FreeBSD/ports 5359736databases/sqlcipher pkg-plist Makefile

databases/sqlcipher: Update 4.16.0 => 4.17.0

Release Notes:
https://www.zetetic.net/blog/2026/07/08/sqlcipher-4.17.0-release/

Changelog:
https://github.com/sqlcipher/sqlcipher/releases/tag/v4.17.0

PR:             296869
Approved by:    jharris at widomaker.com (maintainer, timeout 26 days)
Security:       CVE-2026-11822
Security:       CVE-2026-11824
Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit e9f01757b5b01424c3c70e1648cd234588b907d4)
DeltaFile
+3-3databases/sqlcipher/distinfo
+1-1databases/sqlcipher/pkg-plist
+1-1databases/sqlcipher/Makefile
+5-53 files

FreeBSD/ports e9f0175databases/sqlcipher pkg-plist Makefile

databases/sqlcipher: Update 4.16.0 => 4.17.0

Release Notes:
https://www.zetetic.net/blog/2026/07/08/sqlcipher-4.17.0-release/

Changelog:
https://github.com/sqlcipher/sqlcipher/releases/tag/v4.17.0

PR:             296869
Approved by:    jharris at widomaker.com (maintainer, timeout 26 days)
Security:       CVE-2026-11822
Security:       CVE-2026-11824
Sponsored by:   UNIS Labs
MFH:            2026Q3
DeltaFile
+3-3databases/sqlcipher/distinfo
+1-1databases/sqlcipher/pkg-plist
+1-1databases/sqlcipher/Makefile
+5-53 files

FreeBSD/ports a3fec7ewww/wordpress Makefile, www/wordpress/files patch-7.0.3-to-7.0.4

www/wordpress: upgrade to 7.0.4 (security)

Upstream does not offer localized tarballs for 7.0.4, so download the
7.0.3 tarballs and apply files/patch-7.0.3-to-7.0.4 instead.
DeltaFile
+349-0www/wordpress/files/patch-7.0.3-to-7.0.4
+4-6www/wordpress/Makefile
+353-62 files

FreeBSD/ports b014d56devel/gitaly distinfo, net/gitlab-agent distinfo

www/gitlab: security and patch update to 19.2.2

Changes:        https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-2-released/?nav=19.2.2
Security:       2c73b6d5-971c-11f1-bdc8-2cf05da270f3
DeltaFile
+13-13devel/gitaly/distinfo
+6-6www/gitlab/distinfo
+5-5www/gitlab-workhorse/distinfo
+5-5www/gitlab-pages/distinfo
+5-5net/gitlab-agent/distinfo
+1-1www/gitlab/Makefile.common
+35-356 files

FreeBSD/ports 216139email/notmuch-emacs Makefile pkg-plist

mail/notmuch-emacs: Do not gzip elisp files

There are some shortcomings in the elisp ports framework related to
gzipped elisp files that need to be fixed.  Moreover, gzipping these
files is a tradeoff, and the overall benefit is questionable.

Sponsored by:   The FreeBSD Foundation
DeltaFile
+22-22mail/notmuch-emacs/pkg-plist
+1-2mail/notmuch-emacs/Makefile
+23-242 files

FreeBSD/ports 1e73295mail/notmuch-emacs Makefile pkg-plist

mail/notmuch-emacs: Reorganize installation layout

Install elisp to a port-specific subdirectory of ${EMACS_SITE_LISPDIR}
rather than directly into it, avoiding filename collisions with other
elisp ports.

Sponsored by:   The FreeBSD Foundation
DeltaFile
+23-23mail/notmuch-emacs/pkg-plist
+5-5mail/notmuch-emacs/Makefile
+28-282 files

FreeBSD/ports 09646ddsecurity/wpa_supplicant210 Makefile

security/wpa_supplicant210: Accelerate removal

This software is insecure. Let's accelerate its removal.
DeltaFile
+1-1security/wpa_supplicant210/Makefile
+1-11 files

FreeBSD/ports 7f5f036net/hostapd210 Makefile

net/hostapd210: Accelerate removal

This software is insecure. Let's accelerate its removal.
DeltaFile
+1-1net/hostapd210/Makefile
+1-11 files

FreeBSD/ports dbfa689net/hostapd Makefile, net/hostapd-devel Makefile

net/hostapd*: Add missing BSD driver

Reported by:            Franco Fichtner <franco at opnsense.org>
Obtained from:          opnsense commit aa30123
DeltaFile
+2-1net/hostapd/Makefile
+2-1net/hostapd-devel/Makefile
+4-22 files

FreeBSD/ports cc92cc4mail/spamassassin Makefile, mail/spamassassin-devel Makefile

mail/spamassassin*: Remove the environment ENV from the environment

The Perl taint module flags the ENV environment variable as insecure
because it cannot assume the file it points to is safe.

