FreeBSD/ports 075d4a2math/octave-forge Makefile

math/octave-forge: Add new optional dependency.

- Add new optional dependency math/octave-forge-drafting.
- Update to 20260818.
DeltaFile
+3-3math/octave-forge/Makefile
+3-31 files

FreeBSD/src b567434stand/efi/boot1 zfs_module.c, stand/libsa/zfs zfs.c zfsimpl.c

stand: set st_dev/st_ino in the loader's ZFS stat for veriexec

The loader's ZFS implementation never set st_dev or st_ino in
zfs_dnode_stat(). With an uninitialized struct stat, veriexec's device
comparison in lib/libsecureboot/veopen.c read stack garbage and skipped
the matching manifest entry, failing with a spurious "no entry" on ZFS
root under UEFI Secure Boot.

Rather than zeroing the device (which would break veriexec's ability to
tell apart the same path on different datasets), populate st_dev and
st_ino with the same intrinsic identifiers the kernel uses:

- st_dev = the dataset's ds_fsid_guid (as the kernel does via
  dmu_objset_fsid_guid()/dsl_dataset_fsid_guid()), already read in
  zfs_mount_dataset() and now propagated through struct zfsmount.
- st_ino = the object number resolved in zfs_lookup(), propagated
  through struct file (the loader's equivalent of the kernel's z_id).

dev_t and ino_t are 64-bit on FreeBSD, so both are assigned directly

    [14 lines not shown]
DeltaFile
+48-6stand/libsa/zfs/zfsimpl.c
+5-3stand/libsa/zfs/zfs.c
+3-2stand/efi/boot1/zfs_module.c
+56-113 files

FreeBSD/ports 9ba146bmath/octave-forge-octave_ffmpeg_free Makefile distinfo

math/octave-forge-octave_ffmpeg_free: Update to 2.0.0.

- Build will work when ffmpeg updates to version 9.

PR:             297384
Reported by:    Daniel Engberg <diizzy at FreeBSD.org>
<If someone else reported the issue>
DeltaFile
+3-3math/octave-forge-octave_ffmpeg_free/distinfo
+1-2math/octave-forge-octave_ffmpeg_free/Makefile
+4-52 files

FreeBSD/ports 27b811bmath Makefile, math/octave-forge-drafting distinfo pkg-descr

math/octave-forge-drafting: New port.

Geometry, CAD Input/Output and Technical Drawing for octave.
DeltaFile
+23-0math/octave-forge-drafting/Makefile
+8-0math/octave-forge-drafting/pkg-descr
+3-0math/octave-forge-drafting/distinfo
+1-0math/Makefile
+35-04 files

FreeBSD/ports ab208c4graphics/wayland Makefile distinfo

graphics/wayland: Update to 1.26.0
DeltaFile
+4-4graphics/wayland/pkg-plist
+3-3graphics/wayland/distinfo
+1-1graphics/wayland/Makefile
+8-83 files

FreeBSD/ports bb862b9graphics/py-exiv2 distinfo Makefile, graphics/py-exiv2/files patch-tests_test__value.py patch-pyproject.toml

graphics/py-exiv2: Update 0.18.1 => 0.19.0, take maintainership

Changelog:
1/ Add exiv2.XmpParser.encode() to Python interface.
2/ Fix crash when getting strings of malformed values.
3/ Python 3.15 compatibility.
https://github.com/jim-easterbrook/python-exiv2/releases/tag/0.19.0
https://github.com/jim-easterbrook/python-exiv2/blob/0.19.0/CHANGELOG.txt

- Add STRIP_CMD in post-install.

PR:             297603
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q3

(cherry picked from commit 59d9d76281846c9e3427ebecd3da6b28aea5f631)
DeltaFile
+20-0graphics/py-exiv2/files/patch-pyproject.toml
+6-3graphics/py-exiv2/Makefile
+3-3graphics/py-exiv2/distinfo
+2-2graphics/py-exiv2/files/patch-tests_test__value.py
+31-84 files

FreeBSD/ports 59d9d76graphics/py-exiv2 distinfo Makefile, graphics/py-exiv2/files patch-tests_test__value.py patch-pyproject.toml

graphics/py-exiv2: Update 0.18.1 => 0.19.0, take maintainership

Changelog:
1/ Add exiv2.XmpParser.encode() to Python interface.
2/ Fix crash when getting strings of malformed values.
3/ Python 3.15 compatibility.
https://github.com/jim-easterbrook/python-exiv2/releases/tag/0.19.0
https://github.com/jim-easterbrook/python-exiv2/blob/0.19.0/CHANGELOG.txt

- Add STRIP_CMD in post-install.

