Update to 1.3.3:

Time for a release before the accumulated patches are old enough to vote.
Two new requirements: libX11 1.6 and a C89 preprocessor.

Alan Coopersmith (4):
      Replace sprintf with snprintf when looking up extension error strings
      Require ANSI C89 pre-processor, drop pre-C89 token pasting support
      Remove fallback for _XEatDataWords, require libX11 1.6 for it
      XeviGetVisualInfo: Free & clear *evi_return, not evi_return pointer

Keith Packard (1):
      Xge: remove warning messages about missing Xge extension event translations

Nathan Kidd (1):
      Stricter event error checking

Peter Hutterer (1):
      libXext 1.3.3
Updated x11/libXext to 1.3.3
Don't pass --enable-__cxa_atexit on SunOS, it is only available in newer
illumos releases and appears to cause issues there, seen most clearly in
qt3 uic segfaults.

Bump PKGREVISION of both gcc47 and gcc47-libs, gcc47-libs by more than one
as it has lagged behind and must be kept ahead of gcc47.
Note updates to lang/gcc47 and lang/gcc47-libs.
lex (libfl) is a runtime dependency.
flex (libfl) is a runtime dependency.
lex (libfl) is a runtime dependency.
Update to 31.0

Changelog:
    New
    Add the search field to the new tab page

    New
    Support of Prefer:Safe http header for parental control (learn more)

    New
    mozilla::pkix as default certificate verifier (learn more)

    New
    Block malware from downloaded files (learn more)

    New
    Partial implementation of the OpenType MATH table (section 6.3.6) see documentation about mathematical fonts and the MathML Torture Test for details

    New
    audio/video .ogg and .pdf files handled by Firefox if no application specified (Windows only)

    New
    Upper Sorbian [hsb] locale added

    Changed
    Removal of the CAPS infrastructure for specifying site-specific permissions (via capability.policy.* preferences). Most notably, attempts to use this functionality to grant access to the clipboard will no longer work. The sole exception is the checkloaduri permission, which may still be used as before to allow sites to load file:// URIs.

    HTML5
    WebVTT implemented and enabled (learn more)

    HTML5
    CSS3 variables implemented (learn more)

    Developer
    Developer Tools: Add-on Debugger (learn more)

    Developer
    Developer Tools: Canvas Debugger (learn more)

    Developer
    New Array built-in: Array.prototype.fill() (learn more)

    Developer
    New Object built-in: Object.setPrototypeOf() (learn more)

    Developer
    CSP 1.1 nonce-source and hash-source enabled by default

    Developer
    Developer Tools: Eyedropper tool added to the color picker (learn more)

    Developer
    Developer Tools: Editable Box Model (learn more)

    Developer
    Developer Tools: Code Editor improvements (learn more)

    Developer
    Developer Tools: Console stack traces (learn more)

    Developer
    Developer Tools: Copy as cURL (learn more)

    Developer
    Developer Tools: Styled console logs (learn more)

    Developer
    navigator.sendBeacon enabled by default (learn more)

    Developer
    Dialogs spawned from the onbeforeunload event no longer block access to the rest of the browser

    Fixed
    Search for partially selected link text from context menu (985824)

    Fixed
    Various security fixes

Fixed in Firefox 31
MFSA 2014-66 IFRAME sandbox same-origin access through redirect
MFSA 2014-65 Certificate parsing broken by non-standard character encoding
MFSA 2014-64 Crash in Skia library when scaling high quality images
MFSA 2014-63 Use-after-free while when manipulating certificates in the trusted cache
MFSA 2014-62 Exploitable WebGL crash with Cesium JavaScript library
MFSA 2014-61 Use-after-free with FireOnStateChange event
MFSA 2014-60 Toolbar dialog customization event spoofing
MFSA 2014-59 Use-after-free in DirectWrite font handling
MFSA 2014-58 Use-after-free in Web Audio due to incorrect control message ordering
MFSA 2014-57 Buffer overflow during Web Audio buffering for playback
MFSA 2014-56 Miscellaneous memory safety hazards (rv:31.0 / rv:24.7)
Updated www/firefox to 31.0
Apply some patches to fix x11/qt5-qtmultimedia build on SunOS.
Avoid GS define from sys/regset.h on SunOS.
Import HTTP-4000.2.17 as www/hs-HTTP,
packaged for wip by pho.

