audio/fluidsynth: Update to upstream release 2.5.2 Details: - Bugfix release, see https://github.com/FluidSynth/fluidsynth/releases/tag/v2.5.2 - Includes a fix for CVE-2025-68617 (use after free) MFH: 2025Q4 Security: CVE-2025-68617

devel/task: Update to 3.46.4 Changelog: https://github.com/go-task/task/blob/v3.46.4/CHANGELOG.md Reported by: GitHub (watch releases)

www/phalcon: update to 5.10.0.

multimedia/ffmpeg4: Mark NVDEC option broken After b57d881bb6e9, the NVDEC option fails to configure or build. This is a legacy port that we'd very much like to get rid of, so low effort, but we do need to keep it building with the default options.

games/alephone: Update to 20250829 - Unbreak port - Remove defunct config options - Remove unneeded GNU_CONFIGURE_MANPREFIX - Update lib depends - Pet portclippy and portfmt ChangeLog: https://github.com/Aleph-One-Marathon/alephone/releases/tag/release-20250829 PR: 289046 Reported by: diizzy Approved by: maintainer timeout >4 months, portmgr (blanket, build fix)

deskutils/treesheets: Update to 2895 ChangeLog: https://github.com/aardappel/treesheets/compare/2830...2895

deskutils/R-cran-exams: Update to 2.4-3 Add archivers/zip to runtime dependencies because exams2blackboard() requires it. Add MAKE_ENV knob because of test stage.

databases/py-sqlmodel: Update to 0.0.29 Changelog: https://github.com/fastapi/sqlmodel/blob/0.0.29/docs/release-notes.md Reported by: portscout

multimedia/vlc: Update to 3.0.22 https://code.videolan.org/videolan/vlc/-/tags/3.0.22

graphics/mesa-devel: update to 25.3.b.2836 Changes: https://gitlab.freedesktop.org/mesa/mesa/-/compare/f5351afbc8c...b3c983b8ddc

devel/py-apscheduler: update to 3.11.2 Changes: https://github.com/agronholm/apscheduler/releases/tag/3.11.2 Reported by: Repology

games/openfodder: update to 2.0.0 Changes: https://github.com/OpenFodder/openfodder/releases/tag/2.0.0 Reported by: GitHub (watch releases)

x11-wm/labwc: update to 0.9.3 Changes: https://github.com/labwc/labwc/releases/tag/0.9.3 Reported by: GitHub (watch releases)

x11-toolkits/libdecor: update to 0.2.5 Changes: https://gitlab.freedesktop.org/libdecor/libdecor/-/compare/0.2.4...0.2.5 Reported by: GitLab (notify releases)

net/waypipe: update to 0.11.0 Changes: https://gitlab.freedesktop.org/mstoeckl/waypipe/-/releases/v0.11.0 Reported by: GitLab (notify releases)

multimedia/libva-utils: update to 2.23.0 Changes: https://github.com/intel/libva-utils/releases/tag/2.23.0 Reported by: GitHub (watch releases)

multimedia/libva: update to 2.23.0 Changes: https://github.com/intel/libva/releases/tag/2.23.0 Reported by: GitHub (watch releases)

textproc/meilisearch: Update to 1.31.0

textproc/harper: Update to 1.3.0

x11/nvidia-driver[-devel], x11/nvidia-kmod[-devel], x11/linux-nvidia-libs[-devel], graphics/nvidia-drm*-kmod[-devel], x11/nvidia-settings, x11/nvidia-xconfig: Update to 580.119.02 Update to latest Production Branch of drivers 580.119.02: https://www.nvidia.com/en-us/drivers/details/259043/ Linux counterparts for x11/linux-nvidia-libs: https://www.nvidia.com/en-us/drivers/details/259042/ PR: 291919 Differential Revision: https://reviews.freebsd.org/D54357

math/octave-forge: LLMS defaults to off. - Optional dependency math/octave-forge-llms defaults to off. - Bump portrevision.

math/octave-forge-llms: Mark broken.

math/octave-forge-odbc: Update to 0.0.5.

