HardenedBSD/src 528c683sys/fs/nfsserver nfs_nfsdsocket.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+2-1sys/fs/nfsserver/nfs_nfsdsocket.c
+2-11 files

HardenedBSD/src 77d0196sys/fs/nfsserver nfs_nfsdsocket.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+2-1sys/fs/nfsserver/nfs_nfsdsocket.c
+2-11 files

HardenedBSD/ports aa9e1e3misc/gemini-cli pkg-plist, misc/gemini-cli/files package-lock.json

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+3,465-74misc/gemini-cli/pkg-plist
+0-1,105science/py-tensorflow/pkg-plist
+702-100misc/gemini-cli/files/package-lock.json
+91-173www/nginx-acme/distinfo
+146-84science/py-tensorflow/Makefile.MASTER_SITES
+132-56science/py-tensorflow/Makefile
+4,536-1,592152 files not shown
+7,171-2,535158 files

HardenedBSD/ports 32b965ascience/orthanc Makefile

science/orthanc: Use unversioned dcmtk DATADIR

The dcmtk port's DATADIR includes PKGVERSION in the directory
name, e.g. PREFIX/share/dcmtk-3.7.0.  Starting with dcmtk-3.7.0_1,
a symlink to PREFIX/share/dcmtk is also installed, so that consumers
like orthanc, which need to access the dcmtk dictionary files, won't
break every time dcmtk is upgraded.

This commit removes the dcmtk version from the orthanc config to
use the symlink and avoid future breakage.
DeltaFile
+4-4science/orthanc/Makefile
+4-41 files

HardenedBSD/ports a0b10ffaudio/noson distinfo pkg-plist

audio/noson: Update to 2.12.27
DeltaFile
+3-3audio/noson/distinfo
+1-1audio/noson/pkg-plist
+1-1audio/noson/Makefile
+5-53 files

HardenedBSD/ports e28222faudio/noson-app distinfo Makefile

audio/noson-app: Update to 5.6.19
DeltaFile
+3-3audio/noson-app/distinfo
+1-1audio/noson-app/Makefile
+4-42 files

HardenedBSD/ports 84e3ba6net-im/gotosocial distinfo Makefile

net-im/gotosocial: update to 0.21.2

PR: 293987
DeltaFile
+5-5net-im/gotosocial/distinfo
+1-1net-im/gotosocial/Makefile
+6-62 files

HardenedBSD/ports f94407feditors/neovim distinfo Makefile

editors/neovim: Update to 0.11.7
DeltaFile
+9-9editors/neovim/distinfo
+4-4editors/neovim/Makefile
+13-132 files

HardenedBSD/ports f6eba67audio/cantata distinfo Makefile, audio/cantata/files patch-models_streamsmodel.cpp

audio/cantata: Update to 3.4.0
DeltaFile
+14-0audio/cantata/files/patch-models_streamsmodel.cpp
+3-7audio/cantata/distinfo
+3-5audio/cantata/Makefile
+20-123 files

HardenedBSD/src b65e7b4sys/fs/nfsserver nfs_nfsdsocket.c

nfs_nfsdsocket.c: All Copy and Clone across file systems

For some server file system types, such as ZFS, a Copy/Clone
operation can be done across file systems of the same file
system type.

As such, this patch allows the Copy/Clone to be attempted
when the file handles are for files on different file systems.

This fixes a problem for exported ZFS file systems when a
copy_files on file_range(2) between file systems in the same
NFSv4 mount is attempted.

