BSD Commit Log Search

security/vuxml: document Gitlab vulnerability

audio/zrythm: fix configure

xdg-open is added to BUILD_DEPENDS.

Reported by:    fallout

(cherry picked from commit dc7b5247bffa752176de16ff8ecf6d4d3e0e10e8)

graphics/jpeg-turbo: Update to 3.2.1

Unit tests now passes without -ffp-model=strict (CFLAGS) and
use system zlib instead of bundled

Changelog:
https://github.com/libjpeg-turbo/libjpeg-turbo/releases/tag/3.2.1

PR:             300235
Reviewed by:    desktop (arrowd)
Security:       CVE-2026-75466
Exp-run by:     antoine

devel/libconfig: Update to 1.8.3

Switch to CMake, simplifies port Makefile and improves support
for consumers

Changelog: https://github.com/hyperrealm/libconfig/blob/v1.8.3/ChangeLog

PR:             299906
Approved by:    maintainer timeout, 2+ weeks

www/rubygem-addressable28: Mark DEPRECATED

PR:             299358
Approved by:    ruby (maintainer, timeout 2 weeks)
Approved by:    osa, fluffy (mentors, implicit)
MFH:            2026Q4

(cherry picked from commit e20b1008473dd32c5924aa78b9a9e76aee3c5878)

www/rubygem-addressable28: Mark DEPRECATED

PR:             299358
Approved by:    ruby (maintainer, timeout 2 weeks)
Approved by:    osa, fluffy (mentors, implicit)
MFH:            2026Q4

devel/py-ty: Update to 0.0.100

Changelog: https://github.com/astral-sh/ty/blob/0.0.100/CHANGELOG.md

Reported by:    portscout

sysutils/vitaly: [NEW PORT] VIA/Vial CLI configuration tool for QMK keyboards

Vial CLI tool allows to configure keyboard through VIA/Vial protocol with
command line interface. It supports QMK keycodes notation together with aliases.

Keys, encoders, combos, macros, tap dances, key overrides and alt repeat keys
are supported. RGB lighting control is supported too.

Non-colored underglow is not supported for now because there is no devices with
such features around me.

Tool support --help for tool as a whole and for all subcommands.

WWW:         https://github.com/bskaplou/vitaly/

mail/py-resend: Update to 2.53.2

Changelog:
- https://github.com/resend/resend-python/releases/tag/v2.53.0
- https://github.com/resend/resend-python/releases/tag/v2.53.1
- https://github.com/resend/resend-python/releases/tag/v2.53.2

Reported by:    portscout

misc/codex: Update to 0.167.0

Changelog: https://github.com/openai/codex/releases/tag/rust-v0.167.0

Reported by:    GitHub (watch releases)

graphics/p5-Image-ExifTool-devel: Update 13.61 => 13.62

Changelog:
https://exiftool.org/history.html#v13.62

PR:             300667
Sponsored by:   UNIS Labs (vvd, commit patch)

x11/nvidia-kmod*, graphics/nvidia-drm-*-kmod*: Use sys/stdarg.h

machine/stdarg.h is deprecated and will be removed in due course.
This deorbits machine/stdarg.h and use sys/stdarg.h instead.

Not bumping PORTREVISION, as this is a build fix for future
removal of machine/stdarg.h and shouldn't cause changes
in contents of pkgs.

PR:             300622
Co-authored-by: Brooks Davis <brooks at FreeBSD.org>
Differential Revision:  https://reviews.freebsd.org/D61415

security/vuxml: Document MIT krb5 Security Advisory 2026-001

www/piwigo: Update to 16.5.0.

graphics/py-pypdfium2: update 5.13.0 → 5.15.2

graphics/pdfium: update 8066 → 8152

PR:             300011
Approved by:    matias at pizarro.net (maintainer's timeout; 17 days)

misc/ncnn: fix plist

Reported by:    fallout

math/minizinc: fix build due to the C++14 requirement

Add the patch enabling C++14.
The upstream is notified.

math/gecode: enable the GIST option by default

It is needed by dependencies.

textproc/py-agate-excel: update to 0.4.3

Switch to pep517 build with setuptools.

Changes:        https://github.com/wireservice/agate-excel/blob/0.4.3/CHANGELOG.rst
Reported-by:    repology, portscout

security/vuxml: Document chromium security fixes

Obtained from:  https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html
Sponsored by:   Netzkommune GmbH

mail/thunderbird-esr: update to 153.7.0 (ga)

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/153.7.0esr/releasenotes/

(cherry picked from commit 865bf8edf7b3db657c2d2da7acf3a688e458dc7e)

mail/thunderbird-esr: update to 153.7.0 (ga)

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/153.7.0esr/releasenotes/

devel/git: Update to 2.56.1

This is a set of coordinated security fix releases addressing
CVE-2026-111760, CVE-2026-113408, CVE-2026-114466, CVE-2026-114467,
CVE-2026-114469 and CVE-2026-105437.

Security:       24e1443d-dd3b-11f1-b094-bc2411e144f8
Sponsored by:   Rubicon Communications, LLC ("Netgate")

security/vuxml: Document git vulnerabilities

* CVE-2026-111760
* CVE-2026-113408
* CVE-2026-114466
* CVE-2026-114467
* CVE-2026-114469
* CVE-2026-105437

Sponsored by:   Rubicon Communications, LLC ("Netgate")

misc/py-pyqir: update 0.12.6 → 0.12.8

sysutils/mise: update 2026.10.23 → 2026.11.6

ChangeLog: https://github.com/jdx/mise/releases/tag/v2026.11.6

www/authelia: update 4.39.20 → 4.39.28; add service pid file; update default service config

Service config was outdated. The new one now successfully starts the
service.

PR:             300045
Submitted by:   paul.le.gauret at gmail.com (port update)

shells/nushell: update 0.116.1 → 0.117.0

ChangeLog: https://www.nushell.sh/blog/2026-11-09-nushell_v0_117_0.html

Plugins (shells/nu_plugin_*) are also updated as usual.

databases/weaviate: update 1.40.4 → 1.40.5