devel/patch: security fixes #33

AttilaFueloep · 2018-10-18T04:42:24Z

Fixes CVE-2018-6951, CVE-2018-6952 and CVE-2018-1000156.

iamleot · 2018-10-18T08:09:27Z

Hello Attila, Attila Fülöp writes:

Fixes CVE-2018-6951, CVE-2018-6952 and CVE-2018-1000156. You can view, comment on, or merge this pull request online at: #33 -- Commit Summary -- * devel/patch: security fixes -- File Changes -- M devel/patch/Makefile (8) M devel/patch/distinfo (4) A devel/patch/patches/patch-config.hin (20)

Is patch-config.hin really needed? In the configure phase it seems that now all the HAVE_* are checked also without the patch and config.h is then populated properly after the `configure' phase. I think that patch-config.hin is not needed. According `cvs annotate' it seems that the change was part of `devel/patch/Makefile -r1.42' reported via PR pkg/49672 and indeed it seems that it was applied upstream, so we can just remove patch-config.hin.

[...]

Thank you!

bsiegert

Thanks for this! Just one comment regarding the Makefile.am patch.

bsiegert · 2018-10-18T09:41:09Z

devel/patch/patches/patch-tests_Makefile.am

@@ -0,0 +1,14 @@
+$NetBSD$


Will this actually have any effect? It does not look as if you re-run automake. Maybe this change needs to be in Makefile.in?

Doh, of course, sorry for the confusion. Fixed

AttilaFueloep · 2018-10-18T16:26:06Z

@iamleot Good catch. Builds fine on SmartOS without, so I removed the config.hin> patch.

iamleot · 2018-10-18T19:53:10Z

Hello Attila, Attila Fülöp writes:

@iamleot Good catch. Builds fine on SmartOS without, so I removed the `config.hin>` patch.

Thank you! They are now committed!

pkgsrc changes: - Remove custom and no longer needed do-patch target, it was fixed upstream - Minor cosmetic improvements pointed out by pkglint Changes: - Backport patches for CVE-2018-6951, CVE-2018-6952 and CVE-2018-1000156 Patch provided by Attila Fülöp via #33, thanks! Bump PKGREVISION

AttilaFueloep · 2018-10-19T17:36:13Z

It's been a pleasure.

Closing.

AttilaFueloep · 2018-10-19T17:36:24Z

merged

devel/patch: security patches Revisions pulled up: - devel/patch/Makefile 1.45 - devel/patch/distinfo 1.13 - devel/patch/patches/patch-src_pch.c 1.1 - devel/patch/patches/patch-tests_Makefile.in 1.1 - devel/patch/patches/patch-tests_ed-style 1.1 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: leot Date: Thu Oct 18 19:26:16 UTC 2018 Modified Files: pkgsrc/devel/patch: Makefile distinfo Added Files: pkgsrc/devel/patch/patches: patch-src_pch.c patch-tests_Makefile.in patch-tests_ed-style Log Message: patch: Backport patches for several security fixes pkgsrc changes: - Remove custom and no longer needed do-patch target, it was fixed upstream - Minor cosmetic improvements pointed out by pkglint Changes: - Backport patches for CVE-2018-6951, CVE-2018-6952 and CVE-2018-1000156 Patch provided by Attila Fülöp via #33, thanks! Bump PKGREVISION To generate a diff of this commit: cvs rdiff -u -r1.44 -r1.45 pkgsrc/devel/patch/Makefile cvs rdiff -u -r1.12 -r1.13 pkgsrc/devel/patch/distinfo cvs rdiff -u -r0 -r1.1 pkgsrc/devel/patch/patches/patch-src_pch.c \ pkgsrc/devel/patch/patches/patch-tests_Makefile.in \ pkgsrc/devel/patch/patches/patch-tests_ed-style

* pkgsrc change: add "USE_LANGUAGES= # none" line. 1.0.1 (2019-01-16) Merged Pull Requests * Update expeditor config and order gemfile #38 (tas50) 1.0.0 (2019-01-16) Merged Pull Requests * mixlib-archive-tar create corrupt archives on Windows #37 (kenmacleod) * Require Ruby 2.4+ and bump to version 1.0 #36 (lamont-granquist) 0.4.19 (2018-12-12) Merged Pull Requests * Don't ship the readme in the gem artifact #35 (tas50) 0.4.18 (2018-10-15) Merged Pull Requests * Misc tweaks to gemfile / gemspec #32 (tas50) * Add a mingw32 specific gemspec to limit files shipped on *nix #33 (tas50)

Pkgsrc changes: * Track rename of logrotate-default to logrotate.conf * Add a fix so that the log file name is actually passed to the various script hooks(!) logrotate/logrotate#245 Upstream changes: 3.15.0 ====== * timer unit: change trigger fuzz from 12h to 1h (#230) * service unit: only run if /var/log is mounted (#230) * preserve fractional part of timestamps when compressing (#226) * re-indent source code using spaces only (#188) * minage: avoid rounding issue while comparing the amount of seconds (#36) * never remove old log files if rotate -1 is specified (#202) * return non-zero exit status if a config file contains an error (#199) * make copytruncate work with rotate 0 (#191) * warn user if both size and the time interval options are used (#192) * pass rotated log file name as the 2nd argument of the postrotate script when sharedscript is not enabled (#193) * rename logrotate-default to logrotate.conf (#187) 3.14.0 ====== * make configure show support status for SELinux and ACL at the end (#179) * make logrotate build again on FreeBSD (#178) * move wtmp and btmp definitions from logrotate.conf to * separate configuration files in logrotate.d (#168) * print a warning about logrotate doing nothing when -d is used (#165) * do not reject executable config files (#166) * add hardening options to logrotate.service in examples (#143) * fix spurious compressor failure when using su and compress (#169) * keep logrotate version in .tarball-version in release tarballs (#156) * introduce the hourago configuration directive (#159) * ignore empty patterns in tabooext to avoid exclusion of everything (#160) * properly report skipped test cases instead of pretending success 3.13.0 ====== * make distribution tarballs report logrotate version properly (RHBZ#1500264) * make (un)compress work even if stdin and/or stdout are closed (#154) * remove -s from DEFAULT_MAIL_COMMAND and improve its documenation (#152) * uncompress logs before mailing them even if delaycompress is enabled (#151) * handle unlink of a non-existing log file as a warning only (#144) * include compile-time options in the output of logrotate --version (#145) * make logrotate --version print to stdout instead of stderr (#145) * flush write buffers before syncing state file (#148) * specify (un)compress utility explicitly in tests (#137) * enable running tests in parallel (#132) * explicitly map root UID/GID to 0 on Cygwin (#133) * add .dpkg-bak and .dpkg-del to default tabooext list (#134) 3.12.3 ====== * copy and copytruncate directives now work together again * unlink() is no longer preceded by open() unless shred is enabled (#124) * compress and uncompress now take commands from $PATH, too (#122) 3.12.2 ====== * build fixes related to -Werror (#119) and -Werror=format= (#108) * configure --enable-werror now controls use of the -Werror flag (#123) 3.12.1 ====== * Included forgotten build-aux directory in release tarballs. 3.12.0 ====== * Fixed accident removal of rotated files with dateext. (#118) * Line comments inside globs in config files are now skipped. (#109) * logrotate now recovers from a corrupted state file. (#45) * Makefile.legacy has been removed. (#103) * config.h is now generated by autotools. (#102 and #103) * createolddir now creates old directory as unprivileged user. (#114) * weekly rotations are now predictable and configurable. (#93) * Errors in config files are no longer treated as fatal errors. (#81) * configure --with-default-mail-command specifies default mail command. (#100) * Fixed heap buffer overflow when parsing crafted config file. (#33)

devel/patch: security patches Revisions pulled up: - devel/patch/Makefile 1.45 - devel/patch/distinfo 1.13 - devel/patch/patches/patch-src_pch.c 1.1 - devel/patch/patches/patch-tests_Makefile.in 1.1 - devel/patch/patches/patch-tests_ed-style 1.1 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: leot Date: Thu Oct 18 19:26:16 UTC 2018 Modified Files: pkgsrc/devel/patch: Makefile distinfo Added Files: pkgsrc/devel/patch/patches: patch-src_pch.c patch-tests_Makefile.in patch-tests_ed-style Log Message: patch: Backport patches for several security fixes pkgsrc changes: - Remove custom and no longer needed do-patch target, it was fixed upstream - Minor cosmetic improvements pointed out by pkglint Changes: - Backport patches for CVE-2018-6951, CVE-2018-6952 and CVE-2018-1000156 Patch provided by Attila Fülöp via #33, thanks! Bump PKGREVISION To generate a diff of this commit: cvs rdiff -u -r1.44 -r1.45 pkgsrc/devel/patch/Makefile cvs rdiff -u -r1.12 -r1.13 pkgsrc/devel/patch/distinfo cvs rdiff -u -r0 -r1.1 pkgsrc/devel/patch/patches/patch-src_pch.c \ pkgsrc/devel/patch/patches/patch-tests_Makefile.in \ pkgsrc/devel/patch/patches/patch-tests_ed-style

* Readd _OPENBSD_SOURCE explicitly to fix build on NetBSD 9 Changelog: 13 August 2019: Wouter - Fix error message for out of zone data to have more information. 12 August 2019: Wouter - Fix #33: Fix segfault in service of remaining streams on exit. 6 August 2019: Wouter - Tag for 4.2.2rc1. 5 August 2019: Wouter - PR #31: nsd-control: Add missing stdio header. - PR #32: tsig: Fix compilation without HAVE_SSL. - Cleanup tls context on xfrd exit. 31 July 2019: Wouter - Fix #29: SSHFP check NULL pointer dereference. - Fix #30: SSHFP check failure due to missing domain name. - Fix to timeval_add in minievent for remaining second in microseconds. 22 July 2019: Wouter - Set timeout for refetch immediately, only spread load when there are retries. 19 July 2019: Wouter - Set no renegotiation on the SSL context to stop client session renegotiation. 18 July 2019: Wouter - Fix #25: NSD doesn't refresh zones after extended downtime, it refreshes the old zones, with a random delay of a couple of seconds to spread the load. - Fix so that expired zones stay expired when server is down a long time. 17 July 2019: Wouter - Fix that NSD warns for wrong length of the hash in SSHFP records. 15 July 2019: Wouter - PR #23: Fix typo in nsd.conf man-page. 4 July 2019: Wouter - Set version to 4.2.2 in development. - clean memory on exit of nsd-checkzone for memory debug. - Fix #20: CVE-2019-13207 Stack-based Buffer Overflow in the dname_concatenate() function. Reported by Frederic Cambus. It causes the zone parser to crash on a malformed zone file, with assertions enabled, an assertion catches it. - Fix #19: Out-of-bounds read caused by improper validation of array index. Reported by Frederic Cambus. The zone parser fails on type SIG because of mismatched definition with RRSIG. 2 July 2019: Wouter - Tag for 4.2.1rc1 27 June 2019: Wouter - Fix unit test for added options and no dot after zone updated log message. - Fix compile without accept4. 21 June 2019: Wouter - Omit remaining tcp processing if the list is empty. - Fix output of nsd-checkconf -h. 20 June 2019: Wouter - Initialize event structures before event_set, to stop uninitialized values from setting event library lists and assertions, that would sometimes also show after event_del. - Added num.tls and num.tls6 stat counters. - PR #12: send-buffer-size, receive-buffer-size, tcp-reject-overflow options for nsd.conf, from Jeroen Koekkoek. - Do not use symbol from libc, instead use own replacement, if not available, for accept4. - Fix #14, tcp connections have 1/10 to be active and have to work every second, and then they get time to complete during a reload, this is a process that lingers with the old version during a version update. 19 June 2019: Wouter - Fix tls handshake event callback function mistake, reported by Mykhailo Danylenko. 18 June 2019: Wouter - Fix #15: crash in SSL library, initialize variables for TCP access when TLS is configured. 14 June 2019: Wouter - Fix to init event not pointer, in reassignment. 12 June 2019: Wouter - Fix to init event structure for reassignment.

