summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2019-02-25ruby-sass-listen: Fix path to ruby-rb-inotify.jperkin1-2/+2
2019-02-25py-flask-caching: updated to 1.5.0adam3-15/+31
Version 1.5.0: - Add support for a Redis Sentinel Cluster. - Parameterize the hash function so alternatives can be used. - Include the deprecated werkzeug.contrib.cache module in Flask-Caching.
2019-02-24py-django-extensions: updated to 2.1.6adam2-7/+7
Changes 2.1.6: runserver_plus, auto_reloader fix for compatibility with Django 2.2 test, many many more tests :-)
2019-02-24www/drupal8: update to 8.6.10taca3-10/+9
Drupal 8.6.10 (2019-02-20) Maintenance and security release of the Drupal 8 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement and notes below: * Drupal core - Remote code execution - SA-CORE-2019-003 Sites on 8.5.x or earlier should update immediately to Drupal 8.5.11 instead, and plan to update to the latest 8.6.x release before May 2019 (when 8.7.0 is released and 8.5.x security coverage ends). Important update information For site owners * In addition to the above fix, this release includes the fix for #3031740: Updating to 8.6.8 or 8.6.9 with Drush 8 causes data loss via update_fix_compatibility() to prevent Drush 8 issues for sites updating directly from an earlier security release. * update.php must be run after updating to ensure changes from the patch take effect. * No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary if your site is already on the previous release. For module developers Some contributed module tests may need to be updated if they extend core's test suite, due to a minor API change in a test base class.
2019-02-24www/ruby-compass-import-once: update dependency to ruby-sass34taca1-2/+5
* Update dependency from www/ruby-sass to www/ruby-sass34. * Add "USE_LANGUAGES= # none". Bump PKGREVISION.
2019-02-24www/ruby-compass-core: update dependency to ruby-sass34taca1-2/+5
* Update dependency from www/ruby-sass to www/ruby-sass34. * Add "USE_LANGUAGES= # none". Bump PKGREVISION.
2019-02-24www/ruby-sass34: update to 3.4.25taca3-9/+10
3.4.25 (7 July 2017) * Fix a bug where * wouldn't always be eliminated during selector unification. Deprecations -- Must Read! * Extending compound selectors such as .a.b is deprecated. This never followed the stated semantics of extend: elements that match the extending selector are styled as though they matches the extended selector. * When you write h1 {@extend .a.b}, this should mean that all h1 elements are styled as though they match .a.b¡½that is, as though they have class="a b", which means they'd match both .a and .b separately. But instead we extend only selectors that contain both .a and .b, which is incorrect. * Color arithmetic is deprecated. Channel-by-channel arithmetic doesn't correspond closely to intuitive understandings of color. Sass's suite of color functions are a much cleaner and more comprehensible way of manipulating colors dynamically. * The reference combinator, /foo/, is deprecated since it hasn't been in the CSS specification for some time. * The old-style :name value property syntax is deprecated. This syntax is not widely used, and is unnecessarily different from CSS.
2019-02-24www/ruby-sass: update to 3.7.3taca3-174/+15
3.7.3 (4 January 2019) * Emit escaped tab characters in identifiers as \9 rather than a backslash followed by a literal tab. 3.7.2 (8 November 2018) * Fix more escaped-whitespace edge cases. 3.7.1 (7 November 2018) * Properly handle escaped whitespace and other unusual characters. 3.7.0 (6 November 2018) * Add support for CSS's min() and max() math functions. A min() and max() call will continue to be parsed as a Sass function if it involves any Sass-specific features like variables or function calls, but if it's valid plain CSS (optionally with interpolation) it will be emitted as plain CSS instead. See the proposal for details. * Add support for range-format media features like (10px < width < 100px). See the proposal for details. * Normalize escape codes in identifiers so that, for example, «±clair and \E9clair are parsed to the same value. See the proposal for details. Backwards Incompatibilities -- Must Read! * Percentages passed as $alpha arguments to rgba() and hsla() are now interpreted according to the spec, and all other units are disallowed. 3.6.0 (19 September 2018) * Add support for importing an _index.scss or _index.sass file when importing a directory. Backwards Incompatibilities -- Must Read! * Tokens such as #abcd that are ambiguous between ID strings and hex colors with an alpha channel are now parsed as colors. 3.5.7 (18 July 2018) * Add a post-install message indicating that Ruby Sass is deprecated. * Properly emit an error when an empty block is passed to a mixin that doesn't use @content. 3.5.6 (22 March 2018) * Allow ! in custom property values. * var() may now be passed in place of multiple arguments to rgb(), rgba(), hsl() and hsla(). * Don't crash on custom properties that aren't followed by semicolons. * Don't crash when normalizing numbers with complex units. * Don't crash on $x % 0. 3.5.5 (4 January 2018) * Emit a warning when && is used, since it's probably not what the user means. * Add a suggested replacement for extended compound selectors. * Fix a bug where an unparseable selector produced an unuseful error. 3.5.4 (15 December 2017) * round() now returns the correct results for negative numbers that should round down. * Avoid thread-unsafely modifying $stderr. 