devel/tinygo: Restrict to Go 1.25 and mark BROKEN
This port has not been updated in years, and the current port version is
incompatible with Go 1.26+. Go 1.26 will become the minimum supported Go
version very soon.
Unless someone adopts this port (the fact that it's so stale suggests
that interest is probably quite low) this port should exit the stage
when Go 1.25 does.
PR: 297237
audio/din: Update to 65
Changes since 64.2:
DIN Is Noise 65:
* fixed crash of DIN64.2 if the whole beat pattern is cut into memory!
/*
flip
flips beat pattern between start/end vertex about
vertical axis
*/
/*
Beater editor now accesible via Menu on all instruments
*/
* improved Polyrhythm plugin
* improved write-svg command
that writes curve seen in any curve editor into an svg file
[2 lines not shown]
ixv: Advertise SCTP checksum offload
The shared ixgbe transmit path already creates SCTP context
descriptors, and the hardware exposes the same checksum capability to
VFs. Advertise it through iflib as the PF driver does.
MFC after: 2 weeks
ixv: Remove unused loader tunables
The flow_control and hdr_split variables have never been read. VF
flow control is controlled by the PF, while implementing header split
would require receive-path support that ixv does not provide.
MFC after: 2 weeks
ixgbe: Reject Flow Director with SR-IOV
The iflib Flow Director path does not assign filters using the
absolute queue and pool identifiers required by SR-IOV. Reject the
combination during preflight validation rather than allowing an
unsupported configuration to alter the PF receive path.
The loader tunable is fixed before VFs can be created, so validation
also prevents the reverse ordering of this combination.
MFC after: 2 weeks
security/mkcert: New port
A simple tool for making locally-trusted development certificates. It
requires no configuration.
PR: 297301
Co-authored-by: Kenneth Raplee <kenrap at FreeBSD.org>
Approved by: arrowd (co-mentor)
(cherry picked from commit b48efd140a1e79606b928bb157eeef4f1fafcbaf)
amd_iommu: Honor disabled interrupt remapping
Do not instantiate an interrupt-remapping context for a unit whose IRTE
support is disabled. In that mode the caller must retain the ordinary
interrupt path.
Reviewed by: kib
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D58725
security/mkcert: New port
A simple tool for making locally-trusted development certificates. It
requires no configuration.
PR: 297301
Co-authored-by: Kenneth Raplee <kenrap at FreeBSD.org>
Approved by: arrowd (co-mentor)
security/pam_ssh_agent_auth: Deprecate
This PAM module is abandonware: no code updates for 8+ years, no new
releases for 6+ years.
See security/pam_rssh or security/pam_ssh_agent for alternatives with
very similar functionality.
ssecurity/pam_ssh_agent: New port
pam_ssh_agent is a PAM module for authenticating using ssh-agent.
A PAM authentication module determining the identity of a user based
on a signature request and response sent via the ssh-agent protocol to
a potentially remote ssh-agent.
This project is a re-implementation of the pam_ssh_agent_auth module
but does not share any code with that project. We are pretty close to
covering all the features of the original implementation, along with
some additional features such as authentication using SSH
Certificates.
See also: security/pam_rssh security/pam_ssh_agent_auth
iflib: Add sysctl stat for TX watchdog reset events
iflib counts resets initiated by its transmit watchdog in 69c3e0de01c1.
Export the counter in the per-device iflib sysctl tree so every
driver provides the diagnostic without a driver callback or duplicate
storage.
A watchdog reset does not establish how many packets failed. It can
recover a hardware stall involving several queued packets or a missed
completion involving no packet loss. Stop adding one output error per
watchdog event in em(4), igb(4), and igc(4).
Remove the redundant driver counters and move the diagnostic to
dev.<driver>.<unit>.iflib.tx_watchdog_events.
MFC after: 1 month
Relnotes: yes
net-im/mastodon: update to 4.6.4 security release
Changelog:
https://github.com/mastodon/mastodon/releases/tag/v4.6.4
Notably, security fixes to address the following issues:
- Denial of Service through insufficient authentication of
statistics endpoints.
- Personally-identifying information disclosure due to incorrect
access control validation.
- SSRF Protection Bypass via IPv4-compatible IPv6 Addresses.
PR: 297125
Approved by: Scott Kenney <sak at codered.rmta.org> (maintainer)
Security: GHSA-hx34-2pfw-2qfj
Security: GHSA-7jvv-fhmg-wpfw
Security: GHSA-vwhj-3g83-v276
pfsync: handle large MTU pfsync interfaces
pfsync packets were allocated with m_get2(), which can't return packets
larger than MJUMPAGESIZE. As a result 9k MTU pfsync interfaces simply didn't work.
Use m_get3(), which can allocate sufficiently large mbufs.
Extend the pfsync:bulk test case to provoke this problem.
PR: 297307
MFC after: 2 weeks
Sponsored by: Rubicon Communications, LLC ("Netgate")
net: don't panic on ifconfig pfsync0 mtu 9000
pfsync interfaces do not have ifp->if_inet6 set, so when we update the
MTU for those interfaces we panicked.
Add an explicit check for this. This should be temporary, until pfsync
is no longer a struct ifnet (as we've already done for pflog).
Reviewed by: glebius
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D58701
Tools/scripts/update-plist.py: Updates pkg-plist
Small script using base Python to update pkg-plist based upon poudriere
error logs.
Inspired by: https://codeberg.org/tcberner/poudlist, by tcberner@. This
just uses base Python instead of C++ and flaky Boost libs, runs way
faster and requires no config file.
This is mainly intendend for simple ports and it's output should be
manually reviewed.
