summaryrefslogtreecommitdiff
path: root/databases
AgeCommit message (Collapse)AuthorFilesLines
2021-02-24mongo-tools: updated to 4.2.12adam3-14/+14
4.2.12: Unknown changes
2021-02-24mongo-c-driver: updated to 1.17.4adam2-7/+7
mongo-c-driver 1.17.4 libbson It is my pleasure to announce libbson 1.17.4. No changes since 1.17.3; release to keep pace with libmongoc's version. libmongoc It is my pleasure to announce the MongoDB C Driver 1.17.4. Bug fixes: Fix crash on macOS on client pool shutdown. Fix spacing in extended JSON output for numberLong. Clear error in mongoc_collection_find_and_modify_with_opts on a successful retry.
2021-02-22py-pypika: updated to 0.47.7adam2-7/+7
0.47.7 Unknown changes
2021-02-22py-aiosqlite: updated to 0.17.0adam2-7/+7
v0.17.0 Feature release * Connection objects now raise ValueError when closed and a command is executed * Fix documented examples in readme
2021-02-21phpldapadmin: import fixes for PHP > 5.5, 7.2, 7.3khorben9-9/+198
With help from the patches available at https://packages.debian.org/source/sid/phpldapadmin.
2021-02-20leveldb: Enable -fPIC to avoid link errors by consumer, upcoming librime-1.7.2ryoon1-1/+4
2021-02-19Build fe_utils first for all Postgres versions that have it.joerg4-8/+12
2021-02-19Build the frontend libraries first to fix parallel build errors.joerg1-2/+3
2021-02-19mysql57-client: needs gnu99 / gnu++14 to compile correct alloca(3) refstnn1-2/+2
2021-02-19py-asyncpg: mark as incompatible with Python 3.6adam1-2/+2
2021-02-18kyotocabinet: Update to 1.2.79nia5-51/+9
Delete patches for unsupported NetBSD releases. 2020-12-09 FAL Labs <info@fallabs.com> - Fixed errors of kcdirtest on BtrFS. - Release: 1.2.79
2021-02-17sqlrelay: needs c++11 compileradam1-2/+2
2021-02-17py-elixir: removedadam5-85/+1
2021-02-16sqlrelay: updated to 1.8.0adam19-163/+234
SQL Relay 1.8.0 This release mainly lays the groundwork for some future features, including a generic import/export framework. Some notable progress was also made on the JDBC driver, though it's still not finished. The most significant (finshed) new feature is an aes128 password encryption module. There are some bugfixes as well. A long-standing issue with postgresql that could cause results from multiple open cursors to get confused has been resolved. A subtle error that could cause counting of bind variables on the client-side to hang has been fixed. A long-standing, but apparently obscure, issue that could cause tables from other MySQL schemas to be included in a "show tables" command has been fixed. As well as various other issues. Full ChangeLog follows: unattended tests added sqlrresultsetdomnode class to c++ client API fixed datedelimiters parameter added support for SQLParamOptions with SQLUINTEGER arguments sqlr-import detects uppercase .CSV suffix now fixed a csv number-detection but in sqlr-import fixed a delete[] of a const in sqlr-import it's possible to specify a commitcount of 0 with sqlr-import now moved sqlrimportxml/csv classes into libsqlrclient moved sqlrexportxml/csv classes into libsqlrclient csv import/export is consistent now added some event methods to sqlrexport migrated parsedatetime functions to rudiments datetime class different postgresql cursors use different stmtNames now sqlrimportcsv can create a primary key that's not in the CSV now sqlrexportcsv quotes 12+ digit numbers now fixed subtle, count-related issues when validating bind variables on the client side, that could cause a hang added an aes128 pwdenc module applied a patch to fix a crash in the debug logger (missing "%s") added a tweak to getsitearchdir.rb to fix incorrect lib/lib64 reporting on some centos x64 systems fixed mysql getColumnList to distinquish proper db/schema SQL Relay 1.7.0 This release adds 2 significant features: support for the PostgreSQL client-server protocol, and a "replay" module to help automatically recover from deadlocks and lock-timeouts, but also has the usual assortment of minor bugfixes and internal changes. Full ChangeLog follows: added postgresql protocol module updated postgresql connection module to get column info pre-execute fixed postgresql connection module type oid bug added tag filter/moduledata added moduledata(s)::closeResultSet()/endTransaction()/endSession() mysql protocol returns empty lobs correctly now (not as nulls) configure replaces -lfbclient with -lgds on freebsd/firebird-2.0.3 fixed a bug that could cause sqlr-stop to try to kill pid 0 fixed unixodbc detection on solaris 11.4 added configure test for PQdescribePrepared test improvements documentation improvements split sqlrelay-crash directive into its own module deprecated drop-in replacement libraries in favor of protocol