Pkgsrc changes:
- Add LICENSE
- Adjust dependencies
- Add recommended dependencies
Upstream changes:
1.13
- ignoring dirs starting with '.'
- no HTML rendering for perltoc (too slow)
- support for perlvar
- computing TOC layout, works for MSIE6, MSIE8, FF, Chrome and Safari
- many JS fixes (done in Alien-GvaScript 1.20)
- applied patch by Elliot Shank for specifiying the page title
- tested on MSIE8, FF3.5, safari4, Chrome3
1.12
- sync TOC, automatically open nodes in TOC
- support aliases in links L<alias|http://...>
- fixed bugs in URLs containing special chars like L<http://foo$/...>
- disabled automatic links within text nodes
- links to external resources will open in a blank page
- fixed bugs in displaying scripts (as opposed to modules)
- toc ignores directories starting with '.'
- toc_pragmas ignores "pod", "pods" and "inc" subdirs
Pkgsrc changes:
- Add LICENSE
Upstream changes:
1.21 18.01.2010
- bug in Builder, Gvascript.js was written to wrong location
1.20 07.01.2009
- Element.autoScroll : fix scroll amount when the scrolling block has
an offsetTop > 0
- removed PAGE_UP/DOWN handlers in TreeNavigator -- let the browser deal
with those
- treeNavigator select() has an additional param "prevent_autoscroll"
- treeNavigator autoscroll only active through kbd, not through click
- treeNavigator observes "mouseup" (instead of mousedown or click)
- autoCompleter bug fix on detach (stop observing "click")
- protoExtensions : removed RegExp.escape() (now in prototype.js)
- autoCompleter div, display above only if enough vertical space
- autoCompleter : code layout improvements
1.18 13.10.2009
- fix some minor doc glitches released in 1.17
1.17 13.10.2009
- major revision from Mona Remlawi
- new Grid component
- new CustomButtons component
- new Paginator component
- new test suite
http://www.squid-cache.org/Advisories/SQUID-2010_1.txt
Changes to squid-3.0.STABLE23 (02 Feb 2010):
- Bug 2856: removing assert() required for 3.0 patch for SQUID-2010:1
- Regression Fix: Build error in Kerberos helper after library removal.
Changes to squid-3.0.STABLE22 (01 Feb 2010):
- Regression Fix: Make Squid abort on all config parse failures.
- Bug 2787: Reduce unexpected http status to non-critical warnings.
- Bug 2496: Downloading some variants in full before relaying
- Bug 2452: Add upper limit to external_acl_type entries.
- Removed optional kerberos/spnegohelp/ library due to licensing issues
- Add client_ip_max_connections
- Handle DNS header-only packets as invalid.
- Regression Fix: Make Squid abort on all config parse failures.
- Regression Bug 2811: SNMP client/peer table OID numbering
- Bug 2851: Connection pinning fails when using a peer
- Bug 2850: Mismatch in hier_code enum / hier_strings array
- Bug 2731: Add follow_x_forwarded_for support to ICAP
- Bug 2730: Regressions in follow_x_forwarded_for since Squid-2
- Bug 2706: Set timestamps during ICAP request satisfaction.
- Bug 2553: X-Forwarded-For with IPv6 address not handled correctly
- Fix: WCCPv1 not connecting to router correctly
- Remove obsolete RunCache/RunAccel scripts.
- Add client_ip_max_connections
- Add the http::>ha format code and make http::>h log original request
headers
- ... and all bug fixes from 3.0 up to 3.0.STABLE22
- ... and many more minor build and display annoyances.
This update also contains the fix for the remote DoS vulnerability
reported in "Squid Proxy Cache Security Update Advisory SQUID-2010:1".
pkgsrc changes:
- Adding license definition
- Adjusting dependencies
Upstream changes:
0.19 19 Jan 2009
* add dep on MRO::Compat. Use it in show_related_field_using() in RDBO and DBIC Metadata subclasses.
* show_related_field_using() will now return 'unique_value' if the foreign class implements that method.
0.18 1 Dec 2009
* fix failing dbic test
pkgsrc changes:
- Adjusting dependencies
Upstream changes:
0.6061 (11.19.2009) - John Siracusa <siracusa@gmail.com>
* Altered tests to work around strange UTF-8 errors in some installations
of perl. (Thanks to Michael Lackhoff for help debugging.)
0.606 (11.16.2009) - John Siracusa <siracusa@gmail.com>
* Overhauled inheritance to fix "Inconsistent hierarchy" mro c3 errors
(RT 51168)
* Added "use utf8" statements to ensure proper treatment of UTF-8 text
stored in the __DATA__ sections of various modules (RT 29131)
0.605 (10.16.2009) - John Siracusa <siracusa@gmail.com>
* Updated eval blocks to avoid stomping on $@ from an outer scope.
pkgsrc changes:
- Adjusting dependencies
- Adjust module type
Upstream changes:
Thu 14 Jan 20:56:00 GMT 2010 - Release 0.81
Add a JSONP serialization type.
Sat 19 Dec 14:54:00 GMT 2009 - Release 0.80
Convert all classes to Moose
Change Catalyst::Request::REST to be a mostly empty class, with
all the functionality in Catalyst::TraitFor::Request::REST
Simplify _get_allowed_methods method (aristotle)
Rework serializer return so that serializers throw an exception in
the case of issues serializing the data (hobbs).
Fri 11 Dec 01:08:00 GMT 2009 - Release 0.79
Cope with invalid (missing required q parameter) header like:
application/json; charset="utf-8"
Fix documentation to not mention deprecated things and generally be
in better style.
Make author information consistant and only in one module.
New features/improvements:
* Fix security in awredir.pl script by adding a security key required by
default.
* Enhance security of parameter sanitizing function.
* Add name of config file used to build data files inside data files header.
* Added details of version for Chrome, Opera, Safari and Konqueror browsers.
* Add AdobeAir detection.
* Major update of browsers, robots and search_engines databases (among them,
the Bing search engine).
* Increase seriously bot detection.
* Add Brezhoneg language.
* Add a better way to detect Safari versions.
* Added subpages for geoip maxmind modules in awstats_buildstaticpages.
Fixes:
* Fix typo in polish language file
* awstats emmits ton of warnings with new geoipfree - ID: 2794728
* Fix: can detect robots with robots.txt url even if file is not root.
* Other minor fixes.
pkgsrc changes:
* Patch XML encoding problem when the AT&T searchbot is encountered.
Upstream changes:
5.80019 2010-01-29 01:04:09
Bug fixed:
- Calls to $c->uri_for with private paths as strings (e.g.
$c->uri_for('controller/action', 'arg1', 'arg2') ) no longer have
/ encoded to %2F. This is due to $c->uri_for('static', 'css/foo', $bar)
which should not be encoded.
Calls with an action object (rather than a string), or uri_for action
will still encode / in args and captures to %2F
- The above noted / => %2F encoding in uri_for_action or uri_for with
an action object has been fixed to not just encode the first slash in
any set of args/captures.
- nginx and lighttpd FCGI requests with URI encoded sections as the first
path part have been fixed to operate correctly.
- A source of bogus warnings in Catalyst::Component::BUILDARGS has been
removed.
Documentation:
- Improve the documentation about -Home and how Catalyst finds the home path
for applications.
- Various minor typo fixes.
New features:
- Allow passing additional arguments to action constructors.
Exact dependencies make upgrading through binary packages impossible
because we don't have a way to do multipackage transactional updates.
You still need to have the same mozilla platform version of xulrunner
and firefox installed or there will be an error message at run time.
an indirect dependency of update for editors/p5-Padre-Plugin-Catalyst.
