Commit graph

10005 commits

Author SHA1 Message Date
adam
f19918b846 lang/python27: update to 2.7.14
Python 2.7.14:

Core and Builtins
- bpo-30657: Fixed possible integer overflow in PyString_DecodeEscape.
- bpo-27945: Fixed various segfaults with dict when input collections are
  mutated during searching, inserting or comparing.  Based on patches by
  Duane Griffin and Tim Mitchell.
- bpo-25794: Fixed type.__setattr__() and type.__delattr__() for
  non-interned or unicode attribute names.  Based on patch by Eryk Sun.
- bpo-29935: Fixed error messages in the index() method of tuple and list
  when pass indices of wrong type.
- bpo-28598: Support __rmod__ for subclasses of str being called before
  str.__mod__.  Patch by Martijn Pieters.
- bpo-29602: Fix incorrect handling of signed zeros in complex constructor for
  complex subclasses and for inputs having a __complex__ method. Patch
  by Serhiy Storchaka.
- bpo-29347: Fixed possibly dereferencing undefined pointers
  when creating weakref objects.
- Issue 14376: Allow sys.exit to accept longs as well as ints. Patch
  by Gareth Rees.
- Issue 29028: Fixed possible use-after-free bugs in the subscription of the
  buffer object with custom index object.
- Issue 29145: Fix overflow checks in string, bytearray and unicode.
  Patch by jan matejek and Xiang Zhang.
- Issue 28932: Do not include <sys/random.h> if it does not exist.

Extension Modules
- bpo-31170: Update vendorized expat to 2.2.4.
- Issue 29169: Update zlib to 1.2.11.
2017-09-17 09:54:52 +00:00
alnsn
02496ac8d7 Drop maintainership. 2017-09-16 19:53:50 +00:00
wiz
ef141a6b79 Reset maintainer 2017-09-16 19:26:41 +00:00
asau
3aac584df6 Update ABCL 1.5.0
Changes in version 1.5.0

Enhancements
------------

* [r14934] ABCL-INTROSPECT a contrib for accessing ABCL compiler
  information (Alan).

* [r14907] ABCL-AIO all-in-one jar target creates dist/abcl-aio.jar (Alan).

* [r15009] Rework ABCL-BUILD as a contrib which uses UIOP machinery to
  invoke Ant on <file:build.xml>, unifying all build mechanisms to a single
  prescriptive source artifact external to Common-Lisp.

* [r14911] [r14955] [r14914]  Source recording on SYS:SOURCE plist
  PRECOMPILER possibly beta reduce form with function
  position lambda, record arglist during Build

* [r14912] [r14922] Re-write the ASDF descriptions using secondary systems

* [r14917] build: 'abcl.clean.application.fasls' now cleans only ABCL fasls

* [r14923] Added Dockerfile to package ABCL in Docker

* [r14927] Build add ability to download Maven from Ant

* [r14931] Bless EXT:GET-PID as the offical way to get process id

* [r14947] JSS syntax for access Java fields (Alan)

* [r14962] JSS:J2LIST as a convenience method for turning "anything"
  in Java to an appropriate Lisp list.

* [r14967] (Provisional) ABCL-ASDF JDK-JAR ASDF class to describe JDK
  path locations (Alan).

* [r14969] Add QUICKLISP-ABCL:*QUICKLISP-PARENT-DIR* special (Alan).

* [r14978] Implement MAKE-LOAD-FORM for Java fields (Alan).

* [r15013] Restore the ability SYSTEM:CHOOSE-ASSEMBLER to use Objectweb

* [r15018] Enable use of MVN-MODULE in ASDF definitions (Alan).

* [r15019] Add NAMED-READTABLES from <​https://github.com/melisgl/named-readtables>

* [r15062] ABCL-INTROSPECT 'javaparser.asd' definition adds a
  SHARPSIGN-ONE-QUOTATION_MARK macro to evaluate arbitrary Java expressions


Fixes
-----

* [r14902] Fix CL:OPEN for :DIRECTION :INPUT (pipping)

* [r14903] JNEW-RUNTIME-CLASS Make static functions and :int
  parameters work.  Fix return conversion for null.  Ensure that the
  same classloader is used (olof).

* [r14905] ABCL-ASDF uses the value of the reported Maven home to look
  for libraries, fixing loading CFFI under FreeBSD 11-RELEASE.

* [r14906] JSS:LOOKUP-CLASSNAME would return allcaps class name if not
  found (alan).

* [r14909] QUICKLISP-ABCL simplify load/compile logic.

* [r14918] JAVA Remove generic Throwable handler from JAVA:JFIELD innards

* [r14919] ABCL-ASDF fix finding Maven on Fedora

* [r14926] ABCL-ASDF fix problems with test suite's reliance on PROVE

* [r14921] CL:DIRECTORY no longer errors on files containing asterisk characters

* [r14950] Fix restart calculation for compiled closures (Alan)

* [r14952] Guard printing of large Java objects (Alan)

* [r14953] Fix debugging frames which don't have a pathname (Alan)

* [r14956] Show function documentation in describe (Alan)

* [r14966] JAVA:CHAIN returns last value of computation (Alan)

* [r14973] ABCL-ASDF probes for "mvn" and "mvn.cmd" under Windows

* [r14974] Standardize the use of CL:*LOAD-VERBOSE* to control loading
  verbosity.

* [r14976] Fix CL:GET-OUTPUT-STREAM-STRING to reset underlying buffer

* [r14979] Fix JavaObject.getParts() for Java arrays (Alan).

* [r14980] Fix SETF for EXT:URL-PATHNAME-FRAGMENT

* [r14987] Fix CL:MAKE-PATHNAME for explicitly nil HOST

* [r14996] Correctly implement 'time-of-the-time' daylight savings
  semantics (Scott).

* [r15001] Fix signalling simple error with #\~ in CL:FORMAT string
  (Alan).

* [r15002] Fix problems with SHARED-INITIALIZE (Olof).

* [r15003] Fix ENSURE-GENERIC-FUNCTION when removing definition (Olof).

* [r15004] Fix DESTRUCTURING-BIND with &rest arguments (Olof)

* [r15024] Optimise LOGCOUNT (Olof).

* [r15026] Support bignum argument for FILE-POSITION (Olof).

* [r15032] Better directory validation; handle :UNSPECIFIC (Olof).

* [r15033] Fix LOOP code size estimation (Olof).

* [r15034] Fix NTH inlining type mismatch (Olof).

* [r15035] Fix byte code verification error in edge case (Olof).

* [r15036] Fix PACKAGE-ERROR-PACKAGE behaviour (Olof).

* [r15037] Fix MAX type derivation (Olof).

* [r15038] Fix NPE if directory can't be accessed (Olof).

* [r15044] Documentation renders less/greater-than characters correctly (Olof).


Updates
-------

* ASDF 3.2.1
2017-09-16 11:48:30 +00:00
asau
42295b7c4a Update to SBCL 1.3.21
New in version 1.3.21

 - minor incompatible change: the CLOBBER-IT restart for defstruct
   redefintion has been removed after a 15 year deprecation cycle.
   Use the new name, RECKLESSLY-CONTINUE. Note also that this restart
   is hidden if deemed unsafe due to altered placement of untagged slots
   in the structure.
 - enhancement: the assignment of -DSBCL_PREFIX= in src/runtime/GNUmakefile
   can be removed as a local patch, which results in an sbcl executable
   that finds its core file relative to itself by looking in "../lib/sbcl".
 - enhancement: backends using the generational GC are able to relocate
   dynamic space anywhere the operating system places it. This feature
   can be disabled by removing :relocatable-heap from the build configuration.
   Not supported on Windows.
 - enhancement: DEFMETHOD no longer signals IMPLICIT-GENERIC-FUNCTION-WARNING.
 - enhancement: better type conflict detection for high order functions,
   e.g. (find x "123" :test #'=)
 - enhancement: the tabular output of ROOM is aligned dynamically,
   preventing misaligned tables for larger sizes or counts.
 - enhancement: ROOM reports on immobile space if applicable.
 - optimization: optimized external-format routines.
 - bug fix: SB-INTROSPECT:ALLOCATION-INFORMATION returns :IMMOBILE
   instead of :FOREIGN for objects in immobile space.
 - bug fix: dotted lists in special forms and function call forms signal
   an appropriate error
 - bug fix: EQUALP hash tables with pathname keys now ignore internal slots.
   (#1712944, reported by Jason Miller)


New in version 1.3.20

 - minor incompatible change: DEF{GENERIC,METHOD} no longer accept
   some illegal lambda lists such as (defgeneric bar (foo &key foo))
   or (defgeneric baz (t)) that were accepted before.
 - optimization: a valueless &AUX binding in a BOA constructor does not
   force all slots reads in safe code to perform a full type check.
 - optimization: ATOMIC-PUSH and ATOMIC-POP generate better code
 - bug fix: the low-level debugger would erroneously print - or not print
   as the case may be - "(bad-address)" for some objects depending whether
   the --dynamic-space-size argument was used at Lisp startup
 - bug fix: a DEFCONSTANT with a non non-eql-comparable object as the value
   could cause miscompilation if that constant appeared as the default
   expression for an &OPTIONAL binding
 - bug fix: generic function lambda lists are now checked for repeated
   and otherwise illegal entries. (#1704114)
 - bug fix: setting gencgc_verbose = 1 could cause deadlock in fprintf()
   depending on the platform's stdio implementation. The relevant code
   has been changed to use snprintf() and write() instead.


New in version 1.3.19

 - enhancement: specialized arrays can be printed readably without using
   *read-eval*
 - enhancement: SB-DEBUG:PRINT-BACKTRACE truncates huge string arguments.
   The full string remains available for inspection via (SB-DEBUG:ARG).
 - bug fix: backtracing from several threads at once could fail
 - bug fix: floating-point infinities could not be used as keys in EQUALP
   hash tables. (#1696274)
 - bug fix: random sb-fasteval failures. (#1642708)
 - bug fix: align the stack in callback wrappers to defend against C compiler
   over-aggressive use of SIMD. (#1697528)
 - bug fix: don't try to find the class when reporting that a class does not
   exist for a primitive type. (#1697226)
2017-09-16 10:41:55 +00:00
asau
d65755abdc Update to Poly/ML 5.7.
Changes are not known.
2017-09-15 23:51:04 +00:00
taca
43e37f667d ruby24-base: Update ruby24-base and ruby24 to 2.4.2.
Ruby 2.4.2 Released			Posted by nagachika on 14 Sep 2017

We are pleased to announce the release of Ruby 2.4.2. This release contains
some security fixes.

* CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprintf

* CVE-2017-10784: Escape sequence injection vulnerability in the Basic
  authentication of WEBrick

* CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1 docod

* CVE-2017-14064: Heap exposure in generating JSON

* Multiple vulnerabilities in RubyGems

* Update bundled libyaml to version 0.1.7.

There are also many bug-fixes. See commit logs for more details.
2017-09-15 00:39:46 +00:00
taca
3ccc31b6e5 Update ruby23-base, ruby-gdbm, ruby-fiddle, ruby-readline, ruby-tk and
ruby23 packages to 2.3.5.

pkgsrc change: clean up PLIST.


Ruby 2.3.5 Released				Posted by usa on 14 Sep 2017

Ruby 2.3.5 has been released.

This release includes about 70 bug fixes after the previous release, and also
includes several security fixes. Please check the topics below for details.

* CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprintf

* CVE-2017-10784: Escape sequence injection vulnerability in the Basic
  authentication of WEBrick

* CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1 docode

* CVE-2017-14064: Heap exposure vulnerability in generating JSON

* Multiple vulnerabilities in RubyGems

* Updated bundled libyaml to version 0.1.7

See the ChangeLog for details.
2017-09-15 00:36:17 +00:00
taca
7aa2cea01b Update ruby22-base and ruby22 packages to 2.2.8.
pkgsrc change: clean up PILST.


Ruby 2.2.8 Released			Posted by usa on 14 Sep 2017

Ruby 2.2.8 has been released. This release includes several security
fixes. Please check the topics below for details.

* CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprintf

* CVE-2017-10784: Escape sequence injection vulnerability in the Basic
  authentication of WEBrick

* CVE-2017-14033: Buffer underrun vulnerability in OpenSSL ASN1 docode

* CVE-2017-14064: Heap exposure vulnerability in generating JSON

* Multiple vulnerabilities in RubyGems

* Updated bundled libyaml to version 0.1.7

Ruby 2.2 is now under the state of the security maintenance phase, until the
endo of the March of 2018. After the date, maintenance of Ruby 2.2 will be
ended. We recommend you start planning migration to newer versions of Ruby,
such as 2.4 or 2.3.
2017-09-15 00:33:58 +00:00
wiz
9b0ef0cf67 Switch from ffcall to libffcall (newer version of same).
Bump version.
2017-09-10 20:03:49 +00:00
wiz
07c437fb60 Honor LDFLAGS again. Fixes RELRO build. 2017-09-10 08:56:47 +00:00
dholland
0336c82112 Remove stray patch patching file from some other source tree. 2017-09-10 00:12:16 +00:00
sevan
dfcb62f9ad Set HOMEPAGE 2017-09-09 16:04:31 +00:00
jaapb
b06ee14f54 Updated package to latest version, 8.6.1. Changes include:
- Fix #5380: Default colors for CoqIDE are actually applied.
- Fix plugin warnings
- Document named evars (including Show ident)
- Fix Bug #5574, document function scope
- Adding a test case as requested in bug 5205.
- Fix Bug #5568, no dup notation warnings on repeated module imports
- Fix documentation of Typeclasses eauto :=
- Refactor documentation of records.
- Protecting from warnings while compiling 8.6
- Fixing an inconsistency between configure and configure.ml
- Add test-suite checks for coqchk with constraints
- Fix bug #5019 (looping zify on dependent types)
- Fix bug 5550: "typeclasses eauto with" does not work with section variables.
- Bug 5546, qualify datatype constructors when needed in Show Match
- Bug #5535, test for Show with -emacs
- Fix bug #5486, don't reverse ids in tuples
- Fixing #5522 (anomaly with free vars of pat)
- Fix bug #5526, don't check for nonlinearity in notation if printing only
- Fix bug #5255
- Fix bug #3659: -time should understand multibyte encodings.
- FIx bug #5300: Anomaly: Uncaught exception Not_found" in "Print Assumptions".
- Fix outdated description in RefMan.
- Repairing `Set Rewriting Schemes`
- Fixing #5487 (v8.5 regression on ltac-matching expressions with evars).
- Fix description of command-line arguments for Add (Rec) LoadPath
- Fix bug #5377: @? patterns broken.
- add XML protocol doc
- Fix anomaly when doing [all:Check _.] during a proof.
- Correction of bug #4306
- Fix #5435: [Eval native_compute in] raises anomaly.
- Instances should obey universe binders even when defined by tactics.
- Intern names bound in match patterns
- funind: Ignore missing info for current function
- Do not typecheck twice the type of opaque constants.
- show unused intro pattern warning
- [future] Be eager when "chaining" already resolved future values.
- Opaque side effects
- Fix #5132: coq_makefile generates incorrect install goal
- Run non-tactic comands without resilient_command
- Univs: fix bug #5365, generation of u+k <= v constraints
- make `emit' tail recursive
- Don't require printing-only notation to be productive
- Fix the way setoid_rewrite handles bindings.
- Fix for bug 5244 - set printing width ignored when given enough space
- Fix bug 4969, autoapply was not tagging shelved subgoals correctly
2017-09-08 17:19:01 +00:00
jaapb
d37c53889f Updated package to latest version, 4.05. A changelog is not available -
this is a minor release that fixes compatibility with OCaml 4.05, though.
2017-09-08 11:31:01 +00:00
jaapb
410a1001fa Recursive revbump associated with update of ocaml to 4.05 2017-09-08 09:51:18 +00:00
jaapb
768545178c Updated package to latest version, 4.05.
Package changes: PLIST cleanup, and added some options for native
compilation.

Changes from ocaml 4.04.2 include (MPR and GPR changed to M and G to not
trigger our CVS hooks):
(Changes that can break existing programs are marked with a "*")

### Language features:

### Code generation and optimizations:

- M#7201, G#954: Correct wrong optimisation of "0 / <expr>"
  and "0 mod <expr>" in the case when <expr> was a non-constant
  evaluating to zero
  (Mark Shinwell, review by Gabriel Scherer, Leo White and Xavier Leroy)

- M#7357, G#832: Improve compilation time for toplevel
  include(struct ... end : sig ... end)
  (Alain Frisch, report by Hongbo Zhang, review by Jacques Garrigue)

- M#7533, G#1173: Correctly perform side effects for certain
  cases of "/" and "mod"
  (Mark Shinwell, report by Jan Mitgaard)

- G#504: Instrumentation support for fuzzing with afl-fuzz.
  (Stephen Dolan, review by Alain Frisch, Pierre Chambart, Mark
  Shinwell, Gabriel Scherer and Damien Doligez)

- G#863, G#1068, G#1069: Optimise matches with constant
  results to lookup tables.
  (Stephen Dolan, review by Gabriel Scherer, Pierre Chambart,
  Mark Shinwell, and bug report by Gabriel Scherer)

- G#1150: Fix typo in arm64 assembler directives
  (KC Sivaramakrishnan)

### Runtime system:

- M#385, G#953: Add caml_startup_exn
  (Mark Shinwell)

- M#7423, G#946: expose new exception-raising functions
  `void caml_{failwith,invalid_argument}_value(value msg)`
  in addition to
  `void caml_{failwith,invalid_argument}(char const *msg)`.
  The previous functions would not free their message argument, so
  were inconvient for dynamically-allocated messages; the messages
  passed to the new functions are handled by the garbage collector.
  (Gabriel Scherer, review by Mark Shinwell, request by Immanuel Litzroth)

- M#7557, G#1213: More security for getenv
  (Damien Doligez, reports by Seth Arnold and Eric Milliken, review by
  Xavier Leroy, David Allsopp, Stephen Dolan, Hannes Mehnert)

- G#795: remove 256-character limitation on Sys.executable_name
  (Xavier Leroy)

- G#891: Use -fno-builtin-memcmp when building runtime with gcc.
  (Leo White)

### Type system:

- M#6608, G#901: unify record types when overriding all fields
  (Tadeu Zagallo and Gabriel Scherer, report by Jeremy Yallop,
  review by David Allsopp, Jacques Garrigue)

* M#7414, G#929: Soundness bug with non-generalized type variables and
  functors.
  (compatibility: some code using module-global mutable state will
   fail at compile-time and is fixed by adding extra annotations;
   see the Mantis and Github discussions.)
  (Jacques Garrigue, report by Leo White)

### Compiler user-interface and warnings:

- M#7050, G#748 G#843 G#864: new `-args/-args0 <file>` parameters to
  provide extra command-line arguments in a file -- see documentation.
  User programs may implement similar options using the new `Expand`
  constructor of the `Arg` module.
  (Bernhard Schommer, review by J?r?mie Dimino, Gabriel Scherer
   and Damien Doligez, discussion with Alain Frisch and Xavier Leroy,
   feature request from the Coq team)

- M#7137, G#960: "-open" command line flag now accepts
  a module path (not a module name)
  (Arseniy Alekseyev and Leo White)

- M#7172, G#970: add extra (ocamlc -config) options
  int_size, word_size, ext_exe
  (Gabriel Scherer, request by Daniel B?nzli)

- M#7315, G#736: refine some error locations
  (Gabriel Scherer and Alain Frisch, report by Matej Ko??k)

- M#7473, G#1025: perform proper globbing for command-line arguments on
  Windows
  (Jonathan Protzenko)

- M#7479: make sure "ocamlc -pack" is only given .cmo and .cmi files,
  and that "ocamlopt -pack" is only given .cmx and .cmi files.
  (Xavier Leroy)

- G#796: allow compiler plugins to declare their own arguments.
  (Fabrice Le Fessant)

- G#829: better error when opening a module aliased to a functor
  (Alain Frisch)

- G#911: ocamlc/ocamlopt do not pass warnings-related options to C
  compiler when called to compile third-party C source files
  (S?bastien Hinderer, review by Adrien Nader and David Allsopp)

- G#915: fix -dsource (pprintast.ml) bugs
  (Runhang Li, review by Alain Frisch)

* G#933: ocamlopt -p now reports an error on platforms that do not
  support profiling with gprof; dummy profiling libraries are no longer
  installed on such platforms.
  This can be tested with ocamlopt -config
  (S?bastien Hinderer)

- G#1009: "ocamlc -c -linkall" and "ocamlopt -c -linkall" can now be used
  to set the "always link" flag on individual compilation units.  This
  controls linking with finer granularity than "-a -linkall", which sets
  the "always link" flag on all units of the given library.
  (Xavier Leroy)

- G#1015: add option "-plugin PLUGIN" to ocamldep too. Use compilerlibs
  to build ocamldep. Add option "-depend" to ocamlc/ocamlopt to behave
  as ocamldep. Remove any use of ocamldep to build the distribution.
  (Fabrice Le Fessant)

- G#1027: various improvements to -dtimings, mostly including time
  spent in subprocesses like preprocessors
  (Valentin Gatien-Baron, review by Gabriel Scherer)

- G#1098: the compiler now takes the boolean "OCAML_COLOR" environment
  variable into account if "-color" is not provided.  This allows users
  to override the default behaviour without modifying invocations of ocaml
  manually.
  (Hannes Mehnert, Guillaume Bury,
   review by Daniel B?nzli, Gabriel Scherer, Damien Doligez)

### Standard library:

- M#6975, G#902: Truncate function added to stdlib Buffer module
  (Dhruv Makwana, review by Alain Frisch and Gabriel Scherer)

- M#7279, G#710: `Weak.get_copy` `Ephemeron.*_copy` doesn't copy
  custom blocks anymore
  (Fran?ois Bobot, Alain Frisch, bug reported by Martin R. Neuh?u?er,
  review by Thomas Braibant and Damien Doligez)

* M#7500, G#1081: Remove Uchar.dump
  (Daniel B?nzli)

- G#760: Add a functions List.compare_lengths and
  List.compare_length_with to avoid full list length computations
  (Fabrice Le Fessant, review by Leo White, Josh Berdine and Gabriel Scherer)

- G#778: Arg: added option Expand that allows to expand a string
  argument to a string array of new arguments
  (Bernhard Schommer, review by Gabriel Scherer and J?r?mie Dimino)

- G#849: Expose a Spacetime.enabled value
  (Leo White)

- G#885: Option-returning variants of stdlib functions
  (Alain Frisch, review by David Allsopp and Bart Jacobs)

- G#869: Add find_first, find_first_opt, find_last, find_last_opt to
  maps and sets.  Find the first or last binding or element
  satisfying a monotonic predicate.
  (Gabriel de Perthuis, with contributions from Alain Frisch, review by
  Hezekiah M. Carty and Simon Cruanes, initial report by Gerd Stolpmann)

- G#875: Add missing functions to ArrayLabels, BytesLabels,
  ListLabels, MoreLabels, StringLabels so they are compatible with
  non-labeled counterparts. Also add missing @@ocaml.deprecated attributes
  in StringLabels and BytesLabels.
  (Roma Sokolov, review by Gabriel Scherer, Jacques Garrigue,
   Gabriel Radanne, Alain Frisch)

- G#999: Arg, do not repeat the usage message thrice when reporting an error
  (this was a regression in 4.03)
  (Florian Angeletti, review by Gabriel Scherer)

- G#1042: Fix escaping of command-line arguments in
  Unix.create_process{,_env} under Windows.  Arguments with tabs should now
  be received verbatim by the child process.
  (Nicolas Ojeda Bar, Andreas Hauptmann review by Xavier Leroy)

### Debugging and profiling:

- M#7258: ocamldebug's "install_printer" command had problems with
  module aliases
  (Xavier Leroy)

- G#378: Add [Printexc.raise_with_backtrace] to raise an exception using
  an explicit backtrace
  (Fran?ois Bobot, review by Gabriel Scherer, Xavier Leroy, Damien Doligez,
   Fr?d?ric Bour)

### Manual and documentation:

- M#6597, G#1030: add forward references to language extensions
  that extend non-terminal symbols in the language reference section.
  (Florian Angeletti, review by Gabriel Scherer)

- M#7497, G#1095: manual, enable numbering for table of contents
  (Florian Angeletti, request by Daniel B?nzli)

- M#7539, G#1181: manual, update dead links in ocamldoc chapter
  (Florian Angeletti)

- G#633: manpage and manual documentation for the `-opaque` option
  (Konstantin Romanov, Gabriel Scherer, review by Mark Shinwell)

- G#751, G#925: add a HACKING.adoc file to contain various
  tips and tricks for people hacking on the repository. See also
  CONTRIBUTING.md for advice on sending contributions upstream.
  (Gabriel Scherer and Gabriel Radanne, review by David Allsopp,
  inspired by John Whitington)

- G#916: new tool lintapidiff, use it to update the manual with
  @since annotations for API changes introduced between 4.00-4.05.
  (Edwin T?r?k, review by Gabriel Scherer, discussion with Alain Frisch,
   David Allsopp, S?bastien Hinderer, Damien Doligez and Xavier Leroy)

- G#939: activate the caml_example environment in the language
  extensions section of the manual. Convert some existing code
  examples to this format.
  (Florian Angeletti)

- G#1082: clarify that the use of quoted string for preprocessed
  foreign quotations still requires the use of an extension node
  [%foo ...] to mark non-standard interpretation.
  (Gabriel Scherer, request by Matthew Wahab in G#1066,
   review by Florian Angeletti)

### Other libraries:

- M#7158: Event.sync, Mutex.create, Condition.create cause too many GCs.
  The fix is to no longer consider mutexes and condition variables
  as rare kernel resources.
  (Xavier Leroy)

- M#7264: document the different behaviors of Unix.lockf under POSIX
  and under Win32.
  (Xavier Leroy, report by David Allsopp)

- M#7339, G#787: Support the '0 dimension' case for bigarrays
  (see Bigarray documentation)
  (Laurent Mazare,
   review by Gabriel Scherer, Alain Frisch and Hezekiah M. Carty)

* M#7342, G#797: fix Unix.read on pipes with no data left on Windows
  it previously raised an EPIPE error, it now returns 0 like other OSes
  (Jonathan Protzenko, review by Andreas Hauptmann and Damien Doligez)

- G#650: in the Unix library, add `?cloexec:bool` optional arguments to
  functions that create file descriptors (`dup`, `dup2`, `pipe`, `socket`,
  `socketpair`, `accept`).  Implement these optional arguments in the
  most atomic manner provided by the operating system to set (or clear)
  the close-on-exec flag at the same time the file descriptor is created,
  reducing the risk of race conditions with `exec` or `create_process`
  calls running in other threads, and improving security.  Also: add a
  `O_KEEPEXEC` flag for `openfile` by symmetry with `O_CLOEXEC`.
  (Xavier Leroy, review by Mark Shinwell, David Allsopp and Alain Frisch,
   request by Romain Beauxis)

- G#996: correctly update caml_top_of_stack in systhreads
  (Fabrice Le Fessant)

- G#997, G#1077: Deprecate Bigarray.*.map_file and add Unix.map_file as a
  first step towards moving Bigarray to the stdlib
  (J?r?mie Dimino and Xavier Leroy)

### Toplevel:

- M#7060, G#1035: Print exceptions in installed custom printers
  (Tadeu Zagallo, review by David Allsopp)

### Tools:

- M#5163: ocamlobjinfo, dump globals defined by bytecode executables
  (St?phane Glondu)

- M#7333: ocamldoc, use the first sentence of text file as
  a short description in overviews.
  (Florian Angeletti)

- G#848: ocamldoc, escape link targets in HTML output
  (Etienne Millon, review by Gabriel Scherer, Florian Angeletti and
  Daniel B?nzli)

- G#986: ocamldoc, use relative paths in error message
  to solve ocamlbuild+doc usability issue (ocaml/ocamlbuild#79)
  (Gabriel Scherer, review by Florian Angeletti, discussion with Daniel B?nzli)

- G#1017: ocamldoc, add an option to detect code fragments that could be
  transformed into a cross-reference to a known element.
  (Florian Angeletti, review and suggestion by David Allsopp)

- clarify ocamldoc text parsing error messages
  (Gabriel Scherer)

### Compiler distribution build system:

- M#7377: remove -std=gnu99 for newer gcc versions
  (Damien Doligez, report by ygrek)

- M#7452, G#1228: tweak GCC options to try to avoid the
  Skylake/Kaby lake bug
  (Damien Doligez, review by David Allsopp, Xavier Leroy and Mark Shinwell)

- G#693: fail on unexpected errors or warnings within caml_example
  environment.
  (Florian Angeletti)

- G#803: new ocamllex-based tool to extract bytecode compiler
  opcode information from C headers.
  (Nicolas Ojeda Bar)

- G#827: install missing mli and cmti files, new make target
  install-compiler-sources for installation of compiler-libs ml files
  (Hendrik Tews)

- G#887: allow -with-frame-pointers if clang is used as compiler on Linux
  (Bernhard Schommer)

- G#898: fix locale-dependence of primitive list order,
  detected through reproducible-builds.org.
  (Hannes Mehnert, review by Gabriel Scherer and Ximin Luo)

- G#907: Remove unused variable from the build system
  (S?bastien Hinderer, review by whitequark, Gabriel Scherer, Adrien Nader)

- G#911: Clarify the use of C compiler related variables in the build system.
  (S?bastien Hinderer, review by Adrien Nader, Alain Frisch, David Allsopp)

- G#919: use clang as preprocessor assembler if clang is used as compiler
  (Bernhard Schommer)

- G#927: improve the detection of hashbang support in the configure script
  (Arma?l Gu?neau)

- G#932: install ocaml{c,lex}->ocaml{c,lex}.byte symlink correctly
  when the opt target is built but opt.opt target is not.
  (whitequark, review by Gabriel Scherer)

- G#935: allow build in Android's termux
  (ygrek, review by Gabriel Scherer)

- G#984: Fix compilation of compiler distribution when Spacetime
  enabled
  (Mark Shinwell)

- G#991: On Windows, fix installation when native compiler is not
  built
  (S?bastien Hinderer, review by David Allsopp)

- G#1033: merge Unix and Windows build systems in the root directory
  (S?bastien Hinderer, review by Damien Doligez and Adrien Nader)

- G#1047: Make .depend files generated for C sources more portable
  (S?bastien Hinderer, review by Xavier Leroy and David Allsopp)

- G#1076: Simplify ocamlyacc's build system
  (S?bastien Hinderer, review by David Allsopp)

### Compiler distribution build system: Makefile factorization

The compiler distribution build system (the set of Makefiles used to
build the compiler distribution) traditionally had separate Makefiles
for Unix and Windows, which lead to some amount of duplication and
subtle differences and technical debt in general -- for people working
on the compiler distribution, but also cross-compilation or porting to
new systems. During the 4.05 development period, S?bastien Hinderer
worked on harmonizing the build rules and merging the two build
systems.

