BSD Commit Log Search

   update devel/got to 0.130 in 8.0-stable

   This version switches to creating new repositories with SHA256 by default.
   Update it now in time for release, rather than later during the -stable cycle.

   py-tokenizers ports fixes, based on part of a 20k line email from David Uhden Collado:
   - add missing LDEP and WANTLIB
   - override setting --manifest-path, otherwise Maturin misses the
   Python metadata outside the Rust workspace and doesn't install properly

   missed bump for php change; thanks aja

   +py-python-socks +py-tiny-proxy

   import ports/net/py-python-socks, ok tb@

   The python-socks package provides a core proxy client functionality for
   Python. Supports SOCKS4(a), SOCKS5(h), HTTP CONNECT proxy and provides
   sync and async (asyncio, trio, anyio) APIs. You probably don't need to
   use python-socks directly. It is used internally by aiohttp-socks and
   httpx-socks packages.

   Initial revision

   drop py-mcp as well, same issue as swival/litellm for tight deps, ok kirill

   update to maturin-1.15.0, i had to patch upstream's cargo.lock because
   of dep failures. checked for plist changes in all dependent ports.

   drop swival/py-litellm, the very restrictive set of dependencies in much
   of this ecosystem means it's not really suitable for inclusion where it
   has to coexist with other ports.  ok tb@

   swival can be installed via pipx though some system deps should be
   installed first (e.g. py3-cryptography 5.0.2, for the current version)
   as they're failing from source build. e.g.

   pipx install --system-site-packages --backend pip swival

   (backend set to pip; uv is default if installed and it doesn't handle
   system-site-packages properly at the moment)

   update to py3-prompt_toolkit-3.0.53

   set MODPHP_VERSION=8.3 for now, this requires php-imap which was removed
   (upstream should be looking at alternatives soon; this port could do with
   an update too)

   set default flavour to php84

   update to py3-curl-7.48.0

   update to py3-pipx-1.18.1

   remove bogus PLIST subst, and set UPDATE_PLIST_ARGS= -i MODPHP_VERSION
   to avoid new ones creeping in here, unbreak packaging post php 8.4

   update to py3-dunamai-1.26.3

   math/z3: update to 5.3.0

   update to py3-cares-5.2.0

   update to py3-mdown-extensions-12.3

   update to py3-markdown-3.11.1

   update to py3-nbformat-5.11.1

   unbreak roundcubemail following php-8.4 switch, pspell moved from a php
   subpackage to pecl

   update to py3-entrypoints-0.4.2
   this is maintenance-only mode upstream now, we can probably drop it

   update to ImageMagick-6.9.13-59

   update to ImageMagick-6.9.13-59 (inc. bunch of security fixes from -58)

   update to py3-cryptodome-4.0.0, this is a nice major update with a move away
   from GMP to their own constant-time big integers library, and a lot of other
   improvements. See https://www.pycryptodome.org/src/changelog for more info.

   relax Cryptodome dep, from upstream

   note in DESCR that py-cryptodomex is no longer tracking py-cryptodome
   upstream; users should switch to cryptodome for regular updates.

   Update KDE Frameworks 6.31.0

   https://kde.org/announcements/frameworks/6/6.31.0/

   update to 1.30.6; fixes multiple CVEs; from Mark Patruck

   - buffer overflow vulnerability when using alias with rewrite
   (CVE-2026-15176)
   - buffer overflow vulnerability when evaluating string expressions
   with variables (CVE-2026-93479)
   - request body injection vulnerability in HTTP/3 (CVE-2026-95101)
   - session forgery vulnerability when using TLS session ticket key
   rotation (CVE-2026-97629)
   - use-after-free vulnerability when using ngx_http_ssi_module with
   AIO (CVE-2026-97205)