[Bug 288152] databases/mongosh: update 2.3.8 → 2.5.5

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288152

--- Comment #4 from Fabien Amelinck <fabien.amelinck+freebsd@advens.fr> ---
(In reply to Hiroki Tagato from comment #3)

Oh sorry, I swapped out the _DISTFILE variable, thanks.

Secondly, node's sources are fetched following the version specified in
www/node22.
If I add them in the distfile, a version update in the node's port will cause
an hash verification failure in mongosh.

And if I freeze a specific version of node (e.g. 22.17.0), I expose my port to
potential exploits in case I don't update the version regularly.

What is the best tradeoff you can think of?

-- 
You are receiving this mail because:
You are the assignee for the bug.