HardenedBSD/src cb17fecshare/mk meta.autodep.mk meta2deps.sh

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+52-31share/mk/meta.autodep.mk
+42-12share/mk/meta2deps.sh
+21-29share/mk/install-new.mk
+39-10share/mk/meta2deps.py
+28-18share/mk/meta.stage.mk
+17-7share/mk/gendirdeps.mk
+199-10712 files not shown
+232-19918 files

HardenedBSD/src da1bbbcsys/fs/nfsserver nfs_nfsdstate.c

Merge branch 'freebsd/14-stable/main' into hardened/14-stable/master
DeltaFile
+14-0sys/fs/nfsserver/nfs_nfsdstate.c
+14-01 files

HardenedBSD/src 303bb95sys/fs/nfsserver nfs_nfsdstate.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+14-0sys/fs/nfsserver/nfs_nfsdstate.c
+14-01 files

HardenedBSD/ports 761634fdevel/py-ty distinfo, irc/halloy distinfo Makefile.crates

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+823-681irc/halloy/distinfo
+410-339irc/halloy/Makefile.crates
+69-59misc/codex/distinfo
+34-29misc/codex/Makefile.crates
+51-3sysutils/work-tuimer/distinfo
+13-13devel/py-ty/distinfo
+1,400-1,12429 files not shown
+1,542-1,19335 files

HardenedBSD/ports ac4f7ecirc/halloy distinfo Makefile.crates

irc/halloy: update to 2025.12

Release notes: https://github.com/squidowl/halloy/releases/tag/2025.12

PR: 291312
DeltaFile
+823-681irc/halloy/distinfo
+410-339irc/halloy/Makefile.crates
+3-3irc/halloy/Makefile
+1,236-1,0233 files

HardenedBSD/ports ea79086x11/cinnamon Makefile

x11/cinnamon: optionalise fallback panel

When Cinnamon fails to start, the fallback is x11-wm/metacity +
panel, similar to MATE or GNOME Flashback. In control structure
order, x11/mate-panel, x11/gnome-panel and x11/tint are probed for
the presence, so expose these as OPTIONS and set x11/mate-panel as
default.

While here, restore the old BUILD_DEPENDS line for <EGL/eglmesaext.h>.
DeltaFile
+18-4x11/cinnamon/Makefile
+18-41 files

HardenedBSD/ports 28e0628dns/dnsx distinfo Makefile

dns/dnsx: Update to 1.2.3

ChangeLog:
https://github.com/projectdiscovery/dnsx/releases/tag/v1.2.3
DeltaFile
+5-5dns/dnsx/distinfo
+2-6dns/dnsx/Makefile
+7-112 files

HardenedBSD/ports 89424c2net/py-python-socks distinfo Makefile

net/py-python-socks: Update to 2.8.0
DeltaFile
+3-3net/py-python-socks/distinfo
+1-1net/py-python-socks/Makefile
+4-42 files

HardenedBSD/ports aa9d079net/py-aiohttp-socks distinfo Makefile

net/py-aiohttp-socks: Update to 0.11.0
DeltaFile
+3-3net/py-aiohttp-socks/distinfo
+1-1net/py-aiohttp-socks/Makefile
+4-42 files

HardenedBSD/ports 7e8fff0sysutils/work-tuimer distinfo Makefile.crates

sysutils/work-tuimer: Update to 0.3.4

ChangeLog:
https://github.com/Kamyil/work-tuimer/releases/tag/v0.3.4
DeltaFile
+51-3sysutils/work-tuimer/distinfo
+24-0sysutils/work-tuimer/Makefile.crates
+1-2sysutils/work-tuimer/Makefile
+76-53 files

HardenedBSD/ports 541b7fdsecurity/nuclei distinfo Makefile

security/nuclei: Update to 3.6.0

ChangeLog:
https://github.com/projectdiscovery/nuclei/releases/tag/v3.6.0
DeltaFile
+5-5security/nuclei/distinfo
+1-2security/nuclei/Makefile
+6-72 files

HardenedBSD/ports 3a8d7d7www/katana distinfo Makefile

www/katana: Update to 1.3.0

ChangeLog:
https://github.com/projectdiscovery/katana/releases/tag/v1.3.0
DeltaFile
+5-5www/katana/distinfo
+1-2www/katana/Makefile
+6-72 files

HardenedBSD/src 9bbb08fshare/mk meta.autodep.mk meta2deps.sh

Update share/mk files from bmake

Update to the latest makefiles etc from bmake.
Mostly this just replaces sjg license with an SPDX tag.

