FreeBSD/ports b0cad1cwww/immich Makefile, www/immich/files immich_server.in patch-server_src_dtos_config.dto.ts

www/immich: Switch to jellyfin-ffmpeg

Immich builds its HDR filter chain around tonemapx, which only the
Jellyfin patch set provides.  The rc script points FFMPEG_PATH and
FFPROBE_PATH at it.

PR:             298378
Requested by:   several people
Sponsored by:   Netzkommune GmbH
DeltaFile
+5-7www/immich/files/pkg-message.in
+0-11www/immich/files/patch-server_src_dtos_config.dto.ts
+2-2www/immich/Makefile
+3-1www/immich/files/immich_server.in
+10-214 files

FreeBSD/ports 8fd84cesysutils/reproduce Makefile distinfo

sysutils/reproduce: Update to 0.9.0

ChangeLog: https://github.com/DtxdF/reproduce/releases/tag/v0.9.0
DeltaFile
+3-3sysutils/reproduce/distinfo
+1-1sysutils/reproduce/Makefile
+4-42 files

FreeBSD/src 9401bfbsbin/hastd proto_socketpair.c proto_impl.h

hastd: Use fixed-length protocol names

All communication between hastd nodes and internally between hastd and
its worker children passes through the same pair of send / receive
functions.  The receive function uses recv(2) with the MSG_WAITALL flag,
which in theory means we should never get a short read.  However, when
handing off a socket to a worker child, we also pass a variable-length
string identifying the type of socket we're passing, and reading this
string relies on a short read.  This used to work because the arrival of
the descriptor would interrupt the recv(2) call, but this bug was fixed
when the AF_UNIX code was rewritten a while ago and hastd has been
broken ever since.

Fixing the length of the protocol name to four characters including the
terminating null solves the short-read bug by never requiring a short
read (nothing else in hastd requires one).

Note that this issue appears to have been reported independently first
by Alessandro Sagratini in PR 292322 and then by Martin Vidovic in

    [11 lines not shown]
DeltaFile
+5-10sbin/hastd/proto.c
+1-1sbin/hastd/proto_socketpair.c
+1-1sbin/hastd/proto_impl.h
+7-123 files

FreeBSD/src e4b16e7sbin/hastd nv.c

hastd: Ensure nvpair padding is initialized

The proto-libnv implementation embedded in hastd pads names and values
out to the nearest multiple of eight bytes, but leaves the padding
uninitialized, leaking up to 14 bytes of recycled heap per pair in a
message.

While here, switch from bcopy() to memcpy().

MFC after:      3 days
Reviewed by:    kevans, emaste
Differential Revision:  https://reviews.freebsd.org/D59343

(cherry picked from commit 911bda7cffbf358c4e83ea05cfe980d429aff61c)
DeltaFile
+3-3sbin/hastd/nv.c
+3-31 files

FreeBSD/src 1e00200contrib/unbound config.h.in configure, contrib/unbound/services authzone.c

unbound: Update to 1.26.1

Release notes at
    https://community.nlnetlabs.nl/t/unbound-1-26-1-released

Merge commit '120aa088f4807126af42a652a07c5090e7294fcf'

Security:       CVE-2026-77860
Security:       CVE-2026-77955
Security:       CVE-2026-78227
Security:       CVE-2026-80225
Security:       CVE-2026-81634
Security:       CVE-2026-81642
Security:       CVE-2026-82717
Security:       CVE-2026-82720
Security:       CVE-2026-85501
(cherry picked from commit 1fb9c5ffe25fcba0857c4fdf6ed19ca5bf6bc858)
DeltaFile
+3,518-3,462contrib/unbound/util/configlexer.c
+1,936-2,732contrib/unbound/configure
+2,070-2,037contrib/unbound/util/configparser.c
+189-199lib/libunbound/config.h
+186-196contrib/unbound/config.h.in
+177-67contrib/unbound/services/authzone.c
+8,076-8,69352 files not shown
+8,842-8,93958 files

