Fix build on illumos (SmartOS) by drscream · Pull Request #9 · NetBSD/pkgsrc

drscream · 2017-08-21T11:14:21Z

On illumos it's required to cast the log10 parameter to double to use the correct function, otherwise it result function overload error. Based on the taskwarrior documentation the cmake option CMAKE_BUILD_TYPE=release is added.

jperkin · 2017-08-21T14:39:30Z

Committed, thanks!

0.10 2017-05-29 12:30:35 PDT - Fix mirror() (haarg) #9

1.51 2018-03-04 - Add test for nested tags breakage that happened in v1.46 - Turn off strict+warnings in sections where template code is eval'ed [github #9]

0.1.77 2017/09/23 * Convert double quotes to single quotes to match #{URL} 0.1.76 2017/09/07 * Merge pull request #9 from sempervictus/feature-payload_msil_jit 0.1.75 2017/08/25 * Remove useless failing spec * Improve use of RandomIdentifier::Generator * Add MSIL to template constants * Update spec for MSIL payload * Implement MSIL payload in Rex gem via template * Update spec for command * Finalize quote wrapper * Rework quote handling * Cleanup Command single quotes redundant gsub 0.1.74 2017/07/18 * Alternative to IEX in dl_and_exec_string methods * Command spec - deal with :use_single_quotes * Output and command improvements for Win10 0.1.73 2017/05/12 * update spec to require Ruby 2.2.0 or greater

0.1.12 (2018/03/21) * Land #9, improve SSL certificate generation * fix is_mac_addr to validate if something is _only_ a mac address * Improve SSL certificate generation 0.1.11 (2018/02/09) * Land #8, factor out SSL bits * Address Brent's comment - drop @@loaded_openssl * Implement a certificate provider pattern in Socket * Extract and mixin cert ops from server module

Upstream changes: 0.43 Sat Apr 21 15:39:09 2018 - pull request #16 - strip down list of prerequisites to modules that are safe to use high on the CPAN river (thanks karenetheridge) 0.42 Fri Apr 20 23:42:41 2018 - rt 125136 - reinstate 5.8 compat by not using // operator in the new unc test (thanks SREZIC) - pull request #14 - Add .gitignore. (thanks jkeenan) - pull request #13 - File::Find::Rule is used in the test suite but not named as a prequisite in Makefile.PL. (thanks jkeenan) 0.41 Thu Apr 19 15:58:12 2018 - Issue #10 and #8: fix Makefile.PL; add github metadata (thanks karenetheridge and chorny) - Issue #11: Fix the test failure described in RT#123964 (thanks tomhukins and SREZIC) - Issue #9: Fixes for Windows (thanks chorny) - rt 124324 - fix v0.40 changelog date (thanks ANDK) - rt 124151 - pathrm with force on should guard against absolute paths (thanks chorny) - rt 124423 - have fcopy() work around File::Copy::copy() bug rt132866 (thanks DROLSKY) - Issue #12 and rt 124166 - set umask for reliability (thanks teoric and ether) - rt 43328 - add ULC test to verify pathmk() w/ ULC (thanks willi.weikum and LouisStrous)

2.86 Fri 20 Apr 20:07:29 2018 - GH #9: fix bug which prevented autoboxing working under the debugger on perl 5.22+ (thanks, skington) - added t/debugger.t - GH #8: fix bug which prevented bareword method-calls being exempted when the method is a variable e.g. Foo->$bar - add operator-overloading note to the gotchas section (GH #7)

Update to hyperref, special thanks to Ulrike Fischer for providing fixes to several issues. 2018-02-06 6.86b David Carlisle * 6.86b * Fix packaging of luatex.dtx (reported on tex.sx) 2017-09-29 6.86a David Carlisle * 6.86a * bump version and fix documentation markup * fixes to xsl and other minor build adjustments * send driver message just to log, issue #9 * add \and to the list of commands locally made safe in pdf title info, issue #44 * for issue #50 add pdf source zip from texmf-dist/doc/latex/hyperref-docsrc 2017-09-29 6.86a David Carlisle * 6.86a * Make driver auto detect info not message (so just log not terminal) issue #9 * Make \and locally "; " while making pdf info string issue #44 2017-09-29 6.856a Ulrike Fischer * 6.86a * don't define \noboundary as text command / issue 37 (#45) * changed default pdfversion from 2 to 5, along the default settings in the current tex systems * change with pdfa version to 4 only if the current version is smaller, see issue #38 * removed \noboundary from puarenc.def, see issue #37 * Issue #38: change version to 1.4 with pdfa only if it is smaller (#43) * changed default pdfversion from 2 to 5, along the default settings in the current tex systems * change with pdfa version to 4 only if the current version is smaller, see issue #38 * issue #25, added \HyPsd at EscapeTeX#1% to correctly escape non-ascii in heading (#42) * code to amend issue #40 (missing pdfhighlight option for xetex/dvipdfmx) (#41) * corrected typo in hpdftex.def * exchanged code for pdfhighlight by \Hy at setpdfhighlight in hpdftex.def * exchanged code for pdfhighlight by \Hy at setpdfhighlight in hluatex.def * added \Hy at setpdfhighlight to hdvipdfm/hxetex.def

Release 2.2.6 Sun August 12 2018 Bug fixes: #170 #206 Avoid doing arithmetic with NULL pointers in XML_GetBuffer #204 #205 Fix 2.2.5 regression with suspend-resume while parsing a document like '<root/>' Other changes: #165 #168 Autotools: Fix docbook-related configure syntax error #166 Autotools: Avoid grep option `-q` for Solaris #167 Autotools: Support ./configure DOCBOOK_TO_MAN="xmlto man --skip-validation" #159 #167 Autotools: Support DOCBOOK_TO_MAN command which produces xmlwf.1 rather than XMLWF.1; also covers case insensitive file systems #181 Autotools: Drop -rpath option passed to libtool #188 Autotools: Detect and deny SGML docbook2man as ours is XML #188 Autotools/CMake: Support command db2x_docbook2man as well #174 CMake: Introduce option WARNINGS_AS_ERRORS, defaults to OFF #184 #185 CMake: Introduce option MSVC_USE_STATIC_CRT, defaults to OFF #207 #208 CMake: Introduce option XML_UNICODE and XML_UNICODE_WCHAR_T, both defaulting to OFF #175 CMake: Prefer check_symbol_exists over check_function_exists #176 CMake: Create the same pkg-config file as with GNU Autotools #178 #179 CMake: Use GNUInstallDirs module to set proper defaults for install directories #208 CMake: Utilize expat_config.h.cmake for XML_DEV_URANDOM #180 Windows: Fix compilation of test suite for Visual Studio 2008 #131 #173 #202 Address compiler warnings #187 #190 #200 Fix miscellaneous typos Version info bumped from 7:7:6 to 7:8:6 Release 2.2.5 Tue October 31 2017 Bug fixes: #8 If the parser runs out of memory, make sure its internal state reflects the memory it actually has, not the memory it wanted to have. #11 The default handler wasn't being called when it should for a SYSTEM or PUBLIC doctype if an entity declaration handler was registered. #137 #138 Fix a case of mistakenly reported parsing success where XML_StopParser was called from an element handler #162 Function XML_ErrorString was returning NULL rather than a message for code XML_ERROR_INVALID_ARGUMENT introduced with release 2.2.1 Other changes: #106 xmlwf: Add argument -N adding notation declarations #75 #106 Test suite: Resolve expected failure cases where xmlwf output was incomplete #127 Windows: Fix test suite compilation #126 #127 Windows: Fix compilation for Visual Studio 2012 Windows: Upgrade shipped project files to Visual Studio 2017 #33 #132 tests: Mass-fix compilation for XML_UNICODE_WCHAR_T #129 examples: Fix compilation for XML_UNICODE_WCHAR_T #130 benchmark: Fix compilation for XML_UNICODE_WCHAR_T #144 xmlwf: Fix compilation for XML_UNICODE_WCHAR_T; still needs Windows or MinGW for 2-byte wchar_t #9 Address two Clang Static Analyzer false positives #59 Resolve troublesome macros hiding parser struct membership and dereferencing that pointer #6 Resolve superfluous internal malloc/realloc switch #153 #155 Improve docbook2x-man detection #160 Undefine NDEBUG in the test suite (rather than rejecting it) #161 Address compiler warnings Version info bumped from 7:6:6 to 7:7:6

1.59 2018-08-04 rurban ---- * Improve tests using FindBin for filter-util.pl [atoomic #9] * Added new m4 filter [werner lemberg #8] * Add int casts, assert on 2GB limitation.

1.20180901 2018-09-01 12:19:53-07:00 America/Los_Angeles - skip tests when PERL5OPT is set (David Precious, GH #9)

0.73 2018-09-01 05:43:55Z - properly wrap usage text that contains newlines (Andreas Koenig, github #10) - move the exit() to a higher scope, to allow for 'after' method modifiers on 'print_usage_text' (Michael Schout, github #9)

3.58 2018-09-01 sbeck - (*) Locale-Codes removed from core Locale-Codes will no longer be distributed in new versions of perl. - Documentation fix Fixed an incorrect link reported by Mohammad S Anwar on GitHub (#9)

## [v0.4.16](https://github.com/chef/mixlib-archive/tree/v0.4.16) (2018-08-28) #### Merged Pull Requests - Fix read_tar_magic to properly return an array when a file has less than 264 characters [#30](chef/mixlib-archive#30) ([bdwyertech](https://github.com/bdwyertech))   ### Changes not yet released to rubygems.org #### Merged Pull Requests - Fix read_tar_magic to properly return an array when a file has less than 264 characters [#30](chef/mixlib-archive#30) ([bdwyertech](https://github.com/bdwyertech))  - Fix mixlib-archive on Windows, add Appveyor [#31](chef/mixlib-archive#31) ([stuartpreston](https://github.com/stuartpreston))  - Ensure that paths like foo..bar.baz aren't ignored [#9](chef/mixlib-archive#9) ([thommay](https://github.com/thommay))    ## [v0.4.13](https://github.com/chef/mixlib-archive/tree/v0.4.13) (2018-08-03) #### Merged Pull Requests - add codeowners [#24](chef/mixlib-archive#24) ([thommay](https://github.com/thommay)) - Move deps to the Gemfile and expand Rake tasks [#25](chef/mixlib-archive#25) ([tas50](https://github.com/tas50)) - Add github issue template & standardize expeditor config [#26](chef/mixlib-archive#26) ([tas50](https://github.com/tas50)) - Update codeowners and add PR template [#27](chef/mixlib-archive#27) ([tas50](https://github.com/tas50)) - bugfix to make dir.chdir threadsafe [#29](chef/mixlib-archive#29) ([stevenoneill](https://github.com/stevenoneill))  ## [v0.4.8](https://github.com/chef/mixlib-archive/tree/v0.4.8) (2018-06-21) #### Merged Pull Requests - Use the correct entry size for content with multi-byte characters. [#23](chef/mixlib-archive#23) ([coderanger](https://github.com/coderanger))   ### Changes not yet released to rubygems.org #### Merged Pull Requests - Use the correct entry size for content with multi-byte characters. [#23](chef/mixlib-archive#23) ([coderanger](https://github.com/coderanger))    ## [v0.4.7](https://github.com/chef/mixlib-archive/tree/v0.4.7) (2018-06-07) #### Merged Pull Requests - fixup strange edge case around tar magic reading [#22](chef/mixlib-archive#22) ([spion06](https://github.com/spion06))  ## [v0.4.6](https://github.com/chef/mixlib-archive/tree/v0.4.6) (2018-05-08) #### Merged Pull Requests - update tar magic to identify oldgnu style tar headers [#21](chef/mixlib-archive#21) ([spion06](https://github.com/spion06)) ## [v0.4.5](https://github.com/chef/mixlib-archive/tree/v0.4.5) (2018-05-04) #### Merged Pull Requests - Fix up creating archives [#18](chef/mixlib-archive#18) ([thommay](https://github.com/thommay)) - Fix up writing tar archives with the rubygems tar [#19](chef/mixlib-archive#19) ([thommay](https://github.com/thommay)) ## [v0.4.2](https://github.com/chef/mixlib-archive/tree/v0.4.2) (2018-04-25) #### Merged Pull Requests - use libarchive by preference [#17](chef/mixlib-archive#17) ([thommay](https://github.com/thommay))

0.2.17 (2018-02-09) * Land #9, remove use of 'fun' keyword * Land #10, add rand_country 0.2.18 (2018-04-12) * Land #11, ranges for rand_base and rand_text_* 0.2.19 (2018-04-18) * Land #13, add text encryption / encoding wrappers 0.2.20 (2018-04-18) * Land #14, remove RC4/SHA256 support * Land #12, bump ruby deps 0.2.21 (2018-06-13) * Land #16, simplify shuffle_a implementation * Land #17, speedup to_mixed_case_array * Land #18, use single regular expression for strict case * Land #19, remove unnecessary gsub regex to remove newline * Land #21, add SHA2 digest wrappers

@d

#mp3splt version 2.6.2 - added bit reservoir handling for gapless playback option using the -b parameter (see manual for details) - added @d to output format which is equal to: last directory of the input filename or the filename itself if no directory #mp3splt version 2.6.1b - bug fix: make sure to separate artist and performer in CUE files for use of @p and @A (libmp3splt) - bug fix on CUE: from INDEX format MM:SS:FF, handle FF as frames instead of hundreths (libmp3splt) - bug fix: issue when having input file inside several recursive symlinks (libmp3splt) - small improvement on CUE: also accept INDEX 1 and not only INDEX 01 (libmp3splt) #mp3splt version 2.6.1a - FLAC: fixed an important bug not allowing to split some files (libmp3splt) #mp3splt version 2.6.1 - FLAC internal cue sheets support (-c internal_sheet) - simple MP3 chapter marks support (with no overlap) (-c internal_sheet) - added #161 FLAC option to compute and write MD5 sum in the STREAMINFO metadata block (-M) - fixed bug #159 with some FLAC files being detected as MP3; also look for the file extension when detecting a file for a plugin (libmp3splt) - fixed bug '#160 ---last cue splitpoint--- created at 99 59 99 for mp3 files >100mins' (libmp3splt) - implemented feature request #103: show error message on failure to detect silence added '-p error_if_no_aa' and '-p warn_if_no_aa' parameters to auto-adjust option - patch #9 to fix manpage linking for flacsplt/oggsplt and fixed some warnings #mp3splt version 2.6 - experimental FLAC support added - stdin and stdout are not yet implemented - new --enable-flacsplt_symlink configure option to mp3splt - fixed progress bar of ogg vorbis when using the auto adjust option (libmp3splt)

--- 9.11.5 released --- --- 9.11.5rc1 released --- 5038. [bug] Chaosnet addresses were compared incorrectly. [GL #562] 5034. [bug] A race between threads could prevent zone maintenance scheduled immediately after zone load from being performed. [GL #542] 5033. [bug] When adding NTAs to multiple views using "rndc nta", the text returned via rndc was incorrectly terminated after the first line, making it look as if only one NTA had been added. Also, it was not possible to differentiate between views with the same name but different classes; this has been corrected with the addition of a "-class" option. [GL #105] 5032. [func] Add krb5-selfsub and ms-selfsub update policy rules. [GL #511] 5030. [bug] Align CMSG buffers to a 64-bit boundary, fixes crash on architectures with strict alignment. [GL #521] 5028. [bug] Spread the initial RRSIG expiration times over the entire working sig-validity-interval when signing a zone in named to even out re-signing and transfer loads. [GL #418] 5026. [bug] rndc reconfig should not touch already loaded zones. [GL #276] 5022. [doc] Update ms-self, ms-subdomain, krb5-self, and krb5-subdomain documentation. [GL !708] 5021. [bug] dig returned a non-zero exit code when it received a reply over TCP after a retry. [GL #487] 5019. [cleanup] A message is now logged when ixfr-from-differences is set at zone level for an inline-signed zone. [GL #470] 5018. [bug] Fix incorrect sizeof arguments in lib/isc/pk11.c. [GL !588] 5017. [bug] lib/isc/pk11.c failed to unlink the session before releasing the lock which is unsafe. [GL !589] 5016. [bug] Named could assert with overlapping filter-aaaa and dns64 acls. [GL #445] 5015. [bug] Reloading all zones caused zone maintenance to cease for inline-signed zones. [GL #435] 5014. [bug] Signatures loaded from the journal for the signed version of an inline-signed zone were not scheduled for refresh. [GL #482] 5012. [bug] Fix lock order reversal in pk11_initialize. [GL !590] 5009. [bug] Upon an OpenSSL failure, the first error in the OpenSSL error queue was not logged. [GL #476] 5008. [bug] "rndc signing -nsec3param ..." requests were silently ignored for zones which were not yet loaded or transferred. [GL #468] 5007. [cleanup] Replace custom ISC boolean and integer data types with C99 stdint.h and stdbool.h types. [GL #9] 5005. [bug] dnssec-verify, and dnssec-signzone at the verification step, failed on some validly signed zones. [GL #442] 5004. [bug] 'rndc reconfig' could cause inline zones to stop re-signing. [GL #439] 5003. [bug] dns_acl_isinsecure did not handle geoip elements. [GL #406] 5002. [bug] mdig: Handle malformed +ednsopt option, support 100 +ednsopt options per query rather than 100 total and address memory leaks if +ednsopt was specified. [GL #410] 5001. [bug] Fix refcount errors on error paths. [GL !563] 4996. [bug] dig: Handle malformed +ednsopt option. [GL #403] 4995. [test] Add tests for "tcp-self" update policy. [GL !282] 4994. [bug] Trust anchor telemetry queries were not being sent upstream for locally served zones. [GL #392] 4992. [bug] The wrong address was being logged for trust anchor telemetry queries. [GL #379] 4990. [bug] Prevent a possible NULL reference in pkcs11-keygen. [GL #401]

--- 9.12.3 released --- --- 9.12.3rc1 released --- 5038. [bug] Chaosnet addresses were compared incorrectly. [GL #562] 5035. [test] Fixed errors that prevented the DNSRPS subtests from running in the rpz and rpzrecurse system tests. [GL #503] 5034. [bug] A race between threads could prevent zone maintenance scheduled immediately after zone load from being performed. [GL #542] 5033. [bug] When adding NTAs to multiple views using "rndc nta", the text returned via rndc was incorrectly terminated after the first line, making it look as if only one NTA had been added. Also, it was not possible to differentiate between views with the same name but different classes; this has been corrected with the addition of a "-class" option. [GL #105] 5032. [func] Add krb5-selfsub and ms-selfsub update policy rules. [GL #511] 5030. [bug] Align CMSG buffers to a 64-bit boundary, fixes crash on architectures with strict alignment. [GL #521] 5028. [bug] Spread the initial RRSIG expiration times over the entire working sig-validity-interval when signing a zone in named to even out re-signing and transfer loads. [GL #418] 5026. [bug] rndc reconfig should not touch already loaded zones. [GL #276] 5022. [doc] Update ms-self, ms-subdomain, krb5-self, and krb5-subdomain documentation. [GL !708] 5021. [bug] dig returned a non-zero exit code when it received a reply over TCP after a retry. [GL #487] 5019. [cleanup] A message is now logged when ixfr-from-differences is set at zone level for an inline-signed zone. [GL #470] 5018. [bug] Fix incorrect sizeof arguments in lib/isc/pk11.c. [GL !588] 5017. [bug] lib/isc/pk11.c failed to unlink the session before releasing the lock which is unsafe. [GL !589] 5016. [bug] Named could assert with overlapping filter-aaaa and dns64 acls. [GL #445] 5015. [bug] Reloading all zones caused zone maintenance to cease for inline-signed zones. [GL #435] 5014. [bug] Signatures loaded from the journal for the signed version of an inline-signed zone were not scheduled for refresh. [GL #482] 5013. [bug] A referral response with a non-empty ANSWER section was inadvertently being treated as an error. [GL #390] 5012. [bug] Fix lock order reversal in pk11_initialize. [GL !590] 5009. [bug] Upon an OpenSSL failure, the first error in the OpenSSL error queue was not logged. [GL #476] 5008. [bug] "rndc signing -nsec3param ..." requests were silently ignored for zones which were not yet loaded or transferred. [GL #468] 5007. [cleanup] Replace custom ISC boolean and integer data types with C99 stdint.h and stdbool.h types. [GL #9] 5006. [cleanup] Code preparing a delegation response was extracted from query_delegation() and query_zone_delegation() into a separate function in order to decrease code duplication. [GL #431] 5005. [bug] dnssec-verify, and dnssec-signzone at the verification step, failed on some validly signed zones. [GL #442] 5004. [bug] 'rndc reconfig' could cause inline zones to stop re-signing. [GL #439] 5003. [bug] dns_acl_isinsecure did not handle geoip elements. [GL #406] 5002. [bug] mdig: Handle malformed +ednsopt option, support 100 +ednsopt options per query rather than 100 total and address memory leaks if +ednsopt was specified. [GL #410] 5001. [bug] Fix refcount errors on error paths. [GL !563] 5000. [bug] named_server_servestale() could leave the server in exclusive mode if an error occured. [GL #441] 4996. [bug] dig: Handle malformed +ednsopt option. [GL #403] 4995. [test] Add tests for "tcp-self" update policy. [GL !282] 4994. [bug] Trust anchor telemetry queries were not being sent upstream for locally served zones. [GL #392] 4992. [bug] The wrong address was being logged for trust anchor telemetry queries. [GL #379] 4990. [bug] Prevent a possible NULL reference in pkcs11-keygen. [GL #401] 4988. [bug] Don't synthesize NXDOMAIN from NSEC for records under a DNAME. [GL #386]

pkgsrc changes: - Add a dependency to www/libpsl - Add a patch to adjust running of the tests (otherwise because `APACHE_HTTPD' is defined to `no' a `no' program will be executed but will fail because no `no' program is usually available) Changes: Changes in libsoup from 2.64.1 to 2.64.2: * TLD tests updated (Claudio Saavedra) * Updated translations: Serbian Changes in libsoup from 2.63.92 to 2.64.1: * Many fixes to the meson build system (which, by the way, is NOT official yet) (#13, Tomas Popela) * Updated translations: Belarusian. Changes in libsoup from 2.63.92 to 2.64.0: * Many fixes to the meson build system [#7, #8, #9, #11, Tomas Popela] * Updated translations: Brazilian Portuguese, Galician, Hungarian, Latvian, Danish. Changes in libsoup from 2.63.91 to 2.63.92: * Make sure that XMLRPC tests build in Debian too [Claudio Saavedra] * Distribute missing meson files [Claudio Saavedra] * Some fixes to the meson build files [Claudio Saavedra] * Updated Korean and Swedish translations Changes in libsoup from 2.63.90 to 2.63.91: * Simplify soup_hosts_matches_host() [Claudio Saavedra] * Add new tests for trailing dots in domain names [Claudio Saavedra] * Updated Turkish translation Changes in libsoup from 2.63.2 to 2.63.90: * Set default cookie path for NULL origins [#1, Adrian Perez de Castro] * Fixes to GObject-introspection [bgo#794787, Corentin Noël] * Use atomic-refcounting in classes that are not using GObject-refcounting [bgo#785110, Edward Hervey] * Many Coverity-found code fixes [bgo#781771, Milan Crha] * Bail out on cookie-jar calls with empty hostnames [#3, Michael Catanzaro] * Fixes to the simple-httpd example [#2, Mooffie] * Updated translations: Chinese (Taiwan), Catalan Note: from now onwards bgo# references bugs in GNOME Bugzilla and # issues in GNOME gitlab. Changes in libsoup from 2.63.1 to 2.63.2: * Many fixes to the meson build system support [#795324, #782410, Tomas Popela, Jan Alexander Steffens] * Fixes to xmlrpc-server test with PHP >= 7.2 and related [#795111, #782410 Jan Alexander Steffens] * Fix critical warning in SoupSocket [Carlos Garcia Campos] * Updated translations: Romanian, Friulian, Slovenian, Czech, Spanish, Indonesian, Chinese (China).

