FreeBSD/src b558c92release Makefile.ec2

EC2: Add extra SSM Parameter names for releases

Record releases in the SSM Parameter Store not just as e.g.
  /aws/service/freebsd/arm64/small/ufs/15.0/RELEASE
but also as .../RELEASE/latest, e.g.
  /aws/service/freebsd/arm64/small/ufs/15.0/RELEASE/latest

The latter parameters will be updated when new AMIs are built with
security and errata updates appplied, and have been backfilled for
15.0.

MFC after:      3 days
MFC to:         stable/15 (14.x will not get security-update AMIs)
Sponsored by:   Amazon
DeltaFile
+5-1release/Makefile.ec2
+5-11 files

FreeBSD/ports 34113f4net/bsdec2-image-upload distinfo Makefile

net/bsdec2-image-upload: Update to 1.4.10

This adds a --ssm-name-extra option which will be used in src shortly.

Sponsored by:   Amazon
DeltaFile
+3-3net/bsdec2-image-upload/distinfo
+1-1net/bsdec2-image-upload/Makefile
+4-42 files

FreeBSD/ports f3686e4www/firefox-esr Makefile, www/firefox-esr/files patch-bug1962139-c27-ffmpeg8

www/firefox-esr: make legacy firefox compatible with current ffmpeg

Import patch from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1962139

PR:                             291974
Reported By:    Yusuf Yaman

(cherry picked from commit e7234a76a58bc02514fe14534753fab0debe7958)
DeltaFile
+15,936-0www/firefox-esr/files/patch-bug1962139-c27-ffmpeg8
+1-0www/firefox-esr/Makefile
+15,937-02 files

FreeBSD/ports e7234a7www/firefox-esr Makefile, www/firefox-esr/files patch-bug1962139-c27-ffmpeg8

www/firefox-esr: make legacy firefox compatible with current ffmpeg

Import patch from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1962139

PR:                             291974
Reported By:    Yusuf Yaman
DeltaFile
+15,936-0www/firefox-esr/files/patch-bug1962139-c27-ffmpeg8
+1-1www/firefox-esr/Makefile
+15,937-12 files

FreeBSD/ports 2107143games/corsix-th distinfo Makefile

games/corsix-th: Update to 0.69.2
DeltaFile
+3-3games/corsix-th/distinfo
+1-2games/corsix-th/Makefile
+4-52 files

FreeBSD/ports 13f7435mail/mailpit distinfo Makefile

mail/mailpit: Update to 1.28.2

MFH:            2025Q4
Security:       https://www.vuxml.org/freebsd/d822839e-ee4f-11f0-b53e-0897988a1c07.html
(cherry picked from commit edbf5446fb2de4498ce3667ef89f02d39a2fb45c)
DeltaFile
+7-7mail/mailpit/distinfo
+1-1mail/mailpit/Makefile
+8-82 files

FreeBSD/ports edbf544mail/mailpit distinfo Makefile

mail/mailpit: Update to 1.28.2

MFH:            2025Q4
Security:       https://www.vuxml.org/freebsd/d822839e-ee4f-11f0-b53e-0897988a1c07.html
DeltaFile
+7-7mail/mailpit/distinfo
+1-1mail/mailpit/Makefile
+8-82 files

FreeBSD/ports aff412abiology/sra-tools Makefile

biology/sra-tools: Unbreak with extra JDK present

Cmake find_package(Java) uses the latest version found, and plist
varies depending on the version used.  Set JAVE_HOME to limit
cmake's search to the version specified in the port.  This is the
only way to control find_package() for Java versions.
DeltaFile
+3-1biology/sra-tools/Makefile
+3-11 files

FreeBSD/ports f1d1dd1net/py-bonsai Makefile distinfo, net/py-bonsai/files patch-pyproject.toml

net/py-bonsai: Update 1.5.3 => 1.5.4

Changelog:
https://github.com/noirello/bonsai/blob/v1.5.4/CHANGELOG.rst

Switch to pep.

