HardenedBSD/src c1e3f96sys/compat/freebsd32 freebsd32_misc.c, sys/compat/linux linux_misc.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+1-1sys/compat/freebsd32/freebsd32_misc.c
+1-0sys/compat/linux/linux_misc.c
+2-12 files

HardenedBSD/src 465b568sys/compat/freebsd32 freebsd32_misc.c, sys/compat/linux linux_misc.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+1-1sys/compat/freebsd32/freebsd32_misc.c
+1-0sys/compat/linux/linux_misc.c
+2-12 files

HardenedBSD/ports 4a28a7aaudio/subtui distinfo, devel/rubygem-locale distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+5-5audio/subtui/distinfo
+7-0www/lexbor/pkg-plist
+3-3www/lexbor/distinfo
+3-3devel/rubygem-locale/distinfo
+2-2textproc/elasticsearch7/Makefile
+1-2textproc/kibana8/Makefile
+21-153 files not shown
+24-189 files

HardenedBSD/ports 558f402www/lexbor pkg-plist distinfo

www/lexbor: Update 2.6.0 => 2.7.0

Approved by:       db@, yuri@ (Mentors, implicit)
DeltaFile
+7-0www/lexbor/pkg-plist
+3-3www/lexbor/distinfo
+1-1www/lexbor/Makefile
+11-43 files

HardenedBSD/ports cd74697audio/subtui distinfo Makefile

audio/subtui: Update to 2.11.0

Changelog: https://github.com/MattiaPun/SubTUI/releases/tag/v2.11.0
DeltaFile
+5-5audio/subtui/distinfo
+1-1audio/subtui/Makefile
+6-62 files

HardenedBSD/ports 33d68c5textproc/elasticsearch7 Makefile

textproc/elasticsearch7: Fix build with non-default USERS/GROUPS

Also use ${ETCDIR} instead of ${PREFIX}/etc/elasticsearch.

Approved by:    blanket (fix build)
MFH:            2026Q1
DeltaFile
+2-2textproc/elasticsearch7/Makefile
+2-21 files

HardenedBSD/ports 5017976textproc/kibana8 Makefile

textproc/kibana8: Improve MASTER_SITES

Remove http, rename subdir in my LOCAL space.

PR:             289759
Approved by:    blanket
DeltaFile
+1-2textproc/kibana8/Makefile
+1-21 files

HardenedBSD/ports 35f8d0cdevel/rubygem-locale distinfo Makefile

devel/rubygem-locale: Update to 2.1.5

Changes: https://github.com/ruby-gettext/locale/blob/main/doc/text/news.md
DeltaFile
+3-3devel/rubygem-locale/distinfo
+1-1devel/rubygem-locale/Makefile
+4-42 files

HardenedBSD/src 9a9f93bsys/compat/linux linux_misc.c

compat/linux: Avoid waitid() kernel stack disclosure

Reported by:    Adam Crosser, Praetorian
Reviewed by:    philip
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55812
DeltaFile
+1-0sys/compat/linux/linux_misc.c
+1-01 files

HardenedBSD/src 097cb4esys/compat/freebsd32 freebsd32_misc.c

compat32: Zero struct to avoid stack disclosure

Reported by:    Adam Crosser, Praetorian
Reviewed by:    philip
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55811
DeltaFile
+1-1sys/compat/freebsd32/freebsd32_misc.c
+1-11 files

HardenedBSD/src 8ad93edsys/dev/sound/pcm feeder_volume.c, sys/kern uipc_shm.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+231-246sys/netinet/in_pcb.h
+10-1sys/dev/sound/pcm/feeder_volume.c
+2-0sys/kern/uipc_shm.c
+1-0usr.bin/calendar/calendars/calendar.freebsd
+0-1sys/net/debugnet_inet.c
+244-2485 files

HardenedBSD/src 8624944sys/dev/sound/pcm feeder_volume.c, sys/net debugnet_inet.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+231-246sys/netinet/in_pcb.h
+10-1sys/dev/sound/pcm/feeder_volume.c
+0-1sys/net/debugnet_inet.c
+1-0usr.bin/calendar/calendars/calendar.freebsd
+242-2484 files

HardenedBSD/ports 880886adatabases/pg_search distinfo Makefile.crates, misc/rash distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+1,651-0databases/pg_search/distinfo
+475-353misc/rash/distinfo
+819-0databases/pg_search/Makefile.crates
+313-259textproc/comrak/distinfo
+263-263security/rpm-sequoia/distinfo
+235-223www/py-qh3/distinfo
+3,756-1,09845 files not shown
+5,291-1,79851 files

HardenedBSD/ports 37ed2bfdevel/gcc-arm-embedded/files patch-binutils-gdb--gdb_gdbsupport_enum-flags.h patch-binutils-gdb_gdbsupport_enum-flags.h

devel/gcc-arm-embedded: fix build with clang 21

With clang 21 devel/gcc-arm-embedded fails to build, with errors similar
to:

      /wrkdirs/usr/ports/devel/gcc-arm-embedded/work-default/src/binutils-gdb/binutils/readelf.c:23278:37: error: pointer comparison always evaluates to false [-Werror,-Wtautological-compare]
       23278 |           || inote.namedata + inote.namesz < inote.namedata)
             |                                            ^

and later many instances of:

    In file included from <built-in>:1:
    In file included from /wrkdirs/usr/ports/devel/gcc-arm-embedded/work-default/src/binutils-gdb--gdb/gdb/defs.h:63:
    /wrkdirs/usr/ports/devel/gcc-arm-embedded/work-default/src/binutils-gdb--gdb/gdb/../gdbsupport/enum-flags.h:97:34: error: non-type
          template argument is not a constant expression
       97 |     integer_for_size<sizeof (T), static_cast<bool>(T (-1) < T (0))>::type
          |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    /wrkdirs/usr/ports/devel/gcc-arm-embedded/work-default/src/binutils-gdb--gdb/gdb/../gdbsupport/enum-flags.h:134:20: note: in
          instantiation of template class 'enum_underlying_type<ui_out_flag>' requested here

    [25 lines not shown]
DeltaFile
+156-0devel/gcc-arm-embedded/files/patch-binutils-gdb--gdb_gdbsupport_enum-flags.h
+156-0devel/gcc-arm-embedded/files/patch-binutils-gdb_gdbsupport_enum-flags.h
+36-0devel/gcc-arm-embedded/files/patch-binutils-gdb--gdb_gdb_unittests_enum-flags-selftests.c
+36-0devel/gcc-arm-embedded/files/patch-binutils-gdb_gdb_unittests_enum-flags-selftests.c
+25-0devel/gcc-arm-embedded/files/patch-binutils-gdb--gdb_include_diagnostics.h
+25-0devel/gcc-arm-embedded/files/patch-binutils-gdb_include_diagnostics.h
+434-01 files not shown
+445-07 files

HardenedBSD/src 4c72e5cusr.bin/calendar/calendars calendar.freebsd

calendar.freebsd: add myself (khorben@)

This adds my date and place of birth to FreeBSD's calendar file, so I
can let the system(tm) remind me when that counter increments.

Confirmed to be working with the following command:

```
$ calendar -f usr.bin/calendar/calendars/calendar.freebsd -t 18.08
Aug 18  Pierre Pronchery <khorben at FreeBSD.org> born in Nantes, France, 1982
[...]
```

Reviewed by:    philip (mentor)
Approved by:    philip (mentor)
Differential Revision:  https://reviews.freebsd.org/D55825
DeltaFile
+1-0usr.bin/calendar/calendars/calendar.freebsd
+1-01 files

HardenedBSD/ports f9a361fsysutils/logstash7 Makefile distinfo

sysutils/logstash7: Update 7.17.11 => 7.17.29, deprecate

Release Notes:
https://www.elastic.co/guide/en/logstash/7.17/releasenotes.html

Improve port:
- Replace PORTVERSION with DISTVERSION.
- Add LOCAL/vvd/elastic to MASTER_SITES for those who can't download
  due to the HTTP error "Forbidden 403".
- Deprecate with date 2026-06-30 due to 7.x reached EoL on 15 Jan 2026.
- Limit JAVA_VERSION to supported 17, 11 and 8.
- Parametrize "logstash" with "${PORTNAME}".
- Adjust CONFLICTS.
- Add possibility to use custom user/group.
- Merge CHMODs.
- Fix white characters and remove unnecessary empty lines.
- Remove unnecessary MKDIR.

PR:             293746

    [2 lines not shown]
DeltaFile
+21-17sysutils/logstash7/Makefile
+3-3sysutils/logstash7/distinfo
+24-202 files

HardenedBSD/ports d14dde2textproc/elasticsearch7 Makefile distinfo

textproc/elasticsearch7: Update 7.17.11 => 7.17.29, deprecate

Release Notes:
https://www.elastic.co/guide/en/elasticsearch/reference/7.17/es-release-notes.html

- Replace PORTVERSION with DISTVERSION.
- Add LOCAL/vvd/elastic to MASTER_SITES for those who can't download
  due to the HTTP error "Forbidden 403".
- Deprecate with date 2026-06-30 due to 7.x reached EoL on 15 Jan 2026.
- Limit JAVA_VERSION to supported 21, 17, 11 and 8.
- Parametrize "logstash" with "${PORTNAME}".
- Adjust CONFLICTS.
- Fix warnings from portclippy.
- Fix possibility to use custom user/group.
- Remove unnecessary ".include <bsd.port.options.mk>" and variable SIGAR_ARCH.
- Merge MKDIRs, INSTALL_SCRIPTs, INSTALL_DATAs.

