FreeBSD/ports cccbb2emisc/py-litellm distinfo Makefile, misc/py-litellm/files patch-pyproject.toml

misc/py-litellm: Update to 1.89.4

Changelog: https://github.com/BerriAI/litellm/releases/tag/v1.89.4

Reported by:    portscout
DeltaFile
+3-3misc/py-litellm/distinfo
+1-1misc/py-litellm/files/patch-pyproject.toml
+1-1misc/py-litellm/Makefile
+5-53 files

FreeBSD/ports b20b2dbdevel/gitaly distinfo, net/gitlab-agent distinfo

www/gitlab: security and patch update to 19.1.1

Changes:        https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-1-1-released/
Security:       ee1e7aef-7117-11f1-873f-2cf05da270f3
DeltaFile
+11-11devel/gitaly/distinfo
+6-6www/gitlab/distinfo
+5-5www/gitlab-pages/distinfo
+5-5www/gitlab-workhorse/distinfo
+5-5net/gitlab-agent/distinfo
+4-4www/gitlab/Makefile.common
+36-361 files not shown
+39-397 files

FreeBSD/ports a9385cbsecurity/vuxml/vuln 2026.xml

security/vuxml: document gitlab vulnerabilities
DeltaFile
+53-0security/vuxml/vuln/2026.xml
+53-01 files

FreeBSD/ports 1475dd5www/R-cran-httr2 distinfo Makefile

www/R-cran-httr2: Update to 1.2.3

Changelog: https://cran.r-project.org/web/packages/httr2/news/news.html
DeltaFile
+3-3www/R-cran-httr2/distinfo
+3-1www/R-cran-httr2/Makefile
+6-42 files

FreeBSD/ports 3f329d0security/libssh2 Makefile

security/libssh2: Fix 26d1ee8df82d589fb233b27ce1e9c66de999b60d

Approved by:    portmgr (blanket)
DeltaFile
+1-1security/libssh2/Makefile
+1-11 files

FreeBSD/ports 26d1ee8security/libssh2 Makefile distinfo

security/libssh2: Fix CVE-2026-7598

Backport upstream commit 256d04b60d80bf1190e96b0ad1e91b2174d744b1
to fix CVE-2026-7598

Reference:
https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1

PR:             295742
Approved by:    Maintainer timeout, 2+ weeks
DeltaFile
+3-1security/libssh2/Makefile
+3-1security/libssh2/distinfo
+6-22 files

FreeBSD/ports 265dd74multimedia/libass Makefile distinfo

multimedia/libass: Update to 0.17.5

Changelog: https://github.com/libass/libass/releases/tag/0.17.5
DeltaFile
+6-3multimedia/libass/Makefile
+3-3multimedia/libass/distinfo
+1-2multimedia/libass/pkg-plist
+10-83 files

FreeBSD/ports 2ed459daudio/fooyin distinfo pkg-plist

audio/fooyin: Update to 0.11.1

Changelog: https://github.com/fooyin/fooyin/releases/tag/v0.11.1
DeltaFile
+3-3audio/fooyin/distinfo
+3-0audio/fooyin/pkg-plist
+1-1audio/fooyin/Makefile
+7-43 files

FreeBSD/ports 68b32d1www/phalcon distinfo Makefile

www/phalcon: update to 5.16.0.
DeltaFile
+3-3www/phalcon/distinfo
+1-1www/phalcon/Makefile
+4-42 files

FreeBSD/src 961f481sys/kern sched_ule.c

sched_ule: Fix off by one in preempt_thresh definition

Since 'preempt_thresh' is set to PRI_MIN_KERN by default, and comparison
of the considered thread's priority with that threshold is done with
'<=', PRI_MIN_KERN threads actually can preempt other threads, contrary
to other non-interrupt kernel ones (between PRI_MIN_KERN + 1 and
PRI_MAX_KERN).

So, replace the comparison operator '<=' by '<'.  The alternative would
be to change the default value, but changing the comparison instead has
the benefit to be consistent with the 0 setting (which forbids
preemption entirely), since allowing only threads with priority 0 to
preempt becomes possible.

Consequently, we also change the default value for the FULL_PREEMPTION
option by adding 1 to PRI_MAX_IDLE (in practice, that does not make any
difference in the current setting, since no preemption will happen if
the new priority value is not strictly lower than the current one, and
PRI_MAX_IDLE is PRI_MAX, the highest possible priority).

    [8 lines not shown]
DeltaFile
+2-2sys/kern/sched_ule.c
+2-21 files

FreeBSD/src ae9f664sys/fs/nfs nfs_commonkrpc.c

nfs_commonkrpc.c: Improve handling of NFSv4.1/4.2 recovery

Commit 4d80d4913e79 fixed a long standing bug in the recovery
code.  However. glebius@ reported seeing multiple
recovery cycles with this patch during an NFSv4.1/4.2
server reboot.

This commit should minimize the risk of multiple
recovery cycles.