Upstream changes: 1.38 2018-12-13 16:26:00 [BUGFIX] * require at least Cwd 3.75 1.35 2018-12-12 09:05:00 [BUGFIX] * Tests failed 1.34 2018-12-11 [BUGFIX] * Tests failed on Windows (github #9) * 'exclude' is meant to be a list of directories, but it was handled as regular expressions [IMPROVEMENTS] * rewrite larger parts of the module * add lots of tests

@fschlich

Upstream changes: 1.30 2019.01.22 MANWAR - Merged pull request #9 (fix typo in pod) from @fschlich.

* Added missing 'clip' feature for rounded frames. * Changed order of corner values for rounded frames. This includes an update to the clipping drivers. * Corrected 'adjnofloat' environment used by the 'nofloat' key to support the 'hypcap' feature of the 'caption' and 'hypcap' packages. * Updated manual description of `export` option as requested by Issue #9. * Updated manual to use (left, bottom, right, top) for the side values instead of (llx, lly, urx, ury). * Some other improvements in the manual. * Added keys and matching commands and environments to align to the page margins and text area borders: 'pagecenter', 'pageleft', 'pageright', 'pageinner', 'pageouter', 'textareacenter', 'textarealeft', 'textarearight', 'textareainner', 'textareaouter'. * Added 'noindent' key. * Added \newadjustimage and \NewAdjustImage commands to define custom versions of \adjustimage with predefined key lists. This include variation to renew, provide and declare such macros. * Added \provideadjustboxenv and \declareadjustboxenv. * Added \provideadjustboxcmd and \declareadjustboxcmd.

Upstream changes: Features - Add local-zone type inform_redirect, which logs like type inform, and redirects like type redirect. - Perform canonical sort for 0x20 capsforid compare of replies, this sorts rrsets in the authority and additional section before comparison, so that out of order rrsets do not cause failure. - Print query name with ip_ratelimit exceeded log lines. Spaces instead of tabs in that log message. - Print query name and IP address when domain rate limit exceeded. Bug Fixes - Fix #4224: auth_xfr_notify.rpl test broken due to typo - Fix locking for libunbound context setup with broken port config. - Fix case in which query timeout can result in marking delegation as edns_lame_known. - Set ub_ctx_set_tls call signature in ltrace config file for libunbound in contrib/libunbound.so.conf. - improve documentation for tls-service-key and forward-first. - #10: fixed pkg-config operations, PKG_PROG_PKG_CONFIG moved out of conditional section, fixes systemd builds, from Enrico Scholz. - #9: For openssl 1.0.2 use the CRYPTO_THREADID locking callbacks, still supports the set_id_callback previous API. And for 1.1.0 no locking callbacks are needed. - #8: Fix OpenSSL without ENGINE support compilation. - Wipe TLS session key data from memory on exit. - Fix that log-replies prints the correct name for local-alias names, for names that have a CNAME in local-data configuration. It logs the original query name, not the target of the CNAME. - Fix #4206: OpenSSL 1.0.2 hostname verification for FreeBSD 11.2. - Fix that qname minimisation does not skip a label when missing nameserver targets need to be fetched. - Fix #4225: clients seem to erroneously receive no answer with DNS-over-TLS and qname-minimisation. - Note default for module-config in man page. - Fix #13: Remove left-over requirements on OpenSSL >= 1.1.0 for cert name matching, from man page. - Fix capsforid canonical sort qsort callback. - Fix pythonmod include and sockaddr_un ifdefs for compile on Windows, and for libunbound. - Fix the error for unknown module in module-config is understandable, and explains it was not compiled in and where to see the list. - In example.conf explain where to put cachedb module in module-config. - In man page and example config explain that most modules have to be listed at the start of module-config. - Fix #4227: pair event del and add for libevent for tcp_req_info. - Fix #4229: Unbound man pages lack information, about access-control order and local zone tags, and elements in views. - Fix #14: contrib/unbound.init: Fix wrong comparison judgment before copying. - Fix for python module on Windows, fix fopen. - Remove memory leak on pythonmod python2 script file init. - Remove swig gcc8 python function cast warnings, they are ignored. - Print correct module that failed when module-config is wrong.

Changes: New colours: pink, purple, indigo, white Improved the message of usage Removed LOGNAME support #9

0.44 2020-08-10T07:10:35Z - Check tzdata before test 0.43 2020-07-26T07:23:50Z - Test issues with space in perl path name #9 - microoptimization: check for invalid number of parameters later #5

