PaulHowarth/Blog/2026-03

Paul's Blog Entries for March 2026

Sunday 1st March 2026

Fedora Project

  • Updated perl-Business-ISBN-Data to 20260227.001 in F-44 and Rawhide:

    • Data update for 2026-02-27

  • Updated perl-Compress-Raw-Lzma to 2.219 in F-44 and Rawhide:

    • Add PERL_UNUSED_DECL for trace to silence clang warning

    • Fix indentation in Lzma.xs that triggers a clang warning

    • Remove vestigial references to Pod::Markdown (GH#14)

    • Fix POD typo

    • Document that flush returns LZMA_STREAM_END on success, rather than LZMA_OK (GH#16)

    • Remove unused constants (GH#17)

    • Documentation improvements (GH#15)

  • Updated perl-Compress-Raw-Zlib to 2.221 in F-44 and Rawhide:

    • zlib 1.3.2: Update references to zlib 1.3.1 to use zlib 1.3.2

    • zlib 1.3.2: Add "Perl_crz" prefix to "z_errmsg" (GH#32)

    • Fix POD typo

    • Version number wrong in 2.220 Changes file (GH#38)

  • Updated perl-MetaCPAN-Client to 2.039000 in F-44 and Rawhide:

    • Add more types that can be scrolled (GH#134)

    • Fix 'all' fetching from CVE and example scripts (GH#135)

  • Updated perl-Net-CIDR to 0.27 in EPEL-8, EPEL-9, EPEL-10.1, EPEL-10.2 and EPEL-10 to fix mishandling of leading zeros in IP CIDR addresses (Bug #2443386, CVE-2021-4456)

Local Packages

  • Updated perl-Compress-Raw-Lzma to 2.219 as per the Fedora version

  • Updated perl-Compress-Raw-Zlib to 2.221 as per the Fedora version

  • Updated perl-MetaCPAN-Client to 2.039000 as per the Fedora version

  • Updated perl-TimeDate to 2.34:

    • Increase coverage in documentation

    • Refactor: Extract _build_lookups helper, remove hash-building duplication

    • Correct language data bugs and minor code review fixes
    • Fix up utf8 and add tests

    • Use Dist::Zilla for the distro

    • Rebase: Apply review feedback on GH#49 and GH#52

    • Fix: Uncomment Indian Standard timezone (IST)

    • Feature: Support boost C++ timestamp format (%Y-%b-%d %H:%M:%S.%f)

    • Correct typos across documentation and comments

    • Stop using 'use vars'

    • Remove limitation from Date::Parse

    • Create Arabic.pm

Monday 2nd March 2026

Fedora Project

  • Updated perl-Unicode-UTF8 to 0.68 in F-44 and Rawhide:

    • Fix SIMD feature gating for x86; avoid SSE2 intrinsics on non-SSE2 i686 builds

    • Use Dist::Zilla for the distro

RPM Fusion Project

  • Updated xv to 6.2.0 in F-44 and Rawhide:

    • Make EXIF orientation support generic rather than being tied to JPEG
    • Add orientation support to WebP images
    • Add sample WebP image with EXIF orientation flags set (not packaged)

Local Packages

  • Updated curl (rc) to new upstream release candidate 8.19.0~rc3

  • Updated perl-Unicode-UTF8 to 0.68 as per the Fedora version

  • Updated xv to 6.2.0 as per the RPM Fusion version

Tuesday 3rd March 2026

Fedora Project

  • Updated perl-Clone to 0.48 in F-44 and Rawhide:

    • Performance: Optimize hot paths in Clone.xs (GH#74)

    • Fix: Replace subtest with SKIP/bare blocks to avoid Test2 warnings (GH#81)

    • Fix: Don't require MGf_DUP flag for ext magic duplication (GH#80)

    • Fix: Lower MAX_DEPTH to 4000 to prevent SEGV on CPAN smokers (GH#79)

    • Fix t/10-deep_recursion.t for Windows (GH#72)

    • Fix C89 declaration-after-statement violations in Clone.xs (GH#71)

    • Fix deep recursion stack overflow on Windows (GH#72)

    • Fix cloning of Math::BigInt::GMP objects (GH#16)

    • Fix cloning of threads::shared data structures (GH#18)

    • Add thread safety test for Class::DBI-like patterns (GH#14)

    • Add comprehensive documentation with examples and limitations

    • Improve README.md structure and installation instructions GH#68)

    • Add DBI + DBD::SQLite as recommended test dependencies (GH#64)

    • Fix weakened reference cloning via deferred weakening (GH#15)

    • Fix memory leak when cloning non-existent hash values (GH#42)

    • Fix segfault when cloning DBI database handles (GH#27)

    • Rewrite t/09-circular.t to fix SEGV on CPAN Testers (GH#54)

    • Replace static recursion_depth with stack parameter (GH#56)

    • Fix C++ style comments in Clone.xs for C89 portability (GH#57)

    • Fix memory leak in Clone.xs (GH#47)

    • Allow a MAX_DEPTH recursion of 32,000 calls (GH#19 a.k.a. CPAN RT#97525)

    • Rename tests with more readable names (GH#51)

    • Remove TODO from CoW test (GH#52)

  • Branched and built perl-Class-Trigger (0.15) for EPEL-10

  • Branched and built perl-Time-Piece-MySQL (0.06) for EPEL-10

  • Branched and built perl-UNIVERSAL-moniker (0.08) for EPEL-10

Local Packages

  • Updated perl-Clone to 0.48 as per the Fedora version

Wednesday 4th March 2026

Fedora Project

  • Updated perl-Module-Build-Tiny to 0.053 in F-44 and Rawhide:

    • Always set dynamic_config=0 in MYMETA

    • Set PERL_DL_NONLAZY=1 during testing

Local Packages

  • Updated perl-Module-Build-Tiny to 0.053 as per the Fedora version

Friday 6th March 2026

Local Packages

  • Updated perl-DateTime-TimeZone to 2.67:

    • This release is based on version 2026a of the Olson database
    • Contemporary changes for Moldova

Sunday 8th March 2026

Fedora Project

  • Updated perl-Business-ISBN-Data to 20260306.001 in F-44 and Rawhide:

    • Data update for 2026-03-06

  • Updated perl-Compress-Raw-Lzma to 2.220 in F-44 and Rawhide:

    • Remove obsolete TODO comment

  • Updated perl-Devel-Cover to 1.52 in F-44 and Rawhide:

    • Increase minimum Perl version to 5.20 (GH#366)

    • Handle empty else branches optimised away by Perl (GH#362)

    • Fix set_module_file bug (GH#366)

