py-regex: updated to 2026.7.19
2026.7.19
Git issue 607: SIGSEGV: NULL pointer dereference in `basic_match()` when `(?R)`/`(?0)` recursion is used inside a fuzzy-matching quantifier
Git issue 608: SIGSEGV: out-of-bounds read in `bytes1_char_at()` with `DOTALL` + a fuzzy constraint + `(?r)` reverse-direction matching
py-setuptools_scm: updated to 10.2.1
10.2.1 (2026-07-21)
Fixed
- Omit ``scm_version.json`` and ``scm_file_list.json`` from wheel ``.dist-info``
while still including them in sdists for fallback discovery.
postgresql-timescaledb: updated to 2.28.3
2.28.3
Bugfixes
* Wrong result when evaluating a function returning NULL in the columnar query execution pipeline
* Fix incorrect usage of sort transformation for sort key expressions with negative constants
* Allow enabling and disabling triggers on hypertables with columnstore enabled
* Fix columnstore sort pushdown to check for different query sort key collation
* Fix potentially wrong results for stddev(float4) and stddev(float8) when used with avg() in the columnar query execution pipeline
* Fix race condition when enabling compression on a hypertable
* Batch filtering for compressed DML should respect collation
* Direct delete failed to handle array predicates with NULL values and deleted more rows than intended
* Reuse existing dimension_slice IDs when possible
* Truncate constraint name before trying to rename
bash-completion: updated to 2.18.0
2.18.0
This release comes with notable changes to the directories used for
looking up and sourcing completion recipes and helpers, allowing for
more flexibility and customization and fewer conflicts between things
shipping with bash-completion and third party/upstream/origin packages.
Files that come with bash-completion itself are located in directories
reserved for that use, their names ending with `-core` and
`-fallback`. Packages should continue install their files in the same
`completions` and `helpers` dirs like before; these directories
precede the bash-completion "core" ones in lookup order.
A new concept of `startup` dirs has been introduced. Files from these
directories are sourced eagerly on bash-completion startup. This
replaces and allows for more flexibility than using the deprecated
`/etc/bash_completion.d` directory for this purpose.
py-tibs: updated to 1.1.0
1.1
Added
* Added `Tibs.to_bools()` and `Mutibs.to_bools()` for converting to a list of
bools. This is much faster than iterating with `list(...)`, and accepts the
usual optional `start` and `end` parameters.
Fixed
* Fixed byte-aligned slice assignment and slice deletion writing to the wrong
bits on a `Mutibs` created by slicing another `Mutibs` (the underlying
storage of such objects does not always start on a byte boundary).
* Fixed a crash in `from_joined` when the same empty container was repeated
in a list.
* Ranges passed to `set`, `unset`, `set_at` and `unset_at` now behave exactly
like the list of their contents. Empty ranges (such as `range(1, 0)` or
[12 lines not shown]
pkgconf: updated to 3.0.4
Changes from 3.0.3 to 3.0.4:
* Fix a crash (stack overflow) triggered by a crafted .pc file containing a
self-referential fragment variable, such as `x=$${x}` referenced from Cflags.
Fragment variables are now evaluated only once while re-splitting. Found
through fuzzing.
* Fix over-escaping of variable values containing backslash-escaped whitespace,
such as paths quoted with `printf %q`. Such a value was stored with its
escapes intact and then escaped a second time when rendered into a fragment,
producing output like `-L/a\\\ dir`. This broke meson's test suite, which
uses paths with spaces to stay Windows-safe.
* Fix mangled and duplicated -L/-I paths on Windows when PKG_CONFIG_SYSROOT_DIR
and PKG_CONFIG_LIBDIR are set. Path separators are now normalized to forward
slashes for all runtime-injected paths (sysroot, build root, search paths and
pcfiledir), so that sysroot matching and injection operate on a consistent
[9 lines not shown]
editors/redox: update to 0.8.0
v0.8.0
What's Changed
- Configuration support by @JackDerksen in #30
- feat: render stacked command line when popups are open by @JackDerksen in #31
- Add optional nerd font icons, and other misc tweaks/fixes by @JackDerksen in #32
- feat: add which-key support, along with custom motions by @JackDerksen in #33
v0.7.0
What's Changed
- Undo-tree support (built on top of a new pane widget) by @JackDerksen in #29
net/youtube-dl: Remove
as propose on pkgsrc-user@ on 4 July, without objections. youtube-dl
has not been maintained for 5.5 years; yt-dlp is the successor fork.