FreeBSD/ports c436524 — sysutils/tflint Makefile distinfo

sysutils/tflint: Update to 0.65.0

ChangeLog:
https://github.com/terraform-linters/tflint/releases/tag/v0.65.0
DeltaFile
+5-5sysutils/tflint/distinfo
+1-2sysutils/tflint/Makefile
+6-72 files

FreeBSD/ports a7ecceb — x11 Makefile, x11/cosmic-app-library pkg-descr Makefile

x11/cosmic-app-library: New port: Modern application launcher for COSMIC

COSMIC App Library is a modern application launcher for the
COSMIC desktop environment that displays graphical apps
in a neat, airy grid.

WWW: https://github.com/pop-os/cosmic-app-library

PR:             299771
Reported by:    Josh Megnauth <jo.sh at tutanota.com> (new maintainer)
DeltaFile
+1,311-0x11/cosmic-app-library/distinfo
+652-0x11/cosmic-app-library/Makefile.crates
+59-0x11/cosmic-app-library/Makefile
+3-0x11/cosmic-app-library/pkg-descr
+1-0x11/Makefile
+2,026-05 files

FreeBSD/ports 0a25f19 — databases/pgloader3 Makefile, databases/pgloader3/files patch-Makefile patch-src_pgsql_pgsql-create-schema.lisp

databases/pgloader3: Fix crash during "reset sequences"

Column names that need to be quoted, will already be so quoting them
again results in sql errors.

Patch taken from:
https://github.com/codereverser/pgloader/commit/aba754a759f28701d94551e85c6b9c369e63698c
Upstreaming is of no use as upstream rewrote pgloader in java and is not
accepting patches for v3 anymore.

While at it:
- Replace PORTVERSION with DISTVERSION.
- Add libzstd to LIB_DEPENDS.
- Fix warnings from portclippy.
- Refresh patch.

PR:             298832
Approved by:    freebsd-washroom at duhanic.com (maintainer, timeout 1 month)
Sponsored by:   UNIS Labs (vvd)

    [4 lines not shown]
DeltaFile
+11-0databases/pgloader3/files/patch-src_pgsql_pgsql-create-schema.lisp
+5-5databases/pgloader3/files/patch-Makefile
+6-4databases/pgloader3/Makefile
+22-93 files

FreeBSD/ports 06a8a3b — databases/pgloader3 Makefile, databases/pgloader3/files patch-Makefile patch-src_pgsql_pgsql-create-schema.lisp

databases/pgloader3: Fix crash during "reset sequences"

Column names that need to be quoted, will already be so quoting them
again results in sql errors.

Patch taken from:
https://github.com/codereverser/pgloader/commit/aba754a759f28701d94551e85c6b9c369e63698c
Upstreaming is of no use as upstream rewrote pgloader in java and is not
accepting patches for v3 anymore.

While at it:
- Replace PORTVERSION with DISTVERSION.
- Add libzstd to LIB_DEPENDS.
- Fix warnings from portclippy.
- Refresh patch.

PR:             298832
Approved by:    freebsd-washroom at duhanic.com (maintainer, timeout 1 month)
Sponsored by:   UNIS Labs (vvd)

    [2 lines not shown]
DeltaFile
+11-0databases/pgloader3/files/patch-src_pgsql_pgsql-create-schema.lisp
+5-5databases/pgloader3/files/patch-Makefile
+6-4databases/pgloader3/Makefile
+22-93 files

FreeBSD/ports 4c1bc86 — misc/py-shell-gpt Makefile

misc/py-shell-gpt: Add missing runtime dependency

While here, add USE_PYTHON=concurrent.

PR:             299761
Reported by:    Patrick Crandol <patrick at crandol.com>
DeltaFile
+3-2misc/py-shell-gpt/Makefile
+3-21 files

FreeBSD/ports 9faa669 — sysutils/leaf Makefile Makefile.crates

sysutils/leaf: Update to 1.29.2

Changelog: https://github.com/RivoLink/leaf/blob/1.29.2/CHANGELOG.md

Reported by:    GitHub (watch releases)
DeltaFile
+9-9sysutils/leaf/distinfo
+3-3sysutils/leaf/Makefile.crates
+1-1sysutils/leaf/Makefile
+13-133 files

FreeBSD/ports e44bc57 — textproc/py-jiter Makefile Makefile.crates

textproc/py-jiter: Update to 0.18.0

Changelog: https://github.com/pydantic/jiter/compare/v0.17.0...v0.18.0

Reported by:    portscout
DeltaFile
+17-15textproc/py-jiter/distinfo
+7-6textproc/py-jiter/Makefile.crates
+1-2textproc/py-jiter/Makefile
+25-233 files

FreeBSD/ports e1814c5 — graphics/gpxsee Makefile distinfo

graphics/gpxsee: Update to 16.18

Update pkg-descr.

