libarchive: Avoid collision with LIBARCHIVE variable in makefile.
It was both the path to the .a file for DPADD, and the path to the
source directory. Can't be both, and the source directory is purely
local while the .a file is used in other makefiles, so let's call the
source directory LIBARCHIVEDIR instead.
Found while trying to diagnose:
PR lib/60560: libarchive tests are failing
grafana: update to 13.2.0
CVE-2026-17183
An authenticated organization user who can create or edit alert rules
in a folder can query a datasource for which they do not have
datasources:query permission.
Update lean4-git to lean4-4.33.1nb20260821
lean actial version 4.35.0-pre,
commit f6c7d68c7fc27e3b60585f30740c7d141d3c5b36, Release
While here, allow for lake to actually link under NetBSD.
grafana: update to 13.1.3
pkgsrc change:
This update disables support for sqlite as storage backend on most
platforms because grafana has switched to a sqlite driver that is
very difficult to support in a generic manner in pkgsrc.
(It needs transpiled code shipped by the upstream for every
MACHINE_PLATFORM.)
On such a platform you can use PostgreSQL instead.
Other major breaking changes since 11.x:
Angular plugin support is fully removed
Data source UID enforcement
Upgrading rewrites the whole annotation table; budget 2–3x its size
React 19. Update all plugins before upgrading, or they may break
Folders and dashboards migrate off legacy SQL tables on startup
grafana-cli and grafana-server are removed (use grafana cli / grafana server)
Image Renderer no longer supported as a plugin (run it as a separate service)
Dashboards migrate to schema v2 automatically when opened
rumdl: update to 0.2.58.
0.2.58
Added
wasm: load extends chains from embedder-supplied config files (e7c7d8f)
0.2.57
Fixed
MD013: let a sentence open with a number under require-sentence-capital (5060333)
lsp: keep a CRLF document's line endings through fixes and code actions (c88a7da)
py-json-logger: updated to 4.2.0
4.2.0
Changed
Logging a dict no longer modifies it. exc_info and stack_info were previously added to the caller's dict.
Move development dependencies from project.optional-dependencies.dev to [dependency-groups].dev (PEP 735).
Fixed
$ style formats now support unbraced $name fields, not just ${name}
py-flask-security: updated to 5.8.2
5.8.2
Fixes
- (:pr:`1265`) Fix for GHSA-f66q-9rf6-8795 - WebAuthn reauthentication freshness bypass. (tonghuaroot)
- (:issue:`1263`) :py:data:`SECURITY_CACHE_CONTROL` directives were added to every
application response instead of just responses from Flask-Security endpoints
as documented. (Ceirced)
- (:issue:`1212`) Newly introduced :py:meth:`.UserMixin.is_locked` logic is inverted.
- (:issue:`1244`) Fix login form remember me checkbox.
Backwards Compatibility Concerns
- The fix for the inverted `is_locked` logic will require any application using it
to invert their logic.
luanti: update to 5.17.0
Client / Audiovisuals
- Dropdowns now accept selection by (Mouse) Down -> Drag -> Release
- Formspecs no longer close when focusing the window
- Fix: Formspec model[] elements are again animated
- Implement basic gamepad support for in-game actions (not formspecs)
- Support multi-track animations (glTF models)
- Fixed an case where the held item stack (e.g. when dragging) size
was no longer displayed correctly
- The mouse cursor is no longer clamped to window bounds
- Shaders: Fix plants flickering when visual_scale > 1
- Chat: Pressing the Tab key now autocompletes to the next common
part of the player name
- The (main menu) progress bar now shows more media download details
- Formspec: Inventory slots and buttons now stay hovered on update
- Main menu: Mods are now sorted by their technical name (before:
directory name)
- Mostly fix the appearance of waving liquids (shader) below solid
[38 lines not shown]