Pkgsrc changes: * Added a patch to cope with fromStatT on NetBSD * Added a patch to cope with docker client default settings (build also on NetBSD) Upstream changes: 1.5.3 (August 27th, 2020) NOTE: All security content from 1.5.2, 1.5.1, 1.4.5, 1.4.4, 1.3.9, 1.3.8, 1.2.6, and 1.2.5 has been made fully open source, and the git tags for 1.5.3, 1.4.6, 1.3.10, and 1.2.7 will build correctly for open source users. BUG FIXES: * auth/aws: Made header handling for IAM authentication more robust * secrets/ssh: Fixed a bug with role option for SSH signing algorithm to allow more than RSA signing ## 1.5.1 CHANGES: * pki: The tidy operation will now remove revoked certificates if the parameter `tidy_revoked_certs` is set to `true`. This will result in certificate entries being immediately removed, as opposed to awaiting until its NotAfter time. Note that this only affects certificates that have been already revoked. [[GH-9609](https://github.com/hashicorp/vault/pull/9609)] IMPROVEMENTS: * auth/jwt: Add support for fetching groups and user information from G Suite during authentication. [[GH-9574](https://github.com/hashicorp/vault/pull/9574)] * secrets/openldap: Add "ad" schema that allows the engine to correctly rotate AD passwords. [[GH-9740](https://github.com/hashicorp/vault/pull/9740)] * ui: Wrap TTL option on transit engine export action is updated to a new component. [[GH-9632](https://github.com/hashicorp/vault/pull/9632)] BUG FIXES: * secrets/gcp: Ensure that the IAM policy version is appropriately set after a roleset's bindings have changed. [[GH-9603](https://github.com/hashicorp/vault/pull/9603)] * replication (enterprise): Fix status API output incorrectly stating replication is in `idle` state. * core: Fix panic when printing over-long info fields at startup [[GH-9681](https://github.com/hashicorp/vault/pull/9681)] ## 1.5.0 ### July 21st, 2020 CHANGES: * storage/raft: The storage configuration now accepts a new `max_entry_size` config that will limit the total size in bytes of any entry committed via raft. It defaults to `"1048576"` (1MiB). [[GH-9027](https://github.com/hashicorp/vault/pull/9027)] * token: Token creation with custom token ID via `id` will no longer allow periods (`.`) as part of the input string. The final generated token value may contain periods, such as the `s.` prefix for service token indication. [[GH-8646](https://github.com/hashicorp/vault/pull/8646/files)] * token: Token renewals will now return token policies within the `token_policies` , identity policies within `identity_policies`, and the full policy set within `policies`. [[GH-8535](https://github.com/hashicorp/vault/pull/8535)] * cubbyhole: Reject reads and writes to an empty ("") path. [[GH-8971](https://github.com/hashicorp/vault/pull/8971)] * core: Remove the addition of newlines to parsed configuration when using integer/boolean values [[GH-8928](https://github.com/hashicorp/vault/pull/8928)] * audit: Token TTL and issue time are now provided in the auth portion of audit logs. [[GH-9091](https://github.com/hashicorp/vault/pull/9091)] IMPROVEMENTS: * audit: Replication status requests are no longer audited. [[GH-8877](https://github.com/hashicorp/vault/pull/8877)] * audit: Added mount_type field to requests and responses. [[GH-9167](https://github.com/hashicorp/vault/pull/9167)] * auth/aws: Add support for Web Identity credentials [[GH-7738](https://github.com/hashicorp/vault/pull/7738)] * auth/jwt: Support users that are members of more than 200 groups on Azure [[GH-120](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/120)] * auth/kubernetes: Allow disabling `iss` validation [[GH-91](https://github.com/hashicorp/vault-plugin-auth-kubernetes/pull/91)] * core: Add the Go version used to build a Vault binary to the server message output. [[GH-9078](https://github.com/hashicorp/vault/pull/9078)] * core: Added Password Policies for user-configurable password generation [[GH-8637](https://github.com/hashicorp/vault/pull/8637)] * core: New telemetry metrics covering token counts, token creation, KV secret counts, lease creation. [[GH-9239](https://github.com/hashicorp/vault/pull/9239)] [[GH-9250](https://github.com/hashicorp/vault/pull/9250)] [[GH-9244](https://github.com/hashicorp/vault/pull/9244)] [[GH-9052](https://github.com/hashicorp/vault/pull/9052)] * cli: Support reading TLS parameters from file for the `vault operator raft join` command. [[GH-9060](https://github.com/hashicorp/vault/pull/9060)] * plugin: Add SDK method, `Sys.ReloadPlugin`, and CLI command, `vault plugin reload`, for reloading plugins. [[GH-8777](https://github.com/hashicorp/vault/pull/8777)] * plugin (enterprise): Add a scope field to plugin reload, which when global, reloads the plugin anywhere in a cluster. [[GH-9347](https://github.com/hashicorp/vault/pull/9347)] * sdk/framework: Support accepting TypeFloat parameters over the API [[GH-8923](https://github.com/hashicorp/vault/pull/8923)] * secrets/aws: Add iam_groups parameter to role create/update [[GH-8811](https://github.com/hashicorp/vault/pull/8811)] * secrets/database: Add static role rotation for MongoDB Atlas database plugin [[GH-11](https://github.com/hashicorp/vault-plugin-database-mongodbatlas/pull/11)] * secrets/database: Add static role rotation for MSSQL database plugin [[GH-9062](https://github.com/hashicorp/vault/pull/9062)] * secrets/database: Allow InfluxDB to use insecure TLS without cert bundle [[GH-8778](https://github.com/hashicorp/vault/pull/8778)] * secrets/gcp: Support BigQuery dataset ACLs in absence of IAM endpoints [[GH-78](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/78)] * secrets/pki: Allow 3072-bit RSA keys [[GH-8343](https://github.com/hashicorp/vault/pull/8343)] * secrets/ssh: Add a CA-mode role option to specify signing algorithm [[GH-9096](https://github.com/hashicorp/vault/pull/9096)] * secrets/transit: Transit requests that make use of keys now include a new field `key_version` in their responses [[GH-8775](https://github.com/hashicorp/vault/pull/8775)] * secrets/transit: Improving transit batch encrypt and decrypt latencies [[GH-9100](https://github.com/hashicorp/vault/pull/9100)] * sentinel: Add a sentinel config section, and "additional_enabled_modules", a list of Sentinel modules that may be imported in addition to the defaults. * ui: Update TTL picker styling on SSH secret engine [[GH-8891](https://github.com/hashicorp/vault/pull/8891)] * ui: Only render the JWT input field of the Vault login form on mounts configured for JWT auth [[GH-8952](https://github.com/hashicorp/vault/pull/8952)] * cli: Add a new subcommand, `vault monitor`, for tailing server logs in the console. [[GH-8477](https://github.com/hashicorp/vault/pull/8477)] * ui: Add replication dashboards. Improve replication management workflows. [[GH-8705]](https://github.com/hashicorp/vault/pull/8705). BUG FIXES: * agent: Restart template server when it shuts down [[GH-9200](https://github.com/hashicorp/vault/pull/9200)] * auth/oci: Fix issue where users of the Oracle Cloud Infrastructure (OCI) auth method could not authenticate when the plugin backend was mounted at a non-default path. [[GH-7](https://github.com/hashicorp/vault-plugin-auth-oci/pull/7)] * core: Extend replicated cubbyhole fix in 1.4.0 to cover case where a performance primary is also a DR primary [[GH-9148](https://github.com/hashicorp/vault/pull/9148)] * secrets/aws: Fix issue where performance standbys weren't able to generate STS credentials after an IAM access key rotation in AWS and root IAM credential update in Vault [[GH-9186](https://github.com/hashicorp/vault/pull/9186)] * secrets/database: Fix issue where rotating root database credentials while Vault's storage backend is unavailable causes Vault to lose access to the database [[GH-8782](https://github.com/hashicorp/vault/pull/8782)] * secrets/database: Fix issue that prevents performance standbys from connecting to databases after a root credential rotation [[GH-9129](https://github.com/hashicorp/vault/pull/9129)] * secrets/gcp: Fix issue were updates were not being applied to the `token_scopes` of a roleset. [[GH-90](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/90)] * secrets/kv: Return the value of delete_version_after when reading kv/config, even if it is set to the default. [[GH-42](https://github.com/hashicorp/vault-plugin-secrets-kv/pull/42)] * ui: Add Toggle component into core addon so it is available in KMIP and other Ember Engines. [[GH-8913]](https://github.com/hashicorp/vault/pull/8913) * ui: Disallow max versions value of large than 9999999999999999 on kv2 secrets engine. [[GH-9242](https://github.com/hashicorp/vault/pull/9242)] ## 1.4.3 (TBD) IMPROVEMENTS: * auth/aws: Add support for Web Identity credentials [[GH-9251](https://github.com/hashicorp/vault/pull/9251)] * core: Add the Go version used to build a Vault binary to the server message output. [[GH-9078](https://github.com/hashicorp/vault/pull/9078)] * secrets/database: Add static role rotation for MongoDB Atlas database plugin [[GH-9311](https://github.com/hashicorp/vault/pull/9311)] * ui: Link to the Vault Changelog in the UI footer [[GH-9216](https://github.com/hashicorp/vault/pull/9216)] BUG FIXES: * auth/oci: Fix issue where users of the Oracle Cloud Infrastructure (OCI) auth method could not authenticate when the plugin backend was mounted at a non-default path. [[GH-9278](https://github.com/hashicorp/vault/pull/9278)] * replication: The issue causing cubbyholes in namespaces on performance secondaries to not work, which was fixed in 1.4.0, was still an issue when the primary was both a performance primary and DR primary. * secrets/aws: Fix issue where performance standbys weren't able to generate STS credentials after an IAM access key rotation in AWS and root IAM credential update in Vault [[GH-9207](https://github.com/hashicorp/vault/pull/9207)] * secrets/database: Fix issue that prevents performance standbys from connecting to databases after a root credential rotation [[GH-9208](https://github.com/hashicorp/vault/pull/9208)] * secrets/gcp: Fix issue were updates were not being applied to the `token_scopes` of a roleset. [[GH-9277](https://github.com/hashicorp/vault/pull/9277)] ## 1.4.2 (May 21st, 2020) SECURITY: * core: Proxy environment variables are now redacted before being logged, in case the URLs include a username:password. This vulnerability, CVE-2020-13223, is fixed in 1.3.6 and 1.4.2, but affects 1.4.0 and 1.4.1, as well as older versions of Vault [[GH-9022](https://github.com/hashicorp/vault/pull/9022)] * secrets/gcp: Fix a regression in 1.4.0 where the system TTLs were being used instead of the configured backend TTLs for dynamic service accounts. This vulnerability is CVE-2020-12757. [[GH-85](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/85)] IMPROVEMENTS: * storage/raft: The storage stanza now accepts `leader_ca_cert_file`, `leader_client_cert_file`, and `leader_client_key_file` parameters to read and parse TLS certificate information from paths on disk. Existing non-path based parameters will continue to work, but their values will need to be provided as a single-line string with newlines delimited by `\n`. [[GH-8894](https://github.com/hashicorp/vault/pull/8894)] * storage/raft: The `vault status` CLI command and the `sys/leader` API now contain the committed and applied raft indexes. [[GH-9011](https://github.com/hashicorp/vault/pull/9011)] BUG FIXES: * auth/aws: Fix token renewal issues caused by the metadata changes in 1.4.1 [[GH-8991](https://github.com/hashicorp/vault/pull/8991)] * auth/ldap: Fix 1.4.0 regression that could result in auth failures when LDAP auth config includes upndomain. [[GH-9041](https://github.com/hashicorp/vault/pull/9041)] * secrets/ad: Forward rotation requests from standbys to active clusters [[GH-66](https://github.com/hashicorp/vault-plugin-secrets-ad/pull/66)] * secrets/database: Prevent generation of usernames that are not allowed by the MongoDB Atlas API [[GH-9](https://github.com/hashicorp/vault-plugin-database-mongodbatlas/pull/9)] * secrets/database: Return an error if a manual rotation of static account credentials fails [[GH-9035](https://github.com/hashicorp/vault/pull/9035)] * secrets/openldap: Forward all rotation requests from standbys to active clusters [[GH-9028](https://github.com/hashicorp/vault/pull/9028)] * secrets/transform (enterprise): Fix panic that could occur when accessing cached template entries, such as a requests that accessed templates directly or indirectly from a performance standby node. * serviceregistration: Fix a regression for Consul service registration that ignored using the listener address as the redirect address unless api_addr was provided. It now properly uses the same redirect address as the one used by Vault's Core object. [[GH-8976](https://github.com/hashicorp/vault/pull/8976)] * storage/raft: Advertise the configured cluster address to the rest of the nodes in the raft cluster. This fixes an issue where a node advertising 0.0.0.0 is not using a unique hostname. [[GH-9008](https://github.com/hashicorp/vault/pull/9008)] * storage/raft: Fix panic when multiple nodes attempt to join the cluster at once. [[GH-9008](https://github.com/hashicorp/vault/pull/9008)] * sys: The path provided in `sys/internal/ui/mounts/:path` is now namespace-aware. This fixes an issue with `vault kv` subcommands that had namespaces provided in the path returning permission denied all the time. [[GH-8962](https://github.com/hashicorp/vault/pull/8962)] * ui: Fix snowman that appears when namespaces have more than one period [[GH-8910](https://github.com/hashicorp/vault/pull/8910)] ## 1.4.1 (April 30th, 2020) CHANGES: * auth/aws: The default set of metadata fields added in 1.4.1 has been changed to `account_id` and `auth_type` [[GH-8783](https://github.com/hashicorp/vault/pull/8783)] * storage/raft: Disallow `ha_storage` to be specified if `raft` is set as the `storage` type. [[GH-8707](https://github.com/hashicorp/vault/pull/8707)] IMPROVEMENTS: * auth/aws: The set of metadata stored during login is now configurable [[GH-8783](https://github.com/hashicorp/vault/pull/8783)] * auth/aws: Improve region selection to avoid errors seen if the account hasn't enabled some newer AWS regions [[GH-8679](https://github.com/hashicorp/vault/pull/8679)] * auth/azure: Enable login from Azure VMs with user-assigned identities [[GH-33](https://github.com/hashicorp/vault-plugin-auth-azure/pull/33)] * auth/gcp: The set of metadata stored during login is now configurable [[GH-92](https://github.com/hashicorp/vault-plugin-auth-gcp/pull/92)] * auth/gcp: The type of alias name used during login is now configurable [[GH-95](https://github.com/hashicorp/vault-plugin-auth-gcp/pull/95)] * auth/ldap: Improve error messages during LDAP operation failures [[GH-8740](https://github.com/hashicorp/vault/pull/8740)] * identity: Add a batch delete API for identity entities [[GH-8785]](https://github.com/hashicorp/vault/pull/8785) * identity: Improve performance of logins when no group updates are needed [[GH-8795]](https://github.com/hashicorp/vault/pull/8795) * metrics: Add `vault.identity.num_entities` metric [[GH-8816]](https://github.com/hashicorp/vault/pull/8816) * secrets/kv: Allow `delete-version-after` to be reset to 0 via the CLI [[GH-8635](https://github.com/hashicorp/vault/pull/8635)] * secrets/rabbitmq: Improve error handling and reporting [[GH-8619](https://github.com/hashicorp/vault/pull/8619)] * ui: Provide One Time Password during Operation Token generation process [[GH-8630]](https://github.com/hashicorp/vault/pull/8630) BUG FIXES: * auth/okta: Fix MFA regression (introduced in [GH-8143](https://github.com/hashicorp/vault/pull/8143)) from 1.4.0 [[GH-8807](https://github.com/hashicorp/vault/pull/8807)] * auth/userpass: Fix upgrade value for `token_bound_cidrs` being ignored due to incorrect key provided [[GH-8826](https://github.com/hashicorp/vault/pull/8826/files)] * config/seal: Fix segfault when seal block is removed [[GH-8517](https://github.com/hashicorp/vault/pull/8517)] * core: Fix an issue where users attempting to build Vault could receive Go module checksum errors [[GH-8770](https://github.com/hashicorp/vault/pull/8770)] * core: Fix blocked requests if a SIGHUP is issued during a long-running request has the state lock held. Also fixes deadlock that can happen if `vault debug` with the config target is ran during this time. [[GH-8755](https://github.com/hashicorp/vault/pull/8755)] * core: Always rewrite the .vault-token file as part of a `vault login` to ensure permissions and ownership are set correctly [[GH-8867](https://github.com/hashicorp/vault/pull/8867)] * database/mongodb: Fix context deadline error that may result due to retry attempts on failed commands [[GH-8863](https://github.com/hashicorp/vault/pull/8863)] * http: Fix superflous call messages from the http package on logs caused by missing returns after `respondError` calls [[GH-8796](https://github.com/hashicorp/vault/pull/8796)] * namespace (enterprise): Fix namespace listing to return `key_info` when a scoping namespace is also provided. * seal/gcpkms: Fix panic that could occur if all seal parameters were provided via environment variables [[GH-8840](https://github.com/hashicorp/vault/pull/8840)] * storage/raft: Fix memory allocation and incorrect metadata tracking issues with snapshots [[GH-8793](https://github.com/hashicorp/vault/pull/8793)] * storage/raft: Fix panic that could occur if `disable_clustering` was set to true on Raft storage cluster [[GH-8784](https://github.com/hashicorp/vault/pull/8784)] * storage/raft: Handle errors returned from the API during snapshot operations [[GH-8861](https://github.com/hashicorp/vault/pull/8861)] * sys/wrapping: Allow unwrapping of wrapping tokens which contain nil data [[GH-8714](https://github.com/hashicorp/vault/pull/8714)] ## 1.4.0 (April 7th, 2020) CHANGES: * cli: The raft configuration command has been renamed to list-peers to avoid confusion. FEATURES: * **Kerberos Authentication**: Vault now supports Kerberos authentication using a SPNEGO token. Login can be performed using the Vault CLI, API, or agent. * **Kubernetes Service Discovery**: A new Kubernetes service discovery feature where, if configured, Vault will tag Vault pods with their current health status. For more, see [#8249](https://github.com/hashicorp/vault/pull/8249). * **MongoDB Atlas Secrets**: Vault can now generate dynamic credentials for both MongoDB Atlas databases as well as the [Atlas programmatic interface] (https://docs.atlas.mongodb.com/tutorial/manage-programmatic-access/). * **OpenLDAP Secrets Engine**: We now support password management of existing OpenLDAP user entries. For more, see [#8360] (https://github.com/hashicorp/vault/pull/8360/). * **Redshift Database Secrets Engine**: The database secrets engine now supports static and dynamic secrets for the Amazon Web Services (AWS) Redshift service. * **Service Registration Config**: A newly introduced `service_registration` configuration stanza, that allows for service registration to be configured separately from the storage backend. For more, see [#7887] (https://github.com/hashicorp/vault/pull/7887/). * **Transform Secrets Engine (Enterprise)**: A new secrets engine that handles secure data transformation and tokenization against provided input value. * **Integrated Storage**: Promoted out of beta and into general availability for both open-source and enterprise workloads. IMPROVEMENTS: * agent: add option to force the use of the auth-auth token, and ignore the Vault token in the request [[GH-8101](https://github.com/hashicorp/vault/pull/8101)] * api: Restore and fix DNS SRV Lookup [[GH-8520](https://github.com/hashicorp/vault/pull/8520)] * audit: HMAC http_raw_body in audit log; this ensures that large authenticated Prometheus metrics responses get replaced with short HMAC values [[GH-8130](https://github.com/hashicorp/vault/pull/8130)] * audit: Generate-root, generate-recovery-token, and generate-dr-operation-token requests and responses are now audited. [[GH-8301](https://github.com/hashicorp/vault/pull/8301)] * auth/aws: Reduce the number of simultaneous STS client credentials needed [[GH-8161](https://github.com/hashicorp/vault/pull/8161)] * auth/azure: subscription ID, resource group, vm and vmss names are now stored in alias metadata [[GH-30](https://github.com/hashicorp/vault-plugin-auth-azure/pull/30)] * auth/jwt: Additional OIDC callback parameters available for CLI logins [[GH-80](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/80) & [GH-86](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/86)] * auth/jwt: Bound claims may be optionally configured using globs [[GH-89](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/89)] * auth/jwt: Timeout during OIDC CLI login if process doesn't complete within 2 minutes [[GH-97](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/97)] * auth/jwt: Add support for the `form_post` response mode [[GH-98](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/98)] * auth/jwt: add optional client_nonce to authorization flow [[GH-104](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/104)] * auth/okta: Upgrade okta sdk lib, which should improve handling of groups [[GH-8143](https://github.com/hashicorp/vault/pull/8143)] * aws: Add support for v2 of the instance metadata service (see [issue 7924](https://github.com/hashicorp/vault/issues/7924) for all linked PRs) * core: Separate out service discovery interface from storage interface to allow new types of service discovery not coupled to storage [[GH-7887](https://github.com/hashicorp/vault/pull/7887)] * core: Add support for telemetry option `metrics_prefix` [[GH-8340](https://github.com/hashicorp/vault/pull/8340)] * core: Entropy Augmentation can now be used with AWS KMS and Vault Transit seals * core: Allow tls_min_version to be set to TLS 1.3 [[GH-8305](https://github.com/hashicorp/vault/pull/8305)] * cli: Incorrect TLS configuration will now correctly fail [[GH-8025](https://github.com/hashicorp/vault/pull/8025)] * identity: Allow specifying a custom `client_id` for identity tokens [[GH-8165](https://github.com/hashicorp/vault/pull/8165)] * metrics/prometheus: improve performance with high volume of metrics updates [[GH-8507](https://github.com/hashicorp/vault/pull/8507)] * replication (enterprise): Fix race condition causing clusters with high throughput writes to sometimes fail to enter streaming-wal mode * replication (enterprise): Secondary clusters can now perform an extra gRPC call to all nodes in a primary cluster in an attempt to resolve the active node's address * replication (enterprise): The replication status API now outputs `last_performance_wal`, `last_dr_wal`, and `connection_state` values * replication (enterprise): DR secondary clusters can now be recovered by the `replication/dr/secondary/recover` API * replication (enterprise): We now allow for an alternate means to create a Disaster Recovery token, by using a batch token that is created with an ACL that allows for access to one or more of the DR endpoints. * secrets/database/mongodb: Switched internal MongoDB driver to mongo-driver [[GH-8140](https://github.com/hashicorp/vault/pull/8140)] * secrets/database/mongodb: Add support for x509 client authorization to MongoDB [[GH-8329](https://github.com/hashicorp/vault/pull/8329)] * secrets/database/oracle: Add support for static credential rotation [[GH-26](https://github.com/hashicorp/vault-plugin-database-oracle/pull/26)] * secrets/consul: Add support to specify TLS options per Consul backend [[GH-4800](https://github.com/hashicorp/vault/pull/4800)] * secrets/gcp: Allow specifying the TTL for a service key [[GH-54](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/54)] * secrets/gcp: Add support for rotating root keys [[GH-53](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/53)] * secrets/gcp: Handle version 3 policies for Resource Manager IAM requests [[GH-77](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/77) * secrets/nomad: Add support to specify TLS options per Nomad backend [[GH-8083](https://github.com/hashicorp/vault/pull/8083)] * secrets/ssh: Allowed users can now be templated with identity information [[GH-7548](https://github.com/hashicorp/vault/pull/7548)] * secrets/transit: Adding RSA3072 key support [[GH-8151](https://github.com/hashicorp/vault/pull/8151)] * storage/consul: Vault returns now a more descriptive error message when only a client cert or a client key has been provided [[GH-4930]](https://github.com/hashicorp/vault/pull/8084) * storage/raft: Nodes in the raft cluster can all be given possible leader addresses for them to continuously try and join one of them, thus automating the process of join to a greater extent [[GH-7856](https://github.com/hashicorp/vault/pull/7856)] * storage/raft: Fix a potential deadlock that could occur on leadership transition [[GH-8547](https://github.com/hashicorp/vault/pull/8547)] * storage/raft: Refresh TLS keyring on snapshot restore [[GH-8546](https://github.com/hashicorp/vault/pull/8546)] * storage/etcd: Bumped etcd client API SDK [[GH-7931](https://github.com/hashicorp/vault/pull/7931) & [GH-4961](https://github.com/hashicorp/vault/pull/4961) & [GH-4349](https://github.com/hashicorp/vault/pull/4349) & [GH-7582](https://github.com/hashicorp/vault/pull/7582)] * ui: Make Transit Key actions more prominent [[GH-8304](https://github.com/hashicorp/vault/pull/8304)] * ui: Add Core Usage Metrics [[GH-8347](https://github.com/hashicorp/vault/pull/8347)] * ui: Add refresh Namespace list on the Namespace dropdown, and redesign of Namespace dropdown menu [[GH-8442](https://github.com/hashicorp/vault/pull/8442)] * ui: Update transit actions to codeblocks & automatically encode plaintext unless indicated [[GH-8462](https://github.com/hashicorp/vault/pull/8462)] * ui: Display the results of transit key actions in a modal window [[GH-8462](https://github.com/hashicorp/vault/pull/8575)] * ui: Transit key version styling updates & ability to copy key from dropdown [[GH-8480](https://github.com/hashicorp/vault/pull/8480)] BUG FIXES: * agent: Fix issue where TLS options are ignored for agent template feature [[GH-7889](https://github.com/hashicorp/vault/pull/7889)] * auth/jwt: Use lower case role names for `default_role` to match the `role` case convention [[GH-100](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/100)] * auth/ldap: Fix a bug where the UPNDOMAIN parameter was wrongly used to lookup the group membership of the given user [[GH-6325]](https://github.com/hashicorp/vault/pull/8333) * cli: Support autocompletion for nested mounts [[GH-8303](https://github.com/hashicorp/vault/pull/8303)] * cli: Fix CLI namespace autocompletion [[GH-8315](https://github.com/hashicorp/vault/pull/8315)] * identity: Fix incorrect caching of identity token JWKS responses [[GH-8412](https://github.com/hashicorp/vault/pull/8412)] * metrics/stackdriver: Fix issue that prevents the stackdriver metrics library to create unnecessary stackdriver descriptors [[GH-8073](https://github.com/hashicorp/vault/pull/8073)] * replication: Fix issue causing cubbyholes in namespaces on performance secondaries to not work. * replication (enterprise): Unmounting a dynamic secrets backend could sometimes lead to replication errors. Change the order of operations to prevent that. * seal (enterprise): Fix seal migration when transactional seal wrap backend is in use. * secrets/database/influxdb: Fix potential panic if connection to the InfluxDB database cannot be established [[GH-8282](https://github.com/hashicorp/vault/pull/8282)] * secrets/database/mysql: Ensures default static credential rotation statements are used [[GH-8240](https://github.com/hashicorp/vault/pull/8240)] * secrets/database/mysql: Fix inconsistent query parameter names: {{name}} or {{username}} for different queries. Now it allows for either for backwards compatibility [[GH-8240](https://github.com/hashicorp/vault/pull/8240)] * secrets/database/postgres: Fix inconsistent query parameter names: {{name}} or {{username}} for different queries. Now it allows for either for backwards compatibility [[GH-8240](https://github.com/hashicorp/vault/pull/8240)] * secrets/pki: Support FQDNs in DNS Name [[GH-8288](https://github.com/hashicorp/vault/pull/8288)] * storage/raft: Allow seal migration to be performed on Vault clusters using raft storage [[GH-8103](https://github.com/hashicorp/vault/pull/8103)] * telemetry: Prometheus requests on standby nodes will now return an error instead of forwarding the request to the active node [[GH-8280](https://github.com/hashicorp/vault/pull/8280)] * ui: Fix broken popup menu on the transit secrets list page [[GH-8348](https://github.com/hashicorp/vault/pull/8348)] * ui: Update headless Chrome flag to fix `yarn run test:oss` [[GH-8035](https://github.com/hashicorp/vault/pull/8035)] * ui: Update CLI to accept empty strings as param value to reset previously-set values * ui: Fix bug where error states don't clear when moving between action tabs on Transit [[GH-8354](https://github.com/hashicorp/vault/pull/8354)] ## 1.3.6 (May 21st, 2020) SECURITY: * core: proxy environment variables are now redacted before being logged, in case the URLs include a username:password. This vulnerability, CVE-2020-13223, is fixed in 1.3.6 and 1.4.2, but affects 1.4 and 1.4.1, as well as older versions of Vault [[GH-9022](https://github.com/hashicorp/vault/pull/9022) BUG FIXES: * auth/aws: Fix token renewal issues caused by the metadata changes in 1.3.5 [[GH-8991](https://github.com/hashicorp/vault/pull/8991)] * replication: Fix mount filter bug that allowed replication filters to hide local mounts on a performance secondary ## 1.3.5 (April 28th, 2020) CHANGES: * auth/aws: The default set of metadata fields added in 1.3.2 has been changed to `account_id` and `auth_type` [[GH-8783](https://github.com/hashicorp/vault/pull/8783)] IMPROVEMENTS: * auth/aws: The set of metadata stored during login is now configurable [[GH-8783](https://github.com/hashicorp/vault/pull/8783)] ## 1.3.4 (March 19th, 2020) SECURITY: * A vulnerability was identified in Vault and Vault Enterprise such that, under certain circumstances, an Entity's Group membership may inadvertently include Groups the Entity no longer has permissions to. This vulnerability, CVE-2020-10660, affects Vault and Vault Enterprise versions 0.9.0 and newer, and is fixed in 1.3.4. [[GH-8606](https://github.com/hashicorp/vault/pull/8606)] * A vulnerability was identified in Vault Enterprise such that, under certain circumstances, existing nested-path policies may give access to Namespaces created after-the-fact. This vulnerability, CVE-2020-10661, affects Vault Enterprise versions 0.11 and newer, and is fixed in 1.3.4. ## 1.3.3 (March 5th, 2020) BUG FIXES: * approle: Fix excessive locking during tidy, which could potentially block new approle logins for long enough to cause an outage [[GH-8418](https://github.com/hashicorp/vault/pull/8418)] * cli: Fix issue where Raft snapshots from standby nodes created an empty backup file [[GH-8097](https://github.com/hashicorp/vault/pull/8097)] * identity: Fix incorrect caching of identity token JWKS responses [[GH-8412](https://github.com/hashicorp/vault/pull/8412)] * kmip: role read now returns tls_client_ttl * kmip: fix panic when templateattr not provided in rekey request * secrets/database/influxdb: Fix potential panic if connection to the InfluxDB database cannot be established [[GH-8282](https://github.com/hashicorp/vault/pull/8282)] * storage/mysql: Fix potential crash when using MySQL as coordination for high availability [[GH-8300](https://github.com/hashicorp/vault/pull/8300)] * storage/raft: Fix potential crash when using Raft as coordination for high availability [[GH-8356](https://github.com/hashicorp/vault/pull/8356)] * ui: Fix missing License menu item [[GH-8230](https://github.com/hashicorp/vault/pull/8230)] * ui: Fix bug where default auth method on login is defaulted to auth method that is listing-visibility=unauth instead of "other" [[GH-8218](https://github.com/hashicorp/vault/pull/8218)] * ui: Fix bug where KMIP details were not shown in the UI Wizard [[GH-8255](https://github.com/hashicorp/vault/pull/8255)] * ui: Show Error messages on Auth Configuration page when you hit permission errors [[GH-8500](https://github.com/hashicorp/vault/pull/8500)] * ui: Remove duplicate form inputs for the GitHub config [[GH-8519](https://github.com/hashicorp/vault/pull/8519)] * ui: Correct HMAC capitalization [[GH-8528](https://github.com/hashicorp/vault/pull/8528)] * ui: Fix danger message in DR [[GH-8555](https://github.com/hashicorp/vault/pull/8555)] * ui: Fix certificate field for LDAP config [[GH-8573](https://github.com/hashicorp/vault/pull/8573)] ## 1.3.2 (January 22nd, 2020) SECURITY: * When deleting a namespace on Vault Enterprise, in certain circumstances, the deletion process will fail to revoke dynamic secrets for a mount in that namespace. This will leave any dynamic secrets in remote systems alive and will fail to clean them up. This vulnerability, CVE-2020-7220, affects Vault Enterprise 0.11.0 and newer. IMPROVEMENTS: * auth/aws: Add aws metadata to identity alias [[GH-7985](https://github.com/hashicorp/vault/pull/7985)] * auth/kubernetes: Allow both names and namespaces to be set to "*" [[GH-78](https://github.com/hashicorp/vault-plugin-auth-kubernetes/pull/78)] BUG FIXES: * auth/azure: Fix Azure compute client to use correct base URL [[GH-8072](https://github.com/hashicorp/vault/pull/8072)] * auth/ldap: Fix renewal of tokens without configured policies that are generated by an LDAP login [[GH-8072](https://github.com/hashicorp/vault/pull/8072)] * auth/okta: Fix renewal of tokens without configured policies that are generated by an Okta login [[GH-8072](https://github.com/hashicorp/vault/pull/8072)] * core: Fix seal migration error when attempting to migrate from auto unseal to shamir [[GH-8172](https://github.com/hashicorp/vault/pull/8172)] * core: Fix seal migration config issue when migrating from auto unseal to auto unseal [[GH-8172](https://github.com/hashicorp/vault/pull/8172)] * plugin: Fix issue where a plugin unwrap request potentially used an expired token [[GH-8058](https://github.com/hashicorp/vault/pull/8058)] * replication: Fix issue where a forwarded request from a performance/standby node could run into a timeout * secrets/database: Fix issue where a manual static role rotation could potentially panic [[GH-8098](https://github.com/hashicorp/vault/pull/8098)] * secrets/database: Fix issue where a manual root credential rotation request is not forwarded to the primary node [[GH-8125](https://github.com/hashicorp/vault/pull/8125)] * secrets/database: Fix issue where a manual static role rotation request is not forwarded to the primary node [[GH-8126](https://github.com/hashicorp/vault/pull/8126)] * secrets/database/mysql: Fix issue where special characters for a MySQL password were encoded [[GH-8040](https://github.com/hashicorp/vault/pull/8040)] * ui: Fix deleting namespaces [[GH-8132](https://github.com/hashicorp/vault/pull/8132)] * ui: Fix Error handler on kv-secret edit and kv-secret view pages [[GH-8133](https://github.com/hashicorp/vault/pull/8133)] * ui: Fix OIDC callback to check storage [[GH-7929](https://github.com/hashicorp/vault/pull/7929)]. * ui: Change `.box-radio` height to min-height to prevent overflow issues [[GH-8065](https://github.com/hashicorp/vault/pull/8065)] ## 1.3.1 (December 18th, 2019) IMPROVEMENTS: * agent: Add ability to set `exit-after-auth` via the CLI [[GH-7920](https://github.com/hashicorp/vault/pull/7920)] * auth/ldap: Add a `request_timeout` configuration option to prevent connection requests from hanging [[GH-7909](https://github.com/hashicorp/vault/pull/7909)] * auth/kubernetes: Add audience to tokenreview API request for Kube deployments where issuer is not Kube. [[GH-74](https://github.com/hashicorp/vault/pull/74)] * secrets/ad: Add a `request_timeout` configuration option to prevent connection requests from hanging [[GH-59](https://github.com/hashicorp/vault-plugin-secrets-ad/pull/59)] * storage/postgresql: Add support for setting `connection_url` from enviornment variable `VAULT_PG_CONNECTION_URL` [[GH-7937](https://github.com/hashicorp/vault/pull/7937)] * telemetry: Add `enable_hostname_label` option to telemetry stanza [[GH-7902](https://github.com/hashicorp/vault/pull/7902)] * telemetry: Add accept header check for prometheus mime type [[GH-7958](https://github.com/hashicorp/vault/pull/7958)] BUG FIXES: * agent: Fix issue where Agent exits before all templates are rendered when using and `exit_after_auth` [[GH-7899](https://github.com/hashicorp/vault/pull/7899)] * auth/aws: Fixes region-related issues when using a custom `sts_endpoint` by adding a `sts_region` parameter [[GH-7922](https://github.com/hashicorp/vault/pull/7922)] * auth/token: Fix panic when getting batch tokens on a performance standby from a role that does not exist [[GH-8027](https://github.com/hashicorp/vault/pull/8027)] * core: Improve warning message for lease TTLs [[GH-7901](https://github.com/hashicorp/vault/pull/7901)] * identity: Fix identity token panic during invalidation [[GH-8043](https://github.com/hashicorp/vault/pull/8043)] * plugin: Fix a panic that could occur if a mount/auth entry was unable to mount the plugin backend and a request that required the system view to be retrieved was made [[GH-7991](https://github.com/hashicorp/vault/pull/7991)] * replication: Add `generate-public-key` endpoint to list of allowed endpoints for existing DR secondaries * secrets/gcp: Fix panic if bindings aren't provided in roleset create/update. [[GH-56](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/56)] * secrets/pki: Prevent generating certificate on performance standby when storing [[GH-7904](https://github.com/hashicorp/vault/pull/7904)] * secrets/transit: Prevent restoring keys to new names that are sub paths [[GH-7998](https://github.com/hashicorp/vault/pull/7998)] * storage/s3: Fix a bug in configurable S3 paths that was preventing use of S3 as a source during `operator migrate` operations [[GH-7966](https://github.com/hashicorp/vault/pull/7966)] * ui: Ensure secrets with a period in their key can be viewed and copied [[GH-7926](https://github.com/hashicorp/vault/pull/7926)] * ui: Fix status menu after demotion [[GH-7997](https://github.com/hashicorp/vault/pull/7997)] * ui: Fix select dropdowns in Safari when running Mojave [[GH-8023](https://github.com/hashicorp/vault/pull/8023)] ## 1.3 (November 14th, 2019) CHANGES: * Secondary cluster activation: There has been a change to the way that activating performance and DR secondary clusters works when using public keys for encryption of the parameters rather than a wrapping token. This flow was experimental and never documented. It is now officially supported and documented but is not backwards compatible with older Vault releases. * Cluster cipher suites: On its cluster port, Vault will no longer advertise the full TLS 1.2 cipher suite list by default. Although this port is only used for Vault-to-Vault communication and would always pick a strong cipher, it could cause false flags on port scanners and other security utilities that assumed insecure ciphers were being used. The previous behavior can be achieved by setting the value of the (undocumented) `cluster_cipher_suites` config flag to `tls12`. * API/Agent Renewal behavior: The API now allows multiple options for how it deals with renewals. The legacy behavior in the Agent/API is for the renewer (now called the lifetime watcher) to exit on a renew error, leading to a reauthentication. The new default behavior is for the lifetime watcher to ignore 5XX errors and simply retry as scheduled, using the existing lease duration. It is also possible, within custom code, to disable renewals entirely, which allows the lifetime watcher to simply return when it believes it is time for your code to renew or reauthenticate. FEATURES: * **Vault Debug**: A new top-level subcommand, `debug`, is added that allows operators to retrieve debugging information related to a particular Vault node. Operators can use this simple workflow to capture triaging information, which can then be consumed programmatically or by support and engineering teams. It has the abilitity to probe for config, host, metrics, pprof, server status, and replication status. * **Recovery Mode**: Vault server can be brought up in recovery mode to resolve outages caused due to data store being in bad state. This is a privileged mode that allows `sys/raw` API calls to perform surgical corrections to the data tore. Bad storage state can be caused by bugs. However, this is usually observed when known (and fixed) bugs are hit by older versions of Vault. * **Entropy Augmentation (Enterprise)**: Vault now supports sourcing entropy from external source for critical security parameters. Currently an HSM that supports PKCS#11 is the only supported source. * **Active Directory Secret Check-In/Check-Out**: In the Active Directory secrets engine, users or applications can check out a service account for use, and its password will be rotated when it's checked back in. * **Vault Agent Template**: Vault Agent now supports rendering templates containing Vault secrets to disk, similar to Consul Template [[GH-7652](https://github.com/hashicorp/vault/pull/7652)] * **Transit Key Type Support**: Signing and verification is now supported with the P-384 (secp384r1) and P-521 (secp521r1) ECDSA curves [[GH-7551](https://github.com/hashicorp/vault/pull/7551)] and encryption and decryption is now supported via AES128-GCM96 [[GH-7555](https://github.com/hashicorp/vault/pull/7555)] * **SSRF Protection for Vault Agent**: Vault Agent has a configuration option to require a specific header before allowing requests [[GH-7627](https://github.com/hashicorp/vault/pull/7627)] * **AWS Auth Method Root Rotation**: The credential used by the AWS auth method can now be rotated, to ensure that only Vault knows the credentials it is using [[GH-7131](https://github.com/hashicorp/vault/pull/7131)] * **New UI Features**: The UI now supports managing users and groups for the Userpass, Cert, Okta, and Radius auth methods. * **Shamir with Stored Master Key**: The on disk format for Shamir seals has changed, allowing for a secondary cluster using Shamir downstream from a primary cluster using Auto Unseal. [[GH-7694](https://github.com/hashicorp/vault/pull/7694)] * **Stackdriver Metrics Sink**: Vault can now send metrics to [Stackdriver](https://cloud.google.com/stackdriver/). See the [configuration documentation](https://www.vaultproject.io/docs/config/index.html) for details. [[GH-6957](https://github.com/hashicorp/vault/pull/6957)] * **Filtered Paths Replication (Enterprise)**: Based on the predecessor Filtered Mount Replication, Filtered Paths Replication allows now filtering of namespaces in addition to mounts. * **Token Renewal via Accessor**: Tokens can now be renewed via the accessor value through the new `auth/token/renew-accessor` endpoint if the caller's token has permission to access that endpoint. * **Improved Integrated Storage (Beta)**: Improved raft write performance, added support for non-voter nodes, along with UI support for: using raft storage, joining a raft cluster, and downloading and restoring a snapshot. IMPROVEMENTS: * agent: Add ability to set the TLS SNI name used by Agent [[GH-7519](https://github.com/hashicorp/vault/pull/7519)] * agent & api: Change default renewer behavior to ignore 5XX errors [[GH-7733](https://github.com/hashicorp/vault/pull/7733)] * auth/jwt: The redirect callback host may now be specified for CLI logins [[GH-71](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/71)] * auth/jwt: Bound claims may now contain boolean values [[GH-73](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/73)] * auth/jwt: CLI logins can now open the browser when running in WSL [[GH-77](https://github.com/hashicorp/vault-plugin-auth-jwt/pull/77)] * core: Exit ScanView if context has been cancelled [[GH-7419](https://github.com/hashicorp/vault/pull/7419)] * core: re-encrypt barrier and recovery keys if the unseal key is updated [[GH-7493](https://github.com/hashicorp/vault/pull/7493)] * core: Don't advertise the full set of TLS 1.2 cipher suites on the cluster port, even though only strong ciphers were used [[GH-7487](https://github.com/hashicorp/vault/pull/7487)] * core (enterprise): Add background seal re-wrap * core/metrics: Add config parameter to allow unauthenticated sys/metrics access. [[GH-7550](https://github.com/hashicorp/vault/pull/7550)] * metrics: Upgrade DataDog library to improve performance [[GH-7794](https://github.com/hashicorp/vault/pull/7794)] * replication (enterprise): Write-Ahead-Log entries will not duplicate the data belonging to the encompassing physical entries of the transaction, thereby improving the performance and storage capacity. * replication (enterprise): Added more replication metrics * replication (enterprise): Reindex process now compares subpages for a more accurate indexing process. * replication (enterprise): Reindex API now accepts a new `skip_flush` parameter indicating all the changes should not be flushed while the tree is locked. * secrets/aws: The root config can now be read [[GH-7245](https://github.com/hashicorp/vault/pull/7245)] * secrets/database/cassandra: Add ability to skip verfication of connection [[GH-7614](https://github.com/hashicorp/vault/pull/7614)] * secrets/gcp: Fix panic during rollback if the roleset has been deleted [[GH-52](https://github.com/hashicorp/vault-plugin-secrets-gcp/pull/52)] * storage/azure: Add config parameter to Azure storage backend to allow specifying the ARM endpoint [[GH-7567](https://github.com/hashicorp/vault/pull/7567)] * storage/cassandra: Improve storage efficiency by eliminating unnecessary copies of value data [[GH-7199](https://github.com/hashicorp/vault/pull/7199)] * storage/raft: Improve raft write performance by utilizing FSM Batching [[GH-7527](https://github.com/hashicorp/vault/pull/7527)] * storage/raft: Add support for non-voter nodes [[GH-7634](https://github.com/hashicorp/vault/pull/7634)] * sys: Add a new `sys/host-info` endpoint for querying information about the host [[GH-7330](https://github.com/hashicorp/vault/pull/7330)] * sys: Add a new set of endpoints under `sys/pprof/` that allows profiling information to be extracted [[GH-7473](https://github.com/hashicorp/vault/pull/7473)] * sys: Add endpoint that counts the total number of active identity entities [[GH-7541](https://github.com/hashicorp/vault/pull/7541)] * sys: `sys/seal-status` now has a `storage_type` field denoting what type of storage the cluster is configured to use * sys: Add a new `sys/internal/counters/tokens` endpoint, that counts the total number of active service token accessors in the shared token storage. [[GH-7541](https://github.com/hashicorp/vault/pull/7541)] * sys/config: Add a new endpoint under `sys/config/state/sanitized` that returns the configuration state of the server. It excludes config values from `storage`, `ha_storage`, and `seal` stanzas and some values from `telemetry` due to potential sensitive entries in those fields. * ui: when using raft storage, you can now join a raft cluster, download a snapshot, and restore a snapshot from the UI [[GH-7410](https://github.com/hashicorp/vault/pull/7410)] * ui: clarify when secret version is deleted in the secret version history dropdown [[GH-7714](https://github.com/hashicorp/vault/pull/7714)] BUG FIXES: * agent: Fix a data race on the token value for inmemsink [[GH-7707](https://github.com/hashicorp/vault/pull/7707)] * api: Fix Go API using lease revocation via URL instead of body [[GH-7777](https://github.com/hashicorp/vault/pull/7777)] * api: Allow setting a function to control retry behavior [[GH-7331](https://github.com/hashicorp/vault/pull/7331)] * auth/gcp: Fix a bug where region information in instance groups names could cause an authorization attempt to fail [[GH-74](https://github.com/hashicorp/vault-plugin-auth-gcp/pull/74)] * cli: Fix a bug where a token of an unknown format (e.g. in ~/.vault-token) could cause confusing error messages during `vault login` [[GH-7508](https://github.com/hashicorp/vault/pull/7508)] * cli: Fix a bug where the `namespace list` command with JSON formatting always returned an empty object [[GH-7705](https://github.com/hashicorp/vault/pull/7705)] * cli: Command timeouts are now always specified solely by the `VAULT_CLIENT_TIMEOUT` value. [[GH-7469](https://github.com/hashicorp/vault/pull/7469)] * core: Don't allow registering a non-root zero TTL token lease. This is purely defense in depth as the lease would be revoked immediately anyways, but there's no real reason to allow registration. [[GH-7524](https://github.com/hashicorp/vault/pull/7524)] * identity (enterprise): Fixed identity case sensitive loading in secondary cluster [[GH-7327](https://github.com/hashicorp/vault/pull/7327)] * identity: Ensure only replication primary stores the identity case sensitivity state [[GH-7820](https://github.com/hashicorp/vault/pull/7820)] * raft: Fixed VAULT_CLUSTER_ADDR env being ignored at startup [[GH-7619](https://github.com/hashicorp/vault/pull/7619)] * secrets/pki: Don't allow duplicate SAN names in issued certs [[GH-7605](https://github.com/hashicorp/vault/pull/7605)] * sys/health: Pay attention to the values provided for `standbyok` and `perfstandbyok` rather than simply using their presence as a key to flip on that behavior [[GH-7323](https://github.com/hashicorp/vault/pull/7323)] * ui: using the `wrapped_token` query param will work with `redirect_to` and will automatically log in as intended [[GH-7398](https://github.com/hashicorp/vault/pull/7398)] * ui: fix an error when initializing from the UI using PGP keys [[GH-7542](https://github.com/hashicorp/vault/pull/7542)] * ui: show all active kv v2 secret versions even when `delete_version_after` is configured [[GH-7685](https://github.com/hashicorp/vault/pull/7685)] * ui: Ensure that items in the top navigation link to pages that users have access to [[GH-7590](https://github.com/hashicorp/vault/pull/7590)] ## 1.2.4 (November 7th, 2019) SECURITY: * In a non-root namespace, revocation of a token scoped to a non-root namespace did not trigger the expected revocation of dynamic secret leases associated with that token. As a result, dynamic secret leases in non-root namespaces may outlive the token that created them. This vulnerability, CVE-2019-18616, affects Vault Enterprise 0.11.0 and newer. * Disaster Recovery secondary clusters did not delete already-replicated data after a mount filter has been created on an upstream Performance secondary cluster. As a result, encrypted secrets may remain replicated on a Disaster Recovery secondary cluster after application of a mount filter excluding those secrets from replication. This vulnerability, CVE-2019-18617, affects Vault Enterprise 0.8 and newer. * Update version of Go to 1.12.12 to fix Go bug golang.org/issue/34960 which corresponds to CVE-2019-17596. CHANGES: * auth/aws: If a custom `sts_endpoint` is configured, Vault Agent and the CLI should provide the corresponding region via the `region` parameter (which already existed as a CLI parameter, and has now been added to Agent). The automatic region detection added to the CLI and Agent in 1.2 has been removed. IMPROVEMENTS: * cli: Ignore existing token during CLI login [[GH-7508](https://github.com/hashicorp/vault/pull/7508)] * core: Log proxy settings from environment on startup [[GH-7528](https://github.com/hashicorp/vault/pull/7528)] * core: Cache whether we've been initialized to reduce load on storage [[GH-7549](https://github.com/hashicorp/vault/pull/7549)] BUG FIXES: * agent: Fix handling of gzipped responses [[GH-7470](https://github.com/hashicorp/vault/pull/7470)] * cli: Fix panic when pgp keys list is empty [[GH-7546](https://github.com/hashicorp/vault/pull/7546)] * cli: Command timeouts are now always specified solely by the `VAULT_CLIENT_TIMEOUT` value. [[GH-7469](https://github.com/hashicorp/vault/pull/7469)] * core: add hook for initializing seals for migration [[GH-7666](https://github.com/hashicorp/vault/pull/7666)] * core (enterprise): Migrating from one auto unseal method to another never worked on enterprise, now it does. * identity: Add required field `response_types_supported` to identity token `.well-known/openid-configuration` response [[GH-7533](https://github.com/hashicorp/vault/pull/7533)] * identity: Fixed nil pointer panic when merging entities [[GH-7712](https://github.com/hashicorp/vault/pull/7712)] * replication (Enterprise): Fix issue causing performance standbys nodes disconnecting when under high loads. * secrets/azure: Fix panic that could occur if client retries timeout [[GH-7793](https://github.com/hashicorp/vault/pull/7793)] * secrets/database: Fix bug in combined DB secrets engine that can result in writes to static-roles endpoints timing out [[GH-7518](https://github.com/hashicorp/vault/pull/7518)] * secrets/pki: Improve tidy to continue when value is nil [[GH-7589](https://github.com/hashicorp/vault/pull/7589)] * ui (Enterprise): Allow kv v2 secrets that are gated by Control Groups to be viewed in the UI [[GH-7504](https://github.com/hashicorp/vault/pull/7504)]