    • Skip alarm-dependent tests on Windows (GH#366)

    • Refactor Collection.pm to Perl 5.42 built-in class (GH#366)

    • Extract shared code from Vim and Nvim reports (GH#366)

    • Consolidate CSS handling in Web module (GH#366)

    • Add test for gcov2perl (GH#366)

    • Add collection tests (GH#366)

    • Overhaul cpancover compression (GH#334)

    • Use multi-stage build for perl Docker images (GH#334)

    • Add Caddy configuration management (GH#334)

    • Add CPANCOVER_TEST_REGEX filter (GH#334)

    • Fix TTY handling in cpancover controller command (GH#334)

    • Update zsh completion to use modern compdef

    • Add pre-commit hooks and linting (GH#364)

    • Add Perl 5.42 to CI matrix
    • Test against 5.43.6 and 5.43.7

    • Enhance all_versions with timing and logging (GH#366)

    • Remove SVK annotation module (GH#364)

Local Packages

  • Updated perl-Compress-Raw-Lzma to 2.220 as per the Fedora version

Monday 9th March 2026

Fedora Project

  • Updated perl-Compress-Raw-Bzip2 to 2.218 in Rawhide:

    • Add SECURITY.md (GH#18)

    • Fix POD typo

  • Updated perl-Compress-Raw-Lzma to 2.221 in Rawhide:

    • Add SECURITY.md

  • Updated perl-Compress-Raw-Zlib to 2.222 in Rawhide:

    • Add SECURITY.md (GH#40)

    • Fix POD typos

  • Updated perl-IO-Compress to 2.219 in Rawhide:

  • Updated perl-MetaCPAN-Client to 2.040000 in F-44 and Rawhide:

    • Use a boolean in reverse_deps term (GH#136)

    • Allow JSON->true and JSON->false (GH#137)

Local Packages

  • Updated perl-Compress-Raw-Bzip2 to 2.218 as per the Fedora version

  • Updated perl-Compress-Raw-Lzma to 2.221 as per the Fedora version

  • Updated perl-Compress-Raw-Zlib to 2.222 as per the Fedora version

  • Updated perl-IO-Compress to 2.219 as per the Fedora version

  • Updated perl-Module-CoreList to 5.20260308:

    • Updated for v5.42.1

  • Updated perl-MetaCPAN-Client to 2.040000 as per the Fedora version

Wednesday 11th March 2026

Fedora Project

  • Branched and built perl-autovivification (0.18) in EPEL-10 and EPEL-10.2

Local Packages

  • Updated curl to 8.19.0:

    • cmake: Add 'CURL_BUILD_EVERYTHING' option

    • Initial support for MQTTS

    • tool: Support fractions for --limit-rate and --max-filesize

    • tool_cb_hdr: With -J, use the redirect name as a backup

    • vquic: Drop support for OpenSSL-QUIC
    • Windows: Add build option to use the native CA store
    • Windows: Bump minimum to Vista (from XP)
    • altsvc: Only accept 17 byte dates from files

    • asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails

    • async-ares: Blocking resolve timeout handling, better

    • badwords: Move into ./scripts, speed up

    • build: Add missing 'GENERATEDCERTS' files

    • build: Adjust minimum version for some clang picky warnings

    • build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro

    • build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)

    • build: Detect and include 'inttypes.h' again

    • build: Do not include wolfSSL header in 'curl_setup.h'

    • build: Drop duplicate C includes

    • build: Drop global suppression of '-Wformat-nonliteral', fix fallouts

    • build: Drop unused 'snprintf()' feature check on Windows

    • build: Fix '-Wunused-macros' warnings, and related tidy-ups

    • build: Fix building rare combinations
    • build: Fully omit verbose strings and code when disabled

    • build: Globally suppress DJGPP warnings in 'FD_SET()'

    • build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option

    • build: Move curl stat struct type to the curlx namespace

    • build: Opt-in MSVC to C99-style verbose logging logic

    • build: Require POSIX 'strdup()'

    • build: Tidy up and dedupe 'strdup' functions

    • cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks

    • cf-socket: Use SOCK_CLOEXEC in socket_open when available

    • checksrc-all.pl: Skip non-repository files

    • checksrc: Do not apply 'BANNEDFUNC' to struct member functions

    • checksrc: Warn for leading spaces before the preprocessor hash
    • clang-tidy: Add missing and delete redundant parentheses
    • clang-tidy: Add more missing parentheses in macro values

    • clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'

    • clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts

    • clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'

    • clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts

    • clang-tidy: Enable more checks
    • clang-tidy: Enable scanning headers
    • clang-tidy: Fix issues found with build-fuzzing
    • clang-tidy: Silence more minor issues found by v22

    • cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0

    • cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes

    • cmake: Add native clang-tidy support for tests, with concatenated sources

    • cmake: Always build curlu and curltool test libs in unity mode

    • cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'

    • cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function

    • cmake: Enable binutils ld workaround for all toolchains at build-time

    • cmake: Fix 'LOCATION' property access condition (debug)

    • cmake: Fix 'LOCATION' property read errors in target debug function

    • cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'

    • cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'

    • cmake: Fix logic for openssl/zlib binutils ld workaround

    • cmake: Fix passing system header directories to clang-tidy for tests
    • cmake: Fix system include directory position for clang-tidy in tests
    • cmake: Improve clang-tidy test command-line reproduction
    • cmake: Minor fixes to test targets after prev
    • cmake: Normalize uppercase hex winver (for display)

    • cmake: Omit 'curl.rc' from curltool lib

    • cmake: Reference OpenSSL and ZLIB imported targets only when enabled

    • cmake: Replace internal option with a new 'tt' (test tools) target

    • cmake: Silence potential unused var warnings in C++ test snippet
    • cmake: Silence silly Apple clang warnings in C89 mode, test in CI
    • cmake: Silence useless compiler warnings triggered by the FASTBuild generator

    • cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'

    • cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values

    • cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies

    • config-plan9: Set 'HAVE_STDINT_H' again

    • config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST

    • config2setopts: Fix for --disable-aws build configuration

    • configure: Drop always true 'if' check (Windows)

    • content_encoding: Return 'identity' if none other exists

    • curl: Add -I and -i to -h important

    • curl: Limit Windows-specific code to Windows builds, other tidy-ups

    • curl_easy_nextheader.md: A new transfer invalidates 'prev'

    • curl_get_line: Drop single-use macro

    • curl_multi_perform.md: Resolve inconsistency

    • curl_ntlm_core: Merge two '#if' blocks

    • curl_setup.h: Drop extra header guard for internal include

    • curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'

