BSD Commit Log Search

security/vuxml: Add devel/ocaml-opam vulnerability

While here, fix whitespaces of two previous entries after the
feedback of `make validate`.

PR:             296642
Approved by:    osa, vvd (Mentors, implicit)

multimedia/filebot: update to 5.2.3

This brings multimedia/filebot up to date with the current version.

Some changes on our end:

1. Drop OpenJFX in favor of Zenity: Long since overdue, since OpenJFX is long-since abandoned. I don't know exactly when Rednoah added this, but now we have it also.

2. Move to JAVA 25: Dropping OpenJFX opens us up to a modern JVM. I'm not sure that JFX was actually holding us back before, but now we can be certain.

3. Limit to amd64: there's a prebuilt JNA lib required from the developer. If you need filebot on other archs, that is an exercise left to the reader.

4. Drop pkg-message: The advice in the pkg-message is outdated.

PR:     296768

devel/ocaml-opam: Security update 2.5.1 => 2.5.2

Changelog:
https://github.com/ocaml/opam/blob/2.5.2/CHANGES

PR:             296642
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
Security:       CVE-2026-57825

(cherry picked from commit d5ea67850ea1a47bffee8e76a5215b73345f897c)

devel/ocaml-opam: Security update 2.5.1 => 2.5.2

Changelog:
https://github.com/ocaml/opam/blob/2.5.2/CHANGES

PR:             296642
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
Security:       CVE-2026-57825

www/otter-browser: Schedule for removal before 2026Q4

Requires deprecated Qt5 WebEngine

deskutils/semantik: Schedule for removal before 2026Q4

Requires deprecated Qt5 WebEngine

www/py-qt5-webengine: Schedule for removal before 2026Q4

Requires deprecated Qt5 WebEngine

graphics/krita: Update to 6.0.2.1 and switch to Qt6

Although the same tarball is used for 5.3.2.1 (Qt5) and 6.0.2.1 (Qt6),
Qt6 build is still considered experimental. Both versions are almost
functionally identical, with 6.0.x having more Wayland functionality.

Announcement:   https://krita.org/en/posts/2026/krita-5.3.0-released/
                https://krita.org/en/posts/2026/krita-5.3.1-released/
                https://krita.org/en/posts/2026/krita-5.3.2-released/
                https://krita.org/en/posts/2026/krita-5.3.2.1-released/

graphics/kseexpr: Update to 6.0.0.0 and switch to Qt6

Use PLIST_SUB to reduce diff on future updates.

graphics/krita-gmic-plugin: Update to 3.7.4.1 and switch to Qt6

Replace WRKSRC_SUBDIR with CMAKE_SOURCE_PATH to simplify patching.

devel/esbuild: update to 0.28.1

ChangeLog:      https://github.com/evanw/esbuild/compare/v0.28.0...v0.28.1
PR:             296408
Approved by:    dch (maintainer)

Sponsored by:   tipi.work

sysutils/eza: Update 0.23.4 => 0.23.5

Changelog:
https://github.com/eza-community/eza/releases/tag/v0.23.5

PR:             296654
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit 375aaea71fadc8de94e45a1dc850be6f8686a1af)

sysutils/eza: Update 0.23.4 => 0.23.5

Changelog:
https://github.com/eza-community/eza/releases/tag/v0.23.5

PR:             296654
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

x11-toolkits/mygui*: cleanup, add new render engines (+)

Add new render engines of MyGUI:

mygui-opengl3   -- OpenGL3 renderer
mygui-opengles  -- OpenGLES renderer

emulators/wine-proton: Update 9.0-3 => 10.0-4

Changelog:
This update brings the so-called new wow64 mode, which could be
activated either by invoking /usr/local/wine-proton/bin-wow64/wine
or setting the PROTON_USE_WOW64 env variable for the Steam client.

files/patch-server_ptrace.c contain a partial revert of
https://github.com/ValveSoftware/wine/commit/9890af7bb352f93645bb0c7c705ff536c78efb02

Additional patches:

The following patch is used for thread counts that fixes games like
Cyberpunk 2077:

- files/patch-dlls_ntdll_unix_system.c

While the hwloc patch is more correct, it is a bigger patch that won't
be needed once 11.0 land (wine-proton 11 does include hwloc).

