shells/oh-my-posh: update to 30.6.5
Bug Fixes
pwsh: emit ASCII-safe init output for non-ASCII paths (e458c6e)
serve: forward the full environment to the streaming daemon (4709f3e), closes #7792
status: end segments correctly (3c2976d)
devel/gitpane: update to 0.10.4
[0.10.4] - 2026-08-12
Added
A repository focus mode, toggled with f, dims repositories other than the selected one while keeping the selected repository's worktree and stash rows bright. The help overlay now stays within the terminal when showing the additional command.
Fixed
A–Z and Z–A sorting now remains stable when watcher-driven discovery runs. Pinned and nested repositories no longer jump back to scanner basename order several seconds after an explicit sort.
Repository discovery now preserves the selected repository when the discovered set changes instead of moving the selection to the first row.
Stash messages remain readable in focus mode instead of using the same hardcoded gray appearance as dimmed rows.
Updated lru to 0.18.2 to address RUSTSEC-2026-0253, a potential use-after-free in LruCache::pop() inherited through ratatui.
py-unearth: updated to 0.18.3
0.18.3
Features
cli: Download packages without unpacking
Bug Fixes
Update actions/checkout and setup actions to v6
Support packaging 26.0 changes
Prevent tar-slip via path traversal and symlink escape in _untar_archive
Complete path traversal protection by replacing os.makedirs with safe_makedirs
py-progressbar2: updated to 4.6.0
4.6.0
Performance
progressbar.progressbar() now auto-dispatches to a lean fast path for the common wrap-a-loop case, and an integer update gate keeps gated iterations to an increment, a compare and a store
Optional native iterator accelerator: pip install 'progressbar2[fast]'. See benchmarks/report.md for the numbers against tqdm, rich, alive-progress and click.
Features
tqdm-style arguments on progressbar(): desc, total, unit, unit_scale and postfix.
MultiBar(join_timeout=...) bounds the wait for unfinished bars on with-block exit.
TERM-based color detection generalized beyond xterm variants
AttributeDict is generic over its value type.
Fixes
28 bugs found in a full audit of the bar, widgets, MultiBar and the CLI
[12 lines not shown]
py-zensical: updated to 0.0.54
0.0.54
This version reduces peak memory usage by 8–10x, making builds of large
documentation projects substantially more efficient. It also improves reference
validation by preventing false positives for links successfully resolved
through autorefs.
Additionally, the user interface is updated to v0.0.25, fixing instant
navigation for inline scripts and version aliases created with mike. This
release also corrects mike configuration defaults and updates webbrowser to
address a security vulnerability.
py-pyphen: updated to 0.18.0
0.18.0
Update Spanish, Hungarian, Lithuanian and Danish dictionaries.
Keep README files updated with dictionaries.
Include __init__ method in Pyphen API documentation.
Support Python 3.14, drop Python 3.9 support.
py-ruff: updated to 0.16.3
0.16.3
Preview features
[pylint] Fix false negatives on negative numbers (PLR6104)
[pyupgrade] Add rule to replace while 1 with while True (UP048)
Bug fixes
[flake8-bandit] Also check keyword arguments (S602, S603, S607, S609)
[pylint] Allow continue in finally on Python 3.8
[pylint] Fix PLE1307 false positive with bools
[pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307)
[pylint] Improve handling of concatenated strings (PLE1300)
Rule changes
[21 lines not shown]
libgit2: updated to 1.9.7
v1.9.7
This is an security release with one change.
* Escape remote repository paths in libssh2
In v1.9.2, we started escaping repository paths in the OpenSSH-based
exec ssh transport. Bring the same escaping to the libssh2 transport
to avoid any potential command injection.
resterm: Update to 1.0.0
Changelog
Within the 1.x line:
* Request file directives keep their names, arguments and meaning.
* Existing CLI flags keep their meaning.
* Headless output keeps its JSON field names, JUnit structure and exit codes.
* Configuration keys (bindings, themes, settings) keep working.
* The headless Go package keeps its exported API.
* RestermScript keeps its syntax, builtins and host objects.
More information: https://github.com/unkn0wn-root/resterm/releases/tag/v1.0.0
PR/60021: USB-only boot: uhub0 attaches but uhub1 never appears...
Update the dwc2 intial reset sequence to more closely match the upstream
driver - it's changed a bit in the last 10 years.
This reset sequence gets the device out of the state it's left in by the
RaspberryPI firmware when booting from USB.
proc_vmspace_getref: Take p->p_lock around p->p_sflag access.
Prompted by reviewing the locking rules in;
PR kern/60568: panic locking against myself (p->p_lock) in NFS from
sysctl_vmproc
sysctl kern.proc_args.*.cwd/pathname: Use p_reflock, not p_lock.
- Avoid holding p_lock across copyout; this risks deadlock or panic
if memory is exhausted and the uvm fault handler during copyout
tries to deliver SIGKILL, which requires p_lock.
- Avoid holding p_lock across vnode_to_path: this risks deadlock or
panic if the file system, such as nfs, tries to check for pending
signals, which requires p_lock.
PR kern/60568: panic locking against myself (p->p_lock) in NFS from
sysctl_vmproc
sysctl vm.proc.*: Use p_reflock, not p_lock.
- Avoid holding p_lock across copyout; this risks deadlock or panic
if memory is exhausted and the uvm fault handler during copyout
tries to deliver SIGKILL, which requires p_lock.
- Avoid holding p_lock across vnode_to_path: this risks deadlock or
panic if the file system, such as nfs, tries to check for pending
signals, which requires p_lock.
PR kern/60568: panic locking against myself (p->p_lock) in NFS from
sysctl_vmproc
kern: New function proc_find_reflocked.
This is like proc_find_locked but returns with p_reflock held rather
than p_lock. Will be used to replace proc_find_locked in order to
fix:
PR kern/60568: panic locking against myself (p->p_lock) in NFS from
sysctl_vmproc
No modules currently use proc_find_locked or proc_find_reflocked, so
there should be no module ABI compatibility issues here.
pciconf: Sort resource windows in order of decreasing alignment
instead of size.
Consider pci0 has two ppb's. ppb0 has a memory window larger in
size, but smaller in alignment. ppb1 has one smaller in size, but
larger in alignment.
In this case, the memory window of ppb1 must be allocated earlier.
Otherwise, total size of required memory exceeds pci0's mem_total,
in general, due to padding region.
devel/scons4: Add request not to update to 4.11
pending scons/gpsd figuring out between them why 4.11 breaks the gpsd
build -- with an inscrutable stack trace, the gold standard for python
errors!
