NetBSD/pkgsrc 9wQ4ymudevel Makefile, devel/kbuild distinfo PLIST

   kbuild: remove

   No users in pkgsrc, doesn't build, last upstream commit 17 years ago
VersionDeltaFile
1.4668+1-2devel/Makefile
1.4925+2-1doc/CHANGES-2026
1.3+1-1devel/kbuild/patches/patch-src_sed_lib_utils.c
1.7+1-1devel/kbuild/distinfo
1.3+1-1devel/kbuild/PLIST
1.10+1-1devel/kbuild/Makefile
+7-76 files not shown
+11-1112 files

NetBSD/pkgsrc uLpailXdatabases/mongo-c-driver distinfo, databases/mongo-c-driver/patches patch-src_libmongoc_CMakeLists.txt

   mongo-c-driver: fix build with cmake 4.4
VersionDeltaFile
1.1+23-0databases/mongo-c-driver/patches/patch-src_libmongoc_CMakeLists.txt
1.51+2-1databases/mongo-c-driver/distinfo
+25-12 files

NetBSD/pkgsrc VyiU8FWsecurity/zoneminder Makefile

   security/zoneminder: Partially rototill perl dependencies

   Organize perl dependencies according to
     - what upstream checks for in CMake
     - what is used by upstream foo.pm
     = what is likely leftover from historical zoneminder packages

   This commit is textually large but changes very little in the built
   package.  It adds dependencies on several needed packages.

   As the research papers always say, more rototilling is needed.
VersionDeltaFile
1.106+42-10security/zoneminder/Makefile
+42-101 files

NetBSD/pkgsrc QJelyJ1doc CHANGES-2026

   doc: Updated math/lean4 to 4.32.2
VersionDeltaFile
1.4924+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc fTr4kvZmath/lean4 Makefile distinfo

   lean4: update to 4.32.2.

   Lean 4.32.2 (2026-07-28)

   This point release fixes a soundness bug in the kernel.

   The issue was discovered by Ramana Kumar and reported by Kiran
   Gopinathan.

   A malicious meta program can trick the kernel into accepting a
   proof of False, or any other theorem. The kernel’s handling of
   nested inductive types with phantom type parameters was incomplete
   and bypassed the type checker.

   The bug can be exploited even when using comparator.

   The external checker nanoda does not suffer from the same bug.
   However, by the nature of this bug, it is possible to write proof
   terms that exploit it and at the same time exploit unrelated bugs

    [12 lines not shown]
VersionDeltaFile
1.5+4-4math/lean4/distinfo
1.7+2-3math/lean4/Makefile
+6-72 files

NetBSD/pkgsrc qmLlomtdoc CHANGES-2026

   doc: Updated net/xfr to 0.9.25
VersionDeltaFile
1.4923+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 7ufFEIKnet/xfr Makefile cargo-depends.mk

   net/xfr: update to 0.9.25

   [0.9.25] - 2026-07-31
   Fixed

       Heavy-loss columns no longer render as red fragments floating at the top of the sparkline — v0.9.24's hue-free severity marking applied reverse video in every theme, but reverse video swaps foreground and background within each cell, and a partial bar glyph only covers the cell's bottom — so the swap painted the empty top fraction and hid the bar (reported by brettowe within a day). Color themes now carry heavy loss as a red bar plus an underline (the artifact-free modifier), and the reverse-video treatment is reserved for the monochrome theme — where the widget now fills the whole column so heavy loss renders as one solid full-height pillar with the throughput bar as a negative silhouette inside it, instead of fragments at whatever height each bar's top cell sat. (#93 follow-up, #158)

   [0.9.24] - 2026-07-30
   Fixed

       Quitting on an effectively-dead link no longer discards your stats — on a zombie connection (e.g. WiFi that is associated but passing nothing), pressing q/Ctrl+C in the TUI waits up to 5 seconds for the server's final summary with a visible Waiting for server (Ns)... countdown, then exits with a partial summary built from locally accumulated counters and a warning — previously it printed "Test cancelled." and dropped everything. One genuinely unbounded hang is also closed: the control-channel Cancel write ran before its timeout was armed, so a full send buffer could stall quit until the test-duration deadline. Partial summaries are never written to --output files. (#159)

