Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 07 Mar 2026 17:41:30 +0000
From:      Adam Weinberger <adamw@FreeBSD.org>
To:        ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org
Subject:   git: 70bb0624d4d6 - main - textproc/typst: Upgrade to 0.14.2
Message-ID:  <69ac634a.1902d.140390e9@gitrepo.freebsd.org>

index | next in thread | raw e-mail

The branch main has been updated by adamw:

URL: https://cgit.FreeBSD.org/ports/commit/?id=70bb0624d4d629277c11aa57b94f0884dd56ccff

commit 70bb0624d4d629277c11aa57b94f0884dd56ccff
Author:     Adam Weinberger <adamw@FreeBSD.org>
AuthorDate: 2026-03-07 17:38:07 +0000
Commit:     Adam Weinberger <adamw@FreeBSD.org>
CommitDate: 2026-03-07 17:38:07 +0000

    textproc/typst: Upgrade to 0.14.2
    
    Changes:
      https://github.com/typst/typst/releases/tag/v0.14.1
      https://github.com/typst/typst/releases/tag/v0.14.2
        Includes fix for a memory-handling vulnerability that upstream
        has labelled "very hard to exploit in practice."
    
    PR:             293639
    Approved by:    wen (maintainer)
    Security:       Memory-handling vulnerability
---
 textproc/typst/Makefile        |  3 +--
 textproc/typst/Makefile.crates | 27 ++++++++++---------
 textproc/typst/distinfo        | 60 +++++++++++++++++++++++-------------------
 3 files changed, 49 insertions(+), 41 deletions(-)

diff --git a/textproc/typst/Makefile b/textproc/typst/Makefile
index 94a118e52eac..752d72e06357 100644
--- a/textproc/typst/Makefile
+++ b/textproc/typst/Makefile
@@ -1,7 +1,6 @@
 PORTNAME=	typst
 DISTVERSIONPREFIX=	v
-DISTVERSION=	0.14.0
-PORTREVISION=	3
+DISTVERSION=	0.14.2
 CATEGORIES=	textproc
 
