HardenedBSD/ports 0fce4f7devel/gitaly distinfo, net-im/teams distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+13-13devel/gitaly/distinfo
+6-6www/gitlab/distinfo
+5-5net-im/teams/distinfo
+5-5net/gitlab-agent/distinfo
+5-5www/gitlab-pages/distinfo
+5-5www/gitlab-workhorse/distinfo
+39-396 files not shown
+48-4912 files

HardenedBSD/ports b83e329devel/gitaly distinfo, net/gitlab-agent distinfo

www/gitlab: security and patch update to 18.9.1

Changes:        https://about.gitlab.com/releases/2026/02/25/patch-release-gitlab-18-9-1-released/
Security:       102a03c9-1316-11f1-93ca-2cf05da270f3
DeltaFile
+13-13devel/gitaly/distinfo
+6-6www/gitlab/distinfo
+5-5www/gitlab-pages/distinfo
+5-5www/gitlab-workhorse/distinfo
+5-5net/gitlab-agent/distinfo
+1-1www/gitlab/Makefile.common
+35-356 files

HardenedBSD/ports 0dcff6fwww/py-fastapi-sso distinfo Makefile

www/py-fastapi-sso: Update to 0.21.0

Changelog: https://github.com/tomasvotava/fastapi-sso/releases/tag/0.21.0

Reported by:    portscout
DeltaFile
+3-3www/py-fastapi-sso/distinfo
+1-1www/py-fastapi-sso/Makefile
+4-42 files

HardenedBSD/ports 2a0250enet-im/teams distinfo Makefile, net-im/teams/files/packagejsons package-lock.json package.json

net-im/teams: Update to 2.7.8

Changelog: https://github.com/IsmaelMartinez/teams-for-linux/releases/tag/v2.7.8

Reported by:    portscout
DeltaFile
+5-5net-im/teams/distinfo
+2-2net-im/teams/files/packagejsons/package-lock.json
+1-2net-im/teams/Makefile
+1-1net-im/teams/files/packagejsons/package.json
+9-104 files

HardenedBSD/src bffd305share/man/man8 Makefile rc.8, sys/netinet ip_divert.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+53-0tools/tools/git/sanitize.lua
+16-1usr.bin/newgrp/newgrp.1
+4-2sys/netinet/ip_divert.c
+2-1share/man/man8/Makefile
+1-1tests/sys/kern/Makefile
+1-0share/man/man8/rc.8
+77-51 files not shown
+77-57 files

HardenedBSD/src b763652share/man/man8 Makefile rc.8, sys/netinet ip_divert.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+53-0tools/tools/git/sanitize.lua
+16-1usr.bin/newgrp/newgrp.1
+4-2sys/netinet/ip_divert.c
+2-1share/man/man8/Makefile
+1-1tests/sys/kern/Makefile
+1-0share/man/man8/rc.8
+77-51 files not shown
+77-57 files

HardenedBSD/ports ce71ea5archivers/grzip Makefile, dns/nextdns distinfo Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+63-42sysutils/symon/Makefile
+27-16archivers/grzip/Makefile
+5-17dns/nextdns/distinfo
+0-20java/openjdk25/files/patch-src_jdk.jdwp.agent_unix_native_libjdwp_exec__md.c
+9-9sysutils/syslog-ng/pkg-plist
+3-15dns/nextdns/Makefile
+107-11940 files not shown
+204-21046 files

HardenedBSD/src 86dc5ddusr.bin/newgrp newgrp.1

newgrp.1: Provide examples

"These examples appear to be originally noted thirteen years ago by
Mark Saad, contributed by eadler, put into a patch by Felix Johnson,
and made into mdoc by myself. Finally, put this bug to rest." ~ziaee

PR:                     167742
Co-authored-by:         eadler, ziaee, Mark Saad
Differential Revision:  https://reviews.freebsd.org/D48877
DeltaFile
+16-1usr.bin/newgrp/newgrp.1
+16-11 files

HardenedBSD/src 7951411tools/tools/git sanitize.lua

sanitize.lua: A tool to extract interfaces from files

This is a simple too to remove all comments, extra whitespace and other
unnecessary things that may have creative content. What remains can be
just the minimal interface described by the header file. When used with
care, this can mechanically sanitize files, like some device tree
bindings file, that are only #defines that are meant to be used in
multiple context (the dts files and in C code to interpret the resulting
dtb).

Sponsored by:           Netflix
Reviewed by:            kevans
Differential Revision:  https://reviews.freebsd.org/D55087
DeltaFile
+53-0tools/tools/git/sanitize.lua
+53-01 files

HardenedBSD/src 77dc773share/man/man8 Makefile rc.8

rc.8: Add rc.suspend as an alias

Make it consistent with the other lifecycle scripts, thus making it
more findable.

