NetBSD/pkgsrc-wip 5e05d54mesa Makefile distinfo, mesa/patches patch-src_util_os__file.c patch-src_gallium_auxiliary_vl_vl__csc.c

mesa: updated to 25.3.6
DeltaFile
+86-0mesa/patches/patch-src_gallium_auxiliary_vl_vl__csc.c
+6-15mesa/patches/patch-src_util_os__file.c
+4-15mesa/options.mk
+4-4mesa/distinfo
+2-3mesa/Makefile
+102-375 files

NetBSD/pkgsrc eTBNdXadoc CHANGES-2026

   Updated time/py-durationpy; Added lang/libclc
VersionDeltaFile
1.5785+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc lgYdMYrlang/libclc distinfo buildlink3.mk, lang/llvm version.mk

   libclc: added version 21.1.8

   libclc is an open source implementation of the library requirements of
   the OpenCL C programming language, as specified by the OpenCL 1.1
   Specification. The following sections of the specification impose
   library requirements:

       6.1: Supported Data Types
       6.2.3: Explicit Conversions
       6.2.4.2: Reinterpreting Types Using as_type() and as_typen()
       6.9: Preprocessor Directives and Macros
       6.11: Built-in Functions
       9.3: Double Precision Floating-Point
       9.4: 64-bit Atomics
       9.5: Writing to 3D image memory objects
       9.6: Half Precision Floating-Point

   libclc is intended to be used with the Clang compiler's OpenCL frontend.


    [4 lines not shown]
VersionDeltaFile
1.1+128-0lang/libclc/PLIST
1.1+33-0lang/libclc/Makefile
1.1+21-0lang/libclc/DESCR
1.1+15-0lang/libclc/buildlink3.mk
1.22+3-2lang/llvm/version.mk
1.1+5-0lang/libclc/distinfo
+205-21 files not shown
+207-37 files

NetBSD/pkgsrc b3wEZFCtime/py-durationpy Makefile distinfo

   py-durationpy: updated to 0.11

   0.11
   Unknown changes
VersionDeltaFile
1.3+4-4time/py-durationpy/distinfo
1.4+2-2time/py-durationpy/Makefile
+6-62 files

NetBSD/src Lrs9Qtqsys/ufs/lfs lfs_segment.c

   Recognize that lfs_putpages() may return EAGAIN even if the cleaner does
   not need to be run, and do not wait for the cleaner in such circumstances.
VersionDeltaFile
1.310+4-3sys/ufs/lfs/lfs_segment.c
+4-31 files

NetBSD/pkgsrc l8FaNnKdevel/py-whatever Makefile

   py-whatever: add USE_LANGUAGES=
VersionDeltaFile
1.3+4-2devel/py-whatever/Makefile
+4-21 files

NetBSD/src UBd5BGhsys/ufs/lfs lfs_segment.c

   Ensure that the vnode is fully flushed by lfs_vflush, since lfs_segwrite
   may sometimes skip it.
VersionDeltaFile
1.309+10-3sys/ufs/lfs/lfs_segment.c
+10-31 files

NetBSD/pkgsrc oHPDHcYdevel/py-funcy Makefile

   py-funcy: add USE_LANGUAGES=
VersionDeltaFile
1.4+3-3devel/py-funcy/Makefile
+3-31 files

NetBSD/pkgsrc 7zb2bHcdoc CHANGES-2026

   Updated databases/py-sqlparse, www/py-django, textproc/py-lxml
VersionDeltaFile
1.5784+4-1doc/CHANGES-2026
+4-11 files

NetBSD/pkgsrc Lv8xINntextproc/py-lxml Makefile distinfo

   py-lxml: updated to 6.1.3

   6.1.3 (2026-09-02)

   Bugs fixed

   * External parameter entity parsing was allowed by default
     (with ``resolve_entities="internal"``).
VersionDeltaFile
1.88+4-4textproc/py-lxml/distinfo
1.133+3-3textproc/py-lxml/Makefile
+7-72 files

NetBSD/pkgsrc 93d7s1swww/py-django Makefile PLIST

   py-django: updated to 6.1.1

   6.1.1

   Bugfixes

   Fixed a crash in Django 5.2 when combining distinct(*fields) with order_by() and values() and using two lookup paths resolving to the same column

