py-fakefs: updated to 6.3.2
6.3.2
Really fixes the regression - the 6.3.1 release did not contain the fix.
6.3.1
Fixes a regression in the latest release causing an exception if django was available.
Fixes
* regression: removed cleanup of django view modules, which has not been working
for some time and now caused an exception (which was caught in the previous versions)
py-cython: updated to 3.3.1
3.3.1 (2026-11-01)
Most of the bugs fixed in this release were regressions in 3.3.0.
Features added
* Declarations for the C99 ``bool`` type in ``<stdbool.h>`` were added.
(Github issue :issue:`8011`)
* Fused function objects are slightly smaller in the Limited API.
(Github issue :issue:`7967`)
* Cython warns when enabling subinterpreter support for modules that cannot
currently support it for technical reasons.
(Github issue :issue:`8006`)
* The shared module is now automatically declared as ``freethreading_compatible`` and sets
[160 lines not shown]
gimp: update to 3.2.8.
Overview of Changes from GIMP 3.2.6 to GIMP 3.2.8
=================================================
Core:
- hicolor/ folder is not mandatory anymore for icon themes.
- Implementation to simulate cross-process transient windows on macOS
now uses the NotificationCenter API instead of the Accessibility one
which was too pervasive (repeatedly asking permission).
- Add DPI information when copying image to clipboard when compiled
with gdk-pixbuf 2.36 with backend supporting "x-dpi" and "y-dpi"
settings (which unfortunately right now means disabling glycin until
it gets support).
- Dashboard now use WorkingSetSize for memory usage on Windows, which
is more accurate.
- Dot to Dot support should now work better even on integer scaling.
- Allow canceling font loading in the middle when quitting GIMP early.
[73 lines not shown]
proc-cli: Add version 2.2.0
proc finds, inspects and stops processes and ports. Target a process by
port (:3000), PID, name or path, see what holds a port and why it is
there, and free it. Commands that change anything ask first, preview
with --dry-run, and print JSON with stable exit codes for scripts.
NetBSD is supported upstream since 2.2.0, whose CI runs the whole test
suite on NetBSD 11. Ports come from sockstat(1) and open files from
fstat(1), both in the base system, so it has no run dependencies.
py-django: updated to 6.1.3
Django 6.1.3 fixes five security issues with severity “low”, one security issue
with severity “moderate”, and several bugs in 6.1.2. It also adds compatibility
with Python 3.15.
p5-CGI: update to 5.02.
5.02 2026-11-03
[ RELEASE NOTES ]
- this is a security release fixing a large number of vulnerabilities,
several of them exploitable by any client against any script. all
users should upgrade
- to fix them some default behaviour has changed, see BREAKING CHANGES
below - most changes only affect malicious or malformed requests, but
please read them before upgrading. where a change could reasonably
affect a legitimate application an opt out or migration path is given
- the minimum *supported* perl version is now 5.10, however the dist
will still install for 5.8 (no guarantees about tests passing however)
[ SECURITY ]
- denial of service:
- CVE-2026-120631: CGI::Cookie->parse (and so CGI->cookie) used a
client supplied cookie expires value as a regex, so a Cookie header
[123 lines not shown]
py-dns: updated to 2.9.2
2.9.2
A maliciously crafted zone file could use a WKS record to consume excessive
memory and CPU, possibly causing the process to exit due to memory exhaustion.
adguardhome: updated to 0.107.80
0.107.80
Security
Go version has been updated to mitigate the possibility of exploiting the Go vulnerabilities fixed in 1.27.3.
Support for Multipath TCP has been disabled to mitigate the possibility of exploiting the vulnerability described in CVE-2026-98432.
security/pkcs11-provider: Wire up tests to softhsm and nss softokn.
Otherwise they don't really test anything! Need at least one PKCS#11
library to test this with. softhsm and softokn from nss are the two
ones supported by the pkcs11-provider tests that I found in pkgsrc;
another, kryoptic, is not currently packaged (and pulls in Rust), so
I left it out for now.
With this, I get:
> Ok: 55
> Fail: 0
> Skipped: 71
