t_arc4random: Fix test to guarantee global state initialization.
Previously, if pthread_atfork failed, arc4random_global_buf would
fail to initialize the global state as intended. (There are separate
tests for intentional failure of global state initialization.) It is
unlikely for pthread_atfork to fail, but with RLIMIT_AS cranked down
to zero, it may. To ensure that the global state is successfully
initialized for the tests that are trying to exercise it, call
arc4random from another thread first before forcing failure of the
local state initialization.
PR lib/59117: arc4random has some failure modes it shouldn't
textproc/treemd: update to 0.10.0
[0.10.0] - 2026-10-18
The TUI is redesigned: seventeen themes held to WCAG contrast, nine of them new and three light, a footer that shows the keys for whatever is open, a mouse that works on the pane under it, and a no-color mode for NO_COLOR.
The query language now behaves like jq: query errors exit 3 or 5, arithmetic follows jq's rules, --query-output json always prints an array, and more. Scripts that use -q should check the Changed section before upgrading.
Fixed
Tables take their natural widths. A column was sized at 70% of its average cell and 30% of its widest, so Previous wrapped in a column beside Next with the pane half empty. A cell holding inline code also lost the space every other cell has and sat against the border
The footer shows the keys of what is open. It knew five modes and showed the main view's keys over help, the pickers, link search and the outline filter, where those keys type or drive the popup. At 60 columns it was cut off before ? help; hints now drop from the end and help stays
Keys that do nothing say why: f in a section with no links, which opened an empty list; ' with no bookmark; b and F with no history; n and N with no search; Enter on a palette that matches nothing. The todo filter says when nothing has an open todo instead of leaving an empty outline, and Esc clears it
Text in popups is readable in every theme. Hints were 1.4:1 in Nord, and help text was the terminal's default gray on light popups, since popups set a background but no text color. A light theme no longer has a dark title bar either: the frame is painted with the theme first
An unknown --theme is an error naming the themes, not a silent fallback to Ocean Dark
The 256-color fallback picks the nearest color. It rounded each channel to a multiple of 51, but the xterm cube's levels are 0, 95, 135, 175, 215 and 255
A paste into a search or the command palette is held to the field's length, as typing already was, so a long paste could not become a query that is re-run on every key
CLI misuse is reported instead of answered. -L 9 was accepted though there is no level 9; -q with -l or -s silently ignored the other flag; -l docs/ printed a made-up # Select a file heading; extra files were silently ignored; and with no input at all, treemd printed its usage and exited 0. These are errors now (exit 2 for usage, 1 for a directory), and extra files get a warning that only the first is read, in the TUI too. The same goes for any two of -l, --tree, -s, --count, --at-line and -q, where all but one used to be ignored, and for --filter, -L, -n and -o without -l or --tree, which were ignored while the TUI opened. -l -o tree prints the tree, as -o always listed it could. A file that cannot be read is named in the error
A fetched document stays remote even if the working directory has a directory named http:, and an uppercase HTTP:// URL is fetched rather than read as a file name. The URL was resolved as a path first, which could make the page count as a local file, its links and images included
Bidirectional override characters in a heading are shown, not applied, when the CLI prints to a terminal. They reorder how a line is drawn, so a heading could display as something other than what it says
[188 lines not shown]
sysutils/onefetch: update to 3.1.0
What's Changed
Bug Fixes
Fix a crash when --ascii-input is empty or only whitespace by @o2sh in #1898
Fix --languages and --ascii-language listing languages in random order, a regression since 2.28.0 by @o2sh in #1890
--number-of-languages now also applies to -o json and -o yaml by @o2sh in #1884
CI/CD
onefetch-ascii, onefetch-image and onefetch-manifest are merged into onefetch and no longer published (last version: 3.0.0) by @o2sh in #1884
Release binaries are built with LTO and stripped on all platforms by @o2sh in #1891
