summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2022-07-14www/nginx: update third-party modules:osa3-12/+12
o) http_push from 1.2.15 to 1.3.0, [1] o) geoip2 from 3.3 to 3.4, [2] References: 1. https://github.com/slact/nchan/compare/v1.2.15...v1.3.0 2. https://github.com/leev/ngx_http_geoip2_module/compare/3.3...3.4 Bump PKGREVISION.
2022-07-14www/nginx-devel: update third-party geoip2 moduleosa3-8/+8
It's compatible with 1.23.0 now. Bump PORTREVISION.
2022-07-14www/nginx: update NGINX JavaScript module to 0.7.5osa4-10/+11
Fix PLIST for the third-party upload module. Bump PKGREVISION.
2022-07-14www/nginx-devel: change PKGNAME to nginx-develosa4-7/+11
Switch to the https protocol for MASTER_SITES. Update distinfo with the checksums of recently added patches. Fix PLIST for the third-party http_upload module. Bump PKGREVISION.
2022-07-13www/nginx-devel: update 1.22.0 -> 1.23.0osa6-46/+233
Also, update third-party modules: o) headers_more: 0.33 -> d502e41 o) http_push: 1.2.15 -> 1.3.0 o) naxsi: 1.3 -> 29793dc o) njs: 0.7.4 -> 0.7.5 Patches obtained from the corresponding port in FreeBSD ports tree. <ChangeLog> *) Change in internal API: now header lines are represented as linked lists. *) Change: now nginx combines arbitrary header lines with identical names when sending to FastCGI, SCGI, and uwsgi backends, in the $r->header_in() method of the ngx_http_perl_module, and during lookup of the "$http_...", "$sent_http_...", "$sent_trailer_...", "$upstream_http_...", and "$upstream_trailer_..." variables. *) Bugfix: if there were multiple "Vary" header lines in the backend response, nginx only used the last of them when caching. *) Bugfix: if there were multiple "WWW-Authenticate" header lines in the backend response and errors with code 401 were intercepted or the "auth_request" directive was used, nginx only sent the first of the header lines to the client. *) Change: the logging level of the "application data after close notify" SSL errors has been lowered from "crit" to "info". *) Bugfix: connections might hang if nginx was built on Linux 2.6.17 or newer, but was used on systems without EPOLLRDHUP support, notably with epoll emulation layers; the bug had appeared in 1.17.5. Thanks to Marcus Ball. *) Bugfix: nginx did not cache the response if the "Expires" response header line disabled caching, but following "Cache-Control" header line enabled caching. </ChangeLog>
2022-07-13Revbump all Go packages after go118 updatebsiegert10-18/+20
2022-07-13www/ruby-rails70: update to 7.0.3.1taca4-16/+16
Rails 7.0.3.1 (2022-07-12) updates databases/ruby-activerecord70 only. databases/ruby-activerecord70 * Change ActiveRecord::Coders::YAMLColumn default to safe_load This adds two new configuration options The configuration options are as follows: o config.active_storage.use_yaml_unsafe_load When set to true, this configuration option tells Rails to use the old "unsafe" YAML loading strategy, maintaining the existing behavior but leaving the possible escalation vulnerability in place. Setting this option to true is *not* recommended, but can aid in upgrading. o config.active_record.yaml_column_permitted_classes The "safe YAML" loading method does not allow all classes to be deserialized by default. This option allows you to specify classes deemed "safe" in your application. For example, if your application uses Symbol and Time in serialized data, you can add Symbol and Time to the allowed list as follows: config.active_record.yaml_column_permitted_classes = [Symbol, Date, Time] [CVE-2022-32224]
2022-07-13www/ruby-rails61: update to 6.1.6.1taca4-16/+16
Rails 6.1.6.1 (2022-07-12) updates databases/ruby-activerecord61 only. databases/ruby-activerecord61 * Change ActiveRecord::Coders::YAMLColumn default to safe_load This adds two new configuration options The configuration options are as follows: o config.active_storage.use_yaml_unsafe_load When set to true, this configuration option tells Rails to use the old "unsafe" YAML loading strategy, maintaining the existing behavior but leaving the possible escalation vulnerability in place. Setting this option to true is *not* recommended, but can aid in upgrading. o config.active_record.yaml_column_permitted_classes The "safe YAML" loading method does not allow all classes to be deserialized by default. This option allows you to specify classes deemed "safe" in your application. For example, if your application uses Symbol and Time in serialized data, you can add Symbol and Time to the allowed list as follows: config.active_record.yaml_column_permitted_classes = [Symbol, Date, Time] [CVE-2022-32224]
2022-07-13www/ruby-rails60: update to 6.0.5.1taca4-16/+16
Rails 6.0.5.1 (2022-07-12) updates databases/ruby-activerecord60 only. databases/ruby-activerecord60 * Change ActiveRecord::Coders::YAMLColumn default to safe_load This adds two new configuration options The configuration options are as follows: o config.active_storage.use_yaml_unsafe_load When set to true, this configuration option tells Rails to use the old "unsafe" YAML loading strategy, maintaining the existing behavior but leaving the possible escalation vulnerability in place. Setting this option to true is *not* recommended, but can aid in upgrading. o config.active_record.yaml_column_permitted_classes The "safe YAML" loading method does not allow all classes to be deserialized by default. This option allows you to specify classes deemed "safe" in your application. For example, if your application uses Symbol and Time in serialized data, you can add Symbol and Time to the allowed list as follows: config.active_record.yaml_column_permitted_classes = [Symbol, Date, Time] [CVE-2022-32224]
2022-07-13www/ruby-rails52: update to 5.2.8.1taca4-16/+16
Rails 5.2.8.1 (2022-07-12) updates databases/ruby-activerecord52 only. databases/ruby-activerecord52 * Change ActiveRecord::Coders::YAMLColumn default to safe_load This adds two new configuration options The configuration options are as follows: o config.active_storage.use_yaml_unsafe_load When set to true, this configuration option tells Rails to use the old "unsafe" YAML loading strategy, maintaining the existing behavior but leaving the possible escalation vulnerability in place. Setting this option to true is *not* recommended, but can aid in upgrading. o config.active_record.yaml_column_permitted_classes The "safe YAML" loading method does not allow all classes to be deserialized by default. This option allows you to specify classes deemed "safe" in your application. For example, if your application uses Symbol and Time in serialized data, you can add Symbol and Time to the allowed list as follows: config.active_record.yaml_column_permitted_classes = [Symbol, Date, Time] [CVE-2022-32224]
2022-07-13*: Revert nodeversion.mk changes.jperkin1-2/+2
The intention was to avoid nodejs-18.x which no longer supports older platforms, but that didn't work as pbulk still chooses the latest anyway, so we'll need to fix that a different way. It also has the downside of tying them to a specific version, which meant you could no longer use the npm or yarn package managers with anything other than the default nodejs version.