   Changed

       The monochrome theme is now actually usable in sunlight — it was built from hardcoded RGB grays whose mid-tone distinctions are exactly what glare washes out, and its fixed white text was invisible on light terminal backgrounds (the setup that works best outdoors, since dark screens mirror). It now renders in the terminal's own default colors at maximum contrast with just three levels, adapting to dark and light backgrounds alike. Loss severity in the throughput sparkline is additionally encoded without color in every theme: light loss underlines the bar, heavy loss reverses the cell into a bright pillar — so lossy intervals survive glare, monochrome, NO_COLOR, and colorblindness. Setting the standard NO_COLOR environment variable now selects the monochrome theme by default (an explicit --theme, config value, or saved preference still wins, and the env-induced choice is never persisted). (#158)

   [0.9.23] - 2026-07-29
   Added


    [29 lines not shown]
VersionDeltaFile
1.17+484-598net/xfr/distinfo
1.17+160-198net/xfr/cargo-depends.mk
1.17+2-2net/xfr/Makefile
+646-7983 files

NetBSD/pkgsrc UjpbN0ddoc pkg-vulnerabilities

   clear spotify-player
VersionDeltaFile
1.774+2-2doc/pkg-vulnerabilities
+2-21 files

NetBSD/pkgsrc ceTcwvWdoc CHANGES-2026

   doc: Updated audio/spotify-player to 0.24.1
VersionDeltaFile
1.4922+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc kW0OY5raudio/spotify-player Makefile cargo-depends.mk

   audio/spotify-player: update to 0.24.1

   v0.24.1
   This release includes a patch to fix an issue resulted from a new policy change from Spotify - https://developer.spotify.com/blog/2026-06-18-refresh-token-expiration. As a result, users will be asked to re-authenticate when they launch the app with the release (to update the corrupted cached token stored in user_client_token.json)
   What's Changed

       feat(device): track integrated device via is_integrated flag by @aome510 in #1019
       fix invalid token with Spotify's new token expiration policy by @aome510 in #1041

   v0.24.0
   Highlights

   The main theme of this release is improving robustness and reliability. Several long-standing pain points around image rendering, authentication, and app stopped working after running for a while have been reworked:

       More reliable album art — migrated from viuer to ratatui-image (#969).
       Hardened authentication — a more robust OAuth flow, an enforced Web API client, and improved docs make logging in far less fragile (#1013).
       Smarter reconnection — reworked auto-reconnect logic so the app recovers more gracefully from dropped connections (#1016).

   What's Changed

    [19 lines not shown]
VersionDeltaFile
1.53+727-763audio/spotify-player/distinfo
1.50+241-253audio/spotify-player/cargo-depends.mk
1.74+4-5audio/spotify-player/Makefile
+972-1,0213 files

NetBSD/pkgsrc wNcJXZsdoc CHANGES-2026

   doc: Updated shells/oh-my-posh to 30.4.0
VersionDeltaFile
1.4921+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc Zlr1Txlshells/oh-my-posh Makefile go-modules.mk

   shells/oh-my-posh: update to 30.4.0

   v30.4.0
   Bug Fixes

       git: restore main worktree context lazily (d62f1aa)
       git: share main worktree cache across worktrees (4ab3524)
       git: support main worktree paths in WSL (6885361)
       prompt: apply shell integration marks to the transient prompt (986a878), closes #7750

   Features

       git: expose main worktree path (3d8332f)

   v30.3.0
   Bug Fixes

       git: close native status parity gaps found in review (b89bb81)
       studio: use configurator nonce fragment (bd14374)

