databases/postgresql-postgis2: Update to 3.7.0
Packaging changes:
- Accomodate upstream's removal of address standardizer.
- Accomodate upstream's removal of TIGER geocoder.
Upstream NEWS:
PostGIS 3.7.0
2026/10/29
This version requires GEOS 3.10+, PostgreSQL 14-19beta3, Proj 6.1+, and libgmp.
To take advantage of all postgis extension features, GEOS 3.15+ is needed.
To take advantage of all postgis_sfcgal extension features SFCGAL 2.3+ is needed.
Python 3 is a new requirement to build the documentation.
Visual examples in the docs are off by default. To build docs with them,
configure with `--with-visual-examples` and make sure you have a running
[61 lines not shown]
patchelf: updated to 0.19.3
0.19.3
Bug fixes
Fix overlapping load segment mappings when growing an executable's interpreter
and then rewriting its RPATH. Preserve writable coverage of .dynamic so the
dynamic loader can update DT_DEBUG, fixing crashes in musl bootstrap GCC and
GNAT
Reuse the header load segment for further growth and reserve enough file and
virtual address space after strip removes padding, preventing later rewrites
from overlapping mappings or corrupting section contents
Keep the program header table covered by a load segment when repeated
executable rewrites split note segments and grow the table. This fixes invalid
PHDR coverage on x86_64 and an assertion failure on AArch64, including when
patching Grpc.Tools binaries
Update DT_VERDEF when .gnu.version_d is relocated, preventing the dynamic
loader from following stale symbol version definitions and crashing before
[3 lines not shown]
lerc: updated to 4.3.0
4.3.0
* Added more security fixes. Most of them found by AI. Added or fixed byte counting for the decoder to prevent a possible buffer overrun.
zstd: stop installing zstdgrep
The script requires GNU grep, and this leads to a bootstrap cycle
on systems that do not have GNU grep in the base system.
As proposed on tech-pkg.
zstdgrep will be packaged separately.
Bump PKGREVISION.
dmarc-report-viewer: Update to version 2.7.0
## [2.7.0] - 2026-10-31
* Security: Limit maximum number of parallel DNS requests triggered by Web UI.
* Security: Check peer address for DNS responses.
* Fix: Added logging of missing DNS configuration values.
* Fix: Count on mail sources page now shows the number of instances the IP was reported.
* Fix: 500 Internal server error for some IP info requests is now gone.
* Change: Removed IP details from DMARC and SMTP TLS report details and replaced with new IP dialog.
* Feature: Greatly improved filtering options for summary charts, mails, DMARC and SMTP TLS reports.
* Feature: Allow custom time span filtering for summary charts, mails, DMARC and SMTP TLS reports (see issues #82 and #32).
* Feature: App uses now RwLocks instead of Mutex for app state and DNS cache to allow more parallel read operations.
* Feature: Show failure count sum in SMTP TLS report list.
* Feature: Show record count sum in DMARC report list.
* Feature: Added JSON bulk export of filtered DMARC and SMPT TLS reports (see issue #92).
* Feature: Added new IP dialog with all available information about an IP.
It also allows to open filtered lists of all DMARC or SMTP TLS reports for that IP (see issues #81 and #56).
* Updated Cargo dependencies.
py-test-mypy-plugins: updated to 4.1.0
4.1.0
Features
Added a marks field to test cases, applying pytest markers so cases can be
selected with pytest -m <marker>,
Adds official python3.15 support,
Support mypy at 2.4.0
Bugfixes
Remove fspath argument from YamlTestFile.from_parent,
Isolate mypy cache per pytest-xdist worker,
Include tests in the distribution
py-test-mypy: updated to 1.1.0
1.1.0
Update test dependencies
Drop support for xdist 1.x
Drop support for Python 3.8 & 3.9
Upgrade build deps
Update the tests
Update type annotations
Add isort to the static env
Run twine check with --strict
Test with Python 3.15
py-mypy: updated to 2.4.1
Mypy 2.4.1
- Process overloads as a whole in two-phase type checking
- Skip recursive setup for frame-private nested functions in mypyc
py-vcrpy: updated to 9.4.0
9.4.0
SOCKS proxies
Requests made through SOCKS proxies with requests and urllib3 (socks5:// and socks5h://, with PySocks installed) are now recorded and played back. urllib3 uses its own connection classes for them, which vcrpy didn't patch, so these requests skipped the cassette entirely
Multipart form filtering
filter_post_data_parameters now filters the fields of multipart/form-data request bodies, e.g. requests.post(url, data={"api_key": ...}, files=...). Before, it treated them as urlencoded forms and didn't find their fields, so their values were recorded
If you match on body: requests are filtered before they're matched, so cassettes recorded with unfiltered multipart bodies need re-recording.
Fixes
Fix requests escaping a cassette, e.g. a write-protected one not raising CannotOverwriteExistingCassetteException, when a vcr.patch.force_reset() window opened elsewhere is closed late by the garbage collector while the cassette is in use
Fix AttributeError: 'str' object has no attribute 'get_all' when requests builds a response from a urllib.request response, e.g. with HTTPAdapter.build_response()
py-cachetools: updated to 7.2.8
v7.2.8 (2026-10-31)
- Fix type stubs for ``TTLCache`` and ``TLRUCache`` with default
``timer``.
- Minor documentation and unit test improvements.
v7.2.7 (2026-10-28)
- Various performance improvements.
- Minor unit test improvements.
v7.2.6 (2026-10-26)
- Various performance improvements.
py-rapidjson: updated to 1.26
1.26 (2026-11-01)
* Add Windows ARM64 build
* Fix parse_mode flags without native or NaN number modes
* Validate number_mode in load and Decoder
* Reject JSON input truncated at an embedded NUL
* Reject oversized datetime, UUID and parse mode values before narrowing them to
their internal representations
* Generate wheels for riscv4
* Reject embedded NUL truncation in ``Validator`` schemas and documents
[5 lines not shown]
py-aioquic: updated to 1.7.1
1.7.1
* Fix streams which never ended when their FIN, written after all their data
had been sent, did not fit in the packet being built: the FIN was never
sent, so the peer kept waiting for it.
* Derive the keys for QUIC version 2 key updates with the ``quicv2 ku``
label, as :rfc:`9369` requires. After its first key update, a QUIC version
2 connection could no longer exchange packets with a conforming peer.
* Reject a FIN or RESET_STREAM whose final size is below the data already
received with ``FINAL_SIZE_ERROR``, as :rfc:`9000` recommends, instead of
silently discarding the data beyond it.
* Drop 1-RTT packets which a server receives on a connection ID it never
issued or which the client retired, as :rfc:`9000` requires, instead of
switching to that connection ID.
* Discard Retry packets which a client receives after processing a packet
from the server, or whose Retry Token is empty, as :rfc:`9000` requires.
Such a Retry restarted the connection attempt, and broke an established
[4 lines not shown]