2022-07-13lua-web-sanitize: Update to 1.3.0. Fix running tests.nia3-9/+15
This update includes a fix for the stack overflow (too many captures) error produced by LPeg when parsing too large of an input.
2022-07-12grafana: Update to 9.0.2triaxx4-1505/+2140
upstream changes: ----------------- 9.0.2 (2022-06-28) Features and enhancements o Alerting: Add support for images in Pushover alerts. #51372, @grobinson-grafana o Alerting: Don't stop the migration when alert rule tags are invalid. #51253, @gotjosh o Alerting: Don't stop the migration when alert rule tags are invalid (…. #51341, @gotjosh o Alerting: Skip the default data source if incompatible. #51452, @gillesdemey o AzureMonitor: Parse non-fatal errors for Logs. #51320, @andresmgot o OAuth: Restore debug log behavior. #51244, @Jguer o Plugins: Improved handling of symlinks. #51324, @marefr Bug fixes o Alerting: Code-gen parsing of URL parameters and fix related bugs. #51353, @alexweav o Alerting: Code-gen parsing of URL parameters and fix related bugs. #50731, @alexweav o Annotations: Fix annotation autocomplete causing panels to crash. #51164, @ashharrison90 o Barchart: Fix warning not showing. #51190, @joshhunt o CloudWatch: Enable custom session duration in AWS plugin auth. #51322, @sunker o Dashboards: Fixes issue with the initial panel layout counting as an unsaved change. #51315, @JoaoSilvaGrafana o Plugins: Use a Grafana specific SDK logger implementation for core plugins. #51229, @marefr o Search: Fix pagination in the new search page. #51366, @ArturWierzbicki Changes for previous releases: https://github.com/grafana/grafana/blob/v9.0.2/CHANGELOG.md
2022-07-11www/seamonkey: accept python310 as well as python3[6789]dholland1-2/+2
2022-07-11py-test-httpbin: updated to 1.0.2adam2-6/+6
1.0.2 Switch from travis to github actions This will be the last release to support Python 2.6, 2.7 or 3.6
2022-07-10py-test-httpbin: update to 1.0.1.wiz2-8/+14
* fix redirect Location to have "https://" scheme (thanks @immerrr) * Include regression tests in PyPI tarball by (thanks @kmosiejczuk)
2022-07-10py-httpbin: add patch for compatibility with py-werkzeug 2.1wiz3-3/+20
Bump PKGREVISION.
2022-07-10py-pelican: clean up versioned_dependencies usewiz1-4/+2
2022-07-09firefox-l10n: Update to 102.0.1ryoon2-297/+297
* Sync with www/firefox-102.0.1.
2022-07-09firefox: Update to 102.0.1ryoon2-6/+6
Changelog: Fixed * Fixed bookmark shortcut creation by dragging to Windows File Explorer and dropping partially broken (bug 1774683) * Fixed bookmarks sidebar flashing white when opened in dark mode (bug 1776157) * Fixed multilingual spell checking not working with content in both English and a non-Latin alphabet (bug 1773802) * Developer tools: Fixed an issue where the console output keep getting scrolled to the bottom when the last visible message is an evaluation result (bug 1776262) * Fixed Delete cookies and site data when Firefox is closed checkbox getting disabled on startup (bug 1777419) * Various stability fixes
2022-07-08varnish: does not support python 2.xwiz1-3/+4
2022-07-08nghttp2: does not support python 2.xwiz1-1/+3
2022-07-08py-betamax: mark as only for python 3.xwiz1-3/+3
2022-07-08py-cfscrape: update to 2.1.1.wiz2-7/+8
2.1.1 Bugfix 2.1.0 Updated to handle latest Cloudflare IUAM challenge.
2022-07-08py-publicsuffix2: update to 2.20191221.wiz2-9/+10
2019-12-19 publicsuffix2 2.20191219 * Add new strict mode to get_tld() by @hiratara . * Update TLD list * Add tests from Mozilla test suite
2022-07-08py-urllib3: updated to 1.26.10adam2-6/+6
1.26.10 (2022-07-07) -------------------- * Removed support for Python 3.5 * Fixed an issue where a ``ProxyError`` recommending configuring the proxy as HTTP instead of HTTPS could appear even when an HTTPS proxy wasn't configured.
2022-07-07arcticfox: update to 39.2nia4-4322/+18
Many bug fixes backported from Firefox proper.
2022-07-06mozilla packages based on firefox78 are incompatible with python 3.10nia1-2/+2
due to a change to the collections library. Right now commit a workaround until a proper fix appears.
2022-07-06py-channels: updated to 3.0.5adam2-7/+6
3.0.5 Bugfixes & Small Changes Removed use of providing_args keyword argument to consumer started signal, as support for this was removed in Django 4.0. Backwards Incompatible Changes Drops support for end-of-life Python 3.6 and Django 3.0 and 3.1.
