Perl Module Dependencies Update - Business-ISBN-Data-20260617.001 Clone-0.50 DateTime-TimeZone-2.68 HTTP-Message-7.02 List-SomeUtils-XS-0.59 Role-Tiny-2.002005 Test-Simple-1.302222 TimeDate-2.35 WWW-RobotRules-6.03

[Douglas R. Reno]

New versions of several Perl Module dependencies.

I've decided to do a round of Perl/Python dependency updates for two reasons - it'll make my security advisory process more complete, and the other is that it'll make it so I can easily update Texlive when I return.

[Douglas R. Reno]

Add the version number for List-SomeUtils-XS to the ticket title

[Douglas R. Reno]

Business-ISBN-Data

20260617.001 2026-06-21T17:26:07Z
        * data update for 2026-06-17
20260613.001 2026-06-13T07:15:29Z
        * data update for 2026-06-13
20260611.001 2026-06-11T15:19:31Z
        * data update for 2026-06-11
20260604.001 2026-06-04T10:03:44Z
        * data update for 2026-06-04
20260523.001 2026-05-23T07:46:14Z
        * data update for 2026-05-23
20260522.001 2026-05-22T20:56:02Z
        * data update for 2026-05-22
20260521.001 2026-05-21T22:11:05Z
        * data update for 2026-05-21
20260519.001 2026-05-19T05:24:44Z
        * data update for 2026-05-19
20260508.001 2026-05-08T20:41:04Z
        * data update for 2026-05-08
20260502.001 2026-05-04T14:22:06Z
        * data update for 2026-05-02
20260424.001 2026-04-24T14:49:48Z
        * data update for 2026-04-24
20260416.001 2026-04-16T14:26:58Z
        * stop unintended autovivification of ISBN_RANGE_MESSAGE (#236)
20260411.001 2026-04-11T09:00:38Z
        * data update for 2026-04-11
20260410.001 2026-04-10T09:43:45Z
        * data update for 2026-04-10
20260408.001 2026-04-08T04:56:36Z
        * data update for 2026-04-08
20260403.001 2026-04-03T05:36:28Z
        * data update for 2026-04-03
20260331.001 2026-04-01T23:11:44Z
        * data update for 2026-03-31
20260328.001 2026-03-28T07:02:06Z
        * data update for 2026-03-26
20260325.001 2026-03-25T08:53:25Z
        * data update for 2026-03-25
20260321.001 2026-03-22T17:08:17Z
        * data update for 2026-03-17
20260317.001 2026-03-17T10:46:47Z
        * data update for 2026-03-17

Clone

0.50 2026-03-28 atoomic
  - fix: deep-copy HVs past MAX_DEPTH instead of aliasing (GH #93)
  - fix: strip macOS xattrs from dist directory before packaging
  - cleanup: remove unreachable break and empty magic_ref if-body in Clone.xs
  - docs: update MAX_DEPTH limits to reflect actual platform values
  - docs: add SECURITY.md policy for vulnerability reporting
  - Prefer using gtar in Makefile.PL
0.49 2026-03-24 21:23:44 atoomic
  - fix: exclude macOS extended attributes from dist tarball
  - fix: suppress DBI STDERR noise in t/13-io-handle.t (GH #82)
  - fix: skip DBI fork tests on Windows
  - fix: remove spurious warn output in t/03-scalar.t
  - Add AI_POLICY.md documenting AI-assisted workflow
0.48 2026-03-02 16:01:53 atoomic
  - perf: optimize hot paths in Clone.xs
  - fix: replace subtest with SKIP/bare blocks to avoid Test2 warnings
  - fix: don't require MGf_DUP flag for ext magic duplication
  - fix: lower MAX_DEPTH to 4000 to prevent SEGV on CPAN smokers
  - fix: use platform-adaptive depth in t/10-deep_recursion.t for Windows
  - Fix t/10-deep_recursion.t for Windows
  - Fix C89 declaration-after-statement violations in Clone.xs
  - Fix deep recursion stack overflow on Windows
  - Fix cloning of Math::BigInt::GMP objects (fixes #16)
  - Fix cloning of threads::shared data structures (fixes #18)
  - Add thread safety test for Class::DBI-like patterns (fixes #14)
  - Add comprehensive documentation with examples and limitations
  - Improve README.md structure and installation instructions
  - Add DBI + DBD::SQLite as recommended test dependencies
  - Fix weakened reference cloning via deferred weakening (fixes #15)
  - Fix memory leak when cloning non-existent hash values (fixes #42)
  - Fix segfault when cloning DBI database handles (fixes #27)
  - Rewrite t/09-circular.t to fix SEGV on CPAN Testers (fixes #54)
  - Replace static recursion_depth with stack parameter
  - Fix C++ style comments in Clone.xs for C89 portability
  - Fix memory leak in Clone.xs (fixes #42)
  - Allow a MAX_DEPTH recursion of 32000 calls (fixes #19 aka RT97525)
  - Rename tests with more readable names
  - Remove TODO from cow test

DateTime-TimeZone

2.68    2026-04-23
- This release is based on version 2026b of the Olson database. This release includes contemporary
  changes for British Columbia, CA.
2.67    2026-03-05
- This release is based on version 2026a of the Olson database. This release includes contemporary
  changes for Moldova.

HTTP-Message

7.02      2026-06-05 23:28:36Z
    - now handling HTTP method '0' (GH#211) (Karen Etheridge)

List-SomeUtils-XS

0.59     2026-06-22
- Fix a heap buffer overflow in the pairwise function when it would return a very large 
list. Fixed by Paul Johnson.