* Some changes were made to the config/Makefile file which
  is exported as $(ocamlc -where)/Makefile.config, and on
  which some advanced users might rely. The changes are
  as follows:
  - a BYTERUN variable was added that points to the installed ocamlrun
  - the PARTIALLD variable was removed (PACKLD is more complete)
  - the always-empty DLLCCCOMPOPTS was removed
  - the SHARED variable was removed; its value is "shared" or "noshared",
    which duplicates the existing and more convenient
    SUPPORTS_SHARED_LIBRARIES variable whose value is "true" or "false".

  Note that Makefile.config may change further in the future and relying
  on it is a bit fragile. We plan to make `ocamlc -config` easier to use
  for scripting purposes, and have a stable interface there. If you rely
  on Makefile.config, you may want to get in touch with S?bastien Hinderer
  or participate to M#7116 (Allow easy retrieval of Makefile.config's values)
  or M#7172 (More information in ocamlc -config).

The complete list of changes is listed below.

- G#705: update Makefile.nt so that ocamlnat compiles
  for non-Cygwin Windows ports.
  (S?bastien Hinderer, review by Alain Frisch)

- G#729: Make sure ocamlnat is built with a $(EXE) extension, merge
  rules between Unix and Windows Makefiles
  (S?bastien Hinderer, review by Alain Frisch)

- G#762: Merge build systems in the yacc/ directory.
  (S?bastien Hinderer, review by David Allsopp, Alain Frisch)

- G#764: Merge build systems in the debugger/ directory.
  (S?bastien Hinderer, review by Alain Frisch)

- G#785: Merge build systems in otherlibs/systhreads/
  (S?bastien Hinderer, review by Alain Frisch, David Allsopp,
   testing and regression fix by J?r?mie Dimino)

- G#788: Merge build systems in subdirectories of otherlibs/.
  (S?bastien Hinderer, review by Alain Frisch)

- G#808, G#906: Merge Unix and Windows build systems
  in the ocamldoc/ directory
  (S?bastien Hinderer, review by Alain Frisch)

- G#812: Merge build systems in the tools/ subdirectory
  (S?bastien Hinderer, review by Alain Frisch)

- G#866: Merge build systems in the stdlib/ directory
  (S?bastien Hinderer, review by David Allsopp and Adrien Nader)

- G#941: Merge Unix and Windows build systems in the asmrun/ directory
  (S?bastien Hinderer, review by Mark Shinwell, Adrien Nader,
   Xavier Leroy, David Allsopp, Damien Doligez)

- G#981: Merge build systems in the byterun/ directory
  (S?bastien Hinderer, review by Adrien Nader)

- G#1033, G#1048: Merge build systems in the root directory
  (S?bastien Hinderer, review by Adrien Nader and Damien Doligez,
   testing and regression fix by Andreas Hauptmann)

### Internal/compiler-libs changes:

- G#673: distinguish initialization of block fields from mutation in lambda.
  (Fr?d?ric Bour, review by Xavier Leroy, Stephen Dolan and Mark Shinwell)

- G#744, G#781: fix duplicate self-reference in imported cmi_crcs
  list in .cmti files + avoid rebuilding cmi_info record when creating
  .cmti files
  (Alain Frisch, report by Daniel B?nzli, review by J?r?mie Dimino)

- G#881: change `Outcometree.out_variant` to be more general.
  `Ovar_name of out_ident * out_type list` becomes `Ovar_type of out_type`.
  (Valentin Gatien-Baron, review by Leo White)

- G#908: refactor PIC-handling in the s390x backend
  (Gabriel Scherer, review by Xavier Leroy and Mark Shinwell)

### Bug fixes

- M#5115: protect all byterun/fail.c functions against
  uninitialized caml_global_data (only changes the bytecode behavior)
  (Gabriel Scherer, review by Xavier Leroy)

- M#6136, G#967: Fix Closure so that overapplication evaluation order
  matches the bytecode compiler and Flambda.
  (Mark Shinwell, report by Jeremy Yallop, review by Fr?d?ric Bour)

- M#6550, G#1094: Allow creation of empty .cmxa files on macOS
  (Mark Shinwell)

- M#6594, G#955: Remove "Istore_symbol" specific operation on x86-64.
  This is more robust and in particular avoids assembly failures on Win64.
  (Mark Shinwell, review by Xavier Leroy, testing by David Allsopp and
   Olivier Andrieu)

- M#6903: Unix.execvpe doesn't change environment on Cygwin
  (Xavier Leroy, report by Adrien Nader)

- M#6987: Strange error message probably caused by
  universal variable escape (with polymorphic variants)
  (Jacques Garrigue, report by Mikhail Mandrykin and Leo White)

- M#7216, G#949: don't require double parens in Functor((val x))
  (Jacques Garrigue, review by Valentin Gatien-Baron)

- M#7331: ocamldoc, avoid infinite loop in presence of self alias,
  i.e. module rec M:sig end = M
  (Florian Angeletti, review Gabriel Scherer)

- M#7346, G#966: Fix evaluation order problem whereby expressions could
  be incorrectly re-ordered when compiling with Flambda.  This also fixes one
  example of evaluation order in the native code compiler not matching the
  bytecode compiler (even when not using Flambda)
  (Mark Shinwell, Leo White, code review by Pierre Chambart)

- M#7348: Private row variables can escape their scope
  (Jacques Garrigue, report by Leo White)

- M#7407: Two not-quite-standard C idioms rejected by SUNWSPro compilers
  (Xavier Leroy)

- M#7421: Soundness bug with GADTs and lazy
  (Jacques Garrigue, report by Leo White)

- M#7424: Typechecker diverges on unboxed type declaration
  (Jacques Garrigue, report by Stephen Dolan)

- M#7426, G#965: Fix fatal error during object compilation (also
  introduces new [Pfield_computed] and [Psetfield_computed] primitives)
  (Mark Shinwell, report by Ulrich Singer)

- M#7427, G#959: Don't delete let bodies in Cmmgen
  (Mark Shinwell, report by Valentin Gatien-Baron)

- M#7432: Linking modules compiled with -labels and -nolabels is not safe
  (Jacques Garrigue, report by Jeremy Yallop)

- M#7437: typing assert failure with nonrec priv
  (Jacques Garrigue, report by Anil Madhavapeddy)

- M#7438: warning +34 exposes #row with private types
  (Alain Frisch, report by Anil Madhavapeddy)

- M#7443, G#990: spurious unused open warning with local open in patterns
  (Florian Angeletti, report by Gabriel Scherer)

- M#7456, G#1092: fix slow compilation on source files containing a lot
  of similar debugging information location entries
  (Mark Shinwell)

- M#7504: fix warning 8 with unconstrained records
  (Florian Angeletti, report by John Whitington)

- M#7511, G#1133: Unboxed type with unboxed argument should not be accepted
  (Damien Doligez, review by Jeremy Yallop and Leo White)

- G#805, G#815, G#833: check for integer overflow in String.concat
  (Jeremy Yallop,
   review by Damien Doligez, Alain Frisch, Daniel B?nzli, Fabrice Le Fessant)

- G#881: short-paths did not apply to some polymorphic variants
  (Valentin Gatien-Baron, review by Leo White)

- G#886: Fix Ctype.moregeneral's handling of row_name
  (Leo White, review by Jacques Garrigue)

- G#934: check for integer overflow in Bytes.extend
  (Jeremy Yallop, review by Gabriel Scherer)

- G#956: Keep possibly-effectful expressions when optimizing multiplication
  by zero.
  (Jeremy Yallop, review by Nicol?s Ojeda B?r, Xavier Leroy and Mark Shinwell)

- G#977: Catch Out_of_range in ocamldebug's "list" command
  (Yunxing Dai)

- G#983: Avoid removing effectful expressions in Closure, and
  eliminate more non-effectful ones
  (Alain Frisch, review by Mark Shinwell and Gabriel Scherer)

- G#987: alloc_sockaddr: don't assume a null terminator. It is not inserted
  on macOS by system calls that fill in a struct sockaddr (e.g. getsockname).
  (Anton Bachin)

- G#998: Do not delete unused closures in un_anf.ml.
  (Leo White, review by Mark Shinwell and Pierre Chambart)

- G#1019: Fix fatal error in Flambda mode "[functions] does not map set of
  closures ID"
  (Pierre Chambart, code review by Mark Shinwell and Leo White)

- G#1075: Ensure that zero-sized float arrays have zero tags.
  (Mark Shinwell, Leo White, review by Xavier Leroy)

* G#1088: Gc.minor_words now returns accurate numbers.
  (compatibility: the .mli declaration of `Gc.minor_words`
   and `Gc.get_minor_free` changed, which may break libraries
   re-exporting these values.)
(Stephen Dolan, review by Pierre Chambart and Xavier Leroy)
2017-09-08 09:12:44 +00:00
ryoon
5bd9ca4ef6 Recursive revbump from audio/pulseaudio-11.0 2017-09-08 02:38:35 +00:00
fhajny
607cccfe3e Update lang/nodejs6 to 6.11.3
- build: Codesigning is fixed on macOS
- deps: Snapshots are turned back on!!!
- path: win32 volume-relative paths are working again!
- tools: v6.x can now build with ICU 59
2017-09-06 11:59:37 +00:00
wiz
303dc564fb Update some URLs. 2017-09-04 18:55:07 +00:00
wiz
ff22ec594f Follow some redirects. 2017-09-04 18:08:18 +00:00
wiz
1770bcacd4 Comment out dead sites. 2017-09-04 18:00:49 +00:00
joerg
ca38c9f38e Fix portability issues. 2017-09-04 16:00:19 +00:00
tron
8ef25c6c87 Use bsdtar instead of GNU Tar to extract the distribution archive
as suggested by wizd(8) in private e-mail
2017-09-03 16:49:52 +00:00
tron
d5f9d49e6a Use GNU Tar to extract the distribution archive because at least
NetBSD (8.99.2)'s "/bin/tar" fails to handle the extented headers
and extracts files into the wrong directory. This in turn least
to package list problems during the installation phase.
2017-09-03 13:40:19 +00:00
wiz
564031cca2 Update some HOMEPAGEs. 2017-09-03 09:22:57 +00:00
wiz
42426a5a45 Follow some redirects. 2017-09-03 08:53:04 +00:00
wiz
9ddb7f9e9c Comment out dead MASTER_SITES/HOMEPAGEs. 2017-09-03 08:36:49 +00:00
bsiegert
6f21ac1847 Update Go to 1.9.
The latest Go release, version 1.9, arrives six months after Go 1.8 and
is the tenth release in the Go 1.x series. There are two changes to the
language: adding support for type aliases and defining when
implementations may fuse floating point operations. Most of the changes
are in the implementation of the toolchain, runtime, and libraries. As
always, the release maintains the Go 1 promise of compatibility. We
expect almost all Go programs to continue to compile and run as before.

The release adds transparent monotonic time support, parallelizes
compilation of functions within a package, better supports test helper
functions, includes a new bit manipulation package, and has a new
concurrent map type.


There are some instabilities on FreeBSD that are known but not
understood. These can lead to program crashes in rare cases. See issue
15658. Any help in solving this FreeBSD-specific issue would be
appreciated.

Go stopped running NetBSD builders during the Go 1.9 development cycle
due to NetBSD kernel crashes, up to and including NetBSD 7.1. As Go 1.9
is being released, NetBSD 7.1.1 is being released with a fix. However,
at this time we have no NetBSD builders passing our test suite. Any help
investigating the various NetBSD issues would be appreciated.
2017-09-03 07:12:07 +00:00
bsiegert
06f4ab71ac Disable cgo, bump PKGREVISION.
"The bitrot will continue until morale improves."

Go 1.4 is only used as a bootstrap helper to compile a more recent Go.
However, cgo in 1.4 no longer works with current binutils.

Prodded by Thomas Orgis on the mailing list.
2017-09-02 17:15:00 +00:00
ryoon
a3df8fe620 Update to 1.8.144
Changelog:
Fix the following security bugs.

CVE-2017-10110
CVE-2017-10089
CVE-2017-10086
CVE-2017-10096
CVE-2017-10101
CVE-2017-10087
CVE-2017-10090
CVE-2017-10111
CVE-2017-10107
CVE-2017-10102
CVE-2017-10114
CVE-2017-10074
CVE-2017-10116
CVE-2017-10078
CVE-2017-10067
CVE-2017-10115
CVE-2017-10118
CVE-2017-10176
CVE-2017-10104
CVE-2017-10145
CVE-2017-10125
CVE-2017-10198
CVE-2017-10243
CVE-2017-10121
CVE-2017-10135
CVE-2017-10117
CVE-2017-10053
CVE-2017-10108
CVE-2017-10109
CVE-2017-10105
CVE-2017-10081
CVE-2017-10193
2017-09-02 04:13:41 +00:00
taca
badc025b13 Update php71 to 7.1.9 (PHP 7.1.9).
31 Aug 2017, PHP 7.1.9

- Core:
  . Fixed bug #74947 (Segfault in scanner on INF number). (Laruence)
  . Fixed bug #74954 (null deref and segfault in zend_generator_resume()). (Bob)
  . Fixed bug #74725 (html_errors=1 breaks unhandled exceptions). (Andrea)
  . Fixed bug #75063 (Main CWD initialized with wrong codepage). (Anatol)

- cURL:
  . Fixed bug #74125 (Fixed finding CURL on systems with multiarch support).
    (cebe)

- Date:
  . Fixed bug #75002 (Null Pointer Dereference in timelib_time_clone). (Derick)

- Intl:
  . Fixed bug #74993 (Wrong reflection on some locale_* functions). (Sara)

- Mbstring:
  . Fixed bug #71606 (Segmentation fault mb_strcut with HTML-ENTITIES encoding).
    (cmb)
  . Fixed bug #62934 (mb_convert_kana() does not convert iteration marks).
    (Nikita)
  . Fixed bug #75001 (Wrong reflection on mb_eregi_replace). (Fabien
    Villepinte)

- MySQLi:
  . Fixed bug #74968 (PHP crashes when calling mysqli_result::fetch_object with
    an abstract class). (Anatol)

- OCI8:
  . Expose oci_unregister_taf_callback() (Tianfang Yang)

- Opcache:
  . Fixed bug #74980 (Narrowing occurred during type inference). (Laruence)

- phar:
  . Fixed bug #74991 (include_path has a 4096 char limit in some cases).
    (bwbroersma)

- Reflection:
  . Fixed bug #74949 (null pointer dereference in _function_string). (Laruence)

- Session:
  . Fixed bug #74892 (Url Rewriting (trans_sid) not working on urls that start
    with "#"). (Andrew Nester)
  . Fixed bug #74833 (SID constant created with wrong module number). (Anatol)

- SimpleXML:
  . Fixed bug #74950 (nullpointer deref in simplexml_element_getDocNamespaces).
    (Laruence)

- SPL:
  . Fixed bug #75049 (spl_autoload_unregister can't handle
    spl_autoload_functions results). (Laruence)
  . Fixed bug #74669 (Unserialize ArrayIterator broken). (Andrew Nester)
  . Fixed bug #74977 (Appending AppendIterator leads to segfault).
    (Andrew Nester)
  . Fixed bug #75015 (Crash in recursive iterator destructors). (Julien)

- Standard:
  . Fixed bug #75075 (unpack with X* causes infinity loop). (Laruence)
  . Fixed bug #74103 (heap-use-after-free when unserializing invalid array
    size). (Nikita)
  . Fixed bug #75054 (A Denial of Service Vulnerability was found when
    performing deserialization). (Nikita)

- WDDX:
  . Fixed bug #73793 (WDDX uses wrong decimal seperator). (cmb)

- XMLRPC:
  . Fixed bug #74975 (Incorrect xmlrpc serialization for classes with declared
    properties). (blar)
2017-09-01 10:50:38 +00:00
taca
4aa11a4522 Update php70 to 7.0.23 (PHP 7.0.23).
31 Aug 2017 PHP 7.0.23

- Core:
  . Fixed bug #74947 (Segfault in scanner on INF number). (Laruence)
  . Fixed bug #74954 (null deref and segfault in zend_generator_resume()). (Bob)
  . Fixed bug #74725 (html_errors=1 breaks unhandled exceptions). (Andrea)

- cURL:
  . Fixed bug #74125 (Fixed finding CURL on systems with multiarch support).
    (cebe)

- Date:
  . Fixed bug #75002 (Null Pointer Dereference in timelib_time_clone). (Derick)

- Intl:
  . Fixed bug #74993 (Wrong reflection on some locale_* functions). (Sara)

- Mbstring:
  . Fixed bug #71606 (Segmentation fault mb_strcut with HTML-ENTITIES encoding).
    (cmb)
  . Fixed bug #62934 (mb_convert_kana() does not convert iteration marks).
    (Nikita)
  . Fixed bug #75001 (Wrong reflection on mb_eregi_replace). (Fabien
    Villepinte)

- MySQLi:
  . Fixed bug #74968 (PHP crashes when calling mysqli_result::fetch_object with
    an abstract class). (Anatol)

- OCI8:
  . Expose oci_unregister_taf_callback() (Tianfang Yang)

- phar:
  . Fixed bug #74991 (include_path has a 4096 char limit in some cases).
    (bwbroersma)

- Reflection:
  . Fixed bug #74949 (null pointer dereference in _function_string). (Laruence)

- Session:
  . Fixed bug #74833 (SID constant created with wrong module number). (Anatol)

- SimpleXML:
  . Fixed bug #74950 (nullpointer deref in simplexml_element_getDocNamespaces).
    (Laruence)

- SPL:
  . Fixed bug #75049 (spl_autoload_unregister can't handle
    spl_autoload_functions results). (Laruence)
  . Fixed bug #74669 (Unserialize ArrayIterator broken). (Andrew Nester)
  . Fixed bug #75015 (Crash in recursive iterator destructors). (Julien)

- Standard:
  . Fixed bug #75075 (unpack with X* causes infinity loop). (Laruence)
  . Fixed bug #74103 (heap-use-after-free when unserializing invalid array
    size). (Nikita)
  . Fixed bug #75054 (A Denial of Service Vulnerability was found when
    performing deserialization). (Nikita)

- WDDX:
  . Fixed bug #73793 (WDDX uses wrong decimal seperator). (cmb)

- XMLRPC:
  . Fixed bug #74975 (Incorrect xmlrpc serialization for classes with declared
    properties). (blar)
2017-09-01 10:49:14 +00:00
taca
331f22d2fa Add patch to fix vulnerabilities of rubygems.
https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/

* a DNS request hijacking vulnerability
* an ANSI escape sequence vulnerability
* a DoS vulernerability in the query command
* a vulnerability in the gem installer that allowed a malicious gem to
  overwrite arbitrary files

Bump PKGREVISION.
2017-08-30 03:32:55 +00:00
jmcneill
aac3b474e2 Disable dtrace on NetBSD arm. Works around an issue observed on earmv7hf
and NetBSD 8.0_BETA with miniruby getting stuck in an infinite loop while
initializing. Joerg is pretty sure this is the correct fix for now.
2017-08-29 14:47:35 +00:00
maya
dbc31063e4 remove pkgdiff leftovers, improve patch comment, fix build 2017-08-28 18:26:38 +00:00
jperkin
cbb57753f3 Improve COMMENT lines and satisfy pkglint. 2017-08-25 17:03:25 +00:00
jperkin
e98ed47819 Remove trailing empty lines. 2017-08-25 16:49:11 +00:00
he
fa69b1517a Bump PKGREVISION following bump of gcc5, per the comments here. 2017-08-25 16:34:45 +00:00
he
537de248ff Add fixes for powerpc and alpha on NetBSD: ensure we have the
correct order of the include files, and use this also for i386 and
amd64 as well.  For alpha, move the Linux-specific settings into the
alpha/linux.h file.
Verified that this package now builds on powerpc.
This is largely the patches posted by maya@ on Jul 23, I just mirrored
the changes to include order to NetBSD/powerpc as well.  Thanks!
Bump PKGREVISION, bump to gcc5-libs to follow shortly.
2017-08-25 16:33:53 +00:00
jperkin
92e3e961e6 Fix formatting of go DESCR files. Some of the contents still leave a lot to be
desired.
2017-08-25 16:30:23 +00:00
adam
44ea20d737 Changes 8.6.7:
Bug fixes.
2017-08-25 11:05:33 +00:00
adam
931d707fe2 Revbump for boost update 2017-08-24 20:03:08 +00:00
jnemeth
8fd1375db3 sort 2017-08-24 03:40:26 +00:00
jperkin
f068326349 Handle domainname functions on SunOS correctly. Bump PKGREVISION. 2017-08-22 13:43:34 +00:00
jperkin
7aa36506eb Move subst stage from post-patch to pre-configure, otherwise it's a pain to
generate patches.
2017-08-22 13:14:09 +00:00
jlam
af8b30a2d9 lang/guile20: Mirror changes to lang/guile22/Makefile.
These changes aren't necessary, but on the day when guile-2.0.x is
no longer the primary, then the switch to using a non-default
installation prefix should be seamless.
2017-08-19 00:28:10 +00:00
jlam
fce04101b4 lang/guile22: Fix PLIST errors for non-default PKG{INFO,MAN}DIR.
If Guile installs into a non-default installation prefix, then
use ${GUILE_PREFIX}/info and ${GUILE_PREFIX}/man as the locations
for the installed GNU info files and manpages.  This avoids needing
to do a lot of fixes to the PLISTs.
2017-08-19 00:27:59 +00:00
jlam
d25408f9fe lang/siod: Install manpages into ${PKGMANDIR}.
Modify project makefile patch to set MANDIR to point to the correct
location for installed manpages under ${PKGMANDIR}.
2017-08-19 00:25:34 +00:00
jlam
9c4d22a6cd lang/parrot: Install manpages into ${PKGMANDIR}.
Pass "--mandir=<dir>" to the configure script to set the correct
location for installed manpages.
2017-08-19 00:23:58 +00:00
jlam
f3bf1f74e9 lang/inform: Install manpages into ${PKGMANDIR}.
Modify the Makefile patch to set MANDIR, the location of the
installed manpages, to point to ${PKGMANDIR}.
2017-08-19 00:21:25 +00:00
ryoon
34e51169f4 Update oracle-jre8 and oracle-jdk8 to 8.0.144
Changelog:
Security fixes and bug fixes.
2017-08-18 13:54:17 +00:00
gavan
0bcf3a7203 1 new package in lang 2017-08-17 02:04:42 +00:00
gavan
1d11590eb2 Add go-hcl package 2017-08-17 02:02:39 +00:00
wiz
7909ca8cec Comment out dead sites. 2017-08-16 20:45:30 +00:00
adam
250cada50e Changes 0.50:
Bug fixes.
2017-08-16 18:02:21 +00:00
fhajny
a496947ff1 Update lang/nodejs to 8.4.0.
Update lang/nodejs to 8.4.0.

## 2017-08-15, Version 8.4.0 (Current), @addaleax

- HTTP2
  - Experimental support for the built-in `http2` has been added via the
    `--expose-http2` flag.
- Inspector
  - `require()` is available in the inspector console now.
  - Multiple contexts, as created by the `vm` module, are supported now.
- N-API
  - New APIs for creating number values have been introduced.
- Stream
  - For `Duplex` streams, the high water mark option can now be set
    independently for the readable and the writable side.
- Util
  - `util.format` now supports the `%o` and `%O` specifiers for printing
    objects.

