NetBSD/pkgsrc IJmEFxGdoc CHANGES-2026

   Updated converters/py-ansi2html, devel/py-rich-click
VersionDeltaFile
1.5912+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc FfmsDMvdevel/py-rich-click Makefile distinfo

   py-rich-click: updated to 1.9.9

   1.9.9
   Fixed ctx.forward() not working with commands patched via rich_click.patch()
   Added support for Click 8.5 (resolved DeprecationWarnings)
VersionDeltaFile
1.9+4-4devel/py-rich-click/distinfo
1.13+2-2devel/py-rich-click/Makefile
+6-62 files

NetBSD/pkgsrc VqmQJBTconverters/py-ansi2html Makefile distinfo

   py-ansi2html: updated to 1.9.5

   1.9.5

   Fixes

   truecolor: only add each color once
VersionDeltaFile
1.3+4-4converters/py-ansi2html/distinfo
1.5+2-2converters/py-ansi2html/Makefile
+6-62 files

NetBSD/pkgsrc UZ5EeRqdoc TODO CHANGES-2026

   doc: Updated geography/mapserver to 8.6.6
VersionDeltaFile
1.27870+1-2doc/TODO
1.5911+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 3mX5eASgeography/mapserver Makefile distinfo

   geography/mapserver: Update to 8.6.6

   This release contains multiple security fixes, for issues that are
   surely not all listed in pkg-vulnerabilities.

   Upstream NEWS (misplaced in HISTORY.md), less non-NEWS content:

   8.6.6 release (2026-09-06)
   --------------------------

   8.6.5 release (2026-07-10)
   --------------------------
VersionDeltaFile
1.19+4-4geography/mapserver/distinfo
1.151+2-3geography/mapserver/Makefile
+6-72 files

NetBSD/pkgsrc Dgqf3ADdoc CHANGES-2026

   Updated security/yara, security/py-yara
VersionDeltaFile
1.5910+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc rYdXDxKsecurity/py-yara Makefile distinfo

   py-yara: updated to 4.5.5

   4.5.5
   Upgrade to YARA 4.5.5
VersionDeltaFile
1.18+4-4security/py-yara/distinfo
1.19+2-3security/py-yara/Makefile
+6-72 files

NetBSD/pkgsrc 5lbbEG8security/yara Makefile Makefile.common

   yara: updated to 4.5.8

   4.5.8

   Document the YR_RE_SCAN_LIMIT regular expression scan limit
   BUGFIX: Bound rule table index in OP_PUSH_RULE and OP_INIT_RULE
   BUGFIX: Bound tilde stream row-count read in dotnet module
   BUGFIX: Bound repeat stack depth in _yr_re_fiber_sync
   BUGFIX: Fix memory leak in yr_rules_load_stream (e13acd3).
   BUGFIX: Add missing yr_le16toh byte-swapping in pe module (a2ff0db).
   BUGFIX: Validate summary counts in yr_rules_from_arena
   BUGFIX: Cast e_lfanew to int32_t before sign check in pe_get_header
   BUGFIX: Bound export name count against 32-bit overflow in pe_parse_exports
   BUGFIX: Null-terminate authenticode digest/thumbprint hex buffers in pe module
   BUGFIX: Fix string memory leak in CLI args_free
   BUGFIX: Honor -w/--no-warnings for the file-too-large skip message in CLI
   BUGFIX: Avoid pointer wrap for large index in str_table_entry
   BUGFIX: Bound iterator item count against value stack depth in yr_execute_code
   BUGFIX: Byte-swap sh_entry_count in ELF symtab/dynsym link check

    [14 lines not shown]
VersionDeltaFile
1.24+4-4security/yara/distinfo
1.18+2-2security/yara/Makefile.common
1.18+1-2security/yara/Makefile
+7-83 files

