math/R-cran-corpcor: New port: Efficient estimation of covariance and partial
correlation
Implements a James-Stein-type shrinkage estimator for the covariance
matrix, with separate shrinkage for variances and correlations. The
approach is both computationally as well as statistically very efficient,
it is applicable to "small n, large p" data, and always returns a positive
definite and well-conditioned covariance matrix. In addition to inferring
the covariance matrix the package also provides shrinkage estimators for
partial correlations and partial variances. The inverse of the covariance
and correlation matrix can be efficiently computed, as well as any
arbitrary power of the shrinkage correlation matrix. Furthermore,
functions are available for fast singular value decomposition, for
computing the pseudoinverse, and for checking the rank and positive
definiteness of a matrix.
PR: 296812
Approved by: jrm (mentor)
Differential Revision: https://reviews.freebsd.org/D61259
math/R-cran-ranger: New port: Fast implementation of random forests
Fast implementation of Random Forests for classification, regression,
survival and probability prediction, suited for high dimensional data.
Approved by: jrm (mentor)
Differential Revision: https://reviews.freebsd.org/D61244
lang/go127: Update to 1.27.4
Changes:
go1.27.4 (released 2026-11-10) includes security fixes to cgo, the go
command, the compiler, the linker, and the net/http package, as well
as bug fixes to the assembler, the compiler, the runtime, toolchain
bootstrapping, and the crypto/fips140, crypto/hkdf, crypto/rsa,
crypto/tls, and net packages.
MFH: 2026Q4
(cherry picked from commit d385e2920918ef942585f9955d9e31f0a0c22f05)
lang/go126: Update to 1.26.11
Changes:
go1.26.11 (released 2026-11-10) includes security fixes to cgo, the go
command, the compiler, the linker, and the net/http package, as well
as bug fixes to the assembler, the compiler, the runtime, toolchain
bootstrapping, and the crypto/fips140, crypto/hkdf, crypto/rsa,
crypto/tls, net, and net/http packages.
MFH: 2026Q4
(cherry picked from commit c112de9e568feddaf7644108f547d3e1e52ce24b)
net-mgmt/netbox: Update to 4.7.5
* Remove no longer required workaround for DRF 3.18.3.
* Sort some dependencies and prune update instructions for NetBox
releases older than 3.7 while I'm here.
Netbox 4.7 contains many bugfixes/enhancements and the following new
features:
* Cooling Infrastructure Modeling
* Channelized Subinterfaces
* Multi-Protocol Application Services
* Module Bay Types
* Relocating Installed Modules
* Background Processing for REST API Requests
* Per-Object Errors for Bulk Operations
* Pre-Rendered Config Context Data
* Snapshot-Aware Event Rule Conditions
https://netbox.readthedocs.io/en/stable/release-notes/version-4.7/
MFH: No (contains breaking changes)
(Only the first 10 of 26 items in this commit are shown above. )
net-mgmt/netbox: Add Django 6.1 consumers
* Django 5.2 is currently the "default" version in the ports tree due
its long term support until April 2028. Thus ports that are assigned
to that version will exist until then.
The following ports are required to make the upgrade of
net-mgmt/netbox to the 4.7 release possible because it requires
Django 6.1.
All of the ports listed below were created on the basis of their
respective original ports:
- devel/py-dj61-django-rq
- devel/py-dj61-strawberry-graphql
- graphics/py-dj61-sorl-thumbnail
- www/py-dj61-channels
- www/py-dj61-django-auth-ldap
- www/py-dj61-django-choices-field
- www/py-dj61-django-cors-headers
- www/py-dj61-django-filter
- www/py-dj61-django-htmx
- www/py-dj61-django-js-asset
- www/py-dj61-django-mptt
- www/py-dj61-django-prometheus
- www/py-dj61-django-redis
- www/py-dj61-django-rich
- www/py-dj61-django-storages
- www/py-dj61-django-tables2
- www/py-dj61-django-taggit
- www/py-dj61-django-timezone-field
- www/py-dj61-drf-spectacular
- www/py-dj61-drf-spectacular-sidecar
- www/py-dj61-social-auth-app-django
- www/py-dj61-strawberry-graphql-django
security/py-social-auth-core5: New port
This is the core component of the python-social-auth ecosystem, it
implements the common interface to define new authentication backends
to third parties services, implement integrations with web frameworks
and storage solutions.
