BSD Commit Log Search

Merge branch 'freebsd/main' into hardenedbsd/main

misc/crush: Update to 0.91.2

Changelog: https://github.com/charmbracelet/crush/releases/tag/v0.91.2

Reported by:    GitHub (watch releases)

sysutils/cfengine-masterfiles328: Version 3.28.0 for real

When this port was copied from 327 I had neglected to commit the
3.28.0 update. We do it for real now.

Fixes:          433f99225c25

sysutils/py-ansible-core*: Deprecate and expire older than N-1

The latest ansible-core does not contain incompatibilities that require
users to remain on older versions of ansible-core. Deprecate and
expire.

sysutils/cfengine*: Deprecate and expire older than N-1

And adjust the deprecation message and expiry date for those cfengine
ports already deprecation and sheduled for removal.

devel/jenkins: Update to 2.579

games/doomlegacy: update Doom Legacy to version 1.48.18 (rev1749)

- HAVE_LIBZIP and HAVE_ZLIB are now set by default for *nix
  builds, adjust the port's Makefile accordingly
- Version 1.48.16 had been skipped due to a broken save game
  (corrupted) and the MBF21 support did not work right

Reported by:    portscout

x11/wf-shell: Unbundle x11-toolkits/gtk4-layer-shell

While here sort MESON_ARGS.

PR:             297716
Reported by:    Tomoaki AOKI <junchoon at dec.sakura.ne.jp>
Sponsored by:   UNIS Labs

security/vuxml: Document rsync vulnerability

net/rsync: Update to 3.5.0

Changelog: https://download.samba.org/pub/rsync/NEWS#3.5.0

This is a major security release who fixes 33 security issues
found during a focused audit of rsync's path handling and
daemon protocol, a companion daemon-protocol fuzzing pass,
and reports from external researchers several robustness
hardenings.

Security:       CVE-2026-53802
Security:       CVE-2026-53803
Security:       CVE-2026-53785
Security:       CVE-2026-53784
Security:       CVE-2026-53793
Security:       CVE-2026-53795
Security:       CVE-2026-53796
Security:       CVE-2026-53797
Security:       CVE-2026-53799

    [24 lines not shown]

textproc/moor: Update 2.17.0 => 2.18.0

Upstream now requires Go 1.27, so pin go:1.27.

Changelog:
https://github.com/walles/moor/releases/tag/v2.18.0

Reported by:    portscout!
Approved by:    osa, vvd (Mentors, implicit)

net/cloudquery: fix build on 32 bit architectures

Compilation failed on 32 bit archtectures with the following error
message:

vendor/github.com/cloudquery/plugin-sdk/v4/schema/testdata.go:463:27:
  3600000000 (untyped int constant) overflows int
vendor/github.com/cloudquery/plugin-sdk/v4/schema/testdata.go:467:27:
  3600000000000 (untyped int constant) overflows int
vendor/github.com/cloudquery/plugin-sdk/v4/schema/testdata.go:467:45:
  60000000000 (untyped int constant) overflows int

The reason is that strconv.Itoa() accepts only 32 bit arguments.
Attempt to fix by conversion of strconv.Itoa() to strconv.FormatInt()
with native int variables casted to 64 integers.

multimedia/jmref: Remove expired port

2026-08-26 multimedia/jmref: No longer maintained upstream

security/please: Remove expired port

2026-08-26 security/please: Upstream project has been archived, use doas or sudo or sudo-rs instead

x11-fm/pcmanfm-qt: Update to 2.4.1

ChangeLog at:   https://lxqt-project.org/release/2026/08/26/point-release-lxqt-pcmanfm-qt-2-4-1/
With hat:       lxqt

emulators/ukncbtl: Limit portscout

sysutils/py-python-bareos: Update to 25.0.4

www/bareos24-webui: Try to fix cmake4 update issue

- Bump PORTREVISION

PR:             297872

www/bareos23-webui: Try to fix cmake4 issue update

- Bump PORTREVISION

PR:             297872

sysutils/bareos-*: Update to 25.0.4

- www/bareos-webui: try to fix issue with cmake 4 update

PR:             297872

[NEW PORT] security/open-vulnerability-cli: CLI to query various online vulnerability sources

The open-vulnerability-cli is a command line utility that can be
used to query various online vulnerability sources such as the NVD
or GHSA. The CLI and docker images can be used to mirror the NVD.

Note that the CLI is called vulnz because open-vulnerability-cli
is cumbersome. vulnz is a spring-boot command line utility built
with picocli.

Co-authored-by: Michael Osipov <michaelo at FreeBSD.org>
PR:             296276

mail/thunderbird-esr: update to 153.1.1

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/153.1.1esr/releasenotes/

www/firefox: fix typo in Makefile

Fixup commit 0074ee3b2ea7d87a02a6a3c345ddb0e634367675

mail/opensmtpd-table-passwd: new port

The passwd table addon for OpenSMTPD allows the storing of usernames
and passwords in a passwd table.

PR:             293460

mail/opensmtpd-table-postgres: new port

The PostgreSQL table addon for OpenSMTPD allows the storing of usernames,
passwords, aliases, and domains in a PostgreSQL table.

PR:             288908

devel/tuicr: Update to 0.24.0

x11/compton-conf: Mark DEPRECATED

- Try to fix cmake4 issues
- Bump PORTREVISION

With hat:       lxqt
PR:             297945

Merge branch 'freebsd/main' into hardenedbsd/main

chinese/fcitx5-mcbopomofo: Update to 3.1

Changes:        https://github.com/openvanilla/fcitx5-mcbopomofo/releases/tag/3.1

mail/dbmail: unbreak build after a315965d7d62ea69f5aed95c37e7ad36c900dc61 (+)

Restore version for libzdb.so.19 dependency checks to avoid name conflict
with base libzdb.so from recent ZFS presented at least on 15.x and -current

% pkg which /usr/lib/libzdb.so
/usr/lib/libzdb.so was installed by package FreeBSD-zfs-dev-16