emulators/fs-uae-launcher: Add missing RUN_DEPENDS
fs-uae-launcher doesn't depend on the emulator it launches.
With only the launcher installed, starting a game fails.
While here:
* Switch build format to PEP 517 to prepare for future setuptools.
* Add NO_ARCH to eliminate "no architecture-specific files found".
* Sort Makefile (pet port{clippy,fmt}).
PR: 300204
Approved by: Atanu Biswas <atanubiswas484@gmail.com> (maintainer)
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
(cherry picked from commit d56cc31746805fe133e0c483e09687a5f22b0a2f)
emulators/fs-uae-launcher: Add missing RUN_DEPENDS
fs-uae-launcher doesn't depend on the emulator it launches.
With only the launcher installed, starting a game fails.
While here:
* Switch build format to PEP 517 to prepare for future setuptools.
* Add NO_ARCH to eliminate "no architecture-specific files found".
* Sort Makefile (pet port{clippy,fmt}).
PR: 300204
Approved by: Atanu Biswas <atanubiswas484@gmail.com> (maintainer)
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
www/gitea: Fix building by pinning Go to 1.27+
* Gitea requires Go 1.27, but the 2026Q4 tree still defaults to 1.26.
This can safely be committed to main as well.
* While here, mark as PIE_UNSAFE (as build WITH_PIE) fails. (by alven@)
Reported by: Patrick M. Hausen <hausen@punkt.de> (by email)
Approved by: portmgr@ (blanket, build fix)
MFH: 2026Q4
(cherry picked from commit 7cc5a636bd2a8736305b4dd1701888632d458a00)
www/gitea: Fix building by pinning Go to 1.27+
* Gitea requires Go 1.27, but the 2026Q4 tree still defaults to 1.26.
This can safely be committed to main as well.
* While here, mark as PIE_UNSAFE (as build WITH_PIE) fails. (by alven@)
Reported by: Patrick M. Hausen <hausen@punkt.de> (by email)
Approved by: portmgr@ (blanket, build fix)
MFH: 2026Q4
devel/rubygem-worldmonitor: Add New Port
Official Ruby client for the World Monitor API. It gives access to
country briefs, risk scores, conflict, cyber, market and news feeds
and to the MCP tools, without writing an HTTP integration by hand.
WWW: https://www.worldmonitor.app/docs/sdks
Sponsored by: Netzkommune GmbH
devel/py-worldmonitor-sdk: Add New Port
Official Python client for the World Monitor API. It gives access to
country briefs, risk scores, conflict, cyber, market and news feeds
and to the MCP tools, without writing an HTTP integration by hand.
WWW: https://www.worldmonitor.app/docs/sdks
Sponsored by: Netzkommune GmbH
www/rt60 6.0.4
Industrial-grade ticketing system written in Perl
www/rt60: Update to 6.0.4
Add new option, 'MFA', which enables TOTP multi-factor authentication
support. Set MFA as default ON.
PR: 300304
(cherry picked from commit 7ed40c46a44c05a709eefa58d6a82852a6d512c3)
www/ungoogled-chromium 156.0.8078.79
Google web browser based on WebKit sans integration with Google
www/ungoogled-chromium: Fix build in poudriere
ninja: Entering directory `out/Release'
ninja: error:
'../../third_party/devtools-frontend/src/third_party/esbuild/esbuild', needed by
'gen/third_party/devtools-fronten
d/src/front_end/third_party/lighthouse/report/report.js', missing and no known
rule to make it
Approved by: blanket (fix build)
Sponsored by: UNIS Labs
sysutils/wmcube 1.0.2
Window Maker dockapp that displays cpu load and a realtime 3D object
sysutils/wmcube: Update to 1.0.2
Use the installed object directory and install the manual page. Drop
setgid kmem permissions since CPU statistics are read using sysctl.
While here, pet portclippy
Sponsored by: Rubicon Communications, LLC ("Netgate")
net-mgmt/iprange: Update to 2.1.1
Remove the portable IPv6 arithmetic patch, now included upstream.
Sponsored by: Rubicon Communications, LLC ("Netgate")
net/xmlrpc-c 1.64.03_1
XML-RPC library for C and C++
net/xmlrpc-c: Use canonical WWW URL
Follow the upstream redirect to its canonical location.