FreeBSD/src 6b26fcccontrib/tzcode zic.8 theory.html

tzcode: Update to 2026d

MFC after:      1 week

(cherry picked from commit 212e3524943222650688bd1f49d5eb4c9326de7f)

libc/stdtime: Catch up with tzcode 2026d

Fixes:          212e35249432 ("tzcode: Update to 2026c")
(cherry picked from commit 1689b875b4b80c152cf7d3652c72335a2149173e)
DeltaFile
+167-232contrib/tzcode/localtime.c
+60-58contrib/tzcode/tz-link.html
+114-1contrib/tzcode/NEWS
+49-40contrib/tzcode/zic.c
+32-31contrib/tzcode/theory.html
+28-17contrib/tzcode/zic.8
+450-37910 files not shown
+507-41516 files

FreeBSD/src d9dd2f9tests/sys/geom/class/raid3 9_test.sh 8_test.sh

tests: Fix graid3 insert tests

The script was passing the wrong device name to `graid3 insert` and
didn't notice that the command was failing.

MFC after:      1 week
Event:          EuroBSDcon 2026 DevSummit
Reviewed by:    delphij
Differential Revision:  https://reviews.freebsd.org/D59564

(cherry picked from commit 4cc85d1f00fa1938923fe8d6fc2934593d4303b4)
DeltaFile
+1-1tests/sys/geom/class/raid3/9_test.sh
+1-1tests/sys/geom/class/raid3/8_test.sh
+1-1tests/sys/geom/class/raid3/7_test.sh
+1-1tests/sys/geom/class/raid3/6_test.sh
+4-44 files

FreeBSD/src 0b7215csys/geom/raid3 g_raid3_ctl.c

graid3: Restore lock acquisition

The lock acquisition in g_raid3_ctl_insert() was improperly dropped a
while ago, making it impossible to add or replace a device in an
existing graid3.  This went unnoticed because the tests are broken.

MFC after:      1 week
Fixes:          fcf69f3dbce6 ("Consistently use gctl_get_provider instead of home-grown variants.")
Event:          EuroBSDcon 2026 DevSummit
Reviewed by:    delphij
Differential Revision:  https://reviews.freebsd.org/D59563

(cherry picked from commit 9094f86b57a7e4b356cae83f35c8d41c842b42a2)
DeltaFile
+1-0sys/geom/raid3/g_raid3_ctl.c
+1-01 files

FreeBSD/src 99c63b8contrib/unbound config.h.in configure, contrib/unbound/services authzone.c

unbound: Update to 1.26.1

Release notes at
    https://community.nlnetlabs.nl/t/unbound-1-26-1-released

Merge commit '120aa088f4807126af42a652a07c5090e7294fcf'

Security:       CVE-2026-77860
Security:       CVE-2026-77955
Security:       CVE-2026-78227
Security:       CVE-2026-80225
Security:       CVE-2026-81634
Security:       CVE-2026-81642
Security:       CVE-2026-82717
Security:       CVE-2026-82720
Security:       CVE-2026-85501
(cherry picked from commit 1fb9c5ffe25fcba0857c4fdf6ed19ca5bf6bc858)
DeltaFile
+3,518-3,462contrib/unbound/util/configlexer.c
+1,936-2,732contrib/unbound/configure
+2,070-2,037contrib/unbound/util/configparser.c
+189-199lib/libunbound/config.h
+186-196contrib/unbound/config.h.in
+177-67contrib/unbound/services/authzone.c
+8,076-8,69352 files not shown
+8,842-8,93958 files

FreeBSD/src 0d0f40csbin/hastd nv.c

hastd: Ensure nvpair padding is initialized

The proto-libnv implementation embedded in hastd pads names and values
out to the nearest multiple of eight bytes, but leaves the padding
uninitialized, leaking up to 14 bytes of recycled heap per pair in a
message.

While here, switch from bcopy() to memcpy().

