py-ipython: updated to 9.17.0
IPython 9.17
Summary
This release is mostly about how long IPython takes to start. Two further
passes over the startup path -- deferring imports to their use sites, keeping
pygments' plugin machinery out of it, and declaring IPython's own magics
lazily -- together cut a large fraction off ``import IPython`` and off getting
to a prompt, without any change in behaviour. Alongside that: a new
``IPYTHON_KITTY_GRAPHICS`` environment variable to override terminal graphics
detection, ``as`` aliasing in :magic:`aimport`, and two input- and
output-handling fixes.
There are no backwards-incompatible changes in this release.
sys/param.h: Welcome to 11.99.8, courtsey of struct proc reordering.
PR kern/60653: posix_spawn(3) causes incorrect stack base information
XXX kernel ABI revbump -- NOT FOR PULLUP
faac: updated to 1.50
1.50
Build quantize_sse library with hidden symbols
Don't call exit() from the library
Define some more default_options in Meson build
Fix some warnings in frontend/maingui.c
Default to buildtype=release in Meson build
Initialize data variable in huffcode()
Remove the faulty HAVE_STRCASECMP check and other pointless header checks
CI: Let Meson build set CFLAGS
Disallow PNS in MPEG-2 mode to match spec
frontend: Change default to MPEG-4 as MPEG-2 is obsolete
Add max-channels option to change MAX_CHANNELS from 64
Fix PNS to stay on in JOINT_MS for low-bitrate accuracy
Replace redundant cpe, sce, and lfe boolean flags in ChannelInfo with an enum
Reduce MAX_CHANNELS to 8 for ADTS compliance
tns: Prevent division-by-zero or instability on highly correlated signals
[7 lines not shown]
struct proc: Put p_stackbase in the [p_startcopy,p_endcopy) range.
It is inherited by the child because the child has exactly the same
memory layout as the parent.
Cleanup after:
PR kern/60653: posix_spawn(3) causes incorrect stack base information
XXX kernel ABI revbump -- NOT FOR PULLUP
fork(2), vfork(2): Copy the parent's stack base pointer to the child.
Don't just leak whatever random stack pointer some recycled struct
proc had!
TBD: Move p_stackbase in struct proc so this is covered by the memcpy
above, in a separate commit so we can pull this one up without any
change to the layout of struct proc.
PR kern/60653: posix_spawn(3) causes incorrect stack base information
execve(2): Set p_stackbase in execve_runproc, not execve_loadvm.
execve_loadvm must not have side effects on the running process for
two reasons:
1. If execve(2) fails, it has to be able to back out and return to
the calling process. For example, the shell will execute the
first of a series of candidate paths that works when it searches
$PATH, and if one fails, it has to be able to move on to try the
next.
2. The caller may be the _parent_ process -- this is the case when
we're in posix_spawn.
Instead, it must be set in execve_runproc, after we're committed to
the exec and can't back out -- and we're definitely operating on the
process that is executing a new image, not on its parent!
p_stackbase and its assignment in exec_setup_stack, a subroutine of
[18 lines not shown]
t_signal_and_sp: Link against libpthread unconditionally now.
Required by new test cases added for:
PR kern/60653: posix_spawn(3) causes incorrect stack base information
inputmethod/anthy-unicode-elisp: import anthy-unicode-elisp-1.0.0.20260213
Provided by Showta Ishizaki in PR 60647.
Emacs lisp files for anthy-unicode, the maintained Unicode fork of anthy.
They install as anthy-unicode.el and friends and talk to
anthy-agent-unicode, so they do not collide with inputmethod/anthy-elisp
and both can be installed at once.
inputmethod/anthy-unicode: import anthy-unicode-1.0.0.20260213
Provided by Showta Ishizaki in PR 60647.
Anthy is a Japanese kana-kanji conversion engine. anthy-unicode is the
maintained fork of anthy 9100h, whose last release was in 2009. It moves
the internal encoding from EUC-JP to UTF-8, from which it takes its name,
and installs everything under -unicode names so that it can be used
alongside the original.
py-types-docutils: updated to 0.23.0.20260827
0.23.0.20260827
* Bump to 0.23
* Type `Publisher` attributes and the source/destination classes in `docutils.core`
py-jsonrpclib-pelix: updated to 1.2.0
1.2.0
Security
Class translation (jsonclass) no longer imports arbitrary classes by
default. A __jsonclass__ payload could previously make a server or client
instantiate any importable class with attacker-controlled arguments, when
use_jsonclass was enabled (the default) and no class registry was set.
Dynamic import is now opt-in through the new Config.allow_dynamic_classes
flag (default False); unregistered classes are refused with a
TranslationError. Restrict what may be instantiated with Config.classes,
and only enable class translation between endpoints you trust.
This changes the default behaviour: classes must now be declared with
config.classes.add() on both ends, including the enumerations and the
Pydantic models which used to be rebuilt implicitly. Only decimal.Decimal
is always accepted, as a value type the library serializes itself. Setting
[131 lines not shown]
py-ipykernel: updated to 7.3.0
7.3.0
New features added
- feat(displayhook): add register_hook/unregister_hook to ZMQShellDisplayHook
- Support ZMQ Curve for transport encryption
Enhancements made
- Support new iPython system_raise_on_error flag in ZMQInteractiveShell
- pass cell_meta from do_execute to run_cell
Bugs fixed
- Fix broken IPython Reference URL in help_links
- Mark cell execution as failing when formatter errors out
- Fix ENOTSOCK traceback when iopub socket closes during shutdown
- Bugfix: Ensure that we take a copy of the sys.modules before iterating over it
py-nest-asyncio2: added version 1.7.2
nest-asyncio2 is a fork of the unmaintained nest_asyncio, with the following changes:
Support setting run_close_loop to avoid leaked event loop.
Python 3.12 support
loop_factory parameter support
Python 3.14 support
Fix broken asyncio.current_task() and others
Fix DeprecationWarning: 'asyncio.get_event_loop_policy' is deprecated and slated for removal in Python 3.16
To avoid potential bugs, apply() will warn if asyncio is already patched by nest_asyncio on Python 3.12+.
You can also set error_on_mispatched=True to turn the warning into a RuntimeError, regardless of the Python version.
There is no behavior change on Python < 3.12.
All interfaces are kept as they are. To migrate, you just need to change the package and module name to nest_asyncio2.
py-jwcrypto: updated to 1.5.9
1.5.9
Add ML-DSA post-quantum signature support (RFC 9964)
Support fully specified algorithms per RFC 9864
Skip unknown kty in JWKSet import per RFC 7517 §5
Reject non-empty encrypted key in bare ECDH-ES
Limit dot splits during JWE and JWS parsing
py-starlette: updated to 1.6.0
1.6.0 (August 8, 2026)
Added
* Add `max_body_size` to `Starlette` and route classes
* Expose `http.response.debug` information via response extensions
