# changelog

author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 1.15
    * Detect failed folder delete on device remove
    * CLI: add user altname management
    * Add password reset functionality


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to snapshot 1.17.4 (2d980ab)
    * Add smtpaddress mapping for ActiveDirectory
    * Add Web/EAS/DAV privilege bit twiddling support
  - Enable multipython build


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 1.18
    * Only count active users towards license limit
    * Allow password change when logged in with altname
    * Cope with capitalized user alias domains
    * Add --disable-ldap argument to ldap reload
    * Added authmgr handling for `cli ldap`
    * Remove g-admin ldap reload -a arg for auth-backend
    * Cease syncing named properties between user store and main DB


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to tag v28
  - Use nginx load_module fragments rather than patching nginx.conf
    directly from a scriptlet


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to snapshot grommunio-dav-1.2.0.9976bca
    * set a default value for the errcontext parameter to support php 8.0+
    * build: update logrotate parameters


author: Sérgio Basto <sergio@serjux.com> - 1.5.87-2
changelog:
  - Drop debconf-gnome on epel 10 because we don't have perl-GTK3 package
    and I don't know if we'll ever have or want have it (perl-GTK3 on epel 10)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.5.87-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fix sbin merge for all releases


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to snapshot 3.2.43.7ebf7d9
    * Fix all-day events spanning over two days
    * Change default sort order for search results
    * rules: do not filter shared private stores


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 3.3
    * Freebusy is determined using mapi_getuserfreebusy PHP
      function introdued in Gromox-2.11
    * The Menu key is now usable to call up thecontext menu in the
      content table
    * Copy-to-trash had erroneously moved the mail
    * Rules dialog no longer hides shared stores


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 3.5
    * Modern authentication system using keycloak openID Connect
      workflow
    * Style updates
    * Remove incorrect filtering of PNG ressources
  - Update to snapshot 3.5.1.31715c1e
    * Duplicate folder autorenaming on deletion now uses
      parenthesized counters


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 3.11
    * Do not collapse the mail list view to invisibility, instead now
      mail preview
    * Correct all day event on wrong day for non-proper MAPI elements
      without TZ (Kopano migrations)
    * Introduce new plugin for integration with Kendox InfoShare


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 3.12
    * Allow using distribution lists stored in IPF.Contact folders
      in public stores


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 2.48
    * gromox.cfg now has a ``ruleproc_debug`` directive (applies to
      the TWOSTEP Processor only)
    * ews: repair a nullptr dereference from the OOF XML change
    * exmdb: make EXRPC write_message_v2 fill in return MID/CN values
    * ab_tree: restore filtering of objects with AB_HIDE_FROM_GAL
      for NSP (this was lost in a Global Address Book provider
      rewrite in 2.40)


