summaryrefslogtreecommitdiff
path: root/lang
AgeCommit message (Collapse)AuthorFilesLines
2019-04-04Insert a more explicit comment about who prepared the varioushe1-6/+6
NetBSD bootstrap kits.
2019-04-04py-mypy: updated to 0.700adam3-10/+44
0.700: Much Improved performance Stricter Equality Checks Python 3.4 Unsupported for Running Mypy Plugin System Improvements
2019-04-03lang/rust: Extend BROKEN to all NetBSD before 8gdt1-4/+5
As discussed on pkgsrc-users, rust does not work on any NetBSD before 8, for any architecture. Omit NetBSD 1 from the broken list, so that this doesn't match NetBSD 10.
2019-04-03lang/rust: Mark BROKEN_ON_PLATFORM for NetBSD-7*-i386gdt1-1/+5
As discussed on pkgsrc-users, mark rust as BROKEN_ON for NetBSD 7 i386. The bootstrap is built for 8, apparently because it doens't build on 7. This is BROKEN_ON not NOT_FOR because it does make sense to want rust on 7 -- it just won't build. (Probably this should be expanded to all arches and all versions < 8.)
2019-04-03python*: rework logic used to determine if PLIST.nis is used.maya5-76/+58
Match the logic used by setup.py: it looks for two headers in the default include path. This helps newer glibc linux. Omit PLIST.dll on python3* because it doesn't appear in the PLIST. Make PLIST.dll true on all non-IRIX. tested: NetBSD-current, FreeBSD 11.2, Ubuntu 18.10, CentOS 6.9, Source Mage From Dr. Thomas Orgis, myself, and with pointers to a change from leot. PR pkg/53673
2019-04-03Recursive revbump from textproc/icuryoon21-40/+42
2019-03-31php56: bump PKGREVISION for openssl 1.1 patchwiz1-1/+2
2019-03-31php56: add the zettasystems patch to support openssl 1.1wiz2-2/+9
2019-03-28vala: remove obsolete patchwiz1-14/+0
2019-03-27rust-1.32.0-x86_64-unknown-linux-gnu.tar.gz had the wrong checksum.he1-5/+5
Download must have failed and I didn't pay attention -- sorry...
2019-03-27clang-tools-extra: added version 7.0.1adam9-9/+119
Extra tools built using Clang's tooling APIs.
2019-03-27Remove a non-existent libraryryoon1-2/+1
2019-03-26py37-html-docs: Update to 3.7.3leot3-9/+10
Changes: 3.7.3 ===== Documentation ------------- - bpo-36083: Fix formatting of --check-hash-based-pycs options in the manpage Synopsis. - bpo-34764: Improve example of iter() with 2nd sentinel argument. - bpo-21314: A new entry was added to the Core Language Section of the Programming FAQ, which explaines the usage of slash(/) in the signature of a function. Patch by Lysandros Nikolaou - bpo-22062: Update documentation and docstrings for pathlib. Original patch by Mike Short.
2019-03-26py-uncompyle6: updated to 3.2.6adam2-8/+8
3.2.6: Bug Fixes * Python 3.x bytecode confusing "try/else" with "try" in a loop, * Python 3 bug in not detecting end bounds of an "if" ... "elif", * Comma placement in 3.6 and 3.7 **kwargs, * Fix "if" return boundary in 3.6+, * 2.7 can have two JUMP_BACKs at the end of a while loop Pull Requests * Better "assert" statement detemination in Python 2.7 * Python 3.7 testing * Run more f-string tests on Python 3.7 * support utf-8 chars in Python 3 sourcecode
2019-03-26python37: updated to 3.7.3adam4-61/+62
Python 3.7.3: Security bpo-36216: Changes urlsplit() to raise ValueError when the URL contains characters that decompose under IDNA encoding (NFKC-normalization) into characters that affect how the URL is parsed. bpo-35746: [CVE-2019-5010] Fix a NULL pointer deref in ssl module. The cert parser did not handle CRL distribution points with empty DP or URI correctly. A malicious or buggy certificate can result into segfault. Vulnerability (TALOS-2018-0758) reported by Colin Read and Nicolas Edet of Cisco. bpo-35121: Don’t send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with http.cookiejar.DefaultCookiePolicy policy. Patch by Karthikeyan Singaravelan. Core and Builtins bpo-35942: The error message emitted when returning invalid types from __fspath__ in interfaces that allow passing PathLike objects has been improved and now it does explain the origin of the error. bpo-35992: Fix __class_getitem__() not being called on a class with a custom non-subscriptable metaclass. bpo-35991: Fix a potential double free in Modules/_randommodule.c. bpo-35961: Fix a crash in slice_richcompare(): use strong references rather than stolen references for the two temporary internal tuples. bpo-31506: Clarify the errors reported when object.__new__ and object.__init__ receive more than one argument. Contributed by Sanyam Khurana. bpo-35720: Fixed a minor memory leak in pymain_parse_cmdline_impl function in Modules/main.c bpo-35623: Fix a crash when sorting very long lists. Patch by Stephan Hohe. bpo-35214: clang Memory Sanitizer build instrumentation was added to work around false positives from posix, socket, time, test_io, and test_faulthandler. bpo-35560: Fix an assertion error in format() in debug build for floating point formatting with “n” format, zero padding and small width. Release build is not impacted. Patch by Karthikeyan Singaravelan. bpo-35552: Format characters %s and %V in PyUnicode_FromFormat() and %s in PyBytes_FromFormat() no longer read memory past the limit if precision is specified. bpo-35504: Fix segfaults and SystemErrors when deleting certain attributes. Patch by Zackery Spytz. bpo-33989: Fix a possible crash in list.sort() when sorting objects with ob_type->tp_richcompare == NULL. Patch by Zackery Spytz. Library bpo-35931: The pdb debug command now gracefully handles all exceptions. bpo-36251: Fix format strings used for stderrprinter and re.Match reprs. Patch by Stephan Hohe. bpo-35807: Update ensurepip to install pip 19.0.3 and setuptools 40.8.0. bpo-36179: Fix two unlikely reference leaks in _hashopenssl. The leaks only occur in out-of-memory