MFC after:      3 days
Reviewed by:    kevans, emaste
Differential Revision:  https://reviews.freebsd.org/D59343

(cherry picked from commit 911bda7cffbf358c4e83ea05cfe980d429aff61c)
DeltaFile
+3-3sbin/hastd/nv.c
+3-31 files

FreeBSD/src cd8eef4sbin/hastd proto_socketpair.c proto_impl.h

hastd: Use fixed-length protocol names

All communication between hastd nodes and internally between hastd and
its worker children passes through the same pair of send / receive
functions.  The receive function uses recv(2) with the MSG_WAITALL flag,
which in theory means we should never get a short read.  However, when
handing off a socket to a worker child, we also pass a variable-length
string identifying the type of socket we're passing, and reading this
string relies on a short read.  This used to work because the arrival of
the descriptor would interrupt the recv(2) call, but this bug was fixed
when the AF_UNIX code was rewritten a while ago and hastd has been
broken ever since.

Fixing the length of the protocol name to four characters including the
terminating null solves the short-read bug by never requiring a short
read (nothing else in hastd requires one).

Note that this issue appears to have been reported independently first
by Alessandro Sagratini in PR 292322 and then by Martin Vidovic in

    [11 lines not shown]
DeltaFile
+5-10sbin/hastd/proto.c
+1-1sbin/hastd/proto_socketpair.c
+1-1sbin/hastd/proto_impl.h
+7-123 files

FreeBSD/src 36c6d52contrib/tzcode zic.8 theory.html

tzcode: Update to 2026d

MFC after:      1 week

(cherry picked from commit 212e3524943222650688bd1f49d5eb4c9326de7f)

libc/stdtime: Catch up with tzcode 2026d

Fixes:          212e35249432 ("tzcode: Update to 2026c")
(cherry picked from commit 1689b875b4b80c152cf7d3652c72335a2149173e)
DeltaFile
+167-232contrib/tzcode/localtime.c
+60-58contrib/tzcode/tz-link.html
+114-1contrib/tzcode/NEWS
+49-40contrib/tzcode/zic.c
+32-31contrib/tzcode/theory.html
+28-17contrib/tzcode/zic.8
+450-37910 files not shown
+507-41516 files

FreeBSD/src 24eaeb8tests/sys/geom/class/raid3 9_test.sh 8_test.sh

tests: Fix graid3 insert tests

The script was passing the wrong device name to `graid3 insert` and
didn't notice that the command was failing.

MFC after:      1 week
Event:          EuroBSDcon 2026 DevSummit
Reviewed by:    delphij
Differential Revision:  https://reviews.freebsd.org/D59564

(cherry picked from commit 4cc85d1f00fa1938923fe8d6fc2934593d4303b4)
DeltaFile
+1-1tests/sys/geom/class/raid3/9_test.sh
+1-1tests/sys/geom/class/raid3/8_test.sh
+1-1tests/sys/geom/class/raid3/7_test.sh
+1-1tests/sys/geom/class/raid3/6_test.sh
+4-44 files

FreeBSD/src 89cbf4bsys/geom/raid3 g_raid3_ctl.c

graid3: Restore lock acquisition

The lock acquisition in g_raid3_ctl_insert() was improperly dropped a
while ago, making it impossible to add or replace a device in an
existing graid3.  This went unnoticed because the tests are broken.

MFC after:      1 week
Fixes:          fcf69f3dbce6 ("Consistently use gctl_get_provider instead of home-grown variants.")
Event:          EuroBSDcon 2026 DevSummit
Reviewed by:    delphij
Differential Revision:  https://reviews.freebsd.org/D59563

(cherry picked from commit 9094f86b57a7e4b356cae83f35c8d41c842b42a2)
DeltaFile
+1-0sys/geom/raid3/g_raid3_ctl.c
+1-01 files

FreeBSD/ports e4154f0net/linphone Makefile

net/linphone: Distribute distfiles via distcache.FreeBSD.org

Linphone GitLab instance seems a bit unstable at times, so let's keep a
copy of the 6.1.2 archive on LOCAL.

