Mk/bsd.sites.mk: Add USE_FORGEJO helper
When a distribution file is to be fetched from a specific commit or tag
on a Forgejo or Gitea site, USE_FORGEJO provides helper variables to
automatically set key variables such as DISTNAME and MASTER_SITES to the
correct values. It is modelled after USE_GITHUB and USE_GITLAB.
Reviewed by: diizzy, fuz, siva
Approved by: portmgrg (bapt)
Sponsored by: The FreeBSD Foundation
Pull Request: https://ron-dev.freebsd.org/FreeBSD/ports/pulls/9
biology/py-goatools 1.6.5_1
Tools for processing and visualizing Gene Ontology terms
biology/py-goatools: Fix some dependency issues
Patch out obsolete py-setuptools_scm_git_archive dependency
Basic run-testing performed
New maintainer: patrick@crandol.com
Patches have been submitted to upstream
PR: 300072
Reported by: patrick@crandol.com
www/code-server 4.144.0
Run VS Code on a remote server and access it through a browser
www/code-server: Update to 4.144.0
The --socket-fd option works again, the inherited socket is passed on to
the process that listens.
Changelog: https://github.com/coder/code-server/releases
Sponsored by: Netzkommune GmbH
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Bump PORTREVISION for the array-var and encrypted-session updates. Both
modules are built into these ports, and a BUILD_DEPENDS does not rebuild
them by itself.
Sponsored by: Netzkommune GmbH
www/nginx-module-encrypted-session: Update to 0.11
A session token is now versioned and carries a random IV and an
HMAC-SHA256 tag instead of a public MD5 prefix and a fixed CBC IV, and
header and ciphertext are authenticated before the token is decrypted.
The tag is compared with CRYPTO_memcmp, which closes a timing oracle over
an attacker controlled plaintext prefix. Tokens written by earlier
versions no longer decrypt.
Changelog:
https://github.com/openresty/encrypted-session-nginx-module/compare/v0.10...v0.11
Sponsored by: Netzkommune GmbH
www/nginx-module-array-var: Update to 0.07
An array value is now a reference carrying a module tag and an array
pointer, and both the reference size and the tag are checked before the
value is mapped or joined.
Changelog:
https://github.com/openresty/array-var-nginx-module/compare/v0.06...v0.07
Sponsored by: Netzkommune GmbH
www/p5-Starlet 0.33
Perl extension for standalone HTTP/1.0 server
www/p5-Starlet: update 0.32 -> 0.33
Changelog: https://metacpan.org/dist/Starlet/changes
Security: prevent excessive CPU use when parsing malformed chunk-size lines
Security: bound read allocations for large Content-Length values
Security: suppress response bodies for HEAD requests and 204/304 responses
Security: stream chunk data to the body buffer and limit chunk-size lines to
4096 bytes
misc/py-safetensors 0.8.0_4
Simple, safe way to store and distribute tensors
misc/py-safetensors: Make the PyTorch dependency optional
Upstream has torch as an extra (safetensors[torch]); the core library has no
mandatory dependencies. The port pulled py-pytorch unconditionally, for
every consumer, including those that only use the numpy path.
PR: 300030
Approved by: yuri (maintainer)
Sponsored by: Netzkommune GmbH
misc/py-diffusers: Add the missing PyTorch dependency
diffusers needs torch and had no dependency of its own; it took it from the
unconditional one in misc/py-safetensors, which is about to go away.
PR: 300030
Approved by: yuri (maintainer)
Sponsored by: Netzkommune GmbH
lang/babashka 1.13.229
Fast native Clojure scripting runtime
lang/babashka: Update to 1.13.229
Changes since 1.13.226:
1.13.229 (2026-10-27)
* Bump org.babashka/cli to 0.12.92
* Bump org.flatland/ordered to 1.16.13
* The bb resolver retries HTTP 429, HTTP 503 and dropped
connections, configured by the
aether.connector.http.retryHandler.* system properties
* The bb resolver no longer fails a version range on Windows when
two threads fetch one maven-metadata.xml at once
1.13.228 (2026-10-25)
* Block the keys of the compromised eMudhra intermediates, so
re-encoded certificates are rejected too
* The bb resolver sends proxy credentials on HTTPS CONNECT tunnels
(#2253)
* Bump http-client to 0.4.26
1.13.227 (2026-10-23)
* Block the certificates of the eMudhra intermediate CA compromise
(@stathissideris)
* Bump nrepl to 1.8.0 and orchard to 0.45.0
* nREPL: info and eldoc cover special forms and Java classes and
members, and return added, deprecated, macro, :line and :column
(#2209, #2236, #2238)
* nREPL: completion matches by prefix and types its candidates
(#2237)
* nREPL: answer the CIDER ops under their cider/ names, add
ClojureDocs examples, inspect-last-exception and the cider-nrepl
inspector and stacktrace ops (#2211, #2229)
* nREPL: the test ops report progress and = diffs, support
test-all, :project? and :load-project-ns?, and no longer hang or
kill the session on an error (#2201, #2206, #2207)
* nREPL: fix a session after its client disconnects, a message
without an op, with-session-classloader and a SocketException on
disconnect (#2210, #2227, #2230, #2234)
* *input* exists only while bb runs an expression or a script
(#2235)
* doc on &, catch and finally prints the docs of fn and try
* is reports the file of the test, and a failing = reports the
actual value (#2208)
* with-out-str and binding of *err* capture the output of
babashka.cli/dispatch (#2193)
* source-fn warns if resolving bb's dependencies fails, and retries
on the next call (#2220)
* Fix loading a clojure.tools.deps.* or clojure.tools.gitlibs.*
namespace that bb does not bundle, such as
clojure.tools.deps.config
* Add java.nio.file.FileSystemLoopException, java.util.RandomAccess,
jdk.net.ExtendedSocketOptions, org.jline.utils.Status and
getAddress on Inet4Address and Inet6Address, and allow reify of
CompletingParsedLine and proxy of APersistentMap with
AutoCloseable (#2006, #2203, #2218, #2219)
* Bump nextjournal.markdown to 0.7.228
* The macOS amd64 binary requires macOS 11.0 or later
audio/din 66.2
Open source, cross-platform sound synthesizer
audio/din: Update to 66.2
Changes since 65:
DIN Is Noise 66:
/*
new overtone tuning
the ratios of all intervals are octave shifted harmonics
of the key note.
