Commit graph

23439 commits

Author SHA1 Message Date
gutteridge
e1764d4307 firefox: 115 requires rust>=1.66 2023-07-07 21:57:08 +00:00
nia
a802cfa769 firefox102: update to 102.13.0
Security Vulnerabilities fixed in Firefox ESR 102.13

    #CVE-2023-37201: Use-after-free in WebRTC certificate generation

    #CVE-2023-37202: Potential use-after-free from compartment mismatch in
    SpiderMonkey

    #CVE-2023-37207: Fullscreen notification obscured

    #CVE-2023-37208: Lack of warning when opening Diagcab files

    #CVE-2023-37211: Memory safety bugs fixed in Firefox 115, Firefox ESR
    102.13, and Thunderbird 102.13
2023-07-07 20:47:53 +00:00
ryoon
b4b3caa3bf firefox-l10n: Update to 115.0
* Sync with www/firefox-115.0.
2023-07-07 13:48:45 +00:00
ryoon
200fd27340 firefox: Update to 115.0
Changelog:
New

  * Migrating from another browser? Now you can bring over payment methods
    you've saved in Chrome-based browsers to Firefox.

  * Hardware video decoding is now enabled for Intel GPUs on Linux.

  * The Tab Manager dropdown now features close buttons, so you can close tabs
    more quickly.

  * We've refreshed and streamlined the user interface for importing data in
    from other browsers.

  * Users without platform support for H264 video decoding can now fallback to
    Cisco's OpenH264 plugin for playback.

Fixed

  * Windows Magnifier now follows the text cursor correctly when the Firefox
    title bar is visible.

  * Windows users on low-end/USB wifi drivers and with OS geolocation disabled
    can now approve geolocation on a case by case basis without causing
    system-wide network instability.

  * Various security fixes.

Changed

  * Undo and redo are now available in Password fields.

  * On Linux, middle clicks on the new tab button will now open the xclipboard
    contents in the new tab. If the xclipboard content is a URL then that URL
    is opened, any other text is opened with your default search provider.

  * For users with a Firefox Colorways built-in theme, the theme will be
    automatically migrated to the same theme hosted on addons.mozilla.org for
    Firefox profiles that have disabled add-ons auto-updates. This will allow
    users to keep their Colorways theme when they are later removed from
    Firefox installer files.

  * Certain Firefox users may come across a message in the extensions panel
    indicating that their add-ons are not allowed on the site currently open.
    We have introduced a new back-end feature to only allow some extensions
    monitored by Mozilla to run on specific websites for various reasons,
    including security concerns.

Security fixes:
#CVE-2023-3482: Block all cookies bypass for localstorage
#CVE-2023-37201: Use-after-free in WebRTC certificate generation
#CVE-2023-37202: Potential use-after-free from compartment mismatch in
 SpiderMonkey
#CVE-2023-37203: Drag and Drop API may provide access to local system files
#CVE-2023-37204: Fullscreen notification obscured via option element
#CVE-2023-37205: URL spoofing in address bar using RTL characters
#CVE-2023-37206: Insufficient validation of symlinks in the FileSystem API
#CVE-2023-37207: Fullscreen notification obscured
#CVE-2023-37208: Lack of warning when opening Diagcab files
#CVE-2023-37209: Use-after-free in `NotifyOnHistoryReload`
#CVE-2023-37210: Full-screen mode exit prevention
#CVE-2023-37211: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
 and Thunderbird 102.13
#CVE-2023-37212: Memory safety bugs fixed in Firefox 115
2023-07-07 13:47:09 +00:00
abs
c88445a0c3 Put SSP_SUPPORTED=no before bsd.prefs.mk include
From Connor McLaughlan

Should fix running on sparc64 & alpha
2023-07-06 14:14:38 +00:00
wiz
3b7f81591d *: recursive bump for perl 5.38 2023-07-06 09:38:07 +00:00
wiz
72c374442c py-wagtail: relax requirements on py-Pillow 2023-07-06 08:34:50 +00:00
adam
f824bde971 py-httpcore: updated to 0.17.3
0.17.3 (5th July 2023)

- Support async cancellations, ensuring that the connection pool is left in a clean state when cancellations occur.
- The networking backend interface has [been added to the public API](https://www.encode.io/httpcore/network-backends). Some classes which were previously private implementation detail are now part of the top-level public API.
- Graceful handling of HTTP/2 GoAway frames, with requests being transparently retried on a new connection.
- Add exceptions when a synchronous `trace callback` is passed to an asynchronous request or an asynchronous `trace callback` is passed to a synchronous request.
2023-07-06 08:01:30 +00:00
adam
ab75af8aeb py-google-api-python-client: updated to 2.92.0
2.92.0 (2023-07-05)

