Commit graph

326526 commits

Author SHA1 Message Date
fcambus
09a3dab934 doc: Updated net/dbip-country-lite to 2020.10 2020-10-01 08:22:21 +00:00
fcambus
582d09b06e dbip-country-lite: update to 2020-10.
No upstream ChangeLog.
2020-10-01 08:22:10 +00:00
fcambus
e4b531548b doc: Updated net/dbip-city-lite to 2020.10 2020-10-01 08:21:12 +00:00
fcambus
a7cc8c136e dbip-city-lite: update to 2020-10.
No upstream ChangeLog.
2020-10-01 08:21:02 +00:00
fcambus
b948845e1a doc: Updated net/dbip-asn-lite to 2020.10 2020-10-01 08:20:17 +00:00
fcambus
e5b2445571 dbip-asn-lite: update to 2020-10.
No upstream ChangeLog.
2020-10-01 08:20:05 +00:00
pin
598150b9d8 doc: Updated net/phetch to 1.0.6 2020-10-01 08:02:23 +00:00
pin
f9fde8fc80 net/phetch: update to 1.0.6
More "reload" bugfixes.
2020-10-01 08:02:00 +00:00
mcf
fa31e9acb4 zstd: fix library detection with GNU make 4.3
GNU make 4.3 no longer uses \ to escape # found inside function
invocations, so the \ gets passed through to the printf commands,
causing library detection to fail.

lib/Makefile is patched on pkgsrc by copying detection logic from
programs/Makefile, which has since been updated[0] to support make
4.3 using the compatibility trick suggested in the GNU make changelog.

In particular, since we modify programs/Makefile to link the zstd
binary with the libzstd shared library, failure to detect pthread
in lib/Makefile results in a zstd built with ZSTD_MULTITHREAD to
be linked against a libzstd built without it. This causes "Unsupported
parameter" errors when it is used (except with --single-thread).

So, apply the fix for programs/Makefile to lib/Makefile as well.

[0] 06a57cf57e
2020-10-01 07:25:06 +00:00
adam
0de0769356 Updated www/py-httpcore, www/py-httpx, www/py-sanic, devel/py-more-itertools 2020-10-01 06:59:38 +00:00
adam
8d8aefef3f py-more-itertools: updated to 8.5.0
8.5.0

* New itertools
    * :func:`windowed_complete` (thanks to MarcinKonowalczyk)

* Changes to existing itertools:
    * The :func:`is_sorted` implementation was improved (thanks to cool-RR)
    * The :func:`groupby_transform` now accepts a ``reducefunc`` parameter.
    * The :func:`last` implementation was improved (thanks to brianmaissy)

* Other changes
    * Various documentation fixes (thanks to craigrosie, samuelstjean, PiCT0)
    * The tests for :func:`distinct_combinations` were improved (thanks to Minabsapi)
    * Automated tests now run on GitHub Actions. All commits now check:
        * That unit tests pass
        * That the examples in docstrings work
        * That test coverage remains high (using `coverage`)
        * For linting errors (using `flake8`)
        * For consistent style (using `black`)
        * That the type stubs work (using `mypy`)
        * That the docs build correctly (using `sphinx`)
        * That packages build correctly (using `twine`)
2020-10-01 06:59:14 +00:00
adam
cbdd0bbaa1 py-sanic: updated to 20.9.0
Version 20.9.0

Features
* Pass subprotocols in websockets (both sanic server and ASGI)
* Automatically set test_mode flag on app instance
* Add new unified method for updating app values
* Adds WEBSOCKET_PING_TIMEOUT and WEBSOCKET_PING_INTERVAL configuration values
* httpx version dependency updated, it is slated for removal as a dependency in v20.12
* Added auto, text, and json fallback error handlers (in v21.3, the default will change form html to auto)

Bugfixes
* Resolves exception from unread bytes in stream

Deprecations and Removals
* config.from_envar, config.from_pyfile, and config.from_object are deprecated and set to be removed in v21.3

Developer infrastructure
* Update isort calls to be compatible with new API
* Remove version section from setup.cfg
* Adding --strict-markers for pytest

Improved Documentation
* Add explicit ASGI compliance to the README
2020-10-01 06:53:12 +00:00
adam
387c4dd6ff py-httpx: updated to 0.15.4
0.15.4

Added
* Support direct comparisons between `Headers` and dicts or lists of two-tuples. Eg. `assert response.headers == {"Content-Length": 24}`

Fixed
* Fix automatic `.read()` when `Response` instances are created with `content=<str>`


0.15.3

Fixed
* Fixed connection leak in async client due to improper closing of response streams.

0.15.2

Fixed
* Fixed `response.elapsed` property.
* Fixed client authentication interaction with `.stream()`.


0.15.1

Fixed
* ASGITransport now properly applies URL decoding to the `path` component, as-per the ASGI spec.


0.15.0

Added
* Added support for curio. (Pull https://github.com/encode/httpcore/pull/168)
* Added support for event hooks.
* Added support for authentication flows which require either sync or async I/O.
* Added support for monitoring download progress with `response.num_bytes_downloaded`.
* Added `Request(content=...)` for byte content, instead of overloading `Request(data=...)`
* Added support for all URL components as parameter names when using `url.copy_with(...)`.
* Neater split between automatically populated headers on `Request` instances, vs default `client.headers`.
* Unclosed `AsyncClient` instances will now raise warnings if garbage collected.
* Support `Response(content=..., text=..., html=..., json=...)` for creating usable response instances in code.
* Support instantiating requests from the low-level transport API.
* Raise errors on invalid URL types.

Changed
* Cleaned up expected behaviour for URL escaping. `url.path` is now URL escaped.
* Cleaned up expected behaviour for bytes vs str in URL components. `url.userinfo` and `url.query` are not URL escaped, and so return bytes.
* Drop `url.authority` property in favour of `url.netloc`, since "authority" was semantically incorrect.
* Drop `url.full_path` property in favour of `url.raw_path`, for better consistency with other parts of the API.
* No longer use the `chardet` library for auto-detecting charsets, instead defaulting to a simpler approach when no charset is specified.

Fixed
* Swapped ordering of redirects and authentication flow.
* `.netrc` lookups should use host, not host+port.

Removed
* The `URLLib3Transport` class no longer exists. We've published it instead as an example of [a custom transport class](https://gist.github.com/florimondmanca/d56764d78d748eb9f73165da388e546e).
* Drop `request.timer` attribute, which was being used internally to set `response.elapsed`.
* Drop `response.decoder` attribute, which was being used internally.
* `Request.prepare()` is now a private method.
* The `Headers.getlist()` method had previously been deprecated in favour of `Headers.get_list()`. It is now fully removed.
* The `QueryParams.getlist()` method had previously been deprecated in favour of `QueryParams.get_list()`. It is now fully removed.
* The `URL.is_ssl` property had previously been deprecated in favour of `URL.scheme == "https"`. It is now fully removed.
* The `httpx.PoolLimits` class had previously been deprecated in favour of `httpx.Limits`. It is now fully removed.
* The `max_keepalive` setting had previously been deprecated in favour of the more explicit `max_keepalive_connections`. It is now fully removed.
* The verbose `httpx.Timeout(5.0, connect_timeout=60.0)` style had previously been deprecated in favour of `httpx.Timeout(5.0, connect=60.0)`. It is now fully removed.
* Support for instantiating a timeout config missing some defaults, such as `httpx.Timeout(connect=60.0)`, had previously been deprecated in favour of enforcing a more explicit style, such as `httpx.Timeout(5.0, connect=60.0)`. This is now strictly enforced.


0.14.3

Added
* `http.Response()` may now be instantiated without a `request=...` parameter. Useful for some unit testing cases.
* Add `103 Early Hints` and `425 Too Early` status codes.

Fixed
* `DigestAuth` now handles responses that include multiple 'WWW-Authenticate' headers.
* Call into transport `__enter__`/`__exit__` or `__aenter__`/`__aexit__` when client is used in a context manager style.


0.14.2

Added
* Support `client.get(..., auth=None)` to bypass the default authentication on a clients.
* Support `client.auth = ...` property setter.
* Support `httpx.get(..., proxies=...)` on top-level request functions.
* Display instances with nicer import styles. (Eg. <httpx.ReadTimeout ...>)
* Support `cookies=[(key, value)]` list-of-two-tuples style usage.