PR:             292302
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+11-5net/py-bonsai/Makefile
+12-0net/py-bonsai/files/patch-pyproject.toml
+3-3net/py-bonsai/distinfo
+26-83 files

FreeBSD/ports c6fdb1dmail/mlmmj distinfo Makefile

mail/mlmmj: update to 1.7.0
DeltaFile
+3-3mail/mlmmj/distinfo
+2-2mail/mlmmj/Makefile
+5-52 files

FreeBSD/ports 78d2a39biology/sra-tools Makefile

biology/sra-tools: pin to java 17

As soon as another JDK is installed it fails the build.
This commit will make it possible to bump JAVA_DEFAULT to 21
while the maintainer looks for a solution to build this port
with other JDK versions.

PR:     292215
DeltaFile
+2-1biology/sra-tools/Makefile
+2-11 files

FreeBSD/src 9b54998. MAINTAINERS, .github CODEOWNERS

MAINTAINERS/CODEOWNERS: Add myself to mpr, mps and mpi3mr

Yea, I realize these are decaying, but I'm going to take a run at
automatically tagging reviews for github pull requests. I suspect that
tagging will help with the 'stale' issues with at least CODEOWNER.  As
better data becomes available, especailly for contrib, I'll update
things.

Sponsored by:           Netflix
DeltaFile
+3-0.github/CODEOWNERS
+3-0MAINTAINERS
+6-02 files

FreeBSD/ports 89362eblang/asn1c pkg-plist Makefile

lang/asn1c: Update 0.9.27 => 0.9.28

Changelog:
https://github.com/vlm/asn1c/releases/tag/v0.9.28

- Switch to tarball from upstream.
- Add LICENSE.
- Remove GNU_CONFIGURE_MANPREFIX - default value.
- Sort USES.
- Fix warnings from portclippy.

PR:             291348
Approved by:    vlm at lionet.info (maintainer, timeout > 1 month)
Co-authored-by: Hadi <rezaee.hadi at gmail.com>
DeltaFile
+11-8lang/asn1c/pkg-plist
+6-9lang/asn1c/Makefile
+3-3lang/asn1c/distinfo
+20-203 files

FreeBSD/src a50789dsys/powerpc/powerpc swtch32.S swtch64.S

powerpc: put the isync inside the TD_LOCK() checking loop

Fix a narrow window where the lock is unlocked but the checking CPU
hasn't flushed things appropriately.

Inside this window the CPU inside cpu_switch() will loop forever thinking
the destination thread is still blocked/locked even though it is not.

This manifests as the system hanging after starting all APs.

I've seen this reliably trigger in qemu-system-ppc64 running power9 pseries
guests; the more CPUs the more likely it triggers at boot.

PR: kern/292167
Differential Revision:  https://reviews.freebsd.org/D54478
Reviewed by:    jhibbits
MFC after:      1 week
Relnotes:       yes

(cherry picked from commit 8df2e542146801fd01675e56724eaa567d04c209)
DeltaFile
+1-1sys/powerpc/powerpc/swtch32.S
+1-1sys/powerpc/powerpc/swtch64.S
+2-22 files

FreeBSD/src e5861dccontrib/file/src apprentice.c

Merge commit faa5141b9be4 from file git (by Christos Zoulas):

  PR/656: harry.sintonen: Fix bug in byte swapping that was caused by the change to make flags uint16_t and cont_level uint8_t.

This fixes using a magic.mgc built with a different endianness than
file(1) itself, e.g. when building powerpc64 on amd64.

PR:             292079
Fixes:          ae316d1d1cff ("MFV: file 5.46.")
MFC after:      3 days

(cherry picked from commit 39047538cf5d8f26112f7b08b3c56967f70f7f94)
DeltaFile
+2-3contrib/file/src/apprentice.c
+2-31 files

FreeBSD/ports 48c68fcdevel/jenkins distinfo Makefile

devel/jenkins: Update to 2.545

Sponsored by:   The FreeBSD Foundation
DeltaFile
+3-3devel/jenkins/distinfo
+1-1devel/jenkins/Makefile
+4-42 files

FreeBSD/src da5d94dusr.bin/grep zgrep.1, usr.bin/grep/tests grep_freebsd_test.sh

Remove obsolete BUGS section from zgrep(1) man page, add test

I forgot to check/update the man page with D54217. While here add
a test for multiple -e flags.