   Fixed a regression in Django 6.1 where the deprecation of double-dot variable lookups incorrectly applied to string and translated template literals containing two consecutive dots, such as {{ "a..b" }}

   Fixed a regression in Django 6.1 where ModelAdmin.list_display entries that traverse multiple relations using __ could crash or display incorrect values

   Fixed a bug in Django 6.1 where the fields.E323 system check did not detect mixed on_delete variants for auto-created intermediate models for ManyToManyFields

   Fixed a regression in Django 6.1 where custom querysets used with Prefetch for forward foreign key or reverse one-to-one relationships were not routed using the parent queryset’s database

   Fixed a regression in Django 6.1 where HTML-safe strings, such as those created with mark_safe(), used as form media assets were treated as asset paths rather than being rendered verbatim

   Fixed a regression in Django 6.1 that caused AlterField operations that changed only the Python-level on_delete option of ForeignKey or OneToOneField fields to perform unnecessary schema changes

    [10 lines not shown]
VersionDeltaFile
1.131+4-4www/py-django/distinfo
1.56+4-1www/py-django/PLIST
1.159+2-2www/py-django/Makefile
+10-73 files

NetBSD/pkgsrc HMM8MWvdatabases/py-sqlparse distinfo Makefile

   py-sqlparse: updated to 0.6.0

   0.6.0 (Aug 13, 2026)

   Notable Changes

   * Drop support for Python 3.8 and 3.9. Python 3.10+ is now required.
   * IMPORTANT: Fixes a potential denial of service attack (DOS) in the lexer,
     which consumed CPU quadratically on statements containing many unclosed
     dollar-quoted literals or multiline comments (CVE-2026-59893). See the
     security advisory for details:
     https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-prg7-hcfm-mfcr
     The vulnerability was discovered by EQSTLab, min8282 and 7thpark.
     Thanks for reporting!
   * IMPORTANT: Fixes a potential denial of service attack (DOS) when grouping
     deeply nested or very wide statements. Building a token group re-read the
     whole group on every step, so a small statement could keep a worker busy
     for a long time (CVE-2026-54284, pr848 by alhudz and tonghuaroot).
   * IMPORTANT: Fixes a potential denial of service attack (DOS) in

    [40 lines not shown]
VersionDeltaFile
1.30+6-8databases/py-sqlparse/Makefile
1.25+4-4databases/py-sqlparse/distinfo
+10-122 files

NetBSD/pkgsrc-wip 1912a26libclc PLIST Makefile, spirv-llvm-translator DESCR PLIST

libclc: sync with LLVM; spirv-llvm-translator added 22.1.6 to match LLVM from wip
DeltaFile
+32-0spirv-llvm-translator/Makefile
+10-14libclc/Makefile
+20-0spirv-llvm-translator/buildlink3.mk
+6-3libclc/PLIST
+8-0spirv-llvm-translator/PLIST
+7-0spirv-llvm-translator/DESCR
+83-175 files not shown
+95-2211 files

NetBSD/pkgsrc 4xzgLbbdoc CHANGES-2026

   doc: Updated www/libcurl-gnutls to 8.22.0
VersionDeltaFile
1.5783+2-1doc/CHANGES-2026
+2-11 files

NetBSD/src ie3lDzkshare/misc acronyms.comp

   +KMIP  Key Management Interoperability Protocol
VersionDeltaFile
1.428+2-1share/misc/acronyms.comp
+2-11 files

NetBSD/pkgsrc sh3kIdcdoc CHANGES-2026

   doc: Updated www/curl to 8.22.0
VersionDeltaFile
1.5782+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc zpzI5PVwww/curl Makefile.common PLIST

   curl: update to 8.22.0.

