py-iniparse: updated to 0.5.2
0.5.2
fix: Update all files for release 0.5.1
chore[ci]: Added Github action for regular testing package
Avoid the multiprocessing forkserver method
feat(test): Add traceability requirements
ci: bump actions/checkout from 4 to 5
Fixed a small test error
ci: bump actions/checkout from 5 to 6
fix: Replace get_nowait() with get(timeout=5) in multiprocessing test
Fix spelling mistakes in docstrings and tests
ci: bump actions/checkout from 6 to 7
Make _compat_skip_empty_lines a per-instance attribute
config: raise NotImplementedError from abstract ConfigNamespace methods
tests: do not depend on CPython's 'test' package
utils: make tidy() also clean up the first section
fix: Update all files for release 0.5.2
streamlink: updated to 8.6.3
streamlink 8.6.3 (2026-10-29)
- SECURITY: new minor release primarily for Streamlink's Windows / Linux AppImages builds, with `brotli 1.2.1` (via uv.lock) ([`CVE-2026-111497`](https://nvd.nist.gov/vuln/detail/CVE-2026-111497))
- Fixed: `--retry-streams` and `--retry-max` in external/continuous HTTP output mode when re-fetching
- Build: bumped `pycryptodome` version requirements to `>=3.4.3,<5`
- Tests: fixed race-conditions in HLS tests
acme.sh: update to 3.1.6
Changes since 3.1.4:
3.1.6:
- Release tags are signed from 3.1.6 on. The public key is allowed_signers
in this repository; see "Verify a Release" in the README.
- No functional change since 3.1.5.
3.1.5:
- Release tags are signed from 3.1.5 on. The public key is allowed_signers
in this repository; see "Verify a Release" in the README.
- New ACME_PACKAGED mode for distro-packaged installs: --install no longer
copies the script into LE_WORKING_DIR, and --upgrade, --install-online and the
auto-upgrade cron path defer to the system package manager
(#7135).
- Standalone mode listens on both IPv4 and IPv6 by default, and the port
check now works on the BSDs, macOS and Haiku.
- An explicit --days or --valid-to now outranks the ARI renewal window.
[16 lines not shown]
devel/gitpane: update to 0.18.0
[0.18.0] - 2026-10-29
Added
Gitpane Explorer for VS Code shows workspace repositories, linked worktrees and changed files beside the file tree. It updates as workspace repositories change and opens file changes in the editor. The extension includes branch review, the commit graph, repository and worktree actions, submodule inspection, sessions, themes and configured launchers. (#107, closes #106)
Install Gitpane Explorer from the VS Code Marketplace, or download a VSIX with its bundled backend for Apple Silicon and Intel Macs, Linux ARM64 and x64, and Windows x64. The README includes a rendered preview, installation steps and settings. (#107)
Fixed
Git process arguments use ordinary Windows paths while repository identity checks retain canonical paths. This fixes content reads and worktree operations that failed on canonical Windows paths. (#107)
Parent repository status remains available when a registered submodule is replaced by a file or symlink. (#107)
Update libz-sys to 1.1.31 for RUSTSEC-2026-0418 and include the latest merged Git and TLS dependency fixes. (#107, #104, #102, #96)
resterm: Update to 1.17.1
Failed tests in the text report
JavaScript asserts show their text once
--timeout stops JavaScript tests
Loop variables in step conditions
+ needs text on one side
Other changes
multimedia/moviebox-tui: update to 0.1.28
Fixed
Providers & Stream Resolution:
Extracted signed CDN MP4 streams from MovieBox subject detector links (/subject-api/get), restoring movie streaming and multi-resolution playback after upstream restricted play-info with deprecation clips.
Reported explicit error causes when MovieBox serves placeholder clips instead of generic "no streams available", and surfaced upstream HTTP failure statuses directly to the user.
Download Engine & Batch Queue:
Recorded only flushed bytes to .part.json segment progress during downloads, preventing aborted or paused workers from leaving zero-byte gaps and file corruption on resume.
