NetBSD/pkgsrc gIlG21Ldoc CHANGES-2026

   Updated devel/py-falcon, www/py-publicsuffixlist
VersionDeltaFile
1.5917+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc wW12vZxwww/py-publicsuffixlist Makefile distinfo

   py-publicsuffixlist: updated to 1.0.2.20260906

   1.0.2.20260906
   Automated release
VersionDeltaFile
1.28+4-4www/py-publicsuffixlist/distinfo
1.29+3-3www/py-publicsuffixlist/Makefile
+7-72 files

NetBSD/pkgsrc 8DcDhzRdevel/py-falcon distinfo Makefile

   py-falcon: updated to 4.3.1

   4.3.1

   This is a :ref:`SemVer <semver>` patch release that makes Falcon's own test
   suite compatible with the recently released ``cbor2`` 6.x series.

   Documentation and tests aside, this release is functionally identical to
   :doc:`Falcon 4.3.0 <4.3.0>`.
VersionDeltaFile
1.23+6-11devel/py-falcon/Makefile
1.12+4-4devel/py-falcon/distinfo
+10-152 files

NetBSD/pkgsrc lEbGFzwdoc CHANGES-2026

   Updated lang/py-ast-serialize, converters/py-cairosvg
VersionDeltaFile
1.5916+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc WIbWv5aconverters/py-cairosvg distinfo Makefile

   py-cairosvg: updated to 2.9.1

   2.9.1

   WARNING: this is a security update.

   Specially crafted SVGs with very long paths could lead to exponential rendering times.

   Support path-like objects for the url parameter
   Fix support of Windows paths
VersionDeltaFile
1.34+13-15converters/py-cairosvg/Makefile
1.24+4-4converters/py-cairosvg/distinfo
+17-192 files

NetBSD/pkgsrc 0vaA3iJlang/py-ast-serialize Makefile distinfo

   py-ast-serialize: updated to 0.10.0

   0.10.0
   Unknown changes
VersionDeltaFile
1.6+4-4lang/py-ast-serialize/distinfo
1.6+2-2lang/py-ast-serialize/Makefile
+6-62 files

NetBSD/pkgsrc qF84rzRdoc CHANGES-2026

   Updated net/py-python-socks, devel/py-h5py, math/py-pandas-datareader, chat/py-nbxmpp
VersionDeltaFile
1.5915+5-1doc/CHANGES-2026
+5-11 files

NetBSD/pkgsrc RVbi9ffchat/py-nbxmpp PLIST distinfo

   py-nbxmpp: updated to 7.4.0

   nbxmpp 7.4.0 (26 Aug 2026)

   New

   * Client: Add better disconnect check

   Improvements

   * VCardAvatars: Validate and normalize sha1
   * Fallback: Improve range validation
   * Use secrets module instead of random
   * OMEMO: Harden bundle parser
   * OMEMO: Harden devicelist parser

   Bug Fixes

   * WebSocket: Disconnect on parsing errors

    [3 lines not shown]
VersionDeltaFile
1.16+5-5chat/py-nbxmpp/Makefile
1.15+4-4chat/py-nbxmpp/distinfo
1.9+4-1chat/py-nbxmpp/PLIST
+13-103 files

NetBSD/pkgsrc 7Fl0jkQmath/py-pandas-datareader distinfo Makefile, math/py-pandas-datareader/patches patch-versioneer.py patch-pyproject.toml

   py-pandas-datareader: updated to 0.11.1

   v0.11.0 (June 2026)

   Highlights include:

   - Restored import and runtime compatibility with pandas 3 by removing the
     dependency on pandas internal decorator APIs.
   - Vendored ``deprecate_kwarg`` to remove dependency on the private
     ``pandas.util._decorators`` module.
   - Fixed default date sanitization on pandas 3, where ``to_datetime(None)``
     now yields ``NaT`` instead of preserving ``None``.
   - Added a new high-level ``pandas_datareader.macro`` API providing unified
     access to FRED, Eurostat, and OECD macro datasets via ``read_macro``,
     ``search_macro_datasets``, and ``describe_macro_dataset``.
   - Narrowed the default public API surface to focus on macro and widely-used
     data sources; securities-related readers that relied on defunct or broken
     upstream APIs have been removed.
   - Added import smoke coverage and explicit pandas 3 CI lanes.
VersionDeltaFile
1.9+56-139math/py-pandas-datareader/PLIST
1.1+15-0math/py-pandas-datareader/patches/patch-pyproject.toml
1.25+7-7math/py-pandas-datareader/Makefile
1.11+5-5math/py-pandas-datareader/distinfo
1.2+1-1math/py-pandas-datareader/patches/patch-versioneer.py
+84-1525 files

