NetBSD/src Y24aeKFlibexec/ld.elf_so tls.c

   PR/60011: TLS alignment wrong on powerpc

   Fix previous where I only got the alignment right for the architectures
   where the thread pointer points to the struct tcb. Handle the
   architectures that have a thread pointer that is relative to end of the
   struct tcb, e.g. powerpc.

   Hopefully the commit in the tls.c explains what's going on.

   Thanks to riastrah@ and andvar@ for comments/things to fix.
VersionDeltaFile
1.29+46-5libexec/ld.elf_so/tls.c
+46-51 files

OpenBSD/ports QN9Zgo5databases/duckdb distinfo Makefile, databases/duckdb/patches patch-CMakeLists_txt

   Update to duckdb-1.5.0.
VersionDeltaFile
1.3+79-23databases/duckdb/pkg/PLIST
1.3+4-7databases/duckdb/patches/patch-CMakeLists_txt
1.4+2-2databases/duckdb/distinfo
1.4+2-2databases/duckdb/Makefile
+87-344 files

FreeBSD/ports 823a4e3security/clamav-lts pkg-plist distinfo

security/clamav-lts: update 1.4.3 -> 1.4.4

Reported by:    Andrea Venturoli <ml at netfence.it>, Helge Oldach <freebsd at oldach.net>
Changes:        https://blog.clamav.net/2026/03/clamav-152-and-144-security-patch.html
Security:       CVE-2026-20031
MFH:            2026Q1

(cherry picked from commit be29dc78bb6b22473f2e35db37f98a7e16c5bed3)
DeltaFile
+35-43security/clamav-lts/pkg-plist
+3-3security/clamav-lts/distinfo
+1-2security/clamav-lts/Makefile
+39-483 files

FreeBSD/ports be29dc7security/clamav-lts pkg-plist distinfo

security/clamav-lts: update 1.4.3 -> 1.4.4

Reported by:    Andrea Venturoli <ml at netfence.it>, Helge Oldach <freebsd at oldach.net>
Changes:        https://blog.clamav.net/2026/03/clamav-152-and-144-security-patch.html
Security:       CVE-2026-20031
MFH:            2026Q1
DeltaFile
+35-43security/clamav-lts/pkg-plist
+3-3security/clamav-lts/distinfo
+1-2security/clamav-lts/Makefile
+39-483 files

FreeBSD/ports 754606esecurity/clamav pkg-plist

security/clamav: fix build with option UNRAR unset

PR:             293813
Reported by:    Christos Chatzaras <chris at cretaforce.gr>

(cherry picked from commit 45a3cd2d6bb784999a072d4338dc059c5bd9cd14)
DeltaFile
+6-6security/clamav/pkg-plist
+6-61 files

NetBSD/pkgsrc-wip c7c21da. TODO, crush distinfo go-modules.mk

crush: update to 0.49.0
DeltaFile
+258-177crush/distinfo
+85-58crush/go-modules.mk
+1-1crush/Makefile
+0-1TODO
+344-2374 files

OpenBSD/ports eOzjaHfx11/gnome/gvfs Makefile, x11/gnome/gvfs/pkg PLIST-main DESCR-google

   Disable the google plugin: it requires libgdata which is unmaintained and the
   only thing keeping libsoup2 in GNOME.
VersionDeltaFile
1.226+8-16x11/gnome/gvfs/Makefile
1.53+3-1x11/gnome/gvfs/pkg/PLIST-main
1.2+0-0x11/gnome/gvfs/pkg/DESCR-google
1.3+0-0x11/gnome/gvfs/pkg/PLIST-google
+11-174 files

NetBSD/pkgsrc Qg9vi6Cdoc TODO CHANGES-2026

   doc: Updated comms/py-textual to 8.1.1
VersionDeltaFile
1.26945+1-2doc/TODO
1.1764+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc pm9NAWxcomms/py-textual Makefile distinfo

   py-textual: update to 8.1.1.

