www/github-release-monitor: Update to 1.4.1 (security update) ChangeLog: https://github.com/iamspido/github-release-monitor/releases/tag/v1.4.1 Security: 7a1bd1ca-cf40-41e2-9c5f-143a0d4b17af MFH: 2025Q4

security/vuxml: Add www/github-release-monitor < 1.4.1

security/xray-core: Update 25.7.26 => 25.12.8, geodata and sitedata update to latests Changelogs: https://github.com/XTLS/Xray-core/releases/tag/v25.8.3 https://github.com/XTLS/Xray-core/releases/tag/v25.9.5 https://github.com/XTLS/Xray-core/releases/tag/v25.9.11 https://github.com/XTLS/Xray-core/releases/tag/v25.10.15 https://github.com/XTLS/Xray-core/releases/tag/v25.12.8 While here reduce number of MKDIR call. PR: 291480

science/opsin: fix build with any jdk The openjdk8 error mentioned in the Makefile has been fixed a while ago. PR: 291635

x11/plank: Update 0.11.156 => 0.11.157 Changelog: https://github.com/zquestz/plank-reloaded/releases/tag/0.11.157 PR: 291628 Approved by: daniel@shafer.cc (maintainer, implicit - inactive since 2021)

net/freerdp3: Update 3.19.0 => 3.19.1 Changelog: https://github.com/FreeRDP/FreeRDP/releases/tag/3.19.1 Reported by: portscout

sysutils/opentofu: Update version 1.10.8=>1.11.0 Changelog: https://github.com/opentofu/opentofu/releases/tag/v1.11.0

net/google-cloud-sdk: Update version 549.0.0=>549.0.1

devel/py-perceval: Return to pool Used in cluster and releasing so that others can update as necessary without my intervention.

devel/protobuf-go: Update version 1.36.10=>1.36.11 Changelog: https://github.com/protocolbuffers/protobuf-go/releases/tag/v1.36.11

devel/please: Update version 17.26.0=>17.27.0 Changelog: https://github.com/thought-machine/please/releases/tag/v17.27.0

devel/cirrus-cli: Update version 0.157.1=>0.157.2 Changelog: https://github.com/cirruslabs/cirrus-cli/releases/tag/v0.157.2

databases/freetds-devel: Update version 1.5.186=>1.5.190

science/colt: deprecate only builds with Java 8, unmaintained, no dependencies in the ports tree latest release in 2004 Suggested-by: Robert Clauseckr

databases/jrrd: pin to openjdk8 and deprecate Does not build with openjdk11+. Configure explicitly looks for java5 compatible JDK. PR: 272855

devel/R-cran-parallelly: Update to 1.46.0 ChangeLog: https://cran.r-project.org/web/packages/parallelly/news/news.html

security/qt-sudo: Update to 2.3.0 ChangeLog: https://github.com/aarnt/qt-sudo/releases/tag/v2.3.0

x11/xfce4-appmenu-plugin: fixed plist PR: 289508 Reported bY: Daniel Engberg

misc/compat15x: Fix pkg-descr Reported by: Ronald Klop <ronald@klop.ws>

devel/libgsf: update to 1.14.54 PR: 291581

misc/compat15x: Add new port

editors/zed: Update to 0.216.1 Changelog: - https://github.com/zed-industries/zed/releases/tag/v0.216.0 - https://github.com/zed-industries/zed/releases/tag/v0.216.1 Reported by: GitHub (watch releases)

x11-wm/mangowc: Add new port MangoWC is a modern, lightweight, high-performance Wayland compositor built on dwl - crafted for speed, flexibility, and a customizable desktop experience. Feature Highlights - Excellent xwayland support - Base tags not workspaces (supports separate window layouts for each tag) - Smooth and customizable complete animations (window open/move/close, tag enter/leave,layer open/close/move) - Excellent input method support (text input v2/v3) - Flexible window layouts with easy switching (scroller, master-stack, monocle,center-master, etc.) - Rich window states (swallow, minimize, maximize, unglobal, global, fakefullscreen, overlay, etc.) - Simple yet powerful external configuration (support shortcuts hot-reload) - Sway-like scratchpad and named scratchpad - Ipc support (get/send message from/to compositor by external program) - Hycov-like overview - Window effects from scenefx (blur, shadow, corner radius, opacity) https://mangowc.vercel.app

