www/h2o: update to 2.2.6 and make it build shared libraries #56

Habbie · 2020-03-21T14:06:49Z

this removes 3 warnings from pkg_admin audit

Habbie · 2020-03-21T14:23:42Z

merged by nia, thanks!

Habbie · 2020-03-21T14:27:57Z

(reopened to see if nia's commit message closes it once it hits github)

2.64.1: (stable): Glib: * Add missing #includes (Kjell Ahlstedt) Issue #69 (Kalev Lember) 2.64.0 (stable): Glib: * Add get_user_runtime_dir() (scx) Issue #57, merge request !14 * Add get_host_name() (scx) Issue #58, merge request !15 * MainContext: Add push/pop/get_thread_default() (Kjell Ahlstedt) Issue #56 (Yackie-Yang) * Add StdStringView and UStringView Use them in build_filename() (Thomas Holder, Kjell Ahlstedt) Issue #34 * Regex: match(), match_all(): Deprecate rvalue string references (Thomas Holder, Kjell Ahlstedt) Issue #66, merge request !26 * Add Glib::canonicalize_filename() (Kjell Ahlstedt) Issue #59 (Patrick Storz) * ustring: Fix insert(iterator, In, In) (Thomas Holder) Merge request !19 Gio: * DBus::Connection: Make the wrap() function thread-safe (Kjell Ahlstedt) Issue #56 (Yackie-Yang) * DBus::Message::get_unix_fd_list(): Add refreturn (Kjell Ahlstedt) Issue #68 (kr.woaini) gmmproc: * Add optional decl_prefix parameter to _CLASS_BOXEDTYPE, _CLASS_BOXEDTYPE_STATIC, _CLASS_GOBJECT, _CLASS_INTERFACE, _CLASS_OPAQUE_COPYABLE, _CLASS_OPAQUE_REFCOUNTED, _WRAP_GERROR Used for adding GLIBMM_API or similar for MS Visual C++ (Chun-wei Fan) Build: * Add Meson support (Chun-wei Fan, Kjell Ahlstedt) Merge request !28 * Drop gendef from Windows builds (Chun-wei Fan) Issue #12 (Mikhail Titov), merge request !30 Documentation: * Correct spelling of spawn_async_with_pipes() (Mike Fleetwood) Merge request !16 * Glib::Binding: Several doc improvements (Daniel Boles) Merge request !17 * Glib::Binding: Explain why SlotTransform takes GValue* (Kjell Ahlstedt) Issue #61 (Daniel Boles) * Regex: Note that Glib::ustring must be used in match methods (Kjell Ahlstedt) Issue #66, merge request !26 * Gio::AsyncResult: Improve the class description (Kjell Ahlstedt) Issue #27 (Alberto Mardegan)

Update ruby-mixlib-cli to 2.1.5. 2.1.5 (2019-12-22) * Use our standard rakefile #68 (tas50) * Fix chef-style #71 (vsingh-msys) * Add windows PR testing with Buildkite #73 (tas50) * Test on Ruby 2.7 + random testing improvements #75 (tas50) 2.1.1 (2019-06-10) * Don't explode when there are unknown keys in 'config' #66 (marcparadise) 2.1.0 (2019-06-07) * Setup BuildKite for PR testing #61 (tas50) * Disable Travis testing & Update codeowners #62 (tas50) * Fix gem homepage url #64 (tsub) * [MIXLIB-CLI-63] Add deprecated_option support #65 (marcparadise) 2.0.6 (2019-05-14) * Add additional github templates and update codeowners #58 (tas50) * Improve the --help text output of 'in:' #59 (btm) * Print out human readable lists of allowed CLI options #60 (tas50) 2.0.3 (2019-03-20) * fix global state pollution issues across examples #54 (lamont-granquist) * Add back support for Ruby 2.4 #56 (tas50) 2.0.1 (2019-01-04) * Don't ship the test files in the gem artifact #51 (tas50) 2.0.0 (2019-01-04) * remove hashrockets syntax #43 (lamont-granquist) * Remove require rubygems #44 (tas50) * Update testing and contributing boilerplate #45 (tas50) * More testing / release boilerplate #46 (tas50) * Update codeowners and add github PR template #47 (tas50) * Lint the example code #49 (tas50) * update travis, drop ruby < 2.5, major version bump #52 (lamont-granquist) * actually do the major version bump #53 (lamont-granquist)

Update ruby-mixlib-log to 3.0.8. 3.0.8 (2019-12-30) * Expand testing / Update GitHub templates #51 (tas50) * Add Build Kite PR Testing #52 (tas50) * Remove Travis PR Testing #53 (tas50) * Resolve all warnings emitted during testing #54 (zenspider) * Add windows testing in Buildkite #56 (tas50) * Test on Ruby 2.7 + random testing improvements #58 (tas50) * Substitute require for require_relative #59 (tas50) 3.0.1 (2019-01-05) * reverting back to ruby 2.3 support #48 (lamont-granquist) 3.0.0 (2019-01-04) * update travis, drop ruby < 2.5, major version bump #47 (lamont-granquist) 2.0.9 (2018-12-18) * remove hashrocket syntax #41 (lamont-granquist) * Remove the changelog generator gem #42 (tas50) * Test on all the Ruby versions we support #43 (tas50) * Test on Ruby 2.6 in Travis + test on Xenial #46 (tas50) * Only ship the required library files in the gem artifact #45 (tas50)

Changelog: 10 March 2020: Wouter - repository has version number 4.3.0. Tag for 4.3.0rc1. 3 March 2020: Wouter - Fix that the retry wait does not exceed one day for zone transfers. 27 February 2020: Wouter - Fix warning on FreeBSD about pointer size cast. 26 February 2020: Wouter - Fixup fix of reuseport TCP for server close of sockets not used by it. And the unit test skips when the necessary debug output is not enabled. 25 February 2020: Wouter - Fix event unit test, signal has to be registered with signal_add, event_add not for every backend for signals. The event_initialized is not possible for every backend, so event_added variable. The agent write event fires after a timeout, instead of on event write so that it does not trigger a sigpipe event when the handlers stop. Timeout shorted to 0.1 second. event_get_fd was not implemented, so used ev_fd. Debug output printfs added to see what happens. - Fix checkconf test for new drop-updates config option. - Fix errors with reuseport and TCP file descriptors, it was closing them for server-1 in server-2 and server-3.. 7 February 2020: Jeroen - Add feature to drop queries with opcode UPDATE. 6 February 2020: Jeroen - Support SO_BINDTODEVICE on Linux. Specify bindtodevice: yes to bind sockets directly to the network interface. - Support SO_SETFIB on FreeBSD. Add setfib=<FIB> after an ip-address option to use the specified FIB for that socket. - Require user to add servers=<range> after an ip-address option to specify the servers that must listen on that socket. 6 February 2020: Wouter - Merge PR#60: Minor portability fixes from michaelforney, with avoid pointer arithmetic on void* and avoid unnecessary VLA. 4 February 2020: Wouter - Merge PR#22: minimise-any: prefer polular and not large RRset, from Daisuke Higashi. - Fix responses for IXFR so that the authority section is not echoed in the response. 21 January 2020: Wouter - Fix leak in server bitset setup. 16 January 2020: Jeroen - Add zone resource record iterator for future zone-verification port. - Set FD_CLOEXEC on opened sockets. - Add popen3 implementation for future zone-verification port. - Add -r option to cutest so that a subset of tests can be run. 15 January 2020: Jeroen - Add feature to pin server proccesses to specific cpus. - Add feature to pin IP addresses to selected server processes. - Set process title to identify individual processes. 13 January 2020: Wouter - Merge pull request #59 from buddyns: add FreeBSD support for conf key ip-transparent. 10 January 2020: Wouter - Fix unreachable code in ssl set options code. - Fix bad shift in assertion code analyzer complaint. 6 January 2020: Wouter - Fix #56: Drop sparse TSIG signing support in NSD. Sign every axfr packet with TSIG, according to the latest draft-ietf-dnsop-rfc2845bis-06, Section 5.3.1. 12 December 2019: Wouter - Note that use-systemd is not necessary and ignored in man page. 11 December 2019: Wouter - Fix whitespace in nsd.conf.sample.in, patch from Paul Wouters. - use-systemd is ignored in nsd.conf, when NSD is compiled with libsystemd it always signals readiness, if possible. 9 December 2019: Wouter - Fix to define upper bounds on rr counts read from untrusted packet data. - Try different annotation for radix_find_prefix_node not reachable. - Separate acl_addr_match_range functions for ip4 and ip6, to please checkers. - Avoid unused variable warning in new match_range_v4 function. 6 December 2019: Wouter - Fix to define max number of EDNS records we are willing to spend time on. - Fix size of string len and capacity type cast in udbradtree. - Fix to protect rrcount in tsig_find_rr from overflow. - Annotate radix_find_prefix_node not reachable trail code. - Fix to protect rrcount in packet_find_notify_serial from overflow. - Fix to close socket on error in create_tcp_accept_sock. - Fix to log on failure to chmod for socket for remote control. - Fix to remove unneeded if in open of socket for remote control. - Fix to restore input parameter on call failure in create_dirs. - Please checker by terminating and initialising string read by remote control. - Fixup of random_generate negative modulo, from previous commit, and return srandom when random is used if no getrandom. 5 December 2019: Wouter - Fix fname null check of fname in namedb_read_zonefile. - Fix implicit cast of size in udb_radnode_array_grow. - Fix ignore of return value of ssl_printf in remote.c. - Fix unused check of fd in parent_handle_reload_command. - Fix to use getrandom() for randomness, if available. - Attempt to fix signedness of nscount lookup in ixfr query_process. - Fix identical branches for ssl_print of errors in remote.c. - Fix type cast bounds, signedness of opt_rdlen in edns_parse_record. - Fix to separate header and data lines in parse_zone_list_file.

v0.9.5 (2020-03-28) : I Knew Her, She Knew Me ---------------------------------------------- Fix ~~~ - `eyeD3 --genre ""` to clear genre frame restored. - Genre id->name mapping for non-standard genres and custom maps. v0.9.4 (2020-03-21) : The Devil Made Me Do It ----------------------------------------------- New ~~~ - Relative volume adjustments (RVA2 and RVAD) (#399) - Tag properties copyright and encoded_by - Support GRP1 (Apple) frames. Changes ~~~~~~~ - Genre serialization not ID3 v2.3 format by default, and other genre cleanup (#402) fixes #382 Fix ~~~ - Date correctness between ID3 versions (#396) - PopularityFrame email encoding bug. - Plugins more featured in docs v0.9.3 (2020-03-01) : It Dawned On Me -------------------------------------- Changes ~~~~~~~ - Track/disc numbers can be set with integer strings. - Disc number getter and setter hooks v0.9.2 (2020-02-10) : Into The Future -------------------------------------- Fix ~~~ - Removed setting of PYTHONIOENCODING, it breaks MacOS. Fixes #388 v0.9.1 (2020-02-09) : Dead and Gone ------------------------------------ Fix ~~~ - Docs and pep8. Other ~~~~~ - Experiment with setting utf-8 writer for stdout and stderr. v0.9 (2020-01-01) : Favorite Thing ----------------------------------- Major Changes ~~~~~~~~~~~~~ - Dropped support for Python versions 2.7, 3.4, and 3.5. - File scanning is no longer recursive by default; use `-r / --recursive`. - Default log-level changed from WARNING to ERROR. New ~~~ - Mime-type detection uses filetype.py (libmagic no longer required) - setFileScannerOpts function accepts `default_recursive` option. - A new `jsontag` plugin for converting tags to JSON. - A new `extract` plugin for extracting tags from media. - A new `yamltag` plugin for converting tags to YAML. - A new `mimetypes` plugin for listing file mime-types / measuring performance - Original artist support (TOPE frame, --orig-artist) - Added support for Python 3.8 and pypy3. Changes ~~~~~~~ - Log warning when ID3 v1.x text truncation occurs. Fixes #299. - Accept (invalid) date strings for the form YYYYMMDD. Fixes #379 - Adjust replay gain correctly for lame >= 3.95.1 headers. - Added -r/--recursive argument. eyeD3 is no longer recursive by default (#378) - Regenerated grako parser. - New ValueError for _setNum when unknown type/values are passed. - Moved src/* to top-level repo directory. Fix ~~~ - PRIV data type checking, fixed examples, etc. - Use tox for `make test` - ID3 v2.3 to v2.4 date conversion. - Match mp3 mime-types against all possible mime-types. Specifically, application/x-font-gdos. Fixes #338 - Fix simple typo: titel -> title. <[email protected]> - Fixed: load the right config file in arguments. <[email protected]> - Fix issue tracker link. Fixes #333. - Fixed art plugin when `pylast` is not installed. - Unbound variable for track num/total. Fixes #327. - Fixed MP3 header search to not false match on BOMs. - Honor APIC text encoding when description is "". #200. - Fixed bug with improper types when re-rendering unique file ID. (#324) <[email protected]> - UFID fixes, update (#325) <[email protected]> Other ~~~~~ - Deprecation of eyed3.utils.guessMimeType - Removed ipdb from dev requirements v0.8.12 (2019-12-27) --------------------- Changes ~~~~~~~ - Accept (invalid) date strings for the form YYYYMMDD. Fixes #379 Other ~~~~~ - Test with py38 v0.8.11 (2019-11-09) ------------------------ Fix ~~~ - ID3 v2.3 to v2.4 date conversion. - Match mp3 mime-types against all possible mime-types. Specifically, application/x-font-gdos. Fixes #338 v0.8.10 (2019-03-07) : Apples ------------------------------ New ~~~ - Log warning when ID3 v1.x text truncation occurs. Fixes #299. Fix ~~~ - Honor APIC text encoding when description is "". #200. - Fixed bug with improper types when re-rendering unique file ID. (#324) <[email protected]> v0.8.9 (2019-01-12) : Descent Into... -------------------------------------- Changes ~~~~~~~ - Fixup plugin: -t changed to --type. - Pin pathlib to latest version 1.0.1 (#304) <[email protected]> Fix ~~~ - Force no-color output when stdout is not a terminal (#297) <[email protected]> - Requirements.txt: pathlib is only needed for older python versions (#284) <[email protected]> - Art plugin: Pin pylast to 2.x to preserve Python2 support. v0.8.8 (2018-11-28) : In Ruins ------------------------------ New ~~~ - Follow symlink directories. Fixes #224 Changes ~~~~~~~ - Eyed3.core.AudioInfo `time_secs` is now a float and non-lossy. Fixes #210 - Removed Python 3.3 support. Fix ~~~ - Better type handling during TLEN [fixup plugin]. - Don't tweak logging by default, only thru `main`. Fixes #243 Other ~~~~~ - Added a separate example for Windows (--add-image <url>) [Addresses the issue #219] (#220) <[email protected]> v0.8.7 (2018-06-11) : Aeon --------------------------- Fix ~~~ - Only use os.fwalk where supported. v0.8.6 (2018-05-27) : Robot Man -------------------------------- New ~~~ - Art plugin can now download album covers from last.fm. Changes ~~~~~~~ - Use os.fwalk for its better performance (esp. >= py37) Fixes #166 - TagTemplate `path_friendly` is now a string, namely the delimiter to use. Fix ~~~ - Classic plugin: --write-image will work with --quiet. Fixes #188 - Multiple fixes for display plugin %images% replacements. Fixes #176 - Allow --remove-* options to work when there are no tags. Fixes #183 v0.8.5 (2018-03-27) : 30$ Bag ----------------------------- New ~~~ - Mp3AudioFile.initTag now returns the new tag. - Eyed3.core.EP_MAX_SIZE_HINT. - Added docs for install devel dependencies and test data. Changes ~~~~~~~ - Similarly to TextFrame, fallback to latin1 for invalid encodings. - Removed paver as a dep. - Removed fabfile and mkenv. - Clean pytest_cache. - Nicfit.py cc update. Fix ~~~ - Handle missing `fcntl` on Windows. Fixes #135. - In addition to None, "" will now clear dates. - Update index.rst to reflect the code is in a Git repo, not Mercurial (#164) <[email protected]> Other ~~~~~ - Update pytest from 3.2.2 to 3.5.0 (#175) <[email protected]> - Update twine from 1.9.1 to 1.11.0 (#173) <[email protected]> - Update sphinx from 1.6.5 to 1.7.2 (#174) <[email protected]> - Update sphinxcontrib-paverutils from 1.16.0 to 1.17.0 (#172) <github- [email protected]> - Update pytest-runner from 3.0 to 4.2 (#171) <[email protected]> - Update nicfit.py from 0.7 to 0.8 (#161) <[email protected]> - Update ipdb from 0.10.3 to 0.11 (#159) <[email protected]> - Update factory-boy from 2.9.2 to 2.10.0 (#150) <[email protected]> - Update pyaml from 17.10.0 to 17.12.1 (#138) <[email protected]> - Update python-magic to 0.4.15 (#130) <[email protected]> - Update pip-tools from 1.10.1 to 1.11.0 (#129) <[email protected]> - Update check-manifest from 0.35 to 0.36 (#125) <[email protected]> v0.8.4 (2017-11-17) : The Cold Vein ------------------------------------- New ~~~ - Composer (TCOM) support (#123) - Check for version incompatibilities during version changes. Changes ~~~~~~~ - More forgiving of invalid text encoding identifiers (fixes #101) - More forgiving of bad Unicode in text frames (fixes #105) - EyeD3 cmd line helper turned not session-scoped fixture. - Only warn about missing grako when the plugin is used. Fixes #115. Fix ~~~ - Fix python3 setup when system encoding is not utf-8 (#120) <[email protected]> - Fix bad frames detection in stats plugin for python3 (#113) <[email protected]> - Script exits with 0 status when called with --version/--help (#109) <[email protected]> - Help pymagic with poorly encoded filenames. - [display plugin] Handle comments. - [display plugin] Handle internal exception types. Fixes #118. - IOError (nor OSError) have a message attr. Other ~~~~~ - Set theme jekyll-theme-slate. - Update pytest to 3.2.5 (#122) <[email protected]> - Update pytest-runner to 3.0 (#108) <[email protected]> - Update sphinx to 1.6.5 (#106) <[email protected]> - Update flake8 to 3.5.0 (#107) <[email protected]> v0.8.3 (2017-10-22) : So Alone ------------------------------- Fix ~~~ - Reload and process after tag removals, fixes #102. (PR #103) - Display incorrectly encoded strings (usually filenames) Other ~~~~~ - Make the classic output span the actual width of the tty so you can see the actual path with a long file name. (#92) <[email protected]> v0.8.2 (2017-09-23) : Standing At the Station ---------------------------------------------- New ~~~ - Pypy and pypy3 support. Changes ~~~~~~~ - 'nose' is no longer used/required for testing. Fix ~~~ - Fix for Unicode paths when using Python2. Fixes #56. v0.8.1 (2017-08-26) : I Can't Talk To You ------------------------------------------ New ~~~ - ``make pkg-test-data`` target. - Sample mime-type tests. Fix ~~~ - Added ``python-magic`` as a dependency for reliable mime-type detection. Fixes #61 - Add pathlib to requirements. Fixes #43. - [doc] Fixed github URL. v0.8 (2017-05-13) : I Don't Know My Name ----------------------------------------- .. warning:: This release is **NOT** API compatible with 0.7.x. The majority of the command line interface has been preserved although many options have either changed or been removed. Additionally, support for Python 2.6 has been dropped. New ~~~ - Python 3 support (version 2.7 and >= 3.3 supported) - The Display plugin (-P/--plugin display) enables complete control over tag output. Requires ``grako``. If using pip, ``pip install eyeD3[display]``. Contributed by Sebastian Patschorke. - Genre.parse(id3_std=False) (and --non-std-genres) to disable genre # mapping. - eyed3.load accept pathlib.Path arguments. - eyed3.core.AudioFile accept pathlib.Path arguments. - eyed3.utils.walk accept pathlib.Path arguments. - New manual page. Contributed by Gaetano Guerriero - ``make test-data`` Changes ~~~~~~~~ - Project home from to GitHub: https://github.com/nicfit/eyeD3 Fix ~~~ - Lang fixes, and no longer coerce invalids to eng. Other ~~~~~ - Moved to pytest, although unittest not yet purged.

