OpenBSD/ports GzCG9LGnet/librenms distinfo Makefile, net/librenms/patches patch-daily_sh patch-resources_definitions_config_definitions_json

   update to librenms-26.7.0 (various xss fixes, etc)
VersionDeltaFile
1.2.4.3+231-65net/librenms/pkg/PLIST-main
1.152.2.3+4-4net/librenms/distinfo
1.2.4.2+3-0net/librenms/pkg/PLIST-doc
1.41.4.1+1-1net/librenms/patches/patch-daily_sh
1.8.2.2+1-1net/librenms/patches/patch-resources_definitions_config_definitions_json
1.223.2.3+1-1net/librenms/Makefile
+241-726 files

OpenBSD/ports 1tbQe2ynet/librenms distinfo Makefile, net/librenms/patches patch-daily_sh patch-resources_definitions_config_definitions_json

   update to librenms-26.7.0
VersionDeltaFile
1.6+231-65net/librenms/pkg/PLIST-main
1.158+4-4net/librenms/distinfo
1.4+3-0net/librenms/pkg/PLIST-doc
1.42+1-1net/librenms/patches/patch-daily_sh
1.10+1-1net/librenms/patches/patch-resources_definitions_config_definitions_json
1.230+1-1net/librenms/Makefile
+241-726 files

OpenBSD/src HJRfzmtsys/netinet6 in6_ifattach.c

   netinet6: keep negotiated IPv6CP IFID unchanged for link-local address

   When sppp/PPPoE installs a peer-suggested IPv6CP interface identifier,
   in6_ifattach_linklocal() forced EUI64 G/U bit adjustments on the
   provided IFID. This unconditionally set the universal bit, rewriting a
   valid negotiated IFID like ::1 into ::200:0:0:1, yielding
   fe80::200:0:0:1 instead of fe80::1.

   RFC 5072 Section 5 specifies that the PPP link-local address is formed
   using the negotiated Interface Identifier as-is. Skip EUI64 bit
   modification on point-to-point interfaces. Non-P2P callers retain
   existing behaviour, while callers passing NULL continue using
   in6_get_ifid().

   Reported by Martin Crossley <admin AT crossleys DOT biz>.

   OK stsp@
VersionDeltaFile
1.126+7-3sys/netinet6/in6_ifattach.c
+7-31 files

OpenBSD/ports Joxayfudevel/spidermonkey140 distinfo Makefile

   Update to spidermonkey140-140.13.0v1.
VersionDeltaFile
1.13+2-2devel/spidermonkey140/distinfo
1.13+1-1devel/spidermonkey140/Makefile
+3-32 files

OpenBSD/src X9158Ezusr.bin/tmux screen-redraw.c

   Clip floating panes exactly at window edge, don't let the border creep
   into the first outside column.
VersionDeltaFile
1.155+7-5usr.bin/tmux/screen-redraw.c
+7-51 files

OpenBSD/ports HYvw7mzwww/mozilla-firefox Makefile distinfo, www/mozilla-firefox/patches patch-third_party_libwebrtc_modules_desktop_capture_linux_x11_x_server_pixel_buffer_cc patch-security_nss_lib_nss_nss_h

   www/mozilla-firefox: MFC update to 153.0.

   see https://www.firefox.com/en-US/firefox/153.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/

   - depend on latest cbindgen
   - update XSHM 1.2 patches from matthieu (cf #1702919)
VersionDeltaFile
1.2.2.2+104-15www/mozilla-firefox/patches/patch-third_party_libwebrtc_modules_desktop_capture_linux_x11_x_server_pixel_buffer_cc
1.1.6.2+2-2www/mozilla-firefox/patches/patch-security_nss_lib_nss_nss_h
1.680.2.14+2-2www/mozilla-firefox/Makefile
1.397.2.12+2-2www/mozilla-firefox/distinfo
1.109.2.1+1-0www/mozilla-firefox/pkg/PLIST
1.1.2.1+0-0www/mozilla-firefox/patches/patch-third_party_libwebrtc_modules_desktop_capture_linux_x11_x_server_pixel_buffer_h
+111-216 files

