py-authlib: updated to 1.8.0
1.8.0
Prefer id_token_signed_response_alg client metadata to guess algs
fix: Catch InvalidKeyIdError in RFC 9068 JWTBearerTokenValidator
fix: make leeway configurable in JWTBearerTokenValidator
feat: add default jti claim to sign_jwt_bearer_assertion
fix(oauth): cast sub claim to string in JWTBearerTokenGenerator
Declare lower bounds for dependencies
feat(client): use httpx2 instead of httpx
Fix RFC7523 malformed claims handling
Fix httpx oauth1 binary form data
fix(starlette_client): remove default= keyword from config.get calls
Added client_id parameter to AssertionClient
fix(oauth): save device credential with authenticated client id
fix(oauth1): correct protocol name in InsecureTransportError description
fix(client): client can be flexible with jwt's header
fix(oidc): omit claims when the value is None
haproxy: updated to 3.4.4
3.4.4
- BUG/MEDIUM: proxy: fix crash on delete first backend
- BUG/MINOR: cli: use the current argument to parse the FD spec in "show fd"
- BUG/MINOR: cli: do not reject the "/<fd>" form of "show fd"
- BUG/MINOR: ech: propagate error from load_echkeys()
- BUG/MINOR: ech: reject an ECH store with no usable private key
- BUG/MEDIUM: counters: preserve shared.tg pointer on 'clear counters all'
- BUG/MEDIUM: filter: Disable auto-close on channel during TCP payload filtering
- BUG/MINOR: server: check strdup return value on server ID
- BUG/MINOR: proxy: fix default-server leak on post-parsing cleanup
- MINOR: proxy: implement unpublished backend keyword
- DOC: explain better that named defaults are preserved
- BUG/MINOR: proxy: release watcher in various commands on CLI abort
- REGTESTS: proxy: complete "del backend" test
- BUG/MEDIUM: hpack: encode long methods and schemes using the long form
- BUG/MINOR: stats-file: reject tgid 0 when preloading shm objects
- BUG/MINOR: hlua: use a local buffer to format the socket addresses
[72 lines not shown]
py-uv py-uv-build: updated to 0.12.9
0.12.9
Python
Add CPython 3.15.0rc2
Enhancements
Add --no-locked and --no-frozen to disable lock modes enabled by UV_LOCKED and UV_FROZEN for a single invocation
Report the exact command-line lock-mode flag in warnings and errors
Performance
Speed up cold wheel installs by extracting each streaming ZIP archive in a single blocking task and reusing buffers across files
Bug fixes
[5 lines not shown]
sbcl: update to 2.6.8
* minor incompatible change: FILE-POSITION on composite streams
returns a more accurate result for CONCATENATED-STREAM, and NULL on
TWO-WAY-STREAM and ECHO-STREAM.
* platform support:
** improvements to code generation for the ARM64 backend.
** improved support for AVX512 instruction encoding and decoding.
* various enhancements to the SB-SIMD contributed module.
* bug fix: FILE-POSITION on a stream after reading input into a list
or generic sequence returns the correct result.
* bug fix: allow the manual to build on more platforms.
* bug fix: infinite loop in the compiler while attempting to remove
data moves.
* bug fix: debugger failed to handle (COMPLEX DOUBLE-FLOAT) entities
on the stack.
* bug fix: error reporting from STRING-TO-OCTETS reported using the
wrong string indices.
* optimization: the compiler performs assignment conversion in nearly
[12 lines not shown]
print/foliate: Update to 3.3.0
Changes since 2.6.4:
3.3.0
* Updated for GNOME 48
* Added support for mouse forward/backward buttons (#1474)
* Improved text wrapping in headings
* Improved default link style
3.2.1
* Fixed tables not displayed in FB2 books (#1445)
* Updated translations
3.2.0
* Revamped translation tool, which now remembers the last target
[198 lines not shown]
imapfilter: Update to 2.8.5. From Kogule Ryo in PR pkg/60582
IMAPFilter 2.8.5 - Mar 8, 2026
- Re-added OAuth2 example in the sample extend file
IMAPFilter 2.8.4 - Mar 7, 2026
- Bug fix; minor incompatibility with Lua 5.5
IMAPFilter 2.8.3 - Apr 27, 2025
- Include body transfer encoding in fetch_structure() return value.