support fixed various mysql 4.x bugs sqlr-status creates statistics on heap now instead of stack, to work on platforms with a small default ulimit stack mysql stored procedure test is bypassed for older mysql tls test is bypassed for older openssl added NULL handoff socket workaround improved shutdown/crash handlers for sqlr-listener/connection fixed hang when more-than-one address was specified in the instance:addresses attribute *_null used instead of *_unset on PHP 7.4 SQL Relay 1.6.0 This release mainly addresses some recently discovered regressions, but also adds some internal features that required the minor version to be bumped. ChangeLog follows: added begin, commit, rollback events fixed array_init() calls for php-7.3 integrated my_bool fix for mysql 8.0.1+ mysql sslmode=require/prefer + bad sslca/sslcapath generates warning rather than error now (like the mysql cli) refactored various routines that parse bind variables out of queries added bindvariabledelimiters config option to define supported bind variable delimiters added fakeinputbindvariablesunicodestrings config option added bind variable delimiters config methods to c++ api replay trigger can now run a query (eg. "show engine innodb status") and log the reslits to a file when a replay condition occurs replay trigger doesn't log/replay selects by defalit now (but this is configurable) updated normalize translation to support queries containing binary data fixed a backslash-escape bug in the normalize translation refactored some sqlrclient api private methods refactored various bind-manipliation/detection methods sqlr-listener creates tmpdir now on start, if it doesn't exist (because this is often in /run, which is often a tmpfs) postgresql connection modlie forces re-fetch of column data after execute now everything uses charstring::isYes/isNo now, instead of direct comparisons against "yes" or "no" fixed subtle sqlexecdirect bug fixed subtle sqlserver max-varchar bind length bug fixed various subtle sqlserver bugs where column-info isn't valid until after execute odbc connection modlie sets column precision = column length if column precision = -1 when using odbc on front and back end, the object type works in SQLTables now reslit set translations work with "show databases/tables/etc." queries with an ODBC backend now increased oid buffer sizes in postgresql connection fixed typemangling->tablemangling typo in postgresql connection - tablemangling sholid work without typemangling now fixed a '...\\''...' parsing bug non-odbc connection modlies now return odbc-compatible(ish) table lists client info is no longer reset during endSession fixed a bug that colid cause sqlite "show tables like '...'" to crash fixed odbc unicode nlil user/password bug fixed PyString_AsString for python 3.<3 fixed bug that caused some MSSQL lobs to sometimes be returned as nlils when using ODBC on the backend fixed bug that caused some MSSQL date fields to get returned as garbage fixed a few older sqlrclient compatibility bugs fixed SQLFetch parameter type mismatch in ODBC api removed a non-c++17-compliant "register" from custom_nw logger added support for nodejs 12 SQLDriverConnect can take an inline DSN now fixed odbc maxcolumncount=-1 crash odbc, db2, and informix set bind format error now
2021-02-15postgresql: updated to 13.2, 12.6, 11.11, 10.16, 9.6.21, and 9.5.25adam57-152/+92
The PostgreSQL Global Development Group has released an update to all supported versions of our database system, including 13.2, 12.6, 11.11, 10.16, 9.6.21, and 9.5.25. This release closes two security vulnerabilities and fixes over 80 bugs reported over the last three months. Additionally, this is the final release of PostgreSQL 9.5. If you are running PostgreSQL 9.5 in a production environment, we suggest that you make plans to upgrade. For the full list of changes, please review the release notes. Security Issues CVE-2021-3393: Partition constraint violation errors leak values of denied columns Versions Affected: 11 - 13. A user having an UPDATE privilege on a partitioned table but lacking the SELECT privilege on some column may be able to acquire denied-column values from an error message. This is similar to CVE-2014-8161, but the conditions to exploit are more rare. The PostgreSQL project thanks Heikki Linnakangas for reporting this problem. CVE-2021-20229: Single-column SELECT privilege enables reading all columns Versions Affected: 13. A user having a SELECT privilege on an individual column can craft a special query that returns all columns of the table. Additionally, a stored view that uses column-level privileges will have incomplete column-usage bitmaps. In installations that