   This release includes the following changes:

    o gssapi: add support for Apple GSS Framework [72]
    o hardening: add API guards [64]
    o RFC 9421 HTTP Message Signatures support [108]
    o spnego: block NTLM fallback in SPNEGO negotiation [151]
    o TLS: drop support for TLS-SRP [71]
    o vquic: add option to use Apple fast UDP [137]

   This release includes the following bugfixes:

    o altsvc: continue after unknown parameters [198]
    o asyn-thrdd: retry link-local ipv6 if missing scope id [118]
    o autotools: minor fixes and improvements [33]
    o build: always use local `inet_pton()`/`inet_ntop()` implementations [56]
    o build: assume POSIX `select()` is available [166]
    o build: clear `Require.private` for static-only builds in `libcurl.pc` [188]

    [296 lines not shown]
VersionDeltaFile
1.309+4-6www/curl/Makefile
1.228+4-4www/curl/distinfo
1.38+2-2www/curl/Makefile.common
1.109+4-0www/curl/PLIST
+14-124 files

NetBSD/pkgsrc vXszxoxdevel/GConf buildlink3.mk Makefile, devel/cppcheck Makefile

   *: recursive bump for pcre2 10.48
VersionDeltaFile
1.8+2-2devel/pcre2/buildlink3.mk
1.10+2-2devel/cutter/buildlink3.mk
1.101+2-2devel/cutter/Makefile
1.116+2-2devel/cppcheck/Makefile
1.41+2-2devel/GConf/buildlink3.mk
1.122+2-2devel/GConf/Makefile
+12-123,121 files not shown
+6,254-5,8163,127 files

NetBSD/pkgsrc AFjATSfdevel/pcre2 Makefile

   pcre2: note why updates to this usually require a recursive bump
VersionDeltaFile
1.34+5-1devel/pcre2/Makefile
+5-11 files

NetBSD/pkgsrc N2I42bGdoc CHANGES-2026

   doc: Updated net/unfs3 to 0.11.0
VersionDeltaFile
1.5781+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc UFGvuL7net/unfs3 distinfo Makefile, net/unfs3/patches patch-configure.ac patch-daemon.c

   net/unfs3: update to 0.11.0

   From Bartosz Kuzma in PR pkg/60498

   Changes since 0.9.22:

   unsf3 0.11.0:
    - fixes to make sure unfs3 works on macOS and Windows again
    - 32-bit mode can now be enabled at any time, for compatibility with very old NFS clients
    - starting unfsd now gives a reliable error code if it fails to start
    - fix incorrect file mode when doing exclusive create
    - fix to correctly update the time on symlinks, not what they point to
    - Flex' libfl is no longer needed

   unsf3 0.10.0
    - switched to libtirpc as a base requirement
    - contrib scripts now require Python 3 instead of Python 2
    - fix stale handle when moving files or directories


    [8 lines not shown]
VersionDeltaFile
1.1+187-0net/unfs3/patches/patch-xdr.c
1.18+27-11net/unfs3/Makefile
1.1+24-0net/unfs3/patches/patch-nfs.c
1.1+23-0net/unfs3/patches/patch-daemon.c
1.1+15-0net/unfs3/patches/patch-configure.ac
1.8+8-5net/unfs3/distinfo
+284-161 files not shown
+285-177 files

NetBSD/pkgsrc UNWNOsudoc CHANGES-2026

   Updated www/freenginx-devel to 1.31.4
VersionDeltaFile
1.5780+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc j44x5pNwww/freenginx-devel Makefile distinfo

   www/freenginx-devel: update from 1.31.3 to 1.31.4

   Sponsored by:        tipi.work

   <ChangeLog>

   *) Bugfix: the "index" directive used old values of non-cacheable
      variables.

   *) Bugfix: variables with side effects might cause incorrect results
      during variable substitution and "no buffer space in script copy"
      alerts.

   *) Bugfix: a segmentation fault might occur in a worker process when
      using regular expression captures with the
      "proxy_cache_background_update" directive or the
      ngx_http_slice_module.

   *) Bugfix: in the ngx_http_perl_module; the bug had appeared in 1.31.3.

    [13 lines not shown]
VersionDeltaFile
1.18+4-4www/freenginx-devel/distinfo
1.21+2-3www/freenginx-devel/Makefile
+6-72 files

NetBSD/pkgsrc phrRpK9doc CHANGES-2026

   Updated www/freenginx to 1.30.1nb3
   Updated www/freenginx-devel to 1.31.3nb2
VersionDeltaFile
1.5779+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc jMXjRunwww/freenginx-devel options.mk Makefile, www/freenginx-devel/patches extra-patch-njs-quickjs

   www/freenginx-devel: update njs 1.0.0 -> 1.0.1

   Bump PKGREVISION.