cases. bpo-35178: Ensure custom warnings.formatwarning() function can receive line as positional argument. Based on patch by Tashrif Billah. bpo-36106: Resolve potential name clash with libm’s sinpi(). Patch by Dmitrii Pasechnik. bpo-35512: unittest.mock.patch.dict() used as a decorator with string target resolves the target during function call instead of during decorator construction. Patch by Karthikeyan Singaravelan. bpo-36091: Clean up reference to async generator in Lib/types. Patch by Henry Chen. bpo-35899: Enum has been fixed to correctly handle empty strings and strings with non-Latin characters (ie. ‘α’, ‘א’) without crashing. Original patch contributed by Maxwell. Assisted by Stéphane Wirtel. bpo-35918: Removed broken has_key method from multiprocessing.managers.SyncManager.dict. Contributed by Rémi Lapeyre. bpo-35960: Fix dataclasses.field() throwing away empty mapping objects passed as metadata. bpo-35847: RISC-V needed the CTYPES_PASS_BY_REF_HACK. Fixes ctypes Structure test_pass_by_value. bpo-35780: Fix lru_cache() errors arising in recursive, reentrant, or multi-threaded code. These errors could result in orphan links and in the cache being trapped in a state with fewer than the specified maximum number of links. Fix handling of negative maxsize which should have been treated as zero. Fix errors in toggling the “full” status flag. Fix misordering of links when errors are encountered. Sync-up the C code and pure Python code for the space saving path in functions with a single positional argument. In this common case, the space overhead of an lru cache entry is reduced by almost half. Fix counting of cache misses. In error cases, the miss count was out of sync with the actual number of times the underlying user function was called. bpo-23846: asyncio.ProactorEventLoop now catches and logs send errors when the self-pipe is full. bpo-34323: asyncio: Enhance IocpProactor.close() log: wait 1 second before the first log, then log every second. Log also the number of seconds since close() was called. bpo-34294: re module, fix wrong capturing groups in rare cases. re.search(), re.findall(), re.sub() and other functions that scan through string looking for a match, should reset capturing groups between two match attempts. Patch by Ma Lin. bpo-35717: Fix KeyError exception raised when using enums and compile. Patch contributed by Rémi Lapeyre. bpo-35699: Fixed detection of Visual Studio Build Tools 2017 in distutils bpo-32710: Fix memory leaks in asyncio ProactorEventLoop on overlapped operation failure. bpo-32710: Fix a memory leak in asyncio in the ProactorEventLoop when ReadFile() or WSASend() overlapped operation fail immediately: release the internal buffer. bpo-35682: Fix asyncio.ProactorEventLoop.sendfile(): don’t attempt to set the result of an internal future if it’s already done. bpo-35283: Add a pending deprecated warning for the threading.Thread.isAlive() method. Patch by Dong-hee Na. bpo-35643: Fixed a SyntaxWarning: invalid escape sequence in Modules/_sha3/cleanup.py. Patch by Mickaël Schoentgen. bpo-35615: weakref: Fix a RuntimeError when copying a WeakKeyDictionary or a WeakValueDictionary, due to some keys or values disappearing while iterating. bpo-28503: The crypt module now internally uses the crypt_r() library function instead of crypt() when available. bpo-35121: Don’t set cookie for a request when the request path is a prefix match of the cookie’s path attribute but doesn’t end with “/”. Patch by Karthikeyan Singaravelan. bpo-35585: Speed-up building enums by value, e.g. http.HTTPStatus(200). bpo-21478: Calls to a child function created with unittest.mock.create_autospec() should propagate to the parent. Patch by Karthikeyan Singaravelan. bpo-35513: TextTestRunner of unittest.runner now uses time.perf_counter() rather than time.time() to measure the execution time of a test: time.time() can go backwards, whereas time.perf_counter() is monotonic. bpo-35502: Fixed reference leaks in xml.etree.ElementTree.TreeBuilder in case of unfinished building of the tree (in particular when an error was raised during parsing XML). bpo-31446: Copy command line that was passed to CreateProcessW since this function can change the content of the input buffer. bpo-20239: Allow repeated assignment deletion of unittest.mock.Mock attributes. Patch by Pablo Galindo. bpo-17185: Set __signature__ on mock for inspect to get signature. Patch by Karthikeyan Singaravelan. bpo-10496: check_environ() of distutils.utils now catches KeyError on calling pwd.getpwuid(): don’t create the HOME environment variable in this case. bpo-35066: Previously, calling the strftime() method on a datetime object with a trailing ‘%’ in the format string would result in an exception. However, this only occured when the datetime C module was being used; the python implementation did not match this behavior. Datetime is now PEP-399 compliant, and will not throw an exception on a trailing ‘%’. bpo-24746: Avoid stripping trailing whitespace in doctest fancy diff. Orignial patch by R. David Murray & Jairo Trad. Enhanced by Sanyam Khurana. bpo-35198: Fix C++ extension compilation on AIX bpo-28441: On Cygwin and MinGW, ensure that sys.executable always includes the full filename in the path, including the .exe suffix (unless it is a symbolic link). bpo-34572: Fix C implementation of pickle.loads to use importlib’s locking mechanisms, and thereby avoid using partially-loaded modules. Patch by Tim Burgess. bpo-33687: Fix the call to os.chmod() for uu.decode() if a mode is given or decoded. Patch by Timo Furrer. bpo-32146: Document the interaction between frozen executables and the spawn and forkserver start methods in multiprocessing.
