anubis: improve the RC script
This change makes it clearer that the service is actually trying to
start. While there, it also avoids error messages when the RC script is
executed from a directory outside the reach of the anubis user.
Bumps PKGREVISION.
"commit it!" bsiegert@
Tested on NetBSD/amd64.
e2guardian: update to 5.5.9r
Changes since 5.5.6r:
version 5.5.9r
April 2025 to August 2025
License change and documentation tidy up.
Gitlab - Update expire artifacts
Gitlab - Reduce simultaneous compilation
Fix #845 correct auto-gen start/end cert dates to use UCT.
Fix #844 Authority Key Identifier now generated for server certificate
version 5.5.8r
December 2024 to April 2025
[24 lines not shown]
cargo-llvm-lines: added version 0.4.48
This tool measures the number and size of instantiations of each generic
function in a program, indicating which parts of your code offer the highest
leverage in improving compilation metrics.
Generic functions in Rust can be instantiated multiple times, so they can
disproportionately affect compile time, compiler memory usage, and the size of
compiled executables.
devel/gobject-introsspection/DESCR: Say what's in the package
This package provides tools, which is not surprising. It provides
gir/typelib files for GBus, libxml2 and a number of other libraries,
which is surprising. More surprising, it does not provider
gir/typelib files for glib2 itself, which provides "gobject".
firefox153: update to 153.5
Mozilla Foundation Security Advisory 2026-108
Security Vulnerabilities fixed in Firefox ESR 153.5
Announced
October 13, 2026
Impact
high
Products
Firefox ESR
Fixed in
Firefox ESR 153.5
Note: We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.
#CVE-2026-109704: Privilege escalation in the Application Update component
Reporter
[546 lines not shown]
py-pydantic-settings: updated to 2.15.0
2.15.0
Highlights
Behavior changes
case_sensitive now applies to init kwargs and config-file sources. InitSettingsSource and the JSON/TOML/YAML config sources previously ignored case_sensitive. Since it defaults to False, case-insensitive matching is now the default for these sources — e.g. Settings(TeSt=...) now populates a test field where it previously did not. Nested keys are still matched case-sensitively.
Fields with unresolved forward references now emit a warning. Settings sources can silently fail to resolve such fields; they now raise IncompleteFieldDefinitionWarning telling you to call model_rebuild(). If you have filterwarnings = error configured, this may surface as a new failure.
Non-JSON env values for strict fields now raise ValidationError instead of a less specific error.
New features
Show environment variable names in CLI help via cli_show_env_vars=True, so generated --help output doubles as configuration documentation.
PYDANTIC_SETTINGS_DEBUG for debugging settings resolution. Set it to a truthy value with DEBUG logging enabled to see each source's contribution in priority order, which source won for each value, and which env_file/secret files were probed, loaded, or skipped — the long-standing "why isn't my .env being picked up?" question.
toml_table_header for regular TOML files, letting you root settings at a nested table in any TOML file, not just pyproject.toml.
Traversable support for JSON/TOML/YAML file sources, so you can load config packaged inside a distribution — including files inside a zip or wheel — via importlib.resources.files(...) without casting to Path.
GCP: project_id can come from an earlier settings source, rather than only from the constructor or GOOGLE_CLOUD_PROJECT.
py-truststore: updated to 0.10.5
0.10.5
Take the context lock in wrap_bio() as wrap_socket() does
Add validation for server_hostname and check_hostname for wrap_socket…
Add explicit support for Python 3.15
Mitigate thread safety issues during handshakes
py-validators: updated to 0.36.0
0.36.0 (2026-10-10)
_**Breaking**_
* Drops support for Python `v3.9` and `v3.10`. Python `v3.11` or newer is required.
* Stricter validation: the following inputs, previously accepted by mistake, are now rejected.
* `isin()` now verifies the check digit, which was previously ignored. Lowercase ISINs are still accepted.
* `cusip()` and `sedol()` require a numeric check digit.
* `md5()`, `sha1()`, `sha224()`, `sha256()`, `sha384()`, `sha512()`, `base16()`, `base32()`, `base58()` and `base64()` reject trailing characters, such as a trailing newline.
* `ind_pan()` requires a full-string match.
* `fr_ssn()` no longer accepts a comma as the gender or Corsica department character.
* `domain()` rejects an underscore in the last label
* `mastercard()` accepts only the 2221-2720 range of the 2-series BINs.
* `eth_address()` rejects non-hexadecimal characters.
* `mac_address()` rejects mixed separators.
* `slug()` rejects a trailing newline, and telnet URIs reject control characters.
[9 lines not shown]
py-braintree: updated to 4.47.0
4.47.0
Fix path traversal vulnerability in CreditCard, CreditCardVerification, Customer, MerchantAccount, PayPalAccount, PaymentMethod, PaymentMethodNonce, Plan, SepaDirectDebitAccount, Subscription, Testing, Transaction, TransactionLineItem, UsBankAccount, and UsBankAccountVerification gateways by validating that IDs used in request paths do not contain path separators or relative-path segments
Add ach_type to transaction search
Add surcharge_amount to Transaction.refund()