Fixed
* Ensure that automatically included headers on a request may be modified.
* Allow explicit `Content-Length` header on streaming requests.
* Handle URL quoted usernames and passwords properly.
* Use more consistent default for `HEAD` requests, setting `allow_redirects=True`.
* If a transport error occurs while streaming the response, raise an `httpx` exception, not the underlying `httpcore` exception.
* Include the underlying `httpcore` traceback, when transport exceptions occur.

0.14.1

Added
* The `httpx.URL(...)` class now raises `httpx.InvalidURL` on invalid URLs, rather than exposing the underlying `rfc3986` exception. If a redirect response includes an invalid 'Location' header, then a `RemoteProtocolError` exception is raised, which will be associated with the request that caused it.

Fixed
* Handling multiple `Set-Cookie` headers became broken in the 0.14.0 release, and is now resolved.


0.14.0

The 0.14 release includes a range of improvements to the public API, intended on preparing for our upcoming 1.0 release.

* Our HTTP/2 support is now fully optional. **You now need to use `pip install httpx[http2]` if you want to include the HTTP/2 dependancies.**
* Our HSTS support has now been removed. Rewriting URLs from `http` to `https` if the host is on the HSTS list can be beneficial in avoiding roundtrips to incorrectly formed URLs, but on balance we've decided to remove this feature, on the principle of least surprise. Most programmatic clients do not include HSTS support, and for now we're opting to remove our support for it.
* Our exception hierarchy has been overhauled. Most users will want to stick with their existing `httpx.HTTPError` usage, but we've got a clearer overall structure now. See https://www.python-httpx.org/exceptions/ for more details.

When upgrading you should be aware of the following public API changes. Note that deprecated usages will currently continue to function, but will issue warnings.

* You should now use `httpx.codes` consistently instead of `httpx.StatusCodes`.
* Usage of `httpx.Timeout()` should now always include an explicit default. Eg. `httpx.Timeout(None, pool=5.0)`.
* When using `httpx.Timeout()`, we now have more concisely named keyword arguments. Eg. `read=5.0`, instead of `read_timeout=5.0`.
* Use `httpx.Limits()` instead of `httpx.PoolLimits()`, and `limits=...` instead of `pool_limits=...`.
* The `httpx.Limits(max_keepalive=...)` argument is now deprecated in favour of a more explicit `httpx.Limits(max_keepalive_connections=...)`.
* Keys used with `Client(proxies={...})` should now be in the style of `{"http://": ...}`, rather than `{"http": ...}`.
* The multidict methods `Headers.getlist()` and `QueryParams.getlist()` are deprecated in favour of more consistent `.get_list()` variants.
* The `URL.is_ssl` property is deprecated in favour of `URL.scheme == "https"`.
* The `URL.join(relative_url=...)` method is now `URL.join(url=...)`. This change does not support warnings for the deprecated usage style.

One notable aspect of the 0.14.0 release is that it tightens up the public API for `httpx`, by ensuring that several internal attributes and methods have now become strictly private.

The following previously had nominally public names on the client, but were all undocumented and intended solely for internal usage. They are all now replaced with underscored names, and should not be relied on or accessed.

These changes should not affect users who have been working from the `httpx` documentation.

* `.merge_url()`, `.merge_headers()`, `.merge_cookies()`, `.merge_queryparams()`
* `.build_auth()`, `.build_redirect_request()`
* `.redirect_method()`, `.redirect_url()`, `.redirect_headers()`, `.redirect_stream()`
* `.send_handling_redirects()`, `.send_handling_auth()`, `.send_single_request()`
* `.init_transport()`, `.init_proxy_transport()`
* `.proxies`, `.transport`, `.netrc`, `.get_proxy_map()`

Some areas of API which were already on the deprecation path, and were raising warnings or errors in 0.13.x have now been escalated to being fully removed.

* Drop `ASGIDispatch`, `WSGIDispatch`, which have been replaced by `ASGITransport`, `WSGITransport`.
* Drop `dispatch=...`` on client, which has been replaced by `transport=...``
* Drop `soft_limit`, `hard_limit`, which have been replaced by `max_keepalive` and `max_connections`.
* Drop `Response.stream` and` `Response.raw`, which have been replaced by ``.aiter_bytes` and `.aiter_raw`.
* Drop `proxies=<transport instance>` in favor of `proxies=httpx.Proxy(...)`.

Added
* Added dedicated exception class `httpx.HTTPStatusError` for `.raise_for_status()` exceptions.
* Added `httpx.create_ssl_context()` helper function.
* Support for proxy exlcusions like `proxies={"https://www.example.com": None}`.
* Support `QueryParams(None)` and `client.params = None`.

Changed
* Use `httpx.codes` consistently in favour of `httpx.StatusCodes` which is placed into deprecation.
* Usage of `httpx.Timeout()` should now always include an explicit default. Eg. `httpx.Timeout(None, pool=5.0)`.
* Switch to more concise `httpx.Timeout()` keyword arguments. Eg. `read=5.0`, instead of `read_timeout=5.0`.
* Use `httpx.Limits()` instead of `httpx.PoolLimits()`, and `limits=...` instead of `pool_limits=...`.
* Keys used with `Client(proxies={...})` should now be in the style of `{"http://": ...}`, rather than `{"http": ...}`.
* The multidict methods `Headers.getlist` and `QueryParams.getlist` are deprecated in favour of more consistent `.get_list()` variants.
* `URL.port` becomes `Optional[int]`. Now only returns a port if one is explicitly included in the URL string.
* The `URL(..., allow_relative=[bool])` parameter no longer exists. All URL instances may be relative.
* Drop unnecessary `url.full_path = ...` property setter.
* The `URL.join(relative_url=...)` method is now `URL.join(url=...)`.
* The `URL.is_ssl` property is deprecated in favour of `URL.scheme == "https"`.

Fixed
* Add missing `Response.next()` method.
* Ensure all exception classes are exposed as public API.
* Support multiple items with an identical field name in multipart encodings.
* Skip HSTS preloading on single-label domains.
* Fixes for `Response.iter_lines()`.
* Ignore permission errors when accessing `.netrc` files.
* Allow bare hostnames in `HTTP_PROXY` etc... environment variables.
* Settings `app=...` or `transport=...` bypasses any environment based proxy defaults.
* Fix handling of `.base_url` when a path component is included in the base URL.
2020-10-01 06:51:31 +00:00
adam
fd11e817d7 py-httpcore: updated to 0.11.1
0.11.1

Fixed
- Add await to async semaphore release() coroutine
- Drop incorrect curio classifier


0.11.0

The Transport API with 0.11.0 has a couple of significant changes.

Firstly we've moved changed the request interface in order to allow extensions, which will later enable us to support features
such as trailing headers, HTTP/2 server push, and CONNECT/Upgrade connections.

The interface changes from:

```python
def request(method, url, headers, stream, timeout):
    return (http_version, status_code, reason, headers, stream)
```

To instead including an optional dictionary of extensions on the request and response:

```python
def request(method, url, headers, stream, ext):
    return (status_code, headers, stream, ext)
```

Having an open-ended extensions point will allow us to add later support for various optional features, that wouldn't otherwise be supported without these API changes.

In particular:

* Trailing headers support.
* HTTP/2 Server Push
* sendfile.
* Exposing raw connection on CONNECT, Upgrade, HTTP/2 bi-di streaming.
* Exposing debug information out of the API, including template name, template context.

Currently extensions are limited to:

* request: `timeout` - Optional. Timeout dictionary.
* response: `http_version` - Optional. Include the HTTP version used on the response.
* response: `reason` - Optional. Include the reason phrase used on the response. Only valid with HTTP/1.*.

See https://github.com/encode/httpx/issues/1274#issuecomment-694884553 for the history behind this.

Secondly, the async version of `request` is now namespaced as `arequest`.

This allows concrete transports to support both sync and async implementations on the same class.

Added
- Add curio support.
- Add anyio support, with `backend="anyio"`.

Changed
- Update the Transport API to use 'ext' for optional extensions.
- Update the Transport API to use `.request` and `.arequest` so implementations can support both sync and async.


0.10.2

Added
- Added Unix Domain Socket support.

Fixed
- Always include the port on proxy CONNECT requests.
- Fix `max_keepalive_connections` configuration.
- Fixes behaviour in HTTP/1.1 where server disconnects can be used to signal the end of the response body.

0.10.1
- Include `max_keepalive_connections` on `AsyncHTTPProxy`/`SyncHTTPProxy` classes.


0.10.0

The most notable change in the 0.10.0 release is that HTTP/2 support is now fully optional.

Use either `pip install httpcore` for HTTP/1.1 support only, or `pip install httpcore[http2]` for HTTP/1.1 and HTTP/2 support.