PR:     294010
MFC after:      2 weeks
DeltaFile
+2-1sys/fs/nfsserver/nfs_nfsdsocket.c
+2-11 files

HardenedBSD/ports eafbc24www/nginx-acme distinfo Makefile.cargo, www/nginx-acme/files extra-patch-src_conf_order.rs-devel

www/nginx-acme: Update to 0.3.1

Changelog: https://github.com/nginx/nginx-acme/releases

Sponsored by:   Netzkommune GmbH
DeltaFile
+91-173www/nginx-acme/distinfo
+44-85www/nginx-acme/Makefile.cargo
+0-11www/nginx-acme/files/extra-patch-src_conf_order.rs-devel
+2-3www/nginx-acme/Makefile
+137-2724 files

HardenedBSD/ports b3698bbmath/lean4 Makefile

math/lean4: Add comment
DeltaFile
+1-1math/lean4/Makefile
+1-11 files

HardenedBSD/ports 26e473dmisc/ollama pkg-message

misc/ollama: Add to pkg-message
DeltaFile
+20-0misc/ollama/pkg-message
+20-01 files

HardenedBSD/ports b582db6x11 Makefile, x11/wl-find-cursor Makefile distinfo

x11/wl-find-cursor: New port: Highlight and print out mouse position on Wayland

wl-find-cursor is a tool to highlight and print out global mouse position
on Wayland, especially for compositors based on wlroots, such as Sway.
WWW: https://github.com/cjacker/wl-find-cursor

PR:             293818
Reported by:    agathos5 at gmail.com, linimon (WantedPorts)
Approved by:    vvd (mentor)
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+44-0x11/wl-find-cursor/files/patch-Makefile
+25-0x11/wl-find-cursor/Makefile
+3-0x11/wl-find-cursor/distinfo
+2-0x11/wl-find-cursor/pkg-descr
+1-0x11/Makefile
+75-05 files

HardenedBSD/ports 6dd5910science/py-tensorflow pkg-plist Makefile.MASTER_SITES, science/py-tensorflow/files/bazel riegeli-xopen-source.patch fix-pybind11_protobuf.patch

science/py-tensorflow: update 2.13.1 → 2.21.0

PR:             294036
DeltaFile
+0-1,105science/py-tensorflow/pkg-plist
+146-84science/py-tensorflow/Makefile.MASTER_SITES
+131-55science/py-tensorflow/Makefile
+115-57science/py-tensorflow/distinfo
+160-0science/py-tensorflow/files/bazel/riegeli-xopen-source.patch
+57-94science/py-tensorflow/files/bazel/fix-pybind11_protobuf.patch
+609-1,39573 files not shown
+1,556-1,98579 files

HardenedBSD/ports 886e2a2devel/bazel7 Makefile, devel/bazel7/files patch-src_tools_singlejar_port.h patch-scripts_bootstrap_BUILD.bootstrap

devel/bazel7: New port: Fast and correct build system

PR:             294033
DeltaFile
+83-0devel/bazel7/Makefile
+14-0devel/bazel7/files/patch-src_tools_singlejar_port.h
+13-0devel/bazel7/files/patch-scripts_bootstrap_BUILD.bootstrap
+11-0devel/bazel7/files/patch-src_main_cpp_blaze_util_bsd.cc
+11-0devel/bazel7/files/patch-scripts_bootstrap_bootstrap.sh
+11-0devel/bazel7/files/patch-scripts_bootstrap_buildenv.sh
+143-05 files not shown
+165-011 files

HardenedBSD/ports c8d688cdevel/crc32c Makefile, devel/google-cloud-cpp Makefile

*/*: Reset maintainer amzo1337 at gmail.com to ports at FreeBSD.org

The maintainer's last activity was a Bugzilla submission in September 2022 about updating py-keras.
No activity of any kind afterwards.

Account of failures to respond spanning for 3+ years (the FreeBSD policy is 3 months) is below.

maintainer timeouts in science/py-tensorflow:
* Jul 1 06:23:34 2025
* Feb 23 05:18:05 2026

unanswered bug reports for science/py-tensorflow:
┌─────────────────────────────────────────────────────────────────────┬─────────────────────────┬───────────────────────┬────────────┬────────────┐
│ Bug                                                                 │ Port                    │ Summary               │ Filed      │ Timed Out  │
├─────────────────────────────────────────────────────────────────────┼─────────────────────────┼───────────────────────┼────────────┼────────────┤
│ #278571 (https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=278571)  │ science/py-tensorflow   │ Update 2.9.1 → 2.16.1 │ 2024-04-24 │ 2025-01-28 │
└─────────────────────────────────────────────────────────────────────┴─────────────────────────┴───────────────────────┴────────────┴────────────┘

maintainer timeout on devel/google-cloud-cpp:

