FreeBSD/ports 29200c7 — games/openbve pkg-plist Makefile, games/openbve/files patch-makefile patch-source_TrainEditor2_TrainEditor2.csproj

games/openbve: update OpenBVE port to version 1.14.1.2

Garbage-collect no longer useful .Net version patching
for compatibility with deprecated Mono 5.10.  Upstream
solution was updated as a whole to require .Net 4.8 in
version 1.14.0.2 onwards, which works fine against our
default Mono 5.20.

Reported by:    portscout
DeltaFile
+35-13games/openbve/distinfo
+17-10games/openbve/Makefile
+0-21games/openbve/files/patch-source_TrainEditor2_TrainEditor2.csproj
+14-2games/openbve/pkg-plist
+0-9games/openbve/files/patch-makefile
+66-555 files

FreeBSD/src e8534ba — sys/ufs/ffs ffs_vnops.c

ufs: do not let a rolled back inode write end a data-only sync

With soft updates, ffs_syncvnode() writes the inode between its passes
while buffers are still dirty.  That write can go out with new block
pointers rolled back, for instance a new indirect block whose contents
are only written in a later pass, yet ffs_update() clears IN_SIZEMOD
and IN_IBLKDATA because the write was synchronous.  A data-only sync
then decides at the end that the inode need not be written, and
fdatasync(2) or an O_DSYNC write that allocated the first indirect
block returned with the on-disk inode not pointing to it.

Note on entry whether a data-only sync has to write the inode, and base
the final write, done once all dependencies are flushed, on that alone:
nothing else can set IN_SIZEMOD or IN_IBLKDATA meanwhile, as the vnode
is locked.  A full sync always writes the inode last and was not
affected.

Sponsored by:   Sippy Software, Inc.
Reviewed by:    kib

    [3 lines not shown]
DeltaFile
+9-2sys/ufs/ffs/ffs_vnops.c
+9-21 files

FreeBSD/src afe1dec — etc/mtree BSD.tests.dist, tests/sys/fs Makefile

tests: add UFS synchronous write durability tests

Check that once fsync(2), fdatasync(2), or a write(2) with O_SYNC or
O_DSYNC returns, the new data, the file size and every block pointer
leading to the data are on disk.  The cases append a block, fill a hole,
append the first block that needs an indirect block and append below an
existing indirect block.  Two more append after another write left a
new direct block unsynced, which with soft updates cuts the size and the
later pointers of an inode written meanwhile.  With O_SYNC and O_DSYNC
on soft updates, those also check that the open already made the
unsynced block durable.
Each case runs on UFS without soft updates, with soft updates and with
SU+J.

The file systems live on md(4) and the checks read the inode, the
indirect block and the data block straight from the device with libufs
right after the synchronous call returns.  There is no cache in front
of the disk device, so this shows what would survive a crash at that
moment without having to crash anything.

    [6 lines not shown]
DeltaFile
+386-0tests/sys/fs/ufs/sync_test.c
+9-0tests/sys/fs/ufs/Makefile
+2-0etc/mtree/BSD.tests.dist
+1-0tests/sys/fs/Makefile
+398-04 files

FreeBSD/src 8ff663d — sys/ufs/ffs ffs_softdep.c ffs_vnops.c

ufs: make fdatasync(2) and O_DSYNC writes update the inode

ffs_syncvnode() in the DATA_ONLY case and ffs_write() for IO_DATASYNC
decide whether the inode has to be written by testing IN_SIZEMOD and
IN_IBLKDATA against ip->i_flags, the chflags(2) word, instead of the
in-core state ip->i_flag.  IN_SIZEMOD and IN_IBLKDATA alias UF_READONLY
and UF_ARCHIVE, so for ordinary files the test was always false: after
an fdatasync() or an O_DSYNC write that extended a file or filled a
hole, the data blocks were on disk but the inode size and block pointers
were not, and a crash before the syncer got to the inode lost the
"synced" data.  Files with uarchive or urdonly set got a synchronous
inode write on every call instead.

journal_mount() has the same mixup and sets IN_MODIFIED in i_flags,
which leaves UF_OPAQUE set on the in-core .sujournal inode.  The
synchronous ffs_update() that follows writes the inode regardless, so
only the stray flag is fixed here.