2019-03-26Enable openjdk-binryoon1-1/+2
2019-03-26lang/openjdk-bin: import openjdk-bin-12ryoon4-0/+492
This package provides Java Development Kit builds from Oracle. This is official OpenJDK build released under GNU GPLv2 with the classpath exception.
2019-03-26lang/python27: Add comments about NIS detectiongdt1-1/+8
The logic to determine inclusion of NIS PLIST entries is confusing. Add comments to explain some and question some. This is a comment-only change.
2019-03-25vala: update to 0.44.1nb1.wiz2-3/+26
Add libxslt build dependency and regen PLIST. Avoids failures when libxslt is already installed (PR 54075).
2019-03-25swi-prolog-packages: PLIST.Linux catchup for version 8.xmarkd1-13/+0
2019-03-25swi-prolog-lite: PLIST.Linux catchup for version 8.xmarkd1-0/+3
2019-03-25*: recursive bump for vala-0.44wiz1-2/+2
2019-03-25vala: update to 0.44.1.wiz4-296/+305
Vala 0.44.1 =========== * Various improvements and bug fixes: - ccodegen: + Use unsigned default value for flags-enum + Use guint to represent flags-enum in custom GMarshalFunc - Move disconnect error from signal-module to semantic-analyzer pass - Mark defined constructors of abstract classes as protected - parser: Implicit creation method of abstract classes must be protected - vala: Allow assignment of 0U to enum types - libvaladoc: Don't try to create a Content.ListItem when there is none * Bindings: - gio-2.0: SocketAddress.from_native() is a factory method not a constructor - glib-2.0: Add string.validate_len() since 2.60 - gstreamer: Update from 1.15.2+ git master - gtk4: Update to 3.94.0+f14d998c - libgvc: Some additions and ownership/return-type fixes - vte-2.90: Mark as deprecated, it was replaced by vte-2.91 - vapi: Update GIR-based bindings Vala 0.44.0 =========== * Various improvements and bug fixes: - parser: Adjust various source references - vala: More regular invocations of check() on inferred Expression.value_type * Bindings: - gstreamer: Update from 1.15.2+ git master - gtk4: Update to 3.94.0+eacbeb9e - vapi: Update GIR-based bindings Vala 0.43.92 ============ * Various improvements and bug fixes: - codegen: + Allow to associate CCodeFile to actual SourceFile + Only emit declaration of *_register_type if needed + Add get_variable_array_length_cname() and use as possible + Respect array_length_cname attribute for global fields + Replace gvaluecollector_h_needed with dedidated add_include() calls + Respect finish[_vfunc]_name attributes defined in vala sources + Include "glib-object.h" for typeof expression - vala: + Correctly perform compatibility check of array length-type [#607] + Don't ignore qualified parent when inferring type of enum member [#666035] - girwriter: + Support transfer-ownership="container" for arrays + Always use get_gir_name() for TypeSymbols - testrunner: Add support for Genie source files (.gs) - tests: Add some Genie tests to increase coverage - genie: Allow main function "init" to return integer as exit status [#402] * Bindings: - gobject-2.0: Add SignalHandler.disconnect_by_data() - poppler-glib: Update to 0.74 - gtk4: Update to 3.94.0+b4ae491b - vapi: Update GIR-based bindings Vala 0.43.91 ============ * Various improvements and bug fixes: - Revert "valadoc: Drop duplicated code to add source files and use CodeContext API" and "valadoc: Update API tests" (#748) - valadoc: Report warning if resources for doclet could not be copied - libvaladoc: Properly support the output of async constructors (#753) - girparser: Correctly set array_length_type for delegates returning an array - Revert "vala: Don't replace assignments for local variables with non-null simple-types" (#755) * Bindings: - Follow GTK upstream rename to gtk4 and gtk4-unix-print - gtk4,gtk4-unix-printer: Update to 3.94.0+02e856f6 - gtk+-unix-print-*.0: Fix PrintJob.get_page_ranges(), Printer.get_hard_margins() - atk-1.0: Adjust for upstream revert of Implementor using G_DEFINE_INTERFACE - clutter-1.0: Drop deprecated from Actor.pick() (#625) - glib-2.0: Add "delegate_target = false" to Log.writer_journald/ _standard_streams/_default - gio-unix-2.0: Add DesktopAppInfo.get_string_list() since 2.60 - gstreamer: Update from 1.15.1+ git master - webkit2gtk-4.0: Update to 2.23.91 - vapi: Update GIR-based bindings Vala 0.43.90 ============ * Various improvements and bug fixes: - codegen: Replace some unfortunate asserts with internal error reports - codegen: Properly handle and catch inner-error of finally-block (#742) - codegen: Pass lambda expression of variable initializer to signal connect - vala: Check inferred variable_type of LocalVariables - vala: Parser doesn't ensure "protected" to be applied on TypeSymbol members - libvaladoc: Don't change the size of an array in-parameter - g-i: Fix return value on error in start_discriminator() * Bindings: - Add goocanvas-2.0 bindings (#739) - gdk-3.0: Update to 3.24.4+a0129f55 - glib-2.0: Bind g_log_writer_journald/_standard_streams/_default as LogWriterFunc (#559) - goocanvas: Update from 1.0.0+af07af5d - gstreamer: Update from 1.15.1+ - gtk+-4.0: Update to 3.94.0+a7fa1cf6 - vapi: Update GIR-based bindings Vala 0.43.6 =========== * Various improvements and bug fixes: - codegen: Don't apply address-of operator on literals when casting to array - vala: Don't tweak closure on static lambdas [#740] - Revert "codegen: Use copies of error_variable of catch-clauses for nested usage" and add asynchronous "catch-error-scope" regression test [#741] - libvaladoc: Build backing Vala.SourceFile for GIRs processed by importer - libvaladoc/girimporter: Skip "source-position" elements - genie: Support "protected" accessibility and allow explicit "public" [#346] * Bindings: - gst-editing-services-1.0: