HardenedBSD/ports 109ee3beditors/gedit pkg-plist Makefile, editors/gedit-plugins Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+114-114mail/mailpit/files/patch-package-lock.json
+35-1editors/gedit/pkg-plist
+29-0security/vuxml/vuln/2026.xml
+7-7mail/mailpit/distinfo
+5-6editors/gedit-plugins/Makefile
+5-5editors/gedit/Makefile
+195-13313 files not shown
+230-16319 files

NetBSD/pkgsrc-wip 767f913smtp-gated Makefile MESSAGE, smtp-gated/files smtp_gated.sh smtp-gated.conf

Remove smtp-gated
DeltaFile
+0-78smtp-gated/patches/patch-src_daemon.c
+0-56smtp-gated/Makefile
+0-44smtp-gated/files/smtp_gated.sh
+0-32smtp-gated/files/smtp-gated.conf
+0-9smtp-gated/MESSAGE
+0-7smtp-gated/PLIST
+0-2263 files not shown
+0-2369 files

OpenBSD/ports qmck6rfcad/prusaslicer distinfo, cad/prusaslicer/patches patch-src_CLI_Setup_cpp patch-src_libslic3r_AppConfig_cpp

   Update prusaslicer to 2.9.4

   ok sthen@

   From MAINTAINER Renato Aguiar <renato () renatoaguiar ! net>
VersionDeltaFile
1.2+12-22cad/prusaslicer/patches/patch-src_CLI_Setup_cpp
1.11+21-0cad/prusaslicer/pkg/PLIST
1.1+14-0cad/prusaslicer/patches/patch-src_libslic3r_AppConfig_cpp
1.8+7-7cad/prusaslicer/patches/patch-src_libslic3r_CMakeLists_txt
1.1+12-0cad/prusaslicer/patches/patch-src_libslic3r_Format_STEP_cpp
1.12+2-2cad/prusaslicer/distinfo
+68-311 files not shown
+69-337 files

FreeNAS/freenas caf89f4src/middlewared/middlewared/utils security.py, tests/unit test_shadow_account_policy.py

NAS-139800 / 25.10.2 / Do not ever apply password aging rules to root (by anodos325) (#18216)

When STIG mode is enabled we enforce password aging rules, among other
things, an expired account will fail internal pam_acct_mgmt calls (even
through unix authentication).

Password aging rules are a separate account control mechanism from
disabling a password (* in the shadow file) and should not be applied
ever to the root account. The proper STIG mode configuration should be
having password disabled for root, but never allowing the account to age
out. The reason for this is that there are various local processes that
use the root account, and require pam_acct_mgmt to succeed: for example,
cronjobs will login() as root to perform tasks.

This commit ensures that the root account will never have password aging
rules applied.

Original PR: https://github.com/truenas/middleware/pull/18213

Co-authored-by: Andrew Walker <andrew.walker at truenas.com>
DeltaFile
+6-1src/middlewared/middlewared/utils/security.py
+4-3tests/unit/test_shadow_account_policy.py
+10-42 files

FreeNAS/freenas eab1920src/middlewared/middlewared/utils security.py, tests/unit test_shadow_account_policy.py

NAS-139800 / 26.0.0-BETA.1 / Do not ever apply password aging rules to root (#18213)

When STIG mode is enabled we enforce password aging rules, among other
things, an expired account will fail internal pam_acct_mgmt calls (even
through unix authentication).

Password aging rules are a separate account control mechanism from
disabling a password (* in the shadow file) and should not be applied
ever to the root account. The proper STIG mode configuration should be
having password disabled for root, but never allowing the account to age
out. The reason for this is that there are various local processes that
use the root account, and require pam_acct_mgmt to succeed: for example,
cronjobs will login() as root to perform tasks.

