NetBSD/pkgsrc GUjPAkAdoc CHANGES-2026

   doc: Updated print/foliate to 3.3.0
VersionDeltaFile
1.5744+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc NZy7oKQprint/foliate distinfo Makefile, print/foliate/patches patch-src_epubView.js patch-src_assets_KindleUnpack_kindleunpack.py

   print/foliate: Update to 3.3.0

   Changes since 2.6.4:

   3.3.0

     * Updated for GNOME 48
     * Added support for mouse forward/backward buttons (#1474)
     * Improved text wrapping in headings
     * Improved default link style

   3.2.1

     * Fixed tables not displayed in FB2 books (#1445)
     * Updated translations

   3.2.0

     * Revamped translation tool, which now remembers the last target

    [198 lines not shown]
VersionDeltaFile
1.9+15-44print/foliate/PLIST
1.56+11-22print/foliate/Makefile
1.16+7-6print/foliate/distinfo
1.5+1-1print/foliate/patches/patch-src_epubView.js
1.2+1-1print/foliate/patches/patch-src_assets_KindleUnpack_kindleunpack.py
+35-745 files

NetBSD/pkgsrc 9OTfUyqdoc CHANGES-2026

   doc: Updated mail/imapfilter to 2.8.5
VersionDeltaFile
1.5743+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc NFEun9mmail/imapfilter Makefile distinfo

   imapfilter: Update to 2.8.5. From Kogule Ryo in PR pkg/60582

   IMAPFilter 2.8.5 - Mar 8, 2026
     - Re-added OAuth2 example in the sample extend file

   IMAPFilter 2.8.4 - Mar 7, 2026
     - Bug fix; minor incompatibility with Lua 5.5

   IMAPFilter 2.8.3 - Apr 27, 2025
     - Include body transfer encoding in fetch_structure() return value.
     - Bug fix; minor incompatibility with Lua 5.3 and 5.4

   IMAPFilter 2.8.2 - Dec 26, 2023
     - Add IMAP support for UTF-8 (RFC 6855) when "charset" is set to "UTF-8"
     - Don't use FETCH FAST macro use for better compatibility
     - Bug fix; recovery mechanism error on Lua 5.1

   IMAPFilter 2.8.1 - Jan 8, 2023
     - Add support for non-write actions on read-only mailboxes.

    [14 lines not shown]
VersionDeltaFile
1.31+4-4mail/imapfilter/distinfo
1.53+2-3mail/imapfilter/Makefile
+6-72 files

NetBSD/pkgsrc rDUx0KMfilesystems/fuse-httpdirfs Makefile

   Revbump all gumbo-parser packages after 0.14.0 update
VersionDeltaFile
1.4+2-2filesystems/fuse-httpdirfs/Makefile
+2-21 files

NetBSD/pkgsrc zlkMLLQnews/newsraft Makefile

   Revbump all gumbo-parser packages after 0.14.0 update
VersionDeltaFile
1.33+2-1news/newsraft/Makefile
+2-11 files

NetBSD/pkgsrc 8Oz1xMKprint/libcupsfilters Makefile, print/mupdf buildlink3.mk Makefile

   Revbump all gumbo-parser packages after 0.14.0 update
VersionDeltaFile
1.96+2-2print/zathura-pdf-mupdf/Makefile
1.70+2-2print/mupdf/buildlink3.mk
1.142+2-2print/mupdf/Makefile
1.10+2-2print/libcupsfilters/Makefile
+8-84 files

NetBSD/pkgsrc uHjrUKssysutils/gnome-characters Makefile, x11/gnome-shell Makefile

   *: recursive bump for gjs 1.82.3
VersionDeltaFile
1.60+2-2x11/gnome-shell/Makefile
1.38+2-2sysutils/gnome-characters/Makefile
+4-42 files

NetBSD/pkgsrc krX6SUYwww/litehtml Makefile, www/p5-Alien-LibGumbo Makefile

   Revbump all gumbo-parser packages after 0.14.0 update
VersionDeltaFile
1.10+2-2www/litehtml/Makefile
1.12+2-1www/p5-HTML-Gumbo/Makefile
1.10+2-1www/p5-Alien-LibGumbo/Makefile
+6-43 files