Fix some construtors and (un)hide symbols - javascriptcoregtk-4.0: Fix GLib.Callback parameters which can't hold target Vala 0.43.5 =========== * Various improvements and bug fixes: - vala: + Use dedicated error message for assignments to literals + Async methods don't allow out-parameters before in-parameters [#636] + Allow direct access to the integer constants of an error-domain [#732] + Multiple lamdba arguments in method call should all use same scope [#59] - codegen: + Use a parameter-map for creation of delegate declaration [#728] + Add "error_pos" CCode attribute and use it as needed [#728] + Emit struct declaration typedef before resolving its fields [#318] + Add "destroy_notify_cname" CCode attribute + Use get_ccode_*name/get_parameter_cexpression() for Parameters + Set owner for ValaDestroyNotify (POSIX) [#730] + Include "stddef.h" in CCodeBaseModule.destroy_value() (POSIX) [#730] - girparser: Recognize error parameter before delegate target parameter [#265] - compiler: Report deprecated command-line option "--thread" - valadoc: Specify that the "--driver" option is deprecated [#736] * Bindings: - atk: Don't use a custom SignalEmissionHook while it is part of gobject-2.0 - gdk-pixbuf-2.0: Make PixbufSaveFunc usable [#728] - gio-2.0: Make DBusInterface[GS]etPropertyFunc usable [#728] - gio-2.0: Add CancellableSource ctor and update PollableSource ctors - glib-2.0: Add Queue.clear_full() since 2.60 - gstreamer: Update from 1.15+ git master - gdk-3.0,gtk+-3.0: Update to 3.24.3+9c8f1478 - gtk+-4.0: Update to 3.94.0+9b15c690 - libsoup-2.4: Fix Message.add_*_handler() [#731] - vapi: Update GIR-based bindings Vala 0.43.4 =========== * Various improvements and bug fixes: - vala: + Array with fixed length don't require explicit instantiation (#720) + Add GenericType.get_actual_type() + Allow get_actual_type() to be used for expected failures + Add Method.compatible_no_error() + Don't just guess and check for a matching base_interface_method (#548) + Search in all interfaces for an implementation match (#548) + Allow explicit interface methods to be virtual (#548) + Report invalid instance member access to property (#605) - codegen: + Use properly checked implicit interface implementations (#548) + Use temp-var for MethodCall with out/ref arguments (#722) + Use temp-vars for ellipsis out-arguments to fix memory management (#722) + Add default_value for CType to initialize variables if needed (#724) + Cast instance parameter for property access in object-initializer + Don't check boolean values for (in)equality in GTask API (#726) + Add missing data parameter to GTypeInfo callbacks + Properly set annotations field of GDBus*Info struct to NULL + Cast instance and result of g_async_initable_new_finish() call - valadoc: Drop duplicated code to add source files and use CodeContext API - libvaladoc: Skip empty Version.replacement attribute to avoid critical - build: Don't leak libvalaccode symbols to libvaladoc - Add a basic CONTRIBUTING.md file that links to the relevant Wiki page - tests: + Fix try_parse() tests to not compare to already free'd memory + Warnings and criticals should be fatal on compile time too * Bindings: - glib-2.0: Use correct array-length-type for returned arrays (#171) - glib-2.0: Add RecMutexLocker since 2.60 - gio-2.0: Fix File.replace_contents_bytes_async() (!37) - gobject-2.0: Use correct array-length-type for returned arrays - poppler-glib: Update to 0.71 - gstreamer: Update from 1.15+ git master - gtk+-3.0: Update to 3.24.2+a8e07254 - gtk+-4.0: Update to 3.94.0+4404afc9 - sqlite3: Correct return C type of Statement.column_text & Value.to_text - webkitgtk-4.0: Update to 2.23.1 - vapi: Update GIR-based bindings Vala 0.43.2 =========== * Various improvements and bug fixes: - codegen: + GType classes and interfaces require including "glib-object.h" + Handle non-default AsyncResult parameter position [#709] and regenerate GIR-based bindings to fix non-standard async methods + Always emit constants with initializer-list [#81] + Emit delegate/enum typedefs to type-declaration section [#318] - Break possible endless loop in SymbolResolver.get_type_for_struct() [#444] * Bindings: - gobject-introspection-1.0: Pick up version attribute fixes Vala 0.43.1 =========== * Highlights: - Emit G_DEFINE_AUTOPTR_CLEANUP_FUNC() for classes (requires glib 2.44) [#670] - Enforce "return yield ..." syntax to be expected [#675] - Drop deprecated syntax support of += and -= for signals [#676] - Drop deprecated syntax support of # modifier and operator [#677] - Allow disabling the build of valadoc [#596] - Add support for SingleInstance attribute for GObject classes [#647] - Don't allow to declare array parameters with "type array[]" [#163] - Collect error_types on demand to allow transformations - Check for matching ownership of type-arguments [#696] - Add profile specific delegate target/destroy types - Don't explicitly add glib headers, the use of symbols will do that [#623] - Add --enable-debug configure option - Move setting of default defines for VALA_0_XX and GLIB_2_XX to CodeContext - Add support for delegate parameters in signals [#205] - Admit that structs are emtpy even with a static property [#446] * Various improvements and bug fixes: - codegen: + Fix method pointer cast if instance isn't at first position + Transfer ownership of compact class to DestroysInstance method [#645] + Add destroy function for GLib.Array [#572] + Fix canonical string for quark of error domains + Make sure to include declarations for delegate typed parameters + Don't emit type_id for enum in non GOBJECT profile + Don't emit unused temp variable for element access assignments + Actually create