py-ldap: updated to 3.4.8
3.4.8 (2026-09-16)
Fixes:
* Plugged memory and reference leaks at error-handling time
* VLV control now honours contextID passed in
* ldapurl now correctly escapes when emitting a HTML anchor
* _ldap.str2dn now handles empty string correctly
* handle server-sent invalid UTF-8 correctly (by throwing an error)
* corrected ldap.functions export list to remove long gone items
Doc:
* fd ownership has now been clarified - if providing an fd to set up a new
LDAPObject, it is now owned and managed by the module, do not close it
yourself
* clarifications on handling EINTR -> use OPT_RESTART
* clarified build dependencies
* clarified OPT_CLIENT_CONTROLS/OPT_SERVER_CONTROLS
py-extension-helpers: updated to 1.5.0
1.5.0
New Features
Fix support for src/ layout even without setup.py
Bug Fixes
Fix incorrect path to _compiler.c for 'src' layout packages
Look for setup.cfg in current directory, not srcdir
fail2ban: updated to 1.1.1
1.1.1
Compatibility
action.d/iptables.conf rewritten due to support of multiple chains (gh-3909), therefore user-level derivations (action including iptables-based action) may become incompatible, e. g. some tags if used need to be replaced, e. g. <chain> with $chain or <_ipt_for_proto-iter> with <_ipt-iter>;
filter.d/exim.conf - several rules of mode normal moved to new mode more, because of too risky handling (see gh-3940), to use it as before set mode = more for exim jail, but be aware of the consequences.
Fixes
fixes catastrophic backtracking explosion for REs in domino-smtp and dovecot filters (GHSA-33wh-ccjc-p397, gh-4221)
fixes systemd bug with missing journal descriptor after rotation by reopening of journal if it is recognized as not alive (gh-3929)
improve threaded clean-up of all filters, new thread functions afterStop (to force clean-up after stop) and done, invoking afterStop once
ensure journal-reader is always closed (additional prevention against leaks and "too many open files"), thereby avoid sporadic segfault in systemd module
fixes systemd causing "too many open files" error for a lot of journal files and large amount of systemd jails (see new parameter rotated below, gh-3391);
passing of arguments from jails to action or filter will affect conditional section too (gh-4069), e. g. setting blocktype="DROP" via jail for action would now apply for IPv4 and IPv6 chains, to submit different blocktype for IPv4 and IPv6 from jail, one can pass them like in this example: banaction = iptables-ipset[blocktype="...", blocktype?family=inet6="..."]
jail.conf:
default banactions need to be specified in paths-*.conf (maintainer level) now
[46 lines not shown]
libmaxminddb: updated to 1.14.1
1.14.1 - 2026-09-17
- Fixed a `-Wsign-compare` warning in `MMDB_open()` that broke builds with
`-Werror` on platforms where `ssize_t` is 32 bits, such as i686.
git-lfs: updated to 3.8.0
3.8.0 (27 August 2026)
This release is a feature release which adds support for
zstd-compressed object downloads and introduces several new options,
including the ability to fetch Git LFS objects for a list of references
piped to standard input and the ability to limit how long Git LFS
will wait when instructed by a server to retry an HTTP request.
Git LFS now determines the case sensitivity of filesystems from the
`core.ignoreCase` Git configuration option, respects global and
system-wide Git attribute files when migrating repositories, and
tries the default Git LFS HTTP URL derived from an SSH URL when
HTTP authentication via SSH is not available.
This Git LFS release improves SSH session reuse, parses invalid
custom transfer adapter configurations and invalid Git attribute
patterns without crashing, handles file deletion conflicts on Windows
[13 lines not shown]
ffmpeg8 ffplay8: updated to 8.1.3
version 8.1.3:
Revert "lavfi/bwdif: fix heap-buffer-overflow with small height videos"
avfilter/vf_bwdif: fix line boundary checks for >8 bits content
avformat/hlsenc: fix compile error when mp4 is disabled
swscale/unscaled: fix rgbToRgbWrapper for non-native-endian formats
avformat/hls: avoid casting callback functions type
avcodec/vulkan/ffv1_dec_setup: act on the slice header rejection
avformat/hlsenc: reject out-of-range EXT-X-PROGRAM-DATE-TIME
avformat/http: only reuse old connection if valid
avformat/http: properly re-set s->range_end before requests
avutil/rational: avoid signed integer overflow
avformat/mpegts: Fix memleak of pes_filter.opaque
avcodec/leaddec: Check input data before allocating buffer
avcodec/jpeglsdec: bound cumulative decoded JPEG-LS height per packet
avcodec/cbs_h265: allocate VPS hrd_parameters dynamically
avcodec/atsc_a53: Avoid GetBits API to parse A53 CC data
avcodec/pngdec: bound decompressed zTXt/iCCP size (decompression-bomb guard)
[243 lines not shown]
py-uv py-uv-build: updated to 0.12.17
0.12.17
Enhancements
Reject unsupported Git archive paths in lockfiles with a clear error instead of panicking during frozen exports
Preview features
Set minimum glibc and musl versions that universal resolutions must support with minimum-libc-version
Reject pylock.toml files whose wheel filenames do not match their declared package names or versions
Keep uv workspace metadata read-only unless --sync is provided
Apply uv check lock modes when retrieving workspace metadata
Performance
Speed up builds with many exclusion patterns by avoiding quadratic deduplication
Reduce resolver allocations when deduplicating package and distribution requests
[8 lines not shown]
ssh-audit: updated to 3.9.0
3.9.0
The highlights of this release are:
Warnings will be issued on key exchanges that are not post-quantum safe.
Hardening guides are now included for all supported platforms (see --list-hardening-guides).
UNIX sockets can be used as scan targets (specified with unix:///path/to/socket); useful in containerized environments such as CI/CD pipelines.
Scanning through SOCKS5 proxies can now be done (with --socks5).
A variety of new post-quantum algorithms can now be identified.
py-watchfiles: updated to 1.3.0
1.3.0
Bump pyo3 from 0.28.3 to 0.29.0
Add Python 3.14t to Windows wheel builds
Build abi3 wheels for CPython
prep v1.3.0 release
py-wcwidth: updated to 0.8.4
0.8.4 *2026-09-17*
* **Bugfix** `clip()`_ hangs with OSC 8 hyperlinks in some conditions
* **Bugfix** width of ITU T.416 colon-format SGR color parameters
* **Bugfix** width of OSC 66 text sizing sequences without a text field
* **Bugfix** `width()`_, `ljust()`_, `rjust()`_, `center()`_, `clip()`_ and `strip_sequences()`_
treated ``ESC ( LF`` as text instead of a character set designation (rare)
* **Bugfix** `clip()`_ painter's algorithm and "tab expansion" should be spaces
* **Changed** `iter_graphemes()`_ clustering rule GB9c for Unicode 18.0
* **Changed** ``ambiguous_width`` arguments are now clamped to allowed range (1, 2)
* **Changed** `wrap()`_ now raises ``ValueError`` for a width of zero or less, matching stdlib
``textwrap``. Previously ``wrap('女', 0)`` returned ``['女']``
* **Changed** `clip()`_ arguments ``start=0`` and ``end=-1`` become optional
* **Updated** tables for Unicode version 18.0
* **Updated** ``ucs-detect`` data files used in some automatic tests are no longer
distributed,
py-aiohttp-cors: updated to 0.8.1
0.8.1 (2025-03-31)
- Fix packaging to not install on Python 3.8.
0.8.0 (2025-03-11)
- Make the library compatible with aiohttp 3.9+ and Python 3.9+
