BSD Commit Log Search

science/anari: new port, ANARI Cross-Platform 3D Rendering Engine API

devel/scnlib: new port, scanf for modern C++

archivers/zip: fix command injection vulnerability

Insufficient quoting in the -T option gave rise to the possibility of
a command injection.  Apply a fix from the Debian project.

Reported by:    nimaje (via IRC)
See also:       https://sintonen.fi/advisories/infozip-test-option-command-injection.txt
MFH:            2026Q3

(cherry picked from commit 7a7406eab8d872fe5549010305c451e0959db57c)

games/OpenLoco: update to 26.08

Changelog: https://github.com/OpenLoco/OpenLoco/releases/tag/v26.08

net/go-pkgsite: update to 0.4.0

Changelog: https://github.com/golang/pkgsite/compare/v0.3.0...v0.4.0

devel/go-tools: update to 0.49.0

Selected upstream changes:

 - present: correct documented time for dates
 - present: validate background directive arguments
 - cmd/present: fix obsolete flag in security warning
 - present, cmd/present, cmd/present2md: document lack of security hardening
 - go.mod: update golang.org/x dependencies

Changelog: https://github.com/golang/tools/compare/v0.48.0...v0.49.0

archivers/zip: fix command injection vulnerability

Insufficient quoting in the -T option gave rise to the possibility of
a command injection.  Apply a fix from the Debian project.

Reported by:    nimaje (via IRC)
See also:       https://sintonen.fi/advisories/infozip-test-option-command-injection.txt
MFH:            2026Q3

lang/intercal: update to 0.35

 - make testsuite work by using gmake to build it

Changelog: http://www.catb.org/~esr/intercal/NEWS.html

devel/bmk: update to 0.4

Changelog: https://github.com/realchonk/bmk/blob/0.4/CHANGELOG.md

math/R-cran-GPArotation: Update to 2026.8-1

Changelog: https://cran.r-project.org/web/packages/GPArotation/NEWS

www/py-autobahn: Update version 25.10.2=>25.12.1

Changelog: https://github.com/crossbario/autobahn-python/releases/tag/v25.12.1

www/py-praw: Update version 8.0.2=>8.0.3

Changelog: https://github.com/praw-dev/praw/releases/tag/v8.0.3

devel/py-hgtools: Update version 8.2.0=>8.2.1

Changelog: https://github.com/jaraco/jaraco.vcs/releases/tag/hgtools-v8.2.1

devel/py-tox: Update version 4.37.0=>4.38.0

Changelog: https://github.com/tox-dev/tox/releases/tag/4.38.0

devel/py-pre-commit: Update version 4.6.1=>4.6.2

Changelog: https://github.com/pre-commit/pre-commit/releases/tag/v4.6.2

devel/libepp-nicbr: Return to pool

textproc/groonga: Update version 16.0.8=>16.0.9

Changelog: https://groonga.org/docs/news/16.html#release-16-0-9

devel/protobuf-go: Update version 1.36.11=>1.36.12

Changelog: https://github.com/protocolbuffers/protobuf-go/releases/tag/v1.36.12

devel/grpc-gateway: Update version 2.29.0=>2.30.0

Changelog: https://github.com/grpc-ecosystem/grpc-gateway/releases/tag/v2.30.0

sysutils/consul: Update version 2.0.2=>2.0.3

Changelog: https://github.com/hashicorp/consul/releases/tag/v2.0.3

net/radsecproxy: Update version 1.11.3=>1.11.4

Changelog: https://github.com/radsecproxy/radsecproxy/releases/tag/1.11.4

textproc/vale: Update version 3.17.0=>3.17.1

Changelog: https://github.com/errata-ai/vale/releases/tag/v3.17.1

www/zola: Update version 0.23.0=>0.23.1

Changelog: https://github.com/getzola/zola/releases/tag/v0.23.1

audio/umurmur: Update version 0.3.1=>0.4.0

Changelog: https://github.com/umurmur/umurmur/releases/tag/v0.4.0

www/py-fqdn: Update version 1.4.0=>1.5.0

Changelog: https://github.com/ypcrts/fqdn/releases/tag/v1.5.0

PR:             297055
Approved by:    whitejv81 at gmail.com (maintainer-timeout)

emulators/qemu: Update version 11.0.3=>11.1.0

Changelog: https://wiki.qemu.org/ChangeLog/11.1

finance/py-stripe: Update version 6.6.0=>6.7.0

Changelog: https://github.com/stripe/stripe-python/releases/tag/v6.7.0

dns/cascade: Update version 4731675c2=>9a1bdbcf4

This is equivalent to 0.1.0-beta6.

This is a breaking release, it is NOT backward compatible with
0.1.0-beta5.  State files generated by earlier versions must be removed
before starting the beta6 daemon.

Changelog:
https://github.com/NLnetLabs/cascade/compare/v0.1.0-beta5...v0.1.0-beta6

databases/clickhouse-devel: Update version 26.7.1.1315=>26.7.2.59

Changelog: https://github.com/ClickHouse/ClickHouse/releases/tag/v26.7.2.59-stable

net/google-cloud-sdk: Update version 579.0.0=>580.0.0