dehydrated-0.4.0nb1 fails to find Replay-Nonce header if fetch is done via HTTP/2 #226

drboone · 2019-10-02T18:20:19Z

If dehydrated does a fetch from an acme server, and the transaction is completed using HTTP/2, the returned headers may not be in the same case (e.g. may be all lower case) as the script is grepping for.

dehydrated-io/dehydrated@e4e712c

Output when this happens includes:

  + Requesting challenge for x.y.org...
  + ERROR: An error occurred while sending post-request to https://acme-v01.api.letsencrypt.org/acme/new-authz (Status 400)

Details:
{
  "type": "urn:acme:error:badNonce",
  "detail": "JWS has no anti-replay nonce",
  "status": 400
}

Could this package be updated? In addition to this bug fix, it appears to include new features like wildcard support and alpn validation.

The text was updated successfully, but these errors were encountered:

SoftHSM2 is not a drop-in replacement for SoftHSM version 1, so this is added as a separate package. See softhsm2-migrate(1) for migration instructions. Upstream changes since SoftHSM version 1.x: SoftHSM 2.5.0 - 2018-09-24 * Issue #323: Support for EDDSA with vendor defined mechanisms. (Patch from Francis Dupont) * Issue #362: CMake Build System Support for SoftHSM. (Patch from Constantine Grantcharov) * Issue #368: Support migrating 32-bit SoftHSMv1 DB on 64-bit system (LP64). * Issue #385: Default is not to build EDDSA since it has not been released in OpenSSL. * Issue #387: Windows: Add VS2017 detection to Configure.py. (Patch from Jaroslav Imrich) * Issue #412: Replace PKCS11 headers with a version from p11-kit. (Patch from Alexander Bokovoy) Bugfixes: * Issue #366: Support cross-compilation. (Patch from Michael Weiser) * Issue #377: Duplicate symbol error with custom p11test. * Issue #386: Use RDRAND in OpenSSL if that engine is available. * Issue #388: Update DBTests.cpp to fix x86 test failure. (Patch from tcely) * Issue #393: Not setting CKA_PUBLIC_KEY_INFO correctly. (Patch from pkalapat) * Issue #401: Wrong key and keyserver mentioned in installation documentation. (Patch from Berry A.W. van Halderen) * Issue #408: Remove mutex callbacks after C_Finalize(). (Patch from Alexander Bokovoy) SoftHSM 2.4.0 - 2018-02-27 * Issue #135: Support PKCS#8 for GOST. * Issue #140: Support for CKA_ALLOWED_MECHANISMS. (Patch from Brad Hess) * Issue #141: Support CKA_ALWAYS_AUTHENTICATE for private key objects. * Issue #220: Support for CKM_DES3_CMAC and CKM_AES_CMAC. * Issue #226: Configuration option for Windows build to enable build with static CRT (/MT). * Issue #325: Support for CKM_AES_GCM. * Issue #334: Document that initialized tokens will be reassigned to another slot (based on the token serial number). * Issue #335: Support for CKM_RSA_PKCS_PSS. (Patch from Nikos Mavrogiannopoulos) * Issue #341: Import AES keys with softhsm2-util. (Patch from Pavel Cherezov) * Issue #348: Document that OSX needs pkg-config to detect cppunit. * Issue #349: softhsm2-util will check the configuration and report any issues before loading the PKCS#11 library. Bugfixes: * Issue #345: Private objects are presented to security officer in search results. * Issue #358: Race condition when multiple applications are creating and reading object files. SoftHSM 2.3.0 - 2017-07-03 * Issue #130: Upgraded to PKCS#11 v2.40. * Minor changes to some return values. * Added CKA_DESTROYABLE to all objects. Used by C_DestroyObject(). * Added CKA_PUBLIC_KEY_INFO to certificates, private, and public key objects. Will be accepted from application, but SoftHSM will currently not calculate it. * Issue #142: Support for CKM_AES_CTR. * Issue #155: Add unit tests for SessionManager. * Issue #189: C_DigestKey returns CKR_KEY_INDIGESTIBLE when key attribute CKA_EXTRACTABLE = false. Whitelist SHA algorithms to allow C_DigestKey in this case. * Issue #225: Show slot id after initialization. * Issue #247: Run AppVeyor (Windows CI) for each PR and merge. * Issue #257: Set CKA_DECRYPT/CKA_ENCRYPT flags on key import to true. (Patch from Martin Domke) * Issue #261: Add support for libeaycompat lib for FIPS on Windows. (Patch from Matt Hauck) * Issue #262: Support importing ECDSA P-521 in softhsm-util. * Issue #276: Support for Botan 2.0. * Issue #279: Editorial changes from Mountain Lion to Sierra. (Patch from Mike Neumann) * Issue #283: More detailed error messages when initializing SoftHSM. * Issue #285: Support for LibreSSL. (Patch from Alon Bar-Lev) * Issue #286: Update .gitignore. (Patch from Alon Bar-Lev) * Issue #291: Change to enable builds and reports on new Jenkinks environment. * Issue #293: Detect cppunit in autoconf. (Patch from Alon Bar-Lev) * Issue #309: CKO_CERTIFICATE and CKO_PUBLIC_KEY now defaults to CKA_PRIVATE=false. * Issue #314: Update README with information about logging. * Issue #330: Adjust log levels for failing to enumerate object store. (Patch from Nikos Mavrogiannopoulos) Bugfixes: * Issue #216: Better handling of CRYPTO_set_locking_callback() for OpenSSL. * Issue #265: Fix deriving shared secret with ECC. * Issue #280: HMAC with sizes less than L bytes is strongly discouraged. Set a lower bound equal to L bytes in ulMinKeySize and check it when initializing the operation. * Issue #281: Fix test of p11 shared library. (Patch from Lars Silvén) * Issue #289: Minor fix of 'EVP_CipherFinal_ex'. (Patch from Viktor Tarasov) * Issue #297: Fix build with cppunit. (Patch from Ludovic Rousseau) * Issue #302: Export PKCS#11 symbols from the library. (Patch from Ludovic Rousseau) * Issue #305: Zero pad key to fit the block in CKM_AES_KEY_WRAP. * Issue #313: Detecting CppUnit when using Macports. (Patch from mouse07410) SoftHSM 2.2.0 - 2016-12-05 * Issue #143: Delete a token using softhsm2-util. * Issue #185: Change access mode bits for /var/lib/softhsm/tokens/ to 1777. All users can now create tokens, but only access their own. (Patch from Rick van Rein) * Issue #186: Reinitializing a token will now keep the token, but all token objects are deleted, the user PIN is removed and the token label is updated. * Issue #190: Support for OpenSSL 1.1.0. * Issue #198: Calling C_GetSlotList with NULL_PTR will make sure that there is always a slot with an uninitialized token available. * Issue #199: The token serial number will be used when setting the slot number. The serial number is set after the token has been initialized. (Patch from Lars Silvén) * Issue #203: Update the command utils to use the token label or serial to find the token and its slot number. * Issue #209: Possibility to test other PKCS#11 implementations with the CppUnit test. (Patch from Lars Silvén) * Issue #223: Mark public key as non private by default. (Patch from Nikos Mavrogiannopoulos) * Issue #230: Install p11-kit module, to disable use --disable-p11-kit. (Patch from David Woodhouse) * Issue #237: Add windows continuous integration build. (Patch from Peter Polacko) Bugfixes: * Issue #201: Missing new source file and test configuration in the Windows build project. * Issue #205: ECDSA P-521 support for OpenSSL and better test coverage. * Issue #207: Fix segmentation faults in loadLibrary function. (Patch from Jaroslav Imrich) * Issue #215: Update the Homebrew install notes for OSX. * Issue #218: Fix build warnings. * Issue #235: Add the libtool install command for OSX. (Patch from Mark Wylde) * Issue #236: Use GetEnvironmentVariable instead of getenv on Windows. (Patch from Jaroslav Imrich) * Issue #239: Crash on module unload with OpenSSL. (Patch from David Woodhouse) * Issue #241: Added EXTRALIBS to Windows utils project. (Patch from Peter Polacko) * Issue #250: C++11 not detected. * Issue #255: API changes in Botan 1.11.27. * Issue #260: Fix include guard to check WITH_FIPS. (Patch from Matt Hauck) * Issue #268: p11test fails on 32-bit systems. * Issue #270: Build warning about "converting a string constant". * Issue #272: Fix C++11 check to look for unique_ptr. (Patch from Matt Hauck) SoftHSM 2.1.0 - 2016-03-14 * Issue #136: Improved guide and build scripts for Windows. (Thanks to Jaroslav Imrich) * Issue #144: The password prompt in softhsm2-util can now be interrupted (ctrl-c). * Issue #166: Add slots.removable config option. (Patch from Sumit Bose) * Issue #180: Windows configure script improvements. (Patch from Arnaud Grandville) Bugfixes: * Issue #128: Prioritize the return values in C_GetAttributeValue. (Patch from Nicholas Wilson) * Issue #129: Fix errors reported by Visual Studio 2015. (Patch from Jaroslav Imrich) * Issue #132: Handle the CKA_CHECK_VALUE correctly for certificates and symmetric key objects. * Issue #154: Fix the Windows build and destruction order of objects. (Patch from Arnaud Grandville) * Issue #162: Not possible to create certificate objects containing CKA_CERTIFICATE_CATEGORY, CKA_NAME_HASH_ALGORITHM, or CKA_JAVA_MIDP_SECURITY_DOMAIN. * Issue #163: Do not attempt decryption of empty byte strings. (Patch from Michal Kepien) * Issue #165: Minor changes after a PVS-Studio code analysis, and C_EncryptUpdate crash if no ciphered data is produced. (Patch from Arnaud Grandville) * Issue #169: One-byte buffer overflow in call to EVP_DecryptUpdate. * Issue #171: Problem while closing library that is initialized but improperly finalized. * Issue #173: Adjust return values for the template parsing. * Issue #174: C_DeriveKey() error with leading zero bytes. * Issue #177: CKA_NEVER_EXTRACTABLE set to CK_FALSE on objects created with C_CreateObject. * Issue #182: Resolve compiler warning. (Patch from Josh Datko) * Issue #184: Stop discarding the global OpenSSL libcrypto state. (Patch from Michal Trojnara) * SOFTHSM-123: Fix library cleanup on BSD. SoftHSM 2.0.0 - 2015-07-17 * SOFTHSM-121: Test cases for C_DecryptUpdate/C_DecryptFinal. * Support C_DecryptUpdate/C_DecryptFinal for symmetric algorithms. (Patch from Thomas Calderon) Bugfixes: * SOFTHSM-120: Segfault after renaming variables. SoftHSM 2.0.0b3 - 2015-04-17 * SOFTHSM-113: Support for Botan 1.11.15 * SOFTHSM-119: softhsm2-util: Support ECDSA key import (Patch from Magnus Ahltorp) * SUPPORT-139: Support deriving generic secrets, DES, DES2, DES3, and AES. Using DH, ECDH or symmetric encryption. Bugfixes: * SOFTHSM-108: A marked as trusted certificate cannot be imported. * SOFTHSM-109: Unused parameter and variable warnings. * SOFTHSM-110: subdir-objects warnings from autoreconf. * SOFTHSM-111: Include FIPS-NOTES.md in dist. * SOFTHSM-112: CKM_AES_KEY_WRAP* conflict in pkcs11.h. * SOFTHSM-114: Fix memory leak in a test script. * SOFTHSM-115: Fix static analysis warnings. * SUPPORT-154: A marked as non-modifiable object cannot be generated. * SUPPORT-155: auto_ptr is deprecated in C++11, use unique_ptr. * SUPPORT-157: Derived secrets were truncated after encryption and could thus not be decrypted. * Mutex should call MutexFactory wrapper functions. (Patch from Jerry Lundstrom) * Return detailed error message to loadLibrary(). (Patch from Petr Spacek) SoftHSM 2.0.0b2 - 2014-12-28 * SOFTHSM-50: OpenSSL FIPS support. * SOFTHSM-64: Updated build script for Windows. * SOFTHSM-100: Use --free with softhsm2-util to initialize the first free token. * SOFTHSM-103: Allow runtime configuration of log level. * SOFTHSM-107: Support for CKM_<symcipher>_CBC_PAD. * Add support for CKM_RSA_PKCS_OAEP key un/wrapping. (Patch from Petr Spacek) * Use OpenSSL EVP interface for AES key wrapping. (Patch from Petr Spacek) * Allow reading configuration file from user's home directory. (Patch from Nikos Mavrogiannopoulos) Bugfixes: * SOFTHSM-102: C_DeriveKey() uses OBJECT_OP_GENERATE. * Coverity found a number of issues. SoftHSM 2.0.0b1 - 2014-09-10 * SOFTHSM-84: Check that all mandatory attributes are given during the creation process. * SOFTHSM-92: Enable -fvisibility=hidden on per default * SUPPORT-137: Implement C_EncryptUpdate and C_EncryptFinal (Patch from Martin Paljak) * Add support for CKM_RSA_PKCS key un/wrapping (Patch from Petr Spacek) Bugfixes: * SOFTHSM-66: Attribute handling when using multiple threads * SOFTHSM-93: Invalid C++ object recycling. * SOFTHSM-95: umask affecting the calling application. * SOFTHSM-97: Check if Botan has already been initialized. * SOFTHSM-98: Handle mandatory attributes for DSA, DH, and ECDSA correctly. * SOFTHSM-99: Binary encoding of GOST values. * SUPPORT-136: softhsm2-keyconv creates files with sensitive material in insecure way. SoftHSM 2.0.0a2 - 2014-03-25 * SOFTHSM-68: Display a better configure message when there is a version of Botan with a broken ECC/GOST/OID implementation. * SOFTHSM-70: Improved handling of the database backend. * SOFTHSM-71: Supporting Botan 1.11. * SOFTHSM-76: Do not generate RSA keys smaller than 1024 bit when using the Botan crypto backend. * SOFTHSM-83: Support CKA_VALUE_BITS for CKK_DH private key object. * SOFTHSM-85: Rename libsofthsm.so to libsofthsm2.so and prefix the command line utilties with softhsm2-. * SOFTHSM-89: Use constants and not strings for signaling algorithms. * SUPPORT-129: Possible to use an empty template in C_GenerateKey. The class and key type are inherited from the generation mechanism. Some mechanisms do however require a length attribute. [SOFTHSM-88] * SUPPORT-131: Support RSA-PSS using SHA1, SHA224, SHA256, SHA384, or SHA512. [SOFTHSM-87] Bugfixes: * SOFTHSM-39: Fix 64 bit build on sparc sun4v. * SOFTHSM-69: GOST did not work when you disabled ECC. * SOFTHSM-78: Correct the attribute checks for a number of objects. * SOFTHSM-80: Prevent segfault in OpenSSL GOST HMAC code. * SOFTHSM-91: Fix a warning from static code analysis. * Fixed a number of memory leaks. SoftHSM 2.0.0a1 - 2014-02-10 This is the first alpha release of SoftHSMv2. It focuses on a higher level of security by encrypting sensitive information and using unswappable memory. There is also a more generalized crypto backend, where you can use Botan or OpenSSL.

