Commit graph

386557 commits

Author SHA1 Message Date
pho
2bb4b9863a Bump Haskell packages after updating lang/ghc94 2023-10-09 04:54:01 +00:00
pho
9b6b3fecca doc: Updated lang/ghc94 to 9.4.7 2023-10-09 03:52:22 +00:00
pho
6b114a3d8c lang/ghc94: Update to GHC 9.4.7
Release notes:
9.4.5: https://downloads.haskell.org/~ghc/9.4.5/docs/users_guide/9.4.5-notes.html
9.4.6: https://downloads.haskell.org/~ghc/9.4.6/docs/users_guide/9.4.6-notes.html
9.4.7: https://downloads.haskell.org/~ghc/9.4.7/docs/users_guide/9.4.7-notes.html
2023-10-09 02:49:52 +00:00
tm
451e708502 doc: pkg-vulnerabilities +catdoc, +geeklog, +openssh, +wolfssl 2023-10-08 20:05:45 +00:00
tm
e825bb3e01 doc: pkg-vulnerabilities +nasm, +puppet 2023-10-08 19:58:41 +00:00
schmonz
b792e6016c libspf2 CVE-2023-42118 believed fixed in 1.2.11nb2. 2023-10-08 17:58:17 +00:00
schmonz
8622ee48e6 doc: Updated www/lighttpd to 1.4.72 2023-10-08 17:46:14 +00:00
schmonz
84e1cfaf68 lighttpd: update to 1.4.72. From the changelog:
* [core] save config read from stdin across restart
* [core] warn if daemonize w/o absolute config path
* [mod_dirlisting] send Link w/ external css or js
* [mod_dirlisting] fix missing header/readme (fixes #3211)
* [core] ignore coverity warning
* [core] ignore coverity warning
* [core] reqpool.c:request_set_con()
* [core] request_init_data() minor optim
* [core] request.c:request_pool_{push,pop}
* Revert "[core] h2 http_request_parse_header() tweak"
* [core] enable config conditions on HTTP/2 PRI
* [mod_webdav] extend symlink support (non-standard)
* [mod_extforward] fix extforward.params config opt
* [mod_authn_ldap] fix config auth.require group=... (fixes #3216)
* [core] set CON_STATE_READ_POST for HTTP/2 reqbody
* [core] chunkqueue_read_squash() returns cq->first
* [core] get body from cq at offset in chunk
* [doc] update stbuehler address
* [tests] use sha crypt for fastcgi auth environment tests
* [tests] drop des-crypt and crypt-md5 auth tests - deprecated/not available on various platforms
* [core] code size: xxhash XXH_NO_STREAM
* [core] fdevent_sh_exec()
* [mod_dirlisting] http_dirlist_auto_layout_early_hints()
* [mod_dirlisting] send 103 w/ external css or js
* [mod_dirlisting] json output for /<path>/?json
* [mod_dirlisting] include ETag with cached result
* [core] import xxHash v0.8.2
* [tests] move %ENV modifications into forked child
* [mod_ssi] init hctx->wq to init alt cq tempdirs
* [tests] initialize request_st cqs in tests
* [core] chunkqueue_env_tmpdir()
* [core] config_set_defaults() reduce code size
* [tests] use current perl interpreter path for env.PERL in lighttpd.conf
* [mod_deflate] code reuse to create temp file
* [core] skip pwrite() to temp file if 0 len write
* [core] store cq->tempdirs in stack var
* [core] remove tempdirs ptr from struct chunkqueue
* [core] treat upload_temp_file_size=0 as default sz
* [core] hide unused var on _WIN32 compiler warning
* [mod_nss] nspr include prefix portability(attempt)
* [CI] scripts/ci-build.sh arg consistency;add meson
* [CI] remove wolfssl from autobuild; let rest build
* [CI] remove NSS from autobuild; let rest build
* [CI] remove mbedtls from autobuild; let rest build
* [mod_nss] nspr include prefix portability(attempt)