Changed
Dependencies & Build Infrastructure:
Upgraded tokio to 1.54.1, scraper to 0.29.0, lru to 0.19.0, zip to 9.1.0, sha2 to 0.11.1, open to 5.4.5, libc to 0.2.191, and serde_json to 1.0.154.
misc/rozi: update to 0.0.39
v0.0.39
Added
You can remove an extension from its installed report with Ctrl+K. A Discover entry for an extension that is already installed opens that extension in the Installed tab, where you can enable, update, or remove it. (#280)
Rozi can send one anonymous weekly usage report per install. The first launch shows an Anonymous usage count notice, and the first report is sent on a later day. Set [updates] count_usage = false, [updates] check = false, or DO_NOT_TRACK=1 to opt out. CI environments and debug builds are not counted. (#282)
Drag one workspace tab onto another in the workbar to swap their panes, layout, and name. You stay on the workspace you dragged, under its new number. (#284)
After an update, a What's new dialog shows the release notes once. Use release-notes in the command palette to open them again, or set [updates] release_notes = false to turn off the automatic dialog. First installs and source builds without embedded notes do not show it. (#286)
On a first install without an existing config file, a Welcome to rozi card introduces sessions, panes, workspaces, and the keys bound to common commands. Press Enter to close it or Ctrl+L to open the getting-started guide. (#287)
Fixed
Renaming a temporary session from the Sessions picker updates its row and the sidebar as soon as the server confirms the rename. The highlight stays on the renamed session.
Hovering a clickable workbar badge now highlights its rounded or pointed ends along with the rest of the badge. (#285)
Update notices now ask you to restart running sessions when the session protocol differs, without showing the internal protocol number. They continue to name extension API version changes. (#283)
Documentation links in the Anonymous usage count notice and update notice now point to the Rozi website. (#287)
Compatibility
[15 lines not shown]
devel/sem: update to 0.29.0
v0.29.0
Bumps every crate, the npm package and the MCP registry entry to 0.29.0.
Minor bump because what sem extracts changed (#538): new entity kinds in
C, C++, C#, Rust, Java, Kotlin and Elixir, C++ headers in `.h` files
read as C++, and recovered definitions in regions tree-sitter cannot
parse.
v0.28.3
Release the merged ignore-handling fix (#536), caller-batch lookup reuse
(#534), and publishing reliability improvements. Synchronizes all five
workspace crate versions, internal dependencies, Cargo.lock, npm, MCP
metadata, and changelog. Validation: locked offline Cargo metadata and
git diff --check passed; the underlying fix passed focused regressions
and all CI checks, including Windows.
v0.28.2
[4 lines not shown]
Update jxrlib to 1.4.4
Motivated by wiz@ in
https://mail-index.netbsd.org/pkgsrc-users/2026/10/26/msg043665.html
Breaking change: include directory renamed from jxrlib to libjxr
Changelog
* V1.4.4; 2026/10/09
+ Fix potential size_t overflow in the memory allocation limit
check of calloc_lim
* V1.4.3; 2026/09/02
+ tmpnam security mitigations:
o Use a local buffer instead of its internal one
o Fail to open file if it exists (requires C11)
* V1.4.2; 2026/07/07
+ Fix buffer overflow in outputNChannel (OSS Fuzz 532002884)
* V1.4.1; 2026/06/03
[44 lines not shown]
luanti: update to 5.18.0
Deprecations and compatibility notes
- Lua API: Missing x, y or z values in vectors now cause an error.
Deprecation warnings were issued since version 5.13.0.
- The setting secure.enable_security has been removed. A
command-line argument has been added to cover cases where it is
- for whatever reason - necessary to disable it.
Client / Audiovisuals
- Performance improvements
- Improve zoom level status text
- Autoforward is again forwarded to get_player_control().up
(5.17.0 regression)
- Better text placement for the media loading step
- The Enter key event no longer leaks into formspecs opened from
the chat
- Re-added a client setting to disable digging particles
- Moved the primary actions (buttons) in main menu dialogs to the
[58 lines not shown]
megacmd: update to 2.7.0
Thu Oct 15 02:34:44 PM UTC 2026 - linux at mega.co.nz
- Update to version 2.7.0:
* Faster uploads, especially of many small files
* FUSE: mounts now stream files, so they open at once instead of after a full download
* FUSE: reads through a mount skip the integrity check a full download does. Use "get" for files meant to be run or installed. See "help --streaming"
* Transfers and streaming now indicate when they wait for transfer quota or for free storage
* mv: moving a folder onto a file no longer deletes the file
* mkdir, put, mv and cp no longer create items named "." or ".."
* Hardened webdav, ftp and local session file handling
* Stability, memory, typos and other improvements
- Use builtin megasdk-10.21.0
audio/fasttracker2: Update to 2.27
Changes since 2.26.1:
v2.27 - 25.10.2026
* Fixed: Sample files shouldn't be listed when in "Instr." item mode
in Disk Op.
* Fixed double-free memory bug when loading .OGG samples
* Scope interpolation tweak (again)
audio/din: Update to 66.2
Changes since 65:
DIN Is Noise 66:
/*
new overtone tuning
the ratios of all intervals are octave shifted harmonics
of the key note.
now the default tuning
*/
/*
on beater and voice-modualtion editors:
infinite beat labels
[53 lines not shown]