net/realtek-rge-kmod: Use IGNORE_FreeBSD Reported by: dizzy

www/mod_http2: Update to 2.0.37

net-im/nextcloud-talk: Update to 22.0.5

mail/nextcloud-mail: Update to 5.6.4

www/nextcloud-groupfolders: Update to 20.1.6

www/nextcloud: Update to 32.0.3

net/realtek-rge-kmod: Update to 20251211 snapshot

security/libgpg-error: update to 1.58

graphics/drm-latest-kmod: Fix build on -CURRENT Update the port to have code dealing with change in BUS_ALLOC_RESOURCE Sponsored by: Beckhoff Automation GMbH & Co. KG

graphics/nvidia-drm-6{1,6}-kmod-devel: Refresh distinfo This was missed in the last drm-kmod update. Fixes: 9e5e0c569b83 ("graphics/drm-6{1,6}-kmod: Fix build on current") Sponsored by: Beckhoff Automation GmbH & Co. KG

misc/osinfo-db: update to 20251212

net/rubygem-omniauth-oauth2-gitlab: update to 1.9.0 Changes: https://github.com/omniauth/omniauth-oauth2/releases

net/rubygem-oauth2-gitlab: update to 2.0.18 Changes: https://github.com/oauth-xx/oauth2/blob/main/CHANGELOG.md

devel/rubygem-excon-gitlab: update to 1.3.2 Changes: https://github.com/excon/excon/blob/master/changelog.txt

sysutils/virt-firmware: update to 25.12

www/R-cran-httr2: Update to 1.2.2 Changelog: https://cran.r-project.org/web/packages/httr2/news/news.html

misc/crush: Update to 0.24.0 Changelog: - https://github.com/charmbracelet/crush/releases/tag/v0.22.2 - https://github.com/charmbracelet/crush/releases/tag/v0.23.0 - https://github.com/charmbracelet/crush/releases/tag/v0.24.0 Reported by: GitHub (watch releases)

devel/R-cran-broom: Update to 1.0.11 Reported by: portscout

math/R-cran-doBy: Update to 4.7.1 Reported by: portscout

x11-servers/xlibre-server: Fix build on aarch64 Reported by: fluffy

math/octave-forge-datatypes: Update to 1.1.3.

java/dbvis: Update 25.2.5 => 25.3 Release Notes: https://www.dbvis.com/releasenotes/25.2/ https://www.dbvis.com/releasenotes/25.3/ MFH: 2025Q4

www/ungoogled-chromium: update to 143.0.7499.109 Security: https://vuxml.freebsd.org/freebsd/ff25a369-d730-11f0-a15a-a8a1599412c6.html

devel/R-cran-sparsevctrs: Update to 0.3.5 ChangeLog: https://cran.r-project.org/web/packages/sparsevctrs/news/news.html

devel/R-cran-future.apply: Update to 1.20.1 ChangeLog: https://cran.r-project.org/web/packages/future.apply/news/news.html

cad/Makefile: remove broken port cad/meshlab

graphics/py-pygeoapi: Update to 0.22.0

math/py-kiwisolver: Update to 1.4.9 and release maintainership - remove useless compiler USES

java/eclipse: Update 4.37 => 4.38 News: https://eclipse.dev/eclipse/markdown/?f=news/4.38/index.md Release Notes: https://eclipse.dev/eclipse/development/readme_eclipse_4.38.html PR: 291606

net-mgmt/net-snmp: Respect LDFLAGS. No functional change intended. Sponsored by: Dell Reviewed by: zi, vangyzen Differential Revision: https://reviews.freebsd.org/D54183