This commit ensures that the root account will never have password aging
rules applied.
DeltaFile
+6-1src/middlewared/middlewared/utils/security.py
+4-3tests/unit/test_shadow_account_policy.py
+10-42 files

NetBSD/pkgsrc-wip 6395062sxid Makefile PLIST, sxid/patches patch-src_sxid.c patch-Makefile.in

Delete sxid
DeltaFile
+0-24sxid/Makefile
+0-16sxid/patches/patch-src_sxid.c
+0-16sxid/patches/patch-Makefile.in
+0-10sxid/PLIST
+0-7sxid/distinfo
+0-5sxid/DESCR
+0-781 files not shown
+0-797 files

FreeNAS/freenas c9ef999tests/api2 test_apps.py

Fix race condition in apps event subscription test

This commit replaces racy events list clearing with a deterministic track_states flag that only begins recording state transitions once STOPPING is observed, preventing late deployment events from causing intermittent test failures.
DeltaFile
+16-4tests/api2/test_apps.py
+16-41 files

NetBSD/src HH3zj3fexternal/bsd/tmux/usr.bin/tmux Makefile

   Fix SSP build.
VersionDeltaFile
1.44+2-1external/bsd/tmux/usr.bin/tmux/Makefile
+2-11 files

LLVM/project 052f2f8clang/www cxx_dr_status.html

[clang] Update cxx_dr_status.html
DeltaFile
+592-214clang/www/cxx_dr_status.html
+592-2141 files

NetBSD/src smokFZPsys/arch/i386/stand/efiboot Makefile.efiboot

   Don't use --target, because this sets both the input and the output format,
   and now 2.46 does not auto-recognize the input anymore. use --output-target \
   instead.
VersionDeltaFile
1.24+2-2sys/arch/i386/stand/efiboot/Makefile.efiboot
+2-21 files

LLVM/project 9de9522clang/test/CXX/drs cwg30xx.cpp cwg29xx.cpp, clang/www cxx_dr_status.html

[clang] Revisit tests for CWG2917 and CWG3005 after Core updates (#181513)

This patch revisits the status of tests for two aforementioned Core
issues.
I agree with the analysis in #170410, so no changes are made to CWG2917
test.
In case of CWG3005, Core approved the 2025-09-12 proposed resolution,
which the test was written against in the first place.

Fixes #170410
DeltaFile
+6-14clang/www/cxx_dr_status.html
+1-1clang/test/CXX/drs/cwg30xx.cpp
+1-1clang/test/CXX/drs/cwg29xx.cpp
+8-163 files

OpenBSD/ports JLukLqbdevel/pyflakes distinfo Makefile

   update pyflakes to 3.4.0
VersionDeltaFile
1.16+2-2devel/pyflakes/distinfo
1.36+1-2devel/pyflakes/Makefile
+3-42 files

OpenBSD/ports 6N3hGCpgraphics/bonzomatic Makefile

   Add missing MODCMAKE_POLICY_VERSION_OVERRIDE
VersionDeltaFile
1.16+2-0graphics/bonzomatic/Makefile
+2-01 files

OpenBSD/ports 0ELfbZmdevel/pylint distinfo Makefile

   update pylint to 3.3.9
VersionDeltaFile
1.18+2-2devel/pylint/distinfo
1.55+2-1devel/pylint/Makefile
+4-32 files

FreeBSD/ports 53a4a50security/vuxml/vuln 2026.xml

security/vuxml: Document TCP readTimeout bypass in traefik
DeltaFile
+29-0security/vuxml/vuln/2026.xml
+29-01 files

HardenedBSD/ports 53a4a50security/vuxml/vuln 2026.xml

security/vuxml: Document TCP readTimeout bypass in traefik
DeltaFile
+29-0security/vuxml/vuln/2026.xml
+29-01 files

OpenBSD/ports AllsHdbx11/py-superqt distinfo Makefile

   update py-superqt to 0.7.8
VersionDeltaFile
1.4+2-2x11/py-superqt/distinfo
1.6+1-1x11/py-superqt/Makefile
+3-32 files

FreeBSD/ports 0682bdfnet/traefik Makefile

net/traefik: Ensure the build uses go 1.25 or higher
DeltaFile
+1-1net/traefik/Makefile
+1-11 files

HardenedBSD/ports 0682bdfnet/traefik Makefile

net/traefik: Ensure the build uses go 1.25 or higher
DeltaFile
+1-1net/traefik/Makefile
+1-11 files

OpenBSD/ports KxsxJZVdevel/py-ipykernel distinfo Makefile

   update py-ipykernel to 6.31.0
VersionDeltaFile
1.14+2-2devel/py-ipykernel/distinfo
1.31+1-2devel/py-ipykernel/Makefile
+3-42 files

