mail/milter-skem: Update 1.0.2 => 1.0.3
Skem can now tell a stale socket -- left behind by an instance, that
died without cleaning up -- from one, another instance is really
listening on: a connect(2) to the abandoned entry fails with
ECONNREFUSED, because the kernel clears the vnode's pointer at the
listening socket, when the owner goes away. Such an entry is unlinked
at once, instead of costing the half-minute of exponential back-off,
the earlier versions spent before giving up. Whenever the question can
not be answered -- we may not be allowed to connect, for example -- the
old waiting behavior remains.
Declare the (custom, not BSD) license, which also quiets bsd.port.mk.
Prefer mail/libmilter, whenever it is installed -- and fall back on it,
when the base system has none of its own: a world built WITHOUT_SENDMAIL
leaves nothing but a dangling /usr/lib/libmilter.so behind, which the
earlier test for the base's mfapi.h did not catch.
[10 lines not shown]
mail/milter-skem: Update 1.0.2 => 1.0.3
Skem can now tell a stale socket -- left behind by an instance, that
died without cleaning up -- from one, another instance is really
listening on: a connect(2) to the abandoned entry fails with
ECONNREFUSED, because the kernel clears the vnode's pointer at the
listening socket, when the owner goes away. Such an entry is unlinked
at once, instead of costing the half-minute of exponential back-off,
the earlier versions spent before giving up. Whenever the question can
not be answered -- we may not be allowed to connect, for example -- the
old waiting behavior remains.
Declare the (custom, not BSD) license, which also quiets bsd.port.mk.
Prefer mail/libmilter, whenever it is installed -- and fall back on it,
when the base system has none of its own: a world built WITHOUT_SENDMAIL
leaves nothing but a dangling /usr/lib/libmilter.so behind, which the
earlier test for the base's mfapi.h did not catch.
[8 lines not shown]
games/py-mnemosyne-proj: Update to 2.11.1
- mnemosyne/web_server/web_server.py imports cgi, which Python 3.13
removed, so the web-server review feature (mnemosyne --webserver and
the Qt web server component) fails to load. Depend on
www/py-legacy-cgi on 3.13+ (2.11.1 declares it for all versions).
- RUN_DEPENDS follow upstream's declared requirements: add cherrypy,
decorator, pytest, pytest-timeout and sphinx; drop PyOpenGL, which
upstream does not declare and nothing imports.
- 2.11.1 requires Python 3.10.
- 2.11.1 installs its 33 icons into a top-level site-packages/pixmaps/
directory; this is intentional, the UI looks for them there.
While here, enable the upstream pytest suite. Some tests are still failing on
FreeBSD and are ignored for now
PR: 299911
www/code-server: Update to 4.143.1
Compressed request bodies are now rejected instead of being
decompressed. Boolean flags can be set to false on the command line
and in the config file, and path options starting with a tilde are
expanded. A Turkish localization was added. The Markdown editor
supports renaming file links in place, and the editor raises its
highlight limit from 500 to 5000 diagnostics per file.
Changelog: https://github.com/coder/code-server/releases
Obtained from: editors/vscode
Sponsored by: Netzkommune GmbH
www/nginx-module-ndk: Update to 0.3.6
Whether nginx carries ngx_http_script_complex_value_end_code_t was
decided by comparing nginx_version against 1031003. The interface was
backported into the stable branch with 1.30.4, which reports 1030006, so
the check said no while it was there. configure probes the header now.
Measured against 1.30.4 with array-var's own suite: 48 of 48 cases
failed before, 10 after, which is that branch's baseline anyway.
Changelog: https://github.com/openresty/ngx_devel_kit/compare/v0.3.5...v0.3.6
Sponsored by: Netzkommune GmbH
www/nginx-module-auth-ldap: Update to 0.2.4
Four defects found by Raivo Hool: a client that left during an
authentication kept the connection it held and stayed in the waiting
queue, request_timeout was armed on an event where it was noticed only
by chance, an empty user name went into the LDAP search, and
auth_ldap_cache_size above 8872 entries was silently capped.
Changelog: https://github.com/sysadmin-labs/nginx-auth-ldap-module/releases/tag/v0.2.4
Sponsored by: Netzkommune GmbH
[NEW PORT] net/turnd: Minimal NAT traversal and UDP relay server
turnd is Minimal NAT traversal and UDP relay server for FreeBSD, built with
a custom protocol inspired by STUN (RFC 8489) / TURN (RFC 8656) standards.
turnd is a lightweight UDP server for FreeBSD that provides basic NAT traversal
and peer-to-peer datagram relaying. It uses a compact custom protocol inspired
by STUN and TURN: clients can obtain their observed IP address and port, and the
server can forward UDP packets to a peer. The server listens on UDP port 1213
and supports IPv4 and IPv6.
Co-authored-by: Michael Osipov <michaelo at FreeBSD.org>
WWW: https://github.com/Yeatol/freebsd_turnd
PR: 299434
java/openjdk17: Version 17.0.21.0.2 including CA fixes
Upgrade port to latest upstream, including fixes for eMudhra CA
certificate issues.
MFH: 2026Q4
Sponsored by: The FreeBSD Foundation
(cherry picked from commit 7f04d4602d3fe08f8a84fe0b3a851524f93ee6b7)
java/openjdk17: Version 17.0.21.0.2 including CA fixes
Upgrade port to latest upstream, including fixes for eMudhra CA
certificate issues.
MFH: 2026Q4
Sponsored by: The FreeBSD Foundation
java/openjdk21: Version 21.0.13.0.2 including CA fixes
Upgrade port to latest upstream, including fixes for eMudhra CA
certificate issues.
MFH: 2026Q4
Sponsored by: The FreeBSD Foundation
(cherry picked from commit 2fbb3d6232e700f3e94d8ba61776cbdb2f0ae0d5)
java/openjdk21: Version 21.0.13.0.2 including CA fixes
Upgrade port to latest upstream, including fixes for eMudhra CA
certificate issues.
MFH: 2026Q4
Sponsored by: The FreeBSD Foundation
java/openjdk25: Version 25.0.5.0.2 including CA fixes
Upgrade port to latest upstream, including fixes for eMudhra CA
certificate issues.
MFH: 2026Q4
Sponsored by: The FreeBSD Foundation
(cherry picked from commit 9b5f1358f1f7f8fbdd85d80d66b8c49a286f09a3)
java/openjdk25: Version 25.0.5.0.2 including CA fixes
Upgrade port to latest upstream, including fixes for eMudhra CA
certificate issues.
MFH: 2026Q4
Sponsored by: The FreeBSD Foundation
net-mgmt/librenms: Remove sudo dependency
At one time it was required for running certain scripts.
Add an UPDATING entry.
While here, notice and correct the date for the previous entry
from d90f5893
Reported by: SgtMalicious
Tested by: me
˚¨# "Pull Request" and "Differential Revision" require the *full* GitHub or