- Bug fix; minor incompatibility with Lua 5.3 and 5.4
IMAPFilter 2.8.2 - Dec 26, 2023
- Add IMAP support for UTF-8 (RFC 6855) when "charset" is set to "UTF-8"
- Don't use FETCH FAST macro use for better compatibility
- Bug fix; recovery mechanism error on Lua 5.1
IMAPFilter 2.8.1 - Jan 8, 2023
- Add support for non-write actions on read-only mailboxes.
[14 lines not shown]
gumbo-parser: update to 0.14.0
* Add gumbo_tag_is_void() public API function
* Add support for <selectedcontent> tag
* Add support for processing instructions
* Comply with spec changes to <select> parsing logic
* Fix compliance to adoption agency algorithm, step 4.3
* Fix foster parented text not being merged into preceding text node
* Fix memory leak of ignored doctype token in "in head noscript" insertion mode
* Delete dependency on Ragel
* Adapt to migration of tree construction tests suite from
html5lib-tests to WPT
lang/gjs: Update to 1.82.3
Switch to mozjs128. Mark binaries not PaX mprotect safe (SpiderMonkey
JIT). Disable PCH. Remove obsolete patch.
Changes since 1.68.4:
Too many changes to list; see the upstream NEWS file for the full
release notes covering all versions between 1.68.4 and 1.82.3:
https://gitlab.gnome.org/GNOME/gjs/-/blob/1.82.3/NEWS
joker: update to 1.10.0
- Added the joker.mime namespace for parsing MIME media types and
entity trees, decoding transfer encodings, and extracting message
bodies and attachments.
- Extended joker.mail with MIME-aware message, email, and attachment
parsing.
- Expanded joker.http/send with overall, connection, and
response-header timeouts; redirect controls; and response-size
limits.
- Added managed read-only and read/write transactions to joker.bolt,
allowed database operations to use transaction contexts, added
prefix counting, and added result limits for prefix queries.
nss: fix regression on NetBSD aarch64
Between 3.127 and 3.128 upstream applied this in freebl:
- DEFINES += -DUSE_HW_AES -DUSE_HW_SHA1 -DUSE_HW_SHA2 -DHAVE_PLATFORM_GHASH
+ DEFINES += -DUSE_HW_AES -DUSE_HW_SHA1 -DUSE_HW_SHA2
+ ifeq ($(LITTLE_ENDIAN),1)
+ DEFINES += -DHAVE_PLATFORM_GHASH
+ endif
But it is causing linker errors since nothing in NetBSD.mk sets the
LITTLE_ENDIAN macro. Fix NetBSD.mk properly and remove previous arguably
wrong band-aid for similar issue in patch-nss_lib_freebl_sha256-armv8.c
janet: update to 1.42.0
* fix/illumos-multicast
* Tweak a docstring and a comment
* Fix GC collecting active fiber during nested janet_continue
* Align items in multiline pretty format (%m and %p)
* fix janet_channel_make_threaded to return threaded channel
* Macro hygiene tweaks
* Fix: add missing :symbolmap keyword to disasm function
* Add LLM, AI and tool usage section to contribution guide
* Lint shadow binding
* Increase pretty printing line density
* Try to use clearer language in buffer docs
* Fix mmap return value check
* Fix stale fiber stack pointers across realloc
* Hide JanetMarshalContext implementation details
* Add bash, zsh, and fish shell completions for janet
* plan9 port maintenance
* OSS-Fuzz: Add new fuzzer targets unmarshal
[33 lines not shown]