method cast for base interface method as needed + Mark needle parameter of internal array-contains methods as const [#504] + Emit initializer for enum-value into wanted declaration space [#167] + Add void to delegate typedef declarations without parameters + Deprecate "finish_function" and "ctype" ccode-attribute + Fix get_ccode_name() for properties + Add ccode getters for GType functions of Classes and Interfaces + Don't allow more than one consecutive empty lines in generated code - vala: + Copy instance_pos argument from virtual/abstract base methods [#540483] + Compact classes don't allow private/class fields and to lock fields + Use comment which was already retrieved in parse_declaration() + Add missing re-check guards for Do/For/WhileStatement and SwitchLabel + Type check for errors require an error expression [#362] + Make check_arguments() more verbose and don't bail on first error [#438] + Don't emit member access of assignments on static properties [#573] + Use clearer error message for automatic properties in interfaces [#656] + Admit that structs are emtpy even with a static property [#684] + Let UsingDirective hold reference to UnresolvedSymbol instances only + Add ArrayType.length_type and ArrayCreationExpression.length_type [#607] + Remove hardcoded "int" length type and use ArrayType.length_type [#607] + Use is_weak() for type-arguments in DataType.to_qualified_string() - girwriter: Write glib-type attributes for Enums/Structs with type_id - girparser: Skip "source-position" elements and docs in transparent union - valadoc: + Match property signature with vala's codewriter + Sort symbols and members where possible + Actually assign type_id of Api.Structs + Add type_id to Api.Enum/Interface + Skip package dependency if target directory already exists + Fix a few errors and warnings in stylesheet + Adjust stylesheet to unbreak Epiphany [#644] + Several API clean ups + Add --fatal-warnings command line option - docs: Use Markdown for README and include build instructions - testrunner: Compile and run tests separately and pass buildsystem's CC through to valac, add various -Werror=* build cflags * Bindings: - gio-2.0: Add missing File.new_build_filename() - glib-2.0: Add missing Array.set_clear_func() binding - glib-2.0: Avoid double-free in GLib.Array if clear_func is set - glib-2.0: Drop g_object_unref which is part of gobject-2.0 - gobject-2.0: Attribute all symbols with cheader_filename = "glib-object.h" - gdk-x11-3.0,gtk+-3.0: Update to 3.24.1+356f1f59 - gtk+-3.0: Treat Gtk.IconInfo as GLib.Object which it is since 3.8 [#663] - gtk+-4.0: Update to 3.94.0+8de1ba2c - gstreamer: Update from 1.15+ git master - posix: Add CommandPipe as a sub-type of FILE [#645]
2019-03-23nodejs: fix SIGABRT on NetBSD/i386 8.0 by pulling upstream PR #21848.tsutsui3-2/+49
Also apply similar ifdefs for NetBSD as FreeBSD and OpenBSD. Now nodejs binary won't fail during lang/npm and www/firefox builds on NetBSD/i386 8.0. Bump PKGREVISION. No particular comments on pkgsrc-bug@: http://mail-index.netbsd.org/pkgsrc-bugs/2019/03/19/msg066102.html Should close PR pkg/53497, PR pkg/53758, PR pkg/53792, and PR pkg/53794.
2019-03-20python34: updated to 3.4.10adam4-10/+10
Python 3.4.10 final Security bpo-36216: Changes urlsplit() to raise ValueError when the URL contains characters that decompose under IDNA encoding (NFKC-normalization) into characters that affect how the URL is parsed. bpo-35121: Don’t send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with http.cookiejar.DefaultCookiePolicy policy. Library bpo-35121: Don’t set cookie for a request when the request path is a prefix match of the cookie’s path attribute but doesn’t end with “/”. Python 3.4.10 release candidate 1 Security bpo-35746: [CVE-2019-5010] Fix a NULL pointer deref in ssl module. The cert parser did not handle CRL distribution points with empty DP or URI correctly. A malicious or buggy certificate can result into segfault. Vulnerability (TALOS-2018-0758). bpo-34791: The xml.sax and xml.dom.domreg no longer use environment variables to override parser implementations when sys.flags.ignore_environment is set by -E or -I arguments. bpo-34623: CVE-2018-14647: The C accelerated _elementtree module now initializes hash randomization salt from _Py_HashSecret instead of libexpat’s default CSPRNG. Library bpo-33329: Fix multiprocessing regression on newer glibcs
2019-03-20python35: updated to 3.5.7adam4-10/+10
Python 3.5.7 final Security bpo-36216: Changes urlsplit() to raise ValueError when the URL contains characters that decompose under IDNA encoding (NFKC-normalization) into characters that affect how the URL is parsed. bpo-35121: Don’t send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with http.cookiejar.DefaultCookiePolicy policy. Library bpo-35121: Don’t set cookie for a request when the request path is a prefix match of the cookie’s path attribute but doesn’t end with “/”. Python 3.5.7 release candidate 1 Security bpo-35746: [CVE-2019-5010] Fix a NULL pointer deref in ssl module. The cert parser did not handle CRL distribution points with empty DP or URI correctly. A malicious or buggy certificate can result into segfault. Vulnerability (TALOS-2018-0758). bpo-34791: The xml.sax and xml.dom.domreg no longer use environment variables to override parser implementations when sys.flags.ignore_environment is set by -E or -I arguments. bpo-34623: CVE-2018-14647: The C accelerated _elementtree module now initializes hash randomization salt from _Py_HashSecret instead of libexpat’s default CSPRNG. Library bpo-33329: Fix multiprocessing regression on newer glibcs bpo-33127: The ssl module now compiles with LibreSSL 2.7.1.