While here, pet portclippy
Sponsored by: Rubicon Communications, LLC ("Netgate")
net/pear-Net_Growl: Deprecate and drop maintainership
The upstream project is abandoned and its repository is archived.
Set the expiration date to December 31, 2026.
https://github.com/pear/Net_Growl
Sponsored by: Rubicon Communications, LLC ("Netgate")
www/rt50 5.0.11
Industrial-grade ticketing system written in Perl
www/rt50: Update to 5.0.11
Add Multi-factor authentication option, ON by default.
PR: 300302
(cherry picked from commit e9463fef84b0f7dcf8eed6ee05016607d425229c)
security/wolfssh: Update to 1.6.0
This release fixes five vulnerabilities, among them a man-in-the-middle
against the host key check.
Changes: https://github.com/wolfSSL/wolfssh/releases/tag/v1.6.0-stable
Security: 61a6b109-d852-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
(cherry picked from commit ad5a4e42f55ae1ca8cdadc78c489abbbc664f48c)
security/wolfssh: Update to 1.6.0
This release fixes five vulnerabilities, among them a man-in-the-middle
against the host key check.
Changes: https://github.com/wolfSSL/wolfssh/releases/tag/v1.6.0-stable
Security: 61a6b109-d852-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
sysutils/py-zfsstat: Add OpenZFS python tools
For OpenZFS Mastery book.
Anyone that has more stake in this, please take
ownership.
See https://io.mwl.io/@mwl/117555657357834894
Requested by: Michael W. Lucas <@mwl@io.mwl.io>
misc/codex 0.166.0
Lightweight coding agent that runs in your terminal
misc/codex: Update to 0.166.0
v8 crate is now obtained from a GitHub repository instead of
crates.io. It has git submodules which have to be retrieved
separately from GitHub and Googlesource. A mechanism to secure
reproducibility of those submodules has been added to Makefile.
Changelog: https://github.com/openai/codex/releases/tag/rust-v0.166.0
Reported by: GitHub (watch releases)
www/worldmonitor: Update to 2.11.7
Upstream moved to a native TypeScript compiler, so point the build
at it.
Add /usr/local/bin to PATH in the relay rc script, the relay needs
curl at runtime.
Sponsored by: Netzkommune GmbH
.hooks/pre-commit.d: New hook to validate vuxml
This runs `make validate` in case VuXML entries have been changed.
Approved by: mat (portmgr), joneum (ports-secteam)
Differential Revision: https://reviews.freebsd.org/D61157
net-mgmt/nagios4: Security update 4.5.12 => 4.5.14
This release fixes many vulnerabilities.
Changelog:
https://www.nagios.org/projects/nagios-core/4x/
While here, drop SourceForge from MASTER_SITES.
PR: 300388
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 495cd2f705ea910c78bedcc3c967cf991b364ed7)
net-mgmt/nagios4: Security update 4.5.12 => 4.5.14
This release fixes many vulnerabilities.
Changelog:
https://www.nagios.org/projects/nagios-core/4x/
While here, drop SourceForge from MASTER_SITES.
PR: 300388
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
www/linux-chrome 157.0.8103.38
Google web browser based on WebKit
www/linux-chrome: Security update to 157.0.8103.38
Fixes buffer overflows in Dawn, memory corruption in ANGLE and use
after free in WebGL, Prerender, Geometry and Core, each of which lets
a crafted page execute code outside the sandbox.
Changelog: https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html
Security: 380c9ad2-d81f-11f1-a214-a0369f7f7be0
Security: 3749ce48-d5ce-11f1-9bfa-a8a1599412c6
Security: 60814125-d630-11f1-9bfa-a8a1599412c6
Sponsored by: Netzkommune GmbH
(cherry picked from commit 64781d7f3a12bc129634c10b3a6977c2041c1129)
devel/google-cloud-cpp: Update to 3.13.0
- opentelemetry-cpp is now a required dependency; crc32c is no
longer used (Abseil's implementation is used instead).
- Drop CMake options that are no longer used by 3.x.
- Use GOOGLE_CLOUD_CPP_OVERRIDE_GOOGLEAPIS_URL to point at the
googleapis distfile instead of copying it into the build tree.
- Add patches to use opentelemetry::nostd for opentelemetry-cpp
types; upstream assumes opentelemetry-cpp is built with WITH_STL,
which our devel/opentelemetry-cpp is not.
