OpenBSD/ports 1mLACfNdevel/codex distinfo Makefile, devel/codex/patches patch-codex-rs_Cargo_toml patch-codex-rs_core_src_config_mod_rs

   devel/codex: update to 0.132.0
VersionDeltaFile
1.18+3-3devel/codex/patches/patch-codex-rs_Cargo_toml
1.20+2-2devel/codex/distinfo
1.20+1-1devel/codex/Makefile
1.20+1-1devel/codex/patches/patch-codex-rs_core_src_config_mod_rs
+7-74 files

OpenBSD/ports WHaSRhTnet/rabbitmq Makefile distinfo, net/rabbitmq/pkg PLIST

   net/rabbitmq: Update to 4.3.1
VersionDeltaFile
1.88+5-5net/rabbitmq/Makefile
1.41+2-2net/rabbitmq/distinfo
1.43+1-1net/rabbitmq/pkg/PLIST
+8-83 files

OpenBSD/ports PzgM8jPsecurity/vaultwarden distinfo crates.inc, security/vaultwarden/patches patch-modcargo-crates_webauthn-attestation-ca-0_5_5_build_rs patch-modcargo-crates_webauthn-attestation-ca-0_5_4_build_rs

   Security update to vaultwarden-1.36.0

   Contains security fixes for:
   - SSO Login CSRF
   - User/Organization Enumeration
   - SSO existing-user binding
   - SSRF via Icon Endpoint
   - Some crate's updated and other minor security enhancements

   Changes:
   https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.8
   https://github.com/dani-garcia/vaultwarden/releases/tag/1.36.0
VersionDeltaFile
1.35.2.1+162-122security/vaultwarden/distinfo
1.32.2.1+80-60security/vaultwarden/crates.inc
1.55.2.1+5-5security/vaultwarden/Makefile
1.1.2.1+0-0security/vaultwarden/patches/patch-modcargo-crates_webauthn-attestation-ca-0_5_5_build_rs
1.1.4.1+0-0security/vaultwarden/patches/patch-modcargo-crates_webauthn-attestation-ca-0_5_4_build_rs
1.1.4.1+0-0security/vaultwarden/patches/patch-modcargo-crates_webauthn-rs-core-0_5_4_build_rs
+247-1877 files not shown
+247-18713 files

OpenBSD/ports JqgDYeGwww/vaultwarden-web distinfo Makefile, www/vaultwarden-web/pkg PLIST

   Update to vaultwarden-web-2026.4.1

   Changes:
   https://github.com/dani-garcia/bw_web_builds/releases/tag/v2026.3.1
   https://github.com/dani-garcia/bw_web_builds/releases/tag/v2026.4.1
VersionDeltaFile
1.23.2.1+54-71www/vaultwarden-web/pkg/PLIST
1.23.2.1+2-2www/vaultwarden-web/distinfo
1.25.2.1+1-1www/vaultwarden-web/Makefile
+57-743 files

OpenBSD/ports YXM8Qunnet/samba Makefile distinfo

   Update to samba-4.24.2

   Changes: https://www.samba.org/samba/history/samba-4.24.2.html
VersionDeltaFile
1.372.2.1+3-3net/samba/Makefile
1.138.2.1+2-2net/samba/distinfo
+5-52 files

OpenBSD/ports Rd1x2wMwww/py-flask-caching Makefile

   add a note about long delays in some tests if redis is already running
VersionDeltaFile
1.8+1-0www/py-flask-caching/Makefile
+1-01 files

OpenBSD/ports cMoucY2mail/neomutt Makefile

   neomutt docs are generated with, in order of preference, w3m / lynx / elinks.
   change the BDEP to w3m so that builds are consistent.
VersionDeltaFile
1.112+4-3mail/neomutt/Makefile
+4-31 files

OpenBSD/ports dpnfUF6net/libunbound distinfo Makefile

   update to libunbound-1.25.1
VersionDeltaFile
1.35.2.1+2-2net/libunbound/distinfo
1.42.2.1+1-1net/libunbound/Makefile
+3-32 files

OpenBSD/ports wmhQrJ7net/libunbound distinfo Makefile

   update to libunbound-1.25.1
VersionDeltaFile
1.37+2-2net/libunbound/distinfo
1.44+1-1net/libunbound/Makefile
+3-32 files

OpenBSD/ports 0jYMEFGwww/py-flask-caching Makefile

   fix MODPY_PYBUILD, add missing tdeps
VersionDeltaFile
1.7+7-4www/py-flask-caching/Makefile
+7-41 files

OpenBSD/ports oapAdg0databases/py-redis Makefile

   add missing dep on py-jwt
VersionDeltaFile
1.50.2.1+2-0databases/py-redis/Makefile
+2-01 files

OpenBSD/ports Zd3gMLadatabases/py-redis Makefile

   add missing dep on py-jwt
VersionDeltaFile
1.51+2-0databases/py-redis/Makefile
+2-01 files