audio/strawberry: Update to 1.2.16 https://github.com/strawberrymusicplayer/strawberry/releases/tag/1.2.15 https://github.com/strawberrymusicplayer/strawberry/releases/tag/1.2.16

sysutils/libcdio: Update to 2.3.0 Disable static libraries; nothing in tree uses them. https://github.com/libcdio/libcdio/releases/tag/2.3.0 PR: 291914

devel/aws-c-http: Update to 0.10.8 ChangeLog: https://github.com/awslabs/aws-c-http/releases/tag/v0.10.8

devel/aws-c-io: Update to 0.24.2 ChangeLog: https://github.com/awslabs/aws-c-io/releases/tag/v0.24.2 https://github.com/awslabs/aws-c-io/releases/tag/v0.24.1

x11-clocks/xdaliclock: Update to 2.49 ChangeLog: 2.49 21-Dec-2025 OSX: - Worked around a macOS 14.0 bug where screen savers would continue running invisibly in the background after un-blanking. - Sparkle 2.8.1 for macOS 14.0 compatibility.

games/rocksndiamonds: Update to 4.4.1.1 ChangeLog: https://www.artsoft.org/2025/12/23/rocksndiamonds-4-4-1-1-released/

net/spoofdpi: Update 1.2.0 => 1.2.1 Changelog: https://github.com/xvzc/SpoofDPI/releases/tag/v1.2.1 PR: 291873

security/vuxml: Amend entry for Mongodb The port is for mongodb 8.0 and not 8.2 Reported by: ronald-lists@klop.ws

databases/mongodb70: 7.0.28 Changes: https://www.mongodb.com/docs/manual/release-notes/7.0/#7.0.28---dec-19--2025 Announcement: https://www.mongodb.com/community/forums/t/mongodb-7-0-28-is-released/332825?u=r_k Security: CVE-2025-14847 "Zlib compressed protocol header length confusion may allow memory read"

multimedia/subtitlecomposer: add upstream patch to fix build with FFmpeg 8

x11/plank: Update 0.11.157 => 0.11.158, reset maintainership Changelog: https://github.com/zquestz/plank-reloaded/releases/tag/0.11.158 While here reset maintainership - inactive since 2021. PR: 291921

net-im/conduit: Update to 0.10.10 MFH: 2025Q4

ports-mgmt/portlint: Update to 2.23.0 * Soften .desktop error for both plist and Makefile items [1] * Check COMMENT for non-ASCII characters [2] * Ensure the order of pre-TARGET, do-TARGET, and post-TARGET sections [3] * Check for duplicates in LICENSE_PERMS [4] PR: 291017 [1] 289975 [2] 284951 [3] 284644 [4]

multimedia/jellyfin: update to 10.11.5

multimedia/ffmpeg: add a configure patch When pushing ffmpeg 8.0.1 I forgot the to git add the configure patch to fix detection of support for symbol versionning PR: 291868

games/libretro-shaders-slang: Update g20251121 => g20251223 Commitlog: https://github.com/libretro/slang-shaders/compare/a2ac00b...2707c34 PR: 291911

databases/py-redisvl: Update to 0.13.2 Changelog: - https://github.com/redis/redis-vl-python/releases/tag/v0.13.0 - https://github.com/redis/redis-vl-python/releases/tag/v0.13.2 Reported by: portscout

security/openssl-oqsprovider: Update to 0.11.0

sysutils/rocinante: Update 1.0.20250714 => 1.1.0.251222 Changelogs: https://github.com/BastilleBSD/rocinante/releases/tag/1.0.1.251120 https://github.com/BastilleBSD/rocinante/releases/tag/1.1.0.251222 PR: 291884 Approved by: Christer Edwards <christer.edwards@gmail.com> (maintainer)

devel/apache-commons-daemon: fix bugs in PID handling

sysutils/bastille: Upgrade port to 1.3.1.251223 Co-authored-by: Michael Osipov <michaelo@FreeBSD.org> PR: 291907 Release Notes: https://github.com/BastilleBSD/bastille/releases/tag/1.3.1.251223

java/springframework*: Deprecate and expire ports PR: 291876 Approved by: olgeni (maintainer)

multimedia/ffmpeg: bump revision to chase lib version change

multimedia/ffmpeg: mark as broken ports not supporting ffmpeg > 6

multimedia/motion: update to 4.7.1 to support ffmpeg8

games/openmw: wilden the acceped shlibs for ffmpeg Bump portrevision after ffmpeg upgrade

multimedia/mplayer: fix build with ffmpeg8 Remove version lib dependency for a more generic one, disable VDPAU option by default as it is still broken with ffmpeg8

