sysutils/desktop-installer: Update to 1.3.0
Consolidate Xlibre and Xorg support into one script
Create a new log file for each run
Numerous minor fixes and enhancements
Changes: https://github.com/outpaddling/desktop-installer/releases
sysutils/auto-admin: Update to 0.8.6
auto-gpu-setup, auto-wacom-setup: Add Xlibre support
Add numerous man pages
Numerous minor fixes and enhancements
Changes: https://github.com/outpaddling/auto-admin/releases
dns/nsd 4.15.4
Authoritative only non-recursive name server
dns/nsd: Update 4.15.3 => 4.15.4
This release has many bugfixes, updated support for
RR types and a few new features.
Release Notes:
https://community.nlnetlabs.nl/t/nsd-4-15-4-released/3494
PR: 300088
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
(cherry picked from commit ce910e400ca189d28bce40bc74f1811e1aaab23a)
dns/nsd 4.15.4
Authoritative only non-recursive name server
dns/nsd: Update 4.15.3 => 4.15.4
This release has many bugfixes, updated support for
RR types and a few new features.
Release Notes:
https://community.nlnetlabs.nl/t/nsd-4-15-4-released/3494
PR: 300088
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
security/py-netbox-secrets: Depend on net-mgmt/netbox
This is a NetBox plugin: it imports netbox.* modules that only exist
inside the NetBox application, and pkg-message assumes NetBox is
installed. Add net-mgmt/netbox to RUN_DEPENDS so the plugin cannot
be installed without it.
While here, add concurrent to USE_PYTHON and fix portlint warnings.
PR: 299777
MFH: 2026Q4
(cherry picked from commit af532dd8aaa62b15967bb56ac61f77be9d7d1a68)
devel/py-dj60-strawberry-graphql: Fix with Python 3.13 and the deps
- The asgi and fastapi extras need python-multipart (starlette's
request.form()), but the ASGI and FASTAPI options pulled in
devel/py-multipart, an unrelated package with the same import name.
Depend on www/py-python-multipart instead.
- Upstream's cli extra also requires python-multipart, starlette,
uvicorn and websockets: the "strawberry dev" command runs a Starlette
app with WebSocket routes under uvicorn. Add them to
CLI_RUN_DEPENDS.
- strawberry/ext/dataclasses/dataclasses.py is a vendored helper for
Python < 3.10 that nothing imports (strawberry requires 3.10+ and
uses dataclass(kw_only=True)). On Python 3.13 it cannot be
imported, because dataclasses._create_fn was removed. Remove it.
- The CLI option is off by default, but bin/strawberry is installed
anyway and only raises MissingOptionalDependenciesError. Do not
install it (and drop it from the autoplist list) when CLI is off.
Same changes as devel/py-strawberry-graphql.
While here, fix portlint warnings.
PR: 299775
MFH: 2026Q4
(cherry picked from commit 1287f912f0001d4ad603282bc090ffe6f2f2b13e)
devel/py-strawberry-graphql: Fix with Python 3.13 and the dependencies
- The asgi and fastapi extras need python-multipart (starlette's
request.form()), but the ASGI and FASTAPI options pulled in
devel/py-multipart, an unrelated package with the same import name.
It only worked because www/py-starlette's FULL option brings
python-multipart in. Depend on www/py-python-multipart instead.
- Upstream's cli extra also requires python-multipart, starlette,
uvicorn and websockets: the "strawberry dev" command runs a Starlette
app with WebSocket routes under uvicorn. Add them to
CLI_RUN_DEPENDS.
- strawberry/ext/dataclasses/dataclasses.py is a vendored helper that
builds keyword-only __init__ methods for Python < 3.10. strawberry
requires Python 3.10+ and uses dataclass(kw_only=True), so nothing
imports it; on Python 3.13 it cannot be imported at all, because it
uses dataclasses._create_fn, which was removed. Remove it.
- The CLI option is off by default, but bin/strawberry is installed
anyway and only raises MissingOptionalDependenciesError. Do not
install it (and drop it from the autoplist list) when CLI is off.
While here, fix portlint warnings.
