NetBSD/pkgsrc 23Esbs2devel/py-coverage PLIST Makefile

   py-coverage: updated to 7.15.4

   7.15.4 — 2026-08-06

   - Fix: in the HTML report, a source file name containing a double quote (legal
     on POSIX) wasn't escaped where it's dropped into the ``href`` of the index
     and prev/next links, so it could close the attribute early and inject markup.
     Page URLs are now escaped. Thanks, `Rajath Mohare <pull 2227_>`_.

   - Fix: the LCOV report wrote file names and other fields into its
     line-oriented records without neutralizing control characters. A measured
     file whose name contained a newline (legal on POSIX) could forge extra
     records, inflating the coverage seen by tools that read the report. Control
     characters in a field are now replaced. Thanks, `Rajath Mohare <pull
     2226_>`_.

   - Wheels are now provided for Python 3.15.
VersionDeltaFile
1.80+4-4devel/py-coverage/distinfo
1.94+2-2devel/py-coverage/Makefile
1.25+2-1devel/py-coverage/PLIST
+8-73 files

NetBSD/pkgsrc bAEKw9ydevel/py-traitlets Makefile distinfo

   py-traitlets: updated to 5.16.1

   5.16.1

   Merged PRs

   - Re-add \_merge to un-break spyder temporarily.
VersionDeltaFile
1.31+4-4devel/py-traitlets/distinfo
1.39+2-2devel/py-traitlets/Makefile
+6-62 files

NetBSD/pkgsrc UkJNWZMdevel/py-argcomplete Makefile distinfo

   py-argcomplete: updated to 3.7.2

   Changes for v3.7.2 (2026-08-05)

   Require Python 3.10+


   Changes for v3.7.1 (2026-08-04)

   -  Fix for kislyuk-544 => TestZshGlobalExplicit tests are failing after
      upgrade to zsh 5.9.0.1

   -  Expand ~ in \_FilteredFilesCompleter (DirectoriesCompleter)
VersionDeltaFile
1.44+4-4devel/py-argcomplete/distinfo
1.53+2-2devel/py-argcomplete/Makefile
+6-62 files

NetBSD/pkgsrc gLbTw2Qdoc CHANGES-2026

   Updated net/libiscsi, emulators/qemu, sysutils/qemu-guest-agent
VersionDeltaFile
1.5043+4-1doc/CHANGES-2026
+4-11 files

NetBSD/pkgsrc aCdoNHOemulators/qemu Makefile version.mk, sysutils/qemu-guest-agent Makefile

   qemu: updated to 11.0.3

   11.0.3
   Bug fixes
VersionDeltaFile
1.254+4-4emulators/qemu/distinfo
1.17+2-2emulators/qemu/version.mk
1.12+1-2sysutils/qemu-guest-agent/Makefile
1.411+1-2emulators/qemu/Makefile
+8-104 files

NetBSD/pkgsrc ulPDOlWnet/libiscsi PLIST distinfo, net/libiscsi/patches patch-configure.ac patch-include_sha.h

   libiscsi: updated to 1.20.3

   1.20.3

   When queueing the first PDU to an idle socket, immediately try to write
   it to the socket instead of waiting for the event-loop to
   timeout/notice there is work to do.

   Various other small bugfixes.
VersionDeltaFile
1.1+36-0net/libiscsi/patches/patch-lib_multithreading.c
1.1+21-0net/libiscsi/patches/patch-include_sha.h
1.3+8-7net/libiscsi/Makefile
1.5+6-5net/libiscsi/distinfo
1.2+6-1net/libiscsi/PLIST
1.2+1-1net/libiscsi/patches/patch-configure.ac
+78-146 files

NetBSD/pkgsrc kdosqXdsecurity/zoneminder Makefile

   security/zoneminder: Switch to use php/compat.mk
VersionDeltaFile
1.107+3-3security/zoneminder/Makefile
+3-31 files

NetBSD/pkgsrc HGkcrYawww/osticket Makefile

   www/osticket: use compat.mk for php-apcu dependency
VersionDeltaFile
1.11+2-3www/osticket/Makefile
+2-31 files

NetBSD/pkgsrc Bo880fwdevel/phabricator Makefile, www/drupal11 Makefile

   Use lang/php/compat.mk.