multimedia/ffmpeg: update to 8.0.1 - fix XCB option [1] - add a nox11 flavor [2] - detect breakage in symbol versionning detection [3] - incorporate a chromium patch to readd av_stream_get_first_dts() necessary to unbundle ffmpeg in chromium distributions like qt*-webengine. as of today chromium devs has not found a way to avoid using this function so they keep readding this function in their bundled version of ffmpeg. PR: 290246 [1] PR: 278705 [2] PR: 291868 [3]

deskutils/gnome-pomodoro: Update to 0.28.1 Changelog: https://github.com/gnome-pomodoro/gnome-pomodoro/blob/0.28.1/NEWS Reported by: portscout

x11/libxkbcommon: Fix build with non-default options setting Installation of xkbcli-dump-keymap and xkbcli-interactive should be conditionalized based on selected port options. PR: 291825 Reported by: Ivan Rozhuk <rozhuk.im@gmail.com>, Michael Muenz <m.muenz@gmail.com> Tested by: Ivan Rozhuk <rozhuk.im@gmail.com> Approved by: portmgr (build fix blanket) Fixes: 90d358a2edc4 (x11/libxkbcommon: Update to 1.13.0)

news/inn-current: Update to 20251027

news/tin: Update to 2.6.5

databases/cockroach: deprecate and expire Excerpt from PR comment: The more pressing issue however is that the latest versions are no longer open source (in the strict definition). Releases between sometime in 2019 and prior to 20241118 are under Business Source Licence 1.1 at release time, electing to change to the open source Apache Licence 2.0 three years after the branch was first released. Starting 20241118 all releases of the software are fully proprietary even though source is available. As of [20251202], 22.2.19 is the latest version that is now under an open source licence, but the whole 22.2 branch is completely unsupported upstream. There are a couple newer LTS branches that are still supported but the earliest they become open source is late next year, by which point they may also become unsupported. PR: 272257

dns/knot-resolver6: Add new port This port is meant to replace dns/knot-resolver in the future, and intends to allow a seamless migration to it's users. PR: 291892

dns/knot-resolver: minor changes missed in the previous update PR: 291718

databases/mongodb70: 7.0.27 Changes: https://www.mongodb.com/docs/manual/release-notes/7.0-changelog/#std-label-7.0.27-changelog

textproc/csvlens: Update to 0.15.0 Changelog: https://github.com/YS-L/csvlens/blob/v0.15.0/CHANGELOG.md Reported by: portscout

misc/py-cppman: Update to 0.6.0 Changelog: https://github.com/aitjcize/cppman/blob/v0.6.0/ChangeLog Reported by: GitHub (watch releases)

misc/crush: Update to 0.29.1 Changelog: - https://github.com/charmbracelet/crush/releases/tag/v0.28.0 - https://github.com/charmbracelet/crush/releases/tag/v0.29.0 - https://github.com/charmbracelet/crush/releases/tag/v0.29.1 Reported by: GitHub (watch releases)

devel/py-ty: Update to 0.0.5 Changelog: https://github.com/astral-sh/ty/blob/0.0.5/CHANGELOG.md Reported by: Repology

print/plutobook: Update to 0.12.0 Changelog: https://github.com/plutoprint/plutobook/releases/tag/v0.12.0

math/rankwidth: unbreak by upgrading to 0.10 Support igraph 0.10 and later, including current igraph 1.0. Support current autoconf 2.72.

textproc/uni: upgrade to v2.9.0 Release notes at https://github.com/arp242/uni/releases/tag/v2.9.0

textproc/ibus-typing-booster: upgrade to 2.29.0 Release notes at https://github.com/mike-fabian/ibus-typing-booster/releases/tag/2.29.0

math/octave-forge-miscellaneous: Update to 1.3.2.