OpenBSD/ports lUyMXx5www/firefox-esr distinfo Makefile, www/firefox-esr/patches patch-gfx_wr_webrender_src_texture_cache_rs

   www/firefox-esr: MFC update to 140.13.0.

   see https://www.firefox.com/en-US/firefox/140.13.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/

   drop patch from #2046162 to fix build with latest cbindgen, backported upstream
VersionDeltaFile
1.180.2.4+4-4www/firefox-esr/distinfo
1.270.2.4+2-2www/firefox-esr/Makefile
1.1.2.2+0-0www/firefox-esr/patches/patch-gfx_wr_webrender_src_texture_cache_rs
+6-63 files

OpenBSD/ports h7OGptLwww/firefox-esr distinfo Makefile, www/firefox-esr-i18n distinfo Makefile.inc

   www/firefox-esr: update to 140.13.0.

   see https://www.firefox.com/en-US/firefox/140.13.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-70/

   drop patch from #2046162, backported upstream
VersionDeltaFile
1.181+162-162www/firefox-esr-i18n/distinfo
1.186+4-4www/firefox-esr/distinfo
1.276+2-2www/firefox-esr/Makefile
1.193+1-1www/firefox-esr-i18n/Makefile.inc
1.2+0-0www/firefox-esr/patches/patch-gfx_wr_webrender_src_texture_cache_rs
+169-1695 files

OpenBSD/ports 29Cccjawww/firefox-i18n distinfo Makefile.inc, www/mozilla-firefox Makefile distinfo

   www/mozilla-firefox: update to 153.0.

   see https://www.firefox.com/en-US/firefox/153.0/releasenotes/
   fixes https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/

   - depend on latest cbindgen
   - drop now useless USE_LLD=ports
   - drop ugly NCPU !!= construct and use 4 threads for lld
VersionDeltaFile
1.399+164-164www/firefox-i18n/distinfo
1.699+5-11www/mozilla-firefox/Makefile
1.413+4-4www/mozilla-firefox/distinfo
1.354+1-1www/firefox-i18n/Makefile.inc
1.14+1-1www/mozilla-firefox/patches/patch-toolkit_components_downloads_DownloadIntegration_sys_mjs
1.110+1-0www/mozilla-firefox/pkg/PLIST
+176-1816 files

OpenBSD/src xm7hXe3usr.bin/tmux window.c

   Invalidate scene when window is resized.
VersionDeltaFile
1.367+2-2usr.bin/tmux/window.c
+2-21 files

OpenBSD/ports Adk0xOznet/sslh Makefile, net/sslh/patches patch-sslh_pod patch-Makefile_in

   update to sslh-2.3.1, from Atanas Vladimirov, small tweaks from me
VersionDeltaFile
1.12+12-9net/sslh/patches/patch-sslh_pod
1.1+21-0net/sslh/patches/patch-Makefile_in
1.1+21-0net/sslh/patches/patch-t_run
1.34+12-8net/sslh/Makefile
1.2+12-4net/sslh/pkg/DESCR
1.1+11-0net/sslh/pkg/sslh_ev.rc
+89-217 files not shown
+100-3013 files

OpenBSD/ports Fdk4wdTnet/p5-Net-DNS distinfo Makefile

   update p5-Net-DNS to 1.56
VersionDeltaFile
1.92+4-4net/p5-Net-DNS/distinfo
1.118+1-1net/p5-Net-DNS/Makefile
+5-52 files

OpenBSD/src iAHP0bMusr.bin/tmux tmux.1 cmd-split-window.c

   Add a -C flag to new-pane to have a modal pane close when the mouse is
   clicked outside it, GitHub issue 5400.
VersionDeltaFile
1.1146+6-3usr.bin/tmux/tmux.1
1.146+5-3usr.bin/tmux/cmd-split-window.c
1.498+6-1usr.bin/tmux/server-client.c
1.1412+2-1usr.bin/tmux/tmux.h
+19-84 files

