HardenedBSD/src 1ec2a73share/man/man7 arch.7, sys/sys _types.h _stdint.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+34-5sys/sys/_types.h
+16-0sys/sys/_stdint.h
+14-0tools/tools/git/git-arc.sh
+8-0sys/sys/stddef.h
+7-0tests/sys/netpfil/pf/pflog.sh
+3-2share/man/man7/arch.7
+82-72 files not shown
+85-88 files

HardenedBSD/src 5d52822sys/sys _types.h

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+1-1sys/sys/_types.h
+1-11 files

HardenedBSD/ports d1d2ddddevel/gitlab-runner distinfo, security/vuxml/vuln 2025.xml

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+192-193x11/cinnamon/pkg-plist
+66-0security/vuxml/vuln/2025.xml
+31-31x11-fm/nemo/pkg-plist
+29-28x11/cinnamon/Makefile
+17-19x11-fm/nemo/Makefile
+11-11devel/gitlab-runner/distinfo
+346-28238 files not shown
+507-38444 files

HardenedBSD/src b3e53f9tools/tools/git git-arc.sh

git-arc: Don't require devel/arcanist

Instead of invoking just “arc”, which requires devel/arcanist, which
conflicts with archivers/arc, invoke the underlying script installed by
devel/arcanist-lib.

Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D53942
DeltaFile
+14-0tools/tools/git/git-arc.sh
+14-01 files

HardenedBSD/ports 175a85bnet Makefile, net/py-pystun3 Makefile distinfo

net/py-pystun3: New port: Python STUN client for getting NAT type and external IP

PyStun3 is a Python STUN client for getting NAT type and external
IP with support for Python versions 2 and 3.
DeltaFile
+17-0net/py-pystun3/Makefile
+3-0net/py-pystun3/distinfo
+2-0net/py-pystun3/pkg-descr
+1-0net/Makefile
+23-04 files

HardenedBSD/ports 5c60797lang/spidermonkey115 Makefile

lang/spidermonkey115: mark DEPRECATED, without expiration date for now

Upcoming games/0ad release moves to lang/spidermonkey128; allow
until the former port can be updated before setting a date.
DeltaFile
+3-0lang/spidermonkey115/Makefile
+3-01 files

HardenedBSD/ports 5fbd01abenchmarks/hipercontracer distinfo Makefile

benchmarks/hipercontracer: Update 2.1.5 => 2.1.7

Changelog:
https://github.com/dreibh/hipercontracer/blob/hipercontracer-2.1.6/ChangeLog
https://github.com/dreibh/hipercontracer/blob/hipercontracer-2.1.7/ChangeLog

Commit log:
https://github.com/dreibh/hipercontracer/compare/hipercontracer-2.1.5...hipercontracer-2.1.7

PR:     291244
DeltaFile
+3-3benchmarks/hipercontracer/distinfo
+1-1benchmarks/hipercontracer/Makefile
+4-42 files

HardenedBSD/ports b37f7e1lang/cjs Makefile distinfo

lang/cjs: update to 128.0

New version scheme is tied to SpiderMonkey rather than Cinnamon
DeltaFile
+12-5lang/cjs/Makefile
+3-5lang/cjs/distinfo
+15-102 files

HardenedBSD/ports faabb80sysutils/nginx-ui distinfo Makefile

sysutils/nginx-ui: Update to 2.2.1

ChangeLog: https://github.com/0xJacky/nginx-ui/releases/tag/v2.2.1
DeltaFile
+7-7sysutils/nginx-ui/distinfo
+2-3sysutils/nginx-ui/Makefile
+9-102 files

HardenedBSD/ports ab75e30x11/cinnamon pkg-plist Makefile, x11/cinnamon/files patch-files_usr_share_cinnamon_cinnamon-settings_modules_cs__backgrounds.py

x11/cinnamon: update to 6.4.13

Also fix loading webp backgrounds
DeltaFile
+192-193x11/cinnamon/pkg-plist
+29-28x11/cinnamon/Makefile
+11-0x11/cinnamon/files/patch-files_usr_share_cinnamon_cinnamon-settings_modules_cs__backgrounds.py
+3-3x11/cinnamon/distinfo
+235-2244 files

HardenedBSD/ports be4f690x11-fm/nemo pkg-plist Makefile

x11-fm/nemo: rearrange, add TRACKER option
DeltaFile
+31-31x11-fm/nemo/pkg-plist
+17-19x11-fm/nemo/Makefile
+1-1x11-fm/nemo/distinfo
+49-513 files

HardenedBSD/ports 47d2d02x11-wm/muffin Makefile distinfo

x11-wm/muffin: pull in upstream commit fixing qt crashes
DeltaFile
+4-0x11-wm/muffin/Makefile
+3-1x11-wm/muffin/distinfo
+7-12 files

