Updated sysutils/xenkernel420 to 20260911
Updated sysutils/xentools420 to 20260911
Updated sysutils/xenstoretools to 20260911
Updated sysutils/xenkernel418 to 20260911
Updated sysutils/xentools418 to 20260911
dpkg: updated to 1.23.11
dpkg (1.23.11) unstable; urgency=medium
* dpkg: Improve maintscript abort-* execution diagnostics.
* dpkg-shlibdeps: Do not validate existence of -l option argument.
* Code internals:
- dpkg: Use a proper conditional instead of a ternary operator for
f_triggers.
- dpkg: Refactor tarobject_describe_type() into a new function.
- dpkg-split: Refactor depot handling functions out of do_auto().
strawberry: updated to 1.2.30
1.2.30
Bugfixes
Fixed an out-of-bounds memory access in HMAC signing when using keys longer than the hash's block size, affecting request signing for Discogs and Musixmatch
Fixed the build failing when the tag fetcher (AcoustID) is disabled
Changed API credentials for Spotify for production use
py-matrix-nio: updated to 0.26.0
0.26.0
Breaking Changes
* Replace libolm/python-olm with vodozemac for end-to-end encryption
The e2e extra now depends on vodozemac instead of python-olm, and libolm is no longer required as a system dependency.
Existing encryption stores are migrated automatically on load. Stores created with a libolm pickle version older than 4 (roughly, pre-December 2021) can only be migrated if the optional python-olm >= 3.2.7 package is installed at upgrade time; without it, those pickles cannot be read.
hmac-sha256 is no longer offered as a SAS message authentication code; only hkdf-hmac-sha256 is supported.
Account.remove_one_time_keys() has been removed, as it is no longer supported by the underlying library.
* Drop support for end-of-life python3.8 and python3.9; the minimum supported version is now python3.10
Features
* Add unread_thread_notifications to SyncResponse
Bug Fixes
[2 lines not shown]
py-vodozemac: added version 0.10.0
Python bindings for vodozemac.
vodozemac is a pure Rust implementation of the Olm and Megolm cryptographic
ratchets, offering a high-level API for straightforward creation of secure
communication channels using these ratchets.
py-wrapt: updated to 2.4.1
2.4.1
Bugs Fixed
The C extension implementation of PartialCallableObjectProxy did not expose the bound positional and keyword arguments supplied when the proxy was created, whereas the pure Python implementation makes them available as the _self_args and _self_kwargs attributes. The C extension implementation now provides read only _self_args and _self_kwargs attributes so that both implementations behave the same.
inspect.signature() applied to a PartialCallableObjectProxy reported the full signature of the wrapped callable, including the parameters that the bound positional and keyword arguments already supply, whereas for functools.partial those parameters are removed. The proxy did not define __signature__, so inspect followed __wrapped__ back to the callable and reported its signature unchanged. The proxy now provides __signature__ on instances, in both the pure Python and C extension implementations, giving the same result as for an equivalent functools.partial, including a ValueError when more positional arguments are bound than the callable accepts.
This also affected wrapper functions used with FunctionWrapper and @wrapt.decorator. When a wrapped method is called via its class with the instance passed explicitly, the wrapper function receives a PartialCallableObjectProxy with the instance bound, and args without the instance. A wrapper which bound args and kwargs against inspect.signature(wrapped) would fail for such calls with a TypeError about a missing argument, while working for calls made via the instance. The reported signature now omits the bound instance so the binding succeeds.
The signature of a partial whose wrapped callable is itself an already bound method is still reported incorrectly, for reasons outside of the control of wrapt. See the “Known Issues” documentation for details.
The C extension intercepts the __module__ and __doc__ attributes by name in its attribute get and set slots so that they are forwarded to the wrapped object. The name was compared by identity against an interned string, which relied on the attribute name having been interned. Names originating from Python source code always are, but a name constructed at runtime, for example by string concatenation or by decoding, is not, and for such a name the interception was skipped. Getting the attribute then returned the value captured when the proxy was created rather than the current value on the wrapped object, and setting it stored the value on the proxy rather than the wrapped object. The comparison now falls back to comparing by value when the identity check fails, guarded by a length check so that the cost for non matching names is unchanged.
py-hypothesis: updated to 6.168.0
6.168.0 - 2026-09-08
datetimes() now generates “tricky” datetimes more often: values on or near daylight-saving and other utc-offset transitions of the drawn timezone - including imaginary wall times, and ambiguous ones with each value of fold - as well as times adjacent to leap seconds and to well-known datetimes like the millennium and the end of the signed 32-bit Unix epoch.
This release also fixes some rare internal errors, where an error raised partway through updating an internal cache - for example by a deeply recursive strategy raising RecursionError - could leave that cache corrupted.
www/webkit-gtk41: Revise comment about finding sqlite3
This is a comment-only change.
Somehow, cmake finds libraries in the buildlink path instead of the
real path. For most of them, the -L/rpath stuff ends up correct in
the built library. For sqlite3, for me on NetBSD 10 amd64 building
normally (not bulk), the buildlink path ends up in the final library.
Explain the problem better.
py-virtualenv: updated to 21.7.9
Bugfixes - 21.7.9
Replace dangling symlinks, including interpreter aliases, when recreating an environment. This prevents FileExistsError with --symlinks and writes outside the environment with --copies
Ignore malformed or unreadable virtualenv.ini files and report the error in the log and --help. Accept a UTF-8 byte order mark, as written by PowerShell 5 and older Notepad versions
py-tox: updated to 4.61.4
Bug fixes - 4.61.4
Shebang parsing now uses shlex, so a quoted interpreter path that contains spaces is kept as one argument when TOX_LIMITED_SHEBANG rewrites the invocation
Bug fixes - 4.61.3
A set_env environment file (file|.env) is now read as UTF-8 instead of the platform’s locale encoding, so non-ASCII values no longer arrive mangled on Windows
Preserve UNC and extended-length paths in Windows commands, including quoted paths
Normalize project and extra names in dependency-group self-references
Register factor labels and defaults for bare labeled dicts in env_list
py-filelock: updated to 3.32.6
3.32.6
fix(lease): reject a duration no marker can carry
fix(soft-rw): reject non-finite timing options
fix: preserve exception notes when copying and pickling
test(soft-rw): reuse existing test module
fix: respect ACL write access when the owner write bit is absent
Fix SoftReadWriteLock state lock timeout
py-diff-cover: added version 10.5.1
Automatically find diff lines that need test coverage. Also finds diff lines
that have violations (according to tools such as pycodestyle, pyflakes, flake8,
or pylint). This is used as a code quality metric during code reviews.
py-lazr.config: updated to 4.0.0
4.0.0
- Replace ``pkg_resources`` namespace with a PEP 420 native namespace.
- Consolidate packaging into a single ``pyproject.toml`` (remove ``setup.py``,
``setup.cfg``, and ``_version.py``).
- Standardize tox, Launchpad CI, pre-commit, and contributor documentation.
py-lazr.delegates: updated to 4.0.0
4.0.0
- Replace ``pkg_resources`` namespace with a PEP 420 native namespace.
- Consolidate packaging into a single ``pyproject.toml`` (remove ``setup.py``,
``setup.cfg``).
- Add support for Python 3.14.
- Update security auditing and linting.
- Standardize tox, Launchpad CI, pre-commit, and contributor documentation.
