devel/libreadline-java: Remove expired port
2026-10-28 devel/libreadline-java: 20 years old, does not build with jdk11+, not
actively maintained, no users in the tree, forked(?) to
https://github.com/aclemons/java-readline
devel/freebsd-git-arc: Depend on devel/phorgeit-arcanist-lib
Now that reviews.freebsd.org runs Phorge, depend on Phorge's fork of the
Arcanist library (devel/phorgeit-arcanist-lib) instead of
devel/arcanist-lib.
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D60978
graphics/photoqt 5.4.1
Simple, powerful and good looking Qt image viewer
graphics/photoqt: Update to 5.4.1
- Switch to Qt 6
- Rework options for the new WITH_* CMake switches
- Add patch to use extattr(2) for star ratings
- Add patch to show QR/barcode detection when built with ZXingQt
- Enable tests
- Drop patch merged upstream
- Take maintainership
- Remove deprecation
ChangeLog: https://photoqt.org/changelog
MFH: 2026Q4
(cherry picked from commit 2fb8dc192150d854a68f85fc3a1ead3061db2ab6)
net/samba423 4.23.13
Free SMB/CIFS and AD/DC server and client for Unix
net/samba423: update to 4.23.13
Changes since 4.23.12
---------------------
* BUG 16097: POSIX ACL backend silently discards errors when processing NT
ACLs with non-canonical ordering
* BUG 15962: SMB3 SESSION SETUP responses must always be signed
* BUG 16081: winbindd_child_msg_filter: talloc_get_type_abort crashes when
winbind max domain connections > 1
* BUG 16239: Fix parsing of uppercase "0X" hex values in the "kdc default
domain supported enctypes" smb.conf parameter.
* BUG 16240: smbd temporary mkdir name can exceed NAME_MAX for otherwise
valid client names
* BUG 16258: Python smbconf transaction_start() lacks a talloc stack frame
with CTDB
* BUG 16254: CTDB database operations can be run against incorrect nodes
Reported by: portscout
Sponsored by: Klara, Inc.
(cherry picked from commit 479c4ab490f4f8e3201bf808faf703f95bde4500)
net/samba424 4.24.8
Free SMB/CIFS and AD/DC server and client for Unix
net/samba424: update to 4.24.8
Changelog:
* BUG 16200: generate_unique_u64() may not protect against veto_value
* BUG 16261: Rename with ReplaceIfExists to a target differing only in case
creates a duplicate instead of replacing (regression in
bb130f32)
* BUG 15962: SMB3 SESSION SETUP responses must always be signed
* BUG 16081: winbindd_child_msg_filter: talloc_get_type_abort crashes when
winbind max domain connections > 1
* BUG 16200: generate_unique_u64() may not protect against veto_value
* BUG 16239: Fix parsing of uppercase "0X" hex values in the "kdc default
domain supported enctypes" smb.conf parameter.
* BUG 16240: smbd temporary mkdir name can exceed NAME_MAX for otherwise
valid client names
* BUG 16258: Python smbconf transaction_start() lacks a talloc stack frame
with CTDB
* BUG 16254: CTDB database operations can be run against incorrect nodes
* BUG 16273: A node can be banned because it tries to run recovery after
losing the cluster lock
* BUG 15857: All backend log should honor global log level "log level = "
PR: 299373
Reported by: anttijuhani.nikkila@gmail.com
Sponsored by: Klara, Inc.
(cherry picked from commit fb01128ce005417ddd68478474fd59c6bb00e985)
Conflicts:
net/samba424/Makefile (skipped lmdb vs lmdb0 changes)
net/samba424 4.24.7_4
Free SMB/CIFS and AD/DC server and client for Unix
net/samba424: avoid SIGFPE in streams_xattr_get_ea_value_fsp
As reported in https://bugzilla.samba.org/show_bug.cgi?id=16278,
upstream commit 5fa43440ebd3 ("vfs: Implement larger streams in multiple
xattrs"), results in many signal 8 (SIGFPE) crashes in smbd child
processes on FreeBSD, if the streams_xattr vfs module is loaded.
This is because streams_xattr_get_ea_value_fsp() can divide by zero, if
the "max xattrs per stream" is left at its default value.
Apply the upstream fix to avoid the crashes.
PR: 299445
Obtained from: https://gitlab.com/samba-team/samba/-/commit/21f8b339
MFH: 2026Q4
Approved by: samba (kiwi)
(cherry picked from commit bca7a3d068b463dcb5ae86e9405c99447b5131d0)
net/samba424 4.24.7_3
Free SMB/CIFS and AD/DC server and client for Unix
net/samba424: restore missing FreeBSD mDNS/dns_sd support (MDNSRESPONDER)
Three FreeBSD-local patches providing dns_sd/mDNSResponder support
(present identically in net/samba419, 420, 422, and 423) were silently
dropped when net/samba424 was created, all gated behind the
non-default MDNSRESPONDER port option (default is AVAHI):
- source3/wscript/wscript_build: the --enable-dnssd waf option
(dns_sd.h/DNSServiceRegister detection, WITH_DNSSD_SUPPORT define,
dns_sd library linkage into smbd_base and smbclient) never existed
in samba424 at all.
- source3/smbd/dnsregister.c: the FreeNAS-authored mDNS
advertise-per-interface fixes. Only the companion
source3/client/dnsbrowse.c half of this combined patch survived
into samba424; the dnsregister.c half was lost.
- Makefile: MDNSRESPONDER_CONFIGURE_ENABLE=dnssd, so selecting the
MDNSRESPONDER option actually passes --enable-dnssd to waf.
