NetBSD/pkgsrc bIK4AbH — www/basilisk distinfo Makefile, www/basilisk/patches patch-platform_security_nss_lib_ckfw_builtins_certdata.txt

   basilisk: Remove compromised CAs from the built-in cert store.

   PR security/60908
VersionDeltaFile
1.1+395-0www/basilisk/patches/patch-platform_security_nss_lib_ckfw_builtins_certdata.txt
1.14+2-2www/basilisk/Makefile
1.7+2-1www/basilisk/distinfo
+399-33 files

NetBSD/pkgsrc W35ArMx — www/palemoon distinfo Makefile, www/palemoon-gtk3 Makefile

   palemoon: Update CA store to fix PR security/60908
VersionDeltaFile
1.1+6,910-0www/palemoon/patches/patch-platform_security_nss_lib_ckfw_builtins_certdata.txt
1.50+2-1www/palemoon/distinfo
1.57+2-1www/palemoon/Makefile
1.11+2-1www/palemoon-gtk3/Makefile
+6,916-34 files

NetBSD/pkgsrc IJL9kZc — www/jira-cli Makefile, www/miniflux Makefile

   *: Revbump for go126, go127. Ticket #7311
VersionDeltaFile
1.38.2.1+2-2www/shoutrrr/Makefile
1.26.2.1+2-2www/reader/Makefile
1.96.2.1+2-2www/pup/Makefile
1.33.2.1+2-2www/mycorrhiza/Makefile
1.26.2.1+2-2www/miniflux/Makefile
1.66.2.1+2-2www/jira-cli/Makefile
+12-1214 files not shown
+40-3820 files

NetBSD/pkgsrc JhbHBNd — doc TODO CHANGES-2026

   doc: Updated devel/topgit to 0.19.14
VersionDeltaFile
1.28215+1-2doc/TODO
1.7168+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 67b4fJR — devel/topgit distinfo Makefile

   topgit: update to 0.19.14

   Many many releases, if curious, look here:
   https://github.com/mackyle/topgit/releases
VersionDeltaFile
1.3+47-1devel/topgit/PLIST
1.5+8-8devel/topgit/Makefile
1.5+4-4devel/topgit/distinfo
+59-133 files

NetBSD/pkgsrc Csqalei — lang/go version.mk, lang/go126 distinfo PLIST

   Pullup ticket #7311 - requested by bsiegert
   lang/go126: Security fix
   lang/go127: Security fix

   Revisions pulled up:
   - lang/go/version.mk                                            1.257-1.258
   - lang/go126/PLIST                                              1.9
   - lang/go126/distinfo                                           1.10-1.11
   - lang/go127/PLIST                                              1.3
   - lang/go127/distinfo                                           1.3-1.4

   ---
      Module Name:    pkgsrc
      Committed By:   bsiegert
      Date:           Tue Oct 13 18:36:06 UTC 2026

      Modified Files:
               pkgsrc/lang/go: version.mk
               pkgsrc/lang/go126: PLIST distinfo

    [291 lines not shown]
VersionDeltaFile
1.2.2.1+18-0lang/go127/PLIST
1.8.2.1+9-0lang/go126/PLIST
1.2.2.1+4-4lang/go127/distinfo
1.9.2.1+4-4lang/go126/distinfo
1.256.2.1+3-3lang/go/version.mk
+38-115 files

NetBSD/pkgsrc zRVh9z1 — doc CHANGES-2026

   doc: Updated net/powerdns-recursor to 5.4.8
VersionDeltaFile
1.7167+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc fGqSRGL — net/powerdns-recursor cargo-depends.mk Makefile

   powerdns-recursor: Update to 5.4.8

   Released: 21st of October 2026

   Bug Fixes
   Fix PowerDNS Security Advisory 2026-12 for PowerDNS Recursor: Multiple Issues
   References: pull request 18197
VersionDeltaFile
1.56+3-3net/powerdns-recursor/distinfo
1.72+1-1net/powerdns-recursor/Makefile
1.9+0-0net/powerdns-recursor/cargo-depends.mk
+4-43 files

