etc/rc.subr: svcj - use the filename for services
We have ports and basesystem services, where the internal name and the
filename differ. While the documentation recommends to keep them in
sync, the reality is different. For service jails use the basename of
the service filename.
Fixes: 2efbd48 rc: add service jails framework
Suggested by: joneum
MFC after: 1 week
MFC to: stable/15
py-zensical: updated to 0.0.54
0.0.54
This version reduces peak memory usage by 8–10x, making builds of large
documentation projects substantially more efficient. It also improves reference
validation by preventing false positives for links successfully resolved
through autorefs.
Additionally, the user interface is updated to v0.0.25, fixing instant
navigation for inline scripts and version aliases created with mike. This
release also corrects mike configuration defaults and updates webbrowser to
address a security vulnerability.
py-pyphen: updated to 0.18.0
0.18.0
Update Spanish, Hungarian, Lithuanian and Danish dictionaries.
Keep README files updated with dictionaries.
Include __init__ method in Pyphen API documentation.
Support Python 3.14, drop Python 3.9 support.
rc.d/bgfsck: use the correct variable name
The name of the script and the name used internally for rc.conf differ,
as such the hardcoded disabling of service jails for the didn't work.
Fix by using the correct name.
Fixes: f99f0ee14e3af rc.d: add a service jails config to all base system services
firewall: remove 2a10::/12 from bogonsv6.sample since it was de-bogonized in 2020 (#10617)
Spent some time troubleshooting why incoming traffic was being blocked by
the bogon rules after upgrade of OPNsense, and found that the system was
using the list from bogonsv6.sample which contains entries that are no longer
bogons.
2a10::/12 started being used for real network in 2020:
https://www.ripe.net/about-us/news/de-bogonising-2a10-12/
Check all items are numeric before apply range to dnat automatic firewall rule (#10712)
* Check all items are numeric before apply range to dnat automatic firewall rule
* Resolve well known ports to allow dnat ranges to target them
* Normalize all dnat ports in pf filters
* Use ->getValue() in PortField::normalizedPort
* Apply suggestion from @AdSchellevis
---------
Co-authored-by: Ad Schellevis <AdSchellevis at users.noreply.github.com>
py-ruff: updated to 0.16.3
0.16.3
Preview features
[pylint] Fix false negatives on negative numbers (PLR6104)
[pyupgrade] Add rule to replace while 1 with while True (UP048)
Bug fixes
[flake8-bandit] Also check keyword arguments (S602, S603, S607, S609)
[pylint] Allow continue in finally on Python 3.8
[pylint] Fix PLE1307 false positive with bools
[pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307)
[pylint] Improve handling of concatenated strings (PLE1300)
Rule changes
[21 lines not shown]
libgit2: updated to 1.9.7
v1.9.7
This is an security release with one change.
* Escape remote repository paths in libssh2
In v1.9.2, we started escaping repository paths in the OpenSSH-based
exec ssh transport. Bring the same escaping to the libssh2 transport
to avoid any potential command injection.
disable dynamic power gating on Panther Lake and later
described in Intel changes as known to cause hangs
tested on 0x57b3 / E1000_DEV_ID_PCH_PTP_I219_LM25
partly from Intel's DPDK driver
ok jmatthew@
[LoopVectorize] Clear stale CycleAnalysis after vectorizing a loop (#215237)
After a6af12620778, LoopVectorizePass crashes when processing functions
with multiple loops. After vectorizing a loop, locks may be deleted, but
the cached CycleAnalysis still holds pointers to those blocks. If BFI is
later requested for a subsequent loop, it uses the stale CycleInfo and
crashes. Clear the cached CycleAnalysis after each loop vectorization so
that BlockFrequencyAnalysis recomputes it fresh if needed.
Fixes #215236
---------
Co-authored-by: Florian Hahn <flo at fhahn.com>
CodeGen: Add getDefBlock helper (#216182)
A reasonable number of places check getVRegDef just to
return the parent block, so introduce a helper for it.
Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
resterm: Update to 1.0.0
Changelog
Within the 1.x line:
* Request file directives keep their names, arguments and meaning.
* Existing CLI flags keep their meaning.
* Headless output keeps its JSON field names, JUnit structure and exit codes.
* Configuration keys (bindings, themes, settings) keep working.
* The headless Go package keeps its exported API.
* RestermScript keeps its syntax, builtins and host objects.
More information: https://github.com/unkn0wn-root/resterm/releases/tag/v1.0.0
change K1 exit timeout on Meteor Lake and later
without this my Panther Lake machine could not receive non-broadcast packets
tested on 0x57b3 / E1000_DEV_ID_PCH_PTP_I219_LM25 and
0x550b / E1000_DEV_ID_PCH_MTP_I219_V18
partly from Intel's DPDK driver
ok jmatthew@