OpenBSD/ports eG47D1Qdevel/py-cachelib Makefile

   fix MODPY_PYBUILD
VersionDeltaFile
1.7+2-2devel/py-cachelib/Makefile
+2-21 files

OpenBSD/ports NSgR5aWx11/qt6/qtwebengine/patches patch-src_3rdparty_chromium_third_party_blink_renderer_platform_runtime_enabled_features_json5 patch-configure_cmake

   Update Qt6 to Qt6.11.1

   Feedback from jtt@ (pyside)
VersionDeltaFile
1.8+8-8x11/qt6/qtwebengine/patches/patch-src_3rdparty_chromium_third_party_blink_renderer_platform_runtime_enabled_features_json5
1.10+8-8x11/qt6/qtwebengine/patches/patch-configure_cmake
1.7+6-6x11/qt6/qtwebengine/patches/patch-src_3rdparty_chromium_net_BUILD_gn
1.3+5-5x11/qt6/qtwebengine/patches/patch-cmake_QtToolchainHelpers_cmake
1.8+5-5x11/qt6/qtwebengine/patches/patch-src_3rdparty_chromium_third_party_angle_src_libANGLE_Display_cpp
1.12+3-3x11/qt6/qtwebengine/patches/patch-cmake_Functions_cmake
+35-3570 files not shown
+163-15676 files

OpenBSD/ports wN3NB0Rmeta/tor-browser Makefile, www/tor-browser Makefile.inc

   Tor Browser: update to 15.0.14

   And MFC "add DormantCanceledByStartup 1 to torrc-defaults"
VersionDeltaFile
1.118.2.1+6-6www/tor-browser/browser/distinfo
1.67.2.1+2-2www/tor-browser/noscript/distinfo
1.124.2.1+2-2meta/tor-browser/Makefile
1.197.2.1+1-1www/tor-browser/browser/Makefile
1.74.2.1+1-1www/tor-browser/noscript/Makefile
1.121.2.1+1-1www/tor-browser/Makefile.inc
+13-131 files not shown
+14-137 files

OpenBSD/ports ej8Ycg5meta/tor-browser Makefile, www/tor-browser Makefile.inc

   Tor Browser: update to 15.0.14
VersionDeltaFile
1.122+6-6www/tor-browser/browser/distinfo
1.128+2-2meta/tor-browser/Makefile
1.202+1-2www/tor-browser/browser/Makefile
1.125+1-1www/tor-browser/Makefile.inc
+10-114 files

OpenBSD/src t46PReyusr.bin/sndiod dev.c

   sndiod: Allow control slots to have NULL opt pointer

   This case is not encoutered yet, but to control non-audio properties
   the control slots must work with no opt structure.
VersionDeltaFile
1.134+8-9usr.bin/sndiod/dev.c
+8-91 files

OpenBSD/ports XWhdhnsmisc/memcached distinfo Makefile, misc/memcached/patches patch-configure patch-doc_Makefile

   update to memcached-1.6.42
VersionDeltaFile
1.17.4.1+6-6misc/memcached/patches/patch-configure
1.3.10.1+2-2misc/memcached/patches/patch-doc_Makefile
1.35.2.1+2-2misc/memcached/distinfo
1.57.2.1+1-1misc/memcached/Makefile
1.21.4.1+1-1misc/memcached/patches/patch-memcached_c
+12-125 files

OpenBSD/ports ppFVgnbmisc/memcached distinfo Makefile, misc/memcached/patches patch-memcached_c patch-doc_Makefile

   update to memcached-1.6.42, ok giovanni

   various security related fixes in
   https://github.com/memcached/memcached/wiki/ReleaseNotes1642

   others:
   https://github.com/memcached/memcached/wiki/ReleaseNotes1641
   https://github.com/memcached/memcached/wiki/ReleaseNotes1640
VersionDeltaFile
1.36+2-2misc/memcached/distinfo
1.23+1-1misc/memcached/patches/patch-memcached_c
1.58+1-1misc/memcached/Makefile
1.5+1-1misc/memcached/patches/patch-doc_Makefile
+5-54 files

OpenBSD/src nhIDd28usr.sbin/bgpd rde.c

   Adjust last commit, the loop termination was not quite correct.

   Set pte to NULL before the inner pt_get loop so that the outer
   loop terminates correctly on (!found && pte != NULL).
   Since pte is NULL now plen needs to be set earlier as well.

   OK tb@
VersionDeltaFile
1.702+5-3usr.sbin/bgpd/rde.c
+5-31 files

OpenBSD/src Ra7l9tSdistrib/sets/lists/base mi

   sync
VersionDeltaFile
1.1184+4-0distrib/sets/lists/base/mi
+4-01 files

OpenBSD/src 9b5SoXzusr.sbin/bgpd rde_decide.c

   Use clearer semantics on how rde_generate_updates is called.

