devel/java-subversion: fix JAR install path, typo, NLS init duplication, RUN_DEPENDS
Install svn-javahl.jar under JAVAJARDIR (the ports tree's own
convention for JARs) instead of a non-standard lib/svn-javahl/
subdirectory. Fix a --without-siwg-python typo in CONFIGURE_ARGS.
Switch USES=java to java:build: this port installs a native library
and a JAR, it doesn't invoke java itself, so it has no business
pulling a JDK into RUN_DEPENDS -- the caller that actually loads the
library and the JAR decides which JVM to run, not this port.
Add files/patch-native_JNIUtil.cpp: JNIGlobalInit()'s non-Windows NLS
setup hand-rolled a bindtextdomain() call that duplicates
svn_nls_init() (the same helper every svn_cmdline_init()-based CLI
tool uses); call the real function instead, which also picks up
bind_textdomain_codeset() that the duplicated code was missing.
Bump PORTREVISION_LATEST/PORTREVISION_LTS and add an UPDATING entry
for the JAR path change.
graphics/blender4: Update to 4.5.14
Bugfix releases of the 4.5 LTS series. They fix crashes in the Video
Sequencer and in Armature Edit mode and the Extensions tab not loading
because of an SSL problem.
Changelog: https://www.blender.org/download/lts/4-5/
PR: 298728
Sponsored by: Netzkommune GmbH
(cherry picked from commit 76eb4a792b709d94cf39c9fb033d877cd154b21d)
graphics/blender4: Unbreak with non-3.11 Python and FFmpeg 9
Blender's CMake defaults to Python 3.11 and fails when that exact
version is missing. Pass the version of the default Python instead,
look up the NumPy 2 headers under numpy/_core/include and backport
FFmpeg 9 support for audaspace from upstream (e3c92c22817d).
PR: 299533
Approved by: Shane <FreeBSD at ShaneWare.Biz> (maintainer)
Sponsored by: Netzkommune GmbH
(cherry picked from commit 0146d7f56262e9f8c7483230b79bee6a3fa9a466)
graphics/blender: Update to 5.2.2
Blender 5.2 is the new LTS release, supported until July 2028. It adds
experimental Geometry Nodes based cloth and hair dynamics and a texture
cache in Cycles that lowers memory use on scenes with many image
textures. Since 5.1 Blender no longer loads the Python user site
directory by default.
Blender 5.2 requires Python 3.13. Until that is the default version,
build it with DEFAULT_VERSIONS+=python=3.13.
Changelog: https://developer.blender.org/docs/release_notes/5.2/
PR: 294160
Sponsored by: Netzkommune GmbH
graphics/blender4: Unbreak with non-3.11 Python and FFmpeg 9
Blender's CMake defaults to Python 3.11 and fails when that exact
version is missing. Pass the version of the default Python instead,
look up the NumPy 2 headers under numpy/_core/include and backport
FFmpeg 9 support for audaspace from upstream (e3c92c22817d).
PR: 299533
Approved by: Shane <FreeBSD at ShaneWare.Biz> (maintainer)
Sponsored by: Netzkommune GmbH
graphics/blender4: Update to 4.5.14
Bugfix releases of the 4.5 LTS series. They fix crashes in the Video
Sequencer and in Armature Edit mode and the Extensions tab not loading
because of an SSL problem.
Changelog: https://www.blender.org/download/lts/4-5/
PR: 298728
Sponsored by: Netzkommune GmbH
devel/*-subversion, www/mod_subversion: strip .so and drop .a from stage
libtool's install does not strip shared objects, and none of these
glue/binding libraries ship a static .a anyone would plausibly link
against. Strip the installed .so files in post-install and remove the
.a from the staging tree.
Bump PORTREVISION_LATEST/PORTREVISION_LTS for each touched port.
databases/sqlite3: security update to 3.54.1
Fixes ten vulnerabilities published on 2026-10-30, among them heap
buffer overflows in FTS5, in the session extension and in the R-Tree
module. All of them need an attacker supplied database file or SQL
text.
Changes: https://sqlite.org/changes.html
Security: 84cd82e1-d49f-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
(cherry picked from commit 57d3d55a29d9c7d43c87ff0d763942cbb10369a4)
databases/sqlite3: security update to 3.54.1
Fixes ten vulnerabilities published on 2026-10-30, among them heap
buffer overflows in FTS5, in the session extension and in the R-Tree
module. All of them need an attacker supplied database file or SQL
text.
Changes: https://sqlite.org/changes.html
Security: 84cd82e1-d49f-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
x11/zutty: Update 0.17 => 0.18
Changes:
- Apply origin mode to VPA (Line Position Absolute)
- Time out selection transfers whose peer does not respond
- Do not exit on selection events carrying an invalid atom
- Fix font search ignoring directory boundaries
- Do not count scrolling within margins as history
- Clamp cursor position to the scrolling region in origin mode
- Fix crash on OSC 52 selection query falling back to another target
- Prevent pasted content from terminating bracketed paste
- Accept CSI ? and CSI > sequences split across reads
- Preserve RGB foreground across separate SGR bold settings
- Fix crossed-out attribute lost on partial screen updates
PR: 300308
Approved by: osa, vvd (Mentors, implicit)
security/vuxml: Document sqlite3 vulnerabilities fixed in 3.54.0
Ten issues were published on 2026-10-30, with VulnCheck as the
assigning CNA. Four of them corrupt the heap, in FTS5, in the session
extension and in the R-Tree module, and all of them need an attacker
supplied database file or SQL text.
Sponsored by: Netzkommune GmbH