### All Platforms - Allow the RPC server to listen on an IPv6 address ([#161](transmission/transmission#161)) - Change `TR_CURL_SSL_VERIFY` to `TR_CURL_SSL_NO_VERIFY` and enable verification by default ([#334](transmission/transmission#334)) - Go back to using hash as base name for resume and torrent files (those stored in configuration directory) ([#122](transmission/transmission#122)) - Handle "fields" argument in "session-get" RPC request; if "fields" array is present in arguments, only return session fields specified; otherwise return all the fields as before - Limit the number of incorrect authentication attempts in embedded web server to 100 to prevent brute-force attacks ([#371](transmission/transmission#371)) - Set idle seed limit range to 1..40320 (4 weeks tops) in all clients ([#212](transmission/transmission#212)) - Add Peer ID for Xfplay, PicoTorrent, Free Download Manager, Folx, Baidu Netdisk torrent clients ([#256](transmission/transmission#256), [#285](transmission/transmission#285), [#355](transmission/transmission#355), [#363](transmission/transmission#363), [#386](transmission/transmission#386)) - Announce `INT64_MAX` as size left if the value is unknown (helps with e.g. Amazon S3 trackers) ([#250](transmission/transmission#250)) - Add `TCP_FASTOPEN` support (should result in slight speedup) ([#184](transmission/transmission#184)) - Improve ToS handling on IPv6 connections ([#128](transmission/transmission#128), [#341](transmission/transmission#341), [#360](transmission/transmission#360), [#692](transmission/transmission#692), [#737](transmission/transmission#737)) - Abort handshake if establishing DH shared secret fails (leads to crash) ([#27](transmission/transmission#27)) - Don't switch trackers while announcing (leads to crash) ([#297](transmission/transmission#297)) - Improve completion scripts execution and error handling; add support for .cmd and .bat files on Windows ([#405](transmission/transmission#405)) - Maintain a "session ID" file (in temporary directory) to better detect whether session is local or remote; return the ID as part of "session-get" response (TRAC-5348, [#861](transmission/transmission#861)) - Change torrent location even if no data move is needed ([#35](transmission/transmission#35)) - Support CIDR-notated blocklists ([#230](transmission/transmission#230), [#741](transmission/transmission#741)) - Update the resume file before running scripts ([#825](transmission/transmission#825)) - Make multiscrape limits adaptive ([#837](transmission/transmission#837)) - Add labels support to libtransmission and transmission-remote ([#822](transmission/transmission#822)) - Parse `session-id` header case-insensitively ([#765](transmission/transmission#765)) - Sanitize suspicious path components instead of rejecting them ([#62](transmission/transmission#62), [#294](transmission/transmission#294)) - Load CA certs from system store on Windows / OpenSSL ([#446](transmission/transmission#446)) - Add support for mbedtls (formely polarssl) and wolfssl (formely cyassl), LibreSSL ([#115](transmission/transmission#115), [#116](transmission/transmission#116), [#284](transmission/transmission#284), [#486](transmission/transmission#486), [#524](transmission/transmission#524), [#570](transmission/transmission#570)) - Fix building against OpenSSL 1.1.0+ ([#24](transmission/transmission#24)) - Fix quota support for uClibc-ng 1.0.18+ and DragonFly BSD ([#42](transmission/transmission#42), [#58](transmission/transmission#58), [#312](transmission/transmission#312)) - Fix a number of memory leaks (magnet loading, session shutdown, bencoded data parsing) ([#56](transmission/transmission#56)) - Bump miniupnpc version to 2.0.20170509 ([#347](transmission/transmission#347)) - CMake-related improvements (Ninja generator, libappindicator, systemd, Solaris and macOS) ([#72](transmission/transmission#72), [#96](transmission/transmission#96), [#117](transmission/transmission#117), [#118](transmission/transmission#118), [#133](transmission/transmission#133), [#191](transmission/transmission#191)) - Switch to submodules to manage (most of) third-party dependencies - Fail installation on Windows if UCRT is not installed ### Mac Client - Bump minimum macOS version to 10.10 - Dark Mode support ([#644](transmission/transmission#644), [#722](transmission/transmission#722), [#757](transmission/transmission#757), [#779](transmission/transmission#779), [#788](transmission/transmission#788)) - Remove Growl support, notification center is always used ([#387](transmission/transmission#387)) - Fix autoupdate on High Sierra and up by bumping the Sparkle version ([#121](transmission/transmission#121), [#600](transmission/transmission#600)) - Transition to ARC ([#336](transmission/transmission#336)) - Use proper UTF-8 encoding (with macOS-specific normalization) when setting download/incomplete directory and completion script paths ([#11](transmission/transmission#11)) - Fix uncaught exception when dragging multiple items between groups ([#51](transmission/transmission#51)) - Add flat variants of status icons for message log ([#134](transmission/transmission#134)) - Optimize image resources size ([#304](transmission/transmission#304), [#429](transmission/transmission#429)) - Update file icon when file name changes ([#37](transmission/transmission#37)) - Update translations ### GTK+ Client - Add queue up/down hotkeys ([#158](transmission/transmission#158)) - Modernize the .desktop file ([#162](transmission/transmission#162)) - Add AppData file ([#224](transmission/transmission#224)) - Add symbolic icon variant for the Gnome top bar and when the high contrast theme is in use ([#414](transmission/transmission#414), [#449](transmission/transmission#449)) - Update file icon when its name changes ([#37](transmission/transmission#37)) - Switch from intltool to gettext for translations ([#584](transmission/transmission#584), [#647](transmission/transmission#647)) - Update translations, add new translations for Portuguese (Portugal) ### Qt Client - Bump minimum Qt version to 5.2 - Fix dropping .torrent files into main window on Windows ([#269](transmission/transmission#269)) - Fix prepending of drive letter to various user-selected paths on Windows ([#236](transmission/transmission#236), [#307](transmission/transmission#307), [#404](transmission/transmission#404), [#437](transmission/transmission#437), [#699](transmission/transmission#699), [#723](transmission/transmission#723), [#877](transmission/transmission#877)) - Fix sorting by progress in presence of magnet transfers ([#234](transmission/transmission#234)) - Fix .torrent file trashing upon addition ([#262](transmission/transmission#262)) - Add queue up/down hotkeys ([#158](transmission/transmission#158)) - Reduce torrent properties (file tree) memory usage - Display tooltips in torrent properties (file tree) in case the names don't fit ([#411](transmission/transmission#411)) - Improve UI look on hi-dpi displays (YMMV) - Use session ID (if available) to check if session is local or not ([#861](transmission/transmission#861)) - Use default (instead of system) locale to be more flexible ([#130](transmission/transmission#130)) - Modernize the .desktop file ([#162](transmission/transmission#162)) - Update translations, add new translations for Afrikaans, Catalan, Danish, Greek, Norwegian Bokmål, Slovenian ### Daemon - Use libsystemd instead of libsystemd-daemon (TRAC-5921) - Harden transmission-daemon.service by disallowing privileges elevation ([#795](transmission/transmission#795)) - Fix exit code to be zero when dumping settings ([#487](transmission/transmission#487)) ### Web Client - Fix tracker error XSS in inspector (CVE-?) - Fix performance issues due to improper use of `setInterval()` for UI refresh (TRAC-6031) - Fix recognition of `https://` links in comments field ([#41](transmission/transmission#41), [#180](transmission/transmission#180)) - Fix torrent list style in Google Chrome 59+ ([#384](transmission/transmission#384)) - Show ETA in compact view on non-mobile devices ([#146](transmission/transmission#146)) - Show upload file button on mobile devices ([#320](transmission/transmission#320), [#431](transmission/transmission#431), [#956](transmission/transmission#956)) - Add keyboard hotkeys for web interface ([#351](transmission/transmission#351)) - Disable autocompletion in torrent URL field ([#367](transmission/transmission#367)) ### Utils - Prevent crash in transmission-show displaying torrents with invalid creation date ([#609](transmission/transmission#609)) - Handle IPv6 RPC addresses in transmission-remote ([#247](transmission/transmission#247)) - Add `--unsorted` option to transmission-show ([#767](transmission/transmission#767)) - Widen the torrent-id column in transmission-remote for cleaner formatting ([#840](transmission/transmission#840))

net/transmission-gtk: security update net/transmission-qt: security update net/transmission: security update Revisions pulled up: - net/transmission-gtk/Makefile 1.46 - net/transmission-gtk/PLIST 1.2 - net/transmission-qt/Makefile 1.54 - net/transmission/Makefile 1.27 - net/transmission/Makefile.common 1.10 - net/transmission/PLIST 1.4 - net/transmission/distinfo 1.16 - net/transmission/patches/patch-qt_qtr.pro 1.7 ------------------------------------------------------------------- Module Name: pkgsrc Committed By: wiz Date: Mon Jul 13 13:01:02 UTC 2020 Modified Files: pkgsrc/net/transmission: Makefile Makefile.common PLIST distinfo pkgsrc/net/transmission-gtk: Makefile PLIST pkgsrc/net/transmission-qt: Makefile pkgsrc/net/transmission/patches: patch-qt_qtr.pro Log Message: transmission*: update to 3.00 ### All Platforms - Allow the RPC server to listen on an IPv6 address ([#161](transmission/transmission#161)) - Change `TR_CURL_SSL_VERIFY` to `TR_CURL_SSL_NO_VERIFY` and enable verification by default ([#334](transmission/transmission#334)) - Go back to using hash as base name for resume and torrent files (those stored in configuration directory) ([#122](transmission/transmission#122)) - Handle "fields" argument in "session-get" RPC request; if "fields" array is present in arguments, only return session fields specified; otherwise return all the fields as before - Limit the number of incorrect authentication attempts in embedded web server to 100 to prevent brute-force attacks ([#371](transmission/transmission#371)) - Set idle seed limit range to 1..40320 (4 weeks tops) in all clients ([#212](transmission/transmission#212)) - Add Peer ID for Xfplay, PicoTorrent, Free Download Manager, Folx, Baidu Netdisk torrent clients ([#256](transmission/transmission#256), [#285](transmission/transmission#285), [#355](transmission/transmission#355), [#363](transmission/transmission#363), [#386](transmission/transmission#386)) - Announce `INT64_MAX` as size left if the value is unknown (helps with e.g. Amazon S3 trackers) ([#250](transmission/transmission#250)) - Add `TCP_FASTOPEN` support (should result in slight speedup) ([#184](transmission/transmission#184)) - Improve ToS handling on IPv6 connections ([#128](transmission/transmission#128), [#341](transmission/transmission#341), [#360](transmission/transmission#360), [#692](transmission/transmission#692), [#737](transmission/transmission#737)) - Abort handshake if establishing DH shared secret fails (leads to crash) ([#27](transmission/transmission#27)) - Don't switch trackers while announcing (leads to crash) ([#297](transmission/transmission#297)) - Improve completion scripts execution and error handling; add support for .cmd and .bat files on Windows ([#405](transmission/transmission#405)) - Maintain a "session ID" file (in temporary directory) to better detect whether session is local or remote; return the ID as part of "session-get" response (TRAC-5348, [#861](transmission/transmission#861)) - Change torrent location even if no data move is needed ([#35](transmission/transmission#35)) - Support CIDR-notated blocklists ([#230](transmission/transmission#230), [#741](transmission/transmission#741)) - Update the resume file before running scripts ([#825](transmission/transmission#825)) - Make multiscrape limits adaptive ([#837](transmission/transmission#837)) - Add labels support to libtransmission and transmission-remote ([#822](transmission/transmission#822)) - Parse `session-id` header case-insensitively ([#765](transmission/transmission#765)) - Sanitize suspicious path components instead of rejecting them ([#62](transmission/transmission#62), [#294](transmission/transmission#294)) - Load CA certs from system store on Windows / OpenSSL ([#446](transmission/transmission#446)) - Add support for mbedtls (formely polarssl) and wolfssl (formely cyassl), LibreSSL ([#115](transmission/transmission#115), [#116](transmission/transmission#116), [#284](transmission/transmission#284), [#486](transmission/transmission#486), [#524](transmission/transmission#524), [#570](transmission/transmission#570)) - Fix building against OpenSSL 1.1.0+ ([#24](transmission/transmission#24)) - Fix quota support for uClibc-ng 1.0.18+ and DragonFly BSD ([#42](transmission/transmission#42), [#58](transmission/transmission#58), [#312](transmission/transmission#312)) - Fix a number of memory leaks (magnet loading, session shutdown, bencoded data parsing) ([#56](transmission/transmission#56)) - Bump miniupnpc version to 2.0.20170509 ([#347](transmission/transmission#347)) - CMake-related improvements (Ninja generator, libappindicator, systemd, Solaris and macOS) ([#72](transmission/transmission#72), [#96](transmission/transmission#96), [#117](transmission/transmission#117), [#118](transmission/transmission#118), [#133](transmission/transmission#133), [#191](transmission/transmission#191)) - Switch to submodules to manage (most of) third-party dependencies - Fail installation on Windows if UCRT is not installed ### Mac Client - Bump minimum macOS version to 10.10 - Dark Mode support ([#644](transmission/transmission#644), [#722](transmission/transmission#722), [#757](transmission/transmission#757), [#779](transmission/transmission#779), [#788](transmission/transmission#788)) - Remove Growl support, notification center is always used ([#387](transmission/transmission#387)) - Fix autoupdate on High Sierra and up by bumping the Sparkle version ([#121](transmission/transmission#121), [#600](transmission/transmission#600)) - Transition to ARC ([#336](transmission/transmission#336)) - Use proper UTF-8 encoding (with macOS-specific normalization) when setting download/incomplete directory and completion script paths ([#11](transmission/transmission#11)) - Fix uncaught exception when dragging multiple items between groups ([#51](transmission/transmission#51)) - Add flat variants of status icons for message log ([#134](transmission/transmission#134)) - Optimize image resources size ([#304](transmission/transmission#304), [#429](transmission/transmission#429)) - Update file icon when file name changes ([#37](transmission/transmission#37)) - Update translations ### GTK+ Client - Add queue up/down hotkeys ([#158](transmission/transmission#158)) - Modernize the .desktop file ([#162](transmission/transmission#162)) - Add AppData file ([#224](transmission/transmission#224)) - Add symbolic icon variant for the Gnome top bar and when the high contrast theme is in use ([#414](transmission/transmission#414), [#449](transmission/transmission#449)) - Update file icon when its name changes ([#37](transmission/transmission#37)) - Switch from intltool to gettext for translations ([#584](transmission/transmission#584), [#647](transmission/transmission#647)) - Update translations, add new translations for Portuguese (Portugal) ### Qt Client - Bump minimum Qt version to 5.2 - Fix dropping .torrent files into main window on Windows ([#269](transmission/transmission#269)) - Fix prepending of drive letter to various user-selected paths on Windows ([#236](transmission/transmission#236), [#307](transmission/transmission#307), [#404](transmission/transmission#404), [#437](transmission/transmission#437), [#699](transmission/transmission#699), [#723](transmission/transmission#723), [#877](transmission/transmission#877)) - Fix sorting by progress in presence of magnet transfers ([#234](transmission/transmission#234)) - Fix .torrent file trashing upon addition ([#262](transmission/transmission#262)) - Add queue up/down hotkeys ([#158](transmission/transmission#158)) - Reduce torrent properties (file tree) memory usage - Display tooltips in torrent properties (file tree) in case the names don't fit ([#411](transmission/transmission#411)) - Improve UI look on hi-dpi displays (YMMV) - Use session ID (if available) to check if session is local or not ([#861](transmission/transmission#861)) - Use default (instead of system) locale to be more flexible ([#130](transmission/transmission#130)) - Modernize the .desktop file ([#162](transmission/transmission#162)) - Update translations, add new translations for Afrikaans, Catalan, Danish, Greek, Norwegian Bokmål, Slovenian ### Daemon - Use libsystemd instead of libsystemd-daemon (TRAC-5921) - Harden transmission-daemon.service by disallowing privileges elevation ([#795](transmission/transmission#795)) - Fix exit code to be zero when dumping settings ([#487](transmission/transmission#487)) ### Web Client - Fix tracker error XSS in inspector (CVE-?) - Fix performance issues due to improper use of `setInterval()` for UI refresh (TRAC-6031) - Fix recognition of `https://` links in comments field ([#41](transmission/transmission#41), [#180](transmission/transmission#180)) - Fix torrent list style in Google Chrome 59+ ([#384](transmission/transmission#384)) - Show ETA in compact view on non-mobile devices ([#146](transmission/transmission#146)) - Show upload file button on mobile devices ([#320](transmission/transmission#320), [#431](transmission/transmission#431), [#956](transmission/transmission#956)) - Add keyboard hotkeys for web interface ([#351](transmission/transmission#351)) - Disable autocompletion in torrent URL field ([#367](transmission/transmission#367)) ### Utils - Prevent crash in transmission-show displaying torrents with invalid creation date ([#609](transmission/transmission#609)) - Handle IPv6 RPC addresses in transmission-remote ([#247](transmission/transmission#247)) - Add `--unsorted` option to transmission-show ([#767](transmission/transmission#767)) - Widen the torrent-id column in transmission-remote for cleaner formatting ([#840](transmission/transmission#840)) To generate a diff of this commit: cvs rdiff -u -r1.26 -r1.27 pkgsrc/net/transmission/Makefile cvs rdiff -u -r1.9 -r1.10 pkgsrc/net/transmission/Makefile.common cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/transmission/PLIST cvs rdiff -u -r1.15 -r1.16 pkgsrc/net/transmission/distinfo cvs rdiff -u -r1.45 -r1.46 pkgsrc/net/transmission-gtk/Makefile cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/transmission-gtk/PLIST cvs rdiff -u -r1.52 -r1.53 pkgsrc/net/transmission-qt/Makefile cvs rdiff -u -r1.6 -r1.7 pkgsrc/net/transmission/patches/patch-qt_qtr.pro ------------------------------------------------------------------- Module Name: pkgsrc Committed By: wiz Date: Sat Jul 25 20:20:05 UTC 2020 Modified Files: pkgsrc/net/transmission-qt: Makefile Log Message: transmission-qt: needs gcc 7.x (for <optional>) Reported and tested by spz. To generate a diff of this commit: cvs rdiff -u -r1.53 -r1.54 pkgsrc/net/transmission-qt/Makefile

0.069 2020-08-25 - fix #64 ECC: segfault on invalid input - fix #63 ltc Licensing could be clearer (added src/{ltc,ltm}/LICENSE) - fix #62 documentation only (Crypt::CBC related) - bundled libtomcrypt update branch:develop (commit:d8d7a83b 2020-07-14) 0.068 2020-03-10 - fix #60 Test failues on macOS Catalina 0.067 2020-02-01 - new: Crypt::PK::Ed25519 - new: Crypt::PK::X25519 - bundled libtomcrypt update branch:develop (commit:1937f412 2019-11-22) 0.066 2019-10-20 - fix #57 Build fails on i686 - bundled libtomcrypt update branch:develop (commit:354c9051 2019-10-20) - no perl module code change 0.065 2019-10-19 - fix #56 Math::BigInt 1.999817 breaks the tests of CryptX - bundled libtomcrypt update branch:develop (commit:25410c75 2019-10-17) - no perl module code change, just tests