sysutils/appjail-devel: Update to 4.7.1.20251223 ChangeLog: https://github.com/DtxdF/AppJail/commits/08bfc568c0c353ce8ec4a974d879d8addaf6912c/

sysutils/appjail: Update to 4.7.1 ChangeLog: https://github.com/DtxdF/AppJail/releases/tag/v4.7.1

sysutils/bastille: Upgrade port to 1.3.0.251222 Co-authored-by: Michael Osipov <michaelo@FreeBSD.org> PR: 291885 Release Notes: https://github.com/BastilleBSD/bastille/releases/tag/1.3.0.251222

emulators/flexemu: Update to 3.31 Changelog: https://github.com/aladur/flexemu/compare/V3.30...V3.31 Reported by: portscout, Repology MFH: 2025Q4

sysutils/limine: Update 10.4.0 => 10.5.0 Changelog: https://codeberg.org/Limine/Limine/src/tag/v10.5.0/ChangeLog PR: 291903

devel/oci-cli: Update 3.71.2 => 3.71.4 Changelog: https://github.com/oracle/oci-cli/releases/tag/v3.71.4 PR: 291893

sysutils/rundeck: Update 5.17.0 => 5.18.0 Release Notes: https://docs.rundeck.com/docs/history/5_x/version-5.18.0.html PR: 291890 Security: CVE-2025-8916 Security: CVE-2025-53864 Security: CVE-2025-59250 Security: CVE-2025-64756 MFH: 2025Q4

audio/pt2-clone: Update to 1.80.1

multimedia/ffnvcodec-headers: Update 12.0.16.1 => 13.0.19.0 Commit log: https://github.com/FFmpeg/nv-codec-headers/compare/n12.0.16.1...n13.0.19.0 PR: 291888

astro/kstars: update to 3.8.0 release (+) Release notes: https://knro.blogspot.com/2025/12/kstars-v380-is-released.html

math/calc: Stop conflicting with itself My initial hope was that pkg would identify and skip tautologies, and the tests I ran seemed to work at the time, but it doesn't work in practice. Instead, teach calc not to conflict with calc, and calc-tiny not to conflict with calc-tiny.

www/chawan: Fix DISTNAME Use just version in DISTNAME "is a no go" © diizzy. Reported by: diizzy (via email) Approved by: blanket Fixes: 4a0169a0f3f9 (new port: A text-mode web browser and pager)

www/servlet-api: Deprecate and expire port PR: 291875

devel/apache-commons-daemon: update to 1.5.1 release PR: 291822 Submitted by: pfg

misc/codex: Update to 0.77.0 Changelog: - https://github.com/openai/codex/releases/tag/rust-v0.74.0 - https://github.com/openai/codex/releases/tag/rust-v0.75.0 - https://github.com/openai/codex/releases/tag/rust-v0.76.0 - https://github.com/openai/codex/releases/tag/rust-v0.77.0 Reported by: GitHub (watch releases)

www/qt6-webengine: Fix build on aarch64 Accepted by: portmgr (build fix blanket)

devel/jenkins: Update to 2.543 Sponsored by: The FreeBSD Foundation

net/ngrep: Update 1.45 => 1.48.3, reset maintainer Changelog: https://github.com/jpr5/ngrep/blob/v1.48.3/README.md#whats-new PR: 291115 Approved by: logan@elandsys.com (maintainer, timeout - inactive for 10+ years) Co-authored-by: Nithurshen Karthikeyan <nithurshen@gmail.com>

ports-mgmt/zig2tuple: Update to 20251222

graphics/ImageMagick7: Update to 7.1.2-11 PR: 291767

devel/bugzilla5{0,2}: Fix pkg-plist

devel/task: Update to 3.46.3 Changelog: https://github.com/go-task/task/blob/v3.46.3/CHANGELOG.md Reported by: GitHub (watch releases)

audio/baresip: Update 4.3.0 => 4.4.0 Changelog: https://github.com/baresip/baresip/releases/tag/v4.4.0 Improve port: - Move g711 module to default _MODULES_LIST (no external dependencies) - Add option to build G.722 audio codec via libg722 - Remove PortAudio from default options - Simplify nox11 flavor PR: 291891 Sponsored by: Subcarpathian BSD User Group

audio/re: Update 4.3.0 => 4.4.0 Changelog: https://github.com/baresip/re/releases/tag/v4.4.0 PR: 291891 Sponsored by: Subcarpathian BSD User Group

net-im/telegram-desktop: update 6.3.6 -> 6.3.9 Sponsored by: tipi.work

net-im/tde2e: update 1.8.58 -> 1.8.59 Sponsored by: tipi.work

net-im/tg_owt: update to the recent snapshot Sponsored by: tipi.work

www/gohugo: Update to 0.153.2 ChangeLog: https://github.com/gohugoio/hugo/releases/tag/v0.153.2 * Fix "image: unknown format" error * modules: Remove extended edition check * misc: Update edition comparison and guidance in README.md Approved by: doceng@ (implicit)