PR:             297603
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q3
DeltaFile
+20-0graphics/py-exiv2/files/patch-pyproject.toml
+6-3graphics/py-exiv2/Makefile
+3-3graphics/py-exiv2/distinfo
+2-2graphics/py-exiv2/files/patch-tests_test__value.py
+31-84 files

FreeBSD/ports fafe124Mk/Scripts qa.sh

Mk/Scripts/qa.sh: Filter baselibs() input to improve performance

After the baselibs() fix in f0f863b1a2d6, readelf is executed for each
result from find(1).  There are two concerns with this fix:

1. -exec readelf -d {} \; drops the filename from the error messages

readelf prints "File: <name>" headers only when it is supplied with two
or more files, and baselibs() uses ${file} from those headers.  So, the
two err() messages in baselibs() will break.

This is moot for now, though, because nothing in the ports tree can
trigger these errors.  Those base soname versions for libarchive and
libedit are long gone.

2. Performance hit with one readelf execution per staged file

The costs are high for ports that stage many files.  For
emulators/linux_base-rl9, the find returns over 30k hits that the while

    [12 lines not shown]
DeltaFile
+15-1Mk/Scripts/qa.sh
+15-11 files

FreeBSD/src b39457bsys/dev/virtio/p9fs virtio_p9fs.c

virtio_p9fs: Disallow detach if a session is in progress

PR:             295453
Reviewed by:    markj
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D57500
DeltaFile
+4-0sys/dev/virtio/p9fs/virtio_p9fs.c
+4-01 files

FreeBSD/src c08a97fsys/netpfil/ipfilter/netinet ip_nat.c

ipfilter: Fix checksum update for NAT_DIVERTOUT

When taking a snapshot of the before ip_len (s1) for comparison with the
after-translated ip_len (s2), we must convert it from network to host
byte order before we can use it. Add the missing ntohs() call.

PR:             296944
MFC after:      3 days
DeltaFile
+1-1sys/netpfil/ipfilter/netinet/ip_nat.c
+1-11 files

FreeBSD/ports cc12e00databases Makefile

databases/postgresql19-*: Connect to the tree

PR:             297634
Approved by:    Palle Girgensohn <girgen at FreeBSD.org> (pgsql, maintainer, blanket - fix tree)
Fixes:          60c44ec8a907 (Update to latest versions)
Sponsored by:   UNIS Labs
DeltaFile
+8-0databases/Makefile
+8-01 files

FreeBSD/ports 627ec0esecurity/wpa_supplicant Makefile, security/wpa_supplicant-devel Makefile

security/wpa_supplicant*: Fix EAPOL_TEST build for non-standard SSL_DEFAULT

The post-build target does not have the same environment variables setup
as the do-build target. This results in the eapol_test binary getting
compiled against the headers of the TLS library specified in
SSL_DEFAULT, but getting linked against the TLS library from the base
system regardless of SSL_DEFAULT, causing build failures when
SSL_DEFAULT is set to a different TLS library/version than the on from
the base system.

Fix this by not using the post-build target to build the eapol_test
binary, but instead conditionally add the eapol_test target to
TARGET_ALL if the EAPOL_TEST option is enabled for the port.

Signed-off-by: Pascal Ernster <git at hardfalcon.net>
DeltaFile
+5-3security/wpa_supplicant29/Makefile
+5-3security/wpa_supplicant210/Makefile
+5-3security/wpa_supplicant/Makefile
+5-3security/wpa_supplicant-devel/Makefile
+20-124 files

FreeBSD/ports d72502dnet/amnezia-kmod Makefile distinfo

net/amnezia-kmod: Update 2.0.11 => 2.0.12

Changelog:
- if_amn: wg_crypto: validate OCF authentication result.
- Check crp_etype after crypto_dispatch() so packets with an invalid
  Poly1305 tag are rejected.
- Require a synchronous crypto session before using a stack-allocated
  request.
https://github.com/vgrebenschikov/wireguard-amnezia-kmod/releases/tag/v2.0.12

PR:             297625
Security:       CVE-2026-58085
Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit d128f141148e0349f36cb8c19c6d7d8e71df7e4a)
DeltaFile
+3-3net/amnezia-kmod/distinfo
+1-1net/amnezia-kmod/Makefile
+4-42 files

FreeBSD/ports d128f14net/amnezia-kmod Makefile distinfo

net/amnezia-kmod: Update 2.0.11 => 2.0.12

Changelog:
- if_amn: wg_crypto: validate OCF authentication result.
- Check crp_etype after crypto_dispatch() so packets with an invalid
  Poly1305 tag are rejected.
- Require a synchronous crypto session before using a stack-allocated
  request.
https://github.com/vgrebenschikov/wireguard-amnezia-kmod/releases/tag/v2.0.12

PR:             297625
Security:       CVE-2026-58085
Sponsored by:   UNIS Labs
MFH:            2026Q3
DeltaFile
+3-3net/amnezia-kmod/distinfo
+1-1net/amnezia-kmod/Makefile
+4-42 files

FreeBSD/src 7334d92share/man/man4 Makefile

share/man/man4: Move non-USB man pages out of MK_USB block

uart(4), unix(4) and the gzero(4) MLINK are not USB things, but they
were in the .if ${MK_USB} != "no" block.  So if we build with
WITHOUT_USB, these man pages are lost.  Move them out of the block.

