BSD Commit Log Search

py-buku: Add reference to CVE-2026-123201

stable-diffusion.cpp: Add references to recent CVEs

tooi: Update to 0.28.0

Changes:
0.28.0 (2026-10-28)
* Fix cropped links in cards
* Fix image loading in some cases
* Don't attempt to render video thumbnails
* Use a code editor to show status source as JSON instead of Python
* Fix showing thread on boosted statuses (127, thanks Taylor-Finch)
* Display better error messages when loading or rendering of an image fails

0.27.0 (2026-07-04)
* Add reply indicator to timeline (thanks Taylor-Finch)
* Allow passing options to external image viewer (thanks Taylor-Finch)
* Add pageup/pagedown/home/end shortcuts to timeline (thanks Taylor-Finch)
* Add option to pass URLs to external image viewer instead caching files locally
  (thanks Taylor-Finch)

0.26.0 (2026-06-05)

    [93 lines not shown]

opencv-contrib-face: update to 5.1.0.

opencv: update to 5.1.0.

qgis: Add link to tracker with LTR blockers

trafficserver: Add new package

Still needs testing outside of NetBSD

trivy: updated to 0.76.2

inflatelib: use upstream patch for catch2 issue

crush: Update to 0.100.0

rust-beta: update to 1.100.0beta.10

inflatelib: fix building with tests

Update graphics/lightcraft to v.0.18.0

wip/zig-git: update to v.0.18.0pre922nb20261104

audio/reaper-bin: add version 7.84

Update sysutils/atuin to v.18.24.5

victoriametrics: Update to 1.155.0

Changes:
Too long to include, sorry.
Please see: <https://docs.victoriametrics.com/victoriametrics/changelog/>

Resolves CVE-2026-61625 and several others

Update net/agentcc-gateway to v.1.58.0

victorialogs*: Update to 1.53.0

Breaking changes:
Update note 1: the /internal/force_merge, /internal/force_flush,
/internal/log_new_streams and /internal/partition/* HTTP endpoints now
require the POST method for security reasons, in order to prevent
GET-based SSRF attacks. Update any scripts or automation calling
these endpoints via GET to use POST. See #1635.

Update note 2: requests to /select/vmalert/-/reload and other
/select/vmalert/* paths ending with /config or /reload now require the
-httpAuth.* credentials for security reasons. Previously, such requests
were proxied to vmalert without checking the credentials. Add the
credentials to any scripts calling these paths. See #11548.

Rest of changes, see full release notes at:
https://github.com/VictoriaMetrics/VictoriaLogs/releases/tag/v1.53.0

Makefile: sort

please just use 'pkglint -F' instead of hand-editing this file

llama.cpp: update to 0.9.0.

Update x11/rio to v,0.5.29

p5-FCGI-Daemon: moved to pkgsrc www

py-buku: Add reference to CVE-2026-121627

py-jose: Add reference to CVE-2026-120459

electron44: fix build

Add net/simple-http-server v.0.8.0, yet another, rust-based one

editors/fresh: adjust COMMIT_MSG

Update editors/fresh to v.0.5.7

rust-beta: update to 1.100.0beta.9