CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

www/remark42 1.18.0_1

Privacy-focused lightweight commenting engine

Maintainer
delphij@FreeBSD.org
Packages
latest: 1.18.0_1
Upstream
up to date
Last update
to 1.18.0_1 · d81b7ba3c3
Quarterly
2026Q4: 1.17.1_2 · last MFH 60647eff54
WWW
https://remark42.com/
Links
cgit · VuXML

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.18.0_1.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (59)

Dag-Erling Smørgrav (des) · 1.18.0_1 MFH 2026Q4 ✓
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Xin LI (delphij) · 1.18.0
www/remark42: update to 1.18.0

While here, bring the rc script in line with upstream's options:

- Rename remark_disable_fancy_html_formatting to
  remark_disable_fancy_text_formatting; the old name exported a
  variable the server does not read.
- Rename the remark_auth_enable and remark_auth_email_subject
  defaults to remark_auth_email_enable and remark_auth_email_subj,
  the names that are actually exported.
- Add remark_trusted_proxy, remark_auth_ttl_jwt,
  remark_auth_ttl_cookie, remark_auth_send_jwt_header,
  remark_auth_microsoft_tenant, remark_auth_custom_*,
  remark_telegram_api_url and remark_smtp_helo_host.
- Default remark_avatar_uri and remark_ssl_acme_location to the data
  directory instead of a path relative to the working directory.
6e9976d6f3
Xin LI (delphij) · 1.17.1_3
www/remark42: build frontend with pnpm

- Switch to USES=npm:pnpm so the frontend is built from upstream's
  pnpm-lock.yaml (frozen, offline, no lifecycle scripts) instead of
  an npm-resolved dependency set.
- Follow the default Node.js version instead of hardcoding node24.
- Relax the Go requirement to 1.27+.
- Fetch the prefetch distfiles from MASTER_SITES before the framework
  regenerates them, and recompress the node modules archive with xz.
- Drop the TypeScript patch, no longer needed with upstream's
  locked dependency versions.
- Remove unused variables and reorder per portclippy.
ac81929fb3
Xin LI (delphij) · 1.17.1_1
www/remark42: stop baking REMARK_URL at build time

Since 1.17.0 the server fills the {% REMARK_URL %} placeholder into
the embedded frontend at serve time, using the REMARK_URL it was
started with.  The port was still substituting the placeholder with
http://127.0.0.1:8080 before embedding, which left nothing for the
server to fill in, so the widget pointed at an unreachable host
whenever a page omitted remark_config.host.

- Drop the build-time substitution and the REMARK_URL make variable;
  remark_url in rc.conf now reaches the frontend as well.
- Document remark_remark_web_root in the rc script.
369efb359c
Xin LI (delphij) · 1.17.1
www/remark42: update to 1.17.1

- Bump Go requirement to 1.27 (upstream go.mod requires go 1.27.0)
- Add patch to fix TypeScript build with newer CSSStyleDeclaration types
7001aa052e
Adam Weinberger (adamw) · 1.16.4_3
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Dag-Erling Smørgrav (des) · 1.16.4_2 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 1.16.4_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Dag-Erling Smørgrav (des) · 1.16.4
various: Drop Go 1.25+ version pin

This is a nop since 1.25 is the oldest version we support.
4a24b8eb7f
Xin LI (delphij) · 1.16.4
www/remark42: update to 1.16.4

Switch build toolchain from npm-node22 to npm-node24. The frontend
switched to pnpm workspaces but the app has no intra-repo dependencies,
so npm continues to work with COREPACK_ENABLE_STRICT=0.
6ce9f2b635
Dag-Erling Smørgrav (des) · 1.15.0_7 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Dag-Erling Smørgrav (des) · 1.15.0_6
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Adam Weinberger (adamw) · 1.15.0_5
various: Bump ports for Go 1.25.10
4e243a83f8
Dag-Erling Smørgrav (des) · 1.15.0_4
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Adam Weinberger (adamw) · 1.15.0_3
various: Bump ports for Go 1.25.8
a8d318da7c
Adam Weinberger (adamw) · 1.15.0_2
www/remark42: Set Go version to a range

