NetBSD/pkgsrc WfCA9XNdoc pkg-vulnerabilities

   pkg-vulnerabilities: add last week CVEs

   + KeePass,
     SOGo (no upstream and/or further details, assume not fixed),
     admesh (not fixed),
     apache-tomcat, caddy, calibre, chromium,
     clamav (no upstream information, assume not fixed),
     coturn, curl, dropbear, erlang, ffmpeg, gimp, grafana,
     gsoap (no upstream information, assume not fixed),
     hdf5, janet, jenkins,
     libde265 (fixed upstream, latest stable release 1.0.16 affected),
     libjxl,
     libsixel (fixed upstream, latest stable release 1.8.7 affected),
     libsoup,
     libvips (fixed upstream, latest stable release 8.18.0 affected),
     metabase,
     minisat (not fixed),
     moodle, nats-server,
     openbabel (not fixed),

    [9 lines not shown]
VersionDeltaFile
1.737+134-48doc/pkg-vulnerabilities
+134-481 files

NetBSD/pkgsrc dO2dxQ5devel/nss distinfo, devel/nss/patches patch-me

   nss: try fixing Solaris build using upstream suggestion
VersionDeltaFile
1.10+15-3devel/nss/patches/patch-me
1.206+3-3devel/nss/distinfo
+18-62 files

NetBSD/pkgsrc pi5gNFAdevel/nss/patches patch-md

   nss: regen patch
VersionDeltaFile
1.4+7-7devel/nss/patches/patch-md
+7-71 files

NetBSD/pkgsrc Nu3RLqhdoc pkg-vulnerabilities

   pkg-vulnerabilities: add recent ImageMagick CVEs

   + ImageMagick{,6}
VersionDeltaFile
1.736+61-1doc/pkg-vulnerabilities
+61-11 files

NetBSD/pkgsrc Hf98kySdoc CHANGES-2026

   Updated math/py-lap
VersionDeltaFile
1.1393+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc n4Fp9ANmath/py-lap distinfo Makefile

   py-lap: updated to 0.5.13

   0.5.13
   Add badge for full test workflow in README.md
VersionDeltaFile
1.2+4-4math/py-lap/distinfo
1.4+3-3math/py-lap/Makefile
+7-72 files

NetBSD/pkgsrc bmKhyQddoc CHANGES-2026

   Updated devel/py-dulwich, net/py-geventhttpclient
VersionDeltaFile
1.1392+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc dIubb69net/py-geventhttpclient distinfo Makefile

   py-geventhttpclient: updated to 2.3.8

   2.3.8
   feat: Add connection validation to prevent stale connection reuse
VersionDeltaFile
1.15+4-4net/py-geventhttpclient/distinfo
1.19+2-2net/py-geventhttpclient/Makefile
+6-62 files

NetBSD/pkgsrc 9nAJGvTdevel/py-dulwich distinfo cargo-depends.mk

   py-dulwich: updated to 1.1.0

   1.1.0   2026-02-17

   * Add support for ``core.commentChar`` configuration option in commit message
     templates.

   * Add basic support for subtrees.

   * Implement server-side Git hooks (pre-receive, update, post-receive) in
     ``ReceivePackHandler``. Pre-receive hooks can abort entire pushes, update
     hooks can decline individual ref updates, and post-receive hooks run after
     successful pushes. Hook output is sent to clients via sideband channels.

   * Report progress during pack file downloads. Dulwich now displays real-time
     transfer progress (bytes received, transfer speed) when cloning or fetching
     repositories, matching Git's behavior.

   * Add client-side support for Git protocol v2 ``packfile-uris`` capability,

    [22 lines not shown]
VersionDeltaFile
1.72+28-28devel/py-dulwich/distinfo
1.14+8-8devel/py-dulwich/cargo-depends.mk
1.40+10-1devel/py-dulwich/PLIST
1.77+2-2devel/py-dulwich/Makefile
+48-394 files

NetBSD/pkgsrc p79moa9doc CHANGES-2026

   Updated graphics/babl, devel/py-ijson
VersionDeltaFile
1.1391+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc 0LfjzKLdevel/py-ijson distinfo PLIST

   py-ijson: updated to 3.5.0

   3.5.0

   * Added input iterator support via the new `ijson.from_iter` adapter.
     It allows users to easily consume iterators and async iterators,
     with common examples being HTTP stream responses
     as modelled by the `requests` and `httpx` libraries.
   * Introdued `tox` for common task execution.
VersionDeltaFile
1.7+4-4devel/py-ijson/distinfo
1.6+4-1devel/py-ijson/PLIST
1.9+2-2devel/py-ijson/Makefile
+10-73 files

NetBSD/pkgsrc xlKE3Uwgraphics/babl distinfo Makefile

   babl: updated to 0.1.122

   babl-0.1.122
   fix for startup crash due to mis-loading of x86_64-v4 on -v2 with some ports.
VersionDeltaFile
1.47+4-4graphics/babl/distinfo
1.71+2-2graphics/babl/Makefile
1.34+2-2graphics/babl/PLIST
+8-83 files

NetBSD/pkgsrc JeMti5Rdoc CHANGES-2026

   Updated graphics/py-tifffile, devel/py-fakefs, mail/py-checkdmarc, time/py-icalendar
VersionDeltaFile
1.1390+5-1doc/CHANGES-2026
+5-11 files

NetBSD/pkgsrc kyeHQ68time/py-icalendar Makefile distinfo

   py-icalendar: updated to 7.0.2

   7.0.2

   Minor changes

   Show required code changes in the CI output to help contributors solve the formatting issues.
   Use ruff 0.15.0 for code formatting in tox.ini.

