NetBSD/pkgsrc KAJVSH4 — net/knot-resolver Makefile

   knot-resolver: Dependencies and SunOS compatibility have been improved, full SunOS compatibility is expected in the next version.
VersionDeltaFile
1.10+6-2net/knot-resolver/Makefile
+6-21 files

NetBSD/pkgsrc nT0hSvr — lang/rust Makefile

   rust: Remove unsupported linker argument on SunOS.

   It's not clear where this is coming from, potentially the bootstrap kit, but
   the failure is in stage1.  Just get rid of it regardless.
VersionDeltaFile
1.368+4-1lang/rust/Makefile
+4-11 files

NetBSD/pkgsrc rCw4xHK — doc CHANGES-2026

   Updated devel/glib2, x11/gtk4
VersionDeltaFile
1.6768+5-1doc/CHANGES-2026
+5-11 files

NetBSD/pkgsrc JD18TWj — x11/gtk4 PLIST Makefile

   gtk4: updated to 4.24.1

   Overview of Changes in 4.24.1, 01-10-2026

   * Bugs fixed:
     - search-entry: Needs extra touch to show OSK although it has focus
       (Guido Günther)
     - text-input: Preedit gets cleared due to text-change-cause(1) (Guido
       Günther)
     - GtkSvgWidget can't parse '@media' if it is not on a new line (Matthias
       Clasen)
     - !10264 gtkmain: Split out debug code
     - !10367 gtkgstsink: release GL context on disposal (Pierre Berube)
     - !10369 Post-release version bump (Matthias Clasen)
     - !10372 Fix typo in CONTRIBUTING.md (Michael Fohqul)
     - !10385 texthandle: fix transformation issues & relative movement (Florian
       "sp1rit"​)
     - !10393 Fix typo ('witten' should be 'written') (ReinoutS)
     - !10395 searchbar: Show OSK when search-mode gets enabled (Guido Günther)

    [15 lines not shown]
VersionDeltaFile
1.35+4-4x11/gtk4/distinfo
1.80+2-3x11/gtk4/Makefile
1.31+2-2x11/gtk4/PLIST
+8-93 files

NetBSD/pkgsrc USwLhk7 — devel/gdbus-codegen Makefile distinfo, devel/glib2 Makefile Makefile.common

   glib2 glib2-tools gdbus-codegen: updated to 2.90.1

   Overview of changes in GLib 2.90.1, 2026-10-06

   * Bugs fixed:
     - Add address and thread sanitizer scheduled CI job (Marco Trevisan
       (Treviño))
     - inotify: cancelling monitor through symlink alias removes watch used
       by still-active monitors (Kashyap Ekbote)
     - g_file_trash() returns FALSE without setting the GError when trashing
       a non-empty directory for `DT_UNKNOWN` nodes (Philip Withnall)
     - !5306 tools: Add another variant of an existing suppression to glib.supp
     - !5348 giochannel: Fix strncmp() off the end of the buffer
     - !5349 gvariant: Handle get_data_as_bytes() for corrupted variants
     - !5351 utils: Add missing ENUMERATOR_AVAILABLE_IN
     - !5352 po: Add Santali translation
     - !5353 rcbox: Turn assertion into error
     - !5355 gdbusauthmechanismsha1: Don't split into too many tokens
     - !5356 logging: Don't stack overflow with too many fields

    [27 lines not shown]
VersionDeltaFile
1.172+10-9devel/glib2/PLIST
1.352+4-4devel/glib2/distinfo
1.65+4-4devel/gdbus-codegen/distinfo
1.135+2-2devel/glib2/Makefile.common
1.34+2-2devel/gdbus-codegen/Makefile
1.320+1-2devel/glib2/Makefile
+23-236 files

NetBSD/pkgsrc 0LTGRcr — doc CHANGES-2026

   Updated audio/strawberry, misc/py-tibs
VersionDeltaFile
1.6767+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc JGwoTVz — misc/py-tibs Makefile distinfo

   py-tibs: updated to 2.0.2

   2.0.2

   * A `memoryview` is now read as its raw bytes, exactly as `bytes(mv)` gives
     them. Views with a format other than `'B'` used to give the wrong bytes or
     raise an exception.
   * Reading a `memoryview` is now a single copy of its buffer, so it is as fast
     as reading `bytes`.
VersionDeltaFile
1.11+4-4misc/py-tibs/distinfo
1.11+2-2misc/py-tibs/Makefile
+6-62 files

NetBSD/pkgsrc MO7lJpR — doc CHANGES-2026

   doc: Updated net/mitmproxy to 12.2.3
VersionDeltaFile
1.6766+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 9jel0E6 — net/mitmproxy Makefile distinfo

   mitmproxy: Update to 12.2.3

   Changes:
   12.2.3
   - Reduce generated leaf certificate validity from 199 to 197 days so the 2-day
     `notBefore` backdate remains below Chromium's 200-day limit.
   - Fixed a bug where mitmweb would not pick up its XSRF cookie.
   - Fix `authority and subject key identifier mismatch` errors when mitmproxy
     is configured with a custom CA whose SubjectKeyIdentifier was not derived
     as SHA-1 of the public key.
   - Fix `IndexError` in `is_mostly_bin` when exporting flows to HAR with payloads
     that have a UTF-8 continuation byte at the 100-byte cutoff.

   12.2.2
   - Fix LDAP injection vulnerability CVE-2026-40606.
   - Reduce `CERT_EXPIRY` to 199 days.
   - Switch all content-encoding compression algorithms to use fastest
     settings by default.
     This significantly improves addon runtime performance when assigning

    [20 lines not shown]
VersionDeltaFile
1.38+4-4net/mitmproxy/distinfo
1.28+4-4net/mitmproxy/PLIST
1.59+2-2net/mitmproxy/Makefile
+10-103 files

NetBSD/pkgsrc Mzk2LQ2 — audio/strawberry distinfo Makefile

   strawberry: updated to 1.2.31

   1.2.31

   Bugfixes:

   Fixed shuffle skipping tracks and repeating tracks already played, when adding tracks, removing the current track, choosing a track, turning on shuffle while playing or repeating the playlist
   Fixed going back to the previous track changing the shuffle order
   Fixed album and grouping shuffle skipping albums or groupings when choosing a track
   Fixed inside album shuffle and album repeat not finding the next track on the same album after removing the current track
   Fixed track repeat playing the wrong track after removing the current track
   Fixed moving several tracks that are not next to each other to another playlist removing the wrong tracks from the source playlist
   Fixed undo right after startup removing the restored playlist
   Fixed undo after repopulating a dynamic playlist acting on the wrong tracks
   Fixed "play now" playing the wrong track when inserting tracks into an automatically sorted playlist
   Fixed tracks copied to another playlist, or added to the same playlist again, being shared between the playlists, which broke updating and saving the remaining tracks when one of them was removed
   Fixed OpenTidal cover provider search (API changed)
   Fixed songlyrics.com and letras.mus.br lyrics being blocked
   (Windows) Fixed unstable ASIO playback

    [19 lines not shown]
VersionDeltaFile
1.108+11-10audio/strawberry/Makefile
1.39+4-4audio/strawberry/distinfo
+15-142 files

NetBSD/pkgsrc YAb1VhS — doc CHANGES-2026

   doc: Updated net/gobgp to 4.10.0
VersionDeltaFile
1.6765+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc MGhn69Y — net/gobgp Makefile go-modules.mk

   gobgp: Update to 4.10.0

   da824d9 GoBGP 4.10.0
   723f98c feat: add multi-topology IDs to link descriptor API
   a15f873 server: apply AS path option updates without resetting sessions
   03eaa74 server: drop the queued outgoing messages on a state change
   9470f3d server: drain an InfiniteChannel until its output closes
   056eb2e table: don't panic on an rpki condition for an unvalidated path
   55fa98f table: skip rejected paths in DropStale and MarkLLGRStaleOrDrop
   e37cdd8 table: skip rejected paths when building Drop withdrawals
   c4d9e77 server: move the ingress loop checks out of the handleUpdate loop
   9b49e3f bfd: use transport local address for BFD
   0cc5883 packet/bgp: reject an OPEN message that carries AS 0
   e59efa7 docs: say that a neighbor setting wins over the peer group
   05ba735 server: make a peer group update reach the peers in the group
   b2a5ee1 server: keep the neighbor configuration as the caller passed it
   9041a8c config/oc: stop forcing peer-as and min-adv-interval from the group
   3e9288d fix(metrics): stop reporting peer gauges as counters
   7ad257a table: do not emit an empty AS_PATH segment when merging AS4_PATH

    [90 lines not shown]
VersionDeltaFile
1.2+34-34net/gobgp/distinfo
1.2+10-10net/gobgp/go-modules.mk
1.2+2-2net/gobgp/Makefile
+46-463 files

NetBSD/pkgsrc BX3VnmJ — doc CHANGES-2026

   Updated time/py-pytimeparse, devel/py-test-mock
VersionDeltaFile
1.6764+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc qeJsviH — devel/py-test-mock Makefile distinfo

   py-test-mock: updated to 3.16.0

   3.16.0

   * Fixed ``duplicate_iterators=True`` for async functions spied with ``mocker.spy``.
   * Fixed async mock assertion introspection to use awaited arguments instead of the latest call's arguments.
   * ``mocker.resetall(return_value=True, side_effect=True)`` now also applies to non-callable mocks, such as those returned by ``mocker.create_autospec(SomeClass, instance=True)``. Previously both arguments were silently ignored for them.
   * Added ``SpyType`` for annotating ``mocker.spy`` results.
   * Dropped support for EOL Python 3.9.
   * Removed handling of ``RuntimeError: stop called on unstarted patcher``, which can no longer occur in the supported Python versions.
   * Added support for Python 3.15.
VersionDeltaFile
1.31+4-4devel/py-test-mock/distinfo
1.36+3-3devel/py-test-mock/Makefile
+7-72 files

NetBSD/pkgsrc 2WSlNnL — time/py-pytimeparse distinfo Makefile

   py-pytimeparse: updated to 1.1.9

   1.1.9

   Py3 only
   slurm day clock
   remove pipe character from sign regex
   remove codecs.open
   guard against malformed floats and fix interpret-as-minutes bug
VersionDeltaFile
1.2+9-5time/py-pytimeparse/PLIST
1.5+5-4time/py-pytimeparse/Makefile
1.4+4-4time/py-pytimeparse/distinfo
+18-133 files

NetBSD/pkgsrc PrLNHgQ — doc CHANGES-2026

   doc: Updated net/ddns-route53 to 2.16.0
VersionDeltaFile
1.6763+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc KK9xnbV — doc CHANGES-2026

   Updated www/py-django-filter, www/py-djangorestframework
VersionDeltaFile
1.6762+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc krPSUef — net/ddns-route53 Makefile go-modules.mk

   ddns-route53: Update to 2.16.0

   Preserve WAN provider failures after successful fallback by @crazy-max in #1440
   Avoid reusing log events for WAN provider failures by @bensynapse in #1437
   Simplify shutdown lifecycle by @crazy-max in #1377
   Add support for OpenBSD architectures by @atmosx in #1382
   Bump github.com/alecthomas/kong to 1.16.1 in #1428
   Bump github.com/aws/aws-sdk-go-v2 dependencies in #1373
    github.com/aws/aws-sdk-go-v2 to 1.47.1
    github.com/aws/aws-sdk-go-v2/config to 1.33.6
    github.com/aws/aws-sdk-go-v2/credentials to 1.20.6
    github.com/aws/aws-sdk-go-v2/service/route53 to 1.70.1
   Bump github.com/crazy-max/gonfig to 0.9.0 by @crazy-max in #1448
   Bump github.com/dromara/carbon/v2 to 2.6.18 in #1436
   Bump github.com/go-playground/validator/v10 to 10.30.5 in #1434
   Bump github.com/rs/zerolog to 1.35.1 in #1375
   Bump github.com/stretchr/testify to 1.12.1 in #1431
   Bump golang.org/x/crypto to 0.52.0 in #1413
   Bump golang.org/x/sys to 0.48.0 in #1433
VersionDeltaFile
1.3+166-175net/ddns-route53/distinfo
1.3+54-57net/ddns-route53/go-modules.mk
1.27+2-3net/ddns-route53/Makefile
+222-2353 files

NetBSD/pkgsrc x72KnWR — www/py-djangorestframework Makefile distinfo

   py-djangorestframework: updated to 3.18.3

   3.18.3

   Bug fixes

   Revert return value of order_by_precedence from 3.18.1


   3.18.2

   Security

   GHSA-33wh-fxxf-88vv: Harden content negotiation against large Accept headers
   GHSA-3547-9m27-7rxg: Refuse non-text encoding charsets
   GHSA-xw6w-gcfp-cf8m: Make TokenProxy deletion actually delete the token

   Features


    [6 lines not shown]
VersionDeltaFile
1.36+4-4www/py-djangorestframework/distinfo
1.49+2-2www/py-djangorestframework/Makefile
+6-62 files

NetBSD/pkgsrc GCi5lVV — www/py-django-filter Makefile distinfo

   py-django-filter: updated to 26.2

   26.2 (2026-10-03)

   * Added testing against Python 3.15.

   * Dropped support for Python 3.10.

   * LinkWidget will now conditionally escape provided label text.

     Filter choices are under developer control, and applications populating them
     from user-supplied values, including via ``AllValuesFilter``, must filter
     those appropriately, as always. Nonetheless, escaping labels by default
     serves as defense-in-depth hardening. Apply ``mark_safe()`` to labels
     intended to contain HTML.
VersionDeltaFile
1.17+4-4www/py-django-filter/distinfo
1.23+2-3www/py-django-filter/Makefile
+6-72 files

NetBSD/pkgsrc WgoVMvP — doc CHANGES-2026

   doc: Updated devel/nss to 3.131
VersionDeltaFile
1.6761+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 3nR1Qzv — devel/nss Makefile distinfo

   nss: update to 3.131.

   Bug 2078438 remove unused private pkcs12, pkcs7, and smime functions.
   Bug 2070738 Fix generating nss.pc with system-nspr.
   Bug 2066048 replace sslSecurityInfo peerCert with peerCertDER.
   Bug 2067244 remove support for inherited DSA parameters in libssl.
   Bug 2017995 Fix issues with Unwrapping keys using tokens in FIPS mode.
   Bug 2069886 remove Windows-only AES-CTR implementation.
   Bug 2069887 improve algorithm policy enforcement for ML-DSA.
   Bug 2064512 reject non-RFC 8410 curve OIDs when encoding an X25519 or Ed25519 SubjectPublicKeyInfo.
   Bug 2076212 Clear freed CMS members in the destructors.
   Bug 2076212 Release the previous signer certificate when re-verifying a PKCS#7 signature.
   Bug 2076212 Make SEC_PKCS7DecoderAbort fail the decode.
   Bug 2076212 Fail closed after an incomplete PKCS#12 decode.
   Bug 2076240 remove unused NSSCryptoContext and NSSTrustDomain functions.
   Bug 1993638 can’t import eddsa .p12 from OpenSSL.
   Bug 2055638 fix clang format.
   Bug 2072045 pk12util fails to import private key into SoftHSM token despite initialized slot and valid PKCS#12 file.
   Bug 2075580 p7content: open output file in binary mode.

    [19 lines not shown]
VersionDeltaFile
1.220+4-4devel/nss/distinfo
1.305+2-2devel/nss/Makefile
+6-62 files

NetBSD/pkgsrc xGR7zbG — doc TODO CHANGES-2026

   doc: Updated net/samba4 to 4.25.0
VersionDeltaFile
1.28114+1-2doc/TODO
1.6760+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc guIgPlt — net/samba4 Makefile PLIST, net/samba4/patches patch-nsswitch_winbind__nss__netbsd.c patch-lib_tsocket_tsocket__bsd.c

   samba: update to 4.25.0.

   NEW FEATURES/CHANGES
   ====================

   SMB3 Persistent Handles (Experimental)
   --------------------------------------

   Samba now includes experimental support for SMB3 Persistent Handles,
   a fundamental building block for Transparent Failover.

   Persistent Handles allow SMB clients to reconnect after a server
   restart or outage while retaining valid file handles. Samba persists
   all necessary handle state to durable on-disk storage so that open
   files can be reconstructed when clients reconnect. This enables
   applications that depend on uninterrupted file access, such as virtual
   machine storage and clustered database workloads, to tolerate
   temporary server failures without having to reopen files.


    [200 lines not shown]
VersionDeltaFile
1.4+7-7net/samba4/patches/patch-nsswitch_winbind__nss__netbsd.c
1.4+7-7net/samba4/patches/patch-lib_tsocket_tsocket__bsd.c
1.132+6-6net/samba4/distinfo
1.66+5-1net/samba4/PLIST
1.226+2-3net/samba4/Makefile
+27-245 files

NetBSD/pkgsrc jDgwdOq — doc CHANGES-2026

   doc: Updated archivers/7-zip to 26.04
VersionDeltaFile
1.6759+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc PIisnp7 — archivers/7-zip Makefile distinfo

   7-zip: update to 26.04.

   - Some bugs and vulnerabilities were fixed.
VersionDeltaFile
1.14+4-4archivers/7-zip/distinfo
1.17+3-3archivers/7-zip/Makefile
+7-72 files

NetBSD/pkgsrc 2KUCQyD — doc CHANGES-2026

   doc: Updated wayland/xwayland to 24.1.14
VersionDeltaFile
1.6758+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 2pwTkON — wayland/xwayland Makefile distinfo

   xwayland: update to 24.1.14.

   This release contains the fixes for the issues reported in today's
   security advisory:
   https://lists.x.org/archives/xorg-announce/2026-October/003747.html

   * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free
   * CVE-2026-93515: Present Extension Cross-Window Notify Use-After-Free
   * CVE-2026-93516: XInput Passive Grab modifierDevice Use-After-Free
   * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow
   * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation
   * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow
   * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write
   * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow
   * CVE-2026-93522: Glamor CopyArea CPU-FBO Heap Buffer Overflow
   * CVE-2026-93523: XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write
   * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read
   * CVE-2026-93536: GestureBuildSprite Use-After-Free
VersionDeltaFile
1.6+4-4wayland/xwayland/distinfo
1.6+2-2wayland/xwayland/Makefile
+6-62 files

NetBSD/pkgsrc LDmgXRr — doc CHANGES-2026

   doc: Updated x11/modular-xorg-xephyr to 21.1.25
VersionDeltaFile
1.6757+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc y5WFrGg — doc CHANGES-2026

   doc: Updated x11/modular-xorg-server to 21.1.25
VersionDeltaFile
1.6756+2-1doc/CHANGES-2026
+2-11 files