Role-Tiny

2.002005 - 2026-05-17
  - split role initialization from setting pragmas to allow more flexibility
    for subclasses
  - ensure consistent internal handling of Class::C3 vs mro
  - reduced Exporter dependency to 0 (any version)

Test-Simple

1.302222  2026-06-15 10:18:50-07:00 America/Los_Angeles
    - Add missing Changes entry
    - Fix test that fails on some windows versions due to path seperators
1.302221  2026-06-13 22:12:23-07:00 America/Los_Angeles
    - EBDIC fixes
1.302220  2026-06-09 15:49:19-07:00 America/Los_Angeles
    - Add [PruneCruft] to dist.ini so build artifacts (blib/, pm_to_blib, MYMETA.*) no 
longer leak into release tarballs.
    - Remove Net::BitTorrent from broken list
    - Amend tests to adapt to more accurate line number reporting in core (#1080)

TimeDate

2.35      2026-03-20 21:44:45-06:00 America/Denver
2.34_03   2026-03-18 22:12:43-06:00 America/Denver (TRIAL RELEASE)
  * test: document and pin RT#84075/GH#12 fix in regression suite
  * fix: add NST, NFT, and NDT (Newfoundland) timezone support
  * fix: add ICT and PHT timezone support
  * fix: restore rebase regressions and clarify first-century limitation
  * fix: normalize two-digit years in str2time to avoid Time::Local windowing mismatch
  * fix: use standard 2-letter German weekday abbreviations
  * fix: detect timegm/timelocal overflow for far-future dates (RT#88777)
  * test: add regression tests for RT#88777 (negative epoch for far-future dates)
  * fix: use stored epoch in format_Z/format_z to fix DST fall-back timezone name
  * fix: document MSK timezone history and add regression test (RT#98949)
  * fix: strftime %s with timezone now returns correct epoch (RT#52387)
  * test: add POD validity regression test for RT#53557
  * fix: include day in year-inference for dates without an explicit year
  * fix: document MSK timezone history and add regression test (RT#81350)
  * ci: install Pod::Checker via cpm in Linux CI
  * docs: add SECURITY.md with vulnerability reporting policy
  * test: add regression tests for RT#57800 / GH#3 (numeric m/d/yyyy pre-1970 dates)
  * fix: normalize year offset for dates before 1901 in strptime (RT#106105)
  * fix: reject timezone-only inputs in strptime (RT#70650)
  * test: add failing tests for RT#70650 (ludicrous date parsing)
  * fix: prevent negative month from strptime for 6-digit inputs like '199001'
  * test: add Portuguese format and round-trip tests from PR #61
  * fix: treat number > 31 after month name as year, not day (GH#2)
  * fix: translate timezone abbreviations (%Z) in language-specific formatting
  * fix: tz_name() offset in seconds was treated as minutes (RT#59298)
  * docs: fix ISO-8601 example date in Date::Parse POD (issue #6)
  * feat: add optional LANGUAGE parameter to time2str()
  * feat: allow str2time() to accept a custom reference epoch (RT#64789)
  * docs: clarify strptime() return format for ISO 8601 dates (issue #44)
  * feat: add Portuguese language module
  * fix: prefer CEST over MEST as canonical Central European Summer Time name
  * fix: add ICT and PHT timezone abbreviations to Time::Zone (RT#123247)
  * fix: standardize Greek.pm to use native Unicode instead of \x{} escapes
  * test: add regression test for RT#105031 / GH#17 (1965-12-31 maps to 2065)
  * fix: declare Carp as runtime prerequisite in Makefile.PL
  * fix: infer current year for future months when no year given (RT#92611)
  * test: add regression tests for RT#53413 (4-digit year mangling)
  * fix: handle leap day in year-only date parsing test
  * fix: support IANA timezone names in tz2zone and tz_offset (RT#76968)
  * fix: preserve comma as ISO 8601 decimal separator in strptime
  * fix: add French day ordinal suffix in format_o
  * fix: make tz_name tests deterministic across DST transitions
2.34      2026-02-27 17:00:48-07:00 America/Denver
  * doc: Increase POD coverage
  * refactor: extract _build_lookups helper, remove hash-building duplication
  * fix: correct language data bugs and minor code review fixes
  * Fixup utf8 and add tests
  * Use Dist::Zilla for the distro
  * rebase: apply review feedback on #52
  * fix: uncomment Indian Standard timezone (IST)
  * feat: support boost C++ timestamp format (%Y-%b-%d %H:%M:%S.%f)
  * fix: correct typos across documentation and comments
  * stop using use vars
  * rebase: apply review feedback on #49
  * Remove limitation from Date::Parse
  * Create Arabic.pm

WWW-RobotRules

6.03      2026-05-23 02:23:28Z
    - Doing a proper version bump.
6.02      2026-05-21 14:45:27Z
    - WWW::RobotRules::AnyDBM_File::agent() no longer truncates the on-disk
      cache through an untie/tie(O_TRUNC) sequence. Stale-data reset now goes
      through the tied-hash CLEAR, eliminating a symlink-follow race that a
      local attacker with write access to the cache directory could exploit
      to overwrite arbitrary files writable by the crawler user.
    - The on-disk cache file mode has been tightened from 0640 to 0600.
    - t/rules-dbm.t has been hardened against symlink attacks on its tempfile
      during package builds.
    - A new SECURITY CONSIDERATIONS POD section documents the residual
      caller-trust requirement: the constructor's tie still follows symlinks
      because AnyDBM_File cannot portably plumb O_NOFOLLOW, so the caller
      must store the cache file in a directory writable only by the user
      that runs the code.
    - References: CWE-377, CWE-378, CWE-379.

[Douglas R. Reno]

Fixed at 4db625340ff082177c2efcf558340aa6afa53b5a