NetBSD/pkgsrc PSneIlFdoc CHANGES-2026

   doc: Updated www/resterm to 1.5.6
VersionDeltaFile
1.5825+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc cBJzObywww/resterm go-modules.mk Makefile

   resterm: Update to 1.5.6

   Argument order
   Init directory
   Mock scope in the header
VersionDeltaFile
1.40+3-3www/resterm/distinfo
1.45+1-1www/resterm/Makefile
1.31+0-0www/resterm/go-modules.mk
+4-43 files

NetBSD/pkgsrc KAZjfxJdoc CHANGES-2026

   doc: Updated ham/chirp to 20260904
VersionDeltaFile
1.5824+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc J2yxKZOham/chirp Makefile PLIST

   ham/chirp: Update to 20260904

   upstream changes: micro release (as always)
VersionDeltaFile
1.48+4-4ham/chirp/distinfo
1.32+7-0ham/chirp/PLIST
1.78+2-2ham/chirp/Makefile
+13-63 files

NetBSD/pkgsrc 9iMDHpHdoc CHANGES-2026

   Added devel/py-nanobind; Updated print/py-pikepdf
VersionDeltaFile
1.5823+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc FPyErbkprint/py-pikepdf distinfo Makefile

   py-pikepdf: updated to 10.12.0

   v10.12.0

   Packaging and licensing

   - Binary wheels now redistribute the licenses of the compiled third-party
     libraries they bundle, along with an attribution manifest mapping each
     component to its license. {issue}`736`
     - The new `third-party-licenses/` directory documents every vendored binary:
       qpdf and libjpeg-turbo on all platforms; OpenSSL and zlib (both statically
       linked into `qpdf30.dll`) plus the Microsoft Visual C++ runtime on Windows;
       the GnuTLS/Nettle/GMP stack on macOS; and the GCC runtime libraries on
       musllinux. It also records what is deliberately *not* bundled -- notably
       that Linux wheels use qpdf's built-in crypto and link no TLS library at all.
     - These files are declared via PEP 639 `project.license-files`, so they ship
       in `pikepdf-<version>.dist-info/licenses/` and are enumerated in the wheel's
       `License-File` metadata. `License-Expression` remains `MPL-2.0`: pikepdf's
       own license is unchanged, and the bundled libraries are separate works

    [70 lines not shown]
VersionDeltaFile
1.8+53-6print/py-pikepdf/PLIST
1.31+5-6print/py-pikepdf/Makefile
1.25+4-4print/py-pikepdf/distinfo
+62-163 files

NetBSD/pkgsrc iowHARrdevel Makefile, devel/py-nanobind distinfo DESCR

   py-nanobind: added version 3.0.1

   nanobind is a small binding library that exposes C++ types in Python and vice
   versa. It is reminiscent of Boost.Python and pybind11 and uses near-identical
   syntax. In contrast to these existing tools, nanobind is more efficient:
   bindings compile in a shorter amount of time, produce smaller binaries, and
   have better runtime performance.
VersionDeltaFile
1.1+100-0devel/py-nanobind/PLIST
1.1+19-0devel/py-nanobind/buildlink3.mk
1.1+19-0devel/py-nanobind/Makefile
1.1+5-0devel/py-nanobind/distinfo
1.1+5-0devel/py-nanobind/DESCR
1.4684+2-1devel/Makefile
+150-16 files

NetBSD/pkgsrc 2NAS2t8doc CHANGES-2026

   doc: Updated net/bgpipe to 0.22.1
VersionDeltaFile
1.5822+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc vQLBrcznet/bgpipe go-modules.mk Makefile

   bgpipe: Update to 0.22.1

   What's Changed
   fix: rv-live should honor the BMP peer A flag by @pforemski in #39
VersionDeltaFile
1.2+4-4net/bgpipe/distinfo
1.5+2-3net/bgpipe/Makefile
1.2+0-0net/bgpipe/go-modules.mk
+6-73 files

NetBSD/pkgsrc KvnsJcLdevel/nss distinfo, devel/nss/patches patch-nss_coreconf_NetBSD.mk

   nss: add bug url
VersionDeltaFile
1.217+2-2devel/nss/distinfo
1.7+2-1devel/nss/patches/patch-nss_coreconf_NetBSD.mk
+4-32 files

NetBSD/pkgsrc 7dKe4i3doc CHANGES-2026

   Updated graphics/py-strich, devel/py-mocket
VersionDeltaFile
1.5821+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc LlhZB0Qdevel/py-mocket distinfo Makefile

   py-mocket: updated to 3.14.4

   3.14.4
   Fix for nested Mocketizer's decorators
VersionDeltaFile
1.20+14-14devel/py-mocket/Makefile
1.20+4-4devel/py-mocket/distinfo
+18-182 files

