NetBSD/pkgsrc U05q0u0doc CHANGES-2026

   doc: Updated geography/geos to 3.15.0
VersionDeltaFile
1.5737+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc AIHvFjBgeography/geos Makefile distinfo

   geography/geos: Update to 3.15.0

   geos has on the order of a dozen reverse dependencies, and has a
   multi-year track record of non-troubled updates.  (I've been running
   beta/rc versions of 3.15 for weeks with postgis/gdal/gis.)

   ## Changes in 3.15.0
   2026-09-01

   - Breaking Changes:
     - BufferOp returns POLYGON EMPTY when fed Inf/Nan coords (GH-1332)
     - Return Inf when calculating distance to an empty geometry (GH-1345, Even Rouault)
     - Overlay operations now produce a LineString geometry in cases that would previously
       produce a MultiLineString with contiguous sub-geometries. (GH-1459, Dan Baston)
     - Overlay operations that previously rotated rings by one vertex no longer do so
       (GH-1412, Dan Baston)

   - New things:
     - Add GEOSMinimumSpanningTree (Paul Ramsey)

    [29 lines not shown]
VersionDeltaFile
1.32+25-2geography/geos/PLIST
1.55+4-4geography/geos/distinfo
1.55+2-2geography/geos/Makefile
+31-83 files

NetBSD/pkgsrc kKK0azkdoc CHANGES-2026

   doc: Updated www/firefox153-l10n to 153.2.0
VersionDeltaFile
1.5736+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc idsrfUwwww/firefox153-l10n Makefile distinfo

   firefox153-l10n: update to 153.2
VersionDeltaFile
1.2+310-310www/firefox153-l10n/distinfo
1.2+2-2www/firefox153-l10n/Makefile
+312-3122 files

NetBSD/pkgsrc TWmlDVPdoc CHANGES-2026

   doc: Updated www/firefox153 to 153.2.0
VersionDeltaFile
1.5735+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 0Kprwsdwww/firefox153 Makefile distinfo

   firefox153: update to 153.2

   Mozilla Foundation Security Advisory 2026-85
   Security Vulnerabilities fixed in Firefox ESR 153.2

   Announced
       September 1, 2026
   Impact
       high
   Products
       Firefox ESR
   Fixed in

           Firefox ESR 153.2

   #CVE-2026-75874: Sandbox escape in the Remote Settings Client component

   Reporter
       crixer

    [274 lines not shown]
VersionDeltaFile
1.2+4-4www/firefox153/distinfo
1.2+2-2www/firefox153/Makefile
+6-62 files

NetBSD/pkgsrc hZPMJBzdoc CHANGES-2026

   doc: Updated www/firefox140-l10n to 140.15.0
VersionDeltaFile
1.5734+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc T8SGE6Nwww/firefox140-l10n Makefile distinfo

   firefox140-l10n: update to 140.15
VersionDeltaFile
1.16+307-307www/firefox140-l10n/distinfo
1.16+2-2www/firefox140-l10n/Makefile
+309-3092 files

NetBSD/pkgsrc cuhWR0xdoc CHANGES-2026

   doc: Updated www/firefox140 to 140.15.0
VersionDeltaFile
1.5733+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc NbuE2E0www/firefox140 Makefile distinfo

   firefox140: update to 140.15

   Mozilla Foundation Security Advisory 2026-84
   Security Vulnerabilities fixed in Firefox ESR 140.15

   Announced
       September 1, 2026
   Impact
       high
   Products
       Firefox ESR
   Fixed in

           Firefox ESR 140.15

   #CVE-2026-75874: Sandbox escape in the Remote Settings Client component

   Reporter
       crixer

    [126 lines not shown]
VersionDeltaFile
1.21+4-4www/firefox140/distinfo
1.23+2-2www/firefox140/Makefile
+6-62 files

NetBSD/pkgsrc D2zFTgYwww/firefox distinfo, www/firefox/patches patch-toolkit_components_remote_nsXRemoteServer.cpp

   www/firefox: Fix build error, Success is not declared

   Reported by Thomas Klausner and Marc Baudoin. Thank you.
VersionDeltaFile
1.1+15-0www/firefox/patches/patch-toolkit_components_remote_nsXRemoteServer.cpp
1.593+2-1www/firefox/distinfo
+17-12 files

NetBSD/pkgsrc IjlRSeKdoc CHANGES-2026

   Updated www/py-nh3, devel/py-gitpython
VersionDeltaFile
1.5732+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc IducHc0devel/py-gitpython distinfo Makefile

   py-gitpython: updated to 3.1.61

   3.1.61

   A fixup release to avoid accidental removal of public class regex on Actor.
   It's now deprecated instead.
VersionDeltaFile
1.38+7-7devel/py-gitpython/Makefile
1.34+4-4devel/py-gitpython/distinfo
+11-112 files