----------------------------------------- version 1.64 at 2019-06-15 09:35:16 +0000 ----------------------------------------- Change: 62eed456ce2092db5521f21adbd8c34b30987c84 Author: Chris 'BinGOs' Williams <[email protected]> Date : 2019-06-15 10:35:16 +0000 Release engineering for 1.64 Change: a7e913e3ffb1228ab7628da44ecfb1b9da59e8b7 Author: Chris 'BinGOs' Williams <[email protected]> Date : 2019-06-15 10:33:43 +0000 Fix GH issue #33 Fails to patch 5.20.3

Update archivers/ruby-minitar to 0.9. ## 0.9 / 2019-09-04 * jtappa added the ability to skip fsync with a new option to Minitar.unpack and Minitar::Input#extract_entry. Provide `:fsync => false` as the last parameter to enable. Merged from a modified version of PR [#37][]. ## 0.8 / 2019-01-05 * inkstak resolved an issue introduced in the fix for [#31][] by allowing spaces to be considered valid characters in strict octal handling. Octal conversion ignores leading spaces. Merged from a slightly modified version of PR [#35][]. * dearblue contributed PR [#32][] providing an explicit call to #bytesize for strings that include multibyte characters. The PR has been modified to be compatible with older versions of Ruby and extend tests. * Akinori MUSHA (knu) contributed PR [#36][] that treats certain badly encoded regular files (with names ending in `/`) as if they were directories on decode. ## 0.7 / 2018-02-19 * Fixed issue [#28][] with a modified version of PR [#29][] covering the security policy and position for Minitar. Thanks so much to ooooooo\_q for the report and an initial patch. Additional information was added as [#30][]. * dearblue contributed PR [#33][] providing a fix for Minitar::Reader when the IO-like object does not have a `#pos` method. * Kevin McDermott contributed PR [#34][] so that an InvalidTarStream is raised if the tar header is not valid, preventing incorrect streaming of files from a non-tarfile. This is a minor breaking change, so the version has been bumped accordingly. * Kazuyoshi Kato contributed PR [#26][] providing support for the GNU tar long filename extension. * Addressed a potential DOS with negative size fields in tar headers ([#31][]). This has been handled in two ways: the size field in a tar header is interpreted as a strict octal value and the Minitar reader will raise an InvalidTarStream if the size ends up being negative anyway.

@taichi-ishitani

Update ruby-docile to 1.3.2. ## v1.3.2 (2019-06-12) - Special thanks (again!) to Taichi Ishitani (@taichi-ishitani): - Fix for DSL object is replaced when #dsl_eval is nested (#33, PR #34)

Changes in 0.93.2: o Lightmaps are now dynamically allocated (from QSS), and BLOCK_WIDTH/HEIGHT raised from 128 to 256. o Fixed several uncheked limits that would crash the Slayer's Testaments mod (sf.net bug #33). o Raised MAXALIASTRIS from 2048 to 4096, so that the Slayer's Testaments mod works. o Fixed 'pants' and 'shirt' types so that those textures load correctly on platforms where char is unsigned by default (sf.net bug #28). o Windows audio: WASAPI-enabled SDL2 dlls function properly now. o Update the third-party libraries. Other fixes/cleanups.

devel/patch: security patches Revisions pulled up: - devel/patch/Makefile 1.45 - devel/patch/distinfo 1.13 - devel/patch/patches/patch-src_pch.c 1.1 - devel/patch/patches/patch-tests_Makefile.in 1.1 - devel/patch/patches/patch-tests_ed-style 1.1 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: leot Date: Thu Oct 18 19:26:16 UTC 2018 Modified Files: pkgsrc/devel/patch: Makefile distinfo Added Files: pkgsrc/devel/patch/patches: patch-src_pch.c patch-tests_Makefile.in patch-tests_ed-style Log Message: patch: Backport patches for several security fixes pkgsrc changes: - Remove custom and no longer needed do-patch target, it was fixed upstream - Minor cosmetic improvements pointed out by pkglint Changes: - Backport patches for CVE-2018-6951, CVE-2018-6952 and CVE-2018-1000156 Patch provided by Attila Fülöp via #33, thanks! Bump PKGREVISION To generate a diff of this commit: cvs rdiff -u -r1.44 -r1.45 pkgsrc/devel/patch/Makefile cvs rdiff -u -r1.12 -r1.13 pkgsrc/devel/patch/distinfo cvs rdiff -u -r0 -r1.1 pkgsrc/devel/patch/patches/patch-src_pch.c \ pkgsrc/devel/patch/patches/patch-tests_Makefile.in \ pkgsrc/devel/patch/patches/patch-tests_ed-style

Changes in 0.93.2: o Lightmaps are now dynamically allocated (from QSS), and BLOCK_WIDTH/HEIGHT raised from 128 to 256. o Fixed several uncheked limits that would crash the Slayer's Testaments mod (sf.net bug #33). o Raised MAXALIASTRIS from 2048 to 4096, so that the Slayer's Testaments mod works. o Fixed 'pants' and 'shirt' types so that those textures load correctly on platforms where char is unsigned by default (sf.net bug #28). o Windows audio: WASAPI-enabled SDL2 dlls function properly now. o Update the third-party libraries. Other fixes/cleanups.

v1.1.0 ====== #32: For read-only zip files, complexity of ``.exists`` and ``joinpath`` is now constant time instead of ``O(n)``, preventing quadratic time in common use-cases and rendering large zip files unusable for Path. Big thanks to Benjy Weinberger for the bug report and contributed fix (#33).

v3.1.0 ====== #47: ``.open`` now raises ``FileNotFoundError`` and ``IsADirectoryError`` when appropriate. v3.0.0 ====== #44: Merge with v1.2.0. v1.2.0 ====== #44: ``zipp.Path.open()`` now supports a compatible signature as ``pathlib.Path.open()``, accepting text (default) or binary modes and soliciting keyword parameters passed through to ``io.TextIOWrapper`` (encoding, newline, etc). The stream is opened in text-mode by default now. ``open`` no longer accepts ``pwd`` as a positional argument and does not accept the ``force_zip64`` parameter at all. This change is a backward-incompatible change for that single function. v2.2.1 ====== #43: Merge with v1.1.1. v1.1.1 ====== #43: Restored performance of implicit dir computation. v2.2.0 ====== #36: Rebuild package with minimum Python version declared both in package metadata and in the python tag. v2.1.0 ====== #32: Merge with v1.1.0. v1.1.0 ====== #32: For read-only zip files, complexity of ``.exists`` and ``joinpath`` is now constant time instead of ``O(n)``, preventing quadratic time in common use-cases and rendering large zip files unusable for Path. Big thanks to Benjy Weinberger for the bug report and contributed fix (#33). v2.0.1 ====== #30: Corrected version inference (from jaraco/skeleton#12). v2.0.0 ====== Require Python 3.6 or later.

0.19 2020-03-03T15:13:37Z - Parallel testing #33

Update ruby-mime-types-data to 3.2020.0425. 3.2020.04.25 / 2020-04-25 * Updated the IANA media registry entires as of release date. * Added several RAW image types based on data from GNOME RAW Thumbnailer. #33 fixing #32. * Added audio/wav. #31. * Added a type for Smarttech notebook files. #30. * Added an alias for audio/m4a files. #29. * Added application/x-ms-dos-executable. #28.

Patchlevel 7b (Oct 2019) NEW FEATURES: o A X color database is not needed, but can be provided. The location of the database can be given at compile time, default /etc/X11/rgb.txt. BUGS FIXED: Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#. Debian bug numbers refer to https://bugs.debian.org/#. o Do not clip objects with line-thickness 0 having arrows. Ticket #53. o Do not segfault on circle/half circle arrowheads with a magnification larger 42. Always draw circle arrowheads with 40 points. Ticket #52. o Allow circles or ellipses with negative radii. Ticket #49. o Avoid "dimension too large error" with tikz output by avoiding coordinate values smaller than -16383. o Make tests (test1.c) work with -fsanitize=address compiler option. o Obey join-style of lines in tikz output. o Pass utf8-strings to svg output, escape some chars (<>&). o Accept inclined boxes and change them to polygons. Fixes ticket #43. o Make tests #27 and #33 work on Mac Darwin, failed due to whitespace formatting differences. From Hanspeter Niederstrasser. Ticket #40. o Use only latex, neither etex or tex, to test tikz output. Usage of etex, after hint from Roland Rosenfeld, closed debian bug 920368. o For tikz output, do not draw arrows on a single point line. o Omit spurious showpage when including jpg-file. From Rainer Buchty. o Correct a few memory leaks and corruptions. See commit d1c54f6. o Change negative color numbers to default color. Fixes ticket #30. o A spline with one point would cause segfault. Fixed, see ticket #29. o Allow one char without newline in the last line of an input file. Fixes ticket #28. o Harden input, mainly against files in which an incomplete object would be created and freeing the object would violate memory, i.e, it may cause segfault. See, e.g., ticket #27. o Properly initalize line storage when reading fig files version 1.3. Would segfault when reading incomplete line and trying to free it. Fixes ticket #26, debian bug 906743. o Silently ignore the hundred-first and more comment lines. This fixes ticket #25 and debian bug 906740. o Use SetFigFont, not SetFigFontNFSS in pictex output. Fixes https://bugs.launchpad.net/ubuntu/+source/transfig/+bug/1359485 . o Accept blanks in color names (e.g., fig2dev -L eps -g"Misty Rose"..). o Correct typos in man-pages, debian 30_man_typo.patch. ------------------------------------- Patchlevel 7a (May 2018) NEW FEATURES: o Add option -w, wrap (create stand-alone perl file) for Perl/Tk output. o Distribute the X bitmaps files within fig2dev, no need to install these files. The files were needed for Tk and Perl/Tk output. BUGS FIXED: Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#. o Fix regression whereupon flipped ellipses were not read. Ticket #23. o Distribute i18n files ru_RU.CP1251.ps and uk_UA.KOI8-U.ps. o Make test "survive debian bug #890016" succeed on 32 bit systems. ------------------------------------- Patchlevel 7 (April 2018) OPTION LETTER CHANGES: o Language previous option current option ------------------------------------------------------------ cgm -b dummy -a epic -A scale -d scale eepic -A scale -d scale eepicemu -A scale -d scale gbx -i on|off -v ibmgl -m mag,xoff,yoff -m mag -x xoff -y yoff mp -I file -d file ps -S dummy -o NEW FEATURES: o Print language-specific help text by using fig2dev -L lang -h. o Add option -M, multipage, for MetaPost output language. o Add option -P, pagemode, and -z to choose a pagesize for pdf output. o Add option -W (scaling of figures not possible) for tikz. o Add option -b, border width, for LaTeX output language. o Add option -f for pstex_t and pdftex_t output language. o Add uk_UA and ru_RU encodings for PostScript output. Ticket #12. BUGS FIXED: o Update help text: Output help for dxf and textyl output language, add description of -g option for Tk/Tcl and Perl/Tk output, allow -f option for pstex_t and pdftex_t output language. Debian bug numbers refer to https://bugs.debian.org/#. Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#. o Sanitize input. Do not segfault on malformed input files. Fixes debian bugs 881143, 881144, 881396, 890015, 890016, 882021 and also 882022. o Do not put an %%Orientation: comment into PostScript output. Some viewers would rotate the resulting file, others not. o Fix build on NetBSD, which has a _setmode() function different from _setmode() on Windows. Ticket #17. Also, avoid alloca(). Ticket #16. o tikz output: Omit the semicolon after \pgftext[..]{...};. o Define PostScript patterns with larger tiles, may render better. #13 o Fix build in case libXpm is missing. Ticket #15. o Use netpbm programs instead of ghostscript, to produce smaller files. o Correctly embed eps files with binary preview (epsi, typically found on Microsoft systems). Also, allow to embed ps-files. Fixes debian bug 248807, ticket #8. o For compilation, do not depend on PATH_MAX being defined.