Changelog: https://github.com/tumic0/GPXSee/releases/tag/16.18

Approved by: osa, fluffy (mentors, implicit)
DeltaFile
+6-3graphics/gpxsee/pkg-descr
+3-3graphics/gpxsee/distinfo
+1-1graphics/gpxsee/Makefile
+10-73 files

FreeBSD/ports 5a717ce — devel/gh Makefile pkg-plist

devel/gh: Update to 2.103.2

ChangeLog:
https://github.com/cli/cli/releases/tag/v2.103.2
DeltaFile
+5-5devel/gh/distinfo
+7-0devel/gh/pkg-plist
+1-2devel/gh/Makefile
+13-73 files

FreeBSD/ports 31d6cbe — security/vuxml/vuln 2026.xml

security/vuxml: Document ImageMagick vulnerabilities

PR:             300074
Sponsored by:   Netzkommune GmbH
DeltaFile
+269-0security/vuxml/vuln/2026.xml
+269-01 files

FreeBSD/ports c943f0b — security/vuxml/vuln 2025.xml

security/vuxml: adjust linux-rl9-libxslt package for b0a3466f-5efc-11f0-ae84-99047d0a6bcc (+)

Rerolled linux-rl9-libxslt-1.1.34_5 now includes fixes for mentioned CVEs
DeltaFile
+2-0security/vuxml/vuln/2025.xml
+2-01 files

FreeBSD/ports 44f208e — textproc/linux-rl9-libxslt Makefile distinfo

textproc/linux-rl9-libxslt: chase upstream package reroll (+)

Changelog:
- Fix CVE-2025-10911 (RHEL-171991)
- Fix upgrade path for CVE-2023-40403 (RHEL-82213)
- Fix CVE-2023-40403 (RHEL-82213)
DeltaFile
+9-9textproc/linux-rl9-libxslt/distinfo
+2-2textproc/linux-rl9-libxslt/Makefile
+11-112 files

FreeBSD/ports ac50e11 — devel/mold Makefile

devel/mold: Take maintainership

MFH:            2026Q4
(cherry picked from commit 816076c042327074ff1cb2f7e1421f11bc4f3619)
DeltaFile
+1-1devel/mold/Makefile
+1-11 files

FreeBSD/ports 816076c — devel/mold Makefile

devel/mold: Take maintainership

MFH:            2026Q4
DeltaFile
+1-1devel/mold/Makefile
+1-11 files

FreeBSD/ports 8e90108 — devel/pinact Makefile distinfo

devel/pinact: Update to 5.0.2

Changelog: https://github.com/suzuki-shunsuke/pinact/releases/tag/v5.0.2

Reported by:    GitHub (watch releases)
DeltaFile
+5-5devel/pinact/distinfo
+1-1devel/pinact/Makefile
+6-62 files

FreeBSD/ports 403e568 — www/linux-brave Makefile distinfo

www/linux-brave: update to 1.98.60 release, baced on chromium 156.0.8078.47
DeltaFile
+204-2www/linux-brave/pkg-plist
+5-5www/linux-brave/distinfo
+2-1www/linux-brave/Makefile
+211-83 files

FreeBSD/ports e581809 — security/vuxml/vuln 2026.xml

security/vuxml: add www/linux-chrome package for f4f0bb8d-ce20-11f1-9bfa-a8a1599412c6 cromium security issue
DeltaFile
+4-0security/vuxml/vuln/2026.xml
+4-01 files

FreeBSD/ports f6fd9e1 — www/linux-chrome pkg-plist Makefile

www/linux-chrome: update to 156.0.8078.47 release
DeltaFile
+5-5www/linux-chrome/distinfo
+0-2www/linux-chrome/pkg-plist
+1-1www/linux-chrome/Makefile
+6-83 files

FreeBSD/ports ca3c053 — security/linux-rl9-ca-certificates Makefile distinfo

security/linux-rl9-ca-certificates: update to 2026.2.92_v9.0.319-90.3.el9_8

Changelog:
*Thu Oct 22 2026 Krenželok František <fkrenzel at redhat.com> - 2026.2.92_v9.0.319-90.3
- Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch

*Thu Oct 22 2026 Krenželok František <fkrenzel at redhat.com> - 2026.2.92_v9.0.319-90.2
- Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates

*Wed Oct 21 2026 Krenželok František <fkrenzel at redhat.com> - 2026.2.92_v9.0.319-90.1
- Removing: AAA Certificate Services root CA
- Removing: emSign ECC Root CA - G3 from Microsoft Code Signing certificates

*Wed Oct 21 2026 Krenželok František <fkrenzel at redhat.com> - 2026.2.92_v9.0.319-90.0
- Update to CKBI 2.92_v9.0.319 from NSS 3.131.1
  Removing:
  - emSign Root CA - C1

  Adding:

    [38 lines not shown]
DeltaFile
+21-105security/linux-rl9-ca-certificates/pkg-plist
+5-5security/linux-rl9-ca-certificates/distinfo
+2-2security/linux-rl9-ca-certificates/Makefile
+28-1123 files

FreeBSD/ports 4aaec62 — textproc/antiword Makefile

textproc/antiword: Deprecate

Upstream has been dead since the 0.37 release in 2005. The only
remaining fork (github.com/grobian/antiword) has no releases and does
not address security issues.

