BSD Commit Log Search

cad/netgen: Update 6.2.2605 => 6.2.2606

Approved by:            db@, yuri@ (Mentors, implicit)

devel/aws-crt-cpp: Update to 0.43.4

ChangeLog: https://github.com/awslabs/aws-crt-cpp/releases/tag/v0.43.4

devel/aws-sdk-cpp: Update to 1.11.866

ChangeLog: https://github.com/aws/aws-sdk-cpp/compare/1.11.855...1.11.866

graphics/oxipng: Update to 10.2.0

ChangeLog: https://github.com/oxipng/oxipng/releases/tag/v10.2.0

devel/aws-c-s3: Update to 0.13.5

ChangeLog: https://github.com/awslabs/aws-c-s3/releases/tag/v0.13.5

audio/sdl3_mixer: New port, add sdl3_mixer 3.2.4 to tree

Audio management library providing decoding of many popular audio file
formats, mixing, various DSP processing effects and positional audio.
Audio data can be preloaded, or streamed on-the-fly into the mixer.
SDL3_mixer supports multiple audio devices, and can mix to a memory
buffer instead of feeding audio hardware in real time.

audio/libresidfp: Update to 1.2.1

Changelog:
https://github.com/libsidplayfp/libresidfp/releases/tag/v1.2.1

net/rustconn: Update to 0.19.18

ChangeLog:

- https://github.com/totoshko88/RustConn/releases/tag/v0.19.17
- https://github.com/totoshko88/RustConn/releases/tag/v0.19.18

Reported by:    "github-actions[bot]" <notifications at github.com>

security/certmonger: convert OpenLDAP dependency to USES=ldap

Replace hardcoded libldap.so:net/openldap26-client in LIB_DEPENDS
with USES=ldap, letting the framework handle version selection.

PR:             ports/297400
Approved by:    maintainer (crees)

security/py-passlib: unbreak with bcrypt 5

PR:             293464
Reported by:    Thomas Kurschel
Obtained from:  https://github.com/ansible/ansible/issues/85919

While here actually add dependency on py-bcrypt

sysutils/powerdxx: Fix build error on 15-Stable

PR:             296481
Submitted by:   Martin Neubauer

www/tgpt: Update 2.12.0 => 2.13.0

Changelog:
https://github.com/aandrew-me/tgpt/releases/tag/v2.13.0

Reported by:    repology
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit 4c72511ee792065caa04a2cde5cab2caffc91c85)

www/tgpt: Update 2.12.0 => 2.13.0

Changelog:
https://github.com/aandrew-me/tgpt/releases/tag/v2.13.0

Reported by:    repology
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

graphics/scantpaper: update to 3.0.15

Announcement:
  https://sourceforge.net/p/gscan2pdf/mailman/message/59371263/

security/vuxml: Document www/py-calibreweb vulnerabilities

PR:             297375
Approved by:    osa, vvd (Mentors, implicit)

misc/py-mcp: Update to 2.0.0

ChangeLog:

- https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.28.0
- https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.29.0
- https://github.com/modelcontextprotocol/python-sdk/releases/tag/v2.0.0

Reported by:    Max <notifications at github.com>

databases/py-harlequin-mysql: Update to 1.3.1

ChangeLog:      https://github.com/tconbeer/harlequin-mysql/releases/tag/v1.3.1
Reported by:    Ted Conbeer <notifications at github.com>

MOVED: add removed port, cleanup

While here, cleanup using Tools/scripts/MOVEDlint.awk:
- audio/kid3: No qt5/kf5 flavor anymore, stop recommending it.
- databases/mariadb{103,106}-{client,server}: both non-existent.

