textproc/sphinxsearch: Unbreak by removing the dead set_utf8() call
The RE2 option failed to build against current devel/re2 (2025-11-05):
RE2 removed the legacy Options::set_utf8() member in its 2020-05-01
release, a deliberate API break with a SONAME bump to 7:
https://github.com/google/re2/commit/ac65d4531798ffc9bf807d1f7c09efb0eec70480
UTF-8 is the default Options encoding in current re2, so dropping the
call changes nothing at runtime:
https://raw.githubusercontent.com/google/re2/2025-11-05/re2/re2.h
Patch out the legacy call and remove RE2_BROKEN so the option builds
again.
Approved by: arrowd (co-mentor)
Approved by: makc (mentor)
(cherry picked from commit a62e8c3610345cac9965ee2eff4c44e4f355247f)
graphics/oyranos: Fix FLTK option build against current GL headers
The image_display example no longer compiles against libglvnd's
KHR-style GL headers, which only declare the entry points beyond legacy
GL 1.x when GL_GLEXT_PROTOTYPES is defined before they are included.
Define it in GLee.h's header-setup block right before <GL/gl.h> and
remove FLTK_BROKEN.
Approved by: arrowd (co-mentor)
Approved by: makc (mentor)
(cherry picked from commit 9057f0cca7a58b56e978330799fea500a5076f8a)
math/sfft 0.1.0_16
Optimized Sparse Fast Fourier Transform
math/sfft: Unbreak by forwarding STRIP into generated Makefile
The install failed with "install: -o: No such file or directory" because
the base system bsd.lib.mk install recipe uses ${STRIP} as an install(1)
`-s` flag, but sfft has its ${STRIP} pointing to GNU binutils'
/usr/local/bin/strip path in the build environment.
Write our ${STRIP} into the generated Makefile so the sub-make uses the
same value for this build instead of re-deriving defaults. Remove the
BROKEN marker and bump PORTREVISION.
Approved by: arrowd (co-mentor)
Approved by: makc (mentor)
(cherry picked from commit f3908f2ff723cdc9065f51ece201f9f13dd2ad82)
ftp/pavuk 0.9.35_8
HTTP, FTP, and Gopher mirroring tool
ftp/pavuk: Unbreak build by linking to X11 explicitly with lld
The port was marked BROKEN because the final link fails under ld.lld
with undefined symbol XCloseDisplay from gui_api.o. Pavuk calls Xlib
functions directly while its gtk+-2.0 libraries come from pkg-config
which does not list -lX11.
Add xorg to USES with USE_XORG=x11 for the libX11 dependency and add
-lX11 to LDFLAGS. Bump PORTREVISION and drop BROKEN.
Remove unneeded GNU_CONFIGURE_MANPREFIX on the side.
Approved by: arrowd (co-mentor)
Approved by: makc (mentor)
(cherry picked from commit 00a7108fbf680ab6e8f778baea72365180783716)
graphics/dynamechs: Unbreak build on modern clang/libc++
The f2c typedef named `complex` in dm/svd_linpack.cpp becomes ambiguous
with std::complex once a using-directive for std is active. Rename it to
ccomplex and drop BROKEN.
In addition:
- Add missing LICENSE and LICENSE_FILE knobs.
- Resolve poudriere-testport warnings for missing explicit dependencies.
- Apply Makefile formatting.
Approved by: arrowd (co-mentor)
Approved by: makc (mentor)
(cherry picked from commit f4f4847ec2e32fa5c6c91fde37def91074250dc1)
filesystems/pod: Unbreak build by linking glib directly
Since the .pc file in libgpod moved glib to Requires.private, pkg-config
no longer adds -lglib-2.0 and the build fails on undefined GLib symbols
from the gpod headers. Link glib explicitly in configure, add glib20
dependency, and drop BROKEN.
Also apply Makefile formatting and remove unneeded
GNU_CONFIGURE_MANPREFIX on the side.
