BSD Commit Log Search

security/py-certifi: Update to 2026.10.23

The bundle drops "emSign ECC Root CA - G3", "emSign Root CA - C1" and
"emSign ECC Root CA - C3", following the eMudhra emSign CA compromise:
2026.10.18 removed the emSign roots, 2026.10.19 restored the ones that
are not affected, and 2026.10.23 removed two more.  The package layout
and the build are unchanged.

Commit log:
https://github.com/certifi/python-certifi/compare/2026.07.22...2026.10.23

PR:             299779
Approved by:    sunpoet (maintainer timeout, 13 days)
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 8f6ec8f61ee24a69eaac2b1131a0f411bde9a004)

security/py-certifi: Update to 2026.10.23

The bundle drops "emSign ECC Root CA - G3", "emSign Root CA - C1" and
"emSign ECC Root CA - C3", following the eMudhra emSign CA compromise:
2026.10.18 removed the emSign roots, 2026.10.19 restored the ones that
are not affected, and 2026.10.23 removed two more.  The package layout
and the build are unchanged.

Commit log:
https://github.com/certifi/python-certifi/compare/2026.07.22...2026.10.23

PR:             299779
Approved by:    sunpoet (maintainer timeout, 13 days)
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

dns/dnsdist: Update 2.1.2 => 2.1.3

Release Notes:
https://blog.powerdns.com/2026/10/12/powerdns-dnsdist-2.1.3-and-2.0.11-released

Changelog:
https://www.dnsdist.org/changelog.html#change-2.1.3

While here, add LMDB0 option that is enabled by default to make
switching to LMDB 1.0 possible (when disabled).

PR:             299435
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 6f409e6f9454f3b91d2e3d11c2bb99856c5667a1)

dns/dnsdist: Update 2.1.2 => 2.1.3

Release Notes:
https://blog.powerdns.com/2026/10/12/powerdns-dnsdist-2.1.3-and-2.0.11-released

Changelog:
https://www.dnsdist.org/changelog.html#change-2.1.3

While here, add LMDB0 option that is enabled by default to make
switching to LMDB 1.0 possible (when disabled).

PR:             299435
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

sysutils/multitail: Update 7.1.5 => 7.1.6

This update fixes shell injection in '-ex' command execution
along with other changes. The fix causes a breaking change.

Breaking change explained here:
https://github.com/folkertvanheusden/multitail/commit/84f304e

Commit log:
https://github.com/folkertvanheusden/multitail/compare/7.1.5...7.1.6

While here, polish Makefile and switch to USE_GITHUB.

PR:             300176
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2025-70544
MFH:            2026Q4

(cherry picked from commit 4cfe21b5f4f847f47c46fdb7f90152f76d25aff8)

sysutils/multitail: Update 7.1.5 => 7.1.6

This update fixes shell injection in '-ex' command execution
along with other changes. The fix causes a breaking change.

Breaking change explained here:
https://github.com/folkertvanheusden/multitail/commit/84f304e

Commit log:
https://github.com/folkertvanheusden/multitail/compare/7.1.5...7.1.6

While here, polish Makefile and switch to USE_GITHUB.

PR:             300176
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2025-70544
MFH:            2026Q4

databases/duckdb: link option extensions into libduckdb; unbreak postgres_scanner, spatial and ducklake extensions

Patch submitted via e-mail.

mail/mailpit: Update to 1.33.1

devel/gitlab-runner: update to 19.5.3

Changes:        https://gitlab.com/gitlab-org/gitlab-runner/blob/main/CHANGELOG.md

deskutils/stirling-pdf: update to 3.3.0

Changes:        https://github.com/Stirling-Tools/Stirling-PDF/releases

security/trivy: update to 0.76.2

Changes:        https://github.com/aquasecurity/trivy/releases

x11-fm/xfe: Update to 2.1.13

net/yami4: Improve port

* Use HTTPS for MASTER_SITES.
* Always build the Core and C++ libraries, removing the option.
* Use PORTDOCS=* instead of listing a lot of documentation in pkg-plist.

