HardenedBSD/src 87469facontrib/tzcode localtime.c zic.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+1,044-709contrib/tzcode/localtime.c
+470-313contrib/tzcode/zic.c
+224-199contrib/tzcode/tz-art.html
+206-192contrib/tzcode/tz-link.html
+195-188contrib/tzcode/theory.html
+224-156contrib/tzcode/private.h
+2,363-1,75730 files not shown
+3,248-2,24636 files

HardenedBSD/src 5dfec86contrib/tzcode localtime.c zic.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+1,044-709contrib/tzcode/localtime.c
+470-313contrib/tzcode/zic.c
+224-199contrib/tzcode/tz-art.html
+206-192contrib/tzcode/tz-link.html
+195-188contrib/tzcode/theory.html
+224-156contrib/tzcode/private.h
+2,363-1,75730 files not shown
+3,248-2,24636 files

HardenedBSD/ports 82d92b5sysutils/rubygem-bundle-audit Makefile pkg-descr, sysutils/rubygem-bundler-audit Makefile pkg-descr

sysutils/rubygem-bundler-audit: Add new port

bundler-audit provides patch-level verification for Bundled Ruby
applications by auditing Gemfile.lock against a database of known
vulnerabilities.

Also add rubygem-bundle-audit as a wrapper gem that depends on
rubygem-bundler-audit, for developers who reference "bundle-audit"
instead of "bundler-audit".
DeltaFile
+23-0sysutils/rubygem-bundler-audit/Makefile
+19-0sysutils/rubygem-bundle-audit/Makefile
+18-0sysutils/rubygem-bundler-audit/pkg-descr
+12-0sysutils/rubygem-bundle-audit/pkg-descr
+3-0sysutils/rubygem-bundler-audit/distinfo
+3-0sysutils/rubygem-bundle-audit/distinfo
+78-01 files not shown
+80-07 files

HardenedBSD/ports 5230d6bdevel Makefile, devel/rubygem-uniform_notifier pkg-descr Makefile

devel/rubygem-uniform_notifier: Add version 1.18.0

uniform_notifier provides a unified notification interface supporting
Rails logger, JavaScript alert/console, XMPP, Slack, and more.
DeltaFile
+18-0devel/rubygem-uniform_notifier/pkg-descr
+17-0devel/rubygem-uniform_notifier/Makefile
+3-0devel/rubygem-uniform_notifier/distinfo
+1-0devel/Makefile
+39-04 files

HardenedBSD/ports 0ffb61enet/samba423 distinfo Makefile, net/samba423/files 0001-Compact-and-simplify-modules-build-and-config-genera.patch

net/samba423: update to version 2.23.6

Sponsored by:   Klara, Inc.
Reported by:    portscout
DeltaFile
+6-5net/samba423/files/0001-Compact-and-simplify-modules-build-and-config-genera.patch
+3-3net/samba423/distinfo
+1-1net/samba423/Makefile
+10-93 files

HardenedBSD/ports 8cce161devel Makefile, devel/rubygem-bullet Makefile pkg-descr

devel/rubygem-bullet: Add rubygem-bullet 8.1.0

Bullet is a development tool that helps increase application performance
by reducing the number of queries it makes. It detects N+1 queries,
unused eager loading, and suggests counter cache usage.

Also add rubygem-bullet-rails72 slave port for Rails 7.2 compatibility.
DeltaFile
+23-0devel/rubygem-bullet/Makefile
+16-0devel/rubygem-bullet/pkg-descr
+7-0devel/rubygem-bullet-rails72/Makefile
+3-0devel/rubygem-bullet/distinfo
+2-0devel/Makefile
+51-05 files

HardenedBSD/ports ac174absecurity Makefile, security/rubygem-doorkeeper Makefile

security/rubygem-doorkeeper-i18n{,-rails72}: Add new port.

Internationalization files for Doorkeeper OAuth2 provider

While I'm there, also add a variant of rubygem-doorkeeper for use
with rails72.
DeltaFile
+26-0security/rubygem-doorkeeper-i18n/Makefile
+11-0security/rubygem-doorkeeper-i18n/pkg-descr
+7-0security/rubygem-doorkeeper-i18n-rails72/Makefile
+7-0security/rubygem-doorkeeper-rails72/Makefile
+4-1security/rubygem-doorkeeper/Makefile
+3-0security/Makefile
+58-11 files not shown
+61-17 files

HardenedBSD/src ff2c98bcontrib/tzcode localtime.c zic.c

tzcode: Update to 2026a

Many thanks to Paul Eggert for adopting most of our adaptations as
optional features upstream in the previous release (2025c).

