acme.sh: update to 3.1.6
Changes since 3.1.4:
3.1.6:
- Release tags are signed from 3.1.6 on. The public key is allowed_signers
in this repository; see "Verify a Release" in the README.
- No functional change since 3.1.5.
3.1.5:
- Release tags are signed from 3.1.5 on. The public key is allowed_signers
in this repository; see "Verify a Release" in the README.
- New ACME_PACKAGED mode for distro-packaged installs: --install no longer
copies the script into LE_WORKING_DIR, and --upgrade, --install-online and the
auto-upgrade cron path defer to the system package manager
(#7135).
- Standalone mode listens on both IPv4 and IPv6 by default, and the port
check now works on the BSDs, macOS and Haiku.
- An explicit --days or --valid-to now outranks the ARI renewal window.
[16 lines not shown]
atto(1): For users who can't easily remember key bindings, add a menu
which is opened by pressing the escape key twice, and operated using
the cursor keys. This uses libedit, so is conditional on SMALLPROG
to still allow easy inclusion of a minimal editor in ramdisks and so
on.
As the copyright might reveal, I nicked some code from blymn@'s editor
from othersrc to implement the menu. Thanks!
XXX it should really be renamed to natto now, since this is totally
beyond the vision of the original atto.
devel/gitpane: update to 0.18.0
[0.18.0] - 2026-10-29
Added
Gitpane Explorer for VS Code shows workspace repositories, linked worktrees and changed files beside the file tree. It updates as workspace repositories change and opens file changes in the editor. The extension includes branch review, the commit graph, repository and worktree actions, submodule inspection, sessions, themes and configured launchers. (#107, closes #106)
Install Gitpane Explorer from the VS Code Marketplace, or download a VSIX with its bundled backend for Apple Silicon and Intel Macs, Linux ARM64 and x64, and Windows x64. The README includes a rendered preview, installation steps and settings. (#107)
Fixed
Git process arguments use ordinary Windows paths while repository identity checks retain canonical paths. This fixes content reads and worktree operations that failed on canonical Windows paths. (#107)
Parent repository status remains available when a registered submodule is replaced by a file or symlink. (#107)
Update libz-sys to 1.1.31 for RUSTSEC-2026-0418 and include the latest merged Git and TLS dependency fixes. (#107, #104, #102, #96)
resterm: Update to 1.17.1
Failed tests in the text report
JavaScript asserts show their text once
--timeout stops JavaScript tests
Loop variables in step conditions
+ needs text on one side
Other changes
markdown-editor: Add markdown-editor-2.10.0
Markdown-editor is a lightweight, native WYSIWYG Markdown editor written in
C++ with Qt6 (no Electron). It supports TeX formulas, Mermaid/PlantUML
diagrams, document tabs, spell checking, export to PDF, HTML, LaTeX, ODT,
DOCX and EPUB, and provides its user interface in nine languages.
multimedia/moviebox-tui: update to 0.1.28
Fixed
Providers & Stream Resolution:
Extracted signed CDN MP4 streams from MovieBox subject detector links (/subject-api/get), restoring movie streaming and multi-resolution playback after upstream restricted play-info with deprecation clips.
Reported explicit error causes when MovieBox serves placeholder clips instead of generic "no streams available", and surfaced upstream HTTP failure statuses directly to the user.
Download Engine & Batch Queue:
Recorded only flushed bytes to .part.json segment progress during downloads, preventing aborted or paused workers from leaving zero-byte gaps and file corruption on resume.
