OpenBSD/src ywO009Mshare/man/man4 dwmshc.4

   update the list of SoCs this driver works with
VersionDeltaFile
1.2+3-4share/man/man4/dwmshc.4
+3-41 files

OpenBSD/ports lVJgqnnemulators/mgba Makefile, mail/mblaze Makefile

   Add comments indicating pledge usage.

   ok op@
VersionDeltaFile
1.56+1-0emulators/mgba/Makefile
1.22+1-0mail/mblaze/Makefile
1.17+1-0mail/opensmtpd-filters/dkimsign/Makefile
1.61+1-0net/arping/Makefile
1.218+1-0net/isc-bind/Makefile
1.13+1-0net/ucspi-tools/Makefile
+6-05 files not shown
+11-011 files

OpenBSD/ports Di77Vfdx11/xfce4/xfce4-screensaver Makefile

   x11/xfce4/xfce4-screensaver: fix xscreensaver integration
VersionDeltaFile
1.27+2-0x11/xfce4/xfce4-screensaver/Makefile
+2-01 files

OpenBSD/ports N8JEhK8sysutils/google-cloud-sdk distinfo Makefile, sysutils/google-cloud-sdk/pkg PLIST

   Update to google-cloud-sdk-564.0.0.
VersionDeltaFile
1.417+467-285sysutils/google-cloud-sdk/pkg/PLIST
1.434+2-2sysutils/google-cloud-sdk/distinfo
1.454+1-1sysutils/google-cloud-sdk/Makefile
+470-2883 files

OpenBSD/ports 1NPcPcxsysutils/amazon-ssm-agent distinfo Makefile

   Update to amazon-ssm-agent-3.3.4177.0.
VersionDeltaFile
1.167+2-2sysutils/amazon-ssm-agent/distinfo
1.181+1-1sysutils/amazon-ssm-agent/Makefile
+3-32 files

OpenBSD/ports l5FR1fZsysutils/flatpak/xdg-dbus-proxy distinfo Makefile

   Update to xdg-dbus-proxy-0.1.7.
VersionDeltaFile
1.3+2-2sysutils/flatpak/xdg-dbus-proxy/distinfo
1.5+1-1sysutils/flatpak/xdg-dbus-proxy/Makefile
+3-32 files

OpenBSD/ports A04EdGmnet/synapse distinfo modules.inc, net/synapse/pkg PLIST

   net/synapse: update to 1.151.0, from MAINTAINER Renaud Allard
VersionDeltaFile
1.90+8-8net/synapse/distinfo
1.76+4-3net/synapse/pkg/PLIST
1.53+3-3net/synapse/modules.inc
1.119+2-1net/synapse/Makefile
+17-154 files

OpenBSD/ports auPN40dtelephony/baresip Makefile.inc, telephony/baresip/baresip distinfo

   telephony/baresip: update to 4.7.0
VersionDeltaFile
1.44+2-2telephony/baresip/baresip/distinfo
1.43+2-2telephony/baresip/re/distinfo
1.37+1-1telephony/baresip/Makefile.inc
+5-53 files

OpenBSD/ports e2v1Jzpmail/mozilla-thunderbird distinfo Makefile

   mail/mozilla-thunderbird: MFC update to 140.9.1.

   see https://www.thunderbird.net/en-US/thunderbird/140.9.1esr/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-29/
VersionDeltaFile
1.301.2.10+2-2mail/mozilla-thunderbird/distinfo
1.513.2.11+1-1mail/mozilla-thunderbird/Makefile
+3-32 files

OpenBSD/ports 3LHsDJpmail/mozilla-thunderbird distinfo Makefile, mail/thunderbird-i18n distinfo Makefile.inc

   mail/mozilla-thunderbird: update to 140.9.1.

   see https://www.thunderbird.net/en-US/thunderbird/140.9.1esr/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-29/
VersionDeltaFile
1.295+132-132mail/thunderbird-i18n/distinfo
1.311+2-2mail/mozilla-thunderbird/distinfo
1.524+1-1mail/mozilla-thunderbird/Makefile
1.269+1-1mail/thunderbird-i18n/Makefile.inc
+136-1364 files

OpenBSD/src dmfuV3Zlib/libcrypto opensslv.h

   Bump LibreSSL version for the release

   ok deraadt
VersionDeltaFile
1.82+3-3lib/libcrypto/opensslv.h
+3-31 files

OpenBSD/ports ekmxfyvnet/flare-messenger distinfo crates.inc, net/flare-messenger/patches patch-Cargo_toml patch-deps_libsignal-service-rs_Cargo_toml

   net/flare-messenger: update to 0.20.3

   ok rsadowski@ thanks!
VersionDeltaFile
1.2+522-468net/flare-messenger/distinfo
1.2+254-227net/flare-messenger/crates.inc
1.2+2-81net/flare-messenger/pkg/PLIST
1.2+18-18net/flare-messenger/patches/patch-Cargo_toml
1.2+12-6net/flare-messenger/patches/patch-deps_libsignal-service-rs_Cargo_toml
1.4+7-9net/flare-messenger/Makefile
+815-8093 files not shown
+831-8219 files

