HardenedBSD/src 3bb2bbfsys/netinet6 nd6_rtr.c, tests/sys/netpfil/ipfw log.sh

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+11-8tests/sys/netpfil/ipfw/log.sh
+1-1sys/netinet6/nd6_rtr.c
+1-1usr.bin/fortune/datfiles/freebsd-tips
+13-103 files

HardenedBSD/ports 6b5c03cdeskutils/xdgctl Makefile, misc/codex distinfo Makefile.crates

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+15-15misc/codex/distinfo
+27-0deskutils/xdgctl/Makefile
+6-6misc/codex/Makefile.crates
+9-3sysutils/appjail-devel/Makefile
+5-5sysutils/mackerel-agent/distinfo
+5-5misc/crush/distinfo
+67-3429 files not shown
+140-9035 files

HardenedBSD/src 00e0b7busr.bin/fortune/datfiles freebsd-tips

Revert "fortune: fix netstat tip"

This reverts commit 8e593a1f143203cace2e14bd6629a8ebdf9b47dc. I was
totally wrong, so just revert and get on with it.

Sponsored by:           Netflix
DeltaFile
+1-1usr.bin/fortune/datfiles/freebsd-tips
+1-11 files

HardenedBSD/ports 09b4bf1sysutils/py-director distinfo Makefile

sysutils/py-director: Update to 0.16.1

ChangeLog: https://github.com/DtxdF/director/releases/tag/v0.16.1
DeltaFile
+3-3sysutils/py-director/distinfo
+1-1sysutils/py-director/Makefile
+4-42 files

HardenedBSD/ports 3e2a28dsysutils/py-overlord distinfo Makefile

sysutils/py-overlord: Update to 0.23.0

ChangeLog: https://github.com/DtxdF/overlord/releases/tag/v0.23.0
DeltaFile
+3-3sysutils/py-overlord/distinfo
+1-1sysutils/py-overlord/Makefile
+4-42 files

HardenedBSD/ports ac84580sysutils/appjail-devel Makefile distinfo

sysutils/appjail-devel: Update to 4.9.0.20260218

* Add X11 option.

ChangeLog:
https://github.com/DtxdF/AppJail/commits/39e97ceb53d32e9808cd0fcb1cdcb357120518df/
DeltaFile
+9-3sysutils/appjail-devel/Makefile
+3-3sysutils/appjail-devel/distinfo
+12-62 files

HardenedBSD/ports 31f46adsysutils/xclipsync distinfo Makefile

sysutils/xclipsync: Update to 0.1.3

ChangeLog: https://github.com/DtxdF/xclipsync/releases/tag/v0.1.3
DeltaFile
+3-3sysutils/xclipsync/distinfo
+1-1sysutils/xclipsync/Makefile
+4-42 files

HardenedBSD/ports bb9dc96sysutils/appjail Makefile distinfo

sysutils/appjail: Update to 4.9.0

* Add X11 option.

ChangeLog: https://github.com/DtxdF/AppJail/releases/tag/v4.9.0
DeltaFile
+8-2sysutils/appjail/Makefile
+3-3sysutils/appjail/distinfo
+11-52 files

HardenedBSD/ports 8d599e1misc/crush distinfo Makefile

misc/crush: Update to 0.43.1

Changelog: https://github.com/charmbracelet/crush/releases/tag/v0.43.1

Reported by:    GitHub (watch releases)
DeltaFile
+5-5misc/crush/distinfo
+1-1misc/crush/Makefile
+6-62 files

HardenedBSD/ports a02fa38misc/codex distinfo Makefile.crates, misc/codex/files patch-codex-rs_core_tests_suite_view__image.rs

misc/codex: Update to 0.104.0

Changelog:
- https://github.com/openai/codex/releases/tag/rust-v0.102.0
- https://github.com/openai/codex/releases/tag/rust-v0.103.0
- https://github.com/openai/codex/releases/tag/rust-v0.104.0

Reported by:    GitHub (watch releases)
DeltaFile
+15-15misc/codex/distinfo
+6-6misc/codex/Makefile.crates
+3-1misc/codex/Makefile
+2-2misc/codex/files/patch-codex-rs_core_tests_suite_view__image.rs
+26-244 files

HardenedBSD/src 59eafd8sys/netinet6 nd6_rtr.c

netinet6: spell Identifiers in the comment
DeltaFile
+1-1sys/netinet6/nd6_rtr.c
+1-11 files