    • curl_setup.h: Simplify curl memory macro mappings

    • curl_setup_once: Allow CURL_DEBUGASSERT for customization

    • CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols

    • curlx: Drop unused 'curlx_saferealloc()'

    • digest: Escape double quotes and backslashes in realm and nonce

    • digest: Fix memory leak in auth_create_digest_http_message()

    • digest: Handle quotes in the path

    • docs/INSTALL: Update configure details

    • docs/libcurl: Unify WARNING use

    • docs: Add LibreELEC to DISTROS.md

    • docs: Add reproducible example for generating man page

    • docs: Avoid starting sentences with However,

    • docs: Avoid using the word 'magic'

    • docs: Clarify --ipv4 and --ipv6

    • docs: Document the need for a 64-bit type and stdint.h

    • docs: Drop basically

    • docs: Explicitly call out Slowloris as not a security flaw

    • docs: Fix grammar nitpicks
    • docs: Handle error in 'curl_global_init*' examples

    • docs: Replace instances of the vague qualifier 'quite'

    • docs: Reword explanation of --variable option

    • docs: Some nitpicks
    • docs: Use dot instead of comma at end of sentences

    • easy: Reset errorbuf on eyeballing success

    • easy: Reset pausing when resetting request

    • examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA

    • examples: Improve OpenSSL certificate examples
    • examples: Omit forward declarations, apply misc fixes
    • FAQ: Syntax improvements

    • fopen.h: Simplify curl memory macro mappings

    • ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'

    • ftp: Split ftp_state_use_port into sub-functions

    • GOVERNANCE.md: Post-Daniel BDFL

    • gss: Exclude verbose error logic from non-verbose builds
    • h2+h3: Align stream close handling

    • hostip.c: Fix leak of addrinfo

    • hostip6: Remove debug-only code

    • hostip: Fix unreachable code in rare build configuration

    • http/3: Add description for known server error codes

    • http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'

    • http: Only send bearer if auth is allowed (CVE-2026-3783)

    • http_aws_sigv4: Fix query normalization of %2b

    • imap: Add a check for Curl_meta_get()

    • imap: Check 'imap_sendf()' printf masks at compile-time

    • imap: Skip literals inside quoted strings
    • include: Avoid recursive macros
    • include: Mask computed auth/proto bitmasks to 32 bits

    • INSTALL-CMAKE.md: Document Apple framework options

    • INSTALL.md: Fix typo

    • INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets

    • KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows

    • ldap: Silence clang-tidy v22 warning
    • ldap: Silence potential unused variable warning (OS400)
    • lib: Delete unused local includes
    • lib: Disable websockets early if no http

    • lib: Make sigpipe handling more lazy

    • lib: Reorder protocol functions to avoid forward declarations (email) ( lib: Reorder protocol functions to avoid forward declarations (ftp)
    • lib: Reorder protocol functions to avoid forward declarations (misc cont.)
    • lib: Reorder protocol functions to avoid forward declarations (misc)
    • lib: Reorder protocol functions to avoid forward declarations (ssh)
    • lib: Separate scheme info from protocol implementation
    • lib: Skip compiling code with features disabled

    • lib: Use (u)int64_t instead of long long

    • libcurl docs: Reduce 'since ...' in descriptions

    • libcurl-security.md: Fix typos and add a point about URLs

    • libtests: Drop two redundant 'memset()'s

    • Makefile.am: Delete RPM targets referencing non-existent files

    • Makefile.am: Drop stray VC project files from dist

    • managen: Silence Perl warnings

    • mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef

    • mbedtls: No pinnedpubkey without MBEDTLS_SSL_KEEP_PEER_CERTIFICATE

    • mbedtls: Remove newline from failf() call

    • mbedtls: Split mbed_connect_step1 into sub functions

    • md4, md5: Drop redundant forward declarations

    • md4, md5: Replace custom types with 'uint32_t'

    • memdebug: Include 'backtrace.h' as system header

    • mime: Drop fallback for unused 'R_OK' macro

    • mimepost: Allocate main struct on-demand

    • mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos

    • mod_curltest: Silence unused argument compiler warning

    • mprintf: Drop old sprintf fallback

    • mprintf: Rename internal enum to avoid collision with AmigaOS symbol

    • mprintf: Silence clang-tidy 'readability-suspicious-call-argument'

    • mprintf: Use '_snprintf()' when compiled with VS2013 and older

    • mqtt: Better too-big-message-check
    • mqtt: Fix EOF handling

    • mqtt: Verify Remaining Length for CONNACK and PUBACK

    • msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio

    • msvc: VS2026: Unlock picky warning in cmake, test in CI
    • multi: Avoid a theoretical 32-bit wrap
    • multi: Fix unreachable code compiler warning

    • multi: Probe for IPv6 functionality in multi_init()

    • multi: Split multi_runsingle into sub-functions

    • multi: Update timer unconditionally in multi_remove_handle

    • ngtcp2: Stabilize recv

    • noproxy: Simplify, don't mix const and non-const in strchr()

    • openldap: Avoid forward declarations in ldaps code
    • openssl+ech: Workaround for insecure handshakes

    • openssl: Adapt to OpenSSL master adding const to more APIs

    • OpenSSL: Check reuse of sessions for verify status
    • openssl: Disable local keylog feature if built-in upstream
    • openssl: Fix compiler warning with OpenSSL master
    • openssl: Fix potential NULL dereference when loading certs (Windows)
    • openssl: Fix potential OOB read in debug/verbose logging
    • plan9: Drop special build and orphaned references

    • proxy-auth: Additional tests (CVE-2026-3784)

    • pytest: Remove 03_02

    • quiche: Use PRIu64 for outputting the stream id
    • rand: Drop impossible preprocessor branches (wincrypt)
    • rand: Drop scan-build silencer
    • ratelimit: Download fine-tune

    • request.h: Rename parameter 'buf' to 'req' in Curl_req_send

    • REUSE: Drop broken reference to 'MAIL-ETIQUETTE'

    • rtsp: Fix assertion failure on zero-length RTP payload

    • rtspd: Fix to check 'realloc()' result

    • runtests: Pass config filename to stunnel in native format (Windows)

    • schannel: Refactor: reduce variable scopes, fix comment, fix indent

    • send: Drop 'CURL_UNCONST()' from buffer argument on most platforms

    • setopt: Fix checking range for CURLOPT_MAXCONNECTS

    • setopt: Refuse blobs with zero length

    • setup-os400.h: Drop no longer used custom type 'u_int32_t'

    • sigpipe: unset SA_SIGINFO since it is using sa_handler

    • silent.md: Also mention it shuts off warning messages

    • smb: Free the path in the request struct properly (CVE-2026-3805)

