go-jsonnet: Import go-jsonnet-0.22.0 as wip/go-jsonnet
This an implementation of Jsonnet in pure Go. It is a feature complete,
production-ready implementation. Bindings to C and Python are available
(but not battle-tested).
This code is known to work on Go 1.24 and above. We recommend always
using the newest stable release of Go.
Jsonnet can be used on the command line to evaluate Jsonnet input files
and produce JSON, Yaml, or other outputs, or it can be used as a
library.
Security note: If you are running a system that evaluates untrusted
Jsonnet code, extra care should be used to defend against data
exfiltration risks. By default, the import, importstr and importbin
language constructs can read from any path accessible to the Jsonnet
process. The Jsonnet library allows you to provide your own logic for
processing imports, which is one way to restrict imports to known safe
[3 lines not shown]
mailsend-go: update to 1.0.12
* Add STARTTLS downgrade protection. A MITM attacker can strip STARTTLS
from the server's EHLO response, causing the client to send credentials in
plaintext. The bug is not in mailsend-go itself, rather it is in the
gomail.v2. The fix is in my fork of gomail via the new RequireSTARTTLS
field on the Dialer. mailsend-go sets it when credentials are provided and
SSL is not in use, so the connection returns an error instead of falling
back to plaintext.
* Remove unconditional debug print that leaked SMTP password to stdout.
* A warning is now printed to stderr when TLS certificate verification is
disabled. Use -verifyCert if desired.
iosevka-*: update to 34.6.1
Changes of version 34.6.1
* Fixes broken U+2BD1 and U+1F18A.
* Add Characters:
* LATIN SMALL LETTER R WITHOUT HANDLE (U+AB47).
Changes of version 34.6.0
* Add flat-top variants for a/g/m/n/p/q/r/α/η/а/р.
* Add flat-bottom variants for G/U/b/d/u/μ/µ.
* Refine shape of the following characters:
* LATIN CAPITAL LIGATURE OE (U+0152).
* LATIN LETTER SMALL CAPITAL OE (U+0276).
* MODIFIER LETTER SMALL CAPITAL OE (U+107A3).
Changes of version 34.5.0
[38 lines not shown]
tnfrepo-dev: Update to tnfrepo-0.0a20250823.dev151
- Eliminate spurious warnings when there are no draft topics to push
and no draft topics to prune in the anongit bridge.
- Link to some hg issues.
- Fix bug in suppression of hg<7.2 and hg>=7.2 differences in test.
tnfrepo-dev: Update to tnfrepo-0.0a20250823.dev142
- Fix issues with hg>=7.2.
- Specify default branch name in git tests to avoid reliance on my
~/.gitconfig (should maybe run all the tests with GIT_CONFIG set to
avoid thsi!).
tnfrepo-dev: Update to tnfrepo-0.0a20250823.dev140
- Add support for anonymous host.
- Make git-cvsmirror slightly less noisy.
- Make synchronous git-cvsmirror optional.
- New git netbsd.draft-view hack in lieu of GIT_NAMESPACE for cgit.
- Set various config options:
. disable streaming clones without bundles to reduce server locks
. set web.deny_pushes to more nicely decline pushes via http
- Fix and test external http(s) URLs in build-clonebundles.
- Disable stream bundles for now because nonreproducible hashes.