HardenedBSD/ports 7fe173ax11/cinnamon-screensaver Makefile distinfo

x11/cinnamon-screensaver: update to 6.4.1
DeltaFile
+3-4x11/cinnamon-screensaver/Makefile
+3-3x11/cinnamon-screensaver/distinfo
+6-72 files

HardenedBSD/ports 716eb57sysutils/cinnamon-control-center distinfo Makefile

sysutils/cinnamon-control-center: update to 6.4.2
DeltaFile
+3-3sysutils/cinnamon-control-center/distinfo
+2-2sysutils/cinnamon-control-center/Makefile
+5-52 files

HardenedBSD/ports 72a70f1x11/cinnamon-session Makefile distinfo

x11/cinnamon-session: update to 6.4.2
DeltaFile
+8-10x11/cinnamon-session/Makefile
+3-3x11/cinnamon-session/distinfo
+11-132 files

HardenedBSD/ports 28c9d48security/vuxml/vuln 2025.xml

security/vuxml: Add png vulnerabilities

 * CVE-2025-65018
 * CVE-2025-64720
 * CVE-2025-64506
 * CVE-2025-64505

Reported by:    Stefan Grundmann <sg2342 at googlemail.com>
DeltaFile
+66-0security/vuxml/vuln/2025.xml
+66-01 files

HardenedBSD/src 56114d2sys/sys _types.h

max_align_t: apply alignof to 'long double' for long double alignment

(cherry picked from commit 39cad8402d19f361cb8d489a3a69ff94b643c6df)
DeltaFile
+1-1sys/sys/_types.h
+1-11 files

HardenedBSD/ports dc7448anet-mgmt/wifimgr Makefile distinfo

net-mgmt/wifimgr: Update 1.25 => 1.26

Changelog:
 - Updated man page to note that wifimgr is not part of FreeBSD but
   that it appeared at the time of FreeBSD-8.0.
 - Added Ukrainian translation, thanks to Dmitry Luhtionov
   <dmitryluhtionov at gmail.com>.
https://opal.com/src/wifimgr/

Remove unused dependencies, fix warning from portclippy.

PR:     291215 287173
DeltaFile
+3-5net-mgmt/wifimgr/Makefile
+3-3net-mgmt/wifimgr/distinfo
+1-0net-mgmt/wifimgr/pkg-plist
+7-83 files

HardenedBSD/ports 2e4d871devel/gitlab-runner distinfo Makefile

devel/gitlab-runner: update to 18.6.2

Include in addition a hotfix for:
Fix bash shell cleanup to support variable expansion in paths
https://gitlab.com/gitlab-org/gitlab-runner/-/merge_requests/5966

Changes:        https://gitlab.com/gitlab-org/gitlab-runner/-/releases
DeltaFile
+11-11devel/gitlab-runner/distinfo
+2-3devel/gitlab-runner/Makefile
+13-142 files

HardenedBSD/ports 3103179www/dooble distinfo Makefile

www/dooble: Update 2025.07.18 => 2025.11.25

Changelog:
https://github.com/textbrowser/dooble/releases/tag/2025.11.25

PR:     291217
DeltaFile
+3-3www/dooble/distinfo
+1-1www/dooble/Makefile
+4-42 files

HardenedBSD/src 6aaba75sys/sys _types.h

sys/_types.h: centralize __vm_offset_t and __vm_size_t definitions

Use __ptraddr_t to define __vm_offset_t and __size_t for __vm_size_t
rather than per-pointer-size definitions.

Reviewed by:    kib, markj
Effort:         CHERI upstreaming
Sponsored by:   Innovate UK
Differential Revision:  https://reviews.freebsd.org/D53818
DeltaFile
+3-4sys/sys/_types.h
+3-41 files

HardenedBSD/src 6ebbfe7sys/sys _types.h

sys/_types.h: add __intptr_t to __mbstate_t

Extend __mbstate_t to include an intptr_t to ensure it can hold a
pointer if required.

Reviewed by:    kib, markj
Effort:         CHERI upstreaming
Sponsored by:   Innovate UK
Differential Revision:  https://reviews.freebsd.org/D53822
DeltaFile
+1-0sys/sys/_types.h
+1-01 files

HardenedBSD/src 4e22cd3sys/sys _stdint.h _types.h

add types: (u)int64ptr_t

This type represents an integer value of at least 64 bits which is
capable of being cast to and from pointer types.  It is intended to
replace various spellings of (u)int64_t there the value is expected to
hold a pointer.  This is common in Linux code to allow 32-bit and 64-bit
structures to be the same and used other places including OpenZFS.  With
the introduction of CHERI this no longer works, but we need to preserve
the ABI for integer pointer targets.  Rather than adding ifdefs in every
case, we introduce a new type.