This plugin uses Authen::Htpasswd to let Catalyst applications use
<.htpasswd> files for it's authentication storage.
* A number of bugs in KIO have been squashed, making updating of shown
directories work again and solving some other stability issues
* A crash when creating an avatar from the webcam in Kopete has been fixed
* kded taking 100% CPU time in certain situations has been cured
This module enables use of HTTP Proxy authentication with
Catalyst::Plugin::Authentication.
Currently this module only supports the Basic scheme, but
upon request Digest will also be added.
indirect dependency of upcoming 0.08 version of editors/p5-Padre-Plugin-Catalyst
This module provides the feature of HTTP authentication for
Catalyst::Plugin::Authentication. Both basic and digest authentication
are currently supported.
When authentication is required, this module sets a status of 401, and
the body of the response to 'Authorization required.'. To override this
and set some own content, check for the $c->res->status == 401 in the
end action, and change the body accordingly.
editors/p5-Padre-Plugin-Catalyst-0.08
Catalyst::Manual::Tutorial installs a "MyApp" tutorial example and
everything it needs. The tutorial covers a wide range of Catalyst
features.
scheduled update of editors/p5-Padre-Plugin-Catalyst.
HTML::FormFu is a HTML form framework which aims to be as easy as possible
to use for basic web forms, but with the power and flexibility to do
anything else you might want to do (as long as it involves forms).
Almost any part of formfu's behaviour and output can be configured. By
default formfu renders "XHTML 1.0 Strict" compliant markup, with as
little extra markup as possible, but with sufficient CSS class names to
allow for a wide-range of output styles to be generated by changing only
the CSS.
Changes (from http://www.fengoffice.com/web/blogen/?p=125).
Improvements in 1.6.2:
* Added a checkbox to apply a task's assignee to all subtasks.
* Allow changing the maximum tasks display limit in the Tasks module.
* Speeded up the quick mark as read (blue dots in listings).
* Added actions in the email view to move to and out of the Junk
folder and to mark as unread.
* Allow to set a subtask's start and due date when adding it from the
parent task's view.
* Request username when changing an expired password for increased security.
Bug fixes in 1.6.2:
* When editing a user, the user gained access to your personal workspace if
you didn't have access to his.
* When editing a user's personal workspace you can now chose from all
workspaces, not only yours.
* "Full" search engine now matches words individually instead of matching
the whole phrase.
* White screen of death when downloading files added before version 1.4.
* Week numbers for january were incorrect.
* Error 500 when importing companies.
* Some links in email didn't open in new windows.
* When creating a contact, objects linked to the contact were ignored.
* Invalid UTF8 characters are now escaped before saving an email to avoid
database errors.
* Pick date widgets were not being shown full size on IE8.
* Special characters in vcard files are converted when importing contacts.
* Improved compatibility with RSS readers - changed the "pubdate" tag to
"pubDate".
* When checking email through cron, the "max spam level" user config option
was disregarded.
* The User column for emails in the Oveview List was the owner of the email
account and not the user who wrote the email.
* User with read access to an email account didn't view emails in the
Overview List.
* Missing lang 'success archive files'.
* The string "None" was hardcoded in english in some fields of the time
report.
* User with permissions to edit owner company data could not edit the logo.
of scheduled update for editors/p5-Padre-Plugin-Catalyst.
This module provides Access Control List style path protection, with
arbitrary rules for Catalyst applications. It operates only on the
Catalyst private namespace, at least at the moment.
The two hierarchies of actions and controllers in Catalyst are:
* Private Namespace
Every action has its own private path. This path reflects the Perl
namespaces the actions were born in, and the namespaces of their
controllers.
* External Namespace
Some actions are also directly accessible from the outside, via a URL.
The private and external paths will be the same, if you are using
Local actions. Alternatively Path, Regex, or Global can be used to
specify a different external path for an action.
The ACL module currently only knows to exploit the private namespace. In
the future extensions may be made to support external namespaces as well.
When a path is visited, rules are tested one after the other, with the most
exact rule fitting the path first, and continuing up the path. Testing
continues until a rule explcitly allows or denies access.
pkgsrc changes:
- Adjusting dependencies
Upstream changes:
0.10016 22 Jan 2010
- Move root actions out of applcation class in tests to remove
warnings in the latest Catalyst.
- Add AUTOLOAD method to the default user class so that methods are
delegated down onto the underlieing user object retrieved from
the store (if present)
- Fix typos in documentation (RT#49476)
- Fix compatibilty with Catalyst 5.70 (RT#50466)
- Various documentation improvements
- Fix Realm::Processive's authinfo_mungle option (RT#47106)
* inline: Avoid showing edit links if page editing is disabled. (Sjoerd)
* signinedit: Auto-disable the plugin when all authentication methods
are disabled.
* comments: Fix permalinks for comments using new conflict-free filenames.
* img: Support alignment of images with captions. (Giuseppe Bilotta)
* websetup: Fix utf-8 problems.
* websetup: Fix bug in array change detection.
* linkmap: Simplify and improve browser compatibility by using an
img, not object tag.
* git: The new git-notes feature in git 1.6.6 changes git log output
in a way that broke ikiwiki's parser if notes are added to commits.
* po: Avoid crash when a page is empty.
(security fixes are already by 0.11.5pl1nb1 in pkgsrc)
Trac-0.11.6.ja1 (Jan 24, 2010)
* Merge Trac-0.11.6
* Apply patch
- trac:changeset:8997
Trac 0.11.6 (November 28, 2009)
http://svn.edgewall.org/repos/trac/tags/trac-0.11.6
Trac 0.11.6 contains two security fixes and a number of bug fixes,
performance improvements and minor enhancements. The following list
contains only a few highlights:
Security fixes:
* Fixed the policy checks in report results when using alternate formats.
* Added a check for the "raw" role that is missing in docutils < 0.6.
Performance improvements:
* Re-enabled connection pooling with SQLite (#3446).
* Added caching of configuration options (#8510).
Bug fixes:
* Fixed the "database is locked" issue with SQLite (#3446, #8468).
* Deprecated SQLite 2.x support (#8625).
* Fixed hanlding of times in timezones with DST (#8240).
* Avoid corruption of trac.ini during write (#8623).
* Improved support for revision ranges in revision log view (#8349)
0.999914) in the NetBSD Packages Collection.
Mojo provides a minimal interface between web servers and Perl web
frameworks. Also included in the distribution are two MVC web
frameworks named Mojolicious and Mojolicious::Lite.
4.11 Fri Dec 18 2009: - Balint Szilakszi <szbalint at cpan.org>
- Fixed t/19multi.t for libcurl versions compiled with asyncronous dns resolution.
4.10 Fri Dec 18 2009: - Balint Szilakszi <szbalint at cpan.org>
- Added support for CURLINFO_SLIST in getinfo (patch by claes).
- Merging documentation fixes upstream from the FreeBSD port (thanks Peter).
- Added support for curl_multi_fdset.
indirectly, "configure" checks itself for it
-make "avahi" non-default (because we don't have nss support for it,
and it conflicts with "mdnsd" on NetBSD-current)
pkgsrc changes:
- Adding license definition
- Adjusting dependencies
- Adjusting module type
Upstream changes:
1.06 2010-01-09 19:21:00
- Added $body->cleanup(1) flag to enable auto-deletion of temporary
files during DESTROY. (Vany Serezhkin)
- Fixed parsing of multipart bodies with boundaries that contain
commas.
(Tomas Doran, http://rt.cpan.org/Public/Bug/Display.html?id=41407)
- Dropped YAML, we now use Perl as a serialization format in our
tests. We call this PAML ;)
Upstream changes:
Version 0.68 -- 31 Dec 2009 <mst@shadowcat.co.uk> Matt S Trout
o No changes since the previous development release.