OpenBSD/src dZkpOR6sys/dev/fdt dwmshc.c

   Add support for the RK3528 variant.  To make things easier to follow,
   pull the hardware differences out into a per-variant structure containing
   the different parameters we have to program.

   tested on 3528 (radxa e20c), 3568 (nanopi r5s), 3588 (nanopi r6c)
   feedback from kettenis@
   ok kettenis@ dlg@
VersionDeltaFile
1.9+63-12sys/dev/fdt/dwmshc.c
+63-121 files

OpenBSD/src yTaEGUYsys/dev/fdt dwpcie.c

   Add SpacemiT K1 support.
VersionDeltaFile
1.59+158-2sys/dev/fdt/dwpcie.c
+158-21 files

OpenBSD/ports gIwB7Dmtextproc/lowdown Makefile distinfo, textproc/lowdown/pkg PLIST

   textproc/lowdown: Update to 3.0.1

   From Maintainer Bryan Vyhmeister
   ok tb@
VersionDeltaFile
1.18+3-3textproc/lowdown/pkg/PLIST
1.38+2-2textproc/lowdown/Makefile
1.33+2-2textproc/lowdown/distinfo
+7-73 files

OpenBSD/ports 7lNmdhlsysutils/conky Makefile

   sysutils/conky: set USE_CCACHE=OFF

   ... otherwise build fails with ccache installed
   ok tb@
VersionDeltaFile
1.76+2-1sysutils/conky/Makefile
+2-11 files

OpenBSD/ports FpExPeAmail/postfix/stable Makefile, security/sslscan Makefile

   bump stable openssl consumers with static link
VersionDeltaFile
1.273.2.2+1-1mail/postfix/stable/Makefile
1.81.2.2+1-1security/sslscan/Makefile
1.51.2.2+1-1sysutils/borgbackup/2.0/Makefile
+3-33 files

OpenBSD/ports 7jbPknwsecurity/openssl/3.5 Makefile distinfo, security/openssl/3.5/patches patch-Configurations_unix-Makefile_tmpl patch-crypto_aes_asm_aes-riscv64_pl

   MFC: Update to openssl 3.5.6

   Add eopenssl symlink and add aja's cmake fix as well.

   CVE-2026-28386 CVE-2026-28387 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390
   CVE-2026-31789 CVE-2026-31790. It's all very boring.
VersionDeltaFile
1.11.2.2+5-1security/openssl/3.5/Makefile
1.5.2.2+2-2security/openssl/3.5/distinfo
1.2.2.1+2-2security/openssl/3.5/patches/patch-Configurations_unix-Makefile_tmpl
1.4.2.2+3-0security/openssl/3.5/pkg/PLIST
1.1.2.1+1-1security/openssl/3.5/patches/patch-crypto_aes_asm_aes-riscv64_pl
1.1.1.1.2.1+1-1security/openssl/3.5/patches/patch-exporters_pkg-config_libcrypto_pc_in
+14-74 files not shown
+17-1010 files

OpenBSD/ports 6Rmgosnsecurity/openssl/3.5/patches patch-Configurations_unix-Makefile_tmpl patch-exporters_cmake_OpenSSLConfig_cmake_in, security/openssl/3.6/patches patch-Configurations_unix-Makefile_tmpl

   openssl: regen patches
VersionDeltaFile
1.2+2-2security/openssl/3.6/patches/patch-Configurations_unix-Makefile_tmpl
1.3+2-2security/openssl/3.5/patches/patch-Configurations_unix-Makefile_tmpl
1.2+1-1security/openssl/3.5/patches/patch-exporters_cmake_OpenSSLConfig_cmake_in
1.2+1-1security/openssl/3.5/patches/patch-exporters_pkg-config_libcrypto_pc_in
1.2+1-1security/openssl/3.5/patches/patch-exporters_pkg-config_libssl_pc_in
1.2+1-1security/openssl/3.5/patches/patch-exporters_pkg-config_openssl_pc_in
+8-88 files not shown
+16-1614 files

OpenBSD/ports rUHpcbYlang/erlang/26 distinfo Makefile, lang/erlang/27 Makefile distinfo

   lang/erlang: Update to 26.2.5.19, 27.3.4.10, 28.4.2

   Fixes for
   CVE-2026-28810
   CVE-2026-32144
VersionDeltaFile
1.16+10-10lang/erlang/28/Makefile
1.28+9-9lang/erlang/27/Makefile
1.26+4-4lang/erlang/26/distinfo
1.23+4-4lang/erlang/27/distinfo
1.15+4-4lang/erlang/28/distinfo
1.31+3-3lang/erlang/26/Makefile
+34-346 files

