HardenedBSD/src e038f30sys/conf files.powerpc, sys/dev/dpaa fman_port_var.h fman_port_tx.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+18-630sys/dev/dpaa/fman_port.c
+398-0sys/dev/dpaa/fman_port_rx.c
+347-0sys/dev/dpaa/fman_port_tx.c
+85-0sys/dev/dpaa/fman_port_var.h
+1-1sys/powerpc/include/slb.h
+2-0sys/conf/files.powerpc
+851-6316 files

HardenedBSD/src b9c522bsys/dev/e1000 e1000_82571.c e1000_mac.c, sys/dev/sound/pci hdspe-pcm.c

Merge remote-tracking branch 'rad/hardened/15-stable/main' into hardened/15-stable/pledge
DeltaFile
+137-84sys/dev/e1000/e1000_phy.c
+128-18sys/dev/e1000/e1000_ich8lan.c
+124-2sys/dev/e1000/e1000_i210.c
+54-46sys/dev/e1000/e1000_mac.c
+72-24sys/dev/sound/pci/hdspe-pcm.c
+63-5sys/dev/e1000/e1000_82571.c
+578-17923 files not shown
+724-23729 files

HardenedBSD/src bf36bb6sys/conf files.powerpc, sys/dev/dpaa fman_port_var.h fman_port_tx.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+18-630sys/dev/dpaa/fman_port.c
+398-0sys/dev/dpaa/fman_port_rx.c
+347-0sys/dev/dpaa/fman_port_tx.c
+85-0sys/dev/dpaa/fman_port_var.h
+1-1sys/powerpc/include/slb.h
+2-0sys/conf/files.powerpc
+851-6316 files

HardenedBSD/src ffc778fsys/dev/e1000 e1000_82571.c e1000_mac.c, sys/dev/sound/pci hdspe-pcm.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+137-84sys/dev/e1000/e1000_phy.c
+128-18sys/dev/e1000/e1000_ich8lan.c
+124-2sys/dev/e1000/e1000_i210.c
+54-46sys/dev/e1000/e1000_mac.c
+72-24sys/dev/sound/pci/hdspe-pcm.c
+63-5sys/dev/e1000/e1000_82571.c
+578-17923 files not shown
+724-23729 files

HardenedBSD/ports d217595editors/emacs Makefile, games/lwjgl3 distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+52-0misc/codex/files/patch-codex-rs_core_src_tools_runtimes_apply_patch.rs
+7-7games/lwjgl3/distinfo
+8-3editors/emacs/Makefile
+5-5sysutils/zpool-set/distinfo
+5-5sysutils/zfs-set/distinfo
+5-5sysutils/zfs-allow/distinfo
+82-2542 files not shown
+170-9648 files

HardenedBSD/ports 71943ebwww/nginx-acme Makefile distinfo, www/nginx-devel version.mk Makefile

www/nginx-devel: Update to 1.31.4

*) Feature: the "proxy_protocol" directive in the stream and mail
   modules now supports the PROXY protocol version 2.

*) Change: now HTTP/2 and gRPC requests to backends are always sent with
   the ":authority" pseudo-header, and HTTP/1.1 requests - with the
   "Host" header.

*) Bugfix: a segmentation fault might occur in a worker process if the
   "select" method was used.

*) Bugfix: incomplete gRPC responses with a non-zero "Content-Length"
   header line are now treated as malformed.

*) Bugfix: in binary compatibility with third-party modules using script
   codes; the bug had appeared in 1.31.3.

*) Bugfix: in the ngx_http_perl_module.

    [7 lines not shown]
DeltaFile
+2-4www/nginx-devel/Makefile
+3-3www/nginx-devel/distinfo
+3-3www/nginx-acme/distinfo
+1-1www/nginx-devel/version.mk
+1-0www/nginx-acme/Makefile
+10-115 files

HardenedBSD/ports 446dfd5textproc/tgrep Makefile.crates Makefile

textproc/tgrep: Update to 1.0.2

Changelog: https://github.com/microsoft/tgrep/releases/tag/v1.0.2

Reported by:    GitHub (watch releases)
DeltaFile
+5-3textproc/tgrep/distinfo
+1-1textproc/tgrep/Makefile
+1-0textproc/tgrep/Makefile.crates
+7-43 files

HardenedBSD/ports f9566b8editors/emacs Makefile

editors/emacs: Fix native compilation with canna flavor

isearch-ext.el is a file that comes with the canna patch.  Because it is
preloaded, it was native-compiled during the bootstrap stage.  This
caused the native-lisp directory to be created, which in turn meant AOT
for all other elisp was silently skipped.

Fix this by adding isearch-ext to native-comp-bootstrap-deny-list, so it
is native-compiled later along with the rest of the elisp.