Approved by: arrowd (co-mentor)
Approved by: makc (mentor)
(cherry picked from commit ee91368316095b6b6984e32bc1c5d0475b177afc)
textproc/sphinxsearch: Unbreak by removing the dead set_utf8() call
The RE2 option failed to build against current devel/re2 (2025-11-05):
RE2 removed the legacy Options::set_utf8() member in its 2020-05-01
release, a deliberate API break with a SONAME bump to 7:
https://github.com/google/re2/commit/ac65d4531798ffc9bf807d1f7c09efb0eec70480
UTF-8 is the default Options encoding in current re2, so dropping the
call changes nothing at runtime:
https://raw.githubusercontent.com/google/re2/2025-11-05/re2/re2.h
Patch out the legacy call and remove RE2_BROKEN so the option builds
again.
Approved by: arrowd (co-mentor)
Approved by: makc (mentor)
graphics/oyranos: Fix FLTK option build against current GL headers
The image_display example no longer compiles against libglvnd's
KHR-style GL headers, which only declare the entry points beyond legacy
GL 1.x when GL_GLEXT_PROTOTYPES is defined before they are included.
Define it in GLee.h's header-setup block right before <GL/gl.h> and
remove FLTK_BROKEN.
Approved by: arrowd (co-mentor)
Approved by: makc (mentor)
math/sfft 0.1.0_16
Optimized Sparse Fast Fourier Transform
math/sfft: Unbreak by forwarding STRIP into generated Makefile
The install failed with "install: -o: No such file or directory" because
the base system bsd.lib.mk install recipe uses ${STRIP} as an install(1)
`-s` flag, but sfft has its ${STRIP} pointing to GNU binutils'
/usr/local/bin/strip path in the build environment.
Write our ${STRIP} into the generated Makefile so the sub-make uses the
same value for this build instead of re-deriving defaults. Remove the
BROKEN marker and bump PORTREVISION.
Approved by: arrowd (co-mentor)
Approved by: makc (mentor)
ftp/pavuk 0.9.35_8
HTTP, FTP, and Gopher mirroring tool
ftp/pavuk: Unbreak build by linking to X11 explicitly with lld
The port was marked BROKEN because the final link fails under ld.lld
with undefined symbol XCloseDisplay from gui_api.o. Pavuk calls Xlib
functions directly while its gtk+-2.0 libraries come from pkg-config
which does not list -lX11.
Add xorg to USES with USE_XORG=x11 for the libX11 dependency and add
-lX11 to LDFLAGS. Bump PORTREVISION and drop BROKEN.
Remove unneeded GNU_CONFIGURE_MANPREFIX on the side.
Approved by: arrowd (co-mentor)
Approved by: makc (mentor)
graphics/dynamechs: Unbreak build on modern clang/libc++
The f2c typedef named `complex` in dm/svd_linpack.cpp becomes ambiguous
with std::complex once a using-directive for std is active. Rename it to
ccomplex and drop BROKEN.
In addition:
- Add missing LICENSE and LICENSE_FILE knobs.
- Resolve poudriere-testport warnings for missing explicit dependencies.
- Apply Makefile formatting.
Approved by: arrowd (co-mentor)
Approved by: makc (mentor)
filesystems/pod: Unbreak build by linking glib directly
Since the .pc file in libgpod moved glib to Requires.private, pkg-config
no longer adds -lglib-2.0 and the build fails on undefined GLib symbols
from the gpod headers. Link glib explicitly in configure, add glib20
dependency, and drop BROKEN.
Also apply Makefile formatting and remove unneeded
GNU_CONFIGURE_MANPREFIX on the side.
Approved by: arrowd (co-mentor)
Approved by: makc (mentor)
graphics/openshadinglanguage: Update to 1.15.7.0
The Imageworks BSDF library is now part of OSL as a header-only library.
LLVM 14 is the new minimum, up to LLVM 23 is supported. The OSLQuery
Python bindings no longer pull in the OpenImageIO Python types, so they
work next to an OpenImageIO built with nanobind.
Changelog:
https://github.com/AcademySoftwareFoundation/OpenShadingLanguage/releases/tag/v1.15.7.0
PR: 299659
Sponsored by: Netzkommune GmbH
graphics/openimageio: Update to 3.2.1.1
Writing Ultra HDR images in JPEG, perceptual image comparison through
flip_diff and oiiotool --flipdiff, standardized Color Interop Forum
names and CICP codes in the files that allow them, and better thumbnail
support. The readers were hardened against corrupted image files in
dozens of places. The Python bindings now use nanobind.
