NetBSD/pkgsrc FSrMDeBdoc CHANGES-2026

   Updated sysutils/py-borgmatic, graphics/py-svglib, devel/py-syrupy
VersionDeltaFile
1.5410+4-1doc/CHANGES-2026
+4-11 files

NetBSD/pkgsrc KhI0h2cdevel/py-syrupy Makefile distinfo

   py-syrupy: updated to 5.5.3

   5.5.3

   chore(deps): update astral-sh/setup-uv action to v8.3.0
   chore(deps): update astral-sh/setup-uv action to v8.3.1
   chore(deps): update dependency hypothesis to v6.156.2
   chore(deps): update dependency mypy to v2.2.0
   chore(deps): update dependency hypothesis to v6.156.3
   chore: closes 1144
   chore(deps): update astral-sh/setup-uv action to v8.3.2
VersionDeltaFile
1.15+4-4devel/py-syrupy/distinfo
1.16+2-2devel/py-syrupy/Makefile
+6-62 files

NetBSD/pkgsrc DdEsXPngraphics/py-svglib Makefile distinfo

   py-svglib: updated to 2.2.0

   2.2.0 (2026-08-14)

   Tooling and housekeeping

   - Modernized type annotations across `src/svglib/` and `tests/` to use PEP
     585 builtin generics (`list[...]`, `dict[...]`, `tuple[...]`, `set[...]`)
     instead of `typing.List`/`Dict`/`Tuple`/`Set`, and simplified a few
     emptiness/membership checks (`not points` instead of `len(points) == 0`,
     a set literal instead of a list for `in` checks). No behavior change.
   - Silenced a `UserWarning` from `test_convert_pdf_png` that came from
     ReportLab's own `renderPM.drawImage`, not from svglib: it reopens a
     `<image>` file referenced by path and converts it straight to RGB without
     normalizing palette-with-transparency PNGs first, unlike svglib's own
     handling of base64-embedded images. The referenced PNG (a dedicated
     tRNS-chunk test fixture) still renders correctly; there was nothing to fix
     in svglib's output.


    [10 lines not shown]
VersionDeltaFile
1.4+4-4graphics/py-svglib/distinfo
1.5+2-2graphics/py-svglib/Makefile
+6-62 files

NetBSD/pkgsrc D3AfcZFsysutils/py-borgmatic distinfo Makefile

   py-borgmatic: updated to 2.1.7

   2.1.7
   * Add support for the "--quick-stats" flag and the "quick_statistics" option to the "prune"
     action. Borg >= 1.4.5 and < 2 only.
   * For the "bootstrap" action, provide a more helpful error message when borgmatic can't
     determine the latest archive.
   * Add an "archive_hostname" option and a corresponding "--archive-hostname" flag for
     overriding the hostname used for the "{hostname}" placeholder in the "archive_name_format"
     option. Also add an "archive_username" option and corresponding "--archive-username" flag to
     override the "{user}" plaecholder. Both options/flags are Borg 1.4.5+ only.
   * Fix the ZFS hook's overzealous unmounting of snapshot paths when a source dataset is at
     "/".
   * Fix for the "restore" action sometimes failing to find a database dump that was dumped
     with a default port.
   * For the MariaDB and MySQL hooks, add "events", "routines", and "tablespaces" options for
     disabling dumping of scheduled events, stored routines, and tablespaces, respectively.
   * Fix an error from the "diff" action when exclude options are configured.
   * Fix the "repo-create" action to more surgically suppress Borg "Repository does not exist"

    [17 lines not shown]
VersionDeltaFile
1.2+238-67sysutils/py-borgmatic/PLIST
1.2+13-13sysutils/py-borgmatic/Makefile
1.2+4-4sysutils/py-borgmatic/distinfo
+255-843 files

NetBSD/pkgsrc hllhlGxdoc CHANGES-2026

   Updated net/yt-dlp, archivers/py-zipstream-ng, textproc/py-validate-pyproject, devel/py-dotenv
VersionDeltaFile
1.5409+5-1doc/CHANGES-2026
+5-11 files

NetBSD/pkgsrc HUXjWJ0devel/py-dotenv distinfo Makefile

   py-dotenv: updated to 1.2.3

   1.2.3

   Fixed

   - Strip a leading UTF-8 BOM from `.env` file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows)
   - `set_key` now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines
   - `dotenv run` now prints a friendly error instead of a traceback when no command is given
   - Cache the parsed result for empty `.env` files so repeated `dotenv_values`/`load_dotenv` calls no longer re-read the file
VersionDeltaFile
1.22+4-5devel/py-dotenv/Makefile
1.17+4-4devel/py-dotenv/distinfo
+8-92 files

