FreeBSD/ports 388e3d9 — misc/zoneinfo Makefile distinfo

misc/zoneinfo: Update to 2026f

Upstream changes:

* Cuba will not fall back to -05 on 2026-11-01 and instead plans to
  maintain -04 through 2027-11-07.
* No more leap seconds, and leap second tables no longer expire
* Improve 1965/1966 data for Brazil: in 1965 Brazil ended DST on
  03-31 at 24:00 not 00:00, and in 1966 it ended DST on 03-01 at
  01:00 not 00:00.

Changelog:      https://data.iana.org/time-zones/tzdb/NEWS
DeltaFile
+3-3misc/zoneinfo/distinfo
+1-1misc/zoneinfo/Makefile
+4-42 files

FreeBSD/ports cff3931 — devel/violet Makefile distinfo

devel/violet: Follow upstream tarball reroll
DeltaFile
+3-3devel/violet/distinfo
+2-2devel/violet/Makefile
+5-52 files

FreeBSD/ports 4b866dd — textproc/gladtex Makefile, textproc/py-gladtex Makefile

textproc/{,py-}gladtex: Return to pool
DeltaFile
+2-1textproc/py-gladtex/Makefile
+2-1textproc/gladtex/Makefile
+4-22 files

FreeBSD/ports a3af18d — x11/clipman Makefile

x11/clipman: Return to pool
DeltaFile
+2-2x11/clipman/Makefile
+2-21 files

FreeBSD/ports db27a9c — audio/pt2-clone Makefile distinfo

audio/pt2-clone: Update to 1.93
DeltaFile
+3-3audio/pt2-clone/distinfo
+1-1audio/pt2-clone/Makefile
+4-42 files

FreeBSD/ports c918e69 — sysutils/less distinfo Makefile

sysutils/less: Update 692 => 710

This update removes obsolete lesskey program.

Changelog:
https://github.com/gwsw/less/blob/v710/NEWS

While here, sort Makefile (pet port{clippy,fmt}).

PR:             299616
Approved by:    jharris at widomaker.com (maintainer timeout, 2+ weeks)
Approved by:    osa, vvd (mentors, implicit)
DeltaFile
+9-10sysutils/less/Makefile
+3-3sysutils/less/distinfo
+12-132 files

FreeBSD/ports e4ac258 — devel/lua-stdlib-debug Makefile distinfo

devel/lua-stdlib-debug: Update 1.1.0 => 1.2

Changelog:
https://github.com/lua-stdlib/_debug/releases/tag/v1.2

PR:             299692
Approved by:    osa, vvd (mentors, implicit)
DeltaFile
+3-3devel/lua-stdlib-debug/distinfo
+2-1devel/lua-stdlib-debug/Makefile
+5-42 files

FreeBSD/ports cf3ceda — comms/py-pynitrokey Makefile distinfo

comms/py-pynitrokey: Update 0.14.0 => 0.14.1

This is a maintenance release that updates the bundled root
certificates to remove the compromised emSign certificate.

Changelog:
https://github.com/Nitrokey/pynitrokey/releases/tag/v0.14.1

PR:             299842
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 607543776deb67ee96d134762e34e0e65bd61bc9)
DeltaFile
+3-3comms/py-pynitrokey/distinfo
+1-1comms/py-pynitrokey/Makefile
+4-42 files

FreeBSD/ports 331816e — comms/py-pynitrokey Makefile distinfo

comms/py-pynitrokey: Update 0.13.0 => 0.14.0

Changelog:
https://github.com/Nitrokey/pynitrokey/releases/tag/v0.14.0

PR:             299023
Approved by:    osa, vvd (Mentors, implicit)

(cherry picked from commit 3b8dcf740b21bf9788270c0f2ad856503193008b)
DeltaFile
+3-3comms/py-pynitrokey/distinfo
+2-3comms/py-pynitrokey/Makefile
+5-62 files

FreeBSD/ports 6075437 — comms/py-pynitrokey Makefile distinfo

comms/py-pynitrokey: Update 0.14.0 => 0.14.1

This is a maintenance release that updates the bundled root
certificates to remove the compromised emSign certificate.

Changelog:
https://github.com/Nitrokey/pynitrokey/releases/tag/v0.14.1

PR:             299842
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4
DeltaFile
+3-3comms/py-pynitrokey/distinfo
+1-1comms/py-pynitrokey/Makefile
+4-42 files

FreeBSD/ports 95d5a9a — security/py-certifi Makefile distinfo

security/py-certifi: Update to 2026.10.23

The bundle drops "emSign ECC Root CA - G3", "emSign Root CA - C1" and
"emSign ECC Root CA - C3", following the eMudhra emSign CA compromise:
2026.10.18 removed the emSign roots, 2026.10.19 restored the ones that
are not affected, and 2026.10.23 removed two more.  The package layout
and the build are unchanged.