2022-07-06git: updated to 2.37.0adam1-2/+1
Git v2.37 Release Notes ======================= UI, Workflows & Features * "vimdiff[123]" mergetool drivers have been reimplemented with a more generic layout mechanism. * "git -v" and "git -h" are now understood as "git --version" and "git --help". * The temporary files fed to external diff command are now generated inside a new temporary directory under the same basename. * "git log --since=X" will stop traversal upon seeing a commit that is older than X, but there may be commits behind it that is younger than X when the commit was created with a faulty clock. A new option is added to keep digging without stopping, and instead filter out commits with timestamp older than X. * "git -c branch.autosetupmerge=simple branch $A $B" will set the $B as $A's upstream only when $A and $B shares the same name, and "git -c push.default=simple" on branch $A would push to update the branch $A at the remote $B came from. Also more places use the sole remote, if exists, before defaulting to 'origin'. * A new doc has been added that lists tips for tools to work with Git's codebase. * "git remote -v" now shows the list-objects-filter used during fetching from the remote, if available. * With the new http.curloptResolve configuration, the CURLOPT_RESOLVE mechanism that allows cURL based applications to use pre-resolved IP addresses for the requests is exposed to the scripts. * "git add -i" was rewritten in C some time ago and has been in testing; the reimplementation is now exposed to general public by default. * Deprecate non-cone mode of the sparse-checkout feature. * Introduce a filesystem-dependent mechanism to optimize the way the bits for many loose object files are ensured to hit the disk platter. * The "do not remove the directory the user started Git in" logic, when Git cannot tell where that directory is, is disabled. Earlier we refused to run in such a case. * A mechanism to pack unreachable objects into a "cruft pack", instead of ejecting them into loose form to be reclaimed later, has been introduced. * Update the doctype written in gitweb output to xhtml5. * The "transfer.credentialsInURL" configuration variable controls what happens when a URL with embedded login credential is used on either "fetch" or "push". Credentials are currently only detected in `remote.<name>.url` config, not `remote.<name>.pushurl`. * "git revert" learns "--reference" option to use more human-readable reference to the commit it reverts in the message template it prepares for the user. * Various error messages that talk about the removal of "--preserve-merges" in "rebase" have been strengthened, and "rebase --abort" learned to get out of a state that was left by an earlier use of the option. Performance, Internal Implementation, Development Support etc. * The performance of the "untracked cache" feature has been improved when "--untracked-files=<mode>" and "status.showUntrackedFiles" are combined. * "git stash" works better with sparse index entries. * "git show :<path>" learned to work better with the sparse-index feature. * Introduce and apply coccinelle rule to discourage an explicit comparison between a pointer and NULL, and applies the clean-up to the maintenance track. * Preliminary code refactoring around transport and bundle code. * "sparse-checkout" learns to work better with the sparse-index feature. * A workflow change for translators are being proposed. git.pot is no longer version controlled and it is local responsibility of translators to generate it. * Plug the memory leaks from the trickiest API of all, the revision walker. * Rename .env_array member to .env in the child_process structure. * The fsmonitor--daemon handles even more corner cases when watching filesystem events. * A new bug() and BUG_if_bug() API is introduced to make it easier to uniformly log "detect multiple bugs and abort in the end" pattern. Fixes since v2.36 ----------------- * "git submodule update" without pathspec should silently skip an uninitialized submodule, but it started to become noisy by mistake. (merge 4f1ccef87c gc/submodule-update-part2 later to maint). * "diff-tree --stdin" has been broken for about a year, but 2.36 release broke it even worse by breaking running the command with <pathspec>, which in turn broke "gitk" and got noticed. This has been corrected by aligning its behaviour to that of "log". (merge f8781bfda3 jc/diff-tree-stdin-fix later to maint). * Regression fix for 2.36 where "git name-rev" started to sometimes reference strings after they are freed. (merge 45a14f578e rs/name-rev-fix-free-after-use later to maint). * "git show <commit1> <commit2>... -- <pathspec>" lost the pathspec when showing the second and subsequent commits, which has been corrected. (merge 5cdb38458e jc/show-pathspec-fix later to maint). * "git fast-export -- <pathspec>" lost the pathspec when showing the second and subsequent commits, which has been corrected. (merge d1c25272f5 rs/fast-export-pathspec-fix later to maint). * "git format-patch <args> -- <pathspec>" lost the pathspec when showing the second and subsequent commits, which has been corrected. (merge 91f8f7e46f rs/format-patch-pathspec-fix later to maint). * "git clone --origin X" leaked piece of memory that held value read from the clone.defaultRemoteName configuration variable, which has been plugged. (merge 6dfadc8981 jc/clone-remote-name-leak-fix later to maint). * Get rid of a bogus and over-eager coccinelle rule. (merge 08bdd3a185 jc/cocci-xstrdup-or-null-fix later to maint). * The path taken by "git multi-pack-index" command from the end user was compared with path internally prepared by the tool without first normalizing, which lead to duplicated paths not being noticed, which has been corrected. (merge 11f9e8de3d ds/midx-normalize-pathname-before-comparison later to maint). * Correct choices of C compilers used in various CI jobs. (merge 3506cae04f ab/cc-package-fixes later to maint). * Various cleanups to "git p4". (merge 4ff0108d9e jh/p4-various-fixups later to maint). * The progress meter of "git blame" was showing incorrect numbers when processing only parts of the file. (merge e5f5d7d42e ea/progress-partial-blame later to maint). * "git rebase --keep-base <upstream> <branch-to-rebase>" computed the commit to rebase onto incorrectly, which has been corrected. (merge 9e5ebe9668 ah/rebase-keep-base-fix later to maint). * Fix a leak of FILE * in an error codepath. (merge c0befa0c03 kt/commit-graph-plug-fp-leak-on-error later to maint). * Avoid problems from interaction between malloc_check and address sanitizer. (merge 067109a5e7 pw/test-malloc-with-sanitize-address later to maint). * The commit summary shown after making a commit is matched to what is given in "git status" not to use the break-rewrite heuristics. (merge 84792322ed rs/commit-summary-wo-break-rewrite later to maint). * Update a few end-user facing messages around EOL conversion. (merge c970d30c2c ah/convert-warning-message later to maint). * Trace2 documentation updates. (merge a6c80c313c js/trace2-doc-fixes later to maint). * Build procedure fixup. (merge 