PR:     294925

(cherry picked from commit ea4886f2829bf33866c8c0c60b14a9641fc54b40)
DeltaFile
+8-5sys/fs/nfs/nfs_commonkrpc.c
+8-51 files

FreeBSD/src afc1136sys/fs/nfs nfs_commonkrpc.c

nfs_commonkrpc.c: Improve handling of NFSv4.1/4.2 recovery

Commit 4d80d4913e79 fixed a long standing bug in the recovery
code.  However. glebius@ reported seeing multiple
recovery cycles with this patch during an NFSv4.1/4.2
server reboot.

This commit should minimize the risk of multiple
recovery cycles.

PR:     294925

(cherry picked from commit ea4886f2829bf33866c8c0c60b14a9641fc54b40)
DeltaFile
+8-5sys/fs/nfs/nfs_commonkrpc.c
+8-51 files

FreeBSD/src 28ae0d8sys/fs/nfs nfs_commonkrpc.c nfs_commonsubs.c

nfs: Fix argument typo to avoid a crash

A typo resulted in the wrong argument for a bytewise
comparison that could result in a crash if
the incorrect argument was not a valid pointer.

This patch fixes the argument.

While investigating this, I noticed that the
correct argument was not being filled in as
required, so this patch fixes that, as well.

Somehow, recovery from a NFSv4.1/4.2 server
crash worked during testing, so this was not
detected.  The bug/patch only affects NFS
client mounts using NFSv4.1/4.2.

PR:     294925

(cherry picked from commit 4d80d4913e79c8b5918b1f04c1c7b38e6c76b9b4)
DeltaFile
+3-2sys/fs/nfs/nfs_commonkrpc.c
+3-0sys/fs/nfs/nfs_commonsubs.c
+6-22 files

FreeBSD/src 8404328sys/fs/nfs nfs_commonkrpc.c nfs_commonsubs.c

nfs: Fix argument typo to avoid a crash

A typo resulted in the wrong argument for a bytewise
comparison that could result in a crash if
the incorrect argument was not a valid pointer.

This patch fixes the argument.

While investigating this, I noticed that the
correct argument was not being filled in as
required, so this patch fixes that, as well.

Somehow, recovery from a NFSv4.1/4.2 server
crash worked during testing, so this was not
detected.  The bug/patch only affects NFS
client mounts using NFSv4.1/4.2.

PR:     294925

(cherry picked from commit 4d80d4913e79c8b5918b1f04c1c7b38e6c76b9b4)
DeltaFile
+3-2sys/fs/nfs/nfs_commonkrpc.c
+3-0sys/fs/nfs/nfs_commonsubs.c
+6-22 files

FreeBSD/src fe7426bsys/fs/nfsserver nfs_nfsdport.c

nfs_nfsdport.c: Fix a typo in a KASSERT

Reported by:    rlibby
DeltaFile
+1-1sys/fs/nfsserver/nfs_nfsdport.c
+1-11 files

FreeBSD/src d946a88share/man/man7 build.7

build.7: explain how to build KBI-compatible standalone module

Reviewed by:    imp, kevans
Sponsored by:   The FreeBSD Foundation
MFC after:      3 days
Differential revision:  https://reviews.freebsd.org/D57859
DeltaFile
+40-0share/man/man7/build.7
+40-01 files

FreeBSD/ports f0247f2www/librewolf distinfo Makefile, www/librewolf/files patch-python_sites_mach.txt

www/librewolf: Update 152.0.1-1 => 152.0.2-1

Release Notes:
https://www.firefox.com/en-US/firefox/152.0.2/releasenotes/

PR:             296265
Sponsored by:   UNIS Labs
MFH:            2026Q2

(cherry picked from commit 9411dbbc0e8003216b1328fb85e0704c39b6cded)
DeltaFile
+0-32www/librewolf/files/patch-python_sites_mach.txt
+3-3www/librewolf/distinfo
+1-1www/librewolf/Makefile
+4-363 files

FreeBSD/ports 9411dbbwww/librewolf distinfo Makefile, www/librewolf/files patch-python_sites_mach.txt

www/librewolf: Update 152.0.1-1 => 152.0.2-1

Release Notes:
https://www.firefox.com/en-US/firefox/152.0.2/releasenotes/

PR:             296265
Sponsored by:   UNIS Labs
MFH:            2026Q2
DeltaFile
+0-32www/librewolf/files/patch-python_sites_mach.txt
+3-3www/librewolf/distinfo
+1-1www/librewolf/Makefile
+4-363 files

FreeBSD/ports b60f4fbnet/bsdec2-image-upload distinfo Makefile

net/bsdec2-image-upload: update to 1.4.11
DeltaFile
+3-3net/bsdec2-image-upload/distinfo
+1-1net/bsdec2-image-upload/Makefile
+4-42 files

FreeBSD/src 240330alib/libusb libusb20_ugen20.c

libusb: don't treat EINVAL from USB_FS_COMPLETE as device detach

ugen20_process() treats any non-EBUSY errno returned by USB_FS_COMPLETE
as device detach and returns LIBUSB20_ERROR_OTHER. This causes libusb10
to set device_is_gone and fail all subsequent transfer with
LIBUSB_ERROR_NO_DEVICE.