   8.1.1

   Fixed

       Hotfix for animation on complete #6412

   8.1.0

   This release should smooth scrolling large documents, particularly for Python < 3.14
VersionDeltaFile
1.46+4-4comms/py-textual/Makefile
1.41+4-4comms/py-textual/distinfo
+8-82 files

OpenBSD/ports UFtKlj4meta/gnome Makefile

   Stop depending on x11/gnome/gvfs,-google, it will be removed.
VersionDeltaFile
1.303+2-3meta/gnome/Makefile
+2-31 files

NetBSD/pkgsrc uUDeP7vdoc CHANGES-2026 TODO

   doc: Updated devel/py-ruff to 0.15.6
VersionDeltaFile
1.1763+2-1doc/CHANGES-2026
1.26944+1-2doc/TODO
+3-32 files

NetBSD/pkgsrc S2lZZ2vdevel/py-ruff distinfo cargo-depends.mk

   py-ruff: update to 0.15.6.

   Preview features

       Add support for lazy import parsing (#23755)
       Add support for star-unpacking of comprehensions (PEP 798) (#23788)
       Reject semantic syntax errors for lazy imports (#23757)
       Drop a few rules from the preview default set (#23879)
       [airflow] Flag Variable.get() calls outside of task execution context (AIR003) (#23584)
       [airflow] Flag runtime-varying values in DAG/task constructor arguments (AIR304) (#23631)
       [flake8-bugbear] Implement delattr-with-constant (B043) (#23737)
       [flake8-tidy-imports] Add TID254 to enforce lazy imports (#23777)
       [flake8-tidy-imports] Allow users to ban lazy imports with TID254 (#23847)
       [isort] Retain lazy keyword when sorting imports (#23762)
       [pyupgrade] Add from __future__ import annotations automatically (UP006) (#23260)
       [refurb] Support newline parameter in FURB101 for Python 3.13+ (#23754)
       [ruff] Add os-path-commonprefix (RUF071) (#23814)
       [ruff] Add unsafe fix for os-path-commonprefix (RUF071) (#23852)
       [ruff] Limit RUF036 to typing contexts; make it unsafe for non-typing-only (#23765)

    [25 lines not shown]
VersionDeltaFile
1.96+34-43devel/py-ruff/distinfo
1.91+10-13devel/py-ruff/cargo-depends.mk
1.98+2-2devel/py-ruff/Makefile
+46-583 files

NetBSD/pkgsrc 9qYuavmdoc CHANGES-2026 TODO

   doc: Updated net/libtorrent-rasterbar to 2.0.12
VersionDeltaFile
1.1762+2-1doc/CHANGES-2026
1.26943+1-2doc/TODO
+3-32 files

NetBSD/pkgsrc uDkrSZanet/libtorrent-rasterbar distinfo Makefile

   libtorrent-rasterbar: update to 2.0.12.

   2.0.12 released

        * fix issue where file priorities could be cleared by force recheck
        * fix issue in XML parser
        * when building against OpenSSL, require at least version 1.1.1
        * add setting to set no-copy-on-write flag on new files
        * add performance counters to file pool
        * add high_priority flag to torrent_handle::force_reannounce()
        * update default DSCP value and update docs
        * fix python binding for set_notify_function()
        * fix error handling in mmap disk I/O when hashing files
        * improve copy_file_range() fallback
        * don't overwrite existing files when renaming
        * add option to send host header in HTTP proxy CONNECT command
        * cache DNS failures for a shorter time
        * file_renamed_alert is always posted, regardless of alert mask
        * add feature to request resume data synchronously

    [6 lines not shown]
VersionDeltaFile
1.23+4-4net/libtorrent-rasterbar/distinfo
1.39+2-3net/libtorrent-rasterbar/Makefile
+6-72 files

NetBSD/pkgsrc CMIHjpfdoc TODO CHANGES-2026

   doc: Updated sysutils/py-puremagic to 2.1.0
VersionDeltaFile
1.26942+1-2doc/TODO
1.1761+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc rGyV4fCsysutils/py-puremagic distinfo Makefile

   py-puremagic: update to 2.1.0.

