NetBSD/pkgsrc-wip fd87c93llama.cpp TODO

llama.cpp: Add recent CVEs
DeltaFile
+4-3llama.cpp/TODO
+4-31 files

HardenedBSD/src 00fb61esys/dev/hwpmc hwpmc_rapl.c, sys/modules/hwpmc Makefile

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+13-2sys/netinet6/in6_fib_algo.c
+12-1sys/netinet/in_fib_algo.c
+7-1sys/dev/hwpmc/hwpmc_rapl.c
+1-0sys/modules/hwpmc/Makefile
+33-44 files

HardenedBSD/src 4f80fc7sys/dev/hwpmc hwpmc_rapl.c, sys/modules/hwpmc Makefile

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+13-2sys/netinet6/in6_fib_algo.c
+12-1sys/netinet/in_fib_algo.c
+7-1sys/dev/hwpmc/hwpmc_rapl.c
+1-0sys/modules/hwpmc/Makefile
+33-44 files

HardenedBSD/ports 3abce6caudio/ncspot Makefile.crates distinfo, devel/git-graph distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+513-1,213editors/omegaT/pkg-plist
+543-527audio/ncspot/distinfo
+270-262audio/ncspot/Makefile.crates
+155-213devel/git-graph/distinfo
+313-3security/binwalk/distinfo
+181-83misc/codex/distinfo
+1,975-2,301233 files not shown
+5,850-3,778239 files

FreeBSD/doc 9e9afffwebsite/content/en/releases/14.5R relnotes.adoc

14.5/relnotes: latest commits added, man pages section reworked

Approved by: re (implicit)
Differential Revision: https://reviews.freebsd.org/D59122
DeltaFile
+24-0website/content/en/releases/14.5R/relnotes.adoc
+24-01 files

FreeBSD/ports 3f2328fdatabases/mysql80-server/files mysqlrouter.conf.sample.in mysqlrouter.in, databases/mysql84-server/files mysqlrouter.conf.sample.in mysqlrouter.in

databases/mysql{80,84,97}-server: Add rc script and user for MySQL Router

All three server ports build and install MySQL Router, but it was never
usable out of the box: there is no mysqlrouter user, no rc script, no
configuration directory, and no log, runtime or data directory. The only
trace of an integration was etc/logrotate.d/mysqlrouter, whose
"create 600 mysqlrouter mysqlrouter" refers to an account that no port
creates, so logrotate(8) skipped that entry with an error and exited
non-zero.

Upstream names that account itself: scripts/CMakeLists.txt sets
MYSQLROUTER_USER to "mysqlrouter", the built-in help of mysqlrouter
suggests --user=mysqlrouter, and the systemd unit shipped for Linux runs
the service under it.

Add the user and group, an rc script, and a configuration sample in
etc/mysqlrouter. mysqlrouter does not detach itself, so it runs under
daemon(8), which also writes the PID file that the postrotate script in
etc/logrotate.d/mysqlrouter expects. The runtime, log and data

    [9 lines not shown]
DeltaFile
+93-0databases/mysql97-server/files/mysqlrouter.in
+93-0databases/mysql80-server/files/mysqlrouter.in
+93-0databases/mysql84-server/files/mysqlrouter.in
+41-0databases/mysql80-server/files/mysqlrouter.conf.sample.in
+41-0databases/mysql84-server/files/mysqlrouter.conf.sample.in
+41-0databases/mysql97-server/files/mysqlrouter.conf.sample.in
+402-011 files not shown
+533-1717 files

HardenedBSD/ports 3f2328fdatabases/mysql80-server/files mysqlrouter.conf.sample.in mysqlrouter.in, databases/mysql84-server/files mysqlrouter.conf.sample.in mysqlrouter.in

databases/mysql{80,84,97}-server: Add rc script and user for MySQL Router

All three server ports build and install MySQL Router, but it was never
usable out of the box: there is no mysqlrouter user, no rc script, no
configuration directory, and no log, runtime or data directory. The only
trace of an integration was etc/logrotate.d/mysqlrouter, whose
"create 600 mysqlrouter mysqlrouter" refers to an account that no port
creates, so logrotate(8) skipped that entry with an error and exited
non-zero.

