summaryrefslogtreecommitdiff
path: root/www
AgeCommit message (Collapse)AuthorFilesLines
2018-08-25Updated www/ap2-jk to 1.2.43manu3-17/+26
The update from 1.2.37 works around an Apache cstratup crash on NetBSD 8.0 This has first been committed to pkgsrc-2018Q2 by mistake. Here is it on HEAD now after a pkgsrc-2018Q2 change rollback; Complete Changelog 1.2.43 61733: LB: Propagate load factor changes applied by the status worker to a load balancer sub worker correctly to all processes. Based on a patch provided by Jonathan Oddy. (rjung) fix ISAPI: Align the make files for 32-bit and 64-bit builds. (markt) update Update config.guess and config.sub from http://git.savannah.gnu.org/cgit/config.git. (rjung) update Update PCRE bundled with the ISAPI redirector to 8.41. (rjung) fix Update the ISAPI redirector installation documentation to reflect the currently supported versions of Windows. (markt) fix Align the normalization performed by the ISAPI redirector with that implemented by Tomcat. (markt) 1.2.42 fix Status: Fix displayed number of bytes read from and written to the backend when an AJP worker is used without a load balancer worker. (rjung) fix Apache: Don't try to read remaining request body parts during clean up if reading the request body from the client already failed during earlier processing phases. (rjung) fix 57485: Apache: Propagate errors reading the request body from the client to mod_jk so Tomcat sees an error rather than a truncated body. (markt) fix 57836: ISAPI: Empty REMOTE_USER should not be translated to "". (rjung) fix 58249: Add a note the the documentation that max_packet_size will be aligned to the next multiple of 1024 if a value is specified that is not a multiple of 1024. (markt) update 58309: ISAPI: Update bundled pcre from version 5.0 to 8.38. (rjung) fix 58286: Fix crash in mod_jk and in the ISAPI Redirector. The crash only happens on Windows when retrieving the jk-status for the HTML format (which is the default format). This regression was introduced by the fix to 54177. (rjung) fix 58285: Don't use GCC atomics on platforms, for which GCC doesn't provide an atomics implementation. This regression was introduced by the fix to 44454 and 56703. (rjung) fix 58425: Fix regression in 1.4.41 that prevented AJP 1.2 workers from initialising. Note that the AJP 1.2 protocol is deprecated. Patch provided by yagisita. (markt) fix 58504: If a background thread is used to perform worker maintenance, ensure that maintenance runs are not skipped. Patch provided by Hiroto Shimizu. (markt) fix 58608: ISAPI: Add a new registry option "flush_packets" that allows the flushing behaviour of IIS7+ to be controlled. The default is not to flush. Setting the option to "true" with cause IIS to write data to the client as each AJP packet is received. (markt) fix 58813: ISAPI: Correctly release a mutex allowing the plugin to complete initialization. Prior to this fix, the incomplete initialization was causing a hang on shutdown. Patch provided by Matthew Reiter. (markt) fix 58895: Correct an off-by-one error in the log messages for the number of attempts made to communicate with the backend server. Patch provided by Hiroto Shimizu. (markt) fix 59164: Fix crash on first connection if a host name is specified for the worker that cannot be resolved to an IP address. (markt) fix 59184: HTTPD: Avoid segmentation fault if mod_jk is configured with an invalid value for JkShmFile. This causes the server startup to fail. (markt) fix Minor code clean-up and optimization. (markt) 1.2.40 fix AJP, LB: Reduce lock contention during maintenance function. This was observable when using a big number of AJP13 and LB workers, especially in combination with the Apache httpd prefork MPM. (rjung) fix 57060: Allow building from outside of source tree. Patch contributed by Petr Sumbera. (rjung) fix 56703: Status: Fix inflated counter for current number of backend connections especially when a connection timeout occurred on the backend. (rjung) fix 56661: Fix Servlet API getLocalAddr(). Works for Tomcat 6.0.42, 7.0.55 and 8.0.11 and Apache and ISAPI plugins. (rjung) update Status: Log old and new values when changing worker attributes. (rjung) fix 56667: Status: Fix log message when changing activation state of all members. (rjung) fix 56565: Fix IPV6 address resolve on non-dual network stacks. (mturk) fix 50511: Reduce log level for "OPTIONS *" requests from warning to debug. (rjung) fix Apache: Copy log notes instead of using references to prevent access to memory from closed pool. (rjung) add Add option to control handling of multiple adjacent slashes in mount and unmount. New default is collapsing the slashes only in unmount. Configuration is done via new JkOption for Apache ("CollapseSlashesAll", "CollapseSlashesNone" or "CollapseSlashesUnmount") and via property "collapse_slashes" for IIS (values "all", "none", "unmount"). This is the fix for CVE-2014-8111. (rjung) add Add more checks for shared memory allocation. (rjung) add 56869: Status: Add maximum number of open backend connections to status worker. Patch contributed by Martin Knoblauch. (rjung) add 56770: AJP: Add worker name to all log messages. Patch contributed by Martin Knoblauch. (rjung) fix 50186: Docs: Clarify relation between "connection_pool_timeout" and "keepAliveTimeout" or "connectionTimeout" in the Tomcat AJP connector configuration. (rjung) fix 52334: LB: Calculate worker recovery time based on last recovery attempt time instead of original error time after the first recovery attempt. (rjung) fix 54596 part 1: IIS: Fix missing last character when parsing relative file names with no ".." directory components from configuration. (rjung) fix 54596 part 2: IIS: Fix using relative file names in config with ".." path segments that go up the directory hierarchy higher than the starting point of the relative file name. (rjung) fix Status: Add logging if status worker output was dropped due to insufficient buffer size. (rjung) fix Reduce log buffer from 8KB to 1KB. Add logging in case of failed logging and add trailing "..." to lines which were likely truncated. (rjung) update Replace fixed allocation of 32 entries for fail_on_status by dynamic allocation. (rjung) add Enforce implementation restriction on maximal length "60" of worker attributes "name", "host", "route", "domain", "redirect", "session_cookie", "session_path" and "set_session_cookie". Checks were added to configuration file processing and configuration updates via the status worker. (rjung) add 52483: Apache: Add debug logging for result of JkOptions configuration processing. (rjung) fix 54177: Status: Use numeric time stamps instead of textual ones to avoid non-well-formed XML output. Textual timestamps are formatted according to locale settings and reencoding them to UTF-8 would be cumbersome. (rjung) fix 56618: Status: Use percent decoding when reading query string parameters. For example this fixes editing IPv6 addresses via the status