net/rsync: fix denial of service in the delta-transfer sender
Take the upstream fix, there is no release containing it yet.
Obtained
from: https://github.com/RsyncProject/rsync/commit/a7404a9a633cff28ee1602f328b9c3fa69cdbd04
Security: c70f21b6-d7b4-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
(cherry picked from commit 4db1fd2c615a835c1679328f40b9765c8dd8385f)
sysutils/ytop 1.1.0
Minimal process monitor for FreeBSD
sysutils/ytop: update to 1.1.0
Remove the ncurses dependency in favor of a built-in VT terminal module.
Separate the thread list into a dedicated view with per-thread metrics.
Add a CPU usage grid to the thread view.
PR: 300469
security/netbird 0.82.0
Peer-to-peer VPN that seamlessly connects your devices
security/netbird: Update 0.81.5 => 0.82.0
This release removes MySQL store and deprecates Rosenpass,
please see pkg-message or the changelog for more details.
Changelog:
https://github.com/netbirdio/netbird/releases/tag/v0.82.0
PR: 300474
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
(cherry picked from commit f0cd3120b45056ae22c134e3df1bb9ab98c34b77)
security/netbird 0.82.0
Peer-to-peer VPN that seamlessly connects your devices
security/netbird: Update 0.81.5 => 0.82.0
This release removes MySQL store and deprecates Rosenpass,
please see pkg-message or the changelog for more details.
Changelog:
https://github.com/netbirdio/netbird/releases/tag/v0.82.0
PR: 300474
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Chase the vod module update, which these ports build in themselves.
Sponsored by: Netzkommune GmbH
www/freenginx: Remove stale subs_filter plist entry
The option went away with the module, the packing list kept its line.
Fixes: 445f9e590a9e ("www/{nginx,nginx-devel,freenginx}: 3rd-party modules
management")
Sponsored by: Netzkommune GmbH
net-mgmt/semaphore: Update to 2.19.18
Adds SEMAPHORE_SESSION_INACTIVITY_HOURS, which expires a login session
that stayed unused for that many hours.
Changelog:
https://github.com/semaphoreui/semaphore/releases/tag/v2.19.18
Sponsored by: Netzkommune GmbH
deskutils/vit: Update to 2.3.5
Keeps the command input when quote validation fails, defers the terminal
setup until after the screen is cleared and takes calc_width from the
public urwid API. Packaging now covers Python 3.11 through 3.15.
Changelog:
https://github.com/vit-project/vit/releases/tag/v2.3.5
Sponsored by: Netzkommune GmbH
audio/atunes 3.2.0_1
Full-featured audio player and manager developed in Java
audio/atunes: deprecate for expiration
does not work with jdk11+
last upstream version is from 2014
To keep this in the ports tree, I think it needs a fork with an update to a
recent JDK.
Approved by: no maintainer
devel/charva 1.1.4_10
Java Windowing Toolkit for Text Terminals
devel/charva: deprecate for expiration
does not build with jdk11+
latest upstream is from 2006
no users in the ports tree
PR: 300472
Approved by: Alex Dupre <ale@> (maintainer)
graphics/aoi 3.0_8
Open source Java written 3D modelling and rendering studio
graphics/aoi: deprecate for expiration
Version from 2013, 13 years behind on upstream
no users in the tree
not actively maintained
please email the maintainer if you use this
Approved by: no maintainer
editors/openoffice-devel: build using openjdk21
Build openoffice-devel with build using openjdk21.
PR: 300455
Reported by: Ronald Klop <ronald@FreeBSD.org>
www/py-recaptcha 1.0.6_2
Plugin for reCAPTCHA and reCAPTCHA Mailhide
www/py-recaptcha: Deprecate
Python 2 code for the reCAPTCHA v1 API, which was shut down.
While here, fix portlint warnings.
Set the EXPIRATION_DATE to the beginning of next month. Since the API
has been shut down, I don't expect anyone to care though.
PR: 299951
graphics/graphviz 16.1.0_2
Graph Visualization Software from AT&T and Bell Labs
graphics/graphviz: remove duplicate lang/tcl BUILD_DEPENDS
Especially after 441bc7f0904b21b777c7a8815a10476b5faaa71d, when
${TCLTK_DEFAULT} != 8.6, build-depends (or before, if poudriere)
complains of nonexistent lang/tcl91.
PR: 300092
devel/fifechan 0.1.5_2
Small, efficient C++ GUI library designed for games
devel/fifechan: the port had been improved (+)
- Stretch out CMAKE_MINIMUM_REQUIRED() version range
to accommodate for upcoming CMake 4.x and beyond
- Note that version 0.2.0 is available, however not
compatible with current `games/py-fife' port which
is already at its latest version (as of right now)
- Adjust the option knob order and some descriptions
games/py-fife: update the port to the latest version 0.4.3
This makes it ready for CMake 4.x, albeit still relying on the
old CMP0078 policy, and cleans up a bunch of "from __future__"
imports in the Python code.
