OpenBSD/ports 1urHmnZ — editors/vim Makefile, editors/vim/patches patch-src_configure_ac

   disable pango/cairo for non-gui builds, their use was added for printing
   support (9.2.898)
VersionDeltaFile
1.24+18-0editors/vim/patches/patch-src_configure_ac
1.319+3-0editors/vim/Makefile
+21-02 files

OpenBSD/ports 4Jv3nCc — lang/gcc/16/patches patch-gcc_config_alpha_alpha_opt

   Modern gcc turns the "Report" opt flag into an #error. Remove the flag,
   allows gcc to be build on alpha again.

   from and OK kirill@
VersionDeltaFile
1.2+1-1lang/gcc/16/patches/patch-gcc_config_alpha_alpha_opt
+1-11 files

OpenBSD/ports 7rhPeEc — lang/gcc/16/patches patch-gcc_config_alpha_openbsd_h

   Remove custom LINK_SPEC. gcc contains its own defintion and creates a lot
   of build noise.

   OK kirill@
VersionDeltaFile
1.2+1-10lang/gcc/16/patches/patch-gcc_config_alpha_openbsd_h
+1-101 files

OpenBSD/ports 2Yy1lB6 — lang/gcc/16/patches patch-gcc_config_alpha_alpha_md

   Backport miod's alpha stack protector diff for base gcc.

   OK miod@, kirill@

   original message:
   The introduction of stack protector support for gcc 4 on alpha some 14 years
   ago required the logical stack frame to be laid out in reverse order (this is
   a requirement of the MI stack protector code in gcc).

   This move, however, forgot to update the preconditions of the "*adddi_fp_hack"
   insn, which is used to perform specific stack or frame pointer adjustment in
   the prologue.

   The change in frame layout would make its preconditions never allow it to be
   used anymore, causing internal compiler errors when attempting to compile
   routines with more than about 32KB of locals.

   Such code appears to be rare enough that this issue hasn't been noticed until
   very recently by martijn@.
VersionDeltaFile
1.2+22-0lang/gcc/16/patches/patch-gcc_config_alpha_alpha_md
+22-01 files

OpenBSD/ports 634uwj0 — www/iridium distinfo, www/iridium/patches patch-components_web_package_signed_web_bundles_rust_integrity_block_rs patch-chrome_browser_devtools_protocol_storage_handler_cc

   update to 2026.10.156
VersionDeltaFile
1.1+488-0www/iridium/patches/patch-components_web_package_signed_web_bundles_rust_integrity_block_unittest_rs
1.134+6-412www/iridium/distinfo
1.1+299-0www/iridium/patches/patch-components_web_package_signed_web_bundles_integrity_block_parser_cc
1.85+116-134www/iridium/patches/patch-chrome_browser_about_flags_cc
1.1+212-0www/iridium/patches/patch-chrome_browser_devtools_protocol_storage_handler_cc
1.1+193-0www/iridium/patches/patch-components_web_package_signed_web_bundles_rust_integrity_block_rs
+1,314-546922 files not shown
+8,515-3,740928 files

OpenBSD/src CDKYgYZ — sys/arch/alpha/include vmparam.h

   Bump MAXDSIZ for alpha to 4GB.

   OK claudio@, miod@
VersionDeltaFile
1.31+2-2sys/arch/alpha/include/vmparam.h
+2-21 files

OpenBSD/src 4s8mmbS — usr.sbin/sysmerge sysmerge.sh sysmerge.8

   Ignore /etc/ssl/cert.pem for now.

   ok sthen@
VersionDeltaFile
1.81+3-2usr.sbin/sysmerge/sysmerge.8
1.237+2-1usr.sbin/sysmerge/sysmerge.sh
+5-32 files

OpenBSD/ports AvvfXoe — sysutils/btop Makefile distinfo, sysutils/btop/patches patch-Makefile

   update to btop-1.4.8, from Laurent Cheylus, plus I simplified the Makefile
   patch to make future updates easier
VersionDeltaFile
1.7+21-76sysutils/btop/patches/patch-Makefile
1.10+2-2sysutils/btop/distinfo
1.11+1-1sysutils/btop/Makefile
+24-793 files

OpenBSD/ports elZM92X — x11/gnome/glycin Makefile crates.inc

   Update to glycin-2.2.5.
VersionDeltaFile
1.8+12-12x11/gnome/glycin/distinfo
1.8+5-5x11/gnome/glycin/crates.inc
1.9+1-1x11/gnome/glycin/Makefile
+18-183 files

OpenBSD/ports NA8l6NM — devel/gengetopt Makefile

   set USE_GMAKE; one of the non-suffix rules in tests uses $< (naddy has
   run into this failing from time to time, but we haven't figured out what
   actually triggers it..)
VersionDeltaFile
1.13+1-0devel/gengetopt/Makefile
+1-01 files

OpenBSD/ports NWikHD8 — x11/i3lock Makefile, x11/i3lock/patches patch-i3lock_c

   Add _permit_setugid flag.

