py-scikit-learn: updated to 1.9.1
1.9.1
Support for Array API
- |Fix| Fixed classification metrics to accept pandas labels when array API dispatch
is enabled and predictions are from a different array API namespace or
device.
By :user:`Olivier Grisel <ogrisel>`.
Metadata routing
Refer to the :ref:`Metadata Routing User Guide <metadata_routing>` for
more details.
- |Fix| Metadata is now correctly routed to the sub-estimator of meta-estimators such as
:class:`feature_selection.SelectFromModel`, :class:`feature_selection.RFE`,
:class:`feature_selection.RFECV`, :class:`feature_selection.SequentialFeatureSelector`,
[112 lines not shown]
compat_linux_test_project: update to 0.11 and take MAINTAINER role
Changes since 0.10:
Ensures that the output_file only has printable characters so that the
shar reference logs are valid.
knot-resolver: Update to 6.5.1
Thursday, October 22, 2026
Security
fix crash when forwarding - DoS via NULL deref Reporters: Yuqi Qiu and Xiang Li, Nankai University (AOSP Lab).
fix crash or loop - DoS Reporters: Joshua from AISLE
exhaustion of ports for outgoing TCP - DoS The attack only worked if /network/out-interface-* was configured. Reporters: Jonathan Horovitz, Yehuda Afek, and Anat Bremler-Barr from Tel Aviv University.
Bugfixes
python: fix logging level mapping bug, regressed in 6.5.0 (!1918)
fix build with musl libc, regressed in 6.5.0 (!1917)
DoH: the unencrypted mode opened also a UDP socket (!1921)
Improvements
performance of reloads with large cache on tmpfs (!1924)
git-lfs: updated to 3.8.1
3.8.1 (22 October 2026)
This release introduces security fixes for four vulnerabilities that
have been assigned the identifiers CVE-2026-69260, CVE-2026-69261,
CVE-2026-105802, and CVE-2026-105803. These vulnerabilities apply
to all of the operating systems supported by Git LFS.
* CVE-2026-69260:
When Git LFS sends a remote command via SSH, it does not properly
format the argument it derives from the remote SSH URL. Servers
which pass remote commands to a shell without sanitizing their
arguments may be induced to execute malicious programs.
Git LFS has resolved this problem by fully quoting the arguments
of the remote commands it sends via SSH.
[32 lines not shown]
buf: updated to 1.75.0
1.75.0
- Fix `buf build` dropping `message_set_wire_format`, `weak` field options, and MessageSet
extensions, and truncating MessageSet extension ranges, when a file has an unused import.
- Fix LSP crash when hovering on a CEL string literal containing a byte that is not valid UTF-8,
such as `'\x95'` in a protovalidate rule.
- Add `BUF_DEBUG`, `BUF_LOG_FORMAT`, and `BUF_TIMEOUT` environment variables as defaults for the
`--debug`, `--log-format`, and `--timeout` global flags. Flags take precedence when set.
- Add support to images for option dependencies declared with the `import option` syntax in
edition 2024 and later.
- Add support for Protobuf edition 2026.
- Update built-in Well-Known Types to Protobuf v36.2.
- Update managed mode to skip `cc_enable_arenas` for edition 2026 files, where the option was
removed.
- Fix `buf convert` and `buf curl` ignoring the `(pb.enumvalue.json).string` option for enum
value JSON names.
libansilove: updated to 1.4.3
libansilove 1.4.3 (2026-10-21)
- Update README to add a link to the Nix package
- Allow overriding the definition of ANSILOVE_EXTERN (Thanks Martin Fiedler)
- Provide a compatibility fallback implementation for strndup (Thanks Martin
Fiedler)
- Document support for PabloDraw 24-bit ANSI sequences
- Fix line wrapping when the cursor exceeds the column limit in ANSI and
PCBoard loaders
- Advance TAB to the next tab stop in ANSI and PCBoard loaders
(Both issues were reported by Aaron Myles Landwehr, thanks!)
- Fix black background with the blink bit in BinaryText files when iCE colors
are disabled (Thanks Joash Chee)
libtorrent rtorrent: updated to 0.16.26
RTorrent 0.16.26
Bug Fixes / Cleanup / Improvements
Reimplement torrent::Rate with a per-second ring buffer
Removed old LOG_TORRENT_* categories and replaced with LOG_TORRENT_{D…
Make storage logging categories non-cascading
Make general severity log categories non-cascading
Removed log_subsystem to simplify the logging API.
Optimize Piece queues by using unorderd_map with linked list.
Never keep more requests in flight to one peer than it queues
Refuse a zero info hash in download_add() as invalid input
Erase NetworkConfig's pending change notification on destruction
Return an invalid Download from download_find() for an unknown hash
Add fd_flag_v6 so fd_open_family() opens AF_INET6 without an IPv4 fal…
Remove leftover downloads before torrent::cleanup() destroys the threads
Pause the listener when accept() runs out of descriptors instead of throwing
[23 lines not shown]
py-awscli: updated to 1.46.2
1.46.2
* bugfix:``credentials``: Include the web identity token in the credential cache key to prevent collisions across different tokens for the same role.
py-boto3: updated to 1.43.118
1.43.118
* api-change:``bedrock-agentcore``: [``botocore``] Adds the dimension name to evaluation results and batch evaluation summaries. For multi-dimensional LLM-as-a-Judge evaluators, each result and summary now identifies which dimension it corresponds to.
* api-change:``bedrock-agentcore-control``: [``botocore``] Adds model-based routing and fallback to AgentCore Gateway rules. Rules can match the requested model, route to a specific model, and fall back across inference targets with an optional circuit breaker. Adds multi-dimensional rating scales for AgentCore Evaluations LLM-as-a-Judge evaluators.