Added
- HTTP/2 support becomes optional.
- Add `local_address=...` support.
- Add `PlainByteStream`, `IteratorByteStream`, `AsyncIteratorByteStream`. The `AsyncByteSteam` and `SyncByteStream` classes are now pure interface classes.
- Add `LocalProtocolError`, `RemoteProtocolError` exceptions.
- Add `UnsupportedProtocol` exception.
- Add `.get_connection_info()` method.
- Add better TRACE logs.

Changed
- `max_keepalive` is deprecated in favour of `max_keepalive_connections`.

Fixed
- Improve handling of server disconnects.
2020-10-01 06:48:37 +00:00
ryoon
ff8f85c9a8 doc: Updated net/knot to 3.0.0 2020-10-01 03:38:19 +00:00
wen
5a7f905f8f Updated www/moodle to 3.9.2 2020-10-01 03:37:23 +00:00
ryoon
27185456ce knot: Update to 3.0.0
Changelog:
Version 3.0.0

Wednesday, September 9, 2020

Features:

      + High-performance networking mode using XDP sockets (requires Linux
        4.18+)
      + Support for Catalog zones including kcatalogprint utility
      + New DNSSEC validation mode
      + New kzonesign utility --- an interface for manual DNSSEC signing
      + New kxdpgun utility --- high-performance DNS over UDP traffic generator
        for Linux
      + DoH support in kdig using GnuTLS and libnghttp2
      + New KSK revoked state (RFC 5011) in manual DNSSEC key management mode
      + Deterministic signing with ECDSA algorithms (requires GnuTLS 3.6.10+)
      + Module synthrecord supports reverse pointer shortening
      + Safe persistent zone data backup and restore

Improvements:

      + Processing depth of CNAME and DNAME chains is limited to 20
      + Non-FQDN is allowed as 'update-owner-name' configuration option value
      + Kdig prints detailed algorithm idendifier for PRIVATEDNS and PRIVATEOID
        in multiline mode #334
      + Queries with QTYPE ANY or RRSIG are always responded with at most one
        random RRSet
      + The statistics module has negligible performance overhead on modern
        CPUs
      + If multithreaded zone signing is enabled, some additional zone
        maintenance steps are newly parallelized
      + ACL can be configured by reference to a remote
      + Better CPU cache locality for higher query processing performance
      + Logging to non-syslog streams contains timestamps with the timezone
      + Keeping initial DNSKEY TTL and zone maximum TTL in KASP database to
        ensure proper rollover timing in case of TTL changes during the
        rollover
      + Responding FORMERR to queries with more OPT records

Bugfixes:

      + Module onlinesign responds NXDOMAIN insted of NOERROR (NODATA) if
        DNSSEC not requested
      + Outgoing multi-message transfer can contain invalid compression
        pointers under specific conditions


Version 2.9.6

Monday, August 31, 2020

Features:

      + New kdig option '+[no]opttext' to print unknown EDNS options as text if
        possible (Thanks to Robert Edmonds)

Improvements:

      + Better error message if no key is ready for submission
      + Improved logging when master is not usable
      + Improved control logging of zone-flush errors if output directory is
        specified
      + More precise system error messages when a zone transfer fails
      + Some documentation improvements (especially Offline KSK)

Bugfixes:

      + In the case of many zones, control operations over all zones take lots
        of memory
      + Misleading error message on keymgr import-bind #683
      + DS push is triggered upon every zone change even though CDS wasn't
        changed
      + Kzonecheck performance penalty with passive keys #688
       CSK->KSK+ZSK scheme rollover can end too early
2020-10-01 03:37:02 +00:00
wen
f6f094e1d4 Update to 3.9.2
Upstream changes:
3.9.2
General fixes and improvements

    MDL-63375 - Workshop rubric display issue in grid view
    MDL-60574 - Atto editor undo/redo (crtl-y/z) can sometimes wipe all content
    MDL-26401 - Byte order mark at the beginning of import groups file fail the process with the confusing error message
    MDL-51709 - Gradebook single view has a hard coded name format in grade view
    MDL-40227 - Numerical question in lesson - decimal fractions problem
    MDL-66665 - Reopened assignment shown as graded by student themselves
    MDL-61215 - Badge and user profile picture using an svg file doesn't display
    MDL-66810 - Allow microphone and camera to be accessed from content iframe
    MDL-69079 - Activity chooser does not display if site contains plugins missing from disk
    MDL-68178 - Email-based self-registration confirmation email is not re-sent
    MDL-67831 - The Message reply box is not fixed
    MDL-66670 - list bullet points are cut off in some browsers
    MDL-69246 - Question manual grading: floating point issues can lead to valid grades being rejected
    MDL-65819 - Contact request email must respect the receiver's language
    MDL-68715 - Condition: "Completion of other courses" is set without the course creator intervention
    MDL-52052 - Import grades with an empty identifier causes bad upload but it doesn't show error message
    MDL-55340 - Export labels from feedback
    MDL-67671 - Backup step 2 show type options missing activity names
    MDL-67440 - \core\task\analytics_cleanup_task extremely slow on Postgres site.
    MDL-68210 - Unable to edit user overrides if assignment is not available to student
    MDL-66900 - "Alternate image" gets removed upon editing course category settings.
    MDL-66755 - After editing a forum post, a user is unsubscribed from the discussion
    MDL-66626 - Assignfeedback_editpdf sending infinite request when page ready is not equal to page number of combined pdf
    MDL-69297 - File-based Assignments shouldn't accept submissions without any files
    MDL-69168 - Recently Accessed Items block uses stock LTI icon even if it has been customized
    MDL-69215 - load_fontawesome_icon_map web service does not respect current theme
    MDL-69414 - 3.9 regression - "Drag and drop onto image" flips in RTL lang.
    MDL-69336 - Collapsing columns in dynamic tables no longer functions
    MDL-55299 - Single and double quotes encoded in HTML characters in downloaded files
    MDL-68618 - Forum idnumber update not working
    MDL-68558 - Admin can get stuck on the Plugin dependencies check failure page
    MDL-68444 - Calendar accessibility followups
    MDL-69401 - Book's chapter title not showing max length limit
    MDL-69358 - The 'backup_cleanup_task' task deletes records related to incompleted adhoc tasks
    MDL-69375 - LTI Names and Roles Provisioning Service generates Link headers with incorrect format
    MDL-66818 - Portfolio "export whole discussion" button should not be visible if the user has inadequate permissions
    MDL-66707 - Forum too eager to mark messages as read (threaded view)
    MDL-69296 - Pressing cancel on a resource activity settings page may result in a file download
    MDL-69241 - Participants page pagination doesn't reset when applying filters
    MDL-69199 - Complete user report incorrectly shows last modified time of quiz attempts, not time submitted
    MDL-69112 - Underscore in folder name breaks assign feedback multi-upload
    MDL-69089 - Content bank allows empty names
    MDL-69069 - Insufficient colour contrast for in-place editable and drag and drop upload status
    MDL-69054 - Edit button for badge backpack not displayed when version is OBv1.0
    MDL-68964 - Swapping theme in chat window causing notice error
    MDL-68889 - Recently accessed courses not functioning on small view ports
    MDL-68731 - Forum digest processing does not mark posts as read
    MDL-68706 - Course Custom field text area cant be emptied
    MDL-42434 - Chat activity needs user help
    MDL-69448 - Course Copy in 3.9 and 3.9.1 not working for teacher with extended permissions
    MDL-69204 - User A can see the privacy and policies + data retention summary link on user B's profile page
    MDL-69645 - Preferences window can be opened on Safe Exam Browser Mac clients during quizzes using manual configuration

Accessibility improvements

    MDL-69394 - Insufficient colour contrast for calendar event colour indicators
    MDL-68344 - File Picker: focus lost on upload
    MDL-69391 - Some dropdown menus have insufficient colour contrast between text and background
    MDL-69389 - Insufficient colour contrast between link text and normal text
    MDL-69387 - Completion checkbox images don't have sufficient colour contrast
    MDL-69214 - Error reading database on Participants page if site:accessallgroups is set to prohibit
    MDL-69115 - Course and category management page accessibility followups
    MDL-69114 - Insufficient colour contrast for .*-info classes
    MDL-69111 - Forum grading panel cannot be used when zoomed to 400%

