On Wed Sep 16, 2026 at 01:42:28PM +0200, Anne Jan Brouwer wrote:
> Hi,
>
> Update security/qtpass to 1.8.1. I am the upstream author.
>
> 1.8.1 is a security release: the fixes from the 2.0 branch backported
> to the 1.8 line. Among them: gpg encrypt calls now pass --no-encrypt-to
> so an encrypt-to line in gpg.conf cannot add an unlisted recipient, the
> re-encryption backup commit stages tracked files only, only http(s)
> URLs become clickable, the key-generation dialog no longer shows the
> passphrase in the batch template, and the single-instance socket is
> restricted to the owning user. Full list:
> https://github.com/IJHack/QtPass/blob/v1.8.1/CHANGELOG.md
>
> Qt 5.15 is still supported; no code changes were needed on OpenBSD.
Would love to see a switch to Qt6.
>
> Port changes: 1.8.1 installs the desktop file, the AppStream metainfo
> and the hicolor icons itself, hence the PLIST additions and the
> desktop-file-utils / gtk+4,-guic RUN_DEPENDS. WANTLIB unchanged.
>
> Tested on amd64: builds, make update-plist reproduces the PLIST,
> port-lib-depends-check is clean, portcheck is silent, package installs
> and runs. (7.9-release with the -current port; I do not have a -current
> box, so a -current build test would be appreciated.)
>
> Greets,
> Anne Jan
>
> Index: security/qtpass/Makefile
> --- security/qtpass/Makefile.orig
> +++ security/qtpass/Makefile
> @@ -2,7 +2,7 @@ COMMENT= multi-platform GUI for password-store
>
> GH_ACCOUNT= IJHack
> GH_PROJECT= QtPass
> -GH_TAGNAME= v1.7.0
> +GH_TAGNAME= v1.8.1
> PKGNAME= ${DISTNAME:L}
>
> CATEGORIES= security x11
> @@ -20,10 +20,12 @@ WANTLIB+= c m
> MODULES= devel/qmake \
> x11/qt5
>
> -RUN_DEPENDS= devel/git \
> +RUN_DEPENDS= devel/desktop-file-utils \
> + devel/git \
> security/gnupg>=2.2.23p1 \
> security/password-store \
> - security/pwgen
> + security/pwgen \
> + x11/gtk+4,-guic
>
> NO_TEST= Yes
>
> Index: security/qtpass/distinfo
> --- security/qtpass/distinfo.orig
> +++ security/qtpass/distinfo
> @@ -1,2 +1,2 @@
> -SHA256 (QtPass-1.7.0.tar.gz) = Fte/ARFKfxHC42G0bhUGP0GaJ77/VKlphbcG2nVnA8M=
> -SIZE (QtPass-1.7.0.tar.gz) = 1167619
> +SHA256 (QtPass-1.8.1.tar.gz) = PTq5HdCg8JInE/LT9P1frWbsl8wtlE+55e1Nu5uVPkY=
> +SIZE (QtPass-1.8.1.tar.gz) = 1742892
> Index: security/qtpass/pkg/PLIST
> --- security/qtpass/pkg/PLIST.orig
> +++ security/qtpass/pkg/PLIST
> @@ -1 +1,8 @@
> @bin bin/qtpass
> +share/applications/qtpass.desktop
> +share/icons/hicolor/512x512/apps/qtpass-icon.png
> +share/icons/hicolor/scalable/apps/qtpass-icon.svg
> +share/metainfo/
> +share/metainfo/qtpass.appdata.xml
> +@tag update-desktop-database
> +@tag gtk-update-icon-cache %D/share/icons/hicolor
>
