summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2021-04-05py-django-extensions: updated to 3.1.2adam3-8/+9
3.1.2 ----- Changes: - Improvement: shell_plus, not save ipython history when using Jupyter - Improvement: docs, fix spelling mistakes - Improvement: tests, move to Github Actions instead of Travis - Improvement: drop_test_database, delete all cloned test databases - Improvement: setup.py, Added minimum Django>=2.2 version to PyPI package - Improvement: shell_plus, fix --command globals / locals error
2021-04-05py-httplib2: updated to 0.19.1adam2-7/+7
0.19.1 auth header parsing performance optimizations; Thanks to Paul McGuire Use mock from the standard library on Python>=3.3
2021-04-03grafana: update to 7.5.2tnn4-833/+2113
What’s new in 7.5 Pie chart panel visualization (beta) Alerting for Loki Loki label browser Changed default HTTP method for new Prometheus data sources Word highlighting for Elasticsearch Better format definition for trace data Paste in SSL certs for Postgres data source Deprecation notice for some Azure Monitor queries Cloudwatch data source enhancements Increased API limit for CloudMonitoring Services Tempo as a backend data source
2021-04-03webkit24-gtk: Use the same glib-2.68.0 fixcirnatdan2-6/+6
2021-04-03py-djangorestframework: updated to 3.12.4adam2-8/+8
3.12.4 Revert use of deque instead of list for tracking throttling .history. (Due to incompatibility with DjangoRedis cache backend. 3.12.3 Properly handle ATOMIC_REQUESTS when multiple database configurations are used. Bypass COUNT query when LimitOffsetPagination is configured but pagination params are not included on the request. Respect allow_null=True on DecimalField. Allow title cased "Yes"/"No" values with BooleanField. Add PageNumberPagination.get_page_number() method for overriding behavior. Fixed rendering of timedelta values in OpenAPI schemas, when present as default, min, or max fields. Render JSONFields with indentation in browsable API forms. Remove unnecessary database query in admin Token views. Raise validation errors when bools are passed to PrimaryKeyRelatedField fields, instead of casting to ints. Don't include model properties as automatically generated ordering fields with OrderingFilter. Use deque instead of list for tracking throttling .history.
2021-04-02webkit24-gtk3: Fix build with glib-2.68.0cirnatdan1-1/+5
2021-04-01Avoid a gnu specific regex in a sed invocation during autoconfigury,martin2-5/+15
now the pkg builds again on NetBSD-current.
2021-04-01nginx-devel: updated to 1.19.9adam2-7/+7
Changes with nginx 1.19.9 30 Mar 2021 *) Bugfix: nginx could not be built with the mail proxy module, but without the ngx_mail_ssl_module; the bug had appeared in 1.19.8. *) Bugfix: "upstream sent response body larger than indicated content length" errors might occur when working with gRPC backends; the bug had appeared in 1.19.1. *) Bugfix: nginx might not close a connection till keepalive timeout expiration if the connection was closed by the client while discarding the request body. *) Bugfix: nginx might not detect that a connection was already closed by the client when waiting for auth_delay or limit_req delay, or when working with backends. *) Bugfix: in the eventport method. Changes with nginx 1.19.8 09 Mar 2021 *) Feature: flags in the "proxy_cookie_flags" directive can now contain variables. *) Feature: the "proxy_protocol" parameter of the "listen" directive, the "proxy_protocol" and "set_real_ip_from" directives in mail proxy. *) Bugfix: HTTP/2 connections were immediately closed when using "keepalive_timeout 0"; the bug had appeared in 1.19.7. *) Bugfix: some errors were logged as unknown if nginx was built with glibc 2.32. *) Bugfix: in the eventport method. Changes with nginx 1.19.7 16 Feb 2021 *) Change: connections handling in HTTP/2 has been changed to better match HTTP/1.x; the "http2_recv_timeout", "http2_idle_timeout", and "http2_max_requests" directives have been removed, the "keepalive_timeout" and "keepalive_requests" directives should be used instead. *) Change: the "http2_max_field_size" and "http2_max_header_size" directives have been removed, the "large_client_header_buffers" directive should be used instead. *) Feature: now, if free worker connections are exhausted, nginx starts closing not only keepalive connections, but also connections in lingering close. *) Bugfix: "zero size buf in output" alerts might appear in logs if an upstream server returned an incorrect response during unbuffered proxying; the bug had appeared in 1.19.1. *) Bugfix: HEAD requests were handled incorrectly if the "return" directive was used with the "image_filter" or "xslt_stylesheet" directives. *) Bugfix: in the "add_trailer" directive.
