Update to 0.11
Upstream changes:
0.11 Wed Jul 29 2026
Bug fixes to the 0.10 "textsize" work and one older defect:
- The bars are now raised as the text grows, so a large textsize no
longer prints the human readable text over the bottom of the
barcode. Previously anything above about 12 point overprinted,
which is a scanning failure rather than a cosmetic one. GitHub #8.
- The background extension strips are drawn at the height the
background box was actually drawn at, rather than one unit short.
GitHub #8.
- $qrcode is reset between barcodes, so a barcode drawn after a
QRcode in the same process no longer renders down the QRcode path.
GitHub #6.
Output at the default textsize is unchanged.
0.10 Wed Jul 29 2026
Added "textsize" parameter to set the point size of the human readable
text below the barcode. Defaults to 10, so existing output is unchanged.
[3 lines not shown]
Update to 0.788
Upstream changes:
0.788 (07.17.2026) - John Siracusa <siracusa at gmail.com>
* Fixed a bug in refine_dbi_foreign_key_info. (Patch by Bernd Bleßmann)
0.787 (05.04.2026) - John Siracusa <siracusa at gmail.com>
* Adjusted MySQL column auto-generation to better handle the
explicit_defaults_for_timestamp server setting.
0.786 (08.20.2024) - John Siracusa <siracusa at gmail.com>
* Fixed a bug that could cause database passwords to appear in debugging
output when $Rose::DB::Debug was set to a true value. Also added
connection options to the debugging output.
0.785 (02.28.2023) - John Siracusa <siracusa at gmail.com>
* Added timestamps_are_inlined method to DBD::Pg. (Patch
by Ferry Hendrikx.)
0.784 (02.03.2023) - John Siracusa <siracusa at gmail.com>
* Added support for PDBs (Pluggable Databases) to DBD::Oracle. (Patch
by Ferry Hendrikx.)
* Added support for "numeric" booleans to DBD::Oracle. (Patch by Ferry
Hendrikx.)
Update to 0.44
Upstream changes:
0.44 Wed Jul 29 2026
- Embedded TrueType text is now searchable and copyable (GitHub #15,
RT #123564). A /ToUnicode CMap is generated for each embedded font,
covering only the glyphs actually used. Built here rather than via
Text::PDF::TTFont0, whose ToUnicode support emits a malformed CMap
(RT #123562, unfixed upstream).
- Fix "Didn't find pages" when a source filename is reused within one
session (GitHub #21, #22, RT #103758, RT #103768). %processed cached
byte offsets keyed by filename and was never invalidated when the
file behind that name was replaced, so the first file's offsets were
applied to the second file's bytes.
- CI now covers Linux, macOS and Windows again, with per-platform
isolation so one failing cell no longer masks the others
(GitHub #9, #10). Upstream workflow references are pinned to a SHA;
see docs/ci-pin-maintenance.md.
Update to 6.1.0
Upstream changes:
v6.1.0 - 2026-07-19
- groff 1.24.0 broke use of the .IP macro for tag list formatting by
removing the mandatory spacing between the tag and the paragraph. Work
around this by using .TP for lists other than bullet or numbered
lists. Be aware that groff 1.24 and later defaults to a minimum gap of
two spaces between the tag and the paragraph for .TP instead of one
space as in previous pod2man and groff releases. POD documents that want
an indent just wide enough for tags to format on the same line as the
paragraph may need to increase the indent level for the =over command by
one to render as desired with those versions of groff.
- Change the default fixed-width font from CW to CR. This avoids warnings
with groff 1.24.0 or later at the cost of breaking troff output on
Solaris 10. nroff output and troff output on Solaris 11 are
unaffected. The pod2man option --fixed=CW will restore the previous
behavior. Thanks to G. Branden Robinson for the analysis and assistance.
(GitHub #43)
[24 lines not shown]
Update to 0.024
Upstream changes:
0.024 2026-06-13 T. R. Wyant
Remove references to the RT bug tracking system.
