devel/ruby-simplecov: update to 1.3.0
pkgsrc changes:
* Add ALTERNATIVES.
* Install manpage with/without installation of ruby-manpages package.
1.3.0 (2026-09-12)
SimpleCov 1.3 raises the minimum Ruby to 3.3, brings the coverage directives
to ERB, Haml, and Slim templates, teaches simplecov patch and simplecov
uncovered to annotate CI hosts natively, and settles what the report says
about files and groups that hold nothing.
Highlights
* Ruby 3.2 is no longer supported. The minimum is Ruby 3.3, which bundles
Prism, so the static coverage extractor stops probing for it and the
[55 lines not shown]
firefox153: update to 153.3
Mozilla Foundation Security Advisory 2026-93
Security Vulnerabilities fixed in Firefox ESR 153.3
Announced
September 15, 2026
Impact
high
Products
Firefox ESR
Fixed in
Firefox ESR 153.3
Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.
#CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component
Reporter
[689 lines not shown]
firefox140: update to 140.16
Mozilla Foundation Security Advisory 2026-92
Security Vulnerabilities fixed in Firefox ESR 140.16
Announced
September 15, 2026
Impact
high
Products
Firefox ESR
Fixed in
Firefox ESR 140.16
Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.
#CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component
Reporter
[304 lines not shown]
tinygo: update to 0.42.0
- Support for Go 1.27 and LLVM 22
- Runtime panics (divide-by-zero, nil dereference, map and channel
failures) are now recoverable, so recover() works as expected
- Compiler generates type-specific hash and equal functions
- Many GC, scheduler, and timer fixes for more solid concurrent code
- Dynamic USB endpoint registration on RP2, SAMD21/51, and nRF52840
- Big ESP32 step forward: interrupts, ADC, flash XIP, and the new
ESP32-C6
- New targets: STM32H7, the Puya PY32F family, and UEFI
- New boards: ESP32-S3-BOX-3, M5Stack Stamp-S3A, and Pimoroni
Badger 2350
tzdata2netbsd - hg repo processing updates (mostly)
More updates to handle using mercurial as the repo, rather than cvs.
Mostly related to my gradual learning process of dealing with merges
and conflicts from the merge, correctly, using hg instead of cvs.
This also separated the merge from an attempt to update the sets list
at the same time (when an update is needed, which is rare), and (for
hg only) commit both in a single transaction, which would be ideal,
as if a rollback is needed, both parts need to be rolled back. But
it doesn't seem as if that is possible (or not without treating the
sets list as files to also be merged, which would have its own issues).
The only change here that affects usage when using a cvs repo, is that
the doc/3RDPARTY update now also updates the Date: field of the tz*
block, along with the Version (and if needed, Current-Version) field(s).
R-xts: update to 0.14.3.
Fixes build with current R.
xts 0.14.3 (2026-09-26)
Fix deprecated special names in structure() calls. (#440)
Fix time-of-day subsetting (e.g. x["T18:00/"]) to create
fractional seconds as decimal fractions instead of raw integers.
The previous behavior could return incorrect results, and error
on R-devel (r90486). (#441)
xts 0.14.2 (2026-02-27)
Removed ATTRIB() and SET_ATTRIB() from C code, since they are
not part of the public R API. (#436)
Fixed crash when endpoints() was called on an xts object with
[10 lines not shown]
R-Rcpp: update to 1.1.2.
Committed during the freeze since it should help with the execinfo
problems on *BSD.
Changes in Rcpp release version 1.1.2 (2026-07-01)
Changes in Rcpp API:
Use of execinfo.h is again conditional to avoid build complexity (Dirk in #1445 addressing #1442)
An internal state component for Datetime is now int (Dirk in #1448 and #1449 fixing #1447)
Three new (in R 4.6.0) attribute accessors are used conditionally (Dirk in #1450 closing #1432)
An UBSAN error in the Sugar-based NA comparison has been corrected (Iñaki in #1453 fixing #1452)
Treatment of Inf outside of integer range in Sugar function has been corrected (Iñaki in #1458 fixing #1455)
[39 lines not shown]