Reviewed by:    markj
Approved by:    markj
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D54632
DeltaFile
+0-18usr.bin/grep/zgrep.1
+11-0usr.bin/grep/tests/grep_freebsd_test.sh
+11-182 files

FreeBSD/ports a86c885sysutils/kubie distinfo Makefile.crates, sysutils/kubie/files patch-cargo-crates_aws-lc-sys-0.28.0_aws-lc_include_openssl_target.h patch-powerpc64le

sysutils/kubie: Update to 0.26.1

Removing support for PowerPC architecture.

ChangeLog:
https://github.com/sbstp/kubie/releases/tag/v0.26.1
DeltaFile
+65-57sysutils/kubie/distinfo
+31-27sysutils/kubie/Makefile.crates
+0-20sysutils/kubie/files/patch-cargo-crates_aws-lc-sys-0.28.0_aws-lc_include_openssl_target.h
+0-20sysutils/kubie/files/patch-powerpc64le
+2-3sysutils/kubie/Makefile
+98-1275 files

FreeBSD/ports 01c0678net-p2p/sonarr Makefile distinfo

net-p2p/sonarr: Update 4.0.15.2941 => 4.0.16.2944

Changelog:
https://github.com/Sonarr/Sonarr/releases/tag/v4.0.16.2944

- Small optimization of the do-install.

PR:             292330
Approved by:    Michiel van Baak Jansen <michiel at vanbaak.eu> (maintainer)
DeltaFile
+4-6net-p2p/sonarr/Makefile
+3-3net-p2p/sonarr/distinfo
+7-92 files

FreeBSD/src 4250d2acontrib/mtree mtree.8 create.c

Import latest mtree from NetBSD

Merge commit '7e59b238fcf32f3d365e78ddc702ca494e1ff68d'

This commit partially reverts the previous vendor import, given that the
"type" keyword has been historically mandatory and should not be removed
by "-R all".  This was clarified in the man page.

Reported by:    glebius
PR:             219467
MFC after:      1 week
DeltaFile
+12-12contrib/mtree/mtree.8
+3-4contrib/mtree/create.c
+15-162 files

FreeBSD/src 7e59b23. mtree.8 create.c

Vendor import of NetBSD's mtree at 2026-01-11
DeltaFile
+12-12mtree.8
+3-4create.c
+15-162 files

FreeBSD/ports a67ab6bdevel/pyenv pkg-plist distinfo, devel/pyenv/files patch-libexec_pyenv

devel/pyenv: Update to 2.6.18
DeltaFile
+57-10devel/pyenv/pkg-plist
+6-6devel/pyenv/files/patch-libexec_pyenv
+3-3devel/pyenv/distinfo
+3-2devel/pyenv/Makefile
+69-214 files

FreeBSD/ports c974c0anet/netatalk4 distinfo pkg-plist

net/netatalk4: Update to 4.4.0

See https://github.com/Netatalk/netatalk/releases/tag/netatalk-4-4-0 for
a list of changes in this release.
DeltaFile
+3-3net/netatalk4/distinfo
+4-2net/netatalk4/pkg-plist
+1-1net/netatalk4/Makefile
+8-63 files

FreeBSD/ports 57fb9adsecurity/vuxml/vuln 2026.xml

security/vuxml: document libtasn1 vulnerability

Security:       CVE-2025-13151
DeltaFile
+28-0security/vuxml/vuln/2026.xml
+28-01 files

FreeBSD/ports f758eadtextproc/htmldoc distinfo Makefile

textproc/htmldoc: update to 1.9.22

A bug fix release.

Changelog: https://www.msweet.org/blog/2025-12-28-htmldoc-1.9.22.html

MFH:            2025Q4
(cherry picked from commit abe9f8c6193828f7b870b7445a6c02eb9d31ed3c)
DeltaFile
+3-3textproc/htmldoc/distinfo
+1-1textproc/htmldoc/Makefile
+4-42 files

FreeBSD/ports 5348ddesysutils/edk2 Makefile distinfo, sysutils/edk2/files patch-remove-memattr-protocol patch-OvmfPkg_Bhyve_AcpiPlatformDxe_AcpiPlatform.c

sysutils/edk2: update to 2025008

Patch to update EDK2 OVMF firmware package used in bhyve and some ARM
platforms from 2023 to 2025 stable release. New submodules added in
GH_TUPLE, some script for build has been moved to a bash subshell.

