sysutils/kubo-go: builds fine with Go 1.26
Remove Go version pin and undeprecate.
I presume USES=go:1.25+ was originally meant.
Approved by: portmgr (build fix blanket)
MFH: 2026Q3
(cherry picked from commit 717e3028f5710aa5ecade2ab72c64941e484007e)
net/rsync-bpc: fix build on armv7
Supply GNU_CONFIGURE=yes instead of HAS_CONFIGURE=yes so that the right
magic is passed to work around the error
checking build system type... Invalid configuration `armv7-unknown-freebsd15.1-gnueabihf': machine `armv7-unknown-freebsd15.1' not recognized
Approved by: portmgr (build fix blanket)
MFH: 2026Q3
(cherry picked from commit 977fa78a30b4c9045da3dc080d11de9feb0dc3b9)
sysutils/kubo-go: builds fine with Go 1.26
Remove Go version pin and undeprecate.
I presume USES=go:1.25+ was originally meant.
Approved by: portmgr (build fix blanket)
MFH: 2026Q3
net/rsync-bpc: fix build on armv7
Supply GNU_CONFIGURE=yes instead of HAS_CONFIGURE=yes so that the right
magic is passed to work around the error
checking build system type... Invalid configuration `armv7-unknown-freebsd15.1-gnueabihf': machine `armv7-unknown-freebsd15.1' not recognized
Approved by: portmgr (build fix blanket)
MFH: 2026Q3
emulators/wine-devel: Update 11.14 => 11.15
Changelog:
- More KDF algorithms in BCrypt.
- Support for ARM64EC build in Mingw mode.
- More format conversions in WindowsCodecs.
- Support for local NTLM authentication.
- Various bug fixes.
https://gitlab.winehq.org/wine/wine/-/releases/wine-11.15
PR: 297398
Sponsored by: UNIS Labs
textproc/presenterm: Add new port
Presenterm lets you create presentations in markdown format and run them from
your terminal, with support for image and animated gifs, highly customizable
themes, code highlighting, exporting presentations into PDF format, and plenty
of other features.
https://mfontanini.github.io/presenterm/
net/hostapd: Update to 2.12
This includes the following changes:
* support RSN overriding (e.g., WPA3-Personal Compatibility Mode)
* EHT/IEEE 802.11be/Wi-Fi 7
- more complete support
- fix message validation issues that could enable DoS attacks
- fix group key rekeying
* enable SAE group 20 by default if SAE-EXT-KEY is enabled
* reject unexpected SAE password identifier to avoid DoS attack against
a specific STA
* mandate use of SAE H2E when using password identifiers
* assign VLAN when using SAE with PMKSA caching
* support SPP A-MSDU negotiation
* support IEEE 802.11bi functionality
- changing SAE password identifiers
- EPPKE
- IEEE 802.1X/EAP in Authentication frames
[13 lines not shown]
security/wpa_supplicant: Update to 2.12
This includes the following changes:
* support RSN overriding (e.g., WPA3-Personal Compatibility Mode)
* improve BSS transition management support
* EHT/IEEE 802.11be/Wi-Fi 7
- more complete support
- fix message validation issues that could enable DoS attacks
* support Wi-Fi Direct R2
* support Wi-Fi Aware (add synchronized NAN; extend USD support)
* support Proximity Ranging
* support SPP A-MSDU negotiation
* support IEEE 802.11bi functionality
- changing SAE password identifiers
- EPPKE
- IEEE 802.1X/EAP in Authentication frames
- Association frame encryption
- PMKID privacy
[15 lines not shown]
multimedia/gaupol: Improve port
- Actually switch to GTK4.
- Use USE_GSTREAMER=rust instead of manually defining as dependency.
- Pet port{clippy,fmt}.
Fixes: f4bb31f406d7 ("multimedia/gaupol: Update 1.16 => 2.0")
Approved by: osa, vvd (Mentors, implicit)
ports-mgmt/pkg-devel: update to 2.8.99.1
Changes:
- security: bound vulnerability database downloads and decompression; build a temporary database and atomically replace it only after validation
- security: bound repository archive downloads and extraction (1 GiB or half of free temporary storage, 1 MiB metadata) and reject duplicate members and oversized target members
- security: bound repository signature extraction (8 MiB callback response, at most 8 signature entries of 1 MiB each)
- security: drop to nobody before entering Capsicum in the sandboxed archive and signature callbacks
- security: enforce the signed package size while fetching, capping the stream even when the server omits a Content-Length
- security: reject invalid repository signature types; only pubkey, fingerprints and none are accepted
- repo: keep file lists out of the data catalog
- repo: open the catalogue read-only when checking its validity
- rwhich: store the compressed filesite as a standalone file
- rwhich: verify the repository signature and store the filesite as a raw compressed file
- rwhich: add a global and a per-repository configuration
- fix: report (added)/(removed) reinstall reasons only once
- fix: use-after-free during the additional SAT cycle
- fix: deferred rc script execution
- rcscript: add a dedicated PKG_EVENT_RC_SCRIPT event for rc.d script actions
- fix: remove leftover nested @dir parents on deinstall
[6 lines not shown]
ports-mgmt/pkg: update to 2.8.2
Changes:
- lots of security improvements
- repo: keep file lists out of the data catalog
- rwhich: store filesite as a compressed archive locally.
- rwhich add global and per repository configuration of the file
database
- fix deferred rc script execution
- fix duplicated reinstall reason
- fix UAF in additional SAT cycle
- fix SRV/HTTP mirror handling
- respect compression level for file database and metadata
