HardenedBSD/src e0af444sys/net rtsock.c route.h, sys/net/route route_ctl.c nhop_ctl.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+50-0tests/sys/netinet6/ndp.sh
+2-36sys/net/route/route_ctl.c
+13-21sys/netlink/route/rt.c
+10-22sys/net/rtsock.c
+4-13sys/net/route/nhop_ctl.c
+0-17sys/net/route.h
+79-10941 files not shown
+120-22147 files

HardenedBSD/src faf5532sys/net rtsock.c route.h, sys/net/route route_ctl.c nhop_ctl.c

Merge remote-tracking branch 'origin/freebsd/current/main' into hardened/current/master

Conflicts:
        sys/netinet/ip_input.c (resolved)
        sys/netinet/raw_ip.c (resolved)
        sys/netinet/udp_usrreq.c (resolved)
        sys/netinet6/in6_pcb.c (resolved)
        sys/netinet6/in6_proto.c (resolved)
DeltaFile
+50-0tests/sys/netinet6/ndp.sh
+2-36sys/net/route/route_ctl.c
+13-21sys/netlink/route/rt.c
+10-22sys/net/rtsock.c
+4-13sys/net/route/nhop_ctl.c
+0-17sys/net/route.h
+79-10941 files not shown
+120-22147 files

HardenedBSD/ports a4c0aadirc/halloy distinfo Makefile.crates, security/openssl36/files patch-CVE-2026-2673

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+331-289irc/halloy/distinfo
+479-0security/openssl36/files/patch-CVE-2026-2673
+165-144irc/halloy/Makefile.crates
+49-0www/zine-ssg/distinfo
+44-0www/zine-ssg/Makefile
+36-0www/zine-ssg/files/patch-build.zig
+1,104-43355 files not shown
+1,408-55761 files

HardenedBSD/ports 80a13e9net-mgmt/observium Makefile distinfo

net-mgmt/observium: update 24.12 → 26.1

PR:     293295
DeltaFile
+5-4net-mgmt/observium/Makefile
+3-3net-mgmt/observium/distinfo
+8-72 files

HardenedBSD/ports 13825a9misc/ollama Makefile, misc/ollama/files patch-x_imagegen_models_zimage_vae.go patch-x_imagegen_server.go

misc/ollama: add patches for: image generation hanging/timeout on slow CPUs, etc.

Enable image gen via MLX - now your local llama can finally draw Beastie
in sunglasses:

$ ollama run x/z-image-turbo "FreeBSD Beastie in sunglasses drinking coffee at the beach"
DeltaFile
+35-0misc/ollama/files/patch-x_imagegen_models_zimage_vae.go
+26-0misc/ollama/files/patch-x_imagegen_server.go
+1-1misc/ollama/Makefile
+62-13 files

HardenedBSD/ports 3adc488databases/surrealdb distinfo Makefile, databases/surrealdb/files patch-surrealdb_server_src_lib.rs

databases/surrealdb: update 3.0.4 → 3.0.5
DeltaFile
+13-13databases/surrealdb/distinfo
+14-0databases/surrealdb/files/patch-surrealdb_server_src_lib.rs
+6-7databases/surrealdb/Makefile
+33-203 files

HardenedBSD/ports 4b900e4dns/unbound/files unbound.in

Revert "dns/unbound: use daemon(8) for crash recovery"

This reverts commit c864cbc109377868d151df9d80bdb494dbfc1891.
DeltaFile
+2-3dns/unbound/files/unbound.in
+2-31 files

HardenedBSD/ports d48bf8csysutils/try-rs distinfo Makefile

sysutils/try-rs: Update to 1.7.1
DeltaFile
+3-3sysutils/try-rs/distinfo
+1-1sysutils/try-rs/Makefile
+4-42 files

HardenedBSD/ports 5435de1cad/gmsh distinfo Makefile

cad/gmsh: upgrade to 4.15.2

        Fixed issue in 3D structured CGNS output.
DeltaFile
+3-3cad/gmsh/distinfo
+1-1cad/gmsh/Makefile
+4-42 files

HardenedBSD/ports 0de2340math/hpcombi pkg-plist distinfo

math/hpcombi: upgrade to v1.1.2

Release notes at https://github.com/libsemigroups/HPCombi/releases/tag/v1.1.2
DeltaFile
+4-4math/hpcombi/pkg-plist
+3-3math/hpcombi/distinfo
+2-3math/hpcombi/Makefile
+9-103 files

