NetBSD/pkgsrc neCqCTr — lang/ruby33 hacks.mk, lang/ruby34 hacks.mk

   Pullup ticket #7265 - requested by rin
   lang/ruby34: Bug fix
   lang/ruby33: Bug fix
   lang/ruby40: Bug fix

   Revisions pulled up:
   - lang/ruby33/hacks.mk                                          1.2
   - lang/ruby34/hacks.mk                                          1.2
   - lang/ruby40/hacks.mk                                          1.2

   ---
      Module Name:      pkgsrc
      Committed By:     rin
      Date:             Sat Oct  3 11:12:34 UTC 2026

      Modified Files:
        pkgsrc/lang/ruby33: hacks.mk
        pkgsrc/lang/ruby34: hacks.mk
        pkgsrc/lang/ruby40: hacks.mk

    [41 lines not shown]
VersionDeltaFile
1.1.6.1+6-0lang/ruby40/hacks.mk
1.1.14.1+6-0lang/ruby34/hacks.mk
1.1.22.1+6-0lang/ruby33/hacks.mk
+18-03 files

FreeBSD/ports e5e1995 — devel/universal-ctags Makefile distinfo

devel/universal-ctags: Update from p6.2.20260906.0 => p6.2.20261011.0

Commit log:
https://github.com/universal-ctags/ctags/compare/p6.2.20260906.0...p6.2.20261011.0

PR:             299319
Sponsored by:   UNIS Labs (vvd, commit patch)
DeltaFile
+3-3devel/universal-ctags/distinfo
+1-1devel/universal-ctags/Makefile
+4-42 files

FreeBSD/ports 5557b36 — security/vuxml/vuln 2026.xml

security/vuxml: Document podman vulnerability
DeltaFile
+35-0security/vuxml/vuln/2026.xml
+35-01 files

FreeBSD/src db5459b — sys/arm64/arm64 vfp.c

arm64 vfp: eliminate nested critical sections

At two out of three call sites to vfp_restore_state_common(), the caller
must use critical_{enter,exit}() to prevent preemption between its call
to vfp_restore_state_common() and other actions, notably its call to
sve_enable().  So, it is arguably better to make
vfp_restore_state_common()'s caller responsible for performing
critical_{enter,exit}() and simply perform CRITICAL_ASSERT() inside
vfp_restore_state_common().

(cherry picked from commit 189ee41b6cc3b0d92c291cc854d9781afec23ad4)
DeltaFile
+3-4sys/arm64/arm64/vfp.c
+3-41 files

FreeBSD/ports 3849408 — multimedia/zoneminder distinfo Makefile, multimedia/zoneminder/files patch-scripts_ZoneMinder_lib_ZoneMinder_Server.pm

multimedia/zoneminder: Update 1.38.3 => 1.38.6

Changelogs:
https://github.com/ZoneMinder/zoneminder/releases/tag/1.38.4
https://github.com/ZoneMinder/zoneminder/releases/tag/1.38.5
https://github.com/ZoneMinder/zoneminder/releases/tag/1.38.6

- Requires "zmupdate.pl -f" for upgrade.

PR:             299164
Approved by:    Ivan <bsd at abinet.ru> (maintainer)
Security:       GHSA-vvx7-ghpv-jq98
Security:       GHSA-rpp4-xmqm-84ff
Security:       GHSA-xp4c-29hh-2w4j
Security:       GHSA-pfph-4j9j-7cv7
Security:       GHSA-pxq8-5c8j-xf3r
Security:       GHSA-p8h3-4x5c-cv7p
Security:       GHSA-wmcc-x64g-jr84
Security:       GHSA-m77q-66v7-j3fq

    [15 lines not shown]
DeltaFile
+5-18multimedia/zoneminder/pkg-plist
+7-7multimedia/zoneminder/files/patch-scripts_ZoneMinder_lib_ZoneMinder_Server.pm
+5-7multimedia/zoneminder/Makefile
+3-3multimedia/zoneminder/distinfo
+20-354 files

FreeBSD/ports abb6f89 — multimedia/zoneminder distinfo Makefile, multimedia/zoneminder/files patch-scripts_ZoneMinder_lib_ZoneMinder_Server.pm

multimedia/zoneminder: Update 1.38.3 => 1.38.6

Changelogs:
https://github.com/ZoneMinder/zoneminder/releases/tag/1.38.4
https://github.com/ZoneMinder/zoneminder/releases/tag/1.38.5
https://github.com/ZoneMinder/zoneminder/releases/tag/1.38.6

- Requires "zmupdate.pl -f" for upgrade.

