sysutils/mirador: update to 1.22.2
Release Notes
Changed
The manifest no longer sets homepage, which named the same URL as
repository. Cargo from Rust 1.100 warns about the pair
(cargo::redundant_homepage) on every build, which is how it was found:
by the NetBSD package building on a beta toolchain (#309). crates.io
still links the repository, and the release plan dist produces is
unchanged.
Security
webpki-roots 1.0.10, for RUSTSEC-2026-0381: 1.0.9 still trusted
emSign ECC Root CA - G3, through which certificate paths could pass
distrusted emSign intermediates whose private keys are now known. These
are the roots every fetch mirador makes is checked against. Reported by
@0323pin (#313).
[6 lines not shown]
wip/mesa: Fix NetBSD build with vulkan option
* vulkaninfo from graphics/vulkan-tools gets segfault.
* vkcube and vkcubepp work with lvp (software rendering).
py-hanko: updated to 0.38.0
0.38.0
New features and enhancements
Validation
Add :class:`~pyhanko.sign.validation.policy_decl.CertificateFetchingRule` to control AIA certificate fetching.
Miscellaneous
Resource-manage stream decoding: decoding now has a budget by default, both at the level of an individual stream and at the document level.
Support Brazilian PAdES variant
Bugs fixed
Only enter page tree nodes via their canonical path during differential analysis.
Two well-formedness checks on /Prev to prevent loops and parsing errors.
Pull up following revision(s) (requested by riastradh in ticket #1384):
external/bsd/file/dist/src/fsmagic.c: revision 1.19
external/bsd/file/include/config.h: revision 1.22
tests/dev/fss/t_fss.sh: revision 1.8
lib/libutil/stat_flags.c: revision 1.4
lib/libutil/stat_flags.c: revision 1.5
external/bsd/file/dist/configure.ac: revision 1.24
(all via patch)
string_to_flags(3): Support `snap' (SF_SNAPSHOT).
PR bin/60380: find(1) can't find snapshots
string_to_flags(3): Put `snap' under #ifdef SF_SNAPSHOT.
Same as in flags_to_string(3). Not really sure why, but let's keep it
consistent so there's only one question to ponder and not two.
[13 lines not shown]
Pull up following revision(s) (requested by riastradh in ticket #538):
external/bsd/file/dist/src/fsmagic.c: revision 1.19
external/bsd/file/include/config.h: revision 1.22
tests/dev/fss/t_fss.sh: revision 1.8
lib/libutil/stat_flags.c: revision 1.4
lib/libutil/stat_flags.c: revision 1.5
external/bsd/file/dist/configure.ac: revision 1.24
(all via patch)
string_to_flags(3): Support `snap' (SF_SNAPSHOT).
PR bin/60380: find(1) can't find snapshots
string_to_flags(3): Put `snap' under #ifdef SF_SNAPSHOT.
Same as in flags_to_string(3). Not really sure why, but let's keep it
consistent so there's only one question to ponder and not two.
[13 lines not shown]
Pull up following revision(s) (requested by riastradh in ticket #1380):
lib/libc/gen/pthread_atfork.c: revision 1.19
PR/59112: Martin Husemann: switch to using mmap instead of malloc
devel/forgejo-runner: import forgejo-runner-13.2.0 as devel/forgejo-runner
Daemon that connects to a Forgejo instance and runs jobs for continuous
integration. The installation and usage instructions are part of the
Forgejo documentation.
crush: Update to 0.98.2
Changelog
New!
cd5f15d: feat(openrouter): send app attribution headers and session_id for sticky routing (#4115) (@Lee-Si-Yoon)
a8a8ec8: feat: add a built-in keanu theme (#3955) (@andreynering)
78b6edb: feat: publish optional signed Packslip release manifests (#4085) (@jdx)
Fixed
20e73b4: fix(agent): ask every OAuth sign-in to sign in again on a 401 (@taciturnaxolotl)
02336b1: fix(agent): give sub-agents the renewed credential after a refresh (@taciturnaxolotl)
acbf1a7: fix(agent): prevent crash when parallel tool calls finish together (#4129) (@andreynering)
a299286: fix(agent): publish run-complete when a run fails during setup (@taciturnaxolotl)
ddf6f26: fix(auth): ask for a new sign-in whenever a provider rejects the credential (@taciturnaxolotl)
e660fd9: fix(auth): stop retrying a refresh token the provider already refused (@taciturnaxolotl)
510f6ea: fix(bash): stop finished jobs from using up the background job budget (#3869) (@taciturnaxolotl)
8fa35a0: fix(ci): remove duplicate permissions block that broke the release workflow (@taciturnaxolotl)
94f9364: fix(ci): scope workflow token permissions to least privilege (@taciturnaxolotl)
00560ce: fix(lint): stop gofumpt versions fighting over the session pager return (#4088) (@taciturnaxolotl)
b0f7811: fix(login): open the browser as a command so tests never launch it (#4071) (@taciturnaxolotl)
[37 lines not shown]
Pull up following revision(s) (requested by riastradh in ticket #1379):
lib/libc/arch/arm/misc/arm_initfini.c: revision 1.8
lib/libc/arch/arm/misc/arm_initfini.c: revision 1.9
lib/libc/arch/arm/misc/arm_initfini.c: revision 1.10
PR/59063: Martin Husemann: Avoid using malloc through sysctlbyname by doing
the sysctl name to mib translation directly. Thanks martin@ for testing!
use the latest version that does not abort on error.
don't abort, just fail.
Pull up following revision(s) (requested by riastradh in ticket #1378):
external/bsd/nvi/dist/regex/regcomp.c: revision 1.9
PR/59103: RVP: Search of non-ASCII chars. broken when `:set extended' is set
Pull up following revision(s) (requested by riastradh in ticket #1377):
share/man/man9/module.9: revision 1.55
PR 59102: fix signature of module callback function.