Sat Oct 20, 2019: Released Check 0.13.0 based on hash 2b18886a9a9d3bab44917a550d12128ad7e2c197 * configure: optional build documentation Issue #206 (GitHub) * missing <unistd.h> in some files Issue #196 and Issue #186 (GitHub) * Varous documentation improvements * END_TEST is now optional, as how START_TEST works has been redone Issue #158 * Various CMake related changes: - Support exporting Check to other projects with CMake 3 Issue #185 - Shared library support for Visual Studio Issue #220 - Fix wrong library filename Issue #226 - Add support for CMake package registry Issue #227 - CMake build type can now be debug or release Issue #228 - Add checkmk to CMake build.

@Aketzu

# v0.19.4 ## Bugfix - slack: fix regression with slack library (#264) - slack: fix an unexpected panic (#263) # v0.19.3 ## Enhancement * general: Add UPDATELASTVIEWED command, and make DisableAutoView work consistently (#255) * slack: Handle message edits and deletion (#260) * slack: Add handling of reactions, stars and pins (#229) ## Bugfix * mattermost: Fix a panic #247 * mattermost: Fixes incorrect users because of paging. #244 * mattermost: Fix outdated channel issue * mattermost: Add paging so we can see > 200 users in a channel #248 * mattermost: Fix expired session panic #259 * general: Fix datarace #246 * general: Fix empty JoinInclude * general: Fix panic #257 This release couldn't exist without the following contributors: @Aketzu, @bucko909, @42wim # v0.19.2 ## Enhancement * general: Add a default value matterirc.toml for the '-conf' flag (#240) * slack: library updated * mattermost: library updated * mattermost: Add support for channel created/deleted events ## Bugfix * mattermost: Remove ourselves from the channel when removed in mattermost. Fixes #233 * mattermost: Add/remove ourselves to the channel if we join using the GUI. #239 * mattermost: Update topics in mattermost. Closes #241 * mattermost: Fix pastes and attachments in direct message. Closes #228 * mattermost: Update channels if not known on join yet # v0.19.1 ## New features * mattermost: Added support for disabling of automatic view flag updates (#226). See DisableAutoView in matterircd.toml.example * slack: Add message showing enhancements and add slackbot to all channels (#230) ## Bugfix * general: Fix tight loop (100% CPU). Closes #231 # v0.19.0 ## New features * irc: Add support for spoofing query messages. #195 * You can now see your own messages you've typed on slack/mattermost web in irc * irc: Add PasteBufferTimeout option (send ascii-art!) * See matterircd.toml.example for an example. * PasteBufferTimeout specifies the amount of time in milliseconds that messages get kept in matterircd internal buffer before being sent to mattermost or slack. Messages that will be received in this time will be concatenated together So this can be used to paste stuff like ascii-art or code. Default 0 (is disabled) Depending on how fast you type 2500 is a good number ## Bugfix * slack: Correctly handle different nick and username #203 * slack: Ignore channel join messages #198

jperkin · 2020-04-22T19:20:55Z

This was upgraded a while back and is currently the most recent version.

pkgsrc changes: - Remove patches/patch-configure: applied uptsream - Convert the CHECK_PORTABILITY_SKIP to a REPLACE_BASH: it is more consistent with other REPLACE_BASHes (there are several files that are not installed then) and complaining about `==' test(1) operator in a bash script is not correct. Changes: 1.27.4 ------ - libcupsfilters, cups-browsed: Fix memory issues in ppdgenerator and cups-browsed (Pull request #226). - pdftops: Mention cups-filters README, CUPS README in debug log (Pull request #225). - pdftopdf, gstoraster, foomatic-rip: Use "-dSAFER" Ghostscript option, instead of the deprecated "-dPARANOIDSAFER" (Pull request #224). - Build System: Replace '==' in configure.ac test with '=', as the former is a bashism (Pull request #222). 1.27.3 ------ - cups-browsed: Allow sharing local queues pointing to remote CUPS queues and re-sharing printers discovered via BrowsePoll by default, using AllowResharingRemoteCUPSPrinters and NewBrowsePollQueuesShared directives in cups-browsed.conf (Issue #101, Pull request #218). - driverless: Correctly unlink temporary file when generating PPD file (Pull request #220). - cups-browsed: Fixed memory leaks (Pull request #219). - foomatic-rip: PDF page count side-loads the PDF file to count the pages in, so it cannot be run in -dSAFER mode. Run even in -dNOSAFER mode to override the -dSAFER default of newer Ghostscript versions. This should not cause a security problem as we do not take an input file which could do arbitrary side-loads but we run hard-coded PostScript commands instead (Issue #216). - libfontembed: Add checks to the test programs to not segfault if the test font file is not found (Pull request #214). - Build System: Let ./configure fail if the supplied test font file path (or the default) does not exist (Pull request #214), also use the "find" command to find the test font file DejaVuSans.ttf under /usr/share/fonts, as every distribution has it somewhere else. 1.27.2 ------ - foomatic-rip: In some PostScript input files it was possible that option settings did not get inserted or lines inserted on the wron place (Issue #208, Pull request #210). - foomatic-rip: For the PDF page count call Ghostscript in sandbox mode and fix pointer arithmetics (Pull request #212). - foomatic-rip: Zero-page-job handling changes made the last page of PostScript files not printed, also turning one-page jobs into zero-page jobs (Issue #200, Issue #206, Issue #208, Pull request #209, Pull request #210, Pull request #211). - cups-browsed: check_printer_with_option() function: Initialize the value, add further checks, freeing memory and stop allocating magic numbers (Pull request #204). - cups-browsed: Additional checks against crashes in the is_local_hostname() function (Ubuntu bug #1863716) 1.27.1 ------ - libcupsfilters: Let the PPD generator not put any dashes into the PPD option and choice names when translating them from IPP attribute names, to avoid that on the back-translation by CUPS no double-dashes are generated. This broke paper tray selections with tray names like "tray-1", "tray-2", ... (Issue #192, Issue #201, Debian bug #949315). - foomatic-rip: Fixed segfault when PRINTER environment variable is not supplied. - pdftopdf, pdftops, gstoraster, gstopdf, gstopxl, rastertoescpx, rastertopclx, foomatic-rip: Handle zero-page jobs (Issue #117, Pull request #196, Pull request #197, Pull request #198, Pull request #200). - texttopdf: Added support for CJK (double-width) fonts (Issue #135, Pull request #199). - cups-browsed: Switched default for "CreateIPPPrinterQueues" from "local-only" to "All". The configure script options "--enable-auto-setup-local-only" and "--enable-auto-setup-driverless-only" can be used to change this default (Debian bug #921252). - rastertoescpx: Fixed wrong freeing of a buffer. - pdftops: Added options "crop-to-fit" and "fill" to the pdftopdf options which the pstops called by pdftops should not apply a second time. - pdftops: Added missing "-sstdout=%stderr" to Ghostscript command line, to assure that all messages are redirected to stderr and do not mix up with the output data. 1.27.0 ------ - cups-browsed: Eliminate the use of the local CUPS daemon's (the CUPS we are attached to) port number completely, so that for attaching to an arbitrary local CUPS daemon listening on an arbitrary port (or even not listening on localhost at all) it is enough to tell cups-browsed the domain socket the CUPS daemon is listening on. - cups-browsed, libcupsfilters: Identify DNS-SD-reported printers as of the local CUPS daemon via UUID and not via the port on which the local CUPS is listening, as we do not always have this port available. - cups-browsed: Leave the port for legacy CUPS browsing and broadcasting on 631, do not use a possible alternative port of the CUPS we are attached to. The legacy CUPS servers we communicate with are always remote ones. - libcupsfilters: in the PPD generator prioritize print-color-mode-supported against pwg-raster-document-type-supported (Issue #186, Pull request #188) - rastertopdf, rastertops, texttopdf, pdftoraster, mupdftoraster: Handle zero-page jobs, corrections on zero-page job handling (Issue #117) - cups-browsed: When restarting after a crash make sure that local queue names have same upper/lower case as before. - cups-browsed: Small code improvements to reduce crash probability. 1.26.2 ------ - cups-browsed: Added crash guards to avoid crashes in case the dummy printer entry for a deleted master entry is used. - cups-browsed: Set the port of the local CUPS daemon to be used according to the IPP_PORT environment variable. - cups-browsed: Eliminated the use of the cupsGetPPD2() function of libcups completely, also the remaining calls in the record_printer_options() and update_cups_queues() functions, the former causing incomplete recording of option settings and the latter use of CUPS-generated PPDs not working when CUPS is running on a non-standard port. - cups-browsed: Eliminated the use of the cupsGetPPD2() function of libcups in queue_overwritten(). The function actually loads the queue's PPD file if the queue is on a local CUPS on port 631. Due to a bug the function fails if an alternative port is used. This lets queue_overwritten() always assume that the PPD got removed and therefore the queue got overwritten. So queues got released from cups-browsed if it was printed on them or if they were supposed to be removed on shutdown. - foomatic-rip: Fixed compilation with -fno-common. Starting from the upcoming GCC 10, the default of the -fcommon option will change to -fno-common. This causes compilation errors in foomatic-rip due to missing "external" declarations. (Pull request #184).

