flux2: Update to 2.9.3
Changes:
Flux v2.9.0 is a feature release. Users are encouraged to upgrade for
the best experience.
For a compressive overview of new features and API changes included in
this release, please refer to the Announcing Flux 2.9 GA blog post:
<https://fluxcd.io/blog/2026/06/flux-v2.9.0/>
Overview of the new features:
- Flux CLI Plugin System with the Mirror and Schema plugins (flux plugin)
- Server-Side Apply field ignore rules for fine-grained drift control (Kustomization)
- SOPS decryption with the Age post-quantum cipher (Kustomization)
- Kubernetes Workload Identity authentication for OpenBao and Vault (Kustomization)
- Helm post-render strategies, including chart hooks support (HelmRelease)
- Literal mode for Helm values references mirroring helm --set-literal (HelmRelease)
- Allow empty kind in CEL health check expressions (Kustomization, HelmRelease)
[8 lines not shown]
dnscontrol: Update to 4.44.1
Release v4.44.1 highlights:
NAMECHEAP: Now supports SRV records, thanks to @willpower232!
"dnscontrol init" now supports NS1, thanks to @costasd!
Many performance optimizations in the CICD pipeline.
miniflux: Update to 2.3.3
New features
Feed and entry language detection
Miniflux now reads the language declared by feeds and entries and stores it on both feeds and entries.
Supported sources are the RSS <language> and <dc:language> elements, xml:lang on Atom 1.0 and 0.3 documents, dc:language in RDF/RSS 1.0 feeds, and the language field of JSON Feed.
Entries without their own language now inherit the language declared by the feed.
Article titles and content are rendered with a matching lang attribute, which improves screen reader pronunciation, hyphenation, and browser translation prompts.
The language field is exposed through the API and the Go client for both feeds and entries.
Other additions
Feed discovery now finds the feeds offered by GitHub pages.
TLS certificates are reloaded when the process receives SIGHUP, so renewed certificates can be picked up without a restart.
The browser favicon is now served as SVG for a sharper icon on high-density displays.
Compressed responses are negotiated with a much more standard-compliant Accept-Encoding parser, including quality values and wildcards.
Performance improvements
Long entry and feed lists render noticeably faster: off-screen rows no longer cost layout and paint work on initial render.
Reduced memory allocations when stripping and truncating HTML, roughly halving the time spent on tag-heavy content.
[36 lines not shown]
lean4: fix alloca warning (during package build, and 'lake build')
The -std=gnu99 didn't help because alloca() was used in a C++ file.
Replace calls to alloca with __builtin_alloca instead, and get rid of
the forced gnu99.
Bump PKGREVISION.
fluidsynth: updated to 2.5.7
2.5.7
Fix a bug where DLS files that contain a PGAL chunk may sound incorrectly
Fix a build issue with MSVC
Fix DLS sample invalidation logic to avoid possible use of uninitialized memory
appstream: updated to 1.1.5
1.1.5
Features:
* sysinfo: Implement display size detection on macOS
Bugfixes:
* qt: Add back wrong const Component::addBundle for ABI compatibility
* qt: Use strndup for C string-list conversion
* pool: Fix bidirectional wildcard search for modalias provides
freecad: Update to 1.1.3
FreeCAD 1.1.3 is a maintenance release in the 1.1.x series. It includes several
security fixes addressing code-execution and other file-handling
vulnerabilities that can be triggered by opening a maliciously crafted FCStd
file. All previously-released versions are affected by one or more of these
issues, so we strongly recommend that all users upgrade, especially anyone who
opens FreeCAD files from untrusted or unknown sources.
What happened to 1.1.2?
Shortly after the release of 1.1.2 we discovered that a bugfix that had been
intended for inclusion in the next release had been inadvertently omitted. It
is not a security bug, so if you've already installed 1.1.2 there is no urgent
need to update to 1.1.3, though the bug is an annoyance (repeated warnings of a
version update when saving a file) so you will likely want to upgrade sooner
rather than later.
What's Changed
[112 lines not shown]
Coin: Update to 4.0.10
Coin 4.0.10
This is a bugfix release.
- Fail gracefully on recursive PROTO definitions.
- Replaced fixed length buffers in parsing functions.
- Increase robustness against malformed SoPath input.
- Reject input with invalid IS mappings.
- Fixed some vulnerabilities reported in GHSA-hcqw-f3m9-mq7p
Coin 4.0.9
This is a bugfix release.
- Skip negative indices in SoIndexedPointSet vertex arrays
- Fix cc_string inline buffer size calculation in string.h
- Remove outdated build files.
[22 lines not shown]