3.5.3 (26 October 2017) * Generate correct source maps for map literals. 3.5.2 (4 October 2017) * Properly parse CSS variables that begin with interpolation (for example, --#{$foo}: ...). 3.5.1 (13 July 2017) * Avoid conflicts with the listen gem. 3.5.0 (12 July 2017) * Default to ten digits of numeric precision. * Combine ids and :root when unifying selectors with @extend and selector functions. * It's no longer an error to @extend a selector that exists in the stylesheet, but for which unification fails. * Add a $weight parameter to invert(). * The last argument in an argument list can now have a trailing comma. * Allow var() to be passed to rgb(), rgba(), hsl(), and hsla(). * Add support for the ::slotted() pseudo-element. * Add support for CSS's grid template areas and named lines. We support this syntax through a new type of list called a "bracketed list". Bracketed lists can be created by wrapping a list with square brackets. For example: [this is bracketed] and [this, is, also, bracketed]. Bracketed lists will output their square brackets when used as a CSS value. Bracketed lists may be either space-separated or comma-separated. The is-bracketed() function, when passed a list will return a boolean indicating whether that list will output with brackets. The join() function now accepts a $bracketed parameter that controls whether the returned list has brackets. * A new function content-exists() will return true when called within a mixin that was passed content for use by the @content directive. * Passing a string to call($function-name, $args...) indicating which function to invoke is now deprecated. Instead pass a function reference returned from get-function($function-name). This allows function name resolution to be performed in the correct lexical context and then invoked in a different context. This is required so that the module-based resolver in Sass 4.0 will invoke the correct function when calling across module boundaries. Developers of frameworks that use call should not do the function lookup for callers of their framework; this is likely to result in a situation where the framework cannot resolve the function in 4.0. * Values that can be interpreted as hex colors with alpha channels and also as ID values, such as #abcd, now emit deprecation warnings in preparation for being parsed differently Sass 3.6. They were previously parsed as strings, and in 3.6 they will be parsed as colors instead. * Pseudo selectors that take arguments now allow any [<declaration-value>][declaration-value] production in their argument list. This will provide better forwards-compatibility for future CSS syntax. * Pseudo selectors that take selectors as arguments will no longer always be eliminated if they contain placeholder selectors that aren't extended. Instead, they'll be reduced to valid CSS selectors if possible. * Generated transparent colors will now be emitted as rgba(0, 0, 0, 0) rather than transparent. This works around a bug wherein IE incorrectly handles the latter format. * The indented syntax now allows different indentation to be used for different lines, as long as they define a consistent tree structure. Backwards Incompatibilities -- Must Read! * The way CSS variables are handled has changed to better correspond to the CSS spec. They no longer allow arbitrary SassScript in their values; instead, almost all text in the property values will be passed through unchanged to CSS. The only exception is #{}, which will inject a SassScript value as before.
2019-02-24www/Makefile: add and enable ruby-sass34taca1-1/+2
2019-02-24www/ruby-sass34: add ruby-sass 3.4.24 as ruby-sass34taca5-0/+373
Add ruby-sass 3.4.24 package as ruby-sass34.
2019-02-24www/Makefile: add and enable ruby-sass-railstaca1-1/+2
2019-02-24www/ruby-sass-rails: add package version 5.0.7taca4-0/+53
Add ruby-sass-rails package version 5.0.7 which covers Ruby on Rails 4.2 and later. Sass adapter for the Rails asset pipeline. This gem provides official integration for Ruby on Rails projects with the Sass stylesheet language.
2019-02-24www/Makefile: add and enable ruby-sass-listentaca1-1/+2
2019-02-24www/ruby-sass-listen: add version 4.0.0 packagetaca4-0/+76
This fork of guard/listen provides a stable API for users of the ruby Sass CLI. Listen The Listen gem listens to file modifications and notifies you about the changes. Features * OS-optimized adapters on MRI for Mac OS X 10.6+, Linux, \*BSD and Windows, [more info](#listen-adapters) below. * Detects file modification, addition and removal. * You can watch multiple directories. * Regexp-patterns for ignoring paths for more accuracy and speed * Increased change detection accuracy on OS X HFS and VFAT volumes. * Tested on MRI Ruby environments (2.0+ only) via [Travis CI](https://travis-ci.org/guard/listen).
2019-02-22www: Add tscrapeleot1-1/+2
2019-02-22tscrape: Import tscrape-0.1 as www/tscrapeleot4-0/+35
tscrape reads the Twitter HTML page and scrapes the data into a TAB-separated format to stdout.
2019-02-21firefox: libwebp >= 1.0.1 is now explicitly requiredgutteridge1-1/+2
Note explicit dependency on libwebp >= 1.0.1. (libwebp itself doesn't merit a general bump in its buildlink3.mk file, since according to its change log, there are no incompatibilities added.) No PKGREVISION bump, since either this previously built with the newer version of libwebp in the current pkgsrc tree, or it failed to meet the dependency.