Pkgsrc changes: * Added a patch to cope with fromStatT on NetBSD * Added a patch to cope with docker client default settings (build also on NetBSD) Upstream changes: 1.5.3 (August 27th, 2020) NOTE: All security content from 1.5.2, 1.5.1, 1.4.5, 1.4.4, 1.3.9, 1.3.8, 1.2.6, and 1.2.5 has been made fully open source, and the git tags for 1.5.3, 1.4.6, 1.3.10, and 1.2.7 will build correctly for open source users. BUG FIXES: * auth/aws: Made header handling for IAM authentication more robust * secrets/ssh: Fixed a bug with role option for SSH signing algorithm to allow more than RSA signing ## 1.5.1 CHANGES: * pki: The tidy operation will now remove revoked certificates if the parameter `tidy_revoked_certs` is set to `true`. This will result in certificate entries being immediately removed, as opposed to awaiting until its NotAfter time. Note that this only affects certificates that have been already revoked. [[GH-9609](https://github.com/hashicorp/vault/pull/9609)] IMPROVEMENTS: * auth/jwt: Add support for fetching groups and user information from G Suite during authentication. [[GH-9574](https://github.com/hashicorp/vault/pull/9574)] * secrets/openldap: Add "ad" schema that allows the engine to correctly rotate AD passwords. [[GH-9740](https://github.com/hashicorp/vault/pull/9740)] * ui: Wrap TTL option on transit engine export action is updated to a new component. [[GH-9632](https://github.com/hashicorp/vault/pull/9632)] BUG FIXES: * secrets/gcp: Ensure that the IAM policy version is appropriately set after a roleset's bindings have changed. [[GH-9603](https://github.com/hashicorp/vault/pull/9603)] * replication (enterprise): Fix status API output incorrectly stating replication is in `idle` state. * core: Fix panic when printing over-long info fields at startup [[GH-9681](https://github.com/hashicorp/vault/pull/9681)] ## 1.5.0 ### July 21st, 2020 CHANGES: * storage/raft: The storage configuration now accepts a new `max_entry_size` config that will limit the total size in bytes of any entry committed via raft. It defaults to `"1048576"` (1MiB). [[GH-9027](https://github.com/hashicorp/vault/pull/9027)] * token: Token creation with custom token ID via `id` will no longer allow periods (`.`) as part of the input string. The final generated token value may contain periods, such as the `s.` prefix for service token indication. [[GH-8646](https://github.com/hashicorp/vault/pull/8646/files)] * token: Token renewals will now return token policies within the `token_policies` , identity policies within `identity_policies`, and the full policy set within `policies`. [[GH-8535](https://github.com/hashicorp/vault/pull/8535)] * cubbyhole: Reject reads and writes to an empty ("") path. [[GH-8971](https://github.com/hashicorp/vault/pull/8971)] * core: Remove the addition of newlines to parsed configuration when using integer/boolean values [[GH-8928](https://github.com/hashicorp/vault/pull/8928)] * audit: Token TTL and issue time are now provided in the auth portion of audit logs. [[GH-9091](https://github.com/hashicorp/vault/pull/9091)] IMPROVEMENTS: * audit: Replication status requests are no longer audited. [[GH-8877](https://github.com/hashicorp/vault/pull/8877)] * audit: Added mount_type field to requests and responses. [[GH-9167](https://github.com/hashicorp/vault/pull/9167)] * auth/aws: Add support for Web Identity credentials [[GH-7738](https://github.com/hashicorp/vault/pull/7738)] * auth/jwt: Support users that are members of more than 200 groups on Azure [[GH-120](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/120)] * auth/kubernetes: Allow disabling `iss` validation [[GH-91](https://github.com/hashicorp/vault-plugin-auth-kubernetes/pull/91)] * core: Add the Go version used to build a Vault binary to the server message output. [[GH-9078](https://github.com/hashicorp/vault/pull/9078)] * core: Added Password Policies for user-configurable password generation [[GH-8637](https://github.com/hashicorp/vault/pull/8637)] * core: New telemetry metrics covering token counts, token creation, KV secret counts, lease creation. [[GH-9239](https://github.com/hashicorp/vault/pull/9239)] [[GH-9250](https://github.com/hashicorp/vault/pull/9250)] [[GH-9244](https://github.com/hashicorp/vault/pull/9244)] [[GH-9052](https://github.com/hashicorp/vault/pull/9052)] * cli: Support reading TLS parameters from file for the `vault operator raft join` command. [[GH-9060](https://github.com/hashicorp/vault/pull/9060)] * plugin: Add SDK method, `Sys.ReloadPlugin`, and CLI command, `vault plugin reload`, for reloading plugins. [[GH-8777](https://github.com/hashicorp/vault/pull/8777)] * plugin (enterprise): Add a scope field to plugin reload, which when global, reloads the plugin anywhere in a cluster. [[GH-9347](https://github.com/hashicorp/vault/pull/9347)] * sdk/framework: Support accepting TypeFloat parameters over the API [[GH-8923](https://github.com/hashicorp/vault/pull/8923)] * secrets/aws: Add iam_groups parameter to role create/update [[GH-8811](https://github.com/hashicorp/vault/pull/8811)] * secrets/database: Add static role rotation for MongoDB Atlas database plugin [[GH-11](https://github.com/hashicorp/vault-plugin-database-mongodbatlas/pull/11)] * secrets/database: Add static role rotation for MSSQL database plugin [[GH-9062](https://github.com/hashicorp/vault/pull/9062)] * secrets/database: Allow InfluxDB to use insecure TLS without cert bundle [[GH-8778](https://github.com/hashicorp/vault/pull/8778)] * secrets/gcp: Support BigQuery dataset ACLs in absence of IAM endpoints [[GH-78](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/78)] * secrets/pki: Allow 3072-bit RSA keys [[GH-8343](https://github.com/hashicorp/vault/pull/8343)] * secrets/ssh: Add a CA-mode role option to specify signing algorithm [[GH-9096](https://github.com/hashicorp/vault/pull/9096)] * secrets/transit: Transit requests that make use of keys now include a new field `key_version` in their responses [[GH-8775](https://github.com/hashicorp/vault/pull/8775)] * secrets/transit: Improving transit batch encrypt and decrypt latencies [[GH-9100](https://github.com/hashicorp/vault/pull/9100)] * sentinel: Add a sentinel config section, and "additional_enabled_modules", a list of Sentinel modules that may be imported in addition to the defaults. * ui: Update TTL picker styling on SSH secret engine [[GH-8891](https://github.com/hashicorp/vault/pull/8891)] * ui: Only render the JWT input field of the Vault login form on mounts configured for JWT auth [[GH-8952](https://github.com/hashicorp/vault/pull/8952)] * cli: Add a new subcommand, `vault monitor`, for tailing server logs in the console. [[GH-8477](https://github.com/hashicorp/vault/pull/8477)] * ui: Add replication dashboards. Improve replication management workflows. [[GH-8705]](https://github.com/hashicorp/vault/pull/8705). BUG FIXES: * agent: Restart template server when it shuts down [[GH-9200](https://github.com/hashicorp/vault/pull/9200)] * auth/oci: Fix issue where users of the Oracle Cloud Infrastructure (OCI) auth method could not authenticate when the plugin backend was mounted at a non-default path. [[GH-7](https://github.com/hashicorp/vault-plugin-auth-oci/pull/7)] * core: Extend replicated cubbyhole fix in 1.4.0 to cover case where a performance primary is also a DR primary [[GH-9148](https://github.com/hashicorp/vault/pull/9148)] * secrets/aws: Fix issue where performance standbys weren't able to generate STS credentials after an IAM access key rotation in AWS and root IAM credential update in Vault [[GH-9186](https://github.com/hashicorp/vault/pull/9186)] * secrets/database: Fix issue where rotating root database credentials while Vault's storage backend is unavailable causes Vault to lose access to the database [[GH-8782](https://github.com/hashicorp/vault/pull/8782)] * secrets/database: Fix issue that prevents performance standbys from connecting to databases after a root credential rotation [[GH-9129](https://github.com/hashicorp/vault/pull/9129)] * secrets/gcp: Fix issue were updates were not being applied to the `token_scopes` of a roleset. [[GH-90](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/90)] * secrets/kv: Return the value of delete_version_after when reading kv/config, even if it is set to the default. [[GH-42](https://github.com/hashicorp/vault-plugin-secrets-kv/pull/42)] * ui: Add Toggle component into core addon so it is available in KMIP and other Ember Engines. [[GH-8913]](https://github.com/hashicorp/vault/pull/8913) * ui: Disallow max versions value of large than 9999999999999999 on kv2 secrets engine. [[GH-9242](https://github.com/hashicorp/vault/pull/9242)] ## 1.4.3 (TBD) IMPROVEMENTS: * auth/aws: Add support for Web Identity credentials [[GH-9251](https://github.com/hashicorp/vault/pull/9251)] * core: Add the Go version used to build a Vault binary to the server message output. [[GH-9078](https://github.com/hashicorp/vault/pull/9078)] * secrets/database: Add static role rotation for MongoDB Atlas database plugin [[GH-9311](https://github.com/hashicorp/vault/pull/9311)] * ui: Link to the Vault Changelog in the UI footer [[GH-9216](https://github.com/hashicorp/vault/pull/9216)] BUG FIXES: * auth/oci: Fix issue where users of the Oracle Cloud Infrastructure (OCI) auth method could not authenticate when the plugin backend was mounted at a non-default path. [[GH-9278](https://github.com/hashicorp/vault/pull/9278)] * replication: The issue causing cubbyholes in namespaces on performance secondaries to not work, which was fixed in 1.4.0, was still an issue when the primary was both a performance primary and DR primary. * secrets/aws: Fix issue where performance standbys weren't able to generate STS credentials after an IAM access key rotation in AWS and root IAM credential update in Vault [[GH-9207](https://github.com/hashicorp/vault/pull/9207)] * secrets/database: Fix issue that prevents performance standbys from connecting to databases after a root credential rotation [[GH-9208](https://github.com/hashicorp/vault/pull/9208)] * secrets/gcp: Fix issue were updates were not being applied to the `token_scopes` of a roleset. [[GH-9277](https://github.com/hashicorp/vault/pull/9277)] ## 1.4.2 (May 21st, 2020) SECURITY: * core: Proxy environment variables are now redacted before being logged, in case the URLs include a username:password. This vulnerability, CVE-2020-13223, is fixed in 1.3.6 and 1.4.2, but affects 1.4.0 and 1.4.1, as well as older versions of Vault [[GH-9022](https://github.com/hashicorp/vault/pull/9022)] * secrets/gcp: Fix a regression in 1.4.0 where the system TTLs were being used instead of the configured backend TTLs for dynamic service accounts. This vulnerability is CVE-2020-12757. [[GH-85](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/85)] IMPROVEMENTS: * storage/raft: The storage stanza now accepts `leader_ca_cert_file`, `leader_client_cert_file`, and `leader_client_key_file` parameters to read and parse TLS certificate information from paths on disk. Existing non-path based parameters will continue to work, but their values will need to be provided as a single-line string with newlines delimited by `\n`. [[GH-8894](https://github.com/hashicorp/vault/pull/8894)] * storage/raft: The `vault status` CLI command and the `sys/leader` API now contain the committed and applied raft indexes. [[GH-9011](https://github.com/hashicorp/vault/pull/9011)] BUG FIXES: * auth/aws: Fix token renewal issues caused by the metadata changes in 1.4.1 [[GH-8991](https://github.com/hashicorp/vault/pull/8991)] * auth/ldap: Fix 1.4.0 regression that could result in auth failures when LDAP auth config includes upndomain. [[GH-9041](https://github.com/hashicorp/vault/pull/9041)] * secrets/ad: Forward rotation requests from standbys to active clusters [[GH-66](https://github.com/hashicorp/vault-plugin-secrets-ad/pull/66)] * secrets/database: Prevent generation of usernames that are not allowed by the MongoDB Atlas API [[GH-9](https://github.com/hashicorp/vault-plugin-database-mongodbatlas/pull/9)] * secrets/database: Return an error if a manual rotation of static account credentials fails [[GH-9035](https://github.com/hashicorp/vault/pull/9035)] * secrets/openldap: Forward all rotation requests from standbys to active clusters [[GH-9028](https://github.com/hashicorp/vault/pull/9028)] * secrets/transform (enterprise): Fix panic that could occur when accessing cached template entries, such as a requests that accessed templates directly or indirectly from a performance standby node. * serviceregistration: Fix a regression for Consul service registration that ignored using the listener address as the redirect address unless api_addr was provided. It now properly uses the same redirect address as the one used by Vault's Core object. [[GH-8976](https://github.com/hashicorp/vault/pull/8976)] * storage/raft: Advertise the configured cluster address to the rest of the nodes in the raft cluster. This fixes an issue where a node advertising 0.0.0.0 is not using a unique hostname. [[GH-9008](https://github.com/hashicorp/vault/pull/9008)] * storage/raft: Fix panic when multiple nodes attempt to join the cluster at once. [[GH-9008](https://github.com/hashicorp/vault/pull/9008)] * sys: The path provided in `sys/internal/ui/mounts/:path` is now namespace-aware. This fixes an issue with `vault kv` subcommands that had namespaces provided in the path returning permission denied all the time. [[GH-8962](https://github.com/hashicorp/vault/pull/8962)] * ui: Fix snowman that appears when namespaces have more than one period [[GH-8910](https://github.com/hashicorp/vault/pull/8910)] ## 1.4.1 (April 30th, 2020) CHANGES: * auth/aws: The default set of metadata fields added in 1.4.1 has been changed to `account_id` and `auth_type` [[GH-8783](https://github.com/hashicorp/vault/pull/8783)] * storage/raft: Disallow `ha_storage` to be specified if `raft` is set as the `storage` type. [[GH-8707](https://github.com/hashicorp/vault/pull/8707)] IMPROVEMENTS: * auth/aws: The set of metadata stored during login is now configurable [[GH-8783](https://github.com/hashicorp/vault/pull/8783)] * auth/aws: Improve region selection to avoid errors seen if the account hasn't enabled some newer AWS regions [[GH-8679](https://github.com/hashicorp/vault/pull/8679)] * auth/azure: Enable login from Azure VMs with user-assigned identities [[GH-33](https://github.com/hashicorp/vault-plugin-auth-azure/pull/33)] * auth/gcp: The set of metadata stored during login is now configurable [[GH-92](https://github.com/hashicorp/vault-plugin-auth-gcp/pull/92)] * auth/gcp: The type of alias name used during login is now configurable [[GH-95](https://github.com/hashicorp/vault-plugin-auth-gcp/pull/95)] * auth/ldap: Improve error messages during LDAP operation failures [[GH-8740](https://github.com/hashicorp/vault/pull/8740)] * identity: Add a batch delete API for identity entities [[GH-8785]](https://github.com/hashicorp/vault/pull/8785) * identity: Improve performance of logins when no group updates are needed [[GH-8795]](https://github.com/hashicorp/vault/pull/8795) * metrics: Add `vault.identity.num_entities` metric [[GH-8816]](https://github.com/hashicorp/vault/pull/8816) * secrets/kv: Allow `delete-version-after` to be reset to 0 via the CLI [[GH-8635](https://github.com/hashicorp/vault/pull/8635)] * secrets/rabbitmq: Improve error handling and reporting [[GH-8619](https://github.com/hashicorp/vault/pull/8619)] * ui: Provide One Time Password during Operation Token generation process [[GH-8630]](https://github.com/hashicorp/vault/pull/8630) BUG FIXES: * auth/okta: Fix MFA regression (introduced in [GH-8143](https://github.com/hashicorp/vault/pull/8143)) from 1.4.0 [[GH-8807](https://github.com/hashicorp/vault/pull/8807)] * auth/userpass: Fix upgrade value for `token_bound_cidrs` being ignored due to incorrect key provided [[GH-8826](https://github.com/hashicorp/vault/pull/8826/files)] * config/seal: Fix segfault when seal block is removed [[GH-8517](https://github.com/hashicorp/vault/pull/8517)] * core: Fix an issue where users attempting to build Vault could receive Go module checksum errors [[GH-8770](https://github.com/hashicorp/vault/pull/8770)] * core: Fix blocked requests if a SIGHUP is issued during a long-running request has the state lock held. Also fixes deadlock that can happen if `vault debug` with the config target is ran during this time. [[GH-8755](https://github.com/hashicorp/vault/pull/8755)] * core: Always rewrite the .vault-token file as part of a `vault login` to ensure permissions and ownership are set correctly [[GH-8867](https://github.com/hashicorp/vault/pull/8867)] * database/mongodb: Fix context deadline error that may result due to retry attempts on failed commands [[GH-8863](https://github.com/hashicorp/vault/pull/8863)] * http: Fix superflous call messages from the http package on logs caused by missing returns after `respondError` calls [[GH-8796](https://github.com/hashicorp/vault/pull/8796)] * namespace (enterprise): Fix namespace listing to return `key_info` when a scoping namespace is also provided. * seal/gcpkms: Fix panic that could occur if all seal parameters were provided via environment variables [[GH-8840](https://github.com/hashicorp/vault/pull/8840)] * storage/raft: Fix memory allocation and incorrect metadata tracking issues with snapshots [[GH-8793](https://github.com/hashicorp/vault/pull/8793)] * storage/raft: Fix panic that could occur if `disable_clustering` was set to true on Raft storage cluster [[GH-8784](https://github.com/hashicorp/vault/pull/8784)] * storage/raft: Handle errors returned from the API during snapshot operations [[GH-8861](https://github.com/hashicorp/vault/pull/8861)] * sys/wrapping: Allow unwrapping of wrapping tokens which contain nil data [[GH-8714](https://github.com/hashicorp/vault/pull/8714)] ## 1.4.0 (April 7th, 2020) CHANGES: * cli: The raft configuration command has been renamed to list-peers to avoid confusion. FEATURES: * **Kerberos Authentication**: Vault now supports Kerberos authentication using a SPNEGO token. Login can be performed using the Vault CLI, API, or agent. * **Kubernetes Service Discovery**: A new Kubernetes service discovery feature where, if configured, Vault will tag Vault pods with their current health status. For more, see [#8249](https://github.com/hashicorp/vault/pull/8249). * **MongoDB Atlas Secrets**: Vault can now generate dynamic credentials for both MongoDB Atlas databases as well as the [Atlas programmatic interface] (https://docs.atlas.mongodb.com/tutorial/manage-programmatic-access/). * **OpenLDAP Secrets Engine**: We now support password management of existing OpenLDAP user entries. For more, see [#8360] (https://github.com/hashicorp/vault/pull/8360/). * **Redshift Database Secrets Engine**: The database secrets engine now supports static and dynamic secrets for the Amazon Web Services (AWS) Redshift service. * **Service Registration Config**: A newly introduced `service_registration` configuration stanza, that allows for service registration to be configured separately from the storage backend. For more, see [#7887] (https://github.com/hashicorp/vault/pull/7887/). * **Transform Secrets Engine (Enterprise)**: A new secrets engine that handles secure data transformation and tokenization against provided input value. * **Integrated Storage**: Promoted out of beta and into general availability for both open-source and enterprise workloads. IMPROVEMENTS: * agent: add option to force the use of the auth-auth token, and ignore the Vault token in the request [[GH-8101](https://github.com/hashicorp/vault/pull/8101)] * api: Restore and fix DNS SRV Lookup [[GH-8520](https://github.com/hashicorp/vault/pull/8520)] * audit: HMAC http_raw_body in audit log; this ensures that large authenticated Prometheus metrics responses get replaced with short HMAC values [[GH-8130](https://github.com/hashicorp/vault/pull/8130)] * audit: Generate-root, generate-recovery-token, and generate-dr-operation-token requests and responses are now audited. [[GH-8301](https://github.com/hashicorp/vault/pull/8301)] * auth/aws: Reduce the number of simultaneous STS client credentials needed [[GH-8161](https://github.com/hashicorp/vault/pull/8161)] * auth/azure: subscription ID, resource group, vm and vmss names are now stored in alias metadata [[GH-30](https://github.com/hashicorp/vault-plugin-auth-azure/pull/30)] * auth/jwt: Additional OIDC callback parameters available for CLI logins [[GH-80](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/80) & [GH-86](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/86)] * auth/jwt: Bound claims may be optionally configured using globs [[GH-89](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/89)] * auth/jwt: Timeout during OIDC CLI login if process doesn't complete within 2 minutes [[GH-97](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/97)] * auth/jwt: Add support for the `form_post` response mode [[GH-98](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/98)] * auth/jwt: add optional client_nonce to authorization flow [[GH-104](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/104)] * auth/okta: Upgrade okta sdk lib, which should improve handling of groups [[GH-8143](https://github.com/hashicorp/vault/pull/8143)] * aws: Add support for v2 of the instance metadata service (see [issue 7924](https://github.com/hashicorp/vault/issues/7924) for all linked PRs) * core: Separate out service discovery interface from storage interface to allow new types of service discovery not coupled to storage [[GH-7887](https://github.com/hashicorp/vault/pull/7887)] * core: Add support for telemetry option `metrics_prefix` [[GH-8340](https://github.com/hashicorp/vault/pull/8340)] * core: Entropy Augmentation can now be used with AWS KMS and Vault Transit seals * core: Allow tls_min_version to be set to TLS 1.3 [[GH-8305](https://github.com/hashicorp/vault/pull/8305)] * cli: Incorrect TLS configuration will now correctly fail [[GH-8025](https://github.com/hashicorp/vault/pull/8025)] * identity: Allow specifying a custom `client_id` for identity tokens [[GH-8165](https://github.com/hashicorp/vault/pull/8165)] * metrics/prometheus: improve performance with high volume of metrics updates [[GH-8507](https://github.com/hashicorp/vault/pull/8507)] * replication (enterprise): Fix race condition causing clusters with high throughput writes to sometimes fail to enter streaming-wal mode * replication (enterprise): Secondary clusters can now perform an extra gRPC call to all nodes in a primary cluster in an attempt to resolve the active node's address * replication (enterprise): The replication status API now outputs `last_performance_wal`, `last_dr_wal`, and `connection_state` values * replication (enterprise): DR secondary clusters can now be recovered by the `replication/dr/secondary/recover` API * replication (enterprise): We now allow for an alternate means to create a Disaster Recovery token, by using a batch token that is created with an ACL that allows for access to one or more of the DR endpoints. * secrets/database/mongodb: Switched internal MongoDB driver to mongo-driver [[GH-8140](https://github.com/hashicorp/vault/pull/8140)] * secrets/database/mongodb: Add support for x509 client authorization to MongoDB [[GH-8329](https://github.com/hashicorp/vault/pull/8329)] * secrets/database/oracle: Add support for static credential rotation [[GH-26](https://github.com/hashicorp/vault-plugin-database-oracle/pull/26)] * secrets/consul: Add support to specify TLS options per Consul backend [[GH-4800](https://github.com/hashicorp/vault/pull/4800)] * secrets/gcp: Allow specifying the TTL for a service key [[GH-54](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/54)] * secrets/gcp: Add support for rotating root keys [[GH-53](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/53)] * secrets/gcp: Handle version 3 policies for Resource Manager IAM requests [[GH-77](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/77) * secrets/nomad: Add support to specify TLS options per Nomad backend [[GH-8083](https://github.com/hashicorp/vault/pull/8083)] * secrets/ssh: Allowed users can now be templated with identity information [[GH-7548](https://github.com/hashicorp/vault/pull/7548)] * secrets/transit: Adding RSA3072 key support [[GH-8151](https://github.com/hashicorp/vault/pull/8151)] * storage/consul: Vault returns now a more descriptive error message when only a client cert or a client key has been provided [[GH-4930]](https://github.com/hashicorp/vault/pull/8084) * storage/raft: Nodes in the raft cluster can all be given possible leader addresses for them to continuously try and join one of them, thus automating the process of join to a greater extent [[GH-7856](https://github.com/hashicorp/vault/pull/7856)] * storage/raft: Fix a potential deadlock that could occur on leadership transition [[GH-8547](https://github.com/hashicorp/vault/pull/8547)] * storage/raft: Refresh TLS keyring on snapshot restore [[GH-8546](https://github.com/hashicorp/vault/pull/8546)] * storage/etcd: Bumped etcd client API SDK [[GH-7931](https://github.com/hashicorp/vault/pull/7931) & [GH-4961](https://github.com/hashicorp/vault/pull/4961) & [GH-4349](https://github.com/hashicorp/vault/pull/4349) & [GH-7582](https://github.com/hashicorp/vault/pull/7582)] * ui: Make Transit Key actions more prominent [[GH-8304](https://github.com/hashicorp/vault/pull/8304)] * ui: Add Core Usage Metrics [[GH-8347](https://github.com/hashicorp/vault/pull/8347)] * ui: Add refresh Namespace list on the Namespace dropdown, and redesign of Namespace dropdown menu [[GH-8442](https://github.com/hashicorp/vault/pull/8442)] * ui: Update transit actions to codeblocks & automatically encode plaintext unless indicated [[GH-8462](https://github.com/hashicorp/vault/pull/8462)] * ui: Display the results of transit key actions in a modal window [[GH-8462](https://github.com/hashicorp/vault/pull/8575)] * ui: Transit key version styling updates & ability to copy key from dropdown [[GH-8480](https://github.com/hashicorp/vault/pull/8480)] BUG FIXES: * agent: Fix issue where TLS options are ignored for agent template feature [[GH-7889](https://github.com/hashicorp/vault/pull/7889)] * auth/jwt: Use lower case role names for `default_role` to match the `role` case convention [[GH-100](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/100)] * auth/ldap: Fix a bug where the UPNDOMAIN parameter was wrongly used to lookup the group membership of the given user [[GH-6325]](https://github.com/hashicorp/vault/pull/8333) * cli: Support autocompletion for nested mounts [[GH-8303](https://github.com/hashicorp/vault/pull/8303)] * cli: Fix CLI namespace autocompletion [[GH-8315](https://github.com/hashicorp/vault/pull/8315)] * identity: Fix incorrect caching of identity token JWKS responses [[GH-8412](https://github.com/hashicorp/vault/pull/8412)] * metrics/stackdriver: Fix issue that prevents the stackdriver metrics library to create unnecessary stackdriver descriptors [[GH-8073](https://github.com/hashicorp/vault/pull/8073)] * replication: Fix issue causing cubbyholes in namespaces on performance secondaries to not work. * replication (enterprise): Unmounting a dynamic secrets backend could sometimes lead to replication errors. Change the order of operations to prevent that. * seal (enterprise): Fix seal migration when transactional seal wrap backend is in use. * secrets/database/influxdb: Fix potential panic if connection to the InfluxDB database cannot be established [[GH-8282](https://github.com/hashicorp/vault/pull/8282)] * secrets/database/mysql: Ensures default static credential rotation statements are used [[GH-8240](https://github.com/hashicorp/vault/pull/8240)] * secrets/database/mysql: Fix inconsistent query parameter names: {{name}} or {{username}} for different queries. Now it allows for either for backwards compatibility [[GH-8240](https://github.com/hashicorp/vault/pull/8240)] * secrets/database/postgres: Fix inconsistent query parameter names: {{name}} or {{username}} for different queries. Now it allows for either for backwards compatibility [[GH-8240](https://github.com/hashicorp/vault/pull/8240)] * secrets/pki: Support FQDNs in DNS Name [[GH-8288](https://github.com/hashicorp/vault/pull/8288)] * storage/raft: Allow seal migration to be performed on Vault clusters using raft storage [[GH-8103](https://github.com/hashicorp/vault/pull/8103)] * telemetry: Prometheus requests on standby nodes will now return an error instead of forwarding the request to the active node [[GH-8280](https://github.com/hashicorp/vault/pull/8280)] * ui: Fix broken popup menu on the transit secrets list page [[GH-8348](https://github.com/hashicorp/vault/pull/8348)] * ui: Update headless Chrome flag to fix `yarn run test:oss` [[GH-8035](https://github.com/hashicorp/vault/pull/8035)] * ui: Update CLI to accept empty strings as param value to reset previously-set values * ui: Fix bug where error states don't clear when moving between action tabs on Transit [[GH-8354](https://github.com/hashicorp/vault/pull/8354)] ## 1.3.6 (May 21st, 2020) SECURITY: * core: proxy environment variables are now redacted before being logged, in case the URLs include a username:password. This vulnerability, CVE-2020-13223, is fixed in 1.3.6 and 1.4.2, but affects 1.4 and 1.4.1, as well as older versions of Vault [[GH-9022](https://github.com/hashicorp/vault/pull/9022) BUG FIXES: * auth/aws: Fix token renewal issues caused by the metadata changes in 1.3.5 [[GH-8991](https://github.com/hashicorp/vault/pull/8991)] * replication: Fix mount filter bug that allowed replication filters to hide local mounts on a performance secondary ## 1.3.5 (April 28th, 2020) CHANGES: * auth/aws: The default set of metadata fields added in 1.3.2 has been changed to `account_id` and `auth_type` [[GH-8783](https://github.com/hashicorp/vault/pull/8783)] IMPROVEMENTS: * auth/aws: The set of metadata stored during login is now configurable [[GH-8783](https://github.com/hashicorp/vault/pull/8783)] ## 1.3.4 (March 19th, 2020) SECURITY: * A vulnerability was identified in Vault and Vault Enterprise such that, under certain circumstances, an Entity's Group membership may inadvertently include Groups the Entity no longer has permissions to. This vulnerability, CVE-2020-10660, affects Vault and Vault Enterprise versions 0.9.0 and newer, and is fixed in 1.3.4. [[GH-8606](https://github.com/hashicorp/vault/pull/8606)] * A vulnerability was identified in Vault Enterprise such that, under certain circumstances, existing nested-path policies may give access to Namespaces created after-the-fact. This vulnerability, CVE-2020-10661, affects Vault Enterprise versions 0.11 and newer, and is fixed in 1.3.4. ## 1.3.3 (March 5th, 2020) BUG FIXES: * approle: Fix excessive locking during tidy, which could potentially block new approle logins for long enough to cause an outage [[GH-8418](https://github.com/hashicorp/vault/pull/8418)] * cli: Fix issue where Raft snapshots from standby nodes created an empty backup file [[GH-8097](https://github.com/hashicorp/vault/pull/8097)] * identity: Fix incorrect caching of identity token JWKS responses [[GH-8412](https://github.com/hashicorp/vault/pull/8412)] * kmip: role read now returns tls_client_ttl * kmip: fix panic when templateattr not provided in rekey request * secrets/database/influxdb: Fix potential panic if connection to the InfluxDB database cannot be established [[GH-8282](https://github.com/hashicorp/vault/pull/8282)] * storage/mysql: Fix potential crash when using MySQL as coordination for high availability [[GH-8300](https://github.com/hashicorp/vault/pull/8300)] * storage/raft: Fix potential crash when using Raft as coordination for high availability [[GH-8356](https://github.com/hashicorp/vault/pull/8356)] * ui: Fix missing License menu item [[GH-8230](https://github.com/hashicorp/vault/pull/8230)] * ui: Fix bug where default auth method on login is defaulted to auth method that is listing-visibility=unauth instead of "other" [[GH-8218](https://github.com/hashicorp/vault/pull/8218)] * ui: Fix bug where KMIP details were not shown in the UI Wizard [[GH-8255](https://github.com/hashicorp/vault/pull/8255)] * ui: Show Error messages on Auth Configuration page when you hit permission errors [[GH-8500](https://github.com/hashicorp/vault/pull/8500)] * ui: Remove duplicate form inputs for the GitHub config [[GH-8519](https://github.com/hashicorp/vault/pull/8519)] * ui: Correct HMAC capitalization [[GH-8528](https://github.com/hashicorp/vault/pull/8528)] * ui: Fix danger message in DR [[GH-8555](https://github.com/hashicorp/vault/pull/8555)] * ui: Fix certificate field for LDAP config [[GH-8573](https://github.com/hashicorp/vault/pull/8573)] ## 1.3.2 (January 22nd, 2020) SECURITY: * When deleting a namespace on Vault Enterprise, in certain circumstances, the deletion process will fail to revoke dynamic secrets for a mount in that namespace. This will leave any dynamic secrets in remote systems alive and will fail to clean them up. This vulnerability, CVE-2020-7220, affects Vault Enterprise 0.11.0 and newer. IMPROVEMENTS: * auth/aws: Add aws metadata to identity alias [[GH-7985](https://github.com/hashicorp/vault/pull/7985)] * auth/kubernetes: Allow both names and namespaces to be set to "*" [[GH-78](https://github.com/hashicorp/vault-plugin-auth-kubernetes/pull/78)] BUG FIXES: * auth/azure: Fix Azure compute client to use correct base URL [[GH-8072](https://github.com/hashicorp/vault/pull/8072)] * auth/ldap: Fix renewal of tokens without configured policies that are generated by an LDAP login [[GH-8072](https://github.com/hashicorp/vault/pull/8072)] * auth/okta: Fix renewal of tokens without configured policies that are generated by an Okta login [[GH-8072](https://github.com/hashicorp/vault/pull/8072)] * core: Fix seal migration error when attempting to migrate from auto unseal to shamir [[GH-8172](https://github.com/hashicorp/vault/pull/8172)] * core: Fix seal migration config issue when migrating from auto unseal to auto unseal [[GH-8172](https://github.com/hashicorp/vault/pull/8172)] * plugin: Fix issue where a plugin unwrap request potentially used an expired token [[GH-8058](https://github.com/hashicorp/vault/pull/8058)] * replication: Fix issue where a forwarded request from a performance/standby node could run into a timeout * secrets/database: Fix issue where a manual static role rotation could potentially panic [[GH-8098](https://github.com/hashicorp/vault/pull/8098)] * secrets/database: Fix issue where a manual root credential rotation request is not forwarded to the primary node [[GH-8125](https://github.com/hashicorp/vault/pull/8125)] * secrets/database: Fix issue where a manual static role rotation request is not forwarded to the primary node [[GH-8126](https://github.com/hashicorp/vault/pull/8126)] * secrets/database/mysql: Fix issue where special characters for a MySQL password were encoded [[GH-8040](https://github.com/hashicorp/vault/pull/8040)] * ui: Fix deleting namespaces [[GH-8132](https://github.com/hashicorp/vault/pull/8132)] * ui: Fix Error handler on kv-secret edit and kv-secret view pages [[GH-8133](https://github.com/hashicorp/vault/pull/8133)] * ui: Fix OIDC callback to check storage [[GH-7929](https://github.com/hashicorp/vault/pull/7929)]. * ui: Change `.box-radio` height to min-height to prevent overflow issues [[GH-8065](https://github.com/hashicorp/vault/pull/8065)] ## 1.3.1 (December 18th, 2019) IMPROVEMENTS: * agent: Add ability to set `exit-after-auth` via the CLI [[GH-7920](https://github.com/hashicorp/vault/pull/7920)] * auth/ldap: Add a `request_timeout` configuration option to prevent connection requests from hanging [[GH-7909](https://github.com/hashicorp/vault/pull/7909)] * auth/kubernetes: Add audience to tokenreview API request for Kube deployments where issuer is not Kube. [[GH-74](https://github.com/hashicorp/vault/pull/74)] * secrets/ad: Add a `request_timeout` configuration option to prevent connection requests from hanging [[GH-59](https://github.com/hashicorp/vault-plugin-secrets-ad/pull/59)] * storage/postgresql: Add support for setting `connection_url` from enviornment variable `VAULT_PG_CONNECTION_URL` [[GH-7937](https://github.com/hashicorp/vault/pull/7937)] * telemetry: Add `enable_hostname_label` option to telemetry stanza [[GH-7902](https://github.com/hashicorp/vault/pull/7902)] * telemetry: Add accept header check for prometheus mime type [[GH-7958](https://github.com/hashicorp/vault/pull/7958)] BUG FIXES: * agent: Fix issue where Agent exits before all templates are rendered when using and `exit_after_auth` [[GH-7899](https://github.com/hashicorp/vault/pull/7899)] * auth/aws: Fixes region-related issues when using a custom `sts_endpoint` by adding a `sts_region` parameter [[GH-7922](https://github.com/hashicorp/vault/pull/7922)] * auth/token: Fix panic when getting batch tokens on a performance standby from a role that does not exist [[GH-8027](https://github.com/hashicorp/vault/pull/8027)] * core: Improve warning message for lease TTLs [[GH-7901](https://github.com/hashicorp/vault/pull/7901)] * identity: Fix identity token panic during invalidation [[GH-8043](https://github.com/hashicorp/vault/pull/8043)] * plugin: Fix a panic that could occur if a mount/auth entry was unable to mount the plugin backend and a request that required the system view to be retrieved was made [[GH-7991](https://github.com/hashicorp/vault/pull/7991)] * replication: Add `generate-public-key` endpoint to list of allowed endpoints for existing DR secondaries * secrets/gcp: Fix panic if bindings aren't provided in roleset create/update. [[GH-56](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/56)] * secrets/pki: Prevent generating certificate on performance standby when storing [[GH-7904](https://github.com/hashicorp/vault/pull/7904)] * secrets/transit: Prevent restoring keys to new names that are sub paths [[GH-7998](https://github.com/hashicorp/vault/pull/7998)] * storage/s3: Fix a bug in configurable S3 paths that was preventing use of S3 as a source during `operator migrate` operations [[GH-7966](https://github.com/hashicorp/vault/pull/7966)] * ui: Ensure secrets with a period in their key can be viewed and copied [[GH-7926](https://github.com/hashicorp/vault/pull/7926)] * ui: Fix status menu after demotion [[GH-7997](https://github.com/hashicorp/vault/pull/7997)] * ui: Fix select dropdowns in Safari when running Mojave [[GH-8023](https://github.com/hashicorp/vault/pull/8023)] ## 1.3 (November 14th, 2019) CHANGES: * Secondary cluster activation: There has been a change to the way that activating performance and DR secondary clusters works when using public keys for encryption of the parameters rather than a wrapping token. This flow was experimental and never documented. It is now officially supported and documented but is not backwards compatible with older Vault releases. * Cluster cipher suites: On its cluster port, Vault will no longer advertise the full TLS 1.2 cipher suite list by default. Although this port is only used for Vault-to-Vault communication and would always pick a strong cipher, it could cause false flags on port scanners and other security utilities that assumed insecure ciphers were being used. The previous behavior can be achieved by setting the value of the (undocumented) `cluster_cipher_suites` config flag to `tls12`. * API/Agent Renewal behavior: The API now allows multiple options for how it deals with renewals. The legacy behavior in the Agent/API is for the renewer (now called the lifetime watcher) to exit on a renew error, leading to a reauthentication. The new default behavior is for the lifetime watcher to ignore 5XX errors and simply retry as scheduled, using the existing lease duration. It is also possible, within custom code, to disable renewals entirely, which allows the lifetime watcher to simply return when it believes it is time for your code to renew or reauthenticate. FEATURES: * **Vault Debug**: A new top-level subcommand, `debug`, is added that allows operators to retrieve debugging information related to a particular Vault node. Operators can use this simple workflow to capture triaging information, which can then be consumed programmatically or by support and engineering teams. It has the abilitity to probe for config, host, metrics, pprof, server status, and replication status. * **Recovery Mode**: Vault server can be brought up in recovery mode to resolve outages caused due to data store being in bad state. This is a privileged mode that allows `sys/raw` API calls to perform surgical corrections to the data tore. Bad storage state can be caused by bugs. However, this is usually observed when known (and fixed) bugs are hit by older versions of Vault. * **Entropy Augmentation (Enterprise)**: Vault now supports sourcing entropy from external source for critical security parameters. Currently an HSM that supports PKCS#11 is the only supported source. * **Active Directory Secret Check-In/Check-Out**: In the Active Directory secrets engine, users or applications can check out a service account for use, and its password will be rotated when it's checked back in. * **Vault Agent Template**: Vault Agent now supports rendering templates containing Vault secrets to disk, similar to Consul Template [[GH-7652](https://github.com/hashicorp/vault/pull/7652)] * **Transit Key Type Support**: Signing and verification is now supported with the P-384 (secp384r1) and P-521 (secp521r1) ECDSA curves [[GH-7551](https://github.com/hashicorp/vault/pull/7551)] and encryption and decryption is now supported via AES128-GCM96 [[GH-7555](https://github.com/hashicorp/vault/pull/7555)] * **SSRF Protection for Vault Agent**: Vault Agent has a configuration option to require a specific header before allowing requests [[GH-7627](https://github.com/hashicorp/vault/pull/7627)] * **AWS Auth Method Root Rotation**: The credential used by the AWS auth method can now be rotated, to ensure that only Vault knows the credentials it is using [[GH-7131](https://github.com/hashicorp/vault/pull/7131)] * **New UI Features**: The UI now supports managing users and groups for the Userpass, Cert, Okta, and Radius auth methods. * **Shamir with Stored Master Key**: The on disk format for Shamir seals has changed, allowing for a secondary cluster using Shamir downstream from a primary cluster using Auto Unseal. [[GH-7694](https://github.com/hashicorp/vault/pull/7694)] * **Stackdriver Metrics Sink**: Vault can now send metrics to [Stackdriver](https://cloud.google.com/stackdriver/). See the [configuration documentation](https://www.vaultproject.io/docs/config/index.html) for details. [[GH-6957](https://github.com/hashicorp/vault/pull/6957)] * **Filtered Paths Replication (Enterprise)**: Based on the predecessor Filtered Mount Replication, Filtered Paths Replication allows now filtering of namespaces in addition to mounts. * **Token Renewal via Accessor**: Tokens can now be renewed via the accessor value through the new `auth/token/renew-accessor` endpoint if the caller's token has permission to access that endpoint. * **Improved Integrated Storage (Beta)**: Improved raft write performance, added support for non-voter nodes, along with UI support for: using raft storage, joining a raft cluster, and downloading and restoring a snapshot. IMPROVEMENTS: * agent: Add ability to set the TLS SNI name used by Agent [[GH-7519](https://github.com/hashicorp/vault/pull/7519)] * agent & api: Change default renewer behavior to ignore 5XX errors [[GH-7733](https://github.com/hashicorp/vault/pull/7733)] * auth/jwt: The redirect callback host may now be specified for CLI logins [[GH-71](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/71)] * auth/jwt: Bound claims may now contain boolean values [[GH-73](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/73)] * auth/jwt: CLI logins can now open the browser when running in WSL [[GH-77](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/77)] * core: Exit ScanView if context has been cancelled [[GH-7419](https://github.com/hashicorp/vault/pull/7419)] * core: re-encrypt barrier and recovery keys if the unseal key is updated [[GH-7493](https://github.com/hashicorp/vault/pull/7493)] * core: Don't advertise the full set of TLS 1.2 cipher suites on the cluster port, even though only strong ciphers were used [[GH-7487](https://github.com/hashicorp/vault/pull/7487)] * core (enterprise): Add background seal re-wrap * core/metrics: Add config parameter to allow unauthenticated sys/metrics access. [[GH-7550](https://github.com/hashicorp/vault/pull/7550)] * metrics: Upgrade DataDog library to improve performance [[GH-7794](https://github.com/hashicorp/vault/pull/7794)] * replication (enterprise): Write-Ahead-Log entries will not duplicate the data belonging to the encompassing physical entries of the transaction, thereby improving the performance and storage capacity. * replication (enterprise): Added more replication metrics * replication (enterprise): Reindex process now compares subpages for a more accurate indexing process. * replication (enterprise): Reindex API now accepts a new `skip_flush` parameter indicating all the changes should not be flushed while the tree is locked. * secrets/aws: The root config can now be read [[GH-7245](https://github.com/hashicorp/vault/pull/7245)] * secrets/database/cassandra: Add ability to skip verfication of connection [[GH-7614](https://github.com/hashicorp/vault/pull/7614)] * secrets/gcp: Fix panic during rollback if the roleset has been deleted [[GH-52](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/52)] * storage/azure: Add config parameter to Azure storage backend to allow specifying the ARM endpoint [[GH-7567](https://github.com/hashicorp/vault/pull/7567)] * storage/cassandra: Improve storage efficiency by eliminating unnecessary copies of value data [[GH-7199](https://github.com/hashicorp/vault/pull/7199)] * storage/raft: Improve raft write performance by utilizing FSM Batching [[GH-7527](https://github.com/hashicorp/vault/pull/7527)] * storage/raft: Add support for non-voter nodes [[GH-7634](https://github.com/hashicorp/vault/pull/7634)] * sys: Add a new `sys/host-info` endpoint for querying information about the host [[GH-7330](https://github.com/hashicorp/vault/pull/7330)] * sys: Add a new set of endpoints under `sys/pprof/` that allows profiling information to be extracted [[GH-7473](https://github.com/hashicorp/vault/pull/7473)] * sys: Add endpoint that counts the total number of active identity entities [[GH-7541](https://github.com/hashicorp/vault/pull/7541)] * sys: `sys/seal-status` now has a `storage_type` field denoting what type of storage the cluster is configured to use * sys: Add a new `sys/internal/counters/tokens` endpoint, that counts the total number of active service token accessors in the shared token storage. [[GH-7541](https://github.com/hashicorp/vault/pull/7541)] * sys/config: Add a new endpoint under `sys/config/state/sanitized` that returns the configuration state of the server. It excludes config values from `storage`, `ha_storage`, and `seal` stanzas and some values from `telemetry` due to potential sensitive entries in those fields. * ui: when using raft storage, you can now join a raft cluster, download a snapshot, and restore a snapshot from the UI [[GH-7410](https://github.com/hashicorp/vault/pull/7410)] * ui: clarify when secret version is deleted in the secret version history dropdown [[GH-7714](https://github.com/hashicorp/vault/pull/7714)] BUG FIXES: * agent: Fix a data race on the token value for inmemsink [[GH-7707](https://github.com/hashicorp/vault/pull/7707)] * api: Fix Go API using lease revocation via URL instead of body [[GH-7777](https://github.com/hashicorp/vault/pull/7777)] * api: Allow setting a function to control retry behavior [[GH-7331](https://github.com/hashicorp/vault/pull/7331)] * auth/gcp: Fix a bug where region information in instance groups names could cause an authorization attempt to fail [[GH-74](https://github.com/hashicorp/vault-plugin-auth-gcp/pull/74)] * cli: Fix a bug where a token of an unknown format (e.g. in ~/.vault-token) could cause confusing error messages during `vault login` [[GH-7508](https://github.com/hashicorp/vault/pull/7508)] * cli: Fix a bug where the `namespace list` command with JSON formatting always returned an empty object [[GH-7705](https://github.com/hashicorp/vault/pull/7705)] * cli: Command timeouts are now always specified solely by the `VAULT_CLIENT_TIMEOUT` value. [[GH-7469](https://github.com/hashicorp/vault/pull/7469)] * core: Don't allow registering a non-root zero TTL token lease. This is purely defense in depth as the lease would be revoked immediately anyways, but there's no real reason to allow registration. [[GH-7524](https://github.com/hashicorp/vault/pull/7524)] * identity (enterprise): Fixed identity case sensitive loading in secondary cluster [[GH-7327](https://github.com/hashicorp/vault/pull/7327)] * identity: Ensure only replication primary stores the identity case sensitivity state [[GH-7820](https://github.com/hashicorp/vault/pull/7820)] * raft: Fixed VAULT_CLUSTER_ADDR env being ignored at startup [[GH-7619](https://github.com/hashicorp/vault/pull/7619)] * secrets/pki: Don't allow duplicate SAN names in issued certs [[GH-7605](https://github.com/hashicorp/vault/pull/7605)] * sys/health: Pay attention to the values provided for `standbyok` and `perfstandbyok` rather than simply using their presence as a key to flip on that behavior [[GH-7323](https://github.com/hashicorp/vault/pull/7323)] * ui: using the `wrapped_token` query param will work with `redirect_to` and will automatically log in as intended [[GH-7398](https://github.com/hashicorp/vault/pull/7398)] * ui: fix an error when initializing from the UI using PGP keys [[GH-7542](https://github.com/hashicorp/vault/pull/7542)] * ui: show all active kv v2 secret versions even when `delete_version_after` is configured [[GH-7685](https://github.com/hashicorp/vault/pull/7685)] * ui: Ensure that items in the top navigation link to pages that users have access to [[GH-7590](https://github.com/hashicorp/vault/pull/7590)] ## 1.2.4 (November 7th, 2019) SECURITY: * In a non-root namespace, revocation of a token scoped to a non-root namespace did not trigger the expected revocation of dynamic secret leases associated with that token. As a result, dynamic secret leases in non-root namespaces may outlive the token that created them. This vulnerability, CVE-2019-18616, affects Vault Enterprise 0.11.0 and newer. * Disaster Recovery secondary clusters did not delete already-replicated data after a mount filter has been created on an upstream Performance secondary cluster. As a result, encrypted secrets may remain replicated on a Disaster Recovery secondary cluster after application of a mount filter excluding those secrets from replication. This vulnerability, CVE-2019-18617, affects Vault Enterprise 0.8 and newer. * Update version of Go to 1.12.12 to fix Go bug golang.org/issue/34960 which corresponds to CVE-2019-17596. CHANGES: * auth/aws: If a custom `sts_endpoint` is configured, Vault Agent and the CLI should provide the corresponding region via the `region` parameter (which already existed as a CLI parameter, and has now been added to Agent). The automatic region detection added to the CLI and Agent in 1.2 has been removed. IMPROVEMENTS: * cli: Ignore existing token during CLI login [[GH-7508](https://github.com/hashicorp/vault/pull/7508)] * core: Log proxy settings from environment on startup [[GH-7528](https://github.com/hashicorp/vault/pull/7528)] * core: Cache whether we've been initialized to reduce load on storage [[GH-7549](https://github.com/hashicorp/vault/pull/7549)] BUG FIXES: * agent: Fix handling of gzipped responses [[GH-7470](https://github.com/hashicorp/vault/pull/7470)] * cli: Fix panic when pgp keys list is empty [[GH-7546](https://github.com/hashicorp/vault/pull/7546)] * cli: Command timeouts are now always specified solely by the `VAULT_CLIENT_TIMEOUT` value. [[GH-7469](https://github.com/hashicorp/vault/pull/7469)] * core: add hook for initializing seals for migration [[GH-7666](https://github.com/hashicorp/vault/pull/7666)] * core (enterprise): Migrating from one auto unseal method to another never worked on enterprise, now it does. * identity: Add required field `response_types_supported` to identity token `.well-known/openid-configuration` response [[GH-7533](https://github.com/hashicorp/vault/pull/7533)] * identity: Fixed nil pointer panic when merging entities [[GH-7712](https://github.com/hashicorp/vault/pull/7712)] * replication (Enterprise): Fix issue causing performance standbys nodes disconnecting when under high loads. * secrets/azure: Fix panic that could occur if client retries timeout [[GH-7793](https://github.com/hashicorp/vault/pull/7793)] * secrets/database: Fix bug in combined DB secrets engine that can result in writes to static-roles endpoints timing out [[GH-7518](https://github.com/hashicorp/vault/pull/7518)] * secrets/pki: Improve tidy to continue when value is nil [[GH-7589](https://github.com/hashicorp/vault/pull/7589)] * ui (Enterprise): Allow kv v2 secrets that are gated by Control Groups to be viewed in the UI [[GH-7504](https://github.com/hashicorp/vault/pull/7504)]

