translate-toolkit: updated to 3.19.17
3.19.17
Formats and Converters
catkeys
Omit untranslated units when serializing catalogs
DTD
Preserve apostrophe entities during round trips
Markdown
Avoid applying stale YAML folded scalar offsets to translated
content
RC
Preserve inline comments next to their original controls in po2rc
TS
Preserve disambiguation, developer guidance, and translator comment
types during PO conversion
[4 lines not shown]
py-unicode-segmentation-rs: added version 0.3.3
Python bindings for the Rust unicode-segmentation and unicode-width crates,
providing Unicode text segmentation and width calculation according to Unicode
standards.
shells/oh-my-posh: update to 30.6.4
Bug Fixes
- battery: render a detected battery at 0% instead of disabling the segment (#7784) (bfa4f3b), closes #7782
news/eilmeldung: update to 1.7.2
This release just some minor bugfixes and one minor breaking change:
- icon_set.filter_reverse has been renamed to icon_set.sort_reversed
- bugfix
- HTML encoded wide-ampersands (U+FF06) are now correctly replaced by &
- sort sort icons are now configurable and correctly replaced with preset ASCII
- bumped dependencies
py-pdf: update to 6.15.0.
## Version 6.15.0, 2026-08-06
### Security (SEC)
- Improve performance of read_until_whitespace (#3947)
- Limit CID width range and width count when loading fonts (#3946)
- Limit token length for ToUnicode entries (#3944)
### Deprecations (DEP)
- Deprecate previously missed inline_images setter as well (#3897)
### New Features (ENH)
- Add ActualText tag when we produce RTL appearance stream (#3901)
- Allow keeping original PDF header in non-incremental clone mode (#3918)
- AppearanceStream: Add support for RTL appearance streams with Arabic characters (#3831)
- Add actions base class (#3552)
### Bug Fixes (BUG)
[9 lines not shown]
py-strich: updated to 0.19
0.19
All encoders: harden against untrusted input by constraining input and output
sizes — over-long payloads and over-large raster renders are now rejected
before any allocation rather than exhausting memory or CPU.
EAN-13 and ITF-14: new require_valid_check_digit option rejects a supplied
check digit that is missing or incorrect instead of silently recomputing it.
New exception subclasses
:class:~pystrich.exceptions.PyStrichInvalidPayloadLength and
:class:~pystrich.exceptions.PyStrichInvalidCheckDigit (both
:class:~pystrich.exceptions.PyStrichInvalidInput) give over-capacity input
and check-digit failures a distinct type.
py-hypothesis: updated to 6.165.2
6.165.2 - 2026-08-05
This release extends a recent shrinking improvement to many more strategies. In unions like wide_strategy | specific_strategy, values produced by the specific branch can now be re-encoded and shrunk as if generated by the wider branch when the strategies involved include sampled_from(), lists(), tuples(), dictionaries() and fixed_dictionaries(), builds() of a dataclass, permutations(), the dates() family of strategies, and filtered, deferred, or recursive combinations of them.
6.165.1 - 2026-08-04
This release improves shrinking for strategies like st.text() | some_more_complicated_strategy: values produced by the more specific strategy can now be shrunk as if they had been generated by the wider strategy. (Values from just() are the exception, as generating them makes no choices which could be re-encoded.)
6.165.0 - 2026-08-02
characters() now issues the new NonRoundTrippableCharactersWarning if the codec argument allows generating characters which encode successfully but do not decode back to the same character - for example the yen sign becomes a backslash under shift_jis - since strings containing them do not round-trip. Pass each such character in include_characters to generate it without the warning, or in exclude_characters to generate only characters which round-trip.
py-test-run-parallel: updated to 0.10.0
0.10.0
Use = as separator for the test run report
Respect verbosity/quietness settings when deciding to print the parallel report summary
Configure per-test report to be displayed at higher verbosity modes
Create a separate tmpdir/tmp_path subdirectory for each iteration, so these fixtures can work with --iterations
py-unidiff: updated to 1.0.0
1.0.0 - 2026-07-25
* Dropped Python 2 support; the minimum supported version is now Python 3.9.
* Converted to real PEP 484 type annotations and generic containers, and
shipped a py.typed marker
* Migrated packaging to pyproject.toml; the sdist now includes the tests
* Replaced Travis CI with GitHub Actions (tests + mypy).
* Exposed git file modes via PatchedFile.source_mode / target_mode and an
is_symlink property
* Added support for git mnemonic source/target prefixes (i/ w/ c/ o/ and
1/ 2/), which also fixes `git diff --cached` paths
* Exposed PatchedFile.diff_line_no to locate hunkless (e.g. binary) file
entries in the diff
* PatchSet and PatchSet.from_string now accept bytes input directly,
decoding with the given encoding (default UTF-8)
* PatchSet.from_filename and PatchSet.from_string now accept the
metadata_only argument.