Version 0.67_01 -- 20 Dec 2009 <mst@shadowcat.co.uk> Matt S Trout
o Add FILENO method which returns a defined but invalid value to
placate things such as IPC::Run which call fileno to check if a
filehandle is open.
Closes bugs:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=544540http://rt.cpan.org/Public/Bug/Display.html?id=50972
Removes need for upstream patch in OpenBSD <bobtfish@bobtfish.net>
o Call the fcgi lib's attach/detach <robs@fastcgi.com>
pkgsrc changes:
- Adjusting dependencies according to META.yml
Upstream changes:
1.44 Jan 4, 2010
[ ENHANCEMENTS ]
- Use Log::Any to log various events, such as the start and end of each
request and each component call.
- Add $m->log, allowing easy logging to a component-specific namespace.
- Fix use of CHI when no data directory is specified.
1.43 Dec 25, 2009
[ BUG FIXES ]
- If a component was located in a patch with spaces, the feature which
referred to errors by their source file line number was broken. This could
cause test failures if the package was downloaded into a path with spaces by
CPAN. Reported by Shawn Moore. RT #53072.
- HTML::Entities is no longer an optional dependency. This fixes some issues
with packaged versions of Mason. Reported by Jens Rehsack. RT #48890.
- $m->flush_buffer is now ignored when inside $m->scomp or $m->content. Patch
by Frederic Briere, with extra tests from Ruslan Zakirov. RT #38924.
pkgsrc changes:
- Adjusting module type - use "Module::Install::Bundled" directly
Upstream changes:
5.8003 28 Dec 2009
- Variety of typo fixes
- Fix incorrectness re :Global and :Local
- Update DevelopmentProcess.pod
5.8002 15 Nov 2009
- Update tutorial to match latest prepacked versions in Debian 5
- Add FormHandler branch (with thanks to gshank!)
- Misc cleanup/freshing up of tutorial.
- Fix indenting issue (with thanks to Kiffin Gish)
- Integrate tome fix branch (with thanks to tome!)
- Add a "negative" test to confirm that test02 does not have an admin create link
- Integrate sqlite3 clarification and link by wolfman2000 from tutorial_role_updates branch
- Fix Pod typos in ::Internals (RT#51488)
- Fix Pod typos in the Cookbook (RT#51466)
- Fix a Test::Pod failure and make Debian happier.
- Typo fixes from garu
- Misc minor and/or typo fixes
pkgsrc changes:
- Adjusting dependencies
Upstream changes:
1.26 2010-01-12 03:55:50
- Depend on Catalyst::Plugin::Static::Simple 0.28 to avoid failures
caused by a bug in 0.27.
1.25 2010-01-02 16:13:06
- Update repository metadata after moving from svn to git.
1.24 2009-12-07 23:23:36
- File name for .yml file generated is now correct.
- Fixes for consistent spacing in generated application template.
- Stop requiring generated test files to have a true return value.
- Win32 compatibility fixes:
1) hardcoded 'make' replaced by: $Config{make}||'make'
2) testing executable flags skipped on Win32
- Fix pod to match option names on Catalyst::Script::Server
1.23 2009-12-06 12:22:12
- Fix generated app test to be multi-platform and fix issue with case
for generated files. (Dave Rolsky)
- Fix Test::More version dependency so that subtest works correctly.
- Add a $VERSION to Catalyst::Helper as PAUSE used to pull $VERSION
(i.e. 0.01) out of the app template section and use that, so we now
can't not have a version number here or it makes pause unhappy.
1.22 2009-12-05 07:23:00
- Use MooseX::Emulate::Class::Accessor::Fast so that options
supplied to ->new are put into the hash even if attributes
do not exist for them. This fixes -force recreating application
scripts.
1.21_01 2009-12-01 03:34:23
- Update generated scripts to use the new Catalyst::Script:: classes
available from Catalyst 5.80014_02.
Note: Any applications whos scripts are upgraded will need to depend
on at least this version of Catalyst.
- Change application templates from being inlined in Catalyst::Helper
to being in a share dir making the templates much easier to maintain
and patch.
- Generate new applications with Moose and Moose style components.
- Remove dependency on parent.pm as this has been removed from the generated
application template.
- Turn off deprecated regex component lookup in the config of new
applications.
- Test application generation and helper classes properly.
- Change tests in generated application and components to use the new
done_testing feature rather than having test plans.
- Update required versions of dependencies to ensure the installed versions
won't cause deprecation warnings with the latest Catalyst.
- Exclude root/, t/ and hidden dirs from file change monitoring when
using File::ChangeNotify 0.08+. (dew)
- Updated POD of Module/Install/Catalyst.pm (Karsten Heymann)
- Added debian package building temp files to the list
of ignored files/directories and fix ignore for subversion
checkouts. (Karsten Heymann)
pkgsrc changes:
- Adjusting dependencies
Upstream changes:
0.05 Sun, 29 Nov 2009 17:38:51 +0100
* Depend on a later version of PadWalker to avoid segfaults in the
Catalyst test suite.
pkgsrc changes:
- Adjusting dependencies
- Adjusting module type to use bundled Module::Install
Upstream changes:
0.28 2010-01-04 13:15:00
- Fix issues in debug mode. (RT#53338)
0.27 2010-01-03 14:49:00
- Switch to being a Moose role, removing dependencies on
Class::Data::Inheritable and Class::Accessor (Andrey Kostenko in
RT#51089)
- Make Pod tests mandatory for authors but never run otherwise
- Switch to Test::NoTabs to ensure no tabs, rather than
Test::Perl::Critic
0.26 2009-12-06 12:30:00
- Fix Pod to show less nasty method of assigning config by calling
the config method with parameters, rather than poking around inside
the hash.
- Require newer (>= 0.15) Catalyst::Plugin::SubRequest for subrequest
tests as old versions don't work with new Catalyst (>= 5.80014)
pkgsrc changes:
- Adjusting dependencies
Upstream changes:
5.80018 2010-01-12 22:24:20
Bug fixed:
- Call ->canonical on URI derived from $ENV{REQUEST_URI} to get
paths correctly decoded. This bug was previously hidden by a bug
in HTTP::Request::AsCGI
Documentation:
- Clarify that uri_for_action works on private paths, with example.
Deprecations:
- Saying use Catalyst::Test; (without an application name or () to stop
the importer running is now deprecated and will issue a warning.
You should be saying use Catalyst::Test ();
5.80017 2010-01-10 02:27:29
Documentation:
- Fix docs for ->forward method when passed a class name - this should
be a component name (e.g. View::HTML, not a full class name, like
MyApp::View::HTML).
Bug fixes:
- --daemon and -d options to Catalyst::Script::FastCGI are fixed.
- Fix the debug dump for applications which use Catalyst::Plugin::Session
(RT#52898)
- Fix regression in the case where mod_rewrite is being used to rewrite
requests into a path below your application base introduced with the
%2F related fixes in 5.80014_02.
- Do not crash on SIGHUP if Catalyst::Engine::HTTP->run is not passed the
argv key in the options hash.
- Correctly pass the arguments to Catalyst::Script::Server through to
Catalyst::Engine::HTTP->run so that the server can restart itself
with the correct options on SIGHUP.
- Require new MooseX::MethodAttributes to be compatible with Moose
versions >= 0.93_01
- Require new MooseX::Role::WithOverloading to be compatible with Moose
versions >= 0.93_01
Cleanups:
- Stop suppressing warnings from Class::C3::Adopt::NEXT now that most plugins
have been updated to not use NEXT. If you get warnings then please upgrade
your components or log a bug with the component author if an upgrade is
not available. The Class::C3::Adopt::NEXT documentation contains information
about how to suppress the warnings in your application if you need to.
