FreeBSD/ports d1a3530 — devel/py-lap Makefile distinfo

devel/py-lap: update 0.5.13 -> 0.5.14

Changelog: https://github.com/gatagat/lap/compare/v0.5.13...v0.5.14
DeltaFile
+3-3devel/py-lap/distinfo
+1-2devel/py-lap/Makefile
+4-52 files

FreeBSD/ports 9ba3832 — graphics/openexr Makefile distinfo, graphics/openexr-website-docs Makefile distinfo

graphics/openexr*: Security update to 3.4.17

Changelog:
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.17

PR:             300513
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/661
Security:       GHSA-WHF5-29MJ-GP53
Security:       GHSA-VP77-HHRC-M2C3
Security:       GHSA-RXWG-X3WX-PGFH
Security:       GHSA-RJG8-982X-JHC2
Security:       GHSA-J76P-H7GW-VMPF
Security:       GHSA-G248-596F-9995
Security:       GHSA-FRX8-5P4H-J8M7
Security:       GHSA-638X-X7MR-89XC
Security:       GHSA-3CP4-779M-H837
MFH:            2026Q4

(cherry picked from commit 303a08d439869e8796f987ec116d1a83d231adb0)
DeltaFile
+3-3graphics/openexr/distinfo
+3-3graphics/openexr-website-docs/distinfo
+1-1graphics/openexr/Makefile
+1-1graphics/openexr-website-docs/Makefile
+8-84 files

FreeBSD/ports 303a08d — graphics/openexr Makefile distinfo, graphics/openexr-website-docs Makefile distinfo

graphics/openexr*: Security update to 3.4.17

Changelog:
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.17

PR:             300513
Pull Request:   https://github.com/freebsd/freebsd-ports/pull/661
Security:       GHSA-WHF5-29MJ-GP53
Security:       GHSA-VP77-HHRC-M2C3
Security:       GHSA-RXWG-X3WX-PGFH
Security:       GHSA-RJG8-982X-JHC2
Security:       GHSA-J76P-H7GW-VMPF
Security:       GHSA-G248-596F-9995
Security:       GHSA-FRX8-5P4H-J8M7
Security:       GHSA-638X-X7MR-89XC
Security:       GHSA-3CP4-779M-H837
MFH:            2026Q4
DeltaFile
+3-3graphics/openexr/distinfo
+3-3graphics/openexr-website-docs/distinfo
+1-1graphics/openexr/Makefile
+1-1graphics/openexr-website-docs/Makefile
+8-84 files

FreeBSD/ports 97fadf7 — security/vuxml/vuln 2026.xml

security/vuxml: Document OpenEXR vulnerabilities

PR:             300513
Approved by:    osa, vvd (mentors, implicit)
DeltaFile
+48-0security/vuxml/vuln/2026.xml
+48-01 files

FreeBSD/ports d079708 — www/vaultwarden-web_vault Makefile distinfo

www/vaultwarden-web_vault: Update to 2026.10.1

PR:             300505
Reported by:    courtney at courtnix.systems
DeltaFile
+3-3www/vaultwarden-web_vault/distinfo
+1-1www/vaultwarden-web_vault/Makefile
+4-42 files

FreeBSD/ports 1a47eeb — security/vuxml/vuln 2026.xml

security/vuxml: Document www/gitea vulnerabilities

PR:             300499
Approved by:    osa, vvd (mentors, implicit)
DeltaFile
+103-0security/vuxml/vuln/2026.xml
+103-01 files

FreeBSD/src 54001c6 — lib/libc/string memset.3

memset.3: Fix .Fn usage and too many commas

Fix wrong usage of .Fn macro in paragraph for `memset_explicit' that
caused too many commas improperly emitted into rendered manual page.

Approved by:    des
MFC after:      1 week

(cherry picked from commit 3479ee8e003b948ee3011d1a88d656add3d1284f)
DeltaFile
+3-2lib/libc/string/memset.3
+3-21 files

FreeBSD/ports 5afc6d5 — games/anki Makefile.crates Makefile

games/anki: Update to 26.09.4

Changelog:

https://github.com/ankitects/anki/releases/tag/26.09.4

MFH:            2026Q4
Security:       117b053d-d8e3-11f1-985e-901b0edee044
DeltaFile
+9-9games/anki/distinfo
+2-2games/anki/Makefile.crates
+2-2games/anki/Makefile
+13-133 files

FreeBSD/ports 4205b34 — security/vuxml/vuln 2026.xml

security/vuxml: Document Anki security issue

* GHSA-j9v5-m549-cg6c / 8.6
DeltaFile
+27-0security/vuxml/vuln/2026.xml
+27-01 files