BHYVE notices: tiny boot speedup, a bug with crashing on CPU sensor
wmsr from HWiNFO has stopped occurring, a bug with glibc apps crashing
in Linux VMs has stopped occurring, a crash on memtest86+ with more
than 1 vCPU has stopped occurring.

No new bugs seem to have surfaced.

PR:             285554
Tested by:      novel
MFH:            2025Q4

(cherry picked from commit bafbff663ba59c9c6f10acecc3c4b86dee155f43)
DeltaFile
+353-0sysutils/edk2/files/patch-remove-memattr-protocol
+73-57sysutils/edk2/Makefile
+31-19sysutils/edk2/distinfo
+0-38sysutils/edk2/files/patch-OvmfPkg_Bhyve_AcpiPlatformDxe_AcpiPlatform.c
+15-0sysutils/edk2/files/patch-CryptoPkg_Library_OpensslLib_openssl_include_openssl_byteorder.h
+0-13sysutils/edk2/files/patch-OvmfPkg_Bhyve_PlatformPei_Platform.c
+472-1276 files

FreeBSD/ports fac81fcshells/mksh Makefile, shells/mksh/files patch-pr292146

shells/mksh: fix crash on 16-CURRENT

Kernel now reports support for 126 signals, while the libc headers only
report 32.  This mismatch caused an out-of-bounds write initialising
internal tables.

Reported by:    hackee <h4ckee at proton.me>
PR:             292146
MFH:            2025Q4

(cherry picked from commit 1c257703ed4c59a485b28b17c7a1541b0c203191)
DeltaFile
+28-0shells/mksh/files/patch-pr292146
+1-1shells/mksh/Makefile
+29-12 files

FreeBSD/ports bafbff6sysutils/edk2 Makefile distinfo, sysutils/edk2/files patch-remove-memattr-protocol patch-OvmfPkg_Bhyve_AcpiPlatformDxe_AcpiPlatform.c

sysutils/edk2: update to 2025008

Patch to update EDK2 OVMF firmware package used in bhyve and some ARM
platforms from 2023 to 2025 stable release. New submodules added in
GH_TUPLE, some script for build has been moved to a bash subshell.

BHYVE notices: tiny boot speedup, a bug with crashing on CPU sensor
wmsr from HWiNFO has stopped occurring, a bug with glibc apps crashing
in Linux VMs has stopped occurring, a crash on memtest86+ with more
than 1 vCPU has stopped occurring.

No new bugs seem to have surfaced.

PR:             285554
Tested by:      novel
MFH:            2025Q4
DeltaFile
+353-0sysutils/edk2/files/patch-remove-memattr-protocol
+73-57sysutils/edk2/Makefile
+31-19sysutils/edk2/distinfo
+0-38sysutils/edk2/files/patch-OvmfPkg_Bhyve_AcpiPlatformDxe_AcpiPlatform.c
+15-0sysutils/edk2/files/patch-CryptoPkg_Library_OpensslLib_openssl_include_openssl_byteorder.h
+0-13sysutils/edk2/files/patch-OvmfPkg_Bhyve_PlatformPei_Platform.c
+472-1276 files

FreeBSD/ports 99e39dfdevel/sse2neon distinfo Makefile, devel/sse2neon/files patch-sse2neon.h

devel/sse2neon: update to 1.9.1

Changelog: https://github.com/DLTcollab/sse2neon/releases/tag/v1.9.1
DeltaFile
+0-16devel/sse2neon/files/patch-sse2neon.h
+3-3devel/sse2neon/distinfo
+1-2devel/sse2neon/Makefile
+4-213 files

FreeBSD/ports 1d0a13dbenchmarks/libcpucycles distinfo Makefile

benchmarks/libcpucycles: update to 20260105

Changelog: https://cpucycles.cr.yp.to/download.html
DeltaFile
+3-3benchmarks/libcpucycles/distinfo
+1-1benchmarks/libcpucycles/Makefile
+4-42 files