www/immich: Update to 3.3.6
The release only touches the machine learning side, the server carries the
new version number. The build kit returns to the plain version; the
revision it carried was for the geodata file that the kit script now fetches
on its own.
Changelog: https://github.com/immich-app/immich/releases/tag/v3.3.6
Sponsored by: Netzkommune GmbH
www/immich-ml: Update to 3.3.6
Upstream turns onnxruntime telemetry off, which a recent onnxruntime release
had enabled by default. This port never sent anything: misc/py-onnxruntime
builds with telemetry off, and the generic implementation outside Windows is
a stub that reports itself disabled. The guard upstream added is harmless
here.
Changelog: https://github.com/immich-app/immich/releases/tag/v3.3.6
Sponsored by: Netzkommune GmbH
java/openjdk11: Update to 11.0.33, incl eMudhra fixes
Update to latest upstream patch version to address issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
textproc/py-yapf: Add the platformdirs run dependency, fix pgen2.conv
yapf 0.43 requires platformdirs at run time: the vendored
yapf_third_party/_ylib2to3/pgen2/driver.py imports it, so
"import yapf" fails with ModuleNotFoundError in a clean install (seen
through devel/py-medikit). The port only listed it in TEST_DEPENDS.
Also fix the vendored pgen2/conv.py, which imports grammar and token
absolutely ("from pgen2 import ...") and so could never be imported;
import them relatively.
While here, fix portlint warnings.
PR: 300215
graphics/qcomicbook: Update to 0.10.0, migrate to Qt6, take maintainership
- Point to https://github.com/valepert/QComicBook fork.
- Raise the compiler floor to C++17.
- Drop deprecation
Approved by: makc (mentor)
Approved by: arrowd (co-mentor)
(cherry picked from commit 418f27c2542824710095a6465d8b2532241af5ce)
graphics/qimgv: Remove Qt5 build option
Make the port build unconditionally with Qt6. The main.cpp patch drops
its Qt version conditional and sets the desktop filename for Qt6 only.
Bump PORTREVISION.
Approved by: arrowd (co-mentor)
(cherry picked from commit 2e6c1efc6d023024a84676b1d0ca72da582e5bcc)
graphics/qcomicbook: Update to 0.10.0, migrate to Qt6, take maintainership
- Point to https://github.com/valepert/QComicBook fork.
- Raise the compiler floor to C++17.
- Drop deprecation
Approved by: makc (mentor)
Approved by: arrowd (co-mentor)
graphics/qimgv: Remove Qt5 build option
Make the port build unconditionally with Qt6. The main.cpp patch drops
its Qt version conditional and sets the desktop filename for Qt6 only.
Bump PORTREVISION.
Approved by: arrowd (co-mentor)
misc/py-onnxruntime: Fix loading models with external data
fcntl(F_KINFO) needs kf_structsize set to the size of the structure,
otherwise the kernel refuses the request. Without it the FreeBSD branch
never resolved the path of an opened file, so no model with weights in an
external data file could be loaded.
Pending upstream as microsoft/onnxruntime#33433.
PR: 300445
Approved by: portmgr (blanket)
Sponsored by: Netzkommune GmbH
www/py-flask-oauthlib: mark broken and set to expire
the port is broken at runtime with current version of werkzeug in the tree.
Last release of it was 3 years ago and upstream author recommends to switch
to switch to Authlib (security/py-authlib).
PR: 299797
Reported by: Patrick Crandol <patrick at crandol.com>
www/py-sockjs-tornado: update to 1.0.7
This release fixes runtime with tornado 6.5. Also add unreleased upstream
patch that's fix XSS issue. Port has been switched to pep517 with
porlint warnings fixed.
Pass maintainership to python@
PR: 299792
Reported by: Patrick Crandol <patrick at crandol.com>
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Build the echo, headers_more, eval, set_misc, srcache, rds_json, rds_csv,
xss and drizzle modules from their own ports instead of bundling the
sources here.
Sponsored by: Netzkommune GmbH
www/nginx-module-set-misc: Add New Port
Sources of the set_misc module, which adds extra set_* directives on top
of the nginx development kit. Built by the nginx ports when their
SET_MISC option is enabled.
Sponsored by: Netzkommune GmbH
www/nginx-module-srcache: Add New Port
Sources of the srcache module, which provides subrequest based response
caching. Built by the nginx ports when their SRCACHE option is enabled.
Sponsored by: Netzkommune GmbH
www/nginx-module-xss: Add New Port
Sources of the xss module, which wraps JSON output in a JavaScript
callback. Built by the nginx ports when their XSS option is enabled.
Sponsored by: Netzkommune GmbH