Changes: https://github.com/googleapis/google-cloud-cpp/blob/v3.13.0/CHANGELOG.md
www/linux-chrome 157.0.8103.38
Google web browser based on WebKit
www/linux-chrome: Security update to 157.0.8103.38
Fixes buffer overflows in Dawn, memory corruption in ANGLE and use
after free in WebGL, Prerender, Geometry and Core, each of which lets
a crafted page execute code outside the sandbox.
Changelog: https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html
Security: 380c9ad2-d81f-11f1-a214-a0369f7f7be0
Security: 3749ce48-d5ce-11f1-9bfa-a8a1599412c6
Security: 60814125-d630-11f1-9bfa-a8a1599412c6
Sponsored by: Netzkommune GmbH
devel/thonny: Update to 5.0.1
Thonny now builds with the uv_build PEP 517 backend instead of setup.py,
so switch to USE_PYTHON=pep517 and add uv-build as a build dependency.
Upstream's <0.12 pin is out of reach for the port's uv-build 0.13.x, so
relax it at extract time. Match RUN_DEPENDS from pyproject.toml.
(cherry picked from commit 6478a856f13dccdb545915fbe7026b162aeafc2e)
audio/qaudiosonar: Migrate to Qt6
The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. One small source patch replaces the deprecated
Qt calls with their current equivalents.
(cherry picked from commit 7c76d9b0a7e4aae8b21f08611fe02d2a534c165d)
audio/midipp 2.1.7_2
MIDI playback, recording, and live performance tool
audio/midipp: Migrate to Qt6
The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. Several source patches replace the deprecated Qt
calls with their current equivalents.
(cherry picked from commit 379c522c3e25d4a38c6e84637ffe184c07905506)
audio/hpsjam 1.2.8_1
Online jamming client and server tool
audio/hpsjam: Migrate to Qt6
The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. One small source patch replaces the deprecated
Qt calls with their current equivalents.
(cherry picked from commit 6bf16d9347d0dc0f4047cc7526c23f157611330f)
devel/thonny: Update to 5.0.1
Thonny now builds with the uv_build PEP 517 backend instead of setup.py,
so switch to USE_PYTHON=pep517 and add uv-build as a build dependency.
Upstream's <0.12 pin is out of reach for the port's uv-build 0.13.x, so
relax it at extract time. Match RUN_DEPENDS from pyproject.toml.
audio/qaudiosonar: Migrate to Qt6
The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. One small source patch replaces the deprecated
Qt calls with their current equivalents.
audio/midipp 2.1.7_2
MIDI playback, recording, and live performance tool
audio/midipp: Migrate to Qt6
The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. Several source patches replace the deprecated Qt
calls with their current equivalents.
audio/hpsjam 1.2.8_1
Online jamming client and server tool
audio/hpsjam: Migrate to Qt6
The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. One small source patch replaces the deprecated
Qt calls with their current equivalents.
www/p5-Starlet 0.33
Perl extension for standalone HTTP/1.0 server
www/p5-Starlet: update 0.32 -> 0.33
Changelog: https://metacpan.org/dist/Starlet/changes
Security: prevent excessive CPU use when parsing malformed chunk-size lines
Security: bound read allocations for large Content-Length values
Security: suppress response bodies for HEAD requests and 204/304 responses
Security: stream chunk data to the body buffer and limit chunk-size lines to
4096 bytes
(cherry picked from commit 2d59ccefc7de23da947d3543c2f78f2355c1af98)
Mk: generate SBOM .pc files for all ports
Each package and subpackage now installs an SBOM file in pkg-config
format, see pc(5). The file is installed in ${PREFIX}/share/sbom/pc/.
The framework adds it to the plist automatically.
PR: 300098
Differential Revision: https://reviews.freebsd.org/D60441
devel/codequery 1.1.0_1
Code understanding, browsing and search tool
devel/codequery: Add missing qt6-tools build dependency
CMake requires Qt6LinguistTools, which was previously pulled in
indirectly and is no longer available, breaking configure.
MFH: 2026Q4
graphics/heimer 4.5.0_1
Simple mind map, diagram, and note-taking tool
graphics/heimer: Add missing qt6-tools build dependency
CMake requires Qt6LinguistTools, which was previously pulled in
indirectly and is no longer available, breaking configure.
MFH: 2026Q4
