NetBSD/pkgsrc wWnbkThdoc pkg-vulnerabilities

   pkg-vulnerabilities: add last days CVEs

   + freerdp2, gnutls,
     janet (fixed upstream, latest stable release 1.40.1 affected),
     lrzip (not fixed),
     mongodb, munge, mupdf, png, powerdns-recursor, py-cryptography, roundcube,
     ruby-faraday, tcpreplay
VersionDeltaFile
1.732+40-1doc/pkg-vulnerabilities
+40-11 files

NetBSD/pkgsrc kaUhBhRdoc CHANGES-2026

   doc: Updated xlockmore to 5.88

   This updated the xlockmore-lite package too.
VersionDeltaFile
1.1067+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc gPwkuTux11/xlockmore distinfo Makefile.common

   x11/xlockmore: Update to 5.88

   5.88
     epicycle taken from XScreensaver.
     Latest gears ported from XScreensaver.

   5.87
     Added H_TREE curve to turtle. Taken from a turtle example on internet.
     Updated mball, pyraminx, oct to look better on XScreensaver.  Synced
       build with latest.
     squiral mode (spiral|squirrel?) taken from XScreensaver.  Fixed a
       original horizontal curtain screen dust, and added hexagons and
       diamonds, and added vertical curtains.

   5.86
     Added LEVY_C, KOCH_SNOWFLAKE, SIERPINSKI, SIERPINSKI_ARROWHEAD curves
       to turtle.  Taken mostly from various turtle examples on internet.
       Also added some line width for initial few draws.


    [17 lines not shown]
VersionDeltaFile
1.68+4-4x11/xlockmore/distinfo
1.95+2-2x11/xlockmore/Makefile.common
1.205+1-2x11/xlockmore/Makefile
+7-83 files

NetBSD/pkgsrc 8kJn0QFdoc CHANGES-2026

   Updated net/py-pypiserver
VersionDeltaFile
1.1066+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc HRSGv4unet/py-pypiserver Makefile distinfo

   py-pypiserver: updated to 2.4.1

   2.4.1 (2026-02-10)

   - 9e5b9bb MAINT: Remove unused import LooseVersion from distutils.version
   - 945e23e MAINT: chore: move mypy config from setup.cfg to pyproject.toml
   - dc4dadb MAINT: fix: cgi import error for Python3.13+
   - a5a715f MAINT: Fix partially broken tests
   - 1828884 MAINT: fix: small fix for `mdformat`
   - ba381b1 MAINT: Remove support for Python 3.8 & 3.9
   - 7148a5c MAINT: Merge pull request 672 from parmsib/patch-1
   - e0591a3 FIX: Fix compatibility with twine 1.7.0
   - b5a67a8 MAINT: Merge branch 'main' into patch-1
   - 53f134c MAINT: chore: Update setuptools requirement from <71.0.0,>=40.0 to >=40.0,<81.0.0 in /requirements
   - 7af665c MAINT: fix whitespace in help output
   - 58f7162 MAINT: chore: Bump waitress from 2.1.2 to 3.0.1 in /docker
VersionDeltaFile
1.24+6-3net/py-pypiserver/Makefile
1.15+4-4net/py-pypiserver/distinfo
+10-72 files

NetBSD/pkgsrc VWD7jrPdoc CHANGES-2026

   doc: Updated news/tin to 2.6.5
VersionDeltaFile
1.1065+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc dwWndnJnews/tin distinfo Makefile

   news/tin: Update to 2.6.5

   -- 2.6.5 release 20251224 "Glenury" --

    030) Thomas E. Dickey <dickey at invisible-island.net>
         ADD. update configure macros
         FIX. aclocal.m4

    029) Remus-Gabriel Chelu <remusgabriel.chelu at disroot.org>
         ADD. Romanian translation
         FIX. ro.po

    028) Bjarni Ingi Gislason <bjarniig at simnet.is>
         ADD. manpage fixes (debian bug #1093395, #1096177)
         FIX. tin.[15]

    027) Dennis Preiser <dennis at d--p.de>
         ADD. avoid macro in snprintf() as that might be a macro too
         ADD. fallback code for the !CPP_DOES_CONCAT case

    [123 lines not shown]
VersionDeltaFile
1.38+4-4news/tin/distinfo
1.115+2-3news/tin/Makefile
1.14+2-1news/tin/PLIST
+8-83 files

NetBSD/pkgsrc tlm2YE5doc CHANGES-2026

   doc: Updated www/typo3-13 to 13.4.25
VersionDeltaFile
1.1064+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc dbtNKOzwww/typo3-13 distinfo Makefile

   www/typo3-13: update to 13.4.25

   13.4.23 (2026-01-13)

   This release is a combined bug fix and security release.

   * TYPO3-CORE-SA-2026-001 / CVE-2025-59020
   * TYPO3-CORE-SA-2026-002 / CVE-2025-59021
   * TYPO3-CORE-SA-2026-003 / CVE-2025-59022
   * TYPO3-CORE-SA-2026-004 / CVE-2026-0859


   13.4.24 (2026-01-20)

   This version is a bugfix and maintenance release.


   * FileSpool regression - Emails with complex MIME structures
     (attachments, embedded files or AbstractPart objects) were

    [11 lines not shown]
VersionDeltaFile
1.10+4-4www/typo3-13/distinfo
1.11+3-3www/typo3-13/Makefile
+7-72 files

NetBSD/pkgsrc 9LkO1FZwww/squid6 Makefile.common

   www/squid6/Makefile.common: remove "used by" line
VersionDeltaFile
1.3+1-2www/squid6/Makefile.common
+1-21 files

NetBSD/pkgsrc e1Yvyi3doc CHANGES-2026

   doc: Updated www/squid7 to 7.4
VersionDeltaFile
1.1063+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc dAdTuhHwww/squid7 Makefile Makefile.common, www/squid7/files README-pkgsrc

   www/squid7: update to 7.4

   pkgsrc change:
   * Move MESSAGE to README-pkgsrc.
   * Use own Makefile.common now preparing remove of squid6.

   7.4 (2026-01-20)

   - Do not create world-readable directories
   - digest_edirectory_auth: Fix LDAPS memory leaks
   - snmplib: Improve handling of zero-length ASN OCTET STRINGs
   - Debug tls_read_method()/tls_write_method() errors
   - ICMP: Harden echo paths, fix overflows, UB, and leaks
   - Set SSL_OP_LEGACY_SERVER_CONNECT when peeking at servers
   - security_file_certgen: Fix OPENSSL_malloc()/free(3) mismatch
   - Detect FreeBSD ports Heimdal package
   - Remove SQUID_CHECK_KRB5_HEIMDAL_BROKEN_KRB5_H macro
   - Remove SQUID_CHECK_KRB5_SOLARIS_BROKEN_KRB5_H macro
   - ext_kerberos_ldap_group_acl: Do not prohibit all LDFLAGS

    [3 lines not shown]
VersionDeltaFile
1.8+15-5www/squid7/Makefile
1.1+19-0www/squid7/Makefile.common
1.1+10-0www/squid7/files/README-pkgsrc
1.5+4-4www/squid7/distinfo
1.2+2-1www/squid7/PLIST
1.2+1-1www/squid7/MESSAGE
+51-116 files

NetBSD/pkgsrc UJYmcDBdoc CHANGES-2026

   Updated databases/py-tortoise-orm, devel/py-immutabledict
VersionDeltaFile
1.1062+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc jUiM854devel/py-immutabledict distinfo Makefile

   py-immutabledict: updated to 4.3.0

   4.3.0

   Add typed __new__ overloads for type-safe constructor calls.
   Fix: correct ImmutableOrderedDict _dict_cls so that it works correctly. It actually silently used plain dict due to the issue (which actually do preserve order on Python 3.7+, so the bug was not noticed).
VersionDeltaFile
1.13+4-4devel/py-immutabledict/distinfo
1.15+2-2devel/py-immutabledict/Makefile
+6-62 files

NetBSD/pkgsrc 6A7G0tMdatabases/py-tortoise-orm PLIST distinfo

   py-tortoise-orm: updated to 1.0.0

   1.0.0

   Breaking Changes

   Minimum Python version raised to 3.10 (was 3.9).
   ``use_tz`` now defaults to ``True`` (was False). Set use_tz=False explicitly if you need naive datetimes.
   Context-first architecture: All ORM state now lives in TortoiseContext instances. Tortoise.init() returns a TortoiseContext (previously returned None). Multiple separate asyncio.run() calls require explicit context management; the typical single asyncio.run(main()) pattern works unchanged.
   Removed legacy test infrastructure: test.TestCase, test.IsolatedTestCase, test.TruncationTestCase, test.SimpleTestCase, initializer(), finalizer(), env_initializer(), getDBConfig(). Use tortoise_test_context() with pytest instead.
   Removed ``pytz`` dependency: Timezone handling now uses the standard library zoneinfo module. Tortoise APIs return ZoneInfo objects instead of pytz timezones.
   ``DatetimeField``/``TimeField`` with ``auto_now=True`` no longer implicitly sets auto_now_add=True. In practice auto_now=True alone still sets the value on every save (including creation), so this is unlikely to affect most users. The internal flag coupling was removed for correctness.
   Shell extras required: Interactive shell dependencies are now optional. Install with pip install tortoise-orm[ipython] or pip install tortoise-orm[ptpython].

   Added

   Native migrations framework with CLI commands: tortoise makemigrations, tortoise migrate, tortoise sqlmigrate. Supports RunPython, RunSQL, reversible migrations, and multi-app projects.
   Database schema support for PostgreSQL and MSSQL (on MySQL maps to database name) — tables can live in non-default schemas (e.g., warehouse.inventory), with cross-schema relations and migration support.
   PostgreSQL full-text search: TSVectorField, SearchVector, SearchQuery, SearchRank, SearchHeadline expressions, and GIN/GiST index support.

    [29 lines not shown]
VersionDeltaFile
1.14+122-1databases/py-tortoise-orm/PLIST
1.33+4-4databases/py-tortoise-orm/distinfo
1.42+3-3databases/py-tortoise-orm/Makefile
+129-83 files

NetBSD/pkgsrc WOYLhHSdoc CHANGES-2026

   Updated devel/libuv, textproc/py-parse
VersionDeltaFile
1.1061+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc Vl5X3Nrtextproc/py-parse distinfo Makefile

   py-parse: updated to 1.21.0

   1.21.0
   allow triggering CI manually
   Actually raise exception
   readme: Clarify 'd' type
   Bump actions/checkout from 5 to 6 in the actions-infrastructure group
   Allow grouping char (,_) in decimal format string
VersionDeltaFile
1.15+4-4textproc/py-parse/distinfo
1.17+2-3textproc/py-parse/Makefile
+6-72 files

NetBSD/pkgsrc 0RVN8sgdevel/libuv distinfo Makefile, devel/libuv/patches patch-src_unix_core.c patch-src_unix_udp.c

   libuv: updated to 1.52.0

   2026.02.11, Version 1.52.0 (Stable)

   * src: remove unused include of <assert.h> in timer.c (Juan José Arboleda)
   * test: skip `udp_multicast_join` if not system-wide available (Juan José
     Arboleda)
   * test: remove unused include of <limits.h> in runner.h (Juan José Arboleda)
   * doc: don't mention UV_LOOP_ENABLE_IO_URING_SQPOLL (Poul T Lomholt)
   * unix: fix uv_thread_{get,set}priority error codes (Ryan Liptak)
   * build: dedup sanitizer jobs using matrix strategy (Juan José Arboleda)
   * doc: update ncurses link (Saúl Ibarra Corretgé)
   * tcp: support customizing TCP_KEEPINTVL and TCP_KEEPCNT (Andy Pan)
   * linux: fix -Wformat-truncation warning (Ben Noordhuis)
   * src: fix nullptr dereference in uv__print_handles (jhnh204)
   * build: make automake link libm on bsd-likes (Juan José Arboleda)
   * include: remove unused macro undefs from uv.h (Juan José Arboleda)
   * win: handle empty string in uv_get_process_title (Ben Noordhuis)
   * win: use WSA_FLAG_NO_HANDLE_INHERIT in WSASocketW (chemodax)

    [102 lines not shown]
VersionDeltaFile
1.5+4-17devel/libuv/patches/patch-src_unix_core.c
1.7+10-10devel/libuv/patches/patch-src_unix_udp.c
1.87+6-6devel/libuv/distinfo
1.89+2-3devel/libuv/Makefile
+22-364 files

NetBSD/pkgsrc DuHygLAdoc CHANGES-2026

   doc: Updated www/ruby-actionpack80 to 8.0.4nb1
VersionDeltaFile
1.1060+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 8WD20Apwww/ruby-actionpack80 Makefile

   www/ruby-actionpack80: add dependency

   www/ruby-actionpack80 require ruby-useragent.

   Bump PKGREVISION.
VersionDeltaFile
1.4+3-1www/ruby-actionpack80/Makefile
+3-11 files

NetBSD/pkgsrc GnsrVnwdoc CHANGES-2026

   doc: Updated www/ruby-actionpack72 to 7.2.3nb1
VersionDeltaFile
1.1059+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc FKhoS9kwww/ruby-actionpack72 Makefile

   www/ruby-actionpack72: add dependency

   www/ruby-actionpack72 require ruby-useragent.

   Bump PKGREVISION.
VersionDeltaFile
1.2+3-1www/ruby-actionpack72/Makefile
+3-11 files

NetBSD/pkgsrc 1tK5Vzgdoc CHANGES-2026

   doc: Updated www/ruby-actionpack61 to 6.1.7.10nb1
VersionDeltaFile
1.1058+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc kZpR49pwww/ruby-actionpack61 Makefile

   www/ruby-actionpack61: depends on ruby-rack2

   Depends on ruby-rack2 instead of ruby-rack.

   Bump PKGREVISION.
VersionDeltaFile
1.7+3-2www/ruby-actionpack61/Makefile
+3-21 files

NetBSD/pkgsrc l6lhs4Udoc CHANGES-2026

   Downgraded net/ruby-net-imap to 0.5.13
VersionDeltaFile
1.1057+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc rnLzKThnet/ruby-net-imap distinfo Makefile

   net/ruby-net-imap: downgrade to 0.5.13

   This package is for ruby-redmine{60,61} package and they require
   net-imap 0.5.x on ruby32.  So downgrade now.

   Changes from previous 0.5.11:

   0.5.12 (2025-10-06)

   What's Changed

   TruffleRuby is not (yet) "officially supported" but it seems to work (with a
   few small caveats).  Several tests are still marked as pending, but the rest
   all pass.  #528 protects us from merging PRs that break TruffleRuby and (in
   some cases) JRuby.

   Fixed

   * Fix loading of net/imap for JRuby/TruffleRuby by @nevans in #530

    [33 lines not shown]
VersionDeltaFile
1.13+4-4net/ruby-net-imap/distinfo
1.19+3-3net/ruby-net-imap/Makefile
1.10+2-1net/ruby-net-imap/PLIST
+9-83 files

NetBSD/pkgsrc 9DUOCqEdoc CHANGES-2026

   doc: Updated misc/ruby-sprockets to 4.2.2nb1
VersionDeltaFile
1.1056+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 29qVCNYmisc/ruby-sprockets Makefile

   misc/ruby-sprockets: depends on ruby-rack2

   This pacakge is used with rails61 which requires rack 2.x.

   Bump PKGREVISION.
VersionDeltaFile
1.27+3-2misc/ruby-sprockets/Makefile
+3-21 files

NetBSD/pkgsrc qzCOMdWdoc CHANGES-2026

   doc: Updated mail/rspamd to 3.14.3
VersionDeltaFile
1.1055+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc WJE2dUkmail/rspamd distinfo Makefile

   doc/rspamd: update t. 3.14.2

   3.14.2 (2026-01-08)

   * [Feature] Add task registry for safe Lua task reference validation
   * [Feature] Add text quality analysis for PDF garbage filtering
   * [Feature] Implement basic PDF text extraction with UTF-16 detection
   * [Feature] Add extra tables API for clickhouse plugin
   * [Feature] Add confighelp documentation for RBL module
   * [Feature] WebUI: add backend API interaction error log
   * [Fix] Neural: by default include symbols with no flags
   * [Fix] Symcache: make FINE propagation deterministic
   * [Fix] URL: Prevent false positives from numeric IP regeneration in mailto
     URLs
   * [Fix] Settings: Allow spaces in selector regexps
   * [Fix] Prevent use-after-free in Redis callbacks after session cleanup
   * [Fix] Lua 5.4 compatibility in clickhouse and elastic plugins
   * [Fix] Use exact map lookup for DKIM key_table instead of glob
   * [Fix] Handle connection errors with io_uring backend in HTTP client
   * [Minor] Update public suffix list
VersionDeltaFile
1.73+4-4mail/rspamd/distinfo
1.134+2-3mail/rspamd/Makefile
1.40+2-1mail/rspamd/PLIST
1.19+0-0mail/rspamd/cfgfiles.mk
+8-84 files