py-pip: updated to 26.3
26.3 (2026-11-02)
Improved Documentation
- Clarify in the security policy that pip has never considered installing
untrusted wheels safe. This is because Python's import system is dynamic, so
pip cannot guarantee that installing a wheel will not execute third-party code.
Deprecations and Removals
- Block unexpected imports during installation, warn about unsafe imports
afterward, and improve recovery from interrupted installations.
Features
- Show build backend warnings for local source directories and log them at debug level for other sources.
- Add support for selecting extras in pylock.toml files with ``-r pylock.toml[extra1,extra2]``.
[58 lines not shown]
py-xml2rfc: updated to 3.35.0
3.35.0
New Features
- Add support for Python 3.15
Bug Fixes
- text: Break unbreakable long lines with underscore
Documentation Changes
- update CHANGELOG.md + py file versions for v3.34.1
wm/lefthk: update to 0.4.0
What's Changed
chore(release): bump to 0.4.0 by @mautamu in #48
Note: Patches 0.3.3 semver incompatibility with leftwm <=0.5.5.
news/brochure: update to 0.14.0
Keyboard link hints, a redesigned update popup, and safer full-article fetching.
Highlights
Press f to open links and images by keyboard
Press F to copy a link or image
Redesigned update popup with clearer release notes
PDF links no longer show garbage text
In-page links now open the article page
net/xfr: update to 0.14.0
v0.14.0
What's Changed
feat: client port from [client] port or a host:port target by @lance0 in #289
fix: QUIC clients give up on a silent server within seconds by @lance0 in #290
fix: one discover line per server, no wrong link-local zones by @lance0 in #292
fix: PSK mismatch wording, -n durations, zoneless link-local, push retry noise by @lance0 in #293
test: run the 64-stream TCP load test in its own binary by @lance0 in #294
fix: let UDP receivers drain reordered stragglers before finalizing loss by @lance0 in #291
feat: --config, XFR_CONFIG and /etc/xfr/config.toml by @lance0 in #295
fix: review follow-ups for QUIC keep-alive, discover link-locals and -n TCP_INFO by @lance0 in #296
docs: release prep for 0.14.0 by @lance0 in #297
test: avoid occupied ports and bound the legacy UDP fixture by @lance0 in #298
fix: preserve completed results after stdout closes by @lance0 in #299
fix: raise the QUIC idle timeout to 10 s by @lance0 in #300
v0.13.0
[18 lines not shown]
misc/rozi: update to 0.0.41
v0.0.41
Added
Hosts deliberately connected from Remote hosts or the Sessions sidebar reconnect on launch. Their tabs and last-seen sessions appear while SSH connects in the background, without SSH prompts or installation. Disconnecting or forgetting a host removes it from future launches. [remote] reconnect_on_launch controls this and defaults to true. A bare launch with startup = "last" resumes the most recently attached named session across workplaces only when the remote host is eligible and still lists that session. Otherwise Rozi opens the picker without contacting the host. (#299)
Workspace tabs preview their drop position while you drag them, before you release the mouse. (#301)
Changed
Host monitoring continues retrying transient transport failures, but stops retrying after authentication, host-key, missing SSH, or incompatible binary failures that need user action. (#297)
Fixed
Background workspace tabs highlight and pulse for unseen pane errors. Unseen blocked status also appears in the workbar's blocked marker. (#300)
Agent alerts for blocked, finished, and failed events are claimed once across local windows, avoiding duplicate alerts. Do Not Disturb is respected before a monitor claims an alert. (#298)
v0.0.40
Added
[18 lines not shown]
finance/rex: update to 0.4.0
v0.4.0
Updates
Breaking: move from regular sqlite to sqlcipher bundled with openssl.
Add option to set a password on the DB level, prompting unlock on every launch. CAUTION If the password is forgotten, the DB cannot be recovered
Add a new Privacy Mode that hides all balance and amount on Shift P press
Changes
Sqlite cipher by @TheRustyPickle in #139
Privacy mode by @TheRustyPickle in #140
Bump versions by @TheRustyPickle in #141
v0.3.2
Updates
Fix the summary page on yearly or all time showing bad peak expense and earning info
[5 lines not shown]
devel/gitpane: update to 0.18.4
[0.18.4] - 2026-11-03
Added
Select visible terminal text by dragging and release to copy, while retaining clicks, wheel scrolling, scrollbar scrubbing and panel resizing. Highlighted text can be copied again with y or Ctrl+C; Esc clears the selection. (#131, closes #128) Thanks @expoli.
Support official Herdr desktop (herdr-app and hc) for opening repositories, configured review commands, placement choices, live session markers and terminal navigation. The editor bridge and VS Code session controls support the herdr-app backend. (#131, closes #129) Thanks @expoli.
Fixed
Keep an open terminal diff visible and refresh its contents when changed files update. (e654ce9)
Keep VS Code changed-file rows stable during refresh so they do not flash or interrupt clicks. (#133, closes #132)
Isolate test fixtures from inherited Git settings, locale and desktop identity, and use platform-native paths for Herdr fixtures. (#131, closes #130) Thanks @expoli.
[0.18.3] - 2026-10-31
Added
Stack repositories, changes and the commit graph in the VS Code Explorer, matching terminal Gitpane. Selecting a repository or worktree updates both lower sections. File clicks open native diffs. Each section can be resized or collapsed independently. (#123, closes #122)
[24 lines not shown]
devel/gitlogue: update to 0.12.2
v0.12.2
🐛 Bug Fixes
fix(swift): capture nil via nil_literal node (c202bce)
fix(dart): use the highlight query bundled with tree-sitter-dart (be65dd1)
📝 Other Changes
chore: bump version to v0.12.2 (4e57e27)
test(syntax): assert every highlight and injection query compiles (84ea30f)
chore(deps): bump tree-sitter-dart from 0.2.0 to 0.3.0 (edf5913)
chore(deps): bump tree-sitter-md from 0.5.3 to 0.5.4 (a02ffd1)
chore(deps): bump tree-sitter-scala from 0.26.2 to 0.26.3 (b0c640a)
chore: update flake.nix hashes for v0.12.1 (94123e9)
v0.12.1
🐛 Bug Fixes
[12 lines not shown]
devel/difftastic: update to 0.72.0
Diffing
- Improved preprocessing heuristics, so difftastic should be faster and fall back to text diffing less often.
Parsing
- Updated Haskell (the previous version was prone to crashing) and Kotlin parsers.
- Improved delimiter and trailing punctuation handling in: C, C++, C#, Elixir, Erlang, Gleam, Go, Java, JavaScript, Kotlin, Haskell, Nix, OCaml, Python, TypeScript and YAML.
- Removed Smali support (upstream parser is no longer maintained).
- Removed support for Verilog and F# due to the very large parser size making the difft binary big. Adding support for dynamically loading parsers in a future release should allow users to parse these languages again.
Display
- Fixed an issue with inline display where unchanged lines between two nearby changes were not shown.
- Fixed an issue (introduced in 0.71) where the terminal width wasn't detected when stdin, stdout and stderr were all redirected. This was most noticeable when using difft with jj.
