p5-Data-Entropy: update to 0.010.
0.010
[Security]
- The RandomOrg and RandomnumbersInfo sources were not properly fixed in 0.009, and have been removed.
The concept of downloading random data from an external source is flawed.
- This module has been deprecated since version 0.008. Please use an alternative such as
Crypt::URandom, Crypt::SysRandom or Crypt::PRNG.
This now uses Devel::Deprecate to warn loudly about deprecation.
[Documentation]
- Adjusted the Changes file.
0.009
[Security]
- The RandomOrg and RandomnumbersInfo sources now make requests over https. (CVE-2026-18536)
[16 lines not shown]
devel/p5-Devel-Deprecate: import p5-Devel-Deprecate-0.01
Many times we find ourselves needing to deprecate code or have a
deadline and just don't have time to refactor. Instead of trying
to remember about this, posting it to a wiki or sending an email,
it's better to have an automatic way to deprecate something. This
module allows you to do that and embeds the deprecation directly
in the code you wish to deprecate.
As we don't want to break production code, deprecations are only
triggered when running tests.
offlineimap: updated to 8.0.3
OfflineIMAP v8.0.3 (2026-06-08)
This release focuses on security hardening, deadlock prevention, and robustness
improvements. A TLS-stripping attack vector when using STARTTLS has been
closed, a deadlock in connection teardown has been fixed, and several crash and
encoding edge cases have been resolved.
py-pandas: updated to 3.0.5
3.0.5
Fixed a regression where the pandas 3.0.4 wheels could crash with a
segmentation fault on Python 3.14 (and other datetime code paths), because they
were built against an incompatible numpy version (GH 66086)
py-fastbencode: updated to 0.3.11
0.3.11
Add optional max_depth argument to cap nesting depth when encoding and decoding (defaults to unlimited)
Rust backend now encodes and decodes iteratively, avoiding native stack overflow on deeply nested input
Add an encode/decode benchmark script
Dependency updates (ruff, GitHub Actions)
py-markdown: updated to 3.10.3
3.10.3
Fixed
* Fix `SetextHeaderProcessor` regex to prevent mixed `=` and `-` chars in setext-style headers.
* Add AI Policy to Contributing Guide.
* Officially document all included extensions as being in maintenance mode.
* Link the Extension API documentation to the API Reference.
py-peewee: updated to 4.3.0
4.3.0
Backwards-incompatible:
* Specify `requires-python >= 3.8`. I've been putting off committing to
anything like this, since technically we still work on 3.7, but 3.8 is the
minimum we run on CI so it felt correct.
* Replace `docid` implicit primary key on legacy `FTSModel` (FTS4) with
`rowid`, which is equivalent. Using `docid` presents no benefit and
switching to `rowid` makes operations more consistent. Users have a couple
options when updating:
* Explicitly add `docid = DocIDField()` to your FTSModel classes.
* Update your code, replacing `docid` with `rowid`. The underlying data
does not require a migration, as docid was just an alias for rowid.
* When a RETURNING-clause insert of a single row inserts nothing, e.g. a
conflict was ignored, `execute()` returns `None` on every backend.
[59 lines not shown]