depend on column-level permissions for security, it is recommended to execute CREATE OR REPLACE on all user-defined views to force them to be re-parsed. The PostgreSQL project thanks Sven Klemm for reporting this problem. Bug Fixes and Improvements This update fixes over 80 bugs that were reported in the last several months. Some of these issues only affect version 13, but could also apply to other supported versions. Some of these fixes include: Fix an issue with GiST indexes where concurrent insertions could lead to a corrupt index with entries placed in the wrong pages. You should REINDEX any affected GiST indexes. Fix CREATE INDEX CONCURRENTLY to ensure rows from concurrent prepared transactions are included in the index. Installations that have enabled prepared transactions should REINDEX any concurrently-built indexes. Fix for possible incorrect query results when a hash aggregation is spilled to disk. Fix edge case in incremental sort that could lead to sorting results incorrectly or a "retrieved too many tuples in a bounded sort" error. Avoid crash when a CALL or DO statement that performs a transaction rollback is executed via extended query protocol, such as from prepared statements. Fix a failure when a PL/pgSQL procedure used CALL on another procedure that has OUT parameters that executed a COMMIT or ROLLBACK. Remove errors from BEFORE UPDATE triggers on partitioned tables for restrictions that no longer apply. Several fixes for queries with joins that could lead to error messages such as "no relation entry for relid N" or "failed to build any N-way joins". Do not consider parallel-restricted or set-returning functions in an ORDER BY expressions when trying to parallelize sorts. Fix ALTER DEFAULT PRIVILEGES to handle duplicate arguments safely. Several fixes in behavior when wal_level is set to minimal, including when tables are rewritten within a transaction. Several fixes for CREATE TABLE LIKE. Ensure that allocated disk space for a dropped relation (e.g. a table) is released promptly when a transaction is committed. Fix progress reporting for CLUSTER. Fix handling of backslash-escaped multibyte characters in COPY FROM. Fix recently-introduced race conditions in LISTEN/NOTIFY queue handling. Allow the jsonb concatenation operator (||) to handle all combinations of JSON data types. Fix WAL-reading logic so that standbys can handle timeline switches correctly. This issue could have shown itself with errors like "requested WAL segment has already been removed". Several leak fixes for the walsender process around logical decoding and replication. Ensure that a nonempty value of krb_server_keyfile always overrides any setting of KRB5_KTNAME in the server environment Several fixes for GSS encryption support. Ensure the \connect command allows the use of a password in the connection_string argument. Fix assorted bugs with the \help command. Several fixes for pg_dump. Ensure that pg_rewind accounts for all WAL when rewinding a standby server. Fix memory leak in contrib/auto_explain. Ensure all postgres_fdw connections are closed if the a user mapping or foreign server object those connections depend on are dropped. Fix JIT compilation to be compatible with LLVM 11 and LLVM 12. This update also contains tzdata release 2021a for DST law changes in Russia (Volgograd zone) and South Sudan, plus historical corrections for Australia, Bahamas, Belize, Bermuda, Ghana, Israel, Kenya, Nigeria, Palestine, Seychelles, and Vanuatu. Notably, the Australia/Currie zone has been corrected to the point where it is identical to Australia/Hobart. For the full list of changes available, please review the release notes. PostgreSQL 9.5 is EOL This is the final release of PostgreSQL 9.5. If you are running PostgreSQL 9.5 in a production environment, we suggest that you make plans to upgrade to a newer, supported version of PostgreSQL. Please see our versioning policy for more information.
2021-02-14databases/ruby-mysql28: fix build with Ruby 3.0taca2-4/+19
2021-02-14databases/Makefile: add and enable ruby-activerecord61taca1-1/+2
2021-02-14databases/ruby-activerecord61: add package version 6.1.2.1taca4-0/+378
Active Record -- Object-relational mapping put on rails Active Record connects classes to relational database tables to establish an almost zero-configuration persistence layer for applications. The library provides a base class that, when subclassed, sets up a mapping between the new class and an existing table in the database. In context of an application, these classes are commonly referred to as *models*. Models can also be connected to other models; this is done by defining *associations*. This is for Ruby on Rails 6.1.