    [13 lines not shown]

lang/rust-bootstrap: Update to 1.96.1

(cherry picked from commit 2750863e2910305e43345be339029bc4cfc50060)

lang/rust-bootstrap: Update to 1.96.1

www/onlyoffice-documentserver: Fix local.json, update securelink handling

- Fix invalid JSON in local.json.sample
- Add storage.fs.secretString override to local.json.sample
- Update documentserver-update-securelink.sh to synchronize both
  ds.conf and ds-ssl.conf
- Update packaged Node runtime to 24.18.0

PR:             296567
(cherry picked from commit c534cc41965a350c3849cf78fe63c6a98aeb09c0)

multimedia/ringrtc: Fix build on 14.4

14.4 doesn't support inotify_init1()

(cherry picked from commit 280879aaa3da5499db61d29eec3cde0c52a81a15)

www/onlyoffice-documentserver: Fix local.json, update securelink handling

- Fix invalid JSON in local.json.sample
- Add storage.fs.secretString override to local.json.sample
- Update documentserver-update-securelink.sh to synchronize both
  ds.conf and ds-ssl.conf
- Update packaged Node runtime to 24.18.0

PR:             296567

multimedia/ringrtc: Fix build on 14.4

14.4 doesn't support inotify_init1()

devel/ruby-build: Update to 20260714

Changes:        https://github.com/rbenv/ruby-build/releases/tag/v20260714
(cherry picked from commit a08d2abd134da891272395e35b367e1a735cc503)

devel/ruby-build: Update to 20260714

Changes:        https://github.com/rbenv/ruby-build/releases/tag/v20260714

deskutils/hebcal: Update 5.9.2.20250725 => 5.14.0

Changelog:
https://github.com/hebcal/hebcal/blob/v5.14.0/NEWS.md
Commit log:
https://github.com/hebcal/hebcal/compare/16a4dbad70c5fd10...v5.14.0

PR:             296748
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit e20e4e369d39c8d8c9ad05aca296c0d8d2c0fc20)

deskutils/hebcal: Update 5.9.2.20250725 => 5.14.0

Changelog:
https://github.com/hebcal/hebcal/blob/v5.14.0/NEWS.md
Commit log:
https://github.com/hebcal/hebcal/compare/16a4dbad70c5fd10...v5.14.0

PR:             296748
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

comms/scrcpy: Update to 4.1

While here, reorder variables to make portclippy happy.

Changelog: https://github.com/Genymobile/scrcpy/releases/tag/v4.1

Reported by:    GitHub (watch releases)

net/mdns-bridge: Update 2.6.0 => 3.0.0

Changelog:
https://github.com/dennypage/mdns-bridge/releases/tag/v3.0.0

PR:             296762
Approved by:    osa, vvd (Mentors, implicit)

security/py-nitrokey: Update 0.4.1 => 0.4.2

Changelog:
https://github.com/Nitrokey/nitrokey-sdk-py/releases/tag/v0.4.2

PR:             296692
Sponsored by:   UNIS Labs

games/freeciv: update to 3.2.5 release (+)

Freeciv-3.2.5 is a generic bugfix release in the stable 3.2 series.

Release notes:  https://freeciv.fandom.com/wiki/NEWS-3.2.5

graphics/libemf: update to 1.0.14 release (+)

Release note for libEMF version 1.0.14

* Allow for compilation on macos with newer clang. Thanks to Hanspeter Niederstrasser for the patch.
* Applied a number of patches from Barak Pearlmutter to improve the portability of the code.