PR:             297394
MFH:            2026Q3
DeltaFile
+10-0mail/spamassassin-devel/files/patch-sa-update.raw
+10-0mail/spamassassin/files/patch-sa-update.raw
+1-1mail/spamassassin/Makefile
+1-1mail/spamassassin-devel/Makefile
+22-24 files

FreeBSD/ports b32bea4databases/mysql80-server pkg-plist Makefile, databases/mysql84-server pkg-plist Makefile

databases/mysql*-server: Fix plist issue

Move LICENSE.router and README.router from ${PREFIX} to ${DOCSDIR},
where they belong according to hier(7).

PR:             290283
Reported by:    se
Sponsored by:   Netzkommune GmbH
DeltaFile
+2-2databases/mysql97-server/pkg-plist
+2-2databases/mysql84-server/pkg-plist
+2-2databases/mysql80-server/pkg-plist
+3-1databases/mysql97-server/Makefile
+3-1databases/mysql84-server/Makefile
+3-1databases/mysql80-server/Makefile
+15-96 files

FreeBSD/ports 9ab47e5security/vuxml/vuln 2026.xml

security/vuxml: document gitlab vulnerabilities
DeltaFile
+53-0security/vuxml/vuln/2026.xml
+53-01 files

FreeBSD/ports 3dc6f48editors/pluma pkg-plist

editors/pluma: regen plist again after 9d3d0ed99c6a
DeltaFile
+0-22editors/pluma/pkg-plist
+0-221 files

FreeBSD/ports 2a8acfax11-wm/niri Makefile.crates

x11-wm/niri: cleanup Makefile.crates

Approved by:    portmgr (fix blanket), maintainer timeout
DeltaFile
+0-6x11-wm/niri/Makefile.crates
+0-61 files

FreeBSD/ports 67af815devel/tree-sitter-cli Makefile Makefile.crates

devel/tree-sitter-cli: update to v0.26.12

Changelog:
https://github.com/tree-sitter/tree-sitter/compare/v0.26.9...v0.26.12

PR:     296683
DeltaFile
+129-155devel/tree-sitter-cli/distinfo
+63-76devel/tree-sitter-cli/Makefile.crates
+1-2devel/tree-sitter-cli/Makefile
+193-2333 files

FreeBSD/ports 2a6c331databases/metabase Makefile distinfo

databases/metabase: Update 0.55.4.1 => 0.58.24

Announcement:
https://www.metabase.com/releases/metabase-58

PR:             297333
Approved by:    Daniel Morante <daniel at morante.net> (maintainer)
Security:       GHSA-vwf4-m7j8-wcjf
Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit c3fd848c44e84e5261f65a4cfceb3d27c9f8d25c)
DeltaFile
+3-3databases/metabase/distinfo
+1-2databases/metabase/Makefile
+4-52 files

FreeBSD/ports c3fd848databases/metabase Makefile distinfo

databases/metabase: Update 0.55.4.1 => 0.58.24

Announcement:
https://www.metabase.com/releases/metabase-58

PR:             297333
Approved by:    Daniel Morante <daniel at morante.net> (maintainer)
Security:       GHSA-vwf4-m7j8-wcjf
Sponsored by:   UNIS Labs
MFH:            2026Q3
DeltaFile
+3-3databases/metabase/distinfo
+1-2databases/metabase/Makefile
+4-52 files

FreeBSD/ports 9d3d0ededitors/pluma Makefile pkg-plist

editors/pluma: avoid generating "*.cpython3*.opt-2.pyc" by -OO on byte compiling

It unnecessary touch and rebuild setuptools component:
=>> Error: Filesystem touched during stage (files must install to ${STAGEDIR}):
extra: usr/local/lib/python3.12/site-packages/_distutils_hack/__pycache__/__init__.cpython-312.opt-2.pyc

Reported by:    bulk -t
DeltaFile
+0-8editors/pluma/pkg-plist
+5-0editors/pluma/Makefile
+5-82 files

FreeBSD/ports 9a15762textproc/ibus Makefile pkg-plist

textproc/ibus: avoid generating "*.cpython3*.opt-2.pyc" by -OO on byte compiling

It unnecessary touch and rebuild setuptools component:
=>> Error: Filesystem touched during stage (files must install to ${STAGEDIR}):
extra: usr/local/lib/python3.12/site-packages/_distutils_hack/__pycache__/__init__.cpython-312.opt-2.pyc

Reported by:    bulk -t
Approved by:    portmgr blanket
DeltaFile
+0-10textproc/ibus/pkg-plist
+5-0textproc/ibus/Makefile
+5-102 files