MFC after:      1 week
Reviewed by:    philip
Differential Revision:  https://reviews.freebsd.org/D55741
DeltaFile
+1,044-709contrib/tzcode/localtime.c
+470-313contrib/tzcode/zic.c
+224-199contrib/tzcode/tz-art.html
+206-192contrib/tzcode/tz-link.html
+195-188contrib/tzcode/theory.html
+224-156contrib/tzcode/private.h
+2,363-1,75722 files not shown
+3,153-2,23028 files

HardenedBSD/src 67728a1etc/mtree BSD.tests.dist, usr.bin/yes Makefile

yes: Add tests

MFC after:      1 week
Sponsored by:   Klara, Inc.
Reviewed by:    kevans
Differential Revision:  https://reviews.freebsd.org/D55802
DeltaFile
+85-0usr.bin/yes/tests/yes_test.sh
+4-0usr.bin/yes/Makefile
+4-0usr.bin/yes/tests/Makefile
+2-0etc/mtree/BSD.tests.dist
+95-04 files

HardenedBSD/ports 8b6a525math/octave-forge-biosig distinfo Makefile, math/octave-forge-biosig/files patch-mexSSAVE.cpp

math/octave-forge-biosig: Update to 3.9.4.
DeltaFile
+0-19math/octave-forge-biosig/files/patch-mexSSAVE.cpp
+3-3math/octave-forge-biosig/distinfo
+1-2math/octave-forge-biosig/Makefile
+4-243 files

HardenedBSD/ports edb0110devel/patch Makefile, devel/patch/files patch-lib__localcharset.c patch-lib__Makefile.in

devel/patch: update GNU patch to the latest version 2.8

- GC previous Debian patches, backport new upstream fixes:
  add missing filename quoting, enable merge, skip read-only
  check when output file specified, reject empty filenames
- On i386, apply the same fix as Debian for Hurd/i386
- The port now seemingly builds fine with BSD make(1)
- Install some standard documentation files

PR:     285796
DeltaFile
+0-98devel/patch/files/patch-lib__localcharset.c
+0-43devel/patch/files/patch-lib__Makefile.in
+42-0devel/patch/files/patch-src_patch.c
+16-11devel/patch/Makefile
+14-0devel/patch/files/patch-tests_bad-filenames
+11-0devel/patch/files/patch-src_safe.c
+83-1522 files not shown
+97-1578 files

HardenedBSD/ports a6099d8graphics/egl-x11 distinfo pkg-descr, graphics/egl-x11/files patch-src_x11_x11-platform.h

graphics/egl-x11: Update to version 1.0.5

Changes:
https://github.com/NVIDIA/egl-x11/releases/tag/v1.0.5

While here, drop a patch that is now included in upstream,
and add warning about minimum supported version of NVIDIA
drivers (560) in pkg-descr.

PR:             293718
Reviewed by:    ashafer (versioning)
Differential Revision:  https://reviews.freebsd.org/D55797
DeltaFile
+0-15graphics/egl-x11/files/patch-src_x11_x11-platform.h
+3-3graphics/egl-x11/distinfo
+3-0graphics/egl-x11/pkg-descr
+1-1graphics/egl-x11/Makefile
+7-194 files

HardenedBSD/ports b23b14cgraphics Makefile, graphics/egl-wayland2 Makefile pkg-descr

graphics/egl-wayland2: New port

Introduce graphics/egl-wayland2, Wayland EGL External Platform library
Version 2 that works with NVIDIA drivers 560 and later.

This is a new implementation of the EGL External Platform Library
for Wayland (EGL_KHR_platform_wayland), using the NVIDIA driver's
new platform surface interface (Dma-buf-based), which simplifies
a lot of the library and improves window resizing.

This library can be installed alongside the previous egl-wayland
implementation (graphics/egl-wayland).

The new library has a higher selection priority by default,
so if both are present, then a 560 or later driver will select
the new library, and an older driver will fall back to the old
library.

