NetBSD/src XjjLhS4doc CHANGES-10.2

   Ticket #1270
VersionDeltaFile
1.1.2.100+8-1doc/CHANGES-10.2
+8-11 files

NetBSD/src bV0HnpTsys/dev/sdmmc sdhc.c

   Pull up following revision(s) (requested by mlelstv in ticket #1270):

        sys/dev/sdmmc/sdhc.c: revision 1.126

   When seeing an error from the host controller, delay the soft reset by 100us.

   This helps the hardware found in Rockchip RK3568 and RK3588 SoCs.
   See PR kern/60311.
VersionDeltaFile
1.117.2.3+5-3sys/dev/sdmmc/sdhc.c
+5-31 files

NetBSD/src 1kBIWRhdoc CHANGES-11.0

   Ticket #305
VersionDeltaFile
1.1.2.97+7-1doc/CHANGES-11.0
+7-11 files

NetBSD/src PAzgrrUsys/dev/sdmmc sdhc.c

   Pull up following revision(s) (requested by mlelstv in ticket #305):

        sys/dev/sdmmc/sdhc.c: revision 1.126

   When seeing an error from the host controller, delay the soft reset by 100us.

   This helps the hardware found in Rockchip RK3568 and RK3588 SoCs.
   See PR kern/60311.
VersionDeltaFile
1.121.2.3+5-3sys/dev/sdmmc/sdhc.c
+5-31 files

NetBSD/pkgsrc MtC11nddoc CHANGES-2026

   doc: Updated sysutils/xfile to 1.2.0
VersionDeltaFile
1.3571+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc pbIWNiwsysutils/xfile distinfo Makefile

   sysutils/xfile: update to 1.2.0

   # changes

   * Support for multiple (| separated) patterns in Select Pattern and
     Filter dialogs.
   * XFile will now exit with error status if a directory specified on the
     command line is not accessible.
   * Fixed: "Go Up" becoming insensitive on directory access error.
   * Fixed: if hidden initially, status/path-field not appearing when
     enabled from the View menu.
   * Fixed: list widget's incremental search timer resetting unexpectedly.
VersionDeltaFile
1.9+10-10sysutils/xfile/distinfo
1.9+2-2sysutils/xfile/Makefile
+12-122 files

NetBSD/pkgsrc DwB473Gx11/xfind distinfo Makefile

   x11/xfind: update to 1.0.5

   No changelog provided.
VersionDeltaFile
1.5+4-4x11/xfind/distinfo
1.5+2-2x11/xfind/Makefile
+6-62 files

NetBSD/pkgsrc je5ABlMdoc CHANGES-2026

   doc: Updated devel/got to 0.126
VersionDeltaFile
1.3570+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 1XZ7xRKdevel/got distinfo Makefile

   devel/got: update to 0.126

   # changes

   * got 0.126; 2026-05-21
   - remove dependency on xxd from the test suite (dep was added in got-0.125)
   - really add all relevant parent commits to newly created pack files
   - fix serving a branch of entirely unrelated history with gotd
   - fix test failures when tests are run with Git 2.54
   - initial sha256 support in the network protocol for got clone/fetch/send

   * got 0.125; 2026-05-10
   - security fix: reject versioned files inside .git, .got, or .cvg directories
   - security fix: crafted tree entry names could cause writes outside work tree
   - fix redundant pack file cleanup when repository contains symlinks
   - prevent NULL pointer dereferences when empty tree objects are encountered
VersionDeltaFile
1.22+4-4devel/got/distinfo
1.29+2-2devel/got/Makefile
+6-62 files

NetBSD/pkgsrc ZFIHiXddoc CHANGES-2026

   doc: Updated sysutils/fastfetch to 2.64.2
VersionDeltaFile
1.3569+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc DrDcnzOsysutils/fastfetch options.mk distinfo

   fastfetch: update to 2.64.2

   changes (since 2.62.1)

