FreeBSD/ports 68ca583astro/qmapshack/files patch-src_qmt__rgb2pct_CMakeLists.txt patch-src_qmt__map2jnx_CMakeLists.txt

astro/qmapshack: update to 1.21.0

Release Notes:
  https://github.com/Maproom/qmapshack/releases/tag/V_1.21.0
DeltaFile
+62-7astro/qmapshack/files/patch-CMakeLists.txt
+12-19astro/qmapshack/files/patch-cmake_Modules_DefineInstallationPaths.cmake
+0-11astro/qmapshack/files/patch-src_qmt__rgb2pct_CMakeLists.txt
+0-11astro/qmapshack/files/patch-src_qmt__map2jnx_CMakeLists.txt
+0-11astro/qmapshack/files/patch-src_qmaptool_CMakeLists.txt
+0-11astro/qmapshack/files/patch-src_qmapshack_CMakeLists.txt
+74-703 files not shown
+83-849 files

FreeBSD/ports 9bfe401net-mgmt/check_ssl_cert Makefile distinfo

net-mgmt/check_ssl_cert: update to 2.103.1

Release Notes:
  https://github.com/matteocorti/check_ssl_cert/releases/tag/v2.103.1
DeltaFile
+3-3net-mgmt/check_ssl_cert/distinfo
+1-1net-mgmt/check_ssl_cert/Makefile
+4-42 files

FreeBSD/ports 8c3d532dns/adns distinfo Makefile, dns/adns/files patch-common.make.in

dns/adns: update 1.6.0 -> 1.6.2, pet repology

- Disable debugging output to stderr from adns_addr2text and
  adns_text2addr, when used with exciting values (eg scoped addresses)
- Suppress warning about `trust-ad` in resolv.conf
DeltaFile
+29-0dns/adns/files/patch-common.make.in
+7-7dns/adns/Makefile
+3-3dns/adns/distinfo
+39-103 files

FreeBSD/src 26b921dsys/dev/intel spi_pci.c

intelspi: add Cannon Lake SPI controller IDs

Add PCI device IDs for Cannon Lake-generation LPSS peripheral SPI
controllers.

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D58999
DeltaFile
+6-0sys/dev/intel/spi_pci.c
+6-01 files

FreeBSD/src 9fb03ddsys/dev/intel spi_pci.c

intelspi: add Comet Lake SPI controller IDs

Add PCI device IDs for Comet Lake-generation LPSS peripheral SPI
controllers.

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D59000
DeltaFile
+6-0sys/dev/intel/spi_pci.c
+6-01 files

FreeBSD/src a3489ccsys/dev/intel spi_pci.c

intelspi: add Broxton SPI controller IDs

Add PCI device IDs for Broxton-generation LPSS peripheral SPI
controllers.

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D58997
DeltaFile
+6-0sys/dev/intel/spi_pci.c
+6-01 files

FreeBSD/src 7287754sys/dev/intel spi_pci.c

intelspi: sort PCI ID table by device ID

Sort the existing LPSS peripheral SPI controller PCI ID table by
numeric device ID so new entries have an unambiguous insertion point.

Reviewed by:    wulf
Differential Revision:  https://reviews.freebsd.org/D58996
DeltaFile
+3-3sys/dev/intel/spi_pci.c
+3-31 files

FreeBSD/src 4c998ffsys/dev/intel spi_pci.c

intelspi: add Apollo Lake SPI controller IDs

Add PCI device IDs for Apollo Lake-generation LPSS peripheral SPI
controllers.

Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D58998
DeltaFile
+3-0sys/dev/intel/spi_pci.c
+3-01 files

FreeBSD/doc 6c762c3shared contrib-committers.adoc contrib-develalumni.adoc

Move syrinx to developer alumni

Reviewed by:    imp
Differential Revision:  https://reviews.freebsd.org/D59094
DeltaFile
+0-1shared/contrib-committers.adoc
+1-0shared/contrib-develalumni.adoc
+1-12 files

FreeBSD/ports 8874f5bsysutils/terraform Makefile distinfo

sysutils/terraform: Update to 1.15.9, fix LICENSE

Update from 1.15.3 to 1.15.9.  1.15.9 updates go-slug to v0.18.3,
addressing CVE-2026-14978, an exclusion bypass in .terraformignore
handling.  The version proposed in the PR, 1.15.8, still carries the
affected go-slug v0.18.1, hence the jump to 1.15.9.

