NetBSD/pkgsrc HBeglOd — doc CHANGES-2026

   doc: Updated finance/rex to 0.3.1
VersionDeltaFile
1.6597+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc YIAV1CQ — finance/rex cargo-depends.mk distinfo

   finance/rex: update to 0.3.1

   Updates

       Fix tables reanimating on right press

   Changes

       Table lerp fix by @TheRustyPickle in #137
VersionDeltaFile
1.20+4-4finance/rex/distinfo
1.34+4-4finance/rex/Makefile
1.20+0-0finance/rex/cargo-depends.mk
+8-83 files

NetBSD/pkgsrc hcz83Fo — doc CHANGES-2026

   doc: Updated security/cargo-auditable to 0.7.7
VersionDeltaFile
1.6596+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc nQUSwoU — security/cargo-auditable distinfo Makefile

   security/cargo-auditable: update to 0.7.7

    No changelog provided.
VersionDeltaFile
1.4+4-4security/cargo-auditable/distinfo
1.4+4-4security/cargo-auditable/Makefile
+8-82 files

NetBSD/pkgsrc emgcIa6 — doc TODO CHANGES-2026

   doc: Updated x11/picom to 13
VersionDeltaFile
1.28070+1-2doc/TODO
1.6595+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 1lWmZ0i — x11/picom PLIST distinfo

   x11/picom: update to 13

   pkgsrc: now that 9 was deprecated this can be imported.
   IIRC it should build with 10 default gcc.

   v13
   (see also: v13-rc1)

   v13-rc1 (2025-Dec-09)
   New features

       Separate the "geometry" animation trigger into "size" and "position" to allow finer-grained control. "geometry" is kept as an alias for setting both "size" and "position".
       Add a "urgent" target that can be used in rules to match urgent (according to ICCCM) windows. (#1445)
       New "shadow-color" per-window option can now be used in rules to give each window a different shadow color. (#257)
       Added new animation trigger color, which can now be used to transition window shadow-color changes. (#257)
       Add support for using custom shaders when rendering the desktop background. (#1440)
       New variables "window-blur-opacity-before", and "window-blur-opacity" are now available in animation scripts. (#919)
       New per-window option blur-opacity can now be used in rules. (#919)
       Macro definitions can now be specified when setting shader in window rules. (#1066)

    [187 lines not shown]
VersionDeltaFile
1.18+12-5x11/picom/Makefile
1.11+4-4x11/picom/distinfo
1.5+5-0x11/picom/PLIST
+21-93 files

NetBSD/pkgsrc UvgV5IR — doc CHANGES-2026

   doc: Updated misc/rozi to 0.0.28
VersionDeltaFile
1.6594+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc mjhP5Yl — misc/rozi cargo-depends.mk Makefile

   misc/rozi: update to 0.0.28

   Added

       You can unlock a checkout with Ctrl+U in the Worktrees picker or rozi worktrees unlock <PATH>. For a stale-locked checkout, confirm its removal with Ctrl+K in the picker or the sidebar remove action. (#84)
       The Agents view can list each Claude Code conversation under its own repository and branch, alongside the hook state for the conversation it follows. (#85)
       Sessions has a tab for each host in use. The active tab scopes session listing and session creation, including Ctrl+N, Ctrl+T, and Ctrl+X. (#87)
       You can opt in to keeping a host awake while agent runtimes are Working with [session] keep_awake_while_agents_work = true or Settings → Sessions → Keep awake while agents work. It is disabled by default. (#90)

   Changed

       The remote install dialog presents host, destination, and version as labeled rows. The destination shows the managed install path with the home directory shortened to ~. During installation, the host shows an installing… status in the Remote hosts picker and sidebar. (#83)
       Worktrees picker rows show the branch with the path and state in one description. The picker can grow to 160 columns, within the viewport. (#89)

   Fixed

       Interactive clients and CLI commands can prompt for SSH authentication by default, including host-key approval. Commands without a UI broker or terminal, background monitoring, and explicit batch_mode = true remain noninteractive. (#82)
       In Remote hosts, Enter connects to a disconnected or unreachable host, and Ctrl+R is unavailable. For a reached or connected host, Enter opens its sessions and Ctrl+R reconnects. (#86)
       The command palette lists Worktrees only when the focused pane has an attached session on a repository and is not on a nested SSH host. A key bound to open-worktrees still runs and explains why Worktrees is unavailable. (#88)

    [6 lines not shown]
VersionDeltaFile
1.8+4-4misc/rozi/distinfo
1.8+2-2misc/rozi/Makefile
1.8+0-0misc/rozi/cargo-depends.mk
+6-63 files

