FreeBSD/ports a8df53cmath/suitesparse-Example Makefile

math/suitesparse-Example: upgrade to 1.8.11

Lost in the latest SuiteSparse’s upgrade.
DeltaFile
+1-1math/suitesparse-Example/Makefile
+1-11 files

FreeBSD/ports d8da5e2devel/py-cfn-lint distinfo Makefile, devel/py-cfn-lint/files patch-src_cfnlint_maintenance.py

devel/py-cfn-lint: Update to 1.52.1

ChangeLog:      https://github.com/aws-cloudformation/cfn-lint/compare/v1.50.1...v1.52.1
Approved by:    hrs (mentor, blanket)
DeltaFile
+6-5devel/py-cfn-lint/Makefile
+3-3devel/py-cfn-lint/distinfo
+2-2devel/py-cfn-lint/files/patch-src_cfnlint_maintenance.py
+11-103 files

FreeBSD/ports 965df0cdevel/py-aws-sam-translator Makefile distinfo

devel/py-aws-sam-translator: Update to 1.111.0

ChangeLog:      https://github.com/aws/serverless-application-model/compare/v1.109.0...v1.111.0
Approved by:    hrs (mentor, blanket)
DeltaFile
+3-3devel/py-aws-sam-translator/distinfo
+2-2devel/py-aws-sam-translator/Makefile
+5-52 files

FreeBSD/ports d529dd7sysutils/hcloud Makefile distinfo

sysutils/hcloud: Update to 1.67.0

Changelog: https://github.com/hetznercloud/cli/releases/tag/v1.67.0
DeltaFile
+5-5sysutils/hcloud/distinfo
+1-2sysutils/hcloud/Makefile
+6-72 files

FreeBSD/ports 00dfac3devel/codebase-memory-mcp Makefile, devel/codebase-memory-mcp/files patch-src_main.c freebsd-src.cbmignore

devel/codebase-memory-mcp: new port

MCP server that indexes source code into a persistent knowledge graph for AI
coding agents.
DeltaFile
+87-0devel/codebase-memory-mcp/files/patch-src_cli_cli.c
+43-0devel/codebase-memory-mcp/Makefile
+31-0devel/codebase-memory-mcp/files/pkg-message.in
+28-0devel/codebase-memory-mcp/files/freebsd-src.cbmignore
+28-0devel/codebase-memory-mcp/files/patch-src_mcp_mcp.c
+27-0devel/codebase-memory-mcp/files/patch-src_main.c
+244-04 files not shown
+266-010 files

FreeBSD/ports 199db27cad/klayout Makefile distinfo

cad/klayout: Update to 0.30.10

PR:             297149
DeltaFile
+3-3cad/klayout/distinfo
+1-1cad/klayout/Makefile
+4-42 files

FreeBSD/ports 497ab7btextproc/oyo Makefile distinfo

textproc/oyo: Update to 0.1.56

- Update WWW address

ChangeLog:

- https://github.com/ahkohd/oyo/releases/tag/v0.1.55
- https://github.com/ahkohd/oyo/releases/tag/v0.1.56

Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+3-3textproc/oyo/distinfo
+2-2textproc/oyo/Makefile
+5-52 files

FreeBSD/ports 2624273security/vuxml/vuln 2026.xml

security/vuxml: add www/*chromium < 151.0.7922.71

Obtained from:  https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html
DeltaFile
+771-0security/vuxml/vuln/2026.xml
+771-01 files

FreeBSD/ports 751a81cnet-im/py-zapzap Makefile distinfo

net-im/py-zapzap: Update to 7.2

ChangeLog:      https://github.com/rafatosta/zapzap/releases/tag/7.2
Reported by:    Rafael Tosta <notifications at github.com>
DeltaFile
+3-3net-im/py-zapzap/distinfo
+1-1net-im/py-zapzap/Makefile
+4-42 files

FreeBSD/src 6d46c75libarchive archive_read_support_format_cab.c archive_read_support_format_7zip.c, libarchive/test test_read_format_iso_rockridge_zf_overflow.iso.uu test_read_format_cpio_symlink_trailer.cpio.uu

Update vendor/libarchive to 3.8.9

ChangeLog:
https://github.com/libarchive/libarchive/compare/v3.8.8...v3.8.9

Obtained from:          libarchive
Libarcive commit:       27cbc7827172698143e440801fc0ba39ccb4f1f5
DeltaFile
+2,919-0libarchive/test/test_read_format_cpio_symlink_trailer.cpio.uu
+556-542libarchive/archive_read_support_format_rar5.c
+1,096-0libarchive/test/test_read_format_iso_rockridge_zf_overflow.iso.uu
+462-411libarchive/archive_read_support_format_7zip.c
+497-347libarchive/archive_read_support_format_cab.c
+728-0unzip/bsdunzip_windows.c
+6,258-1,300233 files not shown
+17,454-7,685239 files