The remaining changes are bugfixes: crashes in init and console,
wrong exit codes for variable errors in plan, query and refresh,
child module and submodule validation, several module installation
edge cases, and concurrency safety in the config parsers.

PR:             297296
Security:       CVE-2026-14978
Approved by:    maintainer timeout (dutra)
Sponsored by:   Netzkommune GmbH

(cherry picked from commit 470005eb0237802792ed6d527374f0f1301e1967)
DeltaFile
+27-27sysutils/terraform/distinfo
+2-2sysutils/terraform/Makefile
+29-292 files

FreeBSD/ports 2fb0b54security/vuxml/vuln 2026.xml

security/vuxml: Document terraform exclusion bypass

go-slug before v0.18.3, bundled in terraform, does not consistently
match .terraformignore rules against canonically equivalent Unicode
filenames, so files meant to be excluded can end up in uploads to
HCP Terraform or Terraform Enterprise.  Fixed in terraform 1.15.9.

Security:       CVE-2026-14978
Sponsored by:   Netzkommune GmbH
DeltaFile
+43-0security/vuxml/vuln/2026.xml
+43-01 files

FreeBSD/ports 470005esysutils/terraform Makefile distinfo

sysutils/terraform: Update to 1.15.9, fix LICENSE

Update from 1.15.3 to 1.15.9.  1.15.9 updates go-slug to v0.18.3,
addressing CVE-2026-14978, an exclusion bypass in .terraformignore
handling.  The version proposed in the PR, 1.15.8, still carries the
affected go-slug v0.18.1, hence the jump to 1.15.9.

The remaining changes are bugfixes: crashes in init and console,
wrong exit codes for variable errors in plan, query and refresh,
child module and submodule validation, several module installation
edge cases, and concurrency safety in the config parsers.

PR:             297296
Security:       CVE-2026-14978
Approved by:    maintainer timeout (dutra)
Sponsored by:   Netzkommune GmbH
DeltaFile
+27-27sysutils/terraform/distinfo
+2-2sysutils/terraform/Makefile
+29-292 files

FreeBSD/src 76f1421sys/sys libkern.h

libkern.h: remove HAVE_INLINE_* macros

The final consumer of this was OpenZFS, fixed in ffaea0831973 (thanks
mav@). That change has been present in all active OpenZFS release
branches for at least 6 months. These can finally be retired.

Reviewed by:    mav
MFC after:      3 days
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D55201
DeltaFile
+0-11sys/sys/libkern.h
+0-111 files

FreeBSD/src 3d20f8asys/riscv/starfive jh7110_gpio.c

jh7110_gpio: driver enhancements

Fix reporting of state and capabilities by the gpioctl command.

Support selection of pull-up and pull-down resistors.

Support second gpio device (AON - always on power domain) to allow
attaching gpioled device to visionfive2 status LED or querying boot
selection switches.

Reviewed by:    mhorne
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D58693
DeltaFile
+111-36sys/riscv/starfive/jh7110_gpio.c
+111-361 files

FreeBSD/src 2af2ec5sys/riscv/starfive jh7110_gpio.c

jh7110_gpio: remove unneeded cleanup

Any failure within bus_alloc_resources() will call bus_release_resources();
thus the call is redundant here.

MFC after:      3 days
Sponsored by:   The FreeBSD Foundation
DeltaFile
+0-1sys/riscv/starfive/jh7110_gpio.c
+0-11 files

FreeBSD/src 7221614sys/riscv/starfive jh7110_gpio.c

jh7110_gpio: style

- Fix whitespace
- Replace JH7110_GPIO_READ with RD4 (and WR4)
- Trim headers
- Explicit conditional checks
- Use correct method typedefs

MFC after:      3 days
Sponsored by:   The FreeBSD Foundation
DeltaFile
+49-52sys/riscv/starfive/jh7110_gpio.c
+49-521 files

FreeBSD/src e2f2b18. ObsoleteFiles.inc

ObsoleteFiles: Add missing headers

The header files for dialog, figpar, dpv were never listed.