   OK by sthen@
VersionDeltaFile
1.3+10-228x11/i3lock/patches/patch-i3lock_c
1.13+1-0x11/i3lock/Makefile
+11-2282 files

OpenBSD/ports eLCwjXh — x11/gnome/sushi Makefile

   x11/gnome/sushi: missing bump after dependency changes
VersionDeltaFile
1.85+1-0x11/gnome/sushi/Makefile
+1-01 files

OpenBSD/ports ty5Cu80 — devel/quirks Makefile, devel/quirks/files Quirks.pm

   quirk for ipaudit, and add/move 8.1 markers to the right place
VersionDeltaFile
1.1863+5-2devel/quirks/files/Quirks.pm
1.1849+1-1devel/quirks/Makefile
+6-32 files

OpenBSD/ports voCr8xV — net Makefile, net/ipaudit distinfo Makefile

   remove ipaudit, packet parsing software that hasn't really been maintained
   in ports since 3.4 (and uses a libpcap export which is on the chopping
   block), ok tb
VersionDeltaFile
1.1484+0-1net/Makefile
1.5+0-0net/ipaudit/pkg/PLIST
1.3+0-0net/ipaudit/pkg/DESCR
1.3+0-0net/ipaudit/patches/patch-Makefile
1.5+0-0net/ipaudit/distinfo
1.17+0-0net/ipaudit/Makefile
+0-14 files not shown
+0-110 files

OpenBSD/ports LdsahcY — devel/jdk/11 Makefile, devel/jdk/17 Makefile

   MFC jdk changes:

   - add eMudhra related hashes to blocked-certs (though this isn't actually
   enough; https://www.sonatype.com/blog/the-limits-of-fingerprint-blocklists-a-reproducible-java-certificate-bypass)

   - switch to a jdk certstore installed by the new jdk-ca-certificates port,
   which uses a copy of src/lib/libcrypto/cert.pem

   - merge $ORIGIN-related changes (ld.so support was in 8.0) to simplify
   -stable updates
VersionDeltaFile
1.11.2.2+5-1devel/jdk/25/Makefile
1.18.2.2+5-1devel/jdk/21/Makefile
1.43.2.2+5-1devel/jdk/17/Makefile
1.74.2.2+5-1devel/jdk/11/Makefile
1.1.1.1.6.1+1-0devel/jdk/25/pkg/PLIST
1.1.2.1+0-0devel/jdk/25/patches/patch-make_modules_java_base_lib_CoreLibraries_gmk
+21-410 files not shown
+21-416 files

OpenBSD/ports leilRq7 — security Makefile, security/jdk-ca-certs distinfo Makefile

   oops, cvs import doesn't use sticky branches, redo as cvs add
VersionDeltaFile
1.1.2.1+1-1security/jdk-ca-certs/files/cert.pem
1.793.2.1+1-0security/Makefile
1.1.2.1+0-0security/jdk-ca-certs/pkg/PLIST
1.1.2.1+0-0security/jdk-ca-certs/pkg/DESCR
1.2.2.1+0-0security/jdk-ca-certs/distinfo
1.4.2.1+0-0security/jdk-ca-certs/Makefile
+2-16 files

OpenBSD/ports f1BTp28 — security/jdk-ca-certs distinfo Makefile, security/jdk-ca-certs/files cert.pem

   MFC ports/security/jdk-ca-certs

   This package provides a common certificate authority certs file for the
   jdk's to use. It is created from a copy of /usr/src/lib/libcrypto/cert.pem.
VersionDeltaFile
1.1.1.2+10-9security/jdk-ca-certs/Makefile
1.1.1.1+2-2security/jdk-ca-certs/distinfo
1.1.1.2+1-1security/jdk-ca-certs/files/cert.pem
+13-123 files

OpenBSD/ports MwePSer — infrastructure/db user.list, net/tcptraceroute Makefile

   drop privs to a new dedicated user, setuid(getuid()) isn't much use as
   tcptraceroute is not installed setuid-root.
VersionDeltaFile
1.4+28-3net/tcptraceroute/patches/patch-main_c
1.8+4-2net/tcptraceroute/pkg/PLIST
1.496+2-2infrastructure/db/user.list
1.29+1-1net/tcptraceroute/Makefile
+35-84 files

OpenBSD/ports uxPCymg — net/tcptraceroute Makefile, net/tcptraceroute/pkg PLIST

   regen plist (@bin marker)
VersionDeltaFile
1.7+1-1net/tcptraceroute/pkg/PLIST
1.28+1-1net/tcptraceroute/Makefile
+2-22 files

