multimedia/moviebox-tui: fix dependency
Spotted by leot@ during mpv revbump.
moviebox-tui only depends on the mpv executable.
While here remove duplicate line.
ansible-lint: updated to 26.11.0
26.11.0
fix: pin Python to 3.13 to avoid Ansible compatibility issues with…
Amazon Linux 2027 is in Preview
fix: resolve collection playbooks with extensions
fix: preserve explicit YAML tags like !!python/name during --fix
fix: do not color stderr output when stderr is redirected
Combine cache exclusion, YAML formatting, and event-query fixes
perf: avoid deepcopy in _sanitize_task
fix(security): update dependencies to resolve Dependabot alerts
ansible-core: updated to 2.21.6
2.21.6
Minor Changes
- ansible-test - Replace FreeBSD 14.4 remote with 14.5.
- ansible-test - Replace FreeBSD 15.0 remote with 15.1.
- ansible-test - Replace RHEL 10.1 remote with 10.2.
- ansible-test - Replace RHEL 9.7 remote with 9.8.
Security Fixes
- ``ansible-galaxy collection install`` - fix validating ``FILES.json`` entries are contained in the collection before creating them. (CVE-2026-89091)
- ``ansible-galaxy role install`` - fix validating the role name is contained to the configured role path. (CVE-2026-105929)
Bugfixes
- ansible_facts - initial facts from ``run_once`` tasks no longer reference the same object and can be updated for individual hosts
[4 lines not shown]
py-markdown: updated to 3.11.3
3.11.3 - 2026-11-05
Fixed
* Fix cases in new emphasis handling that did not handle long chains of tokens
like they should
* Fix quadratic-time parsing of many consecutive reference definitions, and of
many consecutive footnote definitions in the `footnotes` extension.
* Support automatic links with URL schemes other than HTTP and FTP, such as
`<ssh://example.org>`
* Fix quadratic-time id generation in the `toc` extension when many headers
share the same text.
* Ignore glossary abbreviations with empty definitions after inline elements,
consistently with abbreviations before inline elements.
* Strip complete HTML tags with quoted `>` characters from `toc` labels and
generated heading IDs.
* Fix quadratic-time regex backtracking in `attr_list` when a block ends with an
[13 lines not shown]
py-ruff: updated to 0.17.4
0.17.4
Preview features
[flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004)
[security] Implement tarfile-ignore-zeros-true
Bug fixes
Accept a bare raise before a semicolon
Allow match identifiers after a semicolon
Fix panic on BOM-prefixed files in diagnostic renderer
[flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102)
Rule changes
Show more nonprinting characters in diagnostic fix diffs
[28 lines not shown]
devel/cmake: Apply opt:-O2:-Os for GCC >= 14 on NetBSD/m68k
As a workaround for
PR toolchain/60970: GCC/m68k 14.4 miscompiles devel/cmake from pkgsrc-2026Q3
With this hack, generated package can build devel/re2c at least.
p5-Image-ExifTool: update to 13.61.
New version linked as main download on homepage.
Nov. 5, 2026 - Version 13.61
- Added a new Olympus CameraType (thanks Herb, github #502)
- Added arg_files/audio2itemlist.args to the distribution (github #497)
- Recognize the SlimHEIF mif3 file type (github #503
- Decode some more Canon tags (github #505, #506, #507)
- Changed DJI NRSetting tag name to NoiseReduction for consistency
- Patched issue where a corrupted FLIF file could cause a hang (github #500)
- Patched to avoid backward seek on empty QuickTime atom (github #482)
- Patched compatibility issue with Sony Imaging Edge applications when writing
ARW files (github #465)
- Patched a few places where corrupt metadata could result in excessive memory
usage
- Fixed performance issue when using -j on a file with large binary tag values
(github #496)
[106 lines not shown]
cloudflare-speed-cli: Update to version 1.0.12
Changes since 1.0.11:
- Optional clipboard support (PR #60):
- Ring-only TLS provider (PR #61):
- Removed unused AWS-LC related packages
Provided by Bartosz Kuzma on WIP, thanks!
PR pkg/60969
net/py-paho-mqtt: Update to 2.2.0
v2.2.0
- **Possible breaking change**: Change some exceptions from `ValueError` to `TypeError`
(in `max_queued_messages_set` and Client `callback_api_version` parameter) (Closes #972)
The breaking change is unlikely however, both exceptions are expected to only be
raised with broken code (e.g. need to pass wrong type - not just wrong value).
- Add `drop_out_messages` to discard outgoing message queue. This could be needed if broker lost
the session (Closes #935)
*: revbump for mpv-0.42.0
(At least according a code skim moviebox-tui should DEPENDS on mpv because it is
not actually linked to libmpv and so probably it does not really need a
revbump... but let's do that to be on the safer side.)
mpv: Update to 0.42.0
pkgsrc changes:
- Bump BUILDLINK_ABI_DEPENDS.mpv due .so bump
Changes:
0.42.0
==============
We are excited to announce the release of mpv 0.42.0.
Key highlights:
* libcurl based network backend with HTTP/2, HTTP/3 and connection reuse
* DVD-Video, Blu-ray HDMV and BD-J menu navigation
* DVD-Audio playback
* Direct playback of .iso images of DVD-Video, DVD-Audio and Blu-ray discs
* Dolby Vision Profile 7 enhancement layer support in `gpu-next`
* MPEG-TS programs and HLS variants are exposed as editions
* DSD-over-PCM (DoP) passthrough with `--audio-spdif=dsd`
[15 lines not shown]
libplacebo: Update to 7.387.0
pkgsrc changes:
- Bump BUILDLINK_ABI_DEPENDS.libplacebo given the .so bump, no revbump will be
needed because multimedia/mpv is the only dependency and it will be updated
shortly, this update was driven by mpv-0.42.0.
Changes:
7.387.0
This release introduces a new compositor API with support for multiple
video inputs, JSON-based scene descriptions and animation, alongside
support for Dolby Vision Profile 7 FEL. It also includes significant
improvements to color management, HDR tone mapping, frame interpolation,
deinterlacing and GPU backends, as well as numerous bug fixes.
openssh: update to 10.6p2.
Changes since OpenSSH 10.6p1
============================
This release contains a critical security workaround that affects
Linux systems that use the musl libc and PAM disabled.
This release also includes a number of bugfixes that had already
been committed on the portable OpenSSH V_10_6 stable branch.
Security
========
* sshd(8): avoid password authentication bypass that is exploitable
through sshd(8) that affects some Linux systems when built and run
with PAM support disabled. We consider the root cause of this bug
to be outside sshd, but it is exploitable via sshd and can be
avoided there.
[27 lines not shown]