    • smb: Include arpa/inet.h for NonStop

    • socket: Check result of SO_NOSIGPIPE

    • socketpair: Clear 'err' when retrying due to EINTR

    • socketpair: Set SO_NOSIGPIPE where possible

    • socks: Ensure DNS is freed in failure cases

    • src: Simplify declaring 'curl_ca_embed'

    • ssh: De-dupe state change function

    • Stop using the word 'just'

    • sws: Prevent "connection monitor" to say disconnect twice
    • synctime: Fix use of uninitialized buffer on non-Windows

    • system_win32: Replace manual init code with 'curlx_now_init()' call

    • tests/server/sockfilt: Avoid possible endless loop on Windows

    • tests/server: Drop unused 'curlx/version_win32.c'

    • tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable

    • tests/server: Tidy-up error messages (Windows)

    • tests: Avoid assignment in 'if' conditions in 'first.h'

    • tests: Convert base64 data to %b64[]

    • tftp: Correct the filename length check
    • timeout handling: Auto-detect effective timeout

    • tls: Add new SSLSUPP flags for several options

    • tls: Remove checks for DEFAULT

    • tool: Enable header separation for HTTPS proxies
    • tool: Improve config error messaging
    • tool: Improve error/warning messages when output filename sanitization fails

    • tool: Rename curl handle and result variable in '--libcurl'-generated code

    • tool: Return code variable consistency

    • tool_cb_hdr: Suppress header output when --out-null

    • tool_cb_prg: Drop duplicate preprocessor logic

    • tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)

    • tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*

    • tool_doswin: Avoid Windowsisms in socket code

    • tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support

    • tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode

    • tool_operate: Remove 'else' for VMS

    • tool_operate: Reset the URL --url-query between --next

    • typos: Silence false positives found in C code

    • unit3205: Suppress two clang-tidy false positives

    • URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP

    • url.c: Code/comment clean-up around conn creation

    • url.h: Fix '-Wdocumentation'

    • url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)

    • urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned

    • urldata.h: Remove two forward-declared structs not used

    • urldata: Bye-bye 'conn->hostname_resolve'

    • urldata: Change 'keep_post' into three distinct bitfields

    • urldata: Convert 'long' fields to fixed variable types

    • urldata: Switch to uint* types

    • usercertinmem: Use the correct cert BIO

    • verbose.md: Explain the { and } prefixes

    • vquic: Fix unused variable warning reported by clang-tidy

    • vquic: Handle SOCKEMSGSIZE correctly

    • vtls: De-dupe common on-session-reuse logic
    • vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests

    • VULN-DISCLOSURE-POLICY.md: Push reports to the web form

    • VULN-DISCLOSURE-POLICY.md: Use hackerone

    • winapi: Use FormatMessageA instead of FormatMessageW

    • windows: 'USE_WINSOCK' to guard winsock2 code (where missing)

    • windows: Determine 'RtlVerifyVersionInfo' address on global init

    • windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround

    • wolfssl: Fix build without USE_BIO_CHAIN

    • ws/tftp: include header file even when protocol disabled

    • x509asn1: Make encodeOID stop on too long input

Thursday 12th March 2026

Fedora Project

  • Updated perl-Business-ISBN-Data to 20260311.001 in Rawhide:

    • Data update for 2026-03-11

Local Packages

  • Updated perl-Data-Alias to 1.30:

Friday 13th March 2026

Fedora Project

  • Updated davfs2 to 1.7.3 in F-44 and Rawhide:

    • Add musl support

    • Fix macro-substitution in manual pages

    • Remove hard-coded neon versions from configure.ac

Local Packages

  • Updated davfs2 to 1.7.3 as per the Fedora version

Monday 16th March 2026

Fedora Project

  • Updated perl-MetaCPAN-API to 0.52 in Rawhide:

    • Fix test to work with current MetaCPAN API
    • Revised author tooling and tests
    • Fix error message when release search is given non-hashref
    • Include response content in request errors

Local Packages

  • Updated curl (8.19.0) to add libcurl-full provides to libcurl for backwards compatibility (needed for at least dnf5-plugin-automatic)

Tuesday 17th March 2026

Fedora Project

  • Updated perl-Business-ISBN-Data to 20260317.001 in F-44 and Rawhide:

    • Data update for 2026-03-17

Thursday 19th March 2026

Fedora Project

  • Updated perl-YAML-Syck to 1.37 in F-42, F-43, F-44, Rawhide, EPEL-9, EPEL-10.2 and EPEL-10:

  • Features:

    • Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#70)

  • Fixes:

    • Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)

    • Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)

    • Fix _is_glob to recognize IO::Handle subclasses (GH#23)

    • Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)

    • Fix dumping of tied hashes (GH#31)

    • Fix dumping strings starting with '...' as unquoted plain scalars
    • Fix dumping strings with tabs and carriage returns as plain scalars

    • Fix double-dash YAML parsing (CPAN RT#34073, GH#35)

    • Fix extra newline after empty arrays/hashes in YAML output (GH#36)

    • Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)

    • Fix quoting of \r and \t in YAML output instead of emitting raw bytes

    • Fix growing !!perl/regexp objects in round-trips

    • Fix quoted '=' being transformed into 'str' (GH#43)

    • Fix backslash-space escape in double-quoted YAML strings
    • Fix flow sequence comma separator not recognized without trailing space

    • Fix wide character warning in DumpFile

    • Fix inline arrays without space after comma (GH#25)

    • Fix: quote strings matching YAML implicit types to prevent round-trip failures

    • Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)

    • Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)

    • Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)

    • Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)

    • Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)

    • Fix: restore Perl 5.8 compatibility in test suite (GH#121)

    • Fix: correct copy-paste error in Makefile.PL clean target (GH#101)

    • Fix: correct $SortKeys POD default from false to true (GH#100)

    • Fix: correct POD documentation errors (GH#103)

  • Maintenance:

    • Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)

    • Silence macOS compiler warnings (GH#92)

    • Guard stdint.h include for portability (HP-UX 11.11)

    • Guard stdint.h include in syck_st.h for portability (GH#24)

    • Update ppport.h to 3.68

    • Add regression tests for magical variable dumping (GH#32)

    • CI: modernize GitHub Actions workflow (GH#123, GH#124)

    • CI: add disttest job to validate MANIFEST completeness

Local Packages

  • Updated perl-YAML-Syck to 1.37 as per the Fedora version

Friday 20th March 2026

Fedora Project

  • Updated perl-Authen-Radius to 0.34 in Rawhide:

    • Re-use original socket in broadcast mode

  • Updated perl-JSON-PP to 4.18 in Rawhide:

