HardenedBSD/src 17260cdcontrib/wpa/src/ap ieee802_11.c, contrib/wpa/src/common proximity_ranging.c qca-vendor.h

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+6,124-33contrib/wpa/src/common/qca-vendor.h
+5,003-0contrib/wpa/wpa_supplicant/nan_supplicant.c
+3,381-671contrib/wpa/src/drivers/driver_nl80211.c
+3,106-664contrib/wpa/src/ap/ieee802_11.c
+3,677-0contrib/wpa/src/nan/nan.c
+2,707-0contrib/wpa/src/common/proximity_ranging.c
+23,998-1,368331 files not shown
+89,794-24,631337 files

HardenedBSD/src 1204701contrib/wpa/src/ap ieee802_11.c, contrib/wpa/src/common proximity_ranging.c qca-vendor.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+6,124-33contrib/wpa/src/common/qca-vendor.h
+5,003-0contrib/wpa/wpa_supplicant/nan_supplicant.c
+3,381-671contrib/wpa/src/drivers/driver_nl80211.c
+3,106-664contrib/wpa/src/ap/ieee802_11.c
+3,677-0contrib/wpa/src/nan/nan.c
+2,707-0contrib/wpa/src/common/proximity_ranging.c
+23,998-1,368331 files not shown
+89,794-24,631337 files

HardenedBSD/src fb6f97frelease Makefile.gce

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+2-2release/Makefile.gce
+2-21 files

HardenedBSD/ports 1c34d7adevel/py-pytest Makefile, devel/py-pytest/files patch-pyproject.toml

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+649-0sysutils/leaves/distinfo
+323-0sysutils/leaves/Makefile.crates
+32-0devel/py-pytest/files/patch-pyproject.toml
+27-0sysutils/leaves/Makefile
+9-16devel/py-pytest/Makefile
+8-6x11-fonts/font-schumacher-misc/Makefile
+1,048-2231 files not shown
+1,112-5837 files

HardenedBSD/ports 388f597emulators/fceux Makefile, multimedia/avidemux Makefile

*/*: Bump consumers of multimedia/libx264

Reported by:    Kevin Oberman <rkoberman at gmail.com>
DeltaFile
+1-1multimedia/emby-server/Makefile
+1-1multimedia/avidemux/Makefile
+1-1multimedia/avidemux-qt5/Makefile
+1-1multimedia/avidemux-plugins/Makefile
+1-1multimedia/avidemux-cli/Makefile
+1-1emulators/fceux/Makefile
+6-613 files not shown
+19-819 files

HardenedBSD/src 71e72c9contrib/wpa/src/ap ieee802_11.c, contrib/wpa/src/common proximity_ranging.c qca-vendor.h

wpa: Update to 2.12

Fixes and new features include:

hostapd:
* support RSN overriding (e.g., WPA3-Personal Compatibility Mode)
* EHT/IEEE 802.11be/Wi-Fi 7
  - more complete support
  - fix message validation issues that could enable DoS attacks
  - fix group key rekeying
* enable SAE group 20 by default if SAE-EXT-KEY is enabled
* reject unexpected SAE password identifier to avoid DoS attack against
  a specific STA
* mandate use of SAE H2E when using password identifiers
* assign VLAN when using SAE with PMKSA caching
* support SPP A-MSDU negotiation
* support IEEE 802.11bi functionality
  - changing SAE password identifiers
  - EPPKE

    [50 lines not shown]
DeltaFile
+6,124-33contrib/wpa/src/common/qca-vendor.h
+5,003-0contrib/wpa/wpa_supplicant/nan_supplicant.c
+3,381-671contrib/wpa/src/drivers/driver_nl80211.c
+3,106-664contrib/wpa/src/ap/ieee802_11.c
+3,677-0contrib/wpa/src/nan/nan.c
+2,707-0contrib/wpa/src/common/proximity_ranging.c
+23,998-1,368330 files not shown
+89,793-24,630336 files

HardenedBSD/ports 7389eaedevel/py-pytest distinfo Makefile, devel/py-pytest/files patch-pyproject.toml

devel/py-pytest: update to 9.1.1

Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-9-1-1-2026-06-19
DeltaFile
+32-0devel/py-pytest/files/patch-pyproject.toml
+9-16devel/py-pytest/Makefile
+3-3devel/py-pytest/distinfo
+44-193 files

HardenedBSD/src 164a5a0release Makefile.gce

release/Makefile.gce: migrate gsutil usages to gcloud CLI

Google Cloud recommends migrating from gsutil to gcloud storage CLI.
Update gce-do-upload target to use `gcloud storage buckets create` and
`gcloud storage cp` instead of `gsutil mb` and `gsutil cp` commands.

