FreeBSD/ports badc0ecdevel/py-dbt-extractor Makefile

devel/py-dbt-extractor: Use py-build to build wheel

Also remove dependency devel/py-tree-sitter, it is pinned in
Makefile.crates already and is written in Rust.

Nice bonus: The shared library is automatically stripped, down from 22
MB to 800 kB!
DeltaFile
+2-8devel/py-dbt-extractor/Makefile
+2-81 files

FreeBSD/ports a312662security/vuxml/vuln 2026.xml

security/vuxml: Document MariaDB vulnerabilities
DeltaFile
+51-0security/vuxml/vuln/2026.xml
+51-01 files

FreeBSD/ports a95d27adatabases/sq Makefile distinfo

databases/sq: Update to 0.54.1

Upstream added a DuckDB driver, whose Go bindings ship prebuilt static
libraries only for darwin, linux and windows. Build with the
duckdb_use_lib tag so that the bindings link against the system
libduckdb instead.
DeltaFile
+7-7databases/sq/distinfo
+4-1databases/sq/Makefile
+11-82 files

FreeBSD/ports 5375936databases/duckdb Makefile

databases/duckdb: Do not pull in dependencies of unselected extensions

The extension loop adds each extension's library dependencies with

        LIB_DEPENDS+=${PORT_OPTIONS:M${opt}:?${${opt}_LIB_DEPENDS}:}

The intent is "if this extension's option is selected, append its
<OPT>_LIB_DEPENDS", mirroring the two lines above it. Those work because
${PORT_OPTIONS:M${opt}:S/...} is empty-in-empty-out, but :? does not
behave the same way: per make(1), it evaluates the variable *name* -- not
the value the preceding modifiers produced -- as a conditional
expression. The condition here is therefore the bare word PORT_OPTIONS,
which is always true, so the true branch is always taken:

        PORT_OPTIONS=FOO BAR
        ${PORT_OPTIONS:MAWS} -> ""
        ${PORT_OPTIONS:MAWS:?${AWS_LIB_DEPENDS}:} -> libaws.so:devel/aws

As a result AVRO_LIB_DEPENDS (avro-c, jansson, snappy), AWS_LIB_DEPENDS

    [13 lines not shown]
DeltaFile
+1-1databases/duckdb/Makefile
+1-11 files

FreeBSD/ports aa656d9Mk/Uses samba.mk, devel/tevent017 Makefile

*/*: depends of devel/talloc244

Update dependency of devel/tevent017 to use devel/talloc244 instead
of devel/talloc243 since these version of samba can support it.
Update Mk/Uses/samba.mk for relecting such changes.

PR:     294595
Reported by:    Jordan Ostref, ml at netfence.it
Reviewed by:    kiwi
Approved by:    samba (kiwi)
Sponsored by:   Klara, Inc.
DeltaFile
+3-3net/samba423/Makefile
+3-2net/samba422/Makefile
+3-2devel/tevent017/Makefile
+2-2Mk/Uses/samba.mk
+11-94 files

FreeBSD/ports fbe153dmultimedia/jellyfin pkg-plist Makefile

multimedia/jellyfin: fix text rendering

Jellyfin uses libHarfBuzzSharp.so to render text on thumbnails, like
it uses libskiasharp. After analyses it appears nothing in jellyfin
is calling any symbols out of the symbols exposed by vanilla
libharfbuzz.so, instead of building a full libHarfBuzzSharp.so, just
resuse the share libarfbuz.so create a symlink in a place where jellyfin
will be able to dlopen it.

PR:             297316
Reported by:    freebsd.geography231 at slmails.com
DeltaFile
+5-0multimedia/jellyfin/Makefile
+1-0multimedia/jellyfin/pkg-plist
+6-02 files

FreeBSD/ports 4d45ebbsecurity/rnp distinfo Makefile

security/rnp: update to version 0.18.1

This update fixes critical issue where PKESK (public-key encrypted)
session keys were generated as all-zero, allowing trivial decryption
of messages encrypted with public keys only (CVE-2025-13470,
CVE-2025-13402, https://bugzilla.redhat.com/show_bug.cgi?id=2415863).