   Solve the problem of dependency to php-apcu and php-opcache.
VersionDeltaFile
1.22+4-9devel/phabricator/Makefile
1.112+4-4www/moodle/Makefile
1.24+3-4www/php-glpi/Makefile
1.12+3-3www/drupal11/Makefile
1.10+2-3www/osticket/Makefile
+16-235 files

NetBSD/pkgsrc eCM7nDxlang/php compat.mk

   php/compat.mk: Add support for apcu and opcache
VersionDeltaFile
1.3+16-2lang/php/compat.mk
+16-21 files

NetBSD/pkgsrc Bxa7oendoc CHANGES-2026

   doc: Updated cad/klayout to 0.30.10
VersionDeltaFile
1.5042+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc pGze3XScad/klayout distinfo Makefile, cad/klayout/patches patch-src_klayout.pri patch-src_tl_tl_tlTimer.cc

   (cad/klayout) Updated 0.29.12 to 0.30.10, based on wip/klayout by Atsushi Toyokura

   (pkgsrc)
   - Add two experimental patches for Timer::memory_size () at:
      src/tl/tl/tlTimer.cc
      src/klayout.pri

   - To test the code inserted above, we have to know when the function is called.
     By asking chatGPT,
    **KLayout 0.30.10**, `tl::Timer::memory_size()` is called automatically when an **enabled `tl::SelfTimer` is destroyed and writes its performance report**

   --------------------------------------
   SelfTimer goes out of scope / is deleted
           v
   SelfTimer::~SelfTimer()
           v
   stop()
           v
   report()

    [419 lines not shown]
VersionDeltaFile
1.1+56-0cad/klayout/patches/patch-src_tl_tl_tlTimer.cc
1.11+28-1cad/klayout/PLIST
1.1+16-0cad/klayout/patches/patch-src_klayout.pri
1.108+9-5cad/klayout/Makefile
1.53+6-4cad/klayout/distinfo
+115-105 files

NetBSD/pkgsrc OcAuRtOdoc TODO CHANGES-2026

   doc: Updated net/arti to 2.5.1
VersionDeltaFile
1.27699+1-2doc/TODO
1.5041+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc uNO3WiBnet/arti Makefile cargo-depends.mk

   arti: update to 2.5.1.

   # Arti 2.5.1 - 3 August 2026

   Arti 2.5.1 continues development on relays and directory authorities.
   It also adds some performance, security, and convenience features for
   onion services.

   # Arti 2.5.0 — 30 June 2026

   Arti 2.5.0 comes with lots of progress in the relay and directory authority
   space, including ntor handshake handling, as well as encoding/decoding support
   for router- and micro descriptors.

   This release also includes a number of important bug fixes, as well as two security
   fixes for medium-severity security issues, [TROVE-2026-24] and [TROVE-2026-27].
VersionDeltaFile
1.19+427-451net/arti/distinfo
1.19+141-149net/arti/cargo-depends.mk
1.24+3-3net/arti/Makefile
+571-6033 files

NetBSD/pkgsrc 3yolICcdoc CHANGES-2026 TODO

   doc: Updated devel/apr-util to 1.6.4
VersionDeltaFile
1.27698+3-2doc/TODO
1.5040+2-1doc/CHANGES-2026
+5-32 files

NetBSD/pkgsrc 1YqBWqwdevel/apr-util distinfo Makefile

   apr-util: update to 1.6.4.

   Changes with APR-util 1.6.4

     *) apr_brigade: Don't split the final LF in apr_brigade_split_line() to
        avoid producing an empty bucket.  PR 64273
        [Barnim Dzwillo <dzwillo strato.de>, Joe Orton]

     *) apr_brigade: Metadata buckets are now ignored in
        apr_brigade_split_line, apr_brigade_flatten and
        apr_brigade_to_iovec, fixing possible undefined behaviour.  PR 68278
        [Ben Kallus <benjamin.p.kallus.gr dartmouth.edu>, Joe Orton]

     *) apr_crypto_openssl: Compatibility with OpenSSL 3.  [Yann Ylavic]

     *) apr_crypto_openssl: use OPENSSL_init_crypto() to initialise OpenSSL
        on versions 1.1+. [Graham Leggett]

     *) apr_memcache: Fix name lookup to allow IPv6 as well as IPv4.

