OpenBSD/src NSFgmJ5 — usr.bin/tmux utf8.c cmd-parse.y

   Reject \u and \U escapes that are not Unicode characters. GitHub issue
   5804 from hrajyw4 at gmail dot com.
VersionDeltaFile
1.64+11-7usr.bin/tmux/cmd-parse.y
1.77+4-1usr.bin/tmux/utf8.c
+15-82 files

OpenBSD/ports bGOFSnI — security/xmlsec distinfo Makefile, security/xmlsec/patches patch-configure_ac patch-tests_testrun_sh

   update to xmlsec-1.3.13
   add a small sprinkling of #ifdef EVP_PKEY_X448 patches
VersionDeltaFile
1.13+110-153security/xmlsec/pkg/PLIST-docs
1.4+25-26security/xmlsec/patches/patch-src_openssl_evp_c
1.14+17-26security/xmlsec/patches/patch-tests_testrun_sh
1.1+39-0security/xmlsec/patches/patch-configure_ac
1.68+6-5security/xmlsec/Makefile
1.28+2-2security/xmlsec/distinfo
+199-2121 files not shown
+199-2127 files

OpenBSD/ports eRvQxUT — net Makefile

   += teleport
VersionDeltaFile
1.1485+1-0net/Makefile
+1-01 files

OpenBSD/ports XhZMaX9 — net/teleport Makefile, net/teleport/patches patch-lib_sshutils_scp_stat_openbsd_go patch-lib_client_reexec_reexec_openbsd_go

   Initial revision
VersionDeltaFile
1.1+311-0net/teleport/patches/patch-lib_srv_usermgmt_openbsd_go
1.1+98-0net/teleport/patches/patch-lib_utils_disk_go
1.1+72-0net/teleport/Makefile
1.1+71-0net/teleport/pkg/README
1.1+44-0net/teleport/patches/patch-lib_client_reexec_reexec_openbsd_go
1.1+40-0net/teleport/patches/patch-lib_sshutils_scp_stat_openbsd_go
+636-036 files not shown
+910-042 files

OpenBSD/ports 79cmaXr — infrastructure/db user.list

   reserve a UID for net/teleport

   ok sthen@
VersionDeltaFile
1.497+2-2infrastructure/db/user.list
+2-21 files

OpenBSD/ports yBhoXAE — sysutils/firmware/otus Makefile, sysutils/firmware/pgt Makefile

   add a reminder to the firmware port Makefiles to ask me to rebuild for fw_update
VersionDeltaFile
1.7+2-1sysutils/firmware/qwz/Makefile
1.35+2-0sysutils/firmware/radeondrm/Makefile
1.6+2-0sysutils/firmware/qwx/Makefile
1.6+2-0sysutils/firmware/qcpas/Makefile
1.7+2-0sysutils/firmware/pgt/Makefile
1.5+2-0sysutils/firmware/otus/Makefile
+12-128 files not shown
+68-134 files

OpenBSD/src u7byEr4 — sys/dev/pci if_mwx.c

   Sprinkle some splassert(IPL_NET) into the dma handling bits.
   Add missing splnet() around a mwx_dma_tx_cleanup() call in
   mwx_mcu_send_firmware().
   Reported by le unium.
VersionDeltaFile
1.49+12-1sys/dev/pci/if_mwx.c
+12-11 files

OpenBSD/ports BuMC29n — net/py-curl distinfo Makefile, net/py-curl/pkg PLIST

   update to py3-curl-7.49.0
VersionDeltaFile
1.26+0-36net/py-curl/pkg/PLIST
1.74+3-6net/py-curl/Makefile
1.32+2-2net/py-curl/distinfo
+5-443 files

OpenBSD/ports 8mYGwnk — net/routinator Makefile crates.inc

   update to routinator-0.15.3
VersionDeltaFile
1.26.2.1+270-298net/routinator/distinfo
1.17.2.1+134-148net/routinator/crates.inc
1.54.2.1+1-1net/routinator/Makefile
+405-4473 files