NetBSD/pkgsrc I7c9LTugraphics/py-strich Makefile distinfo

   py-strich: updated to 0.20

   0.20

   All formats: numeric arguments (cell size, render options, encoder settings)
   are validated for type and range up front
   GS1-128: Code128Data.gs1 rejects payloads over the GS1 maximum of 48 data
   characters
VersionDeltaFile
1.8+4-4graphics/py-strich/distinfo
1.13+2-2graphics/py-strich/Makefile
+6-62 files

NetBSD/pkgsrc rKgOAxWdoc CHANGES-2026

   Updated math/py-statsmodels, geography/py-obspy
VersionDeltaFile
1.5820+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc 12GKCMCgeography/py-obspy PLIST Makefile

   py-obspy: updated to 1.5.1

   1.5.1
   Changes:
    - General:
      * add helper function that wraps around `numpy.linalg.eig` but always
        mimicks the behavior of numpy <2.5, which is to downcast results to real
        valued arrays when possible. Replacing all `numpy.linalg.eig` calls in the
        code base with this wrapper
    - obspy.core:
      * inventory: fix a bug that Latitude, Longitude and Distance did not accept
        'measurement_units' when being initialized
    - obspy.clients.fdsn:
      * add new URL mapping 'EARTHSCOPE+USGS' and make it the default. This will
        use EarthScope for dataselect and station web services and use USGS for
        event web service. This is basically restoring the output users got before
        IRIS-now-EarthScope discontinued serving an event web service which was a
        mirror of USGS event web service
      * update URL endpoint for IGN to https

    [32 lines not shown]
VersionDeltaFile
1.15+4-4geography/py-obspy/distinfo
1.36+3-3geography/py-obspy/Makefile
1.16+2-1geography/py-obspy/PLIST
+9-83 files

NetBSD/pkgsrc vy7yydkmath/py-statsmodels distinfo Makefile, math/py-statsmodels/patches patch-statsmodels_tsa_statespace___filters___univariate__diffuse.pyx.in patch-statsmodels_tsa_statespace___filters___univariate.pyx.in

   py-statsmodels: updated to 0.15.0

   0.15.0

   SPEC-007: consistent use of rng for randomness
   NamedTuple return values replace bare tuples
   Formula engine: patsy is no longer the only option
   Build system: meson-python replaces setuptools
   Polars DataFrame support
   New robust estimation tools
   New models and statistical tests
   New and improved plots
   GLM and other model enhancements
   Platform and packaging compatibility
   Stricter input validation for string-valued options
   A few consequential bug fixes
VersionDeltaFile
1.13+378-280math/py-statsmodels/PLIST
1.33+16-8math/py-statsmodels/Makefile
1.18+4-8math/py-statsmodels/distinfo
1.2+1-1math/py-statsmodels/patches/patch-statsmodels_tsa_statespace___filters___univariate__diffuse.pyx.in
1.2+1-1math/py-statsmodels/patches/patch-statsmodels_tsa_statespace___filters___univariate.pyx.in
1.2+1-1math/py-statsmodels/patches/patch-statsmodels_tsa_statespace___filters___inversions.pyx.in
+401-2991 files not shown
+402-3007 files

NetBSD/pkgsrc qxN1y68print/hplip Makefile

   hplip: fix build with gcc 14
VersionDeltaFile
1.130+5-1print/hplip/Makefile
+5-11 files

NetBSD/pkgsrc vPpyAyrdoc CHANGES-2026

   Added misc/py-interface-meta, math/py-formulaic
VersionDeltaFile
1.5819+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc 0mJ02owmath Makefile, math/py-formulaic DESCR distinfo

   py-formulaic: added version 1.2.2

   Formulaic is a high-performance implementation of Wilkinson formulas for
   Python.
VersionDeltaFile
1.1+179-0math/py-formulaic/PLIST
1.1+28-0math/py-formulaic/Makefile
1.1+5-0math/py-formulaic/distinfo
1.648+2-1math/Makefile
1.1+2-0math/py-formulaic/DESCR
+216-15 files

NetBSD/pkgsrc 4sYr67ymisc Makefile, misc/py-interface-meta DESCR distinfo

   py-interface-meta: added version 2.0.1

   interface_meta provides a convenient way to expose an extensible API with
   enforced method signatures and consistent documentation.
VersionDeltaFile
1.1+36-0misc/py-interface-meta/PLIST
1.1+19-0misc/py-interface-meta/Makefile
1.1+5-0misc/py-interface-meta/distinfo
1.685+2-1misc/Makefile
1.1+2-0misc/py-interface-meta/DESCR
+64-15 files

NetBSD/pkgsrc Dl1NMKBdevel/glasgow Makefile

   glasgow: remove upper bound

   it might work with that version, it might not, but if we
   don't build it at all, we'll never know
VersionDeltaFile
1.8+2-2devel/glasgow/Makefile
+2-21 files

