HardenedBSD/src 42951ddlib/libc/gen posix_spawn_file_actions_addopen.3 dlopen.3, libexec/rtld-elf rtld.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+54-3libexec/rtld-elf/rtld.c
+45-0libexec/rtld-elf/tests/dlopen_hash_test.c
+17-12lib/libc/gen/posix_spawn_file_actions_addopen.3
+14-0lib/libc/gen/dlopen.3
+12-2sys/kern/kern_event.c
+5-0lib/libc/gen/posix_spawn.c
+147-178 files not shown
+166-2514 files

HardenedBSD/ports 69f417fdatabases/sabiql distinfo, java/java3d/files patch-freebsd

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+34-7,399www/deno/files/patch-cargo-crates_libuv-sys-lite
+221-291sysutils/rustic/distinfo
+133-147textproc/oyo/distinfo
+109-144sysutils/rustic/Makefile.crates
+99-99databases/sabiql/distinfo
+0-176java/java3d/files/patch-freebsd
+596-8,25645 files not shown
+1,265-8,56351 files

HardenedBSD/ports 1d8282cdatabases/sabiql distinfo Makefile.crates, databases/sabiql/files patch-src_infra_adapters_folder__opener.rs patch-src_infra_export_dot.rs

databases/sabiql: Update to 1.10.0

- Remove all patches (now included upstream)

ChangeLog:      https://github.com/riii111/sabiql/releases/tag/v1.10.0
Reported by:    riii111 <notifications at github.com>
DeltaFile
+99-99databases/sabiql/distinfo
+48-48databases/sabiql/Makefile.crates
+0-16databases/sabiql/files/patch-src_infra_adapters_folder__opener.rs
+0-11databases/sabiql/files/patch-src_infra_export_dot.rs
+1-1databases/sabiql/Makefile
+148-1755 files

HardenedBSD/ports 0ee513csysutils/mdfried distinfo Makefile

sysutils/mdfried: Update to 0.19.0

Reported by:    Benjamin Grosse <notifications at github.com>
DeltaFile
+3-3sysutils/mdfried/distinfo
+1-1sysutils/mdfried/Makefile
+4-42 files

HardenedBSD/ports 79be224Mk/Uses vala.mk, lang/vala distinfo

lang/vala: update to 0.56.19

PR:             294205
DeltaFile
+3-3lang/vala/distinfo
+1-1Mk/Uses/vala.mk
+4-42 files

HardenedBSD/ports 7347c88sysutils/rustic distinfo Makefile.crates

sysutils/rustic: Update to 0.11.2

ChangeLog:      https://github.com/rustic-rs/rustic/releases/tag/v0.11.2
Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+221-291sysutils/rustic/distinfo
+109-144sysutils/rustic/Makefile.crates
+2-2sysutils/rustic/Makefile
+332-4373 files

HardenedBSD/src c1c97f1stand/i386/gptzfsboot zfsboot.c

gptzfsboot: boot prompt should emit new line on input

In case the user did input, we should put newline
on screen to avoid possible error messages to get
mixed with user input.
DeltaFile
+4-2stand/i386/gptzfsboot/zfsboot.c
+4-21 files

HardenedBSD/ports 27f5eadx11/swayimg Makefile distinfo

x11/swayimg: update to 5.2

Changes:        https://github.com/artemsen/swayimg/releases/tag/v5.0
Changes:        https://github.com/artemsen/swayimg/releases/tag/v5.1
Changes:        https://github.com/artemsen/swayimg/releases/tag/v5.2
Reported by:    GitHub (watch releases)
DeltaFile
+16-17x11/swayimg/Makefile
+3-3x11/swayimg/distinfo
+19-202 files

HardenedBSD/ports bf8e91asecurity/vuxml/vuln 2026.xml

security/vuxml: Add Mozilla vulnerabilities

 * CVE-2026-5732:       NVD assessment not yet provided
 * CVE-2026-5733:       NVD assessment not yet provided
 * CVE-2026-5734:       Base Score:  9.8 CRITICAL
                        Vector:  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
 * CVE-2026-5734:       Base Score:  9.8 CRITICAL
                        Vector:  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
DeltaFile
+150-0security/vuxml/vuln/2026.xml
+150-01 files

HardenedBSD/ports b7042a0net-im/gajim Makefile distinfo

net-im/gajim: update to 2.4.5; sort depends
DeltaFile
+6-6net-im/gajim/Makefile
+3-3net-im/gajim/distinfo
+9-92 files

HardenedBSD/ports 8318a3csecurity/wolfssl Makefile, security/wolfssl/files patch-configure.ac patch-cmake_options.h.in

security/wolfssl: Fix 32-bit builds.

Add upstream patch for the fix, until changes are merged and
a new release is made.

