FreeBSD/ports 69bb224 — www/privatebin Makefile distinfo

www/privatebin: Update to 2.1.1

re: https://github.com/PrivateBin/PrivateBin/releases/tag/2.1.1
DeltaFile
+3-3www/privatebin/distinfo
+1-1www/privatebin/Makefile
+4-42 files

FreeBSD/ports f7b5380 — net/keycloak Makefile distinfo

net/keycloak: Security update 26.8.1 => 26.8.2

Changelog:
https://github.com/keycloak/keycloak/releases/tag/26.8.2

PR:             300534
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2026-92358
Security:       CVE-2026-105305
Security:       CVE-2026-107623
Security:       CVE-2026-107889
Security:       CVE-2026-112201
Security:       CVE-2026-112208
Security:       CVE-2026-110932
Security:       CVE-2026-107123
Security:       CVE-2026-107124
Security:       CVE-2026-107602
Security:       CVE-2026-110931
Security:       CVE-2026-97367

    [23 lines not shown]
DeltaFile
+164-167net/keycloak/pkg-plist
+3-3net/keycloak/distinfo
+1-1net/keycloak/Makefile
+168-1713 files

FreeBSD/ports 63baac7 — security/vuxml/vuln 2026.xml

security/vuxml: Add net/keycloak vulnerabilities

PR:             300534
Approved by:    osa, vvd (mentors, implicit)
DeltaFile
+91-0security/vuxml/vuln/2026.xml
+91-01 files

FreeBSD/ports 8f98b0d — net/keycloak Makefile distinfo

net/keycloak: Security update 26.8.1 => 26.8.2

Changelog:
https://github.com/keycloak/keycloak/releases/tag/26.8.2

PR:             300534
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2026-92358
Security:       CVE-2026-105305
Security:       CVE-2026-107623
Security:       CVE-2026-107889
Security:       CVE-2026-112201
Security:       CVE-2026-112208
Security:       CVE-2026-110932
Security:       CVE-2026-107123
Security:       CVE-2026-107124
Security:       CVE-2026-107602
Security:       CVE-2026-110931
Security:       CVE-2026-97367

    [21 lines not shown]
DeltaFile
+164-167net/keycloak/pkg-plist
+3-3net/keycloak/distinfo
+1-1net/keycloak/Makefile
+168-1713 files

FreeBSD/ports 8a40de6 — science/py-netCDF4 distinfo Makefile, science/py-netCDF4/files patch-pyproject.toml

science/py-netCDF4: Update 1.7.2 => 1.7.5.1, take maintainership

* Add WWW for source code repository
* Add LICENSE_FILE
* Simplify and improve post-install-*-on stances

PR:      298010
MFH:     2026Q4
(cherry picked from commit 8353ba53f66d59cb4aa71bc44d3a12bafa46a0ec)
DeltaFile
+23-0science/py-netCDF4/files/patch-pyproject.toml
+9-8science/py-netCDF4/Makefile
+3-3science/py-netCDF4/distinfo
+35-113 files

FreeBSD/ports 8353ba5 — science/py-netCDF4 distinfo Makefile, science/py-netCDF4/files patch-pyproject.toml patch-src_netCDF4___netCDF4.pyx

science/py-netCDF4: Update 1.7.2 => 1.7.5.1, take maintainership

* Add WWW for source code repository
* Add LICENSE_FILE
* Simplify and improve post-install-*-on stances
* Remove upstreamed patch

PR:      298010
MFH:     2026Q4
DeltaFile
+0-75science/py-netCDF4/files/patch-src_netCDF4___netCDF4.pyx
+23-0science/py-netCDF4/files/patch-pyproject.toml
+9-8science/py-netCDF4/Makefile
+3-3science/py-netCDF4/distinfo
+35-864 files

FreeBSD/ports b742594 — comms/wsjtx Makefile pkg-plist, comms/wsjtx/files patch-CMake_Modules_FindUsb.cmake hamlib.patch

comms/wsjtx: Update to 3.0.1

                        Release: WSJT-X 3.0.0-rc1
                          September 15, 2025
                      -------------------------

WSJT-X 3.0.0 introduces a number of new features and capabilities.
Release Candidates give advanced users an opportunity to exercise
new features and provide feedback to developers. If you use this
Release Candidate 1, please send related comments or questions to
one of our user forums.

The following features will be already familiar to those using one of
the WSJT-X Improved 2.8.0 i+ editions, but new to users of WSJT-X
2.7.0 and all earlier versions:

 - Single-click Band Buttons can be enabled from the View menu.