    [25 lines not shown]
DeltaFile
+1-1science/py-tensorflow/Makefile
+1-1devel/nsync/Makefile
+1-1devel/crc32c/Makefile
+1-1devel/google-cloud-cpp/Makefile
+1-1devel/py-absl/Makefile
+1-1devel/py-google-pasta/Makefile
+6-66 files

HardenedBSD/ports 3495e54science/py-tensorflow Makefile

science/py-tensorflow: Take maintainership
DeltaFile
+1-1science/py-tensorflow/Makefile
+1-11 files

HardenedBSD/ports bd2c33fmisc/gemini-cli pkg-plist distinfo, misc/gemini-cli/files package-lock.json

misc/gemini-cli: update 0.34.0 → 0.35.3
DeltaFile
+3,465-74misc/gemini-cli/pkg-plist
+702-100misc/gemini-cli/files/package-lock.json
+3-3misc/gemini-cli/distinfo
+1-1misc/gemini-cli/Makefile
+4,171-1784 files

HardenedBSD/ports e9470a9misc/codex distinfo, misc/codex/files patch-cargo-crates_v8-146.4.0_build_config_compiler_BUILD.gn patch-cargo-crates_v8-146.4.0_build_toolchain_freebsd_BUILD.gn

misc/codex: Update to 0.117.0

Patches for v8 crate have been obtained from www/deno port. [1]

Changelog: https://github.com/openai/codex/releases/tag/rust-v0.117.0

Reported by:    GitHub (watch releases)
Obtained from:  https://cgit.freebsd.org/ports/tree/www/deno [1]
DeltaFile
+166-0misc/codex/files/patch-cargo-crates_v8-146.4.0_build_config_compiler_BUILD.gn
+57-21misc/codex/distinfo
+69-0misc/codex/files/patch-cargo-crates_v8-146.4.0_build_toolchain_freebsd_BUILD.gn
+62-0misc/codex/files/patch-cargo-crates_v8-146.4.0_v8_src_base_platform_platform-posix.cc
+52-0misc/codex/files/patch-cargo-crates_v8-146.4.0_third__party_abseil-cpp_absl_base_internal_sysinfo.cc
+44-0misc/codex/files/patch-cargo-crates_v8-146.4.0_build_config_BUILDCONFIG.gn
+450-2126 files not shown
+979-3932 files

HardenedBSD/src f2921earelease Makefile, release/scripts HardenedBSD_install_cdrom.conf pkgbase-stage.lua

HBSD: Build framework updates

In preparing the next quarterly build (2026q2), I discovered that
HardenedBSD 15-STABLE is lagging behind with regards to building the
installer images. This commit brings us more up-to-date and fixes the
build.

This is a direct commit to 15-STABLE.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+10-36release/Makefile
+7-11usr.sbin/bsdinstall/scripts/pkgbase.in
+15-0release/scripts/HardenedBSD_install_cdrom.conf
+3-7release/scripts/pkgbase-stage.lua
+4-0release/scripts/HardenedBSD-base-offline.conf
+39-545 files

HardenedBSD/ports cb283c5textproc/diff-so-fancy Makefile distinfo

textproc/diff-so-fancy: Update 1.4.6 => 1.4.8

Approved by:            db@, yuri@ (Mentors, implicit)
DeltaFile
+5-2textproc/diff-so-fancy/Makefile
+3-3textproc/diff-so-fancy/distinfo
+1-5textproc/diff-so-fancy/pkg-plist
+9-103 files

HardenedBSD/ports 42f1dcaaudio/fooyin/files patch-cmake_FooyinInstall.cmake, cad/freecad/files patch-compat-coin408

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+153-0cad/freecad/files/patch-compat-coin408
+14-23graphics/py-pivy/files/patch-swig
+18-15graphics/py-pivy/pkg-plist
+20-1math/lean4/files/patch-stage0_src_runtime_stack__overflow.cpp
+20-1math/lean4/files/patch-src_runtime_stack__overflow.cpp
+0-20audio/fooyin/files/patch-cmake_FooyinInstall.cmake
+225-6038 files not shown
+330-17144 files

HardenedBSD/ports 7a8d030www/zine-ssg distinfo Makefile.zig

www/zine-ssg: Unbreak build

IIUC, the Zig community is actively abandoning github, so dependencies
are likely to keep disappearing as they move to different services.

