x11/picom: update to 13
pkgsrc: now that 9 was deprecated this can be imported.
IIRC it should build with 10 default gcc.
v13
(see also: v13-rc1)
v13-rc1 (2025-Dec-09)
New features
Separate the "geometry" animation trigger into "size" and "position" to allow finer-grained control. "geometry" is kept as an alias for setting both "size" and "position".
Add a "urgent" target that can be used in rules to match urgent (according to ICCCM) windows. (#1445)
New "shadow-color" per-window option can now be used in rules to give each window a different shadow color. (#257)
Added new animation trigger color, which can now be used to transition window shadow-color changes. (#257)
Add support for using custom shaders when rendering the desktop background. (#1440)
New variables "window-blur-opacity-before", and "window-blur-opacity" are now available in animation scripts. (#919)
New per-window option blur-opacity can now be used in rules. (#919)
Macro definitions can now be specified when setting shader in window rules. (#1066)
[187 lines not shown]
misc/rozi: update to 0.0.28
Added
You can unlock a checkout with Ctrl+U in the Worktrees picker or rozi worktrees unlock <PATH>. For a stale-locked checkout, confirm its removal with Ctrl+K in the picker or the sidebar remove action. (#84)
The Agents view can list each Claude Code conversation under its own repository and branch, alongside the hook state for the conversation it follows. (#85)
Sessions has a tab for each host in use. The active tab scopes session listing and session creation, including Ctrl+N, Ctrl+T, and Ctrl+X. (#87)
You can opt in to keeping a host awake while agent runtimes are Working with [session] keep_awake_while_agents_work = true or Settings → Sessions → Keep awake while agents work. It is disabled by default. (#90)
Changed
The remote install dialog presents host, destination, and version as labeled rows. The destination shows the managed install path with the home directory shortened to ~. During installation, the host shows an installing… status in the Remote hosts picker and sidebar. (#83)
Worktrees picker rows show the branch with the path and state in one description. The picker can grow to 160 columns, within the viewport. (#89)
Fixed
Interactive clients and CLI commands can prompt for SSH authentication by default, including host-key approval. Commands without a UI broker or terminal, background monitoring, and explicit batch_mode = true remain noninteractive. (#82)
In Remote hosts, Enter connects to a disconnected or unreachable host, and Ctrl+R is unavailable. For a reached or connected host, Enter opens its sessions and Ctrl+R reconnects. (#86)
The command palette lists Worktrees only when the focused pane has an attached session on a repository and is not on a nested SSH host. A key bound to open-worktrees still runs and explains why Worktrees is unavailable. (#88)
[6 lines not shown]
audio/ncspot: update to 1.5.0
Added
Vim-like command completion by pressing Tab
Support Vim-style numeric count prefixes for keybindings (e.g. 10j moves
down 10 rows); the pending count is shown in the status bar
Add a proxy configuration option that routes all of ncspot's network
traffic (access point, Spotify APIs, OAuth and cover art downloads) through
a single proxy. Supports HTTP CONNECT proxies and SOCKS5 proxies with
remote DNS resolution (socks5h://), both with optional credentials.
Without this option, the http_proxy environment variable is still
honoured as before.
Replace already existing queue notifications instead of stacking new ones.
What's Changed
chore(deps): bump log from 0.4.33 to 0.4.34 in the cargo group by @dependabot[bot] in #1865
chore(toolchain): update by @hrkfdn in #1864
[9 lines not shown]
chromium: update to 154.0.8037.97
* 154.0.8037.92
This update includes 32 security fixes. Please see the Chrome Security Page for more information.
[TBD][551673541] Critical CVE-2026-102331: Buffer overflow in ANGLE. Reported by @mfx on 2026-08-24
[N/A][517312707] High CVE-2026-102317: Improper privilege management in Mojo. Reported by Google on 2026-05-28
[TBD][551668264] High CVE-2026-102312: UI misrepresentation in Omnibox. Reported by jodyritonga on 2026-08-24
[N/A][556789073] High CVE-2026-102313: Uninitialized resource in ANGLE. Reported by Google on 2026-09-03
[TBD][556908674] High CVE-2026-102299: Type confusion in V8. Reported by Andrew Boni on 2026-09-04
[N/A][556926296] High CVE-2026-102306: Use after free in Bluetooth. Reported by Google on 2026-09-04
[N/A][556959073] High CVE-2026-102307: Uninitialized resource in Dawn. Reported by Google on 2026-09-04
[TBD][559266114] High CVE-2026-102323: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-10
[N/A][559727039] High CVE-2026-102303: Uninitialized resource in GPU. Reported by Google on 2026-09-10
[N/A][559737160] High CVE-2026-102311: Uninitialized resource in GPU. Reported by Google on 2026-09-10
[TBD][560062638] High CVE-2026-102300: Uninitialized resource in WebGPU. Reported by Arni Hardarson (Neonix Security) on 2026-09-11
[TBD][560233248] High CVE-2026-102326: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-11
[TBD][560238698] High CVE-2026-102316: Use after free in Views. Reported by Xinyang Ge on 2026-09-11
[TBD][560251736] High CVE-2026-102304: Use after free in Passwords. Reported by Xinyang Ge on 2026-09-11
[22 lines not shown]
finance/rex: update to 0.3.0
Updates
A new recurring transaction option on u key press
The initial page has been updated to contain different info
Fixed transaction swapping not working when there are exactly 2 transactions
Stepping date on empty field now fills up the current local date
Terminal opener now supports more terminals
A new migration that fixes any corrupted balance in the db
Changes
Recurring tx by @TheRustyPickle in #135
Migration by @TheRustyPickle in #136
py-apycula: updated to 0.33
0.33
GW5A. Enable more CLKDIV2/CLKDIV
Take into account the I/O used.
Set CE mux for DFFs.
Add some notes for the emcu primitive of the GW1NSR
CMake Yosys
Hyperram pins constraints
dat_parser: support partType-1 .dat files
GW1N-2. Recognize device + build chipdb
GW1N-2. Pinout, IO config, OSC
Fix ram pins.
Change io standard in examples.
Fix HCLK pip fuses.
gowin_pack: add multiboot address support
Rewriting gowin_pack
Add GW5AT-60B.
py-imageio: updated to 2.38.0
2.38.0
Bug
Implement SeekableFileObject.readline for Pillow HTTP streams
Multi-frame writes through pyav fail with av 18.1.0
Solve "prefer_uint8=False upcast uint8 to int16"
Doc
Document the actual return value of immeta
Feat
V3 Plugin for pydicom
Maint
[6 lines not shown]