Changelog: JDK 15 Release Notes These notes describe important changes, enhancements, removed APIs and features, deprecated APIs and features, and other information about JDK 15 and Java SE 15. In some cases, the descriptions provide links to additional detailed information about an issue or a change. This page does not duplicate the descriptions provided by the Java SE 15 ( JSR 390) Platform Specification, which provides informative background for all specification changes and might also include the identification of removed or deprecated APIs and features not described here. The Java SE 15 ( JSR 390) specification provides links to: * Annex 1: The complete Java SE 15 API Specification. * Annex 2: An annotated API specification showing the exact differences relative to Java SE 15. Informative background for these changes may be found in the list of approved Change Specification Requests for this release. * Annex 3: Java SE 15 Editions of The Java Language Specification and The Java Virtual Machine Specification. . The Java SE 15 Editions contain all corrections and clarifications made since the Java SE 14 Editions, as well as additions for new features. You should be aware of the content in that document as well as the items described in this page. The descriptions on this Release Note page also identify potential compatibility issues that you might encounter when migrating to JDK 15. The Kinds of Compatibility page on the OpenJDK wiki identifies three types of potential compatibility issues for Java programs used in these descriptions: * Source: Source compatibility preserves the ability to compile existing source code without error. * Binary: Binary compatibility is defined in The Java Language Specification as preserving the ability to link existing class files without error. * Behavioral: Behavioral compatibility includes the semantics of the code that is executed at runtime. See CSRs Approved for JDK 15 for the list of CSRs closed in JDK 15 and the Compatibility & Specification Review (CSR) page on the OpenJDK wiki for general information about compatibility. Contents * New Features * Removed Features and Options * Deprecated Features and Options * Known Issues * Other Notes New Features This section describes some of the enhancements in Java SE 15 and JDK 15. In some cases, the descriptions provide links to additional detailed information about an issue or a change. The APIs described here are those that are provided with the Oracle JDK. It includes a complete implementation of the Java SE 15 Platform and additional Java APIs to support developing, debugging, and monitoring Java applications. Another source of information about important enhancements and new features in Java SE 15 and JDK 15 is the Java SE 15 ( JSR 390) Platform Specification, which documents the changes to the specification made between Java SE 14 and Java SE 15. This document includes descriptions of those new features and enhancements that are also changes to the specification. The descriptions also identify potential compatibility issues that you might encounter when migrating to JDK 15. Support for Unicode 13.0 (JDK-8239383) core-libs/java.lang This release upgrades Unicode support to 13.0, which includes the following: * The java.lang.Character class supports Unicode Character Database of 13.0 level, which 13.0 adds 5,930 characters, for a total of 143,859 characters. These additions include 4 new scripts, for a total of 154 scripts, as well as 55 new emoji characters. * The java.text.Bidi and java.text.Normalizer classes support 13.0 level of Unicode Standard Annexes, #9 and #15, respectively. * The java.util.regex package supports Extended Grapheme Clusters based on 13.0 level of Unicode Standard Annex #29 For more detail about Unicode 13.0, refer to the Unicode Consortium's release note. Added isEmpty Default Method to CharSequence (JDK-8215401) core-libs/java.lang java.lang.CharSequence has been updated in this release to define a default isEmpty method that tests if a character sequence is empty. Testing for, and filtering out, empty Strings and other CharSequences is a common occurrence in code and CharSequence::isEmpty can be used as a method reference. Classes that implement java.lang.CharSequence and another interface that defines isEmpty method should be aware of this addition as they may need to be modified to override the isEmpty method. JEP 371: Hidden Classes (JDK-8238358) core-libs/java.lang.invoke JEP 371 introduces hidden classes in Java 15. Hidden classes have the following implications to existing code: 1. Class::getName traditionally returns a binary name, but for a hidden class it returns a string that contains an ASCII forward slash (/) and is therefore not a binary name. Programs that assume the returned string is a binary name might need to be updated to handle hidden classes. That said, the longstanding practice of Unsafe::defineAnonymousClass was to define classes whose names were not binary names, so some programs may already handle such names successfully. 2. Class::descriptorString and MethodType::descriptorString returns a string that contains a ASCII dot (.) for a hidden class and therefore is not a type descriptor conforming to JVMS 4.3. Programs that assume the returned string is a type descriptor that conforms to JVMS 4.3 might need to be updated to handle hidden classes. 3. Class::getNestMembers is changed to not throw an exception when it fails to validate a nest membership of any member listed in NestMembers attribute. Instead, Class::getNestMembers returns the nest host and the members listed in the host's NestMembers attribute that are successfully resolved and determined to have the same nest host as this class. (This means it may return fewer members that listed in NestMembers attribute.) Existing code that expects LinkageError when there is a bad nest membership might be impacted. 4. The nestmate test in the JVM is changed to throw only IllegalAccessError when the nest membership is invalid. Some historical understanding is necessary: * In Java 8, every access control failure was signaled with IllegalAccessError (IAE). Moreover, if a given access check failed with IAE once, then the same check would fail with IAE every time. * In Java 11, the introduction of nest mates (JEP 181) meant that an access control failure could be signaled either with IllegalAccessError or, if nest membership was invalid, LinkageError. Still, if a given access check failed with a specific exception, then the same check would always fail with the same exception. * In Java 15, the introduction of Lookup::defineHiddenClass implies that the nest host of the lookup class must be determined eagerly, when the hidden class is defined as a nestmate of the lookup class. Both Lookup::defineHiddenClass and Class::getNestHost both determine the nest host of a class in a more resilient manner than the JVM did in Java 11; namely, the API simply treats a class as self-hosted if its purported nest membership is invalid. For consistency with the API, the JVM no longer throws LinkageError when a class's nest membership is invalid, and instead treats the class as self-hosted. This means that the JVM only throws IAE from access control (because a self-hosted class will not permit any other class to access its private members). This is the behavior expected by the vast majority of user code. 5. JVM TI GetClassSignature returns a string that contains a ASCII dot (.) for a hidden class. JVM TI agents might need updating for hidden classes if they assume the returned string from GetClassSignature is a type descriptor conforming to JVMS 4.3. Added Support for SO_INCOMING_NAPI_ID Support (JDK-8243099) core-libs/java.net A new JDK-specific socket option SO_INCOMING_NAPI_ID has been added to jdk.net.ExtendedSocketOptions in this release. The socket option is Linux specific and allows applications to query the NAPI (New API) ID of the underlying device queue associated with its socket connection and take advantage of the Application Device Queue (ADQ) feature of high performance Network Interface Card (NIC) devices. Specialized Implementations of TreeMap Methods (JDK-8176894) core-libs/java.util:collections The TreeMap class now provides overriding implementations of the putIfAbsent, computeIfAbsent, computeIfPresent, compute, and merge methods. The new implementations provide a performance improvement. However, if the function provided to the compute- or merge methods modifies the map, ConcurrentModificationException may be thrown, because the function that is provided to these methods is prohibited from modifying the map. If a ConcurrentModificationException occurs, the function must either be changed to avoid modifying the map, or the surrounding code should be rewritten to replace uses of the compute- and merge methods with conventional Map methods such as get and put. See JDK-8227666 for further information. Added Ability to Configure Third Port for Remote JMX (JDK-8234484) core-svc/javax.management JMX supports (explicit) remote network access through the configuration of two network ports (either from the command line or in a property file), by setting the following properties: com.sun.management.jmxremote.port=<port#> com.sun.management.jmxremote.rmi.port=<port#> Note: If it is not specified, the second port will default to the first. A third local port is also opened to accept (local) JMX connections. This port previously had its number selected at random, which could cause port collisions. However, it is now possible to configure the third JMX port (local only) by using: com.sun.management.jmxremote.local.port=<port#> New Option Added to jstatd for Specifying RMI Connector Port Number ( JDK-8196729) core-svc/tools A new -r <port> option has been added to the jstatd command to specify the RMI connector port number. If a port number is not specified, a random available port is used. New Option Added to jcmd for Writing a gzipped Heap Dump (JDK-8237354) core-svc/tools A new integer option gz has been added to the GC.heap_dump diagnostic command. If it is specified, it will enable the gzip compression of the written heap dump. The supplied value is the compression level. It can range from 1 (fastest) to 9 (slowest, but best compression). The recommended level is 1. JEP 378: Text Blocks (JDK-8236934) Text blocks have been added to the Java language. A text block is a multi-line string literal that avoids the need for most escape sequences, automatically formats the string in a predictable way, and gives the developer control over the format when desired. New Options Added to jhsdb for debugd Mode (JDK-8196751) hotspot/svc-agent Three new options have been added to the jhsdb command for the debugd mode: 1. --rmiport <port> is used to specify a RMI connector port number. If a port number is not specified, a random available port is used. 2. --registryport <port> is used to specify a RMI registry port number. This option overrides the system property sun.jvm.hotspot.rmi.port. If a port number is not specified, the system property is used. If the system property is not set, the default port 1099 is used. 3. --hostname <hostname> is used to specify a RMI connector host name. The value could be a hostname or an IPv4/IPv6 address. This option overrides the system property java.rmi.server.hostname. If a host name not specified, the system property is used. If the system property is not set, a system host name is used. Added Revocation Checking to jarsigner (JDK-8242060) security-libs/java.security A new -revCheck option has been added to the jarsigner command to enable revocation checking of certificates. Tools Warn If Weak Algorithms Are Used Before Restricting Them (JDK-8172404) security-libs/java.security The keytool and jarsigner tools have been updated to warn users about weak cryptographic algorithms being used before they are disabled. In this release, the tools issue warnings for the SHA-1 hash algorithm and 1024-bit RSA/DSA keys. SunJCE Provider Supports SHA-3 Based Hmac Algorithms (JDK-8172680) security-libs/javax.crypto The SunJCE provider has been enhanced to support HmacSHA3-224, HmacSHA3-256, HmacSHA3-384, and HmacSHA3-512. Implementations for these algorithms are available under the Mac and KeyGenerator services. The Mac service generates the keyed-hash and the KeyGenerator service generates the key for the Mac. New System Properties to Configure the TLS Signature Schemes (JDK-8242141) security-libs/javax.net.ssl Two new system properties have been added to customize the TLS signature schemes in JDK. jdk.tls.client.SignatureSchemes has been added for the TLS client side, and jdk.tls.server.SignatureSchemes has been added for the server side. Each system property contains a comma-separated list of supported signature scheme names specifying the signature schemes that could be used for the TLS connections. The names are described in the "Signature Schemes" section of the Java Security Standard Algorithm Names Specification. Support for certificate_authorities Extension (JDK-8206925) security-libs/javax.net.ssl The "certificate_authorities" extension is an optional extension introduced in TLS 1.3. It is used to indicate the certificate authorities (CAs) that an endpoint supports and should be used by the receiving endpoint to guide certificate selection. With this JDK release, the "certificate_authorities" extension is supported for TLS 1.3 in both the client and the server sides. This extension is always present for client certificate selection, while it is optional for server certificate selection. Applications can enable this extension for server certificate selection by setting the jdk.tls.client.enableCAExtension system property to true. The default value of the property is false. Note that if the client trusts more CAs than the size limit of the extension (less than 2^16 bytes), the extension is not enabled. Also, some server implementations do not allow handshake messages to exceed 2^14 bytes. Consequently, there may be interoperability issues when jdk.tls.client.enableCAExtension is set to true and the client trusts more CAs than the server implementation limit. Support for canonicalize in krb5.conf (JDK-8239385) security-libs/org.ietf.jgss:krb5 The 'canonicalize' flag in the krb5.conf file is now supported by the JDK Kerberos implementation. When set to true, RFC 6806 name canonicalization is requested by clients in TGT requests to KDC services (AS protocol). Otherwise, and by default, it is not requested. The new default behavior is different from JDK 14 and previous releases where name canonicalization was always requested by clients in TGT requests to KDC services (provided that support for RFC 6806 was not explicitly disabled with the sun.security.krb5.disableReferrals system or security properties). Removed Features and Options This section describes the APIs, features, and options that were removed in Java SE 15 and JDK 15. The APIs described here are those that are provided with the Oracle JDK. It includes a complete implementation of the Java SE 15 Platform and additional Java APIs to support developing, debugging, and monitoring Java applications. Another source of information about important enhancements and new features in Java SE 15 and JDK 15 is the Java SE 15 ( JSR 390) Platform Specification, which documents changes to the specification made between Java SE 14 and Java SE 15. This document includes the identification of removed APIs and features not described here. The descriptions below might also identify potential compatibility issues that you could encounter when migrating to JDK 15. See CSRs Approved for JDK 15 for the list of CSRs closed in JDK 15. Removal of Terminally Deprecated Solaris-specific SO_FLOW_SLA Socket Option ( JDK-8244582) core-libs/java.net In this release, in conjunction with the removal of the Solaris port in JEP 381 , the JDK-specific socket option jdk.net.ExtendedSocketOptions.SO_FLOW_SLA, which is only relevant to sockets on Solaris, and its supporting classes SocketFlow and SocketFlow.Status, have been removed. Removal of RMI Static Stub Compiler (rmic) (JDK-8225319) core-libs/java.rmi The RMI static stub compiler rmic has been removed. The rmic tool is obsolete and has been deprecated for removal since JDK 13. Removal of Deprecated Constant RMIConnectorServer.CREDENTIAL_TYPES (JDK-8213222 ) core-svc/javax.management The terminally deprecated constant javax.management.remote.rmi.RMIConnectorServer.CREDENTIAL_TYPE has been removed. A filter pattern can be specified instead by using RMIConnectorServer.CREDENTIALS_FILTER_PATTERN. Removal of Nashorn JavaScript Engine (JDK-8236933) The Nashorn JavaScript script engine, its APIs, and the jjs tool have been removed. The engine, the APIs, and the tool were deprecated for removal in Java 11 with the express intent to remove them in a future release. Obsolete -XX:UseAdaptiveGCBoundary (JDK-8228991) hotspot/gc The VM option UseAdaptiveGCBoundary is obsolete. Use of this option will produce an obsolete option warning but will otherwise be ignored. This option was previously disabled by default, and enabling it only had an effect when also using -XX:+UseParallelGC. Enabling it was intended to provide a performance benefit for some applications. However, it has been disabled by default for a long time because of crashes and performance regressions. Removal of DocuSign Root CA Certificate (JDK-8225068) security-libs/java.security The following expired DocuSign root CA certificate has been removed from the cacerts keystore: + alias name "keynectisrootca [jdk]" Distinguished Name: CN=KEYNECTIS ROOT CA, OU=ROOT, O=KEYNECTIS, C=FR Removal of Comodo Root CA Certificate (JDK-8225069) security-libs/java.security The following expired Comodo root CA certificate has been removed from the cacerts keystore: + alias name "addtrustclass1ca [jdk]" Distinguished Name: CN=AddTrust Class 1 CA Root, OU=AddTrust TTP Network, O=AddTrust AB, C=SE Removal of com.sun.net.ssl.internal.ssl.Provider Name (JDK-8219989) security-libs/javax.net.ssl The legacy SunJSSE provider name, "com.sun.net.ssl.internal.ssl.Provider" has been removed and should no longer be used. The "SunJSSE" name should be used instead. For example, SSLContext.getInstance("TLS", "SunJSSE"). Retired the Deprecated SSLSession.getPeerCertificateChain() Method Implementation (JDK-8241039) security-libs/javax.net.ssl The implementation of the deprecated SSLSession.getPeerCertificateChain() method has been removed from the JDK in the SunJSSE provider and the HTTP client implementation. The default implementation of this method has been changed to throw UnsupportedOperationException. SSLSession.getPeerCertificateChain() is a deprecated method and will be removed in a future release. To mitigate the removal compatibility impact, applications should use the SSLSession.getPeerCertificates() method instead. For service providers, please remove this method from the existing implementation, and do not support this method in any new implementation. Deprecated Features and Options Additional sources of information about the APIs, features, and options deprecated in Java SE 15 and JDK 15 include: * The Deprecated API page identifies all deprecated APIs including those deprecated in Java SE 15. * The Java SE 15 ( JSR 390) specification specification documents changes to the specification made between Java SE 14 and Java SE 15 that include the identification of deprecated APIs and features not described here. * JEP 277: Enhanced Deprecation provides a detailed description of the deprecation policy. You should be aware of the updated policy described in this document. You should be aware of the contents in those documents as well as the items described in this release notes page. The descriptions of deprecated APIs might include references to the deprecation warnings of forRemoval=true and forRemoval=false. The forRemoval=true text indicates that a deprecated API might be removed from the next major release. The forRemoval=false text indicates that a deprecated API is not expected to be removed from the next major release but might be removed in some later release. The descriptions below also identify potential compatibility issues that you might encounter when migrating to JDK 15. See CSRs Approved for JDK 15 for the list of CSRs closed in JDK 15. Deprecated RMI Activation for Removal (JDK-8245068) core-libs/java.rmi The RMI Activation mechanism has been deprecated and may be removed in a future version of the platform. RMI Activation is an obsolete part of RMI that has been optional since Java 8. It allows RMI server JVMs to be started ("activated") upon receipt of a request from a client, instead of requiring RMI server JVMs to be running continuously. Other parts of RMI are not deprecated. See JEP 385 for further information. Deprecated NSWindowStyleMaskTexturedBackground (JDK-8240995) After an upgrade of the macOS SDK used to build the JDK, the behavior of the apple.awt.brushMetalLook and textured Swing properties has changed. When these properties are set, the title of the frame is still visible. It is recommended that the apple.awt.transparentTitleBar property be set to true to make the title of the frame invisible again. The apple.awt.fullWindowContent property can also be used. Please note that Textured window support was implemented by using the NSTexturedBackgroundWindowMask value of NSWindowStyleMask. However, this was deprecated in macOS 10.12 along with NSWindowStyleMaskTexturedBackground, which was deprecated in macOS 10.14. For additional information, refer to the following documentation: * apple.awt.brushMetalLook: https://developer.apple.com/documentation/appkit/ nstexturedbackgroundwindowmask?language=objc * apple.awt.transparentTitleBar: https://developer.apple.com/documentation/ appkit/nswindow/1419167-titlebarappearstransparent?language=objc * apple.awt.fullWindowContent: https://developer.apple.com/documentation/ appkit/nsfullsizecontentviewwindowmask Deprecated -XX:ForceNUMA Option (JDK-8243628) hotspot/gc The VM option ForceNUMA is deprecated. Use of this option will produce a deprecation warning. This option will be removed in a future release. This option has always been disabled by default. It exists to support testing of NUMA-related code paths when running on a single node / UMA platform. Disabled Biased-locking and Deprecated Biased-locking Flags (JDK-8231264) hotspot/runtime Biased locking has been disabled by default in this release. In addition, the VM option UseBiasedLocking along with the VM options BiasedLockingStartupDelay, BiasedLockingBulkRebiasThreshold, BiasedLockingBulkRevokeThreshold, BiasedLockingDecayTime and UseOptoBiasInlining have been deprecated. The options will continue to work as intended but will generate a deprecation warning when they are used. Biased locking might affect performance on applications that exhibit significant amounts of uncontended synchronization, such as applications that rely on older Java Collections APIs that synchronize on every access. Hashtable and Vector are examples of these APIs. Use -XX:+BiasedLocking on the command line to re-enable biased locking. Report any significant performance regressions to Oracle with biased locking disabled. Disable Native SunEC Implementation by Default (JDK-8237219) security-libs/javax.crypto The SunEC crypto provider no longer advertises curves that are not implemented by using modern formulas and techniques. Arbitrary and named curves, listed at the bottom of this note, are disabled. Commonly used named curves, secp256r1, secp384r1, secp521r1, x25519, and x448, remain supported and enabled by SunEC because they use modern techniques. Applications that still require the disabled curves from the SunEC provider can re-enable them by setting the System property jdk.sunec.disableNative to false. For example: java -Djdk.sunec.disableNative=false .... If this property is set to any other value, the curves will remain disabled. Exceptions thrown when the curves are disabled will contain the message Legacy SunEC curve disabled, followed by the name of the curve. Methods affected by the change are KeyPair.generateKeyPair(), KeyAgreement.generateSecret(), Signature.verify(), and Signature.sign(). These methods throw the same exception class they had before when the curve was not supported. The following curves are disabled: secp112r1, secp112r2, secp128r1, secp128r2, secp160k1, secp160r1, secp160r2, secp192k1, secp192r1, secp224k1, secp224r1, secp256k1, sect113r1, sect113r2, sect131r1, sect131r2, sect163k1, sect163r1, sect163r2, sect193r1, sect193r2, sect233k1, sect233r1, sect239k1, sect283k1, sect283r1, sect409k1, sect409r1, sect571k1, sect571r1, X9.62 c2tnb191v1, X9.62 c2tnb191v2, X9.62 c2tnb191v3, X9.62 c2tnb239v1, X9.62 c2tnb239v2, X9.62 c2tnb239v3, X9.62 c2tnb359v1, X9.62 c2tnb431r1, X9.62 prime192v2, X9.62 prime192v3, X9.62 prime239v1, X9.62 prime239v2, X9.62 prime239v3, brainpoolP256r1 brainpoolP320r1, brainpoolP384r1, brainpoolP512r1 Added forRemoval=true to Previously Deprecated ContentSigner APIs (JDK-8242260) security-libs/jdk.security The ContentSigner and ContentSignerParameters classes in the com.sun.jarsigner package support alternative signers and have been deprecated with forRemoval= true. When the -altsigner or -altsignerpath options are specified, the jarsigner tool produces a warning that these options are deprecated and will be removed. Known Issues java.net.HttpClient Does Not Override Protocols Specified in SSLContext Default Parameters (JDK-8239594) core-libs/java.net During the setup of new connections, java.net.http.HttpClient now uses the default set of protocols provided by the SSLContext when negotiating the TLS handshake. In the absence of any SSLParameters explicitly supplied to the HttpClient.builder, the HttpClient has been updated to no longer override any default-selected protocols in the SSLContext. As a result, the actual TLS version that is negotiated might differ from that of previous releases, or it might even succeed or fail to negotiate when it previously might not have. [macos] Support for Notarizing jpackage app-image and dmg (JDK-8237490) tools/jpackage jpackage cannot create packages on macOS that are suitable for notarization. Other Notes The following notes describe additional changes and information about this release. In some cases, the following descriptions provide links to additional detailed information about an issue or a change. Workaround for Windows GDI API's memory restrictions (JDK-8240654) client-libs It has been found that some Windows GDI functions don't support all types of Java heap memory allocation schemes. This problem can cause repaint issues and printing bugs. It has been worked around by allocating temporary buffers off heap. See: https://support.microsoft.com/en-us/help/4567569/ gdi-apis-may-fail-when-large-pages-or-vad-spanning-is-used java.awt.Robot.delay() Method Completes With Interrupt Status Set When Interrupted (JDK-8210231) client-libs/java.awt When it is interrupted, the implementation of the java.awt.Robot.delay() method has been changed to complete with the interrupt status set. If a thread is interrupted while waiting in the java.awt.Robot.delay() method, then this method returns immediately with the interrupt status set. If the interrupted status is already set, this method returns immediately with the interrupt status set. Optimized Empty Substring Handling (JDK-8240094) core-libs/java.lang The implementation of String.substring and related methods stripLeading and stripTrailing have changed in this release to avoid redundantly creating a new empty String. This may impact code that depends on unspecified behaviour and the identity of empty sub-strings. Lookup::defineClass Links the Class (JDK-8238195) core-libs/java.lang.invoke Lookup::defineClass is specified to throw LinkageError if a linkage error occurs, but the implementation was not actually linking the class. In this release, the implementation has been changed to link the class before returning, so conforming to the specification. If Lookup::defineClass is called to define a class that fails linking, LinkageError will be thrown. DatagramPacket.getPort() Returns 0 When the Port Is Not Set (JDK-8237890) core-libs/java.net In this release, the default port number for a datagram packet has been changed to 0. Previously, this value was -1, which was undocumented. The port can be retrieved by using DatagramPacket::getPort. DatagramSocket::disconnect Allows an Implementation to Throw UncheckedIOException (JDK-8235783) core-libs/java.net Previously, DatagramChannel::disconnect threw an IOException while DatagramSocket::disconnect did not. As a result, the DatagramChannel::socket adapter, which calls DatagramChannel::disconnect, catches the thrown IOException and rethrows it as an Error. However, this was undocumented behavior and not user-friendly. The DatagramChannel::socket adapter has been changed to throw an UncheckedIOException, and the specification of DatagramSocket::disconnect has been updated to document that an implementation may now throw an UncheckedIOException. This ensures consistency in behavior between DatagramSocket, DatagramChannel, and DatagramChannel::socket adapter. Filtering and Ordering of Addresses Returned by Alternative Hosts File Name Service Provider (JDK-8244958) core-libs/java.net In this release, the behavior of InetAddress.getAllByName has been modified when the alternative hosts file name service is selected . The JDK allows specifying an alternative host's file name service by using the jdk.net.hosts.file system property. The implementation of the alternative name service has been changed to take into account the values of the java.net.preferIPv4Stack and java.net.preferIPv6Addresses system properties. This affects the results returned by InetAddress.getAllByName when the host's file name service is selected. For details about java.net.preferIPv4Stack and java.net.preferIPv6Addresses, see Networking Properties in the API documentation. Modified the MS950 charset Encoder's Conversion Table (JDK-8232161) core-libs/java.nio.charsets In this release, some of the one-way byte-to-char mappings have been aligned with the preferred mappings provided by the Unicode Consortium. Support Monetary Grouping Separator in DecimalFormat/DecimalFormatSymbols ( JDK-8227313) core-libs/java.text DecimalFormat/DecimalFormatSymbols classes are now capable of dealing with grouping separators for currency values. For example, the monetary grouping separator for the German language used in Austria (the de-AT locale) is '.', whereas the monetary grouping separator in other German locales is ' '. ValueRange.of(long, long, long) Does Not Throw IAE on Invalid Inputs ( JDK-8239520) core-libs/java.time java.time.temporal.ValueRange.of() methods are now correctly throwing an InvalidArgumentException on given invalid arguments. For example, of(5, 2, 10) which is invalid because the minimum is greater than the smallest maximum, now throws the exception. localizedBy() Overrides Localized Values With Default Values (JDK-8244245) core-libs/java.time java.time.format.DateTimeFormatter.localizedBy(Locale) method now honors the default locale values, such as Chronologyand/or DecimalStyle of the specified locale argument. For example, in previous JDK releases: jshell> DateTimeFormatter.ofLocalizedDate(FormatStyle.FULL) .localizedBy(Locale.forLanguageTag("fa")) .format(LocalDate.now()) $3 ==> "جمعه 1 مهٔ 2020" the numbers are in Arabic (Western) numerals. In JDK 15: jshell> DateTimeFormatter.ofLocalizedDate(FormatStyle.FULL) .localizedBy(Locale.forLanguageTag("fa")) .format(LocalDate.now()) $3 ==> "جمعه ۱ مهٔ ۲۰۲۰" the numbers are in Extended Arabic-Indic numerals because it is the default numbering system for the Farsi locale. Performance Improvement for InflaterOutputStream.write (JDK-8242848) core-libs/java.util.jar InflaterOutputStream(OutputStream out, Inflater infl, int bufLen) allows for specifying the decompressor and buffer size to be used. InflaterOutputStream.write(byte[] b, int off, int len) was writing data using a max buffer size of 512 bytes. Starting with JDK 15 the buffer size specified via InflaterOutputStream (OutputStream out, Inflater infl, int bufLen) will be used in calls to InflaterOutputStream.write(byte[] b, int off, int len). If the buffer size is not specified when invoking the InflaterOutputStreamconstructor, it will default to 512 bytes. Case Insensitive Matching Doesn't Work Correctly for Some Character Classes ( JDK-8214245) core-libs/java.util.regex The Java regular expression engine supports the case insensitive mode. When this mode is turned on, the engine is supposed to match the input text without regard to the case of the characters it consists of. However, the current implementation of matching against some named character classes (those that are encoded with p{name} or P{name} constructs) fails to respect the case insensitive mode. This fix makes these character classes behave consistently with respect to case sensitivity. When the regular expression engine operates in the case insensitive mode, the named character classes will match the input characters without regard to their case: lower case, upper case, or title case. Localized Time Zone Name Inconsistency Between English and Other Locales ( JDK-8236548) core-libs/java.util:i18n English time zone names provided by the CLDR locale provider are now correctly synthesized following the CLDR spec, rather than substituted from the COMPAT provider. For example, SHORT style names are no longer synthesized abbreviations of LONG style names, but instead produce GMT offset formats. Support for CLDR version 37 (JDK-8239480) core-libs/java.util:i18n Locale data based on Unicode Consortium's CLDR has been upgraded to their version 37. For the detailed locale data changes, please refer to the Unicode Consortium's CLDR release notes: * http://cldr.unicode.org/index/downloads/cldr-37 Flags Controlling C1 Inlining Have New Names (JDK-8235673) hotspot/compiler A number of flags controlling inlining in the C1 and C2 compilers have been split up into separate flags. The C2 compiler keeps the flags with the old names, and the C1 compiler gets the new flags. Old flags now only controlling C2 * MaxInlineLevel * MaxRecursiveInlineLevel * MaxInlineSize * MaxTrivialSize * InlineSmallCode * FreqInlineSize New flags for C1 that replace the old ones * C1MaxInlineLevel * C1MaxRecursiveInlineLevel * C1MaxInlineSize * C1MaxTrivialSize Deprecation If the old flags are used in a JDK build without the C2 compiler, a deprecation warning will be printed. JEP 377: ZGC: A Scalable Low-Latency Garbage Collector (Production) ( JDK-8209683) hotspot/gc The Z Garbage Collector (ZGC) is now ready for use in production and no longer marked as an experimental feature. ZGC is enabled by using the -XX:+UseZGC command-line option (using -XX:+UnlockExperimentalVMOptions is no longer needed). See JEP 377 for more details. Improved Ergonomics for G1 Heap Region Size (JDK-8241670) hotspot/gc The default heap region size calculation has been changed to return larger regions by default. The calculation still aims to have 2048 regions, but two aspects have changed: * Only the maximum heap size is considered. The old calculation also took the initial heap size into consideration, but this can give unexpected behavior when no heap size is set. * The region size is rounded up to the nearest power of 2 instead of down. This will return larger region sizes in cases where the maximum heap size is not a power of 2. These changes improve startup and runtime performance. Disabling NUMA Interleaving on Windows (JDK-8245002) hotspot/gc -XX:+UseNUMAInterleaving has no effect on Windows in this release. It was found that GDI APIs used by java2d don't support the memory reservation scheme used for NUMA interleaving. The JVM detects this problem and both warns about this and turns off NUMA interleaving. See: https://support.microsoft.com/en-us/help/ 4567569/gdi-apis-may-fail-when-large-pages-or-vad-spanning-is-used Disabling large pages on Windows (JDK-8245000) hotspot/gc -XX:+UseLargePages has no effect on Windows in this release. It was found that GDI APIs used by java2d don't support large pages. The JVM detects this problem and both warns about this and reverts to using small pages. See: https:// support.microsoft.com/en-us/help/4567569/ gdi-apis-may-fail-when-large-pages-or-vad-spanning-is-used Field Layout Computation Changed (JDK-8237767) hotspot/runtime The way that field layout is computed has been changed, with more aggressive optimizations to avoid unused gaps in instances. These new optimizations can be disabled by using a new VM option -XX:-UseEmptySlotsInSupers. For a limited time, it is possible to continue to use the old code to compute field layout with a new VM option -XX:-UseNewFieldLayout. However, this option has been deprecated in JDK 15 and the old code will be removed in a future release. Enable ShowCodeDetailsInExceptionMessages by default (JDK-8233014) hotspot/runtime The default of the flag ShowCodeDetailsInExceptionMessages was changed to 'true'. The helpful NullPointerException messages of JEP 358 are now printed by default. The messages contain snippets of the code where the NullPointerException was raised. App deployers should double check the output of their web applications and similar usage scenarios. The NullPointerException message could be included in application error messages or be displayed by other means in the app. This could give remote attackers valuable hints about a potential vulnerable state of the software components being used. An example message is 'Cannot read field "c" because "a.b" is null'. The attacker knows that field b of a contains null which might be unintended and offer an opportunity for an attack. For more details of what the message can contain see the above mentioned JEP 358. Signature and SignatureSpi Get Parameter Methods May Return null When Unsupported (JDK-8243424) security-libs/java.security Signature.getParameters() and SignatureSpi.engineGetParameters() may return null if the underlying provider does not support returning the parameters as AlgorithmParameters. For further details, see the Signature and SignatureSpi method descriptions. SunPKCS11 Initialization With NSS When External FIPS Modules Are in Security Modules Database (JDK-8238555) security-libs/javax.crypto:pkcs11 The SunPKCS11 security provider can now be initialized with NSS when FIPS-enabled external modules are configured in the Security Modules Database (NSSDB). Before this change, when such a library was configured for NSS in non-FIPS mode, the SunPKCS11 provider would throw a RuntimeException with the message "FIPS flag set for non-internal module". This change allows the JDK to work properly with recent NSS releases in GNU/ Linux operating systems when the system-wide FIPS policy is turned on. Default SSLEngine Should Create in Server Role (JDK-8237474) security-libs/javax.net.ssl In JDK 11 and later, javax.net.ssl.SSLEngine by default used client mode when handshaking. As a result, the set of default enabled protocols may differ to what is expected. SSLEngine would usually be used in server mode. From this JDK release onwards, SSLEngine will default to server mode. The javax.net.ssl.SSLEngine.setUseClientMode(boolean mode) method may be used to configure the mode.