5.80016 2009-12-11 23:23:33
Bug fixes:
- Fix slurping a file to work correctly with binary on Win32 in the
encoding test controller.
Bug fixes in the new scripts (for applications which have been upgraded):
- Allow --restartdirectory as an option for the Server script, for
backwards compatibility. (Dave Rolsky)
- The --host option for the server script defaulted to localhost, rather
than listening on all interfaces, which was the previous default. (Dave
Rolsky)
- Restore -p option for pid file in the FastCGI server script.
- Fix the script environment variables MYAPP_PORT and MYAPP_RELOAD RT#52604
- Fix aliasing applications under non-root paths with mod_rewrite in
some apache versions where %ENV{SCRIPT_NAME} is set to the real name of
the script, by using $ENV{REDIRECT_URL} which contains the non-rewritten
URI.
- Fix usage display when myapp_create.pl is run with no arguments. RT#52630
New features:
- The __MOP__ hash element is suppressed from being dumped fully
(and instead stringified) when dumping the error screen to be
less packed with information of no use.
Documentation:
- Fix Pod nits (RT#52370)
5.80015 2009-12-02 15:13:54
Bug fixes:
- Fix bug in Catalyst::Engine which would cause a request parsing to end
prematurely in the hypothetical case where calling $engine->read returned
the single character '0'.
- Fix failing tests when combined with new HTTP::Request::AsCGI
Documentation:
- Improved documentation on read and read_chunk methods in Catalyst::Engine.
- Fix reversal of SCRIPT_NAME and PATH_INFO in previously correct nginx
FastCGI documentation introduced in _02.
5.80014_02 2009-12-01 00:55:23
Bug fixes:
- Fix reporting the wrong Content-Length if the response body is an
upgraded string. Strings mean the same thing whether or not they are
upgraded, may get upgraded even after they are encoded, and will
produce the same output either way, but bytes::length returns too big
values for upgraded strings containing characters >127
- Fix t/live_fork.t with bleadperl (RT#52100)
- Set $ENV{PATH_INFO} from $ENV{REQUEST_URI} combined with
$ENV{SCRIPT_NAME} if possible. This is many web servers always fully
decode PATH_INFO including URI reserved characters. This allows us to
tell foo%2cbar from foo%252cbar, and fixes issues with %2F in paths
being incorrectly decoded, resulting in too many path parts (rather
than 1 path part containing a /, on some web servers (at least nginx).
(RT#50082)
- Require new HTTP::Request::AsCGI so that it fully decodes $ENV{PATH_INFO}
in non CGI contexts. (RT#50082)
Refactoring / cleanups:
- NoTabs and Pod tests moved to t/author so that they're not run
(and then skipped) normally.
Documentation:
- Fix Pod nits in Catalyst::Response (RT#51818)
5.80014_01 2009-11-22 20:01:23
Bug fixes:
- Filehandle now forced to binmode in CGI and FastCGI engines. This appears
to correct some UTF-8 issues, but may break people's code which relies
on the old behaviour.
Refactoring / cleanups:
- Plugins which inherit from Catalyst::Controller or Catalyst::Component
are deprecated and now issue warnings.
pkgsrc changes:
- Correcting license
Upstream changes:
1.2 2010-01-12
- Fixed the %ENV concatenation that's broken in 1.1 but wasn't shipped to CPAN (miyagawa)
- REQUEST_URI is trying to replicate as raw values as possible, without being canonicalized (miyagawa)
1.1 2009-12-07
- added test to check that %ENV is preserved after setup is called
- setup now concatenates its environment to %ENV instead of replacing it
1.0 2009-11-30
- Change how PATH_INFO is decoded so that everything is decoded, including
URI reserved characters (RT#50082)
Padre import.
This module attempts to answer, as accurately as it can, one of the nastiest
technical questions there is.
Am I on the internet?
That is, it's a problem that had no clean permanent solution, and for which
you could just keep writing more and more functionality indefinitely,
asymtopically approaching 100% correctness but never reaching it.
And so this module is intended to do as good a job as possible, without
having to resort to asking any human questions (who may well get it wrong
anyway), and limiting itself to a finite amount of programming work and a
reasonable level of memory overhead to load the code.
pkgsrc changes:
- Adjusting dependency of core modules
Upstream changes:
2009-12-30 Release 1.52 - Gisle Aas <gisle@ActiveState.com>
Gisle Aas (7):
Encode::decode('UTF-8',...) with callback implemented in 2.39
%%host%% hack can be removed when URI::_server::as_iri works
Don't croak on IRIs that can't be IDNA encoded
IDNA roundtrip test on wrong variable
Check behaviour when feeded URI constructor Latin-1 chars
Add some test examples from draft-duerst-iri-bis.txt
Need to recognize lower case hex digits as well
django-registratio is a simple application which provides flexible
user registration for Django-based projects. The default setup
implements a fairly common workflow:
1. User signs up for account.
2. User receives an email containing instructions for activating
the account.
3. User activates and begins using the site.
he TYPO3 core team has just released TYPO3 version 4.3.1, which is now
ready for you to download. It is a maintenance release of the current
stable branch 4.3 and contains bugfixes and security fixes.
IMPORTANT: This version includes important security fixes to the TYPO3
core. A security announcement has just been released:
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-001/
For details about the release, see:
http://wiki.typo3.org/index.php/TYPO3_4.3.1
Problem noticed by Bug Hunting via PR#42609.
At the moment, MASTER_SITES is commented out.
Although it is linked from HOMEPAGE, but only have very old version now.
(and tarball from http://pypi.python.org/pypi/urlgrabber is checksum mismatch).
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4405
From release notes at:
http://trac.edgewall.org/browser/tags/trac-0.11.6/RELEASE
November 28, 2009
Trac 0.11.6 contains two security fixes and a number of bug fixes,
performance improvements and minor enhancements.
Changes in 0.11.6
* Fixed the policy checks in report results when using
alternate formats.
* Added a check for the "raw" role that is missing in docutils
< 0.6.
* Re-enabled connection pooling with SQLite (#3446).
* Added caching of configuration options (#8510).
* Fixed the "database is locked" issue with SQLite (#3446,
#8468).
* Deprecated SQLite 2.x support (#8625).
* Fixed hanlding of times in timezones with DST (#8240).
* Avoid corruption of trac.ini during write (#8623).
* Improved support for revision ranges in the revision log
view (#8349)
updating during freeze approved by wiz@
* pagestats: Add show parameter. Closes: #562129
* toc: Add startlevel parameter. (kerravonsen)
* comments: Add a checksum to the name of comment pages, to avoid
merge conflicts when comments are posted to two branches of a site.
* linkmap: Add option to omit disconnected pages from the map.
* inline: Fix bug that limited displayed pages when feedshow was
specified w/o show.
* Fix several places that did not properly handle capitalization of
the discussionpage setting. Specifically, fixes discussion actions
on discussion pages, and unbreaks the opendiscussion plugin.
Updating during the freeze for relevant bugfixes, particularly this last.
It initially existed originally came from PR#27567 for www/apache2.
CVE-2007-3304 parts was added in rev 1.2, then whole patch file was removed in
rev 1.3 as update to apache-2.2.6, because the update contains fix for
CVE-2007-3304 and comments of patch-ab only mentioned about the CVE.
To prevent a recurrence of such a accident, added PR#27567 as comments
for patch-ab.
Changes to squid-3.0.STABLE21 (22 Dec 2009):
- Bug 2830: Clarify where NULL byte is in headers.
