HardenedBSD/ports 6943dbbdevel/rustup-init Makefile Makefile.crates, devel/rustup-init/files patch-Cargo.lock

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+537-597devel/rustup-init/distinfo
+267-297devel/rustup-init/Makefile.crates
+134-0security/vuxml/vuln/2026.xml
+26-0devel/rustup-init/files/patch-Cargo.lock
+20-4devel/rustup-init/Makefile
+0-23security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c
+984-92144 files not shown
+1,142-1,01450 files

HardenedBSD/ports 53071e1devel/golangci-lint Makefile distinfo

devel/golangci-lint: Update to 2.13.2

ChangeLog:
https://github.com/golangci/golangci-lint/releases/tag/v2.13.2
DeltaFile
+5-5devel/golangci-lint/distinfo
+2-3devel/golangci-lint/Makefile
+7-82 files

HardenedBSD/ports e5c1988graphics/gpxsee Makefile distinfo

graphics/gpxsee: Update to 16.15

https://github.com/tumic0/GPXSee/releases/tag/16.15

PR:             298449
Approved by:    fluffy (mentor)
DeltaFile
+3-3graphics/gpxsee/distinfo
+1-1graphics/gpxsee/Makefile
+4-42 files

HardenedBSD/ports 53f5066sysutils/tflint Makefile distinfo

sysutils/tflint: Update to 0.64.0

ChangeLog:
https://github.com/terraform-linters/tflint/releases/tag/v0.64.0
DeltaFile
+5-5sysutils/tflint/distinfo
+1-2sysutils/tflint/Makefile
+6-72 files

HardenedBSD/ports d128625security/vuxml/vuln 2026.xml

security/vuxml: Document gitea < 1.27.3 vulnerabilities

Gitea 1.27.3 fixes 26 security issues, hardens issue searching
that an unfiltered query no longer enumerates every public
repository into the indexer filter and removes unsafe code
from the internal private endpoints.

PR:             298072
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+56-0security/vuxml/vuln/2026.xml
+56-01 files

HardenedBSD/ports 8d487eawww/gitea Makefile distinfo

www/gitea: Security update 1.27.2 => 1.27.3

Release Notes:
https://blog.gitea.com/release-of-1.27.3/

PR:             298072
Approved by:    ports at foss-daily.org (maintainer timeout, 2 weeks)
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-66877
Security:       CVE-2026-71184
Security:       CVE-2026-68957
Security:       CVE-2026-60010
Security:       CVE-2026-70406
Security:       CVE-2026-63792
Security:       CVE-2026-66874
Security:       CVE-2026-68964
Security:       CVE-2026-67577
Security:       CVE-2026-66849
Security:       CVE-2026-73135

    [16 lines not shown]
DeltaFile
+3-3www/gitea/distinfo
+1-2www/gitea/Makefile
+4-52 files

HardenedBSD/ports f8ffacanet-im/telegram-desktop Makefile distinfo

net-im/telegram-desktop: update to 7.2.8 release (+)

Drop unneeded dependecy on protobuf [1]

PR:             298401 [1]
Release notes:  https://github.com/telegramdesktop/tdesktop/releases/tag/v7.2.8
DeltaFile
+3-3net-im/telegram-desktop/distinfo
+1-2net-im/telegram-desktop/Makefile
+4-52 files

HardenedBSD/ports 291949enet-im/tg_owt Makefile

net-im/tg_owt: drop unneeded dependency on protobuf

PR:     298401
DeltaFile
+1-1net-im/tg_owt/Makefile
+1-11 files

HardenedBSD/ports d069603devel/sem Makefile.crates Makefile

devel/sem: Update to 0.25.0
DeltaFile
+5-3devel/sem/distinfo
+1-2devel/sem/Makefile
+1-0devel/sem/Makefile.crates
+7-53 files

HardenedBSD/ports 9daead3sysutils/ngbuddy Makefile distinfo

sysutils/ngbuddy: Update 1.0 => 1.1

This update also corrects rc.d service order
reported by feld@ in PR 298188.

While here, update maintainer address.