PR: 299776
MFH: 2026Q4
(cherry picked from commit 5531b231fe9ef181ca1e7ce1e102f2a80dee6e2a)
java/openjdk27: Version 27.0.1.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
(cherry picked from commit 3a98a6ce03587bf3d3cf98f436c4cc97f3d936f1)
security/py-netbox-secrets: Depend on net-mgmt/netbox
This is a NetBox plugin: it imports netbox.* modules that only exist
inside the NetBox application, and pkg-message assumes NetBox is
installed. Add net-mgmt/netbox to RUN_DEPENDS so the plugin cannot
be installed without it.
While here, add concurrent to USE_PYTHON and fix portlint warnings.
PR: 299777
MFH: 2026Q4
devel/py-dj60-strawberry-graphql: Fix with Python 3.13 and the deps
- The asgi and fastapi extras need python-multipart (starlette's
request.form()), but the ASGI and FASTAPI options pulled in
devel/py-multipart, an unrelated package with the same import name.
Depend on www/py-python-multipart instead.
- Upstream's cli extra also requires python-multipart, starlette,
uvicorn and websockets: the "strawberry dev" command runs a Starlette
app with WebSocket routes under uvicorn. Add them to
CLI_RUN_DEPENDS.
- strawberry/ext/dataclasses/dataclasses.py is a vendored helper for
Python < 3.10 that nothing imports (strawberry requires 3.10+ and
uses dataclass(kw_only=True)). On Python 3.13 it cannot be
imported, because dataclasses._create_fn was removed. Remove it.
- The CLI option is off by default, but bin/strawberry is installed
anyway and only raises MissingOptionalDependenciesError. Do not
install it (and drop it from the autoplist list) when CLI is off.
Same changes as devel/py-strawberry-graphql.
While here, fix portlint warnings.
PR: 299775
MFH: 2026Q4
devel/py-strawberry-graphql: Fix with Python 3.13 and the dependencies
- The asgi and fastapi extras need python-multipart (starlette's
request.form()), but the ASGI and FASTAPI options pulled in
devel/py-multipart, an unrelated package with the same import name.
It only worked because www/py-starlette's FULL option brings
python-multipart in. Depend on www/py-python-multipart instead.
- Upstream's cli extra also requires python-multipart, starlette,
uvicorn and websockets: the "strawberry dev" command runs a Starlette
app with WebSocket routes under uvicorn. Add them to
CLI_RUN_DEPENDS.
- strawberry/ext/dataclasses/dataclasses.py is a vendored helper that
builds keyword-only __init__ methods for Python < 3.10. strawberry
requires Python 3.10+ and uses dataclass(kw_only=True), so nothing
imports it; on Python 3.13 it cannot be imported at all, because it
uses dataclasses._create_fn, which was removed. Remove it.
- The CLI option is off by default, but bin/strawberry is installed
anyway and only raises MissingOptionalDependenciesError. Do not
install it (and drop it from the autoplist list) when CLI is off.
While here, fix portlint warnings.
PR: 299776
MFH: 2026Q4
java/openjdk27: Version 27.0.1.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
devel/got 0.130.1
Game of Trees version control system
devel/got: update to 0.130.1
User-visible changes:
- default to using SHA256 object IDs in newly created repositories
The got-portable-0.130 release accidentally skipped some commits
from got 0.130.
misc/mcp-inspector: regenerate powerpc64* distinfo for 2.12.0
The 2.12.0 update only regenerated the amd64 and aarch64 distinfo.
Reported by: yuri (maintainer)
net/samba425 4.25.1
Free SMB/CIFS and AD/DC server and client for Unix
net/samba425: update to 4.25.1
* BUG 16274: CTDB: Cannot find device "<iface>@<link>": need to extract real
interface names
* BUG 16200: generate_unique_u64() may not protect against veto_value
* BUG 16261: Rename with ReplaceIfExists to a target differing only in case
creates a duplicate instead of replacing (regression in
* BUG 16263: Samba 4.25.0 fails to build on macOS
* BUG 16258: Python smbconf transaction_start() lacks a talloc stack frame
with CTDB
* BUG 16265: Linux i686 build fails on dynamic_lookup
* BUG 16276: Access control bypass via vfs_ceph_rgw case-insensitive open
(CVE-2026-109411)
* BUG 16287: vfs_acl_xattr crashes on zero-sized flistxattr queries
* BUG 16235: Dynamic interface support in smbd is racy
* BUG 16254: CTDB database operations can be run against incorrect nodes
* BUG 16273: A node can be banned because it tries to run recovery after
losing the cluster lock
* BUG 15857: All backend log should honor global log level "log level = "
* BUG 15324: fruit:time machine max size can only be set to an integer and is
ignored if user sets a float
Reported by: portscout
Sponsored by: Klara, Inc.