PR:             299164
Approved by:    Ivan <bsd at abinet.ru> (maintainer)
Security:       GHSA-vvx7-ghpv-jq98
Security:       GHSA-rpp4-xmqm-84ff
Security:       GHSA-xp4c-29hh-2w4j
Security:       GHSA-pfph-4j9j-7cv7
Security:       GHSA-pxq8-5c8j-xf3r
Security:       GHSA-p8h3-4x5c-cv7p
Security:       GHSA-wmcc-x64g-jr84
Security:       GHSA-m77q-66v7-j3fq

    [13 lines not shown]
DeltaFile
+5-18multimedia/zoneminder/pkg-plist
+7-7multimedia/zoneminder/files/patch-scripts_ZoneMinder_lib_ZoneMinder_Server.pm
+5-7multimedia/zoneminder/Makefile
+3-3multimedia/zoneminder/distinfo
+20-354 files

HardenedBSD/src 5a0bbc3 — libexec/rc safe_eval.sh, sys/net80211 README.md DRIVER_REGISTRATION.md

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+252-0sys/net80211/DRIVER_REGISTRATION.md
+80-17libexec/rc/safe_eval.sh
+97-0sys/netlink/ktest_netlink_message_writer.c
+14-21sys/netinet/sctputil.c
+21-0tests/sys/netlink/test_netlink_message_writer.py
+5-5sys/net80211/README.md
+469-431 files not shown
+473-467 files

HardenedBSD/src 6f8486b — libexec/rc safe_eval.sh, sys/net80211 README.md DRIVER_REGISTRATION.md

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+252-0sys/net80211/DRIVER_REGISTRATION.md
+80-17libexec/rc/safe_eval.sh
+97-0sys/netlink/ktest_netlink_message_writer.c
+14-21sys/netinet/sctputil.c
+21-0tests/sys/netlink/test_netlink_message_writer.py
+5-5sys/net80211/README.md
+469-431 files not shown
+473-467 files

HardenedBSD/ports f299635 — devel/jujutsu distinfo, lang/v8-beta/files temporal_capi-Cargo.lock

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+371-377shells/meka/distinfo
+305-329devel/jujutsu/distinfo
+539-43misc/nanocoder/pkg-plist
+343-157misc/nanocoder/files/package-lock.json
+481-0lang/v8-beta/files/temporal_capi-Cargo.lock
+188-190shells/meka/Makefile
+2,227-1,096192 files not shown
+4,498-2,402198 files

FreeBSD/src 5180fce — sys/netlink netlink_message_writer.c ktest_netlink_message_writer.c, tests/sys/netlink test_netlink_message_writer.py

netlink: Make room for the unfinished message when growing the buffer

When a message outgrows the writer's buffer, _nlmsg_refill_buffer()
allocates a larger one and moves the unfinished message there.  The new
buffer was sized for the data about to be added alone, so with enough of
the message already written the caller wrote past its end and left it
with datalen > buflen.  A 20-byte message plus an attribute of 8176
bytes got a buffer of 8192 bytes for 8200 bytes of data, and reading it
panicked an INVARIANTS kernel in nl_soreceive().

Size the new buffer for both, and add a ktest for it.

