Fixes remotecode exec CVE with ghostscript #128

stevenwilliamson · 2018-07-17T09:05:12Z

Backports ghostscript-gpl from trunk which has a few more CVE fix
patches applied.
Adds a patch that fixes issue that has been exploited in the wild (exploit is in
metasploit) by applying the patch that debian ship

(Newer pkgsrc branches switched to ghostscript-agpl which is more current and is updated so does not need the patch)

Backports ghostscript-gpl from trunk which has a few more CVE fix patches applied. Adds a patch that fixes issue that has been exploited in the wild (exploit is in metasploit) by applying the patch that debian ship

Pulled from #128 with minor modifications.

jperkin · 2018-08-08T17:12:21Z

Applied, thanks! Sorry for the delay. I took out the buildlink3.mk part of the change as that has caused problems with the older pkgin before.

Changes since b127: Beta #129 - 10.01.2019 - Prevent doing 64-bit MULs if the scopes are inactive (rate calculation) - WaitVBL() function for scopes and video (when no vsync) has been changed to include fractional precision for "next frame time" counter. Note that this is a minor change and does not magically remove video stuttering. Beta #128 - 06.01.2019 - If speed (ticks per row) is set to 0, reset it to the initial value when pressing play. - Clamp BPM/speed when loading modules so that the values are not illegal - Some other minor fixes - Code cleanup

Changes since 1.5.2: Disable EGL on macOS Fix build on macOS [#176, Emmanuele Bassi] Add macOS tests Fix build with uClibc [#181, Emmanuele Bassi] Fix GLES3 symbol lookup [Adam Jackson] Fix conditional compilation [#184, Zhao Zhili] Require Meson 0.47 Fix Autotools build with EGL-X11 support [#188, Emmanuele Bassi] Changes since 1.5.1: Fix the detection of the -z,relro linker flag Query the EGL context version when bootstrapping on GLES [Adam Jackson] Avoid inadvertedly loading libraries when probing for them [Adam Jackson] Issue #169: Fix build on FreeBSD [Ting-Wei Lan] Consistently use abort() instead of exit() for internal state checks Issue #171: Fix a performance regression in the global function pointer trampolines introduced by using -Bsymbolic-functions Improve performance when using GL function pointers like glAlphaFunc [Adam Jackson] Changes since 1.5.0: Do no add pkg-config dependencies on gl on systems that do not use pkg-config, like macOS and Windows [Tom Schoonjans, #156] Generalise checks for dlvsym [Ross Burton, #158] Add an option for disabling building the test suite [Ross Burton] Typo fixes in the comments and documentation [luz.paz, #159] Simplify the Meson configuration logic for EGL and GLX [Eric Engestrom, #162] Use assert when no context is found [Adam Jackson, #166] Remove a test superceded by GLVND [#165] Avoid Meson warnings when testing for linker arguments Changes from Epoxy 1.4.3 Bump the Meson dependency to 0.44.1 Include Xlib.h in the tests that use X11 API Update the GL registry to OpenGL 4.6 Add gl and egl private dependencies in the pkg-config file Allow building Epoxy without X11 support Rename the Meson configuration options to be more idiomatic New API: epoxy_set_resolver_failure_handler() epoxy_glsl_version() epoxy_extension_in_string() Issues fixed #128 - Fix macOS linker flags [Tom Schoonjans] #129 - Use GLVND if available [Adam Jackson] #134 - Add fallback definition for EGL_CAST [Daniel Stone] #133 - Try even harder to not load GLX [Adam Jackson] #138 - Fix the libOpenGL soname [Adam Jackson] #137 - Update differences with GLEW [Nigel Stewart] #131 - Add epoxy_set_resolver_failure_handler() [Adam Jackson] #140 - Fix pointer mismatch on Windows 10 [danem] #141 - Define visibility flags for static builds [Dylan Baker] #136 - Expose epoxy_extension_in_string() [Lyude Paul] #151 - Use correct guard for Android builds [Robert Bragg] #154 - Fix dlwrap for glvnd [Adam Jackson] #155 - Respect DLOPEN_LIBS [Michał Górny] #143 - Fix printf family usage [Ikey Doherty] #152 - Do not use OPENGL_LIB on Android #145 - Add epoxy_glsl_version()

******************************************************************************* Version 1.8.4 ******************************************************************************* 2017-11-17 Marcelo Jimenez <mroberto(at)users.sourceforge.net> GitHub #57 - 1.8.3 broke ABI without changing SONAME Opened by jcowgill This change in 1.8.3 broke the ABI and therefore the SONAME should have been changed (ie: age reset to 0): EXPORT_SPEC int UpnpAddVirtualDir( /*! [in] The name of the new directory mapping to add. */ - const char *dirName); + const char *dirName, + /*! [in] The cookie to associated with this virtual directory */ + const void *cookie, + /*! [out] The cookie previously associated, if mapping is already present */ + const void **oldcookie); If only the cookie argument was added, you could probably get away with this because all that would happen is that a garbage value is passed around without being used. With the addition of oldcookie, any old programs will not initialise this value and will probably segfault when libupnp tries to write to it. ******************************************************************************* Version 1.8.3 ******************************************************************************* 2017-09-07 Dave Overton <david(at)insomniavisions.com> Add userdata/cookie to virtualDir callbacks As with the main Device APIs (UpnpRegisterRootDevice etc), it is useful to have a userdata/cookie pointer returned with each callback. This patch allows one cookie per registered path which enables a variety of functionality in client apps. 2017-09-03 Uwe Kleine-König <[email protected]> Fix large file system support libupnp uses large file support (if available). If a program linking to libupnp does not however it creates mismatches in callframes. See Issue #51 for the results. This simplifies LFS support by using AC_SYS_LARGEFILE_SENSITIVE instead of manually defining _LARGE_FILE_SOURCE and _FILE_OFFSET_BITS (which is useless on architectures where the size of off_t is fixed). Furthermore additional logic is introduced to catch a library user without 64 bit wide off_t on such a platform. upnp.h also makes use of off_t, but as this file includes FileInfo.h, the latter is the single right place for this check. This fixes #52 which is a generalized variant of #51. 2017-08-19 Uwe Kleine-König <[email protected]> configure.ac: Drop copying of include files The comment suggests this is for windows compilation. It should be easily possible to add the source directory as an include path to the windows compiler, too, so drop this. (Otherwise this should better be done using AC_CONFIG_COMMANDS.) 2017-09-03 Uwe Kleine-König <[email protected]> Let source code use autoconfig.h not the public upnpconfig.h The former is the one supposed to be used for internal code. upnpconfig.h is only for public stuff. 2017-08-19 Uwe Kleine-König <[email protected]> configure.ac: Fix typo s/optionnal/optional/ 2017-08-08 Marcelo Jimenez <mroberto(at)users.sourceforge.net> Fix broken samples when configured with --disable-ipv6. ******************************************************************************* Version 1.8.2 ******************************************************************************* 2017-07-24 Michael Osipov Initialize in_addr and in6_addr to avoid garbage output if never written If any of the address families isn't available in UpnpGetIfInfo(), especially IPv6, always init both structs with zero to avoid garbage output with inet_ntop() to gIF_IPV4 and gIF_IPV6. See v00d00/gerbera#112 (https://github.com/v00d00/gerbera/issues/112) for consequences: bind for IPv6 will fail. 2013-10-28 Vladimir Fedoseev <va-dos(at)users.sourceforge.net> Attached patch allows to register multiple clients from single app. 2014-11-14 Philippe <philippe44ca(at)users.sourceforge.net> Hi - I recently compiled libupnp on C++ Builder XE7 and had to do a few changes to make it work. In thase this helps, I've generated a small patch file. 2015-04-30 Hugo Beauzée-Luyssen <chouquette(at)users.sourceforge.net> When building using a strict mode (-std=c++11 instead of -std=gnu++11, for instance), the WIN32 macro isn't defined. The attached patch fixes it by using _WIN32 instead. 2015-02-06 Jean-Francois Dockes <[email protected]> Queue events on their subscription object instead of adding them to the thread pool immediately. Events destined for a non-responding control point would flood the thread pool and prevent correct dispatching to other clients, sometimes to the point of disabling the device. Events are now queued without allocating thread resources and properly discarded when a client is not accepting them. 2015-02-03 Jean-Francois Dockes <[email protected]> genaInitNotify()/genaInitNotifyExt() and genaNotifyAll()/genaNotifyAllExt() are relatively complicated methods which only differ by the format of an input parameter. This update extracts the common code for easier maintenance, esp. relating to the queueing modifications to follow. ******************************************************************************* Version 1.8.1 ******************************************************************************* 2017-04-26 Marcelo Jimenez <mroberto(at)users.sourceforge.net> Fix some compiler warning messages on md5.c 2017-03-07 Fabrice Fontaine <fontaine.fabrice(at)gmail.com> Enable IPv6 by default 2017-03-07 Fabrice Fontaine <fontaine.fabrice(at)gmail.com> Move threadutil source code to libupnp With this patch, threadutil library is removed as the only public header that has been kept in 1.8.x is ithread.h which is mainly a wrapper to pthread with inline functions. threadutil source code will now be a part of libupnp library. ******************************************************************************* Version 1.8.0 ******************************************************************************* 2014-01-15 Peng <howtofly(at)gmail.com> Fix memory leaks. 2013-04-27 Thijs Schreijer <thijs(at)thijsschreijer.nl> Renamed SCRIPTSUPPORT to IXML_HAVE_SCRIPTSUPPORT for consistency. Also updated autoconfig and automake files, so it also works on non-windows. Option is enabled by default, because it adds an element to the node structure. Not using an available field is better than accidentally using an unavailable field. 2012-07-11 Thijs Schreijer <thijs(at)thijsschreijer.nl> Changed param to const UpnpAcceptSubscriptionExt() for consistency 2012-06-07 Thijs Schreijer <thijs(at)thijsschreijer.nl> updated ixmlDocument_createAttributeEx() and ixmlDocument_createAttribute() to use parameter DOMString instead of char * (same but now consistent) 2012-05-06 Thijs Schreijer <thijs(at)thijsschreijer.nl> Added script support (directive SCRIPTSUPPORT) for better support of garbage collected script languages. The node element gets a custom tag through ixmlNode_setCTag() and ixmlNode_getCTag(). And a callback upon releasing the node resources can be set using ixmlSetBeforeFree() See updated readme for usage. 2012-03-24 Fabrice Fontaine <fabrice.fontaine(at)orange.com> SF Bug Tracker id 3510595 - UpnpDownloadXmlDoc : can't get the file Submitted: Marco Virgulti ( mvirg83 ) - 2012-03-23 10:08:08 PDT There is a problem, perhaps, during downloading a document by UpnpDownloadXmlDoc. During debugging i've found that in an not exported api (unfortunately i forgot the code line...) where it is setted a local variable "int timeout" to -1 then passed directly to another function for sending data through tcp socket. I patched this setting it to 0 (there is an IF section that exits if timeout < 0). It is normal behavior or it is a bug? 2012-03-08 Fabrice Fontaine <fabrice.fontaine(at)orange-ftgroup.com> Check for NULL pointer in TemplateSource.h calloc can return NULL so check for NULL pointer in CLASS##_new and CLASS##_dup. 2012-03-08 Fabrice Fontaine <fabrice.fontaine(at)orange-ftgroup.com> Replace strcpy with strncpy in get_hoststr Replace strcpy with strncpy to avoid buffer overflow. 2012-03-08 Fabrice Fontaine <fabrice.fontaine(at)orange-ftgroup.com> Memory leak fix in handle_query_variable variable was never freed. 2011-02-07 Chandra Penke <chandrapenke(at)mcntech.com> Add HTTPS support using OpenSSL. HTTPS support is optional and can be enabled by passing the --enable-open-ssl argument to the configure script. The following methods are introduced to the public API: UpnpInitOpenSslContext When enabled, HTTPS can be used by using "https://" instead of "http://" when passing URLs to the HTTP Client API. 2011-02-07 Chandra Penke <chandrapenke(at)mcntech.com> Refactor HTTP Client API to be more generic. The following features are added: - Support for persistent HTTP connections (reusing HTTP connections). Tthis is still a work in progress and relies on applications to interpret the 'Connection' header appropriately. - Support for specifying request headers when making requests. Useful for interacting with web services that require custom headers. - Support for retrieving response headers (this is a API only change, some more work needs to be done to implement the actual functionality. Specifically copy_msg_headers in httpreadwrite.c needs to be implemented) - Common API for all HTTP methods. - Support for PUT, and DELETE methods. The following methods are introduced to the public HTTP Client API UpnpOpenHttpConnection, UpnpCloseHttpConnection, UpnpMakeHttpRequest, UpnpWriteHttpRequest, UpnpEndHttpRequest, UpnpGetHttpResponse, UpnpReadHttpResponse. Removed a lot of duplicate code in httpreadwrite.c 2011-01-17 Chandra Penke <chandrapenke(at)mcntech.com> Include upnpconfig.h in FileInfo.h to automatically include large file macros 2011-01-17 Chandra Penke <chandrapenke(at)mcntech.com> Fix for warnings Apple systems related to macros defined in list.h. In list.h, in apple systems, undefine the macros prior to defining them. 2011-01-16 Marcelo Jimenez <mroberto(at)users.sourceforge.net> Fix for UpnpFileInfo_get_LastModified() in http_MakeMessage(). UpnpFileInfo_get_LastModified() returns time_t, and http_MakeMessage() takes a "time_t *". Thanks to Chandra Penke for pointing the bug. 2010-11-22 Marcelo Jimenez <mroberto(at)users.sourceforge.net> Template object for ssdp_ResultData. 2010-11-10 Fabrice Fontaine <fabrice.fontaine(at)orange-ftgroup.com> Support for "polling" select in sock_read_write. Currently, in sock_read_write function, if the timeout is 0, pupnp realizes a "blocking" select (with an infinite timeout). With this patch, if timeout is set to 0, pupnp will realize a "polling" select and returns immediately if it can not read or write on the socket. This is very useful for GENA notifications when pupnp is trying to send events to a disconnected Control Point. "Blocking" select can now be done by putting a negative timeout value. 2010-09-18 Chandra Penke <chandrapenke(at)mcntech.com> This is a minor build fix. The new Template*.h files added in the latest code need to be exported. Patch against the latest sources is attached. 2010-08-22 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * upnp/src/api/Discovery.c: Fix a serious bug and memory leak in UpnpDiscovery_strcpy_DeviceType(). Thanks to David Blanchet for the patch. 2010-04-25 Marcelo Jimenez <mroberto(at)users.sourceforge.net> Separation of the ClientSubscription object. 2010-04-24 Marcelo Jimenez <mroberto(at)users.sourceforge.net> Protect the object destructors agains null pointers on deletion, which should be something valid. 2010-03-27 Marcelo Jimenez <mroberto(at)users.sourceforge.net> SF Patch Tracker [ 2987390 ] upnp_debug vs. ixml_debug Thanks for the load of updates, I'm still assimilating them ! Could I make a suggestion though? The addition of printNodes(IXML_Node) to upnpdebug a dds a new dependency on ixml.h for anything using upnpdebug.h. I'm making quite a bit of use of upnpdebug in porting things to version 1.8.0, and I'd prefer it if printNodes could be added to ixmldebug.h instead. I'm attach ing a patch, what do you think ? Nick 2010-03-27 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * Forward port of svn revision 505: SF Patch Tracker [ 2836704 ] Patch for Solaris10 compilation and usage. Submitted By: zephyrus ( zephyrus00jp ) 2010-03-20 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * SF Patch Tracker [ 2969188 ] 1.8.0: patch for FreeBSD compilation Submitted By: Nick Leverton (leveret) Fix the order of header inclusion for FreeBSD. 2010-03-20 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * Forward port of svn revision 502: SF Patch Tracker [ 2836704 ] Search for nested serviceList (not stopping at the first lis Submitted By: zephyrus ( zephyrus00jp ) Internet Gateway Device description contains nested serviceList (rootdevice -> servicelist, subdevice and subdevice has the lower-level serviceList, etc..) Unfrotunately, the sample code sample_util.c used by tv_device sample, etc. has a code that looks for only the first top-level serviceList. This results in the failure to read all the services of an IGD xml description. Attached patch modifies this behavior and looks for the service by visiting all the serviceList in xml document in turn. With the modified patch (ad additional modification), I could simulate an IGD device and created a modified control program for that. Patch against 1.6.6 TIA. 2010-03-20 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * SF Patch Tracker [ 2973319 ] Problem in commit 499 Submitted By: Nick Leverton (leveret) Afraid that this doesn't compile, it seems retval should be retVal in two places. 2010-03-16 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * Fix for the ithread_mutex_unlock() logic in UpnpInit(). Thanks for Nicholas Kraft. 2010-03-15 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * SF Patch Tracker [ 2962606 ] Autorenewal errors: invalid SID, too-short renewal interval Submitted By: Nick Leverton (leveret) Auto-renewals send an invalid SID due to a missing UpnpString_get_String call. They also send a renewal interval of 0 instead of copying it from the original subscription. 2010-03-15 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * SF Patch Tracker [ 2964685 ] patch for avoiding inet_ntoa (1.8.0) Submitted By: Nick Leverton (leveret) Seems like SF's tracker won't let me add a patch to someone else's issue ?! This refers to https://sourceforge.net/support/tracker.php?aid=2724578 The calls to inet_ntoa are in getlocalhostname(), which is called from UpnpInit when it is returning the bound IP address. UpnpInit/getlocalhostname hasn't been updated to IPv6, I presume this is deliberate so that it doesn't start returning IPv6 addresses and overwriting the caller's IPv4-sized allocation. The attached patch just updates getlocalhostname to use inet_ntop instead of inet_ntoa, and also documents the fact that UpnpInit is IPv4 only whilst UpnpInnit2 is both IPv4 and IPv6. A fuller solution might be to change UpnpInit to use some variant on UpnpGetIfInfo. UpnpInit could still be left as IPv4 only if desired - perhaps UpnpGetIfInfo could take an option for the desired address family. getlocalhostname and its own copy of the interface scanning code would then be redundant. I don't have IPv6 capability here though so I'm reluctant to change the IPv6 code, as I have no way to test it. 2010-03-15 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * SF Patch Tracker [ 2724578 ] patch for avoiding memory leaks when add devices each time a device been added, UpnpInit() is called, on exit, UpnpFinish() is called, but the memories allocated by ThreadPoolInit() may lost because there's no code to call ThreadPoolShutdown() to release the memories. And inet_ntoa() is not thread safe, so in my patch, I substitute inet_ntoa() with inet_ntop(). 2010-03-14 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * SF Patch Tracker [ 2964687 ] Add new string based accessors to upnp object API As per email to pupnp-devel, this is the patch to add the _strget_ accessors for string-like objects in the interface. Will add a further patch shortly to udpate the sample programs. 2008-06-27 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * Nicholas Kraft's patch to fix some IPv6 copy/paste issues. He reported to be getting infinite loops with the svn code. 2008-06-13 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * SF Bug Tracker [ 1984541 ] ixmlDocumenttoString does not render the namespace tag. Submitted By: Beliveau - belivo Undoing the patch that fixed this problem. In fact, there was no problem and the patch was wrong. 2008-06-11 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * Ingo Hofmann's patch for "Content-Type in Subscription responses". Adds charset="utf-8" attribute to the CONTENT-TYPE header line. Hi, I have found an inconsistency regarding the text/xml content-type returned by libupnp. It looks like only subscription responses send "text/xml" where all other messages contain "text/xml; charset="utf-8"". Since I'm working on an DLNA device the latter behaviour is mandatory. I changed the according lines in gena_device.c (see attached patch). I'm not sure if it would be ok for other device to have the charset field but it would help me a lot :) Best regards, Ingo 2008-06-04 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * SF Bug Tracker [ 1984541 ] ixmlDocumenttoString does not render the namespace tag. Submitted By: Beliveau - belivo The problem occurs when converting a xml document using ixmlDocumenttoString containing a namespace tag created with ixmlDocument_createElementNS. The namespace tag doesn't get rendered. example: The following code fragment prints: <?xml version="1.0"?> <root></root> instead of: <?xml version="1.0"?> <root xmlns="urn:schemas-upnp-org:device-1-0"></root> Code: #include <stdlib.h> #include <upnp/ixml.h> int main() { IXML_Document* wDoc = ixmlDocument_createDocument(); IXML_Element* wRoot = ixmlDocument_createElementNS(wDoc, "urn:schemas-upnp-org:device-1-0", "root"); ixmlNode_appendChild((IXML_Node *)wDoc,(IXML_Node *)wRoot); DOMString wString = ixmlDocumenttoString(wDoc); printf(wString); free(wString); ixmlDocument_free(wDoc); return 0; } The problem was in the printing routine, not in the library data structure. 2008-05-31 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * Charles Nepveu's suggestion of not allocating a thread for MiniServer when it is not compiled. 2008-05-24 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * Ported Peter Hartley's patch to compile with mingw. 2008-05-24 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * Added some debug capability to ixml. 2008-05-02 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * Merged Charles Nepveu's IPv6 work. libupnp now is IPv6 enabled. 2008-02-06 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * Breaking API so that we now hide internal data structures. 2008-02-06 Marcelo Jimenez <mroberto(at)users.sourceforge.net> * Rewrote Peter Hartley's patch to include a new extra header field in FileInfo. ******************************************************************************* Version 1.6.22 ******************************************************************************* 2017-07-07 James Cowgill <james410(at)cowgill.org.uk> Replace MD5 impmplementation with public-domain version Currently the RSA MD5 implementation is used. Unfortunately the license has some potential issues: * The license does not explicitly allow distributing derivative works. This was the original argument used in [Debian #459516](https://bugs.debian.org/459516). * The license contains an advertising clause similar to the BSD 4-clause license. This is incompatible with the GPL and if it were enforced, would require RSA to be mentioned by pretty much everyone who uses pupnp. The simple solution is to replace it with a public domain implementation. I've taken OpenBSDs implementation and tweaked it slightly for use by pupnp by: - Adjusting the includes. - Removing the __bounded__ attributes which are specific to OpenBSD. - Using the standard integer types from stdint.h. - Using memset instead of explicit_bzero. 2016-12-16 Peter Pramberger <peterpramb(at)users.sf.net> ixml/test/test_document.c is missing the string.h include, therefore the compiler complains about an implicit declaration. ******************************************************************************* Version 1.6.21 ******************************************************************************* 2016-12-16 Gabriel Burca <gburca(at)github> If the error or info log files can not be created, use stderr and stdout instead. 2016-12-08 Uwe Kleine-König <uwe(at)kleine-koenig.org> Fix out-of-bound access in create_url_list() (CVE-2016-8863) If there is an invalid URL in URLS->buf after a valid one, uri_parse is called with out pointing after the allocated memory. As uri_parse writes to *out before returning an error the loop in create_url_list must be stopped early to prevent an out-of-bound access Bug: https://sourceforge.net/p/pupnp/bugs/133/ Bug-CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8863 Bug-Debian: https://bugs.debian.org/842093 Bug-Redhat: https://bugzilla.redhat.com/show_bug.cgi?id=1388771 2016-11-30 Uwe Kleine-König <uwe(at)kleine-koenig.org> miniserver: fix binding to ipv6 link-local addresses Linux requires to have sin6_scope_id hold the interface id when binding to link-local addresses. This is already in use in other parts of upnp, so portability shouldn't be in the way here. Without this bind(2) fails with errno=EINVAL (although ipv6(7) from manpages 4.08 specifies ENODEV in this case). Fixes: https://bugs.debian.org/813249 2016-09-15 Mathew Garret <(at)mjg59 (twitter)> SF Bug Tracker #132 CVE-2016-6255: write files via POST Submitted by: Balint Reczey in 2016-08-02 From Debian's BTS https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831857 : From: Salvatore Bonaccorso [email protected] To: Debian Bug Tracking System [email protected] Subject: libupnp: write files via POST Date: Wed, 20 Jul 2016 11:03:34 +0200 Source: libupnp Version: 1:1.6.17-1 Severity: grave Tags: security upstream Justification: user security hole Hi See http://www.openwall.com/lists/oss-security/2016/07/18/13 and https://twitter.com/mjg59/status/755062278513319936 . Proposed fix: mjg59/pupnp-code@be0a01b Regards, Salvatore From Mathew Garret's commit: Don't allow unhandled POSTs to write to the filesystem by default ******************************************************************************* Version 1.6.20 ******************************************************************************* 2016-02-22 Jean-Francois Dockes <medoc(at)users.sf.net> SF Bugs #131, Creator: Jean-Francois Dockes I know it sounds crazy that nobody ever saw this, but the CONTENT-LENGTH value in GENA NOTIFY messages is too small by one. It appears that most current control points don't notice the extra character (an LF, which is validly there but not included in Content-Length), probably because their protocol handler is reasonably lenient, and because the missing body LF does not prevent parsing the XML. But there is a least one anal CP (Linn Kazoo) which barfs, because it reads all data until connection close and the size mismatch triggers a bug. "Proof": In gena_device.c:217 (notify_send_and_recv()) ret_code = http_SendMessage(&info, &timeout, "bbb", start_msg.buf, start_msg.length, propertySet, strlen(propertySet), CRLF, strlen(CRLF)); start_msg has all the headers, including the empty line. Content-length should be strlen(propertySet) + strlen(CRLF) (2) In gena_device.c:433 (AllocGenaHeaders()) rc = snprintf(headers, headers_size, "%s%s%"PRIzu"%s%s%s", HEADER_LINE_1, HEADER_LINE_2A, strlen(propertySet) + 1, HEADER_LINE_2B, HEADER_LINE_3, HEADER_LINE_4); HEADER_LINE_2A is "CONTENT-LENGTH: ". The following value should be strlen(propertySet) + 2 2016-01-07 Marcelo Roberto Jimenez <mroberto(at)users.sourceforge.net> Fix for a reported integer overflow 2016-01-07 Jean-Francois Dockes <medoc(at)users.sf.net> 2016-01-07 Nick Leverton <nick(at)leverton.org> SF Patches #60, Creator: Jean-Francois Dockes When libupnp is configured with --enable-ipv6 but ipv6 is not available on the system (for example because the ipv6 code is not loaded in a Linux kernel as is the case by default on Raspbian), the ipv6 socket creation call will fail in miniserver.c and the library init will fail, even if the ipv4 initialisation would have succeeded. Let a library configured with --enable-ipv6 initialize in ipv4-only mode if ipv6 is not available instead of failing. This can happen if no ipv6 code is configured or loaded in the kernel. Don't fail if IPv6 is unavailable. We might be an IPv6 enabled distro build running on an IPv4-only custom kernel. 2016-01-07 Nick Leverton <nick(at)leverton.org> SF Bug Tracker #128, Creator: Nick Leverton redefining strndup causes "error: expected identifier or '(' before '__extension__'" Fix redefinition of strnlen and strndup These are available when HAVE_STRNDUP and HAVE_STRNLEN are defined, but libupnp provides an extern prototype anyway. Recent versions of glibc define this prototype differently, causing the following compile error: src/api/UpnpString.c:47:15: error: expected identifier or '(' before '__extension__' extern char *strndup(__const char *__string, size_t __n); 2016-01-07 Nick Leverton <nick(at)leverton.org> SF Bug Tracker #129, Creator: Nick Leverton shutdown() on UDP sockets logs ENOTCONN message. https://sourceforge.net/p/pupnp/bugs/129/ Fix ENOTCONN "Error in shutdown: Transport endpoint is not connected" When logging is enabled, ssdpserver logs bursts of "Error in shutdown: Transport endpoint is not connected" This is because shutdown() is not supported for UDP sockets and under recent UNIX specifications it returns ENOTCONN if used. 2016-01-07 Nick Leverton <nick(at)leverton.org> SF Bug Tracker #127, Creator: Klaus Fischer Miniserver uses INADDR_ANY instead of HostIP https://sourceforge.net/p/pupnp/bugs/127/ The internal miniserver.c uses INADDR_ANY instead of the HostIP/IfName provided when initializing libupnp. But, this HostIP/IfName gets used for the UDP socket when multicasting SSDP messages. Because of this, miniserver may end up sending from different IP address than ssdpserver. This patch causes miniserver to use the already known interface address. 2016-01-07 Marcelo Roberto Jimenez <mroberto(at)users.sourceforge.net> SF Bug Tracker #130, Creator: Shaddy Baddah infinite loop in UpnpGetIfInfo() under WIN32 Original code makes no sense. This patch should fix it. 2015-02-04 Shaun Marko <[email protected]> Bug tracker #124 Build fails with --enable-debug Build environment Fedora 21 X86-64 * gcc 4.9.2 How to repeat $ ./configure --enable debug $ make libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -I../upnp/inc -I./inc -I../threadutil/inc -I../ixml/inc -I./src/inc -pthread -g -O2 -Wall -MT src/api/libupnp_la-UpnpString.lo -MD -MP -MF src/api/.deps/libupnp_la-UpnpString.Tpo -c src/api/UpnpString.c -fPIC -DPIC -o src/api .libs/libupnp_la-UpnpString.o src/api/UpnpString.c:47:16: error: expected identifier or '(' before 'extension' extern char *strndup(const char *string, size_t __n); ^ Makefile:1016: recipe for target 'src/api/libupnp_la-UpnpString.lo' failed Reason for failure Build enables -O2 optimization flags which causes the inclusion of a macro implementation of strndup from include/bits/string2.h. Workarounds Disable optimization when configuring or making: $ configure CFLAGS='-g -pthread -O0' --enable-debug $ make or $ configure --enable-debug $ make CFLAGS='-g -pthread -O0' Define NO_STRING_INLINES $ export CFLAGS="-DNO_STRING_INLINES -O2" $ ./configure --enagble-debug $ make Fix * Don't declare strndup in src/api/UpnpString.c if it exists 2015-02-01 Jean-Francois Dockes <[email protected]> Out-of-tree builds seem to be currently broken, because ixml and threadutil files need an include path to include UpnpGlobal.h, and configure tries to copy files into a directory which it does not create. The patch fixes both issues. 2014-01-03 Peng <howtofly(at)gmail.com> rewrite soap_device.c 1) separate HTTP handling from SOAP handling 2) remove repeated validity check, each check is performed exactly once 3) fix HTTP status code per UPnP spec, SOAP spec and RFC 2774