HardenedBSD/ports ef6d1e8ports-mgmt/poudriere-devel distinfo Makefile

ports-mgmt/poudriere-devel: Update to 3.3.0-2517-g1ee69405b

Changes:
 - bulk shlib tracking: Don't consider base libprivate*.so as missing.
 - bulk shlib tracking: Remove the 'misses all libraries' case;
   always print a specific library that is missing.
DeltaFile
+3-3ports-mgmt/poudriere-devel/distinfo
+2-2ports-mgmt/poudriere-devel/Makefile
+5-52 files

HardenedBSD/src 38edf96tests/sys/netpfil/ipfw log.sh

tests/ipfw: fix log:bpf test flakyness

There were several problems:

o Using 'netstat -B' is not a reliable way to make sure that all tcpdumps
  have attached to bpf(4).  The problem is that tcpdump (via libpcap) does
  several ioctl(2)s after the attach including two BIOCSETF.  Each of them
  flushes the input buffer.  So we can see tcpdump attached in 'netstat -B'
  and start sending packets and the packet will be captured by bpf(4)
  before BIOCSETF and freed and tcpdump won't read anything.  Instead of
  using netstat(1), use ps(1) and make sure each tcpdump is blocked on the
  "bpf" wait channel, which guarantees it is done with ioctl(2)s and is now
  blocked in read(2).
o Using 'nc -w 0' sets timeout not only on the connect(2) (as documented)
  but also on poll(2), which is not documented.  There is a race in shell
  that will make stdin not yet filled by 'echo foo' when nc(1) does
  poll(2).  With zero timeout, this poll(2) will immediately return and nc
  will exit.
o The waiting loop had two errors: using wrong variable name as well as

    [7 lines not shown]
DeltaFile
+11-8tests/sys/netpfil/ipfw/log.sh
+11-81 files

HardenedBSD/ports e72134ddevel/oci-cli distinfo Makefile

devel/oci-cli: Update 3.72.1 => 3.74.1

Changelogs:
https://github.com/oracle/oci-cli/releases/tag/v3.73.0
https://github.com/oracle/oci-cli/releases/tag/v3.73.1
https://github.com/oracle/oci-cli/releases/tag/v3.73.2
https://github.com/oracle/oci-cli/releases/tag/v3.74.0
https://github.com/oracle/oci-cli/releases/tag/v3.74.1

PR:     293238
DeltaFile
+3-3devel/oci-cli/distinfo
+2-2devel/oci-cli/Makefile
+5-52 files

HardenedBSD/ports f87c4e7devel/py-oci distinfo Makefile

devel/py-oci: Update 2.165.1 => 2.167.2

Changelogs:
https://github.com/oracle/oci-python-sdk/releases/tag/v2.166.0
https://github.com/oracle/oci-python-sdk/releases/tag/v2.167.0
https://github.com/oracle/oci-python-sdk/releases/tag/v2.167.1
https://github.com/oracle/oci-python-sdk/releases/tag/v2.167.2

PR:     293238
DeltaFile
+3-3devel/py-oci/distinfo
+1-1devel/py-oci/Makefile
+4-42 files

HardenedBSD/ports 6ab2c14graphics/rubygem-image_processing Makefile

graphics/rubygem-image_processing: Refresh mini_magick dependency.

Approved by:    sunpoet (maintainer)
DeltaFile
+2-1graphics/rubygem-image_processing/Makefile
+2-11 files

HardenedBSD/ports b26ea95security/boringssl Makefile distinfo

security/boringssl: fix build on arm64 by applying a vendor's fix

Bump PORTREVISION.

Reported by:    pkg-fallout
Tested by:      fluffy

Sponsored by:   tipi.work
DeltaFile
+4-0security/boringssl/Makefile
+3-1security/boringssl/distinfo
+7-12 files

HardenedBSD/src 93cf26esbin/conscontrol conscontrol.8, sys/net if_gre.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+407-66sys/net/if_gre.c
+173-0tests/sys/netlink/test_rtnl_gre.c
+23-0sys/netlink/route/interface.h
+3-1sys/netpfil/pf/pf.c
+1-1sbin/conscontrol/conscontrol.8
+1-1usr.bin/man/manpath.1
+608-697 files not shown
+616-7313 files