HardenedBSD/ports 474d9cemath/libsemigroups distinfo Makefile

math/libsemigroups: upgrade to v3.5.4

Release notes at
        https://github.com/libsemigroups/libsemigroups/releases/tag/v3.5.4
DeltaFile
+3-3math/libsemigroups/distinfo
+1-1math/libsemigroups/Makefile
+1-0math/libsemigroups/pkg-plist
+5-43 files

HardenedBSD/ports 94e3f14math/openblas64 distinfo Makefile

math/openblas64: upgrade to v0.3.32
DeltaFile
+3-3math/openblas64/distinfo
+1-1math/openblas64/Makefile
+4-42 files

HardenedBSD/ports 4b07913graphics/cimg distinfo Makefile

graphics/cimg: upgrade to v.3.7.4
DeltaFile
+3-3graphics/cimg/distinfo
+1-1graphics/cimg/Makefile
+4-42 files

HardenedBSD/src 254b23esys/net rtsock.c route.h, sys/net/route route_ctl.c nhop_ctl.c

routing: Retire ROUTE_MPATH compile option

The ROUTE_MPATH compile option was introduced to
test the new multipath implementation.
Since compiling it has no overhead and it's enabled
by default, remove it.

Reviewed by:    melifaro, markj
Relnotes:       yes
Differential Revision: https://reviews.freebsd.org/D55884
DeltaFile
+2-36sys/net/route/route_ctl.c
+13-21sys/netlink/route/rt.c
+10-22sys/net/rtsock.c
+4-13sys/net/route/nhop_ctl.c
+0-17sys/net/route.h
+6-8sys/netinet6/in6_fib.c
+35-11741 files not shown
+67-22347 files

HardenedBSD/src 2371b24tests/sys/netinet6 ndp.sh

tests: Add grand link-layer event in netinet6/ndp

Add test for ndp to verity link-layer address change event
actually triggers the grand.

Differential Revision: https://reviews.freebsd.org/D55927
DeltaFile
+50-0tests/sys/netinet6/ndp.sh
+50-01 files

HardenedBSD/ports c57040esecurity/openssl36 Makefile, security/openssl36/files patch-CVE-2026-2673 patch-crypto_threads__pthread.c

security/openssl36: Security update for CVE-2026-2673

Security:       ee1e6a24-1eeb-11f1-81da-8447094a420f
DeltaFile
+479-0security/openssl36/files/patch-CVE-2026-2673
+3-3security/openssl36/files/patch-crypto_threads__pthread.c
+3-3security/openssl36/files/patch-Configurations_10-main.conf
+1-0security/openssl36/Makefile
+486-64 files

HardenedBSD/ports 883c614www/nextcloud-contacts distinfo Makefile

www/nextcloud-contacts: Update to 8.4.2
DeltaFile
+3-3www/nextcloud-contacts/distinfo
+1-1www/nextcloud-contacts/Makefile
+4-42 files

HardenedBSD/ports 209c6e8security/nextcloud-end_to_end_encryption distinfo Makefile

security/nextcloud-end_to_end_encryption: Update to 2.0.2
DeltaFile
+3-3security/nextcloud-end_to_end_encryption/distinfo
+1-1security/nextcloud-end_to_end_encryption/Makefile
+4-42 files

HardenedBSD/ports 5562592www/nextcloud distinfo Makefile

www/nextcloud: Update to 33.0.1
DeltaFile
+3-3www/nextcloud/distinfo
+1-1www/nextcloud/Makefile
+4-42 files

HardenedBSD/ports dab77d8security/nextcloud-twofactor_admin distinfo Makefile

security/nextcloud-twofactor_admin: Update to 4.11.1
DeltaFile
+3-3security/nextcloud-twofactor_admin/distinfo
+1-1security/nextcloud-twofactor_admin/Makefile
+4-42 files

HardenedBSD/ports dd02081devel Makefile, devel/superhtml Makefile distinfo

devel/superhtml: Add port

The SuperHTML CLI Tool offers validation and autoformatting features for
SuperHTML, SuperMD, and Scripty (used by www/zine-ssg).

Additionally it can be used as an LSP for HTML as well.

Differential Revision:  https://reviews.freebsd.org/D55878
DeltaFile
+30-0devel/superhtml/Makefile
+11-0devel/superhtml/distinfo
+4-0devel/superhtml/pkg-descr
+1-0devel/Makefile
+46-04 files

HardenedBSD/ports e93d209www/zine-ssg distinfo Makefile, www/zine-ssg/files patch-build.zig patch-build.zig.zon

www/zine-ssg: Add port

Zine is a static site generator similar in concept to www/gohugo.