worker if the client encodes ":" as "%3A". Patch contributed by Christopher Schultz. (rjung) fix 56452: Fix crash in debug logging for IPv6 adresses. Patch contributed by Christopher Schultz. (rjung) fix 34526: Apache: Improve compatibility with mod_deflate request body inflation. An automatic detection of mod_deflate inflation is not implemented. Use the new Apache environment variable JK_IGNORE_CL instead, to let mod_jk ignore an existing Content-Length request header. (rjung) update 44454: LB: Add warning to docs about problems with "busyness" load balancing method. (rjung) fix 44454: Improve busy counter by using atomics. (rjung) fix 56703: Status: Improve connected counter. Use atomics and for mod_jk (Apache) currectly count down connections closed by child processes that are stopped. (rjung) fix 44571: Ensure that we return with status 503 if we can not get and endpoint for a worker. (rjung) fix Apache: Improve log handling during graceful or normal restart. (rjung) fix Don't update last access time of worker connections during optional checking of idle connections using CPing. Updating the time stamp breaks closing idle connections. (rjung) fix Adjust linger parameters used during connection shutdown. (rjung) fix Fix annoying redefine warnings for the autoconf PACKAGE defines during configure based builds. (rjung) fix Status: Use multi-line table headers and fix invalid xml output. (rjung) fix 44571: Implement an optional limit on concurrent requests allowed for a worker (attribute "busy_limit"). Original patch contributed by zealot0630 at gmail dot com. (rjung) fix Correct log message "all endpoints are disconnected" to "no usable connection found, will create a new one". Tone done from info log level to debug for the common case. (rjung) add 57536: AJP: Allow to configure connection source address. This should only be used on multi-homed hosts. The feature is experimental. (rjung) add 57540: AJP: Forward name of SSL protocol used for handling the request (SSLv3, TLSv1, TLSv1.1, TLSv1.2). (rjung) 1.2.39 Fix forwarding of chunked requests, which is broken in version 1.2.39. (rjung) fix 56352: Fix regression in memory release. (mturk) fix Fix status worker display of worker IP address after name or port was changed. (rjung) update 56297: Improve key hash function. Copied from APR. (rjung) fix 55683: Remove quotes from quoted session cookies. (rjung) fix 53542: ISAPI: Fix grammar in 503 error page. (rjung) fix 55696: Crash on Mac OS X 10.9 during config parsing. (rjung) 1.2.38 update Deprecate nt_service from Apache Tomcat Connectors. (mturk) fix 56133: Fix possible crash when a request fails during request body transfer to the back end and reply_timeout was set. Patch contributed by Hiroto Shimizu. (rjung) fix Fix status worker not updating parameters for all members. (mturk) fix 55853: HTTPD: Use the correct API for setting Content-Length. Patch contributed by areese yahoo-inc.com. (rjung) add Add IPV6 support for connection to webserver. New directive prefer_ipv6 has been added to control the hostname resolution and preserve backward compatibility. (mturk) add Add --disable-sock-cloexec to configure to disable use of SOCK_CLOEXEC (using FD_CLOEXEC + fnctl instead) so built modules will work with Linux kernels prior to 2.6.27. (timw) update Clean up config file parsing. Worker names are now restricted to 60 bytes. (rjung) update Allow to set a stickyness cookie in case a web framework breaks Tomcat's adding of the routing ID to the end of the JSESSIONID cookie. (rjung) update Use max_packet_size also for request body forwarding. (rjung) update Apache 2.4: By default forward logical client address as provided by mod_remoteip. When setting JkOptions ForwardPhysicalAddress mod_jk will instead forward the physical peer address. (rjung) update Minor documentation improvements. (rjung)
2018-08-24py-pylint-django: updated to 2.0.1adam3-8/+11
Version 2.0.1: Enable testing with Django 2.1 Add test for Model.objects.get_or_create(). Add test for objects.exclude(). Fix Instance of 'Model' has no 'id' member (no-member), fix Class 'UserCreationForm' has no 'declared_fields' member. Fix for Instance of 'ManyToManyField' has no 'add' member. Add test & fix for unused arguments on class based views
2018-08-24nginx-devel: updated to 1.15.2adam5-30/+31
Changes with nginx 1.15.2: *) Feature: the $ssl_preread_protocol variable in the ngx_stream_ssl_preread_module. *) Feature: now when using the "reset_timedout_connection" directive nginx will reset connections being closed with the 444 code. *) Change: a logging level of the "http request", "https proxy request", "unsupported protocol", and "version too low" SSL errors has been lowered from "crit" to "info". *) Bugfix: DNS requests were not resent if initial sending of a request failed. *) Bugfix: the "reuseport" parameter of the "listen" directive was ignored if the number of worker processes was specified after the "listen" directive. *) Bugfix: when using OpenSSL 1.1.0 or newer it was not possible to switch off "ssl_prefer_server_ciphers" in a virtual server if it was switched on in the default server. *) Bugfix: SSL session reuse with upstream servers did not work with the TLS 1.3 protocol. Changes with nginx 1.15.1: *) Feature: the "random" directive inside the "upstream" block. *) Feature: improved performance when using the "hash" and "ip_hash" directives with the "zone" directive. *) Feature: the "reuseport" parameter of the "listen" directive now uses SO_REUSEPORT_LB on FreeBSD 12. *) Bugfix: HTTP/2 server push did not work if SSL was terminated by a proxy server in front of nginx. *) Bugfix: the "tcp_nopush" directive was always used on backend connections. *) Bugfix: sending a disk-buffered request body to a gRPC backend might fail. Changes with nginx 1.15.0: *) Change: the "ssl" directive is deprecated; the "ssl" parameter of the "listen" directive should be used instead. *) Change: now nginx detects missing SSL certificates during configuration testing when using the "ssl" parameter of the "listen" directive. *) Feature: now the stream module can handle multiple incoming UDP datagrams from a client within a single session. *) Bugfix: it was possible to specify an incorrect response code in the "proxy_cache_valid" directive. *) Bugfix: nginx could not be built by gcc 8.1. *) Bugfix: logging to syslog stopped on local IP address changes. *) Bugfix: nginx could not be built by clang with CUDA SDK installed; the bug had appeared in 1.13.8. *) Bugfix: "getsockopt(TCP_FASTOPEN) ... failed" messages might appear in logs during binary upgrade when using unix domain listen sockets on FreeBSD. *) Bugfix: nginx could not be built on Fedora 28 Linux. *) Bugfix: request processing rate might exceed configured rate when using the "limit_req" directive. *) Bugfix: in handling of client addresses when using unix domain listen sockets to work with datagrams on Linux. *) Bugfix: in memory allocation error handling.
