py-poetry-core: update to 2.5.0.
poetry-core (2.5.0)
Add Python 3.15 to the automatically generated classifiers (#961).
Fix an issue where a <V version constraint wrongly allowed pre-releases of V in some cases (#939).
Fix an issue where version ranges with coincident bounds were not recognized as empty (#939).
Fix an issue where the string representation of a version union did not describe the same constraint after being parsed again (#939).
Fix an issue where the intersection of a version range with a local version resulted in a wrong constraint (#949).
Fix an issue where the union of a version range and a public version did not include all local versions of the public version (#950).
Fix an issue where the union of a public version and one of its local versions did not result in the public version (#966).
Fix an issue where the difference between a public version and one of its local versions still allowed the local version, which could result in an infinite loop during dependency resolution (#953).
Fix an issue where a version range that excluded some local versions of a public version was wrongly considered to allow all versions of the public version (#959).
Fix an issue where a != <value> constraint was wrongly considered to allow all values of a <value> not in constraint (#955).
Fix an issue where merging platform_release markers with incompatible constraint types failed (#956).
Fix an issue where the string representation of a version range whose upper bound only consists of zeros raised an IndexError (#964).
Fix an issue where formatting a Python constraint that only allows unknown Python versions raised an IndexError (#971).
Fix an issue where marker values containing spaces could not be parsed (#972).
Fix an issue where the upper bound of a ~= constraint was wrong for versions with more than three release segments (#973).
Fix an issue where the filename of a link created from a Windows path was wrong and reject filenames containing path separators (#974).
uio: make *copyinuio take a void *
This aligns with copyinuio_t and avoids some hypothetical undefined
behavor around calling functions with mismatched types.
Reviewed by: kib
Effort: CHERI upstreaming
Sponsored by: Innovate UK
Differential Revision: https://reviews.freebsd.org/D60024
lean4: update to 4.34.1.
4.34.1
This patch release contains multiple runtime fixes
4.34.0
Lean 4.34.0 focuses on the kernel: three soundness issues, found
with AI adversarial testing, have been analyzed and fixed, and a
series of additional defensive checks have been implemented for
further reinforcement. In the automation side, bv_decide gets
integrated with sym and grind interactive modes, while being ported
to the SymM preprocessor that makes it up to six times faster. Work
has continued on the floating-point API after Float and Float32
models being introduced in 4.33.0; linters can now carry state
across commands and attach code actions to their warnings, and Lake
improves its linting, caching, and error reporting.
[2 lines not shown]
prometheus: update to 3.13.3
From wip/prometheus-lts.
pkgsrc changes:
- no longer need to maintain web ui manually (uses upstream webui)
- removed PKG_SYSCONFSUBDIR (move your config file accordingly!)
- removed some patches for data directory defaults;
moved this setting to the rc.d script command line instead
[MLIR][IRDL] Instantiate "." in IRDL-defined names as nested namespaces (#207035)
In PR #187911, it was revealed that the constraints on IRDL op names
placed by irdl-to-cpp were too restrictive.
This PR will address that by allowing "." in operation names to denote
nested namespaces, but not "$".
To discuss:
- ops like `wmma.f16.16x16x64.bf8_bf` cannot be registered as C++
identifiers cannot begin with a number. In discussions, we have opted to
prefix the generated namespaces with _.
Codex was used to generate the lit tests.
Close #187911.
Assisted-by: OpenAI Codex (GPT-5 and 6)
rspamd: update to 4.2.0.
4.2.0: 18 Sep 2026
** Incompatible changes **
* [Rework] symcache: One scheduler over the dependency graph: every item gets a stage and a level at init, and a dependency edge moves its target instead of being executed from the wrong stage
* [Rework] url: Resolve host TLDs through the new public suffix lookup ('!' exception rules are honoured, and a host that is itself a public suffix resolves to the whole host)
* [Rework] url: Discover URLs in free text with two passes (static matcher plus dot-anchored suffix labels) and drop the 10.5k-pattern TLD hyperscan database from the scanner
* [Rework] multimap: Return the full public suffix from the 'top' filter, so maps must list full suffixes ('com.au' instead of 'au')
* [Rework] rbl: Match URL composition maps with the suffix lookup instead of per-TLD regexes
* [Rework] fuzzy: Count redis hashes with a periodic SCAN instead of a counter maintained by the update script (negative counters left by older versions are reported as 0)
** Major features **
* [Feature] mime: Extract content and smuggling indicators from SVG attachments (SVG_CONTENT, SVG_SCRIPT, SVG_FOREIGN_OBJECT, SVG_DATA_URI, SVG_FORM and friends)
* [Feature] mime: Extract content from XLSX and PPTX attachments with relationship-level facts (OOXML_MACROS, OOXML_OLE_OBJECT, OOXML_REMOTE_TEMPLATE, OOXML_EXTERNAL_DATA)
* [Feature] mime: Add bounded DOCX content extraction
* [Feature] mime: Flag unprocessable DOCX attachments
* [Feature] lua_task: Inject HTML parts from Lua, so decoded payloads go through the regular HTML parser
* [Feature] url: Add a public suffix lookup component with full public suffix list semantics (wildcards, exceptions, ICANN/private split)
[68 lines not shown]