1fbfd96f50 mg/detect-compiler-in-c-locale later to maint). * "git pull" without "--recurse-submodules=<arg>" made submodule.recurse take precedence over fetch.recurseSubmodules by mistake, which has been corrected. (merge 5819417365 gc/pull-recurse-submodules later to maint). * "git bisect" was too silent before it is ready to start computing the actual bisection, which has been corrected. (merge f11046e6de cd/bisect-messages-from-pre-flight-states later to maint). * macOS CI jobs have been occasionally flaky due to tentative version skew between perforce and the homebrew packager. Instead of failing the whole CI job, just let it skip the p4 tests when this happens. (merge f15e00b463 cb/ci-make-p4-optional later to maint). * A bit of test framework fixes with a few fixes to issues found by valgrind. (merge 7c898554d7 ab/valgrind-fixes later to maint). * "git archive --add-file=<path>" picked up the raw permission bits from the path and propagated to zip output in some cases, without normalization, which has been corrected (tar output did not have this issue). (merge 6a61661967 jc/archive-add-file-normalize-mode later to maint). * "make coverage-report" without first running "make coverage" did not produce any meaningful result, which has been corrected. (merge 96ddfecc5b ep/coverage-report-wants-test-to-have-run later to maint). * The "--current" option of "git show-branch" should have been made incompatible with the "--reflog" mode, but this was not enforced, which has been corrected. (merge 41c64ae0e7 jc/show-branch-g-current later to maint). * "git fetch" unnecessarily failed when an unexpected optional section appeared in the output, which has been corrected. (merge 7709acf7be jt/fetch-peek-optional-section later to maint). * The way "git fetch" without "--update-head-ok" ensures that HEAD in no worktree points at any ref being updated was too wasteful, which has been optimized a bit. (merge f7400da800 os/fetch-check-not-current-branch later to maint). * "git fetch --recurse-submodules" from multiple remotes (either from a remote group, or "--all") used to make one extra "git fetch" in the submodules, which has been corrected. (merge 0353c68818 jc/avoid-redundant-submodule-fetch later to maint). * With a recent update to refuse access to repositories of other people by default, "sudo make install" and "sudo git describe" stopped working, which has been corrected. (merge 6b11e3d52e cb/path-owner-check-with-sudo-plus later to maint). * The tests that ensured merges stop when interfering local changes are present did not make sure that local changes are preserved; now they do. (merge 4b317450ce jc/t6424-failing-merge-preserve-local-changes later to maint). * Some real problems noticed by gcc 12 have been fixed, while false positives have been worked around. * Update the version of FreeBSD image used in Cirrus CI. (merge c58bebd4c6 pb/use-freebsd-12.3-in-cirrus-ci later to maint). * The multi-pack-index code did not protect the packfile it is going to depend on from getting removed while in use, which has been corrected. (merge 4090511e40 tb/midx-race-in-pack-objects later to maint). * Teach "git repack --geometric" work better with "--keep-pack" and avoid corrupting the repository when packsize limit is used. (merge 66731ff921 tb/geom-repack-with-keep-and-max later to maint). * The documentation on the interaction between "--add-file" and "--prefix" options of "git archive" has been improved. (merge a75910602a rs/document-archive-prefix later to maint). * A git subcommand like "git add -p" spawns a separate git process while relaying its command line arguments. A pathspec with only negative elements was mistakenly passed with an empty string, which has been corrected. (merge b02fdbc80a jc/all-negative-pathspec later to maint). * With a more targeted workaround in http.c in another topic, we may be able to lift this blanket "GCC12 dangling-pointer warning is broken and unsalvageable" workaround. (merge 419141e495 cb/buggy-gcc-12-workaround later to maint). * A misconfigured 'branch..remote' led to a bug in configuration parsing. (merge f1dfbd9ee0 gc/zero-length-branch-config-fix later to maint). * "git -c diff.submodule=log range-diff" did not show anything for submodules that changed in the ranges being compared, and "git -c diff.submodule=diff range-diff" did not work correctly. Fix this by including the "--submodule=short" output unconditionally to be compared. * In Git 2.36 we revamped the way how hooks are invoked. One change that is end-user visible is that the output of a hook is no longer directly connected to the standard output of "git" that spawns the hook, which was noticed post release. This is getting corrected. (merge a082345372 ab/hooks-regression-fix later to maint). * Updating the graft information invalidates the list of parents of in-core commit objects that used to be in the graft file. * "git show-ref --heads" (and "--tags") still iterated over all the refs only to discard refs outside the specified area, which has been corrected. (merge c0c9d35e27 tb/show-ref-optim later to maint). * Remove redundant copying (with index v3 and older) or possible over-reading beyond end of mmapped memory (with index v4) has been corrected. (merge 6d858341d2 zh/read-cache-copy-name-entry-fix later to maint). * Sample watchman interface hook sometimes failed to produce correctly formatted JSON message, which has been corrected. (merge 134047b500 sn/fsmonitor-missing-clock later to maint). * Use-after-free (with another forget-to-free) fix. (merge 323822c72b ab/remote-free-fix later to maint). * Remove a coccinelle rule that is no longer relevant. (merge b1299de4a1 jc/cocci-cleanup later to maint). * Other code cleanup, docfix, build fix, etc. (merge e6b2582da3 cm/reftable-0-length-memset later to maint). (merge 0b75e5bf22 ab/misc-cleanup later to maint). (merge 52e1ab8a76 ea/rebase-code-simplify later to maint). (merge 756d15923b sg/safe-directory-tests-and-docs later to maint). (merge d097a23bfa ds/do-not-call-bug-on-bad-refs later to maint). (merge c36c27e75c rs/t7812-pcre2-ws-bug-test later to maint). (merge 1da312742d gf/unused-includes later to maint). (merge 465b30a92d pb/submodule-recurse-mode-enum later to maint). (merge 82b28c4ed8 km/t3501-use-test-helpers later to maint). (merge 72315e431b sa/t1011-use-helpers later to maint). (merge 95b3002201 cg/vscode-with-gdb later to maint). (merge fbe5f6b804 tk/p4-utf8-bom later to maint). (merge 17f273ffba tk/p4-with-explicity-sync later to maint). (merge 944db25c60 kf/p4-multiple-remotes later to maint). (merge b014cee8de jc/update-ozlabs-url later to maint). (merge 4ec5008062 pb/ggg-in-mfc-doc later to maint). (merge af845a604d tb/receive-pack-code-cleanup later to maint). (merge 2acf4cf001 js/ci-gcc-12-fixes later to maint). (merge 05e280c0a6 jc/http-clear-finished-pointer later to maint). (merge 8c49d704ef fh/transport-push-leakfix later to maint). (merge 1d232d38bd tl/ls-tree-oid-only later to maint). (merge db7961e6a6 gc/document-config-worktree-scope later to maint). (merge ce18a30bb7 fs/ssh-default-key-command-doc later to maint).
