Overview of changes leading to 8.0.1
Wednesday, July 12, 2023
====================================
- Build fix on 32-bit arm.
- More speed optimizations:
- 60% speedup in retaingids subsetting SourceHanSans-VF.
- 38% speed up in subsetting (beyond-64k) mega-merged Noto.
- 16% speed up in retain-gid (used for IFT) subsetting of NotoSansCJKkr.
Overview of changes leading to 8.0.0
Sunday, July 9, 2023
====================================
- New, experimental, WebAssembly (WASM) shaper, that provides greater
flexibility over OpenType/AAT/Graphite shaping, using WebAssembly embedded
inside the font file. Currently WASM shaper is disabled by default and needs
to be enabled at build time. For details, see:
https://github.com/harfbuzz/harfbuzz/blob/main/docs/wasm-shaper.md
For example fonts making use of the WASM shaper, see:
https://github.com/simoncozens/wasm-examples
- Improvements to Experimental features introduced in earlier releases:
- Support for subsetting beyond-64k and VarComposites fonts.
- Support for instancing variable fonts with cubic “glyf” table.
- Many big speed optimizations:
- Up to 89% speedup loading variable fonts for shaping.
- Up to 88% speedup in small subsets of large (eg. CJK) fonts (both TTF and
OTF), essential for Incremental Font Transfer (IFT).
- Over 50% speedup in loading Roboto font for shaping.
- Up to 40% speed up in loading (sanitizing) complex fonts.
- 30% speed up in shaping Gulzar font.
- Over 25% speedup in glyph loading Roboto font.
- 10% speed up loading glyph shapes in VarComposite Hangul font.
- hb-hashmap optimizations & hashing improvements.
- New macro HB_ALWAYS_INLINE. HarfBuzz now inlines functions more aggressively,
which results in some speedup at the expense of bigger code size. To disable
this feature define the macro to just inline.
- New API:
+HB_CODEPOINT_INVALID
+hb_ot_layout_get_baseline2()
+hb_ot_layout_get_baseline_with_fallback2()
+hb_ot_layout_get_font_extents()
+hb_ot_layout_get_font_extents2()
+hb_subset_input_set_axis_range()
Changes since 4.18.3
--------------------
o Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* BUG 15404: Backport --pidl-developer fixes.
o Samuel Cabrero <scabrero@samba.org>
* BUG 14030: Named crashes on DLZ zone update.
o Björn Jacke <bj@sernet.de>
* BUG 2312: smbcacls and smbcquotas do not check // before the server.
o Volker Lendecke <vl@samba.org>
* BUG 15382: cli_list loops 100% CPU against pre-lanman2 servers.
* BUG 15391: smbclient leaks fds with showacls.
* BUG 15402: smbd returns NOT_FOUND when creating files on a r/o filesystem.
o Stefan Metzmacher <metze@samba.org>
* BUG 15355: NSS_WRAPPER_HOSTNAME doesn't match NSS_WRAPPER_HOSTS entry and
causes test timeouts.
o Noel Power <noel.power@suse.com>
* BUG 15384: net ads lookup (with unspecified realm) fails.
o Christof Schmitt <cs@samba.org>
* BUG 15381: Register Samba processes with GPFS.
o Andreas Schneider <asn@samba.org>
* BUG 15390: Python tarfile extraction needs change to avoid a warning
(CVE-2007-4559 mitigation).
* BUG 15398: The winbind child segfaults when listing users with `winbind
scan trusted domains = yes`.
o Jones Syue <jonessyue@qnap.com>
* BUG 15383: Remove comments about deprecated 'write cache size'.
* BUG 15403: smbget memory leak if failed to download files recursively.
9.18.17 released
6206. [bug] Add shutdown checks in dns_catz_dbupdate_callback() to
avoid a race with dns_catz_shutdown_catzs(). [GL #4171]
6205. [bug] Restore support to read legacy HMAC-MD5 K file pairs.
