HardenedBSD/ports 7fc1e3c. CHANGES, Mk/Uses sudo.mk

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+10-7net/libmateweather/Makefile
+16-0Mk/Uses/sudo.mk
+13-0finance/beanquery/files/patch-pyproject.toml
+2-10net-mgmt/librenms/Makefile
+11-0CHANGES
+3-3net/libmateweather/distinfo
+55-2043 files not shown
+124-11349 files

HardenedBSD/ports faf06e9finance/beanquery Makefile, finance/beanquery/files patch-pyproject.toml

finance/beanquery: Exclude docs directory from package

The docs/ directory contains Sphinx documentation configuration that
should not be installed into site-packages. This was causing a file
conflict with py311-cheroot (both were installing
lib/python3.11/site-packages/docs/__pycache__/conf.cpython-311.opt-1.pyc).
DeltaFile
+13-0finance/beanquery/files/patch-pyproject.toml
+1-0finance/beanquery/Makefile
+14-02 files

HardenedBSD/ports ee5c766. CHANGES, Mk/Uses sudo.mk

*/*: Introduction USES=sudo

A new uses 'sudo' has been added to transperently depends of the
proper flavor of sudo 'default' or 'sssd' depending on the default
version set by the user.

If you prefere to use 'sssd' flavor of sudo, add the following
to your make.conf:

        DEFAULT_VERSIONS+=sudo=sssd

All sudo consummer ports has benn updated to USES=sudo

Reviewed by:    0mp
Approved by:    mat
Sponsored by:   Klara, Inc.
Differential Revision:  https://reviews.freebsd.org/D52160
DeltaFile
+16-0Mk/Uses/sudo.mk
+2-10net-mgmt/librenms/Makefile
+11-0CHANGES
+2-3sysutils/puppetserver8/Makefile
+2-3sysutils/openvox-server8/Makefile
+2-3sysutils/bhyvemgr/Makefile
+35-1937 files not shown
+95-10143 files

HardenedBSD/ports f3fab2dnet/libmateweather Makefile distinfo

net/libmateweather: Updated from version to 1.28.1

ALso swtiched the ports to GitHub since that package was not added to
the 1.28.1 in https://pub.mate-desktop.org/releases/1.28/.

PR:             289685
Reported by:    Ale
DeltaFile
+10-7net/libmateweather/Makefile
+3-3net/libmateweather/distinfo
+13-102 files

HardenedBSD/ports 3e772a2x11/mate-applets Makefile, x11/mate-panel Makefile

x11/mate-applets: bump port revision

related to net/libmateweather update.
DeltaFile
+1-1x11/mate-applets/Makefile
+1-1x11/mate-panel/Makefile
+2-22 files

HardenedBSD/ports 7a0c29adatabases/clickhouse distinfo Makefile.submodules, databases/clickhouse/files patch-PreLoad.cmake

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+204-139net/frr10/pkg-plist
+119-77databases/clickhouse/distinfo
+46-134security/courier-authlib/files/patch-Makefile.in
+58-37databases/clickhouse/Makefile.submodules
+18-71databases/clickhouse/files/patch-PreLoad.cmake
+37-35sysutils/rust-coreutils/distinfo
+482-49377 files not shown
+966-86183 files

HardenedBSD/ports f407c12sysutils/rust-coreutils distinfo Makefile.crates

sysutils/rust-coreutils: update to 0.4.0

Changelog:      https://github.com/uutils/coreutils/releases/tag/0.4.0
DeltaFile
+37-35sysutils/rust-coreutils/distinfo
+17-16sysutils/rust-coreutils/Makefile.crates
+1-9sysutils/rust-coreutils/pkg-plist
+1-1sysutils/rust-coreutils/Makefile
+56-614 files

HardenedBSD/ports 3573dfbgames/fheroes2 distinfo Makefile

games/fheroes2: update to 1.1.12

Changelog:      https://github.com/ihhub/fheroes2/releases/tag/1.1.12
DeltaFile
+3-3games/fheroes2/distinfo
+1-1games/fheroes2/Makefile
+1-0games/fheroes2/pkg-plist
+5-43 files

HardenedBSD/ports 14636c4sysutils/flashrom/files patch-libflashrom.c

sysutils/flashrom: fix build on big-endian

compare_region_with_dump() is used only in a code for little-endian:
../libflashrom.c:458:12: error: unused function 'compare_region_with_dump' [-Werror,-Wunused-function]
  458 | static int compare_region_with_dump(const struct romentry *const a, const struct romentry *const b)
      |            ^~~~~~~~~~~~~~~~~~~~~~~~
1 error generated.
DeltaFile
+18-0sysutils/flashrom/files/patch-libflashrom.c
+18-01 files