OpenBSD/ports vEuL9Atdevel/kf6/attica distinfo, devel/kf6/baloo distinfo

   KDE Frameworks 6.23.0
VersionDeltaFile
1.22+16-0devel/kf6/breeze-icons/pkg/PLIST
1.14+3-4devel/kf6/kio/Makefile
1.9+2-3devel/kf6/kconfig/Makefile
1.22+2-2devel/kf6/kparts/distinfo
1.22+2-2devel/kf6/attica/distinfo
1.22+2-2devel/kf6/baloo/distinfo
+27-1397 files not shown
+175-174103 files

Linux/linux ca4ee40drivers/gpu/drm Kconfig

Partly revert "drm/hyperv: Remove reference to hyperv_fb driver"

This partly reverts commit 8f582bcd132c ("drm/hyperv: Remove reference
to hyperv_fb driver") which was messed up by me while trying to fix a
merge conflict.

Signed-off-by: Helge Deller <deller at gmx.de>
Signed-off-by: Linus Torvalds <torvalds at linux-foundation.org>
DeltaFile
+0-146drivers/gpu/drm/Kconfig
+0-1461 files

HardenedBSD/ports 0928be2editors/enter-tex distinfo Makefile

editors/enter-tex: update to 3.49.0

Update to 3.49.0

  Release 3.49.0, 2026-01-03
  --------------------------

  Under the hood changes:
  * Adapt the code to the latest libgedit-gtksourceview API.

  Release 3.49.alpha2, 2025-11-17
  -------------------------------

  User-visible changes:
  * Find and Replace: add tooltips; adjust a margin.
  * Man-page: small improvements.

  Under the hood changes:
  * Find and Replace: rewrite the UI part in C in Gtex (GtexFindBar) as a first

    [27 lines not shown]
DeltaFile
+3-3editors/enter-tex/distinfo
+2-3editors/enter-tex/Makefile
+2-0editors/enter-tex/pkg-plist
+7-63 files

FreeBSD/ports 0928be2editors/enter-tex distinfo Makefile

editors/enter-tex: update to 3.49.0

Update to 3.49.0

  Release 3.49.0, 2026-01-03
  --------------------------

  Under the hood changes:
  * Adapt the code to the latest libgedit-gtksourceview API.

  Release 3.49.alpha2, 2025-11-17
  -------------------------------

  User-visible changes:
  * Find and Replace: add tooltips; adjust a margin.
  * Man-page: small improvements.

  Under the hood changes:
  * Find and Replace: rewrite the UI part in C in Gtex (GtexFindBar) as a first

    [27 lines not shown]
DeltaFile
+3-3editors/enter-tex/distinfo
+2-3editors/enter-tex/Makefile
+2-0editors/enter-tex/pkg-plist
+7-63 files

FreeBSD/ports a207d0beditors/gedit pkg-plist Makefile, editors/gedit-plugins Makefile distinfo

editors/gedit*: update to 49.0

Update to 49.0 for compatability with libgedit-gtksourceview 299.6.0.

  News in 49.0, 2026-01-03
  ------------------------

  * Metainfo data: add more infos to fix Flathub warnings.
  * Cleanup: remove BuildStream and Snap from build-aux/ (outdated).
  * Translation updates.

  News in 49.alpha2, 2025-11-17
  -----------------------------

  User-visible changes:
  * Add a max-file-size setting for document loading, fixing the common problem
    with very large files.
  * New symbolic app icon (to have a square one).
  * Statusbar: fix a bug with the language button popover.

    [52 lines not shown]
DeltaFile
+35-1editors/gedit/pkg-plist
+5-6editors/gedit-plugins/Makefile
+5-5editors/gedit/Makefile
+3-3editors/gedit-plugins/distinfo
+3-3editors/gedit/distinfo
+51-185 files

HardenedBSD/ports 2f8078bx11-toolkits/tepl6 Makefile distinfo

x11-toolkits/tepl6: update to 6.14.0

Update to 6.14.0

  News in 6.14.0, 2026-01-03
  --------------------------
  * Nothing new.

  News in 6.14.alpha2, 2025-11-17
  -------------------------------
  * New class: TeplStatusbar.
  * Translations updates.

