OpenBSD/ports 53YuyU3www/caddy Makefile, www/caddy/pkg PLIST

   ship man pages
VersionDeltaFile
1.2+27-0www/caddy/pkg/PLIST
1.11+7-1www/caddy/Makefile
+34-12 files

OpenBSD/ports kd6Fsvewww/caddy Makefile

   use variables for brevity and <80 chars lines
VersionDeltaFile
1.10+5-4www/caddy/Makefile
+5-41 files

OpenBSD/ports DDiHNpIsysutils/ruby-openfact Makefile distinfo

   update to openfact 6.2.0
VersionDeltaFile
1.11+2-2sysutils/ruby-openfact/distinfo
1.19+1-1sysutils/ruby-openfact/Makefile
+3-32 files

OpenBSD/ports t7yQq5inet/64gram distinfo Makefile

   update to 64gram 1.2.10 (from Mykyta)

   sync wantlib and deps with net/tdesktop while here
VersionDeltaFile
1.3+7-7net/64gram/Makefile
1.2+2-2net/64gram/distinfo
+9-92 files

OpenBSD/src 71t6VnPsys/arch/amd64/amd64 vmm_machdep.c

   vmm(4): Do not access raw PSL_I

   With SEV-ES enabled we can not directly access PSL_I in RFLAGS.
   Instead we have to use the GUEST_INTR_MASK bit in vmcb->v_intr_shadow
   which indicates the actual PSL_I state.

   ok dv@ mlarkin@
VersionDeltaFile
1.91+3-2sys/arch/amd64/amd64/vmm_machdep.c
+3-21 files

OpenBSD/ports MxSs3kGemulators/libchdr Makefile, mail/bogofilter Makefile

   these work on aarch64 now, so un BROKEN-aarch64 them :)
VersionDeltaFile
1.36+0-2mail/bogofilter/Makefile
1.7+0-2emulators/libchdr/Makefile
+0-42 files

OpenBSD/src dXsb1Rzusr.sbin/rpki-client validate.c extern.h

   rpki-client: rename valid_x509() to valid_cert()

   x509 usually indicates an X509 * argument and cert a struct cert *.
   This got changed in the surgery today and valid_cert() is now free,
   so we can fix this.

   ok claudio
VersionDeltaFile
1.189+7-7usr.sbin/rpki-client/parser.c
1.91+3-3usr.sbin/rpki-client/filemode.c
1.90+2-2usr.sbin/rpki-client/validate.c
1.299+2-2usr.sbin/rpki-client/extern.h
+14-144 files

OpenBSD/ports tfAttOjgraphics/darktable Makefile, graphics/darktable/patches patch-src_common_darktable_h patch-src_CMakeLists_txt

   update to darktable-5.6.1, from Josh Grosse with tweaks from Brad

   I have hit some double-free crashes at exit, but have the same with the
   previous version too.
VersionDeltaFile
1.35+762-3graphics/darktable/pkg/PLIST
1.1+73-0graphics/darktable/patches/patch-src_external_whereami_src_whereami_c
1.1+33-0graphics/darktable/patches/patch-src_common_dtpthread_c
1.13+10-18graphics/darktable/patches/patch-src_CMakeLists_txt
1.136+13-13graphics/darktable/Makefile
1.11+16-3graphics/darktable/patches/patch-src_common_darktable_h
+907-3710 files not shown
+956-4516 files

OpenBSD/ports 4lcrOMmnet/tdesktop distinfo Makefile

   update to tdesktop 6.2.9
VersionDeltaFile
1.233+4-5net/tdesktop/Makefile
1.171+2-2net/tdesktop/distinfo
+6-72 files

OpenBSD/src dy0DwQAusr.sbin/rpki-client extern.h parser.c

   rpki-client: check all !TA certs for resource coverage

   For historic reasons, EE certs did not have their resources checked for
   coverage in the parent. Since we have the exception of EE certs that need
   special casing for inheritance (MFT/TAK/GBR), this can be done at the end
   of valid_x509(). The check is not expensive since this only goes up as
   many issuers as needed to hit explicit resources.

   Rename the misnamed valid_cert() to valid_resources() for lack of a better
   idea and call it from the end of valid_x509(). Remove the remaining calls
   since they're now redundant, and make valid_resources() static.

   ok job
VersionDeltaFile
1.89+6-4usr.sbin/rpki-client/validate.c
1.188+2-3usr.sbin/rpki-client/parser.c
1.90+2-3usr.sbin/rpki-client/filemode.c
1.298+1-2usr.sbin/rpki-client/extern.h
+11-124 files

OpenBSD/src MmTfaNAsys/dev/usb uaudio.c

   uaudio: Make sure the reported format and channels are usable

   A bogus device may trigger a division by zero if the number of
   channels or sample size are 0. Similarly, memory corruption may occur
   if the reported sample size is larger than four bytes.

