mark net/barrier BROKEN, old software wants old devel/gtest
Their CMake goo includes bundles missing from the autogenerated tarball,
there is no knob to disable tests, we don't run them (NO_TEST=yes),
but instead nuke the CMake goo and hope for system gtest to work,
which now fails due to newer devel/gtest requiring C++17.
barrier is C++14, its last release is five years old and we're behind,
upstream's last commit was four years ago...
Update libexpat to version 2.8.4
Relevant for OpenBSD are security fixes #1321 #1331 #1322, other
changes #1315 #1325 #1334 #1340 #1319 #1320. Library bump is not
necessary.
CVE-2026-66046CVE-2026-76641CVE-2026-76957
OK tb@
Use unveil(2) and clamp down on pledge(2).
The main() program establishes a baseline, allowing the maximum
that might ever be needed: stdio rpath and read access to the MAN_DIR.
The top level page generators (pg_show, pg_search) narrow unveil(2)
to the specific manual page tree selected by the user.
When the selected manual page file has been opened, the pledge is narrowed
to just stdio (in resp_catman, resp_format, pg_searchres, pg_index).
Except for internal errors and bad requests, which error out early,
exactly one of these narrowing codepaths is always trodden.
www/librewolf: update to 155.0-1, from MAINTAINER Leah Rowe
- enable PGO, reusing ffx's profdata
- enable rust simd
- drop DIST_SUBDIR, defaults to mozilla/ and helps sharing profdata
- drop patch from #2061033, merged upstream
uaudio: Set the rate before the alternate setting of UAC2 devices
Unlike UAC1 devices, UAC2 devices set their sample rate with their
clock unit which is independent of the alternate setting. The Neural
DSP Quad Cortex Mini (and probably others) requires the sample rate to
be set before the alternate setting is switched.
From Laurence Tratt <laurie at tratt.net>, thanks!
uaudio: Enable implicit feedback on devices that claim to support it
The Behringer UMC204HD appears to have broken explicit feedback (the
sync endpoint sends always zeros) resulting in periodic drops.
Enabling implicit feedback (i.e. adjust play-direction data rate to
record-direction one) fixes this device.
From Artem Sheldyaev <artem at sheldyaev.org>, thanks!
devel/glib2: Don't try to set TCP_NODELAY on AF_UNIX sockets.
glib2 was calling setsockopt(socket, IPPROTO_TCP, TCP_NODELAY, ...) on AF_UNIX
sockets and ignoring the error. This interacted badly with a future change in
the pledge subsystem to strictly scope options to the socket's protocol.
ok ajacoutot@