 - Filters can be used to suppress the display of various categories

    [86 lines not shown]
DeltaFile
+0-220comms/wsjtx/files/wsjtx.patch
+102-7comms/wsjtx/files/patch-CMakeLists.txt
+0-74comms/wsjtx/files/hamlib.patch
+35-29comms/wsjtx/pkg-plist
+23-25comms/wsjtx/Makefile
+23-0comms/wsjtx/files/patch-CMake_Modules_FindUsb.cmake
+183-3551 files not shown
+186-3587 files

FreeBSD/src 843cb77 — sys/dev/etherswitch/e6000sw e6000sw.c

e6000sw: Write the value, not the register, in Clause 45 writes

e6000sw_write_xmdio() loaded the Clause 45 register address into the
SMI PHY data register a second time, where the value to write belongs,
so every Clause 45 write stored the register address.

Its only caller, e6000sw_serdes_power(), runs at attach for ports 9 and
10 of the 88E6190 and 88E6190X to power one SERDES interface up and the
other down.  It wrote 0x2000 to the SGMII control register and 0x1000
to the 10GBASE-R PCS control register instead, so neither interface was
powered down and the rest of each register was overwritten.

Fixes:          9aba06377d26 ("Add support for the Marvell 88E6190 11 ports switch.")
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+1-1sys/dev/etherswitch/e6000sw/e6000sw.c
+1-11 files

FreeBSD/ports 03ab62e — lang/elixir-devel Makefile distinfo

lang/elixir-devel: Update to 1.20.5

- ChangeLog https://github.com/elixir-lang/elixir/releases/tag/v1.20.5
- set CPE_VENDOR for NVD matching

Security:       CVE-2026-97209
Security:       CVE-2026-109821
Security:       CVE-2026-115274
Sponsored by:   SkunkWerks, GmbH
DeltaFile
+5-5lang/elixir-devel/distinfo
+3-2lang/elixir-devel/Makefile
+8-72 files

FreeBSD/ports 8d578ca — security/vuxml/vuln 2026.xml

security/vuxml: Document Elixir vulnerabilities

- add CVE-2026-109821 for URI.parse port limits
- add CVE-2026-115274 for JSON integer decoding beyond float64 range
- mark elixir before 1.18.6 and 1.19.7, and elixir-devel before 1.20.5
- add CVE-2026-97209 for mix deps.partition config, elixir-devel only

Sponsored by:   SkunkWerks, GmbH
DeltaFile
+67-0security/vuxml/vuln/2026.xml
+67-01 files

FreeBSD/ports 981c6d8 — lang/crystal Makefile distinfo, lang/crystal/files patch-lib_markd_src_markd_rule.cr patch-src_prelude.cr

lang/crystal: Update to 1.22.2

Announcement:   https://crystal-lang.org/2026/10/12/1.22.0-released/
ChangeLog:      https://github.com/crystal-lang/crystal/blob/master/doc/changelogs/v1.22.md
Sponsored by:   SkunkWerks, GmbH
DeltaFile
+23-2lang/crystal/pkg-plist
+18-0lang/crystal/files/patch-src_prelude.cr
+13-0lang/crystal/files/patch-lib_markd_src_markd_rule.cr
+3-3lang/crystal/distinfo
+1-1lang/crystal/Makefile
+58-65 files

FreeBSD/ports ba92e9a — security/vuxml/vuln 2026.xml

security/vuxml: Add uptime-kuma vuln
DeltaFile
+28-0security/vuxml/vuln/2026.xml
+28-01 files

FreeBSD/ports b039268 — lang/elixir Makefile distinfo

lang/elixir: Update to 1.19.7

- ChangeLog https://github.com/elixir-lang/elixir/releases/tag/v1.19.7
- set CPE_VENDOR for NVD matching

Security:       CVE-2026-109821
Security:       CVE-2026-115274
Sponsored by:   SkunkWerks, GmbH
DeltaFile
+5-5lang/elixir/distinfo
+3-2lang/elixir/Makefile
+8-72 files

FreeBSD/ports 354d0a6 — net/lavinmq Makefile distinfo

net/lavinmq: Update to 2.10.4

- https://github.com/cloudamqp/lavinmq/blob/v2.10.4/CHANGELOG.md
DeltaFile
+3-3net/lavinmq/distinfo
+1-1net/lavinmq/Makefile
+4-42 files

FreeBSD/ports 7ac70a4 — x11-fonts Makefile, x11-fonts/rubik pkg-plist distinfo

x11-fonts/rubik: Add Rubik font family

- add sans-serif font family with slightly rounded corners
- distribute the variable Roman and Italic fonts from the googlefonts
  upstream, pinned to the e337a5 commit ("New binaries")
- supports Latin, Cyrillic, Hebrew, and Arabic scripts