HardenedBSD/ports b9ac4d6net/sing-box distinfo Makefile

net/sing-box: update 1.11.9 → 1.12.2
DeltaFile
+5-5net/sing-box/distinfo
+2-3net/sing-box/Makefile
+7-82 files

HardenedBSD/ports 93d9572science/rdkit distinfo Makefile

science/rdkit: update 2025_09_1 → 2025.09.2
DeltaFile
+19-19science/rdkit/distinfo
+6-2science/rdkit/Makefile
+1-0science/rdkit/pkg-plist
+26-213 files

HardenedBSD/ports 104ec5ddevel/rustc-demangle distinfo Makefile

devel/rustc-demangle: update 0.1.24 → 0.1.26
DeltaFile
+29-19devel/rustc-demangle/distinfo
+15-10devel/rustc-demangle/Makefile
+44-292 files

HardenedBSD/ports 4e552d0archivers/py-borgbackup Makefile distinfo, archivers/py-borgbackup/files patch-pyproject.toml patch-msgpack

archivers/py-borgbackup: update to 1.4.2

Changelog:      https://borgbackup.readthedocs.io/en/1.4.2/changes.html#version-1-4-2-2025-10-31

This reverts the setuptools update for the SPDX license documentation,
which would break with our ancient setuptools.

(Note that https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=270358 and
https://reviews.freebsd.org/D46236 have not made progress in over one
and a half years, so... we need to work around that.)
DeltaFile
+31-0archivers/py-borgbackup/files/patch-pyproject.toml
+0-25archivers/py-borgbackup/files/patch-msgpack
+9-7archivers/py-borgbackup/Makefile
+10-0archivers/py-borgbackup/files/patch-requirements.d_development.txt
+3-3archivers/py-borgbackup/distinfo
+53-355 files

HardenedBSD/ports 63c90b8net/frr10 pkg-plist distinfo

net/frr10: Update to 10.5.0

Changelog:      https://github.com/FRRouting/frr/releases/tag/frr-10.5.0
DeltaFile
+204-139net/frr10/pkg-plist
+3-3net/frr10/distinfo
+1-1net/frr10/Makefile
+208-1433 files

HardenedBSD/ports ec4d2cdgraphics/ssocr distinfo Makefile

graphics/ssocr: Update to 2.25.1
DeltaFile
+3-3graphics/ssocr/distinfo
+1-1graphics/ssocr/Makefile
+4-42 files

HardenedBSD/ports 5005925emulators/wine-gecko Makefile distinfo

emulators/wine-gecko: Package 64-bit upstream MSI

So far we packaged the 32-bit upstream MSI both on i386 and amd64.
Now differentiate based on architecture.

This changes amd64 packages, so bump PORTREVISION.

It backports revision c1a8aaa416a3 from emulators/wine-gecko-devel.

PR:             290706
Tested by:      Dave Palais <silent at penguinmail.com>
DeltaFile
+10-2emulators/wine-gecko/Makefile
+3-1emulators/wine-gecko/distinfo
+13-32 files

HardenedBSD/ports b0a35e5devel/py-sortinghat Makefile

devel/py-sortinghat: Return to pool

Used in cluster and releasing so that others can update as necessary
without my intervention.
DeltaFile
+2-1devel/py-sortinghat/Makefile
+2-11 files

HardenedBSD/ports 9fa7394databases/freetds-devel distinfo Makefile

databases/freetds-devel: Update version 1.5.136=>1.5.140
DeltaFile
+3-3databases/freetds-devel/distinfo
+1-1databases/freetds-devel/Makefile
+4-42 files

HardenedBSD/ports 9d9a263databases/clickhouse distinfo Makefile.submodules, databases/clickhouse/files patch-PreLoad.cmake patch-contrib_libbcrypt-cmake_CMakeLists.txt

databases/clickhouse: Update version 22.9.1.2603=>23.5.2.7

Changelog: https://github.com/ClickHouse/ClickHouse/releases/tag/v23.5.2.7

Sponsored by:   Nepustil
DeltaFile
+119-77databases/clickhouse/distinfo
+58-37databases/clickhouse/Makefile.submodules
+18-71databases/clickhouse/files/patch-PreLoad.cmake
+25-0databases/clickhouse/files/patch-contrib_libbcrypt-cmake_CMakeLists.txt
+4-10databases/clickhouse/files/patch-cmake_freebsd_default__libs.cmake
+5-5databases/clickhouse/Makefile
+229-2001 files not shown
+230-2007 files

HardenedBSD/ports 0256eafdevel/nspr distinfo Makefile

devel/nspr: update to 4.38.1

Announcement:
  https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/V7GVSScpn5w
DeltaFile
+3-3devel/nspr/distinfo
+1-1devel/nspr/Makefile
+4-42 files

HardenedBSD/ports 11e4219net-mgmt/check_ssl_cert distinfo Makefile

net-mgmt/check_ssl_cert: update to 2.95.0

Release Notes:
  https://github.com/matteocorti/check_ssl_cert/releases
DeltaFile
+3-3net-mgmt/check_ssl_cert/distinfo
+1-1net-mgmt/check_ssl_cert/Makefile
+4-42 files

HardenedBSD/ports adcbb22ftp/curl/files patch-lib_hostip.c

HBSD: ftp/curl: Fixup .onion patch

We want people to still be able to reach HardenedBSD's infrastructure
over Tor, so we need to fixup the patch that removes the prohibition of
Tor Onion Services due to changes in libcurl's lib/hostip.c file.