Approved by: samba (kiwi)
www/ot-recorder 1.0.3_1
Store and access data published by OwnTracks apps
www/ot-recorder: Mark BROKEN
Fails to build after databases/lmdb rework for allowing two different
versions installed at the same time
Reported by: pkg-fallout
x11-fm/worker 6.0.0
X11 file manager based on Directory Opus of AmigaOS
x11-fm/worker: update the port to the next major release 6.0.0
Most visible changes are internal text editor, copy and rename
based on regular expressions, nanoseconds timestamp support.
On the port's side, there is optional Imlib2 support, C++20 is
now used for compilation, switch to smaller .tar.zst distfile.
Reported by: portscout
filesystems/avfs: update the port to version 1.4.0
- Add alternative WWW and MASTER_SITES locations
- Drop DEBUG option and amend CONFIGURE_ARGS in
accordance to WITH_DEBUG, a user-facing variable
- Add Lzip compression support and enable it with
Zstd, as both are light or common dependencies
Reported by: portscout
databases/pgdog 0.1.62
PostgreSQL connection pooler, load balancer and database sharder
databases/pgdog: Update 0.1.61 => 0.1.62
* Move libpg_query crate replacement from post-extract to pre-patch
as `make cargo-crates` was unable to update crates:
`make cargo-crates > Makefile.crates`
rmdir: /libpg_query: No such file or directory
* Remove upstreamed patch
PR: 299460
x11/cosmic-app-library: New port: Modern application launcher for COSMIC
COSMIC App Library is a modern application launcher for the
COSMIC desktop environment that displays graphical apps
in a neat, airy grid.
WWW: https://github.com/pop-os/cosmic-app-library
PR: 299771
Reported by: Josh Megnauth <jo.sh@tutanota.com> (new maintainer)
databases/pgloader3 3.6.9_10
Data loading and migration tool for PostgreSQL using the COPY command
databases/pgloader3: Fix crash during "reset sequences"
Column names that need to be quoted, will already be so quoting them
again results in sql errors.
Patch taken from:
https://github.com/codereverser/pgloader/commit/aba754a759f28701d94551e85c6b9c369e63698c
Upstreaming is of no use as upstream rewrote pgloader in java and is not
accepting patches for v3 anymore.
While at it:
- Replace PORTVERSION with DISTVERSION.
- Add libzstd to LIB_DEPENDS.
- Fix warnings from portclippy.
- Refresh patch.
PR: 298832
Approved by: freebsd-washroom@duhanic.com (maintainer, timeout 1 month)
Sponsored by: UNIS Labs (vvd)
Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>
MFH: 2026Q4
(cherry picked from commit 06a8a3bbb6302346f8fe2a8822286528f68fdf73)
databases/pgloader3 3.6.9_10
Data loading and migration tool for PostgreSQL using the COPY command
databases/pgloader3: Fix crash during "reset sequences"
Column names that need to be quoted, will already be so quoting them
again results in sql errors.
Patch taken from:
https://github.com/codereverser/pgloader/commit/aba754a759f28701d94551e85c6b9c369e63698c
Upstreaming is of no use as upstream rewrote pgloader in java and is not
accepting patches for v3 anymore.
While at it:
- Replace PORTVERSION with DISTVERSION.
- Add libzstd to LIB_DEPENDS.
- Fix warnings from portclippy.
- Refresh patch.
PR: 298832
Approved by: freebsd-washroom@duhanic.com (maintainer, timeout 1 month)
Sponsored by: UNIS Labs (vvd)
Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>
MFH: 2026Q4
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
security/vuxml: adjust linux-rl9-libxslt package for
b0a3466f-5efc-11f0-ae84-99047d0a6bcc (+)
Rerolled linux-rl9-libxslt-1.1.34_5 now includes fixes for mentioned CVEs
textproc/antiword 0.37_6
Application for displaying Microsoft(R) Word documents
textproc/antiword: Deprecate
Upstream has been dead since the 0.37 release in 2005. The only
remaining fork (github.com/grobian/antiword) has no releases and does
not address security issues.
