--- rxvt-unicode/Changes	2021/11/07 13:38:52	1.1268
+++ rxvt-unicode/Changes	2022/12/29 01:34:48	1.1289
@@ -37,17 +37,51 @@
 TODO: c&c perl socket via daemon-ext mechanism
 TODO: simplify extension metainfo cache, cache on disk
 TODO: URxvt::Ext::Name installs urxvt ext name and provides pod/manpage for URxvt::Ext::Name
-TODO: üpixel droppins idenrasm,ll,scrollup
+TODO: pixel droppins idenrasm,ll,scrollup
 TODO: cuu/cud and probably others default to 1 when arg is 0, not just missing, in xterm/vt102, but not in rxvt
 TODO: clean up the resource vs. long option mess, especially in the manpage.
-
 TODO: think about daemon delaying urxvt client exit.
 IDEA: use harfbuzz to render combining sequences, maybe also complex scripts
 TODO: https://github.com/bbidulock/icewm/issues/492 urxvt wrongfully(?) needa configurenotify after mapwindow? also, black border?
-TODO: match default regex does not match https://猫.移动/tmp/, but it does match if you special_decode the lines first. special_encode of the regex does not and would probably be the better solution -> investigate.
 
-TODO: rclock date overwrite
-	- libptytty is now an external dependency.
+TODO: rclock horribly time-biased
+TODO: rclock iso mode?
+
+TODO: printf "\e[4:3m" - "undercurl" - should probbaly be interpreted as underline, rather than \e[43m
+TODO: click through mode / https://shallowsky.com/blog/2017/Apr/06/
+
+	- implement a fix for CVE-2022-4170 (reported and analyzed by David Leadbeater).
+          While present in version 9.30, it should not be exploitable. It is exploitable
+          in versions 9.25 and 9.26, at least, and allows anybody controlling output to
+          the terminal to execute arbitrary code in the urxvt process.
+	- the background extension no longer requires off focus fading support
+          to be compiled in.
+        - the confirm-paste extension now offers a choice betwene pasting the original
+          or a sanitized version, and also frees up memory used to store the paste text
+          immediately.
+        - fix compiling without frills.
+        - fix rewrapMode: never.
+        - fix regression that caused urxvt to no longer emit responses
+          to OSC color queries other than OSC 4 ones.
+        - fix regression that caused urxvt to no longer process OSC 705.
+        - restore CENTURY to be 1900 to "improve" year parsing in urclock (or at
+          least go back to the old interpretation) (based on an analysis
+          by Tommy Pettersson).
+        - exec_async (used e.g. by the matcher extension to spawn processes) now
+          sets the URXVT_EXT_WINDOWID variable to the window id of the terminal.
+        - implement -fps option/refreshRate resource to change the default 60 Hz
+          maximum refresh limiter. I always wanted an fps option, but had to
+          wait for a user requesting it.
+
+9.30 Sat 27 Nov 2021 21:07:09 CET
+	- the background extension did not initialise properly when automatically
+          loaded via the OSC.
+	- new "on_attach" hook type implemented, to initialise late-loading
+          extensions.
+
+9.29 Mon 22 Nov 2021 18:07:14 CET
+	- libptytty (http://dist.schmorp.de/libptytty/) is now a required
+          external dependency.
 	- enable confirm-paste extension by default, can be disabled by e.g.
           URxvt.perl-ext: -confirm-paste
         - Key bindings specified with the -keysym option or with resources of
@@ -61,6 +95,7 @@
           abuse these sequences (typically in the name of security, but these
           sequences are not improving security). Also, bracketed paste mode
           is now under frills.
+        - add manpage for urclock.
         - confirm-paste wrongly considered brackets as ctrlchars (patch by
           Jakub Wilk, debian bug #995244).
 	- if urxvt cannot detect a good estimate for font width (because a font does
@@ -87,6 +122,12 @@
           extensions.
         - the background extension will now be autoloaded when the OSC 20 or 705
           sequence is received.
+        - added OSC 776 sequence to return character cell width, height and font
+          ascent, which is useful when using urxvt as slave to calculate window
+          size form or to row/column count.
+        - matcher extension documentation now points out some requirements for
+          regular expressions. the default url matching regex will now try
+          to match IRLs in addition to URLs.
 	- The view_start perl method now scrolls to the bottom also when the
 	  argument is greater than 0.
 	- eval scroll actions now scroll to the bottom when scrolling down and
@@ -104,6 +145,8 @@
           almost everywhere.
         - urxvt will now try tic -x first and only fall back to tic without -x
           when tic -x fails.
+        - fix urclock not erasing the old date on the clock face, causing
+          overdraw, plus a host of other small fixes and improvements.
         - shave off over 1K of code size from urclock by replacing the sine table
           with a slightly less accurate fixed point approximation.
         - do not specify indentation with =over in pod, this is no longer
@@ -114,6 +157,8 @@
         - extensions are now subjected to "use strict 'subs'".
         - avoid crashing when xft successfully opens a font but then somehow
           can't lock the face.
+        - locale_decode/encode api methods now pass through undef unchanged.
+        - fix undefined behaviour in the perl hook function, as diagnosed by clang.
 
 9.26 Fri May 14 19:14:14 CEST 2021
 	- ev_iouring.c was wrongly required during compilation, and wrongly
@@ -218,6 +263,7 @@
 	- a key combination bound to 'matcher:select' can now be used
 	  to cycle through the matches in matcher.
         - change perl integer accessors (->width et al.) into mutators.
+        - this version has ben verified to work with perl 5.8.3.
 
 9.21 Wed Dec 31 14:50:03 CET 2014
 	- the "moa redraw 8-bit british vintage colour management" release.