BSD Commit Log Search

   devel/esbuild: Update to 0.28.2

   from Igor Zornik (Maintainer), thanks

   mark net/barrier BROKEN, old software wants old devel/gtest

   Their CMake goo includes bundles missing from the autogenerated tarball,
   there is no knob to disable tests, we don't run them (NO_TEST=yes),
   but instead nuke the CMake goo and hope for system gtest to work,
   which now fails due to newer devel/gtest requiring C++17.

   barrier is C++14, its last release is five years old and we're behind,
   upstream's last commit was four years ago...

   graphics/blender: add missing dependency on libspnav

   While here explicitely disable optional dependencies not yet ported.

   ok rsadowski@

   disable tests, bundled gtest reaches into now too new system gtest headers

   Update to zizmor 1.30.0

   https://github.com/zizmorcore/zizmor/releases/tag/v1.30.0

   www/librewolf: bump SO_VERSION, refresh patches, from MAINTAINER

   Update to mergiraf 0.19.1

   https://codeberg.org/mergiraf/mergiraf/releases/tag/v0.19.1

   Update libexpat to version 2.8.4

   Relevant for OpenBSD are security fixes #1321 #1331 #1322, other
   changes #1315 #1325 #1334 #1340 #1319 #1320.  Library bump is not
   necessary.
   CVE-2026-66046 CVE-2026-76641 CVE-2026-76957

   OK tb@

   update p5-MIME-Types to 2.30

   Use unveil(2) and clamp down on pledge(2).
   The main() program establishes a baseline, allowing the maximum
   that might ever be needed: stdio rpath and read access to the MAN_DIR.
   The top level page generators (pg_show, pg_search) narrow unveil(2)
   to the specific manual page tree selected by the user.
   When the selected manual page file has been opened, the pledge is narrowed
   to just stdio (in resp_catman, resp_format, pg_searchres, pg_index).
   Except for internal errors and bad requests, which error out early,
   exactly one of these narrowing codepaths is always trodden.

   update p5-Net-DNS to 1.57
   CVE-2026-64194 CVE-2026-64193

   update p5-PPIx-Regexp to 0.092
   no functional change

   www/librewolf: glxtest, vulkantest & vaapitest merged into gfxtest cf #1949093

   When changing selection-mode to line, set up the selection start and end
   correctly, GitHub issue 5545.

   Extend word commands to use any Unicode whitespace character, GitHub
   issue 5562 from Hongyi Zhao.

   update p5-Net-Daemon to 0.52

   www/librewolf: update to 155.0-1, from MAINTAINER Leah Rowe

   - enable PGO, reusing ffx's profdata
   - enable rust simd
   - drop DIST_SUBDIR, defaults to mozilla/ and helps sharing profdata
   - drop patch from #2061033, merged upstream

   www/mozilla-firefox: MFC update to 155.0.

   see https://www.firefox.com/en-US/firefox/155.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-82/

   www/firefox-esr: update to 140.15.0.

   see https://www.firefox.com/en-US/firefox/140.15.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-84/

   www/firefox-esr: update to 153.2.0.

   see https://www.firefox.com/en-US/firefox/153.2.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-85/

   www/mozilla-firefox: update to 155.0.

   see https://www.firefox.com/en-US/firefox/155.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-82/

   - drop patch from #2061033, merged upstream
   - glxtest, vulkantest & vaapitest merged into gfxtest cf #1949093

   update p5-Test-Time to 0.092

   uaudio: Factor duplicate tests of UAC version in uaudio_open_stream()

   No behavior change

   uaudio: Fix NULL pointer dereference triggered by specific hardware bug

   Analysed and reported by Acts1631 <acts1631kjv at proton.me>, thanks!

   uaudio: Set the rate before the alternate setting of UAC2 devices

   Unlike UAC1 devices, UAC2 devices set their sample rate with their
   clock unit which is independent of the alternate setting. The Neural
   DSP Quad Cortex Mini (and probably others) requires the sample rate to
   be set before the alternate setting is switched.

   From Laurence Tratt <laurie at tratt.net>, thanks!

   uaudio: Append the implicit feedback capability to the dmesg attach line

   uaudio: Enable implicit feedback on devices that claim to support it

   The Behringer UMC204HD appears to have broken explicit feedback (the
   sync endpoint sends always zeros) resulting in periodic drops.
   Enabling implicit feedback (i.e. adjust play-direction data rate to
   record-direction one) fixes this device.

   From Artem Sheldyaev <artem at sheldyaev.org>, thanks!

   update p5-Locale-Codes to 3.90

   devel/glib2: Don't try to set TCP_NODELAY on AF_UNIX sockets.

   glib2 was calling setsockopt(socket, IPPROTO_TCP, TCP_NODELAY, ...) on AF_UNIX
   sockets and ignoring the error. This interacted badly with a future change in
   the pledge subsystem to strictly scope options to the socket's protocol.

   ok ajacoutot@

   Activiation -> Activation