devel/sdcc: Update to 4.6.0
Changelog:
SDCC 4.6.0 New Feature List:
* C2y _Countof operator
* C2y octal
* C2y if-declaration
* C2y Conditional operator with omitted second operand (originally a GNU extension)
* C99 compound literals
* C23 compound literals with storage class specifiers
* Experimental f8l port
* C2y signed bit-precise integer type of width 1
* C2y bit-precise integer types as fixed underlying type for enum
* C2y umaxabs
* C2y bit utilities
* realloc(ptr, 0) now follows C99 semantics instead of C90 semantics
* r4k port for Rabbit 4000
* Experimental r5k and r6k ports for Rabbit 5000 and 6000
[16 lines not shown]
graphics/libheif: Update to 1.23.5
Changelog:
v1.23.5 is a security and bugfix release. It is ABI- and API-compatible
with v1.23.4 and is a drop-in replacement.
One of the fixed issues is rated high, so all users are advised to
upgrade.
## Security fixes
(CVE numbers will be added when assigned.)
* CVE-2026-XXXXX (GHSA-v8qw-hwjv-44hw) Memory exhaustion through
a mismatch between the container and the bitstream image size.
A crafted image can declare a small size in its ispe property
while the bitstream declares a much larger coded frame. The
container-level checks used the ispe size, so the oversized
bitstream reached the decoder, which allocated a frame buffer
[191 lines not shown]
multimedia/vlc: Update to 3.0.24
Changelog:
3.0.24 Highlights
Over 130 security fixes across VLC and its bundled libraries
Upgrades FFmpeg from 4.4 to 8.1.2
Updates 49 third-party libraries
Adds ATRAC3 and ATRAC9 decoding
Adds CEA-708 closed captions in MP4
Adds SRT listener mode and SFTP public key authentication options
Fixes slow Windows startup when Daylight Saving Time changes
Adds NV12 DirectShow capture support on Windows
Fixes Windows audio crashes and Direct3D11 rendering issues
Fixes the AudioToolbox MIDI synthesizer crash on macOS 26 and later
Improves support for Qt 6 and RIST
Improves subtitle language detection and WebVTT handling
[3 lines not shown]
mail/thunderbird: Update to 156.0.1 really
* Fix mistake when I sync mozilla-common.mk with www/firefox.
* Previous update is for 155.0.1. This is really for 156.0.1.
www/seamonkey: Update to 2.53.24
* Build with recent devel/nss.
Changelog:
2.53.24:
What's New in SeaMonkey 2.53.24
SeaMonkey 2.53.24 contains (among other changes) the following changes relative to SeaMonkey 2.53.23:
* Remove unused method readRDFString bug 1430721.
* Cancel Filter edit dialog closes the whole Message Filter dialog too bug 1741049.
* Put home button in the SeaMonkey main toolbar bug 2005739.
* Calendar "Edit Recurrence"/Weekly doesn't show days bug 2011571.
* Fix typo in addon-sdk util.js bug 2014701.
* Create README template to use in releases bug 2050435.
* Remove use of globalOverlay.xul in DOM Inspector bug 2054602.
SeaMonkey 2.53.24 uses backend code from Mozilla Firefox and contains relevant Firefox 60.8 security fixes.
[4 lines not shown]
chat/matrix-synapse: Align dependencies to upstream harder
Bump a few versions, and add a dependency on pyparsing, which
shouldn't be present, but upstream has it in pyproject.toml because
synapse depends on packaging and packaging used to need pyparsing, but
apparently packaging needed a newer version than it said it needed.
Reported upstream.
Tested on NetBSD 10 amd64.
