p5-Net-OAuth: update to 0.33.
0.33 Mon 17 Aug 23:14:01 BST 2026
[Security]
- Restrict the verification algorithm to those specified in the allowed_signature_methods, which is
now required. THIS IS A BREAKING CHANGE.
See https://github.com/vurtdev/Net-OAuth/security/advisories/GHSA-c8rm-g5cm-4pf5 (CVE-2026-72889)
for more information.
- HMAC_SHA1 and HMAC_SHA256 signature keys cannot be blank.
- HMAC_SHA1, HMAC_SHA256 and PLAINTEXT signature verification now use constant-time comparison (CVE-2026-75589).
[Documentation]
- Updated the GitHub repository location, which moved before the version 0.32 release.
(The former location does redirect to the new location.)
- Removed CONTRIBUTING.md due to changes in the AI policy.
[2 lines not shown]
py-icalendar: update to 7.3.0.
Removals and deprecations
obj is deprecated in favor of bytes. It is retained as a lossy
string view of the value for backward compatibility, and will
be removed in icalendar 8. The
test_ical_value_rejects_non_base64_characters test was removed
because vBinary.ical_value no longer validates or decodes
Base64. @uwezkhan (Issue #1356)
Issue #1362
New features
Created an example() method for the Journal component and an
example() method for the FreeBusy component, added the RFC 5545
examples that they load, and documented their usage in both
class docstrings. AI assistance: Kiro CLI with the claude-opus-5
[182 lines not shown]
gettext-tools: do not autodetect libcurl and libjson-c
Fixes build on OpenIndiana. The libraries are shipped
with base but at least some of the headers seem absent.
ibus: regenerate tools Vala sources before build
The generated tools/main.c in the distfile may contain Wayland code
even when ibus is configured with --disable-wayland, causing the build
to fail due to missing wayland headers or libraries.
Clean the generated sources before build so they are regenerated
with the current configure options, as already done for ui/gtk3.
This should fix workaround for PR pkg/60476 on pkgsrc-2026Q2.
ibus: use common Wayland platform detection
Remove the temporary NetBSD native X11 workaround and rely on
PLATFORM_SUPPORTS_WAYLAND.
Native EGL support is now handled by graphics/MesaLib/features.mk, so
the additional libglamoregl.so check is no longer needed. PR pkg/60476
Bump PKGREVISION.
gtk3: remove NetBSD-specific Wayland workaround
MESALIB_SUPPORTS_EGL now handles native EGL support correctly on
NetBSD, so PLATFORM_SUPPORTS_WAYLAND already excludes systems where
the native libepoxy has no EGL support.
Remove the additional libglamoregl.so check added in PR pkg/60295.
The file is part of the xserver set, so checking for it incorrectly
disables Wayland on bulk build hosts where the xserver set is not
installed. PR pkg/60476
Bump PKGREVISION.
graphics/MesaLib: improve native EGL detection on NetBSD
For native X11 on NetBSD, use HAVE_XORG_EGL when it is available
instead of only checking for the EGL header.
On older NetBSD releases without HAVE_XORG_EGL, use HAVE_XORG_GLAMOR
as a fallback, since native libepoxy EGL support was conditional on
GLAMOR there.
This is a proper fix for PR pkg/60295 and makes MESALIB_SUPPORTS_EGL
reflect the actual native EGL support more accurately.
PR pkg/60476
devel/cargo-about: update to 0.9.2
0.9.2 - 2026-08-18
Fixed
PR#312 changed processing of detected license files so that they are never discarded, resolving #309.
mk: Introduce support for ULIMIT_PRECMD.
While this has potential to run any pre-command, it is primarily useful as a
hook to insert ulimit(1) commands that will apply to shell commands, hence
the name.
In bulk builds there will occasionally be packages that end up spinning on
CPU and hanging the build until the user has a chance to kill the process.
For some builds this is desirable so that the issue can be debugged, but for
others the user may prefer to avoid having to interact with the build to get
it to complete, in which case they can set this to e.g. "ulimit -S -t 3600".
py-cachelib: updated to 0.15.4
Version 0.15.4
- Fix dumps in ``RedisCache`` to not use pickle for integers,
so they remain compatible with the native ``INCRBY``/ ``DECRBY``
operations used by :meth:`inc`/:meth:`dec`. :pr:`496`
Version 0.15.3
- Fix ``MemcachedCache`` ``inc`` and ``dec`` methods double normalizing keys. :pr:`495`
Version 0.15.2
- Fix ``libmc`` in ``MemcachedCache`` no reserve nor blocking. :pr:`493`
[13 lines not shown]
py-lxml: updated to 6.1.2
6.1.2 (2026-08-18)
Bugs fixed
* Some build files were missing in the sdist.
Patch by Nicola Soranzo.
* Some minor corrections for error handling cases.
Other changes
* Built with Cython 3.2.9.
Update to 0.77.2
Upstream changes:
## 0.77.2 - Sun 26 Jul 2026
* Let find show selected text or word at cursor
* Fix bug with Tab key behavior
* Set prgname to application ID
* Merge translations
## 0.77.1 - Fri 17 Jul 2026
* Fix commandline search
* Fix window geometry and positioning
* Fix config dirs initialization for windows install
* Add menu items in editbar to toggle checkboxes
## 0.77.0 - Thu 11 Jun 2026
* Merge markdown support as source format for notebooks (experimental)
* Allow multiple source formats in one notebook
* Refactor page search to be extendable improve speed
[118 lines not shown]
Update to 0.002006
Upstream changes:
0.002006 2026-04-28 22:09:45-07:00 America/Los_Angeles
- Add [PruneCruft] to dist.ini so blib/ and pm_to_blib are excluded
from the released tarball (GH #1)
- Drop the "< 100 GB sanity" upper bound on rss/size in t/ps.t real
collect subtest; macOS reports virtual size well above 100 GB,
causing spurious failures (GH #3)
0.002005 2026-04-26 01:49:37-07:00 America/Los_Angeles
- Replace defined-or (//) operator with explicit defined() checks so
the module loads on the declared MIN_PERL_VERSION 5.008009
- Use 'ps -o rss= -o vsz= -p $$' instead of 'ps -o rss=,vsz= -p $$'
so FreeBSD's ps parses the format string correctly (it treated
the comma as part of the rss= header)
- Force the linux _collect_proc collector inside t/memusage.t so
the mocked t/procfile drives the assertions on every host (the
previous mock was ignored on *BSD/Solaris/MSWin32, which used
their native collectors and produced unrelated values)
[77 lines not shown]