Reviewed by:    kib, markj
Effort:         CHERI upstreaming
Sponsored by:   Innovate UK
Differential Revision:  https://reviews.freebsd.org/D53823
DeltaFile
+16-0sys/sys/_stdint.h
+6-0sys/sys/_types.h
+22-02 files

HardenedBSD/src 96e05e2sys/sys _types.h

sys/_types.h: define __(u)int(f)ptr_t for CHERI

On pure-capability ABIs, uintptr_t and variants are capabilities and
defined to the new primative type __uintcap_t and variants.  This is
required to allow pointers (capabilities) to round trip through
uintptr_t as required by the C standard.

Reviewed by:    kib, markj
Effort:         CHERI upstreaming
Sponsored by:   Innovate UK
Differential Revision:  https://reviews.freebsd.org/D53819
DeltaFile
+6-1sys/sys/_types.h
+6-11 files

HardenedBSD/src 528e70asys/sys _types.h

sys/_types.h: add void * to __max_align_t

Add a pointer member to __max_align_t as pointers may have different
alignment requirements than long long or long double.

Reviewed by:    kib
Effort:         CHERI upstreaming
Sponsored by:   Innovate UK
Differential Revision:  https://reviews.freebsd.org/D53821
DeltaFile
+1-0sys/sys/_types.h
+1-01 files

HardenedBSD/src 85ab981sys/sys _types.h

sys/_types.h: define fallback __(u)intcap_t

__intcap_t and __uintcap_t are new primative types in CHERI-aware ABIs
that are used to define (u)intptr_t.  To allow coexistance of integer
pointers and hybrid code, define them to __(u)intptr_t when they are
not otherwise available.

Reviewed by:    kib, markj
Effort:         CHERI upstreaming
Sponsored by:   Innovate UK
Differential Revision:  https://reviews.freebsd.org/D53820
DeltaFile
+11-0sys/sys/_types.h
+11-01 files

HardenedBSD/src dca634dshare/man/man7 arch.7, sys/sys stddef.h _types.h

new type: ptraddr_t

ptraddr_t is an unsigned integer type that can hold the address of any
pointer.  It differes from uintptr_t in that it does not carry
provenance which is useful for CHERI in that it can disambigurate the
provenance of uintptr_t expressions.  It differes from size_t in that
some segmented architecture (not supported by FreeBSD) may have a size_t
that does not hold an address.

ptraddr_t is not yet standardized, but is currently proposed for
inclusion in C++2Y.

Prefer the compiler defined __PTRADDR_TYPE__ defintion where available
as this a new type and we don't need to worry about historical values.
Fall back to __size_t where unavailable.

Reviewed by:    kib, markj
Effort:         CHERI upstreaming
Sponsored by:   Innovate UK
Differential Revision:  https://reviews.freebsd.org/D53817
DeltaFile
+8-0sys/sys/stddef.h
+6-0sys/sys/_types.h
+3-2share/man/man7/arch.7
+17-23 files

HardenedBSD/ports 055ffa7security/boringssl distinfo Makefile

security/boringssl: update to the recent snapshot
DeltaFile
+3-3security/boringssl/distinfo
+1-1security/boringssl/Makefile
+4-42 files

HardenedBSD/ports 02ccd56games/openrct2 pkg-plist distinfo

games/openrct2: update to 0.4.29

Changelog:      https://github.com/OpenRCT2/OpenRCT2/releases/tag/v0.4.29
DeltaFile
+6-6games/openrct2/pkg-plist
+5-5games/openrct2/distinfo
+2-2games/openrct2/Makefile
+13-133 files

HardenedBSD/ports 84ca7c4editors/elementary-code Makefile distinfo, editors/elementary-code/files patch-plugins_meson.build patch-data_meson.build

editors/elementary-code: Update to 8.1.2

While here:
- Fix LICENSE
- Switch to USES=gettext-tools

Author's Note: spell plugin has been disabled. Because it depends of
gtkspell3, which seems unmaintained (no update since 2018).

Changelog:
- https://github.com/elementary/code/releases/tag/8.0.0
- https://github.com/elementary/code/releases/tag/8.1.0
- https://github.com/elementary/code/releases/tag/8.1.1
- https://github.com/elementary/code/releases/tag/8.1.2

PR:             290018
Reported by:    Olivier Duchateau <duchateau.olivier at gmail.com>
Approved by:    Miguel Gocobachi <miguel at gocobachi.dev>
DeltaFile
+7-11editors/elementary-code/Makefile
+11-0editors/elementary-code/files/patch-plugins_meson.build
+10-0editors/elementary-code/files/patch-data_meson.build
+3-3editors/elementary-code/distinfo
+2-2editors/elementary-code/pkg-plist
+33-165 files