games/anki: Update to 26.09
* Migrate to Yarn v4 to be in sync with upstream. To ensure that the
preinstalled Yarn v4 is actually used, a few minor workarounds and a
new variable PREINSTALLED_YARN are required.
The latter is necessary because, with Yarn v2 and newer, environment
variables prefixed with YARN_ can no longer be used.
* Sort pkg-plist while I'm here.
Changelog:
https://github.com/ankitects/anki/releases/tag/26.09
MFH: 2026Q3
Security: ce54d883-b060-11f1-b187-901b0edee044
(cherry picked from commit 65434f71218e5a8114ea642231acaeb609ced7bd)
games/anki: Update to 26.08
* Switch to USES=npm and adjust/remove the relevant parts.
Although Yarn v4 is already being used according to "package.json",
stick with Yarn v1 for now to complete a 1:1 migration from the before
to the after state with respect to the used tools during build.
Changelog:
https://github.com/ankitects/anki/releases/tag/26.08
(cherry picked from commit 9b3e128970f2c53a39eed9b0157514459a5b131f)
devel/zizmor: Add port: Static analysis for GitHub Actions
zizmor is a static analysis tool for CI/CD systems.
It can find and fix security issues in common CI/CD setups, including
GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor
finds:
- Template injection vulnerabilities, leading to attacker-controlled
code execution
- Accidental credential persistence and leakage
- Excessive permission scopes and credential grants to runners
- Impostor commits and confusable git references
- ...and much more!
WWW: https://docs.zizmor.sh/
WWW: https://github.com/zizmorcore/zizmor
lang/babashka: Update to 1.13.222
Changes since 1.13.220:
1.13.222 (2026-09-14)
Read the release blog post:
https://blog.michielborkent.nl/babashka-1.13.222.html
* Fix No :mvn/version specified when resolving dependencies on Jetty
ee9 and ee10 caused by cached POMs sharing dependency management
across versions
* bb nrepl-server writes .nrepl-port on start and removes it on
exit, so bb repl --connect finds the server without an address
* Bump org.babashka/cli to 0.12.91
1.13.221 (2026-09-14)
* Resolve dependencies without a JVM by default. Set :deps-resolver
[74 lines not shown]