FreeBSD/ports 8cb9d7a — editors/vscode Makefile, textproc/obsidian Makefile

*/*: Bump port revision after electron43 update (aa6bc8d70931)
DeltaFile
+1-0textproc/obsidian/Makefile
+1-0editors/vscode/Makefile
+2-02 files

FreeBSD/ports aa6bc8d — devel/electron43 Makefile.version distinfo, devel/electron43/files patch-third__party_electron__node_src_compile__cache.cc

devel/electron43: Update to 43.8.7

Changelog: https://github.com/electron/electron/releases/tag/v43.8.7

Reported by:    GitHub (watch releases)
DeltaFile
+45-0devel/electron43/files/patch-third__party_electron__node_src_compile__cache.cc
+7-7devel/electron43/distinfo
+1-1devel/electron43/Makefile.version
+53-83 files

FreeBSD/ports 9ee0686 — net/dico Makefile, net/dico/files patch-modules_python_python.c

net/dico, x11-fonts/cyberbit-ttfonts: unbreak these two ports.
DeltaFile
+20-0net/dico/files/patch-modules_python_python.c
+0-2x11-fonts/cyberbit-ttfonts/Makefile
+0-2net/dico/Makefile
+20-43 files

FreeBSD/src 2877241 — sys/netpfil/ipfw ip_fw_table_algo.c

ipfw: fix off-by-one error in bdel()

After deleting an item from a sorted array, bdel() moves the tail
following it, but the size of the data to move was calculated with
an off-by-one error, causing memmove() to read one element past the
end of the array. This can happen when the table is full for ifidx
or numarray algorithms.

Obtained from:  Yandex LLC
Sponsored by:   Yandex LLC

(cherry picked from commit c6b08de0e4c797929f4609d86395d494ac695c68)
DeltaFile
+1-1sys/netpfil/ipfw/ip_fw_table_algo.c
+1-11 files

FreeBSD/src 3bcfea6 — sys/netpfil/ipfw ip_fw_table_algo.c

ipfw: fix off-by-one error in bdel()

After deleting an item from a sorted array, bdel() moves the tail
following it, but the size of the data to move was calculated with
an off-by-one error, causing memmove() to read one element past the
end of the array. This can happen when the table is full for ifidx
or numarray algorithms.

Obtained from:  Yandex LLC
Sponsored by:   Yandex LLC

(cherry picked from commit c6b08de0e4c797929f4609d86395d494ac695c68)
DeltaFile
+1-1sys/netpfil/ipfw/ip_fw_table_algo.c
+1-11 files

FreeBSD/ports 387468e — devel/py-threema-msgapi distinfo pkg-descr, devel/py-threema-msgapi/files patch-setup.py patch-threema_gateway_util.py

devel/py-threema-msgapi: Update to 8.0.0

3.0.6 uses asyncio.coroutine (removed in Python 3.11), so
'import threema.gateway' has failed since the 3.11 switch.

- The project moved to github.com/threema-ch; 8.0.0 is only published
  on PyPI (the newest GitHub release is 7.0.1), so use the sdist.
- Dependencies follow upstream; pylru-cache is no longer needed.  The
  wrapt<2 cap in setup.py is dropped: the tree has wrapt 2.x, and only
  wrapt.ObjectProxy is used.
- setup.py reads CHANGELOG.rst, which is not in the sdist, and uses
  find_packages() on the threema namespace (no __init__.py), so the
  package would contain no Python code at all.  Use README.rst only and
  find_namespace_packages().
- Fix the blocking API and the threema-gateway CLI on Python 3.14:
  fall back to a new event loop and install it (partly from upstream
  fd9e9f38), wrap the proxied methods in staticmethod(), and use
  inspect.iscoroutinefunction().
- Expand pkg-descr and document the patches.

    [4 lines not shown]
DeltaFile
+64-0devel/py-threema-msgapi/files/patch-threema_gateway_util.py
+46-0devel/py-threema-msgapi/files/patch-setup.py
+11-15devel/py-threema-msgapi/Makefile
+7-1devel/py-threema-msgapi/pkg-descr
+3-3devel/py-threema-msgapi/distinfo
+131-195 files

FreeBSD/ports 80d5096 — devel/py-threema-msgapi distinfo pkg-descr, devel/py-threema-msgapi/files patch-setup.py patch-threema_gateway_util.py

devel/py-threema-msgapi: Update to 8.0.0

3.0.6 uses asyncio.coroutine (removed in Python 3.11), so
'import threema.gateway' has failed since the 3.11 switch.

