Update to 0.23
Upstream changes:
0.23 2026-03-12
[CHANGES]
* Improved performance of ImplBase's timer queue implementation
* Also probe for KQueue implementation on OpenBSD and Darwin
[BUGFIXES]
* Fixed handling of `O_NONBLOCK` flag on default impl
* Ensure that `->poll` enqueued during another `->poll` in default
impl is not immediately invoked
0.22 2026-02-27
[CHANGES]
* Document that you should always `poll` for at least one of the
`POLLIN`, `POLLOUT` or `POLLPRI` flags
* Provide optional base implementation methods for handling an
alarm+sleep timer queue, to reduce code duplication
* Probe for `Future::IO::Impl::KQueue` on FreeBSD
[BUGFIXES]
[30 lines not shown]
py-pipx: updated to 1.18.9
1.18.9 - 2026-10-29
Fixed
Extend the 1.18.8 handling of recorded pip arguments to uv’s path options and to --group. pipx no longer records --group, which names a pyproject.toml to read packages from, like -r. On POSIX, a recorded --config-file, --project, --directory, --overrides/--override or --excludes/--exclude that points at a path another account could change stops pipx upgrade, pipx reinstall and the other replaying commands with the same error as --find-links. pipx list --outdated runs the same check and reports such an environment as failed instead of querying the recorded location. pipx runpip reads its install arguments with the same parser, so it records an install written as -qe ./project or -e./project as editable
When a rebuild fails during a parallel pipx reinstall-all, the restored environment gets back the shared app, man page or completion links another environment took while the rebuild had it in the trash, unless something outside this run has replaced them since
pipx run no longer reuses a cached environment after a change to a variable outside PIP_* and UV_* that decides which config file pip or uv reads, which proxy or index answers, which certificate is trusted or which credentials are sent, such as XDG_CONFIG_HOME, SSL_CERT_FILE, HTTPS_PROXY or NETRC. The values only feed the cache key’s hash, so secrets in them stay out of cache paths and logs
Update to 4.00
Upstream changes:
version 4.00: Fri 12 Dec 09:00:51 CET 2025
Changes:
- use Mail::Box 4 exception model: use Log::Report
version 3.00: Wed 19 Nov 19:38:18 CET 2025
Improvements:
- add bugtracker to meta
- bump version number to refect it depends on Mail-Box 3
version 0.22: Mon 15 Sep 14:43:11 CEST 2025
Changes:
- require 5.016 (2012)
Fixes:
- fix metadata [Mohammad S Anwar]
Improvements:
- convert to OODoc 3.04
- add .gitignore
Update to 0.27
Upstream changes:
0.27 Sam Varshavchik <mrsam at courier-mta.com>
cidrvalidate() bug fix.
0.26 Sam Varshavchik <mrsam at courier-mta.com>
cidrvalidate() should accept IPv6 addresses with one uncompressed
0.
0.25 Sam Varshavchik <mrsam at courier-mta.com>
Fix warning with Perl 5.40
0.24.1
No changes, re-pushed due to a release problem.
0.24
2025-03-09 brian d foy <briandfoy at pobox.com>
* Strip leading zeros from octets from addr2cidr
0.23
2025-03-09 brian d foy <briandfoy at pobox.com>
* Allow unabbreviated IPv6 addresses.
0.22
[4 lines not shown]
Update to 2.6.2
Upstream changes:
v2.6.2 2026-04-04T01:03:21Z
- Fix the conversion from floating point number to string with quadmath Perl (#126)
v2.6.1 2025-12-20T02:20:14Z
- Provide empty import on Mouse::Deprecated for imported Moose test (haarg #120, jkeenan #127)
v2.6.0 2025-10-30T05:25:55Z
- Update minimum perl version from 5.8 => 5.10(#112)
geography/py-ubx2: Update to 1.4.1
Upstream NEWS, less minor improvements and bugfixes:
### RELEASE 1.4.1
1. Cater for alternative MON-RF payload definition e.g. F9R HPS 1.30 (20-byte repeating group rather than 24-byte). Fixes #216
### RELEASE 1.4.0
1. Add support for [GAL OSNMA configuration messages MGA-GAL-OSNMA-MERKLE and MGA-GAL-OSNMA-PUBKEY](
https://content.u-blox.com/sites/default/files/documents/OSNMA_configuration_using_u-center_AppNote_UBXDOC-963802114-12194.pdf) (Open Service Navigation Message Authentication)
1. RXM-PMP (Point to Multipoint) payload definition simplified. Rather than a repeating group of single integers, the userData field is now rendered as a single long integer representing a segment of the incoming datastream (e.g. PointPerfect L-Band or MQTT datastream). To reconstruct the segment as bytes, use:
```python
if hasattr(parsed, "numBytesUserData"): # V1
datalen = parsed.numBytesUserData
else:
datalen = 504 #V0
userBytes = int.to_bytes(parsed.userData, datalen, "little")
[3 lines not shown]
Update to 9.53
Upstream changes:
9.53 2026-10-25
- Added any, delete, get, options, patch, post, put, query, under and websocket methods to Mojolicious, as shortcuts
for the same methods on the routes attribute.