PR:             293746
Approved by:    elastic (maintainer, implicit - inactive for more than 6 months)
MFH:            2026Q1
DeltaFile
+31-35textproc/elasticsearch7/Makefile
+3-3textproc/elasticsearch7/distinfo
+34-382 files

HardenedBSD/ports 5c62f61databases/pgvector distinfo pkg-plist

databases/pgvector: Update from 0.8.1 to 0.8.2

  Changelog:

    * Fixed buffer overflow with parallel HNSW index build - more info
    * Improved install target on Windows
    * Fixed Index Searches in EXPLAIN output for Postgres 18

  Taken from:

    https://github.com/pgvector/pgvector/blob/master/CHANGELOG.md

Sponsored by:   OTTRIA
DeltaFile
+3-3databases/pgvector/distinfo
+2-1databases/pgvector/pkg-plist
+1-1databases/pgvector/Makefile
+6-53 files

HardenedBSD/ports a10a66bdevel Makefile, devel/py-sybil Makefile pkg-descr

devel/py-sybil: add
DeltaFile
+29-0devel/py-sybil/Makefile
+4-0devel/py-sybil/pkg-descr
+3-0devel/py-sybil/distinfo
+1-0devel/Makefile
+37-04 files

HardenedBSD/ports fcd8c66devel Makefile, devel/py-seedir Makefile pkg-descr

devel/py-seedir: add
DeltaFile
+30-0devel/py-seedir/Makefile
+7-0devel/py-seedir/pkg-descr
+3-0devel/py-seedir/distinfo
+1-0devel/Makefile
+41-04 files

HardenedBSD/ports 4e8a8a9math/R-cran-terra Makefile, math/R-cran-terra/files patch-fix-tests

math/R-cran-terra: Fix tests

Apply upstream patch to fix tests.
DeltaFile
+80-0math/R-cran-terra/files/patch-fix-tests
+2-2math/R-cran-terra/Makefile
+82-22 files

HardenedBSD/ports 78acbd2misc/py-NATTEN Makefile, misc/py-NATTEN/files patch-pyproject.toml

misc/py-NATTEN: Fix build by fixing dependencies

Reported by:    fallout
DeltaFile
+4-1misc/py-NATTEN/Makefile
+2-2misc/py-NATTEN/files/patch-pyproject.toml
+6-32 files

HardenedBSD/ports 5a3685dmisc/rash distinfo Makefile

misc/rash: update 2.17.8 → 2.18.0
DeltaFile
+475-353misc/rash/distinfo
+238-178misc/rash/Makefile
+713-5312 files

HardenedBSD/ports c1053damisc/timr-tui distinfo Makefile

misc/timr-tui: update 1.7.0 → 1.7.1
DeltaFile
+3-3misc/timr-tui/distinfo
+1-1misc/timr-tui/Makefile
+4-42 files

HardenedBSD/ports 896337cwww/py-qh3 distinfo Makefile, www/py-qh3/files patch-cargo-crates_aws-lc-sys-0.20.1_aws-lc_include_openssl_target.h patch-powerpc64le

www/py-qh3: update 1.0.9 → 1.6.0
DeltaFile
+235-223www/py-qh3/distinfo
+118-113www/py-qh3/Makefile
+0-20www/py-qh3/files/patch-cargo-crates_aws-lc-sys-0.20.1_aws-lc_include_openssl_target.h
+0-20www/py-qh3/files/patch-powerpc64le
+353-3764 files

HardenedBSD/ports 1410a0dtextproc/comrak distinfo Makefile

textproc/comrak: update 0.48.0 → 0.51.0
DeltaFile
+313-259textproc/comrak/distinfo
+157-131textproc/comrak/Makefile
+470-3902 files

HardenedBSD/ports 9b71ec0security/rpm-sequoia distinfo Makefile

security/rpm-sequoia: update 1.9.0 → 1.10.1
DeltaFile
+263-263security/rpm-sequoia/distinfo
+131-132security/rpm-sequoia/Makefile
+394-3952 files

HardenedBSD/ports fdb31c0dns/powerdns distinfo Makefile

dns/powerdns: Update 5.0.2 => 5.0.3

News:
https://blog.powerdns.com/2026/02/20/powerdns-authoritative-server-5.0.3-4.9.13

Changelog:
https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.3

PR:     293754
MFH:    2026Q1
DeltaFile
+3-3dns/powerdns/distinfo
+1-1dns/powerdns/Makefile
+4-42 files

HardenedBSD/ports e4d0e51databases Makefile, databases/pg_search distinfo Makefile.crates

databases/pg_search: New port

pg_search is a Postgres extension that enables full text search over
heap tables using the BM25 algorithm. It is built on top of Tantivy, the
Rust-based alternative to Apache Lucene, using pgrx.

pg_search is supported on official PostgreSQL Global Development Group
Postgres versions, starting at PostgreSQL 15.
DeltaFile
+1,651-0databases/pg_search/distinfo
+819-0databases/pg_search/Makefile.crates
+103-0databases/pg_search/pkg-plist
+65-0databases/pg_search/Makefile
+6-0databases/pg_search/pkg-descr
+1-0databases/Makefile
+2,645-06 files

HardenedBSD/ports eb41637net/rclone distinfo Makefile

net/rclone: Update 1.73.1 => 1.73.2

Changelog:
https://rclone.org/changelog/#v1-73-2-2026-03-06

PR:     293755
DeltaFile
+5-5net/rclone/distinfo
+1-2net/rclone/Makefile
+6-72 files