@Portisch

libcec (4.0.4.1~#DIST#) #DIST#; urgency=medium * fixed: only prevent TV polls when a Samsung TV is detected instead of suppressing all logical addresses. issue #424 #444 -- Pulse-Eight Packaging <[email protected]> Fri, 21 Dec 2018 22:34:14 +0100 libcec (4.0.3.1~#DIST#) #DIST#; urgency=medium * fixed: * detect debian based distros properly when installing python. closes #314 * don't filter out broadcast in HandleDeviceVendorCommandWithId(). issue #309 * send an active source message when a routing change has been received with libCEC's address as new route and no active source message has been sent yet. issue #309 #205 #233 * vs2015 c++ redistributables * fix missing tinfo linking in cec-client. #341 * set wrong variable. #343 #352 * LG - don't activate the source when receiving vendor command 0xB. #344 * LG TV always changing input when turned on #307 * Fix menu language string. #360 * correct python lib path for python 2.7+/3+. #356 * Fix build if tinfo library is not present. #398 * disable autonomous mode when a Samsung TV is connected. Samsung 2017+ TVs will power on randomly (Samsung bug). don't poll the TV. #424 * CRPiCECAdapterMessageQueue::Write() accessed the queue without locking. #423 * use sig_atomic_t for shared object between sig handler and main. #425 * python 3.5+ import. #356 * TDA995x: Fix logical address readback. #303 * TDA995x: Handle physical address change, optimize logical address setup. #303 * Pulse-Eight USB CEC adapter detection on macOS Mojave. #434 * Fix broken Python version check and failure to build on cmake < 3.7. #409 * 13 char device name got truncated * changed: * log a warning when we detect that RPi's CEC service is used by something else, blocking libCEC. issue #191 * const IAdapterCommunication::GetLogicalAddresses(), making the mutex mutable for now without changing the platform lib. closes #259 * Add a Reinitialze action. Useful for after the device has been powered down. #299 * Panasonic media control info to the readme * detect WIN64 in cmake automatically. #322 * README.developers.md. #330 * instructions for hdmi_force_hotplug=1 on the pi * eventghost plugin install/create. #375 * Include C version of libCEC loader when installing. #397 * Explicitly use python3 in pyCecClient. #433 * build with vs 2015 -- Pulse-Eight Packaging <[email protected]> Thu, 8 Nov 2018 18:05:36 +0100 libcec (4.0.2.1~#DIST#) #DIST#; urgency=medium * fixed: * windows: device detection. credits: @Portisch * don't automatically assume that an AVR is active in some situations * don't take Panasonic's vendor id when emulating an AVR * drm EDID parser not compiled in. credits @gdachs * python: have Swig generate Python threading support * python: only pass unsigned * python: allow empty callback parameters * python: install demo app as executable * python: correct install path. credits @Lo0k @mkreisl. #284 #288 #289 #291 * python: possible crash when passing an invalid callback -- Pulse-Eight Packaging <[email protected]> Mon, 23 Jan 2017 16:28:00 +0100 libcec (4.0.1.1~#DIST#) #DIST#; urgency=medium * fixed: * TransmitVolumeDown to use CEC_USER_CONTROL_CODE_VOLUME_DOWN. credits: @michaelarnauts * HAVE_AOCEC_API missing in if in AdapterFactory. credits: @gdachs * env.h had 'ON' instead of '1' for some values -- Pulse-Eight Packaging <[email protected]> Tue, 3 Jan 2017 19:12:00 +0100 libcec (4.0.0.3~#DIST#) #DIST#; urgency=medium * fixed: * headers weren't installed after package name changes -- Pulse-Eight Packaging <[email protected]> Tue, 14 Nov 2016 10:15:00 +0100 libcec (4.0.0.2~#DIST#) #DIST#; urgency=medium * changed: * updated readme files * renamed 'libcec-dev' to 'libcec4-dev' * fixed: * removed debian Replaces/Provides/Conflicts * crash in drm edid code. credits: @zivillian * compilation with -DHAVE_AOCEC_API=1 -- Pulse-Eight Packaging <[email protected]> Tue, 7 Nov 2016 22:43:00 +0100 libcec (4.0.0.1~#DIST#) #DIST#; urgency=medium * API cleaned up for v4 * changed: * signature for GetDeviceMenuLanguage() changed * signature for GetDeviceOSDName() changed * signature for libcec_get_device_menu_language() changed * signature for get_device_osd_name() changed * cec_datapacket size reduced to 16 bytes * callbacks changed to pass pointers instead of copies * obsolete entries removed from libcec_configuration * removed deprecated FindAdapters() and MuteAudio() * send volume change commands to the TV if no audio system is present. Only some TVs support this. closes #223 * added: * bAutoWakeAVR entry in libcec_configuration, which controls whether to automatically power on the avr or not when the source is activated. issue #156 * iDoubleTapTimeoutMs replacing iDoubleTapTimeout50Ms. time is now in milliseconds * new AO CEC adapter. credits: @gdachs * fixed: * compilation with full debugging enabled * handling of LG vendor command 0x0B. Issue #256. Credits @Vollstrecker * return value wasn't checked correctly in CLibCEC::RegisterClient() * Raspberry Pi fixes for issues #252 and #191 -- Pulse-Eight Packaging <[email protected]> Tue, 26 Oct 2016 18:08:00 +0100 libcec (3.2.0.1~#DIST#) #DIST#; urgency=medium * Slit up repositories for libCEC and .Net utilities. -- Pulse-Eight Packaging <[email protected]> Wed, 19 Oct 2016 16:57:00 +0100 libcec (3.1.0.1~#DIST#) #DIST#; urgency=medium * changed / added: * bump platform lib (windows) * use a template that can be used by scripts for the changelog * make released key polling wait for exact time until key gets released. credits @popcornmix * keep track of time since initial button press and last button update credits @popcornmix * support repeating button presses with configurable repeat rate. credits @popcornmix * pass through duration on all button repeats. credits @popcornmix * updated README.md * moved the buffer in CDRMEdidParser::GetPhysicalAddress() from the stack to heap * added #include to make the IDE happy. not actually used when compiling * clean up device detection code a bit and replace winapi calls with CM_* calls. issue #130 * replaced lockdev by flock. closes #141 * use a single number as major SO version like others. credits @rbalint * Sharp uses vendor id 0x534850 too. issue #36 * use p8-platform instead of platform * detect dirty trees * support for vs2015 to build scripts * update build scripts for vs2015 and win10uni * fixed: * missing version.h when installing on windows * skip double press removal. It is handled through other means. credits @popcornmix * don't generate an invalid env.h when not built with the .git dir present. closes #112 * fix multi-arch libdir locations. credits @wsnipex * fix for holding buttons on remotes of Philips TVs. credits @mrgreywater * initialisation issue found on Raspberry Pi with Buildroot. credits @elouet * crash on systems without /sys/class/drm. credits @rbalint * segfault when an empty EDID blob is passed to GetPhysicalAddressFromEDID() * combo key (stop by default) in the EventGhost plugin. fixes #128 * silence compiler warnings * git-rev.sh script * clean/fix platform detection * display a nice error message if LibCecSharp failed to load * limit the log in cectray to 100k * open cec-tray minimised if configured. don't open and minimise. issue #158 * cosmetics: persist -> save * query commands in eventghost. fixes #160 * eventghost demo config * don't call PowerOnDevices() if no devices to wake have been configured. issue #97 * Don't skip checking for Rasperry Pi library (Fixes #166). credits @kingosticks * TDA99x check * disable DRM for FreeBSD -- Pulse-Eight Packaging <[email protected]> Wed, 20 Jan 2016 00:37:32 +0100 libcec (3.0.1-1~#DIST#) #DIST#; urgency=low * changed / added: * autodetect physical ID from DRM. credits @PoppyPop * cmake command line options for raspberry pi distributions that don't use standard system paths for libs for some reason * convenience methods for compilation on the raspberry pi with non-standard system directories and cross compilation * explanation in README.md for Exynos and TDA995x * don't treat failed acks from the tv as error when sending an active source message * compilation info when building libCEC * build shared libraries by default * cec-client: 'tx' command parsing * fixed: * return code of CCECClient callbacks after async changed. credits: @mk01 * polling addresses on RPi. credits: @mk01 * interruptable Sleep() in RPiCECAdapterMessageQueue * Exynos support. credits: @YamashitaRen * XCASE got removed from posix termios in some recent version * don't return an abort code if sending a response code fails -- Pulse-Eight Packaging <[email protected]> Fri, 03 Jul 2015 15:19:00 +0200 libcec (3.0.0-2) unstable; urgency=low * fixed: * build fixes on non-linux -- Pulse-Eight Packaging <[email protected]> Fri, 01 May 2015 01:41:00 +0200 libcec (3.0.0-1) unstable; urgency=low * changed / added: * initial version of an EventGhost plugin * Python API added through Swig, based on the C++ API * switched from autotools to cmake * added curses support. credits @joao29a * added cecc-client (testclient for the C api) * added runtime libCEC loading for C * updated the C interface to include new features and no longer use a global library instance * some AVRs fail to be powered up by the TV when it powers up. power up the AVR explicitly * added support for CEC_DEVICE_TYPE_TV (useful for testing) * compile with c++11 * removed CStdString * drop 'using namespace std' * autogenerated version numbers, drop some backwards compat code * LibCecSharp: added PhysicalAddressToString() * CecSharpClient: better formatting of the scan command * fixed: * Debian packaging cleaned up. Credits @PimentNoir * fixed Raspberry Pi compilation. Credits @NHellFire * ignore vendor command with id from pioneer AVRs. bugzid: 3853 * update the vendor id of a device when receiving a vendor command with id before receiving a vendor id * XBMC->Kodi rebranding * don't delete m_client when m_cec hasn't been deleted yet in CLibCEC::~CLibCEC(). issue #63 * change device types in CCECProcessor::Process(), not directly. issue #63 * use shared_ptr<CPVRClient> instead of passing raw pointers around that can be unregistered from another thread and crash * check if the port or device actually changed in CCECClient::SetHDMIPort() * potential buffer overflow * fixed setting the physical address at startup when using default settings * don't call callbacks directly in libCEC, but queue them and process from a worker thread * libCEC Tray: crash when retrying to find adapters * libCEC Tray: don't show the "no device found" warning when resuming from standby * libCEC Tray: reconnect to the adapter after resuming from standby * libCEC Tray: send key presses to the active window when none of the predefined (wmc/kodi) ones are active * libCEC Tray: fixed key combinations with the windows key -- Pulse-Eight Packaging <[email protected]> Fri, 03 Apr 2015 21:13:00 +0200

SoftHSM2 is not a drop-in replacement for SoftHSM version 1, so this is added as a separate package. See softhsm2-migrate(1) for migration instructions. Upstream changes since SoftHSM version 1.x: SoftHSM 2.5.0 - 2018-09-24 * Issue #323: Support for EDDSA with vendor defined mechanisms. (Patch from Francis Dupont) * Issue #362: CMake Build System Support for SoftHSM. (Patch from Constantine Grantcharov) * Issue #368: Support migrating 32-bit SoftHSMv1 DB on 64-bit system (LP64). * Issue #385: Default is not to build EDDSA since it has not been released in OpenSSL. * Issue #387: Windows: Add VS2017 detection to Configure.py. (Patch from Jaroslav Imrich) * Issue #412: Replace PKCS11 headers with a version from p11-kit. (Patch from Alexander Bokovoy) Bugfixes: * Issue #366: Support cross-compilation. (Patch from Michael Weiser) * Issue #377: Duplicate symbol error with custom p11test. * Issue #386: Use RDRAND in OpenSSL if that engine is available. * Issue #388: Update DBTests.cpp to fix x86 test failure. (Patch from tcely) * Issue #393: Not setting CKA_PUBLIC_KEY_INFO correctly. (Patch from pkalapat) * Issue #401: Wrong key and keyserver mentioned in installation documentation. (Patch from Berry A.W. van Halderen) * Issue #408: Remove mutex callbacks after C_Finalize(). (Patch from Alexander Bokovoy) SoftHSM 2.4.0 - 2018-02-27 * Issue #135: Support PKCS#8 for GOST. * Issue #140: Support for CKA_ALLOWED_MECHANISMS. (Patch from Brad Hess) * Issue #141: Support CKA_ALWAYS_AUTHENTICATE for private key objects. * Issue #220: Support for CKM_DES3_CMAC and CKM_AES_CMAC. * Issue #226: Configuration option for Windows build to enable build with static CRT (/MT). * Issue #325: Support for CKM_AES_GCM. * Issue #334: Document that initialized tokens will be reassigned to another slot (based on the token serial number). * Issue #335: Support for CKM_RSA_PKCS_PSS. (Patch from Nikos Mavrogiannopoulos) * Issue #341: Import AES keys with softhsm2-util. (Patch from Pavel Cherezov) * Issue #348: Document that OSX needs pkg-config to detect cppunit. * Issue #349: softhsm2-util will check the configuration and report any issues before loading the PKCS#11 library. Bugfixes: * Issue #345: Private objects are presented to security officer in search results. * Issue #358: Race condition when multiple applications are creating and reading object files. SoftHSM 2.3.0 - 2017-07-03 * Issue #130: Upgraded to PKCS#11 v2.40. * Minor changes to some return values. * Added CKA_DESTROYABLE to all objects. Used by C_DestroyObject(). * Added CKA_PUBLIC_KEY_INFO to certificates, private, and public key objects. Will be accepted from application, but SoftHSM will currently not calculate it. * Issue #142: Support for CKM_AES_CTR. * Issue #155: Add unit tests for SessionManager. * Issue #189: C_DigestKey returns CKR_KEY_INDIGESTIBLE when key attribute CKA_EXTRACTABLE = false. Whitelist SHA algorithms to allow C_DigestKey in this case. * Issue #225: Show slot id after initialization. * Issue #247: Run AppVeyor (Windows CI) for each PR and merge. * Issue #257: Set CKA_DECRYPT/CKA_ENCRYPT flags on key import to true. (Patch from Martin Domke) * Issue #261: Add support for libeaycompat lib for FIPS on Windows. (Patch from Matt Hauck) * Issue #262: Support importing ECDSA P-521 in softhsm-util. * Issue #276: Support for Botan 2.0. * Issue #279: Editorial changes from Mountain Lion to Sierra. (Patch from Mike Neumann) * Issue #283: More detailed error messages when initializing SoftHSM. * Issue #285: Support for LibreSSL. (Patch from Alon Bar-Lev) * Issue #286: Update .gitignore. (Patch from Alon Bar-Lev) * Issue #291: Change to enable builds and reports on new Jenkinks environment. * Issue #293: Detect cppunit in autoconf. (Patch from Alon Bar-Lev) * Issue #309: CKO_CERTIFICATE and CKO_PUBLIC_KEY now defaults to CKA_PRIVATE=false. * Issue #314: Update README with information about logging. * Issue #330: Adjust log levels for failing to enumerate object store. (Patch from Nikos Mavrogiannopoulos) Bugfixes: * Issue #216: Better handling of CRYPTO_set_locking_callback() for OpenSSL. * Issue #265: Fix deriving shared secret with ECC. * Issue #280: HMAC with sizes less than L bytes is strongly discouraged. Set a lower bound equal to L bytes in ulMinKeySize and check it when initializing the operation. * Issue #281: Fix test of p11 shared library. (Patch from Lars Silvén) * Issue #289: Minor fix of 'EVP_CipherFinal_ex'. (Patch from Viktor Tarasov) * Issue #297: Fix build with cppunit. (Patch from Ludovic Rousseau) * Issue #302: Export PKCS#11 symbols from the library. (Patch from Ludovic Rousseau) * Issue #305: Zero pad key to fit the block in CKM_AES_KEY_WRAP. * Issue #313: Detecting CppUnit when using Macports. (Patch from mouse07410) SoftHSM 2.2.0 - 2016-12-05 * Issue #143: Delete a token using softhsm2-util. * Issue #185: Change access mode bits for /var/lib/softhsm/tokens/ to 1777. All users can now create tokens, but only access their own. (Patch from Rick van Rein) * Issue #186: Reinitializing a token will now keep the token, but all token objects are deleted, the user PIN is removed and the token label is updated. * Issue #190: Support for OpenSSL 1.1.0. * Issue #198: Calling C_GetSlotList with NULL_PTR will make sure that there is always a slot with an uninitialized token available. * Issue #199: The token serial number will be used when setting the slot number. The serial number is set after the token has been initialized. (Patch from Lars Silvén) * Issue #203: Update the command utils to use the token label or serial to find the token and its slot number. * Issue #209: Possibility to test other PKCS#11 implementations with the CppUnit test. (Patch from Lars Silvén) * Issue #223: Mark public key as non private by default. (Patch from Nikos Mavrogiannopoulos) * Issue #230: Install p11-kit module, to disable use --disable-p11-kit. (Patch from David Woodhouse) * Issue #237: Add windows continuous integration build. (Patch from Peter Polacko) Bugfixes: * Issue #201: Missing new source file and test configuration in the Windows build project. * Issue #205: ECDSA P-521 support for OpenSSL and better test coverage. * Issue #207: Fix segmentation faults in loadLibrary function. (Patch from Jaroslav Imrich) * Issue #215: Update the Homebrew install notes for OSX. * Issue #218: Fix build warnings. * Issue #235: Add the libtool install command for OSX. (Patch from Mark Wylde) * Issue #236: Use GetEnvironmentVariable instead of getenv on Windows. (Patch from Jaroslav Imrich) * Issue #239: Crash on module unload with OpenSSL. (Patch from David Woodhouse) * Issue #241: Added EXTRALIBS to Windows utils project. (Patch from Peter Polacko) * Issue #250: C++11 not detected. * Issue #255: API changes in Botan 1.11.27. * Issue #260: Fix include guard to check WITH_FIPS. (Patch from Matt Hauck) * Issue #268: p11test fails on 32-bit systems. * Issue #270: Build warning about "converting a string constant". * Issue #272: Fix C++11 check to look for unique_ptr. (Patch from Matt Hauck) SoftHSM 2.1.0 - 2016-03-14 * Issue #136: Improved guide and build scripts for Windows. (Thanks to Jaroslav Imrich) * Issue #144: The password prompt in softhsm2-util can now be interrupted (ctrl-c). * Issue #166: Add slots.removable config option. (Patch from Sumit Bose) * Issue #180: Windows configure script improvements. (Patch from Arnaud Grandville) Bugfixes: * Issue #128: Prioritize the return values in C_GetAttributeValue. (Patch from Nicholas Wilson) * Issue #129: Fix errors reported by Visual Studio 2015. (Patch from Jaroslav Imrich) * Issue #132: Handle the CKA_CHECK_VALUE correctly for certificates and symmetric key objects. * Issue #154: Fix the Windows build and destruction order of objects. (Patch from Arnaud Grandville) * Issue #162: Not possible to create certificate objects containing CKA_CERTIFICATE_CATEGORY, CKA_NAME_HASH_ALGORITHM, or CKA_JAVA_MIDP_SECURITY_DOMAIN. * Issue #163: Do not attempt decryption of empty byte strings. (Patch from Michal Kepien) * Issue #165: Minor changes after a PVS-Studio code analysis, and C_EncryptUpdate crash if no ciphered data is produced. (Patch from Arnaud Grandville) * Issue #169: One-byte buffer overflow in call to EVP_DecryptUpdate. * Issue #171: Problem while closing library that is initialized but improperly finalized. * Issue #173: Adjust return values for the template parsing. * Issue #174: C_DeriveKey() error with leading zero bytes. * Issue #177: CKA_NEVER_EXTRACTABLE set to CK_FALSE on objects created with C_CreateObject. * Issue #182: Resolve compiler warning. (Patch from Josh Datko) * Issue #184: Stop discarding the global OpenSSL libcrypto state. (Patch from Michal Trojnara) * SOFTHSM-123: Fix library cleanup on BSD. SoftHSM 2.0.0 - 2015-07-17 * SOFTHSM-121: Test cases for C_DecryptUpdate/C_DecryptFinal. * Support C_DecryptUpdate/C_DecryptFinal for symmetric algorithms. (Patch from Thomas Calderon) Bugfixes: * SOFTHSM-120: Segfault after renaming variables. SoftHSM 2.0.0b3 - 2015-04-17 * SOFTHSM-113: Support for Botan 1.11.15 * SOFTHSM-119: softhsm2-util: Support ECDSA key import (Patch from Magnus Ahltorp) * SUPPORT-139: Support deriving generic secrets, DES, DES2, DES3, and AES. Using DH, ECDH or symmetric encryption. Bugfixes: * SOFTHSM-108: A marked as trusted certificate cannot be imported. * SOFTHSM-109: Unused parameter and variable warnings. * SOFTHSM-110: subdir-objects warnings from autoreconf. * SOFTHSM-111: Include FIPS-NOTES.md in dist. * SOFTHSM-112: CKM_AES_KEY_WRAP* conflict in pkcs11.h. * SOFTHSM-114: Fix memory leak in a test script. * SOFTHSM-115: Fix static analysis warnings. * SUPPORT-154: A marked as non-modifiable object cannot be generated. * SUPPORT-155: auto_ptr is deprecated in C++11, use unique_ptr. * SUPPORT-157: Derived secrets were truncated after encryption and could thus not be decrypted. * Mutex should call MutexFactory wrapper functions. (Patch from Jerry Lundstrom) * Return detailed error message to loadLibrary(). (Patch from Petr Spacek) SoftHSM 2.0.0b2 - 2014-12-28 * SOFTHSM-50: OpenSSL FIPS support. * SOFTHSM-64: Updated build script for Windows. * SOFTHSM-100: Use --free with softhsm2-util to initialize the first free token. * SOFTHSM-103: Allow runtime configuration of log level. * SOFTHSM-107: Support for CKM_<symcipher>_CBC_PAD. * Add support for CKM_RSA_PKCS_OAEP key un/wrapping. (Patch from Petr Spacek) * Use OpenSSL EVP interface for AES key wrapping. (Patch from Petr Spacek) * Allow reading configuration file from user's home directory. (Patch from Nikos Mavrogiannopoulos) Bugfixes: * SOFTHSM-102: C_DeriveKey() uses OBJECT_OP_GENERATE. * Coverity found a number of issues. SoftHSM 2.0.0b1 - 2014-09-10 * SOFTHSM-84: Check that all mandatory attributes are given during the creation process. * SOFTHSM-92: Enable -fvisibility=hidden on per default * SUPPORT-137: Implement C_EncryptUpdate and C_EncryptFinal (Patch from Martin Paljak) * Add support for CKM_RSA_PKCS key un/wrapping (Patch from Petr Spacek) Bugfixes: * SOFTHSM-66: Attribute handling when using multiple threads * SOFTHSM-93: Invalid C++ object recycling. * SOFTHSM-95: umask affecting the calling application. * SOFTHSM-97: Check if Botan has already been initialized. * SOFTHSM-98: Handle mandatory attributes for DSA, DH, and ECDSA correctly. * SOFTHSM-99: Binary encoding of GOST values. * SUPPORT-136: softhsm2-keyconv creates files with sensitive material in insecure way. SoftHSM 2.0.0a2 - 2014-03-25 * SOFTHSM-68: Display a better configure message when there is a version of Botan with a broken ECC/GOST/OID implementation. * SOFTHSM-70: Improved handling of the database backend. * SOFTHSM-71: Supporting Botan 1.11. * SOFTHSM-76: Do not generate RSA keys smaller than 1024 bit when using the Botan crypto backend. * SOFTHSM-83: Support CKA_VALUE_BITS for CKK_DH private key object. * SOFTHSM-85: Rename libsofthsm.so to libsofthsm2.so and prefix the command line utilties with softhsm2-. * SOFTHSM-89: Use constants and not strings for signaling algorithms. * SUPPORT-129: Possible to use an empty template in C_GenerateKey. The class and key type are inherited from the generation mechanism. Some mechanisms do however require a length attribute. [SOFTHSM-88] * SUPPORT-131: Support RSA-PSS using SHA1, SHA224, SHA256, SHA384, or SHA512. [SOFTHSM-87] Bugfixes: * SOFTHSM-39: Fix 64 bit build on sparc sun4v. * SOFTHSM-69: GOST did not work when you disabled ECC. * SOFTHSM-78: Correct the attribute checks for a number of objects. * SOFTHSM-80: Prevent segfault in OpenSSL GOST HMAC code. * SOFTHSM-91: Fix a warning from static code analysis. * Fixed a number of memory leaks. SoftHSM 2.0.0a1 - 2014-02-10 This is the first alpha release of SoftHSMv2. It focuses on a higher level of security by encrypting sensitive information and using unswappable memory. There is also a more generalized crypto backend, where you can use Botan or OpenSSL.

Vala 0.48.0 =========== * Various improvements and bug fixes: - vala: + Fix circular reference in Property/EnumValueType + Report an internal error for unavailable context and bail + Prevent possible stack-overflow in Class.is_subtype_of() - Add missing CodeContext.pop() calls - codegen: Add more "low-level" includes of "glib.h" - girparser: Decrease return_array_length_idx for transformed function - girparser: Delay adding of "GLib.Object" prerequisite to interfaces - manual: Update from wiki.gnome.org * Bindings: - vapi: Update GIR-based bindings * Contributors: Alberto Fanjul, Arnaud Bonatti, Corentin Noël, Evan Nemerson, Florian Brosch, Jeremy Philippe, Michael Gratton, Ole André Vadla Ravnås, Princeton Ferro, Rico Tzschichholz, Simon Werbeck Vala 0.47.92 ============ * Various improvements and bug fixes: - Add support for sealed classes in bindings [#278] - codegen: Don't initialize stack-allocated array with local-constant length [#910] - vala: Improve robustness of analyzer pass for language-servers [#911] - vala: Add local-variables to current scope regardless its error state - testrunner: Pass G_DEBUG=fatal-warnings to invalid test * Bindings: - Add some fundamental deps files to improve --nostdpkg support [#911] Vala 0.47.91 ============ * Various improvements and bug fixes: - vala: + Fix base-access check for compact classes (2) + Don't ignore errors in Parameter and acknowledge them further + Properly set CodeNode.error when reporting an error - girparser: Report a warning for conflicting class and instance methods - testrunner: Invalid tests and therefore expected failures must return 1 - manual: Update from wiki.gnome.org * Bindings: - Add harfbuzz-gobject binding [#909] - gstreamer: Update from 1.17.0+ git master - gtk+-*.0,gtk4: Fix iter parameter of TextIter.order() [#908] - gtk4: Update to 3.98.0+410dbdf6 - pango: Update and add harfbuzz-gobject as dependency - webkit2gtk-4.0: Update to 2.27.90 Vala 0.47.4 =========== * Various improvements and bug fixes: - codegen: + Skip StructRegisterFunction for boolean/integer/floating types [#901] + Handle different type-symbols in visit_base_access() [#901] + Explicitly include header for length-type of arrays + Explicitly include <glib.h> as needed for null-literal + Make *_try_id specific to emit-context instead being global states - vala: + Improve detection of recursive struct declarations [#902] + Inline allocated arrays require length or initializer [#903] - parser: Improve robustness and behavior of --keep-going * Bindings: - javascriptcoregtk-4.0: Make JSC.Class usable by defining the right callback - gtk4: Update to 3.96.0+4ab12ab7 - vapi: Update GIR-based bindings Vala 0.47.3 =========== * Highlights: - Add further support for params arrays [#128] * Various improvements and bug fixes: - codegen: + Don't set implemenation of interface property to its own [#891] + Use result value of assignment rather than its computation [#895] + Cast instance parameter in member-initializer for base-properties [#899] - vala: + Infer target_type in coalescing expressions [#892] + Non-nullable value-type in coalesce expression needs to be copied [#893] + Fix short-circuiting behavior of coalescing operator [#534] + Always bail if there are semantic errors - girparser: Apply explicitly given ctype metadata attributes on callables * Bindings: - glib-2.0: Let (u)int.try_parse() return false if there is an unparsed part - gtk4: Update to 3.96.0+7e2e92a8 - gstreamer: Update from 1.17.0+ git master - vapi: Update GIR-based bindings - webkit2gtk-4.0: Update to 2.27.4 Vala 0.47.2 =========== * Highlights: - compiler: Add "--depfile" option writing package dependencies to given file * Various improvements and bug fixes: - codegen: + Fix support of dynamic DBus methods + Fix vfunc signature of delegate-typed property in interface + Fix precondition in creation method of structs + Remove unreachable code in TypeRegisterFunction.init_from_type() + Improve *_get_type() fast path (requires glib >= 2.58) [#879] - vala: + Report error for async creation expression without yield + Don't require constant initializer in fast-vapi [#461] + VoidType is actually compatible with itself [#878] + Improve handling of "void" as generic type [#878] + Keep formal_target_type on transform of method-call/object-creation [#835] + Add a basic parameter check for [Print] methods + Let the parser have set namespace members as static + Don't ignore inner errors in Block and acknowledge them further + Improve error message for unsupported inner types and declarations + Don't allow "va_list" as return-type or type of fields [#884] + Check before accessing "name" of parent_symbol which might be null + Allow to override base interface properties explicitly - gidl/girparser: Creation methods must not be marked as static - parser: Implicit "main" method of main-block is public and static - scanner: "\x" requires two hex digits at most - scanner: Improve check of "\u" escape sequence - genie: Fix parser's inner state when a struct is declared after a class * Bindings: - glib-2.0: Add to_string() for GLib.PollFd and GLib.Pid - glib-2.0: Add new symbols from 2.64 - glib-2.0: Reset errno before calling strto*() functions. - gstreamer: Update from 1.17.0+ git master - gtk4: Update to 3.96.0+448a4023 - pango: Update to 1.44+ - vapi: Update GIR-based bindings - webkit2gtk-4.0: Update to 2.27.3 Vala 0.47.1 =========== * Highlights: - Various improvements for the POSIX profile - codegen: + Allow passing/retrieving any delegate to/from varargs parameter + Support gobject property of null-terminated array without length [#855] + Support gobject property of delegates not carrying their target [#856] + Warn when directly accessing member of silent cast-expression - vala: + Add DelegateType.target/destroy fields to access its user-data [#857] + Accept interface as inner type for object-type symbols [#697] + Add GenericType.dup/destroy fields [#190] + Support "unowned var" to declare local variables [#152] - compiler: Add "--list-sources" options to output list of all sources [#872] * Various improvements and bug fixes: - codegen: + Move type-argument checks to SemanticAnalyzer + Make CCodeBaseModule.generate_method_declaration() return bool + Fix custom reference-counting for compact classes + G_DEFINE_AUTOPTR_CLEANUP_FUNC must not declared more than once + Use SemanticAnalyzer.get_data_type_for_symbol() + Commonize the determining of return-type for delegates and methods - vala: + Rename DataType.data_type property to DataType.type_symbol + Unify backing symbol instance of data-types + Respect --abi-stability in Class/Interface.accept_children() + Don't mark method as used on recursive usage of itself [#100] + Set GLib.Error as symbol of error-types if no error-domain was given + Make Callable derive from Symbol - libvaladoc: Remove TypeReference.pass_ownership API - valadoc: Rename FormalParameter to Parameter - girwriter: Fix position of priv field (--abi-stability) [#850] * Bindings: - glib-2.0: Add binding for "gettext()" [#864] - glib-2.0: Add new symbols from 2.64 - glib-2.0: Add optional "base" parameter to *.parse/try_parse() of integers and check errno for EINVAL and ERANGE in *.try_parse() [#223] - glib-2.0: Add (u)int.try_parse() [#649] - glib-2.0: Add "has_typedef = false" to custom MarkupParser*Func delegates - gtk+-*.0: Fix iter parameter of TextBuffer.backspace() - gtksourceview-2.0: Fix iter parameter in SourceBuffer.backward/forward/... - libusb-1.0: Use a wrapper for Context.get_device_list() [#151]