java/autofirma: [new port]. Digital signature application Autofirma is a java application used to sign digital documents. It is the official application of the Spanish Government and as such it is required to perform many online tasks with the Administration. Reviewed by: michaelo@ Differential Revision: https://reviews.freebsd.org/D53807

www/gallery-dl: update to 1.31.0 Changes: https://github.com/mikf/gallery-dl/releases/tag/v1.31.0 Reported by: GitHub (watch releases)

www/varnish-libvmod-digest: Update to 1.0.3 - Fix Base64 decoding vulnerability Approved by: implicit/security Security: 64bec4c7-d785-11f0-a1c0-0050569f0b83

security/vuxml: Document vulnerability in www/varnish-libvmod-digest

sysutils/gstat-rs: 0.1.7 The main change is to fix a math error in the kb/r and kb/w columns https://github.com/asomers/gstat-rs/blob/master/gstat/CHANGELOG.md#017---2025-12-11 Sponsored by: ConnectWise

devel/jenkins-lts: Update to 2.528.3 Fixes CVE-2025-67635, CVE-2025-67636, CVE-2025-67637, CVE-2025-67638, CVE-2025-67639 PR: 291580 Security: 2956aba3-1fcb-4c39-9cea-d88a46a3bf93 MFH: 2025Q4 Sponsored by: The FreeBSD Foundation

devel/jenkins: Update to 2.541 Fixes CVE-2025-67635, CVE-2025-67636, CVE-2025-67637, CVE-2025-67638, CVE-2025-67639 PR: 291580 Security: 2956aba3-1fcb-4c39-9cea-d88a46a3bf93 MFH: 2025Q4 Sponsored by: The FreeBSD Foundation

security/vuxml: Document Jenkins Security Advisory 2025-12-10 PR: 291580 Sponsored by: The FreeBSD Foundation

audio/audacity: Update 3.7.6 => 3.7.7 Changelog: - Hotfix: fixes broken waveform scrolling and selection for some users introduced in 3.7.6. - Added checksum to WavPack export. https://github.com/audacity/audacity/releases/tag/Audacity-3.7.7 PR: 291601

textproc/R-cran-yaml: Update to 2.3.12 Update test dependencies. Changelog: https://cran.r-project.org/web/packages/yaml/news/news.html

x11-wm/plasma6-kwin: backport upstream patch to fix regression in 6.5.4 KDE BUG: https://bugs.kde.org/513151

deskutils/fet: Update to 7.6.0 Changelog: https://lalescu.ro/liviu/fet/news.html

KDE: Update KDE Gear to 25.12.0 Announcement: https://kde.org/announcements/gear/25.12.0/ Ports changes: deskutils/itinerary: - Require QCoro6 deskutils/kdeconnect-kde: - Regenerate patches devel/kpublictransport: - Require QtLocation editors/kate: - Fix shebang math/rocs: - Switch to Qt6/KF6 multimedia/kamoso: - Require KF6KirigamiAddons multimedia/kdenlive: - Require KDDockWidgets science/step: - Remove stale patch

devel/kf5-kfilemetadata: remove broken MOBIPOCKET option

graphics/kdegraphics-mobipocket: remove Qt5 flavor in preparation for 25.12.0 update. 25.08 was the last release with Qt5 support.

graphics/kdegraphics-mobipocket: unflavorize consumers

net/samba422: Set TEST_ENV with = instead of += "+=" may suggest that we are appending to the default value of TEST_ENV. This is not true. Use "=" to be explicit about the intent.

