rumdl: Update to version 0.3.2
Fixed
Upgrade pulldown-cmark to fix exponential parser event growth and duplicate
diagnostics after empty wikilink labels (RUSTSEC-2026-0414), and upgrade Tokio
to address its I/O safety advisory (RUSTSEC-2026-0386). Release publication now
requires a fresh dependency security audit, including during recovery runs.
MD087 recognizes inline suppression of heading-capitalization diagnostics,
avoiding false unused-disable warnings (#973).
MD022 enforces configured spacing below headings before lists and code fences,
including when MD031 or MD032 is disabled. Overlapping spacing fixes insert
the required blank lines only once (#971).
MD067 can safely reorder complete footnote definitions to match their first
references. Reordering is atomic, preserves surrounding content and directive
scope, and leaves ambiguous Markdown or MDX cases report-only (#969).
[12 lines not shown]
ndp-proxy-go: Add version 1.1.1
IPv6 Neighbor Discovery Protocol (NDP) Proxy
Key Features
Multi-Segment Support - Supports one upstream and multiple
downstream interfaces.
NDP Proxying - Relays Neighbor Solicitation and Neighbor Advertisement
messages between interfaces for transparent address resolution
across segments. Responds locally for router and client addresses.
DAD Proxying - Forwards DAD probes between interfaces and responds
immediately when address conflicts are detected in cache.
RA Proxying - Forwards Router Solicitations and unicast/multicast Router
Advertisements to enable SLAAC autoconfiguration of clients. Forwarded RAs
carry the RFC 4389 Proxy (P) flag. An incoming P flag is logged in debug
mode but does not alter forwarding, allowing proxies to be chained while
per-host learning directs traffic.
Dynamic Prefix Learning - Learns valid prefixes from Router Advertisements
and expires them automatically. Handles temporary RFC 4941 addresses and
[27 lines not shown]
security/libmldsa and security/mldsa: update from version 20260909 to 20261029
Bring over changes from development branch:
+ calculate sha3 512 digests using openssl's EVP, rather than OQS's one
+ add Makefile templates for mldsa and mlsignify, and update the
configure script to fill them in
+ bump version number to 20261029
and
+ add a configure script
+ add a Makefile.libtool.in makefile template for libtool
+ Bump version to 20261028
pkgsrc changes:
+ use the pkgsrc liboqs as a prereq
+ add a buildlink3.mk file for libmldsa
Update to 2.5.0
---------------
Version 2.5.0 (26 November 2017)
Bugs fixed:
Handle non-ASCII, non-UTF8 filenames in .cvsignore files.
ExternalBlobGenerator: Don't fail if no revisions are needed for a file.
Fix the handling of symbol-matching regexps that include |.
Handle excluded paths under Attic directories, too.
cvs2git: fix logging in process_post_commit().
Prefer to break internal cycles at the largest timestamp gaps.
Don't try to delete a supposed "revision 1.1" if it has a predecessor.
Improvements and output changes:
Various small documentation fixes and improvements.
Make cvs2xxx runnable under PyPy.
Avoid some allusions to Subversion when converting to another VCS.
Use tempfile.mkdtemp() to choose the location for temporary files.
[42 lines not shown]
sbcl: update to 2.6.10
* minor incompatible change: testing for float equality using `=` is
now a quiet operation, not signalling when given NaNs as input.
* enhancement: Unicode support has been updated to support version
18.0.0 of the Unicode standard, including support for new scripts
and additional characters, refinements to segmentation algorithms
and a number of fixes for bugs uncovered along the way:
** minor incompatible change: SB-UNICODE:LINE-BREAK-CLASS no longer
accepts a :RESOLVE keyword argument.
** enhancement: the implementation of line-breaking rules for
numbers now implements the full number-like state machine rather
than the previous table-based approximation.
** enhancement: UTS10-style collation through SB-UNICODE:UNICODE<
and similar functions now supports the use of #\uFFFE as a field
separator and #\uFFFF as an upper bound.
** bug fix: the set of characters considered of type Close for
sentence breaking no longer includes Other Punctuation.
** bug fix: in sentence breaking, do not attach a CR not followed
[88 lines not shown]
py-iniparse: updated to 0.5.2
0.5.2
fix: Update all files for release 0.5.1
chore[ci]: Added Github action for regular testing package
Avoid the multiprocessing forkserver method
feat(test): Add traceability requirements
ci: bump actions/checkout from 4 to 5
Fixed a small test error
ci: bump actions/checkout from 5 to 6
fix: Replace get_nowait() with get(timeout=5) in multiprocessing test
Fix spelling mistakes in docstrings and tests
ci: bump actions/checkout from 6 to 7
Make _compat_skip_empty_lines a per-instance attribute
config: raise NotImplementedError from abstract ConfigNamespace methods
tests: do not depend on CPython's 'test' package
utils: make tidy() also clean up the first section
fix: Update all files for release 0.5.2
streamlink: updated to 8.6.3
streamlink 8.6.3 (2026-10-29)
- SECURITY: new minor release primarily for Streamlink's Windows / Linux AppImages builds, with `brotli 1.2.1` (via uv.lock) ([`CVE-2026-111497`](https://nvd.nist.gov/vuln/detail/CVE-2026-111497))
- Fixed: `--retry-streams` and `--retry-max` in external/continuous HTTP output mode when re-fetching
- Build: bumped `pycryptodome` version requirements to `>=3.4.3,<5`
- Tests: fixed race-conditions in HLS tests
acme.sh: update to 3.1.6
Changes since 3.1.4:
3.1.6:
- Release tags are signed from 3.1.6 on. The public key is allowed_signers
in this repository; see "Verify a Release" in the README.
