Mk/Uses/npm.mk: Move --frozen-lockfile from NPM_FETCH_FLAGS to NPM_EXTRACT_FLAGS
`pnpm fetch` does not read a package manafest and only relies on a
lockfile. So specifying --frozen-lockfile here is redundant. We need
the flag when we extrace (install) node modules from a pre-fetched
node modules cache.
Mk/bsd.port.mk: Drop the strip parameter from PATCHFILES passed to do-fetch.sh
After recent changes to handling of do-fetch.sh in bsd.port.mk, the
strip parameters (e.g., ":-p1") are no longer dropped before do-fetch.sh
receives patch files.
As a result, a strip parameter of a patch file might be interpreted as a
group instead and get prepended to the patch file, resulting in warnings
like:
```
$ make makesum
===> License MIT accepted by the user
=> e3efbb5923f638b38087a3f616906d9d4fdaf6f2.patch doesn't seem to exist in /var/cache/distfiles.
=> Attempting to fetch p1e3efbb5923f638b38087a3f616906d9d4fdaf6f2.patch
fetch: p1e3efbb5923f638b38087a3f616906d9d4fdaf6f2.patch: No such file or directory
```
Reviewed by: mat
[4 lines not shown]
devel/llvm22: fix arm64 and FLANG plists
In the arm64 case, add a missing file. In the FLANG case, delete an
empty directory.
PR: 298493, 298511
Reported by: yuri
net/xrdp: Generate default keys/certs at first startup instead of post-install
Generating keys/certs during post-install leads to duplicate keys when
provisioning multiple hosts from a single VM image.
The default snakeoil certificate has been switched to a 5-year Ed25519
certificate.
Reported by: cperciva (via email)
Obtained from: https://github.com/neutrinolabs/xrdp/pull/3874
Sponsored by: Cybertrust Japan
lang/babashka: Update to 1.13.223
Changes since 1.13.222:
1.13.223 (2026-09-15)
* #2151: An :exec-fn task in the :depends of a task with a :task
body runs, with its own :exec-args and spec defaults
* Dep resolution improvements
- #2152: Read POMs, settings.xml and repository metadata without
XML namespaces, as Maven does, so an element such as
<Xlint:-unchecked/> no longer fails resolution
- Resolve a timestamped snapshot version, such as
1.0-20240101.123456-3, to that build instead of the newest one
- Resolve ${project.name} and ${parent.artifactId} in a POM
- Report a missing artifact with the same message as the Clojure
CLI
- Resolve locally installed -SNAPSHOT artifacts and pick the
snapshot build with the newest metadata, including the local
[42 lines not shown]