Fixes:          813dcb3 ("www/py-flask-limiter3: Remove port")
Reported by:    joneum (via e-mail)
Approved by:    osa, vvd (Mentors, implicit)

databases/py-harlequin: Update to 2.8.0

ChangeLog:

- https://github.com/tconbeer/harlequin/releases/tag/v2.6.0
- https://github.com/tconbeer/harlequin/releases/tag/v2.7.0
- https://github.com/tconbeer/harlequin/releases/tag/v2.8.0

Reported by:    Ted Conbeer <notifications at github.com>

lang/python312: pull in upstream commits addressing vuxml entries

Security: 5ec4dcf6-3588-11f1-b51c-6dd25bec137b
Security: b8e9f33c-375d-11f1-a119-e36228bfe7d4
Security: cf75f572-378a-11f1-a119-e36228bfe7d4
(cherry picked from commit 01e6147ab5d9b6e76cedf476d2ccbad17605f693)

lang/python312: pull in upstream commits addressing vuxml entries

Security: 5ec4dcf6-3588-11f1-b51c-6dd25bec137b
Security: b8e9f33c-375d-11f1-a119-e36228bfe7d4
Security: cf75f572-378a-11f1-a119-e36228bfe7d4

textproc/py-textual-fastdatatable: Update to 0.17.0

ChangeLog:      https://github.com/tconbeer/textual-fastdatatable/releases/tag/v0.17.0
Reported by:    "github-actions[bot]" <notifications at github.com>

www/py-calibreweb: Update 0.6.26 => 0.6.27

This release contains bug and security fixes, also
updated to support www/py-flask-limiter v4 which in
turn removes the need for the port www/py-flask-limiter3.

Changes:
https://github.com/janeczku/calibre-web/releases/tag/0.6.27

PR:             297375
Reported by:    Matthew Wener <matthew at wener.org> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2025-6998
Security:       CVE-2025-7404
MFH:            2026Q3

(cherry picked from commit 374c12ecb2f422cb6a7bee19689189c78e0097e4)

www/py-flask-limiter3: Remove port

The one and only consumer www/py-calibreweb now supports v4.

PR:             297376
Reported by:    Matthew Wener <matthew at wener.org> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)

www/py-calibreweb: Update 0.6.26 => 0.6.27

This release contains bug and security fixes, also
updated to support www/py-flask-limiter v4 which in
turn removes the need for the port www/py-flask-limiter3.

Changes:
https://github.com/janeczku/calibre-web/releases/tag/0.6.27

PR:             297375
Reported by:    Matthew Wener <matthew at wener.org> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2025-6998
Security:       CVE-2025-7404
MFH:            2026Q3

audio/noson-app: Update to 5.7.3

Switch to depend on QT6

audio/noson: Update to 2.12.35

multimedia/zoneminder: Update 1.38.1 => 1.38.3

Changelog:
https://github.com/ZoneMinder/zoneminder/releases/tag/1.38.3

- Fix ONVIF support with add devel/gsoap to BUILD_DEPENDS.

PR:             296995
Security:       GHSA-g66m-77fq-79v9
Security:       GHSA-745h-vg7c-73cg
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q3

(cherry picked from commit 2f1af67af413fa32819d0dac645b473769845559)

multimedia/zoneminder: Update 1.38.1 => 1.38.3

Changelog:
https://github.com/ZoneMinder/zoneminder/releases/tag/1.38.3

- Fix ONVIF support with add devel/gsoap to BUILD_DEPENDS.

PR:             296995
Security:       GHSA-g66m-77fq-79v9
Security:       GHSA-745h-vg7c-73cg
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q3

www/{nginx,nginx-devel,freenginx}: 3rd-party modules management

Update bundled third-party modules; where upstream now offers a tag,
switch from a commit hash to the version tag:

- array_var:    v0.05 -> v0.06
- cache_purge:  hash  -> 3.0.2
- ngx_devel_kit: v0.3.3 -> v0.3.4
- drizzle:      hash  -> v0.1.14
- aws_auth:     -> f3d9862 (stays on a hash; the 2.1.1 tag lacks the
                OpenSSL 3.0 build fix)

Adjust the drizzle config patch to the module's new extraction
directory name.

For freenginx, add a patch to ngx_aws_auth: freenginx dropped
ngx_http_request_t.start_sec, so obtain the request time from
ngx_time() there instead.

Sponsored by: Netzkommune GmbH