py-python-discovery: updated to 1.1.2
1.1.2
docs: add package description and usage to README
fix(subprocess): drain pipes after killing timed-out process
fix(discovery): match prerelease versions against major.minor specs
py-puremagic: updated to 2.0.2
Version 2.0.2
- Fixing 137 passing non-existent filename to from_string()/from_stream() no longer raises FileNotFoundError (thanks to denisw)
Version 2.0.1
- Fixing 126 Python scanner false positives — now uses AST node walking instead of regex to verify real Python constructs (thanks to ahobson)
- Fixing 134 UTF-16 LE BOM (FF FE) no longer misidentified as .mp1 audio, added UTF-16 BOM detection to text scanner (thanks to tomazfs)
- Fixing 135 from_string(), from_stream(), magic_string(), and magic_stream() now perform deep scan when filename is provided (thanks to denisw)
harfbuzz: update to 13.0.1.
Overview of changes leading to 13.0.1
Saturday, March 7, 2026
=====================================
- Bug fixes in rendering `COLR` v1 fonts.
- Various build fixes.
Overview of changes leading to 13.0.0
Wednesday, March 4, 2026
=====================================
- New experimental drawing and rendering libraries:
* New public `hb-vector` API for vector output of glyph outlines. The only
supported output format currently is SVG.
The new API is available in a separate `harfbuzz-vector` library.
* New public `hb-raster` API for rasterizing glyphs to A8 / BGRA32 images.
The new API is available in a separate `harfbuzz-raster` library.
* Both APIs are still experimental and subject to change.
[142 lines not shown]
xfce4-desktop: fix builds on NetBSD 9.x
There's a parsing bug triggered in older GCC versions, e.g., 7.5.
(Probably the same one that led to the tests in libxfce4windowing
being disabled from builds, too.) Since GCC 10 already gets pulled
into the dependency chain anyway (from shared-mime-info, of all
things), go with it.
www/chromium: update to 145.0.7632.159
* 145.0.7632.159
This update includes 10 security fixes. Please see the
Chrome Security Page for more information.
[$33,000][485622239] Critical CVE-2026-3536: Integer overflow in ANGLE.
Reported by cinzinga on 2026-02-18
[$32,000][474266014] Critical CVE-2026-3537: Object lifecycle issue
in PowerVR. Reported by Zhihua Yao of KunLun Lab on 2026-01-08
[TBD][484983991] Critical CVE-2026-3538: Integer overflow in Skia.
Reported by Symeon Paraschoudis on 2026-02-17
[TBD][483853098] High CVE-2026-3539: Object lifecycle issue in DevTools.
Reported by Zhenpeng (Leo) Lin at depthfirst on 2026-02-12
[TBD][484088917] High CVE-2026-3540: Inappropriate implementation
in WebAudio. Reported by Davi Antônio Cruz on 2026-02-14
[TBD][484811719] High CVE-2026-3541: Inappropriate implementation
in CSS. Reported by Syn4pse on 2026-02-16
[TBD][485152421] High CVE-2026-3542: Inappropriate implementation
in WebAssembly. Reported by qymag1c on 2026-02-17
[6 lines not shown]
digikam: update to 9.0.0.
After months of intensive development, bug triage, and feature
integration, the digiKam team is thrilled to announce the stable
release of digiKam 9.0.0. This major version introduces groundbreaking
improvements in performance, usability, and workflow efficiency,
with a strong focus on modernizing the user interface, enhancing
metadata management, and expanding support for new camera models
and file formats.
lowdown: update to 3.0.0.
Added initial support for outputting modern Unix manpages with
-tmdoc. This is intended as a replacement for the legacy -tman.
Supplement this with --roff-manpage, which accepts a markdown file
that looks like a Unix manpage and attempts to convert it into a
well-formed mdoc or man. Most of this is purely syntactic, but
several sections in Unix manpages (e.g., the NAME and SYNOPSIS)
have a rigorous syntax that this mode attempts to output.
Several minor (but breaking) changes to the API to take up fewer
bits in the oflags field of struct lowdown_opts: consolidate all
XXX_NOLINK, XXX_RELLINK, and XXX_SHORTLINK as LOWDOWN_NOLINK,
LOWDOWN_RELLINK, and LOWDOWN_SHORTLINK. This only applies to the
LOWDOWN_MAN, LOWDOWN_MS, and LOWDOWN_TERM output modes. The earlier
LOWDOWN_NROFF output mode is deprecated and is now an alias for
LOWDOWN_MS, which should be used moving forward.
Do the same with the various XXX_SKIP_HTML bits.
[30 lines not shown]
py-textual: update to 8.0.2.
8.0.2
Changed
Themes are now in alphabetical order in command palette #6405
Fixed
Fixed issues with Directory Tree #6405
8.0.1
Fixed
DirectoryTree runs more operations in a thread to avoid micro-freezes
Changes
[2 lines not shown]