Features

analyticshub: Update the api 643ac93788 (2c60cd5)
androidenterprise: Update the api 3e72f1c97b (2c60cd5)
androidmanagement: Update the api 88ac8763df (2c60cd5)
androidpublisher: Update the api 2c68b0ef4c (2c60cd5)
apigateway: Update the api dee52bb988 (2c60cd5)
apigee: Update the api 8d8bf3f62b (2c60cd5)
artifactregistry: Update the api 62c1823d27 (2c60cd5)
assuredworkloads: Update the api b90c8e620f (2c60cd5)
baremetalsolution: Update the api f78b5b5443 (2c60cd5)
batch: Update the api c4877a604e (2c60cd5)
bigquery: Update the api d544cb5a7f (2c60cd5)
bigtableadmin: Update the api b972347b31 (2c60cd5)
civicinfo: Update the api e87d72d0c6 (2c60cd5)
cloudfunctions: Update the api 14b37cccda (2c60cd5)
cloudkms: Update the api b8be900e0b (2c60cd5)
cloudsupport: Update the api 6cc4d333ec (2c60cd5)
compute: Update the api bea5e60d94 (2c60cd5)
contactcenterinsights: Update the api 4fbb091456 (2c60cd5)
container: Update the api fbe5b7e77e (2c60cd5)
content: Update the api e561dab287 (2c60cd5)
contentwarehouse: Update the api 6d1e9954d5 (2c60cd5)
dataform: Update the api 54efc30285 (2c60cd5)
datafusion: Update the api d52f0ebe42 (2c60cd5)
dataplex: Update the api 4c30b55860 (2c60cd5)
dataproc: Update the api 5f35c4d4fa (2c60cd5)
displayvideo: Update the api 46c1b546b3 (2c60cd5)
eventarc: Update the api 71d1557534 (2c60cd5)
fcm: Update the api 26f9d64dae (2c60cd5)
file: Update the api 898692c9c8 (2c60cd5)
firebaseappcheck: Update the api 4a43eb9435 (2c60cd5)
firebaseappdistribution: Update the api d1cd519c94 (2c60cd5)
firebasedynamiclinks: Update the api e6c55df5cc (2c60cd5)
firebase: Update the api 16db7f3a09 (2c60cd5)
firestore: Update the api 9999852e0f (2c60cd5)
fitness: Update the api 3a74d9714e (2c60cd5)
gkehub: Update the api 0f2f4b915f (2c60cd5)
gmailpostmastertools: Update the api f96588e3a6 (2c60cd5)
iam: Update the api 2cf0009851 (2c60cd5)
memcache: Update the api 3e01201e54 (2c60cd5)
metastore: Update the api 903ce478f0 (2c60cd5)
mybusinesslodging: Update the api c351ce5187 (2c60cd5)
networkconnectivity: Update the api aa5cfb3370 (2c60cd5)
osconfig: Update the api da3f8b7df6 (2c60cd5)
recaptchaenterprise: Update the api e30b1ec589 (2c60cd5)
run: Update the api 574b1f134c (2c60cd5)
sasportal: Update the api f5e91e7309 (2c60cd5)
searchads360: Update the api 53884e5590 (2c60cd5)
searchconsole: Update the api 84fdc989f4 (2c60cd5)
servicenetworking: Update the api 20e3512cf0 (2c60cd5)
sqladmin: Update the api aaa3698981 (2c60cd5)
streetviewpublish: Update the api efdf885b7c (2c60cd5)
toolresults: Update the api b774eff3fc (2c60cd5)
transcoder: Update the api d2b0c168e5 (2c60cd5)
vmmigration: Update the api 691039ea06 (2c60cd5)
workloadmanager: Update the api 2e0547cca2 (2c60cd5)
youtubeAnalytics: Update the api 494322335f (2c60cd5)
youtubereporting: Update the api df6269c4d2 (2c60cd5)
2023-07-06 07:59:45 +00:00
nia
f6be20bfd5 nghttp3: Require a C++17 compiler. 2023-07-06 07:28:20 +00:00
wiz
c2347a44a5 py-google-api-python-client: update to 2.91.0.
updates like usual, undocumented like usual
2023-07-05 22:26:23 +00:00
wiz
0eea8bcf6f squidclamav: add upper bound so binary package matches pkgsrc directory 2023-07-03 13:08:54 +00:00
wiz
135c74868c mserv-php: restrict DEPENDS so installed binary package matches it 2023-07-03 12:54:50 +00:00
wiz
a9933416b7 p5-Mojo-JWT: fix DEPENDS line 2023-07-03 12:38:41 +00:00
adam
35dc57fb54 lua-resty-core: updated to 0.1.27
0.1.27
Unknown changes
2023-07-03 05:40:59 +00:00
fox
9cea88a37a www/jira-cli: Update to 1.4.0
Changes since 1.3.0:

v1.4.0

This release adds support for Jira v9, a serverinfo command to quickly check
your Jira server build info, lets you set resolution, assignee and comment on
issue move, and many more.

## What's added?
- feat(tui): Allow issue transition from the ui by @ankitpokhrel in #544
- feat(tui): Add help page by @ankitpokhrel in #563
- feat: Filter by multiple statuses by @ankitpokhrel in #573
- feat: Support for adding watcher to Issue by @ankitpokhrel in #584
- feat: Allow different jira server for API and for UI by @markhatch in #613

## What's fixed?
- fix: Shell completion for Fish and PowerShell by @ankitpokhrel in #553
- fix: Worklog comment don't work together with prompt by @ankitpokhrel in #562
- fix: Use http client wrapper instead of round trip by @ankitpokhrel in #530
- fix: Try to detect if JIRA v8 server is not using the createmeta REST endpoint
  by @tristianc in #574
- fix: Issue with -c flag on config generation by @ankitpokhrel in #582
- fix: Issue with value assignment in init by @ankitpokhrel in #606
- fix: Issue with epic field on create by @ankitpokhrel in #607
- fix: Comment author name is not always displayed by @ankitpokhrel in (#618)

## Other changes
- ehc: Improve PAGER selection by @ankitpokhrel in #570
- dep: Upgrade cobra to v1.7.0 by @dbirks in #608
- ci: Upgrade actions by @ankitpokhrel in #590

## New Contributors
- @tristianc made their first contribution in #574
- @dbirks made their first contribution in #608
- @markhatch made their first contribution in #613


Full Changelog: https://github.com/ankitpokhrel/jira-cli/compare/v1.3.0...v1.4.0
2023-07-01 16:56:41 +00:00
nia
5211f52712 py-genshi: assumes compiler defaults to c99 2023-07-01 14:11:48 +00:00
nia
a4078fce47 w3m: assumes compiler defaults to c99 2023-07-01 14:04:32 +00:00
wiz
a0a2de7587 *: restrict py-numpy users to 3.9+ in preparation for update 2023-07-01 08:37:33 +00:00
osa
d162393cdc www/unit-*: add multiple versions support for python and ruby
Multiple versions of python and ruby programming languages can coexist,
so adding versions to modules make them coexist as well.

Bump PKGREVISION.
2023-06-30 20:49:44 +00:00
osa
d0ce39cce3 www/unit-php: added PHP 8.2 as supported version
Bump PKGREVISION.
2023-06-30 20:44:33 +00:00
taca
b081e0ad90 www/ruby-actionpack60: add fix for CVE-2023-28362
Apply similar patch as Rails 6.1.7.4/7.0.5.1.

Bump PKGREVISION.
2023-06-29 16:03:34 +00:00
taca
3f80f0ce6f www/ruby-actionpack60: decrement PKGREVISION.
PKGREVISION++ is enough...
2023-06-29 16:01:04 +00:00
taca
904873cdba www/ruby-actionpack52: add fix for CVE-2023-28362
Apply similar patch as Rails 6.1.7.4/7.0.5.1.

Bump PKGREVISION.
2023-06-29 16:00:07 +00:00
wiz
f2a808522d py-google-api-python-client: update to 2.90.0.
No changelog found.
2023-06-28 08:39:38 +00:00
taca
b07719a6bd www/ruby-rails70
Rails 7.0.5.1 (2023-06-26)

Action Pack

*   Raise an exception if illegal characters are provide to redirect_to
    [CVE-2023-28362]

    *Zack Deveau*
2023-06-27 13:39:03 +00:00
taca
cffea4dbac www/rails61: update to 6.1.7.4
Rails 6.1.7.4 (2023-06-26)

Action Pack

*   Raise an exception if illegal characters are provide to redirect_to
    [CVE-2023-28362]

    *Zack Deveau*
2023-06-27 13:35:17 +00:00
adam
2c1a17b453 py-telepath: updated to 0.3.1
0.3.1 (2023-06-12)
------------------
* Fix check for lazily evaluated objects, for provisional Django 5.0 compatibility
* Drop support for Python <3.8 and Django <3.2
2023-06-27 13:05:00 +00:00
ryoon
f5d7d5cd1a firefox-l10n: Update to 114.0.2
* Sync with www/firefox-114.0.2.
2023-06-26 13:57:15 +00:00
ryoon
300226353a firefox: Update to 114.0.2
Changelog:
Fixed

    Several crash fixes.