Reviewed by:    ziaee
Signed-off-by:  Pat Maddox <pat at patmaddox.com>
Closes:         https://github.com/freebsd/freebsd-src/pull/2047
DeltaFile
+2-1share/man/man8/Makefile
+1-0share/man/man8/rc.8
+3-12 files

HardenedBSD/ports ca76651devel/pecl-swoole distinfo Makefile

devel/pecl-swoole: update to 6.1.7.
DeltaFile
+3-3devel/pecl-swoole/distinfo
+1-1devel/pecl-swoole/Makefile
+4-42 files

HardenedBSD/ports 125693fdatabases/R-cran-DBI distinfo Makefile

databases/R-cran-DBI: Update to 1.3.0

Reported by:    portscout
DeltaFile
+3-3databases/R-cran-DBI/distinfo
+1-1databases/R-cran-DBI/Makefile
+4-42 files

HardenedBSD/src c944960sys/compat/linuxkpi/dummy/include/net/page_pool helpers.h

LinuxKPI: remove dumm header now in common

page_pool/helpers.h does exist in common/include/net/page_pool/helpers.h
so we can remove the dummy header file.

Sponosred by:   The FreeBSD Foundation
MFC after:      3 days
DeltaFile
+0-0sys/compat/linuxkpi/dummy/include/net/page_pool/helpers.h
+0-01 files

HardenedBSD/ports e37ae1cdns/nextdns distinfo Makefile

dns/nextdns: Update to 1.47.1

Approved by:    rs at nextdns.io (maintainer)
DeltaFile
+5-17dns/nextdns/distinfo
+3-15dns/nextdns/Makefile
+8-322 files

HardenedBSD/ports 2d35193deskutils/cherrytree distinfo Makefile

deskutils/cherrytree: update the port to version 1.6.3

Reported by:    portscout
DeltaFile
+3-3deskutils/cherrytree/distinfo
+1-2deskutils/cherrytree/Makefile
+4-52 files

HardenedBSD/ports b98dccb. UPDATING, sysutils/symon Makefile pkg-plist

sysutils/symon: Improve port, take maintainership

- Convert to modern OPTIONS.
- Add record to UPDATING about options.
- "Samplefy" configs.
- Fix warnings from portclippy.
- "Unbreak" on 15+ - disable PF support (patches gratefully received!).

PR:             292366
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
DeltaFile
+63-42sysutils/symon/Makefile
+6-8sysutils/symon/files/pkg-message.in
+7-0UPDATING
+3-3sysutils/symon/pkg-plist
+79-534 files

HardenedBSD/ports 1370086devel/arduino-irremote distinfo Makefile

devel/arduino-irremote: Update to 4.6.0

Changes since 4.5.0:

 -  Fixed missing ESP IRAM_ATTR for receiving interrupt.

 -  Changed USE_DEFAULT_FEEDBACK_LED_PIN from 0 to 0xFF, because
    megaTinyCore defines the not special pin PIN_PA4 as 0.

 -  Changed timer for ATtiny16X4.

 -  Fixed missing initialization with pinMode() for feedback LED.

 -  Fixed bitmask error in sendBiphaseData() when not sending start
    bit.

 -  Improved decodeSamsung().

 -  OpenLASIR protocol added by danielweidman.

    [8 lines not shown]
DeltaFile
+3-3devel/arduino-irremote/distinfo
+1-1devel/arduino-irremote/Makefile
+4-42 files

HardenedBSD/src 73d9153tests/sys/kern Makefile

tests/kern: put ssl_sendfile under MK_OPENSSL != no

Reported by:    wosch
DeltaFile
+1-1tests/sys/kern/Makefile
+1-11 files

HardenedBSD/src 5547a7bsys/netinet ip_divert.c

divert: Use a better source identifier for netisr_queue_src() calls

These opaque IDs are used by netisr to distribute work among threads.
The mapping function is simply SourceID % numthreads, so using socket
addresses as source IDs isn't going to distribute packets well due to
alignment.

Use the divert socket's generation number instead, as that suits this
purpose much better.

Reviewed by:    zlei, glebius
MFC after:      1 week
Sponsored by:   OPNsense
Sponsored by:   Klara, Inc.
Differential Revision:  https://reviews.freebsd.org/D55537
DeltaFile
+4-2sys/netinet/ip_divert.c
+4-21 files

HardenedBSD/ports 566266adevel/libunistring distinfo Makefile

devel/libunistring: Update 1.4.1 => 1.4.2

Changelog:
 - Prepare for 1.4.2 release.
   * version.sh: Bump version number, date, gnulib version.
   * README: Update version.
   * NEWS: Update.
 - Sync with gnulib.
   * lib/unistring/cdefs.h: Update from gnulib/m4/gnulib-common.m4.
 - (_GL_UNNAMED): New macro.
 - (_UC_UNNAMED): Apply "New C macro _GL_UNNAMED".
 - Make the generated <unistring/stdint.h> more usable in C++ mode.
   * lib/Makefile.am (unistring/stdint.h): In C++ 11 or newer mode, just
     use <cstdint>.