2022-07-05webkit-gtk: Update to 2.36.4leot3-10/+9
Changes: 2.36.4 ====== - Fix the new ATSPI accessibility implementation to add the missing Collection interface for the loaded document. - Fix the MediaSession implementation to make the MPRIS object names more sandbox friendly, which plays better with Flatpak and WebKit's own Bubblwrap-based sandboxing. - Fix leaked Web Processes in some particular situations. - Fix the build with media capture support enabled. - Fix cross-compilation when targeting 64-bit ARM. - Fix several crashes and rendering issues.
2022-07-05www/jira-cli: Update to 1.0.0fox4-1717/+400
Changes since 0.3.0: We reached v1.0.0 ## Breaking changes - fix!: Replace limit flag with paginate by @ankitpokhrel in #359 - fix!: Append components on edit instead of overriding by @ankitpokhrel in #368 - feat!: Append label to an issue, show labels at issue list view by @stchar in #300 - refactor!: Move boards and project list to subcommand by @ankitpokhrel in #314 ## What's added? - feat: Support custom fields on issue create by @ankitpokhrel in #319 - feat: Add support to read from .netrc by @adolsalamanca in #329 - feat: Add support for OS keyrings/-chains by @boyvanamstel in #348 - feat: Support auth with personal access tokens by @marek-veber / @ankitpokhrel in #327 - feat: Allow to set fixVersions on issue creation by @ankitpokhrel in #276 - feat: Allow insecure TLS by @ankitpokhrel in #305 - feat: Add --no-browser option to open cmd by @ankitpokhrel in #308 - feat: Add search option for boards on jira init by @ankitpokhrel in #322 - feat: Add issues unlink command by @sushilkg in #347 - feat: Support refresh for issues list by @GZLiew in #325 - feat: Ability to delete issue by @ankitpokhrel in #336 - feat: Allow to set custom fields on epic create by @ankitpokhrel in #364 - feat: Allow to edit release-info/fixVersions by @ankitpokhrel in #365 - feat: Allow removing labels on edit by @ankitpokhrel in #371 - feat: Support creating issues with custom subtask type by @danobi in #372 - feat: Allow removing component on edit by @ankitpokhrel in #374 - feat: Allow removing fixVersions on edit by @ankitpokhrel in #376 - feat: Support custom fields on issue edit by @ankitpokhrel in #377 - feat: Jira init non-interactive by @ankitpokhrel in #381 - feat: Show subtasks in issue view by @ankitpokhrel in #382 - feat: Allow project filter in raw jql by @ankitpokhrel in #395 ## What's fixed? - fix: Makefile compatiblity with Make 3.81 by @danmichaelo in #252 - fix: Config generation issue by @ankitpokhrel in #275 - fix(cfg): Strip trailing slash on server name by @ankitpokhrel in #295 - fix: Jira client should respect timeout opt by @ankitpokhrel in #304 - fix: Respect GLAMOUR_STYLE env on issue view by @ankitpokhrel in #317 - fix: Get subtask handle from config by @ankitpokhrel in #296 - fix: Jira wiki parser by @ankitpokhrel in #326 - fix: Display correctly columns in list sprint command help by @adolsalamanca in #320 - fix: Panic on empty sub-list by @ankitpokhrel in #330 - fix: Issue with assigning user by @ankitpokhrel in #321 - fix: OOM bug on issue view by @ankitpokhrel in #350 - fix: Assign parent key as is on edit by @ankitpokhrel in #351 - fix: Add additional check for total boards returned by @ankitpokhrel in #360 - fix: Issue with query param in user assignment by @ankitpokhrel in #380 - fix: Subtask clone by @ankitpokhrel in #383 - fix: editing issue with custom field in non interactive mode by @DrudgeRajen in #391 ## Dependency updates - dep: Upgrade charmbracelet/glamour to 0.5.0 by @ankitpokhrel in #309 - dep: Upgrade rivo/tview to latest by @ankitpokhrel in #310 - dep: Upgrade outdated packages by @ankitpokhrel in #311 - dep: Upgrade cobra to 1.4.0 by @ankitpokhrel in #373 ## Other notable changes - Use md ext for tmp file to trigger vim syntax by @ElementalWarrior in #318 Full Changelog: https://github.com/ankitpokhrel/jira-cli/compare/v0.3.0...v1.0.0
2022-07-05firefox: 102 requires nss>=3.79gutteridge1-3/+3
2022-07-04firefox-l10n: Update to 102.0ryoon2-298/+297
* Sync with www/firefox-102.0.