OpenBSD/ports oyHFiN7 — net/routinator Makefile crates.inc

   update to routinator-0.15.3, with some security fixes
VersionDeltaFile
1.27+270-298net/routinator/distinfo
1.18+134-148net/routinator/crates.inc
1.55+1-1net/routinator/Makefile
+405-4473 files

OpenBSD/ports UQSksff — security/yubico/yubico-piv-tool Makefile distinfo, security/yubico/yubico-piv-tool/patches patch-tool_yubico-piv-tool_c

   update to yubico-piv-tool-2.7.3
VersionDeltaFile
1.8+6-6security/yubico/yubico-piv-tool/patches/patch-tool_yubico-piv-tool_c
1.7+2-2security/yubico/yubico-piv-tool/distinfo
1.13+1-1security/yubico/yubico-piv-tool/Makefile
+9-93 files

OpenBSD/ports R2C4PWQ — net/unifi Makefile, net/unifi/main Makefile

   seems there are no more downloadable tar.gz for unifi 9.xx updates, so drop
   that branch from the port.
VersionDeltaFile
1.49+1-3net/unifi/main/pkg/PLIST
1.69+2-1net/unifi/main/Makefile
1.81+0-1net/unifi/Makefile
1.2+0-0net/unifi/v9/pkg/unifi.rc
1.2+0-0net/unifi/v9/pkg/README
1.3+0-0net/unifi/v9/pkg/PLIST
+3-55 files not shown
+3-511 files

OpenBSD/ports MJmLWLH — www/firefox-esr Makefile distinfo, www/firefox-esr/patches patch-js_src_wasm_WasmStacks_cpp patch-js_src_gc_Memory_h

   www/firefox-esr: MFC update to 153.6.0.

   see https://www.firefox.com/en-US/firefox/153.6.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-119/ (maybe)

   drop patches from #2074025, merged upstream in the esr153 branch
VersionDeltaFile
1.190.2.4+4-4www/firefox-esr/distinfo
1.282.2.4+2-2www/firefox-esr/Makefile
1.1.2.1+0-0www/firefox-esr/patches/patch-js_src_wasm_WasmStacks_cpp
1.1.2.1+0-0www/firefox-esr/patches/patch-js_src_gc_Memory_h
1.1.2.1+0-0www/firefox-esr/patches/patch-js_src_gc_Memory_cpp
+6-65 files

OpenBSD/ports ESVNDDS — www/firefox-esr Makefile distinfo, www/firefox-esr-i18n Makefile.inc distinfo

   www/firefox-esr: update to 153.6.0.

   see https://www.firefox.com/en-US/firefox/153.6.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-119/ (maybe)

   drop patches from #2074025, merged upstream in the esr153 branch
VersionDeltaFile
1.188+162-162www/firefox-esr-i18n/distinfo
1.193+4-4www/firefox-esr/distinfo
1.286+2-2www/firefox-esr/Makefile
1.200+1-1www/firefox-esr-i18n/Makefile.inc
1.3+0-0www/firefox-esr/patches/patch-js_src_wasm_WasmStacks_cpp
1.2+0-0www/firefox-esr/patches/patch-js_src_gc_Memory_h
+169-1691 files not shown
+169-1697 files

OpenBSD/ports I29ocJp — www/mozilla-firefox Makefile distinfo, www/mozilla-firefox/patches patch-python_mozbuild_mozbuild_rust_commands_py patch-js_src_wasm_WasmStacks_cpp

   www/mozilla-firefox: MFC update to 159.0.

   see https://www.firefox.com/en-US/firefox/159.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/
   (probably)