* [CI] ci-build.sh: adjust meson; add pam, maxminddb
* [CI] ci-build.sh: fix typo --with-pam
* [CI] remove maxminddb from autobuild,cmake; let rest build
* [CI] ci-build.sh re-enable additional dependencies
* [core] optimize for non-Range requests
* [core] allow larger number of Ranges if sorted
* [tests] test_http_range.c
* [core] attempt to quiet coverity warning
* [build] packdist.sh now produces .md for www.l.n
* [core] disable keep-alive if HTTP/1.1 CL and TE
* [core] reject empty Content-Length for HTTP/1.x
* [core] reject uppercase in unrecognized HTTP/2 hdr
* [core] warn dynamic mods listed before staticfile
* [core] dev-only internal request state debugging
* [core] short-circuit connection_state_machine_loop
* [core] reset connection-level state at con level
* [core] optim for non-throttle writes
* [core] remove connection_handle_write HTTP/1.x opt
* [core] yield writing large HTTP/1.x on slow device
* [core] tighten h2_process_streams()
* [core] h2_process_streams() simpler loop to retire
* [core] http_response_physical_pathinfo()
* [core] http_response_prepare() tweaks
* [meson] Fix 'getoption' meson typo
* [core] use different getxattr() prototype on MacOS
* [mod_deflate] do not compress any 1xx status
* [core] http_response_304(), http_response_412()
* [core] add config option to reject pathinfo
* [core] expand mimetype.assign builtin defaults
* [core] mark some cold routines noinline
* [core] add config opt to send GOAWAY for bad auth
* [core] show_features() show inotify or kqueue
* [core] stat_cache_refresh_entry()
* [core] splaytree: use all 32-bits of hash value
* [core] splaytree: compare keys directly
* [core] splaytree: splaytree_splay_nonnull()
* [core] stat_cache: stat_cache_sptree_ndx()
* [multiple] use splaytree_splay_nonnull()
* [h2] comment struct h2con h2_sid member is unused
* [mod_openssl] disable DH auto if DHParameters set
* [mod_openssl] replace deprecated openssl funcs
* [core] splaytree: splaytree_delete_splayed_node()
* [multiple] use splaytree_delete_splayed_node()
* [core] splaytree: splaytree_insert_splayed()
* [multiple] use splaytree_insert_splayed()
* [core] _WIN32 fs_win32_readlinkUTF8() (#3223)
* [mod_magnet] lighty.c.readlink() (fixes #3223)
* [core] add config option to reject pathinfo
* [mod_dirlisting] send 103 Early Hints only for h2+
* [mod_webdav] reject non-identity Content-Encoding
* [scons] include mod_h2 in static builds (fixes #3224)
* [core] http_request_validate_pseudohdrs comment
* [core] comment out redundant code
* [core] reset addtl state b4 dynamic error handler
* [core] reject Connection hdr in h2 as soon as seen
* [mod_h2] process headers for debug
* [mod_h2] comments and behavior for h2spec tests
* [multiple] mark func __attribute_returns_nonnull__
* [core] expand mimetype.assign builtin defaults
* [core] warn if IPv6 socket not supported
* [mod_simple_vhost,mod_evhost] check host strict
* [mod_simple_vhost,mod_evhost] minor code transform
* [mod_magnet] quiet 32-bit compiler warning
2023-10-08 17:46:08 +00:00
taca
76579195e4 doc: Updated www/ruby-aws-sdk-s3 to 1.136.0 2023-10-08 16:20:40 +00:00
taca
282ab486f8 www/ruby-aws-sdk-s3: update to 1.136.0
1.136.0 (2023-09-26)