CVE-2026-111677 (heap out-of-bounds read in vGet8LstInfo) and
CVE-2026-111678 (stack out-of-bounds read in vGet8PapInfo and
vGet8ChrInfo) are unfixed upstream and in every distribution.

Set to expire on 2026-11-30.

Sponsored by:   Netzkommune GmbH

(cherry picked from commit 100c915a873d51c284aa4febb506da8db7a3a440)
DeltaFile
+4-1textproc/antiword/Makefile
+4-11 files

FreeBSD/ports 100c915 — textproc/antiword Makefile

textproc/antiword: Deprecate

Upstream has been dead since the 0.37 release in 2005. The only
remaining fork (github.com/grobian/antiword) has no releases and does
not address security issues.

CVE-2026-111677 (heap out-of-bounds read in vGet8LstInfo) and
CVE-2026-111678 (stack out-of-bounds read in vGet8PapInfo and
vGet8ChrInfo) are unfixed upstream and in every distribution.

Set to expire on 2026-11-30.

Sponsored by:   Netzkommune GmbH
DeltaFile
+4-1textproc/antiword/Makefile
+4-11 files

FreeBSD/ports a9482d4 — www/py-django-extensions pkg-descr distinfo, www/py-django-extensions/files patch-pyproject.toml patch-django__extensions_management_commands_mail__debug.py

www/py-django-extensions: Update 3.2.3 => 4.1

Changelog:
https://github.com/django-extensions/django-extensions/blob/4.1/CHANGELOG.md

Port changes:
- Switch to USE_PYTHON=pep517.
- Add concurrent to USE_PYTHON.
- Add mail/py-aiosmtpd to RUN_DEPENDS for mail_debug.
- Patch the PEP 639 license string for the setuptools in the tree.
- Fix portlint warnings.

PR:             299899
Approved by:    Kevin Golding <ports at caomhin.org> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 1c5cc9c088aeb0d7f94c4ccab4ee0acf29d3839a)
DeltaFile
+19-0www/py-django-extensions/files/patch-django__extensions_management_commands_mail__debug.py
+13-4www/py-django-extensions/Makefile
+17-0www/py-django-extensions/files/patch-pyproject.toml
+3-3www/py-django-extensions/distinfo
+5-0www/py-django-extensions/pkg-descr
+57-75 files

FreeBSD/ports 1c5cc9c — www/py-django-extensions pkg-descr distinfo, www/py-django-extensions/files patch-pyproject.toml patch-django__extensions_management_commands_mail__debug.py

www/py-django-extensions: Update 3.2.3 => 4.1

Changelog:
https://github.com/django-extensions/django-extensions/blob/4.1/CHANGELOG.md

Port changes:
- Switch to USE_PYTHON=pep517.
- Add concurrent to USE_PYTHON.
- Add mail/py-aiosmtpd to RUN_DEPENDS for mail_debug.
- Patch the PEP 639 license string for the setuptools in the tree.
- Fix portlint warnings.

PR:             299899
Approved by:    Kevin Golding <ports at caomhin.org> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q4
DeltaFile
+19-0www/py-django-extensions/files/patch-django__extensions_management_commands_mail__debug.py
+13-4www/py-django-extensions/Makefile
+17-0www/py-django-extensions/files/patch-pyproject.toml
+3-3www/py-django-extensions/distinfo
+5-0www/py-django-extensions/pkg-descr
+57-75 files

FreeBSD/ports 826b493 — net/onedrive Makefile distinfo

net/onedrive: Update 2.5.11 => 2.5.12

Changelog:
https://github.com/abraunegg/onedrive/blob/v2.5.12/changelog.md

PR:             300052
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 935b70f916af73437ac14677bb3c192fd3724590)
DeltaFile
+3-3net/onedrive/distinfo
+1-1net/onedrive/Makefile
+4-42 files

FreeBSD/ports 935b70f — net/onedrive Makefile distinfo

net/onedrive: Update 2.5.11 => 2.5.12

Changelog:
https://github.com/abraunegg/onedrive/blob/v2.5.12/changelog.md

PR:             300052
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q4
DeltaFile
+3-3net/onedrive/distinfo
+1-1net/onedrive/Makefile
+4-42 files

FreeBSD/src 8328ca3 — sys/compat/linux linux_ptrace.c

linux: Implement PTRACE_GETREGSET NT_PRFPREG and NT_X86_XSTATE

Implement NT_PRFPREG and NT_X86_XSTATE for PTRACE_GETREGSET on amd64.
Chrome's crashpad handler uses these to collect floating-point and
extended CPU register state for crash dumps.

