FreeBSD/ports 09aa7a7cad/sch-rnd Makefile distinfo

cad/sch-rnd: Update 1.0.10 => 1.0.11

Approved by:            db@, yuri@ (Mentors, implicit)
DeltaFile
+8-0cad/sch-rnd/pkg-plist
+3-3cad/sch-rnd/distinfo
+1-1cad/sch-rnd/Makefile
+12-43 files

FreeBSD/ports eb91139cad/pcb-rnd Makefile pkg-plist

cad/pcb-rnd: 3.1.7b => 3.1.8

Approved by:            db@, yuri@ (Mentors, implicit)
DeltaFile
+3-3cad/pcb-rnd/distinfo
+5-0cad/pcb-rnd/pkg-plist
+1-2cad/pcb-rnd/Makefile
+9-53 files

FreeBSD/ports 9dd59b3cad/camv-rnd Makefile pkg-plist

cad/camv-rnd: Update 1.1.6 => 1.1.7

Approved by:            db@, yuri@ (Mentors, implicit)
DeltaFile
+3-3cad/camv-rnd/distinfo
+1-1cad/camv-rnd/Makefile
+2-0cad/camv-rnd/pkg-plist
+6-43 files

FreeBSD/ports 5120489security/boringssl Makefile distinfo

security/boringssl: update to the recent snapshot release

Sponsored by:   tipi.work
DeltaFile
+3-3security/boringssl/distinfo
+1-1security/boringssl/Makefile
+4-42 files

FreeBSD/ports 35a3e5edevel/tinygo Makefile

devel/tinygo: Restrict to Go 1.25 and mark BROKEN

This port has not been updated in years, and the current port version is
incompatible with Go 1.26+. Go 1.26 will become the minimum supported Go
version very soon.

Unless someone adopts this port (the fact that it's so stale suggests
that interest is probably quite low) this port should exit the stage
when Go 1.25 does.

PR:             297237
DeltaFile
+3-1devel/tinygo/Makefile
+3-11 files

FreeBSD/ports b7bc126audio/din Makefile distinfo

audio/din: Update to 65

Changes since 64.2:

DIN Is Noise 65:

  * fixed crash of DIN64.2 if the whole beat pattern is cut into memory!
  /*
    flip

      flips beat pattern between start/end vertex about
      vertical axis
  */
  /*
    Beater editor now accesible via Menu on all instruments
  */
  * improved Polyrhythm plugin
  * improved write-svg command
      that writes curve seen in any curve editor into an svg file

    [2 lines not shown]
DeltaFile
+3-3audio/din/distinfo
+1-1audio/din/Makefile
+4-42 files

FreeBSD/src 4a13b8asys/dev/ixgbe if_ixv.c

ixv: Advertise SCTP checksum offload

The shared ixgbe transmit path already creates SCTP context
descriptors, and the hardware exposes the same checksum capability to
VFs.  Advertise it through iflib as the PF driver does.

MFC after:      2 weeks
DeltaFile
+2-1sys/dev/ixgbe/if_ixv.c
+2-11 files

FreeBSD/src 8eeb258sys/dev/ixgbe if_ixv.c

ixv: Remove unused loader tunables

The flow_control and hdr_split variables have never been read.  VF
flow control is controlled by the PF, while implementing header split
would require receive-path support that ixv does not provide.

MFC after:      2 weeks
DeltaFile
+0-17sys/dev/ixgbe/if_ixv.c
+0-171 files

FreeBSD/src c017bceshare/man/man4 ix.4, sys/dev/ixgbe if_sriov.c

ixgbe: Reject Flow Director with SR-IOV

The iflib Flow Director path does not assign filters using the
absolute queue and pool identifiers required by SR-IOV.  Reject the
combination during preflight validation rather than allowing an
unsupported configuration to alter the PF receive path.

The loader tunable is fixed before VFs can be created, so validation
also prevents the reverse ordering of this combination.

MFC after:      2 weeks
DeltaFile
+5-0sys/dev/ixgbe/if_sriov.c
+2-1share/man/man4/ix.4
+7-12 files

FreeBSD/ports d2f494fsecurity Makefile, security/mkcert distinfo pkg-descr

security/mkcert: New port

A simple tool for making locally-trusted development certificates. It
requires no configuration.

PR:             297301
Co-authored-by: Kenneth Raplee <kenrap at FreeBSD.org>
Approved by:    arrowd (co-mentor)

(cherry picked from commit b48efd140a1e79606b928bb157eeef4f1fafcbaf)
DeltaFile
+69-0security/mkcert/files/truststore_freebsd.go
+32-0security/mkcert/Makefile
+12-0security/mkcert/pkg-descr
+5-0security/mkcert/distinfo
+1-0security/Makefile
+119-05 files

FreeBSD/src 9f4df9fsys/x86/iommu amd_intrmap.c

amd_iommu: Honor disabled interrupt remapping

Do not instantiate an interrupt-remapping context for a unit whose IRTE
support is disabled. In that mode the caller must retain the ordinary
interrupt path.