PR:             294287
Reported by:    Robert Clausecker <fuz at FreeBSD.org>
Reviewed by:    Robert Clausecker <fuz at FreeBSD.org>
Tested by:      Robert Clausecker <fuz at FreeBSD.org>
DeltaFile
+16-0security/wolfssl/files/patch-configure.ac
+15-0security/wolfssl/files/patch-cmake_options.h.in
+15-0security/wolfssl/files/patch-cmake_config.in
+2-1security/wolfssl/Makefile
+48-14 files

HardenedBSD/ports 9d8a393sysutils/grub2-bhyve Makefile, sysutils/grub2-bhyve/files patch-ext2.c

sysutils/grub2-bhyve: Add support for additional EXT4 incompatible features

Handle the following EXT4 incompatible features:

EXT4_FEATURE_INCOMPAT_MMP (Multi-Mount Protection)
Prevents multiple read-write mounts of the same filesystem.
Since grub2-bhyve mounts filesystems read-only, it is safe to ignore.

EXT4_FEATURE_INCOMPAT_CSUM_SEED
Allows tools such as tune2fs to change the UUID on a mounted
metadata-checksummed filesystem. Safe to ignore because the
driver does not perform checksum verification.

EXT4_FEATURE_INCOMPAT_LARGEDIR
Enables directories larger than 2GB and 3-level htrees.
Safe to ignore because the GRUB ext2 driver does not implement
DIR_INDEX.

This patch mirrors upstream behavior. It unblocks booting from

    [5 lines not shown]
DeltaFile
+42-0sysutils/grub2-bhyve/files/patch-ext2.c
+1-1sysutils/grub2-bhyve/Makefile
+43-12 files

HardenedBSD/ports da2d5e2databases/py-sqlmodel Makefile distinfo

databases/py-sqlmodel: Update to 0.0.38

Changelog: https://github.com/fastapi/sqlmodel/blob/0.0.38/docs/release-notes.md

Reported by:    portscout
DeltaFile
+5-5databases/py-sqlmodel/Makefile
+3-3databases/py-sqlmodel/distinfo
+8-82 files

HardenedBSD/ports 4ef829fwww/py-google-api-python-client distinfo Makefile

www/py-google-api-python-client: Update to 2.194.0

ChangeLog:      https://github.com/googleapis/google-api-python-client/releases/tag/v2.194.0
Reported by:    "release-please[bot]" <notifications at github.com>
DeltaFile
+3-3www/py-google-api-python-client/distinfo
+1-1www/py-google-api-python-client/Makefile
+4-42 files

HardenedBSD/ports d68297cMk bsd.default-versions.mk

Mk/bsd.default-versions.mk: stick to OpenJDK 11 on powerpc too

Newer versions require too big stack to build natively.
DeltaFile
+1-1Mk/bsd.default-versions.mk
+1-11 files

HardenedBSD/ports 821f1e0java/java3d/files patch-freebsd patch-j3d-core_src_native_ogl_build-freebsd.xml

java/java3d: split combined patches

Redo make makepatch to have "modern" port patches.
No functional change intended.

Approved-by:    no maintainer
DeltaFile
+0-176java/java3d/files/patch-freebsd
+77-0java/java3d/files/patch-j3d-core_src_native_ogl_build-freebsd.xml
+0-50java/java3d/files/patch-ImageComponentState.java
+49-0java/java3d/files/patch-j3d-core-utils_src_classes_share_com_sun_j3d_utils_scenegraph_io_state_javax_media_j3d_ImageComponentState.java
+48-0java/java3d/files/patch-j3d-core_src_native_build.xml
+28-0java/java3d/files/patch-j3d-core_build.xml
+202-2261 files not shown
+221-2267 files

HardenedBSD/ports cf5a0fclang/python-doc-html distinfo, lang/python313 pkg-plist distinfo

lang/python313: update to 3.13.13

Changelog: https://docs.python.org/3.13/whatsnew/changelog.html#python-3-13-13-final
DeltaFile
+9-5lang/python313/pkg-plist
+3-7lang/python313/distinfo
+5-5lang/python-doc-html/distinfo
+0-3lang/python313/Makefile
+1-1lang/python313/Makefile.version
+18-215 files

HardenedBSD/src bdad702sys/netpfil/ipfw/nptv6 nptv6.c

ipfw_nptv6: fix handling the ifaddr removal event

The result of IN6_ARE_MASKED_ADDR_EQUAL() macro is not an integer, so
threat it as a boolean value.

PR:             294114
Reported by:    Peter Much <pmc citylink dinoex sub org>

(cherry picked from commit d9d7b59486499615a5fdce54443ce62aecf557e8)
DeltaFile
+2-2sys/netpfil/ipfw/nptv6/nptv6.c
+2-21 files

HardenedBSD/ports 26ef693net-mgmt/kf6-networkmanager-qt Makefile

net-mgmt/kf6-networkmanager-qt: Clean up port

- Drop License block, kf6 ports share LICENSE via Uses/kde.mk
- Add missing dependencies
- Remove unused dependencies
DeltaFile
+5-16net-mgmt/kf6-networkmanager-qt/Makefile
+5-161 files