Other architectures retain the previous EINVAL stub behavior.

Signed-off-by:  Ricardo Branco <rbranco at suse.de>
PR:             289285
Reviewed by:    kib
Pull-Request:   https://github.com/freebsd/freebsd-src/pull/2165

(cherry picked from commit c515e6040614434a9262ee8b5ac54b81476ec7ff)
DeltaFile
+85-6sys/compat/linux/linux_ptrace.c
+85-61 files

FreeBSD/src d8f8031 — sys/amd64/linux linux.h linux_machdep.c

linux: Add linux_pt_fpregset and bsd_to_linux_fpregset() for amd64

Add struct linux_pt_fpregset, the amd64 Linux NT_PRFPREG payload,
corresponding to user_i387_struct in Linux. The struct describes
the 512-byte FXSAVE area as exposed by PTRACE_GETREGSET.

Add bsd_to_linux_fpregset() to translate from FreeBSD's struct fpreg
to struct linux_pt_fpregset. Fields are extracted from the fpr_env[]
array which stores the FXSAVE environment packed as four 64-bit words.
The FP and XMM register banks are bulk-copied as opaque byte arrays.

Signed-off-by:  Ricardo Branco <rbranco at suse.de>
Reviewed by:    kib
Pull-Request:   https://github.com/freebsd/freebsd-src/pull/2165

(cherry picked from commit b84d31ee74535a0026ff83f2a34c07b7557f9785)
DeltaFile
+20-0sys/amd64/linux/linux_machdep.c
+18-0sys/amd64/linux/linux.h
+38-02 files

FreeBSD/src 29b79c5 — sys/amd64/linux linux.h, sys/amd64/linux32 linux.h

linux: Ignore sigaction(2) flags SA_UNSUPPORTED and SA_EXPOSE_TAGBITS

SA_UNSUPPORTED was introduced in Linux 5.11 to probe support
for other flags such as SA_EXPOSE_TAGBITS, introduced
at the same time. Ignore both.

Signed-off-by:  Ricardo Branco <rbranco at suse.de>
PR:             289285
Reviewed by:    pouria, kib
Pull-Request:   https://github.com/freebsd/freebsd-src/pull/2163

(cherry picked from commit fdea83a5f63b881ade91c6cc9dfbf173137512c5)
DeltaFile
+8-0sys/compat/linux/linux_signal.c
+2-0sys/i386/linux/linux.h
+2-0sys/arm64/linux/linux.h
+2-0sys/amd64/linux32/linux.h
+2-0sys/amd64/linux/linux.h
+16-05 files

FreeBSD/ports 5355d05 — www/node22 distinfo, www/node24 distinfo

www/{node,node22,node24,node26}: Security update

node22 22.23.2 -> 22.23.4
node24 24.21.0 -> 24.22.1
node26 26.10.0 -> 26.12.1
www/node follows node24

Changelog: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases

PR:             300001
Security:       33a752ba-4cbe-46d8-abda-587011d90575
With hat:       ports-secteam
Sponsored by:   Netzkommune GmbH

(cherry picked from commit ba74741313899fe901413257e1656adb247c9bd4)
DeltaFile
+0-22www/node24/files/patch-common.gypi
+0-13www/node24/files/patch-src_node.cc
+3-3www/node26/distinfo
+3-3www/node24/distinfo
+3-3www/node22/distinfo
+1-1www/node26/Makefile.version
+10-456 files not shown
+12-5112 files

FreeBSD/ports ba74741 — www/node22 distinfo, www/node24 distinfo

www/{node,node22,node24,node26}: Security update

node22 22.23.2 -> 22.23.4
node24 24.21.0 -> 24.22.1
node26 26.10.0 -> 26.12.1
www/node follows node24

Changelog: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases

PR:             300001
Security:       33a752ba-4cbe-46d8-abda-587011d90575
With hat:       ports-secteam
Sponsored by:   Netzkommune GmbH
DeltaFile
+0-22www/node24/files/patch-common.gypi
+0-13www/node24/files/patch-src_node.cc
+3-3www/node26/distinfo
+3-3www/node24/distinfo
+3-3www/node22/distinfo
+1-1www/node26/Makefile.version
+10-456 files not shown
+12-5112 files