- Updates a patch. Changes since 2.1.1: Library: * A library view showing recent books and reading progress (#119) * Search books by metadata * E-book discovery with OPDS (#6, #253) New supported formats: * FictionBook (.fb2, .fb2.zip) (#128) * Comic book archive (.cbr, .cbz, .cbt, .cb7) (#254) * Plain text (.txt) (#226) * Unpacked EPUB files Layout: * Option to set maximum page width (#192) * The "Automatic" layout will now show four columns when the page width is wide (#257) Image viewer: * Improved image viewer, with new shortcuts and the ability to rotate (#299) and invert images * Option to disable image viewer, or to open images on double, middle, or right click (#315) Text-to-speech: * Improved text-to-speech configuration UI * Ability to set text-to-speech voice based on book language (#134) Annotations * Import annotations from JSON * Search in annotations * Annotations are now sorted in the same order as they appear in the book (#318) Security: * "Allow Unsafe Content" now only enables JavaScript; external content will no longer be loaded. This is an important security fix. If you are running an old version of Foliate and cannot upgrade, you should disable "Allow Unsafe Content". * WebKit processes are now sandboxed Other featues and fixes: * Improved support for vertical and right-to-left books * Support for StarDict dictionaries (#302) (requires new optional dependency sdcv) * Fixed current location not preserved when resizing (#152, #204) * Fixed auto-hiding header bar under some themes (#316) * Command-line options for showing version and adding books to library * Option to clear or disable cache * When an HTML page contains invalid self-closing anchor tags, it is now parsed as XHTML (#275, #288) Technical changes: * Foliate now stores file locations in ~/.local/share/com.github.johnfactotum.Foliate/library/uri-store.json, and saves book covers to ~/.cache/com.github.johnfactotum.Foliate. Both can be disabled. * New optional dependency tracker (gir1.2-tracker-2.0 on Debian based distributions), which can be used to get file locations. * New optional dependency libhandy (gir1.2-handy-0.0). It's not absolutely required, but installing it would make the experience better on larger as well as smaller screens. * To open remote files, Foliate now optionally depends on libsoup (gir1.2-soup-2.4). Foliate now bundles two additional libraries: * libarchivejs, which is MIT licensed. It is a WASM port of the popular libarchive C library. * crypto-js, which is MIT licensed. The MD5 module is used to generate identifiers for files that don't have unique identifiers.

@inc

Upstream changes: 1.36 - 19 May 2020 - Fix pod error - Quieten perltidy syntax highlighting errors - Fix up minimum perl version (Dick Franks) (GH-268) - Fix passing full path for cover DB (GH-267) 1.35 - 17 May 2020 - Replace "use vars" with "our" (James Raspass) (GH-255) - Remove tray db file from release - Don't chdir when given a -dir flag (Dave Rolsky) (GH-253) - Manage code references in @inc (Slaven Rezić) (GH-249, GH-250) 1.34 - 16 May 2020 - Minimum supported version is now 5.10.0 (Karen Etheridge) (GH-226) - Support 5.32 by accomodating signauture changes (GH-260)

pkgsrc changes: - Fix a typo in DISTNAME/PKGNAME: it is now go-ffuf (instead of go-fuff) - Only installs bin/ffuf and its README - Reset MAINTAINERship, requested by <nikita> Changes: 1.1.0 ----- - Add unsupported arch/os to goreleaser ignore list (#267) - Release 1.1 (#266) - Fix crash with 3xx requests without location header (#265) - Update random seed logic (#262) - fix file get thing (#226) - Update CONTRIBUTORS.md to add bsysop (#258) - Fixed behavior of wordlist:keyword separator in Windows (#240) - Add Host information to JSON output file (#223) - Support outputting all file formats concurrently (#218) - Increase default rows per page on html report (#217) - Add the wordlists to the header information (#211) - Fix error with missing usage info (#195) - Feature178 (#186) - Fix for #193 (#194) - Fix for issue #179 (#180) - Prepare for 1.1.0-git (#176)

0.60: Asciidoc: * Introduce "compat" option to parse like asciidoc or asciidoctor. Text (and Markdown): * Fix the support of nested lists (GitHub's #131). Other: * Remove the experimental C extension that was never built, distributed, tested nor modified since 2007. XML: * Provide a meaningful message when the translators butcher the <placeholder> attributes instead of truncating the file. (GitHub's #254) 0.59.1: po4a tool: * Really fix --srcdir and --destdir handling (Debian's #960892 again). Even with the previous fix, the aptitude package was still broken. Documentation: * Clarify the syntax of -o parameters (GitHub's #233). Sgml: * Sort the attributes. Without this, msgids are randomly fuzzied. (Debian's #725931 and Debian's #810988) 0.59: po4a tool: * Fix --srcdir handling (GitHub's #237 and Debian's #960892). This bug was breaking the build of several packages, including dpkg. Addendum: * New mode 'eof' to easily add at the end of the file (Debian's #960949). Documentation: * Fix many typos and glitches * Start a section about external projects using po4a Tests: * po4a: Add a test for the [po_directory] feature Overall: * Improve the displayed messages, don't translate debug messages. 0.58.1: Documentation: * Document an option of the XML parser (GitHub's #223). * Small glitches found during the translations. Tests: * Also ignore 'Project-Id-Version' when diffing PO files (GitHub's #224) * asciidoc: reactivate tablecells tests AsciiDoc: * Fix management of images in tables (Github's #226) * Tolerate underline length variations in two lines titles (Github's #212) 0.58: AsciiDoc: * Accept numbered list items beginning with any number of dots (GitHub's #210) Markdown: * Avoid translating Markdown fenced code block info string (GitHub's #194) * List Markdown fenced code block info string as text type (GitHub's #195) * Support YAML Front Matter (GitHub's #196). This requires YAML::Tiny. * Introduce options yfm_keys and yfm_skip_array to respectively specify which YAML keys should be translated, and that the array content should not be translated. * Work around a bug in YAML::Tiny that quotes numbers (GitHub's #217) * Add gettext flag "markdown-text" for relevant entries (GitHub's #208) Text: * Honor the (existing) --neverwrap option to handle every content verbatim. Texinfo: * Add the comments starting with 'TRANSLATORS:' to the po file (GitHub's #162) XHTML: * Don't fail nor warn when a closing tag is missing, that's legit in HTML. (GitHub's #179) XML and DocBook: * Allow attributes with no value (GitHub's #178). * Processing Instructions are handled as inline tags by default, but you can change them back to breaking with '-o break-pi' (GitHub's #170) Yaml: * Introduce option to skip array values. (GitHub's #187) po4a tool: * Cleanups and fixups about options' parsing (now tested and documented) _ / \ You may need to upgrage your po4a.conf if you were using /_!_\ "unwanted features" (ie, bugs) of the previous implementation. * Do not touch source dir when --destdir is provided (Debian #602387) * Pass --add-location=file to msgmerge when receiving option porefs. (requires gettext >= 0.19 -- June 2014) * Option --master-charset sets the charset of the generated POT file. * Option --master-language sets the language of the generated POT file. * Add support for addendum path in po4a_paths (Debian #823189) * Stop pretending that --porefs can control the wrapping of reference comments, as the gettext tools used internally always rewrap them. Scripts: * Rename po4aman-display-po to po4a-display-man * Rename po4apod-display-po to po4a-display-pod Core: * Use UTF-8 by default (the 20th century is over -- Debian #862460) po4a used to prefer ascii unless it proved impossible. But the underlying detection would fail, possibly for document containing UTF-8 chars composed on printable ascii chars only. * Add a --wrap-po option to control how the po file is wrapped, and chose between either nicely wrapped files that tend to produce git conflicts, or ugly files that are easy to automatically deal with. Tests: * Completely refactor most tests. They are now more reliable and the error messages are much more useful to understand the issues. * Many bugs to po4a and the core were ironed out in the process. * PO files content are now tested too (GitHub's #67) Documentation: * Various cleanups by Golubev Alexander (GitHub's #190 & #191)