- Bug 2778: Linking issues using SunCC
- Bug 2395: FTP errors not displayed
- Bug 2155: Assertion failures on malformed Content-Range response headers
- Fix parsing and a few bugs in ACL time type
- Fix RFC keep-alive compliance on intercepted replies
- Improved security hardening on %nn parser
- Replace several GCC-specific code snippets.
* Add complete Spanish basewiki translation done by Fernando Gonzalez de
Requena.
* Improve javascript onload handling.
* monotone: Deal with format change in version 0.45.
(Thanks, Richard Levitte)
* cvs: Add missing bit to Automator.
* attachment: Fix reversion in attachment sorting by age.
* Fix utf-8 problems in rename, remove, attachment, 404, sourcepage, and
goto.
Updating this leaf during the freeze for the bugfixes.
Approved by wiz@
Feng Office formerly known as OpenGoo is an easy to use Open
Source Web Office.
Manage tasks, documents, contacts, e-mail, calendar, and more...
Manage project progress, track time, and bill your customers.
Access all information from a single and elegant dashboard.
Communicate with co-workers, clients and vendors.
Drupal 6.15, 2009-12-16
----------------------
- Fixed security issues (Cross site scripting), see SA-CORE-2009-009.
- Fixed a variety of other bugs.
other pkgsrc changes:
* Add PKG_DESTDIR_SUPPORT spport.
* Use REPLACE_INTERPRETER.
* Change default.settings.php handling to fix PR pkg/42355.
Drupal 5.21, 2009-12-16
-----------------------
- Fixed a security issue (Cross site scripting), see SA-CORE-2009-009.
- Fixed a variety of small bugs.
While here, switch NetBSD build from sunaudio to OSS emulation.
This greatly improves HTML5 video playback.
(Yes, we ought to fix the busted sunaudio support or PKG_OPTIONalize this.
Perhaps another day.)
Advisories relating to this release:
MFSA 2009-71 GeckoActiveXObject exception messages can be used to
enumerate installed COM objects
MFSA 2009-70 Privilege escalation via chrome window.opener
MFSA 2009-69 Location bar spoofing vulnerabilities
MFSA 2009-68 NTLM reflection vulnerability
MFSA 2009-67 Integer overflow, crash in libtheora video library
MFSA 2009-66 Memory safety fixes in liboggplay media library
MFSA 2009-65 Crashes with evidence of memory corruption (rv:1.9.1.6/ 1.9.0.16)
2009-11-21 Release 5.834
Gisle Aas (4):
Check for sane default_headers argument [RT#50393]
Add $ua->local_address attribute [RT#40912]
Test that generation of boundary works [RT#49396]
Page does not display the "standard" apache listing any more
Ville Skyttä (2):
Remove unneeded executable permissions.
Switch compression/decompression to use the IO::Compress/IO::Uncompress and
Compress::Raw::Zlib family of modules.
Slaven Rezic (1):
lwp-request should use stderr for auth [RT#21620]
2009-11-23 Gisle Aas <gisle@ActiveState.com>
Release 1.51
Fixup a test that was broken on Windows
2009-11-21 Gisle Aas <gisle@ActiveState.com>
Release 1.50
The main news in this release is the initial attempt at providing
support to IRIs. URI objects now support the 'as_iri' and 'ihost'
methods.
Gisle Aas (28):
Added more tests for setting IPv6 addresses using the host method
Document how the host methods deal with IPv6 addresses
A "test case" to start IDNA prototype from
Escape IDNA hostnames
Introduce the as_unicode method
Make as_unicode undo punycode for server URLs
An IRI class might be helpful (RFC 3987)
Must punycode each part of the domain name separately
Include initial private Punycode module
Get URI::_punycode working
punycode of plain ascii should not edit with "-"
Some more tests from RFC 3492
Add private URI::_idna module based on encodings/idna.py
Start using URI::_idna for encoding of URIs
Avoid various use of undef warnings
Fix test affected by IDNA
Keep reference to IDNA::Punycode in the URI::_punycode docs
Ensure upgraded strings as input
Update manifest with the new idna/punycode files
Rename as_unicde to as_iri
draft-duerst-iri-bis-07: The proposed RFC 3987 update
Load Encode when its used
Rename host_unicode as ihost
Add basic iri test
Hack to make as_iri turn A-labels into U-labels
Make as_iri leave escapes not forming valid UTF-8 sequences
Merge branch 'iri'
Don't include RFCs in the cpan tarball
Michael G. Schwern (3):
Fix != overloading to match ==
Note that mailto does not contain a host() and this is not a bug.
Strip brackets off IPv6 hosts [RT#34309]
even when python is enabled, comment out python dependency.
New in version 0.3.0
====================
* WARNING!!! Slight API change!!! see docs
for px_proxy_factory_get_proxies()
* Credentials support (see API change above)
* A complete rewrite of the module manager
* file:// as valid PAC URLs
* Sample Mono application
* Automake 1.11 shaved output
* gnome backend rewrite (now w/o thread issues)
* Test suite base functionality exists
* Many solaris build fixes
* Seamonkey support as JS pacrunner
* Bugfixes
* Compiles for MS Windows using Mingw
Since 1.6-rc
------------
bugfix: Some widgets in the dashboard showed wrong icons when item spanned more than one line.
bugfix: Template subtasks don't keep linked objects.
bugfix: Query error when upgrading from 1.5.3.
bugfix: Missing lang for archived objects in objects' history.
bugfix: Don't allow trashing the owner company.
bugfix: Opengoo stops working if owner company was trashed.
bugfix: When discarding an email, two confirmation prompts pop up.
bugfix: When clicking on print report, on time module, the active workspace should be set as the workspace for the report.
bugfix: Linked "Weblink files" showed a "Download" shortcut instead of an "Open weblink" shortcut.
bigfix: Importing calendar ics file wasn't working.
bugfix: When editing a document, tags were lost.
bugfix: Send email buttons unaligned on some languages.
bugfix: Some contact websites were missing the "http://" in the contacts listing.
bugfix: Fixed detection of autodetect timezone config option.
bugfix: Repeating events a fixed number of times didn't show the last repetition.
bugfix: Changed how quoted text is hidden.
bugfix: Added a tabstop to HTML email composing.
bugfix: Sorting emails by subject sorted by date.
bugfix: Sometimes completed tasks were shown when filtering by "Pending" (completed_by_id was 0).
Since 1.6-beta3
---------------
feature: User config option to hide quoted text added.
feature: Added a cron event to clear tmp folder.
usability: Added an icon for archived objects on the object's view, like there is for trashed objects.
usability: When deleting a company warn about deleting users.
bugfix: Displaying a document in IIS showed "Connection reset error".
bugfix: Tags with accents don't filter correctly on IE.
bugfix: '24 hour' / 'AM-PM' user config option not respected in listings.
bugfix: Add user: billing category is mandatory, it shouldn't be mandatory.
bugfix: Error importing companies when no workspace is selected.
bugfix: If forwarding an email with attachments, saving a draft, and sending the email, an error pops up about not being able to attach.
bugfix: When importing contacts from a vCard file, all contacts with no email were considered as the same contact.
bugfix: Fixed several Errors and warnings logged in log.php.
bugfix: Objects of archived workspaces were not being filtered out.
bugfix: Archived documents and messages were not being filtered out of the Dashboard.
bugfix: Search results were printed in reverse modified date order.
bugfix: Contact birthdays were not being shown in the dashboard calendar.
bugfix: When viewing a custom report, date parameters in conditions were shown as today's date.
