nginx-devel: updated to 1.31.5
Changes with nginx 1.31.5 02 Sep 2026
*) Feature: control API.
*) Feature: predicate locations.
*) Feature: the ngx_http_json_module.
*) Feature: the "client_body_early_read" directive.
*) Bugfix: use-after-free might occur in a worker process if proxying
with buffering was used and an error occurred while sending the
response to an HTTP/2 client.
*) Bugfix: a worker process might not exit or "accept4() failed (9: Bad
file descriptor)" alerts might appear in logs if the worker process
ran out of file descriptors before graceful shutdown.
[6 lines not shown]
tor: updated to 0.4.9.12
Changes in version 0.4.9.12 - 2026-09-08
Another security release containing several high security fixes reported by
the exciting and controversial world of LLMs. One important note is that new
protocol versions are recommended for clients and relays (41316).
Furthermore, authorities will NOT accept relay descriptor containing TAP keys
anymore hence the importance for all relays to upgrade to the latest 0.4.9.x
stable version. We very strongly recommend upgrading as soon as possible.
o Major bugfixes (security):
- Do not purge memory for OOM from within low-level code.
Previously, we would handle OOM conditions from within
append_cell_to_circuit_queue, which could appear at various places
within our call stack, and lead to objects being freed at
surprising points in the code, with attendent risk of use-after-
free errors. Now we only check for OOM conditions there, and
handle them from much higher in the stack. Fixes bugs 41341,
[78 lines not shown]
openldap: updated to 2.7.1
OpenLDAP 2.7.1 Release (2026/09/08)
Fixed libldap BER leak on notice of disconnection
Fixed libldap request leak on malformed BER response
Fixed libldap error stack handling with OpenSSL < 4.0
Fixed lload non-blocking BIO handling in SSL renegotiations
Fixed slapo-ppolicy handling of old passwords
Documentation
slapo-pcache added note about referral chasing
Minor Cleanup
py-time-machine: updated to 3.5.1
3.5.1
Only pass the compiler option -mno-omit-leaf-frame-pointer when the compiler supports it, checked with a tiny probe program. The option is unsupported outside of x86 and ARM64, so this fixes building from source on other architectures, like PowerPC, which failed since the option was added in version 3.3.0.
Fix the mocked datetime.date.today() and datetime.datetime.today() to be exact for all supported dates, like datetime.datetime.now(). Previously, they went through a floating-point timestamp, which could round the microseconds, or even the whole day, for dates far in the future.
Fix the class decorator to stop time travelling when tearDownClass() raises an exception, or when setUpClass() raises an exception not deriving from Exception, such as the skip outcome from pytest.skip(). Previously, time remained mocked for the rest of the process in these cases.
Fix Traveller.move_to() to keep the current timezone mocked when the given destination is unsupported. Previously, the timezone was restored before the destination was checked, leaving it unmocked whilst still time travelling.
Fix the time_machine pytest fixture to not try to stop a traveller that failed to start.
Fix the mocked time.strftime() to raise TypeError when passed None as its second argument, like the unmocked function, rather than treating it as the current time.
Fix the Migration CLI to keep the rewritten imports on the same line when a freezegun import shares its line with other code, like if TYPE_CHECKING: from freezegun import freeze_time, FakeDate. Previously, the remaining from freezegun import FakeDate was moved to a new line, outside the block.
Extend the Migration CLI to migrate uses of FrozenDateTimeFactory in string annotations, like freezer: "FrozenDateTimeFactory". Previously, the import was removed whilst such annotations were left referring to it.
[10 lines not shown]
ansible: updated to 14.4.0
14.4.0
Major Changes
community.vmware
- Bump required ``vmware.vmware`` collection version to 2.10.0 (https://github.com/ansible-collections/community.vmware/pull/2568).
fortinet.fortios
- Supported multiple versions of log fact modules.
- Supported new versions 7.6.7 and 8.0.0.
- Updated the Q&A for importing a certificate in the fortios_certificate_remote module.
ansible-core: updated to 2.21.4
2.21.4
Minor Changes
- mask_url function in module_utils to allow for masking of auth data embedded in urls.
Bugfixes
- apt_key module now masks authentication information in all displays and returns of uri information.
- get_url module now masks authentication information in all displays and returns of uri information.
- module_utils - ``mask_url`` now masks the password in URLs that contain a password but no username, such as ``redis://:password at host``, instead of returning them unmasked.
- module_utils.urls now all errors mask in line url authentication information.
- rpm_key module now masks authentication information in all displays and returns of uri information.
- tempfile - reject prefix and suffix values that contain path components to prevent path traversal.
- uri module now masks authentication information in all displays and returns of uri information.
