www/gitea: Security update 28.2.0 => 28.3.0, fix 21 CVEs
It contains a large number of security fixes, mostly around token
scopes, and bug fixes and performance improvements for Actions,
issues, pull requests and packages.
We strongly recommend that all users upgrade as soon as possible.
URL: https://blog.gitea.com/release-of-28.3.0/
PR: 300499
Approved by: portmgr@ (blanket, security fix)
MFH: 2026Q4
(cherry picked from commit 4d2e00911ddaa5f72c2833a803627a107da6be05)
www/gitea: Security update 28.2.0 => 28.3.0, fix 21 CVEs
It contains a large number of security fixes, mostly around token
scopes, and bug fixes and performance improvements for Actions,
issues, pull requests and packages.
We strongly recommend that all users upgrade as soon as possible.
URL: https://blog.gitea.com/release-of-28.3.0/
PR: 300499
Approved by: portmgr@ (blanket, security fix)
MFH: 2026Q4
devel/opencl-clang 19.1.2
Clang wrapper to compile OpenCL C kernels to SPIR-V modules
devel/opencl-clang: add LLVM 18-22 support
Remove blanket deprecation and replace with deprecation of flavors using
LLVM < 19 (current LLVM_DEFAULT). (brooks)
PR: 293448
Co-authored-by: Brooks Davis <brooks@FreeBSD.org>
Co-authored-by: Hiroo Ono <hiroo.ono+freebsd@gmail.com>
www/worldmonitor: Update to 2.11.8
Upstream now has settings for the bind address of the Redis REST proxy
and the relay, fixes the User-Agent for Overpass and pins the Lua
scripts of the military bases seeder. Drop our patches for these.
A Pro subscriber can now unlock the Pro panels with a desktop key,
install the file this needs.
Changelog: https://github.com/koala73/worldmonitor/releases/tag/v2.11.8
Sponsored by: Netzkommune GmbH
textproc/elasticsearch8 8.19.24
Distributed, RESTful search and analytics engine (8 version)
textproc/elasticsearch8: Fix path to distfiles in LOCAL
While here fix whitespaces in one patch.
PR: 288653
Approved by: blanket (fix fetch)
Reported by: linus.sundqvist@loopia.se
Sponsored by: UNIS Labs
MFH: 2026Q4
(cherry picked from commit abde9a63044975aa2d41da654e437c17196864e2)
textproc/elasticsearch8 8.19.24
Distributed, RESTful search and analytics engine (8 version)
textproc/elasticsearch8: Fix path to distfiles in LOCAL
While here fix whitespaces in one patch.
PR: 288653
Approved by: blanket (fix fetch)
Reported by: linus.sundqvist@loopia.se
Sponsored by: UNIS Labs
MFH: 2026Q4
biology/seaview: Improve port, take maintainership
* Switch MASTER_SITES to official site
* Use localbase for locating FLTK
* Prefer static patching of CC/CXX over dynamic one
* Remove old workaround for 'boolean javarun;' in csrc/phylip.c
* Pet portclippy(1) and portfmt(1)
* Improve pkg-descr
MFH: 2026Q4
(cherry picked from commit c4293503664000a6914433a870dd0edd3d023b08)
biology/seaview: Improve port, take maintainership
* Switch MASTER_SITES to official site
* Use localbase for locating FLTK
* Prefer static patching of CC/CXX over dynamic one
* Remove old workaround for 'boolean javarun;' in csrc/phylip.c
* Pet portclippy(1) and portfmt(1)
* Improve pkg-descr
MFH: 2026Q4
Mk/*: Bring support for Plasma 6 LTS release
Upcoming KDE Plasma 6.8 is Wayland exclusive [1]. Plasma 6.6 LTS with
X11 support will be maintained till February 2029 [2].
Due do missing DRM drivers Plasma 6.6 LTS will be the default variant
on non-amd64 systems. On amd64 both variants are available.
Third-party Plasma consumer will be built with the default Plasma version.
The preferable Plasma version can be set via DEFAULT_VERSIONS:
DEFAULT_VERSIONS+= kde_plasma=variant
[1] https://blogs.kde.org/2025/11/26/going-all-in-on-a-wayland-future/
[2] https://community.kde.org/Schedules/Plasma_6#Long-term_support_releases
Reviewed by: arrowd
games/anki 26.09.3
Flashcard trainer with spaced repetition
games/anki: fix build on powerpc64le
The prefetched node modules are created on amd64, where yarn also fetches
the FreeBSD/amd64 builds of esbuild, rollup and @parcel/watcher. On other
archs yarn skips them, so the archive doesn't match distinfo. Make yarn
resolve them for x64 on powerpc64le as well.
esbuild and rollup don't have FreeBSD binaries for powerpc64le, so use their
WebAssembly builds instead. Also let the build system know about powerpc64.
(cherry picked from commit ccf569423575b7fd8e9b87a7055c4466f02da305)
devel/py-threema-msgapi: Update to 8.0.0
3.0.6 uses asyncio.coroutine (removed in Python 3.11), so
'import threema.gateway' has failed since the 3.11 switch.
- The project moved to github.com/threema-ch; 8.0.0 is only published
on PyPI (the newest GitHub release is 7.0.1), so use the sdist.
