{"push_id":2442713462,"size":222,"distinct_size":1,"ref":"refs/heads/py-scipy-gfortran7","head":"17a236ea47a718bd71766c4e8a6b7b6022ef167c","before":"8aa8254253034a282ea36a40f311f102eb419013","commits":[{"sha":"b310e8e13228e63ed91320d3c97f674542b9c8d7","author":{"name":"minskim","email":"f55fc4339956dccf8681542fecf12066b53442df@pkgsrc.org"},"message":"math/R-RcppArmadillo: Update to 0.8.400.0.0\n\nChanges:\n    - faster handling of sparse matrices by repmat()\n    - faster loading of CSV files\n    - expanded kron() to handle sparse matrices\n    - expanded index_min() and index_max() to handle cubes\n    - expanded randi(), randu(), randn(), randg() to output single scalars\n    - added submatrix & subcube iterators\n    - added normcdf()\n    - added mvnrnd()\n    - added chi2rnd()\n    - added wishrnd() and iwishrnd()","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/b310e8e13228e63ed91320d3c97f674542b9c8d7"},{"sha":"e102924741222e74c5c6e2b40067e68843691a31","author":{"name":"minskim","email":"f55fc4339956dccf8681542fecf12066b53442df@pkgsrc.org"},"message":"doc: Updated math/R-RcppArmadillo to 0.8.400.0.0","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/e102924741222e74c5c6e2b40067e68843691a31"},{"sha":"805a58d279d4642202be9c461b96c6a953f4966c","author":{"name":"sevan","email":"b9d89c8738c541d4a6ed2e4bde19ba910ec9fd4c@pkgsrc.org"},"message":"Bump version for commits earlier this week.\n\npkg_install-20180325\n- pkg_add(1): Documentation fixes\n- pkg_delete: Add missing -A to usage()","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/805a58d279d4642202be9c461b96c6a953f4966c"},{"sha":"7890bbd8465b8e04237a9d2a28b1e3aee60eb76b","author":{"name":"adam","email":"50deb78d4601f4b197cde493023ef6c76db172af@pkgsrc.org"},"message":"Use parallel building for Python 3.5+ packages","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/7890bbd8465b8e04237a9d2a28b1e3aee60eb76b"},{"sha":"c6c3ebc9746223c7a86d68a1dfed8bc892b956c8","author":{"name":"rillig","email":"0aea76b15b7bca973a558e01e254628486d539c3@pkgsrc.org"},"message":"pkgtools/pkglint: remove duplicate files\n\nThe definitions from globaldata.go had been moved to pkgsrc.go. Having\nthese definitions twice led to compile errors.\n\nWhile here, the file package_test.go doesn't need to be patched anymore\nsince it gets its @VERSION@ from the constants defined in pkglint.go.","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/c6c3ebc9746223c7a86d68a1dfed8bc892b956c8"},{"sha":"cafd64904bf49a391f643bf7be74f57ce581fab6","author":{"name":"wiz","email":"65e062704a286a4b36a854cae3009a7bd1524f41@pkgsrc.org"},"message":"py-mercurial: update to 4.5.2.\n\nMercurial 4.5.1 / 4.5.2 (2018-03-06)\n\n(4.5.2 was released immediately after 4.5.1 to fix a release\noversight.)\n\nThis is a regularly-scheduled bugfix release.\n\n1.1. Security Fixes\n\nAll versions of Mercurial prior to 4.5.2 have vulnerabilities in\nthe HTTP server that allow permissions bypass to:\n\n    Perform writes on repositories that should be read-only\n    Perform reads on repositories that shouldn't allow read access\n\nThe nature of the vulnerabilities is:\n\n    Wire protocol commands that didn't explicitly declare their\n    permissions had no permissions checking done. The web.{allow-pull,\n    allow-push, deny_read, etc} config options governing access\n    control were never consulted when running these commands. This\n    allowed permissions bypass for impacted commands.\n\n    The batch wire protocol command did not list its permission\n    requirements nor did it enforce permissions on individual\n    sub-commands.\n\nThe implication of these vulnerabilities is that no permissions\nchecking was performed on commands and this could lead to accessing\ndata that web.