Index | Thread | Search

From:
Anne Jan Brouwer <the_jinx@etv.cx>
Subject:
Re: [UPDATE] security/qtpass 1.7.0 -> 1.8.1
To:
ports@openbsd.org
Cc:
sh+ports@codevoid.de, Rafael Sadowski <rafael@sizeofvoid.org>
Date:
Tue, 22 Sep 2026 10:18:43 +0200

Download raw body.

Thread
On Wed Sep 17, 2026, Rafael Sadowski wrote:
 > Would love to see a switch to Qt6.

Done. Same update to 1.8.1, on x11/qt6:

- MODULES devel/qmake x11/qt6; WANTLIB Qt6Core Qt6Gui Qt6Network
   Qt6Widgets (port-lib-depends-check is clean).
- x11/qt6/qtsvg as a RUN_DEPENDS: the icons are SVG in the resources,
   rendered through the Qt SVG icon plugin; nothing links libQt6Svg.
- desktop-file-utils and gtk+4,-guic as before: 1.8.1 installs the
   desktop file, the AppStream metainfo and the hicolor icons itself.
- distinfo and PLIST unchanged from the earlier diff.

No source changes needed; QtPass 1.8 builds on Qt 5.15 and Qt 6 alike,
and the next release (2.0, in rc now) is Qt 6.8+ only, so this is the
line the port will stay on.

Tested on 7.9-release/amd64 with the -current port (qt6-qtbase 6.10.2):
portcheck is silent, makesum reproduces distinfo, build, fake,
update-plist reproduces the PLIST, port-lib-depends-check, package,
install; the installed binary links libQt6Core/Gui/Network/Widgets. A
build and a run on -current (6.11.2) would still be appreciated, I have
no -current box.

Greets,
   Anne Jan

Index: security/qtpass/Makefile
--- security/qtpass/Makefile.orig
+++ security/qtpass/Makefile
@@ -2,7 +2,7 @@ COMMENT=    multi-platform GUI for password-store

  GH_ACCOUNT=    IJHack
  GH_PROJECT=    QtPass
-GH_TAGNAME=    v1.7.0
+GH_TAGNAME=    v1.8.1
  PKGNAME=    ${DISTNAME:L}

  CATEGORIES=    security x11
@@ -14,16 +14,19 @@ MAINTAINER=    Stefan Hagen <sh+ports@codevoid.de>
  # GPLv3+
  PERMIT_PACKAGE=    Yes

-WANTLIB+=    ${COMPILER_LIBCXX} GL Qt5Core Qt5Gui Qt5Network Qt5Widgets
+WANTLIB+=    ${COMPILER_LIBCXX} GL Qt6Core Qt6Gui Qt6Network Qt6Widgets
  WANTLIB+=    c m

  MODULES=    devel/qmake \
-        x11/qt5
+        x11/qt6

-RUN_DEPENDS=    devel/git \
+RUN_DEPENDS=    devel/desktop-file-utils \
+        devel/git \
          security/gnupg>=2.2.23p1 \
          security/password-store \
-        security/pwgen
+        security/pwgen \
+        x11/gtk+4,-guic \
+        x11/qt6/qtsvg

  NO_TEST=    Yes

Index: security/qtpass/distinfo
--- security/qtpass/distinfo.orig
+++ security/qtpass/distinfo
@@ -1,2 +1,2 @@
-SHA256 (QtPass-1.7.0.tar.gz) = Fte/ARFKfxHC42G0bhUGP0GaJ77/VKlphbcG2nVnA8M=
-SIZE (QtPass-1.7.0.tar.gz) = 1167619
+SHA256 (QtPass-1.8.1.tar.gz) = PTq5HdCg8JInE/LT9P1frWbsl8wtlE+55e1Nu5uVPkY=
+SIZE (QtPass-1.8.1.tar.gz) = 1742892
Index: security/qtpass/pkg/PLIST
--- security/qtpass/pkg/PLIST.orig
+++ security/qtpass/pkg/PLIST
@@ -1 +1,8 @@
  @bin bin/qtpass
+share/applications/qtpass.desktop
+share/icons/hicolor/512x512/apps/qtpass-icon.png
+share/icons/hicolor/scalable/apps/qtpass-icon.svg
+share/metainfo/
+share/metainfo/qtpass.appdata.xml
+@tag update-desktop-database
+@tag gtk-update-icon-cache %D/share/icons/hicolor

