OpenBSD/src NtZ712Yusr.sbin/bgpd session_bgp.c session.c

   Rework the IdleHoldTimer and how fast reconnects are implemented.

   On first error bgpd should allow a fast reconnect - this is especially
   helpful for passive sessions. The way this was implemented was error
   prone with a special case in session_accept().

   Adjust the FSM so that on the first IDLE transistion the session uses
   a IdleHoldTime of 0 sec but then increased to INTERVAL_IDLE_HOLD_INITIAL.
   At the same time the outgoing connection is delatyed via ConnectRetryTimer.
   Doing this moves the session quickly into active state and allows new
   connections in but delays the reconnect like before.

   Additionally the STATE_ACTIVE / EVNT_START FSM case is adjusted to initiate
   a connect immediatly. This allows a 'bgpctl nei X up' to work also for
   sessions in ACTIVE state. Also passive sessions will initiate a connection
   in this case, which is a new behaviour.

   OK tb@
VersionDeltaFile
1.11+35-24usr.sbin/bgpd/session_bgp.c
1.538+2-13usr.sbin/bgpd/session.c
1.141+3-7usr.sbin/bgpd/control.c
1.199+1-3usr.sbin/bgpd/session.h
+41-474 files

OpenBSD/src LPdYpxYusr.sbin/bgpd rde_peer.c

   Use peer_dump_done() in the EXPORT_NONE and EXPORT_DEFAULT_ROUTE cases of
   peer_dump().

   peer_dump_done() calls peer_blast_done() and it issues the End-Of-RIB
   marker. This unifies all the peer_dump finalizers to use peer_dump_done().

   OK tb@
VersionDeltaFile
1.81+3-3usr.sbin/bgpd/rde_peer.c
+3-31 files

OpenBSD/src yqmwwwrusr.sbin/bgpd bgpd.h

   Switch a few uint32_t to unsigned int where it makes sense.

   Instead of mixing uint32_t with unsigned long long use unsigned int for
   those. In most cases those are simple counts that can't get too big.
   The same is the case for max_prefix and max_out_prefix. There is no good
   reason to use uint32_t there.

   OK tb@
VersionDeltaFile
1.546+8-8usr.sbin/bgpd/bgpd.h
+8-81 files

OpenBSD/ports kjmRNQKaudio/ncmpc distinfo Makefile, audio/ncmpc/patches patch-src_event_TimerList_hxx patch-src_event_TimerList_cxx

   audio/ncmpc: update to 0.53.

   see https://raw.githubusercontent.com/MusicPlayerDaemon/ncmpc/v0.53/NEWS
   switched to c++23, drop patches now that we have a more modern libcxx
VersionDeltaFile
1.31+2-2audio/ncmpc/distinfo
1.68+1-2audio/ncmpc/Makefile
1.13+1-0audio/ncmpc/pkg/PLIST
1.2+0-0audio/ncmpc/patches/patch-src_event_TimerList_hxx
1.2+0-0audio/ncmpc/patches/patch-src_event_TimerList_cxx
1.2+0-0audio/ncmpc/patches/patch-src_event_FineTimerEvent_hxx
+4-46 files

OpenBSD/src wK8188uusr.sbin/bgpd bgpd.h

   In struct rde_peer_stats use unsigned long long instead of uint64_t to
   simplify printing the values out.

   OK tb@
VersionDeltaFile
1.545+10-10usr.sbin/bgpd/bgpd.h
+10-101 files

OpenBSD/src vdz1W8Qusr.bin/tmux format-draw.c

   Use correct cursor position for range end, GitHub issue 5414.
VersionDeltaFile
1.34+2-2usr.bin/tmux/format-draw.c
+2-21 files

OpenBSD/src CrLXICSusr.bin/tmux tty-keys.c

   Increase escape-time for tmux's own queries (refresh-client -l and
   window size) as well, GitHub issue 5388 from Jackson Edmonds.
VersionDeltaFile
1.211+4-3usr.bin/tmux/tty-keys.c
+4-31 files

OpenBSD/src TuW4MtHregress/usr.bin/ssh channel-timeout.sh

   verify that ChannelTimeout in a Match block is effective
VersionDeltaFile
1.3+12-1regress/usr.bin/ssh/channel-timeout.sh
+12-11 files

OpenBSD/src 5drQYWhregress/usr.bin/ssh rekey.sh

   verify that RekeyLimit in a Match block is effective
VersionDeltaFile
1.31+22-2regress/usr.bin/ssh/rekey.sh
+22-21 files

