www/py-flask-limiter3: Remove port
The one and only consumer www/py-calibreweb now supports v4.
PR: 297376
Reported by: Matthew Wener <matthew at wener.org> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
www/py-calibreweb: Update 0.6.26 => 0.6.27
This release contains bug and security fixes, also
updated to support www/py-flask-limiter v4 which in
turn removes the need for the port www/py-flask-limiter3.
Changes:
https://github.com/janeczku/calibre-web/releases/tag/0.6.27
PR: 297375
Reported by: Matthew Wener <matthew at wener.org> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
Security: CVE-2025-6998
Security: CVE-2025-7404
MFH: 2026Q3
[mlir][arith][NFC] Make AtomicRMWKind switches exhaustive (#214622)
`getIdentityValueAttr` and `getReductionOp` in `ArithOps.cpp` each
handle 15 of
the 16 `AtomicRMWKind` cases and route the rest through a `default:`
label
carrying `// TODO: Add remaining reduction operations.`
That TODO cannot be completed. The only unhandled kind is `assign`,
which is
not a reduction: it has no identity element (`assign(x, e) = e`, so no
constant
`e` satisfies `assign(x, e) = x`) and no corresponding binary `arith`
op. It is
still a perfectly valid kind elsewhere — `memref.atomic_rmw` lowers it
to an
atomic `xchg` in `MemRefToLLVM.cpp` — it simply has no meaning for these
two
reduction helpers.
[39 lines not shown]
[VPlan] Verify hoist point when hoisting previous value of a recurrence. (#215084)
tryToSinkOrHoistRecurrenceUsers processes the fixed-order recurrences of
a loop one at a time and updates the plan for each of them. Once the
plan has been updated for one recurrence, the properties
hoistPreviousBeforeFORUsers relies on may no longer hold for the
recurrences processed later
Convert dominance assertion that does not hold in all cases (added test
cases) to a bail out, to a crash on the added test.
PR: https://github.com/llvm/llvm-project/pull/215084
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Update bundled third-party modules; where upstream now offers a tag,
switch from a commit hash to the version tag:
- array_var: v0.05 -> v0.06
- cache_purge: hash -> 3.0.2
- ngx_devel_kit: v0.3.3 -> v0.3.4
- drizzle: hash -> v0.1.14
- aws_auth: -> f3d9862 (stays on a hash; the 2.1.1 tag lacks the
OpenSSL 3.0 build fix)
Adjust the drizzle config patch to the module's new extraction
directory name.
For freenginx, add a patch to ngx_aws_auth: freenginx dropped
ngx_http_request_t.start_sec, so obtain the request time from
ngx_time() there instead.
Sponsored by: Netzkommune GmbH
graphics/openusd: fix cmake file
Consumers using cmake failed with this error:
CMake Error at /usr/local/cmake/pxrTargets.cmake:426 (set_target_properties):
The link interface of target "garch" contains:
OpenGL::GL
but the target was not found.
See https://github.com/PixarAnimationStudios/OpenUSD/issues/3310
PR: 296774
Approved by: maintainer’s time-out
py-cairo: update to 1.29.1.
.. _v1.29.1:
1.29.1 - 2026-08-07
-------------------
* Update dependencies (libpng, zlib) for the Windows wheels :pr:`442`
* Fix documentation build with Python 3.15 :pr:`441`
* Build wheels for Python 3.15 (except for 32bit Windows) :pr:`444`
* Fix a memory leak in :meth:`ScaledFont.text_to_glyphs` :pr:`446`
* Fix some minor reference leaks :pr:`447`
graphics/opensubdiv: fix cmake config file
Consumers encountered this error:
CMake Error at /usr/local/lib/cmake/OpenSubdiv/OpenSubdivTargets.cmake:79 (set_target_properties):
The link interface of target "OpenSubdiv::osdCPU" contains:
OpenMP::OpenMP_CXX
but the target was not found.
PR: 296775
Approved by: maintainer’s time-out
py-librt: update to 0.15.0.
Prepare for sentinel support
Build Linux wheels for ppc64le (#44)
Sync mypy and bump version
Build wheels for Python 3.15 (#43)
tree-sitter: update to 0.26.12.
What's Changed
fix(generate): fold case-insensitive patterns ourselves by @WillLillis in #5761
fix(query): keep the trailing anchor when a zero-matched quantifier is anchored on both sides by @tree-sitter-ci-bot[bot] in #5764
fix(templates): add C source files to Python sdist by @WillLillis in #5765
fix(init): don't lowercase repository url by @tree-sitter-ci-bot[bot] in #5768
fix(highlight): use std::sync::OnceCell for various loader fields by @WillLillis in #5785
fix(parser): restart recovery for invalid tokens in the error state by @tree-sitter-ci-bot[bot] in #5792
Fix associativity resolution with mixed shift precedences by @tree-sitter-ci-bot[bot] in #5796
fix(parser): fix parsing bug repeat operator by @tree-sitter-ci-bot[bot] in #5829
release v0.26.12 by @clason in #5831
py-h2: update to 4.4.1.
4.4.1 (2026-08-03)
------------------
**Bugfixes**
- Performance improvement: remove consumed frames in-place from data buffer.
- Reject duplicate Host headers in request headers. Thanks to Sunand Mohan for the report.