Fixes:  7428630b757 ("UFS: write inode block for fdatasync(2) if pointers in inode where allocated")

    [9 lines not shown]
DeltaFile
+2-2sys/ufs/ffs/ffs_vnops.c
+1-1sys/ufs/ffs/ffs_softdep.c
+3-32 files

FreeBSD/src 26d84bb — sys/ufs/ffs ffs_vnops.c

ufs: flush soft updates dependencies for O_SYNC and O_DSYNC writes

For a synchronous write, ffs_write() writes the data buffers with
bwrite() and then the inode with ffs_update(vp, 1).  With soft updates,
a new block pointer can only reach the disk after the dependencies of
the block, such as the cylinder group map that allocates it, are
written.  Until then initiate_write_inodeblock_ufs[12]() and
initiate_write_indirdep() roll the pointer, and for an extending write
the size, back in the buffer being written.  Nothing in the write path
flushes those dependencies, so the inode went out with the old size and
pointers, ffs_update() cleared IN_SIZEMOD and IN_IBLKDATA, and a crash
before the syncer rewrote the inode lost data that O_SYNC or O_DSYNC
promised was on stable storage.  The same held for a new block below an
indirect block, which ffs_balloc() writes synchronously but with the
pointer rolled back.

When soft updates are enabled and the write allocated blocks, finish it
with ffs_syncvnode(), as fsync(2) and fdatasync(2) do: it flushes the
dependencies, rewrites the rolled back indirect blocks and writes the

    [30 lines not shown]
DeltaFile
+59-1sys/ufs/ffs/ffs_vnops.c
+59-11 files

FreeBSD/src 1498efc — sys/ufs/ffs ffs_vnops.c

ufs: make fdatasync(2) write dirty indirect blocks

A data-only ffs_syncvnode() skips dirty indirect blocks on file systems
without soft updates, and with soft updates stops making passes once
only indirect blocks are left dirty.  Indirect blocks only get dirty
when the block pointers in them change, and those pointers are what
makes a newly allocated block reachable.  So when fdatasync() follows
a write that extended the file or filled a hole past the direct blocks,
the data and the inode size reached the disk but the pointer to the new
block did not, and a crash lost the "synced" data.  With soft updates
the indirect block was usually written once, with the new pointer
rolled back, and never rewritten.

POSIX requires fdatasync() to write the metadata needed to retrieve the
data, which 52488b51489 already acknowledged for the inode, so treat
dirty indirect blocks the same way for a data-only sync as for a full
one.  This restores the loop to what it was before 2f514f92cf0.  Plain
overwrites, the case data-only sync is meant to speed up, do not dirty
indirect blocks and still write neither them nor the inode.

    [8 lines not shown]
DeltaFile
+15-35sys/ufs/ffs/ffs_vnops.c
+15-351 files

FreeBSD/ports 424b5fc — misc/py-litellm Makefile

misc/py-litellm: unbreak by relaxing upper limit on dependency

Approved by:    portmgr (unbreak; blanket)
DeltaFile
+2-2misc/py-litellm/Makefile
+2-21 files

FreeBSD/ports 4d9eeb5 — devel/py-omegaconf distinfo Makefile

devel/py-omegaconf: update 2.3.1 → 2.4.0
DeltaFile
+16-10devel/py-omegaconf/Makefile
+3-3devel/py-omegaconf/distinfo
+19-132 files

FreeBSD/ports aeac3db — databases/py-snowflake-connector-python Makefile

databases/py-snowflake-connector-python: unbreak by relaxing upper limit on dependency

Approved by:    portmgr (unbreak; blanket)
DeltaFile
+1-1databases/py-snowflake-connector-python/Makefile
+1-11 files

