Revert previous (x86/ALL: Enable nvmm(4)).
- i386 has no nvmm support (HAVE_NVMM=no) and fails with incomplete type.
- amd64 cannot have both nvmm and KASAN and fails pmap_ept_* functions
as KASAN clears __HAVE_DIRECT_MAP and therefore pmap_ept_* gets excluded.
Both kernels compile again.
Ok: Taylor R Campbell
py-braintree: updated to 4.48.0
4.48.0
Add Transaction.reverse() to automatically void or fully refund a transaction
Add previous_mastercard_transaction_link_id to external_vault on Transaction and CreditCardVerification.create
webkit-gtk*: update to 2.54.2
What's new in the WebKitGTK 2.54.2 release?
===========================================
- Fix performance when compositing layers with backdrop filters.
- Fix prewarmed web process leak when they are rejected due to sandboxing.
- Release suspended pages and idle processes on memory pressure.
- Bind /dev/dxg in the bubblewrap sandbox.
- Notify input method about cursor area or surrounding text after a re-focus.
- Clear input method composition underlines before adding new ones.
- Do not enable input method for read-only text fields.
- Update the input method state when readonly changes on the focused element.
- Add User-Agent quirk for OrangeTV.
- Fix several crashes and rendering issues.
btop: updated to 1.4.8
1.4.8
themes: load/save by name if possible
Fix atomic issues and data races in btop
fix: gate Apple Silicon GPU support to unbreak intel Mac builds
AMD APU/iGPU sysfs backend for GPU monitoring
fix: use ISO 8601 format for log timestamps
Fix possible thread deadlocks and power-event-based false stall detections
fix: defer SIGWINCH resize handling
Fix btop with amd gpu on rocm 7 as in Ubuntu 26.04
Fix: Macos SIGABRT Crash during SMB TimeMachine Backups
fix: avoid macOS swap disk crash
Fix -/+ key binding
fix: ignore missing config dir if config file is present
fix: make background consistent in the Terminal is too small dialogue
lowdown: updated to 3.2.1
3.2.1
Add table wrapping in -tterm mode, where long columns are broken at word
boundaries when exceeding the document width. This uses a simple algorithm at
the cost of an extra rendering step. Can be disabled with --term-no-tablewrap.
Also add --term-no-style, and have --term-no-ansi instead fall back to using
backspace encoding instead of ANSI.
prometheus: update to 3.13.5.
[SECURITY] Container images: Update CA certificates to distrust
"emSign ECC Root CA - G3" and "Comodo AAA Services root" following
the compromise of eMudhra intermediate CA private keys.
[SECURITY] Build with Go 1.27.3 to fix vulnerabilities in net/http,
net/textproto, crypto/tls and html/template.
[SECURITY] Bump golang.org/x/net to v0.60.0 to fix HTTP/2
vulnerabilities (GO-2026-6603, GO-2026-6610, GO-2026-6611,
GO-2026-6612, GO-2026-6617).
shuck: update to 0.2.7.
0.2.7
Bug Fixes
server: honor lint.source-paths (#1341) (4646189)
Documentation
refresh AGENTS.md and README to match the workspace (#1338) (f5e26ef)
Refactor
config: share settings resolution across CLI, LSP, and WASM (#1340) (f5449cf)
0.2.6
[29 lines not shown]
rspamd: update to 4.2.3.
4.2.3: 21 Oct 2026
** Incompatible changes **
* [Conf] phishing: Disable phishtank.rspamd.com by default (the zone no longer carries data)
* [Feature] rbl: Merge duplicate DNS queries from several checks into one request and one symbol insertion (a rule now scores once per matched value; set merge_checks = false to keep one insertion per check)
* [Fix] rbl: Fix the inverted dkim_domainonly test under dkim_match_from (eSLDs were compared when dkim_domainonly was off)
** Features **
* [Feature] force_actions: Promote rules that depend on composites to postfilters
* [Feature] force_actions: Add a priority setting to arbitrate between matching rules, shown as a priority:N symbol option
* [Feature] lua_task: Return the action name instead of its type from has_pre_result, plus its flags
* [Feature] metadata_exporter: Add unix_time to general metadata
** Bug fixes **
* [Fix] arc: Do not trust ARC forwarders whose seal failed verification (a whitelisted d= with a broken seal gave ARC_ALLOW_TRUSTED and its AAR could lower DMARC)
* [Fix] arc: Require exactly one ARC-Authentication-Results per instance and wait for all seal checks before publishing results
* [Fix] dkim: Report a key request that cannot be scheduled as a failure (ARC chains with such a seal published no result)
[26 lines not shown]
snmp_exporter: update to 0.31.0.
## 0.31.0 / 2026-10-25
BREAKING CHANGES:
Regenerating snmp.yml with the generator now maps enum lookup columns to
human-readable string labels (e.g. `"ioMemory"` instead of `"2"`) by default.
Dashboards, alerts, or recording rules that match on numeric enum label values
may need updating. Opt out per metric/lookup with `type: gauge`.
The generator now drops tables whose index type cannot be rendered as a label
(e.g. DateAndTime, Bits) with a warning, and fails when a chained lookup
promotes such a type to an index. Previously these produced configs that
crashed the exporter on scrape.
Building from source now requires Go 1.26 or newer.
* [FEATURE] Add DISPLAY-HINT support for SNMP OctetString formatting #1549
[49 lines not shown]
py-starlette: updated to 1.10.0
1.10.0 (October 24, 2026)
Changed
* Compare multidicts such as `FormData` and `QueryParams` by key while keeping the order of values under a repeated key, so `FormData` with repeated uploads no longer raises `TypeError`. `QueryParams("a=1&a=2")` and `QueryParams("a=2&a=1")` are no longer equal
* Build URL-encoded form fields in the parser callbacks, lowering memory and CPU usage for forms with many fields
* Compare `Match` members by identity during routing
Deprecated
* Deprecate `starlette.formparsers.FormMessage`, which is no longer used
Fixed
* Parse the last URL-encoded form field when the request stream ends without an empty chunk
* Keep path parameter values that look like another placeholder in `url_path_for()`
* Default omitted `http.response.start` headers in `BaseHTTPMiddleware`, `GZipMiddleware` and `SessionMiddleware` instead of raising `KeyError`
[5 lines not shown]
py-pbs-installer: updated to 2026.10.25
2026.10.25
Version metadata is now stored in versions.json instead of a generated Python module.
New base_url parameter for get_download_link() / install() (and PBS_INSTALLER_BASE_URL env var) to download from a mirror.
Fix free-threaded builds shadowing GIL builds in the version index: GIL CPython 3.13.12+ / 3.14.3+ were missing entirely, and older GIL versions lacked full (--build-dir) builds.