OpenBSD/src hEix0mVusr.sbin/rpki-client parser.c

   Fix possible exit race in the parser

   Call pthread_cond_broadcast() on exit with its mutex held to ensure
   that the receiving threads are all either parked or running and then
   checking quit before calling pthread_cond_wait().
   Also once woken recheck the value of quit and exit the main loop early.

   OK tb@
VersionDeltaFile
1.183+17-3usr.sbin/rpki-client/parser.c
+17-31 files

OpenBSD/src bu6xfSZusr.bin/tmux screen-redraw.c

   If drawing border but not actually on a border, use the default line
   style.
VersionDeltaFile
1.154+3-1usr.bin/tmux/screen-redraw.c
+3-11 files

OpenBSD/src c8E2GTMusr.bin/tmux window-copy.c tmux.1

   Add copy-mode-current-line-style to set style for current line in copy
   mode, GitHub issue 5391 from Leo Henon.
VersionDeltaFile
1.423+43-7usr.bin/tmux/window-copy.c
1.1145+10-2usr.bin/tmux/tmux.1
1.240+10-1usr.bin/tmux/options-table.c
+63-103 files

OpenBSD/src xf91f95sys/dev/fdt xhci_fdt.c

   Use OF_getpropbool() instead of OF_getproplen() where appropriate.

   ok jsg@
VersionDeltaFile
1.31+5-5sys/dev/fdt/xhci_fdt.c
+5-51 files

OpenBSD/ports vMN8meqshells/zsh distinfo Makefile, shells/zsh/patches patch-configure_ac

   update to zsh-5.9.2, from Matthew Martin (maintainer)
VersionDeltaFile
1.35+2-2shells/zsh/distinfo
1.102+1-2shells/zsh/Makefile
1.56+3-0shells/zsh/pkg/PLIST
1.8+1-1shells/zsh/patches/patch-configure_ac
+7-54 files

OpenBSD/src gImrNpnlib/libc/asr gethostnamadr_async.c res_send_async.c

   DNS names are not proper C strings, they can contain NUL octets.

   If we want to use string functions (e.g. for comparison) we first need
   to convert them.

   with dgl some time ago
   OK dlg
VersionDeltaFile
1.55+9-6lib/libc/asr/gethostnamadr_async.c
1.45+7-3lib/libc/asr/res_send_async.c
+16-92 files

OpenBSD/src q58p6Cdlib/libc/asr asr.c

   Use decimal encoding for special characters in DNS labels.

   with dgl some time ago
   OK dlg
VersionDeltaFile
1.72+28-8lib/libc/asr/asr.c
+28-81 files

OpenBSD/ports MpsHiHAgeo/pmtiles Makefile, geo/pmtiles/pkg MESSAGE

   pmtiles uses gobs of RAM when working with larger zoom levels, add a quick
   MESSAGE warning about this (it's better to find out before you download
   100GB+).
VersionDeltaFile
1.1+3-0geo/pmtiles/pkg/MESSAGE
1.3+1-0geo/pmtiles/Makefile
+4-02 files

OpenBSD/src NtZ712Yusr.sbin/bgpd session_bgp.c session.c

   Rework the IdleHoldTimer and how fast reconnects are implemented.

   On first error bgpd should allow a fast reconnect - this is especially
   helpful for passive sessions. The way this was implemented was error
   prone with a special case in session_accept().

   Adjust the FSM so that on the first IDLE transistion the session uses
   a IdleHoldTime of 0 sec but then increased to INTERVAL_IDLE_HOLD_INITIAL.
   At the same time the outgoing connection is delatyed via ConnectRetryTimer.
   Doing this moves the session quickly into active state and allows new
   connections in but delays the reconnect like before.