PR:             297612
Fixes:          af202a5052b6 ("Retire dialog")
DeltaFile
+7-0ObsoleteFiles.inc
+7-01 files

FreeBSD/src 0c5eb09tools/build/mk OptionalObsoleteFiles.inc

OptionalObsoleteFiles: Add missing headers

The header files for dialog, figpar, dpv were never listed.

Fixes:          bc6c827078b7 ("OptionalObsoleteFiles: Add figpar to dialog section")
(cherry picked from commit acf6518a2d6f33fb56c861861cbad0c0cb56817e)
DeltaFile
+7-0tools/build/mk/OptionalObsoleteFiles.inc
+7-01 files

FreeBSD/ports 9936f14www/ungoogled-chromium Makefile distinfo, www/ungoogled-chromium/files patch-chrome_browser_renderer__context__menu_render__view__context__menu.cc patch-chrome_browser_file__system__access_chrome__file__system__access__permission__context.cc

www/ungoogled-chromium: update to 151.0.7922.169

Security:       https://vuxml.freebsd.org/freebsd/d14c86b6-9ca3-11f1-bf98-a8a1599412c6.html
DeltaFile
+7-7www/ungoogled-chromium/distinfo
+2-2www/ungoogled-chromium/files/patch-chrome_browser_renderer__context__menu_render__view__context__menu.cc
+2-2www/ungoogled-chromium/files/patch-chrome_browser_file__system__access_chrome__file__system__access__permission__context.cc
+1-2www/ungoogled-chromium/Makefile
+12-134 files

FreeBSD/ports b6e51acsecurity/certmonger Makefile

security/certmonger: Fix hardcoded paths

The location of the IPA configuration is hardcoded in three source
files, so on FreeBSD certmonger never finds it and every certificate
request fails with "Unable to determine location of IPA LDAP server".
Renewal is affected too, dogtag-ipa-renew-agent-submit carries the same
paths.

PR:                     297709
Approved by:            crees (maintainer)
Sponsored by:           Netzkommune GmbH

(cherry picked from commit 2a0a6d9d4d7e21058908377aff9d6ec101ff3993)
DeltaFile
+7-1security/certmonger/Makefile
+7-11 files

FreeBSD/src fdf3e57sys/dev/sdhci sdhci_fdt_spacemit.c

sdhci: Remove redundant device_get_softc

Fixes: 550db3d6f502 ("sdhci: Initial support for the SpacemiT K1 sdhci controller")
Reviewed by:    bnovkov
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D59083
DeltaFile
+1-1sys/dev/sdhci/sdhci_fdt_spacemit.c
+1-11 files

FreeBSD/ports 2a0a6d9security/certmonger Makefile

security/certmonger: Fix hardcoded paths

The location of the IPA configuration is hardcoded in three source
files, so on FreeBSD certmonger never finds it and every certificate
request fails with "Unable to determine location of IPA LDAP server".
Renewal is affected too, dogtag-ipa-renew-agent-submit carries the same
paths.

PR:                     297709
Approved by:            crees (maintainer)
Sponsored by:           Netzkommune GmbH
DeltaFile
+7-1security/certmonger/Makefile
+7-11 files

FreeBSD/ports f1827fadevel/sope2 Makefile, www/sogo2 Makefile

www/sogo2: Mark DEPRECATED

PR:             297578
Reported by:    diizzy
DeltaFile
+3-0www/sogo2/Makefile
+3-0devel/sope2/Makefile
+6-02 files

FreeBSD/src 97e24b4sys/arm/broadcom/bcm2835 bcm2835_audio.c, sys/contrib/vchiq/interface/vchi vchi.h

vchiq: Merge two commits from Linux

6e474d8e3981 ("staging: vchiq_shim: avoid code duplication") refactors
some code which makes applying the subsequent patch easier.

49bec49fd7f2 ("staging: vc04_services: remove vchiq_copy_from_user")
addresses a user-triggerable integer overflow via the
VCHIQ_IOC_QUEUE_MESSAGE ioctl on /dev/vchiq (which has mode 0600 by
default).  It also addresses insufficient validation of user-controlled
addresses in vchiq_copy_from_user().

Update the bcm2835_audio driver to follow the change to
vchi_msg_queue().