## 2017-08-09, Version 8.3.0 (Current), @addaleax

The V8 engine has been upgraded to version 6.0, which has a significantly
changed performance profile.

- DNS
  - Independent DNS resolver instances are supported now, with support for
    cancelling the corresponding requests.
- N-API
  - Multiple N-API functions for error handling have been changed to support
    assigning error codes.
- REPL
  - Autocompletion support for `require()` has been improved.
- Utilities
  - The WHATWG Encoding Standard (`TextDecoder` and `TextEncoder`) has
    been implemented as an experimental feature.
2017-08-16 11:52:19 +00:00
adam
5676a5d44f Python 3.4.7:
Security
* bpo-29591: Update expat copy from 2.1.1 to 2.2.0 to get fixes of CVE-2016-0718 and CVE-2016-4472. See https://sourceforge.net/p/expat/bugs/537/ for more information.
* bpo-30694: Upgrade expat copy from 2.2.0 to 2.2.1 to get fixes of multiple security vulnerabilities including: CVE-2017-9233 (External entity infinite loop DoS), CVE-2016-9063 (Integer overflow, re-fix), CVE-2016-0718 (Fix regression bugs from 2.2.0’s fix to CVE-2016-0718) and CVE-2012-0876 (Counter hash flooding with SipHash). Note: the CVE-2016-5300 (Use os- specific entropy sources like getrandom) doesn’t impact Python, since Python already gets entropy from the OS to set the expat secret using XML_SetHashSalt().
* bpo-26657: Fix directory traversal vulnerability with http.server on Windows. This fixes a regression that was introduced in 3.3.4rc1 and 3.4.0rc1. Based on patch by Philipp Hagemeister.
* bpo-30500: Fix urllib.parse.splithost() to correctly parse fragments. For example, splithost('//127.0.0.1#@evil.com/') now correctly returns the 127.0.0.1 host, instead of treating @evil.com as the host in an authentification (login@host).
* bpo-30730: Prevent environment variables injection in subprocess on Windows. Prevent passing other invalid environment variables and command arguments.
2017-08-14 09:20:00 +00:00
adam
613af30e0a Python 3.5.4:
Security
* bpo-30730: Prevent environment variables injection in subprocess on Windows. Prevent passing other environment variables and command arguments.
* bpo-30694: Upgrade expat copy from 2.2.0 to 2.2.1 to get fixes of multiple security vulnerabilities including: CVE-2017-9233 (External entity infinite loop DoS), CVE-2016-9063 (Integer overflow, re-fix), CVE-2016-0718 (Fix regression bugs from 2.2.0’s fix to CVE-2016-0718) and CVE-2012-0876 (Counter hash flooding with SipHash). Note: the CVE-2016-5300 (Use os- specific entropy sources like getrandom) doesn’t impact Python, since Python already gets entropy from the OS to set the expat secret using XML_SetHashSalt().
* bpo-30500: Fix urllib.parse.splithost() to correctly parse fragments. For example, splithost('//127.0.0.1#@evil.com/') now correctly returns the 127.0.0.1 host, instead of treating @evil.com as the host in an authentification (login@host).
* bpo-29591: Update expat copy from 2.1.1 to 2.2.0 to get fixes of CVE-2016-0718 and CVE-2016-4472. See https://sourceforge.net/p/expat/bugs/537/ for more information.
2017-08-14 09:16:28 +00:00
ryoon
f36464d339 Update to 1.7.141
* Support build and run under NetBSD PaX MPROTECT environment

Changelog:
Many bugfixes and security bugfixes
2017-08-14 00:02:16 +00:00
taca
e3c5fb2a25 Update php71 to 7.1.8.
* pkgsrc change: enable readline PKG_OPTIONS default.


03 Aug 2017, PHP 7.1.8

- Core:
  . Fixed bug #74832 (Loading PHP extension with already registered function
    name leads to a crash). (jpauli)
  . Fixed bug #74780 (parse_url() broken when query string contains colon).
    (jhdxr)
  . Fixed bug #74761 (Unary operator expected error on some systems). (petk)
  . Fixed bug #73900 (Use After Free in unserialize() SplFixedArray). (nikic)
  . Fixed bug #74923 (Crash when crawling through network share). (Anatol)
  . Fixed bug #74913 (fixed incorrect poll.h include). (petk)
  . Fixed bug #74906 (fixed incorrect errno.h include). (petk)

- Date:
  . Fixed bug #74852 (property_exists returns true on unknown DateInterval
    property). (jhdxr)

- OCI8:
  . Fixed bug #74625 (Integer overflow in oci_bind_array_by_name). (Ingmar Runge)

- Opcache:
  . Fixed bug #74623 (Infinite loop in type inference when using HTMLPurifier).
    (nikic)

- OpenSSL:
 . Fixed bug #74798 (pkcs7_en/decrypt does not work if \x0a is used in content).
   (Anatol)
 . Added OPENSSL_DONT_ZERO_PAD_KEY constant to prevent key padding and fix bug
   #71917 (openssl_open() returns junk on envelope < 16 bytes) and bug #72362
   (OpenSSL Blowfish encryption is incorrect for short keys). (Jakub Zelenka)

- PDO:
  . Fixed bug #69356 (PDOStatement::debugDumpParams() truncates query). (Adam
    Baratz)

- SPL:
  . Fixed bug #73471 (PHP freezes with AppendIterator). (jhdxr)

- SQLite3:
  . Fixed bug #74883 (SQLite3::__construct() produces "out of memory" exception
    with invalid flags). (Anatol)

- Wddx:
  . Fixed bug #73173 (huge memleak when wddx_unserialize).
    (tloi at fortinet dot com)

- zlib:
  . Fixed bug #73944 (dictionary option of inflate_init() does not work).
    (wapmorgan)
2017-08-04 23:08:47 +00:00
taca
b322bdf023 Update php70 to 7.0.22.
* pkgsrc change: enable readline PKG_OPTIONS default.

03 Aug 2017 PHP 7.0.22

- Core:
  . Fixed bug #74832 (Loading PHP extension with already registered function
    name leads to a crash). (jpauli)
  . Fixed bug #74780 (parse_url() borken when query string contains colon).
    (jhdxr)
  . Fixed bug #74761 (Unary operator expected error on some systems). (petk)
  . Fixed bug #73900 (Use After Free in unserialize() SplFixedArray). (nikic)
  . Fixed bug #74913 (fixed incorrect poll.h include). (petk)
  . Fixed bug #74906 (fixed incorrect errno.h include). (petk)

- Date:
  . Fixed bug #74852 (property_exists returns true on unknown DateInterval
    property). (jhdxr)

- OCI8:
  . Fixed bug #74625 (Integer overflow in oci_bind_array_by_name). (Ingmar Runge)

- Opcache:
  . Fixed bug #74840 (Opcache overwrites argument of GENERATOR_RETURN within
    finally). (Bob)

- PDO:
  . Fixed bug #69356 (PDOStatement::debugDumpParams() truncates query). (Adam
    Baratz)

- SPL:
  . Fixed bug #73471 (PHP freezes with AppendIterator). (jhdxr)

- SQLite3:
  . Fixed bug #74883 (SQLite3::__construct() produces "out of memory" exception
    with invalid flags). (Anatol)

- Wddx:
  . Fixed bug #73173 (huge memleak when wddx_unserialize).
    (tloi at fortinet dot com)

- zlib:
  . Fixed bug #73944 (dictionary option of inflate_init() does not work).
    (wapmorgan)
2017-08-04 23:07:28 +00:00
bsiegert
57e14c8738 Provide library paths to allow linking against libjvm. From William
Welliver in PR pkg/52453.
2017-08-03 12:34:03 +00:00
fhajny
4f13378898 Update lang/nodejs to 8.2.1.
8.2.1

- configure:
  - add mips64el to valid_arch
- crypto:
  - Updated root certificates based on NSS 3.30
- deps:
  - upgrade OpenSSL to version 1.0.2.l
- http:
  - parse errors are now reported when NODE_DEBUG=http
  - Agent construction can now be envoked without `new`
- zlib:
  - node will now throw an Error when zlib rejects the value of
    windowBits, instead of crashing


8.2.0

- Async Hooks
  - Multiple improvements to Promise support in `async_hooks` have
    been made.
- Build
  - The compiler version requirement to build Node with GCC has been
    raised to GCC 4.9.4.
- Cluster
  - Users now have more fine-grained control over the inspector port
    used by individual cluster workers. Previously, cluster workers were
    restricted to incrementing from the master's debug port.
- DNS
  - The server used for DNS queries can now use a custom port.
  - Support for `dns.resolveAny()` has been added.
- npm
  - The `npm` CLI has been updated to version 5.3.0. In particular, it
    now comes with the `npx` binary, which is also shipped with Node.
2017-08-02 17:31:45 +00:00
fhajny
543a495408 Update lang/nodejs6 to 6.11.2.
### Notable Changes

- configure:
  - add mips64el to valid_arch
- crypto:
  - Updated root certificates based on NSS 3.30
- deps:
  - upgrade OpenSSL to version 1.0.2.l
- http:
  - parse errors are now reported when NODE_DEBUG=http
  - Agent construction can now be envoked without `new`
- zlib:
  - node will now throw an Error when zlib rejects the value of
    windowBits, instead of crashing
2017-08-02 16:05:20 +00:00
wiz
4b6cc49c90 Comment out some dead HOMEPAGEs. 2017-08-01 17:40:08 +00:00
wiz
8733ee0040 Follow some http -> https redirects. 2017-08-01 14:58:51 +00:00
wiz
5d86518619 Switch github HOMEPAGEs to https. 2017-07-30 22:32:10 +00:00
nros
01dfcbe035 Update Qore to version 0.8.12.11.
This is a bugfix release so no buildlink change.

ChangeLog:

New Features in Qore
 * added broken-logic-precedence warning.

Bug Fixes in Qore
 * fixed documentation regarding escaping of characters in
   strings and added a parse exception in case of trying
   to escape octal values in range 400-777 (issue 50)
 * fixed a crashing bug where Datasource::getConfigString()
   was called without a connection, also could crash in an
   implicit internal call to this method with the
   DatasourcePool class when connections were lost and the
   warning callback should be called (issue 1992)
 * fixed a bug where Datasource::getConfigHash() returned
   different values depending on if the object was
   connected or not (issue 1994)
2017-07-30 19:27:08 +00:00
maya
324450b1ac gcc5: Incorrect codegen from rdseed intrinsic use (CVE-2017-11671)
We should not expand call arguments in between flags reg setting and
flags reg using instructions, as it may expand with flags reg
clobbering insn (ADD in this case).

Attached patch moves expansion out of the link. Also, change
zero-extension to non-flags reg clobbering sequence in case we perform
zero-extension with and.

2017-03-25  Uros Bizjak
2017-07-29 00:42:35 +00:00
maya
97096bfd8b Bump PKGREVISION above gcc49 2017-07-28 23:42:24 +00:00
maya
f1a957cf88 gcc49: backport upstream security fix
Incorrect codegen from rdseed intrinsic use (CVE-2017-11671)

We should not expand call arguments in between flags reg setting and
flags reg using instructions, as it may expand with flags reg
clobbering insn (ADD in this case).

Attached patch moves expansion out of the link. Also, change
zero-extension to non-flags reg clobbering sequence in case we perform
zero-extension with and.

2017-03-25  Uros Bizjak
2017-07-28 23:41:51 +00:00
maya
d1ab2f3603 Bump PKGREVISION above gcc48 2017-07-28 23:40:48 +00:00
maya
f33154bfc9 gcc48: backport upstream security fix
Incorrect codegen from rdseed intrinsic use (CVE-2017-11671)

We should not expand call arguments in between flags reg setting and
flags reg using instructions, as it may expand with flags reg
clobbering insn (ADD in this case).

Attached patch moves expansion out of the link. Also, change
zero-extension to non-flags reg clobbering sequence in case we perform
zero-extension with and.

2017-03-25  Uros Bizjak
2017-07-28 23:40:07 +00:00
adam
85737f9eb8 PyExecJS is a porting of ExecJS from Ruby. PyExecJS automatically picks the
best runtime available to evaluate your JavaScript program.
2017-07-28 07:01:31 +00:00
wiz
37e92bf6f7 Pass relro linker flags.
Fixes RELRO for most binaries, except for libgcc_s.so.
2017-07-25 13:19:00 +00:00
taca
5ce030c84c Fix build problem when set PKGSRC_USE_STACK_CHECK to "yes", which reported
by wiz@ via private mail.

The problem exists basic use of auto variable.
2017-07-24 13:38:42 +00:00
maya
dd4c0a7494 libLLVM: update to 4.0.1, a bugfix release. 2017-07-24 13:13:39 +00:00
wiz
d621b29e1c Pass ldflags to build, on BSDs.
Fixes RELRO build on NetBSD.
2017-07-24 12:27:33 +00:00
wiz
2ae0181bd6 Add RCS Id. Fix pkglint warning. 2017-07-24 12:26:35 +00:00
maya
89ac9e62d4 update to inform-6.33-6.12.1
(versioned as 6.33.20160609 based on the tarball date)

Version 6.33-6.12.1 (6 June 2016)
=================================

* Inform version is now 6.33, with Inform7-related patches and new features.

* The Inform Library is 6.12.1 with lots of bugfixes and enhancements.

* Package version scheme changed to indicate both compiler and library
  versions included.

* Include files trimmed to those known to be freely redistributable and
  checked to make sure they work.

* DM4 removed due to license incompatibilities.

* Added a manpage.

* Added pblorb.pl and scanblorb.pl utilities for dealing with Blorb files.

Version 6.32.1 (16 July 2012)
=============================

* Inform version is now 6.32, with more patches for use with Inform 7.

* The Inform program is now distributed under the Artistic License 2.0.

* The advent.inf example is now at release 9.

drop nathanw's maintainership by his request
tested by wes fraizer
2017-07-24 03:18:54 +00:00
dsainty
036dd4b960 install-sh requires that $SHELL is an extremely close match to /bin/sh.
The install would presumably fail outright for user shells like tcsh, so we
need to set SHELL regardless.  But technically install-sh has a quoting bug
in the exit trap, which even results in SHELL=zsh failing.
2017-07-22 23:40:07 +00:00
wiz
0fd193c72e Sprinkle CHECK_RELRO_SKIP on go packages.
go14 has no relro support AFAICT.

go-1.8.3 has if you use -buildmode=pie, but it claims it's not supported
on Linux.

Disable relro checking for go packages until bsiegert has time to
look at this.
2017-07-22 19:32:40 +00:00
maya
9456465a85 never include machine/ansi.h on freebsd.
use else if in our long conditional macro for symmetry

blind commit that may help freebsd builds
2017-07-22 18:05:43 +00:00
wiz
8911ccdc82 Remove references to non-existing files. 2017-07-22 10:00:21 +00:00
jperkin
807126facb Ensure secondary configure scripts are executed with the correct shell, fixes
issues seen since the RELRO patches caused by broken ksh on SunOS.
2017-07-20 10:23:35 +00:00
manu
2dddf70ee5 Updated uniqid() performance fix patch to make it thread-safe 2017-07-19 02:44:45 +00:00
jmcneill
b4a86c490b Fix build on arm by satisfying -Werror=return-local-addr 2017-07-18 19:53:11 +00:00
brook
35efa550c8 Fix a typo (an extra S) in the make variable GCC7_DIST_VERSION. This makes
it consistent with all other analogous variables, which are used in the
process of selecting an appropriate version of gcc.
2017-07-18 18:19:35 +00:00
wiz
6394fa605d Support -Wl,-z in ocamlmklib. Needed for RELRO support e.g. in ocaml-lablgtk.
Bump PKGREVISION.
2017-07-18 17:41:04 +00:00
taca
1478015bb2 Start update of Ruby on Rails 3.2 to 3.2.22.5. 2017-07-18 13:59:04 +00:00
adam
af59e928be Python 3.6.2 is the second maintenance release of Python 3.6, which was initially released in 2016-12 to great interest. With the release of 3.6.2, we are now providing the second set of bugfixes and documentation updates to 3.6. Detailed information about the changes made in 3.6.2 can be found in its change log. 2017-07-18 13:43:39 +00:00
wiz
4053ae265f Honor LDFLAGS. Fixes RELRO build. 2017-07-17 23:26:23 +00:00
manu
51a13ea245 Performance fix for uniqid()
PHP uniqid() relies on microsecond-precise system clock to produce an
unique identifier. In order to avoid  using the same value, it first
calls usleep(1) to wait for the next microsecond.

Unfortunately, usleep() specification says "The suspension time may be
longer than requested due to the scheduling of other activity by the
system." Indeed, the pause may as as long as an entire execution slice,
causing a uniqid() call to last more than 10 ms.

This is fixed by replacing the usleep() call by time polling using
gettimeofday() until the microscecond change. Since the getttimeoday()
system call lasts around a microsecond, only a small time is wasted
calling  multiple gettimeofday. On the benefit side, uniqid() performance
in increased 10000 fold without changing its behavior.

Submitted upstream as https://bugs.php.net/bug.php?id=74851
2017-07-17 14:10:08 +00:00
jaapb
7f8988d4e9 Corrected some PLIST duplication 2017-07-17 09:45:36 +00:00
maya
aa939c1da0 Fix build with newer texinfo (same patch as some newer GCC versions)
From mmoll via github
2017-07-16 19:26:26 +00:00
wiz
db7cc5b050 Add upstream bug report for previous. 2017-07-16 09:06:44 +00:00
wiz
6d31fc2401 LDFLAGS_DEFAULT, not LDFLAGS. 2017-07-16 08:51:46 +00:00
wiz
3ccf04045f Honor LDFLAGS on NetBSD. Fixes RELRO build.
Every OPSYS has its own case for this. Please fix your
favorite operating system similarly.
2017-07-16 08:50:18 +00:00
wiz
4a4018d9fb Disable RELRO check.
Not useful for pre-built binaries.
2017-07-13 12:39:08 +00:00
manu
f926479f35 Back out the calendar option for PHP
The functionnality is already avaialable from pkgsrc/time/php-calendar
moduke. Thnaks to Takahiro Kambe for pointing it out.
2017-07-12 09:11:35 +00:00
he
a8dee92893 A preexisting pkgsrc patch changed the "man page output suffix" from
.3o to just .3, so adapt this test's Makefile to follow suit.  Brings
the number of failing self-tests down from 1 to 0.
Bump PKGREVISION.
2017-07-12 07:52:28 +00:00
adam
0e12e44da9 Changes 4.0.1:
This is a bug-fix release.
2017-07-11 19:47:37 +00:00
joerg
03f704711c Retire CLANG_NO_VALUE_PROPAGATION_PASS. CVP has been fixed in LLVM to
require much less memory.
2017-07-11 19:41:20 +00:00
adam
343b1d6ae1 Changes 0.44:
Unknown
2017-07-11 19:36:40 +00:00
adam
7ca24c64e3 Changes 2.5.2:
Unknown
2017-07-11 19:24:31 +00:00
fhajny
c1ec1e0171 Update lang/nodejs4 to 4.8.4.
- Disable V8 snapshots - The hashseed embedded in the snapshot is
  currently the same for all runs of the binary. This opens node up to
  collision attacks which could result in a Denial of Service. We have
  temporarily disabled snapshots until a more robust solution is found
- CVE-2017-1000381 - The c-ares function ares_parse_naptr_reply(), which
  is used for parsing NAPTR responses, could be triggered to read memory
  outside of the given input buffer if the passed in DNS response packet
  was crafted in a particular way. This patch checks that there is
  enough data for the required elements of an NAPTR record (2 int16, 3
  bytes for string lengths) before processing a record.
2017-07-11 19:16:46 +00:00
fhajny
e042e7228b Update lang/nodejs6 to 6.11.1.
- Disable V8 snapshots - The hashseed embedded in the snapshot is
  currently the same for all runs of the binary. This opens node up to
  collision attacks which could result in a Denial of Service. We have
  temporarily disabled snapshots until a more robust solution is found
- CVE-2017-1000381 - The c-ares function ares_parse_naptr_reply(), which
  is used for parsing NAPTR responses, could be triggered to read memory
  outside of the given input buffer if the passed in DNS response packet
  was crafted in a particular way. This patch checks that there is
  enough data for the required elements of an NAPTR record (2 int16, 3
  bytes for string lengths) before processing a record.
2017-07-11 19:10:32 +00:00
fhajny
ecb3174965 Update lang/nodejs to 8.1.4.
- Disable V8 snapshots - The hashseed embedded in the snapshot is
  currently the same for all runs of the binary. This opens node up to
  collision attacks which could result in a Denial of Service. We have
  temporarily disabled snapshots until a more robust solution is found
- CVE-2017-1000381 - The c-ares function ares_parse_naptr_reply(), which
  is used for parsing NAPTR responses, could be triggered to read memory
  outside of the given input buffer if the passed in DNS response packet
  was crafted in a particular way. This patch checks that there is
  enough data for the required elements of an NAPTR record (2 int16, 3
  bytes for string lengths) before processing a record. (David Drysdale)
2017-07-11 19:00:57 +00:00
he
1a1dbebd9f Add the required glue to make this work again on NetBSD/powerpc.
Pkgsrc changes:
 * Add required macros for accessing ucontext for NetBSD/powerpc
 * Omit files from PLIST.opt which are in PLIST.natdynlink.
   So far macppc doesn't do "natdynlink", tests are failing.
 * Adapt Makefile to features enabled on NetBSD/powerpc.
 * Bump PKGREVISION.

The self-test results are nearly the same as on NetBSD/i386, with one
test failing, difference is one unexpected failure related to native
dynlink which I thought I had not enabled, and which obviously needs
more attention since it tries to reference a Linux linker script.
...
Summary:
  637 tests passed
   13 tests skipped
    1 tests failed
    1 unexpected errors
  652 tests considered

List of failed tests:
    tests/tool-ocamldoc-man/Inline_records.mli

List of unexpected errors:
    tests/lib-dynlink-native
...
2017-07-11 17:15:01 +00:00
jaapb
f70dd873bb Revbump associated with ocaml-4.04.2 2017-07-11 14:19:18 +00:00
jaapb
e2ffd1ea3c Updated package to latest version, 7.01 (we need support for ocaml 4.04.2).
Changes include:

Camlp5 Version 7.01:
--------------------

* [26 Jun 17] Fixed bug in associativity of entry levels in extensible
  grammars; was introduced by an old experiment, resulting a failure
  in Coq test-suite/success/rewrite_strat.v.
* [26 Jun 17] Fixed bug: compilation failed while using OCaml versions
  between 3.05 and 4.01.1, and jocaml versions.

Camlp5 Version 7.00:
--------------------

* [26 Jun 17] Release number is 7.00 instead of 6.18 because of big
  improvements on extensible grammars which can use now limited and
  full backtracking algorithms on demand.
* [16 Jun 17] Entry.parse_token has been renamed Entry.parse_token_stream.
* [04 Jun 17] Added limited backtracking (functional streams) to extensible
  grammars. Can be set with "Grammar.parse_algorithm Functional" or by
  setting the environment variable CAMLP5PARAM=f.
* [01 Jun 17] Backtrack parsing seems to work well now. Camlp5 and Coq can
  be compiled using it by setting CAMLP5PARAM=b.
* [31 May 17] Fixed bug: Entry.parse_token did not accept backtrack parsing.
* [31 May 17] Fixed ocaml parsing for case of record {foo () with ...}.
* [31 May 17] Fixed bug backtrack parsing for function Entry.of_parser.
* [28 Apr 17] Updated for ocaml 4.04.2 which was missing.
* [07 Apr 17] Updated for ocaml trunk 4.06.0
* [19 Feb 17] Fixed bug: locations of all identifiers were missing
  resulting of error messages giving "<none>" as source file name
  and no line and column number in the source.
* [04 Jan 17] Updated for ocaml trunk 4.05.0
* [09 Dec 16] Fixed bug: was not compatible with ocaml compiled with
  option -safe-string.
* [09 Dec 16] Fixed bug: make uninstall did not take DESTDIR into account.
* [07 Dec 16] Fixed bug virtual methods in signatures generated syntax
  tree of virtual val. Bug notified by Kakadu.
  Ex: "class foo : object method virtual bar : bool end"
* [07 Dec 16] Fixed bug not separated idents were not allowed in
  'let open' constructs. Bug notified by Kakadu.
  Ex: "let open Mod1.Mod2.Mod3 in ..."
* [06 Dec 16] Fixed bug dumping module definitions with constraints.
  Bug notified by Kakadu.
  Ex:
    module type Item = sig type t end
    module type Sig = sig type t module Node : Item end
    module Make (S : Sig) : Sig with module Node = S.Node and type t = S.t
* [06 Dec 16] Fixed bug extra option word during pr_dump for optional args.
  Bug notified by Kakadu.
  Ex: "class t : ?name:string -> object end"
* [05 Dec 16] Fixed bug dumping of open object types. Bug notified by Kakadu.
  Ex: "type t = <f:int; .. >"
* [05 Dec 16] Fixed bug dump parsetree without throughing away module type
  annotation. Bug notified by Kakadu.
  Ex: "module rec A : sig end = struct end"
2017-07-11 12:17:13 +00:00
jaapb
7c8eaf4498 Updated package to newest version, 4.04.2. Changes include:
OCaml 4.04.2 (23 Jun 2017):
---------------------------

### Security fix:

- Local privilege escalation issue with ocaml binaries.
  (Damien Doligez, report by Eric Milliken, review by Xavier Leroy)

OCaml 4.04.1 (14 Apr 2017):
---------------------------

### Code generation and optimizations:

- Consider arrays of length zero as constants
  when using Flambda.
  (Pierre Chambart, review by Mark Shinwell and Leo White)

### Standard library:

- fix a bug in Set.map as introduced in 4.04.0
  (Gabriel Scherer, report by Thomas Leonard)

### Tools:

- ocamldoc, avoid nested <pre> tags in module description.
  (Florian Angeletti, report by user 'kosik')

- ocamldoc, wrong Latex output for variant types
  with constructors without arguments.
  (Florian Angeletti, report by Xavier Leroy)

### Build system:

- New flexlink target in Makefile.nt to bootstrap the
  flexlink binary only, rather than the flexlink binary and the FlexDLL C
  objects.
  (David Allsopp)

### Bug fixes

- Str.regexp raises "Invalid_argument: index out of bounds"
  (Damien Doligez, report by John Whitington)

- Fix ocamlmklib with bootstrapped FlexDLL. Bootstrapped
  FlexDLL objects are now installed to a subdirectory flexdll of the Standard
  Library which allows the compilers to pick them up explicitly and also
  ocamlmklib to include them without unnecessarily adding the entire Standard
  Library.
  (David Allsopp)

- fix incorrect timestamps returned by Unix.stat on Windows
  when either TZ is set or system date is in DST.
  (David Allsopp, report and initial fix by Nicolás Ojeda Bär, review and
   superior implementation suggestion by Xavier Leroy)

- s390x: Fix address of caml_raise_exn in native dynlink modules
  (Richard Jones, review by Xavier Leroy)

- ensure 16 byte stack alignment inside caml_allocN on x86-64
  for ocaml build with WITH_FRAME_POINTERS defined
  (Christoph Cullmann)

- fix slow compilation on source files containing a lot
  of similar debugging information location entries
  (Mark Shinwell)

- a case of double free in the systhreads library (POSIX implementation)
  (Xavier Leroy, report by Chet Murthy)

- catch uncaught exception when unknown files are passed
  as argument (regression in 4.04.0)
  (Bernhard Schommer, review by Florian Angeletti and Gabriel Scherer,
   report by Stephen Dolan)

- Memory cannot be released after calling
    Bigarray.Genarray.change_layout.
  (Damien Doligez and Xavier Leroy, report by Liang Wang)

- Fix segfault in Unix.create_process on Windows caused by wrong header
  configuration.
  (David Allsopp)

- add dynlink options to ocamlbytecomp.cmxa to allow ocamlopt.opt
  to load plugins. See http://github.com/OCamlPro/ocamlc-plugins for examples.
  (Fabrice Le Fessant, review by David Allsopp)

- caml-types.el: Fix missing format argument, so that it can show kind
  of call at point correctly.
  (Chunhui He)

- Allow Windows CRLF line-endings in ocamlyacc on Unix and Cygwin.
  (David Allsopp, review by Damien Doligez and Xavier Leroy)

- Fix segfault in Sys.runtime_parameters when exception backtraces
  are enabled.
(Olivier Andrieu)
2017-07-11 09:52:11 +00:00
manu
e172ab8fa1 Add calendar package option to build PHP with calendar support 2017-07-11 03:28:08 +00:00
maya
89633e9c48 gcc{48,49}: netbsd also provides libssp in libc, adjust LINK_SSP_SPEC accordingly.
already done for newer versions of gcc.

