HardenedBSD/src 4e27cc4. CONTRIBUTING.md, share/examples/jails jng

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+249-70share/examples/jails/jng
+2-6CONTRIBUTING.md
+1-0sys/netinet/ip_mroute.c
+1-0sys/netinet6/ip6_mroute.c
+253-764 files

HardenedBSD/src b84f38e. CONTRIBUTING.md, share/examples/jails jng

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+249-70share/examples/jails/jng
+2-6CONTRIBUTING.md
+1-0sys/netinet6/ip6_mroute.c
+1-0sys/netinet/ip_mroute.c
+253-764 files

HardenedBSD/ports 2613051emulators/rpcs3 pkg-plist distinfo

emulators/rpcs3: update to 0.0.40.19155

Changes:        https://github.com/RPCS3/rpcs3/compare/d46ddcee5d...ec989781a3
DeltaFile
+37-0emulators/rpcs3/pkg-plist
+7-7emulators/rpcs3/distinfo
+4-4emulators/rpcs3/Makefile
+48-113 files

HardenedBSD/ports 5196822devel/sdl12-compat distinfo Makefile

devel/sdl12-compat: update to 1.2.76

Changes:        https://github.com/libsdl-org/sdl12-compat/releases/tag/release-1.2.76
Reported by:    GitHub (watch releases)
DeltaFile
+3-3devel/sdl12-compat/distinfo
+1-1devel/sdl12-compat/Makefile
+4-42 files

HardenedBSD/ports bbf62fax11-toolkits/gtk-layer-shell distinfo Makefile

x11-toolkits/gtk-layer-shell: update to 0.10.1

Changes:        https://github.com/wmww/gtk-layer-shell/releases/tag/v0.10.1
Reported by:    GitHub (watch releases)
DeltaFile
+3-3x11-toolkits/gtk-layer-shell/distinfo
+1-1x11-toolkits/gtk-layer-shell/Makefile
+4-42 files

HardenedBSD/ports ce39d63www/tt-rss pkg-plist Makefile

www/tt-rss: Update g20260117 => g20260317

Commit log:
https://github.com/tt-rss/tt-rss/compare/b3a8992...5cbcc14

- Simplify dependency from git in RUN_DEPENDS.
- Remove unencessary REINPLACE_ARGS.
- Remove unencessary file docker-compose.yml from installation.

PR:             294126
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+80-22www/tt-rss/pkg-plist
+4-7www/tt-rss/Makefile
+3-3www/tt-rss/distinfo
+87-323 files

HardenedBSD/ports 0ce7e28www/bluefish distinfo

www/bluefish: Upstream rerolled tarball

MFH:    2026Q2
DeltaFile
+3-3www/bluefish/distinfo
+3-31 files

HardenedBSD/src 3f79bc9sys/netinet ip_mroute.c, sys/netinet6 ip6_mroute.c

Fix nooptions VIMAGE build

The recent FIBify commits deref struct thread without including
sys/proc.h, which can result in a compiler error.  This becomes
apparent when building with LINT-NOVIMAGE, as net/vnet.h includes
sys/proc.h.  Fix this by directly including sys/proc.h

Fixes: 4c486fe40267 ("ip_mroute: FIBify"), 0bb9c2b665d9 ("ip6_mroute: FIBify")
DeltaFile
+1-0sys/netinet/ip_mroute.c
+1-0sys/netinet6/ip6_mroute.c
+2-02 files

HardenedBSD/ports 058070ewww/freenginx-acme distinfo

www/freenginx-acme: update freenginx to 1.29.7

Sponsored by:   tipi.work
DeltaFile
+3-3www/freenginx-acme/distinfo
+3-31 files

HardenedBSD/ports 9c28688www/freenginx-devel distinfo version.mk

www/freenginx-devel: update: 1.29.6 -> 1.29.7

Sponsored by:   tipi.work

<ChangeLog>

*) Feature: OpenSSL 4.0 compatibility.

*) Bugfix: a segmentation fault might occur in a worker process if the
   ngx_http_dav_module was used to handle COPY and MOVE methods in a
   location with the "alias" directive.

*) Bugfix: client host name was not escaped in requests to the
   authentication server and in the XCLIENT command if the "resolver"
   directive was used in the SMTP proxy.

*) Bugfix: in the mail proxy module.

