NetBSD/pkgsrc-wip b250984 — py-mopidy TODO

py-mopidy: Add reference to CVE-2026-111925
DeltaFile
+2-0py-mopidy/TODO
+2-01 files

NetBSD/pkgsrc-wip 6ec2353 — openbao TODO

openbao: Add reference to recent CVEs
DeltaFile
+4-0openbao/TODO
+4-01 files

NetBSD/pkgsrc-wip cc4ecd2 — libosmocore TODO

libosmocore: Add reference to recent CVEs
DeltaFile
+2-0libosmocore/TODO
+2-01 files

NetBSD/pkgsrc-wip 709981f — xdg-desktop-portal TODO

xdg-desktop-portal: Add reference to recent CVEs
DeltaFile
+3-0xdg-desktop-portal/TODO
+3-01 files

NetBSD/pkgsrc-wip 02daaef — rtl_433 TODO

rtl_433: Add reference to CVE-2026-117609
DeltaFile
+3-1rtl_433/TODO
+3-11 files

NetBSD/pkgsrc-wip 16a0c97 — llama.cpp TODO

llama.cpp: Add reference to recent CVEs
DeltaFile
+4-1llama.cpp/TODO
+4-11 files

NetBSD/pkgsrc-wip 3f895eb — dokuwiki TODO

dokuwiki: Add reference to CVE-2026-113356
DeltaFile
+1-1dokuwiki/TODO
+1-11 files

NetBSD/pkgsrc-wip 992cc3e — busybox TODO

busybox: Add reference to CVE-2026-92205
DeltaFile
+1-1busybox/TODO
+1-11 files

NetBSD/pkgsrc Ob8eQcG — doc pkg-vulnerabilities

   doc: fix typo in imagemagick6 version

   refs: https://github.com/ImageMagick/ImageMagick6/commit/90255f0834eead08d59f46b0bda7b1580451cc0f
   and https://github.com/ImageMagick/ImageMagick6/commit/d348259b3bffa12d6aeb308fffd6e572c4d62786
   via: https://bugzilla.redhat.com/show_bug.cgi?id=1916610
VersionDeltaFile
1.812+2-2doc/pkg-vulnerabilities
+2-21 files

NetBSD/pkgsrc 1tcyhop — doc pkg-vulnerabilities

   doc: CVE-2018-16516 fixed in flask-admin 1.5.3

   ref: https://github.com/pallets-eco/flask-admin/pull/1699
VersionDeltaFile
1.811+2-2doc/pkg-vulnerabilities
+2-21 files

NetBSD/pkgsrc hYYeLtz — doc pkg-vulnerabilities

   doc: CVE-2023-43361 fixed in vorbis-tools 1.4.3

   ref: https://gitlab.xiph.org/xiph/vorbis-tools/-/commit/5bb47f58582c15c2413564b741d1d95e7b566aa8
VersionDeltaFile
1.810+2-2doc/pkg-vulnerabilities
+2-21 files

NetBSD/src wDBQDOw — external/mit/ctwm/etc system.ctwmrc

   ctwm(1): Add atto(1) to the default terminal utilities menu.
VersionDeltaFile
1.21+2-1external/mit/ctwm/etc/system.ctwmrc
+2-11 files

NetBSD/pkgsrc fgjmNJa — doc CHANGES-2026

   Updated sysutils/py-fsspec, www/py-django-mptt
VersionDeltaFile
1.7400+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc 8K9vmbg — www/py-django-mptt Makefile distinfo

   py-django-mptt: updated to 0.21.0

   0.21 (2026-10-27)

   Fixed tree methods of proxy models with a filtering custom manager (e.g. get_queryset().filter(level=2)) only seeing the filtered rows: e.g. get_root() raised DoesNotExist, and inserting nodes through such a manager corrupted the tree. Tree operations now use an unfiltered tree manager bound to the proxy model, so they still return proxy instances.
   TreeManager.db_manager() now passes the database on to the manager that proxy and multi-table inheritance models delegate tree operations to.
   Tree writes (inserting, moving and deleting nodes, rebuild(), partial_rebuild(), build_tree_nodes()) now always see every row, even if the model's tree manager is a TreeManager subclass which filters get_queryset(). Previously, hidden nodes could lead to crashes or a corrupted tree, e.g. duplicate tree ids or child nodes left behind in the wrong tree. Positions for order_insertion_by now also take hidden siblings into account. Read methods such as get_children() still apply the filter.
VersionDeltaFile
1.24+4-4www/py-django-mptt/distinfo
1.32+2-2www/py-django-mptt/Makefile
+6-62 files