Version 1.64.1 -------------- - The BigInt type is now _actually_ available, as it wasn't enabled in the 1.64.0 release even though it was mentioned in the release notes. - Closed bugs and merge requests: * testCommandLine's Unicode tests failing on Alpine Linux [Philip Chimento, #296, !399] * build: Various clean-ups [Jan Tojnar, !403] * Correctly handle vfunc inout parameters [Marco Trevisan, !404] * Fix failed redirect of output in CommandLine tests [Liban Parker, !409] Version 1.58.6 -------------- - Various backports: * Correctly handle vfunc inout parameters [Marco Trevisan] * Fix failed redirect of output in CommandLine tests [Liban Parker] * Avoid filename conflict when tests run in parallel [Philip Chimento] Version 1.64.0 -------------- - No change from 1.63.92. Version 1.63.92 --------------- - Closed bugs and merge requests: * object: Use g_irepository_get_object_gtype_interfaces [Colin Walters, Philip Chimento, #55, !52] * Add -fno-semantic-interposition to -Bsymbolic-functions [Jan Alexander Steffens (heftig), #303, !397] * examples: add a dbus-client and dbus-service example [Andy Holmes, !398] * Various GNOME Shell crashes during GC, mozjs68 regression [Jan Alexander Steffens (heftig), Philip Chimento, #301, !396] Version 1.63.91 --------------- - Closed bugs and merge requests: * [mozjs68] Reorganize modules for ESM. [Evan Welsh, Philip Chimento, !383] * Various maintenance [Philip Chimento, !388] * Fix building GJS master with Visual Studio and update build instructions [Chun-wei Fan, !389] * Resolve "Gnome Shell crash on GC run with mozjs68" [Philip Chimento, !391] * installed-tests/js: Add missing dep on warnlib_typelib [Jan Alexander Steffens, !393] * object: Cache known unresolvable properties [Daniel van Vugt, Philip Chimento, !394, #302] Version 1.58.5 -------------- - Closed bugs and merge requests: * Fix Visual Studio builds of gnome-3-34 (1.58.x) branch [Chun-wei Fan, !392] * Can not access GObject properties of classes without GI information [Juan Pablo Ugarte, !385, #299] Version 1.63.90 --------------- - New JS API: The GObject module has gained new overrides: GObject.signal_handler_find(), GObject.signal_handlers_block_matched(), GObject.signal_handlers_unblock_matched(), and GObject.signal_handlers_disconnect_matched(). These overrides replace the corresponding C API, which was not idiomatic for JavaScript and was not fully functional because it used bare C pointers for some of its functionality. See modules/overrides/GObject.js for API documentation. - New JavaScript features! This version of GJS is based on SpiderMonkey 68, an upgrade from the previous ESR (Extended Support Release) of SpiderMonkey 60. Here are the highlights of the new JavaScript features. For more information, look them up on MDN or devdocs.io. * New language features + The BigInt type, currently a stage 3 proposal in the ES standard, is now available. * New syntax + `globalThis` is now the ES-standard supported way to get the global object, no matter what kind of JS environment. The old way, `window`, will still work, but is no longer preferred. + BigInt literals are expressed by a number with "n" appended to it: for example, `1n`, `9007199254740992n`. * New APIs + String.prototype.trimStart() and String.prototype.trimEnd() now exist and are preferred instead of trimLeft() and trimRight() which are nonstandard. + String.prototype.matchAll() allows easier access to regex capture groups. + Array.prototype.flat() flattens nested arrays, well-known from lodash and similar libraries. + Array.prototype.flatMap() acts like a reverse filter(), allowing adding elements to an array while iterating functional-style. + Object.fromEntries() creates an object from iterable key-value pairs. + Intl.RelativeTimeFormat is useful for formatting time differences into human-readable strings such as "1 day ago". + BigInt64Array and BigUint64Array are two new typed array types. * New behaviour + There are a lot of minor behaviour changes as SpiderMonkey's JS implementation conforms ever closer to existing ECMAScript standards and adopts new ones. For complete information, read the Firefox developer release notes: https://developer.mozilla.org/en-US/Firefox/Releases/61#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/62#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/63#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/64#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/65#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/66#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/67#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/68#JavaScript * Backwards-incompatible changes + The nonstandard String generics were removed. These had only ever been implemented by Mozilla and never made it into a standard. (An example of a String generic is calling a string method on something that might not be a string like this: `String.endsWith(foo, 5)`. The proper way is `String.prototype.endsWith.call(foo, 5)` or converting `foo` to a string.) This should not pose much of a problem for existing code, since in the previous version these would already print a deprecation warning whenever they were used. You can use `moz68tool` from mozjs-deprecation-tools (https://gitlab.gnome.org/ptomato/moz60tool) to scan your code for this nonstandard usage. - Closed bugs and merge requests: * invalid import on signal.h [#295, !382, Philip Chimento] * SpiderMonkey 68 [#270, !386, Philip Chimento] * GObject: Add override for GObject.handler_block_by_func [#290, !371, Philip Chimento] Version 1.63.3 -------------- - Closed bugs and merge requests: * JS ERROR: TypeError: this._rooms.get(...) is undefined [Philip Chimento, #289, !367] * Run CI build with --werror [Philip Chimento, #286, !365] * build: Remove Autotools build system [Philip Chimento, !364] * gjs-symlink script is incompatible with distro builds [Michael Catanzaro, Bastien Nocera, #291, !369, !370] * installed-tests: Don't hardcode the path of bash [Ting-Wei Lan, !372] * Update Visual Studio build instructions (after migrating to full Meson-based builds) [Chun-wei Fan, !375] * object: Warn when setting a deprecated property [Florian Müllner, !378] * CI: Create mozjs68 CI images [Philip Chimento, !379] * Various maintenance [Philip Chimento, !374, !380, !381] Version 1.58.4 -------------- - Now prints a warning when constructing an unregistered object inheriting from GObject (i.e. if you forgot to use GObject.registerClass.) In 1.58.2 this would throw an exception, which broke some existing code, so that change was reverted in 1.58.3. In this version the check is reinstated, but we log a warning instead of throwing an exception, so that people know to fix their code, but without breaking things. NOTE: In 1.64 (the next stable release) the warning will be changed back into an exception, because code with this problem can be subtly broken and cause unexpected errors elsewhere. So make sure to fix your code if you get this warning. - Closed bugs and merge requests: * GSettings crash fixes [Andy Holmes, !373] - Memory savings for Cairo objects [Philip Chimento, !374] - Fix for crash in debug functions [Philip Chimento, !374] Version 1.63.2 -------------- - There is an option for changing the generated GType name for GObject classes created in GJS to a new scheme that is less likely to have collisions. This scheme is not yet the default, but you can opt into it by setting `GObject.gtypeNameBasedOnJSPath = true;` as early as possible in your prograṁ. Doing this may require some changes in Glade files if you use composite widget templates. We recommend you make this change in your codebase as soon as possible, to avoid any surprises in the future. - New JS API: GObject.Object has gained a stop_emission_by_name() method which is a bit more idiomatic than calling GObject.signal_stop_emission_by_name(). - It's now supported to use the "object" attribute in a signal connection in a composite widget template in a Glade file. - Closed bugs and merge requests: * CI: Tweak eslint rule for unneeded parentheses [Florian Müllner, !353] * Smarter GType name computation [Marco Trevisan, !337] * Meson CI [Philip Chimento, !354] * Visual Studio builds using Meson [Chun-wei Fan, !355] * Hide internal symbols from ABI [Marco Trevisan, #194, !352] * Allow creating custom tree models [Giovanni Campagna, #71] * build: Fix dist files [Florian Müllner, !357] * GObject: Add convenience wrapper for signal_stop_emission_by_name() [Florian Müllner, !358] * Various maintenance [Philip Chimento, !356] * object_instance_props_to_g_parameters should do more check on argv [Philip Chimento, #63, !359] * Support flat C arrays of structures [Philip Chimento, !361] * Gtk Templates: support connectObj argument [Andy Holmes, !363] - Various build fixes [Philip Chimento] Version 1.58.2 -------------- - Closed bugs and merge requests: * GObject based class initialization checks [Marco Trevisan, Philip Chimento, !336] * Silently leaked return value of callbacks [Xavier Claessens, Philip Chimento, #86, !44] * Crash when calling Gio.Initable.async_init with not vfunc_async_init implementation [Philip Chimento, #287, !362] * [cairo] insufficient checking [Philip Chimento, #49, !360] - Various crash fixes backported from the development branch that didn't close a bug or merge request. Version 1.63.1 -------------- - Note that the 1.59, 1.60, 1.61, and 1.62 releases are hereby skipped, because we are calling the next stable series 1.64 to match gobject-introspection and GLib. - GJS now includes a Meson build system. This is now the preferred way to build it; however, the old Autotools build system is still available for a transitional period. - Closed bugs and merge requests: * GObject: Add convenience wrapper for signal_handler_(un)block() [Florian Müllner, !326] * GObject based class initialization checks [Marco Trevisan, Philip Chimento, !336] * Meson port [Philip Chimento, !338] * add http client example [Sonny Piers, !342] * Smaller CI, phase 2 [Philip Chimento, !343] * add websocket client example [Sonny Piers, !344] * Fix Docker images build [Philip Chimento, !345] * CI: Use new Docker images [Philip Chimento, !346] * docs: Update internal links [Andy Holmes, !348] * Don't pass generic marshaller to g_signal_newv() [Niels De Graef, !349] * tests: Fail debugger tests if command failed [Philip Chimento, !350] * Minor CI image fixes [Philip Chimento, !351] * Various fixes [Marco Trevisan, Philip Chimento] Version 1.58.1 -------------- - Closed bugs and merge requests: * Import wiki documentation [Sonny Piers, !341] * Smaller CI, phase 1 [Philip Chimento, !339] * Crashes after setting child property 'icon-name' on GtkStack then displaying another GtkStack [Florian Müllner, #284, !347] * GLib.strdelimit crashes [Philip Chimento, #283, !340] Version 1.58.0 -------------- - No change from 1.57.92. Version 1.57.92 --------------- - Closed bugs and merge requests: * tests: Enable regression test cases for GPtrArrays and GArrays of structures [Stéphane Seng, !334] * Various maintenance [Philip Chimento, !333, !335] Version 1.57.91 --------------- - GJS no longer links to libgtk-3. This makes it possible to load the Gtk-4.0 typelib in GJS and write programs that use GTK 4. - The heapgraph tool has gained some improvements; it is now possible to print a heap graph of multiple targets. You can also mark an object for better identification in the heap graph by assigning a magic property: for example, myObject.__heapgraph_name = 'Button' will make that object identify itself as "Button" in heap graphs. - Closed bugs and merge requests: * Remove usage of Lang in non legacy code [Sonny Piers, !322] * GTK4 [Florian Müllner, #99, !328, !330] * JS syntax fixes [Marco Trevisan, Philip Chimento, !306, !323] * gi: Avoid infinite recursion when converting GValues [Florian Müllner, !329] * Implement all GObject-introspection test suites [Philip Chimento, !327, !332] * Heapgraph improvements [Philip Chimento, !325] Version 1.57.90 --------------- - New JS API: GLib.Variant has gained a recursiveUnpack() method which transforms the variant entirely into a JS object, discarding all type information. This can be useful for dealing with a{sv} dictionaries, where deepUnpack() will keep the values as GLib.Variant instances in order to preserve the type information. - New JS API: GLib.Variant has gained a deepUnpack() method which is exactly the same as the already existing deep_unpack(), but fits with the other camelCase APIs that GJS adds. - Closed bugs and merge requests: * Marshalling of GPtrArray broken [#9, !311, Stéphane Seng] * Fix locale chooser [!313, Philip Chimento] * dbus-wrapper: Remove interface skeleton flush idle on dispose [!312, Marco Trevisan] * gobject: Use auto-compartment when getting property as well [!316, Florian Müllner] * modules/signals: Use array destructuring in _emit [!317, Jonas Dreßler] * GJS can't call glibtop_init function from libgtop [#259, !319, Philip Chimento] * GLib's VariantDict is missing lookup [#263, !320, Sonny Piers] * toString on an object implementing an interface fails [#252, !299, Marco Trevisan] * Regression in GstPbutils.Discoverer::discovered callback [#262, !318, Philip Chimento] * GLib.Variant.deep_unpack not working properly with a{sv} variants [#225, !321, Fabián Orccón, Philip Chimento] * Various maintenance [!315, Philip Chimento] - Various CI fixes [Philip Chimento] Version 1.57.4 -------------- - Closed bugs and merge requests: * gjs 1.57 requires a recent sysprof version for sysprof-capture-3 [#258, !309, Olivier Fourdan] - Misc documentation changes [Philip Chimento] Version 1.57.3 -------------- - The GJS profiler is now integrated directly into Sysprof 3, via the GJS_TRACE_FD environment variable. Call stack information and garbage collector timing will show up in Sysprof. See also GNOME/Initiatives#10 - New JS API: System.addressOfGObject(obj) will return a string with the hex address of the underlying GObject of `obj` if it is a GObject wrapper, or throw an exception if it is not. This is intended for debugging. - New JS API: It's now possible to pass a value from Gio.DBusProxyFlags to the constructor of a class created by Gio.DBusProxy.makeProxyWrapper(). - Backwards-incompatible change: Trying to read a write-only property on a DBus proxy object, or write a read-only property, will now throw an exception. Previously it would fail silently. It seems unlikely any code is relying on the old behaviour, and if so then it was probably masking a bug. - Closed bugs and merge requests: * Build failure on Continuous [#253, !300, Philip Chimento] * build: Bump glib requirement [!302, Florian Müllner] * profiler: avoid clearing 512 bytes of stack [!304, Christian Hergert] * system: add addressOfGObject method [!296, Marco Trevisan] * Add support for GJS_TRACE_FD [!295, Christian Hergert] * Gio: Make possible to pass DBusProxyFlags to proxy wrapper [!297, Marco Trevisan] * Various maintenance [!301, Philip Chimento] * Marshalling of GPtrArray broken [#9, !307, Stéphane Seng] * Build fix [!308, Philip Chimento] * Gio: sync dbus wrapper properties flags [!298, Marco Trevisan] * GjsMaybeOwned: Reduce allocation when used as Object member [!303, Marco Trevisan] Version 1.57.2 -------------- - There are now overrides for Gio.SettingsSchema and Gio.Settings which avoid aborting the whole process when trying to access a nonexistent key or child schema. The original API from GLib was intended for apps, since apps should have complete control over which settings keys they are allowed to access. However, it is not a good fit for shell extensions, which may need to access different settings keys depending on the version of GNOME shell they're running on. This feature is based on code from Cinnamon which the copyright holders have kindly agreed to relicense to GJS's license. - New JS API: It is now possible to pass GObject.TypeFlags to GObject.registerClass(). For example, passing `GTypeFlags: GObject.TypeFlags.ABSTRACT` in the class info object, will create a class that cannot be instantiated. This functionality was present in Lang.Class but has been missing from GObject.registerClass(). - Closed bugs and merge requests: * Document logging features [#230, !288, Andy Holmes] * Support optional GTypeFlags value in GObject subclasses [!290, Florian Müllner] * Ensure const-correctness in C++ objects [#105, !291, Onur Şahin] * Programmer errors with GSettings cause segfaults [#205, !284, Philip Chimento] * Various maintenance [!292, Philip Chimento] * debugger: Fix summary help [!293, Florian Müllner] * context: Use Heap pointers for GC objects stored in vectors [!294, Philip Chimento] Version 1.56.2 -------------- - Closed bugs and merge requests: * Crash in BoxedInstance when struct could not be allocated directly [#240, !285, Philip Chimento] * Cairo conversion bugs [!286, Philip Chimento] * Gjs crashes when binding inherited property to js added gobject-property [#246, !289, Marco Trevisan] * console: Don't accept --profile after the script name [!287, Philip Chimento] Version 1.57.1 -------------- - Closed bugs and merge requests: * Various maintenance [!279, Philip Chimento] * mainloop: Assign null to property instead of deleting [!280, Jason Hicks] * Added -d version note README.md [!282, Nauman Umer] * Extra help for debugger commands [#236, !283, Nauman Umer] * Crash in BoxedInstance when struct could not be allocated directly [#240, !285, Philip Chimento] * Cairo conversion bugs [!286, Philip Chimento] Version 1.56.1 -------------- - Closed bugs and merge requests: * Calling dumpHeap() on non-existent directory causes crash [#134, !277, Philip Chimento] * Using Gio.MemoryInputStream.new_from_data ("string") causes segfault [#221, !278, Philip Chimento] * Fix gjs_context_eval() for non-zero-terminated strings [!281, Philip Chimento] Version 1.56.0 -------------- - No change from 1.55.92. Version 1.55.92 --------------- - Closed bugs and merge requests: * Fix CI failures [!269, Philip Chimento] * Possible memory allocation/deallocation bug (possibly in js_free() in GJS) [!270, Chun-wei Fan, Philip Chimento] * cairo-context: Special-case 0-sized vector [!271, Florian Müllner] * Add some more eslint rules [!272, Florian Müllner] * win32/NMake: Fix introspection builds [!274, Chun-wei Fan] * NMake/libgjs-private: Export all the public symbols there [!275, Chun-wei Fan] Version 1.55.91 --------------- - The problem of freezing while running the tests using GCC's sanitizers was determined to be a bug in GCC, which was fixed in GCC 9.0.1. - Closed bugs and merge requests: * gnome-sound-recorder crashes deep inside libgjs [#223, !266, Philip Chimento] * Various maintenance [!267, Philip Chimento] * wrapperutils: Define $gtype property as non-enumerable [!268, Philip Chimento] Version 1.55.90 --------------- - New JS API: It's now possible to call and implement DBus methods whose parameters or return types include file descriptor lists (type signature 'h'.) This involves passing or receiving a Gio.UnixFDList instance along with the parameters or return values. To call a method with a file descriptor list, pass the Gio.UnixFDList along with the rest of the parameters, in any order, the same way you would pass a Gio.Cancellable or async callback. For return values, things are a little more complicated, in order to avoid breaking existing code. Previously, synchronously called DBus proxy methods would return an unpacked GVariant. Now, but only if called with a Gio.UnixFDList, they will return [unpacked GVariant, Gio.UnixFDList]. This does not break existing code because it was not possible to call a method with a Gio.UnixFDList before, and the return value is unchanged if not calling with a Gio.UnixFDList. This does mean, unfortunately, that if you have a method with an 'h' in its return signature but not in its argument signatures, you will have to call it with an empty FDList in order to receive an FDList with the return value, when calling synchronously. On the DBus service side, when receiving a method call, we now pass the Gio.UnixFDList received from DBus to the called method. Previously, sync methods were passed the parameters, and async methods were passed the parameters plus the Gio.DBusInvocation object. Appending the Gio.UnixFDList to those parameters also should not break existing code. See the new tests in installed-tests/js/testGDBus.js for examples of calling methods with FD lists. - We have observed on the CI server that GJS 1.55.90 will hang forever while running the test suite compiled with GCC 9.0.0 and configured with the --enable-asan and --enable-ubsan arguments. This should be addressed in one of the following 1.55.x releases. - Closed bugs and merge requests: * GDBus proxy overrides should support Gio.DBusProxy.call_with_unix_fd_list() [#204, !263, Philip Chimento] * Add regression tests for GObject vfuncs [!259, Jason Hicks] * GjsPrivate: Sources should be C files [!262, Philip Chimento] * build: Vendor last-good version of AX_CODE_COVERAGE [!264, Philip Chimento] Version 1.55.4 -------------- - Closed bugs and merge requests: * Various maintenance [!258, Philip Chimento] * Boxed copy constructor should not be called, split Boxed into prototype and instance structs [#215, !260, Philip Chimento] Version 1.55.3 -------------- - Closed bugs and merge requests: * Manually constructed ByteArray toString segfaults [#219, !254, Philip Chimento] * signals: Add _signalHandlerIsConnected method [!255, Jason Hicks] * Various maintenance [!257, Philip Chimento] Version 1.52.5 -------------- - This was a release consisting only of backports from the GNOME 3.30 branch to the GNOME 3.28 branch. - This release includes the "Big Hammer" patch from GNOME 3.30 to reduce memory usage. For more information, read the blog post at https://feaneron.com/2018/04/20/the-infamous-gnome-shell-memory-leak/ It was not originally intended to be backported to GNOME 3.28, but in practice several Linux distributions already backported it, and it has been working well to reduce memory usage, and the bugs have been ironed out of it. It does decrease performance somewhat, so if you don't want that then don't install this update. - Closed bugs and merge requests: * Ensure not to miss the force_gc flag [#150, !132, Carlos Garnacho] * Make GC much more aggressive [#62, !50, Giovanni Campagna, Georges Basile Stavracas Neto, Philip Chimento] * Queue GC when a GObject reference is toggled down [#140, !114, !127, Georges Basile Stavracas Neto] * Reduce memory overhead of g_object_weak_ref() [#144, !122, Carlos Garnacho, Philip Chimento] * context: Defer and therefore batch forced GC runs [performance] [!236, Daniel van Vugt] * context: use timeout with seconds to schedule a gc trigger [!239, Marco Trevisan] * Use compacting GC on RSS size growth [!133, #151, Carlos Garnacho] * GType memleak fixes [!244, Marco Trevisan] Version 1.55.2 -------------- - Closed bugs and merge requests: * Gnome-shell crashes on destroying cached param specs [#213, !240, Marco Trevisan] * Various maintenance [!235, !250, Philip Chimento] * Auto pointers builder [!243, Marco Trevisan] * configure.ac: Update bug link [!245, Andrea Azzarone] * SIGSEGV when exiting gnome-shell [#212, !247, Andrea Azzarone, Philip Chimento] * Fix build with --enable-dtrace and create CI job to ensure it doesn't break in the future [#196, !237, !253, Philip Chimento] * Delay JSString-to-UTF8 conversion [!249, Philip Chimento] * Annotate return values [!251, Philip Chimento] * Fix a regression with GError toString() [!252, Philip Chimento] * GType memleak fixes [!244, Marco Trevisan] * Atoms refactor [!233, Philip Chimento, Marco Trevisan] * Write a "Code Hospitable" README file [#17, !248, Philip Chimento, Andy Holmes, Avi Zajac] * object: Method lookup repeatedly traverses introspection [#54, !53, Colin Walters, Philip Chimento] * Handler of GtkEditable::insert-text signal is not run [#147, !143, Tomasz Miąsko, Philip Chimento] Version 1.54.3 -------------- - Closed bugs and merge requests: * object: Fix write-only properties [!246, Philip Chimento] * SIGSEGV when exiting gnome-shell [#212, !247, Andrea Azzarone] * SelectionData.get_targets crashes with "Unable to resize vector" [#201, !241, Philip Chimento] * Gnome-shell crashes on destroying cached param specs [#213, !240, Marco Trevisan] * GType memleak fixes [!244, Marco Trevisan] * Fix build with --enable-dtrace and create CI job to ensure it doesn't break in the future [#196, !253, Philip Chimento] Version 1.54.2 -------------- - Closed bugs and merge requests: * context: Defer and therefore batch forced GC runs [performance] [!236, Daniel van Vugt] * context: use timeout with seconds to schedule a gc trigger [!239, Marco Trevisan] * fundamental: Check if gtype is valid before using it [!242, Georges Basile Stavracas Neto] - Backported a fix for a crash in the interactive interpreter when executing something like `throw "foo"` [Philip Chimento] - Backported various maintenance from 3.31 [Philip Chimento] Version 1.55.1 -------------- - New API for programs that embed GJS: gjs_memory_report(). This was already an internal API, but now it is exported. - Closed bugs and merge requests: * object: Implement newEnumerate hook for GObject [!155, Ole Jørgen Brønner] * Various maintenance [!228, Philip Chimento] * ByteArray.toString should stop at null bytes [#195, !232, Philip Chimento] * Byte arrays that represent encoded strings should be 0-terminated [#203, !232, Philip Chimento] * context: Defer and therefore batch forced GC runs [performance] [!236, Daniel van Vugt] * context: use timeout with seconds to schedule a gc trigger [!239, Marco Trevisan] * arg: Add special-case for byte arrays going to C [#67, !49, Jasper St. Pierre, Philip Chimento] Version 1.52.4 -------------- - This was a release consisting only of backports from the GNOME 3.30 branch to the GNOME 3.28 branch. - Closed bugs and merge requests: * `ARGV` encoding issues [#22, !108, Evan Welsh] * Segfault on enumeration of GjSFileImporter properties when a searchpath entry contains a symlink [#154, !144, Ole Jørgen Brønner] * Possible refcounting bug around GtkListbox signal handlers [#24, !154, Philip Chimento] * Fix up GJS_DISABLE_JIT flag now the JIT is enabled by default in SpiderMonkey [!159, Christopher Wheeldon] * Expose GObject static property symbols. [!197, Evan Welsh] * Do not run linters on tagged commits [!181, Claudio André] * gjs-1.52.0 fails to compile against x86_64 musl systems [#132, !214, Philip Chimento] * gjs no longer builds after recent autoconf-archive updates [#149, !217, Philip Chimento] Version 1.54.1 -------------- - Closed bugs and merge requests: * legacy: Ensure generated GType names are valid [!229, Florian Müllner] * Fix GJS profiler with MozJS 60 [!230, Georges Basile Stavracas Neto] * Regression with DBus proxies [#202, !231, Philip Chimento] Version 1.54.0 -------------- - Compatibility fix for byte arrays: the legacy toString() behaviour of byte arrays returned from GObject-introspected functions is now restored. If you use the functionality, a warning will be logged asking you to upgrade your code. - Closed bugs and merge requests: * byteArray: Add compatibility toString property [Philip Chimento, !227] Version 1.53.92 --------------- - Technology preview of a GNOME 3.32 feature: native Promises for GIO-style asynchronous operations. This is the result of Avi Zajac's summer internship. To use it, you can opt in once for each specific asynchronous method, by including code such as the following: Gio._promisify(Gio.InputStream.prototype, 'read_bytes_async', 'read_bytes_finish'); After executing this, you will be able to use native Promises with the Gio.InputStream.prototype.read_async() method, simply by not passing a callback to it: try { let bytes = await stream.read_bytes_async(count, priority, cancel); } catch (e) { logError(e, 'Failed to read bytes'); } Note that any "success" boolean return values are deleted from the array of return values from the async method. That is, let [contents, etag] = file.load_contents_async(cancel); whereas the callback version still returns a useless [ok, contents, etag] that can never be false, since on false an exception would be thrown. In the callback version, we must keep this for compatibility reasons. Note that due to a bug in GJS (https://gitlab.gnome.org/GNOME/gjs/issues/189), promisifying methods on Gio.File.prototype and other interface prototypes will not work. We provide the API Gio._LocalFilePrototype on which you can promisify methods that will work on Gio.File instances on the local disk only: Gio._promisify(Gio._LocalFilePrototype, 'load_contents_async', 'load_contents_finish'); We estimate this will cover many common use cases. Since this is a technology preview, we do not guarantee API stability with the version coming in GNOME 3.32. These APIs are marked with underscores to emphasize that they are not stable yet. Use them at your own risk. - Closed bugs and merge requests: * Added promisify to GJS GIO overrides [!225, Avi Zajac] * Temporary fix for Gio.File.prototype [!226, Avi Zajac] Version 1.53.91 --------------- - Closed bugs and merge requests: * CI: add webkit and gtk-app tests [!222, Claudio André] * Fix example eslint errors [!207, Claudio André, Philip Chimento] * Fix more "lost" GInterface properties [!223, Florian Müllner] * Fix --enable-installed-tests when built from a tarball [!224, Simon McVittie] Version 1.53.90 --------------- - GJS now depends on SpiderMonkey 60 and requires a compiler capable of C++14. - GJS includes a simple debugger now. It has basic stepping, breaking, and printing commands, that work like GDB. Activate it by running the GJS console interpreter with the -d or --debugger flag before the name of the JS program on the command line. - New API for programs that embed GJS: gjs_context_setup_debugger_console(). To integrate the debugger into programs that embed the GJS interpreter, call this before executing the JS program. - New JavaScript features! This version of GJS is based on SpiderMonkey 60, an upgrade from the previous ESR (Extended Support Release) of SpiderMonkey 52. Here are the highlights of the new JavaScript features. For more information, look them up on MDN or devdocs.io. * New syntax + `for await (... of ...)` syntax is used for async iteration. + The rest operator is now supported in object destructuring: e.g. `({a, b, ...cd} = {a: 1, b: 2, c: 3, d: 4});` + The spread operator is now supported in object literals: e.g. `mergedObject = {...obj1, ...obj2};` + Generator methods can now be async, using the `async function*` syntax, or `async* f() {...}` method shorthand. + It's now allowed to omit the variable binding from a catch statement, if you don't need to access the thrown exception: `try {...} catch {}` * New APIs + Promise.prototype.finally(), popular in many third-party Promise libraries, is now available natively. + String.prototype.toLocaleLowerCase() and String.prototype.toLocaleUpperCase() now take an optional locale or array of locales. + Intl.PluralRules is now available. + Intl.NumberFormat.protoype.formatToParts() is now available. + Intl.Collator now has a caseFirst option. + Intl.DateTimeFormat now has an hourCycle option. * New behaviour + There are a lot of minor behaviour changes as SpiderMonkey's JS implementation conforms ever closer to ECMAScript standards. For complete information, read the Firefox developer release notes: https://developer.mozilla.org/en-US/Firefox/Releases/53#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/54#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/55#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/56#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/57#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/58#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/59#JavaScript https://developer.mozilla.org/en-US/Firefox/Releases/60#JavaScript * Backwards-incompatible changes + Conditional catch clauses have been removed, as they were a Mozilla extension which will not be standardized. This requires some attention in GJS programs, as previously we condoned code like `catch (e if e.matches(Gio.IOError, Gio.IOError.EXISTS))` with a comment in overrides/GLib.js, so it's likely this is used in several places. + The nonstandard `for each (... in ...)` loop was removed. + The nonstandard legacy lambda syntax (`function(x) x*x`) was removed. + The nonstandard Mozilla iteration protocol was removed, as well as nonstandard Mozilla generators, including the Iterator and StopIteration objects, and the Function.prototype.isGenerator() method. + Array comprehensions and generator comprehensions have been removed. + Several nonstandard methods were removed: ArrayBuffer.slice() (but not the standard version, ArrayBuffer.prototype.slice()), Date.prototype.toLocaleFormat(), Function.prototype.isGenerator(), Object.prototype.watch(), and Object.prototype.unwatch(). - Many of the above backwards-incompatible changes can be caught by scanning your source code using https://gitlab.gnome.org/ptomato/moz60tool, or https://extensions.gnome.org/extension/1455/spidermonkey-60-migration-validator/ - Deprecation: the custom ByteArray is now discouraged. Instead of ByteArray, use Javascript's native Uint8Array. The ByteArray module still contains functions for converting between byte arrays, strings, and GLib.Bytes instances. The old ByteArray will continue to work as before, except that Uint8Array will now be returned from introspected functions that previously returned a ByteArray. To keep your old code working, change this: let byteArray = functionThatReturnsByteArray(); to this: let byteArray = new ByteArray.ByteArray(functionThatReturnsByteArray()); To port to the new code: * ByteArray.ByteArray -> Uint8Array * ByteArray.fromArray() -> Uint8Array.from() * ByteArray.ByteArray.prototype.toString() -> ByteArray.toString() * ByteArray.ByteArray.prototype.toGBytes() -> ByteArray.toGBytes() * ByteArray.fromString(), ByteArray.fromGBytes() remain the same * Unlike ByteArray, Uint8Array's length is fixed. Assigning an element past the end of a ByteArray would lengthen the array. Now, it is ignored. Instead use Uint8Array.of(), for example, this code: let a = ByteArray.fromArray([97, 98, 99, 100]); a[4] = 101; should be replaced by this code: let a = Uint8Array.from([97, 98, 99, 100]); a = Uint8Array.of(...a, 101); The length of the byte array must be set at creation time. This code will not work anymore: let a = new ByteArray.ByteArray(); a[0] = 255; Instead, use "new Uint8Array(1)" to reserve the correct length. - Closed bugs and merge requests: * Run tests using real software [#178, !192, Claudio André] * Script tests are missing some errors [#179, !192, Claudio André] * Create a '--disable-readline' option and use it [!196, Claudio André] * CI: stop using Fedora for clang builds [!198, Claudio André] * Expose GObject static property symbols. [!197, Evan Welsh] * CI fixes [!200, Claudio André] * Docker images creation [!201, Claudio André] * Get Docker images built and stored in GJS registry [#185, !203, !208, Claudio André, Philip Chimento] * Clear the static analysis image a bit more [!205, Claudio André] * Rename the packaging job to flatpak [!210, Claudio André] * Create SpiderMonkey 60 docker images [!202, Claudio André] * Debugger [#110, !204, Philip Chimento] * Add convenience g_object_set() replacement [!213, Florian Müllner] * Add dependencies of the real tests (examples) [!215, Claudio André] * CWE-126 [#174, !218, Philip Chimento] * gjs no longer builds after recent autoconf-archive updates [#149, !217, Philip Chimento] * gjs-1.52.0 fails to compile against x86_64 musl systems [#132, !214, Philip Chimento] * Run the GTK real tests (recently added) [!212, Claudio André] * Fix thorough tests failures [!220, Philip Chimento] * Port to SpiderMonkey 60 [#161, !199, Philip Chimento] * Replace ByteArray with native ES6 TypedArray [#5, !199, Philip Chimento] * Overriding GInterface properties broke [#186, !216, Florian Müllner, Philip Chimento] * Avoid segfault when checking for GByteArray [!221, Florian Müllner] - Various build fixes [Philip Chimento]