</ChangeLog>
DeltaFile
+3-3www/freenginx-devel/distinfo
+1-1www/freenginx-devel/version.mk
+4-42 files

HardenedBSD/ports f3ea14adeskutils/foliate p.patch

deskutils/foliate: Remove the accidentally added patch file.
DeltaFile
+0-106deskutils/foliate/p.patch
+0-1061 files

HardenedBSD/ports 948c7dddeskutils/foliate p.patch pkg-plist

deskutils/foliate: Clean up NLS depends, add helpers

PR:             274769
Reported by:    Nuno Teixeira <eduardo at FreeBSD.org>
DeltaFile
+106-0deskutils/foliate/p.patch
+30-30deskutils/foliate/pkg-plist
+4-6deskutils/foliate/Makefile
+140-363 files

HardenedBSD/src fba8bd0. CONTRIBUTING.md

CONTRIBUTING.md: Make quality expectations section more concise

FreeBSD has not yet established an AI submission policy.  For now remove
text that implies we have.
DeltaFile
+2-6CONTRIBUTING.md
+2-61 files

HardenedBSD/ports bbe5904mail/thunderbird distinfo Makefile

mail/thunderbird: update to 149.0.2 (rc1)

Release Notes (soon):
  https://www.thunderbird.net/en-US/thunderbird/149.0.2/releasenotes/
DeltaFile
+3-3mail/thunderbird/distinfo
+1-1mail/thunderbird/Makefile
+4-42 files

HardenedBSD/src 8e68f94share/examples/jails jng

New version of jng (2.0)

Changes for jng 1.0 -> 2.0 include:

+ Add experimental MSS clamping
+ Add support for ng_bridge(4) NGM_BRIDGE_GET_STATS (getstats)
+ Add JSON formatted ng_bridge(4) statistics (see above) via "jng stats -j <name>"
+ Add error messages
+ Minor refactoring for code readability (read: quietly() function)
+ Rename eiface variables to jiface to clarify as-for jail interface (not ng_eiface(4))
+ Fix missing description for alternate form of "jng show" usage
+ Update "jng show <name>" to accept multiple names (now "jng show <name> …" is allowed)
+ Update "jng shutdown <name>" to accept multiple names (now "jng shutdown <name> …" is allowed)
+ Add "-a" option to "jng stats" (as-in "jng stats -a") to show all ng_bridge(4) stats
+ Update "jng stats <name>" to accept any kind of name (make it easier to use)
+ Add version ident
+ Remove extraneous line in LICENSE section
+ Add -h to usage statements
+ Bump copyright

    [3 lines not shown]
DeltaFile
+249-70share/examples/jails/jng
+249-701 files

HardenedBSD/ports 8c4df93security/spectre-meltdown-checker distinfo Makefile

security/spectre-meltdown-checker: update to 26.26.0404682

Changelog:      https://github.com/speed47/spectre-meltdown-checker/releases/tag/v26.26.0404682
DeltaFile
+3-3security/spectre-meltdown-checker/distinfo
+1-1security/spectre-meltdown-checker/Makefile
+4-42 files

HardenedBSD/ports 462a109www/tomcat-devel Makefile, www/tomcat101 Makefile

www/tomcat{-devel,101,110,9}: Improve ports (no functional changes)

Simplify MASTER_SITES and parametrize COMMENT.

Sponsored by:   UNIS Labs
DeltaFile
+2-2www/tomcat110/Makefile
+2-2www/tomcat-devel/Makefile
+2-2www/tomcat101/Makefile
+2-2www/tomcat9/Makefile
+8-84 files

HardenedBSD/ports 3382a1emisc/cpp-mcp distinfo Makefile

misc/cpp-mcp: update g20250523 → g20260331
DeltaFile
+3-3misc/cpp-mcp/distinfo
+2-2misc/cpp-mcp/Makefile
+5-52 files

HardenedBSD/ports 4297201www Makefile, www/py-slowapi Makefile pkg-descr

www/py-slowapi: New port: Rate limiting extension for Starlette and Fastapi
DeltaFile
+24-0www/py-slowapi/Makefile
+10-0www/py-slowapi/pkg-descr
+3-0www/py-slowapi/distinfo
+1-0www/Makefile
+38-04 files

HardenedBSD/ports ce9f734science/py-tensorflow/files patch-WORKSPACE xnnpack-freebsd-mmap.patch

science/py-tensorflow: Fix unresolved symbol at run-time; Add test targets
DeltaFile
+0-125science/py-tensorflow/files/patch-WORKSPACE
+68-0science/py-tensorflow/files/xnnpack-freebsd-mmap.patch
+21-42science/py-tensorflow/files/patch-tensorflow_workspace2.bzl
+0-55science/py-tensorflow/files/patch-third__party_xla_third__party_py_python__init__pip.bzl
+0-55science/py-tensorflow/files/patch-third__party_py_python__init__pip.bzl
+48-0science/py-tensorflow/files/patch-tensorflow_python_BUILD
+137-27736 files not shown
+527-52742 files

HardenedBSD/ports 39679cfsysutils/node_exporter distinfo Makefile

sysutils/node_exporter: Update 1.9.1 => 1.11.0

Changelogs:
https://github.com/prometheus/node_exporter/releases/tag/v1.10.0
https://github.com/prometheus/node_exporter/releases/tag/v1.10.1
https://github.com/prometheus/node_exporter/releases/tag/v1.10.2
https://github.com/prometheus/node_exporter/releases/tag/v1.11.0

