biology/py-crossmap 0.7.4_1
Lift over genomics coordinates between assemblies
biology/py-crossmap: urrlib fix, move to pep517
Patch upstream issue with modern urrlib use
Patch PORTNAME issue blocking switch to pep517
Note: PORTNAME does not match PYPI upper/lower case
Leaving for now to avoid pkg-upgrade failures
PR: 299804
Reported by: patrick@crandol.com
java/openjdk17: Version 17.0.21.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
(cherry picked from commit c059131000221f11bb3f1bf39eaefef8a1f3e4ef)
java/openjdk17: Version 17.0.21.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
www/py-mailman-hyperkitty: Switch to USE_PYTHON=pep517
Build with the PEP 517 frontend (setuptools legacy backend; the source
has no [build-system]); the package metadata becomes dist-info.
While here, set NO_ARCH (the port installs only pure-Python files) and
add concurrent to USE_PYTHON. Also clarify LICENSE and add LICENSE_FILE.
PR: 299862
java/openjdk21: Version 21.0.13.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
(cherry picked from commit a952ceac5d3c19984214bdbf9daaf49b97f9c25e)
java/openjdk21: Version 21.0.13.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
java/openjdk25: Version 25.0.5.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
(cherry picked from commit 82145c8e18fa5d657233f3c7c5f5c85711a656b8)
java/openjdk25: Version 25.0.5.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
www/trafficserver 10.1.5
Fast, scalable and extensible HTTP proxy server
www/trafficserver: Update to 10.1.5
traffic_manager is gone since 10.0, the rc.d script now starts
traffic_server. Runtime, log and cache directories are compiled to the
/var paths the package creates; before, traffic_server looked for them
under ${PREFIX}/var and did not start.
Changelog: https://github.com/apache/trafficserver/blob/10.1.5/CHANGELOG-10.1.5
PR: 292748
Approved by: gaod@hychen.org (maintainer timeout)
Security: 3caa3b4b-d2ab-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
(cherry picked from commit 438e566afbe9551213d43f47a78a245a5f36fe02)
www/trafficserver 10.1.5
Fast, scalable and extensible HTTP proxy server
www/trafficserver: Update to 10.1.5
traffic_manager is gone since 10.0, the rc.d script now starts
traffic_server. Runtime, log and cache directories are compiled to the
/var paths the package creates; before, traffic_server looked for them
under ${PREFIX}/var and did not start.
Changelog: https://github.com/apache/trafficserver/blob/10.1.5/CHANGELOG-10.1.5
PR: 292748
Approved by: gaod@hychen.org (maintainer timeout)
Security: 3caa3b4b-d2ab-11f1-bae2-3497f65b111b
With hat: ports-secteam
Sponsored by: Netzkommune GmbH
audio/cmt 1.18
The Computer Music Toolkit - a collection of LADSPA plugins
audio/cmt: update to 1.18
Changelog: https://www.ladspa.org/cmt/changes.html
take maintainership
Event: Works Must Run
(cherry picked from commit 8f7115603814403601b753ef26bd690d86f6fd60)
audio/caps-plugins: update to 0.9.26
Changelog: http://quitte.de/dsp/caps.html#CHANGES
take maintainership
Event: Works Must Run
(cherry picked from commit 978b455e60d0866d8c859cde22611716afbdca4c)
lang/tcl90: fix USE_LDCONFIG to reflect actual shlib location
PR: 300181
Approved by: gahr (tcltk, maintainer)
Event: Works Must Run
(cherry picked from commit 1eeb65607ee2919b35648c923362a88520806654)
sysutils/openvox-server8: Update to 8.17.0
ChangeLog:
https://github.com/OpenVoxProject/openvox-server/blob/8.x/CHANGELOG.md#8170-2026-10-07
Bundle the java flavor of the latest json-2.x gem to avoid startup
issues when a newer version of the json ruby gem is installed.
With hat: puppet
(cherry picked from commit 24c95bcade94bcf26152055a842dd5b2b6f96c5c)
french/py-grammalecte-fr: Update to 2.3.0
The bundled bottle 0.12.18 of 1.11.0 imports inspect.getargspec, which
was removed in Python 3.11, so grammalecte-server.py fails to start.
2.3.0 bundles bottle 0.13.4, which no longer uses inspect.getargspec or
the cgi module, and fixes grammalecte-server.py (its shebang and a
sys.version string compare).
www.dicollecte.org no longer serves the distfile (it returns a small
non-zip page); fetch from www.grammalecte.net, which has 2.3.0.
