pnpm: update to 12.12.0
Pkgsrc changes:
* Relocate only node-semver crate.
* Download enhanced-resolve, graceful-fs and tapable from NPM repository.
Note that pnpm uses patched version of graceful-fs, which is not used for
now as it complicates the build steps too much.
* Use esbuild to bundle cas-loader.mjs.inc.
Upstream changes are omitted.
Pullup ticket #7271 - requested by tron
mail/mutt: Security fix
Revisions pulled up:
- mail/mutt/Makefile 1.302
- mail/mutt/distinfo 1.130
---
Module Name: pkgsrc
Committed By: tron
Date: Fri Oct 9 17:37:08 UTC 2026
Modified Files:
pkgsrc/mail/mutt: Makefile distinfo
Log Message:
mail/mutt: Update to version 2.4.3
This release fixes two bugs. One of them is for CVE-2026-107570, fixing an
[12 lines not shown]
security/zoneminder: Update to 1.38.6
Tested on NetBSD 10.
Upstream NEWS, less bugfixes and minor improvements:
# ZoneMinder 1.38.6 Release Notes
(some kind of packaging fix not important to pkgsrc)
# ZoneMinder 1.38.5 Release Notes
This is a maintenance release for the 1.38 series. It is primarily a security
release: it fixes 19 reported vulnerabilities, including an authenticated remote
code execution, a heap overflow and a stack overflow, as well as cross-monitor
authorization bypasses throughout the web UI and API. All 1.38 users should upgrade.
## pgrade notes
[17 lines not shown]
slony1: limit allowed pgsql version
Officially supports 15, but builds up to 17;
using types from pgsql breaks with 18, so only allow <=17.
While here, fix build on -current
zk: Update to 0.15.6
Changes:
0.15.6
Added
- Parse links to notes in frontmatter
- Set filters for lsp completion items from the config
- Set a note's modification time in frontmatter and allow for custom key naming
for both creation and modification keys
Fixed
- Indexing made significantly more performant
- Support filtering by date and time with `"<date> <time>"` instead of
`<date>T<time>` only
- Exclude globs now prune matching directories from indexing, improving speed of
indexing
0.15.5
Added
[27 lines not shown]
nuclei: Update to 3.11.1
pkgsrc changes:
- Drop MAINTAINERship
Changes:
v3.11.1
New Features
* Improving lua script with args and values
Bug Fixes
* feat(lib): reuse metadata cache across thread-safe scans
Maintenance
* Bump dependencies
v3.11.0
Breaking Change
* Signed templates required for JavaScript protocol
Starting with v3.11.0, custom templates that use the `javascript:`
protocol must be digitally signed before Nuclei will load or execute
[43 lines not shown]