* Feature - This release adds a new field COMPLETED to the ReplicationStatus
  Enum.  You can now use this field to validate the replication status of S3
  objects using the AWS SDK.

1.135.0 (2023-09-20)

* Feature - Fix an issue where the SDK can fail to unmarshall response due
  to NumberFormatException.
2023-10-08 16:20:12 +00:00
taca
7395f543f7 doc: Updated www/ruby-aws-sdk-kms to 1.72.0 2023-10-08 16:18:52 +00:00
taca
a885a91fd9 www/ruby-aws-sdk-kms: update to 1.72.0
1.72.0 (2023-09-27)

* Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's
  CHANGELOG.md for details.
2023-10-08 16:18:31 +00:00
taca
d2945f9793 doc: Updated www/ruby-aws-sdk-secretsmanager to 1.83.0 2023-10-08 16:16:48 +00:00
taca
11c0e1cab0 www/ruby-aws-sdk-secretsmanager: update to 1.83.0
1.83.0 (2023-09-27)

* Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's
  CHANGELOG.md for details.
2023-10-08 16:16:28 +00:00
taca
8f92165842 doc: Updated www/ruby-aws-sdk-core to 3.185.1 2023-10-08 16:14:42 +00:00
taca
4e503afa1f www/ruby-aws-sdk-core: update to 3.185.1
3.185.1 (2023-10-05)

* Issue - Ignore __type when deserializing Unions.

3.185.0 (2023-10-02)

* Feature - Updated Aws::STS::Client with the latest API changes.
* Feature - Updated Aws::SSO::Client with the latest API changes.

3.184.0 (2023-09-27)

* Feature - Change the ServiceError data member from read only to
  read/write.

3.183.1 (2023-09-25)

* Issue - Remove value inspection from param validation errors.

3.183.0 (2023-09-20)

* Feature - Updated Aws::SSOOIDC::Client with the latest API changes.

3.182.0 (2023-09-19)

* Feature - Updated Aws::SSOOIDC::Client with the latest API changes.
* Feature - Updated Aws::SSO::Client with the latest API changes.
2023-10-08 16:14:08 +00:00
taca
9d84678031 doc: Updated www/ruby-aws-partitions to 1.834.0 2023-10-08 16:12:00 +00:00
taca
cad4b2a895 www/ruby-aws-partitions: update to 1.834.0
1.834.0 (2023-10-05)

* Feature - Updated the partitions source data the determines the AWS
  service regions and endpoints.

1.833.0 (2023-10-04)

* Feature - Added support for enumerating regions for Aws::DataZone.

1.832.0 (2023-10-03)

* Feature - Updated the partitions source data the determines the AWS
  service regions and endpoints.

1.831.0 (2023-10-02)

* Feature - Updated the partitions source data the determines the AWS
  service regions and endpoints.

1.830.0 (2023-09-28)

* Feature - Added support for enumerating regions for Aws::BedrockRuntime.
* Feature - Added support for enumerating regions for Aws::Bedrock.

1.829.0 (2023-09-27)

* Feature - Updated the partitions source data the determines the AWS
  service regions and endpoints.

1.828.0 (2023-09-25)

* Feature - Updated the partitions source data the determines the AWS
  service regions and endpoints.

1.827.0 (2023-09-22)

* Feature - Updated the partitions source data the determines the AWS
  service regions and endpoints.

1.826.0 (2023-09-20)

* Feature - Updated the partitions source data the determines the AWS
  service regions and endpoints.

1.825.0 (2023-09-19)

* Feature - Updated the partitions source data the determines the AWS
  service regions and endpoints.
2023-10-08 16:11:36 +00:00
thor
0351afdea5 doc: Updated math/openblas to 0.3.24nb1 2023-10-08 15:41:54 +00:00
thor
38efda2b22 math/openblas: Fix pkg-config file for current version.
The last update broke the library name in the installed pkg-config file
for the openblas variants. Fixing this.

Our type of library naming should be pushed upstream, or adapted to
some other scheme.
2023-10-08 15:41:33 +00:00
js
5af7ff168e doc: Updated devel/objfw to 1.0.4 2023-10-08 12:10:04 +00:00
js
42a3659e1d Update devel/objfw to 1.0.4
* Fixes OFFile closing fd 0 when initialization fails
 * Fixes -[stringByAppendingPathComponent:] on empty strings
 * Fixes +[OFSystemInfo operatingSystemName] and
   +[OFSystemInfo operatingSystemVersion] returning nil on some systems
 * Adds a license for localizations
2023-10-08 12:09:53 +00:00
taca
bac4df1bb9 doc: Updated www/ruby-actionpack70 to 7.0.8nb1 2023-10-08 11:54:22 +00:00
taca
62c59b15b4 www/ruby-actionpack70: change dependency
Switch to depend on www/ruby-rack instead of www/ruby-rack2 since there is
no need to depend on rack < 3.  (It was required for actionpack 6.0.)