    [9 lines not shown]
VersionDeltaFile
1.321+61-16shells/oh-my-posh/distinfo
1.140+19-4shells/oh-my-posh/go-modules.mk
1.353+2-2shells/oh-my-posh/Makefile
+82-223 files

NetBSD/pkgsrc 3xl3Yahdoc CHANGES-2026

   doc: Updated sysutils/gravityfile to 0.3.0
VersionDeltaFile
1.4920+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc w1nNV6Ssysutils/gravityfile Makefile cargo-depends.mk

   sysutils/gravityfile: update to 0.3.0

   v0.3.0
   Security

       Enforced plugin sandbox permissions - Declared PluginPermissions are now bridged into an enforced SandboxConfig scoped to the scan root, so a plugin's filesystem/network/env/command grants are actually applied rather than advisory; filesystem access defaults to deny-all via the new fs_read_roots configuration
       Hardened hook dispatch - Added a Tower-based middleware pipeline (timeout/util) around hook dispatch to bound plugin execution
       WASM runtime removed - Removed the Extism/WASM plugin runtime because the latest Extism release pins a vulnerable Wasmtime line; Lua and Rhai plugin runtimes remain supported

   Fixed

       Data-loss-safe overwrites - Overwrite/OverwriteAll copy and move operations now stage into a temporary sibling and atomically swap into place, so a mid-operation failure can never destroy the existing destination
       Directory recursion guard - Added a maximum directory recursion depth to prevent stack overflow on adversarially deep nesting during recursive copy/move
       Lua value conversion drift - Centralized Lua↔Value conversions in lua/convert.rs so the main runtime and the isolated context can no longer disagree on array-vs-object handling (the isolate previously flattened Lua arrays into objects)
       Quit unresponsive during mouse activity - Replaced sync crossterm::event::poll/read drain loop with async EventStream::now_or_never(), fixing key events (q, Ctrl-C) being dropped when mouse motion floods the event queue
       Slow quit - Skip event drain, navigation check, and suspend handling once quit is triggered; reduced runtime shutdown timeout from 100ms to 10ms
       Terminal cleanup on quit - Drain buffered events after disabling mouse capture before restoring terminal, preventing raw escape sequences from leaking to the shell
       Crossterm backend alignment - Updated Ratatui/Crossterm integration to use a single Crossterm 0.29 backend stack
       Unused treemd dependency - Removed the optional Rust treemd crate and feature while preserving external treemd command integration

    [94 lines not shown]
VersionDeltaFile
1.4+796-703sysutils/gravityfile/distinfo
1.4+264-233sysutils/gravityfile/cargo-depends.mk
1.4+6-4sysutils/gravityfile/Makefile
+1,066-9403 files

NetBSD/pkgsrc xJ1zV2tdoc CHANGES-2026

   doc: Updated devel/gitlogue to 0.10.0
VersionDeltaFile
1.4919+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc byYfC0qdevel/gitlogue Makefile cargo-depends.mk

   devel/gitlogue: update to 0.10.0

   ✨ Features

       feat(git): detect renames in diff extraction and preserve old_path (782e28f)

   🐛 Bug Fixes

       fix(ci): bump cachix/install-nix-action to v31 in release.yml (f9c046f)
       fix(ci): bump cachix/install-nix-action from v27 to v31 (d52afc8)
       fix(ci): bump rust-cache prefix-key to invalidate stale cache (e2e1fbf)
       fix: address CodeRabbit review findings on rename detection and ignore handling (2f50404)

   📝 Other Changes

       chore: bump version to v0.10.0 (1733beb)
       chore(deps): bump clap from 4.6.2 to 4.6.3 (cb16226)
       chore(deps): bump serde from 1.0.228 to 1.0.229 (bfa2e8f)
       chore(deps): bump anyhow from 1.0.103 to 1.0.104 (59a5273)

    [76 lines not shown]
VersionDeltaFile
1.2+139-193devel/gitlogue/distinfo
1.2+45-63devel/gitlogue/cargo-depends.mk
1.2+4-4devel/gitlogue/Makefile
+188-2603 files

