Poison ccache and sccache so they can't be used directly by ports.
Previously these were a common hidden dependency that could be silently
picked by a port at configure time, then junked during build, resulting
in breakage for bulk builders.
Users can still build ports with ccache (for C/C++) and sccache (for
Rust) by setting USE_CCACHE/USE_SCCACHE in mk.conf(5) as described in
bsd.port.mk(5).
ok sthen@ tb@
add compat shim for jsonschema-path >= 0.5
jsonschema-path was updated to be compatible with python 3.14+ but
that broke openapi_core which cannot be updated at this point
Fix build race: WebKitDirectoryInputStreamData.h is generated by a custom
command owned by the WebKitShared OBJECT sub-target, but included from a source
compiled in the WebKitNetworkProcess sub-target, which has no dependency on it.
tested by and ok tb@ who run into the race
Implement get_exe_location with getexecpath(3), functionally
aequivalent with other OS' implementations, instead of previous
hard-coded + SUBST_CMD workaround.
ok tb@ (maintainer)
Use getexecpath(3) instead of getprogname(3) from previous workaround.
This should now be functionally in line with the behaviour on other OS.
ok rsadowski@ (maintainer)
net/curl: update to 8.22.0
Includes fixes for
CVE-2026-18924: HTTP/2 server push UAF
CVE-2026-19931: Negotiate ambient user conn reuse
CVE-2026-80230: OpenSSL pinning bypass
CVE-2026-80255: secure cookie attribute bypass with tab