FreeBSD/ports 7dbe917 — misc/py-gymnasium distinfo Makefile

misc/py-gymnasium: update 1.3.0 → 1.4.0
DeltaFile
+4-4misc/py-gymnasium/Makefile
+3-3misc/py-gymnasium/distinfo
+7-72 files

FreeBSD/ports 4c88510 — lang/babashka Makefile distinfo

lang/babashka: Update to 1.13.226

Changes since 1.13.225:

1.13.226 (2026-10-11)

  * Fix clojure.lang.RT/baseLoader and the context classloader
    returning nil in nREPL sessions
  * Bump jline to 4.4.7
  * Support the [opts stream] arity of read+string
  * Add the CIDER debugger to the nREPL server: #dbg, #break,
    C-u C-M-x and the step commands
  * Add CIDER's track-state to the nREPL server: font-lock of loaded
    vars and the box around instrumented functions
  * Fix the cider-nrepl version mismatch warning on cider-connect-clj
  * Allow constructing ThreadDeath
  * SCI: a macro var in call position expands, as in
    (eval (list #'when true 1))
  * SCI: fix stack overflow in clojure.walk/macroexpand-all on a reify

    [16 lines not shown]
DeltaFile
+5-5lang/babashka/distinfo
+1-1lang/babashka/Makefile
+6-62 files

FreeBSD/ports 189fd47 — x11/nwg-look Makefile distinfo

x11/nwg-look: Update to 1.2.0

Changelog: https://github.com/nwg-piotr/nwg-look/releases/tag/v1.2.0

Reported by:    GitHub (watch releases)
DeltaFile
+5-5x11/nwg-look/distinfo
+1-2x11/nwg-look/Makefile
+6-72 files

FreeBSD/src 2aca5de — tools/test/stress2/misc nlink6.sh

stress2: add a test for forced unmount racing mkdir at UFS_LINK_MAX

On a soft updates file system, keep a directory at UFS_LINK_MAX with
workers removing and recreating subdirectories in it, so that mkdir(2)
keeps going through ufs_sync_nlink(), and force-unmount, check and
remount the file system in a loop.  The workers work relative to the
directory: a lookup through the mount point would wait for the unmount
on the covered vnode lock and never race with it.  Before the fix, the
first forced unmount deadlocked with mkdir(2) sleeping in vfs_busy().

With dtrace=1, count the vfs_busy() calls made during an unmount by
caller, and the mkdir(2) calls that synced and restarted with ERELOOKUP
during an unmount, which shows that the race was hit.

Sponsored by:   Sippy Software, Inc.
Reviewed by:    pho
Tested by:      pho
Differential Revision:  https://reviews.freebsd.org/D60204
MFC after:      1 month
DeltaFile
+191-0tools/test/stress2/misc/nlink6.sh
+191-01 files

FreeBSD/src a672831 — sys/ufs/ufs ufs_vnops.c

ufs: do not busy or reference the mount in ufs_sync_nlink()

With soft updates, mkdir(2), link(2) and rename(2) into a directory
whose i_nlink is at UFS_LINK_MAX while i_effnlink is below it call
ufs_sync_nlink1() to sync the file system and restart.  It busied the
mount with vfs_busy(mp, 0), which sleeps for as long as an unmount is in
progress.  The caller is still between vn_start_write() and
vn_finished_write() there, and the unmount, once it has set
MNTK_UNMOUNT, goes on to suspend writes in VFS_UNMOUNT() and waits in
vfs_write_suspend() for that write to end.  Neither could make progress,
and every later vfs_busy() of the mount, such as from getfsstat(2) or a
lookup crossing the mount point, hung behind them.

The window is wide: after setting MNTK_UNMOUNT, the unmount waits for
the busy references to drain, which includes another thread already
syncing in ufs_sync_nlink1(), and for vfs_periodic().  A forced unmount
of a file system with a directory at the link limit under mkdir/rmdir
load hits it within seconds.