Bump PKGREVISION.
2023-10-08 11:53:59 +00:00
taca
6e4cf865b2 doc: Updated www/ruby-actionpack61 to 6.1.7.6nb1 2023-10-08 11:53:19 +00:00
taca
053992272c www/ruby-actionpack61: change dependency
Switch to depend on www/ruby-rack instead of www/ruby-rack2 since there is
no need to depend on rack < 3.  (It was required for actionpack 6.0.)

Bump PKGREVISION.
2023-10-08 11:52:53 +00:00
pin
c05f3a6bfe doc: Added devel/cargo-outdated version 0.13.1 2023-10-07 21:22:48 +00:00
pin
60b369d781 Add cargo-outdated 2023-10-07 21:22:16 +00:00
pin
030b5fcb4f devel/cargo-outdated: import package
A cargo subcommand for displaying when Rust dependencies are out of date.

cargo-outdated is for displaying when dependencies have newer versions
available.

The functionality of cargo-outdated largely depends on the cargo builtin
command cargo update.

To retrieve the list of available SemVer compatible dependencies,
cargo-outdated firstly creates a temporary workspace, then executes cargo
update against it, finally compares the temporary dependency tree with the
original one.

Similarly, to check the latest dependencies, cargo-outdated replaces the SemVer
requirements of direct dependencies with wildcards then goes through the same
process.
2023-10-07 21:21:26 +00:00
adam
115ec97567 Updated lang/py-libcst, textproc/py-openapi-schema-validator 2023-10-07 20:16:51 +00:00
adam
b13753a711 py-openapi-schema-validator: updated to 0.6.2
0.6.2

Bug fixes

OAS30Validator readonly writeonly fix
2023-10-07 20:15:53 +00:00
adam
27c043e45f py-libcst: updated to 1.1.0
1.1.0 - 2023-10-05

Added
* PEP 695 support
  * parser: PEP 695 - Type Parameter Syntax
  * Scope provider: support for type annotations
* PEP 701 support
  * parser: support arbitrarily nested f-strings
  * parser: Parse multiline expressions in f-strings
* parser: Support files with mixed newlines
* [libcst](https://crates.io/crates/libcst) is now published to crates.io

Fixed
* codemod/ApplyTypeAnnotationsVisitor: Do not annotate the same variable multiple times
* parser: Don't swallow trailing whitespace
* codemod/rename: Avoid duplicating import statements when the module name doesn't change

Updated
* cli: Don't gather dirs ending .py
* drop support for Python 3.7
* A few parser performance improvements:
  * Switch to using thread_local regular expressions to stop mutext contention
  * Remove need for regex in TextPosition::matches
  * Remove Regexes from whitespace parser
2023-10-07 20:14:31 +00:00
schmonz
5a79ef319a doc: Updated mail/libspf2 to 1.2.11nb2 2023-10-07 20:12:14 +00:00
schmonz
2516c6fa34 libspf2: apply upstream integer-underflow fix. Bump PKGREVISION. 2023-10-07 20:12:08 +00:00
adam
1300bc9f38 Updated net/yt-dlp, converters/py-simplejson 2023-10-07 20:10:50 +00:00
adam
1e936e6129 py-simplejson: updated to 3.19.2
Version 3.19.2 released 2023-10-05

* Updated test & build matrix to include Python 3.12 and use
  GitHub Actions as a Trusted Publisher (OIDC)
2023-10-07 20:10:32 +00:00
adam
b7e763cdd6 yt-dlp: updated to 2023.10.7
yt-dlp 2023.10.07