2021-03-31nextcloud: Prune out of date advice from MESSAGEgdt1-20/+4
Now, we have php.d, so one just installs, and does not modify php.ini.
2021-03-31nghttp2: accept lower python3.maya3-1/+70
Upstream has only intended to reject python 2.x.
2021-03-31www/hackernews-tui: update to 0.3.1pin2-7/+7
Application changes: -add S, C, r. Codebase changes: -code refactor part II (more details can be found here). -implement handlers for S, C and r.
2021-03-31curl: Update to 7.76.0leot3-8/+12
Changes: 7.76.0 ====== This release includes the following changes: o cookies: Support multiple -b parameters o curl: add --fail-with-body o doh: add options to disable ssl verification o http: add support to read and store the referrer header o sasl: support SCRAM-SHA-1 and SCRAM-SHA-256 via libgsasl o vtls: initial implementation of rustls backend This release includes the following bugfixes: o CVE-2021-22876: strip credentials from the auto-referer header field o CVE-2021-22890: add 'isproxy' argument to Curl_ssl_get/addsessionid() o asyn-ares: use consistent resolve error message o BUG-BOUNTY: removed the cooperation mention o build: delete unused feature guards o build: fix --disable-dateparse o build: fix --disable-http-auth o build: remove all traces of USE_BLOCKING_SOCKETS o c-hyper: Remove superfluous pointer check o c-hyper: support automatic content-encoding o CI/azure: disable test 433 on azure-ubuntu o CI/azure: replace python-impacket with python3-impacket o ci: stop building on freebsd-12-1 o cmake: fix import library name for non-MS compiler on Windows o cmake: use CMAKE_INSTALL_INCLUDEDIR indirection o cmake: support WinIDN o config: fix building SMB with configure using Win32 Crypto o config: fix detection of restricted Windows App environment o configure: fail if --with-quiche is used and quiche isn't found o configure: make AC_TRY_* into AC_*_IFELSE o configure: make hyper opt-in, and fail if missing o configure: only add OpenSSL paths if they are defined o configure: provide Largefile feature for curl-config o configure: remove use of deprecated macros o configure: s/AC_HELP_STRING/AS_HELP_STRING o cookies: Fix potential NULL pointer deref with PSL o curl: set CURLOPT_NEW_FILE_PERMS if requested o curl_easy_setopt.3: add curl_easy_option* functions to SEE ALSO o curl_multibyte: always return a heap-allocated copy of string o curl_multibyte: fall back to local code page stat/access on Windows o Curl_timeleft: check both timeouts during connect o curl_url_set.3: mention CURLU_PATH_AS_IS o CURLOPT_QUOTE.3: clarify that libcurl doesn't parse what's sent o docs/HTTP2: remove the outdated remark about multiplexing for the tool o docs/Makefile.inc: format to be update-friendly o docs: add CURLOPT_CURLU to 'See also' in curl_url_ functions o docs: add missing Arg tag to --stderr o docs: Add SSL backend names to CURL_SSL_BACKEND o docs: clarify timeouts for queued transfers in multi API o docs: Explain DOH transfers inherit some SSL settings o docs: fix FILE example url in --metalink documentation o docs: make gen.pl support *italic* and **bold** o doh: Fix sharing user's resolve list with DOH handles o doh: Inherit CURLOPT_STDERR from user's easy handle o dynbuf: bump the max HTTP request to 1MB o examples: Remove threaded-shared-conn.c due to bug o file: Support unicode urls on windows o ftp: add 'list_only' to the transfer state struct o ftp: add 'prefer_ascii' to the transfer state struct o FTP: allow SIZE to fail when doing (resumed) upload o ftp: avoid SIZE when asking for a TYPE A file o ftp: fix Codacy/cppcheck warning about null pointer arithmetic o ftp: fix memory leak in ftp_done o ftp: never set data->set.ftp_append outside setopt o gen.pl: quote "bare" minuses in the nroff curl.1 o github: add torture-ftp for FTP-only torture testing o gnutls: assume nettle crypto support o gskit: correct the gskit_send() prototype o hostip: fix