Upstream names that account itself: scripts/CMakeLists.txt sets
MYSQLROUTER_USER to "mysqlrouter", the built-in help of mysqlrouter
suggests --user=mysqlrouter, and the systemd unit shipped for Linux runs
the service under it.

Add the user and group, an rc script, and a configuration sample in
etc/mysqlrouter. mysqlrouter does not detach itself, so it runs under
daemon(8), which also writes the PID file that the postrotate script in
etc/logrotate.d/mysqlrouter expects. The runtime, log and data

    [9 lines not shown]
DeltaFile
+93-0databases/mysql80-server/files/mysqlrouter.in
+93-0databases/mysql84-server/files/mysqlrouter.in
+93-0databases/mysql97-server/files/mysqlrouter.in
+41-0databases/mysql84-server/files/mysqlrouter.conf.sample.in
+41-0databases/mysql97-server/files/mysqlrouter.conf.sample.in
+41-0databases/mysql80-server/files/mysqlrouter.conf.sample.in
+402-011 files not shown
+533-1717 files

FreeNAS/freenas b304b49src/middlewared/middlewared/plugins cache.py, src/middlewared/middlewared/pytest/unit/plugins test_kv_cache.py

Fix TTL handling in cache.has_key and get_or_put

## Problem
`cache.has_key` returned True whenever the TDB record existed and never looked at the stored `timeout`, so it disagreed with `cache.get` — which expires the entry and raises `KeyError` — for any key that had expired but not yet been reaped. The only reaper is a 24h periodic with `run_on_start=False` whose timer is re-armed from scratch on every middlewared start, so on a box that restarts more often than daily it never runs at all and the wrong answer sticks around indefinitely.

Separately, `get_or_put` always stored `now + timeout`, so unlike `put` — where 0 means "never expires" — `get_or_put(key, 0, method)` stored an expiry of now and the entry was already expired on the very next read.

## Solution
`has_key` now delegates to `get()` and maps `KeyError` to False. Delegating rather than repeating the timeout comparison is deliberate: the bug existed because two methods independently decided what "expired" means, and this leaves only one. Expired entries are reaped on access as a side effect, which matters given how unreliable the periodic reaper is.

`get_or_put` stores a literal 0 when `timeout` is 0, matching `put`.
DeltaFile
+64-0src/middlewared/middlewared/pytest/unit/plugins/test_kv_cache.py
+15-9src/middlewared/middlewared/plugins/cache.py
+16-0tests/unit/test_cache.py
+95-93 files

HardenedBSD/ports 84a8cectextproc/py-zensical Makefile distinfo

textproc/py-zensical: Update to 0.0.57

Changelog:

https://github.com/zensical/zensical/releases/tag/v0.0.57
DeltaFile
+3-3textproc/py-zensical/distinfo
+1-1textproc/py-zensical/Makefile
+4-42 files

FreeBSD/ports 679063ctextproc/py-pymdown-extensions Makefile distinfo

textproc/py-pymdown-extensions: Update to 11.0.2

Changelog:

https://github.com/facelessuser/pymdown-extensions/releases/tag/11.0.2
DeltaFile
+3-3textproc/py-pymdown-extensions/distinfo
+1-1textproc/py-pymdown-extensions/Makefile
+4-42 files

FreeBSD/ports baa41detextproc/py-python-docs-theme distinfo Makefile

textproc/py-python-docs-theme: Update to 2026.7

* Switch to PEP517 build framework.

* Update WWW to point to upstream repository to get some more info about
  its activities.