Without all three, selecting MDNSRESPONDER builds without functional
dns_sd/mDNS support. Verified by diffing the patch sets of
samba419/420/422/423 against samba424, and confirmed the restored
patches apply cleanly (offset-only, no fuzz) against the real
samba-4.24.7 upstream source.
PR: 299196 (comment 11 on net/samba425 reported the same gap)
PR: 299346
Approved by: kiwi (samba team)
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
(cherry picked from commit 1366f85da8f402ec083d7b95d7b761ea35698292)
Conflicts:
net/samba424/Makefile (skipped LMBD option addition)
dns/cmdns-cli: New port
https://cmdns.dns-oarc.net/ is a custom developed DNS nameserver
that creates dynamic delegated subdomains to enable clients to query
for never-seen-before resource records in order to support a
general-purpose framework for testing DNS resolvers.
This is the command line client that you can run locally,
this will allow you to specify which resolver to test against.
Note: run tests with -done, otherwise it looks like it hangs
Example: cmdns-cli -suite standard -done
www/freenginx-devel: update: 1.31.4 -> 1.31.5
While I'm here:
- update lua, lua-core, and lua-stream third-party modules to
their recent snapshots
- fix third-party vod module build
Sponsored by: tipi.work
<ChangeLog>
*) Security: one of the keys was left uninitialized when using automatic
rotation of TLS session ticket keys, making it possible to forge a
session and bypass client certificate verification (CVE-2026-97629);
*) Bugfix: a segmentation fault might occur in a worker process if AIO
was used in subrequests.
*) Bugfix: in HTTP/3.
</ChangeLog>
mail/mlmmj-archiver: fix package being empty
Since 0.6.0 we move from PLIST_FILES to pkg-plist but the pkg-plist was
never git added.
While here strip the binaries.
Reported by: R. Matthew Emerson" <rme@acm.org>
devel/wasi-libc 34
C standard library for WebAssembly System Interface
devel/wasi-libcxx17 17.0.6_5
C++ standard library for WebAssembly System Interface
devel/wasi-libcxx18 18.1.8_4
C++ standard library for WebAssembly System Interface
devel/wasi-*: deprecate LLVM 17 and 18 based ports
Deprecate the individual devel/wasi-compiler-rt1[78] and
devel/wasi-libcxx1[78] ports and the 17 and 18 flavors of
devel/wasi-libc.
Approved by: vishwin (maintainer, in concept)
databases/mongodb-tools: 100.20.0
Changes:
https://github.com/mongodb/mongo-tools/blob/master/CHANGELOG.md#100200
The test files are renamed from foo_test.go to foo_unit_test.go. This makes that
"make test" does not find any tests.
[00:00:32] ===> Testing ./...
[00:01:02] ? github.com/mongodb/mongo-tools [no test files]
[00:01:04] ? github.com/mongodb/mongo-tools/bsondump [no test files]
...
[00:01:06] testing: warning: no tests to run
[00:01:06] PASS
Let's see if this gets resolved in a future release or maybe somebody has a hint
for me for go tests in the ports framework.
devel/py-pydbus: Switch to USE_PYTHON=pep517
Build with the PEP 517 frontend (setuptools legacy backend; the source
has no [build-system]); the package metadata becomes dist-info.
PR: 300055
science/py-jarvis-tools: New port: Joint Automated Repository for Various
Integrated Simulations
Dependency of science/py-pymatgen.
Approved by: no need for approval according to bapt@
science/py-galore: New port: Broadening and weighting for simulated spectra
Dependency of science/py-pymatgen.
Approved by: no need for approval according to bapt@
devel/py-f90nml: New port: Fortran 90 namelist parser
Dependency of math/py-yt and science/py-pymatgen.
Approved by: no need for approval according to bapt@
graphics/photoqt 5.4.1
Simple, powerful and good looking Qt image viewer
graphics/photoqt: Update to 5.4.1
- Switch to Qt 6
- Rework options for the new WITH_* CMake switches
- Add patch to use extattr(2) for star ratings
- Add patch to show QR/barcode detection when built with ZXingQt
- Enable tests
- Drop patch merged upstream
- Take maintainership
- Remove deprecation
ChangeLog: https://photoqt.org/changelog
MFH: 2026Q4
french/wordpress 7.1.4,1
State-of-the-art semantic personal publishing platform
german/wordpress 7.1.4
State-of-the-art semantic personal publishing platform
japanese/wordpress 7.1.4
State-of-the-art semantic personal publishing platform
russian/wordpress 7.1.4
State-of-the-art semantic personal publishing platform
www/wordpress 7.1.4,1
State-of-the-art semantic personal publishing platform
{www,french,german,japanese,russian}/wordpress: update to 7.1.4
chinese/wordpress-zh_{CN,TW} remain IGNOREd as the 7.1.4 localized
distfiles are not yet available upstream.
www/deno 2.9.8
Secure JavaScript and TypeScript runtime
www/deno: Update 2.9.7 => 2.9.8
- Enable LTO again, as upstream does for release builds. It was
disabled without a stated reason in 2.2.5; it now builds fine and
makes deno about 11% smaller (122 MB -> 109 MB) and denort and
libdenort.so about 7% smaller, at the cost of a longer, mostly
single-threaded final link.
- Link with --icf=safe like upstream release builds to fold identical
functions.
- Remove the deno_panic patch: the crate is only used by the optional
panic-trace feature, which is not enabled.
Changelog: https://github.com/denoland/deno/releases/tag/v2.9.8