NetBSD/pkgsrc QJnHDasdoc CHANGES-2026

   pkgsrc is frozen for 2026Q3 release
VersionDeltaFile
1.6089+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc MgjiH3Usecurity/vault Makefile go-modules.mk, security/vault/patches patch-vault_quotas_quotas__rate__limit.go patch-go.sum

   vault: upgrade go-limiter package

   The old version of the go-limiter dependency is not compatible with
   current Go versions, as it accesses internal runtime details.

   This also needs a few other dependency updates.
VersionDeltaFile
1.32+10-739security/vault/distinfo
1.2+3-247security/vault/go-modules.mk
1.1+242-0security/vault/patches/patch-go.mod
1.1+41-0security/vault/patches/patch-go.sum
1.1+34-0security/vault/patches/patch-vault_quotas_quotas__rate__limit.go
1.128+3-3security/vault/Makefile
+333-9896 files

NetBSD/pkgsrc gfWFlGhsecurity/vault Makefile go-modules.mk

   vault: change the build to use Go modules
VersionDeltaFile
1.31+5,299-1security/vault/distinfo
1.1+1,768-0security/vault/go-modules.mk
1.127+6-9security/vault/Makefile
+7,073-103 files

NetBSD/pkgsrc HO7X0F0doc TODO CHANGES-2026

   doc: Updated www/py-zensical to 0.0.61
VersionDeltaFile
1.27921+1-2doc/TODO
1.6088+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc AVy72lkwww/py-zensical PLIST Makefile

   py-zensical: update to 0.0.61.

   This version adds more comprehensive support for documentation
   redirects in mkdocs.yml and zensical.toml. Zensical supports page
   and anchor redirects, resolves redirect chains, rejects cycles,
   and preserves links when pages are moved or split.
VersionDeltaFile
1.12+4-4www/py-zensical/distinfo
1.9+2-2www/py-zensical/PLIST
1.13+2-2www/py-zensical/Makefile
+8-83 files

NetBSD/pkgsrc lzddzIvdoc CHANGES-2026

   doc: Updated sysutils/mirador to 1.12.0
VersionDeltaFile
1.6087+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc LEz8FfIsysutils/mirador Makefile cargo-depends.mk

   sysutils/mirador: update to 1.12.0

   1.12.0
   Release Notes
   Added

       A battery panel, for laptops. The charge in block numerals with the
       meter beneath it, a label for which way things are going, the time left or
       to full in the border, and a line of detail — health, cycles, power draw.
       Amber below 20%
       and red below 10% only while running on the battery, and below 10% the
       status bar carries an alert. Not placed in the default layout, since a
       desktop would open on No battery; w switches it on. [battery] in the
       config sets the two thresholds and the sample interval.
       A temperature panel. The hottest sensor with its history in the CPU
       panel's face, and a table of every sensor group's current and peak
       reading. The platform's list is grouped the way a person would write it —
       Apple silicon's fourteen die readings become one CPU die row, and
       sensors reporting impossible values are dropped. u toggles Celsius and

    [30 lines not shown]
VersionDeltaFile
1.5+28-4sysutils/mirador/distinfo
1.4+8-0sysutils/mirador/cargo-depends.mk
1.5+2-2sysutils/mirador/Makefile
+38-63 files

NetBSD/pkgsrc 4cr5sr3doc TODO CHANGES-2026

   doc: Updated devel/py-urwid to 4.1.3
VersionDeltaFile
1.27920+1-2doc/TODO
1.6086+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc lLqqfLZdevel/py-urwid Makefile distinfo

   py-urwid: update to 4.1.3.

   Urwid 4.1.3
   ============

   2026-09-11

   Bug fixes 🕷
   ++++++++++++
   * Fix: Overlay top widget or bottom widget replace should trigger invalidation by @penguinolog in https://github.com/urwid/urwid/pull/1294
   Documentation 🕮
   ++++++++++++++++
   * Documentation: force theme override to fix readability on wide screen by @penguinolog in https://github.com/urwid/urwid/pull/1288
   Refactoring 🛠
   ++++++++++++++
   * Speed up the widget render hot paths by @penguinolog in https://github.com/urwid/urwid/pull/1290
VersionDeltaFile
1.62+4-4devel/py-urwid/distinfo
1.74+3-3devel/py-urwid/Makefile
+7-72 files

NetBSD/pkgsrc 97xf110doc TODO CHANGES-2026

   doc: Updated time/py-tzdata to 2026.4
VersionDeltaFile
1.27919+1-2doc/TODO
1.6085+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc aqLg9Iatime/py-tzdata Makefile distinfo

   py-tzdata: update to 2026.4.

   # Version 2026.4
   Upstream version 2026d released 2026-09-11T22:21:07+00:00

   ## Briefly:

   Canada’s Northwest Territories moved to permanent -06 on 2026-08-21. Obsolescent
   settings like TZ="EST5EDT" now conform better to POSIX. Fix security,
   performance and porting bugs in zic and localtime.
VersionDeltaFile
1.25+4-4time/py-tzdata/distinfo
1.28+2-2time/py-tzdata/Makefile
+6-62 files

NetBSD/pkgsrc pTDFDuVdoc TODO CHANGES-2026

   doc: Updated devel/py-pip-api to 0.0.35
VersionDeltaFile
1.27918+1-2doc/TODO
1.6084+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc fbYeA6sdevel/py-pip-api distinfo Makefile

   py-pip-api: update to 0.0.35.

