HardenedBSD/ports b6173fedevel/cmake-core/files patch-Modules_Compiler_Clang.cmake, graphics/png distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+4-8www/opengist/files/opengist.in
+11-0devel/cmake-core/files/patch-Modules_Compiler_Clang.cmake
+5-5graphics/png/distinfo
+3-3security/libgcrypt/distinfo
+3-3japanese/proxy2ch/distinfo
+4-2www/opengist/Makefile
+30-2110 files not shown
+44-3816 files

HardenedBSD/src aa1f6calib/libc/stdio vfprintf.c vfwprintf.c, share/man/man5 src.conf.5

libc: drop NO_FP_LIBC support

NO_FP_LIBC was added in 2004 to save space by disabling FP support in
*printf()/*scanf(). The size benefit is negligible on modern systems
and conflicts with assumptions made by current base utilities.

Remove the option and always build libc with floating-point support.

Reported by:    Oskar Holmlund <eovholmlund at gmail com>

(cherry picked from commit 8e6843db9bc5af14b0ee631081ecaf1f02ce821a)
DeltaFile
+0-14lib/libc/stdio/vfprintf.c
+0-12lib/libc/stdio/vfwprintf.c
+0-12lib/libc/stdio/printf-pos.c
+0-10lib/libc/stdio/vfscanf.c
+0-8lib/libc/stdio/vfwscanf.c
+1-5share/man/man5/src.conf.5
+1-617 files not shown
+1-8413 files

HardenedBSD/ports 7388630www/opengist Makefile, www/opengist/files opengist.in

www/opengist: Fix user creation and usage.

PR:             292747
Reported by:    Swee <meow at swee.codes>
DeltaFile
+4-8www/opengist/files/opengist.in
+4-2www/opengist/Makefile
+8-102 files

HardenedBSD/ports d2c9fa5security/libgcrypt distinfo Makefile

security/libgcrypt: Update to 1.12.0
DeltaFile
+3-3security/libgcrypt/distinfo
+1-1security/libgcrypt/Makefile
+1-1security/libgcrypt/pkg-plist
+5-53 files

HardenedBSD/src ab9b047. .clang-format

clang-format: adjust to sort C++ headers per style(9)

Many standard C++ headers do not have the .h file extension: some, such as
`iostream`, lack it; others have a .hpp file extension. Moreover, some
projects (like ATF/Kyua) also contain .ipp files, which are C++ "interface"
files.

Relax the regular expression to ensure that non-traditional C "system"
headers, C++ headers, etc, with angle brackets are sorted before
"local" headers.

MFC after:      1 week
Reviewed by: markj
Differential Revision: https://reviews.freebsd.org/D54401
DeltaFile
+2-2.clang-format
+2-21 files

HardenedBSD/ports bea1f1bprint/harfbuzz distinfo Makefile

print/harfbuzz*: Update to 12.3.2

Changelog: https://github.com/harfbuzz/harfbuzz/releases/tag/12.3.2

PR:             292666
Reviewed by:    desktop (arrowd), previous version
Exp-run by:     antoine
DeltaFile
+3-3print/harfbuzz/distinfo
+2-2print/harfbuzz/Makefile
+5-52 files

HardenedBSD/ports d514b3djapanese/proxy2ch distinfo Makefile

japanese/proxy2ch: Improve port

Clean up the remaining parts from commit
6b4e95f5eeb457d8e59f1bbdce967a404472b792

Approved by:    blanket, just fix it
DeltaFile
+3-3japanese/proxy2ch/distinfo
+0-4japanese/proxy2ch/Makefile
+3-72 files

HardenedBSD/ports 5d4938fnet/gerbera distinfo Makefile

net/gerbera: Update to 3.1.1

Changelog: https://github.com/gerbera/gerbera/releases/tag/v3.1.1
DeltaFile
+3-3net/gerbera/distinfo
+1-1net/gerbera/Makefile
+4-42 files

HardenedBSD/ports 86e6270devel/cmake-core Makefile, devel/cmake-core/files patch-Modules_Compiler_Clang.cmake

devel/cmake-core: Use fat LTO instead of thin LTO

As we hardcode thin LTO to one thread [1] without any resolve for more
than a year use fat which performs better

1: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=281765

PR:             292178
Approved by:    timeout (no objections for 3+ weeks)
Exp-run by:     antoine
DeltaFile
+11-0devel/cmake-core/files/patch-Modules_Compiler_Clang.cmake
+1-0devel/cmake-core/Makefile
+12-02 files

HardenedBSD/ports d6718b3graphics/png distinfo Makefile

graphics/png: Update to 1.6.54

Fixes CVE-2026-22695 and CVE-2026-22801

Changelog: https://github.com/pnggroup/libpng/blob/v1.6.54/ANNOUNCE

PR:             292540
Reviewed by:    desktop (arrowd)
Exp-run by:     antoine
DeltaFile
+5-5graphics/png/distinfo
+1-1graphics/png/Makefile
+1-1graphics/png/pkg-plist
+7-73 files