FreeBSD/ports 9f12c0dsysutils/leaf Makefile Makefile.crates

sysutils/leaf: Update to 1.27.1

Changelog: https://github.com/RivoLink/leaf/blob/1.27.1/CHANGELOG.md

Reported by:    GitHub (watch releases)
DeltaFile
+47-27sysutils/leaf/distinfo
+22-12sysutils/leaf/Makefile.crates
+1-1sysutils/leaf/Makefile
+70-403 files

FreeBSD/ports 270c9edscience/dakota/files patch-packages_external_muq2_MUQ_Modeling_WorkPiece.h

science/dakota: fix build (+)

Add missed #include "boost/core/demangle.hpp"

With hat:       office/boost
DeltaFile
+5-1science/dakota/files/patch-packages_external_muq2_MUQ_Modeling_WorkPiece.h
+5-11 files

FreeBSD/ports 893153fx11-fonts/font-winitzki-cyrillic pkg-plist pkg-descr

x11-fonts/font-winitzki-cyrillic: Update to 1.0.4

Update WWW and pkg-descr.
Add LICENSE.
Switch from pkg-plist to PLIST_FILES.

https://lists.x.org/archives/xorg-announce/2023-February/003369.html

PR:             297490
Approved by:    x11 (arrowd)
Approved by:    osa (mentor)
DeltaFile
+7-5x11-fonts/font-winitzki-cyrillic/Makefile
+3-2x11-fonts/font-winitzki-cyrillic/distinfo
+2-1x11-fonts/font-winitzki-cyrillic/pkg-descr
+0-1x11-fonts/font-winitzki-cyrillic/pkg-plist
+12-94 files

FreeBSD/ports aa132abmisc/crush Makefile distinfo, misc/crush/files extra-patch-disable-command-blocking

misc/crush: Update to 0.89.0

Changelog: https://github.com/charmbracelet/crush/releases/tag/v0.89.0

Reported by:    GitHub (watch releases)
DeltaFile
+5-5misc/crush/distinfo
+1-1misc/crush/files/extra-patch-disable-command-blocking
+1-1misc/crush/Makefile
+7-73 files

FreeBSD/ports f08874ex11-fm/xfe Makefile distinfo

x11-fm/xfe: Update to 2.1.11
DeltaFile
+3-3x11-fm/xfe/distinfo
+1-1x11-fm/xfe/Makefile
+4-42 files

FreeBSD/ports 1c4a5b4shells/iris Makefile distinfo

shells/iris: Update to 0.6.3

Changelog: https://github.com/versenilvis/IRIS/blob/main/CHANGELOG.md#v063---2026-08-13

Reported by:    GitHub (watch releases)
DeltaFile
+5-5shells/iris/distinfo
+1-1shells/iris/Makefile
+6-62 files

FreeBSD/ports 171963caudio/ocp Makefile distinfo

audio/ocp: Update to 3.5.0
DeltaFile
+3-3audio/ocp/distinfo
+1-1audio/ocp/Makefile
+4-42 files

FreeBSD/ports dcbd71faudio/sidplayfp Makefile distinfo

audio/sidplayfp: Update to 3.2.0
DeltaFile
+3-3audio/sidplayfp/distinfo
+1-1audio/sidplayfp/Makefile
+4-42 files

FreeBSD/ports 7f82e8bmisc/py-litellm Makefile distinfo

misc/py-litellm: Update to 1.96.2

Changelog: https://github.com/BerriAI/litellm/releases/tag/v1.96.2

Reported by:    Repology
DeltaFile
+3-3misc/py-litellm/distinfo
+1-1misc/py-litellm/Makefile
+4-42 files

FreeBSD/ports e23053awww/mod_auth_mysql2 Makefile

www/mod_auth_mysql2: Deprecate and set expiration date

Abandoned upstream (1.11 from 2016 was explicitly the final release).
"Require group" authorization is silently non-functional with Apache
2.4, and the SSL option no longer builds against MySQL 8.x. All functionality
is covered by mod_authn_dbd / mod_authz_dbd shipped with Apache itself.

PR:             245911
Sponsored by:   Netzkommune GmbH
DeltaFile
+3-0www/mod_auth_mysql2/Makefile
+3-01 files

FreeBSD/ports 3d2da83sysutils/stackit Makefile distinfo

sysutils/stackit: Update 0.70.0 => 0.71.0

Changelog:
https://github.com/stackitcloud/stackit-cli/releases/tag/v0.71.0

PR:             297491
Sponsored by:   UNIS Labs
DeltaFile
+5-5sysutils/stackit/distinfo
+1-1sysutils/stackit/Makefile
+6-62 files