@pblesi

Update ruby-airbrussh to 1.4.0. 1.4.0 (2019-10-13) New Features * Allow ConsoleFormatter context to be configurable (#131) @pblesi 1.3.4 (2019-09-15) Housekeeping * Add issues, source code URLs to gemspec metadata (#129) @mattbrictson * Add changelog_uri to metadata to easily link from rubygems.org (#128) @nickhammond 1.3.3 (2019-08-18) Bug Fixes * Fix LoadError when airbrussh is used without rake installed (#127) @mattbrictson Housekeeping * Migrate to new GitHub Actions config format (#125) @mattbrictson * Remove chandler from rake release process (#124) @mattbrictson * Set up release-drafter (#123) @mattbrictson * Eliminate double CI builds on PRs (#122) @mattbrictson 1.3.2 (2019-06-15) * #121: Gracefully handle SSH output that has invalid UTF-8 encoding instead of raising an exception - @mattbrictson

Update ruby-childprocessto 3.0.0. ### Version 3.0.0 / 2019-09-20 * [#156](enkessler/childprocess#156 unused `rubyforge_project` from gemspec * [#160](enkessler/childprocess#160): Remove extension to conditionally install `ffi` gem on Windows platforms * [#160](enkessler/childprocess#160): Remove runtime dependency on `rake` gem ### Version 2.0.0 / 2019-07-11 * [#148](enkessler/childprocess#148): Drop support for Ruby 2.0, 2.1, and 2.2 * [#149](enkessler/childprocess#149): Fix Unix fork reopen to be compatible with Ruby 2.6 * [#152](https://github.com/enkessler/childprocess/pull/152)/[#154](https://github.com/enkessler/childprocess/pull/154): Fix hangs and permission errors introduced in Ruby 2.6 for leader processes of process groups ### Version 1.0.1 / 2019-02-03 * [#143](enkessler/childprocess#144): Fix installs by adding `rake` gem as runtime dependency * [#147](enkessler/childprocess#147): Relax `rake` gem constraint from `< 12` to `< 13` ### Version 1.0.0 / 2019-01-28 * [#134](enkessler/childprocess#134): Add support for non-ASCII characters on Windows * [#132](enkessler/childprocess#132): Install `ffi` gem requirement on Windows only * [#128](enkessler/childprocess#128): Convert environment variable values to strings when `posix_spawn` enabled * [#141](enkessler/childprocess#141): Support JRuby on Java >= 9

- Updates a patch. Changes since 2.1.1: Library: * A library view showing recent books and reading progress (#119) * Search books by metadata * E-book discovery with OPDS (#6, #253) New supported formats: * FictionBook (.fb2, .fb2.zip) (#128) * Comic book archive (.cbr, .cbz, .cbt, .cb7) (#254) * Plain text (.txt) (#226) * Unpacked EPUB files Layout: * Option to set maximum page width (#192) * The "Automatic" layout will now show four columns when the page width is wide (#257) Image viewer: * Improved image viewer, with new shortcuts and the ability to rotate (#299) and invert images * Option to disable image viewer, or to open images on double, middle, or right click (#315) Text-to-speech: * Improved text-to-speech configuration UI * Ability to set text-to-speech voice based on book language (#134) Annotations * Import annotations from JSON * Search in annotations * Annotations are now sorted in the same order as they appear in the book (#318) Security: * "Allow Unsafe Content" now only enables JavaScript; external content will no longer be loaded. This is an important security fix. If you are running an old version of Foliate and cannot upgrade, you should disable "Allow Unsafe Content". * WebKit processes are now sandboxed Other featues and fixes: * Improved support for vertical and right-to-left books * Support for StarDict dictionaries (#302) (requires new optional dependency sdcv) * Fixed current location not preserved when resizing (#152, #204) * Fixed auto-hiding header bar under some themes (#316) * Command-line options for showing version and adding books to library * Option to clear or disable cache * When an HTML page contains invalid self-closing anchor tags, it is now parsed as XHTML (#275, #288) Technical changes: * Foliate now stores file locations in ~/.local/share/com.github.johnfactotum.Foliate/library/uri-store.json, and saves book covers to ~/.cache/com.github.johnfactotum.Foliate. Both can be disabled. * New optional dependency tracker (gir1.2-tracker-2.0 on Debian based distributions), which can be used to get file locations. * New optional dependency libhandy (gir1.2-handy-0.0). It's not absolutely required, but installing it would make the experience better on larger as well as smaller screens. * To open remote files, Foliate now optionally depends on libsoup (gir1.2-soup-2.4). Foliate now bundles two additional libraries: * libarchivejs, which is MIT licensed. It is a WASM port of the popular libarchive C library. * crypto-js, which is MIT licensed. The MD5 module is used to generate identifiers for files that don't have unique identifiers.

Update ruby-jekyll-archives to 2.2.1. 2.2.1 (2019-03-23) Minor Enhancements * Make Archive subclass of Page (#67) * Don't limit slugs/title to strings (#41) * Enable incremental operation (#58) * Remove deprecated defs (#89) Development Fixes * Target Ruby 2.3 * Allow testing and using with Jekyll 4.x (#133) * Update Travis config and Gemfile for Ruby < 2.2.2 support (#68) * Consolidate History file to work with jekyllbot (#80) * Remove Travis test for Ruby 1.9 (#87) * Inherit Jekyll's rubocop config for consistency (#65) * Bump travis ruby versions (#91) * Fix Travis build error (#93) * Define path with dir (#105) * Appease Rubocop (#104) * update Rubocop and Travis config (#110) * Update .travis.yml (#111) * Modernize tests & linting (#114) * Test against Ruby 2.5 (#118) * Lint with rubocop-jekyll (#128) Documentation * Update Installation Guide (#116) * docs/configuration: GitHub table display was messed up (#96) * Small updates for consistency across document (#130)

### All Platforms - Allow the RPC server to listen on an IPv6 address ([#161](transmission/transmission#161)) - Change `TR_CURL_SSL_VERIFY` to `TR_CURL_SSL_NO_VERIFY` and enable verification by default ([#334](transmission/transmission#334)) - Go back to using hash as base name for resume and torrent files (those stored in configuration directory) ([#122](transmission/transmission#122)) - Handle "fields" argument in "session-get" RPC request; if "fields" array is present in arguments, only return session fields specified; otherwise return all the fields as before - Limit the number of incorrect authentication attempts in embedded web server to 100 to prevent brute-force attacks ([#371](transmission/transmission#371)) - Set idle seed limit range to 1..40320 (4 weeks tops) in all clients ([#212](transmission/transmission#212)) - Add Peer ID for Xfplay, PicoTorrent, Free Download Manager, Folx, Baidu Netdisk torrent clients ([#256](transmission/transmission#256), [#285](transmission/transmission#285), [#355](transmission/transmission#355), [#363](transmission/transmission#363), [#386](transmission/transmission#386)) - Announce `INT64_MAX` as size left if the value is unknown (helps with e.g. Amazon S3 trackers) ([#250](transmission/transmission#250)) - Add `TCP_FASTOPEN` support (should result in slight speedup) ([#184](transmission/transmission#184)) - Improve ToS handling on IPv6 connections ([#128](transmission/transmission#128), [#341](transmission/transmission#341), [#360](transmission/transmission#360), [#692](transmission/transmission#692), [#737](transmission/transmission#737)) - Abort handshake if establishing DH shared secret fails (leads to crash) ([#27](transmission/transmission#27)) - Don't switch trackers while announcing (leads to crash) ([#297](transmission/transmission#297)) - Improve completion scripts execution and error handling; add support for .cmd and .bat files on Windows ([#405](transmission/transmission#405)) - Maintain a "session ID" file (in temporary directory) to better detect whether session is local or remote; return the ID as part of "session-get" response (TRAC-5348, [#861](transmission/transmission#861)) - Change torrent location even if no data move is needed ([#35](transmission/transmission#35)) - Support CIDR-notated blocklists ([#230](transmission/transmission#230), [#741](transmission/transmission#741)) - Update the resume file before running scripts ([#825](transmission/transmission#825)) - Make multiscrape limits adaptive ([#837](transmission/transmission#837)) - Add labels support to libtransmission and transmission-remote ([#822](transmission/transmission#822)) - Parse `session-id` header case-insensitively ([#765](transmission/transmission#765)) - Sanitize suspicious path components instead of rejecting them ([#62](transmission/transmission#62), [#294](transmission/transmission#294)) - Load CA certs from system store on Windows / OpenSSL ([#446](transmission/transmission#446)) - Add support for mbedtls (formely polarssl) and wolfssl (formely cyassl), LibreSSL ([#115](transmission/transmission#115), [#116](transmission/transmission#116), [#284](transmission/transmission#284), [#486](transmission/transmission#486), [#524](transmission/transmission#524), [#570](transmission/transmission#570)) - Fix building against OpenSSL 1.1.0+ ([#24](transmission/transmission#24)) - Fix quota support for uClibc-ng 1.0.18+ and DragonFly BSD ([#42](transmission/transmission#42), [#58](transmission/transmission#58), [#312](transmission/transmission#312)) - Fix a number of memory leaks (magnet loading, session shutdown, bencoded data parsing) ([#56](transmission/transmission#56)) - Bump miniupnpc version to 2.0.20170509 ([#347](transmission/transmission#347)) - CMake-related improvements (Ninja generator, libappindicator, systemd, Solaris and macOS) ([#72](transmission/transmission#72), [#96](transmission/transmission#96), [#117](transmission/transmission#117), [#118](transmission/transmission#118), [#133](transmission/transmission#133), [#191](transmission/transmission#191)) - Switch to submodules to manage (most of) third-party dependencies - Fail installation on Windows if UCRT is not installed ### Mac Client - Bump minimum macOS version to 10.10 - Dark Mode support ([#644](transmission/transmission#644), [#722](transmission/transmission#722), [#757](transmission/transmission#757), [#779](transmission/transmission#779), [#788](transmission/transmission#788)) - Remove Growl support, notification center is always used ([#387](transmission/transmission#387)) - Fix autoupdate on High Sierra and up by bumping the Sparkle version ([#121](transmission/transmission#121), [#600](transmission/transmission#600)) - Transition to ARC ([#336](transmission/transmission#336)) - Use proper UTF-8 encoding (with macOS-specific normalization) when setting download/incomplete directory and completion script paths ([#11](transmission/transmission#11)) - Fix uncaught exception when dragging multiple items between groups ([#51](transmission/transmission#51)) - Add flat variants of status icons for message log ([#134](transmission/transmission#134)) - Optimize image resources size ([#304](transmission/transmission#304), [#429](transmission/transmission#429)) - Update file icon when file name changes ([#37](transmission/transmission#37)) - Update translations ### GTK+ Client - Add queue up/down hotkeys ([#158](transmission/transmission#158)) - Modernize the .desktop file ([#162](transmission/transmission#162)) - Add AppData file ([#224](transmission/transmission#224)) - Add symbolic icon variant for the Gnome top bar and when the high contrast theme is in use ([#414](transmission/transmission#414), [#449](transmission/transmission#449)) - Update file icon when its name changes ([#37](transmission/transmission#37)) - Switch from intltool to gettext for translations ([#584](transmission/transmission#584), [#647](transmission/transmission#647)) - Update translations, add new translations for Portuguese (Portugal) ### Qt Client - Bump minimum Qt version to 5.2 - Fix dropping .torrent files into main window on Windows ([#269](transmission/transmission#269)) - Fix prepending of drive letter to various user-selected paths on Windows ([#236](transmission/transmission#236), [#307](transmission/transmission#307), [#404](transmission/transmission#404), [#437](transmission/transmission#437), [#699](transmission/transmission#699), [#723](transmission/transmission#723), [#877](transmission/transmission#877)) - Fix sorting by progress in presence of magnet transfers ([#234](transmission/transmission#234)) - Fix .torrent file trashing upon addition ([#262](transmission/transmission#262)) - Add queue up/down hotkeys ([#158](transmission/transmission#158)) - Reduce torrent properties (file tree) memory usage - Display tooltips in torrent properties (file tree) in case the names don't fit ([#411](transmission/transmission#411)) - Improve UI look on hi-dpi displays (YMMV) - Use session ID (if available) to check if session is local or not ([#861](transmission/transmission#861)) - Use default (instead of system) locale to be more flexible ([#130](transmission/transmission#130)) - Modernize the .desktop file ([#162](transmission/transmission#162)) - Update translations, add new translations for Afrikaans, Catalan, Danish, Greek, Norwegian Bokmål, Slovenian ### Daemon - Use libsystemd instead of libsystemd-daemon (TRAC-5921) - Harden transmission-daemon.service by disallowing privileges elevation ([#795](transmission/transmission#795)) - Fix exit code to be zero when dumping settings ([#487](transmission/transmission#487)) ### Web Client - Fix tracker error XSS in inspector (CVE-?) - Fix performance issues due to improper use of `setInterval()` for UI refresh (TRAC-6031) - Fix recognition of `https://` links in comments field ([#41](transmission/transmission#41), [#180](transmission/transmission#180)) - Fix torrent list style in Google Chrome 59+ ([#384](transmission/transmission#384)) - Show ETA in compact view on non-mobile devices ([#146](transmission/transmission#146)) - Show upload file button on mobile devices ([#320](transmission/transmission#320), [#431](transmission/transmission#431), [#956](transmission/transmission#956)) - Add keyboard hotkeys for web interface ([#351](transmission/transmission#351)) - Disable autocompletion in torrent URL field ([#367](transmission/transmission#367)) ### Utils - Prevent crash in transmission-show displaying torrents with invalid creation date ([#609](transmission/transmission#609)) - Handle IPv6 RPC addresses in transmission-remote ([#247](transmission/transmission#247)) - Add `--unsorted` option to transmission-show ([#767](transmission/transmission#767)) - Widen the torrent-id column in transmission-remote for cleaner formatting ([#840](transmission/transmission#840))

4.23 2020-09-05 (rurban) - Fixup t/54_stringify change for JSON 2.09 (really use PR #169 madsen) 4.22 2020-09-04 (rurban) - Fix t/54_stringify needs JSON 2.09 for allow_unknown (PR #169 madsen) - Fix t/118_type.t for 5.6 - Fix t/96_interop.t for missing JSON::XS (GH #83 ribasushi) - Possible fix for s390x with long double, untested (GH #83) 4.21 2020-08-13 (rurban) - Fix not enough HEK memory allocation for the new canonical tied hashes feature. (GH #168) - TODO broken JSON::PP::Boolean versions 2.9x - 4.0 with threads::shared in 125_shared_boolean.t 4.20 2020-08-12 (rurban) - New feature: sort tied hashes with canonical. (GH #167) - Fix encode of threads::shared boolean (#166 Sam Bingner). This was broken with 4.00. - Fix some stringify overload cases via convert_blessed (GH #105) - Fix a compat case with JSON::XS, when convert_blessed is set, but allow_blessed not. (GH #105) - Improve blessed and stringify tests - Work on better inf/nan detection on AIX (#165 Peter Heuchert) - Fix documentation for booleans and their types (#162 by Karen Etheridge) 4.19 2020-02-06 (rurban) - Fix typed decode memory leak (#160 by Pali). 4.18 2019-12-13 (rurban) - Add new method ->type_all_string (#156 by Pali). When type_all_string is set then encode method produce stable deterministic string types in result JSON. This can be an alternative to Cpanel::JSON::XS::Type when having deterministic output is required but string JSON types are enough for any output. - Move SvGETMAGIC() from encode_av() and encode_hv() to encode_sv() (#156 by Pali) - Add Math::BigInt and Math::BigFloat as recommended dependences (#157 by Pali and Grinnz) 4.17 2019-11-04 (rurban) - Add Changes tests and fixups (see #155) 4.16 2019-11-04 (rurban) - Use Perl_strtod instead of self-made atof (via pow), to minimize differences from core string-to-float conversions. (#154). Fixes float representation regressions (in the 1e-6 to 1e-16 range) since 5.22. 4.15 2019-10-21 (rurban) - Fix more tests for nvtype long double 4.14 2019-10-15 (rurban) - Fix tests for nvtype long double (#153) - Fix PREREQ's. E.g. CentOS 7 has not Test::More anymore. (#152 by Pali) 4.13 2019-10-14 (rurban) - For JSON_TYPE_INT and JSON_TYPE_FLOAT allow to encode numeric values above 2^64 in PV slot via Math::BigInt/Float (#145, #148, #149 by Pali) - For JSON_TYPE_INT and JSON_TYPE_FLOAT encoder allow to pass Math::BigInt and Math::BigFloat objects with allow_bignum. (#147 by Pali) - Fix encoding floating point values above 2^64 in PV slot to JSON_TYPE_INT (#148, #150 by Pali) - Do not allow serializing objects when convert_blessed is not enabled. (#146 by Pali) 4.12 2019-06-11 (rurban) - Make encoder independent on Math::BigInt version (#140 by Pali) - Rethrow error from eval_sv and eval_pv() (#138, #139 by Pali), e.g. when Math::BigInt/BigFloat fails. - Fix encoding Inf and NaN from PV and NV slots to JSON_TYPE_INT (#137 by Pali) - Fix memory corruption in sv_to_ivuv() function (#136 by Pali) - Add new method ->require_types (#135 by Pali) - Fix typed json encoder conversion from scalar's PV and NV slot to JSON_TYPE_INT (#133, #134 by Pali) - Fix inconsistency with warnings in typed json encoder (#131 by Pali) - Fix Perl 5.8.0 support (#130 by Pali) - Fixed minor pod typo (#129 by sheeit) - Document invalid recursive callbacks or overloads (#128) 4.11 2019-03-26 (rurban) - Fix unicode strings with BOM corrupt ->utf8 state (#125) The BOM encoding effects only its very own decode call, not its object. 4.10 2019-03-18 (rurban) - Fix incr_text refcounts (#123) - Add incr_rest testcase (#123) - Fix encode_stringify string-overload refcnt problem (#124) "Attempt to free unreferenced scalar" with convert_blessed and overload. 4.09 2019-02-15 (rurban) - Add seperate allow_dupkeys property, in relaxed (#122) - Fixed allow_dupkeys for the XS slow path - Silence 2 -Wunused-value warnings - Fix ->unblessed_bool to produce modifiable perl structures (PR #121 by Pali)

@jonocarroll

# cli 2.0.2 * The status bar now does not simplify multiple spaces by a single space. * cli now does not crash if it fails to detect whether the RStudio theme is a dark theme (#138). * cli now works better with wide Unicode characters, for example emojis. In particular, a status bar containing emojis is cleared properly (#133). * The status bar now does not flicker when updated, in terminals (#135). # cli 2.0.1 * Symbols (`symbol$*`) are now correctly printed in RStudio on Windows (#124). * The default theme for `cli_code()` output looks better now, especially in RStudio (#123). * Remove spurious newline after a `cli_process_start()` was cleared manually, and also at the end of the function. * Use Oxford comma when listing 3 or more items (@jonocarroll, #128). # cli 2.0.0 ## Semantic command line interface tools cli 2.0.0 has a new set of functions that help creating a CLI using a set of higher level elements: headings, paragraphs, lists, alerts, code blocks, etc. The formatting of all elements can be customized via themes. See the "Building a semantic CLI" article on the package web site: https://cli.r-lib.org ## Bug fixes: * Fix a bug in `is_dynamic_tty()`, setting `R_CLI_DYNAMIC="FALSE"` now properly turns dynamic tty off (#70). CVS: ----------------------------------------------------------------------

@nevun

This is an ABI breaking update so security/libfido2 must also be updated. v0.8.0 BREAKING: Fix cbor_tag_item not increasing the reference count on the tagged item reference it returns [Fixes #109] (discovered bt JohnGilmour) BREAKING: CBOR_DECODER_EBUFFER removed from cbor_decoder_status Fixed several minor manpage issues [#159] (discovered by kloczek@) v0.7.0 Fix bad encoding of NaN half-floats [Fixes #53] (discovered by BSipos-RKF) Fix potentially bad encoding of negative half-float with exponent < -14 [Fixes #112] (discovered by yami36) BREAKING: Improved bool support [Fixes #63] Fix memory_allocation_test breaking the build without CBOR_CUSTOM_ALLOC [Fixes #128] (by panlinux) Fix a potential build issue where cJSON includes may be misconfigured Breaking: Add a limit on the size of the decoding context stack (by James-ZHANG) Enable LTO/IPO based on CheckIPOSupported [#143] (by xanderlent) v0.6.1 Fix bad shared library version number v0.6.0 Correctly set .so version [Fixes #52]. Fix & prevent heap overflow error in example code [#74] [#76] (by @nevun) Correctly set OSX dynamic library version [Fixes #75] Fix misplaced 0xFF bytes in maps possibly causing memory corruption BREAKING: Fix handling & cleanup of failed memory allocation in constructor and builder helper functions [Fixes #84] Globally enforced code style [Fixes #83] Fix issue possible memory corruption bug on repeated cbor_(byte)string_add_chunk calls with intermittently failing realloc calls Fix possibly misaligned reads and writes when endian.h is uses or when running on a big-endian machine [Fixes #99, #100]