Sponsored by:   The FreeBSD Foundation

(cherry picked from commit 1100d9eca9cb2860c58633a9176dd11a30850da4)
DeltaFile
+3-3share/man/man4/Makefile
+3-31 files

FreeBSD/src fd8ca3dshare/man/man4 Makefile

share/man/man4: Move non-USB man pages out of MK_USB block

uart(4), unix(4), veriexec(4) and the gzero(4) MLINK are not USB
things, but they were in the .if ${MK_USB} != "no" block.  So if we
build with WITHOUT_USB, these man pages are lost.  Move them out of
the block.

Sponsored by:   The FreeBSD Foundation

(cherry picked from commit 1100d9eca9cb2860c58633a9176dd11a30850da4)
DeltaFile
+4-4share/man/man4/Makefile
+4-41 files

FreeBSD/src 31f9f09lib/libc/tests/gen Makefile fts_capsicum_test.c

fts: add fts_capsicum_test.c

Add three test cases verifying fts(3) Capsicum capability mode:

- fts_dirfd_valid: verifies fts_dirfd is set for all non-root
  entries and openat(fts_dirfd, fts_name) identifies the same
  inode as fts_accpath
- fts_dirfd_capsicum: verifies complete fts traversal works in
  Capsicum capability mode using fts_openat() and fts_dirfd
- fts_dirfd_deep_tree: verifies fts_dirfd + fts_name is correct
  at all directory depths (7 non-root entries)

Sponsored by:   Google LLC (GSoC 2026)
Reviewed by:    asomers
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2332
DeltaFile
+210-0lib/libc/tests/gen/fts_capsicum_test.c
+1-0lib/libc/tests/gen/Makefile
+211-02 files

FreeBSD/ports 1931e0cjapanese/fcitx5-skk Makefile

japanese/fcitx5-skk: Depend on ECM unconditionally

The top-level CMakeLists.txt calls find_package(ECM 1.0.0 REQUIRED)
unconditionally, but the port only declared the dependency under the QT6
option, so configure fails with WITHOUT_QT6.  Move it out of the option
and make it build-only.  ECM is listed in _USE_KDE_LATEST, so USES=kde:6
can be dropped along with it, as done in 95f9a6808973 for the other
fcitx5 ports.

PR:             297622
Approved by:    osa (mentor)
DeltaFile
+6-3japanese/fcitx5-skk/Makefile
+6-31 files

FreeBSD/ports b843912japanese/fcitx5-cskk Makefile

japanese/fcitx5-cskk: Depend on ECM unconditionally

The top-level CMakeLists.txt calls find_package(ECM 1.0.0 REQUIRED)
unconditionally, but the port only declared the dependency under the QT5
option, so configure fails with WITHOUT_QT5.  Move it out of the option
and make it build-only.  ECM is listed in _USE_KDE_LATEST, so USES=kde:5
can be dropped along with it, as done in 95f9a6808973 for the other
fcitx5 ports.

While here, fix the indentation of PORTREVISION.

PR:             297623
Approved by:    syobon at syobon.net (maintainer)
Approved by:    osa (mentor)
DeltaFile
+5-5japanese/fcitx5-cskk/Makefile
+5-51 files

FreeBSD/ports fd75b23www/vimb distinfo Makefile

www/vimb: Update to 4.0.0

https://raw.githubusercontent.com/fanglingsu/vimb/refs/tags/4.0.0/CHANGELOG.md

PR:             297422
Approved by:    osa (mentor)
DeltaFile
+3-3www/vimb/distinfo
+3-3www/vimb/Makefile
+6-62 files

FreeBSD/ports 8f1408afinance/kmymoney/files patch-CMakeLists.txt

finance/kmymoney: unbreak build (+)

KMyMoney require SqlPrivate component from Qt6 but missed in dependency declaration via find_package

/wrkdirs/usr/ports/finance/kmymoney/work/kmymoney-5.2.1/kmymoney/plugins/sqlcipher/qsql_sqlite.cpp:37:10: fatal error: 'QtSql/private/qsqlcachedresult_p.h' file not found
   37 | #include <QtSql/private/qsqlcachedresult_p.h>
      |          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1 error generated.

