moor: update to 2.19.5. Changes:
- Fix man page bold rendering as N<NA<AM<ME<E
- Fix flick-scrolling down freezing, then jumping
- Mouse support out of the box in more terminals
- Use terminal's own cursor in prompts, like search and filter
- Let filter share history with search
- Fixed potential screen tearing on quick window resizes
- Support embedding moor with your own screen
mob: update to 5.4.2. Changes:
- Fix: `mob start` now correctly handles parsing of lastFile when
the commit message has been extended with additional information.
bash-preexec: update to 0.7.0. Changes:
- Use bats-core/bats-action to set up Bats
- Mention Ghostty
- Test against Bash 3.2, 4.4, 5.0, and 5.3 in CI
- Use a function substitution in $PS0 for preexec in Bash >= 5.3
- Re-adjust PROMPT_COMMAND when PROMPT_COMMAND is modified elsewhere
- fix: Allow __bp_precmd_invoke_cmd to be called from __bp_install
- fix: Properly check to see if we're already installed in PROMPT_COMMAND
- fix preexec for the first command
- Preserve $? and $_ on __bp_precmd_invoke_cmd early returns
- Remove the local declarations of {preexec,precmd}_functions
astyle: update to 3.6.19. Changes:
### 3.6.19
* Prevent reading of files with lossy path name encoding conversion
* Fix indent within extern C blocks
* Refactored vector memory handling
### 3.6.18
* Added option pad-semicolon=none (--unpad-semicolon) to remove space
padding before a semicolon
* Fix unpad-paren being suppressed for the remainder of a file after a
typedef struct
* Fix statement alignment with noexcept keyword and -xb option
* Reduced the documented command-line option surface: trimmed
pure-synonym spellings (e.g. style=bsd/break) and composite shortcut
options (--pad-paren, --pad-brackets, --break-blocks=all) from
--help/the man page/shell completions; all previously accepted
[55 lines not shown]
libXtst: update to 1.2.6.
Alan Coopersmith (2):
gitlab CI: drop the ci-fairy check-mr job
libXtst 1.2.6
Olivier Fourdan (2):
parse_reply_call_callback: check element size against remaining reply buffer
parse_reply_call_callback: reject zero-progress RECORD reply elements
py-zensical: update to 0.0.71.
This version adds support for mkdocs-include-markdown-plugin. It
also fixes social card rendering when palette colors are unset,
prevents unnecessary restarts during file discovery, and reports
oversized search fields more clearly.
libXrender: update to 0.9.13.
Alan Coopersmith (3):
meson: Add option to build with meson
gitlab CI: drop the ci-fairy check-mr job
libXrender 0.9.13
Peter Hutterer (1):
Check numSubpixel against numScreens to avoid OOB writes (CVE-2026-88807)
libXi: update to 1.8.4.
Alan Coopersmith (4):
Strip trailing whitespace from source files
Track XIValuatorClass correctly during copyDeviceChangedEvent
Set num_classes to number of copied classes in copyDeviceChangedEvent
libXi 1.8.4
Olivier Fourdan (10):
XQueryDeviceState: check ValuatorClass num_valuators against class length
size_classes/copy_classes: bound XI2 class lengths to the received buffer
size_classes/copy_classes: enforce XI2 per-type class payload sizes
XIQueryDevice: keep padded name and class bytes within the reply
XListInputDevices: validate device name lengths against reply buffer
XListInputDevices: validate class lengths cumulatively in SizeClassInfo
wireToEnterLeave: validate buttons_len against the received event size
XGetDeviceControl: require reply control to match the request
XGetDeviceControl: size DEVICE_ENABLE replies for XDeviceEnableState
XGetDeviceControl: set DEVICE_ENABLE length to the struct size
[8 lines not shown]
libX11: update to 1.8.14.
Alan Coopersmith (4):
Strip trailing whitespace from source files
Track XIValuatorClass correctly during copyDeviceChangedEvent
Set num_classes to number of copied classes in copyDeviceChangedEvent
libXi 1.8.4
Olivier Fourdan (10):
XQueryDeviceState: check ValuatorClass num_valuators against class length
size_classes/copy_classes: bound XI2 class lengths to the received buffer
size_classes/copy_classes: enforce XI2 per-type class payload sizes
XIQueryDevice: keep padded name and class bytes within the reply
XListInputDevices: validate device name lengths against reply buffer
XListInputDevices: validate class lengths cumulatively in SizeClassInfo
wireToEnterLeave: validate buttons_len against the received event size
XGetDeviceControl: require reply control to match the request
XGetDeviceControl: size DEVICE_ENABLE replies for XDeviceEnableState
XGetDeviceControl: set DEVICE_ENABLE length to the struct size
[8 lines not shown]
sysutils/dua-cli: update to 2.46.0
A bugfix release, and one that should also restore cargo installations, making them function.
New Features
make walk result buffering configurable per worker
Replace the fixed QUEUED_BATCHES_PER_WORKER constant with
Options::queued_batches_per_worker and a chainable builder method. Use
two queued batches per worker by default in both production and tests,
preserving the original bounded buffering behavior.
Consumers that pause to process entries can opt into a larger queue to
keep traversal workers busy, trading memory for less idle time. A value
of zero selects an unbuffered channel. Check the worker-count
multiplication so excessive capacities cannot silently overflow.
Update existing Options literals to inherit the new default. Verify the
actual queue capacity with one and two workers, and exercise larger and
[16 lines not shown]
net/slumber: update to 5.4.0
[5.4.0] - 2026-10-14
Changed
Use a single unicode character for checkboxes
Support compressed responses
brotli, deflate, gzip, and zstd content encodings are now supported
Slumber will not include a Content-Encoding header by default; if you want your responses to be compressed, you'll have to manually add the request header
Include database path in TUI Help page
Fixed
Fixed underflow in hotkey hint #767 (@MichaelXavier)