devel/patch: security patches Revisions pulled up: - devel/patch/Makefile 1.45 - devel/patch/distinfo 1.13 - devel/patch/patches/patch-src_pch.c 1.1 - devel/patch/patches/patch-tests_Makefile.in 1.1 - devel/patch/patches/patch-tests_ed-style 1.1 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: leot Date: Thu Oct 18 19:26:16 UTC 2018 Modified Files: pkgsrc/devel/patch: Makefile distinfo Added Files: pkgsrc/devel/patch/patches: patch-src_pch.c patch-tests_Makefile.in patch-tests_ed-style Log Message: patch: Backport patches for several security fixes pkgsrc changes: - Remove custom and no longer needed do-patch target, it was fixed upstream - Minor cosmetic improvements pointed out by pkglint Changes: - Backport patches for CVE-2018-6951, CVE-2018-6952 and CVE-2018-1000156 Patch provided by Attila Fülöp via #33, thanks! Bump PKGREVISION To generate a diff of this commit: cvs rdiff -u -r1.44 -r1.45 pkgsrc/devel/patch/Makefile cvs rdiff -u -r1.12 -r1.13 pkgsrc/devel/patch/distinfo cvs rdiff -u -r0 -r1.1 pkgsrc/devel/patch/patches/patch-src_pch.c \ pkgsrc/devel/patch/patches/patch-tests_Makefile.in \ pkgsrc/devel/patch/patches/patch-tests_ed-style

Update ruby-jekyll-coffeescript to 2.0.0. 2.0 / 2019-09-06 Major Enhancements * Require Ruby 2.4 or greater (#38) * Require Jekyll 4.0 1.2.2 / 2019-03-24 Bug Fixes * Revert jekyll to be just a development_dependency for v1.x.x series. 1.2.1 / 2019-03-23 Bug Fixes * Re-introduce Ruby 2.3 support and test Jekyll 3.7+ (#33) 1.2.0 / 2019-03-22 Development Fixes * Drop support for Ruby < 2.4 * Allow Jekyll v4 (still alpha) * Style: Target Ruby 2.4 (#31)

0.1.91 (2021-04-23) * Land #30, Implement the rc4 wrapper 0.1.92 (2021-07-09) * Land #31, add method to obfuscate string literals * Land #32, fix unit tests 0.1.93 (2021-07-19) * Land #33, Add github actions for tests * Land #35, Add W^X powershell payload templates

devel/patch: security patches Revisions pulled up: - devel/patch/Makefile 1.45 - devel/patch/distinfo 1.13 - devel/patch/patches/patch-src_pch.c 1.1 - devel/patch/patches/patch-tests_Makefile.in 1.1 - devel/patch/patches/patch-tests_ed-style 1.1 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: leot Date: Thu Oct 18 19:26:16 UTC 2018 Modified Files: pkgsrc/devel/patch: Makefile distinfo Added Files: pkgsrc/devel/patch/patches: patch-src_pch.c patch-tests_Makefile.in patch-tests_ed-style Log Message: patch: Backport patches for several security fixes pkgsrc changes: - Remove custom and no longer needed do-patch target, it was fixed upstream - Minor cosmetic improvements pointed out by pkglint Changes: - Backport patches for CVE-2018-6951, CVE-2018-6952 and CVE-2018-1000156 Patch provided by Attila Fülöp via #33, thanks! Bump PKGREVISION To generate a diff of this commit: cvs rdiff -u -r1.44 -r1.45 pkgsrc/devel/patch/Makefile cvs rdiff -u -r1.12 -r1.13 pkgsrc/devel/patch/distinfo cvs rdiff -u -r0 -r1.1 pkgsrc/devel/patch/patches/patch-src_pch.c \ pkgsrc/devel/patch/patches/patch-tests_Makefile.in \ pkgsrc/devel/patch/patches/patch-tests_ed-style

Change log: 4.16.2 ====== - Properly initialize GdkRectangle to prevent crash (Issue #57) 4.16.1 ====== - Revamp the documentation to modernize and uniformize accross components - Fix keyboard navigation when only one item is present (#53) 4.16.0 ====== - Focus must not be required in single click mode (Issue #190) - Remove GLIB_CHECK_VERSION IFDEFs which are obsolete after glib bump - Adjust padding only for vertical item orientation (Issue #48) - bump glib (and gio, gthread, etc) to 2.50.0 - Fix GCC warning (false negative) - Translation Updates: Basque, Estonian, Norwegian Bokmål, Portuguese (Brazil), Russian, Slovenian, Turkish, Vietnamese 4.15.3 ====== - Re-grab tree selection to prevent rare crash (Issue #46) - Remove unneeded RTL adjustment (Issue #45) - exo-open: Wrap long URI in error dialog (Issue #26) - Avoid truncated text in small zoom levels (#42) - Make ExoIconView reduce selection on a single click (issue #39) - Partially restore 6fcefce9 (Issue #18) - Adds new, foreign README.md - Add check for valid GtkTreeSelection (issue #40) - Reset cursor on drag end in single-click mode - exo-open: Change priority of command line parameters (Fixes #20) - Prevent label from overlapping icon in RTL (Fixes #36) - Prevent "selection_changed" bursts (#37) - Small change to documentation for exo_strdup_strftime - desktop-item-edit: Fix fallback for desktop file type detection - desktop-item-edit: Improve detection of invalid icon names (Fixes #33) - AC_CONFIG_MACRO_DIR → AC_CONFIG_MACRO_DIRS (Closes !9) - Translation Updates: Albanian, Amharic, Arabic, Armenian, Armenian (Armenia), Asturian, Basque, Belarusian, Bengali, Bulgarian, Catalan, Chinese (China), Chinese (Hong Kong), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, Eastern Armenian, English (Australia), English (United Kingdom), Estonian, Finnish, French, Galician, Greek, Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian, Japanese, Kannada, Latvian, Malay, Norwegian Bokmål, Norwegian Nynorsk, Occitan (post 1500), Panjabi (Punjabi), Persian (Iran), Polish, Portuguese (Brazil), Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Telugu, Thai, Turkish, Ukrainian, Urdu, Urdu (Pakistan), Uyghur, Vietnamese, 4.15.2 ====== - icon-chooser-dialog: Allow removing selected icon (Fixes #2) - desktop-item-edit: Fix sensitivity of save button (Fixes #28) - Rework exo_icon_view_scroll_event for overshoot effect (Fixes #25) - Allow resizing the xfce4-settings window smaller (Fixes #19) - Drop exo-csource from exo - Fix build on OpenBSD (!2) - Fix race condition in make install (Fixes #29) - Remove unused perl module requirement - Replace bugzilla occurences with gitlab (Fixes #30) - Translation Updates: Albanian, Chinese (China), Chinese (Hong Kong), Danish, Eastern Armenian, French, German, Hebrew, Japanese, Kazakh, Korean, Lithuanian, Portuguese, Portuguese (Brazil), Russian, Swedish, Turkish 4.15.1 ====== This release transitions several exo components to xfce-settings. Please use with xfce-settings 4.15.1 or later for best results. - Removed binaries: exo-compose-mail, exo-helper-2 - Removed from API: ExoCellRendererEllipsizedText, ExoIconBar, ExoToolbarsEditor, ExoToolbarsEditorDialog, ExoToolbarsModel, ExoToolbarsView, ExoWrapTable, ExoXsessionClient, exo_atomic_inc, exo_atomic_dec Other Updates: - state variable is a GtkStateFlags - Fix previous commit - desktop-item-edit: Fix sensitivity of save button (Bug #16813) - Add basic GitLab pipeline - Attach popup window to toplevel parent (Bug #16768) - Rename Thunar.desktop to thunar.desktop (Bug #16197) - Extend selection on shift+drag (Bug #7526) - Do not cancel selection on shift+drag - Rename Thunar.desktop to thunar.desktop (Bug #16197) - Fix type declaration (Bug #16678) - desktop-item-edit: Use new XfceTitledDialog API - Fix GTimeVal deprecation - Replace deprecated G_INLINE_FUNC macro - Replace deprecated macro - Wrong keyboard navigation after using rubberband in exo-icon-view (Bug #16286) - Cursor position in icon view not visible/highlighted when using ctrl + arrows (Bug #12227) - Make sure default applications are properly set in mimeapps.list - Translation Updates: Albanian, Amharic, Arabic, Asturian, Basque, Belarusian, Bengali, Catalan, Chinese (Hong Kong), Chinese (Taiwan), Danish, Dutch, Estonian, Greek, Hungarian, Icelandic, Interlingue, Italian, Kannada, Latvian, Lithuanian, Norwegian Bokmål, Norwegian Nynorsk, Occitan (post 1500), Panjabi (Punjabi), Persian (Iran), Portuguese, Romanian, Russian, Slovak, Spanish, Telugu, Turkish, Uighur, Urdu, Urdu (Pakistan), Vietnamese

3.0.3 * Return correct status messages in HTTP2 client (#31)[kazu-yamamoto/http2#31] * Follow changes in Aeson 2 (#32)[kazu-yamamoto/http2#32] * Make sure connection preface is always sent first (#33)[kazu-yamamoto/http2#33] * Avoid empty data (#34)[kazu-yamamoto/http2#34] 3.0.2 * Skip inserting entries that do not fit in the encoding table (#28)[kazu-yamamoto/http2#28]

What's Changed -Refactor IPC codes in #30 -Rewrite UI codes in #31 -Update dependencies, migrate to Rust edition 2021 in d0c0a68 -Change client/device reconnect logic in #33 -Add various UI improvements in #32 Breaking changes -renamed BrowsePlayingContext command to CurrentlyPlayingContextPage What's new -added TopTrackPage command (default binding: g t) and new top track page -added RecentlyPlayedTrackPage command (default binding g r) and new recently played track page

@muschellij2

# 1.2.2 * This version does not add an emoji hash to the output. * The `source` column of the output data frame of `package_info()` (also part of `session_info()`), now contains the full SHA for packages installed from GitHub, instead of only the first seven characters. This makes it easier to use the SHA programmatically. Note that this does not affect formatting and printing, which still use the abbreviated SHA. (@muschellij2, #61). * RStudio Package Manager (RSPM) and other repository sources are now shown in the `source` column, if they set the `Repository` field in `DESCRIPTION`. # 1.2.1 * `package_info()` and `session_info()` now do not fail if the version number of an installed package is invalid. * Better aliases for the list of attached, loaded and installed packages in `package_inf()` and `session_info()`. # 1.2.0 * New function `external_info()`, information about external software. It can be also requested with the new `info` argument of `session_info()` (@llrs). * New function `python_info()`, information about Python configuration. It is automatically included in `session_info()` if the reticulate package is loaded and Python is available. You can also request it manually via the new `info` argument of `session_info()` (#33). * The output of `session_info()` now has an emoji hash, consisting of three emojis. This allows quick comparison of two session infos (#26). * All `*_info()` functions use ANSI colors on systems that support them. In particular, it highlights unusual package versions and sources, and possible package problems (#3). * New `session_diff()` function, to compare two session infos from various sources (#6). * `session_info()` has a new argument named `info`, to select which parts of the session information should be printed. * `session_info()` now has a `to_file` argument, to write the output to a file (#30). * `session_inf()` has a `dependencies` argument now, and passes it to `package_info()`. * `package_info()` and `session_info()` can now list the attached or installed packages, see the `pkgs` argument in the manual for details (#42). * `platform_info()` and `session_info()` now include the Windows build number in the output (#40). * sessioninfo now never wraps the output if the screen is too narrow (#31). * All `*_info()` functions have a `format()` S3 method now. * `platform_info()` and `session_info()` now include the RStudio version if the R session is in RStudio (#29). * The `source` column of the package list is now more informative.

