shells/oh-my-posh: update to 30.5.0
Bug Fixes
blog: fix link formatting for configurator app (413f96f)
runtime: honor COLUMNS fallback without a TTY (102edf0)
status: reset .Executed per prompt in cmd, bash and nushell (#7765) (cbf313f), closes #7757
Features
config: add native cursor_style option (41ef31d), closes #7742
deve/cargo-nextest: update to 0.9.143
v0.9.143
Added
A new junit.report-skipped configuration setting controls which skipped tests are emitted in the JUnit XML report as <testcase> elements with a <skipped> child. (#885)
Thanks to liangfu for your first contribution!
While listing tests, nextest now shows a progress bar if listing takes longer than 2 seconds. Listing is usually fast, but can be slow in some environments, such as with antivirus software that scans each test binary before it runs. (#3471)
The binaries metadata (used by archives and --binaries-metadata) now records whether Cargo built each non-test binary for the host or the target platform. Future versions of nextest will use this to configure environment variables correctly in cross-compilation scenarios. (#3520)
Changed
Nextest now orders the dynamic library search path the way current versions of Cargo do, with the Cargo artifact directory ahead of the deps directory. Previously the two were reversed, so a test could potentially resolve a dylib to a different copy than cargo test would. (Cargo swapped the two in 1.93.)
Fixed
[52 lines not shown]
biology/openbabel: update to 3.2.1
This release reflects the latest stable version, including many bug fixes, including some potentially security related.
As noted with our 3.2.0 release, we anticipate further bug-fix releases over the course of 2026 and appreciate the many contributions and reports from everyone.
🪲 Bug Fixes
Fix tetrazole protonation handling in the pH model by @Jnelen in #2975
ChemDraw CDX: handle additional aromatic/fractional bond-order codes by @jlkjr in #2979
🔒 Security and Hardening
Fix CVE-2026-54751: MMD parser uninitialized value use can expose prior atom data by Carmelo Lin @Carmel0
Update SECURITY.md with GitHub Security Advisory links by @ghutchis in #2968
Fix several formats with sscanf validation by @ghutchis in #2973
Fix more fuzz bugs by @ghutchis in #2977
Fix stack overflow in gaussformat and cube by @ghutchis in #2985
Fix additional crashes from fuzz testing by @ghutchis in #2986
Fix more reported crashes by @ghutchis in #2988
[16 lines not shown]
archivers/arqiver: update to 1.0.2
Main changes:
● Corrected the usage of --fast-read with bsdtar.
● Used the original file name with Gzip.
● Added LZ4 support.
● Removed an old workaround about translations, which prevented some languages from being loaded due to a recent change in Qt.
syslogd: Preserve full partial klog line when buffering
Buffer incomplete /dev/klog lines from the start of the original
line instead of the parse position. Otherwise, split messages
lose the BSD syslog priority prefix when reconstructed.
Fixed by Kenichi Suzuki at IIJ.
syslogd: Fix buffering of partial klog lines
When a /dev/klog read ends without a newline, the remaining data
is buffered for the next read. The code mistakenly copied the data
into linebuf instead of klog_linebuf, breaking reconstruction of
split log messages.
Found and fixed by nonaka@ and Kenichi Suzuki at IIJ.
libXfont2: update to 2.0.9.
This release contains the fixes for the issues reported in today's security advisory:
https://lists.x.org/archives/xorg-announce/2026-August/003734.html
- CVE-2026-59679: Font Server Client encoding Out-Of-Bounds Read/Write
- CVE-2026-44950: Font Server Client Cumulative Glyph Data Heap Buffer Overflow
Additionally, it changes a build-time default. Previously fontserver support
was compiled in by default unless --disable-fc was provided at configure time.
The new default is *disabled by default* unless --enable-fc is provided at
configure time. Doing so protects us from future fontserver-connection related
issues. Fontservers have been deprecated for many years and the vast majority
of users will not notice this changed default (Debian has built with
--disable-fc for years).
cut.1 & paste.1: add HISTORY and AUTHORS
Sourced from OpenBSD and FreeBSD, which both reference the same post[1]
for part of it. They differ in certain details.
FreeBSD puts the additional credit to Marciano Pitargue in the wrong
utility, going by the source code credits (and what OpenBSD has). There
is discussion in the FreeBSD review[2] about which originating release
is relevant for cut(1) (32V vs. System III), as both BSDs referenced
32V for paste(1). This was perhaps confused in the FreeBSD review,
which talks directly about cut(1), but was applied also to paste(1). An
earlier FreeBSD commit specifically lists 32V for paste(1)[3]. (I don't
have 32V to examine.)
These histories could be subject to further cut and paste...
1. https://www.tuhs.org/pipermail/tuhs/2020-January/019955.html
2. https://reviews.freebsd.org/D36048
3. https://github.com/freebsd/freebsd-src/commit/30f8b6c18279162a2f4efdc9e85a49683a8aafbf
