uriparser: update to 1.0.3.
2026-10-31 -- 1.0.3
>>>>>>>>>>>>> SECURITY >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
* Fixed: [CVE-2026-48841]
Protect `ComposeQueryEngine` from integer overflow (GitHub #313)
Thanks for the report to Joshua W. Windle!
>>>>>>>>>>>>> SECURITY >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
* Fixed: Protect `ToStringEngine` from integer overflow (GitHub #311)
Thanks for the report to Joshua W. Windle!
* Fixed: Protect `AppendQueryItem` from item count integer overflow
(GitHub #312)
Thanks for the report to Joshua W. Windle!
* Fixed: Fix undefined behavior in `FilenameToUriString` (GitHub #310)
* Fixed: Restore support for compilation with glibc <2.29
(GitHub #315, GitHub #316, GitHub #289, GitHub #320)
* Fixed: Fix support for GoogleTest >=1.17.0 (GitHub #325)
* Fixed: Mark `uriIsWellFormedHost*` functions as `URI_PUBLIC`
[19 lines not shown]
p5-DateTime-TimeZone: update to 2.72.
2.72 2026-10-28
- This release is based on version 2026f of the Olson database. This release includes contemporary
changes for Cuba.
p5-DateTime: update to 1.6800.
1.68 2026-10-29
- Added support for the `ddd` CLDR pattern, which formats the day of the month as an ordinal, like
"3rd". Before this, `ddd` was formatted as a zero-padded day, like "03". DateTime now requires
DateTime::Locale 1.47 or newer, which provides the data for this.
p5-DateTime-Locale: update to 1.47.
1.47 2026-10-29
- Rebuilt all locale data with the data from CLDR 49.0.0.
- CLDR 49 no longer ships data for locales that are below its "Basic" coverage level. This removes
199 locale codes, including aa, ab, an, co, cu, and all of their regional variants. Some languages
only lost some of their locales. For example, bal and bal-Arab are gone, but bal-Latn is still
available. Loading any of the removed locales will now fail.
- Added the ady (Adyghe) and kbd (Kabardian) locales, along with their regional variants.
- Added a new `$locale->day_of_month_format_abbreviated` method. This returns 31 strings for ordinal
days of the month, like "1st", "2nd", and "3rd". CLDR 49 added this data, along with a new `ddd`
pattern that uses it. This is currently only available for a small number of languages, including
English and French. For other locales, the days are just the numbers 1 to 31.
- Some locales, including en and fr, now have available formats that use the new `ddd` pattern, like
[2 lines not shown]
p5-Error: update to 0.17031.
0.17031 2026-10-27
- t/08warndie.t - update to handle blead's updated line number tracking by richardleach
- https://github.com/shlomif/perl-error.pm/pull/6
- Thanks @richardleach .
p5-Sereal*: update to 6.003
6.003
* Fix Encoder and Decoder builds on Haiku.
* Fix hobodecoder compatibility with BusyBox od and checksum test
diagnostics for child processes terminated by signals.
6.002
* Prevent Decoder callbacks from freeing an active Decoder handle.
* Fix older-Perl build and Decoder compatibility issues and improve
test portability and missing-dependency diagnostics.
* Preserve unsigned tied integer values when encoding on older Perls.
6.001
* Add protocol v6 VSTRING extension tags, NEG_VARINT, and keyed
SipHash checksums. Upgrade Decoder to version 6 everywhere before
upgrading Encoder or emitting v6 packets.
* Add checksum keys, modes, policies, defaults, and checksum helper
functions in Encoder and Decoder.
[13 lines not shown]
sysutils/lsof: correct previous patch
Previous patch has a defect refering a variable out of the scope.
Noted by Yoshitaka Tokugawa <toku at tokugawa.org>.
Bump PKGREVISION.
devel/libagcre and textproc/agcre: update from versino 20261019 to 20261020
agcre - update to version 20261020
Bring over changes from the development branch:
+ improvements to unicode character searching, and for unicode case mapping
+ be smarter about icase set searching, don't do any more work than is needed,
use othercase() function to pre-calculate the other case of what's wanted at
regex compile time
+ added an agcre_dispose() function, kind of opaque-like
+ in agcre_regexec, fix a bug whereby breaking out of loop with non-zero context
would previously be ignored
+ add the basic khadafy tests
+ space-efficient and performant searching for map1, map2, tolower and toupper
pkcs11-provider: force this to pkgsrc openssl for now
as of 2026-10-31, does not work with base openssl
a) the pkgsrc framework does not provide all required pkg-config values
in the faked libcrypto.pc file
b) the base system does not provide the directories to install into
devel/asl{,-doc} -- update to v1.42 build 315
2026-10-16 [1.42 Bld 315]
- Bugfix : SC/MP: E register is allowed as displacement
for PC-based addressing only for data accesses
- Addition : Add predefined variable ASL_VERSION that contains
major version, minor version, and build number
in format 0xMMnnbbbb.
2026-10-11 [1.42 Bld 314]
- Bugfix : SC/MP: E register is also allowed as displacement
for PC-based addressing
2026-09-27 [1.42 Bld 313]
- Bugfix : SC/MP: correct check for instructions crossing
page boundaries
[158 lines not shown]
devel/libbstring -- update to v1.1.1
bstring v1.1.1 Release Notes
Notable changes:
blk2bstr() accepts NULL pointer with size 0, thanks to
@DamjanJovanovic for the report #219
update the verbiage of the GNU GPL v2 license, thanks to
@knight-of-ni for the report #232
What's Changed
move to Ubuntu 24.04 based ClusterFuzzLite builder by @rdmark in #171
harden OmniOS build job and use preconfigured image by @rdmark in #211
harden dependency installation with pip by @rdmark in #221
allow NULL empty blocks in blk2bstr by @rdmark in #220
pull/234
update to the latest verbiage of GNU GPL v2 by @rdmark in #233
[16 lines not shown]