- The project moved to github.com/threema-ch; 8.0.0 is only published
  on PyPI (the newest GitHub release is 7.0.1), so use the sdist.
- Dependencies follow upstream; pylru-cache is no longer needed.  The
  wrapt<2 cap in setup.py is dropped: the tree has wrapt 2.x, and only
  wrapt.ObjectProxy is used.
- setup.py reads CHANGELOG.rst, which is not in the sdist, and uses
  find_packages() on the threema namespace (no __init__.py), so the
  package would contain no Python code at all.  Use README.rst only and
  find_namespace_packages().
- Fix the blocking API and the threema-gateway CLI on Python 3.14:
  fall back to a new event loop and install it (partly from upstream
  fd9e9f38), wrap the proxied methods in staticmethod(), and use
  inspect.iscoroutinefunction().
- Expand pkg-descr and document the patches.

    [3 lines not shown]
DeltaFile
+64-0devel/py-threema-msgapi/files/patch-threema_gateway_util.py
+46-0devel/py-threema-msgapi/files/patch-setup.py
+11-15devel/py-threema-msgapi/Makefile
+7-1devel/py-threema-msgapi/pkg-descr
+3-3devel/py-threema-msgapi/distinfo
+131-195 files

FreeBSD/ports df49f5e — textproc/tgrep Makefile distinfo

textproc/tgrep: Update to 1.2.7

Changelog: https://github.com/microsoft/tgrep/releases/tag/v1.2.7

Reported by:    GitHub (watch releases)
DeltaFile
+3-3textproc/tgrep/distinfo
+1-1textproc/tgrep/Makefile
+4-42 files

FreeBSD/ports 0b9687f — security/vuxml/vuln 2026.xml

security/vuxml: Document openvox vulnerabilities
DeltaFile
+104-0security/vuxml/vuln/2026.xml
+104-01 files

FreeBSD/ports 923f49b — devel/R-cran-bigmemory Makefile, devel/R-cran-pkgdepends Makefile

*/R-cran-*: Remove redundant BUILD_DEPENDS

Mk/Uses/cran.mk unconditionally sets NO_BUILD, so nothing runs during
the build phase.  The real work, R CMD INSTALL, happens in do-install
when run dependencies have already been installed.  Listing R-cran-*
packages in BUILD_DEPENDS, with or without cran:compiles, only installs
these dependencies earlier.

While here:
- math/R-cran-Amelia: move rlang, an Import that was only listed in
  BUILD_DEPENDS, to RUN_DEPENDS.  Bump PORTREVISION.
- math/R-cran-MatchIt: likewise for rlang; drop chk, which 4.8.1 no
  longer imports; bump PORTREVISION.
- textproc/R-cran-openxlsx, textproc/R-cran-readxl: drop knitr from
  BUILD_DEPENDS.  It is only a vignette builder and CRAN tarballs ship
  built vignettes.

Reviewed by:    dteske, eduardo, longros, uzsolt
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D60835
DeltaFile
+16-16devel/R-cran-pkgdepends/Makefile
+6-12math/R-cran-MatchIt/Makefile
+0-13math/R-cran-Zelig/Makefile
+6-6graphics/R-cran-s2/Makefile
+4-4devel/R-cran-bigmemory/Makefile
+2-3math/R-cran-Amelia/Makefile
+34-54103 files not shown
+35-166109 files

FreeBSD/ports 60eae5e — devel/libunicode-contour Makefile distinfo

devel/libunicode-contour: Update to 0.9.5

Changelog: https://github.com/contour-terminal/libunicode/releases/tag/v0.9.5

Reported by:    GitHub (watch releases)
DeltaFile
+5-5devel/libunicode-contour/distinfo
+1-1devel/libunicode-contour/Makefile
+6-62 files

FreeBSD/ports 7092cb8 — Tools/scripts update-plist.py

Tools/scripts/update-plist.py: Bugfix

Fix sorting of macro-prefixed entries.

The `get_expanded_key` function did not correctly sort orphaned plist
entries when dealing with conditional options (e.g. %%FOO%%) and
macro-prefixed directories (e.g., %%PYTHON_SITELIBDIR%%).

MFH:            2026Q4
(cherry picked from commit 825a16e406e9b5d969e05a7bed6d7026e6004202)
DeltaFile
+7-5Tools/scripts/update-plist.py
+7-51 files

FreeBSD/ports 825a16e — Tools/scripts update-plist.py

Tools/scripts/update-plist.py: Bugfix

Fix sorting of macro-prefixed entries.

The `get_expanded_key` function did not correctly sort orphaned plist
entries when dealing with conditional options (e.g. %%FOO%%) and
macro-prefixed directories (e.g., %%PYTHON_SITELIBDIR%%).

