HardenedBSD/ports 0a29dd6www/R-cran-shiny Makefile distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+3-3www/R-cran-shiny/Makefile
+3-3www/R-cran-shiny/distinfo
+6-62 files

HardenedBSD/ports f69f23awww/R-cran-shiny Makefile distinfo

www/R-cran-shiny: Update to 1.12.1

Reported by:    portscout
DeltaFile
+3-3www/R-cran-shiny/Makefile
+3-3www/R-cran-shiny/distinfo
+6-62 files

HardenedBSD/src 6dabc1dsbin/pfctl pf_print_state.c, sys/conf newvers.sh

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+0-5sbin/pfctl/pf_print_state.c
+1-2sys/conf/newvers.sh
+1-72 files

HardenedBSD/src 5e00129sbin/pfctl pf_print_state.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+0-5sbin/pfctl/pf_print_state.c
+0-51 files

HardenedBSD/src 7836f0clibexec/rc/rc.d FILESYSTEMS noshutdown, sbin/reboot nextboot.sh

Merge branch 'freebsd/14-stable/main' into hardened/14-stable/master
DeltaFile
+4-0sbin/reboot/nextboot.sh
+1-1usr.bin/fsync/fsync.c
+1-1libexec/rc/rc.d/FILESYSTEMS
+1-1libexec/rc/rc.d/noshutdown
+1-1sys/sys/bus.h
+1-0libexec/rc/rc.d/cleanvar
+9-46 files

HardenedBSD/src 4e323b8lib/libsysdecode Makefile, libexec/rc/rc.d noshutdown FILESYSTEMS

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+34-10sbin/reboot/reboot.c
+2-2sbin/reboot/nextboot.8
+1-1libexec/rc/rc.d/noshutdown
+1-1usr.bin/fsync/fsync.c
+1-1libexec/rc/rc.d/FILESYSTEMS
+1-1lib/libsysdecode/Makefile
+40-162 files not shown
+42-178 files

HardenedBSD/ports fc3e0a6ports-mgmt/poudriere-devel distinfo, www/homepage pkg-plist

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+2,180-2,178www/homepage/pkg-plist
+136-136x11/slick-greeter/pkg-plist
+10-17x11/slick-greeter/Makefile
+20-0x11/slick-greeter/files/patch-data_x.dm.slick-greeter.gschema.xml
+11-0x11/slick-greeter/files/patch-meson.build
+3-3ports-mgmt/poudriere-devel/distinfo
+2,360-2,3347 files not shown
+2,375-2,34713 files

HardenedBSD/ports d2abc6fwww/homepage pkg-plist distinfo

www/homepage: Update to 1.8.0

ChangeLog: https://github.com/gethomepage/homepage/releases/tag/v1.8.0
DeltaFile
+2,180-2,178www/homepage/pkg-plist
+3-3www/homepage/distinfo
+1-1www/homepage/Makefile
+2,184-2,1823 files

HardenedBSD/src 33510b1sbin/reboot nextboot.sh

nextboot: Reimplement missing -a option

PR:             260520
MFC after:      3 days
Fixes:          e307eb94ae52 ("loader: zfs should support bootonce an nextboot")
DeltaFile
+4-0sbin/reboot/nextboot.sh
+4-01 files

HardenedBSD/src ca87690libexec/rc/rc.d FILESYSTEMS cleanvar

cleanvar: Fix startup order

Instead of having FILESYSTEMS require cleanvar, which doesn't really
make semantic sense, say that cleanvar needs to run before FILESYSTEMS.

MFC after:      3 days
Reviewed by:    imp
Differential Revision:  https://reviews.freebsd.org/D54118

(cherry picked from commit 6ce227d6274869a95150746d2f2d8c8c5ed9a266)
DeltaFile
+1-1libexec/rc/rc.d/FILESYSTEMS
+1-0libexec/rc/rc.d/cleanvar
+2-12 files

HardenedBSD/src 2872555usr.bin/fsync fsync.c

fsync: Open files in non-blocking mode

This avoids blocking forever when invoked on a fifo.

MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D54084

(cherry picked from commit 69e041521a80a0b8950f6ec25269a9c3949d6590)
DeltaFile
+1-1usr.bin/fsync/fsync.c
+1-11 files

HardenedBSD/src 68ed90dsbin/reboot reboot.c nextboot.8

nextboot: Reimplement missing -a option

* Reimplement the -a option which was available in the original shell
  script and is still documented.

* Print the correct usage string when invoked as nextboot.

* Add the -D option to the manual page synopsis.

MFC after:      1 week
Fixes:          fd6d47375a78 ("rescue,nextboot: Install nextboot as a link to reboot, rm nextboot.sh")
Reviewed by:    imp
Differential Revision:  https://reviews.freebsd.org/D54120

(cherry picked from commit de670c611b17939712a81dc56f73a3ff84f6c178)
DeltaFile
+34-10sbin/reboot/reboot.c
+2-2sbin/reboot/nextboot.8
+36-122 files

HardenedBSD/src 8959edalibexec/rc/rc.d noshutdown

noshutdown: Fix startup order

This rc script exists solely to create a file, so have it explicitly
require FILESYSTEMS.  In its current form, it was as likely as not to
end up running before cleanvar, which would undo its work.

