCSS in apps outside root (server#7257)
    only replace permission popupmenu (server#7259)
    Fix accesslist when a user has an ID only containting 0-9 (server#7262)
    Update CRL due to files_frommail (server#7277)
    Only in case of $currentAccess the array uses the id as index (server#7328)

Other

    Add aws sdk (3rdparty#69)
    Don't send emails to disabled users (activity#202)
    Add an option to disable emails completly (activity#206)
    Make sure the mountPoint property is public before using it
      (files_accesscontrol#79)
    Allow to playback m4v files (files_videoplayer#43)
    Fix notifications order (notifications#93)

(ryoon)

2018-01-03 08:08:33 UTC MAIN commitmail json YAML

Updated www/py-django, www/py-flask-limiter

(adam)

2018-01-03 07:51:31 UTC MAIN commitmail json YAML

doc: Updated devel/p5-Perl-Tidy to 20180101

(wiz)

2018-01-03 07:51:23 UTC MAIN commitmail json YAML

p5-Perl-Tidy: update to 20180101.

  2018 01 01
      - Added new flag -wn (--weld-nested-containers) which addresses these issues:
        RT #123749: Problem with promises;
        RT #119970: opening token stacking strange behavior;
        RT #81853: Can't stack block braces

      - Fixed RT #114359: Missparsing of "print $x ** 0.5;

      - Deactivated the --check-syntax flag for better security.  It will be
        ignored if set.

      - Corrected minimum perl version from 5.004 to 5.008 based on perlver
        report.  The change is required for coding involving wide characters.

      - For certain severe errors, the source file will be copied directly to the
        output without formatting. These include ending in a quote, ending in a
        here doc, and encountering an unidentified character.

(wiz)

2018-01-03 07:50:21 UTC MAIN commitmail json YAML

doc: Updated www/p5-Plack to 1.0045

(wiz)

2018-01-03 07:50:14 UTC MAIN commitmail json YAML

p5-Plack: update to 1.0045.

1.0045  2017-12-31 12:40:52 PST
    [BUG FIXES]
        - Protect WrapCGI against SIGCHLD handlers #596

    [IMPROVEMENTS]
        - Set Content-Length to 0 in XSendfile middleware #602
        - Document options for XSendfile middleware
        - Remove #foo file for testing that was causing issues on Win32 systems #599
        - Add 103 Early Hints to Plack::Handler::CGI

(wiz)

2018-01-03 07:48:28 UTC MAIN commitmail json YAML

doc: Updated time/p5-Time-HiRes to 1.9751

(wiz)

2018-01-03 07:48:19 UTC MAIN commitmail json YAML

p5-Time-HiRes: update to 1.9751.

1.9751 [2018-01-02]
- in macOS/OSX/Darwin, use __has_builtin() check also for utimensat(),
  can cause errors like
  "HiRes.xs:1474:16: error: unrecognized platform name macOS"
  [rt.cpan.org #123994]
  (oversight from 1.9749)
- do not define TIME_HIRES_STAT/d_hires_stat if none was found, instead
  of defining it to be zero, which case has no implementation in hrstatns()
  (thanks to Nigel Horne)
- in t/utime.t try to divine if the filesystem of the tempfiles has been
  mounted with the 'noatime' option, which can prohibit updating the
  access time timestamp.  Also document this in HiRes.pm.
  (thanks to Nigel Horne, original analysis by Slaven Rezic)
- synchronize the constant lists in HiRes.pm:@EXPORT_OK
  and Makefile.PL:doConstants and regenerate fallback/const-c.inc
  and fallback/const-xs.inc, this fixes Perl 5.6.2 issue with
  d_futimens not allegedly being a valid macro in t/utime.t
  (using Perl 5.26.1 for the regenerating, not 5.6.2)
  (thanks to Nigel Horne)
- in t/utime.t define a nop sub done_testing for ancient Perls
  (like Perl 5.6.2)
- in Perl 5.6.2 a bogus warning
  "Use of uninitialized value in subroutine entry"
  is issued from t/alarm.t: add a comment documenting that

(wiz)

2018-01-03 07:46:56 UTC MAIN commitmail json YAML

py-flask-limiter: updated to 1.0.1

1.0.1:
Bug fix
* Duplicate rate limits applied via application limits

1.0.0:
Improved documentation for handling ip addresses for applications behind proxiues
Execute rate limits for decorated routes in decorator instead of before_request
Bug Fix
* Python 3.5 Errors
* RATELIMIT_KEY_PREFIX configuration constant not used
* Can't use dynamic limit in default_limits
* Retry-After header always zero when using key prefix

(adam)

2018-01-03 07:23:45 UTC MAIN commitmail json YAML

py-django: updated to 1.11.9

Bugfixes:
Fixed a regression in Django 1.11 that added newlines between MultiWidget窶冱 subwidgets.
Fixed incorrect class-based model index name generation for models with quoted db_table.
Fixed incorrect foreign key constraint name for models with quoted db_table.
Fixed a regression in caching of a GenericForeignKey when the referenced model instance uses more than one level of multi-table inheritance.

