HardenedBSD/ports 6256b43devel/RStudio Makefile, mail/mailpit/files patch-package-lock.json

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+0-563misc/ggml/files/patch-19504
+200-200mail/mailpit/files/patch-package-lock.json
+38-24misc/github-copilot-language-server/files/package-lock.json
+22-24math/freefem++/Makefile
+13-12misc/github-copilot-language-server/files/package-lock-kerberos.json
+11-10devel/RStudio/Makefile
+284-83322 files not shown
+359-90828 files

HardenedBSD/ports d8dfedddevel/RStudio Makefile distinfo.desktop

devel/RStudio: Improve Makefile by adding ELECTRON_VERSION variable

This port was a bit fragile, but it builds and works fine when
electron37 is available. (electron37 is currently broken).
DeltaFile
+11-10devel/RStudio/Makefile
+0-21devel/RStudio/distinfo.desktop
+11-312 files

HardenedBSD/src 73f72casys/netinet tcp_var.h

tcp: make TCP_TRK_TRACK_FLG_* flags visible to userland programs

These flags are used in BBLog entries.
DeltaFile
+9-9sys/netinet/tcp_var.h
+9-91 files

HardenedBSD/ports a2a73aebiology/wfa2-lib distinfo Makefile

biology/wfa2-lib: Update to 2.3.6

Bug fix release
Changes: https://github.com/smarco/WFA2-lib/commits/main/

Reported by:    portscout
DeltaFile
+3-3biology/wfa2-lib/distinfo
+1-1biology/wfa2-lib/Makefile
+2-0biology/wfa2-lib/pkg-plist
+6-43 files

HardenedBSD/ports f0dc3edmisc/ggml pkg-plist distinfo, misc/ggml/files patch-19504

misc/ggml: update 0.9.7 → 0.9.8

PR:     293988
DeltaFile
+0-563misc/ggml/files/patch-19504
+5-4misc/ggml/pkg-plist
+3-3misc/ggml/distinfo
+3-2misc/ggml/Makefile
+11-5724 files

HardenedBSD/ports 052f8b4net-im/deltachat-desktop Makefile

net-im/deltachat-desktop: Switch to Electron 39

Upstream will continue to support Electron 39, so now we can have
Deltachat Desktop on FreeBSD package mirrors.

See PR 270565 for details about the current status of packaging Electron
apps on FreeBSD.
DeltaFile
+2-2net-im/deltachat-desktop/Makefile
+2-21 files

HardenedBSD/src 2318ea1share/man/man4 hwpmc.4

hwpmc.4: correct stale default values and update diagnostics

The default values documented for kern.hwpmc.logbuffersize (4KB) and
kern.hwpmc.nbuffers_pcpu (64) have been incorrect since 2981a3420cb1
(2018), which updated the compiled defaults but did not update the
man page.

- Correct logbuffersize default from 4KB to 256KB, add 16MB maximum
- Correct nbuffers_pcpu default from 64 to 32, document 32MB per-CPU
  product limit with kern.hwpmc.logbuffersize
- Update DIAGNOSTICS section to reflect current warning messages

Reviewed by:    mhorne
MFC after:      1 week
Sponsored by:   NLINK (nlink.com.br)
Differential Revision:  https://reviews.freebsd.org/D56050
DeltaFile
+19-6share/man/man4/hwpmc.4
+19-61 files

HardenedBSD/src b3a1873sys/dev/hwpmc hwpmc_logging.c, sys/sys pmc.h

hwpmc: improve diagnostic messages for invalid tunables

Replace printf() with log(LOG_WARNING, ...) in pmclog_initialize()
so that tunable validation failures are visible in dmesg and
/var/log/messages rather than only on the early console.

Also improve the messages to report both the invalid value and the
default it resets to, making it easier for users to understand why
their tunable was ignored.

While here, adjust some whitespacing/style.