   # 2.64.2

   Bugfixes:
   * Fixes image rendering being wiped quickly (#2374)
       * Regression from v2.64.0
   * Fixes ASCII logo being overwritten in `--dynamic-interval` mode
       * Regression from v2.64.0

   Logos:
   * Updates OpenWrt and adds a small variant (#2376)
       * The old one is renamed to `openwrt_old`

   # 2.64.1

   Features:

    [107 lines not shown]
VersionDeltaFile
1.18+15-6sysutils/fastfetch/options.mk
1.29+4-4sysutils/fastfetch/distinfo
1.48+2-3sysutils/fastfetch/Makefile
+21-133 files

NetBSD/pkgsrc yY1kUuWdoc CHANGES-2026

   Updated devel/py-wcwidth, devel/py-urwid
VersionDeltaFile
1.3568+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc oavcgp9devel/py-urwid distinfo Makefile

   py-urwid: updated to 4.0.2

   4.0.2

   New features

   * Initial typing support for urwid package

   Bug fixes

   * Fix ListBoxError in _keypress_page_down when snapping to a widget above the top
   * Fix lazy_import of display modules if __package__ is not defined

   Documentation

   * Adjust typing for `urwid.display` and `urwid.event_loop`
   * Typing: extend typing information for `urwid.display`
   * Typing: adjust event loop types
   * Typing: adjust types for vterm, numedit and graphics

    [9 lines not shown]
VersionDeltaFile
1.51+4-4devel/py-urwid/distinfo
1.63+2-2devel/py-urwid/Makefile
1.22+2-1devel/py-urwid/PLIST
+8-73 files

NetBSD/pkgsrc s5WN8Oqdevel/py-wcwidth PLIST distinfo

   py-wcwidth: updated to 0.8.0

   0.8.0
   New support for Variation Selector 15 Emojis as narrow,
   New argument, term_program for wcstwidth(), width(), clip(), wrap(), ljust(), rjust(), and center().  False disables corrections; True auto-detects by TERM_PROGRAM or TERM; string values accept canonical names matching list_term_programs().  wcstwidth()_ defaults to True; all other functions default to False.
   Improved performance on Python 3.15 using standard library iter_graphemes()
   Improved memory usage and import time for Python 3.15 using lazy imports
   Bugfix Invisible_Stacker viramas now form conjuncts (Burmese, Khmer, etc.) and change some Virama width calculations to match jacobsandlund/uucode_ (ghostty)
   Updated graphemes width maximum now 2, matching Ghostty, foot, and Windows Terminal
VersionDeltaFile
1.10+73-1devel/py-wcwidth/PLIST
1.23+4-4devel/py-wcwidth/distinfo
1.26+3-3devel/py-wcwidth/Makefile
+80-83 files

NetBSD/pkgsrc LfDn97Cdoc CHANGES-2026

   Updated net/rclone, security/sqlmap
VersionDeltaFile
1.3567+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc HTPbMngsecurity/sqlmap distinfo Makefile

   sqlmap: updated to 1.10.6

   1.10.6
   Fix WebSocket request traffic logging
VersionDeltaFile
1.31+4-4security/sqlmap/distinfo
1.46+3-3security/sqlmap/Makefile
+7-72 files

NetBSD/pkgsrc VCuStxMnet/rclone distinfo Makefile

   rclone: updated to 1.74.3

   1.74.3

   Bug Fixes
   rc
   Fix unauthenticated command execution via --rc-serve inline remotes CVE-2026-49980 (Nick Craig-Wood)
   Stop global.* connection string options changing config CVE-2026-49980 (Nick Craig-Wood)
   build: Fix multiple CVEs by upgrading to go1.26.4 (Nick Craig-Wood)
   CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader
   CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping
   CVE-2026-27145: crypto/x509: split candidate hostname only once
   log: Fix wrong source file:line in JSON logs from release builds (Nick Craig-Wood)
   mount2: Fix empty directory listings on re-read (Janne Beate Bakeng)
   serve s3: Fix multipart ListParts pagination returning wrong part numbers (Nick Craig-Wood)
   serve sftp
   Fix file corruption when a client resumes an upload (Nick Craig-Wood)
   Fix truncate request being silently ignored (Nick Craig-Wood)
   Local

