New package, openbao-2.6.2.
This is a straightforward build with the vendored Go modules. I have not
applied any of the NetBSD patches from security/vault. Tested only on Linux so
far.
OpenBao is an open source, community-driven secrets manager and fork of
Vault managed by the Linux Foundation's OpenSSF.
Arbitrary key/value secrets can be stored in OpenBao. OpenBao encrypts
these secrets prior to writing them to persistent storage, so gaining
access to the raw storage is not enough to access your secrets.
OpenBao can generate secrets on-demand for some systems, such as
Kubernetes or SQL databases. After creating these dynamic secrets,
OpenBao will also automatically revoke them after the lease is up.
OpenBao provides encryption as a service with centralized key management
to simplify encrypting data in transit and stored across clouds and
datacenters.
zino: update to version 2.5.2.
Pkgsrc changes:
* version-bump + checksums + minor adjust of dependencies.
Upstream changes:
- Added explanation section to documentation covering Zino's history,
core concepts, and technical architecture
([#435](https://github.com/Uninett/zino/issues/435)) - Added
documentation for cuRitz, with screenshots.
([#568](https://github.com/Uninett/zino/issues/568))
- `--user` and the `process.user` setting now accept a numeric
`UID` or `UID:GID` or, as previously, a user name, so Zino can drop
privileges to a UID that has no entry in `/etc/passwd` (e.g. inside
a container)
- BGP sessions that go down are reported again. On routers that
send Zino an SNMP trap when a session drops, the drop was only
[16 lines not shown]
bind920: update to version 9.20.27.
Pkgsrc changes:
* Update version number & checksums.
Upstream changes:
BIND 9.20.27
------------
New Features
~~~~~~~~~~~~
- Disclose active Negative Trust Anchors with Extended DNS Error 33.
``566e7018278``
A Negative Trust Anchor (RFC 7646) turns off DNSSEC validation for a
domain, so a name that would normally fail validation resolves
instead. named now marks such answers with Extended DNS Error code 33,
[168 lines not shown]
llama.cpp: update to 0.4.0.
llama.cpp 0.4.0 adds initial Qwen3.8-Flash-Next and Nemotron-3-Puzzle
support, on-demand tensor reading, per-slot server context limits,
video input options, and a ggml update to 0.23.0 with major sparse
flash attention and RDMA work.