share/man/man4: Move non-USB man pages out of MK_USB block
uart(4), unix(4), veriexec(4), video(4) and the gzero(4) MLINK are
not USB things, but they were in the .if ${MK_USB} != "no" block.
So if we build with WITHOUT_USB, these man pages are lost. Move
them out of the block.
MFC after: 3 days
Sponsored by: The FreeBSD Foundation
go: update to 1.25.13 and 1.26.5 (security)
These releases include 10 security fixes following the security policy:
- x/mod/sumdb/tlog: fix transparency log tile verification bypass
A malicious GOPROXY was previously capable of forging
up to two sumdb tiles that allow for a requested module
to bypass the GOSUMDB check and persist attacker-controlled
module content to a local Go module cache.
This attack allows for a malicious GOPROXY to serve
malicious module content that cannot be detected
by evaluating the transparency log.
All tiles are now correctly verified against their parents.
In order to determine if you have been affected:
[117 lines not shown]
[ORC] Remove Orc/RTBridge, split utilities from SPS bindings (#216473)
RTBridge was a holding pen for the new proxy APIs, and its name collided
confusingly with Shared/OrcRTBridge.h. Move its contents into Orc/ and
delete it:
RTBridge/Proxy.h -> Proxy.h
RTBridge/SPS/ProxySpec.h -> SPSProxySpec.h
RTBridge/CallProxies.h -> CallProxies.h
RTBridge/SPS/CallProxySpecs.h -> CallProxiesSPS.h
Drop rt:: from the proxy machinery: Proxy is not runtime specific, but a
general-purpose utility for calling code in the executor (it abstracts
over dispatch mechanism and serialization).
SPS dispatch becomes llvm::orc::sps::ProxySpec. Controller-interface
descriptors keep llvm::orc::rt::sps_ci -- those really are
runtime-specific.
[18 lines not shown]
lang/gawk: backport upstream patch for systems without MPFR and GMP
This affects us because MPFR option for multiple-precision floating
-point support added with r322035 (now commit 6c3d62a0a143) back in
2013 is disabled by default. We might flip the switch one day, but
that would require extra care and testing to not break other things.
Pull the identical patch from GitHub mirror which is easier to work
against than Savannah repository (commit hashes remain the same).
PR: 297421
Submitted by: leres
Specify the correct "read" and "write" bits to the NVMMU based on the
opcode of the NVMe command. Drop the opcode itself, since it isn't needed.
This allows us to drop the magic "null check" bit that is no longer
supported by the firmware that Apple ships with newer macOS releases.
Based on work done by Sven Peter over at Asahi Linux.
ok jmatthew@
sysutils/xplr: update to 1.1.1
What's Changed
fix(search): fixed a bug that caused results to reshuffle during search.
other(search): xplr search will default to the default skim algorithm.
Others:
deps: upgraded dependencies.
docs: fix nonexistent util function in upgrade guide by @latent-9 in #777
ubuntu(snap): @mikoloism helped fix Ubuntu snap build.
sysutils/dua-cli: update to 2.42.1
v2.42.1
*the same as 2.42, and:
Starting directories with a large amount of files, like 50k, now see a 5x speedup on macOS and Windows as bulk-reading is also done there. Note also that this is still a small absolute difference, 100ms vs 500ms, but a good demonstration of how much large trees with a lot of such directories will benefit by this, as these small absolute improvements accumulate.
v2.42.0
The headline or this release is ~30% better traversal performance on macOS due to the usage of bulk-metadata APIs on supported filesytems.
Bug Fixes
sanitize control characters in marked path output
dua-cli's interactive TUI is built on ratatui, which protects the
paths it renders on screen. But marking a file for deletion and then
quitting prints that file's path directly to the terminal after the
TUI has already released terminal control, bypassing ratatui's
protective rendering entirely. A scanned file's name has no character
restrictions, so a crafted file name can inject terminal escape
sequences into the printed path.
[4 lines not shown]