routinator: Update to version 0.15.3
Security fixes
Switched to always caching CRL serial numbers to avoid a potential resource exhaustion through re-decoding the list over and over. (#1130)
Output individual payload items to HTTP clients or disk instead of building the whole set in memory first. (#1131)
Avoid stack overflow when releasing a payload set by implementing a non-recursive Drop for PayloadInfo. (#1132)
Added a timer to the HTTP/1 connection establishment to prevent indefinite task blocking in the HTTP server. (#1133)
Added a way to deal with manifest file names clashing with directory names of publication points by ignoring the colliding publication point. (#1134)
A fetched TA certificate is now only stored if it is found to be valid. This avoids overwriting the last known good certificate. (#1135)
Added a check to the RRDP collector that the list of deltas is consecutive rather than happily processing non-consecutive lists. (#1139)
Updated rpki-rs to 0.20.0. This version also includes a number of security fixes. See its release notes for more information.
Improvements
Move the stored RRDP archive to a temporary place before updating to avoid a partially updated state if processing aborts. (#1136)
Added a check that the authority key identifier of a CRL matches the subject key identifier of the issuing CA certificate. (#1140)
Bug fixes
Skip publication points that have never succeeded during dump. Previously, such a publication point would lead to a crash. (#1137)
Reject CRLs that have a thisUpdate field in the future. (#1138)
[6 lines not shown]
Add support for changing the mode on PCF8583 RTC chips.
Add mode 2 (counter) support and support devices at I2C address 0x51.
From Dave Tyson in PR kern/60700.
py-djangocms-video: updated to 3.2.0
3.2.0
Bump sqlparse from 0.4.4 to 0.5.0 in /tests/requirements
Bump django from 3.2.20 to 3.2.25 in /tests/requirements
feat: modernize test setup to match djangocms-frontend constraints
feat: include 5.1 alpha in test matrix
chore: upgrade GitHub Actions versions
feat: Add referrer policy to iframe in video player template
ci: Replace isort and flake8 with ruff check
ci: add Python 3.15 to CI
fix: Fixed Vimeo video URL embedding
docs: clarify configuration and show published supported versions
feat: Implemented HLS stream source as new plugin type
chore: Prepare release 3.2.0
py-gcovr: updated to 8.8
8.8
New features and notable changes:
Change the breadcrumbs of in the source view of the GitHub theme.
Bug fixes and small improvements:
Fix removing coverage for internal functions in C sources.
Fix release pipeline to upload standalone applications for MacOs again.
Internal changes:
Add zizmor to scan pipeline for security issues.
Add dependabot configuration for version updates.
Change exclusion handling to use a data class instead of simple integers.
Add nox session to cleanup duplicate reference data and notify session after import.
Pull up following revision(s) (requested by gdt in ticket #1407):
sys/net/if_tun.c: revision 1.179
sys/net/if_tun.c: Drop spurious EAFNOSUPPORT
When an outgoing packet is put in the queue, that might fail, and if
so the error will almost certainly be ENOBUFS. Let that error be
returned, rather than inexplicably forcing it to be EAFNOSUPPORT.
(EAFNOSUPPORT is returned nearby in the code for other cases, such as
when sending a packet that isn't IPv4, without specifying one of the
ways to encode the address family. The change in this commit is
entirely unrelated to that use of EAFNOSUPPORT.)
The specific problem was identified by Bill Green. Tested in NetBSD
11 context by Matti Andreas K=C3=A4h=C3=A4ri as reported on netbsd-users@.
Pull up following revision(s) (requested by gdt in ticket #564):
sys/net/if_tun.c: revision 1.179
sys/net/if_tun.c: Drop spurious EAFNOSUPPORT
When an outgoing packet is put in the queue, that might fail, and if
so the error will almost certainly be ENOBUFS. Let that error be
returned, rather than inexplicably forcing it to be EAFNOSUPPORT.
(EAFNOSUPPORT is returned nearby in the code for other cases, such as
when sending a packet that isn't IPv4, without specifying one of the
ways to encode the address family. The change in this commit is
entirely unrelated to that use of EAFNOSUPPORT.)
The specific problem was identified by Bill Green. Tested in NetBSD
11 context by Matti Andreas K=C3=A4h=C3=A4ri as reported on netbsd-users@.
