FreeBSD/ports aa2ae4e — www/freenginx Makefile, www/nginx Makefile

www/{nginx,nginx-devel,freenginx}: Chase the ip_anon module update

Sponsored by:   Netzkommune GmbH
DeltaFile
+1-1www/nginx/Makefile
+1-1www/nginx-devel/Makefile
+1-1www/freenginx/Makefile
+3-33 files

FreeBSD/src d687c9f — stand/common disk.c

stand: Accept any device name in disk_parsedev()

disk_parsedev() only accepted names starting with "disk" or "vdisk", so other
DEVT_DISK devices using disk_fmtdev() could print a name they could not parse
back, e.g. "md0s2a:".
Skip any alphabetic prefix instead; devparse() has already matched it to the
devsw.

Reviewed by:    imp
Approved by:    imp
Sponsored by:   Netflix
Differential Revision:  https://ron-dev.freebsd.org/FreeBSD/src/pulls/97
DeltaFile
+8-8stand/common/disk.c
+8-81 files

FreeBSD/ports 270a520 — www/nginx-module-ip-anon Makefile distinfo

www/nginx-module-ip-anon: Update to 0.2.0

Adds $remote_addr_hash, a keyed one-way pseudonym of the client
address.  Logs can still tell clients apart and limit_req can act per
client, without an address being written anywhere.  The hash is
HMAC-MD5 so it also works in builds without OpenSSL, and without a
secret the variable is not defined at all.

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/nginx-module-ip-anon/distinfo
+1-1www/nginx-module-ip-anon/Makefile
+4-42 files

FreeBSD/ports d4af9ea — www/immich Makefile distinfo

www/immich: Update to 3.4.1

Shared link cover queries no longer drag, .hif files are recognised as
HEIF, and the Prometheus exporter listens on all interfaces.

Changelog:
https://github.com/immich-app/immich/releases/tag/v3.4.1

Sponsored by:   Netzkommune GmbH
DeltaFile
+3,127-3,127www/immich/pkg-plist
+5-5www/immich/distinfo
+1-1www/immich/Makefile
+3,133-3,1333 files

FreeBSD/ports 1f518f9 — www/immich-cli Makefile distinfo

www/immich-cli: Update to 3.4.1

Changelog:
https://github.com/immich-app/immich/releases/tag/v3.4.1

Sponsored by:   Netzkommune GmbH
DeltaFile
+5-5www/immich-cli/distinfo
+1-1www/immich-cli/Makefile
+6-62 files

FreeBSD/ports bc76035 — www/immich-ml Makefile distinfo

www/immich-ml: Update to 3.4.1

Changelog:
https://github.com/immich-app/immich/releases/tag/v3.4.1

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/immich-ml/distinfo
+1-1www/immich-ml/Makefile
+4-42 files

FreeBSD/src 46c2d93 — stand/efi/loader decompress.c

loader.efi: Allocate ram disks as EfiReservedMemoryType

The kernel adds EfiLoaderData ranges to physmap and reuses the pages, so a
memdisk=root is overwritten while the system runs. The kernel skips
EfiReservedMemoryType, which ACPI requires for a registered RAM disk.

Fixes:          85fb40bad584
Reviewed by:    imp
Approved by:    imp
Sponsored by:   Netflix
Differential Revision:  https://ron-dev.freebsd.org/FreeBSD/src/pulls/96
DeltaFile
+7-6stand/efi/loader/decompress.c
+7-61 files

FreeBSD/ports 47e2781 — net/tigervnc-viewer Makefile

net/tigervnc-viewer: Bump again to trigger rebuild against FLTK 1.4

PORTREVISION had been bumped at PR 296190 (320e46a) in the master port,
bumping to PORTREVISION=1 did not take effect. Bumping again.
DeltaFile
+1-1net/tigervnc-viewer/Makefile
+1-11 files

FreeBSD/src f4be858 — sys/dev/sound/pci envy24ht.c

snd_envy24ht: Fix out-of-bounds DMA buffer indexing

378e0c5c8967 reduced the number of playback channels from 5 to 1. This
introduced a regression, because the global DMA buffer indexing was not
adapted accordingly, which now results in kernel panics because of
out-of-bounds reads into the buffer. Additionally, because of wrong
indexing, recording channels ended up being serviced by the playback
part of envy24ht_intr().

