BSD Commit Log Search

devel/violet: Follow upstream tarball reroll

textproc/{,py-}gladtex: Return to pool

x11/clipman: Return to pool

audio/pt2-clone: Update to 1.93

sysutils/less: Update 692 => 710

This update removes obsolete lesskey program.

Changelog:
https://github.com/gwsw/less/blob/v710/NEWS

While here, sort Makefile (pet port{clippy,fmt}).

PR:             299616
Approved by:    jharris at widomaker.com (maintainer timeout, 2+ weeks)
Approved by:    osa, vvd (mentors, implicit)

devel/lua-stdlib-debug: Update 1.1.0 => 1.2

Changelog:
https://github.com/lua-stdlib/_debug/releases/tag/v1.2

PR:             299692
Approved by:    osa, vvd (mentors, implicit)

comms/py-pynitrokey: Update 0.14.0 => 0.14.1

This is a maintenance release that updates the bundled root
certificates to remove the compromised emSign certificate.

Changelog:
https://github.com/Nitrokey/pynitrokey/releases/tag/v0.14.1

PR:             299842
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 607543776deb67ee96d134762e34e0e65bd61bc9)

comms/py-pynitrokey: Update 0.13.0 => 0.14.0

Changelog:
https://github.com/Nitrokey/pynitrokey/releases/tag/v0.14.0

PR:             299023
Approved by:    osa, vvd (Mentors, implicit)

(cherry picked from commit 3b8dcf740b21bf9788270c0f2ad856503193008b)

comms/py-pynitrokey: Update 0.14.0 => 0.14.1

This is a maintenance release that updates the bundled root
certificates to remove the compromised emSign certificate.

Changelog:
https://github.com/Nitrokey/pynitrokey/releases/tag/v0.14.1

PR:             299842
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

security/py-certifi: Update to 2026.10.23

The bundle drops "emSign ECC Root CA - G3", "emSign Root CA - C1" and
"emSign ECC Root CA - C3", following the eMudhra emSign CA compromise:
2026.10.18 removed the emSign roots, 2026.10.19 restored the ones that
are not affected, and 2026.10.23 removed two more.  The package layout
and the build are unchanged.

Commit log:
https://github.com/certifi/python-certifi/compare/2026.07.22...2026.10.23

PR:             299779
Approved by:    sunpoet (maintainer timeout, 13 days)
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 8f6ec8f61ee24a69eaac2b1131a0f411bde9a004)

security/py-certifi: Update to 2026.10.23

The bundle drops "emSign ECC Root CA - G3", "emSign Root CA - C1" and
"emSign ECC Root CA - C3", following the eMudhra emSign CA compromise:
2026.10.18 removed the emSign roots, 2026.10.19 restored the ones that
are not affected, and 2026.10.23 removed two more.  The package layout
and the build are unchanged.

Commit log:
https://github.com/certifi/python-certifi/compare/2026.07.22...2026.10.23

PR:             299779
Approved by:    sunpoet (maintainer timeout, 13 days)
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

dns/dnsdist: Update 2.1.2 => 2.1.3

Release Notes:
https://blog.powerdns.com/2026/10/12/powerdns-dnsdist-2.1.3-and-2.0.11-released

Changelog:
https://www.dnsdist.org/changelog.html#change-2.1.3

While here, add LMDB0 option that is enabled by default to make
switching to LMDB 1.0 possible (when disabled).

PR:             299435
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 6f409e6f9454f3b91d2e3d11c2bb99856c5667a1)

dns/dnsdist: Update 2.1.2 => 2.1.3

Release Notes:
https://blog.powerdns.com/2026/10/12/powerdns-dnsdist-2.1.3-and-2.0.11-released

Changelog:
https://www.dnsdist.org/changelog.html#change-2.1.3

While here, add LMDB0 option that is enabled by default to make
switching to LMDB 1.0 possible (when disabled).

PR:             299435
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

sysutils/multitail: Update 7.1.5 => 7.1.6

This update fixes shell injection in '-ex' command execution
along with other changes. The fix causes a breaking change.

Breaking change explained here:
https://github.com/folkertvanheusden/multitail/commit/84f304e

Commit log:
https://github.com/folkertvanheusden/multitail/compare/7.1.5...7.1.6

While here, polish Makefile and switch to USE_GITHUB.

PR:             300176
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2025-70544
MFH:            2026Q4

(cherry picked from commit 4cfe21b5f4f847f47c46fdb7f90152f76d25aff8)

sysutils/multitail: Update 7.1.5 => 7.1.6

This update fixes shell injection in '-ex' command execution
along with other changes. The fix causes a breaking change.

Breaking change explained here:
https://github.com/folkertvanheusden/multitail/commit/84f304e

Commit log:
https://github.com/folkertvanheusden/multitail/compare/7.1.5...7.1.6

While here, polish Makefile and switch to USE_GITHUB.

PR:             300176
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2025-70544
MFH:            2026Q4

databases/duckdb: link option extensions into libduckdb; unbreak postgres_scanner, spatial and ducklake extensions

Patch submitted via e-mail.

mail/mailpit: Update to 1.33.1

devel/gitlab-runner: update to 19.5.3

Changes:        https://gitlab.com/gitlab-org/gitlab-runner/blob/main/CHANGELOG.md

deskutils/stirling-pdf: update to 3.3.0

Changes:        https://github.com/Stirling-Tools/Stirling-PDF/releases

security/trivy: update to 0.76.2

Changes:        https://github.com/aquasecurity/trivy/releases

x11-fm/xfe: Update to 2.1.13

net/yami4: Improve port

* Use HTTPS for MASTER_SITES.
* Always build the Core and C++ libraries, removing the option.
* Use PORTDOCS=* instead of listing a lot of documentation in pkg-plist.

PR:             300142
Approved by:    osa, vvd (mentors, implicit)

net/zapret2: Update 1.0.6 => 1.0.7

Approved by:            yuri@ (maintainer)

Differential Revision: https://reviews.freebsd.org/D61319

mail/vandelay: Update 1.0.14 => 1.0.15

Changelog:
https://github.com/stalwartlabs/vandelay/blob/v1.0.15/CHANGELOG.md

PR:             300603
Approved by:    osa, vvd (mentors, implicit)

security/vuxml: Add dns/powerdns vulnerability

PR:             299437
Approved by:    osa, vvd (mentors, implicit)

devel/ccache4: Backport fix for incbin directive handling

PR:            300573

dns/powerdns: Update 5.1.4 => 5.1.5

This release contains bug fixes, as well as a minor
feature and a security fix.

Security Advisory:
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-13.html

Changelog:
https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.5

While here, add LMDB0 option that is enabled by default to make
switching to LMDB 1.0 possible (when disabled).

PR:             299437
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2026-73206
MFH:            2026Q4

(cherry picked from commit 6b277d8f5b615dea474618073ae3fa96bf50c1d8)

dns/powerdns: Update 5.1.4 => 5.1.5

This release contains bug fixes, as well as a minor
feature and a security fix.

Security Advisory:
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-13.html

Changelog:
https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.5

While here, add LMDB0 option that is enabled by default to make
switching to LMDB 1.0 possible (when disabled).

PR:             299437
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2026-73206
MFH:            2026Q4

security/openvpn-auth-oauth2: Update to 2.3.2

editors/vim: Update to 9.2.1302