science/*: restrict some pre-requisites of Code_Aster to amd64
These ports fail on non-amd64 for various reasons. Some of these errors
could surely be fixed, but that’s of no interest.
Mk/bsd.licenses.db.mk: Register real SPDX License List identifiers
Add _LICENSE_NAME_/_LICENSE_GROUPS_ entries for SPDX ids independently
detected across the tree with no framework entry to represent them,
surfacde by an ongoing SPDX-compliance audit of LICENSE= declarations.
Kept in their own _LICENSE_SPDX_LIST var, appended to _LICENSE_LIST
exactly once, so a token's SPDX-ness can later be recovreed with a
single variable-expansion match instead of re-deriving the legacy-vs-
SPDX split by hand.
Also relocates the tokens that were already spelled corerctly before
this change (the Creative Commons family, CPAL-1.0, ClAtristic, MIT,
NCSA, OpenSSL, PostgreSQL, WTFPL) into _LICENSE_SPDX_LIST too, so the
var is a complete answer across the whole file.
Deliberately excludes every id that is itself a deprecated SPDX
identifier (GPL-2.0=, GPL-3.0+, LGPL-3.0, bare GPL-1.0/GPL-3.0/AGPL-3.0,
BSD-2-Clause-NetBSD, StandardML-NJ); only the modern replacement
spelling is registered where one was indepenedntly detected.
[3 lines not shown]
devel/hs-git-annex: Security update 10.20251215 => 10.20261113
* This releases fixes a security hole that allowed private data
exfiltration from special remotes. (CVE-2026-112818)
https://git-annex.branchable.com/security/cross_repository_data_exfiltration_via_special_remote/
* Add WWW for Hackage package
* Clarify LICENSE
* Switch GHC 9.10 => 9.12
* Pet portclippy(1) and portfmt(1)
* Enable assistant unconditionally and drop ASSISTANT option
Upstream enables the assistant and webapp features by default, and the
option only toggles pure-Haskell build dependencies (such as the Yesod
stack) without pulling in extra runtime system libraries.
Because ASSISTANT was already part of OPTIONS_DEFAULT, official binary
packages already ship with this feature enabled. End users installing via
pkg(8) see no practical benefit from keeping it as a build-time toggle.
[7 lines not shown]
devel/detect-it-easy: [NEW PORT] program for determining types of files
Detect It Easy (DiE) is a cross-platform tool for file identification and
static inspection, used by malware analysts, cybersecurity experts, and
reverse engineers. It combines native format parsers with an extensible
DiE-JS analysis layer, supporting both compact signatures and multi-stage
static analysis across Windows, Linux, macOS, and now FreeBSD.
Co-authored-by: Michael Osipov <michaelo at FreeBSD.org>
WWW: https://github.com/horsicq/Detect-It-Easy
PR: 297334
www/nginx-module-auth-ldap: Update to 0.3.0
The bind password can now be read from a file, auth_ldap takes a variable
as its realm and off turns the check off per request, user_filter matches
the login against several attributes at once, user_attributes hands the
user DN and named attributes on as variables, and a refused login leaves a
line naming the user and the server.
Changelog: https://github.com/sysadmin-labs/nginx-auth-ldap-module/releases/tag/v0.3.0
Sponsored by: Netzkommune GmbH