Register 1 recording channel instead of 2 + sc->adcn, as the recording
DMA buffer only has room for 1 stereo stream. With 1 channel per
direction, give each channel the first index of its direction
(ENVY24HT_CHAN_PLAY_DAC1 and ENVY24HT_CHAN_REC_ADC1).

While here, fix the buffer wrap in envy24ht_r16sl(). It has to be
ch->size / ch->unit, but was copied verbatim from the 32-bit equivalent,
whose samples are twice as large, so 16-bit recording wrapped halfway
through the DMA buffer and never read the second half.


    [8 lines not shown]
DeltaFile
+11-22sys/dev/sound/pci/envy24ht.c
+11-221 files

FreeBSD/ports b2b13ac — sysutils/fjord distinfo Makefile, sysutils/fjord/files fjordd.in

sysutils/fjord: Update to 0.4.3

- Require cni-epair 1.2.1, which no longer sends the host's name to
  the DHCP server for every container
- Install sbin/fjord, a link to fjordd that runs its new CLI
- rc.d: start after appjail

Changelog:      https://github.com/daemonless/fjord/releases/tag/v0.4.3
Reviewed by:    dtxdf
Approved by:    dtxdf (mentor)
Differential Revision:  https://reviews.freebsd.org/D61442
DeltaFile
+7-4sysutils/fjord/Makefile
+3-3sysutils/fjord/distinfo
+1-1sysutils/fjord/files/fjordd.in
+11-83 files

FreeBSD/ports d3e3316 — devel/vectorscan Makefile distinfo, devel/vectorscan/files patch-CMakeLists.txt patch-cmake_build__wrapper.sh

devel/vectorscan: update to 5.4.14

 - Update 5.4.13 to 5.4.14
 - Drop patch for cmake/build_wrapper.sh; upstream rewrote it to use
   nm -f posix, which works with llvm-nm
 - Patch cmake/build_wrapper.cmake so the new libcsyms.sh step uses
   /lib/libc.so.7 instead of libc.so.6 (otherwise the libc symbol list
   is silently empty) and runs the script with sh instead of bash
 - aarch64: add elf_aux_info()-based SVE/SVE2 detection for the fat
   runtime dispatcher; upstream only implements it on Linux, so SVE
   variants were never selected on FreeBSD.  Also require SVE2 bitperm
   for the sve2 variant, since it is built with +sve2-bitperm.
   Verified to fall back to NEON on a non-SVE CPU (eMAG); not yet
   tested on SVE hardware.
DeltaFile
+38-0devel/vectorscan/files/patch-src_util_arch_arm_cpuid__inline.h
+0-14devel/vectorscan/files/patch-cmake_build__wrapper.sh
+14-0devel/vectorscan/files/patch-cmake_build__wrapper.cmake
+4-4devel/vectorscan/files/patch-CMakeLists.txt
+3-3devel/vectorscan/distinfo
+1-1devel/vectorscan/Makefile
+60-226 files

FreeBSD/ports e7e7e92 — editors/openoffice-devel distinfo Makefile, editors/openoffice-devel/files patch-rhino_makefile.mk patch-external__deps.lst

editors/openoffice-devel: update to a new snapshot

Upgrade to a newer snapshot of the upstream trunk branch.
DeltaFile
+13-0editors/openoffice-devel/files/patch-external__deps.lst
+11-0editors/openoffice-devel/files/patch-rhino_makefile.mk
+5-3editors/openoffice-devel/distinfo
+5-3editors/openoffice-devel/Makefile
+34-64 files