FreeBSD/ports 51e4471databases/pglogical Makefile pkg-plist

databases/pglogical: update to 2.4.8

Changes:        https://github.com/2ndQuadrant/pglogical/releases/tag/REL2_4_8
Reported by:    portscout, repology
DeltaFile
+3-3databases/pglogical/distinfo
+1-1databases/pglogical/Makefile
+2-0databases/pglogical/pkg-plist
+6-43 files

FreeBSD/ports fbb147cnet/rustconn Makefile Makefile.crates, net/rustconn/files patch-cargo-crates_cpal-0.18.1_src_host_mod.rs patch-cargo-crates_cpal-0.18.1_src_host_alsa_mod.rs

net/rustconn: Update to 0.19.7

- Update list of lib dependencies
- Add a couple of patches (provided upstream) to fix cpal crate, that fails
  with error:

error[E0425]: cannot find value `ESTRPIPE` in crate `libc`
    --> /usr/local/poudriere/ports/default/net/rustconn/work/RustConn-0.19.5/cargo-crates/cpal-0.18.1/src/host/alsa/mod.rs:1125:42
     |
1125 |         Err(err) if err.errno() == libc::ESTRPIPE => return try_resume(&stream.handle),
     |                                          ^^^^^^^^
     |
    ::: /usr/local/poudriere/ports/default/net/rustconn/work/RustConn-0.19.5/cargo-crates/libc-0.2.189/src/unix/bsd/freebsdlike/mod.rs:630:1
     |
 630 | pub const ESPIPE: c_int = 29;
     | ----------------------- similarly named constant `ESPIPE` defined here
     |
help: a constant with a similar name exists
     |

    [6 lines not shown]
DeltaFile
+337-361net/rustconn/distinfo
+167-179net/rustconn/Makefile.crates
+50-0net/rustconn/files/patch-cargo-crates_cpal-0.18.1_src_host_alsa_mod.rs
+10-0net/rustconn/files/patch-cargo-crates_cpal-0.18.1_src_host_mod.rs
+5-4net/rustconn/Makefile
+569-5445 files

FreeBSD/ports 2b97438security/vaultwarden Makefile distinfo

security/vaultwarden: Update to 1.37.1

PR:             297146
Reported by:    Bernard Spil
DeltaFile
+0-7security/vaultwarden/Makefile.crates
+3-3security/vaultwarden/distinfo
+1-1security/vaultwarden/Makefile
+4-113 files

FreeBSD/ports 8a5b308deskutils/fet Makefile distinfo

deskutils/fet: Update to 7.9.4

Changelog: https://lalescu.ro/liviu/fet/news.html
DeltaFile
+3-3deskutils/fet/distinfo
+1-1deskutils/fet/Makefile
+4-42 files

FreeBSD/ports 7c2c580net-mgmt/zabbix74-server pkg-plist.frontend Makefile

net-mgmt/zabbix74-server: Update to 7.4.13

Release notes:  https://www.zabbix.com/rn/rn7.4.13
DeltaFile
+3-3net-mgmt/zabbix74-server/distinfo
+1-1net-mgmt/zabbix74-server/Makefile
+1-0net-mgmt/zabbix74-server/pkg-plist.frontend
+5-43 files

FreeBSD/ports 4fe3133net-mgmt/zabbix6-server pkg-plist.frontend Makefile

net-mgmt/zabbix6-server: Update to 6.0.48

Release notes:  https://www.zabbix.com/rn/rn6.0.48
DeltaFile
+3-3net-mgmt/zabbix6-server/distinfo
+1-1net-mgmt/zabbix6-server/Makefile
+1-0net-mgmt/zabbix6-server/pkg-plist.frontend
+5-43 files

FreeBSD/ports f56995bnet-mgmt/zabbix7-server pkg-plist.frontend Makefile

net-mgmt/zabbix7-server: Update to 7.0.29

Release notes:  https://www.zabbix.com/rn/rn7.0.29
DeltaFile
+3-3net-mgmt/zabbix7-server/distinfo
+1-1net-mgmt/zabbix7-server/Makefile
+1-0net-mgmt/zabbix7-server/pkg-plist.frontend
+5-43 files

FreeBSD/ports 20c1003security/vuxml/vuln 2026.xml

security/vuxml: document gitlab vulnerabilities
DeltaFile
+53-0security/vuxml/vuln/2026.xml
+53-01 files