   Found by Acts1631 <acts1631kjv at proton.me>, who proposed a diff that
   inspired this fix. Thanks!
VersionDeltaFile
1.189+16-1sys/dev/usb/uaudio.c
+16-11 files

OpenBSD/ports f7GVL6Ymail/grommunio/web distinfo Makefile, mail/grommunio/web/patches patch-Makefile

   update to 5.1
VersionDeltaFile
1.34+2-2mail/grommunio/web/distinfo
1.41+2-2mail/grommunio/web/Makefile
1.12+1-1mail/grommunio/web/patches/patch-Makefile
1.20+1-0mail/grommunio/web/pkg/PLIST
+6-54 files

OpenBSD/ports I6grwqPmail/grommunio/mapi-header-php distinfo Makefile, mail/grommunio/mapi-header-php/pkg PLIST

   update to 2.3
VersionDeltaFile
1.20+2-4mail/grommunio/mapi-header-php/Makefile
1.17+2-2mail/grommunio/mapi-header-php/distinfo
1.9+1-0mail/grommunio/mapi-header-php/pkg/PLIST
+5-63 files

OpenBSD/src aMHWeHhsys/arch/arm64/dev apldc.c

   The MTP firmware needs to stay around after "loading" it; the comprocessor
   that runs the firmware seems to reference the firmware image that we pass
   it directly instead of making its own copy.  This fixes a regression on
   laptops with a dockchannel touchpad after the recent changes to apldart(4).

   ok tobhe@
VersionDeltaFile
1.13+23-20sys/arch/arm64/dev/apldc.c
+23-201 files

OpenBSD/ports ONNjtV4devel/codex Makefile distinfo, devel/codex/patches patch-codex-rs_chatgpt_src_lib_rs

   devel/codex: update to 0.156.1

   Also added forgotten patch, noticed by ajacoutot@
VersionDeltaFile
1.1+8-0devel/codex/patches/patch-codex-rs_chatgpt_src_lib_rs
1.53+2-2devel/codex/distinfo
1.55+1-1devel/codex/Makefile
+11-33 files

OpenBSD/ports TtN721Snet/upterm Makefile modules.inc, net/upterm/pkg PLIST

   Update to upterm 0.31.0.
VersionDeltaFile
1.6+54-52net/upterm/distinfo
1.6+13-13net/upterm/modules.inc
1.6+1-1net/upterm/Makefile
1.3+1-0net/upterm/pkg/PLIST
+69-664 files

OpenBSD/ports bDkIaWJnet/icinga/core2 Makefile, net/icinga/core2/files icinga2-move-dir

   move files from /var/lib/icinga2 to /var/db/icinga2, req'd by aja@
VersionDeltaFile
1.43+12-11net/icinga/core2/pkg/PLIST-main
1.1+9-0net/icinga/core2/files/icinga2-move-dir
1.162+5-1net/icinga/core2/Makefile
1.17+3-0net/icinga/core2/pkg/README-main
+29-124 files

OpenBSD/ports fNeJuVGwww/py-multidict distinfo Makefile

   update to py3-multidict-6.9.1
VersionDeltaFile
1.30+3-3www/py-multidict/Makefile
1.15+2-2www/py-multidict/distinfo
+5-52 files

OpenBSD/ports 7Gs2B16net/tor Makefile distinfo

   SECURITY update to tor 0.4.9.13.
VersionDeltaFile
1.143.2.5+2-2net/tor/distinfo
1.178.2.5+1-1net/tor/Makefile
+3-32 files

OpenBSD/ports 0fkVuaYwww/py-h2 distinfo Makefile, www/py-h2/patches patch-pyproject_toml

   update to py3-h2-4.4.1
VersionDeltaFile
1.1+12-0www/py-h2/patches/patch-pyproject_toml
1.6+3-5www/py-h2/Makefile
1.4+2-2www/py-h2/distinfo
+17-73 files

OpenBSD/ports W7w1HMjnet/arouteserver Makefile distinfo, net/arouteserver/pkg PLIST

   update to arouteserver-1.25.0
VersionDeltaFile
1.14+6-3net/arouteserver/pkg/PLIST
1.46+2-2net/arouteserver/distinfo
1.56+1-1net/arouteserver/Makefile
+9-63 files

OpenBSD/src GxNksT5usr.sbin/bgpctl bgpctl.c parser.c, usr.sbin/bgpd bgpd.conf.5 bgpd.h