Note: This port is primarily intended for use with net-mgmt/netbox,
which currently does not support newer versions of py-social-auth-core.
security/py-social-auth-core: Update to 5.2.0
* Adjust testsuite accordingly so that the results are successful
depending on the configuration.
* Note: This is an interim update to create a py-social-auth-core5 port
based on this, which is limited to the 5.x release series and adjust
CONFLICTS_INSTALL for future variants of py-social-auth-core.
Changelog since 5.0.1:
https://github.com/python-social-auth/social-core/blob/5.2.0/CHANGELOG.md
Approved by: ultima (maintainer, implicit)
MFH: 2026Q4
lang/go127: Update to 1.27.4
Changes:
go1.27.4 (released 2026-11-10) includes security fixes to cgo, the go
command, the compiler, the linker, and the net/http package, as well
as bug fixes to the assembler, the compiler, the runtime, toolchain
bootstrapping, and the crypto/fips140, crypto/hkdf, crypto/rsa,
crypto/tls, and net packages.
MFH: 2026Q4
lang/go126: Update to 1.26.11
Changes:
go1.26.11 (released 2026-11-10) includes security fixes to cgo, the go
command, the compiler, the linker, and the net/http package, as well
as bug fixes to the assembler, the compiler, the runtime, toolchain
bootstrapping, and the crypto/fips140, crypto/hkdf, crypto/rsa,
crypto/tls, net, and net/http packages.
MFH: 2026Q4
www/linux-chrome 157.0.8103.50
Google web browser based on WebKit
www/linux-chrome: Security update to 157.0.8103.50
Fixes an out of bounds write in GPU that lets a crafted page run code
outside the sandbox, a buffer overflow in Compositing that does the
same once the renderer is compromised, and type confusion in V8 and
use after free in XML inside the sandbox.
Chrome now ships as an rpm 6 package whose payload libarchive cannot
read, so extract through rpm2archive.
Changelog: https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html
Security: a18ffa98-dd42-11f1-8816-a0369f7f7be0
Sponsored by: Netzkommune GmbH
(cherry picked from commit 6b96fd5c3ab4e2f310e9201a6e146e7ee7d98ad3)
www/linux-chrome 157.0.8103.50
Google web browser based on WebKit
www/linux-chrome: Security update to 157.0.8103.50
Fixes an out of bounds write in GPU that lets a crafted page run code
outside the sandbox, a buffer overflow in Compositing that does the
same once the renderer is compromised, and type confusion in V8 and
use after free in XML inside the sandbox.
Chrome now ships as an rpm 6 package whose payload libarchive cannot
read, so extract through rpm2archive.
Changelog: https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html
Security: a18ffa98-dd42-11f1-8816-a0369f7f7be0
Sponsored by: Netzkommune GmbH
net-im/tuwunel: Add New Port
Tuwunel is a Matrix homeserver written in Rust and the official successor
to conduwuit. It serves the client-server and federation APIs from a
single process and keeps its state in an embedded RocksDB database, so no
separate database server is required.
www: https://tuwunel.chat/
Sponsored by: Netzkommune GmbH
graphics/jpeg-turbo 3.2.1
SIMD-accelerated JPEG codec which replaces libjpeg
graphics/jpeg-turbo: Update to 3.2.1
Unit tests now passes without -ffp-model=strict (CFLAGS) and
use system zlib instead of bundled
Changelog:
https://github.com/libjpeg-turbo/libjpeg-turbo/releases/tag/3.2.1
PR: 300235
Reviewed by: desktop (arrowd)
Security: CVE-2026-75466
Exp-run by: antoine
sysutils/vitaly: [NEW PORT] VIA/Vial CLI configuration tool for QMK keyboards
Vial CLI tool allows to configure keyboard through VIA/Vial protocol with
command line interface. It supports QMK keycodes notation together with aliases.
Keys, encoders, combos, macros, tap dances, key overrides and alt repeat keys
are supported. RGB lighting control is supported too.
Non-colored underglow is not supported for now because there is no devices with
such features around me.
Tool support --help for tool as a whole and for all subcommands.
WWW: https://github.com/bskaplou/vitaly/
x11/nvidia-kmod*, graphics/nvidia-drm-*-kmod*: Use sys/stdarg.h
machine/stdarg.h is deprecated and will be removed in due course.