FreeBSD/ports 155f3addevel/RStudio Makefile

devel/RStudio: Extend expiration because electron41 fails to build

devel/electron41 is blacklisted on package builders so it is not
regularly tested.
DeltaFile
+1-1devel/RStudio/Makefile
+1-11 files

FreeBSD/src 5f02c84share/man/man4 Makefile em.4

igb(4)/igbv(4): Document SR-IOV PF and VF functionality

Document supported controllers, PF and VF naming, PCI_IOV and IOMMU
requirements, queue and lifecycle constraints, iovctl schema, filtering
and anti-spoof policy, mailbox and MDD recovery, shared hardware
limits, rate control, and statistics cadence.

Relnotes:       yes
Sponsored by:   BBOX.io
DeltaFile
+169-4share/man/man4/em.4
+2-0share/man/man4/Makefile
+171-42 files

FreeBSD/src fdce383sys/dev/e1000 if_em.h if_em.c

igbv: Retry transient VLAN admission failures

A PF mailbox NACK does not distinguish the SR-IOV VLAN request rate
limit from permanent VLVF exhaustion. Preserve desired VLAN membership
and retry four additions per 500 ms timer tick, matching the PF
sustained allowance.

Bound the whole recovery batch to eight seconds from its first failure
and consolidate restore diagnostics, so a full table cannot create a
permanent mailbox poller or repeated per-VID log bursts.

Sponsored by:   BBOX.io
DeltaFile
+92-3sys/dev/e1000/if_igbv.c
+16-5sys/dev/e1000/if_em.c
+5-0sys/dev/e1000/if_em.h
+113-83 files

FreeBSD/src d2cd0b5sys/dev/e1000 if_em.h if_igbv.c

e1000: Sample statistics at timer cadence

Mailbox and link interrupts share iflib admin service with the periodic
timer. Mark timer-driven passes explicitly and run the hardware
statistics sweep only for those samples instead of repeating 66 PF MMIO
reads for every VF mailbox message.

DTrace on the I350 DUT measured the PF sweep at about 79 us on average.
The normal hz/2 timer continues to extend clear-on-read counters
safely; exported counters may trail hardware by up to 500 ms.

Sponsored by:   BBOX.io
DeltaFile
+14-1sys/dev/e1000/if_em.c
+2-1sys/dev/e1000/if_igbv.c
+1-0sys/dev/e1000/if_em.h
+17-23 files

FreeBSD/src e8f3b96sys/dev/e1000 if_igb_iov.c

igb: Rate-limit VF VLAN rebuild requests

Give each VF a burst of 64 VLAN additions and refill it at eight
additions per second. Removals remain unrestricted, idempotent requests
consume nothing, and trusted PF-wide initialization replenishes the
burst while guest resets do not.  Checks VLVF capacity before charging
a token.

Do not apply this policy to multicast requests because Linux igbvf and
DPDK ignore their reply status; aggregate MTA write elision bounds
those updates instead.

Sponsored by:   BBOX.io
DeltaFile
+57-5sys/dev/e1000/if_igb_iov.c
+57-51 files

FreeBSD/src 5ce6c94sys/dev/e1000 if_igb_iov.c

igb: Update only changed IOV VLAN filters

Keep the full VFTA/VLVF software recomputation and clear-map-set
ordering, but compare each phase against the authoritative old value.
Write only VFTA words and VLVF slots whose effective contents change.

I350 uses its software VFTA shadow because erratum 20 makes live reads
unreliable; an invalid shadow forces a complete clear before sparse
restoration. 82576 continues to diff against live VFTA reads.

Add SDT probes for every logical write phase and the final software
images so hardware tests can verify exact elision counts. On my I350
DUT, the old full table path averaged 819 us across 31 VLAN removals
versus about 79 us for the PF statistics sweep.

Sponsored by:   BBOX.io
DeltaFile
+83-15sys/dev/e1000/if_igb_iov.c
+83-151 files

FreeBSD/src 350211asys/dev/e1000 if_em.h if_em.c

igb: Update only changed IOV multicast hashes

Build the aggregate PF/VF multicast bitmap in software and compare it
with the e1000 MTA shadow. Write only registers whose desired value
changed, while forcing a complete write after PF reset invalidates the
hardware table.

This bounds alternating VF multicast updates without NACKing them.
Linux igbvf and DPDK ignore multicast reply status, so a command-rate
limiter could otherwise acknowledge configuration while leaving
hardware state stale.