   New features

   Enabled Calendar.from_ical to read calendars from files.
   Added Calendar.journals property to retrieve all journal components.

   Documentation

   Removed methods of str, int, and other classes and methods in the Python standard library from the documentation.
VersionDeltaFile
1.58+4-4time/py-icalendar/Makefile
1.49+4-4time/py-icalendar/distinfo
1.31+4-1time/py-icalendar/PLIST
+12-93 files

NetBSD/pkgsrc oWyu6q3mail/py-checkdmarc distinfo Makefile

   py-checkdmarc: updated to 5.14.1

   5.14.1

   Fixes

   Make the DMARC p tag required again until DMARCbis is released with an RFC number.


   5.14.0

   DMARCbis changes

   New tags: np (non-existent subdomain policy), psd (PSD flag), t (test mode) with descriptions, defaults, and validation

   Removed tag warnings: pct, rf, ri descriptions appended with "Removed in DMARCbis." and emit warnings when explicitly present in a record

   Optional p tag: Missing p now produces a warning and defaults to none instead of raising an error


    [20 lines not shown]
VersionDeltaFile
1.27+4-4mail/py-checkdmarc/distinfo
1.29+2-2mail/py-checkdmarc/Makefile
+6-62 files

NetBSD/pkgsrc A3MTq4Pdevel/py-fakefs distinfo Makefile

   py-fakefs: updated to 6.1.2

   6.1.2
   Fixes a regression caused by the introduced weakrefs.

   Fixes
   * do not use weakrefs for filesystem objects in fake modules
VersionDeltaFile
1.32+4-4devel/py-fakefs/distinfo
1.33+2-2devel/py-fakefs/Makefile
+6-62 files

NetBSD/pkgsrc lu5d6yKgraphics/py-tifffile distinfo Makefile

   py-tifffile: updated to 2026.2.24

   2026.2.24
   - Pass 5132 tests.
   - Remove deprecated TiffPages.pages and FileSequence.files (breaking).
   - Remove stripnull, stripascii, and bytestr functions (breaking).
   - Rewrite command line interfaces (breaking).
   - Support Experimenter and Project elements in OmeXml.
   - Refactor TiffPages.
   - Fix code review issues.
VersionDeltaFile
1.59+4-4graphics/py-tifffile/distinfo
1.67+2-2graphics/py-tifffile/Makefile
+6-62 files

NetBSD/pkgsrc sxz3CC8doc CHANGES-2026

   doc: Updated print/xpdf4 to 4.06nb1
VersionDeltaFile
1.1389+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc l7Nazb6print/xpdf4 Makefile

   print/xpdf4: add qt6-qtsvg dependency

   Reported by Marc on a private e-mail.

   While here, avoid detection of Qt5 if installed.
   Bump package rev.
VersionDeltaFile
1.50+11-5print/xpdf4/Makefile
+11-51 files

NetBSD/pkgsrc N9JJpUDdoc CHANGES-2026

   doc: Updated textproc/rumdl to 0.1.28
VersionDeltaFile
1.1388+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc rjHfBlMtextproc/rumdl distinfo cargo-depends.mk

   textproc/rumdl: update to 0.1.28

   [0.1.28] - 2026-02-24
   Added

       Import: rumdl import now preserves original rule aliases (e.g., no-hard-tabs instead of MD010) in the generated config file (#460)
       Code Block Tools: Per-language configs now support an enabled field to disable linting/formatting for specific languages while keeping the configuration (#458)

   Fixed

       MD044: Vale (<!-- vale ... -->) and remark-lint (<!-- lint ... -->) inline configuration directives are now skipped when checking proper names (#456)

   [0.1.27] - 2026-02-24
   Fixed

       MD013: CRLF line endings are now preserved during semantic-line-breaks reflow, fixing false positive warnings in the LSP when editors send Windows-style line endings (#459)
       MD041: Fix mode now correctly passes the file path to LintContext, enabling filename-derived title insertion (InsertDerived). Index and README files now derive their title from the parent directory name instead of "Index" or "README"
       MD044: YAML frontmatter values are now checked as prose while keys, delimiters, comments, and flow constructs are skipped. TOML frontmatter keys are also correctly skipped (#448)
       MD044: Angle-bracket autolinks (<https://...>) inside HTML comments are no longer flagged for proper name violations. Uses CommonMark autolink pattern matching for all valid URI schemes (#457)