Changelog:
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v3.2.1.1
PR: 299658
Sponsored by: Netzkommune GmbH
graphics/opencolorio: Update to 2.6.0
This is the base version for the CY2027 VFX Reference Platform. It adds
read and write support for SMPTE ST2136-1 CLF, aliases for displays and
views, new built-in ACES configs and the ociomergeconfigs tool. The
alpha channel now defaults to 1 instead of 0.
Changelog:
https://github.com/AcademySoftwareFoundation/OpenColorIO/releases/tag/v2.6.0
PR: 299657
Sponsored by: Netzkommune GmbH
dns/hesiod 3.2.1_6
Directory service built on DNS and BIND
dns/hesiod: Mark DEPRECATED
This version has multiple vulnerabilities (CVE-2016-10151, CVE-2016-10152)
PR: 300135
Approved by: Chris Hutchinson <portmaster@BSDforge.com> (former maintainer)
Approved by: osa, fluffy (mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 9367f6ba7be9aa5f85602512b47ada8277802ae7)
dns/hesiod 3.2.1_6
Directory service built on DNS and BIND
dns/hesiod: Mark DEPRECATED
This version has multiple vulnerabilities (CVE-2016-10151, CVE-2016-10152)
PR: 300135
Approved by: Chris Hutchinson <portmaster@BSDforge.com> (former maintainer)
Approved by: osa, fluffy (mentors, implicit)
MFH: 2026Q4
graphics/aseprite 1.3.18.6
Animated sprite editor and pixel art tool
graphics/aseprite: update 1.3.18.5 → 1.3.18.6
ChangeLog: https://github.com/aseprite/aseprite/releases/tag/v1.3.18.6
Improvements from bug#298426 ware integrated.
PR: 298426 (fix dependencies and improve port - was integrated)
Submitted by: Daniel Engberg <diizzy@FreeBSD.org> (bug#298426)
devel/java-subversion: fix JAR install path, typo, NLS init duplication,
RUN_DEPENDS
Install svn-javahl.jar under JAVAJARDIR (the ports tree's own
convention for JARs) instead of a non-standard lib/svn-javahl/
subdirectory. Fix a --without-siwg-python typo in CONFIGURE_ARGS.
Switch USES=java to java:build: this port installs a native library
and a JAR, it doesn't invoke java itself, so it has no business
pulling a JDK into RUN_DEPENDS -- the caller that actually loads the
library and the JAR decides which JVM to run, not this port.
Add files/patch-native_JNIUtil.cpp: JNIGlobalInit()'s non-Windows NLS
setup hand-rolled a bindtextdomain() call that duplicates
svn_nls_init() (the same helper every svn_cmdline_init()-based CLI
tool uses); call the real function instead, which also picks up
bind_textdomain_codeset() that the duplicated code was missing.
Bump PORTREVISION_LATEST/PORTREVISION_LTS and add an UPDATING entry
for the JAR path change.
graphics/blender4 4.5.14
3D modeling/rendering/animation package -v4.x
graphics/blender4: Update to 4.5.14
Bugfix releases of the 4.5 LTS series. They fix crashes in the Video
Sequencer and in Armature Edit mode and the Extensions tab not loading
because of an SSL problem.
Changelog: https://www.blender.org/download/lts/4-5/
PR: 298728
Sponsored by: Netzkommune GmbH
(cherry picked from commit 76eb4a792b709d94cf39c9fb033d877cd154b21d)
graphics/blender4 4.5.5_7
3D modeling/rendering/animation package -v4.x
graphics/blender4: Unbreak with non-3.11 Python and FFmpeg 9
Blender's CMake defaults to Python 3.11 and fails when that exact
version is missing. Pass the version of the default Python instead,
look up the NumPy 2 headers under numpy/_core/include and backport
FFmpeg 9 support for audaspace from upstream (e3c92c22817d).
