lang/php82 8.2.35_1
PHP Scripting Language (8.2.X branch)
lang/php83 8.3.36_1
PHP Scripting Language (8.3.X branch)
lang/php84 8.4.27_1
PHP Scripting Language (8.4.X branch)
lang/php85 8.5.12_1
PHP Scripting Language (8.5.X branch)
lang/php8*: Force fresh FreeBSD.org package builds.
No functional changes to the ports.
The packages were built manually today from a temporary branch to
incorporate the RCE fixes without triggering unnecessary rebuilds.
These fixes were cherry-picked onto the previous package build rather
than built from a published branch. The cherry-picks also omitted the
lmdb change in 85ba298b7e0.
Bump the ports to trigger fresh builds from the published tree,
ensuring reproducibility and accurate package metadata.
MFH: 2026Q4
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Build the auth_ldap module from its own source port, and add the
cert_expiry, ip_anon, stream limit_req and syslog5424 modules.
Sponsored by: Netzkommune GmbH
www/nginx-module-syslog5424: Add New Port
The syslog5424 module sends an access line in the format RFC 5424 asks for:
version, RFC 3339 timestamp, hostname, app name, process id, message id and
structured data.
Sponsored by: Netzkommune GmbH
www/nginx-module-stream-limit-req: Add New Port
The stream limit_req module rate limits incoming connections in the stream
subsystem. limit_req_zone and limit_req are spelled and counted as in the
http module, so a rate written down once reads the same for TCP, UDP and
HTTP.
Sponsored by: Netzkommune GmbH
www/nginx-module-ip-anon: Add New Port
The ip_anon module masks the host part of the client address.
$remote_addr_anon and $binary_remote_addr_anon carry the result, for a log
or a limit key that is not meant to name anybody.
Sponsored by: Netzkommune GmbH
www/nginx-module-cert-expiry: Add New Port
The cert_expiry module reads every file an ssl_certificate names, when the
configuration is read and again on a timer, and reports how long the
certificate still has. $ssl_expiry_days carries the days left into a log
format.
Sponsored by: Netzkommune GmbH
www/nginx-module-auth-ldap: Add New Port
The auth_ldap module authenticates HTTP basic credentials against an LDAP
directory. An ldap_server block describes one directory, require rules say
who is let in, and every worker keeps a pool of connections to it.
Sponsored by: Netzkommune GmbH
databases/cego: 2.54.43 -> 2.54.44, databases/p5-DBD-cego: 1.5.9 -> 1.5.10
cego:
- Improved error handling made for invalid procedure out parameter
calls, e.g. call myProc(null, null), where myProc has been defined
with out parameters. Instead of confusing error message "Unknown
variable null", the corresponding out parameter is mentioned in the
error messsage. e.g. "No out variable given for parameter <outval>"
p5-DBD-cego:
- Patch added to treat invalid procedure out parameter arguments.
If a scalar is given as an out parameter, an error is returned (
e.g. ? = myProc(?,?) with no binding on parameter 1 )
audio/pulseaudio: Improve OSS support
- Set vol or pcm for oss module, but not both. Setting both channels results
in drastic volume change.
- Set / read monitor channel.
Reviewed by: arrowd, christos
Differential Revision: D60197
x11-fonts/fnt: Update 1.9.1 => 1.9.2
This update includes a fix for when the requested font is not found.
Commit log:
https://github.com/alexmyczko/fnt/compare/1.9.1...1.9.2
While here:
- Add ftp/curl to RUN_DEPENDS, it won't start without it,
even though upstream also checks for "fetch" or "wget".
- Replace do-install-ZSH-on with post-install.
Reported by: portscout
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 7efcb57130175ba02462c51d8915b2832b71ca86)
x11-fonts/fnt: Update 1.9.1 => 1.9.2
This update includes a fix for when the requested font is not found.
Commit log:
https://github.com/alexmyczko/fnt/compare/1.9.1...1.9.2
While here:
- Add ftp/curl to RUN_DEPENDS, it won't start without it,
even though upstream also checks for "fetch" or "wget".
- Replace do-install-ZSH-on with post-install.
Reported by: portscout
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
security/vuxml: Fix PHP entry d8e16d08-cd2f-11f1-8135-8447094a420f
- php85: the fixed version is 8.5.12, not 8.5.13
- Quote the security advisory instead of the pre-announcement
- Add references to the advisory and both GHSAs
Reported by: Dan Langille <dan@langille.org>
Sponsored by: Netzkommune GmbH
misc/py-claude-agent-sdk: Drop version from claude-code dependency
The tree already has a newer misc/claude-code, so the minimum version
is pointless.
Sponsored by: Netzkommune GmbH
graphics/optipng: Fix does not set execute bit on binary
Upstream uses "install(FILES ..." instead of "install(PROGRAMS ..."
for install executable binary.
PR: 299678299132
Approved by: blanket (fix runtime)
Sponsored by: UNIS Labs
x11/cosmic-bg: New port: COSMIC service to apply wallpapers to displays
`cosmic-bg` is a layer shell protocol implementation to
handle wallpapers for the COSMIC desktop environment. It supports
common image formats, using gradients or solid colors, per-display
backgrounds, and slideshows.