Security:       CVE-2025-13470
Security:       CVE-2025-13402
DeltaFile
+11-12security/rnp/Makefile
+3-3security/rnp/distinfo
+14-152 files

FreeBSD/src 2c00a42sys/contrib/openzfs/cmd zhack.c, sys/contrib/openzfs/module/os/linux/zfs abd_os.c

zfs: merge openzfs/zfs at 71a9f9578

OpenZFS 2.4.4

Notable upstream pull request merges:
 #18544 eb4199c6a zio_ddt_write: compute have_dvas after taking dde_io_lock
 #18573 0da2e6b39 Update mtime/ctime when fallocate grows a file
 #18611 b021ebcdc zfs_ioctl: fix EBUSY race between quota queries and mount
 #18652 027940e0b zbookmark_compare: handle "marker" bookmarks with
                  negative levels
 #18657 14ff1853c Fix race between device removal completion and pool export
 #18673 -multiple delegate: add send:encrypted permission
 #18688 5f84f4d81 Fix handling of _PC_HAS_HIDDENSYSTEM for FreeBSD
 #18693 7e8f6ad78 Clean up embedded slog metaslab across txgs
 #18706 5e8780ff9 ddt_log: Fix refcount tagging for begin/commit
 #18713 a2c02072f libzfs: fix MS_CRYPT/MS_OVERLAY collision with umount2(2)
                  flags
 #18720 09a876a38 Fix insufficient locking in dedup verify
 #18724 a6f557c2c Fix reads for blocks freed after being cloned

    [38 lines not shown]
DeltaFile
+946-0sys/module/zfs/zfs_config.h
+305-0sys/contrib/openzfs/tests/zfs-tests/tests/functional/mmp/mmp_zhack_reclaim.ksh
+178-0sys/contrib/openzfs/cmd/zhack.c
+159-0sys/contrib/openzfs/tests/zfs-tests/tests/functional/mmp/mmp_degraded_import.ksh
+0-150sys/contrib/openzfs/tests/zfs-tests/tests/functional/cli_user/zfs_send_delegation_user/zfs_send_usertest.ksh
+0-148sys/contrib/openzfs/module/os/linux/zfs/abd_os.c
+1,588-298161 files not shown
+5,103-1,202167 files

FreeBSD/ports 9645b19devel/moon Makefile distinfo

devel/moon: update to 2.5.2
DeltaFile
+3-3devel/moon/distinfo
+1-1devel/moon/Makefile
+4-42 files

FreeBSD/ports edb6bbemisc/py-fal-client Makefile distinfo

misc/py-fal-client: update to 1.0.1
DeltaFile
+3-3misc/py-fal-client/distinfo
+1-1misc/py-fal-client/Makefile
+4-42 files

FreeBSD/ports e8d4fc7databases/tdb1415 pkg-plist Makefile, databases/tdb1415/files patch-wscript patch-lib_replace_wscript

databases/tdb1415: new port

New dependency for net/samba424

PR:     294596
Approved by:    samba (kiwi)
DeltaFile
+67-0databases/tdb1415/Makefile
+15-0databases/tdb1415/files/patch-buildtools_wafsamba_wscript
+14-0databases/tdb1415/pkg-plist
+11-0databases/tdb1415/files/patch-wscript
+11-0databases/tdb1415/files/patch-lib_replace_wscript
+11-0databases/tdb1415/files/patch-buildtools_wafsamba_samba__install.py
+129-03 files not shown
+137-09 files

FreeBSD/ports fd8f185comms/klog Makefile pkg-plist

comms/klog: Fix build
DeltaFile
+7-7comms/klog/pkg-plist
+1-0comms/klog/Makefile
+8-72 files

FreeBSD/ports d1e87a7devel/talloc244 Makefile, devel/talloc244/files patch-buildtools_wafsamba_samba__install.py patch-lib_replace_wscript

devel/talloc244: new port

This talloc 2.4.4 is required by net/samba424.

PR:     294595
Approved by:    samba (kiwi)
DeltaFile
+65-0devel/talloc244/Makefile
+20-0devel/talloc244/files/patch-talloc.c
+18-0devel/talloc244/files/patch-wscript
+15-0devel/talloc244/files/patch-buildtools_wafsamba_wscript
+11-0devel/talloc244/files/patch-buildtools_wafsamba_samba__install.py
+11-0devel/talloc244/files/patch-lib_replace_wscript
+140-04 files not shown
+156-010 files

FreeBSD/ports 14d48eanet-im/teams Makefile distinfo, net-im/teams/files/packagejsons package-lock.json package.json

net-im/teams: Update to 2.17.1

Changelog: https://github.com/IsmaelMartinez/teams-for-linux/releases/tag/v2.17.1