NetBSD/pkgsrc 9WZ7HEAnet/knot-resolver PLIST Makefile

   knot-resolver: fix build on Darwin
VersionDeltaFile
1.5+27-15net/knot-resolver/Makefile
1.2+11-11net/knot-resolver/PLIST
+38-262 files

NetBSD/pkgsrc k4mj6L9doc CHANGES-2026

   Updated net/py-twine, www/py-autobahn
VersionDeltaFile
1.5818+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc RmRwZCbwww/py-autobahn Makefile distinfo

   py-autobahn: updated to 26.7.1

   26.7.1
   ------

   **Security**

   * Fix WebSocket ``maxMessagePayloadSize`` being enforced against the compressed on-the-wire frame length instead of the uncompressed reassembled message size when permessage-compress (deflate/bzip2/snappy/brotli) is negotiated. A small compressed frame could inflate far beyond the configured limit and be delivered to the application (a decompression-bomb style denial-of-service; security advisory GHSA-hxp9-w8x3-p566, same class as CVE-2016-10544). The limit is now re-checked at the inflation site against the running uncompressed message size, and the connection is failed with close code 1009 (message too big) before delivery — for both the whole-message and streaming receive APIs and every compression backend. Behaviour change: a compressed message that inflates past ``maxMessagePayloadSize`` is now rejected where it previously passed; uncompressed traffic and the per-frame ``maxFramePayloadSize`` wire guard are unaffected
   * Fix the permessage-deflate ``max_message_size`` receive cap silently truncating an over-limit message and raising a zlib error instead of cleanly rejecting it: the bounded ``decompress(…, max_length)`` left the remaining input in ``unconsumed_tail`` undrained, so the message was corrupted rather than reported. Decompression is now bounded cumulatively across frames and raises ``PayloadExceededError`` as soon as the uncompressed size would exceed the cap
   * Make bounded decompression backend-agnostic: ``decompress_message_data()`` gains an optional ``max_output_len`` argument (documented on the ``PerMessageCompress`` base class) and every permessage-compress backend now honours it. deflate and bzip2 stop inflating once the limit is reached (native incremental cap); snappy and brotli, whose libraries expose no output-length argument, inflate the frame (already bounded on the wire by ``maxFramePayloadSize``) and then reject — a weaker but still clean per-frame guarantee. The WebSocket receive path passes the remaining ``maxMessagePayloadSize`` budget so a compressed frame no longer expands unbounded into memory before the size check; the previous post-inflation check
   * Make the asyncio RawSocket receive size limit configurable, at parity with the Twisted backend. The asyncio ``WampRawSocketFactory`` now exposes ``setProtocolOptions(maxMessagePayloadSize=...)`` / ``resetProtocolOptions()`` (bounds ``[512, 2**24]``, default 16 MB), and the configured value drives both the advertised handshake length exponent and the enforced receive cap (rounded up to the next power of two), matching the Twisted factory. Previously the asyncio receive limit was hardwired to 16 MB (a dead ``max_size=None`` branch), so an asyncio WAMP peer could not tighten its RawSocket receive limit for DoS hardening and Crossbar's RawSocket ``max_message_size`` had no effect on the asyncio path

   **FlatBuffers**

   * Fix ``check_zlmdb_flatbuffers_version_in_sync()`` comparing the build-time ``version()`` (which is ``(0, 0, 0, None, None)`` on installed wheels, where the vendored FlatBuffers ``__git_version__`` is unstamped) — it now compares the reliably-stamped ``__version__`` and returns a version string. Added regression tests
   * Make ``autobahn.flatbuffers.version()`` reliable on installed wheels: when the build-time ``__git_version__`` is a bare commit hash or ``"unknown"`` (shallow clone / submodule absent from the sdist), ``version()`` now falls back to parsing the static vendored ``__version__`` and returns ``(major, minor, patch, None, None)`` instead of ``(0, 0, 0, None, None)``; rich ``git describe`` detail is still returned on genuine dev/git builds. Also hardened ``hatch_build.py`` so it never stamps a non-parseable ``__git_version__``. Return shape is unchanged (5-tuple); no API break

   **Build & CI/CD**


    [5 lines not shown]
VersionDeltaFile
1.37+4-4www/py-autobahn/distinfo
1.26+7-1www/py-autobahn/PLIST
1.51+2-3www/py-autobahn/Makefile
+13-83 files

NetBSD/pkgsrc hSk5IjWnet/py-twine distinfo Makefile

   py-twine: updated to 7.0.0

   twine 7.0.0 (2026-07-27)

   Bugfixes

   - Specify UTF-8 encoding when reading ``.pypirc`` files.
   - Add missing subdependencies to ``--version`` output.
   - The dependency on ``rich`` has been bumped to avoid a hang in some environments.
   - Indices that respond with non-standard HTTP codes are now handled more gracefully.

