FreeBSD/ports e211ff0net/v2ray Makefile distinfo

net/v2ray: Update 5.51.2 => 5.52.0

Approved by:            db@, yuri@ (Mentors, implicit)
DeltaFile
+5-5net/v2ray/distinfo
+2-3net/v2ray/Makefile
+7-82 files

FreeBSD/ports 5424a40news/inn-current Makefile distinfo

news/inn-current: Update to 20260806
DeltaFile
+3-3news/inn-current/distinfo
+2-2news/inn-current/Makefile
+5-52 files

FreeBSD/ports 1b3f9bemultimedia/vid.stab pkg-plist distinfo, multimedia/vid.stab/files patch-CMakeModules_FindSSE.cmake

multimedia/vid.stab: Update to 1.1.2

Update WWW to the GitHub repo as the main site has not been updated in
9 years.

Remove pathfix hacks that are now automatically handled.
DeltaFile
+31-31multimedia/vid.stab/files/patch-CMakeModules_FindSSE.cmake
+4-4multimedia/vid.stab/Makefile
+3-3multimedia/vid.stab/distinfo
+3-0multimedia/vid.stab/pkg-plist
+41-384 files

FreeBSD/src 42d54a8sys/amd64/vmm/amd ivrs_drv.c, sys/amd64/vmm/io iommu.h iommu.c

vmm: Tear down the IOMMU before AMD-Vi detach

Register the vmm module handler after both the bundled device drivers
and SMP. On platforms without EARLY_AP_STARTUP, SI_SUB_SMP follows
SI_SUB_DRIVERS; using the later subsystem preserves the
smp_rendezvous() requirement.

The resulting reverse unload order performs IOMMU cleanup while every
IVHD softc remains valid. Refuse an independent IVHD detach while
translation state remains initialized.

MFC after:      2 weeks
DeltaFile
+9-5sys/amd64/vmm/amd/ivrs_drv.c
+10-2sys/amd64/vmm/io/iommu.c
+8-2sys/dev/vmm/vmm_dev.c
+1-0sys/amd64/vmm/io/iommu.h
+28-94 files

FreeBSD/ports bf73380net/openldap26-client Makefile, net/openldap26-server distinfo Makefile

net/openldap26-{client,server}: upgrade to 2.6.14.

While there also fix some style issues.
DeltaFile
+147-190net/openldap26-server/Makefile
+3-3net/openldap26-server/distinfo
+2-2net/openldap26-client/Makefile
+152-1953 files

FreeBSD/src 4174cc2release Makefile.gce

release/Makefile.gce: migrate gsutil usages to gcloud CLI

Google Cloud recommends migrating from gsutil to gcloud storage CLI.
Update gce-do-upload target to use `gcloud storage buckets create` and
`gcloud storage cp` instead of `gsutil mb` and `gsutil cp` commands.

PR:             conf/297016
Reviewed by:    lwhsu
MFC after:      3 days
Differential Revision: https://reviews.freebsd.org/D58464
DeltaFile
+2-2release/Makefile.gce
+2-21 files

FreeBSD/src 5017a24sys/dev/ixgbe if_sriov.c

ixgbe: Drain events for inactive VFs

The aggregate VF mailbox poll includes only VFs whose driver
configuration completed. A configured VF slot whose vf_add callback
failed can nevertheless report reset, request, or acknowledgement
events. Because the mailbox handler skips inactive entries, such an
event remains latched and can retrigger administrative work
indefinitely.

Build the poll masks from every configured VF index and consume reset,
message, and acknowledgement events for inactive entries without
treating them as usable VFs. Use the index rather than the pool because
early vf_add errors precede pool initialization. Also include E610
PFVFLREC in aggregate reset sampling.

MFC after:      2 weeks
DeltaFile
+63-62sys/dev/ixgbe/if_sriov.c
+63-621 files

FreeBSD/src 2b763a8sys/dev/ixgbe if_ix.c

ixgbe: Handle deferred link-status requests

The iflib conversion records link-status interrupts in the
administrative request mask, but the administrative task did not
consume them.  Timer polling usually hid the omission; frequent mailbox
interrupts could continually rearm that timer and leave cached link
state down after hardware recovered.

Claim request batches atomically, process link-setup dependencies, and
sample hardware before publishing link state.  Bound each invocation to
eight batches and requeue residual work so a continuous producer cannot
monopolize the admin taskqueue.