OpenBSD/src NQww9Cdusr.bin/ssh sshd-auth.c sshconnect2.c

   fix ChannelTimeout and RekeyLimit not being applied in sshd_config
   Match blocks; reported by Alex Harrison
VersionDeltaFile
1.17+3-4usr.bin/ssh/sshd-auth.c
1.389+3-4usr.bin/ssh/sshconnect2.c
1.165+4-1usr.bin/ssh/auth.c
1.340+4-1usr.bin/ssh/packet.c
1.148+3-1usr.bin/ssh/monitor_wrap.c
+17-115 files

OpenBSD/src KQE02sXusr.bin/ssh readconf.c

   s/= - 1/= -1/; from serity---
VersionDeltaFile
1.415+6-6usr.bin/ssh/readconf.c
+6-61 files

OpenBSD/src w0Hv2Euregress/lib/libcrypto/bn bn_mul_div.c

   bn_mul_div: use (unsigned long long) instead of (uint64_t) to print with %llu
VersionDeltaFile
1.9+2-2regress/lib/libcrypto/bn/bn_mul_div.c
+2-21 files

OpenBSD/ports ZEi9o3Wwww/py-fastapi Makefile

   add RDEP annotated_doc
VersionDeltaFile
1.7+5-2www/py-fastapi/Makefile
+5-21 files

OpenBSD/ports H6NGTujsysutils/htop distinfo Makefile

   sysutils/htop: update to 3.5.2
VersionDeltaFile
1.17+2-2sysutils/htop/distinfo
1.43+1-2sysutils/htop/Makefile
+3-42 files

OpenBSD/src oDb9UQAsys/dev/pci mfii.c

   Don't use SCSI_DATA_IN for patrol read commands that don't have a data
   buffer.  Noticed while looking into crashes reported by job@ but doesn't
   fix anything.

   ok dlg@
VersionDeltaFile
1.92+2-2sys/dev/pci/mfii.c
+2-21 files

OpenBSD/ports As1SlK4sysutils/telegraf distinfo modules.inc, sysutils/telegraf/patches patch-plugins_inputs_openntpd_openntpd_go

   sysutils/telegraf: update to 1.39.2

   from Atanas Vladimirov, thanks!
VersionDeltaFile
1.30+2,072-1,966sysutils/telegraf/distinfo
1.29+669-657sysutils/telegraf/modules.inc
1.2+1-1sysutils/telegraf/pkg/README
1.6+1-1sysutils/telegraf/patches/patch-plugins_inputs_openntpd_openntpd_go
1.47+1-1sysutils/telegraf/Makefile
+2,744-2,6265 files

OpenBSD/ports h8CHAScsecurity/acme.sh distinfo Makefile, security/acme.sh/patches patch-deploy_windows_rdp_sh

   security/acme.sh: update to 3.1.4
VersionDeltaFile
1.6+21-1security/acme.sh/pkg/PLIST
1.1+15-0security/acme.sh/patches/patch-deploy_windows_rdp_sh
1.6+2-2security/acme.sh/distinfo
1.7+1-1security/acme.sh/Makefile
+39-44 files

OpenBSD/ports Ny51aqWconverters/p5-CBOR-Free distinfo Makefile

   update p5-CBOR-Free to 0.36
VersionDeltaFile
1.3+2-2converters/p5-CBOR-Free/distinfo
1.3+1-1converters/p5-CBOR-Free/Makefile
+3-32 files

OpenBSD/ports hg5RDEIconverters/p5-Cpanel-JSON-XS distinfo Makefile

   update p5-Cpanel-JSON-XS to 4.43
VersionDeltaFile
1.46+2-2converters/p5-Cpanel-JSON-XS/distinfo
1.50+1-1converters/p5-Cpanel-JSON-XS/Makefile
+3-32 files

OpenBSD/src 1RZ6ml9sys/dev/fdt xhci_fdt.c

   Enable on Spacemit K3.
VersionDeltaFile
1.30+5-3sys/dev/fdt/xhci_fdt.c
+5-31 files

OpenBSD/src 1qNIgZLregress/usr.sbin/relayd Makefile args-ssl-ec.pl

   Add add ECDSA tests (based on the RSA tests)
VersionDeltaFile
1.24+31-4regress/usr.sbin/relayd/Makefile
1.1+22-0regress/usr.sbin/relayd/args-ssl-ec.pl
+53-42 files

OpenBSD/src f8xlPVqusr.sbin/relayd ca.c ssl.c

   relayd: add ECDSA support to the CA privsep engine

   Add an EC_KEY_METHOD that forwards the sign operation to the CA process,
   clone the existing RSA engine. ssl_load_pkey() now handles both RSA
   and EC keys and attaches the cert hash accordingly.