    [11 lines not shown]
VersionDeltaFile
1.41+10-10net/rclone/distinfo
1.104+3-4net/rclone/Makefile
1.28+2-2net/rclone/go-modules.mk
+15-163 files

NetBSD/pkgsrc nzppWzBdoc CHANGES-2026

   Updated graphics/openimageio, audio/mpg123
VersionDeltaFile
1.3566+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc 9jtUZ0Gaudio/mpg123 distinfo Makefile.common, audio/mpg123-pulse Makefile

   mpg123: updated to 1.33.6

   1.33.6

   mpg123
   Prepare for const-returning strchr().
   Hide seq_len debugging counter in non-debug mode.
   Fix memory leak with --network internal due to inverted NULL check in net123_close_internal() (handle never NULL in practice, though; bug 386).
   mpg123, out123: Fix strrchr() usage to be more const and correct under C99 as well as C23.
   mpg123-strip: Also use largefile API properly using mpg123config.h, but without actual effect at least on Linux/x86. It is cleaner that way, though.
   ports/cmake: Yasm is not neeeded for Clang on MSVC.
   libmpg123: Remove unused loop variable in layer2 left over from runtime table elimination (32 bit mmx/sse code).
VersionDeltaFile
1.86+4-4audio/mpg123/distinfo
1.86+2-2audio/mpg123/Makefile.common
1.48+1-2audio/mpg123-pulse/Makefile
+7-83 files

NetBSD/pkgsrc THV5Hbygraphics/openimageio distinfo PLIST

   openimageio: updated to 3.1.14.0

   3.1.14.0

   - *oiiotool*: Add `--nchannels` flag for parity with maketx.
   - *oiiotool*: Commands taking offsets or geometry arguments now accept a more flexible offset notation with commas as alternative separators (e.g., `X,Y` or `WxH,X,Y` in addition to the X11-style `+X+Y` form). This affects `--create`, `--crop`, `--cut`, `--fit`, `--fullsize`, `--origin`, `--originoffset`, `--paste`, `--pattern`, `--printstats`, `--resize`.
   - *oiiotool*: Be more cautious about implicit promotion to float when `--autocc` is used alongside explicit color space names.
   - *color mgmt*: For OCIO built-in configs, replace the default file rules with more sensible ones that avoid spurious matches (e.g., no longer assumes all `.exr` files use ACES2065-1 primaries).
   - *iconvert*: Allow `-o outfile` for output file designation, for parity with oiiotool syntax.
   - *ColorConfig*: New `isData()` API method to query if a color space is a data space; fix Python `isColorSpaceLinear()`.
   - *ustring*: Allow freeing the ustring table via `OIIO::attribute("ustring:cleanup", 1)` or env var `OIIO_USTRING_CLEANUP=1`, useful for suppressing false positives in memory leak detection tools.
   - *dicom*: Enforce reasonable resolution limits to guard against corrupt files.
   - *gif*: Preserve RGB values of transparent-indexed pixels (previously only alpha was set, zeroing the RGB channels).
   - *jpeg*: More correctly handle bounds checks for malformed APP1 Exif and APP2 ICC metadata markers.
   - *jpeg-xl*: Enforce format resolution limits, for better detection of corrupt or invalid files.
   - *jpeg-xl*: Prevent JXL reader from loading or allocating memory for arbitrarily large non-image files.
   - *pnm*: Prevent PNM reader from loading or allocating memory for arbitrarily large non-image files.
   - *psd*: Fix indexed transparency.
   - *softimage*: Fix possible small allocation leak in RLE decoder.