NetBSD/pkgsrc yY9gS5Fdoc CHANGES-2026

   doc: Updated sysutils/dua-cli to 2.41.0
VersionDeltaFile
1.4918+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc ysdQuLGsysutils/dua-cli Makefile cargo-depends.mk, sysutils/dua-cli/patches patch-.._vendor_mio-0.8.11_src_sys_unix_selector_kqueue.rs

   sysutils/dua-cli: update to 2.41.0

   2.41.0 (2026-08-03)

   There are two major features: 30x and more performance on Windows, and --ignore-from <file> support. This makes this release the best one yet, and I do hope that I can last a week or more until the next one.
   New Features

       add --ignore-from to exclude paths with gitignore-style patterns Reads gitignore-syntax patterns from one or more files and leaves everything they match out of the report, in both aggregate and interactive mode. This is the equivalent of rsync's --exclude-from and restic's --exclude-file, so the same pattern file can answer "how much of this would actually be backed up?".

       Matching is powered by gix-ignore, which is already a dependency, so negation, anchoring, ** and directory-only patterns all behave exactly like Git. Excluded directories are pruned from the walk rather than only hidden, and excluded top-level paths are dropped before the walk so they are absent from the report instead of appearing as empty.

   Bug Fixes

       propagate background root device errors

       Background traversal replaced failed root-device lookups with device ID zero. Readable root metadata could then be rejected as cross-device while the traversal incorrectly retained a successful error count.

       Skip roots whose lookup fails and carry their per-root errors in the traversal completion event, restoring the previous statistics and exit status. Keep interleaved overlapping and duplicate roots isolated by including each root path Arc allocation in private directory-map keys while preserving public traversal event types.


    [35 lines not shown]
VersionDeltaFile
1.53+394-284sysutils/dua-cli/distinfo
1.40+130-93sysutils/dua-cli/cargo-depends.mk
1.53+4-4sysutils/dua-cli/Makefile
1.2+1-1sysutils/dua-cli/patches/patch-.._vendor_mio-0.8.11_src_sys_unix_selector_kqueue.rs
+529-3824 files

NetBSD/pkgsrc ZEA3P2udoc CHANGES-2026

   doc: Updated devel/p5-Data-Entropy to 0.010
VersionDeltaFile
1.4917+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc gIFPb81devel/p5-Data-Entropy distinfo Makefile

   p5-Data-Entropy: update to 0.010.

   0.010
     [Security]
     - The RandomOrg and RandomnumbersInfo sources were not properly fixed in 0.009, and have been removed.
       The concept of downloading random data from an external source is flawed.

     - This module has been deprecated since version 0.008. Please use an alternative such as
       Crypt::URandom, Crypt::SysRandom or Crypt::PRNG.

       This now uses Devel::Deprecate to warn loudly about deprecation.

     [Documentation]
     - Adjusted the Changes file.

   0.009
     [Security]
     - The RandomOrg and RandomnumbersInfo sources now make requests over https. (CVE-2026-18536)


    [16 lines not shown]
VersionDeltaFile
1.3+4-4devel/p5-Data-Entropy/distinfo
1.9+4-4devel/p5-Data-Entropy/Makefile
+8-82 files

NetBSD/pkgsrc 3A3RP8Ydevel Makefile

   devel/Makefile: + p5-Devel-Deprecate
VersionDeltaFile
1.4667+2-1devel/Makefile
+2-11 files

NetBSD/pkgsrc VVN6xZcdoc CHANGES-2026

   doc: Added devel/p5-Devel-Deprecate version 0.01
VersionDeltaFile
1.4916+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc ScjFl9Ldevel/p5-Devel-Deprecate distinfo DESCR

   devel/p5-Devel-Deprecate: import p5-Devel-Deprecate-0.01

   Many times we find ourselves needing to deprecate code or have a
   deadline and just don't have time to refactor. Instead of trying
   to remember about this, posting it to a wiki or sending an email,
   it's better to have an automatic way to deprecate something. This
   module allows you to do that and embeds the deprecation directly
   in the code you wish to deprecate.