2018-08-22Recursive bump for perl5-5.28.0wiz408-720/+816
2018-08-22Recursive bump for perl5-5.28.0wiz4-8/+8
2018-08-21p5-WWW-Mechanize-GZip: update to 0.14.wiz2-8/+7
0.14 2018-08-14 - fixed empty META.yml 0.13 2018-07-16 - fixed typo in POD
2018-08-21p5-URI-db: update to 0.19.wiz2-7/+7
0.19 2018-07-19T15:15:04Z - Added URI::snowflake.
2018-08-21p5-Mojolicious: update to 7.93.wiz2-7/+7
7.93 2018-08-11 - Improved Test::Mojo to accept Mojo::File objects pointing to application scripts and to override configurations more consistently. 7.92 2018-08-09 - This release reverts the addition of stream classes (added in 7.83), which have unfortunately resulted in many Mojolicious applications becoming unstable. While there are no known exploits yet, we've chosen to err on the side of cautiousness and will classify this as a security issue. 7.91 2018-08-09 - Fixed a bug in Mojo::IOLoop::Stream where is_readable could not be called after a timeout event. 7.90 2018-08-08 - Deprecated expect_close attribute in Mojo::Content. - Removed deprecated delay helper from Mojolicious::Plugin::DefaultHelpers. - Changed error message for destroyed transactions from "Connection already closed" to "Transaction already destroyed". - Fixed a race condition in Mojo::UserAgent where closing connections could sometimes end up being reused. - Fixed an RFC 7230 compliance problem where HTTP/1.1 responses were sometimes incomplete. 7.89 2018-08-06 - Mojolicious has a new logo! 7.88 2018-07-11 - Added EXPERIMENTAL bytes_read, bytes_written and transition methods to Mojo::IOLoop::Stream. - Added transition event to Mojo::IOLoop::Stream. - Improved default request ids generated by Mojo::Message::Request to be a little more unique. - Fixed a bug where prefork tests would fail if a prefork server was already running. 7.87 2018-07-04 - Added optional support for Cpanel::JSON::XS to Mojo::JSON for much better JSON encoding and decoding performance. That also means Mojo::JSON can no longer encode the two Unicode whitespace characters u2028 and u2029, since this is unsupported by Cpanel::JSON::XS. - Improved Mojo::JSON to encode unknown reference types to "null", consistently with Cpanel::JSON::XS. 7.86 2018-07-02 - Added template attribute to Mojolicious::Command. - Added spawn event to Mojo::IOLoop::Subprocess. - Improved Mojo::IOLoop::Subprocess to only fork new processes after the event loop has been started.
2018-08-21p5-LWP-ConsoleLogger: update to 0.000039.wiz2-20/+21
Use TEST_DEPENDS. 0.000039 2018-08-01 19:40:39Z - (temporarily?) skip XML parsing test under newer versions of Data::Printer 0.000038 2018-07-28 02:39:17Z - Add support for HTTP::CookieJar
2018-08-21p5-HTTP-Tiny: update to 0.076.wiz2-12/+9
Use TEST_DEPENDS. 0.076 2018-08-05 21:07:38-04:00 America/New_York - No changes from 0.075-TRIAL. 0.075 2018-08-01 07:03:36-04:00 America/New_York (TRIAL RELEASE) [CHANGED] - The 'peer' option now also can take a code reference 0.074 2018-07-30 15:35:44-04:00 America/New_York - No changes from 0.073-TRIAL. 0.073 2018-07-24 11:33:53-04:00 America/New_York (TRIAL RELEASE) 0.071 never made it to CPAN; skipping to 0.073 [DOCS] - Documented 'protocol' field in response hash. 0.071 2018-04-22 14:45:43+02:00 Europe/Oslo (TRIAL RELEASE) [DOCS] - Documented that method argument to request() is case-sensitive. [INTERNAL] - Minor regex cleanup - Updated .travis.yml for recent Perls
2018-08-21p5-FCGI-Client: update to 0.09.wiz2-13/+12
0.09 2018-07-16T14:23:14Z - Switch to Minilla https://github.com/tokuhirom/p5-fcgi-client/pull/2 - Switch to Moo https://github.com/tokuhirom/p5-fcgi-client/pull/3
2018-08-21p5-CGI: update to 4.40.wiz2-10/+10
4.40 2018-08-15 [ FIX / TESTING ] - support perls < 5.10.1 in Makefile.PL by being more dynamic (GH #229, GH #230, thanks to Aristotle) 4.39 2018-08-13 [ FIX / TESTING ] - specify CONFIGURE_REQUIRES in Makefile.PL so can use TEST_REQUIRES to build with older perls (GH #228)
2018-08-20py-cherrypy: fix DEPENDSadam1-2/+2
2018-08-20py-curl: only use distutils (used to import setuptools when wheels were ↵adam2-5/+20
installed)
2018-08-19webkit-gtk: update to 2.20.5.wiz3-10/+10
================== WebKitGTK+ 2.20.5 ================== What's new in WebKitGTK+ 2.20.5? - Fix rendering artifacts in some web sites due to a bug introduced in 2.20.4.