While here, add concurrent to USE_PYTHON (bin/grammalecte-cli.py,
bin/grammalecte-server.py) and set NO_ARCH (pure Python).
Switch to USE_PYTHON=pep517 (the package metadata becomes dist-info).
PR: 299902
devel/py-logfire: New port: Pydantic Logfire Python SDK and command-line
interface
Dependency of misc/py-codecarbon.
Approved by: no need for approval according to bapt@
devel/py-pydantic-handlebars: New port: Handlebars template engine for LLM
prompts, built on Pydantic
Dependency of devel/py-logfire-sdk.
Approved by: no need for approval according to bapt@
devel/py-pytest-vcr: New port: Plugin for managing VCR.py cassettes
Dependency of devel/py-logfire-sdk.
Approved by: no need for approval according to bapt@
ports-mgmt/portlint: warn when depending on openldap-client directly
Add a check that flags direct dependencies on
net/openldap2*-client or databases/openldap2*-client,
suggesting USES+=ldap instead. The corresponding
-server port is exempted since that dependency is expected.
PR: ports/297834
Approved by: maintainer timeout
lang/rust 1.99.1_1
Language with a focus on memory safety and concurrency
lang/rust: Fix build with CPUTYPE and the WASM option
cc-rs appends the target specific CFLAGS_<target> to the generic CFLAGS
instead of replacing them, so the -march that CPUTYPE adds for the host
was also passed when compiler-builtins' C code is built for
wasm32-unknown-unknown, where clang rejects it:
clang: error: unsupported option '-march=' for target
'wasm32-unknown-unknown'
Clear CFLAGS/CXXFLAGS for the bootstrap and pass the flags per target
only, without -march/-mtune/-mcpu for wasm32. The flags for the host
target are unchanged.
Tested with lang/rust-nightly and CPUTYPE=skylake-avx512.
PR: ports/299355
Approved by: maintainer timeout
security/openpgp-card-tools: [NEW PORT] CLI tool for interacting with OpenPGP
cards
The openpgp-card-tools package provides 'oct', a command-line tool for
interacting with OpenPGP cards (YubiKey, Nitrokey and other
OpenPGP-compliant smart cards and security tokens). It supports listing
card information, managing PINs, generating and importing keys, and
performing cryptographic operations directly on the hardware.
WWW: https://codeberg.org/openpgp-card/openpgp-card-tools
PR: 293960
Co-authored-by: alven@
devel/libabigail 2.10
ABI Generic Analysis and Instrumentation Library
devel/libabigail: update to 2.10, recent upstream
Release notes at
https://sourceware.org/pipermail/libabigail/2026q2/006484.html
This isn't the latest release (which is 3.0) because that one
needs a lot more work -- there's new dependencies, multi-threading
that needs to be sorted out with those dependencies, etc.
www/dillo2 3.2.0_1
Fast, small graphical Web browser built upon fltk
www/dillo2: allow to build the port against FLTK versions 1.[34].x
While not officially supported, there is an ongoing work-in-progress
and the current state is that "FLTK 1.4 [...] using the Xft backend
produces identical rendering results as FLTK 1.3.11, which is a good
outcome."
I've been running it for a few days and did not observe any graphic
bugs or glitches, so let's lift the version restriction in advance.
Upstream GH issues: 439, 440
sysutils/py-datalad: fix build by changing dependency to git from git@lite
Some dependency changed git@lite to git and this caused a conflict.
Reported by: fallout
databases/immudb: Remove expired port
2026-10-27 databases/immudb: Not actively maintained. Multiple versions behind
on upstream. Please take maintainership if you use this.
sysutils/cni-epair 1.2.0
CNI plugin giving containers a LAN address via epair and bridge
sysutils/cni-epair: Update to 1.2.0
Containers can now join a VLAN of a bridge with vlanfilter, set per
network in the epair plugin block (vlan, taggedVlans).
Changes: https://github.com/daemonless/cni-epair/releases/tag/v1.2.0
PR: 300139
Approved by: acm (mentor)
www/pomerium-envoy-custom: update to 1.37.0.20261026
Update to envoy-custom commit 30d955cf07bd, which moves the bundled
Envoy from 1.38.5 to 1.38.8, as required by pomerium 0.33.6.
While here, drop the unused nghttp2 and libmaxminddb dependencies.
Envoy always builds its own patched nghttp2, and pomerium does not
enable the GeoIP extension, so neither system library was linked.