@pverspeelt

Upstream changes: Changes in 0.4-20 (2022-04-29) Remove check for Yahoo Finance cookies because the site no longer responds with a cookie, and that caused the connection attempt to fail. This affected getSymbols(), getDividends(), and getSplits(). Thanks to several users for reporting, and especially to @pverspeelt and @alihru for investigating potential fixes! #358 Update getSymbols.yahooj() for changes to the web page. #312 Add HL() and supporting functions. These are analogues to HLC(), OHLC(), etc.Thanks for Karl Gauvin for the nudge to implement them. Add adjusted close to getSymbols.tiingo() output. Thanks to Ethan Smith for the suggestion and patch! #289 #345 Use a Date index for getSymbols.tiingo() daily data. Thanks to Ethan Smith for the report! #350 Remove unneeded arguments to the getSymbols.tiingo() implementation. Thanks to Ethan Smith for the suggestion and patch! #343 #343 Load dividends and splits data into the correct environment when the user provides a value for the env argument. The previous behavior always loaded the data into the environment the function was called from. Thanks to Stewart Wright for the report and patch! #33 Make getOptionChain() return all the fields that Yahoo Finance provides. Thanks to Adam Childers (@rhizomatican) for the patch! #318 #336 Add orats as a source for getOptionChain(). Thanks to Steve Bronder (@SteveBronder) for the suggestion and implementation! #325 Improve the error message when getSymbols() cannot import data for a symbol because the symbol is not valid or does not have historical data. Thanks to Peter Carl for the report. #333 Fix the getMetals() example in the documentation. The example section previously had an example of getFX(). Thanks to Gerhard Nachtmann for the report and patch! #330 Fix getQuote() so it returns data when the ticker symbol contains an “&”. Thanks to @pankaj3009 for the report! #324 Fix addMACD() when col is specified. Thanks to @nvalueanalytics for the report! #321 Changes in 0.4-18 (2020-11-29) Fix issues handling https:// in getSymbols.yahooj(). Thanks to @Lobo1981 and @tchevri for the reports and @ethanbsmith for the suggestion to move from XML to xml2. #310 #312 Fix getSymbols.yahoo(), getDividends(), and getSplits() so they all handle download errors and retry again. Thanks for @helgasoft for the report on getSymbols.yahoo() and @msfsalla for the report on getDividends() and getSplits(). #307 #314 Add implied volatility and last trade date to getOptionChain() output. Thanks to @hd2581 and @romanlelek for the reports. And thanks to @rjvelasquezm for noticing the error when lastTradeDate is NULL. #224 #304 Fix getOptionChain() to throw a warning and return NULL for every expiry that doesn’t have data. #299 Add “Defaults” handling to getQuote() and getQuote.yahoo(). Thanks to @ethanbsmith for the report. #291 Add Bid and Ask fields to the output from getQuote(). Thanks to @jrburl for the report and PR. #302 Fix “Defaults” to handle unexported function (e.g. getQuote.av(). Thanks to @helgasoft for the report. #316 importDefaults() doesn’t call get() on vector with length > 1. Thanks to Kurt Hornik for the report. #319 Changes in 0.4-17 (2020-03-31) chartTheme() now works when quantmod is not attached. Thanks to Kurt Hornik for the report. Changes in 0.4-16 (2020-03-08) Remove disk I/O from getSymbols() and getQuote(). This avoids any disk contention, and makes the implementation pattern more consistent with other functions that import data. Thanks to Ethan Smith suggestion and PR. #280 #281 Make getQuote() robust to symbols without data, so it does not error if one or more symbols are not found. Also return quotes in the same order as the ‘Symbols’ argument. Thanks to Ethan Smith feature request and PR. #279 #282 #288 Handle semicolon-delimited symbol string handling to main getQuote() function. This makes getQuote() consistent with getSymbols(). Thanks to Ethan Smith suggestion and PR. #284 #285 Fix ex-dividend and pay date mapping. getQuote() returned the dividend pay date labeled as the ex-dividend date. Thanks to @matiasandina for the report. #287 Fix Yahoo Finance split ratio. The delimiter changed from “/” to “:”. For example, a 2-for-1 split was 1/2 but is now “2:1”. Thanks to @helgasoft for the report. #292 Error messages from getQuote.alphavantage() and getQuote.tiingo() no longer contain the API key when symbols can’t be found. #286 Fix getQuote.alphavantage() by replacing the defunct batch quote request with a loop over the single quote request. Thanks to @helgasoft for the report and patch. #296 Update getOptionChain() to handle empty volume or open interest Thank to @jrburl for the report and PR. #299 #300

Change log: 1.5.4 ====== - Update configure.ac.in syntax - Fix #53: taskmanager translations - Translation Updates: Albanian, Basque, Belarusian, Bulgarian, Catalan, Chinese (China), Chinese (Taiwan), Czech, Danish, Dutch, Estonian, French, Galician, German, Greek, Hebrew, Indonesian, Italian, Japanese, Kazakh, Korean, Lithuanian, Norwegian Bokmål, Polish, Portuguese, Portuguese (Brazil), Russian, Serbian, Slovak, Spanish, Swedish, Thai, Turkish, Ukrainian 1.5.3 ====== - Fix rendering bug (Fixes #44) - Fix rendering bug for swap graph (relates to #44) - Fix bindings related to the "show-legend" setting - Allow to copy full process command line (#33) - Rename Private to Resident Bytes (#7) - Avoid grabbing the filter entry if it is not realized - Fix intltool lock file problem during make distcheck - `uid_name` has been removed from `task` struct - Fix invalid casts for "About" and "Help" (Fixes #43) - Show localized website label - Update COPYING (Issue #49) - Updated copyright year, authors, and project links - Translation Updates: Albanian, Arabic, Armenian (Armenia), Asturian, Azerbaijani, Basque, Belarusian, Bulgarian, Catalan, Chinese (China), Chinese (Hong Kong), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, Eastern Armenian, English (Australia), English (United Kingdom), Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian, Japanese, Kazakh, Korean, Lithuanian, Malay, Norwegian Bokmål, Occitan (post 1500), Persian (Iran), Polish, Portuguese, Portuguese (Brazil), Russian, Serbian, Slovak, Spanish, Swedish, Telugu, Thai, Turkish, Ukrainian, Uyghur

Change log: 0.5.9 (2022-04-01) ===== - New Features: - Add shortcuts plugin (#70, !121) Depends on Libxfce4ui 4.17.5 which is a dev version, so will be excluded at configure time on most systems until Xfce 4.18 is released. - Add search history (!119) - File monitoring: Add an automatic reloading option - Appearance Changes / Minor Improvements: - Move the document modification mark to the close button (#63, !122) - Add mousepad styleclass for easier theming (#33) - Hide search bar by pressing Esc key even when not focused - Search: Escape selection when regex search is enabled - Code Refactoring: - Plugins: Add a skeleton plugin to ease writing of new plugins - Bug Fixes: - Test plugin: Sanitize memory management of sources - Honor GTK_CSD - Filter entries from `accels.scm` on non-detailed action name - i18n: Check for `bind_textdomain_codeset()` - Update Copying (#160, !120) - Session history: Never clear session array on exit (#162) - Fix broken feature "Show menubar temporarily when hidden" - Force encoding when reloading - Force encoding when it has been explicitly set by the user - Do not consider encoding as always user-set in the "Open" dialog - Fix antonym of the word "indent" in preferences dialog (!118) - File monitoring: Try to filter out fake deletions - Add ellipsis to preferences menu entry (!117) - Switch all labels to title case in prefs dialog (!116) - Correctly restore font size after zooming when using system font (#158) - Printing: Enable line wrapping by default (#156) - Fix a warning from GCC static analyzer - Search: Do not delay the search when the text changes - Translation Updates: Albanian, Arabic, Armenian (Armenia), Basque, Belarusian, Bulgarian, Catalan, Chinese (China), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, Eastern Armenian, English (Australia), English (United Kingdom), Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian, Japanese, Kazakh, Korean, Lithuanian, Malay, Norwegian Bokmål, Occitan (post 1500), Persian (Iran), Polish, Portuguese, Portuguese (Brazil), Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish, Ukrainian, Uyghur

2.76 * fix broken TIFF and AVIF support, PR #43 by Paul Howarth * re-enable XBM support (always on) * provide xbm magic support (a hack, for GD::Graph) 2.75 * add experimental support for TIFF and RAQM (with freetype) * improve GD2 tests (GH #42, RT #140856) * also list the unsupported image formats in the GD::Image pod * fix copyRotated pod (it rotates CCW) PR #36 by LorenzoTo * fix GD::Simple->fontMetrics docs and implementation GH #37 by Ben Crowell. fix lineheight calculation according to the docs. You might need to fix your code! * add image methods tiff, webp, heif, avif, and its documentation. * fix the fix for the poly->transform documentation RT #140043 2.74 * add experimental support for WEBP, HEIF and AVIF * document all supported Image formats in the GD::Image lib * added Github actions (for PR's) * fix poly->transform documentation RT #140043 * fix GD,GD2 detection and tests RT #139399 (since libgd 2.3.3) fixed tests by Håkon Hægland. * POD: Remove indirect object constructors from example code snippet (PR #39) * patch from Ben Crowell that fixes incorrect behaviour of GD::Simple->fontMetrics * fix cross-compilation if gdlib.pc has no cflags by Fabrice Fontaine 2.73 * allow --options override the libgd options. Not recommended. See GH #33 and RT #130045

pkgsrc changes: * Update HOMEPAGE since cukes.info is unreachable. * Add "USE_LANGUAGES= # empty". 1.1.0 (2022-05-11) Added * MultiTest.disable_autorun is back again! (#33 #26) 1.0.0 (2022-05-04) Changed * As per #251: renamed History.md to CHANGELOG.md, added contributing message at beginning, and other formatting. (#12 jaysonesmith) Removed * Remove test files from the gem to prevent false-positive with security scanners as reported in #21 * Drop support for ruby < 2.0 (PR#28) * Removed disable_autorun (PR#30 Issue#26)

0.1.29 (2022-03-07) * Land #30, Add 'no_proto' option to wget/curl/lwp-request command stagers 0.1.30 (2022-04-05) * Land #30, Add 'no_proto' option to wget/curl/lwp-request command stagers 0.1.31 (2022-07-01) * Land #32, Add ruby 3.1.1 to test matrix * Land #34, CmdStagerTFTP: Set payload filename; raise if tftphost is not set 0.1.32 (2022-07-11) * Land #35, add cmdstager tests 0.1.33 (2022-07-14) * Land #33, add FtpHttp cmdstager 0.1.34 (2022-07-18) * Land #37, Update spec tests 0.1.35 (2022-7-18) * Land #38, Add missing Rex::Exploitation::ObfuscateJS tests

1.11.0 (2022-08-02) * Support :freeze_template_literals option for configuring whether to add .freeze to template literal strings (casperisfine) (#33) * Support :chain_appends option for chaining appends to the buffer variable (casperisfine, jeremyevans) (#32) * Avoid unnecessary defined? usage on Ruby 3+ when using the :ensure option (jeremyevans)

devel/patch: security patches Revisions pulled up: - devel/patch/Makefile 1.45 - devel/patch/distinfo 1.13 - devel/patch/patches/patch-src_pch.c 1.1 - devel/patch/patches/patch-tests_Makefile.in 1.1 - devel/patch/patches/patch-tests_ed-style 1.1 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: leot Date: Thu Oct 18 19:26:16 UTC 2018 Modified Files: pkgsrc/devel/patch: Makefile distinfo Added Files: pkgsrc/devel/patch/patches: patch-src_pch.c patch-tests_Makefile.in patch-tests_ed-style Log Message: patch: Backport patches for several security fixes pkgsrc changes: - Remove custom and no longer needed do-patch target, it was fixed upstream - Minor cosmetic improvements pointed out by pkglint Changes: - Backport patches for CVE-2018-6951, CVE-2018-6952 and CVE-2018-1000156 Patch provided by Attila Fülöp via #33, thanks! Bump PKGREVISION To generate a diff of this commit: cvs rdiff -u -r1.44 -r1.45 pkgsrc/devel/patch/Makefile cvs rdiff -u -r1.12 -r1.13 pkgsrc/devel/patch/distinfo cvs rdiff -u -r0 -r1.1 pkgsrc/devel/patch/patches/patch-src_pch.c \ pkgsrc/devel/patch/patches/patch-tests_Makefile.in \ pkgsrc/devel/patch/patches/patch-tests_ed-style

Upstream changes: 1.60 2023-02-11 - Fixed a test failure with Perl blead (5.37.x). Reported by Jim Keenan and diagnosed by Yves Orton. GH #33.

