doc: Note pudate of mail/roundcube and related packages to 1.6.19
mail/roundcube
mail/roundcube-plugin-enigma
mail/roundcube-plugin-password
mail/roundcube-plugin-zipdownload
pulseaudio: fix excessive OSS playback latency on NetBSD
NetBSD audio(4) recalculates the track buffer geometry when
the sample format is changed. The module-oss currently sets
the requested fragment configuration before negotiating the
sample format, so the requested high-water mark is lost and
reset to the full track buffer.
With the 48 kHz 16-bit stereo format, this resulted in 65280-byte
output buffer (34 x 1920 byte fragments), corresponding to
~340 ms of playback latency (should be ~40 ms) on my environment.
Reapply the requested OSS fragment configuration after sample format
negotiation on NetBSD, both when initially opening and when resuming
the device.
Bump PKGREVISION.
mail/roundcube: update to 1.6.19
1.6.19 (2026-09-06)
* Fix PHP Warning: Undefined variable $tmp_command in
.../plugins/markasjunk/drivers/cmd_learn.php (#10294)
* Security: Fix CSS declaration smuggling via un-encoded ampersand emission
* Security: Fix CSS property injection via body background attribute
* Security: Fix email header injection via bare CR in the subject field
* Security: Fix email header injection via C-escape \r in the recipient
display name
* Security: Fix email header injection via identity's organization field
* Security: Fix zero-click stored XSS via TNEF MIME tag injection in the
[17 lines not shown]
wm/2bwm: update to 0.4
- fixwindow_without_cloning
- Added respect of transient for property
- make sure the reply cookie is valid
- Merge pull request #46 from netcrop/fixwindow_without_cloning
- Fix invalid write in transient feature
- stashed_change_wsitem
- Merge pull request #47 from netcrop/change_wsitem
- Merge pull request #49 from strikersh/patch-1
- Added sloppy-focus/click-to-focus toggle
- Don't center pointer on click when not in sloppy mode
- Added support for _NET_WM_DESKTOP
- On _NET_ACTIVE_WINDOW raise window to the top of the stack
- Merge pull request #50 from opFez/patch-1
- Fix for bug related to keymap variant changes
- Allow a single dock to always stay on top (might affect mod+r behavior)
- Fix behavior of badly configured client race-condition on Gtk4
- setupwin: fix possible memory leak
[26 lines not shown]
sysutils/tealdeer: update to 1.9.0
v1.9.0 (2026-08-24)
This release of tealdeer adds support for placeholder escaping and placeholder variants, and contains various improvements for configuring tealdeer.
Escaped placeholders are a special form of placeholders which are needed to render pages like docker compose correctly. Placeholder variants are a new feature of tldr pages that allows to specify both the short and long form of program flags in a tldr page. Tealdeer now parses these placeholders correctly and allows users to choose which variant should be displayed.
On MacOS, tealdeer now uses XDG directories by default. For backwards compatibility, if tealdeer configuration files or a page cache is already present at the previously used locations, they will still be used going forward. A side effect of this is that the directories used on Windows have changed. However, the new paths are more canonical, so there is no automatic migration for Windows users. Please use tldr --show-paths to move your configuration files to the new location.
In addition to relative paths, the config file now supports tilde expansion for file paths. Furthermore, users can now override any settings from the config file using the --override-config command line flag.
For details, please refer to the user documentation. Note that the user documentation has been moved from GitHub pages to our own domain. The new site allows you to select for which version of tealdeer you want to view the documentation.
Changes:
[added] Support for placeholder escaping (#414)
[added] Suggest trying different TLS backend when update fails (#465)
[added] Add builtin tldr tealdeer page (#472)
[added] Add display.indent config option (#471)
[12 lines not shown]
sysutils/mirador: update to 1.9.0
Release Notes
Added
Headlines are hyperlinks. In a terminal that renders OSC 8 links —
iTerm2, WezTerm, kitty, recent GNOME Terminal among them — a news headline
is now clickable and opens the story the way the terminal opens any link
(usually a modifier plus a click, since mirador holds the mouse). Nothing
changes anywhere else: the sequences occupy no cells, so a terminal
without support shows exactly the panel it always did, and o, y and
↵ are untouched. A feed's URL rides inside an escape sequence, so only
plain http(s) URLs made of RFC 3986 characters are linked — anything
else (a control byte smuggled through an entity, an off-web scheme) gets
no link rather than an escaped one.
Changed
quick-xml 0.41 → 0.42, which rebuilt its API around str instead of
[3 lines not shown]
sysutils/broot: update to 1.60.0
Major Feature: preview wrapping
By default, long lines in preview are now wrapped.
This impacts text previews, with or without syntactic coloring, unified diffs, and TTY previews
This can be toogled with :toggle_preview_wrap (shortcut :wrap), and wrap_previews: false in the conf disables it on start
Major Feature: git diff preview, and many git related enhancements
The libgit2 library has been replaced by gix. With this change, broot becomes pure Rust, which simplifies compilation (no C compiler needed anymore).
A unified diff preview is now the default preview of a file with a git change (modified, staged, added, renamed or in conflict) when git statuses are displayed. :preview_diff shows it for any file.