For developers

    MDL-69068 - Allow behat generators to be pivoted

Security fixes

    MSA-20-0011 Stored XSS via moodlenetprofile parameter in user profile
    MSA-20-0012 Reflected XSS in tag manager
    MSA-20-0013 "Log in as" capability in a course context may lead to some privilege escalation
    MSA-20-0014 Denial of service risk in file picker unzip functionality
    MSA-20-0015 Chapter name in book not always escaped with forceclean enabled

3.9.1
General fixes and improvements

    MDL-60827 - OAuth 2 still expecting email verification after "Require email verification" has been disabled
    MDL-68436 - Atto RecordRTC (record audio/video) plugin only works in the first editor on a page
    MDL-69049 - Moodle 3.9 upgrade fails due to missing column in privacy plugins if standalone GDPR plugins were used
    MDL-69106 - convert_submissions task with asynchronous document conversion cannot be completed by cron
    MDL-69109 - Theme icons are lost after web upgrade in 3.9 or theme change in other versions
    MDL-68992 - Update minimal age of digital consent according to current legislation
    MDL-68215 - Make the Activity results block styling consistent with other blocks
    MDL-69110 - Sorting does not work anymore in non-dynamic tables
    MDL-66899 - Regrading quiz attempts should be logged
    MDL-69077 - The capabilities moodle/question:tag* are not visible in the "Check permissions" page in the activity context
    MDL-69021 - Alert links hard to distinguish
    MDL-69099 - Some scheduled tasks are incorrectly labelled as "Disabled"
    MDL-67294 - Choosing bulk removal of empty submissions causes an error
    MDL-69031 - Missing Moodle app disable features settings for 3.9

Accessibility improvements

    MDL-69008 - Accessibility issues in the pagination bar template

Security improvements

    MDL-69047 - Content bank status message should be hard coded

Security fixes

    MSA-20-0008 Reflected XSS in admin task logs filter
    MSA-20-0009 Course enrolments allowed privilege escalation from teacher role into manager role
    MSA-20-0010 yui_combo should mitigate denial of service risk

3.9
Please visit: https://docs.moodle.org/dev/Moodle_3.9_release_notes#
2020-10-01 03:36:40 +00:00
ryoon
9a6fa39006 doc: Updated lang/mono6 to 6.10.0.104 2020-09-30 19:50:48 +00:00
ryoon
ec768d2548 mono6: Update to 6.10.0.104
Changelog:
Mono 6.10.0 Release Notes

Release date: 19 May 2020

Highlights

    Various bugfixes

In Depth
Runtime
WebAssembly

We continue to work on making our WebAssembly support better. Various sets of issues have been resolved in this release and general performance and feature work is happening as well.
Community improvements for AIX/PASE and Haiku

The ports for these systems received a bunch of improvements from community contributor Calvin Buckley (@NattyNarwhal).
Class Libraries
CoreFX integration

We continued to replace some of our classes with the implementation from CoreFX to improve performance and compatibility with .NET.
Tools
Resolved Issues