Queue every link-related request from the legacy interrupt path.
Unlike MSI-X, its threaded continuation services RX and does not enqueue
the admin task.  This restores the event-driven behavior of ix-3.4.39.

Fixes:  b2c1e8e62049 ("ix(4): Run {mod,msf,mbx,fdir,phy}_task in if_update_admin_status")
MFC after:      2 weeks
DeltaFile
+83-50sys/dev/ixgbe/if_ix.c
+83-501 files

FreeBSD/src 26e3a80sys/dev/ixgbe if_ixv.c

ixv: Tolerate temporary PF mailbox unavailability

A PF can be resetting, handling a slow link event, or deliberately
withholding mailbox CTS while its VFs enumerate. Keep the VF attached
when the reset handshake is temporarily unavailable so a later if_init
can retry.

Never leave VF hardware running without a negotiated mailbox API: start
hardware only after reset succeeds, stop it when negotiation fails in
attach or init, and defer later recovery through iflib. This prevents a
tight reset loop while preserving recovery when the PF returns.

MFC after:      2 weeks
DeltaFile
+49-28sys/dev/ixgbe/if_ixv.c
+49-281 files

FreeBSD/src c521b16share/man/man4 route.4

route.4: Add RTV_METRIC flag to rt_metrics

Reviewed by:    ziaee
Differential Revision: https://reviews.freebsd.org/D58565
DeltaFile
+2-1share/man/man4/route.4
+2-11 files

FreeBSD/src a97e1c2sys/dev/enic if_enic.c

enic: Correct queue and attach resource ownership

Completion queues are allocated by attach_pre but released by
queues_free. An iflib failure between those stages leaks the allocation,
while the original size expression also underallocates the array.

Move completion queue allocation into the TX queue callback, correct its
size, and unwind it with TX state if RX allocation fails. Make interrupt
cleanup tolerate an unavailable array and reuse the array allocated
during device initialization instead of replacing and leaking it.

Release the DMA, multicast, and lock resources owned by a successful
attach_pre during detach. Avoid allocating the statistics DMA area a
second time near the end of attach_pre.

MFC after:      2 weeks
DeltaFile
+42-26sys/dev/enic/if_enic.c
+42-261 files

FreeBSD/src 65228a8sys/dev/axgbe if_axgbe_pci.c

axgbe: Align channel lifetime with queue allocation

DMA channels are allocated by attach_pre but released by queues_free.
When iflib fails after attach_pre and before queue allocation, neither
the old detach nor queues_free path releases them.

Allocate channels with the TX queue state and make queues_free tolerate
partially allocated rings. Use it to unwind allocation failures so TX
rings are also released when RX allocation fails.

An early detach can also precede PHY initialization and interrupt
assignment. Skip absent PHY and channel state, and release the locks
owned by attach_pre on both failure and detach.

MFC after:      2 weeks
DeltaFile
+37-42sys/dev/axgbe/if_axgbe_pci.c
+37-421 files

FreeBSD/src b3e20e1usr.sbin/rtadvd rtadvd.c

rtadvd(8): Fix RA flag inconsistency messages

During flag inconsistency report, we handle rai->rai_otherflg
as a bool, but the value is 0x40. Make it a simple number comparison.

PR:             295995
Reviewed by:    markj, Faraz Vahedi <kfv at kfv.io>
MFC after:      3 days
Differential Revision: https://reviews.freebsd.org/D58672

(cherry picked from commit 200de1b70e2b4f809d1d3a4c430db80b24124468)
DeltaFile
+4-4usr.sbin/rtadvd/rtadvd.c
+4-41 files

FreeBSD/src c3a70b0usr.sbin/rtadvd rtadvd.c

rtadvd(8): Fix RA flag inconsistency messages

During flag inconsistency report, we handle rai->rai_otherflg
as a bool, but the value is 0x40. Make it a simple number comparison.