    Web Extensions: Fixes for 114 regressions in our Native Messaging support.
2023-06-26 13:56:13 +00:00
jperkin
6355d3967b wwwoffle: SunOS needs libnsl. 2023-06-26 09:33:41 +00:00
jperkin
da68c70115 surf: SunOS needs libsocket. 2023-06-26 09:33:02 +00:00
gutteridge
d1110c474e firefox: fix a typo in a comment 2023-06-25 18:49:16 +00:00
nia
ffc668c259 firefox102: update to 102.12
Security Vulnerabilities fixed in Firefox ESR 102.12

    #CVE-2023-34414: Click-jacking certificate exceptions through rendering lag

    #CVE-2023-34416: Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
2023-06-25 16:07:08 +00:00
abs
001b878254 Fix PLIST with PKG_OPTIONS -wayland 2023-06-24 16:03:58 +00:00
adam
55718a6186 py-klein: updated to 21.8.0 (finish parial update)
21.8.0 - 2021-08-08

Python 2 is no longer supported by Klein.
Python 3.5 is no longer supported by Klein.
Python 3.9 is now supported by Klein.
Fixed a compatibility issue with Twisted versions greater than 20.3.0 in Klein's test suite.
Fixed a compatibility issue with Werkzeug versions greater than 2.0 in Klein's test suite.
Klein has incomplete, but growing type hints, but py.typed is not installed, as they might not work well for most clients yet.
Plating now sets the Content-Type header to application/json instead of text/json; charset=utf8.
2023-06-22 16:45:39 +00:00
schmonz
00324aae13 w3m{,-img}: needs -lm on Solaris. 2023-06-21 15:16:15 +00:00
wiz
6a7019bfba py-autobahn: update to 23.6.2.
No changelog found.
2023-06-19 08:14:43 +00:00
wiz
95c16caba6 libproxy: update to 0.5.2.
Link with libsocket where needed (#234) by @amigadave in #235
Remove libsoup from doc and CI by @janbrummer in #238
Fix coverity findings by @janbrummer in #241
Add a comment that docs option needs introspection by @janbrummer in #242
Set pac data after download only by @janbrummer in #244
Fix race condition in px_manager_get_proxies_sync by @janbrummer in #245
Update gobject dependency in pkgconfig file by @floppym in #239
Reread env variables in each get_config call by @janbrummer in #246
Bump version to 0.5.2 by @janbrummer in #247
2023-06-19 08:10:53 +00:00
adam
91ec8363a7 py-zope.proxy: updated to 5.0.0
5.0.0 (2023-01-18)
- Drop support for Python 2.7, 3.5, 3.6.
- Remove proxying code for names that no longer exist in Python 3
  like ``__long__`` and some others.
2023-06-18 12:30:30 +00:00
adam
3bbf81315f py-ZopeInterface: moved to py-zope.interface 2023-06-18 05:39:36 +00:00
wiz
0506c7ecab www/Makefile: + py-plaster_pastedeploy 2023-06-17 17:52:44 +00:00
wiz
5279bdd54e www/py-plaster_pastedeploy: import py-plaster_pastedeploy-1.0.1
plaster_pastedeploy is a plaster plugin that provides a plaster.Loader
that can parse ini files according to the standard set by PasteDeploy.
It supports the wsgi plaster protocol, implementing the
plaster.protocols.IWSGIProtocol interface.
2023-06-17 17:52:23 +00:00
taca
0f6cbecd12 www/ruby-aws-sdk-s3: update to 1.126.0
1.126.0 (2023-06-16)

* Feature - This release adds SDK support for request-payer request header
  and request-charged response header in the
  "GetBucketAccelerateConfiguration", "ListMultipartUploads", "ListObjects",
  "ListObjectsV2" and "ListObjectVersions" S3 APIs.

1.125.0 (2023-06-15)

* Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's
  CHANGELOG.md for details.

1.124.0 (2023-06-13)

* Feature - Integrate double encryption feature to SDKs.