CVE-2026-111677 (heap out-of-bounds read in vGet8LstInfo) and
CVE-2026-111678 (stack out-of-bounds read in vGet8PapInfo and
vGet8ChrInfo) are unfixed upstream and in every distribution.
Set to expire on 2026-11-30.
Sponsored by: Netzkommune GmbH
(cherry picked from commit 100c915a873d51c284aa4febb506da8db7a3a440)
textproc/antiword 0.37_6
Application for displaying Microsoft(R) Word documents
textproc/antiword: Deprecate
Upstream has been dead since the 0.37 release in 2005. The only
remaining fork (github.com/grobian/antiword) has no releases and does
not address security issues.
CVE-2026-111677 (heap out-of-bounds read in vGet8LstInfo) and
CVE-2026-111678 (stack out-of-bounds read in vGet8PapInfo and
vGet8ChrInfo) are unfixed upstream and in every distribution.
Set to expire on 2026-11-30.
Sponsored by: Netzkommune GmbH
www/py-django-extensions: Update 3.2.3 => 4.1
Changelog:
https://github.com/django-extensions/django-extensions/blob/4.1/CHANGELOG.md
Port changes:
- Switch to USE_PYTHON=pep517.
- Add concurrent to USE_PYTHON.
- Add mail/py-aiosmtpd to RUN_DEPENDS for mail_debug.
- Patch the PEP 639 license string for the setuptools in the tree.
- Fix portlint warnings.
PR: 299899
Approved by: Kevin Golding <ports@caomhin.org> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 1c5cc9c088aeb0d7f94c4ccab4ee0acf29d3839a)
www/py-django-extensions: Update 3.2.3 => 4.1
Changelog:
https://github.com/django-extensions/django-extensions/blob/4.1/CHANGELOG.md
Port changes:
- Switch to USE_PYTHON=pep517.
- Add concurrent to USE_PYTHON.
- Add mail/py-aiosmtpd to RUN_DEPENDS for mail_debug.
- Patch the PEP 639 license string for the setuptools in the tree.
- Fix portlint warnings.
PR: 299899
Approved by: Kevin Golding <ports@caomhin.org> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
misc/py-mmcv 2.2.0_6
OpenMMLab: Foundational library for computer vision research
misc/py-mmcv: Fix build on Python 3.13 and the runtime dependencies
PR: 299961
setup.py exec()s mmcv/version.py and then reads __version__ back
from locals(), which no longer works on 3.13 (PEP 667): exec into an
explicit namespace instead.
The package also could not be installed or imported on its own: the
extension links against libc10.so from py-pytorch (only a build
dependency so far), and mmcv.image imports cv2 at the top level. Add
both py-pytorch and py-opencv-python-headless to RUN_DEPENDS.
While here, follow the Python Ports Policy, add concurrent to
USE_PYTHON, fix portlint warnings and document the patches.
x11/bhotkeys-dwm: New port
Stock dwm chords for bhotkeys. SUPERASMODKEY installs those
rows with Super as Mod, for a dwm built with that option.
Reviewed by: fuz (previous revision), jrm (previous revision)
Differential Revision: https://reviews.freebsd.org/D60934
x11/libinput: Fix the Python dependencies of the libinput tools
The Python tools in libexec/libinput (libinput-measure-*, -analyze-*,
-replay, ...) import libevdev, i.e. python-libevdev
(devel/py-libevdev), never evdev (python-evdev), yet RUN_DEPENDS lists
devel/py-evdev. Depend on the package they actually use. This also
stops pulling devel/py-evdev into every desktop installation.
libinput-analyze-recording, -analyze-per-slot-delta,
-analyze-touch-down-state, -analyze-buttons and libinput-replay import
yaml, which is not declared. Without PyYAML the analyze tools fail
with ModuleNotFoundError and libinput-replay refuses to run ("One or
more python modules are missing"). Add py-pyyaml to RUN_DEPENDS.
While here, fix portlint warnings.