2022-07-04firefox: Update to 102.0ryoon5-3081/+3033
Changelog: New * Tired of too many windows crowding your screen? You can now disable automatic opening of the download panel every time a new download starts. Read more. * Firefox now mitigates query parameter tracking when navigating sites in ETP strict mode. Fixed * When using a screen reader on Windows, pressing enter to activate an element no longer fails or clicks the wrong element and/or another application window. For those blind or with very limited vision, this technology reads out loud what is on the screen, and users can adapt them to their needs (now, on our platform, without errors). * Various security fixes. Changed * Improved security by moving audio decoding into a separate process with stricter sandboxing, thus improving process isolation. Enterprise * Various bug fixes and new policies have been implemented in the latest version of Firefox. You can find more information in the Firefox for Enterprise 102 Release Notes. * Firefox 102 is the new Extended Support Release (ESR). Firefox 91 ESR goes out of support on September 20, 2022. (See the 102 ESR release notes for more information) Developer * Developer Information * You can now filter style sheets in the Style Editor tab of our developer tools Web Platform * TransformStream and ReadableStream.pipeThrough have landed, allowing you to pipe from a ReadableStream to a WritableStream, executing a transformation on each chunk. * ReadableStream, TransformStream, and WritableStream are all transferable now. * Firefox now supports Content-Security-Policy (CSP) integration with WebAssembly. A document with a CSP that restricts scripts will no longer execute WebAssembly unless the policy uses 'unsafe-eval' or the new 'wasm-unsafe-eval' keyword. Security fixes: #CVE-2022-34479: A popup window could be resized in a way to overlay the address bar with web content #CVE-2022-34470: Use-after-free in nsSHistory #CVE-2022-34468: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI #CVE-2022-34482: Drag and drop of malicious image could have led to malicious executable and potential code execution #CVE-2022-34483: Drag and drop of malicious image could have led to malicious executable and potential code execution #CVE-2022-34476: ASN.1 parser could have been tricked into accepting malformed ASN.1 #CVE-2022-34481: Potential integer overflow in ReplaceElementsAt #CVE-2022-34474: Sandboxed iframes could redirect to external schemes #CVE-2022-34469: TLS certificate errors on HSTS-protected domains could be bypassed by the user on Firefox for Android #CVE-2022-34471: Compromised server could trick a browser into an addon downgrade #CVE-2022-34472: Unavailable PAC file resulted in OCSP requests being blocked #CVE-2022-34478: Microsoft protocols can be attacked if a user accepts a prompt #CVE-2022-2200: Undesired attributes could be set as part of prototype pollution #CVE-2022-34480: Free of uninitialized pointer in lg_init #CVE-2022-34477: MediaError message property leaked information on cross-origin same-site pages #CVE-2022-34475: HTML Sanitizer could have been bypassed via same-origin script via use tags #CVE-2022-34473: HTML Sanitizer could have been bypassed via use tags #CVE-2022-34484: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 #CVE-2022-34485: Memory safety bugs fixed in Firefox 102
2022-07-03libwebsockets: update to 4.3.0.wiz6-44/+19
v4.3.0 ====== - Add full CBOR stream parsing and writing support, with huge amount of test vectors and resumable printf type write apis See ./READMEs/README.cbor-lecp.md - Add COSE key and signing / validation support with huge amount of test vectors cose_sign[1] ES256/384/512, RS256/384/512 cose_mac0 HS256/384/512 See ./READMEs/README.cbor-cose.md - JIT Trust: for constrained devices, provides a way to determine the trusted CA certs the peer requires, and instantiate just those. This allows generic client browsing without the overhead of ~130 x.509 CA certs in memory permanently. See ./READMEs/README.jit-trust.md - Add support for client Netscape cookie jar with caching - Secure Streams: issue LWSSSCS_EVENT_WAIT_CANCELLED state() when lws_cancel_service() called, so cross-thread events can be handled in SS - Actively assert() on attempt to destroy SS handles still active in the call stack, use DESTROY_ME returns instead so caller can choose how to handle it. - Improved Client Connection Error report strings for tls errors - SMP: Use a private fakewsi for PROTOCOL_INIT so pts cannot try to use the same one concurrently - MbedTLS v3 support for all release changes, as well as retaining support for v2.x - MQTT client: support QoS2 - Event lib ops can now be set at context creation time directly, bringing full event lib hooking to custom event loops. See minimal-http-server-eventlib-custom - Extra APIs to recover AKID and SKID from x.509 in mbedtls and openssl - Improve http redirect to handle h2-> h2 cleanly - IPv4+6 listen sockets on vhosts are now done with two separate sockets bound individually to AF_INET and AF_INET6 addresses, handled by the same vhost listen flow. - Improved tls restriction handling - Log contexts: allow objects to log into local logging contexts, by lws_context, vhost, wsi and ss handle. Each context has its own emit function and log level. See ./READMEs/README.logging.md - Upgrade compiler checking to default to -Werror -Wall -Wextra - Fault injection apis now also support pseudo-random number binding within a specified range, eg, --fault-injection "f1(10%),f1_delay(123..456)" - Remove LWS_WITH_DEPRECATED_THINGS, remove master branch - Interface binding now uses ipv6 scoring to select bind address v4.2.0 ====== - Sai coverage upgrades, 495 builds on 27 platforms, including OSX M1, Xenial, Bionic and Focal Ubuntu, Debian Sid and Buster on both 32 and 64-bit OS, and NetBSD, Solaris, FreeBSD, Windows, ESP32. Ctest run on more scenarios including all LWS_WITH_DISTRO_RECOMMENDED. More tests use valgrind if available on platform. - RFC7231 date and time parsing and retry-after wired up to lws_retry - `LWS_WITH_SUL_DEBUGGING` checks that no sul belonging to Secure Streams and wsi objects are left registered on destruction - Netlink monitoring on Linux dynamically tracks interface address and routing changes, and immediately closes connections on invalidated routes. - RFC6724 DNS results sorting over ipv4 + ipv6 results, according to available dynamic route information - Support new event library, sdevent (systemd native loop), via `LWS_WITH_SDEVENT` - Reduce .rodata cost of role structs by making them sparse - Additional Secure Streams QA tests and runtime state transition validation - SMD-over-ss-proxy documentation and helpers to simplify forwarding - SSPC stream buffering at proxy and client set from policy by streamtype - Trigger Captive Portal Detection if DNS resolution fails - Switch all logs related to wsi and Secure Streams to use unique, descriptive tags instead of pointers (which may be reallocated) - Use NOITCE logging for Secure Streams and wsi lifecycle logging using tags - Update SSPC serialization to include versioning on initial handshake, and pass client pid to proxy so related objects are tagged with it - Enable errors on -Wconversion pedantic type-related build issues throughout the lws sources and upgrade every affected cast. - Windows remove WSA event implementation and replace with WSAPoll, with a pair of UDP sockets instead of pipe() for `lws_cancel_service()` - `lws_strcmp_wildcard()` helper that understand "x*", "x*y", "x*y*" etc - `LWS_WITH_PLUGINS_BUILTIN` cmake option just builds plugins into the main library image directly - Secure Streams proxy supports policy for flow control between proxy and clients - libressl also supported along with boringssl, wolfssl - prepared for openssl v3 compatibility, for main function and GENCRYPTO - Fault injection apis can confirm operation of 48 error paths and counting - `LWS_WITH_SYS_METRICS` keeps stats and reports them to user-defined function, compatible with openmetrics - windows platform knows how to prepare openssl with system trust store certs - `LWS_WITH_SYS_CONMON` allows selected client connections to make precise measurements of connection performance and DNS results, and report them in a struct - New native support for uloop event loop (OpenWRT loop) - More options around JWT - Support TLS session caching and reuse by default, on both OpenSSL and mbedtls - Many fixes and improvements...