2018-08-19py-channels: updated to 2.1.3adam2-9/+9
2.1.3: * An ALLOWED_ORIGINS value of "*" will now also allow requests without a Host header at all (especially important for tests) * The request.path value is now correct in cases when a server has SCRIPT_NAME set * Errors that happen inside channel listeners inside a runworker or Worker class are now raised rather than suppressed
2018-08-19py-daphne: updated to 2.2.2adam2-12/+11
2.2.2: * X-Forwarded-Proto support is now present and enabled if you turn on the --proxy-headers flag * ASGI applications are no longer instantiated in a thread (the ASGI spec was finalised to say all constructors must be non-blocking on the main thread) 2.2.1: * Python 3.7 compatability is flagged and ensured by using Twisted 18.7 and above as a dependency. * The send() awaitable in applications no longer blocks if the connection is closed. * Fixed a race condition where applications would be cleaned up before they had even started.
2018-08-19py-autobahn: updated to 18.8.1adam2-11/+13
18.8.1: fix: Python 3.7 compatibility fix: remove Python 2.6 support leftovers new: getting started docker-based examples in matching with docs 18.7.1: new: Python 3.7 supported and integrated into CI new: WAMP-SCRAM examples fix: glitches in WAMP-SCRAM
2018-08-19py-cherrypy: updated to 17.3.0adam3-11/+8
v17.3.0 * Rely on zc.lockfile for session concurrency support. v17.2.0 * Prevent orphaned Event object in cached 304 response. v17.1.0 * Add support for accepting uploaded files with non-ascii filenames per RFC 5987.
2018-08-18py-test-django: updated to 3.4.1adam2-8/+8
3.4.1: Unknown changes 3.4.0: Features Added new fixture django_assert_max_num_queries. Added support for connection and returning the wrapped context manager with django_assert_num_queries. Added support for resetting sequences via django_db_reset_sequences. Bugfixes Made sure to not call django.setup() multiple times. Compatibility Removed py dependency, use pathlib instead
2018-08-18subversion: updated to 1.10.2adam1-2/+1
Version 1.10.2: User-visible changes: - Client-side bugfixes: * Correctly claim to offer Gnome Keyring support with libsecret * Fix segfault using Gnome Keyring with libsecret * Fix JavaHL local refs capacity warning when unparsing externals * Since on Windows Subversion does not handle symlinks, never check for reparse points * Prune externals after 'update --set-depth=exclude' * Fix issue 4740, "conflict resolver searches too far back ..." - Server-side bugfixes: * Fix regression issue 4741: authz group refers to multiple groups Developer-visible changes: - General: * Regression test and FSFS checksum test, part of issue 4722 * Explicit error on configure --without-lz4 or --without-utf8proc * configure.ac: Fix regression relating to path to 'rdoc' * Ensure consistent use of $PYTHON during build and test * Fix libsvn_auth_gnome_keyring.pc when built using libsecret - Bindings: * Fix regression in use of pre-generated Swig bindings in release builds Version 1.10.0: User-visible changes: - Major new features: * Better interactive conflict resolution for tree conflicts * Wilcards and improved performance in path-based authorization * New experimental 'svn shelve' command - Minor new features and improvements: * svnbench: Show time taken & bytes transferred * New 'svnadmin dump' options to include/exclude paths * New '--normalize-props' option for 'svnadmin dump' * New 'svnadmin 'load-revprops', 'dump-revprops' subcommands * New '--no-flush-to-disk' option for 'svnadmin load' * New '--file' option for several svnadmin subcommands * New '--max-request-size', '--max-response-size' options for svnserve * New '-rN' option for 'svnadmin lstxns' * New '--search' option for fast 'svn ls' searches * Add '--search' option support to 'svnbench null-list' * New '-M' option for 'svnlook tree' * New '--skip-unchanged' option for 'svnsync copy-revprops' * 'svn log --search' now ignores case and diacriticals * Improved performance of server-side log processing * diff3: Reduce processing time and memory usage * ra_serf: Adjustments for serf versions with HTTP/2 support * ra_serf: Send svndiff1 deltas during commit * ra_serf: Stream svndiff deltas w/o creating temporary files * ra_serf: Don't necessarily request full MERGE reponses * 'svn patch': Parse binary diffs in git-style patches * 'svnadmin info' now reports latest revision in the repository * ra_svn: Various performance-related tweaks * Optimize svndiff parser * 'svn status' without -v: Stop showing uninteresting deletions * Save a few cycles in svn_stringbuf_set() * windows: Use the Unicode Windows API * windows: Distinguish out-of-memory error from abort() * windows: Explicitly release file locks * windows: Correctly check result from LoadLibrary() call * Remove Windows-specific slowdown during pristine cleanup * FSFS: Optionally cache node properties without full-text cache * FSFS: Open transaction's proto revision in write-only mode * FSFS: Avoid checksum calculations if logical addressing is used * FSFS: Do not read very long change lists in block read mode * FSFS: Avoid double DAG lookup * FSFS: Avoid double cache lookups * FSFS: Increase default revprop pack size from 4k to 16k * FSFS: Speed up revprop access * FSFS: Disable representation sharing for directories * FSFS: Speed up transaction processing for large directories * FSFS: Tune format 7 pack ordering heuristics * FSFS: Reduce I/O overhead during history traversal * FSFS: Use native Windows API to guarantee data is flushed * FSFS: Warn if a possible