2019-02-21webkit-gtk: backport upstream patch. security fix.maya3-2/+100
Subject: [PATCH] Fix DFG doesGC() for CompareEq/Less/LessEq/Greater/GreaterEq and CompareStrictEq nodes. https://bugs.webkit.org/show_bug.cgi?id=194800 <rdar://problem/48183773> Reviewed by Yusuke Suzuki. Fix doesGC() for the following nodes: CompareEq: CompareLess: CompareLessEq: CompareGreater: CompareGreaterEq: CompareStrictEq: Only return false (i.e. does not GC) for child node use kinds that have been vetted to not do anything that can GC. For all other use kinds (including StringUse and BigIntUse), we return true (i.e. does GC). * dfg/DFGDoesGC.cpp: (JSC::DFG::doesGC): This was published alongside with exploit code claiming it is remote code execution, but I don't understand what the exploit is doing. bump PKGREVISION
2019-02-21py-django-js-asset: updated to 1.2.2adam2-7/+7
1.2.2: Unknown changes
2019-02-20Update to 15.0.4ryoon3-11/+632
Changelog: 15.0.4 Changes Make external storages browsable again in the web UI (server#14076) 15.0.3 Changes Upload new files in objectstore to a .part path first (server#13036) Broker: add timezone to CANCEL messages (server#13384) Add strengthify.min files (server#13546) Fix click app names (server#13575) Principals can be principal/user/ or principal/ from lega… (server#13582) Correctly handle displaynames returned from the sharee API (server#13585) Don't close input stream when writing in encrypted file (server#13588) Bump pear/archive_tar to 1.4.5 (server#13598) Fix integer background job id type error (server#13609) Fix user settings label translation (server#13611) Fix app navigation flickering on hover (server#13625) Update URL for federation (server#13636) Fix colorizeSvg with transformations that contain a comma (,) (server#13653) Use warning background color & primary text color for setting warnings (server#13665) Fix template paramter (server#13670) Cache tokens when using swift's v2 authentication (server#13740) Cleanup shared lock if changing to exclusive lock failed (server#13744) Honor remember_login_cookie_lifetime (server#13758) Fix integration of social sharing into the link popover menu (server#13761) Respect user locale in natural sort comparator (server#13762) Call proper function when fetching link shares in the breadcrumb view (server#13769) Add acceptance tests for moving and copying files (server#13771) Show proper default locale (server#13781) Ignore non existing users when retrieving details of group members (server#13792) Remove .css fileending from accessibility user css route (server#13793) Add icon to restore activity (server#13794) Fix long comment in dark theme (server#13804) Bump bower from 1.8.4 to 1.8.8 in /build (server#13821) Fix for high contrast theme (server#13852) Always use multipart uploader for s3 uploads (server#13882) Fix paged search with multiple bases (LDAP) (server#13884) Fix dropping a folder on a folder row (server#13887) Fix updating the password of a link share when passwords are enforced (server#13900) Add fallback for trashbin original location (server#13904) Allow shared versions again in legacy backend (server#13905) Improve data directory write checking for NFS mounts (server#13906) Clean pending 2FA authentication on password reset (server#13915) Forward error message from password policy (server#13918) Remove warning in case of external storage error (server#13920) Handle mail send error gracefully (server#13930) Bump pear/archive_tar from 1.4.3 to 1.4.5 (3rdparty#214) Move to SCSS and fix app icon for dark theme (activity#338) Fill screen in fullscreen mode for public videos. Fixes #77 (files_videoplayer#79) Use target="_blank" and rel="noreferrer noopener" (firstrunwizard#105) Fix notification documentation to reflect recent changes (notifications#258)
2019-02-19Update to 0.54.0ryoon3-44/+65
Changelog: Enhancements Templates Adjust tests ddc6d4e3 @bep #5643 Prevent getJSON and getCSV fetch failure from aborting build 6a2bfcbe @anthonyfok #5643 Core Expand TestPageWithEmoji to cover '+', '-' and '_' too 2a9060a8 @anthonyfok #5635 Restore 0.48 slash handling in taxonomies 40ffb048 @bep #5571 Other Use official semver even for main releases fab41f42 @bep #5639 Add test for --configDir 59d87044 @bep #5662 Ignore unknown config files in config dir 3244cb3b @bep #5646 Store supported config formats in a variable d9282cf9 @tryzniak Bump to Go 1.11.5 8ed2a1ca @bep #5654 Update Afero e8596139 @bep #5650 Accept hyphen and plus sign in emoji detection 3038464e @anthonyfok #5635 Support numeric sort in ByParam 26f75edb @tryzniak #5305 Make hugo server -t work again db3c49d0 @tryzniak #5569#5061#4868 Add configFile(s) back to the watch list after RENAME event too e3cb8e6c @anthonyfok #5205 Remove historical rssURI config 55251aa8 @mywaiting Use subtests with server_test.go 843fcd19 @tryzniak Move resource interfaces into its own package ce8a09a4 @bep Move resource processors into sub-packages 669ada43 @bep Update _index.md 50745122 @vrMarc Update go.sum 0584432b @bep Update Chroma cc351958 @bep #4993 Make docshelper run again c24f3ae2 @bep #5568 Fixes Templates Fix reflect 9e4f9e0b @moorereason #5564 Other Fix some inline shortcode issues c52045bb @bep #5645#5653 Fix OpenGraph image fallback to site params 526b5b1c @statik Fix Params case handling in the new site global e1a66c73 @bep #5615 cache/namedmemcache: Fix data race 3f3187de @bep