    [7 lines not shown]
VersionDeltaFile
1.43+4-4graphics/openimageio/distinfo
1.20+3-3graphics/openimageio/PLIST
1.132+2-3graphics/openimageio/Makefile
+9-103 files

NetBSD/pkgsrc OpVA6erdoc CHANGES-2026

   Updated net/helm, databases/hiredis
VersionDeltaFile
1.3565+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc 2ekd33zdatabases/hiredis distinfo Makefile

   hiredis: updated to 1.4.0

   1.4.0

   Improvements

   Increase required cmake version to 3.15 @memark
   Use ffc (pure-C99) as the RESP3 double parser instead of strtod @fcostaoliveira
   FetchContent should not include cpack @koenvandesande
   Add C++ compatibility to sds.h @JonasKruckenberg
   Apply FD_CLOEXEC on sockets @lennyly

   Bug Fixes

   fix: add NULL check for c->funcs in redisReconnect @ghost
   Fix buffer overflow in tests.
VersionDeltaFile
1.18+4-4databases/hiredis/distinfo
1.14+2-2databases/hiredis/Makefile
+6-62 files

NetBSD/pkgsrc CoNH2Einet/helm distinfo go-modules.mk

   helm: updated to 4.2.0

   4.2.0

   Switch to goreleaser for release builds
   Kubernetes client libraries to v1.36
   Add mustToToml template function
   deprecate unused --hide-notes and --render-subchart-notes flags
   --dry-run=server now respects generateName:
VersionDeltaFile
1.3+646-790net/helm/distinfo
1.3+214-262net/helm/go-modules.mk
1.14+8-18net/helm/Makefile
+868-1,0703 files

NetBSD/pkgsrc GBo3t8pdoc CHANGES-2026

   Updated sysutils/py-sh, audio/py-soundfile
VersionDeltaFile
1.3564+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc Nb6wexkaudio/py-soundfile distinfo Makefile

   py-soundfile: updated to 0.14.0

   0.14.0

   Added type annotations
   Added Licensing note to wheel
   Fixed race condition when opening files concurrently
   Fixed regressions in test suite
   Removed support for Python <= 3.9
   Added ARM64 support for Windows
VersionDeltaFile
1.7+4-4audio/py-soundfile/distinfo
1.17+3-3audio/py-soundfile/Makefile
+7-72 files

NetBSD/pkgsrc Yp1xADVsysutils/py-sh distinfo Makefile

   py-sh: updated to 2.2.4

   2.2.4
   - Bugfix regression where correct `gid` was not set on the launched process
VersionDeltaFile
1.16+4-4sysutils/py-sh/distinfo
1.19+2-2sysutils/py-sh/Makefile
+6-62 files

NetBSD/pkgsrc K8m0h3Udoc CHANGES-2026

   doc: Updated www/php-contao-manager to 1.10.14
VersionDeltaFile
1.3563+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc ABFxLyjwww/php-contao-manager distinfo Makefile

   www/php-contao-manager: update to 1.10.14

   1.10.14 (2026-05-14)

   * Updated dependencies to fix a security issue in Composer
   * Add a white border to the 2FA QR code (#923)
VersionDeltaFile
1.22+4-4www/php-contao-manager/distinfo
1.25+2-2www/php-contao-manager/Makefile
+6-62 files

NetBSD/pkgsrc lffrYGKdoc CHANGES-2026

   doc: Updated www/ruby-sass-embedded to 1.100.0
VersionDeltaFile
1.3562+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc zrwuReFwww/ruby-sass-embedded PLIST distinfo

   www/ruby-sass-embedded: update to 1.100.0

   1.100.0 (2026-05-22)

   * Refactor Rakefile (#377)
   * Test install from git (#378)
   * Bump rubygems/configure-rubygems-credentials from 1.0.0 to 2.0.0 (#379)
   * Bump sass from 1.99.0 to 1.100.0 in /ext/sass (#380)
VersionDeltaFile
1.7+7-11www/ruby-sass-embedded/PLIST
1.10+4-4www/ruby-sass-embedded/distinfo
1.13+2-2www/ruby-sass-embedded/Makefile
+13-173 files