- Added support for all server commands to morbo, like "morbo ./myapp.pl prefork -w 2". The server now runs in a
separate process, so the daemon attribute of Mojo::Server::Morbo is only used to create listen sockets, and server
settings need to be passed to the command instead, like "morbo ./myapp.pl daemon -p -i 30". That also means Morbo
no longer works on platforms with fork emulation, such as native Windows (use WSL instead).
- Added exec attribute to Mojo::Server::Morbo and -x/--exec option to morbo, to start additional commands like asset
bundlers in watch mode alongside the server.
- Improved url_for_asset in Mojolicious::Controller to find assets that have been rebuilt with different names in
development mode.
- Improved at performance in Mojo::DOM for selectors without combinators, it now stops at the first match.
- Improved HTML/XML parsing performance in Mojo::DOM by up to 35%, the tokenizer now matches attributes only once.
- Fixed a bug in Mojo::DOM where many unclosed comments, CDATA sections, processing instructions or RCDATA elements
could make parsing extremely slow.
9.52 2026-10-24
[33 lines not shown]
Update to 2.3.0
Upstream changes:
2.3.0 2026-10-26 19:55:58-04:00 America/New_York
[ SECURITY ]
* PR #1866: JSON serializer should not leak file/line detail
(Russell @veryrusty Jenkins)
[ BUG FIXES ]
* GH #1794: Add support for HTTP QUERY method. Old style plugins that
register query will die at load, and apps with their own sub query
will get a redefine warning. (Mohammad S Anwar)
* PR #1845: Fix Windows-only test failures (David Precious)
* GH #1861: Fix numbers being serialized to JSON as strings. The UTF-8
scan in Dancer2::Serializer::JSON gave numeric values a string form,
which JSON::XS and JSON::PP before 2.97 then encoded as quoted strings.
(David Precious)
* GH #1863: Fix the JSON serializer modifying the data it is given.
Hash keys needing UTF-8 decoding were deleted from the caller's hash,
losing those entries, and arrayrefs were decoded in place.
[24 lines not shown]
nodejs: updated to 26.13.0
26.13.0 'Lithium' (LTS)
Notable Changes
This release marks the transition of Node.js 26.x into Long Term Support (LTS)
with the codename 'Lithium'. It will continue to receive updates through to
the end of April 2029.
Other than updating metadata, such as the process.release object, to reflect
that the release is LTS, no further changes from Node.js 26.12.1 are included.
If you are updating from an earlier Long Term Support release (e.g. Node.js 24
or 22 or earlier) please note that since Node.js 25 the official binaries for
Linux are linked against libatomic, which may need to be installed separately
depending on your Linux distribution.
fix some minor issues
1. the DISTFILE is stored as v1.8.1.tar.gz which is prone to conflict, use
the github framework to ensure it is stored as uacme-1.8.1.tar.gz
2. the manpage uacme.1 claims a default CONFDIR which is wrong, fix that
3. a ctype error in crypto.c
py-music21: updated to 10.5.2
10.5.2
Security release. These problems affect v10.5.1 and every earlier version of music21; only v10 gets the fix, so everyone should upgrade to 10.5.2 (pip install --upgrade music21, Python 3.11 or newer) or the latest v11 master branch (which is g
On shared Unix machines, another user could plant files in music21's temp/cache folder or settings file and run code as you. music21 now uses only a temp folder you own that no one else can write to. (Linux and other Unixes have never been officially supported, and problems like these are exactly why, but many, many users run music21 on them.)
Titles and lyrics written to LilyPond are now fully escaped, and LilyPond is run without a shell.
Clercq-Temperley text passed to parseData() is no longer opened as a file path.
converter.parse() no longer reads a file from data such as 'tinyNotation: ...' that contains /.. segments (#2109).
Behavior changes:
On Unix accounts without a writable home folder (common for web servers), settings are kept in the private music21 temp folder. Settings saved earlier to /tmp/.music21rc are no longer read. Check your existing file for vulnerabilities and recreate it at the path shown by music21.environment.Environment().getSettingsPath() (normally /tmp/music21/.music21rc or /tmp/music21-userid-<uid>/.music21rc).
common.cleanpath() no longer collapses .. after a folder that does not exist.
ConverterClercqTemperley.parseData() raises on strings that are not Clercq-Temperley data; use converter.parse(path) for files.
