HardenedBSD/src 9756ad5. UPDATING, share/man/man4 scsi.4

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+33-1share/man/man4/scsi.4
+22-6sys/cam/scsi/scsi_xpt.c
+11-0UPDATING
+66-73 files

HardenedBSD/src 2af01eelib/libpmc/pmu-events/arch/x86/emeraldrapids uncore-cache.json uncore-interconnect.json

Merge branch 'freebsd/14-stable/main' into hardened/14-stable/master
DeltaFile
+6,248-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-cache.json
+6,199-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-interconnect.json
+3,617-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-io.json
+3,308-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-memory.json
+962-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/pipeline.json
+888-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/cache.json
+21,222-022 files not shown
+25,182-228 files

HardenedBSD/src 01e4a84lib/libpmc/pmu-events/arch/x86/emeraldrapids uncore-cache.json uncore-interconnect.json

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+6,248-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-cache.json
+6,199-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-interconnect.json
+3,617-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-io.json
+3,308-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/uncore-memory.json
+962-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/pipeline.json
+888-0lib/libpmc/pmu-events/arch/x86/emeraldrapids/cache.json
+21,222-025 files not shown
+25,204-2031 files

HardenedBSD/ports d83b7a5net-im/deltachat-desktop pkg-plist, net/deltachat-rpc-server distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+219-0net/wifi-firmware-iwlwifi-kmod/files/extract-fw-list.sh
+103-87net/wifi-firmware-iwlwifi-kmod/distinfo
+81-83net/deltachat-rpc-server/distinfo
+79-57net/wifi-firmware-iwlwifi-kmod/Makefile
+50-50net-im/deltachat-desktop/pkg-plist
+29-54net/wifi-firmware-kmod/Makefile.inc
+561-33163 files not shown
+882-48369 files

HardenedBSD/ports aa614ffMk/Uses java.mk

Mk/Uses/java.mk: Fix DEFAULT_VERSIONS+=java=25

Add Java 25 to __JAVA_VERSION_LIST.

Approved by:    portmgr (blanket)
DeltaFile
+1-1Mk/Uses/java.mk
+1-11 files

HardenedBSD/ports d9f4c33www/mediawiki144 distinfo Makefile

www/mediawiki144: Update to 1.44.3
DeltaFile
+3-3www/mediawiki144/distinfo
+1-1www/mediawiki144/Makefile
+4-42 files

HardenedBSD/ports 61b5969www/mediawiki145 distinfo Makefile

www/mediawiki145: Update to 1.45.1
DeltaFile
+3-3www/mediawiki145/distinfo
+1-1www/mediawiki145/Makefile
+4-42 files

HardenedBSD/ports ad0a529www/mediawiki139 distinfo Makefile

www/mediawiki139: Update to 1.39.16
DeltaFile
+3-3www/mediawiki139/distinfo
+1-1www/mediawiki139/Makefile
+4-42 files

HardenedBSD/ports e29c92fwww/mediawiki143 distinfo Makefile

www/mediawiki143: Update to 1.43.6
DeltaFile
+3-3www/mediawiki143/distinfo
+1-1www/mediawiki143/Makefile
+4-42 files

HardenedBSD/ports 9959eafprint/plutobook distinfo Makefile

print/plutobook: Update to 0.11.3

Changelog: https://github.com/plutoprint/plutobook/releases/tag/v0.11.3
DeltaFile
+3-3print/plutobook/distinfo
+1-1print/plutobook/Makefile
+4-42 files

HardenedBSD/ports 5ff03fbemulators/fmsx pkg-message

emulators/fmsx: minor update to pkg-message

Update URL in pkg-message to be usable with modern web browsers
changing FTP to HTTP site. Note that http:// is used deliberately
instead of https:// because its SSL certificate does not cover
"ftp.komkon.org" for the moment.
DeltaFile
+1-1emulators/fmsx/pkg-message
+1-11 files

HardenedBSD/ports 155a101net/wifi-firmware-kmod Makefile.inc

net/wifi-firmware-kmod: add STRIP_FWSUBDIR logic

iwlwififw(4) got moved into a subdirectory in the linux-firmware.git
but the driver still expects the firmware at the toplevel.
The longer-term solution would be to create symlinks as the WHENCE
file indicates but for the moment use the less intrusive version
simply stripping the subdir during 'extract'.

