misc/mcp-inspector: regenerate powerpc64* distinfo for 2.12.0
The 2.12.0 update only regenerated the amd64 and aarch64 distinfo.
Reported by: yuri (maintainer)
net/samba425 4.25.1
Free SMB/CIFS and AD/DC server and client for Unix
net/samba425: update to 4.25.1
* BUG 16274: CTDB: Cannot find device "<iface>@<link>": need to extract real
interface names
* BUG 16200: generate_unique_u64() may not protect against veto_value
* BUG 16261: Rename with ReplaceIfExists to a target differing only in case
creates a duplicate instead of replacing (regression in
* BUG 16263: Samba 4.25.0 fails to build on macOS
* BUG 16258: Python smbconf transaction_start() lacks a talloc stack frame
with CTDB
* BUG 16265: Linux i686 build fails on dynamic_lookup
* BUG 16276: Access control bypass via vfs_ceph_rgw case-insensitive open
(CVE-2026-109411)
* BUG 16287: vfs_acl_xattr crashes on zero-sized flistxattr queries
* BUG 16235: Dynamic interface support in smbd is racy
* BUG 16254: CTDB database operations can be run against incorrect nodes
* BUG 16273: A node can be banned because it tries to run recovery after
losing the cluster lock
* BUG 15857: All backend log should honor global log level "log level = "
* BUG 15324: fruit:time machine max size can only be set to an integer and is
ignored if user sets a float
Reported by: portscout
Sponsored by: Klara, Inc.
Approved by: samba (kiwi)
www/ot-recorder 1.0.3_1
Store and access data published by OwnTracks apps
www/ot-recorder: Mark BROKEN
Fails to build after databases/lmdb rework for allowing two different
versions installed at the same time
Reported by: pkg-fallout
x11-fm/worker 6.0.0
X11 file manager based on Directory Opus of AmigaOS
x11-fm/worker: update the port to the next major release 6.0.0
Most visible changes are internal text editor, copy and rename
based on regular expressions, nanoseconds timestamp support.
On the port's side, there is optional Imlib2 support, C++20 is
now used for compilation, switch to smaller .tar.zst distfile.
Reported by: portscout
filesystems/avfs: update the port to version 1.4.0
- Add alternative WWW and MASTER_SITES locations
- Drop DEBUG option and amend CONFIGURE_ARGS in
accordance to WITH_DEBUG, a user-facing variable
- Add Lzip compression support and enable it with
Zstd, as both are light or common dependencies
Reported by: portscout
databases/pgdog 0.1.62
PostgreSQL connection pooler, load balancer and database sharder
databases/pgdog: Update 0.1.61 => 0.1.62
* Move libpg_query crate replacement from post-extract to pre-patch
as `make cargo-crates` was unable to update crates:
`make cargo-crates > Makefile.crates`
rmdir: /libpg_query: No such file or directory
* Remove upstreamed patch
PR: 299460
x11/cosmic-app-library: New port: Modern application launcher for COSMIC
COSMIC App Library is a modern application launcher for the
COSMIC desktop environment that displays graphical apps
in a neat, airy grid.
WWW: https://github.com/pop-os/cosmic-app-library
PR: 299771
Reported by: Josh Megnauth <jo.sh@tutanota.com> (new maintainer)
databases/pgloader3 3.6.9_10
Data loading and migration tool for PostgreSQL using the COPY command
databases/pgloader3: Fix crash during "reset sequences"
Column names that need to be quoted, will already be so quoting them
again results in sql errors.
Patch taken from:
https://github.com/codereverser/pgloader/commit/aba754a759f28701d94551e85c6b9c369e63698c
Upstreaming is of no use as upstream rewrote pgloader in java and is not
accepting patches for v3 anymore.
While at it:
- Replace PORTVERSION with DISTVERSION.
- Add libzstd to LIB_DEPENDS.
- Fix warnings from portclippy.
- Refresh patch.
PR: 298832
Approved by: freebsd-washroom@duhanic.com (maintainer, timeout 1 month)
Sponsored by: UNIS Labs (vvd)
Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>
MFH: 2026Q4
(cherry picked from commit 06a8a3bbb6302346f8fe2a8822286528f68fdf73)
databases/pgloader3 3.6.9_10
Data loading and migration tool for PostgreSQL using the COPY command
databases/pgloader3: Fix crash during "reset sequences"
Column names that need to be quoted, will already be so quoting them
again results in sql errors.
Patch taken from:
https://github.com/codereverser/pgloader/commit/aba754a759f28701d94551e85c6b9c369e63698c
Upstreaming is of no use as upstream rewrote pgloader in java and is not
accepting patches for v3 anymore.
While at it:
- Replace PORTVERSION with DISTVERSION.
- Add libzstd to LIB_DEPENDS.