Changelog: 7.0.4.2 Bugs fixed compared to 7.0.4 RC1 1. tdf#123621 FILEOPEN | DOCX, Rectangle with text moves in LO 2. tdf#134754 Crash on macOS 10.13 opening local HSQLDB-based odb file in Base on LibreOffice 7 rc1 3. tdf#135479 LO Complains about missing JDK when accessing any Java functionality, despite recognizing JDK on macOS under Preferences 4. tdf#136272 Corrupted calc file: invalid number format condition [<= 1.79769313486232E+308 ] 5. tdf#137745 LO Base Firebird: crash, when deleting tables and changed relationship isn't changed in database file 6. tdf#138130 Crash in: swlo.dll 7. tdf#138466 Crash when creating different scenarios ( steps in comment 4 ) 8. tdf#138549 CRASH: Undoing comment hovering (steps in comment 11) 9. tdf#138612 LibreOffice not splitting table cells automatically for docx files 7.0.4.1 Bugs fixed compared to 7.0.3 RC1 1. ofz#26619 detect if SwFrameFormat deleted during import 2. ofz#26676 null deref 3. ofz#26708 direct-leak 4. ofz#26753 avoid infinite regress 5. ofz#26943 detect if FormatOfJustInsertedApo was deleted [Caol??n McNamara] 6. ofz#27756 null deref 7. rhbz#1891326 GNOME software cannot find the correct language pack required by LibreOffice 8. rhbz#1893846 [abrt] libreoffice-core: (anonymous namespace)::signalHandlerFunction(): soffice.bin killed by SIGABRT 9. rhbz#1900428 LibreOffice 7.0.3.1 crashed on invalid row index used in StarBasic macro 10. tdf#35986 Parts of EMF file not visible/stretched to an enormous extent 11. tdf#91762 Inserting table has incorrect row heights 12. tdf#92315 Writer incorrectly renders EMF file representing molecule with text in it 13. tdf#98868 FILESAVE: crash if try save ODT file with track changes compared 14. tdf#103987 FILESAVE: DOCX Duplicated custom properties after roundtrip 15. tdf#104378 Chinese conversion problem 16. tdf#106613 UI: Sidebar navigator in Impress/Draw not updated immediately when page/slide is renamed 17. tdf#113163 FILEOPEN PPTX: EMF+ A color change to transparent on the image is missing on import (PPT OK) 18. tdf#114956 Calc - comment field does not increase dynamically during input 19. tdf#116214 Custom properties: value type is changed from Number to Text 20. tdf#116335 EMF is opened with large empty space around it 21. tdf#116622 Inserted EMF image is not cropped correctly 22. tdf#117643 Word search does not work in LibreOffice Writer if search term contains an apostrophe 23. tdf#121553 Editing: Firebird: Table editor erroneously prompts to change CLOB field to a BLOB field during alter table 24. tdf#121886 Firebird: Datatype Image(BLOB) is not working properly with Form or Report image controls. 25. tdf#126700 Untitled document remains open when have a default template 26. tdf#127047 Font Sizes Greater than 255 are Printed with Size 255 27. tdf#127086 PPT: FILESAVE: Crop image is gone after RT 28. tdf#127471 Copied calc diagram in gdi format looks ok under linux, but the fonts looks weird under windows. 29. tdf#127680 New Print dialog: impossible to only print even/odd pages from a range/selection 30. tdf#128135 UI GTK3: dialog Pivot Table Layout / properties is too high: section Source and Destination cannot be fully used 31. tdf#128213 FILESAVE PPTX roundtrip with z-rotated text produces additional shape rotation 32. tdf#128877 FILEOPEN DOCX: Image Location lost on Import 33. tdf#130314 Writer busy-locks in layouting CJK fonts (was: hangs while converting to pdf) - see comment #9 / #8 34. tdf#130596 FIREBIRD (internal): Parameter doesn't work with COALESCE and numeric fieldtypes 35. tdf#130629 Crash in Writer when inserting shape again after undoing a previous insertion 36. tdf#131510 Old Replacement in german language 37. tdf#131679 Crash cutting a chart 38. tdf#131970 LO Create hyperlink ?? Jump to the correct field by keyboard with TAB? 39. tdf#132137 Styles: Default Style is too generic 40. tdf#132536 Memory usage increases after every file-reload 41. tdf#133630 CRASH: Chart: Changing properties in different objects 42. tdf#133771 When saving an encrypted document, unchecking 'Save with password' has no effect, encryption is kept 43. tdf#133950 UI EDITING Drawing a shape, the cursor is not precise (GTK3) 44. tdf#134161 CPU at 100% after opening a particular spreadsheet 45. tdf#134298 Picture overlappes page with content, so it is not readible anymore 46. tdf#135082 Print selection doesn't print selection but whole page 47. tdf#135108 Err:540 when adding an external reference in a loaded document that so far had no linked externals 48. tdf#135202 LO 6.4.6.1 and 7.0.1 fail with error 1045 when accessing MySQL database using native connector 49. tdf#135893 Image pasted twice when copy/pasting a caption frame with image after DOCX export 50. tdf#136336 LO Writer does not display footnote text on mouse hover for GTK 51. tdf#136453 Duplication of content after undo (spurious) 52. tdf#136555 StartCenter is inconsistent with dark theme(s) 53. tdf#136611 Crash: Change Corner Style on sidebar with selecting Data Series. 54. tdf#136962 Navigator content view flash (gen backend) 55. tdf#137085 RTF table is shifted left 56. tdf#137159 Harmonize UI in Options-LibreOffice-View when works a Skia black list 57. tdf#137181 Basic macro: CRASH when running a macro in Impress 58. tdf#137215 Hang after switching windows with cell selector open in Validity dialog 59. tdf#137329 White borders in Slide Show mode (F5) in Impress with SKIA 60. tdf#137397 Faulty Height value in Position and Size content panel in Properties deck in the sidebar in Calc 61. tdf#137403 Keys list box fills in customization keyboard tab page when focus is in Function list box and a key is pressed (Gtk3 only) 62. tdf#137520 Colibre: Some icons with text (like B, I, U, etc) are too big that make them unbalance with the rest of the icons 63. tdf#137532 EDITING: Font formatting lost after undo/redo 64. tdf#137556 Crash if I try to open the Print dialog in GTK3 3.18 only 65. tdf#137575 UI: Custom sorting state is lost when reopening the LibreOffice file picker dialog 66. tdf#137593 FILEOPEN DOCX Table paragraph gets unexpected spacing before if shape is anchored to it 67. tdf#137617 Incorrect operation Sheet -> Named Ranges and Expressions -> Create; with ExcelA1 and ExcelR1C1 syntax 68. tdf#137643 Can't select font, no font dropdown list, if open MSO .doc in GTK3 only (gen and Skia OK) 69. tdf#137652 XDL import: missing empty combobox items 70. tdf#137660 Missing focus indicator for flat buttons (like in the start center) in KDE 71. tdf#137662 When combo box (and List box) from Base is located in a data sheet, it has to be clicked twice in order to be able to enter text 72. tdf#137698 FILEOPEN DOCX: rectangle position images positioned wrong on file open 73. tdf#137726 Message dialog during pivot table insertion not displayed, LO hangs 74. tdf#137754 Crash when applying styles in a table within Impress 75. tdf#137786 Crash swlo!SwNodeIndex::~SwNodeIndex+0x18 76. tdf#137801 LO base with Firebird: WARNING, when adding a field to a table with an old field type BLOB 77. tdf#137804 Qt5 printing (from Writer) crashes LibreOffice 78. tdf#137871 CRASH: applying different styles to different cells in table (GTK3) 79. tdf#137880 Installer picture has weird black lines 80. tdf#137897 FILESAVE: export xltx with encryption to ods doesn't accept "no password" as OK-able option 81. tdf#137898 Page count is not reset to 1 in the print preview dialog 82. tdf#137908 Exceptions for auto correct disappear lost after restart 83. tdf#137949 IMPORT OOXML: Table row height is wrong. 84. tdf#137980 EDITING Moving shape with arrow keys makes it grow 85. tdf#137982 CRASH: closing table preview. mail merge 86. tdf#137993 Crash after closing one window and pressing enter in the other window with search bar focused (GTK3) 87. tdf#138000 RFE: Add menu icon to Writer's Format > Text > Single Underline 88. tdf#138011 EDITING: row in table doesn't grow while editing 89. tdf#138022 LibreOffice exits/crashes when minimizing start center after closing a document (SKIA) 90. tdf#138039 sw: frame in table cell layouted incorrectly 91. tdf#138108 LO base with Firebird: crash during FORMS design, when entering Groups and exiting (gtk3 only?) 92. tdf#138113 Base: SQL Syntax Colouring Issue Problem Operators "/", "-" 93. tdf#138131 UI: List Box form: List entries option is enabled by default (gen) 94. tdf#138148 IMPORT OOXML: Graphic bullet size is different. 95. tdf#138156 Border widget does not allow to keep settings 96. tdf#138183 Failed to copy and paste in calc 97. tdf#138187 URL opened twice when clicking UNO hyperlink control 98. tdf#138210 RTF document with a text frame can't open in LibreOffice 99. tdf#138219 Libreoffice 7.0.x => Skia Vulkan - Intel HD Graphics 520 problems ( windows 7 SP1 ) 100. tdf#138240 ODBC: Crash when trying to connect to Edit ?? Database ?? Properties (gtk3) 101. tdf#138253 Crash swlo!SwNodeIndex::~SwNodeIndex+0x18 (gen) 102. tdf#138271 FORMS: Some values are not saved (gen) 103. tdf#138350 Wrong colors used in icon-themes/colibre/svx/res/frmsel*.png 104. tdf#138428 CRASH: Undoing paste after editing comment 105. tdf#138430 Bullets and Numbering toolbar dropdown list and dialog miss scroll bar