 MAINTAINER=	wen@FreeBSD.org
diff --git a/textproc/typst/Makefile.crates b/textproc/typst/Makefile.crates
index 581a56ed41e2..39739f02a3a6 100644
--- a/textproc/typst/Makefile.crates
+++ b/textproc/typst/Makefile.crates
@@ -105,7 +105,7 @@ CARGO_CRATES=	adler2-2.0.0 \
 		glidesort-0.1.2 \
 		half-2.4.1 \
 		hashbrown-0.12.3 \
-		hashbrown-0.15.2 \
+		hashbrown-0.16.1 \
 		hayagriva-0.9.1 \
 		hayro-0.4.0 \
 		hayro-font-0.3.0 \
@@ -139,7 +139,7 @@ CARGO_CRATES=	adler2-2.0.0 \
 		imagesize-0.13.0 \
 		imagesize-0.14.0 \
 		indexmap-1.9.3 \
-		indexmap-2.7.1 \
+		indexmap-2.12.1 \
 		infer-0.19.0 \
 		inotify-0.11.0 \
 		inotify-sys-0.1.5 \
@@ -152,8 +152,8 @@ CARGO_CRATES=	adler2-2.0.0 \
 		kamadak-exif-0.6.1 \
 		kqueue-1.0.8 \
 		kqueue-sys-1.0.4 \
-		krilla-0.5.0 \
-		krilla-svg-0.2.0 \
+		krilla-0.6.0 \
+		krilla-svg-0.3.0 \
 		kurbo-0.11.2 \
 		kurbo-0.12.0 \
 		libc-0.2.169 \
@@ -256,8 +256,9 @@ CARGO_CRATES=	adler2-2.0.0 \
 		security-framework-sys-2.14.0 \
 		self-replace-1.5.0 \
 		semver-1.0.25 \
-		serde-1.0.217 \
-		serde_derive-1.0.217 \
+		serde-1.0.228 \
+		serde_core-1.0.228 \
+		serde_derive-1.0.228 \
 		serde_json-1.0.138 \
 		serde_spanned-0.6.8 \
 		serde_yaml-0.8.26 \
@@ -308,7 +309,7 @@ CARGO_CRATES=	adler2-2.0.0 \
 		ttf-parser-0.25.1 \
 		two-face-0.4.3 \
 		typed-arena-2.0.2 \
-		typst-assets-0.14.0 \
+		typst-assets-0.14.2 \
 		unic-langid-0.9.6 \
 		unic-langid-impl-0.9.6 \
 		unic-langid-macros-0.9.6 \
@@ -343,10 +344,10 @@ CARGO_CRATES=	adler2-2.0.0 \
 		wasm-bindgen-macro-0.2.100 \
 		wasm-bindgen-macro-support-0.2.100 \
 		wasm-bindgen-shared-0.2.100 \
-		wasmi-0.51.1 \
-		wasmi_collections-0.51.1 \
-		wasmi_core-0.51.1 \
-		wasmi_ir-0.51.1 \
+		wasmi-0.51.5 \
+		wasmi_collections-0.51.5 \
+		wasmi_core-0.51.5 \
+		wasmi_ir-0.51.5 \
 		wasmparser-0.228.0 \
 		web-sys-0.3.77 \
 		weezl-0.1.8 \
@@ -392,5 +393,7 @@ CARGO_CRATES=	adler2-2.0.0 \
 		zlib-rs-0.5.1 \
 		zopfli-0.8.1 \
 		zune-core-0.4.12 \
+		zune-core-0.5.0 \
 		zune-jpeg-0.4.14 \
-		typst-dev-assets@git+https://github.com/typst/typst-dev-assets?tag=v0.14.0\#0b12d75772199e07294749ffe078ea030b857746
+		zune-jpeg-0.5.5 \
+		typst-dev-assets@git+https://github.com/typst/typst-dev-assets?tag=v0.14.2\#fe6cad916d8b20c20742512b2a3f3b247a2bc4f8
diff --git a/textproc/typst/distinfo b/textproc/typst/distinfo
index 2ca9bd3c13c8..555cf91a5f86 100644
--- a/textproc/typst/distinfo
+++ b/textproc/typst/distinfo
@@ -1,4 +1,4 @@
-TIMESTAMP = 1761873410
+TIMESTAMP = 1772862331
 SHA256 (rust/crates/adler2-2.0.0.crate) = 512761e0bb2578dd7380c6baaa0f4ce03e84f95e960231d1dec8bf4d7d6e2627
 SIZE (rust/crates/adler2-2.0.0.crate) = 13529
 SHA256 (rust/crates/aho-corasick-1.1.3.crate) = 8e60d3430d3a69478ad0993f19238d2df97c507009a52b3c10addcd7f6bcb916
@@ -213,8 +213,8 @@ SHA256 (rust/crates/half-2.4.1.crate) = 6dd08c532ae367adf81c312a4580bc67f1d0fe8b
 SIZE (rust/crates/half-2.4.1.crate) = 50892