Commit log:
https://github.com/certifi/python-certifi/compare/2026.07.22...2026.10.23

PR:             299779
Approved by:    sunpoet (maintainer timeout, 13 days)
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 8f6ec8f61ee24a69eaac2b1131a0f411bde9a004)
DeltaFile
+3-3security/py-certifi/distinfo
+1-1security/py-certifi/Makefile
+4-42 files

FreeBSD/ports 8f6ec8f — security/py-certifi Makefile distinfo

security/py-certifi: Update to 2026.10.23

The bundle drops "emSign ECC Root CA - G3", "emSign Root CA - C1" and
"emSign ECC Root CA - C3", following the eMudhra emSign CA compromise:
2026.10.18 removed the emSign roots, 2026.10.19 restored the ones that
are not affected, and 2026.10.23 removed two more.  The package layout
and the build are unchanged.

Commit log:
https://github.com/certifi/python-certifi/compare/2026.07.22...2026.10.23

PR:             299779
Approved by:    sunpoet (maintainer timeout, 13 days)
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4
DeltaFile
+3-3security/py-certifi/distinfo
+1-1security/py-certifi/Makefile
+4-42 files

FreeBSD/ports bed8e0a — dns/dnsdist distinfo Makefile

dns/dnsdist: Update 2.1.2 => 2.1.3

Release Notes:
https://blog.powerdns.com/2026/10/12/powerdns-dnsdist-2.1.3-and-2.0.11-released

Changelog:
https://www.dnsdist.org/changelog.html#change-2.1.3

While here, add LMDB0 option that is enabled by default to make
switching to LMDB 1.0 possible (when disabled).

PR:             299435
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 6f409e6f9454f3b91d2e3d11c2bb99856c5667a1)
DeltaFile
+19-7dns/dnsdist/Makefile
+3-3dns/dnsdist/distinfo
+22-102 files

FreeBSD/ports 6f409e6 — dns/dnsdist distinfo Makefile

dns/dnsdist: Update 2.1.2 => 2.1.3

Release Notes:
https://blog.powerdns.com/2026/10/12/powerdns-dnsdist-2.1.3-and-2.0.11-released

Changelog:
https://www.dnsdist.org/changelog.html#change-2.1.3

While here, add LMDB0 option that is enabled by default to make
switching to LMDB 1.0 possible (when disabled).

PR:             299435
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4
DeltaFile
+19-9dns/dnsdist/Makefile
+3-3dns/dnsdist/distinfo
+22-122 files

FreeBSD/ports 7996d1a — sysutils/multitail distinfo Makefile

sysutils/multitail: Update 7.1.5 => 7.1.6

This update fixes shell injection in '-ex' command execution
along with other changes. The fix causes a breaking change.

Breaking change explained here:
https://github.com/folkertvanheusden/multitail/commit/84f304e

Commit log:
https://github.com/folkertvanheusden/multitail/compare/7.1.5...7.1.6

While here, polish Makefile and switch to USE_GITHUB.

PR:             300176
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2025-70544
MFH:            2026Q4

(cherry picked from commit 4cfe21b5f4f847f47c46fdb7f90152f76d25aff8)
DeltaFile
+7-8sysutils/multitail/Makefile
+3-3sysutils/multitail/distinfo
+10-112 files

FreeBSD/ports 4cfe21b — sysutils/multitail distinfo Makefile

sysutils/multitail: Update 7.1.5 => 7.1.6

This update fixes shell injection in '-ex' command execution
along with other changes. The fix causes a breaking change.

Breaking change explained here:
https://github.com/folkertvanheusden/multitail/commit/84f304e

Commit log:
https://github.com/folkertvanheusden/multitail/compare/7.1.5...7.1.6

While here, polish Makefile and switch to USE_GITHUB.

PR:             300176
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2025-70544
MFH:            2026Q4
DeltaFile
+7-8sysutils/multitail/Makefile
+3-3sysutils/multitail/distinfo
+10-112 files

FreeBSD/ports fca20d4 — databases/duckdb Makefile, databases/duckdb/files patch-extension_spatial_CMakeLists.txt patch-extension_spatial_src_spatial_modules_gdal_gdal__module.cpp

databases/duckdb: link option extensions into libduckdb; unbreak postgres_scanner, spatial and ducklake extensions

Patch submitted via e-mail.
DeltaFile
+68-0databases/duckdb/files/patch-extension_spatial_src_spatial_modules_proj_proj__module.cpp
+52-0databases/duckdb/files/patch-extension_spatial_src_spatial_modules_gdal_gdal__module.cpp
+22-0databases/duckdb/files/patch-extension_spatial_CMakeLists.txt
+14-5databases/duckdb/Makefile
+156-54 files

FreeBSD/ports 8c98df1 — mail/mailpit Makefile distinfo, mail/mailpit/files patch-package-lock.json

mail/mailpit: Update to 1.33.1
DeltaFile
+28-28mail/mailpit/files/patch-package-lock.json
+7-7mail/mailpit/distinfo
+1-1mail/mailpit/Makefile
+36-363 files