@thep

@thep thep released this Jan 29, 2021 Fix wrong key listing in byte trie (Issue #9, Thanks @legale for the report.) Fix cross-compiling issue caused by AC_FUNC_MALLOC (Issue #11, Thanks @vmchale for the report.) Fix isspace() arg problem on NetBSD. (Personal mail, Thanks Sean for the report; PR #8, Thanks @obache for an individual pull request.) Fix some documentations. Really use TRIE_CHAR_TERM in TrieChar string termination. Changing TRIE_CHAR_TERM definition now won't break the code. Fix Windows build issue by avoiding <unistd.h> include. (Partially addressing PR #15, Thanks @fanc999 for first raising this.) [New APIs] Add serialization of the trie into memory buffer. (PR #12, Thanks @KOLANICH for the contribution.)

Update HOMEPAGE, from author in PR 56041. 1.4.1 Fixed a memory overflow bug while reading files from the command line, using a patch from David Tardon, which was passed on by UsernameRandomlyGenerated. [#56] #sf-patch-3 1.4.0 Added Regression tests for basic functionality, based on old custom scripts. Regression tests confirming fixes for previously fixed issues: #14, #19. Changed Removed one check for . and .. when traversing a directory tree. #12 Regenerated config file parser. Updated the safe filter to translate new lines, carriage returns, and tabs into underscores. #9 #11 #17 Fixed The examples in detox.1 no longer say -c when they mean -f. #30 The command synopsis in detox.1 and inline-detox.1 no longer adds a dash before the sequence and configfile. #30 1.3.3 Fix version identifier in detox binary. 1.3.2 Fixed Table based UTF-8 translation no longer mangles characters. [#14] 1.3.1 Fixed Merged fix for Debian #861537, written by Vasily Kolobkov, passed on by Zenaan Harkness, Quentin Guittard, and Joao Eriberto Mota Filho. This addresses an issue with detox generating malformed characters during translation. #14 1.3.0 Migrated from configure.in and Makefile.in to the full autoconf suite. [#1] Remove detox_path.h, in favor of command line defines. [#1] Removed libpopt support. [#2] Fixed the way inline-detox is generated. [#6] Merged parse_option_*.[ch] and file*.[ch]. [#1, #2, #6] Added --inline as an option to detox, to enable inline mode on the main binary. [#6]

0.9 * Add BoolVal constructor to Val. This gives a smoother interface with JSON and YAML. [API change] * Remove overlapping instances by generalizing ToContext String String and FromContext String String to TemplateTarget [a] => ToContext [a] [a] and TemplateTarget [a] => FromContext [a] [a]. Remove the instance ToContext String (Doc String). Remove redundant constraints. (#9, favonia) [API change] 0.8.3 * Properly handle nested loops (#15). Previously "it" was always used for the variable in a loop, and in a nested loop there was no way to distinguish the value of the inner iteration from the value of the outer one. Now we assign the iterated value to both "it" and to the original variable name (e.g. "foo.bar"). This probably has a small negative performance impact. Note that this change also affects the output of the template parser: original variable names are now retained instead of being replaced by "it". * Remove duplicate IsString constraint (#14, Mario Lang). * Update haddocks from README (#10). * Minor code clean-ups (#7, favonia). * Add hsyaml >= 0.2 constraint (#6). 0.8.2 * Add filters: first, rest, last, allbutlast. * New constructors for Filter: FirstItem, LastItem, Rest, AllButLast [API change].

pangomm (used to be part of gtkmm) is the official C++ interface for the popular GUI library GTK+. Highlights include typesafe callbacks, widgets extensible via inheritance and a comprehensive set of widget classes that can be freely combined to quickly create complex user interfaces. This package follows the 2.48 API. Changes compared to pangomm: 2.48.1 (stable): * GlyphItem: Fix a memory leak in split() (Kjell Ahlstedt) * Layout: Speed up get_log_attrs() (Kjell Ahlstedt) Build: * Meson build: Use relative paths to untracked/ (Kjell Ahlstedt) Merge request gtkmm!61 (Mingli Yu) * pangommconfig.h.*: Don't dllimport on MinGW (Chun-wei Fan) Issue gtkmm#90 (Lukas K.) * Meson build: Make it possible to use pangomm as a subproject (Kjell Ahlstedt) * Meson build: No implicit_include_directories (Kjell Ahlstedt) 2.48.0 (stable): This is the first stable release in the pangomm-2.48 ABI series. It is parallel-installable with the pangomm-1.4 ABI. The tarball for 2.48.0 has been created with 'meson dist'. If you build with Autotools from the tarball, please read the relevant part of the README file. * FontFamily, FontMap: Implement the Gio::ListModel interface CairoFontMap: Add get_default() (Andreas Persson) Merge request !20 * Attribute: Add Overline and ShowFlags enums and some create*() methods Renderer: Add vfuncs (Kjell Ahlstedt) Issue #9 (misos1) * Font, FontFace, FontFamily, FontMetrics: Add new methods (Kjell Ahlstedt) * LayoutRun: Rename to GlyphItem (Kjell Ahlstedt) * LayoutIter: Fix get_run() and get_line() (Kjell Ahlstedt) * GlyphString, Item: Wrap pango_shape_with_flags() (Kjell Ahlstedt) Issue #9 (Tavmjong Bah) * Layout: Add set/get_line_spacing() (Kjell Ahlstedt) Issue #9 (misos1) Build: * Depend on giomm (not just glibmm) (Andreas Persson) Merge request !20 * Use __declspec(dllexport) when building with Visual Studio (Chun-wei Fan) Merge request !15, !16 * Meson build: Avoid some recompilations (Kjell Ahlstedt) * Meson build: Better error message if trying to build with maintainer-mode=false when true is necessary (Kjell Ahlstedt) Issue #6 (Rasmus Thomsen) * Meson build: Set default value of the 'warnings' option to 'min' (Kjell Ahlstedt) * Improve NMake support (Chun-wei Fan) * Improve Visual Studio support (Chun-wei Fan) Merge request !15, !19 * docs/reference/: Update for Doxygen >= 1.8.16 (Kjell Ahlstedt) * Meson build: Fix versioning on macOS (Kjell Ahlstedt) Pull request libsigcplusplus#65 (Tom Schoonjans) * Change the ABI to pangomm-2.48 (Kjell Ahlstedt)

Change log: 2.5.3 ===== - Fix invalid command expansion with Xfce 4.14 (Issue #39) - Translation updates: Basque, Portuguese (Brazil). 2.5.2 ===== - Do not reparent launched programs. (Issue #32) - Translation updates: Basque, Danish, Greek. 2.5.1 ===== - Fix not always using new action icons. (Issue #33) 2.5.0 ===== - Add option to show all applications by default. (Issue #4) - Rearrange sidebar buttons to match default category. (Issue #9) - Show panel button title as tooltip in icon-only mode. (Issue #12) - Always sort top-level categories. - Vertically center contents of header. - Use new Xfce action icons. - Use new desktop ids for default programs. - Rewrite to hide menu on focus out. - Refactor code to use new Xfce functions. - Refactor building translations. - Translation updates: Bulgarian, Chinese (China), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, Esperanto, French, Galician, German, Italian, Korean, Lithuanian, Malay, Polish, Portuguese, Portuguese (Brazil), Slovak, Spanish, Swedish, Turkish.

Upstream changes: version 2.21: Fri 28 May 12:01:00 CEST 2021 Changes: - application/octet-stream is better for .dat [issue #11, Даша Федорова] - add video/webm which Google forgot to register [issue #12, Brent Laabs] - add image/webp which Google registered too late [issue #12, Brent Laabs] version 2.20: Thu 22 Apr 12:48:35 CEST 2021 Fixes: - problems with PAUSE cause the previous release to show-up in the wrong location. Let's hope this release solves it. Changes: - heif/heic/heifs/heics/hif fix [issue #9, Даша Федорова] - no 'and' and 'or' extensions [issue #9, Даша Федорова] - application/octet-stream is better for .bin [issue #10, Даша Федорова] version 2.19: Fri 16 Apr 11:47:10 CEST 2021 Improvements: - update with the newest data from IANA and Apache httpd Changes: - mp4 preference is video/mp4 [issue #5, Даша Федорова] - yt preference is video/vnd.youtube.yt [issue #6, Даша Федорова] - 3gp and 3gpp preference is video/3gpp [issue #7, Даша Федорова] version 2.18: Wed 9 Dec 10:29:46 CET 2020 Improvements: - update with newest data Changes: - Mojo 6.0 changed types() into mapping() [Dmitry Latin] - Mojo 7.94 adds experimental file_type() - Mojo 7.94 adds experimental content_type()

Upstream changes: 1.023 2021-02-03T22:37:57Z * Explain why ARGV is a problem (Github #9) * Freshen distro, remove Travis CI, add Github Actions

There are many changes in spotify-player v0.3.0 compared to version v0.2.0. The most notable change is adding Spotify Search API integration (#8). Brief description of major changes: -allow client to handle multiple requests at once by creating a new handling thread for each request (#9) -integrate Spotify Search APIs (#8) -add scroll shortcuts for command help popup (#11) -refactor terminal event handling codes (#12) -improve application and code documentations -and other small bug fixes, refactors, etc

Added: -nix installation (#9) Fixes: -garbled ascii on specific terminal geometries (#10)

Change log: 1.2.5 (2021-10-09) ===== - Lower peak memory consumption in case of a long CPU load history - Fix OpenBSD codepath (issue #28) - Initially hide run-in-terminal checkbox if the command field is empty (#23) - Translation Updates: Albanian, Arabic, Armenian (Armenia), Basque, Belarusian, Bulgarian, Catalan, Chinese (China), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, Eastern Armenian, English (Australia), English (United Kingdom), Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian, Japanese, Kazakh, Korean, Lithuanian, Malay, Norwegian Bokmål, Occitan (post 1500), Polish, Portuguese, Portuguese (Brazil), Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish, Ukrainian, Uyghur 1.2.4 (2021-10-01) ===== - Update README - New icons - Lower the number of false positives in sub-optimal SMT scheduling - Account for irregular core IDs in CPU topology (issue #25) - Increase type-safety of the return types of callback functions - Fix CPU topology initialization memory leak - Replace author nicknames with real names - Update and sort the list of authors - Use C++ λ-functions for widget signal handlers - Slightly improved CPU count detection in case some CPUs are offline - Bump requirements to version 4.14 - Enable close button translations (issue #24) - Fix compiler warnings on FreeBSD and SUN - Bump properties dialog to Xfce 4.14 API - Avoid FreeBSD "string.h" include file issue - Translation Updates: Albanian, Arabic, Armenian (Armenia), Basque, Belarusian, Bulgarian, Catalan, Chinese (China), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, Eastern Armenian, English (Australia), English (United Kingdom), Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian, Japanese, Kazakh, Korean, Lithuanian, Malay, Norwegian Bokmål, Occitan (post 1500), Polish, Portuguese, Portuguese (Brazil), Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish, Ukrainian, Uyghur 1.2.3 (2021-02-23) ===== - Add support for per-core history graphs - Enable user-defined spacing between per-core history graphs - Use an exponential function when painting the grid in non-linear mode - Improve performance of current CPU usage bars - Improve LED rendering performance - Improve grid rendering performance - Enumerate CPU cores from 0 (instead of 1) to match Linux command-line tools - Ensure that the bars and the history cannot be disabled at the same time - Slightly better handling of colors - Translation Updates: French, Slovenian 1.2.2 (2021-02-14) ===== - Record CPU load data even if the chart is currently disabled - Validate size against minimum and maximum allowed values - Change semantics of the non-linear time-scale mode - Fix corner cases when rendering the grid and LED modes - Show SMT stats tooltip only when needed - Translation Updates: Catalan, Greek 1.2.1 (2021-01-30) ===== - Repaint CPU load history after the user changes the update interval - Properly initialize current usage bars - Scale CPU load history chart according to the current update interval - Store history in a circular buffer - Add timestamps to CPU load history - Update copyright year - Update configuration files - Translation Updates: Albanian, Arabic, Armenian (Armenia), Basque, Belarusian, Bulgarian, Catalan, Chinese (China), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, Eastern Armenian, English (Australia), English (United Kingdom), Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian, Japanese, Kazakh, Korean, Lithuanian, Malay, Norwegian Bokmål, Occitan (post 1500), Polish, Portuguese, Portuguese (Brazil), Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish, Ukrainian, Uyghur 1.2.0 (2020-12-28) ===== - Highlighting of suboptimal thread placement on SMT CPUs - Separate the associated command from the rest of config options - Better resilience to inconsistent OS CPU utilization data - Display 'Show bars' in the same tab as 'Bars color' - Clamp CPU usage values to zero if they are below a threshold - Cleanup NEWS file - Use larger unscaled icon in about dialog - Add small explanation about default commands - Dynamic default command lookup - Fix RGBA string memory leak - Fix an invalid memory reference - Link sensitivity of labels to sensitivity of color buttons - Allow setting colors with alpha - Revalidate the event box after showing widgets - Use floating-point instead of fixed-point CPU load values - Paint CPU usage if it is 1 pixel tall - Lower CPU usage when rendering bars - Update URLs - Improve performance of CPU data parsing - Read CPU data correctly if some CPUs are offline (!7) - Paint CPU bars in left-to-right order - Separate the bars from the history frame - Fix old-style function warnings - Fix clang and gcc warnings - Also offer a 3 second update interval (#9) - Update URLs from goodies.x.o to docs.x.o (Bug #16157) - Allow compilation with panel 4.15 - Fix typo breaking build on NetBSD (Bug #15794) - Disable frame and make background transparent by default - Translation Updates: Albanian, Arabic, Armenian (Armenia), Basque, Belarusian, Bulgarian, Catalan, Chinese (China), Chinese (Taiwan), Croatian, Czech, Danish, Dutch, Eastern Armenian, English (Australia), English (United Kingdom), Estonian, Finnish, French, Galician, German, Greek, Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian, Japanese, Kazakh, Korean, Latvian, Lithuanian, Malay, Norwegian Bokmål, Occitan (post 1500), Panjabi (Punjabi), Polish, Portuguese, Portuguese (Brazil), Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swedish, Thai, Turkish, Ukrainian, Urdu, Urdu (Pakistan), Uyghur, Vietnamese