Since 1.6-beta2
---------------
usability: Added pagination to the Time module.
usability: Show 'Archived by' in object properties if an object is archived.
usability: Show read/unread status in Dahsboard/View as list.
usability: Warn a user when replying or forwarding an email and a new email arrives at the conversation.
usability: Add the magnifying glass to the email views.
usability: Removed 'Account already being checked' error message.
bugfix: An empty 'Custom properties' fieldset is shown in 'Update profile'.
bugfix: Fix autodetect timezone with DST and enable by default.
bugfix: Check mail doesn't refresh view if an error occurs in one account.
bugfix: Filtering email conversations by tag is not working correctly. It should show a conversation if any one email in it is tagged.
bugfix: If someone replies to an email but changes the subject the email should be put into a new conversation.
bugfix: If you delete the newest email in a conversation, the conversation is no longer listed (when email is shown as conversation).
bugfix: Notifications are not sent when subscribing from 'Modify subscribers'.
bugfix: Put default repetition value for repeating events and tasks.
bugfix: Remove illegal UTF-8 characters before saving an email.
bugfix: Save custom fields when saving an email draft.
bugfix: Sort emails by received date instead of sent date in email listing and in conversation listing (in email view).
bugfix: Value for 'mail_drag_prompt' user config option is not loaded correctly.
bugfix: Wrap HTML emails in a div with CKEditor style.
bugfix: Delete conversation after deleting last email in conversation.
bugfix: An email's quoted reply is deleted when changing 'From' account.
bugfix: Replying to an email, saving as draft, loading the draft and sending the email doesn't add the reply to the conversation.
bugfix: Unauthenticated content warnings over SSL in FF 3.5.
bugfix: User-type custom reports fail to execute.
bugfix: When a file is downloaded it should be marked as read.
bugfix: Wrong initial email filters for new installations.
Since 1.6-beta
--------------
feature: Added an experimental new search mechanism. It can be much slower but finds more results.
usability: Added description to system permissions
usability: CKEditor is shown in user's language
usability: Linked objects section in an object's view has no title telling what it is
bugfix: Check write permissions for file installed_version.php when upgrading
bugfix: CKEditor images should point to the actual image in OpenGoo
bugfix: Contact import from csv does not import contacts if user does not have 'can manage contacts' permission but has write permissions on the workspace.
bugfix: Custom reports can only be printed once in Chrome.
bugfix: Edit comment textbox is too small.
bugfix: Email links are opened on the email's body when showing quoted text.
bugfix: Error 500 when adding a file web link.
bugfix: Forgot password token is always the same.
bugfix: If I click on 'Print' when on 'Time' tab it should print by default 'General Timeslots' or 'All timeslots', not 'Task timeslots'.
bugfix: If you delete a signature with images from the email's body, the images are sent anyway.
bugfix: MySQL Error Message when adding a user and no data has been entered.
bugfix: Removed private milestone options.
bugfix: Search ignores tags on newly uploaded files.
bugfix: Show all linked objects pagination is not working correctly.
bugfix: Show that an email has attachment on search results.
bugfix: Changed all PHP 5.3 deprecated functions for non-depracated alternatives.
bugfix: When printing reports: substitute true/false with yes/no.
bugfix: When user does not have write contact permissions over a workspace, import from csv does not display errors.
bugfix: HTML editor's height is not adjusted correctly when changing format in a new email.
bugfix: Error when creating new user.
bugfix: Error when adding a task.
- Regression Fix: myip ACL not accepted in config
- Bug 2795: acl arp lookups including port
- Bug 2794: ESI parsing fails on FreeBSD
- Bug 2778: fix linking issues using SunCC
- Bug 2724: eCAP build failure unless ICAP enabled
- Bug 2628: Correct default PID location to PREFIX/var/run/squid.pid
- Bug 2617: Performance degradation during processing list of dstdomain ACL's
- Bug 2374: Support ICY / ICEcast / SHOUTcast streaming protocol.
- Fix: 64-bit filesize issue in squidclient POST of large files
- Fix: send correct Connection: header on intercepted replies
- Support libtool 2.x
- ESI libraries libexpat and libxml2 now optional
- ESI support default enabled
- Bump libcap minimum requirement to libcap 2.09+
- ARP / MAC support fixes for IPv6-mode
- Add outstanding IPv6 settings to squid.conf (localnet, localhost)
- ... and many additions to the background testing structure
- ... and very many minor build and code cleanups for non-GCC compilers.
KDE SC 4.3.4 has a number of improvements:
* A bugfix in Plasma's pixmap cache makes the workspace more responsive
* Okular, the document viewer improved stability in certain situations
* Marble, the desktop globe has seen some polish
* Passphrases with non-ASCII characters have been fixed in the KGpg
encryption tool
* meta: Generate meta description tags even when the html scrubber is enabled.
* meta: Allow use of DESCRIPTION in templates to get at the meta
description value. (Thanks, NicolasLimare)
* inline: Use caching of inlined pages to speed up builds of inlines
that include feeds. Speedup of about 25% for small inlines; could
be much larger for inlines of many, or complex pages.
* Added (incomplete) Turkish po file. Closes: #556744 Thanks, Recai Oktas
* date: New plugin that allows inserting date directives that expand
to pretty-printed dates, using the same formatting as used for page
modification date display, etc.
* htmllink: Allow a title attribute to be specified.
* calendar: Add title attributes for all links in the calendars.
* calendar: Fix month wraparound error that broke in December.
pkgsrc changes:
* In the automated setup, recognize CVS as a VCS (found by agc@).
* In MESSAGE, link to <URL:http://ikiwiki.info/setup/> (ditto).
Deprecations:
* WWW::Mechanize::List is gone!
* Use Nokogiri as the default HTML parser (you may switch to Hpricot by using WWW::Mechanize.html_parser =
Hpricot)
See full list of changes since 0.7.5:
http://mechanize.rubyforge.org/mechanize/CHANGELOG_rdoc.html
Changes since 1.0.0:
* Bump remainder of rack.versions.
* Support the pure Ruby FCGI implementation.
* Fix for form names containing "=": split first then unescape components
* Fixes the handling of the filename parameter with semicolons in names.
* Add anchor to nested params parsing regexp to prevent stack overflows
* Use more compatible gzip write api instead of "<<".
* Make sure that Reloader doesn't break when executed via ruby -e
* Make sure WEBrick respects the :Host option
* Many Ruby 1.9 fixes.
Patron is a Ruby HTTP client library based on libcurl. It does not try
to expose the full "power" (read complexity) of libcurl but instead
tries to provide a sane API while taking advantage of libcurl under
the hood.
vulnerability in ruby-actionpack.
Major changes:
- Improved compatibility with Ruby 1.9
- RailsXss plugin availability
- Fixes for the Nokogiri backend for XmlMini
Geeklog 1.6.1
New Features and Improvements
* Geeklog now lets you enter meta descriptions and meta keywords for the main
page, for stories, topics, static pages, and polls. Please note that these
meta tags may not be used by some search engines.
* You can now have one featured story per topic (for stories set to "Show
only in Topic").
* New autotags now allow you to embed polls in stories and everywhere else
where autotags are allowed.
* The Migrate option in the install script can now also be applied to an
existing database (i.e. you don't need to import a database dump to update
your URLs and paths).
* The Database Backup admin panel now includes options to optimize the
database and convert tables to InnoDB (MySQL only).
* Improved timezone support and let users actually set their own timezone.
* Minor security enhancements:
+ "Important" cookies (like the session cookies) are now created with the
HttpOnly flag set. This will help avoid some XSS attacks, provided your
browser supports this flag.
+ Template errors will now trigger the standard error handler instead of
exposing the template path.
+ Fixed inclusion protection for some of the Spam-X class files.
Please also see the list of theme changes.