   The engine and signing code was migrated from smtpd from (op@) with
   some tweaks by me.

   OK op@
VersionDeltaFile
1.57+258-8usr.sbin/relayd/ca.c
1.43+35-8usr.sbin/relayd/ssl.c
1.267+4-1usr.sbin/relayd/relay.c
1.290+2-1usr.sbin/relayd/relayd.h
+299-184 files

OpenBSD/src USyrzGKusr.sbin/vmd vmd.c

   vmd(8): validate memory ranges in vmd before vmm(4).

   While vmm(4) does its own check on the number of memory ranges, do
   the check in vmd(8) to fail fast and provide feedback to the user.

   Report and diff by Andrew Griffiths.

   ok @hshoexer
VersionDeltaFile
1.177+4-1usr.sbin/vmd/vmd.c
+4-11 files

OpenBSD/ports XsBboDxwayland/wayland Makefile distinfo, wayland/wayland/patches patch-egl_wayland-egl-symbols-check

   wayland/wayland: update to 1.26.0

   From yaydn (at) protonmail with tweaks from me
VersionDeltaFile
1.1+12-0wayland/wayland/patches/patch-egl_wayland-egl-symbols-check
1.17+5-5wayland/wayland/Makefile
1.8+2-2wayland/wayland/distinfo
+19-73 files

OpenBSD/ports kGUoHMnnet/rabbitmq Makefile distinfo, net/rabbitmq/pkg PLIST

   net/rabbitmq: Update to 4.3.3
VersionDeltaFile
1.90+3-3net/rabbitmq/Makefile
1.43+2-2net/rabbitmq/distinfo
1.45+2-0net/rabbitmq/pkg/PLIST
+7-53 files

OpenBSD/src CBjHZ8Pusr.sbin/authpf authpf.c

   authpf(8) read_config() should chop off trailing white space

   if administrator mistakenly types into configuration file

   anchor=authpf_test

   where 'authpf_test' is followed by white space, the authpf(8)
   is going to use anchor 'authpf_test ' instead of the 'authpf_test'
   which is defined in pf.conf(5) as 'anchor authpf_test/*'

   issue kindly reported and patch submitted by

   Avinash Duduskar <avinash.duduskar (_at_) gmail (_dot_) com>

   OK sashan@
VersionDeltaFile
1.131+3-3usr.sbin/authpf/authpf.c
+3-31 files

OpenBSD/ports Qy7pYPKdevel/got distinfo Makefile

   update to got 0.127

   - re-add cmdline tests to 'make regress' target (regression from 0.126)
   - add version flag (-V, --version) to gotd, gotwebd, and gotsysd
   - make 'got merge' accept tags as merge source argument
   - do not raise errors when unversioned files are found during got rm -k
   - add rm -s ? option for deleting unversioned files from the work tree
   - add rm -I option for also deleting ignored unversioned files with rm -s ?
   - make 'tog log' reload the work tree's base-commit info during Ctrl-L refresh
   - fix failures due to trailing slashes in checkout -p path-prefix argument
   - gotwebd: use <meta http-equiv="refresh"> tag to redirect browser after login
   - gotwebd.conf: add option which restores legacy redirect using http status 307
VersionDeltaFile
1.128+2-2devel/got/distinfo
1.147+1-1devel/got/Makefile
+3-32 files

OpenBSD/ports ftf1xQwwww/qobuz-dl distinfo Makefile

   www/qobuz-dl: update to 2.3.1
VersionDeltaFile
1.5+2-2www/qobuz-dl/distinfo
1.7+1-1www/qobuz-dl/Makefile
+3-32 files

OpenBSD/ports nlPrOdAsysutils/docker-cli distinfo Makefile

   sysutils/docker-cli: update to 29.6.2
VersionDeltaFile
1.45+2-2sysutils/docker-cli/distinfo
1.50+1-1sysutils/docker-cli/Makefile
+3-32 files

OpenBSD/ports doX1vccsysutils/docker-compose distinfo modules.inc

   sysutils/docker-compose: update to 5.3.1
VersionDeltaFile
1.36+18-12sysutils/docker-compose/distinfo
1.32+7-4sysutils/docker-compose/modules.inc
1.39+1-1sysutils/docker-compose/Makefile
+26-173 files