[GL #4154]
6204. [bug] Use NS records for relaxed QNAME-minimization mode.
This reduces the number of queries named makes when
resolving, as it allows the non-existence of NS RRsets
at non-referral nodes to be cached in addition to the
referrals that are normally cached. [GL #3325]
6200. [bug] Fix nslookup erroneously reporting a timeout when the
input is delayed. [GL #4044]
6199. [bug] Improve HTTP Connection: header protocol conformance
in the statistics channel. [GL #4126]
6198. [func] Remove the holes in the isc_result_t enum to compact
the isc_result tables. [GL #4149]
6197. [bug] Fix a data race between the dns_zone and dns_catz
modules when registering/unregistering a database
update notification callback for a catalog zone.
[GL #4132]
6196. [cleanup] Report "permission denied" instead of "unexpected error"
when trying to update a zone file on a read-only file
system. Thanks to Midnight Veil. [GL #4134]
6193. [bug] Fix a catz db update notification callback registration
logic error, which could crash named when receiving an
AXFR update for a catalog zone while the previous update
process of the catalog zone was already running.
[GL #4136]
6166. [func] Retry without DNS COOKIE on FORMERR if it appears that
the FORMERR was due to the presence of a DNS COOKIE
option. [GL #4049]
1.22.0 (2023-06-27)
* compatibility with 8.3
* add new error macros (ER_DATA_LENGTH and ER_NOT_ALLOWED) with libzip >=
1.10.0
* add new archive global flags (ER_AFL_*) with libzip >= 1.10.0
* add ZipArchive::setArchiveFlag and ZipArchive::getArchiveFlag methods
1.22.1 (2023-06-29)
* add more tests
* ZipArchive::FL_RECOMPRESS constant is deprecated and will be removed in a
future version of libzip
* add ZipArchive::FL_OPEN_FILE_NOW to open the file when added instead of
waiting for archive to be closed
Aside from NetBSD, `-lGL' is required by the linker on Linux too.
Pass it to LDFLAGS by default on all platforms when building the
OpenGL viewer (default: on).
Also fix PLIST when mupdf is built with curl support.
OpenSSH 9.3p2
update version in README
update RPM spec versions
disallow remote addition of FIDO/PKCS11 keys
Depends on the local client performing the session-bind@openssh.com
operation, so non-OpenSSH local client may circumvent this.
terminate pkcs11 process for bad libraries
depend
crank version
New Features
Improved Python 3.12 compatiblity
configitems: enable changegroup3 by default (unless using infinitepush)
extras: expose 'retained_extras' for extensions to extend
stabletailgraph: implement stable-tail sort
stabletailgraph: naive version of leap computation
bundle: introduce a "v3" spec
clone-bundles: add a basic first version of automatic bundle generation
clone-bundles: garbage collect older bundle when generating new ones
clone-bundles: only regenerate the clone bundle when cached ration is low
clone-bundles: also control automation based on absolute number of revisions
clone-bundles: add a configuration to control auto-generation on changes
clone-bundles: introduce a command to refresh bundle
clone-bundles: add a command to clear all bundles
clone-bundles: add an option to generate bundles in the background
clonebundles: add support for inline (streaming) clonebundles
clonebundles: adds a auto-generate.serve-inline option
match: add filepath: pattern to match an exact filepath relative to the root
hgweb: add "children" into the JSON template for a changeset
hgweb: add support to explicitly access hidden changesets
pull: add --remote-hidden option and pass it through peer creation
hidden: add support for --remote-hidden to HTTP peer
hidden: support passing --hidden with serve --stdio
hidden: add support to explicitly access hidden changesets with SSH peers
perf: introduce a perf::stream-locked-section command
perf: add a function to find a stream version generator
perf: add support for stream-v3 during benchmark
perf: add a perf::stream-generate command
perf: add a perf::stream-consume