2022-07-02*: Recursive revbump from audio/pulseaudioryoon16-29/+32
2022-07-02py-websocket-client: updated to 1.3.3adam2-7/+6
1.3.3 - Fix unclosed socket error - Update header dict access - Add utf8 workaround to docs
2022-07-01www/lariza: update to 22.04pin2-7/+6
v22.04 2022-04-16 [Fixed] -Compilation warnings ("ignoring return value of 'write'") have been addressed.
2022-07-01py-nbclient: updated to 0.6.6adam2-7/+7
0.6.6 Merged PRs - Start new client if needed in blocking setup_kernel 0.6.5 Merged PRs - Start new client if needed
2022-07-01nghttp2: updated to 1.48.0adam4-10/+8
v1.48.0 lib This release adds RFC9218 Extensible Prioritization Scheme for HTTP. It is enabled by submitting NGHTTP2_SETTINGS_NO_RFC7540_PRIORITIES via nghttp2_submit_settings(). See Stream priorities section of Programmers’ Guide. It fixes the stream stall bug when the initial window size is decreased. build Now applications can be built with Libressl 3.5. If --enable-lib-only configure option is used, no application libraries are checked. src The default TLS cipher suites are updated. ktls support has been added to nghttp, nghttpd, nghttpx, and h2load if they are built with OpenSSL >= 3.0.0. nghttpd This release fixes the bug that stalls TLS read operation. nghttpx nghttpx by default disables RFC 7540 tree based HTTP/2 priorities and uses RFC 9218 priorities instead. It has a fallback mechanism to RFC 7540 if client does not send SETTINGS_NO_RFC7540_PRIORITIES. affinity-cookie-stickiness backend parameter has been added. The session affinity feature which had been broken for quite some time has been fixed.
2022-07-01Support a debug-info option (simmilar to firefox)martin1-2/+5
2022-06-30*: Revbump packages that use Python at runtime without a PKGNAME prefixnia23-42/+46
2022-06-29camlp4: removewiz7-158/+1
camlp4 is an outdated way to build packages with caml and does not work with pkgsrc ocaml versions for more than a year. Remove camlp4 and all packages using it. Ok jaapb@
2022-06-28*: recursive bump for perl 5.36wiz428-806/+856
2022-06-28webkit24-gtk: Remove introspection option.nia4-29/+19
https://marc.info/?l=pkgsrc-users&m=165444158600671&w=2
2022-06-28librest07: Remove introspection option.nia3-28/+9
https://marc.info/?l=pkgsrc-users&m=165444158600671&w=2
2022-06-27*: drop maintainership for packages not related to toolchains and ELF.fcambus4-8/+8
2022-06-27links: update to 2.27.fcambus2-6/+6
=== RELEASE 2.27 === Fri May 27 20:10:59 CEST 2022 mikulas: Compile the Windows version with libevent 2.0 (note that libevent 2.1 doesn't work on Windows 7) This fixes "Fatal error: too big handle" because Cygwin has too low FD_SETSIZE (64) Wed Apr 13 19:43:10 CEST 2022 Emir Yasin SARI <bitigchi@me.com>: Updated the Turkish translation Mon Apr 11 19:23:19 CEST 2022 mikulas: Allow the user to specify a numeric IPv6 address in the dns-over-https box
2022-06-27curl: update to 7.84.0.wiz3-7/+9
Security fix release. This release includes the following changes: o curl: add --rate to set max request rate per time unit [69] o curl: deprecate --random-file and --egd-file [12] o curl_version_info: add CURL_VERSION_THREADSAFE [100] o CURLINFO_CAPATH/CAINFO: get the default CA paths from libcurl [9] o lib: make curl_global_init() threadsafe when possible [101] o libssh2: add CURLOPT_SSH_HOSTKEYFUNCTION [78] o opts: deprecate RANDOM_FILE and EGDSOCKET [13] o socks: support unix sockets for socks proxy [2] This release includes the following bugfixes: o aws-sigv4: fix potentional NULL pointer arithmetic [48] o bindlocal: don't use a random port if port number would wrap [14] o c-hyper: mark status line as status for Curl_client_write() [58] o ci: avoid `cmake -Hpath` [114] o CI: bump FreeBSD 13.0 to 13.1 [127] o ci: update github actions [36] o cmake: add libpsl support [3] o cmake: do not add libcurl.rc to the static libcurl library [53] o cmake: enable curl.rc for all Windows targets [55] o cmake: fix detecting libidn2 [56] o cmake: support adding a suffix to the OS value [54] o configure: skip libidn2 detection when winidn is used [89] o configure: use the SED value to invoke sed [28] o configure: warn about rustls being experimental [103] o content_encoding: return error on too many compression steps [106] o cookie: address secure domain overlay [7] o cookie: apply limits [83] o copyright.pl: parse and use .reuse/dep5 for skips [105] o copyright: make repository REUSE compliant [119] o curl.1: add a few see also --tls-max [52] o curl.1: mention exit code zero too [44] o curl: re-enable --no-remote-name [31] o curl_easy_pause.3: remove explanation of progress function [97] o curl_getdate.3: document that some illegal dates pass through [34] o Curl_parsenetrc: don't access local pwbuf outside of scope [27] o curl_url_set.3: clarify by default using known schemes only [120] o CURLOPT_ALTSVC.3: document the file format [118] o CURLOPT_FILETIME.3: fix the protocols this works with o CURLOPT_HTTPHEADER.3: improve comment in example [66] o CURLOPT_NETRC.3: document the .netrc file format o CURLOPT_PORT.3: We discourage using this option [92] o CURLOPT_RANGE.3: remove ranged upload advice [99] o