Extractor changes

abc.net.au: iview: Improve episode extraction
erocast: Add extractor
gofile: Fix token cookie bug by bashonly
iq.com: Fix extraction and subtitles
lbry
Add playlist support
Extract uploader_id
litv: Fix extractor
neteasemusic: Fix extractors
nhk: Fix VOD extraction
radiko: Improve extraction
substack
Fix download cookies bug
Fix embed extraction
theta: Remove extractors
wrestleuniversevod: Call API with device ID
xhamster: user: Support creator urls
youtube
Fix heatmap extraction
Raise a warning for Incomplete Data instead of an error

Misc. changes

cleanup
Update extractor tests
Miscellaneous: 377e85a by dirkf, gamer191, Grub4K
2023-10-07 20:09:16 +00:00
adam
a0766318f1 Updated x11/qt5 2023-10-07 20:02:01 +00:00
adam
3b66617bcf qt5: updated to 5.15.11
5.15.11
Bug fix release.
2023-10-07 20:00:32 +00:00
schmonz
ada79f6f66 discount: indent Makefile, NFCI. 2023-10-07 19:50:53 +00:00
schmonz
c23dad9af1 doc: Updated textproc/discount to 2.2.7d 2023-10-07 19:50:30 +00:00
schmonz
0f34d5df51 discount: update to 2.2.7d. From the changelog:
* port the m-e footnote bugfix to v2maint
* trivialities; change the -fstrict option description
* add a fistful of test cases for the new! improved! Markdown.pl
  compatible <tags>
* rework the tag handler to more closely adhere to Markdown.pl's
  observed behavior; also treat incomplete tags as actual tags in
  compatability mode (-fstrict)
* weird behavior on freebsd 4.8 w/ gcc 2.95.4; if a #ifdef ... #else ...
  #endif wraps the end of a if () it pukes up an error about a syntax
  error in a macro; pull those tests out and conditionally #define a
  macro instead
* the behavior of tags-starting-with-alpha-/-! was not like that of the
  reference implementation; fixed (in a very script-kiddy leaky fashion
  which I can't resolve with a runtime flag thanks to the 32 bit flags
  field in the 2.x series :-(
2023-10-07 19:50:24 +00:00
pin
c352ab117e doc: Updated textproc/typst to 0.8.0 2023-10-07 18:45:17 +00:00
pin
812810cbe4 textproc/typst: update to 0.8.0
Version 0.8.0 (September 13, 2023) Latest

Scripting
 - Plugins (thanks to @astrale-sharp and @arnaudgolfouse)
     - Typst can now load plugins that are compiled to WebAssembly
     - Anything that can be compiled to WebAssembly can thus be loaded asa
       plugin
     - These plugins are fully encapsulated (no access to file system or
       network)
     - Plugins can be shipped as part of packages
     - Plugins work just the same in the web app
 - Types are now first-class values (Breaking change)
     - A type is now itself a value
     - Some types can be called like functions (those that have a constructor),
       e.g. int and str
     - Type checks are now of the form type(10) == int instead of the old
       type(10) == "integer". Compatibility with the old way will remain for a
       while to give package authors time to upgrade, but it will be removed at
       some point.
     - Methods are now syntax sugar for calling a function scoped to a type,
       meaning that "hello".len() is equivalent to str.len("hello")
 - Added support for import renaming with as
 - Added a duration type
 - Added support for CBOR encoding and decoding
 - Added encoding and decoding functions from and to bytes for data formats:
   json.decode, json.encode, and similar functions for other formats
 - Added array.intersperse function
 - Added str.rev function
 - Added calc.tau constant
 - Made bytes joinable and addable
 - Made array.zip function variadic
 - Fixed bug with eval when the mode was set to "math"
 - Fixed bug with ends-with function on strings
 - Fixed bug with destructuring in combination with break, continue, and return
 - Fixed argument types of hyperbolic functions, they don't allow angles
   anymore (Breaking change)
 - Renamed some color methods: rgba becomes to-rgba, cmyk becomes to-cmyk, and
   luma becomes to-luma (Breaking change)

Export
 - Added SVG export (thanks to @Enter-tainer)
 - Fixed bugs with PDF font embedding
 - Added support for page labels that reflect the page numbering style in
   the PDF