Sponsored by:   SkunkWerks, GmbH
DeltaFile
+25-0x11-fonts/rubik/Makefile
+6-0x11-fonts/rubik/pkg-descr
+3-0x11-fonts/rubik/distinfo
+2-0x11-fonts/rubik/pkg-plist
+1-0x11-fonts/Makefile
+37-05 files

FreeBSD/ports b07e9db — net-mgmt/uptime-kuma Makefile distinfo

net-mgmt/uptime-kuma: update to 2.5.9

Reported by:    portstatus
Security:       CVE-2026-119552
Sponsored by:   SkunkWerks, GmbH
DeltaFile
+7-7net-mgmt/uptime-kuma/distinfo
+2-3net-mgmt/uptime-kuma/Makefile
+9-102 files

FreeBSD/ports 5022d6c — ports-mgmt/git-proxy/files pkg-message.in

ports-mgmt/git-proxy: Improve pkg-message
DeltaFile
+1-1ports-mgmt/git-proxy/files/pkg-message.in
+1-11 files

FreeBSD/src 4b73245 — sys/dev/iavf if_iavf_iflib.c, sys/dev/ice if_ice_iflib.c

iflib: Use a single tx dma map

The need for a separate map for TSO and non-TSO seems to have arisen from
a misunderstanding about the DMA requirements for Intel drivers like
ice/ixl/iavf. Specifically, this Intel hardware has a quirk where no
more than N (=8) segs can be DMA'ed per packet on the wire. This limit
was enforced using a DMA map with a low segment limit for non-TSO and a
driver specific check for TSO. This led to a *lot* of complexity in
iflib (~80 extra lines of code that this change removes) when the
limit can simply be enforced via the existing EFBIG mechanisms.

This change adds a new flag, IFLIB_SPARSE_TX, that drivers for hardware
with this quirk must set.  When set, it causes non-TSO sends that
exceed isc_tx_nsegment to be treated as if bus_dmamap_load_mbuf_sg()
had returned EFBIG.

Due to the API/KABI change, I've bumped the FreeBSD version as well.

Note kgalazka suggested the flag, rather than a more awkward

    [5 lines not shown]
DeltaFile
+36-123sys/net/iflib.c
+4-1sys/net/iflib.h
+2-2sys/dev/ice/if_ice_iflib.c
+2-1sys/dev/ixl/if_ixl.c
+2-1sys/dev/iavf/if_iavf_iflib.c
+1-1sys/sys/param.h
+47-1296 files

FreeBSD/doc c953b68 — website/content/en/releases/15.2R relnotes.adoc

15.2/relnotes: document igb/igbv split

Reviewed by: vladlen
Approved by: re (implicit)
Differential Revision: https://reviews.freebsd.org/D61081
DeltaFile
+18-0website/content/en/releases/15.2R/relnotes.adoc
+18-01 files

FreeBSD/ports d09a646 — textproc/py-mkdocs-simple-hooks Makefile

textproc/py-mkdocs-simple-hooks: Mark DEPRECATED

Deprecated upstream, textproc/py-mkdocs 1.4+ has hooks built in.
Set EXPIRATION_DATE to 2026-11-30, as agreed with the maintainer.

PR:             299949
Approved by:    Samir Noir <samir at noir.im> (maintainer)
MFH:            2026Q4

(cherry picked from commit 30927e6a7239c9908a09e45fc369b4e710103603)
DeltaFile
+4-1textproc/py-mkdocs-simple-hooks/Makefile
+4-11 files

FreeBSD/ports 30927e6 — textproc/py-mkdocs-simple-hooks Makefile

textproc/py-mkdocs-simple-hooks: Mark DEPRECATED

Deprecated upstream, textproc/py-mkdocs 1.4+ has hooks built in.
Set EXPIRATION_DATE to 2026-11-30, as agreed with the maintainer.

PR:             299949
Approved by:    Samir Noir <samir at noir.im> (maintainer)
MFH:            2026Q4
DeltaFile
+4-1textproc/py-mkdocs-simple-hooks/Makefile
+4-11 files

FreeBSD/ports baaf380 — net-mgmt/zabbix8-server Makefile pkg-plist.frontend, net-mgmt/zabbix8-server/files zabbix_java.in zabbix_agentd.in

net-mgmt/zabbix8-server: Add new ports

Add Zabbix 8.0, the new LTS version.