Approved by:    portmgr (blanket)
DeltaFile
+3-0net/linphone/Makefile
+3-01 files

FreeBSD/ports 2aa42c6net/linphone Makefile, net/linphone/files patch-linphone-app_cmake_FindQtKeychain.cmake patch-CMakeLists.txt

net/linphone: update to 6.1.2

PR:             294162
Co-authored-by: Myokla K. <nikolaytihonov2022 at gmail.com>
DeltaFile
+93-82net/linphone/Makefile
+0-93net/linphone/files/patch-linphone-app_CMakeLists.txt
+56-0net/linphone/files/patch-Linphone_core_App.cpp
+53-0net/linphone/files/patch-Linphone_CMakeLists.txt
+21-21net/linphone/files/patch-CMakeLists.txt
+0-35net/linphone/files/patch-linphone-app_cmake_FindQtKeychain.cmake
+223-23128 files not shown
+422-47234 files

FreeBSD/ports 3e7c2c7audio/deadbeef Makefile, audio/deadbeef/files patch-plugins_gtkui_ddbcellrenderertextmultiline.c

audio/deadbeef: Fix GTK3 build

PR:             292311
Tested by:      0mp
DeltaFile
+34-0audio/deadbeef/files/patch-plugins_gtkui_ddbcellrenderertextmultiline.c
+1-1audio/deadbeef/Makefile
+35-12 files

FreeBSD/ports fd03e6eaudio/deadbeef Makefile

audio/deadbeef: Switch to USES=localbase

Approved by:    portmgr (blanket)
DeltaFile
+3-4audio/deadbeef/Makefile
+3-41 files

FreeBSD/ports 114dca1emulators/wine-devel Makefile pkg-plist, emulators/wine-devel/files patch-configure.ac

emulators/wine-devel: Keep USE_GCC to fix runtimes issue

err:virtual:try_map_free_area mmap() error Cannot allocate memory, range 0x7fffffee0000-0x7fffffff0000, unix_prot 0x3.
err:virtual:map_free_area couldn't map free area in range 0x100000000-0x7fffffff0000, size 0x110000
Assertion failed: (!status), function virtual_alloc_first_thread_data, file dlls/ntdll/unix/virtual.c, line 4130.
Abort trap (core dumped)

PR:             298678
Sponsored by:   UNIS Labs (vvd, commit patch)
DeltaFile
+247-0emulators/wine-devel/pkg-plist
+3-3emulators/wine-devel/files/patch-configure.ac
+2-0emulators/wine-devel/Makefile
+252-33 files

FreeBSD/ports d064caedevel/py-cld pkg-plist Makefile, devel/py-cld/files patch-setup__full.py patch-setup.py

devel/py-cld: fix build with python 3.12

PR:     296434
Reported by:    Hiroo Ono <hiroo.ono+freebsd at gmail.com>
Reviewed by:    0mp
Approved by:    maintainer (demon)
DeltaFile
+20-0devel/py-cld/files/patch-setup__full.py
+20-0devel/py-cld/files/patch-setup.py
+2-5devel/py-cld/Makefile
+6-0devel/py-cld/pkg-plist
+48-54 files

FreeBSD/ports a7e07e9mail/maildrop Makefile

mail/maildrop: Fix INOTIFY option

- FreeBSD 14.5 and up include inotify implementation in libc, so update checks to not depend on the ports implementation ion this case
- When using the ports provided libinotify link using the dynamic library
- Also add one file that needs patching for a successful build

While here, pet portclippy/portfmt.