    15808 - dladdr shim for gmodule; try to enable crash reporter on AIX
    15894 - Move MonoError from managed wrappers to native wrappers.
    16461 - [interp] Non-recursive interpreter
    16746 - Clean up map.c /map.h
    16785 - Modify run-jenkins.sh to adapt wasm build for the OSX CI lane
    16816 - [wasm][tests] WASM Safari browser tests
    16832 - Replace embedded libgc with Unity fork of recent Boehm (bdwgc)
    16855 - [runtime] Add portable cached array creation functions and replace gcc-specific impl.
    16949 - [netcore] Propagate ALCs through reflection functions
    16954 - [llvm] Use explicit null checks with LLVM.
    16982 - Replace mono_assembly_name_free use with mono_assembly_name_free_internal.
    16992 - [Coop] Unconvert Microsoft.Win32.NativeMethods.
    17116 - [llvm] Use -place-safepoints in JIT mode too
    17119 - Inline TLS access.
    17131 - Update MERP event type to MonoAppCrash
    17160 - Enable more hw intrinsics for AOT
    17162 - Now IsExpired property for FormsAuthenticationTicket compares two dates with same kind (UTC)
    17163 - [WinForms] Fix Recalculate in ScrollableControl
    17173 - [sgen] Optimize LOS for better locality and parallelization.
    17195 - Fixes #17190: SerializationException on ListViewItemCount
    17212 - [offsets-tool] Update the README.
    17214 - [master] Update dependencies from dotnet/arcade
    17219 - [mini] Fix check for FastAllocateString that used old name
    17222 - Fix check in fix_libc_name to trigger only for libc, not libcups or other names …
    17223 - Enable GSS on Linux
    17225 - [Mono.Posix] Add support for memfd_create() and file sealing
    17226 - [interp] Kill more instructions
    17227 - Incorrect constrained virtual call in method using gsharedvt for reference type.
    17228 - Running –enable-msvc-only didn’t find jay.vcxproj.
    17229 - [interp] Small cleanups
    17230 - [netcore] Disable some SafeWaitHandle tests everywhere, not just Linux
    17231 - [man] Update MONO_IOMAP docs as it no longer works with corefx System.IO
    17233 - Revert mono_runtime_set_main_args in 44ff0597b835d0af62f526169dba3b365c9c3411.
    17236 - [sgen] Fix invalid value passed to write barrier
    17237 - [netcore] Implement System.IO.HasOverriddenBeginEndRead(Write) icalls
    17238 - Add drawing type converters to mobile profiles
    17243 - [netcore] Port CoreCLR implementation of Exception.SetCurrentStackTrace
    17249 - [mini] print inserted instruction in verbose logging
    17251 - [mini] trace snippet should restore return value
    17252 - [System.Net.Http] Clean up HttpMessageHandler setup
    17254 - Remove varargs from g_assert and g_assert_not_reachable (save 200+ bytes per frame in wasm interp).
    17255 - [tests] Disable tests that crash on android sdks
    17261 - [sdks] Android runner: properly shutdown runtime for Mono.Debugger.Soft test app
    17262 - [eglib] Add newline for failure check prints
    17263 - Fix g_assert_not_reached message regression.
    17266 - [wasm] Continue loading app even when .pdb files are not found
    17269 - Upgrade MSVC native runtime build to VS2019.
    17270 - Add null check around sslStream when trying to dispose in MonoTlsStream
    17272 - Update Linker. This fixes a Xamarin.Android breakage
    17275 - Bump corefx to get Azure testhost change
    17279 - Generate LLVM IR for OP_XEQUAL that is recognized by LLVM’s vector pattern recognizers.
    17294 - [loader] Fix gnu/lib-names.h define
    17297 - Mirror changes from mono/coreclr
    17298 - [coop] Use bitfields for coop state machine state representation
    17302 - Fix C++ WebAssembly build.
    17305 - Fix msvc build warning, empty source main-core.c.
    17307 - Bumps corefx to mono/corefx@8e3b279
    17312 - Update dotnet sdk version
    17313 - [ci] Use Xcode11.1 for XI/XM Mono SDK builds
    17315 - [loader] Add an explicit define DISABLE_DLLMAP to control dllmap usage
    17318 - [netcore] Avoid suspending threads in Environment.Exit, it can hang process
    17321 - [GTK] Bump bockbuild for GtkViewport autoscrolling patch.
    17322 - [bcl] Update BCL Linked Size
    17326 - [interp] Add constant propagation of integers
    17328 - [wasm][http] WasmHttpMessageHandler StreamingEnabled default to false
    17330 - Fix SafeHandle marshalling in ref/in/out parameters
    17331 - Initial telemetry for netcore builds
    17336 - [bcl] add WriteLine(string) override to CStreamWriter needed due to corefx import
    17338 - [jit] Fix is_reference checks for intrinsics with byref parameters.
    17340 - [wasm] Bump emscripten. Remove generated python cache files.
    17341 - [bcl][jit] implement Interlocked.Exchange in terms of object
    17344 - [wasm] Add a –native-lib option to the packager to allow linking additional native libraries.
    17345 - [cxx][x86] int/ptr casts.
    17346 - [cxx][x86] ifndef DISABLE_JIT around mono_arch_emit_prolog.
    17347 - [cxx][x86][amd64] Remove unused STORE_MEM_IMM.
    17348 - [cxx][netcore] Goto around init.
    17349 - [ci] Improve netcore build telemetry by running nupkg and tests through build.sh
    17350 - Use functions instead of macros for is_in/is_out.
    17351 - [wasm][xunit tests] Disable System.IO.Compression.Tests.BrotliEncoderTests
    17355 - [master] Update dependencies from dotnet/core-setup dotnet/corefx
    17358 - Removing execution of network tests from WatchOs.
    17361 - [netcore] Fix build for Windows with cygwin
    17362 - [interp] Constant folding for integers
    17366 - [netcore] Remove Gader] Unmanaged library refactoring and NativeLibrary implementation
    17370 - [bcl] Remove CompareExchange_T
    17377 - [cxx] Int vs. enum, static for efficiency, cleanup, fix typo.
    17379 - [cxx] [wasm] m2n-gen int/ptr casts.
    17380 - [jit][x86ieldAwaitable struct readonly
    17387 - [netcore] Managed ThreadPool implementation
    17388 - [interp][wasm] Remove more varargs to conserve stack.
    17391 - Remove the Legacy TLS Provider.
    17393 - Cleaning up SslStream, MobileAuthenticatedStrea
    17537 - [merp] Introduce a new ‘dump mode’ that allows different signal behavior when dumping
    17538 - [interp] fix code length for JitInfo
    17551 - [mini] Initial tiered compilation work
    17553 - Mirror changes from mono/corefx,corert
    17554 - [runtime] Make mono_thread_manage external only
    17558 - [cxx] Compile mini-llvm.c as C++ if configure -enable-cxx.
    17559 - [wasm] Propagate exit code from Main in the test runner.
    17565 - Mirror changes from mono/coreclr,corert,corefx
    17566 - [runtime] Unbalanced GC Unsafe transitions before shutdown
    17570 - [cxx][x86] int/ptr casts
    17571 - Mirror changes from mono/coreclr
    17577 - [master] Update dependencies from dotnet/arcade dotnet/core-setup dotnet/corefx
    17579 - Fix #16206: Change HotkeyPrefix default value in TabControlPainter.cs
    17583 - [dim][regression] Explicit interface override
    17589 - [embed] Assert when call mono_runtime_object_init
    17590 - Bump CoreFX to pickup corefx #367 to fix #17133.
    17592 - [eglib] Handle dli.dli_sname being NULL in g_module_address ().
    17595 - [interp] fix signature mismatch between jit<>interp for string constructor
    17596 - [wasm] Fix build problems.
    17600 - [wasm] Print a useful error message instead of a signature mismatch error on missing icalls.
    17602 - Avoid caching of System.dll image and types as they may be unloaded w…
    17607 - Implement GC.GetGCMemoryInfo
    17608 - Fix #12337: Refact selected indexes in TabControl.Remove
    17609 - Mirror changes from mono/coreclr,corefx
    17611 - [runtime] Add a –enable-minimal=threads configure option to disable threading support. Use it on wasm.
    17612 - Remove some unused icalls.
    17615 - [mini] Fix Coverity CID 1455161 & 1455162
    17616 - [netcore] Report errors on Windows CI
    17623 - [interp] Optimize call path
    17625 - [interp] Avoid emitting MINT_SAFEPOINT for every single call
    17628 - [System.Net.Http]: Bring HttpClient from CoreFX on monotouch and xammac.
    17631 - Bump mono/corefx@6e65509
    17636 - [interp] Fix interp logging
    17639 - [wasm] Fix xunit test ninja errors.
    17641 - [interp] Handle remoting field access same as jit
    17642 - [threadpool] cache processor count
    17646 - Mono NetCore Windows only build/test.
    17648 - [llvm] Fix a case where we treated the dreg of a store_membase instruction as a dreg, its actually the base reg.
    17650 - [interp] s/MONO_API_ERROR_INIT/error_init_reuse/g
    17653 - [WinForms] Returns real installed input languages on Windows
    17654 - [interp] Use GetType instrinsic also on net4x
    17660 - [WinForms] Fix #10559 In MaskedTextBox wrong Lines value when Mask se…
    17661 - [netcore] Cleanups.
    17662 - [WinForms] Fix #12249 scroll orientation was not defined in ScrollEventArgs
    17664 - [iOS] Match changes done in xamarin-macios in the SDK runtime.
    17666 - [netcore] Improve default constructor lookup,
    17667 - [jit] Call mono_class_setup_fields () before accessing field->offset. Fixes https://github.com/mono/mono/issues/17665.
    17669 - [WinForms]: Fix #16632 special values (-1 and -2) of ListView Column …
    17670 - [WinForms] Fix TabPage position when enabling MultiLine
    17672 - Allow runtime to be built with C++ on AIX
    17673 - [netcore] Improve Array.CreateInstance
    17676 - [WinForms] Fix #13777 DrawToBitmap() did not draw children controls
    17680 - [mono] Fix ProcessExit handler argument.
    17681 - Remove handles from ves_icall_System_Array_InternalCreate.
    17683 - [interp] use mask instead of bool expression
    17688 - Intrinsify Activator.CreateInstance for value types with no ctor
    17690 - [master] Update dependencies from dotnet/arcade dotnet/core-setup dotnet/corefx
    17691 - Explicit update/init only LLVM BTLS repro on external MSVC build.
    17692 - [jit] Allow Unsafe.As<TFrom, TTo> on gsharedvt types.
    17694 - Bump Corefx
    17695 - Mirror changes from mono/coreclr
    17698 - [wasm] Build the tests with –no-native-strip.
    17701 - [loader] Skip the full pinvoke resolution process for __Internal
    17706 - Fix MSVC intellisense for LLVM sources.
    17708 - Remove handles from ves_icall_System_Array_CanChangePrimitive.
    17711 - Handles reduction – 4 MERP functions.
    17712 - error_init reduction.
    17713 - Remove handles from System.Diagnostics.Debugger.
    17719 - [netcore] Complete Monitor.LockContentionCount implementation
    17723 - [merp] Remove extraneous waitpid invocation
    17727 - [debugger] Assert when async debug a generic method
    17730 - Switch away from Start-Process, Wait-Process in build.ps1.
    17731 - [WinForms][UIA] Add to the PropertyGrid new internal event to track grid items expanded state update
    17732 - [Wasm] Enabled –preload-files without AOT
    17738 - [runtime] Fix locking in mono_get_seq_points ().
    17739 - [aot] Improve the aot mangler a bit, handle bool/char as a primitive type and avoid emitting a System prefix.
    17740 - [profiler] Fix log profiling of native to managed wrappers
    17744 - [sdks] Add xunit to iOS test runner and add results reporting
    17748 - [wasm] Bump emscripten.
    17749 - [LLVM] Change llvm submodule to dotnet-org fork of official LLVM git repo
    17751 - [Mono.Security] Do not decode data beyond detected length in ASN1 parser
    17753 - [netcore] Run individual CoreCLR test suites
    17755 - [WinForms] Fix #16557 DefaultCellStyle was not cloned deeply in DataG…
    17757 - [netcore] Fix RuntimePropertyInfo.GetValue() in FullAOT scenarios
    17758 - Bump corefx to pick up https://github.com/mono/corefx/pull/370
    17761 - Mirror changes from mono/corefx,coreclr,corert
    17772 - Delete some LLVM test cases from make dist
    17773 - [wasm] Change netcore support to use a prebuilt corefx runtime.
    17777 - Mirror changes from mono/corefx,coreclr
    17778 - [llvm] use multiple cores to build llvm if ninja7782 - [interp] Add some missing netcore intrinsics.
    17784 - [interp] Add some inline checks from the JIT.
    17785 - [MacSDK] Bump xamarin-gtk-theme.py to latest revision from private bockbuild
    17789 - [Wasm] Forced filesystem creation
    17795ULL pointer crash in mono_decompose_vtype_opts().
    17803 - Mirror changes from mono/runtime
    17806 - Remove handles/MonoError from Mono.RuntimeGPtrArrayHandle.
    17816 - [Wasm] Update emscripten to 1.39.3
    17827 - [llvm] Add support for LLVM JInt is a generic valuetype.
    18577 - [2019-12] Bump msbuild to track mono-2019-10
    18591 - [2019-12] [runtime] Disable lldb backtrace display on osx, it hangs on attaching in lldb.
    18595 - [2019-12] configure.ac: remove AC_SEARCH_LIBS for libintl
    18611 - [2019-12] [merp] MONO_DEBUG=no-gdb-stacktrace shouldn’t disable MERP
    18620 - [2019-12] [corlib] Split corlib xunit tests even more for iOS
    18682 - [2019-12] [aot] Avoid inflating gparams with byreflike types during generic sharing.
    18705 - Update deprecated query parameter to header
    18723 - [2019-12] [merp] Add an exception type for managed exceptions
    18733 - [2019-12] [NUnitLite] Bump nunitlite submodule.
    18744 - [2019-12] [iOS] Replace removed dsymutil -t switch with -num-threads
    18786 - [2019-12] Allow users to switch to MonoWebRequestHandler on Android via UI
    18792 - [2019-12] Bump msbuild to track mono-2019-10
    18830 - [2019-12] Move offsets-tool into mono/tools
    18833 - [2019-12] Make MonoWebRequestHandler linker friendly
    18839 - [2019-12] [merp] Increase buffer size for state dump
    18862 - [2019-12] Bump msbuild to track mono-2019-10
    18889 - [2019-12] Move TestEnvVarSwitchForInnerHttpHandler to nunit (from xunit)
    18908 - [2019-12] [bcl] Default XmlSerializer stream serialize to UTF8 Encoding
    18911 - Bump bockbuild to bring in Gtk# regression fix
    18921 - [2019-12] [merp] Capture Environment.FailFast message in crash report
    18946 - [2019-12] [sgen] Disable managed allocator when using nursery-canaries
    18956 - [2019-12] Remove TestEnvVarSwitchForInnerHttpHandler test
    18964 - [2019-12] [merp] Produce hashes for unmanaged thread stacks also
    18984 - [2019-12] Added some parenthesis and a cast to control order of operations.
    18986 - [2019-12] Bump msbuild to track mono-2019-10
    19018 - [2019-12][runtime] Improve handling crashing signals
    19050 - [2019-12] [debugger] Enable reading embedded ppdb
    19078 - [2019-12] Bump msbuild to track mono-2019-12
    19119 - [2019-12] [merp] Create a signal (‘source’) breadcrumb for the crash dump process
    19205 - [2019-12] Bump msbuild to track mono-2019-12
    19208 - [2019-12] [corlib] Capture the ExceptionDispatchInfo when rethrowing from TaskContinuation
    19243 - [2019-12] [merp] Add breadcrumb for StackHash
    19368 - [2019-12] [amd64] align application stack pointer in signal handler
    19423 - [2019-12] Force Python 3.x from env in shebang lines
    19428 - [mono-2019-12] Bump corefx to get https://github.com/mono/corefx/pull/396
    19622 - [2019-12] Bump msbuild to track mono-2019-12
    19641 - [2019-12] [System.Runtime.Serialization] Work around specified cast is not valid
    19662 - [2019-12] Bump msbuild to track mono-2019-12
2020-09-30 19:50:14 +00:00
ryoon
c975ecd941 doc: Updated textproc/grep to 3.5 2020-09-30 19:22:41 +00:00
ryoon
e5b01cbbea grep: Update to 3.5
Changelog:
* Noteworthy changes in release 3.5 (2020-09-27) [stable]

