www/worldmonitor: Update to 2.11.7
Upstream moved to a native TypeScript compiler, so point the build
at it.
Add /usr/local/bin to PATH in the relay rc script, the relay needs
curl at runtime.
Sponsored by: Netzkommune GmbH
.hooks/pre-commit.d: New hook to validate vuxml
This runs `make validate` in case VuXML entries have been changed.
Approved by: mat (portmgr), joneum (ports-secteam)
Differential Revision: https://reviews.freebsd.org/D61157
net-mgmt/nagios4: Security update 4.5.12 => 4.5.14
This release fixes many vulnerabilities.
Changelog:
https://www.nagios.org/projects/nagios-core/4x/
While here, drop SourceForge from MASTER_SITES.
PR: 300388
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 495cd2f705ea910c78bedcc3c967cf991b364ed7)
net-mgmt/nagios4: Security update 4.5.12 => 4.5.14
This release fixes many vulnerabilities.
Changelog:
https://www.nagios.org/projects/nagios-core/4x/
While here, drop SourceForge from MASTER_SITES.
PR: 300388
Approved by: osa, vvd (mentors, implicit)
MFH: 2026Q4
www/linux-chrome 157.0.8103.38
Google web browser based on WebKit
www/linux-chrome: Security update to 157.0.8103.38
Fixes buffer overflows in Dawn, memory corruption in ANGLE and use
after free in WebGL, Prerender, Geometry and Core, each of which lets
a crafted page execute code outside the sandbox.
Changelog: https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html
Security: 380c9ad2-d81f-11f1-a214-a0369f7f7be0
Security: 3749ce48-d5ce-11f1-9bfa-a8a1599412c6
Security: 60814125-d630-11f1-9bfa-a8a1599412c6
Sponsored by: Netzkommune GmbH
(cherry picked from commit 64781d7f3a12bc129634c10b3a6977c2041c1129)
devel/google-cloud-cpp: Update to 3.13.0
- opentelemetry-cpp is now a required dependency; crc32c is no
longer used (Abseil's implementation is used instead).
- Drop CMake options that are no longer used by 3.x.
- Use GOOGLE_CLOUD_CPP_OVERRIDE_GOOGLEAPIS_URL to point at the
googleapis distfile instead of copying it into the build tree.
- Add patches to use opentelemetry::nostd for opentelemetry-cpp
types; upstream assumes opentelemetry-cpp is built with WITH_STL,
which our devel/opentelemetry-cpp is not.
Changes: https://github.com/googleapis/google-cloud-cpp/blob/v3.13.0/CHANGELOG.md
www/linux-chrome 157.0.8103.38
Google web browser based on WebKit
www/linux-chrome: Security update to 157.0.8103.38
Fixes buffer overflows in Dawn, memory corruption in ANGLE and use
after free in WebGL, Prerender, Geometry and Core, each of which lets
a crafted page execute code outside the sandbox.
Changelog: https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html
Security: 380c9ad2-d81f-11f1-a214-a0369f7f7be0
Security: 3749ce48-d5ce-11f1-9bfa-a8a1599412c6
Security: 60814125-d630-11f1-9bfa-a8a1599412c6
Sponsored by: Netzkommune GmbH
devel/thonny: Update to 5.0.1
Thonny now builds with the uv_build PEP 517 backend instead of setup.py,
so switch to USE_PYTHON=pep517 and add uv-build as a build dependency.
Upstream's <0.12 pin is out of reach for the port's uv-build 0.13.x, so
relax it at extract time. Match RUN_DEPENDS from pyproject.toml.
(cherry picked from commit 6478a856f13dccdb545915fbe7026b162aeafc2e)
audio/qaudiosonar: Migrate to Qt6
The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. One small source patch replaces the deprecated
Qt calls with their current equivalents.
(cherry picked from commit 7c76d9b0a7e4aae8b21f08611fe02d2a534c165d)
audio/midipp 2.1.7_2
MIDI playback, recording, and live performance tool
audio/midipp: Migrate to Qt6
The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. Several source patches replace the deprecated Qt
calls with their current equivalents.
(cherry picked from commit 379c522c3e25d4a38c6e84637ffe184c07905506)
audio/hpsjam 1.2.8_1
Online jamming client and server tool
audio/hpsjam: Migrate to Qt6
The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. One small source patch replaces the deprecated
Qt calls with their current equivalents.
(cherry picked from commit 6bf16d9347d0dc0f4047cc7526c23f157611330f)
devel/thonny: Update to 5.0.1
Thonny now builds with the uv_build PEP 517 backend instead of setup.py,
so switch to USE_PYTHON=pep517 and add uv-build as a build dependency.