Changelog: 1.75.0 New Libraries * JSON: JSON parsing, serialization, and DOM in C++11, from Vinnie Falco and Krystian Stasiowski. + Fast compilation requiring only C++11 + Easy and safe modern API with allocator support + Compile without Boost, define BOOST_JSON_STANDALONE + Optional header-only, without linking to a library * LEAF: A lightweight error-handling library for C++11, from Emil Dotchevski. + Small single-header format, no dependencies. + Designed for maximum efficiency ("happy" path and "sad" path). + No dynamic memory allocations, even with heavy payloads. + O(1) transport of arbitrary error types (independent of call stack depth). + Can be used with or without exception handling. * PFR: Basic reflection without macro or boilerplate code for user defined types, from Antony Polukhin. Updated Libraries * Asio: + Enabled support for UNIX domain sockets on Windows. + Added executor-converting construction and assignment to ip:: basic_resolver. + Added compatibility between polymorphic executors and the (deprecated) handler invocation hook. + Added the experimental::as_single completion token adapter. + Added support for MSG_NOSIGNAL on more platforms by using _POSIX_VERSION to detect whether it is supported. + Added the ability to compile using libpthread on Windows. + Added workarounds for the Intel C++ compiler. + Added more support for detecting and optimising for handlers that have no custom executor. + Reduced lock contention for timer cancellation on Windows. + Reinstated a previously removed null-pointer check, as it had a measurable impact on performance. + Fixed the executor concept to test for a const-qualified execute(). + Fixed any_executor support for builds without RTTI support. + Fixed the thread_pool unit test to work without RTTI support. + Fixed C++20 coroutines compatibility with clang on Windows. + Fixed some compatibility issues with Windows Runtime. + Fixed shadow name warnings caused by addition of asio::query. + Fixed a "logical ‘or’ of equal expressions" warning on linux. + Fixed a benign switch fallthrough warning. + Added missing push/pop_options.hpp includes. + Suppressed zero-as-null-pointer-constant warnings. + Fixed a comma-operator warning. + Updated the documentation to clarify when the select reactor is used on Windows. + Fixed potential ambiguity caused by any_executor comparisons and conversion. + Added detection of non-experimental C++20 coroutines on MSVC 19.8. + Fixed compatibility with uClibc. + Fixed strand<> adaptation of Networking TS executors when targeting older C++ versions or less conformant compilers. + Consult the Revision History for further details. * Atomic: + Implemented SSE2 and SSE4.1 versions of address lookup algorithm, which is used in the internal lock pool implementation. This may improve performance of waiting and notifying operations in heavily contended cases. + Fixed a possible compilation error on AArch64 targets caused by incorrect instructions generated for bitwise (logical) operations with immediate constants. (#41) * Beast: + This update brings bug fixes and support for the BOOST_ASIO_ENBALE_HANDLER_TRACKING compile flag from Boost.Asio: + We'd love to know how you or your company use Beast, consider adding an entry to the Companies and Individuals Using Beast list. + See the full Release Notes for a complete list of changes. * Container: + New devector container. + Fixed bugs/issues: o #152 Tree-based containers have troubles with move-only types. o #156 Compile error with vector. o PR#157 Add missing include. o #159: pmr::monotonic_buffer_resource crashes on large single allocations. o #160: Usage of uses_allocator needs a remove_cvref_t. o #162: small_vector on MSVC x86 call-by-value crash. o #161: polymorphic_allocator(memory_resource*) non-standard extension causes headache. o PR#163: container_rebind for small_vector with options. o #165: Link error with shared library and memory_resource inline members. o PR#166: Fix encoding error in copyright headers. o PR#167: error: the address of 'msg' will always evaluate as 'true' warning with GCC 4.4. o #169: flood of warnings building dlmalloc_ext_2_8_6.c on clang11. * Endian: + endian_arithmetic no longer inherits from endian_buffer + When BOOST_ENDIAN_NO_CTORS is defined, the unaligned endian_buffer and endian_arithmetic are C++03 PODs, to enable use of __attribute__(( packed)) * Filesystem: + New: Added creation_time operation, which allows to obtain file creation time. (Inspired by PR#134) + The returned value of last_write_time(p, ec) operation in case of failure has been changed to a minimal value representable by std:: time_t instead of -1. + The returned value of hard_link_count(p, ec) operation in case of failure has been changed to static_cast<uintmax_t>(-1) instead of 0. + On POSIX systems, file_size will now indicate error code errc:: function_not_supported if the path resolves to a non-regular file. Previously, errc::operation_not_permitted was reported. + On Linux, many operations now use statx system call internally, when possible, which allows to reduce the amount of information queried from the filesystem and potentially improve performance. The statx system call was introduced in Linux kernel 4.11. + Removed const-qualification from return types of some path methods. This could prevent move construction and move assignment at the call site in some cases. (#160) + On OpenBSD 4.4 and newer, use statvfs system call to obtain filesystem space information. (Inspired by PR#162) + On Windows, space now returns with an error if the provided path does not idendify an existing file. (#167) * GIL: + BREAKING: In next release, we are going to drop support for GCC 5. We may also change the required minimum C++ version from C++11 to C++14. * Histogram: + This update brings o Bug-fixes for corner-cases o Small documentation improvements o Fixes for new warnings from latest compilers and when compiling against the C++20 standard + See the full Release Notes for a complete list of changes. * Interprocess: + Fixed bugs: o #127: static assertion failure with boost interprocess 1.74 and basic_managed_shared_memory. * Intrusive: + Fixed bugs: o PR#48: MSVC "assignment within conditional" warning fix. o PR#49: Fix empty control statement warnings. o #52: Invalid casting in BOOST_INTRUSIVE_BSR_INTRINSIC. * Log: + Bug fixes: o Corrected the file counter that would be used in text_file_backend when generating the target file name (based on the pattern set by set_target_file_name_pattern method) when the log file is rotated. (#125) o Replaced a volatile version counter in basic_sink_frontend with an atomic. (#128) o In the asynchronous_sink frontend, resolved a possible conflict between flush and run methods, if run is called from a user's thread instead of the internal dedicated thread spawned by the frontend. (#131) + See changelog for more details. * Move: + Fixed bugs: o #30: (void) C-cast is a non-portable way of suppressing compiler warnings. * Mp11: + Added mp_pairwise_fold (suggested by Barry Revzin) + Removed mp_invoke (use mp_invoke_q) * Optional: + boost::none is constexpr-declared. + Fixed issue #78. * Outcome: + Announcements: o After a year and three major Boost releases announcing this upcoming change, this is the FINAL RELEASE of the v2.1 branch. From Boost 1.76 onwards, the v2.2 branch becomes the default. This branch has a number of major breaking changes to Outcome v2.1, see the documentation for details. + Enhancements: o The ADL discovered event hooks have been replaced with policy-specified event hooks instead. This is due to brittleness (where hooks would quietly self-disable if somebody changed something), compiler bugs (a difference in compiler settings causes the wrong hooks, or some but not all hooks, to get discovered), and end user difficulty in using them at all. The policy-specified event hooks can be told to default to ADL discovered hooks for backwards compatibility: set OUTCOME_ENABLE_LEGACY_SUPPORT_FOR to less than 220 to enable emulation. o Improve configuring OUTCOME_GCC6_CONCEPT_BOOL. Older GCCs had boolean based concepts syntax, whereas newer GCCs are standards conforming. However the precise logic of when to use legacy and conforming syntax was not well understood, which caused Outcome to fail to compile depending on what options you pass to GCC. The new logic always uses the legacy syntax if on GCC 8 or older, otherwise we use conforming syntax if and only if GCC is in C++ 20 mode or later. This hopefully will resolve the corner case build failures on GCC. + Bug fixes: o Boost.Outcome should now compile with BOOST_NO_EXCEPTIONS defined. Thanks to Emil, maintainer of Boost.Exception, making a change for me, Boost.Outcome should now compile with C++ exceptions globally disabled. You won't be able to use boost::exception_ptr as it can't be included if C++ exceptions are globally disabled. o #236 In the Coroutine support the final_suspend() was not noexcept, despite being required to be so in the C++ 20 standard. This has been fixed, but only if your compiler implements noop_coroutine. Additionally, if noop_coroutine is available, we use the much more efficient coroutine handle returning variant of await_suspend() which should significantly improve codegen and context switching performance. * Polygon: + C++20 fixes for event_comparison_type, vertex_equality_predicate_type, and voronoi_predicates. (Glen Fernandes) * Preprocessor: + When variadic data is empty in C++20 mode with __VA_OPT__ support the variadic size has been corrected to be 0. This also means that in this C++20 mode it is now valid to convert to and from empty arrays and lists and variadic data. The end-user can read the "C++20 Support For Variadic Macros" part of the "variadic macros" topic for more information about empty variadic data in the library. + The macro BOOST_PP_IS_STANDARD() has been added for identifying if the currently used preprocessor is a C++ standard conforming preprocessor. A number of preprocessors which generally work correctly with the library but need various internal workarounds, including the currently default VC++ preprocessor, are not considered C++ standard conforming preprocessors. However most preprocessors, including among others gcc, clang, and the new but currently non-default VC++ preprocessor in VS2019, are C++ standard conforming preprocessors. + For C++ standard conforming preprocessors a number of the limits defined in the config/limits.hpp can now be changed to higher amounts for a TU. The end-user should read the "limitations" topic to understand how and which limits can be changed. + For C++ standard conforming preprocessors, in order to allow the maximum number of FOR and WHILE iterations, the beginning 'r' and 'd' iteration numbers in the user-defined macros start at 1 and not 2, as it did in previous releases. This could be a breaking change if these iteration numbers are used in the user-defined macros ( they probably would not be ), but the change was necessary to fix some arcane bugs when dealing with numerical/logical operations with maximum numbers as well to allow the user-defined macros to be called the correct possible maximum number of times. For non-C++ conforming preprocessors, this change was not made because those non-conforming C++ preprocessors generally have limitations which disallow the maximum number of looping constructs to be run, and it was felt not to introduce a possible breaking change to those more fragile preprocessors would be better. It was also felt that besides fixing some arcane preprocessor bugs and providing the possible maximum number of user-defined macro invocations, this change could be made because it has never been documented what the starting 'r' and 'd' iteration numbers actually are but only that these numbers are incremented for each iteration. + The library has been upgraded to assume variadic macro support for any compiler working with the library. Ostensibly this means that the library is now a C++11 on up library, yet most of the major compilers, including gcc, clang, and VC++, also support variadic macros in C++98/ C++03 mode as long as strict compliance to C++98/C++03 is not turned on when using one of those compilers. * Rational: + Fix Rational operators to not break under new C++20 operator== rewriting rules. (Glen Fernandes) * Signals2: + Correct C++ allocator model support to fix compilation in C++20 standards mode. (Glen Fernandes) * System: + The platform-specific headers windows_error.hpp, linux_error.hpp, and cygwin_error.hpp emit deprecation messages and are slated for removal. + The old names for generic_category() and system_category() emit deprecation messages and are slated for removal. + error_condition::failed is deprecated and is slated for removal. operator bool() for error_condition has been reverted to its old meaning of value() != 0. This is done for compatibility with std:: error_condition as the next release is expected to improve interoperability with <system_error> even further. Note that this does not affect error_code::failed, which is still alive and well. + The overload of error_condition::message that takes a buffer is deprecated and is slated for removal, for the same reasons. Note that this does not affect error_code::message. * uBLAS: + Correct C++ allocator model support to fix compilation in C++20 standards mode. (Glen Fernandes and Conrad Poelman) * VMD: + The VMD number parsing has been upgraded to support the ability for the end-user to change the number limits in the Preprocessor library. + The macro BOOST_VMD_IS_GENERAL_IDENTIFIER has been added to support the parsing of input that represents a preprocessor token which matches the VMD identifier syntax, without having to register the identifier as a specific identifier. * Wave: + Added new C++20 tokens, including the spaceship operator <=> + Fixed bugs: o #94: fix incorrect behavior of __LINE__ and __FILE__ under rescanning 1.74.0 New Libraries * STLInterfaces: A library of CRTP bases to ease the writing of STL views, iterators, and sequence containers, from Zach Laine. Updated Libraries * Asio: + Added an implementation of the proposed standard executors (P0443r13, P1348r0, and P1393r0). + Added support for the proposed standard executors to Asio's I/O facilities. o The supplied executors now meet the requirements for the proposed standard executors. These classes also continue to meet the existing requirements for the Networking TS model of executors. o All I/O objects, asynchronous operations, and utilities will interoperate with both new proposed standard executors, and with existing Networking TS executors. o The any_io_executor type alias has been introduced as the default runtime-polymorphic executor for all I/O objects. This defaults to the execution::any_executor<> template. If required for backward compatibility, BOOST_ASIO_USE_TS_EXECUTOR_AS_DEFAULT can be defined to use the old asio::executor polymorphic wrapper instead. o Support for the existing Networking TS model of executors can be disabled by defining BOOST_ASIO_NO_TS_EXECUTORS. + Added converting move construction and assignment to basic_waitable_timer. + Enabled C++20 coroutine support when using gcc 10. + Added overloads of co_spawn that launch an awaitable. + Added a new constructor overload to use_awaitable_t's default executor adapter, to enable conversion between executor types. + Added support for using detached_t as a default completion token, by adding members as_default_on() and as_default_on_t<>. + Added a move constructor to ssl::stream<>. + Changed ssl::stream<> write operations to linearise gather-write buffer sequences. + Added compile-time detection of the deprecated asio_handler_invoke, asio_handler_allocate, and asio_handler_deallocate hooks, when BOOST_ASIO_NO_DEPRECATED is defined. + Implemented a number of performance optimisations. + Added source location support to handler tracking. + Implemented various improvements to the handlerviz.pl tool. + Added the handlerlive.pl tool, which processes handler tracking output to produce a list of "live" handlers. + Added the handlertree.pl tool, which filters handler tracking output to include only those events in the tree that produced the nominated handlers. + Added changes for clang-based Embarcadero C++ compilers. + Fixed a deadlock that can occur when multiple threads concurrently initialise the Windows I/O completion port backend. + Fixed async_compose to work with copyable handlers when passed by lvalue. + Fixed completion signature deduction in co_spawn. + Removed a spurious Executor base class from the executor_binder implementation. + Various fixes and improvements in the documentation and examples. + Consult the Revision History for further details. * Atomic: + Added missing const qualifiers to some operations in atomic_ref. + Added support for yield instruction on ARMv8-A. The instruction is used internally in spin loops to reduce CPU power consumption. + Added support for C++20 waiting and notifying operations. The implementation includes generic backend that involves the internal lock pool, as well as specialized backends for Windows, Linux, FreeBSD, DragonFly BSD and NetBSD. Atomic types provide a new method has_native_wait_notify, a static boolean constant always_has_native_wait_notify and a set of capability macros that allow to detect if the implementation supports native waiting and notifying operations for a given type. + Changed internal representation of atomic_flag to use 32-bit storage. This allows for more efficient waiting and notifying operations on atomic_flag on some platforms. + Added support for build-time configuration of the internal lock pool size. The user can define the BOOST_ATOMIC_LOCK_POOL_SIZE_LOG2 macro to specify binary logarithm of the size of the lock pool. The default value is 8, meaning that the size of the lock pool is 256, up from 64 used in the previous release. + Added support for a new set of atomic types dedicated for inter-process communication: ipc_atomic_flag, ipc_atomic and ipc_atomic_ref. Users are recommended to port their code using non-IPC types for inter-process communication to the new types. The new types provide the same set of operations as their non-IPC counterparts, with the following differences: o Most operations have an added precondition that is_lock_free returns true for the given atomic object. The library will issue a compile time error if this precondition is known to be not satisfied at compile time. o All provided operations are address-free, meaning that the atomic object (in case of ipc_atomic_ref - the referenced object) may be located in process-shared memory or mapped into the same process at multiple different addresses. o The new has_native_wait_notify operation and always_has_native_wait_notify constant indicate support for native inter-process waiting and notifying operations. When that support is not present, the operations are implemented with a busy loop, which is less efficient, but still is address-free. A separate set of capability macros is also provided to indicate this support. + Added new atomic_unsigned_lock_free and atomic_signed_lock_free types introduced in C++20. The types indicate the atomic object type for an unsigned or signed integer, respectively, that is lock-free and preferably has native support for waiting and notifying operations. + Added new gcc assembler backends for ARMv8-A (for both AArch32 and AArch64). The new backends are used to implement operations not supported by compiler intrinsics (including 128-bit operations on AArch64) and can also be used when compiler intrinsics are not available. Both little and big endian targets are supported. AArch64 backend supports extensions defined in ARMv8.1 and ARMv8.3. + Added support for big endian targets in the legacy ARM backend based on gcc assembler blocks (this backend is used on ARMv7 and older targets). Previously, the backend assumed little endian memory layout, which is significant for 64-bit operations. + Improved performance of seq_cst stores and thread fences on x86 by using lock-prefixed instructions instead of mfence. This means that the operations no longer affect non-temporal stores, which was also not guaranteed before. Use specialized instructions and intrinsics to order non-temporal memory accesses. + Fixed capability macros for 80-bit long double on x86 targets not indicating lock-free operations even if 128-bit atomic operations were available. + Fixed compilation of gcc asm blocks on Alpha targets. + In the gcc __sync* intrinsics backend, fixed that store and load operations of large objects (larger than a pointer size) could be non-atomic. The implementation currently assumes that small objects can be stored with a single instruction atomically on all modern architectures. * Beast: + This update brings bug fixes and support for the following changes changes in Boost.Asio: + Beast supports BOOST_ASIO_NO_DEPRECATED. Define this to help identify areas of your Beast and Asio code which use deprecated Asio interfaces. + Beast also supports BOOST_ASIO_NO_TS_EXECUTORS. Define this to identify uses of executors from the now potentially outdated Networking TS + Asio will use the Standard Executors model by default. You can prevent this behaviour by defining BOOST_ASIO_USE_TS_EXECUTOR_AS_DEFAULT in which the Networking TS model will be used by default. Setting this flag does not prevent a program from using executors from the Standard Executors model explicitly. + We'd love to know how you or your company use Beast, consider adding an entry to the Companies and Individuals Using Beast list. + See the full Release Notes for a complete list of changes. * Bimap: + Correct allocator usage (fixes C++20 compilation). (Glen Fernandes) * Config: + Implement BOOST_NO_CXX11_OVERRIDE and BOOST_OVERRIDE. (Glen Fernandes) * Core: + Implemented the allocator access utilities which provide a replacement for allocator_traits with individual traits and functions for each facility. They support the C++11 allocator model when possible and provide a fallback for C++98 compatibility. These are now used in Circular_Buffer, Wave, Lockfree, Heap, Smart_Ptr, Dynamic_Bitset, Format, Bimap and more. (Glen Fernandes) * DLL: + Multiple fixes for the library_info work on empty shared objects. + Compilation fixes for C++98 and C++11 modes (#28). + Fixes for smart_library manglings (thanks to XiaLiChao82 #37). * Endian: + Enabled scoped enumeration types in endian_reverse. + Enabled bool, enum, float, double in endian_reverse_inplace. + Added an overload of endian_reverse_inplace for arrays. * Filesystem: + Removed compile-time checks for support for symlinks and hardlink on Windows. Instead, a runtime check is used. (PR#142) + Fixed handling of reparse points in canonical and read_symlink on Windows. This also affects other algorithms that involve canonical and read_symlink in their implementation. (PR#100, #85, #99, #123, #125) + Fixed that read_symlink on Windows could potentially fail or cause failures elsewhere with a sharing violation error, if the same symlink was opened concurrently. (#138) + Fixed that is_symlink(directory_entry) would always return false, even if the directory entry actually referred to a symlink. (PR#148) + Added missing status inspection operation overloads for directory_entry and error_code (e.g. is_directory(directory_entry, error_code&)). Removed incorrect noexcept specifications for the overloads not taking the error_code arguments. + copy_file implementation has been updated to perform checks on the source and target files, as required by C++20 ([fs.op.copy.file]/4.1). In particular, the operation will fail if the source or target file is not a regular file or the source and target paths identify the same file. + copy_file on POSIX systems will now also copy the source file permissions to the target file, if the target file is overwritten. + New: Added copy_file implementations based on sendfile and copy_file_range system calls on Linux, which may improve file copying performance, especially on network filesystems. + Deprecated: The copy_option enumeration that is used with the copy_file operation is deprecated. As a replacement, the new enum copy_options (note the trailing 's') has been added. The new enum contains values similar to the copy_options enum from C++20. The old enum values are mapped onto the new enum. The old enum will be removed in a future release. + New: Added copy_options::skip_existing option, which allows copy_file operation to succeed without overwriting the target file, if it exists. + New: Added copy_options::update_existing option, which allows copy_file operation to conditionally overwrite the target file, if it exists, if its last write time is older than that of the replacement file. + New: copy_file now returns bool, which indicates whether the file was copied. + New, breaking change: copy operation has been extended and reworked to implement behavior specified in C++20 [fs.op.copy]. This includes support for copy_options::recursive, copy_options::copy_symlinks, copy_options::skip_symlinks, copy_options::directories_only, copy_options::create_symlinks and copy_options::create_hard_links options. The operation performs additional checks based on the specified options. Applying copy to a directory with default copy_options will now also copy files residing in that directory (but not nested directories or files in those directories). + New: Added create_directory overload taking two paths. The second path is a path to an existing directory, which is used as a source of permission attributes to use in the directory to create. + Deprecated: copy_directory operation has been deprecated in favor of the new create_directory overload. Note that the two operations have reversed order of the path arguments. + equivalent on POSIX systems now returns the actual error code from the OS if one of the paths does not resolve to a file. Previously the function would return an error code of 1. (#141) + equivalent no longer considers file size and last modification time in order to test whether the two paths refer to the same file. These checks could result in a false negative if the file was modified during the equivalent call. + New: Added absolute overloads taking error_code argument. + Operations that have current_path() as the default value of their arguments and also have an error_code argument will use the current_path(error_code& ec) overload to obtain the current path, so that its failure is reported via the error_code argument instead of an exception. + space now initializes the space_info structure members to -1 values on error, as required by C++20 ([fs.op.space]/1). + space on Windows now accepts paths referring to arbitrary files, not only directories. This is similar to POSIX systems and corresponds to the operation description in C++20. (#73) + New: Added implementation of temp_directory_path for Windows CE. (PR#25 ) + New: Improved compatibility with WASI platform. (PR#144) + New: Improved support for Embarcadero compilers. (PR#130) + New: Added implementations of unique_path operation based on getrandom (Linux), arc4random_buf (OpenBSD/FreeBSD/CloudABI) and BCrypt (Windows) system APIs. + Deprecated: Auto-linking against system libraries on Windows with MSVC-compatible compilers is deprecated and will be removed in a future release. This affects users linking against static library of Boost.Filesystem. Users are advised to update their project build systems to either use a shared library of Boost.Filesystem, or explicitly specify the dependencies of Boost.Filesystem in the linker command line. Users of shared library of Boost.Filesystem are not affected. * Flyweight: + Maintenance work. * Format: + Correct allocator usage (fixes C++20 compilation). (Glen Fernandes) * Geometry: + Improvements o PR#720 Additional R-tree constructors (thanks to Caian Benedicto). o Various improvements in buffer, set and relational operations. + Solved issues o #709 memcpy called for object with no trivial copy-assignment. o #721 Compilation error in bgi::detail::rtree::visitors::insert. o #727 MSVC warning: conditional expression is constant. + Bugfixes o PR#700 Missing cases for default strategies in distance algorithm. o PR#738 Longitudes out of range in direct geodesic formulas. * GIL: + Added o Added new constructor initializing any_image from r-value reference to any image (PR#486). o Implemented mechanism to reverse kernel_2d (PR#489). + Changed o BREAKING: Replace Boost.Variant with Boost.Variant2 (PR#474) which completes removal on uses of Boost.MPL (missing from Boost 1.72.0 change added PR#274). o Use perfect forwarding from apply_operation to visit (PR#491). + Removed o BREAKING: Removed dependency on Boost.Variant + Fixed o Fixed invalid conversion from RGB8 to CMYK32 due to overflow (PR# 470). o Fixed image constructor from other image (PR#477). o Fixed error plane_view_t is not a class or namespace name (PR#481). o Fixed interleaved_view factory using point<std::ptrdiff_t> for dimension (PR#487). o Fixed documentation replacing uses MPL with MP11 in tutorial (PR# 494). o Fixed missing header in numeric/kernel.hpp to make it self-contained (PR#502). + Acknowledgements o Samuel Debionne, Pranam Lashkari, Mateusz Loskot, Debabrata Mandal * Heap: + Correct destruction of top node in skew_heap. (Glen Fernandes) + Correct and simplify allocator use. (Glen Fernandes) * Integer: + Fixed compilation of gcd in C++20 mode with clang 10. + Improved support for Embarcadero compilers. (PR#21) * Iterator: + boost/function_output_iterator.hpp header is now deprecated. Users should replace its inclusion with boost/iterator/ function_output_iterator.hpp. (PR#51) + Improved support for Embarcadero compilers. (PR#55) * LexicalCast: + Fixed warnings on missing override (thanks to EugeneZelenko #35, #34). + Fixes for the the Embarcadero compilers (thanks to Edward Diener). * Log: + Bug fixes: o The syslog sink backend now verifies the IP version of the local and target addresses set by user. The addresses must have the same IP version as was specified in the ip_version named parameter on the sink backend construction (by default, IPv4 is assumed). When an address is obtained as a result of host name resolution, only addresses with matching IP version are considered. (#119) + New Features: o Move constructors and assignment operators of various components were marked noexcept. o Added a new range_manip stream manipulator that can be used for outputting elements of a range, optionally separated by a delimiter. o Added a new tuple_manip stream manipulator that can be used for outputting elements of a tuple or any other heterogeneous sequence, optionally separated by a delimiter. o Added a new optional_manip stream manipulator that can be used for outputting optionally present values. + See changelog for more details. * Mp11: + Improved compilation performance of mp_with_index<N> for large N. + Added tuple_transform (contributed by Hans Dembinski.) * Multi-index Containers: + Added node extraction and insertion following the analogous interface of associative containers as introduced in C++17. This feature has also been extended to non key-based indices, in contrast to C++ standard library sequence containers, which do not provide such functionality. + Clarified documentation on read/write key extractors (issue #32). + Maintenance work. * Nowide: + The library now requires a C++11-compliant compiler and stdlib + LFS: Add support for files > 2 GB where the underlying system supports it + Generic UTF conversion functions are now available in the boost::nowide ::utf namespace + Add support for stat with UTF-8 paths * Outcome: + Announcements: o The v2.1 branch is expected to be retired end of 2020, with the v2.2 branch becoming the default. You can use the future v2.2 branch now using better_optimisation. This branch has a number of major breaking changes to Outcome v2.1, see the front page for details. + Enhancements: o BREAKING CHANGE void results and outcomes no longer default construct types during explicit construction. Previously if you explicitly constructed a result<T> from a non-errored result<void>, it default constructed T. This was found to cause unhelpful surprise, so it has been disabled. o New macro OUTCOME_ENABLE_LEGACY_SUPPORT_FOR. The macro OUTCOME_ENABLE_LEGACY_SUPPORT_FOR can be used to enable aliasing of older naming and features to newer naming and features when using a newer version of Outcome. o Concepts now have snake case style naming instead of camel case style. When Outcome was first implemented, it was thought that C++ 20 concepts were going to have camel case style. This was changed before the C++ 20 release, and Outcome's concepts have been renamed similarly. This won't break any code in Outcome v2.1, as compatibility aliases are provided. However code compiled against Outcome v2.2 will need to be upgraded, unless OUTCOME_ENABLE_LEGACY_SUPPORT_FOR is set to 210 or lower. o Concepts now live in OUTCOME_V2_NAMESPACE::concepts namespace. Previously concepts lived in the convert namespace, now they live in their own namespace. o New concepts basic_result<T> and basic_outcome<T> added. End users were finding an unhelpful gap in between is_basic_result<T> and value_or_error<T> where they wanted a concept that matched types which were basic_result, but not exactly one of those. Concepts filling that gap were added. o Operation TRY works differently from Outcome v2.2 onwards. This is a severely code breaking change which change the syntax of how one uses OUTCOME_TRY(). A regular expression suitable for upgrading code can be found in the list of changes between Outcome v2.1 and v2.2. + Bug fixes: o #224 The clang Apple ships in Xcode 11.4 (currently the latest) has not been patched with the fixes to LLVM clang that fix noexcept(std ::is_constructible<T, void>) failing to compile which I originally submitted years ago. So give up waiting on Apple to fix their clang, add a workaround to Outcome. o Spare storage could not be used from within no-value policy classes. Due to an obvious brain fart when writing the code at the time, the spare storage APIs had the wrong prototype which prevented them working from within policy classes. Sorry. * PolyCollection: + Fixed internal ambiguity problem between boost::type_erasure::any and boost::any (issue #17). + Maintenance work. * SmartPtr: + Added owner_equals to shared_ptr, weak_ptr, local_shared_ptr. + Added owner_hash_value to shared_ptr, weak_ptr. + Added owner_equal_to, owner_hash. + Added std::hash specializations for shared_ptr, local_shared_ptr. + Added boost::hash support to, and std::hash, std::equal_to specializations for, weak_ptr. * Stacktrace: + Fixed a build error when compiled with -fno-exceptions (thanks to Jeremiah Rodriguez #91). * System: + operator bool() now returns failed() instead of value() != 0. * Type_Traits: + Implemented conjunction, disjunction, negation, is_trivially_copyable, is_scoped_enum, and is_unscoped_enum. (Glen Fernandes) * Variant: + Fixed warnings on missing override (thanks to EugeneZelenko #78). + Fixes for the the Embarcadero compilers (thanks to Edward Diener #79). + Updated header locations to avoid warnings about using deprecated headers (thanks to Andrey Semashev #80) * Variant2: + Added support for derived types in visit. + Improved compilation performance for many (hundreds of) alternatives. + Added support for visit<R>. * Wave: + Implement C++20 features for variadics, including __VA_OPT__ (PR#75) + Implement __has_include (PR#102) + Introduce new sample: check_macro_naming, useful with Boost itself (PR# 97) + Fix compilation issue caused by std::allocator member removal in C++20 (PR#72) + Repair Xpressive lexer and token_statistics sample (PR#79) + Repair lexertl lexer (PR#78) + Ensure hooks are run on predefined macros as well (PR#87) + Various minor bug fixes + C++98/03 support is now deprecated and will be removed in 1.77 * YAP: + Fixed compilation errors for placeholders; they now work in the general case, and in particular work with yap::print(). + constexpr all the YAP. + Fix printing of correct value category in yap::print(). + Doc clarification. Updated Tools * Boostbook: + Change encoding of generated documentation from US-ASCII to UTF-8. (Glen Fernandes)

-Add support for Elvish (#174) -Use Nushell from Nixpkgs unstable (#171) -Make z exclude current directory (#173) -Append __zoxide_hook to front of PROMPT_COMMAND (#170) -Add support for Nushell (#164) -Find zoxide in Xonsh shells (#168) -Reference integration with nnn (autojump plugin) (#166) -Fix CI (#161) -Remove barely-used aliases (#158) -Use variable to prevent hook redefinition (#154) -Use /dev/null on Unix shells (#152) -Specified external call to cd for fish (#146) -Remove cargo-udeps -Handle write errors gracefully (#143) -Use builtin in shells (#141) -Use zero copy deserialization (#138) -Forcibly disable backtraces (#130) -Start fish in an isolated env (#128) -Run shell tests in a clean env -Add NetBSD and Alpine Linux install instructions -Use Nix for testing -Split tests -Change install instructions, add third-party integrations and update README -Add Termux install instructions -Update installation instructions

Vala 0.52.1 =========== * Various improvements and bug fixes: - codegen: + Improve handling of ellipsis parameter in get_ccode_name() + Fix default value of get_ccode_destroy_notify_pos() + Don't override valid target/destroy of previous lambda argument [#59] + Don't call *_instance_init() in compact class chainup - vala: Mark tranformed static member-access as qualified [#270] - parser: Stricter mode for chained member initializer with --keep-going [#1158] - girwriter: namespace expects "c:symbol-prefixes" attribute [#1038] - girwriter: Don't use instance-parameter inside callback [#1167] - girparser,libvaladoc/girimporter: Don't guess length of xml header, iterate forward to <repository> - libvaladoc/girimporter: parse_constant() use "c:identifier" attribute first * Bindings: - gsl: Add BLAS module [#1149] - rest-0.7: Fix OAuthProxyAuthCallback binding - gtk+-3.0: Fix ModuleInitFunc binding - gio-2.0: Fix TlsPassword.get_value() binding - Fix several bindings which lead to invalid code by using them in: javascriptcoregtk-4.0, libusb, libusb-1.0, pixman-1, webkit2gtk-web-extension-4.0, x11, zlib, Vala 0.52.0 =========== * Various improvements and bug fixes: - codegen: Include "glib.h" for deprecated symbols (GOBJECT) [#1155] - vala: Improve error for incompatible expressions in conditional expression - vala: Check for unused attributes unconditionally - girparser: Allow overriding of "Compact" attribute for classes - girparser: Handle empty "<type/>" element and report an error - girparser: Add support for NoWrapper metadata for methods - build: Add --enable-test-asan configure option * Bindings: - gio-2.0: Add some missing NoWrapper and CCode.has_typedef attributes - gnutls: Fix some binding errors - gsl: Fix some binding errors - gstreamer: Update from 1.19.0+ git master - gtk4: Add Gtk.INVALID_LIST_POSITION [#1151] - gtk4-unix-print: Switch to gir - gtk4: Update to 4.1.2 - linux: Provide Input.Event.input_event_sec/input_event_usec fields [#1152] - vapi: Fix a couple of attribute typos - webkit2gtk-4.0: Update to 2.31.91 Vala 0.51.91 ============ * Various improvements and bug fixes: - codegen: + Error for missing type-arguments of HashTable (de)serialization [#1147] + Free intermediate temp-variables of postcondition expression [#80] + Use the one available source_reference for internal error [#436] + Fix access to captured generics in async method of interfaces [#537] + Don't ever create null-aware free macro for GenericType + Don't add generics arguments/parameters to async finish method + Drop inner casts before converting between generics and integers - vala: + Add missing null-check in DataType.get_type_signature() + Check array type of declarations for errornous type-arguments + Check (optional) type-arguments of array creation expression + Replace all type parameter occurances in parameters for signal delegate * Bindings: - glib-2.0,gio-2.0: Add some missing type-arguments - vapi: Update GIR-based bindings Vala 0.51.90 ============ * Various improvements and bug fixes: - codegen: + More use of get_ccode_type_name() + "_first_array" parameter for params-array is variadic too + Inherit GType from base struct of SimpleType structs - vala: + Report warning if --target-glib=auto was not evaluated successfully + Fix ownership inheritance of "unowned var" in foreach statement + Use pre-resolved symbol/type of SemanticAnalyzer if possible - gdbus: Don't leak memory of deserialized arguments on error in wrapper method - girparser: Reuse populated Node.gtype_struct_for instead of resolving again - girparser: Evaluate "glib:type-struct" twice to pick up reparented structs - testrunner: Include Gio-2.0/gio-2.0 for GIR tests too * Bindings: - gtk4: Update to 4.1.1+f8f90d85 Vala 0.51.3 =========== * Various improvements and bug fixes: - codegen: + Don't use volatile modifier in glib API when targetting >= 2.68 [glib!1719] + CCodeBaseModule.get_type_id_expression () won't return null + Don't wrongly emit declaration for default-handler of signals + Include "string.h" for strcmp() (POSIX) - vala: + Generics value holding struct pointer requires casting on access [#347] + Infer needle type for "in" expression on enum [#1138] + Don't allow "in" operation with different enum types [#1139] + Improve context check whether property is writeable on assignments + Include "stdlib.h" for Enum.to_string() (POSIX) [#1143] + Set proper source_reference for implicit "this" and "result" variables + Report error for invalid inner operand of unary expressions - girwriter: Output default handler of signals * Bindings: - glib-2.0: Add new symbols from 2.68 - webkit2gtk-4.0: Update to 2.31.90 - vapi: Update GIR-based bindings Vala 0.51.2 =========== * Various improvements and bug fixes: - vala: + Check type-arguments in base-types/prerequisites of class/interface [#404] + Include type-checks in preconditions of methods for type narrowing [#894] + Capturing va_list parameters/variables is not allowed [#1136] + Properly parse and handle chained initialization of members [#1137] - codewriter: Output valid vala syntax for LoopStatement and don't write trailing ";" after body of WithStatement * Bindings: + gstreamer: Update from 1.19.0+ git master + vapi: Update GIR-based bindings Vala 0.51.1 =========== * Highlights: - Support "binding" to bind GtkCallback to class of given property [#1093] - Add support for type narrowing [#894] - Support chain up to simple generics constructor [#342] - Perform runtime version check of libvala [#88] - girparser: Handle anonymous delegate not backed by virtual-method or signal - Add support for 'opaque' compact classes [#1129] - Add further support for params arrays in constructors [#128] - Improve handling of "NoWrapper" attribute - Improve support of SimpleType struct constructors - Use __attribute__ instead of G_GNUC_* in POSIX profile - Add SDL 2.x bindings [#1032] amd drop SDL 1.x * Various improvements and bug fixes: - codegen: + Improve GValueModule.visit_cast_expression() + Drop obsolete dedicated handling of property value-parameter + Apply CCodeModifiers.PRINTF to "string_printf" (POSIX) + Allow CCode.type_cname for classes and use get_ccode_type_name() + Always use G_TYPE_INSTANCE_GET_CLASS/INTERFACE for external symbols + Also check array type of variable argument for ref parameters + Don't leak array memory after it was implicitly copied + Use g_boxed_free in free-wrapper for heap-allocated GLib.Value + Don't leak GLib.Value when implicitly unboxing it + Don't leak memory moving heap-allocated struct to stack + Chain up to base struct destroy function + Use g_memdup2 if target glib >= 2.68 is set + Replace "g_memdup" with "_vala_memdup2" for target glib < 2.68 + Correctly retrieve symbol_reference of nested cast expressions [#1134] + Strip all nested occurances of CCodeCastExpression [#1134] - vala: + Improve detection of duplicate package source files + GtkChild fields/properties must be declared as unowned [#1121] + Don't allow assigning GtkChild fields/properties [#1121] + Apply stricter condition for lambda to delegate assignment + Don't allow disposable SimpleType structs + Rename Loop to LoopStatement and introduce a common base class + GLib.Value unboxing returns unowned value + Don't allow GLib.Value casting to nullable struct/simple types + Add Block.unreachable_exit and have it set by FlowAnalyzer [#838] + Convert Report.*() to real printf-like functions + Avoid taking extra reference of foreach collection for index iteration + Make sure parent_symbol for special async parameters is available + Require a valid DataType instance for every TargetValue - girparser: + Minor improvement to field getter detection + Apply "delegate_target" metadata for methods and parameters + Apply "destroy_notify_cname" metadata for fields + Apply "type_get_function" metadata for classes and inferfaces + Set CCode.type_cname for classes if it doesn't match our default - girwriter: Infer gir_namespace/version from target GIR filename [#606] - girwriter: Write instance-parameter elements [#1128] - libvaladoc/html: Don't sort struct fields to keep their original order - libvaladoc: Correctly retrieve value for Api.Class.is_compact - libvaladoc: Add wrapper for "agedge" of graphviz - valadoc: Correctly set verbose flag on CodeContext - valadoc: Replace png icons with elementary's svg version * Bindings: - Add enchant-2 bindings for Enchant 2.x - Add gnu.vapi with binding for getopt_long() and some other GNU APIs - Add libunwind-generic binding - Fix several bindings which lead to invalid code by using them in: cairo, gobject-2.0, pango, goocanvas-2.0, curses, alsa, bzlib, sqlite3, libgvc, posix, gstreamer-1.0, gdk-3.0, gdk-x11-3.0, gtk+-3.0, gtk4, fuse, libxml-2.0 - curses: Remove initial “w” from some Window method names for consistency - gdk-pixbuf-2.0: Fix Pixbuf.save_to_streamv_async() - gdk-pixbuf-2.0: Update to 2.42.3~ - gio-2.0: Fix binding of PollableOutputStream.write*_nonblocking() - gio-2.0,gtk+-3.0,gtk4: Drop explicit c-type attributes of va_list parameters - gio-2.0: Pick up missing invoker for some AppInfo/File.*() methods - gio-2.0: Update to 2.67.3 - glib-2.0: Add GLib.[S]List.is_empty() convenience methods for non-null - glib-2.0: Add new symbols from 2.68 - glib-2.0: Bind assert_cmp* functions [#395] - glib-2.0: Improve type of OptionEntry.flags field - glib-2.0: Make PtrArray a subclass of GenericArray - gobject-2.0: Add new symbols from 2.68 - gstreamer-1.0: Set CCode.type_id of MiniObject to G_TYPE_BOXED [#1133] - gstreamer: Update from 1.19.0+ git master - gtk+-2.0,javascriptcoregtk-4.0: Wrong usage of CCode.type_cname attribute - gtk+-3.0,gtk4: Fix some delegate return values and parameters - gtk4: Update to 4.1.0+2712f536 - posix: Add POSIX, GNU and BSD Regex APIs - webkit2gtk-4.0: Update to 2.31.1