Reported by: portscout
editors/openoffice-4: Use apache-commons-lang3
apache-commons-lang3 works fine in place of apache-commons-lang for
openoffice-4. Upstream switched the bundled version in 2014. Switch
to the newer port and remove DEPRECATED.
MFH: 2026Q4
(cherry picked from commit 6b30840112748709de509668785e795f5ac0686a)
editors/openoffice-4: Use apache-commons-lang3
apache-commons-lang3 works fine in place of apache-commons-lang for
openoffice-4. Upstream switched the bundled version in 2014. Switch
to the newer port and remove DEPRECATED.
MFH: 2026Q4
devel/github-act-runner: Add new port
github-act-runner is a self-hosted GitHub Actions runner implemented
in Go. It speaks the GitHub Actions runner protocol and executes
workflow steps directly on the host, including shell and JavaScript
actions.
Reviewed by: jrm
Differential Revision: https://reviews.freebsd.org/D61143
x11-themes/ventanas-10: New port: Openbox theme with a look similar to Windows
10
Ventanas-10 is a fork of the B00merang-Project's Windows-10 theme,
but with the following differences:
- The minimize, close, and maximize buttons change color when you
hover over them.
- Dark mode only.
- For Openbox only.
- The max_toggled.xbm image has been implemented to give it a look
similar to Windows 10.
WWW: https://github.com/dtxdf/Ventanas-10/
x11-fonts/selawik: New port: Selawik is an open source replacement for Segoe UI
Selawik is an open source replacement for Segoe UI, the default
system font used in Windows. It is metrically compatible with Segoe UI,
which means that switching between the two fonts will not alter the
layout of documents or interfaces.
WWW: https://github.com/microsoft/Selawik
x11-wm/devilspie2-devel: New port: Window manipulation tool
Devilspie2 is a window-matching utility, allowing the user to perform
scripted actions on windows as they are created. For example, you can
script a terminal program to always be positioned at a specific screen
position, or position a window on a specific workspace.
Devilspie2 is based on the program Devilspie by Ross Burton. The
difference is that Devilspie2 has replaced the symbolic expressions of
the original with a Lua interpreter, making it much easier to maintain
and extend.
Please note that the rules of Devilspie2 are not compatible with the
symbolic expressions of the original Devilspie.
WWW: https://www.nongnu.org/devilspie2/
games/loderunner-ng: Add ctrl-a-abort patch
When the runner is stuck and you need to reset, you can press Ctrl+A
to sacrifice a life and restart the level.
Ctrl+A is the traditional key binding on C64 for sacrificial restart
when you get stuck. Without this patch, your only recourse is to use
q to quit, losing your progress, going back to level 1.
While it is true that you can then relaunch the game with `-l level`
to pick up at the level you left off at, it will be with zero score.
editors/openoffice-*: system lucene cleanup
Delete the remaining remnants of the system lucene dependency.
Reported by: Ronald Klop <ronald-lists@klop.ws>
(cherry picked from commit 117941ee407dec8c0b40a926a3cad2de45fa3029)
audio/maolan-plugins: New port: CLAP plugins from the Maolan ecosystem
Maolan plugins are a collection of CLAP plugins which currently includes:
- drust: A DrumGizmo-inspired drum sampler plugin.
- rural-modeler: A guitar amp modeler based on NAM and IR.
- EQ: parametric and graphic
- maximizer: adaptive clipper/limiter with Vintage and Modern variants
- imager: stereo width processor with Mild, Wide, and Aggressive algorithms
- monitoring: monitoring toolbox with 17 modes
- saturator: waveshape saturation
WWW: https://maolan.rs
PR: 294885
Reported by: Goran Mekić <meka@sys.it.com> (new maintainer)
mail/py-alot: Update to 0.12
alot 0.9 imports the mailcap module, which was removed in Python 3.13.
0.12 supports Python 3.13 and 3.14 and depends on standard-mailcap
there.
- Switch to USE_PYTHON=pep517 with setuptools-scm
- Use mail/py-notmuch2 instead of the legacy mail/py-notmuch
- Add mail/py-standard-mailcap for Python >= 3.13
- Depend on urwid>=1.3.0 directly and on urwidtrees>=1.0.3, as 0.12
requires
- Add concurrent to USE_PYTHON (bin/alot is installed)
PR: 299759
Approved by: Dhananjay Balan <mail@dbalan.in> (maintainer)