FreeBSD/ports 7ea5a0b — misc/py-litellm Makefile.crates Makefile, misc/py-litellm/files patch-pyproject.toml

misc/py-litellm: Update to 1.109.0

Changelog: https://github.com/BerriAI/litellm/releases/tag/v1.109.0

Reported by:    portscout
DeltaFile
+9-9misc/py-litellm/distinfo
+3-3misc/py-litellm/Makefile.crates
+4-2misc/py-litellm/Makefile
+1-1misc/py-litellm/files/patch-pyproject.toml
+17-154 files

FreeBSD/ports 4f90282 — devel/py-python-discovery Makefile distinfo

devel/py-python-discovery: Update to 1.9.5

ChangeLog:

1. https://github.com/tox-dev/python-discovery/releases/tag/1.7.0
2. https://github.com/tox-dev/python-discovery/releases/tag/1.8.0
3. https://github.com/tox-dev/python-discovery/releases/tag/1.9.0
4. https://github.com/tox-dev/python-discovery/releases/tag/1.9.1
5. https://github.com/tox-dev/python-discovery/releases/tag/1.9.2
6. https://github.com/tox-dev/python-discovery/releases/tag/1.9.4
7, https://github.com/tox-dev/python-discovery/releases/tag/1.9.5

Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+3-3devel/py-python-discovery/distinfo
+1-1devel/py-python-discovery/Makefile
+4-42 files

FreeBSD/ports c59c6d4 — databases/mongodb70 Makefile distinfo

databases/mongodb70: 7.0.48

Announcement:
https://www.mongodb.com/community/forums/t/mongodb-7-0-48-is-released/344844?u=r_k

Release Notes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7048---nov-10-2026

Security:       CVE-2026-118383 https://www.mongodb.com/community/forums/t/important-mongodb-security-update-available-action-required-november-10-2026/344843?u=r_k
Security:       a lot more CVEs in the Release Notes
DeltaFile
+3-3databases/mongodb70/distinfo
+1-1databases/mongodb70/Makefile
+4-42 files

FreeBSD/ports 4f4f1b1 — security/libressl-devel Makefile distinfo

security/libressl-devel: Update to 4.4.1

Quarterly is still on LibreSSL 4.3 branch

Security:       3047b511-dde7-11f1-8135-8447094a420f
MFH:            2026Q4
(cherry picked from commit 9edd19e562cc4be35bd96435d3bda4852ac379cb)
DeltaFile
+3-3security/libressl-devel/distinfo
+1-1security/libressl-devel/Makefile
+4-42 files

FreeBSD/ports 5403508 — security/vuxml/vuln 2026.xml

security/vuxml: Update version ranges for LibreSSL
DeltaFile
+3-1security/vuxml/vuln/2026.xml
+3-11 files

FreeBSD/ports 9edd19e — security/libressl-devel Makefile distinfo

security/libressl-devel: Update to 4.4.1

Security:       3047b511-dde7-11f1-8135-8447094a420f
MFH:            2026Q4
DeltaFile
+3-3security/libressl-devel/distinfo
+1-2security/libressl-devel/Makefile
+4-52 files

FreeBSD/ports 11f3eaf — www/nextcloud-contacts Makefile distinfo

www/nextcloud-contacts: Update to 8.10.0
DeltaFile
+3-3www/nextcloud-contacts/distinfo
+1-1www/nextcloud-contacts/Makefile
+4-42 files

FreeBSD/ports 2b108e9 — www/nextcloud-notes Makefile distinfo

www/nextcloud-notes: Update to 6.1.1
DeltaFile
+3-3www/nextcloud-notes/distinfo
+1-1www/nextcloud-notes/Makefile
+4-42 files

FreeBSD/ports 51f4681 — devel/php-composer Makefile distinfo

devel/php-composer: Update to 2.11.2

PR:             300704
Approved by:    Naram Qashat <cyberbotx at cyberbotx.com> (maintainer)
DeltaFile
+3-3devel/php-composer/distinfo
+1-1devel/php-composer/Makefile
+4-42 files

FreeBSD/ports ad52601 — devel/git Makefile pkg-plist

devel/git: Update to 2.56.1

This is a set of coordinated security fix releases addressing
CVE-2026-111760, CVE-2026-113408, CVE-2026-114466, CVE-2026-114467,
CVE-2026-114469 and CVE-2026-105437.