NetBSD/pkgsrc nzaPS9Twww/py-nh3 Makefile cargo-depends.mk

   py-nh3: updated to 0.3.7

   0.3.7

   Expose ammonia's id_prefix option via id_prefix kwarg
   Don’t depend on deprecated pyo3/generate-import-lib feature
   Validate tag_attribute_values conflict with attributes
   Bump ammonia from 4.1.2 to 4.1.3
   Bump ammonia from 4.1.3 to 4.1.4
   Bump pyo3 from 0.29.0 to 0.29.2
VersionDeltaFile
1.15+136-154www/py-nh3/distinfo
1.15+44-50www/py-nh3/cargo-depends.mk
1.17+2-2www/py-nh3/Makefile
+182-2063 files

NetBSD/pkgsrc LK5fZrPdoc CHANGES-2026

   Updated devel/py-ipython, textproc/py-regex, devel/py-cachetools
VersionDeltaFile
1.5731+4-1doc/CHANGES-2026
+4-11 files

NetBSD/pkgsrc COxuOaPdevel/py-cachetools Makefile distinfo

   py-cachetools: updated to 7.1.8

   v7.1.8 (2026-08-31)

   - Reject negative ``maxsize`` in ``Cache.__init__``.
VersionDeltaFile
1.40+4-4devel/py-cachetools/distinfo
1.41+2-2devel/py-cachetools/Makefile
+6-62 files

NetBSD/pkgsrc j4qVz2xtextproc/py-regex Makefile distinfo

   py-regex: updated to 2026.9.3

   Version: 2026.9.3

       New version of cibuildwheel no longer supports building for free-threaded Python 3.13.

   Version: 2026.9.2

       New version of cibuildwheel no longer needs nor supports cpython-freethreading option.

   Version: 2026.9.1

       Updated cibuildwheel.
       Support Python 3.15.
VersionDeltaFile
1.74+4-4textproc/py-regex/distinfo
1.78+2-2textproc/py-regex/Makefile
+6-62 files

NetBSD/pkgsrc yRGsP2Pdevel/py-ipython Makefile distinfo

   py-ipython: updated to 9.17.1

   9.17.1
   Bug fixes
VersionDeltaFile
1.91+4-4devel/py-ipython/distinfo
1.124+2-2devel/py-ipython/Makefile
+6-62 files

NetBSD/pkgsrc erD6GeIdoc CHANGES-2026

   Updated security/defguard-gateway, security/ccid, net/py-zeroconf
VersionDeltaFile
1.5730+4-1doc/CHANGES-2026
+4-11 files

NetBSD/pkgsrc JQFG1hZnet/py-zeroconf Makefile distinfo

   py-zeroconf: updated to 0.151.3

   v0.151.3 (2026-08-30)

   Bug Fixes

   - Correct the recursion available header flag to the rfc 1035 value

   Refactoring

   - Compute probe pacing from fresh clock reads
   - Compute service info request pacing from fresh clock reads

   Testing

   - Fix flaky test_service_browser_expire_callbacks
   - Make test_qu_response deterministic by injecting the announcement

   v0.151.2 (2026-08-29)

    [4 lines not shown]
VersionDeltaFile
1.62+4-4net/py-zeroconf/distinfo
1.67+2-2net/py-zeroconf/Makefile
+6-62 files

NetBSD/pkgsrc ZcP6JGjsecurity/ccid Makefile distinfo

   ccid: updated to 1.8.3

   1.8.3

   - Add support of
     - Broadcom Corp 58200 0x5884
     - Broadcom Corp 58200 0x5885
     - Broadcom Corp 58200 0x5886
     - Broadcom Corp 58200 0x5887
     - Circle CIR135 ICC
     - DigiFlow LLP. KAZTOKEN
     - HID Global Crescendo NFC Reader
     - HID Global OMNIKEY Plug
     - HID Global OMNIKEY SE Plug
     - Neowave LinkeoC-PRO
     - Swissbit iShield Key 2 Pro
   - macOS: provide a sample script to build the driver with meson
   - fix some minor issues found by an AI tool
   - Some other minor improvements
VersionDeltaFile
1.35+4-4security/ccid/distinfo
1.57+2-2security/ccid/Makefile
+6-62 files

NetBSD/pkgsrc q9tlj3Osecurity/defguard-gateway Makefile cargo-depends.mk, security/defguard-gateway/patches patch-Cargo.toml

   defguard-gateway: updated to 2.0.5

   2.0.5
   It changes the default OPNsense plugin configuration which controls the placement of Defguard-related firewall rules.
   This configuration is now also available in advanced plugin options.
VersionDeltaFile
1.9+149-146security/defguard-gateway/distinfo
1.8+48-47security/defguard-gateway/cargo-depends.mk
1.8+2-11security/defguard-gateway/patches/patch-Cargo.toml
1.9+2-2security/defguard-gateway/Makefile
+201-2064 files