cli: make debugnodemap capable of inspecting an arbitrary nodemap
rust: configure MSRV in Clippy
rhg: make rhg files work if ui.relative-files=true is specified
rhg: support rhg files with ui.relative-paths=false
rhg: support status --print0
tree-manifest: allow debugupgraderepo to run on tree manifest repo
library: enable runpy invocation on mercurial package
library: incorporate demandimport into runpy invocation
exchange: allow passing no includes/excludes to pull()
New Experimental Features
stream-clone: add an experimental v3 version of the protocol
stream-clone: support streamv3 on the cli [hg bundle]
Bug Fixes
mail: add a missing argument to properly override starttls
bundle: include required phases when saving a bundle (issue6794)
outgoing: fix common-heads computation from missingroots argument
strip: do not include internal changeset in the strip backup
bundle: abort if the user request bundling of internal changesets
bundle: prevent implicit bundling of internal changeset
encoding: avoid quadratic time complexity when json-encoding non-UTF8 strings
sha1dc: Make sure SHA1DC_BIGENDIAN is set on Darwin/PowerPC
zstd: hack include order to ensure that our zstd.h is found
dirstate: better error messages when dirstate is corrupted
stream-clone: avoid opening a revlog in case we do not need it
treemanifest: make updatecaches update the nodemaps for all directories
rust-hg-core: move from ouroboros to self_cell
rust-dependencies: switch from users to whoami
dirstate-v2: actually fix the dirstate-v2 upgrade race
dirstate: avoid leaking disk space in hg debugrebuilddirstate
clonebundles: add warning if auto-generate is enabled without formats
win32mbcs: unbyteify some strings for py3 support
rust-revlog: fix incorrect results with NULL_NODE prefixes
rust-revlog: fix RevlogEntry.data() for NULL_REVISION
Backwards Compatibility Changes
infinitepush: aggressively deprecated infinite push
narrow: indicated the default of 'Yes' when confirming auto-remove-includes
Internal API Changes
Store walk was reworked to fix small race conditions in stream-clone and
greatly improve its API robustness and flexibility.
Miscellaneous
Typechecking support was improved in a lot of places
Removed more useless compat code for now unsupported Python versions
Sped up zstd usage in Rust contexts
revlog: add an exception hint when processing LFS flags without the extension
ui: keep the progress bar around when writing if stdout is not a tty
transaction: use a ".bck" extension for all backup file
* OpenBSD: add RTM_DESYNC to route(4) filter.
* Linux: fix disabling of kernel RA autoconf
* Linux: Improve learning IPv6 address flags
* Linux: risc-v fix vendor error
* Linux: consider IFF_LOWER_UP and !IFF_DORMANT for LINK_UP
* BSD: When we get RTM_NEWADDR the interface must have IFF_UP
* BSD: Fix non INET6 builds
* DHCP: Don't enforce the message came port 67
* privsep: Allow zero length messages through
* dhcpcd: deal with HANGUP and EPIPE better
* dhcpcd: Fix waitip address family
* privsep: Check if we have a root process before sending it stuff
* privsep: Only unlink control sockets if we created them
* common: Improve valid_domain and check correct return
* common: Allow hwaddr_ntoa to print an empty string
* privsep: Send only what we have put in the buffer to script env
Never miss a ceritificate expiration because you forgot to monitor ir.
This Nagios plugins checks certificate validity for a VirtualHost list
dumped from the local Apache configuration.
## [2.6.0]
### Added
* Added option to skip dependency resolution via `pip` with the `--disable-pip`
flag. This option can only be used with hashed requirements files or when the
`--no-deps` flag has been provided
([#610](https://github.com/pypa/pip-audit/pull/610))
3.65.0 (2023-07-10)
+ Comparative search can now also be used if sorted by path
- Fixed an issue in comparative search in directories with uppercase letters
3.65.0-rc1 (2023-06-29)
- Fixed potential crashes
- Updated to libfilezilla 0.44.0