PR:             conf/297016

(cherry picked from commit 4174cc2f69d36105a735b19fadc9c18497b02b1a)
DeltaFile
+2-2release/Makefile.gce
+2-21 files

HardenedBSD/ports 81dfc03devel/py-pygobject Makefile

devel/py-pygobject: typo
DeltaFile
+1-1devel/py-pygobject/Makefile
+1-11 files

HardenedBSD/ports 5def198devel/py-pygobject distinfo Makefile

devel/py-pygobject: update to 3.56.3

Changelog: https://gitlab.gnome.org/GNOME/pygobject/-/blob/3.56.3/NEWS

Co-authored by: vishwin
PR: 297399
DeltaFile
+7-8devel/py-pygobject/Makefile
+3-3devel/py-pygobject/distinfo
+10-112 files

HardenedBSD/ports b0e36b0devel/py-shandy-sqlfmt Makefile distinfo

devel/py-shandy-sqlfmt: Update to 0.32.0
DeltaFile
+3-3devel/py-shandy-sqlfmt/distinfo
+1-1devel/py-shandy-sqlfmt/Makefile
+4-42 files

HardenedBSD/src 135df77sys/dev/usb/controller xhci.c

usb: xhci: allow up to 1s for SET_ADDRESS

Some devices take a little longer, and the spec doesn't really seem to
mandate a maximum.  The common path in usbd_req_set_address() has
already been bumped to 1s and I have a headset (Logitech H390) that does
need a little bit longer, so let's match it in xhci.

Reviewed by:    aokblast
Differential Revision:  https://reviews.freebsd.org/D58717
DeltaFile
+1-1sys/dev/usb/controller/xhci.c
+1-11 files

HardenedBSD/ports 41b0a5ax11-fonts/font-screen-cyrillic pkg-descr distinfo

x11-fonts/font-screen-cyrillic: Update to 1.0.5

Update WWW and add LICENSE.

https://lists.x.org/archives/xorg-announce/2023-February/003366.html

PR:             297411
Approved by:    x11 (arrowd)
Approved by:    fluffy (mentor)
DeltaFile
+7-5x11-fonts/font-screen-cyrillic/Makefile
+3-2x11-fonts/font-screen-cyrillic/distinfo
+2-1x11-fonts/font-screen-cyrillic/pkg-descr
+12-83 files

HardenedBSD/ports fbf04d4x11-fonts/font-schumacher-misc pkg-descr distinfo

x11-fonts/font-schumacher-misc: Update to 1.1.3

Updatee WWW and pkg-descr.
Add LICENSE.

https://lists.x.org/archives/xorg-announce/2023-February/003365.html

PR:             297382
Approved by:    x11 (arrowd)
Approved by:    fluffy (mentor)
DeltaFile
+8-6x11-fonts/font-schumacher-misc/Makefile
+3-2x11-fonts/font-schumacher-misc/distinfo
+2-1x11-fonts/font-schumacher-misc/pkg-descr
+13-93 files

HardenedBSD/ports 43da8e9sysutils Makefile, sysutils/leaves pkg-descr Makefile

sysutils/leaves: Add port: Text-mode disk usage visualization utility

Leaves is a disk usage analyzer inspired by WinDirStat and QDirStat.

It shows files and directories in a hierarchy of nested
rectangles. The area of a rectangle is proportional to its size. A 200
MB file will have twice the size as a sibling with 100 MB. The parent
directory will have about 3 times the area of the smaller file.

However, due to the limited resolution of working at a character
level, this is a fairly coarse approximation compared to a graphical
tool. On the other hand, this will work over remote shell connections
when graphical desktop environments are not available or impractical.

WWW: https://github.com/patonw/leaves
DeltaFile
+649-0sysutils/leaves/distinfo
+323-0sysutils/leaves/Makefile.crates
+27-0sysutils/leaves/Makefile
+11-0sysutils/leaves/pkg-descr
+1-0sysutils/Makefile
+1,011-05 files

HardenedBSD/src 11c2b21sbin/ifconfig ifvfstatus.c, sys/netinet in_pcb.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+429-303sys/netinet/in_pcb.c
+178-108tests/sys/netinet/socket_afinet.c
+6-278sys/netlink/route/iface.c
+0-232tests/sys/netinet6/frag6/frag6_01.sh
+135-96sys/netinet6/in6_pcb.c
+0-212sbin/ifconfig/ifvfstatus.c
+748-1,229137 files not shown
+1,383-2,766143 files