2021-02-13py-ldap3: updated to 2.9adam3-8/+17
2.9: - new feature: SafeRestartable strategy (SAFE_RESTARTABLE) for using a restartable Connection object in a multi-threading program - tested against Python 3.9 - added requirements-dev.txt - fixed logging unicode exceptions in python2.7 - added more granular control over use of reverse dns with Kerberos (thanks Azaria) - support MS Active Directory persistent search (thanks eLeX) - added support for LDAP signing when using DIGEST-MD5 authentication (thanks Augustin-FL) - check only for searchResEntries in LDIF conversion (thanks Jay) - modify-increment now works properly in mock strategies (thanks Saint-Marcel) - objectGUID are now converted properly (thanks Janne) - default timeout in asynchronous strategies raised to 20 seconds
2021-02-13prometheus: updated to 2.24.1adam4-35/+21
2.24.1 [ENHANCEMENT] Cache basic authentication results to significantly improve performance of HTTP endpoints (via an update of prometheus/exporter-toolkit). [BUGFIX] Prevent user enumeration by timing requests sent to authenticated HTTP endpoints (via an update of prometheus/exporter-toolkit). 2.24.0 [FEATURE] Add TLS and basic authentication to HTTP endpoints. [FEATURE] promtool: Add check web-config subcommand to check web config files. [FEATURE] promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. [ENHANCEMENT] HTTP API: Fast-fail queries with only empty matchers. [ENHANCEMENT] HTTP API: Support matchers for labels API. [ENHANCEMENT] promtool: Improve checking of URLs passed on the command line. [ENHANCEMENT] SD: Expose IPv6 as a label in EC2 SD. [ENHANCEMENT] SD: Reuse EC2 client, reducing frequency of requesting credentials. [ENHANCEMENT] TSDB: Add logging when compaction takes more than the block time range. [ENHANCEMENT] TSDB: Avoid unnecessary GC runs after compaction. [BUGFIX] HTTP API: Avoid double-closing of channel when quitting multiple times via HTTP. [BUGFIX] SD: Ignore CNAME records in DNS SD to avoid spurious Invalid SRV record warnings. [BUGFIX] SD: Avoid config error triggered by valid label selectors in Kubernetes SD.
2021-02-13databases/teimscaledb: Set RESTRICTEDgdt1-1/+7
timescale-license is very hard to understand, but there is clearly no grant of permission to distribute derived works. Permission is perhaps granted to distribute unmodified versions, but it's conditioned on compliance with hard to understand terms and limited based on purpose of use.
2021-02-13libzdb: update to 3.2.2tnn3-14/+15
Version 3.2.2 Released on 1 April 2020 Fixed: Removed Thread.h from the public API. Version 3.2.1 Released on 6 March 2020 New: Include Library version number in zdb.h Fixed: Simplified test/zdbpp.cpp and added missing header Fixed: Improved support for MySQL 8 and MariaDB Version 3.2 Released on 3 Apr 2019 New: C++17 support via zdbpp.h which is distributed with libzdb for more idiomatic use of libzdb from C++. New: Support prefetch rows for MySQL and Oracle. Either programatically via Connection_setFetchSize() or via ResultSet_setFetchSize() or via a new global fetch-size URL option. New: MySQL 5.7 and later. Added session query timeout accessible via Connection_setQueryTimeout() New: MySQL 8. Added a new URL option auth-plugin which specify the authentication plugin to use when connecting to a MySQL server. New: Oracle: Added a new URL option sysdba for connecting with sysdba privileges. Fixed: Revert previous fix (#8) and remove last SQL terminator character ';' in statements, except if preceded with END; to allow for ending a pl/sql block. Fixed: Oracle: Set SQL null value in prepared statement Fixed: Oracle: Handle date/time literal values
2021-02-13promscale: update to 0.2.2.0tnn3-1029/+1498
Adds support for Multinode TimescaleDB. Improved promQL query latency by 4x in some cases. Reduced I/O used by the PostgreSQL stats collector substantially by changing autovacuum settings. Fixed metrics produced by Promscale itself PromQL engine supports @ modifier which is disabled by default. (see promql-evaluation-flags) Added configuration for query timeout and default step interval Improved UX Notes for people upgrading from 0.1.4 and before The CLI and ENV option install-timescaledb was renamed to install-extension Two new flags are added upgrade-extensions by default set to true will upgrade extensions if newer versions are available and upgrade-prerelease-extensions by default set to false enabling it will upgrade extensions to pre-prelease versions if pre-release versions are available. We have changed the namespace of the metrics Promscale itself exposes from ts_prom to promscale. We have also updated the PromQL engine based metrics to have namespace as promscale instead of prometheus. So, metrics like prometheus_engine_query_duration_seconds will now be promscale_engine_query_duration_seconds. If running into ERROR: out of shared memory (SQLSTATE 53200) during upgrade, please increase your max_locks_per_transaction setting. Notes for people upgrading timescaleDB 1.x -> 2.x You should run SELECT remove_compression_policy(format('prom_data.%I', table_name), if_exists=>true) FROM _prom_catalog.metric; after the upgrade. This cleans up the old way of running compression jobs, compression will still work (just in the new way). Prom-Migrator Adds support for concurrent pulling and pushing to improve migration throughput. (Please note concurrent push is disabled by default as we've seem some issues migrating data to Thanos concurrently, which we are still working out).