  • Updated perl-Unicode-UTF8 to 0.70 in Rawhide:

    • Update the c-utf8 library code: improved GCC code generation, including with -O2, resulting in higher throughput

    • Use utf8_check_ascii with a 16-byte ASCII fast path

Local Packages

  • Updated curl (8.19.0) to run tests in parallel via make test-nonflaky, with serial fallback for race-prone tests, significantly reducing the build time

  • Updated perl-JSON-PP to 4.18 as per the Fedora version

  • Updated perl-Regexp-Parser to 0.24:

  • Features:

    • Add support for Perl 5.10+ regex constructs (GH#8): \K (keep), \R (linebreak), \h/\H, \v/\V, named captures (?<name>...), named backrefs \k<name>, possessive quantifiers

    • Add \g{N} and \g{-N} backreference syntax from Perl 5.10+ (GH#16)

    • Add /a, /d, /l, /u charset modifier flags from Perl 5.14+ (GH#16)

    • Add /n no-capture flag from Perl 5.22 (GH#16)

    • Support Perl 5.14+ (?^:...) caret flag reset syntax (GH#4)

    • Add optional flags parameter to regex() method (GH#5)

  • Bug Fixes:

    • Treat trailing dash in character class as literal (GH#6)

    • Compare character values numerically in range validation (GH#3)

    • Support POSIX character classes with visual method (GH#7)

  • Maintenance:

    • Migrate test suite from deprecated Test.pm to Test::More (GH#15)

    • Add round-trip and error rejection test suites; tests 200 -> 409 (GH#19)

    • Modernize CI: consolidate into single testsuite.yml, update actions, use perldocker containers (GH#17)

    • Set minimum Perl version to 5.16

    • Add CLAUDE.md for AI-assisted development (GH#19)

    • Switch to GitHub Actions for CI

  • Updated perl-Unicode-UTF8 to 0.70 as per the Fedora version

Sunday 22nd March 2026

Fedora Project

  • Updated perl-Net-SSLeay to 1.96 in Rawhide:

    • Skip NPN tests when NPN is disabled in OpenSSL instead of assuming NPN is always enabled

    • Update GitHub Actions CI workflow; a number of test jobs were broken because some GitHub runners were discontinued, changes in QEMU setup, changes in Cygwin, etc.

    • Adjust test 32_x509_get_cert_info.t to match formatting changes in OpenSSL 3.4.0 and 3.4.1

    • OpenSSL 3.9.0 and later remove EVP_add_digest()

    • Increase timeout in 62_threads-ctx_new-deadlock.t to allow the test to pass on very slow platforms

    • Add missing documentation for STACK_OF() free functions sk_X509_free and sk_X509_INFO_free

    • Add $prefx/lib/64 to lib paths in Makefile.PL for Illumos

    • Support vendor-supplied OpenSSL 3.x on VMS and update %ENV modification in test 10_rand.t to work on VMS

    • Compiler -D switches Makefile.PL sets are no longer added to the MakeMaker CCFLAG attribute because of portability reasons; the switches are now passed either via WriteMakefile() or appending them to the 'perl Makefile.PL ...' DEFINE argument

    • Update GitHub Actions CI testing:

      • Perl on Ubuntu 24.04: Add Perl 5.38, 5.40 and 5.42, add OpenSSL 3.3, 3.4 and 3.5 minor releases, add LibreSSL 3.9, 4.0 and 4.1 release branches
      • Alpine Linux: Remove 3.15, 3.16 and 3.17; Add 3.19, 3.20, 3.21 and 3.22
      • Freebsd: Add 14.3 and replace 13.2 with 13.5
      • OpenBSD: Add 7.6 and 7.7. Remove 7.2 and 7.3
      • NetBSD: Add 10.1 and replace 9.3 with 9.4

    • Update test 62_threads-ctx_new-deadlock.t to work with LibreSSL 4.1.0

    • Support SSL_CTX_set1_sigalgs_list and SSL_CTX_set1_client_sigalgs_list

    • Support SSL_set1_sigalgs_list, SSL_set1_client_sigalgs_list, SSL_get_sigalgs and SSL_get_shared_sigalgs, and add the function SSL_CTX_set_cert_cb

    • Add test file 67_sigalgs.t for the sigalgs functions

  • Updated perl-YAML-Syck to 1.39 in F-42, F-43, F-44, Rawhide. EPEL-9, EPEL-10.2 and EPEL-10:

  • Bug Fixes:

    • Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety (GH#125, GH#130)

    • Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)

    • Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)

    • Fix: guard against NULL type from strtok in tag parsing (GH#135)

    • Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)

    • Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls (GH#138, GH#139)

  • Improvements:

    • Resolve TODO tests for empty/invalid YAML to match actual behaviour (GH#127, GH#129)

  • Maintenance:

    • Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)

    • Add comprehensive implicit type resolution test suite (GH#137)

    • Update MANIFEST to include all unit tests

    • Clean up test names to remove unnecessary numbering

Local Packages

  • Updated perl-JSON to 4.11:

    • Updated backportPP with JSON::PP 4.18

  • Updated perl-Module-CoreList to 5.20260320:

    • Updated for v5.43.9

  • Updated perl-Net-SSLeay to 1.96 as per the Fedora version

  • Updated perl-Regexp-Parser to 0.25:

  • Features:

    • Add recursive pattern support: (?R), (?0), (?1), (?+1), (?-1), (?&name) for named subpattern recursion (GH#22)

    • Add Python-compatible regex syntax: (?P<name>...) named capture, (?P=name) named backref, (?P>name) named recursion (GH#22)

    • Add \o{NNN} octal escape support from Perl 5.14+ (GH#20)

    • Add (*VERB) backtracking control verbs: FAIL, F, ACCEPT, SKIP, PRUNE, COMMIT, THEN, MARK with optional :arg (GH#20)

    • Add (?|...) branch reset groups from Perl 5.10+ (GH#20)

    • Add (*positive_lookahead:...) and other alphabetic assertion forms from Perl 5.28+ (GH#20)

    • Add (*script_run:...), (*sr:...), (*atomic_script_run:...), (*asr:...) script run assertions from Perl 5.28+ (GH#20)

    • Add /xx flag support via (?xx:...) from Perl 5.26+ (GH#20)

  • Maintenance:

    • Migrate t/08regex_flags.t and t/09backref_flags.t from deprecated Test.pm to Test::More - all test files now use Test::More (GH#21)

    • Update CLAUDE.md and modernize Parser.pm POD (GH#21)

    • Add CLAUDE.md and MANIFEST.SKIP to MANIFEST

    • Tests now 620 across 16 test files

  • Updated perl-TimeDate to 2.35:

