py-pkginfo: updated to 1.13
1.13.0 (2026-08-29)
- Support 'metadata_version' == '2.5' (PEP 794).
- Add support for Python 3.14.
- Drop support for Python 3.9.
- Drop support for Python 3.8.
py-dulwich: updated to 1.2.14
1.2.14 2026-08-28
* Collapse consecutive `**` segments in wildmatch translation, matching
git's behavior and avoiding catastrophic regex backtracking on patterns
like `a/**/**/**/z` from untrusted repositories. (netliomax25-code)
1.2.13 2026-08-24
* Make concurrent ``Pack.get_raw`` calls thread-safe by synchronizing
``PackData``'s resolved-object offset cache.
(Bojan Zivanovic)
* Speed up cached `PackData.get_object_at` lookups by acquiring the
offset-cache lock directly instead of through a `with` statement.
(Bojan Zivanovic)
* Bound fetch negotiation the way C Git's ``MAX_IN_VAIN`` does: give up
[77 lines not shown]
resterm: Update to 1.5.1
Fixed
Failed streams keep their transcript
Stream failures keep their original cause
IPv6 redirects and limits
Headless API note
py-joserfc: updated to 1.7.5
1.7.5
- **JWK**: Ignore keys with unknown ``kty`` values when importing a key set.
- **JWE**: Add ``max_recipients`` to ``JWERegistry``.
py-pydantic*: update to 2.13.5
Fixes
Allow reuse of validators when plugins are set by @Viicos in #13535
Fix missing GC traversal on some pydantic-core struct fields by @Viicos in #13624
Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @Viicos in #13629
Count validated model fields once in smart unions by @tamird in #13731
webkit-gtk*: force gettext-lib from pkgsrc
pkgsrc libintl is installed during the build, and the pkgsrc
version is preferred when linking, leading to missing library
errors when pkg_add(1)ing.
Force gettext-lib from pkgsrc to avoid this.
Bump PKGREVISION.
py-poetry: updated to 2.4.2
2.4.2
Fixed
Fix an issue where Poetry installs an artifact that is not listed in the lockfile when the package source does not provide a hash for this artifact
Fix a path traversal vulnerability when downloading files from a compromised URL and/or package source
Fix a path traversal vulnerability in sdist extraction on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 that could allow malicious tarball files to write files outside the target directory
py-utils: updated to 4.0.1
4.0.1
Allow uv_build 0.12.x, contributed
Keep the python_utils.types export list unique.
Delay newly published dependencies and development tools by 14 days before resolution.
py-rapidfuzz: updated to 3.14.6
3.14.6
Fixed
* fix some divergences in the pure Python fallback
* fix compatibility with new Cython versions
* fixed potential out of bound access inside Editops.remove_subsequence
* fixed handling python fallback implementation of Editops.remove_subsequence
www/wikid: update to 3.0.0
v3.0.0
new feature(s)
inline article image rendering powered by the kitty graphics protocol with universal unicode halfblocks fallback: a165199
async image fetching and local caching: 0775ef6
keybind (I) and settings toggle for image rendering: e2efffb 8767843
responsive aspect ratio preservation: 4986eca
bug fix(es)
eliminate graphics flickering and cpu spikes with diffed rendering & in-memory payload cache: ea576f1
composite transparent png backgrounds onto white to for readability on dark terminal themes: 168fd82
optimised viewport link underline traversal with advancing pointer: 7395bfe
use Cow on decode_html_entities to eliminate allocations on clean strings: d07bb03
qol/style change(s)
[131 lines not shown]
sysutils/onefetch: update to 2.28.1
2.28.1
What's Changed
CI/CD
Fix CD pipeline by @o2sh
2.28.0
What's Changed
New Features
add language support for Just by @o2sh in b0b9742
add language support for Mojo by @ruvasqm in #1500
add language support for Batch file by @spenserblack in #1745
Add language support for Slang by @arealsquirrel in #1759
Bug Fixes
[11 lines not shown]