HardenedBSD/ports 068d0dfdatabases/cego distinfo Makefile, devel/lfcbase distinfo Makefile

devel/lfcbase,databases/cego: 1.23.3 -> 1.23.5, 2.54.16 -> 2.54.23

lfcbase:
- Improved error message for File::open with strerror details added
- In File::operator = and File:operator +=, after file copy operation,
  source file descriptor was not closed.
  This might lead to file descriptor leaks.

cego:
- Many fixes for crash recovery and startup, write logs, etc.
DeltaFile
+3-3devel/lfcbase/distinfo
+3-3databases/cego/distinfo
+1-1databases/cego/Makefile
+1-1devel/lfcbase/Makefile
+8-84 files

HardenedBSD/ports 86aef58www/deno/files patch-cargo-crates_libuv-sys-lite

www/deno: proper fix for llvm22 binding problem

This was fixed with bindgen > 0.70.1 (I don't kwown the exact version)

PR:             293587
Tested by:      Philippe Michel, Oleg Sidorkin
Fixes:          e330aefa238248ff5ab18671061c4f8221f9f188
DeltaFile
+34-7,399www/deno/files/patch-cargo-crates_libuv-sys-lite
+34-7,3991 files

HardenedBSD/src 5dc4da1. RELNOTES

RELNOTES: catchup on changes I have made
DeltaFile
+38-0RELNOTES
+38-01 files

HardenedBSD/ports 512b85dtextproc/oyo distinfo Makefile.crates

textproc/oyo: Update to 0.1.30

ChangeLog:

  - https://github.com/ahkohd/oyo/releases/tag/v0.1.25
  - https://github.com/ahkohd/oyo/releases/tag/v0.1.26
  - https://github.com/ahkohd/oyo/releases/tag/v0.1.27
  - https://github.com/ahkohd/oyo/releases/tag/v0.1.28
  - https://github.com/ahkohd/oyo/releases/tag/v0.1.29
  - https://github.com/ahkohd/oyo/releases/tag/v0.1.30

Reported by:    portscout!
DeltaFile
+133-147textproc/oyo/distinfo
+66-73textproc/oyo/Makefile.crates
+4-3textproc/oyo/Makefile
+203-2233 files

HardenedBSD/ports b327765audio/pt2-clone distinfo Makefile

audio/pt2-clone: Update to 1.87
DeltaFile
+3-3audio/pt2-clone/distinfo
+1-1audio/pt2-clone/Makefile
+4-42 files

HardenedBSD/ports 46a9025security/vuxml/vuln 2026.xml

security/vuxml: Update URL in latest OpenSSL vulns
DeltaFile
+2-2security/vuxml/vuln/2026.xml
+2-21 files

HardenedBSD/ports 735ab65devel/git-cinnabar distinfo Makefile.crates, java/jgraphx/files patch-build.xml

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+139-133devel/git-cinnabar/distinfo
+114-58sysutils/nut/pkg-plist
+67-64devel/git-cinnabar/Makefile.crates
+51-0security/vuxml/vuln/2026.xml
+34-0sysutils/nut/files/patch-configure.ac
+30-0java/jgraphx/files/patch-build.xml
+435-25543 files not shown
+583-41349 files

HardenedBSD/ports 725535cjava/jcalendar Makefile, java/jcalendar/files patch-build.xml

java/jcalendar: unpin openjdk8

Builds fine with modern JDK.

Approved-by:    no maintainer
DeltaFile
+10-0java/jcalendar/files/patch-build.xml
+1-2java/jcalendar/Makefile
+11-22 files

HardenedBSD/ports 6a6eca9java/jgraphx Makefile, java/jgraphx/files patch-build.xml

java/jgraphx: unpin openjdk8

Builds fine with modern JDK.
Dependency math/scilab uses openjdk8 so this needs to generate
Java 8 compatible class files.

Approved-by:    no maintainer
DeltaFile
+30-0java/jgraphx/files/patch-build.xml
+1-2java/jgraphx/Makefile
+31-22 files

HardenedBSD/ports ac3df5cdevel/gitaly distinfo, net/gitlab-agent distinfo

www/gitlab: security and patch update to 18.10.3

Changes:        https://about.gitlab.com/releases/2026/04/08/patch-release-gitlab-18-10-3-released/
Security:       099d4998-33cc-11f1-a7d1-2cf05da270f3
DeltaFile
+13-13devel/gitaly/distinfo
+6-6www/gitlab/distinfo
+5-5net/gitlab-agent/distinfo
+5-5www/gitlab-pages/distinfo
+5-5www/gitlab-workhorse/distinfo
+1-1www/gitlab/Makefile.common
+35-356 files

HardenedBSD/ports a6b92casysutils/go-ntfy distinfo Makefile

sysutils/go-ntfy: Update to 2.21.0

ChangeLogs:

- https://github.com/binwiederhier/ntfy/releases/tag/v2.20.1
- https://github.com/binwiederhier/ntfy/releases/tag/v2.21.0
DeltaFile
+7-7sysutils/go-ntfy/distinfo
+2-2sysutils/go-ntfy/Makefile
+9-92 files