NetBSD/pkgsrc wXfjmj1 — doc TODO CHANGES-2026

   doc: Updated x11/unicode-screensaver to 0.5.2
VersionDeltaFile
1.28214+1-2doc/TODO
1.7166+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc WRQa5UF — x11/unicode-screensaver distinfo Makefile, x11/unicode-screensaver/patches patch-configure

   unicode-screensaver: update to 0.5.2

   There is no update information provided.
VersionDeltaFile
1.1+15-0x11/unicode-screensaver/patches/patch-configure
1.7+5-4x11/unicode-screensaver/distinfo
1.16+5-4x11/unicode-screensaver/Makefile
+25-83 files

NetBSD/pkgsrc XyIQR1M — doc CHANGES-2026

   doc: Updated net/powerdns to 5.1.5nb1
VersionDeltaFile
1.7165+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc zxYVmFu — net/powerdns Makefile.common distinfo

   powerdns: Update to 5.1.5

   Released: 21st of October 2026
   This is release 5.1.5 of the Authoritative Server. It contains bug fixes, as well as a minor feature and a security fix.
   Please review the Upgrade Notes before upgrading from versions < 5.1.x.

   Improvements
   api: allow forced update for EXTEND and DELETE zone patch operations
   References: pull request 18104
   report remote in “unable to get SOA” messages
   References: pull request 18131
   correctly stop the Lua checker thread when exiting
   References: pull request 18134

   Bug Fixes
   SQL: stricter listSubZones operation
   References: pull request 18105
   rest-api: fix signedness bug in json data normalization
   References: pull request 18106

    [14 lines not shown]
VersionDeltaFile
1.63+3-3net/powerdns/distinfo
1.52+1-1net/powerdns/Makefile.common
+4-42 files

NetBSD/pkgsrc ltIinku — net/knot-resolver Makefile

   knot-resolver: Bump PKGREVISION due knot upgrade.
VersionDeltaFile
1.12+2-2net/knot-resolver/Makefile
+2-21 files

NetBSD/pkgsrc FRoz0kR — doc CHANGES-2026

   doc: Updated net/knot to 3.6.2
VersionDeltaFile
1.7164+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc r5NgSDb — net/knot buildlink3.mk Makefile

   knot: Update to 3.6.2

   Improvements:
   knotd: added MONOTONIC_USEC to sd_notify() for systemd's notify-reload service type

   Bugfixes:
   knotd: ZONEMD verification omits regular nodes that collide with NSEC3 ones (Thanks to Joshua Rogers)
   knotd: catalog updates can purge non-catalog zones with conflicting names (Thanks to Joshua Rogers)
   knotd: blocking transfer freeze operation returns prematurely
   libknot: connection table exhaustion during QUIC sweep
   libknot: uncontrolled compression-pointer traversal in DNS message parsing
   libknot: unbounded write-backpressure busy-spin in the DoT send path
   tests: build fails if --disable-daemon is specified
VersionDeltaFile
1.62+3-3net/knot/distinfo
1.6+1-1net/knot/buildlink3.mk
1.106+1-1net/knot/Makefile
+5-53 files

NetBSD/pkgsrc hGtzkWh — doc TODO CHANGES-2026

   doc: Updated misc/tmux to 3.8
VersionDeltaFile
1.28213+1-2doc/TODO
1.7163+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc lc3dlSU — misc/tmux Makefile distinfo

   tmux: update to 3.8

   * Many improvements to floating panes:
     - new-pane and split-window can now set the title with -T and
       border lines with -B, and new-pane -W waits for the pane command
       to exit;
     - dragging with Ctrl now creates a new floating pane;
     - modal panes may be created with new-pane -O; a window can have
       one modal pane and it prevents interaction with the other panes
       while it is active. -C closes the pane when the mouse is clicked
       outside it and -K sends all keys, including the prefix key, to
       the pane. -D closes the modal pane with Escape or C-c. A modal
       pane is now used for the editor in buffer mode;
     - new-pane -A creates a floating pane which remains above a zoomed
       pane; modal panes do this by default;
     - move-pane and resize-pane can now move and resize floating panes,
       including mouse dragging;
     - split-window in a floating pane creates a new floating pane that
       does not overlap the active pane, if possible;