NetBSD/pkgsrc WtiUQ8pdoc TODO CHANGES-2026

   Updated devel/py-ruff, devel/py-jupyter-builder
VersionDeltaFile
1.5909+3-1doc/CHANGES-2026
1.27869+1-2doc/TODO
+4-32 files

NetBSD/pkgsrc QFp5VGPdevel/py-jupyter-builder PLIST Makefile

   py-jupyter-builder: updated to 1.2.3

   1.2.3

   Bugs fixed

   - Support npm range specifiers in the `@jupyterlab/builder` version pin
VersionDeltaFile
1.2+4-4devel/py-jupyter-builder/distinfo
1.2+2-2devel/py-jupyter-builder/Makefile
1.2+2-1devel/py-jupyter-builder/PLIST
+8-73 files

NetBSD/pkgsrc Y30WLDkdevel/py-ruff Makefile cargo-depends.mk

   py-ruff: updated to 0.16.6

   0.16.6

   Preview features

   Move pytest-fixture-autouse to the restriction category
   [flake8-pytest-style] Add an autofix for PT020
   [flake8-tidy-imports] Prevent fix loop between TID254 and TID255
   [isort] Exclude pragma comments from line length calculation (I001)

   Bug fixes

   Validate unary expressions when parsing
   [flake8-async, pylint] Recognize builtins.open (ASYNC230, PLW1514)
   [flake8-bugbear] Fix panic on match subjects (B031)
   [flake8-datetimez] Reject tzinfo=None for datetime bounds (DTZ901)
   [flake8-pytest-style] Avoid duplicate PT017 diagnostics
   [ruff] Remove lint.external hint for Ruff-specific suppressions (RUF102)

    [15 lines not shown]
VersionDeltaFile
1.120+223-4devel/py-ruff/distinfo
1.114+73-0devel/py-ruff/cargo-depends.mk
1.123+3-3devel/py-ruff/Makefile
+299-73 files

NetBSD/pkgsrc lPI1VxNdoc TODO

   doc/TODO: add some

   + compiledb-go-1.7.1, ggml-0.23.0, grafana-13.2.1, hwdata-0.411,
     mapserver-8.6.6, p5-Data-OptList-0.115, p5-DateTime-1.6700,
     p5-LWP-MediaTypes-6.05, p5-Net-DNS-1.57, p5-Sub-Exporter-0.992,
     p5-URI-5.37, py-filelock-3.32.5, py-google-api-core-2.36.0,
     py-google-auth-2.57.1, py-googleapis-common-protos-1.75.3,
     py-pdf-6.17.0, py-ruff-0.16.6, py-uv-build-0.12.10, py-zensical-0.0.59,
     qca2-qt6-2.3.12, rumdl-0.2.66, shuck-0.2.1, tabiew-0.15.0,
     tree-sitter-0.27.0, weechat-4.10.1, yazi-26.9.1.
VersionDeltaFile
1.27868+27-1doc/TODO
+27-11 files

NetBSD/pkgsrc 8tBYi5ydatabases/redis Makefile

   redis: Replace interpreter for scripts/build.sh.

   Despite a comment at the top of the script saying it is designed for POSIX
   sh, it uses the non-portable 'local' keyword.
VersionDeltaFile
1.106+3-1databases/redis/Makefile
+3-11 files

NetBSD/pkgsrc tM1kzScdoc CHANGES-2026

   Updated graphics/py-pillow_heif, textproc/py-xmldiff
VersionDeltaFile
1.5908+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc i9kch7btextproc/py-xmldiff PLIST distinfo

   py-xmldiff: updated to 3.0

   3.0 (2026-06-11)

   - Updated Python versions. 3.8 and 3.9 still works, but is officially unsupported,
     added 3.13, 3.14 and 3.15 to the supported versions.

