BSD Commit Log Search

filesystems/zerofs: Update to 2.3.5

Concurrent 9P client requests are now bounded and reply progress is
tracked per connection, and the kernel client gained recovery fixes
along with Linux 7.3 compatibility.  Compaction repacking was
overhauled, its output data blocks are cached and the GC intervals
relaxed.  Deku was replaced by explicit NBD and shared 9p slice codecs,
and frame encoding, segment uploads and metadata encoding do fewer
copies and allocations.

PR:             298643
Changes:        https://github.com/Barre/ZeroFS/releases
Sponsored by:   Netzkommune GmbH

misc/py-pytorch: unbreak on amd64

Add FreeBSD patches for FreeBSD.
Many patches were upstreamed.

databases/greptimedb: broken due to removed feature in rust-nightly

Reported by:    fallout

*/*: Bump port revision after electron43 update (c1bd79ffad3a)

devel/electron43: Update to 43.7.3

Changelog:
- https://github.com/electron/electron/releases/tag/v43.7.2
- https://github.com/electron/electron/releases/tag/v43.7.3

Reported by:    GitHub (watch releases)

sysutils/uhidd: unbreak DEVD after 495f8d8067f4

ld-elf.so.1: Shared object "%%LIBCUSE%%" not found

PR:             296543
(cherry picked from commit f42be6de8539006230a8ee4ccdaca19530d60bf6)

sysutils/uhidd: unbreak DEVD after 495f8d8067f4

ld-elf.so.1: Shared object "%%LIBCUSE%%" not found

PR:             296543

x11/windowtolayer: update to 0.4.0

Changes:        https://gitlab.freedesktop.org/mstoeckl/windowtolayer/-/releases/v0.4.0
Reported by:    GitLab (notify releases)

www/evcc: update to 0.315.2

Changes:        https://github.com/evcc-io/evcc/releases

editors/openoffice-devel: switch to upstream trunk

Switch to following the upstream trunk branch.  The AOO42X is likely a
dead end, and the next major release will propably be 5.0.0.

devel/py-virtualenv: Update to 21.7.16

ChangeLog:

1. https://github.com/pypa/virtualenv/releases/tag/21.7.15
2. https://github.com/pypa/virtualenv/releases/tag/21.7.16

Reported by:    "github-actions[bot]" <notifications at github.com>

devel/{,py-}ruff: Update to 0.16.8

PR:             298651
Approved by:    yuri (maintainer)

www/evcc: update to 0.315.0

Add patch to use vite-plus 0.2.9
Switch to build using vite-plus

Changes:        https://github.com/evcc-io/evcc/releases
PR:             298306

devel/lief: fix build issue

Use vendored utf8cpp module.
The system installed one in incompatible.

PR:             298528
Approved by:    blanket (fix build)

devel/glaze: update 7.9.1 → 8.4.0

biology/rampler: update 2.0.0 → 2.1.1

devel/tauri-cli: update WWW

misc/lf: update 42 → 42.16

This fixes the bug with key strokes lag when pressing q didn't exit the
app and q needed to be pressed again.

devel/flatcc: update 0.6.3 → 0.6.4

www/angie-module-njs: Security update to 1.0.1

This maintenance update of njs fixes three security issues:

- Access control bypass in js_access when an asynchronous request body
  continuation threw an exception or produced an unhandled rejection
  (CVE-2026-18329). Previously, nginx could continue processing the
  request as though the js_access check had succeeded. Affects
  0.9.9-1.0.0. Thanks to Ta Duc Thien.

- Worker process crash when reading Response.statusText after an
  upstream server returned a status line with an empty reason phrase
  (CVE-2026-78222). Affects 0.5.1-1.0.0.

- Heap buffer overflow while parsing namespace prefix lists passed to
  xml.exclusiveC14n() (CVE-2026-78689). Affects 0.7.10-1.0.0. Thanks to
  Vladimir, Vulnerability Research Tech Lead @ Cyera, evilgensec.

PR:             298637

    [5 lines not shown]

www/angie: Security update to 1.12.2

This maintenance release fixes CVE-2026-90439:

When using an OpenSSL version without native HTTP/3 support (3.5.0
or earlier), if the default server for the address that accepted a
regular HTTPS request also used HTTP/3 (the listen directive with the
quic parameter, possibly on a different port), while a server block
without HTTP/3 was selected by domain name (SNI), limited worker process
memory corruption or a worker process crash could occur
(CVE-2026-90439); the fix was ported from nginx 1.31.6.

PR:             298632
Changes:        https://en.angie.software/angie/docs/oss_changes/#angie-1-12-2
Security:       6cf2ff4b-b38c-11f1-a655-3497f65b111b
Sponsored by:   Netzkommune GmbH

(cherry picked from commit 1fa3fa28695213f50759b063a1097cc5ffdf8d83)

devel/rubygem-opentelemetry-exporter-otlp: update to 0.36.0

Changes:        https://open-telemetry.github.io/opentelemetry-ruby/opentelemetry-exporter-otlp/v0.30.0/file.CHANGELOG.html

archivers/lrzip: update to 0.7.3

games/naev: Fix build

Reported by:    pkg-fallout

games/etlegacy: Update to 2.86.0

games/alienarena*: update to 7.72.3

misc/codex: Update to 0.155.1

Changelog:
- https://github.com/openai/codex/releases/tag/rust-v0.155.0
- https://github.com/openai/codex/releases/tag/rust-v0.155.1

Reported by:    GitHub (watch releases)

graphics/R-cran-Cairo: New port

R graphics device using the cairographics library for high-quality
vector (PDF, PostScript, SVG) and bitmap (PNG, JPEG, TIFF) output,
plus X11/Win32 display backends.

Reviewed by:    fuz, mat (previous revision)
Differential Revision:  https://reviews.freebsd.org/D22681

Update R-cran-* WWW to modern URL

Old R-cran-* ports have https://cran.r-project.org/web/packages/${PORTNAME}

New R-cran-* ports have https://cran.r-project.org/package=${PORTNAME}

Replace all the old WWW URLs with new WWW URLs

Reviewed by:    fuz
Differential Revision:  https://reviews.freebsd.org/D59714

textproc/tgrep: Update to 1.0.9

Changelog: https://github.com/microsoft/tgrep/releases/tag/v1.0.9

Reported by:    GitHub (watch releases)