Re: why are db5 and pcre being installed as dependencies in pkgs from -current pkg.f.o

On Sat, May 30, 2026 at 12:44:29PM -0700, Mark Millard wrote:
>On 5/30/26 06:15, void wrote:
>> On Fri, May 29, 2026 at 09:15:42AM -0700, Mark Millard wrote:
>>
>>> Note: the above are general comments that suggest the result may not be
>>> surprising. I did not analyze the specifics for the timing related to
>>> db5 and pcre .
>>
>> pcre was EoL'd on 2021-06-21 going by
>> https://www.pcre.org/original/changelog.txt
>> and marked deprecated on 29 Feb 2024 in
>> https://www.freshports.org/devel/pcre/
>>
>> db5, according to https://www.freshports.org/databases/db5/
>>
>> Deprecated: EOLd, potential security issues, maybe use db18 instead
>> This port expired on: 2022-06-30
>
>The builders do not change what they build until after the ports are
>updated, for sure . . .

I acknowledge that it's possibly not really an issue in the hobbyist
or abstract context. In a more professional context, one would build
with options in poudriere. I was surprised to see such affected binaries on
pkg.f.o though. 
--