    • Test: Document and pin CPAN RT#84075/GH#12 fix in regression suite

    • Fix: Add NST, NFT, and NDT (Newfoundland) timezone support
    • Fix: Add ICT and PHT timezone support
    • Fix: Restore rebase regressions and clarify first-century limitation

    • Fix: Normalize two-digit years in str2time to avoid Time::Local windowing mismatch

    • Fix: Use standard 2-letter German weekday abbreviations

    • Fix: Detect timegm/timelocal overflow for far-future dates (CPAN RT#88777)

    • Test: Add regression tests for CPAN RT#88777 (negative epoch for far-future dates)

    • Fix: Use stored epoch in format_Z/format_z to fix DST fall-back timezone name

    • Fix: Document MSK timezone history and add regression test (CPAN RT#98949)

    • Fix: strftime %s with timezone now returns correct epoch (CPAN RT#52387)

    • Test: Add POD validity regression test for CPAN RT#53557

    • Fix: Include day in year-inference for dates without an explicit year

    • Fix: Document MSK timezone history and add regression test (CPAN RT#81350)

    • CI: Install Pod::Checker via cpm in Linux CI

    • Docs: Add SECURITY.md with vulnerability reporting policy

    • Test: Add regression tests for CPAN RT#57800/GH#3 (numeric m/d/yyyy pre-1970 dates)

    • Fix: Normalize year offset for dates before 1901 in strptime (CPAN RT#106105)

    • Fix: Reject timezone-only inputs in strptime (CPAN RT#70650)

    • Test: Add failing tests for CPAN RT#70650 (ludicrous date parsing)

    • Fix: Prevent negative month from strptime for 6-digit inputs like '199001'

    • Test: Add Portuguese format and round-trip tests from GH#61

    • Fix: Treat number > 31 after month name as year, not day (GH#2)

    • Fix: Translate timezone abbreviations (%Z) in language-specific formatting

    • Fix: tz_name() offset in seconds was treated as minutes (CPAN RT#59298)

    • Docs: Fix ISO-8601 example date in Date::Parse POD (GH#6)

    • Feat: Add optional LANGUAGE parameter to time2str()

    • Feat: Allow str2time() to accept a custom reference epoch (CPAN RT#64789)

    • Docs: Clarify strptime() return format for ISO 8601 dates (GH#44)

    • Feat: Add Portuguese language module
    • Fix: Prefer CEST over MEST as canonical Central European Summer Time name

    • Fix: Add ICT and PHT timezone abbreviations to Time::Zone (CPAN RT#123247)

    • Fix: Standardize Greek.pm to use native Unicode instead of \x{} escapes

    • Test: Add regression test for CPAN RT#105031/GH#17 (1965-12-31 maps to 2065)

    • Fix: Declare Carp as runtime prerequisite in Makefile.PL

    • Fix: Infer current year for future months when no year given (CPAN RT#92611)

    • Test: Add regression tests for CPAN RT#53413 (4-digit year mangling)

    • Fix: Handle leap day in year-only date parsing test

    • Fix: Support IANA timezone names in tz2zone and tz_offset (CPAN RT#76968)

    • Fix: Preserve comma as ISO 8601 decimal separator in strptime

    • Fix: Add French day ordinal suffix in format_o

    • Fix: Make tz_name tests deterministic across DST transitions

  • Updated perl-YAML-Syck to 1.39 as per the Fedora version

Monday 23rd March 2026

Fedora Project

  • Branched and built perl-autovivification (0.18) for EPEL-10.1

  • Updated perl-Business-ISBN-Data to 20260321.001 in Rawhide:

    • Data update for 2026-03-21

  • Updated perl-YAML-Syck to 1.41 in Rawhide:

  • Bug Fixes:

    • Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of strtod() so that floats like -3.14 are not corrupted by double-precision rounding artifacts (GH#140, GH#141)

Local Packages

  • Updated perl-Net-Daemon to 0.51:

  • Bug fixes:

    • Fix Socket::INADDR_ANY constant for unix socket client auth (GH#1, GH#27)

    • Fix post_clone() hook - Clone() never called new(), so the $self->{'parent'} check in new() was dead code; added post_clone() method that Clone() calls after creating the new object (GH#2, GH#26)

    • Open logfile when filename string is provided via --logfile; OpenLog() previously returned the logfile value as-is when it was a defined string, causing Log() to fall through to STDERR (CPAN RT#76133, GH#3, GH#25)

    • Reap forked child processes to prevent zombie accumulation; SigChildHandler now uses a proper waitpid reaper instead of returning 'IGNORE', fixing zombie build-up on Windows/Strawberry Perl after ~64 connections (GH#5, GH#23)

    • Fix ReadConfigFile implementation traversing @INC (CPAN RT#123213, GH#8)

    • Detach threads in ChildFunc to prevent memory leaks; thread objects were never joined or detached, causing leftover thread mappings to accumulate (GH#12, GH#22)

    • Only load threads if forks hasn't already been loaded and threads exists (GH#16)

  • Improvements:

    • Add post_clone() hook for per-connection initialization; sub-classes can override to perform per-connection setup (GH#2, GH#26)

    • Add --listen option to Options() to allow overriding the default listen backlog of 10 (GH#4, GH#24)

  • Maintenance:

    • Modernize Makefile.PL metadata: add LICENSE, MIN_PERL_VERSION, TEST_REQUIRES, upgrade META_MERGE to meta-spec v2, update GitHub URLs (GH#28)

    • Modernize CI workflow: upgrade actions/checkout to v4, use perldocker/perl-tester images, dynamic Perl version matrix covering 5.8 through devel, add disttest job (GH#29)

    • Disable t/ithreadm.t for Windows (GH#19)

    • Improve skip messages and detection of ithreads/forks in tests

    • Convert t/base.t to Test::More

    • Apply consistent perltidy formatting

    • Add strict/warnings, replace 'use vars' with 'our'

    • Remove perl 4-ish subroutine calls

  • Updated perl-Regexp-Parser to 0.26:

  • Features:

    • Add \Q...\E (quotemeta) support for literal quoting in regular expressions (GH#23)

    • Add \b{type}/\B{type} extended boundary support including \b{gcb}, \b{wb}, \b{sb}, and \b{lb} from Perl 5.22+ (GH#24)

  • Updated perl-YAML-Syck to 1.41 as per the Fedora version

Wednesday 25th March 2026

Fedora Project

  • Updated perl-Authen-Radius to 0.35 in Rawhide:

    • Reinstate module metadata files (META.json and META.yml)

