dbus: update to 1.16.4.
dbus 1.16.4 (2026-11-12)
========================
Security support scope:
• Add `SECURITY.md` documenting various security considerations
(dbus!597, dbus!603, dbus!606; Simon McVittie, ooonea)
Denial-of-service fixes:
• Prevent a denial-of-service vulnerability on the system bus:
if a privileged user was running a monitor such as `dbus-monitor --system`
or `busctl monitor --system`, then an unprivileged user could cause the
dbus-daemon to crash by arranging for delivery of a broadcast signal
from the dbus-daemon to be prevented, for example by filling up the
outgoing message queue towards a client that subscribed to it.
This vulnerability could be seen as an incomplete fix for CVE-2023-34969.
[85 lines not shown]
p11-kit: updated to 0.26.6
0.26.6 (stable)
* rpc: added PQC support
* rpc: added support for more mechanisms
* rpc: list-objects should no longer print garbage when used via RPC
* rpc: memory management fixes and hardening
* p11-kit: import-object now rejects malformed RSA public keys
* trust: do not truncate DirectoryStrings with embeded NULL byte
* Build fixes
* Update translations
* Documentation
tcpflow: updated to 1.7.0
1.7.0
This release fixes security vulnerabilities, improves packet processing and
portability, and introduces automated releases with a signed Windows executable
and Linux Snap packages.
Rake is a Make-like program implemented in Ruby. Tasks and
dependencies are specified in standard Ruby syntax.
Rake has the following features:
- Rakefiles (rake’s version of Makefiles) are completely defined in
standard Ruby syntax.
- Users can specify tasks with prerequisites.
- Rake supports rule patterns to synthesize implicit tasks.
- Flexible FileLists that act like arrays but know about
manipulating file names and paths.
- A library of prepackaged tasks to make building rakefiles easier.
- Supports parallel execution of tasks.
cabextract: update to 1.12.
New in 1.12
* cabextract -f now finds "hidden" files. There are two ways to look in
cabinets for files, which normally have the same results, but don't have
to. 7-Zip and Microsoft extract.exe find "hidden" files but not "normal"
files, while cabextract and Microsoft expand.exe find "normal" files but
not "hidden" files. cabextract -f now finds both "hidden" and "normal"
files, if they differ.
* cabextract now prints more warning and error messages for normal cab files
listed on the command line. For example, it now prints "WARNING; atypical
files offset in header" if cabextract -f might find "hidden" files
py-django-compressor: updated to 4.7.0
v4.7 (2025-11-12)
- Drop Python 3.10 (EOL), Add Python 3.15
- Add support for Django 6.1.
- Drop support for Django versions before 5.2.
- Replace deprecated codecs.open with builtin open
- Discover compress blocks inside Jinja2 elif branches
- Update BrotliCompressorFileStorage to compress each file in one go
- Add Subresource Integrity (SRI) support for compressed assets
py-publicsuffixlist: updated to 1.1.2.20261112
1.1.1, 1.1.2 (2026-10-21)
No code changes. This release only refreshes CI and development tooling.
Update astral-sh/setup-uv to v10.3.0 in the GitHub Actions workflows.
Refresh uv.lock, updating certifi to pick up the bundled CA certificate changes.
Fix the auto-release workflow so that it no longer bundles a stale PSL file.
1.1.0 (2026-10-10)
This version drops support for Python 3.5, 3.6 and 3.7, and now requires Python 3.8 or later.
Packaging has been migrated to PEP 621 metadata in pyproject.toml using hatchling, replacing setup.py, setup.cfg and MANIFEST.in. The version is now read from publicsuffixlist.__version__, and development dependencies are locked with uv.
Add PEP 561 py.typed marker and complete type annotations for the public API, including compat and the update script.
Add an accept_unknown keyword argument to is_private() and is_public().
[4 lines not shown]
py-typer: updated to 0.29.1
0.29.1
Upgrades
Add support for Python 3.15 and 3.15t.
Docs
Clarify compatibility changes in the 0.29.0 release notes.
Adopt unversioned documentation snippets.
Internal
Remove obsolete documentation snippet generators.
Preserve snippet variants in documentation cleanup.
Upgrade markdown-include-variants to 0.0.10.
Add an agent skills note to GitHub releases.
augeas: updated to 1.15.0
1.15.0 - 2026-09-29
- General changes/additions
* fa.c: set an error when parse_regexp() fails without setting a
specific one, instead of returning NULL with the status left at
REG_NOERROR, which callers read as success
(addresses CVE-2025-2588)
* Cast to 'unsigned char' before calling ctype functions like isspace()
and toupper(), which is undefined behavior for negative char values,
e.g. for a non-ASCII byte in a path expression or a lens file name
* Fix aug_preview(), which failed with "Lens not found" whenever spans
were enabled; it now finds the file node by walking up from the
matched node rather than by looking the path up again
George Hansper
* Make ATTRIBUTE_FALLTHROUGH work on clang as well as gcc
Richard Barnes
* Fix gcc 14 warnings, notably the transposed reallocarray() arguments
in augprint.c
[71 lines not shown]
TeXmacs: fix build break on NetBSD 11
NetBSD does not implicity include
sys/select.h in some headers like
earlier versions so include it so
that select, FD_ISSET and
"struct timeval" are seen.
libtorrent rtorrent: updated to 0.16.28
0.16.28
This release contains a few minor bug fixes and cleanup, and is part of a stable release series.
Includes DHT IPv6 Support and minor performance optimizations.