2019-02-19Update to 65.0.1ryoon3-396/+383
* Sync with www/firefox-65.0.1 * Remove obsolete MESSAGE file
2019-02-19Update to 65.0.1ryoon2-9/+7
Changelog: Fixed Fixed accidental requests to addons.mozilla.org when an addon recommendation doorhanger is shown (bug 1526387) Improved playback of interactive Netflix videos (bug 1524500) Fixed color management not working on macOS (bug 1506495) Fixed incorrect sizing of the "Clear Recent History" window in some situations (bug 1523696) Fixed audio & video delays while making WebRTC calls (bug 1521577 & bug 1523817) Fixed video sizing problems during some WebRTC calls (bug 1520200) Fixed looping CONNECT requests when using WebSockets over HTTP/2 from behind a proxy server (bug 1523427) Fixed the "Enter" key not working on password entry fields for certain Linux distributions (bug 1523635) Various stability and security fixes. Security fixes: #CVE-2018-18356: Use-after-free in Skia #CVE-2019-5785: Integer overflow in Skia #CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext
2019-02-19py-soupsieve: updated to 1.8adam3-7/+23
1.8.0 NEW: Add custom selector support. FIX: Small tweak to CSS identifier pattern to ensure it matches the CSS specification exactly. Specifically, you can't have an identifier of only -. FIX: CSS string patterns should allow escaping newlines to span strings across multiple lines. FIX: Newline regular expression for CSS newlines should treat \r\n as a single character, especially in cases such as string escapes: \\\r\n. FIX: Allow -- as a valid identifier or identifier start. FIX: Bad CSS syntax now raises a SelectorSyntaxError, which is still currently derived from SyntaxError, but will most likely be derived from Exception in the future.
2019-02-18py-test-httpbin: updated to 1.0.0adam2-10/+7
v1.0.0: Update included self-signed cert to include IP address in SAN. Full version bump because this could be a breaking change for those depending on the certificate missing the IP address in the SAN (as it seems the requests test suite does) Only use @pytest.fixture decorator once Fix a few README typos
2019-02-18py-raven: updated to 6.10.0adam4-18/+17
6.10.0 [Core] Fixed stackframes in some situations being in inverse order. [Flask] Fix wrong exception handling logic (accidentally relied on Flask internals). [Core] No longer send NaN local vars as non-standard JSON.
2019-02-17py-httplib2: updated to 0.12.1adam2-7/+11
0.12.1 * Catch socket timeouts and clear dead connection * Officially support Python 3.7 (package metadata)
2019-02-16Update caddy to 0.11.4.bsiegert2-8/+7
0.11.4 (February 15, 2019) * New -json-to-caddyfile and -caddyfile-to-json flags * Fix leaking logging goroutine on SIGUSR1 * basicauth: Error is logged when authentication fails * proxy: Fix bug by re-adding pre-existing trailing slashes * tls: Fix bug related to certificate storage path 0.11.3 (February 5, 2019) * New {server_port} placeholder * New third-party plugin: extauth * New flags -log-roll-mb and -log-roll-compress * basicauth: Bypass for OPTIONS method * errors/log: Ability to disable log rolling * proxy: New subdirective 'ca_certificates' * staticfiles: Require GET method to serve static files * tls: Fixes to self-signed certs, IP certs, email prompts, & more * SOLVED REGRESSIONS: #2356, #2414 * A number of other important fixes and improvements 0.11.2 (January 16, 2019) * Extracted automagic TLS code into CertMagic library * Add support for new clustering plugins * New placeholder: '{when_iso_local}' * New third-party plugins: s3browser, filebrowser * Removed third-party plugins: jekyll, hugo * bind: Support multiple interface values * import: Can now be used within directive blocks * proxy: Status 499 when clients close connection early * templates: No longer emit ETag and Last-Modified headers * tls: Support for the ACME TLS-ALPN-01 challenge * KNOWN/UNRESOLVED REGRESSIONS: #2356, #2414 * Several bug fixes and minor improvements 0.11.0 This release has been about 6 months in the making! Featuring an integrated telemetry client, you can now view stats about your Caddy instance and contribute to Internet research. Telemetry is entirely optional. Read the blog post and telemetry docs for more information, and check out our global stats! You can also look up details about your own instances there. Full change list: * Built with Go 1.10.2 * Integrated optional telemetry client * proxy: Fixed file descriptor leak 0.10.14 * tls: Fix error handling bug when obtaining certificates 0.10.13 Caddy 0.10.13 is a minor release that fixes security flaws in TLS client authentication and On-Demand TLS. It is recommended that everyone relying on these capabilities upgrade. This release also has bug fixes for the Caddyfile parser (caught by fuzzing) and handling errors when a certificate could not be obtained via ACME. Do not use this version, it cannot obtain certificates due to a bug. Version 0.10.14 fixed this. Change list: * New third-party plugin: supervisor * Updated QUIC * proxy: Fix transparent pass-thru of X-Forwarded-For * proxy: Configurable timeout to upstream * rewrite: Now supports regular expressions on single-line * tls: StrictHostMatching mode to prevent client auth bypass * tls: Disable client auth when using QUIC * tls: Require same client auth cert pools per hostname * tls: Prevent On-Demand TLS directory traversal * tls: Fix empty files when using ACME fails to obtain cert * Fixed test broken by 1.1.1.1 resolving * Improved Caddyfile parser robustness by fuzzing 0.10.12 This release brings ACMEv2 and wildcard certificate support! Read the release announcement blog post for details. There's some things in there you should know, including a description of how some really cool features work. Thanks to everyone who contributed to this release! Change list: * Switch to Let's Encrypt ACMEv2 production endpoint * Support for automated wildcard certificates * Support distributed solving of HTTP-01 challenge * New {labelN}, {tls_cipher}, and {tls_version} placeholders * Curly braces can now be escaped when not used as placeholders * New third-party plugin: geoip * Updated QUIC * fastcgi: Add SSL_CIPHER and SSL_PROTOCOL environment variables * log: New 'except' subdirective to exempt paths from logging * startup/shutdown: Removed in favor of 'on' * tls: Default minimum version is TLS 1.2 * tls: Revert to fallback cert if no cert matches SNI * tls: New 'wildcard' subdirective to force automated wildcard cert * Several significant bug fixes and improvements!
2019-02-15py-WebTest: updated to 2.0.33adam2-7/+7
2.0.33: - Fixed 210. Allow to reset select multiple with field.value = [] - Support for PYTHONOPTIMIZE=2, fix tests on PYTHONOPTIMIZE=1, 2 - Fixed 196. Fix deprecation warnings for collections to use collections.abc for Iterable on Python 3.
2019-02-14py-google-api-python-client: update to 1.7.8.wiz2-7/+10
v1.7.8 Version 1.7.8 Bugfix release - Convert '$' in method name to '_' ([#616](https://github.com/googleapis/google-api-python-client/pull/616)) - Alias unitest2 import as unittest in test__auth.py ([#613](https://github.com/googleapis/google-api-python-client/pull/613)) v1.7.7 Version 1.7.7 Bugfix release - Change xrange to range ([#601](https://github.com/google/google-api-python-client/pull/601)) - Typo in http.py exception message. ([#602](https://github.com/google/google-api-python-client/pull/602)) - Announce deprecation of Python 2.7 ([#603](https://github.com/google/google-api-python-client/pull/603)) - Updates documentation for stopping channel subscriptions ([#598](https://github.com/google/google-api-python-client/pull/598)) - Adding example for searchAppearance ([#414](https://github.com/google/google-api-python-client/pull/414)) - Add badges ([#455](https://github.com/google/google-api-python-client/pull/455))
2019-02-13py-mechanize: update to 0.4.0.wiz2-7/+7
Changes not found.
2019-02-13py-channels: updated to 2.1.7adam2-7/+7
2.1.7: * HTTP request body size limit is now enforced * database_sync_to_async now closes old connections before it runs code * Auth middleware closes old connections before it runs
2019-02-13py-daphne: updated to 2.2.5adam2-7/+7
2.2.5: * WebSocket handshakes are now affected by the websocket connect timeout, so you can limit them from the command line. * Server name can now be set using --server-name
2019-02-12py-django-js-asset: updated to 1.2.1adam2-7/+7
1.2: Reformatted the code using Black. Added equality of JS() objects to avoid adding the same script more than once in the same configuration. Determine the static callable at module import time, not each time a static path is generated. Customized the repr() of JS() objects. Added Python 3.7 and Django 2.2 to the test matrix.
2019-02-12py-django-admin-rangefilter: updated to 0.3.12adam2-7/+7
0.3.12: - Added russian translation
2019-02-12drraw: SUBST_SED -> SUBST_VARS.kleink1-2/+2
2019-02-12py-django2: updated to 2.1.7adam2-7/+7
2.1.7: Bugfixes Corrected packaging error from 2.1.6 2.1.6: CVE-2019-6975: Memory exhaustion in django.utils.numberformat.format()¶ If django.utils.numberformat.format() – used by contrib.admin as well as the the floatformat, filesizeformat, and intcomma templates filters – received a Decimal with a large number of digits or a large exponent, it could lead to significant memory usage due to a call to '{:f}'.format(). To avoid this, decimals with more than 200 digits are now formatted using scientific notation. Bugfixes Made the obj argument of InlineModelAdmin.has_add_permission() optional to restore backwards compatibility with third-party code that doesn’t provide it
2019-02-12py-django: updated to 1.11.20adam2-7/+7
1.11.20: Bugfixes Corrected packaging error from 1.11.19 1.11.19: CVE-2019-6975: Memory exhaustion in django.utils.numberformat.format() If django.utils.numberformat.format() – used by contrib.admin as well as the the floatformat, filesizeformat, and intcomma templates filters – received a Decimal with a large number of digits or a large exponent, it could lead to significant memory usage due to a call to '{:f}'.format(). To avoid this, decimals with more than 200 digits are now formatted using scientific notation.
