From: Rafael Sadowski <rafael@sizeofvoid.org>
Subject: Re: [UPDATE] security/qtpass 1.7.0 -> 1.8.1
To: Anne Jan Brouwer <the_jinx@etv.cx>
Cc: ports@openbsd.org, sh+ports@codevoid.de
Date: Thu, 17 Sep 2026 02:07:27 +0200

On Wed Sep 16, 2026 at 01:42:28PM +0200, Anne Jan Brouwer wrote:
> Hi,
> 
> Update security/qtpass to 1.8.1. I am the upstream author.
> 
> 1.8.1 is a security release: the fixes from the 2.0 branch backported
> to the 1.8 line. Among them: gpg encrypt calls now pass --no-encrypt-to
> so an encrypt-to line in gpg.conf cannot add an unlisted recipient, the
> re-encryption backup commit stages tracked files only, only http(s)
> URLs become clickable, the key-generation dialog no longer shows the
> passphrase in the batch template, and the single-instance socket is
> restricted to the owning user. Full list:
> https://github.com/IJHack/QtPass/blob/v1.8.1/CHANGELOG.md
> 
> Qt 5.15 is still supported; no code changes were needed on OpenBSD.

Would love to see a switch to Qt6.

> 
> Port changes: 1.8.1 installs the desktop file, the AppStream metainfo
> and the hicolor icons itself, hence the PLIST additions and the
> desktop-file-utils / gtk+4,-guic RUN_DEPENDS. WANTLIB unchanged.
> 
> Tested on amd64: builds, make update-plist reproduces the PLIST,
> port-lib-depends-check is clean, portcheck is silent, package installs
> and runs. (7.9-release with the -current port; I do not have a -current
> box, so a -current build test would be appreciated.)
> 
> Greets,
>   Anne Jan
> 
> Index: security/qtpass/Makefile
> --- security/qtpass/Makefile.orig
> +++ security/qtpass/Makefile
> @@ -2,7 +2,7 @@ COMMENT=    multi-platform GUI for password-store
> 
>  GH_ACCOUNT=    IJHack
>  GH_PROJECT=    QtPass
> -GH_TAGNAME=    v1.7.0
> +GH_TAGNAME=    v1.8.1
>  PKGNAME=    ${DISTNAME:L}
> 
>  CATEGORIES=    security x11
> @@ -20,10 +20,12 @@ WANTLIB+=    c m
>  MODULES=    devel/qmake \
>          x11/qt5
> 
> -RUN_DEPENDS=    devel/git \
> +RUN_DEPENDS=    devel/desktop-file-utils \
> +        devel/git \
>          security/gnupg>=2.2.23p1 \
>          security/password-store \
> -        security/pwgen
> +        security/pwgen \
> +        x11/gtk+4,-guic
> 
>  NO_TEST=    Yes
> 
> Index: security/qtpass/distinfo
> --- security/qtpass/distinfo.orig
> +++ security/qtpass/distinfo
> @@ -1,2 +1,2 @@
> -SHA256 (QtPass-1.7.0.tar.gz) = Fte/ARFKfxHC42G0bhUGP0GaJ77/VKlphbcG2nVnA8M=
> -SIZE (QtPass-1.7.0.tar.gz) = 1167619
> +SHA256 (QtPass-1.8.1.tar.gz) = PTq5HdCg8JInE/LT9P1frWbsl8wtlE+55e1Nu5uVPkY=
> +SIZE (QtPass-1.8.1.tar.gz) = 1742892
> Index: security/qtpass/pkg/PLIST
> --- security/qtpass/pkg/PLIST.orig
> +++ security/qtpass/pkg/PLIST
> @@ -1 +1,8 @@
>  @bin bin/qtpass
> +share/applications/qtpass.desktop
> +share/icons/hicolor/512x512/apps/qtpass-icon.png
> +share/icons/hicolor/scalable/apps/qtpass-icon.svg
> +share/metainfo/
> +share/metainfo/qtpass.appdata.xml
> +@tag update-desktop-database
> +@tag gtk-update-icon-cache %D/share/icons/hicolor
>