Reported by:    Ewout1 (Excite/BlueTie) <ewout1 at bluetiehome.com> (via mailing list)
MFH:            2026Q3

(cherry picked from commit 307b943e636e53d0c11f408014d01754ae42adb9)
DeltaFile
+40-22mail/maildrop/Makefile
+40-221 files

FreeBSD/ports 7a91177mail/courier-imap Makefile

mail/courier-imap: Update version check for INOTIFY option

FreeBSD 14.5 includes the inotify implementation in libc. Update
the version check to avoid linkingg to the ports provided library
in this case.

MFH:            2026Q3

(cherry picked from commit a9309a59e3b7c12e964d99fd94195598845ad9cf)
DeltaFile
+4-3mail/courier-imap/Makefile
+4-31 files

FreeBSD/ports 323ba1amail/courier-imap Makefile distinfo

mail/courier-imap: Update to 6.0.6

(cherry picked from commit 4e5eafd2681aacf36d64471ddff2502594c506f3)
DeltaFile
+3-3mail/courier-imap/distinfo
+1-1mail/courier-imap/Makefile
+4-42 files

FreeBSD/ports 307b943mail/maildrop Makefile

mail/maildrop: Fix INOTIFY option

- FreeBSD 14.5 and up include inotify implementation in libc, so update checks to not depend on the ports implementation ion this case
- When using the ports provided libinotify link using the dynamic library
- Also add one file that needs patching for a successful build

While here, pet portclippy/portfmt.

Reported by:    Ewout1 (Excite/BlueTie) <ewout1 at bluetiehome.com> (via mailing list)
MFH:            2026Q3
DeltaFile
+40-22mail/maildrop/Makefile
+40-221 files

FreeBSD/ports a9309a5mail/courier-imap Makefile

mail/courier-imap: Update version check for INOTIFY option

FreeBSD 14.5 includes the inotify implementation in libc. Update
the version check to avoid linkingg to the ports provided library
in this case.

MFH:            2026Q3
DeltaFile
+4-3mail/courier-imap/Makefile
+4-31 files

FreeBSD/ports 1c1701cwww/p5-WWW-Salesforce distinfo Makefile

www/p5-WWW-Salesforce: update to 0.401

Belatedly update RUN_DEPENDS

Changes:        https://metacpan.org/release/CAPOEIRAB/WWW-Salesforce-0.401/source/Changes
Reported-by:    repology
DeltaFile
+7-3www/p5-WWW-Salesforce/Makefile
+3-3www/p5-WWW-Salesforce/distinfo
+10-62 files

FreeBSD/ports ff1a726textproc/py-python-slugify Makefile distinfo

textproc/py-python-slugify: update to 9.1.0

Changes:        https://github.com/un33k/python-slugify/blob/v9.1.0/CHANGELOG.md
Reported-by:    repology, portscout
DeltaFile
+3-3textproc/py-python-slugify/distinfo
+1-1textproc/py-python-slugify/Makefile
+4-42 files

FreeBSD/ports df7b89bdeskutils/flameshot Makefile distinfo

deskutils/flameshot: Update to 15.0.r1

ChangeLog:

1. https://github.com/flameshot-org/flameshot/releases/tag/v15.0.rc1

Reported by:    borgmanJeremy <notifications at github.com>
DeltaFile
+3-3deskutils/flameshot/distinfo
+1-1deskutils/flameshot/Makefile
+4-42 files

FreeBSD/ports b1431a0net/rustconn Makefile Makefile.crates

net/rustconn: Update to 0.22.1

ChangeLog:

1. https://github.com/totoshko88/RustConn/releases/tag/v0.22.1

Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+7-7net/rustconn/distinfo
+2-2net/rustconn/Makefile.crates
+1-1net/rustconn/Makefile
+10-103 files

FreeBSD/ports b082083sysutils/httm Makefile Makefile.crates

sysutils/httm: Update version 0.50.2=>0.51.0

Changelog: https://github.com/kimono-koans/httm/releases/tag/0.51.0
DeltaFile
+35-81sysutils/httm/distinfo
+17-40sysutils/httm/Makefile.crates
+1-2sysutils/httm/Makefile
+53-1233 files