    [202 lines not shown]
VersionDeltaFile
1.64+4-4misc/tmux/distinfo
1.71+2-2misc/tmux/Makefile
+6-62 files

NetBSD/pkgsrc LZLyMaf — doc TODO CHANGES-2026

   doc: Updated net/netatalk4 to 4.6.1
VersionDeltaFile
1.28212+1-2doc/TODO
1.7162+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc crWHlJd — net/netatalk4 Makefile PLIST, net/netatalk4/patches patch-meson.build patch-config_meson.build

   net/netatalk4 -- update to v4.6.1

   v4.6.1 - What's Changed

       update CONTRIBUTORS.md for the v4.6 release cycle by @rdmark in #3310
       revise contributors with GitHub handles by @rdmark in #3317
       compat: add header so strlcpy is defined on platforms with older glibc
        by @nutzman in #3318
       ci: generate and publish afpd code coverage statistics
        by @rdmark in #3319
       distrib: fix test suite flag checks in container entrypoint
        by @rdmark in #3326
       doc: programmatically generate TOC index for manpages
        by @rdmark in #3322
       doc: Japanese localization of the fce_ev_script.8 man page
        by @rdmark in #3325
       docs: expand workflow environment variables in compile instructions
        by @rdmark in #3323
       afpd: harden legacy FinderInfo symlink handling

    [78 lines not shown]
VersionDeltaFile
1.6+10-13net/netatalk4/patches/patch-config_meson.build
1.9+11-11net/netatalk4/patches/patch-meson.build
1.18+6-6net/netatalk4/distinfo
1.11+5-2net/netatalk4/PLIST
1.41+2-3net/netatalk4/Makefile
+34-355 files

NetBSD/pkgsrc 1fW1pB9 — doc CHANGES-2026

   doc: Updated net/dnscontrol to 5.7.0
VersionDeltaFile
1.7161+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 8k8AYnZ — net/dnscontrol Makefile go-modules.mk

   dnscontrol: Update to 5.7.0

   Changelog
   Provider-specific changes:
   71c0081: feat(p/CONSTELLIX): add Constellix DNS provider (#5029) (@ZeroClover)
   d1823f7: fix(p/BIND): extract zones from %f and %F filenames (#5026) (@spicysharkco)
   Bug fixes:
   5309786: fix(DKIM_BUILDER): encode non-ASCII notes as UTF-8 octets (#5024) (@spicysharkco)
   3322ff1: fix(LOC_BUILDER_DD): accept zero and reject missing coordinates (#5027) (@spicysharkco)
   d392e6e: fix(diff2): MODIFY messages no showing provider-specific fields (#5030) (@cvas22)
   1029216: fix: make IGNORE_TARGET match HTTPS and SVCB targets (#5028) (@spicysharkco)
   Deprecation warnings
   Warning
   REV() will switch from RFC2317 to RFC4183 sometime after v5.0 is released.
   This is a breaking change. Warnings are output if your configuration is affected.
   See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
   NAMEDOTCOM, OPENSRS and SOFTLAYER need maintainers! These providers have no maintainer.
   Maintainers respond to PRs and fix bugs in a timely manner,
   and try to stay on top of protocol changes.
VersionDeltaFile
1.18+111-87net/dnscontrol/distinfo
1.19+36-28net/dnscontrol/go-modules.mk
1.56+2-3net/dnscontrol/Makefile
+149-1183 files

NetBSD/pkgsrc BNa4Y23 — doc TODO CHANGES-2026

   doc: Updated www/miniflux to 2.3.4
VersionDeltaFile
1.28211+1-2doc/TODO
1.7160+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 9o4WtXF — www/miniflux Makefile go-modules.mk

   miniflux: Update to version 2.3.4

   New features
   Added Gotify push notification support.
   Added Steam scraper rules.
   Added validation with helpful error messages when saving rewrite rules.
   Performance improvements
   Reduced database storage used by enclosure and entry indexes.
   Reduced memory used by internal data structures.