NetBSD/pkgsrc Gt7tjX0doc CHANGES-2026

   doc: Updated www/gumbo-parser to 0.14.0
VersionDeltaFile
1.5742+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc Et1LmAOwww/gumbo-parser buildlink3.mk Makefile

   gumbo-parser: update to 0.14.0

   * Add gumbo_tag_is_void() public API function
   * Add support for <selectedcontent> tag
   * Add support for processing instructions
   * Comply with spec changes to <select> parsing logic
   * Fix compliance to adoption agency algorithm, step 4.3
   * Fix foster parented text not being merged into preceding text node
   * Fix memory leak of ignored doctype token in "in head noscript" insertion mode
   * Delete dependency on Ragel
   * Adapt to migration of tree construction tests suite from
     html5lib-tests to WPT
VersionDeltaFile
1.9+4-4www/gumbo-parser/distinfo
1.3+3-3www/gumbo-parser/PLIST
1.5+2-2www/gumbo-parser/buildlink3.mk
1.8+2-2www/gumbo-parser/Makefile
+11-114 files

NetBSD/pkgsrc OOLmJs6doc TODO CHANGES-2026

   doc: Updated lang/gjs to 1.82.3
VersionDeltaFile
1.27862+1-2doc/TODO
1.5741+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc xUeuOWblang/gjs buildlink3.mk distinfo, lang/gjs/patches patch-gjs_jsapi-util.cpp

   lang/gjs: Update to 1.82.3

   Switch to mozjs128. Mark binaries not PaX mprotect safe (SpiderMonkey
   JIT). Disable PCH. Remove obsolete patch.

   Changes since 1.68.4:

   Too many changes to list; see the upstream NEWS file for the full
   release notes covering all versions between 1.68.4 and 1.82.3:

   https://gitlab.gnome.org/GNOME/gjs/-/blob/1.82.3/NEWS
VersionDeltaFile
1.44+8-4lang/gjs/Makefile
1.3+10-1lang/gjs/PLIST
1.11+4-5lang/gjs/distinfo
1.26+3-3lang/gjs/buildlink3.mk
1.2+1-1lang/gjs/patches/patch-gjs_jsapi-util.cpp
+26-145 files

NetBSD/pkgsrc iFJEaWTdoc CHANGES-2026

   doc: Updated audio/kew to 4.3.0
VersionDeltaFile
1.5740+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc IuA7n5Taudio/kew Makefile distinfo

   kew: update to 4.3.0

   - minor bug fixes
   - lyrics support
VersionDeltaFile
1.27+4-4audio/kew/distinfo
1.30+2-2audio/kew/Makefile
+6-62 files

NetBSD/pkgsrc XlRiF2Jdoc CHANGES-2026

   doc: Updated lang/joker to 1.10.0
VersionDeltaFile
1.5739+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc NukYT6Klang/joker Makefile distinfo

   joker: update to 1.10.0

   - Added the joker.mime namespace for parsing MIME media types and
     entity trees, decoding transfer encodings, and extracting message
     bodies and attachments.
   - Extended joker.mail with MIME-aware message, email, and attachment
     parsing.
   - Expanded joker.http/send with overall, connection, and
     response-header timeouts; redirect controls; and response-size
     limits.
   - Added managed read-only and read/write transactions to joker.bolt,
     allowed database operations to use transaction contexts, added
     prefix counting, and added result limits for prefix queries.
VersionDeltaFile
1.19+4-4lang/joker/distinfo
1.50+2-3lang/joker/Makefile
+6-72 files

NetBSD/pkgsrc Z16aoyVdevel/nss distinfo, devel/nss/patches patch-nss_lib_freebl_sha256-armv8.c patch-nss_coreconf_NetBSD.mk

   nss: fix regression on NetBSD aarch64

   Between 3.127 and 3.128 upstream applied this in freebl:

   -            DEFINES += -DUSE_HW_AES -DUSE_HW_SHA1 -DUSE_HW_SHA2 -DHAVE_PLATFORM_GHASH
   +            DEFINES += -DUSE_HW_AES -DUSE_HW_SHA1 -DUSE_HW_SHA2
   +            ifeq ($(LITTLE_ENDIAN),1)
   +                DEFINES += -DHAVE_PLATFORM_GHASH
   +            endif

   But it is causing linker errors since nothing in NetBSD.mk sets the
   LITTLE_ENDIAN macro. Fix NetBSD.mk properly and remove previous arguably
   wrong band-aid for similar issue in patch-nss_lib_freebl_sha256-armv8.c
VersionDeltaFile
1.6+19-76devel/nss/patches/patch-nss_coreconf_NetBSD.mk
1.216+2-2devel/nss/distinfo
1.4+1-1devel/nss/patches/patch-nss_lib_freebl_sha256-armv8.c
+22-793 files