[6 lines not shown]
chromium: update to 151.0.7922.108
* 151.0.7922.108
This update includes 41 security fixes. Please see the Chrome Security Page for more information.
[TBD][499602793] Critical CVE-2026-19137: Use after free in WebGL. Reported by anonymous on 2026-04-05
[N/A][524824288] Critical CVE-2026-19149: Use after free in Aura. Reported by Google on 2026-06-17
[N/A][532941869] Critical CVE-2026-19154: Use after free in Skia. Reported by Google on 2026-07-09
[N/A][534903095] Critical CVE-2026-19157: Out of bounds write in ANGLE. Reported by Google on 2026-07-14
[TBD][537729021] Critical CVE-2026-19170: Use after free in WebGL. Reported by Muhammad Alifa Ramdhan, Pan ZhenPeng, Billy Jheng Bing Jhong of STAR Labs SG Pte. Ltd. on 2026-07-22
[N/A][537838324] Critical CVE-2026-19172: Use after free in Views. Reported by Google on 2026-07-22
[$5000][537390933] High CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks. Reported by Sven Dysthe (@svn-dys) on 2026-07-21
[$500][536945254] High CVE-2026-19168: Inappropriate implementation in V8. Reported by XBOW and triaged by Andrés Luksenberg on 2026-07-20
[N/A][500097298] High CVE-2026-19138: Heap buffer overflow in CrashReporting. Reported by Google on 2026-04-06
[N/A][511731805] High CVE-2026-19139: Race in CredentialProvider. Reported by Google on 2026-05-10
[N/A][513044017] High CVE-2026-19140: Use after free in GPU. Reported by Google on 2026-05-14
[N/A][513602949] High CVE-2026-19141: Use after free in Resources. Reported by Google on 2026-05-15
[N/A][515428251] High CVE-2026-19142: Use after free in Views. Reported by Google on 2026-05-21
[33 lines not shown]
py-test-forked: updated to 1.7.5
1.7.5
* Drop support for EOL Python versions: 3.7, 3.8, 3.9.
* Print proper child process exit status.
* Removed dependency to `py <https://pypi.org/project/py>`__.
* Fix tests marked with `@pytest.mark.forked` in pytest 7+.
* pytest >= 7 is now required.
py-test-check: updated to 2.9.1
2.9.1
Fixed
- Fix [An issue with pytest-reportlog thanks to a suggestion from MV Seotlo
- also the resulting code is a bit cleaner of a solution for the pseudo-traceback code.
2.9.0
Highlights
- Added `--check-max-tb-line=<int>` to control one-line traceback output for additional failures.
- Traceback output now supports two tiers:
- full pseudo-tracebacks for early failures (`--check-max-tb`)
- one-line traceback output for later failures (`--check-max-tb-line`)
- Improved one-line traceback output for context-manager checks:
- points to the failing line inside `with check:` blocks
- includes exception type and message when available
esbuild: update to 0.28.2
* Fix tree shaking bug due to TypeScript import alias (#4507)
* Fix CSS minification bug involving & (#4497)
* Avoid overwriting input files without --allow-overwrite (#4484)
* Fix incorrect code generated when using top-level await (#4498)
* Fix a minification bug with lowered logical assignment operators (#4508)
* Fix a potential deadlock when the JavaScript API is used incorrectly (#4503, #4506)
* Handle target collisions (#4509)
* Force .mp3 files to use the audio/mpeg MIME type (#4485)
* Add a new TypeScript syntax warning
* Add support for formatting errors for Visual Studio (#4460)
* Fix a bug with CSS gamut mapping (#4488)
py-pybind11: updated to 3.1.0
3.1.0
New Features:
Support for Python 3.8 was removed. The minimum supported version is now Python 3.9.
Support for MSVC 2017 has been dropped.
Changed strict-mode numeric conversions for PEP 484 compatibility: float now accepts int, and complex now accepts int and float.
Small extra features added to the pybind11 command line tool based on python-config.
Added subinterpreter_thread_state, an RAII wrapper that owns a reusable PyThreadState for a sub-interpreter, together with a subinterpreter_scoped_activate overload that activates it. This lets an OS thread re-enter one or more sub-interpreters without creating and destroying a PyThreadState on every activation.
Add py::mod_gil_used() as replacement spelling to py::mod_gil_not_used(false).
Bug fixes:
[26 lines not shown]