net/samba422: Remove redundant LDAP_CONFIGURE_* variables

devel/dragon: update 1.5.5 -> 1.5.6 - change all int to unsigned, where signed is never needed

deskutils/cherrytree: update the port to version 1.6.2 Reported by: portscout

security/vuxml: Add c-ares vulnerability * CVE-2025-62408 PR: 291503 Reported by: polarian@polarian.dev

www/iridium: update to 2025.12.143.1

net/bird3: Update to 3.1.5 Changelog: https://gitlab.nic.cz/labs/bird/-/blob/release-v3.1.5/NEWS Sponsored by: Netflix

www/chromium: fixup patches after a bad merge from the shared bsd repo

java/openjdk*: Deprecate unmaintained versions Mark OpenJDK versions no longer maintained by upstream as deprecated, and for future removal. Keeping LTS versions, as well as the actively maintained latest versions in the tree. Reviewed by: bofh (mentor), jrm Approved by: bofh (mentor) MFH: 2025Q4 Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D54176

net/bird2: Update to 2.17.3 Changelog: "fixed a bug in RAdv prefix deprecation and a crash in BMP" Sponsored by: Netflix

www/py-dj52-django-treebeard: Update to 4.8.0 * Switch to the PEP517 build framework and adjust the related bits of the DOCS option accordingly. Changelog: https://github.com/django-treebeard/django-treebeard/blob/4.8.0/CHANGES.md

www/py-django-treebeard: Update to 4.8.0 * Switch to the PEP517 build framework and adjust the related bits of the DOCS option accordingly. Changelog: https://github.com/django-treebeard/django-treebeard/blob/4.8.0/CHANGES.md

www/py-django-bootstrap3: Update to 25.3 * Remove no longer required workaround for remnant files. * Also switch to the more preferred DISTVERSION while I'm here. Changelog since 23.4: https://github.com/zostera/django-bootstrap3/blob/v25.3/CHANGELOG.md

textproc/py-pymdown-extensions: Update to 10.19 Changelogs since 10.17.2: https://github.com/facelessuser/pymdown-extensions/releases/tag/10.19 https://github.com/facelessuser/pymdown-extensions/releases/tag/10.18

graphics/libdrm: Update to 2.4.131 Release notes: https://lists.x.org/archives/xorg-announce/2025-December/003647.html PR: 291585 Sponsored by: Beckhoff Automation GmbH & Co. KG

graphics/libdrm: Update to 2.4.130 Release notes: https://lists.x.org/archives/xorg-announce/2025-December/003646.html Sponsored by: Beckhoff Automation GmbH & Co. KG

graphics/libdrm: Update to 2.4.129 Release notes: https://lists.x.org/archives/xorg-announce/2025-November/003642.html Sponsored by: Beckhoff Automation GmbH & Co. KG

graphics/libdrm: Update to 2.4.128 Release notes: https://lists.x.org/archives/xorg-announce/2025-October/003632.html Release notes: https://lists.x.org/archives/xorg-announce/2025-October/003634.html Release notes: https://lists.x.org/archives/xorg-announce/2025-November/003639.html 2.4.126 and 2.4.127 were skipped as they contain an ABI breakage in libdrm_amdgpu Sponsored by: Beckhoff Automation GmbH & Co. KG

graphics/libdrm: Update to 2.4.125 Release notes: https://lists.x.org/archives/xorg-announce/2025-June/003606.html Sponsored by: Beckhoff Automation GmbH & Co. KG

graphics/libdrm: Update to 2.4.124 Release notes: https://lists.x.org/archives/xorg-announce/2024-December/003562.html Sponsored by: Beckhoff Automation GmbH & Co. KG

textproc/R-cran-htmltools: Update to 0.5.9 Add test dependencies. Expand pkg-descr. Switch WWW to canonical form. Changelog: https://cran.r-project.org/web/packages/htmltools/news/news.html#htmltools-0.5.9

net/samba422: CLUSTER: Add missing dependency net/libpcap Error: /usr/local/bin/ctdb is linked to /usr/local/lib/libpcap.so.1 from net/libpcap but it is not declared as a dependency Warning: you need LIB_DEPENDS+=libpcap.so:net/libpcap PR: 291104 Reported by: vvd

net/samba422: Add 95.database.script to post-install-CLUSTER-on ====> Running Q/A tests (stage-qa) Warning: Bad symlink '/usr/local/etc/ctdb/events/legacy/95.database.script' pointing to an absolute pathname '/usr/local/share/ctdb/events/legacy/95.database.script' PR: 291104 Reported by: vvd