2.0.3 (2020-08-22) ~~~~~~~~~~~~~~~~~~ - Fix issues when building re2c as a CMake subproject (`#302 <https://github.com/skvadrik/re2c/pull/302>`_: - Final corrections in the SIMPA article "RE2C: A lexer generator based on lookahead-TDFA", https://doi.org/10.1016/j.simpa.2020.100027 2.0.2 (2020-08-08) ~~~~~~~~~~~~~~~~~~ - Enable re2go building by default. - Package CMake files into release tarball. 2.0.1 (2020-07-29) ~~~~~~~~~~~~~~~~~~ - Updated version for CMake build system (forgotten in release 2.0). - Added a short article about re2c for the Software Impacts journal. 2.0 (2020-07-20) ~~~~~~~~~~~~~~~~ - Added new code generation backend for Go and a new ``re2go`` program (`#272 <https://github.com/skvadrik/re2c/issues/272>`_: Go support). Added option ``--lang <c | go>``. - Added CMake build system as an alternative to Autotools (`#275 <https://github.com/skvadrik/re2c/pull/275>`_: Add a CMake build system (thanks to ligfx), `#244 <https://github.com/skvadrik/re2c/issues/244>`_: Switching to CMake). - Changes in generic API: + Removed primitives ``YYSTAGPD`` and ``YYMTAGPD``. + Added primitives ``YYSHIFT``, ``YYSHIFTSTAG``, ``YYSHIFTMTAG`` that allow to express fixed tags in terms of generic API. + Added configurations ``re2c:api:style`` and ``re2c:api:sigil``. + Added named placeholders in interpolated configuration strings. - Changes in reuse mode (``-r, --reuse`` option): + Do not reset API-related configurations in each `use:re2c` block (`#291 <https://github.com/skvadrik/re2c/issues/291>`_: Defines in rules block are not propagated to use blocks). + Use block-local options instead of last block options. + Do not accumulate options from rules/reuse blocks in whole-program options. + Generate non-overlapping YYFILL labels for reuse blocks. + Generate start label for each reuse block in storable state mode. - Changes in start-conditions mode (``-c, --start-conditions`` option): + Allow to use normal (non-conditional) blocks in `-c` mode (`#263 <https://github.com/skvadrik/re2c/issues/263>`_: allow mixing conditional and non-conditional blocks with -c, `#296 <https://github.com/skvadrik/re2c/issues/296>`_: Conditions required for all lexers when using '-c' option). + Generate condition switch in every re2c block (`#295 <https://github.com/skvadrik/re2c/issues/295>`_: Condition switch generated for only one lexer per file). - Changes in the generated labels: + Use ``yyeof`` label prefix instead of ``yyeofrule``. + Use ``yyfill`` label prefix instead of ``yyFillLabel``. + Decouple start label and initial label (affects label numbering). - Removed undocumented configuration ``re2c:flags:o``, ``re2c:flags:output``. - Changes in ``re2c:flags:t``, ``re2c:flags:type-header`` configuration: filename is now relative to the output file directory. - Added option ``--case-ranges`` and configuration ``re2c:flags:case-ranges``. - Extended fixed tags optimization for the case of fixed-counter repetition. - Fixed bugs related to EOF rule: + `#276 <https://github.com/skvadrik/re2c/issues/276>`_: Example 01_fill.re in docs is broken + `#280 <https://github.com/skvadrik/re2c/issues/280>`_: EOF rules with multiple blocks + `#284 <https://github.com/skvadrik/re2c/issues/284>`_: mismatched YYBACKUP and YYRESTORE (Add missing fallback states with EOF rule) - Fixed miscellaneous bugs: + `#286 <https://github.com/skvadrik/re2c/issues/286>`_: Incorrect submatch values with fixed-length trailing context. + `#297 <https://github.com/skvadrik/re2c/issues/297>`_: configure error on ubuntu 18.04 / cmake 3.10 - Changed bootstrap process (require explicit configuration flags and a path to re2c executable to regenerate the lexers). - Added internal options ``--posix-prectable <naive | complex>``. - Added debug option ``--dump-dfa-tree``. - Major revision of the paper "Efficient POSIX submatch extraction on NFA". ---- 1.3x ---- 1.3 (2019-12-14) ~~~~~~~~~~~~~~~~ - Added option: ``--stadfa``. - Added warning: ``-Wsentinel-in-midrule``. - Added generic API primitives: + ``YYSTAGPD`` + ``YYMTAGPD`` - Added configurations: + ``re2c:sentinel = 0;`` + ``re2c:define:YYSTAGPD = "YYSTAGPD";`` + ``re2c:define:YYMTAGPD = "YYMTAGPD";`` - Worked on reproducible builds (`#258 <https://github.com/skvadrik/re2c/pull/258>`_: Make the build reproducible). ---- 1.2x ---- 1.2.1 (2019-08-11) ~~~~~~~~~~~~~~~~~~ - Fixed bug `#253 <https://github.com/skvadrik/re2c/issues/253>`_: re2c should install unicode_categories.re somewhere. - Fixed bug `#254 <https://github.com/skvadrik/re2c/issues/254>`_: Turn off re2c:eof = 0. 1.2 (2019-08-02) ~~~~~~~~~~~~~~~~ - Added EOF rule ``$`` and configuration ``re2c:eof``. - Added ``/*!include:re2c ... */`` directive and ``-I`` option. - Added ``/*!header:re2c:on*/`` and ``/*!header:re2c:off*/`` directives. - Added ``--input-encoding <ascii | utf8>`` option. + `#237 <https://github.com/skvadrik/re2c/issues/237>`_: Handle non-ASCII encoded characters in regular expressions + `#250 <https://github.com/skvadrik/re2c/issues/250>`_ UTF8 enoding - Added include file with a list of definitions for Unicode character classes. + `#235 <https://github.com/skvadrik/re2c/issues/235>`_: Unicode character classes - Added ``--location-format <gnu | msvc>`` option. + `#195 <https://github.com/skvadrik/re2c/issues/195>`_: Please consider using Gnu format for error messages - Added ``--verbose`` option that prints "success" message if re2c exits without errors. - Added configurations for options: + ``-o --output`` (specify output file) + ``-t --type-header`` (specify header file) - Removed configurations for internal/debug options. - Extended ``-r`` option: allow to mix multiple ``/*!rules:re2c*/``, ``/*!use:re2c*/`` and ``/*!re2c*/`` blocks. + `#55 <https://github.com/skvadrik/re2c/issues/55>`_: allow standard re2c blocks in reuse mode - Fixed ``-F --flex-support`` option: parsing and operator precedence. + `#229 <https://github.com/skvadrik/re2c/issues/229>`_: re2c option -F (flex syntax) broken + `#242 <https://github.com/skvadrik/re2c/issues/242>`_: Operator precedence with --flex-syntax is broken - Changed difference operator ``/`` to apply before encoding expansion of operands. + `#236 <https://github.com/skvadrik/re2c/issues/236>`_: Support range difference with variable-length encodings - Changed output generation of output file to be atomic. + `#245 <https://github.com/skvadrik/re2c/issues/245>`_: re2c output is not atomic - Authored research paper "Efficient POSIX Submatch Extraction on NFA" together with Dr Angelo Borsotti. - Added experimental libre2c library (``--enable-libs`` configure option) with the following algorithms: + TDFA with leftmost-greedy disambiguation + TDFA with POSIX disambiguation (Okui-Suzuki algorithm) + TNFA with leftmost-greedy disambiguation + TNFA with POSIX disambiguation (Okui-Suzuki algorithm) + TNFA with lazy POSIX disambiguation (Okui-Suzuki algorithm) + TNFA with POSIX disambiguation (Kuklewicz algorithm) + TNFA with POSIX disambiguation (Cox algorithm) - Added debug subsystem (``--enable-debug`` configure option) and new debug options: + ``-dump-cfg`` (dump control flow graph of tag variables) + ``-dump-interf`` (dump interference table of tag variables) + ``-dump-closure-stats`` (dump epsilon-closure statistics) - Added internal options: + ``--posix-closure <gor1 | gtop>`` (switch between shortest-path algorithms used for the construction of POSIX closure) - Fixed a number of crashes found by American Fuzzy Lop fuzzer: + `#226 <https://github.com/skvadrik/re2c/issues/226>`_, `#227 <https://github.com/skvadrik/re2c/issues/227>`_, `#228 <https://github.com/skvadrik/re2c/issues/228>`_, `#231 <https://github.com/skvadrik/re2c/issues/231>`_, `#232 <https://github.com/skvadrik/re2c/issues/232>`_, `#233 <https://github.com/skvadrik/re2c/issues/233>`_, `#234 <https://github.com/skvadrik/re2c/issues/234>`_, `#238 <https://github.com/skvadrik/re2c/issues/238>`_ - Fixed handling of newlines: + correctly parse multi-character newlines CR LF in ``#line`` directives + consistently convert all newlines in the generated file to Unix-style LF - Changed default tarball format from .gz to .xz. + `#221 <https://github.com/skvadrik/re2c/issues/221>`_: big source tarball - Fixed a number of other bugs and resolved issues: + `#2 <https://github.com/skvadrik/re2c/issues/2>`_: abort + `#6 <https://github.com/skvadrik/re2c/issues/6>`_: segfault + `#10 <https://github.com/skvadrik/re2c/issues/10>`_: lessons/002_upn_calculator/calc_002 doesn't produce a useful example program + `#44 <https://github.com/skvadrik/re2c/issues/44>`_: Access violation when translating the attached file + `#49 <https://github.com/skvadrik/re2c/issues/49>`_: wildcard state \000 rules makes lexer behave weard + `#98 <https://github.com/skvadrik/re2c/issues/98>`_: Transparent handling of #line directives in input files + `#104 <https://github.com/skvadrik/re2c/issues/104>`_: Improve const-correctness + `#105 <https://github.com/skvadrik/re2c/issues/105>`_: Conversion of pointer parameters into references + `#114 <https://github.com/skvadrik/re2c/issues/114>`_: Possibility of fixing bug 2535084 + `#120 <https://github.com/skvadrik/re2c/issues/120>`_: condition consisting of default rule only is ignored + `#167 <https://github.com/skvadrik/re2c/issues/167>`_: Add word boundary support + `#168 <https://github.com/skvadrik/re2c/issues/168>`_: Wikipedia's article on re2c + `#180 <https://github.com/skvadrik/re2c/issues/180>`_: Comment syntax? + `#182 <https://github.com/skvadrik/re2c/issues/182>`_: yych being set by YYPEEK () and then not used + `#196 <https://github.com/skvadrik/re2c/issues/196>`_: Implicit type conversion warnings + `#198 <https://github.com/skvadrik/re2c/issues/198>`_: no match for ‘operator!=’ in ‘i != std::vector<_Tp, _Alloc>::rend() [with _Tp = re2c::bitmap_t, _Alloc = std::allocator<re2c::bitmap_t>]()’ + `#210 <https://github.com/skvadrik/re2c/issues/210>`_: How to build re2c in windows? + `#215 <https://github.com/skvadrik/re2c/issues/215>`_: A memory read overrun issue in s_to_n32_unsafe.cc + `#220 <https://github.com/skvadrik/re2c/issues/220>`_: src/dfa/dfa.h: simplify constructor to avoid g++-3.4 bug + `#223 <https://github.com/skvadrik/re2c/issues/223>`_: Fix typo + `#224 <https://github.com/skvadrik/re2c/issues/224>`_: src/dfa/closure_posix.cc: pack() tweaks + `#225 <https://github.com/skvadrik/re2c/issues/225>`_: Documentation link is broken in libre2c/README + `#230 <https://github.com/skvadrik/re2c/issues/230>`_: Changes for upcoming Travis' infra migration + `#239 <https://github.com/skvadrik/re2c/issues/239>`_: Push model example has wrong re2c invocation, breaks guide + `#241 <https://github.com/skvadrik/re2c/issues/241>`_: Guidance on how to use re2c for full-duplex command & response protocol + `#243 <https://github.com/skvadrik/re2c/issues/243>`_: A code generated for period (.) requires 4 bytes + `#246 <https://github.com/skvadrik/re2c/issues/246>`_: Please add a license to this repo + `#247 <https://github.com/skvadrik/re2c/issues/247>`_: Build failure on current Cygwin, probably caused by force-fed c++98 mode + `#248 <https://github.com/skvadrik/re2c/issues/248>`_: distcheck still looks for README + `#251 <https://github.com/skvadrik/re2c/issues/251>`_: Including what you use is find, but not without inclusion guards - Updated documentation and website.

@orsinium

This notably fixes a security issue, CVE-2020-27197. Version 1.1.118: * #247 [CVE-2020-27197] Avoid SSRF on parsing XML (@orsinium) Version 1.1.117: * #244 SSL Verify Server not working correctly (@motok) (@nschwane) * #245 Unicode lxml.etree.SerialisationError on lxml 4.5.0+ (@advptr) Version 1.1.116: * #240 PY3 Compatibility changes for HTTP Response Body (@nschwane) Version 1.1.115: * #239 Convert the HTTP response body to a string type (PY3 this will be bytes) (@sddj) Version 1.1.114: * #237 Support converting dicts to content bindings (@danielsamuels) * #238 Provide XMLParser copies instead of reusing the cached instance. Prevents future messages to lose namespace Version 1.1.113: * #234 Add ability to load a configuration file when executing a script * #232 Fix TLS handshake failure when a server requires SNI (@marcelslotema) Version 1.1.112: * #227 Fixes to poll_client script (Python3 compatibility) * #226 Clean-up documentation warnings * #228 Fix 'HTTPMessage' has no attribute 'getheader' (Python3 compatibility) * #225 Fix checks that involve xpath (lxml) to prevent FutureWarning message * #230 Fix parsing status message round-trip (@danielsamuels) Thanks leot@ and pkgsrc's security team for the heads up! Pull-up to be requested.