2021-02-13postgresql-timescaledb: add patch for openssl detectiontnn1-0/+15
2021-02-13postgresql-timescaledb: update to 2.0.1tnn3-36/+23
TimescaleDB 2.0 adds the much-anticipated support for distributed hypertables (multi-node TimescaleDB), as well as new features and enhancements to core functionality to give users better clarity and more control and flexibility over their data. This release also adds: - Support for user-defined actions, allowing users to define, customize, and schedule automated tasks, which can be run by the built-in jobs scheduling framework now exposed to users. - Significant changes to continuous aggregates, which now separate the view creation from the policy. Users can now refresh individual regions of the continuous aggregate materialized view, or schedule automated refreshing via policy. - Redesigned informational views, including new (and more general) views for information about hypertable's dimensions and chunks, policies and user-defined actions, as well as support for multi-node TimescaleDB. - Moving all formerly enterprise features into our Community Edition, and updating Timescale License, which now provides additional (more permissive) rights to users and developers. Some of the changes above (e.g., continuous aggregates, updated informational views) do introduce breaking changes to APIs and are not backwards compatible. While the update scripts in TimescaleDB 2.0 will upgrade databases running TimescaleDB 1.x automatically, some of these API and feature changes may require changes to clients and/or upstream scripts that rely on the previous APIs. Before upgrading, we recommend reviewing upgrade documentation at docs.timescale.com for more details.
2021-02-13postgresql-promscale_extension: upstream says not for PostgreSQL 11.xtnn1-2/+2
2021-02-12py-pypika: updated to 0.47.4adam2-8/+11
0.47.4: Unknown changes
2021-02-11www/ruby-rails60: update to 6.0.3.5taca1-5/+5
databases/ruby-activerecord60: ## Rails 6.0.3.5 (February 10, 2021) ## * Fix possible DoS vector in PostgreSQL money type Carefully crafted input can cause a DoS via the regular expressions used for validating the money format in the PostgreSQL adapter. This patch fixes the regexp. Thanks to @dee-see from Hackerone for this patch! [CVE-2021-22880] *Aaron Patterson* www/ruby-actionpack60 ## Rails 6.0.3.5 (February 10, 2021) ## * Prevent open redirect when allowed host starts with a dot [CVE-2021-22881] Thanks to @tktech (https://hackerone.com/tktech) for reporting this issue and the patch! *Aaron Patterson*
2021-02-11www/rails52: update to 5.2.4.5taca1-5/+5
## Rails 5.2.4.5 (February 10, 2021) ## * Fix possible DoS vector in PostgreSQL money type Carefully crafted input can cause a DoS via the regular expressions used for validating the money format in the PostgreSQL adapter. This patch fixes the regexp. Thanks to @dee-see from Hackerone for this patch! [CVE-2021-22880] *Aaron Patterson*
2021-02-11databases/postgresql-postgis2: revbump for geos updategdt1-1/+2
2021-02-11databases: Add mysqld_exporter.jperkin1-1/+2
2021-02-11mysqld_exporter: Import version 0.12.1.jperkin8-0/+129
This is a MySQL metric exporter for Prometheus. I've had this sitting in my tree since pkgsrc-2019Q4, it currently only has SMF support, someone is more than welcome to add an rc.d script for it.
2021-02-11Update to 1.414wen2-8/+7
Upstream changes: 1.414 2020-10-21 * re-release 1.413_001 without further changes 1.413_001 2020-09-28 * Spell check * Be specific in which files to skip from the distribution * Author fixes * Makefile.PL: port WriteMakefile1 from Hash::Merge * .travis.yml: update for Xenial VMs * cleanup MANIFEST.SKIP * bump copyright year * SQL::Parser correctly parse VALUES and SET clauses containing function invocations with several arguments patch provided by Edgar J. Holleis
2021-02-11Update to 2.000001wen2-7/+8
Add missing DEPENDS Upstream changes: 2.000001 - 2021-01-23 - Remove Module::Runtime requirement 2.000000 - 2021-01-21 - Collapse custom join conditions back to something DBIC might understand 1.90_03 - 2019-10-13 - Add proof of concept DBIx::Class::SQLMaker::Role::SQLA2Passthrough - _where_field_IN/BETWEEN are documented as subclassable; feature restored 1.90_02 - 2019-10-12 - fix DBIC ident op expander compat wrapper to handle call as unop 1.90_01 - 2019-10-09 - Complete overhaul of the internals, see the SQL::Abstract::Reference docs to understand the new implementation's affordances.