Zine turns your content into HTML, styles it using your layouts, and finally
copies the result into an output directory that you can then publish on static
hosting services like GitHub Pages.

Zine has a companion port, devel/superhtml which acts as an LSP for the markdown
content and HTML layouts.

Differential Revision:  https://reviews.freebsd.org/D55877
DeltaFile
+49-0www/zine-ssg/distinfo
+44-0www/zine-ssg/Makefile
+36-0www/zine-ssg/files/patch-build.zig
+24-0www/zine-ssg/Makefile.zig
+13-0www/zine-ssg/files/patch-build.zig.zon
+10-0www/zine-ssg/files/patch-src_cli_serve.zig
+176-02 files not shown
+185-08 files

HardenedBSD/ports bc79fd1x11/mako distinfo Makefile

x11/mako: update to 1.11.0

Changes:        https://github.com/emersion/mako/releases/tag/v1.11.0
Reported by:    GitHub (watch releases)
DeltaFile
+3-3x11/mako/distinfo
+1-1x11/mako/Makefile
+4-42 files

HardenedBSD/ports d262828x11-toolkits/wlroots019 Makefile, x11-toolkits/wlroots020 distinfo Makefile

x11-toolkits/wlroots020: update to 0.20.0

Changes:        https://gitlab.freedesktop.org/wlroots/wlroots/-/releases/0.20.0
Reported by:    GitLab (notify releases)
DeltaFile
+3-3x11-toolkits/wlroots020/distinfo
+1-1x11-toolkits/wlroots020/Makefile
+1-1x11-toolkits/wlroots019/Makefile
+5-53 files

HardenedBSD/src 6cf1afeusr.sbin/newsyslog newsyslog.c

newsyslog: check for rename failure during log rotation

Differential Revision:  https://reviews.freebsd.org/D56088
DeltaFile
+3-3usr.sbin/newsyslog/newsyslog.c
+3-31 files

HardenedBSD/ports 9ecbfd1irc/halloy distinfo Makefile.crates

irc/halloy: update to 2026.5

PR: 294063
DeltaFile
+331-289irc/halloy/distinfo
+165-144irc/halloy/Makefile.crates
+1-2irc/halloy/Makefile
+497-4353 files

HardenedBSD/ports af8f4acarchivers/lhasa pkg-descr Makefile

archivers/lhasa: Update to 0.5.0

Take maintainership.
Update MASTER_SITES, COMMENT, LICENSE_FILE and pkg-descr.
Use the LIBVERSION and VERSION variable in pkg-plist.

Changelog:
https://raw.githubusercontent.com/fragglet/lhasa/refs/tags/v0.5.0/NEWS.md

PR:             290946
Approved by:    cs at innolan.dk (maintainer timeout), fluffy (mentor)
DeltaFile
+10-8archivers/lhasa/pkg-descr
+7-5archivers/lhasa/Makefile
+6-6archivers/lhasa/pkg-plist
+3-3archivers/lhasa/distinfo
+26-224 files

HardenedBSD/ports a582daegames/gcompris-qt Makefile distinfo

games/gcompris-qt: Update to 26.1

- Add KDE CDN to MASTER_SITES
- Fix duplicate BUILD_DEPENDS
DeltaFile
+5-5games/gcompris-qt/Makefile
+3-3games/gcompris-qt/distinfo
+8-82 files

HardenedBSD/src dc9411detc/mtree BSD.include.dist, release/packages/ucl rc.ucl xz-all.ucl

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+5-5etc/mtree/BSD.include.dist
+5-2release/packages/ucl/rc.ucl
+2-2tests/sys/netlink/test_snl.c
+1-1release/packages/ucl/xz-all.ucl
+1-1share/man/man9/DEVICE_IDENTIFY.9
+14-115 files

HardenedBSD/src c2dddf1etc/mtree BSD.include.dist, release/packages/ucl rc.ucl xz-all.ucl

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+5-5etc/mtree/BSD.include.dist
+5-2release/packages/ucl/rc.ucl
+2-2tests/sys/netlink/test_snl.c
+1-1share/man/man9/DEVICE_IDENTIFY.9
+1-1release/packages/ucl/xz-all.ucl
+14-115 files