Reviewed by:    Ali Mashtizadeh <ali at mashtizadeh.com>, mhorne
MFC after:      1 week
Sponsored by:   NLINK (nlink.com.br)
Differential Revision:  https://reviews.freebsd.org/D56029
DeltaFile
+26-9sys/dev/hwpmc/hwpmc_logging.c
+2-0sys/sys/pmc.h
+28-92 files

HardenedBSD/src df47355lib/libpmc pmc.ibs.3 libpmc.c, sys/dev/hwpmc hwpmc_ibs.h

libpmc: Add support for IBS qualifiers

Add support to libpmc for parsing the IBS qualifiers and computing the
ctl register value as a function of the qualifiers and the sample rate.
This includes all of the flags available up to AMD Zen 5.  Along side
these user facing changes I included the documentation for AMD IBS.

Reviewed by:    mhorne
Sponsored by:   Netflix
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2081
DeltaFile
+150-0lib/libpmc/pmc.ibs.3
+67-16lib/libpmc/libpmc.c
+18-1sys/dev/hwpmc/hwpmc_ibs.h
+7-0lib/libpmc/pmc.3
+1-0lib/libpmc/pmc.amd.3
+1-0lib/libpmc/Makefile
+244-176 files not shown
+250-1712 files

HardenedBSD/src 39515d8sys/dev/hwpmc hwpmc_mod.c

hwpmc: Use rdtsc instead of rdtscp for timestamps

No need for a barrier here, we are inside an NMI handler and executing a
number of serializing instructions with stronger semantics. Reducing
this overhead will increase our maximum safe sampling rate.

Tested by:      Paulo Fragoso <paulo at nlink.com.br>
Reviewed by:    mhorne
MFC after:      1 week
Sponsored by:   Netflix
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2076
DeltaFile
+3-5sys/dev/hwpmc/hwpmc_mod.c
+3-51 files

HardenedBSD/ports 8914c06net/ntp/files patch-sntp_m4_libntp.m4

net/ntp: Reverse check for libmd and libmd5

When www/libwww is installed, it provides an incompatible libmd5
resulting ntp using libmd5 instead of libmd, breaking the build.
Reversing the order in which libmd and libmd5 are checked circumvents
this problem.

PR:     293949
MFH:    2026Q1
DeltaFile
+11-0net/ntp/files/patch-sntp_m4_libntp.m4
+11-01 files

HardenedBSD/ports 43b9883devel/py-b2 distinfo Makefile

devel/py-b2: Update to 4.6.0

Changes since 4.5.1:

 - Update the version command to display the installed b2sdk version
   alongside the CLI version.

 - Bump b2sdk version to 2.10.3.

 - Fixed autocomplete parser cache on Python 3.14.2+.

 - Improve command-line options formatting in CLI help text.

Reported by:    github
DeltaFile
+3-3devel/py-b2/distinfo
+2-2devel/py-b2/Makefile
+5-52 files

HardenedBSD/ports fa7705cmail/mailpit distinfo Makefile, mail/mailpit/files patch-package-lock.json

mail/mailpit: Update to 1.29.4
DeltaFile
+200-200mail/mailpit/files/patch-package-lock.json
+7-7mail/mailpit/distinfo
+1-1mail/mailpit/Makefile
+208-2083 files

HardenedBSD/ports df3f775devel/py-b2sdk Makefile distinfo

devel/py-b2sdk: Update to 2.10.4

Update dependencies.

Changes since 2.10.2:

 - Fixed a retry bug in upload_unbound_stream() small-file uploads
   where a retryable upload error could cause a one-shot buffered
   stream to be reopened after it was closed.

 - Address backwards compatibility issue for sqlite account info
   caused by the migration of schema to a new multi-bucket format.

 - Avoid http-level retries during upload requests.

 - Use stat.S_ISDIR check for local folder children scanning instead
   of Path.is_dir to account for an api change in Python 3.14.