@MyKo101

# remotes 2.2.0 ## New functions and features * New `system_requirements()` function to query the Public RStudio Package Manager for system requirements for a package (and its dependencies) * Remotes functions can now install dependencies from additional DESCRIPTION fields, e.g. passing `dependencies = "Config/Needs/website"` will install the dependencies listed in the `Config/Needs/website: ` field in the package's DESCRIPTION. Prefixing fields with `Config/Needs` allows them to pass `R CMD check` without a NOTE, so it is the recommended format for these extra dependencies. * `install_*()` family of functions now use the default branch in the repository, not the `master` branch (@MyKo101,#508). ## Minor improvements and fixes * Internal functions `remote_download()`, `remote_metadata()`, `remote_package_name()` and `remote_sha()` are now exported, so 3rd party packages could provide methods for new remote types (#509, #56) * Internal functions `add_metadata()`, `github_remote()` are now exported. They are mainly for 3rd party extensions and should not be used by most users (#485). * `install_version()` now keeps searching subsequent repositories for the requested version, rather than failing if the version it finds in an early repository is unsuitable. (#305, @kenahoo) * `install_version()` now understands specifications like '>= 1.0' or '>= 1.12.0, < 1.14' to install the first version of the package it can find that satisfies the criteria. (#305, @kenahoo) * `install_version()` now avoids use of `base::url()`, as prior to R 3.6.2 it had a bug when downloading large files (#463) * `parse_submodules()` internal regular expression is now PCRE 2 compatible (#502, @jan-glx) * `update_packages()` argument `force` has been deprecated and no longer has any effect (#521) * Another fix for the mixed binary and source dependency issue, it should hopefully be fully squashed now (#296) * The upgrade menu is now interruptible in RStudio (#489). * Internal GitHub functions now correctly handle cases when characters are not representable in the default locale, but are representable in UTF-8 (#492). # remotes 2.1.1 ## Minor improvements and fixes * Installing mixed binary and source dependencies when the latest versions of some packages do not have binaries yet should now install dependencies in the correct order to prevent load failures (#296) * `github_error()` now also works when a GitHub (Enterprise) server does not return information about the rate limit (@dpprdan, #396, #413). * `install_gitlab` passes the `quiet` argument on to `gitlab_pat` (@MichaelChirico, #437) * `remotes` is now resilient against installed packages that declare `RemoteType: standard` but do not include a `RemoteRepos` or `RemotePkgType` field. In such a case, the values for `getOption("repos")` and `getOption("pkgType")` will be used (respectively). * `install_gitlab()` now installs from repositories in subgroups and with dots in their name. `subdir` is now an explicit argument instead of implicit in `repo` (@robertdj, #259, #420). * `install()` now passes the ellipsis `...` to `install_deps()` (@Neil-Schneider, #411) * The tests have been updated to work with newer versions of callr and R 4.0

Changes: Vim-style expandtab option (#75, #76, #80) Provides Turkish translation (#68) Backspace now deletes \ rather than being escaped (#25) T during motion commands is now VI-compatible (#35) Encoding related fixes, such as UTF-8 detection (#61, #42, #65) Fixed a number of memory management issues (#56)

20200120 + resync with my-autoconf. + fix typos found with codespell. + when reading input in interactive mode, provide for extending the buffer size for very long lines (Original-Mawk #59). 20200106 + correct line-number shown in too-many-arguments error message for the case where the function is a forward reference (report by "mukti"). + fix install for manpage when configure --srcdir option is used (report by Rajeev V Pillai). + use both CFLAGS/LDFLAGS when linking in makefile (report by Rajeev V Pillai). + fix clang-9 warning in bi_funct.c (report by Rajeev V Pillai). + minor improvement to gcc warning options, from vile 20191231 + updated configure macros + update config.guess and config.sub 20190203 + improve manpage formatting, e.g., for man2html + improve debug-traces 20190129 + eliminate non-portable tdestroy() from zmalloc no-leaks code. + updated configure macros + update config.guess and config.sub 20181114 + revert a change for memory-leaks which made the forced-exit via a user function inconsistent with earlier versions (report by Sihera Andre). + amend a change for memory-leaks to avoid a double-free (Original-Mawk #56).

Update HOMEPAGE, from author in PR 56041. 1.4.1 Fixed a memory overflow bug while reading files from the command line, using a patch from David Tardon, which was passed on by UsernameRandomlyGenerated. [#56] #sf-patch-3 1.4.0 Added Regression tests for basic functionality, based on old custom scripts. Regression tests confirming fixes for previously fixed issues: #14, #19. Changed Removed one check for . and .. when traversing a directory tree. #12 Regenerated config file parser. Updated the safe filter to translate new lines, carriage returns, and tabs into underscores. #9 #11 #17 Fixed The examples in detox.1 no longer say -c when they mean -f. #30 The command synopsis in detox.1 and inline-detox.1 no longer adds a dash before the sequence and configfile. #30 1.3.3 Fix version identifier in detox binary. 1.3.2 Fixed Table based UTF-8 translation no longer mangles characters. [#14] 1.3.1 Fixed Merged fix for Debian #861537, written by Vasily Kolobkov, passed on by Zenaan Harkness, Quentin Guittard, and Joao Eriberto Mota Filho. This addresses an issue with detox generating malformed characters during translation. #14 1.3.0 Migrated from configure.in and Makefile.in to the full autoconf suite. [#1] Remove detox_path.h, in favor of command line defines. [#1] Removed libpopt support. [#2] Fixed the way inline-detox is generated. [#6] Merged parse_option_*.[ch] and file*.[ch]. [#1, #2, #6] Added --inline as an option to detox, to enable inline mode on the main binary. [#6]

