lang/s7: update to 11.9.20261009
This updates improves compatibility with 32-bit platforms somewhat.
There are still some issues with numbers >=2**32, but we are getting
there.
MFH: 2026Q4
(cherry picked from commit c4a3dd9e0af4aee9dace4b2cb1d28fcbeb406ec0)
archivers/lzma: update to 26.04
- a bug fix release
Upstream changes:
- Some bugs and vulnerabilities were fixed.
MFH: 2026Q4
(cherry picked from commit 8e2bdfc3a41dc46bd25796529ad980e07df4f59d)
devel/go-tools: update to 0.52.0
Selected upstream changes:
- cmd/compilebench: exit nonzero when a benchmark fails
- x/tools: delete obsolete code and dead test
- cmd/toolstash: check -linkobj files to support early export
- go.mod: update golang.org/x dependencies
Changelog: https://github.com/golang/tools/compare/v0.50.0...v0.52.0
MFH: 2026Q4
(cherry picked from commit 04b7864de90ca2b42d27592b0bc894cbbff372b7)
lang/s7: update to 11.9.20261009
This updates improves compatibility with 32-bit platforms somewhat.
There are still some issues with numbers >=2**32, but we are getting
there.
MFH: 2026Q4
math/manifold 3.5.4
Geometry library for topological robustness
math/manifold: update to v3.5.4
Do not foister -std=c++17 upon pkgconfig consumers to fix the build
in the upcoming math/burr-tools update.
Changelog: https://github.com/elalish/manifold/releases
PR: 299260
Reported by: fuz
devel/go-tools: update to 0.52.0
Selected upstream changes:
- cmd/compilebench: exit nonzero when a benchmark fails
- x/tools: delete obsolete code and dead test
- cmd/toolstash: check -linkobj files to support early export
- go.mod: update golang.org/x dependencies
Changelog: https://github.com/golang/tools/compare/v0.50.0...v0.52.0
MFH: 2026Q4
biology/gmap 2025.07.31_1
Genomic Mapping and Alignment Program for mRNA and EST Sequences
biology/gmap: enable on remaining architectures
Seems to work fine.
While at it, hook up test suite.
Approved by: portmgr (build fix blanket)
MFH: 2026Q4
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
security/vuxml: adjust linux-rl9-libxml2 package version for
abbc8912-5efa-11f0-ae84-99047d0a6bcc (+)
Rerolled linux-rl9-libxml2-2.9.13_10 now includes fixes for mentioned CVEs
net/miniupnpd: Update to 2.3.11
Changelog (highlights):
- fix heap overflow in PinholeVerification()
- fix PCP option size parsing
- re-enable port forwarding properly (broken in 2.3.10)
- fix buffer read overflow in minixml.c
http://miniupnp.free.fr/files/changelog.php?file=miniupnpd-2.3.11.tar.gz
Port changes:
- drop the upstream testportinuse build fix, now included in the release;
- set the address family on the pool address passed to DIOCADDADDR in
add_nat_rule() and add_redirect_rule2();
- take maintainership.
Thanks to squat@squat.no for maintaining this port.
PR: 298991
Reviewed by: vvd
Approved by: squat@squat.no (maintainer)
Security: CVE-2026-5720
Sponsored by: Rubicon Communications, LLC ("Netgate")
(cherry picked from commit 5bbc7e7074ae9c1e06df5346f18e218d65bb2e03)
net/miniupnpd: Update to 2.3.11
Changelog (highlights):
- fix heap overflow in PinholeVerification()
- fix PCP option size parsing
- re-enable port forwarding properly (broken in 2.3.10)
- fix buffer read overflow in minixml.c
http://miniupnp.free.fr/files/changelog.php?file=miniupnpd-2.3.11.tar.gz
Port changes:
- drop the upstream testportinuse build fix, now included in the release;
- set the address family on the pool address passed to DIOCADDADDR in
add_nat_rule() and add_redirect_rule2();
- take maintainership.
Thanks to squat@squat.no for maintaining this port.