  News in 6.14.alpha1, 2025-09-05
  -------------------------------
  * Add TeplCodeCommentView for the comment/uncomment feature.
  * Remove tepl_iter_*() function, moved to libgedit-gtksourceview.
  * TeplFileLoader: use libgedit-gfls.
  * Translations updates.

    [4 lines not shown]
DeltaFile
+3-3x11-toolkits/tepl6/Makefile
+3-3x11-toolkits/tepl6/distinfo
+4-2x11-toolkits/tepl6/pkg-plist
+10-83 files

FreeBSD/ports 1bc3cc2x11-toolkits/libgedit-gtksourceview Makefile distinfo

x11-toolkits/libgedit-gtksourceview: update to 299.6.0

Update to 299.6.0

  News in 299.6.0, 2026-01-03
  ---------------------------

  Completion framework:
  * The GtkSourceCompletion class no longer implements the GtkBuildable interface.
  * GtkSourceCompletionProposal: various improvements.
  * GtkSourceCompletionItem:
    - Various improvements.
    - Remove all the properties.

  Microsoft Windows:
  * Fix compilation warnings.
  * Fix unit tests failures.

  Various gardening tasks:

    [85 lines not shown]
DeltaFile
+3-3x11-toolkits/libgedit-gtksourceview/Makefile
+3-3x11-toolkits/libgedit-gtksourceview/distinfo
+4-1x11-toolkits/libgedit-gtksourceview/pkg-plist
+10-73 files

HardenedBSD/ports 1bc3cc2x11-toolkits/libgedit-gtksourceview Makefile distinfo

x11-toolkits/libgedit-gtksourceview: update to 299.6.0

Update to 299.6.0

  News in 299.6.0, 2026-01-03
  ---------------------------

  Completion framework:
  * The GtkSourceCompletion class no longer implements the GtkBuildable interface.
  * GtkSourceCompletionProposal: various improvements.
  * GtkSourceCompletionItem:
    - Various improvements.
    - Remove all the properties.

  Microsoft Windows:
  * Fix compilation warnings.
  * Fix unit tests failures.

  Various gardening tasks:

    [85 lines not shown]
DeltaFile
+3-3x11-toolkits/libgedit-gtksourceview/Makefile
+3-3x11-toolkits/libgedit-gtksourceview/distinfo
+4-1x11-toolkits/libgedit-gtksourceview/pkg-plist
+10-73 files

FreeBSD/ports 2f8078bx11-toolkits/tepl6 distinfo Makefile

x11-toolkits/tepl6: update to 6.14.0

Update to 6.14.0

  News in 6.14.0, 2026-01-03
  --------------------------
  * Nothing new.

  News in 6.14.alpha2, 2025-11-17
  -------------------------------
  * New class: TeplStatusbar.
  * Translations updates.

  News in 6.14.alpha1, 2025-09-05
  -------------------------------
  * Add TeplCodeCommentView for the comment/uncomment feature.
  * Remove tepl_iter_*() function, moved to libgedit-gtksourceview.
  * TeplFileLoader: use libgedit-gfls.
  * Translations updates.

    [4 lines not shown]
DeltaFile
+3-3x11-toolkits/tepl6/distinfo
+3-3x11-toolkits/tepl6/Makefile
+4-2x11-toolkits/tepl6/pkg-plist
+10-83 files

HardenedBSD/ports a207d0beditors/gedit pkg-plist Makefile, editors/gedit-plugins Makefile distinfo

editors/gedit*: update to 49.0

Update to 49.0 for compatability with libgedit-gtksourceview 299.6.0.

  News in 49.0, 2026-01-03
  ------------------------

  * Metainfo data: add more infos to fix Flathub warnings.
  * Cleanup: remove BuildStream and Snap from build-aux/ (outdated).
  * Translation updates.

  News in 49.alpha2, 2025-11-17
  -----------------------------

  User-visible changes:
  * Add a max-file-size setting for document loading, fixing the common problem
    with very large files.
  * New symbolic app icon (to have a square one).
  * Statusbar: fix a bug with the language button popover.

    [52 lines not shown]
DeltaFile
+35-1editors/gedit/pkg-plist
+5-6editors/gedit-plugins/Makefile
+5-5editors/gedit/Makefile
+3-3editors/gedit-plugins/distinfo
+3-3editors/gedit/distinfo
+51-185 files