p5-URI: update to 5.40.
5.40 2026-10-19 19:56:29Z
- URI->new no longer dies on malformed geo: URIs; the URI::geo accessors
croak instead (GH#201)
- Fix rel() returning an absolute-path or network-path reference
("/x", "//host/...") when a path has empty segments, so rel()->abs()
round-trips again (GH#205)
5.39 2026-10-19 16:38:21Z
- Reject over-long IDNA labels before punycode encoding or decoding, so
a long non-ASCII host no longer takes seconds to fail (GH#207) (Olaf
Alders)
5.38 2026-10-19 03:58:47Z
- Preserve leading and trailing whitespace in file:// URI paths built from
mac file names; URI::file::Mac supplies its own escaping and so was not
covered by the GH#95 fix (GH#95) (@youdie006)
- Treat a percent-escaped ';' in an smb:// userinfo as part of the
[5 lines not shown]
p5-Sereal: update to 5.011.
5.011
* Robustness fixes. Thanks to Steffen Mueller and kumar-Prakash07.
* Preserve zstd deprecation warnings when building with IBM XL C on AIX.
* Raise the minimum supported Perl version to 5.14.
* Fix the Sereal::Decoder prerequisite version in generated Sereal-Encoder
package metadata. See https://github.com/Sereal/Sereal/issues/317
devel/serie: update to 0.10.1
What's Changed
Insert virtual cursors without hiding search input by @lusingander in #194
Render graph lanes in explicit order by @lusingander in #196
p5-Sereal-Encoder: update to 5.011.
5.011
* Robustness fixes. Thanks to Steffen Mueller and kumar-Prakash07.
* Preserve zstd deprecation warnings when building with IBM XL C on AIX.
* Raise the minimum supported Perl version to 5.14.
* Fix the Sereal::Decoder prerequisite version in generated package metadata.
See https://github.com/Sereal/Sereal/issues/317
p5-Sereal-Decoder: update to 5.011.
5.011
* Robustness fixes. Thanks to Steffen Mueller and kumar-Prakash07.
* Preserve zstd deprecation warnings when building with IBM XL C on AIX.
* Raise the minimum supported Perl version to 5.14.
p5-Future: update to 0.54.
0.54 2026-10-20
[CHANGES]
* Update all Perl to `use v5.20`, using new perl features of
signatures and postfix deref
[BUGFIXES]
* Ensure that `Future->needs_any` immediate failure message actually
copies the message from its final failed component, rather than
referring to an array containing it
* Add unit tests for `->without_cancel` not weakening its sequence
future, as fixed by `Future::XS` version 0.16 (RT181389)
p5-HTTP-Headers-ActionPack: update to 0.10.
0.10 2026-10-23
[Security]
- Accept-Language headers are checked as substrings, not regular expressions. (CVE-2026-113877)
[Bug Fixes]
- Authorization::Basic now handles passwords with a colon. (RT#179681)
[Documentation]
- Added CODE_OF_CONDUCT.md and updated README.md, LICENSE and CONTRIBUTING.md.
Update distbb to 0.49.1
Fix logs of failed packages
A lot of improvements and clean-ups. It's recomended to configure
bulk build from scratch.
Follow TUTORIAL.pod to configure distbb.
openldap: updated to 2.7.2
OpenLDAP 2.7.2 Release (2026/10/21)
Added slapd support for comments with ACLS
Added slapd-config option to throttle when qtime exceeds threshold
Added slapo-nssov option to forward updates
Fixed libldap with deeply nested URL filters
Fixed slapd GnuTLS client-cert verification handling
Fixed slapo-accesslog handling of per-op info state
Fixed slapo-sssvlv control parsing
Contrib
Fixed slappw-sha2 pointer aliasing
Fixed denyop rejection handling
Minor Cleanup
samba4: updated to 4.25.1
Changes since 4.25.0
* BUG 16276: Access control bypass via vfs_ceph_rgw case-insensitive open
(CVE-2026-109411)
* BUG 16274: CTDB: Cannot find device "<iface>@<link>": need to extract real
interface names
* BUG 16200: generate_unique_u64() may not protect against veto_value
* BUG 16261: Rename with ReplaceIfExists to a target differing only in case
creates a duplicate instead of replacing (regression in
bb130f32)
* BUG 16263: Samba 4.25.0 fails to build on macOS
* BUG 16258: Python smbconf transaction_start() lacks a talloc stack frame
with CTDB
* BUG 16265: Linux i686 build fails on dynamic_lookup
* BUG 16276: Access control bypass via vfs_ceph_rgw case-insensitive open
(CVE-2026-109411)
* BUG 16287: vfs_acl_xattr crashes on zero-sized flistxattr queries
[7 lines not shown]
py-wcwidth: updated to 0.9.4
0.9.4 *2026-10-24*
* **Bugfix** Flag emojis were split by grapheme breaks when following control characters, like
newline or tab
* **Improved** performance of most general functions by +64%
py-multidict: updated to 7.2.1
7.2.1
Bug fixes
- Fixed a regression in 7.2.0 where a subclass of
:class:`~multidict.MultiDictProxy` or :class:`~multidict.CIMultiDictProxy`
that converted its argument in its own ``__init__()`` raised
:exc:`TypeError` before that ``__init__()`` ran; such a subclass got an
empty multidict until its ``__init__()`` set the proxied one
7.2.0
7.2.0 drops Python 3.10, fixes a crash in a proxy built without
``__init__()`` and a :exc:`MemoryError` from a huge ``__length_hint__()``,
and is otherwise a performance release for the C extension: lookups,
adds, updates and deletes each needed a few percent fewer instructions.