build with sync resolver o hostip: fix crash in sync resolver builds that use DOH o hsts: remove unused defines o http2: don't set KEEP_SEND when there's no more data to be sent o http2: fail if connection terminated without END_STREAM o http: cap body data amount during send speed limiting o http: do not add a referrer header with empty value o http: make 416 not fail with resume + CURLOPT_FAILONERRROR o http: remove superfluous NULL assign o http: strip default port from URL sent to proxy o http: use credentials from transfer, not connection o ldap: use correct memory free function o lib1536: check ptr against NULL before dereferencing it o lib1537: check ptr against NULL before dereferencing it o lib: remove 'conn->data' completely o libssh2: kdb_callback: get the right struct pointer o libssh2:ssh_connect: clear session pointer after free o memdebug: close debug logfile explicitly on exit o mingw: enable using strcasecmp() o multi: close the connection when h2=>h1 downgrading o multi: do once-per-transfer inits in before_perform in DID state o multi: rename the multi transfer states o multi: update pending list when removing handle o ngtcp2: adapt to the new recv_datagram callback o ngtcp2: clarify calculation precedence o ngtcp2: Fix build error due to change in ngtcp2_addr_init o ngtcp2: sync with recent API updates o openldap: avoid NULL pointer dereferences o openssl: adapt to v3's new const for a few API calls o openssl: ensure to check SSL_CTX_set_alpn_protos return values o openssl: remove get_ssl_version_txt in favor of SSL_get_version o openssl: set the transfer pointer for logging early o OS400: update for CURLOPT_AWS_SIGV4 o parse_proxy: fix a memory leak in the OOM path o pathhelp.pm: fix use of pwd -L in Msys environment o projects: Update VS projects for OpenSSL 1.1.x o quiche: fix build error: use 'int' for port number o quiche: fix crash when failing to connect o retry-all-errors.d: Explain curl errors versus HTTP response errors o retry.d: Clarify transient 5xx HTTP response codes o runtests.pl: add %TESTNUMBER variable to make copying tests more convenient o runtests.pl: add a -P option to specify an external proxy o runtests.pl: kill processes locking test log files o setopt: error on CURLOPT_HTTP09_ALLOWED set true with Hyper o test1188: change error to check for: --fail HTTP status o test220/314: adjust to run with Hyper o test304: header CRLF cleanup to work with Hyper o test306: make it not run with Hyper o tests: disable .curlrc in more environments o tests: use %TESTNUMBER instead of fixed number o tftp: remove the 3600 second default timeout o time: enable 64-bit time_t in supported mingw environments o tool_help: add missing argument for --create-file-mode o tool_help: Increase space between option and description o tool_operate: bail if set CURLOPT_HTTP09_ALLOWED returns error o travis: add a rustls build o travis: bump wolfssl to 4.7.0 o travis: only build wolfssl when needed o travis: split "torture" into a separate "events" build o travis: switch ngtcp2 build over to quictls o travis: use ubuntu nghttp2 package instead of build our own o url.c: use consistent error message for failed resolve o url: fix memory leak if OOM in the HSTS handling o url: fix possible use-after-free in default protocol o urldata: don't touch data->set.httpversion at run-time o urldata: fix build without HTTP and MQTT o urldata: make 'actions[]' use unsigned char instead of int o urldata: merge "struct DynamicStatic" into "struct UrlState" o urldata: remove the 'rtspversion' field o urldata: remove the _ORIG suffix from string names o version.d: Add missing features to the features list o wolfssl: don't store a NULL sessionid
2021-03-30webkit-gtk: Add missing .h file to PLISTleot1-1/+2
Accidentally missed and part of the 2.32.0 update.
2021-03-30firefox-l10n: Update to 87.0ryoon2-387/+387
* Sync with www/firefox-87.0.
