x11/xsnow 3.9.9
Create a snowy and Santa-y desktop
x11/xsnow: update to 3.9.9 release (+)
version 3.9.9
01: snow.c, xsnow.h and others: implement rotating flakes, following
the kind instructions of Rick Jansen, the godfather of xsnow.
version 3.9.8
moon.c: init_halo_surface: use correct expression for
initial brightness of halo.
Changelog: https://www.ratrabbit.nl/ratrabbit/xsnow/changelog/index.html
misc/mbuffer 20261015
Tool for buffering data streams
misc/mbuffer: Update to 20261015
Changes according to the ChangeLog in the distribution tar ball:
20261015:
- rollback 20260929
- removed obsolete interlock code needed for Linux < 3.14
- fix for MacOS statistics initialization
20260929 (WITHDRAWN - MacOS already worked since 20251025):
- added MacOS support (patch provided by Robert Smith, WANSecurity, Inc)
20260926:
- prefer info from fpathconf over PIPE_BUF
- integrated some patches from Peter Pentchev
- build fixes
- buffer allocation limitation
- typos and grammar fixes
sysutils/cpu-x 5.4.1
Gathers information about CPU, motherboard, and more
sysutils/cpu-x: the port had been updated and improved (+)
- Update to the latest version 5.4.1; the program had been
rewritten in C++ hence gtk30 -> gtkmm30 in USE_GNOME list
- Adds support for CPU Technology DB (needs libcpuid 0.8.0+)
- Fixes the build against modern tools (NASM 3.0, CMake 3.31)
- Switched from unsatisfactory GLFW to EGL to properly detect
OpenGL and UMD on more GPU types; since `graphics/libglvnd'
is a popular desktop dependency, enable it for GUI flavor
- Fix CONFLICTS_INSTALL, prune our patches merged upstream
PR: 287310, 297951
Reported by: portscout
x11-wm/wideriver 1.4.0_1
Tiling window manager for the river-classic wayland compositor
x11-wm/wideriver: Fix run dependency
- Wideriver is only compatible with x11-wm/river-classic
- Update COMMENT and pkg-descr
- Bump PORTREVISION
Reported by: Alan Braslau <alan.braslau@icloud.com> (via private email)
www/pomerium: Fix build with WITH_PIE
Go cannot internally link PIE executables on freebsd/amd64, so
-buildmode=pie (added by Uses/go.mk when WITH_PIE is set) requires
cgo and external linking. The port builds with CGO_ENABLED=0, like
upstream does, so the build failed with:
-buildmode=pie requires external (cgo) linking, but cgo is not enabled
Set PIE_UNSAFE to build a regular executable instead.
security/wazuh-manager 4.14.9
Security tool to monitor and check logs and intrusions (manager)
security/wazuh-server 4.14.9
Components for analyze the data received from the agents
security/wazuh*: update to 4.14.9
- Update cpython bundle to 3.11.17
- Remove obsolete patch file
- Use PYTHON_DISTVERSION for avoid temporarily pkg-plist issues when
system python is updated. The best is keep system python and bundle
python with the same version.
ChangeLog at:
https://documentation.wazuh.com/current/release-notes/release-4-14-9.html
PR: 299490
(cherry picked from commit 47b0693c6d1b507bd0acd1908d8317c0e43f547a)
security/wazuh-manager 4.14.9
Security tool to monitor and check logs and intrusions (manager)
security/wazuh-server 4.14.9
Components for analyze the data received from the agents
security/wazuh*: update to 4.14.9
- Update cpython bundle to 3.11.17
- Remove obsolete patch file
- Use PYTHON_DISTVERSION for avoid temporarily pkg-plist issues when
system python is updated. The best is keep system python and bundle
python with the same version.
ChangeLog at:
https://documentation.wazuh.com/current/release-notes/release-4-14-9.html
PR: 299490
lang/php82 8.2.35_1
PHP Scripting Language (8.2.X branch)
lang/php83 8.3.36_1
PHP Scripting Language (8.3.X branch)
lang/php84 8.4.27_1
PHP Scripting Language (8.4.X branch)
lang/php85 8.5.12_1
PHP Scripting Language (8.5.X branch)
lang/php8*: Force fresh FreeBSD.org package builds.
No functional changes to the ports.
The packages were built manually today from a temporary branch to
incorporate the RCE fixes without triggering unnecessary rebuilds.
These fixes were cherry-picked onto the previous package build rather
than built from a published branch.
Bump the ports to trigger fresh builds from the published tree,
ensuring reproducibility and accurate package metadata.
MFH: 2026Q4
(cherry picked from commit 44fd248dd4d7337c7e3517d1852be9d3dfd6071c with
lmdb reference removed)
lang/php82 8.2.35_1
PHP Scripting Language (8.2.X branch)
lang/php83 8.3.36_1
PHP Scripting Language (8.3.X branch)
lang/php84 8.4.27_1
PHP Scripting Language (8.4.X branch)
lang/php85 8.5.12_1
PHP Scripting Language (8.5.X branch)
lang/php8*: Force fresh FreeBSD.org package builds.
No functional changes to the ports.
The packages were built manually today from a temporary branch to
incorporate the RCE fixes without triggering unnecessary rebuilds.
These fixes were cherry-picked onto the previous package build rather
than built from a published branch. The cherry-picks also omitted the
lmdb change in 85ba298b7e0.
Bump the ports to trigger fresh builds from the published tree,
ensuring reproducibility and accurate package metadata.
MFH: 2026Q4
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Build the auth_ldap module from its own source port, and add the
cert_expiry, ip_anon, stream limit_req and syslog5424 modules.
Sponsored by: Netzkommune GmbH
www/nginx-module-syslog5424: Add New Port
The syslog5424 module sends an access line in the format RFC 5424 asks for:
version, RFC 3339 timestamp, hostname, app name, process id, message id and
structured data.
Sponsored by: Netzkommune GmbH
www/nginx-module-stream-limit-req: Add New Port
The stream limit_req module rate limits incoming connections in the stream
subsystem. limit_req_zone and limit_req are spelled and counted as in the
http module, so a rate written down once reads the same for TCP, UDP and
HTTP.
Sponsored by: Netzkommune GmbH
www/nginx-module-ip-anon: Add New Port
The ip_anon module masks the host part of the client address.
$remote_addr_anon and $binary_remote_addr_anon carry the result, for a log
or a limit key that is not meant to name anybody.
Sponsored by: Netzkommune GmbH
www/nginx-module-cert-expiry: Add New Port
The cert_expiry module reads every file an ssl_certificate names, when the
configuration is read and again on a timer, and reports how long the
certificate still has. $ssl_expiry_days carries the days left into a log
format.
Sponsored by: Netzkommune GmbH
www/nginx-module-auth-ldap: Add New Port
The auth_ldap module authenticates HTTP basic credentials against an LDAP
directory. An ldap_server block describes one directory, require rules say
who is let in, and every worker keeps a pool of connections to it.
Sponsored by: Netzkommune GmbH