vulnx: Add version 2.0.2
Modern CLI for exploring vulnerability data with powerful search,
filtering, and analysis capabilities.
What's Changed
Other Changes
fix: always emit is_* bool flags in JSON by @dogancanbakir in #468
fix: inject version via ldflags at build time by @XananasX7 in #467
fix: send api key in X-Api-Key header by @dogancanbakir in #472
fix: redact sensitive headers in HTTP request/response logs by @mirackayikci in #469
fix: remove unsupported search filter flags (#476) by @dogancanbakir in #477
chore: prepare v2.0.2 release by @ehsandeep in #480
quickjs-ng: update to 0.17.0.
update projects.md to include scriptc project reference (from the Ver… by @lukasMega in #1677
Fixes segfault from #1661 by @sr5434 in #1675
docs: add Qbs to projects by @ABBAPOH in #1685
Add Big Endian architecture support instructions by @saghul in #1681
Conditional BUILD_DIR by @kapouer in #1686
Fix String.prototype.normalize() crash from #1683 by @sr5434 in #1688
Fix reference count bug in Promise.withResolvers by @bnoordhuis in #1692
Enable test262 host-gc-required feature by @bnoordhuis in #1696
docs: add Vayu to projects by @athrvk in #1702
Use mirror for Alpine GHA by @bnoordhuis in #1705
Fix Iterator.from GetIteratorDirect handling by @jiang1997 in #1706
Link against libm unconditionally on Unices by @bnoordhuis in #1699
Fix out-of-bound read in JS_NewTypedArray by @bnoordhuis in #1704
Preserve old interrupt handler in std.evalScript by @bnoordhuis in #1707
fix: correct int/int32_t pointer mismatches for -Wincompatible-pointer-types by @SomSamantray in #1657
Fix JS_FreeCStringUTF16 on slice strings by @bnoordhuis in #1709
Add react-native-quickjs project to documentation by @saghul in #1710
[14 lines not shown]
rspamd: update to 4.2.2.
4.2.2: 10 Oct 2026
** Incompatible changes **
* [Fix] mime: Exclude the CRLF preceding a boundary delimiter from parts (message and non-base64 part digests change for multipart messages)
** Features **
* [Feature] crypto: Detect wallet addresses for Bitcoin and forks, Litecoin, Dogecoin, Tron, XRP, Zcash, Cardano, Cosmos, Stellar, TON, Ethereum and Monero, replacing bitcoin.lua with one independent symbol per currency
* [Feature] lua_crypto_addresses: Add a bounded wallet address scanner that catches split addresses, plus add_from_string for text recovered from attachments
* [Feature] lua_selectors: Add the crypto_addresses() extractor
* [Feature] metadata_exporter: Add custom variables and selector expansion for mail_from, mail_to, helo, channel, stream_key and the email template
* [Feature] metadata_exporter: Build multipart email alerts from email_parts, grouping plain and html parts into multipart/alternative
* [Feature] metadata_exporter: Encode non-ASCII headers in email alerts automatically
* [Feature] metadata_exporter: Validate rules against a schema, so configtest fails on invalid rules
* [Feature] lua_smtp: Negotiate EHLO and 8BITMIME with a HELO fallback, and downgrade 8-bit messages to 7-bit when 8BITMIME is not advertised
* [Feature] str_util: Add RFC 5322 folding for unstructured headers (util.fold_header_unstructured)
* [Feature] lua_text: Add the smtp newline normalization mode
[22 lines not shown]
zxcvbn-c: update to 2.7.
Remove MAKE_JOBS_SAFE, builds fine with a lot of jobs here.
Changes:
Fix static library retaining stale object code
Refined function prototypes to ensure build with strict warning checks
Fixed warning: declaration shadows a local variable
In ReduceTrie: sort the nodes at one height by checksum to reduce build time.
geeqie: update to 3.3.
Geeqie 3.3
============
- Collections: Open Collection combines the default collection
directory with collection history, showing filenames and full paths.
Unavailable collections are retained but disabled. Missing images
remain in collections, and collections stored elsewhere are updated
when images move or are renamed.