Commit log:
https://github.com/bellhyve/ngbuddy/compare/v1.0...v1.1

PR:             298371
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
DeltaFile
+3-3sysutils/ngbuddy/distinfo
+2-2sysutils/ngbuddy/Makefile
+5-52 files

HardenedBSD/ports 4cc3bf3www/mod_auth_openidc Makefile distinfo

www/mod_auth_openidc: Update to 2.4.20.3
DeltaFile
+3-3www/mod_auth_openidc/distinfo
+1-1www/mod_auth_openidc/Makefile
+4-42 files

HardenedBSD/ports 33f2affwww/lexbor Makefile distinfo

www/lexbor: Update 3.0.0 => 3.0.1
DeltaFile
+3-3www/lexbor/distinfo
+1-1www/lexbor/Makefile
+4-42 files

HardenedBSD/ports afb021anet/krakend-ce Makefile distinfo

net/krakend-ce: Update 2.13.10 => 2.13.11
DeltaFile
+5-5net/krakend-ce/distinfo
+1-2net/krakend-ce/Makefile
+6-72 files

HardenedBSD/ports 1a43a61devel/rustup-init Makefile Makefile.crates, devel/rustup-init/files patch-Cargo.toml patch-Cargo.lock

devel/rustup-init: Update 1.28.1 => 1.29.1

While here:
- Add linked libraries from `ldd` output to LIB_DEPENDS.
- Unbundle OpenSSL.
- Add TESTING_UNSAFE.

Changelog:
https://github.com/rust-lang/rustup/blob/1.29.1/CHANGELOG.md

PR:             298213
Approved by:    osa, vvd (Mentors, implicit)
Co-authored-by: Ian Wagner <ianthetechie at gmail.com>
DeltaFile
+537-597devel/rustup-init/distinfo
+267-297devel/rustup-init/Makefile.crates
+26-0devel/rustup-init/files/patch-Cargo.lock
+20-4devel/rustup-init/Makefile
+11-0devel/rustup-init/files/patch-Cargo.toml
+861-8985 files

HardenedBSD/ports 7431ef2editors/libreoffice Makefile, editors/libreoffice/files patch-external_skia_Library__skia.mk patch-vcl_source_app_salplug.cxx

editors/libreoffice: fix some crashes and VCL selection (+)

* Fix crash with SAL_USE_VCLPLUGIN=gen and enabled Skia [1]
* Allow Qt VCL plugin when LO started outside the known DE (e.g., pure X) [2]

PR:     298257 [1], 298227, [2]
DeltaFile
+15-3editors/libreoffice/files/patch-vcl_source_app_salplug.cxx
+11-2editors/libreoffice/files/patch-external_skia_Library__skia.mk
+1-1editors/libreoffice/Makefile
+27-63 files

HardenedBSD/ports 4376c51devel Makefile, devel/py-mockito pkg-descr distinfo

devel/py-mockito: new port
DeltaFile
+23-0devel/py-mockito/Makefile
+3-0devel/py-mockito/distinfo
+1-0devel/Makefile
+1-0devel/py-mockito/pkg-descr
+28-04 files

HardenedBSD/ports 72c206cdevel/py-tzdata Makefile distinfo

devel/py-tzdata: Update to 2026.4

Approved by:    kai (maintainer via email)
DeltaFile
+3-3devel/py-tzdata/distinfo
+1-1devel/py-tzdata/Makefile
+4-42 files

HardenedBSD/ports 61cd62atextproc/py-zensical Makefile distinfo

textproc/py-zensical: Update to 0.0.62

Approved by:    kai (maintainer via email)
DeltaFile
+3-3textproc/py-zensical/distinfo
+1-1textproc/py-zensical/Makefile
+4-42 files

HardenedBSD/ports 0a61592security/vuxml/vuln 2026.xml

security/vuxml: Document multiple strongSwan vulnerabilities

PR:             298372
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+78-0security/vuxml/vuln/2026.xml
+78-01 files

HardenedBSD/ports 57d4f61science/py-tensorflow distinfo Makefile, science/py-tensorflow/files bazelrc

science/py-tensorflow: Fix build

It was broken since with the last update of jsoncpp
its headers were pushed into include/jsoncpp.

Reported by:    fallout
DeltaFile
+9-5science/py-tensorflow/Makefile
+10-1science/py-tensorflow/files/freebsd/cc_toolchain_config.bzl
+2-0science/py-tensorflow/files/bazelrc
+0-1science/py-tensorflow/distinfo
+21-74 files

HardenedBSD/ports 5a7f758security/strongswan pkg-plist Makefile, security/strongswan/files patch-conf_Makefile.in patch-src_libcharon_plugins_smp_smp.c

security/strongswan: Update 6.0.7 => 6.1.0

Changelog:
https://github.com/strongswan/strongswan/releases/tag/6.1.0

PR:             298372
MFH:            2026Q3
Security:       CVE-2026-78123
Security:       CVE-2026-78124
Security:       CVE-2026-78126
Security:       CVE-2026-78127
Security:       CVE-2026-78129
Security:       CVE-2026-78130
Security:       CVE-2026-78131
Security:       CVE-2026-78132
Security:       CVE-2026-78133
Security:       CVE-2026-78134
Security:       CVE-2026-78135
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+0-23security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c
+3-3security/strongswan/distinfo
+0-5security/strongswan/pkg-plist
+2-3security/strongswan/Makefile
+2-2security/strongswan/files/patch-conf_Makefile.in
+7-365 files