PR:             293719

    [2 lines not shown]
DeltaFile
+32-0graphics/egl-wayland2/Makefile
+9-0graphics/egl-wayland2/pkg-descr
+4-0graphics/egl-wayland2/pkg-plist
+3-0graphics/egl-wayland2/distinfo
+1-0graphics/Makefile
+49-05 files

HardenedBSD/ports d000c5fnet-p2p/bazarr pkg-plist

net-p2p/bazarr: Fix build with python version other than 3.11

PR:             293708
Approved by:    Michiel van Baak Jansen <michiel at vanbaak.eu> (maintainer)
MFH:            2026Q1
DeltaFile
+3-3net-p2p/bazarr/pkg-plist
+3-31 files

HardenedBSD/src b496f58lib/libpmc libpmc_pmu_util.c, lib/libpmc/pmu-events jevents.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+100-29lib/libpmc/pmu-events/jevents.c
+24-20tests/sys/kern/ssl_sendfile.c
+19-0lib/libpmc/libpmc_pmu_util.c
+5-3sys/dev/ena/ena_netmap.c
+6-0sys/dev/virtio/virtqueue.c
+2-3sys/dev/ena/ena.c
+156-556 files not shown
+165-6212 files

HardenedBSD/src e435245lib/libpmc libpmc_pmu_util.c libpmc.c, lib/libpmc/pmu-events jevents.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+100-29lib/libpmc/pmu-events/jevents.c
+24-20tests/sys/kern/ssl_sendfile.c
+19-0lib/libpmc/libpmc_pmu_util.c
+5-3sys/dev/ena/ena_netmap.c
+6-0sys/dev/virtio/virtqueue.c
+4-1lib/libpmc/libpmc.c
+158-536 files not shown
+165-6212 files

HardenedBSD/ports 41690e8devel/omnilinter distinfo Makefile, games/widelands/files patch-c0b44ccc04df35a9a23ca9be3e05f5d3a5428f6f

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+9,264-821net/dpdk/pkg-plist
+203-219devel/omnilinter/distinfo
+0-224games/widelands/files/patch-c0b44ccc04df35a9a23ca9be3e05f5d3a5428f6f
+101-110devel/omnilinter/Makefile
+43-21net/dpdk/Makefile
+14-14mail/mailpit/files/patch-package-lock.json
+9,625-1,40944 files not shown
+9,770-1,58050 files

HardenedBSD/src 96294c2lib/libc Makefile, stand/i386 Makefile.inc

build: Stop testing LINKER_FEATURES for ifunc and build-id

These features are available in all supported linkers, and we can expect
that they'll be supported by any GNU-compatible linker that we'd use to
link FreeBSD.

Reviewed by:    imp, kib
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55676
DeltaFile
+0-6lib/libc/Makefile
+0-6sys/conf/kern.pre.mk
+0-2stand/i386/Makefile.inc
+0-2sys/conf/kmod.mk
+0-164 files

HardenedBSD/ports 0b35111security/netbird distinfo Makefile

security/netbird: Update 0.66.1 => 0.66.3

Changelogs:
https://github.com/netbirdio/netbird/releases/tag/v0.66.2
https://github.com/netbirdio/netbird/releases/tag/v0.66.3

Commit log:
https://github.com/netbirdio/netbird/compare/v0.66.1...v0.66.3

PR:     293710
DeltaFile
+5-5security/netbird/distinfo
+1-2security/netbird/Makefile
+6-72 files

HardenedBSD/ports 91316bfsecurity/chkrootkit distinfo Makefile, security/chkrootkit/files patch-Makefile patch-chkwtmp.c

security/chkrootkit: Update 0.58b => 0.59

Changelog:
 - New checks: Process executed from memory
 - New commands: nologin
 - XZ Backdoor Bottkitty (UEFI Bootkit)
 - Bug fixes
https://www.chkrootkit.org/#new

Remove local patches with support FreeBSD 9.

PR:             293520
Approved by:    Lacey Powers <lacey.leanne at gmail.com> (maintainer)
MFH:            2026Q1
DeltaFile
+15-0security/chkrootkit/files/patch-Makefile
+0-11security/chkrootkit/files/patch-chkwtmp.c
+0-11security/chkrootkit/files/patch-chklastlog.c
+3-3security/chkrootkit/distinfo
+1-1security/chkrootkit/Makefile
+19-265 files

HardenedBSD/ports faadb58biology/salmon Makefile

biology/salmon: Unbreak: Relax libgff version requirement

Also drop unnecessary libboost dep

Reported by:    pkg-fallout
DeltaFile
+4-4biology/salmon/Makefile
+4-41 files

HardenedBSD/ports c97f206textproc/elasticsearch7/files pkg-message.in

textproc/elasticsearch7: Correct product name

Rename ElasticSearch to Elasticsearch in the file pkg-message.