@haozhu233

htmltools 0.5.1.1 -------------------------------------------------------------------------------- * Added shiny as a suggested package. htmltools 0.5.1 -------------------------------------------------------------------------------- ## New Features & Improvements * Added a new `tagFunction()` for generating `tags` and/or `htmlDependency()`s conditional on the rendering context. For an example, see `?tagFunction`. (#180) * Closed #104: `save_html()`'s `file` argument now properly handles relative paths. (@haozhu233, #105, #192) * `save_html()` now has a `lang` parameter that can be used to set the lang attribute of `<html>`. (@ColinFay, #185) * Closed #101: `htmlDependency` & `renderDependencies` now allow the `script` argument to be given as a named list containing the elements: `src`, `integrity`, `crossorigin`. (@matthewstrasiotto, #188) * Closed #189: `validateCssUnit()` now accepts `fit-content`. (#190) * `htmlPreserve()` can now optionally use the Pandoc `raw_attribute` extension to enclose HTML. ## Breaking Changes * Closed #161: `parseCssColors(x)` now requires `x` to be a character vector (it no longer accepts a `list()` of strings) and an error is no longer thrown when `mustWork = FALSE` and `x` contains `NA` value(s). (#194) ## Bug fixes * `print(as.tags(x))` no longer results in error when `x` is a generic `list()` of tag-like objects. (#181) htmltools 0.5.0 -------------------------------------------------------------------------------- * `tags` is now generated by a script which collects all [HTML](https://developer.mozilla.org/en-US/docs/Web/HTML/Element) and [SVG](https://developer.mozilla.org/en-US/docs/Web/SVG/Element) element tags documented in [MDN Web Docs](https://developer.mozilla.org). This feature only appends to the existing set of `tags` (#159) * Removed the Rcpp depedency and the compiled code now uses C rather than C++ (#158) * BREAKING CHANGE: Fixed #57, #153: `htmlTemplate` output no longer inserts extra whitespace around {{...}} replacement values. (#154) * `HTML()` now takes `.noWS` argument, which can be used to suppress surrounding whitespace (similar to the new argument for tags in htmltools 0.4.0). (#154) * `css()` now returns `NULL` instead of `""` when no non-empty properties are specified. (#145) * `save_html(tags$body(...))` no longer results in double <body> tags being written to the .html file. (Note that `save_html(tags$html(...))` is not supported at this time.) (#145) * Trailing commas now permited in `...` arguments to `css()`, `tagList()`, and the var-arg mutation functions: `tagAppendAttributes()`, `tagSetChildren()`, and `tagAppendChildren()`. (#145) * Added `capturePlot` and `plotTag` functions, for easily creating image files and HTML <img> tags (respectively) from plot expressions. (#150) * Added `parseCssColors` function, for normalizing the various CSS color formats into #RRGGBB(AA) strings. (#155) * Fixed #156: Now `extractPreserveChunks()` handles strings contain Emoji Unicode strings correctly on Windows. (#157) * The `.noWS` parameter for suppressing whitespace can now take an `"inside"` value (equivalent to `c("after-start", "before-end")`). (#163) htmltools 0.4.0 -------------------------------------------------------------------------------- * Fixed #128: Added support for trailing commas in tagLists and the predefined tags. (#135) * Added some HTML tag functions to `tags` that were missing. (#111) * Updated RcppExports for new version of Rcpp. (#93) * `as.character.shiny.tags()` will handle non-ASCII attributes correctly if they are not encoded in native encoding. * Fixed #99: `NA` attributes were sometimes rendered as `"NA"` in the HTML, instead of being blank. (#100) * The error message for trailing commas in tag functions now provides context and useful information. (#109) * Stopped using inline styles to set background color for `save_html`, as doing so makes it difficult to override using other CSS rules. (#123) * Added a `.noWS` argument to `tag()` and `tags` which can be used to suppress the automatically generated whitespace around a particular tag. (#131) * Added a shim for `system.file()` so that htmltools works with `htmlDependency` objects created by a package that was loaded with `devtools::load_all()`. (#129) * `validateCssUnit()` now accepts `ch`, `rem`, and `calc()`. (#134) * Fixed #125: `print.html` removes html dependencies. (#126) * Stopped extra carriage returns from being inserted by `save_html` on Windows. (#137)

@flying-sheep

(devel/R-repr) Updated 1.0.1 to 1.1.3 https://github.com/IRkernel/repr/releases 1.1.3 @flying-sheep flying-sheep released this Jan 21, 2021 * [82041bf] Switch to testthat 3 * [68bf64e,#139] Fix URLs in README 1.1.2 @flying-sheep flying-sheep released this Jan 21, 2021 * [#135] Fix time series not supporting 1-row output * [04239d0] Switch from dplyr::tbl to tibble::tibble 1.1.1 @flying-sheep flying-sheep released this Aug 19, 2020 * [#128] Add class="dataframe" to the HTML <table/> tags * [9af4e98] Fixes reprs of lists with identical(names(l), '') #133 1.1.0 @flying-sheep flying-sheep released this Jan 28, 2020 * [#125] Add option repr.vector.max.items to limit displayed vectors (by default to maximally 400 items) * [#125] Prettify HTML representation of vectors by displaying style tags with them 1.0.2 @flying-sheep flying-sheep released this Dec 16, 2019 * [d25aad0] Optimize has_row_names using .row_names_info to speed up reprs of large data.frames (Issue #119) * [7ca5bb9] Fix column specification in repr_latex.matrix * [ddeb9fc] Add repr_vega5, repr_vegalite3 and repr_vegalite4

# cpp11 0.2.7 * Fix a transient memory leak for functions that return values from `cpp11::unwind_protect()` and `cpp11::safe` (#154) # cpp11 0.2.6 * `cpp_register()` now uses symbols exclusively in the `.Call()` interface. This allows it to be more robust in interactive use with the pkgload package. # cpp11 0.2.5 * `cpp_source()` gains a `cxx_std` argument to control which C++ standard is used. This allows you to use code from `C++14` and later standards with cpp_source(). (#100) * The cpp11 knitr engine now allows you to set the `cxx_std` chunk option to control the C++ standard used. * `cpp_source()` now has much more informative error messages when compilation fails (#125, #139) * `cpp_source()` now uses a unique name for the DLL, so works when run multiple times on the same source file on Windows (#143) * `writable::list_of<T>` now supports modification of vectors as intended (#131). * Errors when running `tools::package_native_routine_registration_skeleton()` are no longer swallowed (#134) * `cpp_source()` can now accept a source file called `cpp11.cpp` (#133) * `named_arg` now explicitly protect their values, avoiding protection issues when using large inputs. [tidyverse/readr#1145](tidyverse/readr#1145) * `r_string(std::string)` now uses `Rf_mkCharLenCE()` instead of `Rf_mkChar()`, which avoids the performance cost of checking the string length. * Writable vector classes now properly set their lengths as intended when being copied to a read only class (#128).

Changelog: 22 July 2021: Wouter - tag 4.3.7 release, with the fixes between rc1 and this release. 20 July 2021: Wouter - Fix typo in xfrd-tcp.c. 15 July 2021: Wouter - tag for 4.3.7rc1. - Fix compile of cookies on FreeBSD without IPv6. - Fix for loop initial declaration for nonc99 compiler. 14 July 2021: Wouter - Fix truncate test for EDNS COOKIE making one less RR is added. - Attempt to fix gcc11 warning. 13 July 2021: Willem - Fixes for child server processes getting out of sync with the dnstap-collector process 13 July 2021: Willem - Interoperable DNS Cookies support as per RFC7873 and RFC9018 9 July 2021: Willem - Client side DNS Zone Transfer-over-TLS (XoT) support as per draft-ietf-dprive-xfr-over-tls 29 June 2021: Willem - Fix #168: Buffer overflow in the dname_to_string() function 14 June 2021: Wouter - Update configure nonblocking test to use host. 25 May 2021: Wouter - Fix #179: log notice and server-count. 21 May 2021: Wouter - Test code has -q option for quiet output. 17 May 2021: Wouter - Update the ACX_CHECK_NONBLOCKING_BROKEN test for the configure script. 7 May 2021: Wouter - Fix #176: please review Loglevel on missing zonefile. 6 May 2021: Wouter - Fix #174: NS Records below delegation are not ignored (nsd-checkzone also does not raise any issue). 4 May 2021: Wouter - Fix SVCB sort call sizeof to be the size of the elements sorted. 29 April 2021: Tom - Implement Syntax of SVCB and HTTPS RR type as per draft-ietf-dnsop-svcb-https 13 April 2021: Wouter - Fix for #128: Skip over sendmmsg invalid argument when port is zero. - Fix #171: Invalid negative response (NSEC3) after IXFR. - Fix to make nsec3_chain_find_prev return NULL if one nsec3 left. - remove debug settings from unit test. 9 April 2021: Wouter - Fix for #170: Fix build warnings when IPv6 is disabled. - Fix #170: Disabled IPv6 and DNSTAP enabled triggers a build error. 30 March 2021: Wouter - Fix configure failure for enable systemd because of autoconf. - This became release 4.3.6, the repository continues for 4.3.7 in development. 29 March 2021: Wouter - Note unlisted changes in RELNOTES and prepare for 4.3.6rc1 tag. 29 March 2021: Willem - Per zone Access Control List for queries with an allow-query: option. 24 March 2021: Wouter - Update acx_nlnetlabs.m4 to version 38, fix deprecation test. - Fix configure to use header checks with compile. - Fix warning about unused function log_addr. 18 March 2021: Tom - Add Extended DNS Errors RFC8914 15 March 2021: Wouter - Fix double config.h include in configlexer.c - Fix to remove configyyrename from makedist.sh and also update the flex and bison rules there to add the "c_" prefix. 13 March 2021: Willem - Fix #154: TXT with parentheses fails in 4.3.5. - Align parsing of TXT elements with how bind does it. - A -p option to nsd-checkzone to print a successfully read zone. 12 March 2021: Wouter - Fix that wildcard is printed as a star instead of escaped, in logs and in written zone files. - Fix unit test for wildcard printout change. 11 March 2021: Wouter - Fix #163: A TSIG noncompliance with RFC 2845. 9 March 2021: Willem - Enable configuring a control-interface by interface name. 19 February 2021: Wouter - Fix segfault on high verbosity for TLS channels with dnstap log local address. 18 February 2021: Wouter - Fix #146 with #147: DNSTAP log the local address of the server with the dnstap logs. 16 February 2021: Wouter - Man page documentation for dnstap options. 8 February 2021: Wouter - Fix AF_LOCAL compile error for Solaris. - Fix ifaddrs compile error for Solaris. - Fix ifaddrs.h compile error for Solaris. 4 February 2021: Wouter - Merge PR #153 from fobser: Repair -fno-common linker errors automatically. - Fix uninitialized access of log_buf in error printout on apply ixfr. 26 January 2021: Wouter - Prevent a few more yacc clashes.

0.5.1 (2021-07-27) * New: Allow expiration to be turned off globally #128 * Fixed: Support for ruby-head #132 * Maintainance: Drop support for EOL'ed Rubies (< 2.6.0) and Rails 4.2 0.5.2 (2021-08-02) * Add back Ruby 2.5 support so gem install rails works out of the box, thereby satisfying Rails' Ruby version requirement. See rails/rails#42931

@shrektan

# development openxlsx 4.2.4 ## Fixes * `Write.xlsx()` now successfully passes `withFilter` ([#151](ycphs/openxlsx#151)) * code clean up PR [#168](ycphs/openxlsx#168) * removal of unused variables PR [#168](ycphs/openxlsx#168) ## New features * adds `buildWorkbook()` to generate a `Workbook` object from a (named) list or a data.frame ([#192](ycphs/openxlsx#192), [#187](ycphs/openxlsx#187)) * this is now recommended rather than the `write.xlsx(x, file) ; wb <- read.xlsx(file)` functionality before * `write.xlsx()` is now a wrapper for `wb <- buildWorkbook(x); saveWorkbook(x, file)` * parameter checking from `write.xlsx()` >> `buildWorkbook()` are now held off until passed to `writeData()`, `writeDataTable()`, etc * `row.names` is now deprecated for `writeData()` and `writeDataTable()`; please use `rowNames` instead * `read.xlsx()` now checks for the file extension `.xlsx`; previously it would throw an error when the file was `.xls` or `.xlm` files * memory allocation improvements * global options added for `minWidth` and `maxWidth` * `write.xlsx()` >> `buildWorkbook()` can now handle `colWidths` passed as either a single element or a `list()` * Added ability to change positioning of summary columns and rows. * These can be set with the `summaryCol` and `summaryRow` arguments in `pageSetup()`. * `activeSheet` allows to set and get the active (displayed) sheet of a worbook. * Adds new global options for workbook formatting ([#165](ycphs/openxlsx#165); see `?op.openxlsx`) # openxlsx 4.2.3 ## New Features * Most of functions in openxlsx now support non-ASCII arguments better. More specifically, we can use non-ASCII strings as names or contents for `createNamedRegion()` ([#103](ycphs/openxlsx#103)), `writeComment()`, `writeData()`, `writeDataTable()` and `writeFormula()`. In addition, openxlsx now reads comments and region names that contain non-ASCII strings correctly on Windows. Thanks to @shrektan for the PR [#118](ycphs/openxlsx#118). * `setColWidths()` now supports zero-length `cols`, which is convinient when `cols` is dynamically provided [#128](ycphs/openxlsx#128). Thanks to @shrektan for the feature request and the PR. ## Fixes for Check issues * Fix to pass the tests for link-time optimization type mismatches * Fix to pass the checks of native code (C/C++) based on static code analysis ## Bug Fixes * Grouping columns after setting widths no longer throws an error ([#100](ycphs/openxlsx#100)) * Fix inability to save workbook more than once ([#106](ycphs/openxlsx#106)) * Fix `loadWorkbook()` sometimes importing incorrect column attributes # openxlsx 4.2.2 ## New Features * Added features for `conditionalFormatting` to support also 'contains not', 'begins with' and 'ends with' * Added return value for `saveWorkbook()` the default value for `returnValue` is `FALSE` ([#71](ycphs/openxlsx#71)) * Added Tests for new parameter of `saveWorkbook()` ## Bug Fixes * Solved CRAN check errors based on the change disussed in [PR#17277](https://bugs.r-project.org/bugzilla3/show_bug.cgi?id=17277) # openxlsx 4.2.0 ## New Features * Added `groupColumns()`, `groupRows()`, `ungroupColumns()`, and `ungroupRows()` to group/ugroup columns/rows ([#32](ycphs/openxlsx#32)) ## Bug Fixes * Allow xml-sensitve characters in sheetnames ([#78](ycphs/openxlsx#78)) ## Internal * Updated roxygen2 to 7.1.1 # openxlsx 4.1.5.1 ## Bug Fixes * fixed issue [#68](ycphs/openxlsx#68]) # openxlsx 4.1.5 ## New Features * Add functions to get and set the creator of the xlsx file * add function to set the name of the user who last modified the xlsx file ## Bug Fixes * Fixed NEWS hyperlink * Fixed writing of mixed EST/EDT datetimes * Added description for `writeFormula()` to use only english function names * Fixed validateSheet for special characters ## Internal * applied the tidyverse-style to the package `styler::style_pkg()` * include tests for `cloneWorksheet` # openxlsx 4.1.4 ## New Features * Added `getCellRefs()` as function. [#7](ycphs/openxlsx#7) * Added parameter for customizing na.strings ## Bug Fixes * Use `zip::zipr()` instead of `zip::zip()`. * Keep correct visibility option for loadWorkbook. [#12](ycphs/openxlsx#12]) * Add space surrounding "wrapText" [#17](ycphs/openxlsx#17) * Corrected Percentage, Accounting, Comma, Currency class on column level * update to rogygen2 7.0.0 # openxlsx 4.1.3 ## New Features * Added a `NEWS.md` file to track changes to the package. * Added `pkgdown` to create site. ## Bug Fixes * Return values for cpp changed to R_NilValue for r-devel tests * Added empty lines at the end of files # openxlsx 4.1.2 * Changed maintainer # openxlsx 4.1.1 ## New Features * `sep.names` allows choose other separator than '.' for variable names with a blank inside * Improve handling of non-region names in `getNamedRegions` and add related test

Fixes: -Fixed empty context menu when right-clicking empty spaces (#122). -Fixed not updating playlist when deleting a track (#128). -Fixed incorrect track order after deleting a track in a playlist (#130). -Fixed paging not working with some lists (#145). -Fixed not removing extra spacing when using system title bar. -Fixed issues with followed playlists by other users not updating properly. -Fixed issue when attempting to search for nothing. -Fixed issues resuming playback when last used device was no longer available. Changes: -Added an option to show desktop notification on track change (#99). -Added support for repeating a single track (#108). -Added support for podcasts (#110). -New and improved volume slider (#112). -Already opened artists are now re-used (#113). -Added support for mirrored title bar buttons (#120). -Added support for creating new playlists (#139). -Added support for following, and unfollowing, playlists. -New status messages, replacing the status bar and desktop notifications. -Added a custom font for the custom dark theme. -Now continues playing tracks from search results. -Now shows more artists links, for example social media links. -Removed broken "PulseAudio volume control" setting. -Tracks in albums now show an added date for when the album released. -New categories in settings for logs and for troubleshooting.

@jimhester

# 1.4.0 * `cran_check_results()` now downloads results in parallel, so it is much faster. * `rcmdcheck_process` now redirects the standard error to the standard output, to make sure that they are correctly interleaved (#148). * rcmdcheck now puts Rtools on the PATH, via pkgbuild (#111). * rcmdcheck now builds the manual when building the package, if it is needed for `\Sexpr{}` expressions (#137). * This version fixes a rare race condition that made rcmdcheck fail (#139). * rcmdcheck now safeguards against R deleting the user's home directory via an `R CMD build` bug (#120). * rcmdcheck can now ignore files in `inst/doc` when building a package. See the `Config/build/clean-inst-doc` package option in `?"rcmdcheck-config"` (#130). * It is now possible to turn on/off ANSI colors for rcmdcheck only, without affecting the checked package. See `?"rcmdcheck-config" and the `RCMDCHECK_NUM_COLORS` environment variable and the `rcmdcheck.num_colors` option (#119, @jimhester). * `print.rcmdcheck()` now has a `test_output` argument and `rcmdcheck.test_output` global option, to control whether to print the full test output or not. (#121) * RStudio's Pandoc is now on the path during `rcmdcheck()` and `rcmdcheck_process` (#109, #132, @dpprdan). * `rcmdcheck()` now errors if the check process crashes (#110, #163). * `rcmdcheck()` prints the check ouptut better interactively, especially when the package has multiple test files (#145, #161). * rcmdcheck can now ignore `NOTE`s, if requested, see `?rcmdcheck` for details (#12, #160). * rcmdcheck now always converts its output to UTF-8 from the native encoding. It also handles parsing check output in a non-native encoding better (#152). * rcmdcheck now ignored time stamps when comparing two check results (#128). * rcmdcheck now does not print extra empty lines in the interactive output on GitHub Actions. * rcmdcheck now uses a more robust implementation to extract the session info from the check process (#164).

Upstream changes: Changes for version 1.58 - 2022-04-18 Fixed tests so that they ignore the value set in the `PERL_DATETIME_DEFAULT_TZ` env var, if one exists. Reported by Ian Gibbs. GH #128.

# wk 0.6.0 * Fixed `wk_affine_rescale()` to apply the translate and scale operations in the correct order (#94). * Add `wk_handle_slice()` and `wk_chunk_map_feature()` to support a chunk + apply workflow when working with large vectors (#101, #107). * C and R code was rewritten to avoid materializing ALTREP vectors (#103, #109). * Added a `wk_crs_proj_definition()` generic for foreign CRS objects (#110, #112). * Added `wk_crs_longlat()` helper to help promote authority-compliant CRS choices (#112). * Added `wk_is_geodesic()`, `wk_set_geodesic()`, and argument `geodesic` in `wkt()` and `wkb()` as a flag for objects whose edges must be interpolated along a spherical/ellipsoidal trajectory (#112). * Added `sf::st_geometry()` and `sf::st_sfc()` methods for wk geometry vectors for better integration with sf (#113, #114). * Refactored well-known text parser to be more reusable and faster (#115, #104). * Minor performance enhancement for `is.na()` and `validate_wk_wkb()` when called on a very long `wkb()` vector (#117). * Fixed issue with `validate_wk_wkb()` and `validate_wk_wkt()`, which failed for most valid objects (#119). * Added `wk_envelope()` and `wk_envelope_handler()` to compute feature-wise bounding boxes (#120, #122). * Fixed headers and tests to pass on big endian systems (#105, #122). * Incorporated the geodesic attribute into vctrs methods, data frame columns, and bbox/envelope calculation (#124, #125). * Fix `as_xy()` for nested data frames and geodesic objects (#126, #128). * Remove deprecated `wkb_problems()`, `wkt_problems()`, `wkb_format()`, and `wkt_format()` (#129). * `wk_plot()` is now an S3 generic (#130).

2.1.2 (2022-07-26) * Remove setup script as it just calls bundle install [#128] * Change inline styles to the fill property to allow for strict CSP style-src directive [#127]

hg-git 1.0.1 (2022-11-04) ========================= This is a minor release, focusing on bugs and compatibility. * Ignore any ``GIT_SSH_COMMAND`` environment variable, rather than dying with an error. (#369) * Fix bug with unusual progress lines from Azure Repo (#391) * Fix incorrect use of localisation APIs (#387) * Fix pushing with Dulwich 0.2.49 or later. * Fix tests with Git 2.37. * Fix bug with tags or remote refs in the local Git repository that point to missing commits. * Mark Mercurial 6.2 and 6.3 as supported and tested. Thanks to Pierre Augier and Aay Jay Chan for contributing to this release! hg-git 1.0.0 (2022-04-01) ========================= This is the first stable release in the 1.0 series. In addition to all the features and fixes in the betas, it includes: * Handle errors in ``.gitmodules`` gracefully, allowing the conversion to continue. (#329) * Don't die with an error when ``.hgsub`` contains comments. (#128) * Suppress errors on export related to history editing of certain commits with unusual authorship and messages. (#383) * Fix tests with Git 2.35. Other changes: * Increase test coverage by using different versions of Alpine Linux and Dulwich. This release requires Mercurial 5.2 or later and Python 3.6 or later. hg-git 1.0b2 (2022-03-10) ========================= This is a follow-up to the previous beta, that fixes the following bugs: * Fix tests with Mercurial 6.1. * Avoid prompting for authentication after a successful push, by storing the authenticated client. (#379) This release requires Mercurial 5.2 or later and Python 3.6 or later. hg-git 1.0b1 (2022-01-26) ========================= This is a preview of an upcoming major release that contains changes to user-facing behaviour, as well as a fair amount of internal changes. The primary focus is on adjusting the user experience to be more intuitive and consistent with Git and Mercurial. The internal changes are mainly refactoring to make the code more consistent and maintainable. Performance should also be much better; a simple clone of a medium-sized repository is about 40% faster. This release requires Mercurial 5.2 or later and Python 3.6 or later. Changes to behaviour: * When a pull detects that a Git remote branch vanishes, it will remove the corresponding local tags, such as ``default/branch``. This is equivalent to using ``git fetch --prune``, and adjustable using the ``git.pull-prune-remote-branches`` configuration option. * Similarly, delete the actual bookmarks corresponding to a remote branch, unless the bookmarks was moved since the last pull from Git. This is enabled by default and adjustable using the ``git.pull-prune-bookmarks`` configuration option. * Speed up ``pull`` by using a single transaction per map save interval. * Similarly, speed up ``hg clone`` by always using a single transaction and map save interval, as Mercurial will delete the repository on errors. * Change the default ``hggit.mapsavefrequency`` to 1,000 commits rather than just saving at the end. * Abort with a helpful error when a user attempts to push to Git from a Mercurial repository without any bookmarks nor tags. Previously, that would either invent a bookmark —— *once* — or just report that nothing was found. * Only update e.g. ``default/master`` when actually pulling from ``default``. Enhancements: * Add a ``gittag()`` revset. * Print a message describing which bookmarks changed during a pull. * Let Mercurial report on the incoming changes once each transaction is saved, similar to when pulling from a regular repository. * Remove some unnecessary caching in an attempt to decrease memory footprint. * Advance phases during the pull rather than at the end. * With ``hggit.usephases``, allow publishing tags and specific remotes on pull, as well as publishing the remote ``HEAD`` on push. * Change defaults to drop illegal paths rather than aborting the conversion; this is adjustable using the ``hggit.invalidpaths`` configuration option. * Allow updating bookmarks from obsolete commits to their successors. Bug fixes: * Adjust publishing of branches to correspond to the documentation. Previously, e.g. listing ``master`` would publish a local bookmark even if diverged from the remote. * Handle corrupt repositories gracefully in the ``gverify`` command, and allow checking repository integrity. * Only apply extension wrappers when the extension is actually enabled rather than just loaded. * Fix pulling with ``phases.new-commit`` set to ``secret``. (#266) * Detect divergence with a branch bookmark suffix. * Fix flawed handling of remote messages on pull and push, which caused most such messages to be discarded. * Report a helpful error when attempting to push or convert with commits missing in the Git repository. Also, issue a warning when creating a new Git repository with a non-empty map, as that may lead to the former. * Ensure that ``gimport`` also synchronises tags. * Address a bug where updating bookmarks might fail with certain obsolete commits. * Handle missing Git commits gracefully. (#376) Other changes: * Require ``setuptools`` for building, and use ``setuptools_scm`` for determining the version of the extension. * Refactoring and reformatting of the code base. hg-git 0.10.4 (2022-01-26) ========================== This is a minor release, focusing on bugs and compatibility. Bug fixes: * Fix compatibility with the ``mercurial_keyring`` extension. (#360) * Add missing test files to the source archive. (#375) * Fix tests with Git 2.34. hg-git 0.10.3 (2021-11-16) ========================== This is a minor release, focusing on bugs and compatibility. Enhancements: * Add support for Mercurial 6.0. hg-git 0.10.2 (2021-07-31) ========================== This is a minor release, focusing on bugs and compatibility. Enhancements: * Add support for Mercurial 5.9. Bug fixes: * Fix the ``git.authors`` configuration option, broken in Python 3. hg-git 0.10.1 (2021-05-12) ========================== This is a minor release, focusing on bugs and compatibility. Enhancements: * Add support for Mercurial 5.8. Bug fixes: * Fix some documentation issues. * Don't overwrite annotated tags on push. * Fix an issue where pushing a repository without any bookmarks would push secret changesets.

