croc: Update to 11.3.0
What's Changed
feat: experimental quic by @schollz in #1284
Revert "feat: experimental quic" by @schollz in #1285
chore: go fix by @zdiff in #1286
feat: experimental quic by @schollz in #1287
feat: experimental quic 2 by @schollz in #1288
feat: experimental quic 3 by @schollz in #1289
py-joserfc: updated to 1.7.4
1.7.4
- Reject JWS general JSON serialization when signatures is empty.
- Raises ``DecodeError`` when encrypted_key is None in JWE.
1.7.3
- Add default claims validation for ``iss``, ``sub`` and ``aud``.
- Add size validation even for self-provided payload.
1.7.2
- Avoid trailing padding for JWTs.
1.7.1
- **JWE**: use the original ``aad`` value for decrypting.
[6 lines not shown]
dropbear: updated to 2026.24
2026.94 - 23 July 2026
- Fix scp build failure regression from 2026.93
The new ascii_isdigit() etc wasn't linked.
- Print square brackets around ipv6 addresses with ports, eg
[2a00:f10:400:2:1c00:bcff:fe00:1c6]:22
Patch from Seo Suchan
- Support longer paths in scp.
- Avoid some build warnings, add increase github action coverage of
config options.
2026.93 - 21 July 2026
Note >> for compatibility/configuration changes
[27 lines not shown]
www/firefox: Update to 154.0
* Generate and use more generic PLIST.
Changelog:
154.0:
New
* Firefox's Local Network Access protections now extend to WebSocket
connections. Websites that try to open a WebSocket to a device on the local
network will now ask for permission first.
* In Smart Window, Firefox can now suggest groups of related tabs and propose
a name for each group.
* Firefox on Windows is now a supported browser for NVIDIA GeForce NOW,
letting users stream supported PC games directly in the browser.
* Local Firefox profile backups are now available on macOS in addition to
[129 lines not shown]
py-peewee: updated to 4.4.0
4.4.0
In which we learn to migrate (somewhat).
* Add `playhouse.migrations` for running migration scripts. Migrations are
python files defining `up(migrator, db)` and optionally `down(...)`.
Migrations are applied in numeric order a-la Django, and stored by name in a
history table. CLI via `pwmigrate` accepting `status`, `up`, `down`,
`initial`, `create`, `generate`, `fake` and `diff`. To run from python,
`migrations.run(db)`.
* Add basic `playhouse.schema_diff` for comparing models against the
schema and reporting differences (tables to create, columns added or
removed, indexes added or removed).
* Allow adding column to existing table as `NOT NULL` with migrator, which
allows skipping the 3-step process of add nullable, populate default, set not
null.
* `db_url.connect()` raises `ValueError` for a url with no database name,
[22 lines not shown]
py-narwhals: updated to 2.25.0
2.25.0
Performance improvements
perf: remove redundant work in eager when/then, schema resolution, selectors, and module lookups
Enhancements
feat: add str.strip_chars_{start,end}
feat: Add maintain_order argument to {Expr, Series}.list.unique
feat(typing): Introduce PluginName NewType so plugin backends can type check
feat(ibis): Add support for Expr.list.median for ibis backend
Bug fixes
fix: follow left-hand-index alignment rule for pandas-like concat
fix: null propagation for str boolean methods
[13 lines not shown]
py-redis: updated to 8.1.0
8.1.0
redis-py now supports server-pushed maintenance notifications in the asyncio stack for both
standalone and cluster clients, bringing the async client to parity with the sync implementation.
When a Redis deployment signals maintenance events (such as node migration or failover windows), the
async client reacts through the maintenance-notifications handler (redis/maint_notifications.py and
its async integration under redis/asyncio/), allowing applications to adapt connection handling
during maintenance without downtime.
py-queuelib: updated to 1.10.0
1.10.0
* Added ``clear()``, to remove every item from a queue while keeping it open
* Fixed ``RoundRobinQueue.pop()`` dropping falsy items
* Added support for Python 3.15
* Improved linting and CI configuration
py-scipy: updated to 1.18.1
Issues closed for 1.18.1
BUG: Incorrect use of NumPy scalar types instead of np.dtype...
BUG: remez hilbert segfault
MAINT, TYP: some typing-related concerns in 1.18.x
BUG: forkserver forcing breaks interpreters that don't have it
[BUG] Py_XDECREF on borrowed refs in fitpack_sphere (iopt==-1)...
[BUG] Double-free of wrk1/wrk2/iwrk in fitpack_surfit on allocation...
[BUG] Double-DECREF of ap_t in fitpack_parcur — use-after-free...
[BUG] PyTuple_SET_ITEM on unchecked NULL args_tuple in DVODE/ZVODE...
BUG: interpolate: ``BivariateSpline(grid=False)`` returns (1,)-shaped...
BUG: ``copy.deepcopy`` and ``pickle`` fail for interpolation...
BUG: test_convergence fails very often on aarch64-linux
CI: 32-bit Linux job is failing because numpy needs GCC 10 now
BUG: ``linalg.signm`` unpredictable output dtype
BUG: RectBivariateSpline interpolation issues with new fitpack...
BUG: linalg.expm matrix L1-norm implemented as infinity norm
[29 lines not shown]
py-cramjam: updated to 2.12.0
2.12.0
Add 3.8 for 2.11.0 release & disable hypothesis derandomize
Drop 3.8 support
Configure python-source to include type stubs
Add Windows Arm64 build & drop 3.9 builds
Bump pygments from 2.19.2 to 2.20.0
Bump black from 22.3.0 to 26.3.1
Bump pytest from 8.4.1 to 9.0.3
pyO3 0.29 with freethreading
Complete Python type information
Single-source package version from Cargo.toml and guard release tags; test fixes
py-asteval: updated to 1.0.10
1.0.10
Fix comprehension loop variables leaking into the symbol table
Reject assignment to unsafe attribute, including all "dunder" attributes
Update security advisory guidelines in SECURITY.md
Add CodeQL analysis workflow configuration
Fix typo raising exception where node is not defined
Use ndarray.reshape instead of assigning to ndarray.shape to avoid NumPy deprecation.
Add some testing of implemented/non-implemented nodes
Update docs to use breeze theme
exim exim-html: updated to 4.100
New stuff added since 4.99
1. Lookups "psl" and "regdom" for, respectively, the public suffix or the
registered domain, given a domain and a Public Suffix List file.
2. EXPERIMENTAL_DMARC_NATIVE optional build feature. See the experimental.spec
file.
3. Log selectors "spf", "spf_verbose", "dmarc", "dmarc_verbose", "dsn".
4. Commandline option "-bI:modules" for listing installed dynamic-load modules.
5. Debug channels "start", "regex" and "macro".
6. The exiwhat utility now includes, on the daemon process line, counts for
smtp and queue-run children.
[19 lines not shown]
labwc: update to 0.20.2
* Added
- Display config errors in labnag or optionally another client. Also support
associated option <core><errorCommand>. @elviosak @Consolatis [#3697]
* Fixed
- Destroy scene-output before scene cleanup to avoid rare abort. @jlvihv [#3701]
- Do not leave a failed output render format on the pending state @Andy1210
[#3685]
- When window-cycling is cancelled, for example by pressing escape, give back
focus to the window that had it before cycling started @elviosak [#3667]
- Fix missing panel icon with Firefox running under X11 @jlindgren90 [#3641]
labnag(1): document defaults @cunlem [#3654]
- Force the initial modeset commit to fix an issue with QEMU/virtio-gpu
and WLR_NO_HARDWARE_CURSORS=1. @KiritakeKumi [#3656]