   - Speeding up diffing by using dequeue [barucden]

   - Support namespace-prefixed move nodes [barucden]

   - Improved matching in certain cases [barucden]
VersionDeltaFile
1.10+4-9textproc/py-xmldiff/Makefile
1.4+4-4textproc/py-xmldiff/distinfo
1.4+1-2textproc/py-xmldiff/PLIST
+9-153 files

NetBSD/pkgsrc qPICIHzgraphics/py-pillow_heif Makefile PLIST

   py-pillow_heif: updated to 1.7.0

   1.7.0 - 2026-09-06]

   Added

   - Reading and writing nominal diffuse white luminance HDR metadata: `nominal_diffuse_white_luminance` key in `info` dictionary.
   - `py.typed` marker, the package type annotations are now visible to type checkers.

   Changed

   - `libheif` was updated from the `1.23.2` to `1.23.3` version.
   - `libde265` was updated from the `1.1.1` to `1.1.2` version.
VersionDeltaFile
1.27+4-4graphics/py-pillow_heif/distinfo
1.8+3-2graphics/py-pillow_heif/PLIST
1.37+2-2graphics/py-pillow_heif/Makefile
+9-83 files

NetBSD/pkgsrc duUGUM5doc CHANGES-2026

   Updated devel/py-pebble, databases/py-peewee
VersionDeltaFile
1.5907+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc TLDGOzBdatabases/py-peewee distinfo Makefile

   py-peewee: updated to 4.5.0

   4.5.0

   Backwards-incompatible:

   * MySQL and MariaDB connections no longer set `sql_mode`. Peewee had been
     setting `PIPES_AS_CONCAT`, but the param replaced the server's mode rather
     than adding to it, which silently disabled `STRICT_TRANS_TABLES` (etc).
     Going forward Peewee will not modify `sql_mode` by default and use
     `CONCAT()` rather than `||` for MySQL/MariaDB.
   * MySQL and MariaDB connection charset defaults to `utf8mb4` instead of `utf8`,
     which is an alias for `utf8mb3` and cannot store 4-byte characters.
   * A field's `sequence=` is now qualified with the model's `Meta.schema`. If the
     name you pass already contains a dot it is treated as fully-qualified and
     used as-is, so `sequence='other.seq'` is unaffected by `Meta.schema`. Also,
     `sequence_exists()` accepts a schema-qualified name.
   * SQLite `BEGIN`, `COMMIT` and `ROLLBACK` are issued directly on a cursor
     rather than through `execute_sql()`, so they are no longer debug-logged, do

    [43 lines not shown]
VersionDeltaFile
1.106+4-4databases/py-peewee/distinfo
1.141+4-4databases/py-peewee/Makefile
+8-82 files

NetBSD/pkgsrc aOeTibldevel/py-pebble Makefile distinfo

   py-pebble: updated to 5.2.2

   5.2.2

   Fixes:
   - Issue 164: fix pool channel cleanup logic. @mgorny
   - Issue 167: fix type checking on Pool's APIs.

   Improvements:
   - Introduce type checking on the whole codebase.
   - Introduce Ruff based code formatting.
VersionDeltaFile
1.21+4-4devel/py-pebble/distinfo
1.24+2-2devel/py-pebble/Makefile
+6-62 files

NetBSD/pkgsrc ISikwAQdoc CHANGES-2026

   Updated textproc/enchant2, devel/py-poetry
VersionDeltaFile
1.5906+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc 7l7gbNkdevel/py-poetry Makefile distinfo

   py-poetry: updated to 2.4.3

   2.4.3
   Fix an issue where Poetry could not extract sdists on Python 3.10.0-3.10.12 and 3.11.0-3.11.4
VersionDeltaFile
1.26+4-4devel/py-poetry/distinfo
1.37+2-2devel/py-poetry/Makefile
+6-62 files

NetBSD/pkgsrc rf2pze0textproc/enchant2 options.mk distinfo

   enchant2: updated to 2.8.21

   2.8.21 (September 3, 2026)

   This release fixes two bugs in composite dictionaries: first, if any
   dictionary creation failed during creation of a composite dictionary,
   dictionaries already created would be leaked; and secondly, the broker error
   status could end up indicating an error incorrectly when one provider or
   language failed and a fallback later succeeded. Thanks to @lpyuu for the
   report and fixes.