rep-cache SHA1 collision is detected * FSFS: Optimize revprop cache filling strategy under high load * FSFS: New "verify-before-commit" fsfs.conf option * FSFS: New format 8 with various performance improvements * FSFS/FSX: Chunked read support for changed paths lists * FSFS/FSX: Improvements to cache implementation * FSX: Add checksums to packed revprop manifests and files * FSX: Significantly reduce size of packed revprop manifest data * FSX: Improved on-disk representation of property lists * FSX: New in-repository representation of directories * FSX: Make 'svnadmin recover' discard all transactions * FSX: Reduce number of fsync operations * mod_dav_svn: Improve performance and memory usage of PROPFIND * mod_dav_svn: Show process-id on Windows in /svn-status page * mod_dav_svn: Advertise svndiff1 support to clients * mod_dav_svn: Remove disk I/O to TMPDIR during first commit * svnsync: Fix assertion failure with up-to-date repositories * ra_serf: Parallel requests for text and property changes * svnserve: Remove disk I/O to TMPDIR during first commit * Triple performance of URI escaping * 'svn blame': Optimize a bit on the server side * 'svn cleanup': Add --vacuum-pristines option * 'svn diff --git': Show diffs of symlinks like git and hg * 'svn patch': Capable of handling git-like symlink changes * 'svn patch': Improve detection of additions and deletions * 'svn patch': Handle zero-byte files vs deleted files * 'svn diff --git': Produce 'rename from/to' headers * 'svn diff --git': Produce proper mode headers * 'svn lock', 'svn unlock': Take the -q option * 'svn help': improved wording and consistency * 'svn': Add a new '--accept recommended' option. * 'svn': --non-interactive uses recommended tree conflict resolution * Evaluate 'old mode' and 'new mode' lines from git-syle diffs * svnrdump, svndumpfilter: Enable buffered stdin * ra_serf: Receive svndiff1 and gzip compressed deltas * svnadmin: 'lock', 'unlock', 'rmlocks': Take the -q option * New svndiff2 binary delta format using lz4 compression * gpg-agent: Support gpg ≥2.1.13 and unset GPG_AGENT_INFO * Add 'http-compression=auto' client config option as default * Speed up processing of mergeinfo * Check for invalid 'xt' fields in x509 certs * New '--password-from-stdin' option for 'svn' - Client-side bugfixes: * svnbench: Honour the '--with-no-revprops' option * ra_serf: Fix segfault when running over HTTP v1 * ra_serf: Keep small svndiffs in memory during commit * ra_serf: Improve error messages related to lock operations * ra_serf: Work around a bug in serf bucket handling * ra_serf: Fix lock token handling for file-path commits * Raise a malfunction instead of segfaulting with corrupt wc.db * Fix check for unversioned obstructions blocking file externals * 'svn patch' bugfixes: + Fix behaviour if a reject file can't be created + Describe adds and removes in reject file headers + Detect recorded moves that are already applied + Detect already applied patches in edge cases + Fix handling of missing trailing context + Fix interaction of moves and property changes + Fix output for reordered hunks + Prevent from overwriting existing reject files + Improve handling of added properties + Improve handling of rejected file deletions + Fix --dry-run with replaced files + Fix applying prop changes which should conflict + Fix duplicate notifications when adding directories + Fix duplicate notifications when patching svn:executable prop + Fix notifications when adding/removing properties + Make handle already applied property patches + Change some notifications to 'U' instead of 'G' + Don't create file if git-style patch indicates modification + Parse any properties following svn:mergeinfo + Fix potential unbounded memory usage in parser + Fix problems with --git diffs applied in reverse + Fix removal of EOL if final patch context line has no EOL * 'svn diff --git': Fix file permission modes to match git and hg * 'svn diff --git': added/deleted filenames are never /dev/null * Fix a problem with relocating some externals * Fix 'svn diff URL@REV WC' wrongly looks up URL@HEAD * Fix 'svn diff --no-diff-added' shows properties as added * Properly raise text merge conflicts with file externals (r1680245) * Fix 'svn diff' with local directories marked incomplete * ra_svn/ra_serf: Make negative log limits work as documented * ra_svn: Eliminate unnecessary URL reparenting * ra_svn: Use svndiff2 deltas when supported on both ends * Handle invalid revision numbers consistently across RA layers * Handle commits to revs > HEAD consistently across RA layers * Eliminate one client/server roundtrip from checkouts of HEAD * Expose some error messages generated by github's SVN server * 'svnfsfs stats': Show average lengths of delta chains * svnmucc: Fix crash during application teardown * Fix assertion when exporting a working copy containing relative externals - Server-side bugfixes: * Fix checksum validation error due to data eviction from cache * FSFS pack: Use unbuffered file streams in a couple of places * FSFS: Reduce excessive amount of read and seek syscalls * FSFS: Reduce memory footprint of cached directories * FSFS: Add various checks for integer overflows * FSFS: Detect a very unlikely case of item index corruption * FSFS: Make handling of revprop size information more resilient * FSFS: Don't re-parse a directory which just got committed * FSFS: Handle some known quirks in committed node revisions * FSFS format 7: Verify item types more thoroughly * FSFS: Fix false positive "Not a directory" error involving file