NetBSD/pkgsrc UWezy1ktextproc/py-validate-pyproject PLIST Makefile

   py-validate-pyproject: updated to 0.26

   0.26

   * Add support for :pep:`808` partially dynamic metadata by :user:`henryiii`
     (:pr:`314`)
   * Allow multiple schemas describing the same tool when the schema definitions
     are identical by :user:`henryiii` (:pr:`303`)
   * Improve ``SchemaStore`` compatibility by supporting relative schema URLs by
     :user:`henryiii` (:pr:`306`)
   * Apply filtering before loading ``validate_pyproject.multi_schema`` entry
     points by :user:`henryiii` (:pr:`318`)
   * Add timeouts to network requests to avoid indefinite blocking by
     :user:`henryiii` (:pr:`319`)
VersionDeltaFile
1.22+3-5textproc/py-validate-pyproject/Makefile
1.18+4-4textproc/py-validate-pyproject/distinfo
1.10+4-1textproc/py-validate-pyproject/PLIST
+11-103 files

NetBSD/pkgsrc xGb8K32archivers/py-zipstream-ng Makefile distinfo

   py-zipstream-ng: updated to 1.9.3

   1.9.3
   Fix length calculation when adding extended ascii filenames (only affects Python 3.13.14+, 3.14.6+, 3.15+)
VersionDeltaFile
1.6+4-4archivers/py-zipstream-ng/distinfo
1.8+2-2archivers/py-zipstream-ng/Makefile
+6-62 files

NetBSD/pkgsrc rg8xcoenet/yt-dlp Makefile distinfo, net/yt-dlp/patches patch-youtube-fix.diff

   yt-dlp: updated to 2026.8.19

   yt-dlp 2026.08.19

   Core changes

   utils
   Deprecate number_of_digits
   Deprecate random_uuidv4
   float_or_none: Catch OverflowError
   random_user_agent: Bump version range 144-150 => 145-151

   Extractor changes

   americastestkitchen: Fix season/series extraction
   apple: Rework extractors
   ard: Remove dead extractor
   bandcamp: Support browser impersonation
   bfmtv: Fix extractor

    [46 lines not shown]
VersionDeltaFile
1.87+4-5net/yt-dlp/distinfo
1.95+2-6net/yt-dlp/Makefile
1.2+1-1net/yt-dlp/patches/patch-youtube-fix.diff
+7-123 files

NetBSD/pkgsrc Ea8IP8Idoc CHANGES-pkgsrc-2026Q2

   doc: Include more pullups
VersionDeltaFile
1.1.2.13+67-1doc/CHANGES-pkgsrc-2026Q2
+67-11 files

NetBSD/pkgsrc sk6b292doc CHANGES-pkgsrc-2026Q2

   doc: process some pullups
VersionDeltaFile
1.1.2.12+37-1doc/CHANGES-pkgsrc-2026Q2
+37-11 files

NetBSD/pkgsrc fW0s2nWwww/php-ja-wordpress Makefile distinfo

   Pullup ticket #7236 - requested by taca
   www/php-ja-wordpress: Security fix

   Revisions pulled up:
   - www/php-ja-wordpress/Makefile                                 1.34-1.36
   - www/php-ja-wordpress/PLIST                                    1.20
   - www/php-ja-wordpress/distinfo                                 1.31-1.33

   ---
      Module Name:      pkgsrc
      Committed By:     taca
      Date:             Wed Aug 12 15:18:27 UTC 2026

      Modified Files:
        pkgsrc/www/php-ja-wordpress: Makefile PLIST distinfo

      Log Message:
      www/php-ja-wordpress: update to 7.0.3


    [89 lines not shown]
VersionDeltaFile
1.19.4.1+659-55www/php-ja-wordpress/PLIST
1.29.4.2+3-3www/php-ja-wordpress/distinfo
1.32.4.2+3-2www/php-ja-wordpress/Makefile
+665-603 files

NetBSD/pkgsrc rMyk7Bcmail/roundcube Makefile.common PLIST, mail/roundcube-plugin-password distinfo

   Pullup ticket #7229 - requested by taca
   mail/roundcube: Security fix
   mail/roundcube-plugin-password: Security fix

   Revisions pulled up:
   - mail/roundcube-plugin-password/Makefile                       1.29
   - mail/roundcube-plugin-password/distinfo                       1.48
   - mail/roundcube/Makefile                                       1.105
   - mail/roundcube/Makefile.common                                1.46
   - mail/roundcube/PLIST                                          1.62
   - mail/roundcube/distinfo                                       1.103

