NetBSD/pkgsrc 7UnvjY6 — security/openssh Makefile distinfo, security/openssh/patches patch-configure.ac patch-atomicio.c

   Pullup ticket #7270 - requested by he
   security/openssh: Security fix, bug fix

   Revisions pulled up:
   - security/openssh/Makefile                                     1.297-1.299
   - security/openssh/distinfo                                     1.134-1.135
   - security/openssh/options.mk                                   1.52-1.53
   - security/openssh/patches/patch-atomicio.c                     1.5-1.6
   - security/openssh/patches/patch-configure.ac                   1.13

   ---
      Module Name:      pkgsrc
      Committed By:     he
      Date:             Mon Oct  5 18:08:15 UTC 2026

      Modified Files:
        pkgsrc/security/openssh: Makefile distinfo
        pkgsrc/security/openssh/patches: patch-atomicio.c


    [310 lines not shown]
VersionDeltaFile
1.4.2.3+5-14security/openssh/patches/patch-atomicio.c
1.11.14.2+3-12security/openssh/patches/patch-configure.ac
1.132.2.2+6-6security/openssh/distinfo
1.294.2.2+2-3security/openssh/Makefile
+16-354 files

NetBSD/pkgsrc neCqCTr — lang/ruby33 hacks.mk, lang/ruby34 hacks.mk

   Pullup ticket #7265 - requested by rin
   lang/ruby34: Bug fix
   lang/ruby33: Bug fix
   lang/ruby40: Bug fix

   Revisions pulled up:
   - lang/ruby33/hacks.mk                                          1.2
   - lang/ruby34/hacks.mk                                          1.2
   - lang/ruby40/hacks.mk                                          1.2

   ---
      Module Name:      pkgsrc
      Committed By:     rin
      Date:             Sat Oct  3 11:12:34 UTC 2026

      Modified Files:
        pkgsrc/lang/ruby33: hacks.mk
        pkgsrc/lang/ruby34: hacks.mk
        pkgsrc/lang/ruby40: hacks.mk

    [41 lines not shown]
VersionDeltaFile
1.1.6.1+6-0lang/ruby40/hacks.mk
1.1.14.1+6-0lang/ruby34/hacks.mk
1.1.22.1+6-0lang/ruby33/hacks.mk
+18-03 files

NetBSD/pkgsrc m7P2liX — databases/postgresql14-server/files pgsql.sh, databases/postgresql15-server/files pgsql.sh

   databases/postgresql*-server: Drop duplicate -p in rc.d script

   (This change was applied a week ago to 18 after testing.  This commit
   applies it to the rest of the pgsql server packages, without testing.)

   While "${MKDIR} -p" looks right, the variable already has -p, so drop
   the extra one.

   Reported by Luis Falcon, and fix proposed on netbsd-users@ with
   $MAINTAINER CC without objections.
VersionDeltaFile
1.2+2-2databases/postgresql17-server/files/pgsql.sh
1.5+2-2databases/postgresql16-server/files/pgsql.sh
1.4+2-2databases/postgresql15-server/files/pgsql.sh
1.5+2-2databases/postgresql14-server/files/pgsql.sh
+8-84 files

NetBSD/pkgsrc UwELOuK — doc CHANGES-2026

   doc: Updated sysutils/py-Glances to 4.5.8
VersionDeltaFile
1.6893+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc YmVrrOQ — sysutils/py-Glances Makefile distinfo

   sysutils/py-Glances: Update to 4.5.8

   Changes since 4.5.7:

   =============
   Version 4.5.8
   =============

   Bugs corrected:

     * Stdout: CSV data blocks use the first list item's fields instead of
       each item's own #3746
     * Stdout: raw selector with a dotted item key
       (network.eth0.100.bytes_recv) raises UnboundLocalError #3748
     * Folders: a second configured FolderList appends its entries to the
       first instance #3750
     * JSON export: --stop-after leaves an empty file, the last sample is
       lost on shutdown #3752
     * DuckDB export turns the string 'False' into TRUE #3754

    [42 lines not shown]
VersionDeltaFile
1.46+4-4sysutils/py-Glances/distinfo
1.57+2-2sysutils/py-Glances/Makefile
+6-62 files

NetBSD/pkgsrc 0r63vbM — doc pkg-vulnerabilities

   emacs29 and emacs29-nox11 don't revbump in sync; emacs29-nox11-29.4nb1 has
   the fix
VersionDeltaFile
1.805+2-2doc/pkg-vulnerabilities
+2-21 files