The HTTP package supports client-side web programming in Haskell. It lets
you set up HTTP connections, transmitting requests and processing the
responses coming back, all from within the comforts of Haskell. It's
dependent on the network package to operate, but other than that, the
implementation is all written in Haskell.

A basic API for issuing single HTTP requests + receiving responses is
provided. On top of that, a session-level abstraction is also on offer (the
BrowserAction monad); it taking care of handling the management of
persistent connections, proxies, state (cookies) and authentication
credentials required to handle multi-step interactions with a web server.

The representation of the bytes flowing across is extensible via the use of
a type class, letting you pick the representation of requests and responses
that best fits your use. Some pre-packaged, common instances are provided
for you (ByteString, String).
Make sure RPATH to libcrypto is added, fixes check-shlibs-elf.
+ hs-HTTP
Fix for http://www.kde.org/info/security/advisory-20140618-1.txt
Bump PKGREVISION.
Update R to 3.1.1

NEW FEATURES:

    * When attach() reports conflicts, it does so compatibly with
      library() by using message().

    * R CMD Sweave no longer cleans any files by default, compatibly
      with versions of R prior to 3.1.0.  There are new options
      --clean, --clean=default and --clean=keepOuts.

    * tools::buildVignette() and tools::buildVignettes() with clean =
      FALSE no longer remove any created files.  buildvignette() gains
      a keep argument for more cleaning customization.

    * The Bioconductor 'version' used by setRepositories() can now be
      set by environment variable R_BIOC_VERSION at runtime, not just
      when R is installed.  (It has been stated that Bioconductor will
      switch from 'version' 2.14 to 'version' 3.0 during the lifetime
      of the R 3.1 series.)

    * Error messages from bugs in embedded Sexpr code in Sweave
      documents now report the source location.

    * type.convert(), read.table() and similar read.*() functions get a
      new numerals argument, specifying how numeric input is converted
      when its conversion to double precision loses accuracy.  The
      default value, "allow.loss" allows accuracy loss, as in R
      versions before 3.1.0.

    * For some compilers, integer addition could overflow without a
      warning.  R's internal code for both integer addition and
      subtraction is more robust now.

    * The function determining the default number of knots for
      smooth.spline() is now exported, as .nknots.smspl().

    * dbeta(, a,b), pbeta(), qbeta() and rbeta() are now defined also
      for a = 0, b = 0, or infinite a and b (where they typically
      returned NaN before).

    * Many package authors report that the RStudio graphics device does
      not work correctly with their package's use of dev.new().  The
      new option dev.new(noRStudioGD = TRUE) replaces the RStudio
      override by the default device as selected by R itself, still
      respecting environment variables R_INTERACTIVE_DEVICE and
      R_DEFAULT_DEVICE.

    * readRDS() now returns visibly.

    * Modifying internal logical scalar constants now results in an
      error instead of a warning.

    * install.packages(repos = NULL) now accepts http:// or ftp:// URLs
      of package archives as well as file paths, and will download as
      required.  In most cases repos = NULL can be deduced from the
      extension of the URL.

    * The warning when using partial matching with the $ operator on
      data frames is now only given when
      options("warnPartialMatchDollar") is TRUE.

    * Package help requests like package?foo now try the package foo
      whether loaded or not.

    * General help requests now default to trying all loaded packages,
      not just those on the search path.

    * Added a new function promptImport(), to generate a help page for
      a function that was imported from another package (and presumably
      re-exported, or help would not be needed).
R update.
Fix "Use of each() on hash after insertion without resetting hash iterator
results in undefined behavior" complaint from perl 5.20
Added www/hs-HTTP version 4000.2.17
Samba-4.1.9 at wip.