NetBSD/pkgsrc mSqsumY — sysutils/py-fsspec PLIST Makefile

   py-fsspec: updated to 2026.9.0

   2026.9.0

   Enhancements

   ia:// filesystem for files in Internet Archive items: an HTTPFileSystem reading from archive.org/download with credentials from ia configure's ia.ini
   Allow instance-local memory stores with global_store=False while preserving normal instance caching and the default shared store
   Add an adaptive readahead cache
   Implement created and modified for SFTPFileSystem
   Allow filesystem implementations to assign protocol per instance
   Delegate sizes and cat_ranges from DirFileSystem to the wrapped filesystem
   Delegate invalidate_cache, ukey and checksum from DirFileSystem to the wrapped filesystem
   Support negative offsets in TarFileSystem.cat_file
   Mirror readinto from the PyArrow stream onto ArrowFile
   Allow simplecache files to be removed by age using their modification times
   HTTP: retry transient failures (408/425/429/5xx, dropped connections, timeouts, truncated range bodies, a 416 inside the file) of cat_file, HTTPFile block reads and the size lookup behind open, controlled by the new retries, retry_wait, retry_statuses and retry_exceptions options

   Fixes

    [36 lines not shown]
VersionDeltaFile
1.30+4-4sysutils/py-fsspec/distinfo
1.31+3-3sysutils/py-fsspec/Makefile
1.12+4-1sysutils/py-fsspec/PLIST
+11-83 files

NetBSD/pkgsrc hBxefO5 — doc CHANGES-2026

   Updated textproc/py-breathe, textproc/py-jsonpatch
VersionDeltaFile
1.7399+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc xICkYu9 — textproc/py-jsonpatch Makefile distinfo

   py-jsonpatch: updated to 1.38

   1.38

   Document whole-document results and root replacement
   Preserve one-shot operation iterators during patch validation
   Clean temporary output after fdopen setup failure
   Extend CI: lint, package build, docs build, PyPy, Windows/macOS
VersionDeltaFile
1.3+4-4textproc/py-jsonpatch/distinfo
1.3+2-2textproc/py-jsonpatch/Makefile
+6-62 files

NetBSD/pkgsrc QeqdhxL — textproc/py-breathe distinfo Makefile

   py-breathe: updated to 5.1.0

   Breathe v5.1.0

   - Dropped support for Sphinx 6.2, 7.0 & 7.1 and added python 3.14
   - Strip leading spaces when making initializer
   - Fix duplicate constexpr qualifiers on constructors
   - Handle C++11 extended friend declarations
   - Keep template arguments in class template specialization names
VersionDeltaFile
1.5+10-16textproc/py-breathe/PLIST
1.17+4-6textproc/py-breathe/Makefile
1.8+4-4textproc/py-breathe/distinfo
+18-263 files

NetBSD/pkgsrc OYYZZQo — doc CHANGES-2026

   Updated math/py-quadprog, print/py-pydyf
VersionDeltaFile
1.7398+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc a6BKiU7 — print/py-pydyf distinfo Makefile

   py-pydyf: updated to 0.13.0

   0.13.0

   Dependencies:

   * Python 3.15 is supported and tested
   * Python 3.11+ is now needed, Python 3.10 is not supported anymore

   New features:

   * Add a new "name" function to safely create name objects

   Bug fixes:

   * Test both compressed and uncompressed PDF generation
VersionDeltaFile
1.10+4-4print/py-pydyf/distinfo
1.15+4-4print/py-pydyf/Makefile
+8-82 files

NetBSD/pkgsrc aJOp9yd — math/py-quadprog distinfo Makefile

   py-quadprog: updated to 0.1.14

   0.1.14

   python 3.14 and 3.15 support, drop python <= 3.10, build ARM wheels
VersionDeltaFile
1.21+4-5math/py-quadprog/Makefile
1.11+4-4math/py-quadprog/distinfo
+8-92 files

NetBSD/pkgsrc AnZ7YDT — doc CHANGES-2026

   Updated time/py-time-machine, net/py-unearth
VersionDeltaFile
1.7397+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc 9l0dF5o — net/py-unearth distinfo Makefile

   py-unearth: updated to 0.19.0

   0.19.0

   Breaking Changes

   Drop support for Python 3.9

   Chores

   Update pdm.lock
   Migrate from httpx to httpx2
VersionDeltaFile
1.31+9-5net/py-unearth/Makefile
1.29+4-4net/py-unearth/distinfo
+13-92 files