   - drop patches from #2074025, merged upstream
   - replace patch setting -Clto=thin for rust code after #2060428
   - as usual in -stable, patch out nss requirement in nss.h
VersionDeltaFile
1.1.8.1+15-0www/mozilla-firefox/patches/patch-security_nss_lib_nss_nss_h
1.423.2.4+4-4www/mozilla-firefox/distinfo
1.712.2.4+2-2www/mozilla-firefox/Makefile
1.1.2.1+0-0www/mozilla-firefox/patches/patch-python_mozbuild_mozbuild_rust_commands_py
1.1.2.1+0-0www/mozilla-firefox/patches/patch-js_src_wasm_WasmStacks_cpp
1.1.2.1+0-0www/mozilla-firefox/patches/patch-js_src_gc_Memory_h
+21-62 files not shown
+21-68 files

OpenBSD/ports wvW56Vq — www/firefox-i18n Makefile.inc distinfo, www/mozilla-firefox Makefile distinfo

   www/mozilla-firefox: update to 159.0.

   see https://www.firefox.com/en-US/firefox/159.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/
   (probably)

   drop patches from #2074025, merged upstream
   replace patch setting -Clto=thin for rust code after #2060428
VersionDeltaFile
1.413+164-164www/firefox-i18n/distinfo
1.1+16-0www/mozilla-firefox/patches/patch-python_mozbuild_mozbuild_rust_commands_py
1.427+4-4www/mozilla-firefox/distinfo
1.717+3-3www/mozilla-firefox/Makefile
1.368+1-1www/firefox-i18n/Makefile.inc
1.2+0-0www/mozilla-firefox/patches/patch-js_src_wasm_WasmStacks_cpp
+188-1723 files not shown
+188-1729 files

OpenBSD/ports WqwrL1y — www/py-genshi Makefile distinfo

   update to py3-genshi-0.7.12
VersionDeltaFile
1.16+2-2www/py-genshi/distinfo
1.39+1-1www/py-genshi/Makefile
+3-32 files

OpenBSD/src 12Hp7FK — usr.bin/tmux cmd-confirm-before.c cmd-command-prompt.c

   Do not lose keys sent after a command prompt opens, instead of leaving
   them on the queue, offer them to the prompt immediately. GitHub issue
   5782 from huangyiwei at student dot gdufe dot edu dot cn.
VersionDeltaFile
1.126+55-17usr.bin/tmux/cmd-queue.c
1.530+56-13usr.bin/tmux/server-client.c
1.1473+19-2usr.bin/tmux/tmux.h
1.63+2-1usr.bin/tmux/cmd-confirm-before.c
1.78+2-1usr.bin/tmux/cmd-command-prompt.c
+134-345 files

OpenBSD/src zHDTKrZ — lib/libutil ibuf_add.3

   ibuf_add.3: fix typo: save -> safe
VersionDeltaFile
1.15+3-3lib/libutil/ibuf_add.3
+3-31 files

OpenBSD/ports 1urHmnZ — editors/vim Makefile, editors/vim/patches patch-src_configure_ac

   disable pango/cairo for non-gui builds, their use was added for printing
   support (9.2.898)
VersionDeltaFile
1.24+18-0editors/vim/patches/patch-src_configure_ac
1.319+3-0editors/vim/Makefile
+21-02 files

OpenBSD/ports 4Jv3nCc — lang/gcc/16/patches patch-gcc_config_alpha_alpha_opt

   Modern gcc turns the "Report" opt flag into an #error. Remove the flag,
   allows gcc to be build on alpha again.

   from and OK kirill@
VersionDeltaFile
1.2+1-1lang/gcc/16/patches/patch-gcc_config_alpha_alpha_opt
+1-11 files

OpenBSD/ports 7rhPeEc — lang/gcc/16/patches patch-gcc_config_alpha_openbsd_h

   Remove custom LINK_SPEC. gcc contains its own defintion and creates a lot
   of build noise.

   OK kirill@
VersionDeltaFile
1.2+1-10lang/gcc/16/patches/patch-gcc_config_alpha_openbsd_h
+1-101 files

OpenBSD/ports 2Yy1lB6 — lang/gcc/16/patches patch-gcc_config_alpha_alpha_md

   Backport miod's alpha stack protector diff for base gcc.

