www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Build the dav_ext, auth_digest, subs_filter, link and upload modules from
their own source ports. freenginx drops HTTP_SUBS_FILTER, which needs a
structure field freenginx does not provide.
Sponsored by: Netzkommune GmbH
www/nginx-module-link: Add New Port
Sources of the link_func module, which dispatches a request to a function
in a C library loaded at run time. The nginx ports build it from here
when their LINK option is set.
Sponsored by: Netzkommune GmbH
www/nginx-module-subs-filter: Add New Port
Sources of the subs_filter module, which rewrites strings in the response
body. The nginx ports build it from here when their HTTP_SUBS_FILTER
option is set.
Sponsored by: Netzkommune GmbH
www/nginx-module-auth-digest: Add New Port
Sources of the auth_digest module, which adds RFC 2617 HTTP digest
authentication. The nginx ports build it from here when their
HTTP_AUTH_DIGEST option is set.
Sponsored by: Netzkommune GmbH
www/nginx-module-dav-ext: Add New Port
Sources of the dav_ext module, which adds the PROPFIND, OPTIONS, LOCK and
UNLOCK WebDAV methods on top of the standard dav module. The nginx ports
build it from here when their HTTP_DAV_EXT option is set.
Sponsored by: Netzkommune GmbH
www/nginx-module-upload: Add New Port
Sources of the upload module, a maintained fork that adds multipart and
resumable file uploads. The nginx ports build it from here when their
UPLOAD option is set.
Sponsored by: Netzkommune GmbH
x11/xpra: Update to 6.5.5
Changes: https://github.com/Xpra-org/xpra/releases/tag/v6.5.5
Make the OPTIONS work. The port builds with pep517 but passed its
--with-X/--without-X switches through PYDISTUTILS_*ARGS, which pep517
ignores, so setup.py autodetected everything. Pass them through
XPRA_EXTRA_BUILD_ARGS in MAKE_ENV, which setup.py reads.
- Every OPTION maps to a switch: AVAHI=mdns, CUPS=printing, DOCS=docs,
GSTREAMER=gstreamer (never passed before), LIBYUV=csc_libyuv,
WEBCAM=webcam. pandoc is only needed for DOCS.
- Drop dec_avcodec2 and enc_ffmpeg (6.5.5 has no FFmpeg codecs), the
unused libavcodec LIB_DEPENDS and their DESCs.
- GSTREAMER off removes xpra/codecs/gstreamer; xpra/gstreamer is always
installed (--without-gstreamer only turns off gstreamer_audio and
gstreamer_video).
Changes in the default package (AVAHI CUPS DOCS GSTREAMER), which was
[31 lines not shown]
graphics/yacreader: Fix build with unarr 1.2.0
unarr 1.2.0 made UNARR_API_VERSION an expression containing casts, which
is not valid in #if. Drop the version guards; the check was for unarr
1.1.0 or newer and the tree is well past that.
Reported upstream: https://github.com/selmf/unarr/issues/40
MFH: 2026Q4
archivers/unarr: Update to 1.2.0
Fixes four security issues in the rar, zip and tar readers, two of them
with assigned CVEs.
Drop both patches. Upstream raised the CMake minimum to the same range
the port was patching in, and the bundled LZMA SDK (now v26.05) handles
FreeBSD's elf_aux_info() on arm and aarch64 by itself.
Switch to the release tarball upstream now publishes.
Take maintainership.
ChangeLog: https://github.com/selmf/unarr/blob/v1.2.0/CHANGELOG.md
MFH: 2026Q4
Security: 6f31f4ab-d5fd-11f1-b2f0-002b67dfc673
www/serendipity: 2.5.0 -> 2.6.1
Changelog:
https://github.com/s9y/Serendipity/releases/tag/2.6.0https://github.com/s9y/Serendipity/releases/tag/2.6.1
Security: A critical bug in the username logic, allowing existing usernames to be duplicated and to capture the rights of existing accounts
Security: XSS injection vector on the search page, the search term was not properly (or rather, twice) escaped
Security: An outdated blacklist for downloads into the media library, making network resources available that ought to be blocked.
Security: An open redirect in exit.php when the trackexit plugin was installed and the blog used for URL redirects via an option in the plugin
devel/{,java-}subversion{,-lts}: misc low-risk cleanups
- java-subversion: document the real cause of MAKE_JOBS_UNSAFE (build.conf's
Java-target add-deps only thread into the phony aggregate target, not the
javac -h compile rule, so -j can run javahl-types-java before
javahl-java's NativeResources.class exists).
- subversion{,-lts}: drop GPG_AGENT_BUILD_DEPENDS; --with-gpg-agent is a
pure configure-time #define with no build-time dependency on the gpg-agent
binary, only a runtime one (already covered by GPG_AGENT_RUN_DEPENDS).
- subversion{,-lts}: remove the dead .if ${PREFIX} != "/usr" guard around two
REINPLACE_CMD calls in post-patch; PREFIX defaults to LOCALBASE and is never
literally /usr in a standard ports build, so the guard was always true.
- mod_subversion: remove the dead PLIST_SUB+= SED=${SED} token;
pkg-plist has no %%SED%% reference.
Bump PORTREVISION for subversion and subversion-lts.
Co-Authored-By: Claude Sonnet 5 <noreply at anthropic.com>
devel/subversion{,-lts}: install real bash completion instead of dead DATADIR copy
Install tools/client-side/bash_completion to
share/bash-completion/completions/svn, the real path
shells/bash-completion's framework scans, and symlink the other five
commands it defines completions for (svnadmin, svndumpfilter, svnlook,
svnsync, svnversion) to it. No dependency on shells/bash-completion is
added; an admin who wants completion installs that port themselves.
Bump PORTREVISION for both ports since this adds new plist content.
Co-Authored-By: Claude Sonnet 5 <noreply at anthropic.com>
devel/subversion{,-lts}: fix GNOME Keyring post-configure to target SVN_HAVE_LIBSECRET
security/subversion-gnome-keyring provides the library for
--with-gnome-keyring (SVN_HAVE_LIBSECRET), not the legacy
--with-old-gnome-keyring (SVN_HAVE_GNOME_KEYRING). The REINPLACE_CMD in
post-configure was patching the wrong macro (SVN_HAVE_GNOME_KEYRING /
SVN_HAVE_KWALLET), which had no effect on what the installed keyring
support package actually needs enabled.
Bump PORTREVISION for both ports since this changes build behavior.
Co-Authored-By: Claude Sonnet 5 <noreply at anthropic.com>
