net/ruby-net-ping: update to 2.1.1
pkgsrc change: remove a pkglint warning, wrong CATEGORIES.
2.1.0 (2026-08-08)
* Publish platform-specific gem metadata so Linux installs cap2 and current
Windows RubyInstaller installs win32-security for ICMP support #44.
* Fix the FreeBSD ping6 timeout option #43.
* Add Ruby 4.0 to the test matrix and add win32ole as an explicit Windows
dependency, since it is no longer a default gem as of Ruby 4.0 #41.
* Move Net::Ping::VERSION into its own file so the gemspec version can no
longer drift out of sync with it #37.
* Fix Net::Ping::External#ping6 setting a spurious "undefined method '=~'
[8 lines not shown]
devel/ruby-simplecov: update to 1.1.1
pkgsrc change: remove pkglint warnings from DESCR.
1.1.1 (2026-08-12)
What's Changed
* Bump step-security/harden-runner from 2.20.0 to 2.20.1 by
@dependabot[bot] in #1258
* rspec-conductor Support by @sferik in #1259
Contributors
* @sferik
* @dependabot
devel/ruby-io-event: update to 1.19.5
1.19.5 (2026-08-14)
* Preserve the original exception or non-local control flow when
IO::Event::WorkerPool cancellation interrupts a blocked fiber, while still
cancelling and draining the in-flight blocking operation before returning
control to Ruby.
p5-Net-OAuth: update to 0.32.
0.32 Sun 16 Aug 00:51:04 BST 2026
[Security]
- The Net::OAuth smart_require function no longer memoizes
failures, which allowed attackers to exhaust memory with
requests for invalid signature methods. CVE-2026-72888
- Net::OAuth::Client no longer allows silent downgrades from
OAuth 1.0a to 1.0 when the remote provider drops the
oauth_verifier. The behavior can be re-enabled with the
allow_v1a_downgrade option. CVE-2026-72887
[Bug Fixes]
- RSA-SHA1 now pins PKCS#1 v1.5 padding and the SHA-1 hash rather
than inheriting Crypt::OpenSSL::RSA's defaults, which have drifted
(SHA-256 in 0.29_01, RSA-PSS in 0.35). Against 0.35 and later this
produced RSA-PSS signatures that no RFC 5849 3.4.3 compliant server
will accept. Reported as Debian #1142954.
[98 lines not shown]
devel/py-icecream: New port
Never use print() to debug again: inspect variables, expressions,
and program execution with a single, simple function call.
Approved by: hrs (mentor)
[ADT] Remove bucket_begin, bucket_end, and FoldingSetBucketIterator (NFC) (#216548)
This patch removes bucket_begin, bucket_end, and the underlying
FoldingSetBucketIterator and FoldingSetBucketIteratorImpl classes in
FoldingSet.
These were added on February 4, 2008 in commit
e2887863563fe5d2fdd8e1219b76fdc1ee9ec37d for ImutAVLTree in
ImmutableSet.h. The last use was removed on November 30, 2010 in commit
dbd89971ffb3a222dc91513585e8d6b5bc7882db when ImmutableSet switched
from FoldingSet to DenseSet.
Assisted-by: Antigravity
[MLIR][NVVM] Spell strict assembly properties directly
Bind every NVVM inherent property in its operation assembly format and
re-enable strict property parsing for the dialect. Use direct named clauses
for declarative formats and custom MMA parsers while retaining dictionaries
for discardable attributes.
Assisted-by: Codex
[DAG] expandPEXT/PDEP - scalarize vector instructions if the scalar type is legal (#216567)
If the scalar instruction is legal, just unroll (scalarize) - similar to
what a lot of other generic expansions already do.
Helps x86/BMI2 targets at least for vXi32/i64 types - there's more we
can do to address vXi8/i16 types and slow-PDEP/PEXT cases (znver1/2
etc.) but they can be addressed later with x86 specific lowering after
we have the generic base in place.
Fixes #214508
mtree: usr: add missing bsdconfig datetime directories
8cfe06ee4415 installs into 085.datetime and share/bsdconfig/datetime,
but those paths were not in BSD.usr.dist. In-place installworld then
fails when install(1) cannot create the destination.
Fixes: 8cfe06ee4415 ("bsdconfig: add datetime module for live system clock")
[CIR] Fold load from constant alloca slots (#212284)
This patch folds non-volatile non-atomic `cir.load` operation that loads
from a constant alloca slot into the initial value stored into that
slot, if the initialization dominates the load.
This effectively enables "constant folding" at the C/C++ language level.
Consider the following C/C++ source program:
```cpp
int g();
void use(int);
void h(const int *); // <-- The body of h is external.
void f() {
const int x = g();
h(&x);
use(x);
}
[8 lines not shown]
sem: update to 0.21.1.
### Fixed
- **Building a graph over Svelte components no longer crashes
(SIGSEGV) on Linux/glibc.** `sem graph`/`context`/`orient` over
`.svelte` files deterministically exited 139 from an invalid free
in the `tree-sitter-htmlx-svelte` 0.1.8 grammar's scanner, hit
during parallel graph construction (macOS's allocator tolerated
the bad free, so it only showed on Linux). Bumped the grammar to
0.1.16, which carries the scanner fixes; the existing version
constraint already permitted it, so this is a lock-only dependency
update. Added a parallel-Svelte-graph regression test. Thanks @XF-FW
for the exhaustive isolation and the verified fix (#471).
[SandboxVec][DAG][NFC] Replace UnscheduledSuccs/Preds with a single variable (#215364)
This is a cleanup patch that replaces the two DAG node unscheduled
dependency counters (that is UnscheduledSuccs and UnscheduledPreds) with
a single one named UnscheduledDeps.
The reasoning is that scheduling operates on one direction at a time so
if we are scheduling bottom-up then we only need the unscheduled
successors, and if we schedule top-down then we only need the
unscheduled predecessors.
rspamd: update to 4.1.5.
4.1.5: 14 Aug 2026
** Incompatible changes **
* [Rework] gpt: Return only a boolean from the condition callback (request content generation moved into gpt_check)
* [Conf] Ship explicit allow_file_and_shm_inputs = true defaults for the normal, controller and proxy workers (the default becomes false in the next major release)
** Features **
* [Feature] fuzzy: Share sender facts (SPF, DKIM, DMARC, PTR state, recipient bucket, TLS) with storages over encrypted rules
* [Feature] mime: Decode PDF simple font text via the font's /Encoding (Annex D base encodings and /Differences overrides)
* [Feature] mime: Parse PDF /ToUnicode CMaps and decode composite (Type0) fonts
* [Feature] elastic: Structured fuzzy match results and message size in the schema
** Bug fixes **
* [CritFix] protocol: Gate File/Path/Shm message sources behind allow_file_and_shm_inputs (any TCP client could have arbitrary files parsed)
* [Fix] controller: Rate limit authentication failures per source (max_auth_failures)
* [Fix] fuzzy: Per-key forbidden_ids replaces the default set instead of adding to it
* [Fix] fuzzy: Apply the per-key ACL to delayed v1 replies
[22 lines not shown]