  • Updated perl-Business-ISBN-Data to 20260325.001 in Rawhide:

    • Data update for 2026-03-25

  • Updated perl-IO-Tty to 1.23 in Rawhide:

  • Bug Fixes:

    • Fix slave fd leak on IO::Pty destruction; the slave pty file descriptor was not closed when the IO::Pty object was destroyed, leaking file descriptors until process exit (GH#14, GH#39)

    • Fix set_raw() to modify cflag for proper raw mode on BSD/macOS; set_raw() was not clearing CSIZE|PARENB or setting CS8 in cflag, causing incomplete raw mode on macOS, OpenBSD, and NetBSD (GH#12, GH#40)

    • Modernize function detection to use proper system headers instead of fragile K&R-style forward declarations; the old approach conflicted with real prototypes on modern compilers (especially FreeBSD/Clang), causing all function checks to fail (GH#38, GH#41)

    • Fix function detection on Solaris by adding __EXTENSIONS__ to expose BSD extensions (like strlcpy) that are hidden when _XOPEN_SOURCE is defined (GH#47, GH#48)

    • Fix file descriptor leaks in open_slave() error paths; the master pty fd was not closed on several early-return error paths, causing fd leaks when falling through multiple pty allocation methods (GH#49)

    • Replace deprecated indirect object syntax (e.g. 'new IO::Pty') with direct method calls ('IO::Pty->new'); Perl 5.36+ disables indirect object calls, so this fixes forward compatibility (GH#52)

  • Improvements:

    • Add BSD CI testing for FreeBSD, OpenBSD, and NetBSD via cross-platform-actions; also bumps actions/checkout from v2 to v4 (GH#42)

    • Add unit tests for ttyname(), slave()/close_slave() lifecycle, set_winsize()/get_winsize() round-trips, pack_winsize/unpack_winsize, and constant importing (28 new tests) (GH#50)

    • Replace DynaLoader with XSLoader and bump minimum perl version to 5.8.8; XSLoader is simpler and has been in core since perl 5.6 (GH#51)

    • Add clone_winsize_from() test coverage (7 new tests) covering basic clone between slave ttys, non-tty master fast path, croak on non-tty source, and pixel dimension preservation (GH#53)

  • Maintenance:

    • Fix stale POD versions, add Perl 5.38/5.40 to CI, and update repository URLs from toddr/IO-Tty to cpan-authors/IO-Tty (GH#44)

    • Remove dead Perl 5.003 compatibility code, modernize XS (Nullch to NULL, perl_get_sv to get_sv, sprintf to snprintf) (GH#45)

    • Modernize CI with dynamic perl version discovery via perl-actions/perl-versions and add a disttest job (GH#46)

    • Regenerate README from POD to fix stale version

    • Modernize 'use vars' to 'our' declarations in Tty.pm and Pty.pm; add missing 'use warnings' to Pty.pm (GH#53)

    • Add AI_POLICY.md for transparency on AI-assisted contributions

    • Convert README to Markdown and update MANIFEST

  • Updated perl-IPC-Run to 20260322.0 in Rawhide:

  • Bug fixes:

    • Handle EAGAIN in _write() for non-blocking pipe writes (GH#126, GH#221)

    • Prevent fd leak in _do_kid_and_exit when TFD == KFD (GH#149, GH#218)

    • Suppress spurious "Filehandle STDIN reopened" warnings in child when $^W=1 with pty redirection (GH#131, GH#219)

    • Make binmode the default on Win32 to prevent newline mangling of binary data (GH#116, GH#192)

    • Avoid undef warning in _cleanup when fork fails (GH#82, GH#197)

    • Wrap coderef in eval in _do_kid_and_exit to prevent child process from escaping into parent code path on die() (GH#97, GH#193)

    • Propagate CODE ref exceptions back to parent via error pipe (GH#122, GH#224)

    • Close external input handles in parent after fork to prevent hangs when child exits early (GH#57, GH#226)

    • Preserve $cur_kid when a Timer is encountered in harness(), fixing "No command before 'init'" errors (GH#134, GH#187)

    • Restore compat for bare undef params in harness() (GH#124, GH#190)

    • Passing undef as stdin/stdout/stderr no longer dies (GH#139, GH#185)

    • Avoid "Modification of a read-only value" when passing undef stdin (GH#139, GH#185)

    • Reject empty/undef command name in _search_path (GH#162, GH#182)

    • Limit input buffer chunk size to prevent exponential memory growth when streaming data to slow consumers (GH#154, GH#183)

    • Silently ignore undef arguments passed as timeout to harness() (GH#128, GH#189)

    • Correct two minor documentation issues in Run.pm (GH#133, GH#188)

    • Skip win32_compile.t when getprotobyname('tcp') is unavailable (GH#137, GH#186)

    • Survive SIGPIPE when child exits before consuming all stdin (GH#35, GH#204)

    • Handle EPIPE when child exits before consuming stdin (GH#49, GH#202)

    • Handle tied STDERR without FILENO in _debug_fd (GH#92, GH#195)

    • Invalidate path cache on $PATH change, add clearcache() (GH#85, GH#196)

    • Support scalar ref for '>pipe' and '<pipe' operators (GH#50, GH#201)

    • Use $type in IO::new error message instead of $_ (GH#65, GH#199)

    • Fix <pipe documentation example order and equivalent pipe example (GH#66, GH#198)

    • Suppress spurious numeric warning in result() and results() (GH#169, GH#181)

    • Suppress numeric warnings from result() when SIGCHLD is IGNORE (GH#169, GH#211)

    • Handle scalar refs in Win32IO pipe operators (GH#213, GH#214)

    • Remove blanket TODO from win32_newlines.t, keep only for still-failing tests (GH#215, GH#216)

    • Prevent handle inheritance of caller-owned fds on Win32 (GH#141, GH#184)

    • Enable kill_kill test 1 on Win32 (CPAN RT#11215, GH#205)

    • Suppress filehandle warning during global destruction in tied_stderr.t (GH#237, GH#239)

    • Resolve File::Temp cleanup warning on Windows CI (GH#236, GH#238)

    • Suppress Socket::IPPROTO_TCP redefined warning in win32_compile.t (GH#230, GH#235)

    • Prevent tied_stderr.t from hanging on Win32 CI (GH#222, GH#225)

  • Improvements:

    • Add env option to set child process environment variables without modifying parent %ENV (GH#178, GH#179)

    • Add started() method to query harness run state (GH#171, GH#180)

    • Add finished() method to distinguish exit-0 from not-yet-exited (GH#93, GH#194)

    • Add pid(), pids(), is_running(), full_path(), full_paths() convenience methods (GH#44, GH#203)