2019-02-09webkit-gtk: Update to 2.22.6leot3-12/+12
pkgsrc changes: - Set USE_GCC_RUNTIME to depends on gcc6-libs when pkgsrc gcc is used (XXX: Not tested and not clear if currently mk/compiler/gcc.mk DTRT XXX: regarding (if not, that's probably why firefox/mozilla-common.mk XXX: abuses USE_PKGSRC_GCC_RUNTIME!)) Changes: WebKitGTK+ 2.22.6 ================= - Make kinetic scrolling slow down smoothly when reaching the ends of pages, instead of abruptly, to better match the GTK+ behaviour. - Fix Web inspector magnifier under Wayland. - Fix garbled rendering of some websites (e.g. YouTube) while scrolling under X11. - Fix several crashes, race conditions, and rendering issues.
2019-02-09Update to 7.64wen3-8/+11
Upstream changes: Major changes since 7.63: Issue #3018637 by emilymoi, das-peter: [regression] Unset the 'host' header in drupal_http_request() during redirect Compatibility fixes for PHP 7.3 (#3020771) Compatibility fixes for MySQL 5.7 (#2981248) All changes since 7.63: #1430934 by johnish@gmail.com, DamienMcKenna, Berdir, malcomio, Dane Powell, zerolab, er.pushpinderrana, akosipax, njbarrett, Fabianx, alesr, David_Rothstein, littledynamo, das-peter: Notice: Undefined index: display_field in file_field_widget_value() (line 582 of /module/file/file.field.inc) #1470656 by Damien Tournoud, joseph.olstad, Pol, Fabianx, catch: Registry rebuild should not parse the same file twice in the same request #3028364 by Pol, Fabianx: Update function _registry_update() and move module_implements() and _registry_check_code() calls out of the try/catch #3018637 by emilymoi, das-peter: [regression] Unset the 'host' header in drupal_http_request() during redirect #3026529 by alexpott: 7.x does not have Phar protection and Phar tests are failing on Drupal 7 #2482549 by Pol, marcelovani, ndf, drupal@guusvandewal.nl, TR, jenlampton, kaidjohnson, ufku, MiSc, David_Rothstein, RobLoach, pablo.guerino, afoster, geerlingguy, SebCorbin, joelpittet, JohnAlbin: Fix up commit - convert short array styles to long. #3023066 by Pol, mfb: [PHP 7.3] Fix BootstrapMiscTestCase::testCheckMemoryLimit() notice #2482549 by Pol, marcelovani, ndf, drupal@guusvandewal.nl, jenlampton, ufku, kaidjohnson, MiSc, David_Rothstein, RobLoach, SebCorbin, geerlingguy, pablo.guerino, JohnAlbin, joelpittet, afoster: Ignore node_module folder in core to use Drupal with npm/grunt/nodejs #3020771 by Ayesh, Pol, sjerdo: [PHP 7.3] strpos explicit string needle warnings #2981248 by mfb, LFP6, msti: MySQL 5.7 incompatibility in system upgrade 7061
2019-02-09Update to 8.6.9wen4-48/+58
Remove the patch that included in upstream Upstream changes: 8.6.7: This is a hotfix release for a regression affecting some Drush installations that was introduced by the fix for SA-CORE-2019-002. No other fixes are included. 8.6.8: Changes since 8.6.7 #2975539 by mondrake, alexpott, marcoscano, desierto: Changing machine name of image style leads to WSOD when loading widgets that used the old name #2859315 by quietone, heddn, jhodgdon: SQL error from profile_fields when migrating d6 (or d7) to d8 without Profile module #2443165 by davidwbarratt, amateescu, HOG, kostyashupenko, yched, Berdir, andypost, alexpott, tstoeckler, xjm: Drupal\Core\Entity\EntityInterface\ContentEntityStorageBase::doCreate() assumes that the bundle is a string #2849074 by decafdennis, alexpott, zuuperman, AdamPS, sagesolutions, tucho, xjm: SiteConfigureForm overrides value from install profile #3007716 by Sam152, kevin.dutra, jhedstrom, larowlan: Security update introduces breaking changes to content moderation #2215857 by michielnugter, Lendude, gmercer, tim.plunkett, cferthorney, marabak, olli, ericmulder1980, TwoD, sanduhrs, stella, dww, nod_: Behaviors get attached to removed forms #3017812 by ibustos, joachim: Language selector is immune to hook_entity_field_access in entity forms #2900883 by larskhansen, GaëlG, kalyansamanta, Chi, tim.plunkett, Gábor Hojtsy, joachim: Wrong documentation of Drupal\Component\Plugin\Derivative\DeriverInterface::getDerivativeDefinitions() #3027595 by amateescu, pmelab: Incorrect blacklist condition in WorkspaceManager #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, lauriii, catch, cilefen, Cottser: [regression] Table Drag handles no longer respond to up/down arrow keys Revert "Issue #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, @catch, @cilefen, @Cottser, @lauriii: [regression] Table Drag handles no longer