moved and replaced by dir * FSFS: Fix crash accessing revprops with --memory-cache-size=0 * FSFS: Fix issue 4623 for FSFS. * mod_dav_svn: Omit Cache-Control HTTP header for HEAD URLs * mod_dav_svn: Reduced memory consumption for DAV merge responses * mod_dav_svn: Don't set a Last-Modified header in GET responses * mod_dav_svn: Actually use FSFS transaction directory cache * mod_dav_svn: Do not insert newlines in base64 encoded responses * Fix insertion of very large items into the membuffer cache * Fix capacity check of the membuffer cache's prefix pool * Prevent paths containing newlines from being committed * Fix for properties: Null updates break last-changed-revision * 'svnfsfs stats': Fix false positive checksum errors reading old revisions * 'svnfsfs stats': Fix support for pre-v4 FSFS repositories. * svnadmin, svnfsfs: Detect invalid arguments to -M * svnlook, svnserve: Detect invalid arguments to -M * svnadmin: Output locked paths in canonical form * svnadmin: Output locked paths correctly encoded * svn: propdel, propset: Transcode property names on output * svnserve: Make use-sasl=true a fatal error in SASL-less builds. - Client-side and server-side bugfixes: * Fix integer overflow check with >= 1G mergeinfo ranges per path * Fix integer overflow checks on WoW64 platforms * Fix bug with canonicalizing Window-specific drive-relative URL * In file:// URLs, allow '\' directly after Windows drive letter * Fix segfault with recursive configuration value definitions * FSFS: Improve error messages when DAG lookup fails * Transcode command-line arguments to UTF-8 * Fix segfault on x509 certificate with empty name * Fix segfault with invalid URLs in svn:externals * Windows: Failure to write files might remain undetected - Other tool improvements and bugfixes: * New svn-mergeinfo-normalizer tool * Allow configuring mailer.py to use SMTP SSL * svnmucc can now delete directories with deleted children * svn-vendor.py: Minor enhancements, mostly in treating symlinks * bash_completion: Better URL completion * bash_completion: Complete arguments to 'svn info --show-item' * fsfs-stats: New 1.8-compatible wrapper for 'svnfsfs stats' * Drop support for upgrading working copies created with Subversion 1.7
2018-08-17webkit-gtk: update to 2.20.4.wiz3-11/+10
What's new in WebKitGTK+ 2.20.4? - Fix a crash when leaving accelerated compositing mode. - Fix non-deterministic build failure due to missing JavaScriptCore/JSContextRef.h. - Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263, CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267, CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278, CVE-2018-4284.
2018-08-16revbump after boost-libs updateadam36-63/+72
2018-08-16py-google-api-python-client: update to 1.7.4.wiz2-7/+7
Bugfix release - Catch ServerNotFoundError to retry the request (#532)
2018-08-16Adjust configuration so that it builds on NetBSD/macppc as well.he6-37/+73
We need to avoid the JIT javascript code, due to missing support, and also the YARR_JIT code. Remove special-casing of NetBSD/sparc*, it should still build (untested). Bump PKGREVISION.
2018-08-15Added patch to www/eliom, and revbump.jaapb3-3/+21
This is a patch from an upstream pull request (#577) without which compiled JavaScript does not run.
2018-08-15Update to 8.5.6wen3-8/+9
Upstream changes: Drupal 8.5.6 Release notes Maintenance and security release of the Drupal 8 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal Core - 3rd-party libraries -SA-CORE-2018-005 No other fixes are included.
2018-08-14py-django-admin-sortable2: updated to 0.6.21adam2-7/+7
0.6.21: Unknown changes. 0.6.20: Fix SortableAdminMixin to work in combination with other mixins like that from django-import-export. Added jQuery compatibility layer for Django-2.1.
2018-08-14py-beautifulsoup4: updated to 4.6.3adam2-7/+7
4.6.3: * Exactly the same as 4.6.2. Re-released to make the README file render properly on PyPI. 4.6.2: * Fix an exception when a custom formatter was asked to format a void element
2018-08-14py-scrapy: updated to 1.5.1adam2-9/+10
Scrapy 1.5.1: This is a maintenance release with important bug fixes, but no new features: * O(N^2) gzip decompression issue which affected Python 3 and PyPy is fixed * skipping of TLS validation errors is improved * Ctrl-C handling is fixed in Python 3.5+ * testing fixes * documentation improvements
2018-08-14lighttpd: update to 1.4.50.wiz3-9/+9
- 1.4.50 - 2018-08-13 * [mod_extforward] allow explict IPs to be untrusted (#2860) * [core] fix crash if 'host' empty in config (fixes #2876) * [mod_magnet] fix regression in lighty.stat (fixes #2877) * [core] minor code cleanup in gw_recv_response() * [core] fix rare race condition from backends (fixes #2878) * [mod_proxy] fix segfault in Set-Cookie reverse map (fixes #2879) * [core] fdevent_accept_listenfd() nonblock cloexec * [build] remove m4 AC_PATH_PROG for PKG_CONFIG * [core] some header cleanup * [mod_wstunnel] better Sec-WebSocket-Protocol parse * [mod_magnet] code reuse * [mod_magnet] reduce buffer copies * [mod_fastcgi,mod_scgi] fastcgi.balance,scgi.balance (fixes #2882) * [core] check if SOCK_NONBLOCK is ignored (fixes #2883) * [core] buffer_append_string_encoded_hex_lc() * [core] more efficient hex2int() * [mod_secdownload] compare bin MAC instead of hex * [core] li_tohex_lc() explicitly uses lc hex chars * [core] buffer_append_uint_hex_lc() uses lc hex * [core] buffer_append_string_encoded() uc hex * [tests] reduce test_base64 brute force tests * [tests] remove test_buffer output, except on error * [core] check for continuation in server.tag * [core] CONNECT must be handled before fs hooks * [mod_redirect, mod_rewrite] code reuse (sharing) * [core] data_config_pcre_compile,exec() * [tests] test_request unit tests * [core] http_kv.