    [5 lines not shown]
VersionDeltaFile
1.79+7-3devel/apr-util/Makefile
1.28+4-4devel/apr-util/distinfo
+11-72 files

NetBSD/pkgsrc kIAhbXFdoc CHANGES-2026

   Updated devel/SDL3, devel/mimalloc
VersionDeltaFile
1.5039+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc df4T0Qkdevel/mimalloc Makefile distinfo

   mimalloc: updated to 3.4.5

   3.4.5
   Unknown changes
VersionDeltaFile
1.14+4-4devel/mimalloc/distinfo
1.18+2-2devel/mimalloc/Makefile
+6-62 files

NetBSD/pkgsrc 8qEVA45devel/SDL3 PLIST Makefile

   SDL3: updated to 3.4.14

   3.4.14

   This is a stable bugfix release, with the following changes:

   GPU buffers and textures can have multiple read usages
   Fixed X11 crash if the IME service was shutdown in the background
   Fixed hang when hiding an X11 window on some window managers
   Fixed being unable to get clipboard text on older versions of macOS
   Fixed the 8BitDo Pro 3 controller showing up twice on macOS
   Fixed Xbox controllers not being detected if SDL is built with GameInput support
   Fixed pen creating phantom mouse events in relative mode on Android
VersionDeltaFile
1.12+4-4devel/SDL3/distinfo
1.14+2-3devel/SDL3/Makefile
1.13+2-2devel/SDL3/PLIST
+8-93 files

NetBSD/pkgsrc HgHog1Qdoc CHANGES-2026

   Updated multimedia/gstreamer1, net/openvpn, security/p11-kit
VersionDeltaFile
1.5038+4-1doc/CHANGES-2026
+4-11 files

NetBSD/pkgsrc wvkSrcPsecurity/p11-kit PLIST Makefile

   p11-kit: updated to 0.26.5

   0.26.5 (stable)
   * rpc: guard against overflow when decoding nested attributes (CVE-2026-18938)
VersionDeltaFile
1.37+4-4security/p11-kit/distinfo
1.17+2-2security/p11-kit/PLIST
1.46+2-2security/p11-kit/Makefile
+8-83 files

NetBSD/pkgsrc 7lieE52net/openvpn Makefile.common distinfo, net/openvpn-acct-wtmpx distinfo

   openvpn: updated to 2.7.6

   2.7.6

   Enable TCP_NODELAY by default and push it to clients
   options: make 'tun' the default for '--dev'
   Correctly calculate packet id size when epoch packet format is in use
   test_tls_crypt: Fix issue with temp file name on big endian systems
   ssl_pkt: Fix doxygen warning about read_control_auth
   t_client.sh.in: Do not run resolvectl if systemd is not running
   test_tls_crypt: Fix test failure on Windows
   ssl: Ignore hard reset packets with a non-zero packet id
   mingw: avoid C99 "hh" scanf length modifier
   interactive: forbid "--setenv opt" in startup data
   CMake: detect cmocka_version.h via include path, not by linking
   options: limit ping and keepalive values to one day
   Make --x509-username-field work with Mbed TLS
   Remove --providers from --help output for Mbed TLS
VersionDeltaFile
1.82+4-4net/openvpn/distinfo
1.54+4-4net/openvpn-nagios/distinfo
1.57+4-4net/openvpn-acct-wtmpx/distinfo
1.51+2-2net/openvpn/Makefile.common
+14-144 files

NetBSD/pkgsrc l8MqK7umultimedia/gst-plugins1-bad distinfo, multimedia/gst-plugins1-base distinfo

   gstreamer1: updated to 1.28.6

   1.28.6

   Highlighted bugfixes:

   Various security fixes and playback fixes
   playbin3, playbin: fix stalls after re-enabling previously disabled subtitles
   Fix regression in core if a pad is re-linked while changed sticky events are being pushed
   dtls/webrtc: fix some issues with OpenSSL 4.0.0
   RTP retransmission bitrate estimation fixes
   Fix RTP depayloading of SMPTE ST291 frames with multiple ANC packets
   Add H.266 muxing support to the Rust (f)mp4 muxers
   Better handling of input buffers without timestamps in Rust (f)mp4 muxers
   webrtcsink H.264 level/profile negotiation fixes and support for nvv4l2h265enc encoder
   SMPTE ST2038 ancillary metadata and closed caption combiner improvements
   Fix SEI insertion into H.265/HEVC streams with alpha
   Windows D3D11 WinRT screen capture element fixes
   Improved coded buffer size handling for VA encoders