This release addresses the following: New Features: Add support for infostore in EnvIsSet Test case #240 (ThomasAdam) Add variable/parameter which indicates the state of the FVWM3 logging #239 (NsCDE) Support for setting default mouse cursor on all FvwmScript widgets #222 (NsCDE) Add support for triangle indicator in/out sub options #221 (NsCDE) Add WindowName option to FvwmButtons #219 (NsCDE) Build problems: compilation fails on openbsd-current due to safemalloc.h (va_list) #231 "version of go" misinterpreted by configure script? #202 Unable to build 1.0, bson.h not found [FreeBSD 12.1] #200 Bug-fixes: _NET_WM_STATE was not updated for maximized windows #203 EwmhBaseStruts calculations don't use monitor's #241 DesktopConfiguration global inherits behaviour from per-monitor mode #236 FvwmEvent: missing monitor\_focus event #228 perllib: doesn't understand MX_MONITOR_* events #226 FvwmButtons subpanels not popped out on primary monitor when desk is > 0 #224 PositionPlacement Center: fix to use current screen #211 EwmhBaseStruts missing screen info from manpage #208 EwmhBaseStrut: fix calculations for per-monitor #242 (ThomasAdam) Fix window locations in Global mode #237 (ThomasAdam)

3.2.2 (2020-11-16) * Remove copyright dates #225 (tas50) * Cleanup deps and fix the failing spec helper loading of support files #226 (tas50) v3.2.0 (2020-11-12) * Windows: fetch env variables for specified users #224 (kapilchouhan99) v3.1.7 (2020-10-29) * Loosen win32-process dep to resolve Ruby 3 deprecation warnings #223 (tas50)

Bug-fix and maintenance update after the previous version 0.4.3. All users of wildmidi-0.4.x are strongly encouraged to upgrade. What's new in 0.4.4: Fixed integer overflow in midi parser sample count calculation (bug #200). Fixed 8 bit ping pong GUS patch loaders (bug #207). Fixed wrong variable use in reverb code (bug #210). Reset block status of tty after playback (bug #211). Fixed broken file name handling for 'save as midi' command during playback. Clamp MUS volume commands (PR #226). CMake project improvements (bugs: #214, #216, #217, #218) - cmake version 3.1 or newer is now required.

This release brings: - [server] Add MAX_FW_TIMEOUT to access.conf stanzas to allow a maximum number of seconds for client-specified timeouts in SPA packets. This fixes issue #226 which was spotted by Jeremiah Rothschild. - [server] Bug fix in CMD_EXEC mode to make sure to call exit() upon any error from execvpe(). Without this fix, additional fwknopd processes would be started upon a user specifying a command without the necessary permissions. This bug was reported by Stephen Isard. - [build] Jeremie Courreges-Anglas and Ingo Feinerer contributed a patch to fix endian detection on OpenBSD systems based on information contained here: https://www.opengroup.org/austin/docs/austin_514.txt - [client/server] (Michael Stair) Added client and server infrastructure written in Erlang. See the erlang/ directory.

@pboling

0.5.8 (2021-11-10) Added * Added more documentation files to packaged gem, e.g. SECURITY.md, CODE_OF_CONDUCT.md Fixed * Removed reference to RUBY_VERSION from gemspec, as it depends on rake release, which is problematic on some ruby engines. (by @pboling) 0.5.7 (2021-11-02) Added * Setup Rubocop (#205, #208 by @pboling) * Added CODE_OF_CONDUCT.md (#217, #218 by @pboling) * Added FUNDING.yml (#217, #218 by @pboling) * Added Client Certificate Options: :ssl_client_cert and :ssl_client_key (#136, #220 by @pboling) * Handle a nested array of hashes in OAuth::Helper.normalize (#80, #221 by @pboling) Changed * Switch from TravisCI to Github Actions (#202, #207, #176 by @pboling) * Upgrade webmock to v3.14.0 (#196 by @pboling) * Upgrade em-http-request to v1.1.7 (#173 by @pboling) * Upgrade mocha to v1.13.0 (#193 by @pboling) * HISTORY renamed to CHANGELOG.md, and follows Keep a Changelog (#214, #215 by @pboling) * CHANGELOG, LICENSE, and README now ship with packaged gem (#214, #215 by @pboling) * README.rdoc renamed to README.md (#217, #218 by @pboling) * Require plaintext signature method by default (#135 by @confiks & @pboling) Fixed * Fixed Infinite Redirect in v0.5.5, v0.5.6 (#186, #210 by @pboling) * Fixed NoMethodError on missing leading slash in path (#194, #211 by @pboling) * Fixed NoMethodError on nil request object (#165, #212 by @pboling) * Fixed Unsafe String Comparison (#156, #209 by @pboling and @drosseau) * Fixed typos in Gemspec (#204, #203, #208 by @pboling) * Copyright Notice in LICENSE - added correct years (#217, #218 by @pboling) * Fixed request proxy Class constant reference scopes - was missing :: in many places (#225, #226 by @pboling) Removed * Remove direct development dependency on nokogiri (#299 by @pboling)

Change log: 4.16.2 ====== - keyboard: Mark system defaults switch as active (Fixes #310) - keyboard: Correctly initialize setting (Fixes #310) - keyboard: Fix icon name in settings dialog - keyboard: Make buttons translatable (Fixes #306) - xfsettingsd: Fix setting float array properties - Translation Updates: Arabic, Basque, Bulgarian, Estonian, Hebrew, Norwegian Bokmål, Slovenian, Spanish, Swedish, Thai, Ukrainian 4.16.1 ====== - display: Fix scale by rounding (Fixes #258) - Drop preferences-desktop-default-applications icon name - Also allocate terminating element - Translation Updates: Albanian, Arabic, Armenian (Armenia), Asturian, Basque, Belarusian, Belarusian (Tarask), Bengali, Bulgarian, Catalan, Chinese (China), Chinese (Hong Kong), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, Eastern Armenian, English (Australia), English (Canada), English (United Kingdom), Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian, Japanese, Kabyle, Kazakh, Korean, Lithuanian, Malay, Norwegian Bokmål, Norwegian Nynorsk, Occitan (post 1500), Polish, Portuguese, Portuguese (Brazil), Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish, Ukrainian 4.16.0 ====== - Drop subtitles from settings dialogs (Fixes #239) - display: Fix icon name in settings dialog - settings-manager: Fix visibility of filterbar - settings-manager: Correctly show/hide the filterbar - settings-manager: Switch to GtkSearchEntry - settings-manager: Put filter in separate bar (Fixes #226) - appearance: Add 'Add' button to install themes (Fixes #193) - color: Tweak colors of icon - mime: Accept Thunar's old id name (Fixes #247) - settings-editor: Enable tooltips and ellipsizing for `Value` column - settings-editor: Fix scrollbar for channels - settings-editor: Point to correct docs URL (#245) - bump glib (and gio, gthread, etc) minimum to 2.50.0 - Remove GSourceFunc casts - Indentation fixes - Translation Updates: Basque, Bulgarian, Estonian, French, German, Hebrew, Indonesian, Italian, Japanese, Norwegian Bokmål, Norwegian Nynorsk, Portuguese, Portuguese (Brazil), Russian, Serbian, Slovenian, Swedish, Turkish, Ukrainian 4.15.3 ====== - Disable UPower support by default - Add 24px and 32px icons - xfsettingsd: avoid default double fork - mime: Add 'Open with...' button - mime: Add new generic launcher icons - color: Adjust padding of dialog - color: Add labels to toolbar - keyboard: Make 'system defaults' a GtkSwitch - keyboard: Adjust width of shortcut column (Fixes #223) - keyboard: Update dialog UI - keyboard: Make all table columns sortable - keyboard: Improve inline toolbar alignment - display: Center minimal dialog on monitor where cursor is - settings-editor: Add labels to toolbar items - Update README file - Translation Updates: Albanian, Arabic, Armenian (Armenia), Basque, Belarusian, Belarusian (Tarask), Bengali, Bulgarian, Catalan, Chinese (China), Chinese (Hong Kong), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, Eastern Armenian, English (Australia), English (Canada), English (United Kingdom), Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian, Japanese, Kazakh, Korean, Lithuanian, Malay, Norwegian Bokmål, Norwegian Nynorsk, Occitan (post 1500), Polish, Portuguese, Portuguese (Brazil), Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish, Ukrainian, Uyghur 4.15.2 ====== - appearance: Fix width of DPI spinbutton (Bug #16125) - appearence: Sync theme, icon, font names to gsettings - appearance: Fix list refresh on DnD (Fixes #213) - appearance: Drop toolbar style setting (Bug #16665) - display: Initial fractional scaling support (Fixes #162) - display: Custom scale changes are display changes - display: Improve layout in settings dialog - display: Resize display widget according to scale - display: Move scaling presets to glade - display: Set minimum scale to 0.1 - display: Improve state machine for scaling option - xfsettingsd: Correctly get current xrandr scale - mime-settings: Rename dialog and icon to 'Default Applications' - mime-settings: Fix window icon name - mime-settings: Fix double free - mime-helpers: Fix Nautilus icon name - mime-helpers: Rename Thunar to thunar - Rename Thunar to thunar in make and potfiles - Expand desktop entry field codes - keyboard-settings: Support libxfce4ui XfceTitledDialog new API - keyboard: Show shortcuts with keycap class - settings-manager: Ensure searchbox has initial focus (Bug #16890) - settings-manager: Simplify redrawing of search results (Fixes #141) - settings-manager: Hide filter entry in plugged dialogs - Convert xfce4-compose-mail to Python - Add dependency to Python3 - Use just binary name (instead of full path) as argument - Don't crash when upowerd isnt present (bug #60) - Always install shiny new icons - Drop libxfce4ui 4.15.1 ifdefs - Fix xfconf-related memory leaks - Update .gitignore - Fix typo - Translation Updates: Bulgarian, Catalan, Chinese (China), Chinese (Hong Kong), Chinese (Taiwan), Croatian, Danish, Dutch, English (Canada), Estonian, Finnish, French, German, Hebrew, Hungarian, Indonesian, Italian, Japanese, Kazakh, Korean, Lithuanian, Norwegian Bokmål, Serbian, Swedish, Turkish 4.15.1 ====== This release transitions several exo components to xfce-settings. Please use with exo 4.15.1 or later for best results. - exo-compose-email -> xfce4-compose-email - exo-helper -> xfce4-mime-helper - mime-settings now includes preferred applications Other Updates: - Switch to new app icons and rDNS icon names - Increase mouse cursor upper bound for HiDPI (Bug #16042) - Fix a memory leak - Fix typo - Add basic GitLab pipeline - Make "Profiles matching" sentence translatable (Bug #16679) - settings-manager: Use symbolic find/clear icons - Move from exo-csource to xdt-csource (Bug #16717) - Handle failure to get Xkl engine for display (Bug #16017) - settings-manager: Make sure content determines size - Fix cast warnings - Fix GTimeVal deprecation (Bug #16645) - Fix keywords and mark them as translateable - Use proper fallback configuration on "apply" and "toggle off" (Bug #16476) - keyboard-settings: Fix log flood (Bug #16521) - keyboard: Fix crash when editing shortcut (Bug #15958) - Add keywords to .desktop files (Bug #10694) - settings-manager: Improve search by including keywords (Bug #10694) - xfsettingsd: Add --disable-wm-check flag (Bug #16128) - Fix typecasting - Set "gtk-titlebar-middle-click" to "lower" by default - display: Allow resizing of minimal dialog (Bug #15450) - settings-manager: Show min and max buttons - dialogs: Ensure dialogs have min and max buttons - Translation Updates: Albanian, Arabic, Armenian (Armenia), Basque, Belarusian, Belarusian (Tarask), Bulgarian, Catalan, Chinese (China), Chinese (Hong Kong), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, English (Australia), English (Canada), English (United Kingdom), Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian, Japanese, Kazakh, Korean, Lithuanian, Malay, Norwegian Bokmål, Norwegian Nynorsk, Occitan (post 1500), Polish, Portuguese, Portuguese (Brazil), Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish, Uighur, Ukrainian 4.15.0 ====== - xsettings: Use CSD for GtkDialogs by default - settings-manager: Fix XfceTitledDialog layout with CSD - settings-manager: Drop setting the old header style - display: Show ratio next to display resolution - display: Mark preferred mode with an asterisk - display: Add init function for aspect ratios - display: Right-align the display ratio - display: Fixed warning and removed ratio - display: Improve look of ratio - display: Fix icon name for primary indicator - display: Initialize crtc->scalex/y (Bug #15971) - settings-editor: Add consistent inline-toolbar - appearance: Only show themes that support Gtk3 (Bug #15849) - color: Fix crash in add-profiles dialog (Bug #15876) - color: Conditionally hide info button in add-profile dialog - color: Add tooltip to profile info buttons - display: Fix profile matching in xfsettingsd - display: Assure correct gchar** (Bug #15816) - keyboard: Improve layout of add-command dialog - keyboard: Add mnemonics to add-command dialog (Bug #10495) - Switch to symbolic window-close icon - Bump libxfce4ui dependency to 4.15.1 - Improve string for session managers - Ensure the newly labeled 'Xfce Settings Daemon' is translated - Do not show translation info on --help output - Translation Updates: Albanian, Arabic, Basque, Belarusian, Bulgarian, Catalan, Chinese (China), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, English (United Kingdom), Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Indonesian, Interlingue, Italian, Japanese, Korean, Lithuanian, Malay, Norwegian Bokmål, Polish, Portuguese, Portuguese (Brazil), Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish

@ankitpokhrel

Changes since 0.2.0: ## What's added? - feat: Add additional info in view cmd #209 @ankitpokhrel - feat: Show linked issues when viewing #219 @ankitpokhrel - feat: Show latest comment when viewing #220 @ankitpokhrel - feat: Add an option to load N comments when viewing issue #226 @ankitpokhrel ## What's fixed? - fix: Allow config generations even when no boards #216 @sushilkg - fix: Off by one error in wiki parser #224 @ankitpokhrel - fix: Language support for Jira cloud #234 @ankitpokhrel - fix(docs): Optional COMMENT_BODY #236 @realtime-neil - fix: Respect BROWSER env #253 @ankitpokhrel ## Other notable changes - cfg: A new field handle is added in issue.types section as part of #234 - build: Reproducible builds #244 #245 @realtime-neil - build: Initialize version using runtime build info #249 @ankitpokhrel Full Changelog: ankitpokhrel/jira-cli@v0.2.0...v0.3.0 To all direct/indirect contributors and backers, Thank you

### Added * CLI: The `--fix` flag has been added, allowing users to attempt to automatically upgrade any vulnerable dependencies to the first safe version available ([#212](pypa/pip-audit#212), [#222](pypa/pip-audit#222)) * CLI: The combination of `--fix` and `--dry-run` is now supported, causing `pip-audit` to perform the auditing step but not any resulting fix steps ([#223](pypa/pip-audit#223)) * CLI: The `--require-hashes` flag has been added which can be used in conjunction with `-r` to check that all requirements in the file have an associated hash ([#229](pypa/pip-audit#229)) * CLI: The `--index-url` flag has been added, allowing users to use custom package indices when running with the `-r` flag ([#238](pypa/pip-audit#238)) * CLI: The `--extra-index-url` flag has been added, allowing users to use multiple package indices when running with the `-r` flag ([#238](pypa/pip-audit#238)) ### Changed * `pip-audit`'s minimum Python version is now 3.7. * CLI: The default output format is now correctly pluralized ([#221](pypa/pip-audit#221)) * Output formats: The SBOM output formats (`--format=cyclonedx-xml` and `--format=cyclonedx-json`) now use CycloneDX [Schema 1.4](https://cyclonedx.org/docs/1.4/xml/) ([#216](pypa/pip-audit#216)) * Vulnerability sources: When using PyPI as a vulnerability service, any hashes provided in a requirements file are checked against those reported by PyPI ([#229](pypa/pip-audit#229)) * Vulnerability sources: `pip-audit` now uniques each result based on its alias set, reducing the amount of duplicate information in the default columnar output format ([#232](pypa/pip-audit#232)) * CLI: `pip-audit` now prints its output more frequently, including when there are no discovered vulnerabilities but packages were skipped. Similarly, "manifest" output formats (JSON, CycloneDX) are now emitted unconditionally ([#240](pypa/pip-audit#240)) ### Fixed * CLI: A regression causing excess output during `pip audit -r` was fixed ([#226](pypa/pip-audit#226))

@shrektan

# glue 1.6.2 * Modify a test for better forward compatibility with R. # glue 1.6.1 * Glue Now registers its custom knitr engines in a way that is more robust to namespace-loading edge cases that can arise during package installation (#254). # glue 1.6.0 * `glue()`, `glue_data()`, `glue_col()`, and `glue_data_col()` gain a new `.literal` argument, which controls how quotes and the comment character are treated when parsing the expression string (#235). This is mostly useful when using a custom transformer. * Trailing whitespace-only lines don't interfere with indentation (#247). # glue 1.5.1 * Jennifer Bryan is now the maintainer. * The existing custom language engines for knitr, `glue` and `glue_sql`, are documented in a new vignette (#71). *Detail added after release: glue now sets up registration of these engines in `.onLoad()`.* * `glue_col()` gives special treatment to styling functions from the crayon package, e.g. `glue_col("{blue foo}")` "just works" now, even if crayon is not attached (but is installed) (#241). * Unterminated backticks trigger the same error as unterminated single or double quotes (#237). * `glue_sql()` collapses zero-length `DBI::SQL` object into `DBI::SQL("NULL")` (#244 @shrektan). # glue 1.5.0 ## Breaking changes * Long deprecated function `collapse()` has been removed (#213) ## New functions and arguments * New `glue_sql_collapse()` function to collapse inputs and return a `DBI::SQL()` object (#103). * `glue()` gains a new `.comment` argument, to control the comment character (#193). * `glue()` gains a new `.null` argument, to control the value to replace `NULL` values with (#217, @echasnovski). ## Bugfixes and minor changes * `sql_quote_transformer()` is now allows whitespace after the trailing `*` (#218). * `compare_proxy.glue()` method defined so glue objects can be compared to strings in testthat 3e without errors (#212) * `print.glue()` no longer prints an empty newline for 0 length inputs (#214) * Unterminated comments in glue expression now throw an error (#227, @gaborcsardi) * Unterminated quotes in glue expressions now throw an error (#226, @gaborcsardi)

@zdyxry

fping 5.1 (2022-02-06) ====================== ## Bugfixes and other changes - Use setcap to specify specific files in fping.spec (#232, thanks @zdyxry) - Netdata: use host instead name as family label (#226, thanks @k0ste) - Netdata: use formatstring macro PRId64 (#229, thanks @gsnw) - Allow -4 option to be given multiple times (#215, thanks @normanr) - Documentation fix (#208, thanks @timgates42) - Retain privileges until after privileged setsockopt (#200, thanks @simetnicbr) - Set bind to source only when option is set (#198, thanks @dinoex) - Update Azure test pipeline (#197, thanks @gsnw) - Fix getnameinfo not called properly for IPv4 (#227, thanks @aafbsd) - Fixed wrong timestamp under Free- and OpenBSD and macOS (#217, thanks @gsnw) - Documentation updates (#240, thanks @auerswal) - Updated autotools (autoconf 2.71, automake 1.16.5, libtool 2.4.6) fping 5.0 (2020-08-05) ====================== ## Incompatible Changes - In non-quiet loop and count mode, a line is printed for every lost packet (#175, thanks @kbucheli): ``` $ fping -D -c2 8.8.8.8 8.8.8.7 [1596092373.18423] 8.8.8.8 : [0], 64 bytes, 12.8 ms (12.8 avg, 0% loss) [1596092374.18223] 8.8.8.7 : [0], timed out (NaN avg, 100% loss) [1596092374.18424] 8.8.8.8 : [1], 64 bytes, 12.3 ms (12.5 avg, 0% loss) [1596092375.18344] 8.8.8.7 : [1], timed out (NaN avg, 100% loss) 8.8.8.8 : xmt/rcv/%loss = 2/2/0%, min/avg/max = 12.3/12.5/12.8 8.8.8.7 : xmt/rcv/%loss = 2/0/100% ``` - The returned size in bytes now always excludes the IP header, so if before it reported '84 bytes' e.g. when using 'fping -l', now it reports '64 bytes'. This is to make the reported size consistent with ping(8) from iputils and also with fping when pinging a IPv6 host (which never included the IPv6 header size). ## New features - The number of sent pings is only counted when the pings are received or have timed out, ensuring that the loss ratio will be always correct. This makes it possible, for example, to use loop mode (-l) with interval statistics (-Q) and a timeout larger than period, without having the issue that initially some pings would be reported as missing (#193) - Improved precision of measurements from 10us to 1us (#136, thanks @tycho) ## Bugfixes and other changes - The reported size of received packets is now always correct on Linux even for packets > 4096 bytes (#180) - Travis CI automated testing now also macos testing and additional ubuntu distributions (#196)

@grizlupo

This release is the first release of chardet that no longer supports Python < 3.6. In addition to that change, it features the following user-facing changes: Added a prober for Johab Korean (#207, @grizlupo) Added a prober for UTF-16/32 BE/LE (#109, #206, @jpz) Added test data for Croatian, Czech, Hungarian, Polish, Slovak, Slovene, Greek, and Turkish, which should help prevent future errors with those languages Improved XML tag filtering, which should improve accuracy for XML files (#208) Tweaked SingleByteCharSetProber confidence to match latest uchardet (#209) Made detect_all return child prober confidences (#210) Updated examples in docs (#223, @domdfcoding) Documentation fixes (#212, #224, #225, #226, #220, #221, #244 from too many to mention) Minor performance improvements (#252, @deedy5) Add support for Python 3.10 when testing (#232, @jdufresne) Lots of little development cycle improvements, mostly thanks to @jdufresne

- added support for Hare - fixed `--no-trailing-nl` option for LaTeX output (#216) - fixed typos in rnc.lang, spn.lang and znn.lang (#139) - fixed missing ngerman package for `--replace-quotes` option (#222) - fixed quotes highlighting in XML (#226) - updated file extension lists (#227) - updated astyle lib to version 3.2

3.5.8 (2023-05-12) Improvements * doc: Improved document for multi Ractor mode. GH-226 [Patch by Luke Gruber] * doc: Updated minitest's URL. GH-228 [Patch by Koichi ITO] * UI: console: Added --progress-style option. * UI: console: Compacted --verbose=important-only output.. * UI: console: Changed the default output level to important-only on GitHub Actions. Thanks * Luke Gruber * Koichi ITO