NetBSD/pkgsrc GNyYZuQ — doc CHANGES-2026

   doc: Updated audio/ncspot to 1.5.0
VersionDeltaFile
1.6593+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 8haDXzn — audio/ncspot Makefile cargo-depends.mk

   audio/ncspot: update to 1.5.0

   Added

       Vim-like command completion by pressing Tab
       Support Vim-style numeric count prefixes for keybindings (e.g. 10j moves
       down 10 rows); the pending count is shown in the status bar
       Add a proxy configuration option that routes all of ncspot's network
       traffic (access point, Spotify APIs, OAuth and cover art downloads) through
       a single proxy. Supports HTTP CONNECT proxies and SOCKS5 proxies with
       remote DNS resolution (socks5h://), both with optional credentials.
       Without this option, the http_proxy environment variable is still
       honoured as before.
       Replace already existing queue notifications instead of stacking new ones.

   What's Changed

       chore(deps): bump log from 0.4.33 to 0.4.34 in the cargo group by @dependabot[bot] in #1865
       chore(toolchain): update by @hrkfdn in #1864

    [9 lines not shown]
VersionDeltaFile
1.60+31-28audio/ncspot/distinfo
1.49+9-8audio/ncspot/cargo-depends.mk
1.93+4-5audio/ncspot/Makefile
+44-413 files

NetBSD/pkgsrc E0VoYLY — doc CHANGES-2026 TODO

   doc: note md4c downgrade
VersionDeltaFile
1.28069+3-1doc/TODO
1.6592+2-1doc/CHANGES-2026
+5-22 files

NetBSD/pkgsrc g8IZ0D9 — textproc/md4c distinfo Makefile

   md4c: downgrade to 0.5.3

   breaks x11/qt6-qtbase
VersionDeltaFile
1.6+3-3textproc/md4c/distinfo
1.6+4-2textproc/md4c/Makefile
+7-52 files

NetBSD/pkgsrc Eh2Mx3v — doc CHANGES-2026

   doc: Updated www/qt6-qtwebengine to 6.11.2nb5
VersionDeltaFile
1.6591+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc xg5gDwB — www/qt6-qtwebengine Makefile distinfo, www/qt6-qtwebengine/patches patch-src_3rdparty_chromium_third__party_ots_src_src_name.cc patch-src_3rdparty_chromium_mojo_core_channel__posix.cc

   qt6-qtwebengine: import patches from chromium
VersionDeltaFile
1.1+51-0www/qt6-qtwebengine/patches/patch-src_3rdparty_chromium_mojo_public_cpp_platform_platform__channel.cc
1.1+20-0www/qt6-qtwebengine/patches/patch-src_3rdparty_chromium_mojo_core_channel__posix.cc
1.1+15-0www/qt6-qtwebengine/patches/patch-src_3rdparty_chromium_third__party_ots_src_src_name.cc
1.9+4-1www/qt6-qtwebengine/distinfo
1.18+2-2www/qt6-qtwebengine/Makefile
+92-35 files

NetBSD/pkgsrc EncUvQ9 — security/cfs distinfo Makefile, security/cfs/patches patch-aa

   security/cfs: Fix RELRO/LDFLAGS

     - pass LDFLAGS in the environment
     - patch Makefile to add LDFLAGS to ld-invocation gcc calls
VersionDeltaFile
1.9+52-2security/cfs/patches/patch-aa
1.44+4-1security/cfs/Makefile
1.20+2-2security/cfs/distinfo
+58-53 files

NetBSD/pkgsrc gRMSr2d — www/palemoon distinfo, www/palemoon/patches patch-platform_build_autoconf_compiler-opts.m4 patch-platform_media_libvpx_moz.build

   Pullup ticket #7255 - requested by nia
   www/palemoon: security fix

   Revisions pulled up:
   - www/palemoon-gtk3/Makefile                                    1.7
   - www/palemoon-gtk3/PLIST                                       1.3
   - www/palemoon/Makefile                                         1.53
   - www/palemoon/Makefile.common                                  1.11
   - www/palemoon/PLIST                                            1.11
   - www/palemoon/distinfo                                         1.48
   - www/palemoon/patches/patch-platform_build_autoconf_compiler-opts.m4 1.1
   - www/palemoon/patches/patch-platform_build_moz.build           1.2
   - www/palemoon/patches/patch-platform_js_src_jsprf.cpp          1.1
   - www/palemoon/patches/patch-platform_media_libvpx_moz.build    1.3

   ---
      Module Name:      pkgsrc
      Committed By:     nia
      Date:             Tue Sep 22 14:38:43 UTC 2026