NetBSD/pkgsrc NDwNWYd — editors/emacs29-nox11 Makefile

   summary bump pkgrevision

   2024-08-07 switch to libjit from gcc14
   2024-11-01 recursive bump for icu 76.1 shlib bump
   2024-11-01 revbump for icu downgrade
   2024-11-14 recursive bump for icu 76 shlib major version bump
   2025-04-17 recursive bump for icu 77 and libxml2 2.14
   2025-04-19 recursive bump for default Kerberos implementation switch
   2025-10-23 recursive bump for pcre2
   2026-01-07 recursive bump for icu 78.1
   2026-02-06 recursive bump for nettle 4.0 shlib major bump
   2026-05-14 Recursive revbump from security/nettle-4.0
   2026-09-02 recursive bump for pcre2 10.48
   2026-09-12 emacs29: fix CVE-2025-1244
   2026-09-27 revbump for pcre2 symbol versioning change
   2026-09-29 recursive bump for pcre2 10.49

   possibly also
   2024-10-20 recursive bump for merging at-spi2-atk and atk into at2-spi-core
   2024-11-17 recursive bump for default-on option of at-spi2-core
VersionDeltaFile
1.6+2-2editors/emacs29-nox11/Makefile
+2-21 files

NetBSD/pkgsrc k2nC2xw — security/zxcvbn-c Makefile

   zxcvbn-c: mark as not make-jobs safe again

   Reported by Marc Baudoin.
VersionDeltaFile
1.5+5-1security/zxcvbn-c/Makefile
+5-11 files

NetBSD/pkgsrc gChRWMp — doc CHANGES-2026

   doc: Added security/vulnx version 2.0.2
VersionDeltaFile
1.6892+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc m4JcpCg — security Makefile, security/vulnx PLIST DESCR

   vulnx: Add version 2.0.2

   Modern CLI for exploring vulnerability data with powerful search,
   filtering, and analysis capabilities.

   What's Changed
   Other Changes
   fix: always emit is_* bool flags in JSON by @dogancanbakir in #468
   fix: inject version via ldflags at build time by @XananasX7 in #467
   fix: send api key in X-Api-Key header by @dogancanbakir in #472
   fix: redact sensitive headers in HTTP request/response logs by @mirackayikci in #469
   fix: remove unsupported search filter flags (#476) by @dogancanbakir in #477
   chore: prepare v2.0.2 release by @ehsandeep in #480
VersionDeltaFile
1.1+1,820-0security/vulnx/distinfo
1.1+607-0security/vulnx/go-modules.mk
1.1+18-0security/vulnx/Makefile
1.1028+2-1security/Makefile
1.1+2-0security/vulnx/PLIST
1.1+2-0security/vulnx/DESCR
+2,451-16 files

NetBSD/pkgsrc jf7Au35 — doc TODO CHANGES-2026

   doc: Updated lang/quickjs-ng to 0.17.0
VersionDeltaFile
1.28140+1-2doc/TODO
1.6891+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 2Xgk0ui — lang/quickjs-ng Makefile distinfo

   quickjs-ng: update to 0.17.0.

   update projects.md to include scriptc project reference (from the Ver… by @lukasMega in #1677
   Fixes segfault from #1661 by @sr5434 in #1675
   docs: add Qbs to projects by @ABBAPOH in #1685
   Add Big Endian architecture support instructions by @saghul in #1681
   Conditional BUILD_DIR by @kapouer in #1686
   Fix String.prototype.normalize() crash from #1683 by @sr5434 in #1688
   Fix reference count bug in Promise.withResolvers by @bnoordhuis in #1692
   Enable test262 host-gc-required feature by @bnoordhuis in #1696
   docs: add Vayu to projects by @athrvk in #1702
   Use mirror for Alpine GHA by @bnoordhuis in #1705
   Fix Iterator.from GetIteratorDirect handling by @jiang1997 in #1706
   Link against libm unconditionally on Unices by @bnoordhuis in #1699
   Fix out-of-bound read in JS_NewTypedArray by @bnoordhuis in #1704
   Preserve old interrupt handler in std.evalScript by @bnoordhuis in #1707
   fix: correct int/int32_t pointer mismatches for -Wincompatible-pointer-types by @SomSamantray in #1657
   Fix JS_FreeCStringUTF16 on slice strings by @bnoordhuis in #1709
   Add react-native-quickjs project to documentation by @saghul in #1710

    [14 lines not shown]
VersionDeltaFile
1.2+4-4lang/quickjs-ng/distinfo
1.2+2-2lang/quickjs-ng/Makefile
+6-62 files

NetBSD/pkgsrc jha10RM — doc TODO CHANGES-2026

   doc: Updated mail/rspamd to 4.2.2
VersionDeltaFile
1.28139+1-2doc/TODO
1.6890+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc MldGSVU — mail/rspamd PLIST distinfo

   rspamd: update to 4.2.2.