Changelog since 2018.2:

https://github.com/python/python-docs-theme/blob/2026.7/CHANGELOG.md
DeltaFile
+9-5textproc/py-python-docs-theme/Makefile
+3-3textproc/py-python-docs-theme/distinfo
+12-82 files

HardenedBSD/ports 679063ctextproc/py-pymdown-extensions Makefile distinfo

textproc/py-pymdown-extensions: Update to 11.0.2

Changelog:

https://github.com/facelessuser/pymdown-extensions/releases/tag/11.0.2
DeltaFile
+3-3textproc/py-pymdown-extensions/distinfo
+1-1textproc/py-pymdown-extensions/Makefile
+4-42 files

FreeBSD/ports 84a8cectextproc/py-zensical Makefile distinfo

textproc/py-zensical: Update to 0.0.57

Changelog:

https://github.com/zensical/zensical/releases/tag/v0.0.57
DeltaFile
+3-3textproc/py-zensical/distinfo
+1-1textproc/py-zensical/Makefile
+4-42 files

HardenedBSD/ports baa41detextproc/py-python-docs-theme distinfo Makefile

textproc/py-python-docs-theme: Update to 2026.7

* Switch to PEP517 build framework.

* Update WWW to point to upstream repository to get some more info about
  its activities.

Changelog since 2018.2:

https://github.com/python/python-docs-theme/blob/2026.7/CHANGELOG.md
DeltaFile
+9-5textproc/py-python-docs-theme/Makefile
+3-3textproc/py-python-docs-theme/distinfo
+12-82 files

FreeBSD/ports 172e36cnet-mgmt/py-ciscoconfparse distinfo Makefile, net-mgmt/py-ciscoconfparse/files patch-tests_conftest.py patch-pyproject.toml

net-mgmt/py-ciscoconfparse: Update to 1.9.52

* Update WWW to spare users from redirects.

* This release is also the last in the 1.x series, and the upstream repo
  has already been archived with a note that py-ciscoconfparse2, should
  be used.

  Therefore, mark the port as DEPRECATED and set an EXPIRATION_DATE that
  is long enough so that users who use the quarterly branches have
  sufficient time in 2026Q4 to make the necessary switch.

Changelog since 1.9.28:

https://github.com/mpenning/ciscoconfparse/blob/1.9.52/CHANGES.md
DeltaFile
+16-6net-mgmt/py-ciscoconfparse/Makefile
+18-3net-mgmt/py-ciscoconfparse/files/patch-pyproject.toml
+15-0net-mgmt/py-ciscoconfparse/files/patch-tests_conftest.py
+3-3net-mgmt/py-ciscoconfparse/distinfo
+52-124 files

FreeBSD/ports 79457e7net-mgmt/py-hier-config Makefile

net-mgmt/py-hier-config: Set PORTSCOUT

* Both py-ciscoconfparse and py-ciscoconfparse2 aren't yet compatible
  with the 3.x release, which contains breaking changes.
DeltaFile
+4-0net-mgmt/py-hier-config/Makefile
+4-01 files

HardenedBSD/ports 172e36cnet-mgmt/py-ciscoconfparse distinfo Makefile, net-mgmt/py-ciscoconfparse/files patch-tests_conftest.py patch-pyproject.toml

net-mgmt/py-ciscoconfparse: Update to 1.9.52

* Update WWW to spare users from redirects.

* This release is also the last in the 1.x series, and the upstream repo
  has already been archived with a note that py-ciscoconfparse2, should
  be used.

  Therefore, mark the port as DEPRECATED and set an EXPIRATION_DATE that
  is long enough so that users who use the quarterly branches have
  sufficient time in 2026Q4 to make the necessary switch.