    [24 lines not shown]
VersionDeltaFile
1.1.2.1+0-29www/palemoon/patches/patch-platform_js_src_jsprf.cpp
1.1.2.2+29-0www/palemoon/patches/patch-platform_js_src_jsprf.cpp
1.47.2.1+14-11www/palemoon/distinfo
1.3.2.1+0-24www/palemoon/patches/patch-platform_media_libvpx_moz.build
1.3.2.2+24-0www/palemoon/patches/patch-platform_media_libvpx_moz.build
1.1.2.1+0-23www/palemoon/patches/patch-platform_build_autoconf_compiler-opts.m4
+67-877 files not shown
+128-10313 files

NetBSD/pkgsrc RUrbr65 — www/php-ja-wordpress Makefile distinfo

   Pullup ticket #7253 - requested by taca
   www/php-ja-wordpress: security fix

   Revisions pulled up:
   - www/php-ja-wordpress/Makefile                                 1.38
   - www/php-ja-wordpress/distinfo                                 1.34

   ---
      Module Name:      pkgsrc
      Committed By:     taca
      Date:             Thu Sep 24 03:40:07 UTC 2026

      Modified Files:
        pkgsrc/www/php-ja-wordpress: Makefile distinfo

      Log Message:
      www/php-ja-wordpress: update to 7.0.6

      7.0.5 (2026-09-17)

    [42 lines not shown]
VersionDeltaFile
1.33.2.1+4-4www/php-ja-wordpress/distinfo
1.37.2.1+3-4www/php-ja-wordpress/Makefile
+7-82 files

NetBSD/pkgsrc hXZzwWC — www/wordpress Makefile distinfo

   Pullup ticket #7252 - requested by taca
   www/wordpress: security fix

   Revisions pulled up:
   - www/wordpress/Makefile                                        1.123
   - www/wordpress/distinfo                                        1.104

   ---
      Module Name:      pkgsrc
      Committed By:     taca
      Date:             Thu Sep 24 03:39:34 UTC 2026

      Modified Files:
        pkgsrc/www/wordpress: Makefile distinfo

      Log Message:
      www/wordpress: update to 7.0.6

      7.0.5 (2026-09-17)

    [42 lines not shown]
VersionDeltaFile
1.103.2.1+4-4www/wordpress/distinfo
1.122.2.1+2-2www/wordpress/Makefile
+6-62 files

NetBSD/pkgsrc KNh31nE — doc CHANGES-2026

   doc: Updated www/chromium to 154.0.8037.97
VersionDeltaFile
1.6590+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc H2vrlX5 — www/chromium Makefile distinfo, www/chromium/patches patch-build_toolchain_openbsd_BUILD.gn patch-build_toolchain_netbsd_BUILD.gn

   chromium: update to 154.0.8037.97

   * 154.0.8037.92
   This update includes 32 security fixes. Please see the Chrome Security Page for more information.

   [TBD][551673541] Critical CVE-2026-102331: Buffer overflow in ANGLE. Reported by @mfx on 2026-08-24
   [N/A][517312707] High CVE-2026-102317: Improper privilege management in Mojo. Reported by Google on 2026-05-28
   [TBD][551668264] High CVE-2026-102312: UI misrepresentation in Omnibox. Reported by jodyritonga on 2026-08-24
   [N/A][556789073] High CVE-2026-102313: Uninitialized resource in ANGLE. Reported by Google on 2026-09-03
   [TBD][556908674] High CVE-2026-102299: Type confusion in V8. Reported by Andrew Boni on 2026-09-04
   [N/A][556926296] High CVE-2026-102306: Use after free in Bluetooth. Reported by Google on 2026-09-04
   [N/A][556959073] High CVE-2026-102307: Uninitialized resource in Dawn. Reported by Google on 2026-09-04
   [TBD][559266114] High CVE-2026-102323: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-10
   [N/A][559727039] High CVE-2026-102303: Uninitialized resource in GPU. Reported by Google on 2026-09-10
   [N/A][559737160] High CVE-2026-102311: Uninitialized resource in GPU. Reported by Google on 2026-09-10
   [TBD][560062638] High CVE-2026-102300: Uninitialized resource in WebGPU. Reported by Arni Hardarson (Neonix Security) on 2026-09-11
   [TBD][560233248] High CVE-2026-102326: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-11
   [TBD][560238698] High CVE-2026-102316: Use after free in Views. Reported by Xinyang Ge on 2026-09-11
   [TBD][560251736] High CVE-2026-102304: Use after free in Passwords. Reported by Xinyang Ge on 2026-09-11

    [22 lines not shown]
VersionDeltaFile
1.64+38-38www/chromium/distinfo
1.87+2-3www/chromium/Makefile
1.28+1-1www/chromium/patches/patch-build_toolchain_openbsd_BUILD.gn
1.28+1-1www/chromium/patches/patch-build_toolchain_netbsd_BUILD.gn
1.28+1-1www/chromium/patches/patch-build_toolchain_freebsd_BUILD.gn
1.28+1-1www/chromium/patches/patch-base_threading_platform__thread__bsd.cc
+44-45218 files not shown
+45-46224 files