Bugfixes
* Fixed automatic closing of stories for comments after a certain amount of
days. If you need to re-open comments on stories that were closed due to
this bug, you can use this SQL request:
UPDATE gl_stories SET commentcode = 0, comment_expire = 0 WHERE commentcode
= 1;
* The comment speed limit was being ignored.
* Fixed a bug in the Group Editor that didn't let you add groups to other
groups (this problem was only introduced in Geeklog 1.6.0).
* The admin group for the Static Pages plugin was created with a wrong name
in Geeklog 1.6.0 (fresh installs only).
* Several tweaks and minor fixes (e.g. compatibility with PHP 4) in the
search.
Fri Nov 20 03:34:19 GMT 2009 - surfraw 2.2.6
* New elvi:
+ by Sumant Oemrawsingh:
* cliki - search the common lisp wiki.
* l1sp - search lisp documentation.
* mathworld - search Wolfram MathWorld.
* mininova - search mininova for torrents.
* youtube - search youtube for videos.
+ by fittabile@lifegate.it:
* acronym - find acronyms
* gcache - search google cache.
+ by Nick White:
* genbugs - search gentoo bug tracker
+ by Ian Beckwith:
* debpkghome - view home page of a debian package.
* debvcsbrowse - browse vcs of a debian package
* rpmsearch - search for packages in rpm-based distros.
* finkpkg - search Fink packages.
* macports - search macports packages.
* Move config files to follow XDG basedir spec
This means that if your global config was in /etc/surfraw.conf
it is now in /etc/xdg/surfraw/conf, and local config is
now in $HOME/.config/surfraw/conf. The same applies to bookmarks.
See README for details on configuring config locations, and
http://standards.freedesktop.org/basedir-spec/basedir-spec-0.6.html
for the gory details. The old locations are still supported for
backwards-compatibility.
* Support per-user elvi in $HOME/.config/surfraw/elvi/
Patch by James Rowe, idea by Sumant Oemrawsingh.
* Added -o | -o=FILE option, to fetch URL and dump to
stdout or FILE.
* Modified elvi:
+ freebsd: new options -psearch=TYPE -psection=SEC
to conduct a search of type TYPE in section SEC of ports.
+ netbsd: new option -ps to search ports
+ openbsd: new option -ps to search ports
+ debsec: fixed (Thanks to Moritz Muehlenhoff, for this
and all his other work).
+ cia: fixed.
* Added examples/uzbl_load_url_from_surfraw, to integrate surfraw
with uzbl (uzbl.org), thanks to Sumant Oemrawsingh.
spz), and un-modify SUBST targets mistakenly committed in previous.
Should fix build where GNU sed wasn't available, and otherwise result
in no change to the binary package.
pkgsrc changes:
- Adding license definition
- MIME::Base is included in perl core in high enough version
Upstream changes:
0.08 Do 29. Okt 22:09:12 CET 2009
- added LWP::Debug to dependencies...
0.07 Di 27. Okt 20:51:50 CET 2009
- fixed <https://rt.cpan.org/Public/Bug/Display.html?id=50881>
Thanks to Adam Sjogren.
pkgsrc changes:
- adjusting license definition
- adjusting dependency to Test::More (0.72 is in core, 0.62 is required)
Upstream changes:
0.11 Tue Nov 10 14:14:17 EST 2009
No code changes; add Win32::Event dep for windows platforms
Upstream changes:
0.13 Fri Oct 9 15:01:07 EDT 2009
* Better cleanup temp files after tests
* No longer add a double / in the path when testing for index.html
* Better support for sending custom HTTP statuses in $m->abort
pkgsrc changes:
- Added license definition
- Removed test patch (test runs fine without)
Upstream changes:
2.2 Thu 1 Oct 2009
- Moved Lite.pm into lib directory
- Reversed the Changes file order to reverse chronological
- Moved to Makefile.PL to Module::Install to autodetect more things
- Add no_index entries for the test data
- Remove reliable on (partially) dead website for testing
- Now this module is mature and unlikely to change much, move to
a more stable and less complicated versioning scheme that suffers
less complications in the Perl toolchain. Also, dotted integers
without the use of something like version.pm isn't strictly
allowed.
Upstream changes:
0.29 2009-11-04
- Fix session being deleted when you have a new session after session
expiry when calling session_is_valid method. Tests for this.
- Allow ->session to be used as a setter method so that you can say
->session( key => $value );
0.28 2009-10-29
- Fix session fixation test with LWP 5.833 by calling $cookie_jar->set_cookie
rather than manually stuffing the cookie in the request.
pkgsrc changes:
- add license definition (perl license)
- move dependecy to Test::Exception to BUILD_DEPENDS (required for
testing only)
Upstream changes:
0.08 2009-11-19
- repackaged with a new version of Module::Install
pkgsrc changes:
- Adjusting dependencies
Upstream changes:
5.80014 2009-11-21 02:51:14
Bug fixes:
- Require MooseX::MethodAttributes 0.17. This in turn requires new
MooseX::Types to stop warnings in Moose 0.91, and correctly supports
role combination of roles containing attributed methods.
- Catalyst::Dispatcher::dispatch_types no longer throws deprecated warnings
as there is no recommended alternative.
- Improved the suggested fix warning when component resolution uses regex
fallback for fully qualified component names.
- Catalyst::Test::local_request sets ->request on the response.
- Log flush moved to the end of setup so that roles and plugins which
hook setup_finalize can log things and have them appear in application
startup, rather than with the first hit.
- Require a newer version of LWP to avoid failing tests.
- Stop warnings when actions are forwarded to during dispatch.
- Remove warnings for using Catalyst::Dispatcher->dispatch_types as this is a
valid method to publicly call on the dispatcher.
- Args ($c->request->args) and CaptureArgs ($c->request->captrues)
passed to $c->uri_for with an action object ($c->action) will now
correctly round-trip when args or captures contain / as it is now
correctly uri encoded to %2F.
Documentation:
- Document no-args call to $c->uri_for.
- Document all top level application configuration parameters.
- Clarify how to fix actions in your application class (which is
deprecated and causes warnings).
- Pod fixes for ContextClosure.
- Fix documentation for go/visit to reference captures and arguments
in the correct order.
- Update $c->forward and $c->state documentation to address scalar
context.
- Pod fix in Catalyst::Request (RT#51490)
- Pod fixes to refer to ::Controller:: rather than ::C:: as the latter
is deprecated (RT#51489)
New features:
- Added disable_component_resolution_regex_fallback config option to
switch off (deprecated) regex fallback for component resolution.
- Added an nginx-specific behavior to the FastCGI engine to allow
proper PATH_INFO and SCRIPT_NAME processing for non-root applications
- Enable Catalyst::Utils::home() to find home within Dist::Zilla built
distributions
- Added the Catalyst::Exception::Interface role defining the interface
exception classes need to implement.
- Added Catalyst::Exception::Basic as a basic implementation of
Catalyst::Exception::Interface and made the existing exception classes
use it.
Refactoring / cleanups:
- Remove documentation for the case_sensitive setting
- Warning is now emitted at application startup if the case_sensitive
setting is turned on. This setting is not used by anyone, not
believed to be useful and adds unnecessary complexity to controllers
and the dispatcher. If you are using this setting and have good reasons
why it should stay then you need to be shouting, now.
- Writing to $c->req->body now fails as doing this never makes sense.
changes:
-minor bugfixes
-Re-add grayflag.png since it is actually used
-Document that WebKitGTK+ 1.1.10 built with gcc 4.4 crashes often
-translation updates
pkgsrc note: for me, newer webkit versions are unstable too, unless
javascript is disabled
Upstream changes:
0.31 2009-10-29 19:26:00
- Moved the test actions to their own controller file to silence
warning about actions in the app class being deprecated.