Sponsored by:   The FreeBSD Foundation
DeltaFile
+5-0editors/emacs/Makefile
+5-01 files

HardenedBSD/ports f33b08eMk/Uses emacs.mk, editors/emacs Makefile distinfo

editors/emacs: Update to new major release, 31.1

Announcement:   https://lists.gnu.org/archive/html/info-gnu-emacs/2026-08/msg00004.html
Sponsored by:   The FreeBSD Foundation
DeltaFile
+5-5editors/emacs/distinfo
+3-3editors/emacs/Makefile
+3-3Mk/Uses/emacs.mk
+11-113 files

HardenedBSD/ports 43acb18x11/py-nwg-displays Makefile distinfo

x11/py-nwg-displays: Update to 0.4.4

Changelog: https://github.com/nwg-piotr/nwg-displays/releases/tag/v0.4.4

Reported by:    GitHub (watch releases)
DeltaFile
+3-3x11/py-nwg-displays/distinfo
+1-1x11/py-nwg-displays/Makefile
+4-42 files

HardenedBSD/ports 5bfc1e0www/immich Makefile

www/immich: Fix the built-in database backup

immich looks for pg_dump in a path that does not exist, and the port did not
depend on a PostgreSQL client at all.  The nightly backup job therefore failed
with ENOENT on every installation while the web interface reported the feature
as enabled.  The version range follows the check in the service itself,
PostgreSQL 14 to 18.

Sponsored by:   Netzkommune GmbH
DeltaFile
+7-1www/immich/Makefile
+7-11 files

HardenedBSD/ports 79c3aebcomms/emacs-eat Makefile, databases/pg_auto_failover Makefile

Update patmaddox maintainer email

Approved by:     dch (mentor implicit)
Closes:          https://github.com/freebsd/freebsd-ports/pull/566
DeltaFile
+1-1databases/py-dbt-snowflake/Makefile
+1-1databases/py-dbt-duckdb/Makefile
+1-1databases/py-dbt-core/Makefile
+1-1databases/pg_auto_failover/Makefile
+1-1databases/pg_auto_failover-devel/Makefile
+1-1comms/emacs-eat/Makefile
+6-610 files not shown
+16-1616 files

HardenedBSD/src 9171bb4sys/powerpc/include slb.h

powerpc/pmap: Fix SLB VSID mask

Bits [0:1] map to "B", the "Segment size selector", and are not part of
the VSID.  Correct this mask.
DeltaFile
+1-1sys/powerpc/include/slb.h
+1-11 files

HardenedBSD/src 5d884fcsys/conf files.powerpc, sys/dev/dpaa fman_port_var.h fman_port_tx.c

dpaa: Split FMan port driver into distinct TX/RX

There are several port functions that are only for one type or the
other, so they don't make sense to be together.  Splitting these up also
simplifies adding support for the Offline/Host Command ports.
DeltaFile
+18-630sys/dev/dpaa/fman_port.c
+398-0sys/dev/dpaa/fman_port_rx.c
+347-0sys/dev/dpaa/fman_port_tx.c
+85-0sys/dev/dpaa/fman_port_var.h
+2-0sys/conf/files.powerpc
+850-6305 files

HardenedBSD/src af0e83dsbin/restore symtab.c

Fix transposed arguments in call to calloc(). Reported by GCC 15 warning.

No functional change intended.

Submitted by: Pedro Giffuni <pfg at freebsd.org>

(cherry picked from commit 2cefae4cf34e7d39fc3b27358d7d66a96b3b0056)
DeltaFile
+1-1sbin/restore/symtab.c
+1-11 files

HardenedBSD/ports d31d0a9security/wazuh-manager distinfo

security/wazuh-manager: Fix fetch

Reported by:    pkg-fallout
DeltaFile
+1-1security/wazuh-manager/distinfo
+1-11 files

HardenedBSD/ports 7085e0email/py-resend Makefile distinfo

mail/py-resend: Update to 2.40.1

Changelog: https://github.com/resend/resend-python/releases/tag/v2.40.0

Reported by:    Repology
DeltaFile
+3-3mail/py-resend/distinfo
+1-1mail/py-resend/Makefile
+4-42 files

HardenedBSD/ports 3cb797dsysutils/zpool-set Makefile distinfo

sysutils/zpool-set: Update to 1.0.1
DeltaFile
+5-5sysutils/zpool-set/distinfo
+1-1sysutils/zpool-set/Makefile
+6-62 files

HardenedBSD/ports 09b384dsysutils/zfs-set Makefile distinfo

sysutils/zfs-set: Update to 1.0.1
DeltaFile
+5-5sysutils/zfs-set/distinfo
+1-1sysutils/zfs-set/Makefile
+6-62 files

HardenedBSD/ports 174aa5esysutils/zfs-allow Makefile distinfo

sysutils/zfs-allow: Update to 1.0.2
DeltaFile
+5-5sysutils/zfs-allow/distinfo
+1-1sysutils/zfs-allow/Makefile
+6-62 files

HardenedBSD/ports 2a1ec50sysutils/facl Makefile distinfo

sysutils/facl: Update to 1.4.1
DeltaFile
+5-5sysutils/facl/distinfo
+1-1sysutils/facl/Makefile
+6-62 files

HardenedBSD/src 0bc6905sys/dev/sound/pci hdspe.h hdspe.c

snd_hdspe: Avoid allocation in the interrupt handler

Cache PCM children and drain interrupt callbacks before detach.
Allocate the parent softc by its actual size.