    [32 lines not shown]
VersionDeltaFile
1.14+10-16textproc/rumdl/distinfo
1.5+2-4textproc/rumdl/cargo-depends.mk
1.14+2-2textproc/rumdl/Makefile
+14-223 files

NetBSD/pkgsrc KxCUydVdoc CHANGES-2026

   Updated security/py-bandit, security/py-certifi
VersionDeltaFile
1.1387+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc KeiOxQbsecurity/py-certifi distinfo Makefile

   py-certifi: updated to 2026.2.25

   2026.2.25
   Unknown changes
VersionDeltaFile
1.46+4-4security/py-certifi/distinfo
1.50+2-2security/py-certifi/Makefile
+6-62 files

NetBSD/pkgsrc QIOVO3esecurity/py-bandit distinfo Makefile

   py-bandit: updated to 1.9.4

   1.9.4

   * Fix B106 reporting wrong line number on multiline function calls
   * Lower version guard in check\_ast\_node to Python 3.12
   * Fix B615 false positive when revision is set via variable
   * Include filename in nosec 'no failed test' warning
   * Fix B613 crash when reading from stdin
   * Bump docker/build-push-action from 6.18.0 to 6.19.2
   * Bump docker/login-action from 3.6.0 to 3.7.0
   * chore: fixed some typos in comments
VersionDeltaFile
1.14+4-4security/py-bandit/distinfo
1.23+2-2security/py-bandit/Makefile
+6-62 files

NetBSD/pkgsrc ggjehZldoc CHANGES-2026

   doc: Updated cross/arm-none-eabi-gcc to 14.3.0nb1
VersionDeltaFile
1.1386+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc ymIB7ekcross/arm-none-eabi-gcc distinfo Makefile, cross/arm-none-eabi-gcc/patches patch-zlib_zutil.h patch-libiberty_Makefile.in

   arm-none-eabi-gcc: Fix PR pkg/59701

   pkgsrc changes:
   ---------------
     * Remove fdopen #defines in zutil.h on macOS.
     * Bump revision.
VersionDeltaFile
1.1+26-0cross/arm-none-eabi-gcc/patches/patch-zlib_zutil.h
1.17+4-3cross/arm-none-eabi-gcc/distinfo
1.2+3-3cross/arm-none-eabi-gcc/patches/patch-libiberty_Makefile.in
1.37+2-2cross/arm-none-eabi-gcc/Makefile
1.2+2-2cross/arm-none-eabi-gcc/patches/patch-libcc1_configure
+37-105 files

NetBSD/pkgsrc nmzt7bMdoc CHANGES-2026

   doc: Updated cross/arm-none-eabi-binutils to 2.45nb1
VersionDeltaFile
1.1385+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc rRG2Xtqcross/arm-none-eabi-binutils Makefile distinfo, cross/arm-none-eabi-binutils/patches patch-zlib_zutil.h

   arm-none-eabi-binutils: Fix build on Darwin

   pkgsrc changes:
   ---------------
     * Remove fdopen #defines in zutil.h on macOS.
     * Bump revision.
VersionDeltaFile
1.1+26-0cross/arm-none-eabi-binutils/patches/patch-zlib_zutil.h
1.14+2-2cross/arm-none-eabi-binutils/Makefile
1.14+2-1cross/arm-none-eabi-binutils/distinfo
+30-33 files

NetBSD/pkgsrc P8u6QUlnet/fetch DESCR

   fetch: tweak DESCR
VersionDeltaFile
1.2+2-2net/fetch/DESCR
+2-21 files

NetBSD/pkgsrc LkkOtNImath/openblas distinfo, math/openblas/patches patch-Makefile.install patch-Makefile

   openblas: update to 0.3.31

   OpenBLAS ChangeLog
   ====================================================================
   Version 0.3.31
   15-Jan-2025

   general:
    - reverted a matrix partitioning optimization from 0.3.30 that could lead to
      race conditions and subsequent invalid results in GEMM
    - added the bfloat16 extensions BGEMM and BGEMV
    - added a BLAS interface for the ?GEMM_BATCH extensions
    - added the BLAS extensions ?GEMM_BATCH_STRIDED and their CBLAS interface
    - added the basic infrastructure for half-precision float (FP16) format
      using SH prefix
    - reimplemented the LAPACK SLAED3/DLAED3 function using multithreading, thereby
      improving the performance of the SSYEVD/DSYEVD eigensolver for symmetric matrices
      on all platforms
    - limited the number of retries for initial memory allocation to avoid infinite

    [551 lines not shown]
VersionDeltaFile
1.8+68-56math/openblas/patches/patch-Makefile.install
1.5+48-39math/openblas/patches/patch-Makefile
1.4+51-20math/openblas/patches/patch-Makefile.system
1.1+27-0math/openblas/patches/patch-driver_others_blas__server__callback.c
1.1+24-0math/openblas/patches/patch-exports_Makefile
1.13+12-9math/openblas/distinfo
+230-1248 files not shown
+285-13514 files