However, USB_FS_COMPLETE can also return EINVAL when a completion
references an endpoint that no longer exists, for example after
SET_INTERFACE or SET_CONFIG removes and recreates endpoints. This is a
transient condition and does not indicate device detach.

Treat EINVAL the same as EBUSY and stop draining completions. This
prevents a guest selecting an isochronous streaming altsetting from
permanently breaking the passed-through device.

Reviewed by:    bapt
Event:          Halifax Hackathon 202606
Location:       Peggy's Cove Rock

    [2 lines not shown]
DeltaFile
+10-1lib/libusb/libusb20_ugen20.c
+10-11 files

FreeBSD/src 90ea8e8sys/netinet6 in6_pcb.c

netinet6: refactor in6_pcbconnect()

If the inpcb is already bound to a local address, there is no reason to
call in6_pcbladdr().  If the inpcb is already bound to a local port, there
is no reason to call in_pcb_lport_dest().  In the opposite case, if the
inpcb is not bound, and we are about to choose a non-conflicting local
addr:port, then there is no reason to call in6_pcblookup_internal().

This change makes in6_pcbconnect() to look much more alike the IPv4
in_pcbconnect().  I tracked this strange logic all the way down to initial
KAME import and failed to find any reasoning for it.

Reviewed by:            pouria
Differential Revision:  https://reviews.freebsd.org/D57534
DeltaFile
+17-17sys/netinet6/in6_pcb.c
+17-171 files

FreeBSD/ports 758fb89math/jags Makefile distinfo

math/jags: upgrade JAGS to 4.3.2

Upgrade to 4.3.2, and since I’m there remove USE_GCC and the ATLAS option.
DeltaFile
+11-14math/jags/Makefile
+5-5math/jags/distinfo
+16-192 files

FreeBSD/ports aa5fe0bwww/firefox distinfo Makefile

www/firefox: update to 152.0.3

Release Notes:
  https://www.firefox.com/en-US/firefox/152.0.3/releasenotes/

(cherry picked from commit d29f36a8f94e27a2bceaf7926f8f256dec375413)
DeltaFile
+3-3www/firefox/distinfo
+1-1www/firefox/Makefile
+4-42 files

FreeBSD/ports d29f36awww/firefox distinfo Makefile

www/firefox: update to 152.0.3

Release Notes:
  https://www.firefox.com/en-US/firefox/152.0.3/releasenotes/
DeltaFile
+3-3www/firefox/distinfo
+1-1www/firefox/Makefile
+4-42 files

FreeBSD/src 6aaaf7bcddl/usr.sbin/zfsd case_file.cc

zfsd: Improve spare selection

Port OpenZFS PRs #18597 and #18578 from zed to zfsd.

When activating a spare, sort candidates before trying them:
 1. Distributed dRAID spare matching the failed vdev's group (fastest
    rebuild via sequential resilver)
 2. Regular spares
 3. Non-matching distributed spares (kernel will reject anyway)
 4. Within each tier: prefer rotational match, then smallest
    sufficient size

Also try all healthy spares in order rather than stopping at the
first one, and use sequential rebuild for distributed spares.
DeltaFile
+158-37cddl/usr.sbin/zfsd/case_file.cc
+158-371 files

FreeBSD/src efcc183sys/netpfil/pf if_pflog.c

pflog: remove unused argument from pflogattach()
DeltaFile
+3-3sys/netpfil/pf/if_pflog.c
+3-31 files

FreeBSD/ports a761e88net-im/matterircd distinfo Makefile

net-im/matterircd: Update 0.29.0 => 0.30.0

Changelog:
https://github.com/42wim/matterircd/releases/tag/v0.30.0

PR:             296279
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q2

(cherry picked from commit 09596b77cc52726c91cc62fe10888e8b9c301a58)
DeltaFile
+3-3net-im/matterircd/distinfo
+1-2net-im/matterircd/Makefile
+4-52 files

FreeBSD/ports 09596b7net-im/matterircd distinfo Makefile

net-im/matterircd: Update 0.29.0 => 0.30.0

Changelog:
https://github.com/42wim/matterircd/releases/tag/v0.30.0

PR:             296279
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q2
DeltaFile
+3-3net-im/matterircd/distinfo
+1-2net-im/matterircd/Makefile
+4-52 files

FreeBSD/ports e3b57e7sysutils/tmux-mem-cpu-load distinfo Makefile

sysutils/tmux-mem-cpu-load: Update to 3.8.3
DeltaFile
+3-3sysutils/tmux-mem-cpu-load/distinfo
+1-1sysutils/tmux-mem-cpu-load/Makefile
+4-42 files

FreeBSD/ports 773e956devel/aws-c-s3 distinfo Makefile

devel/aws-c-s3: Update to 0.12.7

ChangeLog: https://github.com/awslabs/aws-c-s3/releases/tag/v0.12.7
DeltaFile
+3-3devel/aws-c-s3/distinfo
+1-1devel/aws-c-s3/Makefile
+4-42 files