Now on netbsd all gcc packages can successfully build with -fstack-protector.

bump pkgrevision (sorry)
2017-07-10 15:55:40 +00:00
maya
d482b82b5e Always stop libstdc++ from using PCH, not just on bootstrap.
the configure test hangs on netbsd, and people who have looked at the PCH
implementation blame it rather than the OS.

whitespace.
2017-07-10 00:21:31 +00:00
maya
672301c3a9 Always stop libstdc++ from using PCH, not just on bootstrap.
It fails and hangs on netbsd, and people who have looked at the PCH
implementation blame it rather than the OS.

whitespace.
2017-07-09 23:17:39 +00:00
maya
d722e2e4d8 gcc{48,49,5,7}: on netbsd only, bump libstdc++ major to 7.
bump pkgrevision.

while here, synchronize libssp comment to a clearer one.

bump gcc*-lib revision to be one higher.
2017-07-09 05:30:41 +00:00
maya
684bd9b6aa gcc6-lib: bump pkgrevision above gcc6 2017-07-08 21:03:55 +00:00
maya
2eec9d9e0d gcc6: on netbsd only, bump libstdc++ major to 7 to match base version.
this stops packages using gcc6 as a compiler from linking to two libstdc++s
at once.
2017-07-08 21:03:16 +00:00
jperkin
073328b36f Explicitly disable mkostemp on SunOS. It was shipped as part of libc for
a while without the corresponding entry in stdlib.h, thus falling foul of
-Werror=implicit-function-declaration checks.
2017-07-07 14:52:30 +00:00
wiz
f52eddb001 Use ldflags during build.
Allow -Wl,-z arguments into lddlflags.

Fixes RELRO build.

Bump PKGREVISION.

While here, remove bogus comment from patch and remove reference
to two non-existing files.
2017-07-07 05:54:24 +00:00
taca
da2176045b Update php56 to 5.6.31.
06 Jul 2017, PHP 5.6.31

- Core:
  . Fixed bug #73807 (Performance problem with processing post request over
    2000000 chars). (Nikita)
  . Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from
    unserialize). (Nikita)
  . Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
    (Stas)
  . Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via
    php_parse_date()). (Derick)

- GD:
  . Fixed bug #74435 (Buffer over-read into uninitialized memory). (cmb)

- mbstring:
  . Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227,
    CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

- OpenSSL:
  . Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
    (Stas)

- PCRE:
  . Fixed bug #74087 (Segmentation fault in PHP7.1.1(compiled using the bundled PCRE library)).
    (Stas)

- WDDX:
   . Fixed bug #74145 (wddx parsing empty boolean tag leads to SIGSEGV). (Stas)
2017-07-07 03:13:48 +00:00
taca
48da35b779 Update php71 to 7.1.7.
06 Jul 2017, PHP 7.1.7

- Core:
  . Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly
    parsed). (Manuel Mausz)
  . Fixed bug #74658 (Undefined constants in array properties result in broken
    properties). (Laruence)
  . Fixed misparsing of abstract unix domain socket names. (Sara)
  . Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
    (Stas)
  . Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in
    zval_get_type). (Nikita)
  . Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from
    unserialize). (Nikita)
  . Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via
    php_parse_date()). (Derick)

- Date:
  . Fixed bug #74639 (implement clone for DatePeriod and DateInterval).
    (andrewnester)

- DOM:
  . Fixed bug #69373 (References to deleted XPath query results). (ttoohey)

- GD:
  . Fixed bug #74435 (Buffer over-read into uninitialized memory). (cmb)

- Intl:
  . Fixed bug #73473 (Stack Buffer Overflow in msgfmt_parse_message). (libnex)
  . Fixed bug #74705 (Wrong reflection on Collator::getSortKey and
    collator_get_sort_key). (Tyson Andre, Remi)

- Mbstring:
  . Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227,
    CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

- OCI8:
 . Add TAF callback (PR #2459). (KoenigsKind)

- Opcache:
  . Fixed bug #74663 (Segfault with opcache.memory_protect and
    validate_timestamp). (Laruence)
  . Revert opcache.enable_cli to default disabled. (Nikita)

- OpenSSL:
  . Fixed bug #74720 (pkcs7_en/decrypt does not work if \x1a is used in
    content). (Anatol)
  . Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
    (Stas)

- PDO_OCI:
  . Support Instant Client 12.2 in --with-pdo-oci configure option.
    (Tianfang Yang)

- Reflection:
  . Fixed bug #74673 (Segfault when cast Reflection object to string with
    undefined constant). (Laruence)

- SPL:
  . Fixed bug #74478 (null coalescing operator failing with SplFixedArray).
    (jhdxr)

- FTP:
  . Fixed bug #74598 (ftp:// wrapper ignores context arg). (Sara)

- PHAR:
  . Fixed bug #74386 (Phar::__construct reflection incorrect). (villfa)

- SOAP
  . Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY).
    (Dmitry)

- Streams:
  . Fixed bug #74556 (stream_socket_get_name() returns '\0'). (Sara)
2017-07-07 03:12:22 +00:00
sevan
bd5578651e Fix HOMEPAGE
Heads up by Brian Callahan <bcallah AT devio DOT us>
2017-07-06 20:04:52 +00:00
taca
158f45b075 Fix build problem when PKGSRC_USE_RELRO is not "no".
* Pass LDFLAGS to LIBRUBY_DLDFLAGS via DLDFLAGS as Ruby 2.4 dose.
2017-07-06 16:35:05 +00:00
taca
27547559af Update pear to 1.10.5.
PEAR-1.10.5					2017-06-27 08:31 UTC

Changelog:

* Bug #21222: PHP 7.2 compatibility: Upgrade to Archive_Tar 1.4.3 needed


XML_Util-1.4.3					2017-06-28 15:26 UTC

Changelog:

* Decrease minimum PEAR version to 1.9.0 to allow PEAR upgrades
2017-07-06 13:34:46 +00:00
taca
5bb8deac04 Update php70 to 7.0.21.
06 Jul 2017 PHP 7.0.21

- Core:
  . Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly
    parsed). (Manuel Mausz)
  . Fixed bug #74658 (Undefined constants in array properties result in broken
    properties). (Laruence)
  . Fixed misparsing of abstract unix domain socket names. (Sara)
  . Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in
    zval_get_type). (Nikita)
  . Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from
    unserialize). (Nikita)
  . Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
    (Stas)
  . Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via
    php_parse_date()). (Derick)

- DOM:
  . Fixed bug #69373 (References to deleted XPath query results). (ttoohey)

- GD:
  . Fixed bug #74435 (Buffer over-read into uninitialized memory). (cmb)

- Intl:
  . Fixed bug #73473 (Stack Buffer Overflow in msgfmt_parse_message). (libnex)
  . Fixed bug #74705 (Wrong reflection on Collator::getSortKey and
    collator_get_sort_key). (Tyson Andre, Remi)
  . Fixed bug #73634 (grapheme_strpos illegal memory access). (Stas)

- Mbstring:
  . Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227,
    CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

- OCI8:
 . Add TAF callback (PR #2459). (KoenigsKind)

- Opcache:
  . Fixed bug #74663 (Segfault with opcache.memory_protect and
    validate_timestamp). (Laruence)

- OpenSSL:
  . Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
    (Stas)

- PCRE:
  . Fixed bug #74087 (Segmentation fault in PHP7.1.1(compiled using the bundled PCRE library)).
    (Stas)

- PDO_OCI:
  . Support Instant Client 12.2 in --with-pdo-oci configure option.
    (Tianfang Yang)

- Reflection:
  . Fixed bug #74673 (Segfault when cast Reflection object to string with
    undefined constant). (Laruence)

- SPL:
  . Fixed bug #74478 (null coalescing operator failing with SplFixedArray).
    (jhdxr)

- Standard:
  . Fixed bug #74708 (Invalid Reflection signatures for random_bytes and
    random_int). (Tyson Andre, Remi)
  . Fixed bug #73648 (Heap buffer overflow in substr). (Stas)

- FTP:
  . Fixed bug #74598 (ftp:// wrapper ignores context arg). (Sara)

- PHAR:
  . Fixed bug #74386 (Phar::__construct reflection incorrect). (villfa)

- SOAP
  . Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY).
    (Dmitry)

- Streams:
  . Fixed bug #74556 (stream_socket_get_name() returns '\0'). (Sara)
2017-07-06 13:32:02 +00:00
adam
7f89b18574 On Darwin you must not have duplicate symbols 2017-07-05 10:17:01 +00:00
maya
a6a3e3fd8b gcc6: update to 6.4.0
Changes:
RTEM: The ABI changes on ARM so that no short enums are used by default.

Bugfixes. an incomplete list of bug fixes made in 6.4 is available in:
https://gcc.gnu.org/bugzilla/buglist.cgi?bug_status=RESOLVED&list_id=183226&resolution=FIXED&target_milestone=6.4
2017-07-04 21:56:40 +00:00
maya
b1da767f36 Reset PKGREVISION 2017-07-04 21:54:20 +00:00
adam
b276d4deda Added CONFIGURE_ARGS.Darwin 2017-07-04 12:46:52 +00:00
fhajny
d9c70b5163 Update lang/erlang* to 20.0.
Potential Incompatibilities
---------------------------

- ERTS:
  - The non SMP Erlang VM is deprecated and not built by default
  - Remove deprecated erlang:hash/2
  - erlang:statistics/1 with scheduler_wall_time now also includes
    info about dirty CPU schedulers.
  - The new purge strategy introduced in OTP 19.1 is mandatory and
    slightly incompatible for processes holding funs
  - The NIF library reload is not supported anymore.
  - Atoms can now contain arbitrary unicode characters which means
    that the DFLAG_UTF8_ATOMS capability in the distribution protocol
    must be supported if an OTP 20 node should accept the connection
    with another node or library.
- Asn1: Deprecated module and functions removed (asn1rt,
  asn1ct:encode/3 and decode/3)
- Ssh: client only option in a call to start a daemon will now fail

Highlights
----------

- Erts:
  - Dirty schedulers enabled and supported on VM with SMP support.
  - support for "dirty" BIFs and "dirty" GC.
  - erlang:garbage_collect/2 for control of minor or major GC
  - Erlang literals are no longer copied when sending messages.
  - Improved performance for large ETS tables, >256 entries (except
    ordered_set)
  - erlang:system_info/1 atom_count and atom_limit
  - Reduced memory pressure by converting sub-binaries to
    heap-binaries during GC
  - enif_select, map an external event to message
  - Improvements of timers internally in the VM resulting in reduced
    memory consumption and more efficient administration for timers
- Compiler:
  - Code generation for complicated guards is improved.
  - Warnings for repeated identical map keys. #{'a'=>1, 'b'=>2,
    'a'=>3} will warn for the repeated key a.
  - By default there is now a warning when export_all is used. Can be
    disabled
  - Pattern matching for maps is optimized
  - New option deterministic to omit path to source + options info the
    BEAM file.
  - Atoms may now contain arbitrary unicode characters.
  - compile:file/2 has an option to include extra chunks in the BEAM
    file.
- Misc other applications
  - Significantly updated string module with unicode support and many
    new functions
  - crypto now supports OpenSSL 1.1
  - Unnamed ets tables optimized
  - gen_fsm is deprecated and replaced by gen_statem
  - A new event manager to handle a subset of OS signals in Erlang
  - Optimized sets add_element, del_element and union
  - Added rand:jump/0-1
  - When a gen_server crashes, the stacktrace for the client will be
    printed to facilitate debugging.
  - take/2 has been added to dict, orddict, and gb_trees.
  - take_any/2 has been added to gb_trees
  - erl_tar support for long path names and new file formats
  - asn1: the new maps option changes the representation of SEQUENCE
    to be maps instead of records
  - A TLS client will by default call
    public_key:pkix_verify_hostname/2 to verify the hostname
  - ssl: DTLS documented in the API, experimental
  - ssh: improving security, removing and adding algorithms
  - New math:fmod/2
2017-07-04 11:40:48 +00:00
joerg
c888a4724a Add DISTUTILS_BUILDDIR_IN_TEST_ENV as flag to get the build directory
into PYTHONPATH for testing.
2017-07-03 18:14:40 +00:00
joerg
0e9c708d1e Recognize python3 as interpreter for replacement. 2017-07-03 18:13:43 +00:00
fhajny
dad4a35bf1 Update lang/nodejs to 8.1.3.
- Stream Two regressions with the stream module have been fixed:
  - The finish event will now always be emitted after the error event
    if one is emitted
  - In object mode, readable streams can now use undefined again.
2017-07-03 15:14:47 +00:00
wiedi
daa2b14a30 SunOS needs POSIX_PTHREAD_SEMANTICS 2017-07-02 10:22:37 +00:00
jperkin
821d3b5622 Add newline at EOF to ensure the +INSTALL scripts are generated correctly. 2017-06-30 16:07:51 +00:00
jperkin
5ee06afa32 Fix static library name on Darwin, from minskim@. 2017-06-30 11:44:15 +00:00
jperkin
9b13def986 Override INSTALL_UNSTRIPPED after including bsd.prefs.mk. 2017-06-29 20:11:17 +00:00
jperkin
f77dfef5ee Ruby changed the primary -std flag for enabling C99 from iso9899:1999 to
gnu99 but left an existing SunOS test to only check for iso9899:1999.  This
resulted in CPPFLAGS not being set correctly for modules which require
native compilation - those should now all be fixed.  Bump PKGREVISION.
2017-06-27 15:25:19 +00:00
taca
65986e408e Update "used by" lines. 2017-06-25 02:27:07 +00:00
maya
5c0a1ab0b6 Restrict gcc gsed usage to NetBSD
(NetBSD/mips64 progress further with gsed)

Adding gsed as a tool creates circular dependencies if pkgsrc gcc is used
as the bootstrap compiler.

Pointed out by jperkin, sorry.
2017-06-22 21:44:49 +00:00
maya
482e3d0bc7 Use gsed when building GCC.
This is a somewhat blind commit. I've long had issues on various platforms
with libgcc getting misconfigured (on netbsd/mips,arm,powerpc), for example
build failures see:
http://mail-index.netbsd.org/port-mips/2017/06/21/msg000832.html

testing GCC 7.1 with netbsd/mips64el I got a lot further using it, but
still didn't complete the build. It took hours to reach this failure,
so I'd rather blindly commit the same change in the hopes it might help
other architectures.
2017-06-21 21:16:35 +00:00
taca
144b4ae61e Update ruby-gherkin to 4.1.3.
* pkgsrc change: add pkg_alternatives support.

Please refer
<https://github.com/cucumber/gherkin-ruby/compare/v4.0.0...v4.1.3> for
changes.
2017-06-21 14:05:34 +00:00
taca
839e866ba1 Overhaul framework of Ruby on Rails to support coexistence of rails32
and rails42.

* Rename RUBY_RAILS_VERSION to RAILS_VERSION.
* Remove detection of installed Ruby on Rails.
* Add ${RUBY_RAILS} to PKGBASE of each Ruby on Rails' pacakge.
2017-06-21 13:11:19 +00:00
maya
4058f7459c g95: Fix netbsd/mips64 builds
NetBSD switched to n32 ABI for mips64el in NetBSD 6, and the build is
failing due to the default ABI mismatch between linker and newly built
compiler.

Default to n32 and backport n32 size definitions from newer GCC.

Small chance of a functional change for o32 builds (which should work), ride
previous PKGREVISION bump for it.
2017-06-21 11:36:20 +00:00
maya
d9d8a26f2d g95: don't try to link against a non-existent file on netbsd/powerpc.
untested but obvious change. currently showing up as a build failure of
math/blas as it attempts to link with crtsavres which is a linux file.

Bump PKGREVISION as the build succeeds.
2017-06-21 01:12:56 +00:00
taca
56658644e2 Remove Ruby 2.1 support. 2017-06-20 13:41:45 +00:00
taca
9f08d58db9 Remove ruby21-base package since Ruby 2.1 is EOL.
Please use ruby23-base, ruby24-base or ruby22-base.
2017-06-20 13:38:25 +00:00
taca
4c0380ed44 Remove ruby21 package since it is EOL.
Please use ruby23, ruby24 or ruby22.
2017-06-20 13:37:56 +00:00
taca
375fc692cb Delete ruby21 and ruby21-base. 2017-06-20 13:37:18 +00:00
manu
6783900031 Fix crash on i386 in www/ap-php build with PHP 7.x
PHP 7.x on i386 crashes unless built with GCC >= 4.9. There
was the necessary tweak for the lang/php70 and lang/php71
packages, but not for dependencies such www/ap-php. As a
result, www/ap-php crashed during the build. We fix this by
moving the GCC_REQD to Makefile.php which is included
by dependent packages
2017-06-20 07:24:08 +00:00
jperkin
baf758cd0a Requires c99 for signbit(). 2017-06-19 11:11:34 +00:00
taca
1eb1365aba Add and enable ruby24 and ruby24-base. 2017-06-18 13:46:51 +00:00
taca
cfa8dd7151 Add ruby24 (Ruby 2.4.1) to pkgsrc.
Note: ruby-tk was dropped from Ruby core distribution.
2017-06-18 13:46:16 +00:00
taca
06b9a613e0 Add ruby24-base (Ruby 2.4.1 core) to pkgsrc.
Ruby 2.4.1						22 Mar 2017

Ruby 2.4.1 is the first TEENY version release of the stable 2.4 series.

See commit logs for details:
	https://github.com/ruby/ruby/compare/v2_4_0...v2_4_1


Ruby 2.4.0						25 Dec 2016

o Introduce hash table improvement (by Vladimir Makarov)

  Improve the internal structure of hash table (st_table) by introducing open
  addressing and an inclusion order array. This improvement has been discussed
  with many people, especially with Yura Sokolov.

o Binding#irb: Start a REPL session similar to binding.pry

  While you are debugging, you may often use p to see the value of
  variables. With pry you can use binding.pry in your application to launch a
  REPL and run any Ruby code. r56624 introduces binding.irb which behaves like
  that with irb.

o Unify Fixnum and Bignum into Integer

  Though ISO/IEC 30170:2012 doesn¡Çt specify details of the Integer class,
  Ruby had two visible Integer classes: Fixnum and Bignum. Ruby 2.4 unifies
  them into Integer. All C extensions which touch the Fixnum or Bignum class
  need to be fixed.

  See also the ticket and akr¡Çs slides.

o String supports Unicode case mappings

  String/Symbol#upcase/downcase/swapcase/capitalize(!) now handle Unicode case
  mappings instead of only ASCII case mappings.

o Performance improvements

  Ruby 2.4 also contains the following performance improvements including
  language changes:

  * Array#max, Array#min

    [x, y].max and [x, y].min are optimized to not create a temporary array
    under certain conditions.

  * Regexp#match?

    Added Regexp#match?, which executes a regexp match without creating a back
    reference object and changing $~ to reduce object allocation.

  * Other performance improvements

    - speed up instance variable access

o Debugging

  * Thread#report_on_exception and Thread.report_on_exception

    Ruby ignores exceptions in threads unless another thread explicitly joins
    them. With report_on_exception = true, you can notice if a thread has died
    due to an unhandled exception.

    Send us feedback what should be the default for report_on_exception and
    about report-on-GC, which shows a report when a thread is garbage
    collected without join.

  * Thread deadlock detection now shows threads with their backtrace and
    dependency

    Ruby has deadlock detection around waiting threads, but its report
    doesn¡Çt include enough information for debugging. Ruby 2.4¡Çs deadlock
    detection shows threads with their backtrace and dependent threads.

o Other notable changes since 2.3

  * Support OpenSSL 1.1.0 (drop support for 0.9.7 or prior)
  * ext/tk is now removed from stdlib Feature #8539
  * XMLRPC is now removed from stdlib Feature #12160

  See NEWS or commit logs for details.
2017-06-18 13:45:11 +00:00
taca
a1c715c307 Add support for Ruby 2.4 with several clean up. 2017-06-18 13:44:38 +00:00
ryoon
cc1242f96d Fix build under NetBSD etc. using internal llvm
lang/llvm 4.0 is not compatible for this version of rust.
2017-06-18 09:21:56 +00:00
asau
e39b64de35 Update to SBCL 1.3.18
changes in sbcl-1.3.18 relative to sbcl-1.3.17:
  * minor incompatible change: existing values of CFLAGS, ASFLAGS,
    CPPFLAGS, and LINKFLAGS will be incorporated into C compiler
    invocations when building from source.
  * minor incompatible change: the result of WRITE-TO-STRING may be
    a BASE-STRING if all characters written are of type BASE-CHAR.
  * minor incompatible change: the broadcast stream with no output
    streams is a singleton object. That object satisfies OPEN-STREAM-P
    regardless of how many times CLOSE is invoked on it.
  * enhancement: x86[-64] backends contain an experimental feature
    which aids in demonstrating reachability of any object starting
    from a tenured object or a thread stack by producing a proof
    as a sequence of pointers to follow.
    The file "tests/traceroot.test.sh" contains an example usage.
  * enhancement: if the alien symbol "gc_coalesce_string_literals" is
    set to 1 prior to SAVE-LISP-AND-DIE, then similar string constants
    loaded from different fasl files may be collapsed to one object.
    If the variable is set to 2, then additionally strings which are
    STRING= in code resulting from COMPILE can be coalesced.
    For instance, two functions returning the literal string "HI"
    might return EQ strings after collapsing, which may be undesired
    in a particular use. The flag pertains to gencgc only.
  * enhancement: SXHASH values on pathnames are better distributed
  * bug fix: MAKE-PATHNAME removes empty strings as components of a
    directory, as is permitted: "Whenever a pathname is constructed
    the components may be canonicalized if appropriate."
  * optimization: various printer and FORMAT performance enhancements.
  * bug fix: GET-FOREGROUND no longer fails in case all other interactive
    threads exit (lp#1682671, reported by Syll)
  * bug fix: RELEASE-FOREGROUND always removes the current thread from the
    list of interactive threads. (lp#1682867, reported by Syll)
2017-06-17 20:58:27 +00:00
joerg
7099f4bcfa Fix portability. 2017-06-17 19:42:58 +00:00
fhajny
dfc19aa950 Update lang/nodejs to 8.1.2.
- Fix broken process.release properties in 8.1.1 causing failure to
  compile native add-ons on platforms other than Windows. This is a fix
  in the Node.js build process so there are no additional code commits
  included on top of 8.1.1.
2017-06-15 18:16:56 +00:00
fhajny
2a3a20778f Update lang/nodejs to 8.1.1.
8.1.1

Child processes
- stdout and stderr are now available on the error output of a failed
  call to the util.promisify()ed version of child_process.exec.

HTTP
- A regression that broke certain scenarios in which HTTP is used
  together with the cluster module has been fixed.

HTTPS
- The rejectUnauthorized option now works properly for unix sockets.

Readline
- A change that broke npm init and other code which uses readline
  multiple times on the same input stream is reverted.