- Dependencies follow upstream; pylru-cache is no longer needed. The
wrapt<2 cap in setup.py is dropped: the tree has wrapt 2.x, and only
wrapt.ObjectProxy is used.
- setup.py reads CHANGELOG.rst, which is not in the sdist, and uses
find_packages() on the threema namespace (no __init__.py), so the
package would contain no Python code at all. Use README.rst only and
find_namespace_packages().
- Fix the blocking API and the threema-gateway CLI on Python 3.14:
fall back to a new event loop and install it (partly from upstream
fd9e9f38), wrap the proxied methods in staticmethod(), and use
inspect.iscoroutinefunction().
- Expand pkg-descr and document the patches.
PR: 300161
(cherry picked from commit 80d5096c735935207159f793d7729f11c6d4f368)
devel/py-threema-msgapi: Update to 8.0.0
3.0.6 uses asyncio.coroutine (removed in Python 3.11), so
'import threema.gateway' has failed since the 3.11 switch.
- The project moved to github.com/threema-ch; 8.0.0 is only published
on PyPI (the newest GitHub release is 7.0.1), so use the sdist.
- Dependencies follow upstream; pylru-cache is no longer needed. The
wrapt<2 cap in setup.py is dropped: the tree has wrapt 2.x, and only
wrapt.ObjectProxy is used.
- setup.py reads CHANGELOG.rst, which is not in the sdist, and uses
find_packages() on the threema namespace (no __init__.py), so the
package would contain no Python code at all. Use README.rst only and
find_namespace_packages().
- Fix the blocking API and the threema-gateway CLI on Python 3.14:
fall back to a new event loop and install it (partly from upstream
fd9e9f38), wrap the proxied methods in staticmethod(), and use
inspect.iscoroutinefunction().
- Expand pkg-descr and document the patches.
PR: 300161
MFH: 2026Q4
(Only the first 10 of 109 items in this commit are shown above. )
*/R-cran-*: Remove redundant BUILD_DEPENDS
Mk/Uses/cran.mk unconditionally sets NO_BUILD, so nothing runs during
the build phase. The real work, R CMD INSTALL, happens in do-install
when run dependencies have already been installed. Listing R-cran-*
packages in BUILD_DEPENDS, with or without cran:compiles, only installs
these dependencies earlier.
While here:
- math/R-cran-Amelia: move rlang, an Import that was only listed in
BUILD_DEPENDS, to RUN_DEPENDS. Bump PORTREVISION.
- math/R-cran-MatchIt: likewise for rlang; drop chk, which 4.8.1 no
longer imports; bump PORTREVISION.
- textproc/R-cran-openxlsx, textproc/R-cran-readxl: drop knitr from
BUILD_DEPENDS. It is only a vignette builder and CRAN tarballs ship
built vignettes.
Reviewed by: dteske, eduardo, longros, uzsolt
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D60835
Tools/scripts/update-plist.py: Bugfix
Fix sorting of macro-prefixed entries.
The `get_expanded_key` function did not correctly sort orphaned plist
entries when dealing with conditional options (e.g. %%FOO%%) and
macro-prefixed directories (e.g., %%PYTHON_SITELIBDIR%%).
MFH: 2026Q4
(cherry picked from commit 825a16e406e9b5d969e05a7bed6d7026e6004202)
Tools/scripts/update-plist.py: Bugfix
Fix sorting of macro-prefixed entries.
The `get_expanded_key` function did not correctly sort orphaned plist
entries when dealing with conditional options (e.g. %%FOO%%) and
macro-prefixed directories (e.g., %%PYTHON_SITELIBDIR%%).
MFH: 2026Q4
x11-wm/awesome-devel: New port: Highly configurable, next generation framework
window manager (devel)
awesome is a highly configurable, next generation framework window
manager for X. It is very fast, small, dynamic, heavily extensible using
the Lua programming language, and licensed under the GNU GPLv2 license.
It is primarly targeted at power users, developers and any people
dealing with every day computing tasks and who want to have fine-grained
control on theirs graphical environment.
PR: 299944
Reported by: Waltz <wa1t5 __@_ proton.me>
x11-wm/devilspie2-devel: Fix BadMatch when attempting to minimize
A BadMatch error occurs when trying to minimize a CSD application in
fullscreen mode.
Mk/Uses/cran.mk: Respect TEST_ENV in do-test
Prior to this change, MAKE_ENV was passed to do-test, so R-cran ports
could not set separate environments for installing and testing.
devel/R-cran-rJava: Drop the workaround that added test variables to
MAKE_ENV and set TEST_ENV directly.
Reviewed by: longros
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D60845
security/testssl.sh 3.2.5
Analyze and report TLS/SSL configuration/misconfiguration
security/testssl.sh: Update to 3.2.5
Addressed various internet developments, including eMudhra's certs.
Changes: https://github.com/testssl/testssl.sh/releases/tag/v3.2.5
(cherry picked from commit 91d21de1bd5c4a5f9b4853961d81ceec1fa83ce1)
www/caddy 2.11.9
Fast, highly configurable HTTP/1-2-3 web server with automatic TLS
www/caddy: Update to 2.11.9
Further fixes, particularly to PHP and FastCGI. All users running PHP
are recommended to read Changes and update.
Changes: https://github.com/caddyserver/caddy/releases/tag/v2.11.9
(cherry picked from commit b699021b30d5a985f339cb96e51ec37219c06145)