Text and Layout
 - Added highlight function for highlighting text with a background color
 - Added polygon.regular function for drawing a regular polygon
 - Added support for tabs in raw elements alongside tab-width parameter
 - The layout engine now tries to prevent "runts" (final lines consisting of
   just a single word)
 - Added Finnish translations
 - Added hyphenation support for Polish
 - Improved handling of consecutive smart quotes of different kinds
 - Fixed vertical alignments for number-align argument on page function
   (Breaking change)
 - Fixed weak pagebreaks after counter updates
 - Fixed missing text in SVG when the text font is set to "New Computer Modern"
 - Fixed translations for Chinese
 - Fixed crash for empty text in show rule
 - Fixed leading spaces when there's a linebreak after a number and a comma
 - Fixed placement of floating elements in columns and other containers
 - Fixed sizing of block containing just a single box

Math
 - Added support for augmented matrices
 - Removed support for automatic matching of fences like | and || as there were
   too many false positives. You can use functions like abs or norm or an
   explicit lr call instead. (Breaking change)
 - Fixed spacing after number with decimal point in math
 - Fixed bug with primes in subscript
 - Fixed weak spacing
 - Fixed crash when text within math contains a newline

Tooling and Diagnostics
 - Added hints when trying to call a function stored in a dictionary without
   extra parentheses
 - Fixed hint when referencing an equation without numbering
 - Added more details to some diagnostics (e.g. when SVG decoding fails)

Command line interface
 - Added typst update command for self-updating the CLI (thanks to @jimvdl)
 - Added download progress indicator for packages and updates
 - Added --format argument to explicitly specify the output format
 - The CLI now respects proxy configuration through environment variables and
   has a new --cert option for setting a custom CA certificate
 - Fixed crash when field wasn't present and --one is passed to typst query

Miscellaneous Improvements
 - Added page setup guide
 - Added figure.caption function that can be used for simpler figure
   customization (Breaking change because it.caption now renders the full
   caption with supplement in figure show rules and manual outlines)
 - Moved caption-pos argument to figure.caption function and renamed it to
   position (Breaking change)
 - Added separator argument to figure.caption function
 - Added support for combination of and/or and before/after selectors
 - Packages can now specify a minimum compiler version they require to work
 - Fixed parser bug where method calls could be moved onto their own line for
   #let expressions in markup (Breaking change)
 - Fixed bugs in sentence and title case conversion for bibliographies
 - Fixed supplements for alphanumeric and author-title bibliography styles
 - Fixed off-by-one error in APA bibliography style

Development
 - Made Span and FileId more type-safe so that all error conditions must be
   handled by World implementors
2023-10-07 18:44:56 +00:00
bsiegert
53e0bff6a0 doc: Updated lang/go120 to 1.20.9 2023-10-07 18:10:04 +00:00
bsiegert
a2776504c2 go120: update to 1.20.9 (security).
cmd/go: line directives allows arbitrary execution during build

"//line" directives can be used to bypass the restrictions on "//go:cgo_"
directives, allowing blocked linker and compiler flags to be passed during
compliation. This can result in unexpected execution of arbitrary code when
running "go build". The line directive requires the absolute path of the file in
which the directive lives, which makes exploting this issue significantly more
complex.

This is CVE-2023-39323 and Go issue https://go.dev/issue/63211.

View the release notes for more information:
https://go.dev/doc/devel/release#go1.20.9
2023-10-07 18:09:35 +00:00
pin
96ff35347d doc: Updated net/bandsnatch to 0.3.1 2023-10-07 15:22:48 +00:00
pin
6c5fcd58ff net/bandsnatch: update to 0.3.1
Fixed
 - Fix crash that would occur if batch_size or item_count were null in a
   user's collection data for whatever reason.
2023-10-07 15:22:28 +00:00
gdt
400b845bbb doc: Updated converters/py-zfec to 1.5.7.3 2023-10-07 13:25:17 +00:00
gdt
78c6624335 converters/py-zfec: Update to 1.5.7.3
upstream NEWS: bugfixes
2023-10-07 13:25:06 +00:00