PR:             295995
Reviewed by:    markj, Faraz Vahedi <kfv at kfv.io>
MFC after:      3 days
Differential Revision: https://reviews.freebsd.org/D58672

(cherry picked from commit 200de1b70e2b4f809d1d3a4c430db80b24124468)
DeltaFile
+4-4usr.sbin/rtadvd/rtadvd.c
+4-41 files

FreeBSD/ports 012848cscience/py-gsd distinfo Makefile, science/py-gsd/files patch-pyproject.toml

science/py-gsd: update 3.4.1 → 5.0.1
DeltaFile
+23-0science/py-gsd/files/patch-pyproject.toml
+7-11science/py-gsd/Makefile
+3-3science/py-gsd/distinfo
+33-143 files

FreeBSD/ports 327791fmisc/claude-code distinfo pkg-message, misc/claude-code/files LICENSE claude.in

misc/claude-code: update 2.1.224 → 2.1.225

Also:
* Replace the generated wrapper with files/claude.in: require linrdlnk on
  fdescfs, disable the binary's self-updater, and launch via bash
  --noprofile --norc so shell-detection does not drain stdin and collapse
  the TUI into --print mode.
* add LICENSE (Proprietary)
* add pkg-message

Differential Revision:  https://reviews.freebsd.org/D58716
DeltaFile
+41-0misc/claude-code/files/claude.in
+14-14misc/claude-code/Makefile
+18-0misc/claude-code/pkg-message
+5-5misc/claude-code/distinfo
+1-0misc/claude-code/files/LICENSE
+79-195 files

FreeBSD/ports 5c0b3b2misc/py-openai Makefile distinfo

misc/py-openai: update 2.46.0 → 2.53.0
DeltaFile
+3-3misc/py-openai/distinfo
+1-1misc/py-openai/Makefile
+4-42 files

FreeBSD/ports f0bef85misc/py-runloop-api-client Makefile distinfo

misc/py-runloop-api-client: update 1.20.3 → 1.28.0
DeltaFile
+3-3misc/py-runloop-api-client/distinfo
+1-1misc/py-runloop-api-client/Makefile
+4-42 files

FreeBSD/ports a2cd2d1www/py-httpx2 Makefile distinfo

www/py-httpx2: update 2.5.0 → 2.9.1
DeltaFile
+3-3www/py-httpx2/distinfo
+2-2www/py-httpx2/Makefile
+5-52 files

FreeBSD/ports 10473bewww/py-httpcore2 Makefile distinfo

www/py-httpcore2: update 2.5.0 → 2.9.1
DeltaFile
+3-3www/py-httpcore2/distinfo
+1-1www/py-httpcore2/Makefile
+4-42 files

FreeBSD/ports 8fccd9edevel/py-pipcl Makefile distinfo

devel/py-pipcl: update 9 → 12
DeltaFile
+3-3devel/py-pipcl/distinfo
+1-1devel/py-pipcl/Makefile
+4-42 files

FreeBSD/ports aacc0fedatabases/py-pylance Makefile distinfo

databases/py-pylance: update 9.0.1 → 10.0.0
DeltaFile
+3-3databases/py-pylance/distinfo
+1-1databases/py-pylance/Makefile
+4-42 files

FreeBSD/ports 6f0dc46www/pomerium Makefile distinfo, www/pomerium/files pipe_freebsd.go patch-config_envoyconfig_listeners.go

www/pomerium: update to 0.33.0
DeltaFile
+464-209www/pomerium/files/modules.txt
+231-173www/pomerium/distinfo
+176-127www/pomerium/Makefile
+4-6www/pomerium/files/patch-pkg_envoy_envoy__other.go
+4-4www/pomerium/files/patch-config_envoyconfig_listeners.go
+7-0www/pomerium/files/pipe_freebsd.go
+886-5194 files not shown
+895-53210 files

FreeBSD/ports a91a5b6www/pomerium-envoy-custom distinfo Makefile, www/pomerium-envoy-custom/files envoy_freebsd-dependency-imports.patch patch-WORKSPACE

www/pomerium-envoy-custom: update to 1.37.0.20260618

Update pomerium-envoy-custom to commit 16ede7a56f2f (envoy f387231af8).