Reviewed by:    kib
MFC after:      2 weeks
Differential Revision:  https://reviews.freebsd.org/D58725
DeltaFile
+1-1sys/x86/iommu/amd_intrmap.c
+1-11 files

FreeBSD/ports b48efd1security Makefile, security/mkcert distinfo pkg-descr

security/mkcert: New port

A simple tool for making locally-trusted development certificates. It
requires no configuration.

PR:             297301
Co-authored-by: Kenneth Raplee <kenrap at FreeBSD.org>
Approved by:    arrowd (co-mentor)
DeltaFile
+69-0security/mkcert/files/truststore_freebsd.go
+32-0security/mkcert/Makefile
+12-0security/mkcert/pkg-descr
+5-0security/mkcert/distinfo
+1-0security/Makefile
+119-05 files

FreeBSD/ports dbf9522www/privatebin Makefile pkg-plist

www/privatebin: Update to 2.0.6

re: https://github.com/PrivateBin/PrivateBin/releases/tag/2.0.6
DeltaFile
+3-3www/privatebin/distinfo
+1-2www/privatebin/pkg-plist
+1-1www/privatebin/Makefile
+5-63 files

FreeBSD/ports 864c577security/pam_ssh_agent_auth Makefile

security/pam_ssh_agent_auth: Deprecate

This PAM module is abandonware: no code updates for 8+ years, no new
releases for 6+ years.

See security/pam_rssh or security/pam_ssh_agent for alternatives with
very similar functionality.
DeltaFile
+11-3security/pam_ssh_agent_auth/Makefile
+11-31 files

FreeBSD/ports 27006a0security Makefile, security/pam_ssh_agent pkg-descr Makefile

ssecurity/pam_ssh_agent: New port

pam_ssh_agent is a PAM module for authenticating using ssh-agent.

A PAM authentication module determining the identity of a user based
on a signature request and response sent via the ssh-agent protocol to
a potentially remote ssh-agent.

This project is a re-implementation of the pam_ssh_agent_auth module
but does not share any code with that project. We are pretty close to
covering all the features of the original implementation, along with
some additional features such as authentication using SSH
Certificates.

See also: security/pam_rssh security/pam_ssh_agent_auth
DeltaFile
+323-0security/pam_ssh_agent/distinfo
+190-0security/pam_ssh_agent/Makefile
+11-0security/pam_ssh_agent/pkg-descr
+1-0security/Makefile
+525-04 files

FreeBSD/ports 914c44esecurity/nextcloud-end_to_end_encryption Makefile distinfo

security/nextcloud-end_to_end_encryption: Update to 2.2.2
DeltaFile
+3-3security/nextcloud-end_to_end_encryption/distinfo
+1-1security/nextcloud-end_to_end_encryption/Makefile
+4-42 files

FreeBSD/src d6f97c6share/man/man4 iflib.4, share/man/man9 iflibdi.9

iflib: Add sysctl stat for TX watchdog reset events

iflib counts resets initiated by its transmit watchdog in 69c3e0de01c1.

Export the counter in the per-device iflib sysctl tree so every
driver provides the diagnostic without a driver callback or duplicate
storage.

A watchdog reset does not establish how many packets failed.  It can
recover a hardware stall involving several queued packets or a missed
completion involving no packet loss.  Stop adding one output error per
watchdog event in em(4), igb(4), and igc(4).

Remove the redundant driver counters and move the diagnostic to
dev.<driver>.<unit>.iflib.tx_watchdog_events.

MFC after:      1 month
Relnotes:       yes
DeltaFile
+1-23sys/dev/e1000/if_em.c
+1-18sys/dev/igc/if_igc.c
+5-2sys/net/iflib.c
+6-1share/man/man4/iflib.4
+3-3share/man/man9/iflibdi.9
+0-2sys/dev/ixgbe/if_ixv.c
+16-494 files not shown
+16-5510 files

FreeBSD/ports cc3e1d7databases/pg_citus Makefile pkg-plist

databases/pg_citus: update to 14.2.0

Changes:        https://github.com/citusdata/citus/releases/tag/v14.2.0
Reported by:    portscout
DeltaFile
+3-3databases/pg_citus/distinfo
+4-0databases/pg_citus/pkg-plist
+1-1databases/pg_citus/Makefile
+8-43 files

FreeBSD/ports 0372940net-im/mastodon Makefile distinfo

net-im/mastodon: update to 4.6.4 security release

Changelog:
https://github.com/mastodon/mastodon/releases/tag/v4.6.4

Notably, security fixes to address the following issues:

- Denial of Service through insufficient authentication of
  statistics endpoints.
- Personally-identifying information disclosure due to incorrect
  access control validation.
- SSRF Protection Bypass via IPv4-compatible IPv6 Addresses.