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 3.0
    * eml2mt now transmits the RFC5322 representation into the
      message store.
    * midb now transmits the RFC5322 representations of messages
      created via IMAP into the message store.
    * oxcical: implement support for VTODO and VJOURNAL.
    * mbop: add "freeze" and "thaw" commands.
    * mbop: support UTC/zone suffixes for getfreebusy -a/-b
      arguments.
    * exmdb: new config directive ``exmdb_eph_prefix`` to put
      ephmeral files like tables.sqlite3 on a local disk.
    * exmdb: add a time index over messages to speed up common cases
      of grommunio-web GetContentsTable requests.
    * oxdisco: the AutoConfig mechanism now emits an EWS server
      information block.
    * oxcical: iCal events with a date in DTSTART & DTEND but without
      X-MICROSOFT-CDO-ALLDAYEVENT are now transformed into Allday
      events even if the event is longer than one day.
    * delivery: emit MDN-RRT messages even with
      ``lda_twostep_ruleproc`` is set.
    * oxdisco: AutoConfig XML now features the incomingServer type
      parameter in the right place.
    * oxdisco: AutoConfig now emits outgoing server port 587 as type
      smtp.
    * ruleproc: auto-enter MRs into target calender even if the
      sender is not going to get a response.
    * ews: Avoid sending multiple ``<?xml ?>`` lines into the
      notification stream HTTP response body.
    * ews: trim "duplicate" recipients when a newly-created item has
      recipients in both <mimeContent> and <To>/<Cc>.
    * ews: prevent FAI messages from polluting the Normal Message Set
      during ICS.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 3.1
    * http: support for SPNEGO authentication (Kerberos-in-SPNEGO or
      NTLMSSP-in-SPNEGO) with the HTTP "Authorization: Negotiate"
      header.
    * dscli: try all oxdisco URLs until one succeeds
    * exmdb: support repeated import of permission data
    * ews: create calendar item after accepting a MR with MacMail
    * emsmdb,zcore: Send-As mail now correctly has the delegator in
      Envelope-From
    * email_lib: deal with MIME parts with zero header lines
    * nsp: avoid buffer overruns in nsp_interface_fetch_property
    * emsmdb: Partial message change tracking was buggy and deleted
    * http: A workaround was added for OpenSSL 3.0 so that
      connections from Outlook 2010 once again succeed.
    * mysql_adaptor: Improve the time needed to compute the composite
      mailbox permission for user in a case of a mailbox with 100K
      ACL entries.
    * exmdb: deactivate movecopy/deletemessages event storm compaction
    * emsmdb: outgoing lzxpress compression in the EMSMDB protocol is
      now disabled as it does not compress well for the time
      invested.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 3.2
    * More supported EWS handlers and types (GetRoomLists, GetRooms,
      tItemAttachment, tUserConfigurationName, CategoryList, ReplyTo)
    * istore: standalone exmdb_provider process launcher
    * oxcmail: on export (MAPI-to-IM), recognize EX-in-ONEOFF and
      EMSAB (GAB) entryids in the Reply-To field and substitute them
    * kdb2mt: entryids and search keys for senders/recipients are now
      translated with the help of user maps
    * ab_tree: users with HIDE_FROM_GAL or HIDE_FROM_AL were not
      hidden in all cases, which has been rectified
    * imap: suppress ``AUTH=LOGIN`` advertisement before TLS
      established and instead emit ``LOGINDISABLED`` capability
    * ews: avoid sending out emClient's draft messages
    * exmdb: MAPI table row deletion events were not being delivered,
      which was fixed
    * delivery: the OOF autoresponder was rewritten so it does not
      use direct filesystem access anymore (since the mailbox might
      not be present on the same host where the LDA runs)


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 3.3
    * oxvcard: include photo when converting MAPI contact objects to
      VCARD
    * exporter: support export of multiple messages to GXMT
    * exporter: support for folder export to GXMT
    * importer: support a read-only mode
    * exmdb: include RTF in the cross-body format synchronization
      when the message is saved, making Outlook Notes or Outlook
      Contact notes display something in grommunio-web and other
      clients
    * exmdb: new read_delegate/write_delegate EXRPCs so that
      delegates.txt is no longer accessed via filesystem
    * exch: allow user sending mail with From: line set to own aliases
    * mysql_adaptor: regard aliases for user_ids and displayname
    * ews: recognize <TimeZoneContext> elements located in the SOAP
      header
    * ews: avoid sending newly created message items when message
      invitation flag is set
    * zcore: obtain freebusy information for own mailbox using owner
      mode, so that setting e.g. the "default" ACL default for one's
      calender does not deprive the user of his own freebusy view.
    * exmdb: the event volley when the last row of a MAPI table with
      categories got deleted had wrong event data
    * emsmdb: calls over RPCH with large outputs would sometimes just
      report an error due to insufficient buffer sizes, which has
      been fixed.
    * mapi_lib: repair botched html_to_rtf with non-UTF-8 HTML input
    * rtf_to_html and html_to_plain misconverted
      U+007F,U+07FF,U+7FFF,U+7FFFF to faulty UTF-8, which has been
      fixed


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 3.4
    * mbop: new "zaddrxlat" command
    * delivery: add pre-delivery junk shelving and ``lda_junk_rules``
      config directive
    * mrautoproc: server-side processed meeting requests
      automatically entered into the calendar had lacked the flags
      asfMeeting+asfReceived, which was fixed.
    * nsp: seeking backwards with the seekEntries routine jumped too
      far backwards, causing the last screenful of the Outlook GAL to
      be misrepresented.
    * oxcmail: the "Keywords:" RFC5322 header (Categories) used to
      get filled with text garbage, which is now fixed.
    * zcore: plug a memory leak occuring when importing vCards
    * Any data, when converted from windows-1255 or 1258 character
      set to Unicode, sometimes lost the last character in the
      conversion, which has been fixed.
    * exmdb: abort purge-datafiles if there is a database error midway
    * imap: release potentially-large APPEND buffers much earlier
    * exporter: plug two memory leaks
    * oxcmail: limit nesting depth of attachments during export to 7
    * oxcmail: RFC 5322 header fields are now treated as US-ASCII as
      mandated, and no longer magically assumed to be in the same
      charset as the body.
    * exporter: FAI messages are no longer emitted by default and
      explicitly need to be requested with the -a option.
    * ruleproc: treat not only "Busy" as a collision, but also
      "Tentative" and "Out-Of-Office"
    * ab_tree: PR_COMPANY_NAME is no longer synthesized from the
      title of the domain a user belongs to


