net-p2p/go-ethereum: Update 1.17.9 => 1.17.10
Changelog:
* This is a quick release that postpones the Amsterdam fork on the
Hoodi testnet, previously scheduled for Oct 26, 2026, 17:42:48 UTC.
Hoodi node operators running v1.17.9 must upgrade before then.
New date will be set in future release; other networks are unaffected.
* Snap sync now switches to snap/2 automatically once Amsterdam is active.
Use '--snap.v2=false' or '--snap.v2=true' to force a protocol.
* Optimize DUP/SWAP dispatch in the interpreter
https://github.com/ethereum/go-ethereum/releases/tag/v1.17.10
PR: 299947
Approved by: Enrique Fynn <me at enriquefynn.com> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
(cherry picked from commit 85ad0319366a70bd6b9a0d4548e684e469882f23)
net-p2p/go-ethereum: Update 1.17.9 => 1.17.10
Changelog:
* This is a quick release that postpones the Amsterdam fork on the
Hoodi testnet, previously scheduled for Oct 26, 2026, 17:42:48 UTC.
Hoodi node operators running v1.17.9 must upgrade before then.
New date will be set in future release; other networks are unaffected.
* Snap sync now switches to snap/2 automatically once Amsterdam is active.
Use '--snap.v2=false' or '--snap.v2=true' to force a protocol.
* Optimize DUP/SWAP dispatch in the interpreter
https://github.com/ethereum/go-ethereum/releases/tag/v1.17.10
PR: 299947
Approved by: Enrique Fynn <me at enriquefynn.com> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q4
www/bunkerweb: Update to 1.6.17
This release fixes several access control issues, among them a URI
rewrite in a custom configuration that skipped the bans, lists, rate
limit, antibot, authentication and ModSecurity checks.
Changelog: https://github.com/bunkerity/bunkerweb/releases/tag/v1.6.17
Sponsored by: Netzkommune GmbH
iflib: Do not pull up trailing IPv4 fragments to the L4 header
iflib_parse_header() pulls every IPv4 packet up to the end of the TCP or
UDP header, including fragments at a non-zero offset, which carry no L4
header at all. A trailing fragment shorter than that header (1-7 bytes
of UDP, 1-19 bytes of TCP) makes m_pullup() fail and the frame is freed
without a trace in the interface counters.
Only parse the L4 header on the first fragment. TSO never produces
fragments, so assert that.
With a 1500-byte MTU every UDP datagram of 1473-1479 bytes is lost
behind a forwarding host whose ingress NIC sets receive checksum flags,
or on any VLAN with hardware tagging. SIP over UDP is a common victim.
Reported by: Alex Roberts
Reviewed by: gallatin
Fixes: c224b2ce7de0 ("iflib: don't pullup UDP payloads to the TCP header size")
See also: https://redmine.pfsense.org/issues/17196
[2 lines not shown]
sockstat: improve consistency
Include the entries of the BBLOG STATE column in the computation
of the column width as done also for other columns.
Also set first to falso only when needed.
Sponsored by: Netflix, Inc.
(cherry picked from commit 732c8d2a1a0e169bad1c02b1e54a4306861bde4a)
devel/py-ipympl: Update to 0.10.0
The build runs the hatch jupyter-builder hook, which rebuilds the
notebook and JupyterLab extensions with jlpm and fetches npm packages,
so it fails in poudriere (and hangs on i386); the port is marked
BROKEN. The sdist already ships both prebuilt extensions (0.10.0
still does); set HATCH_BUILD_NO_HOOKS to skip the hook and drop the
node build dependency, BROKEN and IGNORE_i386.
Requirements are unchanged. Drop jupyterlab from RUN_DEPENDS:
upstream does not declare it and nothing imports it (it stays in
BUILD_DEPENDS).
While here, sort RUN_DEPENDS.
Changes: https://github.com/matplotlib/ipympl/releases/tag/v0.10.0
PR: 299894
(cherry picked from commit 8dc3c49c9ab32af1841c91c41f7e274da299ec4d)
x11-toolkits/kddockwidgets: Update to 2.5.0
- Switch to release tarball
- Remove unused dependency
- Drop stale CMake args
(cherry picked from commit e86de5a73a1725390afdacb72c700e3b2236a3ed)
devel/py-ipympl: Update to 0.10.0
The build runs the hatch jupyter-builder hook, which rebuilds the
notebook and JupyterLab extensions with jlpm and fetches npm packages,
so it fails in poudriere (and hangs on i386); the port is marked
BROKEN. The sdist already ships both prebuilt extensions (0.10.0
still does); set HATCH_BUILD_NO_HOOKS to skip the hook and drop the
node build dependency, BROKEN and IGNORE_i386.
Requirements are unchanged. Drop jupyterlab from RUN_DEPENDS:
upstream does not declare it and nothing imports it (it stays in
BUILD_DEPENDS).
While here, sort RUN_DEPENDS.
Changes: https://github.com/matplotlib/ipympl/releases/tag/v0.10.0
PR: 299894
sockstat: improve consistency
Include the entries of the BBLOG STATE column in the computation
of the column width as done also for other columns.
Also set first to falso only when needed.
Sponsored by: Netflix, Inc.
(cherry picked from commit 732c8d2a1a0e169bad1c02b1e54a4306861bde4a)