   As we don't want to break production code, deprecations are only
   triggered when running tests.
VersionDeltaFile
1.1+18-0devel/p5-Devel-Deprecate/Makefile
1.1+9-0devel/p5-Devel-Deprecate/DESCR
1.1+5-0devel/p5-Devel-Deprecate/distinfo
+32-03 files

NetBSD/pkgsrc KaiVl7Hnet/powerdns-recursor Makefile distinfo

   Pullup ticket #7211 - requested by taca
   net/powerdns-recursor: Security fix

   Revisions pulled up:
   - net/powerdns-recursor/Makefile                                1.65
   - net/powerdns-recursor/cargo-depends.mk                        1.5
   - net/powerdns-recursor/distinfo                                1.52

   ---
      Module Name:      pkgsrc
      Committed By:     drixter
      Date:             Wed Jul 22 15:22:35 UTC 2026

      Modified Files:
        pkgsrc/net/powerdns-recursor: Makefile cargo-depends.mk distinfo

      Log Message:
      powerdns-recursor: Update to 5.4.4


    [4 lines not shown]
VersionDeltaFile
1.50.2.2+3-3net/powerdns-recursor/distinfo
1.62.2.2+1-1net/powerdns-recursor/Makefile
+4-42 files

NetBSD/pkgsrc 8C4mMcadoc CHANGES-2026

   doc: Updated devel/p5-Date-Manip to 6.99nb2
VersionDeltaFile
1.4915+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc JAsIyFmdevel/p5-Date-Manip Makefile distinfo

   p5-Date-Manip: add upstream patches for CVE-2026-60074 and CVE-2026-60075

   Bump PKGREVISION.
VersionDeltaFile
1.98+6-2devel/p5-Date-Manip/Makefile
1.61+7-1devel/p5-Date-Manip/distinfo
+13-32 files

NetBSD/pkgsrc 4DLxA6fdoc pkgsrc.html pkgsrc.txt

   doc/pkgsrc.*: regen
VersionDeltaFile
1.394+826-821doc/pkgsrc.txt
1.396+607-587doc/pkgsrc.html
+1,433-1,4082 files

NetBSD/pkgsrc ofNvh6Kmk/patch patch.mk, net/nbtscan Makefile

   mk: switch the default for PATCH_DIST_STRIP from -p0 to -p1

   adapt packages that didn't set PATCH_DIST_STRIP to use -p0, and
   remove the -p1 lines
VersionDeltaFile
1.21+3-3mk/patch/patch.mk
1.20+1-3textproc/WordNet/Makefile
1.9+1-3net/omniNotify/Makefile
1.18+1-3net/nbtscan/Makefile
1.45+2-2x11/mrxvt/Makefile
1.22+2-2sysutils/xdu/Makefile
+10-1693 files not shown
+139-17899 files

NetBSD/pkgsrc 94j7LLddoc CHANGES-2026

   doc: Updated security/mozilla-rootcerts to 1.1.20260715
VersionDeltaFile
1.4914+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 66dJD6qsecurity/mozilla-rootcerts Makefile distinfo, security/mozilla-rootcerts-openssl Makefile PLIST

   mozilla-rootcerts*: update to 2026-07-15 data

   Bug 2052097 - remove ePKI Root Certification Authority. r=bwilson
   Bug 2047804 - add Telia v3 Roots. r=bwilson
   Bug 2047800 - add SECOM 2024 Roots. r=bwilson
   Bug 2017374 - remove websites trust bit from Atos TrustedRoot 2011. r=bwilson
VersionDeltaFile
1.32+25-21security/mozilla-rootcerts-openssl/PLIST
1.42+4-4security/mozilla-rootcerts/distinfo
1.65+3-3security/mozilla-rootcerts/Makefile
1.39+3-3security/mozilla-rootcerts-openssl/Makefile
+35-314 files