    [19 lines not shown]
DeltaFile
+19-23sys/ufs/ufs/ufs_vnops.c
+19-231 files

FreeBSD/ports 440a623 — security/vuxml/vuln 2026.xml

security/vuxml: Document DSA sig vuln in pycryptodome(x) < 3.24.1

Sponsored by: Saltant Solutions LLC
DeltaFile
+49-0security/vuxml/vuln/2026.xml
+49-01 files

FreeBSD/ports 1527e33 — net/freerdp3 pkg-plist distinfo

net/freerdp3: Update 3.32.1 => 3.32.2

Changelog:
https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.2
https://github.com/FreeRDP/FreeRDP/blob/3.32.2/ChangeLog

Security:       GHSA-4g67-jhpc-q5xp
Security:       GHSA-799q-hjgw-g55g
Security:       GHSA-cg4f-57hc-v7w7
Security:       GHSA-rrp5-666j-g6gp
Security:       GHSA-wg7g-gx9g-r96c
Security:       GHSA-f53w-3364-jr35
Security:       GHSA-66mr-7wc7-23vc
Security:       GHSA-hqf8-95c7-6r92
Security:       GHSA-8g9g-hqqp-fw69
Security:       GHSA-jq25-3374-4262
Security:       GHSA-7qw2-8h66-pvpw
Security:       GHSA-5j39-x36c-x9pm
Security:       GHSA-6p3w-fv52-cf24

    [36 lines not shown]
DeltaFile
+14-18net/freerdp3/Makefile
+3-11net/freerdp3/distinfo
+2-0net/freerdp3/pkg-plist
+19-293 files

FreeBSD/ports 3a3ea9a — net/freerdp3 pkg-plist distinfo

net/freerdp3: Update 3.32.1 => 3.32.2

Changelog:
https://github.com/FreeRDP/FreeRDP/releases/tag/3.32.2
https://github.com/FreeRDP/FreeRDP/blob/3.32.2/ChangeLog

Security:       GHSA-4g67-jhpc-q5xp
Security:       GHSA-799q-hjgw-g55g
Security:       GHSA-cg4f-57hc-v7w7
Security:       GHSA-rrp5-666j-g6gp
Security:       GHSA-wg7g-gx9g-r96c
Security:       GHSA-f53w-3364-jr35
Security:       GHSA-66mr-7wc7-23vc
Security:       GHSA-hqf8-95c7-6r92
Security:       GHSA-8g9g-hqqp-fw69
Security:       GHSA-jq25-3374-4262
Security:       GHSA-7qw2-8h66-pvpw
Security:       GHSA-5j39-x36c-x9pm
Security:       GHSA-6p3w-fv52-cf24

    [34 lines not shown]
DeltaFile
+14-18net/freerdp3/Makefile
+3-11net/freerdp3/distinfo
+2-0net/freerdp3/pkg-plist
+19-293 files

FreeBSD/src 1ca7f66 — usr.bin/ncal ncal.c, usr.bin/ncal/tests regress.se-r-jd-171202-nhl.out regress.se-r-jd-170003-nhl.out

ncal(1): handle Sweden's transitional calendar (1700-1712)

Sweden used a unique intermediate calendar during 1700-1712.  In 1700,
Sweden omitted the Julian leap day (Feb 29, 1700) to begin a gradual
transition to the Gregorian calendar.  The transition was abandoned
mid-way due to the Great Northern War; to revert to the Julian calendar,
an extra day "Feb 30, 1712" was added.  Sweden finally adopted the
Gregorian calendar in 1753 (already handled correctly by ncal).

ncal previously displayed Feb 1700 as a 29-day month and Feb 1712 as a
29-day month, both incorrect for the Swedish (-s SE) calendar mode.