(adam)

2018-01-03 01:08:05 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-03 01:06:59 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-03 01:04:54 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-03 00:42:46 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-03 00:41:37 UTC MAIN commitmail json YAML

Improved guess-license for practical use.

(rillig)

2018-01-03 00:36:10 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-03 00:35:24 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-03 00:34:18 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-03 00:30:31 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-03 00:29:23 UTC MAIN commitmail json YAML

Fixed LICENSE comment.

(rillig)

2018-01-03 00:25:17 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-03 00:24:51 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-03 00:22:16 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-03 00:21:01 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-02 23:41:42 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-02 23:35:02 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-02 23:33:44 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-02 23:23:35 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-02 23:20:19 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-02 23:04:48 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-02 22:56:02 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-02 22:54:26 UTC MAIN commitmail json YAML

Added missing LICENSE variable.

(rillig)

2018-01-02 22:51:36 UTC MAIN commitmail json YAML

Added missing LICENSE variable (gnu-lgpl-v2).

(rillig)

2018-01-02 22:40:32 UTC MAIN commitmail json YAML

Added the guess-license target.

It compares the license file from the package with the available licenses
in licenses/ and shows the diff to the best match.

This will hopefully make it easier for package authors to include the
LICENSE variable in the package Makefile. This variable being missing is
one of the most frequent error messages from pkglint (4187 out of 20044).

(rillig)

2018-01-02 21:18:48 UTC MAIN commitmail json YAML

Allow package developers to easily see and check the SUBST changes.

(rillig)

2018-01-02 21:11:10 UTC MAIN commitmail json YAML

Replaced pkgsrc-specific patches with a SUBST block.

This reduces the number of pkglint errors for this package, since all
remaining patches are properly commented now.

No functional change, except for a smaller binary package.

(rillig)

2018-01-02 15:55:25 UTC MAIN commitmail json YAML

doc: Updated mail/dovecot2-pigeonhole to 0.5.0

(fhajny)

2018-01-02 15:55:12 UTC MAIN commitmail json YAML

Update mail/dovecot2* to 2.3.0

(fhajny)

2018-01-02 15:53:37 UTC MAIN commitmail json YAML

Update mail/dovecot2-pigeonhole to 0.5.0.

* editheader extension: The implementation of header modifications is
  heavily updated. Although the functionality has not changed, the
  underlying code was updated to address several static analysis
  warnings, runtime integer arithmetic warnings (Clang), and to match
  updates in the Dovecot stream API.
+ variables extension: Made the maximum scope and variable size
  configurable.
+ subaddress: Support multiple recipient_delimiters.
- enotify extension: mailto method: Fixed parsing of mailto URI with
  only a header part.
- enotify plugin: mailto method: Make sure the "From:" header is set to
  a usable address and not "(null)".
- Fixed writing address headers to outgoing messages. Sometimes headers
  were MIME-encoded twice, yielding invalid results.

(fhajny)

2018-01-02 15:52:44 UTC MAIN commitmail json YAML

Update mail/dovecot2* to 2.3.0.

Some of the larger changes:

* Various setting changes, see https://wiki2.dovecot.org/Upgrading/2.3
* Logging rewrite started: Logging is now based on hierarchical events.
  This makes it possible to do various things, like: 1) giving
  consistent log prefixes, 2) enabling debug logging with finer
  granularity, 3) provide logs in more machine readable formats
  (e.g. json). Everything isn't finished yet, especially a lot of the
  old logging code still needs to be translated to the new way.
* Statistics rewrite started: Stats are now based on (log) events.
  It's possible to gather statistics about any event that is logged.
  See http://wiki2.dovecot.org/Statistics for details
* ssl_dh setting replaces the old generated ssl-parameters.dat
* IMAP: When BINARY FETCH finds a broken mails, send [PARSE] error
  instead of [UNKNOWNCTE]
* Linux: core dumping via PR_SET_DUMPABLE is no longer enabled by
  default due to potential security reasons (found by cPanel Security
  Team).
+ Added support for SMTP submission proxy server, which includes
  support for BURL and CHUNKING extension.
+ LMTP rewrite. Supports now CHUNKING extension and mixing of
  local/proxy recipients.
+ auth: Support libsodium to add support for ARGON2I and ARGON2ID
  password schemes.
+ auth: Support BLF-CRYPT password scheme in all platforms
+ auth: Added LUA scripting support for passdb/userdb.
  See https://wiki2.dovecot.org/AuthDatabase/Lua
- Input streams are more reliable now when there are errors or when
  the maximum buffer size is reached. Previously in some situations
  this could have caused Dovecot to try to read already freed memory.
- Output streams weren't previously handling failures when writing a
  trailer at the end of the stream. This mainly affected encrypt and
  zlib compress ostreams, which could have silently written truncated
  files if the last write happened to fail (which shouldn't normally
  have ever happened).
- virtual plugin: Fixed panic when fetching mails from virtual
  mailboxes with IMAP BINARY extension.
- doveadm-server: Fix potential hangs with SSL connections
- doveadm proxy: Reading commands' output from v2.2.33+ servers could
  have caused the output to be corrupted or caused a crash.
- Many other smaller fixes

(fhajny)

2018-01-02 12:24:06 UTC MAIN commitmail json YAML

doc: Updated net/powerdns-recursor to 4.1.0

(fhajny)

2018-01-02 12:23:55 UTC MAIN commitmail json YAML

Update net/powerdns-recursor to 4.1.0.
Lua support no longer optional.