Reported by:    bulk -t
DeltaFile
+9-2finance/kmymoney/files/patch-CMakeLists.txt
+9-21 files

FreeBSD/ports 12b3d76editors/vscode distinfo pkg-plist, editors/vscode/files patch-src_vs_code_electron-main_app.ts patch-remote_package.json

editors/vscode: Update to 1.133.0

Changelog: https://code.visualstudio.com/updates/v1_133

Reported by:    GitHub (watch releases)
DeltaFile
+692-727editors/vscode/pkg-plist
+7-7editors/vscode/distinfo
+3-3editors/vscode/files/patch-package.json
+2-2editors/vscode/files/patch-src_vs_code_electron-main_app.ts
+2-2editors/vscode/files/patch-remote_package.json
+2-2editors/vscode/files/patch-build_gulpfile.vscode.ts
+708-7432 files not shown
+710-7468 files

FreeBSD/ports 2efbc33security Makefile, security/periodic-filter-vuxml pkg-descr pkg-message

security/periodic-filter-vuxml: New port
DeltaFile
+118-0security/periodic-filter-vuxml/files/400.filter-vuxml.in
+28-0security/periodic-filter-vuxml/Makefile
+25-0security/periodic-filter-vuxml/pkg-message
+2-0security/periodic-filter-vuxml/pkg-descr
+1-0security/Makefile
+174-05 files

FreeBSD/src 44cddaasys/dev/netmap if_ptnet.c, sys/dev/virtio/network if_vtnet.c virtio_net.h

vtnet: move offload functions to virtio_net.h to share them

Move the functions vtnet_rxq_csum() and vtnet_txq_offload() and the
subfunctions they call from if_vtnet.c to virtio_net.h. This allows
us to call these functions from if_tuntap.c and if_ptnet.c.
virtio_net.h already contained a copy of these functions, but a copy
of an outdated version. The functions evolved in if_vtnet.c.
In if_vtnet.c, the copy has never been used because it increments
counters in their own functions.
This patch removes the outdated copy from virtio_net.h and moves the
new version of the functions from if_vtnet.c to virtio_net.h.
if_tuntap.c, if_ptnet.c, and if_vtnet.c just call these functions,
and if_vtnet.c increments its counters depending on the return value.

Reviewed by:            tuexen
MFC after:              1 month
MFC to:                 stable/15
Differential Revision:  https://reviews.freebsd.org/D57299
DeltaFile
+196-169sys/dev/virtio/network/virtio_net.h
+49-296sys/dev/virtio/network/if_vtnet.c
+19-3sys/dev/netmap/if_ptnet.c
+17-2sys/net/if_tuntap.c
+281-4704 files

FreeBSD/ports 708510dwww/tomcat-devel Makefile distinfo

www/tomcat-devel: Update 11.0.24 => 11.0.25

Changelog:
https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.25_(markt)

Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit 0ef1cfece3f53f6947d0b52503c324e2f23bca96)
DeltaFile
+3-3www/tomcat-devel/distinfo
+1-1www/tomcat-devel/Makefile
+4-42 files

FreeBSD/ports 91c65f5www/tomcat110 Makefile distinfo

www/tomcat110: Update 11.0.24 => 11.0.25

Changelog:
https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.25_(markt)

Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit b1d5ae18acd4975dea6c411380ec7c081151dbf5)
DeltaFile
+3-3www/tomcat110/distinfo
+1-1www/tomcat110/Makefile
+4-42 files

FreeBSD/ports 9a7ccacwww/tomcat9 Makefile distinfo

www/tomcat9: Update 9.0.120 => 9.0.121

Changelog:
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.121_(remm)

Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit 86a455039cd4dd8a2855b8e9cbd4e0f49b5a5ccd)
DeltaFile
+3-3www/tomcat9/distinfo
+1-1www/tomcat9/Makefile
+4-42 files

FreeBSD/ports 0ef1cfewww/tomcat-devel Makefile distinfo

www/tomcat-devel: Update 11.0.24 => 11.0.25

Changelog:
https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.25_(markt)

Sponsored by:   UNIS Labs
MFH:            2026Q3
DeltaFile
+3-3www/tomcat-devel/distinfo
+1-1www/tomcat-devel/Makefile
+4-42 files

FreeBSD/ports b1d5ae1www/tomcat110 Makefile distinfo

www/tomcat110: Update 11.0.24 => 11.0.25

Changelog:
https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.25_(markt)

Sponsored by:   UNIS Labs
MFH:            2026Q3
DeltaFile
+3-3www/tomcat110/distinfo
+1-1www/tomcat110/Makefile
+4-42 files

FreeBSD/ports 86a4550www/tomcat9 Makefile distinfo

www/tomcat9: Update 9.0.120 => 9.0.121

Changelog:
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.121_(remm)

Sponsored by:   UNIS Labs
MFH:            2026Q3
DeltaFile
+3-3www/tomcat9/distinfo
+1-1www/tomcat9/Makefile
+4-42 files