There are also some improvements to meta2deps* and optimizations
to leverage POSIX shell features in some target scripts.
Default isPOSIX_SHELL to ':' in sys.mk to enable these.

Use :sh1 in M_type if possible.

bsd.progs.mk has diverged too much to touch beyond making the
SPDX tag update.

Reviewed by:    stevek
Differential Revision:  https://reviews.freebsd.org/D54150
DeltaFile
+52-31share/mk/meta.autodep.mk
+42-12share/mk/meta2deps.sh
+21-29share/mk/install-new.mk
+39-10share/mk/meta2deps.py
+28-18share/mk/meta.stage.mk
+17-7share/mk/gendirdeps.mk
+199-10712 files not shown
+232-19918 files

HardenedBSD/ports e54fdf5devel Makefile, devel/linux-rl9-nasm Makefile pkg-plist.amd64

devel/linux-rl9-nasm: New port: Portable x86 assembler which uses Intel-like syntax
DeltaFile
+24-0devel/linux-rl9-nasm/Makefile
+8-0devel/linux-rl9-nasm/pkg-plist.amd64
+5-0devel/linux-rl9-nasm/pkg-descr
+3-0devel/linux-rl9-nasm/distinfo
+1-0devel/Makefile
+41-05 files

HardenedBSD/ports f1858e6devel/py-ty distinfo Makefile.crates

devel/py-ty: Update to 0.0.1a33

Changelog: https://github.com/astral-sh/ty/blob/0.0.1-alpha.33/CHANGELOG.md

Reported by:    Repology
DeltaFile
+13-13devel/py-ty/distinfo
+6-6devel/py-ty/Makefile.crates
+1-1devel/py-ty/Makefile
+20-203 files

HardenedBSD/src c818089sys/fs/nfsserver nfs_nfsdstate.c

nfs_nfsdstate.c: Add sanity checks for lock stateids

Bugzilla PR reported a crash caused by a synthetic client
doing a Lock operation request with a delegation stateid.

This patch fixes the problem by adding sanity checks
for the type of stateid provided as an argument to the
Lock and LockU operations.

It has been tested with the FreeBSD, Linux and Solaris 11.4
clients.  Hopefully, other NFSv4 clients will work ok
as well.

PR:     291080

(cherry picked from commit aa1cf240887ddcca66dfb969fdc5a8d545396037)
DeltaFile
+14-0sys/fs/nfsserver/nfs_nfsdstate.c
+14-01 files

HardenedBSD/src ffd47a4sys/fs/nfsserver nfs_nfsdstate.c

nfs_nfsdstate.c: Add sanity checks for lock stateids

Bugzilla PR reported a crash caused by a synthetic client
doing a Lock operation request with a delegation stateid.

This patch fixes the problem by adding sanity checks
for the type of stateid provided as an argument to the
Lock and LockU operations.

It has been tested with the FreeBSD, Linux and Solaris 11.4
clients.  Hopefully, other NFSv4 clients will work ok
as well.

PR:     291080

(cherry picked from commit aa1cf240887ddcca66dfb969fdc5a8d545396037)
DeltaFile
+14-0sys/fs/nfsserver/nfs_nfsdstate.c
+14-01 files

HardenedBSD/ports 07b6cafdevel/tree-sitter Makefile

devel/tree-sitter: Add a comment about neovim compatibility
DeltaFile
+3-0devel/tree-sitter/Makefile
+3-01 files

HardenedBSD/ports 30df450sysutils/chaoskube distinfo Makefile

sysutils/chaoskube: Update to 0.37.1

ChangeLog:
https://github.com/linki/chaoskube/releases/tag/v0.37.1
DeltaFile
+5-5sysutils/chaoskube/distinfo
+1-2sysutils/chaoskube/Makefile
+6-72 files

HardenedBSD/ports 18850b6misc/codex distinfo Makefile.crates

misc/codex: Update to 0.66.0

Changelog:
- https://github.com/openai/codex/releases/tag/rust-v0.64.0
- https://github.com/openai/codex/releases/tag/rust-v0.65.0
- https://github.com/openai/codex/releases/tag/rust-v0.66.0

Reported by:    GitHub (watch releases)
DeltaFile
+69-59misc/codex/distinfo
+34-29misc/codex/Makefile.crates
+1-1misc/codex/Makefile
+104-893 files

HardenedBSD/ports 6982646math/octave-forge-datatypes distinfo Makefile

math/octave-forge-datatypes: Update to 1.1.2.
DeltaFile
+3-3math/octave-forge-datatypes/distinfo
+1-1math/octave-forge-datatypes/Makefile
+4-42 files