   OK miod@, kirill@

   original message:
   The introduction of stack protector support for gcc 4 on alpha some 14 years
   ago required the logical stack frame to be laid out in reverse order (this is
   a requirement of the MI stack protector code in gcc).

   This move, however, forgot to update the preconditions of the "*adddi_fp_hack"
   insn, which is used to perform specific stack or frame pointer adjustment in
   the prologue.

   The change in frame layout would make its preconditions never allow it to be
   used anymore, causing internal compiler errors when attempting to compile
   routines with more than about 32KB of locals.

   Such code appears to be rare enough that this issue hasn't been noticed until
   very recently by martijn@.
VersionDeltaFile
1.2+22-0lang/gcc/16/patches/patch-gcc_config_alpha_alpha_md
+22-01 files

OpenBSD/ports 634uwj0 — www/iridium distinfo, www/iridium/patches patch-components_web_package_signed_web_bundles_rust_integrity_block_rs patch-chrome_browser_devtools_protocol_storage_handler_cc

   update to 2026.10.156
VersionDeltaFile
1.1+488-0www/iridium/patches/patch-components_web_package_signed_web_bundles_rust_integrity_block_unittest_rs
1.134+6-412www/iridium/distinfo
1.1+299-0www/iridium/patches/patch-components_web_package_signed_web_bundles_integrity_block_parser_cc
1.85+116-134www/iridium/patches/patch-chrome_browser_about_flags_cc
1.1+212-0www/iridium/patches/patch-chrome_browser_devtools_protocol_storage_handler_cc
1.1+193-0www/iridium/patches/patch-components_web_package_signed_web_bundles_rust_integrity_block_rs
+1,314-546922 files not shown
+8,515-3,740928 files

OpenBSD/src CDKYgYZ — sys/arch/alpha/include vmparam.h

   Bump MAXDSIZ for alpha to 4GB.

   OK claudio@, miod@
VersionDeltaFile
1.31+2-2sys/arch/alpha/include/vmparam.h
+2-21 files

OpenBSD/src 4s8mmbS — usr.sbin/sysmerge sysmerge.sh sysmerge.8

   Ignore /etc/ssl/cert.pem for now.

   ok sthen@
VersionDeltaFile
1.81+3-2usr.sbin/sysmerge/sysmerge.8
1.237+2-1usr.sbin/sysmerge/sysmerge.sh
+5-32 files

OpenBSD/ports AvvfXoe — sysutils/btop Makefile distinfo, sysutils/btop/patches patch-Makefile

   update to btop-1.4.8, from Laurent Cheylus, plus I simplified the Makefile
   patch to make future updates easier
VersionDeltaFile
1.7+21-76sysutils/btop/patches/patch-Makefile
1.10+2-2sysutils/btop/distinfo
1.11+1-1sysutils/btop/Makefile
+24-793 files

OpenBSD/ports elZM92X — x11/gnome/glycin Makefile crates.inc

   Update to glycin-2.2.5.
VersionDeltaFile
1.8+12-12x11/gnome/glycin/distinfo
1.8+5-5x11/gnome/glycin/crates.inc
1.9+1-1x11/gnome/glycin/Makefile
+18-183 files

OpenBSD/ports NA8l6NM — devel/gengetopt Makefile

   set USE_GMAKE; one of the non-suffix rules in tests uses $< (naddy has
   run into this failing from time to time, but we haven't figured out what
   actually triggers it..)
VersionDeltaFile
1.13+1-0devel/gengetopt/Makefile
+1-01 files

OpenBSD/ports NWikHD8 — x11/i3lock Makefile, x11/i3lock/patches patch-i3lock_c

   Add _permit_setugid flag.

   OK by sthen@
VersionDeltaFile
1.3+10-228x11/i3lock/patches/patch-i3lock_c
1.13+1-0x11/i3lock/Makefile
+11-2282 files