graphics/jogamp-jogl: modernize patches
Ran: make patch; rm files/*; make makepatch.
This renames a patch and splits patch-freebsd to 3 separate patch files.
Manually checked that the patches are equal.
Approved by: no maintainer
mail/postfix-current: Fix MONGO flavor
Fix MONGO flavor by depending on libbson and mongo-c-driver contained
in quarterly branch.
This is a direct commit to 2026Q3
mail/postfix: Fix MONGO flavor
Fix MONGO flavor by depending on libbson and mongo-c-driver contained
in quarterly branch.
Also fix pkg-plist for MONGO flavor.
This is a direct commit to 2026Q3
math/octave-forge-octave_ffmpeg_free: Update to 2.0.0.
- Build will work when ffmpeg updates to version 9.
PR: 297384
Reported by: Daniel Engberg <diizzy at FreeBSD.org>
<If someone else reported the issue>
Mk/Scripts/qa.sh: Filter baselibs() input to improve performance
After the baselibs() fix in f0f863b1a2d6, readelf is executed for each
result from find(1). There are two concerns with this fix:
1. -exec readelf -d {} \; drops the filename from the error messages
readelf prints "File: <name>" headers only when it is supplied with two
or more files, and baselibs() uses ${file} from those headers. So, the
two err() messages in baselibs() will break.
This is moot for now, though, because nothing in the ports tree can
trigger these errors. Those base soname versions for libarchive and
libedit are long gone.
2. Performance hit with one readelf execution per staged file
The costs are high for ports that stage many files. For
emulators/linux_base-rl9, the find returns over 30k hits that the while
[12 lines not shown]
security/wpa_supplicant*: Fix EAPOL_TEST build for non-standard SSL_DEFAULT
The post-build target does not have the same environment variables setup
as the do-build target. This results in the eapol_test binary getting
compiled against the headers of the TLS library specified in
SSL_DEFAULT, but getting linked against the TLS library from the base
system regardless of SSL_DEFAULT, causing build failures when
SSL_DEFAULT is set to a different TLS library/version than the on from
the base system.
Fix this by not using the post-build target to build the eapol_test
binary, but instead conditionally add the eapol_test target to
TARGET_ALL if the EAPOL_TEST option is enabled for the port.
Signed-off-by: Pascal Ernster <git at hardfalcon.net>
net/amnezia-kmod: Update 2.0.11 => 2.0.12
Changelog:
- if_amn: wg_crypto: validate OCF authentication result.
- Check crp_etype after crypto_dispatch() so packets with an invalid
Poly1305 tag are rejected.
- Require a synchronous crypto session before using a stack-allocated
request.
https://github.com/vgrebenschikov/wireguard-amnezia-kmod/releases/tag/v2.0.12
PR: 297625
Security: CVE-2026-58085
Sponsored by: UNIS Labs
MFH: 2026Q3
japanese/fcitx5-skk: Depend on ECM unconditionally
The top-level CMakeLists.txt calls find_package(ECM 1.0.0 REQUIRED)
unconditionally, but the port only declared the dependency under the QT6
option, so configure fails with WITHOUT_QT6. Move it out of the option
and make it build-only. ECM is listed in _USE_KDE_LATEST, so USES=kde:6
can be dropped along with it, as done in 95f9a6808973 for the other
fcitx5 ports.
PR: 297622
Approved by: osa (mentor)
japanese/fcitx5-cskk: Depend on ECM unconditionally
The top-level CMakeLists.txt calls find_package(ECM 1.0.0 REQUIRED)
unconditionally, but the port only declared the dependency under the QT5
option, so configure fails with WITHOUT_QT5. Move it out of the option
and make it build-only. ECM is listed in _USE_KDE_LATEST, so USES=kde:5
can be dropped along with it, as done in 95f9a6808973 for the other
fcitx5 ports.
While here, fix the indentation of PORTREVISION.
PR: 297623
Approved by: syobon at syobon.net (maintainer)
Approved by: osa (mentor)