   Additionally the STATE_ACTIVE / EVNT_START FSM case is adjusted to initiate
   a connect immediatly. This allows a 'bgpctl nei X up' to work also for
   sessions in ACTIVE state. Also passive sessions will initiate a connection
   in this case, which is a new behaviour.

   OK tb@
VersionDeltaFile
1.11+35-24usr.sbin/bgpd/session_bgp.c
1.538+2-13usr.sbin/bgpd/session.c
1.141+3-7usr.sbin/bgpd/control.c
1.199+1-3usr.sbin/bgpd/session.h
+41-474 files

OpenBSD/src LPdYpxYusr.sbin/bgpd rde_peer.c

   Use peer_dump_done() in the EXPORT_NONE and EXPORT_DEFAULT_ROUTE cases of
   peer_dump().

   peer_dump_done() calls peer_blast_done() and it issues the End-Of-RIB
   marker. This unifies all the peer_dump finalizers to use peer_dump_done().

   OK tb@
VersionDeltaFile
1.81+3-3usr.sbin/bgpd/rde_peer.c
+3-31 files

OpenBSD/src yqmwwwrusr.sbin/bgpd bgpd.h

   Switch a few uint32_t to unsigned int where it makes sense.

   Instead of mixing uint32_t with unsigned long long use unsigned int for
   those. In most cases those are simple counts that can't get too big.
   The same is the case for max_prefix and max_out_prefix. There is no good
   reason to use uint32_t there.

   OK tb@
VersionDeltaFile
1.546+8-8usr.sbin/bgpd/bgpd.h
+8-81 files

OpenBSD/ports kjmRNQKaudio/ncmpc distinfo Makefile, audio/ncmpc/patches patch-src_event_TimerList_hxx patch-src_event_TimerList_cxx

   audio/ncmpc: update to 0.53.

   see https://raw.githubusercontent.com/MusicPlayerDaemon/ncmpc/v0.53/NEWS
   switched to c++23, drop patches now that we have a more modern libcxx
VersionDeltaFile
1.31+2-2audio/ncmpc/distinfo
1.68+1-2audio/ncmpc/Makefile
1.13+1-0audio/ncmpc/pkg/PLIST
1.2+0-0audio/ncmpc/patches/patch-src_event_TimerList_hxx
1.2+0-0audio/ncmpc/patches/patch-src_event_TimerList_cxx
1.2+0-0audio/ncmpc/patches/patch-src_event_FineTimerEvent_hxx
+4-46 files

OpenBSD/src wK8188uusr.sbin/bgpd bgpd.h

   In struct rde_peer_stats use unsigned long long instead of uint64_t to
   simplify printing the values out.

   OK tb@
VersionDeltaFile
1.545+10-10usr.sbin/bgpd/bgpd.h
+10-101 files

OpenBSD/src vdz1W8Qusr.bin/tmux format-draw.c

   Use correct cursor position for range end, GitHub issue 5414.
VersionDeltaFile
1.34+2-2usr.bin/tmux/format-draw.c
+2-21 files

OpenBSD/src CrLXICSusr.bin/tmux tty-keys.c

   Increase escape-time for tmux's own queries (refresh-client -l and
   window size) as well, GitHub issue 5388 from Jackson Edmonds.
VersionDeltaFile
1.211+4-3usr.bin/tmux/tty-keys.c
+4-31 files

OpenBSD/src TuW4MtHregress/usr.bin/ssh channel-timeout.sh

   verify that ChannelTimeout in a Match block is effective
VersionDeltaFile
1.3+12-1regress/usr.bin/ssh/channel-timeout.sh
+12-11 files

OpenBSD/src 5drQYWhregress/usr.bin/ssh rekey.sh

   verify that RekeyLimit in a Match block is effective
VersionDeltaFile
1.31+22-2regress/usr.bin/ssh/rekey.sh
+22-21 files