Upstream changes: 1.34 Oct 26 2020 - #50 Stop depending on constants dropped from Perl 5.28 1.33 Oct 26 2020 - #52 Fix memory corruption. - #53 Fix for handling circular aliases. - #56 syck.h: unconditionally include stdlib.h - Switch changelog to a more parsible format. - Update github CI to use a cpanfile. - Update Devel::PPPort to 3.62

pkgsrc changes: --------------- * NVMe patch removed upstream changes: ----------------- 2020-12-30 Christian Franke <[email protected]> smartmontools 7.2 2020-12-30 Christian Franke <[email protected]> configure.ac, update-smart-drivedb.in: Use RELEASE_7_2_DRIVEDB for drivedb.h updates. Create new branch RELEASE_7_2_DRIVEDB. 2020-12-29 Christian Franke <[email protected]> drivedb.h: - Micron 5100 Pro / 52x0 / 5300 SSDs: 5300HC. - Samsung based SSDs: PM871 MZY* (#1384), 870 QVO (#1388). - Silicon Motion based SSDs: ADATA IMSS332 (#1399), ADATA SU650NS38 (#1386), JAJS600M1TB (#1414), NFN025SA31T. - Silicon Motion based OEM SSDs: Dogfish, Intenso portable (GH issues/81, GH pull/82), Intenso Sata III (#1412), KingDian S280 (#1402). - SK hynix SATA SSDs: SC300 (#1407). - Hitachi Travelstar 5K500.B: *SA02 (#1408). - Fix '-v' comments. Remove trailing whitespace. scsinvme.cpp: Realtek: Limit NVMe log transfer size to 512 bytes. 2020-12-21 Christian Franke <[email protected]> smartctl.8.in: Add EXPERIMENTAL notes for SCSI variants of '-n POWERMODE' and '-s standby,...'. Fix syntax. update-smart-drivedb.in: Add 'Accept-Encoding' HTTP header when curl is used. This avoids caching problems with svn URL. update-smart-drivedb.in: Print output of 'gpg --import' if '-v' is specified. update-smart-drivedb.in: Extend expiration year of current database signing key from 2020 to 2025 (#1278). 2020-12-20 Christian Franke <[email protected]> configure.ac: Use AC_CONFIG_HEADERS instead of obsolete AC_CONFIG_HEADER. This silences a warning from new autoconf 2.70. Print 'deprecated' warning for '--with-solaris-sparc-ata'. drivedb.h: - Intel X25-E SSDs: IBM OEM (#1401). - Seagate BarraCuda 3.5: 12TB - Seagate Exos X16: 10TB (#1406, GH issues/63), 12TB. - Seagate Archive HDD: Rename to ...(SMR) (#1392). - Seagate BarraCuda, Enterprise Capacity, Exos, IronWolf: Add attributes 18, 200. - Seagate IronWolf Pro 125 SSDs (#1396). - Unify indentation. 2020-12-15 Douglas Gilbert <[email protected]> smartctl: expand -s option with standby,now and standby,off (or standby,0) to include SCSI. Modified code from Simon Fairweather found in github pull #72. As per my 20201205 patch, this area (i.e. SCSI power conditions including START and STOP) needs to be revisited; leave that until after the 7.2 release. 2020-12-14 Alex Samorukov <[email protected]> drivedb.h: add Sony HD-E1B (#1410) 2020-12-12 Alex Samorukov <[email protected]> Add automake 1.16.2 to the list of tested versions os_freebsd.cpp: number of minor patches from Christian Franke 2020-12-05 Douglas Gilbert <[email protected]> smartctl: expand -n option to include SCSI. Code from Simon Fairweather. Still thinking about how to handle SCSI "stopped" state which requires the user to send a SCSI command to restart. 2020-12-04 Christian Franke <[email protected]> nvmeprint.cpp: Print Log Page Attributes. Print NVMe 1.4 features. nvmecmds.cpp, nvmecmds.h, nvmeprint.cpp: Fix check for LPO support. 2020-12-03 Christian Franke <[email protected]> nvmeprint.cpp: Print NVMe version. nvmecmds.cpp, nvmecmds.h, nvmeprint.cpp: Limit NVMe log transfer size to one page. This should fix device or kernel crashes on '-l error' if log has more than 64 entries (#1404, Debian Bug 947803). nvmeprint.cpp: Read only requested number of entries from NVMe Error Information Log. 2020-11-23 Christian Franke <[email protected]> smartd.cpp: Allow to specify a delay limit for staggered self-tests. smartd.conf.5.in: Document new functionality. 2020-11-21 Christian Franke <[email protected]> smartd.cpp: Add staggered self-tests (#310). smartd.conf.5.in: Document new functionality. 2020-11-17 Dmitriy Potapov <[email protected]> smartd.cpp: Don't write attrlog when device is skipped due to idle or standby mode, or if attributes were not read for any other reason (GH pull/75). 2020-11-09 Christian Franke <[email protected]> smartd.cpp: Resolve symlinks before device names are checked for duplicates (#1390). dev_interface.cpp, dev_interface.h: Add 'get_unique_dev_name()' and 'is_raid_dev_type()' to support platform specific modifications. smartd.conf.5.in: Document new functionality. 2020-11-07 Christian Franke <[email protected]> json.cpp, json.h: Add YAML support. smartctl.cpp: Add '--json=y' option. smartctl.8.in: Document new option. smartctl.8.in, smartd.conf.5.in: Remove EXPERIMENTAL notes for features added before 7.0. update-smart-drivedb.8.in: Add missing EXPERIMENTAL note. 2020-11-01 Christian Franke <[email protected]> drivedb.h: - Phison Driven SSDs: KINGSTON OM4P0S3* (#1374), OMSP0S3* (#1375). - InnoDisk iCF 9000 / 1SE2 Cards: Rename entry. Add 1SE2 H (#1351). - Marvell based SanDisk SSDs: 2TB SDSSDH3 (GH issues/67, GH pull/69), WD Blue SSD WDS100T2B0A (#1378). - SanDisk based SSDs: SDSA6GM*. - Toshiba 2.5" HDD MK..76GSX/GS001A (GH pull/58). - Toshiba L200 (CMR), Toshiba L200 (SMR) (#1228, patch from #1377). - Western Digital Blue: Apple OEM (#1385). - Western Digital Scorpio Blue Serial ATA: 320 GB (patch from #888). os_win32.cpp: Decode Windows 10 20H2 and Server 2004, 20H2 build numbers. 2020-10-29 Alex Samorukov <[email protected]> os_freebsd.cpp: skip SCSI subenclosure devices on scan (#1299) 2020-10-24 Christian Franke <[email protected]> drivedb.h: - HGST Travelstar Z5K1000: *B*610 variant. - Hitachi Travelstar 7K320: HITACHI*SA60 variant (#983). - Hitachi/HGST Deskstar 5K4000: Rename entry. Add HGST (#1060). - HGST Deskstar NAS: 8TB. - Hitachi/HGST Ultrastar 5K3000 (#1055). - Hitachi Ultrastar 7K3000: Variant without vendor name (#1361). - Hitachi/HGST Ultrastar 7K4000: Variant without vendor name (#1361). - HGST Ultrastar HC310/320 (#1157, #1365). 2020-10-19 Christian Franke <[email protected]> drivedb.h: - ATP SATA III aMLC M.2 2242 SSD (based on patch from #1366). - Silicon Motion based OEM SSDs: TCSUNBOW X3 (#1349), KingDian S370 (#1350), LDLC (#1353), Lenovo. - SSSTC ER2 GD/CD Series SSDs (based on patch from #1376). 2020-10-15 Christian Franke <[email protected]> drivedb.h: - Apacer SSDs (based on patch from #1202). - Crucial/Micron MX500 SSDs (FW <= M3CR032): Remove entry (#1227). - Crucial/Micron Client SSDs: Rename entry. Fix name of attribute 127. This prevents false 'Currently unreadable (pending) sectors' warnings from smartd (#1227, #1294, #1311, #1336). - Intel 730 and DC S35x0/3610/3700 Series SSDs: *H* variant (#1363). - Samsung based SSDs: 883 DCT (#1373). os_win32.cpp: Fix removal of trailing blanks. Silence misleading -Wstring-compare warning from g++ 10.2.0 (GCC Bugzilla 97336). 2020-10-09 Christian Franke <[email protected]> scsiprint.cpp: Don't print 'Accumulated power on time' if no option is specified (GH issues/65, regression from r5075). Fix setting of 'any_output' (regression from r4188). Based on patch from GH pull/66. 2020-10-06 Christian Franke <[email protected]> Remove all occurrences of the throw() specifier. This specifier is deprecated since C++11. 2020-09-27 Christian Franke <[email protected]> update-smart-drivedb.in: Add '--branch' option. Select signing key accordingly. update-smart-drivedb.8.in: Document new option. 2020-09-20 Christian Franke <[email protected]> drivedb.h: - Crucial/Micron BX/MX1/2/3/500, M5/600, 11/1300 SSDs: BX500 2TB, 1100 with version suffix (#1178), 1300 without prefix (#1369). - Micron 5100 Pro / 52x0 / 5300 SSDs: Add attribute 246. - Phison Driven SSDs: Kingston A400 M.2 (#1362), Kingston OCP0S3* (#1370), Kingston OM8P0* (#1371). - Kingston SSDNow UV400/500: UV500 M.2 (#1347). - SAMSUNG SpinPoint N3U-3 (USB): Rename. - USB: Samsung S1 Mini (0x04e8:0x2f06) (Debian Bug 964032). 2020-09-19 Christian Franke <[email protected]> ataprint.cpp: Report unavailable TRIM command only for SSDs. 2020-08-23 Christian Franke <[email protected]> drivedb.h: DEFAULT entry: Limit attribute 231 (Temperature_Celsius) to HDDs. Various SSDs use this attribute for a different purpose. drivedb.h: - Micron 5100 Pro / 52x0 / 5300 SSDs: Rename, add 5210 (#1356), 5300 *TDT variant (#1355) - Phison Driven SSDs: SSD Smartbuy 64GB and other sizes (#1359) - Indilinx Barefoot_2/Everest/Martini based SSDs: OCZ-OCTANE (#1360) - Marvell based SanDisk SSDs: Ultra 3D 4TB (#1358) - Silicon Motion based SSDs: ACPI SED2QII-LP, Transcend 230 - Western Digital Gold: WD102KRYZ (#1357) 2020-08-22 Christian Franke <[email protected]> smartd.service.in: Don't start smartd in virtualized environments (GH issues/62). 2020-08-22 Marko Hauptvogel <[email protected]> smartd.service.in: Remove obsolete 'StandardOutput=syslog'. 2020-07-11 Christian Franke <[email protected]> scsiprint.cpp: Add JSON values 'power_on_time.{hours,minutes}' to 'smartctl -a' output. Add missing pout() -> jout() replacements. 2020-07-10 Douglas Gilbert <[email protected]> scsiprint.cpp: Add "Accumulated power on time" entry to 'smartctl -a' output. Previously this was only output when the '-x' option was given, together with other fields in the Background scan results log page. Now with the '-a' option "Accumulated power on time" is printed just before the "Manufactured in week ..." line. 2020-07-06 Douglas Gilbert <[email protected]> scsiprint.cpp: Attempted fix to tickets 1272, 1331 and 1346 The difficulty is handling SCSI log _sub_-pages that hold info about SSDs and newer hard drives, against older devices (20 year old disks?) that do many and varied things when asked to list supported sub-pages. Add a heuristic and change some naming. 2020-06-24 Alex Samorukov <[email protected]> os_darwin.cpp: Fix NVMe log support, handle error codes, remove SMARTReadData call os_darwin.h: Cleanup, remove all private functions 2020-06-23 Harry Mallon <[email protected]> os_darwin.cpp, os_darwin.h: Add support for NVMe logs. smartctl.8.in: Update related documentation. 2020-06-20 Christian Franke <[email protected]> drivedb.h: - Crucial/Micron BX/MX1/2/3/500, M5/600, 11/1300 SSDs: Rename, add 1300 - Plextor M3/M5/M6/M7 Series SSDs: Rename, *M6G variant, *M7CV (#991) - Silicon Motion based SSDs: ADATA SU650 (#1243), ADATA SU655 - Seagate IronWolf Pro: 16TB (#1341) - USB: Toshiba (0x0930:0xa002) - USB: ADATA HD330 (0x125f:0xa83a) - USB: AkiTio NT2 (0x2ce5:0x0014) os_solaris.cpp: Suggest '-d sat' if '-d ata' is specified. 2020-06-18 Christian Franke <[email protected]> scsiprint.cpp: Fix JSON value 'scsi_grown_defect_list'. Thanks to Ryan Allgaier for the bug report. 2020-06-05 Alex Samorukov <[email protected]> os_netbsd.cpp: fix timeout handling os_openbsd.cpp (based on Marek Benc GH request): - Migrate to the new API (#102) - Fix for the ATA registries on the BE arc (GH PR #56) - Fix timeout handling (GH PR #56) 2020-06-01 Christian Franke <[email protected]> drivedb.h: - Crucial/Micron MX500 SSDs: Detect firmware <= M3CR032 (#1336) - Micron 5100 Pro / 5200 / 5300 SSDs: Rename, add 5300 (#1326) - Phison Driven SSDs: Corsair Force LE200 - JMicron/Maxiotek based SSDs: Rename, add KingSpec NT - Plextor M3/M5/M6 Series SSDs: *M6V variant - Seagate IronWolf: *VN001 variant (GH pull/55) - WD Blue / Red / Green SSDs: Rename, add WD Red SA500 (#1321) - Western Digital Blue Mobile: re-add WD10JPZX (removed in r5054) - USB: OWC Mercury Elite Pro Quad (0x1e91:0xa4a7) (patch from #1337) os_win32.cpp: Decode Windows 10 2004 build number. 2020-05-25 Christian Franke <[email protected]> ataprint.cpp: Print TRIM Command support info. Print Zoned Device Capabilities if reported. May also be useful to detect SMR HDDs (#1313). 2020-05-24 Christian Franke <[email protected]> drivedb.h: - Phison Driven SSDs: GIGABYTE GP-GSTFS31, KINGSTON DC450R/DC500M/DC500R 7.68TB (#1329), PNY CS900 (#1281) - Intel 320 Series SSDs: HP OEM (#1332) - JMicron based SSDs: ADATA SP600NS34 (GH pull/53), ADATA OEM IM2S3138E* (#1298) - Plextor M3/M5/M6 Series SSDs: allow extra space (#1293) - Samsung based SSDs: 860 EVO 4TB, 850/860 PRO 2/4TB (#1316) - Marvell based SanDisk SSDs: SDSSDA-* - Silicon Motion based SSDs: Corsair Force LX (#1320) - WD Blue and Green SSDs: WDBNCE* (#1129) drivedb.h: Add separate entries for WDC SMR drives (#1313). - Western Digital Blue (SMR) - Western Digital Black (SMR) - Western Digital Red: Move WD60EFAX to ... - Western Digital Red (SMR): ... here, add 2TB, 3TB, 4TB - Western Digital Blue Mobile: Move WD[12]0SPZX to ... - Western Digital Blue Mobile (SMR): ... here 2020-04-23 Christian Franke <[email protected]> drivedb.h: USB: Realtek RTL9210 (0x0bda:0x9210) scsinvme.cpp: Add '-d sntrealtek' device type for Realtek RTL9210 USB to NVMe bridges (#1315). dev_interface.cpp: Update help text. smartctl.8.in, smartd.conf.5.in: Document new option. Thanks to Plugable Support for providing a NVMe enclosure. 2020-04-05 Christian Franke <[email protected]> drivedb.h: - Crucial/Micron MX500 SSDs: Detect also older firmware (#1311) - Silicon Motion based SSDs: Add attributes 159 and 231 (#1304) - Seagate BarraCuda 3.5: Rename, merge entries, add ST2000DM008 (#1179, #1252, #1286), ST10000DM0004 - Seagate Exos X14: ST12000NM0538 (#1256) - Seagate Exos X16 (#1291, #1301) - Seagate Skyhawk (#1039) 2020-04-04 Christian Franke <[email protected]> dev_jmb39x_raid.cpp: Add '-d jms56x,...' device type for protocol variant used by JMS562 USB to SATA RAID bridges (#1314). dev_interface.cpp: Parse '-d jms56x*[+TYPE]' option, update help text. smartctl.8.in, smartd.conf.5.in: Document new option. 2020-03-29 Christian Franke <[email protected]> drivedb.h: - Western Digital Ultrastar He10/12: Rename, add He12 (#1308, GH issues/51) - Western Digital Ultrastar DC HC530 (#1257) - Western Digital Green: WD5000AZRX (#1072) - Western Digital Red: WD120EMFZ (GH issues/49) - Western Digital Purple: WD*PURZ, WD80PUZX (#1057) - Western Digital Gold: WD6003FRYZ - Western Digital Blue Mobile: Rename, re-add WD10JPVX (removed in r4991) - Western Digital Elements / My Passport (USB, AF): WD10SMZW (#1088), WD50NDZW 2020-03-28 Christian Franke <[email protected]> drivedb.h: - Crucial/Micron BX/MX1/2/3/500, M5/600, 1100 SSDs: CT1000BX500SSD1, MTFDDAK* (#1276) - Kingston SSDNow UV400/500: Rename, add UV500 (#1126) - Silicon Motion based SSDs: KingDian S100/200, Kingdian S280 1TB, Kingston KC600 (#1304), Transcend MTS420S (#1280), Transcend 360S (#1282) - Seagate IronWolf Pro: ST4000NE001 - Western Digital RE3 Serial ATA: WD*BYS-* variant - Western Digital Gold: WD4003FRYZ (#1289), WD8004FRYZ (#1287) - USB: 0x0860:0x0001 (#1295) - USB: JMicron (0x152d:0x1337) (#1296) - USB: Corsair SSD & HDD Cloning Kit (0x0984:0x0301) (#1307) 2020-03-25 Christian Franke <[email protected]> smartd.cpp: Set 'SMARTD_DEVICETYPE=auto' if DEVICESCAN is used without '-d TYPE' directive (GH issues/52). 2020-03-05 Christian Franke <[email protected]> Silence some cppcheck 1.85 warnings. nvmeprint.cpp, smartd.cpp: knownConditionTrueFalse. scsicmds.cpp, scsiprint.cpp: variableScope. scsicmds.h: Remove unused function supported_vpd_pages::num_pages(). cppcheck.sh: Remove no longer used HAVE_*NTDDDISK_H defines. 2020-03-01 Christian Franke <[email protected]> dev_intelliprop.cpp, dev_interface.cpp, dev_interface.h: Move option parsing to get_intelliprop_device(). Move this function to class smart_interface. dev_intelliprop.h: Remove file. Makefile.am, os_win32/vc14/smart*.vcxproj*: Remove old file. configure.ac: Fail if '--without-working-snprintf' is specified. utility.cpp, utility.h: Remove support for pre-C99 snprintf(). os_win32.cpp: Remove backward compatibility fixes for include files of very old versions of Cygwin, MinGW and MSVC. configure.ac, Makefile.am: Remove check for DDK include files. 2020-02-25 Christian Franke <[email protected]> Silence some warnings from g++ 9.2: atacmds.cpp: -Waddress-of-packed-member. os_win32.cpp: -Wcast-function-type. smartd.cpp: -Wformat-truncation. 2020-02-25 Fabrice Fontaine <[email protected]> configure.ac: fix stack-protector detection. Use AC_LINK_IFELSE instead of AC_COMPILE_IFELSE to check for stack-protector availability as some compilers could missed the needed library (-lssp or -lssp_nonshared) at linking step. 2020-01-11 Christian Franke <[email protected]> dev_jmb39x_raid.cpp: Add '-d jmb39x-q,...' device type for JMB39x protocol variant used by QNAP-TR004 NAS (#1283). dev_interface.cpp: Update help text. smartctl.8.in, smartd.conf.5.in: Document '-q' suffix. 2020-01-02 Christian Franke <[email protected]> configure.ac: Use 'uname -n' if 'hostname' is not available (GH PR 44). Remove check for SVN < 1.7. 2020-01-01 Christian Franke <[email protected]> Happy New Year! Update copyright year in version info.

3.0.10 (2021-03-15) Merged Pull Requests * Split using a string not a regex #55 (tas50) * Replace FILE with dir and use safe operators #54 (tas50) * Test on Ruby 3 and update gem caching #56 (tas50)

Patchlevel 8 (Dec 2020) NEW FEATURES: o Use deflate to embed image data into eps output, often substantially reducing file size. o Embed pdf files into ps output by converting the pdf to eps. o Allow negative arrow widths. This might be useful for asymmetric arrow tips, which can thus be mirrored around the corresponding line. BUGS FIXED: Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#. o Reject negative text font sizes. Fixes ticket #86. o Allow fig files ending without previous eol character. Fixes #83, #84. o Accept text and ellipse angles only within -2*pi to 2*pi. Fixes #76. o Allow -1 as default TeX font, not only 0. Fixes #71, #75, #81. o Do not allow ASCII NUL anywhere in input. Fixes #65, #68, #73, #80. o Use getline() to improve input scanning. Fixes tickets #58, #59, #61, #62, #67, #78, #79, #82. o Correctly scan embedded pdfs for /MediaBox value. o Convert polygons having too few points to polylines. Ticket #56. o Reject huge arrow types causing integer overflow. Ticket #57. o Allow Fig v2 text strings ending with multiple ^A. Ticket #55. o Embed images in pdfs with their original compression type, i.e., leave the gs switch "-dAutoFilterColorImages" at its default value "true".