@venthur

FeedGenerator 2.1.0 Modernize and improve tests (#32 & #34 — thanks to @venthur) Drop support for Python 3.6 and test on 3.10 & 3.11 (#35 — thanks to @hugovk) Exclude tests_feedgenerator/__pycache__ from distribution (#33 — thanks to @BenSturmfels) FeedGenerator 2.0.0 Add preliminary support for adding images to feeds Update code for Python 3.6+ Drop support for Python 2.7 Fix double subtitles if both description & subtitle are provided FeedGenerator 1.9.2 Use description field as subtitle for Atom feeds, if provided (#23) Update list of explicitly-supported Python versions to 3.6 – 3.9

@0323pin

What's Changed - Add NetBSD by @0323pin in #3 - Migrate from tui-rs to ratatui by @AmmarAbouZor in #4 - settings improvements by @AmmarAbouZor in #13 - [Documentation] Create README Badges by @kevinmatthes in #14 - CI Improvements by @AmmarAbouZor in #15 - Changed: Help popup improvements by @AmmarAbouZor in #17 - Added: Export current journal's content by @AmmarAbouZor in #18 - Increase Version by @AmmarAbouZor in #19 - Fixed setting backend path from CLI by @AmmarAbouZor in #22 - Added: Release CD action by @AmmarAbouZor in #24 - Fixed: Export journal extension by @AmmarAbouZor in #25 - Changed: Enhance render loop by @AmmarAbouZor in #28 - Added: CITATION.cff by @kevinmatthes in #26 - Added: Edit current journal content in external editor by @AmmarAbouZor in #29 - Added: configure CHANGELOG maintenance utilities by @kevinmatthes in #16 - Added: Tabs and scrolling to help popup by @AmmarAbouZor in #32 - Fixed: bugs in fragment creation by @kevinmatthes in #33 - Added: Multi-selection for journals by @AmmarAbouZor in #34 - Changed: bump baptiste0928/cargo-install to v2.1.0 by @kevinmatthes in #36 - [Aeruginous] Create CHANGELOG Fragment by @github-actions in #37 - Added: Export Import functions for multiple journals by @AmmarAbouZor in #39 - [Aeruginous] Create CHANGELOG Fragment by @github-actions in #40 - Fixed: Synchronizing problems with sqlite back-end by @AmmarAbouZor in #41 - [Aeruginous] Create CHANGELOG Fragment by @github-actions in #42 - Changed: improve GHA linting speed dramatically by @kevinmatthes in #43 - [Aeruginous] Create CHANGELOG Fragment by @github-actions in #44 - Addd: Option to Use Git Configured Editor as External editor by @AmmarAbouZor in #45 - [Aeruginous] Create CHANGELOG Fragment by @github-actions in #46 - [Aeruginous] Create Missing CHANGELOG Fragments by @AmmarAbouZor in #48 - Chore: Add dependabot by @AmmarAbouZor in #50 - [Aeruginous] Assemble CHANGELOG by @github-actions in #52

from https://sdl-hercules-390.github.io/html/hercnew.html: Summary of Changes: ------------------- * SECURITY: New "\reply" SCP command to suppress command echoing of passwords (Fish) (#541) * Fix endianness bug in PFPO instruction (#523) * Fix some endianness issues in TRTE, TRTRE, TRTE, TRTRE, TRTE and TRTRE instructions (James Wekel) (#529) * Fix CODEPAGE message corruption in HERCIFC (Bill Lewis) (#525) * Fix some minor z/Arch Facility related bugs (Fish) * Fix BZIP2 API bug in hetlib.c (Fish) (#535) * Fix missing last dump line bug in dasdutil trace (Fish) * Fix crash if "ctc debug" command on unconnected CTCE device (Fish) (#536) * Fix segfault in 370 mode IPL (Bill Lewis) (#538) * Fix to show version and help if no arguments given (Fish) (#540, #548) * Fix incorrect NUMCPU/ARCHLVL/etc handling causing occasional hang (Fish) (#542) * Fix branding SNAFU: "SDL" does NOT mean this Hercules is a "SoftDevLabs" product! (Fish) * Fix bug causing MVT guest to fail (Fish) * Fix Program check detection if PER trace active (Fish) (#560) * New: 'QUITMOUT' command/statement, per user request (Fish) * NEW: "Trace to File" support (Fish) (#33) * New "t+CPU [cpuad]" selective instruction tracing by CPU (Fish) * NEW: Sockdev socket punch support (Fish) (#553) * New 'txt2card' utility (Fish) * Don't enable STHYI/ESSA by default (#531) * Improve PFPO instruction conformance (Fish) * Add single devnum support to CKD Search Key trace command (Fish) * Enhance "t?" command to also show active device tracing (Fish) * Improve CCW tracing (Fish) * Add "ADDFRR" MVS assist (Jay Maynard) (#537) * Better HMC message handling for s390x Linux guests (Fish) (#534) * Document MAKETAPE via README (Fish) * Add support for dasd X'F7' (DSO = Define Subsystem Operation) CCW (Fish) (#547) * DASDLOAD: Increase MAXDSCB and allow cmdline override (Fish) (#566)

@alaendle

0.3.2.1 — Oct 20, 2023 What's Changed Relax doctest boundaries. by @alaendle in #32 GA(deps): Bump actions/checkout from 3 to 4 by @dependabot in #35 Allow doctest-0.22 by @Vekhir in #36 [#29] Support GHC 9.6 by @vrom911 in #33 Support ghc-9.8 by @alaendle in #37 Publish to hackage directly from GitHub by @alaendle in #38 New Contributors @Vekhir made their first contribution in co-log/co-log-core#36 Full Changelog: co-log/co-log-core@v0.3.2.0...v0.3.2.1

Overview of changes in gnome-calculator 45.0.1 * Retagging release Overview of changes in gnome-calculator 45.0 * Search provider performance improvements !154, !155, !156 (Christian Hergert) * Use numeric font instead of monospace #290 (Robert Roth) * Fixed electron-volt unit abbreviation #347 (Robert Roth) * Fixed erroneous Joule unit name #348 (Robert Roth) * Fixed missing build dependency !157 (Jeremy Bicha) Overview of changes in gnome-calculator 45.beta * Fixed variable and function popover reverse typing #335, #320 (Robert Roth) * Better left/right cursor key handling !153 (Seth Falco) * Improved toolbar using Adwaita library !151 (Felipe Kinoshita) * Flatpak build improvements (Robert Roth) Overview of changes in gnome-calculator 45.alpha * Remember window size #328 !146 (Leonard K, Alice Mikhaylenko) * Allow opening Main Menu by pressing F10 !142 !149 (Automeris naranja) * Extend bit-shifting limit #306 !143 (J Sory) * Added new energy units !143 (J Sory) * Added TWD support via Bank of Canada rates #27 !148 (Mário Adriano) * Added legal section for exchange rate source attribution (Robert Roth) * Added United Nations Treasury exchange rate datasource (Robert Roth) * Added Jamaican Dollar currency #291 (Robert Roth) * Added Ukrainian hryvnia currency #278 (Robert Roth) * Added Nigerian Naira currency #142 (Robert Roth) * Changed symbolic icon to C on the clear button #336 (Robert Roth) * Dropped VEF currency support #78 (Robert Roth) * Use new vala-nightly SDK extension for flatpak (Robert Roth) Overview of changes in gnome-calculator 44.beta * Improved factorization !141 (J. Sory) * Number format selection documentation improvements #321 (Robert Roth) * Made builtin function descriptions translatable #323 (Robert Roth) * Fixed display showing 0 on startup #318 (Robert Roth) * Improved button tooltips !132 (sunflowerskater) * Added signed int support to programming mode !110 (Erik Wolf) * i and e constants updated according to ISO 80000-2:2009 !137 (majjejjam) * Help overlay updates !133 (Sabri Ünal) * Added preferences shortcut !129 (Sabri Ünal) * Destroy dialog after clicking cancel #310 (Jaycee Santos) Overview of changes in gnome-calculator 43.0.1 * Fixed appdata versioning (Robert Roth) Overview of changes in gnome-calculator 43.0 * Removed old issue tracker references !128 (Jake Dane) Overview of changes in gnome-calculator 43.rc * Fix crash when entering new function name !124 (Nathaniel Russel) * Fix source view border !121 (Alexander Mikhaylenko) * Flatpak build update !122 (Bartłomiej Piotrowski) * Port about window to libadwaita !119 (Christopher Davis) * Port to libsoup3 !120 (AppleME) Overview of changes in gnome-calculator 43.alpha * Fixed broken undo/redo #266 (Robert Roth) * Make sure variable name definitions work with whitespace too (Robert Roth) * Fix translatable strings !116 (Maximiliano) * Fixed missing implicit multiplication with variable and root #279 (Robert Roth) * meson warning fixes (Robert Roth) Overview of changes in gnome-calculator 42.2 * Fixed incorrect history with bits toggling #281 (Robert Roth) * Fixed crash when typing in variable popover #282 (Robert Roth) * Fixed incorrect libxml usage #283 (Luca Bacci, Robert Roth) Overview of changes in gnome-calculator 42.1 * Fixed broken undo/redo #266 (Robert Roth) * Removed automatic closing brace addition #271 (Robert Roth) * Fixed incorrect percentage symbol precedence handling #236, #275 (Robert Roth) Overview of changes in gnome-calculator 42.rc * Use new gnome post_install script !106 (Bobby Rong) * gcalc build fixes (Daniel Espinoza Ortiz) * Updated screenshots (Christopher Davis) * Set default focus to entry (Robert Roth) Overview of changes in gnome-calculator 42.beta * Fixed build issues with GCI entry controller tests #250 (Robert Roth) * Force LTR in history view #252 (Robert Roth) * programing mode: Force bit digits to be always LTR #258 (Yosef Or Boczko) * Use AdwApplication (Alexander Mikhaylenko) * ui: Fix styles !105 (Alexander Mikhaylenko) Overview of changes in gnome-calculator 42.alpha * build: Support flatpak development builds (Óscar Fernández Díaz) * build: migrated to GTK4 !98 (Cristopher Davis, Robert Roth) * entry: Added currencies completion provider (Robert Roth) * entry: Fixed percentage evaluation error #237 (Robert Roth) * internal: Moved history view from MathDisplay to MathWindow (Robert Roth) * window: set default width for basic and keyboard mode #240 (Robert Roth) * buttons: removed destructive action class from clear button #242 (Robert Roth) * converter: search support in unit selector, separate conversion category selector #108 (Robert Roth) Overview of changes in gnome-calculator 41.0 * Use first translated symbol for conversion with button #219 (Robert Roth) * Appdata includes hardware support information (Adrien Plazas) Overview of changes in gnome-calculator 41.alpha * Adaptive preferences window !85 (Adrien Plazas) * Fixed currency conversion using convert button #216 (Robert Roth) * User interface reworked, adaptive UI !81 (Adrien Plazas) * Enlarged calculator icon in help !82 (Sabri Ünal) * Code cleanup (Robert Roth) * Fixed kilohertz shorthand !87 (scootergrisen) * Fixed donation link !88 (René Genz) * Added support using calculator without currency conversion for privacy !89 (Ray Strode) * Added support for function description of custom functions using @ !90 (Martin Jirku) Overview of changes in gnome-calculator 40.rc * Resize window after switching mode !78 (joshas) * Fixed compilation warnings (Robert Roth) * Support offline currency conversion tests #208 (Robert Roth) * Use official unit on conversion button click #207 (Robert Roth) * Fixed temperature unit typos #211 (Robert Roth) * Ellipsize conversion labels #17 (Robert Roth) * Added Ctrl+Delete shortcut for clearing the current equation #187 (Robert Roth) * Allow multiple decimal points #166. #5 (Robert Roth) * Added Ctrl+O shortcut for degrees symbol (Robert Roth) * Use gtk-sourceview 4.8 !80 (Robert Roth) Overview of changes in gnome-calculator 40.beta * Fixed CI build (Robert Roth) * Fixed issues with initial loading of currencies (Robert Roth) * Rework currency retrieval preparing for currency provider plugins (Robert Roth) * Fixed commandline conversions #33 (Robert Roth) * Added currency conversion tests (Robert Roth) * Added support for frequencies conversion (Dave Hulst) * Added support for converting to and from weeks (Dave Hulst) * Added support for converting to and from centuries and decades (Dave Hulst) * Increase buttons font size #201 (Robert Roth) * Added % button to Advanced mode (Dave Hulst) * Show 4 decimals in converter instead of only two #203 (Robert Roth) * Added style classes to buttons !76 (Dave Hulst) Overview of changes in gnome-calculator 40.alpha * Use libhandy for window and headerbar !69 (Cristopher Davis) * Use C instead of Clr in help !70 (scootergrisen) * Fixed broken currency conversion on first start #199 (Robert Roth) * Removed duplicate word from help #198 (Robert Roth) * Added lbs shortcut for pounds conversion (Robert Roth) * Fixed inconsistent word size (A. M. Roswell) * Removed unused trunc button from programming mode #41 (Robert Roth) * Fixed deprecation warnings * Added Serbian Dinar with fixed rate #49 (Robert Roth) * Added Bangladeshi Taka with fixed rate #191 (A. M. Roswell) * Updated mailing list contact to Discourse (Robert Roth) * Added basic help page for programming mode (A. M. Roswell) * Added insert character code button (A. M. Roswell) * Dim inapplicable bits on word size change #189 (A. M. Roswell) * Make the conversion labels selectable (Robert Roth) * Do not convert on swap #170 (Robert Roth) * Word size changer in programming mode !58 (A. M. Roswell) * Added metric cups conversion unit !53 (Lucy Coleclough) * Fixed astronomical unit conversion !51 (Thomas Nilsson) * Fixed feet-based units name, added mph and kph shortcuts #180 (Robert Roth) * Use shell copy to clipboard action #178 (Robert Roth) * Fixed preferences of angle units !56 (Delton Ding) Overview of changes in gnome-calculator 3.38.0 Overview of changes in gnome-calculator 3.37.92 Overview of changes in gnome-calculator 3.37.90 * Add tooltips for bits in programming mode !46 (Olliver Schinagl) * snap packaging updates (Ken VanDine) * Added link to website in About #155 (Robert Roth) * Added speed conversions !49 (Mathieu Heurtevin) * History view follows preferences #105, #159, #168 (Robert Roth) * Added month as time unit #158 (Robert Roth) * Better help for variables example usage #154 (Robert Roth) * Defined pi variable, added pi button in programming mode #153 (Robert Roth) * CI build fixes (Robert Roth) * Updated app icon !47 (Jakub Steiner) * Fixed bug returning empty string as result #152 (Robert Roth) * Support latex-style multiplication #164 (Robert Roth) * Added support for tau constant #46 (Robert Roth) * Unify constant handling (Robert Roth) * Separate UI files from sources (Robert Roth) * Moved number format selection to separate menu #24 (Robert Roth) * Replaces mode selector shortcuts with Ctrl+Alt (Robert Roth) * Clear answer if editing right before it #59, #161 (Robert Roth) * Moved preferences dialog to UI file (Robert Roth) * Refresh bits panel after calculation #38 (Robert Roth) * Removed past author addresses #174 (Robert Roth) Overview of changes in gnome-calculator 3.36.0 Overview of changes in gnome-calculator 3.35.92 * doc: Don't pass --fatal-warnings to valadoc (Rico Tzschichholz) * Removed obsolete keyboard shortcut #148 (Robert Roth) * help: Update icon for 3.36 (Andre Klapper) Overview of changes in gnome-calculator 3.35.90 * Drop padding around the display !40 (Adrien Plazas) * Updated Keyboard Shortcuts (Sabri Ünal) * Handle Escape and Enter correctly with completion #144 (Robert Roth) * Added F10 for primary menu shortcut #148 (Robert Roth) * Updated app icon !43 (Tobias Bernard) * Added Rack Units to the conversions !37 (Léo Gillot-Lamure) * Fixed freeze on calculating atan(+/-i) #139 (Robert Roth) * Fixed mode shortcuts by removing blocking mnemonics #138 (Robert Roth) * Implemented result history browsing using alt left/right #129 (Robert Roth) * Added translator comments for possible modes as command line arguments !38 (Rafael Fontenelle) Overview of changes in gnome-calculator 3.35.3 * Help updates (Andre Klapper) Overview of changes in gnome-calculator 3.35.2 * List possible modes in commandline help #112 (Robert Roth) * Add square feet unit #132 (Robert Roth) * Base conversion display selectable #123 (Robert Roth) * Created nightly icon (Jakub Steiner) * Snap build updates (Heather Ellsworth) * GCalc library code fixes (Rico Tzschichholz, Daniel Espinoza Ortiz) * Update required meson version (Diego Escalante Urrelo) * Adapt code to changed gtk+-3.0 bindings (Rico Tzschichholz) * Added GCi libary and tests for controllers for widgets (Daniel Espinoza Ortiz) * Solve on = key if input isq not a variable name #22 (Alberto González Palomo) Overview of changes in gnome-calculator 3.33.92 * README updates (Roger) Overview of changes in gnome-calculator 3.33.90 * Flatpak build cleanup (Jordan Petridis) * Debug messages cleanup (Daniel Espinosa Ortiz) Overview of changes in gnome-calculator 3.33.3 * calculator library build fixes (Daniel Espinosa Ortiz) * CI build fixes (Ken VanDine) * Added mnemonics for primary menu items #113 (Robert Roth) * Dropped leading zeros octal prefix #114, #109, #110 (Robert Roth) Overview of changes in gnome-calculator 3.33.2 * Separated calculator library !19 (Daniel Espinosa Ortiz) * Ensure icon is available for shell (Ken VanDine) * Support entering left/right shift with keyboard #98 (Robert Roth) * Fixed CFA conversion rate #102 (Robert Roth) * Remove copy icon from search provider results #103 (Robert Roth) * Do not assume octal base for binary numbers #101 (Robert Roth) * Show thousands separator in unit converter #102 (Robert Roth) * Use currency name instead of display name for conversion #106 (Robert Roth) * Quit warns and closes all windows #51 (Robert Roth) * Avoid normalizing the equation twice in search #104 (Pascal Nowack) * Ignore keypresses while calculating results #47 (Robert Roth) * Only allow one decimal point in numbers #5 (Robert Roth) * Application icon updated in help (Andre Klapper)