HardenedBSD/src b6cefc7sbin/ifconfig ifvfstatus.c, sys/netinet in_pcb.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+429-303sys/netinet/in_pcb.c
+178-108tests/sys/netinet/socket_afinet.c
+6-278sys/netlink/route/iface.c
+0-232tests/sys/netinet6/frag6/frag6_01.sh
+135-96sys/netinet6/in6_pcb.c
+0-212sbin/ifconfig/ifvfstatus.c
+748-1,229137 files not shown
+1,383-2,766143 files

HardenedBSD/ports 176301ddatabases/proxysql/files patch-lib_ProxySQL__Admin__Stats.cpp, net/seaweedfs Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+443-0textproc/presenterm/distinfo
+220-0textproc/presenterm/Makefile.crates
+56-0textproc/presenterm/pkg-plist
+51-0databases/proxysql/files/patch-lib_ProxySQL__Admin__Stats.cpp
+44-0textproc/presenterm/Makefile
+15-8net/seaweedfs/Makefile
+829-823 files not shown
+892-5629 files

HardenedBSD/src 207d96dcontrib/expat Changes, contrib/expat/doc reference.html

contrib/expat: import expat 2.8.3

Changes: https://github.com/libexpat/libexpat/blob/R_2_8_3/expat/Changes

Security:       CVE-2026-72522
MFC after:      1 week
DeltaFile
+77-20contrib/expat/Changes
+49-25contrib/expat/lib/xmlparse.c
+70-1contrib/expat/tests/misc_tests.c
+32-1contrib/expat/tests/basic_tests.c
+29-1contrib/expat/doc/reference.html
+5-12contrib/expat/lib/internal.h
+262-6082 files not shown
+455-8288 files

HardenedBSD/ports 537515cshells/iris Makefile distinfo

shells/iris: Update to 0.6.0

Changelog: https://github.com/versenilvis/IRIS/blob/main/CHANGELOG.md#v060---2026-08-09

Reported by:    GitHub (watch releases)
DeltaFile
+5-5shells/iris/distinfo
+1-1shells/iris/Makefile
+6-62 files

HardenedBSD/src ef5aa86. Changes, doc reference.html

Vendor import of expat 2.8.3
DeltaFile
+77-20Changes
+49-25lib/xmlparse.c
+70-1tests/misc_tests.c
+32-1tests/basic_tests.c
+29-1doc/reference.html
+5-12lib/internal.h
+262-6080 files not shown
+450-7786 files

HardenedBSD/ports f100406sysutils/appjail Makefile distinfo

sysutils/appjail: Update to 5.3.0

ChangeLog: https://github.com/DtxdF/AppJail/releases/tag/v5.3.0
DeltaFile
+3-3sysutils/appjail/distinfo
+1-1sysutils/appjail/Makefile
+4-42 files

HardenedBSD/ports d584e15sysutils/appjail-devel Makefile distinfo

sysutils/appjail-devel: Update to 5.3.0.20260810

ChangeLog:
https://github.com/DtxdF/AppJail/commits/1887fd388f43fb1e8a0183291bf56d208a39a45e/
DeltaFile
+3-3sysutils/appjail-devel/distinfo
+2-2sysutils/appjail-devel/Makefile
+5-52 files

HardenedBSD/src a6999a1lib/libifconfig libifconfig.c, sbin/ifconfig ifvfstatus.c

net: Revert the ioctl SR-IOV VF status interface

A native route Netlink interface will replace this stack.

Requested by:   glebius

This reverts commit 1ccf543b21eff6e0828142e5c1d09519247143f4.

This reverts commit 2c04cfa148ec4dd5cef7e228aaea6a05957fcb15.

This reverts commit 2d6114f6d26bf7dfa5ad94e1db9b09ee7108dc7a.

This reverts commit d15f2551b25f79ddcbe289faa95e655100b952da.

This reverts commit ceb282bbd62eed5e84df9abaede0dd183f66997a.

This reverts commit c30021fe0df9e045a17292dbe50dfc054b69871f.

This reverts commit fb1820d23a04856a6d3047b4c088cc8df8f76da1.