# pkgbuild 1.4.0 * pkgbuild can now avoid copying large package directories when building a source package. See the `PKG_BUILD_COPY_METHOD` enviroment variable in `?build` or the package README (#59). This is currently an experimental feature, and feedback is appreciated. * `R CMD build` warnings can now be turned into errors, by setting the `pkg.build_stop_for_warnings` option to `TRUE` or by setting the `PKG_BUILD_STOP_FOR_WARNINGS` environment variable to `true` (#114). * `need_compile()` now knows about Rust source code files, i.e. `Cargo.toml` and `*.rs` (#115). * Now `pkgbuild::build()` will not clean up `inst/doc` by default if the `Config/build/clean-inst-doc` entry in `DESCRIPTION` is set to `FALSE` (#128). * New `PKG_BUILD_COLOR_DIAGNOSTICS` environment variable to opt out from colored compiler output (#141). * pkgbuild now works with a full XCode installation if the XCode Command Line Tools are not installed, on macOS, in RStudio (#103).

@Builditluc

What's Changed Bug Fixes 🐛 - Fix link selection of mulit-line links by @Builditluc in #141 - Fix link selection reset on layout change by @Builditluc in #142 Documentation Changes - Simplify Readme by @Builditluc in #138 - Improve Contribution Documentation by @Builditluc in #139 Style and Structure Changes - Update default labels in the issue templates by @Builditluc in #127 - Update label configurations in workflows by @Builditluc in #128 - Create Api Handler by @Builditluc in #147 - Create new parser system by @Builditluc in #149 - Rework backend by @Builditluc in #150 Other Changes - Add keywords to the cargo manifest by @Builditluc in #145

@eddiemonge

v0.17.0 docs: reorder sections to start with the why by @eddiemonge in #159 feat: allow uppercase HTTP verbs as commands by @danielgtaylor in #160 fix: crash with certain --help commands by @danielgtaylor in #161 feat: bulk list supports shorthand query filters by @danielgtaylor in #162 fix: completion for multi-variable templates by @danielgtaylor in #163 feat: upgrade to Shorthand v2.1.0 by @danielgtaylor in #164 fix: properly support commas in headers by @danielgtaylor in #165 Fix bug #128 by @james-maloney in #166 fix: run tests on pulls by @danielgtaylor in #167 fix: properly set error on panic recovery by @danielgtaylor in #168 feat: set exit code from status code, fixes #125 by @danielgtaylor in #169 fix: add test for combined path+op params and ref by @danielgtaylor in #171 fix: upgrade to libopenapi 0.4.x by @danielgtaylor in #170 fixes 'findApi' when the help command is used by @james-maloney in #172

Changelog: ## v0.2.18 ### Merged PRs: - [#2299](https://github.com/TokTok/c-toxcore/pull/2299) fix: remove the assert because buffer can be larger than UINT16_MAX. - [#2297](https://github.com/TokTok/c-toxcore/pull/2297) cleanup: remove unused field last_seen from Onion_Friend - [#2289](https://github.com/TokTok/c-toxcore/pull/2289) test: Add a Null_System used in toxsave_harness. - [#2288](https://github.com/TokTok/c-toxcore/pull/2288) test: enable additional sanitizers for fuzzing - [#2287](https://github.com/TokTok/c-toxcore/pull/2287) fix: Don't allow onion paths to be built from real friends. - [#2285](https://github.com/TokTok/c-toxcore/pull/2285) test: Don't abort fuzz test when tox_new fails. - [#2284](https://github.com/TokTok/c-toxcore/pull/2284) refactor: Move crypto utilities from util to crypto_core. - [#2283](https://github.com/TokTok/c-toxcore/pull/2283) fix: Allow onion paths to be built from more random nodes. - [#2282](https://github.com/TokTok/c-toxcore/pull/2282) fix: Fix potential array out-of-bounds in DHT onion path building. - [#2281](https://github.com/TokTok/c-toxcore/pull/2281) cleanup: Avoid goto in msi.c. - [#2280](https://github.com/TokTok/c-toxcore/pull/2280) test: Improve test hermeticity by using local TCP relay. - [#2279](https://github.com/TokTok/c-toxcore/pull/2279) test: Enable fuzzing for TCP. - [#2277](https://github.com/TokTok/c-toxcore/pull/2277) refactor: Avoid `static_cast` in `Fuzz_System` functions. - [#2275](https://github.com/TokTok/c-toxcore/pull/2275) chore: Downgrade C++ version to 17 - [#2273](https://github.com/TokTok/c-toxcore/pull/2273) fix: Really fix overrun added in e49a477a - [#2272](https://github.com/TokTok/c-toxcore/pull/2272) fix: Add missing return on error - [#2270](https://github.com/TokTok/c-toxcore/pull/2270) test: Improve error messages in toxav_basic_test. - [#2266](https://github.com/TokTok/c-toxcore/pull/2266) fix: Fixed leak and overrun added in e49a477a - [#2263](https://github.com/TokTok/c-toxcore/pull/2263) chore: Upgrade to C++20 in CMake build. - [#2261](https://github.com/TokTok/c-toxcore/pull/2261) refactor: Protect array unpacking against invalid lengths. - [#2258](https://github.com/TokTok/c-toxcore/pull/2258) refactor: Rename announce functions into their own namespace. - [#2257](https://github.com/TokTok/c-toxcore/pull/2257) fix: Format IP as string again in error log. - [#2255](https://github.com/TokTok/c-toxcore/pull/2255) fix: Fix a stack overflow triggered by small DHT packets. - [#2251](https://github.com/TokTok/c-toxcore/pull/2251) chore: Add MISRA-2012 check using cppcheck's misra addon. - [#2250](https://github.com/TokTok/c-toxcore/pull/2250) cleanup: remove populate_path_nodes_tcp - [#2249](https://github.com/TokTok/c-toxcore/pull/2249) test: Improve stability of forwarding_test. - [#2248](https://github.com/TokTok/c-toxcore/pull/2248) refactor: Use a struct for the `ip_ntoa` buffer. - [#2246](https://github.com/TokTok/c-toxcore/pull/2246) fix: Don't crash if RNG init failed. - [#2244](https://github.com/TokTok/c-toxcore/pull/2244) refactor: Allow NULL logger; make it no-op in NDEBUG. - [#2243](https://github.com/TokTok/c-toxcore/pull/2243) chore: Add initial ESP32 docker build. - [#2242](https://github.com/TokTok/c-toxcore/pull/2242) cleanup: Use `static_assert` instead of `assert` where possible. - [#2240](https://github.com/TokTok/c-toxcore/pull/2240) chore(deps): Use upstream cmp directly instead of our fork. - [#2238](https://github.com/TokTok/c-toxcore/pull/2238) cleanup: Make `*_free` and `kill_*` functions nullable. - [#2236](https://github.com/TokTok/c-toxcore/pull/2236) chore: Add dependabot config. - [#2234](https://github.com/TokTok/c-toxcore/pull/2234) test: Add more functionality to the bootstrap fuzz harness. - [#2233](https://github.com/TokTok/c-toxcore/pull/2233) cleanup: Replace a series of `if` statements with a `switch`. - [#2232](https://github.com/TokTok/c-toxcore/pull/2232) test: Add fuzzer support functions for internal toxcore objects. - [#2230](https://github.com/TokTok/c-toxcore/pull/2230) feat: Merge group announce portion of new groupchats implementation - [#2229](https://github.com/TokTok/c-toxcore/pull/2229) cleanup: Remove layers in the cmake build. - [#2228](https://github.com/TokTok/c-toxcore/pull/2228) chore: Fix path to fuzzer binaries in clusterfuzz build. - [#2227](https://github.com/TokTok/c-toxcore/pull/2227) cleanup: Disallow stack frames of over 9000 bytes. - [#2225](https://github.com/TokTok/c-toxcore/pull/2225) fix: fix typo in git command in INSTALL.md - [#2224](https://github.com/TokTok/c-toxcore/pull/2224) cleanup: Add include for assert.h for the fuzzing build. - [#2223](https://github.com/TokTok/c-toxcore/pull/2223) chore: Add `uint8_t` version of `bin_pack` for numbers. - [#2219](https://github.com/TokTok/c-toxcore/pull/2219) refactor: Rename bin_pack/unpack functions the same as cmp funcs. - [#2217](https://github.com/TokTok/c-toxcore/pull/2217) cleanup: Add Network object parameter for addr_resolve. - [#2214](https://github.com/TokTok/c-toxcore/pull/2214) cleanup: Remove all uses of `TOX_*_MAX_SIZE` macros. - [#2213](https://github.com/TokTok/c-toxcore/pull/2213) cleanup: Remove unused random_testing program. - [#2212](https://github.com/TokTok/c-toxcore/pull/2212) cleanup: Expand `CONST_FUNCTION` and remove the macro. - [#2211](https://github.com/TokTok/c-toxcore/pull/2211) cleanup: Move definitions of tox_private.h functions to tox_private.c. - [#2210](https://github.com/TokTok/c-toxcore/pull/2210) chore: Clone submodules in clusterfuzzlite Dockerfile. - [#2208](https://github.com/TokTok/c-toxcore/pull/2208) chore: Remove valgrind build. - [#2206](https://github.com/TokTok/c-toxcore/pull/2206) feat: Allow overriding mono_time in tox_new. - [#2204](https://github.com/TokTok/c-toxcore/pull/2204) chore: Support producing shared libraries on Windows - [#2202](https://github.com/TokTok/c-toxcore/pull/2202) cleanup: Avoid name clash between struct field and function. - [#2201](https://github.com/TokTok/c-toxcore/pull/2201) docs: Add information regarding git submodules, cmp to INSTALL.md - [#2200](https://github.com/TokTok/c-toxcore/pull/2200) cleanup: Add more null checks in `tox_new`. - [#2199](https://github.com/TokTok/c-toxcore/pull/2199) cleanup: Mark Mono_Time const where possible. - [#2196](https://github.com/TokTok/c-toxcore/pull/2196) test: Remove save_load_test from autotools build. - [#2195](https://github.com/TokTok/c-toxcore/pull/2195) fix: Correct calculation of packet sent time - [#2193](https://github.com/TokTok/c-toxcore/pull/2193) perf: Make time move a lot faster in fuzzing runs. - [#2190](https://github.com/TokTok/c-toxcore/pull/2190) feat: Add support for custom random number generator. - [#2189](https://github.com/TokTok/c-toxcore/pull/2189) chore: Add third_party to toxcore-sources docker image. - [#2188](https://github.com/TokTok/c-toxcore/pull/2188) cleanup: Make addr_resolve a private function. - [#2187](https://github.com/TokTok/c-toxcore/pull/2187) test: Add DHT and tox_events fuzz tests to the cmake build. - [#2186](https://github.com/TokTok/c-toxcore/pull/2186) cleanup: Use `_Static_assert` in gcc/clang. - [#2184](https://github.com/TokTok/c-toxcore/pull/2184) test: Add some support functions to make writing fuzzers easier. - [#2183](https://github.com/TokTok/c-toxcore/pull/2183) test: Enable more tests for msan. - [#2182](https://github.com/TokTok/c-toxcore/pull/2182) test: Improve stability of tox_many_tcp_test. - [#2177](https://github.com/TokTok/c-toxcore/pull/2177) feat: Add support for overriding network functions. - [#2176](https://github.com/TokTok/c-toxcore/pull/2176) test: try to save the fuzzed save file again - [#2175](https://github.com/TokTok/c-toxcore/pull/2175) refactor: Use cmp instead of msgpack-c for events packing. - [#2173](https://github.com/TokTok/c-toxcore/pull/2173) chore: Use "master" as the branch in toktok-fuzzer. - [#2170](https://github.com/TokTok/c-toxcore/pull/2170) test: Add fuzzer tests to the bazel build. - [#2169](https://github.com/TokTok/c-toxcore/pull/2169) feat: Merge moderation portion of new groupchats codebase - [#2167](https://github.com/TokTok/c-toxcore/pull/2167) cleanup: Reduce scope of array-typed variables where possible. - [#2166](https://github.com/TokTok/c-toxcore/pull/2166) cleanup: Reduce scope of variables as requested by cimple. - [#2164](https://github.com/TokTok/c-toxcore/pull/2164) feat: Merge onion_announce changes from new groupchats fork - [#2163](https://github.com/TokTok/c-toxcore/pull/2163) chore: Enable memory sanitizer build. - [#2160](https://github.com/TokTok/c-toxcore/pull/2160) test: Improve the stability of the save_load test - [#2159](https://github.com/TokTok/c-toxcore/pull/2159) chore: Update the Appveyor build to VS2019 to work around conan issues - [#2158](https://github.com/TokTok/c-toxcore/pull/2158) cleanup: Expose `struct Tox` to internal code. - [#2157](https://github.com/TokTok/c-toxcore/pull/2157) cleanup: Split the huge TCP client packet handler. - [#2156](https://github.com/TokTok/c-toxcore/pull/2156) cleanup: Sync doc comments between .h and .c files. - [#2155](https://github.com/TokTok/c-toxcore/pull/2155) fix: Eliminate memory leak in toxav. - [#2154](https://github.com/TokTok/c-toxcore/pull/2154) test: Speed up toxav_many_test by using fake mono_time. - [#2153](https://github.com/TokTok/c-toxcore/pull/2153) docs: Put all the tox public api into a fake "tox" namespace. - [#2150](https://github.com/TokTok/c-toxcore/pull/2150) cleanup: Move all the group.h structs into group.c. - [#2149](https://github.com/TokTok/c-toxcore/pull/2149) cleanup: Avoid `memset` on structs. - [#2147](https://github.com/TokTok/c-toxcore/pull/2147) feat: Store announcements - [#2146](https://github.com/TokTok/c-toxcore/pull/2146) chore: Add testing/Dockerfile to the CI build. - [#2145](https://github.com/TokTok/c-toxcore/pull/2145) chore: Be even more explicit about integer range bounds. - [#2144](https://github.com/TokTok/c-toxcore/pull/2144) cleanup: Minor cleanups in TCP_connection.c. - [#2143](https://github.com/TokTok/c-toxcore/pull/2143) fix: Allow port range in DHT_bootstrap.c. - [#2142](https://github.com/TokTok/c-toxcore/pull/2142) cleanup: Count re-adding an existing bootstrap node as success. - [#2141](https://github.com/TokTok/c-toxcore/pull/2141) cleanup: Disable LAN discovery in TCP-only mode. - [#2140](https://github.com/TokTok/c-toxcore/pull/2140) cleanup: Add assertion for decrypted data length. - [#2101](https://github.com/TokTok/c-toxcore/pull/2101) cleanup: improve CMakeLists.txt structure - [#2100](https://github.com/TokTok/c-toxcore/pull/2100) chore: remove cpufeatures.c - [#2098](https://github.com/TokTok/c-toxcore/pull/2098) chore: remove DHT_test.c since it's unused ### Closed issues: - [#2256](https://github.com/TokTok/c-toxcore/issues/2256) New Defects reported by Coverity Scan for TokTok/c-toxcore - [#2109](https://github.com/TokTok/c-toxcore/issues/2109) Assimilate `messenger_test.c`: replace with public API test - [#2012](https://github.com/TokTok/c-toxcore/issues/2012) Support building a DLL on Windows - [#907](https://github.com/TokTok/c-toxcore/issues/907) use dll abnormal System.AccessViolationException win7 x32 but x64 no problem ## v0.2.17 ### Merged PRs: - [#2138](https://github.com/TokTok/c-toxcore/pull/2138) chore: Release 0.2.17 - [#2136](https://github.com/TokTok/c-toxcore/pull/2136) docs: Clean up doxygen comments to be more doxygen-like. - [#2135](https://github.com/TokTok/c-toxcore/pull/2135) cleanup: Move test-only functions into tests. - [#2134](https://github.com/TokTok/c-toxcore/pull/2134) cleanup: Add explicit callback setters for MSI callbacks. - [#2133](https://github.com/TokTok/c-toxcore/pull/2133) cleanup: Remove redundant Messenger and DHT tests. - [#2132](https://github.com/TokTok/c-toxcore/pull/2132) cleanup: Remove dependency from LAN_discovery onto DHT. - [#2131](https://github.com/TokTok/c-toxcore/pull/2131) cleanup: Split util.c out of the network library. - [#2130](https://github.com/TokTok/c-toxcore/pull/2130) cleanup: Remove redundant `()` around `return` expression. - [#2128](https://github.com/TokTok/c-toxcore/pull/2128) test: Add unit test for create/handle request packets. - [#2127](https://github.com/TokTok/c-toxcore/pull/2127) cleanup: Remove `EAGAIN` from the list of ignored errors. - [#2126](https://github.com/TokTok/c-toxcore/pull/2126) cleanup: Remove port from `Broadcast_Info`. - [#2125](https://github.com/TokTok/c-toxcore/pull/2125) cleanup: Don't reference local variables in macro bodies. - [#2123](https://github.com/TokTok/c-toxcore/pull/2123) cleanup: Remove some more implicit bool conversions. - [#2122](https://github.com/TokTok/c-toxcore/pull/2122) chore: Enable a bunch more warnings in GCC builds. - [#2120](https://github.com/TokTok/c-toxcore/pull/2120) cleanup: Remove all boolean-int conversions. - [#2117](https://github.com/TokTok/c-toxcore/pull/2117) cleanup: Comply with strict include ordering. - [#2116](https://github.com/TokTok/c-toxcore/pull/2116) cleanup: Remove more boolean conversions (and a bugfix). - [#2115](https://github.com/TokTok/c-toxcore/pull/2115) cleanup: Log at ERROR level when `connect()` fails. - [#2114](https://github.com/TokTok/c-toxcore/pull/2114) cleanup: Avoid creating invalid enum values. - [#2113](https://github.com/TokTok/c-toxcore/pull/2113) cleanup: Remove superfluous parentheses on the rhs of assignments. - [#2108](https://github.com/TokTok/c-toxcore/pull/2108) test: Add mallocfail and proxy test to our coverage runs. - [#2106](https://github.com/TokTok/c-toxcore/pull/2106) test: Add test coverage docker build for local tests. - [#2105](https://github.com/TokTok/c-toxcore/pull/2105) cleanup: Change valid status of onion friend to bool. - [#2104](https://github.com/TokTok/c-toxcore/pull/2104) fix: Report failure to DHT bootstrap back to the client. - [#2103](https://github.com/TokTok/c-toxcore/pull/2103) cleanup: Remove more implicit bool conversions. - [#2102](https://github.com/TokTok/c-toxcore/pull/2102) cleanup: Mark all local non-pointers as const where possible. - [#2099](https://github.com/TokTok/c-toxcore/pull/2099) cleanup: Reduce name shadowing; remove ptr-to-bool conversions. - [#2097](https://github.com/TokTok/c-toxcore/pull/2097) cleanup: Remove implicit conversions from `uint32_t` to `bool`. - [#2096](https://github.com/TokTok/c-toxcore/pull/2096) cleanup: Return boolean constants, not ints from bool functions. - [#2094](https://github.com/TokTok/c-toxcore/pull/2094) fix: Null function pointer dereference. - [#2093](https://github.com/TokTok/c-toxcore/pull/2093) cleanup: Remove any disallowed casts. - [#2092](https://github.com/TokTok/c-toxcore/pull/2092) perf: fix issue with friend finding taking too long after disconnects. - [#2091](https://github.com/TokTok/c-toxcore/pull/2091) cleanup: Avoid casting function pointers. - [#2090](https://github.com/TokTok/c-toxcore/pull/2090) refactor: Move `tox_new_log` to `auto_test_support`. - [#2088](https://github.com/TokTok/c-toxcore/pull/2088) cleanup: Remove all implicit bool conversions in if-conditions. - [#2086](https://github.com/TokTok/c-toxcore/pull/2086) cleanup: Enable most cppcheck warnings as errors. - [#2084](https://github.com/TokTok/c-toxcore/pull/2084) fix: out-of-memory condition by corrupted save file - [#2079](https://github.com/TokTok/c-toxcore/pull/2079) cleanup: Remove unused execution trace library. - [#2078](https://github.com/TokTok/c-toxcore/pull/2078) perf: Refactor onion_client.c do_friends() to reduce network traffic - [#2075](https://github.com/TokTok/c-toxcore/pull/2075) chore: Add a .clang-format that mostly agrees with astyle. - [#2074](https://github.com/TokTok/c-toxcore/pull/2074) chore: Make coverity scan a nightly job. - [#2073](https://github.com/TokTok/c-toxcore/pull/2073) chore: Fix build-args in win32/win64 docker build. - [#2072](https://github.com/TokTok/c-toxcore/pull/2072) chore: Simplify and speed up windows builds using docker image. - [#2070](https://github.com/TokTok/c-toxcore/pull/2070) chore: Add docker image builds for windows cross compiler. - [#2064](https://github.com/TokTok/c-toxcore/pull/2064) fix: toxsave memory leak while loading groups ### Closed issues: - [#2121](https://github.com/TokTok/c-toxcore/issues/2121) Improve speed and stability of LAN discovery test - [#2083](https://github.com/TokTok/c-toxcore/issues/2083) Tox save file format/loader doesn't limit or check the number of frozen peers - [#2080](https://github.com/TokTok/c-toxcore/issues/2080) speedup getting online after tox process has been suspended - [#2050](https://github.com/TokTok/c-toxcore/issues/2050) Excessive onion friend lookups - [#2034](https://github.com/TokTok/c-toxcore/issues/2034) Make coverity-scan workflow a nightly build instead of on master push - [#2000](https://github.com/TokTok/c-toxcore/issues/2000) Move win32 docker image build out to dockerfiles - [#1990](https://github.com/TokTok/c-toxcore/issues/1990) Add a .clang-format config that matches the astyle config as closely as possible. - [#1115](https://github.com/TokTok/c-toxcore/issues/1115) Add empty handler for LAN discovery packets when LAN discovery is disabled - [#647](https://github.com/TokTok/c-toxcore/issues/647) `tox_bootstrap` should return an error on unrecoverable `getnodes` failure - [#169](https://github.com/TokTok/c-toxcore/issues/169) Get rid of TOX_USER_STATUS_BUSY + 1 ## v0.2.16 ### Merged PRs: - [#2071](https://github.com/TokTok/c-toxcore/pull/2071) chore: Release 0.2.16 - [#2069](https://github.com/TokTok/c-toxcore/pull/2069) chore: Simplify and speed up nacl build using toxchat/nacl. - [#2066](https://github.com/TokTok/c-toxcore/pull/2066) test: Add a profiling script and Dockerfile. - [#2058](https://github.com/TokTok/c-toxcore/pull/2058) fix: properly deallocate frozen peers - [#2056](https://github.com/TokTok/c-toxcore/pull/2056) cleanup: Avoid implicit boolean and floating point conversions in decls. - [#2055](https://github.com/TokTok/c-toxcore/pull/2055) cleanup: Avoid implicit bool conversions in logical operators. - [#2053](https://github.com/TokTok/c-toxcore/pull/2053) cleanup: Enable tokstyle's `-Wlarge-struct-params`. - [#2052](https://github.com/TokTok/c-toxcore/pull/2052) fix: Fix return type of functions returning uint64_t. - [#2049](https://github.com/TokTok/c-toxcore/pull/2049) cleanup: Apply stronger type checks and fix errors. - [#2047](https://github.com/TokTok/c-toxcore/pull/2047) feat: Improve how we share TCP relays with friends - [#2046](https://github.com/TokTok/c-toxcore/pull/2046) cleanup: Avoid implicit pointer-to-bool conversion in `if` in toxav. - [#2043](https://github.com/TokTok/c-toxcore/pull/2043) refactor: Compare pointers in if conditions to nullptr. - [#2041](https://github.com/TokTok/c-toxcore/pull/2041) fix: file transfer bug introduced in commit 2073d02 - [#2039](https://github.com/TokTok/c-toxcore/pull/2039) refactor: Add a bit more logging; change WARNING to ERROR. - [#2036](https://github.com/TokTok/c-toxcore/pull/2036) chore: Add BUILD file for websockify. - [#2035](https://github.com/TokTok/c-toxcore/pull/2035) chore: fine tune fuzzing settings - [#2033](https://github.com/TokTok/c-toxcore/pull/2033) cleanup: Add some more error path logging to TCP server code. - [#2032](https://github.com/TokTok/c-toxcore/pull/2032) chore: update the list of CMake options & Windows Docker build deps - [#2031](https://github.com/TokTok/c-toxcore/pull/2031) fix: remove bogus asserts in fuzzer harness - [#2030](https://github.com/TokTok/c-toxcore/pull/2030) chore: expand fuzzing to toxsave - [#2028](https://github.com/TokTok/c-toxcore/pull/2028) fix: syntax error introduced in 8bf37994fd12acec9e3010437502f478399b99b4 - [#2027](https://github.com/TokTok/c-toxcore/pull/2027) fix: add continous fuzzing - [#2026](https://github.com/TokTok/c-toxcore/pull/2026) chore: Fix implicit declaration warning in fuzz build - [#2025](https://github.com/TokTok/c-toxcore/pull/2025) chore: add continous fuzzing to our CI - [#2024](https://github.com/TokTok/c-toxcore/pull/2024) perf: Reduce minimal encoding size of packed events. - [#2023](https://github.com/TokTok/c-toxcore/pull/2023) cleanup: Add wrapper library for msgpack pack functions - [#2022](https://github.com/TokTok/c-toxcore/pull/2022) cleanup: Split tox_unpack into two smaller libs - [#2021](https://github.com/TokTok/c-toxcore/pull/2021) chore: Disable non-null attributes by default. - [#2019](https://github.com/TokTok/c-toxcore/pull/2019) chore: Silence clang compile warnings causing circle-ci/asan to fail - [#2018](https://github.com/TokTok/c-toxcore/pull/2018) fix: Coverty scan - [#2016](https://github.com/TokTok/c-toxcore/pull/2016) docs: Add libmsgpack dependency in INSTALL.md - [#2015](https://github.com/TokTok/c-toxcore/pull/2015) fix: shared toxcore autotools build failing - [#2013](https://github.com/TokTok/c-toxcore/pull/2013) cleanup: Don't use VLAs for huge allocations. - [#2011](https://github.com/TokTok/c-toxcore/pull/2011) fix: Conan build link failures - [#2010](https://github.com/TokTok/c-toxcore/pull/2010) chore: Remove duplicate source file in autotools build. - [#2008](https://github.com/TokTok/c-toxcore/pull/2008) chore: get skeletons out of the closet - [#2007](https://github.com/TokTok/c-toxcore/pull/2007) feat: add bash-completion for tox-bootstrapd - [#2006](https://github.com/TokTok/c-toxcore/pull/2006) cleanup: Add more nonnull and nullable annotations. - [#2002](https://github.com/TokTok/c-toxcore/pull/2002) cleanup: Add nonnull annotations to function definitions. - [#2001](https://github.com/TokTok/c-toxcore/pull/2001) chore: Add an undefined behaviour/integer sanitizer build. - [#1999](https://github.com/TokTok/c-toxcore/pull/1999) chore: Speed up cmake builds with `UNITY_BUILD`. - [#1996](https://github.com/TokTok/c-toxcore/pull/1996) feat: Add unpacker functions for events structures. - [#1993](https://github.com/TokTok/c-toxcore/pull/1993) feat: Add binary packing functions for tox events. - [#1992](https://github.com/TokTok/c-toxcore/pull/1992) chore: Set up an Android CI job - [#1988](https://github.com/TokTok/c-toxcore/pull/1988) cleanup: Make LAN discovery thread-safe without data races. - [#1987](https://github.com/TokTok/c-toxcore/pull/1987) cleanup: Comply with new cimple callback rules. - [#1985](https://github.com/TokTok/c-toxcore/pull/1985) cleanup: Split msi callback array into 1 member per callback - [#1982](https://github.com/TokTok/c-toxcore/pull/1982) chore: Add an easy way to run autotools and circleci builds locally. - [#1979](https://github.com/TokTok/c-toxcore/pull/1979) chore: Update readme header - [#1952](https://github.com/TokTok/c-toxcore/pull/1952) feat: Add async event handling (callbacks) code. - [#1935](https://github.com/TokTok/c-toxcore/pull/1935) feat: add DHT queries to private API - [#1668](https://github.com/TokTok/c-toxcore/pull/1668) perf: Take advantage of fast networks for file transfers ### Closed issues: - [#2009](https://github.com/TokTok/c-toxcore/issues/2009) Autotools build fails - [#2004](https://github.com/TokTok/c-toxcore/issues/2004) Add `nullable` and `nonnull` annotations to all functions. - [#1998](https://github.com/TokTok/c-toxcore/issues/1998) Large stack allocations - [#1977](https://github.com/TokTok/c-toxcore/issues/1977) Turn array of callbacks in msi.h into separate callbacks. - [#1670](https://github.com/TokTok/c-toxcore/issues/1670) Broken link in readme - [#405](https://github.com/TokTok/c-toxcore/issues/405) Remove all¹ uses of global state in toxcore - [#340](https://github.com/TokTok/c-toxcore/issues/340) Set up a continuous integration build for Android - [#236](https://github.com/TokTok/c-toxcore/issues/236) Tox file transfers do not use available bandwidth - [#128](https://github.com/TokTok/c-toxcore/issues/128) Toxcore should provide an easy, local method for making sure Travis checks will pass ## v0.2.15 ### Merged PRs: - [#1984](https://github.com/TokTok/c-toxcore/pull/1984) fix: Reduce logging verbosity even more. - [#1983](https://github.com/TokTok/c-toxcore/pull/1983) chore: Release 0.2.15 - [#1980](https://github.com/TokTok/c-toxcore/pull/1980) fix: Reduce logging verbosity in TCP server. ## v0.2.14 ### Merged PRs: - [#1978](https://github.com/TokTok/c-toxcore/pull/1978) chore: Release 0.2.14 - [#1976](https://github.com/TokTok/c-toxcore/pull/1976) docs: Make crypto_core.h appear on doxygen. - [#1975](https://github.com/TokTok/c-toxcore/pull/1975) refactor: use proper method for generating random numbers in a range - [#1974](https://github.com/TokTok/c-toxcore/pull/1974) docs: Add doxygen configuration and netlify publishing. - [#1972](https://github.com/TokTok/c-toxcore/pull/1972) chore: Make the last few remaining top level comments doxygen style. - [#1971](https://github.com/TokTok/c-toxcore/pull/1971) chore: Sync all comments between header and source files. - [#1968](https://github.com/TokTok/c-toxcore/pull/1968) cleanup: Ensure we limit the system headers included in .h files. - [#1964](https://github.com/TokTok/c-toxcore/pull/1964) cleanup: Don't pass the whole DHT object to lan discovery. - [#1958](https://github.com/TokTok/c-toxcore/pull/1958) chore: Make run-infer script use docker. - [#1956](https://github.com/TokTok/c-toxcore/pull/1956) chore: Disable some cimple warnings for now. - [#1955](https://github.com/TokTok/c-toxcore/pull/1955) cleanup: Properly copy Node_format using serialized format - [#1954](https://github.com/TokTok/c-toxcore/pull/1954) cleanup: make functions take const pointer to IP_Port wherever possible - [#1950](https://github.com/TokTok/c-toxcore/pull/1950) feat: Add WASM build for toxcore and websocket bootstrap node. - [#1948](https://github.com/TokTok/c-toxcore/pull/1948) fix: potential freeing of an immutable static buffer - [#1945](https://github.com/TokTok/c-toxcore/pull/1945) fix: Fix bootstrap on emscripten/wasm. - [#1943](https://github.com/TokTok/c-toxcore/pull/1943) chore: use latest toktok-stack msan version - [#1942](https://github.com/TokTok/c-toxcore/pull/1942) cleanup: Add some toxav bounds/sanity checks - [#1940](https://github.com/TokTok/c-toxcore/pull/1940) chore: Use latest instead of versioned toktok-stack image. - [#1939](https://github.com/TokTok/c-toxcore/pull/1939) chore: Rename bazel-release to -opt and -debug to -dbg. - [#1938](https://github.com/TokTok/c-toxcore/pull/1938) cleanup: small refactor of DHT getnodes function - [#1937](https://github.com/TokTok/c-toxcore/pull/1937) cleanup: remove brackets from ip_ntoa ipv6 formatting - [#1933](https://github.com/TokTok/c-toxcore/pull/1933) chore: Add a Bazel Buildifier CI job - [#1932](https://github.com/TokTok/c-toxcore/pull/1932) test: separate run_auto_tests into a library (revival of #1505) - [#1929](https://github.com/TokTok/c-toxcore/pull/1929) cleanup: make some non-const pointers const - [#1928](https://github.com/TokTok/c-toxcore/pull/1928) fix: unintentional integer down-casts - [#1926](https://github.com/TokTok/c-toxcore/pull/1926) fix: group av memory leak - [#1924](https://github.com/TokTok/c-toxcore/pull/1924) test: refactor autotest live network bootstrapping - [#1923](https://github.com/TokTok/c-toxcore/pull/1923) fix: corruption in key files, making it unable to load when node starts. - [#1922](https://github.com/TokTok/c-toxcore/pull/1922) chore: Don't run sonar scan on pull requests. - [#1920](https://github.com/TokTok/c-toxcore/pull/1920) cleanup: refactor group audio packet data handling - [#1918](https://github.com/TokTok/c-toxcore/pull/1918) chore: Run sonar scan on pull requests. - [#1917](https://github.com/TokTok/c-toxcore/pull/1917) fix: buffer overwrite in bootstrap config - [#1916](https://github.com/TokTok/c-toxcore/pull/1916) chore: Add a make_single_file script, used for CI. - [#1915](https://github.com/TokTok/c-toxcore/pull/1915) cleanup: replace magic numbers with appropriately named constants - [#1914](https://github.com/TokTok/c-toxcore/pull/1914) chore: Add cpplint to the CI. - [#1912](https://github.com/TokTok/c-toxcore/pull/1912) cleanup: Remove uses of `strcpy` and `sprintf`. - [#1910](https://github.com/TokTok/c-toxcore/pull/1910) cleanup: Remove our only use of flexible array members in toxcore. - [#1909](https://github.com/TokTok/c-toxcore/pull/1909) chore: Expose public API headers as files in bazel. - [#1906](https://github.com/TokTok/c-toxcore/pull/1906) cleanup: Split large switch statement into functions. - [#1905](https://github.com/TokTok/c-toxcore/pull/1905) chore: Mark unsafe code as testonly. - [#1903](https://github.com/TokTok/c-toxcore/pull/1903) cleanup: Even more pointer-to-const parameters. - [#1901](https://github.com/TokTok/c-toxcore/pull/1901) cleanup: Make parameters pointers-to-const where possible. - [#1900](https://github.com/TokTok/c-toxcore/pull/1900) cleanup: Remove old check Suite compat layer. - [#1899](https://github.com/TokTok/c-toxcore/pull/1899) cleanup: Make `Networking_Core` pointer-to-const where possible. - [#1898](https://github.com/TokTok/c-toxcore/pull/1898) cleanup: Use pointer cast instead of memcpy in qsort callback. - [#1897](https://github.com/TokTok/c-toxcore/pull/1897) refactor: Deduplicate a bunch of code in TCP client/server. - [#1894](https://github.com/TokTok/c-toxcore/pull/1894) cleanup: Deduplicate a somewhat complex loop in DHT.c. - [#1891](https://github.com/TokTok/c-toxcore/pull/1891) cleanup: Remove our only use of sprintf. - [#1889](https://github.com/TokTok/c-toxcore/pull/1889) cleanup: Stop using `strerror` directly. - [#1887](https://github.com/TokTok/c-toxcore/pull/1887) test: Add two more bootstrap/TCP nodes to autotests - [#1884](https://github.com/TokTok/c-toxcore/pull/1884) chore: Add mypy Python type check. - [#1883](https://github.com/TokTok/c-toxcore/pull/1883) chore: Add sonar-scan analysis on pushes. - [#1881](https://github.com/TokTok/c-toxcore/pull/1881) cleanup: Merge crypto_core and crypto_core_mem. - [#1880](https://github.com/TokTok/c-toxcore/pull/1880) chore: Run static analysers in multiple variants. - [#1879](https://github.com/TokTok/c-toxcore/pull/1879) fix: Fix `toxav_basic_test` buffer overflow. - [#1878](https://github.com/TokTok/c-toxcore/pull/1878) fix: don't count filetransfer as sending until accepted - [#1877](https://github.com/TokTok/c-toxcore/pull/1877) fix: Fix some uninitialised memory errors found by valgrind. - [#1876](https://github.com/TokTok/c-toxcore/pull/1876) chore: Ignore some failures in bazel-tsan. - [#1875](https://github.com/TokTok/c-toxcore/pull/1875) chore: Add asan/tsan bazel builds. - [#1874](https://github.com/TokTok/c-toxcore/pull/1874) cleanup: replace all instances of atoi with strtol - [#1873](https://github.com/TokTok/c-toxcore/pull/1873) chore: Enable layering check in all c-toxcore build files. - [#1871](https://github.com/TokTok/c-toxcore/pull/1871) chore: Enable compiler layering check. - [#1870](https://github.com/TokTok/c-toxcore/pull/1870) chore: Disable the OpenMP cracker in bazel for now. - [#1867](https://github.com/TokTok/c-toxcore/pull/1867) chore: Retry asan/tsan tests a few more times. - [#1866](https://github.com/TokTok/c-toxcore/pull/1866) chore: Run tokstyle with 3 cores. - [#1865](https://github.com/TokTok/c-toxcore/pull/1865) cleanup: Remove extra parens around function arguments. - [#1864](https://github.com/TokTok/c-toxcore/pull/1864) cleanup: Don't use memcpy where assignment can be used. - [#1862](https://github.com/TokTok/c-toxcore/pull/1862) chore: Remove all references to Travis CI. - [#1861](https://github.com/TokTok/c-toxcore/pull/1861) cleanup: Use `calloc` instead of `malloc` for struct allocations. - [#1860](https://github.com/TokTok/c-toxcore/pull/1860) cleanup: Fix `calloc` argument order. - [#1857](https://github.com/TokTok/c-toxcore/pull/1857) chore: Get all* autotests working with MSVC - [#1853](https://github.com/TokTok/c-toxcore/pull/1853) cleanup: Remove useless parentheses. - [#1850](https://github.com/TokTok/c-toxcore/pull/1850) chore: Add a GH Actions code coverage job - [#1845](https://github.com/TokTok/c-toxcore/pull/1845) fix: use correct sample size in toxav_basic_test - [#1844](https://github.com/TokTok/c-toxcore/pull/1844) cleanup: make struct typedefs have the same name as their struct - [#1841](https://github.com/TokTok/c-toxcore/pull/1841) cleanup: refactor toxav_call_control - [#1840](https://github.com/TokTok/c-toxcore/pull/1840) chore: Remove old travis docker scripts. - [#1837](https://github.com/TokTok/c-toxcore/pull/1837) chore: Add bazel-debug build. - [#1836](https://github.com/TokTok/c-toxcore/pull/1836) fix: possible unintended negative loop bound - [#1835](https://github.com/TokTok/c-toxcore/pull/1835) cleanup: remove dead code - [#1834](https://github.com/TokTok/c-toxcore/pull/1834) cleanup: Reduce the scope of for-loop iterator variables. - [#1832](https://github.com/TokTok/c-toxcore/pull/1832) fix: a double-unlocking mutex in toxav - [#1830](https://github.com/TokTok/c-toxcore/pull/1830) chore: Add "tcc" and "compcert" compiler targets. - [#1820](https://github.com/TokTok/c-toxcore/pull/1820) chore: Add macOS build. - [#1819](https://github.com/TokTok/c-toxcore/pull/1819) refactor: Extract some functions from the big run_auto_test function. - [#1818](https://github.com/TokTok/c-toxcore/pull/1818) feat: Add programs for creating savedata & bootstrap keys - [#1816](https://github.com/TokTok/c-toxcore/pull/1816) cleanup: put breaks inside case braces - [#1815](https://github.com/TokTok/c-toxcore/pull/1815) test: add ability for autotests to use TCP connections - [#1813](https://github.com/TokTok/c-toxcore/pull/1813) chore: Login to dockerhub before trying to push to dockerhub. - [#1812](https://github.com/TokTok/c-toxcore/pull/1812) chore: Only push versioned docker image on tag builds. - [#1811](https://github.com/TokTok/c-toxcore/pull/1811) chore: Add bootstrap daemon docker image build. - [#1810](https://github.com/TokTok/c-toxcore/pull/1810) chore: Remove apidsl comment from tox.h. - [#1807](https://github.com/TokTok/c-toxcore/pull/1807) chore: Don't run CI on master branch pushes. - [#1802](https://github.com/TokTok/c-toxcore/pull/1802) cleanup: Sync doc comments in a few more .c/.h files. - [#1801](https://github.com/TokTok/c-toxcore/pull/1801) chore: Fix up a few source code comment and style issues. - [#1798](https://github.com/TokTok/c-toxcore/pull/1798) chore: merge friend_connections from NGC fork - [#1797](https://github.com/TokTok/c-toxcore/pull/1797) cleanup: Move `sodium.h` include to front of network.c. - [#1794](https://github.com/TokTok/c-toxcore/pull/1794) chore: Move cmake-freebsd-stage2 back into the toxcore repo. - [#1793](https://github.com/TokTok/c-toxcore/pull/1793) chore: Add FreeBSD build to CI. - [#1792](https://github.com/TokTok/c-toxcore/pull/1792) chore: Add cross compilation CI targets. - [#1790](https://github.com/TokTok/c-toxcore/pull/1790) cleanup: remove redundant (and incorrect) comments - [#1789](https://github.com/TokTok/c-toxcore/pull/1789) refactor: rename variable to clarify purpose - [#1786](https://github.com/TokTok/c-toxcore/pull/1786) cleanup: Remove apidsl; remove `crypto_memcmp`. - [#1783](https://github.com/TokTok/c-toxcore/pull/1783) cleanup: fix format-source - [#1779](https://github.com/TokTok/c-toxcore/pull/1779) chore: Update toktok-stack version. - [#1778](https://github.com/TokTok/c-toxcore/pull/1778) chore: Tie down the use of doxygen comments. - [#1777](https://github.com/TokTok/c-toxcore/pull/1777) cleanup: Remove crypto_pwhash import. - [#1776](https://github.com/TokTok/c-toxcore/pull/1776) cleanup: remove unused function argument from set_tcp_connection_status() - [#1775](https://github.com/TokTok/c-toxcore/pull/1775) cleanup: Remove apidsl for everything except the public API. - [#1774](https://github.com/TokTok/c-toxcore/pull/1774) chore: Remove config.h. - [#1773](https://github.com/TokTok/c-toxcore/pull/1773) chore: Fix gen-file.sh: it wasn't globbing properly. - [#1772](https://github.com/TokTok/c-toxcore/pull/1772) chore: Add .cc files to the static analysis. - [#1770](https://github.com/TokTok/c-toxcore/pull/1770) cleanup: merge onion.c changes from new groupchats fork - [#1769](https://github.com/TokTok/c-toxcore/pull/1769) chore: merge tcp_connection changes from new groupchats fork - [#1768](https://github.com/TokTok/c-toxcore/pull/1768) chore: merge DHT changes from new groupchats fork - [#1766](https://github.com/TokTok/c-toxcore/pull/1766) chore: Use docker for the autotools ci build. - [#1765](https://github.com/TokTok/c-toxcore/pull/1765) fix: Fix file permission issue with toxchat/bootstrap-node Docker container - [#1762](https://github.com/TokTok/c-toxcore/pull/1762) chore: Add autotools build; exempt crypto_pwhash from tokstyle. - [#1761](https://github.com/TokTok/c-toxcore/pull/1761) cleanup: Don't include `"config.h"` unless needed. - [#1759](https://github.com/TokTok/c-toxcore/pull/1759) cleanup: address some unused return values - [#1758](https://github.com/TokTok/c-toxcore/pull/1758) test: Make ERROR logging fatal in tests. - [#1754](https://github.com/TokTok/c-toxcore/pull/1754) fix: off-by-one error caused by integer division without proper cast - [#1753](https://github.com/TokTok/c-toxcore/pull/1753) cleanup: use crypto_memzero to wipe secret keys when no longer in use - [#1752](https://github.com/TokTok/c-toxcore/pull/1752) chore: Use an incrementing version number for coverity scans. - [#1751](https://github.com/TokTok/c-toxcore/pull/1751) fix: Fixed uninitialised value copy. - [#1747](https://github.com/TokTok/c-toxcore/pull/1747) cleanup: Fix some clang-tidy warnings and make them errors. - [#1746](https://github.com/TokTok/c-toxcore/pull/1746) chore: Add clang-tidy review github workflow. - [#1744](https://github.com/TokTok/c-toxcore/pull/1744) cleanup: Enforce for loop consistency. - [#1743](https://github.com/TokTok/c-toxcore/pull/1743) chore: Minor cleanups of warnings given by cppcheck. - [#1742](https://github.com/TokTok/c-toxcore/pull/1742) test: Add a simple test for `ip_ntoa`. - [#1740](https://github.com/TokTok/c-toxcore/pull/1740) cleanup: Put fatal errors where API return values should be impossible - [#1738](https://github.com/TokTok/c-toxcore/pull/1738) chore: Add missing `sudo` to coverity apt-get calls. - [#1737](https://github.com/TokTok/c-toxcore/pull/1737) refactor: Fix previous refactor - [#1736](https://github.com/TokTok/c-toxcore/pull/1736) chore: Add workflow for running coverity scan. - [#1735](https://github.com/TokTok/c-toxcore/pull/1735) cleanup: Use `static_assert` instead of preprocessor `#error`. - [#1734](https://github.com/TokTok/c-toxcore/pull/1734) chore: Add logger to onion and onion announce objects - [#1733](https://github.com/TokTok/c-toxcore/pull/1733) cleanup: Minor fixes in test code. - [#1732](https://github.com/TokTok/c-toxcore/pull/1732) cleanup: Refactor kill_nonused_tcp() - [#1730](https://github.com/TokTok/c-toxcore/pull/1730) cleanup: Fix last instance of `-Wcast-align` and enable the warning. - [#1729](https://github.com/TokTok/c-toxcore/pull/1729) cleanup: Ensure that error codes are always initialised. - [#1727](https://github.com/TokTok/c-toxcore/pull/1727) cleanup: Avoid endian-specific code in `crypto_core`. - [#1720](https://github.com/TokTok/c-toxcore/pull/1720) feat: Add automatic fuzz testing for c-toxcore - [#1673](https://github.com/TokTok/c-toxcore/pull/1673) cleanup: Remove hardening code from DHT - [#1622](https://github.com/TokTok/c-toxcore/pull/1622) perf: Make the key cracker a bit faster - [#1333](https://github.com/TokTok/c-toxcore/pull/1333) refactor: Clean up friend loading. - [#1307](https://github.com/TokTok/c-toxcore/pull/1307) refactor: Split toxav_iterate into audio and video part ### Closed issues: - [#1967](https://github.com/TokTok/c-toxcore/issues/1967) Potential freeing of an immutable static buffer - [#1788](https://github.com/TokTok/c-toxcore/issues/1788) Rename dht->last_run - [#1719](https://github.com/TokTok/c-toxcore/issues/1719) Enforce braces around macros that compute a value - [#1694](https://github.com/TokTok/c-toxcore/issues/1694) Double unlocking in the ac_iterate - [#1332](https://github.com/TokTok/c-toxcore/issues/1332) Padding bytes in Tox save format are not specified - [#1217](https://github.com/TokTok/c-toxcore/issues/1217) valgrind reports "Conditional jump or move depends on uninitialised value(s)" - [#1118](https://github.com/TokTok/c-toxcore/issues/1118) Fix threading issues in tests caught by tsan (data race etc) - [#1087](https://github.com/TokTok/c-toxcore/issues/1087) Remove all uses of `%zu` in printf formats. - [#1040](https://github.com/TokTok/c-toxcore/issues/1040) Random numbers should not be produced using `rng() % max`. - [#540](https://github.com/TokTok/c-toxcore/issues/540) Stop deleting source files - [#501](https://github.com/TokTok/c-toxcore/issues/501) Testsuite fails and hangs on FreeBSD - [#451](https://github.com/TokTok/c-toxcore/issues/451) Don't fail when building toxcore on windows with `cmake .` - [#350](https://github.com/TokTok/c-toxcore/issues/350) Configure coverity runs for nightly builds - [#349](https://github.com/TokTok/c-toxcore/issues/349) Run clang-tidy on Travis with specific warnings as errors. - [#348](https://github.com/TokTok/c-toxcore/issues/348) Run cppcheck on Travis and push the results to toktok.github.io. - [#323](https://github.com/TokTok/c-toxcore/issues/323) Set library version on future releases - [#235](https://github.com/TokTok/c-toxcore/issues/235) Video corruption: Don't drop video keyframes - [#203](https://github.com/TokTok/c-toxcore/issues/203) ToxAV is still on the old API style - [#198](https://github.com/TokTok/c-toxcore/issues/198) Crash on call while peer calling you - [#167](https://github.com/TokTok/c-toxcore/issues/167) Const-ify pointers - [#124](https://github.com/TokTok/c-toxcore/issues/124) Don't include OS specific headers in .h files - [#106](https://github.com/TokTok/c-toxcore/issues/106) Sometimes Toxcore reports the wrong connection status for both the DHT, and friends. - [#85](https://github.com/TokTok/c-toxcore/issues/85) Reproducible Builds // OBS a bad Idea ## v0.2.13 ### Merged PRs: - [#1725](https://github.com/TokTok/c-toxcore/pull/1725) cleanup: add some missing null checks - [#1723](https://github.com/TokTok/c-toxcore/pull/1723) chore: Run infer static analyser on circle ci builds. - [#1722](https://github.com/TokTok/c-toxcore/pull/1722) chore: Release 0.2.13 - [#1718](https://github.com/TokTok/c-toxcore/pull/1718) fix: Sec/fix crypto size compute - [#1716](https://github.com/TokTok/c-toxcore/pull/1716) chore: Use toktok-stack docker image with built third_party. - [#1713](https://github.com/TokTok/c-toxcore/pull/1713) test: Add some unit tests for important internal DHT functions. - [#1708](https://github.com/TokTok/c-toxcore/pull/1708) perf: reduce calling into Mono_Time in DHT - [#1706](https://github.com/TokTok/c-toxcore/pull/1706) chore: Enable cimple tests on cirrus build. - [#1705](https://github.com/TokTok/c-toxcore/pull/1705) fix: issue with save_load autotest - [#1703](https://github.com/TokTok/c-toxcore/pull/1703) chore: Upgrade to toktok-stack:0.0.11. - [#1699](https://github.com/TokTok/c-toxcore/pull/1699) fix: some friend connection issues - [#1698](https://github.com/TokTok/c-toxcore/pull/1698) fix: bug causing API to report wrong self connection status - [#1693](https://github.com/TokTok/c-toxcore/pull/1693) chore: Update IRC info - [#1691](https://github.com/TokTok/c-toxcore/pull/1691) chore: Fix Appveyor and add workarounds for Cirrus CI - [#1686](https://github.com/TokTok/c-toxcore/pull/1686) chore: Enable c-toxcore conan packaging - [#1684](https://github.com/TokTok/c-toxcore/pull/1684) cleanup: Update INSTALL.md instructions - [#1679](https://github.com/TokTok/c-toxcore/pull/1679) cleanup: Trivial cleanup - [#1674](https://github.com/TokTok/c-toxcore/pull/1674) cleanup: filetransfer code - [#1672](https://github.com/TokTok/c-toxcore/pull/1672) docs: Add instructions for building unit tests to INSTALL.md - [#1667](https://github.com/TokTok/c-toxcore/pull/1667) chore: Update tox-bootstrapd checksum due to newer packages in Alpine - [#1664](https://github.com/TokTok/c-toxcore/pull/1664) cleanup: use heap memory instead of stack for large variables - [#1663](https://github.com/TokTok/c-toxcore/pull/1663) fix: Fix file tests on windows - [#1633](https://github.com/TokTok/c-toxcore/pull/1633) fix: AppVeyor failing due to conan remote being added twice - [#1602](https://github.com/TokTok/c-toxcore/pull/1602) fix: Fix buffer over-read when a peer leaves a conference - [#1586](https://github.com/TokTok/c-toxcore/pull/1586) test: Fix tcp_relay_test by adding a second bootstrap node. - [#1580](https://github.com/TokTok/c-toxcore/pull/1580) style: Format comments according to tokstyle's requirements. - [#1557](https://github.com/TokTok/c-toxcore/pull/1557) chore: Add conan support - [#1537](https://github.com/TokTok/c-toxcore/pull/1537) chore: Cygwin build - [#1516](https://github.com/TokTok/c-toxcore/pull/1516) cleanup: Make pylint and mypy happy with bootstrap_node_info.py. - [#1515](https://github.com/TokTok/c-toxcore/pull/1515) style: Run restyled on Travis and Circle CI scripts. - [#1514](https://github.com/TokTok/c-toxcore/pull/1514) refactor: Remove multi-declarators entirely. - [#1513](https://github.com/TokTok/c-toxcore/pull/1513) refactor: Disallow multiple initialised declarators per decl. - [#1510](https://github.com/TokTok/c-toxcore/pull/1510) chore: Don't build pushes to branches, only to tags. - [#1504](https://github.com/TokTok/c-toxcore/pull/1504) chore: Remove release-drafter configuration in favour of global one. - [#1498](https://github.com/TokTok/c-toxcore/pull/1498) refactor: Limit scope of loop iterators. - [#1497](https://github.com/TokTok/c-toxcore/pull/1497) refactor: Use bash arrays instead of strings for static analysis scripts. - [#1496](https://github.com/TokTok/c-toxcore/pull/1496) cleanup: Stop hard-coding packet IDs in tests. - [#1495](https://github.com/TokTok/c-toxcore/pull/1495) chore: Exclude imported libsodium sources from restyled. - [#1493](https://github.com/TokTok/c-toxcore/pull/1493) feat: Add logging to TCP and onion client. - [#1489](https://github.com/TokTok/c-toxcore/pull/1489) cleanup: `NAC_LIBS` -> `NACL_LIBS`. - [#1487](https://github.com/TokTok/c-toxcore/pull/1487) chore: Add autotools build to localbuild docker images. - [#1473](https://github.com/TokTok/c-toxcore/pull/1473) chore: Add a script to run Travis CI locally. - [#1467](https://github.com/TokTok/c-toxcore/pull/1467) fix: Fix a bug in savedata loading when malloc fails. - [#1464](https://github.com/TokTok/c-toxcore/pull/1464) fix: Fix errors on error paths found by oomer. - [#1463](https://github.com/TokTok/c-toxcore/pull/1463) cleanup: Add a check that we don't have any unused functions. - [#1462](https://github.com/TokTok/c-toxcore/pull/1462) cleanup: Include `<string.h>` for `explicit_bzero`. - [#1436](https://github.com/TokTok/c-toxcore/pull/1436) chore: Enable cimple tests by default but allow disabling them. ### Closed issues: - [#1598](https://github.com/TokTok/c-toxcore/issues/1598) ERROR: heap-buffer-overflow in group.c found with AddressSanitizer - [#1326](https://github.com/TokTok/c-toxcore/issues/1326) the cause is great, but this thing is completely unusable - [#1319](https://github.com/TokTok/c-toxcore/issues/1319) Is this new application is safe & trusted ?? - [#1236](https://github.com/TokTok/c-toxcore/issues/1236) Ruby Extension? - [#1149](https://github.com/TokTok/c-toxcore/issues/1149) uTox aborts on toxcore restart - [#886](https://github.com/TokTok/c-toxcore/issues/886) Maybe need to set the stacksize for musl-libc ## v0.2.12 ### Merged PRs: - [#1458](https://github.com/TokTok/c-toxcore/pull/1458) Release 0.2.12 - [#1457](https://github.com/TokTok/c-toxcore/pull/1457) Disable non-hermetic tests by default. - [#1456](https://github.com/TokTok/c-toxcore/pull/1456) Limit the number of friends you can have to ~4 billion. - [#1452](https://github.com/TokTok/c-toxcore/pull/1452) Add execution trace option for debugging. - [#1444](https://github.com/TokTok/c-toxcore/pull/1444) Set up release-drafter to automatically draft the next release. - [#1443](https://github.com/TokTok/c-toxcore/pull/1443) Allow test coverage to fluctuate 2% up and down, but not below 80%. - [#1442](https://github.com/TokTok/c-toxcore/pull/1442) Add CODEOWNERS and settings.yml files. - [#1441](https://github.com/TokTok/c-toxcore/pull/1441) [ImgBot] Optimize images - [#1439](https://github.com/TokTok/c-toxcore/pull/1439) Fix continuous integration builds. - [#1437](https://github.com/TokTok/c-toxcore/pull/1437) Rework the toxchat/bootstrap-node Docker image. - [#1435](https://github.com/TokTok/c-toxcore/pull/1435) Enable TCP relay test in Bazel and autotools build. - [#1434](https://github.com/TokTok/c-toxcore/pull/1434) Skip invalid TCP relays and DHT nodes when loading save data. - [#1433](https://github.com/TokTok/c-toxcore/pull/1433) Fix saving of combination of loaded and connected TCP relays - [#1430](https://github.com/TokTok/c-toxcore/pull/1430) Invert `not_valid` functions and name them `is_valid`. - [#1429](https://github.com/TokTok/c-toxcore/pull/1429) Fix things not being initialized if creating a TCP-only network - [#1426](https://github.com/TokTok/c-toxcore/pull/1426) Remove tokstyle exemptions from build files. - [#1425](https://github.com/TokTok/c-toxcore/pull/1425) Stop using the "inline namespace" feature of apidsl. - [#1424](https://github.com/TokTok/c-toxcore/pull/1424) Add new semi-private API functions to set per-packet-id custom handlers. - [#1423](https://github.com/TokTok/c-toxcore/pull/1423) Give CI workflow a better name: clang-sanitizers - [#1422](https://github.com/TokTok/c-toxcore/pull/1422) Use public API for sending in RTP - [#1421](https://github.com/TokTok/c-toxcore/pull/1421) Install ci-tools and get tokstyle via the script it provides. - [#1420](https://github.com/TokTok/c-toxcore/pull/1420) Use tox public API for sending packets in toxav BWController - [#1419](https://github.com/TokTok/c-toxcore/pull/1419) Remove newlines from the end of LOGGER format strings. - [#1418](https://github.com/TokTok/c-toxcore/pull/1418) Change ToxAVCall struct mutex to a more distinct name - [#1417](https://github.com/TokTok/c-toxcore/pull/1417) Create own instance of Mono_Time for ToxAV - [#1416](https://github.com/TokTok/c-toxcore/pull/1416) Stop using Messenger's mono_time in bandwidth controller. - [#1415](https://github.com/TokTok/c-toxcore/pull/1415) Fix 2 memory leaks in ToxAV. - [#1414](https://github.com/TokTok/c-toxcore/pull/1414) Show function names in asan/tsan stack traces on CircleCI. - [#1413](https://github.com/TokTok/c-toxcore/pull/1413) Make afl_toxsave.c a bit more portable; fix memory leak. - [#1411](https://github.com/TokTok/c-toxcore/pull/1411) Fixes towards building on MSVC. - [#1409](https://github.com/TokTok/c-toxcore/pull/1409) Mark conference test as small. - [#1407](https://github.com/TokTok/c-toxcore/pull/1407) Add minimal save generator - [#1406](https://github.com/TokTok/c-toxcore/pull/1406) Migrate format-source script to new apidsl web app. - [#1404](https://github.com/TokTok/c-toxcore/pull/1404) Smarter setup of bazel remote cache on Cirrus CI. - [#1331](https://github.com/TokTok/c-toxcore/pull/1331) Add basic test adapter for AFL ### Closed issues: - [#1365](https://github.com/TokTok/c-toxcore/issues/1365) Add the option to use LAN discovery even when using a proxy for remote connections - [#1353](https://github.com/TokTok/c-toxcore/issues/1353) libtoxdns.a and libtoxav.a - [#86](https://github.com/TokTok/c-toxcore/issues/86) Freenet as Offline Messaging Backend ## v0.2.11 ### Merged PRs: - [#1405](https://github.com/TokTok/c-toxcore/pull/1405) Release 0.2.11 - [#1403](https://github.com/TokTok/c-toxcore/pull/1403) Install libsodium from apt instead of from source. - [#1402](https://github.com/TokTok/c-toxcore/pull/1402) Remove bazel build from Travis. - [#1400](https://github.com/TokTok/c-toxcore/pull/1400) Disable bazel remote cache on CI. - [#1399](https://github.com/TokTok/c-toxcore/pull/1399) Periodically try to send direct packets when connected by TCP. - [#1398](https://github.com/TokTok/c-toxcore/pull/1398) Minor cleanup: use `assoc_timeout` function where possible. - [#1397](https://github.com/TokTok/c-toxcore/pull/1397) Check that LOGGER macros are only called with string literals. - [#1396](https://github.com/TokTok/c-toxcore/pull/1396) Make function defns match their decls regarding storage class. - [#1395](https://github.com/TokTok/c-toxcore/pull/1395) Mark file-local function definitions as `static`. - [#1394](https://github.com/TokTok/c-toxcore/pull/1394) Enable remote cache for bazel builds. - [#1393](https://github.com/TokTok/c-toxcore/pull/1393) Add another bootstrap node to the bootstrap test. - [#1392](https://github.com/TokTok/c-toxcore/pull/1392) Clear out old conference connections. - [#1391](https://github.com/TokTok/c-toxcore/pull/1391) Minor cleanups in network code. - [#1390](https://github.com/TokTok/c-toxcore/pull/1390) Avoid casting back and forth between void-ptr. - [#1389](https://github.com/TokTok/c-toxcore/pull/1389) Standardise on having a comma at the end of enums. - [#1388](https://github.com/TokTok/c-toxcore/pull/1388) Fix up comments a bit to start being more uniform. - [#1387](https://github.com/TokTok/c-toxcore/pull/1387) Use rules_cc instead of native cc_library rules. - [#1386](https://github.com/TokTok/c-toxcore/pull/1386) Use spdx license identifier instead of GPL blurb. - [#1383](https://github.com/TokTok/c-toxcore/pull/1383) Pass packet ID to custom packet handlers. - [#1382](https://github.com/TokTok/c-toxcore/pull/1382) Add a mutex lock/unlock inside every public API function. - [#1381](https://github.com/TokTok/c-toxcore/pull/1381) Use `net_pack` instead of casting bytes to ints. - [#1380](https://github.com/TokTok/c-toxcore/pull/1380) Disable FreeBSD travis build until it is fixed. - [#1379](https://github.com/TokTok/c-toxcore/pull/1379) Update and fix FreeBSD setup on Travis-CI - [#1378](https://github.com/TokTok/c-toxcore/pull/1378) Use ninja build system for the cmake-linux build. - [#1376](https://github.com/TokTok/c-toxcore/pull/1376) Remove testing/av_test.c. - [#1375](https://github.com/TokTok/c-toxcore/pull/1375) Add "cimple_test" to the bazel build. - [#1374](https://github.com/TokTok/c-toxcore/pull/1374) Handle invite to existing conference - [#1372](https://github.com/TokTok/c-toxcore/pull/1372) Upgrade bazel to 2.1.1. - [#1371](https://github.com/TokTok/c-toxcore/pull/1371) Bump to astyle-3.1 in travis build. - [#1370](https://github.com/TokTok/c-toxcore/pull/1370) use -1 rather than ~0 in unsigned integer types - [#1362](https://github.com/TokTok/c-toxcore/pull/1362) Workaround for message number saving - [#1358](https://github.com/TokTok/c-toxcore/pull/1358) Allow Bazel to rerun tests marked as flaky - [#1352](https://github.com/TokTok/c-toxcore/pull/1352) Update tests to use a working bootstrap node - [#1349](https://github.com/TokTok/c-toxcore/pull/1349) Fix tox-bootstrapd's README and update Dockerfile - [#1347](https://github.com/TokTok/c-toxcore/pull/1347) Fix pthread_mutex_destroy getting too many arguments - [#1346](https://github.com/TokTok/c-toxcore/pull/1346) Fix most TSAN failures - [#1345](https://github.com/TokTok/c-toxcore/pull/1345) fix concurrency issues in mono_time - [#1343](https://github.com/TokTok/c-toxcore/pull/1343) Fix TSAN failures in tests - [#1334](https://github.com/TokTok/c-toxcore/pull/1334) fix missing group title length check - [#1330](https://github.com/TokTok/c-toxcore/pull/1330) Force IPv4 for cirrus-ci tests - [#1329](https://github.com/TokTok/c-toxcore/pull/1329) bump libsodium version in appveyor.yml - [#1322](https://github.com/TokTok/c-toxcore/pull/1322) Clean-up of group.c code - [#1321](https://github.com/TokTok/c-toxcore/pull/1321) Some small fixes to groups. - [#1299](https://github.com/TokTok/c-toxcore/pull/1299) Add VScode folder to .gitignore - [#1297](https://github.com/TokTok/c-toxcore/pull/1297) Use net_pack/unpack instead of host_to_net. ### Closed issues: - [#1373](https://github.com/TokTok/c-toxcore/issues/1373) handle crashes after group invites - [#1368](https://github.com/TokTok/c-toxcore/issues/1368) Are tox clients also open source - [#1366](https://github.com/TokTok/c-toxcore/issues/1366) Generate a link for websites (Friendship and proxy) - [#1354](https://github.com/TokTok/c-toxcore/issues/1354) Unstable Tests - [#1316](https://github.com/TokTok/c-toxcore/issues/1316) Documentation claims toxav_iteration_interval is threadsafe but it's not - [#1274](https://github.com/TokTok/c-toxcore/issues/1274) build error - [#850](https://github.com/TokTok/c-toxcore/issues/850) GPG App Usage

