unordered-dense: update to 5.1.0
- index_bytes() is new
- `segmented_map` tears itself down in the opposite order
- `segmented_map` works with fancy pointers
c++gsl: update to 5.0.1.
5.0.1
cherrypicks to rel/5.0 in preparation for a 5.0.1 release by Carson Radtke (@carsonRadtke) in #1276
Let dyn_array_iterator convert to its const_iterator by Jeff Lenamon (@lenamonj) in #1271
Complete the random access iterator interface of dyn_array_iterator by Jeff Lenamon (@lenamonj) in #1272
5.0
What's Changed
Update return by value threshold in gsl::not_null by ozaktash in #1205
copilot: Provide more project context for the Copilot coding agent by Carson Radtke (@carsonRadtke) in #1207
Document differences between hardened std::span and gsl::span by Carson Radtke (@carsonRadtke) with @Copilot in #1206
Add constexpr to not_null comparison operators by Carson Radtke (@carsonRadtke) with @Copilot in #1208
fix: all pipeline failures by Carson Radtke (@carsonRadtke) in #1221
export proper syntax for GSL_SUPPRESS for new VS by Carson Radtke (@carsonRadtke) in #1213
[75 lines not shown]
resterm: Update to 1.9.1
This patch fixes two bugs from 1.9.0.
The Profile tab is now visible while a profile runs,
and vars.get no longer returns template text when a
@const has the same name.
py-poetry-core: update to 2.5.0.
poetry-core (2.5.0)
Add Python 3.15 to the automatically generated classifiers (#961).
Fix an issue where a <V version constraint wrongly allowed pre-releases of V in some cases (#939).
Fix an issue where version ranges with coincident bounds were not recognized as empty (#939).
Fix an issue where the string representation of a version union did not describe the same constraint after being parsed again (#939).
Fix an issue where the intersection of a version range with a local version resulted in a wrong constraint (#949).
Fix an issue where the union of a version range and a public version did not include all local versions of the public version (#950).
Fix an issue where the union of a public version and one of its local versions did not result in the public version (#966).
Fix an issue where the difference between a public version and one of its local versions still allowed the local version, which could result in an infinite loop during dependency resolution (#953).
Fix an issue where a version range that excluded some local versions of a public version was wrongly considered to allow all versions of the public version (#959).
Fix an issue where a != <value> constraint was wrongly considered to allow all values of a <value> not in constraint (#955).
Fix an issue where merging platform_release markers with incompatible constraint types failed (#956).
Fix an issue where the string representation of a version range whose upper bound only consists of zeros raised an IndexError (#964).
Fix an issue where formatting a Python constraint that only allows unknown Python versions raised an IndexError (#971).
Fix an issue where marker values containing spaces could not be parsed (#972).
Fix an issue where the upper bound of a ~= constraint was wrong for versions with more than three release segments (#973).
Fix an issue where the filename of a link created from a Windows path was wrong and reject filenames containing path separators (#974).
lean4: update to 4.34.1.
4.34.1
This patch release contains multiple runtime fixes
4.34.0
Lean 4.34.0 focuses on the kernel: three soundness issues, found
with AI adversarial testing, have been analyzed and fixed, and a
series of additional defensive checks have been implemented for
further reinforcement. In the automation side, bv_decide gets
integrated with sym and grind interactive modes, while being ported
to the SymM preprocessor that makes it up to six times faster. Work
has continued on the floating-point API after Float and Float32
models being introduced in 4.33.0; linters can now carry state
across commands and attach code actions to their warnings, and Lake
improves its linting, caching, and error reporting.
[2 lines not shown]
prometheus: update to 3.13.3
From wip/prometheus-lts.
pkgsrc changes:
- no longer need to maintain web ui manually (uses upstream webui)
- removed PKG_SYSCONFSUBDIR (move your config file accordingly!)
- removed some patches for data directory defaults;
moved this setting to the rc.d script command line instead
rspamd: update to 4.2.0.
4.2.0: 18 Sep 2026
** Incompatible changes **
* [Rework] symcache: One scheduler over the dependency graph: every item gets a stage and a level at init, and a dependency edge moves its target instead of being executed from the wrong stage
* [Rework] url: Resolve host TLDs through the new public suffix lookup ('!' exception rules are honoured, and a host that is itself a public suffix resolves to the whole host)
* [Rework] url: Discover URLs in free text with two passes (static matcher plus dot-anchored suffix labels) and drop the 10.5k-pattern TLD hyperscan database from the scanner
* [Rework] multimap: Return the full public suffix from the 'top' filter, so maps must list full suffixes ('com.au' instead of 'au')
* [Rework] rbl: Match URL composition maps with the suffix lookup instead of per-TLD regexes
* [Rework] fuzzy: Count redis hashes with a periodic SCAN instead of a counter maintained by the update script (negative counters left by older versions are reported as 0)
** Major features **
* [Feature] mime: Extract content and smuggling indicators from SVG attachments (SVG_CONTENT, SVG_SCRIPT, SVG_FOREIGN_OBJECT, SVG_DATA_URI, SVG_FORM and friends)
* [Feature] mime: Extract content from XLSX and PPTX attachments with relationship-level facts (OOXML_MACROS, OOXML_OLE_OBJECT, OOXML_REMOTE_TEMPLATE, OOXML_EXTERNAL_DATA)
* [Feature] mime: Add bounded DOCX content extraction
* [Feature] mime: Flag unprocessable DOCX attachments
* [Feature] lua_task: Inject HTML parts from Lua, so decoded payloads go through the regular HTML parser
* [Feature] url: Add a public suffix lookup component with full public suffix list semantics (wildcards, exceptions, ICANN/private split)
[68 lines not shown]
