cq-cli: import cq-cli-0.17.0 as wip/cq-cli
An open standard for shared agent learning -- structured knowledge that
prevents AI agents from repeating each other's mistakes.
The term **cq** is derived from two sources: *colloquy*, a structured
exchange of ideas where understanding emerges through dialogue rather than
one-way output, and **CQ**, a radio call sign ("any station, respond"),
capturing the same model: open invitation, response, and collective signal
built through interaction. Both capture the same idea: agents broadcasting
what they've learned and listening for what others already know.
resterm: Update to 1.1.0
Changelog
Path completion
Resterm now shows matching files and directories in the open and save dialogs, and while entering supported commands.
libxml2: update to 2.15.3.
From Showta Ishizaki in PR 60591.
v2.15.3: Apr 15 2026
### Security
- parser: Pass userData to SAX text callbacks in xmlParseReference (type-confusion)
- entities: copy children in xmlCopyEntity
- c14n: Fix Type confusion in xmlC14NProcessAttrsAxis
- python: Do not decref string after adding to the list (double-free / use-after-free)
- c14n: Reuse tmp_str, xmlStrcat reallocates *cur (double-free)
### Improvements
- schemas: Fix relative schemaLocation resolution in XSI assembly in streaming mode
- xmlreader: propagate reader resource loaders to validator parsers
- python: Make python bindings python2 compatible
[44 lines not shown]
www/gitea: update to 1.27.2
Changes in 1.27.2:
* SECURITY
- Fix: update collaborator access mode and httpsign
- Refactor: external render
- Fix(actions): resolve pull_request_target reusable workflows at the
base commit
- Refactor: markup render
- Fix(deps): update dependency mermaid to v11.16.1
- Fix(auth): set WebAuthn user verification per request
- Fix: render highlight language
* ENHANCEMENTS
- enhance: add missing npm package metadata properties
* BUGFIXES
- fix(actions): keep github.event.inputs as strings for
workflow_dispatch
- fix(actions): let a rerun of selected jobs read the previous
[419 lines not shown]
pkg-vulnerabilities: CVE-2025-69720 was fixed in ncurses-6.6
According upstream NEWS it was fixed in 20251213 and 6.6 was released
on 20251230.
Reported via PR pkg/60589 from Showta Ishizaki, thanks!
vnode(9): Split a wall of prose into an itemized description list.
Prompted by puzzling over the obtuse API contract around v_writecount
and VOP_OPEN/CLOSE for:
PR kern/60586: panic after hot-plugging raidframe component
ca-certificates: Update to 20260601
ca-certificates (20260601) unstable; urgency=medium
* Remove ca-certificates-local example (closes: #988912, #1127101).
* Update Mozilla certificate authority bundle to version 2.86
The following certificate authority was added (+):
+ e-Szigno TLS Root CA 2023
The following certificate authorities were removed (-):
- QuoVadis Root CA 2
- QuoVadis Root CA 3
- DigiCert Assured ID Root CA
- DigiCert Global Root CA
- DigiCert High Assurance EV Root CA
- SwissSign Gold CA - G2
- SecureTrust CA
- Secure Global CA
- COMODO Certification Authority
- Certigna
[18 lines not shown]