 SHA256 (rust/crates/hashbrown-0.12.3.crate) = 8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888
 SIZE (rust/crates/hashbrown-0.12.3.crate) = 102968
-SHA256 (rust/crates/hashbrown-0.15.2.crate) = bf151400ff0baff5465007dd2f3e717f3fe502074ca563069ce3a6629d07b289
-SIZE (rust/crates/hashbrown-0.15.2.crate) = 138478
+SHA256 (rust/crates/hashbrown-0.16.1.crate) = 841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100
+SIZE (rust/crates/hashbrown-0.16.1.crate) = 147785
 SHA256 (rust/crates/hayagriva-0.9.1.crate) = 1cb69425736f184173b3ca6e27fcba440a61492a790c786b1c6af7e06a03e575
 SIZE (rust/crates/hayagriva-0.9.1.crate) = 460242
 SHA256 (rust/crates/hayro-0.4.0.crate) = 048488ba88552bb0fb2a7e4001c64d5bed65d1a92167186a1bb9151571f32e60
@@ -281,8 +281,8 @@ SHA256 (rust/crates/imagesize-0.14.0.crate) = 09e54e57b4c48b40f7aec75635392b12b3
 SIZE (rust/crates/imagesize-0.14.0.crate) = 22706
 SHA256 (rust/crates/indexmap-1.9.3.crate) = bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99
 SIZE (rust/crates/indexmap-1.9.3.crate) = 54653
-SHA256 (rust/crates/indexmap-2.7.1.crate) = 8c9c992b02b5b4c94ea26e32fe5bccb7aa7d9f390ab5c1221ff895bc7ea8b652
-SIZE (rust/crates/indexmap-2.7.1.crate) = 88644
+SHA256 (rust/crates/indexmap-2.12.1.crate) = 0ad4bb2b565bca0645f4d68c5c9af97fba094e9791da685bf83cb5f3ce74acf2
+SIZE (rust/crates/indexmap-2.12.1.crate) = 100184
 SHA256 (rust/crates/infer-0.19.0.crate) = a588916bfdfd92e71cacef98a63d9b1f0d74d6599980d11894290e7ddefffcf7
 SIZE (rust/crates/infer-0.19.0.crate) = 19091
 SHA256 (rust/crates/inotify-0.11.0.crate) = f37dccff2791ab604f9babef0ba14fbe0be30bd368dc541e2b08d07c8aa908f3
@@ -307,10 +307,10 @@ SHA256 (rust/crates/kqueue-1.0.8.crate) = 7447f1ca1b7b563588a205fe93dea8df60fd98
 SIZE (rust/crates/kqueue-1.0.8.crate) = 12642
 SHA256 (rust/crates/kqueue-sys-1.0.4.crate) = ed9625ffda8729b85e45cf04090035ac368927b8cebc34898e7c120f52e4838b
 SIZE (rust/crates/kqueue-sys-1.0.4.crate) = 7160
-SHA256 (rust/crates/krilla-0.5.0.crate) = 199be5f63da6e19b71051fd5276258a8e55449ac48e2e7492c68238f38ca9f3b
-SIZE (rust/crates/krilla-0.5.0.crate) = 172894
-SHA256 (rust/crates/krilla-svg-0.2.0.crate) = 8d3eec075c9507dfdbfb4b9bc3b2aeac074ed422b61bcfd93517616d6b3d19c3
-SIZE (rust/crates/krilla-svg-0.2.0.crate) = 22368
+SHA256 (rust/crates/krilla-0.6.0.crate) = a0ddfec86fec13d068075e14f22a7e217c281f3ed69ddcb427bf3f5d504fd674
+SIZE (rust/crates/krilla-0.6.0.crate) = 176861
+SHA256 (rust/crates/krilla-svg-0.3.0.crate) = f485e1a850201a01dcd8d73e7cf09f2cd4c4cc85c2cd296359094d49336d8ef7
+SIZE (rust/crates/krilla-svg-0.3.0.crate) = 19060
 SHA256 (rust/crates/kurbo-0.11.2.crate) = 1077d333efea6170d9ccb96d3c3026f300ca0773da4938cc4c811daa6df68b0c
 SIZE (rust/crates/kurbo-0.11.2.crate) = 130628
 SHA256 (rust/crates/kurbo-0.12.0.crate) = ce9729cc38c18d86123ab736fd2e7151763ba226ac2490ec092d1dd148825e32