Chores
Replace unmaintained winres with winresource by @o2sh in #1896
shells/oh-my-posh: update to 31.9.0
Bug Fixes
path: cut fish folder names before escaping them (a8c00d8)
segments: fix icon for gradle in exemple (a06e710)
theme: use terminal foreground colors in kali (b093e7a)
Features
jujutsu: expose working copy description (44750b8)
segment: add timewarrior tracking (50262c3)
misc/rozi: update to 0.0.32
Added
The Agents tab lists blocked, failed, and unread finished agents across sessions and connected hosts. The Agents view lists all agents and lets you search and jump to them. Activity groups an agent's runs across panes, and Projects shows agent state. (#183)
The Activity tab can group checkouts under one repository heading. Set worktrees = "repository" in the Activity tab configuration. (#185)
Changed
Files and Git sidebar trees update as files change. File changes appear within about a tenth of a second in open directories, and Git status updates within half a second, including changes under collapsed directories. Remote sessions keep their current behavior. (#179)
Dotfiles and Git-ignored files fade in the Files and Git trees. Git folds single-directory chains into one row. Set compact_dirs = false on the git tab to show every directory on its own row. (#178)
The sidebar tab-cycling and dock-moving actions have been removed. Focus the sidebar with Ctrl+A, B, then use Tab or Shift+Tab to change tabs. In the focused sidebar, Ctrl+Left/Right changes docks and Alt+Left/Right moves the active tab. Bind quit to change the shortcut that replaced detach. (#181)
Fixed
The Worktrees picker and sidebar now find a pull request when a local branch tracks a remote branch with a different name. They also match PRs against the branch on the push remote. (#180)
Workbar clocks that show seconds and Agents and Activity elapsed-time counters now tick on wall-clock second boundaries instead of drifting or skipping a second. (#182)
Agent prompts are submitted as a terminal paste followed by Enter. The first floating pane uses the current viewport size, and local split directories resolve from the caller and selected configuration. (#184)
[4 lines not shown]
py-feedparser: updated to 6.0.14
6.0.14 - 30 July 2026
* Upgrade to feedparser-sgmllib 2.0.0.
6.0.13 - 28 July 2026
* Drop support for Python 3.9 and lower.
* Migrate from ``sgmllib3k`` to ``feedparser-sgmllib``.
* Resolve package build warnings.
py-nbconvert: updated to 7.17.2
7.17.2
Maintenance and upkeep improvements
- Fix CI: fetch the classic CSS from PyPI, update dead links
Other merged PRs
- Use org-level security policy (jupyter/.github/SECURITY.md)
py-paramiko: updated to 5.1.0
5.1.0 2026-10-17
[Feature]: Added support for the mlkem768x25519-sha256 post-quantum hybrid key exchange method described in draft-ietf-sshm-mlkem-hybrid-kex. It pairs ML-KEM-768 (FIPS 203) with X25519 and is interoperable with OpenSSH 10.0+. The new method is enabled automatically when the installed cryptography library exposes ML-KEM (which requires OpenSSL 3.5+, AWS-LC, or BoringSSL); it is preferred over the existing classical methods when available. See paramiko.kex_mlkem.KexMLKEM768X25519.
py-photutils: updated to 3.1.1
3.1.1 (2026-10-16)
General
- Importing the top-level ``photutils`` package and subpackages is now
faster.
Bug Fixes
- ``photutils.aperture``
- Fixed the ``to_pixel`` methods of ``SkyEllipticalAperture``,
``SkyEllipticalAnnulus``, ``SkyRectangularAperture``, and
``SkyRectangularAnnulus`` for an aperture whose position frame
differs from the WCS celestial frame (e.g., ICRS positions with a
Galactic WCS). The rotation angle ``theta`` is again measured in
the frame of the aperture position.
[19 lines not shown]
py-astropy: updated to 8.0.2
8.0.2 (2026-10-15)
API Changes
astropy.wcs
- Integer indices beyond the size of an axis are now rejected when slicing a
``SlicedLowLevelWCS`` with a known shape, as for Numpy arrays. In addition,
``simplify_basic_index`` now accepts `None` entries in ``shape`` for dimensions
whose size is not known, in which case the index for that dimension is
returned unchanged, except that a negative integer or slice start raises a
``ValueError``.
Bug Fixes
astropy.coordinates
[195 lines not shown]
py-narwhals: updated to 2.27.1
2.27.1
fix: return a numeric dtype from str.len_chars on all-null object columns
fix: count characters, not bytes, in str.zfill on Polars < 2.0