    [5 lines not shown]
VersionDeltaFile
1.40+4-4net/gst-rtsp-server/distinfo
1.78+4-4multimedia/gst-plugins1-ugly/distinfo
1.74+4-4multimedia/gst-plugins1-libav/distinfo
1.83+4-4multimedia/gst-plugins1-good/distinfo
1.87+4-4multimedia/gst-plugins1-base/distinfo
1.79+4-4multimedia/gst-plugins1-bad/distinfo
+24-244 files not shown
+38-3810 files

NetBSD/pkgsrc ll6UYNFwww/firefox mozilla-common.mk distinfo, www/firefox/patches patch-third__party_rust_mtu_src_bindings_netbsd.rs

   firefox: remove target_arch=x86_64 cfg attr in patch

   Fixes aarch64 build.
   (target_pointer_width=64 should suffice here, NetBSD does not have x32
   ABI for x86_64.)
VersionDeltaFile
1.3+19-19www/firefox/patches/patch-third__party_rust_mtu_src_bindings_netbsd.rs
1.320+2-2www/firefox/mozilla-common.mk
1.589+2-2www/firefox/distinfo
+23-233 files

NetBSD/pkgsrc q0doi98doc TODO CHANGES-2026

   doc: Updated chat/ejabberd to 26.07
VersionDeltaFile
1.27697+1-2doc/TODO
1.5037+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc EwQW24Bchat/ejabberd PLIST Makefile

   chat/ejabberd: Update to 26.07

   ## Version 26.07

   #### Security fixes

   This release contains fixes for those issues:

   - It's possible to craft PLAIN auth request and authenticate as one user, but then open
     session for different one.
   - mod_caps persistent cache can be poisoned by using legacy version requests.
     This cache was only used to determine list of nodes that should trigger notifications
     in PubSub presence-based delivery.
   - SQL injection in mod_pubsub handling of paging requests.
   - Possible atom exhaustion that can be triggered by issuing REST requests to mod_http_api
   - It was possible to make ejabberd send redirect response for OAuth requests to unvetted url.
     This required enabling ejabberd to act as OAuth provider (by adding request handler for
     ejabberd_oauth in http listener). As part of this fix we changed `oauth_client_id_check`
     default value to `db` - using ejabberd as OAuth provider will be only allowed by clients

    [20 lines not shown]
VersionDeltaFile
1.80+4-4chat/ejabberd/distinfo
1.119+3-3chat/ejabberd/Makefile
1.69+5-0chat/ejabberd/PLIST
+12-73 files

NetBSD/pkgsrc rF18QDgsecurity/libssh options.mk

   libssh: needs openssl 3.5.0
VersionDeltaFile
1.9+2-1security/libssh/options.mk
+2-11 files

NetBSD/pkgsrc c4gStPQchat/ejabberd Makefile

   chat/ejabberd: Partially address pkglin and improve comments

     - Improve version pattern for coreutils (textual change, NFCI)
     - Reorder CONFIGURE_ARGS after DEPENDS
     - Clarify and regularize description of build tools
     - Reorder erlang bl3 depends.

   Except for coreutils version, this is a comment-only/reordering
   change.
VersionDeltaFile
1.118+43-46chat/ejabberd/Makefile
+43-461 files

NetBSD/pkgsrc qwAeEbcdoc CHANGES-2026

   doc: Updated net/powerdns-recursor to 5.4.5
VersionDeltaFile
1.5036+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc U7HwIEZnet/powerdns-recursor cargo-depends.mk Makefile

   powerdns-recursor: Update to 5.4.5

   Released: 6th of August 2026

   Improvements
   Add ubuntu-resolute build target.
   References: #16986, pull request 17836

   Bug Fixes
   Fix disabling algo 8 also disables DS digest 2.
   References: #17786, pull request 17840
   Account for the existing content when parsing labels.
   References: #17790, #17797, pull request 17847
   Do not index past the address for byte-aligned prefixes.
   References: #17835, pull request 17850
   Fix DNAME interaction with aggressive use of NSEC3
   References: #17157, pull request 17853
   Fix DNSSEC validation of wildcard-expanded proof.
   References: #17156, pull request 17854
VersionDeltaFile
1.53+4-4net/powerdns-recursor/distinfo
1.66+2-2net/powerdns-recursor/Makefile
1.6+0-0net/powerdns-recursor/cargo-depends.mk
+6-63 files