   Security
   Blocked reserved IP address ranges to further protect against server-side request forgery.
   Hardened WebAuthn redirects against open-redirect attacks, including redirect URLs containing surrounding whitespace.
   Prevented per-feed proxy URLs from bypassing private-network restrictions by default. Set FETCHER_ALLOW_PRIVATE_FEED_PROXY=1 to retain access to private per-feed proxies.
   Enforced DISABLE_LOCAL_AUTH for API password authentication and password changes; API clients must use an API key when local authentication is disabled.
   Rejected Google Reader authentication tokens when no password is configured.
   Restricted embedded iframe URLs to web schemes and tightened YouTube hostname validation.

   Bug fixes

    [20 lines not shown]
VersionDeltaFile
1.12+132-327www/miniflux/distinfo
1.11+43-108www/miniflux/go-modules.mk
1.29+2-3www/miniflux/Makefile
+177-4383 files

NetBSD/pkgsrc mRt30M5 — doc CHANGES-2026

   doc: Updated www/resterm to 1.16.0
VersionDeltaFile
1.7159+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 8630igZ — www/resterm go-modules.mk Makefile

   resterm: Update to 1.16.0

   New RestermScript helpers
   Standard library names without rts.
   Stricter null handling
   + on lists and dictionaries
   @use and @setting stay in their request
   Clearer error messages
VersionDeltaFile
1.62+3-3www/resterm/distinfo
1.70+2-3www/resterm/Makefile
1.53+0-0www/resterm/go-modules.mk
+5-63 files

NetBSD/pkgsrc IAudyN5 — www/firefox153 Makefile distinfo, www/firefox153-l10n Makefile distinfo

   Pullup ticket #7305 - requested by gutteridge
   www/firefox153: Security fix
   www/firefox153-l10n: Security fix

   Revisions pulled up:
   - www/firefox153-l10n/Makefile                                  1.6
   - www/firefox153-l10n/distinfo                                  1.6
   - www/firefox153/Makefile                                       1.10
   - www/firefox153/distinfo                                       1.6

   ---
      Module Name:    pkgsrc
      Committed By:   gutteridge
      Date:           Wed Oct 21 04:11:26 UTC 2026

      Modified Files:
              pkgsrc/www/firefox153: Makefile distinfo

      Log Message:

    [49 lines not shown]
VersionDeltaFile
1.3.2.3+310-310www/firefox153-l10n/distinfo
1.3.2.3+4-4www/firefox153/distinfo
1.4.2.3+2-2www/firefox153/Makefile
1.3.2.3+2-2www/firefox153-l10n/Makefile
+318-3184 files

NetBSD/pkgsrc snrQh6s — doc CHANGES-2026

   doc: Added www/grafana-{influxdb,mysql,postgresql}-datasource
VersionDeltaFile
1.7158+4-1doc/CHANGES-2026
+4-11 files

NetBSD/pkgsrc xqwfpl6 — www/grafana-influxdb-datasource go-modules.mk distinfo, www/grafana-mysql-datasource go-modules.mk distinfo

   www: add some more datasource plugins for grafana
VersionDeltaFile
1.1+1,064-0www/grafana-influxdb-datasource/distinfo
1.1+989-0www/grafana-postgresql-datasource/distinfo
1.1+974-0www/grafana-mysql-datasource/distinfo
1.1+354-0www/grafana-influxdb-datasource/go-modules.mk
1.1+329-0www/grafana-postgresql-datasource/go-modules.mk
1.1+324-0www/grafana-mysql-datasource/go-modules.mk
+4,034-010 files not shown
+4,243-116 files

NetBSD/pkgsrc kFZgG1j — www/grafana-prometheus-datasource Makefile

   grafana-prometheus-datasource: actually, just use INSTALLATION_DIRS
VersionDeltaFile
1.12+2-2www/grafana-prometheus-datasource/Makefile
+2-21 files

NetBSD/pkgsrc vyiJbgd — doc pkg-vulnerabilities

   Add CVE-2026-109618 and CVE-2026-109619 (PHP RCE)
VersionDeltaFile
1.806+9-1doc/pkg-vulnerabilities
+9-11 files