harfbuzz: updated to 14.5.1
Overview of changes leading to 14.5.1
- Map the `fonupa` (Uralic Phonetic Alphabet) BCP 47 variant to the `UPPH`
OpenType language system tag.
- Produce smaller `cmap` subtables and drop no-op variation device tables when
subsetting.
- Fix possible deadlock in `hb_font_destroy()` after `hb_ft_font_set_funcs()`,
a regression from 14.5.0.
- Fix signed integer overflows when scaling glyph extents and applying
synthetic slant and emboldening.
- Fix float-to-int overflow in `VARC` component axis coordinates with
malformed fonts.
- Fix a memory leak in the experimental WebAssembly shaper when shaping with
features.
- Fix accumulator overflows in the experimental raster library when rendering
glyphs with very many overlapping edges.
- Fix heap buffer overflow in the experimental GPU library with malicious
[2 lines not shown]
rumdl: update to 0.2.78.
Added
MD013: add cjk-soft-break option to join CJK line breaks without a space (5b5a744)
MD013: reflow definition list definitions (f07ddc8)
Fixed
MD013: keep CJK sentences on separate lines in semantic-line-breaks mode (ea2798d)
MD013: join soft breaks in MkDocs admonitions and tabs with one space (962f1ee)
code-block-tools: invalidate cached results when a lint tool changes (5ff393b)
code-block-tools: treat empty formatter output as a tool failure (8e1a0e7)
code-block-tools: report lint tool failures at their block and honor on-error in check (9f3ea71)
playground: build the playground engine from the repository at deploy time (e342590)
keep each line's ending when fixing a file with mixed line endings (6491db8)
lsp: apply every content change in a didChange notification (499d132)
output: map rule severity onto GitLab Code Quality severity (9e795b9)
MD032: withhold blank lines that would change how the lists parse (0db96d9)
[64 lines not shown]
dnscontrol: Update to 5.3.0
Changelog
Breaking changes:
9710715: feat(M365_BUILDER)!: rewrite in Go and update the records to Microsoft's current requirements (#4936) (@jonathan8devs)
Provider-specific changes:
b719bca: feat(p/AZURE_PRIVATE_DNS): Add OIDC support / support same auth methods as AZURE_DNS (#4929) (@TomOnTime)
c65a9c4: feat(p/BUNNYDNS): add GeoDNS metadata support (#4941) (@xddxdd)
03db6d3: feat(p/BUNNYDNS): manage health monitoring features via dnsconfig.js (#4951) (@xddxdd)
794895e: feat(p/GCORE): add "golden file" tests (#4942) (@xddxdd)
5ea9471: feat(p/OPENPROVIDER): add Openprovider as a new provider (#4891) (@nvanlaerebeke)
333b7b1: fix(p/FORTIGATE): ask the TLS and HTTP debug settings as yes/no questions in init (#4878) (@cafferata)
e7e452f: fix(p/OPENPROVIDER): retry transient API failures with diagnostics (#4937) (@nvanlaerebeke)
c5fabaa: fix(p/REALTIMEREGISTER): ensure proper quoting of txt records (#4945) (@BigDataJohan)
New features:
7935ffd: feat: Add new PROVIDER()/REGISTRAR()/DNS_SERVICE() syntax (#4955) (@TomOnTime)
966e4cf: feat: NEW PROVIDER: MITTWALD (Mittwald mStudio provider) (#4933) (@twiesing)
9091ae9: feat: NEW PROVIDER: SPACESHIP (DNS provider and registrar) (#4921) (@rootful)
94a262d: feat: Normalize all "targethost" and hex-encoded fields (#4944) (@TomOnTime)
[14 lines not shown]
rust: update to 1.98.1
Prepared in wip/rust198 by he@, thank you!
1.98.1
Rust 1.98.1 fixes a miscompilation in vtable generation.
1.98.0
Algebraic floating-point methods
Buffered integer formatting
Fix interaction between ManuallyDrop and Box
1.97.1
Rust 1.97.1 fixes a miscompilation in an LLVM optimization.
1.97.0
[4 lines not shown]
py-cryptography py-cryptography_vectors: updated to 50.0.2
50.0.2 - 2026-09-30
Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.3.
Added abi3.abi3t wheels for free-threaded CPython 3.15 and later.
Updated to PyO3 0.29.2, which fixes building cryptography on Cygwin and MSYS2.
py-uv py-uv-build: updated to 0.12.21
0.12.21
Python
Update CPython to use OpenSSL 3.5.9
Enhancements
Omit empty [manifest] tables from lockfiles that contain only manifest subtables
Preview features
Omit redundant runtime constraints from uv.lock, including those involving pre-releases, with the resolution-inputs preview feature
Bug fixes
Prevent uv python pin --rm from removing a global .python-versions file without --global
Fix installed-package checks incorrectly reporting post-releases as incompatible with exclusive lower bounds on pre-releases
tcpdump: updated to 4.99.7
Summary for 4.99.7 tcpdump release
Source code:
NetFlow: Use tcp_flag_values[] for TCP flags.
Disregard setlinebuf(3), always use setvbuf(3).
Refine protocol decoding for:
MPTCP: parse MPC data_len field, print flags from MP_CAPABLE option,
dissect the MP_TCPRST sub-option.
TCP: Add support for the AE (AccECN) flag.
IP: Update the offload "presumed TSO" case for "BIG TCP".
IP: Call ip_demux_print() with the correct payload length.
ISAKMP: Validate item_len before subtracting sizeof(ikev2_id).
User interface:
Print an error message about --count without -r or -V.
Building and testing:
Treat SA_RESTART as optional.
CI: Implement cross-compiling with libpcap.
Fix compiling on GNU/Hurd.