8.1.0

Async Hooks
- When one Promise leads to the creation of a new Promise, the parent
  Promise will be identified as the trigger

Dependencies
- libuv has been updated to 1.12.0
- npm has been updated to 5.0.3

File system
- The fs.exists() function now works correctly with util.promisify()
- fs.Stats times are now also available as numbers

Inspector
- It is now possible to bind to a random port using --inspect=0

Zlib
- A regression in the Zlib module that made it impossible to properly
  subclasses zlib.Deflate and other Zlib classes has been fixed.
2017-06-14 12:59:14 +00:00
nros
e00c54f1ab Update qore to version 0.8.12.10.
Changelog from release notes:

New Features since Qore 0.8.12.4:
* added the SalesforceRestClient module for communicating with
  Salesforce.com using the REST APIs
* module SqlUtil
    -has support for native default values in tables
     (issue 1428)
    -has support for Oracle named types (eg. spatial types) for
     Schema.qm and SchemaReverse.qm. (issue 1465)

Bug Fixes since Qore 0.8.12.4:
* module fixes:
    -FixedLengthUtil: fixes and improvements to errors and
     exceptions (issue 1828)
    -HttpServerUtil: eliminated excess logging of all HTTP
     chunks sent and received (issue 1832)
    -PgsqlSqlUtil: fixed a bug in setting a comment for a
     table column (issue 1886)
    -SqlUtil: fixed a bug in the offset query hash argument
     in SQL operation methods (issue 1880), fixed a bug
     that prohibited only columns from the main query to be
     selected when joins are used (issue 1909)
    -TableMapper: fixed a bug in flush messages in the
     InboundTableMapper class (issue 1849)
* fixed a bug that could cause spurious parse-time exceptions
  to be thrown when matching call variants with multiple
  return types for the same callable object (issue 1928)
* fixed the process return code in the output reference in
  backquote() on Unix/Linux platforms (issue 1884)
* fixed a bug where connections were not immediately released
  back to the DatasourcePool in case of an SQLSTATEMENT-ERROR
  exception (issue 1836)
* eliminated a spurious exception in the SQLStatement class in
  case of a DatasourcePool timeout (issue 1832)
* fixed a crash when the incorrect type was passed to a
  parameter declared *reference (issue 1815)
* fixed a crash when the Qore library exits caused by an error
  in handling module dependencies with injected modules
  (issue 1805)
* fixed segfault crashes caused by calling object methods with
  null pointers (issue 1791)
* added internal API support to make it easier for DBI drivers
  to handle lost connections and to allow DBI drivers that must
  close all open handles before a connection is closed
  (such as the oracle driver); due to this change, SQLStatement
  objects based on a DatasourcePool are closed automatically
  whenever the datasource is returned to the pool (issue 1250)
* implemented new parse options to revert the effect of parse
  options that affect code safety (issue 1895):
    -%correct-list-parsing
    -%correct-logic-precedence
    -%correct-int-assignments
    -%correct-operators
    -%loose-args
* fixed parse locations of strings and regexes (issue 1905)
* fixed a memory leak where references participate in recursive
  references (issue 1774)
* fixed a build issue with clang++ (issue 1768)
* fixed a memory leak in the Queue copy constructor when the
  Queue was used in other objects (such as an event queue,
  etc; issue 1749)
* Mapper module fixes:
    -fixed bugs handling the allow_dot and allow_output_dot
     options (issue 1690)
    -fixed TableMapper bugs introduced in Qore 0.8.12.7
     (issue 1754)
* fixed a memory leak in %try-module error handling (issue 1690)
* fixed a bug in trunc_str() when the string has an invalid
  multi-byte character at the end of the string and the string
  is exactly the byte width requested (issue 1693)
* fixed a bug where ReadOnlyFile::getchar() did not respect
  character semantics as documented (issue 1574)
* OracleSqlUtil module fixes:
    -fixed a bug in character_semantics for standalone column
     (issue 1688)
* Mapper module fixes:
    -fixed a bug in handling "list mode" data such as submitted by
     InboundTableMapper::queueData() (issue 1736, bug introduced
     in Qore 0.8.12.7 with the fix for issue 1626)
* SqlUtil module fixes:
    -fixed schema alignment skipping column with name "driver"
     (issue 1684)
    -fixed sqlutil schema management: functional indexes are
     rejected without () in name (issue 1610)
* TableMapper module fixes:
    -fixed a bug in handling "list mode" data with optimized
     inserts (issue 1736, bug introduced in Qore 0.8.12.7 with
     the fix for issue 1626)
* WebSocketClient module fixes:
    -added timeout values to Socket and HTTPClient calls
     (issue 1725)
* WebSocketHandler module fixes:
    -added timeout values to Socket calls (issue 1725)
* WebSocketUtil module fixes:
    -added timeout values to Socket calls (issue 1725)
* fixed a bug where a type conversion error in an lvalue
  assignment could generate a confusing unrelated runtime
  exception (issue 1697)
* fixed a bug where invalid characters in the port
  specification in a URL were ignored (issue 1728)
* fixed a bug with SSL socket communication the remote closing
  the connection during a send operation could cause the
  current thread to go into an infinite loop consuming
  100% CPU (issue 1729)
* fixed a bug in the HashListIterator class iterating hashes
  with a mix of lists and single values such as used by bulk
  DML binds; now the single values will appear as the current
  value for all list elements as per the original design
  instead of throwing a runtime exception (issue 1738)
* fixed bug in internal string generation with size_t arguments
  that could cause invalid data to be output or crashes on
  32-bit platforms (issue 1640)
* fixed a runtime memory leak and invalid runtime behavior with
  undetected recursive lvalue references (issue 1617)
* improved prompt collection performance with large graphs of
  objects by eliminating additional unnecessary graph scans,
  resulting in further large performance improvements in the
  garbage collector (issue 1363)
* improved InboundTableMapper::queueData() performance
  (in the TableMapper module) when used with data in hash of
  lists format to use bulk DML in input and output without
  internal data conversions (issue 1626)
* OracleSqlUtil module fixes:
    -worked around ORA-22165 from op_in() caused by Oracle's
     limit on number of collection elements (issue 1660)
    -fixed a bug in the force option (i.e. cascade) for
     dropping types (issue 1683)
    -improved %try-module error reporting and documentation
     (issue 1648)
* fixed a bug in Qore::parse_url() parsing single-character
  hostnames (issue 1524)
* fixed a bug where PO_LOCKDOWN was not set when parsing init
  and del attributes in user module headers (issue 1535)
* fixed a bug parsing exception catch block parameter errors
  (in debug builds only; issue 1558)
* fixed a bug dereferencing binary values with the [] operator;
  the behavior now corresponds to the documentation (issue 1566)
* fixed a bug that would result in a crash if a method were
  declared both static and abstract (issue 1590)
* fixed performance issues with the Mapper module (and by
  extension the TableMapper module) for mappers with many
  identity (i.e. 1:1) and constant mappings (issue 1620)
* fixed a bug in the BulkInsertOperation class in the
  BulkSqlUtil module where inserts would fail or silently
  insert invalid data in the second or later blocks when
  constant hashes were used (issue 1625)
* Mime module:
    -added support for URL form-encoded messages (issue 1436)
* RestClient module:
    -added support for URL form-encoded messages (issue 1436)
    -added support for the "rawxml" message body encoding
     (issue 1437)
* fixed handling of invalid compressed data in the following
  functions (issue 1432):
    -Qore::gunzip_to_binary()
    -Qore::gunzip_to_string()
    -Qore::uncompress_to_binary()
    -Qore::uncompress_to_string()
* fixed @inf@ on Windows (issue 1442):
* fixed Qore::parse_url() with single-character usernames
  (issue 1455)
* corrected the error message with SSL reads when the server
  closes the connection prematurely (issue 1488)
* fixed the Host header in HTTP requests to not include the port
  if the port is the default port for the scheme because it
  causes some servers to reject the request (issue 1489)
2017-06-13 19:23:31 +00:00
taca
89802fd626 Update included Archive_Tar pear package to 1.4.3.
Archive_Tar 1.4.3					2017-06-11 13:32 UTC

Changelog:

* Fix Bug #21218: Cannot use result of built-in function in write context in
  PHP 7.2.0alpha1 [mrook]

Bump PKGREVISION.
2017-06-12 14:09:19 +00:00
taca
2236876945 Update php71 to 7.1.6.
7 Jun 2017, PHP 7.1.6

- Core:
  . Fixed bug #74600 (crash (SIGSEGV) in _zend_hash_add_or_update_i).
    (Laruence)
  . Fixed bug #74546 (SIGILL in ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_CONST).
    (Laruence)
  . Fixed bug #74589 (__DIR__ wrong for unicode character). (Anatol)

- intl:
  . Fixed bug #74468 (wrong reflection on Collator::sortWithSortKeys). (villfa)

- MySQLi:
  . Fixed bug #74547 (mysqli::change_user() doesn't accept null as $database
    argument w/strict_types). (Anatol)

- Opcache:
  . Fixed bug #74596 (SIGSEGV with opcache.revalidate_path enabled). (Laruence)

- phar:
  . Fixed bug #51918 (Phar::webPhar() does not handle requests sent through PUT
    and DELETE method). (Christian Weiske)

- Readline:
  . Fixed bug #74490 (readline() moves the cursor to the beginning of the line).
    (Anatol)

- Standard:
  . Fixed bug #74510 (win32/sendmail.c anchors CC header but not BCC).
    (Damian Wadley, Anatol)

- xmlreader:
  . Fixed bug #74457 (Wrong reflection on XMLReader::expand). (villfa)
2017-06-09 01:23:25 +00:00
taca
6d2efa4b68 Update php70 to 7.0.20.
8 Jun 2017 PHP 7.0.20

- Core:
  . Fixed bug #74600 (crash (SIGSEGV) in _zend_hash_add_or_update_i).
    (Laruence)
  . Fixed bug #74546 (SIGILL in ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_CONST).
    (Laruence)

- intl:
  . Fixed bug #74468 (wrong reflection on Collator::sortWithSortKeys). (villfa)

- MySQLi:
  . Fixed bug #74547 (mysqli::change_user() doesn't accept null as $database
    argument w/strict_types). (Anatol)

- Opcache:
  . Fixed bug #74596 (SIGSEGV with opcache.revalidate_path enabled). (Laruence)

- phar:
  . Fixed bug #51918 (Phar::webPhar() does not handle requests sent through PUT
    and DELETE method). (Christian Weiske)

- Standard:
  . Fixed bug #74510 (win32/sendmail.c anchors CC header but not BCC).
    (Damian Wadley, Anatol)

- xmlreader:
  . Fixed bug #74457 (Wrong reflection on XMLReader::expand). (villfa)
2017-06-08 14:52:59 +00:00
wiz
1154c6f8d2 Actually bump perl requirement to 5.26 (different installation path
for modules).
2017-06-08 11:05:33 +00:00
maya
d76ec1bb61 Take maintainership of all (recent-ish) GCC packages
I have gone into the depths of GCC and came back alive, so feel free
to ask me about it.
2017-06-08 09:52:47 +00:00
khorben
77a5e3fd68 Mark gnatmake as NOT_PAX_MPROTECT_SAFE
Bumps PKGREVISION.
2017-06-07 23:19:05 +00:00
fhajny
976a3a17cc Update lang/nodejs6 to 6.11.0
Notable Changes

build:
- support for building mips64el
cluster:
- disconnect() now returns a reference to the disconnected worker.
crypto:
- ability to select cert store at runtime
- Use system CAs instead of using bundled ones
- The Decipher methods setAuthTag() and setAAD now return this.
- adding support for OPENSSL_CONF again
- make LazyTransform compabile with Streams1
deps:
- upgrade libuv to 1.11.0
dns:
- Implemented {ttl: true} for resolve4() and resolve6().
process:
- add NODE_NO_WARNINGS environment variable
readline:
- add option to stop duplicates in history
src:
- support "--" after "-e" as end-of-options
tls:
- new tls.TLSSocket() supports sec ctx options
- Allow obvious key/passphrase combinations.
2017-06-07 11:09:44 +00:00
jperkin
1330eb25c6 Fix build with dtrace option. 2017-06-06 12:37:50 +00:00
ryoon
1563d11205 Enable bootsrapping on NetBSD 8.99.1 2017-06-06 03:36:34 +00:00
fhajny
f85dc67a76 Update lang/nodejs to 8.0.0
Node.js 8.0.0 is a major new release that includes a significant number of
semver-major and semver-minor changes. Notable changes are listed below.

The Node.js 8.x release branch is scheduled to become the next actively
maintained Long Term Support (LTS) release line in October, 2017 under the
LTS codename 'Carbon'.

### Notable Changes

* Async Hooks
  * The `async_hooks` module has landed in core

* Buffer
  * Using the `--pending-deprecation` flag will cause Node.js to emit a
    deprecation warning when using `new Buffer(num)` or `Buffer(num)`.
  * `new Buffer(num)` and `Buffer(num)` will zero-fill new `Buffer` instances
  * Many `Buffer` methods now accept `Uint8Array` as input

* Child Process
  * Argument and kill signal validations have been improved
  * Child Process methods accept `Uint8Array` as input

* Console
  * Error events emitted when using `console` methods are now supressed.

* Dependencies
  * The npm client has been updated to 5.0.0
  * V8 has been updated to 5.8 with forward ABI stability to 6.0

* Domains
  * Native `Promise` instances are now `Domain` aware

* Errors
  * We have started assigning static error codes to errors generated by Node.js.
    This has been done through multiple commits and is still a work in
    progress.

* File System
  * The utility class `fs.SyncWriteStream` has been deprecated
  * The deprecated `fs.read()` string interface has been removed

* HTTP
  * Improved support for userland implemented Agents
  * Outgoing Cookie headers are concatenated into a single string
  * The `httpResponse.writeHeader()` method has been deprecated
  * New methods for accessing HTTP headers have been added to `OutgoingMessage`

* Lib
  * All deprecation messages have been assigned static identifiers
  * The legacy `linkedlist` module has been removed

* N-API
  * Experimental support for the new N-API API has been added

* Process
  * Process warning output can be redirected to a file using the
    `--redirect-warnings` command-line argument
  * Process warnings may now include additional detail

* REPL
  * REPL magic mode has been deprecated

* Src
  * `NODE_MODULE_VERSION` has been updated to 57
  * Add `--pending-deprecation` command-line argument and
    `NODE_PENDING_DEPRECATION` environment variable
  * The `--debug` command-line argument has been deprecated. Note that
    using `--debug` will enable the *new* Inspector-based debug protocol
    as the legacy Debugger protocol previously used by Node.js has been
    removed.
  * Throw when the `-c` and `-e` command-line arguments are used at the same
    time
  * Throw when the `--use-bundled-ca` and `--use-openssl-ca` command-line
    arguments are used at the same time.

* Stream
  * `Stream` now supports `destroy()` and `_destroy()` APIs
  * `Stream` now supports the `_final()` API

* TLS
  * The `rejectUnauthorized` option now defaults to `true`
  * The `tls.createSecurePair()` API now emits a runtime deprecation
  * A runtime deprecation will now be emitted when `dhparam` is less than
    2048 bits

* URL
  * The WHATWG URL implementation is now a fully-supported Node.js API

* Util
  * `Symbol` keys are now displayed by default when using `util.inspect()`
  * `toJSON` errors will be thrown when formatting `%j`
  * Convert `inspect.styles` and `inspect.colors` to prototype-less objects
  * The new `util.promisify()` API has been added

* Zlib
  * Support `Uint8Array` in Zlib convenience methods
  * Zlib errors now use `RangeError` and `TypeError` consistently
2017-06-05 21:14:04 +00:00
bsiegert
cd3e4f86c1 Apply patch from latest OpenBSD errata (CVE-2017-6512) here, too. 2017-06-05 18:58:44 +00:00
ryoon
afd012ade2 Increment version number of perl5 2017-06-05 14:45:54 +00:00
ryoon
17cfb59fe1 Recursive revbump from lang/perl5 5.26.0 2017-06-05 14:23:47 +00:00
ryoon
93d34c255b Update to 5.26.0
Changelog:
NAME
       perldelta - what is new for perl v5.26.0

DESCRIPTION
       This document describes the differences between the 5.24.0 release and
       the 5.26.0 release.

Notice
       This release includes three updates with widespread effects:

       o   "." no longer in @INC

           For security reasons, the current directory (".") is no longer
           included by default at the end of the module search path (@INC).
           This may have widespread implications for the building, testing and
           installing of modules, and for the execution of scripts.  See the
           section "Removal of the current directory (".") from @INC" for the
           full details.

       o   "do" may now warn

           "do" now gives a deprecation warning when it fails to load a file
           which it would have loaded had "." been in @INC.

       o   In regular expression patterns, a literal left brace "{" should be
           escaped

           See "Unescaped literal "{" characters in regular expression
           patterns are no longer permissible".

Core Enhancements
   Lexical subroutines are no longer experimental
       Using the "lexical_subs" feature introduced in v5.18 no longer emits a
       warning.  Existing code that disables the "experimental::lexical_subs"
       warning category that the feature previously used will continue to
       work.  The "lexical_subs" feature has no effect; all Perl code can use
       lexical subroutines, regardless of what feature declarations are in
       scope.

   Indented Here-documents
       This adds a new modifier "~" to here-docs that tells the parser that it
       should look for "/^\s*$DELIM\n/" as the closing delimiter.

       These syntaxes are all supported:

           <<~EOF;
           <<~\EOF;
           <<~'EOF';
           <<~"EOF";
           <<~`EOF`;
           <<~ 'EOF';
           <<~ "EOF";
           <<~ `EOF`;

       The "~" modifier will strip, from each line in the here-doc, the same
       whitespace that appears before the delimiter.

       Newlines will be copied as-is, and lines that don't include the proper
       beginning whitespace will cause perl to croak.

       For example:

           if (1) {
             print <<~EOF;
               Hello there
               EOF
           }

       prints "Hello there\n" with no leading whitespace.

   New regular expression modifier "/xx"
       Specifying two "x" characters to modify a regular expression pattern
       does everything that a single one does, but additionally TAB and SPACE
       characters within a bracketed character class are generally ignored and
       can be added to improve readability, like "/[ ^ A-Z d-f p-x ]/xx".
       Details are at "/x and /xx" in perlre.

   "@{^CAPTURE}", "%{^CAPTURE}", and "%{^CAPTURE_ALL}"
       "@{^CAPTURE}" exposes the capture buffers of the last match as an
       array.  So $1 is "${^CAPTURE}[0]".  This is a more efficient equivalent
       to code like "substr($matched_string,$-[0],$+[0]-$-[0])", and you don't
       have to keep track of the $matched_string either.  This variable has no
       single character equivalent.  Note that, like the other regex magic
       variables, the contents of this variable is dynamic; if you wish to
       store it beyond the lifetime of the match you must copy it to another
       array.

       "%{^CAPTURE}" is equivalent to "%+" (i.e., named captures).  Other than
       being more self-documenting there is no difference between the two
       forms.

       "%{^CAPTURE_ALL}" is equivalent to "%-" (i.e., all named captures).
       Other than being more self-documenting there is no difference between
       the two forms.

   Declaring a reference to a variable
       As an experimental feature, Perl now allows the referencing operator to
       come after "my()", "state()", "our()", or "local()".  This syntax must
       be enabled with "use feature 'declared_refs'".  It is experimental, and
       will warn by default unless "no warnings 'experimental::refaliasing'"
       is in effect.  It is intended mainly for use in assignments to
       references.  For example:

           use experimental 'refaliasing', 'declared_refs';
           my \$a = \$b;

       See "Assigning to References" in perlref for more details.

   Unicode 9.0 is now supported
       A list of changes is at
       <http://www.unicode.org/versions/Unicode9.0.0/>.  Modules that are
       shipped with core Perl but not maintained by p5p do not necessarily
       support Unicode 9.0.  Unicode::Normalize does work on 9.0.

   Use of "\p{script}" uses the improved Script_Extensions property
       Unicode 6.0 introduced an improved form of the Script ("sc") property,
       and called it Script_Extensions ("scx").  Perl now uses this improved
       version when a property is specified as just "\p{script}".  This should
       make programs more accurate when determining if a character is used in
       a given script, but there is a slight chance of breakage for programs
       that very specifically needed the old behavior.  The meaning of
       compound forms, like "\p{sc=script}" are unchanged.  See "Scripts" in
       perlunicode.

   Perl can now do default collation in UTF-8 locales on platforms that
       support it
       Some platforms natively do a reasonable job of collating and sorting in
       UTF-8 locales.  Perl now works with those.  For portability and full
       control, Unicode::Collate is still recommended, but now you may not
       need to do anything special to get good-enough results, depending on
       your application.  See "Category "LC_COLLATE": Collation: Text
       Comparisons and Sorting" in perllocale.

   Better locale collation of strings containing embedded "NUL" characters
       In locales that have multi-level character weights, "NUL"s are now
       ignored at the higher priority ones.  There are still some gotchas in
       some strings, though.  See "Collation of strings containing embedded
       "NUL" characters" in perllocale.

   "CORE" subroutines for hash and array functions callable via reference
       The hash and array functions in the "CORE" namespace ("keys", "each",
       "values", "push", "pop", "shift", "unshift" and "splice") can now be
       called with ampersand syntax ("&CORE::keys(\%hash") and via reference
       ("my $k = \&CORE::keys; $k->(\%hash)").  Previously they could only be
       used when inlined.

   New Hash Function For 64-bit Builds
       We have switched to a hybrid hash function to better balance
       performance for short and long keys.

       For short keys, 16 bytes and under, we use an optimised variant of One
       At A Time Hard, and for longer keys we use Siphash 1-3.  For very long
       keys this is a big improvement in performance.  For shorter keys there
       is a modest improvement.

Security
   Removal of the current directory (".") from @INC
       The perl binary includes a default set of paths in @INC.  Historically
       it has also included the current directory (".") as the final entry,
       unless run with taint mode enabled ("perl -T").  While convenient, this
       has security implications: for example, where a script attempts to load
       an optional module when its current directory is untrusted (such as
       /tmp), it could load and execute code from under that directory.

       Starting with v5.26, "." is always removed by default, not just under
       tainting.  This has major implications for installing modules and
       executing scripts.

       The following new features have been added to help ameliorate these
       issues.

       o   Configure -Udefault_inc_excludes_dot

           There is a new Configure option, "default_inc_excludes_dot"
           (enabled by default) which builds a perl executable without ".";
           unsetting this option using "-U" reverts perl to the old behaviour.
           This may fix your path issues but will reintroduce all the security
           concerns, so don't build a perl executable like this unless you're
           really confident that such issues are not a concern in your
           environment.

       o   "PERL_USE_UNSAFE_INC"

           There is a new environment variable recognised by the perl
           interpreter.  If this variable has the value 1 when the perl
           interpreter starts up, then "." will be automatically appended to
           @INC (except under tainting).

           This allows you restore the old perl interpreter behaviour on a
           case-by-case basis.  But note that this is intended to be a
           temporary crutch, and this feature will likely be removed in some
           future perl version.  It is currently set by the "cpan" utility and
           "Test::Harness" to ease installation of CPAN modules which have not
           been updated to handle the lack of dot.  Once again, don't use this
           unless you are sure that this will not reintroduce any security
           concerns.

       o   A new deprecation warning issued by "do".

           While it is well-known that "use" and "require" use @INC to search
           for the file to load, many people don't realise that "do "file""
           also searches @INC if the file is a relative path.  With the
           removal of ".", a simple "do "file.pl"" will fail to read in and
           execute "file.pl" from the current directory.  Since this is
           commonly expected behaviour, a new deprecation warning is now
           issued whenever "do" fails to load a file which it otherwise would
           have found if a dot had been in @INC.

       Here are some things script and module authors may need to do to make
       their software work in the new regime.

       o   Script authors

           If the issue is within your own code (rather than within included
           modules), then you have two main options.  Firstly, if you are
           confident that your script will only be run within a trusted
           directory (under which you expect to find trusted files and
           modules), then add "." back into the path; e.g.:

               BEGIN {
                   my $dir = "/some/trusted/directory";
                   chdir $dir or die "Can't chdir to $dir: $!\n";
                   # safe now
                   push @INC, '.';
               }

               use "Foo::Bar"; # may load /some/trusted/directory/Foo/Bar.pm
               do "config.pl"; # may load /some/trusted/directory/config.pl

           On the other hand, if your script is intended to be run from within
           untrusted directories (such as /tmp), then your script suddenly
           failing to load files may be indicative of a security issue.  You
           most likely want to replace any relative paths with full paths; for
           example,

               do "foo_config.pl"

           might become

               do "$ENV{HOME}/foo_config.pl"

           If you are absolutely certain that you want your script to load and
           execute a file from the current directory, then use a "./" prefix;
           for example:

               do "./foo_config.pl"

       o   Installing and using CPAN modules

           If you install a CPAN module using an automatic tool like "cpan",
           then this tool will itself set the "PERL_USE_UNSAFE_INC"
           environment variable while building and testing the module, which
           may be sufficient to install a distribution which hasn't been
           updated to be dot-aware.  If you want to install such a module
           manually, then you'll need to replace the traditional invocation:

               perl Makefile.PL && make && make test && make install

           with something like

               (export PERL_USE_UNSAFE_INC=1; \
                perl Makefile.PL && make && make test && make install)

           Note that this only helps build and install an unfixed module.
           It's possible for the tests to pass (since they were run under
           "PERL_USE_UNSAFE_INC=1"), but for the module itself to fail to
           perform correctly in production.  In this case, you may have to
           temporarily modify your script until a fixed version of the module
           is released.  For example:

               use Foo::Bar;
               {
                   local @INC = (@INC, '.');
                   # assuming read_config() needs '.' in @INC
                   $config = Foo::Bar->read_config();
               }

           This is only rarely expected to be necessary.  Again, if doing
           this, assess the resultant risks first.

       o   Module Authors

           If you maintain a CPAN distribution, it may need updating to run in
           a dotless environment.  Although "cpan" and other such tools will
           currently set the "PERL_USE_UNSAFE_INC" during module build, this
           is a temporary workaround for the set of modules which rely on "."
           being in @INC for installation and testing, and this may mask
           deeper issues.  It could result in a module which passes tests and
           installs, but which fails at run time.

           During build, test, and install, it will normally be the case that
           any perl processes will be executing directly within the root
           directory of the untarred distribution, or a known subdirectory of
           that, such as t/.  It may well be that Makefile.PL or t/foo.t will
           attempt to include local modules and configuration files using
           their direct relative filenames, which will now fail.

           However, as described above, automatic tools like cpan will (for
           now) set the "PERL_USE_UNSAFE_INC" environment variable, which
           introduces dot during a build.

           This makes it likely that your existing build and test code will
           work, but this may mask issues with your code which only manifest
           when used after install.  It is prudent to try and run your build
           process with that variable explicitly disabled:

               (export PERL_USE_UNSAFE_INC=0; \
                perl Makefile.PL && make && make test && make install)

           This is more likely to show up any potential problems with your
           module's build process, or even with the module itself.  Fixing
           such issues will ensure both that your module can again be
           installed manually, and that it will still build once the
           "PERL_USE_UNSAFE_INC" crutch goes away.

           When fixing issues in tests due to the removal of dot from @INC,
           reinsertion of dot into @INC should be performed with caution, for
           this too may suppress real errors in your runtime code.  You are
           encouraged wherever possible to apply the aforementioned approaches
           with explicit absolute/relative paths, or to relocate your needed
           files into a subdirectory and insert that subdirectory into @INC
           instead.

           If your runtime code has problems under the dotless @INC, then the
           comments above on how to fix for script authors will mostly apply
           here too.  Bear in mind though that it is considered bad form for a
           module to globally add a dot to @INC, since it introduces both a
           security risk and hides issues of accidentally requiring dot in
           @INC, as explained above.

   Escaped colons and relative paths in PATH
       On Unix systems, Perl treats any relative paths in the "PATH"
       environment variable as tainted when starting a new process.
       Previously, it was allowing a backslash to escape a colon (unlike the
       OS), consequently allowing relative paths to be considered safe if the
       PATH was set to something like "/\:.".  The check has been fixed to
       treat "." as tainted in that example.

   New "-Di" switch is now required for PerlIO debugging output
       This is used for debugging of code within PerlIO to avoid recursive
       calls.  Previously this output would be sent to the file specified by
       the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
       and the "-T" or "-t" switches hadn't been parsed yet.

       If perl performed output at a point where it hadn't yet parsed its
       switches this could result in perl creating or overwriting the file
       named by "PERLIO_DEBUG" even when the "-T" switch had been supplied.

       Perl now requires the "-Di" switch to be present before it will produce
       PerlIO debugging output.  By default this is written to "stderr", but
       can optionally be redirected to a file by setting the "PERLIO_DEBUG"
       environment variable.

       If perl is running setuid or the "-T" switch was supplied,
       "PERLIO_DEBUG" is ignored and the debugging output is sent to "stderr"
       as for any other "-D" switch.

Incompatible Changes
   Unescaped literal "{" characters in regular expression patterns are no
       longer permissible
       You have to now say something like "\{" or "[{]" to specify to match a
       LEFT CURLY BRACKET; otherwise, it is a fatal pattern compilation error.
       This change will allow future extensions to the language.

       These have been deprecated since v5.16, with a deprecation message
       raised for some uses starting in v5.22.  Unfortunately, the code added
       to raise the message was buggy and failed to warn in some cases where
       it should have.  Therefore, enforcement of this ban for these cases is
       deferred until Perl 5.30, but the code has been fixed to raise a
       default-on deprecation message for them in the meantime.