PR:             293902
Approved by:    David O'Rourke <dor.bsd at xm0.uk> (maintainer, timeout > 2 weeks)
Sponsored by:   UNIS Labs
MFH:            2026Q2
Co-authored-by: Anton Saietskii <vsasjason at gmail.com>

: Update  =>

Changelog:

PR:
Sponsored by:   UNIS Labs
DeltaFile
+5-5sysutils/node_exporter/distinfo
+2-4sysutils/node_exporter/Makefile
+7-92 files

HardenedBSD/src e4b9243lib/msun/man fmaximum.3, lib/msun/src s_fminimum.c s_fmaximum.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+188-0lib/msun/tests/fmaximum_fminimum_test.c
+103-0lib/msun/man/fmaximum.3
+66-0lib/msun/src/s_fminimum.c
+65-0lib/msun/src/s_fmaximum.c
+61-0lib/msun/src/s_fminimumf.c
+60-0lib/msun/src/s_fmaximumf.c
+543-08 files not shown
+684-914 files

HardenedBSD/src 933d76alib/msun/man fmaximum.3, lib/msun/src s_fminimum.c s_fmaximum.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+188-0lib/msun/tests/fmaximum_fminimum_test.c
+103-0lib/msun/man/fmaximum.3
+66-0lib/msun/src/s_fminimum.c
+65-0lib/msun/src/s_fmaximum.c
+61-0lib/msun/src/s_fminimumf.c
+60-0lib/msun/src/s_fmaximumf.c
+543-08 files not shown
+684-914 files

HardenedBSD/ports cd93cf4devel/elm-format distinfo Makefile, games/hs-scroll Makefile distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+165-164net/keycloak/pkg-plist
+159-147devel/elm-format/distinfo
+3-87devel/elm-format/Makefile
+86-0devel/elm-format/Makefile.cabal
+2-32games/hs-scroll/Makefile
+15-17games/hs-scroll/distinfo
+430-44735 files not shown
+569-55541 files

HardenedBSD/ports 08626denet/jotta-cli Makefile distinfo

net/jotta-cli: Update 0.17.132497 => 0.17.159692

Release notes:
https://docs.jottacloud.com/en/articles/1461561-release-notes-for-jottacloud-cl

- Add ability to run make makesum on any ARCH.
- Replace RESTRICTED with LICENSE_PERMS.

PR:             293665
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q2
DeltaFile
+11-6net/jotta-cli/Makefile
+5-5net/jotta-cli/distinfo
+16-112 files

HardenedBSD/ports f07bff5security/vuxml/vuln 2026.xml

security/vuxml: add missed python packages

PR: 294246
DeltaFile
+7-0security/vuxml/vuln/2026.xml
+7-01 files

HardenedBSD/ports 2af09f6security/vuxml/vuln 2026.xml

security/vuxml: add ranges for python webbrowser.open() API entry

PR: 294246
DeltaFile
+5-4security/vuxml/vuln/2026.xml
+5-41 files

HardenedBSD/ports fb7962esecurity/wazuh-manager Makefile

security/wazuh-manager: Fix extract on 15.x
DeltaFile
+1-1security/wazuh-manager/Makefile
+1-11 files

HardenedBSD/ports 37ce78enet/keycloak pkg-plist distinfo

net/keycloak: Update 26.5.6 => 26.5.7

Release Notes:
https://www.keycloak.org/2026/04/keycloak-2657-released

PR:             294235
Security:       CVE-2025-14083
Security:       CVE-2026-1002
Security:       CVE-2026-3429
Security:       CVE-2026-4634
Security:       CVE-2026-4636
Security:       CVE-2026-3872
Security:       CVE-2026-4282
Sponsored by:   UNIS Labs
MFH:            2026Q2
DeltaFile
+165-164net/keycloak/pkg-plist
+3-3net/keycloak/distinfo
+1-2net/keycloak/Makefile
+169-1693 files

HardenedBSD/src e55db84lib/msun/man fmaximum.3, lib/msun/src s_fminimum.c s_fmaximum.c

lib/msun: Added fmaximum and fminimum family. Tests and man page

Starting from the existing fmax{,f,l} functions I've added the fmaximum
family, which handles NaN according to the newest standard (propagating
it).

This commit is a PoC for GSoC 2026.

Reviewed by:    fuz, kargl
MFC after:      1 month
Differential Revision:  https://reviews.freebsd.org/D55834
DeltaFile
+188-0lib/msun/tests/fmaximum_fminimum_test.c
+103-0lib/msun/man/fmaximum.3
+66-0lib/msun/src/s_fminimum.c
+65-0lib/msun/src/s_fmaximum.c
+61-0lib/msun/src/s_fminimumf.c
+60-0lib/msun/src/s_fmaximumf.c
+543-06 files not shown
+680-512 files