Replace wyant at cpan.org with harryfmudd at comcast.net.
Repackage licenses so that GitHub can find them (maybe).
Thanks to Mikko Koivunalho (specifically his blog post
https://blogs.perl.org/users/mikko_koivunalho/2025/11/github-and-the-perl-license.html
for the how-to.
Add SECURITY policy.
No functional changes.
pkgconf: update to 3.0.5.
Changes from 3.0.4 to 3.0.5:
----------------------------
* Correctness fixes:
- Shell quoting and backslash escapes in pc(5) properties are now consumed
once, after variable substitution, instead of while splitting the property
beforehand. Quoting arriving from a variable is therefore treated like
quoting written inline, --variable reports a value as the .pc file spells
it, and fragments are escaped exactly once when rendered. This supersedes
the 3.0.4 fix, which unescaped whitespace at parse time and so hid the
escaping from consumers such as cmake's FindPkgConfig.
See https://github.com/pkgconf/pkgconf/issues/575 and
https://github.com/pkgconf/pkgconf/issues/579.
- Metadata queries no longer consult Conflicts rules between the modules named
on the command line, as reporting metadata does not combine them into a
build. This covers --license, --license-file, --modversion, --path,
--print-provides, --print-requires, --print-requires-private,
[41 lines not shown]
libssh: update to 0.12.1.
version 0.12.1 (released 2026-07-21)
* Security:
* CVE-2026-15370: Stack buffer overflow in SFTP server longname construction
* CVE-2026-59842: Information disclosure via short GSSAPI Curve25519 public key
* CVE-2026-59843: Denial of service via zero advertised channel packet size
* CVE-2026-59844: Denial of service via oversized SFTP read length
* CVE-2026-59845: Denial of service via unchecked ProxyCommand fork() failure
* CVE-2026-59846: Information disclosure via ProxyCommand %r username expansion
* CVE-2026-59847: Integrity downgrade via OpenSSL AES-GCM tag verification
* CVE-2026-59848: Denial of service via SFTP responses with unknown request IDs
* CVE-2026-59849: Denial of service via automatic certificate authentication loop
* CVE-2026-59850: Use-after-free via data callbacks on closed channels
* CVE-2026-59851: Authentication bypass via missing GSSAPI principal check
* Zero-initialize every ssh_string
* Compatibility:
* Fix compatibility with C23 / gcc16
* Allow hybrid ML-KEM key exchange in FIPS mode
[53 lines not shown]
mame: update to 0.289.
After two long months, MAME 0.289 is ready, and it’s an undeniably
massive update! But before we talk about emulation, there are a
few more mundane things to mention. The sdljoy joystick input module
now supports game controllers with up to 128 buttons. Finally,
outputs have been overhauled, improving performance and fixing
issues, but you may need to update your configuration if you’ve
got external programs hooked up, and some artwork files may need
updating.
You’ll notice a number of systems and coprocessor cards based around
NS32000 family CPUs are now working. If you aren’t familiar with
it, the NS32000 architecture was one of the first single-chip CPU
families with a 32-bit ALU. It used a highly orthogonal instruction
set with clear influences from Digital Equipment Corporation’s
earlier work. In retrospect, it didn’t have enough registers, the
instruction encoding was too complex, it took them too long to
overtake Motorola’s 68k family’s performance, and bugs in the
[31 lines not shown]
moor: update to 2.16.2.
2.16.2
Before this release, a file that the syntax highlighter saw as one
single token -- a file holding nothing but a number, for example --
came out with every character in the same color.
With this release, highlighting that would look uniform is skipped and
the text is shown plain. Thanks @knirch for reporting #445!
Also in this release:
On Windows, arrow and function keys now work immediately after
returning from an editor opened with "v", instead of being ignored for
up to a tenth of a second
Faster .zst decompression on arm64 (Apple Silicon), and corrupt .zst
input now reports an error rather than decoding to garbage
Compressed files and streams are now properly closed, so moor no
[31 lines not shown]