WWW: https://github.com/pop-os/cosmic-bg
PR: 299662
Reported by: Josh Megnauth <jo.sh@tutanota.com> (new maintainer)
security/zeek 9.0.0
System for detecting network intruders in real-time
security/zeek: fix build on powerpc64
The 9.0.0 update dropped the powerpc64 patches from 144863452393. Bring back
the ones still needed: the VSX hash kernel stays off on big-endian (it
computes wrong hashes there) and the bundled fiber library enables its
ppc64 ELFv2 assembly on big-endian too (upstream simonfxr/fiber
dc084920bc81). The hilti stack-direction change is upstream now.
lang/fpc-wasip1-devel: fix build on powerpc64le
fpc only marks a FreeBSD/powerpc64 host as little endian when building
the native compiler. The wasm32 cross compiler misses that, thinks it's
cross-endian and wants llvm-mc. Test the CPU define instead, like the
Linux target does.
net-p2p/pulsar-client-cpp: enable on powerpc64*
-mcrc32 and -mpclmul are x86-only flags; upstream has a software CRC32C
fallback for other architectures.
sysutils/reptyr 0.10.0
Reparent a running program to a new terminal
sysutils/reptyr: enable on powerpc64*
Add the powerpc64 ptrace backend: syscall number in r0, arguments in
r3-r8, PC rewound by one instruction after the stub. Merged upstream
as 59aa0dcb9911.
x11/owe-lockfeed: New port: Lock screen video feed QML module for the owe
wallpaper engine
Owe.LockFeed is a QML module that shows the live video frame of the owe
wallpaper engine on a Qt Quick lock screen. It connects to the
owe-render feed socket and maps the shared-memory frames it receives
into a scene graph texture, so the lock screen shows the same moving
wallpaper as the desktop without decoding the video a second time.
WWW: https://github.com/omacom/owe
Reported by: jkh (new maintainer)
Pull Request: https://github.com/freebsd/freebsd-ports/pull/630
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
x11/owe: New port: High-performance wallpaper engine for Omarchy (video, GIF,
stills)
owe is the wallpaper engine of the Omarchy desktop. A small daemon
(owed) follows the Omarchy background symlink and Hyprland state, and
drives a renderer (owe-render) that draws MP4 or GIF video through
libmpv, or still images, on wlr-layer-shell background surfaces. It
pauses playback for fullscreen windows, blocklisted processes, battery
power and idle, and exports a frame feed for the lock screen.
WWW: https://github.com/omacom/owe
Reported by: jkh (new maintainer)
Pull Request: https://github.com/freebsd/freebsd-ports/pull/630
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
graphics/tensaku: New port: Screenshot annotation tool for Wayland
Tensaku is a screenshot annotation tool for Wayland compositors. It
opens a captured image in a GTK4 layer-shell editor with arrows, boxes,
text, highlights, blur, and numbered markers, and copies or saves the
result. Omarchy uses it as the editor behind its screenshot shortcuts.
WWW: https://github.com/jondkinney/tensaku
Reported by: jkh (new maintainer)
Pull Request: https://github.com/freebsd/freebsd-ports/pull/630
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
graphics/omasnap: New port: Native Wayland screenshot and annotation overlay for
Hyprland
Omasnap is a native Wayland screenshot and annotation overlay built for
Hyprland and the Omarchy desktop. It captures the screen through the
ext-image-copy-capture protocol, then lets you crop, draw, highlight,
blur, add text, OCR a region with Tesseract, pin snapshots on screen and
copy or save the result.
WWW: https://github.com/omacom/omasnap
Reported by: jkh (new maintainer)
Pull Request: https://github.com/freebsd/freebsd-ports/pull/630
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
editors/omarchy-nvim: New port: LazyVim based Neovim configuration from Omarchy
omarchy-nvim is the Neovim configuration shipped with Omarchy: the
LazyVim starter configuration plus Omarchy customizations (live theme
reloading, transparency, a remote-session clipboard provider and a few
defaults).
WWW: https://github.com/omacom/omarchy-pkgs
Reported by: jkh (new maintainer)
Pull Request: https://github.com/freebsd/freebsd-ports/pull/630
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
editors/omawrite: New port: Dead-simple Markdown writing app built with Qt Quick
Omawrite is a dead-simple, distraction-free Markdown writing app built
with Qt Quick. It offers live Markdown syntax highlighting, follows the
system light/dark theme via the XDG desktop portal, and ships its own
embedded iA Writer Mono font. It is part of the Omarchy desktop.
WWW: https://github.com/omacom-io/omawrite
Reported by: jkh (new maintainer)
Pull Request: https://github.com/freebsd/freebsd-ports/pull/630
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
multimedia/omacut: New port: Dead-simple video length trimmer built with Qt
Quick and FFmpeg
Omacut is a dead-simple video length trimmer built with Qt Quick. Open a
video, drag the in and out points on the thumbnail strip, and export the
trimmed clip. Probing, thumbnails and the actual cut are done by the
ffmpeg and ffprobe command-line tools. It is part of the Omarchy
desktop.
WWW: https://github.com/omacom-io/omacut
Reported by: jkh (new maintainer)
Pull Request: https://github.com/freebsd/freebsd-ports/pull/630
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
math/omacalc: New port: Dead-simple calculator built with Qt Quick
Omacalc is a dead-simple desktop calculator built with Qt Quick. It is
part of the Omarchy desktop and follows the system light/dark theme via
the XDG desktop portal. It ships its own embedded iA Writer Mono font.
WWW: https://github.com/omacom-io/omacalc
Reported by: jkh (new maintainer)
Pull Request: https://github.com/freebsd/freebsd-ports/pull/630
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
x11/hyprland-preview-share-picker: New port: Hyprland screen share picker with
window and monitor previews
hyprland-preview-share-picker is an alternative screen share picker for
xdg-desktop-portal-hyprland. It shows live previews of windows and
monitors in a GTK4 layer-shell dialog, supports region selection through
an external tool such as slurp, and is styled with SCSS and configured
through a YAML file described by an installed JSON schema.
WWW: https://github.com/WhySoBad/hyprland-preview-share-picker
Reported by: jkh (new maintainer)
Pull Request: https://github.com/freebsd/freebsd-ports/pull/630
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
