tailscale: update to 1.102.3
- Tailscale refuses host-scoped IPv4 destinations at every point that
acts on an unmapped 4via6 address. This fix addresses a security
vulnerability described in TS-2026-011.
- When MagicDNS is disabled, unqualified hostnames are correctly
forwarded to the configured nameservers.
- Resolved an issue where nodes with Tailnet Lock enabled on large
tailnets would experience startup failures.
rpcbind(8): minor markup tweaks, explain "portmapper"
Mention "portmapper" in the .Nd line to make it findable with the
legacy apropos(1). Add a brief HISTORY section that provides a bit of
background information on the name.
croc: Update to 11.2.2
11.2.2
What's Changed
fix: web show link Fixes #1266 by @schollz in #1268
build(deps): bump azure/trusted-signing-action from 0.5.0 to 2.0.0 by @dependabot[bot] in #1267
(newer version require Go 1.27, keeping on-hold once Go 1.27 will be available in pkgsrc formally)
crush: Update to 0.90.0
Changelog
New!
47df446: Revert "feat(ui): show user at host:cwd in the header by default (#3583)" (#3584) (@joestump)
7dc88e2: feat(ui): show user at host:cwd in the header by default (#3583) (@joestump-agent)
Fixed
d73a6e4: Revert "fix(bash): decide auto-approval from the parsed command, not its prefix" (@joestump)
1fdb081: fix(bash): decide auto-approval from the parsed command, not its prefix (@joestump-agent)
059ba81: fix(bash): keep read-only git filter and remote forms auto-approved (@joestump-agent)
07e0544: fix(bash): satisfy staticcheck QF1001 in isAssignment (@joestump-agent)
ed15da4: fix(ui): use dialog background for bash syntax highlighting in permissions (#3575) (@andreynering)
Other stuff
b7b9093: chore: auto-update files (@charmcli)
4dc477d: chore: auto-update files (@charmcli)
b8453c4: chore: gofumpt (@andreynering)
0f14334: chore: normalize line endings to lf via .gitattributes (#3555) (@Lin-BoYuan)
945c518: sec(bash): close four auto-approval gaps in the safe-command matcher (@joestump)
p5-Catalyst-Plugin-Static-Simple: update to 0.38nb1.
Immediately to nb1 because this includes a patch for CVE-2026-15743.
0.38 - 2026-07-17
- canonical repository is now github, rather than catagits
x86: Pull dbregs buffer allocation out from under lwp_lock.
Sprinkle assertions and notes about locking rules while here.
PR kern/60595: System lockup using gdb(1) on kernel with DEBUG+LOCKDEBUG
This fixes a bug that was revealed by lifting up rock while fixing:
PR kern/60556: panic in process_read_fpregs_xmm
Add an optional mechanism, enabled by setting rcorder_cache=YES in
/etc/rc.conf, to precompute and cache the list of rc.d scripts that
will actually result in useful boot-time work. This cached list is
then consulted on subsequent boots to reduce the number of scripts
run during boot. This can have a huge impact on boot time on machines
with slow CPUs and/or highly constrained I/O. On the machine that
inspired this change, it reduced the number of scripts visited during
boot from 130 to 45 and reduced the boot time from 13 minutes to 7.
PR bin/60607
graphics/simp: update to 3.11.0
- Update egui and a bunch of others deps
- Make smooth zoom
- Add option to sort images in list by different values like name, time and size
- Fix some text fields being impossible to enter text into
py-aiohttp-socks: updated to 0.12.0
0.12.0
Dropped support for Python 3.8.
Bumped python-socks upper bound to <4.0.0.
The entire codebase is now strictly type-annotated and fully compliant with mypy.