HardenedBSD/ports db3f76daudio/rhythmbox Makefile, devel/gilt distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+58-0security/cyberchef/pkg-plist
+18-20x11-wm/wayfire/Makefile
+11-14audio/rhythmbox/Makefile
+0-15www/freenginx-devel/files/extra-patch-rds-csv-nginx-module-config
+5-5www/freenginx-devel/distinfo
+5-5devel/gilt/distinfo
+97-5937 files not shown
+187-14243 files

HardenedBSD/ports 70f43d4x11-wm/wayfire Makefile distinfo

x11-wm/wayfire: Update 0.10.0 => 0.10.1, take maintainership

Changelog:
https://github.com/WayfireWM/wayfire/releases/tag/v0.10.1

Improve port:
- Sort BUILD_DEPENDS and LIB_DEPENDS.
- Split USES.
- Fix warnings from portclippy.
- Improve pkg-message.
- Improve text distribution across lines in pkg-descr.

PR:     292838
DeltaFile
+18-20x11-wm/wayfire/Makefile
+3-5x11-wm/wayfire/distinfo
+8-0x11-wm/wayfire/pkg-message
+3-3x11-wm/wayfire/pkg-descr
+32-284 files

HardenedBSD/ports de9ce6cgames/gnome-nibbles distinfo Makefile

games/gnome-nibbles: update to 4.4.2

Update gnome-nibbles to version 4.4.2.

PR:             290753
DeltaFile
+3-3games/gnome-nibbles/distinfo
+1-1games/gnome-nibbles/Makefile
+4-42 files

HardenedBSD/ports beac691textproc/link-grammar distinfo Makefile

textproc/link-grammar: update to 5.13.0

Update link-grammar to version 5.13.0.

PR:             290752
DeltaFile
+3-3textproc/link-grammar/distinfo
+1-1textproc/link-grammar/Makefile
+4-42 files

HardenedBSD/ports 29dc7cbaudio/rhythmbox Makefile distinfo

audio/rhythmbox: update to 3.4.9

Update rhythmbox to version 3.4.9.

PR:             290538
DeltaFile
+11-14audio/rhythmbox/Makefile
+3-3audio/rhythmbox/distinfo
+0-2audio/rhythmbox/pkg-plist
+14-193 files

HardenedBSD/ports ef938f5textproc/py-parsel Makefile distinfo

textproc/py-parsel: Update 1.10.0 => 1.11.0

Changelog:
https://github.com/scrapy/parsel/releases/tag/v1.11.0

PR:     292834
DeltaFile
+4-4textproc/py-parsel/Makefile
+3-3textproc/py-parsel/distinfo
+7-72 files

HardenedBSD/ports 7a3c016net/onedrive Makefile distinfo

net/onedrive: Update 2.5.9 => 2.5.10

Changelog:
https://github.com/abraunegg/onedrive/blob/v2.5.10/changelog.md

PR:     292828
MFH:    2026Q1
DeltaFile
+6-3net/onedrive/Makefile
+3-3net/onedrive/distinfo
+9-62 files

HardenedBSD/ports 473643edatabases/mdbx distinfo Makefile

databases/mdbx: Update 0.13.9 => 0.13.11

Changelogs:
https://github.com/erthink/libmdbx/blob/v0.13.11/ChangeLog.md
https://github.com/erthink/libmdbx/releases/tag/v0.13.10_github_workaround
https://github.com/erthink/libmdbx/releases/tag/v0.13.11

PR:     292832
DeltaFile
+3-3databases/mdbx/distinfo
+1-1databases/mdbx/Makefile
+4-42 files

HardenedBSD/ports 2de9005sysutils/py-ansible-core220 distinfo Makefile, sysutils/py-ansible-core220/files patch-pyproject.toml

sysutils/py-ansible-core220: Update to 2.20.2
DeltaFile
+4-4sysutils/py-ansible-core220/files/patch-pyproject.toml
+3-3sysutils/py-ansible-core220/distinfo
+1-1sysutils/py-ansible-core220/Makefile
+8-83 files

HardenedBSD/ports e8a6754security/openvpn-devel distinfo Makefile

security/openvpn-devel: Update 2.7_rc5 => 2.7_rc6

FreeBSD - notable changes for rc5 => rc6 update:
  - bugfix on restarting a p2mp server instance with SIGUSR1
  (inadvertedly closing fd 0, causing a crash on the next restart),
  - prevent NULL pointer crash on suitable combination of --dns-updown
  statements in openvpn config file (not pushable),
  - prevent inappropriate management interface activity if a password is
  set and --management-forget-disconnect or --management-signal are active,
  - more conversion warnings fixed,
  - remove #ifdefs around socket sendbuf/receive buf handling,
  assuming that all platforms that have POSIX sockets have this,
  - add mbedTLS 4 support,
  - fix check for failed fork() in port-share code.