Sponsored by:   The FreeBSD Foundation
Reported by:    jrm
Differential Revision: https://reviews.freebsd.org/D53680
DeltaFile
+3-3net/wifi-firmware-kmod/Makefile.inc
+3-31 files

HardenedBSD/ports 818044anet/wifi-firmware-iwlwifi-kmod distinfo Makefile, net/wifi-firmware-iwlwifi-kmod/files extract-fw-list.sh

net/wifi-firmware-iwlwifi-kmod: update firmware to 20251021

Intel firmware for BE200 ("bz" chipsets) requires more modern firmware
than we provide. [1]
The firmware file for iwlwifi-so-a0-gf4-a0 was missing in a recent
version; we only had the pnvm file. [2]

Update the Intel iwlwifi firmware to the latest tree
which brings a few changes:
(1) on linux-firmware.git the firmware got moved into a subdirectory
    so we need to strip that path before installing as the driver
    still expects the firmware in the top-level directory.
(2) the "bz" firmware gets bumped to 101, we keep the old version for
    14.3-R around as well.
(3) while the other files keep their revisions, Intel may have updated
    them with rebuilds.  This is hard to discover given not only the
    hashes but also the paths have changed in distinfo.
(4) we now generate the firmware list from the WHENCE file in
    linux-firmware.git given the driver firmware name creation is too

    [7 lines not shown]
DeltaFile
+219-0net/wifi-firmware-iwlwifi-kmod/files/extract-fw-list.sh
+103-87net/wifi-firmware-iwlwifi-kmod/distinfo
+78-56net/wifi-firmware-iwlwifi-kmod/Makefile
+2-1net/wifi-firmware-iwlwifi-kmod/pkg-descr
+402-1444 files

HardenedBSD/ports 831bdc1net/wifi-firmware-iwlwifi-kmod Makefile, net/wifi-firmware-kmod Makefile.inc

net/wifi-firmware-kmod: generalize iwlwifi specific tunable writing

Currently iwlwifi(4) is the only LinuxKPI based wireless driver able
to enable 11n/11ac.  bz has added tunables to rtw88 and rtw89 in order
to allow them to gradually enable more modern standards as well.

Generalize the ports framework to not be iwlwifi-specifc anymore
in order to prepare for Realtek and others to gain 11n and 11ac
support.

At some point in time, along with a kernel change, we will then flip
the defaults and make this a "disable" rather than an enable option.

Sponsored by:   The FreeBSD Foundation
Reviewers:      jrm
Differential Revision: https://reviews.freebsd.org/D53789
DeltaFile
+10-7net/wifi-firmware-kmod/Makefile.inc
+1-1net/wifi-firmware-iwlwifi-kmod/Makefile
+11-82 files

HardenedBSD/ports ac61f18net/wifi-firmware-kmod Makefile.inc

net/wifi-firmware-kmod: remove obsolete kernel module build code

All supported FreeBSD versions either shipped firmware along with
source and do not need this, or they support plain firmware file
loading.

Remove the now obsolete kernel module build code to simplify the
logic in the file.  Further cleanup will be done once 13.5-R is
out of support in a few months.

Sponsored by:   The FreeBSD Foundation
Reviewed by:    jrm
Differential Revision: https://reviews.freebsd.org/D53679
DeltaFile
+13-43net/wifi-firmware-kmod/Makefile.inc
+13-431 files

HardenedBSD/ports c019853net/wifi-firmware-kmod Makefile.inc, net/wifi-firmware-mt7601u-kmod Makefile

net/wifi-firmware-kmod: allow ONLY_FOR_ARCHS to be set by child ports

mtw(4) is built along USB for all architectures so we need firmware
on all architectures -- unlike the LinuxKPI based wireless drivers
which are restricted by default.

