HardenedBSD/src e39d724contrib/jemalloc/src jemalloc.c, share/man/man4 igc.4

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+77-117usr.sbin/cxgbetool/cxgbetool.c
+56-1sys/dev/usb/storage/umass.c
+25-2share/mk/bsd.progs.mk
+12-1usr.sbin/freebsd-update/freebsd-update.8
+4-4share/man/man4/igc.4
+3-0contrib/jemalloc/src/jemalloc.c
+177-1252 files not shown
+179-1268 files

HardenedBSD/src ebf0faccontrib/jemalloc/src jemalloc.c, share/man/man4 igc.4

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+77-117usr.sbin/cxgbetool/cxgbetool.c
+56-1sys/dev/usb/storage/umass.c
+25-2share/mk/bsd.progs.mk
+12-1usr.sbin/freebsd-update/freebsd-update.8
+4-4share/man/man4/igc.4
+3-0contrib/jemalloc/src/jemalloc.c
+177-1252 files not shown
+179-1268 files

HardenedBSD/src d3c2623contrib/llvm-project/libcxx/include/__type_traits decay.h add_lvalue_reference.h

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+1-1contrib/llvm-project/libcxx/include/__type_traits/decay.h
+1-1contrib/llvm-project/libcxx/include/__type_traits/add_lvalue_reference.h
+1-1contrib/llvm-project/libcxx/include/__type_traits/add_pointer.h
+1-1contrib/llvm-project/libcxx/include/__type_traits/add_rvalue_reference.h
+1-1contrib/llvm-project/libcxx/include/__type_traits/remove_all_extents.h
+1-1contrib/llvm-project/libcxx/include/__type_traits/remove_extent.h
+6-66 files

HardenedBSD/ports 64cfc17Mk/Uses certs.mk, audio/ncspot distinfo Makefile.crates

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+117-73audio/ncspot/distinfo
+57-35audio/ncspot/Makefile.crates
+54-0Mk/Uses/certs.mk
+9-9deskutils/syncthingtray/distinfo
+12-3multimedia/gstreamer1-plugins-good/files/patch-sys_v4l2_gstv4l2object.c
+6-6misc/github-copilot-cli/Makefile
+255-12643 files not shown
+373-22049 files

HardenedBSD/ports 73616fdcad Makefile, deskutils Makefile

*/Makefile: Sort SUBDIRs
DeltaFile
+1-1deskutils/Makefile
+1-1textproc/Makefile
+1-1cad/Makefile
+3-33 files

HardenedBSD/ports 5bd8e72Mk/Uses certs.mk

Mk/Uses: Minor correction in comment
DeltaFile
+1-1Mk/Uses/certs.mk
+1-11 files

HardenedBSD/ports 1dc950asecurity/pygost Makefile

security/pygost: update MASTER_SITES and WWW

Switch from cypherpunks.ru to cypherpunks.su as the former is no more.

PR:     291231
DeltaFile
+2-2security/pygost/Makefile
+2-21 files

HardenedBSD/ports 7652e4ddevel/pyderasn Makefile

devel/pyderasn: update WWW

Followup to previous commit: update WWW too.

PR:     291230
DeltaFile
+1-1devel/pyderasn/Makefile
+1-11 files

HardenedBSD/src 6560ee9share/man/man4 igc.4

igc.4: Describe better

MFC after:      3 days
DeltaFile
+4-4share/man/man4/igc.4
+4-41 files

HardenedBSD/ports fe7619cdeskutils/syncthingtray distinfo Makefile

deskutils/syncthingtray: Update 2.0.7 => 2.0.9

Changelogs:
https://github.com/Martchus/syncthingtray/releases/tag/v2.0.8
https://github.com/Martchus/syncthingtray/releases/tag/v2.0.9

PR:     293688
DeltaFile
+9-9deskutils/syncthingtray/distinfo
+4-5deskutils/syncthingtray/Makefile
+13-142 files

HardenedBSD/ports e03a2d7devel/pyderasn Makefile

devel/pyderasn: update MASTER_SITES

Switch from cypherpunks.ru to cypherpunks.su as the former is no more.

PR:     291230
DeltaFile
+1-1devel/pyderasn/Makefile
+1-11 files

HardenedBSD/ports f40485cdeskutils/qownnotes Makefile

deskutils/qownnotes: reset MAINTAINER

The port is de facto maintained by danfe@ for several years.
DeltaFile
+1-1deskutils/qownnotes/Makefile
+1-11 files

HardenedBSD/src 87c6ec1usr.sbin/cxgbetool cxgbetool.c

cxgbetool: create one backend routine for all the loadX cmds

They are all doing almost the same thing so it makes sense to have one
common routine.  The new routine supports non-regular files too.  eg.
 # cxgbetool chnex0 loadfw <(fetch -qo - http://srv/t7fw.bin)

MFC after:      1 week
Sponsored by:   Chelsio Communications
Reviewed by:    jhb
Differential Revision:  https://reviews.freebsd.org/D55747
DeltaFile
+77-117usr.sbin/cxgbetool/cxgbetool.c
+77-1171 files

HardenedBSD/ports 1d193bbsecurity/snowflake-tor Makefile

HBSD: Potentially fix security/snowflake-tor

We build golang binaries as PIEs by default. FreeBSD had specifically
added a -static flag, which is currently mutually exclusive with PIE.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+1-1security/snowflake-tor/Makefile
+1-11 files

HardenedBSD/ports 9e512c1multimedia/kamoso Makefile

multimedia/kamoso: add missing dependencies
DeltaFile
+4-1multimedia/kamoso/Makefile
+4-11 files

HardenedBSD/ports 89d99c8multimedia/gstreamer1-plugins-good/files patch-sys_v4l2_gstv4l2object.c, multimedia/gstreamer1-plugins-v4l2 Makefile

multimedia/gstreamer1-plugins-v4l2: fix runtime error

Restore lost patch.