NetBSD/pkgsrc WNC4jaE — time/py-time-machine Makefile distinfo

   py-time-machine: updated to 3.6.0

   3.6.0 (2026-10-25)

   Drop Python 3.10 support.
   Extend the Migration CLI to migrate freeze_time() class decorators on pytest-style test classes to the pytest.mark.time_machine() marker. Previously, such decorators were left unchanged and reported, since time_machine.travel() only supports unittest.TestCase subclasses as a class decorator, but they can be migrated to the marker instead.

   Extend the Migration CLI to migrate freeze_time() calls that pass the destination with the time_to_freeze keyword argument. The argument is made positional, or renamed to destination if it follows another kept keyword argument.
VersionDeltaFile
1.17+4-4time/py-time-machine/distinfo
1.19+2-2time/py-time-machine/Makefile
+6-62 files

NetBSD/pkgsrc ku4A9SY — doc CHANGES-2026

   Updated textproc/py-sphinx-autodoc-typehints, textproc/py-sphinx-automodapi, math/py-numba
VersionDeltaFile
1.7396+4-1doc/CHANGES-2026
+4-11 files

NetBSD/pkgsrc fpSyFl6 — math/py-numba Makefile distinfo

   py-numba: updated to 0.68.1

   0.68.1 (26 October 2026)

   This is a patch release of Numba that fixes two performance regressions
   (``np.sum`` and fancy indexing), aligns the accumulator dtypes of
   reductions with NumPy, and fixes caching of functions
   imported from a zip archive on Windows.
VersionDeltaFile
1.31+4-4math/py-numba/distinfo
1.44+3-3math/py-numba/Makefile
+7-72 files

NetBSD/pkgsrc psDwzrw — textproc/py-sphinx-automodapi distinfo Makefile

   py-sphinx-automodapi: updated to 0.22.1

   0.22.1 (2026-10-15)

   - Fixed a bug to avoid problem from target object ``__dict__``
     changing during iteration in ``generate_automodsumm_docs()``.
VersionDeltaFile
1.9+4-4textproc/py-sphinx-automodapi/distinfo
1.21+4-4textproc/py-sphinx-automodapi/Makefile
+8-82 files

NetBSD/pkgsrc Cxi4x8P — textproc/py-sphinx-autodoc-typehints distinfo Makefile

   py-sphinx-autodoc-typehints: updated to 3.17.4

   3.17.4 (2026-10-27)

   Fixed

   - Link each name in the type after an attribute, data or property name with the role its docstring field uses, so a
     ``type`` alias an inventory lists as data, such as ``numpy.typing.NDArray``, resolves through intersphinx


   3.17.3 (2026-10-27)

   Packaging

   - Publish categorized GitHub Release notes with PyPI and version-comparison links


   3.17.2 (2026-10-17)


    [4 lines not shown]
VersionDeltaFile
1.9+254-52textproc/py-sphinx-autodoc-typehints/PLIST
1.58+15-5textproc/py-sphinx-autodoc-typehints/Makefile
1.47+4-4textproc/py-sphinx-autodoc-typehints/distinfo
+273-613 files

NetBSD/pkgsrc lXkteen — doc CHANGES-2026

   Updated www/py-pylsqpack, www/py-aioquic
VersionDeltaFile
1.7395+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc ALTwag4 — www/py-aioquic distinfo PLIST

   py-aioquic: updated to 1.7.0

   1.7.0

   * Migrate clients to the server's preferred address, as :rfc:`9000` allows.

     .. note::

        If you drive :class:`~aioquic.quic.connection.QuicConnection` with your
        own I/O, you must send each datagram to the address returned alongside
        it by ``datagrams_to_send()``. That address may now differ from the one
        passed to ``connect()``, so a connected UDP socket or a tunnel with a
        single fixed destination no longer works.

   * Add :meth:`~aioquic.quic.connection.QuicConnection.get_peer_address`, which
     returns the address datagrams are currently sent to. It can change when
     either endpoint migrates.
   * Improve path validation and connection migration as :rfc:`9000` requires:


    [58 lines not shown]
VersionDeltaFile
1.10+4-5www/py-aioquic/Makefile
1.6+4-4www/py-aioquic/distinfo
1.5+4-4www/py-aioquic/PLIST
+12-133 files