** Changes in behavior

  The message that a binary file matches is now sent to standard error
  and the message has been reworded from "Binary file FOO matches" to
  "grep: FOO: binary file matches", to avoid confusion with ordinary
  output or when file names contain spaces and the like, and to be
  more consistent with other diagnostics.  For example, commands
  like 'grep PATTERN FILE | wc' no longer add 1 to the count of
  matching text lines due to the presence of the message.  Like other
  stderr messages, the message is now omitted if the --no-messages
  (-s) option is given.

  Two other stderr messages now use the typical form too.  They are
  now "grep: FOO: warning: recursive directory loop" and "grep: FOO:
  input file is also the output".

  The --files-without-match (-L) option has reverted to its behavior
  in grep 3.1 and earlier.  That is, grep -L again succeeds when a
  line is selected, not when a file is listed.  The behavior in grep
  3.2 through 3.4 was causing compatibility problems.

** Bug fixes

  grep -I no longer issues a spurious "Binary file FOO matches" line.
  [Bug#33552 introduced in grep 2.23]

  In UTF-8 locales, grep -w no longer ignores a multibyte word
  constituent just before what would otherwise be a word match.
  [Bug#43225 introduced in grep 2.28]

  grep -i no longer mishandles ASCII characters that match multibyte
  characters.  For example, 'LC_ALL=tr_TR.utf8 grep -i i' no longer
  dumps core merely because 'i' matches 'İ' (U+0130 LATIN CAPITAL
  LETTER I WITH DOT ABOVE) in Turkish when ignoring case.
  [Bug#43577 introduced partly in grep 2.28 and partly in grep 3.4]

  A performance regression with -E and many patterns has been mostly fixed.
  "Mostly" as there is a performance tradeoff between Bug#22357 and Bug#40634.
  [Bug#40634 introduced in grep 2.28]

  A performance regression with many duplicate patterns has been fixed.
  [Bug#43040 introduced in grep 3.4]

  An N^2 RSS performance regression with many patterns has been fixed
  in common cases (no backref, and no use of -o or --color).
  With only 80,000 lines of /usr/share/dict/linux.words, the following
  would use 100GB of RSS and take 3 minutes. With the fix, it used less
  than 400MB and took less than one second:
    head -80000 /usr/share/dict/linux.words > w; grep -vf w w
  [Bug#43527 introduced in grep 3.4]

** Build-related

  "make dist" builds .tar.gz files again, as they are still used in
  some barebones builds.


* Noteworthy changes in release 3.4 (2020-01-02) [stable]

** New features

  The new --no-ignore-case option causes grep to observe case
  distinctions, overriding any previous -i (--ignore-case) option.

** Bug fixes

  '.' no longer matches some invalid byte sequences in UTF-8 locales.
  [bug introduced in grep 2.7]

  grep -Fw can no longer false match in non-UTF-8 multibyte locales
  For example, this command would erroneously print its input line:
    echo ab | LC_CTYPE=ja_JP.eucjp grep -Fw b
  [Bug#38223 introduced in grep 2.28]

  The exit status of 'grep -L' is no longer incorrect when standard
  output is /dev/null.
  [Bug#37716 introduced in grep 3.2]

  A performance bug has been fixed when grep is given many patterns,
  each with no back-reference.
  [Bug#33249 introduced in grep 2.5]

  A performance bug has been fixed for patterns like '01.2' that
  cause grep to reorder tokens internally.
  [Bug#34951 introduced in grep 3.2]

** Build-related

  The build procedure no longer relies on any already-built src/grep
  that might be absent or broken.  Instead, it uses the system 'grep'
  to bootstrap, and uses src/grep only to test the build.  On Solaris
  /usr/bin/grep is broken, but you can install GNU or XPG4 'grep' from
  the standard Solaris distribution before building GNU Grep yourself.
  [bug introduced in grep 2.8]
2020-09-30 19:22:08 +00:00
ryoon
8816bf107b doc: Remove gcc-9.1, done 2020-09-30 18:43:31 +00:00
leot
eb353da915 TODO: + py-markdown-3.2.2
(Probably textproc/py-markdown needs to be versioned in another PKGPATH because
it still supports Python 2.x.)
2020-09-30 16:28:58 +00:00
jperkin
db7fd22fbd ruby-chef: Incompatible with ruby25. 2020-09-30 16:14:50 +00:00
tsutsui
7186b47bdf doc: Updated emulators/PC6001VX to 3.5.3 2020-09-30 15:51:50 +00:00
tsutsui
906ef54588 PC6001VX: update to 3.5.3.
Upstream changes:

3.5.3 2020/09/26
- Fixed screen flicker when using hardware acceleration.
- Added System Information dialog.
- (Android) better handling of external storage.
- (Android) Targetted at Android SDK 29.

3.5.2 2020/06/15 (released Android version only)
- (Android) Fixed file selection dialog to show files in external storage
  (again).
- (Android) Changed file/folder open operation in file selection dialog
  from double tap to single tap.
2020-09-30 15:51:32 +00:00
otis
1b1b61f20e doc: Updated www/nginx to 1.18.0nb2 2020-09-30 13:56:52 +00:00
otis
7aa066ac73 doc: Updated www/nginx-devel to 1.19.3 2020-09-30 13:56:40 +00:00
otis
0b8040d0d5 www/nginx-devel: Update to 1.19.3
Changes with nginx 1.19.3                                        29 Sep 2020

    *) Feature: the ngx_stream_set_module.

    *) Feature: the "proxy_cookie_flags" directive.

    *) Feature: the "userid_flags" directive.

    *) Bugfix: the "stale-if-error" cache control extension was erroneously
       applied if backend returned a response with status code 500, 502,
       503, 504, 403, 404, or 429.

    *) Bugfix: "[crit] cache file ... has too long header" messages might
       appear in logs if caching was used and the backend returned responses
       with the "Vary" header line.

    *) Workaround: "[crit] SSL_write() failed" messages might appear in logs
       when using OpenSSL 1.1.1.