   2.8.20 (August 25, 2026)

   This release improves the man page for enchant(1), mostly by documenting
   Ispell command-line options and pipe-mode commands that it ignores.
VersionDeltaFile
1.62+15-18textproc/enchant2/Makefile
1.45+4-4textproc/enchant2/distinfo
1.4+2-2textproc/enchant2/options.mk
+21-243 files

NetBSD/pkgsrc 2s4tWrLdoc CHANGES-2026

   Updated textproc/py-ujson, devel/py-configargparse, devel/py-cattrs
VersionDeltaFile
1.5905+4-1doc/CHANGES-2026
+4-11 files

NetBSD/pkgsrc oU2o8Rhdevel/py-cattrs distinfo Makefile

   py-cattrs: updated to 26.2.0

   26.2.0 (2026-09-08)

   - Fix the `msgpack` and `cbor2` converters unstructuring naive datetimes as local time, which made the serialized value depend on the timezone of the machine doing the unstructuring; naive datetimes are now assumed to be UTC, matching what the structure hooks already read back.
   - Fix `override(rename=...)` targets containing a quote (or other characters not safe in a bare string literal) crashing code generation with `SyntaxError`; the rename key is now embedded with `repr`.
   - Fix `Counter` keys not being unstructured with the key type's own hook; the single-type-arg branch passed the whole type-args tuple to the key hook lookup instead of the key type.
   - Fix `create_default_dis_func <cattrs.disambiguators.create_default_dis_func>` (aka `create_uniq_field_dis_func`) failing to disambiguate valid unions depending on the order of the member classes; unique fields are now resolved iteratively to a fixpoint.
   - Support more recursive types on 3.14+ with specialized factories for [`annotationlib.ForwardRef`](https://docs.python.org/3/library/annotationlib.html#annotationlib.ForwardRef).
   - `Converter <cattrs.Converter>` now uses specialized hook factories to generate hooks for tuples, increasing speed.
   - Fix an `AttributeError` in `cattrs` internals that could be triggered by using the `include_subclasses` strategy in a `structure_hook_factory`
   - Fix TypedDict codegen when keys contain single quotes.
   - Add `CattrsError` exception type: all exceptions raised by `cattrs` inherit from this.
     Literal and date-time validation raise this directly, instead of `Exception`.
   - Fix the `detailed_validation` parameter being passed under the wrong name in {func}`namedtuple_dict_structure_factory <cattrs.cols.namedtuple_dict_structure_factory>`, causing it to be silently ignored.
   - _cattrs_ is now autoformatted using Ruff.
   - Support running the test suite without `cbor2` installed.
   - The [union passthrough strategy](https://catt.rs/en/stable/strategies.html#union-passthrough) now supports PEP 695 type aliases as union members.
   - {meth}`BaseConverter.register_structure_hook_factory` and {meth}`BaseConverter.register_unstructure_hook_factory` now properly return the factory when used as decorators.
   - The {mod}`msgspec <cattrs.preconf.msgspec>` preconf converter now properly handles recursive classes on Python 3.14+.
VersionDeltaFile
1.16+11-12devel/py-cattrs/Makefile
1.14+4-4devel/py-cattrs/distinfo
+15-162 files

NetBSD/pkgsrc VnW3tVEdevel/py-configargparse Makefile distinfo

   py-configargparse: updated to 1.7.7

   1.7.7
   Args with a custom argparse.Action and nargs can now be set from a config file
VersionDeltaFile
1.25+4-4devel/py-configargparse/distinfo
1.28+2-2devel/py-configargparse/Makefile
+6-62 files