Reviewed by:            glebius
Fixes:                  7e5bf68495cc ("netlink: add netlink support")
MFC after:              1 week
Sponsored by:           Rubicon Communications, LLC ("Netgate")
Differential Revision:  https://reviews.freebsd.org/D60541
DeltaFile
+97-0sys/netlink/ktest_netlink_message_writer.c
+21-0tests/sys/netlink/test_netlink_message_writer.py
+4-3sys/netlink/netlink_message_writer.c
+122-33 files

HardenedBSD/src 5180fce — sys/netlink netlink_message_writer.c ktest_netlink_message_writer.c, tests/sys/netlink test_netlink_message_writer.py

netlink: Make room for the unfinished message when growing the buffer

When a message outgrows the writer's buffer, _nlmsg_refill_buffer()
allocates a larger one and moves the unfinished message there.  The new
buffer was sized for the data about to be added alone, so with enough of
the message already written the caller wrote past its end and left it
with datalen > buflen.  A 20-byte message plus an attribute of 8176
bytes got a buffer of 8192 bytes for 8200 bytes of data, and reading it
panicked an INVARIANTS kernel in nl_soreceive().

Size the new buffer for both, and add a ktest for it.

Reviewed by:            glebius
Fixes:                  7e5bf68495cc ("netlink: add netlink support")
MFC after:              1 week
Sponsored by:           Rubicon Communications, LLC ("Netgate")
Differential Revision:  https://reviews.freebsd.org/D60541
DeltaFile
+97-0sys/netlink/ktest_netlink_message_writer.c
+21-0tests/sys/netlink/test_netlink_message_writer.py
+4-3sys/netlink/netlink_message_writer.c
+122-33 files

NetBSD/src TYR2rlX — sys/arch/amiga/clockport files.clockport

   add missing "device isp1763hc".  fixes GENERIC build for me.
VersionDeltaFile
1.8+2-1sys/arch/amiga/clockport/files.clockport
+2-11 files

NetBSD/pkgsrc-wip 5acaf0a — py-homeassistant Makefile

py-homeassistant: Choose GFORTRAN_VERSION to match base compiler

Previously, 10 was hardcoded because I only cared about NetBSD 10.
DeltaFile
+23-10py-homeassistant/Makefile
+23-101 files

HardenedBSD/ports faa2f0e — sysutils/leaf distinfo Makefile

sysutils/leaf: Update to 1.29.0

While here, simplify shell completions installation.

Changelog: https://github.com/RivoLink/leaf/blob/1.29.0/CHANGELOG.md

Reported by:    GitHub (watch releases)
DeltaFile
+6-10sysutils/leaf/Makefile
+3-3sysutils/leaf/distinfo
+9-132 files

FreeBSD/ports faa2f0e — sysutils/leaf distinfo Makefile

sysutils/leaf: Update to 1.29.0

While here, simplify shell completions installation.

Changelog: https://github.com/RivoLink/leaf/blob/1.29.0/CHANGELOG.md

Reported by:    GitHub (watch releases)
DeltaFile
+6-10sysutils/leaf/Makefile
+3-3sysutils/leaf/distinfo
+9-132 files

OpenBSD/src CtIjVjj — lib/libc/sys execve.2

   additonal -> additional
VersionDeltaFile
1.65+2-2lib/libc/sys/execve.2
+2-21 files

FreeBSD/ports e94cf0e — sysutils/cni-epair Makefile distinfo

sysutils/cni-epair: Update to 1.1.3

Request DHCP leases under the container's name instead of the host's
hostname, so a container no longer takes over the host's DNS record.

While here, update MAINTAINER to my FreeBSD address.

Reviewed by:  acm, dtxdf
Approved by:  acm, dtxdf (mentors)
Differential Revision:        https://reviews.freebsd.org/D60583
DeltaFile
+3-3sysutils/cni-epair/distinfo
+2-2sysutils/cni-epair/Makefile
+5-52 files

HardenedBSD/ports e94cf0e — sysutils/cni-epair Makefile distinfo

sysutils/cni-epair: Update to 1.1.3

Request DHCP leases under the container's name instead of the host's
hostname, so a container no longer takes over the host's DNS record.

While here, update MAINTAINER to my FreeBSD address.

