jj: updated to 0.45.1
0.45.1 - 2026-09-03
This release fixes an error that prevented the new jj-core crate from being
published.
Fixed bugs
* Building without `Cargo.lock` (e.g. `cargo install jj-cli`) works again
after all versions of the `bisync` crate, a transitive dependency of gix,
were yanked.
* Signatures on commits in SHA-256 Git repositories are now stored under the
`gpgsig-sha256` header, as Git does, so Git recognizes them as signed and
jj can read them back.
openvpn: updated to 2.7.7
Overview of changes in 2.7.7
Security fixes
- reliability layer: Avoid unbounded reliable TLS timeout (CVE-2026-84732)
- reliability layer: Ignore acks for packets that cannot be outstanding
(CVE-2026-84732)
- Windows: fix ``CreateProcess()`` command line quoting for characters that
are special to ``cmd.exe`` and where a combination of validation script
plus rogue CA could lead to misbehavior (CVE-2026-84256)
- Windows: fix ``tapctl`` to always call ``netsh.exe`` with full path
(as we do elsewhere) (CVE-2026-84226)
- Windows: don't use NULL DACL with system objects, namely the
[77 lines not shown]
powerdns-recursor: Update to 5.4.6
Released: 3rd of September 2026
Improvements
Skip unexpected tags when deserializing protobuf messages
References: #17869, pull request 17967
Store scope zero replies in packetcache and modify on retrieval.
References: #17897, pull request 17968, pull request 17983
Update our Rust deps.
References: #17696, pull request 17969
Make getOpenFileDescriptors fast under Linux.
M
M
References: #17973, pull request 17996
openjdk8: Restore SunOS support.
Add a big XXX comment to patch-common_autoconf_generated-configure.sh
explaining why generation for it is currently broken.
dnscontrol: Update to 5.0.3
Changelog
Provider-specific changes:
c1ebdb1: BIND: BUGFIX: SOA not incrementing on the existing zone (fixes #4840) (#4842) (@TomOnTime)
90984bb: BUNNY_DNS: Fix TXT record creation (#4839) (@TomOnTime)
c798fcb: LINODE: Add support for TTLs of 30s and 120s (#4835) (@dairiki)
f96fde4: LINODE: BUGFIX: too picky about hyphens in names of SRV records (#4828) (@TomOnTime)
Dependencies:
b6ce13f: CHORE: Update dependencies (#4843) (@TomOnTime)
Other changes and improvements:
34db875: BUG: SPF flattening removes redirect= modifiers that an "all" mechanism ignores (#4634) (@shuvamk)
0d6fe4b: CHORE: Upgrade to glob v1 (#4841) (@TomOnTime)
162a39b: Potential fix for code scanning alert no. 50: Cache Poisoning via execution of untrusted code (#4837) (@TomOnTime)
5196387: Release v5.0.3 (#4844) (@TomOnTime)
genpasswd: Honor LDFLAGS
This also fixes actual build issues on platform that enable RELRO where it
previously failing with:
ERROR: bin/genpasswd: missing RELRO
Noticed by <martin>, thanks!
PKGREVISION++
riscv: Fix bus_space_{alloc,free,mmap} macros
The macros bus_space_alloc, bus_space_free, and bus_space_mmap were
incorrectly passing the bus space cookie as their first parameter.
This patch updates these macros to pass the entire bus space tag pointer
instead as per other macros.
risc-v: fix assemble opcode helper macros
- remove *_SUBI variants as these instructions don't exist and the
assembler doesn't help. *_ADDI should be used.
- use 'iw' instead of 'wi' to match real instructions.
py-hypothesis: updated to 6.167.1
6.167.1 - 2026-08-30
This patch improves shrinking and generation for collection strategies which reject some drawn elements, such as lists() with unique=True. Rejected elements are now marked as discarded, so the shrinker can delete them wholesale and generation avoids revisiting choices that would be rejected again.
6.167.0 - 2026-08-30
Test case observations from observability now give more detail about why a test case failed or was abandoned. metadata includes a new status_reason_location key: a filename:lineno location for the status_reason, if known - for example the location of a failing assume() call, the .filter() call whose predicate rejected the last drawn value, or the exception for failing tests.
Test cases which exceeded the maximum allowed size now also report a nonempty status_reason.
py-inline-snapshot: updated to 0.35.4
0.35.4 — 2026-08-11
Fixed
- Prevented `--inline-snapshot=trim` from changing snapshots when a test body
fails or pytest is limited with `-k`, a test path, or a test node ID. Skipped
tests and fixture teardown errors do not prevent trimming. A message now
explains why trimming was disabled when it was requested implicitly. An
explicit `--inline-snapshot=trim` overrides this safeguard.
- Fixed a crash during session finalization when pytest's capture plugin is disabled.
