jj: updated to 0.45.1
0.45.1 - 2026-09-03
This release fixes an error that prevented the new jj-core crate from being
published.
Fixed bugs
* Building without `Cargo.lock` (e.g. `cargo install jj-cli`) works again
after all versions of the `bisync` crate, a transitive dependency of gix,
were yanked.
* Signatures on commits in SHA-256 Git repositories are now stored under the
`gpgsig-sha256` header, as Git does, so Git recognizes them as signed and
jj can read them back.
openvpn: updated to 2.7.7
Overview of changes in 2.7.7
Security fixes
- reliability layer: Avoid unbounded reliable TLS timeout (CVE-2026-84732)
- reliability layer: Ignore acks for packets that cannot be outstanding
(CVE-2026-84732)
- Windows: fix ``CreateProcess()`` command line quoting for characters that
are special to ``cmd.exe`` and where a combination of validation script
plus rogue CA could lead to misbehavior (CVE-2026-84256)
- Windows: fix ``tapctl`` to always call ``netsh.exe`` with full path
(as we do elsewhere) (CVE-2026-84226)
- Windows: don't use NULL DACL with system objects, namely the
[77 lines not shown]
powerdns-recursor: Update to 5.4.6
Released: 3rd of September 2026
Improvements
Skip unexpected tags when deserializing protobuf messages
References: #17869, pull request 17967
Store scope zero replies in packetcache and modify on retrieval.
References: #17897, pull request 17968, pull request 17983
Update our Rust deps.
References: #17696, pull request 17969
Make getOpenFileDescriptors fast under Linux.
M
M
References: #17973, pull request 17996
openjdk8: Restore SunOS support.
Add a big XXX comment to patch-common_autoconf_generated-configure.sh
explaining why generation for it is currently broken.
dnscontrol: Update to 5.0.3
Changelog
Provider-specific changes:
c1ebdb1: BIND: BUGFIX: SOA not incrementing on the existing zone (fixes #4840) (#4842) (@TomOnTime)
90984bb: BUNNY_DNS: Fix TXT record creation (#4839) (@TomOnTime)
c798fcb: LINODE: Add support for TTLs of 30s and 120s (#4835) (@dairiki)
f96fde4: LINODE: BUGFIX: too picky about hyphens in names of SRV records (#4828) (@TomOnTime)
Dependencies:
b6ce13f: CHORE: Update dependencies (#4843) (@TomOnTime)
Other changes and improvements:
34db875: BUG: SPF flattening removes redirect= modifiers that an "all" mechanism ignores (#4634) (@shuvamk)
0d6fe4b: CHORE: Upgrade to glob v1 (#4841) (@TomOnTime)
162a39b: Potential fix for code scanning alert no. 50: Cache Poisoning via execution of untrusted code (#4837) (@TomOnTime)
5196387: Release v5.0.3 (#4844) (@TomOnTime)
genpasswd: Honor LDFLAGS
This also fixes actual build issues on platform that enable RELRO where it
previously failing with:
ERROR: bin/genpasswd: missing RELRO
Noticed by <martin>, thanks!
PKGREVISION++
py-hypothesis: updated to 6.167.1
6.167.1 - 2026-08-30
This patch improves shrinking and generation for collection strategies which reject some drawn elements, such as lists() with unique=True. Rejected elements are now marked as discarded, so the shrinker can delete them wholesale and generation avoids revisiting choices that would be rejected again.
6.167.0 - 2026-08-30
Test case observations from observability now give more detail about why a test case failed or was abandoned. metadata includes a new status_reason_location key: a filename:lineno location for the status_reason, if known - for example the location of a failing assume() call, the .filter() call whose predicate rejected the last drawn value, or the exception for failing tests.
Test cases which exceeded the maximum allowed size now also report a nonempty status_reason.
py-inline-snapshot: updated to 0.35.4
0.35.4 — 2026-08-11
Fixed
- Prevented `--inline-snapshot=trim` from changing snapshots when a test body
fails or pytest is limited with `-k`, a test path, or a test node ID. Skipped
tests and fixture teardown errors do not prevent trimming. A message now
explains why trimming was disabled when it was requested implicitly. An
explicit `--inline-snapshot=trim` overrides this safeguard.
- Fixed a crash during session finalization when pytest's capture plugin is disabled.
py-bitarray: updated to 3.11.0
3.11.0
* add run-length codec: `util.rl_encode()` and `util.rl_decode()`
* add `util.sc_stat()`
* add [Comparison of bitarray codecs](codecs.rst) documentation
* optimize sparse block selection for trailing zeros
* preserve bitarrays when buffer reallocation fails
* consistent input validation for large `util.sum_indices()` inputs
* improve sparse-compression and debug-mode tests, including new tests
for slice adjustment `adjust_slice()`
* move private `sysinfo()` and `ssqi()` out of the top-level namespace
py-jwcrypto: updated to 1.6.0
1.6.0
This release fixes CVE-2026-84185, a low security issue that affects only very
specific and uncommon uses of the JWS interface using a JWKSet.
py-djangocms-link: updated to 5.2.0
5.2.0 (2026-07-07)
* feat: Reactivated localizations
* feat: Rename Link model `target` attribute to `link_target`
* fix: Optimized multi-qs evaluation for search fields
* fix: Show internal links in the language of the plugin
py-django-cms: updated to 5.1.2
5.1.2 (2026-08-27)
Features:
* Support Content Security Policy nonces introduced in Django 6.1
Bug Fixes:
* Enforce placeholder permissions on the edit and view endpoints
* Fix ``GrouperModelAdmin`` ignoring the read-only context for content objects without a language
field
* Prevent a manually entered page slug from being overwritten when changing the page title
-- Fabian Braun
* Avoid needlessly clearing the permission caches on Django 6.1 signals
* Allow copying plugins from write-protected (published) content
* Harden the toolbar JavaScript
* Require permission to change the previous home page before setting a new one
* Fix copying a page dropping its login-required property
* Limit the number of plugins displayed in the plugin deletion confirmation
[3 lines not shown]
py-test-rerunfailures: updated to 16.6.1
16.6.1 (2026-09-03)
Bug Fixes
- Ensure teardown reports are passed to ``pytest_runtest_logreport`` for rerun
attempts.
- Prevent superseded built-in subtest failures from remaining in the final test
result when rerunning tests with pytest-xdist.
- Restore module, class, and session scoped fixture teardown when a ``flaky``
marker condition is falsy.
- Restore module, class, and session scoped fixture teardown when an error
raised during teardown rules out a re-run.
- Keep module, class, and session scoped fixtures alive across re-runs of a
test whose call phase failed through subtests only.
- Authenticate xdist StatusDB connections with a per-session token.
- Ensure negative rerun counts do not skip the initial test execution.
[3 lines not shown]
py-crc: updated to 8.0.0
8.0.0
Breaking Changes
Remove Python 3.8 - 3.10 support
Documentation
Fix parameter name in documentation
Internal
Switch from poetry to uv