- Fix warnings from portclippy.
- Refresh patch.
PR: 298832
Approved by: freebsd-washroom@duhanic.com (maintainer, timeout 1 month)
Sponsored by: UNIS Labs (vvd)
Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>
MFH: 2026Q4
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
security/vuxml: adjust linux-rl9-libxslt package for
b0a3466f-5efc-11f0-ae84-99047d0a6bcc (+)
Rerolled linux-rl9-libxslt-1.1.34_5 now includes fixes for mentioned CVEs
textproc/antiword 0.37_6
Application for displaying Microsoft(R) Word documents
textproc/antiword: Deprecate
Upstream has been dead since the 0.37 release in 2005. The only
remaining fork (github.com/grobian/antiword) has no releases and does
not address security issues.
CVE-2026-111677 (heap out-of-bounds read in vGet8LstInfo) and
CVE-2026-111678 (stack out-of-bounds read in vGet8PapInfo and
vGet8ChrInfo) are unfixed upstream and in every distribution.
Set to expire on 2026-11-30.
Sponsored by: Netzkommune GmbH
(cherry picked from commit 100c915a873d51c284aa4febb506da8db7a3a440)
textproc/antiword 0.37_6
Application for displaying Microsoft(R) Word documents
textproc/antiword: Deprecate
Upstream has been dead since the 0.37 release in 2005. The only
remaining fork (github.com/grobian/antiword) has no releases and does
not address security issues.
CVE-2026-111677 (heap out-of-bounds read in vGet8LstInfo) and
CVE-2026-111678 (stack out-of-bounds read in vGet8PapInfo and
vGet8ChrInfo) are unfixed upstream and in every distribution.
Set to expire on 2026-11-30.
Sponsored by: Netzkommune GmbH
www/py-django-extensions: Update 3.2.3 => 4.1
Changelog:
https://github.com/django-extensions/django-extensions/blob/4.1/CHANGELOG.md
Port changes:
- Switch to USE_PYTHON=pep517.
- Add concurrent to USE_PYTHON.
- Add mail/py-aiosmtpd to RUN_DEPENDS for mail_debug.
- Patch the PEP 639 license string for the setuptools in the tree.
- Fix portlint warnings.
PR: 299899
Approved by: Kevin Golding <ports@caomhin.org> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 1c5cc9c088aeb0d7f94c4ccab4ee0acf29d3839a)
www/py-django-extensions: Update 3.2.3 => 4.1
Changelog:
https://github.com/django-extensions/django-extensions/blob/4.1/CHANGELOG.md
Port changes:
- Switch to USE_PYTHON=pep517.
- Add concurrent to USE_PYTHON.
- Add mail/py-aiosmtpd to RUN_DEPENDS for mail_debug.
- Patch the PEP 639 license string for the setuptools in the tree.
- Fix portlint warnings.
PR: 299899
Approved by: Kevin Golding <ports@caomhin.org> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
misc/py-mmcv 2.2.0_6
OpenMMLab: Foundational library for computer vision research
misc/py-mmcv: Fix build on Python 3.13 and the runtime dependencies
PR: 299961
setup.py exec()s mmcv/version.py and then reads __version__ back
from locals(), which no longer works on 3.13 (PEP 667): exec into an
explicit namespace instead.
The package also could not be installed or imported on its own: the
extension links against libc10.so from py-pytorch (only a build
dependency so far), and mmcv.image imports cv2 at the top level. Add
both py-pytorch and py-opencv-python-headless to RUN_DEPENDS.
While here, follow the Python Ports Policy, add concurrent to
USE_PYTHON, fix portlint warnings and document the patches.
x11/bhotkeys-dwm: New port
Stock dwm chords for bhotkeys. SUPERASMODKEY installs those
rows with Super as Mod, for a dwm built with that option.
Reviewed by: fuz (previous revision), jrm (previous revision)
Differential Revision: https://reviews.freebsd.org/D60934
x11/libinput: Fix the Python dependencies of the libinput tools
The Python tools in libexec/libinput (libinput-measure-*, -analyze-*,
-replay, ...) import libevdev, i.e. python-libevdev
(devel/py-libevdev), never evdev (python-evdev), yet RUN_DEPENDS lists
devel/py-evdev. Depend on the package they actually use. This also
stops pulling devel/py-evdev into every desktop installation.
libinput-analyze-recording, -analyze-per-slot-delta,
-analyze-touch-down-state, -analyze-buttons and libinput-replay import
yaml, which is not declared. Without PyYAML the analyze tools fail
with ModuleNotFoundError and libinput-replay refuses to run ("One or
more python modules are missing"). Add py-pyyaml to RUN_DEPENDS.
While here, fix portlint warnings.