2021-02-11Update to 0.58wen2-7/+8
Upstream changes: 0.58 - 2021-02-10, H.Merijn Brand * It's 2021 * "class" is not a CSV attribute to pass on (issue#8) 0.57 - 2020-12-17, H.Merijn Brand * META fixes 0.56 - 2020-12-05, H.Merijn Brand * Fix Changes (add missing 0.54) * Bugtrackter => github issues * f_dir should exist (CVE fix in DBI-1.644 / DBD::File-0.45) * TODO tests better skipped if failing
2021-02-10py-asyncpg: updated to 0.22.0adam3-12/+18
v0.22.0 A new asyncpg release is here. Notable additions include Python 3.9 support, support for recently added PostgreSQL types like jsonpath, and last but not least, vastly improved executemany() performance. Importantly, executemany() is also now atomic, which means that either all iterations succeed, or none at all, whereas previously partial results would have remained in place, unless executemany() was called in a transaction. There is also the usual assortment of improvements and bugfixes, see the details below. This is the last release of asyncpg that supports Python 3.5, which has reached EOL last September. Improvements Vastly speedup executemany by batching protocol messages Allow using custom Record class Add Python 3.9 support Prefer SSL connections by default Add codecs for a bunch of new builtin types Expose Pool as asyncpg.Pool Avoid unnecessary overhead during connection reset
2021-02-08py-peewee: updated to 3.14.1adam2-7/+7
3.14.1 This release contains primarily bugfixes. Properly delegate to a foreign-key field's db_value() function when converting model instances. Strip quote marks and parentheses from column names returned by sqlite cursor when a function-call is projected without an alias. Fix DataSet.create_index() method. Fix column-to-model mapping in model-select from subquery with joins. Improvements to foreign-key lazy-loading. Preserve and handle CHECK() constraints in Sqlite migrator. Add stddev aggregate function to collection of sqlite user-defined funcs.
2021-02-07*: Recursive revbump from audio/pulseaudio-14.2.nb1ryoon2-4/+4
2021-02-05mysql56: updated to 5.6.51adam6-27/+30
Changes in MySQL 5.6.51 Security Notes The linked OpenSSL library for MySQL Server has been updated to version 1.1.1i. Issues fixed in the new OpenSSL version are described at https://www.openssl.org/news/cl111.txt and https://www.openssl.org/news/vulnerabilities.html. Bugs Fixed InnoDB: The full-text search synchronization thread attempted to read a previously-freed word from the index cache. The server did not handle all cases of the WHERE_CONDITION optimization correctly. Privileges for some INFORMATION_SCHEMA tables were checked incorrectly. In certain cases, the server did not handle multiply-nested subqueries correctly. A buffer overflow in the client library was fixed.
2021-02-05py-tortoise-orm: updated to 0.16.21adam2-7/+7
0.16.21 - Fixed validating JSON before decoding. - Add model method `update_or_create`. - Add `batch_size` parameter for `bulk_create` method. - Fix save with F expression and field with source_field.