MFC after:      3 days
Fixes:          384d976725a5 ("rc.d: Add precious_machine rc.conf knob to create /var/run/noshutdown")
Reviewed by:    kib
Differential Revision:  https://reviews.freebsd.org/D54119

(cherry picked from commit e540e8b2c04f03b4210a3bf2f421c05b918d1b51)
DeltaFile
+1-1libexec/rc/rc.d/noshutdown
+1-11 files

HardenedBSD/src 5f8988blib/libsysdecode Makefile

libsysdecode: Use consistent include path

mkioctls should look at the same set of headers as mktables does.

MFC after:      1 week
Fixes:          139d114acc7b ("libsysdecode use MKTABLES_INCLUDEDIR")
Sponsored by:   Klara, Inc.
Sponsored by:   NetApp, Inc.
Reviewed by:    sjg
Differential Revision:  https://reviews.freebsd.org/D54106

(cherry picked from commit c51876a107310984ba3a31b088caebcfd86a9844)
DeltaFile
+1-1lib/libsysdecode/Makefile
+1-11 files

HardenedBSD/src ed66f6esys/sys bus.h

bus: Return 0 if reading an ivar fails

In the non-INVARIANTS case, return 0 rather than stack garbage if
reading an ivar fails (in the INVARIANTS case, we still panic).

MFC after:      1 week
Sponsored by:   Klara, Inc.
Sponsored by:   NetApp, Inc.
Reviewed by:    jhb
Differential Revision:  https://reviews.freebsd.org/D54078

(cherry picked from commit 4c2295c15860e70c8bd3f05f9229d2fc40dfd50d)
DeltaFile
+1-1sys/sys/bus.h
+1-11 files

HardenedBSD/src 1dee233sbin/pfctl pf_print_state.c

pfctl: report ICMP states consistently for IPv4/IPv6

Remove the '#ifndef INET6', which never actually mattered because this
define is never set. This makes us report ICMP states for IPv4 and IPv6
the same way (and also aligns us with OpenBSD).

This means we will now always report state 0:0 rather than
NO_TRAFFIC:NO_TRAFFIC for icmp6 (like we already did for icmp).

Reported by:    Lev Prokofev <lev at netgate.com>
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+0-5sbin/pfctl/pf_print_state.c
+0-51 files

HardenedBSD/ports fb2fa18ports-mgmt/poudriere-devel distinfo Makefile

ports-mgmt/poudriere-devel: Update to 3.3.0-2479-gfcf8bfd5b.

Changes:
- bulk/testport: Fix fetching packages for 14.3 and 15.0.
DeltaFile
+3-3ports-mgmt/poudriere-devel/distinfo
+2-2ports-mgmt/poudriere-devel/Makefile
+5-52 files

HardenedBSD/ports 10f7deex11/slick-greeter pkg-plist Makefile, x11/slick-greeter/files patch-data_x.dm.slick-greeter.gschema.xml patch-meson.build

x11/slick-greeter: update to 2.2.5

PR:             291305
Reported by:    Olivier Duchateau
DeltaFile
+136-136x11/slick-greeter/pkg-plist
+10-17x11/slick-greeter/Makefile
+20-0x11/slick-greeter/files/patch-data_x.dm.slick-greeter.gschema.xml
+11-0x11/slick-greeter/files/patch-meson.build
+3-3x11/slick-greeter/distinfo
+180-1565 files

HardenedBSD/src 2572beccontrib/mtree create.c mtree.8, contrib/netbsd-tests/usr.sbin/mtree t_mtree.sh

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/master
DeltaFile
+60-84contrib/mtree/create.c
+108-31contrib/mtree/mtree.8
+37-9contrib/mtree/spec.c
+25-16contrib/mtree/compare.c
+39-1contrib/netbsd-tests/usr.sbin/mtree/t_mtree.sh
+10-10contrib/mtree/crc.c
+279-1515 files not shown
+312-17011 files

HardenedBSD/ports be5b1d9audio/g4music distinfo Makefile

audio/g4music: Update 4.5 => 4.6

Changelog:
https://gitlab.gnome.org/neithern/g4music/-/tags/v4.6

PR:     291634
DeltaFile
+3-3audio/g4music/distinfo
+1-1audio/g4music/Makefile
+2-0audio/g4music/pkg-plist
+6-43 files

HardenedBSD/src c8e3738contrib/mtree create.c mtree.8, contrib/netbsd-tests/usr.sbin/mtree t_mtree.sh