NetBSD/pkgsrc cCcH3hf — doc CHANGES-2026

   doc: Updated finance/rex to 0.3.0
VersionDeltaFile
1.6589+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc zAxk2Ht — finance/rex Makefile cargo-depends.mk

   finance/rex: update to 0.3.0

   Updates

       A new recurring transaction option on u key press
       The initial page has been updated to contain different info
       Fixed transaction swapping not working when there are exactly 2 transactions
       Stepping date on empty field now fills up the current local date
       Terminal opener now supports more terminals
       A new migration that fixes any corrupted balance in the db

   Changes

       Recurring tx by @TheRustyPickle in #135
       Migration by @TheRustyPickle in #136
VersionDeltaFile
1.19+499-592finance/rex/distinfo
1.19+165-196finance/rex/cargo-depends.mk
1.33+4-4finance/rex/Makefile
+668-7923 files

NetBSD/pkgsrc 2pYJ2ml — doc CHANGES-2026

   Added misc/py-fastcrc, devel/py-apycula
VersionDeltaFile
1.6588+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc hJBV1qY — devel/py-apycula PLIST distinfo

   py-apycula: updated to 0.33

   0.33

   GW5A. Enable more CLKDIV2/CLKDIV
   Take into account the I/O used.
   Set CE mux for DFFs.
   Add some notes for the emcu primitive of the GW1NSR
   CMake Yosys
   Hyperram pins constraints
   dat_parser: support partType-1 .dat files
   GW1N-2. Recognize device + build chipdb
   GW1N-2. Pinout, IO config, OSC
   Fix ram pins.
   Change io standard in examples.
   Fix HCLK pip fuses.
   gowin_pack: add multiboot address support
   Rewriting gowin_pack
   Add GW5AT-60B.
VersionDeltaFile
1.5+8-12devel/py-apycula/Makefile
1.4+4-4devel/py-apycula/distinfo
1.4+3-1devel/py-apycula/PLIST
+15-173 files

NetBSD/pkgsrc 5vwYQSw — misc Makefile, misc/py-fastcrc DESCR Makefile

   py-fastcrc: added version 0.5.0

   A hyper-fast Python module for computing CRC(8, 16, 32, 64) checksum.
VersionDeltaFile
1.1+68-0misc/py-fastcrc/distinfo
1.1+29-0misc/py-fastcrc/PLIST
1.1+23-0misc/py-fastcrc/cargo-depends.mk
1.1+20-0misc/py-fastcrc/Makefile
1.692+2-1misc/Makefile
1.1+1-0misc/py-fastcrc/DESCR
+143-16 files

NetBSD/pkgsrc AWMa9K5 — misc/stellarium Makefile PLIST

   stellarium: all files are now installed on Darwin as well

   per bulk build; so remove PLIST.desktop
VersionDeltaFile
1.65+11-11misc/stellarium/PLIST
1.188+1-11misc/stellarium/Makefile
+12-222 files

NetBSD/pkgsrc qvkPy0M — games/billyfrontier PLIST Makefile

   games/billyfrontier: Install helper script with correct name
VersionDeltaFile
1.4+4-4games/billyfrontier/Makefile
1.2+2-2games/billyfrontier/PLIST
+6-62 files

NetBSD/pkgsrc 5cszU70 — doc CHANGES-2026

   Updated multimedia/libvpx, misc/indi, textproc/md4c, graphics/py-imageio
VersionDeltaFile
1.6587+5-1doc/CHANGES-2026
+5-11 files

NetBSD/pkgsrc PTk0CX8 — graphics/py-imageio PLIST distinfo

   py-imageio: updated to 2.38.0

   2.38.0

   Bug

   Implement SeekableFileObject.readline for Pillow HTTP streams
   Multi-frame writes through pyav fail with av 18.1.0
   Solve "prefer_uint8=False upcast uint8 to int16"

   Doc

   Document the actual return value of immeta

   Feat

   V3 Plugin for pydicom

   Maint

    [6 lines not shown]
VersionDeltaFile
1.31+5-5graphics/py-imageio/Makefile
1.20+4-4graphics/py-imageio/distinfo
1.9+4-1graphics/py-imageio/PLIST
+13-103 files

NetBSD/pkgsrc VdODaB3 — security/libdecaf Makefile

   security/libdecaf: fix TEST_ENV library path
VersionDeltaFile
1.12+2-2security/libdecaf/Makefile
+2-21 files