PR:             297125
Approved by:    Scott Kenney <sak at codered.rmta.org> (maintainer)
Security:       GHSA-hx34-2pfw-2qfj
Security:       GHSA-7jvv-fhmg-wpfw
Security:       GHSA-vwhj-3g83-v276
DeltaFile
+3-3net-im/mastodon/distinfo
+1-1net-im/mastodon/Makefile
+4-42 files

FreeBSD/ports 4349cfbsysutils/mdfried Makefile distinfo

sysutils/mdfried: Update to 0.22.5

Reported by:    portscout!
DeltaFile
+3-3sysutils/mdfried/distinfo
+1-1sysutils/mdfried/Makefile
+4-42 files

FreeBSD/ports ca2bbd5devel/py-virtualenv Makefile distinfo

devel/py-virtualenv: Update to 21.7.2

ChangeLog:      https://github.com/pypa/virtualenv/releases/tag/21.7.2
Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+3-3devel/py-virtualenv/distinfo
+1-1devel/py-virtualenv/Makefile
+4-42 files

FreeBSD/src 7e2781fsys/netpfil/pf if_pfsync.c, tests/sys/netpfil/pf pfsync.sh

pfsync: handle large MTU pfsync interfaces

pfsync packets were allocated with m_get2(), which can't return packets
larger than MJUMPAGESIZE. As a result 9k MTU pfsync interfaces simply didn't work.

Use m_get3(), which can allocate sufficiently large mbufs.

Extend the pfsync:bulk test case to provoke this problem.

PR:             297307
MFC after:      2 weeks
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+8-3tests/sys/netpfil/pf/pfsync.sh
+1-1sys/netpfil/pf/if_pfsync.c
+9-42 files

FreeBSD/ports 4c39151devel/zeal Makefile pkg-plist

devel/zeal: Update to 0.9.1
DeltaFile
+3-3devel/zeal/distinfo
+5-0devel/zeal/pkg-plist
+1-1devel/zeal/Makefile
+9-43 files

FreeBSD/src 8ea4e92sys/net route.c

net: don't panic on ifconfig pfsync0 mtu 9000

pfsync interfaces do not have ifp->if_inet6 set, so when we update the
MTU for those interfaces we panicked.

Add an explicit check for this. This should be temporary, until pfsync
is no longer a struct ifnet (as we've already done for pflog).

Reviewed by:    glebius
Sponsored by:   Rubicon Communications, LLC ("Netgate")
Differential Revision:  https://reviews.freebsd.org/D58701
DeltaFile
+3-1sys/net/route.c
+3-11 files

FreeBSD/ports 2fb42f3net-im/py-zapzap Makefile distinfo

net-im/py-zapzap: Update to 7.4

Reported by:    portscout!
DeltaFile
+3-3net-im/py-zapzap/distinfo
+1-1net-im/py-zapzap/Makefile
+4-42 files

FreeBSD/ports 8d3555fTools/scripts update-plist.py

Tools/scripts/update-plist.py: Updates pkg-plist

Small script using base Python to update pkg-plist based upon poudriere
error logs.

Inspired by: https://codeberg.org/tcberner/poudlist, by tcberner@. This
just uses base Python instead of C++ and flaky Boost libs, runs way
faster and requires no config file.

This is mainly intendend for simple ports and it's output should be
manually reviewed.
DeltaFile
+263-0Tools/scripts/update-plist.py
+263-01 files

FreeBSD/ports 75bf3aewww/agate Makefile Makefile.crates

www/agate: Update 3.3.23 => 3.3.24

Approved by:            db@, yuri@ (Mentors, implicit)
DeltaFile
+105-87www/agate/distinfo
+52-43www/agate/Makefile.crates
+1-2www/agate/Makefile
+158-1323 files

FreeBSD/ports 3522373databases/rainfrog Makefile Makefile.crates

databases/rainfrog: Update 0.4.3

ChangeLog:

- https://github.com/achristmascarl/rainfrog/releases/tag/v0.4.2
- https://github.com/achristmascarl/rainfrog/releases/tag/v0.4.3

Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+77-67databases/rainfrog/distinfo
+37-32databases/rainfrog/Makefile.crates
+1-1databases/rainfrog/Makefile
+115-1003 files

FreeBSD/ports e211ff0net/v2ray Makefile distinfo

net/v2ray: Update 5.51.2 => 5.52.0

Approved by:            db@, yuri@ (Mentors, implicit)
DeltaFile
+5-5net/v2ray/distinfo
+2-3net/v2ray/Makefile
+7-82 files

FreeBSD/ports 5424a40news/inn-current Makefile distinfo

news/inn-current: Update to 20260806
DeltaFile
+3-3news/inn-current/distinfo
+2-2news/inn-current/Makefile
+5-52 files