   ---
      Module Name:      pkgsrc
      Committed By:     taca
      Date:             Tue Aug 11 15:21:53 UTC 2026

      Modified Files:
        pkgsrc/mail/roundcube: Makefile Makefile.common PLIST distinfo

    [28 lines not shown]
VersionDeltaFile
1.101.2.2+4-4mail/roundcube/distinfo
1.46.2.2+4-4mail/roundcube-plugin-password/distinfo
1.104.2.1+4-2mail/roundcube/Makefile
1.60.2.2+3-2mail/roundcube/PLIST
1.44.2.2+2-2mail/roundcube/Makefile.common
+17-145 files

NetBSD/pkgsrc RM15oNVlang/php compat.mk compat.mk

   Pullup ticket #7239 - requested by taca
   lang/php: New mk file to ease pull-ups to PHP packages

   Revisions pulled up:
   - lang/php/compat.mk                                            1.1-1.3

   ---
      Module Name:      pkgsrc
      Committed By:     taca
      Date:             Thu Jul 30 16:15:31 UTC 2026

      Added Files:
        pkgsrc/lang/php: compat.mk

      Log Message:
      lang/php: introduce compat.mk

      php/compat.mk is more generic version of php/json.mk.


    [32 lines not shown]
VersionDeltaFile
1.5.2.1+0-56lang/php/compat.mk
1.5.2.2+54-0lang/php/compat.mk
+54-562 files

NetBSD/pkgsrc HtP1kQDlang/php compat.mk

   php/compat.mk: wording and style fixes in comments
VersionDeltaFile
1.5+3-3lang/php/compat.mk
+3-31 files

NetBSD/pkgsrc gqtLN9xdoc CHANGES-2026

   doc: Updated net/p5-Net-OAuth to 0.33
VersionDeltaFile
1.5408+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc FY7XhS2net/p5-Net-OAuth Makefile distinfo

   p5-Net-OAuth: update to 0.33.

   0.33   Mon 17 Aug 23:14:01 BST 2026
          [Security]
          - Restrict the verification algorithm to those specified in the allowed_signature_methods, which is
            now required.  THIS IS A BREAKING CHANGE.

            See https://github.com/vurtdev/Net-OAuth/security/advisories/GHSA-c8rm-g5cm-4pf5 (CVE-2026-72889)
            for more information.

          - HMAC_SHA1 and HMAC_SHA256 signature keys cannot be blank.

          - HMAC_SHA1, HMAC_SHA256 and PLAINTEXT signature verification now use constant-time comparison (CVE-2026-75589).

          [Documentation]
          - Updated the GitHub repository location, which moved before the version 0.32 release.
            (The former location does redirect to the new location.)

          - Removed CONTRIBUTING.md due to changes in the AI policy.

    [2 lines not shown]
VersionDeltaFile
1.10+4-4net/p5-Net-OAuth/distinfo
1.29+2-2net/p5-Net-OAuth/Makefile
+6-62 files

NetBSD/pkgsrc oJKpJfodoc CHANGES-2026

   doc: Updated time/py-icalendar to 7.3.0
VersionDeltaFile
1.5407+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc p0roDKhtime/py-icalendar distinfo Makefile

   py-icalendar: update to 7.3.0.

   Removals and deprecations

       obj is deprecated in favor of bytes. It is retained as a lossy
       string view of the value for backward compatibility, and will
       be removed in icalendar 8. The
       test_ical_value_rejects_non_base64_characters test was removed
       because vBinary.ical_value no longer validates or decodes
       Base64. @uwezkhan (Issue #1356)

       Issue #1362

   New features

       Created an example() method for the Journal component and an
       example() method for the FreeBusy component, added the RFC 5545
       examples that they load, and documented their usage in both
       class docstrings. AI assistance: Kiro CLI with the claude-opus-5

    [182 lines not shown]
VersionDeltaFile
1.37+51-0time/py-icalendar/PLIST
1.56+4-4time/py-icalendar/distinfo
1.65+4-4time/py-icalendar/Makefile
+59-83 files

NetBSD/pkgsrc BQYNgBqdevel/gettext distinfo, devel/gettext/patches patch-gettext-tools_configure

   gettext-tools: do not autodetect libcurl and libjson-c

   Fixes build on OpenIndiana. The libraries are shipped
   with base but at least some of the headers seem absent.
VersionDeltaFile
1.3+47-1devel/gettext/patches/patch-gettext-tools_configure
1.53+2-2devel/gettext/distinfo
+49-32 files

NetBSD/pkgsrc 8uHihrWinputmethod/ibus Makefile

   ibus: regenerate tools Vala sources before build

   The generated tools/main.c in the distfile may contain Wayland code
   even when ibus is configured with --disable-wayland, causing the build
   to fail due to missing wayland headers or libraries.