Overview of changes for 1.6 ============================== • Add getters with default fallback for JsonObject [Emmanuele Bassi] • #26 - Clarify some expections of the json_object_get_*_member APIs [Debarshi Ray] • #29 - Improve reproducibility of the build [Ravish Bhatia] • Use json_node_unref() with g_autoptr() [Robert Ancell] • Clarify documentation regarding programmer errors [Philip Withnall] • Fix getting immutable root nodes from empty input [Philip Withnall] • Fix various memory leaks [Philip Withnall, Emmanuele Bassi] • Add `--output` option to json-glib-format [Emmanuele Bassi] • Refresh the build [Emmanuele Bassi] • Add glib as a fallback sub-project [Xavier Claessens] • Don't error with MSVC C4819 warning [Seungha Yang] • Fix nullable annotation [Niels De Graef] • Allow disabling tests when building [Stéphane Cerveau] • #39 - Fix default deserialization method for JsonSerializable [Jeremy Philippe] • Stop string to GVariant conversion failing due to unrelated errno changes [Robert Ancell] • Support loading files via memory mapping [Philip Withnall] • #33 - Add a symbol version to all exported symbols [Simon McVittie] • #48 - Fix build with Clang 11 [Dimitry Andric] • Stop using deprecated g_object_newv() constructor [Emmanuele Bassi] • Add ordered iteration to JsonObjectIter [Emmanuele Bassi] • #46 - Document nullability of `json_from_string()` [Emmanuele Bassi] • #45 - Properly detect multiple top-level statements [Emmanuele Bassi] • #41, #22 - Fix library versions on Darwin [Tom Schoonjans] • Fix build reproducibility [!33, Alexander Kanavin] • #26 - Fix parsing of UTF-16 surrogate pairs [James Westman] • #56 - Ignore UTF-8 BOM [Jan-Michael Brummer]

0.2.0.1 * Remove faulty default implementation of withRunInIO #56 0.2.0.0 * Move askUnliftIO out of class #55

1.7.9, released 2020-12-19 #72, add pureIf #73, make takeEnd, dropEnd, splitAtEnd: return immediately if i <= 0 #71, add compareLength and comparingLength 1.7.8, released 2020-09-12 #68, make sure Data.Foldable.Extra is exposed 1.7.7, released 2020-08-25 #67, defer to System.IO readFile', hGetContents' in GHC 9.0 1.7.6, released 2020-08-21 #66, add lots of functions to Data.Foldable.Extra (anyM etc) 1.7.5, released 2020-08-12 #65, add Data.Foldable.Extra #65, add sum', product', sumOn' and productOn' 1.7.4, released 2020-07-15 #59, add whileJustM and untilJustM #61, optimise nubOrd (10% or so) Add first3, second3, third3 1.7.3, released 2020-05-30 #58, add disjointOrd and disjointOrdBy 1.7.2, released 2020-05-25 #56, add zipWithLongest #57, make duration in MonadIO Simplify and optimise Barrier Mark modules that are empty as DEPRECATED Remove support for GHC 7.10 1.7.1, released 2020-03-10 Add NOINLINE to errorIO to work around a GHC 8.4 bug 1.7, released 2020-03-05 * #40, delete deprecated function for * zipFrom now truncates lists, rather than error, just like zip 1.6.21, released 2020-03-02 #54, deprecate nubOn since its O(n^2). Use nubOrdOn #53, add some nub functions to NonEmpty 1.6.20, released 2020-02-16 Add firstM, secondM 1.6.19, released 2020-02-11 #50, add headDef, lastDef, and dropEnd1

glibmm is a C++ interface for the devel/glib2 library. This package follows the 2.68 API. Changes compared to devel/glibmm: 2.68.0 (stable): This is the first stable release in the glibmm-2.68 ABI series. It is parallel-installable with the glibmm-2.4 ABI. The tarball for 2.68.0 has been created with 'meson dist'. If you build with Autotools from the tarball, please read the relevant part of the README file. Glib: * PropertyProxyConnectionNode::connect_changed(): Fix using without property name (Daniel Boles) Issue #74 (wswfc), merge request !35 * Remove BalancedTree (Kjell Ahlstedt) Gio: * ListStore: Accept interfaces (Andreas Persson) Merge request !38 * MenuModel: Make MenuAttribute and MenuLink enum class (Kjell Ahlstedt) * Add TlsClientConnectionImpl and TlsServerConnectionImpl (Kjell Ahlstedt) * SocketClient::signal_event(): Fix wrapping of 'connection' parameter (Kjell Ahlstedt) Issue #73 (smilingthax) gmmproc: * Add optional decl_prefix parameter to _WRAP_GERROR and _WRAP_ENUM Used for adding GLIBMM_API or similar for MS Visual C++ (Chun-wei Fan) Merge request !32 * Allow decorating comparison operators (for Visual Studio builds) (Chun-wei Fan) Merge request !33 * _CLASS_BOXEDTYPE, _CLASS_OPAQUE_COPYABLE: Fix move assignment (Kjell Ahlstedt) Issue #76 (misos1) * Decorate private generated classes with __declspec when building with Visual Studio (Chun-wei Fan) Merge request !39, !41 * generate_wrap_init.pl.in: Use g_type_ensure(SomeClass::get_type()) to ensure that get_type() is called (Kjell Ahlstedt) Build: * Use __declspec(dllexport) consistently when building glibmm with Visual Studio (Chun-wei Fan) Merge request !32 * Meson build: Set default value of the 'warnings' option to 'min' (Kjell Ahlstedt) * Improve NMake support (Chun-wei Fan) * Improve Visual Studio support (Chun-wei Fan) Merge request !37 * docs/reference/: Update for Doxygen >= 1.8.16 (Kjell Ahlstedt) * Meson build: Fix versioning on macOS (Kjell Ahlstedt) Pull request libsigcplusplus#65 (Tom Schoonjans) * Meson build: Fix detection of macOS (Tom Schoonjans) Merge request !43 * Change the ABI to glibmm-2.68 (Kjell Ahlstedt) Documentation: * Meson build: Add missing Glib::Value and Variant documentation (Kjell Ahlstedt) 2.65.3: (unstable): Distro packagers should probably not package this yet. Tests: * glibmm_buildfilename: Add some tests (Kjell Ahlstedt) Issue #71 (Kalev Lember) Build: * Meson build: Install generate_extra_defs.h (Kjell Ahlstedt) Issue #70 (Jan Alexander Steffens) 2.65.2: (unstable): Distro packagers should probably not package this yet. Glib: * Add missing #includes (Kjell Ahlstedt) Issue #69 (Kalev Lember) 2.65.1: (unstable): Distro packagers should probably not package this yet. Glib: * Add get_user_runtime_dir() (scx) Issue #57, merge request !14 * Add get_host_name() (scx) Issue #58, merge request !15 * MainContext: Add push/pop/get_thread_default() (Kjell Ahlstedt) Issue #56 (Yackie-Yang) * Add StdStringView and UStringView Use them in build_filename() and other functions (Thomas Holder, Kjell Ahlstedt) Issue #34 (Thomas Holder) Issue #64, #65 * Regex::match(): Avoid using string after deletion (Thomas Holder) Issue #66, merge request !25 * Add Glib::canonicalize_filename() (Kjell Ahlstedt) Issue #59 (Patrick Storz) * Binding: get_source() and get_target() return ObjectBase* (Kjell Ahlstedt) Issue #63 (Daniel Boles) * ustring: Fix insert(iterator, In, In) (Thomas Holder) Merge request !19 * Value: Adding static_assert() for template parameter (Pavlo Solntsev) Merge request !23 * Error: Derive from std::exception, remove Glib::Exception (Kjell Ahlstedt) Issue #23 (Daniel Boles) * Binding: Keep a binding alive even without a RefPtr (Kjell Ahlstedt) Issue #62 (Daniel Boles) Gio: * DBus::Connection: Make the wrap() function thread-safe (Kjell Ahlstedt) Issue #56 (Yackie-Yang) * SettingsSchemaSource: Add list_schemas() Add a create(), wrapping new_from_directory() (Daniel Boles) Issue #19, merge request !20 * DBus::Message::get_unix_fd_list(): Add refreturn (Kjell Ahlstedt) Issue #68 (kr.woaini) Tests: * Add glibmm_ustring_compare test (Thomas Holder) Issue #65 * Add glibmm_regex test (Thomas Holder) Issue #66, merge request !25 * Add glibmm_binding test (Daniel Boles) Merge request !18 gmmproc: * Add optional decl_prefix parameter to _CLASS_BOXEDTYPE, _CLASS_BOXEDTYPE_STATIC, _CLASS_GOBJECT, _CLASS_INTERFACE, _CLASS_OPAQUE_COPYABLE, _CLASS_OPAQUE_REFCOUNTED, _WRAP_GERROR Used for adding GLIBMM_API or similar for MS Visual C++ (Chun-wei Fan) Build: * Change the ABI to glibmm-2.66 (Kjell Ahlstedt) * Add Meson support (Chun-wei Fan, Kjell Ahlstedt) Merge request !27 * Drop gendef from Windows builds (Chun-wei Fan) Issue #12 (Mikhail Titov), merge request !29 Documentation: * Correct spelling of spawn_async_with_pipes() (Mike Fleetwood) Merge request !16 * Glib::Binding: Several doc improvements (Daniel Boles) Merge request !18 * Glib::Binding: Explain why SlotTransform takes GValue* (Kjell Ahlstedt) Issue #61 (Daniel Boles) * Gio::AsyncResult: Improve the class description (Kjell Ahlstedt) Issue #27 (Alberto Mardegan)

What's Changed -Rewrite theme structs in #54 -Tweak application UI in #55 -[#51] add font highlight for CommentView and StoryView in #56 -Add story tag navigation commands in #57 -Add font highlighting for ArticleView in #58 -Update documentation and configuration structures in #59 -Integrate comfy_table in #60 -Pre-release v0.9.0 in #61 Breaking changes -There are a lot of breaking changes regarding the config options and the corresponding default values. It's highly recommended to read the config documentation or the example config file to migrate from the old versions.

@sternenseemann

### v0.3.2 2021-02-08 Arles (France) - `freenstanding` support does not need `opam` (@sternenseemann, @dinosaure, #53) - Fix big-endian support (@dinosaure, #56) - Use `which` when `command -v` is not available (@dinosaure, @sternenseemann, @mseri, #56) - Fix `esy` support and on its environment the MirageOS 3 support (@dinosaure, @mseri, #56) - Upgrade to `ocamlformat.0.19.0` (@dinosaure, #57) ### v0.3.1 2021-23-02 Paris (France) - Upgrade `checkseum` to `optint.0.0.5` (@dinosaure, #51) ### v0.3.0 2020-11-03 Paris (France) - Upgrade C artifacts with MirageOS 3.9 (#50, @dinosaure, @hannesm) - Fix `esy` installation (#49, @dinosaure, @jordwalke, reported by @Faliszek) ### v0.2.1 2020-06-15 Paris (France) - Move to dune.2.6.0 (#47) ### v0.2.0 2020-06-03 Paris (France) - fix cross-compilation with `dune -x windows` (#45, @dinosaure, @pirbo) - add CRC-24 (#43, @dinosaure, @cfcs) - factorize C stubs (as digestif) - avoid clash of names when we use `checkseum.c` Any functions are prefixed by `checkseum_` - fix META file (#39 & #41, @hannesm, @dinosaure) A test was added to see if runes (static C libraries) are available for MirageOS targets (freestanding & xen) - provide a binary `checkseum` to _digest_ standard input or file `checkseum.checkseum` is available to compute check-sum of standard input or file. The tool is used only for debugging. - clean distribution (#38, @dinosaure) `checkseum` depends only on `bigarray-compat`, `base-bytes` & `optint` - `limits.h` is available on any targets (#37, @dinosaure, @pirbo) ### v0.1.1 2019-09-12 Paris (France) - Compatibility with mirage+dune (#29, @dinosaure) - Use `bigarray-compat` (#29, @TheLortex) - Add constraints with < mirage-runtime.4.0.0 `checkseum` (as some others packages) must be used with MirageOS 4 where `checkseum.0.9.0` is a compatibility package with Mirage)S 3 - Replace `STDC` macro check by `STDDEF_H_` to be able to compile (#34, @dinosaure) checkseum with +32bit compiler variant (#34, @dinosaure) - Use a much more simpler implementation of CRC32C to be compatible with large set of targets (#34, @dinosaure) - Avoid fancy operators in OCaml implementation of CRC32 and CRC32C (#34, @dinosaure) - Require `optint.0.0.3` at least (#34, @dinosaure)

What's Changed -Cleanup compilation warnings in #56 -Remove user:{user} part when parsing URIs in #58

@Builditluc

Breaking Changes Move Parser Configuration into a Feature Option by @Builditluc in #63 Exciting New Features Add option to change the keybindings via configuration by @Builditluc in #38 Add AUR install option by @ThomasFrans in #42 Add a desktop-entry for packaging by @ThomasFrans in #44 Add checksums for the release assets by @Builditluc in #59 Bug Fixes Fix Header Selection by @Builditluc in #41 Fix Keybinding Crash by @Builditluc in #46 Add missing element after line split by @ThomasFrans in #48 Disable stdout logging for release builds by @ThomasFrans in #47 Fix publish action in the cd workflow by @Builditluc in #60 Fix toc not having scrollbars by @Builditluc in #64 Other Changes Update Bug Report Issue Template by @Builditluc in #40 Add label requirement to ci workflow by @Builditluc in #52 Add documentation job to ci workflow by @Builditluc in #55 Fix typo in search.rs by @eltociear in #56 Add yashinghcodes/wik project to similar projects by @Builditluc in #58 Increase Stale Days to 365 by @Builditluc in #61

[v0.8.1] - 2022-08-01 Added add --watch and --json to an overall much enhanced poll subcommand. [v0.8.0] - 2022-07-31 Added poll subcommand - when executed, will return whether it is day, night or twilight (#54). Fixed More time zone errors... more tests added to prove correctness (#53). Errors when running integration tests using rust-cross (#58) Changed Switched from pseudo-decimal degrees (e.g. "5.1N") to actual decimal degrees (e.g. 5.1) for coordinates (#56). Refactored Github Actions workflows [v0.7.0] - 2022-06-12 Fixed Fixed handling of time zones so that they are now implemented properly (#41). Changed Migrated from old version of structopt to clap for command line argument parsing. Removed --date-format flag has been removed as it adds additional complexity when validating command line args for no real benefit. [v0.6.1] - 2022-06-11 Cut a new release specifically for crates.io to bump tokio-walltime to v0.1.2. Previous versions of tokio-walltime failed to compile on the Raspberry Pi architectures. v0.6.0 of heliocron has been yanked from crates.io.

@jpmoral

1.4.0 (2022-04-01) Fixed * Fix Issue #56 with PR #57. Thanks, @jpmoral! * Avoid circular reference #69, thanks @ccarruitero! Added * Unwrap specific keys #54, by @rlburkes. Documented by @mahemoff. Thanks to you both! * Add :pretty_print, :indent and :compact options to allow prettified XML output. #59, by @Jeiwan. Thanks! Changed * Removed Rubinius support, by @olleolleolle * Clean-up, CI setup, and changelog authoring, by @olleolleolle

goffice 0.10.53: Morten: * Fix problem rendering "...E-xx" numbers. [#60] * Hack around introspection issue. [Part of #59] * Fix crash in plot [Gnumeric #667] goffice 0.10.52: Morten: * Improve GOComboBox css styling. * Reimplement GOActionComboStack using GtkComboBox. * Introspection fixes. * Documentation fixes. * Fix go_{add,sub}_epsilon{,l} confusion in fallback code for win32. B.S: * Fix long double problem with go_dtoa. [#57] goffice 0.10.51: Jean: * Do not clip markers in scatter plots. [#584] * Draw background and outline for data labels. [#592] John Denker: * Fix go_fake_{ceil,floor} confusion. [#56] Morten: * Introspection updates. * Improve go_pow10 accuracy by avoiding pow as much as possible. * Take evasive action re g_memdup. goffice 0.10.50: Jean: * Fix data update in matrix plots, see Debian #988397. * Fix rendering on high resolution monitors when scale is not 1. [#578] Morten: * Simplify regression equation code. * Use only 3 decimals for R^2 for regression lines. * Eliminate empty Special category from format selector. [#29] * Improve regression line equation for date axes. [#41] goffice 0.10.49: Morten: * Fix ods format problem. [Gnumeric #518] * Fix axis line crash. [Gnumeric #524] * Add state and saved-state to GODoc.

zip-archive 0.4.2.2 * Use `command -v` before trying `which` in the test suite (#62). `command` is a bash builtin, but for busybox we'll need `which`. zip-archive 0.4.2.1 * Fix Windows build regression (#61). zip-archive 0.4.2 * Fix problem with files with colon (#89). * Remove build-tools. This was used to indicate that the 'unzip' executable was needed for testing, but it was never intended to be used this way and now the field is deprecated. The current test suite simply skips the test using the unzip executable (with a warning) if 'unzip' is not in the path. * Remove existing symlinks when extracting zip files with symlinks (#60, Vikrem). Previously, writeEntry would raise an error if it tried to create a symlink and a symlink already existed at that path. This behavior was inconsistent with its behavior for regular files, which it overwrote without comment. This commit causes symlinks to be replaced by writeEntry instead of an error being raised. * Remove binary < 0.6 CPP. It's no longer needed because we don't support binary < 0.6. Also use manySig instead of many, to get better error messages. * Add type annotation for printf. * Better checking for unsafe paths (#55). This method allows things like `foo/bar/../../baz`. * Require base >= 4.5 (#56) * Add GitHub CI.

@wishdev

1.7.0 (2022-11-17) What's Changed * Extract creation of Net::HTTP in httpproxy by @wishdev in #41 * Fix httpd error in CJK directory by @jeremyevans in #42 * Use GitHub Actions instead of Travis CI (retry) by @deivid-rodriguez in #40 * Skip env-locale-sensitive CGI test on the "java" platform by @headius in #46 * Make readpartial limit chunk to appropriate size by @wishdev in #45 * Do not use ensure in a block without begin by @jeremyevans in #49 * Allow empty POST and PUT requests without content length by @jeremyevans in #50 * Only run test_big_bodies test on Ruby 2.5+ by @jeremyevans in #51 * Fix test when run with US-ASCII encoding by @jeremyevans in #52 * Allow shutdown_pipe to be passed in via @config by @wishdev in #44 * Ensure server port numbers are numeric and ensure they are stored as ... by @wishdev in #55 * Fix shutdown_pipe test issue by @wishdev in #54 * Allow EPROTOTYPE error when writing junk to a socket by @jeremyevans in #56 * Use ruby/setup-ruby instead of actions/setup-ruby by @hsbt in #58 * Refix test_shutdown_pipe by @wishdev in #59 * add mime type of extention mjs by @paulownia in #60 * Make it more strict to interpret some headers by @mame in #61 1.8.0 (2023-01-27) What's Changed * Use frozen strings by @kirs in #65 * Use test-unit by @hsbt in #66 * More rubies on CI, deprecating ruby 2.3 due to test failure by @mathieujobin in #68 * Adds common mime types by @gotoken in #75 * add mime type for .webmanifest extension by @olleolleolle in #76 * CI: use bundler-cache: true by @olleolleolle in #79 * Typo by @printfinn in #78 * s/RubyVM::JIT/RubyVM::MJIT/g by @k0kubun in #82 * Fix invalid use of IP addresses in SNI by @jeremyevans in #83 * Bump actions/checkout from 2 to 3 by @dependabot in #91 * remove unneeded bin/console and bin/setup files from gemspec by @Benjamin-L in #94 * Accept put requests by @bharjr01 in #70 * Move the host request parsing to a separate method. by @wishdev in #85 * Only output prime information to $stderr if $VERBOSE by @jeremyevans in #88 * Better support for connection upgrade and bi-directional streaming. by @ioquatix in #101 1.8.1 (2023-01-27) What's Changed * Body should be non-frozen by default. by @ioquatix in #103 * Join test thread. by @ioquatix in #104 * Fix several regexp warnings. by @ioquatix in #105

0.1.46 (2023-01-31) * Land #57, Add support for Ruby 3.2 0.1.47 (2023-02-06) * Land #56, Stream Control Transmission Protocol (SCTP)

1.21.0 (2023-02-13) * Support for Ruby 3.0.0, 3.1.0, 3.2.0. (Drop support for Ruby 2.2 and earlier.) #66 * Support Rails 6 and Rails 7. (Drop support for Rails 3.x, 4.x) #66, #72 * Fix RMagick 5.0 compatible. #66 * Infinite loop has been resolved. #68, #74 * Fixed a bug that caused the x position to shift when an <img> tag was behind a <li> tag in HTML. #74 * fix: Incorrect characters when copying out of a generated PDF with Unicode fonts. #71 * Suppresses output for Circle(), Ellipse(), PieSector(), and PieSectorXY() when the radius is 0. #67 * Don't change an object while iterating over it #59 (by thegcat) * fix : bidi bug #56 (by ahorek) * Avoid rdoc stack level too deep (SystemStackError) in gem install. #76 * PDF example output option OUTPUT=true added #70 * Make the image file path acquisition process extensible #58 (by yui-har)

This release will include the following changes: - Fetch scrollback history independently of main loop #39 - Add NetBSD install instructions #51 - Create release profile with LTO #52 - Support configuring client request timeout #54 - Link to iamb space in README #55 - Fix empty message check when sending #56 - Show events that couldn't be decrypted #57 - Allow log level to be configured #58 - Indicate when an encrypted room event has been redacted #59 - Lazy load room state events on initial sync #62 - HTML self-closing tags are getting parsed incorrectly #63 - Emote messages should always show sender #65 - Update README.md to include Arch Linux package #66 - Redacted messages need to have their HTML removed #67 I'm also going to update to [email protected] to pull in two useful bug fixes: - List widget should only use focus for rendering item modalkit#102 - Vim keybinding D has wrong Count modalkit#103

@ioquatix

1.2.0 (2023-05-01) What's Changed * Native improvements by @ioquatix in #56 * Minor compiler warnings fixed. * Add support for epoll_pwait2.