2021-03-30firefox: Update to 87.0ryoon4-125/+112
Changelog: New * You'll encounter less website breakage in Private Browsing and Strict Enhanced Tracking Protection with SmartBlock, which provides stand-in scripts so that websites load properly. * To further protect your privacy, our new default HTTP Referrer policy will trim path and query string information from referrer headers to prevent sites from accidentally leaking sensitive user data. * The "Highlight All" feature on Find in Page now displays tick marks alongside your scrollbar that correspond to the location of matches found on that page. * We're proud to announce full support for macOS built-in screen reader, VoiceOver. * We've added a new locale: Silesian (szl) Fixed * We've fixed several significant accessibility issues: + Video controls now have visible focus styling and video and audio controls are now keyboard navigable. (Bug 1681007) + HTML <meter> is now spoken by screen readers. (Bug 1460378) + Firefox now sets a useful initial focus in Add-ons Manager. (Bug 580537 ) + Firefox will now fire a name/description change event when aria-labelledby/describedby content changes. (Bug 493683) * Various security fixes. Changed * To prevent user data loss when filling out forms, we've disabled the Backspace key as a navigation shortcut for the back navigation button. To re-enable the Backspace keyboard shortcut, you can change the about:config preference browser.backspace_action to 0. You can also use the recommended Alt + Left arrow (Command + Left arrow on Mac) shortcut instead. Firefox keyboard shortcuts * We've removed items from the Library menu that weren't used often or have other access points in the browser: Synced tabs, Recent highlights, and Pocket list. * We've simplified the Help menu by reducing redundant items, such as those that point to Firefox support pages that can also be accessed via the Get Help item. Enterprise * Various bug fixes and new policies have been implemented in the latest version of Firefox. You can see more details in the Firefox for Enterprise 87 Release Notes. Developer * Developer Information * We've greatly simplified the Web Developer menu. Go to Application Menu > Web Developer > Web Developer Tools to access Inspector, Web Console, Debugger, Network Style Error, Performance, Storage Inspector, Accessibility, and Application * Developers can now use the Page Inspector to simulate prefers-color-scheme media queries, without having to change the operating system to light or dark mode. * Developers can now use the Page Inspector to toggle the :target pseudo-class for the currently selected element in addition to the pseudo-classes that were previously supported: :hover, :active and :focus, :focus-within, :focus-visible, and :visited. * There is a number of Page Inspector improvements and bug fixes related to inactive CSS rules: + The table-layout property is now marked as inactive for non-table elements. + The scroll-padding properties (shorthand and longhand) are now marked as inactive for non-scrollable elements. + The text-overflow property was previously incorrectly marked as inactive for some overflow values. Securiy fixes: #CVE-2021-23981: Texture upload into an unbound backing buffer resulted in an out-of-bound read #CVE-2021-23982: Internal network hosts could have been probed by a malicious webpage #CVE-2021-23983: Transitions for invalid ::marker properties resulted in memory corruption #CVE-2021-23984: Malicious extensions could have spoofed popup information #CVE-2021-23985: Devtools remote debugging feature could have been enabled without indication to the user #CVE-2021-23986: A malicious extension could have performed credential-less same origin policy violations #CVE-2021-23987: Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9 #CVE-2021-23988: Memory safety bugs fixed in Firefox 87
2021-03-30webkit-gtk: Update to 2.32.0leot9-113/+63
pkgsrc changes: - Remove patch-Source_WTF_wtf_RAMSize.cpp: fallback method using sysconf(3) is now used also on NetBSD - patch-CMakeLists.txt migrated to Source/cmake/WebKitCommon.cmake: all existent logic was migrated there - Remove patch-Source_ThirdParty_ANGLE_adjust-angle-include-paths.sh: patched file no longer present - Add `-DENABLE_GAMEPAD=OFF' to disable gamepad support: needs libmanette not yet packaged in pkgsrc Changes: 2.32.0 ====== - NPAPI plugins support have been removed. - System font scaling factor is correctly applied now. - New permission request API for MediaKeySystem access. - New API to remove individual scripts/stylesheets using WebKitUserContentManager. - Web inspector now shows detailed information about main loop frames. - The minimum required GStreamer version is now 1.14. - The GStreamer runtime is now initialized only when required. - Improved platform support for WebAudio (WebAudio->MediaStream, Worklet, Multi-channel). - Support for hardware-accelerated video rendering on i.MX8 platforms (using the NXP driver). Updated in pkgsrc-wip by <cirnatdan> and me.
2021-03-30www: +syndicationmarkd1-1/+2
2021-03-30kf5: KDE Frameworks update to 5.80.0markd15-30/+216
10 months of patches/updates.
2021-03-27(www/nsm) regen distinfomef1-5/+5
2021-03-24firefox78-l10n: Update to 78.9.0ryoon2-371/+371
* Sync with www/firefox78-78.9.0.