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 3.5
    * Finer-grained control over listening socket creation
    * importer: make -B option usable with public stores
    * emsmdb: async notification connections were not marked active
      and would not deliver a signal of new pending events
    * emsmdb: repair EcDoAsyncWaitEx to immediately return when
      notifications are already pending in the session queue
    * emsmdb: fix UAF/crash when notifications are sent over RPCH
    * oxcical: upon reception of non-recurring appointments, the
      PidLidRecurring=0 property will be set now, as some Outlook
      versions fail to show appointments in the
      daily/weekly/monthly view if the property is absent
    * oxcmail: messages with timezones 08xx/09xx were mistreated
      as UTC
    * oxvcard: fixed a field shift in the ADR line's parsing and
      emission
    * ews: trim all C0 control codes from XML response
    * exmdb: limit production of PR_RTF_COMPRESSED variants of
      PR_BODY/PR_HTML when saving messages to IPM.Task objects
    * Plugged a memory leak that occurred when a multi-HTML
      Internet Mail is converted to MAPI
    * Plugged a memleak that occurred when HTML is converted to RTF
    * Plugged a logical memleak stemming from never shrinking the
      buffer of `FETCH RFC822` and related commands


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 3.6
    * exmdb: read multi-server map exclusively from SQL rather than
      exmdb_list.txt
    * oab: Gromox now serves Offline Addressbook files
    * ews: implement task creation, update, and property retrieval
    * ews: implement ExpandDL, GetPersona, CreateUserConfiguration,
      UpdateUserConfiguration, DeleteUserConfiguration,
      DeleteAttachment, AddDelegate, UpdateDelegate and
      RemoveDelegate operations
    * ews: implement calendar occurrence operations (create, update,
      delete) with timezone support
    * ews: implement lifecycle for meetings: invitation sending on
      UpdateItem, cancellations on DeleteItem, and responses to
      organizer on accept/decline
    * ews: generate read receipts when marking messages as read,
      honor SuppressReadReceipts on UpdateItem
    * oxdisco: support for impersonation username syntax with EAS
    * eml2mt: output GXMT data as soon as practical
  - Drop gcc16.patch (merged)


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 3.7
    * Outlook no longer loses appointsments when a shared calendar is opened
    * The "percentage complete" of an appointment was mangled when
      passing through EWS, which has been fixed.
    * EWS now synthesizes a value for the "Received Time" field.
    * AutoDiscover no longer erroneously advertises OWA API support.
      This had made it impossible for Thunderbird to connect.
    * EWS: Setting the read flag on a message no longer generates the
      E-2901/E-3418 error message on the server.
    * The EWS implementation now performs retrieval/update of Out Of
      Office settings such that it works in multi-server
      environments.
    * The use of Qmail as an outgoing SMTP server is now supported by
      the message sending routines.
    * Fix a case of Outlook notifications getting potentially suppressed.
    * Fix a case of `sqlite_busy on /var/lib/gromox/user/xyz: held by
      unknown` log message appearing in the exmdb daemon
      (gromox-http/istore).
    * Conversion from MAPI to iCal appoinments used the wrong UID for
      exceptions in a recurring series, which has been fixed.
    * Reading iCal timezone definitions mangled the daylightbias,
      which was fixed.
    * Logins with Outlook 2010 now work when Gromox is running with
      OpenSSL 3.


author: Lars Vogdt <lars@linux-schulserver.de>
changelog:
  - include two upstream patches:
    + Enhance_GMail_FAQ_keep_format_constant_in_the_file.patch
      Small enhancement in the FAQ for GMail to keep the used example
      in a constant format.
    + switch_from_io_socket_inet6_-_to_-_io_socket_ip.patch
      Remove the deprecated IO::Socket::INET6 dependency, since IPv6
      is now handled by IO::Socket::IP, which IO::Socket::SSL uses by
      default if available.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 4.25
    * New headers endian.h and scope.hpp
    * New define HXSIZEOF_UNITSEC64 for the maximum output size of
      HX_unit_seconds


