filesystems/ntfs: update NTFS-3G to version 2026.2.25
This release contains mostly bugfixes and small improvements.
CVE-2026-40706 didn't affect us because we configure the port
without the POSIX ACL support.
While here, make partition geometry detection work on FreeBSD
to allow creating bootable NTFS partitions.
PR: 294550
Submitted by: wulf
News flash: https://opennet.ru/65262-ntfs
devel/heimdall: Fix build on FreeBSD 14 and 15
The libusb_set_option() call only exists in base libusb 1.0.27 and
later. The 2.2.2 source uses it unguarded to opt into the UsbDk backend
and to set the libusb log level, so 14.x and 15.x fail to build.
Guard the UsbDk opt-in call which targets the Windows USB DriverKit
backend. It existed nowhere in 1.4.2 heimdall before this. Fall back to
libusb_set_debug() for the log level used before 1.0.27.
Approved by: arrowd (co-mentor)
(cherry picked from commit c1c8bc4a8ac5f6f2623402f1a5b06d3ff360ac60)
devel/heimdall: Fix build on FreeBSD 14 and 15
The libusb_set_option() call only exists in base libusb 1.0.27 and
later. The 2.2.2 source uses it unguarded to opt into the UsbDk backend
and to set the libusb log level, so 14.x and 15.x fail to build.
Guard the UsbDk opt-in call which targets the Windows USB DriverKit
backend. It existed nowhere in 1.4.2 heimdall before this. Fall back to
libusb_set_debug() for the log level used before 1.0.27.
Approved by: arrowd (co-mentor)
devel/got: update to 0.130.1
User-visible changes:
- default to using SHA256 object IDs in newly created repositories
The got-portable-0.130 release accidentally skipped some commits
from got 0.130.
(cherry picked from commit 734848d93cd26f5028d7fbc57e2d0b31a27bf9d2)
devel/got: Cherry-pick patches for shared locking
When operating on a worktree, got locks the tree in order to avoid
problems with concurrent operations. Until now, got always used
exclusive locks, which caused problems when e.g. two separate parts
of the FreeBSD release build ran 'got tree' at once.
This has been fixed upstream but the 15.2 release cycle needs the
changes urgently and can't wait for the next got-portable release,
so cherry-pick those patches.
Reviewed by: naddy
Sponsored by: Amazon
MFC after: 1 minute
Differential Revision: https://reviews.freebsd.org/D61327
(cherry picked from commit 31363b8551ac3b98eb991be84e7c8b2f8c5aaabf)
devel/got: update to 0.130
User-visible changes:
- default to using SHA256 object IDs in newly created repositories
(cherry picked from commit bacaa99e545873d253f31dc46f3b70da9356b749)
devel/got: Cherry-pick patches for shared locking
When operating on a worktree, got locks the tree in order to avoid
problems with concurrent operations. Until now, got always used
exclusive locks, which caused problems when e.g. two separate parts
of the FreeBSD release build ran 'got tree' at once.
This has been fixed upstream but the 15.2 release cycle needs the
changes urgently and can't wait for the next got-portable release,
so cherry-pick those patches.
Reviewed by: naddy
Sponsored by: Amazon
MFC after: 1 minute
Differential Revision: https://reviews.freebsd.org/D61327
misc/zoneinfo: Update to 2026f
Upstream changes:
* Cuba will not fall back to -05 on 2026-11-01 and instead plans to
maintain -04 through 2027-11-07.
* No more leap seconds, and leap second tables no longer expire
* Improve 1965/1966 data for Brazil: in 1965 Brazil ended DST on
03-31 at 24:00 not 00:00, and in 1966 it ended DST on 03-01 at
01:00 not 00:00.
Changelog: https://data.iana.org/time-zones/tzdb/NEWS
comms/py-pynitrokey: Update 0.14.0 => 0.14.1
This is a maintenance release that updates the bundled root
certificates to remove the compromised emSign certificate.
Changelog:
https://github.com/Nitrokey/pynitrokey/releases/tag/v0.14.1
PR: 299842
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
security/py-certifi: Update to 2026.10.23
The bundle drops "emSign ECC Root CA - G3", "emSign Root CA - C1" and
"emSign ECC Root CA - C3", following the eMudhra emSign CA compromise:
2026.10.18 removed the emSign roots, 2026.10.19 restored the ones that
are not affected, and 2026.10.23 removed two more. The package layout
and the build are unchanged.
Commit log:
https://github.com/certifi/python-certifi/compare/2026.07.22...2026.10.23
PR: 299779
Approved by: sunpoet (maintainer timeout, 13 days)
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 8f6ec8f61ee24a69eaac2b1131a0f411bde9a004)
security/py-certifi: Update to 2026.10.23
The bundle drops "emSign ECC Root CA - G3", "emSign Root CA - C1" and
"emSign ECC Root CA - C3", following the eMudhra emSign CA compromise:
2026.10.18 removed the emSign roots, 2026.10.19 restored the ones that
are not affected, and 2026.10.23 removed two more. The package layout
and the build are unchanged.
Commit log:
https://github.com/certifi/python-certifi/compare/2026.07.22...2026.10.23
PR: 299779
Approved by: sunpoet (maintainer timeout, 13 days)
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