This commit should serve as a reminder of how changes we humans make to
technology impact human rights efforts.

Signed-off-by:  Shawn Webb <shawn.webb at hardenedbsd.org>
DeltaFile
+6-3ftp/curl/files/patch-lib_hostip.c
+6-31 files

HardenedBSD/ports c71675etextproc/gladtex pkg-descr

textproc/gladtex: Fix typo in pkg-descr
DeltaFile
+1-1textproc/gladtex/pkg-descr
+1-11 files

HardenedBSD/ports 550d8b4devel Makefile, devel/openfec pkg-plist Makefile

devel/openfec: New Port

OpenFEC is a library that provides Application-Level Forward Erasure
Correction (AL-FEC) codes, also known as Upper-Layers FEC (UL-FEC). The
core purpose is to add redundancy to data in order to recover from
erasures during transmission without requiring retransmission.

This port is of the actively maintained fork by the roc-streaming project.
DeltaFile
+48-0devel/openfec/pkg-plist
+37-0devel/openfec/Makefile
+19-0devel/openfec/pkg-descr
+15-0devel/openfec/files/COPYRIGHT-LDPC
+3-0devel/openfec/distinfo
+1-0devel/Makefile
+123-06 files

HardenedBSD/ports 19c0402comms/chirp Makefile distinfo

comms/chirp: Update 20240910 => 20251106

+ Add WWW for source code repository
* Pet portclippy(1) and portfmt(1)
* Use distutils for now, as with pep517 it fails at stage phase,
  while upstream don't have any plans on implementing it either.

  https://github.com/kk7ds/chirp/pull/609#pullrequestreview-1435569432

PR:             282904
Approved by:    hamradio@ (alven@, yuri@)
Approved by:    yuri@ (Mentor)
DeltaFile
+10-12comms/chirp/Makefile
+3-3comms/chirp/distinfo
+1-0comms/chirp/pkg-plist
+14-153 files

HardenedBSD/ports aeed210www/tomcat110 distinfo pkg-plist

www/tomcat110: Update 11.0.13 => 11.0.14

Changelog:
https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.14_(markt)

MFH:    2025Q4
DeltaFile
+3-3www/tomcat110/distinfo
+1-1www/tomcat110/pkg-plist
+1-1www/tomcat110/Makefile
+5-53 files

HardenedBSD/ports cf5a086www/tomcat-devel distinfo Makefile

www/tomcat-devel: Update 11.0.13 => 11.0.14

Changelog:
https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.14_(markt)

MFH:    2025Q4
DeltaFile
+3-3www/tomcat-devel/distinfo
+1-1www/tomcat-devel/Makefile
+1-1www/tomcat-devel/pkg-plist
+5-53 files

HardenedBSD/ports e3a1babwww/tomcat101 distinfo Makefile

www/tomcat101: Update 10.1.48 => 10.1.49

Changelog:
https://tomcat.apache.org/tomcat-10.1-doc/changelog.html#Tomcat_10.1.49_(schultz)

MFH:    2025Q4
DeltaFile
+3-3www/tomcat101/distinfo
+1-1www/tomcat101/Makefile
+4-42 files

HardenedBSD/ports 87eac05www/tomcat9 distinfo Makefile

www/tomcat9: Updaet 9.0.111 => 9.0.112

Changelog:
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.112_(remm)

MFH:    2025Q4
DeltaFile
+3-3www/tomcat9/distinfo
+1-1www/tomcat9/Makefile
+4-42 files

HardenedBSD/ports a63c445misc/onnxruntime distinfo Makefile.DISTFILES, misc/onnxruntime/files patch-onnxruntime_core_mlas_lib_platform.cpp patch-onnxruntime_core_common_spin__pause.cc

misc/onnxruntime: update 1.21.1 → 1.23.2
DeltaFile
+24-26misc/onnxruntime/distinfo
+0-26misc/onnxruntime/files/patch-onnxruntime_core_mlas_lib_platform.cpp
+10-11misc/onnxruntime/Makefile.DISTFILES
+11-0misc/onnxruntime/files/patch-onnxruntime_core_common_spin__pause.cc
+4-5misc/onnxruntime/Makefile.MASTER_SITES
+4-3misc/onnxruntime/Makefile
+53-714 files not shown
+60-7610 files