   Add shorthand for well-known BGP community "DOWNGRADE"

   From https://datatracker.ietf.org/doc/html/draft-ietf-grow-downgrade-bgp-community

   OK claudio@
VersionDeltaFile
1.506+5-1usr.sbin/bgpd/parse.y
1.141+5-1usr.sbin/bgpctl/parser.c
1.549+3-2usr.sbin/bgpd/bgpd.h
1.325+3-1usr.sbin/bgpctl/bgpctl.c
1.259+2-1usr.sbin/bgpd/bgpd.conf.5
+18-65 files

OpenBSD/src J4xED6Yusr.bin/tmux window.c screen-redraw.c

   As well as tracking modified (dirty) lines during a synchronized update,
   also track scrolled lines. This means they can be scrolled as one
   instead of forcing each line to be redrawn - much less expensive for a
   very common operation. From Ben Maurer in GitHub issue 5611.
VersionDeltaFile
1.293+153-30usr.bin/tmux/screen-write.c
1.1448+6-2usr.bin/tmux/tmux.h
1.162+3-3usr.bin/tmux/screen-redraw.c
1.378+2-2usr.bin/tmux/window.c
+164-374 files

OpenBSD/src qXYO9wCusr.sbin/rpki-client parser.c validate.c

   rpki-client: match CRLDP and referring Manifest for all !TA certs

   Now that crl->mftcrldp is always set, we can move the comparison of
   cert->crl with crl->mftdp into valid_x509() so that all certs which
   come through here must satisfy this requirement. While TA certs are
   not validated here, add a check for cert->purpose to avoid potential
   NULL accesses.

   ok job
VersionDeltaFile
1.88+13-8usr.sbin/rpki-client/validate.c
1.187+1-6usr.sbin/rpki-client/parser.c
+14-142 files

OpenBSD/ports y5eZAxemath/py-pandas Makefile distinfo, math/py-pandas/pkg PLIST

   update to py3-pandas-3.0.6; something (unidentified but quite possibly the
   switch to python 3.14) resulted in the previous version segfaulting when
   parsing datetimes. issue reported and update tested by Percy Piper.
VersionDeltaFile
1.17+78-54math/py-pandas/pkg/PLIST
1.17+2-2math/py-pandas/distinfo
1.42+1-2math/py-pandas/Makefile
+81-583 files

OpenBSD/src aTPGigkusr.sbin/rpki-client filemode.c

   rpki-client: teach filemode about crl->mftcrldp

   The following commit relies on mftcrldp being set on every crl.
   In filemode use the repo from which the CRL was loaded.

   ok job
VersionDeltaFile
1.89+13-8usr.sbin/rpki-client/filemode.c
+13-81 files

OpenBSD/src 8EwR4dyusr.sbin/pkg_add/OpenBSD PackageRepository.pm

   key= in the signify gzip comment used to include the path, but this was
   dropped in signify.c:1.137 so that only bare filenames are used. teach
   pkg_add about this so that the signer is still recorded in +CONTENTS
   for installed packages. from espie
VersionDeltaFile
1.179+5-3usr.sbin/pkg_add/OpenBSD/PackageRepository.pm
+5-31 files

OpenBSD/src M1FEtUdusr.sbin/pkg_add/OpenBSD PkgInfo.pm

   for pkg_info -C, don't print an error if there's no @signer in the plist
   from espie; problem reported by Luigi Vianello
VersionDeltaFile
1.55+3-2usr.sbin/pkg_add/OpenBSD/PkgInfo.pm
+3-21 files

OpenBSD/ports YnHh9Yonet/64gram Makefile, net/64gram/patches patch-cmake_external_CMakeLists_txt

   net/64gram: reeanble TooManyCooks

   Originally it was disabled due too old libcxx-19, but now we have
   libcxx-22 and it works.

   OK: Nazarenko Mykyta (maintainer)
VersionDeltaFile
1.2+1-0net/64gram/Makefile
1.2+0-0net/64gram/patches/patch-cmake_external_CMakeLists_txt
+1-02 files

OpenBSD/ports gOiDEVxnet/tdesktop Makefile, net/tdesktop/patches patch-cmake_external_CMakeLists_txt

   net/tdesktop: reeanble TooManyCooks

   Originally it was disabled due too old libcxx-19, but now we have
   libcxx-22 and it works.

   OK: kn@ (maintainer)
VersionDeltaFile
1.232+1-1net/tdesktop/Makefile
1.7+0-0net/tdesktop/patches/patch-cmake_external_CMakeLists_txt
+1-12 files