   Version 2.1.0
   -------------

   - Adding #6 `from_extension()` and `magic_extension()` to look up MIME types by file extension
   - Adding #119 CFBF/OLE2 scanner to distinguish Word, Excel, PowerPoint, Outlook MSG, Visio, and Publisher files (thanks to Simeon Stoykov and Andy - NebularNerd)
   - Adding #139 codespell check (thanks to Christian Clauss)
   - Adding `-e`/`--extension` CLI flag for extension-based MIME type lookup
   - Fixing #104 WAV MIME type changed from `audio/wave` to `audio/wav` (thanks to Simon Willison and Andy - NebularNerd)
VersionDeltaFile
1.15+4-4sysutils/py-puremagic/distinfo
1.17+2-2sysutils/py-puremagic/Makefile
1.6+3-0sysutils/py-puremagic/PLIST
+9-63 files

NetBSD/pkgsrc psAe3VVdoc CHANGES-2026 TODO

   doc: Updated fonts/py-fonttools to 4.62.1
VersionDeltaFile
1.1760+2-1doc/CHANGES-2026
1.26941+1-2doc/TODO
+3-32 files

NetBSD/pkgsrc J8RFgipfonts/py-fonttools PLIST distinfo

   py-fonttools: update to 4.62.1.

   4.62.1 (released 2026-03-13)
   ----------------------------

   - [feaLib] Extend contextual rule merging to all rule types: single subst, GSUB/GPOS
     named lookups, ignore rules, and chained alternate subst (#4061).

   4.62.0 (released 2026-03-09)
   ----------------------------

   - [diff] Add new ``fonttools diff`` command for comparing font files, imported from the
     ``fdiff`` project and heavily reworked (#1190, #4007, #4009, #4011, #4013, #4019).
   - [feaLib] Fix ``VariableScalar`` interpolation bug with non-linear avar mappings. Also
     decouple ``VariableScalar`` from compiled fonts, allowing it to work with designspace data
     before compilation (#3938, #4054).
   - [feaLib] Fix ``VariableScalar`` axis ordering and iterative delta rounding to match fontc
     behavior (#4053).
   - [feaLib] Merge chained multi subst rules with same context into a single subtable instead of

    [37 lines not shown]
VersionDeltaFile
1.60+15-12fonts/py-fonttools/PLIST
1.104+4-4fonts/py-fonttools/distinfo
1.131+4-4fonts/py-fonttools/Makefile
+23-203 files

LLVM/project 0277b44clang/lib/CIR/CodeGen CIRGenCall.cpp, clang/test/CIR/CodeGen arg-attrs.cpp

[CIR] Fix reference alignment to use pointee type

getNaturalTypeAlignment on a reference type returned pointer alignment
instead of pointee alignment. Pass the pointee type with
forPointeeType=true to match traditional codegen's
getNaturalPointeeTypeAlignment behavior. Fix applies to both argument
and return type attribute construction paths.
DeltaFile
+27-4clang/test/CIR/CodeGen/arg-attrs.cpp
+13-5clang/lib/CIR/CodeGen/CIRGenCall.cpp
+40-92 files

NetBSD/pkgsrc HOAgooqdoc TODO CHANGES-2026

   doc: Updated www/miniflux to 2.2.18
VersionDeltaFile
1.26940+1-2doc/TODO
1.1759+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc OSBIEbfwww/miniflux distinfo go-modules.mk

   miniflux: update to 2.2.18.

   Security

       Block outbound requests to private networks made by the fetcher by default.
       Add SSRF protection for integration HTTP clients by blocking connections to private network addresses at connect time.
       Fix a possible SSRF TOCTOU / DNS-rebinding issue in the fetcher private network check.
       Ensure private network protections also apply to redirect targets.
       Treat RFC 6598 shared address space (100.64.0.0/10) as non-public.

   Breaking Changes

   To prevent potential SSRF, Miniflux now blocks access to services hosted on private networks by default.

       FETCHER_ALLOW_PRIVATE_NETWORKS=1 must now be enabled to access feeds hosted on a local network.
       INTEGRATION_ALLOW_PRIVATE_NETWORKS=1 must now be enabled to access third-party integration services hosted on a local network.

