BSD Commit Log Search

x11-fm/sushi: update to 50.0

Update to 50.0

  50.0
  ====

  - Fix a typo (Danial Behzadi)
  - Translation updates

Switch to USES= gettext-tools

Rewrite COMMENT and pkg-descr

Adjust dependencies

PR:             294997

x11/py-nwg-displays: Update to 0.4.2

Changelog: https://github.com/nwg-piotr/nwg-displays/releases/tag/v0.4.2

Reported by:    GitHub (watch releases)

devel/py-ty: Update to 0.0.35

Changelog: https://github.com/astral-sh/ty/blob/0.0.35/CHANGELOG.md

Reported by:    GitHub (watch releases)

net/samba423: Fix SIGABRT in bsd_attr_list()

After FORTIFY_SOURCE was added for https://bugzilla.samba.org/show_bug.cgi?id=16040, which landed in Samba 4.23.7, the net/samba423 port started crashing quite soon after startup.

It turns out that bsd_attr_list() does a number of overlapping strncpy() calls, and this is undefined behavior.

PR:     295130
Approved by:    samba (kiwi)
Sponsored by:   Klara, Inc.

misc/crush: Update to 0.67.0

Changelog: https://github.com/charmbracelet/crush/releases/tag/v0.67.0

Reported by:    GitHub (watch releases)

sysutils/py-croniter: Fix build.

PR:             295195
Approved by:    skreuzer@ (maintainer)

devel/cargo-c: update to 0.10.22

Changes: https://github.com/lu-zero/cargo-c/releases/tag/v0.10.22

www/waterfox: native DNS HTTPS resolving

This enables the geckos to use the OS' resolver to resolve
DNS HTTPS RRs (see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460
for specs on that)

PR:             295188
Sponsored by:   UNIS Labs
MFH:            2026Q2

(cherry picked from commit c43948c764157afaebeb539389c279ba6d3b5128)

www/librewolf: native DNS HTTPS resolving

This enables the geckos to use the OS' resolver to resolve
DNS HTTPS RRs (see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460
for specs on that)

PR:             295187
Sponsored by:   UNIS Labs
MFH:            2026Q2

(cherry picked from commit 5328dc34befa51e1dbe5767897daab1b135ef0a6)

www/librewolf: native DNS HTTPS resolving

This enables the geckos to use the OS' resolver to resolve
DNS HTTPS RRs (see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460
for specs on that)

PR:             295188
Sponsored by:   UNIS Labs
MFH:            2026Q2

www/librewolf: native DNS HTTPS resolving

This enables the geckos to use the OS' resolver to resolve
DNS HTTPS RRs (see RFC 9460 https://www.rfc-editor.org/rfc/rfc9460
for specs on that)

PR:             295187
Sponsored by:   UNIS Labs
MFH:            2026Q2

*/*: Bump port revision after electron41 update (573fa89ba24b)

devel/electron41: Update to 41.5.1

Changelog: https://github.com/electron/electron/releases/tag/v41.5.1

Reported by:    GitHub (watch releases)

x11-fonts/py-QtAwesome: update to 1.4.2.

textproc/expat2: [security] upgrade to 2.8.1

See https://blog.hartwork.org/posts/expat-2-8-1-released/

Fixes:  CVE-2026-45186 and CVSS unreliability
Security:       CVE-2026-45186

MFC after:      1 day

PR:             295206
Approved by:    vishwin

security/vuxml: adding an entry for expat

See https://blog.hartwork.org/posts/expat-2-8-1-released/
and https://nvd.nist.gov/vuln/detail/CVE-2026-45186

Security:       CVE-2026-45186

dns/dnsmasq: Update 2.92 => 2.92rel2 (6 CVEs)

Including privilege escalation, cache poisoning/rediction, information
leak, and denial of service.

See https://www.kb.cert.org/vuls/id/471747
See https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html

PR:             295204
Security:       eeb4d69a-4d74-11f1-9a9c-994b98c88011
Security:       CVE-2026-2291
Security:       CVE-2026-4890
Security:       CVE-2026-4891
Security:       CVE-2026-4892
Security:       CVE-2026-4893
Security:       CVE-2026-5172
Sponsored by:   UNIS Labs
MFH:            2026Q2

(cherry picked from commit b8a4de5ca6ca9d2607d14894dacc9e24852bac50)

dns/dnsmasq: Update 2.92 => 2.92rel2 (6 CVEs)

Including privilege escalation, cache poisoning/rediction, information
leak, and denial of service.

See https://www.kb.cert.org/vuls/id/471747
See https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html

PR:             295204
Security:       eeb4d69a-4d74-11f1-9a9c-994b98c88011
Security:       CVE-2026-2291
Security:       CVE-2026-4890
Security:       CVE-2026-4891
Security:       CVE-2026-4892
Security:       CVE-2026-4893
Security:       CVE-2026-5172
Sponsored by:   UNIS Labs
MFH:            2026Q2

devel/protobuf-java: Update 4.33.5 => 4.34.1

Changelogs:
https://github.com/protocolbuffers/protobuf/releases/tag/v34.0
https://github.com/protocolbuffers/protobuf/releases/tag/v34.1

PR:             295203
Sponsored by:   UNIS Labs

multimedia/ffmpeg: Update to 8.1.1

Changelog: https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n8.1.1

PR:             295041
Exp-run by:     antoine

Mk/Uses/go.mk: Introduce GO_LDFLAGS

Introduce GO_LDFLAGS so consumers can easily add variables to LDFLAGS
to the `go build` command without needing to redefine GO_BUILDFLAGS

PR:             285251
Reviewed by:    adamw

devel/gettext-runtime: Strip libintl.so

PR:             290873

devel/libclc: Update llvm19 flavor and add 20, 21, and 22 flavors

Rename plist variables LLVMnn to LLVM_GEnn (>=nn) and introduce
LLVM_LTnn (<nn).

Convert patch to REINPLACE_CMD because it fails to apply to the
LLVM 22 version.

PR:             290873
Approved by:    arrowd

databases/mongodb-tools: 100.16.1

Changelog:
https://github.com/mongodb/mongo-tools/blob/master/CHANGELOG.md#100161

astro/kstars: Update to 3.8.2

(cherry picked from commit 6c4e64dc67fefd8e2b85c77990a907ec15063904)

www/nginx-full: disable google-perftools on aarch64 to fix build

devel/google-perftools has been broken on aarch64 for a long time

PR:     294841
Approved-by:    maintainer timeout (joneum@)

devel/okteta: Update to 0.26.27

(cherry picked from commit 684361a41e36c16ec56e4c944de8ff7467d7fbff)

KDE: Update KDE Gear to 26.04.1

Announcement: https://kde.org/announcements/gear/26.04.1/

Ports changes:

databases/akonadi:
 - Remove unused dependencies

deskutils/kdepim-runtime:
 - Remove unused KWallet

graphics/okular:
 - Remove unused dependency

net/pimcommon:
 - Remove unused dependency

net-im/neochat:

    [3 lines not shown]

graphics/drawy: Add new port

Infinite whiteboard application for KDE.

WWW: https://apps.kde.org/drawy/
(cherry picked from commit 959b4d288528ab69ebf1c7c95ac30867f3fe5e45)

KDE: Update KDE Frameworks 6 to 6.26.0

Announcement: https://kde.org/announcements/frameworks/6/6.26.0/

Ports changes:

net/kf6-kcalendarcore:
 - Explicitly disable Python bindings