This deorbits machine/stdarg.h and use sys/stdarg.h instead.
Not bumping PORTREVISION, as this is a build fix for future
removal of machine/stdarg.h and shouldn't cause changes
in contents of pkgs.
PR: 300622
Co-authored-by: Brooks Davis <brooks@FreeBSD.org>
Differential Revision: https://reviews.freebsd.org/D61415
devel/git: Update to 2.56.1
This is a set of coordinated security fix releases addressing
CVE-2026-111760, CVE-2026-113408, CVE-2026-114466, CVE-2026-114467,
CVE-2026-114469 and CVE-2026-105437.
Security: 24e1443d-dd3b-11f1-b094-bc2411e144f8
Sponsored by: Rubicon Communications, LLC ("Netgate")
www/authelia 4.39.28
Single sign-on multi-factor portal for web apps
www/authelia: update 4.39.20 → 4.39.28; add service pid file; update default
service config
Service config was outdated. The new one now successfully starts the
service.
PR: 300045
Submitted by: paul.le.gauret@gmail.com (port update)
emulators/supermodel: Update 0.3a-20260726 => 0.4-20261107
Changelog:
- rchase2: Mirror and rename roms to latest MAME findings
- Add Lost World border reload input
- Rename to Sega Model Series, fix macOS build warnings, and clean up
licensing and Games.xml
- Version numbering updated
- DSB: make FIFO write index atomic
- Refactor networking code to use a single server class and outbound TCP
connection class
Commit log:
https://github.com/trzy/Supermodel/compare/v0.3a-20260726-git-b7d8acd...v0.4-20261107-git-ff92a99
PR: 300659
Sponsored by: UNIS Labs (vvd, commit patch)
security/openbsm 1.2.a6
Open Source Basic Security Module (BSM) Audit Implementation
security/openbsm: Update to 1.2-alpha6
This port has been stuck at 1.1-p2 since 2009 and unmaintained since
2018. Meanwhile, it has been buildable but not usable on any version
of FreeBSD since 12.0 due to ABI issues which were patched in base but
not upstream.
OpenBSM in base is currently (since 2017) at 1.2-alpha5 plus various
fixes. Recently, we upstreamed everything that hadn't yet been
upstreamed and tagged 1.2-alpha6. This allows us to update the port
to something that works and more or less matches what's in base.
* Update to 1.2-alpha6 which includes all bug fixes from base and more.
* Switch to GitHub since 1.2-alpha6 is not (yet?) available from the
TrustedBSD website.
* Mark JOBS_UNSAFE as the build system appears to have incomplete
dependency information, leading to a sequencing issue in auditdistd
when built at high -j settings.
* Assume maintainership.
MFH: 2026Q4
Sponsored by: Klara, Inc.
Sponsored by: Qualys, Inc.
Reviewed by: arrowd, kevans
Differential Revision: https://reviews.freebsd.org/D61394
(cherry picked from commit d2b60d739838049ee6004cc19287750c710032fd)
security/openbsm 1.2.a6
Open Source Basic Security Module (BSM) Audit Implementation
security/openbsm: Update to 1.2-alpha6
This port has been stuck at 1.1-p2 since 2009 and unmaintained since
2018. Meanwhile, it has been buildable but not usable on any version
of FreeBSD since 12.0 due to ABI issues which were patched in base but
not upstream.
OpenBSM in base is currently (since 2017) at 1.2-alpha5 plus various
fixes. Recently, we upstreamed everything that hadn't yet been
upstreamed and tagged 1.2-alpha6. This allows us to update the port
to something that works and more or less matches what's in base.
* Update to 1.2-alpha6 which includes all bug fixes from base and more.
* Switch to GitHub since 1.2-alpha6 is not (yet?) available from the
TrustedBSD website.
* Mark JOBS_UNSAFE as the build system appears to have incomplete
dependency information, leading to a sequencing issue in auditdistd
when built at high -j settings.
* Assume maintainership.
MFH: 2026Q4
Sponsored by: Klara, Inc.
Sponsored by: Qualys, Inc.
Reviewed by: arrowd, kevans
Differential Revision: https://reviews.freebsd.org/D61394
www: add missing Makefile entries for mitmproxy
Fixes: 582b9fec2e71 ("net/mitmproxy_rs: new port")
Fixes: 8939cb3896cb ("net/mitmproxy: revive and update to 12.3.1")