   Improvements


    [14 lines not shown]
VersionDeltaFile
1.6+88-88www/miniflux/distinfo
1.5+28-28www/miniflux/go-modules.mk
1.13+2-3www/miniflux/Makefile
+118-1193 files

NetBSD/pkgsrc 9HjgqRedoc CHANGES-2026 TODO

   doc: Updated textproc/tabiew to 0.13.0
VersionDeltaFile
1.1758+2-1doc/CHANGES-2026
1.26939+1-2doc/TODO
+3-32 files

NetBSD/pkgsrc SO0jW16textproc/tabiew distinfo cargo-depends.mk, textproc/tabiew/patches patch-.._vendor_mio-1.0.4_src_sys_unix_selector_kqueue.rs

   tabiew: update to 0.13.0.

   Changes not documented.
VersionDeltaFile
1.5+787-581textproc/tabiew/distinfo
1.5+261-192textproc/tabiew/cargo-depends.mk
1.5+2-2textproc/tabiew/Makefile
1.2+1-1textproc/tabiew/patches/patch-.._vendor_mio-1.0.4_src_sys_unix_selector_kqueue.rs
+1,051-7764 files

NetBSD/src 8EGEdFQusr.sbin/lockstat main.c

   lockstat: fix ctype crashes

   Could be triggered by:
   lockstat -b 123ä
   lockstat -L ä command
VersionDeltaFile
1.22+4-4usr.sbin/lockstat/main.c
+4-41 files

NetBSD/pkgsrc pKxIOXFdoc CHANGES-2026

   doc: Updated geography/py-rtcm to 1.1.11
VersionDeltaFile
1.1757+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 5HOb2YRgeography/py-rtcm distinfo Makefile

   geography/py-rtcm: Update to 1.1.11

   Upstream NEWS:

     [housekeeping not affecting the release]
VersionDeltaFile
1.3+4-4geography/py-rtcm/distinfo
1.6+2-2geography/py-rtcm/Makefile
+6-62 files

NetBSD/pkgsrc daRx0F4doc CHANGES-2026 TODO

   doc: Updated devel/jjui to 0.10.1
VersionDeltaFile
1.1756+2-1doc/CHANGES-2026
1.26938+1-2doc/TODO
+3-32 files

LLVM/project ed6fc49llvm/test/CodeGen/X86 known-never-zero.ll

[X86] known-never-zero.ll - add vector test coverage for #186335 (#186660)
DeltaFile
+49-0llvm/test/CodeGen/X86/known-never-zero.ll
+49-01 files

NetBSD/pkgsrc 64bmDGadevel/jjui distinfo go-modules.mk

   jjui: update to 0.10.1.

   Wow, a major release after a very long time. As promised, v0.10 is
   ready, and it comes with breaking changes.

   First, thank you to everybody who contributed code, bug reports,
   ideas, and testing for this release. In particular, thanks to
   @baggiiiie for various features and fixes, @nickchomey for
   contributions and continuous feedback, and @vic for updating the
   documentation website. Thanks as well to everyone else for various
   code contributions, reporting issues, and verifying fixes.

   We changed a lot in v0.10, but the biggest shift is that we finally
   got rid of some legacy configuration and moved to a unified actions
   + bindings model. Old concepts like [custom_commands] and [leader]
   are now replaced by a more consistent system built around actions,
   bindings, and first-class support for leader-style key sequences.

   This release also introduces config.lua, which makes it much easier

    [11 lines not shown]
VersionDeltaFile
1.15+88-124devel/jjui/distinfo
1.9+28-40devel/jjui/go-modules.mk
1.23+2-3devel/jjui/Makefile
1.2+1-0devel/jjui/PLIST
+119-1674 files

FreeBSD/ports 335b812ports-mgmt/pkg_jail distinfo Makefile

ports-mgmt/pkg_jail: Update to 2.16

Support for update ports tree with git or gitup
DeltaFile
+3-3ports-mgmt/pkg_jail/distinfo
+1-1ports-mgmt/pkg_jail/Makefile
+4-42 files