   Test against pip 24.2, 24.3, 24.3.1 (#227, #234, #234)
   Test against pip 25.0, 25.0.1, 25.1, 25.2, 25.3 (#237, #242, #244, #250, #255)
   Test against pip 26.0, 26.0.1, 26.1, 26.1.1, 26.1.2, 26.2, 26.2.1 (#261, #265, #270, #282, #284, #289, #293)
   Drop support for Python 3.8 (#245)
   Drop support for Python 3.9 (#270)
   Support Python 3.14 (#272)
   Support Python 3.15 (#296)
VersionDeltaFile
1.5+37-7devel/py-pip-api/PLIST
1.12+4-5devel/py-pip-api/Makefile
1.8+4-4devel/py-pip-api/distinfo
+45-163 files

NetBSD/pkgsrc OlNW3sgdoc TODO CHANGES-2026

   doc: Updated textproc/py-pdf to 6.18.1
VersionDeltaFile
1.27917+1-2doc/TODO
1.6083+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc DEz3c3Jtextproc/py-pdf distinfo Makefile

   py-pdf: update to 6.18.1.

   ## Version 6.18.1, 2026-09-11

   ### Security (SEC)
   - Further restrict FlateDecode recovery (#4073)
   - Limit entry count for TrueType and Type1 font `/Widths` (#4072)
   - Limit allowed length of tokens in parse_bfchar (#4071)

   ### Bug Fixes (BUG)
   - Use current text matrix for visitor_text (#4062)
   - Repeat the letter for /S /A and /S /a page labels past Z (#4065)
   - Use font color for FreeText default appearance (#4051)

   ### Robustness (ROB)
   - Fix compatibility with fonttools < 4.58.0 (#4050, #4059)

   ### Documentation (DOC)
   - Use combined matrix in visitor examples (#4066)
VersionDeltaFile
1.70+4-4textproc/py-pdf/distinfo
1.77+4-4textproc/py-pdf/Makefile
+8-82 files

NetBSD/pkgsrc ngDwGqHdoc TODO CHANGES-2026

   doc: Updated graphics/py-matplotlib to 3.11.2
VersionDeltaFile
1.27916+1-2doc/TODO
1.6082+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc ZtQqaZAgraphics/py-matplotlib distinfo Makefile

   py-matplotlib: update to 3.11.2.

   This release contains several bug-fixes and adjustments:

       Speed up RGBA-stage image resampling
       Fix hexbin clipping in PDF output
       Fix \text with internal braces
       Fix some crashes and make some checks more robust to unlikely cases
       Fix frame skew when saving GIF animations with PillowWriter
       Fix HiDPI handling in Qt toolbar and WebAgg embeddings
       Fix ResizeEvent handling for TextBox
       Fix bug with PGF hatch linewidth and color
       Fix a bug with drawing an empty Collection
       Fix incorrect glyphs in Cairo backends
       Improve build system to prevent conflicts between wheels and system libraries
VersionDeltaFile
1.118+5-8graphics/py-matplotlib/Makefile
1.79+4-4graphics/py-matplotlib/distinfo
+9-122 files

NetBSD/pkgsrc YtQoyNgdoc CHANGES-2026

   doc: Updated net/Radicale2 to 2.1.12nb5
VersionDeltaFile
1.6081+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc Qm3JRJJnet/Radicale2 distinfo Makefile, net/Radicale2/patches patch-radicale_____init____.py patch-radicale_web.py

   Fix Radicale2 after setuptools-82 removed the pkg_resources module
VersionDeltaFile
1.1+33-0net/Radicale2/patches/patch-radicale_web.py
1.1+24-0net/Radicale2/patches/patch-radicale_____init____.py
1.23+2-3net/Radicale2/Makefile
1.8+3-1net/Radicale2/distinfo
+62-44 files

NetBSD/pkgsrc Cw8980qdoc TODO CHANGES-2026

   doc: Updated fonts/py-fonttools to 4.65.0
VersionDeltaFile
1.27915+1-2doc/TODO
1.6080+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 3P8wUX0fonts/py-fonttools Makefile distinfo

   py-fonttools: update to 4.65.0.

   4.65.0 (released 2026-09-10)
   ----------------------------

   - [glyf] Add ``__iter__``, ``items`` and ``values`` methods to the ``glyf`` table
     to make it more dict-like (#4156).
   - [feaLib] Escape the anonymous block tag when scanning for its terminator, so tags
     containing regex metacharacters are matched literally (#4167).
   - [varLib] Strip directory components from ``<variable-font name="..."/>`` when
     deriving the output filename in the ``varLib`` command line, so a designspace
     cannot write outside the output directory (#4168).
   - [feaLib] Fix tracking of the current script and language across redundant
     ``script`` statements. Rules following a ``script`` statement that names the
     first declared language system no longer end up under the ``DFLT`` script, and
     a ``script`` statement naming the already-current script still narrows the
     language systems and terminates the current lookup while leaving the
     ``lookupflag`` alone, matching makeotf (#1824, #2522, #4169).
   - [varLib.interpolatable] Escape glyph names in the HTML report (#4172).

    [4 lines not shown]
VersionDeltaFile
1.107+4-4fonts/py-fonttools/distinfo
1.135+2-2fonts/py-fonttools/Makefile
+6-62 files

NetBSD/pkgsrc mYjb4sWdoc TODO CHANGES-2026

   doc: Updated graphics/py-contourpy to 1.4.0
VersionDeltaFile
1.27914+1-2doc/TODO
1.6079+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc L4hp88Ographics/py-contourpy PLIST Makefile

   py-contourpy: update to 1.4.0.

   ## v1.4.0 (2026-09-11)

   ContourPy 1.4.0 introduces a new readonly property `ContourGenerator.name` for the algorithm name,
   adds support for CPython 3.15, and is the first release to upload `pyodide` wheels to PyPI.
   Support for `riscv64` and `iOS` architectures is added but considered experimental, wheels are
   available from the [Scientific Python Nightly Wheels](https://anaconda.org/channels/scientific-python-nightly-wheels)
   service but not PyPI.
VersionDeltaFile
1.11+4-4graphics/py-contourpy/distinfo
1.20+5-2graphics/py-contourpy/Makefile
1.6+1-1graphics/py-contourpy/PLIST
+10-73 files

NetBSD/pkgsrc QViXlwXdoc TODO CHANGES-2026

   doc: Updated textproc/py-JWT to 2.14.0
VersionDeltaFile
1.27913+1-2doc/TODO
1.6078+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 8bLND1Btextproc/py-JWT Makefile distinfo

   py-JWT: update to 2.14.0.

   `v2.14.0 <https://github.com/jpadilla/pyjwt/compare/2.13.0...2.14.0>`__
   -----------------------------------------------------------------------

   Security
   ~~~~~~~~

   - Harden HMAC key validation against public-key material supplied as JWK,
     JWKS, array, encoded, BOM-prefixed, DER, or PEM input. See
     `GHSA-r6x4-923q-g947 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947>`__,
     `GHSA-ffc3-869f-jxw9 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9>`__,
     `GHSA-p4g4-x82p-q773 <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773>`__,
     and `GHSA-w2cx-738m-mc7w <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w>`__.
   - Reject automatic redirects when ``PyJWKClient`` fetches a JWKS, preventing
     redirected destinations from being treated as trusted key sources. See
     `GHSA-9v7f-9g4p-ffgj <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj>`__.
   - Limit repeated JWKS refreshes caused by unknown key IDs while preserving
     normal key-rotation behavior. See

    [17 lines not shown]
VersionDeltaFile
1.29+4-4textproc/py-JWT/distinfo
1.35+2-2textproc/py-JWT/Makefile
+6-62 files

NetBSD/pkgsrc DOnOL9Wdoc TODO CHANGES-2026

   doc: Updated textproc/tabiew to 0.15.1
VersionDeltaFile
1.27912+1-2doc/TODO
1.6077+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc T6NX4PRtextproc/tabiew Makefile cargo-depends.mk

   tabiew: update to 0.15.1.

   Changes not documented, about a month of commits.
VersionDeltaFile
1.10+217-208textproc/tabiew/distinfo
1.10+71-68textproc/tabiew/cargo-depends.mk
1.10+2-2textproc/tabiew/Makefile
+290-2783 files

NetBSD/pkgsrc zaFk0rSdoc CHANGES-2026

   doc: Updated audio/kew to 4.3.4
VersionDeltaFile
1.6076+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc sLxBQmZaudio/kew Makefile distinfo

   kew: update to 3.4.3

   - Add Scrollable text on help view.
   - Add progress bar below mini-controls.
   - Volume now can go to 12, or 120%.
   - Added ability to read lyrics from TXXX (description: USLT) tags,
     which is how ffmpeg defaults to encode lyrics.
   - Auto-resume is now off by default in a fresh install.
   - bug fixes
VersionDeltaFile
1.28+4-4audio/kew/distinfo
1.32+2-3audio/kew/Makefile
+6-72 files

NetBSD/pkgsrc Sqxhwbkmail/sympa PLIST distinfo, mail/sympa/patches patch-Makefile.in

   Fix a missing / that caused share/examples/sympa/README to not be installed,
   and Add it to CONF_FILES.
   While there add Sympa/Template/Plugin to MAKE_DIRS_PERMS to match install
   instructions.
   Bump PKGREVISION
VersionDeltaFile
1.87+7-2mail/sympa/Makefile
1.3+3-3mail/sympa/patches/patch-Makefile.in
1.26+2-2mail/sympa/distinfo
1.19+2-1mail/sympa/PLIST
+14-84 files