www/py-dj60-strawberry-graphql-django: Update to 0.91.0
* Note: There are already a few recent releases, but they require
py-dj60-strawberry-graphql version 0.328.0+, which in turn requires
py-graphql-core version 3.3.0 or later - which is not yet in the ports
tree.
Changelog since 0.88.0:
https://github.com/strawberry-graphql/strawberry-django/blob/0.91.0/CHANGELOG.md
www/py-strawberry-graphql-django: Update to 0.91.0
* Note: There are already a few recent releases, but they require
py-strawberry-graphql version 0.328.0+, which in turn requires
py-graphql-core version 3.3.0 or later - which is not yet in the
ports tree.
Changelog since 0.88.0:
https://github.com/strawberry-graphql/strawberry-django/blob/0.91.0/CHANGELOG.md
devel/py-dj61-strawberry-graphql: Fix with Python 3.13 and the deps
Apply the same changes as to py-dj60-strawberry-graphql in 1287f912f000.
* The asgi and fastapi extras need python-multipart (starlette's
request.form()), but the ASGI and FASTAPI options pulled in
devel/py-multipart, an unrelated package with the same import name.
Depend on www/py-python-multipart instead.
* Upstream's cli extra also requires python-multipart, starlette,
uvicorn and websockets: the "strawberry dev" command runs a Starlette
app with WebSocket routes under uvicorn. Add them to
CLI_RUN_DEPENDS.
* strawberry/ext/dataclasses/dataclasses.py is a vendored helper for
Python < 3.10 that nothing imports (strawberry requires 3.10+ and
uses dataclass(kw_only=True)). On Python 3.13 it cannot be
imported, because dataclasses._create_fn was removed. Remove it.
* The CLI option is off by default, but bin/strawberry is installed
anyway and only raises MissingOptionalDependenciesError. Do not
install it (and drop it from the autoplist list) when CLI is off.
While here, fix portlint warnings and bump PORTREVISION due changed
dependencies.
devel/py-dj60-strawberry-graphql: Update to 0.327.7
* Note: There are already quite a few newer releases, but starting with
version 0.328.0, py-graphql-core 3.3.0+ is required, which is not yet
in the ports tree.
Changelog since 0.327.3:
https://github.com/strawberry-graphql/strawberry/blob/0.327.7/CHANGELOG.md
devel/py-strawberry-graphql: Update to 0.327.7
* Note: There are already quite a few newer releases, but starting with
version 0.328.0, py-graphql-core 3.3.0+ is required, which is not yet
in the ports tree.
Changelog since 0.327.3:
https://github.com/strawberry-graphql/strawberry/blob/0.327.7/CHANGELOG.md
security/openpgp-card-ssh-agent: Update 0.3.7 => 0.3.8
- Pulls in openpgp-card-state 0.4.2, which adds the "Ephemeral" PIN
storage backend for non-Linux systems. On FreeBSD it caches the User
PIN in memory via git credential-cache, with a configurable expiry.
- Updated ssh-agent-lib and openpgp-card, moved to the 2024 edition.
Upstream has not tagged v0.3.8 yet, so FJ_TAGNAME points at the
"chore: release 0.3.8" commit, which matches the crates.io release.
Changes:
https://codeberg.org/openpgp-card/ssh-agent/compare/v0.3.7...e92466566a40
PR: 300665
security/openpgp-card-tools-git: Update 0.1.8 => 0.1.9
- Pulls in openpgp-card-state 0.4.2, which adds the "Ephemeral" PIN
storage backend for non-Linux systems. On FreeBSD it caches the User
PIN in memory via git credential-cache, with a configurable expiry.
- Upstream moved to the 2024 edition and bumped dependencies.
Changes:
https://codeberg.org/openpgp-card/oct-git/compare/v0.1.8...v0.1.9
PR: 300664
math/R-cran-corpcor: New port: Efficient estimation of covariance and partial
correlation
Implements a James-Stein-type shrinkage estimator for the covariance
matrix, with separate shrinkage for variances and correlations. The
approach is both computationally as well as statistically very efficient,
it is applicable to "small n, large p" data, and always returns a positive
definite and well-conditioned covariance matrix. In addition to inferring
the covariance matrix the package also provides shrinkage estimators for
partial correlations and partial variances. The inverse of the covariance
and correlation matrix can be efficiently computed, as well as any
arbitrary power of the shrinkage correlation matrix. Furthermore,
functions are available for fast singular value decomposition, for
computing the pseudoinverse, and for checking the rank and positive
definiteness of a matrix.
PR: 296812
Approved by: jrm (mentor)
Differential Revision: https://reviews.freebsd.org/D61259
math/R-cran-ranger: New port: Fast implementation of random forests
Fast implementation of Random Forests for classification, regression,
survival and probability prediction, suited for high dimensional data.
Approved by: jrm (mentor)
Differential Revision: https://reviews.freebsd.org/D61244
lang/go127: Update to 1.27.4
Changes:
go1.27.4 (released 2026-11-10) includes security fixes to cgo, the go
command, the compiler, the linker, and the net/http package, as well
as bug fixes to the assembler, the compiler, the runtime, toolchain
bootstrapping, and the crypto/fips140, crypto/hkdf, crypto/rsa,
crypto/tls, and net packages.
MFH: 2026Q4
(cherry picked from commit d385e2920918ef942585f9955d9e31f0a0c22f05)
lang/go126: Update to 1.26.11
Changes:
go1.26.11 (released 2026-11-10) includes security fixes to cgo, the go
command, the compiler, the linker, and the net/http package, as well
as bug fixes to the assembler, the compiler, the runtime, toolchain
bootstrapping, and the crypto/fips140, crypto/hkdf, crypto/rsa,
crypto/tls, net, and net/http packages.