2021-02-04mysql57: updated to 5.7.33adam7-15/+57
Changes in MySQL 5.7.33 Optimizer Notes MySQL attempts to use an ordered index for any ORDER BY or GROUP BY query that has a LIMIT clause, overriding any other choices made by the optimizer, whenever it determines that this would result in faster execution. Because the algorithm for making this determination makes certain assumptions about data distribution and other conditions, it may not always be completely correct, and it is possible in some cases that choosing a different optimization for such queries can provide better performance. To handle such occurrences, it is now possible to disable this optimization by setting the optimizer_switch system variable's prefer_ordering_index flag to off. For more information about this flag and examples of its use, see Switchable Optimizations, and LIMIT Query Optimization. Our thanks to Jeremy Cole for the contribution. Security Notes The linked OpenSSL library for MySQL Server has been updated to version 1.1.1i. Issues fixed in the new OpenSSL version are described at https://www.openssl.org/news/cl111.txt and https://www.openssl.org/news/vulnerabilities.html. Functionality Added or Changed When invoked with the --all-databases option, mysqldump now dumps the mysql database first, so that when the dump file is reloaded, any accounts named in the DEFINER clause of other objects will already have been created. Bugs Fixed InnoDB: The full-text search synchronization thread attempted to read a previously-freed word from the index cache. InnoDB: Calls to numa_all_nodes_ptr were replaced by the numa_get_mems_allowed() function. Thanks to Daniel Black for the contribution. Replication: When the system variable transaction_write_set_extraction=XXHASH64 is set, which is the default in MySQL 8.0 and a requirement for Group Replication, the collection of writes for a transaction previously had no upper size limit. Now, for standard source to replica replication, the numeric limit on write sets specified by binlog_transaction_dependency_history_size is applied, after which the write set information is discarded but the transaction continues to execute. Because the write set information is then unavailable for the dependency calculation, the transaction is marked as non-concurrent, and is processed sequentially on the replica. For Group Replication, the process of extracting the writes from a transaction is required for conflict detection and certification on all group members, so the write set information cannot be discarded if the transaction is to complete. The byte limit set by group_replication_transaction_size_limit is applied instead of the numeric limit, and if the limit is exceeded, the transaction fails to execute. Replication: As the number of replicas replicating from a semisynchronous source server increased, locking contention could result in a performance degradation. The locking mechanisms used by the plugins have been changed to use shared locks where possible, avoid unnecessary lock acquisitions, and limit callbacks. The new behaviors can be implemented by enabling the following system variables: replication_sender_observe_commit_only=1 limits callbacks. replication_optimize_for_static_plugin_config=1 adds shared locks and avoids unnecessary lock acquisitions. This system variable must be disabled if you want to uninstall the plugin. Both system variables can be enabled before or after installing the semisynchronous replication plugin, and can be enabled while replication is running. Semisynchronous replication source servers can also get performance benefits from enabling these system variables, because they use the same locking mechanisms as the replicas. Replication: On a multi-threaded replica where the commit order is preserved, worker threads must wait for all transactions that occur earlier in the relay log to commit before committing their own transactions. If a deadlock occurs because a thread waiting to commit a transaction later in the commit order has locked rows needed by a transaction earlier in the commit order, a deadlock detection algorithm signals the waiting thread to roll back its transaction. Previously, if transaction retries were not available, the worker thread that rolled back its transaction would exit immediately without signalling other worker threads in the commit order, which could stall replication. A worker thread in this situation now waits for its turn to call the rollback function, which means it signals the other threads correctly. Replication: GTIDs are only available on a server instance up to the number of non-negative values for a signed 64-bit integer (2 to the power of 63 minus 1). If you set the value of gtid_purged to a number that approaches this limit, subsequent commits can cause the server to run out of GTIDs and take the action specified by binlog_error_action. From MySQL 8.0.23, a warning message is issued when the server instance is approaching the limit. Microsoft Windows: On Windows, running the MySQL server as a service caused shared-memory connections to fail. The server did not handle all cases of the WHERE_CONDITION optimization correctly. For the engines which support primary key extension, when the total key length exceeded MAX_KEY_LENGTH or the number of key parts exceeded MAX_REF_PARTS, key parts of primary keys which did not fit within these limits were not added to the secondary key, but key parts of primary keys were unconditionally marked as part of secondary keys. This led to a situation in which the secondary key was treated as a covering index, which meant sometimes the wrong access method was chosen. This is fixed by modifying the way in which key parts of primary keys are added to secondary keys so that those which do not fit within which do not fit within the limits mentioned previously mentioned are cleared. Privileges for some INFORMATION_SCHEMA tables were checked incorrectly. In certain cases, the server did not handle multiply-nested subqueries correctly. Certain accounts could cause server startup failure if the skip_name_resolve system variable was enabled. Client programs could unexpectedly exit if communication packets contained bad data. A buffer overflow in the client library was fixed. mysql_config_editor incorrectly treated # in password values as a comment character.
