rumdl: update to 0.2.40.
0.2.40
Fixed
md003: consume the setext underline when converting a heading to ATX. Converting a setext heading left the underline behind, where a following blank line turned it into a thematic break, so rumdl fmt added a horizontal rule the document never had (7363c34)
md077: stop scoping list items inside blockquotes, which made a lazy continuation line gain indentation on every pass so the formatter never converged (58fb25b)
reflow: keep wiki links, shortcodes and math whole inside a wrapped span (db12c2c)
config: honor the documented MD033 table_allowed alias, which silently dropped the configured value (db2c204)
config: stop reporting MD013's documented semantic-link-understanding alias as an unknown option (1539a64)
parity: make the markdownlint comparison harness actually run (182763c)
Documentation
md013: document that ignore-link-urls affects reporting only. Reflow measures the markdown as written, matching prettier and mdformat (c4f8bad)
0.2.39
[9 lines not shown]
libssh: update to 0.11.5.
Follow upstream version numbering again.
version 0.11.5 (released 2026-07-21)
* Security:
* CVE-2026-15370: Stack buffer overflow in SFTP server longname construction
* CVE-2026-59843: Denial of service via zero advertised channel packet size
* CVE-2026-59844: Denial of service via oversized SFTP read length
* CVE-2026-59845: Denial of service via unchecked ProxyCommand fork() failure
* CVE-2026-59846: Information disclosure via ProxyCommand %r username expansion
* CVE-2026-59847: Integrity downgrade via OpenSSL AES-GCM tag verification
* CVE-2026-59848: Denial of service via SFTP responses with unknown request IDs
* CVE-2026-59849: Denial of service via automatic certificate authentication loop
* CVE-2026-59850: Use-after-free via data callbacks on closed channels
* Zero-initialize every ssh_string
* Compatibility:
* Fix compatibility with C23 / gcc16
* Bugfixes:
[9 lines not shown]
py-pillow_heif: update to 1.5.0.
## [1.5.0 - 2026-07-22]
### Added
- Grid(tiled) image encoding: `options.GRID_TILE_SIZE` option, `tile_size` parameter for `save` and `grid_tile_size` parameter for `register_*_opener`. #317
- `info["tiling"]` dictionary with the grid info for tiled images. #317
- `PH_LIBHEIF_CMAKE_ARGS` environment variable for `build_libs.py` to pass extra `cmake` arguments to the libheif build.
- Windows ARM64 wheels.
### Changed
- Minimum required `libheif` version is `1.23.1`.
- Releases are now tag-triggered and published to PyPI with attestations via Trusted Publishing. #432
- `libheif` was updated from the `1.23.0` to `1.23.1` version. #445
- `libde265` was updated from the `1.1.0` to `1.1.1` version. #434
### Removed
[3 lines not shown]
[lldb][Windows] ignore loader breakpoints in system modules (#208233)
Currently, when debugging a program with `lldb-dap` on Windows and using
the `integratedTerminal` option, lldb-dap immediatly stops with an
`0x80000003` Exception. This is because `ntdll` executes an `int3`
breakpoint during process initialization when a debugger is attached.
This patch makes `lldb` and `lldb-server` skip the first `int3` after
launch when it originates from a system module (the loader's debugger
notification). Only that first loader breakpoint is skipped. Any later
int3, including `__debugbreak()`, `__builtin_debugtrap()` in the
debuggee's own code, still stops the debugger.
Fixes https://github.com/llvm/llvm-project/issues/198763
[AMDGPU] Add synthetic apertures and use them for barriers
Define what a synthetic aperture is, and adjust the barrier AS
to use this new system. This makes the barrier AS even safer to
use as now we can use all 32 bits of it without ever risking
hitting a valid address of any kind (LDS or outside LDS).
[flang][Lower] Admit opaque terms to real sum reassociation (#211316)
First part of generalisations requested in #207377.
The split-sum eligibility check rejected any RHS containing explicit
parentheses or subtraction, even though the Add flattener already
preserves every non-Add subtree as one opaque term.
Remove those blanket guards and their unused predicates. Document the
opaque-term invariant and extend the test to cover parenthesized
additions and subtractions, whole-RHS parentheses, and subtraction
terms.
I did not observe any benchmark result changes as a result of this
patch.
Assisted-by: Codex
[IR] Reject inlining strictfp alwaysinline callee into non-strictfp caller (#210701)
Commit af0c933eda31 added a verifier check requiring every strictfp call
site to reside in a strictfp function.
It caused verify error `call site marked strictfp without caller
function marked strictfp` since AlwaysInliner force-inlines strictfp
callees into non-strictfp callers, bypassing checkStrictFP.
47b3b76825dc explictly not implemented inlining strictfp function into
non-strictfp function. But the restriction was lost in 8eb6757564cc.
8eb6757564cc was only NFC for the normal inliner pass. It regressed
AlwaysInliner path which bypasses checkStrictFP.
This PR restores the restriction.
---------
Co-authored-by: Jinsong Ji <jinsong.ji at intel.com>
Co-authored-by: Claude Sonnet 5 <noreply at anthropic.com>
Co-authored-by: Nikita Popov <github at npopov.com>
[MLIR][OpenMP] Preserve debug location in OpenMPIRBuilder calls. (#211254)
Many `OpenMPIRBuilder` entry points take an
`OpenMPIRBuilder::LocationDescription`. It has two relevant
constructors:
`LocationDescription(const IRBuilderBase &IRB)` // captures IP and debug
loc
`LocationDescription(const InsertPointTy &IP)` // captures IP only; DL
is empty
The OpenMP MLIR-to-LLVM-IR translation constructs the location from
`builder` in almost all places (~45 call sites), which selects the first
constructor and propagates both the insertion point and the current
debug location. A few call sites instead passed `builder.saveIP()`,
which selects the second constructor and silently drops the debug
location.
Change the 9 offending call sites to pass `builder` instead of
`builder.saveIP()`, so the debug location is preserved.
File systems can provide a pointer to private data to fuse_main(3)
or fuse_new(3). However, if the file system implements init() then
this will be replaced by the return value of init(). If a file
system wants to keep the original value then it can retrieve it by
calling fuse_get_context(3).
OK claudio@
[RISCV] Add TuneNoDefaultUnroll to generic CPUs (#135318)
Almost all CPUs have added this and experiments have shown
considerable gains.
And, we set a lower runtime unrolling count 4 for in-order models
to avoid potential regressions.
Fixes #134272.