Differential Revision:  https://reviews.freebsd.org/D56124
DeltaFile
+1-3www/zine-ssg/distinfo
+0-1www/zine-ssg/Makefile.zig
+1-42 files

HardenedBSD/ports 4ccb612misc/gemini-cli Makefile

misc/gemini-cli: fix gyp error during build

PR:             294070
DeltaFile
+1-1misc/gemini-cli/Makefile
+1-11 files

HardenedBSD/ports b1c015bsecurity/tor distinfo Makefile

security/tor: update 0.4.9.5 → 0.4.9.6

Quoting the announcement at:
<https://lists.torproject.org/mailman3/hyperkitty/list/tor-announce@lists.torproject.org/message/MDZTQ6KHN7YPUPE2GQYYQQFNP3KCMK3M/>

Changes in version 0.4.9.6 - 2026-03-25
  This is a security release fixing major bugfixes that could possibly lead to
  remote crashing relays. We strongly recommend upgrading as soon as possible.

  o Major bugfix (security):
    - Fix a stack overflow of 11 bytes on malicious CREATED2. This lead
      to a remote crash. TROVE-2026-003. Reported-by: Anas Cherni of
      Calif.io. Fixes bug 41231; bugfix on 0.4.9.1-alpha.

  o Major bugfix (security, conflux):
    - Fix a memory compare using the wrong length. This could lead to a
      remote crash when using the conflux subsystem. TROVE-2026-004.
      Fixes bug 41232; bugfix on 0.4.8.1-alpha.


    [16 lines not shown]
DeltaFile
+3-3security/tor/distinfo
+1-1security/tor/Makefile
+4-42 files

HardenedBSD/ports 000e016math/lean4 Makefile, math/lean4/files patch-stage0_src_runtime_stack__overflow.cpp patch-src_runtime_stack__overflow.cpp

math/lean4: Fix stack overflow test

All other failing tests fail spuriously due to parallel contention.
They all pass when run individually.
DeltaFile
+20-1math/lean4/files/patch-stage0_src_runtime_stack__overflow.cpp
+20-1math/lean4/files/patch-src_runtime_stack__overflow.cpp
+14-0math/lean4/files/run-tests-one-by-one.sh
+2-1math/lean4/Makefile
+56-34 files

HardenedBSD/ports d8b1ae6math/octave-forge-datatypes distinfo Makefile

math/octave-forge-datatypes: Update to 1.2.1.
DeltaFile
+3-3math/octave-forge-datatypes/distinfo
+1-1math/octave-forge-datatypes/Makefile
+4-42 files

HardenedBSD/ports 136bbc1math/mpc Makefile distinfo

math/mpc: Update to 1.4.0

* Adjust port Makefile to follow Porters Handbook more closely

Changelog:
https://gitlab.inria.fr/mpc/mpc/-/blob/1.4.0/NEWS?ref_type=tags

PR:             294087
Reviewed by:    gerald (maintainer)
DeltaFile
+11-6math/mpc/Makefile
+3-3math/mpc/distinfo
+14-92 files

HardenedBSD/ports 4a980cdmultimedia/wl-screenrec Makefile

multimedia/wl-screenrec: Mark BROKEN with FFmpeg 8.1+

Fails to build,
non-exhaustive patterns: `sys::AVColorPrimaries::AVCOL_PRI_EXT_BASE` and `sys::AVColorPrimaries::AVCOL_PRI_EXT_NB` not covered

Port is also outdated and there's an open PR to support FFmpeg 8.0

Reference:
https://github.com/russelltg/wl-screenrec/pull/146

PR:             293872
Reported by:    antoine via exp-run
DeltaFile
+2-1multimedia/wl-screenrec/Makefile
+2-11 files