       Some uses of literal "{" occur in contexts where we do not foresee the
       meaning ever being anything but the literal, such as the very first
       character in the pattern, or after a "|" meaning alternation.  Thus

        qr/{fee|{fie/

       matches either of the strings "{fee" or "{fie".  To avoid forcing
       unnecessary code changes, these uses do not need to be escaped, and no
       warning is raised about them, and there are no current plans to change
       this.

       But it is always correct to escape "{", and the simple rule to remember
       is to always do so.

       See Unescaped left brace in regex is illegal here.

   "scalar(%hash)" return signature changed
       The value returned for "scalar(%hash)" will no longer show information
       about the buckets allocated in the hash.  It will simply return the
       count of used keys.  It is thus equivalent to "0+keys(%hash)".

       A form of backward compatibility is provided via
       "Hash::Util::bucket_ratio()" which provides the same behavior as
       "scalar(%hash)" provided in Perl 5.24 and earlier.

   "keys" returned from an lvalue subroutine
       "keys" returned from an lvalue subroutine can no longer be assigned to
       in list context.

           sub foo : lvalue { keys(%INC) }
           (foo) = 3; # death
           sub bar : lvalue { keys(@_) }
           (bar) = 3; # also an error

       This makes the lvalue sub case consistent with "(keys %hash) = ..." and
       "(keys @_) = ...", which are also errors.  [perl #128187]
       <https://rt.perl.org/Public/Bug/Display.html?id=128187>

   The "${^ENCODING}" facility has been removed
       The special behaviour associated with assigning a value to this
       variable has been removed.  As a consequence, the encoding pragma's
       default mode is no longer supported.  If you still need to write your
       source code in encodings other than UTF-8, use a source filter such as
       Filter::Encoding on CPAN or encoding's "Filter" option.

   "POSIX::tmpnam()" has been removed
       The fundamentally unsafe "tmpnam()" interface was deprecated in Perl
       5.22 and has now been removed.  In its place, you can use, for example,
       the File::Temp interfaces.

   require ::Foo::Bar is now illegal.
       Formerly, "require ::Foo::Bar" would try to read /Foo/Bar.pm.  Now any
       bareword require which starts with a double colon dies instead.

   Literal control character variable names are no longer permissible
       A variable name may no longer contain a literal control character under
       any circumstances.  These previously were allowed in single-character
       names on ASCII platforms, but have been deprecated there since Perl
       5.20.  This affects things like "$\cT", where \cT is a literal control
       (such as a "NAK" or "NEGATIVE ACKNOWLEDGE" character) in the source
       code.

   "NBSP" is no longer permissible in "\N{...}"
       The name of a character may no longer contain non-breaking spaces.  It
       has been deprecated to do so since Perl 5.22.

Deprecations
   String delimiters that aren't stand-alone graphemes are now deprecated
       For Perl to eventually allow string delimiters to be Unicode grapheme
       clusters (which look like a single character, but may be a sequence of
       several ones), we have to stop allowing a single character delimiter
       that isn't a grapheme by itself.  These are unlikely to exist in actual
       code, as they would typically display as attached to the character in
       front of them.

   "\cX" that maps to a printable is no longer deprecated
       This means we have no plans to remove this feature.  It still raises a
       warning, but only if syntax warnings are enabled.  The feature was
       originally intended to be a way to express non-printable characters
       that don't have a mnemonic ("\t" and "\n" are mnemonics for two non-
       printable characters, but most non-printables don't have a mnemonic.)
       But the feature can be used to specify a few printable characters,
       though those are more clearly expressed as the printable itself.  See
       <http://www.nntp.perl.org/group/perl.perl5.porters/2017/02/msg242944.html>.

Performance Enhancements
       o   A hash in boolean context is now sometimes faster, e.g.

               if (!%h) { ... }

           This was already special-cased, but some cases were missed (such as
           "grep %$_, @AoH"), and even the ones which weren't have been
           improved.

       o   New Faster Hash Function on 64 bit builds

           We use a different hash function for short and long keys.  This
           should improve performance and security, especially for long keys.

       o   readline is faster

           Reading from a file line-by-line with "readline()" or "<>" should
           now typically be faster due to a better implementation of the code
           that searches for the next newline character.

       o   Assigning one reference to another, e.g. "$ref1 = $ref2" has been
           optimized in some cases.

       o   Remove some exceptions to creating Copy-on-Write strings. The
           string buffer growth algorithm has been slightly altered so that
           you're less likely to encounter a string which can't be COWed.

       o   Better optimise array and hash assignment: where an array or hash
           appears in the LHS of a list assignment, such as "(..., @a) =
           (...);", it's likely to be considerably faster, especially if it
           involves emptying the array/hash. For example, this code runs about
           a third faster compared to Perl 5.24.0:

               my @a;
               for my $i (1..10_000_000) {
                   @a = (1,2,3);
                   @a = ();
               }

       o   Converting a single-digit string to a number is now substantially
           faster.

       o   The "split" builtin is now slightly faster in many cases: in
           particular for the two specially-handled forms

               my    @a = split ...;
               local @a = split ...;

       o   The rather slow implementation for the experimental subroutine
           signatures feature has been made much faster; it is now comparable
           in speed with the traditional "my ($a, $b, @c) = @_".

       o   Bareword constant strings are now permitted to take part in
           constant folding.  They were originally exempted from constant
           folding in August 1999, during the development of Perl 5.6, to
           ensure that "use strict "subs"" would still apply to bareword
           constants.  That has now been accomplished a different way, so
           barewords, like other constants, now gain the performance benefits
           of constant folding.

           This also means that void-context warnings on constant expressions
           of barewords now report the folded constant operand, rather than
           the operation; this matches the behaviour for non-bareword
           constants.

Modules and Pragmata
   Updated Modules and Pragmata
       o   IO::Compress has been upgraded from version 2.069 to 2.074.

       o   Archive::Tar has been upgraded from version 2.04 to 2.24.

       o   arybase has been upgraded from version 0.11 to 0.12.

       o   attributes has been upgraded from version 0.27 to 0.29.

           The deprecation message for the ":unique" and ":locked" attributes
           now mention that they will disappear in Perl 5.28.

       o   B has been upgraded from version 1.62 to 1.68.

       o   B::Concise has been upgraded from version 0.996 to 0.999.

           Its output is now more descriptive for "op_private" flags.

       o   B::Debug has been upgraded from version 1.23 to 1.24.

       o   B::Deparse has been upgraded from version 1.37 to 1.40.

       o   B::Xref has been upgraded from version 1.05 to 1.06.

           It now uses 3-arg "open()" instead of 2-arg "open()".  [perl
           #130122] <https://rt.perl.org/Public/Bug/Display.html?id=130122>

       o   base has been upgraded from version 2.23 to 2.25.

       o   bignum has been upgraded from version 0.42 to 0.47.

       o   Carp has been upgraded from version 1.40 to 1.42.

       o   charnames has been upgraded from version 1.43 to 1.44.

       o   Compress::Raw::Bzip2 has been upgraded from version 2.069 to 2.074.

       o   Compress::Raw::Zlib has been upgraded from version 2.069 to 2.074.

       o   Config::Perl::V has been upgraded from version 0.25 to 0.28.

       o   CPAN has been upgraded from version 2.11 to 2.18.

       o   CPAN::Meta has been upgraded from version 2.150005 to 2.150010.

       o   Data::Dumper has been upgraded from version 2.160 to 2.167.

           The XS implementation now supports Deparse.

       o   DB_File has been upgraded from version 1.835 to 1.840.

       o   Devel::Peek has been upgraded from version 1.23 to 1.26.

       o   Devel::PPPort has been upgraded from version 3.32 to 3.35.

       o   Devel::SelfStubber has been upgraded from version 1.05 to 1.06.

           It now uses 3-arg "open()" instead of 2-arg "open()".  [perl
           #130122] <https://rt.perl.org/Public/Bug/Display.html?id=130122>

       o   diagnostics has been upgraded from version 1.34 to 1.36.

           It now uses 3-arg "open()" instead of 2-arg "open()".  [perl
           #130122] <https://rt.perl.org/Public/Bug/Display.html?id=130122>

       o   Digest has been upgraded from version 1.17 to 1.17_01.

       o   Digest::MD5 has been upgraded from version 2.54 to 2.55.

       o   Digest::SHA has been upgraded from version 5.95 to 5.96.

       o   DynaLoader has been upgraded from version 1.38 to 1.42.

       o   Encode has been upgraded from version 2.80 to 2.88.

       o   encoding has been upgraded from version 2.17 to 2.19.

           This module's default mode is no longer supported.  It now dies
           when imported, unless the "Filter" option is being used.

       o   encoding::warnings has been upgraded from version 0.12 to 0.13.

           This module is no longer supported.  It emits a warning to that
           effect and then does nothing.

       o   Errno has been upgraded from version 1.25 to 1.28.

           It now documents that using "%!" automatically loads Errno for you.

           It now uses 3-arg "open()" instead of 2-arg "open()".  [perl
           #130122] <https://rt.perl.org/Public/Bug/Display.html?id=130122>

       o   ExtUtils::Embed has been upgraded from version 1.33 to 1.34.

           It now uses 3-arg "open()" instead of 2-arg "open()".  [perl
           #130122] <https://rt.perl.org/Public/Bug/Display.html?id=130122>

       o   ExtUtils::MakeMaker has been upgraded from version 7.10_01 to 7.24.

       o   ExtUtils::Miniperl has been upgraded from version 1.05 to 1.06.

       o   ExtUtils::ParseXS has been upgraded from version 3.31 to 3.34.

       o   ExtUtils::Typemaps has been upgraded from version 3.31 to 3.34.

       o   feature has been upgraded from version 1.42 to 1.47.

       o   File::Copy has been upgraded from version 2.31 to 2.32.

       o   File::Fetch has been upgraded from version 0.48 to 0.52.

       o   File::Glob has been upgraded from version 1.26 to 1.28.

           It now Issues a deprecation message for "File::Glob::glob()".

       o   File::Spec has been upgraded from version 3.63 to 3.67.

       o   FileHandle has been upgraded from version 2.02 to 2.03.

       o   Filter::Simple has been upgraded from version 0.92 to 0.93.

           It no longer treats "no MyFilter" immediately following "use
           MyFilter" as end-of-file.  [perl #107726]
           <https://rt.perl.org/Public/Bug/Display.html?id=107726>

       o   Getopt::Long has been upgraded from version 2.48 to 2.49.

       o   Getopt::Std has been upgraded from version 1.11 to 1.12.

       o   Hash::Util has been upgraded from version 0.19 to 0.22.

       o   HTTP::Tiny has been upgraded from version 0.056 to 0.070.

           Internal 599-series errors now include the redirect history.

       o   I18N::LangTags has been upgraded from version 0.40 to 0.42.

           It now uses 3-arg "open()" instead of 2-arg "open()".  [perl
           #130122] <https://rt.perl.org/Public/Bug/Display.html?id=130122>

       o   IO has been upgraded from version 1.36 to 1.38.

       o   IO::Socket::IP has been upgraded from version 0.37 to 0.38.

       o   IPC::Cmd has been upgraded from version 0.92 to 0.96.

       o   IPC::SysV has been upgraded from version 2.06_01 to 2.07.

       o   JSON::PP has been upgraded from version 2.27300 to 2.27400_02.

       o   lib has been upgraded from version 0.63 to 0.64.

           It now uses 3-arg "open()" instead of 2-arg "open()".  [perl
           #130122] <https://rt.perl.org/Public/Bug/Display.html?id=130122>

       o   List::Util has been upgraded from version 1.42_02 to 1.46_02.

       o   Locale::Codes has been upgraded from version 3.37 to 3.42.

       o   Locale::Maketext has been upgraded from version 1.26 to 1.28.

       o   Locale::Maketext::Simple has been upgraded from version 0.21 to
           0.21_01.

       o   Math::BigInt has been upgraded from version 1.999715 to 1.999806.

       o   Math::BigInt::FastCalc has been upgraded from version 0.40 to
           0.5005.

       o   Math::BigRat has been upgraded from version 0.260802 to 0.2611.

       o   Math::Complex has been upgraded from version 1.59 to 1.5901.

       o   Memoize has been upgraded from version 1.03 to 1.03_01.

       o   Module::CoreList has been upgraded from version 5.20170420 to
           5.20170530.

       o   Module::Load::Conditional has been upgraded from version 0.64 to
           0.68.

       o   Module::Metadata has been upgraded from version 1.000031 to
           1.000033.

       o   mro has been upgraded from version 1.18 to 1.20.

       o   Net::Ping has been upgraded from version 2.43 to 2.55.

           IPv6 addresses and "AF_INET6" sockets are now supported, along with
           several other enhancements.

       o   NEXT has been upgraded from version 0.65 to 0.67.

       o   Opcode has been upgraded from version 1.34 to 1.39.

       o   open has been upgraded from version 1.10 to 1.11.

       o   OS2::Process has been upgraded from version 1.11 to 1.12.

           It now uses 3-arg "open()" instead of 2-arg "open()".  [perl
           #130122] <https://rt.perl.org/Public/Bug/Display.html?id=130122>

       o   overload has been upgraded from version 1.26 to 1.28.

           Its compilation speed has been improved slightly.

       o   parent has been upgraded from version 0.234 to 0.236.

       o   perl5db.pl has been upgraded from version 1.50 to 1.51.

           It now ignores /dev/tty on non-Unix systems.  [perl #113960]
           <https://rt.perl.org/Public/Bug/Display.html?id=113960>

       o   Perl::OSType has been upgraded from version 1.009 to 1.010.

       o   perlfaq has been upgraded from version 5.021010 to 5.021011.

       o   PerlIO has been upgraded from version 1.09 to 1.10.

       o   PerlIO::encoding has been upgraded from version 0.24 to 0.25.

       o   PerlIO::scalar has been upgraded from version 0.24 to 0.26.

       o   Pod::Checker has been upgraded from version 1.60 to 1.73.

       o   Pod::Functions has been upgraded from version 1.10 to 1.11.

       o   Pod::Html has been upgraded from version 1.22 to 1.2202.

       o   Pod::Perldoc has been upgraded from version 3.25_02 to 3.28.

       o   Pod::Simple has been upgraded from version 3.32 to 3.35.

       o   Pod::Usage has been upgraded from version 1.68 to 1.69.

       o   POSIX has been upgraded from version 1.65 to 1.76.

           This remedies several defects in making its symbols exportable.
           [perl #127821]
           <https://rt.perl.org/Public/Bug/Display.html?id=127821>

           The "POSIX::tmpnam()" interface has been removed, see
           "POSIX::tmpnam() has been removed".

           The following deprecated functions have been removed:

               POSIX::isalnum
               POSIX::isalpha
               POSIX::iscntrl
               POSIX::isdigit
               POSIX::isgraph
               POSIX::islower
               POSIX::isprint
               POSIX::ispunct
               POSIX::isspace
               POSIX::isupper
               POSIX::isxdigit
               POSIX::tolower
               POSIX::toupper

           Trying to import POSIX subs that have no real implementations (like
           "POSIX::atend()") now fails at import time, instead of waiting
           until runtime.

       o   re has been upgraded from version 0.32 to 0.34

           This adds support for the new "/xx" regular expression pattern
           modifier, and a change to the "use re 'strict'" experimental
           feature.  When "re 'strict'" is enabled, a warning now will be
           generated for all unescaped uses of the two characters "}" and "]"
           in regular expression patterns (outside bracketed character
           classes) that are taken literally.  This brings them more in line
           with the ")" character which is always a metacharacter unless
           escaped.  Being a metacharacter only sometimes, depending on an
           action at a distance, can lead to silently having the pattern mean
           something quite different than was intended, which the
           "re 'strict'" mode is intended to minimize.

       o   Safe has been upgraded from version 2.39 to 2.40.

       o   Scalar::Util has been upgraded from version 1.42_02 to 1.46_02.

       o   Storable has been upgraded from version 2.56 to 2.62.

           Fixes [perl #130098]
           <https://rt.perl.org/Public/Bug/Display.html?id=130098>.

       o   Symbol has been upgraded from version 1.07 to 1.08.

       o   Sys::Syslog has been upgraded from version 0.33 to 0.35.

       o   Term::ANSIColor has been upgraded from version 4.04 to 4.06.

       o   Term::ReadLine has been upgraded from version 1.15 to 1.16.

           It now uses 3-arg "open()" instead of 2-arg "open()".  [perl
           #130122] <https://rt.perl.org/Public/Bug/Display.html?id=130122>

       o   Test has been upgraded from version 1.28 to 1.30.

           It now uses 3-arg "open()" instead of 2-arg "open()".  [perl
           #130122] <https://rt.perl.org/Public/Bug/Display.html?id=130122>

       o   Test::Harness has been upgraded from version 3.36 to 3.38.

       o   Test::Simple has been upgraded from version 1.001014 to 1.302073.

       o   Thread::Queue has been upgraded from version 3.09 to 3.12.

       o   Thread::Semaphore has been upgraded from 2.12 to 2.13.

           Added the "down_timed" method.

       o   threads has been upgraded from version 2.07 to 2.15.

       o   threads::shared has been upgraded from version 1.51 to 1.56.

       o   Tie::Hash::NamedCapture has been upgraded from version 0.09 to
           0.10.

       o   Time::HiRes has been upgraded from version 1.9733 to 1.9741.

           It now builds on systems with C++11 compilers (such as G++ 6 and
           Clang++ 3.9).

           Now uses "clockid_t".

       o   Time::Local has been upgraded from version 1.2300 to 1.25.

       o   Unicode::Collate has been upgraded from version 1.14 to 1.19.

       o   Unicode::UCD has been upgraded from version 0.64 to 0.68.

           It now uses 3-arg "open()" instead of 2-arg "open()".  [perl
           #130122] <https://rt.perl.org/Public/Bug/Display.html?id=130122>

       o   version has been upgraded from version 0.9916 to 0.9917.

       o   VMS::DCLsym has been upgraded from version 1.06 to 1.08.

           It now uses 3-arg "open()" instead of 2-arg "open()".  [perl
           #130122] <https://rt.perl.org/Public/Bug/Display.html?id=130122>

       o   warnings has been upgraded from version 1.36 to 1.37.

       o   XS::Typemap has been upgraded from version 0.14 to 0.15.

       o   XSLoader has been upgraded from version 0.21 to 0.27.

           Fixed a security hole in which binary files could be loaded from a
           path outside of @INC.

           It now uses 3-arg "open()" instead of 2-arg "open()".  [perl
           #130122] <https://rt.perl.org/Public/Bug/Display.html?id=130122>

Documentation
   New Documentation
       perldeprecation

       This file documents all upcoming deprecations, and some of the
       deprecations which already have been removed.  The purpose of this
       documentation is two-fold: document what will disappear, and by which
       version, and serve as a guide for people dealing with code which has
       features that no longer work after an upgrade of their perl.

   Changes to Existing Documentation
       We have attempted to update the documentation to reflect the changes
       listed in this document.  If you find any we have missed, send email to
       perlbug@perl.org <mailto:perlbug@perl.org>.

       Additionally, all references to Usenet have been removed, and the
       following selected changes have been made:

       perlfunc

       o   Removed obsolete text about "defined()" on aggregates that should
           have been deleted earlier, when the feature was removed.

       o   Corrected documentation of "eval()", and "evalbytes()".

       o   Clarified documentation of "seek()", "tell()" and "sysseek()"
           emphasizing that positions are in bytes and not characters.  [perl
           #128607] <https://rt.perl.org/Public/Bug/Display.html?id=128607>

       o   Clarified documentation of "sort()" concerning the variables $a and
           $b.

       o   In "split()" noted that certain pattern modifiers are legal, and
           added a caution about its use in Perls before v5.11.

       o   Removed obsolete documentation of "study()", noting that it is now
           a no-op.

       o   Noted that "vec()" doesn't work well when the string contains
           characters whose code points are above 255.

       perlguts

       o   Added advice on formatted printing of operands of "Size_t" and
           "SSize_t"

       perlhack

       o   Clarify what editor tab stop rules to use, and note that we are
           migrating away from using tabs, replacing them with sequences of
           SPACE characters.

       perlhacktips

       o   Give another reason to use "cBOOL" to cast an expression to
           boolean.

       o   Note that the macros "TRUE" and "FALSE" are available to express
           boolean values.

       perlinterp

       o   perlinterp has been expanded to give a more detailed example of how
           to hunt around in the parser for how a given operator is handled.

       perllocale

       o   Some locales aren't compatible with Perl.  Note that these can
           cause core dumps.

       perlmod

       o   Various clarifications have been added.

       perlmodlib

       o   Updated the site mirror list.

       perlobj

       o   Added a section on calling methods using their fully qualified
           names.

       o   Do not discourage manual @ISA.

       perlootut

       o   Mention "Moo" more.

       perlop

       o   Note that white space must be used for quoting operators if the
           delimiter is a word character (i.e., matches "\w").

       o   Clarify that in regular expression patterns delimited by single
           quotes, no variable interpolation is done.

       perlre

       o   The first part was extensively rewritten to incorporate various
           basic points, that in earlier versions were mentioned in sort of an
           appendix on Version 8 regular expressions.

       o   Note that it is common to have the "/x" modifier and forget that
           this means that "#" has to be escaped.

       perlretut

       o   Add introductory material.

       o   Note that a metacharacter occurring in a context where it can't
           mean that, silently loses its meta-ness and matches literally.
           "use re 'strict'" can catch some of these.

       perlunicode

       o   Corrected the text about Unicode BYTE ORDER MARK handling.

       o   Updated the text to correspond with changes in Unicode UTS#18,
           concerning regular expressions, and Perl compatibility with what it
           says.

       perlvar

       o   Document @ISA.  It was documented in other places, but not in
           perlvar.

Diagnostics
   New Diagnostics
       New Errors

       o   A signature parameter must start with '$', '@' or '%'

       o   Bareword in require contains "%s"

       o   Bareword in require maps to empty filename

       o   Bareword in require maps to disallowed filename "%s"

       o   Bareword in require must not start with a double-colon: "%s"

       o   %s: command not found

           (A) You've accidentally run your script through bash or another
           shell instead of Perl.  Check the "#!" line, or manually feed your
           script into Perl yourself.  The "#!" line at the top of your file
           could look like:

             #!/usr/bin/perl

       o   %s: command not found: %s

           (A) You've accidentally run your script through zsh or another
           shell instead of Perl.  Check the "#!" line, or manually feed your
           script into Perl yourself.  The "#!" line at the top of your file
           could look like:

             #!/usr/bin/perl

       o   The experimental declared_refs feature is not enabled

           (F) To declare references to variables, as in "my \%x", you must
           first enable the feature:

               no warnings "experimental::declared_refs";
               use feature "declared_refs";

           See "Declaring a reference to a variable".

       o   Illegal character following sigil in a subroutine signature

       o   Indentation on line %d of here-doc doesn't match delimiter

       o   Infinite recursion via empty pattern.

           Using the empty pattern (which re-executes the last successfully-
           matched pattern) inside a code block in another regex, as in "/(?{
           s!!new! })/", has always previously yielded a segfault.  It now
           produces this error.

       o   Malformed UTF-8 string in "%s"

       o   Multiple slurpy parameters not allowed

       o   '#' not allowed immediately following a sigil in a subroutine
           signature

       o   panic: unknown OA_*: %x

       o   Unescaped left brace in regex is illegal here

           Unescaped left braces are now illegal in some contexts in regular
           expression patterns.  In other contexts, they are still just
           deprecated; they will be illegal in Perl 5.30.

       o   Version control conflict marker

           (F) The parser found a line starting with "<<<<<<<", ">>>>>>>", or
           "=======".  These may be left by a version control system to mark
           conflicts after a failed merge operation.

       New Warnings

       o   Can't determine class of operator %s, assuming "BASEOP"

       o   Declaring references is experimental

           (S experimental::declared_refs) This warning is emitted if you use
           a reference constructor on the right-hand side of "my()",
           "state()", "our()", or "local()".  Simply suppress the warning if
           you want to use the feature, but know that in doing so you are
           taking the risk of using an experimental feature which may change
           or be removed in a future Perl version:

               no warnings "experimental::declared_refs";
               use feature "declared_refs";
               $fooref = my \$foo;

           See "Declaring a reference to a variable".

       o   do "%s" failed, '.' is no longer in @INC

           Since "." is now removed from @INC by default, "do" will now
           trigger a warning recommending to fix the "do" statement.

       o   "File::Glob::glob()" will disappear in perl 5.30. Use
           "File::Glob::bsd_glob()" instead.

       o   Unescaped literal '%c' in regex; marked by <-- HERE in m/%s/

       o   Use of unassigned code point or non-standalone grapheme for a
           delimiter will be a fatal error starting in Perl 5.30

           See "Deprecations"

   Changes to Existing Diagnostics
       o   When a "require" fails, we now do not provide @INC when the
           "require" is for a file instead of a module.

       o   When @INC is not scanned for a "require" call, we no longer display
           @INC to avoid confusion.

       o   Attribute "locked" is deprecated, and will disappear in Perl 5.28

           This existing warning has had the and will disappear text added in
           this release.

       o   Attribute "unique" is deprecated, and will disappear in Perl 5.28

           This existing warning has had the and will disappear text added in
           this release.

       o   Calling POSIX::%s() is deprecated

           This warning has been removed, as the deprecated functions have
           been removed from POSIX.

       o   Constants from lexical variables potentially modified elsewhere are
           deprecated. This will not be allowed in Perl 5.32

           This existing warning has had the this will not be allowed text
           added in this release.

       o   Deprecated use of "my()" in false conditional. This will be a fatal
           error in Perl 5.30

           This existing warning has had the this will be a fatal error text
           added in this release.

       o   "dump()" better written as "CORE::dump()". "dump()" will no longer
           be available in Perl 5.30

           This existing warning has had the no longer be available text added
           in this release.

       o   Experimental %s on scalar is now forbidden

           This message is now followed by more helpful text.  [perl #127976]
           <https://rt.perl.org/Public/Bug/Display.html?id=127976>

       o   Experimental "%s" subs not enabled

           This warning was been removed, as lexical subs are no longer
           experimental.

       o   Having more than one /%c regexp modifier is deprecated

           This deprecation warning has been removed, since "/xx" now has a
           new meaning.

       o   %s() is deprecated on ":utf8" handles. This will be a fatal error
           in Perl 5.30 .

           where "%s" is one of "sysread", "recv", "syswrite", or "send".

           This existing warning has had the this will be a fatal error text
           added in this release.

