biology/py-goatools: Fix some dependency issues
Patch out obsolete py-setuptools_scm_git_archive dependency
Basic run-testing performed
New maintainer: patrick at crandol.com
Patches have been submitted to upstream
PR: 300072
Reported by: patrick at crandol.com
pf: fix pf_krule_item memory leak during counters:match_fail
If pf_counters_inc() did not increment the counters because the rule
failed to apply it potentially failed to free match rules (which were
not bound to a state already).
Do so.
While here explicitly hand match_rules over from the pf_test_ctx to the
state so we never list them in two places.
Sponsored by: Rubicon Communications, LLC ("Netgate")
pf: remove armv7-specific counter code
The armv7 specific counter code is less useful now that armv7 is
basically end-of-life.
This removes a lot of armv7-specific code.
Sponsored by: Rubicon Communications, LLC ("Netgate")
pf: have DIOCXBEGIN/DIOCXROLLBACK/DIOCXCOMMIT use the new functions
The netlink begin/rollback/commit code has separate functions for this.
Deduplicate the code and just use those functions.
Sponsored by: Rubicon Communications, LLC ("Netgate")
Change http links in dev-model and arch-handbook to https
Some obsolete links replaced or updated with waybackmachine.org.
No change in contents otherwise.
Event: Oslo Hackathon 2026
www/code-server: Update to 4.144.0
The --socket-fd option works again, the inherited socket is passed on to
the process that listens.
Changelog: https://github.com/coder/code-server/releases
Sponsored by: Netzkommune GmbH
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Bump PORTREVISION for the array-var and encrypted-session updates. Both
modules are built into these ports, and a BUILD_DEPENDS does not rebuild
them by itself.
Sponsored by: Netzkommune GmbH
www/nginx-module-encrypted-session: Update to 0.11
A session token is now versioned and carries a random IV and an
HMAC-SHA256 tag instead of a public MD5 prefix and a fixed CBC IV, and
header and ciphertext are authenticated before the token is decrypted.
The tag is compared with CRYPTO_memcmp, which closes a timing oracle over
an attacker controlled plaintext prefix. Tokens written by earlier
versions no longer decrypt.
Changelog: https://github.com/openresty/encrypted-session-nginx-module/compare/v0.10...v0.11
Sponsored by: Netzkommune GmbH
www/nginx-module-array-var: Update to 0.07
An array value is now a reference carrying a module tag and an array
pointer, and both the reference size and the tag are checked before the
value is mapped or joined.
Changelog: https://github.com/openresty/array-var-nginx-module/compare/v0.06...v0.07
Sponsored by: Netzkommune GmbH
lang/nawk: Update to 20260426
Take maintainership.
PR: 300135
Approved by: Chris Hutchinson <portmaster at BSDforge.com> (former maintainer)
Approved by: osa, fluffy (mentors, implicit)