NetBSD/pkgsrc G8lanGrtextproc/py-ujson distinfo Makefile

   py-ujson: updated to 6.0.0

   6.0.0

   Changed

   Assorted cleanup refactors

   Removed

   Reduce bytes-like support to only bytes and bytearray

   Fixed

   Allow default handler to handle bytes
   Update build dependencies to avoid warning about missing [tool.setuptools_scm] section
   Tighten UTF-8 validation for ujson.loads()-ing strings from bytes
   Fix memory leak when the default() handler returns non-serialisable objects until its recursion limit is hit
VersionDeltaFile
1.26+4-4textproc/py-ujson/distinfo
1.31+4-4textproc/py-ujson/Makefile
+8-82 files

NetBSD/pkgsrc CYamHPodoc CHANGES-2026

   doc: Updated devel/serie to 0.9.0
VersionDeltaFile
1.5904+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc kzAlKqrdevel/serie cargo-depends.mk Makefile

   devel/serie: update to 0.9.0

   What's Changed

       Remove lib target by @lusingander in #164
       Improve search option toggles by @lusingander in #166
       Make graph test repository dumps opt-in by @lusingander in #167
       Improve search option status display by @lusingander in #169
       Add search target mode by @lusingander in #170
VersionDeltaFile
1.27+4-4devel/serie/distinfo
1.28+2-2devel/serie/Makefile
1.27+0-0devel/serie/cargo-depends.mk
+6-63 files

NetBSD/pkgsrc CRTY9b5doc CHANGES-2026

   doc: Updated devel/sem to 0.24.0
VersionDeltaFile
1.5903+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc XIQvzQfdevel/sem Makefile cargo-depends.mk

   devel/sem: update to 0.24.0

   [0.24.0] - 2026-08-23
   Added

       sem find, sem grep, and sem context now accept multiple queries in a single call. sem find name1 name2 … resolves each name independently — a miss on one doesn't affect the others; sem grep -e pattern1 -e pattern2 … (rg-style repeated -e) keeps each pattern's hits separate; sem context --entity A --entity B … packs context for several entities in one invocation, each under the same --budget, refusing on an ambiguous or unresolved name the same way the single-entity form does. The MCP find, grep, and context tools gained matching array parameters (queries[], patterns[], entities[]). Single-query usage is unchanged.
       New sem_callers MCP tool, exposing the same reverse-caller lookup as the CLI's sem callers. sem callers itself gained --limit (cap the result list) and now refuses — listing every candidate — when a name matches more than one definition, instead of silently answering for just one.
       A middle zoom level between an outline and full source: sem entities --signatures and sem context --headers. Each shows an entity's signature (up to where its body starts) plus the first line of its leading doc comment, instead of either the bare name alone or the full body. Available over MCP as signatures: true on entities and mode: "headers" on context.

   Fixed

       sem-mcp's format parameter now applies everywhere entities can return results. It was previously honored on some response shapes but ignored on others: entities' free-text and query-ranking modes always rendered human-readable text even when format=json was requested, and the cloud-served directory-listing fast path always returned raw JSON even for the default text format.

   [0.23.1] - 2026-08-22
   Fixed

       CSV, JSON, and Vue entities no longer collide on generated ids with entities from other files. Their id-generation scheme is now disambiguated per plugin, closing a gap where two entities could silently collapse onto the same id and one would drop out of the graph.
       Entities from non-code files (Markdown, TOML, YAML, JSON, CSV, Vue/Svelte) now carry accurate byte ranges, so tools that rely on byte offsets (extraction, editing, highlighting) work correctly for these file types instead of getting an inaccurate span.
       Markdown headings that appear inside a fenced code block are no longer parsed as real document headings.

    [8 lines not shown]
VersionDeltaFile
1.8+34-13devel/sem/distinfo
1.2+10-3devel/sem/cargo-depends.mk
1.8+4-4devel/sem/Makefile
+48-203 files