PR: 298991
Reviewed by: vvd
Approved by: squat@squat.no (maintainer)
Sponsored by: Rubicon Communications, LLC ("Netgate")
www/gohugo 0.168.0,1
Fast and Flexible Static Site Generator built with love in GoLang
www/gohugo: Update to 0.168.0
ChangeLog: https://github.com/gohugoio/hugo/releases/tag/v0.168.0
* Fix PAGE.IsNode warning in jsonify
* hugolib: Fix rebuild when content is also mounted as assets
* Fix deprecation issues in tests
* circleci: Update config.yml to version 2.1
* warpc: Upgrade libavif, AOM, dav1d versions
* warpc: Upgrade to javy 9.1.0
* warpc: Upgrade to wasi-sdk-34
* ci: Drop extended build tag on Windows tests
* Add imaging.firstFrameOnly and some animation performance improvements
* js, css: Add charset option to js.Build and css.Build
* Add ImageResource.FrameCount
* Add Translate and Format* methods to Language
* Add basic support for OSC 7501 program status
* modules: Ignore module.replacements defined in themes
* Upgrade to Go 1.27.2
* ci: Add temporary workaround for staticcheck vs Go 1.27.2
* transform/metainject: Inject Hugo generator tag last in
* Make tests run on GOARCH 386
* Update vulnerability reporting instructions ec69d0e @bep
Approved by: doceng@ (implicit)
sysutils/conky 1.25.4
Advanced, highly configurable system monitor for X11
sysutils/conky{,-awesome}: Update to 1.25.4
ChangeLog: https://github.com/brndnmtthws/conky/releases/tag/v1.25.4
* chore: bump version to v1.25.4
* fix: isolate no_update specials and add regression coverage
* build(deps): bump jdx/mise-action from 4 to 5 in the actions group
* feat(x11): finish alpha-based input shaping and regression coverage
* fix(x11): restore Xft text colors with pseudo-transparency
* fix: recover CPU frequency output after transient read failures
* docs: clean up README and AGENTS prose
x11/bhotkeys: Update to 1.4
Fix inability to close session panel with touchscreen tap outside
panel region (a tap on the panel list ate subsequent outisde taps
until a click [with mouse or trackpad] reset tap)
Fix bhotkeys-kde-apply disabling/remapping built-in KDE functionality
Changelog: https://github.com/FrauBSD/bhotkeys/blob/1.5/CHANGELOG.md
Reviewed by: fuz, jrm
Differential Revision: https://reviews.freebsd.org/D60755
comms/uhd 4.10.0.0_2
Ettus Research UHD driver framework
comms/uhd: Patches to fix B200 usability
PATCH: clear endpoint halt after FPGA load
PATCH: utils: match serials that are not hex numbers
This Patch allows UHD to handle the non-hex serials of clone devices
such as the LibreSDR B210.
Full hex serials still get compared by value,
while non-hex ones are being treated as strings.
PR: 290791
Reported by: Alexandra Burmistrova
net-p2p/go-ethereum: Security update 1.17.7 => 1.17.8
While here, add TESTING_UNSAFE.
Changelog:
* Fix DDoS issues found in the upcoming Glamsterdam fork
* Adaptation of RPC calls to support changes in Glamsterdam
* abigen uses sequential nonces when deploying dependencies of a contract
* Fix an unclean shutdown issue
https://github.com/ethereum/go-ethereum/releases/tag/v1.17.8
PR: 299443
Approved by: Enrique Fynn <me@enriquefynn.com> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 20d553344b4c8ae684452a787a2aa9b304668634)
net-p2p/go-ethereum: Security update 1.17.7 => 1.17.8
While here, add TESTING_UNSAFE.
Changelog:
* Fix DDoS issues found in the upcoming Glamsterdam fork
* Adaptation of RPC calls to support changes in Glamsterdam
* abigen uses sequential nonces when deploying dependencies of a contract
* Fix an unclean shutdown issue
https://github.com/ethereum/go-ethereum/releases/tag/v1.17.8
PR: 299443
Approved by: Enrique Fynn <me@enriquefynn.com> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
lang/rust 1.99.1_1
Language with a focus on memory safety and concurrency
lang/rust: fix runtime on powerpc64le
Backport an LLVM fix for the loop vectorizer emitting invalid IR
for extractvalue of a widened sadd.with.overflow. On powerpc64le this
broke everything using libbz2-rs-sys (py-maturin, proton-pass-cli) with
"Cannot select: i64 = sign_extend v4i32".
Mk/bsd.gecko.mk, lang/spidermonkey128: use RUST_LIB_BACKTRACE on powerpc64le
rust.mk only exports RUST_BACKTRACE, so RUST_LIB_BACKTRACE=0 from the
environment is enough and the per-port patches can go. spidermonkey128
is hit by the same cargo crash.
