lang/python3113.11.17

lang/python311: update to 3.11.17

Changelog: https://docs.python.org/3.11/whatsnew/changelog.html#python-3-11-17-final

lang/python311: fix order of divert(4) commits

Use https://github.com/python/cpython/pull/96536 directly

PR: 267648, 298106

lang/python311: fix recvfrom() and sendto() on divert(4) socket

Backport of:
https://github.com/python/cpython/pull/142993
https://github.com/python/cpython/pull/143514

PR: 298106

lang/python311: update to 3.11.16

Changelog: https://docs.python.org/release/3.11.16/whatsnew/changelog.html

lang/python311: pull in upstream commits addressing vuxml entries

Security: cf75f572-378a-11f1-a119-e36228bfe7d4
Security: b8e9f33c-375d-11f1-a119-e36228bfe7d4

Event: BSDCan 2026

lang/python3: use textproc/expat2 for pyexpat instead of bundled

...to match lang/python314

Event: Works Must Run

lang/python31{0,1,2}: reroll PATCHFILES after repository growth

Each commit checksum now shows one additional character, but the
diff contents are identical.

PR: 295595

lang/python311: pull in upstream commits addressing webbrowser.open() issue

Security: 9fdad262-2e0f-11f1-88c7-00a098b42aeb
PR: 294246

devel/libtextstyle, devel/gettext*: Update to 1.0

devel/gettext-tools: Use external libunistring and libxml2.

lang/python*: Remove dependency on gettext-tools.  It isn't used and
it is gettext-tools that depends on python now.

PR:		293963
Exp-run by:	antoine

lang/python311: update to 3.11.15

Changelog: https://docs.python.org/release/3.11.15/whatsnew/changelog.html

lang/python311: pull in upstream commits addressing vuxml entries

Security: bfe9adc8-0224-11f1-8790-c5fb948922ad

lang/python311: pull in upstream commits addressing vuxml entries

Security: 613d0f9e-d477-11f0-9e85-03ddfea11990

Event: Winter Field Day 2026
PR: 291609

Revert "Reapply "lang/python31[012]: deprecate 2026-03-31""

This reverts commit a132acab8736bad2fa59e941d5d77da4ea7688a0.
This commit is disrespectful for people trying to make the ports tree work with version 3.12

With hat:	pkgmgr

Reapply "lang/python31[012]: deprecate 2026-03-31"

This reverts commit 666108a04abc08a18791425f967b26357dd4d96d.

Revert "lang/python31[012]: deprecate 2026-03-31"

The latest 3.12 release contains the referenced security fixes. The
other two branches are not EOL.

PR: 291609
With hat: python
Requested by: antoine

This reverts commit 66173037774d8648a59e30b424692ae80dbc20b3.

lang/python31[012]: deprecate 2026-03-31

Since the current Python upstream maintainers have not yet released
security fix releases to match 3.14.2 and 3.13.11, meaning that we have
about three unfixed security issues per 3.12/3.11/3.10 release, and the
current FreeBSD python@ team is unwilling to take approved upstream
patches individually (see PR), we need to expedite the removal of
vulnerable versions and the transition to 3.13/3.14.  Deprecate all
"security support" releases of Python that are not in the bugfix phase.

PR:		291609

lang/python311: Update to 3.11.14

PR:		290159
Exp-run by:	antoine@

lang/python31{1,2}: enable LTO on powerpc64le

The crash doesn't happen anymore

*: Update comment references to e2fsprogs-libuuid to libuuid.

PR:		251489

python.mk: rename PYTHON_EXT_SUFFIX to PYTHON_TAG, document, etc

EXT_SUFFIX, according to PEP 3149, refers to the full tag and
extension for compiled extension module objects, eg .cpython-311.so,
.cpython-313t.so, etc. We do not use the correct semantic meaning,
and this usage becomes ambiguous and confusing when tags do not
match between bytecode and compiled extension module objects.

Rename our PYTHON_EXT_SUFFIX to PYTHON_TAG to align with PEP 3147's
specification of a magic tag, which consists of implementation name
and shorthand version only. This is meant for bytecode and other
files containing this tag in their filename that do not depend on
a specific Python ABI for the same version. Chase all existing
consumers.

Introduce PYTHON_SOABI to align with PEP 3149's specification of a
tag, which consists of implementation name, shorthand version and
any ABI flags present (this and PYTHON_TAG are identical without
ABI flags). This is meant for compiled extension module objects and
other files that depend on a specific Python ABI for the same
version.

Add documentation for these variables that our PYTHON_EXT_SUFFIX
never had.

