Python 3.14.2

Update php module properties (#63)

Auto-generated from release php-2026.1.16

Co-authored-by: N6REJ <1850089+N6REJ@users.noreply.github.com>

PHP January release

8.5.2
8.4.17
8.3.30
8.2.30

Nodejs-25.3.0

nodejs-2026.1.15

Update Node.js link to latest version

Ruby 4.0.0

Remove Python version 3.14.2.7 from properties

Removed outdated Python version reference.

Perl 5.42.0

Update nodejs module properties (#52)

Auto-generated from release nodejs-2026.1.15

Co-authored-by: N6REJ <1850089+N6REJ@users.noreply.github.com>

Ngrok 3.35.0

Update memcached module properties (#50)

Auto-generated from release Memcached-2026.1.15

Co-authored-by: N6REJ <1850089+N6REJ@users.noreply.github.com>

Memcached 1.6.40

Update mailpit module properties (#49)

Auto-generated from release Mailpit-2026.1.15

Co-authored-by: N6REJ <1850089+N6REJ@users.noreply.github.com>

Mailpit 1.28.2 Security fix

This release includes an important security fix, so upgrading is strongly recommended.

This is a security release to address CVE-2026-22689 which allowed unauthenticated browser access to the websocket which provides the real-time web UI updates when new messages are received. A huge thanks to the security researcher (@omarkurt) who reported this issue responsibly.

Security

• Prevent Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated access to message data CVE-2026-22689

Feature

• Allow default relay addresses to be set when releasing message (#594)

Chore

• Remove webkit warnings about missing template / render functions
• Avoid empty URL query parameter when returning to inbox from message view

Ghostscript 10.06.0

Update composer module properties (#47)

Auto-generated from release Composer-2026.1.15

Co-authored-by: N6REJ <1850089+N6REJ@users.noreply.github.com>

Composer 2.9.3

• Security: Fixed ANSI sequence injection (GHSA-59pp-r3rg-353g / CVE-2025-67746)
• Fixed COMPOSER_NO_SECURITY_BLOCKING env var not being respected for updates done via the install command, and added --no-security-blocking flag to install as well (#12677)
• Fixed update --lock / update mirrors not working when locked packages contain vulnerabilities (#12645)
• Fixed client-certificate authentication implementation (#12667)
• Fixed php-ext schema not being validated in ValidatingArrayLoader (#12694)
• Fixed crash when --bump-after-update is used and the lock file is disabled (#12660)
• Fixed support for SecureTransport + LibreSSL on macOS (#12615)
• Fixed display of reasons for why advisories are ignored (#12668)
• Fixed compatibility issues when git has log.showSignature enabled (#12666)
• Fixed curl downloader not retrying when a timeout (err 28) failure occurs (#12662)
• Fixed EventDispatcher requiring a full Composer instance to function (#12629)

Full Changelog: 2.9.2...2.9.3