* config options were supposed to prevent access to\nor modifying data (via wire protocol commands that can mutate data)\nwithout authorization. A Mercurial HTTP server in its default\nconfiguration is supposed to be read-only. However, a well-crafted\nbatch command could invoke commands that perform writes.\n\nThe batch write permissions bypass has been present since Mercurial\n1.9. The flaw of not checking permissions for wire protocol commands\nthat don't declare their needed permissions has been present since\nMercurial 1.0.\n\nAssuming you are running a server without any custom commands\nprovided by extensions, your exposure is unauthorized data access\n(if relying on the web.* config options to limit access) and\nunauthorized data mutation via the batch command.\n\nServer operators can detect unauthorized use of the batch command\nby looking for requests to URLs of the form repo?cmd=batch with\narguments containing pushkey or unbundle. This may produce false\npositives. A more comprehensive check would decode the argument\nstring and verify that pushkey or unbundle are command names (not\nvalues). The arguments specified via x-hgarg-<N> request headers\ncan span multiple headers. So advanced attackers could hide the\nvulnerability by splitting a pushkey or unbundle string across\nmultiple headers. So the only reliable way to detect if this\nvulnerability is being exploited is to decode these headers like\nMercurial does. The format for specifying arguments is documented\nat\nhttps://www.mercurial-scm.org/repo/hg/file/4.5/mercurial/help/internals/wireprotocol.txt#l26.\nPython code for decoding headers is at\nhttps://www.mercurial-scm.org/repo/hg/file/4.5/mercurial/hgweb/protocol.py#l70.\n\nMercurial 4.5.2 fixes these vulnerabilities by:\n\n    Performing permissions checking on all wire protocol commands,\n    not just commands that list their permissions.\n\n    Checking permissions on sub-commands issued to the batch command.\n\nWire protocol commands not declaring wire protocol permissions will\nbe assumed to be read-write commands and a server in its default\nconfiguration (which only allows read-only access), will refuse to\nexecute these commands.\n\nFor package maintainers needing to backport the fixes, the relevant\nchangesets from 4.5.2 are 2c647da851ed::2ecb0fc535b1. These can be\nviewed online at e.g.\nhttps://www.mercurial-scm.org/repo/hg/rev/2ecb0fc535b1. The author\nof these commits has backports to 4.4 and 4.3 on a personal fork\nat https://hg.mozilla.org/users/gszorc_mozilla.com/hg. The backports\nfor 4.4 are a4843835c835::7cf827e5f8af and for 4.3 are\ndb527ae12671::86f9a022ccb8. To obtain these changesets, run e.g.\nhg pull -r 7cf827e5f8af https://hg.mozilla.org/users/gszorc_mozilla.com/hg.\n\n1.2. Backwards Compatibility Changes\n\n    The \"batch\" wire protocol command now enforces permissions of\n    each invoked sub-command. Wire protocol commands must define\n    their operation type or the \"batch\" command will assume they\n    can write data and will prevent their execution on HTTP servers\n    unless the HTTP request method is POST, the server is configured\n    to allow pushes, and the (possibly authenticated) HTTP user is\n    authorized to perform a push.\n    Wire protocol commands not defining their operation type in\n    \"wireproto.PERMISSIONS\" are now assumed to be used for \"push\"\n    operations and access control to run those commands is now\n    enforced accordingly.