NetBSD/pkgsrc Zx9o7XEdevel/py-h5py PLIST Makefile

   py-h5py: updated to 3.16.0

   What's new in h5py 3.16

   New features

   * Pre-built packages on PyPI are now built with HDF5 2.0
   * h5py now marks itself compatible with free-threading Python.
     There are tests for this
     bugs. Be cautious about relying on this in critical code.
   * Support for storing NumPy complex numbers in HDF5 files using C99 complex
     number datatypes
     or above, so long as the compiler and the build platform implement the relevant
     C99 features.
     h5py will still convert NumPy complex numbers into an HDF5 compound datatype
     by default, preserving the behaviour from earlier versions. See
     :ref:`complex_dtypes` for how to use the new datatypes.
   * New attributes :attr:`~.Dataset.filter_ids` and :attr:`~.Dataset.filter_names`
     to provide more precise information on the filters set up for a dataset

    [37 lines not shown]
VersionDeltaFile
1.16+4-4devel/py-h5py/distinfo
1.28+4-3devel/py-h5py/Makefile
1.12+5-1devel/py-h5py/PLIST
+13-83 files

NetBSD/pkgsrc 5TALCN5net/py-python-socks distinfo Makefile

   py-python-socks: updated to 3.0.0

   3.0.0

   Breaking Changes

   Drop Python 3.8 support: The minimum required Python version is now 3.9+.
   Remove Curio support: The curio asynchronous backend has been completely removed.
   Change AnyIO Proxy.connect return type: The connect method now returns a native anyio.abc.SocketStream instead of a custom wrapper.

   Features

   Add proxy chaining support: Introduced an optional forward parameter to the __init__ method of all Proxy classes to enable chaining.

   Refactoring & Clean Up

   Remove deprecated proxy chains: Deleted the legacy, deprecated implementation of proxy chaining.

   Typing & Quality

    [2 lines not shown]
VersionDeltaFile
1.10+1-37net/py-python-socks/PLIST
1.28+7-6net/py-python-socks/Makefile
1.27+4-4net/py-python-socks/distinfo
+12-473 files

NetBSD/pkgsrc FJeJYrxdoc CHANGES-2026

   Updated security/py-omemo-dr, www/py-selenium
VersionDeltaFile
1.5914+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc i8xBVjnnet/vnc distinfo, net/vnc/patches patch-ab

   Fix build on netbsd-11: ar's l flag now causes an error if no extra
   library is given
VersionDeltaFile
1.9+52-48net/vnc/patches/patch-ab
1.19+2-2net/vnc/distinfo
+54-502 files

NetBSD/pkgsrc hTVpUZMwww/py-selenium Makefile cargo-depends.mk

   py-selenium: updated to 4.48.0

   Selenium 4.48.0
   * Support CDP versions: v150, v151, v152
   * fix W3C capabilities built from a list of options (create_matches)
   * generate the internal BiDi protocol layer from the shared binding-neutral schema
   * update new BiDi layer generation to conform to latest proposed ADR

   Selenium 4.47.0
   * Support CDP versions: v149, v150, v151
   * Fix default command_executor URL in RemoteWebDriver docstring
   * [grid] honor client-advertised se:remoteUrl for reachable BiDi/CDP/VNC URLs
   * prevent CDP access with Firefox
   * pass --enable-chrome-logs unless CHROME_LOG_FILE is set
   * accept By in find_element/find_elements type hints
   * fix no_proxy matching so empty entries and substrings do not bypass the proxy
   * Ensure driver service subprocess resources are cleaned up
VersionDeltaFile
1.8+414-351www/py-selenium/PLIST
1.17+286-280www/py-selenium/distinfo
1.2+94-92www/py-selenium/cargo-depends.mk
1.18+2-2www/py-selenium/Makefile
+796-7254 files