PR: 299873
lang/gauche 0.9.15_3
Scheme script interpreter with multibyte character handling
(Only the first 10 of 32 items in this commit are shown above. )
Templates/config.(guess|sub): Update to 2026-05-17
Also remove our local changes that replaced x86_64 with amd64 because
these complicate porting by forcing port maintainers to replace x86_64
with amd64 in configure scripts.
Additional changes:
bsd.port.mk: Apply S/amd64/x86_64/ to CONFIGURE_TARGET. This is not
required to run configure but some ports need to use this in pkg-plist.
comms/qico, news/fidogate:
CONFIGURE_TARGET shouldn't contain "--build". Just remove it altogether
because the default value is fine.
devel/autoconf, devel/automake:
Bump PORTREVISION because they package config.* scripts.
lang/gauche, math/fricas, math/gap, math/nlopt, math/octave, net/pjsip:
Bump PORTREVISION because pkg-plist depends on CONFIGURE_TARGET.
benchmarks/pathchirp, databases/sqlrelay, devel/pcc-libs, lang/ocaml,
lang/pcc, math/adol-c, math/scilab, math/yices, multimedia/libtheora,
multimedia/libxine, security/beecrypt, sysutils/ltrace,
sysutils/pstacku, textproc/gnugrep:
Add, remove, or change patching related to x86_64 versus amd64.
audio/festalon:
Configuring with x86_64 instead of amd64 enables some MMX code that
isn't entirely correct. Patch it based on the i386 code. While here,
enable building the i386 package.
lang/pfe:
Configuring with x86_64 instead of amd64 enables the use of global
register variables but these are a GCC extension that Clang does not
support. Add --without-regs to disable them. This also fixes the i386
build.
editors/openoffice-*:
The build system runs config.guess and the newer version returns i586
for i386. Let build scripts treat i[3456]86 like i386 as on Linux.
math/reduce-psl:
The build system uses the output of config.guess to create directories
but this script might return something like i586-unknown-freebsd14.5
while the ports tree uses i386-portbld-freebsd14.5. Instead of running
config.guess plug in the value of CONFIGURE_TARGET. The proper fix
would be to let the configure script generate the build scripts so they
can use $host from the configure script but that's more work.
PR: 299273
Exp-run by: antoine
Tools/scripts/rmport: change method to look for PRs
Use the Bugzilla REST interface to look for PRs files against the
port(s) to be deleted as that one still allows anonymous access.
devel/py-envs 1.4
Easy access of environment variables from Python
devel/py-envs: Update to 1.4 and fix envs command
1.3 imports raw_input from click._compat, which click 8 removed, so
envs.util and the envs CLI failed to import. 1.4 uses input().
- Build with pep517: the setup.py that poetry generated for 1.4 is
rejected by setuptools 63 ("'extras_require' must be a dictionary")
- Add a CLI option (off by default) for the envs command: envs.cli
imports click, jinja2 and terminaltables (upstream's "cli" extra),
and the port had no RUN_DEPENDS at all, so the command failed with
ModuleNotFoundError. By default the port installs only the envs
module, which needs nothing beyond Python, and no longer installs
the broken command; with CLI on, it installs the command and depends
on the three modules.
While here, follow the Python Ports Policy.
PR: 299869
Approved by: Ivan Rozhuk <rozhuk.im@gmail.com> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 8f0a3b9ffdd97e32ab359924a2f68cb7698de93a)
devel/py-envs 1.4
Easy access of environment variables from Python
devel/py-envs: Update to 1.4 and fix envs command
1.3 imports raw_input from click._compat, which click 8 removed, so
envs.util and the envs CLI failed to import. 1.4 uses input().
- Build with pep517: the setup.py that poetry generated for 1.4 is
rejected by setuptools 63 ("'extras_require' must be a dictionary")
- Add a CLI option (off by default) for the envs command: envs.cli
imports click, jinja2 and terminaltables (upstream's "cli" extra),
and the port had no RUN_DEPENDS at all, so the command failed with
ModuleNotFoundError. By default the port installs only the envs
module, which needs nothing beyond Python, and no longer installs
the broken command; with CLI on, it installs the command and depends
on the three modules.
While here, follow the Python Ports Policy.
PR: 299869
Approved by: Ivan Rozhuk <rozhuk.im@gmail.com> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
misc/claude-code 2.1.310
Agentic coding tool from Anthropic that lives in your terminal
misc/claude-code: update 2.1.306 → 2.1.310
This update changes claude-code back to use NodeJS code
so that the Linux binary isn't involved any more.
It extracts the NodeJS code using the unhare extractor.
PR: 298047
textproc/py-enrich: update to 1.3.0
This release has been published to the upstream GitHub repo for more
than 2 years, but never yet got pushed to PyPI. Given the concerns
raised in PR 299923 which have been largely addressed in the GitHub
release, switch to USE_GITHUB rather than PyPI and update to 1.3.0.
