py-stone: updated to 3.5.5
3.5.5
Migrate PyPI publishing to Trusted Publishing
Update packaging requirement from >=26.2 to >=26.3
Update coverage requirement from >=7.15.2 to >=7.16.0
Update setuptools requirement from >=83.0.0 to >=84.0.0
Update pytest requirement from >=7.0.0 to >=9.1.1
gvproxy: updated to 0.8.9
0.8.9
fix(gvproxy): propagate --listen-stdio flag into config
Fix issue where udp_proxy enters a tight loop polling the socket if the read returns 0 with err = nil.
gvproxy: Fix --log-file having no effect
fix: apply ec2MetadataAccess bypass to UDP forwarder for link-local traffic
unixgram transport: build for all Unix(-like) platforms again - can be used by libkrun on Linux
gammu: updated to 1.45.0
1.45.0
[!] * Automatically split ordinary CLI text SMS into linked parts without
requiring -len (GitHub issue 413). Use -maxsms 1 to require one part.
[-] * Apply explicit SMS text length limits after decoding, including stdin
and text supplied after the length option. Honor -16bit regardless of
its position relative to length options.
[-] * Preserve Unicode surrogate pairs and special-message modes when
limiting SMS text. Reject oversized stdin instead of sending a prefix.
[+] * Bundle native MySQL support in the Windows installer.
[-] * Validate SMS PDU encoding inputs.
[-] * Respect AT modem SMS storage and notification capabilities, handle
Quectel and Alcatel notifications, and decode errors by manufacturer.
[-] * Enable USSD on Huawei E176 and disable bulk SMS listing on Samsung
GT-S3600i.
[-] * Encode AT clock timezones in quarter-hours and report missing command
echo during modem initialization.
[11 lines not shown]
tor: update to 0.4.9.13.
Changes in version 0.4.9.13 - 2026-09-23
This security release includes several high severity fixes, once again
originating from the LLM report firehose. The fixes affect all Tor
components: relays, clients, and onion services. We strongly recommend
upgrading as soon as possible.
o Major bugfixes (security):
- Avoid a set of possible memory corruption, double-free, and null
pointer dereference bugs that could occur with some reverse DNS
virtual address configurations. Fixes bug 41381; bugfix on
0.1.0.1-rc. Tracked as TROVE-2026-051.
- Avoid cacheing DNS PTR responses when DNS caching is disabled.
Previous code to prevent this caching parsed the response
addresses incorrectly, and defaulted to caching when the address
could not be parsed. Fixes bug 41380; bugfix on 0.2.4.7-alpha.
Tracked as TROVE-2026-050.
[100 lines not shown]
www/ruby-sass-embedded: update to 1.105.0
1.105.0 (2026-09-22)
* Refactor spec (#417)
* Refactor importer and logger (#416)
* Improve logger performance (#418)
* Bump sass from 1.104.1 to 1.105.0 in /ext/sass (#419)
* Add support for meta.load() and related features (#414)
* Refactor importer and logger (#420)
* Use argument forwarding (#421)
www/ruby-faraday1: update to 1.10.6
1.10.5 (2026-02-12)
What's Changed
* Backport CVE-2026-25765 by @iMacTia in #1665
1.10.6 (2026-06-24)
What's Changed
* See if tests pass against Ruby 3.3 by @jturel in #1677
* Backport GHSA-98m9-hrrm-r99r fix to 1.x: add param_depth_limit to
NestedParamsEncoder by @iMacTia with @Copilot in #1681
New Contributors
* @jturel made their first contribution in #1677
www/ruby-faraday: update to 2.14.4
2.14.4 (2026-09-15)
What's Changed
* Bump actions/checkout from 6 to 7 by @dependabot[bot] in #1678
* Update copyright year to 2026 by @iMacTia with @Copilot in #1683
* Support JSON 3 by @byroot in #1687
* Preserve caller-owned JSON parser options by @OskarEichler in #1689
* Define HTTP verb methods on Faraday so tools can see them by @mokevnin in
#1708
* Document Options struct attributes for YARD (Fixes #1490) by @tachyurgy in
#1709
* chore: Configure SimpleCov for 1.0, too by @olleolleolle in #1715
New Contributors
* @byroot made their first contribution in #1687
[3 lines not shown]
www/ruby-css-parser: update to 3.2.0
3.2.0 (2026-09-20)
* Fix ReDoS hang when expanding dimension shorthands containing unclosed CSS
functions (e.g. margin: x() calc(aaaa...)): RE_FUNCTIONS now uses
possessive quantifiers plus a 10ms regexp timeout with fallback to plain
whitespace splitting
textproc/ruby-unicode-name: update to 1.15.1
1.15.0 (2026-09-19)
* Unicode 18.0
1.15.1 (2026-09-21)
* Fix missing names of new Jurchen and Small Seal characters
textproc/ruby-unicode-display_width: update to 3.3.0
3.3.0 (2026-09-20)
* Unicode 18.0
* Fix bug that emoji handling could not be deactivated when using config
object
* Fix edge case to not modify string when failing parsing binary input as
UTF-8
textproc/ruby-simple-rss: update to 2.3.0
2.3.0 (2026-09-14)
What's Changed
* Fix invalid dates in feed ordering by @cardmagic in #62
* Fix Atom relation links and add release history by @cardmagic in #63
* Fix Atom category attribute parsing by @cardmagic in #64
* Add normalized RSS and Atom entries by @cardmagic in #65
* Add JSON Feed 1.0 and 1.1 parsing by @cardmagic in #66
* Add bounded website feed discovery by @cardmagic in #67
* Prepare 2.3.0 and fix release QA findings by @cardmagic in #68
