resterm: Update to 1.6.0
Added
Directives can be completed without first typing a comment marker. Accepting @name after typing @na inserts # @name .
Press Ctrl+N in editor insert mode to show suggestions at the cursor. Use Up / Down to select an item and Tab or Enter to accept it.
After accepting a suggestion, the popup shows what can follow it. Choosing @auth opens auth modes, oauth2 opens its options, and grant= opens the supported grant types.
Header completion follows the same pattern. Accepting Content-Type opens value suggestions such as application/json.
Workflow steps and branches suggest request names for using= and run=.
Changed
Options that can appear only once disappear after use, including their aliases.
@compare suggestions follow the selected environment group. Baseline suggestions use the comparison targets already chosen.
@apply use= can still be repeated, but profiles already selected are omitted.
Dynamic helpers with example calls now insert the call and select only its arguments for replacement.
Variable completion adds missing closing braces. Completing {{ho, {{ho}, or {{ho}} with host produces {{host}}.
In editor insert mode, Ctrl+N controls completion. Outside insert mode, the configured New Request shortcut still applies.
The built-in help and bottom command bar include the completion shortcut.
Fixed
[8 lines not shown]
augeas: install lenses, fix CVE-2025-2588
Make augeas install all the lenses so it is actually usable. Also fix a
security issue which is not in a release yet.
From Showta Ishizaki in PR pkg/60656.
geography/spatialindex: Update comments surrounding test woes
One is resolved, but on head, and we (and everybody else) are stuck on
an old release becuase of a regression in 2.1.0 which breaks qgis. (I
am unaware of anyone wanting to use this otherwise>) Upstream is
still where upstream is.
py-configargparse: updated to 1.7.6
1.7.6
config file and environment variable values can no longer trigger writing out a config file
config file values containing newlines are now rejected when writing out a config file, rather than written out as separate keys
py-anyio: updated to 4.15.1
4.15.1
- Implemented a compatibility fix for supporting direct access of ``anyio.*`` submodules
from the main package even when those submodules were not directly imported first
py-blockbuster: added version 1.5.27
Blockbuster is a Python package designed to detect and prevent blocking calls
within an asynchronous event loop. It is particularly useful when executing
tests to ensure that your asynchronous code does not inadvertently call
blocking operations, which can lead to performance bottlenecks and
unpredictable behavior.
security/ruby-rex-powershell: update to 0.1.105
0.1.104 (no release)
0.1.105 (2026-08-31)
* Merge pull request #1 from bwatters-r7/collab/aarch64-injection:
Collab/aarch64 injection
* Merge pull request #49 from vinicius-batistella/feature/aarch64-injection:
Route AArch64 payloads to the native powershell.exe on Windows on ARM
devel/ruby-simplecov: update to 1.2.0
1.2.0 (2026-09-04)
SimpleCov 1.2 adds change-focused coverage, per-test attribution, production
coverage, and a substantially expanded CLI while keeping the existing
configuration API working through deprecation aliases.
Highlights
* track_tests, simplecov tests, and simplecov affected connect covered lines
to the tests that exercised them; the HTML report displays the same
attribution and simplecov watch uses it for focused reruns.
* simplecov patch, per-file baselines, missed-count caps, and coverage
history make coverage gates useful for both new changes and legacy
codebases.
* SimpleCov::Production records low-overhead production line coverage, while
[11 lines not shown]
www/ruby-selenium-webdriver: update to 4.48.0
What's Changed
* [js] Normalize empty custom locator results by @munawiki in #17851
* [py]: fix W3C capabilities built from a list of options (create_matches)
by @navin772 in #17897
* [rb] add low-level BiDi protocol integration specs by @titusfortner in
#17878
* Fix badge for CI build on the default branch by @nvborisenko in #17901
* [py] Fix broken reStructuredText link in docs by @cgoldberg in #17902
* [grid] stop forwarding se:remoteUrl past the Node that consumes it by
@titusfortner in #17908
* [grid] Forward file upload/download for Kubernetes, Docker and relay
sessions by @VietND96 in #17914
* [build] reduce github cache churn and aggressively prune CodeQL caches by
@titusfortner in #17909
* [java] fix two flaky BiDi tests that left timing-dependent state behind by
@titusfortner in #17918
[50 lines not shown]
www/ruby-sass-embedded: update to 1.104.0
1.103.0 (2026-08-20)
* Drop ruby 3.1 support (#398)
* Bump sass from 1.102.0 to 1.103.0 in /ext/sass (#402)
* Support analogous sets of missing channels (#403)
1.103.1 (2026-08-21)
* Bump sass from 1.103.0 to 1.103.1 in /ext/sass (#404)
1.104.0 (2026-09-04)
* Workaround dart-lang/setup-dart bug (#408)
* Bump sass from 1.103.1 to 1.104.0 in /ext/sass (#410)
* Implement degenerate colors (#411)
www/ruby-mechanize: update to 2.14.1
2.14.1 (2026-08-22)
Security
* Strip both Proxy-Authorization and Cookie2 headers on a cross-origin
redirect. GHSA-2mwr-xjcg-37j7
* Headers set through Mechanize#request_headers= now obey the same
cross-origin redirect rules as per-request headers, instead of being
re-applied unconditionally to every request. GHSA-2mwr-xjcg-37j7
* A redirect is now considered cross-origin when the scheme, the host or the
port changes, per RFC 6454. Previously only a host change discarded
cookies, and an https: to http: redirect to the same host carried
credentials in cleartext. GHSA-5jgv-wc2m-xv99
* A meta refresh that points cross-origin now discards sensitive request
[15 lines not shown]
