net/curl: update to 8.18.0
Includes fixes for
CVE-2025-14524: bearer token leak on cross-protocol redirect
CVE-2025-14819: OpenSSL partial chain store policy bypass
lang/deno: Update to 2.6.4
In addition:
* disable experimental typescript-go integration which requires a prebuilt
binary which they don't provide for OpenBSD
* disable the update-check on startup on OpenBSD, because there's no point
in it
import ports/devel/py-scikit-build-core, from tb, tweaks from me, ok tb
Scikit-build-core is a build backend for Python that uses CMake to build
extension modules. It has a simple yet powerful static configuration system
in pyproject.toml, and supports almost unlimited flexibility via CMake. It
was initially developed to support the demanding needs of scientific users,
but can build any sort of package that uses CMake.
py-backports-zstd: disable lto to fix build on sparc64
seems like the simplest option here, though it's possible that
switching lang/gcc/15 to using devel/gas on sparc64 (as already
done on many other archs) may work too - not checked
rework LIB_DEPENDS/WANTLIB handling for PHP SAPIs, for 8.5 uriparser also
needs to be added to (LIB_DEPENDS|WANTLIB)-embed (problem reported by aja@)
drop PKCS7_NO_DUAL_CONTENT patch, this was since added to libressl