2019-03-20Update duktape and libduktape to 2.3.0agc5-18/+32
Changes since previous version (2.2.0): pkgsrc: use the included Makefile.cmdline to build duktape, rather than custom command in pkgsrc Makefile. Don't assume ${CC} is gcc while doing so XXX - it looks like the ABI has changed (silently) from 2.2.0 without a corresponding libtool version bump from upstream. caveat buildor 2.3.0 (2018-08-04) + When C++ exception support is enabled use a separate duk_fatal_exception (inherits from std::runtime_error) to propagate fatal errors (uncaught errors, assertions) out of Duktape when using the default fatal error handler (GH-1915) + Update UnicodeData.txt and SpecialCasing.txt used for building internal Unicode control data to Unicode version 10.0.0 (GH-1851) + Add support for Symbol.hasInstance (@@hasInstance) check for 'instanceof' operator and duk_instanceof() API call; also add Symbol.hasInstance and Function.prototype[@@hasInstance] (GH-1821) + Add support for Symbol.toStringTag (@@toStringTag) in Object.prototype.toString() (GH-1822) + Add support for Symbol.isConcatSpreadable (@@isConcatSpreadable) in Array.prototype.concat() (GH-1823) + Add support for Symbol.toPrimitive (@@toPrimitive) in ToPrimitive() internal algorithm and duk_to_primitive() API call (GH-1825) + Invoke Proxy 'has' trap in Array.prototype.concat() when inspecting the elements of the Proxy target (GH-1823) + Remove DUK_USE_NONSTD_ARRAY_CONCAT_TRAILER because the underlying ES5.1 specification "bug" was fixed in ES2015 (GH-1823) + Remove DUK_USE_NONSTD_ARRAY_MAP_TRAILER because ES5.0/ES5.1 behavior actually did match the "non-standard" behavior provided by the option (GH-1823) + Add duk_random() to allow C code access to the same random number source as ECMAScript code (GH-1815) + Add duk_push_new_target() to allow C code to access new.target; at present this is for completeness because without actual class support it's only useful to detect constructor calls which can already be done using duk_is_constructor_call() (GH-1745) + Add experimental API call variants for plain C literals, for example duk_push_literal(ctx, "key") and duk_get_prop_literal(ctx, "propname"), which allow e.g. better performance; calls added: duk_push_literal(), duk_get_prop_literal(), duk_put_prop_literal(), duk_has_prop_literal(), duk_del_prop_literal(), duk_get_global_literal(), duk_put_global_literal() (GH-1805) + Add duk_get_global_heapptr() and duk_put_global_heapptr() for completeness (GH-1805) + Automatically pin strings accessed using the C literal API call variants such as duk_get_prop_literal(ctx, "propname") between mark-and-sweep rounds to facilitate literal caching and to reduce string table traffic; this behavior can be disabled by disabling DUK_USE_LITCACHE_SIZE in configure.py (GH-1813) + Add a lookup cache for C literals to speed up string table lookups when using API call variants such as duk_get_prop_literal(ctx, "propname"); the cache relies on literals being pinned between mark-and-sweep rounds, and can be disabled by disabling DUK_USE_LITCACHE_SIZE in configure.py (GH-1813) + ES2015 Number constructor properties: EPSILON, MIN_SAFE_INTEGER, MAX_SAFE_INTEGER, isFinite(), isInteger(), isNaN(), isSafeInteger(), parseInt(), parseFloat() (GH-1756, GH-1761) + Assume only natural alignment (DUK_USE_ALIGN_BY=8) on all platforms to minimize compiler assumptions regarding unaligned accesses (which can be an issue even on x86); applications working with a low memory target may want to force DUK_USE_ALIGN_BY in configuration (GH-1783, GH-1784) + Base64 decoder is now more lenient for padding: accepts missing padding ('Zm'), partial padding ('Zm='), standard padding ('Zm=='), and extra padding ('Zm===' etc), also for concatenated documents ('Zm===Zm' decodes to 'ff' for example) (GH-1789) + Base64 encoder and decoder performance improvements for both fast path and slow path variants (GH-1789) + Make base64 support optional and drop it from lowmem base configuration; define DUK_USE_BASE64_SUPPORT to enable it (GH-1789) + Make hex support optional and drop it from lowmem base configuration; define DUK_USE_BASE64_SUPPORT to enable it (GH-1789) + Add C++ name mangling wrappers (extern "C") for extras (GH-1780, GH-1782) + Add a duk_uint64_t to duk_hbuffer_fixed forced alignment union trick just in case double and uint64_t alignment requirements differ (GH-1799) + Add a CBOR encoder/decoder as an extra (GH-1781, GH-1800, GH-1801) + Add a minimal ES2015 Promise polyfill into the distribution (GH-1865) + Include <exception> only when compiling as C++ with C++ exception support enabled (GH-1838, GH-1839) + Allow undefined timeout in eventloop example setTimeout() and setInterval() bindings, minor cleanups and improvements (GH-1866, GH-1879, GH-1884) + Revise Number.prototype.toFixed() 'this' binding and fractionDigits argument validation order to match ES2015 where the 'this' binding is validated first (GH-1887) + Add Makefile.jsoncbor to the distributable (GH-1885) + Makefile.sharedlibrary portability improvements (GH-1922, GH-1923) + Change spelling from ECMAScript to ECMAScript throughout the internal source code; as far as external behavior is concerned this only affects a few debug prints (GH-1894) + Fix NULL pointer dereference in error augmentation when DUK_USE_TRACEBACKS was disabled (GH-1909) + Fix potential dangling pointer use in Duktape thread termination handling; the dangling pointer could cause unsafe memory behavior (GH-1845, GH-1868) + Fix performance.now() property attributes to 'wec' (earlier 'wc') (GH-1821) + Fix debugger StepOver behavior when a tailcall happens in a nested function (not the function where stepping started