devel/got 0.130.1_1
Game of Trees version control system
devel/got: Cherry-pick patches for shared locking
When operating on a worktree, got locks the tree in order to avoid
problems with concurrent operations. Until now, got always used
exclusive locks, which caused problems when e.g. two separate parts
of the FreeBSD release build ran 'got tree' at once.
This has been fixed upstream but the 15.2 release cycle needs the
changes urgently and can't wait for the next got-portable release,
so cherry-pick those patches.
Reviewed by: naddy
Sponsored by: Amazon
MFC after: 1 minute
Differential Revision: https://reviews.freebsd.org/D61327
misc/zoneinfo: Update to 2026f
Upstream changes:
* Cuba will not fall back to -05 on 2026-11-01 and instead plans to
maintain -04 through 2027-11-07.
* No more leap seconds, and leap second tables no longer expire
* Improve 1965/1966 data for Brazil: in 1965 Brazil ended DST on
03-31 at 24:00 not 00:00, and in 1966 it ended DST on 03-01 at
01:00 not 00:00.
Changelog: https://data.iana.org/time-zones/tzdb/NEWS
comms/py-pynitrokey 0.14.1
Command line interface for Nitrokey FIDO2, Nitr. Start, Nitr.3, NetHSM
comms/py-pynitrokey: Update 0.14.0 => 0.14.1
This is a maintenance release that updates the bundled root
certificates to remove the compromised emSign certificate.
Changelog:
https://github.com/Nitrokey/pynitrokey/releases/tag/v0.14.1
PR: 299842
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 607543776deb67ee96d134762e34e0e65bd61bc9)
comms/py-pynitrokey 0.14.1
Command line interface for Nitrokey FIDO2, Nitr. Start, Nitr.3, NetHSM
comms/py-pynitrokey: Update 0.14.0 => 0.14.1
This is a maintenance release that updates the bundled root
certificates to remove the compromised emSign certificate.
Changelog:
https://github.com/Nitrokey/pynitrokey/releases/tag/v0.14.1
PR: 299842
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
security/py-certifi: Update to 2026.10.23
The bundle drops "emSign ECC Root CA - G3", "emSign Root CA - C1" and
"emSign ECC Root CA - C3", following the eMudhra emSign CA compromise:
2026.10.18 removed the emSign roots, 2026.10.19 restored the ones that
are not affected, and 2026.10.23 removed two more. The package layout
and the build are unchanged.
Commit log:
https://github.com/certifi/python-certifi/compare/2026.07.22...2026.10.23
PR: 299779
Approved by: sunpoet (maintainer timeout, 13 days)
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 8f6ec8f61ee24a69eaac2b1131a0f411bde9a004)
security/py-certifi: Update to 2026.10.23
The bundle drops "emSign ECC Root CA - G3", "emSign Root CA - C1" and
"emSign ECC Root CA - C3", following the eMudhra emSign CA compromise:
2026.10.18 removed the emSign roots, 2026.10.19 restored the ones that
are not affected, and 2026.10.23 removed two more. The package layout
and the build are unchanged.
Commit log:
https://github.com/certifi/python-certifi/compare/2026.07.22...2026.10.23
PR: 299779
Approved by: sunpoet (maintainer timeout, 13 days)
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
sysutils/multitail: Update 7.1.5 => 7.1.6
This update fixes shell injection in '-ex' command execution
along with other changes. The fix causes a breaking change.
Breaking change explained here:
https://github.com/folkertvanheusden/multitail/commit/84f304e
Commit log:
https://github.com/folkertvanheusden/multitail/compare/7.1.5...7.1.6
While here, polish Makefile and switch to USE_GITHUB.
PR: 300176
Approved by: osa, vvd (mentors, implicit)
Security: CVE-2025-70544
MFH: 2026Q4
(cherry picked from commit 4cfe21b5f4f847f47c46fdb7f90152f76d25aff8)
net/yami4 2.0.0
Messaging library for distributed systems
net/yami4: Improve port
* Use HTTPS for MASTER_SITES.
* Always build the Core and C++ libraries, removing the option.
* Use PORTDOCS=* instead of listing a lot of documentation in pkg-plist.
PR: 300142
Approved by: osa, vvd (mentors, implicit)
x11/tabby: Add New Port
Tabby is a terminal emulator with integrated SSH, Telnet and serial
clients. It keeps tabs and split panes in persistent layouts, stores
connection profiles in an encrypted vault and can be extended through
plugins.
www: https://tabby.sh/
Sponsored by: Netzkommune GmbH
devel/py-python-box 8.0.0
Python dictionaries with advanced dot notation access
devel/py-python-box: Update 7.4.1 => 8.0.0
This release has a lot of fixes but breaking changes too.
