BSD Commit Log Search

graphics/gpxsee: Update to 16.15

https://github.com/tumic0/GPXSee/releases/tag/16.15

PR:             298449
Approved by:    fluffy (mentor)

sysutils/tflint: Update to 0.64.0

ChangeLog:
https://github.com/terraform-linters/tflint/releases/tag/v0.64.0

security/vuxml: Document gitea < 1.27.3 vulnerabilities

Gitea 1.27.3 fixes 26 security issues, hardens issue searching
that an unfiltered query no longer enumerates every public
repository into the indexer filter and removes unsafe code
from the internal private endpoints.

PR:             298072
Approved by:    osa, vvd (Mentors, implicit)

www/gitea: Security update 1.27.2 => 1.27.3

Release Notes:
https://blog.gitea.com/release-of-1.27.3/

PR:             298072
Approved by:    ports at foss-daily.org (maintainer timeout, 2 weeks)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-66877
Security:       CVE-2026-71184
Security:       CVE-2026-68957
Security:       CVE-2026-60010
Security:       CVE-2026-70406
Security:       CVE-2026-63792
Security:       CVE-2026-66874
Security:       CVE-2026-68964
Security:       CVE-2026-67577
Security:       CVE-2026-66849
Security:       CVE-2026-73135

    [18 lines not shown]

www/gitea: Security update 1.27.2 => 1.27.3

Release Notes:
https://blog.gitea.com/release-of-1.27.3/

PR:             298072
Approved by:    ports at foss-daily.org (maintainer timeout, 2 weeks)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-66877
Security:       CVE-2026-71184
Security:       CVE-2026-68957
Security:       CVE-2026-60010
Security:       CVE-2026-70406
Security:       CVE-2026-63792
Security:       CVE-2026-66874
Security:       CVE-2026-68964
Security:       CVE-2026-67577
Security:       CVE-2026-66849
Security:       CVE-2026-73135

    [16 lines not shown]

net-im/telegram-desktop: update to 7.2.8 release (+)

Drop unneeded dependecy on protobuf [1]

PR:             298401 [1]
Release notes:  https://github.com/telegramdesktop/tdesktop/releases/tag/v7.2.8

net-im/tg_owt: drop unneeded dependency on protobuf

PR:     298401

devel/sem: Update to 0.25.0

sysutils/ngbuddy: Update 1.0 => 1.1

This update also corrects rc.d service order
reported by feld@ in PR 298188.

While here, update maintainer address.

Commit log:
https://github.com/bellhyve/ngbuddy/compare/v1.0...v1.1

PR:             298371
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit 9daead358475786175c3d923c4d8812179895800)

sysutils/ngbuddy: Update 1.0 => 1.1

This update also corrects rc.d service order
reported by feld@ in PR 298188.

While here, update maintainer address.

Commit log:
https://github.com/bellhyve/ngbuddy/compare/v1.0...v1.1

PR:             298371
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

www/mod_auth_openidc: Update to 2.4.20.3

www/lexbor: Update 3.0.0 => 3.0.1

net/krakend-ce: Update 2.13.10 => 2.13.11

devel/rustup-init: Update 1.28.1 => 1.29.1

While here:
- Add linked libraries from `ldd` output to LIB_DEPENDS.
- Unbundle OpenSSL.
- Add TESTING_UNSAFE.

Changelog:
https://github.com/rust-lang/rustup/blob/1.29.1/CHANGELOG.md

PR:             298213
Approved by:    osa, vvd (Mentors, implicit)
Co-authored-by: Ian Wagner <ianthetechie at gmail.com>

editors/libreoffice: fix some crashes and VCL selection (+)

* Fix crash with SAL_USE_VCLPLUGIN=gen and enabled Skia [1]
* Allow Qt VCL plugin when LO started outside the known DE (e.g., pure X) [2]

PR:     298257 [1], 298227, [2]

devel/py-mockito: new port

devel/py-tzdata: Update to 2026.4

Approved by:    kai (maintainer via email)

textproc/py-zensical: Update to 0.0.62

Approved by:    kai (maintainer via email)

security/vuxml: Document multiple strongSwan vulnerabilities

PR:             298372
Sponsored by:   Rubicon Communications, LLC ("Netgate")

science/py-tensorflow: Fix build

It was broken since with the last update of jsoncpp
its headers were pushed into include/jsoncpp.

Reported by:    fallout

security/strongswan: Update 6.0.7 => 6.1.0

Changelog:
https://github.com/strongswan/strongswan/releases/tag/6.1.0

PR:             298372
MFH:            2026Q3
Security:       CVE-2026-78123
Security:       CVE-2026-78124
Security:       CVE-2026-78126
Security:       CVE-2026-78127
Security:       CVE-2026-78129
Security:       CVE-2026-78130
Security:       CVE-2026-78131
Security:       CVE-2026-78132
Security:       CVE-2026-78133
Security:       CVE-2026-78134
Security:       CVE-2026-78135
Sponsored by:   Rubicon Communications, LLC ("Netgate")

    [2 lines not shown]

security/strongswan: Update 6.0.7 => 6.1.0

Changelog:
https://github.com/strongswan/strongswan/releases/tag/6.1.0

PR:             298372
MFH:            2026Q3
Security:       CVE-2026-78123
Security:       CVE-2026-78124
Security:       CVE-2026-78126
Security:       CVE-2026-78127
Security:       CVE-2026-78129
Security:       CVE-2026-78130
Security:       CVE-2026-78131
Security:       CVE-2026-78132
Security:       CVE-2026-78133
Security:       CVE-2026-78134
Security:       CVE-2026-78135
Sponsored by:   Rubicon Communications, LLC ("Netgate")

x11-fm/thunar: Update to 4.20.10

graphics/shotwell: update to 33.0

Release Notes:
  https://gitlab.gnome.org/GNOME/shotwell/-/blob/33.0/NEWS?ref_type=tags

science/ttk: update 1.3.0 → 1.4.0

www/hedgedoc: Add new port

The best platform to write and share markdown.

HedgeDoc (formerly known as CodiMD) is an open-source, web-based,
self-hosted, collaborative markdown editor.

You can use it to easily collaborate on notes, graphs and even
presentations in real-time. All you need to do is to share your
note-link to your co-workers and they're ready to go.

...

This brings back www/hedgedoc which was removed a while back because of
the node.js version on tree.

net-im/signal-desktop: Update to 8.27.0

security/vuxml: document irc/znc vulnerabilities

mail/postfix-logwatch: update to 1.40.07

Switch upstream to michael.orlitzky.com (SourceForge project abandoned).
Remove patch integrated upstream. Fix variable ordering per portclippy.

devel/py-inotify-simple: Utilize USES=inotify

Suggested by:   makc