    *) Bugfix: "SSL_shutdown() failed (SSL: ... bad write retry)" messages
       might appear in logs; the bug had appeared in 1.19.2.

    *) Bugfix: a segmentation fault might occur in a worker process when
       using HTTP/2 if errors with code 400 were redirected to a proxied
       location using the "error_page" directive.

    *) Bugfix: socket leak when using HTTP/2 and subrequests in the njs
       module.
2020-09-30 13:53:51 +00:00
otis
8ba979bf6e www/nginx: Update njs to 0.4.4
Release Date: 29 September 2020

* nginx modules:
  - Bugfix: fixed location merge.
  - Bugfix: fixed r.httpVersion for HTTP/2.

* Core:
  - Feature: added support for numeric separators (ES12).
  - Feature: added remaining methods for %TypedArray%.prototype. The following
    methods were added: every(), filter(), find(), findIndex(), forEach(),
    includes(), indexOf(), lastIndexOf(), map(), reduce(), reduceRight(),
    reverse(), some().
  - Feature: added %TypedArray% remaining methods. The following methods were added: from(), of().
  - Feature: added DataView object.
  - Feature: added Buffer object implementation.
  - Feature: added support for ArrayBuffer in TextDecoder.prototype.decode()
  - Feature: added support for Buffer object in crypto methods.
  - Feature: added support for Buffer object in fs methods.
  - Change: Hash.prototype.digest() and Hmac.prototype.digest() now return a
    Buffer instance instead of a byte string when encoding is not provided.
  - Change: fs.readFile() and friends now return a Buffer instance instead of a
    byte string when encoding is not provided.
  - Bugfix: fixed function prototype property handler while setting.
  - Bugfix: fixed function constructor property handler while setting.
  - Bugfix: fixed String.prototype.indexOf() for byte strings.
  - Bugfix: fixed RegExpBuiltinExec() with a global flag and byte strings.
  - Bugfix: fixed RegExp.prototype[Symbol.replace] the when replacement value is a
    function.
  - Bugfix: fixed TextDecoder.prototype.decode() with non-zero TypedArray offset.
2020-09-30 13:52:26 +00:00
adam
6a2bdd80f7 Updated databases/prometheus, sysutils/node_exporter 2020-09-30 13:14:46 +00:00
adam
041ae56d47 node_exporter: updated to 1.0.1
1.0.1:
[BUGFIX] filesystem_freebsd: Fix label values
[BUGFIX] Update prometheus/procfs to fix log noise
[BUGFIX] Fix build tags for collectors
[BUGFIX] Handle no data from powersupplyclass


1.0.0:

Breaking changes
The netdev collector CLI argument --collector.netdev.ignored-devices was renamed to --collector.netdev.device-blacklist in order to conform with the systemd collector.
The label named state on node_systemd_service_restart_total metrics was changed to name to better describe the metric.
Refactoring of the mdadm collector changes several metrics
node_md_disks_active is removed
node_md_disks now has a state label for "failed", "spare", "active" disks.
node_md_is_active is replaced by node_md_state with a state set of "active", "inactive", "recovering", "resync".
Additional label mountaddr added to NFS device metrics to distinguish mounts from the same URL, but different IP addresses.
Metrics node_cpu_scaling_frequency_min_hrts and node_cpu_scaling_frequency_max_hrts of the cpufreq collector were renamed to node_cpu_scaling_frequency_min_hertz and node_cpu_scaling_frequency_max_hertz.
Collectors that are enabled, but are unable to find data to collect, now return 0 for node_scrape_collector_success.

Changes
[CHANGE] Add --collector.netdev.device-whitelist.
[CHANGE] Ignore iso9600 filesystem on Linux
[CHANGE] Refactor mdadm collector
[CHANGE] Add mountaddr label to NFS metrics.
[CHANGE] Don't count empty collectors as success.
[FEATURE] New flag to disable default collectors
[FEATURE] Add experimental TLS support
[FEATURE] Add collector for Power Supply Class
[FEATURE] Add new schedstat collector
[FEATURE] Add FreeBSD zfs support
[FEATURE] Add uname support for Darwin and OpenBSD
[FEATURE] Add new metric node_cpu_info
[FEATURE] Add new thermal_zone collector
[FEATURE] Add new cooling_device metrics to thermal zone collector
[FEATURE] Add swap usage on darwin
[FEATURE] Add Btrfs collector
[FEATURE] Add RAPL collector
[FEATURE] Add new softnet collector
[FEATURE] Add new udp_queues collector
[FEATURE] Add basic authentication
[ENHANCEMENT] Log pid when there is a problem reading the process stats
[ENHANCEMENT] Collect InfiniBand port state and physical state
[ENHANCEMENT] Include additional XFS runtime statistics.
[ENHANCEMENT] Report non-fatal collection errors in the exporter metric.
[ENHANCEMENT] Expose IPVS firewall mark as a label
[ENHANCEMENT] Add check for systemd version before attempting to query certain metrics.
[ENHANCEMENT] Add a flag to adjust mount timeout
[ENHANCEMENT] Add new counters for flush requests in Linux 5.5
[ENHANCEMENT] Add metrics and tests for UDP receive and send buffer errors
[ENHANCEMENT] The sockstat collector now exposes IPv6 statistics in addition to the existing IPv4 support.
[ENHANCEMENT] Add infiniband info metric
[ENHANCEMENT] Add unix socket support for supervisord collector
[ENHANCEMENT] Implement loadavg on all BSDs without cgo
[ENHANCEMENT] Add model_name and stepping to node_cpu_info metric
[ENHANCEMENT] Add --collector.perf.cpus to allow setting the CPU list for perf stats.
[ENHANCEMENT] Add metrics for IO errors and retires on Darwin.
[ENHANCEMENT] Add perf tracepoint collection flag
[ENHANCEMENT] ZFS: read contents of objset file
[ENHANCEMENT] Linux CPU: Cache CPU metrics to make them monotonically increasing
[BUGFIX] Read /proc/net files with a single read syscall
[BUGFIX] Renamed label state to name on node_systemd_service_restart_total.
[BUGFIX] Fix netdev nil reference on Darwin
[BUGFIX] Strip path.rootfs from mountpoint labels
[BUGFIX] Fix seconds reported by schedstat
[BUGFIX] Fix empty string in path.rootfs
[BUGFIX] Fix typo in cpufreq metric names
[BUGFIX] Read /proc/stat in one syscall
[BUGFIX] Fix OpenBSD cache memory information
[BUGFIX] Refactor textfile collector to avoid looping defer
[BUGFIX] Fix network speed math
[BUGFIX] collector/systemd: use regexp to extract systemd version
[BUGFIX] Fix initialization in perf collector when using multiple CPUs
[BUGFIX] Fix accidentally empty lines in meminfo_linux
2020-09-30 13:14:16 +00:00
adam
66e5611c50 prometheus: updated to 2.21.0
2.21.0

This release is built with Go 1.15, which deprecates X.509 CommonName
in TLS certificates validation.

In the unlikely case that you use the gRPC API v2 (which is limited to TSDB
admin commands), please note that we will remove this experimental API in the
next minor release 2.22.