* api-change:``connect``: [``botocore``] Adds support for customer queryable replication errors.
* api-change:``continuum``: [``botocore``] Releasing Continuum for Code Vulnerabilities APIs for SDKs
* api-change:``ec2``: [``botocore``] AWS Transit Gateway now provides managed one-to-one NAT directly on its attachments, through integration with Regional Private NAT Gateway. Use ModifyTransitGatewayAttachmentNatConfiguration to enable NAT and configure NAT rules, and GetTransitGatewayAttachmentNatConfiguration to view them.
* api-change:``elementalinference``: [``botocore``] Elemental Inference now supports feed scheduling, letting you apply feed configuration changes at a time you choose instead of building your own automation.
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
* api-change:``glue``: [``botocore``] Add support for large worker types in AWS Glue
* api-change:``ivs-realtime``: [``botocore``] Adds RevokeConnectionToken operation for Amazon IVS Real-Time Streaming.
* api-change:``kafkaconnect``: [``botocore``] Amazon MSK Connect now supports pausing and resuming connectors via the asynchronous PauseConnector and ResumeConnector APIs. Paused connectors keep their configuration and committed offsets and resume where they left off. Each call returns an operation ARN to track with DescribeConnectorOperation.
* api-change:``lambda``: [``botocore``] AWS Lambda durable functions now supports payloads up to 1 MB for checkpoints, callback completion, and error details.
* api-change:``networkmanager``: [``botocore``] AWS Cloud WAN now provides managed one-to-one NAT directly on it's core network attachments, through integration with Regional Private NAT Gateway. Use UpdateAttachmentNatConfiguration to enable NAT and configure NAT rules, and ListAttachmentNatConfigurations to view them.
* api-change:``opensearchserverless``: [``botocore``] Adds APIs to create, get, list, and cancel ingestion jobs, and to create, get, list, and delete ingestion streams, for ingesting data from Amazon S3 into OpenSearch Serverless collections.
[34 lines not shown]
py-botocore: updated to 1.43.118
1.43.118
* api-change:``bedrock-agentcore``: Adds the dimension name to evaluation results and batch evaluation summaries. For multi-dimensional LLM-as-a-Judge evaluators, each result and summary now identifies which dimension it corresponds to.
* api-change:``bedrock-agentcore-control``: Adds model-based routing and fallback to AgentCore Gateway rules. Rules can match the requested model, route to a specific model, and fall back across inference targets with an optional circuit breaker. Adds multi-dimensional rating scales for AgentCore Evaluations LLM-as-a-Judge evaluators.
* api-change:``connect``: Adds support for customer queryable replication errors.
* api-change:``continuum``: Releasing Continuum for Code Vulnerabilities APIs for SDKs
* api-change:``ec2``: AWS Transit Gateway now provides managed one-to-one NAT directly on its attachments, through integration with Regional Private NAT Gateway. Use ModifyTransitGatewayAttachmentNatConfiguration to enable NAT and configure NAT rules, and GetTransitGatewayAttachmentNatConfiguration to view them.
* api-change:``elementalinference``: Elemental Inference now supports feed scheduling, letting you apply feed configuration changes at a time you choose instead of building your own automation.
* api-change:``endpoint-rules``: Update endpoint-rules client to latest version
* api-change:``glue``: Add support for large worker types in AWS Glue
* api-change:``ivs-realtime``: Adds RevokeConnectionToken operation for Amazon IVS Real-Time Streaming.
* api-change:``kafkaconnect``: Amazon MSK Connect now supports pausing and resuming connectors via the asynchronous PauseConnector and ResumeConnector APIs. Paused connectors keep their configuration and committed offsets and resume where they left off. Each call returns an operation ARN to track with DescribeConnectorOperation.
* api-change:``lambda``: AWS Lambda durable functions now supports payloads up to 1 MB for checkpoints, callback completion, and error details.
* api-change:``networkmanager``: AWS Cloud WAN now provides managed one-to-one NAT directly on it's core network attachments, through integration with Regional Private NAT Gateway. Use UpdateAttachmentNatConfiguration to enable NAT and configure NAT rules, and ListAttachmentNatConfigurations to view them.
* api-change:``opensearchserverless``: Adds APIs to create, get, list, and cancel ingestion jobs, and to create, get, list, and delete ingestion streams, for ingesting data from Amazon S3 into OpenSearch Serverless collections.
[34 lines not shown]
py-importlib-metadata: updated to 9.1.0
v9.1.0
Features
- Removed support for Python 3.10, now end-of-life.
- Where a path supplies more than one metadata directory for a distribution,
as an interrupted or unclean upgrade may leave behind, discovery now prefers
the greater one by reverse lexicographic ordering of the directory names, so
the stale metadata no longer shadows the version in use.
Bugfixes
- A missing required metadata field (``Name`` or ``Version``) now raises a
``KeyError`` that names the field and identifies the distribution, which
``PathDistribution`` renders as its metadata path.
- Restored lazy validation of ``EntryPoint.value``, deferring the ``ValueError``
for an invalid value until a component is accessed or the entry point is
[5 lines not shown]
Pullup ticket #7317 - requested by bsiegert
archivers/libarchive: Build fix
Revisions pulled up:
- archivers/libarchive/files/Makefile.am 1.29
---
Module Name: pkgsrc
Committed By: dholland
Date: Wed Oct 21 23:38:31 UTC 2026
Modified Files:
pkgsrc/archivers/libarchive/files: Makefile.am
Log Message:
archivers/libarchive: fix build on -10 / with older bmake
Avoid using $^ in the makefile. With bmake that doesn't support it,
which includes the one on -10 which is still supported, it expands to
[8 lines not shown]