   Sponsored by:        tipi.work

   <ChangeLog>

   nginx modules:

   *) Security: fixed an access control bypass in js_access when an
      asynchronous request body continuation threw an exception or
      produced an unhandled rejection.  Previously, nginx could continue
      processing the request as though the js_access check had succeeded.
      Thanks to Ta Duc Thien.

   *) Security: fixed a worker process crash when reading
      Response.statusText after an upstream server returned a status
      line with an empty reason phrase.

    [46 lines not shown]
VersionDeltaFile
1.2+4-4www/freenginx-devel/patches/extra-patch-njs-quickjs
1.17+4-4www/freenginx-devel/distinfo
1.10+2-2www/freenginx-devel/options.mk
1.20+2-2www/freenginx-devel/Makefile
+12-124 files

NetBSD/pkgsrc pJRaDdCwww/freenginx options.mk Makefile, www/freenginx/patches extra-patch-njs-quickjs

   www/freenginx: update njs 1.0.0 -> 1.0.1

   Bump PKGREVISION.

   Sponsored by:        tipi.work

   <ChangeLog>

   nginx modules:

   *) Security: fixed an access control bypass in js_access when an
      asynchronous request body continuation threw an exception or
      produced an unhandled rejection.  Previously, nginx could continue
      processing the request as though the js_access check had succeeded.
      Thanks to Ta Duc Thien.

   *) Security: fixed a worker process crash when reading
      Response.statusText after an upstream server returned a status
      line with an empty reason phrase.

    [46 lines not shown]
VersionDeltaFile
1.2+4-4www/freenginx/patches/extra-patch-njs-quickjs
1.10+4-4www/freenginx/distinfo
1.8+2-2www/freenginx/options.mk
1.12+2-2www/freenginx/Makefile
+12-124 files

NetBSD/pkgsrc MwmEU4Gdoc CHANGES-2026

   doc: Updated www/snac to 2.95
VersionDeltaFile
1.5778+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc t7ibBhuwww/snac PLIST Makefile

   snac: update to 2.95. Changes:

   ## 2.95

   Fixed a bug in the notification page that made snac hang forever while
   trying to read abnormally big files.

   Improved support for text-only web browsers: it's now possible to
   configure a set of web browser user-agent strings that will receive
   simpler HTML in the private timeline web UI. Basically, it consists in
   avoiding `details` / `summary` HTML tags as much as possible.

   Added some fixes to media proxy code.

   Fixed EmojiReact code to allow any emoticon defined in `emojis.json`,
   not only those with colon-wrapped identifiers.

   Fixed a bug in notification filtering (paging was sometimes incorrect).


    [181 lines not shown]
VersionDeltaFile
1.41+4-4www/snac/distinfo
1.53+2-3www/snac/Makefile
1.6+1-0www/snac/PLIST
+7-73 files

NetBSD/pkgsrc 1xQE4E8doc CHANGES-2026

   doc: Updated devel/ruby-redmine61 to 6.1.4
VersionDeltaFile
1.5777+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc iuciJJTdevel/ruby-redmine61 PLIST Makefile, devel/ruby-redmine61/patches patch-Gemfile

   develr/ruby-redmine61: update to 6.1.4

   6.1.4 (2026-08-25)

   Security fixes:

   * Defect #44249: API requests can affect a user's session and circumvent
     security policies

   * Defect #44308: Stored XSS in Redmine Textile Formatter via < notextile >
     Tag-Restoration ("Frankenstein tag")

   * Defect #44309: Nested issue-relations endpoints bypass source issue
     visibility

   * Defect #44310: Child project inherit_members updates bypass
     member-management authorization

   * Patch #44371: Filter key parameter from logging
VersionDeltaFile
1.4+5-5devel/ruby-redmine61/distinfo
1.7+4-5devel/ruby-redmine61/Makefile
1.4+4-4devel/ruby-redmine61/patches/patch-Gemfile
1.4+2-1devel/ruby-redmine61/PLIST
+15-154 files