NetBSD/pkgsrc 0GzNtrvsecurity/py-omemo-dr Makefile distinfo

   py-omemo-dr: updated to 1.2.0

   1.2.0

   Improvements

   SessionManager: Add convenience methods to modify group members
VersionDeltaFile
1.3+4-4security/py-omemo-dr/distinfo
1.5+3-3security/py-omemo-dr/Makefile
+7-72 files

NetBSD/pkgsrc QZ1mIBsdoc CHANGES-2026

   doc: Updated devel/tokei to 15.0.0
VersionDeltaFile
1.5913+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc hqAVRQ6devel/tokei Makefile cargo-depends.mk

   devel/tokei: update to 15.0.0

   Added

       Added C3 programming language. (#1319)

   Other

       Add support for Godot TextScene(tscn)
       Update strum/strum_macros to 0.28.0
       Bump toml from 0.8 to 0.9 (#1346)
       Add Laravel Blade language support (#1353)
       Add Djot language support in languages.json (#1321)
       Update strum/strum_macros to 0.27.2 (#1316)
VersionDeltaFile
1.16+49-40devel/tokei/distinfo
1.14+15-12devel/tokei/cargo-depends.mk
1.17+2-2devel/tokei/Makefile
+66-543 files

NetBSD/pkgsrc IJmEFxGdoc CHANGES-2026

   Updated converters/py-ansi2html, devel/py-rich-click
VersionDeltaFile
1.5912+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc FfmsDMvdevel/py-rich-click Makefile distinfo

   py-rich-click: updated to 1.9.9

   1.9.9
   Fixed ctx.forward() not working with commands patched via rich_click.patch()
   Added support for Click 8.5 (resolved DeprecationWarnings)
VersionDeltaFile
1.9+4-4devel/py-rich-click/distinfo
1.13+2-2devel/py-rich-click/Makefile
+6-62 files

NetBSD/pkgsrc VqmQJBTconverters/py-ansi2html Makefile distinfo

   py-ansi2html: updated to 1.9.5

   1.9.5

   Fixes

   truecolor: only add each color once
VersionDeltaFile
1.3+4-4converters/py-ansi2html/distinfo
1.5+2-2converters/py-ansi2html/Makefile
+6-62 files

NetBSD/pkgsrc UZ5EeRqdoc TODO CHANGES-2026

   doc: Updated geography/mapserver to 8.6.6
VersionDeltaFile
1.27870+1-2doc/TODO
1.5911+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 3mX5eASgeography/mapserver Makefile distinfo

   geography/mapserver: Update to 8.6.6

   This release contains multiple security fixes, for issues that are
   surely not all listed in pkg-vulnerabilities.

   Upstream NEWS (misplaced in HISTORY.md), less non-NEWS content:

   8.6.6 release (2026-09-06)
   --------------------------

   8.6.5 release (2026-07-10)
   --------------------------
VersionDeltaFile
1.19+4-4geography/mapserver/distinfo
1.151+2-3geography/mapserver/Makefile
+6-72 files

NetBSD/pkgsrc Dgqf3ADdoc CHANGES-2026

   Updated security/yara, security/py-yara
VersionDeltaFile
1.5910+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc rYdXDxKsecurity/py-yara Makefile distinfo

   py-yara: updated to 4.5.5

   4.5.5
   Upgrade to YARA 4.5.5
VersionDeltaFile
1.18+4-4security/py-yara/distinfo
1.19+2-3security/py-yara/Makefile
+6-72 files