@@ -515,10 +515,12 @@ SHA256 (rust/crates/self-replace-1.5.0.crate) = 03ec815b5eab420ab893f63393878d89
 SIZE (rust/crates/self-replace-1.5.0.crate) = 17000
 SHA256 (rust/crates/semver-1.0.25.crate) = f79dfe2d285b0488816f30e700a7438c5a73d816b5b7d3ac72fbc48b0d185e03
 SIZE (rust/crates/semver-1.0.25.crate) = 31291
-SHA256 (rust/crates/serde-1.0.217.crate) = 02fc4265df13d6fa1d00ecff087228cc0a2b5f3c0e87e258d8b94a156e984c70
-SIZE (rust/crates/serde-1.0.217.crate) = 79019
-SHA256 (rust/crates/serde_derive-1.0.217.crate) = 5a9bf7cf98d04a2b28aead066b7496853d4779c9cc183c440dbac457641e19a0
-SIZE (rust/crates/serde_derive-1.0.217.crate) = 57749
+SHA256 (rust/crates/serde-1.0.228.crate) = 9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e
+SIZE (rust/crates/serde-1.0.228.crate) = 83652
+SHA256 (rust/crates/serde_core-1.0.228.crate) = 41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad
+SIZE (rust/crates/serde_core-1.0.228.crate) = 63111
+SHA256 (rust/crates/serde_derive-1.0.228.crate) = d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79
+SIZE (rust/crates/serde_derive-1.0.228.crate) = 59605
 SHA256 (rust/crates/serde_json-1.0.138.crate) = d434192e7da787e94a6ea7e9670b26a036d0ca41e0b7efb2676dd32bae872949
 SIZE (rust/crates/serde_json-1.0.138.crate) = 154769
 SHA256 (rust/crates/serde_spanned-0.6.8.crate) = 87607cb1398ed59d48732e575a4c28a7a8ebf2454b964fe3f224f2afc07909e1
@@ -619,8 +621,8 @@ SHA256 (rust/crates/two-face-0.4.3.crate) = 384eda438ddf62e2c6f39a174452d952d9d9
 SIZE (rust/crates/two-face-0.4.3.crate) = 3390549
 SHA256 (rust/crates/typed-arena-2.0.2.crate) = 6af6ae20167a9ece4bcb41af5b80f8a1f1df981f6391189ce00fd257af04126a
 SIZE (rust/crates/typed-arena-2.0.2.crate) = 11848
-SHA256 (rust/crates/typst-assets-0.14.0.crate) = 712f5e2c4134bcf22f292086aa515caff00a21d54c8b30c77c4fc1227442a89a
-SIZE (rust/crates/typst-assets-0.14.0.crate) = 6376978
+SHA256 (rust/crates/typst-assets-0.14.2.crate) = 5613cb719a6222fe9b74027c3625d107767ec187bff26b8fc931cf58942c834f
+SIZE (rust/crates/typst-assets-0.14.2.crate) = 6376954
 SHA256 (rust/crates/unic-langid-0.9.6.crate) = a28ba52c9b05311f4f6e62d5d9d46f094bd6e84cb8df7b3ef952748d752a7d05
 SIZE (rust/crates/unic-langid-0.9.6.crate) = 9031
 SHA256 (rust/crates/unic-langid-impl-0.9.6.crate) = dce1bf08044d4b7a94028c93786f8566047edc11110595914de93362559bc658
@@ -689,14 +691,14 @@ SHA256 (rust/crates/wasm-bindgen-macro-support-0.2.100.crate) = 8ae87ea40c9f689f
 SIZE (rust/crates/wasm-bindgen-macro-support-0.2.100.crate) = 26243
 SHA256 (rust/crates/wasm-bindgen-shared-0.2.100.crate) = 1a05d73b933a847d6cccdda8f838a22ff101ad9bf93e33684f39c1f5f0eece3d
 SIZE (rust/crates/wasm-bindgen-shared-0.2.100.crate) = 8570
-SHA256 (rust/crates/wasmi-0.51.1.crate) = cb4f6b71d5cb04a4615b9a8a2e522ba284c491ad847afd9e905d89be15e3efc0
-SIZE (rust/crates/wasmi-0.51.1.crate) = 244106
-SHA256 (rust/crates/wasmi_collections-0.51.1.crate) = 6a4a11fa090c4d742e5a77dbbc8efbbe1aa151db7335ca6850232e6cafbb1023