Reviewed by:  acm, dtxdf
Approved by:  acm, dtxdf (mentors)
Differential Revision:        https://reviews.freebsd.org/D60583
DeltaFile
+3-3sysutils/cni-epair/distinfo
+2-2sysutils/cni-epair/Makefile
+5-52 files

LLVM/project ce2a498 — compiler-rt/lib/builtins truncsfhf2.c extendhfsf2.c

[compiler-rt] Restrict __gnu_h2f_ieee and __gnu_f2h_ieee to arm32 EABI (#220170)
DeltaFile
+1-1compiler-rt/lib/builtins/truncsfhf2.c
+1-1compiler-rt/lib/builtins/extendhfsf2.c
+2-22 files

OpenBSD/src 4AqLGtv — usr.bin/mandoc mandoc.1

   mandoc(1) always support the -C option,
   not only together with -f or -k, as the manual claimed;
   noticed in a conversation with kristaps@
VersionDeltaFile
1.204+4-4usr.bin/mandoc/mandoc.1
+4-41 files

FreeBSD/ports be10385 — textproc/tgrep Makefile Makefile.crates, textproc/tgrep/files patch-tgrep-core_src_managed_process.rs

textproc/tgrep: Update to 1.2.0

Changelog: https://github.com/microsoft/tgrep/releases/tag/v1.2.0

Reported by:    GitHub (watch releases)
DeltaFile
+29-3textproc/tgrep/distinfo
+14-1textproc/tgrep/Makefile.crates
+11-0textproc/tgrep/files/patch-tgrep-core_src_managed_process.rs
+1-1textproc/tgrep/Makefile
+55-54 files

HardenedBSD/ports be10385 — textproc/tgrep Makefile Makefile.crates, textproc/tgrep/files patch-tgrep-core_src_managed_process.rs

textproc/tgrep: Update to 1.2.0

Changelog: https://github.com/microsoft/tgrep/releases/tag/v1.2.0

Reported by:    GitHub (watch releases)
DeltaFile
+29-3textproc/tgrep/distinfo
+14-1textproc/tgrep/Makefile.crates
+11-0textproc/tgrep/files/patch-tgrep-core_src_managed_process.rs
+1-1textproc/tgrep/Makefile
+55-54 files

NetBSD/pkgsrc m7P2liX — databases/postgresql14-server/files pgsql.sh, databases/postgresql15-server/files pgsql.sh

   databases/postgresql*-server: Drop duplicate -p in rc.d script

   (This change was applied a week ago to 18 after testing.  This commit
   applies it to the rest of the pgsql server packages, without testing.)

   While "${MKDIR} -p" looks right, the variable already has -p, so drop
   the extra one.

   Reported by Luis Falcon, and fix proposed on netbsd-users@ with
   $MAINTAINER CC without objections.
VersionDeltaFile
1.2+2-2databases/postgresql17-server/files/pgsql.sh
1.5+2-2databases/postgresql16-server/files/pgsql.sh
1.4+2-2databases/postgresql15-server/files/pgsql.sh
1.5+2-2databases/postgresql14-server/files/pgsql.sh
+8-84 files

FreeBSD/src e4ac63e — sys/arm64/arm64 vfp.c

arm64: close a race in SVE register management

While testing an unrelated pmap change, D58708, that dramatically
reduces the number of TLBI instructions performed, and likely the
timing of unrelated events, I started seeing "Storing an invalid VFP
state" panics in vfp_save_state_common().  However, the origin of this
panic is elsewhere, in the else branch of sve_restore_state().
Specifically, my pmap change seems to have increased the likelihood that
the thread executing the else branch would be preempted by another
thread between the critical_exit() inside the else branch's call to
vfp_restore_state_common() and its own call to critical_enter().  Prior
to expanding the scope of the else branch's critical section, the MPASS
added by this change would fire, catching the problem at its source,
rather than later in vfp_save_state_common().

(cherry picked from commit 6fa9c2b1d2824034268646e0744e5e010155ffaf)
DeltaFile
+4-2sys/arm64/arm64/vfp.c
+4-21 files

LLVM/project 3853d20 — llvm/lib/Transforms/Vectorize VPlanRecipes.cpp

[VPlan] Use erase_if in VPIRMetadata::intersect (NFC) (#231038)

Simplify metadata removal using erase_if.
DeltaFile
+2-10llvm/lib/Transforms/Vectorize/VPlanRecipes.cpp
+2-101 files

LLVM/project 40ab028 — llvm/lib/Transforms/Vectorize VPlan.h VPlanRecipes.cpp

[VPlan] Build packs from lane values in replicateByVF (NFC). (#231040)

Previously materializePacksAndUnpacks created single-operand
BuildVectors for all per-lane definitions with vector users or users
inside replicate regions, which replicateByVF later extended with the
per-lane values. Recipes in replicate regions then accessed their lanes
via extractelement(BuildVector, Lane), which had to be folded by several
BuildVector look-throughs.

