gotosocial: Update to 0.22.1
# Summary
This is a minor upgdate.
If you're updating to this version from v0.22.0, it's a very easy update with no db migrations.
# Changelog
Add a codeberg tag tracking variable in the Makefile, like many packages pulled from Github for consistency and easier upstream version changes tracking.
# Verifications
- pkglint
- build using pkgsrc-trunk and bob
- deployed in production
bind920: update to version 9.20.26.
Pkgsrc changes:
* Update version number & checksums.
Upstream changes:
BIND 9.20.26
------------
Security Fixes
~~~~~~~~~~~~~~
- [CVE-2026-11331] Fix handling of rpz CNAME expansion that returns name
too long. ``b950da5f625``
Previously, if the expansion of a wildcard CNAME RPZ policy resulted
in a name that exceeded the length limit, a self referential CNAME and
the original address record were returned, allowing the policy to be
[515 lines not shown]
dpbox: update to 6.1.3
Five memory-safety fixes folded upstream: a stack over-read in truesize(),
a one-byte overflow in check_sanity(), four buffer underflows in the
filename-extension helpers, a FORTIFY abort in the FBB link-check proposal
generator, and a pointer-precedence bug that wrote through an unrelated
pointer in the low-memory buffer path. patch-bo, patch-bp, patch-bq,
patch-bs and patch-bt are removed; patch-bl is retained.
sftpgo: update to 2.7.5
Bug fixes
httpd: make sure to always close connection for shares.
Security fixes
Improper handling of malformed SSH channel requests. GHSA-q7pc-356p-hggc.