www/freenginx-devel: update from 1.31.3 to 1.31.4
Sponsored by: tipi.work
<ChangeLog>
*) Bugfix: the "index" directive used old values of non-cacheable
variables.
*) Bugfix: variables with side effects might cause incorrect results
during variable substitution and "no buffer space in script copy"
alerts.
*) Bugfix: a segmentation fault might occur in a worker process when
using regular expression captures with the
"proxy_cache_background_update" directive or the
ngx_http_slice_module.
*) Bugfix: in the ngx_http_perl_module; the bug had appeared in 1.31.3.
[13 lines not shown]
www/freenginx-devel: update njs 1.0.0 -> 1.0.1
Bump PKGREVISION.
Sponsored by: tipi.work
<ChangeLog>
nginx modules:
*) Security: fixed an access control bypass in js_access when an
asynchronous request body continuation threw an exception or
produced an unhandled rejection. Previously, nginx could continue
processing the request as though the js_access check had succeeded.
Thanks to Ta Duc Thien.
*) Security: fixed a worker process crash when reading
Response.statusText after an upstream server returned a status
line with an empty reason phrase.
[46 lines not shown]
www/freenginx: update njs 1.0.0 -> 1.0.1
Bump PKGREVISION.
Sponsored by: tipi.work
<ChangeLog>
nginx modules:
*) Security: fixed an access control bypass in js_access when an
asynchronous request body continuation threw an exception or
produced an unhandled rejection. Previously, nginx could continue
processing the request as though the js_access check had succeeded.
Thanks to Ta Duc Thien.
*) Security: fixed a worker process crash when reading
Response.statusText after an upstream server returned a status
line with an empty reason phrase.
[46 lines not shown]
snac: update to 2.95. Changes:
## 2.95
Fixed a bug in the notification page that made snac hang forever while
trying to read abnormally big files.
Improved support for text-only web browsers: it's now possible to
configure a set of web browser user-agent strings that will receive
simpler HTML in the private timeline web UI. Basically, it consists in
avoiding `details` / `summary` HTML tags as much as possible.
Added some fixes to media proxy code.
Fixed EmojiReact code to allow any emoticon defined in `emojis.json`,
not only those with colon-wrapped identifiers.
Fixed a bug in notification filtering (paging was sometimes incorrect).
[181 lines not shown]
devel/ruby-curses: update to 1.7.0
1.6.1 (2026-08-24)
* Merge pull request #153 from shugo/fix/wstat-build-error:
Do not build demos on mingw
1.7.0 (2026-08-24)
* Merge pull request #154 from shugo/use-pdcursesmod:
Use PDCursesMod instead of forked PDCurses
py-pyvcd: updated to 0.5.0
pyvcd-0.5.0 (2026-08-11)
* Breaking changes:
* Raise the minimum supported Python version to 3.10
* Model `Timescale.magnitude` as a plain `int`. `TimescaleMagnitude` remains
as an `IntEnum` whose members compare equal to their integer values, but
code such as `timescale.magnitude.value` must become
`timescale.magnitude`.
* Reader features, aligning `vcd.reader` with the corpus of real-world VCD
files collected by the `wellen`__ waveform library:
* Accept the nonstandard SystemVerilog and VHDL scope and variable types
emitted by GHDL, nvc, Verilator, QuestaSim, and fst2vcd
* Accept nine-state std_logic values, e.g. ``bUUUU``, in scalar and vector
value changes
[11 lines not shown]
atf: updated to 0.24
0.24
Major Changes
* This version of ATF requires C++-20 to build/function.
* This version of ATF focused heavily on correctness and memory management
issues discussed in 77. While most of the issues are believed to be resolved,
some issues may still remain.
* The `atf::text::duplicate(..)` API and tests were removed.
Feature Enhancements
* Issue 105: Widen our process status capabilties
Docs
* Issue 107: Clarify the semantics of ATF_{CHECK,REQUIRE}_ERRNO()
* Issue 124: atf-check.1: Add missing -r flag to synopsis
* Issue 127: atf-c.3: Fix test case addition in ATF_TP_ADD_TCS synopsis example
lutok: updated to 0.6.3
0.6.3
This release contains [mostly] developer-workflow related changes. Many of these changes were ported over from
the [freebsd/atf](https://github.com/freebsd/atf) repository.
py-django-bootstrap5: updated to 26.3
26.3 (2026-08-28)
- Drop support for Django 4.2 (EOL).
- Add support for Django 6.1.
- Recognize `month` and `datetime-local` input-type widget subclasses as form-control widgets, enabling addons and floating labels for them
- **Breaking:** Rewrite `radio_select.html` to forward each option's own attrs (fixing custom attrs like `data-total` from a custom `create_option()` being silently dropped on `RadioSelect`/`CheckboxSelectMultiple`) and to stop leaking `disabled`/`required`/`form`/an always-empty `class=""` onto the non-form-control wrapper `<div>`
- Fix `server_side_validation` not propagating from `bootstrap_form`/`bootstrap_formset` to field renderers
- Fix placeholder being set on color and range inputs
- Fix bugs in `url_replace_param`, jinja2 helpers, and `BaseRenderer.render`; add AGENTS.md
- Add `label` argument to `bootstrap_field` to override a field's label text without touching the form definition — works with horizontal/floating layout and as the default placeholder
- Add `label_class` setting so a default label CSS class can be set globally
- Support `addon_before`/`addon_after` on `Select` widgets, excluding `SelectMultiple` and `RadioSelect`
- Add `layout` setting to set a default layout for forms and fields
- Update default Bootstrap to 5.3.8.
- Add `input_class` argument to `bootstrap_field`
- Warn when `layout="floating"` is used with `addon_before` or `addon_after`
- Add a maintenance-round section and release-note ordering convention to MAINTAINING.md.
[7 lines not shown]
py-sqlalchemy: updated to 2.0.52
2.0.52
[platform] [bug]
Python 3.15 support has been added and tested, including minimal changes for full compatibility.
orm
[orm] [bug]
Fixed a result-column misalignment bug in ORM-enabled UPDATE statements where synchronize_session="fetch" is in use, either explicitly or because the statement uses constructs such as CTEs that implicitly select for it. Columns in rows returned by .returning() could be returned under incorrect keys (e.g. row[SomeClass.a] returning the value of a different column), a problem most likely to manifest under concurrent workloads. ORM DELETE statements were not affected.
[orm] [bug]
Fixed bug where a failed Session.bulk_insert_mappings(), Session.bulk_update_mappings() or Session.bulk_save_objects() call could leave the Session permanently in a “flushing” state, such as when the transaction could not be begun because a previous flush had left it needing a rollback. Unlike Session.flush(), the bulk methods set the internal flushing flag and began the transaction outside of the try/finally block that resets it, so that neither Session.rollback() nor Session.close() would clear it, and every subsequent flush would raise InvalidRequestError: Session is already flushing. Pull request courtesy Hamody We.
[orm] [bug]
[66 lines not shown]
databases/ruby-sequel: update to 5.108.0
5.108.0 (2026-09-01)
* Support :allow_migration_number option for TimestampMigrator (jeremyevans)
* Recognize additional disconnect errors in the mysql and mysql2 adapters
(sdalu) (#2382)
* Deprecate Sequel.require (jeremyevans)
* Add ndims, position, positions, prepend, sample, shuffle, and trim to
pg_array_ops extension (jeremyevans)
* Support :select and :select_where options for Postgres
Dataset#insert_conflict on PostgreSQL 19+ (jeremyevans)
* Support cast* methods directly on Postgres::PGArray instances
(jeremyevans)
[6 lines not shown]