\n\n1.3. Bug Fixes\n\n    fileset: don't abort when running copied() on a revision with a removed file\n    date: fix parsing months\n\n    setup: only allow Python 3 from a source checkout (issue5804)\n\n    annotate: do not poorly split lines at CR (issue5798)\n\n    subrepo: don't attempt to share remote sources (issue5793)\n    subrepo: activate clone pooling to enable sharing with remote URLs\n    changegroup: do not delta lfs revisions\n    revlog: do not use delta for lfs revisions\n    revlog: resolve lfs rawtext to vanilla rawtext before applying delta","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/cafd64904bf49a391f643bf7be74f57ce581fab6"},{"sha":"c3a506a251b8c41fcc932516597396cc827c10a1","author":{"name":"wiz","email":"65e062704a286a4b36a854cae3009a7bd1524f41@pkgsrc.org"},"message":"doc: Updated devel/py-mercurial to 4.5.2","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/c3a506a251b8c41fcc932516597396cc827c10a1"},{"sha":"30ac8219d851e72e586b4473baaed892d3e98012","author":{"name":"ryoon","email":"c901639edf949cc9770c489b0c1e86559f257680@pkgsrc.org"},"message":"Update to 0.26.3\n\n* Fix some security bugs\n\nChangelog:\n0.26.3\nThis is a bugfix release. It includes the following non-exclusive list of\nimprovements, which have been backported from the master branch:\n\n    Fix cloning of the libgit2 project with git clone --recursive by removing an\n    invalid submodule from our testing data.\n\n    Fix endianness of the port in p_getaddrinfo().\n\n    Fix handling of negative gitignore rules with wildcards.\n\n    Fix handling of case-insensitive negative gitignore rules.\n\n    Fix resolving references to a tag if the reference is stored with its fully\n    resolved OID in the packed-refs file.\n\n    Fix checkout not treating worktree files as modified when only their mode has\n    changed.\n\n    Fix rename detection with GIT_DIFF_FIND_RENAMES_FROM_REWRITES.\n\n    Enable Windows 7 and earlier to use TLS 1.2.\n\n0.26.2\nThis is a security release fixing memory handling issues when reading crafted\nrepository index files. The issues allow for possible denial of service due to\nallocation of large memory and out-of-bound reads.\n\nAs the index is never transferred via the network, exploitation requires an\nattacker to have access to the local repository.\n\n0.26.1\nThis is a security release that includes an update to the bundled zlib\nto update it to 1.2.11. Users who build the bundled zlib are vulnerable\nto security issues in the prior version.\n\nThis does not affect you if you rely on a system-installed version of zlib.\nAll users of v0.26.0 who use the bundled zlib should upgrade to this release.","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/30ac8219d851e72e586b4473baaed892d3e98012"},{"sha":"ebf3f6018d7212981d6e0dd702cf1409cfdd7384","author":{"name":"ryoon","email":"c901639edf949cc9770c489b0c1e86559f257680@pkgsrc.org"},"message":"Updated devel/libgit2 to 0.26.3","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/ebf3f6018d7212981d6e0dd702cf1409cfdd7384"},{"sha":"f7b66cf8f10ec30e6445e76f536ee3931c1c8ecd","author":{"name":"adam","email":"50deb78d4601f4b197cde493023ef6c76db172af@pkgsrc.org"},"message":"py-django-admin-rangefilter: updated to 0.3.2\n\n0.3.2:\n- Compatibility Django 2.0","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/f7b66cf8f10ec30e6445e76f536ee3931c1c8ecd"},{"sha":"0b08eeac294eea151e00f8cc533de78dd328cdda","author":{"name":"adam","email":"50deb78d4601f4b197cde493023ef6c76db172af@pkgsrc.org"},"message":"Updated www/py-django-admin-rangefilter","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/0b08eeac294eea151e00f8cc533de78dd328cdda"},{"sha":"4b898f1803a3e87ae56f62202f26ad2f9dbf1186","author":{"name":"wiz","email":"65e062704a286a4b36a854cae3009a7bd1524f41@pkgsrc.org"},"message":"p5-SQL-Statement: update to 1.412nb2.\n\nAdd missing dependency.","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/4b898f1803a3e87ae56f62202f26ad2f9dbf1186"},{"sha":"0f8b24d3b717c0e5f84af1152b9b9b3f248487be","author":{"name":"wiz","email":"65e062704a286a4b36a854cae3009a7bd1524f41@pkgsrc.org"},"message":"doc: Updated databases/p5-SQL-Statement to 1.412nb2","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/0f8b24d3b717c0e5f84af1152b9b9b3f248487be"},{"sha":"1f1491fd87e8a024086a341c7b79a0cf955d804b","author":{"name":"wiz","email":"65e062704a286a4b36a854cae3009a7bd1524f41@pkgsrc.org"},"message":"p5-DBD-CSV: update to 0.51.