PR:             293748

    [2 lines not shown]
DeltaFile
+4-3devel/py-b2sdk/Makefile
+3-3devel/py-b2sdk/distinfo
+7-62 files

HardenedBSD/ports e3075a9misc/github-copilot-language-server distinfo pkg-plist, misc/github-copilot-language-server/files package-lock.json package-lock-kerberos.json

misc/github-copilot-language-server: update 1.399.0 → 1.457.0
DeltaFile
+38-24misc/github-copilot-language-server/files/package-lock.json
+13-12misc/github-copilot-language-server/files/package-lock-kerberos.json
+9-9misc/github-copilot-language-server/distinfo
+4-3misc/github-copilot-language-server/files/package-lock-sqlite3.json
+3-3misc/github-copilot-language-server/files/package-lock-policy-watcher.json
+4-0misc/github-copilot-language-server/pkg-plist
+71-511 files not shown
+72-527 files

HardenedBSD/ports 317270bmath/freefem++ Makefile distinfo

math/freefem++: update 4.14 → 4.016
DeltaFile
+22-24math/freefem++/Makefile
+3-3math/freefem++/distinfo
+1-1math/freefem++/pkg-plist
+26-283 files

HardenedBSD/src 3d6aa06sys/x86/cpufreq hwpstate_amd.c, tools/test/stress2/misc syzkaller95.sh syzkaller98.sh

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+453-0tools/test/stress2/misc/syzkaller95.sh
+268-0tools/test/stress2/misc/syzkaller98.sh
+265-0tools/test/stress2/misc/syzkaller92.sh
+228-0tools/test/stress2/misc/syzkaller90.sh
+149-78sys/x86/cpufreq/hwpstate_amd.c
+217-0tools/test/stress2/misc/syzkaller91.sh
+1,580-7827 files not shown
+2,550-10133 files

HardenedBSD/src f90f0f1release/scripts pkg-stage.sh, release/tools vmimage.subr azure.conf

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+83-113release/tools/vmimage.subr
+85-0usr.bin/yes/tests/yes_test.sh
+54-22usr.bin/yes/yes.c
+39-1share/man/man5/resolver.5
+4-10release/scripts/pkg-stage.sh
+2-11release/tools/azure.conf
+267-15710 files not shown
+291-18016 files

HardenedBSD/ports 924822cftp/R-cran-RCurl distinfo Makefile, games/minecraft-server Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+3-3sysutils/py-hcloud/distinfo
+3-3ftp/R-cran-RCurl/distinfo
+2-2games/minecraft-server/Makefile
+1-2ftp/R-cran-RCurl/Makefile
+1-1sysutils/py-hcloud/Makefile
+10-115 files

HardenedBSD/src 47402c9tools/build Makefile, tools/build/cross-build/include/mac string.h

cross-build: Provide mempcpy when building on macOS

We could patch the tzcode config to not use it, but it's simple to
provide an implementation of it and avoid spreading cross-build
bootstrapping special cases.

Fixes:          ff2c98b30b57 ("tzcode: Update to 2026a")
MFC after:      1 week
DeltaFile
+3-0tools/build/Makefile
+2-0tools/build/cross-build/include/mac/string.h
+5-02 files

HardenedBSD/src b24b533release release.sh, release/scripts pkg-stage.sh

release: Remove not-NO_ROOT cases

We always use NO_ROOT for release artifact builds, so remove the
alternate code paths.

For the first step we set NO_ROOT unconditionally in cases that invoke
submakes, and turn NO_ROOT being unset into an error in lover-level
targets so that we can catch potential out-of-tree build scripts (or
missed in-tree cases) that expect to run not-NO_ROOT builds.  The second
step will be to remove those entirely.

Reviewed by:    cperciva
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D54179

(cherry picked from commit 54e006369c9aab4f3a22f026eb6924c0f9cafda8)
DeltaFile
+83-113release/tools/vmimage.subr
+4-10release/scripts/pkg-stage.sh
+2-11release/tools/azure.conf
+2-8release/tools/vagrant.conf
+2-6release/tools/ec2.conf
+1-3release/release.sh
+94-1516 files

HardenedBSD/src 61f0453release Makefile Makefile.vm

release: Use make's `:H` rather than `/..`

In general we want to strip subdir components, rather than appending
`..`s.

