www/py-flask-limiter3: Remove port
The one and only consumer www/py-calibreweb now supports v4.
PR: 297376
Reported by: Matthew Wener <matthew at wener.org> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
www/py-calibreweb: Update 0.6.26 => 0.6.27
This release contains bug and security fixes, also
updated to support www/py-flask-limiter v4 which in
turn removes the need for the port www/py-flask-limiter3.
Changes:
https://github.com/janeczku/calibre-web/releases/tag/0.6.27
PR: 297375
Reported by: Matthew Wener <matthew at wener.org> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
Security: CVE-2025-6998
Security: CVE-2025-7404
MFH: 2026Q3
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Update bundled third-party modules; where upstream now offers a tag,
switch from a commit hash to the version tag:
- array_var: v0.05 -> v0.06
- cache_purge: hash -> 3.0.2
- ngx_devel_kit: v0.3.3 -> v0.3.4
- drizzle: hash -> v0.1.14
- aws_auth: -> f3d9862 (stays on a hash; the 2.1.1 tag lacks the
OpenSSL 3.0 build fix)
Adjust the drizzle config patch to the module's new extraction
directory name.
For freenginx, add a patch to ngx_aws_auth: freenginx dropped
ngx_http_request_t.start_sec, so obtain the request time from
ngx_time() there instead.
Sponsored by: Netzkommune GmbH
graphics/openusd: fix cmake file
Consumers using cmake failed with this error:
CMake Error at /usr/local/cmake/pxrTargets.cmake:426 (set_target_properties):
The link interface of target "garch" contains:
OpenGL::GL
but the target was not found.
See https://github.com/PixarAnimationStudios/OpenUSD/issues/3310
PR: 296774
Approved by: maintainer’s time-out
graphics/opensubdiv: fix cmake config file
Consumers encountered this error:
CMake Error at /usr/local/lib/cmake/OpenSubdiv/OpenSubdivTargets.cmake:79 (set_target_properties):
The link interface of target "OpenSubdiv::osdCPU" contains:
OpenMP::OpenMP_CXX
but the target was not found.
PR: 296775
Approved by: maintainer’s time-out
lang/babashka: Update to 1.13.219
Changes since 1.12.218:
1.13.219 (2026-07-27)
Highlights:
* Tasks get automatic --help and shell completions, through the new
:exec-fn and :cmd keys. See the blog post:
https://blog.michielborkent.nl/babashka-tasks-cli.html
These task keys should be considered experimental and may change in
a future version of babashka, depending on feedback from the
community
* Clojure 1.13 map destructuring with :keys! etc.
Other changes:
* Tasks: :exec-fn (a function) or :cmd (a command tree) on a task
[68 lines not shown]
gecko: declare NOT_FOR_ARCHS=i386
The building and linking of the rust parts on x86 needs a larger
address space than a 32bit platform can provide (at most 4GB).
The gecko ports have been failing for quite a while on the official
builders with an "rustc-LLVM ERROR: out of memory" message, e.g.
https://pkg-status.freebsd.org/beefy18/data/144i386-default/6f1fe399c86f/logs/thunderbird-153.0.2.log
We can as well stop trying to save the CPU cycles leading up to
this error.
devel/isa-l_crypto: fix packaging on powerpc64le, enable powerpc64
Upstream 2.26 moved aes_cbc.h and aes_gcm.h into the AES module's
install list, and the AES module is only built on x86_64 and aarch64.
Other architectures use the generic base implementations, so the two
headers are not staged and check-plist fails. Gate them in pkg-plist.
powerpc64 builds the same generic code: both powerpc64 and powerpc64le
pass the upstream test suite (29/29, including the FIPS self-tests),
so widen ONLY_FOR_ARCHS.
Also correct ONLY_FOR_ARCHS_REASON: no isa-l_crypto release ever had
powerpc64le-specific code; all releases fall back to the generic C
implementations on ppc64*.
www/nginx-acme: Update to 0.4.1
Fixes a possible crash during name resolution (via ngx 0.5.1).
https://github.com/nginx/nginx-acme/releases/tag/v0.4.1
While here, switch alignment to tabs (portfmt).
Sponsored by: Netzkommune GmbH
www/freenginx-acme-module: Add new port
ngx_http_acme_module adds automatic ACME (RFC 8555) certificate
management to freenginx. This port builds the module against the
stable www/freenginx and installs it into libexec/freenginx.
While here, move the freenginx version into www/freenginx/version.mk
(matching www/nginx and www/nginx-devel) so the new port can include
it as the single source of truth.
Sponsored by: Netzkommune GmbH