- url lookup now masks authentication information in all displays and returns of uri information.
py-uv py-uv-build: updated to 0.12.11
0.12.11
Preview features
Generate missing artifact hashes when exporting pylock.toml files to ensure they conform to PEP 751
Warn when pylock.toml artifact hash tables are empty, which will be rejected in a future uv release
Performance
Speed up installs that overwrite existing files by eliminating per-file temporary directories for atomic hard-link, symlink, and reflink replacements
Speed up installs that merge copied wheels into existing environments by replacing per-file temporary directories with adjacent temporary files
Speed up local wheel installs by replacing the shared ZIP cursor lock with positioned reads
Speed up local wheel installs by reusing ZIP readers and buffers across extracted files
Avoid transitive dependency checks and unnecessary resolution when uv pip install --no-deps finds the requested packages already installed
Bug fixes
[11 lines not shown]
www/wikid: update to 3.2.1
v3.2.1
bug fix(es)
fixed images overlapping with the article peek modal by hiding the image overlapping: 49a9ad5
fixed seeking killing the sleep timer: da058cf
suppress <figcaption> tags when inline images are disabled: 9696724
fixed text clipping in the confirm modal: 522f511
performance improvements
eliminate per-frame heap allocations in is_article_saved_anywhere(): 9e51fda
eliminate per-frame url clones during halfblock cache lookups: 824bf79
eliminate intermediate allocations in compute_rects() traversal: 0d0698b
lazily decode html class and id entities: df95bab
replace O(n) link scan with O(log n) partition point in get_link_at_coord(): af4cd70
lazily index plain_text_lower() on in-page search: 1dfab6f
batch adjacent same-style words into single spans: e72115c
[18 lines not shown]
shells/oh-my-posh: update to 31.2.1
v31.2.1
Bug Fixes
upgrade: stop spinner while progress bar owns the line (fc19b6f), closes #7856
v31.2.0
Bug Fixes
config: capture the template cache before a segment goes async (cf477a5)
config: keep a running segment's flags out of the render (5e8e203)
path: keep template delimiters in folder names literal (161315a)
streaming: own the render lifecycle in the producer (fb33d39)
template: close the markup gaps the review found (04c5ede)
template: escape chevrons in rendered action output (1f3624a)
template: keep markup trust through recorded data files (d2673d1)
terminal: strip control runes from console titles (9a032ce)
terminal: strip raw C1 bytes from console titles (1e534e1)
[4 lines not shown]
devel/gitpane: update to 0.16.0
[0.16.0] - 2026-09-08
Added
Resize the commit message, changed files, and diff panes by dragging their borders. (#68, closes #67) Thanks @expoli.
Search incrementally in graph filters, the Changes pane, and a commit's changed files. Matching rows stay selected as results change, with Unicode-aware highlighting. (#70, closes #69) Thanks @expoli.
Fixed
Bound libgit2 pack windows and object caches to keep large repositories from consuming excessive memory. (#66, closes #65) Thanks @expoli for the report and fix.
Repository additions and removals now synchronize across running instances without overwriting concurrent config changes. (#72, closes #71)
File actions and diff previews treat filenames literally. Rename operations handle both paths, and discard refuses to overwrite a file recreated at the original path. (#74, closes #73)
Late graph and GitHub responses cannot reopen closed details or show content from another repository or filter. Graph refreshes preserve pending updates and rebuild search matches. (#74)
Small terminal layouts and long Unicode error messages no longer crash the app. Commit messages remain readable in narrow layouts. (#74)
Status includes file-type changes and supports bare repositories. Pinned linked worktrees receive Git metadata updates. (#74)
Configured file openers use a directory as their working directory, review commands expand their base ref, and Windows launcher and watcher paths use compatible spellings. Removing one repository preserves others with the same name. (#74)
Changed
[2 lines not shown]
audio/spotify-player: update to 0.25.1
v0.25.1
What's Changed
add a config option for configuring ncspot-only GET endpoints by @aome510 in #1079
chore(nix): update flake inputs by @DOD-101 in #1023
Update get-playlist-items and get-user-top-tracks API handling by @aome510 in #1080
update audio vis default to use theme palette's color instead of hard-coded rgb by @aome510 in #1081
render loading UI for search page by @aome510 in #1082
v0.25.0
Highlights
v0.25.0 focuses on more reliable Spotify Web API access. Custom client IDs are now supported with automatic fallback to the bundled ncspot client when Spotify rejects restricted requests, alongside improved rate-limit handling.
Breaking change: #1077 updated how cache token for Web API is stored so users will be prompted for re-authentication when running the new release. Because of the recent rate-limit issue, it's recommended for users to setup a custom client ID to avoid rate-limit issues with the default shared ncspot client
What's Changed
[9 lines not shown]
py-cheroot: updated to 11.1.2
v11.1.2
Bug fixes
The “service unavailable” thread is now turn down properly when the server is shut down – by @itamarst.
This fixes a regression in Cheroot originally introduced in v11.0.0 that would manifest itself under Python 3.12 and older. In certain conditions like under CherryPy, it would also lead to hangs on tear-down.
v11.1.1
Packaging updates and notes for downstreams
The packaging configuration has been fixed to ensure that only cheroot package will be installed into site-packages/ – by @webknjaz.
This fixes a regression introduced in version 11.1.0.
v11.1.0
Features
Added optional private key password argument to SSL adapters to support password-protected private keys – by @jatalahd.