MFH:            2026Q4
DeltaFile
+7-5Tools/scripts/update-plist.py
+7-51 files

FreeBSD/ports f240797 — x11-wm Makefile, x11-wm/awesome-devel distinfo pkg-descr

x11-wm/awesome-devel: New port: Highly configurable, next generation framework window manager (devel)

awesome is a highly configurable, next generation framework window
manager for X. It is very fast, small, dynamic, heavily extensible using
the Lua programming language, and licensed under the GNU GPLv2 license.

It is primarly targeted at power users, developers and any people
dealing with every day computing tasks and who want to have fine-grained
control on theirs graphical environment.

PR:             299944
Reported by:    Waltz <wa1t5 __ at _ proton.me>
DeltaFile
+321-0x11-wm/awesome-devel/pkg-plist
+73-0x11-wm/awesome-devel/Makefile
+11-0x11-wm/awesome-devel/files/patch-CMakeLists.txt
+7-0x11-wm/awesome-devel/pkg-descr
+3-0x11-wm/awesome-devel/distinfo
+1-0x11-wm/Makefile
+416-06 files

FreeBSD/ports 5fd1baa — security/x11appjail Makefile distinfo

security/x11appjail: Update to 2.2.0

ChangeLog: https://github.com/DtxdF/x11appjail/releases/tag/v2.2.0

MFH:            2026Q4
(cherry picked from commit f5f1bb9bdbad5247d5f7b380fe8621b6629dc265)
DeltaFile
+3-3security/x11appjail/distinfo
+1-1security/x11appjail/Makefile
+4-42 files

FreeBSD/ports f5f1bb9 — security/x11appjail Makefile distinfo

security/x11appjail: Update to 2.2.0

ChangeLog: https://github.com/DtxdF/x11appjail/releases/tag/v2.2.0

MFH:            2026Q4
DeltaFile
+3-3security/x11appjail/distinfo
+1-1security/x11appjail/Makefile
+4-42 files

FreeBSD/ports f6ca692 — x11-wm/devilspie2-devel Makefile, x11-wm/devilspie2-devel/files patch-src_script__functions.c

x11-wm/devilspie2-devel: Fix BadMatch when attempting to minimize

A BadMatch error occurs when trying to minimize a CSD application in
fullscreen mode.
DeltaFile
+72-0x11-wm/devilspie2-devel/files/patch-src_script__functions.c
+1-0x11-wm/devilspie2-devel/Makefile
+73-02 files

FreeBSD/ports 36b27db — security/pass-cli Makefile Makefile.crates, security/pass-cli/files patch-pass-cli_Cargo.toml

security/pass-cli: Update to 2.7.0

Changelog: https://github.com/protonpass/pass-cli/blob/2.7.0/CHANGELOG.md

Reported by:    GitHub (watch releases)
DeltaFile
+89-87security/pass-cli/distinfo
+42-41security/pass-cli/Makefile.crates
+3-3security/pass-cli/files/patch-pass-cli_Cargo.toml
+3-3security/pass-cli/Makefile
+137-1344 files

FreeBSD/ports 604c314 — Mk/Uses cran.mk, devel/R-cran-rJava Makefile

Mk/Uses/cran.mk: Respect TEST_ENV in do-test

Prior to this change, MAKE_ENV was passed to do-test, so R-cran ports
could not set separate environments for installing and testing.

devel/R-cran-rJava: Drop the workaround that added test variables to
MAKE_ENV and set TEST_ENV directly.

Reviewed by:    longros
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D60845
DeltaFile
+4-4devel/R-cran-rJava/Makefile
+1-1Mk/Uses/cran.mk
+5-52 files

FreeBSD/ports 6ef992e — security/testssl.sh Makefile distinfo

security/testssl.sh: Update to 3.2.5

Addressed various internet developments, including eMudhra's certs.

Changes: https://github.com/testssl/testssl.sh/releases/tag/v3.2.5
(cherry picked from commit 91d21de1bd5c4a5f9b4853961d81ceec1fa83ce1)
DeltaFile
+3-3security/testssl.sh/distinfo
+1-1security/testssl.sh/Makefile
+4-42 files

FreeBSD/ports 91d21de — security/testssl.sh Makefile distinfo

security/testssl.sh: Update to 3.2.5

Addressed various internet developments, including eMudhra's certs.

Changes: https://github.com/testssl/testssl.sh/releases/tag/v3.2.5
DeltaFile
+3-3security/testssl.sh/distinfo
+1-1security/testssl.sh/Makefile
+4-42 files