Changelog since 1.9.28:

https://github.com/mpenning/ciscoconfparse/blob/1.9.52/CHANGES.md
DeltaFile
+16-6net-mgmt/py-ciscoconfparse/Makefile
+18-3net-mgmt/py-ciscoconfparse/files/patch-pyproject.toml
+15-0net-mgmt/py-ciscoconfparse/files/patch-tests_conftest.py
+3-3net-mgmt/py-ciscoconfparse/distinfo
+52-124 files

FreeBSD/ports b167aaanet-mgmt Makefile, net-mgmt/py-ciscoconfparse2 distinfo pkg-descr

net-mgmt/py-ciscoconfparse2: New port

ciscoconfparse parses through Cisco IOS-style configurations. It can:

- Audit existing router / switch / firewall / wlc configurations
- Retrieve portions of the configuration
- Modify existing configurations
- Build new configurations

It can also parse other vendor configurations:

- Juniper Networks JunOS
- F5 Networks configurations
- Palo Alto Networks Firewall configurations

The module handles anything that has a Cisco IOS style of configuration,
e.g.:

- Cisco IOS/IOS-XE/IOS-XR/Aironet/ASA/CatOS/Nexus

    [6 lines not shown]
DeltaFile
+48-0net-mgmt/py-ciscoconfparse2/files/patch-pyproject.toml
+39-0net-mgmt/py-ciscoconfparse2/Makefile
+22-0net-mgmt/py-ciscoconfparse2/pkg-descr
+3-0net-mgmt/py-ciscoconfparse2/distinfo
+1-0net-mgmt/Makefile
+113-05 files

FreeBSD/ports ff41397net Makefile, net/py-macaddress distinfo pkg-descr

net/py-macaddress: New port

This Python module is used for handling hardware identifiers like MAC
addresses and makes it easy to:

* check if a string represents a valid MAC address, or a similar hardware
  identifier like an EUI-64, OUI, etc,
* convert between string and binary forms of MAC addresses and other
  hardware identifiers,

and so on.

Heavily inspired by the ipaddress module, but not yet quite as
featureful.
DeltaFile
+22-0net/py-macaddress/Makefile
+11-0net/py-macaddress/pkg-descr
+3-0net/py-macaddress/distinfo
+1-0net/Makefile
+37-04 files

HardenedBSD/ports 79457e7net-mgmt/py-hier-config Makefile

net-mgmt/py-hier-config: Set PORTSCOUT

* Both py-ciscoconfparse and py-ciscoconfparse2 aren't yet compatible
  with the 3.x release, which contains breaking changes.
DeltaFile
+4-0net-mgmt/py-hier-config/Makefile
+4-01 files

HardenedBSD/ports ff41397net Makefile, net/py-macaddress distinfo pkg-descr

net/py-macaddress: New port

This Python module is used for handling hardware identifiers like MAC
addresses and makes it easy to:

* check if a string represents a valid MAC address, or a similar hardware
  identifier like an EUI-64, OUI, etc,
* convert between string and binary forms of MAC addresses and other
  hardware identifiers,

and so on.

Heavily inspired by the ipaddress module, but not yet quite as
featureful.
DeltaFile
+22-0net/py-macaddress/Makefile
+11-0net/py-macaddress/pkg-descr
+3-0net/py-macaddress/distinfo
+1-0net/Makefile
+37-04 files

HardenedBSD/ports b167aaanet-mgmt Makefile, net-mgmt/py-ciscoconfparse2 distinfo pkg-descr

net-mgmt/py-ciscoconfparse2: New port

ciscoconfparse parses through Cisco IOS-style configurations. It can:

- Audit existing router / switch / firewall / wlc configurations
- Retrieve portions of the configuration
- Modify existing configurations
- Build new configurations

It can also parse other vendor configurations:

- Juniper Networks JunOS
- F5 Networks configurations
- Palo Alto Networks Firewall configurations

The module handles anything that has a Cisco IOS style of configuration,
e.g.:

- Cisco IOS/IOS-XE/IOS-XR/Aironet/ASA/CatOS/Nexus

    [6 lines not shown]
DeltaFile
+48-0net-mgmt/py-ciscoconfparse2/files/patch-pyproject.toml
+39-0net-mgmt/py-ciscoconfparse2/Makefile
+22-0net-mgmt/py-ciscoconfparse2/pkg-descr
+3-0net-mgmt/py-ciscoconfparse2/distinfo
+1-0net-mgmt/Makefile
+113-05 files

FreeBSD/ports fceaaf1net-mgmt Makefile, net-mgmt/py-hier-config distinfo pkg-descr

net-mgmt/py-hier-config: New port

Hierarchical Configuration is a Python library that is able to take a
running configuration of a network device, compare it to its intended
configuration, and build the remediation steps necessary bring a device
into spec with its intended configuration.