PR: 299533
Approved by: Shane <FreeBSD@ShaneWare.Biz> (maintainer)
Sponsored by: Netzkommune GmbH
(cherry picked from commit 0146d7f56262e9f8c7483230b79bee6a3fa9a466)
graphics/blender 5.2.2,1
3D modeling/rendering/animation package
graphics/blender: Update to 5.2.2
Blender 5.2 is the new LTS release, supported until July 2028. It adds
experimental Geometry Nodes based cloth and hair dynamics and a texture
cache in Cycles that lowers memory use on scenes with many image
textures. Since 5.1 Blender no longer loads the Python user site
directory by default.
Blender 5.2 requires Python 3.13. Until that is the default version,
build it with DEFAULT_VERSIONS+=python=3.13.
Changelog: https://developer.blender.org/docs/release_notes/5.2/
PR: 294160
Sponsored by: Netzkommune GmbH
graphics/blender4 4.5.14
3D modeling/rendering/animation package -v4.x
graphics/blender4: Update to 4.5.14
Bugfix releases of the 4.5 LTS series. They fix crashes in the Video
Sequencer and in Armature Edit mode and the Extensions tab not loading
because of an SSL problem.
Changelog: https://www.blender.org/download/lts/4-5/
PR: 298728
Sponsored by: Netzkommune GmbH
graphics/blender4 4.5.5_7
3D modeling/rendering/animation package -v4.x
graphics/blender4: Unbreak with non-3.11 Python and FFmpeg 9
Blender's CMake defaults to Python 3.11 and fails when that exact
version is missing. Pass the version of the default Python instead,
look up the NumPy 2 headers under numpy/_core/include and backport
FFmpeg 9 support for audaspace from upstream (e3c92c22817d).
PR: 299533
Approved by: Shane <FreeBSD@ShaneWare.Biz> (maintainer)
Sponsored by: Netzkommune GmbH
www/mod_subversion 1.14.5_2
Apache HTTP Server modules for Apache Subversion
devel/*-subversion, www/mod_subversion: strip .so and drop .a from stage
libtool's install does not strip shared objects, and none of these
glue/binding libraries ship a static .a anyone would plausibly link
against. Strip the installed .so files in post-install and remove the
.a from the staging tree.
Bump PORTREVISION_LATEST/PORTREVISION_LTS for each touched port.
databases/sqlite3: security update to 3.54.1
Fixes ten vulnerabilities published on 2026-10-30, among them heap
buffer overflows in FTS5, in the session extension and in the R-Tree
module. All of them need an attacker supplied database file or SQL
text.
Changes: https://sqlite.org/changes.html
Security: 84cd82e1-d49f-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
(cherry picked from commit 57d3d55a29d9c7d43c87ff0d763942cbb10369a4)
databases/sqlite3: security update to 3.54.1
Fixes ten vulnerabilities published on 2026-10-30, among them heap
buffer overflows in FTS5, in the session extension and in the R-Tree
module. All of them need an attacker supplied database file or SQL
text.
Changes: https://sqlite.org/changes.html
Security: 84cd82e1-d49f-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
x11/zutty 0.18
High-end terminal for low-end systems
x11/zutty: Update 0.17 => 0.18
Changes:
- Apply origin mode to VPA (Line Position Absolute)
- Time out selection transfers whose peer does not respond
- Do not exit on selection events carrying an invalid atom
- Fix font search ignoring directory boundaries
- Do not count scrolling within margins as history
- Clamp cursor position to the scrolling region in origin mode
- Fix crash on OSC 52 selection query falling back to another target
- Prevent pasted content from terminating bracketed paste
- Accept CSI ? and CSI > sequences split across reads
- Preserve RGB foreground across separate SGR bold settings
- Fix crossed-out attribute lost on partial screen updates
PR: 300308
Approved by: osa, vvd (Mentors, implicit)
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
security/vuxml: Document sqlite3 vulnerabilities fixed in 3.54.0
Ten issues were published on 2026-10-30, with VulnCheck as the
assigning CNA. Four of them corrupt the heap, in FTS5, in the session
extension and in the R-Tree module, and all of them need an attacker
supplied database file or SQL text.
Sponsored by: Netzkommune GmbH