PR:     293435
DeltaFile
+3-3devel/libunistring/distinfo
+1-1devel/libunistring/Makefile
+4-42 files

HardenedBSD/ports 4302ce7security/p5-openxpki-clca distinfo Makefile

security/p5-openxpki-clca: Update 1.20 => 1.21

Commit log:
https://github.com/openxpki/clca/compare/v1.20...v1.21

PR:     293444
DeltaFile
+3-3security/p5-openxpki-clca/distinfo
+1-1security/p5-openxpki-clca/Makefile
+4-42 files

HardenedBSD/ports ec2ab00textproc/moor distinfo Makefile

textproc/moor: Update 2.10.4 => 2.11.0

Changelogs:
- https://github.com/walles/moor/releases/tag/v2.10.5
- https://github.com/walles/moor/releases/tag/v2.11.0

Reviewed by:    osa, vvd (mentors)
Approved by:    osa, vvd (mentors)
Differential Revision: https://reviews.freebsd.org/D55540
DeltaFile
+5-5textproc/moor/distinfo
+1-1textproc/moor/Makefile
+6-62 files

HardenedBSD/ports 030a121ports-mgmt/pkg_replace distinfo Makefile

ports-mgmt/pkg_replace: Update 20260209 => 20260219

Changelog:
https://github.com/kdeguchi/pkg_replace/releases/tag/20260219

PR:     293452
DeltaFile
+3-3ports-mgmt/pkg_replace/distinfo
+1-1ports-mgmt/pkg_replace/Makefile
+4-42 files

HardenedBSD/ports d46b321net/samba422 Makefile

net/samba422: opt out from Features/fortify.mk

[...]
Checking for freebsd sendfile support                                                           : not found
sendfile support not found but it was requested !
(complete log in /wrkdirs/usr/ports/net/samba422/work/samba-4.22.6/bin/config.log)
===>  Script "configure" failed unexpectedly.
[...]

PR:     292391
DeltaFile
+1-0net/samba422/Makefile
+1-01 files

HardenedBSD/ports 46aed1fnet/samba423 Makefile

net/samba423: opt out from Features/fortify.mk

[...]
Checking for freebsd sendfile support                                                           : not found
sendfile support not found but it was requested !
(complete log in /wrkdirs/usr/ports/net/samba423/work/samba-4.23.4/bin/config.log)
===>  Script "configure" failed unexpectedly.
[...]

PR:     292392
DeltaFile
+1-0net/samba423/Makefile
+1-01 files

HardenedBSD/ports b513719net/samba420 Makefile

net/samba420: opt out from Features/fortify.mk

[...]
Checking for freebsd sendfile support                                                           : not found
sendfile support not found but it was requested !
(complete log in /wrkdirs/usr/ports/net/samba420/work/samba-4.20.8/bin/config.log)
===>  Script "configure" failed unexpectedly.
[...]

PR:     292390
DeltaFile
+1-0net/samba420/Makefile
+1-01 files

HardenedBSD/ports 786c411net/samba416 Makefile

net/samba416: opt out from Features/fortify.mk

[...]
sendfile support not found but it was requested !
(complete log in /wrkdirs/usr/ports/net/samba416/work-default/samba-4.16.11/bin/config.log)
===>  Script "configure" failed unexpectedly.
[...]

PR:     292388
DeltaFile
+1-0net/samba416/Makefile
+1-01 files

HardenedBSD/ports ed93436net/samba419 Makefile

net/samba419: opt out from Features/fortify.mk

[...]
Checking for freebsd sendfile support                                                           : not found
sendfile support not found but it was requested !
(complete log in /wrkdirs/usr/ports/net/samba419/work/samba-4.19.9/bin/config.log)
===>  Script "configure" failed unexpectedly.
[...]

PR:     292389
DeltaFile
+1-0net/samba419/Makefile
+1-01 files

HardenedBSD/ports 642c4b6net-mgmt/unifi10 distinfo Makefile

net-mgmt/unifi10: Update to 10.1.85

Release notes:  https://community.ui.com/releases/r/network/10.1.85
DeltaFile
+5-5net-mgmt/unifi10/distinfo
+1-2net-mgmt/unifi10/Makefile
+6-72 files

HardenedBSD/ports 0f26e39java/openjdk25 distinfo Makefile, java/openjdk25/files patch-src_jdk.jdwp.agent_unix_native_libjdwp_exec__md.c patch-src_hotspot_os__cpu_bsd__ppc_os__bsd__ppc.cpp

java/openjdk25: Update to OpenJDK 25.0.2

Update to track upstream version 25.0.2, with fixes for FreeBSD.

See the upstream release notes for details on what has changed since
version 25.0.1:
https://www.oracle.com/java/technologies/javase/25-0-2-relnotes.html

In addition to the above, this release includes the following patch,
scheduled for JDK 26 by upstream.

JDK-8371637: allocateNativeInternal sometimes return incorrectly aligned
memory

This is because this patch affects systems using jemalloc specifically,
like FreeBSD does, but I feel it's too long time to wait until the next
LTS release before making it available on FreeBSD.

Reviewed by:    fuz (mentor)

    [3 lines not shown]
DeltaFile
+0-20java/openjdk25/files/patch-src_jdk.jdwp.agent_unix_native_libjdwp_exec__md.c
+0-11java/openjdk25/files/patch-src_hotspot_os__cpu_bsd__ppc_os__bsd__ppc.cpp
+3-3java/openjdk25/distinfo
+2-3java/openjdk25/Makefile
+5-374 files