@MarkEdmondson1234

# gargle 1.4.0 ## Google Compute Engine * `credentials_gce(scopes = NULL)` is now equivalent to `credentials_gce(scopes = "https://www.googleapis.com/auth/cloud-platform")`, i.e. there's an even stronger current towards the recommended "cloud-platform" scope. * `credentials_gce(scopes =)` now includes those `scopes` in its request to the metadata server for an access token (#216). Note that the scopes for a GCE access token are generally pre-determined for the instance and its associated service account at creation/launch time and these requested `scopes` will have no effect. But this seems to do no harm and it is possible that there are contexts where this is useful. * `credentials_gce()` now emits considerably more information when the `"gargle_verbosity"` option is set to `"debug"`. For example, it reports mismatches between requested scopes and instance scopes and between requested scopes and the access token's actual scopes. * `credentials_gce()` stores the actual scopes of the received access token, which can differ from the requested scopes. This is also noted when the `"gargle_verbosity"` option is set to `"debug"`. * The `GceToken` R6 class gains a better `$print()` method that is more similar to gargle's treatment of tokens obtained with other flows. ## Behaviour in a cloud/server context * gargle is better able to detect when it's running on Posit Workbench or RStudio Server, e.g., in a subprocess. * `gargle_oauth_client_type()` is a new function that returns either "installed" or "web". It returns the value of the new global option by the same name (`"gargle_oauth_client_type"`), if defined. If the option is not defined, returns "web" on RStudio Server, Posit Workbench, Posit Cloud, or Google Colaboratory and "installed" otherwise. In the context of out-of-band (OOB) auth, an "installed" client type leads to the conventional OOB flow (only available for GCP projects in testing mode) and a "web" client leads to the new pseudo-OOB flow. The option and accessor have been added to cover contexts other than those mentioned above where it is helpful to request a "web" client. * `credentials_user_oauth2()` now works in Google Colaboratory (#140). ## Everything else * gargle now elicits user input via `readline()`, instead of via `utils::menu()`, which is favorable for interacting with the user in a Jupyter notebook (#242). * The roxygen templating functions that wrapper packages can use to generate standardized documentation around auth have been updated to reflect gargle's pivot from OAuth "app" to "client". Changes of note: - `PREFIX_auth_configure_description()` crosslinks to `PREFIX_oauth_client()` now, not `PREFIX_oauth_app()`. So this assumes the package has indeed introduced the `PREFIX_oauth_client()` function (and, presumably, has deprecated `PREFIX_oauth_app()`). - `PREFIX_auth_configure_params()` gains `client` argument. - `PREFIX_auth_configure_params()` deprecates the `app` argument and uses a lifecycle badge. It is assumed that the badge SVG is present, which can be achieved with `usethis::use_lifecycle()`. - `PREFIX_auth_configure_params()` crosslinks to `gargle::gargle_oauth_client_from_json()`. The wrapper package therefore needs to state a minimum version for gargle, e.g. `gargle (>= 1.3.0)` (or higher). * `credentials_byo_oauth2()` works now for (variations of) service account tokens, as intended, not just for user tokens (#250). It also emits more information about scopes when the `"gargle_verbosity"` option is set to `"debug"`. # gargle 1.3.0 ## (Partial) deprecation out-of-band (OOB) auth flow On February 16, 2022, Google announced the gradual deprecation of the out-of-band (OOB) OAuth flow. OOB **still works** if the OAuth client is associated with a GCP project that is in testing mode and this is not going away. But OOB is no longer supported for projects in production mode. To be more accurate, some production-mode projects have gotten an extension to permit the use of OOB auth for a bit longer, but that's just a temporary reprieve. The typical user who will (eventually) be impacted is: * Using R via RStudio Server, Posit Workbench, or Posit Cloud. * Using tidyverse packages such as googledrive, googlesheets4, or bigrquery. * Relying on the built-in OAuth client. Importantly, this client is associated with a GCP project that is in production mode. The phased deprecation of OOB is nearly complete and we expect conventional OOB to stop working with the built-in tidyverse OAuth client on February 1, 2023, at the latest. **In preparation for this, gargle has gained support for a new flow, which we call pseudo-OOB (in contrast to conventional OOB)**. The pseudo-OOB flow is triggered when `use_oob = TRUE` (an existing convention in gargle and gargle-using packages) and the configured OAuth client is of "Web application" type. The gargle/googledrive/googlesheets4/bigrquery packages should now default to a "Web application" client on RStudio Server, Posit Workbench and Posit Cloud, leading the user through the pseudo-OOB flow. Other than needing to re-auth once, affected users should still find that things "just work". Read the `vignette("auth-from-web")` for more. ## gargle-specific notion of OAuth client `gargle_oauth_client()` is a new constructor for an S3 class by the same name. There are two motivations: - To adjust to Google's deprecation of conventional OOB and to support gargle's new pseudo-OOB flow, it is helpful for gargle to know whether an OAuth client ID is of type "Web application" or "Desktop app". That means we need a Google- and gargle-specific notion of an OAuth client, so we can introduce a `type` field. - A transition from httr to httr2 is on the horizon, so it makes sense to look more toward `httr2:oauth_client()` than to `httr::oauth_app()`. gargle's vocabulary is generally shifting towards "client" and away from "app". `oauth_app_from_json()` has therefore been (soft) deprecated, in favor of a new function `gargle_oauth_client_from_json()`, which is the preferred way to instantiate an OAuth client, since the downloaded JSON conveys the client type and redirect URI(s). As a bridging measure, `gargle_oauth_client` currently inherits from httr's `oauth_app`, but this probably won't be true in the long-term. `gargle_client(type =)` replaces `gargle_app()`. ## Google Compute Engine and Google Kubernetes Engine `credentials_gce()` no longer asks the user about initiating an OAuth cache, which is not relevant to that flow (#221). `gce_instance_service_accounts()` is a newly exported utility that exposes the service accounts available from the metadata server for the current instance (#234). The global option `"gargle.gce.timeout"` is newly documented in `credentials_gce()`. This controls the timeout, in seconds, for requests to the metadata server. The default value (or strategy) for setting this should often suffice, but the option exists for those with an empirical need to increase the timeout (#186, #195). `vignette("non-interactive-auth")` has a new section "Workload Identity on Google Kubernetes Engine (GKE)" that explains how gargle supports the use of workload identity for applications running on GKE. This is the recommended method of auth in R code running on GKE that needs to access other Google Cloud services, such as the BigQuery API (#197, #223, @MarkEdmondson1234). ## Credential function registry It's gotten a bit easier to work with the credential registry. The primary motivation is that, for example, on Google Compute Engine, you might actually want to suppress auth with the default service account and auth as a normal user instead. This is especially likely to come up with gmailr / the Gmail API. * The credential-fetcher `credentials_byo_oauth2()` has been moved to the very beginning of the default registry. The logic is that a user who has specified a non-`NULL` value of `token` must mean business and does not want automagic auth methods like ADC or GCE to be tried before using their `token` (#187, #225). * The `...` in `cred_funs_all()` are now [dynamic dots](https://rlang.r-lib.org/reference/dyn-dots.html) (#224). * Every registered credential function must have a unique name now. This is newly enforced by `cred_funs_add()` and `cred_funs_set()` (#224). * `cred_funs_list_default()` is a new function that returns gargle's default list of credential functions (#226). * `cred_funs_add(cred_fun = NULL)` is now available to remove a credential function from the registry (#224). * `with_cred_funs()` and `local_cred_funs()` are new helpers for making narrowly scoped changes to the registry (#226). * The `ls` argument of `cred_funs_set()` has been renamed to `funs` (#226). * In general, credential registry functions now return the current registry, invisibly (#224). # gargle 1.2.1 * Help files below `man/` have been re-generated, so that they give rise to valid HTML5. (This is the impetus for this release, to keep the package safely on CRAN.) * We have switched to newer oauth2.googleapis.com-based OAuth2 URIs, moving away from the accounts.google.com and googleapis.com/oauth2 equivalents. * `credentials_gce()` no longer validates the requested scopes against instance scopes. In practice, it's easy for this check to be more of a nuisance than a help (#161, #185 @craigcitro). * `request_retry()` retries for an expanded set of HTTP codes: 408, 429, 500, 502, 503. Previously, retries were limited to 429 (#169). ## Dependency changes * The minimum versions of rlang and testthat have been bumped. The motivation is to exploit and adapt to the changes to the display of error messages.

@vszakats

(also taking over maintainership after confirming with Patrick) v.2.4.3 Add static hpdf_version.h header by @vszakats in #241 hpdf_version.h included again by hpdf.h #241 #246 File attachment issue resolved @hvanbrug #159 Renamed *_LIBZ defines to _*ZLIB, thanks to @karstenBriksoft #249, enables compression of PDF files again. v.2.4.2 Reinstated hpdf_version.h #237 #240 v.2.4.1 Fixed library name #236 from @jschueller Set correct version number #237 pointed out by @xantares v.2.4.0 Add support for free-form triangle shading objects. by @allisonvacanti in #157 Fix config constant to match use in hpdf_mmgr.c by @bvirlet in #167 Improve small number writing in HPDF_FToA. by @allisonvacanti in #187 Fix missing /CapHeight key in font definition by @yabaud in #138 Change HPDF_Page_CreateXObjectFromImage zoom parameter type to HPDF… by @extensia in #114 Fix another case of png files with background mask save uncompressed by @igor-niv in #221 Avoid issue with libtiff duplicate symbols by @bvirlet in #168 Reajust bit_depth of png image after striping depth from 16 to 8. by @joelhecht in #125 Fixed typo in Japanese font name: Mincyo -> Mincho by @qtamaki in #80 Fix various typos by @luzpaz in #226 hpdf.h: add missing HPDF_Boolean typedef by @mathstuf in #189 Moved to a CMake only build environment. Fix bad unicode in comment by @gix in #229 Fix various typos by @luzpaz in #230

@hyperpuncher

What's Changed - fix typo in config example variable by @hyperpuncher in #209 - Add Void Linux as install option by @f1nbar in #210 - Implement timeout mechanism for getting authentication token by @aome510 in #212 - Fix a typo for homebrew install instructions by @toh995 in #216 - Add tracks_playback_limit config option by @aome510 in #219 - Use ttl cache instead of lru by @aome510 in #220 - Create app.toml with default values if it doesn't exist by @cobbinma in #221 - Tokyonight Theme 🎨 by @cobbinma in #225 - Improve queue popup by @m-torhan in #226 - fix: constant module name typo by @nuugen in #227 - Allow removing a keybind by @Kuba314 in #223 - move items in a playlist by @cobbinma in #224 - Improve TTL caching and handling by @aome510 in #230 - Playlist CLI Editing - New, Delete, Import, Fork, Update by @justjokiing in #222

@karthiknadig

Enhancements Update LSP spec to latest by @karthiknadig in #230 Add --output-dir switch to code generator by @karthiknadig in #239 Dotnet Dotnet: Code generation for LSP methods by @karthiknadig in #222 Generate request, notification and options classes by @karthiknadig in #224 dotnet: Add test case generation by @karthiknadig in #226 Add devcontainer support to repo by @timheuer in #234 Add dotnet test and format check to GHA by @karthiknadig in #240 Add response types and improve test suite by @karthiknadig in #243 Generate dotnet project package. by @karthiknadig in #252 Format Generated Code by @karthiknadig in #257 Use record instead of class for LSP types. by @karthiknadig in #258 Use ImmutableArray and ImmutableDictionary by @karthiknadig in #256 Bug Fixes Fix bug with structuring LSPObject type by @karthiknadig in #229 dotnet: Fix issues with OrType serialization by @karthiknadig in #232 Improve documentation tags in generated code by @karthiknadig in #250 Fix warning with generated converter code by @karthiknadig in #251 Fix for missing notebook selector hook by @karthiknadig in #260

