vault: upgrade go-limiter package
The old version of the go-limiter dependency is not compatible with
current Go versions, as it accesses internal runtime details.
This also needs a few other dependency updates.
py-zensical: update to 0.0.61.
This version adds more comprehensive support for documentation
redirects in mkdocs.yml and zensical.toml. Zensical supports page
and anchor redirects, resolves redirect chains, rejects cycles,
and preserves links when pages are moved or split.
sysutils/mirador: update to 1.12.0
1.12.0
Release Notes
Added
A battery panel, for laptops. The charge in block numerals with the
meter beneath it, a label for which way things are going, the time left or
to full in the border, and a line of detail — health, cycles, power draw.
Amber below 20%
and red below 10% only while running on the battery, and below 10% the
status bar carries an alert. Not placed in the default layout, since a
desktop would open on No battery; w switches it on. [battery] in the
config sets the two thresholds and the sample interval.
A temperature panel. The hottest sensor with its history in the CPU
panel's face, and a table of every sensor group's current and peak
reading. The platform's list is grouped the way a person would write it —
Apple silicon's fourteen die readings become one CPU die row, and
sensors reporting impossible values are dropped. u toggles Celsius and
[30 lines not shown]
py-urwid: update to 4.1.3.
Urwid 4.1.3
============
2026-09-11
Bug fixes 🕷
++++++++++++
* Fix: Overlay top widget or bottom widget replace should trigger invalidation by @penguinolog in https://github.com/urwid/urwid/pull/1294
Documentation 🕮
++++++++++++++++
* Documentation: force theme override to fix readability on wide screen by @penguinolog in https://github.com/urwid/urwid/pull/1288
Refactoring 🛠
++++++++++++++
* Speed up the widget render hot paths by @penguinolog in https://github.com/urwid/urwid/pull/1290
py-tzdata: update to 2026.4.
# Version 2026.4
Upstream version 2026d released 2026-09-11T22:21:07+00:00
## Briefly:
Canada’s Northwest Territories moved to permanent -06 on 2026-08-21. Obsolescent
settings like TZ="EST5EDT" now conform better to POSIX. Fix security,
performance and porting bugs in zic and localtime.
py-pip-api: update to 0.0.35.
Test against pip 24.2, 24.3, 24.3.1 (#227, #234, #234)
Test against pip 25.0, 25.0.1, 25.1, 25.2, 25.3 (#237, #242, #244, #250, #255)
Test against pip 26.0, 26.0.1, 26.1, 26.1.1, 26.1.2, 26.2, 26.2.1 (#261, #265, #270, #282, #284, #289, #293)
Drop support for Python 3.8 (#245)
Drop support for Python 3.9 (#270)
Support Python 3.14 (#272)
Support Python 3.15 (#296)
py-pdf: update to 6.18.1.
## Version 6.18.1, 2026-09-11
### Security (SEC)
- Further restrict FlateDecode recovery (#4073)
- Limit entry count for TrueType and Type1 font `/Widths` (#4072)
- Limit allowed length of tokens in parse_bfchar (#4071)
### Bug Fixes (BUG)
- Use current text matrix for visitor_text (#4062)
- Repeat the letter for /S /A and /S /a page labels past Z (#4065)
- Use font color for FreeText default appearance (#4051)
### Robustness (ROB)
- Fix compatibility with fonttools < 4.58.0 (#4050, #4059)
### Documentation (DOC)
- Use combined matrix in visitor examples (#4066)
py-matplotlib: update to 3.11.2.
This release contains several bug-fixes and adjustments:
Speed up RGBA-stage image resampling
Fix hexbin clipping in PDF output
Fix \text with internal braces
Fix some crashes and make some checks more robust to unlikely cases
Fix frame skew when saving GIF animations with PillowWriter
Fix HiDPI handling in Qt toolbar and WebAgg embeddings
Fix ResizeEvent handling for TextBox
Fix bug with PGF hatch linewidth and color
Fix a bug with drawing an empty Collection
Fix incorrect glyphs in Cairo backends
Improve build system to prevent conflicts between wheels and system libraries
py-fonttools: update to 4.65.0.
4.65.0 (released 2026-09-10)
----------------------------
- [glyf] Add ``__iter__``, ``items`` and ``values`` methods to the ``glyf`` table
to make it more dict-like (#4156).
- [feaLib] Escape the anonymous block tag when scanning for its terminator, so tags
containing regex metacharacters are matched literally (#4167).
- [varLib] Strip directory components from ``<variable-font name="..."/>`` when
deriving the output filename in the ``varLib`` command line, so a designspace
cannot write outside the output directory (#4168).
- [feaLib] Fix tracking of the current script and language across redundant
``script`` statements. Rules following a ``script`` statement that names the
first declared language system no longer end up under the ``DFLT`` script, and
a ``script`` statement naming the already-current script still narrows the
language systems and terminates the current lookup while leaving the
``lookupflag`` alone, matching makeotf (#1824, #2522, #4169).
- [varLib.interpolatable] Escape glyph names in the HTML report (#4172).
[4 lines not shown]
py-contourpy: update to 1.4.0.
## v1.4.0 (2026-09-11)
ContourPy 1.4.0 introduces a new readonly property `ContourGenerator.name` for the algorithm name,
adds support for CPython 3.15, and is the first release to upload `pyodide` wheels to PyPI.
Support for `riscv64` and `iOS` architectures is added but considered experimental, wheels are
available from the [Scientific Python Nightly Wheels](https://anaconda.org/channels/scientific-python-nightly-wheels)
service but not PyPI.
kew: update to 3.4.3
- Add Scrollable text on help view.
- Add progress bar below mini-controls.
- Volume now can go to 12, or 120%.
- Added ability to read lyrics from TXXX (description: USLT) tags,
which is how ffmpeg defaults to encode lyrics.
- Auto-resume is now off by default in a fresh install.
- bug fixes
Fix a missing / that caused share/examples/sympa/README to not be installed,
and Add it to CONF_FILES.
While there add Sympa/Template/Plugin to MAKE_DIRS_PERMS to match install
instructions.
Bump PKGREVISION