[ch] method, status, version str * [core] remove unused get_http_status_body_name() * [core] remove proc_open.[ch], reduce stdio.h use * [tests] move src/test_*.c to src/t/ * [core] server.http-parseopts URL normalization opt (fixes #1720) * [core] inline some buffer.[ch] routines * [core] remove some duplicative code in log.c * [core] debug server.log-request-header-on-error * [mod_redirect,mod_rewrite] short-circuit earlier * [core] fix buffer_to_upper() * [mod_cgi] handle CGI partial response header write * [mod_redirect,mod_rewrite] pass request URI info * [mod_redirect,mod_rewrite] encoding options (fixes #443, fixes #911) * [mod_redirect,mod_rewrite] fix segfault w/ invalid syntax (fixes #2892) * [mod_fastcgi] fix memleak with FastCGI auth,resp (fixes #2894) * [mod_alias] security: potential path traversal with specific configs * [mod_wstunnel] quiet 32-bit compiler warnings * [core] POLLRDHUP handling for transparent proxying * [mod_redirect,mod_rewrite] support up to 19 match * [core] add missing includes to quiet compiler warn * [mod_redirect,mod_rewrite] base64url encoding opt * [mod_rewrite] require rewrite result to begin '/' * [core] security: use-after-free invalid Range req * [core] reset var if FAMMonitorDirectory() fails * [core] option to propagate TCP FIN to backend host * mod_sockproxy - socket forwarding * [core] workaround Coverity cov-build bug with gcc7 * [build] add missing file for test_burl * [core] quell insignificant coverity warning * [core] extend server.http-parseopts
2018-08-11Update to 61.0.2ryoon2-379/+379
* Sync with www/firefox-61.0.2
2018-08-11Update to 61.0.2ryoon3-13/+8
Changelog: New Adds support for automatically restoring your Firefox session after Windows restarts. Currently, this feature is not enabled by default for most users, but will be gradually enabled over the coming weeks. Fixed Improved website rendering with the Retained Display List feature enabled (Bug 1474402) Fixed broken DevTools panels with certain extensions installed (Bug 1474379) Fixed a crash for users with some accessibility tools enabled (Bug 1474007)
2018-08-11www/squid3: update to 3.5.29taca2-25/+7
Changes to squid-3.5.28 (15 Jul 2018): - SQUID-2018:1: crash processing SSL-Bumped traffic containing ESI - SQUID-2018:2: crash handling responses to internally generated requests - SQUID-2018:3 / CVE-2018-1172: crash in ESI Response processing - Bug 4861: HTTPMSGLOCK missing pointer safety - Bug 4829: IPC shared memory leaks when disker queue overflows - Bug 4767: SMP breaks IPv6 SNMP and cache manager queries - Bug 2821: Ignore Content-Range in non-206 responses - HTCP: Ignore HTCP packets with invalid URI - SSL-Bump: fix authentication with schemes other than Basic - TPROXY: Fix clientside_mark and client port logging - Fix "Cannot assign requested address" for to-origin TPROXY FTP data - Fix --with-netfilter-conntrack error message - Validate mime icon URL before allocating store entries - ... and many documentation changes
2018-08-10py-uwsgi: updated to 2.0.17.1adam2-7/+7
Changes 2.0.17.1: Fixed memory leak in HTTPS_CLIENT_CERTIFICATE TLSv1 is now disabled by default (you can re-enable it with ssl-enable-tlsv1 at your own risk) Improved daemons throttle system Add “secs” log formatting variable Improved snprintf() usage to be OpenBSD-friendly Improved glibc crypt/crypt_r management Fixed websocket pong timeout check Add the “License” classifier to setup.py Add support for php user.ini Official support for Python 3.7
2018-08-09www: Import p5-HTTP-Tinyish version 0.14.jperkin4-1/+34
HTTP::Tinyish is a wrapper module for HTTP client modules LWP, HTTP::Tiny and HTTP client software curl and wget. It provides an API compatible to HTTP::Tiny, and the implementation has been extracted out of App::cpanminus. This module can be useful in a restrictive environment where you need to be able to download CPAN modules without an HTTPS support in built-in HTTP library.
2018-08-08ruby-gnome2: update to 3.2.9.tsutsui4-12/+18
Upstream changes (from NEWS): == Ruby-GNOME2 3.2.9: 2018-08-08 This is a packaging bug fix release of 3.2.8. === Changes ==== All * Fixes * Fixed wrong gem content. [GitHub#1236][Reported by Izumi Tsutsui] ==== Ruby/GtkSourceView4 * Improvements * Added. === Thanks * Izumi Tsutsui == Ruby-GNOME2 3.2.8: 2018-08-06 This is an installation improvement release of 3.2.7. === Changes ==== All * Improvements * Added support for static gemspec. [Patch by cedlemo] * Added support for msys2_mingw_dependencies. [GitHub#1194] ==== Ruby/GLib2 * Improvements * test: Removed a needless assertion. [GitHub#1235][Patch by Iain Lane] ==== Ruby/GObjectIntrospection * Improvements * Improved setter method detection. [GitHub#1233][Patch by yosuke shiro] * Fixes * Fixed a memory leak for callback method. [GitHub#1230][GitHub#1231][Reported by Izumi Tsutsui] ==== Ruby/GTK3 * Fixes * demo: Fix a crash bug. [GitHub#1193][Reported by kojix2] === Thanks * cedlemo * kojix2 * Izumi Tsutsui * yosuke shiro * Iain Lane
2018-08-08Avoid a crash on big endian machines. Bump revision.martin3-3/+19
2018-08-07py-cherrypy: updated to 17.0.0adam2-7/+7
v17.0.0 CherryPy now allows namespace packages for its dependencies. Environments that cannot handle namespace packgaes like py2exe will need to add such support or pin to older CherryPy versions.