* underlay: Fix example values put in setup file to be array references.
* underlay: Avoid crashing if lists of underlays (or template
directories) are not configured.
* Moved the postscan hook to run on the raw html of a page, before
the template is filled out. This improves the search plugin's
indexing, since it will not include navigational elements from
the page template or sidebar.
* localstyle: New plugin, allows overrding the toplevel local.css
with one that is closer to a page.
* httpauth: Add cgiauthurl setting that can be used to do http basic
auth only when ikiwiki needs authentication, rather than for any
access to the cgi/wiki.
* inline: Do not generated feeds for nested inlines.
* inline: Allow direct inclusion of non-page files in raw mode.
* inline: Fix display of all pages when archive=yes or show=0 are used.
changes:
--T. is now for non-blocking uploading from stdin
-SYST handling on FTP for OS/400 FTP server cases
-libcurl refuses to read a single HTTP header longer than 100K
-added the --crlfile option to curl
+bugfices
pkgsrc changes:
- Adding license definition
- Adjusting dependencies according to META.yml
Upstream changes:
1.03 5 Nov 2009 Changed min version of HTML::StripScripts to 1.0.5
pkgsrc changes:
- Adding license definition
Upstream changes:
1.05 5 Nov 2009 Fixed bug where 'false' but valid content was being ignored,
eg "<i>0</i>" became "<i></i>"
See bug https://rt.cpan.org/Public/Bug/Display.html?id=51116
Thanks to Jim Laney for reporting it
- 2.8.5
* Fix for trackback DOS
* Removal of permalink_structure eval
* Remove some create_function() calls
* Disallow unfiltered uploads by default, even for admins. Enable it again with define('ALLOW_UNFILTERED_UPLOADS', true); in wp-config.php
* Add extra escapes here and there for some backside coverage
* Retire two old importers
* A few small bug fixes
- 2.8.6
* Fixed an XSS vulnerability in Press This
* Fixed issue with sanitizing uploaded file names that can be exploited in certain Apache configurations
Upstream changes:
0.17 Mon Nov 2 13:20:24 2009
fix Gist support harder by using the API rather than scraping (rjbs)
Improve --lang support for Debian (gregoa@debian.org) [rt.cpan.org #47911]
0.16 Fri Oct 16 14:32:09 2009
Fix Gist support (ckuskie@sterling.net) [rt.cpan.org #50500]
Add --lang support to Debian (gregoa@debian.org) [rt.cpan.org #47911]
This tool provides code to load WSGI applications and servers from URIs; these
URIs can refer to Python Eggs for INI-style configuration files. Paste Script
provides commands to serve applications based on this configuration file.
-----
* In :mod:`paste.proxy`, added some more headers that are disallowed
in WSGI (e.g., Keep-Alive). Send Content-Length. Also fix the
missing query string when using :class:`paste.proxy.Proxy`
(:class:`paste.proxy.TransparentProxy` already worked).
* Make :mod:`paste.debug.prints` work with Google App Engine.
* Make ``environ['wsgi.input']`` with :mod:`paste.httpserver` only
have a ``seek`` method if it is wrapping something with a seek
method (which usually it is not).
* In :mod:`paste.httpserver` re-raise KeyboardInterrupt in worker
threads.
* Added support for the ``HttpOnly`` Cookie property to
:mod:`paste.wsgiwrappers`
* Added :func:`paste.reloader.add_file_callback`, which lets you watch
files based on a callback.
* Quiet Python 2.6 deprecation warnings.
* Fix :mod:`paste.auth.cookie` generating bad headers.
* Added :class:`paste.reloader.JythonMonitor` for an experimental,
optimized reloader on Jython.
mod_cband - A per-user, per-virtualhost and per-destination bandwidth
limiter for the Apache HTTP Server Version 2
mod_cband is an Apache 2 module provided to solve the problem of limiting
users' and virtualhosts' bandwidth usage. The current versions can set
virtualhosts' and users' bandwidth quotas, maximal download speed (like in
mod_bandwidth), requests-per-second speed and the maximal number of
simultanous IP connections (like in mod_limitipconn).
pkgsrc changes:
- assign devel/xulrunner maintainership to tnn@
- mozilla-common.mk: work around gcc __thread support misdetection on NetBSD
- separate distinfo related stuff into dist.mk for sharing with nss & nspr
"topcrash" bugs fixed:
468562 "ASSERTION: Inserting multiple children without flushing"
521750 Put a runtime NS_IsMainThread check in nsCycleCollector::Suspect2 ...
524462 startup crash [@ gfxWindowsFontGroup::WhichFontSupportsChar(nsTAr ...
525326 Crashes in gif decoder [@ xul.dll@0x348945][@ xul.dll@0x348864][@ ...
525276 crashes [@ nsDocument::RegisterNamedItems(nsIContent*)]
KDE 4.3.3 has a number of improvements that will make your life just a
little bit better. Some of KWin's effects have been smoothed and freed
of visual glitches, JuK should now be more stable, KDE PIM has seen its
share of improvements while in the back-rooms of KDE, the developers are
working hard on porting all applications to the new Akonadi storage and
cache.
* po: Fix breakage caused by changes to render code.
* mdwn: Avoid trying to use multimarkdown if it is not installed.
* moderatedcomments: New plugin to allow comment moderation w/o relying
on blogspam.net.
* When redirecting to a page, ie, after editing, ensure that the
url is uri-encoded. Most browsers other than MSIE don't care, but it's
the right thing to do.
* Add a spec file to allow building rpm from the source package.
* google: Pass the whole wiki url to google, not just the domain,
so that search works correctly for wikis that are located in
subdirectories of domains.
NetBSD Packages Collection.
Susy is a semantic CSS framework creator entirely native to Compass.
Susy is an expert at fluid grids in an elastic (or fluid, or fixed)
shell that will never activate that bloody side-scroll bar. Susy
sets your width on the outer element (`container`), adds a `max-width`
of `100%` and builds the rest of your grid in percentages. The
philosophy and technique are based on Natalie Downe's "CSS Systems"
- which introduces difficult math in the service of beautiful
structure. With the power of Compass/Sass, Susy will do that math
for you.
Using simple mixins, columns can be created, suffixed, prefixed,
and nested easily - and always in flexible percentages.
Packages Collection.
StaticMatic is a framework to develop or prototype static websites.
It provides concise and terse templating with the help of Haml and
helpers build on top of it, Sass support, "partials", a live preview
server for development.
Packages Collection.
Compass is a Sass-based Stylesheet Framework that streamlines the
creation and maintainance of CSS. It allows you to mix and match
any of the following CSS frameworks: Compass Core, Blueprint, YUI,
960. Other frameworks can be added relatively easily. It integrates
simply with technologies like Rails, Merb, etc.
Also fix broken DESTDIR support.
Fixes the following security issues:
MFSA 2009-64 Crashes with evidence of memory corruption (rv:1.9.1.4/ 1.9.0.15)
MFSA 2009-63 Upgrade media libraries to fix memory safety bugs
MFSA 2009-62 Download filename spoofing with RTL override
MFSA 2009-61 Cross-origin data theft through document.getSelection()
MFSA 2009-59 Heap buffer overflow in string to number conversion
MFSA 2009-57 Chrome privilege escalation in XPCVariant::VariantDataToJS()
MFSA 2009-56 Heap buffer overflow in GIF color map parser
MFSA 2009-55 Crash in proxy auto-configuration regexp parsing
MFSA 2009-54 Crash with recursive web-worker calls
MFSA 2009-53 Local downloaded file tampering
MFSA 2009-52 Form history vulnerable to stealing
