Mk/Uses/xorg-cat.mk: Resurrect CATEGORIES=proto and switch EXTRACT_SUFX to xz
Resurrect CATEGORIES=proto to simplify the port's Makefile.
Remove experimental from the meson's comment, as some ports have fully
transitioned to building with Meson.
Upstream has switched from bz2 to xz, so update EXTRACT_SUFX.
PR: 298092
Approved by: x11 (arrowd)
Approved by: fluffy (mentor)
security/pkcs11-tools: Update 3.0.0 => 3.1.0
Port Changes:
- Use distribution tarball rather than pure source code
for prebuilt manpages instead of depending on Pandoc.
Changelog:
https://github.com/Mastercard/pkcs11-tools/blob/v3.1.0/CHANGELOG.md
PR: 297826
Approved by: osa, vvd (Mentors, implicit)
Co-authored-by: Yusuf Yaman <nxjoseph at FreeBSD.org>
devel/tinygo: Update 0.19.0 => 0.42.0, take maintainership
The port has been stuck at 0.19.0 since 2021 and was deprecated on
2026-08-08 along with the other ports pinned to Go 1.25, scheduled for
removal on 2026-09-30. Upstream 0.42.0 supports Go 1.27 and LLVM 22, so
the pin goes away and with it the reason for the deprecation.
Upstream renamed Makefile to GNUmakefile, dropped the git rev-parse call
and ships the submodule marker files the build checks for, so
files/patch-Makefile is no longer needed at all and the port now builds
unpatched. wasm-opt is taken from devel/binaryen rather than built from
the bundled copy, and build/release no longer produces a pkg directory.
The bundled LLVM is now a fork of llvm-project carrying the Xtensa
backend, pinned by the commit recorded in llvm-version.txt. Keeping it
bundled rather than switching to devel/llvm22 is what makes the Xtensa
targets work, ESP32 included.
tinygo resolves GOROOT by running "go" from PATH, which the package does
[13 lines not shown]
graphics/heimer: Fix building with CMake 4
It is already fixed upstream the proper way, so this knob is only a temporary
measure.
Approved by: portmgr (fixit blanket)
www/code-server: Fix process listing
Split the ps(1) arguments the same way editors/vscode does; FreeBSD's
ps does not accept the combined column list, which broke the process
explorer and the process diagnostics.
Also document which extensions need a native language server on
FreeBSD and how to configure them, install the document as
EXTENSIONS.md and point to it from the install message.
Obtained from: editors/vscode (ps.ts patch)
Sponsored by: Netzkommune GmbH
www/py-scrapy: Update to 2.18.0
Changelog: https://github.com/scrapy/scrapy/releases/tag/2.18.0
Sync RUN_DEPENDS with the upstream requirements:
- Raise the minimum versions of w3lib (2.1.1), pyopenssl (24.3.0),
queuelib (1.6.1), service-identity (24.2.0) and lxml (4.6.4);
the stale floors previously allowed pkg to pair this scrapy with
an incompatible w3lib 1.x at runtime
- Add direct dependencies on cryptography, brotli and
backports.zstd (zstd response support on Python < 3.14), which
upstream declares explicitly since 2.18
games/stockfish: Update 18 => 19
Summary of changes:
+ In tests against Stockfish 18, brings an Elo gain of up to 44 points
+ Wins more than three times as many game pairs as it loses
+ This release introduces the SFNNv16 network architecture, reducing binary size
+ Increased strength by introducing new pawn-pair features
+ The secondary neural network, introduced in Stockfish 16.1, has been retired
+ stricter validation for board positions, FEN strings, and UCI commands
Release Notes:
https://stockfishchess.org/blog/2026/stockfish-19/
Changelog:
https://github.com/official-stockfish/Stockfish/releases/tag/sf_19
PR: 298289
Approved by: osa, vvd (Mentors, implicit)
x11/xscreensaver: Update 6.15 => 6.16
Enable autoreconf due to broken configure script being shipped with this
version. Disable intltoolize invocation as autoreconf runs it.
Reshuffle gettext USES, libintl is required regardless of NLS.
Reformat description to 80 columns.
While here, add backup MASTER_SITES since the upstream
website is currently inaccessible from some countries.
Changelog:
* New hacks, floppy, graphstat, amigajuggler and polarnight.
* iOS: image loading works even if the images in the photo roll need to
be downloaded from iCloud first. Images can display file names.
* New display modes in hypertorus.
* X11: Updates for systemd inhibitors on KDE Plasma 6.5.
https://www.jwz.org/xscreensaver/changelog.html
PR: 298244
Approved by: osa, vvd (Mentors, implicit)
security/openvpn-devel: Update to commit 22a24132da
This brings in the upstream development work of the last two months,
including two CVE fixes relevant for all platforms.
One of the bundled patch files was adjusted to take into account
upstream formatting changes on tests/t_cltsrv.sh.
PR: 298286
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q3
Security: CVE-2026-84790
Security: CVE-2026-84732
(cherry picked from commit 15c68d3c519680f8e624112270f923a060f08e3b)
security/openvpn-devel: Update to commit 22a24132da
This brings in the upstream development work of the last two months,
including two CVE fixes relevant for all platforms.
One of the bundled patch files was adjusted to take into account
upstream formatting changes on tests/t_cltsrv.sh.
PR: 298286
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q3
Security: CVE-2026-84790
Security: CVE-2026-84732