PR:             300142
Approved by:    osa, vvd (mentors, implicit)

net/zapret2: Update 1.0.6 => 1.0.7

Approved by:            yuri@ (maintainer)

Differential Revision: https://reviews.freebsd.org/D61319

mail/vandelay: Update 1.0.14 => 1.0.15

Changelog:
https://github.com/stalwartlabs/vandelay/blob/v1.0.15/CHANGELOG.md

PR:             300603
Approved by:    osa, vvd (mentors, implicit)

security/vuxml: Add dns/powerdns vulnerability

PR:             299437
Approved by:    osa, vvd (mentors, implicit)

devel/ccache4: Backport fix for incbin directive handling

PR:            300573

dns/powerdns: Update 5.1.4 => 5.1.5

This release contains bug fixes, as well as a minor
feature and a security fix.

Security Advisory:
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-13.html

Changelog:
https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.5

While here, add LMDB0 option that is enabled by default to make
switching to LMDB 1.0 possible (when disabled).

PR:             299437
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2026-73206
MFH:            2026Q4

(cherry picked from commit 6b277d8f5b615dea474618073ae3fa96bf50c1d8)

dns/powerdns: Update 5.1.4 => 5.1.5

This release contains bug fixes, as well as a minor
feature and a security fix.

Security Advisory:
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-13.html

Changelog:
https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.5

While here, add LMDB0 option that is enabled by default to make
switching to LMDB 1.0 possible (when disabled).

PR:             299437
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2026-73206
MFH:            2026Q4

security/openvpn-auth-oauth2: Update to 2.3.2

editors/vim: Update to 9.2.1302

x11/tabby: Add New Port

Tabby is a terminal emulator with integrated SSH, Telnet and serial
clients.  It keeps tabs and split panes in persistent layouts, stores
connection profiles in an encrypted vault and can be extended through
plugins.

www: https://tabby.sh/

Sponsored by:   Netzkommune GmbH

databases/pgbackrest: Update 2.59.1 => 2.60.0

This update brings new features, improvements and bug fixes.
They also have some important notes.

Release Notes:
https://pgbackrest.org/release.html#2.59.2
https://pgbackrest.org/release.html#2.59.3
https://pgbackrest.org/release.html#2.60.0

Changelogs:
https://github.com/pgbackrest/pgbackrest/releases/tag/release/2.59.2
https://github.com/pgbackrest/pgbackrest/releases/tag/release/2.59.3
https://github.com/pgbackrest/pgbackrest/releases/tag/release/2.60.0

PR:             300585
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

(cherry picked from commit bceb9fb4b1bf407bb42765c49456790027d366cc)

databases/pgbackrest: Update 2.59.1 => 2.60.0

This update brings new features, improvements and bug fixes.
They also have some important notes.

Release Notes:
https://pgbackrest.org/release.html#2.59.2
https://pgbackrest.org/release.html#2.59.3
https://pgbackrest.org/release.html#2.60.0

Changelogs:
https://github.com/pgbackrest/pgbackrest/releases/tag/release/2.59.2
https://github.com/pgbackrest/pgbackrest/releases/tag/release/2.59.3
https://github.com/pgbackrest/pgbackrest/releases/tag/release/2.60.0

PR:             300585
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

devel/nextpnr-devel: Update to 2026-11-04

devel/trellis: Update to 2026-10-31

Changes:
https://github.com/YosysHQ/prjtrellis/compare/73bd411731808d80ead650bbc9840d9e02911e9e...2d12005ab9703ff60603d7ae91dca254939e671f

net/routinator: Update 0.15.3 => 0.16.0

This update brings new features, improvements, bug fixes
and some breaking changes.

Release Notes:
https://community.nlnetlabs.nl/t/routinator-0-16-0-full-of-grace-released/3501

Changelog:
https://github.com/NLnetLabs/routinator/releases/tag/v0.16.0

PR:             300599
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

(cherry picked from commit e915daa6d85c3888aa4c0e256b465cb3c74a12ef)

net/routinator: Update 0.15.3 => 0.16.0

This update brings new features, improvements, bug fixes
and some breaking changes.

Release Notes:
https://community.nlnetlabs.nl/t/routinator-0-16-0-full-of-grace-released/3501

Changelog:
https://github.com/NLnetLabs/routinator/releases/tag/v0.16.0

PR:             300599
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

ports-mgmt/optique: Update 0.2.0 => 0.5.0

Commit log:
https://github.com/sdalu/optique/compare/v0.2.0...v0.5.0

PR:             300597
Approved by:    osa, vvd (mentors, implicit)

sysutils/coxswain: Update 2.35.0 => 2.36.0

Changelog:
https://github.com/mwo-dk/coxswain/blob/v2.36.0/docs/changelog.md

PR:             300596
Approved by:    osa, vvd (mentors, implicit)