Add flag_sweden, which is set when the SE country code is selected (via
-s SE or the locale) and cleared by -J, since -J selects the plain
Julian calendar.  When active, sndaysr() and sdater() apply the one-day
offset that characterised the Swedish transitional calendar:

  - Feb 1700: displayed with 28 days (no leap day)
  - 1700-03-01 to 1712-02-30: dates run one day ahead of Julian, so

    [15 lines not shown]
DeltaFile
+36-0usr.bin/ncal/tests/ncal_test.sh
+24-0usr.bin/ncal/ncal.c
+8-0usr.bin/ncal/tests/regress.se-r-jd-171202-nhl.out
+8-0usr.bin/ncal/tests/regress.se-r-jd-170003-nhl.out
+8-0usr.bin/ncal/tests/regress.se-r-3-1712-nhl.out
+8-0usr.bin/ncal/tests/regress.se-r-3-1700-nhl.out
+92-02 files not shown
+105-08 files

FreeBSD/ports 25cd6b3 — net/norm distinfo Makefile

net/norm: use upstream divert(4) patch to make it working on modern FreeBSD

This was accepted upstream to the protolib and added to the port in
ab6be4dbf3bb.  Recently the patching was silently deleted in 5963119a132c.
The update of norm to 1.5.9 did not update the bundled dependency protolib
to a version that includes ba9ca1ca7d73592268ebfd5a43271303e76f461e,
instead it tied protolib to an older version.

Fixes:  5963119a132cd71510998f9173c54522a8e56678
DeltaFile
+4-0net/norm/Makefile
+2-0net/norm/distinfo
+6-02 files

FreeBSD/ports e35b01d — sysutils/acpica-tools Makefile distinfo

sysutils/acpica-tools: Update to 20260930
DeltaFile
+3-3sysutils/acpica-tools/distinfo
+1-1sysutils/acpica-tools/Makefile
+4-42 files

FreeBSD/src 398254f — sys/sys mbuf.h

mbuf: simplify m_free

The check for  (M_PKTHDR|M_NOFREE) was added by np@ in
"91d1b03d3617 Merge r254736 from user/np/cxl_tuning."
in order to support a clever rx mode optimization used
by cxgbe at the time.  That optimization was removed in
46e1e307edb6 several years ago.  This check is otherwise
unneeded and adds an extraneous test to every mbuf free,
so let's remove it.

Reviewed by: glebius, np
Differential Revision: https://reviews.freebsd.org/D60686
Sponsored by: Netflix
DeltaFile
+0-2sys/sys/mbuf.h
+0-21 files

FreeBSD/ports d87fa4d — devel/laminar pkg-plist distinfo

devel/laminar: Update 1.3 => 1.4

While here:
- Apply upstream fixes d25b7a4 and e62148b.
- Fix pkg-plist for shell completions.
- Unmark BROKEN since it compiles with recent Boost fine.

Changelog:
https://github.com/ohwgiles/laminar/releases/tag/1.4

PR:             299211
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 727c80a7a9ae523f7449353925e8bc082e73fcb4)
DeltaFile
+17-7devel/laminar/Makefile
+9-5devel/laminar/distinfo
+2-2devel/laminar/pkg-plist
+28-143 files

FreeBSD/ports 727c80a — devel/laminar pkg-plist distinfo

devel/laminar: Update 1.3 => 1.4

While here:
- Apply upstream fixes d25b7a4 and e62148b.
- Fix pkg-plist for shell completions.
- Unmark BROKEN since it compiles with recent Boost fine.

Changelog:
https://github.com/ohwgiles/laminar/releases/tag/1.4

PR:             299211
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q4
DeltaFile
+17-7devel/laminar/Makefile
+9-5devel/laminar/distinfo
+2-2devel/laminar/pkg-plist
+28-143 files

FreeBSD/ports fe7bcd9 — databases/libnusqlite3 Makefile distinfo

databases/libnusqlite3: Update to 1.18

Adds unicode 18.0.0 character set support.