NetBSD/pkgsrc IDx4hdIdoc CHANGES-2026

   doc: Updated lang/janet to 1.42.0
VersionDeltaFile
1.5738+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc c2yisrPlang/janet Makefile distinfo

   janet: update to 1.42.0

   * fix/illumos-multicast
   * Tweak a docstring and a comment
   * Fix GC collecting active fiber during nested janet_continue
   * Align items in multiline pretty format (%m and %p)
   * fix janet_channel_make_threaded to return threaded channel
   * Macro hygiene tweaks
   * Fix: add missing :symbolmap keyword to disasm function
   * Add LLM, AI and tool usage section to contribution guide
   * Lint shadow binding
   * Increase pretty printing line density
   * Try to use clearer language in buffer docs
   * Fix mmap return value check
   * Fix stale fiber stack pointers across realloc
   * Hide JanetMarshalContext implementation details
   * Add bash, zsh, and fish shell completions for janet
   * plan9 port maintenance
   * OSS-Fuzz: Add new fuzzer targets unmarshal

    [33 lines not shown]
VersionDeltaFile
1.33+4-4lang/janet/distinfo
1.35+3-2lang/janet/Makefile
+7-62 files

NetBSD/pkgsrc U05q0u0doc CHANGES-2026

   doc: Updated geography/geos to 3.15.0
VersionDeltaFile
1.5737+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc AIHvFjBgeography/geos Makefile distinfo

   geography/geos: Update to 3.15.0

   geos has on the order of a dozen reverse dependencies, and has a
   multi-year track record of non-troubled updates.  (I've been running
   beta/rc versions of 3.15 for weeks with postgis/gdal/gis.)

   ## Changes in 3.15.0
   2026-09-01

   - Breaking Changes:
     - BufferOp returns POLYGON EMPTY when fed Inf/Nan coords (GH-1332)
     - Return Inf when calculating distance to an empty geometry (GH-1345, Even Rouault)
     - Overlay operations now produce a LineString geometry in cases that would previously
       produce a MultiLineString with contiguous sub-geometries. (GH-1459, Dan Baston)
     - Overlay operations that previously rotated rings by one vertex no longer do so
       (GH-1412, Dan Baston)

   - New things:
     - Add GEOSMinimumSpanningTree (Paul Ramsey)

    [29 lines not shown]
VersionDeltaFile
1.32+25-2geography/geos/PLIST
1.55+4-4geography/geos/distinfo
1.55+2-2geography/geos/Makefile
+31-83 files

NetBSD/pkgsrc kKK0azkdoc CHANGES-2026

   doc: Updated www/firefox153-l10n to 153.2.0
VersionDeltaFile
1.5736+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc idsrfUwwww/firefox153-l10n Makefile distinfo

   firefox153-l10n: update to 153.2
VersionDeltaFile
1.2+310-310www/firefox153-l10n/distinfo
1.2+2-2www/firefox153-l10n/Makefile
+312-3122 files

NetBSD/pkgsrc TWmlDVPdoc CHANGES-2026

   doc: Updated www/firefox153 to 153.2.0
VersionDeltaFile
1.5735+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 0Kprwsdwww/firefox153 Makefile distinfo

   firefox153: update to 153.2

   Mozilla Foundation Security Advisory 2026-85
   Security Vulnerabilities fixed in Firefox ESR 153.2

   Announced
       September 1, 2026
   Impact
       high
   Products
       Firefox ESR
   Fixed in

           Firefox ESR 153.2

   #CVE-2026-75874: Sandbox escape in the Remote Settings Client component

   Reporter
       crixer

    [274 lines not shown]
VersionDeltaFile
1.2+4-4www/firefox153/distinfo
1.2+2-2www/firefox153/Makefile
+6-62 files

NetBSD/pkgsrc hZPMJBzdoc CHANGES-2026

   doc: Updated www/firefox140-l10n to 140.15.0
VersionDeltaFile
1.5734+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc T8SGE6Nwww/firefox140-l10n Makefile distinfo

   firefox140-l10n: update to 140.15
VersionDeltaFile
1.16+307-307www/firefox140-l10n/distinfo
1.16+2-2www/firefox140-l10n/Makefile
+309-3092 files

NetBSD/pkgsrc cuhWR0xdoc CHANGES-2026

   doc: Updated www/firefox140 to 140.15.0
VersionDeltaFile
1.5733+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc NbuE2E0www/firefox140 Makefile distinfo

   firefox140: update to 140.15

   Mozilla Foundation Security Advisory 2026-84
   Security Vulnerabilities fixed in Firefox ESR 140.15

   Announced
       September 1, 2026
   Impact
       high
   Products
       Firefox ESR
   Fixed in

           Firefox ESR 140.15

   #CVE-2026-75874: Sandbox escape in the Remote Settings Client component

   Reporter
       crixer

    [126 lines not shown]
VersionDeltaFile
1.21+4-4www/firefox140/distinfo
1.23+2-2www/firefox140/Makefile
+6-62 files