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 4.26
    * Resolve integer truncation in HX_unit_seconds's output when the
      result were to exceeded 2^32 years or months or weeks.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 4.28
    * string: make HX_strtoull_sec support some ISO 8601 periods
    * string: add function HX_strtoull8601p_sec
    * opt: new getopt API that facilitates iterating over options and
      non-options and doing away with unnecessary memory allocations
    * opt: the implementation for the HXOPT_PTHRU flag was deleted
      (its use will now be rejected by the parser)


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 5.0
    * getopt6: new function set ``HX_getopt6`` which allows for
      parsing options with an iterative style.
    * getopt6: the result set no longer forces strdup-ed results on
      the user.
    * Deleted functions ``HX_getopt``, ``HX_getopt5`` (use
      ``HX_getopt6`` instead), ``HX_strnlen`` (use ``strnlen``
      instead), ``HX_strsep`` (use ``strtok_r`` instead),
      ``HX_stpltrim`` (no replacement).
    * The struct members ``HXclist::items``, ``HXdeque::items``,
      ``HXmap::items`` have changed from ``unsigned int`` to
      ``size_t``. The function ``HXdeque_to_vec`` has accordingly
      changed the result parameter type.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 5.1
    * getopt6: ``HXTYPE_STRP`` can now be used for HXoption::type
      for argument assignment without incurring strdup.
    * map: resolve corruption of HXmap::items field.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 5.3
    * Added the <libHX/tie.hpp> header containing the
      HX::unique_tie function
    * Make HX_isascii work in C23 mode


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 5.4
    * Resolved some compile warnings/errors with newer
      compilers, libcs, and -std modes.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 20231120
    * Table lookup was reworked
    * Build system changes related to Python


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 20231130
    * RTF body decompression used wrong argument order, now fixed
    * Improved Python Unicode handling


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to snapshot 0.9.2+git188 (c3c6242ed)
    * Fix emission of bugs Envelope-From to sendmail:// transports.
    * Add parsing feedback via parsingContext
  - Drop 0001-Avoid-generating-illegal-Envelope-From-with-sendmail.patch
    (merged)


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to snapshot 0.9.2+git191 (d03ad5f0)
    * url: fix an off-by-one error in parsing hostnames
    * url: strip leading slash from url-path
    * Support FIPS under OpenSSL 3


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to snapshot 0.9.2+git196 (d296c2d)
    * vmime: prevent loss of a space when a multi-word mailbox name
      contains an umlaut


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to snapshot 0.9.2+git203 (43b262bd)
    * another potential multiplication overflows
    * build: upgrade to C++17 when ICU is used
    * Fix a test failure in testNewFromString and
      pathTest::testGenerate


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Switch upstream location from vmime to wmime
  - Update to release 1.0.0
    * No further changes from last snapshot (0.9.2+git203)
  - Drop libvmime-soname.diff (merged in 1.0.0)
  - Rename libvmime-nodatetime.diff to nodate.patch


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 1.4
    * Conditionally provide
      ``PR_EC_WEBAPP_PERSISTENT_SETTINGS_JSON``,
      ``PR_EC_RECIPIENT_HISTORY_JSON`` if they is not already made
      available from mapi.so
    * Occurrence exceptions are treated as localtime
    * Fix erroneous end time for never-ending recurrences
    * Fix duplicate participants appearing in meeting objects
    * Do not process meeting requests locate in the "Sent Items"
      folder


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 1.5
    * Added defines for USER_PRIVILEGE bits exposed through
      PR_EC_ENABLED_FEATURES_L.
    * Fix invited participants disappearing from meetings when
      their tracking status is cleared.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 1.6
    * Add PidTagWlinkSection/PR_WLINK_SECTION value definitions
    * Util to convert restriction consts into strings
    * Fix invitees disappearing from meetings with resources


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 2.0
    * Correct logic bug in TaskRequest::isTaskRequestUpdated() that
      could cause soft-deleted task requests to be incorrectly
      processed when an associated task exists in the active folder.
    * Enhanced recurrence pattern validation with better error
      handling for invalid nday values.
    * More robust address book entry comparison in
      compareABEntryIDs().
    * Code quality improvements and stricter type safety throughout.
    * Performance optimizations through optimized function usage.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 5
    * Do away with %sysusers_generate_pre, it is not needed because
      system-user-gromox.%post runs before gromox.%pre anyway.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 6
    * Switch back to %sysusers_generate_pre because systemd-sysusers
      is not present in buildroots.


author: jengelh@inai.de
changelog:
  - Update to new upstream release 1.4.13
    * Prevent against various cases of null derefences,
      buffer overshooting, and fix some integer overflows.