now the default tuning
*/
/*
on beater and voice-modualtion editors:
infinite beat labels
labelled number of beats between start/end vertex
of beat pattern
labelled number of beats between start/end of the
evaluated region of the beat pattern.
(on Beater editor only)
Click Lift and/or Crush buttons to
Lift or Crush selected portion of the beat pattern
Hold down click to lift or crush continuously
Lift/Crush params:
defaults are 0.1 0 1
where
0.1 is amount to lift / crush
0 is crush limit
1 is lift limit
Click Swing button to swing part of beat pattern.
Click Edit Swing and Accent curves to edit the
Swing curve.
Append after Cut
appends the cut portion of beat pattern to the end
of the beat pattern. if the cut portion is itself
the end of the beat pattern, then DIN inserts
it to the start of the beat pattern. useful for
syncopation.
Update copy on replace
updates copy curve when replacing portion of the
beat pattern with the copy curve. makes swapping
2 portions of the beat pattern possible.
Constrain the movement of vertices and tangents to
maintain valid beat pattern
*/
/*
Sine Mixer on custom sine editor
make custom sine out of standard sine harmonics :)
*/
/*
overlay last screen
press o in any curve editor
*/
/*
On any curve editor, Menu > Tools > Close Shapeform to
close shapeform when applicable.
*/
* voice volume +- to 0.01
* mix/undo when tangents unfolded
www/immich 3.3.5_1
High performance self-hosted photo and video management solution
www/immich: Fix thumbnails for geotagged assets
Immich 3.3.0 added a sixth geodata file, countryInfo.txt, which the
buildkit did not carry. Without it readCountryNames() throws, metadata
extraction fails, and video thumbnail generation fails with it.
PR: 300239
Reported by: bruno@ruomad.net
Sponsored by: Netzkommune GmbH
net/tigervnc-viewer: Rebuild against FLTK 1.4
vncviewer that was built with FLTK 1.4 will no longer launch:
ld-elf.so.1: Shared object "libfltk_images.so.1.3" not found, required by
"vncviewer"
PR: 300260
www/node26 26.12.1
V8 JavaScript for client and server
www/node26: Enable Temporal support
Node.js 26 enables Temporal by default, but its configure script
silently disables it when cargo/rustc are missing, which was the case
in the build environment.
The Rust crates are vendored in deps/crates and built by gyp with
"cargo rustc --frozen", so only the toolchain and environment from
USES=cargo are needed; the framework build/install/test stages are
turned off. Pass --v8-enable-temporal-support so that a missing
toolchain fails the build instead, and check in post-install that
Temporal resolves named time zones, since a broken setup fails
silently at runtime.
Approved by: maintainer (sunpoet, via telegram)
www/node22 22.23.4
V8 JavaScript for client and server
www/node24 24.22.1
V8 JavaScript for client and server
www/node26 26.12.1
V8 JavaScript for client and server
www/node2{2,4,6}: Remove obsolete build dependency and patches
- Drop BUILD_DEPENDS on devel/binutils: objdump was only needed by
tools/genv8constants.py, which no longer exists.
- Drop patch-src-cares_wrap.h: dns/c-ares installs ares_nameser.h, so
the upstream include works as is.
- www/node22: drop the linux-elf no-asm OpenSSL patches that removed
-ldl (only used with BUNDLED_SSL on non-amd64): FreeBSD provides
libdl, and node24/node26 already link -ldl unpatched.
Approved by: maintainer (sunpoet via telegram)
sysutils/cosmic-monitor: New port: System monitor for COSMIC
COSMIC System Monitor displays useful stats such as CPU
load and temperature, memory and storage use, and GPU
metrics.
It's cross-platform but currently Linux-centric, so a few features are
missing from this FreeBSD port. With that said, it builds cleanly and
I'll work with upstream to implement the missing FreeBSD features.
WWW: https://github.com/pop-os/cosmic-monitor
PR: 300230
Reported by: Josh Megnauth <jo.sh@tutanota.com> (new maintainer)
x11-toolkits/fltk 1.4.5
Cross-platform C++ graphical user interface toolkit
x11-toolkits/fltk: fix the build with Wayland, add WAYLAND option
Don't try to build `libdecor-cairo-blur.c' providing two functions,
blur_surface() and render_shadow() which are only used with bundled
libdecor, but we're naturally pulling this library from ports.
PR: 300233
Reported by: vvd, Daniel Toschlaeger