Allow ONLY_FOR_ARCHS to be set in a child port; maintaing a full list
of supported ARCHes seems unreasonable though so allow NOT_FOR_ARCHS
to disable the ONLY_FOR_ARCHS logic in Makefile.inc.  That way
wifi-firmware-mt7601u-kmod can define an empty NOT_FOR_ARCHS and
it should build on all ARCHes.

Sponsored by:   The FreeBSD Foundation
Reviewed by:    jrm
Differential Revision: https://reviews.freebsd.org/D53788
DeltaFile
+3-1net/wifi-firmware-kmod/Makefile.inc
+2-0net/wifi-firmware-mt7601u-kmod/Makefile
+5-12 files

HardenedBSD/ports 18cdd08net-im/deltachat-desktop pkg-plist distinfo

net-im/deltachat-desktop: Update to 2.33.0

This release now supports multiple relays which you can add to your
profile to make your DeltaChat identity nomadic.

Changelog:      https://github.com/deltachat/deltachat-desktop/releases/tag/v2.33.0
DeltaFile
+50-50net-im/deltachat-desktop/pkg-plist
+5-5net-im/deltachat-desktop/distinfo
+3-3net-im/deltachat-desktop/Makefile
+58-583 files

HardenedBSD/ports e129641net/deltachat-rpc-server distinfo Makefile.crates

net/deltachat-rpc-server: Update to 2.33.0
DeltaFile
+81-83net/deltachat-rpc-server/distinfo
+39-40net/deltachat-rpc-server/Makefile.crates
+1-1net/deltachat-rpc-server/Makefile
+121-1243 files

HardenedBSD/ports 4bc9b7escience/afni distinfo Makefile

science/afni: Update to 25.3.03
DeltaFile
+3-3science/afni/distinfo
+1-1science/afni/Makefile
+1-0science/afni/pkg-plist
+5-43 files

HardenedBSD/ports 8112593security/nss distinfo Makefile

security/nss: update to 3.119.1

Announcement:
  https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/nkRQtoi6StY

yes, they did change the distfile naming pattern.
DeltaFile
+3-3security/nss/distinfo
+1-1security/nss/Makefile
+4-42 files

HardenedBSD/ports 3b55e9fmisc/freeguide Makefile, misc/freeguide/files patch-build.xml

misc/freeguide: allow building with any jdk

tested with openjdk21

PR:     272855
Approved-by:    no maintainer
DeltaFile
+19-1misc/freeguide/files/patch-build.xml
+0-1misc/freeguide/Makefile
+19-22 files

HardenedBSD/ports 643d172cad/freecad-devel Makefile.git_rev distinfo

cad/freecad-devel: Update and fix build

Update to 2025.12.11 and add dependency to fix build.
DeltaFile
+3-3cad/freecad-devel/Makefile.git_rev
+3-3cad/freecad-devel/distinfo
+3-1cad/freecad-devel/Makefile
+9-73 files

HardenedBSD/ports 3552a7fdevel/flexdock/files patch-build.xml

devel/flexdock: allow building with any jdk

Tested with openjdk21.

PR:     272855
DeltaFile
+3-3devel/flexdock/files/patch-build.xml
+3-31 files

HardenedBSD/src 5588350. ObsoleteFiles.inc, share/man/man9 pfind.9 Makefile

pfind(9): follow-up fixes and improvements

(Found on a branch from a year ago.)

- Adjust NAMEs
- MLINKS: add pfind_any.9, pfind_any_locked.9; remove old zpfind.9
- Reword the description of pfind_any() so that it doesn't imply only
  zombie processes are returned
- Fix a comma
- Use .Dv for the macro PRS_ZOMBIE
- Move the (logically separate) final statement to a new paragraph
- .Xr to pget(9)

Reviewed by:    0mp
Fixes:  07d78399eb79 ("pfind(9): Update to recent behavior")
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D53548

(cherry picked from commit 2ace05b65a2c912888aeec921fc6f990a5c36909)
DeltaFile
+17-17share/man/man9/pfind.9
+2-1share/man/man9/Makefile
+3-0ObsoleteFiles.inc
+22-183 files

HardenedBSD/ports 21e9adbwww Makefile, www/py-aiolimiter Makefile pkg-descr

www/py-aiolimiter: Add new port

An efficient implementation of a rate limiter for asyncio.
This project implements the Leaky bucket algorithm.
DeltaFile
+22-0www/py-aiolimiter/Makefile
+3-0www/py-aiolimiter/pkg-descr
+3-0www/py-aiolimiter/distinfo
+1-0www/Makefile
+29-04 files

HardenedBSD/ports 22cbc38www Makefile, www/py-aiobreaker Makefile pkg-descr

www/py-aiobreaker: Add new port

aiobreaker is a Python implementation of the Circuit Breaker pattern,
described in Michael T. Nygard's book Release It!_.