Security:       24e1443d-dd3b-11f1-b094-bc2411e144f8
Sponsored by:   Rubicon Communications, LLC ("Netgate")

(cherry picked from commit 7d40a651884b57e4f196f63511e85fdfd4edc0ad)
DeltaFile
+7-7devel/git/distinfo
+6-0devel/git/pkg-plist
+1-1devel/git/Makefile
+14-83 files

FreeBSD/ports 71a3c2d — security/libressl Makefile distinfo

security/libressl: Update to 4.3.5

Quarterly is still on LibreSSL 4.3 branch

Security:       3047b511-dde7-11f1-8135-8447094a420f
MFH:            2026Q4
(cherry picked from commit b1b326d995176cb56beebc126e6916e0c29ca4f0)
DeltaFile
+73-0security/libressl/Makefile.new
+3-3security/libressl/distinfo
+1-1security/libressl/Makefile
+77-43 files

FreeBSD/ports dd57765 — textproc/hs-pandoc Makefile Makefile.cabal, textproc/hs-pandoc/files patch-__cabal__deps_crypton-2.0.1_cbits_crypton__f2m.c patch-__cabal__deps_crypton-2.2.6_cbits_crypton__f2m.c

textproc/hs-pandoc: Update 3.13 => 3.14
DeltaFile
+65-181textproc/hs-pandoc/distinfo
+28-73textproc/hs-pandoc/Makefile.cabal
+10-0textproc/hs-pandoc/files/patch-__cabal__deps_crypton-2.2.6_cbits_crypton__f2m.c
+0-9textproc/hs-pandoc/files/patch-__cabal__deps_crypton-2.0.1_cbits_crypton__f2m.c
+1-1textproc/hs-pandoc/Makefile
+104-2645 files

FreeBSD/ports 5d814c2 — math/py-highspy distinfo Makefile

math/py-highspy: update 1.15.1 → 1.16.0
DeltaFile
+3-7math/py-highspy/Makefile
+3-3math/py-highspy/distinfo
+6-102 files

FreeBSD/ports ab6716b — cad/netgen-lvs Makefile distinfo

cad/netgen-lvs: update 1.5.325 → 1.5.328
DeltaFile
+3-3cad/netgen-lvs/distinfo
+1-1cad/netgen-lvs/Makefile
+4-42 files

FreeBSD/ports cb53233 — science/xdrawchem Makefile distinfo

science/xdrawchem: update 2.0.1 → 2.1.0
DeltaFile
+3-3science/xdrawchem/distinfo
+2-2science/xdrawchem/Makefile
+5-52 files

FreeBSD/ports 2ccc2c5 — math/coin-or-mumps pkg-plist Makefile

math/coin-or-mumps: update 3.0.3 → 3.0.11
DeltaFile
+5-5math/coin-or-mumps/distinfo
+2-3math/coin-or-mumps/Makefile
+1-1math/coin-or-mumps/pkg-plist
+8-93 files

FreeBSD/ports 2a867a0 — math/highs Makefile distinfo

math/highs: update 1.15.1 → 1.16.0
DeltaFile
+18-11math/highs/pkg-plist
+3-3math/highs/distinfo
+2-2math/highs/Makefile
+23-163 files

FreeBSD/ports 627725f — misc/github-copilot-cli Makefile distinfo

misc/github-copilot-cli: update 1.0.108 → 1.0.109
DeltaFile
+5-5misc/github-copilot-cli/distinfo
+1-1misc/github-copilot-cli/Makefile
+6-62 files