\n\n0.51\t- 2018-03-24, H.Merijn Brand\n    * Dot-in-inc (cpantesters)\n\n0.50\t- 2018-03-21, H.Merijn Brand\n    * Explain more about header folding\n    * It's 2017\n    * BOM handling\n    * Some documentation enhancements\n    * Ignore DBI_DSN if it is not CSV\n    * It's 2018\n    * Test with perl-5.26, DBI-1.641, SQL::Statement-1.412, and\n      Text::CSV_XS-1.35","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/1f1491fd87e8a024086a341c7b79a0cf955d804b"},{"sha":"adfb95d9d41a125a367ca7f11feeb2d4d438a0ed","author":{"name":"wiz","email":"65e062704a286a4b36a854cae3009a7bd1524f41@pkgsrc.org"},"message":"doc: Updated databases/p5-DBD-CSV to 0.51","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/adfb95d9d41a125a367ca7f11feeb2d4d438a0ed"},{"sha":"d60dc60bd7821c309ceab033cbf63dc55728fbce","author":{"name":"wiz","email":"65e062704a286a4b36a854cae3009a7bd1524f41@pkgsrc.org"},"message":"p5-DBIx-Class-Schema-Loader: update to 0.07049.\n\n0.07049 - 2018-03-21\n        - Fix tests when the path to perl has spaces in it (GH#19)\n        - Inline String::CamelCase::wordsplit() due to RT#123030\n        - Get enum values from DBD::Pg if it's new enough\n        - Remove dependency on DBIx::Class::IntrospectableM2M\n\n0.07048_01 - 2018-02-23\n        - Convert from Module::Install to ExtUtils::MakeMaker + Distar (GH#17)","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/d60dc60bd7821c309ceab033cbf63dc55728fbce"},{"sha":"acf915089412af56643c1c1d88c7714965753381","author":{"name":"wiz","email":"65e062704a286a4b36a854cae3009a7bd1524f41@pkgsrc.org"},"message":"doc: Updated databases/p5-DBIx-Class-Schema-Loader to 0.07049","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/acf915089412af56643c1c1d88c7714965753381"},{"sha":"a398737c69c06514bcc00a502311170da4129f0a","author":{"name":"wiz","email":"65e062704a286a4b36a854cae3009a7bd1524f41@pkgsrc.org"},"message":"p5-DBIx-Class-Schema-Loader: remove unneeded dependency.\n\nRide update.","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/a398737c69c06514bcc00a502311170da4129f0a"},{"sha":"b6e0b7fd1958081242e7c203869fa6c14083b9c0","author":{"name":"wiz","email":"65e062704a286a4b36a854cae3009a7bd1524f41@pkgsrc.org"},"message":"doc/TODO: add some\n\n+ ImageMagick-7.0.7.27, MesaLib-17.3.7, amarok-2.9.0, gnome-3.28,\n  gobject-introspection-1.56.0, gstreamer1-1.14.0, gtk-doc-1.28,\n  htop-2.1.1, i3-4.15, links-2.15, mate-1.20, pioneers-15.5,\n  poppler-0.63.0, py-gstreamer1-1.14.0, py-oauthlib-2.0.7,\n  py-pygit2-0.26.4, tor-browser-7.5.2, varnish-6.0, vim-8.0.1638,\n  vim-share-8.0.1638, vlc-3.0.1, wesnoth-1.13.11.","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/b6e0b7fd1958081242e7c203869fa6c14083b9c0"},{"sha":"d31c2a5b7c715bf889f2b78a0885976a0777928e","author":{"name":"wen","email":"f80bc2a7966b2a8ce430224a2813c3798a6325a9@pkgsrc.org"},"message":"Update to 0.009\n\nUpstream changes:\n0.009     2018-03-24 14:12:47-07:00 America/Los_Angeles\n\n        - Built using current Dist::Zilla, so various things\n          are better, e.g. includes a LICENSE.\n        - A couple of things that are only used in xt tests\n          used to be test requirements, now their develop\n          requirements.\n        - No longer includes explicit dependencies on a handful\n          of modules (e.g. indirect) that Moo's use of strictures\n          used to require.\n        - Now only includes a Makefile.PL.\n        - The build now includes a cpanfile in the repo.\n        - The minimum perl version is now consistent between the\n          Makefile.PL and the META.{yml,json} files.","distinct":false,"url":"https://api.github.com/repos/petabi/pkgsrc/commits/d31c2a5b7c715bf889f2b78a0885976a0777928e"}]}
{"actor":{"display_login":"msk"}}