Upstream NEWS, less bugfixes, minor improvements, and developer-facing changes: Release notes for NUT 2.8.1 - what's new since 2.8.0 ---------------------------------------------------- https://github.com/networkupstools/nut/milestone/8 - "UPS management protocol", Informational RFC 9271 published by IETF at https://www.rfc-editor.org/info/rfc9271 and the IANA port number registry was updated accordingly at https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=3493 (even though this RFC is not formally an Internet Standard) - NUT documentation files were rearranged, renaming some to `*.adoc` pattern to facilitate automatic rendering in GitHub and IDE GUIs, and adding recipe support for GitHub issue/PR links. This `NEWS` file is now proper asciidoc rendered into `release-notes.pdf` (and HTML versions). [issue #1953, PR #2048] Internally, the documents would use a new way to define cross-linking to other pages and their chapters, to facilitate different renderers (including GitHub UI), and file names created for "chunked HTML" documentation format will no longer have the "chapter number, section number" format which is not easy to maintain over time with independent builds of documentation in NUT and the actual and historic snapshots for nut-website for example. Chapter/Section names will be adapted to produce "chunked HTML" file names instead. Documentation links rendered in GitHub UI should point to the HTML pages served by a current iteration of the NUT website. [PR #226, PR #669] - State tree structure and methods (including "dstate" wrapper for common driver internals) was enhanced with time-stamping of last modification (setting, changing, deleting the value or some fields in an entry): this allows to detect stale information in a centralized fashion [#2010] - nutdrv_qx updates: * a `battery_voltage_reports_one_pack` driver option was added for devices which "natively" report a `battery.voltage` for a single battery pack or cell, not for the whole assembly [#1279] - usbhid-ups updates: * added support for `subdriver` configuration option, to select the USB HID subdriver for the device manually where automatic match does not suffice (e.g. new devices for which no `vendorid`/`productid` pair was built into any driver, or for different-capability devices with same interface chips, notably "phoenixtec/liebert" and "mge") [#1369] * added `onlinedischarge_calibration` option for UPSes that report `OL+DISCHRG` when they are in calibration mode [#2104] - apc_modbus driver was introduced, to cover the feature gap between existing NUT drivers for APC hardware and the actual USB-connected devices (or their firmwares) released since roughly 2010, which deprecated standard USB HID support in favor of Modbus-based protocol which is used across the board (also with their network management cards). The new driver can monitor APC UPS devices over TCP and Serial connections, as well as USB with a patched libmodbus (check https://github.com/EchterAgo/libmodbus/commits/rtu_usb for now, PR pending). [#139, #2063] * For a decade until this driver got introduced, people were advised to use apcupsd project as the actual program which talks to a device, and NUT apcupsd-ups driver to relay information back and forth. This was a limited solution due to lack of command and variable setting support, as well as relaying of just some readings (just whatever apcupsd exposes, further constrained by what our driver knows to re-translate), with little leverage for NUT to tap into everything the device has to offer. There were also issues on some systems due to packaging (e.g. marking NUT and apcupsd as competing implementations of the same features) which required clumsy workarounds to get both installed and running. Finally, there is a small matter of long-term viability of that approach: last commits to apcupsd sources were in 2017 (with last release 3.14.14 in May 2016): https://sourceforge.net/p/apcupsd/svn/HEAD/tree/ - The `upsd` configured to listen on IPv6 addresses should handle only IPv6 (and not IPv4-mappings) to avoid surprises and insecurity; it will now warn if a host name resolves to several addresses (and will only listen on the first hit, as before in such cases) [#2012] - A definitive behavior for `LISTEN *` directives became specified, to try handling both IPv4 and IPv6 "any" address (subject to `upsd` CLI options to only choose one, and to OS abilities). When both address families are enabled, the `upsd` data server will first try to open an IPv6 socket asking for disabled IPv4-mapped IPv6 address support (if the OS honors that), and then an IPv4 socket (which may fail if the IPv6 socket already covers it anyway); in other words, you can end up with one or two separate listening sockets. [#2012] - Numerous daemons (`upsd`, `upsmon`, drivers, `upsdrvctl`, `upssched`) which accepted `-D` option for debug setting previously, now can also honour a `NUT_DEBUG_LEVEL=NUM` environment variable if no `-D` arguments were provided. Unlike those arguments, the environment variable does not enforce that daemons run in foreground mode by default [#1915] * Note that unlike some other NUT daemons, `upssched` with enabled debug does not stop reporting on `stderr`! [#1965]

c4befd0 Merge pull request #223 from danielgtaylor/dependabot/go_modules/golang.org/x/net-0.17.0 2db8c10 Merge pull request #225 from exoscale/cached-transport c0f180c Merge pull request #226 from danielgtaylor/dependabot/go_modules/golang.org/x/image-0.10.0 b75a307 Merge pull request #227 from cbliard/patch-1 a92c7db Merge pull request #229 from danielgtaylor/redirect-url 21a9017 Merge pull request #233 from danielgtaylor/hide-secrets-input d16bdd7 Merge pull request #234 from danielgtaylor/clear-auth-cache 0a1f26c Update docs to use go install instead of go get 00b34d8 chore(deps): bump golang.org/x/image from 0.5.0 to 0.10.0 8135dc8 chore(deps): bump golang.org/x/net from 0.7.0 to 0.17.0 ac559b9 chore: add configurable redirect_url, preserve default value 97c3636 feat: add command to clear auth token cache 13fe1aa fix(api): Do not cache server responses when refreshing API defs 1ecdb09 fix: hide secret input during API config, fixes #232 9a25266 fix: use better url parsing

@patrickt

v0.20.1 What's Changed Switch to GitHub Actions CI. by @patrickt in #166 Add the same PR template as for tree-sitter-javascript by @mjambon in #169 Fixed CRLF behavior for tests by @ahelwer in #188 Fix CRLF behavior mismatch during error recovery by @ahelwer in #189 Endless methods by @aibaars in #190 Add forwarded parameters/arguments by @aibaars in #191 Disable C++ exceptions when compile for wasm32-wasi by @glebpom in #192 Pattern matching by @aibaars in #193 Improve grammar after the introduction of case-in pattern matching by @aibaars in #197 Add parenthesized_pattern by @aibaars in #198 Ruby 3.1 features by @aibaars in #201 Update to Node 16 by @mattmassicotte in #206 C bindings by @mattmassicotte in #199 Parser improvements by @aibaars in #207 CI: use windows-2019 for now by @aibaars in #209 Add named rules for the various call operators by @aibaars in #211 Update Makefile by @mattmassicotte in #213 Allow newer tree-sitter upstream library. by @patrickt in #215 Bump tree-sitter version to 0.20 by @hendrikvanantwerpen in #214 Fix parse error in 'foo! if condition' by @aibaars in #216 Parser improvements: != operator and key: [line_break] by @aibaars in #220 Some improvements to the parser by @aibaars in #222 Wrap class, module, method, and block bodies in a named node by @npezza93 in #224 Parser improvments: quoted heredocs and short-hand interpolations by @aibaars in #225 Add body field for end-less methods by @aibaars in #226 Swift bindings by @mattmassicotte in #227 fix: rename reserved word “arguments” by @drwpow in #229 Bump versions in #208 Anonymous (hash) splat arguments by @aibaars in #233 One-line pattern matching by @aibaars in #194 Scanner: do not skip LINE_BREAKs before .. and ... by @aibaars in #238 Fix non-termination in parser by @aibaars in #239 Fix scanning of division vs regex before line ending by @aibaars in #246 Fix 'case' with newlines before expression by @aibaars in #247

Features / Improvements ✨ Links should be "openable" (#43) Add support for previewing images in room scrollback (#108) Enable sending strikethrough text (#141) Support composing messages in an external editor (#155) Add support for logging in with SSO (#160) Add new command for logging out of iamb session (#162) Support custom sorting for room and user lists (#170) feat: desktop file for GUI environment launchers (#178) Add a new :chats window that lists both DMs and Rooms (#184) Add support for desktop notifications (#192) Support coloring entire message with the user color (#193) Indicate and sort on rooms with unread messages (#205) Support following the .well-known entries for a username's domain (#209) Add support for threads (#216) Add support for custom key macros (#217) Support displaying shortcodes instead of Emojis in messages (#222) Support configuring user gutter width (#223) Enable autolinking when rendering Markdown (#226) Support notifications via terminal bell (#227) Support loading a TOML configuration (#229) Add commands for importing and exporting room keys (#233) Documentation / README updates 📚 Fix example config (#140) Add more documentation (#166) Update README.md to add openSUSE Tumbleweed (#191) Add snap install instructions (#210) Add example of mapping "V" to toggle message selection mode (#195) Update manual pages to use mdoc(7) and list commands (#230) Add an icon for iamb (#232) Bug Fixes 🐞 Fix not showing display names in already synced rooms (#171) Fix image preview offset (#179) Update to ratatui-image@0.4.3 to use native sixel lib (#181) Fix truncation/padding for non-ASCII sender names (#182) Fix crash on small image preview (#198) Download rooms keys from backups if they exist (#211) Ignore key releases on platforms that support it (#220) Provide better error message for M_UNKNOWN_TOKEN (#101) Fix entering thread view when there's no messages yet (#224) Fix image previews in replies (#225) Reset message bar when ! is passed with :cancel (#231) Wait to log in before starting background tasks (#234) Performance ⏱️ Reduce CPU usage by instead fetching read receipts after related sync events (#168) Load receipts for room before acquiring lock (#213) Building / Housekeeping 🧹 Update Cargo.lock file (#157) Update modalkit for newer ratatui and crossterm Fix CI workflow (#164) Use mozilla-actions/sccache-action for caching builds (#169) Enable direnv for Nix flakes (#183) Update to matrix-sdk@0.7.1 (#200) Rename Nix flake build input from pkgconfig to pkg-config (#203) Update modalkit dependencies (#204) Move LTO into its own "release-lto" profile (#207) Fix Nix flake hashes (#206) Pull in modalkit repository with a Cargo.lock (#208) Nix flake updates (#214) Update to ratatui-image@0.8.1 (#215) Support linking against system OpenSSL (#218) GitHub workflow should use --locked to avoid broken Cargo.lock (#219) Fix odd Windows-only compile error (#221)

jperkin self-assigned this Apr 22, 2020

jperkin closed this as completed Apr 22, 2020

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

dehydrated-0.4.0nb1 fails to find Replay-Nonce header if fetch is done via HTTP/2 #226

dehydrated-0.4.0nb1 fails to find Replay-Nonce header if fetch is done via HTTP/2 #226

drboone commented Oct 2, 2019

jperkin commented Apr 22, 2020

dehydrated-0.4.0nb1 fails to find Replay-Nonce header if fetch is done via HTTP/2 #226

dehydrated-0.4.0nb1 fails to find Replay-Nonce header if fetch is done via HTTP/2 #226

Comments

drboone commented Oct 2, 2019

jperkin commented Apr 22, 2020