2021-03-24firefox78: Update to 78.9.0ryoon2-7/+7
Changelog: Security fixes: #CVE-2021-23981: Texture upload into an unbound backing buffer resulted in an out-of-bound read #CVE-2021-23982: Internal network hosts could have been probed by a malicious webpage #CVE-2021-23984: Malicious extensions could have spoofed popup information #CVE-2021-23987: Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9
2021-03-23seamonkey: Fix PLIST for webrtc optionryoon1-1/+2
2021-03-23grafana: Update to 7.4.5triaxx3-12/+60
pkgsrc changes: --------------- * Add a patch to use the same go binary as the one used to build grafana. The build.go program initially ran go which could be linked to any installed go binary managed by pkg_alternatives. upstream changes: ----------------- 7.4.5 (2021-03-18) Bug fixes o Security: Fix API permissions issues related to team-sync CVE-2021-28146, CVE-2021-28147. (Enterprise) o Security: Usage insights requires signed in users CVE-2021-28148. (Enterprise) o Security: Do not allow editors to incorrectly bypass permissions on the default data source. CVE-2021-27962. (Enterprise)
2021-03-22py-scrapy: Update to 2.4.1triaxx3-27/+15
upstream cheanges: ------------------ A lot of changes listed at https://github.com/scrapy/scrapy/blob/master/docs/news.rst
2021-03-21www/ruby-unicorn: update to 6.0.0taca3-10/+8
6.0.0 (2021-03-17) No release note nor changelog. Here are quote from commit log. * tests: force blocking I/O for Ruby 3.x * http_request: drop unnecessary #clear call * Allocate a new request for each client * test/test_helper: only unlink redirected logs from parent
2021-03-21www/ruby-pygments.rb: update to 2.2.0taca3-21/+17
2.2.0 (2021-03-18) * Add support for custom lexers (#187) * Update Pygments to 2.8.1
2021-03-20go-ffuf: fix build with Go 1.16bsiegert2-1/+13
The checksum for the go-spew package is missing from the go.sum file for some reason.
2021-03-19Revbump all Go packages after go115 updatebsiegert21-39/+42
2021-03-19davical: Update to 1.1.10triaxx2-9/+8
upstream changes: ----------------- 2021-03-01 Florian Schlichting <fsfs@debian.org> * release davical 1.1.10 * Update carddav/2042-REPORT-addressbook-query together with df6ff3a in AWL 2021-03-01 Andrew Ruthven <puck@catalyst.net.nz> * Add a regression test for new invalid user result from FreeBusy * Return a nicer error message if no user is found for Free/Busy via email 2021-02-09 Florian Schlichting <fsfs@debian.org> * Listing External Calendars is part of the Administration menu and should be restricted to admins * tighten $c->list_everyone to look for DAV::read privilege and actually block access to principals and collections 2020-05-05 Klaus M Pfeiffer <kmp+gitlab@kmp.or.at> * add feature list_everyone (fixes #59) 2021-02-08 Florian Schlichting <fsfs@debian.org> * CI: run interop tests from carddavclient by Michael Stilkerich <ms@mike2k.de> * Add tests for AWLs "Fix param-filter that checks if a parameter is defined" * Add test for AWLs "Fix param-filter for multi-value parameters with TYPE=T1,T2 format" and update 2044 accordingly * Add tests for AWLs "Fix GetProperties: Select properties with group prefix" * Add tests for AWLs "Fix: GetProperties must treat property names as case-insensitive" 2021-02-07 Andrew Ruthven <puck@catalyst.net.nz> * Only return the fields that we need for the test 2021-02-06 Andrew Ruthven <puck@catalyst.net.nz> * CI: Compress the Apache log files * CI: Ensure DAViCal can write to log files * CI: Turn on debug logging for all the test runs * Include the UID of the card which caused us to hit the RRULE limit * Enable debug logging in CI * Only return what we're testing, makes it easier to understand regressions * Add test for anyof 2021-02-05 Florian Schlichting <fsfs@debian.org> * CI: do not clobber apache logs * update 2038-REPORT-addressbook-query after AWL's param-filter: fix a typo / explode multivalue commit 2021-02-04 Florian Schlichting <fsfs@debian.org> * correct test results after AWL merges of mstilkerich/awl-fix_abookquery_paramnotdef and mstilkerich/awl-fix_support_anyof_propfilter * add two more reports testing an allof prop-filter and an anyof text-match prop-filter * cardquery: ensure restriction to target collection remains in force even when we find that we need a post_filter step and thus throw away the SQL * add a REPORT for a property with multiple values, not all of which match the is-not-defined filter (carddavclient's ParamNotDefinedSome test) * add 4 VCARDs from carddavclient AddressbookQueryTest 2021-02-04 Andrew Ruthven <puck@catalyst.net.nz> * Correctly exclude cards where TYPE is not set on TEL records. * Fix the test result and hopefully make the description clearer * I always get whitespace changes * Add a bit more info about various suites, and how to time timezone 2021-02-03 Florian Schlichting <fsfs@debian.org> * fix PHP8 deprecation warnings: "Required parameter X follows optional parameter Y" 2021-01-31 Jan Hicken <jan.hicken@posteo.de> * Add default value for errcontext variable in error handler function * Use brackets instead of curly braces for string offset access 2021-02-03 Florian Schlichting <fsfs@debian.org> * CI: add build_buster_latestphp 2021-02-02 Florian Schlichting <fsfs@debian.org> * CI: build and test on Debian unstable, then several stable releases relevant to our users * Normalize "100 Continue" headers 2021-01-24 Andrew Ruthven <andrew@etc.gen.nz> * Test case for awl-fix_abookquery_negated_propnotdef 2021-02-01 Andrew Ruthven <puck@catalyst.net.nz> * Test case for negated values in awl-fix_abookquery_paramtextmatch 2020-07-22 Piotr Filip <6465816-piotrfilip@users.noreply.gitlab.com> * fix: events with recurrence rule are sometimes counted one too many times in freebusy * test: remove dependency on the current date 2021-01-25 Andrew Ruthven <andrew@etc.gen.nz> * Update test results with new timezone data 2021-01-24 Andrew Ruthven <andrew@etc.gen.nz> * Ignore zones.h and zones.tab * To start with there are no timezones in a fresh database * Make the runs deterministic * Fix up update-tzdata.sh so it'll run * Test case for awl-fix_abookquery_negated_propnotdef * Test case for awl-fix_abookquery_paramtextmatch * Test case for awl-fix_abookquery_paramtextmatch * Add help option for regression tests * Update some more results based on current regression tests 2021-01-23 Andrew Ruthven <puck@catalyst.net.nz> * Add test secondary (or more) properties 2020-04-14 Florian Schlichting <fsfs@debian.org> * gitlab-ci: use latest Debian stable (fixes #221)
2021-03-19py-django-binary-database-files: updated to 1.0.14adam4-123/+9
1.0.14: Bug fixes
2021-03-19py-django-mptt: updated to 0.12.0adam2-7/+7
0.12 Fixed a few bugs and added a few features. Reformatted the code using isort and black. Other, undocumented changes. Please help out.
2021-03-19py-django-treebeard: updated to 4.5.1adam3-35/+21
Release 4.5.1 Removed unnecessary default in MP's depth field. Release 4.5 Add support for custom primary key fields with custom names. Add support for Python 3.9. Add support for MSSQL 2019. Add Code of conduct Removed outdated Sqlite workaround code Remove last remains of Python 2.7 code Use Pytest-django and fixtures for testing
2021-03-19py-drf-nested-routers: updated to 0.93.3adam2-7/+7
0.93.3: Unknown changes
2021-03-18Add hackernews-tuipin1-1/+2
2021-03-18www/hackernews-tui: import packagepin5-0/+667
hackernews_tui is a Terminal UI to browse Hacker News written in Rust. The application mainly consists of the following views: -Story View-Front Page displaying a list of stories in front page of Hacker News -Comment View` displaying a list of comments in a story -Story Search View displaying a search bar and a list of stories matching the search query.
2021-03-18webkit-gtk: Update to 2.30.6leot3-10/+10
Changes: 2.30.6 ------ - Update user agent quirks again for Google Docs and Google Drive - Fix several crashes and rendering issues.
2021-03-18py-cloudfiles: removed (obsolete)adam5-60/+1
2021-03-18py-hstspreload: removedadam5-39/+1
2021-03-16stagit: update to 0.9.5.fcambus2-7/+7
ChangeLog: - change STAGIT_BASEURL to an -u option and also update the example script - add $STAGIT_BASEURL environment variable to make Atom links absolute - README: mention tags.xml feature - micro-optimization: fputc (function) -> putc (macro/inline function) - fix warning with libgit2 v0.99+, remain compatible with older versions - add abbreviated commit hash to submodule file - add meta viewport for scaling on mobile - style.css: improve contrast - use size_t to count lines - avoid shadowed `name' global variable - refs_cmp: remove unneeded cast - use LEN() macros for arrays
2021-03-16py-httpx: updated to 0.17.1adam2-7/+7
0.17.1 Fixed * Type annotation on `CertTypes` allows `keyfile` and `password` to be optional. * Fix httpcore pinned version.