PR: 299873
lang/gauche 0.9.15_3
Scheme script interpreter with multibyte character handling
(Only the first 10 of 32 items in this commit are shown above. )
Templates/config.(guess|sub): Update to 2026-05-17
Also remove our local changes that replaced x86_64 with amd64 because
these complicate porting by forcing port maintainers to replace x86_64
with amd64 in configure scripts.
Additional changes:
bsd.port.mk: Apply S/amd64/x86_64/ to CONFIGURE_TARGET. This is not
required to run configure but some ports need to use this in pkg-plist.
comms/qico, news/fidogate:
CONFIGURE_TARGET shouldn't contain "--build". Just remove it altogether
because the default value is fine.
devel/autoconf, devel/automake:
Bump PORTREVISION because they package config.* scripts.
lang/gauche, math/fricas, math/gap, math/nlopt, math/octave, net/pjsip:
Bump PORTREVISION because pkg-plist depends on CONFIGURE_TARGET.
benchmarks/pathchirp, databases/sqlrelay, devel/pcc-libs, lang/ocaml,
lang/pcc, math/adol-c, math/scilab, math/yices, multimedia/libtheora,
multimedia/libxine, security/beecrypt, sysutils/ltrace,
sysutils/pstacku, textproc/gnugrep:
Add, remove, or change patching related to x86_64 versus amd64.
audio/festalon:
Configuring with x86_64 instead of amd64 enables some MMX code that
isn't entirely correct. Patch it based on the i386 code. While here,
enable building the i386 package.
lang/pfe:
Configuring with x86_64 instead of amd64 enables the use of global
register variables but these are a GCC extension that Clang does not
support. Add --without-regs to disable them. This also fixes the i386
build.
editors/openoffice-*:
The build system runs config.guess and the newer version returns i586
for i386. Let build scripts treat i[3456]86 like i386 as on Linux.
math/reduce-psl:
The build system uses the output of config.guess to create directories
but this script might return something like i586-unknown-freebsd14.5
while the ports tree uses i386-portbld-freebsd14.5. Instead of running
config.guess plug in the value of CONFIGURE_TARGET. The proper fix
would be to let the configure script generate the build scripts so they
can use $host from the configure script but that's more work.
PR: 299273
Exp-run by: antoine
Tools/scripts/rmport: change method to look for PRs
Use the Bugzilla REST interface to look for PRs files against the
port(s) to be deleted as that one still allows anonymous access.
devel/py-envs 1.4
Easy access of environment variables from Python
devel/py-envs: Update to 1.4 and fix envs command
1.3 imports raw_input from click._compat, which click 8 removed, so
envs.util and the envs CLI failed to import. 1.4 uses input().
- Build with pep517: the setup.py that poetry generated for 1.4 is
rejected by setuptools 63 ("'extras_require' must be a dictionary")
- Add a CLI option (off by default) for the envs command: envs.cli
imports click, jinja2 and terminaltables (upstream's "cli" extra),
and the port had no RUN_DEPENDS at all, so the command failed with
ModuleNotFoundError. By default the port installs only the envs
module, which needs nothing beyond Python, and no longer installs
the broken command; with CLI on, it installs the command and depends
on the three modules.
While here, follow the Python Ports Policy.
PR: 299869
Approved by: Ivan Rozhuk <rozhuk.im@gmail.com> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 8f0a3b9ffdd97e32ab359924a2f68cb7698de93a)
devel/py-envs 1.4
Easy access of environment variables from Python
devel/py-envs: Update to 1.4 and fix envs command
1.3 imports raw_input from click._compat, which click 8 removed, so
envs.util and the envs CLI failed to import. 1.4 uses input().
- Build with pep517: the setup.py that poetry generated for 1.4 is
rejected by setuptools 63 ("'extras_require' must be a dictionary")
- Add a CLI option (off by default) for the envs command: envs.cli
imports click, jinja2 and terminaltables (upstream's "cli" extra),
and the port had no RUN_DEPENDS at all, so the command failed with
ModuleNotFoundError. By default the port installs only the envs
module, which needs nothing beyond Python, and no longer installs
the broken command; with CLI on, it installs the command and depends
on the three modules.
While here, follow the Python Ports Policy.
PR: 299869
Approved by: Ivan Rozhuk <rozhuk.im@gmail.com> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