Mk/Uses/cargo.mk, lang/rust: keep RUST_BACKTRACE on powerpc64le
Only backtraces captured by libraries hit the libunwind bug, so disable
those with RUST_LIB_BACKTRACE and keep panic backtraces everywhere. The
fix is in releng/14.5, stable/15 and main.
net/389-ds-base 3.2.3_1
Enterprise-class LDAP directory server
net/389-ds-base: fix build on powerpc64le
cargo crashes on startup with rust 1.99 because of the libunwind bug
in 15.x. The Makefile hardcodes RUST_BACKTRACE=1, so turn off library
backtraces with RUST_LIB_BACKTRACE instead.
games/Doom64EX: switch to Doom64EX-Classic 2.6.14
The original Doom64EX has been unmaintained since 2022 and doesn't build
with CMake 4. Doom64EX-Classic is the GPL continuation of Doom64EX 2.5
by the Doom64EX-Plus author: it uses SDL3 and keeps supporting the IWAD
generated from the N64 ROM. WadGen is now built and installed as
doom64ex-wadgen.
Changelog: https://github.com/atsb/Doom64EX-Classic/releases/tag/2.6
PR: 299390
databases/clickhouse: enable on powerpc64le
The bundled OpenSSL ships POWER8 assembly pre-generated with the
big-endian "linux64v2" perlasm flavour, which gives wrong AES results
on little-endian. Regenerate it with "linux64le" before configuring.
Until rtld annotates the end of the stack on powerpc64, the bundled
libunwind crashes when it collects a backtrace on the main thread.
Drop its fallback to the link register, as the base libunwind does.
databases/clickhouse-devel: enable on powerpc64le
The bundled OpenSSL ships POWER8 assembly pre-generated with the
big-endian "linux64v2" perlasm flavour, which gives wrong AES results
on little-endian. Regenerate it with "linux64le" before configuring.
Until rtld annotates the end of the stack on powerpc64, the bundled
libunwind crashes when it collects a backtrace on the main thread.
Drop its fallback to the link register, as the base libunwind does.
net-im/tdlib 1.8.68_1
Library for building Telegram clients
net-im/tdlib: refactor port (+)
* Make port installs properly versioned shared libraries to easy track in
dependencies
* Build *_private and *_static libraries as static, they not intended to be
shared
* Install a CMake package for tde2e which offers those as tde2e::tde2e and
tde2e::tdutils [1]
Co-Authored-by: mi [1]
PR: 299290 [1]
x11/xscreensaver 6.17
Save your screen while you entertain your cat
x11/xscreensaver: Update 6.16 => 6.17
Changelog:
* Added missing localization strings (largely auto-translated).
* X11: Localizations are being installed again.
* macOS, iOS, Android: Now localized.
* macOS: Possible workarounds for longstanding Apple bugs where the
legacyScreenSaver process would start using 100% CPU and savers would
never run again.
* macOS 14.6 or later and iOS 17.6 or later are now required, since
Xcode 6 can no longer build executables that work on older OSes.
https://www.jwz.org/xscreensaver/changelog.html
PR: 299379
Approved by: osa, vvd (Mentors, implicit)
editors/markmywords: the port had been improved (+)
- Update the build scripts for upcoming CMake 4.x
- Fix discrepancies between *.ui XML and Vala code
which also gets rid of GTK start-up assertions
- Adjust "About" window proportions for nicer look
net/samba425 4.25.0_3
Free SMB/CIFS and AD/DC server and client for Unix
net/samba425: restore missing get_quota vfstest command (cmd_vfs.c)
The combined patch adding a "get_quota" command to vfstest (present
identically in net/samba419, 420, 422, 423, and 424) touches two
files: source3/torture/cmd_vfs.c (the command implementation and its
vfs_commands[] registration) and source3/torture/wscript_build
(installs vfstest instead of building it selftest-only). Only the
wscript_build half survived into samba425 — the cmd_vfs.c half was
dropped.
Restored patch-source3_torture_cmd__vfs.c, adapted (not just copied
verbatim) to the real samba-4.25.0 upstream API: SMB_VFS_GET_QUOTA()
dropped its explicit conn parameter and now takes an fsp directly, and
the file resolution pattern changed from synthetic_smb_fname() to
synthetic_pathref()+smb_fname->fsp (mirroring the sibling
cmd_disk_free() function, which upstream already migrated the same
way between 4.24 and 4.25). Verified against a real FreeBSD build:
the first version of this patch (ported mechanically from samba424,
pre-dating the SMB_VFS_GET_QUOTA signature change) failed to compile
with "too many arguments provided to function-like macro invocation";
this version builds cleanly.
PR: 299196 (follow-up audit after comment 11 on this PR)
PR: 299353
Approved by: samba (kiwi)
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
sysutils/f3 10.0_1
Fight Flash Fraud or Fight Fake Flash test tool
sysutils/f3: Fix build on i386
The MIN macro in libutils.h had no support for ints, as a result commit
bf3dd41 caused f3 to fail to compile on 32-bit architectures. Fixed
upstream in 0d08c4e.
Approved by: yuri (mentor)
Differential Revision: https://reviews.freebsd.org/D60719