PR:             261591
Approved by:    elastic (maintainer, timeout 4+ years)
DeltaFile
+2-2textproc/elasticsearch7/files/pkg-message.in
+2-21 files

HardenedBSD/ports 8605c56devel/py-p4python distinfo Makefile

devel/py-p4python: Update to 2025.2.2863679

PR:             293725
Approved by:    antonfb at hesiod.org (maintainer)
DeltaFile
+3-3devel/py-p4python/distinfo
+1-1devel/py-p4python/Makefile
+4-42 files

HardenedBSD/src bfb2fd5lib/libpmc libpmc_pmu_util.c libpmc.c, lib/libpmc/pmu-events jevents.c

libpmc: Explicitly whitelist json fields

Adds all missing Intel fields and turns jevents.c into an explicit white
list mechanism so that we no longer ignore important fields that often
invalidate the counter.  The json event parser must now parse every
field on each architecture that we support.  This has been tested by
running tinderbox and manually running jevent against our current json
repository.  As a bonus I fixed spelling errors in the AMD JSON
definitions.

Sponsored by: Netflix

Reviewed by: imp
Pull Request: https://github.com/freebsd/freebsd-src/pull/2055
DeltaFile
+100-29lib/libpmc/pmu-events/jevents.c
+19-0lib/libpmc/libpmc_pmu_util.c
+4-1lib/libpmc/libpmc.c
+1-1lib/libpmc/pmu-events/arch/x86/amdzen6/load-store.json
+1-1lib/libpmc/pmu-events/arch/x86/amdzen4/cache.json
+1-1lib/libpmc/pmu-events/arch/x86/amdzen5/load-store.json
+126-336 files

HardenedBSD/ports 3f3ee57net/dpdk pkg-plist Makefile, net/dpdk/files patch-kernel_freebsd_contigmem_contigmem.c patch-kernel_freebsd_nic__uio_nic__uio.c

net/dpdk: update to latest LTS release, 25.11.0, adopt (+)

Tested on:      aarch64, amd64
Release notes:  http://doc.dpdk.org/guides/rel_notes/release_25_11.html
Approved by:    Bruce Richardson (former maintainer)
DeltaFile
+9,264-821net/dpdk/pkg-plist
+43-21net/dpdk/Makefile
+0-20net/dpdk/files/patch-kernel_freebsd_contigmem_contigmem.c
+0-18net/dpdk/files/patch-kernel_freebsd_nic__uio_nic__uio.c
+12-0net/dpdk/files/patch-meson.build
+4-4net/dpdk/files/patch-config_meson.build
+9,323-8841 files not shown
+9,326-8877 files

HardenedBSD/src ded881ftests/sys/kern ssl_sendfile.c

tests/kern/ssl_sendfile: fix 'random' and 'basic' flakyness

The read of c.sbytes needs to be synchronized with mutex.  The problem was
fixed for 'truncate' and 'grow' with 8a9508563542, but these two suffer
from the same problem.  Provide require_sbytes(), a locked wrapper around
ATF_REQUIRE() to reduce copy and paste.

Submitted by:           olivier
Differential Revision:  https://reviews.freebsd.org/D55781
DeltaFile
+12-8tests/sys/kern/ssl_sendfile.c
+12-81 files

HardenedBSD/src 35b976ctests/sys/kern ssl_sendfile.c

tests/kern/ssl_sendfile: reduce copy & paste

Provide sendme_locked_wait() for a common pattern.  Not functional change.
DeltaFile
+12-12tests/sys/kern/ssl_sendfile.c
+12-121 files

HardenedBSD/ports d4ce731mail/mailpit distinfo Makefile, mail/mailpit/files patch-package-lock.json

mail/mailpit: Update to 1.29.3

Improved ONLY_FOR_ARCHS_REASON message to better explain the supported
architectures.
DeltaFile
+14-14mail/mailpit/files/patch-package-lock.json
+7-7mail/mailpit/distinfo
+2-3mail/mailpit/Makefile
+23-243 files

HardenedBSD/ports 56676a3audio/subtui distinfo Makefile

audio/subtui: Update to 2.10.0

Changelog: https://github.com/MattiaPun/SubTUI/releases/tag/v2.10.0
DeltaFile
+5-5audio/subtui/distinfo
+1-1audio/subtui/Makefile
+6-62 files

HardenedBSD/src 96c5eafsys/dev/ena ena.h

ena: Update driver version to v2.8.2

Bug Fixes:
* Verify that an ENA ring is in netmap only in native mode

Minor Changes:
* Move parenthesis to correct place in switch
* Add comment
* Reorder define

MFC after: 2 weeks
Sponsored by: Amazon, Inc.
Reviewed by: cperciva
Differential Revision: https://reviews.freebsd.org/D55698
DeltaFile
+1-1sys/dev/ena/ena.h
+1-11 files