Reported by:    portscout
DeltaFile
+23-22net-im/teams/files/packagejsons/package.json
+5-5net-im/teams/distinfo
+2-2net-im/teams/files/packagejsons/package-lock.json
+1-1net-im/teams/Makefile
+31-304 files

FreeBSD/ports 60b9e77lang/elixir-devel Makefile distinfo

lang/elixir-devel: update to 1.20.3

- ChangeLog https://github.com/elixir-lang/elixir/releases/tag/v1.20.3

Sponsored by:   SkunkWerks, GmbH
DeltaFile
+5-5lang/elixir-devel/distinfo
+1-1lang/elixir-devel/Makefile
+6-62 files

FreeBSD/ports 6d37b11mail/sympa pkg-plist Makefile, mail/sympa/files patch-configure.ac patch-issue1966

mail/sympa: Update to 6.2.78

PR:             296993
Approved by:    Geoffroy Desvernay (maintainer)
DeltaFile
+177-0mail/sympa/files/patch-issue1984
+0-48mail/sympa/files/patch-issue1966
+0-10mail/sympa/files/patch-configure.ac
+3-3mail/sympa/distinfo
+2-2mail/sympa/Makefile
+2-0mail/sympa/pkg-plist
+184-636 files

FreeBSD/ports dc73a6enet Makefile, net/rubygem-oauth-gitlab Makefile

www/gitlab: fix regression by de79e0fe79131da57d98504a8871a94f75af43e9

it cause deinstallation of gitlab:
Checking integrity... done (2 conflicting)
  - rubygem-anonymous_loader-0.1.3 [gitlab] conflicts with rubygem-anonymous_loader-gitlab-0.1.3 [installed] on /usr/local/lib/ruby/gems/3.4/gems/anonymous_loader-0.1.3/CHANGELOG.md
  - rubygem-auth-sanitizer-0.2.3 [gitlab] conflicts with rubygem-auth-sanitizer-gitlab-0.2.3 [installed] on /usr/local/lib/ruby/gems/3.4/gems/auth-sanitizer-0.2.3/CHANGELOG.md
...
Installed packages to be REMOVED:
        gitlab-ce: 19.3.0
...
DeltaFile
+25-0net/rubygem-oauth-tty-gitlab/Makefile
+3-2net/rubygem-oauth-gitlab/Makefile
+3-0net/rubygem-oauth-tty-gitlab/distinfo
+2-0net/rubygem-oauth-tty-gitlab/pkg-descr
+1-0net/Makefile
+34-25 files

FreeBSD/ports 71943ebwww/nginx-acme Makefile distinfo, www/nginx-devel version.mk Makefile

www/nginx-devel: Update to 1.31.4

*) Feature: the "proxy_protocol" directive in the stream and mail
   modules now supports the PROXY protocol version 2.

*) Change: now HTTP/2 and gRPC requests to backends are always sent with
   the ":authority" pseudo-header, and HTTP/1.1 requests - with the
   "Host" header.

*) Bugfix: a segmentation fault might occur in a worker process if the
   "select" method was used.

*) Bugfix: incomplete gRPC responses with a non-zero "Content-Length"
   header line are now treated as malformed.

*) Bugfix: in binary compatibility with third-party modules using script
   codes; the bug had appeared in 1.31.3.

*) Bugfix: in the ngx_http_perl_module.

    [7 lines not shown]
DeltaFile
+2-4www/nginx-devel/Makefile
+3-3www/nginx-devel/distinfo
+3-3www/nginx-acme/distinfo
+1-1www/nginx-devel/version.mk
+1-0www/nginx-acme/Makefile
+10-115 files

FreeBSD/ports 446dfd5textproc/tgrep Makefile.crates Makefile

textproc/tgrep: Update to 1.0.2

Changelog: https://github.com/microsoft/tgrep/releases/tag/v1.0.2

Reported by:    GitHub (watch releases)
DeltaFile
+5-3textproc/tgrep/distinfo
+1-1textproc/tgrep/Makefile
+1-0textproc/tgrep/Makefile.crates
+7-43 files

FreeBSD/ports f9566b8editors/emacs Makefile

editors/emacs: Fix native compilation with canna flavor

isearch-ext.el is a file that comes with the canna patch.  Because it is
preloaded, it was native-compiled during the bootstrap stage.  This
caused the native-lisp directory to be created, which in turn meant AOT
for all other elisp was silently skipped.

Fix this by adding isearch-ext to native-comp-bootstrap-deny-list, so it
is native-compiled later along with the rest of the elisp.