from) (GH-1786, GH-1787) + Fix trailing single line comment handling for Function constructor; new Function('return "foo" //') previously failed with SyntaxError (GH-1757) + Fix some lexer bugs related to parsing in RegExp mode (interpret leading '/' as part of a RegExp) or not (interpret '/' as division) (GH-1779) + Fix DUK_BOOL_{MIN,MAX} defines for unsigned duk_bool_t (GH-1769) + Fix 'defined but not used' warning for Windows (GH-1775) + Fix potential uninitialized data use when Windows Date provider FileTimeToSystemTime() or FileTimeToLocalFileTime() failed (GH-1953) + Fix some Clang warnings by avoiding undefined behavior by default, define DUK_USE_ALLOW_UNDEFINED_BEHAVIOR to reduce the explicit undefined behavior checks for better footprint/performance (GH-1777, GH-1795, GH-1796, GH-1797, GH-1798) + Fix some compilation warnings triggered when DUK_NORETURN is not defined; the internal DUK_WO_NORETURN() is used to include unreachable dummy statements when the noreturn attribute is not available, e.g. DUK_WO_NORETURN(return 0;); (GH-1790) + Fix a few casts in duk_trans_socket_windows.c to avoid errors in a C++ build (GH-1773) + Fix harmless -Wcast-align warnings on armhf (GH-1793) + Various compiler warning fixes (GH-1788, GH-1932, GH-1924, GH-1950, GH-1951, etc) + Add automatic workaround for union aliasing issues with FreeBSD + -m32 + Clang prior to 5.0; the aliasing issues cause packed duk_tval to work incorrectly (see https://github.com/svaarala/duktape/blob/master/misc/clang_aliasing.c), and the workaround is to use unpacked duk_tval prior to Clang 5.0 (GH-1764) 2.2.1 (2018-04-26) + Fix trailing single line comment handling for Function constructor; new Function('return "foo" //') previously failed with SyntaxError (GH-1757) + Fix DUK_BOOL_{MIN,MAX} defines for unsigned duk_bool_t (GH-1769) + Fix debugger StepOver behavior when a tailcall happens in a nested function (not the function where stepping started from) (GH-1786, GH-1787) + Fix potential dangling pointer use in Duktape thread termination handling; the dangling pointer could cause unsafe memory behavior (GH-1845, GH-1868)
2019-03-20openjdk7: update to 1.7.141nb10.wiz2-5/+3
Remove libXp build dependency, not used.
2019-03-20openjdk8: update to 1.8.202nb1.wiz2-4/+3
Remove libXp build dependency, not used.
2019-03-20erlang: fix minor typo in Makefilegutteridge1-2/+2
2019-03-17swi-prolog-lite: Also remove libedit documentationleot2-3/+4
On platforms without editline(3) the libedit documentation is not generated, always remove it for consistency. PKGREVISION++
2019-03-16lang/ruby/rails.mk: not yet, reverttaca1-2/+2
Revert previous, not yet.
2019-03-16lang/ruby/rails.mk: make ruby-on-rails42 to 4.2.11.1taca1-2/+2
Start update of Ruby on Rails42 to 4.2.11.1.
2019-03-16lang/ruby26-base: update to 2.6.2taca3-16/+8
Update ruby26{,-base} to 2.6.2. Quote from release announce. Ruby 2.6.2 (2019-03-13) This release includes bug fixes and a security update of the bundled RubyGems. See details in Multiple vulnerabilities in RubyGems and the commit logs.
2019-03-16lang/ruby25-base: updateo to 2.5.5taca3-17/+8
Update ruby25{,-base} to 2.5.5. Quote from release announce: Ruby 2.5.4 (2019-03-13) This release includes bug fixes and a security update of the bundled RubyGems. See details in Multiple vulnerabilities in RubyGems and the commit logs. Ruby 2.5.5 (2019-03-15) This release includes a bug fix for the deadlock in the multi-thread+multi-process (using Process.fork) applications (ex: puma).
2019-03-16Revbump all Go packages after Go 1.12.1 update.bsiegert1-2/+2
2019-03-16Update go112 to 1.12.1.bsiegert3-8/+15
go1.12.1 (released 2019/03/14) includes fixes to cgo, the compiler, the go command, and the fmt, net/smtp, os, path/filepath, sync, and text/template packages. See the Go 1.12.1 milestone on our issue tracker for details.
2019-03-16Update go111 to 1.11.6.bsiegert3-10/+15
go1.11.6 (released 2019/03/14) includes fixes to cgo, the compiler, linker, runtime, go command, and the crypto/x509, encoding/json, net, and net/url packages. See the Go 1.11.6 milestone on our issue tracker for details.
2019-03-14ruby26-base: Fix install on Darwin.jperkin2-15/+20
2019-03-14go112: Remove empty patch (NFC)leot1-0/+0
2019-03-14go112: Remove empty patch (NFC)leot1-0/+0
2019-03-13go112: Sync PLIST.SunOS with reality.jperkin1-2/+2
2019-03-13swi-prolog-jpl: Adjust COMMENT to reflect the actual packageleot1-2/+2
(This was accidentally modified when updating it to 8.0.1, sorry!)
2019-03-13go112: paper over issues with filenames containing umlauts.bsiegert2-7/+8
- extract using gtar (hopefully more lenient than bsdtar) - remove the files in question in post-extract While here, re-add a PLIST.route conditional that was accidentally removed, breaking the build on Linux (PR pkg/54054).
2019-03-12lang/ruby24-base: really bump PKGREVISIONtaca1-1/+2
Oops, really bump PKGREVISION.
2019-03-12lang/ruby24-base: Add security patch for rubygemstaca2-2/+10
Add security patch for rubygems, fixing these problem. * CVE-2019-8320: Delete directory using symlink when decompressing tar * CVE-2019-8321: Escape sequence injection vulnerability in verbose * CVE-2019-8322: Escape sequence injection vulnerability in gem owner * CVE-2019-8323: Escape sequence injection vulnerability in API response handlin g * CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution * CVE-2019-8325: Escape sequence injection vulnerability in errors https://www.ruby-lang.org/en/news/2019/03/05/multiple-vulnerabilities-in-rubygems/ Since original patch included in official announce dose not cleanly applied to Ruby 2.4.5, use a local version which drop patch to none existing test. Bump PKGREVISION.