           This warning is now enabled by default, as all "deprecated"
           category warnings should be.

       o   $* is no longer supported. Its use will be fatal in Perl 5.30

           This existing warning has had the its use will be fatal text added
           in this release.

       o   $# is no longer supported. Its use will be fatal in Perl 5.30

           This existing warning has had the its use will be fatal text added
           in this release.

       o   Malformed UTF-8 character%s

           Details as to the exact problem have been added at the end of this
           message

       o   Missing or undefined argument to %s

           This warning used to warn about "require", even if it was actually
           "do" which being executed. It now gets the operation name right.

       o   NO-BREAK SPACE in a charnames alias definition is deprecated

           This warning has been removed as the behavior is now an error.

       o   Odd name/value argument for subroutine '%s'

           This warning now includes the name of the offending subroutine.

       o   Opening dirhandle %s also as a file. This will be a fatal error in
           Perl 5.28

           This existing warning has had the this will be a fatal error text
           added in this release.

       o   Opening filehandle %s also as a directory. This will be a fatal
           error in Perl 5.28

           This existing warning has had the this will be a fatal error text
           added in this release.

       o   panic: ck_split, type=%u

           panic: pp_split, pm=%p, s=%p

           These panic errors have been removed.

       o   Passing malformed UTF-8 to "%s" is deprecated

           This warning has been changed to the fatal Malformed UTF-8 string
           in "%s"

       o   Setting $/ to a reference to %s as a form of slurp is deprecated,
           treating as undef. This will be fatal in Perl 5.28

           This existing warning has had the this will be fatal text added in
           this release.

       o   "${^ENCODING}" is no longer supported. Its use will be fatal in
           Perl 5.28

           This warning used to be: "Setting "${^ENCODING}" is deprecated".

           The special action of the variable "${^ENCODING}" was formerly used
           to implement the "encoding" pragma. As of Perl 5.26, rather than
           being deprecated, assigning to this variable now has no effect
           except to issue the warning.

       o   Too few arguments for subroutine '%s'

           This warning now includes the name of the offending subroutine.

       o   Too many arguments for subroutine '%s'

           This warning now includes the name of the offending subroutine.

       o   Unescaped left brace in regex is deprecated here (and will be fatal
           in Perl 5.30), passed through in regex; marked by <-- HERE in m/%s/

           This existing warning has had the here (and will be fatal...) text
           added in this release.

       o   Unknown charname '' is deprecated. Its use will be fatal in Perl
           5.28

           This existing warning has had the its use will be fatal text added
           in this release.

       o   Use of bare << to mean <<"" is deprecated. Its use will be fatal in
           Perl 5.28

           This existing warning has had the its use will be fatal text added
           in this release.

       o   Use of code point 0x%s is deprecated; the permissible max is 0x%s.
           This will be fatal in Perl 5.28

           This existing warning has had the this will be fatal text added in
           this release.

       o   Use of comma-less variable list is deprecated. Its use will be
           fatal in Perl 5.28

           This existing warning has had the its use will be fatal text added
           in this release.

       o   Use of inherited "AUTOLOAD" for non-method %s() is deprecated. This
           will be fatal in Perl 5.28

           This existing warning has had the this will be fatal text added in
           this release.

       o   Use of strings with code points over 0xFF as arguments to %s
           operator is deprecated. This will be a fatal error in Perl 5.28

           This existing warning has had the this will be a fatal error text
           added in this release.

Utility Changes
   c2ph and pstruct
       o   These old utilities have long since superceded by h2xs, and are now
           gone from the distribution.

   Porting/pod_lib.pl
       o   Removed spurious executable bit.

       o   Account for the possibility of DOS file endings.

   Porting/sync-with-cpan
       o   Many improvements.

   perf/benchmarks
       o   Tidy file, rename some symbols.

   Porting/checkAUTHORS.pl
       o   Replace obscure character range with "\w".

   t/porting/regen.t
       o   Try to be more helpful when tests fail.

   utils/h2xs.PL
       o   Avoid infinite loop for enums.

   perlbug
       o   Long lines in the message body are now wrapped at 900 characters,
           to stay well within the 1000-character limit imposed by SMTP mail
           transfer agents.  This is particularly likely to be important for
           the list of arguments to Configure, which can readily exceed the
           limit if, for example, it names several non-default installation
           paths.  This change also adds the first unit tests for perlbug.
           [perl #128020]
           <https://rt.perl.org/Public/Bug/Display.html?id=128020>

Configuration and Compilation
       o   "-Ddefault_inc_excludes_dot" has added, and enabled by default.

       o   The "dtrace" build process has further changes [perl #130108]
           <https://rt.perl.org/Public/Bug/Display.html?id=130108>:

           o   If the "-xnolibs" is available, use that so a dtrace perl can
               be built within a FreeBSD jail.

           o   On systems that build a dtrace object file (FreeBSD, Solaris,
               and SystemTap's dtrace emulation), copy the input objects to a
               separate directory and process them there, and use those
               objects in the link, since "dtrace -G" also modifies these
               objects.

           o   Add libelf to the build on FreeBSD 10.x, since dtrace adds
               references to libelf symbols.

           o   Generate a dummy dtrace_main.o if "dtrace -G" fails to build
               it.  A default build on Solaris generates probes from the
               unused inline functions, while they don't on FreeBSD, which
               causes "dtrace -G" to fail.

       o   You can now disable perl's use of the "PERL_HASH_SEED" and
           "PERL_PERTURB_KEYS" environment variables by configuring perl with
           "-Accflags=NO_PERL_HASH_ENV".

       o   You can now disable perl's use of the "PERL_HASH_SEED_DEBUG"
           environment variable by configuring perl with
           "-Accflags=-DNO_PERL_HASH_SEED_DEBUG".

       o   Configure now zeroes out the alignment bytes when calculating the
           bytes for 80-bit "NaN" and "Inf" to make builds more reproducible.
           [perl #130133]
           <https://rt.perl.org/Public/Bug/Display.html?id=130133>

       o   Since v5.18, for testing purposes we have included support for
           building perl with a variety of non-standard, and non-recommended
           hash functions.  Since we do not recommend the use of these
           functions, we have removed them and their corresponding build
           options.  Specifically this includes the following build options:

               PERL_HASH_FUNC_SDBM
               PERL_HASH_FUNC_DJB2
               PERL_HASH_FUNC_SUPERFAST
               PERL_HASH_FUNC_MURMUR3
               PERL_HASH_FUNC_ONE_AT_A_TIME
               PERL_HASH_FUNC_ONE_AT_A_TIME_OLD
               PERL_HASH_FUNC_MURMUR_HASH_64A
               PERL_HASH_FUNC_MURMUR_HASH_64B

       o   Remove "Warning: perl appears in your path"

           This install warning is more or less obsolete, since most platforms
           already will have a /usr/bin/perl or similar provided by the OS.

       o   Reduce verbosity of "make install.man"

           Previously, two progress messages were emitted for each manpage:
           one by installman itself, and one by the function in install_lib.pl
           that it calls to actually install the file.  Disabling the second
           of those in each case saves over 750 lines of unhelpful output.

       o   Cleanup for "clang -Weverything" support.  [perl #129961]
           <https://rt.perl.org/Public/Bug/Display.html?id=129961>

       o   Configure: signbit scan was assuming too much, stop assuming
           negative 0.

       o   Various compiler warnings have been silenced.

       o   Several smaller changes have been made to remove impediments to
           compiling under C++11.

       o   Builds using "USE_PAD_RESET" now work again; this configuration had
           bit-rotted.

       o   A probe for "gai_strerror" was added to Configure that checks if
           the "gai_strerror()" routine is available and can be used to
           translate error codes returned by "getaddrinfo()" into human
           readable strings.

       o   Configure now aborts if both "-Duselongdouble" and "-Dusequadmath"
           are requested.  [perl #126203]
           <https://rt.perl.org/Public/Bug/Display.html?id=126203>

       o   Fixed a bug in which Configure could append "-quadmath" to the
           archname even if it was already present.  [perl #128538]
           <https://rt.perl.org/Public/Bug/Display.html?id=128538>

       o   Clang builds with "-DPERL_GLOBAL_STRUCT" or
           "-DPERL_GLOBAL_STRUCT_PRIVATE" have been fixed (by disabling Thread
           Safety Analysis for these configurations).

       o   make_ext.pl no longer updates a module's pm_to_blib file when no
           files require updates.  This could cause dependencies, perlmain.c
           in particular, to be rebuilt unnecessarily.  [perl #126710]
           <https://rt.perl.org/Public/Bug/Display.html?id=126710>

       o   The output of "perl -V" has been reformatted so that each
           configuration and compile-time option is now listed one per line,
           to improve readability.

       o   Configure now builds "miniperl" and "generate_uudmap" if you invoke
           it with "-Dusecrosscompiler" but not "-Dtargethost=somehost".  This
           means you can supply your target platform "config.sh", generate the
           headers and proceed to build your cross-target perl.  [perl
           #127234] <https://rt.perl.org/Public/Bug/Display.html?id=127234>

       o   Perl built with "-Accflags=-DPERL_TRACE_OPS" now only dumps the
           operator counts when the environment variable "PERL_TRACE_OPS" is
           set to a non-zero integer.  This allows "make test" to pass on such
           a build.

       o   When building with GCC 6 and link-time optimization (the "-flto"
           option to "gcc"), Configure was treating all probed symbols as
           present on the system, regardless of whether they actually exist.
           This has been fixed.  [perl #128131]
           <https://rt.perl.org/Public/Bug/Display.html?id=128131>

       o   The t/test.pl library is used for internal testing of Perl itself,
           and also copied by several CPAN modules.  Some of those modules
           must work on older versions of Perl, so t/test.pl must in turn
           avoid newer Perl features.  Compatibility with Perl 5.8 was
           inadvertently removed some time ago; it has now been restored.
           [perl #128052]
           <https://rt.perl.org/Public/Bug/Display.html?id=128052>

       o   The build process no longer emits an extra blank line before
           building each "simple" extension (those with only *.pm and *.pod
           files).

Testing
       Tests were added and changed to reflect the other additions and changes
       in this release.  Furthermore, these substantive changes were made:

       o   A new test script, comp/parser_run.t, has been added that is like
           comp/parser.t but with test.pl included so that "runperl()" and the
           like are available for use.

       o   Tests for locales were erroneously using locales incompatible with
           Perl.

       o   Some parts of the test suite that try to exhaustively test edge
           cases in the regex implementation have been restricted to running
           for a maximum of five minutes.  On slow systems they could
           otherwise take several hours, without significantly improving our
           understanding of the correctness of the code under test.

       o   A new internal facility allows analysing the time taken by the
           individual tests in Perl's own test suite; see
           Porting/harness-timer-report.pl.

       o   t/re/regexp_nonull.t has been added to test that the regular
           expression engine can handle scalars that do not have a null byte
           just past the end of the string.

       o   A new test script, t/op/decl-refs.t, has been added to test the new
           feature "Declaring a reference to a variable".

       o   A new test script, t/re/keep_tabs.t has been added to contain tests
           where "\t" characters should not be expanded into spaces.

       o   A new test script, t/re/anyof.t, has been added to test that the
           ANYOF nodes generated by bracketed character classes are as
           expected.

       o   There is now more extensive testing of the Unicode-related API
           macros and functions.

       o   Several of the longer running API test files have been split into
           multiple test files so that they can be run in parallel.

       o   t/harness now tries really hard not to run tests which are located
           outside of the Perl source tree.  [perl #124050]
           <https://rt.perl.org/Public/Bug/Display.html?id=124050>

       o   Prevent debugger tests (lib/perl5db.t) from failing due to the
           contents of $ENV{PERLDB_OPTS}.  [perl #130445]
           <https://rt.perl.org/Public/Bug/Display.html?id=130445>

Platform Support
   New Platforms
       NetBSD/VAX
           Perl now compiles under NetBSD on VAX machines.  However, it's not
           possible for that platform to implement floating-point infinities
           and NaNs compatible with most modern systems, which implement the
           IEEE-754 floating point standard.  The hexadecimal floating point
           ("0x...p[+-]n" literals, "printf %a") is not implemented, either.
           The "make test" passes 98% of tests.

           o   Test fixes and minor updates.

           o   Account for lack of "inf", "nan", and "-0.0" support.

   Platform-Specific Notes
       Darwin
           o   Don't treat "-Dprefix=/usr" as special: instead require an
               extra option "-Ddarwin_distribution" to produce the same
               results.

           o   OS X El Capitan doesn't implement the "clock_gettime()" or
               "clock_getres()" APIs; emulate them as necessary.

           o   Deprecated syscall(2) on macOS 10.12.

       EBCDIC
           Several tests have been updated to work (or be skipped) on EBCDIC
           platforms.

       HP-UX
           The Net::Ping UDP test is now skipped on HP-UX.

       Hurd
           The hints for Hurd have been improved, enabling malloc wrap and
           reporting the GNU libc used (previously it was an empty string when
           reported).

       VAX VAX floating point formats are now supported on NetBSD.

       VMS
           o   The path separator for the "PERL5LIB" and "PERLLIB" environment
               entries is now a colon (":") when running under a Unix shell.
               There is no change when running under DCL (it's still "|").

           o   configure.com now recognizes the VSI-branded C compiler and no
               longer recognizes the "DEC"-branded C compiler (as there hasn't
               been such a thing for 15 or more years).

       Windows
           o   Support for compiling perl on Windows using Microsoft Visual
               Studio 2015 (containing Visual C++ 14.0) has been added.

               This version of VC++ includes a completely rewritten C run-time
               library, some of the changes in which mean that work done to
               resolve a socket "close()" bug in perl #120091 and perl #118059
               is not workable in its current state with this version of VC++.
               Therefore, we have effectively reverted that bug fix for VS2015
               onwards on the basis that being able to build with VS2015
               onwards is more important than keeping the bug fix.  We may
               revisit this in the future to attempt to fix the bug again in a
               way that is compatible with VS2015.

               These changes do not affect compilation with GCC or with Visual
               Studio versions up to and including VS2013, i.e., the bug fix
               is retained (unchanged) for those compilers.

               Note that you may experience compatibility problems if you mix
               a perl built with GCC or VS <= VS2013 with XS modules built
               with VS2015, or if you mix a perl built with VS2015 with XS
               modules built with GCC or VS <= VS2013. Some incompatibility
               may arise because of the bug fix that has been reverted for
               VS2015 builds of perl, but there may well be incompatibility
               anyway because of the rewritten CRT in VS2015 (e.g., see
               discussion at <http://stackoverflow.com/questions/30412951>).

           o   It now automatically detects GCC versus Visual C and sets the
               VC version number on Win32.

       Linux
           Drop support for Linux a.out executable format. Linux has used ELF
           for over twenty years.

       OpenBSD 6
           OpenBSD 6 still does not support returning "pid", "gid", or "uid"
           with "SA_SIGINFO".  Make sure to account for it.

       FreeBSD
           t/uni/overload.t: Skip hanging test on FreeBSD.

       DragonFly BSD
           DragonFly BSD now has support for "setproctitle()".  [perl #130068]
           <https://rt.perl.org/Public/Bug/Display.html?id=130068>.

Internal Changes
       o   A new API function "sv_setpv_bufsize()" allows simultaneously
           setting the length and the allocated size of the buffer in an "SV",
           growing the buffer if necessary.

       o   A new API macro "SvPVCLEAR()" sets its "SV" argument to an empty
           string, like Perl-space "$x = ''", but with several optimisations.

       o   Several new macros and functions for dealing with Unicode and
           UTF-8-encoded strings have been added to the API, as well as some
           changes in the functionality of existing functions (see "Unicode
           Support" in perlapi for more details):

           o   New versions of the API macros like "isALPHA_utf8" and
               "toLOWER_utf8" have been added, each with the suffix "_safe",
               like "isSPACE_utf8_safe".  These take an extra parameter,
               giving an upper limit of how far into the string it is safe to
               read.  Using the old versions could cause attempts to read
               beyond the end of the input buffer if the UTF-8 is not well-
               formed, and their use now raises a deprecation warning.
               Details are at "Character classification" in perlapi.

           o   Macros like "isALPHA_utf8" and "toLOWER_utf8" now die if they
               detect that their input UTF-8 is malformed.  A deprecation
               warning had been issued since Perl 5.18.

           o   Several new macros for analysing the validity of utf8
               sequences. These are:

               "UTF8_GOT_ABOVE_31_BIT" "UTF8_GOT_CONTINUATION"
               "UTF8_GOT_EMPTY" "UTF8_GOT_LONG" "UTF8_GOT_NONCHAR"
               "UTF8_GOT_NON_CONTINUATION" "UTF8_GOT_OVERFLOW"
               "UTF8_GOT_SHORT" "UTF8_GOT_SUPER" "UTF8_GOT_SURROGATE"
               "UTF8_IS_INVARIANT" "UTF8_IS_NONCHAR" "UTF8_IS_SUPER"
               "UTF8_IS_SURROGATE" "UVCHR_IS_INVARIANT" "isUTF8_CHAR_flags"
               "isSTRICT_UTF8_CHAR" "isC9_STRICT_UTF8_CHAR"

           o   Functions that are all extensions of the "is_utf8_string_*()"
               functions, that apply various restrictions to the UTF-8
               recognized as valid:

               "is_strict_utf8_string", "is_strict_utf8_string_loc",
               "is_strict_utf8_string_loclen",

               "is_c9strict_utf8_string", "is_c9strict_utf8_string_loc",
               "is_c9strict_utf8_string_loclen",

               "is_utf8_string_flags", "is_utf8_string_loc_flags",
               "is_utf8_string_loclen_flags",

               "is_utf8_fixed_width_buf_flags",
               "is_utf8_fixed_width_buf_loc_flags",
               "is_utf8_fixed_width_buf_loclen_flags".

               "is_utf8_invariant_string".  "is_utf8_valid_partial_char".
               "is_utf8_valid_partial_char_flags".

           o   The functions "utf8n_to_uvchr" and its derivatives have had
               several changes of behaviour.

               Calling them, while passing a string length of 0 is now
               asserted against in DEBUGGING builds, and otherwise, returns
               the Unicode REPLACEMENT CHARACTER.   If you have nothing to
               decode, you shouldn't call the decode function.

               They now return the Unicode REPLACEMENT CHARACTER if called
               with UTF-8 that has the overlong malformation and that
               malformation is allowed by the input parameters.  This
               malformation is where the UTF-8 looks valid syntactically, but
               there is a shorter sequence that yields the same code point.
               This has been forbidden since Unicode version 3.1.

               They now accept an input flag to allow the overflow
               malformation.  This malformation is when the UTF-8 may be
               syntactically valid, but the code point it represents is not
               capable of being represented in the word length on the
               platform.  What "allowed" means, in this case, is that the
               function doesn't return an error, and it advances the parse
               pointer to beyond the UTF-8 in question, but it returns the
               Unicode REPLACEMENT CHARACTER as the value of the code point
               (since the real value is not representable).

               They no longer abandon searching for other malformations when
               the first one is encountered.  A call to one of these functions
               thus can generate multiple diagnostics, instead of just one.

           o   "valid_utf8_to_uvchr()" has been added to the API (although it
               was present in core earlier). Like "utf8_to_uvchr_buf()", but
               assumes that the next character is well-formed.  Use with
               caution.

           o   A new function, "utf8n_to_uvchr_error", has been added for use
               by modules that need to know the details of UTF-8 malformations
               beyond pass/fail.  Previously, the only ways to know why a
               sequence was ill-formed was to capture and parse the generated
               diagnostics or to do your own analysis.

           o   There is now a safer version of utf8_hop(), called
               "utf8_hop_safe()".  Unlike utf8_hop(), utf8_hop_safe() won't
               navigate before the beginning or after the end of the supplied
               buffer.

           o   Two new functions, "utf8_hop_forward()" and "utf8_hop_back()"
               are similar to "utf8_hop_safe()" but are for when you know
               which direction you wish to travel.

           o   Two new macros which return useful utf8 byte sequences:

               "BOM_UTF8"

               "REPLACEMENT_CHARACTER_UTF8"

       o   Perl is now built with the "PERL_OP_PARENT" compiler define enabled
           by default.  To disable it, use the "PERL_NO_OP_PARENT" compiler
           define.  This flag alters how the "op_sibling" field is used in
           "OP" structures, and has been available optionally since perl 5.22.

           See "Internal Changes" in perl5220delta for more details of what
           this build option does.

       o   Three new ops, "OP_ARGELEM", "OP_ARGDEFELEM", and "OP_ARGCHECK"
           have been added.  These are intended principally to implement the
           individual elements of a subroutine signature, plus any overall
           checking required.

       o   The "OP_PUSHRE" op has been eliminated and the "OP_SPLIT" op has
           been changed from class "LISTOP" to "PMOP".

           Formerly the first child of a split would be a "pushre", which
           would have the "split"'s regex attached to it. Now the regex is
           attached directly to the "split" op, and the "pushre" has been
           eliminated.

       o   The "op_class()" API function has been added.  This is like the
           existing "OP_CLASS()" macro, but can more accurately determine what
           struct an op has been allocated as.  For example "OP_CLASS()" might
           return "OA_BASEOP_OR_UNOP" indicating that ops of this type are
           usually allocated as an "OP" or "UNOP"; while "op_class()" will
           return "OPclass_BASEOP" or "OPclass_UNOP" as appropriate.

       o   All parts of the internals now agree that the "sassign" op is a
           "BINOP"; previously it was listed as a "BASEOP" in regen/opcodes,
           which meant that several parts of the internals had to be special-
           cased to accommodate it.  This oddity's original motivation was to
           handle code like "$x ||= 1"; that is now handled in a simpler way.

       o   The output format of the "op_dump()" function (as used by "perl
           -Dx") has changed: it now displays an "ASCII-art" tree structure,
           and shows more low-level details about each op, such as its address
           and class.

       o   The "PADOFFSET" type has changed from being unsigned to signed, and
           several pad-related variables such as "PL_padix" have changed from
           being of type "I32" to type "PADOFFSET".

       o   The "DEBUGGING"-mode output for regex compilation and execution has
           been enhanced.

       o   Several obscure SV flags have been eliminated, sometimes along with
           the macros which manipulate them: "SVpbm_VALID", "SVpbm_TAIL",
           "SvTAIL_on", "SvTAIL_off", "SVrepl_EVAL", "SvEVALED".

       o   An OP "op_private" flag has been eliminated: "OPpRUNTIME". This
           used to often get set on "PMOP" ops, but had become meaningless
           over time.

Selected Bug Fixes
       o   Perl no longer panics when switching into some locales on machines
           with buggy "strxfrm()" implementations in their libc.  [perl
           #121734] <https://rt.perl.org/Public/Bug/Display.html?id=121734>

       o   " $-{$name} " would leak an "AV" on each access if the regular
           expression had no named captures.  The same applies to access to
           any hash tied with Tie::Hash::NamedCapture and "all => 1".  [perl
           #130822] <https://rt.perl.org/Public/Bug/Display.html?id=130822>

       o   Attempting to use the deprecated variable $# as the object in an
           indirect object method call could cause a heap use after free or
           buffer overflow.  [perl #129274]
           <https://rt.perl.org/Public/Bug/Display.html?id=129274>

       o   When checking for an indirect object method call, in some rare
           cases the parser could reallocate the line buffer but then continue
           to use pointers to the old buffer.  [perl #129190]
           <https://rt.perl.org/Public/Bug/Display.html?id=129190>

       o   Supplying a glob as the format argument to "formline" would cause
           an assertion failure.  [perl #130722]
           <https://rt.perl.org/Public/Bug/Display.html?id=130722>

       o   Code like " $value1 =~ qr/.../ ~~ $value2 " would have the match
           converted into a "qr//" operator, leaving extra elements on the
           stack to confuse any surrounding expression.  [perl #130705]
           <https://rt.perl.org/Public/Bug/Display.html?id=130705>

       o   Since v5.24 in some obscure cases, a regex which included code
           blocks from multiple sources (e.g., via embedded via "qr//"
           objects) could end up with the wrong current pad and crash or give
           weird results.  [perl #129881]
           <https://rt.perl.org/Public/Bug/Display.html?id=129881>

       o   Occasionally "local()"s in a code block within a patterns weren't
           being undone when the pattern matching backtracked over the code
           block.  [perl #126697]
           <https://rt.perl.org/Public/Bug/Display.html?id=126697>

       o   Using "substr()" to modify a magic variable could access freed
           memory in some cases.  [perl #129340]
           <https://rt.perl.org/Public/Bug/Display.html?id=129340>

       o   Under "use utf8", the entire source code is now checked for being
           UTF-8 well formed, not just quoted strings as before.  [perl
           #126310] <https://rt.perl.org/Public/Bug/Display.html?id=126310>.

       o   The range operator ".." on strings now handles its arguments
           correctly when in the scope of the "unicode_strings" feature.  The
           previous behaviour was sufficiently unexpected that we believe no
           correct program could have made use of it.

       o   The "split" operator did not ensure enough space was allocated for
           its return value in scalar context.  It could then write a single
           pointer immediately beyond the end of the memory block allocated
           for the stack.  [perl #130262]
           <https://rt.perl.org/Public/Bug/Display.html?id=130262>

       o   Using a large code point with the "W" pack template character with
           the current output position aligned at just the right point could
           cause a write of a single zero byte immediately beyond the end of
           an allocated buffer.  [perl #129149]
           <https://rt.perl.org/Public/Bug/Display.html?id=129149>

       o   Supplying a format's picture argument as part of the format
           argument list where the picture specifies modifying the argument
           could cause an access to the new freed compiled form.at.  [perl
           #129125] <https://rt.perl.org/Public/Bug/Display.html?id=129125>

       o   The sort() operator's built-in numeric comparison function didn't
           handle large integers that weren't exactly representable by a
           double.  This now uses the same code used to implement the "<=>"
           operator.  [perl #130335]
           <https://rt.perl.org/Public/Bug/Display.html?id=130335>

       o   Fix issues with "/(?{ ... <<EOF })/" that broke Method::Signatures.
           [perl #130398]
           <https://rt.perl.org/Public/Bug/Display.html?id=130398>

       o   Fixed an assertion failure with "chop" and "chomp", which could be
           triggered by "chop(@x =~ tr/1/1/)".  [perl #130198]
           <https://rt.perl.org/Public/Bug/Display.html?id=130198>.

       o   Fixed a comment skipping error in patterns under "/x"; it could
           stop skipping a byte early, which could be in the middle of a UTF-8
           character.  [perl #130495]
           <https://rt.perl.org/Public/Bug/Display.html?id=130495>.

       o   perldb now ignores /dev/tty on non-Unix systems.  [perl #113960]
           <https://rt.perl.org/Public/Bug/Display.html?id=113960>;

       o   Fix assertion failure for "{}->$x" when $x isn't defined.  [perl
           #130496] <https://rt.perl.org/Public/Bug/Display.html?id=130496>.

       o   Fix an assertion error which could be triggered when a lookahead
           string in patterns exceeded a minimum length.  [perl #130522]
           <https://rt.perl.org/Public/Bug/Display.html?id=130522>.

       o   Only warn once per literal number about a misplaced "_".  [perl
           #70878] <https://rt.perl.org/Public/Bug/Display.html?id=70878>.

       o   The "tr///" parse code could be looking at uninitialized data after
           a perse error.  [perl #129342]
           <https://rt.perl.org/Public/Bug/Display.html?id=129342>.

       o   In a pattern match, a back-reference ("\1") to an unmatched capture
           could read back beyond the start of the string being matched.
           [perl #129377]
           <https://rt.perl.org/Public/Bug/Display.html?id=129377>.