* PEP 517 using setuptools as back-end
* Add pytest. All tests pass. Note that `pytest-cov` and
`pytest-xdist` test dependencies aren't actually used anywhere,
despite being listed in ${WRKSRC}/.config/requirements-test.in, so
I've omitted them from TEST_DEPENDS
* Drop the outdated setuptools_scm_git_archive build dependency in
favour of the native Git handling in more recent setuptools-scm.
* Update dependency version requirements for setuptools-scm and rich.
PR: 299923
Reported-by: repology, Patrick Crandol
Changes: https://github.com/pycontribs/enrich/releases/tag/v1.3.0
www/web2ldap 1.8.1_6
Python-based WWW gateway to LDAP servers
www/web2ldap: Fix with Python 3.13+
web2ldap imports four modules that Python 3.13 removed:
- cgi (parse_header and parse_multipart in web/forms.py) and imghdr
(JPEG/PNG syntax validation): depend on www/py-legacy-cgi and
devel/py-standard-imghdr with Python 3.13+.
- crypt (the 'crypt' userPassword scheme): make the import optional; the
scheme is not offered when crypt is missing, the hashlib schemes are
unaffected.
- sndhdr (Audio syntax validation): make the import optional and check
the .au magic number directly, which is the test sndhdr.test_au()
starts with.
files/patch-setup.py held a git diff that creates files/patch-setup.py
rather than the patch itself, so setup.py was never patched. Replace
it with the intended patch (python_requires '>=3.6.*' is not a valid
specifier; use '>=3.6') and document it.
While here, switch to USE_PYTHON=pep517 (the package metadata becomes
dist-info), fix portlint warnings and expand pkg-descr from the upstream
description.
PR: 299844
Submitted by: Patrick Crandol
net/haproxy 3.4.7
Reliable, high performance TCP/HTTP load balancer
net/haproxy-devel 3.5.d8
Reliable, high performance TCP/HTTP load balancer
net/haproxy28 2.8.31
Reliable, high performance TCP/HTTP load balancer
net/haproxy30 3.0.30
Reliable, high performance TCP/HTTP load balancer
net/haproxy32 3.2.26
Reliable, high performance TCP/HTTP load balancer
net/haproxy33 3.3.17
Reliable, high performance TCP/HTTP load balancer
net/haproxy: on stop, terminate immediatly rather than waiting for connections
to close. Provide haproxy_sig_stop variable to fallback to soft-stop behaviour.
Suggested by: phk
math/py-mathics 9.0.0_7
General-purpose computer algebra system (CAS)
math/py-mathics: Fix with mpmath 1.4 and llvmlite 0.45+
- mathics/core/atoms.py annotates Number.to_mpmath with
mpmath.ctx_mp_python.mpf, which mpmath 1.4 renamed, so
mathics.core.atoms and most builtins fail to import. Use the public
mpmath.mpf.
- mathics/compile/compile.py calls llvmlite.binding.initialize(),
which raises RuntimeError since llvmlite 0.45 (initialization is
automatic), breaking Compile and every builtin module that imports
it (calculus, plot, ...). Drop the call, as upstream 10.0 did.
While here, follow the Python Ports Policy, fix portlint warnings and
document the patches.
PR: 299971
MFC after: 5 days
devel/p5-DateTime-Format-IBeat: Remove expired port
2026-10-23 devel/p5-DateTime-Format-IBeat: Upstream distribution has never had
an authorized release on CPAN
finance/p5-Business-WorldPay-Junior: Remove expired port
2026-10-23 finance/p5-Business-WorldPay-Junior: Upstream module withdrawn by its
author on CPAN
finance/p5-Business-OnlinePayment-SurePay: Remove expired port
2026-10-23 finance/p5-Business-OnlinePayment-SurePay: Backend for the defunct
Pure Payments SurePay gateway
finance/p5-Business-OnlinePayment-Network1Financial: Remove expired port
2026-10-23 finance/p5-Business-OnlinePayment-Network1Financial: Backend for the
defunct Network1Financial payment gateway
dns/p5-Net-DNS-ZoneFile-Fast: Remove expired port
2026-10-23 dns/p5-Net-DNS-ZoneFile-Fast: Upstream module marked obsolete by its
author
Fix MOVED while here.
[NEW PORT] security/mkcacerts: Generate a Java PKCS#12 truststore from
certctl(8)'s truststore
mkcacerts reads the trusted certificates maintained by certctl(8) and
generates a Java-compatible PKCS#12 truststore from them, so that a Java
Virtual Machine's default truststore can be derived from the system
truststore without invoking a JVM or keytool to build it.
WWW: https://github.com/michael-o/freebsd-mkcacerts