[0.9.0] - 2023-11-30 Added - Added support for tracing flows ([#776](fujiapple852/trippy#776)) - Added support for `icmp` extensions ([#33](fujiapple852/trippy#33)) - Added support for `MPLS` label stack class `icmp` extension objects ([#753](fujiapple852/trippy#753)) - Added support for [paris] (https://github.com/libparistraceroute/libparistraceroute) ECMP routing for `IPv6/udp` ([#749](fujiapple852/trippy#749)) - Added `--unprivileged` (`-u`) flag to allow tracing without elevated privileges (macOS only) ([#101](fujiapple852/trippy#101)) - Added `--tui-privacy-max-ttl` flag to hide host and IP details for low ttl hops ([#766](fujiapple852/trippy#766)) - Added `toggle-privacy` (default: `p`) key binding to show or hide private hops ([#823](fujiapple852/trippy#823)) - Added `toggle-flows` (default: `f`) key binding to show or hide tracing flows ([#777](fujiapple852/trippy#777)) - Added `--dns-resolve-all` (`-y`) flag to allow tracing to all IPs resolved from DNS lookup entry ([#743](fujiapple852/trippy#743)) - Added `dot` report mode (`-m dot`) to output hop graph in Graphviz `DOT` format ([#582](fujiapple852/trippy#582)) - Added `flows` report mode (`-m flows`) to output a list of all unique tracing flows ([#770](fujiapple852/trippy#770)) - Added `--icmp-extensions` (`-e`) flag for parsing `IPv4`/`IPv6` `icmp` extensions ([#751](fujiapple852/trippy#751)) - Added `--tui-icmp-extension-mode` flag to control how `icmp` extensions are rendered ([#752](fujiapple852/trippy#752)) - Added `--print-config-template` flag to output a template config file ([#792](fujiapple852/trippy#792)) - Added `--icmp` flag as a shortcut for `--protocol icmp` ([#649](fujiapple852/trippy#649)) - Added `toggle-help-alt` (default: `?`) key binding to show or hide help ([#694](fujiapple852/trippy#694)) - Added panic handing to Tui ([#784](fujiapple852/trippy#784)) - Added official Windows `scoop` package ([#462](fujiapple852/trippy#462)) - Added official Windows `winget` package ([#460](fujiapple852/trippy#460)) - Release `musl` Debian `deb` binary asset ([#568](fujiapple852/trippy#568)) - Release `armv7` Linux binary assets ([#712](fujiapple852/trippy#712)) - Release `aarch64-apple-darwin` (aka macOS Apple Silicon) binary assets ([#801](fujiapple852/trippy#801)) - Added additional Rust Tier 1 and Tier 2 binary assets ([#811](fujiapple852/trippy#811)) Changed - [BREAKING CHANGE] `icmp` extension object data added to `json` and `stream` reports ([#806](fujiapple852/trippy#806)) - [BREAKING CHANGE] IPs field added to `csv` and all tabular reports ([#597](fujiapple852/trippy#597)) - [BREAKING CHANGE] Command line flags `--dns-lookup-as-info` and `--tui-preserve-screen` no longer require a boolean argument ([#708](fujiapple852/trippy#708)) - [BREAKING CHANGE] Default key binding for `ToggleFreeze` changed from `f` to `ctrl+f` ([#785](fujiapple852/trippy#785)) - Always render AS lines in hop details mode ([#825](fujiapple852/trippy#825)) - Expose DNS resolver module as part of `trippy` library ([#754](fujiapple852/trippy#754)) - Replaced unmaintained `tui-rs` crate with `ratatui` crate ([#569](fujiapple852/trippy#569)) Fixed - Reverse DNS lookup not working in reports ([#509](fujiapple852/trippy#509)) - Crash on NetBSD during window resizing ([#276](fujiapple852/trippy#276)) - Protocol mismatch causes tracer panic ([#745](fujiapple852/trippy#745)) - Incorrect row height in Tui hop detail navigation view for hops with no responses ([#765](fujiapple852/trippy#765)) - Unnecessary socket creation in certain tracing modes ([#647](fujiapple852/trippy#647)) - Incorrect byte order in `IPv4` packet length calculation ([#686](fujiapple852/trippy#686))

Upstream changes: 1.1.0 2023-12-11 20:28:26-05:00 America/New_York [ ENHANCEMENTS ] * GH #33: Named routes; add uri_for_route keyword (Sawyer X)

new minor version: 2.10.0 - update dependencies - Methods for configuring color generation: 8ee3a77386 - new cli flag: --generation/-g - new config optional variable: generation - new palettes (filters): a6741f19d6 - darkcomp, darkcomp16 - harddarkcomp, harddarkcomp16 - softdarkcomp, softdarkcomp16 - softlightcomp, softlightcomp16 - lightcomp, lightcomp16 - fixed contrast in softdark 4bfc945091 - backends: - new backend: kmeans algo 80cd0a0a91 - guess format, instead of using ext #32 - template variables: - wallpaper will display a path (normal usage), a theme (when using theme subcommand) or the colorscheme file (when using cs subcommand) ecce329233 - alpha_hex #23 - wallpaper will always display the absolute path #33 - colorspaces: - improved color picking 7a701e368f - remove some inconsistencies 1ea2b886ee - improved sample config generation 004127308e - Introduce new changes from v3.md - rename filter -> palette, in a backwards compatible way 7fa281f2d6 - flag --filter/-f renamed to --palette/-p, in a backwards compatible way (aliasing) - wallust image.png -> wallust run image.png, the first one is still supported (backwards compatible) - added new config syntax, backwards compatible c3a2e00d9e First version of the year, thanks everyone!