MFH: 2026Q4
(cherry picked from commit c112de9e568feddaf7644108f547d3e1e52ce24b)
net-mgmt/netbox: Update to 4.7.5
* Remove no longer required workaround for DRF 3.18.3.
* Sort some dependencies and prune update instructions for NetBox
releases older than 3.7 while I'm here.
Netbox 4.7 contains many bugfixes/enhancements and the following new
features:
* Cooling Infrastructure Modeling
* Channelized Subinterfaces
* Multi-Protocol Application Services
* Module Bay Types
* Relocating Installed Modules
* Background Processing for REST API Requests
* Per-Object Errors for Bulk Operations
* Pre-Rendered Config Context Data
* Snapshot-Aware Event Rule Conditions
https://netbox.readthedocs.io/en/stable/release-notes/version-4.7/
MFH: No (contains breaking changes)
(Only the first 10 of 26 items in this commit are shown above. )
net-mgmt/netbox: Add Django 6.1 consumers
* Django 5.2 is currently the "default" version in the ports tree due
its long term support until April 2028. Thus ports that are assigned
to that version will exist until then.
The following ports are required to make the upgrade of
net-mgmt/netbox to the 4.7 release possible because it requires
Django 6.1.
All of the ports listed below were created on the basis of their
respective original ports:
- devel/py-dj61-django-rq
- devel/py-dj61-strawberry-graphql
- graphics/py-dj61-sorl-thumbnail
- www/py-dj61-channels
- www/py-dj61-django-auth-ldap
- www/py-dj61-django-choices-field
- www/py-dj61-django-cors-headers
- www/py-dj61-django-filter
- www/py-dj61-django-htmx
- www/py-dj61-django-js-asset
- www/py-dj61-django-mptt
- www/py-dj61-django-prometheus
- www/py-dj61-django-redis
- www/py-dj61-django-rich
- www/py-dj61-django-storages
- www/py-dj61-django-tables2
- www/py-dj61-django-taggit
- www/py-dj61-django-timezone-field
- www/py-dj61-drf-spectacular
- www/py-dj61-drf-spectacular-sidecar
- www/py-dj61-social-auth-app-django
- www/py-dj61-strawberry-graphql-django
security/py-social-auth-core5: New port
This is the core component of the python-social-auth ecosystem, it
implements the common interface to define new authentication backends
to third parties services, implement integrations with web frameworks
and storage solutions.
Note: This port is primarily intended for use with net-mgmt/netbox,
which currently does not support newer versions of py-social-auth-core.
security/py-social-auth-core: Update to 5.2.0
* Adjust testsuite accordingly so that the results are successful
depending on the configuration.
* Note: This is an interim update to create a py-social-auth-core5 port
based on this, which is limited to the 5.x release series and adjust
CONFLICTS_INSTALL for future variants of py-social-auth-core.
Changelog since 5.0.1:
https://github.com/python-social-auth/social-core/blob/5.2.0/CHANGELOG.md
Approved by: ultima (maintainer, implicit)
MFH: 2026Q4
lang/go127: Update to 1.27.4
Changes:
go1.27.4 (released 2026-11-10) includes security fixes to cgo, the go
command, the compiler, the linker, and the net/http package, as well
as bug fixes to the assembler, the compiler, the runtime, toolchain
bootstrapping, and the crypto/fips140, crypto/hkdf, crypto/rsa,
crypto/tls, and net packages.
MFH: 2026Q4
lang/go126: Update to 1.26.11
Changes:
go1.26.11 (released 2026-11-10) includes security fixes to cgo, the go
command, the compiler, the linker, and the net/http package, as well
as bug fixes to the assembler, the compiler, the runtime, toolchain
bootstrapping, and the crypto/fips140, crypto/hkdf, crypto/rsa,
crypto/tls, net, and net/http packages.
MFH: 2026Q4
www/linux-chrome 157.0.8103.50
Google web browser based on WebKit
www/linux-chrome: Security update to 157.0.8103.50
Fixes an out of bounds write in GPU that lets a crafted page run code
outside the sandbox, a buffer overflow in Compositing that does the
same once the renderer is compromised, and type confusion in V8 and
use after free in XML inside the sandbox.
Chrome now ships as an rpm 6 package whose payload libarchive cannot
read, so extract through rpm2archive.
Changelog: https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html
Security: a18ffa98-dd42-11f1-8816-a0369f7f7be0
Sponsored by: Netzkommune GmbH
(cherry picked from commit 6b96fd5c3ab4e2f310e9201a6e146e7ee7d98ad3)
www/linux-chrome 157.0.8103.50
Google web browser based on WebKit
www/linux-chrome: Security update to 157.0.8103.50
Fixes an out of bounds write in GPU that lets a crafted page run code
outside the sandbox, a buffer overflow in Compositing that does the
same once the renderer is compromised, and type confusion in V8 and
use after free in XML inside the sandbox.
Chrome now ships as an rpm 6 package whose payload libarchive cannot
read, so extract through rpm2archive.
Changelog: https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html
Security: a18ffa98-dd42-11f1-8816-a0369f7f7be0
Sponsored by: Netzkommune GmbH
net-im/tuwunel: Add New Port
Tuwunel is a Matrix homeserver written in Rust and the official successor
to conduwuit. It serves the client-server and federation APIs from a
single process and keeps its state in an embedded RocksDB database, so no
separate database server is required.
www: https://tuwunel.chat/
Sponsored by: Netzkommune GmbH