   Clean the generated sources before build so they are regenerated
   with the current configure options, as already done for ui/gtk3.

   This should fix workaround for PR pkg/60476 on pkgsrc-2026Q2.
VersionDeltaFile
1.126+6-4inputmethod/ibus/Makefile
+6-41 files

NetBSD/pkgsrc 4NKpu2Gdoc CHANGES-2026

   doc: Updated net/yt-dlp to 2026.7.4nb1
VersionDeltaFile
1.5406+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc LBVHIYCnet/yt-dlp distinfo Makefile, net/yt-dlp/patches patch-youtube-fix.diff

   net/yt-dlp: Fix download 403 error from youtube.com

   * Update YouTube extractor to current.
   * Bump PKGREVISION.
VersionDeltaFile
1.1+363-0net/yt-dlp/patches/patch-youtube-fix.diff
1.94+5-1net/yt-dlp/Makefile
1.86+2-1net/yt-dlp/distinfo
+370-23 files

NetBSD/pkgsrc iRClSOuinputmethod/ibus Makefile

   ibus: use common Wayland platform detection

   Remove the temporary NetBSD native X11 workaround and rely on
   PLATFORM_SUPPORTS_WAYLAND.

   Native EGL support is now handled by graphics/MesaLib/features.mk, so
   the additional libglamoregl.so check is no longer needed.  PR pkg/60476

   Bump PKGREVISION.
VersionDeltaFile
1.125+3-6inputmethod/ibus/Makefile
+3-61 files

NetBSD/pkgsrc iIOFmgsx11/gtk3 Makefile options.mk

   gtk3: remove NetBSD-specific Wayland workaround

   MESALIB_SUPPORTS_EGL now handles native EGL support correctly on
   NetBSD, so PLATFORM_SUPPORTS_WAYLAND already excludes systems where
   the native libepoxy has no EGL support.

   Remove the additional libglamoregl.so check added in PR pkg/60295.
   The file is part of the xserver set, so checking for it incorrectly
   disables Wayland on bulk build hosts where the xserver set is not
   installed.  PR pkg/60476

   Bump PKGREVISION.
VersionDeltaFile
1.37+1-5x11/gtk3/options.mk
1.231+2-2x11/gtk3/Makefile
+3-72 files

NetBSD/pkgsrc BDBkOvegraphics/MesaLib features.mk

   graphics/MesaLib: improve native EGL detection on NetBSD

   For native X11 on NetBSD, use HAVE_XORG_EGL when it is available
   instead of only checking for the EGL header.

   On older NetBSD releases without HAVE_XORG_EGL, use HAVE_XORG_GLAMOR
   as a fallback, since native libepoxy EGL support was conditional on
   GLAMOR there.

   This is a proper fix for PR pkg/60295 and makes MESALIB_SUPPORTS_EGL
   reflect the actual native EGL support more accurately.

   PR pkg/60476
VersionDeltaFile
1.3+10-2graphics/MesaLib/features.mk
+10-21 files

NetBSD/pkgsrc 7efDa2Edoc CHANGES-2026

   doc: Updated devel/cargo-about to 0.9.2
VersionDeltaFile
1.5405+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc cT5PU7qdevel/cargo-about cargo-depends.mk Makefile

   devel/cargo-about: update to 0.9.2

   0.9.2 - 2026-08-18
   Fixed

       PR#312 changed processing of detected license files so that they are never discarded, resolving #309.
VersionDeltaFile
1.13+7-7devel/cargo-about/distinfo
1.17+2-2devel/cargo-about/Makefile
1.13+1-1devel/cargo-about/cargo-depends.mk
+10-103 files

NetBSD/pkgsrc c24Lv10doc TODO CHANGES-2026

   doc: Updated textproc/tabiew to 0.14.2
VersionDeltaFile
1.27777+1-2doc/TODO
1.5404+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc Wn2DvY6textproc/tabiew Makefile cargo-depends.mk

   tabiew: update to 0.14.2.

   About a month of development.
VersionDeltaFile
1.9+454-481textproc/tabiew/distinfo
1.9+150-159textproc/tabiew/cargo-depends.mk
1.9+2-2textproc/tabiew/Makefile
+606-6423 files