Upstream's <0.12 pin is out of reach for the port's uv-build 0.13.x, so
relax it at extract time. Match RUN_DEPENDS from pyproject.toml.
audio/qaudiosonar: Migrate to Qt6
The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. One small source patch replaces the deprecated
Qt calls with their current equivalents.
audio/midipp 2.1.7_2
MIDI playback, recording, and live performance tool
audio/midipp: Migrate to Qt6
The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. Several source patches replace the deprecated Qt
calls with their current equivalents.
audio/hpsjam 1.2.8_1
Online jamming client and server tool
audio/hpsjam: Migrate to Qt6
The codebase uses no Qt5-only APIs, so this flips the port to qt:6 with
a C++17 compiler floor. One small source patch replaces the deprecated
Qt calls with their current equivalents.
www/p5-Starlet 0.33
Perl extension for standalone HTTP/1.0 server
www/p5-Starlet: update 0.32 -> 0.33
Changelog: https://metacpan.org/dist/Starlet/changes
Security: prevent excessive CPU use when parsing malformed chunk-size lines
Security: bound read allocations for large Content-Length values
Security: suppress response bodies for HEAD requests and 204/304 responses
Security: stream chunk data to the body buffer and limit chunk-size lines to
4096 bytes
(cherry picked from commit 2d59ccefc7de23da947d3543c2f78f2355c1af98)
Mk: generate SBOM .pc files for all ports
Each package and subpackage now installs an SBOM file in pkg-config
format, see pc(5). The file is installed in ${PREFIX}/share/sbom/pc/.
The framework adds it to the plist automatically.
PR: 300098
Differential Revision: https://reviews.freebsd.org/D60441
devel/codequery 1.1.0_1
Code understanding, browsing and search tool
devel/codequery: Add missing qt6-tools build dependency
CMake requires Qt6LinguistTools, which was previously pulled in
indirectly and is no longer available, breaking configure.
MFH: 2026Q4
graphics/heimer 4.5.0_1
Simple mind map, diagram, and note-taking tool
graphics/heimer: Add missing qt6-tools build dependency
CMake requires Qt6LinguistTools, which was previously pulled in
indirectly and is no longer available, breaking configure.
MFH: 2026Q4
textproc/markterm 0.17.0
Render Markdown to the terminal, to Markdown, or to PDF
textproc/markterm: Update to 0.17.0
- bump the rebased litehtml submodule at d908f3f8
- regenerate patches against the new sources
Sponsored by: SkunkWerks, GmbH
ports-mgmt/git-proxy: New port - generic caching repository proxy
- serve pkg(8) repositories at /freebsd/${ABI}/${set}/
- serve custom repositories from upstream.freebsd_repositories at
/freebsd/{name}/
- https://github.com/git-pkgs/proxy
- cache many different types of asset and package registries
Sponsored by: SkunkWerks, GmbH
www/monolith 2.11.6
CLI tool for saving complete web pages as a single HTML file
www/monolith: Update to 2.11.6 and take maintainership
While here, claim maintainership after three consecutive maintainer
timeouts.
Changelog: https://github.com/Y2Z/monolith/releases/tag/v2.11.6
PR: 299625
Approved by: lcook (former maintainer, timeout 2 weeks)
java/apache-commons-lang: Remove expired port
2026-10-31 java/apache-commons-lang: Unpatched CVE, last release in 2011, does
not compile with Java 11+, not actively maintained. Superseded by port
java/apache-commons-lang3.
textproc/lucene: Remove expired port
2026-10-31 textproc/lucene: Release from 2013. Unsupported upstream. Lucene is
now at version 10.X. Superseded in ports by textproc/lucene9.
games/eduke32 20260807_1
Duke Nukem 3D Port based on JFDuke and EDuke
games/eduke32: Add fullscreen-display patch
In window managers such as dwm, fvwm, bvwm, etc. moving fullscreen
windows should cause resizing to the new output display.
eduke32 automatically resizes in window mode but not when asked to
run fullscreen. This patch causes resize when, for example, a user
in dwm utilizes Alt+Shift+Period (or Alt+Shift+Comma) to send the
game to another screen.
net/igmpproxy: Fix igmpproxy_conf rc.d knob, document user and chroot
- The rc.d script documented igmpproxy_conf but read igmpproxy_config,
and required_files always pointed to the default path. Honor
igmpproxy_conf, keeping igmpproxy_config as a fallback so existing
setups do not break, and check the file actually in use.
- Add commented user and chroot examples to the sample configuration.
They allow igmpproxy to drop privileges once sysutils/mac_igmpproxy
is loaded.
Sponsored by: Rubicon Communications, LLC ("Netgate")
sysutils/mac_igmpproxy: New port, MAC policy for net/igmpproxy
A MAC framework policy that grants the multicast routing privilege to
a single configurable UID, so net/igmpproxy can drop root and run as
the new igmpproxy user (UID/GID 422). The policy can be tuned or
disabled with the security.mac.igmpproxy.uid and
security.mac.igmpproxy.enabled sysctls.
PR: 291647
net/dhcpdump 2.00
Decode and diagnose sniffed DHCP packets
net/dhcpdump: Update to 2.00 and switch to the active fork
The original dhcpdump 1.8 has not been maintained for many years. Move
to the dhcpdump-org fork, which Debian and Fedora already ship.
Changes since 1.8 include VLAN (802.1Q/802.1ad) support, reading from
pcap files, an option to dump the whole packet in hex, option 82/121/
249/93/94/116 decoding, updated IANA option names and several fixes for
out-of-bounds reads on crafted packets.
Add a TUI option, enabled by default, for the new interactive session
tracking interface (-t). It depends on devel/yascreen.
PR: 297349
Reported by: diizzy
Sponsored by: Rubicon Communications, LLC ("Netgate")
devel/yascreen: New port, curses replacement library
yascreen is a small curses replacement library for daemons and embedded
applications. It has no external dependencies, supports internal and
external event loops, can work over stdin/stdout or a socket (including
basic telnet sequences) and handles Unicode.
It is needed by the interactive TUI of net/dhcpdump 2.x.
Sponsored by: Rubicon Communications, LLC ("Netgate")