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+60-84contrib/mtree/create.c
+108-31contrib/mtree/mtree.8
+37-9contrib/mtree/spec.c
+25-16contrib/mtree/compare.c
+39-1contrib/netbsd-tests/usr.sbin/mtree/t_mtree.sh
+10-10contrib/mtree/crc.c
+279-1515 files not shown
+312-17011 files

HardenedBSD/src ff9e2fccontrib/mtree create.c mtree.8, contrib/netbsd-tests/usr.sbin/mtree t_mtree.sh

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+60-84contrib/mtree/create.c
+108-31contrib/mtree/mtree.8
+37-9contrib/mtree/spec.c
+25-16contrib/mtree/compare.c
+39-1contrib/netbsd-tests/usr.sbin/mtree/t_mtree.sh
+10-10contrib/mtree/crc.c
+279-1515 files not shown
+312-17011 files

HardenedBSD/ports bcc4f2ccad/kicad-devel/files patch-eeschema_sch__io_easyedapro_sch__io__easyedapro.cpp, security/kanidm distinfo Makefile.crates

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+195-0x11/xfce4-appmenu-plugin/pkg-plist
+31-31security/kanidm/distinfo
+39-0security/vuxml/vuln/2025.xml
+0-34cad/kicad-devel/files/patch-eeschema_sch__io_easyedapro_sch__io__easyedapro.cpp
+14-14security/kanidm/Makefile.crates
+13-13www/github-release-monitor/pkg-plist
+292-9242 files not shown
+424-19648 files

HardenedBSD/ports a47f944security/kanidm distinfo Makefile.crates

security/kanidm: Update to 1.8.5

ChangeLog: https://github.com/kanidm/kanidm/releases/tag/v1.8.5

Approved by:    bofh@ (implicit)
DeltaFile
+31-31security/kanidm/distinfo
+14-14security/kanidm/Makefile.crates
+1-1security/kanidm/Makefile
+46-463 files

HardenedBSD/src 50657a8share/colldef_unicode zh_CN.UTF-8.src ko_KR.UTF-8.src, share/ctypedef C.UTF-8.src

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/master
DeltaFile
+42,569-43,804share/colldef_unicode/zh_CN.UTF-8.src
+20,031-20,027share/colldef_unicode/ko_KR.UTF-8.src
+8,521-8,521share/colldef_unicode/ja_JP.UTF-8.src
+9,988-0tools/tools/locale/etc/final-maps/map.UTF-8
+5,765-6share/ctypedef/C.UTF-8.src
+2,842-2,827share/colldef_unicode/hu_HU.UTF-8.src
+89,716-75,185387 files not shown
+157,442-142,364393 files

HardenedBSD/src c14cefasys/conf newvers.sh

HBSD: Fix branch detection in release

The way the build scripts use newvers.sh is a bit weird. This commit
fixes the issue by forcing only a single BRANCH assignment.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
issue:          #119
MFC-to:         15-STABLE
DeltaFile
+1-2sys/conf/newvers.sh
+1-21 files

HardenedBSD/ports e7082cbcad/kicad-devel Makefile.git_rev distinfo, cad/kicad-devel/files patch-eeschema_sch__io_easyedapro_sch__io__easyedapro.cpp patch-eeschema_sch__base__frame.cpp

cad/kicad-devel: Update to 2025.12.13
DeltaFile
+0-34cad/kicad-devel/files/patch-eeschema_sch__io_easyedapro_sch__io__easyedapro.cpp
+4-4cad/kicad-devel/files/patch-eeschema_sch__base__frame.cpp
+3-3cad/kicad-devel/files/patch-eeschema_sch__base__frame.h
+3-3cad/kicad-devel/Makefile.git_rev
+3-3cad/kicad-devel/distinfo
+3-3cad/kicad-devel/files/patch-pcbnew_pcb__base__frame.cpp
+16-502 files not shown
+20-528 files

HardenedBSD/ports ffb2ed4security/gopass distinfo Makefile

security/gopass: Update to 1.16.1

ChangeLog:      https://github.com/gopasspw/gopass/releases/tag/v1.16.17
MFH:            2025Q4
DeltaFile
+7-7security/gopass/distinfo
+1-2security/gopass/Makefile
+8-92 files

HardenedBSD/ports eb1c16bnet-im/gotosocial Makefile

net-im/gotosocial: Remove go version

PR:     291476
DeltaFile
+1-1net-im/gotosocial/Makefile
+1-11 files

HardenedBSD/ports 4785442www/github-release-monitor pkg-plist distinfo

www/github-release-monitor: Update to 1.4.1 (security update)

ChangeLog: https://github.com/iamspido/github-release-monitor/releases/tag/v1.4.1

Security:       7a1bd1ca-cf40-41e2-9c5f-143a0d4b17af
MFH:            2025Q4
DeltaFile
+13-13www/github-release-monitor/pkg-plist
+3-3www/github-release-monitor/distinfo
+1-1www/github-release-monitor/Makefile
+17-173 files