Hierarchical Configuration has been used extensively on:

* Cisco IOS
* Cisco IOSXR
* Cisco NXOS
* Arista EOS

However, any NOS that utilizes a CLI syntax that is structured in a
similar fashion to IOS should work mostly out of the box.
DeltaFile
+24-0net-mgmt/py-hier-config/Makefile
+20-0net-mgmt/py-hier-config/pkg-descr
+3-0net-mgmt/py-hier-config/distinfo
+1-0net-mgmt/Makefile
+48-04 files

HardenedBSD/ports fceaaf1net-mgmt Makefile, net-mgmt/py-hier-config distinfo pkg-descr

net-mgmt/py-hier-config: New port

Hierarchical Configuration is a Python library that is able to take a
running configuration of a network device, compare it to its intended
configuration, and build the remediation steps necessary bring a device
into spec with its intended configuration.

Hierarchical Configuration has been used extensively on:

* Cisco IOS
* Cisco IOSXR
* Cisco NXOS
* Arista EOS

However, any NOS that utilizes a CLI syntax that is structured in a
similar fashion to IOS should work mostly out of the box.
DeltaFile
+24-0net-mgmt/py-hier-config/Makefile
+20-0net-mgmt/py-hier-config/pkg-descr
+3-0net-mgmt/py-hier-config/distinfo
+1-0net-mgmt/Makefile
+48-04 files

NetBSD/pkgsrc-wip 5ed4bf8jcode Makefile COMMIT_MSG

Update devel/jcode to v.0.79.1
DeltaFile
+3-3jcode/distinfo
+1-1jcode/Makefile
+1-1jcode/COMMIT_MSG
+5-53 files

FreeBSD/ports 09efbd9sysutils/ganglia-monitor-core Makefile

sysutils/ganglia-monitor-core: Fix invalid expiration date
DeltaFile
+1-1sysutils/ganglia-monitor-core/Makefile
+1-11 files

HardenedBSD/ports 09efbd9sysutils/ganglia-monitor-core Makefile

sysutils/ganglia-monitor-core: Fix invalid expiration date
DeltaFile
+1-1sysutils/ganglia-monitor-core/Makefile
+1-11 files

HardenedBSD/ports 822172fmultimedia/kodi-addon-inputstream.adaptive Makefile distinfo

multimedia/kodi-addon-inputstream.adaptive: Update to 22.3.20
DeltaFile
+3-3multimedia/kodi-addon-inputstream.adaptive/distinfo
+1-1multimedia/kodi-addon-inputstream.adaptive/Makefile
+4-42 files

FreeBSD/ports 822172fmultimedia/kodi-addon-inputstream.adaptive Makefile distinfo

multimedia/kodi-addon-inputstream.adaptive: Update to 22.3.20
DeltaFile
+3-3multimedia/kodi-addon-inputstream.adaptive/distinfo
+1-1multimedia/kodi-addon-inputstream.adaptive/Makefile
+4-42 files

HardenedBSD/ports 249779e. MOVED, sysutils/filevercmp distinfo pkg-descr

sysutils/filevercmp: Remove

Expired: Dependent ports now use git submodules
DeltaFile
+0-52sysutils/filevercmp/files/Makefile
+0-21sysutils/filevercmp/Makefile
+0-14sysutils/filevercmp/pkg-descr
+0-3sysutils/filevercmp/distinfo
+1-0MOVED
+1-905 files