BSD Commit Log Search

security/vuxml: fix package name

Fixes:  25fdff6924a2ffc740d7102a0940c896cc8c35d0

www/squidclamav: Update to 7.5

Pull Request:   Rubicon Communications, LLC ("Netgate")

devel/buildkite_agent: Enable logfile for output

Reviewed by:    dch
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57885

x11-toolkits/mygui-*: restore oblivoiusly zeroed PORTREVISIONS

sysutils/leaf: Update to 1.26.1

Changelog: https://github.com/RivoLink/leaf/blob/1.26.1/CHANGELOG.md

Reported by:    GitHub (watch releases)

graphics/poppler: Fix CVE-2026-10118

PR:             296769
Security:       CVE-2026-10118
Approved by:    desktop (arrowd)
Approved by:    osa (mentor)
MFH:            2026Q3

(cherry picked from commit fcafe0397f536499c548605740b9ef7ed62b1cbf)

security/vuxml: Document Poppler vulnerability

PR:             296769
Approved by:    osa (mentor)
Security:       CVE-2026-10118

devel/mercurial: update to 7.2.3

Regenerate patches and update pkg-plist.

PR:             296404
Approved by:    python (maintainer timeout)

Sponsored by:   tipi.work

devel/git: Update to 2.55.0

Avoid rust buil-time requirement while it's still possible

Sponsored by:   Rubicon Communications, LLC ("Netgate")

Mk/Uses/npm.mk: Unbreak make index

In the previous commit, NPM_VER_MAJOR and NPM_VER_MINOR are left
undefined when NPM_VER is manually specified. This change corrects the
error.

Reported by:    Xavier Humbert <xavier at groumpf.org> (via ports),
                antoine (via ports-committers)
Fixes:          dad28f35db5a (Mk/Uses/npm.mk: Correct NPM version comparison)

devel/lndir: Take maintainership

devel/R-cran-mlbench: Update to 2.1-9

ChangeLog: https://cran.r-project.org/web/packages/mlbench/NEWS

math/R-cran-slam: Update to 0.1-56

ChangeLog: https://github.com/cran/slam/compare/0.1-55...0.1-56

japanese/lookup: Do not build *.elc files

PR:             296744
Approved by:    osa (mentor)

graphics/poppler: Fix CVE-2026-10118

PR:             296769
Security:       CVE-2026-10118
Approved by:    desktop (arrowd)
Approved by:    osa (mentor)
MFH:            2026Q3

audio/beets: Update 2.5.1 => 2.12.0

Changelogs:
https://github.com/beetbox/beets/releases/tag/v2.6.0
https://github.com/beetbox/beets/releases/tag/v2.6.1
https://github.com/beetbox/beets/releases/tag/v2.6.2
https://github.com/beetbox/beets/releases/tag/v2.7.0
https://github.com/beetbox/beets/releases/tag/v2.7.1
https://github.com/beetbox/beets/releases/tag/v2.8.0
https://github.com/beetbox/beets/releases/tag/v2.9.0
https://github.com/beetbox/beets/releases/tag/v2.10.0
https://github.com/beetbox/beets/releases/tag/v2.11.0
https://github.com/beetbox/beets/releases/tag/v2.12.0

PR:             296425
Approved by:    Leonhard Wachutka <leonhard at wachutka.eu> (maintainer)
Sponsored by:   UNIS Labs
MFH:            2026Q3

(cherry picked from commit e8a92391cd7f44bcee6812f9ab14bc1f4629128e)

audio/beets: Update 2.5.1 => 2.12.0

Changelogs:
https://github.com/beetbox/beets/releases/tag/v2.6.0
https://github.com/beetbox/beets/releases/tag/v2.6.1
https://github.com/beetbox/beets/releases/tag/v2.6.2
https://github.com/beetbox/beets/releases/tag/v2.7.0
https://github.com/beetbox/beets/releases/tag/v2.7.1
https://github.com/beetbox/beets/releases/tag/v2.8.0
https://github.com/beetbox/beets/releases/tag/v2.9.0
https://github.com/beetbox/beets/releases/tag/v2.10.0
https://github.com/beetbox/beets/releases/tag/v2.11.0
https://github.com/beetbox/beets/releases/tag/v2.12.0

PR:             296425
Approved by:    Leonhard Wachutka <leonhard at wachutka.eu> (maintainer)
Sponsored by:   UNIS Labs
MFH:            2026Q3

www/nextcloud-calendar: Update to 6.5.1

devel/R-cran-urlchecker: Update to 2.0.0

The port doesn't need compiling so remove BUILD_DEPENDS.
Switch WWW to canonical form.

Changelog:
https://cran.r-project.org/web/packages/urlchecker/news/news.html

security/vuxml: Add devel/ocaml-opam vulnerability

While here, fix whitespaces of two previous entries after the
feedback of `make validate`.

PR:             296642
Approved by:    osa, vvd (Mentors, implicit)

multimedia/filebot: update to 5.2.3

This brings multimedia/filebot up to date with the current version.

Some changes on our end:

1. Drop OpenJFX in favor of Zenity: Long since overdue, since OpenJFX is long-since abandoned. I don't know exactly when Rednoah added this, but now we have it also.

2. Move to JAVA 25: Dropping OpenJFX opens us up to a modern JVM. I'm not sure that JFX was actually holding us back before, but now we can be certain.

3. Limit to amd64: there's a prebuilt JNA lib required from the developer. If you need filebot on other archs, that is an exercise left to the reader.

4. Drop pkg-message: The advice in the pkg-message is outdated.

PR:     296768

devel/ocaml-opam: Security update 2.5.1 => 2.5.2

Changelog:
https://github.com/ocaml/opam/blob/2.5.2/CHANGES

PR:             296642
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
Security:       CVE-2026-57825

(cherry picked from commit d5ea67850ea1a47bffee8e76a5215b73345f897c)

devel/ocaml-opam: Security update 2.5.1 => 2.5.2

Changelog:
https://github.com/ocaml/opam/blob/2.5.2/CHANGES

PR:             296642
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
Security:       CVE-2026-57825

www/otter-browser: Schedule for removal before 2026Q4

Requires deprecated Qt5 WebEngine

deskutils/semantik: Schedule for removal before 2026Q4

Requires deprecated Qt5 WebEngine

www/py-qt5-webengine: Schedule for removal before 2026Q4

Requires deprecated Qt5 WebEngine

graphics/krita: Update to 6.0.2.1 and switch to Qt6

Although the same tarball is used for 5.3.2.1 (Qt5) and 6.0.2.1 (Qt6),
Qt6 build is still considered experimental. Both versions are almost
functionally identical, with 6.0.x having more Wayland functionality.

Announcement:   https://krita.org/en/posts/2026/krita-5.3.0-released/
                https://krita.org/en/posts/2026/krita-5.3.1-released/
                https://krita.org/en/posts/2026/krita-5.3.2-released/
                https://krita.org/en/posts/2026/krita-5.3.2.1-released/

graphics/kseexpr: Update to 6.0.0.0 and switch to Qt6

Use PLIST_SUB to reduce diff on future updates.

graphics/krita-gmic-plugin: Update to 3.7.4.1 and switch to Qt6

Replace WRKSRC_SUBDIR with CMAKE_SOURCE_PATH to simplify patching.

devel/esbuild: update to 0.28.1

ChangeLog:      https://github.com/evanw/esbuild/compare/v0.28.0...v0.28.1
PR:             296408
Approved by:    dch (maintainer)

Sponsored by:   tipi.work