On 9/17/26 02:07, Rafael Sadowski wrote:
> On Wed Sep 16, 2026 at 01:42:28PM +0200, Anne Jan Brouwer wrote:
>> Hi,
>>
>> Update security/qtpass to 1.8.1. I am the upstream author.
>>
>> 1.8.1 is a security release: the fixes from the 2.0 branch backported
>> to the 1.8 line. Among them: gpg encrypt calls now pass --no-encrypt-to
>> so an encrypt-to line in gpg.conf cannot add an unlisted recipient, the
>> re-encryption backup commit stages tracked files only, only http(s)
>> URLs become clickable, the key-generation dialog no longer shows the
>> passphrase in the batch template, and the single-instance socket is
>> restricted to the owning user. Full list:
>> https://github.com/IJHack/QtPass/blob/v1.8.1/CHANGELOG.md
>>
>> Qt 5.15 is still supported; no code changes were needed on OpenBSD.
> Would love to see a switch to Qt6.
>
>> Port changes: 1.8.1 installs the desktop file, the AppStream metainfo
>> and the hicolor icons itself, hence the PLIST additions and the
>> desktop-file-utils / gtk+4,-guic RUN_DEPENDS. WANTLIB unchanged.
>>
>> Tested on amd64: builds, make update-plist reproduces the PLIST,
>> port-lib-depends-check is clean, portcheck is silent, package installs
>> and runs. (7.9-release with the -current port; I do not have a -current
>> box, so a -current build test would be appreciated.)
>>
>> Greets,
>>    Anne Jan
>>
>> Index: security/qtpass/Makefile
>> --- security/qtpass/Makefile.orig
>> +++ security/qtpass/Makefile
>> @@ -2,7 +2,7 @@ COMMENT=    multi-platform GUI for password-store
>>
>>   GH_ACCOUNT=    IJHack
>>   GH_PROJECT=    QtPass
>> -GH_TAGNAME=    v1.7.0
>> +GH_TAGNAME=    v1.8.1
>>   PKGNAME=    ${DISTNAME:L}
>>
>>   CATEGORIES=    security x11
>> @@ -20,10 +20,12 @@ WANTLIB+=    c m
>>   MODULES=    devel/qmake \
>>           x11/qt5
>>
>> -RUN_DEPENDS=    devel/git \
>> +RUN_DEPENDS=    devel/desktop-file-utils \
>> +        devel/git \
>>           security/gnupg>=2.2.23p1 \
>>           security/password-store \
>> -        security/pwgen
>> +        security/pwgen \
>> +        x11/gtk+4,-guic
>>
>>   NO_TEST=    Yes
>>
>> Index: security/qtpass/distinfo
>> --- security/qtpass/distinfo.orig
>> +++ security/qtpass/distinfo
>> @@ -1,2 +1,2 @@
>> -SHA256 (QtPass-1.7.0.tar.gz) = Fte/ARFKfxHC42G0bhUGP0GaJ77/VKlphbcG2nVnA8M=
>> -SIZE (QtPass-1.7.0.tar.gz) = 1167619
>> +SHA256 (QtPass-1.8.1.tar.gz) = PTq5HdCg8JInE/LT9P1frWbsl8wtlE+55e1Nu5uVPkY=
>> +SIZE (QtPass-1.8.1.tar.gz) = 1742892
>> Index: security/qtpass/pkg/PLIST
>> --- security/qtpass/pkg/PLIST.orig
>> +++ security/qtpass/pkg/PLIST
>> @@ -1 +1,8 @@
>>   @bin bin/qtpass
>> +share/applications/qtpass.desktop
>> +share/icons/hicolor/512x512/apps/qtpass-icon.png
>> +share/icons/hicolor/scalable/apps/qtpass-icon.svg
>> +share/metainfo/
>> +share/metainfo/qtpass.appdata.xml
>> +@tag update-desktop-database
>> +@tag gtk-update-icon-cache %D/share/icons/hicolor
>>