Circuit breakers exist to allow one subsystem to fail without destroying
the entire system. This is done by wrapping dangerous operations
(typically integration points) with a component that can circumvent
calls when the system is not healthy.
DeltaFile
+66-0www/py-aiobreaker/files/patch-readme.rst
+30-0www/py-aiobreaker/files/patch-license.md
+21-0www/py-aiobreaker/Makefile
+7-0www/py-aiobreaker/pkg-descr
+3-0www/py-aiobreaker/distinfo
+1-0www/Makefile
+128-06 files

HardenedBSD/src f2a21b1sys/dev/e1000 e1000_82571.c

e1000: Don't enable ASPM L1 without L0s

Reporter noted packet loss with 82583.  NVM is down level.  The
errata docs mention disabling this, which should be the firmware
default, so I am not sure why we were enabling this bit.  Linux and
OpenBSD have the same issue, while NetBSD got it right.

Reported by:    Codin <codin at nagi.ftp.sh>
Tested by:      Codin <codin at nagi.ftp.sh>

(cherry picked from commit 2ead091715dee327b3e00bc9840e1a95827b8e82)
DeltaFile
+2-1sys/dev/e1000/e1000_82571.c
+2-11 files

HardenedBSD/src 618083esys/dev/e1000 if_em.c

e1000: Bump 82574/82583 PBA to 32K

The reporter contacted me with packet loss and throughput fluctuations
on a low power machine (Intel J1900) that got worse with the recent AIM
algorithm in FreeBSD 14.2+.

32K RX PBA matches Linux default.  Add a conditional path since we don't
otherwise do a fixup for jumbo frames to retain space for two frames in
Tx.

With this change and an additional errata change, the throughput meets
line rate for the reporter.

Reported by:    Codin <codin at nagi.ftp.sh>
Tested by:      Codin <codin at nagi.ftp.sh>

(cherry picked from commit aa30bab9a92e1be230b9708bff9f33aae7d384e5)
DeltaFile
+5-1sys/dev/e1000/if_em.c
+5-11 files

HardenedBSD/src ca69366sys/dev/e1000 e1000_82571.c

e1000: Don't enable ASPM L1 without L0s

Reporter noted packet loss with 82583.  NVM is down level.  The
errata docs mention disabling this, which should be the firmware
default, so I am not sure why we were enabling this bit.  Linux and
OpenBSD have the same issue, while NetBSD got it right.

Reported by:    Codin <codin at nagi.ftp.sh>
Tested by:      Codin <codin at nagi.ftp.sh>

(cherry picked from commit 2ead091715dee327b3e00bc9840e1a95827b8e82)
DeltaFile
+2-1sys/dev/e1000/e1000_82571.c
+2-11 files

HardenedBSD/src 714051fsys/dev/e1000 if_em.c

e1000: Bump 82574/82583 PBA to 32K

The reporter contacted me with packet loss and throughput fluctuations
on a low power machine (Intel J1900) that got worse with the recent AIM
algorithm in FreeBSD 14.2+.

32K RX PBA matches Linux default.  Add a conditional path since we don't
otherwise do a fixup for jumbo frames to retain space for two frames in
Tx.

With this change and an additional errata change, the throughput meets
line rate for the reporter.

Reported by:    Codin <codin at nagi.ftp.sh>
Tested by:      Codin <codin at nagi.ftp.sh>

(cherry picked from commit aa30bab9a92e1be230b9708bff9f33aae7d384e5)
DeltaFile
+5-1sys/dev/e1000/if_em.c
+5-11 files