    • Add <blocking_pipe operator for blocking writes to child stdin (GH#64, GH#200)

    • Add close_stdin() method to prevent unbounded memory growth when streaming to long-running children (GH#212)

  • Maintenance:

    • Consolidate CI into single testsuite.yml with dynamic Perl version matrix (GH#208, GH#209)

    • Add CLAUDE.md with project guidelines for AI-assisted development (GH#220)

    • Add 5-minute timeout to all CI workflow steps

    • Remove TODO from Win32 autoflush test and align with Unix branch (GH#228, GH#234)

    • Clean up resolved TODO tests in win32_newlines.t (GH#223, GH#227)

    • Skip t/eintr.t early on Win32 to avoid SIGUSR1 warning (GH#231, GH#233)

    • Suppress File::Temp version-string warnings in test suite (GH#229, GH#232)

  • I had to apply some fixes from upstream to get the test suite to pass with IO::Tty version 1.21 (GH#240, GH#241, GH#253, GH#254)

  • Branched and built rbldnsd (0.998b) for EPEL-10

Local Packages

  • Updated perl-IO-Tty to 1.23 as per the Fedora version

  • Updated perl-IPC-Run to 20260322.0 (with fixes) as per the Fedora version

Thursday 26th March 2026

Fedora Project

  • Updated perl-Clone to 0.49 in Rawhide:

    • Try to exclude macOS extended attributes from dist tarball

    • Fix: Suppress DBI STDERR noise in t/13-io-handle.t (GH#82)

    • Fix: Skip DBI fork tests on Windows

    • Fix: Remove spurious warn output in t/03-scalar.t

    • Add AI_POLICY.md documenting AI-assisted workflow

Local Packages

  • Updated perl-Clone to 0.49 as per the Fedora version

  • Updated perl-Regexp-Parserto 0.27:

  • Features:

    • Add (?(DEFINE)...) definition-only groups for defining named sub-patterns without matching (GH#27)

    • Add (?(<name>)...) and (?('name')...) named capture conditions with new 'define' and 'grouppn' object types (GH#27)

  • Maintenance:

    • Replace use base 'Exporter' with use parent 'Exporter'; base is discouraged since Perl 5.12 (GH#25)

    • Remove unused 'use NEXT' from Objects.pm; recommend 'next::method' from mro (core since 5.10) instead (GH#25)

    • Remove duplicate 'use strict; use warnings;' in Parser.pm (GH#25)

    • Fix META_MERGE URLs to point to cpan-authors/Regexp-Parser with HTTPS and fix dead wiki.github homepage URL (GH#25)

    • Expand t/11errors.t from 17 to 240 tests covering all 28 RPe_* error codes in Diagnostics.pm (GH#26)

    • Add AI_POLICY.md for transparency

  • Updated unrar to 7.21 beta 1

Friday 27th March 2026

Fedora Project

  • Updated perl-IO-Tty to 1.24 in Rawhide:

  • Bug Fixes:

    • Fix slave pty reopening on Solaris/illumos; after close_slave(), reopening with plain Perl open() skipped pushing STREAMS modules (ptem, ldterm, ttcompat), causing isatty() to return false - added _open_tty() XS function that opens the device and pushes STREAMS modules on platforms that support I_PUSH (GH#54, GH#55)

    • Fix undef warnings on Perl 5.8.8 by removing the undef operator on localized $SIG{__DIE__}, and fix XS ttyname() on older Perls by avoiding the InOutStream typemap, which can return NULL for filehandles created via new_from_fd (GH#56, GH#58)

    • Add __BSD_VISIBLE for FreeBSD in function probes; the _XOPEN_SOURCE definition hid BSD extensions like strlcpy, causing probe failures and subsequent compile errors from conflicting static/non-static declarations (GH#57, GH#59)

  • Maintenance:

    • Modernize Makefile.PL: replace BUILD_REQUIRES with TEST_REQUIRES (EUMM 6.64+), add CONFIGURE_REQUIRES, upgrade META_MERGE to meta-spec v2, modernize generated Constant.pm to use 'our' instead of 'use vars', and remove dead PPD postamble (GH#60)

  • Updated perl-YAML-Syck to 1.42 in Rawhide:

  • Bug Fixes:

    • Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in perl_syck.h (GH#145)

    • Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)

    • Fix: Skip %TAG and %YAML directives in document header (GH#151)

    • Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)

    • Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)

    • Fix: Remove spurious %type <nodeId> for indent_open in gram.y (GH#157, GH#158)

    • Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)

  • Improvements:

    • Implement YAML merge key (<<) support (GH#149)

  • Maintenance:

    • Remove dead Perl 5.6/5.8 version guards from test files (GH#146)

    • Add YAML 1.0 spec compliance audit and coverage tests (GH#148)

    • Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)

    • Remove unneeded TODO in t/json-basic.t (GH#154)

    • Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)

    • Do not require a .y file to build YAML::Syck; add brew support for bison

    • Don't ship docs/ directory in tarball

Local Packages

  • Updated perl-IO-Tty to 1.24 as per the Fedora version

  • Updated perl-YAML-Syck to 1.42 as per the Fedora version

Saturday 28th March 2026

Fedora Project

  • Updated perl-Business-ISBN-Data to 20260328.001 in Rawhide:

    • Data update for 2026-03-28

  • Updated perl-Clone to 0.50 in Rawhide:

    • Fix: Deep-copy HVs past MAX_DEPTH instead of aliasing (GH#93)

    • Fix: Strip macOS xattrs from dist directory before packaging

    • Clean-up: Remove unreachable break and empty magic_ref if-body in Clone.xs

    • Docs: Update MAX_DEPTH limits to reflect actual platform values

    • Docs: Add SECURITY.md policy for vulnerability reporting

    • Prefer using gtar in Makefile.PL

Local Packages

  • Updated perl-Clone to 0.50 as per the Fedora version

Monday 30th March 2026

Fedora Project

  • Updated ansible-collection-community-libvirt to 2.2.0 in Rawhide:

    • This is a minor release of the community.libvirt collection

    • virt_cloud_instance: Added command's return field to provide visibility into executed commands during VM provisioning

    • virt_install: Added command's return field to provide visibility into executed commands during VM provisioning

    • libvirt_qemu: Vendor '_parse_clixml' locally to fix 'ImportError' on ansible-core devel (2.21+)

Local Packages

  • Updated ansible-collection-community-libvirt to 2.2.0 as per the Fedora version

  • Updated perl-Module-CoreList to 5.20260330:

    • Updated for v5.42.2
    • Updated for v5.40.4

Previous Month: February 2026
Next Month: April 2026

Recent