2021-02-03py-mongo: updated to 3.11.3adam2-7/+7
Changes in Version 3.11.3 ------------------------- Issues Resolved Version 3.11.3 fixes a bug that prevented PyMongo from retrying writes after a ``writeConcernError`` on MongoDB 4.4+
2021-02-02databases/ruby-sequel: update to 5.41.0taca3-8/+9
5.41.0 (2021-02-01) * Have explicit :text option for a String column take priority over :size option on PostgreSQL (jeremyevans) (#1750) * Support a :skip_invalid option in auto_validations plugin for not adding errors to a column that already has an error (jeremyevans) * Support a :skip_invalid option in validation_helpers for not adding an error to a column that already has an error (jeremyevans) * Support :adder, :remover, and :clearer association options that use keyword arguments in Ruby 2.7+ (jeremyevans) * Make pg_interval use the same number of seconds per year and per month as ActiveSupport::Duration when using ActiveSupport 5.1+ (jeremyevans)
2021-02-01mongodb: updated to 4.2.12adam2-8/+7
4.2.12 Issues fixed in 4.2.12: SERVER-40361: Reduce memory footprint of plan cache entries SERVER-47863: Initial Sync Progress Metrics SERVER-48471: Hashed indexes may be incorrectly marked multikey and be ineligible as a shard key SERVER-50769: server restarted after expr{“expr”:”_currentApplyOps.getArrayLength() > 0”,”file”:”src/mongo/db/pipeline/document_source_change_stream_transform.cpp”,”line”:535}} SERVER-52654: new signing keys not generated by the monitoring-keys-for-HMAC thread SERVER-52879: Periodic operation latency spikes every 5 minutes due to closing idle cached WT sessions
2021-01-30databases/postgresql-postgis2: Update to 3.1.1gdt3-14/+13
Upstream changes: bugfixes
2021-01-28prometheus: Fix SunOS build.jperkin2-1/+14
2021-01-27couchdb: Build against lang/erlang21.jperkin3-13/+15
This version of couchdb, as well as the current version of couchdb 3.x, is incompatible with OTP 23. While here fix hardcoded paths in patch-aa, making it clear that this package can't be all that popular ;-) Bump PKGREVISION for good measure even though this package previously could not build, in case someone still has a version from before lang/erlang was bumped lying around.
2021-01-26py-alembic: updated to 1.5.2adam3-21/+15
1.5.2 [bug] [regression] [versioning] Fixed regression where new “loop detection” feature introduced in 757 produced false positives for revision names that have overlapping substrings between revision number and down revision and/or dependency, if the downrev/dependency were not in sequence form. [bug] [environment] Fixed regression where Alembic would fail to create a transaction properly if the sqlalchemy.engine.Connection were a so-called “branched” connection, that is, one where the .connect() method had been called to create a “sub” connection. 1.5.1 [bug] [commands] [installation] Fixed installation issue where the “templates” directory was not being installed, preventing commands like “list_templates” and “init” from working. 1.5.0 [changed] [environment] To accommodate SQLAlchemy 1.4 and 2.0, the migration model now no longer assumes that the SQLAlchemy Connection will autocommit an individual operation. This essentially means that for databases that use non-transactional DDL (pysqlite current driver behavior, MySQL), there is still a BEGIN/COMMIT block that will surround each individual migration. Databases that support transactional DDL should continue to have the same flow, either per migration or per-entire run, depending on the value of the Environment.configure.transaction_per_migration flag. [changed] [environment] A CommandError is raised if a sqlalchemy.engine.Engine is passed to the MigrationContext.configure() method instead of a sqlalchemy.engine.Connection object. Previously, this would be a warning only. [changed] Alembic 1.5.0 now supports Python 2.7 and Python 3.6 and above, as well as SQLAlchemy 1.3.0 and above. Support is removed for Python 3 versions prior to 3.6 and SQLAlchemy versions prior to the 1.3 series.
2021-01-25openldap: updated to 2.4.57adam5-19/+19
OpenLDAP 2.4.57 Release (2021/01/18) Fixed ldapexop to use correct return code Fixed slapd to remove asserts in UUIDNormalize Fixed slapd to remove assert in csnValidate Fixed slapd validity checks for issuerAndThisUpdateCheck Fixed slapd validity checks for serialNumberAndIssuerCheck Fixed slapd AVA sort with invalid RDN Fixed slapd ldap_X509dn2bv to check for invalid BER after RDN count Fixed slapd saslauthz to remove asserts in validation Fixed slapd saslauthz to use slap_sl_free on normalized DN Fixed slapd saslauthz SEGV in slap_parse_user Fixed slapd modrdn memory leak Fixed slapd double-free in vrfilter Fixed slapd cancel operation to correctly terminate Fixed slapd-ldap fix binds on retry with closed connection Fixed slapo-syncprov to ignore duplicate sessionlog entries
2021-01-24py-tortoise-orm: updated to 0.16.20adam3-8/+11
0.16.20 - Add model field validators. - Allow function results in group by.