Reported by:    Vicki Pfau
Reviewed by:    Abdelkader Boudih <freebsd at seuros.com>
Tested by:      Abdelkader Boudih <freebsd at seuros.com>
Tested by:      Marco Devesas Campos <devesas.campos at gmail.com>
MFC after:      2 weeks

    [2 lines not shown]
DeltaFile
+165-108sys/contrib/vchiq/interface/vchiq_arm/vchiq_core.c
+41-75sys/contrib/vchiq/interface/vchiq_arm/vchiq_shim.c
+102-1sys/contrib/vchiq/interface/vchiq_arm/vchiq_arm.c
+24-14sys/arm/broadcom/bcm2835/bcm2835_audio.c
+6-19sys/contrib/vchiq/interface/vchi/vchi.h
+0-14sys/contrib/vchiq/interface/vchiq_arm/vchiq_2835_arm.c
+338-2312 files not shown
+344-2378 files

FreeBSD/src 250db71lib/libusb libusb10_hotplug.c

libusb: Add an XXX comment for possible duplicate callback IDs

If next_callback_id wraps we could end up with two callbacks with the
same ID.  I recommitted the original change despite this issue in order
to fix the libusb API as soon as possible after SHLIB_MAJOR was bumped
in commit 527a82474cb3 (libusb: versioning symbols).

It's very unlikely in practice that software will register and
deregister a sufficient number of callbacks to trigger this, but it is
a real issue to be fixed in a subsequent commit.

Sponsored by:   The FreeBSD Foundation
DeltaFile
+1-0lib/libusb/libusb10_hotplug.c
+1-01 files

FreeBSD/src 6bda9f2lib/libusb libusb10.c libusb10.h

libusb: change callback register handler to int

libusb upstream uses int for register handler. This causes some library
user (like pyusb) to assume that we have int in all implementations and
therefore provides a 4 byte storage only. This causes Segmentation
fault as we will right the pointer.

Reviewed by:    adrian
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D54211

(cherry picked from commit ce9ced951a0b9d004a3b007d4ac6e9087a1301a2)
DeltaFile
+32-18lib/libusb/libusb10_hotplug.c
+2-3lib/libusb/libusb.h
+2-0lib/libusb/libusb10.h
+1-0lib/libusb/libusb10.c
+37-214 files

FreeBSD/ports 5745d12devel/py-backports.cached-property Makefile, devel/py-backports.entry-points-selectable Makefile

devel/py-backports.*: resolve conflicts with devel/py-backports

devel/py-backports does basically nothing except to install the
/usr/local/lib/python3.*/site-packages/backports/__init__.py file.
Several other py-backports.* ports also installed the same file, with
identical contents.  That created runtime conflicts that prevented
certain ports from being installed, including sysutils/py-salt.

Fix the conflicts by patching the offending ports to stop installing
that file, and instead depend on devel/py-backports.

PR:             297696
PR:             297697
Reviewed by:    krion
Sponsored by:   ConnectWise
Inspired by:    56a719e6b67 (svn r492366)
DeltaFile
+13-1devel/py-backports.cached-property/Makefile
+14-0devel/py-backports.entry-points-selectable/Makefile
+12-1devel/py-backports.zoneinfo/Makefile
+13-0devel/py-backports.tarfile/Makefile
+0-1sysutils/py-salt/Makefile
+52-35 files

FreeBSD/ports fe7bfeearchivers/py-python-snappy Makefile

archivers/py-python-snappy: deprecate

It is no longer depended upon
DeltaFile
+3-0archivers/py-python-snappy/Makefile
+3-01 files

FreeBSD/ports bc4dd52security/py-pyaff4 Makefile

security/py-pyaff4: deprecate

It is no longer depended upon
DeltaFile
+3-0security/py-pyaff4/Makefile
+3-01 files

FreeBSD/src f71abf3usr.bin/netstat netstat.h main.c

netstat(1): Add nexthop statistics support with -os flag

Add support nexthop statistics and update its manual.
While here, fix manual of other nexthop related options.

Reviewed by: kfv
Differential Revision:  https://reviews.freebsd.org/D58538
DeltaFile
+54-1usr.bin/netstat/netstat.1
+24-0usr.bin/netstat/nhops.c
+9-3usr.bin/netstat/main.c
+1-0usr.bin/netstat/netstat.h
+88-44 files