tealdeer: update to 1.8.1
This patch release tweaks the enabled features for ureq, the library we
use to perform HTTP requests when updating the cache. In particular,
support for socks proxies is now enabled.
tor: Update to 0.4.8.22
Changes:
Changes in version 0.4.8.22 - 2026-01-28
This is likely the very last release of the 0.4.8.x series. Three major
bugfixes detailled below including two affecting directory servers (basically
all relays). We strongly recommend upgrading as soon as possible.
o Major bugfixes (security):
- Avoid an out-of-bounds read error that could occur with
V1-formatted cells. Fixes bug 41180; bugfix on 0.4.8.1-alpha. This
is tracked as TROVE-2025-016.
o Major bugfixes (directory servers):
- Allow old clients to fetch the consensus even if they use version
0 of the SENDME protocol. In mid 2025 we changed the required
minimum version of the "FlowCtrl" protocol to 1, meaning directory
caches hang up on clients that send a version 0 SENDME cell. Since
old clients were no longer able to retrieve the consensus, they
[42 lines not shown]
pkg-vulnerabilities: restrict CVE-2021-39246 to older tor
This was fixed in tor-0.4.6.10 and should be no longer a problem given that v2
onion addresses should be no longer around and supported.
Pull up following revision(s) (requested by mrg in ticket #2001):
usr.sbin/ypserv/yppush/yppush.c: revision 1.26
_SC_OPEN_MAX can exceed FD_SETSIZE. Use the compat value svc_maxfd+1
from the rpc library similar to ypbind(8).
The custom _svc_run() function is required as the standard svc_run()
may hang for retries.
Fixes PR 59750.
Pull up following revision(s) (requested by mrg in ticket #1230):
usr.sbin/ypserv/yppush/yppush.c: revision 1.26
_SC_OPEN_MAX can exceed FD_SETSIZE. Use the compat value svc_maxfd+1
from the rpc library similar to ypbind(8).
The custom _svc_run() function is required as the standard svc_run()
may hang for retries.
Fixes PR 59750.
Pull up following revision(s) (requested by mrg in ticket #168):
usr.sbin/ypserv/yppush/yppush.c: revision 1.26
_SC_OPEN_MAX can exceed FD_SETSIZE. Use the compat value svc_maxfd+1
from the rpc library similar to ypbind(8).
The custom _svc_run() function is required as the standard svc_run()
may hang for retries.
Fixes PR 59750.
protobuf py-protobuf: updated to [6.]33.5
Protocol Buffers v33.5
Python
Fix Any recursion depth bypass in Python json_format.ParseDict
Other
Update release_bazel_module.yaml
Make BCR PRs non-draft by default. (9db25c1)
Fix(publish-to-bcr): disable attestations
cmake cmake-gui: updated to 4.2.3
CMake 4.2.3
* libarchive: Restore tolerance of archives with non-OEM paths on Windows
* Tests: Remove invalid CUDA code from tests