Update devel/objfw to 1.5.2
ObjFW 1.5.1 -> ObjFW 1.5.2, 2026-05-08
* Makes ObjFWConfig.cmake work on MSYS2.
* ObjFWConfig.cmake now also adds the flags for OBJCXX.
* OFFile no longer uses O_EXLOCK for "x" modes.
* Fixes the `OF_AMD64` define on Windows.
* ofhttp now removes the terminal's progress indicator on abort.
py-biopython: update to 1.87.
30 March 2026: Biopython 1.87
=============================
Migrated from ``setup.py`` to ``pyproject.toml`` for packaging configuration.
Addressed security issue CVE-2025-68463 in ``Bio.Entrez.Parser`` if parsing
untrusted files.
Additionally, a number of small bugs and typos have been fixed with additions
to the test suite and type annotations.
28 October 2025: Biopython 1.86
===============================
``Bio.SearchIO`` now supports parsing the tabular and plain text output of
`Infernal <http://eddylab.org/infernal/>` (v1.0.0+) RNA search tool. The
format names are ``infernal-tab`` and ``infernal-text``.
[37 lines not shown]
libgpg-error: updated to 1.61
Noteworthy changes in version 1.61 (2026-05-07)
* Fix possible stack overflow in es_printf for %.100f format.
* Fix out-of-bounds read in vfnameconcat.
* Add cross compile support for wasm*-*-emscripten target.
* Update Japanese and Polish translations.
libksba: updated to 1.7.0
Noteworthy changes in version 1.7.0 (2026-05-07)
* Add support for building AuthEnvelopedData.
* New function ksba_cms_add_attribute.
* Fix silent truncation of 64 bit length fields.
* Fix incorrect overflow guard condition in _ksba_ber_read_tl.
* Interface changes relative to the 1.6.0 release:
ksba_cms_add_attribute NEW.
joker: update to 1.7.2
- Support osc8 in `joker.pprint/print-table`.
- Improve `joker.better-cond` macros to avoid "redundant do" linter
warnings.
- Add SSE support to `joker.http`.
- Add filesystem watch API (`joker.os/watch`).
- Add `joker.time/parse-in-timezone` function.
Add lxqt-clip
See https://github.com/lxqt/lxqt/discussions/2372#discussioncomment-16851376
qlipper is now being integrated into LXQt and has been renamed to lxqt-clip.
There is no release, yet. Makefile can be simplified once there's a release.
Build a package from the latest git-hash for now.
meta-pkgs/netbsd-www: Bump libxslt dependency.
This pulls in a newer libxml2 that produces <meta charset="utf-8">
instead of <meta http-equiv="Content-Type" content="text/html;
charset=utf-8">, so that www@ committers don't ping-pong between the
new forms as long as they have up-to-date netbsd-www.
comms/picocom: update to version 3.1
Changes in version 3.1:
* Added the --raise-dtr and --raise-rts options, for symmetry with
--lower-dtr and --lower-rts (see manual page for details)
* Added custom baudrate support for FreeBSD, OpenBSD, and DragonflyBSD
(in additions to Linux and MacOS that were already supported)
* Better build support for custom baudrates. Now custom baudrate support
is enabled by default for some systems (for Linux, kernels > 2.6.0,
x86, and x86_64, for Intel Macs with macOS / OSX >= 10.4, and for some
BDSs).
You can always explicitly enable custom baudrate support for other
systems (see Makefile) and you can explicitly disable it, even for the
systems it is automatically enabled for (again, see Makefile).
To see if custom baudrate support is enabled in your build, run
picocom with the --help command-line option
Changes in version 3.0:
[48 lines not shown]
Fix dumpfs to allow NAME=wedge-label on command line
This is a follow-on from the PR bin/59957 changes, and is being
included with that PR so it is easier to locate all the tools that
have been changed this way, so they can all be updated again once
the new code is moved to libutil where it belongs, and out of src/sbin/fsck.
When handling of NAME=whatever was added to dumpfs, it was done
in a way where it could only work when dumpfs was used as
dumpfs mount-point
and /etc/fsck contained
NAME=whatever mount-point [rest of fstab entry]
That covers the vast majority of actual uses, but a simple
dumpfs NAME=whatever
[5 lines not shown]
firefox140: update to 140.10.2
Mozilla Foundation Security Advisory 2026-41
Security Vulnerabilities fixed in Firefox ESR 140.10.2
Announced
May 7, 2026
Impact
high
Products
Firefox ESR
Fixed in
Firefox ESR 140.10.2
#CVE-2026-8090: Use-after-free in the DOM: Networking component
Reporter
Kevin Brosnan
[31 lines not shown]