PR:             236673
DeltaFile
+12-3multimedia/gstreamer1-plugins-good/files/patch-sys_v4l2_gstv4l2object.c
+1-1multimedia/gstreamer1-plugins-v4l2/Makefile
+13-42 files

HardenedBSD/ports 3ad4a58net-mgmt/icingaweb2-module-grafana Makefile distinfo

net-mgmt/icingaweb2-module-grafana: Update 3.1.2 => 3.1.3

Changelog:
https://github.com/NETWAYS/icingaweb2-module-grafana/releases/tag/v3.1.3

Replace RM in do-install with EXTRACT_AFTER_ARGS.
Remove unnecessary MKDIR in do-install.

PR:     293689
DeltaFile
+4-3net-mgmt/icingaweb2-module-grafana/Makefile
+3-3net-mgmt/icingaweb2-module-grafana/distinfo
+7-62 files

HardenedBSD/ports 0455004misc/nanocoder Makefile

misc/nanocoder: Add USES=certs:fetch

... since some users report that this is required, ex. in bug#293676
DeltaFile
+2-2misc/nanocoder/Makefile
+2-21 files

HardenedBSD/ports d43f1damisc/github-copilot-language-server Makefile

misc/github-copilot-language-server: Add USES=certs:fetch

... since some users report that this is required, ex. in bug#293676
DeltaFile
+5-5misc/github-copilot-language-server/Makefile
+5-51 files

HardenedBSD/ports 0a452bfmisc/grok-cli Makefile

misc/grok-cli: Add USES=certs:fetch

... since some users report that this is required, ex. in bug#293676
DeltaFile
+2-2misc/grok-cli/Makefile
+2-21 files

HardenedBSD/ports d6b1c6amisc/claude-code Makefile

misc/claude-code: Add USES=certs:fetch

... since some users report that this is required, ex. in bug#293676
DeltaFile
+2-2misc/claude-code/Makefile
+2-21 files

HardenedBSD/ports bccac39Tools/scripts npmjs-fetch-with-dependencies.sh

Tools/scripts: Use CA certificates in Tools/scripts/npmjs-fetch-with-dependencies.sh
DeltaFile
+9-1Tools/scripts/npmjs-fetch-with-dependencies.sh
+9-11 files

HardenedBSD/ports 60817c5Mk/Uses certs.mk

Mk/Uses: Add certs.mk to handle dependency on security/ca_root_nss

... as USES=certs:{phase} instead of reciting the whole dependency.

Around one hundred ports depend on security/ca_root_nss.
DeltaFile
+54-0Mk/Uses/certs.mk
+54-01 files

HardenedBSD/ports 1fed521misc/github-copilot-cli Makefile

misc/github-copilot-cli: Add USES=certs:fetch

... since some users report that this is required, ex. in bug#293676
DeltaFile
+6-6misc/github-copilot-cli/Makefile
+6-61 files

HardenedBSD/ports b5694e0www/py-yt-dlp-ejs Makefile

www/py-yt-dlp-ejs: Add USES=certs:fetch

npm requires this for some users/systems and not for others.
It's not clear what the differentiating factor is.
See details in the bug report.

PR:             268638
Reported by:    James TD Smith
DeltaFile
+2-2www/py-yt-dlp-ejs/Makefile
+2-21 files

HardenedBSD/ports f999339textproc/ctpp2 Makefile

textproc/ctpp2: update MASTER_SITES and WWW

The project website is from time to time unreachable
and the source archive is not accessible anymore which
blocks the build process.

Create an alternate MASTER_SITES archive and update the
WWW to point to the archive.org backup of the website.
DeltaFile
+2-2textproc/ctpp2/Makefile
+2-21 files

HardenedBSD/ports f24f05btextproc/coccigrep distinfo Makefile

textproc/coccigrep: update 1.20 -> 1.21

Changelog: https://github.com/regit/coccigrep/releases/tag/v1.21

Major changes: fixes compatibility with Python 3.12
DeltaFile
+3-3textproc/coccigrep/distinfo
+1-2textproc/coccigrep/Makefile
+4-52 files

HardenedBSD/ports 2ccc7c4www/fmd-server Makefile

www/fmd-server: add NO_PACKAGE as pnpm downloads files during build

To be able to build a package the pnpm cache needs to be turned
into a distfile.
DeltaFile
+2-0www/fmd-server/Makefile
+2-01 files

HardenedBSD/ports 6f10260sysutils/podman-suite Makefile

sysutils/podman-suite: bump PORTVERSION after components update

PR:             293609
Approved by:    dfr (maintainer)

Sponsored by:   tipi.work
DeltaFile
+1-1sysutils/podman-suite/Makefile
+1-11 files

HardenedBSD/ports 03b8a7esysutils/skopeo distinfo Makefile

sysutils/skopeo: update: 1.21.0 -> 1.22.0

PR:             293609
Approved by:    dfr (maintainer)

Sponsored by:   tipi.work
DeltaFile
+3-3sysutils/skopeo/distinfo
+1-2sysutils/skopeo/Makefile
+4-52 files