HardenedBSD/ports 14d95d2devel/small pkg-plist, textproc/krep Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+127-8www/matomo/pkg-plist
+41-0devel/small/pkg-plist
+34-0textproc/krep/files/patch-Makefile
+26-0textproc/krep/Makefile
+15-9x11/xwayland-satellite/distinfo
+10-10www/matomo/Makefile
+253-2741 files not shown
+425-11147 files

HardenedBSD/ports 52beb62textproc/yamlfmt distinfo Makefile

textproc/yamlfmt: Update to 0.21.0

Changes:        https://github.com/google/yamlfmt/releases/tag/v0.21.0
DeltaFile
+5-5textproc/yamlfmt/distinfo
+1-2textproc/yamlfmt/Makefile
+6-72 files

HardenedBSD/ports 3557216sysutils/mackerel-agent distinfo Makefile

sysutils/mackerel-agent: Update to 0.86.1

Changes:        https://github.com/mackerelio/mackerel-agent/releases/tag/v0.86.1
DeltaFile
+5-5sysutils/mackerel-agent/distinfo
+1-2sysutils/mackerel-agent/Makefile
+6-72 files

HardenedBSD/ports 314eecfdevel/lazygit distinfo Makefile

devel/lazygit: Update to 0.59.0

Changes:        https://github.com/jesseduffield/lazygit/releases/tag/v0.59.0
DeltaFile
+5-5devel/lazygit/distinfo
+1-2devel/lazygit/Makefile
+6-72 files

HardenedBSD/ports a0c7b8cdeskutils Makefile

deskutils/xdgctl: hook to the build
DeltaFile
+1-0deskutils/Makefile
+1-01 files

HardenedBSD/ports ebc3320deskutils/xdgctl Makefile distinfo

deskutils/xdgctl: Add new port

TUI for managing XDG default applications.

PR:             293229
DeltaFile
+27-0deskutils/xdgctl/Makefile
+3-0deskutils/xdgctl/distinfo
+1-0deskutils/xdgctl/pkg-descr
+31-03 files

HardenedBSD/ports 39e0536dns/unbound/files patch-libunbound_python_libunbound.i

HBSD: Bring in candidate patch to fix dns/unbound

This patch fixes the build of dns/unbound. We enable python support for
unbound by default, which is why we're hitting this.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
Obtained-from:  https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292625
DeltaFile
+11-0dns/unbound/files/patch-libunbound_python_libunbound.i
+11-01 files

HardenedBSD/ports 3a7c49cgraphics/mesa-devel distinfo Makefile

graphics/mesa-devel: update to 26.0.b.1382

Changes:        https://gitlab.freedesktop.org/mesa/mesa/-/compare/b651fd90d2d...7899854e626
DeltaFile
+3-3graphics/mesa-devel/distinfo
+2-2graphics/mesa-devel/Makefile
+5-52 files

HardenedBSD/ports 2ded9abemulators/rpcs3 distinfo Makefile

emulators/rpcs3: update to 0.0.39.18797

Changes:        https://github.com/RPCS3/rpcs3/compare/7cfe96a1d1...2064bd87e3
DeltaFile
+7-7emulators/rpcs3/distinfo
+4-4emulators/rpcs3/Makefile
+11-112 files

HardenedBSD/ports 19543d2games/veloren-weekly distinfo Makefile

games/veloren-weekly: update to s20260218

Changes:        https://gitlab.com/veloren/veloren/-/compare/d82a4a6cf1...bba0ea5ca8
DeltaFile
+3-3games/veloren-weekly/distinfo
+2-2games/veloren-weekly/Makefile
+5-52 files

HardenedBSD/ports 06d0f75x11/xwayland-satellite distinfo Makefile.crates

x11/xwayland-satellite: update to 0.8.1

Changes:        https://github.com/Supreeeme/xwayland-satellite/releases/tag/v0.8.1
Reported by:    GitHub (watch releases)
DeltaFile
+15-9x11/xwayland-satellite/distinfo
+6-3x11/xwayland-satellite/Makefile.crates
+1-2x11/xwayland-satellite/Makefile
+22-143 files

HardenedBSD/ports a945207www/R-cran-httr distinfo Makefile

www/R-cran-httr: Update to 1.4.8

Reported by:    portscout
DeltaFile
+3-3www/R-cran-httr/distinfo
+2-2www/R-cran-httr/Makefile
+5-52 files