respond to up/down arrow keys" #2725259 by sardara, andrewmacpherson, claudiu.cristea, tedbow, alwaysworking, droplet, techmsi, kwoxer, xjm, alexpott, @catch, @cilefen, @Cottser, @lauriii: [regression] Table Drag handles no longer respond to up/down arrow keys #2937073 by tim.plunkett, Saviktor, tedbow: Improve robustness of FieldBlockTest #2973713 by quietone, Adita, etecjdo, apmsooner, mikeryan, gnuschichten, tstoeckler: cache_key source plugin configuration not documented #2949555 by quietone, ankitjain28may: Correct the documentation on method UserMigrationClassTest #3025685 by quietone: Add error msg to assertions in MigrateSourceTestBase #3026840 by izus: Fix plural typo in workspaces field #3024452 by kfritsche, hchonov, alexpott: DatabaseStorageExpirable:setWithExpireIfNotExists is not respecting expired #2999908 by penyaskito: View more link in recipe cards is not fully translated #3028819 by alwaysworking: Update username #2916021 by d.olaresko, wengerk, Chi, xjm, dawehner, idebr: Update "Running tests" section in core.api.php #2953995 by kjay, starshaped, rachel_norfolk, Vidushi Mehta, cferthorney, HAL 9000, Eli-T, markconroy, steveparks: Update the Umami Vegan Chocolate Brownie recipe #3028608 by danharper, Eli-T, markconroy, Not Real: Umami - favicon #2940027 by jmsosso: Add change record to @deprecated for AccountInterface #2995150 by msankhala, tim.plunkett: Command examples in core/tests/README.md are confusing and not executable #3024184 by seanB, andrewmacpherson, Kristen Pol: Make the tabbing order match the visual reading order in MediaLibraryWidget #2668416 by Krzysztof Domański, wheatpenny, Lendude, alexpott: Wrong assert in NodeTitleTest #2981870 by Lendude, alexpott: Duplicate BrokenSetUpTest for BrowserTestBase #2809513 by Lendude, brentgees: Convert AJAX part of \Drupal\responsive_image\Tests\ResponsiveImageFieldUiTest to JavascriptTestBase and the rest to BrowserTestBase #3027574 by tuutti: SqlContentEntityStorage no longer update entities with certain (id) fields #3026043 by Berdir: ConfigEntityBase::__sleep() serializes plugin instances if they were not previously initialized #3021395 by quietone, alexpott: MigrateDrupalTestBase::migrateContent(['translations') does not migrate translations Revert "Issue #3003238 by Sam152, amateescu, Berdir: EntityStorageException: Default revision can not be deleted in content_moderation_entity_revision_delete()" #2987418 by quietone, Kristen Pol: Rename MigrateUpgrade tests #3003238 by Sam152, amateescu, Berdir: EntityStorageException: Default revision can not be deleted in content_moderation_entity_revision_delete() #3026470 by alexpott, jrockowitz, Joseph Zhao: ArchiveTar is throwing fatal error Merged 8.6.7. Merged 8.6.6. #3015992 by Krzysztof Domański, alexpott, larowlan: Not affecting spacing in PhpTransliterationTest #2998769 by kiamlaluno, quietone, kkalaskar: @see directive used in the wrong place outputs the wrong HTML markup #3000677 by catch, Shane Birley, featherbelly, alexpott, larowlan: Fatal error after upgrade to 8.6x [due to regression in extension system] #2955457 by pfrenssen, Chewie, unrealauk, alexpott, Pol: ConfigFactory static cache gets polluted with data from config overrides #3020142 by mglaman, tim.plunkett: Test module no_transitions_css has invalid hook_page_attachments #3007973 by tim.plunkett, lukasss, xopoc, bnjmnm, stompersly: Layout builder prevents the rendering of extra fields (like Links) on pages not using Layout Builder #3024259 by Pol, alexpott: [PHP 7.3] Fix EnvironmentTest::providerTestCheckMemoryLimit() notice #3023747 by mikelutz, heddn: D6 profile migrations assume stubs, which fail #2978922 by brathbone, philipnorton42, msankhala, hardikpandya, alexpott, siliconmeadow: Improve batch_process() documentation #2845975 by quietone, Jo Fitzgerald, aleevas, maxocub, Gábor Hojtsy: Migrate Drupal 6 user profile field value option translations #2701829 by alexpott, andypost, Soul88, Graber, Eduardo Morales, dawehner, pingwin4eg, catch, Berdir, jibran, httang12: Extension objects should not implement \Serializable #2693727 by mikelutz, sanduhrs, CalebD, ajlib, Lendude, tstoeckler, catch: Limiting options for exposed Language filters causes errors and doesn't work for special languages 8.6.9: Changes since 8.6.8: #2215857 followup by gaydamaka, timmillwood, alexpott, lauriii: Regression on Internet Explorer 11 #3031128 by alexpott, TrevorBradley, indigoxela, catch, cilefen, larowlan, jibran: Update from 8.6.7 to 8.6.8 warnings - Drupal\Core\Extension\Extension has no unserializer Revert "Issue #2924201 by tim.plunkett, tedbow, larowlan, xjm, jibran, Kristen Pol: Resolve random failure in LayoutBuilderTest so that it can be added to HEAD" #2924201 by tim.plunkett, tedbow, larowlan, xjm, jibran, Kristen Pol: Resolve random failure in LayoutBuilderTest so that it can be added to HEAD
