ports-mgmt/pkg: update to 2.9.0
Major changes
=============
- Security hardening everywhere
- libpkg: add the pkg_repo_meta_extra() API
- full support for musl
- keys: fall back on the host keys when using a root directory
- pkg set -v: store the vital flag as a user override combined with the
package's own flag
- clean: keep the exact archives of the installed packages
- db: add out-of-schema pkg_local and pkg_attr to improve changes
without schema incompatibilities
- upgrade/install: report why each installed package that the plan
removes
- upgrade/install: require an explicit confirmation before removing
explicitly installed packages
- upgrade/install: require an explicit confirmation before removing
explicitly installed packages
- upgrade/install: add -N/--no-remove and NEVER_REMOVE to refuse
removing unrequested packages
- solver: hold an upgrade back instead of removing an explicitly
installed package, and report the packages that are held back
- libpkg: recognize loongarch64 ELF objects and the loongarch:64 ABI
- scheduler: order the packages providing a shared library or a named
provide before the packages requiring them
- signing: add an ML-DSA-87 signer, keys are created with pkg key
--create -t mldsa and repositories are signed with --sign-type mldsa,
with SHA512 as the digest
Minor changes
=============
- config: make PKG_CONFIG_FILE a configuration variable
- libpkg: escape spaces in metalog filenames
- fetch: detect up-to-date responses that do not carry a 304 Not
Modified
- repo: keep the previously fetched catalogue when an update fails
- checksum: add the z-base-32 and hex encodings for sha256, blake2 and
blake2s
- support for openssl 4
- signing command can override the checksum algorithm
- rwhich performance improvements
- fix: a plist variable name matching
- db: the read-only commands can read a database created by an older
pkg(8) (skipping upgrades)
- solver: do not install a package offered by several repositories when
nothing needs it.
- libfetch: sync with FreeBSD-current
- update vendored softwares to latest versions
- pkg add: remove the temporary files and directories left by a failed
extraction
- triggers: honour RUN_SCRIPTS
PR: 299494
Exp-run by: antoine (earlier version)
ports-mgmt/pkg-devel: 2.8.99.6
Changes since 2.8.99.4:
- Lots of hardening
- rwhich performances improvements
- repo: do not keep a meta file which failed its verification
- triggers: honour RUN_SCRIPTS
- pkg add: remove the temporary files and directories left by a failed
extraction
- libfetch: sync with FreeBSD-current
- config: do not warn about an OS upgrade when the ABI describes another OS
- update all vendors software
- support for ML-DSA
- db: the read-only commands can read a database created by an older
pkg(8) requiring upgrade of the schema
emulators/fs-uae-launcher: Add missing RUN_DEPENDS
fs-uae-launcher doesn't depend on the emulator it launches.
With only the launcher installed, starting a game fails.
While here:
* Switch build format to PEP 517 to prepare for future setuptools.
* Add NO_ARCH to eliminate "no architecture-specific files found".
* Sort Makefile (pet port{clippy,fmt}).
PR: 300204
Approved by: Atanu Biswas <atanubiswas484@gmail.com> (maintainer)
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
(cherry picked from commit d56cc31746805fe133e0c483e09687a5f22b0a2f)
emulators/fs-uae-launcher: Add missing RUN_DEPENDS
fs-uae-launcher doesn't depend on the emulator it launches.
With only the launcher installed, starting a game fails.
While here:
* Switch build format to PEP 517 to prepare for future setuptools.
* Add NO_ARCH to eliminate "no architecture-specific files found".
* Sort Makefile (pet port{clippy,fmt}).
PR: 300204
Approved by: Atanu Biswas <atanubiswas484@gmail.com> (maintainer)
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
www/gitea: Fix building by pinning Go to 1.27+
* Gitea requires Go 1.27, but the 2026Q4 tree still defaults to 1.26.
This can safely be committed to main as well.