Changelog: https://github.com/cdgriffith/Box/releases/tag/8.0.0
PR: 300586
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
(cherry picked from commit cb257faaec5c5d0720c1c1d466c09db096f0e675)
net-mgmt/semaphore: Restrict to aarch64 and amd64
The vendored modernc.org/sqlite carries FreeBSD bindings for i386 and arm
that predate the type names its own vtab.go uses, so the build fails there.
Sponsored by: Netzkommune GmbH
www/immich-cli: Restrict to amd64
The dependency store is fetched on an amd64 host and therefore carries
the x64 build of the TypeScript compiler only.
Sponsored by: Netzkommune GmbH
(cherry picked from commit 0f8f7b059130d91b33edcb7d3d7418247283b0a0)
www/immich 3.2.2_6
High performance self-hosted photo and video management solution
www/immich: Restrict to amd64
The build pulls rolldown, which has no FreeBSD/arm64 binding, and the
WebAssembly fallback is not part of the dependency store either.
Sponsored by: Netzkommune GmbH
(cherry picked from commit cbc10a9db63cefd0f9aa4dff1877a6bf0aa9a35c)
www/immich-cli: Restrict to amd64
The dependency store is fetched on an amd64 host and therefore carries
the x64 build of the TypeScript compiler only.
Sponsored by: Netzkommune GmbH
www/immich 3.3.6
High performance self-hosted photo and video management solution
www/immich: Restrict to amd64
The build pulls rolldown, which has no FreeBSD/arm64 binding, and the
WebAssembly fallback is not part of the dependency store either.
Sponsored by: Netzkommune GmbH
www/immich-cli: Unbreak the build with BUILD_AS_NON_ROOT
npm then has no writable HOME and cannot create its cache. Restrict the
port to 64-bit, the TypeScript compiler has no FreeBSD/i386 binary.
PR: 299082
Reported by: otis
Sponsored by: Netzkommune GmbH
(cherry picked from commit 8b37f0f0e6aaf50c110bd625fb1be2c8e491ddd3)
www/immich 3.2.2_6
High performance self-hosted photo and video management solution
www/immich: Unbreak the build with BUILD_AS_NON_ROOT
npm then has no writable HOME and cannot create its cache.
PR: 299082
Reported by: bruno@ruomad.net
Sponsored by: Netzkommune GmbH
(cherry picked from commit 99545d29596bce96c896c8192f79eaaa0c896285)
net/linux-remotedesktopmanager: Unbreak extraction
deb2targz writes its intermediate archive next to the input, so the port
asked for a file in DISTDIR, which the package builders mount read-only.
Read the data member out of the archive instead, which needs neither a
temporary file nor deb2targz.
Sponsored by: Netzkommune GmbH
(cherry picked from commit 1978b7a0161c29efbe1c24d548a5a58e19a3bcaa)
net/linux-remotedesktopmanager: Unbreak extraction
deb2targz writes its intermediate archive next to the input, so the port
asked for a file in DISTDIR, which the package builders mount read-only.
Read the data member out of the archive instead, which needs neither a
temporary file nor deb2targz.
Sponsored by: Netzkommune GmbH
devel/dbus-java: deprecate for expiration
Version from 2009
JDK 8 only
unused in the ports tree
a fork is in https://github.com/hypfvieh/dbus-java
PR: 300460
Approved by: 0mp@ (maintainer)
www/worldmonitor-cli 0.2.2
Command-line client for the World Monitor global intelligence API
www/worldmonitor-cli: Update to 0.2.2
Escape control characters and bidirectional marks in the operation
listing, accept only a bare YouTube id from the bootstrap payload, and
sanitize channel text that is written straight to the terminal.
Changelog:
https://github.com/koala73/worldmonitor/commits/main/cli
Sponsored by: Netzkommune GmbH
mail/phpmailer7 7.2.0
Full Featured Email Transfer Class for PHP
mail/phpmailer7: Update to 7.2.0
XOAUTH authentication with long tokens could report success when it had
failed, S/MIME signed messages no longer contain bare LF line breaks and
long address lines are folded correctly. XCLIENT now expects a 220
response and encodes its values as xtext at send time.
Changelog:
https://github.com/PHPMailer/PHPMailer/releases/tag/v7.2.0
Sponsored by: Netzkommune GmbH
