sysutils/dua-cli: updatet to 2.45.0
This release packs an incredibly useful new sub-command called dua clean [--depth N],
to automatically and efficiently find typical build products that you may want to delete,
for Rust and Zig and Node for now.
Also, when deleting entries, the TUI does not block anymore, but shows the decreasing number
of bytes as files are deleted, until the marked entry finally disappers. The TUI can still be
used then, albeit in read-only mode.
Oh, and it also got faster on macOS when there are folders with a lot of files, when it will
switch aways from bulk-reads to multi-threaded stat calls instead, which in my case led to
a 2.5x speedup.
New Features
add Git-aware dua clean and background deletion
This commit was mostly rubber-stamped, but tested for a week or so before that.
By now it's fair to accept that dua is in "tool that needs to work, without
[153 lines not shown]
py-django-allauth: updated to 65.19.3
65.19.3
Fixes
- Account: The email address data migrations (``0006`` and ``0008``) did not
honor the database selected using ``migrate --database``, potentially querying
or updating the default database instead. Fixed.
- MFA: Fixed various race conditions involving TOTP and recovery codes.
Security notice
- Headless: When ``HEADLESS_JWT_STATEFUL_VALIDATION_ENABLED`` is on, JWT
access tokens are now rejected after the password changes outside of the
allauth password-change flow (for example via ``set_password()`` in a
shell). Stateful validation now uses the same session auth hash check that
refresh tokens already used.
[7 lines not shown]
py-pikepdf: updated to 10.13.0.post1
v10.13.0
Exception hierarchy
pikepdf's exceptions now form a documented hierarchy rooted at the new
`pikepdf.PikepdfError`, with `pikepdf.PikepdfWarning` playing the same role for
warnings. See {doc}`/api/exceptions` for the full tree. {issue}`739`
- **Behavior change:** `pikepdf.DataDecodingError` now derives from
`pikepdf.PdfError`. A stream that will not decode is a defect in the document,
and the same call that raises it -- `Object.read_bytes()` -- already raised
`PdfError` for other kinds of damage, so `except PdfError` was a handler that
looked correct, passed on healthy files, and let a traceback escape on damaged
ones. Code catching `DataDecodingError` by name is unaffected. Code that
orders `except PdfError` *before* `except DataDecodingError` will now take the
first branch; if the distinction matters, reverse the order.
- **Behavior change:** `pikepdf.PdfParsingError` now derives from
[154 lines not shown]
p5-DBI: update to 1.653.
1.653 - 2026-09-09, H.Merijn Brand & Robert Rothenberg
* Fix test for 32bit-perl (report in PR#189)
* Fix arbitrary module and file loading via dbm_type/dbm_mldbm (CVE-2026-78030)
* More META checking/updates
* Tighten symlink outside of f_dir (CVE-2026-15392) check (reported by Raj)
* CPAN.org does not forward email anymore
mold: updated to 2.42.1
mold 2.42.1 is a new release of the high-speed linker. This release includes
further performance improvements. Along with improvements made in recent
releases, mold is as fast as or faster than other high-performance linkers,
including LLVM lld and wild. We have also fixed several problems with LTO
builds, debugging, and C++ exception handling in this release.
libgcrypt: updated to 1.12.4
Noteworthy changes in version 1.12.4 (2026-09-11)
* Bug fixes:
* Fix build problem with some compiler versions related to SM4
instructions.
* Fix padding in cSHAKE found by NIST ACVP conformance vectors.
* Fix RSA PSS handling of huge salt lengths.
* Validate the length of hashed input for RSA PSS.
* Improve RSA OAEP decoder correctnes by validating an all-zero
padding.
gitte: update to 0.10.1.
0.10.1
This bugfix release fixes signing in Flatpak builds and adds small UI improvements.
0.10.0
This release adds side-by-side diffs, Git LFS and submodule support,
signing configuration, remote management, and major performance
improvements.
0.9.1
This bugfix release corrects ref resolution when refreshing the
commit log and improves detection of authentication failures from
modern Git forges.
0.9.0
[17 lines not shown]
gimp: update to 3.2.6.
Overview of Changes from GIMP 3.2.4 to GIMP 3.2.6
=================================================
Core:
- macOS: Macbook touchpad over-sensitivity now fixed.
- Destructive-only filter actions will be made insensitive on all
non-raster layers (unless rasterized).
- Windows: in release builds, we now attach our standard outputs to
the Windows console on certain scenarios only (when there is no
interface, or in verbose mode, or when --console-messages is set, or
finally when there are batch commands). By default, we are back to
how it was before GIMP 3.2.0, which is that GIMP doesn't output
anything on native shells it was called from.
- Fix expand from center which was failing in some cases.
- Layers to Image Size only works for raster (or rasterized) layers.
[247 lines not shown]
gegl: update to 0.4.72.
GEGL-0.4.72 2026-09-07
----------------------
Build:
~~~~~~
- build with pure MSVC as well as wasm
- Improvements to defcheck,
- minimum meson version bumped to 0.60
- more CI integration, harmonized with gimp/babl
Core:
~~~~~
- use G_{BEGIN|END}_DECLS in all header declarations
- gegl_param_color_cmp, new function
- Avoid crashes in gegl_path
Buffer:
[30 lines not shown]
babl: update to 0.1.128.
avx512 support is now more extensively checked at runtime, fixes for macOS
exported symbols and library version, initial WASM support.
rumdl: update to 0.2.73.
0.2.73
Fixed
MD022,MD031,MD032,MD058: count a comment-only line as a blank line (b394e30)
MD057: stop requiring index.md for directory links in filesystem mode (c04ae4e)
MD051: validate fragments in repository-absolute cross-file links (ead5f39)
parser: stop reading headings inside blocks whose body is not Markdown (59958b1)
MD077: carry a code block's interior indentation when reindenting its fence (00c578d)
0.2.72
Added
MD090: add rule flagging horizontal rules directly before headings (09dcae5)
Fixed
[39 lines not shown]