2018-08-07py-cheroot: updated to 6.4.0adam2-7/+7
v6.4.0: Factor out parts of :py:meth:cheroot.server.HTTPServer.start into :py:meth:prepare() <cheroot.server.HTTPServer.prepare> and :py:meth:serve() <cheroot.server.HTTPServer.serve>
2018-08-07py-test-django: updated to 3.3.3adam2-7/+7
3.3.3: Bug fixes Fixed registration of ignore_template_errors() marker, which is required with pytest --strict Fixed another regression with unittest Docs Use sphinx_rtf_theme Minor fixes.
2018-08-07py-pylint-django: updated to 2.0adam3-43/+17
Version 2.0: Requires pylint >= 2.0 which doesn’t support Python 2 anymore! Add modelform-uses-unicode check to flag dangerous use of the exclude attribute in ModelForm.Meta
2018-08-07py-django2: updated to 2.1adam3-1527/+1509
2.1: Model “view” permission django.contrib.admin ModelAdmin.search_fields now accepts any lookup such as field__exact. jQuery is upgraded from version 2.2.3 to 3.3.1. The new ModelAdmin.delete_queryset() method allows customizing the deletion process of the “delete selected objects” action. You can now override the default admin site. The new ModelAdmin.sortable_by attribute and ModelAdmin.get_sortable_by() method allow limiting the columns that can be sorted in the change list page. The admin_order_field attribute for elements in ModelAdmin.list_display may now be a query expression. The new ModelAdmin.get_deleted_objects() method allows customizing the deletion process of the delete view and the “delete selected” action. The actions.html, change_list_results.html, date_hierarchy.html, pagination.html, prepopulated_fields_js.html, search_form.html, and submit_line.html templates can now be overridden per app or per model (besides overridden globally). The admin change list and change form object tools can now be overridden per app, per model, or globally with change_list_object_tools.html and change_form_object_tools.html templates. InlineModelAdmin.has_add_permission() is now passed the parent object as the second positional argument, obj. Admin actions may now specify permissions to limit their availability to certain users. django.contrib.auth createsuperuser now gives a prompt to allow bypassing the AUTH_PASSWORD_VALIDATORS checks. UserCreationForm and UserChangeForm no longer need to be rewritten for a custom user model. django.contrib.gis The new GEOSGeometry.buffer_with_style() method is a version of buffer() that allows customizing the style of the buffer. OpenLayersWidget is now based on OpenLayers 4.6.5 (previously 3.20.1). django.contrib.sessions Added the SESSION_COOKIE_SAMESITE setting to set the SameSite cookie flag on session cookies. Cache The local-memory cache backend now uses a least-recently-used (LRU) culling strategy rather than a pseudo-random one. The new touch() method of the low-level cache API updates the timeout of cache keys. CSRF Added the CSRF_COOKIE_SAMESITE setting to set the SameSite cookie flag on CSRF cookies. Forms The widget for ImageField now renders with the HTML attribute accept="image/*". Internationalization Added the get_supported_language_variant() function. Untranslated strings for territorial language variants now use the translations of the generic language. For example, untranslated pt_BR strings use pt translations. Management Commands The new inspectdb --include-views option allows creating models for database views. The BaseCommand class now uses a custom help formatter so that the standard options like --verbosity or --settings appear last in the help output, giving a more prominent position to subclassed command’s options. Migrations Added support for serialization of functools.partialmethod objects. To support frozen environments, migrations may be loaded from .pyc files. Models Models can now use __init_subclass__() from PEP 487. A BinaryField may now be set to editable=True if you wish to include it in model forms. A number of new text database functions are added: Chr, Left, LPad, LTrim, Ord, Repeat, Replace, Right, RPad, RTrim, and Trim. The new TruncWeek function truncates DateField and DateTimeField to the Monday of a week. Query expressions can now be negated using a minus sign. QuerySet.order_by() and distinct(*fields) now support using field transforms. BooleanField can now be null=True. This is encouraged instead of NullBooleanField, which will likely be deprecated in the future. The new QuerySet.explain() method displays the database’s execution plan of a queryset’s query. QuerySet.raw() now supports prefetch_related(). Requests and Responses Added HttpRequest.get_full_path_info(). Added the samesite argument to HttpResponse.set_cookie() to allow setting the SameSite cookie flag. The new as_attachment argument for FileResponse sets the Content-Disposition header to make the browser ask if the user wants to download the file. FileResponse also tries to set the Content-Type and Content-Length headers where appropriate. Templates The new json_script filter safely outputs a Python object as JSON, wrapped in a <script> tag, ready for use with JavaScript.
2018-08-07py-django-mptt: updated to 0.9.1adam3-8/+13
0.9.1: Bug fixes.
2018-08-06py-selenium: updated to 3.14.0adam3-8/+11
Selenium 3.14.0 * Fix doc of URL-related ExpectedCondition * Added ExpectedCondition invisibility_of_element * Swap out httplib for urllib3 * Be consistent with webdriver init kwarg service_log_path
2018-08-06www/thttpd: acme.com now supports TLS. No distfiles change.nia1-3/+3
2018-08-06www/thttpd: Update to 2.29.nia2-11/+11
Changes: * Allow CGI to handle HTTP methods besides GET/HEAD/POST.
2018-08-06Patch original ends being installed as copied.prlw11-1/+2
Just add to PLIST, as patch will disappear with next update.
2018-08-03Fixed www/ocsigenserver to build with ocaml 4.07.jaapb2-2/+9
This comes from upstream Github issue 152, which has not yet been released. I expect to be able to remove this with a new upstream release.
2018-08-02Fix to allow updating of modules with drupal 7 when using PHP 7.prlw13-2/+156