Changelog:      https://bitbucket.org/alekseyt/nunicode/src/1.18/CHANGELOG

Approved by:    dtxdf (mentor)
Differential Revision:  https://reviews.freebsd.org/D60641
DeltaFile
+8-4databases/libnusqlite3/pkg-descr
+3-3databases/libnusqlite3/distinfo
+2-2databases/libnusqlite3/Makefile
+13-93 files

FreeBSD/ports 41c2b05 — databases/libnusqlite3 Makefile, multimedia/jellyfin-ffmpeg Makefile

*/*: Change maintainer address to my @FreeBSD.org email

Approved by:    dtxdf (mentor)
Differential Revision:  https://reviews.freebsd.org/D60637
DeltaFile
+1-1sysutils/fjord/Makefile
+1-1multimedia/jellyfin-ffmpeg7/Makefile
+1-1multimedia/jellyfin-ffmpeg/Makefile
+1-1databases/libnusqlite3/Makefile
+4-44 files

FreeBSD/src cdd9503 — sys/net iflib.c

iflib: unify prefetching

This change makes all prefetching use the iflib prefetch wrappers, rather
than using prefetch() in some places and __builtin_prefetch() in others.

Note that __builtin_prefetch() does not work in the kernel on amd64 as clang
disables it when -mnosse is specified, so we must use the asm directives there,
and builtin_prefetch() elsewhere.

This change enables prefetching on non-x86 (notably arm64), and it enables
prefetching in netmap that has been there since day one, but which has never worked.

This is a no-op on non-netmap amd64 and i386

Differential Revision: https://reviews.freebsd.org/D60602
Reviewed by: glebius, kbowling
Sponsored by: Netflix
DeltaFile
+25-33sys/net/iflib.c
+25-331 files

FreeBSD/ports 9ef51b3 — games/vkquake Makefile distinfo, games/vkquake/files patch-Quake_common.c

games/vkquake: Update to 1.37.0

Notable changes:
+ autosaves in single-player!
+ added player speed display!
+ added ambient occlusion
+ improved performance and bugfixes

MFH:            2026Q3
Changes:        https://github.com/Novum/vkQuake/releases/tag/1.37.0
(cherry picked from commit 0c610d8eab1ce04779e3e6f2c7693f95faafdea8)
DeltaFile
+3-3games/vkquake/files/patch-Quake_common.c
+3-3games/vkquake/distinfo
+1-1games/vkquake/Makefile
+7-73 files

FreeBSD/ports 9a39292 — games/vkquake Makefile distinfo

games/vkquake: Update to 1.36.0 + take maintainer

Notable changes:
+ Support for 30th anniversary remaster
+ New level select menu
+ 5 new selectable crosshairs
+ more UI graphics filtering options
+ quake console seriously improved
+ multiplayer menu enhanced
+ lots of performance fixes, which were noticable on my laptop

PR:             298434
Approved by:    Amelia Marsh <seafork at disroot.org> (maintainer timeout)

(cherry picked from commit 058caa7c245ccafcd5105d8afad84a1a91fbafed)
DeltaFile
+3-3games/vkquake/distinfo
+2-2games/vkquake/Makefile
+5-52 files

FreeBSD/ports 0c610d8 — games/vkquake Makefile distinfo, games/vkquake/files patch-Quake_common.c

games/vkquake: Update to 1.37.0

Notable changes:
+ autosaves in single-player!
+ added player speed display!
+ added ambient occlusion
+ improved performance and bugfixes

MFH:            2026Q3
Changes:        https://github.com/Novum/vkQuake/releases/tag/1.37.0
DeltaFile
+3-3games/vkquake/files/patch-Quake_common.c
+3-3games/vkquake/distinfo
+1-1games/vkquake/Makefile
+7-73 files

FreeBSD/ports ea8f620 — www/freenginx Makefile, www/nginx Makefile

www/{nginx,nginx-devel,freenginx}: 3rd-party modules management

- Announce the removal of the HTTP_NOTICE option after 2026-12-31.
  nginx can return a fixed body itself.
- Announce the removal of the HTTP_UPSTREAM_STICKY option after
  2026-12-31 in nginx and nginx-devel. nginx has its own sticky
  directive since 1.29.6, freenginx does not.

Sponsored by:   Netzkommune GmbH
DeltaFile
+12-0www/nginx/Makefile
+12-0www/nginx-devel/Makefile
+6-0www/freenginx/Makefile
+30-03 files