PR: 274671
Event: Kitchener-Waterloo Hackathon 202506

lang/python311: Update to 3.11.13

PR:		287313
Reported by:	wen <wenheping2000@hotmail.com>
Exp-run by:	antoine@

lang/python311: pull in upstream commit addressing CVE-2025-4516

Reference: https://github.com/python/cpython/pull/134341

PR: 287009

lang/python311: Update to 3.11.12

PR:		285971
Reported by:	wen@
Exp-run by:	antoine@

lang/python311: Update to 3.11.11

PR:		283139
Reported by:	wen@
Exp-run by:	antoine@

lang/python311: Update to 3.11.10

PR:		281379
Reported by:	wen@
Exp-run by:	antoine@

lang/python311: fix stage with DEBUG option ON

lang/python311: disable LTO on powerpc64le

While LTOized python seems mostly fine, it crashes during build of x11/mate-terminal:
pid 71560 (python3.11), jid 151, uid 65534: exited on signal 11 (core dumped)

After disabling LTO, x11/mate-terminal builds fine.

lang/python311: refresh LibreSSL patches

LibreSSL 3.9 introduced X509_STORE_get1_objects(3) so modify the
preprocessor guard to account. Prior to LibreSSL < 3.9 becoming
EOL, an additional conditional was needed to copy LibreSSL 3.9's
X509_STORE_get1_objects(3) as the included implementation for
OpenSSL < 3.3 clashed with LibreSSL.

Event: ARRL/RAC Field Day 2024
PR: 279390

lang/python311: Improve build times

Don't generate debug symbols by default, we discard these anyway and on my
Tigerlake laptop it reduces build time roughly by 25% with LTO enabled
Switch from -flto=thin to (fat)lto, there's no parallization so it's
actually slower and produces slightly larger binaries

PR:		279585
Approved by:	portmgr (maintainer timeout, 2+ weeks)

lang/python*: Remove GNU_CONFIGURE_MANPREFIX=${PREFIX}/share after 9fd7ee1cdf6cbd5528159b58a966e1a40e2909a9

lang/python311: Update to 3.11.9

Changes:	https://docs.python.org/release/3.11.9/whatsnew/changelog.html

lang/python3*: bump PORTREVISION following mpdecimal update

The mpdecimal update changes the soname; bump dependent ports.

PR:		276444

lang/python311: update to 3.11.8

Changelog: https://docs.python.org/3.11/whatsnew/changelog.html#python-3-11-8-final

lang/python311: Fix build on armv7 with LLVM 17

Reported by: brd
PR: 276249

lang/python311: Impelled to share/man

Approved by:    portmgr (blanket)

*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree

- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
  ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
  Also move conditional flags for non sparc64/arm ARCH to fixed flags.

Reviewed by:	brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068

lang/python311: Update to 3.11.7

www/vaultwarden-web_vault: Revert borked git add

This reverts commit 3a3fbae18157d39b68c43c590fa9e977fed9cef4.

www/vaultwarden-web_vault: Update to 2023.8.2

PR:		274304
Approved by:	maintainer time-out

lang/python311: Clean up unnecessary PLIST_SUB

- Remove XY: Replace .cpython-%%XY%% with %%PYTHON_EXT_SUFFIX%%
- Remove XYDOT:
  - Replace lib/python%%XYDOT%% with %%PYTHON_LIBDIR%%
  - Replace %%XYDOT%% with %%PYTHON_VER%%
- Rename XYZDOT to DISTVERSION

lang/python311: Update to 3.11.6

lang/python311: Update to 3.11.5

lang/python311: Sort PLIST

lang/python311: Revert unrelated changes in c4d9557b0830c8d4028737d25344456002760586

www/nextcloud: Update to 26.0.2

lang/python311: Update to 3.11.4

lang/python311: Update to 3.11.3

lang/python311: add LibreSSL support

LibreSSL 3.6 and later are fully compatible with PEP-644 for the
ssl and hmac modules, but not hashlib due to missing SHA-3/SHAKE,
BLAKE2 and scrypt. Partially reverts
https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e
for _hashopenssl.c only and void the configure check so that hashlib
builds on LibreSSL.

lang/python: restore USES=python variables and SUB_LIST (no-op)

Has been a to do item for time. These are independent from but used
by the bytecode trigger.

lang/python: Revert "add bytecode trigger"

This reverts commit c17ddfbf66e2801ec620d49979aca3d7077d7002.

This causes breakage on several ports, and the next iteration
requires a full exp-run. See:

Differential Revision: https://reviews.freebsd.org/D34739