0.2.6 * Make list tightness match the reference implementation closer (#150, Michael Howell). This solves the problem where blank lines in the middle of a list are attributed to the list itself instead of the item, making its parent list become spuriously loose. * Fix bug with entities inside link destinations (#149). The bug affects cases like this: [link](\!); the backslash escape was being ignored here. * Commonmark.Entity: export pEntity [API change]. 0.2.5.1 * Replace source with search in list of block tags. This is a spec 0.31 change that was forgotten in the last release. 0.2.5 * Fix HTML comment parser to conform to 0.31.2 spec. * Update spec.txt tests to commonmark-spec 0.31.2. * Match HTML declaration blocks with lowercase letters (Michael Howell). * Specifically track the position where enders end (Michael Howell). 0.2.4.1 * Commonmark.Html: Add aria-hidden, d, and viewBox to allowed attributes list. * Correctly merge list blanks with non-list blanks (#133, Michael Howell). * Do not look for backslashed hard breaks in link titles (#130, Michael Howell). * Work around ghc bug with -K RTS options, to set the stack space properly for tests (#129). See https://gitlab.haskell.org/ghc/ghc/-/issues/10445. * Revert block state completely if lazy line (#126). This fixes an issue with lazily-wrapped footnotes. * Avoid adding trailing newline to list block if it's already there (Michael Howell). This fixes tight/loose classification in a few cases. * Fix incorrectly parsing links with nested [] (Michael Howell).

0.3.21, released 2024-01-18 #34, mark headErr/tailErr as Partial 0.3.20, released 2024-01-14 #34, add headErr, tailErr #33, avoid using head/tail to avoid x-partial

v20.4.0 ======= Features -------- - Replace deprecated ssl.wrap_socket with SSLContext.wrap_socket and update examples in connection.py docs. (#216) v20.3.1 ======= No significant changes. v20.3.0 ======= Features -------- - Added support for SASL login. (#195) Bugfixes -------- - Better handling of escape sequences in message tags. (#205) v20.2.0 ======= Features -------- - Require Python 3.8 or later. v20.1.1 ======= * #213: Pinned against jaraco.text 3.10 due to change in interface. v20.1.0 ======= * #196: In irc.bot, avoid hanging idle when the first connection attempt fails. v20.0.0 ======= * ``SingleServerIRCBot`` no longer accepts ``reconnection_interval`` as a parameter. * Added server support for NOTICE commands. * Require Python 3.7 or later. v19.0.1 ======= * #176: Fix issues with version number reporting. Restored version version number reporting in bot and client. v19.0.0 ======= * ``irc.client`` no longer exposes a ``VERSION`` or ``VERSION_STRING``. To get the version, call ``importlib.metadata.version('irc')`` directly. v18.0.0 ======= * Require Python 3.6 or later. 17.1 ==== * Rely on `importlib_metadata <https://pypi.org/project/importlib_metadata/>`_ for loading version from metadata. Removes implicit dependency on setuptools and pkg_resources. * #158: The AsyncIO server now accepts a connection factory to enable features like SSL and IPv6 support. * #155: ``SimpleIRCClient`` now has a ``dcc`` method for initiating and associating a DCCConnection object with the client. ``DCCConnection.listen`` now accepts a ``address`` parameter. Deprecated ``SimpleIRCClient.dcc_listen`` and ``SimpleIRCClient.dcc_connect`` in favor of the better separation of concerns. Clients should replace:: client.dcc_connect(addr, port, type) client.dcc_listen(type) with:: client.dcc(type).connect(addr, port) client.dcc(type).listen() 17.0 ==== * Removed ``irc.buffer`` module, deprecated in 14.2. * #153: Drop support for Python 3.3 and 2.7. 16.4 ==== * Long Term Service release for Python 2.7. * #149: ``AioConnection.connect`` moved to coroutine, added disconnect handling for AsyncIO. 16.3 ==== * #140: Methods now use 'connection' and 'event' for parameter names. * #135 via #144: Added AsyncIO implementation. 16.2.1 ====== * Package refresh and cleanup. 16.2 ==== * #133: In ``irc.server``, add support for ISON. 16.1 ==== * #131: Add ``Connection.encode`` and ``Connection.transmit_encoding`` to enable encodings other than UTF-8 to be used when transmitting text. 16.0 ==== * Removed deprecated ``execute_*`` methods on ``Connection`` and ``Reactor`` as introduced in 15.0. * Fixed link in README. 15.1.1 ====== * New ``send_items`` method takes star args for simplicity in the syntax and usage. 15.1 ==== * Introduce ``ServerConnection.send_items``, consolidating common behavior across many methods previously calling ``send_raw``. 15.0.6 ====== * Now publish `documentation <https://python-irc.readthedocs.io/>`_ to Read The Docs. 15.0.5 ====== * #119: Handle broken pipe exception in IRCClient _send() (server.py). 15.0.4 ====== * #116: Correct invocation of execute_every. 15.0.3 ====== * #115: Fix AttributeError in ``execute_at`` in scheduling support. 15.0.2 ====== * #113: Use preferred scheduler in the bot implementation. 15.0.1 ====== * Deprecated calls to Connection.execute_* and Reactor.execute_*. Instead, call the equivalently-named methods on the reactor's scheduler. 15.0 ==== * The event scheduling functionality has been decoupled from the client.Reactor object. Now the reactor will construct a Scheduler from the scheduler_class property, which must be an instance of irc.schedule.IScheduler. The ``_on_schedule`` parameter is no longer accepted to the Reactor class. Implementations requiring a signal during scheduling should hook into the ``add`` method of the relevant scheduler class. * Moved the underlying scheduler implementation to `tempora <https://pypi.org/project/tempora>`_, allowing it to be re-used for other purposes. 14.2.2 ====== * Issue #98: Add an ugly hack to force ``build_sphinx`` command to have the requisite libraries to build module documentation. 14.2.1 ====== * Issue #97: Restore ``irc.buffer`` module for compatibility. * Issue #95: Update docs to remove missing or deprecated modules. * Issue #96: Declare Gitter support as a badge in the docs. 14.2 ==== * Moved buffer module to `jaraco.stream <https://pypi.python.org/pypi/jaraco.stream>`_ for use in other packages. 14.1 ==== * ``SingleServerIRCBot`` now accepts a ``recon`` parameter implementing a ReconnectStrategy. The new default strategy is ExponentialBackoff, implementing an exponential backoff with jitter. The ``reconnection_interval`` parameter is now deprecated but retained for compatibility. To customize the minimum time before reconnect, create a custom ExponentialBackoff instance or create another ReconnectStrategy object and pass that as the ``recon`` parameter. The ``reconnection_interval`` parameter will be removed in future versions. * Issue #82: The ``ExponentialBackoff`` implementation now protects from multiple scheduled reconnects, avoiding the issue where reconnect attempts accumulate exponentially when the bot is immediately disconnected by the server. 14.0 ==== * Dropped deprecated constructor ``connection.Factory.from_legacy_params``. Use the natural constructor instead. * Issue #83: ``connection.Factory`` no longer attempts to bind before connect unless a bind address is specified. 13.3.1 ====== * Now remove mode for owners, halfops, and admins when the user is removed from a channel. * Refactored the Channel class implementation for cleaner, less repetitive code. * Expanded tests coverage for Channel class. 13.3 ==== * Issue #75: In ``irc.bot``, add support for tracking admin status (mode 'a') in channels. Use ``channel.is_admin`` or ``channel.admins`` to identify admin users for a channel. * Removed deprecated irc.logging module. 13.2 ==== * Moved hosting to github. 13.1.1 ====== * Issue #67: Fix infinite recursion for ``irc.strings.IRCFoldedCase`` and ``irc.strings.lower``. 13.1 ==== * Issue #64: ISUPPORT PREFIX now retains the order of permissions for each prefix. 13.0 ==== * Updated ``schedule`` module to properly support timezone aware times and use them by default. Clients that rely on the timezone naïve datetimes may restore the old behavior by overriding the ``schedule.now`` and ``schedule.from_timestamp`` functions like so: schedule.from_timestamp = datetime.datetime.fromtimestamp schedule.now = datetime.datetime.now Clients that were previously patching ``schedule.DelayedCommand.now`` will need to instead patch the aforementioned module-global methods. The classmethod technique was a poor interface for effectively controlling timezone awareness, so was likely unused. Please file a ticket with the project for support with your client as needed. 12.4.2 ====== * Bump to jaraco.functools 1.5 to throttler failures in Python 2. 12.4 ==== * Moved ``Throttler`` class to `jaraco.functools <https://bitbucket.org/jaraco/jaraco.functools>`_ 1.4. 12.3 ==== * Pull Request #33: Fix apparent escaping issue with IRCv3 tags. 12.2 ==== * Pull Request #32: Add numeric for WHOX reply. * Issue #62 and Pull Request #34: Add support for tags in message processing and ``Event`` class. 12.1.2 ====== * Issue #59: Fixed broken references to irc.client members. * Issue #60: Fix broken initialization of ``irc.server.IRCClient`` on Python 2. 12.1.1 ====== * Issue #57: Better handling of Python 3 in testbot.py script. 12.1 ==== * Remove changelog from package metadata. 12.0 ==== * Remove dependency on jaraco.util. Instead depend on surgical packages. * Deprecated ``irc.logging`` in favor of ``jaraco.logging``. * Dropped support for Python 3.2.

1.12.2 (2024-04-15) Changelog: * Task: Manage E_DEPRECATED #27 * Task: Remove CVS id that no longer makes sense #30 * Bug: Bug in DB/oci8.php ... oci_fetch_array called with wrong parameters #33 #34 * Bug: Errors raised in DB_storage::toString() if there are multi-column keys, on PHP >= 7 #35 * Bug: sqlite3 back-end incorrectly refers to 'resource' objects #38 #39

@olleolleolle

2.2.1 (2024-04-15) What's Changed * Document "methods" option with its type as a list of Symbols by @olleolleolle in #30 * Update docs reference to RaiseError middleware by @Drowze in #32 * Add Ruby 3.3 to CI matrix by @m-nakamura145 in #33 * Improve README.md about exceptions config by @mi-wada in #35 * Check for Faraday::UploadIO while rewinding by @iMacTia in #37 * Bump actions/checkout from 3 to 4 by @dependabot in #38 New Contributors * @Drowze made their first contribution in #32 * @m-nakamura145 made their first contribution in #33 * @mi-wada made their first contribution in #35 * @dependabot made their first contribution in #38