Sponsored by:   The FreeBSD Foundation
DeltaFile
+5-0editors/emacs/Makefile
+5-01 files

FreeBSD/ports f33b08eMk/Uses emacs.mk, editors/emacs Makefile distinfo

editors/emacs: Update to new major release, 31.1

Announcement:   https://lists.gnu.org/archive/html/info-gnu-emacs/2026-08/msg00004.html
Sponsored by:   The FreeBSD Foundation
DeltaFile
+5-5editors/emacs/distinfo
+3-3editors/emacs/Makefile
+3-3Mk/Uses/emacs.mk
+11-113 files

FreeBSD/ports 43acb18x11/py-nwg-displays Makefile distinfo

x11/py-nwg-displays: Update to 0.4.4

Changelog: https://github.com/nwg-piotr/nwg-displays/releases/tag/v0.4.4

Reported by:    GitHub (watch releases)
DeltaFile
+3-3x11/py-nwg-displays/distinfo
+1-1x11/py-nwg-displays/Makefile
+4-42 files

FreeBSD/ports 5bfc1e0www/immich Makefile

www/immich: Fix the built-in database backup

immich looks for pg_dump in a path that does not exist, and the port did not
depend on a PostgreSQL client at all.  The nightly backup job therefore failed
with ENOENT on every installation while the web interface reported the feature
as enabled.  The version range follows the check in the service itself,
PostgreSQL 14 to 18.

Sponsored by:   Netzkommune GmbH
DeltaFile
+7-1www/immich/Makefile
+7-11 files

FreeBSD/ports 79c3aebdevel/py-hologram Makefile, devel/py-minimal-snowplow-tracker Makefile

Update patmaddox maintainer email

Approved by:     dch (mentor implicit)
Closes:          https://github.com/freebsd/freebsd-ports/pull/566
DeltaFile
+1-1textproc/ox-gfm.el/Makefile
+1-1devel/rust-script/Makefile
+1-1devel/rust-mode/Makefile
+1-1devel/py-tree-sitter/Makefile
+1-1devel/py-minimal-snowplow-tracker/Makefile
+1-1devel/py-hologram/Makefile
+6-610 files not shown
+16-1616 files

FreeBSD/src 9171bb4sys/powerpc/include slb.h

powerpc/pmap: Fix SLB VSID mask

Bits [0:1] map to "B", the "Segment size selector", and are not part of
the VSID.  Correct this mask.
DeltaFile
+1-1sys/powerpc/include/slb.h
+1-11 files

FreeBSD/src 5d884fcsys/conf files.powerpc, sys/dev/dpaa fman_port_var.h fman_port_tx.c

dpaa: Split FMan port driver into distinct TX/RX

There are several port functions that are only for one type or the
other, so they don't make sense to be together.  Splitting these up also
simplifies adding support for the Offline/Host Command ports.
DeltaFile
+18-630sys/dev/dpaa/fman_port.c
+398-0sys/dev/dpaa/fman_port_rx.c
+347-0sys/dev/dpaa/fman_port_tx.c
+85-0sys/dev/dpaa/fman_port_var.h
+2-0sys/conf/files.powerpc
+850-6305 files

FreeBSD/src af0e83dsbin/restore symtab.c

Fix transposed arguments in call to calloc(). Reported by GCC 15 warning.

No functional change intended.

Submitted by: Pedro Giffuni <pfg at freebsd.org>

(cherry picked from commit 2cefae4cf34e7d39fc3b27358d7d66a96b3b0056)
DeltaFile
+1-1sbin/restore/symtab.c
+1-11 files

FreeBSD/ports d31d0a9security/wazuh-manager distinfo

security/wazuh-manager: Fix fetch

Reported by:    pkg-fallout
DeltaFile
+1-1security/wazuh-manager/distinfo
+1-11 files

FreeBSD/ports 7085e0email/py-resend Makefile distinfo

mail/py-resend: Update to 2.40.1

Changelog: https://github.com/resend/resend-python/releases/tag/v2.40.0

Reported by:    Repology
DeltaFile
+3-3mail/py-resend/distinfo
+1-1mail/py-resend/Makefile
+4-42 files

FreeBSD/ports 3cb797dsysutils/zpool-set Makefile distinfo

sysutils/zpool-set: Update to 1.0.1
DeltaFile
+5-5sysutils/zpool-set/distinfo
+1-1sysutils/zpool-set/Makefile
+6-62 files