digest: added detection of more syntax error in server headers [81] o digest: tolerate missing "realm" [80] o digest: unquote realm and nonce before processing [82] o DISABLED: disable 1021 for hyper again o docs/cmdline-opts: add copyright and license identifier to each file [112] o docs/CONTRIBUTE.md: document the 'needs-votes' concept [79] o docs: clarify data replacement policy for MIME API [16] o doh: remove UNITTEST macro definition [67] o examples/crawler.c: use the curl license [73] o examples: remove fopen.c and rtsp.c [76] o FAQ: Clarify Windows double quote usage [42] o fopen: add Curl_fopen() for better overwriting of files [72] o ftp: restore protocol state after http proxy CONNECT [110] o ftp: when failing to do a secure GSSAPI login, fail hard [62] o GHA/hyper: enable debug in the build o gssapi: improve handling of errors from gss_display_status [45] o gssapi: initialize gss_buffer_desc strings o headers api: remove EXPERIMENTAL tag [35] o http2: always debug print stream id in decimal with %u [46] o http2: reject overly many push-promise headers [63] o http: restore header folding behavior [64] o hyper: use 'alt-used' [71] o krb5: return error properly on decode errors [107] o lib: make more protocol specific struct fields #ifdefed [84] o libcurl-security.3: add "Secrets in memory" [30] o libcurl-security.3: document CRLF header injection [98] o libssh: skip the fake-close when libssh does the right thing [102] o links: update dead links to the curl-wiki [21] o log2changes: do not indent empty lines [ci skip] [37] o macos9: remove partial support [22] o Makefile.am: fix portability issues [1] o Makefile.m32: delete obsolete options, improve -On [ci skip] [65] o Makefile.m32: delete two obsolete OpenSSL options [ci skip] [39] o Makefile.m32: stop forcing XP target with ipv6 enabled [ci skip] [116] o max-time.d: clarify max-time sets max transfer time [70] o mprintf: ignore clang non-literal format string [19] o netrc: check %USERPROFILE% as well on Windows [77] o netrc: support quoted strings [33] o ngtcp2: allow curl to send larger UDP datagrams [29] o ngtcp2: correct use of ngtcp2 and nghttp3 signed integer types [25] o ngtcp2: enable Linux GSO [91] o ngtcp2: extend QUIC transport parameters buffer [4] o ngtcp2: fix alert_read_func return value [26] o ngtcp2: fix typo in preprocessor condition [121] o ngtcp2: handle error from ngtcp2_conn_submit_crypto_data [5] o ngtcp2: send appropriate connection close error code [6] o ngtcp2: support boringssl crypto backend [17] o ngtcp2: use helper funcs to simplify TLS handshake integration [68] o ntlm: provide a fixed fake host name [32] o projects: fix third-party SSL library build paths for Visual Studio [125] o quic: add Curl_quic_idle [18] o quiche: support ca-fallback [49] o rand: stop detecting /dev/urandom in cross-builds [113] o remote-name.d: mention --output-dir [88] o runtests.pl: add the --repeat parameter to the --help output [43] o runtests: fix skipping tests not done event-based [95] o runtests: skip starting the ssh server if user name is lacking [104] o scripts/copyright.pl: fix the exclusion to not ignore man pages [75] o sectransp: check for a function defined when __BLOCKS__ is undefined [20] o select: return error from "lethal" poll/select errors [93] o server/sws: support spaces in the HTTP request path o speed-limit/time.d: mention these affect transfers in either direction [74] o strcase: some optimisations [8] o test 2081: add a valid reply for the second request [60] o test 675: add missing CR so the test passes when run through Privoxy [61] o test414: add the '--resolve' keyword [23] o test681: verify --no-remote-name [90] o tests 266, 116 and 1540: add a small write delay o tests/data/test1501: kill ftp server after slow LIST response [59] o tests/getpart: fix getpartattr to work with "data" and "data2" o tests/server/sws.c: change the HTTP writedelay unit to milliseconds [47] o test{440,441,493,977}: add "HTTP proxy" keywords [40] o tool_getparam: fix --parallel-max maximum value constraint [51] o tool_operate: make sure --fail-with-body works with --retry [24] o transfer: fix potential NULL pointer dereference [15] o transfer: maintain --path-as-is after redirects [96] o transfer: upload performance; avoid tiny send [124] o url: free old conn better on reuse [41] o url: remove redundant #ifdefs in allocate_conn() o url: URL encode the path when extracted, if spaces were set o urlapi: make curl_url_set(url, CURLUPART_URL, NULL, 0) clear all parts [126] o urlapi: support CURLU_URLENCODE for curl_url_get() o urldata: reduce size of a few struct fields [86] o urldata: remove three unused booleans from struct UserDefined [87] o urldata: store tcp_keepidle and tcp_keepintvl as ints [85] o version: allow stricmp() for sorting the feature list [57] o vtls: make curl_global_sslset thread-safe [94] o wolfssh.h: removed [10] o wolfssl: correct the failf() message when a handle can't be made [38] o wolfSSL: explicitly use compatibility layer [11] o x509asn1: mark msnprintf return as unchecked [50]
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-05 06:51:30 +0000