HardenedBSD/ports 2a88a73x11-fm/thunar Makefile distinfo

x11-fm/thunar: Update to 4.20.10
DeltaFile
+3-3x11-fm/thunar/distinfo
+1-1x11-fm/thunar/Makefile
+4-42 files

HardenedBSD/ports 1313206net-im/signal-desktop/files pnpm-lock.yaml, science/ttk pkg-plist

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+53,785-0www/hedgedoc/pkg-plist
+1,078-659net-im/signal-desktop/files/pnpm-lock.yaml
+941-0x11-wm/halley/distinfo
+469-0x11-wm/halley/Makefile.crates
+241-2science/ttk/pkg-plist
+115-0www/hedgedoc/Makefile
+56,629-661104 files not shown
+57,554-894110 files

HardenedBSD/ports 44f8819graphics/shotwell distinfo pkg-plist, graphics/shotwell/files patch-meson.build

graphics/shotwell: update to 33.0

Release Notes:
  https://gitlab.gnome.org/GNOME/shotwell/-/blob/33.0/NEWS?ref_type=tags
DeltaFile
+12-12graphics/shotwell/Makefile
+20-0graphics/shotwell/files/patch-meson.build
+5-8graphics/shotwell/pkg-plist
+3-3graphics/shotwell/distinfo
+40-234 files

HardenedBSD/ports c77b145science/ttk Makefile distinfo, science/ttk/files envs.sh patch-core_vtk_ttkWRLExporter_ttkWRLExporter.cpp

science/ttk: update 1.3.0 → 1.4.0
DeltaFile
+241-2science/ttk/pkg-plist
+0-57science/ttk/files/patch-core_vtk_ttkWRLExporter_ttkWRLExporter.cpp
+15-0science/ttk/pkg-message
+3-3science/ttk/distinfo
+3-2science/ttk/Makefile
+2-0science/ttk/files/envs.sh
+264-646 files

HardenedBSD/ports fde655cwww/hedgedoc distinfo pkg-descr, www/hedgedoc/files pkg-message.in hedgedoc.in

www/hedgedoc: Add new port

The best platform to write and share markdown.

HedgeDoc (formerly known as CodiMD) is an open-source, web-based,
self-hosted, collaborative markdown editor.

You can use it to easily collaborate on notes, graphs and even
presentations in real-time. All you need to do is to share your
note-link to your co-workers and they're ready to go.

...

This brings back www/hedgedoc which was removed a while back because of
the node.js version on tree.
DeltaFile
+53,785-0www/hedgedoc/pkg-plist
+115-0www/hedgedoc/Makefile
+54-0www/hedgedoc/files/hedgedoc.in
+40-0www/hedgedoc/files/pkg-message.in
+8-0www/hedgedoc/pkg-descr
+5-0www/hedgedoc/distinfo
+54,007-02 files not shown
+54,008-18 files

HardenedBSD/ports 87e2831net-im/signal-desktop get_deps.sh Makefile, net-im/signal-desktop/files patch-ts_components_Preferences.dom.tsx pnpm-lock.yaml

net-im/signal-desktop: Update to 8.27.0
DeltaFile
+1,078-659net-im/signal-desktop/files/pnpm-lock.yaml
+5-5net-im/signal-desktop/distinfo
+2-2net-im/signal-desktop/files/patch-ts_components_Preferences.dom.tsx
+1-2net-im/signal-desktop/Makefile
+1-1net-im/signal-desktop/get_deps.sh
+1,087-6695 files

HardenedBSD/ports 817a69fsecurity/vuxml/vuln 2026.xml

security/vuxml: document irc/znc vulnerabilities
DeltaFile
+36-0security/vuxml/vuln/2026.xml
+36-01 files

HardenedBSD/ports feb1e95mail/postfix-logwatch distinfo Makefile, mail/postfix-logwatch/files patch-postfix-logwatch

mail/postfix-logwatch: update to 1.40.07

Switch upstream to michael.orlitzky.com (SourceForge project abandoned).
Remove patch integrated upstream. Fix variable ordering per portclippy.
DeltaFile
+0-22mail/postfix-logwatch/files/patch-postfix-logwatch
+10-10mail/postfix-logwatch/Makefile
+3-2mail/postfix-logwatch/distinfo
+13-343 files

HardenedBSD/ports 18b0af5devel/py-inotify-simple Makefile

devel/py-inotify-simple: Utilize USES=inotify

Suggested by:   makc
DeltaFile
+1-8devel/py-inotify-simple/Makefile
+1-81 files