misc/crush: Update to 0.100.0
While here, remove DISABLE_COMMAND_BLOCKING option.
Upstream has introduced "sysadmin mode" in which crush can run any
command, which is essentially equivalent to
DISABLE_COMMAND_BLOCKING. In addition, the upstream has also
introduced "permission" command with which you can configure which
commands are dangerous to your system.
Changelog: https://github.com/charmbracelet/crush/releases/tag/v0.100.0
Reported by: GitHub (watch releases)
lang/v8-beta: update to 15.8.62.9 (Chrome 158 beta)
- Update the dependency pins from DEPS and the Temporal crates to the
versions in Chromium's third_party/rust (ICU4X 2.4).
- Adapt the PartitionAlloc zero segment patches to the new
GetWellKnownReadOnlyRegions() interface, and the d8 ASLR check to
the new guard condition.
- Disable the new ECMA-402 ICU4X backend (v8_enable_ecma402_icu4x),
which needs another Rust library built by GN. It is only used when
enabled with runtime flags, and Node builds disable it as well.
lang/v8: update to 15.7.112.23 (Chrome 157 stable)
- Sync with lang/v8-beta at 15.7.112.9; DEPS is unchanged since then.
- Shim Cursor.__eq__ in metagen for LLVM < 21, which passes None to
clang_equalCursors.
- PartitionAlloc's GetStackTop() now returns uintptr_t; adjust the
FreeBSD implementation.
libsecureboot restore default trust anchors
If site.trust.mk does not set VE_SIGNATURE_LIST
initialize it based on content of VE_SIGNATURE_EXT_LIST
which is in turn initialized from TRUST_ANCHORS.
Sponsored by: Hewlett Packard Enterprise Development LP
Reviewed by: imp
Differential Revision: https://reviews.freebsd.org/D61245
Add EoL dates for all 14.x and 15.x releases
Used on the /releases and /security pages
Requested by: fuz, dch
Reviewed by: ziaee, fuz
Sponsored by: Klara, Inc.
Differential Revision: https://reviews.freebsd.org/D60620
15.2: create releng/15.2 branch
* Update from PRERELEASE to BETA1
* Ship quarterly packages on DVDs
* Point pkg at stable/15 kmod packages since releng/15.2 packages
don't exist yet
* Bump __FreeBSD_version to 1502000
Approved by: re (implicit)
xdr_mbuf.c: Add a check for the return value for xdrmbuf_getbytes()
The xdrmbuf_getlong() function failed to check for the return
value from xdrmbuf_getbytes(). This could have resulted in
a failure during NFS RPC message processing.
Reviewed by: rmacklem
MFC after: 2 weeks
Sponsored by: VersatusHPC
libc/locale: Check EILSEQ return
_citrus_iconv_std_iconv_convert can return EILSEQ without setting
invlen. As a result, we should check EILSEQ in the return value or it
will incorrectly return -2
Reviewed by: kevans
Fixes: e2030ca246a7 ("libc: fix c*rtomb/mbrtoc*")
MFC after: 2 days
Differential Revision: https://reviews.freebsd.org/D61151
(cherry picked from commit b138d017c70421e9d074096fcc3ac676f7e1c846)
virtio_random: defer first enqueue until after DRIVER_OK
According to the virtio spec:
> The driver MUST NOT send any buffer available notifications to the
> device before setting DRIVER_OK.
DRIVER_OK isn't set until after attach completes, so defer the first
enqueue. We haven't found any problems as a result of this to the best
of my knowledge: q35 and other devices that we *have* been used with
will apparently check when we go DRIVER_OK.
Tested with q35 virtio-random, which still works.
Reported by: llm-postcr
Reviewed by: kfv, markj
Fixes: f1c5a2e3a62505 ("virtio_random: Pipeline fetching the data")
Sponsored by: Stormshield
Sponsored by: Klara, Inc.
Differential Revision: https://reviews.freebsd.org/D61228
ggate: fix test intermittency
* ggatel: fix piped output. Flush stdout before daemonizing, so the
output can be read when it's in a command pipeline.
* ggated: bind the port _before_ daemonizing, so an invoking script can
be sure that the port is bound as soon as the command returns.
* tests: allow ggatec or ggatel to automatically allocate a device
number instead of choosing one in a racy way.
With all of these changes I can no run the tests 1000 times without
fail. And in parallel, too.
Sponsored by: ConnectWise
PR: 298942
Reported by: siva
Reviewed by: ngie
Differential Revision: https://reviews.freebsd.org/D60707
[2 lines not shown]