Instead, create the BuildVectors directly in replicateByVF from the
per-lane definitions, only for users that need a vector. Users inside
replicate regions keep using the original definition until the replicate
regions are dissolved; the resulting lane extracts are then replaced by
the corresponding per-lane definitions before the original definition is
removed. As BuildVectors are only created with all lanes, they now
always use only the first lane of their operands.

This removes a number of indirections and folds, and simplifies the
code.
DeltaFile
+23-24llvm/lib/Transforms/Vectorize/VPlanUnroll.cpp
+2-38llvm/lib/Transforms/Vectorize/VPlanLowering.cpp
+5-7llvm/lib/Transforms/Vectorize/VPlanTransforms.h
+0-7llvm/lib/Transforms/Vectorize/VPlan.cpp
+1-5llvm/lib/Transforms/Vectorize/VPlanRecipes.cpp
+2-1llvm/lib/Transforms/Vectorize/VPlan.h
+33-822 files not shown
+35-848 files

OpenBSD/src 0Sag5Cl — regress/usr.bin/mandoc Makefile.inc

   in the test suite, ignore /etc/man.conf;
   fixing small reliability issue noticed by kristaps@
VersionDeltaFile
1.31+3-3regress/usr.bin/mandoc/Makefile.inc
+3-31 files

LLVM/project 78a45e9 — orc-rt/include/orc-rt/bedrock Session.h, orc-rt/include/orc-rt/bedrock/sps SessionSPSCI.h

[orc-rt] Add Session instance symbols, SPS CI to look them up (#231043)

Objects created at runtime (e.g. service instances) have no symbols
under the standard object models, so the controller has no way to find
them by name. Instance symbols fill that gap:
Session::addInstanceSymbols registers (name, address) pairs for such
objects, and Session::lookupInstanceSymbols resolves a SymbolLookupSet
against them, with the same missing-symbol semantics as
SimpleSymbolTable::lookup.  Duplicate handling follows
SimpleSymbolTable::addUnique: a batch containing a conflicting
definition is rejected as a whole.

The new orc_rt_ci_sps_Session_lookupInstanceSymbols wrapper exposes the
lookup to the controller. It is registered by sps_ci::addSession, which
sps_ci::addAll now includes.
DeltaFile
+117-0orc-rt/test/unit/bedrock/sps/SessionSPSCITest.cpp
+70-0orc-rt/lib/bedrock/sps/SessionSPSCI.cpp
+45-0orc-rt/test/unit/bedrock/SessionTest.cpp
+32-0orc-rt/include/orc-rt/bedrock/Session.h
+28-0orc-rt/include/orc-rt/bedrock/sps/SessionSPSCI.h
+8-0orc-rt/test/unit/bedrock/BootstrapInfoTest.cpp
+300-04 files not shown
+310-010 files

FreeBSD/src 2409e24 — sys/net80211 DRIVER_REGISTRATION.md

net80211: add driver registration documentation

This is a brief introduction into the top-level newbus
driver methods and net80211 driver registration.

Differential Revision:  https://reviews.freebsd.org/D60503
Reviewed by: ziaee, zi
DeltaFile
+252-0sys/net80211/DRIVER_REGISTRATION.md
+252-01 files

FreeBSD/src e8b5899 — sys/net80211 README.md

net80211: add DRIVER_REGISTRATION to README.md ; fix links

* add the driver registration doc to README.md
* fix the links to resolve correctly with current doxygen
  (1.18.0) with the current file path -> sanity conversion ->
  html path rules.

Differential Revision:  https://reviews.freebsd.org/D60504
Reviewed by: ziaee
DeltaFile
+5-5sys/net80211/README.md
+5-51 files