   Adjust prefix_evaluate and prefix_evaluate_nexthop so that
   rde_generate_updates() is only called with a few options.
   Either new is valid or old is valid. If both are invalid then
   there is no need to call rde_generate_updates(). If both are
   valid only new matters and old_pathid_tx is set to 0.

   In prefix_evaluate() most calls are with either new or old set to NULL.
   If both are set then new->path_id_tx == old->path_id_tx.

   In prefix_evaluate_nexthop() if old was valid then new becomes invalid
   but if old was invalid new may still be invalid.

   OK tb@
VersionDeltaFile
1.107+29-15usr.sbin/bgpd/rde_decide.c
+29-151 files

OpenBSD/src jRiKGEYusr.sbin/bgpd rtr_proto.c

   Respect RTR min-version in the implicit downgrade path and release
   activity lock when closing the connection.

   Check min_version in the implict downgrade case and error out if the
   suggested version is too low. Also trigger the RTR_EVNT_NEGOTIATION_DONE
   event only after parsing all of the header. If the PDU was bad don't
   trigger this event.

   In the rtr_fsm() when closing a connection check the state of the
   active_lock and if the lock is held, reset the cache, release the lock and
   recalculate the sets. The internal state is corrupt if a connection error
   triggerd during an exchange so it makes no sense to carry a bad cache
   around.

   OK tb@
VersionDeltaFile
1.54+24-9usr.sbin/bgpd/rtr_proto.c
+24-91 files

OpenBSD/ports sBGLfFynet/wireshark distinfo Makefile, net/wireshark/pkg PLIST-text

   update to wireshark-4.6.6
VersionDeltaFile
1.111.2.1+2-2net/wireshark/distinfo
1.177.2.1+1-1net/wireshark/Makefile
1.22.2.1+2-0net/wireshark/pkg/PLIST-text
+5-33 files

OpenBSD/ports 42h834jnet/wireshark distinfo Makefile, net/wireshark/pkg PLIST-text

   update to wireshark-4.6.6
VersionDeltaFile
1.113+2-2net/wireshark/distinfo
1.179+1-1net/wireshark/Makefile
1.23+2-0net/wireshark/pkg/PLIST-text
+5-33 files

OpenBSD/ports 0F6bPcTsecurity/gnutls Makefile

   Bump to be ahead of -stable.
VersionDeltaFile
1.210+2-0security/gnutls/Makefile
+2-01 files

OpenBSD/ports L1ucgnrsecurity/gnutls distinfo Makefile, security/gnutls/patches patch-src_gl_fseeko_c patch-lib_x509_output_c

   Security update to gnutls-3.8.13.

   GNUTLS-SA-2026-04-29-1, GNUTLS-SA-2026-04-29-2, GNUTLS-SA-2026-04-29-3,
   GNUTLS-SA-2026-04-29-4, GNUTLS-SA-2026-04-29-5, GNUTLS-SA-2026-04-29-6,
   GNUTLS-SA-2026-04-29-7, GNUTLS-SA-2026-04-29-8, GNUTLS-SA-2026-04-29-9,
   GNUTLS-SA-2026-04-29-10, GNUTLS-SA-2026-04-29-11, GNUTLS-SA-2026-04-29-12,
   and GNUTLS-SA-2026-04-29-13.
VersionDeltaFile
1.69.2.1+11-0security/gnutls/pkg/PLIST
1.1.4.1+1-10security/gnutls/patches/patch-src_gl_fseeko_c
1.127.2.1+2-2security/gnutls/distinfo
1.208.2.1+1-2security/gnutls/Makefile
1.1.4.1+1-1security/gnutls/patches/patch-lib_x509_output_c
+16-155 files

OpenBSD/ports rG1fIdfdevel/got distinfo Makefile

   7.9-stable: update to devel/got 0.125
VersionDeltaFile
1.125.2.1+2-2devel/got/distinfo
1.144.2.1+1-1devel/got/Makefile
+3-32 files

OpenBSD/src qRgKMQ8usr.bin/sndiod midi.c midi.h

   sndiod: Add a reference counter to the port structure

   Using a counter is simpler than (ab-)using the midi endpoint bitmaps
   to figure out if the port is in use. In turn this allows holding a
   reference to the port without involving midi endpoint
   connections. This change also reduces the differences between MIDI
   ports and audio devices: less logic, less bugs.
VersionDeltaFile
1.36+5-7usr.bin/sndiod/midi.c
1.20+2-1usr.bin/sndiod/midi.h
+7-82 files

OpenBSD/src 9UnlvxKusr.bin/sndiod midi.c

   sndiod: When connecting midi endpoints, check their modes

   As sndiod always uses IN|OUT, the behavior is unchanged.
VersionDeltaFile
1.35+3-3usr.bin/sndiod/midi.c
+3-31 files