    [2 lines not shown]
DeltaFile
+6-278sys/netlink/route/iface.c
+0-212sbin/ifconfig/ifvfstatus.c
+11-163sys/net/if.c
+0-129lib/libifconfig/libifconfig.c
+1-117share/man/man4/rtnetlink.4
+0-117tests/atf_python/sys/netlink/netlink_route.py
+18-1,01632 files not shown
+32-1,76538 files

HardenedBSD/ports 717e302sysutils/kubo-go Makefile

sysutils/kubo-go: builds fine with Go 1.26

Remove Go version pin and undeprecate.
I presume USES=go:1.25+ was originally meant.

Approved by:    portmgr (build fix blanket)
MFH:            2026Q3
DeltaFile
+2-5sysutils/kubo-go/Makefile
+2-51 files

HardenedBSD/ports a39100ewww/writefreely Makefile pkg-plist

www/writefreely: update to 0.17.2

Changelog: https://github.com/writefreely/writefreely/releases/tag/v0.17.2
DeltaFile
+9-9www/writefreely/distinfo
+0-3www/writefreely/pkg-plist
+1-1www/writefreely/Makefile
+10-133 files

HardenedBSD/ports 977fa78net/rsync-bpc Makefile

net/rsync-bpc: fix build on armv7

Supply GNU_CONFIGURE=yes instead of HAS_CONFIGURE=yes so that the right
magic is passed to work around the error

checking build system type... Invalid configuration `armv7-unknown-freebsd15.1-gnueabihf': machine `armv7-unknown-freebsd15.1' not recognized

Approved by:    portmgr (build fix blanket)
MFH:            2026Q3
DeltaFile
+1-1net/rsync-bpc/Makefile
+1-11 files

HardenedBSD/ports e2850c5net/seaweedfs pkg-plist distinfo, net/seaweedfs/files seaweedfs.in

net/seaweedfs: Update 4.12 => 4.41

Changelog:
https://github.com/seaweedfs/seaweedfs/releases/tag/4.13
https://github.com/seaweedfs/seaweedfs/releases/tag/4.15
https://github.com/seaweedfs/seaweedfs/releases/tag/4.16
https://github.com/seaweedfs/seaweedfs/releases/tag/4.17
https://github.com/seaweedfs/seaweedfs/releases/tag/4.18
https://github.com/seaweedfs/seaweedfs/releases/tag/4.19
https://github.com/seaweedfs/seaweedfs/releases/tag/4.20
https://github.com/seaweedfs/seaweedfs/releases/tag/4.21
https://github.com/seaweedfs/seaweedfs/releases/tag/4.22
https://github.com/seaweedfs/seaweedfs/releases/tag/4.23
https://github.com/seaweedfs/seaweedfs/releases/tag/4.24
https://github.com/seaweedfs/seaweedfs/releases/tag/4.25
https://github.com/seaweedfs/seaweedfs/releases/tag/4.26
https://github.com/seaweedfs/seaweedfs/releases/tag/4.27
https://github.com/seaweedfs/seaweedfs/releases/tag/4.28
https://github.com/seaweedfs/seaweedfs/releases/tag/4.29

    [20 lines not shown]
DeltaFile
+15-8net/seaweedfs/Makefile
+5-5net/seaweedfs/distinfo
+1-1net/seaweedfs/files/seaweedfs.in
+2-0net/seaweedfs/pkg-plist
+23-144 files

HardenedBSD/ports 474cbe8emulators/wine-devel Makefile pkg-plist

emulators/wine-devel: Update 11.14 => 11.15

Changelog:
- More KDF algorithms in BCrypt.
- Support for ARM64EC build in Mingw mode.
- More format conversions in WindowsCodecs.
- Support for local NTLM authentication.
- Various bug fixes.
https://gitlab.winehq.org/wine/wine/-/releases/wine-11.15

PR:             297398
Sponsored by:   UNIS Labs
DeltaFile
+3-3emulators/wine-devel/distinfo
+1-1emulators/wine-devel/Makefile
+2-0emulators/wine-devel/pkg-plist
+6-43 files

HardenedBSD/ports fb4e87ctextproc/presenterm pkg-descr pkg-message

textproc/presenterm: Add new port

Presenterm lets you create presentations in markdown format and run them from
your terminal, with support for image and animated gifs, highly customizable
themes, code highlighting, exporting presentations into PDF format, and plenty
of other features.

https://mfontanini.github.io/presenterm/
DeltaFile
+443-0textproc/presenterm/distinfo
+220-0textproc/presenterm/Makefile.crates
+56-0textproc/presenterm/pkg-plist
+44-0textproc/presenterm/Makefile
+11-0textproc/presenterm/pkg-message
+4-0textproc/presenterm/pkg-descr
+778-01 files not shown
+779-07 files