Backport the SDL3 gamecontroller backend from Godot 4.x to Godot 3
(godot/pack1). This replaces the thus far "homegrown" gamecontroller
backend code. Tested with PS4 controller and multiple games.
"makes a lot of sense" op@
net/curl: update to 8.21.0
Changes:
* curl: named globs in output filename for upload glob references
* HTTP/3: add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
* http2: remove stream dependency tracking
* lib: drop support for CURLAUTH_DIGEST_IE
Includes fixes for
CVE-2026-8286: wrong STARTTLS connection reuse
CVE-2026-8458: wrong reuse for different services
CVE-2026-8924: trailing dot domain super cookie
CVE-2026-8926: password leak with netrc and user in URL
CVE-2026-8927: env-set cross-proxy Digest auth state leak
CVE-2026-8932: incomplete mTLS config matching in conn reuse
CVE-2026-9079: stale proxy password leak
CVE-2026-9080: UAF after pause in socket callback
CVE-2026-9545: exposing HTTP/3 early data
CVE-2026-9546: sending old referer
[4 lines not shown]
www/mozilla-firefox: MFC update to 152.0.3.
see https://www.firefox.com/en-US/firefox/152.0.3/releasenotes/
Fixed an issue that could cause extreme memory usage and freezing on
startup for users with language packs installed. (Bug 2049845)
Let this build with clang 22 on arm64
More complete trio.c diff to avoid:
trio.c:4858:57: error: passing 'void *' to parameter of incompatible type 'va_list' (aka '__builtin_va_list')
There is a newer 2.4.0 release from 2019 in upstream's github repo.