qemu: Backport commit 98107c5d4c1c0a16f1a02a5efbfe01b567215cc6
Backport commit 98107c5d4c1c0a16f1a02a5efbfe01b567215cc6 in order to fix
PR pkg/59820.
This will be included in QEMU 10.1.3.
png: update to 1.6.53.
Version 1.6.53 [December 5, 2025]
Fixed a build failure on RISC-V RVV caused by a misspelled intrinsic.
(Contributed by Alexander Smorkalov.)
Fixed a build failure with CMake 4.1 or newer, on Windows, when using
Visual C++ without MASM installed.
textproc/treemd: update to 0.4.6
[0.4.6] - 2025-12-05
Fixed the non-existing file open modal.
The issue was that both exit_interactive_mode() and exit_link_follow_mode() unconditionally set self.mode = AppMode::Normal, which was overwriting the ConfirmFileCreate mode set by load_file() or load_wikilink() when a file doesn't exist.
[0.4.5] - 2025-12-04
Added
Document overview for headerless files - Files without a top-level heading now show a "(Document)" entry in the outline (#25)
Displays 📄 icon in outline for the document overview
Shows entire file content including tables and text before the first heading
Automatically added when there's preamble content or no headings at all
Wikilink rendering in content - Wikilinks now render as clickable links in the content pane
[[target]] displays as link with target as text
[[target|alias]] displays alias text linking to target
[71 lines not shown]
py-urllib3: update to 2.6.0.
2.6.0 (2025-12-05)
==================
Security
--------
- Fixed a security issue where streaming API could improperly handle highly
compressed HTTP content ("decompression bombs") leading to excessive resource
consumption even when a small amount of data was requested. Reading small
chunks of compressed data is safer and much more efficient now.
(`GHSA-2xpw-w6gg-jr37 <https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37>`__)
- Fixed a security issue where an attacker could compose an HTTP response with
virtually unlimited links in the ``Content-Encoding`` header, potentially
leading to a denial of service (DoS) attack by exhausting system resources
during decoding. The number of allowed chained encodings is now limited to 5.
(`GHSA-gm62-xv2j-4w53 <https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53>`__)
[42 lines not shown]
www/py-quart-trio: import py-quart-trio-0.12.0
Quart-Trio is an extension for Quart to support the Trio event
loop. This is an alternative to using the asyncio event loop present
in the Python standard library and supported by default in Quart.
www/py-quart: import py-quart-0.20.0
Quart is an async Python web application framework. Using Quart
you can,
- render and serve HTML templates,
- write (RESTful) JSON APIs,
- serve WebSockets,
- stream request and response data,
- do pretty much anything over the HTTP or WebSocket protocols.
www/py-hypercorn: import py-hypercorn-0.18.0
Hypercorn is an ASGI and WSGI web server based on the sans-io hyper,
h11, h2, and wsproto libraries and inspired by Gunicorn. Hypercorn
supports HTTP/1, HTTP/2, WebSockets (over HTTP/1 and HTTP/2), ASGI,
and WSGI specifications. Hypercorn can utilise asyncio, uvloop, or
trio worker types.
Hypercorn can optionally serve the current draft of the HTTP/3
specification using the aioquic library.