       o   "use re 'strict'" is supposed to warn if you use a range (such as
           "/(?[ [ X-Y ] ])/") whose start and end digit aren't from the same
           group of 10.  It didn't do that for five groups of mathematical
           digits starting at "U+1D7E".

       o   A sub containing a "forward" declaration with the same name (e.g.,
           "sub c { sub c; }") could sometimes crash or loop infinitely.
           [perl #129090]
           <https://rt.perl.org/Public/Bug/Display.html?id=129090>

       o   A crash in executing a regex with a non-anchored UTF-8 substring
           against a target string that also used UTF-8 has been fixed.  [perl
           #129350] <https://rt.perl.org/Public/Bug/Display.html?id=129350>

       o   Previously, a shebang line like "#!perl -i u" could be erroneously
           interpreted as requesting the "-u" option.  This has been fixed.
           [perl #129336]
           <https://rt.perl.org/Public/Bug/Display.html?id=129336>

       o   The regex engine was previously producing incorrect results in some
           rare situations when backtracking past an alternation that matches
           only one thing; this showed up as capture buffers ($1, $2, etc.)
           erroneously containing data from regex execution paths that weren't
           actually executed for the final match.  [perl #129897]
           <https://rt.perl.org/Public/Bug/Display.html?id=129897>

       o   Certain regexes making use of the experimental "regex_sets" feature
           could trigger an assertion failure.  This has been fixed.  [perl
           #129322] <https://rt.perl.org/Public/Bug/Display.html?id=129322>

       o   Invalid assignments to a reference constructor (e.g., "\eval=time")
           could sometimes crash in addition to giving a syntax error.  [perl
           #125679] <https://rt.perl.org/Public/Bug/Display.html?id=125679>

       o   The parser could sometimes crash if a bareword came after
           "evalbytes".  [perl #129196]
           <https://rt.perl.org/Public/Bug/Display.html?id=129196>

       o   Autoloading via a method call would warn erroneously ("Use of
           inherited AUTOLOAD for non-method") if there was a stub present in
           the package into which the invocant had been blessed.  The warning
           is no longer emitted in such circumstances.  [perl #47047]
           <https://rt.perl.org/Public/Bug/Display.html?id=47047>

       o   The use of "splice" on arrays with non-existent elements could
           cause other operators to crash.  [perl #129164]
           <https://rt.perl.org/Public/Bug/Display.html?id=129164>

       o   A possible buffer overrun when a pattern contains a fixed utf8
           substring.  [perl #129012]
           <https://rt.perl.org/Public/Bug/Display.html?id=129012>

       o   Fixed two possible use-after-free bugs in perl's lexer.  [perl
           #129069] <https://rt.perl.org/Public/Bug/Display.html?id=129069>

       o   Fixed a crash with "s///l" where it thought it was dealing with
           UTF-8 when it wasn't.  [perl #129038]
           <https://rt.perl.org/Public/Bug/Display.html?id=129038>

       o   Fixed a place where the regex parser was not setting the syntax
           error correctly on a syntactically incorrect pattern.  [perl
           #129122] <https://rt.perl.org/Public/Bug/Display.html?id=129122>

       o   The "&." operator (and the "&" operator, when it treats its
           arguments as strings) were failing to append a trailing null byte
           if at least one string was marked as utf8 internally.  Many code
           paths (system calls, regexp compilation) still expect there to be a
           null byte in the string buffer just past the end of the logical
           string.  An assertion failure was the result.  [perl #129287]
           <https://rt.perl.org/Public/Bug/Display.html?id=129287>

       o   Avoid a heap-after-use error in the parser when creating an error
           messge for a syntactically invalid heredoc.  [perl #128988]
           <https://rt.perl.org/Public/Bug/Display.html?id=128988>

       o   Fix a segfault when run with "-DC" options on DEBUGGING builds.
           [perl #129106]
           <https://rt.perl.org/Public/Bug/Display.html?id=129106>

       o   Fixed the parser error handling in subroutine attributes for an
           '":attr(foo"' that does not have an ending '")"'.

       o   Fix the perl lexer to correctly handle a backslash as the last char
           in quoted-string context. This actually fixed two bugs, [perl
           #129064] <https://rt.perl.org/Public/Bug/Display.html?id=129064>
           and [perl #129176]
           <https://rt.perl.org/Public/Bug/Display.html?id=129176>.

       o   In the API function "gv_fetchmethod_pvn_flags", rework separator
           parsing to prevent possible string overrun with an invalid "len"
           argument.  [perl #129267]
           <https://rt.perl.org/Public/Bug/Display.html?id=129267>

       o   Problems with in-place array sorts: code like "@a = sort { ... }
           @a", where the source and destination of the sort are the same
           plain array, are optimised to do less copying around.  Two side-
           effects of this optimisation were that the contents of @a as seen
           by sort routines were partially sorted; and under some
           circumstances accessing @a during the sort could crash the
           interpreter.  Both these issues have been fixed, and Sort functions
           see the original value of @a.  [perl #128340]
           <https://rt.perl.org/Public/Bug/Display.html?id=128340>

       o   Non-ASCII string delimiters are now reported correctly in error
           messages for unterminated strings.  [perl #128701]
           <https://rt.perl.org/Public/Bug/Display.html?id=128701>

       o   "pack("p", ...)" used to emit its warning ("Attempt to pack pointer
           to temporary value") erroneously in some cases, but has been fixed.

       o   @DB::args is now exempt from "used once" warnings.  The warnings
           only occurred under -w, because warnings.pm itself uses @DB::args
           multiple times.

       o   The use of built-in arrays or hash slices in a double-quoted string
           no longer issues a warning ("Possible unintended interpolation...")
           if the variable has not been mentioned before.  This affected code
           like "qq|@DB::args|" and "qq|@SIG{'CHLD', 'HUP'}|".  (The special
           variables "@-" and "@+" were already exempt from the warning.)

       o   "gethostent" and similar functions now perform a null check
           internally, to avoid crashing with the torsocks library.  This was
           a regression from v5.22.  [perl #128740]
           <https://rt.perl.org/Public/Bug/Display.html?id=128740>

       o   "defined *{'!'}", "defined *{'['}", and "defined *{'-'}" no longer
           leak memory if the typeglob in question has never been accessed
           before.

       o   Mentioning the same constant twice in a row (which is a syntax
           error) no longer fails an assertion under debugging builds.  This
           was a regression from v5.20.  [perl #126482]
           <https://rt.perl.org/Public/Bug/Display.html?id=126482>

       o   Many issues relating to "printf "%a"" of hexadecimal floating point
           were fixed.  In addition, the "subnormals" (formerly known as
           "denormals") floating point numbers are now supported both with the
           plain IEEE 754 floating point numbers (64-bit or 128-bit) and the
           x86 80-bit "extended precision".  Note that subnormal hexadecimal
           floating point literals will give a warning about "exponent
           underflow".  [perl #128843]
           <https://rt.perl.org/Public/Bug/Display.html?id=128843> [perl
           #128889] <https://rt.perl.org/Public/Bug/Display.html?id=128889>
           [perl #128890]
           <https://rt.perl.org/Public/Bug/Display.html?id=128890> [perl
           #128893] <https://rt.perl.org/Public/Bug/Display.html?id=128893>
           [perl #128909]
           <https://rt.perl.org/Public/Bug/Display.html?id=128909> [perl
           #128919] <https://rt.perl.org/Public/Bug/Display.html?id=128919>

       o   A regression in v5.24 with "tr/\N{U+...}/foo/" when the code point
           was between 128 and 255 has been fixed.  [perl #128734]
           <https://rt.perl.org/Public/Bug/Display.html?id=128734>.

       o   Use of a string delimiter whose code point is above 2**31 now works
           correctly on platforms that allow this.  Previously, certain
           characters, due to truncation, would be confused with other
           delimiter characters with special meaning (such as "?" in
           "m?...?"), resulting in inconsistent behaviour.  Note that this is
           non-portable, and is based on Perl's extension to UTF-8, and is
           probably not displayable nor enterable by any editor.  [perl
           #128738] <https://rt.perl.org/Public/Bug/Display.html?id=128738>

       o   "@{x" followed by a newline where "x" represents a control or non-
           ASCII character no longer produces a garbled syntax error message
           or a crash.  [perl #128951]
           <https://rt.perl.org/Public/Bug/Display.html?id=128951>

       o   An assertion failure with "%: = 0" has been fixed.  [perl #128238]
           <https://rt.perl.org/Public/Bug/Display.html?id=128238>

       o   In Perl 5.18, the parsing of "$foo::$bar" was accidentally changed,
           such that it would be treated as "$foo."::".$bar".  The previous
           behavior, which was to parse it as "$foo:: . $bar", has been
           restored.  [perl #128478]
           <https://rt.perl.org/Public/Bug/Display.html?id=128478>

       o   Since Perl 5.20, line numbers have been off by one when perl is
           invoked with the -x switch.  This has been fixed.  [perl #128508]
           <https://rt.perl.org/Public/Bug/Display.html?id=128508>

       o   Vivifying a subroutine stub in a deleted stash (e.g., "delete
           $My::{"Foo::"}; \&My::Foo::foo") no longer crashes.  It had begun
           crashing in Perl 5.18.  [perl #128532]
           <https://rt.perl.org/Public/Bug/Display.html?id=128532>

       o   Some obscure cases of subroutines and file handles being freed at
           the same time could result in crashes, but have been fixed.  The
           crash was introduced in Perl 5.22.  [perl #128597]
           <https://rt.perl.org/Public/Bug/Display.html?id=128597>

       o   Code that looks for a variable name associated with an
           uninitialized value could cause an assertion failure in cases where
           magic is involved, such as $ISA[0][0].  This has now been fixed.
           [perl #128253]
           <https://rt.perl.org/Public/Bug/Display.html?id=128253>

       o   A crash caused by code generating the warning "Subroutine
           STASH::NAME redefined" in cases such as "sub P::f{} undef *P::;
           *P::f =sub{};" has been fixed.  In these cases, where the STASH is
           missing, the warning will now appear as "Subroutine NAME
           redefined".  [perl #128257]
           <https://rt.perl.org/Public/Bug/Display.html?id=128257>

       o   Fixed an assertion triggered by some code that handles deprecated
           behavior in formats, e.g., in cases like this:

               format STDOUT =
               @
               0"$x"

           [perl #128255]
           <https://rt.perl.org/Public/Bug/Display.html?id=128255>

       o   A possible divide by zero in string transformation code on Windows
           has been avoided, fixing a crash when collating an empty string.
           [perl #128618]
           <https://rt.perl.org/Public/Bug/Display.html?id=128618>

       o   Some regular expression parsing glitches could lead to assertion
           failures with regular expressions such as "/(?<=/" and "/(?<!/".
           This has now been fixed.  [perl #128170]
           <https://rt.perl.org/Public/Bug/Display.html?id=128170>

       o   " until ($x = 1) { ... } " and " ... until $x = 1 " now properly
           warn when syntax warnings are enabled.  [perl #127333]
           <https://rt.perl.org/Public/Bug/Display.html?id=127333>

       o   socket() now leaves the error code returned by the system in $! on
           failure.  [perl #128316]
           <https://rt.perl.org/Public/Bug/Display.html?id=128316>

       o   Assignment variants of any bitwise ops under the "bitwise" feature
           would crash if the left-hand side was an array or hash.  [perl
           #128204] <https://rt.perl.org/Public/Bug/Display.html?id=128204>

       o   "require" followed by a single colon (as in "foo() ? require : ..."
           is now parsed correctly as "require" with implicit $_, rather than
           "require """.  [perl #128307]
           <https://rt.perl.org/Public/Bug/Display.html?id=128307>

       o   Scalar "keys %hash" can now be assigned to consistently in all
           scalar lvalue contexts.  Previously it worked for some contexts but
           not others.

       o   List assignment to "vec" or "substr" with an array or hash for its
           first argument used to result in crashes or "Can't coerce" error
           messages at run time, unlike scalar assignment, which would give an
           error at compile time.  List assignment now gives a compile-time
           error, too.  [perl #128260]
           <https://rt.perl.org/Public/Bug/Display.html?id=128260>

       o   Expressions containing an "&&" or "||" operator (or their synonyms
           "and" and "or") were being compiled incorrectly in some cases.  If
           the left-hand side consisted of either a negated bareword constant
           or a negated "do {}" block containing a constant expression, and
           the right-hand side consisted of a negated non-foldable expression,
           one of the negations was effectively ignored.  The same was true of
           "if" and "unless" statement modifiers, though with the left-hand
           and right-hand sides swapped.  This long-standing bug has now been
           fixed.  [perl #127952]
           <https://rt.perl.org/Public/Bug/Display.html?id=127952>

       o   "reset" with an argument no longer crashes when encountering stash
           entries other than globs.  [perl #128106]
           <https://rt.perl.org/Public/Bug/Display.html?id=128106>

       o   Assignment of hashes to, and deletion of, typeglobs named *::::::
           no longer causes crashes.  [perl #128086]
           <https://rt.perl.org/Public/Bug/Display.html?id=128086>

       o   Perl wasn't correctly handling true/false values in the LHS of a
           list assign; specifically the truth values returned by boolean
           operators.  This could trigger an assertion failure in something
           like the following:

               for ($x > $y) {
                   ($_, ...) = (...); # here $_ is aliased to a truth value
               }

           This was a regression from v5.24.  [perl #129991]
           <https://rt.perl.org/Public/Bug/Display.html?id=129991>

       o   Assertion failure with user-defined Unicode-like properties.  [perl
           #130010] <https://rt.perl.org/Public/Bug/Display.html?id=130010>

       o   Fix error message for unclosed "\N{" in a regex.  An unclosed "\N{"
           could give the wrong error message: "\N{NAME} must be resolved by
           the lexer".

       o   List assignment in list context where the LHS contained aggregates
           and where there were not enough RHS elements, used to skip scalar
           lvalues.  Previously, "(($a,$b,@c,$d) = (1))" in list context
           returned "($a)"; now it returns "($a,$b,$d)".  "(($a,$b,$c) = (1))"
           is unchanged: it still returns "($a,$b,$c)".  This can be seen in
           the following:

               sub inc { $_++ for @_ }
               inc(($a,$b,@c,$d) = (10))

           Formerly, the values of "($a,$b,$d)" would be left as
           "(11,undef,undef)"; now they are "(11,1,1)".

       o   Code like this: "/(?{ s!!! })/" could trigger infinite recursion on
           the C stack (not the normal perl stack) when the last successful
           pattern in scope is itself.  We avoid the segfault by simply
           forbidding the use of the empty pattern when it would resolve to
           the currently executing pattern.  [perl #129903]
           <https://rt.perl.org/Public/Bug/Display.html?id=129903>

       o   Avoid reading beyond the end of the line buffer in perl's lexer
           when there's a short UTF-8 character at the end.  [perl #128997]
           <https://rt.perl.org/Public/Bug/Display.html?id=128997>

       o   Alternations in regular expressions were sometimes failing to match
           a utf8 string against a utf8 alternate.  [perl #129950]
           <https://rt.perl.org/Public/Bug/Display.html?id=129950>

       o   Make "do "a\0b"" fail silently (and return "undef" and set $!)
           instead of throwing an error.  [perl #129928]
           <https://rt.perl.org/Public/Bug/Display.html?id=129928>

       o   "chdir" with no argument didn't ensure that there was stack space
           available for returning its result.  [perl #129130]
           <https://rt.perl.org/Public/Bug/Display.html?id=129130>

       o   All error messages related to "do" now refer to "do"; some formerly
           claimed to be from "require" instead.

       o   Executing "undef $x" where $x is tied or magical no longer
           incorrectly blames the variable for an uninitialized-value warning
           encountered by the tied/magical code.

       o   Code like "$x = $x . "a"" was incorrectly failing to yield a use of
           uninitialized value warning when $x was a lexical variable with an
           undefined value. That has now been fixed.  [perl #127877]
           <https://rt.perl.org/Public/Bug/Display.html?id=127877>

       o   "undef *_; shift" or "undef *_; pop" inside a subroutine, with no
           argument to "shift" or "pop", began crashing in Perl 5.14, but has
           now been fixed.

       o   "string$scalar->$*" now correctly prefers concatenation overloading
           to string overloading if "$scalar->$*" returns an overloaded
           object, bringing it into consistency with $$scalar.

       o   "/@0{0*->@*/*0" and similar contortions used to crash, but no
           longer do, but merely produce a syntax error.  [perl #128171]
           <https://rt.perl.org/Public/Bug/Display.html?id=128171>

       o   "do" or "require" with an argument which is a reference or typeglob
           which, when stringified, contains a null character, started
           crashing in Perl 5.20, but has now been fixed.  [perl #128182]
           <https://rt.perl.org/Public/Bug/Display.html?id=128182>

       o   Improve the error message for a missing "tie()" package/method.
           This brings the error messages in line with the ones used for
           normal method calls.

       o   Parsing bad POSIX charclasses no longer leaks memory.  [perl
           #128313] <https://rt.perl.org/Public/Bug/Display.html?id=128313>

Known Problems
       o   G++ 6 handles subnormal (denormal) floating point values
           differently than gcc 6 or g++ 5 resulting in "flush-to-zero". The
           end result is that if you specify very small values using the
           hexadecimal floating point format, like "0x1.fffffffffffffp-1022",
           they become zeros.  [perl #131388]
           <https://rt.perl.org/Ticket/Display.html?id=131388>

Errata From Previous Releases
       o   Fixed issues with recursive regexes.  The behavior was fixed in
           Perl 5.24.  [perl #126182]
           <https://rt.perl.org/Public/Bug/Display.html?id=126182>

Obituary
       Jon Portnoy (AVENJ), a prolific Perl author and admired Gentoo
       community member, has passed away on August 10, 2016.  He will be
       remembered and missed by all those who he came in contact with, and
       enriched with his intellect, wit, and spirit.

       It is with great sadness that we also note Kip Hampton's passing.
       Probably best known as the author of the Perl & XML column on XML.com,
       he was a core contributor to AxKit, an XML server platform that became
       an Apache Foundation project.  He was a frequent speaker in the early
       days at OSCON, and most recently at YAPC::NA in Madison.  He was
       frequently on irc.perl.org as ubu, generally in the #axkit-dahut
       community, the group responsible for YAPC::NA Asheville in 2011.

       Kip and his constant contributions to the community will be greatly
       missed.

Acknowledgements
       Perl 5.26.0 represents approximately 13 months of development since
       Perl 5.24.0 and contains approximately 360,000 lines of changes across
       2,600 files from 86 authors.

       Excluding auto-generated files, documentation and release tools, there
       were approximately 230,000 lines of changes to 1,800 .pm, .t, .c and .h
       files.

       Perl continues to flourish into its third decade thanks to a vibrant
       community of users and developers.  The following people are known to
       have contributed the improvements that became Perl 5.26.0:

       Aaron Crane, Abigail, AEvar Arnfjoerd` Bjarmason, Alex Vandiver,
       Andreas Koenig, Andreas Voegele, Andrew Fresh, Andy Lester, Aristotle
       Pagaltzis, Chad Granum, Chase Whitener, Chris 'BinGOs' Williams, Chris
       Lamb, Christian Hansen, Christian Millour, Colin Newell, Craig A.
       Berry, Dagfinn Ilmari Mannsaaker, Dan Collins, Daniel Dragan, Dave
       Cross, Dave Rolsky, David Golden, David H.  Gutteridge, David Mitchell,
       Dominic Hargreaves, Doug Bell, E. Choroba, Ed Avis, Father
       Chrysostomos, Francois Perrad, Hauke D, H.Merijn Brand, Hugo van der
       Sanden, Ivan Pozdeev, James E Keenan, James Raspass, Jarkko Hietaniemi,
       Jerry D. Hedden, Jim Cromie, J. Nick Koston, John Lightsey, Karen
       Etheridge, Karl Williamson, Leon Timmermans, Lukas Mai, Matthew
       Horsfall, Maxwell Carey, Misty De Meo, Neil Bowers, Nicholas Clark,
       Nicolas R., Niko Tyni, Pali, Paul Marquess, Peter Avalos, Petr PisaX,
       Pino Toscano, Rafael Garcia-Suarez, Reini Urban, Renee Baecker, Ricardo
       Signes, Richard Levitte, Rick Delaney, Salvador Fandin~o, Samuel
       Thibault, Sawyer X, Sebastien Aperghis-Tramoni, Sergey Aleynikov,
       Shlomi Fish, Smylers, Stefan Seifert, Steffen Mueller, Stevan Little,
       Steve Hay, Steven Humphrey, Sullivan Beck, Theo Buehler, Thomas Sibley,
       Todd Rinaldo, Tomasz Konojacki, Tony Cook, Unicode Consortium, Yaroslav
       Kuzmin, Yves Orton, Zefram.

       The list above is almost certainly incomplete as it is automatically
       generated from version control history.  In particular, it does not
       include the names of the (very much appreciated) contributors who
       reported issues to the Perl bug tracker.

       Many of the changes included in this version originated in the CPAN
       modules included in Perl's core.  We're grateful to the entire CPAN
       community for helping Perl to flourish.

       For a more complete list of all of Perl's historical contributors,
       please see the AUTHORS file in the Perl source distribution.
2017-06-05 13:41:22 +00:00
taca
e2f7d7ee8e Good by, json.mk. No package use it now. 2017-06-03 03:16:14 +00:00
wiz
b134ae8f52 BOOTSTRAP_SETUPTOOLS is not necessary any longer.
Leave it commented out for now.
2017-06-01 13:31:45 +00:00
jlam
000f312c98 Use public SHLIB_TYPE instead of private _OPSYS_SHLIB_TYPE. 2017-06-01 13:30:24 +00:00
agc
ea66cb30be avoid a compiler warning on linux - make sure libedit is available 2017-05-31 22:35:42 +00:00
taca
255acacda4 Do not always execute ${RUBYGEM}.
Thanks for wiz@ who noted via private e-mail.
2017-05-31 10:27:37 +00:00
taca
1a1f132c5f Remove use of USE_RAKE. 2017-05-30 16:02:25 +00:00
taca
6b581ad2d7 * Move descriptive comments to one place.
* Remove USE_RAKE support since RAKE is always defined and pass to MAKE_ENV.
2017-05-30 16:02:00 +00:00
taca
741a73f5b6 * Add description for RAKE.
* Remove RUBY_VERSION_FULL.
* Remove patchlevel information.
2017-05-30 15:58:16 +00:00
taca
2b1334335e Replace more remaining RUBY_VERSION_FULL to RUBY_VERSION. 2017-05-30 15:54:11 +00:00
taca
c16de20812 * Replace RUBY_VERSION_FULL with RUBY_VERSION since there is no
RUBY_VERSION_FULL contains Ruby's patchlevel.
* Remove ruby18 specific code.
2017-05-30 15:47:51 +00:00
taca
370c87b2d4 Replace RUBY_VERSION_FULL with RUBY_VERSION since there is no
RUBY_VERSION_FULL contains Ruby's patchlevel.
2017-05-30 15:46:21 +00:00
taca
ab2a2d30c8 * Always define RAKE since all ruby2*-base package have it.
* Pass RAKE to MAKE_ENV.
2017-05-30 15:33:49 +00:00
adam
3285bf4381 On macOS, do not generate debugging symbols; they use lots of disk space, and most of them get stripped off during installation. 2017-05-30 14:26:38 +00:00
taca
fbe024feb7 Remove obsolete conditional; now each ruby2*-base has rubygems 2.2.2
and later.
2017-05-30 14:26:08 +00:00
taca
2e6e72ea55 * Drop setting RUBY_VERSIONS_ACCEPTED since it is now default value. 2017-05-30 14:22:40 +00:00
maya
e9763a67cf python36: bump PKGREVISION for socketcan support on netbsd 2017-05-30 14:08:26 +00:00
bouyer
b9e4417ca5 Add support for NetBSD's socketcan implementation.
Tested with the example from
http://www.bencz.com/hacks/2016/07/10/python-and-socketcan/
Needs <netcan/can.h> rev 1.3 or newer.
2017-05-30 14:04:53 +00:00
wiz
01b12b42ce Remove unnecessary chunk. 2017-05-30 13:57:16 +00:00
bouyer
e6ac265631 Add support for NetBSD's socketcan implementation.
Tested with the example from
http://www.bencz.com/hacks/2016/07/10/python-and-socketcan/
Needs <netcan/can.h> rev 1.3 or newer.
2017-05-30 13:36:39 +00:00
he
4549cc4bd4 Fix a build issue observed on NetBSD/macppc, in that alloca() is left
as an unresolved undefined symbol, causing the install to fail due to
PLIST issues.  Change from -std=c99 to -std=gnu99 to work around this
problem, based on hint from joerg@.
Bump PKGREVISION.
2017-05-29 23:06:45 +00:00
alnsn
bfe0ba5e3c Update LuaJIT2 to 2.0.5.
LuaJIT 2.0.5 -- 2017-05-01

     * Add workaround for MSVC 2015 stdio changes.
     * Limit mcode alloc probing, depending on the available pool size.
     * Fix overly restrictive range calculation in mcode allocation.
     * Fix out-of-scope goto handling in parser.
     * Remove internal __mode = "K" and replace with safe check.
     * Add "proto" field to jit.util.funcinfo().
     * Fix GC step size calculation.
     * Initialize uv->immutable for upvalues of loaded chunks.
     * Fix for cdata vs. non-cdata arithmetics/comparisons.
     * Drop leftover regs in 'for' iterator assignment, too.
     * Fix PHI remarking in SINK pass.
     * Don't try to record outermost pcall() return to lower frame.
     * Add guard for obscure aliasing between open upvalues and SSA slots.
     * Remove assumption that lj_math_random_step() doesn't clobber FPRs.
     * Fix handling of non-numeric strings in arithmetic coercions.
     * Fix recording of select(n, ...) with off-trace varargs
     * Fix install for cross-builds.
     * Don't allocate unused 2nd result register in JIT compiler backend.
     * Drop marks from replayed instructions when sinking.
     * Fix unsinking check.
     * Properly handle OOM in trace_save().
     * Limit number of arguments given to io.lines() and fp:lines().
     * Fix narrowing of TOBIT.
     * OSX: Fix build with recent XCode.
     * x86/x64: Don't spill an explicit REF_BASE in the IR.
     * x86/x64: Fix instruction length decoder.
     * x86/x64: Search for exit jumps with instruction length decoder.
     * ARM: Fix BLX encoding for Thumb interworking calls.
     * MIPS: Don't use RID_GP as a scratch register.
     * MIPS: Fix emitted code for U32 to float conversion.
     * MIPS: Backport workaround for compact unwind tables.
     * MIPS: Fix cross-endian jit.bcsave.
     * MIPS: Fix BC_ISNEXT fallback path.
     * MIPS: Fix use of ffgccheck delay slots in interpreter.
     * FFI: Fix FOLD rules for int64_t comparisons.
     * FFI: Fix SPLIT pass for CONV i64.u64.
     * FFI: Fix ipairs() recording.
     * FFI: Don't propagate qualifiers into subtypes of complex.
2017-05-29 21:47:31 +00:00
wiz
dd0a7cb7e5 Recursive bump for lang/vala 2017-05-29 12:20:23 +00:00