atto(1): ncurses (libgnumenu) compatibility fixes
Not super important for us (other than possibly improving the
correctness of the menu code), but people are already asking for a
portable version.
Touch the underlying window of popup menus so that they get drawn
properly.
Ensure that the previous menu is erased when switching to a new one.
rumdl: Update to version 0.3.2
Fixed
Upgrade pulldown-cmark to fix exponential parser event growth and duplicate
diagnostics after empty wikilink labels (RUSTSEC-2026-0414), and upgrade Tokio
to address its I/O safety advisory (RUSTSEC-2026-0386). Release publication now
requires a fresh dependency security audit, including during recovery runs.
MD087 recognizes inline suppression of heading-capitalization diagnostics,
avoiding false unused-disable warnings (#973).
MD022 enforces configured spacing below headings before lists and code fences,
including when MD031 or MD032 is disabled. Overlapping spacing fixes insert
the required blank lines only once (#971).
MD067 can safely reorder complete footnote definitions to match their first
references. Reordering is atomic, preserves surrounding content and directive
scope, and leaves ambiguous Markdown or MDX cases report-only (#969).
[12 lines not shown]
ndp-proxy-go: Add version 1.1.1
IPv6 Neighbor Discovery Protocol (NDP) Proxy
Key Features
Multi-Segment Support - Supports one upstream and multiple
downstream interfaces.
NDP Proxying - Relays Neighbor Solicitation and Neighbor Advertisement
messages between interfaces for transparent address resolution
across segments. Responds locally for router and client addresses.
DAD Proxying - Forwards DAD probes between interfaces and responds
immediately when address conflicts are detected in cache.
RA Proxying - Forwards Router Solicitations and unicast/multicast Router
Advertisements to enable SLAAC autoconfiguration of clients. Forwarded RAs
carry the RFC 4389 Proxy (P) flag. An incoming P flag is logged in debug
mode but does not alter forwarding, allowing proxies to be chained while
per-host learning directs traffic.
Dynamic Prefix Learning - Learns valid prefixes from Router Advertisements
and expires them automatically. Handles temporary RFC 4941 addresses and
[27 lines not shown]
security/libmldsa and security/mldsa: update from version 20260909 to 20261029
Bring over changes from development branch:
+ calculate sha3 512 digests using openssl's EVP, rather than OQS's one
+ add Makefile templates for mldsa and mlsignify, and update the
configure script to fill them in
+ bump version number to 20261029
and
+ add a configure script
+ add a Makefile.libtool.in makefile template for libtool
+ Bump version to 20261028
pkgsrc changes:
+ use the pkgsrc liboqs as a prereq
+ add a buildlink3.mk file for libmldsa
Update to 2.5.0
---------------
Version 2.5.0 (26 November 2017)
Bugs fixed:
Handle non-ASCII, non-UTF8 filenames in .cvsignore files.
ExternalBlobGenerator: Don't fail if no revisions are needed for a file.
Fix the handling of symbol-matching regexps that include |.
Handle excluded paths under Attic directories, too.
cvs2git: fix logging in process_post_commit().
Prefer to break internal cycles at the largest timestamp gaps.
Don't try to delete a supposed "revision 1.1" if it has a predecessor.
Improvements and output changes:
Various small documentation fixes and improvements.
Make cvs2xxx runnable under PyPy.
Avoid some allusions to Subversion when converting to another VCS.
Use tempfile.mkdtemp() to choose the location for temporary files.
[42 lines not shown]
sbcl: update to 2.6.10
* minor incompatible change: testing for float equality using `=` is
now a quiet operation, not signalling when given NaNs as input.
* enhancement: Unicode support has been updated to support version
18.0.0 of the Unicode standard, including support for new scripts
and additional characters, refinements to segmentation algorithms
and a number of fixes for bugs uncovered along the way:
** minor incompatible change: SB-UNICODE:LINE-BREAK-CLASS no longer
accepts a :RESOLVE keyword argument.