The application has been translated in 4 new languages: - Portuguese (#134) - Russian (#151) - Korean (#128) - Turkish (#139) ...the total number of supported languages is now 13 Improvements - Changed adapter buttons format and improved volume slider layout (see #119 for more details or to give me further suggestions) - Scrollbars are now highlighted when hovering on the respective scrollable area - Set up iced_glow feature on branch glow-renderer to overcome unsupported graphics (#155) - Modified dependabot configuration to update GitHub Actions as needed (#141) Fixes - Fixed problem causing a crash on macOS when starting Sniffnet's Homebrew package or building from source in release mode (#109 - #137)

- Add configurable hooks in templates (#150). This allows you to specify arbitrary hooks for a plugin that can be used in templates. These are specified under `plugins.<name>.hooks`. The default `source` templates have been updated to support hooks with the names `pre` and `post`. The `pre` hook will be inserted before the plugin is sourced and the `post` after the plugin is sourced. If you are using a custom template like `defer` it will need to be updated to support hooks. For example this can be used to set variables after a plugin is sourced. [plugins.enhancd] github = "b4b4r07/enhancd" [plugins.enhancd.hooks] post = 'export ENHANCD_HOOK_AFTER_CD = "ls"' - Add --non-interactive option to suppress prompts (#163). This option is defined as a global option so it must be specified before the subcommand. sheldon --non-interactive init --shell zsh - Add experimental fish shell support (#128). It is now possible to initialize Sheldon to use the Fish shell. sheldon init --shell fish This makes Sheldon change the global matches and templates to be tailored to Fish. Add the following to your Fish config eval "$(sheldon source)" - Fix 'PermissionDenied' during rename of temporary clone directory (#162).

# sass 0.4.6 * Close #127: Removed a compilation warning on Windows w/ gcc-12. (#128) # sass 0.4.5 ## Improvements * Close #122: Upgrade LibSass dependency from v3.6.4 to v3.6.5. (#123) # sass 0.4.4 ## Improvements * Close #116: Remove hard-coded lstdc++ flag from Makevars. (#118) # sass 0.4.3 ## Improvements * Close #113: Get rid of C++ warning during package installation about sprintf() being deprecated. (#114) # sass 0.4.2 ## Bug fixes * `sass()` no longer encounters a false positive cache hit when `sass_file()` is used inside a `sass_bundle()`. (#107, #108) * `font_google()` no longer produces a directory name with a `_` prefix (which was causing the directory to be ignored when deployed to GitHub Pages). (#105, #106) # sass 0.4.1 ## Improvements * Several speed improvements for `sass()` and `as_sass_layer()`, particularly when `sass(write_attachments = TRUE)` encounters a `cache` hit. (#98) 0 * Removed compilation warnings with gcc-12. (#100) * Removed linking errors that occur when custom C++ flags are used to compile (#94, #104).

Wrappers 1.4.4 | Solver 1.4.2 | 15/07/2022 ------------------------------------------ - fix timing in shared data release procedure PR #149 - revert use of nullpointer introduced in #142 Its use is not necessary anymore in 3.11.0-beta.4 and used to cause issues on some platforms (see #144 ) PR #145 Wrappers 1.4.3 | Solver 1.4.1 | 13/06/2022 ------------------------------------------ - add support for Python 3.11 PR #142 - do not install tests PR #143 - fix packaging for latest setuptools PR #140 Wrappers 1.4.2 | Solver 1.4.1 | 28/03/2022 ------------------------------------------ - fix an issue with setuptools configuration PR #134 Wrappers 1.4.1 | Solver 1.4.1 | 27/03/2022 ------------------------------------------ - add missing include PR #129 - re-organize the Python binding sources to properly ship type hints PR #131 Wrappers 1.4.0 | Solver 1.4.0 | 14/03/2022 ------------------------------------------ - make installation PEP517 compliant PR #125 - add type hints PR #125 - add Constraint::violated() method PR #128 - make the the c++ part of the code c++20 compliant PR #120 - test with c++11 and c++20 PR #120

@AmmarAbouZor

What's Changed [Aeruginous] Create CHANGELOG Fragment by @github-actions in #110 Chore: Bump clap from 4.3.11 to 4.3.14 by @dependabot in #113 Chore: Bump sqlx from 0.7.0 to 0.7.1 by @dependabot in #112 Chore: Bump thiserror from 1.0.40 to 1.0.43 by @dependabot in #111 Chore: Bump anyhow from 1.0.71 to 1.0.72 by @dependabot in #115 Chore: Bump scopeguard from 1.1.0 to 1.2.0 by @dependabot in #114 Fix: Release GitHub Action by @AmmarAbouZor in #116 [Aeruginous] Create CHANGELOG Fragment by @github-actions in #117 Changed: Optimization for app main loop by @AmmarAbouZor in #118 [Aeruginous] Create CHANGELOG Fragment by @github-actions in #119 Chore: Bump async-trait from 0.1.69 to 0.1.72 by @dependabot in #120 Chore: Bump thiserror from 1.0.43 to 1.0.44 by @dependabot in #121 Chore: Bump serde_json from 1.0.100 to 1.0.104 by @dependabot in #126 Chore: Bump clap from 4.3.14 to 4.3.19 by @dependabot in #123 Chore: Bump serde from 1.0.171 to 1.0.178 by @dependabot in #125 Chore: Bump serde from 1.0.178 to 1.0.180 by @dependabot in #127 Chore: Bump serde from 1.0.180 to 1.0.183 by @dependabot in #129 Chore: Bump Swatinem/rust-cache from 2.5.1 to 2.6.0 by @dependabot in #128 Fix: Fix SQLite connection string path by @AmmarAbouZor in #137 [Aeruginous] Create CHANGELOG Fragment by @github-actions in #138 Chore: Bump tokio from 1.29.1 to 1.31.0 by @dependabot in #136 Chore: Bump async-trait from 0.1.72 to 0.1.73 by @dependabot in #135 Chore: Bump Swatinem/rust-cache from 2.6.0 to 2.6.1 by @dependabot in #132 Chore: Bump log from 0.4.19 to 0.4.20 by @dependabot in #134 Chore: Bump clap from 4.3.19 to 4.3.21 by @dependabot in #133 [Aeruginous] Assemble CHANGELOG by @github-actions in #139

Change log: 1.1.0 (2023-08-22) ===== - Update copyright year - Allow passing arguments to custom commands - Fully translate strings in unsafe paste dialog - window: Properly sync always-show-tabs - cleanup: Include gdkx.h in one place - preferences: Remove unused class member - preferences: Check if channel itself exists instead of check property - screen: Review image loader memory management - image-loader: Review cache management - Add keywords to .desktop files (Fixes #50) - screen: Take window scaling into account when drawing (Fixes #71) - Remove obsolete GNOME default-app file (Fixes #109) - Add "Open File Manager Here" action (Fixes #133) - Properly manage default encoding (Fixes #128) - Move general include in private.h - dropdown: Disable systray icon on Wayland - Fix startup with GDK_BACKEND=x11 (Fixes #177) - shortcuts: Restore broken action toggle-menubar - shortcuts: Fix non-consumed key event for show-menubar - main: Allow GTK to parse its options first (Fixes #216) - search: Add missing sanity check - Use GLib logging functions and do not translate warnings - Fix typo - Remove obsolete CHECK_VERSION() - Use g_new() instead of malloc() - Fix Xfconf memory management - search-dialog: Fix memory leak - Remove extra separator at the end of context menu - Missing shortcut keys in the standalone preferences dialog (Issue #198) - Apply 1 suggestion(s) to 1 file(s) - Enable kinetic scrolling in VteTerminal - Extend --disable-server description wrt. process model - End all full sentences with a period - Drop obsolete --disable-server translations - prefs-dialog: Fix untranslated strings - Add sixel support - Add icons at missing sizes, clean up SVG metadata - build: Fix autoconf warnings - build: Add GLib requirement - Add accel entries for scrolling pages (Issue #221) - Remove documentation for dead anti-aliasing option - Make strings translatable (Issue #222) - Fix shortcuts-editor include - Indentation - Support hyperlinks (Issue #21) - fix typo - Fix argument type for xfce_shortcuts_editor_new - fix background_notify - fixed typo - Remove disable-help preference. - MR: !51 transitioned to Xfconf (#134) - typos in MR !48 fixed - Remove all references to terminal-preferences.glade - Remove one more mention of terminal-preferences.glade - Remove trailing slash - Remove terminal-preferences-ui.h from makefile - Remove terminal-preferences.glade - MR: !48 shortcuts editor embedded into preferences-dialog (#195) - MR: !48 preferences-dialog rewritten in C (#195) - MR: !46 Change in implementation for TAB accels (#150) - Implementation of MiscShiftArrowsToScroll as accelerators. - Add PCRE2 build dependency - Remove libxfce4ui 4.17 version guards - Replace with xfce_gtk_menu_append_separator - Tweak toolbar - Translation Updates: , Albanian, Arabic, Armenian (Armenia), Basque, Belarusian, Bulgarian, Catalan, Chinese (China), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, Eastern Armenian, English (Australia), English (United Kingdom), Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian, Japanese, Kazakh, Korean, Lithuanian, Malay, Norwegian Bokmål, Occitan (post 1500), Persian (Iran), Polish, Portuguese, Portuguese (Brazil), Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish, Ukrainian

@gy-balint

Added Add Hungarian localization (#131) @gy-balint Revise Turkish localization (#139) @geekdinazor Translate "thousand" to "千" for zh_CN (#127) @dofine Changed Update docs link to https://humanize.readthedocs.io (#128) @hugovk Fixed Move logic to convert aware datetime to naive into function (#123) @ErikKalkoken Docs: fix formatting of return value (#137) @hugovk

1.5.0 (2023-08-25) * Fix to prevent distutils deprecation warning (#159) (Christopher Dilks) * Drop Python 2.7 support * Fix memory leak of Python objects. (#129) This should fixes #128 and maybe also fixes #164. (mknkmyza)

@sxyazi

This is the biggest update ever, with 36 new features, 24 bug fixes, and 3 performance improvements. Thank you to every contributor for making Yazi better and better! What's Changed feat: add Mintty (Git Bash) image preview support by @sxyazi in #103 refactor: use Url instead of PathBuf by @sxyazi in #107 fix: mime of javascript by @XYenon in #106 perf: load large folders in chunks by @sxyazi in #117 fix: set cursor block after closing input prompt from insert mode by @auvred in #109 fix: doesn't redirect the stderr of the clipboard command to null by @sxyazi in #119 feat: suspend process (Ctrl-Z) by @sxyazi in #120 fix: notification of file changes in linked directories by @sxyazi in #121 feat: file size sorting under the simplified file system by @sxyazi in #123 fix: show_hidden not properly applied to hovered folder by @sxyazi in #124 fix: recognize symlink directories as files by @sxyazi in #125 fix: respect symlink paths without canonicalizing them by @sxyazi in #126 feat: make Input streamable by @sxyazi in #127 perf: doesn't wait for the process of killing by @sxyazi in #128 feat: find by @sxyazi in #104 feat: tab-specific sorting by @sxyazi in #131 feat: new V, D, C keybinding for Input component by @sxyazi in #139 fix: swap description for search commands by @knutwalker in #141 fix: image position calculation by @sxyazi in #144 feat: support for image preview within tmux by @sxyazi in #147 feat: show keywords when in search mode by @sxyazi in #152 feat: fallback to built-in highlighting if jq is not installed by @ndtoan96 in #151 feat: make the glob expr case insensitive by default, and prepend \s to make it sensitive by @sxyazi in #156 fix: check relative path on expand_path by @sxyazi in #165 feat: support for FreeBSD permission type by @yggdr in #169 feat: multiple openers for a single rule by @Linus789 in #154 fix: leave upwards only if an IO error occurs in current by @sxyazi in #172 docs: add archlinuxcn installation guide by @Integral-Tech in #176 fix: image preview not working on Zellij by @Eric-Song-Nop in #181 feat: make trash optional by @sxyazi in #178 fix: inconsistent Shift key behavior on Unix and Windows by @ndtoan96 in #174 feat: new force option added for the remove command, which does not show the confirmation dialog on trashing/deleting by @sxyazi in #173 fix: typo of LICENSE file by @conradojordan in #201 feat: add flake.nix by @XYenon in #205 feat: include ignored files on search when hidden files are shown by @PhotonQuantum in #212 feat: new orphan option for opener rules, to keep the process running even when Yazi exited by @sxyazi in #216 feat: scroll half/full page with arrow percentage supported, and new Vi-like <C-u>, <C-d>, <C-b>, and <C-f> keybindings added by @TD-Sky in #213 feat: highlight matching words on finding by @PhotonQuantum in #211 feat: add BackTab support by @sxyazi in #209 fix: set stdio to null when orphan is true by @sxyazi in #229 feat: new force option for creating and renaming by @sxyazi in #208 feat: loop through to find by @ndtoan96 in #234 feat: backward/forward by @ndtoan96 in #230 perf: reimplement optimized natural sorting algorithm, speed up ~6 times for case-insensitive sorting by @sxyazi in #237 chore: changing the finding key to n/N to keep with Vim's conventions by @sxyazi in #238 feat: added new options to the `find' command for smart-case/ case-insensitive finds by @ndtoan96 in #240 feat: add new --no-cwd-file option to quit command for flexible cwd-file setting by @XOR-op in #245 fix: avoid adding non-regular paths to backstack by @ndtoan96 in #249 fix: support RGBA16 images by @sxyazi in #250 feat: support trash for NetBSD by @sxyazi in #251 feat: support environment variable in cd path by @ndtoan96 in #241 feat: new theme system by @sxyazi in #161 fix: cannot cd if there is whitespace in path by @ndtoan96 in #255 fix: add application/x-wine-extension-ini to text mime by @ndtoan96 in #259 fix: collect and fix all hard coded themes and color by @Eric-Song-Nop in #221 fix: some colors not readable in light mode by @sxyazi in #264 feat: better file hover state by @sxyazi in #269 refactor: split commands into separate files by @sxyazi in #272 feat: cancel selected items automatically on entering, leaving, copying, or cutting by @sxyazi in #273 feat: add a new Bar component, and make border styles customizable by @sxyazi in #278 fix: adapt another $TERM value of foot-extra for foot by @sxyazi in #277 refactor: simplify building conditions by @sxyazi in #280 chore: add git rev to nix pkg version by @XYenon in #206 feat: new Manager component for better style extensions by @sxyazi in #284 feat: cross-system opener rule support by @sxyazi in #289 fix: delegate the SIGINT signal of processes with orphan=true to their parent by @sxyazi in #290 feat: line mode by @sxyazi in #291 feat: shell completions & auto releasing by @TD-Sky in #282

1.10.14 (2023-11-26) Changelog: * PR #112: Put glue and pieces parameters to implode in correct order for PHP 7.4+ * PR #121: Fix PHP bug 81653: Typo in install-pear-nozlib.phar * PR #122: add %S EXPECTF capability * PR #124: Fix: Creation of dynamic property PEAR_Error::$callback is deprecated * PR #125: Fixed extension loaded check for pecl binaries * PR #126: Remove -n option from pecl.bat for shared extensions * PR #127: fix Using ${var} in strings is deprecated * PR #128: fix lingering license references to PHP license * PR #129: Exclude tests from composer classmap * PR #131: fix private lastError name

18.0.0 (2022-03-24) Added * Support for EcmaScript modules (aka ESM) (#1756) * New optional name property on the Hook schema (#1914) Changed * JSON Schema: some array fields now have "minItems": 1. * Generate Java code that uses Optional in getters. * Setters are removed. * Classes without required fields have public empty constructors, and static of methods for each field. (#1858 aslakhellesoy) * Java: Make this library more null safe. 19.0.0 (2022-05-31) Added * Expand the messages protocol with keyword types (#1966) Changed * [Java] the PickleStep constructor has changed - it now needs an extra PickleStepType argument. * [Java] the Step constructor has changed - it now needs an extra StepKeywordType argument. 19.1.0 (2022-06-20) Added * [Javascript] Adding the json schemas of the messages to the NPM package (PR#2010) 19.1.1 (2022-06-22) Fixed * [Javascript] Schema are actually missing from 19.1.0 (PR#2016) 19.1.2 (2022-06-22) Fixed * [Javascript] Schema was still missing in 19.1.1 due to how npm manages the files attribute in package.json (PR#2020) 19.1.3 (2022-09-20) Fixed * Add name field to package.cjs.json (#36) 19.1.4 (2022-09-22) Changed * Update dependencies 20.0.0 (2022-11-14) Changed * Add workerId field to TestCaseStarted message (#34) * [Java] Enabled reproducible builds Fixed * Change Go module name to match repo (#101) 21.0.0 (2022-12-17) Added * [Java] Add javadoc to messages (#124) Changed * Add exception to TestStepFinished TestRunFinished (#122) 21.0.1 (2022-12-17) Fixed * [Java] Suppress warnings for missing javadoc (#128) 22.0.0 (2023-04-06) Added * Added source reference to parameter type (#45) Fixed * Corrected Java and PHP generators to allow running using Docker on Windows (#146) 23.0.0 (2023-11-01) Added * Added C++ implementation (#152) Changed * [Ruby] Updated minimum Ruby version to 2.5 - (#177 luke-hill) 24.0.0 (2023-11-24) Added * Add stackTrace prop to Exception message (#182)

Changelog: ### GMime 3.2.15 * Fixed the g_mime_object_get_header API definition to note that it can return null * Fixed a memory leak in address_parse() (issue #159) * Added custom header folding logic for the Newsgroups: header (issue #162) * Fixed a configure issue regarding ac_cv_sys_file_offset_bits (issue #158) * Fixed an infinite loop in the Content-Type and Content-Disposition parameter serialization logic (issue #165) ### GMime 3.2.14 * Avoid clearing the header list of a GMimeMessage when adding addresses to an address header. (issue #129) * Added the internet_address_list_append_parse() prototype definition to internet-address.h. (issue #128) * Use gtk-doc ulink syntax in doc comments instead of `<a href=...>`. (issue #131) * Fixed rfc2047 token decoding logic for base64 encodings. (issue #133) * Properly handle GDateTime UTC offsets with non-zero seconds. (issue #134) * Improved introspection data for bindings such as Vala. * Improved address name quoting. * Added a GNotifyDestroy to the GMimeParserOptions callback. * Fixed the URL linkifier logic to properly handle links without a '/' before the query string. * Fixed the URL linkifier logic to handle domains that start with numbers. (issue #152) * Reverted base64 decoder optimizations from 3.2.10 and 3.2.11 to support chunked base64. (issue #150) ### GMime 3.2.13 * Optimized parsing of messages with lots of address headers. (issue #126) ### GMime 3.2.12 * Fixed a memory leak in g_mime_gpgme_get_decrypt_result(). * Updated vapigen.m4, introspection.m4, and gpgme.m4 to improve cross-platform builds. * Add and use ax_lib_socket_nsl.m4 so that systems that do not require linkage with libnsl are not forced to link with it unnecessesarily. * Changed the build system to no longer use dolt (which is obsolete). ### GMime 3.2.11 * Fixed a bug in the base64 decoder. D'oh! ### GMime 3.2.10 * Improved performance of base64 encoder by ~5%. * Improved performance of base64 decoder by ~25%. * Unref the autocrypt header after adding it to the list. (issue #118) * Work around a bug in g_time_zone_new_offset() by using identifiers instead. (issue #120) ### GMime 3.2.9 * g_mime_multipart_signed_verify() now allows type/subtype and type/x-subtype signature parts. (issue #115) * Fixed header folding logic to avoid folding the first line of a header value. (issue #112 and issue #113) * Fixed bugs discovered by static analysis. (issue #110) * Fixed GMimeStreamPipe to set errno to ESPIPE for seek/tell/length methods. * Fixed GMimeCertificates to prefer gpgme_user_id_t's address field over the email field. (issue #102) ### GMime 3.2.8 * Various fixes to Vala (and other?) language bindings. (issue #96 and issue #101) * Enabled build for PPC64LE architecture (issue #100) * Added g_mime_object_write_content_to_stream() (issue #97) * Fixed parameter list parsing logic to not report a warning when everything is valid. * Fixed the parser to handle MIME parts without headers -or- content of any kind.

1.65 -- 2024-08-06 [BUGFIXES] * Update exotic names test to avoid single quote package separator (GH #128) * Don't loop forever in uniqnum.t (GH #130)

Changelog: da30b211 Version 2.9.31 2e01fce4 Bugfix: #128 - Crash when replacing a MapCenter with another map 81974822 Version 2.9.30 d5f7fc05 Bugfix: #126 Save user flags in XML export a4347c29 Add io.github.insilmaril.vym.appdata.xml (#123) b6182c6c Added Evgeniy Nochevnov for Russian translations e01bff3f Update vym.ru.ts (#115) 8f4e86ca Version 2.9.28

@olleolleolle

1.8.2 (2024-09-24) What's Changed * Drop commented-out line by @olleolleolle in #108 * Add Ruby 3.1 & 3.2 to CI matrix by @tricknotes in #109 * Fix/redos by @ooooooo-q in #114 * Raise HTTPStatus::BadRequest for requests with invalid/duplicate content-length headers by @jeremyevans in #120 * Bump actions/checkout from 3 to 4 by @dependabot in #121 * Improve CI by @hsbt in #123 * Fix WEBrick::TestFileHandler#test_short_filename test not working on mswin by @KJTsanaktsidis in #128 * Fix bug chunk extension detection by @jeremyevans in #125 * Fix CI. by @ioquatix in #131 * Merge multiple cookie headers, preserving semantic correctness. by @ioquatix in #130 * Test on macos-latest by @byroot in #132 * Require CRLF line endings in request line and headers by @jeremyevans in #138 * Prefer squigly heredocs. by @ioquatix in #143 * Only strip space and horizontal tab in headers by @jeremyevans in #141 * Treat missing CRLF separator after headers as an EOFError by @jeremyevans in #142 * Return 400 response for chunked requests with unexpected data after chunk by @jeremyevans in #136 * Fix reference to URI::REGEXP::PATTERN::HOST by @casperisfine in #144 * Prevent request smuggling by @jeremyevans in #146 New Contributors * @tricknotes made their first contribution in #109 * @ooooooo-q made their first contribution in #114 * @KJTsanaktsidis made their first contribution in #128 * @byroot made their first contribution in #132 * @casperisfine made their first contribution in #144

Fixes remotecode exec CVE with ghostscript

ea47436

Backports ghostscript-gpl from trunk which has a few more CVE fix patches applied. Adds a patch that fixes issue that has been exploited in the wild (exploit is in metasploit) by applying the patch that debian ship

jperkin pushed a commit that referenced this pull request Aug 8, 2018

ghostscript-gpl: Backport CVE-2017-8291

78277af

Pulled from #128 with minor modifications.

jperkin closed this Aug 8, 2018

jperkin pushed a commit that referenced this pull request May 1, 2022

Update to 1.58

c5ada66

Upstream changes: Changes for version 1.58 - 2022-04-18 Fixed tests so that they ignore the value set in the `PERL_DATETIME_DEFAULT_TZ` env var, if one exists. Reported by Ian Gibbs. GH #128.

jperkin pushed a commit that referenced this pull request Sep 1, 2022

textproc/ruby-rqrcode: update to 2.1.2

a10e7a2

2.1.2 (2022-07-26) * Remove setup script as it just calls bundle install [#128] * Change inline styles to the fill property to allow for strict CSP style-src directive [#127]

jperkin pushed a commit that referenced this pull request Aug 24, 2024

p5-Scalar-List-Utils: update to 1.65.

55fb894

1.65 -- 2024-08-06 [BUGFIXES] * Update exotic names test to avoid single quote package separator (GH #128) * Don't loop forever in uniqnum.t (GH #130)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fixes remotecode exec CVE with ghostscript #128

Fixes remotecode exec CVE with ghostscript #128

stevenwilliamson commented Jul 17, 2018

jperkin commented Aug 8, 2018

Fixes remotecode exec CVE with ghostscript #128

Fixes remotecode exec CVE with ghostscript #128

Conversation

stevenwilliamson commented Jul 17, 2018

jperkin commented Aug 8, 2018