[CHANGE] Disable HTTP/2 because of concerns with the Go HTTP/2 client.
[CHANGE] PromQL: query_log_file path is now relative to the config file.
[CHANGE] Promtool: Replace the tsdb command line tool by a promtool tsdb subcommand.
[CHANGE] Rules: Label rule_group_iterations metric with group name.
[FEATURE] Eureka SD: New service discovery.
[FEATURE] Hetzner SD: New service discovery.
[FEATURE] Kubernetes SD: Support Kubernetes EndpointSlices.
[FEATURE] Scrape: Add per scrape-config targets limit.
[ENHANCEMENT] Support composite durations in PromQL, config and UI, e.g. 1h30m.
[ENHANCEMENT] DNS SD: Add SRV record target and port meta labels.
[ENHANCEMENT] Docker Swarm SD: Support tasks and service without published ports.
[ENHANCEMENT] PromQL: Reduce the amount of data queried by remote read when a subquery has an offset.
[ENHANCEMENT] Promtool: Add --time option to query instant command.
[ENHANCEMENT] UI: Respect the --web.page-title parameter in the React UI.
[ENHANCEMENT] UI: Add duration, labels, annotations to alerts page in the React UI.
[ENHANCEMENT] UI: Add duration on the React UI rules page, hide annotation and labels if empty.
[BUGFIX] API: Deduplicate series in /api/v1/series.
[BUGFIX] PromQL: Drop metric name in bool comparison between two instant vectors.
[BUGFIX] PromQL: Exit with an error when time parameters can't be parsed.
[BUGFIX] Remote read: Re-add accidentally removed tracing for remote-read requests.
[BUGFIX] Rules: Detect extra fields in rule files.
[BUGFIX] Rules: Disallow overwriting the metric name in the labels section of recording rules.
[BUGFIX] Rules: Keep evaluation timestamp across reloads.
[BUGFIX] Scrape: Do not stop scrapes in progress during reload.
[BUGFIX] TSDB: Fix chunks.HeadReadWriter: maxt of the files are not set error.
[BUGFIX] TSDB: Delete blocks atomically to prevent corruption when there is a panic/crash during deletion.
[BUGFIX] Triton SD: Fix a panic when triton_sd_config is nil.
[BUGFIX] UI: Fix react UI bug with series going on and off.
[BUGFIX] UI: Fix styling bug for target labels with special names in React UI.
[BUGFIX] Web: Stop CMUX and GRPC servers even with stale connections, preventing the server to stop on SIGTERM.
2020-09-30 13:12:20 +00:00
otis
f0b68b3991 doc: Updated net/powerdns-recursor to 4.3.4 2020-09-30 11:53:19 +00:00
otis
8b88dcfed2 net/powerdns-recursor: Update to 4.3.4
Changelog for 4.3.4:
Released: 8th of September 2020
* Improvements:
  - Ensure runtime dirs for virtual services differ.

* Bug Fixes:
  - Allow some more depth headroom for the no-qname-minimization fallback case
  - Resize hostname to final size in getCarbonHostname().

Changelog for 4.3.3:
Released: 17th of July 2020
* Bug Fixes:
  - Validate cached DNSKEYs against the DSs, not the RRSIGs only.
  - Ignore cache-only for DNSKEYs and DS retrieval.
  - A ServFail while retrieving DS/DNSKEY records is just that.
  - Refuse DS records received from child zones.
  - Better exception handling in houseKeeping/handlePolicyHit.
  - Take initial refresh time from loaded zone.

pkgsrc-specific changes:
  - Move pdns socket directory to /var/run/pdns-recursor
    to reduce diff
  - Introduce SMF method script that also creates the
    socket directory on platforms where /var/run is not
    persistent (i.e. swap or tmpfs-mounted)
2020-09-30 11:53:07 +00:00
jperkin
8041f7b11d ups-nut-cgi: Try to fix gd detection. 2020-09-30 10:28:08 +00:00
wiz
77f7b1fd7c doc: Updated sysutils/py-borgbackup to 1.1.13 2020-09-30 09:54:24 +00:00
wiz
9e5cf0825d py-borgbackup: update to 1.1.13.
Version 1.1.13 (2020-06-06)
---------------------------

Fixes:

- rebuilt using a current Cython version, compatible with python 3.8, #5214


Version 1.1.12 (2020-06-06)
---------------------------

Fixes:

- fix preload-related memory leak, #5202.
- mount / borgfs (FUSE filesystem):

  - fix FUSE low linear read speed on large files, #5067
  - fix crash on old llfuse without birthtime attrs, #5064 - accidentally
    we required llfuse >= 1.3. Now also old llfuse works again.
  - set f_namemax in statfs result, #2684
- update precedence of env vars to set config and cache paths, #4894
- correctly calculate compression ratio, taking header size into account, too

New features:

- --bypass-lock option to bypass locking with read-only repositories

Other changes:

- upgrade bundled zstd to 1.4.5
- travis: adding comments and explanations to Travis config / install script,
  improve macOS builds.
- tests: test_delete_force: avoid sporadic test setup issues, #5196
- misc. vagrant fixes
- the binary for macOS is now built on macOS 10.12
- the binaries for Linux are now built on Debian 8 "Jessie", #3761
- docs:

  - PlaceholderError not printed as JSON, #4073
  - "How important is Borg config?", #4941
  - make Sphinx warnings break docs build, #4587
  - some markup / warning fixes
  - add "updating borgbackup.org/releases" to release checklist, #4999
  - add "rendering docs" to release checklist, #5000
  - clarify borg init's encryption modes
  - add note about patterns and stored paths, #4160
  - add upgrade of tools to pip installation how-to
  - document one cause of orphaned chunks in check command, #2295
  - linked recommended restrictions to ssh public keys on borg servers in faq, #4946
2020-09-30 09:54:14 +00:00
wiz
083e09f8e3 doc: Updated textproc/asciidoc to 9.0.2 2020-09-30 09:50:28 +00:00
wiz
288866617a asciidoc: update to 9.0.2.
Version 9.0.2 (2020-07-21)
--------------------------
.Bug fixes
- Revert to using optparse from argparse for a2x
2020-09-30 09:50:18 +00:00
jperkin
8cf8dff413 py-uvicorn: Fix bulk builds yet again. 2020-09-30 09:38:44 +00:00
wiz
a85342442a doc: Updated security/openssl to 1.1.1h 2020-09-30 09:25:44 +00:00
wiz
a6314af3f3 openssl: update to 1.1.1h.
Major changes between OpenSSL 1.1.1g and OpenSSL 1.1.1h [22 Sep 2020]

      o Disallow explicit curve parameters in verifications chains when
        X509_V_FLAG_X509_STRICT is used
      o Enable 'MinProtocol' and 'MaxProtocol' to configure both TLS and DTLS
        contexts
      o Oracle Developer Studio will start reporting deprecation warnings
2020-09-30 09:25:30 +00:00
wiz
cc7bd301ed doc: Updated emulators/mame to 0.225 2020-09-30 09:22:59 +00:00
wiz
31122abe2c mame: update to 0.225.
Whether it’s the Autumn harvest moon, or the ornamental plum blossoms
are blowing in the Spring breeze, it’s time for something special:
MAME 0.225 is out today! We’ve got some big updates that benefit
everyone! First of all, MAME’s sound output system has been
overhauled, with better sample rate conversion and mixing. This
makes pretty much everything sound sweeter, but on top of that,
the Votrax SC-01 speech synthesiser has been tuned up. Does anyone
here speak Q*Bertese? SC-01 speech has been added to the Apple II
Mockingboard card, too. While we’re talking about Apple II cards,
Rhett Aultman has ported the CS8900A Crystal LAN Ethernet controller
from VICE, allowing MAME to emulate the a2RetroSystems Uthernet
card.

Other across-the-board enhancements include more artwork system
features (you’ll start to see this show up in external artwork
soon), an option to reduce repeated warnings about imperfectly
emulated features, and several internal improvements to make
development simpler. Significant newly emulated system features
include the Philips P2000T’s cassette drive from Erwin Jansen, the
Acorn BBC Micro Hybrid Music 4000 Keyboard, internal boot ROM
support for the WonderSwan hand-helds, and initial support for the
NS32000 CPU.

Newly emulated systems include several TV games from MSI based on
arcade titles, a couple of Senario Double Dance Mania titles, Sun
Mixing’s elusive Super Bubble Bobble, a location test version of
Battle Garegga, a couple more versions of Jojo’s Bizarre Adventure,
and three more Street Fighter II': Champion Edition bootlegs. Some
of the immediately noticeable fixes this month include 15-bit
graphics mode refinements for FM Towns from r09, gaps in zoomed
sprites on Data East MLC and Seta 2 fixed by cam900, Galaga LED
outputs lost during refactoring restored, and clickable artwork
remaining clickable when rotated.
2020-09-30 09:22:48 +00:00
adam
21be2d5a87 Updated security/py-acme, security/py-certbot* 2020-09-30 09:04:36 +00:00
adam
b970dd30bc py-acme py-certbot*: updated to 1.8.0
Certbot 1.8.0

Added
Added the ability to remove email and phone contact information from an account
using update_account --register-unsafely-without-email

Changed
Support for Python 3.5 has been removed.

Fixed
The problem causing the Apache plugin in the Certbot snap on ARM systems to
fail to load the Augeas library it depends on has been fixed.
The acme library can now tell the ACME server to clear contact information by passing an empty
tuple to the contact field of a Registration message.
Fixed the *** stack smashing detected *** error in the Certbot snap on some systems.
More details about these changes can be found on our GitHub repo.
2020-09-30 09:03:45 +00:00
jperkin
dd1f4b06fe ruby-chef-zero: Does not support ruby25. 2020-09-30 08:57:21 +00:00
nia
d2057d37b5 nxengine-evo: Doesn't install to libexec. Don't set GITHUB_TAG. 2020-09-30 08:18:51 +00:00