BSD Commit Log Search

x11/libxfce4windowing: Fix internationalization

- Import upstream patch to correctly link to libintl [1]
- Add USES=localbase:ldflags to make meson find the libintl library

PR:             297303
Obtained from:  https://gitlab.xfce.org/xfce/libxfce4windowing/-/commit/83ffd4ac83920ecd7ad190e997539d7a60c8dd60.patch [1]
MFH:            2026Q3

(cherry picked from commit e886a6665e37ecb3344dd3ebbb6f33832d9978ef)

x11/libxfce4windowing: Fix internationalization

- Import upstream patch to correctly link to libintl [1]
- Add USES=localbase:ldflags to make meson find the libintl library

PR:             297303
Obtained from:  https://gitlab.xfce.org/xfce/libxfce4windowing/-/commit/83ffd4ac83920ecd7ad190e997539d7a60c8dd60.patch [1]
MFH:            2026Q3

sysutils/tuptime: Update 5.2.3 => 5.2.6

Changelog:
https://github.com/rfmoz/tuptime/blob/5.2.6/CHANGELOG

- Replace spaces with tabs.
- Pet portclippy.

PR:             295072
Approved by:    Jeremy Johnston <jeremy at smart-serv.net> (maintaienr, timeout 3 months)
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>

graphics/py-tesserocr: update to 2.11.0

Release Notes:
  https://github.com/sirfz/tesserocr/releases/tag/v2.11.0

graphics/gexiv2_016: update to 0.16.2

Release Notes:
  https://gitlab.gnome.org/GNOME/gexiv2/-/blob/0.16.2/NEWS?ref_type=tags

graphics/gexiv2: update to 0.14.7

Release Notes:
  https://gitlab.gnome.org/GNOME/gexiv2/-/blob/gexiv2-0.14/NEWS

net/speedtest-go: update to 1.7.11

Changes:        https://github.com/showwin/speedtest-go/releases/tag/v1.7.11

net-mgmt/icingaweb2-module-grafana: Update 3.1.3 => 3.1.4

Changelog:
https://github.com/NETWAYS/icingaweb2-module-grafana/releases/tag/v3.1.4

PR:             297207
Reported by:    Denis Shaposhnikov <dsh at bamus.cz> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)

audio/invada-studio-plugins-lv2: Attempt to fix build on aarch64

Reported by:    fallout

devel/jenkins-lts: Update to 2.568.2

Security:       9096f6e4-3a2f-4d16-89fb-f909aa0a7760
MFC:            2026Q3
Sponsored by:   The FreeBSD Foundation

(cherry picked from commit 5a19d0469f072b326dda161e73a73553f38440e8)

devel/jenkins: Update to 2.576

Security:       9096f6e4-3a2f-4d16-89fb-f909aa0a7760
MFC:            2026Q3
Sponsored by:   The FreeBSD Foundation

(cherry picked from commit f1187a568bd4d5ad790ed70dd068818a5c691efe)

dns/unbound: Update 1.25.2 => 1.26.0

Release Notes:
https://community.nlnetlabs.nl/t/unbound-1-26-0-released/3434

Changelog:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.26.0

PR:             297299
Reported by:    Jaap Akkerhuis <jaap at NLnetLabs.nl> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit c8c07fea866d0204dc22eb091cde0dd7cd72ec40)

dns/unbound: Update 1.25.2 => 1.26.0

Release Notes:
https://community.nlnetlabs.nl/t/unbound-1-26-0-released/3434

Changelog:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.26.0

PR:             297299
Reported by:    Jaap Akkerhuis <jaap at NLnetLabs.nl> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

security/vuxml: Fix firefox-esr PORTEPOCH in two Mozilla entries

www/firefox-esr has PORTEPOCH=2, but the firefox-esr ranges in these
two do not have it so they cannot match any installed package.

Sponsored by:   The FreeBSD Foundation

math/py-pynleq2: update 0.0.2 → 0.1.0

textproc/py-ufal.udpipe: update 1.2.0.3 → 1.4.0.1

devel/jenkins: Update to 2.576

Security:       9096f6e4-3a2f-4d16-89fb-f909aa0a7760
MFC:            2026Q3
Sponsored by:   The FreeBSD Foundation

devel/jenkins-lts: Update to 2.568.2

Security:       9096f6e4-3a2f-4d16-89fb-f909aa0a7760
MFC:            2026Q3
Sponsored by:   The FreeBSD Foundation

security/vuxml: Document Jenkins Security Advisory 2026-08-05

Sponsored by:   The FreeBSD Foundation

net/syncthing: Update to 2.1.3

re: https://github.com/syncthing/syncthing/releases/tag/v2.1.3

net/dhcpcd: update to 10.5.0

Changes:        https://github.com/NetworkConfiguration/dhcpcd/releases/tag/v10.5.0

www/element-web: Update to 1.12.25

Approved by:    maintainer (implicit, version bump, as per PR 258262)

sysutils/mdfried: Update to 0.22.4

Reported by:    portscout!

textproc/ugrep: Update to 7.8.4

www/bunkerweb: Update to 1.6.13

This covers the 1.6.12 and 1.6.13 releases.

Security: session fixation on login and an open redirect via the
post-login "next" parameter in the web UI, a second open redirect in
the antibot post-challenge flow, and cache deletion routes that
bypassed authorization. Biscuit token generation now binds the Host
header, client IP and username as typed terms, and adds an optional
API_ALLOWED_HOSTS allowlist. Reverse DNS results are forward-confirmed
before an IGNORE_RDNS or GREYLIST_RDNS suffix match is honored, so a
self-configured PTR record no longer bypasses blocking. ACME challenge
tokens are validated against the base64url character set, closing a
path traversal through the internal API. TOTP verification is enforced
on the exact validation endpoint instead of any path containing /totp.

New settings: REVERSE_PROXY_SSL_VERIFY and friends for upstream HTTPS
certificate verification, USE_LIMIT_REQ_GLOBAL and
LIMIT_REQ_GLOBAL_RATE for an aggregate per-service request rate,

    [19 lines not shown]

net/mvfst: update 2026.07.27.00 → 2026.08.03.00

science/py-pubchempy: Remove duplicate

PR:             297289
Reported by:    Matthew Wener <matthew at wener.org>

devel/fatal: update 2026.07.27.00 → 2026.08.03.00

www/proxygen: update 2026.07.27.00 → 2026.08.03.00

devel/fbthrift: update 2026.07.27.00 → 2026.08.03.00