Changed
Dependencies & Build Infrastructure:
Upgraded tokio to 1.54.1, scraper to 0.29.0, lru to 0.19.0, zip to 9.1.0, sha2 to 0.11.1, open to 5.4.5, libc to 0.2.191, and serde_json to 1.0.154.
misc/rozi: update to 0.0.39
v0.0.39
Added
You can remove an extension from its installed report with Ctrl+K. A Discover entry for an extension that is already installed opens that extension in the Installed tab, where you can enable, update, or remove it. (#280)
Rozi can send one anonymous weekly usage report per install. The first launch shows an Anonymous usage count notice, and the first report is sent on a later day. Set [updates] count_usage = false, [updates] check = false, or DO_NOT_TRACK=1 to opt out. CI environments and debug builds are not counted. (#282)
Drag one workspace tab onto another in the workbar to swap their panes, layout, and name. You stay on the workspace you dragged, under its new number. (#284)
After an update, a What's new dialog shows the release notes once. Use release-notes in the command palette to open them again, or set [updates] release_notes = false to turn off the automatic dialog. First installs and source builds without embedded notes do not show it. (#286)
On a first install without an existing config file, a Welcome to rozi card introduces sessions, panes, workspaces, and the keys bound to common commands. Press Enter to close it or Ctrl+L to open the getting-started guide. (#287)
Fixed
Renaming a temporary session from the Sessions picker updates its row and the sidebar as soon as the server confirms the rename. The highlight stays on the renamed session.
Hovering a clickable workbar badge now highlights its rounded or pointed ends along with the rest of the badge. (#285)
Update notices now ask you to restart running sessions when the session protocol differs, without showing the internal protocol number. They continue to name extension API version changes. (#283)
Documentation links in the Anonymous usage count notice and update notice now point to the Rozi website. (#287)
Compatibility
[15 lines not shown]
devel/sem: update to 0.29.0
v0.29.0
Bumps every crate, the npm package and the MCP registry entry to 0.29.0.
Minor bump because what sem extracts changed (#538): new entity kinds in
C, C++, C#, Rust, Java, Kotlin and Elixir, C++ headers in `.h` files
read as C++, and recovered definitions in regions tree-sitter cannot
parse.
v0.28.3
Release the merged ignore-handling fix (#536), caller-batch lookup reuse
(#534), and publishing reliability improvements. Synchronizes all five
workspace crate versions, internal dependencies, Cargo.lock, npm, MCP
metadata, and changelog. Validation: locked offline Cargo metadata and
git diff --check passed; the underlying fix passed focused regressions
and all CI checks, including Windows.
v0.28.2
[4 lines not shown]
Update jxrlib to 1.4.4
Motivated by wiz@ in
https://mail-index.netbsd.org/pkgsrc-users/2026/10/26/msg043665.html
Breaking change: include directory renamed from jxrlib to libjxr
Changelog
* V1.4.4; 2026/10/09
+ Fix potential size_t overflow in the memory allocation limit
check of calloc_lim
* V1.4.3; 2026/09/02
+ tmpnam security mitigations:
o Use a local buffer instead of its internal one
o Fail to open file if it exists (requires C11)
* V1.4.2; 2026/07/07
+ Fix buffer overflow in outputNChannel (OSS Fuzz 532002884)
* V1.4.1; 2026/06/03
[44 lines not shown]
luanti: update to 5.18.0
Deprecations and compatibility notes
- Lua API: Missing x, y or z values in vectors now cause an error.
Deprecation warnings were issued since version 5.13.0.
- The setting secure.enable_security has been removed. A
command-line argument has been added to cover cases where it is
- for whatever reason - necessary to disable it.
Client / Audiovisuals
- Performance improvements
- Improve zoom level status text
- Autoforward is again forwarded to get_player_control().up
(5.17.0 regression)
- Better text placement for the media loading step
- The Enter key event no longer leaks into formspecs opened from
the chat
- Re-added a client setting to disable digging particles
- Moved the primary actions (buttons) in main menu dialogs to the
[58 lines not shown]
Pull up following revision(s) (requested by mrg in ticket #562):
external/mit/xorg/lib/brotli/brotli.mk: revision 1.2
external/mit/xorg/lib/brotli/brotli-rename.mk: revision 1.2
add new decoder sources and symbols for the renamer.