   4.2.2: 10 Oct 2026

     ** Incompatible changes **
     * [Fix] mime: Exclude the CRLF preceding a boundary delimiter from parts (message and non-base64 part digests change for multipart messages)

     ** Features **
     * [Feature] crypto: Detect wallet addresses for Bitcoin and forks, Litecoin, Dogecoin, Tron, XRP, Zcash, Cardano, Cosmos, Stellar, TON, Ethereum and Monero, replacing bitcoin.lua with one independent symbol per currency
     * [Feature] lua_crypto_addresses: Add a bounded wallet address scanner that catches split addresses, plus add_from_string for text recovered from attachments
     * [Feature] lua_selectors: Add the crypto_addresses() extractor
     * [Feature] metadata_exporter: Add custom variables and selector expansion for mail_from, mail_to, helo, channel, stream_key and the email template
     * [Feature] metadata_exporter: Build multipart email alerts from email_parts, grouping plain and html parts into multipart/alternative
     * [Feature] metadata_exporter: Encode non-ASCII headers in email alerts automatically
     * [Feature] metadata_exporter: Validate rules against a schema, so configtest fails on invalid rules
     * [Feature] lua_smtp: Negotiate EHLO and 8BITMIME with a HELO fallback, and downgrade 8-bit messages to 7-bit when 8BITMIME is not advertised
     * [Feature] str_util: Add RFC 5322 folding for unstructured headers (util.fold_header_unstructured)
     * [Feature] lua_text: Add the smtp newline normalization mode


    [22 lines not shown]
VersionDeltaFile
1.82+4-4mail/rspamd/distinfo
1.145+4-4mail/rspamd/Makefile
1.46+3-1mail/rspamd/PLIST
+11-93 files

NetBSD/pkgsrc qnMlA3B — doc TODO CHANGES-2026

   doc: Updated shells/shuck to 0.2.4
VersionDeltaFile
1.28138+1-2doc/TODO
1.6889+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc NcL5dyT — shells/shuck Makefile distinfo

   shuck: update to 0.2.4.

   deps: update dependency next to v16.3.6 [security] (#1305) (904974e)
   deps: update dependency next to v16.3.8 [security] (#1311) (b2895e8)
   linter: validate smart quote source spans on recovered parses (#1310) (c3793ab)
   semantic: ignore zsh subscript flags in fallback references (#1309) (4586505)
VersionDeltaFile
1.6+4-4shells/shuck/distinfo
1.6+2-2shells/shuck/Makefile
+6-62 files

NetBSD/pkgsrc ADpKVz8 — doc TODO CHANGES-2026

   doc: Updated security/zxcvbn-c to 2.7
VersionDeltaFile
1.28137+1-2doc/TODO
1.6888+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc xKcx4wX — security/zxcvbn-c Makefile distinfo

   zxcvbn-c: update to 2.7.

   Remove MAKE_JOBS_SAFE, builds fine with a lot of jobs here.

   Changes:
   Fix static library retaining stale object code
   Refined function prototypes to ensure build with strict warning checks
   Fixed warning: declaration shadows a local variable
   In ReduceTrie: sort the nodes at one height by checksum to reduce build time.
VersionDeltaFile
1.4+4-4security/zxcvbn-c/distinfo
1.4+2-4security/zxcvbn-c/Makefile
+6-82 files

NetBSD/pkgsrc QAqjOmg — doc TODO CHANGES-2026

   doc: Updated graphics/geeqie to 3.3
VersionDeltaFile
1.28136+1-2doc/TODO
1.6887+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 6oe6mh2 — graphics/geeqie PLIST distinfo

   geeqie: update to 3.3.

   Geeqie 3.3
   ============

   - Collections: Open Collection combines the default collection
     directory with collection history, showing filenames and full paths.
     Unavailable collections are retained but disabled. Missing images
     remain in collections, and collections stored elsewhere are updated
     when images move or are renamed.
   - Open Recent: Replaced with a GTK4 dialog using GTK’s shared
     recent-files database, with “Geeqie image files” and “All files”
     filters. Collection history now has its own setting and
     `[collection_history]` section.
   - Keyboard operation: Improved Return activation, search submission
     and results navigation, folder-pane focus, address-bar history,
     and Escape handling across dialogs and editable fields.
   - File operations: Added inline folder creation. Fixed a renaming
     crash, empty-folder trash handling, destination selection, and

    [17 lines not shown]
VersionDeltaFile
1.178+4-5graphics/geeqie/Makefile
1.50+4-4graphics/geeqie/distinfo
1.18+5-0graphics/geeqie/PLIST
+13-93 files