PowerDNS Recursor 4.1.0
===========================================================

- Improved DNSSEC support
- Improved documentation
- Improved RPZ support
- Improved EDNS Client Subnet support
- Support for Botan 2.x (and removal of support for Botan 1.10)
- SNMP support
- Lua engine has gained access to more parts of the recursor
- CPU affinity can now be specified
- TCP Fast Open support
- New performance metrics

Full changelog:

  https://doc.powerdns.com/recursor/changelog/4.1.html

PowerDNS Recursor 4.0.7
===========================================================

- Insufficient validation of DNSSEC signatures (CVE-2017-15090)
- Cross-Site Scripting in the web interface (CVE-2017-15092)
- Configuration file injection in the API (CVE-2017-15093)
- Memory leak in DNSSEC parsing (CVE-2017-15094)

Bug fixes
- Update rec_control manpage
- Check in the detected OpenSSL/libcrypto for ECDSA
- Make more specific Netmasks < to less specific ones
- Fix validation at the exact RRSIG inception or expiration time
- Lowercase all outgoing qnames when lowercase-outgoing is set
- Fix libatomic detection on ppc64
- Edit configname definition to include the 'config-name' argument

Improvements
- Extract nested exception from Luawrapper
- Use explicit yes for default-enabled settings
- Throw an error when lua-conf-file can't be loaded
- get-remote-ring's "other" report should only have two items.
- PowerDNS sdig does not truncate trailing bits of EDNS Client Subnet
  mask
- Only increase no-packet-error on the first read
- Add support for Botan 2.x
- Add more information to recursor cache dumps
- Fix typo in two log messages
- Add help text on autodetecting systemd support
- Be more resilient with broken auths
- Remove pdns.PASS and pdns.TRUNCATE
- Improve dnsbulktest experience in travis for more robustness
- Create socket-dir from init-script
- b.root renumbering, effective 2017-10-24
- Don't retry security polling too often when it fails

(fhajny)

2018-01-02 12:20:03 UTC MAIN commitmail json YAML

Updated net/powerdns* to 4.1.0

(fhajny)

2018-01-02 12:18:16 UTC MAIN commitmail json YAML

Update net/powerdns* to 4.1.0.

PowerDNS Authoritative Server 4.1.0
===========================================================

- Improved performance: 400% speedup in some scenarios
- Crypto API: DNSSEC fully configurable via RESTful API
- Improved documentation
- Database related improvements
- Enhanced tooling
- Support for TCP Fast Open
- Support for non-local bind
- Support for Botan 2.x (and removal of support for Botan 1.10)
- Our packages now ship with PKCS #11 support.
- Recursor passthrough removal

Full changelog:

  https://doc.powerdns.com/authoritative/changelog/4.1.html

PowerDNS Authoritative Server 4.0.5
===========================================================

Fixes
- Fix for missing check on API operations (CVE-2017-15091)
- Bindbackend: do not corrupt data supplied by other backends in
  getAllDomains
- API: prevent sending nameservers list and zone-level NS in rrsets
- gpgsql: make statement names actually unique
- Fix remotebackend params
- Fix godbc query logging
- For create-slave-zone, actually add all slaves, and not only first n
  times
- Fix a regression in axfr-rectify + test
- When making a netmask from a comboaddress, we neglected to zero the
  port
- Fix libatomic detection on ppc64
- Catch DNSName exception in the Zoneparser
- Publish inactive KSK/CSK as CDNSKEY/CDS
- Handle AFSDB record separately due to record structure.
- Treat requestor's payload size lower than 512 as equal to 512
- Correctly purge entries from the caches after a transfer
- Handle a signing pipe worker dying with work still pending
- Ignore SOA-EDIT for PRESIGNED zones.
- Check return value for all getTSIGKey calls.

Improvements
- Fix ldap-strict autoptr feature, including a test
- mydnsbackend: Add getAllDomains
- Stubresolver: Use only recursor setting if given
- LuaWrapper: Allow embedded NULs in strings received from Lua
- sdig: Clarify that the ednssubnet option takes "subnet/mask"
- Tests: Ensure all required tools are available
- PowerDNS sdig does not truncate trailing bits of EDNS Client Subnet
  mask
- LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace
- Add support for Botan 2.x
- Ship ldapbackend schema files in tarball
- Collection of schema changes
- Fix typo in two log messages
- Add help text on autodetecting systemd support
- Use a unique pointer for bind backend's d_of
- Fix some of the issues found by @jpmens

(fhajny)