HardenedBSD/ports 15b7c90misc/crush distinfo Makefile

misc/crush: Update to 0.22.1

While here, remove Go version pinning.[1]

Changelog:
- https://github.com/charmbracelet/crush/releases/tag/v0.21.0
- https://github.com/charmbracelet/crush/releases/tag/v0.22.0
- https://github.com/charmbracelet/crush/releases/tag/v0.22.1

Reported by:    GitHub (watch releases),
                adamw (via private email)[1]
DeltaFile
+5-5misc/crush/distinfo
+2-3misc/crush/Makefile
+7-82 files

HardenedBSD/src ba9035bsys/dev/bhnd bhnd.h, sys/dev/dpaa2 dpaa2_rc.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+34-35sys/dev/pci/pci.c
+23-23sys/sys/bus.h
+27-17sys/kern/uipc_socket.c
+12-27sys/dev/bhnd/bhnd.h
+16-18sys/dev/dpaa2/dpaa2_rc.c
+11-16sys/netlink/netlink_snl.h
+123-136115 files not shown
+447-507121 files

HardenedBSD/ports 1195579astro/traccar pkg-plist, misc/gitlogue distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+297-187astro/traccar/pkg-plist
+13-15www/freenginx-acme/distinfo
+11-11misc/gitlogue/distinfo
+11-11www/tor-browser/distinfo
+14-4www/angie/Makefile
+6-8net-mgmt/rubygem-oxidized/Makefile
+352-23674 files not shown
+634-46080 files

HardenedBSD/ports 21d293bx11/hyprlauncher Makefile

x11/hyprlauncher: Bump port revision after hyprwire shlib version bump (87e3027781f3)
DeltaFile
+1-1x11/hyprlauncher/Makefile
+1-11 files

HardenedBSD/ports 87e3027devel/hyprwire distinfo Makefile

devel/hyprwire: Update to 0.2.1

Changelog:
- https://github.com/hyprwm/hyprwire/releases/tag/v0.2.0
- https://github.com/hyprwm/hyprwire/releases/tag/v0.2.1

Reported by:    GitHub (watch releases)
DeltaFile
+3-3devel/hyprwire/distinfo
+2-3devel/hyprwire/Makefile
+5-62 files

HardenedBSD/src cc1e4aalibexec/rc/rc.d ipfilter

rc.d/ipfilter: ipfilter must be enabled for options to take

ipfilter options are erased and reset to default when ipfilter is
disabled. This results in nullifying options from rc.conf that were
previously set.

8d6feaaaa26f, which added this code, was incorrect as it was for a bug in
ipfilter 4.2.28 and no longer applies to ipfilter 5.1.2.

Fixes:          8d6feaaaa26f
MFC after:      1 day
DeltaFile
+3-6libexec/rc/rc.d/ipfilter
+3-61 files

HardenedBSD/ports 8f36f72x11-toolkits/hyprtoolkit distinfo Makefile, x11-toolkits/hyprtoolkit/files patch-src_sessionLock_WaylandSessionLock.cpp patch-src_layout_Positioner.cpp

x11-toolkits/hyprtoolkit: Update to 0.4.1

While here, remove upstreamed patches.

Changelog: https://github.com/hyprwm/hyprtoolkit/releases/tag/v0.4.1

Reported by:    GitHub (watch releases)
DeltaFile
+0-11x11-toolkits/hyprtoolkit/files/patch-src_sessionLock_WaylandSessionLock.cpp
+0-11x11-toolkits/hyprtoolkit/files/patch-src_layout_Positioner.cpp
+0-10x11-toolkits/hyprtoolkit/files/patch-tests_SimpleSessionLock.cpp
+3-3x11-toolkits/hyprtoolkit/distinfo
+1-2x11-toolkits/hyprtoolkit/Makefile
+1-0x11-toolkits/hyprtoolkit/pkg-plist
+5-376 files

HardenedBSD/ports 656b630net-mgmt/victoria-logs distinfo Makefile

net-mgmt/victoria-logs: upgrade to 1.40.0
DeltaFile
+5-5net-mgmt/victoria-logs/distinfo
+1-2net-mgmt/victoria-logs/Makefile
+6-72 files

HardenedBSD/ports 4db8614astro/traccar pkg-plist distinfo

astro/traccar: update to 6.11.1
DeltaFile
+297-187astro/traccar/pkg-plist
+3-3astro/traccar/distinfo
+1-1astro/traccar/Makefile
+301-1913 files