NetBSD/pkgsrc z6F7PLHdoc CHANGES-2026

   Updated archivers/py-cramjam, graphics/py-pillow_heif
VersionDeltaFile
1.5729+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc 9M9JHhKgraphics/py-pillow_heif Makefile distinfo

   py-pillow_heif: updated to 1.6.0

   1.6.0 - 2026-08-31

   Added

   - Reading and writing HDR metadata: `content_light_level`, `mastering_display_colour_volume`, `ambient_viewing_environment` keys in `info` dictionary.
   - Python `3.15` and `3.15t` wheels added.

   Changed

   - `libheif` was updated from the `1.23.1` to `1.23.2` version.

   Fixed

   - Use-after-free when a numpy array or the `data` memoryview outlived the `HeifFile` it was created from.
   - Conflicting license metadata: removed the `GPLv2` classifier, the package license is `BSD-3-Clause`; bundled library licenses in wheels are described in `LICENSES_bundled.txt`, which was updated to match the current libraries.
VersionDeltaFile
1.26+4-4graphics/py-pillow_heif/distinfo
1.36+3-3graphics/py-pillow_heif/Makefile
+7-72 files

NetBSD/pkgsrc HywJB6Uarchivers/py-cramjam Makefile distinfo

   py-cramjam: updated to 2.12.1

   2.12.1

   Don’t depend on deprecated pyo3/generate-import-lib feature
   Fix Buffer protocol typing
VersionDeltaFile
1.6+4-4archivers/py-cramjam/distinfo
1.9+2-2archivers/py-cramjam/Makefile
+6-62 files

NetBSD/pkgsrc ZSZXNY0net/vnstat Makefile.common, net/vnstati Makefile

   vnstat*: Consolidate and make paths absolute.

   Avoids constant rebuilds in bulk builds.
VersionDeltaFile
1.3+5-1net/vnstat/Makefile.common
1.3+1-3net/vnstati/Makefile
+6-42 files

NetBSD/pkgsrc x0a61e4doc CHANGES-2026

   Updated devel/pcre2, devel/protobuf, devel/py-protobuf
VersionDeltaFile
1.5728+4-1doc/CHANGES-2026
+4-11 files

NetBSD/pkgsrc oeOiTo2devel/protobuf Makefile distinfo, devel/py-protobuf Makefile PLIST

   protobuf py-protobuf: updated to [7.]36.1

   36.1

   Rust

   Update README files for each crate. (e64a176)
   Include runtime version details in assertion error messages. (fecb404)
   Drop special treatment of rust versions below 4.33. (1312f3b)
   Invert the relationship between rust crates (fbf3069)

   Python

   Optimize pure Python parse path for custom JSON enum names. (333846a)
   Additional unit tests for Python handling of custom JSON enum names.
VersionDeltaFile
1.91+4-4devel/py-protobuf/distinfo
1.104+4-4devel/protobuf/distinfo
1.31+4-1devel/py-protobuf/PLIST
1.100+2-2devel/py-protobuf/Makefile
1.112+2-2devel/protobuf/Makefile
+16-135 files

NetBSD/pkgsrc o4Jq5gOdevel/pcre2 PLIST Makefile

   pcre2: updated to 10.48

   10.48 31-August-2026

   This is a regular release, incorporating security fixes along with small
   improvements and fixes to library behaviour.

   Only changes to behaviour, changes to the API, and other significant changes
   are described here. Please see the ChangeLog and Git log for further details.

   As well as the tarball and Git tag for this release, there are detailed
   instructions for backporting security and correctness fixes, for the last
   five years of releases.

   * (Git change) Renamed the default development branch from master to main.

   * (Maintenance change) Added a five-year support lifecycle policy and
   publication of backport patches for security and high-severity fixes in older
   releases.

    [46 lines not shown]
VersionDeltaFile
1.30+4-4devel/pcre2/distinfo
1.33+2-2devel/pcre2/Makefile
1.14+2-1devel/pcre2/PLIST
+8-73 files

NetBSD/pkgsrc uzL7b7Lshells/standalone-tcsh Makefile, shells/static-tcsh Makefile

   *tcsh: Sanitise path settings.

   Avoids constant rebuilds when using bulk build tools.  While here apply
   some minor pkglint.  I tested all packages on NetBSD 11/amd64 apart from
   the install of the standalone-tcsh binary package due to read-only / in
   my build sandboxes.
VersionDeltaFile
1.44+3-6shells/standalone-tcsh/Makefile
1.19+6-2shells/tcsh/Makefile.common
1.18+2-4shells/static-tcsh/Makefile
+11-123 files