2019-02-08Update to 2.5.0wen2-9/+8
Update DEPENDS Upstream changes: v2.5.0 2019-02-08 22:18:11Z - Strip some control characters from links (GH#34) (Olaf Alders) - Enable empty_element_tags in HTML::Parser (GH#35) (Olaf Alders) v2.4.1 2019-02-05 14:13:16Z - Bump version of Type::Tiny to 1.002001. (GH#33) (Olaf Alders). Issue reported by Slaven Rezić (GH#32). v2.4.0 2019-02-05 02:51:05Z - Process text until it returns the same value twice. (GH#31) (Olaf Alders). Issue raised in (GH#29) by Juraj Major. - Add max_parser_loops attribute
2019-02-07Update to 3.20190207. From the changelog:schmonz5-61/+7
* graph: Add an optional "file" parameter * emailauth: When email can't be sent, show the error message * osm: Don't raise errors if tags don't have attached icons * cgi: Avoid C compiler warnings for waitpid() on NetBSD * Hide popup template content from documentation (Closes: #898836) * meta: Make [[!meta date]] show an error if dates are invalid or Date::Parse can't be loaded * inline: Cope with non-ASCII `rootpage` parameter. Thanks, Feng Shu * table: Cope with non-ASCII content in CSV format tables. Thanks, Feng Shu * trail: Allow unescaped punctuation in `pagenames` parameter * comments: Hide "add comment" link from print stylesheet. Thanks, Antoine Beaupré * recentchangesdiff, relativedate, toggle: Import JavaScript at the end of the page content, not the beginning, so that the browser can render content as soon as possible. Thanks, Antoine Beaupré * inline: Add basic test coverage for [[!inline rootpage]] * table: Add basic test coverage * po: Add enough test coverage to reproduce Debian #911356 * comments: Improve test coverage * tests: Exercise Unicode more * aggregate: Fix aggregation of posts without a title. Thanks, Alexandre Oliva * poll: Added postlink and posttrail options for better multi-page polls. * Fix permalink to comments.
2019-02-07sortjnemeth1-2/+2
2019-02-06www/ruby-padrino: update to 0.14.4taca10-40/+47
* pkgsrc change: ruby-padrion-gen handles ruby-bundler dependency for ruby26. 0.14.4 (2018-11-05) * FIX #2177 regexp routes and trailing slashes (@pdlug) * FIX #2182 NoMethodError on `ar` tasks with activerecord v5.2.0+ (@sue445) * FIX #2185 self.authenticate method in mongoid.rb.tt (@LarryFransson) * FIX #2179 Deprecate safe_level of `ERB.new` in Ruby 2.6 (@koic) * FIX #2193 nested require_dependencies (@genkami)
2019-02-06www/ruby-sinatra-contrib: update to 2.0.5taca2-7/+7
### sinatra-contrib * Add `flush` option to `content_for` [#1225](https://github.com/sinatra/sinatra/pull/1225) by Shota Iguchi * Drop activesupport dependency from sinatra-contrib [#1448](https://github.com/sinatra/sinatra/pull/1448) * Update `yield_content` to append default to ERB template buffer [#1500](https://github.com/sinatra/sinatra/pull/1500) by Jordan Owens
2019-02-06www/ruby-sinatra: update to 2.0.5taca3-8/+9
## 2.0.5 / 2018-12-22 * Avoid FrozenError when params contains frozen value [#1506](https://github.com/sinatra/sinatra/pull/1506) by Kunpei Sakai * Add support for Erubi [#1494](https://github.com/sinatra/sinatra/pull/1494) by @tkmru * `IndifferentHash` monkeypatch warning improvements [#1477](https://github.com/sinatra/sinatra/pull/1477) by Mike Pastore * Improve development support and documentation and source code by Anusree Prakash, Jordan Owens, @ceclinux and @krororo.
2019-02-06www/ruby-jekyll: update to 3.8.5taca2-8/+10
3.8.5 (2018-11-04) * pkgsrc change: Handle ruby-bundler dependency for ruby26. Bug Fixes * Re-implement handling Liquid blocks in excerpts (#7250)
2019-02-06www/ruby-rails*: restrict ruby-bunlder dependencytaca3-6/+12
Restrict ruby-bunlder dependency with ruby26. No bump PKGREVISION since these were broken with ruby26.
2019-02-06py-test-django: updated to 3.4.7adam2-7/+7
3.4.7: Bugfixes * Fix disabling/handling of unittest methods with pytest 4.2+ 3.4.6: Bugfixes * django_find_project: add cwd as fallback always Misc * Enable tests for Django 2.2 and add classifier * Disallow pytest 4.2.0 in install_requires