HardenedBSD/ports b774337net-im/nextcloud-spreed-signaling distinfo Makefile, security/vuxml/vuln 2025.xml

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+562-1,028textproc/logseq/pkg-plist
+347-333sysutils/cardano-cli/distinfo
+152-147sysutils/cardano-cli/Makefile
+111-99net-im/nextcloud-spreed-signaling/distinfo
+63-62net-im/nextcloud-spreed-signaling/Makefile
+93-0security/vuxml/vuln/2025.xml
+1,328-1,669142 files not shown
+1,634-1,905148 files

HardenedBSD/ports 446f1c7editors/calligra Makefile distinfo

editors/calligra: fix build with poppler 25.10

PR:             291277
DeltaFile
+4-0editors/calligra/Makefile
+3-1editors/calligra/distinfo
+7-12 files

HardenedBSD/ports 3076d31graphics/dspdfviewer Makefile, graphics/epdfview Makefile

graphics/poppler: bump consumers of graphics/poppler

PR:             291277
Exp-run by:     antoine
DeltaFile
+1-1graphics/dspdfviewer/Makefile
+1-1graphics/epdfview/Makefile
+1-1graphics/geeqie/Makefile
+1-1graphics/gimp-app/Makefile
+1-1graphics/gimp3-app/Makefile
+1-1graphics/graphviz/Makefile
+6-674 files not shown
+80-5180 files

HardenedBSD/ports bce553fprint/scribus distinfo Makefile

print/scribus: fix build with poppler 25.10

PR:             291277
DeltaFile
+11-1print/scribus/distinfo
+9-0print/scribus/Makefile
+20-12 files

HardenedBSD/ports 3844a56graphics/inkscape distinfo Makefile

graphics/inkscape: fix build with poppler 25.10

PR:             291277
DeltaFile
+7-1graphics/inkscape/distinfo
+6-1graphics/inkscape/Makefile
+13-22 files

HardenedBSD/ports be8af1eprint/scribus-devel distinfo Makefile

print/scribus-devel: fix build with poppler 25.10

PR:             291277
DeltaFile
+23-1print/scribus-devel/distinfo
+13-2print/scribus-devel/Makefile
+36-32 files

HardenedBSD/ports b097c42graphics/poppler distinfo Makefile, graphics/poppler-qt5 pkg-plist

graphics/poppler: Update to 25.10

PR:             291277
Exp-run by:     antoine
DeltaFile
+0-33graphics/poppler/files/patch-poppler_FlateStream.cc
+0-11graphics/poppler/files/patch-poppler_FlateStream.h
+3-3graphics/poppler/distinfo
+2-3graphics/poppler/Makefile
+1-1graphics/poppler-qt6/pkg-plist
+1-1graphics/poppler-qt5/pkg-plist
+7-522 files not shown
+9-548 files

HardenedBSD/ports 54159easysutils/go-wtf distinfo Makefile

sysutils/go-wtf: Update to 0.47.1

Changelog: https://github.com/wtfutil/wtf/releases/tag/v0.47.1

PR:             291076
Approved by:    Christopher Hall <hsw at bitmark.com> (maintainer, timeout >2 weeks)
DeltaFile
+5-5sysutils/go-wtf/distinfo
+1-2sysutils/go-wtf/Makefile
+6-72 files

HardenedBSD/ports 0361f76devel/py-cereslib Makefile

devel/py-cereslib: Fix typos

Changelog: https://github.com/chaoss/grimoirelab-cereslib/releases/tag/${NEW_VERSION}
DeltaFile
+1-1devel/py-cereslib/Makefile
+1-11 files

HardenedBSD/ports 8a648e3databases/pgagroal Makefile

databases/pgagroal: Mark BROKEN on i386

Fails to build with:
error: format specifies type 'unsigned long' but the argument has type
'unsigned int' [-Werror,-Wformat]
DeltaFile
+1-0databases/pgagroal/Makefile
+1-01 files

HardenedBSD/ports 8245523security/rekor distinfo Makefile

security/rekor: Update version 1.3.10=>1.4.0

Changelog: https://github.com/sigstore/rekor/releases/tag/v1.4.0
DeltaFile
+5-5security/rekor/distinfo
+3-4security/rekor/Makefile
+8-92 files

HardenedBSD/ports 0f85644security/certificate_maker distinfo Makefile

security/certificate_maker: Update version 1.8.2=>1.8.3

Changelog: https://github.com/sigstore/fulcio/releases/tag/v1.8.3
DeltaFile
+5-5security/certificate_maker/distinfo
+2-3security/certificate_maker/Makefile
+7-82 files

HardenedBSD/ports 7cb8e71net-mgmt/peering-manager distinfo Makefile

net-mgmt/peering-manager: Update version 1.10.0=>1.10.1

Changelog: https://github.com/peering-manager/peering-manager/releases/tag/v1.10.1

Sponsored by:   Nepustil
DeltaFile
+3-3net-mgmt/peering-manager/distinfo
+1-1net-mgmt/peering-manager/Makefile
+4-42 files

HardenedBSD/ports fae3e01devel/py-cereslib Makefile

devel/py-cereslib: Return to pool

Used in cluster and releasing so that others can update as necessary
without my intervention.
DeltaFile
+2-1devel/py-cereslib/Makefile
+2-11 files

HardenedBSD/ports 5ae0ab6databases/valkey8 distinfo Makefile

databases/valkey8: Update version 8.1.4=>8.1.5

Changelog: https://github.com/valkey-io/valkey/releases/tag/8.1.5
DeltaFile
+3-3databases/valkey8/distinfo
+4-1databases/valkey8/Makefile
+7-42 files