   Deprecations and Removals

   - Fix uploading packages with metadata version 2.5. The fix no longer allows metadata version 2.0, which was never officially standardised.
VersionDeltaFile
1.22+11-13net/py-twine/Makefile
1.12+4-4net/py-twine/distinfo
+15-172 files

NetBSD/pkgsrc g93ZyyMdoc CHANGES-2026

   Updated devel/py-joblib, devel/py-anyio
VersionDeltaFile
1.5817+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc ZdcAGEcdevel/py-anyio distinfo Makefile

   py-anyio: updated to 4.15.0

   4.15.0

   - Added support for the newer keyword-only arguments on ``anyio.Path`` methods to match
     the standard library ``pathlib.Path``:

     * ``follow_symlinks`` on ``exists()`` (Python 3.12+)
     * ``follow_symlinks`` on ``is_dir()`` (Python 3.13+)
     * ``follow_symlinks`` on ``is_file()`` (Python 3.13+)
     * ``follow_symlinks`` on ``owner()`` (Python 3.13+)
     * ``follow_symlinks`` on ``group()`` (Python 3.13+)
     * ``newline`` on ``read_text()`` (Python 3.13+)

   - Added ``amap``, ``gather``, and ``as_completed`` utility functions to simplify common
     patterns
   - Added ``--anyio-mode`` command-line option as an alternative to the ``anyio_mode``
     ini setting, and fix the pytest plugin's auto mode detection to recognize the mode
     when set via either mechanism(e.g: ``pytest_asyncio``).

    [73 lines not shown]
VersionDeltaFile
1.13+10-1devel/py-anyio/PLIST
1.34+4-4devel/py-anyio/distinfo
1.38+4-4devel/py-anyio/Makefile
+18-93 files

NetBSD/pkgsrc pcfibTddevel/py-joblib Makefile distinfo, devel/py-joblib/patches patch-joblib_externals_loky_backend_context.py

   py-joblib: updated to 1.6.0

   1.6.0

   Fix caching of functions whose source cannot be retrieved, such as functions defined in a notebook cell. Their identity fell back to str(hash(func.__code__)), which is salted by PYTHONHASHSEED and so differed between processes. A worker reading the func_code.py written by another one concluded that the function had changed and wiped the whole cache directory for it, discarding results computed by its peers. func_code.py is also no longer rewritten in place, so a reader can no longer catch it half-written and draw the same conclusion.
   Drop python 3.9 support. The oldest supported Python version is now Python 3.10.
   Fix eval_expr (used to evaluate the pre_dispatch argument of Parallel) to raise a ValueError as documented instead of leaking a ZeroDivisionError for expressions that divide or take a modulo by zero.
   MemorizedResult now forwards mmap_mode to its store backend, so a cached array reconstructed from a location is memory-mapped as requested instead of being loaded fully into memory.
   Unvendor cloudpickle to more quickly benefit from maintenance releases of cloudpickle
   Fix Memory.cache for functions with a keyword-only argument that has a default declared before a keyword-only argument without a default.
   Fix behavior of filter_args on some precise cases.
   Fix a concurrency error that could happen with unordered generator.
   Fix: dump() now accepts any input os.PathLike object to be consistent with load.
   The documentation now uses pydata sphinx theme. Furthermore, optional dependencies test and docs have been added to pyproject.toml.
   Vendor loky 3.6.0
VersionDeltaFile
1.3+29-26devel/py-joblib/patches/patch-joblib_externals_loky_backend_context.py
1.13+4-10devel/py-joblib/PLIST
1.25+5-5devel/py-joblib/distinfo
1.26+3-2devel/py-joblib/Makefile
+41-434 files

NetBSD/pkgsrc PRNuRaTdoc CHANGES-2026

   Updated devel/py-cachelib, devel/py-vcs-versioning, devel/py-setuptools_scm, time/py-vdirsyncer
VersionDeltaFile
1.5816+5-1doc/CHANGES-2026
+5-11 files

NetBSD/pkgsrc j9b1nEUtime/py-vdirsyncer distinfo Makefile, time/py-vdirsyncer/patches patch-docs_conf.py

   py-vdirsyncer: updated to 0.21.0

   0.21.0

   - Implement retrying for ``google`` storage type when a rate limit is reached.
   - ``tenacity`` is now a required dependency.
   - Drop support for Python 3.8.
   - Retry transient network errors for nullipotent requests.
   - Add support for Python 3.14.
VersionDeltaFile
1.79+15-15time/py-vdirsyncer/Makefile
1.55+4-5time/py-vdirsyncer/distinfo
1.5+1-1time/py-vdirsyncer/patches/patch-docs_conf.py
+20-213 files