Major changes for this version bump:
- Remove obsolete FreeBSD patches (ares, zlib, zstd cmake targets removed
  upstream; luajit_build.sh and -GNinja already upstream)
- Regenerate remaining FreeBSD patches for new envoy source
- Replace envoy_toolshed stub with real extraction (v0.3.35)
- Remove rules_oci (not needed for FreeBSD binary build)
- Remove custom LLVM toolchain; use system Clang via
  --extra_toolchains=@local_config_cc//:all
- Add --override_repository for renamed repos (re2, yaml-cpp, brotli, etc.)
- Add FreeBSD support to toolchains_llvm v1.7.0
- Add FreeBSD support to pomerium's luajit.bzl platform detection
- Create FreeBSD-specific openssh config.h
- Fix LuaJIT getentropy conflict with FreeBSD SSP headers
- Build nghttp2 from source (envoy patches add custom API)
- Add FreeBSD to rules_foreign_cc cmake generator detection

    [4 lines not shown]
DeltaFile
+2,108-0www/pomerium-envoy-custom/files/openssh_config_freebsd.h
+320-359www/pomerium-envoy-custom/Makefile
+117-115www/pomerium-envoy-custom/distinfo
+20-186www/pomerium-envoy-custom/files/patches_envoy_freebsd-luajit.patch
+91-38www/pomerium-envoy-custom/files/patch-WORKSPACE
+41-78www/pomerium-envoy-custom/files/envoy_freebsd-dependency-imports.patch
+2,697-77620 files not shown
+2,929-1,18226 files

FreeBSD/ports dab8d0adevel/gstreamer1-devtools distinfo, multimedia/gstreamer1-editing-services distinfo

GStreamer1: Update to 1.28.6

Changes: https://gstreamer.freedesktop.org/releases/1.28/#1.28.6

MFH:            2026Q3
Security:       dde0fb16-2731-4d3c-aabf-459357235745
(cherry picked from commit 6eac03c7fd400b4a08b5421493fc2f64209e77aa)
DeltaFile
+9-9multimedia/gstreamer1-plugins/distinfo
+3-3multimedia/gstreamer1-rtsp-server/distinfo
+3-3multimedia/gstreamer1-plugins-rust/distinfo
+3-3multimedia/gstreamer1-libav/distinfo
+3-3multimedia/gstreamer1-editing-services/distinfo
+3-3devel/gstreamer1-devtools/distinfo
+24-244 files not shown
+32-3210 files

FreeBSD/ports 6eac03cdevel/gstreamer1-devtools distinfo, multimedia/gstreamer1-editing-services distinfo

GStreamer1: Update to 1.28.6

Changes: https://gstreamer.freedesktop.org/releases/1.28/#1.28.6

MFH:            2026Q3
Security:       dde0fb16-2731-4d3c-aabf-459357235745
DeltaFile
+9-9multimedia/gstreamer1-plugins/distinfo
+3-3multimedia/py-gstreamer1/distinfo
+3-3multimedia/gstreamer1-plugins-rust/distinfo
+3-3multimedia/gstreamer1-libav/distinfo
+3-3multimedia/gstreamer1-editing-services/distinfo
+3-3devel/gstreamer1-devtools/distinfo
+24-245 files not shown
+33-3411 files

FreeBSD/ports 59a42casecurity/vuxml/vuln 2026.xml

security/vuxml: Add gstreamer1* <= 1.28.6
DeltaFile
+50-0security/vuxml/vuln/2026.xml
+50-01 files

FreeBSD/src 8befc9esys/kern kern_environment.c

kern: fix oversight in security.bsd.unprivileged_kenv_read

It was intended that one could close the hole back in loader, but the
sysctl was actually not marked TUNABLE.  The hardening menu option thus
did nothing, because we wouldn't read the value from kenv.

Reported by:    markj
Fixes:  6e81fbf5833d ("bsdinstall: add a hardening knob [...]")
Fixes:  4fd518fcb2bb ("kern: add a security knob to disable [...]")
DeltaFile
+1-1sys/kern/kern_environment.c
+1-11 files

FreeBSD/ports a75bc9esecurity/qgpgme/files patch-src_util.h

security/qgpgme: Remove unused header in util.h
DeltaFile
+9-1security/qgpgme/files/patch-src_util.h
+9-11 files

FreeBSD/ports 28b2388audio/fossmixer distinfo pkg-plist

audio/fossmixer: Update 0.0.3 => 0.0.6

Changelog:
https://goto10.co/projects/detroit/trunk/apps/fossmixer/CHANGELOG

- Improve port.

PR:             291347
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+17-16audio/fossmixer/Makefile
+5-3audio/fossmixer/distinfo
+8-0audio/fossmixer/pkg-plist
+30-193 files