@ikazuhiro

Commits on Nov 6, 2020 1. Merge pull request #11 from tats/bug/fontset Fix fontset-pixel-size failure @ikazuhiro ikazuhiro committed Nov 6, 2020 4e3269b 2. Fix fontset-pixel-size failure * poem-e20.el (fontset-pixel-size): Don't check height, which no longer exists since Emacs 23. @tats tats committed Nov 6, 2020 ede3a69 Commits on Nov 5, 2020 1. Revive poe.el's dependency on pym.el * poe.el: Require pym.el. pym.el is a part of poe.el. Cf. #10 @ikazuhiro ikazuhiro committed Nov 5, 2020 b87ded4 Commits on Oct 31, 2020 1. Remove conditional definition of functions and variable. Now all supported platforms have the same condition. * emu.el (insert-binary-file-contents-literally): Remove definition by defun-maybe. The function is defined twice in the same file and this part is second definition and never used. * pces-e20.el: Don't require pym.el. (find-coding-system): Define always. * poe.el: Don't require pym.el. (remassoc, remassq, remrassoc, remrassq) (buffer-file-typesave-selected-frame, find-face) (character-to-event, event-to-character, next-command-event) (cancel-undo-boundary): Define always. * poem.el: Don't require pym.el. (char-int, int-char, char-or-char-int-p, char-octet): Define always. @ikazuhiro ikazuhiro committed Oct 31, 2020 081c3a6 2. Remove codes for old platforms. * pccl-20.el (ccl-accept-symbol-as-program): Remove check for ccl-vector-execute-on-string. * poe.el: Remove check for open-network-stream. * poem.el (char-or-char-int-p): Remove check for char-valid-p. @ikazuhiro ikazuhiro committed Oct 31, 2020 c8c36f4 3. Update package description file for MELPA. * apel-pkg.el: Define supported Emacs version. @ikazuhiro ikazuhiro committed Oct 31, 2020 f19cdd7 4. * product.el: Remove unneeded dependency on pym.el. @ikazuhiro ikazuhiro committed Oct 31, 2020 5e024ba Commits on Oct 30, 2020 1. Merge pull request #9 from tats/bug/mcs-defun Don't use defun-maybe for mime-charset-list @ikazuhiro ikazuhiro committed Oct 30, 2020 c332d4f 2. Don't use defun-maybe for mime-charset-list ? * mcs-e20.el (mime-charset-list): Use `defun' instead of `defun-maybe'. @tats tats committed Oct 30, 2020 cb024eb Commits on Oct 24, 2020 1. Merge branch 'conao3-remove-cvs' into apel-wl @ikazuhiro ikazuhiro committed Oct 24, 2020 e0881ff 2. remove cvs related files/contents * README.en: * README.ja: Remove description of cvs on Windows. * Makefile (tar): Remove target. * .cvsignore: Removed. @conao3 @ikazuhiro conao3 authored and ikazuhiro committed Oct 24, 2020 6773cf1 Commits on Aug 31, 2020 1. Obsolete ChangeLog file ? Since this commit, ChangeLog entries are written in commit messages instead of ChangLog file. * ChangeLog.1: Renamed from ChangeLog. * README: New file. @ikazuhiro ikazuhiro committed Aug 31, 2020 28bca5f Commits on Aug 23, 2020 1. * apel-ver.el (apel-ver): Change product name to 'APEL-LB'. @ikazuhiro ikazuhiro committed Aug 23, 2020 414dc33 Commits on Aug 22, 2020 1. Change non-ASCII text files's coding-system to UTF-8 * ChangeLog: * README.ja: Encode in UTF-8 @ikazuhiro ikazuhiro committed Aug 22, 2020 1df9f5f Commits on Jun 25, 2020 1. * inv-23.el (invisible-region): Minor refactoring. @ikazuhiro ikazuhiro committed Jun 25, 2020 208c416 2. * mcs-20.el (detect-mime-charset-string) (detect-mime-charset-region) : Improve performance. @ikazuhiro ikazuhiro committed Jun 25, 2020 89f4260 3. * mcs-20.el (mime-charset-to-coding-system): Don't use find-coding-system. * mcs-e20.el (charsets-mime-charset-alist): Ditto. @ikazuhiro ikazuhiro committed Jun 25, 2020 2e50b28 4. * APEL-MK (EMU_PREFIX): Assume Emacs 24 or later. @ikazuhiro ikazuhiro committed Jun 25, 2020 e0b6eae 5. * alist.el: Use lexical binding. @ikazuhiro ikazuhiro committed Jun 25, 2020 3eb069c 6. * mule-caesar.el (mule-caesar-region): Minor refactoring. @ikazuhiro ikazuhiro committed Jun 25, 2020 9ec773b 7. Strip use of function wrapping lambda. @ikazuhiro ikazuhiro committed Jun 25, 2020 26efc58 8. Remove unneeded dependencies. @ikazuhiro ikazuhiro committed Jun 25, 2020 81a790c 9. Use lexical binding. * apel-ver.el: Likewise. * atype.el: Likewise. * broken.el: Likewise. * calist.el: Likewise. * emu.el: Likewise. * file-detect.el: Likewise. * filename.el: Likewise. * install.el: Likewise. * inv-23.el: Likewise. * invisible.el: Likewise. * mcharset.el: Likewise. * mcs-20.el: Likewise. * mcs-e20.el: Likewise. * mule-caesar.el: Likewise. * path-util.el: Likewise. * pccl-20.el: Likewise. * pccl.el: Likewise. * pces-20.el: Likewise. * pces-e20.el: Likewise. * pces.el: Likewise. * pcustom.el: Likewise. * poe.el: Likewise. * poem-e20.el: Likewise. * poem-e20_3.el: Likewise. * poem.el: Likewise. * product.el: Likewise. * richtext.el: Likewise. * static.el: Likewise. @ikazuhiro ikazuhiro committed Jun 25, 2020 1f899c0 10. Suppress byte-compiler's warnings. * alist.el (modify-alist): Use mapc instead of mapcar. * emu.el: Remove defalias for tm-7.106. (insert-binary-file-contents): Add obsolete date. * filename.el (filename-japanese-to-roman-string): Use with-current-bufer instead of save-excursion + set-buffer. * inv-23.el (end-of-invisible): Add obsolete date. * mcharset.el: Add workaround for circular dependency. (default-mime-charset-for-write): Always set defalt value to utf-8. * mcs-20.el: Add workaround for circular dependency. Always requrie wid-edit.el. * mcs-e20.el (require): Don't require static.el. Add workaround for circular dependency. * pccl-20.el (defun): Use define-coding-system instead of make-coding-system. * pces-20.el: Disable byte-compile-dynamic option. * poem-e20.el: Disable byte-compile-dynamic option. * poem-e20_3.el: Disable byte-compile-dynamic option. * poem.el: Disable byte-compile-dynamic option. @ikazuhiro ikazuhiro committed Jun 25, 2020 0555ff6 11. * apel-ver.el (apel-version): Use called-interactively-p instead of interactive-p. @ikazuhiro ikazuhiro committed Jun 25, 2020 9628b0c 12. * richtext.el (richtext-initial-annotation, richtext-decode): Use fill-column instead of enriched-text-width function, which is not defined on (at least) Emacs. @ikazuhiro ikazuhiro committed Jun 25, 2020 eee9ca8 13. * poem-e20_3.el (string-to-char-list, string-to-int-list): Define as alias for string-to-list. @ikazuhiro ikazuhiro committed Jun 25, 2020 dd8197a 14. Drop old platforms support, dependency on cl.el. Now supported Emacsen are version 24 and later. @ikazuhiro ikazuhiro committed Jun 25, 2020 9304434 Commits on Apr 7, 2019 1. * mcs-20.el: Require pces.el (for find-coding-system). @ikazuhiro ikazuhiro committed Apr 7, 2019 d146ddb

@craigfe

### v0.1.0 2021-03-30 Paris (France) - Annotate integer types with `[@@immediate64]` (@craigfe, #13) - Move unwrapped module `Int63` to `Optint.Int63` (@craigfe, #13) ### v0.0.5 2021-02-22 Paris (France) - Update the README.md (@craigfe, #9) - Add a representation of 63-bit integers (@craigfe, #9) - Allow to compile fuzzers on 32-bit architectures (@dinosaure, #9) - Add encode / decode functions for integers (@craigfe, #9) - Fix `optint` about sign and cast on all architectures (@dinosaure, #9) - **breaking changes**, rename and handle properly sign-bit: `{of,to}_int` become `{of,to}_unsigned_int` `{of,to}_int32` become `{of,to}_unsigned_int32` Previous functions handle sign-bit correctly

# diffviewer 0.1.1 * The diffviewer widget previously ignored some very minor pixel differences, but now it will show every difference (#9, #11).

Updated in wip by Paolo Vincenzo Olivo. Remove upstreamed patches. 2021-01-10 (0.6.3) Volker Gropp <bwmng(at)gropp.org> * remove outdated copyright and email * Merge pull request #25 from fweimer/patch-1 AC_QEF_C_NORETURN: Include <stdlib.h> for exit * Merge pull request #27 from ofalk/master Fix potential write to unallocated memory. * Merge pull request #28 from vgropp/#2-fix-csv-bits feat: #2 output bits in csv * Merge pull request #29 from vgropp/#2-fix-csv-bits fix(doc): #2 output bits in csv * Merge pull request #32 from vgropp/new-netstat-#5 feat: add support for newer (2016+) linux netstat #5 2019-01-01 14:50 (0.6.2) Volker Gropp <bwmng(at)gropp.org> * Merge pull request #22 from vgropp/issue-#13 to fix windows build * Merge pull request #20 from dreibh/master CSV file output: fix for timestamp inaccuracy and Y-2038 problem * Merge pull request #21 from vgropp/travisci add travisci * Merge pull request #17 from Himura2la/master Add the started time in "sum" mode * Merge pull request #18 from Himura2la/fix-dynamic Fix DYNAMIC and ANSIOUT in config * Merge pull request #10 from SoapGentoo/fixes Use `static inline` instead of `inline` * Merge pull request #9 from adventureloop/master Always fflush the pipe * Merge pull request #7 from samueloph/fsf_address_clean Update FSF address * Merge pull request #6 from samueloph/master Fix typos * fix nan and inf values on fast refresh (fixes debian bug #532331)

@semaperepelitsa

3.0.2 (2022-11-11) What's Changed * Simplify charset parsing by @semaperepelitsa in #28 3.0.1 (2022-10-08) What's Changed * Fix ReDos/performance when receiving crafted response headers by @ooooooo-q in #27 3.0.0 (2022-08-08) What's Changed * Add support for the new Faraday streaming API by @iMacTia in #26 Why a 3.0 release? What's the breaking change? Faraday 2.5 introduces a new streaming API and other changes that we want to take advantage on. However, releasing a new 2.x version of the gem would cause it to be pulled in projects where Faraday has not been updated to v2.5+ yet, causing errors. For this reason, we're instead releasing this as v3.0, which only the next (compatible) version of faraday will allow to use. 2.1.0 (2022-07-28) What's Changed * Handle verify_hostname ssl option by @kazarin in #23 2.0.3 (2022-05-17) What's Changed * Add Errno::EALREADY to list of Net::HTTP exceptions by @iMacTia in #21 2.0.2 (2022-04-10) What's Changed * Add Ruby 3.1 to CI by @petergoldstein in #15 * Anchor Encoding references to avoid faraday-encoding conflicts by @nbibler in #18 2.0.1 (2022-01-05) Fixes * Add back support for Faraday 1.0 2.0.0 (2022-01-04) What's Changed * Test on Ruby 3 by @tricknotes in #3 * Update gem to be compatible with Faraday 2.0 by @iMacTia in #9 * chore: Move development deps to Gemfile by @olleolleolle in #10 * refactor: CI: Inline scripts, cache gems by @olleolleolle in #11 * fix: gemspec metadata for changelog notes by @olleolleolle in #12 * Honor Content-Type charset by @xkwd in #13

@mattbrictson

2.0.0 (2022-01-04) What's Changed * Switch to Faraday 2.0, Ruby 2.6 min requirement and test against 3.1 * Prepare this adapter for Faraday 2.0 by @mattbrictson in #7 * CI: Drop Ruby 2.5, add Ruby 3.0 by @olleolleolle in #10 * chore: Move dev deps to Gemfile by @olleolleolle in #9 * fix: Depend on net-http-persistent 4.x in gemspec by @olleolleolle in #11 2.0.1 (2022-01-06) * Re-add support for Faraday v1 2.0.2 (2022-08-09) * Pin faraday-net_http version to '< 3' 2.1.0 (2022-08-11) * Remove dependency from faraday-net_http adapter. by @iMacTia in #15

@jrochkind

2.0.0 (2022-06-15) What's Changed * Retry block change by @jrochkind in #3 * Add support for the RateLimit-Reset header by @maxprokopiev in #9 * CI: Use new GitHub Action checkout@v3, and drop unused files by @olleolleolle in #10

@semaperepelitsa

3.0.2 (2022-11-11) What's Changed * Simplify charset parsing by @semaperepelitsa in #28 3.0.1 (2022-10-08) What's Changed * Fix ReDos/performance when receiving crafted response headers by @ooooooo-q in #27 3.0.0 (2022-08-08) What's Changed * Add support for the new Faraday streaming API by @iMacTia in #26 Why a 3.0 release? What's the breaking change? Faraday 2.5 introduces a new streaming API and other changes that we want to take advantage on. However, releasing a new 2.x version of the gem would cause it to be pulled in projects where Faraday has not been updated to v2.5+ yet, causing errors. For this reason, we're instead releasing this as v3.0, which only the next (compatible) version of faraday will allow to use. 2.1.0 (2022-07-28) What's Changed * Handle verify_hostname ssl option by @kazarin in #23 2.0.3 (2022-05-17) What's Changed * Add Errno::EALREADY to list of Net::HTTP exceptions by @iMacTia in #21 2.0.2 (2022-04-10) What's Changed * Add Ruby 3.1 to CI by @petergoldstein in #15 * Anchor Encoding references to avoid faraday-encoding conflicts by @nbibler in #18 2.0.1 (2022-01-05) Fixes * Add back support for Faraday 1.0 2.0.0 (2022-01-04) What's Changed * Test on Ruby 3 by @tricknotes in #3 * Update gem to be compatible with Faraday 2.0 by @iMacTia in #9 * chore: Move development deps to Gemfile by @olleolleolle in #10 * refactor: CI: Inline scripts, cache gems by @olleolleolle in #11 * fix: gemspec metadata for changelog notes by @olleolleolle in #12 * Honor Content-Type charset by @xkwd in #13

@mattbrictson

2.0.0 (2022-01-04) What's Changed * Switch to Faraday 2.0, Ruby 2.6 min requirement and test against 3.1 * Prepare this adapter for Faraday 2.0 by @mattbrictson in #7 * CI: Drop Ruby 2.5, add Ruby 3.0 by @olleolleolle in #10 * chore: Move dev deps to Gemfile by @olleolleolle in #9 * fix: Depend on net-http-persistent 4.x in gemspec by @olleolleolle in #11 2.0.1 (2022-01-06) * Re-add support for Faraday v1 2.0.2 (2022-08-09) * Pin faraday-net_http version to '< 3' 2.1.0 (2022-08-11) * Remove dependency from faraday-net_http adapter. by @iMacTia in #15

@jrochkind

2.0.0 (2022-06-15) What's Changed * Retry block change by @jrochkind in #3 * Add support for the RateLimit-Reset header by @maxprokopiev in #9 * CI: Use new GitHub Action checkout@v3, and drop unused files by @olleolleolle in #10

v0.1.2.6 - 2022-08-11 * Bump base upper bound to < 4.18 (#10) v0.1.2.5 - 2022-03-06 * Allow text-2.0 (#9)

0.4 * Expose unfoldD [API change]. * Remove realLengthNoShortcut, isEmojiModifier, and isEmojiJoiner [API change] (Stephen Morgan). * Add new exported functions realLengthNarrowContext, realLengthWideContext, realLengthNarrowContextNoShortcut, realLengthWideContextNoShortcut, isSkinToneModifier, isZWJ [API change] (Stephen Morgan). * Compute realLength strictly. * Make getOffset stricter. * Drop support for ghc <= 8.4, add test for ghc 9.2. * Don't collapse the CarriageReturn + Newline combination (#20). We want to ensure that a literal starting with a Newline doesn't lose the newline if it occurs after a CarriageReturn. This affects code blocks in pandoc that begin with newlines. * Improve performance of NoShortcut code (Stephen Morgan). * Simplify emoji processing (Stephen Morgan). * Add benchmarking for code with no shortcuts (Stephen Morgan). * Add unicodeWidth.inc to cabal file. * Fix offset, minOffset, updateColumn so they don't re-render. * Get unicode block widths directly from the Unicode specification, rather than writing it out ourselves (Stephen Morgan). * Resolve the width of ambiguous characters based on their context (Stephen Morgan). * Spacing marks should have nonzero width, even though they are combining characters (Stephen Morgan). * Add shortcuts for extended Latin, Arabic, Cyrillic, Greek, Devangari, Bengali, Korean, Telugu, and Tamil (Stephen Morgan). * Fix location of extra-source-files in cabal. * update.hs: require text package * Handle emoji variation modifiers specially, so the keypad emoji can be ignored (Stephen Morgan). This results in a 16% speedup of realLength on ascii text. * Add benchmarks for all scripts used by more than 50 million people, plus a couple more. (#9, Stephen Morgan).

0.1.10 (2023-01-31) * Land #9, Add support for Ruby 3.2

Fix build on illumos (SmartOS)

4f40eeb

On illumos it's required to cast the log10 parameter to double to use the correct function, otherwise it result function overload error. Based on the taskwarrior documentation the cmake option CMAKE_BUILD_TYPE=release is added.

jperkin self-assigned this Aug 21, 2017

jperkin closed this Aug 21, 2017

netbsd-srcmastr pushed a commit that referenced this pull request Aug 21, 2017

Fix build on SunOS. Patches submitted by Thomas Merkel in #9

d8c058b

netbsd-srcmastr pushed a commit that referenced this pull request Sep 27, 2017

p5-LWP-Protocol-PSGI: update to 0.10.

f15ff50

0.10 2017-05-29 12:30:35 PDT - Fix mirror() (haarg) #9

netbsd-srcmastr pushed a commit that referenced this pull request Oct 22, 2017

p5-LWP-Protocol-PSGI: update to 0.10.

06a5c52

0.10 2017-05-29 12:30:35 PDT - Fix mirror() (haarg) #9

netbsd-srcmastr pushed a commit that referenced this pull request Mar 8, 2018

p5-Text-Template: update to 1.51.

c32d22e

1.51 2018-03-04 - Add test for nested tags breakage that happened in v1.46 - Turn off strict+warnings in sections where template code is eval'ed [github #9]

netbsd-srcmastr pushed a commit that referenced this pull request Aug 21, 2018

p5-Filter: update to 1.59.

09fd701

1.59 2018-08-04 rurban ---- * Improve tests using FindBin for filter-util.pl [atoomic #9] * Added new m4 filter [werner lemberg #8] * Add int casts, assert on 2GB limitation.

netbsd-srcmastr pushed a commit that referenced this pull request Sep 2, 2018

p5-Modern-Perl: update to 1.20180901.

f4ea97b

1.20180901 2018-09-01 12:19:53-07:00 America/Los_Angeles - skip tests when PERL5OPT is set (David Precious, GH #9)

iamleot mentioned this pull request Sep 3, 2018

toxcore: update to 0.2.7. #28

Closed

netbsd-srcmastr pushed a commit that referenced this pull request Jan 25, 2019

Update to 1.30

0b4c559

Upstream changes: 1.30 2019.01.22 MANWAR - Merged pull request #9 (fix typo in pod) from @fschlich.

netbsd-srcmastr pushed a commit that referenced this pull request Apr 2, 2019

graphics/papirus-folders: Update to 1.3.1

2137af6

Changes: New colours: pink, purple, indigo, white Improved the message of usage Removed LOGNAME support #9

netbsd-srcmastr pushed a commit that referenced this pull request Oct 10, 2021

Update to 1.023

627b1a0

Upstream changes: 1.023 2021-02-03T22:37:57Z * Explain why ARGV is a problem (Github #9) * Freshen distro, remove Travis CI, add Github Actions

netbsd-srcmastr pushed a commit that referenced this pull request Oct 14, 2021

Update to 1.023

26dc858

Upstream changes: 1.023 2021-02-03T22:37:57Z * Explain why ARGV is a problem (Github #9) * Freshen distro, remove Travis CI, add Github Actions

netbsd-srcmastr pushed a commit that referenced this pull request Nov 7, 2021

www/wiki-tui: update to 0.4.2

596e9be

Added: -nix installation (#9) Fixes: -garbled ascii on specific terminal geometries (#10)

netbsd-srcmastr pushed a commit that referenced this pull request May 2, 2022

(www/R-diffviewer) updated 0.1.0 to 0.1.1

01ac12a

# diffviewer 0.1.1 * The diffviewer widget previously ignored some very minor pixel differences, but now it will show every difference (#9, #11).

netbsd-srcmastr pushed a commit that referenced this pull request Jan 24, 2023

devel/hs-ghc-trace-events: Update to 0.1.2.6

d69c944

v0.1.2.6 - 2022-08-11 * Bump base upper bound to < 4.18 (#10) v0.1.2.5 - 2022-03-06 * Allow text-2.0 (#9)

netbsd-srcmastr pushed a commit that referenced this pull request Feb 15, 2023

security/ruby-rex-random_identifier: update to 0.1.10

4eee894

0.1.10 (2023-01-31) * Land #9, Add support for Ruby 3.2

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fix build on illumos (SmartOS)#9

Fix build on illumos (SmartOS)#9
drscream wants to merge 1 commit intoNetBSD:trunkfrom
drscream:fix/taskwarrior-illumos

drscream commented Aug 21, 2017

Uh oh!

jperkin commented Aug 21, 2017

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

drscream commented Aug 21, 2017

Uh oh!

jperkin commented Aug 21, 2017

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants