NetBSD/pkgsrc 5E0IgSDdoc CHANGES-2026

   doc: Updated x11/libXfont2 to 2.0.9
VersionDeltaFile
1.4983+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 290SYqGx11/libXfont2 Makefile distinfo

   libXfont2: update to 2.0.9.

   This release contains the fixes for the issues reported in today's security advisory:
   https://lists.x.org/archives/xorg-announce/2026-August/003734.html

   - CVE-2026-59679: Font Server Client encoding Out-Of-Bounds Read/Write
   - CVE-2026-44950: Font Server Client Cumulative Glyph Data Heap Buffer Overflow

   Additionally, it changes a build-time default. Previously fontserver support
   was compiled in by default unless --disable-fc was provided at configure time.
   The new default is *disabled by default* unless --enable-fc is provided at
   configure time. Doing so protects us from future fontserver-connection related
   issues. Fontservers have been deprecated for many years and the vast majority
   of users will not notice this changed default (Debian has built with
   --disable-fc for years).
VersionDeltaFile
1.12+4-4x11/libXfont2/distinfo
1.21+2-2x11/libXfont2/Makefile
+6-62 files

NetBSD/pkgsrc Rho217bdoc CHANGES-2026

   Removed net/py-ipaddress, net/py-IP
VersionDeltaFile
1.4982+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc LQwLI5Lnet Makefile, net/py-IP DESCR distinfo

   py-IP: removed; use Python ipaddress module
VersionDeltaFile
1.1638+1-2net/Makefile
1.12+1-1net/py-IP/distinfo
1.8+1-1net/py-IP/PLIST
1.27+1-1net/py-IP/Makefile
1.2+0-0net/py-IP/DESCR
+4-55 files

NetBSD/pkgsrc QpBRtbSnet Makefile, net/py-ipaddress DESCR distinfo

   py-ipaddress: removed; included in Python 3.3
VersionDeltaFile
1.1637+1-2net/Makefile
1.13+1-1net/py-ipaddress/distinfo
1.2+1-1net/py-ipaddress/PLIST
1.14+1-1net/py-ipaddress/Makefile
1.2+0-0net/py-ipaddress/DESCR
+4-55 files

NetBSD/pkgsrc NigHynMdoc CHANGES-2026

   Removed math/py-cdecimal, net/py-GeoIP
VersionDeltaFile
1.4981+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc HJCv5yjnet Makefile, net/py-GeoIP DESCR distinfo

   py-GeoIP: removed; archived upstream; use py-geoip2 instead
VersionDeltaFile
1.1636+1-2net/Makefile
1.10+1-1net/py-GeoIP/distinfo
1.5+1-1net/py-GeoIP/PLIST
1.21+1-1net/py-GeoIP/Makefile
1.2+0-0net/py-GeoIP/DESCR
+4-55 files

NetBSD/pkgsrc VD7TYMFmath Makefile, math/py-cdecimal DESCR distinfo

   py-cdecimal: removed; obsoleted by the builtin decimal in Python 3.3
VersionDeltaFile
1.645+1-2math/Makefile
1.5+1-1math/py-cdecimal/distinfo
1.4+1-1math/py-cdecimal/PLIST
1.13+1-1math/py-cdecimal/Makefile
1.2+0-0math/py-cdecimal/DESCR
+4-55 files

NetBSD/pkgsrc 68QTyaTdoc CHANGES-2026

   Updated devel/py-faker, textproc/py-fastjsonschema
VersionDeltaFile
1.4980+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc zY5OXiPtextproc/py-fastjsonschema Makefile PLIST

   py-fastjsonschema: updated to 2.22.1

   2.22.1 (2026-07-27)

   * Fixed min Python version

   2.22.0 (2026-07-25)

   * Fixed IPv4 validation (rejecting leading zeros)
   * Fixed empty items and patternProperties
   * Fixed protection from deeply nested schemas potentially causing denial of service
   * Fixed comparing values for enum and const validations
   * Fixed resolving plain-name ref fragments
   * Fixed not throwing when unknown format is used
   * Fixed compilation of not, if/then/else, items, additionalItems, propertyNames and schema dependencies when a subschema generates no validation code
   * Added option to get all the errors (set `fast_fail` to `False`)
   * Added basic type hints
   * Added support of duration and uuid formats from draft-2019
VersionDeltaFile
1.13+4-4textproc/py-fastjsonschema/distinfo
1.5+4-1textproc/py-fastjsonschema/PLIST
1.16+2-2textproc/py-fastjsonschema/Makefile
+10-73 files

NetBSD/pkgsrc gygq9vxdevel/py-faker Makefile distinfo

   py-faker: updated to 40.36.0

   40.36.0

   * Fix: correct `uk_UA` `bban_format` to 6 digits + 19 letters so `iban()` generates valid Ukrainian IBANs. Thanks @CedricConday.

   40.35.0

   * Fix: add correct `bban_format` so `ru_RU` `iban()` generates valid Russian IBANs. Thanks @CedricConday.

   40.34.0

   * Fix: correct BBAN length so `da_DK` `iban()` generates valid Danish IBANs. Thanks @CedricConday.

   40.33.2

   * Validate `positive=True` against a non-positive `max_value` in `pydecimal`. Thanks @Sreekant13.

   40.33.1

    [6 lines not shown]
VersionDeltaFile
1.114+4-4devel/py-faker/distinfo
1.120+2-2devel/py-faker/Makefile
+6-62 files

NetBSD/pkgsrc KkY8sy2mail/py-mailmanclient Makefile PLIST

   py-mailmanclient: converted to wheel.mk
VersionDeltaFile
1.2+6-6mail/py-mailmanclient/PLIST
1.3+4-4mail/py-mailmanclient/Makefile
+10-102 files

NetBSD/pkgsrc IZkA6UMmail/py-postfix-mta-sts-resolver version.mk PLIST

   py-postfix-mta-sts-resolver: converted to wheel.mk + cleanup
VersionDeltaFile
1.14+12-21mail/py-postfix-mta-sts-resolver/Makefile
1.3+8-8mail/py-postfix-mta-sts-resolver/PLIST
1.2+1-1mail/py-postfix-mta-sts-resolver/version.mk
+21-303 files

NetBSD/pkgsrc RYXoa9odoc CHANGES-2026

   Updated mail/py-flufl.bounce, devel/py-flufl.lock
VersionDeltaFile
1.4979+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc ZJLTWWHdevel/py-flufl.lock Makefile distinfo

   py-flufl.lock: updated to 9.1.0

   9.1.0 (2026-04-24)

   * Small refactoring to provide a hook for custom synchronization of clocks in subclasses. (:GL:`40`)
   * Switch to `pyrefly <https://pyrefly.org/>`_ for type checking.
VersionDeltaFile
1.9+4-4devel/py-flufl.lock/distinfo
1.16+2-3devel/py-flufl.lock/Makefile
+6-72 files

NetBSD/pkgsrc cobfTM4mail/py-flufl.bounce distinfo Makefile

   py-flufl.bounce: updated to 5.0.1

   5.0.1 (2026-05-21)

   * Fix a false recognition of Microsoft bounces from the Groupwise detector. :GL:`16`
     Found and fixed by Mark Sapiro.

   5.0 (2026-05-20)

   * Major project management modernization.
   * Add Mark as a named co-owner.
   * Drop Python 3.9, add Python 3.13, 3.14, and 3.15.
   * Added recognition for a non-compliant Earthlink DSN.
   * Fixed a long-standing bug in the Caiwireless detector that returned a set of individual address
     characters instead of the bouncing address itself, and added a test exercising the previously
     buggy return path.
   * Replaced deprecated/removed pkg_resources.
   * Replaced the ``zope.interface`` dependency with ``typing.Protocol``; the ``IBounceDetector``
     marker interface has been renamed to ``BounceDetector``.  **This is a backwards incompatible

    [5 lines not shown]
VersionDeltaFile
1.3+5-148mail/py-flufl.bounce/PLIST
1.9+8-9mail/py-flufl.bounce/Makefile
1.5+4-4mail/py-flufl.bounce/distinfo
+17-1613 files

NetBSD/pkgsrc SpdnK0Kmail/py-authres Makefile PLIST

   py-authres: converted to wheel.mk
VersionDeltaFile
1.4+6-6mail/py-authres/PLIST
1.8+5-3mail/py-authres/Makefile
+11-92 files

NetBSD/pkgsrc 0nvlSsudevel/py-cffi Makefile

   py-cffi: update test status
VersionDeltaFile
1.65+4-3devel/py-cffi/Makefile
+4-31 files

NetBSD/pkgsrc Ne73LhYdoc CHANGES-2026

   doc: Updated archivers/7-zip to 26.02nb1
VersionDeltaFile
1.4978+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc M5ZgZEMarchivers/7-zip Makefile

   7-zip: honor LDFLAGS

   Remove hack.

   Bump PKGREVISION.
VersionDeltaFile
1.15+4-7archivers/7-zip/Makefile
+4-71 files

NetBSD/pkgsrc NqgRXEqbiology/azara Makefile, biology/hisat2 Makefile

   *: add LDFLAGS overide that was previously in mk

   This is a workaround and should be fixed properly per-package - they
   should use the pkgsrc LDFLAGS, but this restores what happened
   before the mk/ cleanup.

   Fixes relro build for packages that do not honor LDFLAGS.

   Package list provided by mef@, thanks!

   Workaround commit requested by bsiegert on tech-pkg.
VersionDeltaFile
1.40+7-2databases/xsqlmenu/Makefile
1.37+7-1comms/xtel/Makefile
1.102+7-1comms/mgetty+sendfax/Makefile
1.84+7-1comms/fidogate/Makefile
1.14+7-1biology/hisat2/Makefile
1.20+7-1biology/azara/Makefile
+42-7330 files not shown
+2,351-337336 files

NetBSD/pkgsrc JarWDK6doc CHANGES-2026

   Updated devel/py-cffi, net/py-test-remotedata, net/py-scp
VersionDeltaFile
1.4977+4-1doc/CHANGES-2026
+4-11 files

NetBSD/pkgsrc dZwGlCYnet/py-scp Makefile distinfo

   py-scp: updated to 0.16.1

   0.16.1 (2026-07-29)

   - Fix missing import for `paramiko`, causing exception handling to fail in close()
VersionDeltaFile
1.17+4-4net/py-scp/distinfo
1.22+2-2net/py-scp/Makefile
+6-62 files

NetBSD/pkgsrc rXrfn9Onet/py-test-remotedata distinfo PLIST

   py-test-remotedata: updated to 0.4.2

   0.4.2 (2026-08-03)

   - Versions of Python <3.9 are no longer supported.
VersionDeltaFile
1.4+7-12net/py-test-remotedata/Makefile
1.2+7-8net/py-test-remotedata/PLIST
1.3+4-4net/py-test-remotedata/distinfo
+18-243 files

NetBSD/pkgsrc UVDuo0Jdevel/py-cffi Makefile distinfo

   py-cffi: updated to 2.1.1

   2.1.1

   * Minimize internal Python API usage for interpreter and thread state sampling where possible.
     Avoids breaking ABI change in Python >= 3.15.0b4.
VersionDeltaFile
1.54+4-4devel/py-cffi/distinfo
1.64+2-2devel/py-cffi/Makefile
+6-62 files

NetBSD/pkgsrc f1u4xakdoc CHANGES-2026

   doc: Updated net/tailscale to 1.102.1
VersionDeltaFile
1.4976+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc eyOmppGnet/tailscale Makefile go-modules.mk

   tailscale: update to 1.102.1

   - tailscaled_serve_outbound_bytes_total and
     tailscaled_serve_inbound_bytes_total client metrics report bytes
     sent to and received from peers on Tailscale Serve connections for
     Tailscale Services.
   - The tailscale get CLI command returns the current node's
     preferences.
   - The tailscale whoami CLI command displays information about the
     current user and device.
   - The tailscale service list CLI command displays Tailscale Services
     visible to the current node.
   - Node additions and removals are processed in constant time,
     significantly reducing CPU usage on large tailnets.
   - Tailscale Funnel domains use TLS-ALPN-01 for faster HTTPS
     certificate renewals.
   - Deprecated formats for 4via6 MagicDNS names are no longer available
     to use.
   - TLS certificates on idle servers proactively auto-renew in the

    [48 lines not shown]
VersionDeltaFile
1.10+418-280net/tailscale/distinfo
1.6+139-93net/tailscale/go-modules.mk
1.27+3-3net/tailscale/Makefile
+560-3763 files

NetBSD/pkgsrc mOChE2yemulators/suse15_linux Makefile.common

   suse15_linux: note that Makefile.common used by suse15_gcc12
VersionDeltaFile
1.3+2-1emulators/suse15_linux/Makefile.common
+2-11 files

NetBSD/pkgsrc HWiP6vedoc CHANGES-2026

   doc: Updated x11/mlterm to 3.9.5nb1
VersionDeltaFile
1.4975+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc uJYnE3Mx11/mlterm distinfo Makefile, x11/mlterm/patches patch-uitoolkit_xlib_ui__window.c

   mlterm: pull upstream window handling fixes

   Fix a 3.9.5 regression that sets window manager hints on child windows.
   Also move input focus handling for multiple input windows from FocusIn
   to WM_TAKE_FOCUS.

   Bump PKGREVISION.
VersionDeltaFile
1.5+154-47x11/mlterm/patches/patch-uitoolkit_xlib_ui__window.c
1.105+2-1x11/mlterm/distinfo
1.214+2-1x11/mlterm/Makefile
+158-493 files