Pull up following revision(s) (requested by riastradh in ticket #1406):
usr.sbin/postinstall/postinstall.in: revision 1.56
usr.sbin/postinstall/postinstall.in: revision 1.57
usr.sbin/postinstall/postinstall.in: revision 1.73
postinstall(8): Modify default certs.conf.
When manually configured /etc/openssl/certs is detected, just
uncomment the `#manual' line in the default certs.conf rather than
writing a new one. That way, you can switch to certctl-managed and
still get the default path by just deleting /etc/openssl/certs and
re-commenting the `manual' line.
postinstall(8): Use /usr/sbin/certctl.
Obviates need to have /usr/sbin in PATH when running this.
[7 lines not shown]
py-jupyterlab: updated to 4.6.5
4.6.5
Bugs fixed
- Restrict path suggestions to the file dialog root
- Fix find in the JSON viewer
- Fix editor rulers drawn at the wrong columns when the code font loads late
- Fix "New Python File" appearing twice in the file browser context menu
- Upgrade `@codemirror/view` to 6.43.15, fixing text loss when typing with dead keys
- Fix React toolbar items flickering when they move into the "More commands" menu
- Brighten mirror-editor attribute color in the dark themes
- Fix memory leaks affecting common everyday use scenarios
- Fix settings search for properties nested in object settings
- Backport: Avoid rerendering Markdown preview on tab switch
- Fix toolbar items incorrectly wrapping rather than collapsing into Mode commands menu
- Do not open a second tab on reload for a file open in another view
- Fix dropped debugger requests when the session connection is reassigned
[29 lines not shown]
py-maturin: updated to 1.16.0
1.16.0
* Update version mapping for GraalPy 3.13
* Properly normalize / validate abiflags and include in environment signature
* Fix MinGW stable ABI library names in generated PyO3 config
* Fix: lossy-decode external command output in interpreter discovery
* Build(deps): update rustls for RUSTSEC-2026-0285
* Ci: run conda tests one at a time
* Include SOABI_PLATFORM in Python 3.15 stable ABI extension filenames
* Sort compressed tag sets
* Update manylinux/musllinux policies to the latest main
* Docs: recommend declaring the Rust MSRV
* Emit a WASI platform tag for non-bin extension wheels
* Don't include the cargo target directory or cache directories in wheels built from sdists
* Fix: avoid global uv fallback in pixi environments
* Fix the cargo-deny advisories that fail Lint
* Find versioned interpreter names like `pypy3.11` on Windows
[14 lines not shown]
Pull up following revision(s) (requested by riastradh in ticket #563):
usr.sbin/postinstall/postinstall.in: revision 1.73
postinstall(8): Do obsolete _then_ opensslcertsrehash.
Otherwise any certificates removed by an update will remain in
/etc/openssl/certs/ca-certificates.crt, which is very bad!
PR bin/60932: postinstall obsolete + opensslcertsrehash interact badly
Pull up the following, requested by mrg in ticket #562:
external/mit/brotli/dist/BUILD.bazel up to 1.1.1.1
external/mit/brotli/dist/c/common/dictionary_inc.h up to 1.1.1.1
external/mit/brotli/dist/c/common/shared_dictionary.c up to 1.1.1.1
external/mit/brotli/dist/c/common/shared_dictionary_internal.h up to 1.1.1.1
external/mit/brotli/dist/c/common/static_init.h up to 1.1.1.1
external/mit/brotli/dist/c/dec/prefix.c up to 1.1.1.1
external/mit/brotli/dist/c/dec/prefix_inc.h up to 1.1.1.1
external/mit/brotli/dist/c/dec/static_init.c up to 1.1.1.1
external/mit/brotli/dist/c/dec/static_init.h up to 1.1.1.1
external/mit/brotli/dist/c/include/brotli/shared_dictionary.h up to 1.1.1.1
external/mit/brotli/dist/docs/brotli.svg up to 1.1.1.1
external/mit/brotli/dist/scripts/download_testdata.sh up to 1.1.1.1
external/mit/brotli/dist/tests/testdata/zerosukkanooa.compressed up to 1.1.1.1
external/mit/brotli/dist/tests/cli_test.sh up to 1.1.1.1
external/mit/brotli/dist/SECURITY.md up to 1.1.1.1
external/mit/brotli/dist/.bazelignore up to 1.1.1.1
external/mit/brotli/dist/CHANGELOG.md up to 1.1.1.1
[130 lines not shown]
