BSD Commit Log Search

sysutils/gsmartcontrol: Update to 2.0.2

Take maintainership.

Changelog:
https://github.com/ashaduri/gsmartcontrol/releases#release-v2.0.2

PR:             292134
Approved by:    fluffy (mentor)

sysutils/vm-tui: New port

vm-tui is a terminal UI and scripting front-end for vm-bhyve, showing
guests, switches, datastores, images, templates and rc.conf settings,
and editing guest configuration keys with pre-flight checks.

WWW: https://github.com/olgeni/vm-tui

sysutils/blockio: Update to 1.3.0

databases/datui: Update to 0.3.2

net/croc: Update to 11.5.3

textproc/livediff: Update to 3.4.0

net/cliproxyapi: Update to 7.3.2

sysutils/treemd: Update to 0.8.2

Reported by:    "github-actions[bot]" <notifications at github.com>

www/librespeed: update to 6.3.0

Changes:        https://github.com/librespeed/speedtest/releases/tag/v6.3.0

devel/pinact: Update to 5.0.0

Changelog: https://github.com/suzuki-shunsuke/pinact/releases/tag/v5.0.0

Reported by:    Repology

www/{nginx,nginx-devel,freenginx}: 3rd-party modules management

Pick up the form_input module sources 0.13.0.

Sponsored by:   Netzkommune GmbH

www/nginx-module-form-input: Update to 0.13.0

Switch the project over to github.com/joneum/form-input-nginx-module,
which is the active repository.

multipart/form-data bodies are read where form_input_multipart is on,
file parts are skipped.  Bodies that nginx spooled to a temporary file
are read instead of coming back empty.  set_form_input_multi is refused
at startup when array-var-nginx-module is not part of the build, and the
request body is only buffered in locations that use a directive.

Sponsored by:   Netzkommune GmbH

devel/bazel8: update to 8.8.0

www/remark42: update to 1.17.1

- Bump Go requirement to 1.27 (upstream go.mod requires go 1.27.0)
- Add patch to fix TypeScript build with newer CSSStyleDeclaration types

sysutils/leaf: Update to 1.28.2

Changelog: https://github.com/RivoLink/leaf/blob/1.28.2/CHANGELOG.md

Reported by:    GitHub (watch releases)

misc/codex: Update to 0.154.0

While here, update patch to restore apply patch functionality. [1]

Changelog: https://github.com/openai/codex/releases/tag/rust-v0.154.0

PR:             298406
Reported by:    shurd
Obtained from:  OpenBSD ports (https://github.com/openbsd/ports/blob/master/devel/codex/patches/patch-codex-rs_core_src_tools_handlers_apply_patch_rs) [1]

databases/sqlitebrowser: Update and switch to qt6

Switch the bundled qhexedit2 to the port.

Changelog:
https://github.com/sqlitebrowser/sqlitebrowser/compare/v3.13.1...9ccf550

PR:             296893
Approved by:    osa (mentor), fluffy (mentor)

net/openldap26-server: update to 2.6.15

misc/py-litellm-proxy-extras: Update to 0.4.97

Reported by:    Repology

textproc/py-jiter: Update to 0.17.0

Changelog: https://github.com/pydantic/jiter/releases/tag/v0.17.0

Reported by:    Repology

www/katana: Update to 1.7.0

ChangeLog:
https://github.com/projectdiscovery/katana/releases/tag/v1.7.0

security/nuclei: Update to 3.11.1

ChangeLog:
https://github.com/projectdiscovery/nuclei/releases/tag/v3.11.1

devel/golangci-lint: Update to 2.13.2

ChangeLog:
https://github.com/golangci/golangci-lint/releases/tag/v2.13.2

graphics/gpxsee: Update to 16.15

https://github.com/tumic0/GPXSee/releases/tag/16.15

PR:             298449
Approved by:    fluffy (mentor)

sysutils/tflint: Update to 0.64.0

ChangeLog:
https://github.com/terraform-linters/tflint/releases/tag/v0.64.0

security/vuxml: Document gitea < 1.27.3 vulnerabilities

Gitea 1.27.3 fixes 26 security issues, hardens issue searching
that an unfiltered query no longer enumerates every public
repository into the indexer filter and removes unsafe code
from the internal private endpoints.

PR:             298072
Approved by:    osa, vvd (Mentors, implicit)

www/gitea: Security update 1.27.2 => 1.27.3

Release Notes:
https://blog.gitea.com/release-of-1.27.3/

PR:             298072
Approved by:    ports at foss-daily.org (maintainer timeout, 2 weeks)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-66877
Security:       CVE-2026-71184
Security:       CVE-2026-68957
Security:       CVE-2026-60010
Security:       CVE-2026-70406
Security:       CVE-2026-63792
Security:       CVE-2026-66874
Security:       CVE-2026-68964
Security:       CVE-2026-67577
Security:       CVE-2026-66849
Security:       CVE-2026-73135

    [18 lines not shown]

www/gitea: Security update 1.27.2 => 1.27.3

Release Notes:
https://blog.gitea.com/release-of-1.27.3/

PR:             298072
Approved by:    ports at foss-daily.org (maintainer timeout, 2 weeks)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-66877
Security:       CVE-2026-71184
Security:       CVE-2026-68957
Security:       CVE-2026-60010
Security:       CVE-2026-70406
Security:       CVE-2026-63792
Security:       CVE-2026-66874
Security:       CVE-2026-68964
Security:       CVE-2026-67577
Security:       CVE-2026-66849
Security:       CVE-2026-73135

    [16 lines not shown]

net-im/telegram-desktop: update to 7.2.8 release (+)

Drop unneeded dependecy on protobuf [1]

PR:             298401 [1]
Release notes:  https://github.com/telegramdesktop/tdesktop/releases/tag/v7.2.8

net-im/tg_owt: drop unneeded dependency on protobuf

PR:     298401