NetBSD/pkgsrc FiJ15q4 — doc TODO CHANGES-2026

   doc: Updated textproc/tree-sitter-php to 0.25.1
VersionDeltaFile
1.28135+1-2doc/TODO
1.6886+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 7GqpaeP — textproc/tree-sitter-php Makefile distinfo

   tree-sitter-php: update to 0.25.1.

   feat: support clone with arguments by @janwaleed09 in #306
VersionDeltaFile
1.12+4-4textproc/tree-sitter-php/distinfo
1.12+2-2textproc/tree-sitter-php/Makefile
+6-62 files

NetBSD/pkgsrc N3rZXeg — doc TODO CHANGES-2026

   doc: Updated textproc/tree-sitter to 0.27.1
VersionDeltaFile
1.28134+1-2doc/TODO
1.6885+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 7b7ESLK — textproc/tree-sitter Makefile distinfo

   tree-sitter: update to 0.27.1.

   fix: decode UTF-16 surrogate pairs with input endianness by @tree-sitter-ci-bot[bot] in #5913
   fix(cli)!: fix query test capture range matching across lines by @tree-sitter-ci-bot[bot] in #5918
   fix(rust): address new nightly lints by @tree-sitter-ci-bot[bot] in #5921
   fix(generate): resolve token names in debug output by @WillLillis in #5941
   fix(generate): keep GCC jump tables enabled for large lexers by @tree-sitter-ci-bot[bot] in #5985
   fix(generate): exclude external word tokens from keyword extraction by @WillLillis in #5989
   fix(lib): check shifted stack versions during error recovery by @tree-sitter-ci-bot[bot] in #5998
   fix(generate): detect indirect recursion in flattened productions by @WillLillis in #6003
   fix: preserve column dependency when balancing repeat nodes by @tree-sitter-ci-bot[bot] in #6006
   perf(lib): acquire capture lists from a free stack instead of scanning by @tree-sitter-ci-bot[bot] in #6012
   fix(build): don't compile the Wasm stdlib into Emscripten builds by @tree-sitter-ci-bot[bot] in #6015
   fix: various query issues by @tree-sitter-ci-bot[bot] in #6017
   fix(rust): ban std::fs::canonicalize by @tree-sitter-ci-bot[bot] in #6018
   fix(bindings): load Node bindings under Bun again by @tree-sitter-ci-bot[bot] in #6021
   release v0.27.1 by @clason in #6024
VersionDeltaFile
1.36+4-4textproc/tree-sitter/distinfo
1.38+2-2textproc/tree-sitter/Makefile
+6-62 files

NetBSD/pkgsrc aP3fPlP — doc TODO CHANGES-2026

   doc: Updated misc/libimobiledevice-glue to 1.3.3
VersionDeltaFile
1.28133+1-2doc/TODO
1.6884+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc psGEUoL — misc/libimobiledevice-glue Makefile distinfo, misc/libimobiledevice-glue/patches patch-src_utils.c patch-src_socket.c

   libimobiledevice-glue: update to 1.3.3.

   Version 1.3.3
   ~~~~~~~~~~~~~

   - Changes:
     * socket: Use const void* instead of void* in signature of socket_send()
     * socket: Improve portability by replacing OS-specific macros with AC_CHECK_HEADERS (adds NetBSD support)
     * endianness: Default to little endian if __BYTE_ORDER is not defined
     * Add atexit call to (empty) deinit function to prevent stripping off initializer code
     * utils: Correct ctype(3) usage in string_toupper() (cast to unsigned char before toupper())
VersionDeltaFile
1.2+4-6misc/libimobiledevice-glue/distinfo
1.2+2-2misc/libimobiledevice-glue/Makefile
1.2+1-1misc/libimobiledevice-glue/patches/patch-src_utils.c
1.2+1-1misc/libimobiledevice-glue/patches/patch-src_socket.c
+8-104 files

NetBSD/pkgsrc ilaibb3 — doc TODO CHANGES-2026

   doc: Updated graphics/libheif to 1.23.6
VersionDeltaFile
1.28132+1-2doc/TODO
1.6883+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 04FzciF — graphics/libheif Makefile distinfo

   libheif: update to 1.23.6.

   v1.23.6 is a security and bugfix release.
VersionDeltaFile
1.54+4-4graphics/libheif/distinfo
1.62+2-2graphics/libheif/Makefile
+6-62 files

NetBSD/pkgsrc p9rB31M — doc TODO CHANGES-2026

   doc: Updated math/leantar to 0.1.21
VersionDeltaFile
1.28131+1-2doc/TODO
1.6882+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc SfaU3XW — math/leantar Makefile distinfo

   leantar: update to 0.1.21.

   Changes not documented.
VersionDeltaFile
1.2+4-4math/leantar/distinfo
1.3+2-2math/leantar/Makefile
+6-62 files