NetBSD/pkgsrc 5lbbEG8security/yara Makefile Makefile.common

   yara: updated to 4.5.8

   4.5.8

   Document the YR_RE_SCAN_LIMIT regular expression scan limit
   BUGFIX: Bound rule table index in OP_PUSH_RULE and OP_INIT_RULE
   BUGFIX: Bound tilde stream row-count read in dotnet module
   BUGFIX: Bound repeat stack depth in _yr_re_fiber_sync
   BUGFIX: Fix memory leak in yr_rules_load_stream (e13acd3).
   BUGFIX: Add missing yr_le16toh byte-swapping in pe module (a2ff0db).
   BUGFIX: Validate summary counts in yr_rules_from_arena
   BUGFIX: Cast e_lfanew to int32_t before sign check in pe_get_header
   BUGFIX: Bound export name count against 32-bit overflow in pe_parse_exports
   BUGFIX: Null-terminate authenticode digest/thumbprint hex buffers in pe module
   BUGFIX: Fix string memory leak in CLI args_free
   BUGFIX: Honor -w/--no-warnings for the file-too-large skip message in CLI
   BUGFIX: Avoid pointer wrap for large index in str_table_entry
   BUGFIX: Bound iterator item count against value stack depth in yr_execute_code
   BUGFIX: Byte-swap sh_entry_count in ELF symtab/dynsym link check

    [14 lines not shown]
VersionDeltaFile
1.24+4-4security/yara/distinfo
1.18+2-2security/yara/Makefile.common
1.18+1-2security/yara/Makefile
+7-83 files

NetBSD/pkgsrc WtiUQ8pdoc TODO CHANGES-2026

   Updated devel/py-ruff, devel/py-jupyter-builder
VersionDeltaFile
1.5909+3-1doc/CHANGES-2026
1.27869+1-2doc/TODO
+4-32 files

NetBSD/pkgsrc QFp5VGPdevel/py-jupyter-builder PLIST Makefile

   py-jupyter-builder: updated to 1.2.3

   1.2.3

   Bugs fixed

   - Support npm range specifiers in the `@jupyterlab/builder` version pin
VersionDeltaFile
1.2+4-4devel/py-jupyter-builder/distinfo
1.2+2-2devel/py-jupyter-builder/Makefile
1.2+2-1devel/py-jupyter-builder/PLIST
+8-73 files

NetBSD/pkgsrc Y30WLDkdevel/py-ruff Makefile cargo-depends.mk

   py-ruff: updated to 0.16.6

   0.16.6

   Preview features

   Move pytest-fixture-autouse to the restriction category
   [flake8-pytest-style] Add an autofix for PT020
   [flake8-tidy-imports] Prevent fix loop between TID254 and TID255
   [isort] Exclude pragma comments from line length calculation (I001)

   Bug fixes

   Validate unary expressions when parsing
   [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514)
   [flake8-bugbear] Fix panic on match subjects (B031)
   [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901)
   [flake8-pytest-style] Avoid duplicate PT017 diagnostics
   [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102)

    [15 lines not shown]
VersionDeltaFile
1.120+223-4devel/py-ruff/distinfo
1.114+73-0devel/py-ruff/cargo-depends.mk
1.123+3-3devel/py-ruff/Makefile
+299-73 files

NetBSD/pkgsrc lPI1VxNdoc TODO

   doc/TODO: add some

   + compiledb-go-1.7.1, ggml-0.23.0, grafana-13.2.1, hwdata-0.411,
     mapserver-8.6.6, p5-Data-OptList-0.115, p5-DateTime-1.6700,
     p5-LWP-MediaTypes-6.05, p5-Net-DNS-1.57, p5-Sub-Exporter-0.992,
     p5-URI-5.37, py-filelock-3.32.5, py-google-api-core-2.36.0,
     py-google-auth-2.57.1, py-googleapis-common-protos-1.75.3,
     py-pdf-6.17.0, py-ruff-0.16.6, py-uv-build-0.12.10, py-zensical-0.0.59,
     qca2-qt6-2.3.12, rumdl-0.2.66, shuck-0.2.1, tabiew-0.15.0,
     tree-sitter-0.27.0, weechat-4.10.1, yazi-26.9.1.
VersionDeltaFile
1.27868+27-1doc/TODO
+27-11 files

NetBSD/pkgsrc 8tBYi5ydatabases/redis Makefile

   redis: Replace interpreter for scripts/build.sh.

   Despite a comment at the top of the script saying it is designed for POSIX
   sh, it uses the non-portable 'local' keyword.
VersionDeltaFile
1.106+3-1databases/redis/Makefile
+3-11 files