PR:             292829
Requested by:   maintainer
DeltaFile
+3-3security/openvpn-devel/distinfo
+2-2security/openvpn-devel/Makefile
+5-52 files

HardenedBSD/ports eea7a22emulators/winetricks distinfo Makefile

emulators/winetricks: Update 20250212 => 20260125

Commit log:
https://github.com/Winetricks/winetricks/compare/e73c4d8...20260125

PR:     292831
DeltaFile
+3-3emulators/winetricks/distinfo
+1-2emulators/winetricks/Makefile
+4-52 files

HardenedBSD/ports 0bb9100sysutils/lxqt-config distinfo Makefile

sysutils/lxqt-config: Update to 2.3.1

ChangeLog at:   https://lxqt-project.org/release/2026/01/29/point-release-lxqt-config-2-3-1/
With hat:       lxqt
DeltaFile
+3-3sysutils/lxqt-config/distinfo
+1-2sysutils/lxqt-config/Makefile
+1-0sysutils/lxqt-config/pkg-plist
+5-53 files

HardenedBSD/ports 46e972anet/asterisk20 distinfo pkg-plist

net/asterisk20: Update 20.17.0 => 20.18.1

Changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ChangeLog-20.18.0.html
https://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ChangeLog-20.18.1.html

This update incorporates an important fix for FreeBSD users:
- rtp/rtcp: Configure dual-stack behavior via IPV6_V6ONLY

PR:             262386 292768
Approved by:    Oleksandr Kryvulia <o.kryvulia at flex-it.com.ua> (maintainer)
Sponsored by:   PANS Jarosław
MFH:            2026Q1
DeltaFile
+3-3net/asterisk20/distinfo
+2-0net/asterisk20/pkg-plist
+1-1net/asterisk20/Makefile
+6-43 files

HardenedBSD/ports 7a605cdnet/asterisk22 distinfo Makefile

net/asterisk22: Update 22.8.0 => 22.8.1

Changelog:
https://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ChangeLog-22.8.1.html

PR:             292814
Approved by:    Oleksandr Kryvulia <o.kryvulia at flex-it.com.ua> (maintainer)
Sponsored by:   PANS Jarosław
MFH:            2026Q1
DeltaFile
+3-3net/asterisk22/distinfo
+1-1net/asterisk22/Makefile
+4-42 files

HardenedBSD/ports 0e365e5devel/gilt distinfo Makefile

devel/gilt: update to 2.2.5

Changes:        https://github.com/retr0h/gilt/releases/tag/v2.2.5
Reported by:    portscout
DeltaFile
+5-5devel/gilt/distinfo
+2-2devel/gilt/Makefile
+7-72 files

HardenedBSD/src 9df110btests/sys/netinet socket_afinet.c

tests/netinet: fix tests that depended on connect(in6addr_any)

Fixes:  627e126dbb07b167b028380ef61bb45f10493938
DeltaFile
+2-0tests/sys/netinet/socket_afinet.c
+2-01 files

HardenedBSD/src 56e1cbasys/netinet6 ip6_mroute.c

ip6_mroute: Remove unnecessary casts

No functional change intended.

MFC after:      1 week
Sponsored by:   Stormshield
Sponsored by:   Klara, Inc.
DeltaFile
+3-4sys/netinet6/ip6_mroute.c
+3-41 files

HardenedBSD/src 34c3e1dusr.bin/netstat mroute6.c mroute.c

netstat: Fix whitespace in libxo output for multicast routes

Also fix some bogus libxo format strings in mroute6.c, and close a
couple of lists instead of opening them twice.

Fixes:          ade9ccfe211a ("Convert netstat to use libxo.")
MFC after:      2 weeks
Sponsored by:   Stormshield
Sponsored by:   Klara, Inc.
DeltaFile
+6-7usr.bin/netstat/mroute6.c
+5-6usr.bin/netstat/mroute.c
+11-132 files

HardenedBSD/ports 73bb49asysutils/UEFITool distinfo Makefile

sysutils/UEFITool: update to 73

Changelog:      https://github.com/LongSoft/UEFITool/releases/tag/A73
DeltaFile
+3-3sysutils/UEFITool/distinfo
+1-1sysutils/UEFITool/Makefile
+4-42 files

HardenedBSD/ports d54c6f5security/cyberchef pkg-plist distinfo

security/cyberchef: Update to 10.20.0

re: https://github.com/gchq/CyberChef/releases/tag/v10.20.0
DeltaFile
+58-0security/cyberchef/pkg-plist
+3-3security/cyberchef/distinfo
+1-1security/cyberchef/Makefile
+62-43 files