devel/hs-git-annex: Security update 10.20251215 => 10.20261113
* This releases fixes a security hole that allowed private data
exfiltration from special remotes. (CVE-2026-112818)
https://git-annex.branchable.com/security/cross_repository_data_exfiltration_via_special_remote/
* Add WWW for Hackage package
* Clarify LICENSE
* Switch GHC 9.10 => 9.12
* Pet portclippy(1) and portfmt(1)
* Enable assistant unconditionally and drop ASSISTANT option
Upstream enables the assistant and webapp features by default, and the
option only toggles pure-Haskell build dependencies (such as the Yesod
stack) without pulling in extra runtime system libraries.
Because ASSISTANT was already part of OPTIONS_DEFAULT, official binary
packages already ship with this feature enabled. End users installing via
pkg(8) see no practical benefit from keeping it as a build-time toggle.
[7 lines not shown]
devel/detect-it-easy: [NEW PORT] program for determining types of files
Detect It Easy (DiE) is a cross-platform tool for file identification and
static inspection, used by malware analysts, cybersecurity experts, and
reverse engineers. It combines native format parsers with an extensible
DiE-JS analysis layer, supporting both compact signatures and multi-stage
static analysis across Windows, Linux, macOS, and now FreeBSD.
Co-authored-by: Michael Osipov <michaelo at FreeBSD.org>
WWW: https://github.com/horsicq/Detect-It-Easy
PR: 297334
www/nginx-module-auth-ldap: Update to 0.3.0
The bind password can now be read from a file, auth_ldap takes a variable
as its realm and off turns the check off per request, user_filter matches
the login against several attributes at once, user_attributes hands the
user DN and named attributes on as variables, and a refused login leaves a
line naming the user and the server.
Changelog: https://github.com/sysadmin-labs/nginx-auth-ldap-module/releases/tag/v0.3.0
Sponsored by: Netzkommune GmbH
