py-filelock: update to 3.20.2.
Support Unix systems without O_NOFOLLOW by @mwilliamson in #463
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #464
py-astroid: update to 4.0.3.
Release date: 2026-01-03
Fix inference of IfExp (ternary expression) nodes to avoid prematurely narrowing
results in the face of inference ambiguity.
Closes #2899
Fix base class inference for dataclasses using the PEP 695 typing syntax.
Refs pylint-dev/pylint#10788
py-aiohttp: update to 3.13.3.
3.13.3 (2026-01-03)
===================
This release contains fixes for several vulnerabilities. It is advised to
upgrade as soon as possible.
Bug fixes
---------
- Fixed proxy authorization headers not being passed when reusing a connection, which caused 407 (Proxy authentication required) errors
- Fixed multipart reading failing when encountering an empty body part
- Fixed a case where the parser wasn't raising an exception for a websocket continuation frame when there was no initial frame in context.
Removals and backward incompatible breaking changes
---------------------------------------------------
[20 lines not shown]
strlcpy(3): convert the list of WARNINGs to .Bl
Use `-hang -width 0n` to make the bodies indented ever so slightly, by
the extra amount mdoc adds between the value specified by `-width` and
the body (digit-width).
This slightly alleviates the sensory overload from the big lumps of
bold at the start of these paragraphs. Em instead Sy might be another
additional tweak to consider.
If you don't like the result you can switch back to the old output by
just changing the list to `-inset`. Another alternative might be
`-ohang`. (Neither needs `-width`).
security/zoneminder: Add support for mysql vs MariaDB
Cherry-pick commits from https://github.com/ZoneMinder/zoneminder/pull/3914/
Because of other upstream problems, there are two problems with using
MariaDB, which can be mostly worked around. Leave hints in the
Makefile near the MariaDB option.
Hope that upstream addresses this soon.
Leave the default at mysql to make it easier for anyone starting out.
This has not been tested but is probably ok.
strlcpy(3): don't markup strlen() with .Fn
We don't want a function to stand out as much as the strlcpy/strlcat
this manpage is about, especially in short paragraphs that are already
packed with other kinds of emphasis (Sy, Em, Fa, ...).
py-gammu: updated to 3.2.4
3.2.4
* Compatibility with Python 3.10.
3.2.3
* Fixed uninitalized memory usage in DeleteSMS.
3.2.2
* Fixed metadata in published wheels.
* Avoid using some of deprecated Python APIs.
3.2.1
* Reintroduced 32-bit wheels for Windows.
[5 lines not shown]
gammu: updated to 1.42.0
1.42.0
* Fixed compilation on some non GNU systems.
* Localization updates.
* Improved CNMI command compatibility for AT module.
* Improved getting of network and manufacturer information in AT module.
* Improved compatibility with D-Link modems that need to power on.
* Dropped Python 3 compatibility from utility scripts.
* Fixed bug in deleting SMS messages.
pkg-vulnerabilities: add remaining old CVEs for packages starting with h
+ harfbuzz,
hdf5 (the ones with wildcards lkely not fixed and unclear if reported
upstream or not),
heimdal (according Debian only present in master branch, mark it as before
7.7.1 to be safe and keep track of it),
htmldoc, htop, hugin, hugo, hwloc, hyperscan