remark42 builds, tests, and (superficially) runs when build with go1.26.
Mark the Go version as a minimum, not a pin.
7302c30ec0
Adam Weinberger (adamw) · 1.15.0_2
various: Bump Go ports for 1.25.7
5a5747a5a0
Adam Weinberger (adamw) · 1.15.0_1
various: Bump Go ports for 1.25.6
9f4bc8d0b7
Xin LI (delphij) · 1.15.0
www/remark42: upgrade to 1.15.0
4784e7e75b
Adam Weinberger (adamw) · 1.14.0_12
various: Bump Go ports for 1.24.11
b24429e3ed
Adam Weinberger (adamw) · 1.14.0_11
various: Bump Go ports for 1.24.10
0dfced16fb
Adam Weinberger (adamw) · 1.14.0_10
various: Bump go ports for go-1.24.9
90f976619b
Adam Weinberger (adamw) · 1.14.0_9
many: Bump dependent ports after go124 update
2e7587aaf8
Adam Weinberger (adamw) · 1.14.0_8
many: Bump go ports for go-1.24.7
31a5a229a7
Adam Weinberger (adamw) · 1.14.0_7
go ports: Bump for 1.24.6
53610681ea
Adam Weinberger (adamw) · 1.14.0_6
many: Bump PORTREVISION for go-1.24.5 update
275975297b
Adam Weinberger (adamw) · 1.14.0_5
various: Bump PORTREVISION after go124-1.24.4 update
94be418de3
Adam Weinberger (adamw) · 1.14.0_4
go: Bump go124-dependent ports

Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
0bdd2ad334
Adam Weinberger (adamw) · 1.14.0_3
go: Bump ports for go124 update
a4e30d4f4f
Adam Weinberger (adamw) · 1.14.0_2
Bump all go ports for yesterday's releases
d0642a6176
Xin LI (delphij) · 1.14.0_1
www/remark42: Fix typo in rc.d script
2d1993d4d1
Xin LI (delphij) · 1.14.0
www/remark42: upgrade to 1.14.0
1af1a7d718
Ashish SHUKLA (ashish) · 1.13.1_1
all: Bump after lang/go121 update
aa8c0111bf
Xin LI (delphij) · 1.13.1
www/remark42: upgrade to 1.13.1.
411c13e07f
Ashish SHUKLA (ashish) · 1.13.0_2
all: Bump after lang/go121 update
c4b51c2028
Ashish SHUKLA (ashish) · 1.13.0_1
all: Bump after lang/go121 update

MFH:		2024Q2
746fa696a1
Xin LI (delphij) · 1.13.0
www/remark42: skip tests
4fc7ddcf3d
Xin LI (delphij) · 1.13.0
www/remark42: upgrade to 1.13.0.
f8cfcbdfc6
Ashish SHUKLA (ashish) · 1.12.1_7
all: Bump after lang/go121 update

MFH:		2024Q2
fce0cc3272
Ashish SHUKLA (ashish) · 1.12.1_6
all: Bump after lang/go121 update

MFH:		2024Q2
32b284679a
Muhammad Moinur Rahman (bofh) · 1.12.1_5
lang/go: Change DEFAULT to 1.21

PR:		277776
Approved by:	portmgr (exp-run)
a5a000df3b
Xin LI (delphij) · 1.12.1_4
www/remark42: relax npm install dependency requirement.

More background at https://github.com/testing-library/preact-hooks-testing-library/issues/18
43e3af5f57
Ashish SHUKLA (ashish) · 1.12.1_4
all: Bump PORTREVISION after lang/go* update

PR:		276530
7e5aa2085f
Ashish SHUKLA (ashish) · 1.12.1_3
all: Bump PORTREVISION after lang/go* update

PR:		274405
0505b712df
Xin LI (delphij) · 1.12.1_2
www/remark42: Restore

This reverts commit 6ef618cbb791a5542bbb8a8f85c7a94231e51ddf and changes
the dependency to use node20.
d273a68655
Muhammad Moinur Rahman (bofh)
www/remark42: Remove expired port

2023-10-30 www/remark42: Depends on EOL NodeJS 16
6ef618cbb7
Muhammad Moinur Rahman (bofh) · 1.12.1_1
www/remark42: Mark DEPRECATED

- Depends on www/node16 which has reaced End of Life
- Set EXPIRATION_DATE 2023-10-30

Approved by:	portmgr (blanket)
1fae05e66f
Dmitri Goutnik (dmgk) · 1.12.1_1
all: Bump PORTREVISION after lang/go* update
8e4bc57934
Xin LI (delphij) · 1.12.1
www/remark42: update to 1.12.1
03b5e2ea76