- No functional change since 3.1.5.
3.1.5:
- Release tags are signed from 3.1.5 on. The public key is allowed_signers
in this repository; see "Verify a Release" in the README.
- New ACME_PACKAGED mode for distro-packaged installs: --install no longer
copies the script into LE_WORKING_DIR, and --upgrade, --install-online and the
auto-upgrade cron path defer to the system package manager
(#7135).
- Standalone mode listens on both IPv4 and IPv6 by default, and the port
check now works on the BSDs, macOS and Haiku.
- An explicit --days or --valid-to now outranks the ARI renewal window.
[16 lines not shown]
devel/gitpane: update to 0.18.0
[0.18.0] - 2026-10-29
Added
Gitpane Explorer for VS Code shows workspace repositories, linked worktrees and changed files beside the file tree. It updates as workspace repositories change and opens file changes in the editor. The extension includes branch review, the commit graph, repository and worktree actions, submodule inspection, sessions, themes and configured launchers. (#107, closes #106)
Install Gitpane Explorer from the VS Code Marketplace, or download a VSIX with its bundled backend for Apple Silicon and Intel Macs, Linux ARM64 and x64, and Windows x64. The README includes a rendered preview, installation steps and settings. (#107)
Fixed
Git process arguments use ordinary Windows paths while repository identity checks retain canonical paths. This fixes content reads and worktree operations that failed on canonical Windows paths. (#107)
Parent repository status remains available when a registered submodule is replaced by a file or symlink. (#107)
Update libz-sys to 1.1.31 for RUSTSEC-2026-0418 and include the latest merged Git and TLS dependency fixes. (#107, #104, #102, #96)
resterm: Update to 1.17.1
Failed tests in the text report
JavaScript asserts show their text once
--timeout stops JavaScript tests
Loop variables in step conditions
+ needs text on one side
Other changes
multimedia/moviebox-tui: update to 0.1.28
Fixed
Providers & Stream Resolution:
Extracted signed CDN MP4 streams from MovieBox subject detector links (/subject-api/get), restoring movie streaming and multi-resolution playback after upstream restricted play-info with deprecation clips.
Reported explicit error causes when MovieBox serves placeholder clips instead of generic "no streams available", and surfaced upstream HTTP failure statuses directly to the user.
Download Engine & Batch Queue:
Recorded only flushed bytes to .part.json segment progress during downloads, preventing aborted or paused workers from leaving zero-byte gaps and file corruption on resume.
Changed
Dependencies & Build Infrastructure:
Upgraded tokio to 1.54.1, scraper to 0.29.0, lru to 0.19.0, zip to 9.1.0, sha2 to 0.11.1, open to 5.4.5, libc to 0.2.191, and serde_json to 1.0.154.
misc/rozi: update to 0.0.39
v0.0.39
Added
You can remove an extension from its installed report with Ctrl+K. A Discover entry for an extension that is already installed opens that extension in the Installed tab, where you can enable, update, or remove it. (#280)
Rozi can send one anonymous weekly usage report per install. The first launch shows an Anonymous usage count notice, and the first report is sent on a later day. Set [updates] count_usage = false, [updates] check = false, or DO_NOT_TRACK=1 to opt out. CI environments and debug builds are not counted. (#282)
Drag one workspace tab onto another in the workbar to swap their panes, layout, and name. You stay on the workspace you dragged, under its new number. (#284)
After an update, a What's new dialog shows the release notes once. Use release-notes in the command palette to open them again, or set [updates] release_notes = false to turn off the automatic dialog. First installs and source builds without embedded notes do not show it. (#286)
On a first install without an existing config file, a Welcome to rozi card introduces sessions, panes, workspaces, and the keys bound to common commands. Press Enter to close it or Ctrl+L to open the getting-started guide. (#287)
Fixed
Renaming a temporary session from the Sessions picker updates its row and the sidebar as soon as the server confirms the rename. The highlight stays on the renamed session.
Hovering a clickable workbar badge now highlights its rounded or pointed ends along with the rest of the badge. (#285)
Update notices now ask you to restart running sessions when the session protocol differs, without showing the internal protocol number. They continue to name extension API version changes. (#283)
Documentation links in the Anonymous usage count notice and update notice now point to the Rozi website. (#287)
Compatibility
[15 lines not shown]
devel/sem: update to 0.29.0
v0.29.0
Bumps every crate, the npm package and the MCP registry entry to 0.29.0.
Minor bump because what sem extracts changed (#538): new entity kinds in
C, C++, C#, Rust, Java, Kotlin and Elixir, C++ headers in `.h` files
read as C++, and recovered definitions in regions tree-sitter cannot
parse.
v0.28.3
Release the merged ignore-handling fix (#536), caller-batch lookup reuse
(#534), and publishing reliability improvements. Synchronizes all five
workspace crate versions, internal dependencies, Cargo.lock, npm, MCP
metadata, and changelog. Validation: locked offline Cargo metadata and
git diff --check passed; the underlying fix passed focused regressions
and all CI checks, including Windows.
v0.28.2
[4 lines not shown]