OpenBSD/ports OSwviTUdevel/p5-Term-ReadLine-Gnu Makefile

   If ports privsep is set, test without X11 in non interactive mode.
VersionDeltaFile
1.39+19-10devel/p5-Term-ReadLine-Gnu/Makefile
+19-101 files

OpenBSD/src uEtH6bjgnu/usr.bin/perl Makefile.bsd-wrapper

   Respect DEBUG so we can build perl with debug symbols

   Adding -DEBUGGING in CONFIGURE_ARGS activates debug code,
   -DEBUGGING=-g passes -g in CFLAGS (only -g is supported),
   and -DEBUGGING=both does... both.  This is a bit confusing.
   IMO DEBUG=-g should only add -g and disable executable stripping, but
   not change the code that is built.  So use -Doptimize which lets us pass
   arbitrary compiler flags (eg -g3), just like DEBUG does in our system
   Makefiles.

   Hints and ok afresh1@
VersionDeltaFile
1.115+5-1gnu/usr.bin/perl/Makefile.bsd-wrapper
+5-11 files

OpenBSD/ports mYJYMlMsysutils/borgbackup/2.0 Makefile

   borgbackup/2.0: bump after openssl udpate (static link)
VersionDeltaFile
1.56+1-1sysutils/borgbackup/2.0/Makefile
+1-11 files

OpenBSD/ports 3C514KMmail/postfix/stable Makefile

   postfix-stable: bump after openssl update (static link)
VersionDeltaFile
1.281+1-1mail/postfix/stable/Makefile
+1-11 files

OpenBSD/ports M8VvJxksecurity/sslscan Makefile

   sslscan: bump after openssl update (static link)
VersionDeltaFile
1.86+1-0security/sslscan/Makefile
+1-01 files

OpenBSD/ports 8hDc8Z4security/openssl/3.6 distinfo Makefile, security/openssl/3.6/pkg PLIST

   Update to openssl 3.6.2

   CVE-2026-28386 CVE-2026-28387 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390
   CVE-2026-31789 CVE-2026-31790. It's all very boring.
VersionDeltaFile
1.3+2-2security/openssl/3.6/distinfo
1.5+1-2security/openssl/3.6/Makefile
1.3+2-0security/openssl/3.6/pkg/PLIST
+5-43 files

OpenBSD/ports 9RCP8Amsecurity/openssl/3.5 distinfo Makefile, security/openssl/3.5/patches patch-doc_man3_SSL_CTX_set1_curves_pod patch-ssl_t1_lib_c

   Update to openssl 3.5.6

   CVE-2026-28386 CVE-2026-28387 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390
   CVE-2026-31789 CVE-2026-31790. It's all very boring.
VersionDeltaFile
1.7+2-2security/openssl/3.5/distinfo
1.16+1-2security/openssl/3.5/Makefile
1.7+2-0security/openssl/3.5/pkg/PLIST
1.2+0-0security/openssl/3.5/patches/patch-doc_man3_SSL_CTX_set1_curves_pod
1.2+0-0security/openssl/3.5/patches/patch-ssl_t1_lib_c
1.2+0-0security/openssl/3.5/patches/patch-test_tls13groupselection_test_c
+5-42 files not shown
+5-48 files

OpenBSD/ports okciv5xmeta/tor-browser Makefile, www/tor-browser Makefile.inc

   Tor Browser: update to 15.0.9
VersionDeltaFile
1.107.2.8+6-6www/tor-browser/browser/distinfo
1.113.2.8+2-2meta/tor-browser/Makefile
1.58.2.6+2-2www/tor-browser/noscript/distinfo
1.178.2.10+1-1www/tor-browser/browser/Makefile
1.110.2.8+1-1www/tor-browser/Makefile.inc
1.65.2.6+1-1www/tor-browser/noscript/Makefile
+13-136 files

OpenBSD/ports XkkxpIzmeta/tor-browser Makefile, www/tor-browser Makefile.inc

   Tor Browser: update to 15.0.9
VersionDeltaFile
1.117+6-6www/tor-browser/browser/distinfo
1.123+2-2meta/tor-browser/Makefile
1.67+2-2www/tor-browser/noscript/distinfo
1.120+1-1www/tor-browser/Makefile.inc
1.196+1-1www/tor-browser/browser/Makefile
1.74+1-1www/tor-browser/noscript/Makefile
+13-136 files

OpenBSD/src PbbS2GMusr.sbin/rpki-client ccr.c x509.c

   Sync - CCR uses an IANA assigned codepoint nowadays

   OK tb@
VersionDeltaFile
1.34+2-2usr.sbin/rpki-client/ccr.c
1.130+2-2usr.sbin/rpki-client/x509.c
+4-42 files