- Open Recent: Replaced with a GTK4 dialog using GTK’s shared
recent-files database, with “Geeqie image files” and “All files”
filters. Collection history now has its own setting and
`[collection_history]` section.
- Keyboard operation: Improved Return activation, search submission
and results navigation, folder-pane focus, address-bar history,
and Escape handling across dialogs and editable fields.
- File operations: Added inline folder creation. Fixed a renaming
crash, empty-folder trash handling, destination selection, and
[17 lines not shown]
tree-sitter: update to 0.27.1.
fix: decode UTF-16 surrogate pairs with input endianness by @tree-sitter-ci-bot[bot] in #5913
fix(cli)!: fix query test capture range matching across lines by @tree-sitter-ci-bot[bot] in #5918
fix(rust): address new nightly lints by @tree-sitter-ci-bot[bot] in #5921
fix(generate): resolve token names in debug output by @WillLillis in #5941
fix(generate): keep GCC jump tables enabled for large lexers by @tree-sitter-ci-bot[bot] in #5985
fix(generate): exclude external word tokens from keyword extraction by @WillLillis in #5989
fix(lib): check shifted stack versions during error recovery by @tree-sitter-ci-bot[bot] in #5998
fix(generate): detect indirect recursion in flattened productions by @WillLillis in #6003
fix: preserve column dependency when balancing repeat nodes by @tree-sitter-ci-bot[bot] in #6006
perf(lib): acquire capture lists from a free stack instead of scanning by @tree-sitter-ci-bot[bot] in #6012
fix(build): don't compile the Wasm stdlib into Emscripten builds by @tree-sitter-ci-bot[bot] in #6015
fix: various query issues by @tree-sitter-ci-bot[bot] in #6017
fix(rust): ban std::fs::canonicalize by @tree-sitter-ci-bot[bot] in #6018
fix(bindings): load Node bindings under Bun again by @tree-sitter-ci-bot[bot] in #6021
release v0.27.1 by @clason in #6024
libimobiledevice-glue: update to 1.3.3.
Version 1.3.3
~~~~~~~~~~~~~
- Changes:
* socket: Use const void* instead of void* in signature of socket_send()
* socket: Improve portability by replacing OS-specific macros with AC_CHECK_HEADERS (adds NetBSD support)
* endianness: Default to little endian if __BYTE_ORDER is not defined
* Add atexit call to (empty) deinit function to prevent stripping off initializer code
* utils: Correct ctype(3) usage in string_toupper() (cast to unsigned char before toupper())
fzf: update to 0.74.5.
Fixed --popup unzooming the window when opened over a zoomed pane on tmux 3.8 or above (#4927, junegunn/fzf.vim#1625) (@jereviikari)
On tmux 3.7, the window is still unzoomed, as tmux 3.7b crashes when a floating pane is created over a zoomed window
Fixed --gap-line cutting a grapheme cluster when filling the last cells of the line (#4920)
Fixed an escape sequence fzf does not recognize being partly consumed, which leaked the rest into the query (#4926)
Fixed a key lost when it arrived in the same read as an escape sequence
Fixed focus event not triggered after reload when the new item is at the same position as the previous one (#4930)
With --id-nth, the event is not triggered if the focus moves directly from an item to another item with the same key
A focus binding that runs reload now triggers itself again after each reload, unless --id-nth is set and the key does not change
Security fixes
fzf-tmux no longer evaluates an attached layout size (e.g. -l50) via bash arithmetic, which could run commands or inject tmux flags (GHSA-w6x2-f5m4-xw82)
zsh completion now creates its FIFO in a private mktemp -d directory instead of a predictable /tmp path (GHSA-7rj6-7pqx-v7rm)
Reported by Sai Sreewathsa Kovalluri, Shon Babu, and Kannan K (Researchers) of Innspark Solutions
fast_float: update to 8.3.2.
avoid signed negation overflow in integer_times_pow10 by @sahvx655-wq in #421
avoid signed overflow in is_integer on negative wchar_t units by @sahvx655-wq in #422