* While here, mark as PIE_UNSAFE (as build WITH_PIE) fails. (by alven@)
Reported by: Patrick M. Hausen <hausen@punkt.de> (by email)
Approved by: portmgr@ (blanket, build fix)
MFH: 2026Q4
(cherry picked from commit 7cc5a636bd2a8736305b4dd1701888632d458a00)
www/gitea: Fix building by pinning Go to 1.27+
* Gitea requires Go 1.27, but the 2026Q4 tree still defaults to 1.26.
This can safely be committed to main as well.
* While here, mark as PIE_UNSAFE (as build WITH_PIE) fails. (by alven@)
Reported by: Patrick M. Hausen <hausen@punkt.de> (by email)
Approved by: portmgr@ (blanket, build fix)
MFH: 2026Q4
devel/rubygem-worldmonitor: Add New Port
Official Ruby client for the World Monitor API. It gives access to
country briefs, risk scores, conflict, cyber, market and news feeds
and to the MCP tools, without writing an HTTP integration by hand.
WWW: https://www.worldmonitor.app/docs/sdks
Sponsored by: Netzkommune GmbH
devel/py-worldmonitor-sdk: Add New Port
Official Python client for the World Monitor API. It gives access to
country briefs, risk scores, conflict, cyber, market and news feeds
and to the MCP tools, without writing an HTTP integration by hand.
WWW: https://www.worldmonitor.app/docs/sdks
Sponsored by: Netzkommune GmbH
www/rt60 6.0.4
Industrial-grade ticketing system written in Perl
www/rt60: Update to 6.0.4
Add new option, 'MFA', which enables TOTP multi-factor authentication
support. Set MFA as default ON.
PR: 300304
(cherry picked from commit 7ed40c46a44c05a709eefa58d6a82852a6d512c3)
www/ungoogled-chromium 156.0.8078.79
Google web browser based on WebKit sans integration with Google
www/ungoogled-chromium: Fix build in poudriere
ninja: Entering directory `out/Release'
ninja: error:
'../../third_party/devtools-frontend/src/third_party/esbuild/esbuild', needed by
'gen/third_party/devtools-fronten
d/src/front_end/third_party/lighthouse/report/report.js', missing and no known
rule to make it
Approved by: blanket (fix build)
Sponsored by: UNIS Labs
sysutils/wmcube 1.0.2
Window Maker dockapp that displays cpu load and a realtime 3D object
sysutils/wmcube: Update to 1.0.2
Use the installed object directory and install the manual page. Drop
setgid kmem permissions since CPU statistics are read using sysctl.
While here, pet portclippy
Sponsored by: Rubicon Communications, LLC ("Netgate")
net-mgmt/iprange: Update to 2.1.1
Remove the portable IPv6 arithmetic patch, now included upstream.
Sponsored by: Rubicon Communications, LLC ("Netgate")
net/xmlrpc-c 1.64.03_1
XML-RPC library for C and C++
net/xmlrpc-c: Use canonical WWW URL
Follow the upstream redirect to its canonical location.
While here, pet portclippy
Sponsored by: Rubicon Communications, LLC ("Netgate")
net/pear-Net_Growl: Deprecate and drop maintainership
The upstream project is abandoned and its repository is archived.
Set the expiration date to December 31, 2026.
https://github.com/pear/Net_Growl
Sponsored by: Rubicon Communications, LLC ("Netgate")
www/rt50 5.0.11
Industrial-grade ticketing system written in Perl
www/rt50: Update to 5.0.11
Add Multi-factor authentication option, ON by default.
PR: 300302
(cherry picked from commit e9463fef84b0f7dcf8eed6ee05016607d425229c)
security/wolfssh: Update to 1.6.0
This release fixes five vulnerabilities, among them a man-in-the-middle
against the host key check.
Changes: https://github.com/wolfSSL/wolfssh/releases/tag/v1.6.0-stable
Security: 61a6b109-d852-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
(cherry picked from commit ad5a4e42f55ae1ca8cdadc78c489abbbc664f48c)
security/wolfssh: Update to 1.6.0
This release fixes five vulnerabilities, among them a man-in-the-middle
against the host key check.
Changes: https://github.com/wolfSSL/wolfssh/releases/tag/v1.6.0-stable
Security: 61a6b109-d852-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