-SIZE (rust/crates/wasmi_collections-0.51.1.crate) = 19339
-SHA256 (rust/crates/wasmi_core-0.51.1.crate) = ab3e422fc1f4df78c9ded6ed48c4ca6d1f55f4609f04c99962fc07532e4db61d
-SIZE (rust/crates/wasmi_core-0.51.1.crate) = 50280
-SHA256 (rust/crates/wasmi_ir-0.51.1.crate) = 13fe9f9f1747ec81644e764c4dc798f063f5d54a495f0a3b4a375bce9af65399
-SIZE (rust/crates/wasmi_ir-0.51.1.crate) = 34476
+SHA256 (rust/crates/wasmi-0.51.5.crate) = bb321403ce594274827657a908e13d1d9918aa02257b8bf8391949d9764023ff
+SIZE (rust/crates/wasmi-0.51.5.crate) = 244287
+SHA256 (rust/crates/wasmi_collections-0.51.5.crate) = e9b8e98e45a2a534489f8225e765cbf1cb9a3078072605e58158910cf4749172
+SIZE (rust/crates/wasmi_collections-0.51.5.crate) = 19341
+SHA256 (rust/crates/wasmi_core-0.51.5.crate) = c25f375c0cdf14810eab07f532f61f14d4966f09c747a55067fdf3196e8512e6
+SIZE (rust/crates/wasmi_core-0.51.5.crate) = 50471
+SHA256 (rust/crates/wasmi_ir-0.51.5.crate) = 624e2a68a4293ecb8f564260b68394b29cf3b3edba6bce35532889a2cb33c3d9
+SIZE (rust/crates/wasmi_ir-0.51.5.crate) = 34479
 SHA256 (rust/crates/wasmparser-0.228.0.crate) = 4abf1132c1fdf747d56bbc1bb52152400c70f336870f968b85e89ea422198ae3
 SIZE (rust/crates/wasmparser-0.228.0.crate) = 249009
 SHA256 (rust/crates/web-sys-0.3.77.crate) = 33b6dd2ef9186f1f2072e409e99cd22a975331a6b3591b12c764e0e55c60d5d2
@@ -787,9 +789,13 @@ SHA256 (rust/crates/zopfli-0.8.1.crate) = e5019f391bac5cf252e93bbcc53d039ffd62c7
 SIZE (rust/crates/zopfli-0.8.1.crate) = 50972
 SHA256 (rust/crates/zune-core-0.4.12.crate) = 3f423a2c17029964870cfaabb1f13dfab7d092a62a29a89264f4d36990ca414a
 SIZE (rust/crates/zune-core-0.4.12.crate) = 17355
+SHA256 (rust/crates/zune-core-0.5.0.crate) = 111f7d9820f05fd715df3144e254d6fc02ee4088b0644c0ffd0efc9e6d9d2773
+SIZE (rust/crates/zune-core-0.5.0.crate) = 27393
 SHA256 (rust/crates/zune-jpeg-0.4.14.crate) = 99a5bab8d7dedf81405c4bb1f2b83ea057643d9cb28778cea9eecddeedd2e028
 SIZE (rust/crates/zune-jpeg-0.4.14.crate) = 63388
-SHA256 (typst-typst-dev-assets-v0.14.0_GH0.tar.gz) = 56e08fa60ca17eb9086857d5d796f4772fd0fdb64f18112031d35a7ce66bbb36
-SIZE (typst-typst-dev-assets-v0.14.0_GH0.tar.gz) = 29376367
-SHA256 (typst-typst-v0.14.0_GH0.tar.gz) = 39df9db43c792b0ab71cde97bdc03d4763fff7d3525b67d549ffc8bfc99b6395
-SIZE (typst-typst-v0.14.0_GH0.tar.gz) = 4110929
+SHA256 (rust/crates/zune-jpeg-0.5.5.crate) = dc6fb7703e32e9a07fb3f757360338b3a567a5054f21b5f52a666752e333d58e
+SIZE (rust/crates/zune-jpeg-0.5.5.crate) = 77168
+SHA256 (typst-typst-dev-assets-v0.14.2_GH0.tar.gz) = 58344ab086297a73d761012f197d6703ae910c4e2f514d5b3b54a66ba6522926
+SIZE (typst-typst-dev-assets-v0.14.2_GH0.tar.gz) = 29513419
+SHA256 (typst-typst-v0.14.2_GH0.tar.gz) = 70a56445020ca05efc571c7b07a1a9f52eb93842d420518693c077ae74e54142
+SIZE (typst-typst-v0.14.2_GH0.tar.gz) = 4124613


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?69ac634a.1902d.140390e9>