BSD Commit Log Search

   replace testing of vendor PQ signature algorithm
   "ssh-mldsa44-ed25519 at openssh.com" with the IANA-registered
   "ssh-mldsa44-ed25519"

   IANA has allocated a non-vendor codepoint for ssh-mldsa44-ed25519,
   so use it instead of the vendored "@openssh.com" name.

   Note: this replaces the vendored name, which was only marked as
   experimental and not enabled by default.cw

   If you have ssh-mldsa44-ed25519 at openssh.com keys manually configured
   in sshd, then you will need to remove them from sshd_config and
   restart.

   Update to Sequel 5.108.0

   devel/codex: update to 0.152.1

   update to telemt 3.5.5

   lang/gcc/16: add dlang support and update plist at powerpc

   lang/gcc/11: add dlang support at powerpc

   update to 2.20260827

   misc/bible-kjv: maintenance update to 4.44

   Create screen before zoom may need to use it.

   Do not allow cursor on/off to escape synchronized updates.

   drm: apple: Switch back to drm_atomic_helper_commit_tail_rpm()

   From Janne Grunau
   bd8ce96f6e76b98940352b18fe735a7943471ed7 in AsahiLinux/linux

   This implictly gets rid of drm_atomic_helper_wait_for_flip_done()
   and makes graphical output on Apple Silicon machines noticably
   snappier.

   ok kettenis@ jsg@

   lang/erlang: Update to 27.3.4.17, 28.5.0.6 and 29.0.6

   Fixes CVE-2026-75538 among several other bugs

   devel/sccache: update to 0.17.0

   devel/esbuild: Update to 0.28.2

   from Igor Zornik (Maintainer), thanks

   mark net/barrier BROKEN, old software wants old devel/gtest

   Their CMake goo includes bundles missing from the autogenerated tarball,
   there is no knob to disable tests, we don't run them (NO_TEST=yes),
   but instead nuke the CMake goo and hope for system gtest to work,
   which now fails due to newer devel/gtest requiring C++17.

   barrier is C++14, its last release is five years old and we're behind,
   upstream's last commit was four years ago...

   graphics/blender: add missing dependency on libspnav

   While here explicitely disable optional dependencies not yet ported.

   ok rsadowski@

   disable tests, bundled gtest reaches into now too new system gtest headers

   Update to zizmor 1.30.0

   https://github.com/zizmorcore/zizmor/releases/tag/v1.30.0

   www/librewolf: bump SO_VERSION, refresh patches, from MAINTAINER

   Update to mergiraf 0.19.1

   https://codeberg.org/mergiraf/mergiraf/releases/tag/v0.19.1

   Update libexpat to version 2.8.4

   Relevant for OpenBSD are security fixes #1321 #1331 #1322, other
   changes #1315 #1325 #1334 #1340 #1319 #1320.  Library bump is not
   necessary.
   CVE-2026-66046 CVE-2026-76641 CVE-2026-76957

   OK tb@

   update p5-MIME-Types to 2.30

   Use unveil(2) and clamp down on pledge(2).
   The main() program establishes a baseline, allowing the maximum
   that might ever be needed: stdio rpath and read access to the MAN_DIR.
   The top level page generators (pg_show, pg_search) narrow unveil(2)
   to the specific manual page tree selected by the user.
   When the selected manual page file has been opened, the pledge is narrowed
   to just stdio (in resp_catman, resp_format, pg_searchres, pg_index).
   Except for internal errors and bad requests, which error out early,
   exactly one of these narrowing codepaths is always trodden.

   update p5-Net-DNS to 1.57
   CVE-2026-64194 CVE-2026-64193

   update p5-PPIx-Regexp to 0.092
   no functional change

   www/librewolf: glxtest, vulkantest & vaapitest merged into gfxtest cf #1949093

   When changing selection-mode to line, set up the selection start and end
   correctly, GitHub issue 5545.

   Extend word commands to use any Unicode whitespace character, GitHub
   issue 5562 from Hongyi Zhao.

   update p5-Net-Daemon to 0.52