FreeBSD/ports 7061b53 — devel/gitlab-runner Makefile distinfo

devel/gitlab-runner: update to 19.5.3

Changes:        https://gitlab.com/gitlab-org/gitlab-runner/blob/main/CHANGELOG.md
DeltaFile
+9-9devel/gitlab-runner/distinfo
+1-1devel/gitlab-runner/Makefile
+10-102 files

FreeBSD/ports 9374bf7 — deskutils/stirling-pdf Makefile distinfo

deskutils/stirling-pdf: update to 3.3.0

Changes:        https://github.com/Stirling-Tools/Stirling-PDF/releases
DeltaFile
+3-3deskutils/stirling-pdf/distinfo
+1-1deskutils/stirling-pdf/Makefile
+4-42 files

FreeBSD/ports 89116ad — security/trivy Makefile distinfo

security/trivy: update to 0.76.2

Changes:        https://github.com/aquasecurity/trivy/releases
DeltaFile
+5-5security/trivy/distinfo
+1-1security/trivy/Makefile
+6-62 files

FreeBSD/ports 10b1eb5 — x11-fm/xfe Makefile distinfo

x11-fm/xfe: Update to 2.1.13
DeltaFile
+3-3x11-fm/xfe/distinfo
+1-1x11-fm/xfe/Makefile
+4-42 files

FreeBSD/ports abb4d3a — net/yami4 Makefile pkg-plist

net/yami4: Improve port

* Use HTTPS for MASTER_SITES.
* Always build the Core and C++ libraries, removing the option.
* Use PORTDOCS=* instead of listing a lot of documentation in pkg-plist.

PR:             300142
Approved by:    osa, vvd (mentors, implicit)
DeltaFile
+43-429net/yami4/pkg-plist
+8-21net/yami4/Makefile
+51-4502 files

FreeBSD/ports dacd724 — net/zapret2 Makefile distinfo

net/zapret2: Update 1.0.6 => 1.0.7

Approved by:            yuri@ (maintainer)

Differential Revision: https://reviews.freebsd.org/D61319
DeltaFile
+3-3net/zapret2/distinfo
+1-1net/zapret2/Makefile
+4-42 files

FreeBSD/ports b25f990 — mail/vandelay Makefile distinfo

mail/vandelay: Update 1.0.14 => 1.0.15

Changelog:
https://github.com/stalwartlabs/vandelay/blob/v1.0.15/CHANGELOG.md

PR:             300603
Approved by:    osa, vvd (mentors, implicit)
DeltaFile
+3-3mail/vandelay/distinfo
+1-1mail/vandelay/Makefile
+4-42 files

FreeBSD/ports 433c4e1 — security/vuxml/vuln 2026.xml

security/vuxml: Add dns/powerdns vulnerability

PR:             299437
Approved by:    osa, vvd (mentors, implicit)
DeltaFile
+31-0security/vuxml/vuln/2026.xml
+31-01 files

FreeBSD/ports 51b2fc9 — devel/ccache4 Makefile, devel/ccache4/files patch-src_ccache_hashutil.cpp patch-test_suites_base.bash

devel/ccache4: Backport fix for incbin directive handling

PR:            300573
DeltaFile
+44-0devel/ccache4/files/patch-unittest_test__hashutil.cpp
+27-0devel/ccache4/files/patch-test_suites_base.bash
+15-0devel/ccache4/files/patch-src_ccache_hashutil.cpp
+1-0devel/ccache4/Makefile
+87-04 files

FreeBSD/ports 1628c8b — dns/powerdns distinfo Makefile

dns/powerdns: Update 5.1.4 => 5.1.5

This release contains bug fixes, as well as a minor
feature and a security fix.

Security Advisory:
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-13.html

Changelog:
https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.5

While here, add LMDB0 option that is enabled by default to make
switching to LMDB 1.0 possible (when disabled).

PR:             299437
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2026-73206
MFH:            2026Q4

(cherry picked from commit 6b277d8f5b615dea474618073ae3fa96bf50c1d8)
DeltaFile
+30-22dns/powerdns/Makefile
+3-3dns/powerdns/distinfo
+33-252 files

FreeBSD/ports 6b277d8 — dns/powerdns distinfo Makefile

dns/powerdns: Update 5.1.4 => 5.1.5

This release contains bug fixes, as well as a minor
feature and a security fix.

Security Advisory:
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-13.html

Changelog:
https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.5

While here, add LMDB0 option that is enabled by default to make
switching to LMDB 1.0 possible (when disabled).

PR:             299437
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2026-73206
MFH:            2026Q4
DeltaFile
+30-23dns/powerdns/Makefile
+3-3dns/powerdns/distinfo
+33-262 files

FreeBSD/ports 3687d5e — security/openvpn-auth-oauth2 Makefile distinfo

security/openvpn-auth-oauth2: Update to 2.3.2
DeltaFile
+5-5security/openvpn-auth-oauth2/distinfo
+1-2security/openvpn-auth-oauth2/Makefile
+6-72 files