[0.9.6] - 2023-05-25 Changed - Upgrade clap from v3 to v4 (#56) - Update funding options Buy me a coffee! ☕ - Integrate dependabot - Bump dependencies - Bump the Rust version in Dockerfile

Change log: 4.18.2 (2023-05-30) ====== - Fix typos in previous backported commit - Keep "lock-on-sleep" in sync with other components via XfceScreensaver - power: Fix old typo - Do not check repeatedly for logind running - Write on stderr when appropriate - build: Require gio-unix-2.0 - settings: Keep a ref on device to avoid use-after-free (Fixes #56) - dpms: Add missing sanity checks (Fixes #163) - Fix Xfconf memory management - Update bug report address - Translation Updates: Albanian, Arabic, Armenian (Armenia), Asturian, Basque, Belarusian, Bulgarian, Catalan, Chinese (China), Chinese (Hong Kong), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, Eastern Armenian, English (Australia), English (Canada), English (United Kingdom), Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian, Japanese, Kannada, Kazakh, Korean, Lithuanian, Malay, Norwegian Bokm��l, Norwegian Nynorsk, Occitan (post 1500), Polish, Portuguese, Portuguese (Brazil), Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Telugu, Thai, Turkish, Ukrainian, Vietnamese

@AmmarAbouZor

What's Changed - Fixed: Release GitHub action by @AmmarAbouZor in #53 - Added: Tags (Categories) for journal + Filter Function by @AmmarAbouZor in #56 - Changed: Keep journals list in focus after closing the external editor by @AmmarAbouZor in #58 - Added: Select-Tags Popup in Create/Edit Journals Prompt by @AmmarAbouZor in #62 - Changed: Add Filter Keybindings To Footer by @AmmarAbouZor in #64 - Added: Search Functions in Filter by @AmmarAbouZor in #66 - Added: Create Cleanup Cache GitHub Action by @AmmarAbouZor in #73 - Added: Wiki Documentation by @AmmarAbouZor in #76 - Added: automatic version increment and CFF self-maintenance by @kevinmatthes in #79 - Allow Release Action To Start Manually by @AmmarAbouZor in #83

@gaborbernat

What's Changed Bump deps and tools by @gaborbernat in #56 Add pyproject-fmt by @gaborbernat in #57 Bump pypa/gh-action-pypi-publish from 1.6.5 to 1.7.1 by @dependabot in #60 docs: remove (dynamic) years from copyright by @paravoid in #58 Bump pypa/gh-action-pypi-publish from 1.7.1 to 1.8.1 by @dependabot in #61 Bump deps and tools by @gaborbernat in #62 Bump pypa/gh-action-pypi-publish from 1.8.1 to 1.8.3 by @dependabot in #63 Bump pypa/gh-action-pypi-publish from 1.8.3 to 1.8.5 by @dependabot in #66 Bump deps and tools by @gaborbernat in #67 Bump deps and tools by @gaborbernat in #70 Drop 2.7 test by @gaborbernat in #72 Add trusted-publish by @gaborbernat in #73 Add 3.12 support by @gaborbernat in #74 Bump pypa/gh-action-pypi-publish from 1.8.5 to 1.8.6 by @dependabot in #76 git ls-files -z -- .github/workflows/check.yml | xargs -0 sed -i 's|3.12.0-alpha.7|3.12.0-beta.1|g' by @gaborbernat in #80 Add ruff by @gaborbernat in #81

## [23.1.0](pyca/service-identity@21.1.0...23.1.0) - 2023-06-14 ### Removed - All Python versions up to and including 3.7 have been dropped. - Support for `commonName` in certificates has been dropped. It has been deprecated since 2017 and isn't supported by any major browser. - The oldest supported pyOpenSSL version (when using the `pyopenssl` backend) is now 17.0.0. When using such an old pyOpenSSL version, you have to pin *cryptography* yourself to ensure compatibility between them. Please check out [`contraints/oldest-pyopenssl.txt`](https://github.com/pyca/service-identity/blob/main/tests/constraints/oldest-pyopenssl.txt) to verify what we are testing against. ### Deprecated - If you've used `service_identity.(cryptography|pyopenssl).extract_ids()`, please switch to the new names `extract_patterns()`. [#56](pyca/service-identity#56) ### Added - `service_identity.(cryptography|pyopenssl).extract_patterns()` are now public APIs (FKA `extract_ids()`). You can use them to extract the patterns from a certificate without verifying anything. [#55](pyca/service-identity#55) - *service-identity* is now fully typed. [#57](pyca/service-identity#57)

@patrickt

Switch to GH Actions CI. by @patrickt in #41 Add the same PR template as for tree-sitter-javascript by @mjambon in #43 Update package.json to include the repository key by @msftenhanceprovenance in #50 Loosen Rust crate's tree-sitter dependency by @dcreager in #52 adding make support by @mattmassicotte in #56 feat: treat iota as predeclared identifier by @kawaemon in #58 feat: add support to parse of type parameters by @kawaemon in #57 feat: allow to put type arguments in calling expressions by @kawaemon in #59 Update C code by @aryx in #66 Document reason for statements at top level by @adonovan in #67 Make method bodies non-optional by @adonovan in #68 Fix node naming in {param,field}_declaration by @adonovan in #65 Structure Query by @mattmassicotte in #70 Remove field_identifier from keyed_element by @adonovan in #71 Generic Makefile by @mattmassicotte in #72 Bump tree-sitter version to 0.20 by @hendrikvanantwerpen in #78 Swift Package by @mattmassicotte in #79 Made body optional for method_declaration by @lmaruvada in #90 Allow GenericType to accept QualifiedType by @kawaemon in #92 feat(queries/highlight): highlight built-in functions as @function.builtin by @jimeh in #96 feat(grammar): capture comment directives by @matoous in #97 Revert "Merge pull request #97 from matoous/md/comment-directives" by @matoous in #98 feat(ci): run build & test action on PRs by @matoous in #99 fix: fix string literal rule by @SuperBo in #91 Add more types and struct/parameter fix by @amaanq in #118 Param fix by @amaanq in #119 Update identifiers and top level declarations by @amaanq in #120 Fix single import spec list without terminator by @amaanq in #122 Materialize expression_statement nodes by @josharian in #124 Formatting & CI fixes by @amaanq in #126

@patrickt

Switch to GH Actions CI. by @patrickt in #41 Add the same PR template as for tree-sitter-javascript by @mjambon in #43 Update package.json to include the repository key by @msftenhanceprovenance in #50 Loosen Rust crate's tree-sitter dependency by @dcreager in #52 adding make support by @mattmassicotte in #56 feat: treat iota as predeclared identifier by @kawaemon in #58 feat: add support to parse of type parameters by @kawaemon in #57 feat: allow to put type arguments in calling expressions by @kawaemon in #59 Update C code by @aryx in #66 Document reason for statements at top level by @adonovan in #67 Make method bodies non-optional by @adonovan in #68 Fix node naming in {param,field}_declaration by @adonovan in #65 Structure Query by @mattmassicotte in #70 Remove field_identifier from keyed_element by @adonovan in #71 Generic Makefile by @mattmassicotte in #72 Bump tree-sitter version to 0.20 by @hendrikvanantwerpen in #78 Swift Package by @mattmassicotte in #79 Made body optional for method_declaration by @lmaruvada in #90 Allow GenericType to accept QualifiedType by @kawaemon in #92 feat(queries/highlight): highlight built-in functions as @function.builtin by @jimeh in #96 feat(grammar): capture comment directives by @matoous in #97 Revert "Merge pull request #97 from matoous/md/comment-directives" by @matoous in #98 feat(ci): run build & test action on PRs by @matoous in #99 fix: fix string literal rule by @SuperBo in #91 Add more types and struct/parameter fix by @amaanq in #118 Param fix by @amaanq in #119 Update identifiers and top level declarations by @amaanq in #120 Fix single import spec list without terminator by @amaanq in #122 Materialize expression_statement nodes by @josharian in #124 Formatting & CI fixes by @amaanq in #126

Changed Rewritten the custom scanner code in C (#56) Fixed Parsing empty interpolation (#55) Fixed the repository URL in the Rust crate (#57)

@sciurius

1.059 2023-07-20 - correctly propagate the exit value of a packed executable Get the exit value from perl_destruct() instead of perl_run(). These may be different, e.g. if the value of $? is set in an END block. - clean up tests a bit - set up GitHub CI and add cpanfile (for CI only) - check more return codes in myldr/*.c 1.058 2023-06-12 - patch DynaLoader.pm to make intercepting DynaLoader::bootstrap work again for Perl >= 5.35 on Windows (see #74) $do_expand was changed in perl 5.36 from an (implicit) "local" variable to "my". This breaks how PAR::Heavy intercepts calls to DynaLoader::bootstrap: monkey-patching DynaLoader::bootstrap, DynaLoader::dl_findfile and DynaLoader::bootstrap while setting "local $DynaLoader::do_expand = 1". - reorganize modules etc used in tests - add test to run an XS module from a .par file - add a test for loading XS "glue" DLLs - remove unused code for packed DLLs ("pp --link ...") - nobody packs (non-XS) DLLs as embedded "FILE"s - nobody uses a $Config{version) sub directory when packing DLLs below "shlib/" in the zip 1.057 2022-11-29 - use a different method to mark executable built from "pp --clean ..." - scripts/par.pl: don't patch the string "__PASS_PAR_CLEAN__ \0" in the "boot" section of the executable and ... - myldr/boot.c: ... stop looking for the patched string - scripts/par.pl: add "\0CLEAN" in lieu of "\0CACHE" (and drop the 40-byte cache name below that) in the "trailer" section when generating a packed executable when META.yml indicates "--clean" was specified) - myldr/mktmpdir.c: allow "\0CLEAN" as an alternative to "\0CACHE" and set PAR_CLEAN=1 in that case - myldr/mktmpdir.c: implement find_par_magic() akin the one in script/par.pl - better CLT detection in MacOS (#70) [plk <[email protected]>] - use Getopt::ArgvFile with resolveEnvVars=1 suggested by Johan Vromans (@sciurius on GitHub) 1.056 2022-09-05 - Fix #66: patch myldr/boot for "pp --clean ..." without side effects - make sure myldr/boot contains exactly one string of the form "__PASS_PAR_CLEAN__ \0" so that there are no duplicates that may get split on chunk boundaries (myldr/boot_embedded_files.c) - simplify patching of this string (in $loader) to "__PASS_PAR_CLEAN__=1 \0" in script/par.pl - add a test for #66 (check for ephemeral vs persistent cache directory) - Revert "Fixes #62: rs6000_71 (AIX) "An offset in the .loader section header is too large."" PAR_CLEAN is set too late: at this point PAR_TEMP has already been set (and populated) to a persistent cache directory (/tmp/par-USER/cache-SHA1) instead of an ephemeral one (/tmp/par-USER/temp-PID). - Some code cleanup - replace some magic numbers with constants - use string interpolation (instead of concatenation) - clean up some convoluted C code 1.055 2022-07-03 - Fix #62: rs6000_71 (AIX) "An offset in the .loader section header is too large." Communicate pp option "--clean" to the generated executable in a different way. Previously this was done by patching "__ENV_PAR_..." strings **in the executable being built** and interpreting these strings in par.pl **at runtime**. Though hacky, this seemingly worked on any OS (without rendering the executable invalid). But the only information ever passed was the value of PAR_CLEAN and this was gleaned at build time from the value of JSONPath $par.clean from META.yml in the zip (set by pp by option "--clean"). Instead read and interpret "META.yml" in par.pl **at runtime**. - Fix: merge PR #58 from [email protected]: Adding support for running MacOS Universal binaries created via 'lipo' from already pp'ed and signed thin binaries - Make writing stuff more robust: check return value of print() and close() in some places. 1.054 2022-01-27 - Temporarily disable t/90-gh41.t (system("\\\\?\\some-absolute-path") fails) 1.053 2022-01-25 - Fix: merge PR #56 from from Philip Kime <[email protected]>: Updating OSX codesign fix util with fix for automatically added ad-hoc signatures on OSX 12+ - Fix: merge PR #42 from Andrew-Kulpa/master: Get exe size from file handle instead of path - Fix: prevent TABs in literal makefile fragments from being expanded - Cleanups: - par_findprog(): pass a copy of argument `path´ to strtok() - simplify searching for PAR magic - consolidate die()s - add a test for GitHub #41 - add error message when exec'ing the custom perl fails in myldr/boot - untangle %require_list and %ModuleCache

1.23.6 (2024-03-20) * Disable usage of Ractor.make_shareable on Ruby 3.0 as it's broken on Ruby 3.0.2. (#56)

@sofia-m-a

1.0.0.0 New epoch time! lots of changes to the API. Please see MIGRATION.md for more info: Add support for GHC 9.x Bumped bounds to more modern dependency set Introduced Base64 newtype, located in Data.Base64.Types, as well as ADT for associated alphabets. Signature for encodeBase64 has changed so that it produces a Base64 wrapped value. decodeBase64 and its URLsafe variants now consume a value of type Base64 and produces a decoded value of the underlying type. The old decodeBase64 and its URLsafe variants is now renamed to decodeBase64Untyped*. Fix for 32-bit systems in which memory barriers were not respected in the encoe loop (see: #56) Optimize encode and decode loops to achieve significant speedup across the board. Thanks to everyone who contributed (especially @sofia-m-a!).

@cdelafuente-r7

0.6.5 (2024-06-12) What's Changed * Fix NTLMv2 hash when username contains non-ASCII characters by @cdelafuente-r7 in #56 * Update Negotiate Flags by @n00tmeg in #38 New Contributors * @cdelafuente-r7 made their first contribution in #56 * @n00tmeg made their first contribution in #38

1.2.9 (2024-06-04) ------------------ Change: - meson.build updated 1.2.8 (2024-04-16) ------------------ New: - test scripts now return failing status - explicit version of mustache specs for test (#49) - handling of CR (iOS) and CRLF (windows) end of line styles Change: - License of use is now Zero-Clause BSD Fix: - improved management and detection of valgrind (#56, #57) - Headers without implicit dependency 1.2.7 (2024-03-21) ------------------ New: - fallback to default when mustach_wrap_get_partial returns MUSTACH_ERROR_PARTIAL_NOT_FOUND - remove at compile time the load of files for templates if MUSTACH_LOAD_TEMPLATE is defined as 0 - add compile time flag MUSTACH_SAFE for enforcing safety behaviours Fix: - selection of subitem by index (#47) - get latest iterated key when getting key name (#52) - allow tests without valgrind - avoid recursive template expansion (#55)

1.2.9 (2024-06-04) ------------------ Change: - meson.build updated 1.2.8 (2024-04-16) ------------------ New: - test scripts now return failing status - explicit version of mustache specs for test (NetBSD#49) - handling of CR (iOS) and CRLF (windows) end of line styles Change: - License of use is now Zero-Clause BSD Fix: - improved management and detection of valgrind (NetBSD#56, NetBSD#57) - Headers without implicit dependency 1.2.7 (2024-03-21) ------------------ New: - fallback to default when mustach_wrap_get_partial returns MUSTACH_ERROR_PARTIAL_NOT_FOUND - remove at compile time the load of files for templates if MUSTACH_LOAD_TEMPLATE is defined as 0 - add compile time flag MUSTACH_SAFE for enforcing safety behaviours Fix: - selection of subitem by index (NetBSD#47) - get latest iterated key when getting key name (NetBSD#52) - allow tests without valgrind - avoid recursive template expansion (NetBSD#55)

@Viicos

Allow tzinfo objects for Timezone by @Viicos in #56 add URLs to pyproject.toml by @samuelcolvin in #58 suggested fix on typo by @PelicanQ in #60 Correct misstatement in README by @Zac-HD in #62 Fix IsDigit -> IsDigits by @toriningen in #63 Add Unit type by @tlambert03 in #65 Improve handling of GroupedMetadata (First try) by @cksleigen in #69 Prepare for 0.7.0 release by @adriangb in #70

# gtable 0.3.6 * Added `as.gtable()` S3 method (#97). * Add `clip` argument to `gtable_col()` and `gtable_row()` (#56) * Indexing a gtable with `NA` will now insert a zero-dimension row/column at the position of the `NA`-index (#13) # gtable 0.3.5 * Fixed partial matching issue when constructing viewport in `gtable()` (#94) * General upkeep

Habbie added 2 commits March 21, 2020 13:59

www/h2o: update to 2.2.6

eb0c9fd

h2o: build .so instead of .a

9d10cd7

Habbie closed this Mar 21, 2020

Habbie reopened this Mar 21, 2020

netbsd-srcmastr closed this in febddd1 Mar 21, 2020

Habbie deleted the h2o-2.2.6 branch March 22, 2020 22:00

netbsd-srcmastr pushed a commit that referenced this pull request Apr 23, 2021

Update to unliftio-core-0.2.0.1

4bb461d

0.2.0.1 * Remove faulty default implementation of withRunInIO #56 0.2.0.0 * Move askUnliftIO out of class #55

netbsd-srcmastr pushed a commit that referenced this pull request Jun 28, 2022

audio/spotify-player: update to 0.9.2

2b96d88

What's Changed -Cleanup compilation warnings in #56 -Remove user:{user} part when parsing URIs in #58

netbsd-srcmastr pushed a commit that referenced this pull request Feb 15, 2023

security/ruby-rex-socket: update to 0.1.47

7903e63

0.1.46 (2023-01-31) * Land #57, Add support for Ruby 3.2 0.1.47 (2023-02-06) * Land #56, Stream Control Transmission Protocol (SCTP)

netbsd-srcmastr pushed a commit that referenced this pull request May 1, 2023

devel/ruby-io-event: update to 1.2.0

7e2aadb

1.2.0 (2023-05-01) What's Changed * Native improvements by @ioquatix in #56 * Minor compiler warnings fixed. * Add support for epoll_pwait2.

netbsd-srcmastr pushed a commit that referenced this pull request Dec 18, 2023

tree-sitter-elixir: update to 0.1.1.

0328105

Changed Rewritten the custom scanner code in C (#56) Fixed Parsing empty interpolation (#55) Fixed the repository URL in the Rust crate (#57)

netbsd-srcmastr pushed a commit that referenced this pull request Mar 24, 2024

devel/ruby-console: update to 1.23.6

4c643fa

1.23.6 (2024-03-20) * Disable usage of Ractor.make_shareable on Ruby 3.0 as it's broken on Ruby 3.0.2. (#56)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

www/h2o: update to 2.2.6 and make it build shared libraries #56

www/h2o: update to 2.2.6 and make it build shared libraries #56

Habbie commented Mar 21, 2020

Habbie commented Mar 21, 2020

Habbie commented Mar 21, 2020

www/h2o: update to 2.2.6 and make it build shared libraries #56

www/h2o: update to 2.2.6 and make it build shared libraries #56

Conversation

Habbie commented Mar 21, 2020

Habbie commented Mar 21, 2020

Habbie commented Mar 21, 2020