Pull up following revision(s) (requested by kre in ticket #1336):
tests/lib/libc/locale/t_mbstowcs.c: revision 1.4
tests/lib/libc/locale/t_mbstowcs.c: revision 1.5
tests/lib/libc/locale/t_mbrtowc.c: revision 1.3
tests/lib/libc/locale/t_mbrtowc.c: revision 1.4
tests/lib/libc/locale/t_mbrtowc.c: revision 1.5
t_mbrtowc: Mark UTF-8 test cases xfail.
mbrtowc previously failed to reject invalid (legacy 5/6-byte) UTF-8,
so it accepted this test case. Now it rejects this test case,
because the test case itself is broken.
Need to split this test up into:
1. correctly decoding the valid inputs
2. correctly rejecting the invalid inputs
But for now marking the test case xfail is an adequate approximation
[46 lines not shown]
Updated sysutils/xenkernel420 to 20260911
Updated sysutils/xentools420 to 20260911
Updated sysutils/xenstoretools to 20260911
Updated sysutils/xenkernel418 to 20260911
Updated sysutils/xentools418 to 20260911
Fix behaviour of rt_sigqueueinfo() when a thread group id (tgid) of -1 is
given. Previously this was passed as a process id to kill() which broadcasts
the signal (meanly you can accidentally kill all processes!).
Found by Henrique Brito as part of GSoC 2026
dpkg: updated to 1.23.11
dpkg (1.23.11) unstable; urgency=medium
* dpkg: Improve maintscript abort-* execution diagnostics.
* dpkg-shlibdeps: Do not validate existence of -l option argument.
* Code internals:
- dpkg: Use a proper conditional instead of a ternary operator for
f_triggers.
- dpkg: Refactor tarobject_describe_type() into a new function.
- dpkg-split: Refactor depot handling functions out of do_auto().
strawberry: updated to 1.2.30
1.2.30
Bugfixes
Fixed an out-of-bounds memory access in HMAC signing when using keys longer than the hash's block size, affecting request signing for Discogs and Musixmatch
Fixed the build failing when the tag fetcher (AcoustID) is disabled
Changed API credentials for Spotify for production use
Regen with makesyscalls.sh 1.188 as it changes the text of the "DO NOT EDIT"
comments in the generated files.
No intended functional change, but minimises diffs on future regens.
py-matrix-nio: updated to 0.26.0
0.26.0
Breaking Changes
* Replace libolm/python-olm with vodozemac for end-to-end encryption
The e2e extra now depends on vodozemac instead of python-olm, and libolm is no longer required as a system dependency.
Existing encryption stores are migrated automatically on load. Stores created with a libolm pickle version older than 4 (roughly, pre-December 2021) can only be migrated if the optional python-olm >= 3.2.7 package is installed at upgrade time; without it, those pickles cannot be read.
hmac-sha256 is no longer offered as a SAS message authentication code; only hkdf-hmac-sha256 is supported.
Account.remove_one_time_keys() has been removed, as it is no longer supported by the underlying library.
* Drop support for end-of-life python3.8 and python3.9; the minimum supported version is now python3.10
Features
* Add unread_thread_notifications to SyncResponse
Bug Fixes
[2 lines not shown]
py-vodozemac: added version 0.10.0
Python bindings for vodozemac.
vodozemac is a pure Rust implementation of the Olm and Megolm cryptographic
ratchets, offering a high-level API for straightforward creation of secure
communication channels using these ratchets.
py-wrapt: updated to 2.4.1
2.4.1
Bugs Fixed
The C extension implementation of PartialCallableObjectProxy did not expose the bound positional and keyword arguments supplied when the proxy was created, whereas the pure Python implementation makes them available as the _self_args and _self_kwargs attributes. The C extension implementation now provides read only _self_args and _self_kwargs attributes so that both implementations behave the same.
inspect.signature() applied to a PartialCallableObjectProxy reported the full signature of the wrapped callable, including the parameters that the bound positional and keyword arguments already supply, whereas for functools.partial those parameters are removed. The proxy did not define __signature__, so inspect followed __wrapped__ back to the callable and reported its signature unchanged. The proxy now provides __signature__ on instances, in both the pure Python and C extension implementations, giving the same result as for an equivalent functools.partial, including a ValueError when more positional arguments are bound than the callable accepts.
This also affected wrapper functions used with FunctionWrapper and @wrapt.decorator. When a wrapped method is called via its class with the instance passed explicitly, the wrapper function receives a PartialCallableObjectProxy with the instance bound, and args without the instance. A wrapper which bound args and kwargs against inspect.signature(wrapped) would fail for such calls with a TypeError about a missing argument, while working for calls made via the instance. The reported signature now omits the bound instance so the binding succeeds.
The signature of a partial whose wrapped callable is itself an already bound method is still reported incorrectly, for reasons outside of the control of wrapt. See the “Known Issues” documentation for details.
The C extension intercepts the __module__ and __doc__ attributes by name in its attribute get and set slots so that they are forwarded to the wrapped object. The name was compared by identity against an interned string, which relied on the attribute name having been interned. Names originating from Python source code always are, but a name constructed at runtime, for example by string concatenation or by decoding, is not, and for such a name the interception was skipped. Getting the attribute then returned the value captured when the proxy was created rather than the current value on the wrapped object, and setting it stored the value on the proxy rather than the wrapped object. The comparison now falls back to comparing by value when the identity check fails, guarded by a length check so that the cost for non matching names is unchanged.
py-hypothesis: updated to 6.168.0
6.168.0 - 2026-09-08
datetimes() now generates “tricky” datetimes more often: values on or near daylight-saving and other utc-offset transitions of the drawn timezone - including imaginary wall times, and ambiguous ones with each value of fold - as well as times adjacent to leap seconds and to well-known datetimes like the millennium and the end of the signed 32-bit Unix epoch.
This release also fixes some rare internal errors, where an error raised partway through updating an internal cache - for example by a deeply recursive strategy raising RecursionError - could leave that cache corrupted.
www/webkit-gtk41: Revise comment about finding sqlite3
This is a comment-only change.
Somehow, cmake finds libraries in the buildlink path instead of the
real path. For most of them, the -L/rpath stuff ends up correct in
the built library. For sqlite3, for me on NetBSD 10 amd64 building
normally (not bulk), the buildlink path ends up in the final library.
Explain the problem better.