author: asterios.dramis@gmail.com
changelog:
  - Update to version 1.4.15:
    * Fix underflow problem (boo#1038837 CVE-2017-8911)
      https://github.com/verdammelt/tnef/issues/23
    From version 1.4.14:
    * Use __builtin_mul_overflow when available.
    * Fixing Unicode related bugs introduced in previous release.
      https://github.com/verdammelt/tnef/issues/20


author: asterios.dramis@gmail.com
changelog:
  - Update to version 1.4.17:
    * Fix embarrassing version number problem.
    From version 1.4.16:
    * Several documentation fixes.
    * Small bug fix for UUID assertion.


author: Martin Hauke <mardnh@gmx.de>
changelog:
  - Update to version 0.11
    * Added UTF-8 detection to test runner.
    * use of free() instead of curl_free().
    * output the list of components correctly in the help output.
    * if query is not updated, leave it untouched.
    * expand the warning on "internal problem".
    * error when using an unrecognized URL component.


author: Martin Hauke <mardnh@gmx.de>
changelog:
  - Update to version 0.12
    * This is the same as 0.11 but with the version string set
      correctly.


author: Martin Hauke <mardnh@gmx.de>
changelog:
  - Update to version 0.13
    * Free allocated pointer on OOM error.
    * short options need no space separation for the argument anymore
    * trurl.1: use present tense.
    * trurl: only append the first iterate loop.
    * fix Coverity nits.


author: Martin Hauke <mardnh@gmx.de>
changelog:
  - Update to version 0.14
    * remove a suprious trailing newline from a warning.
    * trurl.1: document the exit codes.
    * add "strict:" as prefix to a get component.
    * casecompare: a strncasemp replacement.
    * support conditionally set scheme.


author: Martin Hauke <mardnh@gmx.de>
changelog:
  - Update to version 0.15
    - Makefile: fix LDFLAGS order; and don't force -Werror.
    - singleurl: fix query_is_modified.
    - trurl: "normalize" query pairs.
    - trurl: accept "control codes" in get output.
    - trurl: allow "control bytes" in JSON output
    - trurl: canonicalize the path.
    - trurl: fix silent error in json json function.
    - trurl: make --replace URL encode the provided data argument.
    - trurl: make must: prefix for gets return error for missing part.
    - trurl: on strdup() failures, exit immediately.
    - trurl: optimize the path append loop.
    - trurl: rename --force-replace to --replace-append.
    - trurl: use casecompare instead of a strncasecmp define.


author: Martin Hauke <mardnh@gmx.de>
changelog:
  - Update to version 0.15.1
    * manpage: fix 0.15 mistakes.
    * Makefile: check for trurl.1 before installing.
    * trurl: fix misbehavior on empty query param.
    * trurl: fix handling of query pair with blank left side by.


author: Martin Hauke <mardnh@gmx.de>
changelog:
  - Update to version 0.16
    * tests.json: add tests extracing URL encoded components.
    * trurl: normalize the fragment.
    * trurl: make sure URL encoded %-hex is done lowercase.
    * README: minor language polish.
    * trurl: silence --replace-append when appending.
    * trurl.md: document URL component details.
    * trurl.md: extend the component sections with more examples.
    * trurl: introduce --qtrim for trimming queries (only).
    * trurl.c: clarify the --help text for --urlencode.
    * tests.json: add more tests.
    * trurl: fix a few returns codes for out of memory.
    * tests: verify --get + --json rejects.
    * trurl.md: provide examples to more option descriptions.


author: Martin Hauke <mardnh@gmx.de>
changelog:
  - Update to version 0.16.1
    * Generate ZSH completions base on trurl.md.
    * Makefile: only create MANDIR when manpage is installed.
    * trurl: handle zero length query pairs.
  - Create subpackage for zsh-completion


author: Christoph G <foss@grueninger.de>
changelog:
  - Add trurl-395-exculdes-uppercase.patch to fix failing test,
    upstream from https://github.com/curl/trurl/pull/395


author: Gagah Pangeran <gagahpangeran29@gmail.com>
changelog:
  - update to 1.22.21:
    https://github.com/yarnpkg/yarn/releases/tag/v1.22.20
    https://github.com/yarnpkg/yarn/releases/tag/v1.22.21


author: Avindra Goolcharan <avindra@opensuse.org>
changelog:
  - update to 1.22.22:
    * Fix a hoisting issue when transitive dependencies themselves
      listed aliases as dependencies
    * Fix a punycode warning