Best way to try: in a repo with changes, do br -dgg
tab and shift-tab navigate between git-interesting files and diff chunks just like for content search matches
ctrl-→ opens the file at the selected chunk, and ctrl-← brings you back to the diff
new skin entries: diff_added, diff_removed, diff_line_number
in detached HEAD state, the status line shows the short commit id instead of HEAD
git status: staged files are shown (A added, S staged modification, R renamed); new git_status_staged skin entry
[16 lines not shown]
news/eilmeldung: update to 1.8.1
1.8.1 - 2026-09-02
bugfixes
eilmeldung does not output mouse dis-/enable code anymore when starting in CLI mode (thanks @crandle for reporting)
statically import (copy) base16-schemes from tinted-theming (MIT license) instead of importing as a submodule
Release notes from 1.8.0
This release comes with two new features: your configuration file is now auto-reloaded while eilmeldung is running (see below) and...
...🎨🎨🎨 themes for everyone! 🎨🎨🎨
eilmeldung now supports Base16 Themes
all the Base16 themes Tinted Theming Project are directly available without any further configuration!
want to try it out? Press : and enter theme, a space and then press Tab to cycle through all available themes
Press enter to choose a theme.
found a nice theme? set the configuration option theme.base16_theme = "name-of-theme" to use the theme
[21 lines not shown]
net/xfr: update to 0.10.1
v0.10.1
What's Changed
fix(discover): clamp mDNS hostname to 63-byte DNS labels by @lance0 in #195
fix: server, tui, and transport reliability improvements post-#195 by @lance0 in #196
fix(tui): correct throughput reporting, sparkline bounds, and connection logging by @lance0 in #197
fix(tui): mark heavy loss without inverting the bar by @lance0 in #200
feat(quic): implement bitrate pacing for QUIC transport (LAN-1497) by @lance0 in #198
fix(tui): quiet the title, block-glyph progress bar, and 80-column footer by @lance0 in #201
docs: correct claims invalidated by the QUIC pacing and TUI work by @lance0 in #202
v0.10.0
What's Changed
build(deps): bump the rust-dependencies group with 4 updates by @dependabot[bot] in #164
build(deps): bump taiki-e/install-action from 2 to 2.85.5 by @dependabot[bot] in #163
perf(tui): skip redraws when frame state is unchanged by @lance0 in #172
[21 lines not shown]
mail/himalaya: update to 2.1.0
2.1.0 - 2026-08-16
Added
Added the pimdir storage backend, Himalaya over the local store the sync engine populates.
Reads build envelopes from the stored meta and report a body that is not local as "body not fetched".
A mailbox is named the way its server names it: the sync keys a collection <namespace>/<name>, so the collection imap/INBOX is the mailbox INBOX, and a name matching no collection is refused naming the ones the account holds.
The namespace is derived unless pimdir.namespace names it, and pimdir.account picks the account in a store several share.
Himalaya reads the store read-only, which takes no lock, so a sync in flight neither blocks it nor is blocked by it.
A write is staged as an action queued for the store's owner to apply and push, rather than written into the index: the owner's write path collects unreferenced objects, and running that beside a sync destroys the bodies it has streamed but not yet attached.
An appended body is written to the blob store before the action referencing it, which pins it.
Added back the email and display-name config fields, at the global and the account level (#721).
They fill the From header of messages compose, reply and forward when --from is not passed, and are also read as from and from-name, the spellings himalaya-tui writes.
Added back the signature and signature-delim config fields, at the global and the account level.
The composers append the signature when neither --signature nor --signature-file is passed, signature-delim defaulting to the RFC 3676 §4.3 "-- \n" and written verbatim.
Added in_reply_to to the shared envelope (#734).
A list of ids stripped of their angle brackets like message_id, riding the JSON output only, left empty by Microsoft Graph.
Added the shared message delete <ids> command (alias del).
[48 lines not shown]
graphics/matugen: update to 4.2.0
Added
add scheme-smart and smart mode to nixos module
smart scheme variant type and smart mode
add source_color_index to config (closes #289)
add cache for per template scheme types (#292)
Fixed
remove -D warnings from clippy CI step to unblock on pre-existing warnings
high-priority code quality improvements
change ordering for base16 accents from image (#286, #283)
Other
Merge pull request #311 from joaosreis/patch-1
Replace debug panic in template engine
[18 lines not shown]
audio/ncspot: update to 1.4.0
Added
Draw cover art directly in supported terminals using terminal image
protocols, falling back to block rendering when unsupported
Fixed
Close the Search screen with the Escape key
Stop discarding the Web API refresh token on every refresh, which caused
a new OAuth2 login to be required daily
What's Changed
chore(deps): bump the cargo group across 1 directory with 3 updates by @dependabot[bot] in #1825
chore(deps): bump the cargo group with 2 updates by @dependabot[bot] in #1828
chore(toolchain): update by @hrkfdn in #1826
chore(deps): bump regex from 1.12.3 to 1.12.4 in the cargo group by @dependabot[bot] in #1830
[15 lines not shown]