### 1.8.10 - 15 June 2024 * feature: new "`--output`" option to write to a file instead of standard output (pull request [#90](https://codeberg.org/a-j-wood/pv/pulls/90)) supplied by [xmort](https://codeberg.org/xmort) ### 1.8.9 - 21 April 2024 * feature: new "`--si`" option to display and interpret size suffixes in multiples of 1000 rather than 1024 (pull request [#85](https://codeberg.org/a-j-wood/pv/pulls/85)) supplied by [kevinruddy](https://codeberg.org/kevinruddy) * fix: continue producing progress output when the output is blocking writes ([#34](https://codeberg.org/a-j-wood/pv/issues/34), [#86](https://codeberg.org/a-j-wood/pv/issues/86), [#87](https://codeberg.org/a-j-wood/pv/issues/87)) * fix: honour the _TMPDIR_ / _TMP_ environment variables again, rather than hard-coding "`/tmp`", when using a terminal lock file (originally removed in 1.8.0) ([#88](https://codeberg.org/a-j-wood/pv/issues/88)) * i18n: corrections and missing strings added to French translations (pull request [#83](https://codeberg.org/a-j-wood/pv/pulls/83)) supplied by [Thomas Bertels](https://codeberg.org/tbertels) ### 1.8.5 - 19 November 2023 * fix: corrected percentage formatting so it doesn't jump from 2 to 3 characters wide at 100% ([#80](https://codeberg.org/a-j-wood/pv/issues/80)) * fix: replaced "`--remote`" mechanism, using a temporary file instead of SysV IPC, so it can work reliably even when there are multiple PV instances * fix: corrected compilation failure when without IPC support * security: addressed all issues highlighted by the software auditing tools "`splint`" and "`flawfinder`" (see "`make analyse`") ([#77](https://codeberg.org/a-j-wood/pv/issues/77)) * cleanup: compilation warnings fixed on non-IPC and MacOS systems ### 1.8.0 - 24 September 2023 #### Features * feature: new "`--discard`" option to discard input as if writing to */dev/null* ([#42](https://codeberg.org/a-j-wood/pv/issues/42)) * feature: new "`--error-skip-block`" option to make "`--skip-errors`" skip whole blocks ([#37](https://codeberg.org/a-j-wood/pv/issues/37)) * feature: use `posix_fadvise()` like `cat`(1) does, to improve efficiency ([#39](https://codeberg.org/a-j-wood/pv/issues/39)) * feature: new "`--enable-static`" option to "`configure`" for static builds ([#75](https://codeberg.org/a-j-wood/pv/pull/75)) #### Security * security: with "`--pidfile`", write to a temporary file and rename it into place, to improve security * security: keep self-contained copies of name and format string in PV internal state for memory safety * security: ignore _TMP_ / _TMPDIR_ environment variables when using a terminal lock file #### Fixes * fix: only report errors about missing files when starting to transfer from them, not while calculating size, and behave more like `cat`(1) by skipping them and moving on * fix: auto-calculate total line count with "`--line-mode`" when all inputs are regular files * fix: use `clock_gettime()` in ETA calculation to cope with machine suspend/resume ([#13](https://codeberg.org/a-j-wood/pv/issues/13)) * fix: if "`--width`" or "`--height`" were provided, do not change them when the window size changes ([#36](https://codeberg.org/a-j-wood/pv/issues/36)) * fix: when a file descriptor position in "`--watchfd`" moves backwards, show the rate using the correct prefix ([#41](https://codeberg.org/a-j-wood/pv/issues/41)) * fix: rewrite terminal state save/restore so state is not intermittently garbled on exit when using "`--cursor`" ([#20](https://codeberg.org/a-j-wood/pv/issues/20)), ([#24](https://codeberg.org/a-j-wood/pv/issues/24)) #### Cleanups * cleanup: addressed many potential issues highlighted by the software auditing tools "`splint`" and "`flawfinder`" (see new target "`make analyse`") * cleanup: switched the build system to GNU Automake * cleanup: replaced the test harness with the one native to GNU Automake * cleanup: added a test for terminal width detection to "`make check`" * cleanup: added a test to "`make check`" to ensure that "`make install`" installs everything expected * cleanup: replaced *AC_HEADER_TIOCGWINSZ* with *AC_CHECK_HEADERS(sys/ioctl.h)* for better MacOS compatibility ([#74](https://codeberg.org/a-j-wood/pv/issues/74)) * cleanup: with "`--sync`", call `fsync()` instead of `fdatasync()` on incapable systems ([#73](https://codeberg.org/a-j-wood/pv/issues/73)) * cleanup: the manual is now a static file instead of needing to be built with "`configure`" #### Dropped items * dropped: dropped support for "`--enable-static-nls`" * dropped: removed the Linux Software Map file, as the LSM project appears to be long dead * dropped: will no longer publish to SourceForge as it has a chequered history and is unnecessary * dropped: removed project from GitHub and moved to Codeberg - see "[Give Up GitHub](https://giveupgithub.org/)" #### Other items * licensing change from Artistic 2.0 to GPLv3+ ### 1.7.24 - 30 July 2023 * fix: correct terminal size detection, broken in 1.7.17 by the configuration script rewrite ([#72](https://codeberg.org/a-j-wood/pv/issues/72)) * security: removed *DEBUG* environment variable in debug mode, added "`--debug`" instead * cleanup: added "`make analyse`" to run "`splint`" and "`flawfinder`" on all source files * cleanup: corrected detection of boolean capability * cleanup: word wrapping of "`--help`" output is now multi-byte locale aware * cleanup: adjusted "`indent`" rules to line length of 120 and reformatted code ### 1.7.18 - 28 July 2023 * fix: language file installation had been broken by the configuration script rewrite ### 1.7.17 - 27 July 2023 * feature: new "`--sync`" option to flush cache to disk after every write (related to [#6](https://codeberg.org/a-j-wood/pv/issues/6), to improve accuracy when writing to slow disks) * feature: new "`--direct-io`" option to bypass cache - implements [#29 "Option to enable *O_DIRECT*"](https://codeberg.org/a-j-wood/pv/issues/29) - requested by Romain Kang, Jacek Wielemborek * fix: correct byte prefix size to 2 spaces in rate display, so progress display size remains constant at low transfer rates * cleanup: rewrote `configure.in` as per suggestions in newer "`autoconf`" manuals * cleanup: replaced `header.in` with one generated by "`autoheader`", moving custom logic to a separate header file "`config-aux.h`" * cleanup: added copyright notice to all source files as per GNU standards * cleanup: changed "`--version`" output to conform to GNU standards * cleanup: replaced backticks with `$()` in all shell scripts that did not come from elsewhere, as backticks are deprecated and harder to read * cleanup: improved the output formatting of "`make test`" * cleanup: extended the "`make test`" mechanism to allow certain tests to be skipped on platforms that cannot support them * cleanup: skip the "pipe" test (for *SIGPIPE*) if GNU "`head`" is not available, so that "`make test`" on stock OpenBSD 7.3 works * cleanup: added a lot more tests to "`make test`" * cleanup: replace all calls to `sprintf()` and `snprintf()` with a new wrapper function `pv_snprintf()` to improve security and compatibility * cleanup: replace all calls to `strcat()` with a wrapper `pv_strlcat()` to improve security and compatibility * cleanup: replace all `write()` calls to the terminal with a wrapper `pv_write_retry()` for consistency * cleanup: tidy up and fix compilation warning in "`--watchfd`" code * cleanup: rewrote all local shell scripts to pass analysis by [ShellCheck](https://www.shellcheck.net) ### 1.7.0 - 17 July 2023 * dropped: support for Red Hat Enterprise Linux and its derivatives has been dropped; removed the RPM spec file, and will no longer build binaries * feature: the "`--size`" option now accepts "`@filename`" to use the size of another file (pull request [#57](https://codeberg.org/a-j-wood/pv/pull/57) supplied by [Dave Beckett](https://github.com/dajobe)) * feature: the "`--watchfd`" option is now available on OS X (pull request [#60](https://codeberg.org/a-j-wood/pv/pull/60) supplied by [christoph-zededa](https://github.com/christoph-zededa)) * feature: new "`--bits`" option to show bit count instead of byte count (adapted from pull request [#63](https://codeberg.org/a-j-wood/pv/pull/63) supplied by [Nick Black](https://nick-black.com)) * feature: new "`--average-rate-window`" option, to set the window over which the average rate is calculated, also used for ETA (modified from pull request [#65](https://codeberg.org/a-j-wood/pv/pull/65) supplied by [lemonsqueeze](https://github.com/lemonsqueeze)) * feature: the "`--watchfd`" option will now show relative filenames, if they are under the current directory (pull request [#66](https://codeberg.org/a-j-wood/pv/pull/66) supplied by [ikasty](https://github.com/ikasty)) * fix: correction to `pv_in_foreground()` to behave as its comment block says it should, when not on a terminal - corrects [#19 "No output in Arch Linux initcpio after 1.6.6"](https://codeberg.org/a-j-wood/pv/issues/19), [#31 "No output written from inside zsh <() construct"](https://codeberg.org/a-j-wood/pv/issues/31), [#55 "pv Stopped Working in the Background"](https://codeberg.org/a-j-wood/pv/issues/55) (pull request [#64](https://codeberg.org/a-j-wood/pv/pull/64) supplied by [Michael Weiß](https://github.com/quitschbo)) * fix: workaround for OS X 11 behaviour in configure script regarding stat64 at compile time (pull request [#57](https://codeberg.org/a-j-wood/pv/pull/57) supplied by [Dave Beckett](https://github.com/dajobe)) * fix: workaround for macOS equivalence of stat to stat64 - patches from [Filippo Valsorda](https://github.com/FiloSottile) and [Demitri Muna](https://github.com/demitri), correcting [#33 "Fix compilation problems due to `stat64()` on Apple Silicon"](https://codeberg.org/a-j-wood/pv/issues/33) * fix: add burst rate limit to transfer, so rate limits are not broken by bursty traffic (pull request [#62](https://codeberg.org/a-j-wood/pv/pull/62) supplied by [Volodymyr Bychkovyak](https://github.com/vbychkoviak)) * fix: corrected "`--force`" option so it will still output progress when not in the same process group as the owner of the terminal - corrects [#23 "No output with "`-f`" when run in background after 1.6.6"](https://codeberg.org/a-j-wood/pv/issues/23) and helps to correct [#31 "No output written from inside zsh <() construct"](https://codeberg.org/a-j-wood/pv/issues/31) * fix: corrected elapsed time display to show as D:HH:MM:SS after 1 day, like the ETA does - corrects [#16 "Show days in same format in ETA as in elapsed time"](https://codeberg.org/a-j-wood/pv/issues/16) * fix: corrected bug where percentages went down after 100% when in "`--numeric`" mode with a "`--size`" that was too small - corrects [#26 "Correct "`-n`" behaviour when going past 100% of "`-s`" size"](https://codeberg.org/a-j-wood/pv/issues/26) * i18n: recoded Polish translation file to UTF-8 * i18n: removed inaccurate fuzzy translation matches * docs: moved all open issues into GitHub and updated the TODO list * docs: renamed README to README.md and altered it to Markdown format * docs: moved contributors from the README to docs/ACKNOWLEDGEMENTS.md * docs: moved TODO to TODO.md and altered it to Markdown format * docs: moved NEWS to NEWS.md, converted it to UTF-8, and altered it to Markdown format

@haarg

Upstream changes: 0.54 2024-07-24 17:45:00 MANWAR - Fix skipping of .git, .svn, and CVS directories, thanks @haarg. 0.53 2024-07-22 13:30:00 MANWAR - Don't simultaneously test -c and -v switches (PR #33), thanks @jkeenan. - Fixed manifest check (PR #35), thanks @haarg.

devel/patch: security fixes

1eaab5b

Fixes CVE-2018-6951, CVE-2018-6952 and CVE-2018-1000156.

bsiegert suggested changes Oct 18, 2018

View reviewed changes

AttilaFueloep added 2 commits October 18, 2018 13:52

devel/patch: remove config.hin patch, fixed upstream

8400f1f

devel/patch: patch the right file

585faf6

AttilaFueloep closed this Oct 19, 2018

netbsd-srcmastr pushed a commit that referenced this pull request Mar 14, 2020

(devel/p5-Data-ObjectDriver) Updated to 0.19

0e518ae

0.19 2020-03-03T15:13:37Z - Parallel testing #33

netbsd-srcmastr pushed a commit that referenced this pull request Apr 29, 2023

Update to 1.60

bfaf27b

Upstream changes: 1.60 2023-02-11 - Fixed a test failure with Perl blead (5.37.x). Reported by Jim Keenan and diagnosed by Yves Orton. GH #33.

netbsd-srcmastr pushed a commit that referenced this pull request Jan 8, 2024

Update to 1.1.0

ce761fc

Upstream changes: 1.1.0 2023-12-11 20:28:26-05:00 America/New_York [ ENHANCEMENTS ] * GH #33: Named routes; add uri_for_route keyword (Sawyer X)

netbsd-srcmastr pushed a commit that referenced this pull request Apr 29, 2024

devel/hs-safe: Update to 0.3.21

237a3e3

0.3.21, released 2024-01-18 #34, mark headErr/tailErr as Partial 0.3.20, released 2024-01-14 #34, add headErr, tailErr #33, avoid using head/tail to avoid x-partial

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

devel/patch: security fixes #33

devel/patch: security fixes #33

AttilaFueloep commented Oct 18, 2018

iamleot commented Oct 18, 2018 via email

bsiegert left a comment

bsiegert Oct 18, 2018

AttilaFueloep Oct 18, 2018

AttilaFueloep commented Oct 18, 2018

iamleot commented Oct 18, 2018 via email

AttilaFueloep commented Oct 19, 2018

AttilaFueloep commented Oct 19, 2018

devel/patch: security fixes #33

devel/patch: security fixes #33

Conversation

AttilaFueloep commented Oct 18, 2018

iamleot commented Oct 18, 2018 via email

bsiegert left a comment

Choose a reason for hiding this comment

bsiegert Oct 18, 2018

Choose a reason for hiding this comment

AttilaFueloep Oct 18, 2018

Choose a reason for hiding this comment

AttilaFueloep commented Oct 18, 2018

iamleot commented Oct 18, 2018 via email

AttilaFueloep commented Oct 19, 2018

AttilaFueloep commented Oct 19, 2018