HardenedBSD/ports bfb5900devel/liblognorm distinfo Makefile

devel/liblognorm: Update version 2.0.7=>2.0.8

Changelog: https://github.com/rsyslog/liblognorm/releases/tag/v2.0.8
DeltaFile
+3-3devel/liblognorm/distinfo
+1-1devel/liblognorm/Makefile
+4-42 files

HardenedBSD/ports dca8471databases/freetds-devel distinfo Makefile

databases/freetds-devel: Update version 1.5.168=>1.5.172
DeltaFile
+3-3databases/freetds-devel/distinfo
+1-1databases/freetds-devel/Makefile
+4-42 files

HardenedBSD/ports 8b8719ddatabases/geoserver-mysql-plugin Makefile distinfo, graphics/geoserver Makefile distinfo

*/geoserver*: Update to 2.28.1

Changelog:
https://geoserver.org/announcements/vulnerability/2025/11/25/geoserver-2-28-1-released.html
DeltaFile
+5-5graphics/geoserver/Makefile
+3-3graphics/geoserver/distinfo
+3-3databases/geoserver-mysql-plugin/Makefile
+3-3databases/geoserver-mysql-plugin/distinfo
+2-2graphics/geoserver/pkg-plist
+16-165 files

HardenedBSD/ports 4717ea1net-im/nextcloud-spreed-signaling distinfo Makefile, net-im/nextcloud-spreed-signaling/files patch-Makefile

net-im/nextcloud-spreed-signaling: Update to 2.0.4

While here unset go version.
DeltaFile
+111-99net-im/nextcloud-spreed-signaling/distinfo
+63-62net-im/nextcloud-spreed-signaling/Makefile
+0-10net-im/nextcloud-spreed-signaling/files/patch-Makefile
+174-1713 files

HardenedBSD/ports 3061c54print/plutobook distinfo Makefile

print/plutobook: Update to 0.11.2

Changelog: https://github.com/plutoprint/plutobook/releases/tag/v0.11.2
DeltaFile
+3-3print/plutobook/distinfo
+1-1print/plutobook/Makefile
+4-42 files

HardenedBSD/ports 984c271net-mgmt/prometheus3 distinfo pkg-plist

net-mgmt/prometheus3: Update to 3.8.0

Changelog:
https://github.com/prometheus/prometheus/releases/tag/v3.8.0
DeltaFile
+7-7net-mgmt/prometheus3/distinfo
+3-1net-mgmt/prometheus3/pkg-plist
+1-2net-mgmt/prometheus3/Makefile
+11-103 files

HardenedBSD/ports bd343d7security/vuxml/vuln 2025.xml

security/vuxml: add www/*chromium < 143.0.7499.40

Obtained from:  https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop.html
DeltaFile
+57-0security/vuxml/vuln/2025.xml
+57-01 files

HardenedBSD/ports a1a60aasecurity/proxytunnel Makefile

security/proxytunnel: unbreak build with OpenSSL

Remove BROKEN_SSL and BROKEN_SSL_REASON from the port Makefile since the
build failure with undefined symbol SSL_get_peer_certificate can no
longer be reproduced.

The port now builds successfully in poudriere across supported FreeBSD
versions and architectures, including 13.5, 14.3, and 15.0 on both amd64
and i386.
DeltaFile
+0-2security/proxytunnel/Makefile
+0-21 files

HardenedBSD/ports dca0d23sysutils/tealdeer distinfo Makefile

sysutils/tealdeer: Update to 1.8.1

Changelog: https://github.com/tealdeer-rs/tealdeer/blob/v1.8.1/CHANGELOG.md

PR:             291074
Approved by:    lcook (maintainer, timeout >2 weeeks)
DeltaFile
+7-3sysutils/tealdeer/distinfo
+1-2sysutils/tealdeer/Makefile
+2-0sysutils/tealdeer/Makefile.crates
+10-53 files

HardenedBSD/ports d44a9a5textproc/logseq pkg-plist distinfo

textproc/logseq: Update to 0.10.15
DeltaFile
+562-1,028textproc/logseq/pkg-plist
+7-7textproc/logseq/distinfo
+3-6textproc/logseq/Makefile
+572-1,0413 files

HardenedBSD/ports b40b703misc/hwdata distinfo Makefile

misc/hwdata: Update to 0.402

Reported by:    portscout!
DeltaFile
+3-3misc/hwdata/distinfo
+1-1misc/hwdata/Makefile
+4-42 files

HardenedBSD/ports 211e246sysutils/cardano-cli distinfo Makefile

sysutils/cardano-cli: Update to 10.13.1.0
DeltaFile
+347-333sysutils/cardano-cli/distinfo
+152-147sysutils/cardano-cli/Makefile
+499-4802 files

HardenedBSD/ports 8de06d4sysutils/fastfetch distinfo Makefile

sysutils/fastfetch: update to 2.56.0

Changelog:      https://github.com/fastfetch-cli/fastfetch/releases/tag/2.56.0
DeltaFile
+3-3sysutils/fastfetch/distinfo
+1-1sysutils/fastfetch/Makefile
+4-42 files

HardenedBSD/ports 25471cbaudio/py-spotipy distinfo Makefile

audio/py-spotipy: Update to 2.52.2 (security release)

ChangeLog:      https://github.com/spotipy-dev/spotipy/releases/tag/2.25.2
Reported by:    Niko <notifications at github.com>

MFH:            2025Q4
Security:       CVE-2025-66040
DeltaFile
+3-3audio/py-spotipy/distinfo
+2-2audio/py-spotipy/Makefile
+5-52 files

HardenedBSD/ports 83b0b77security/vuxml/vuln 2025.xml

security/vuxml: Add audio/py-spotipy <= 2.25.1
DeltaFile
+36-0security/vuxml/vuln/2025.xml
+36-01 files