Release announcement: https://www.zabbix.com/whats_new_8_0
DeltaFile
+2,352-0net-mgmt/zabbix8-server/pkg-plist.frontend
+266-0net-mgmt/zabbix8-server/Makefile
+74-0net-mgmt/zabbix8-server/files/zabbix_server.in
+73-0net-mgmt/zabbix8-server/files/zabbix_proxy.in
+67-0net-mgmt/zabbix8-server/files/zabbix_agentd.in
+47-0net-mgmt/zabbix8-server/files/zabbix_java.in
+2,879-012 files not shown
+3,066-018 files

FreeBSD/src 2734bbb — lib/libthr/thread thr_private.h

libthr: Create landing pad in thr_once in C++ exception

In _thr_once, if init_routine fails with exception, the stack allocate
__cup will become invalid when unwinder walk back and free the stack of
thr_once. This cause cleanup linked list be dangling. In here, we give
the cleanup function a landing pad so that we td can correctly point
to previous cleanup function.

Reviewed by:    kib
MFC after:      2 weeks
Differential Revision: https://reviews.freebsd.org/D61212
DeltaFile
+15-1lib/libthr/thread/thr_private.h
+15-11 files

FreeBSD/ports 319d10b — www/gitea distinfo Makefile

www/gitea: Security update 28.2.0 => 28.3.0, fix 21 CVEs

It contains a large number of security fixes, mostly around token
scopes, and bug fixes and performance improvements for Actions,
issues, pull requests and packages.

We strongly recommend that all users upgrade as soon as possible.

URL: https://blog.gitea.com/release-of-28.3.0/

PR:             300499
Approved by:    portmgr@ (blanket, security fix)
MFH:            2026Q4

(cherry picked from commit 4d2e00911ddaa5f72c2833a803627a107da6be05)
DeltaFile
+3-3www/gitea/distinfo
+3-3www/gitea/Makefile
+6-62 files

FreeBSD/src 71937d8 — lib/libthr/thread thr_private.h

libthr: Predict libthr is initialized in _thr_check_init

_thr_check_init() is called on hot paths such as pthread_once(), and
the uninitialized case can only happen once. Mark it with
__predict_false so the compiler lays out the initialized case as the
fall-through path.

Reviewed by:    kib
MFC after:      2 weeks
Differential Revision: https://reviews.freebsd.org/D61213
DeltaFile
+1-1lib/libthr/thread/thr_private.h
+1-11 files

FreeBSD/src 1e1ce1f — lib/libthr/thread thr_once.c

libthr: Fix whitespace in thr_once.c

Remove trailing whitespace and replace space indentation with a tab.

No functional change.
DeltaFile
+2-2lib/libthr/thread/thr_once.c
+2-21 files

FreeBSD/ports 4d2e009 — www/gitea distinfo Makefile

www/gitea: Security update 28.2.0 => 28.3.0, fix 21 CVEs

It contains a large number of security fixes, mostly around token
scopes, and bug fixes and performance improvements for Actions,
issues, pull requests and packages.

We strongly recommend that all users upgrade as soon as possible.

URL: https://blog.gitea.com/release-of-28.3.0/

PR:             300499
Approved by:    portmgr@ (blanket, security fix)
MFH:            2026Q4
DeltaFile
+3-3www/gitea/distinfo
+3-3www/gitea/Makefile
+6-62 files

FreeBSD/src 8b63260 — sbin/hastd hastd.c

hastd: Remove pidfile on exit

Make hastd remove its pidfile before exit after catching a signal or a
stop control message, not just on failure to start.

MFC after:      1 week
Reviewed by:    ngie
Differential Revision:  https://reviews.freebsd.org/D60192

(cherry picked from commit 3f2f6bb8f7b562276bffd04a9ae4c05a351b4435)
DeltaFile
+1-0sbin/hastd/hastd.c
+1-01 files

FreeBSD/src 4478c54 — sbin/hastctl hastctl.c, sbin/hastd hast.h hastd.c

hastd: Add a stop control message

Add a stop control message which causes hastd to clean up and terminate.

Reviewed by:    kevans
Differential Revision:  https://reviews.freebsd.org/D59344

(cherry picked from commit 7dfadd78ba3c4608c3631fb5008de77ea1e29e88)
DeltaFile
+17-0sbin/hastd/control.c
+14-0sbin/hastctl/hastctl.c
+8-4sbin/hastd/hastd.c
+1-0sbin/hastd/hast.h
+40-44 files

FreeBSD/src e3eaff9 — sbin/hastd hastd.c

hastd: Remove pidfile on exit

Make hastd remove its pidfile before exit after catching a signal or a
stop control message, not just on failure to start.

MFC after:      1 week
Reviewed by:    ngie
Differential Revision:  https://reviews.freebsd.org/D60192

(cherry picked from commit 3f2f6bb8f7b562276bffd04a9ae4c05a351b4435)
DeltaFile
+1-0sbin/hastd/hastd.c
+1-01 files