Reviewed by:    lwhsu
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D54373

(cherry picked from commit 3949c2b8c4691a6dff8be7b38805d56faab91187)
DeltaFile
+2-2release/Makefile
+1-1release/Makefile.vm
+3-32 files

HardenedBSD/src b5b9517contrib/libcbor CMakeLists.txt, contrib/libcbor/doc/source using.rst

libcbor: Update to 0.13.0

Sponsored by:   The FreeBSD Foundation
DeltaFile
+377-34contrib/libcbor/test/copy_test.c
+225-114contrib/libcbor/CMakeLists.txt
+135-137contrib/libcbor/test/cbor_serialize_test.c
+170-26contrib/libcbor/src/cbor.c
+183-0contrib/libcbor/examples/crash_course.c
+0-174contrib/libcbor/doc/source/using.rst
+1,090-485122 files not shown
+3,665-2,450128 files

HardenedBSD/src f74d583sys/x86/cpufreq hwpstate_amd.c, tools/test/stress2/misc syzkaller95.sh syzkaller98.sh

Merge remote-tracking branch 'origin/freebsd/current/main' into hardened/current/master
DeltaFile
+453-0tools/test/stress2/misc/syzkaller95.sh
+268-0tools/test/stress2/misc/syzkaller98.sh
+265-0tools/test/stress2/misc/syzkaller92.sh
+228-0tools/test/stress2/misc/syzkaller90.sh
+149-78sys/x86/cpufreq/hwpstate_amd.c
+217-0tools/test/stress2/misc/syzkaller91.sh
+1,580-7827 files not shown
+2,550-10133 files

HardenedBSD/src fce6921tests/sys/capsicum linux.cc

Revert "capsicum-test: remove stale file"

This was unintended, sorry.

This reverts commit 20b99e3a147963c6ef715112bd38e349c7a5a459.
DeltaFile
+1,500-0tests/sys/capsicum/linux.cc
+1,500-01 files

HardenedBSD/ports 8c69c21ftp/R-cran-RCurl distinfo Makefile

ftp/R-cran-RCurl: Update to 1.98-1.18

Reported by:    portscout
DeltaFile
+3-3ftp/R-cran-RCurl/distinfo
+1-2ftp/R-cran-RCurl/Makefile
+4-52 files

HardenedBSD/src 09c5bb3sys/dev/nvmf/controller nvmft_controller.c

nvmf: Fix null ptr reference

Reported by:    Nikolay Denev <ndenev at gmail.com>
Reviewed by:    imp, jhb
Differential Revision:  https://reviews.freebsd.org/D55863
DeltaFile
+1-1sys/dev/nvmf/controller/nvmft_controller.c
+1-11 files

HardenedBSD/src 20b99e3tests/sys/capsicum linux.cc

capsicum-test: remove stale file
DeltaFile
+0-1,500tests/sys/capsicum/linux.cc
+0-1,5001 files

HardenedBSD/ports 9e0f417sysutils/py-hcloud distinfo Makefile

sysutils/py-hcloud: update to 2.17.1

Changes:        https://github.com/hetznercloud/hcloud-python/blob/v2.17.1/CHANGELOG.md
Reported by:    repology
DeltaFile
+3-3sysutils/py-hcloud/distinfo
+1-1sysutils/py-hcloud/Makefile
+4-42 files

HardenedBSD/ports 184c1d6accessibility/onboard pkg-plist, cad/surelog pkg-plist

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+1,487-1,487x11/waveterm/distinfo
+2,270-0accessibility/onboard/pkg-plist
+159-117x11/waveterm/files/packagejsons/tsunami/templates/package-lock.json
+206-0java/openjdk26/Makefile
+179-4cad/surelog/pkg-plist
+98-85x11/waveterm/files/packagejsons/package-lock.json
+4,399-1,693770 files not shown
+5,801-2,535776 files