www/ruby-sass-embedded: update to 1.105.0
1.105.0 (2026-09-22)
* Refactor spec (#417)
* Refactor importer and logger (#416)
* Improve logger performance (#418)
* Bump sass from 1.104.1 to 1.105.0 in /ext/sass (#419)
* Add support for meta.load() and related features (#414)
* Refactor importer and logger (#420)
* Use argument forwarding (#421)
www/ruby-faraday1: update to 1.10.6
1.10.5 (2026-02-12)
What's Changed
* Backport CVE-2026-25765 by @iMacTia in #1665
1.10.6 (2026-06-24)
What's Changed
* See if tests pass against Ruby 3.3 by @jturel in #1677
* Backport GHSA-98m9-hrrm-r99r fix to 1.x: add param_depth_limit to
NestedParamsEncoder by @iMacTia with @Copilot in #1681
New Contributors
* @jturel made their first contribution in #1677
[clang][bytecode] Remove double pointer type checks in Load{,Pop} (#225802)
Make sure that `CheckLoad` only returns true if the load is actually
valid.
www/ruby-faraday: update to 2.14.4
2.14.4 (2026-09-15)
What's Changed
* Bump actions/checkout from 6 to 7 by @dependabot[bot] in #1678
* Update copyright year to 2026 by @iMacTia with @Copilot in #1683
* Support JSON 3 by @byroot in #1687
* Preserve caller-owned JSON parser options by @OskarEichler in #1689
* Define HTTP verb methods on Faraday so tools can see them by @mokevnin in
#1708
* Document Options struct attributes for YARD (Fixes #1490) by @tachyurgy in
#1709
* chore: Configure SimpleCov for 1.0, too by @olleolleolle in #1715
New Contributors
* @byroot made their first contribution in #1687
[3 lines not shown]
Fix variant matching in expressions
- Fix Flang crashes when selecting variants in specification expressions.
- Make variant selection in combined-loop bounds agree with explicit nesting.
- Fix Clang condition matching across macro redefinitions and parentheses.
- Strengthen tests for selected TARGET contexts and add bug regressions.
www/ruby-css-parser: update to 3.2.0
3.2.0 (2026-09-20)
* Fix ReDoS hang when expanding dimension shorthands containing unclosed CSS
functions (e.g. margin: x() calc(aaaa...)): RE_FUNCTIONS now uses
possessive quantifiers plus a 10ms regexp timeout with fallback to plain
whitespace splitting
textproc/ruby-unicode-name: update to 1.15.1
1.15.0 (2026-09-19)
* Unicode 18.0
1.15.1 (2026-09-21)
* Fix missing names of new Jurchen and Small Seal characters
textproc/ruby-unicode-display_width: update to 3.3.0
3.3.0 (2026-09-20)
* Unicode 18.0
* Fix bug that emoji handling could not be deactivated when using config
object
* Fix edge case to not modify string when failing parsing binary input as
UTF-8
textproc/ruby-simple-rss: update to 2.3.0
2.3.0 (2026-09-14)
What's Changed
* Fix invalid dates in feed ordering by @cardmagic in #62
* Fix Atom relation links and add release history by @cardmagic in #63
* Fix Atom category attribute parsing by @cardmagic in #64
* Add normalized RSS and Atom entries by @cardmagic in #65
* Add JSON Feed 1.0 and 1.1 parsing by @cardmagic in #66
* Add bounded website feed discovery by @cardmagic in #67
* Prepare 2.3.0 and fix release QA findings by @cardmagic in #68
security/ruby-rubyntlm: update to 0.6.8
0.6.7 (2026-09-14)
* Fix gem packaging: 0.6.6 shipped every file with mode 0660 (no
world-read), so require failed for non-owner users. 0.6.7 is identical
code, repackaged with the standard 0644 modes (#77)
0.6.8 (2026-09-14)
* Fix the 0.6.7 sign/seal regression: the frozen-string-literal pass broke
NTLM session-key derivation, so signing and sealing messages failed at
runtime (reported by @Cory-Christensen in #81, fixed in #80).
