www/ruby-jekyll-seo-tag: update to 2.9.1
2.9.1 (2026-09-29)
Security
* Escape all metadata attribute outputs, and make the JSON-LD block safe
inside its script tag (GHSA-572m-7cg5-6j5r)
www/ruby-jekyll-feed: update to 0.18.0
0.18.0 (2026-09-29)
Security
* Escape xml:lang values and CDATA terminators in the feed
(GHSA-3gx8-pqcm-38hw, #396)
Development Fixes
* Upgrade to Rake 13 to fix master (#381)
* feat(CI): Add Ruby 3.2/3.3 to the test matrix (#402)
* Fix style offenses (#414)
Documentation
* Fix typos in Readme (#384)
[3 lines not shown]
security/ruby-oauth: update to 1.1.9
1.1.9 (2026-11-07)
Added
* access_token_cross_origin_requests consumer option (default false):
AccessToken#request now refuses an absolute service URI whose origin
differs from the configured :site, raising OAuth::Error, so the signed
OAuth Authorization header is not sent to a different host. Same-origin
absolute URIs and relative paths are unaffected. Set the option to true
to restore cross-origin service calls. [CWE-918]
* kettle-jem-template-20260720-001 - READMEs can now display configured
corporate sponsor logos.
* Spec coverage for OAuth::Client::Helper, the query_string OAuth signing
scheme in lib/oauth/client/net_http.rb, and the
OAuth::Error/OAuth::Unauthorized/OAuth::Problem classes — none previously
[76 lines not shown]
graphics/geeqie: Update to 3.4
Upstream NEWS:
Geeqie 3.4
============
- Performance: configurable multi-image preloading that follows navigation direction, bounded thumbnail loading and memory use, faster selection navigation, smoother Exif scrolling, and asynchronous display-profile loading.
- Pan View: background directory scanning, incremental layout and spatial indexing, progress reporting, cancellation, and support for Geeqie’s private thumbnail cache.
- Rendering and zoom: faster magnification through reusable textures; corrected high-DPI, 100% zoom, and fullscreen behavior; fixes for blank images, stale previews, tiling artifacts, and color correction.
- File operations: directory drag-and-drop copying and moving, folder merging, “Duplicate” conflict handling, and fixes for cancellation, symlink targets, and maximum-length filenames.
- Floating tools and shortcuts: an option to keep Info and Sort Manager with floating tools; corrected menu placement and docking; file drops onto folder and collection shortcuts.
- Sort Manager and collections: folder-specific destination lists, numbered destination shortcuts, external collections in destination menus, a draggable divider, and fixes for sidebar width growth.
- Metadata: configurable XMP color labels with OSD and list-view indicators, corrected grouped-sidecar associations, image/XMP source selection in the Exif window, keyword-tree autosaving, and restored batch metadata application.
- Search and duplicates: separate Criteria and Results tabs, perceptual-hash matching, a same-folder exclusion filter, smallest/largest-file selection, JSON export and script integration, and improved synchronization after deletion.
- Slideshow: configurable transitions, improved high-DPI rendering, and rescanning of recursive folders or saved collections between cycles.
- Export and printing: cropped-copy export with an adjustable selection, JPEG/PNG conversion, restored proof-sheet printing, and Print Image in context menus.
- Keyboard and customization: configurable panning and other formerly hard-coded shortcuts, an action to focus the image pane, improved icon-view selection and focus, configurable date/time formatting, and interface color-scheme preferences.
- GPS and format support: restored map interactions and direction lines; fixes for animated WebP, AVIF crashes, JPEG XL profiles and alpha, large JPEGs, full-resolution ARW viewing, SVGZ loading, and metadata-preserving rotation.
[2 lines not shown]
mail/thunderbird: Update to 159.0
Changelog:
159.0:
What's Fixed
fixed
Non-ASCII IMAP tags could exceed server length limits and be rejected
fixed
Zoom Text Only option did not work in the View menu
fixed
Multiple messages were printed even after canceling the print dialog
fixed
Save All and Detach All failed for attachments with invalid filename paths
fixed
[339 lines not shown]
graphics/vv: Fix build with GCC 12 (or any other versions of GCC)
std::powf() has been standardized as of C++11, but libstdc++ from GCC still
doesn't support it. Use std::pow() instead, as it's equivalent to
std::powf() in this context.
This is really a GCC bug, not a vv bug. So I don't think we should upstream
this patch.
mail/thunderbird: Fix a build failure that occurs when CC is set to 'cc'
The original patch for ${WRKSRC}/comm/third_party/openpgp.configure only
works when CC is either 'gcc' or 'clang'. I must admit I don't fully
understand why CC is 'gcc' on some setups while on others it is 'cc'. Sorry
if I'm doing a wrong thing.
multimedia/libaom: Update to 3.15.3
Changelog:
2026-10-20 v3.15.3
This release is ABI compatible with the last release. See
https://aomedia.googlesource.com/aom/+log/v3.15.2..v3.15.3 for all the
commits in this release.
- Bug Fixes
* Bug oss-fuzz:572842743: Integer-overflow in
av1_choose_var_based_partitioning.
2026-10-06 v3.15.2
This release is ABI compatible with the last release. See
https://aomedia.googlesource.com/aom/+log/v3.15.1..v3.15.2 for all the
commits in this release.
- Bug Fixes
* Bug 42302352: A larger frame is forced to be a key frame.
[17 lines not shown]
