geography/geos: Update to 3.15.0
geos has on the order of a dozen reverse dependencies, and has a
multi-year track record of non-troubled updates. (I've been running
beta/rc versions of 3.15 for weeks with postgis/gdal/gis.)
## Changes in 3.15.0
2026-09-01
- Breaking Changes:
- BufferOp returns POLYGON EMPTY when fed Inf/Nan coords (GH-1332)
- Return Inf when calculating distance to an empty geometry (GH-1345, Even Rouault)
- Overlay operations now produce a LineString geometry in cases that would previously
produce a MultiLineString with contiguous sub-geometries. (GH-1459, Dan Baston)
- Overlay operations that previously rotated rings by one vertex no longer do so
(GH-1412, Dan Baston)
- New things:
- Add GEOSMinimumSpanningTree (Paul Ramsey)
[29 lines not shown]
firefox153: update to 153.2
Mozilla Foundation Security Advisory 2026-85
Security Vulnerabilities fixed in Firefox ESR 153.2
Announced
September 1, 2026
Impact
high
Products
Firefox ESR
Fixed in
Firefox ESR 153.2
#CVE-2026-75874: Sandbox escape in the Remote Settings Client component
Reporter
crixer
[274 lines not shown]
firefox140: update to 140.15
Mozilla Foundation Security Advisory 2026-84
Security Vulnerabilities fixed in Firefox ESR 140.15
Announced
September 1, 2026
Impact
high
Products
Firefox ESR
Fixed in
Firefox ESR 140.15
#CVE-2026-75874: Sandbox escape in the Remote Settings Client component
Reporter
crixer
[126 lines not shown]
py-nh3: updated to 0.3.7
0.3.7
Expose ammonia's id_prefix option via id_prefix kwarg
Don’t depend on deprecated pyo3/generate-import-lib feature
Validate tag_attribute_values conflict with attributes
Bump ammonia from 4.1.2 to 4.1.3
Bump ammonia from 4.1.3 to 4.1.4
Bump pyo3 from 0.29.0 to 0.29.2
py-regex: updated to 2026.9.3
Version: 2026.9.3
New version of cibuildwheel no longer supports building for free-threaded Python 3.13.
Version: 2026.9.2
New version of cibuildwheel no longer needs nor supports cpython-freethreading option.
Version: 2026.9.1
Updated cibuildwheel.
Support Python 3.15.
py-zeroconf: updated to 0.151.3
v0.151.3 (2026-08-30)
Bug Fixes
- Correct the recursion available header flag to the rfc 1035 value
Refactoring
- Compute probe pacing from fresh clock reads
- Compute service info request pacing from fresh clock reads
Testing
- Fix flaky test_service_browser_expire_callbacks
- Make test_qu_response deterministic by injecting the announcement
v0.151.2 (2026-08-29)
[4 lines not shown]
ccid: updated to 1.8.3
1.8.3
- Add support of
- Broadcom Corp 58200 0x5884
- Broadcom Corp 58200 0x5885
- Broadcom Corp 58200 0x5886
- Broadcom Corp 58200 0x5887
- Circle CIR135 ICC
- DigiFlow LLP. KAZTOKEN
- HID Global Crescendo NFC Reader
- HID Global OMNIKEY Plug
- HID Global OMNIKEY SE Plug
- Neowave LinkeoC-PRO
- Swissbit iShield Key 2 Pro
- macOS: provide a sample script to build the driver with meson
- fix some minor issues found by an AI tool
- Some other minor improvements
defguard-gateway: updated to 2.0.5
2.0.5
It changes the default OPNsense plugin configuration which controls the placement of Defguard-related firewall rules.
This configuration is now also available in advanced plugin options.
py-pillow_heif: updated to 1.6.0
1.6.0 - 2026-08-31
Added
- Reading and writing HDR metadata: `content_light_level`, `mastering_display_colour_volume`, `ambient_viewing_environment` keys in `info` dictionary.
- Python `3.15` and `3.15t` wheels added.
Changed
- `libheif` was updated from the `1.23.1` to `1.23.2` version.
Fixed
- Use-after-free when a numpy array or the `data` memoryview outlived the `HeifFile` it was created from.
- Conflicting license metadata: removed the `GPLv2` classifier, the package license is `BSD-3-Clause`; bundled library licenses in wheels are described in `LICENSES_bundled.txt`, which was updated to match the current libraries.
protobuf py-protobuf: updated to [7.]36.1
36.1
Rust
Update README files for each crate. (e64a176)
Include runtime version details in assertion error messages. (fecb404)
Drop special treatment of rust versions below 4.33. (1312f3b)
Invert the relationship between rust crates (fbf3069)
Python
Optimize pure Python parse path for custom JSON enum names. (333846a)
Additional unit tests for Python handling of custom JSON enum names.
pcre2: updated to 10.48
10.48 31-August-2026
This is a regular release, incorporating security fixes along with small
improvements and fixes to library behaviour.
Only changes to behaviour, changes to the API, and other significant changes
are described here. Please see the ChangeLog and Git log for further details.
As well as the tarball and Git tag for this release, there are detailed
instructions for backporting security and correctness fixes, for the last
five years of releases.
* (Git change) Renamed the default development branch from master to main.
* (Maintenance change) Added a five-year support lifecycle policy and
publication of backport patches for security and high-severity fixes in older
releases.
[46 lines not shown]
*tcsh: Sanitise path settings.
Avoids constant rebuilds when using bulk build tools. While here apply
some minor pkglint. I tested all packages on NetBSD 11/amd64 apart from
the install of the standalone-tcsh binary package due to read-only / in
my build sandboxes.