Sponsored by:   BBOX.io
DeltaFile
+29-8sys/dev/e1000/if_igb_iov.c
+2-1sys/dev/e1000/if_em.c
+1-0sys/dev/e1000/if_em.h
+32-93 files

FreeBSD/src c637d47sys/dev/e1000 if_em.c

igb: Stop writing the legacy TADV register

TADV is an em-class interrupt delay register and is absent from the
82575 and later register model. The igb attach path does not expose or
initialize that control, but transmit initialization still wrote its
zero valued storage into a reserved queue-window offset.

Apply the same igb_mac_min boundary already used for TIDV and the
absolute-delay sysctls.

MFC after:      1 week
Sponsored by:   BBOX.io
DeltaFile
+1-1sys/dev/e1000/if_em.c
+1-11 files

FreeBSD/src 9332fd5sys/dev/e1000 if_em.c e1000_vf.h

igbv: Support secondary unicast filters

Support the Linux igbvf secondary-MAC mailbox subprotocol, used by
Linux guests running MacVTap.

Replay up to three non-primary unicast addresses after reset and
whenever the address list changes, subject to PF allow-set-mac policy.

Sponsored by:   BBOX.io
DeltaFile
+66-0sys/dev/e1000/if_igbv.c
+35-0sys/dev/e1000/e1000_vf.c
+3-0sys/dev/e1000/if_em.h
+1-0sys/dev/e1000/if_em.c
+1-0sys/dev/e1000/e1000_vf.h
+1-0sys/dev/e1000/e1000_82575.h
+107-06 files

FreeBSD/src a6bb385sys/dev/e1000 if_em.h igb_txrx.c

igbv: Improve VF mailbox and status behavior

Treat VF media as fixed 1000baseT full duplex and report PF not ready
and generated MAC fallback states during attach.

After a successful reset handshake, reconcile a PF rejected MAC back
into the ifnet. If the PF is unavailable, defer MAC, multicast, VLAN,
LPE, and promiscuity replay until CTS is restored. Track a rejected
VLAN removal separately so leaked traffic remains tagged until reset
proves that the stale hardware filter is gone.

Baseline VF counters at attach, collect the four loopback packet and
octet counters with rollover-safe deltas, and account software RX
checksum offload results. Preserve accumulated statistics across PF
resets by rebasing the raw hardware counters, and sample them while
physical link is down because VF loopback can remain active.

Retain the 82576 VFMPRC hardware statistic, but do not read it on I350
VFs because specification update errata 31 says it is unavailable.

    [5 lines not shown]
DeltaFile
+168-44sys/dev/e1000/if_em.c
+115-0sys/dev/e1000/if_igbv.c
+26-8sys/dev/e1000/igb_txrx.c
+10-4sys/dev/e1000/if_em.h
+319-564 files

FreeBSD/src 316f6f2sys/dev/e1000 em_txrx.c if_em.h, sys/modules/em Makefile

igbv: Isolate VF policy and validate its registers

Give igb virtual functions a separate ifdi method table and move
VF-specific attach, reset, queue, interrupt, and diagnostic policy to
if_igbv.c. Keep shared descriptor-ring mechanisms in if_em.c.

Derive VF identity from IFLIB_IS_VF and assert that hardware
identification agrees. Under INVARIANTS, validate normal VF CSR
accesses against the sparse 82576 and I350 VF register maps.

Stop shared setup from accessing PF-only controls. Require MSI-X and
defer VF sysctls until attach succeeds so failed attachment cannot
leave handlers pointing at freed driver state.

Advertise only VF capabilities, run adaptive moderation without the
PF receive-buffer guard, enable SRRCTL.DROP_EN, and provide a VF-safe
diagnostic register view.

The moved implementation is the existing FreeBSD code. Register model

    [3 lines not shown]
DeltaFile
+361-252sys/dev/e1000/if_em.c
+205-0sys/dev/e1000/if_igbv.c
+83-1sys/dev/e1000/e1000_osdep.h
+19-0sys/dev/e1000/if_em.h
+5-0sys/dev/e1000/em_txrx.c
+1-1sys/modules/em/Makefile
+674-2541 files not shown
+676-2547 files

FreeBSD/src f879d1csys/dev/e1000 if_em.c

igb: Reprogram descriptor queues while disabled

Disable each igb-class transmit and receive queue and flush before
changing its descriptor-ring registers. Restore the head and tail
indices that Intel documents as surviving a VF reset.

Use the igb queue-enable control instead of programming legacy TXDCTL
granularity, low-water, and reserved bits that do not belong to the
82575 and later.

Sponsored by:   BBOX.io
MFC after:      1 week
DeltaFile
+21-5sys/dev/e1000/if_em.c
+21-51 files