BSD Commit Log Search

www/wordpress: upgrade to 7.0.4 (security)

Upstream does not offer localized tarballs for 7.0.4, so download the
7.0.3 tarballs and apply files/patch-7.0.3-to-7.0.4 instead.

www/gitlab: security and patch update to 19.2.2

Changes:        https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-2-released/?nav=19.2.2
Security:       2c73b6d5-971c-11f1-bdc8-2cf05da270f3

mail/notmuch-emacs: Do not gzip elisp files

There are some shortcomings in the elisp ports framework related to
gzipped elisp files that need to be fixed.  Moreover, gzipping these
files is a tradeoff, and the overall benefit is questionable.

Sponsored by:   The FreeBSD Foundation

mail/notmuch-emacs: Reorganize installation layout

Install elisp to a port-specific subdirectory of ${EMACS_SITE_LISPDIR}
rather than directly into it, avoiding filename collisions with other
elisp ports.

Sponsored by:   The FreeBSD Foundation

security/wpa_supplicant210: Accelerate removal

This software is insecure. Let's accelerate its removal.

net/hostapd210: Accelerate removal

This software is insecure. Let's accelerate its removal.

net/hostapd*: Add missing BSD driver

Reported by:            Franco Fichtner <franco at opnsense.org>
Obtained from:          opnsense commit aa30123

mail/spamassassin*: Remove the environment ENV from the environment

The Perl taint module flags the ENV environment variable as insecure
because it cannot assume the file it points to is safe.

PR:             297394
MFH:            2026Q3

databases/mysql*-server: Fix plist issue

Move LICENSE.router and README.router from ${PREFIX} to ${DOCSDIR},
where they belong according to hier(7).

PR:             290283
Reported by:    se
Sponsored by:   Netzkommune GmbH

security/vuxml: document gitlab vulnerabilities

editors/pluma: regen plist again after 9d3d0ed99c6a

x11-wm/niri: cleanup Makefile.crates

Approved by:    portmgr (fix blanket), maintainer timeout

devel/tree-sitter-cli: update to v0.26.12

Changelog:
https://github.com/tree-sitter/tree-sitter/compare/v0.26.9...v0.26.12

PR:     296683

databases/metabase: Update 0.55.4.1 => 0.58.24

Announcement:
https://www.metabase.com/releases/metabase-58

PR:             297333
Approved by:    Daniel Morante <daniel at morante.net> (maintainer)
Security:       GHSA-vwf4-m7j8-wcjf
Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit c3fd848c44e84e5261f65a4cfceb3d27c9f8d25c)

databases/metabase: Update 0.55.4.1 => 0.58.24

Announcement:
https://www.metabase.com/releases/metabase-58

PR:             297333
Approved by:    Daniel Morante <daniel at morante.net> (maintainer)
Security:       GHSA-vwf4-m7j8-wcjf
Sponsored by:   UNIS Labs
MFH:            2026Q3

editors/pluma: avoid generating "*.cpython3*.opt-2.pyc" by -OO on byte compiling

It unnecessary touch and rebuild setuptools component:
=>> Error: Filesystem touched during stage (files must install to ${STAGEDIR}):
extra: usr/local/lib/python3.12/site-packages/_distutils_hack/__pycache__/__init__.cpython-312.opt-2.pyc

Reported by:    bulk -t

textproc/ibus: avoid generating "*.cpython3*.opt-2.pyc" by -OO on byte compiling

It unnecessary touch and rebuild setuptools component:
=>> Error: Filesystem touched during stage (files must install to ${STAGEDIR}):
extra: usr/local/lib/python3.12/site-packages/_distutils_hack/__pycache__/__init__.cpython-312.opt-2.pyc

Reported by:    bulk -t
Approved by:    portmgr blanket

sysutils/leaf: Update to 1.27.1

Changelog: https://github.com/RivoLink/leaf/blob/1.27.1/CHANGELOG.md

Reported by:    GitHub (watch releases)

science/dakota: fix build (+)

Add missed #include "boost/core/demangle.hpp"

With hat:       office/boost

x11-fonts/font-winitzki-cyrillic: Update to 1.0.4

Update WWW and pkg-descr.
Add LICENSE.
Switch from pkg-plist to PLIST_FILES.

https://lists.x.org/archives/xorg-announce/2023-February/003369.html

PR:             297490
Approved by:    x11 (arrowd)
Approved by:    osa (mentor)

misc/crush: Update to 0.89.0

Changelog: https://github.com/charmbracelet/crush/releases/tag/v0.89.0

Reported by:    GitHub (watch releases)

x11-fm/xfe: Update to 2.1.11

shells/iris: Update to 0.6.3

Changelog: https://github.com/versenilvis/IRIS/blob/main/CHANGELOG.md#v063---2026-08-13

Reported by:    GitHub (watch releases)

audio/ocp: Update to 3.5.0

audio/sidplayfp: Update to 3.2.0

misc/py-litellm: Update to 1.96.2

Changelog: https://github.com/BerriAI/litellm/releases/tag/v1.96.2

Reported by:    Repology

www/mod_auth_mysql2: Deprecate and set expiration date

Abandoned upstream (1.11 from 2016 was explicitly the final release).
"Require group" authorization is silently non-functional with Apache
2.4, and the SSL option no longer builds against MySQL 8.x. All functionality
is covered by mod_authn_dbd / mod_authz_dbd shipped with Apache itself.

PR:             245911
Sponsored by:   Netzkommune GmbH

sysutils/stackit: Update 0.70.0 => 0.71.0

Changelog:
https://github.com/stackitcloud/stackit-cli/releases/tag/v0.71.0

PR:             297491
Sponsored by:   UNIS Labs

devel/radicle: Update to 1.10.1

*/*: Switch to USES=kde

All these ports use only the ECM module shipped with KDE Frameworks.
ECM from Frameworks 5 has been replaced by Frameworks 6 counterpart
a while ago. While here, drop runtime dependency on ECM.

Differential:   D58578
Reviewed by:    adridg, arrowd, jhale