2021-03-16py-urllib3: updated to 1.26.4adam2-7/+7
1.26.4 * Changed behavior of the default ``SSLContext`` when connecting to HTTPS proxy during HTTPS requests. The default ``SSLContext`` now sets ``check_hostname=True``.
2021-03-15py-django-admin-sortable2: updated to 0.7.8adam2-7/+7
0.7.8 Fix: Last item not displayed in stacked- and tabular inline admins, if model doesn't have add permission.
2021-03-15luakit: Update to 2.3nia4-46/+14
## [2.3] ### Added - Added Gopher protocol support, see comment in rc.lua. - Added two commands to clear website data (:clear-data, :clear-favicon-db). - Added dark mode support setting `application.prefer_dark_mode`. - The tabmenu plugin is now included in luakit (:tabmenu). ### Changed - Removed debug symbol generation for default make. - Changed the C standard from gnu99 to c11 because Webkit wants it. - The proxy module remembers when no proxy or system proxy was used last. - The proxy widget is hidden when proxy "None" is active. ### Fixed - Fixed bounding box not spanning over whole element. - Fixed an issue where styled hint labels caused intransparent bounding boxes. - Fixed a race condition when a tab is closed on NetBSD. - Do not execute "git ls-files" when luakit is not a git repository ### Update information - The gopher module needs `luasocket` installed.
2021-03-14Update to version 5.7morr3-9/+22
Highlights of this release: - block editor changes - WP Admin: a new color palette - from HTTP to HTTPS in a single click - new robots API - ongoing cleanup after update to jQuery 3.5.1 - lazy-load your iframes # Lazy-load your iframes More details here: https://wordpress.org/support/wordpress-version/version-5.7/
2021-03-14gitea: re-generate the frontend fileskhorben3-177/+85
It turns out this new version of Gitea does need newer frontend files after all. A copy has been uploaded to ftp.netbsd.org as documented. Bumps PKGREVISION.
2021-03-13www/squid4: update to 4.14taca2-9/+7
Changes in squid-4.14 (02 Feb 2021): - Regression Fix: support for non-lowercase Transfer-Encoding value - Regression Fix: cachemgr.cgi wrong 403 response to authenticated menu URIs - Bug 5076: WCCP Security Info incorrect - Bug 5073: Compile error: index was not declared in this scope - Bug 5065: url_rewrite_program documentation update - Bug 3074 pt2: improved handling of URI paths implicit '/' - Fix transactions exceeding client_lifetime logged as _ABORTED
2021-03-12kore: add an 'acme' build option to allow compiling in ACME support.fcambus1-2/+9
2021-03-12firefox-l10n: Update to 86.0.1ryoon2-387/+387
* Sync with www/firefox-86.0.1.
2021-03-12firefox: Update to 86.0.1ryoon2-7/+7
Changelog: 86.0.1 Firefox Release March 11, 2021 Version 86.0.1, first offered to Release channel users on March 11, 2021 ------------------------------------------------------------------------------- # Fixed * Fixed an issue on Apple Silicon machines that caused Firefox to be unresponsive after system sleep (bug 1682713) * Fixed an issue causing windows to gain or lose focus unexpectedly (bug 1694927) * Fixed truncation of date and time widgets due to incorrect width calculation (bug 1695578) * Fixed an issue causing unexpected behavior with extensions managing tab groups (bug 1694699) * Fixed a frequent Linux crash on browser launch (bug 1694670)
2021-03-12gitea: updated to 1.13.4khorben3-11/+291
This includes the following security fixes; in 1.13.0: * Add Allow-/Block-List for Migrate & Mirrors * Prevent git operations for inactive users * Disallow urlencoded new lines in git protocol paths if there is a port * Mitigate Security vulnerability in the git hook feature * Disable DSA ssh keys by default * Set TLS minimum version to 1.2 * Use argon as default password hash algorithm In 1.13.1: * Hide private participation in Orgs * Fix escaping issue in diff In 1.13.2: * Prevent panic on fuzzer provided string * Add secure/httpOnly attributes to the lang cookie In 1.13.3: * Turn default hash password algorithm back to pbkdf2 from argon2 until we find a better one In 1.13.4: * Fix issue popups