1.123.2 (2023-06-12)

* Issue - Fix issue when decrypting noncurrent versions of objects when
  using client side encryption (#2866).
2023-06-17 15:53:58 +00:00
taca
1121720d3e www/ruby-aws-sdk-kms: update to 1.67.0
1.67.0 (2023-06-15)

* Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's
  CHANGELOG.md for details.
2023-06-17 15:50:37 +00:00
taca
b23d118110 www/ruby-aws-sdk-secretsmanager: update to 1.77.0
pkgsrc change: update dependency.

1.77.0 (2023-06-15)

* Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's
  CHANGELOG.md for details.
2023-06-17 15:49:05 +00:00
taca
91f7c75bfa www/ruby-aws-sdk-core: update to 3.175.0
3.175.0 (2023-06-15)

* Feature - Updated Aws::STS::Client with the latest API changes.
* Feature - Updated Aws::SSOOIDC::Client with the latest API changes.
* Feature - Updated Aws::SSO::Client with the latest API changes.
2023-06-17 15:47:10 +00:00
taca
7385807562 www/ruby-aws-partitions: update to 3.175.0
1.780.0 (2023-06-15)

* Feature - Updated the partitions source data the determines the AWS
  service regions and endpoints.

1.779.0 (2023-06-13)

* Feature - Added support for enumerating regions for
  Aws::VerifiedPermissions.
* Feature - Added support for enumerating regions for Aws::CodeGuruSecurity.

1.778.0 (2023-06-12)

* Feature - Updated the partitions source data the determines the AWS
  service regions and endpoints.
2023-06-17 15:40:43 +00:00
taca
0a78399470 www/ruby-rack: update to 3.0.8
3.0.8 (2023-06-14)

What's Changed

* Backport "Fix some unused variable verbose warnings" by @skipkayhil in
  #2084

New Contributors

* @skipkayhil made their first contribution in #2084
2023-06-17 15:30:29 +00:00
mef
6e1061949a (www/R-gargle) Updated 1.4.0 to 1.5.0
# gargle 1.5.0

* gargle's existing unexported `secret_*()` functions are deprecated, in favor
  of new, exported `secret_*()` functions that are built on or inlined from
  httr2. The `vignette("managing-tokens-securely")` is updated to reflect the
  new, recommended strategy for encrypting secrets.
  - `secret_encrypt_json()` / `secret_decrypt_json()` are new gargle-specific
    functions.
  - `secret_write_rds()` / `secret_read_rds()`, `secret_make_key()`, and
    `secret_had_key()` are basically copies of their httr2 counterparts.
  - Legacy functions to move away from: `secret_pw_name()`, `secret_pw_gen()`,
    `secret_pw_exists()`, `secret_pw_get()`, `secret_can_decypt()`,
    `secret_read()`, `secret_write()`.
  - The new approach makes it much easier to use gargle functions to encrypt and
    decrypt credentials in a project that is *not* necessarily an R package.

* The transition from OAuth "app" to OAuth "client" is fully enacted now. This
  process tarted in v1.3.0, when the `"gargle_oauth_client"` class was
  introduced, to support the new pseudo-OOB auth flow. The deprecations are
  implemented to preserve backwards compatibility for some time. In this
  release, function, argument, and field names are all updated to the "client"
  terminology:

  - `init_AuthState(client =)` instead of `init_AuthState(app =)`
  - `AuthState$client` instead of `AuthState$app`
  - `AuthState$set_client()` instead of `AuthState$set_app()`
  - `gargle2.0_token(client =)` instead of `gargle2.0_token(app =)`
  - `credentials_user_oauth2(client =)` instead of
    `credentials_user_oauth2(app =)`

  A new `vignette("oauth-client-not-app")` explains how a wrapper package should
  adapt.

* When the `"gargle_verbosity"` option is set to `"debug"`, there are
  more debugging messages around user credentials. Specifically, more
  information is available on the email, OAuth client, and scopes,
  with the goal of better understanding why a cached token is (or is
  not) being used.

* `check_is_service_account()` is a new function for use in wrapper
  packages to throw a more informative error when a user provides JSON
  for an OAuth client to an argument that is expecting JSON for a
  service account.

* `response_process()` has improved handling of responses that
  represent an HTTP error with HTML content (as opposed to the
  expected and preferred JSON) (#254).

* `response_process(call = caller_env())` is a new argument that is
  passed along to various helpers, which can improve error reporting
  for user-facing functions that call `response_process()` (#255).
2023-06-17 12:17:14 +00:00