** enhancement: the implementation of line-breaking rules for
numbers now implements the full number-like state machine rather
than the previous table-based approximation.
** enhancement: UTS10-style collation through SB-UNICODE:UNICODE<
and similar functions now supports the use of #\uFFFE as a field
separator and #\uFFFF as an upper bound.
** bug fix: the set of characters considered of type Close for
sentence breaking no longer includes Other Punctuation.
** bug fix: in sentence breaking, do not attach a CR not followed
[88 lines not shown]
py-iniparse: updated to 0.5.2
0.5.2
fix: Update all files for release 0.5.1
chore[ci]: Added Github action for regular testing package
Avoid the multiprocessing forkserver method
feat(test): Add traceability requirements
ci: bump actions/checkout from 4 to 5
Fixed a small test error
ci: bump actions/checkout from 5 to 6
fix: Replace get_nowait() with get(timeout=5) in multiprocessing test
Fix spelling mistakes in docstrings and tests
ci: bump actions/checkout from 6 to 7
Make _compat_skip_empty_lines a per-instance attribute
config: raise NotImplementedError from abstract ConfigNamespace methods
tests: do not depend on CPython's 'test' package
utils: make tidy() also clean up the first section
fix: Update all files for release 0.5.2
streamlink: updated to 8.6.3
streamlink 8.6.3 (2026-10-29)
- SECURITY: new minor release primarily for Streamlink's Windows / Linux AppImages builds, with `brotli 1.2.1` (via uv.lock) ([`CVE-2026-111497`](https://nvd.nist.gov/vuln/detail/CVE-2026-111497))
- Fixed: `--retry-streams` and `--retry-max` in external/continuous HTTP output mode when re-fetching
- Build: bumped `pycryptodome` version requirements to `>=3.4.3,<5`
- Tests: fixed race-conditions in HLS tests
Pull up the following, requested by kre in ticket #565:
external/public-domain/tz/dist/Makefile up to 1.8
external/public-domain/tz/dist/NEWS up to 1.11
external/public-domain/tz/dist/TZDATA_VERSION up to 1.49
external/public-domain/tz/dist/backzone up to 1.7
external/public-domain/tz/dist/leapseconds up to 1.13
external/public-domain/tz/dist/leapseconds.awk up to 1.1.1.16
external/public-domain/tz/dist/northamerica up to 1.10
external/public-domain/tz/dist/southamerica up to 1.7
external/public-domain/tz/dist/theory.html up to 1.9
external/public-domain/tz/dist/version up to 1.22
doc/3RDPARTY (manually edited)
Updated tzdata to version 2026f (using 2026fgtz)
acme.sh: update to 3.1.6
Changes since 3.1.4:
3.1.6:
- Release tags are signed from 3.1.6 on. The public key is allowed_signers
in this repository; see "Verify a Release" in the README.
- No functional change since 3.1.5.
3.1.5:
- Release tags are signed from 3.1.5 on. The public key is allowed_signers
in this repository; see "Verify a Release" in the README.
- New ACME_PACKAGED mode for distro-packaged installs: --install no longer
copies the script into LE_WORKING_DIR, and --upgrade, --install-online and the
auto-upgrade cron path defer to the system package manager
(#7135).
- Standalone mode listens on both IPv4 and IPv6 by default, and the port
check now works on the BSDs, macOS and Haiku.
- An explicit --days or --valid-to now outranks the ARI renewal window.
[16 lines not shown]
atto(1): For users who can't easily remember key bindings, add a menu
which is opened by pressing the escape key twice, and operated using
the cursor keys. This uses libedit, so is conditional on SMALLPROG
to still allow easy inclusion of a minimal editor in ramdisks and so
on.
As the copyright might reveal, I nicked some code from blymn@'s editor
from othersrc to implement the menu. Thanks!
XXX it should really be renamed to natto now, since this is totally
beyond the vision of the original atto.