Reviewed by:    br
Differential Revision:  https://reviews.freebsd.org/D58370

(cherry picked from commit 4c1004c00ff250f2a9e5bff5ae90c25d6b70feb3)
DeltaFile
+72-24sys/dev/sound/pci/hdspe-pcm.c
+13-13sys/dev/sound/pci/hdspe.c
+9-0sys/dev/sound/pci/hdspe.h
+94-373 files

HardenedBSD/ports 87d2ba7games/lwjgl3 Makefile distinfo

games/lwjgl3: Update 3.4.2 => 3.4.3

Changelog:
https://github.com/LWJGL/lwjgl3/releases/tag/3.4.3

Sponsored by:   UNIS Labs
DeltaFile
+7-7games/lwjgl3/distinfo
+5-5games/lwjgl3/Makefile
+12-122 files

HardenedBSD/src b5f4665sys/dev/ixgbe ixgbe_phy.c

ixgbe: Avoid a signed shift while assembling the PHY ID

The PHY identifier word is promoted to signed int when the cast is
applied after the shift.  Cast the 16-bit register value first so
identifiers with their high bit set are assembled as unsigned data.

(cherry picked from commit f4bf1da7bac80cbe3ec862f395c22a3c5d176312)
DeltaFile
+1-1sys/dev/ixgbe/ixgbe_phy.c
+1-11 files

HardenedBSD/src 4cfa058sys/dev/igc igc_phy.c

igc: Avoid a signed shift while assembling the PHY ID

The PHY identifier word is promoted to signed int when the cast is
applied after the shift.  Cast the 16-bit register value first so
identifiers with their high bit set are assembled as unsigned data.

(cherry picked from commit f5fd839fe688181e57171850ce51e4dec71e62fd)
DeltaFile
+1-1sys/dev/igc/igc_phy.c
+1-11 files

HardenedBSD/src 2a21a77sys/dev/e1000 e1000_phy.c e1000_ich8lan.c

e1000: Avoid signed shifts while assembling PHY IDs

PHY identifier words are promoted to signed int when the cast is applied
after the shift.  Cast each 16-bit register value first so identifiers
with their high bit set are assembled as unsigned data.

(cherry picked from commit 13a7470096567480676e24545b3c1d6404f3f2ec)
DeltaFile
+1-1sys/dev/e1000/e1000_phy.c
+1-1sys/dev/e1000/e1000_ich8lan.c
+1-1sys/dev/e1000/e1000_82571.c
+3-33 files

HardenedBSD/src 8958751sys/dev/igc if_igc.c

igc: Export EEE Low Power Idle counters

The driver already accumulates the clear-on-read transmit and receive
LPI event counters.  Expose the 64-bit totals under the per-device eee
sysctl node.

(cherry picked from commit 13d78e4b9d0a27128319a1241f00f7ab9aa864bb)
DeltaFile
+10-2sys/dev/igc/if_igc.c
+10-21 files

HardenedBSD/src 0278a71sys/dev/ixl ixl_pf_main.c

ixl: Avoid a signed PHY capability shift

The PHY capability display examines all 32 bits of the firmware bitmap.
Use an unsigned value so examining bit 31 does not shift a signed
integer into its sign bit.

(cherry picked from commit f7427f890c7f34d0842a35eb9df814adad11a95a)
DeltaFile
+1-1sys/dev/ixl/ixl_pf_main.c
+1-11 files

HardenedBSD/src 07deb66sys/dev/e1000 e1000_82571.c

e1000: Avoid a signed manageability VLAN bitmap shift

A manageability VLAN can select bit 31 of its VFTA register.  Use an
unsigned value when constructing the register mask.

(cherry picked from commit 392fbdcf2232f12cb973d00ae931740c72d970c6)
DeltaFile
+1-1sys/dev/e1000/e1000_82571.c
+1-11 files

HardenedBSD/src 43c32e3sys/dev/ixgbe ixgbe_mbx.c ixgbe_82598.c

ixgbe: Use unsigned register bitmap shifts

VLAN, VMDq, and VF reset bit indices can reach 31.  Use unsigned
values when constructing their 32-bit register masks so the shifts do
not operate on signed integers.

(cherry picked from commit bf6feffef6c16559333048859b24547acea3dba5)
DeltaFile
+9-9sys/dev/ixgbe/ixgbe_common.c
+3-3sys/dev/ixgbe/ixgbe_82598.c
+2-2sys/dev/ixgbe/ixgbe_mbx.c
+14-143 files