2019-03-12lang/ruby25-base: Add security patch for rubygemstaca2-3/+11
Add security patch for rubygems, fixing these problem. * CVE-2019-8320: Delete directory using symlink when decompressing tar * CVE-2019-8321: Escape sequence injection vulnerability in verbose * CVE-2019-8322: Escape sequence injection vulnerability in gem owner * CVE-2019-8323: Escape sequence injection vulnerability in API response handlin g * CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution * CVE-2019-8325: Escape sequence injection vulnerability in errors https://www.ruby-lang.org/en/news/2019/03/05/multiple-vulnerabilities-in-rubygems/ Since original patch included in official announce dose not cleanly applied to Ruby 2.5.3, use a local version which drop patch to none existing test. Bump PKGREVISION.
2019-03-12lang/ruby26-base: Add security patch for rubygemstaca2-2/+10
Add security patch for rubygems, fixing these problem. * CVE-2019-8320: Delete directory using symlink when decompressing tar * CVE-2019-8321: Escape sequence injection vulnerability in verbose * CVE-2019-8322: Escape sequence injection vulnerability in gem owner * CVE-2019-8323: Escape sequence injection vulnerability in API response handling * CVE-2019-8324: Installing a malicious gem may lead to arbitrary code execution * CVE-2019-8325: Escape sequence injection vulnerability in errors Bump PKGREVISION.
2019-03-12lang/php73: update to 7.3.3taca3-9/+8
Update php73 to 7.3.3. 07 Mar 2019, PHP 7.3.3 - Core: . Fixed bug #77589 (Core dump using parse_ini_string with numeric sections). (Laruence) . Fixed bug #77329 (Buffer Overflow via overly long Error Messages). (Dmitry) . Fixed bug #77494 (Disabling class causes segfault on member access). (Dmitry) . Fixed bug #77498 (Custom extension Segmentation fault when declare static property). (Nikita) . Fixed bug #77530 (PHP crashes when parsing `(2)::class`). (Ekin) . Fixed bug #77546 (iptcembed broken function). (gdegoulet) . Fixed bug #77630 (rename() across the device may allow unwanted access during processing). (Stas) - COM: . Fixed bug #77621 (Already defined constants are not properly reported). (cmb) . Fixed bug #77626 (Persistence confusion in php_com_import_typelib()). (cmb) - EXIF: . Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF). (Stas) . Fixed bug #77540 (Invalid Read on exif_process_SOFn). (Stas) . Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE). (Stas) . Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE). (Stas) - Mbstring: . Fixed bug #77514 (mb_ereg_replace() with trailing backslash adds null byte). (Nikita) - MySQL . Disabled LOCAL INFILE by default, can be enabled using php.ini directive mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE attribute for pdo_mysql. (Darek Slusarczyk) - OpenSSL: . Fixed bug #77390 (feof might hang on TLS streams in case of fragmented TLS records). (Abyl Valg, Jakub Zelenka) - PDO_OCI: . Support Oracle Database tracing attributes ACTION, MODULE, CLIENT_INFO, and CLIENT_IDENTIFIER. (Cameron Porter) - PHAR: . Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename). (bishop) . Fixed bug #77586 (phar_tar_writeheaders_int() buffer overflow). (bishop) - phpdbg: . Fixed bug #76596 (phpdbg support for display_errors=stderr). (kabel) - SPL: . Fixed bug #51068 (DirectoryIterator glob:// don't support current path relative queries). (Ahmed Abdou) . Fixed bug #77431 (openFile() silently truncates after a null byte). (cmb) - Standard: . Fixed bug #77552 (Unintialized php_stream_statbuf in stat functions). (John Stevenson) . Fixed bug #77612 (setcookie() sets incorrect SameSite header if all of its options filled). (Nikita)
2019-03-12lang/php72: update to 7.2.16taca3-9/+8
Update php72 to 7.2.16. 07 Mar 2019, PHP 7.2.16 - Core: . Fixed bug #77589 (Core dump using parse_ini_string with numeric sections). (Laruence) . Fixed bug #77630 (rename() across the device may allow unwanted access during processing). (Stas) - COM: . Fixed bug #77621 (Already defined constants are not properly reported). (cmb) - EXIF: . Fixed bug #77509 (Uninitialized read in exif_process_IFD_in_TIFF). (Stas) . Fixed bug #77540 (Invalid Read on exif_process_SOFn). (Stas) . Fixed bug #77563 (Uninitialized read in exif_process_IFD_in_MAKERNOTE). (Stas) . Fixed bug #77659 (Uninitialized read in exif_process_IFD_in_MAKERNOTE). (Stas) - PDO_OCI: . Support Oracle Database tracing attributes ACTION, MODULE, CLIENT_INFO, and CLIENT_IDENTIFIER. (Cameron Porter) - PHAR: . Fixed bug #77396 (Null Pointer Dereference in phar_create_or_parse_filename). (bishop) - SPL: . Fixed bug #51068 (DirectoryIterator glob:// don't support current path relative queries). (Ahmed Abdou) . Fixed bug #77431 (openFile() silently truncates after a null byte). (cmb) - Standard: . Fixed bug #77552 (Unintialized php_stream_statbuf in stat functions). (John Stevenson) - MySQL . Disabled LOCAL INFILE by default, can be enabled using php.ini directive mysqli.allow_local_infile for mysqli, or PDO::MYSQL_ATTR_LOCAL_INFILE attribute for pdo_mysql. (Darek Slusarczyk)