[2 lines not shown]
libpcap: updated to 1.11.0
Summary for 1.11.0 libpcap release
Source code:
Use C99 fixed-width integer types, rather than self-defined
fixed-width integer types, in rpcap code.
Clean up DECnet address handling.
struct pcap: Update buffer type from "void *" to "u_char *".
Remove dead code that supported SITA ACN devices.
Remove the TODO file.
Merge four header files into gencode.c.
Remove DAG card support on Windows as Linux is the only
platform currently supported.
Remove code related to Riverbed TurboCap card.
Riverbed TurboCap hardware has reached EOA as of Jun 30 2014.
Remove dead code that supported Septel devices.
Remove outdated code related to AirPcap HW.
The Riverbed AirPcap Product has reached End of Availability
(EOA) as of December 31, 2017
[149 lines not shown]
gstreamer1: updated to 1.28.7
1.28.7
Highlighted bugfixes:
Various security fixes and playback fixes
appsrc EOS handling regression fix for applications pushing EOS into a blocked appsrc
glcolorconvert fixes for older OpenGL/GLSL versions
mxfdemux: Fix keyframe detection regression and possible artefacts after seeking
QML6 GL Overlay output texture lifetime handling fixes
opencv: Add support for building against OpenCV 5
hip: Add missing API version suffix in HIP support library filename and fix hipcc detection on Windows with HIP SDK 7.x
analytics: fix classes off-by-one in ssdtensordec leading to mislabelling of objects in the examples
isobmff: Fix min_display_mastering_luminance in mdcv box
rtpbin2: rtprecv: limit the number of remote sources being tracked
st2038anc: parity bit handling fixes for ST 291 ADF words
video converter and videoconvertscale fixes
mpegdemux: restore gap event sending in MPEG-PS demuxer
[3 lines not shown]
multimedia/moviebox-tui: update to 0.1.25
Fixed
Search Navigation & Pagination Engine:
Gated background search pagination in src/tui/app/navigation.rs so arrow navigation on result sets smaller than the visible viewport never triggers background page fetches.
Added search_exhausted tracking in src/tui/state.rs and src/tui/app/requests.rs, stopping pagination crawls when provider search returns fewer than 15 items or zero query-matching results.
Preserved stable card slot positions during search pagination in src/tui/app/requests.rs by appending subsequent page items to the list rather than re-sorting the entire array out from under the cursor.
Removed redundant "Provider: {name}" status message override from the search bar on provider switch in src/tui/app/navigation.rs, preserving the clean search placeholder while the active provider pill displays on the right.
Media Playback & Buffering Engine:
Prioritized native desktop media players (mpv, VLC) over Android intent openers in src/player.rs when an active X11/Wayland display server ($DISPLAY, $WAYLAND_DISPLAY) is detected, preventing Ubuntu Xfce (udroid/PRoot) and Termux:X11 desktop sessions from dispatching playback to external Android app choosers.
Routed DASH .mpd streams through the local StreamRelay proxy (src/proxy.rs, src/tui/app/playback.rs) across all media players (mpv, IINA, VLC, AndroidIntent), caching rewritten .mpd manifests in RAM, warm-prefetching initialization and opening segments on sidecar startup, fetching .m4s segments via concurrent 95 KB HTTP Range sub-requests (0.286s per segment vs 3.120s), and prefetching both the next 3 video segments (N+1..N+3) and synchronized audio segments (chunk-stream3-N..N+1).
Tuned mpv and IINA playback flags (--hwdec=auto-safe, --stream-buffer-size=4M, --cache-secs=120, --cache-pause-wait=3, --cache-pause-initial=no, and --ytdl=no on non-DASH direct streams) in src/player.rs, reducing 1080p cold-seek latency at 01:00:00 from 11.96s to 3.87s and boosting read-ahead buffer fill rate from 1 MB (9.3s) to 7 MB (53s).
Replaced aggressive VLC buffering flags (--network-caching=10000, --adaptive-logic=nearoptimal) with --network-caching=3000, --file-caching=3000, --http-reconnect, and --adaptive-logic=predictive in src/player.rs to stop demuxer stream restarts and reconnect cleanly on dropped HTTP streams.
Enforced max_height resolution limits in the loopback stream proxy manifest rewriter (src/proxy.rs, src/main.rs, src/tui/app/playback.rs), pruning representations exceeding the chosen ceiling so Android players and VLC respect 480p and 720p selections.
Parsed signed expiration timestamps (:t=) from MovieBox Edge-Cache-Cookie headers in src/cache.rs alongside CloudFront policies, automatically invalidating stale stream cache entries within 60 seconds of expiration to prevent HTTP 403 playback crashes.
Persisted selected stream filenames (stream_filename) in watch history (src/history.rs, src/player/tracker.rs, src/tui/app/playback.rs) and auto-focused matching stream rows on load (src/tui/app/requests.rs, src/tui/app/system.rs), restoring the user's previously chosen quality mirror when resuming multi-stream releases.
Enabled TCP nodelay (stream.set_nodelay(true)) and per-chunk immediate flushes on the local StreamRelay proxy in src/proxy.rs, eliminating 100–300ms time-to-first-frame buffering delays on loopback sockets.
Implemented negative caching (Option<Option<String>>) for media player detection (MPV_CACHED, VLC_CACHED, IINA_CACHED) in src/player.rs, eliminating redundant filesystem scans and registry lookups when players are absent.
[45 lines not shown]
py-zeroconf: updated to 0.151.5
v0.151.5 (2026-09-28)
Bug Fixes
- Build only the sdist in the release job
v0.151.4 (2026-09-28)
Bug Fixes
- Skip adapter scan for interface lists with no IPv6 entries