OpenBSD/ports 51A6Nqi — net/tcptraceroute distinfo Makefile, net/tcptraceroute/patches patch-capture_h patch-main_c

   stop using pcap_version for printing the version with -d, also replace
   unreachable HOMEPAGE/SITES
VersionDeltaFile
1.27+19-17net/tcptraceroute/Makefile
1.3+14-2net/tcptraceroute/patches/patch-main_c
1.1+12-0net/tcptraceroute/patches/patch-capture_h
1.8+2-2net/tcptraceroute/distinfo
+47-214 files

OpenBSD/ports 75vF6ZQ — www/py-autobahn Makefile

   needs setuptools as well as hatchling for build, found by aja
VersionDeltaFile
1.22+2-1www/py-autobahn/Makefile
+2-11 files

OpenBSD/src ml0yADC — usr.bin/tmux key-bindings.c key-string.c

   Separate side status keys from status line, from Michael Grant.
VersionDeltaFile
1.529+44-32usr.bin/tmux/server-client.c
1.1472+48-6usr.bin/tmux/tmux.h
1.1194+23-2usr.bin/tmux/tmux.1
1.78+16-1usr.bin/tmux/key-string.c
1.197+11-3usr.bin/tmux/key-bindings.c
+142-445 files

OpenBSD/src lc8eJyS — usr.bin/tmux menu.c

   Reset menu callback before firing to stop crash when killing window,
   GitHub issue 5810 from Rene Stranščak.
VersionDeltaFile
1.74+4-2usr.bin/tmux/menu.c
+4-21 files

OpenBSD/src vLadYeG — usr.bin/tmux client.c

   Initialize before calling cfmakeraw, from Miles Conn.
VersionDeltaFile
1.169+2-1usr.bin/tmux/client.c
+2-11 files

OpenBSD/ports nK2GE8S — net/snowflake_proxy Makefile modules.inc

   net/snowflake_proxy: update to 2.15.2
VersionDeltaFile
1.17+326-312net/snowflake_proxy/distinfo
1.15+108-102net/snowflake_proxy/modules.inc
1.23+1-1net/snowflake_proxy/Makefile
+435-4153 files

OpenBSD/ports HMowtYo — x11/xscreensaver Makefile, x11/xscreensaver/patches patch-driver_xscreensaver-auth_c

   x11/xscreensaver: add _permit_setugid symbol

   Let's commit this for now while the work adding bsdauth support
   is not ready yet.

   Tested by edd@
   OK rsadowski@ jca@ tb@
VersionDeltaFile
1.1+13-0x11/xscreensaver/patches/patch-driver_xscreensaver-auth_c
1.126+1-1x11/xscreensaver/Makefile
+14-12 files

OpenBSD/src unsnUPI — usr.sbin/rpki-client ca.c

   rpki-client: deduplicate writing out the CA state

   nca_history_save() and ca_state_save() share a tempfile dance that really
   only has one line that needs to be different between the two: the actual
   writing of the lines. This was factored into a printing helper which we
   can pass in as a function pointer. One minor change of behavior is that
   the user visible warning shows the target file instead of the tempfile
   with the random goo written to the .XXXXXXXX template.

   There are more copies of this tempfile dance which will need a slightly
   more elaborate abstraction to deduplicate.

   with a fix from/ok job
VersionDeltaFile
1.12+60-79usr.sbin/rpki-client/ca.c
+60-791 files

OpenBSD/src QJzEh9x — sys/dev/pci/drm/amd/amdgpu amdgpu_cs.c

   drm/amdgpu: free the userptr ranges when a CS fails after parser_bos

   From Jesse Zhang
   6ac46ae5ac561d4fc7d4246ad83d71bed0d9af9a in linux-6.18.y/6.18.59
   1b4da805a0ba354a549ce07459c871c17dd94fe0 in mainline linux
VersionDeltaFile
1.34+6-0sys/dev/pci/drm/amd/amdgpu/amdgpu_cs.c
+6-01 files

OpenBSD/src BMnfRC8 — sys/dev/pci/drm/i915/display intel_dmc.c

   drm/i915/dmc: Harden DMC firmware payload parsing

   From Dibin Moolakadan Subrahmanian
   dfcfe2874e7c16e8460dc86ac1eeb54ea0e7f8aa in linux-6.18.y/6.18.59
   8bb1858db453cd4250e3b633f5d2d09206024ca6 in mainline linux
VersionDeltaFile
1.10+16-5sys/dev/pci/drm/i915/display/intel_dmc.c
+16-51 files

OpenBSD/src nf0Sh29 — usr.sbin/tcpdump nameser.h print-domain.c

   sync DNS RRs with the current params as per iana

   from markowski1 at gmail
VersionDeltaFile
1.29+40-9usr.sbin/tcpdump/print-domain.c
1.9+40-2usr.sbin/tcpdump/nameser.h
+80-112 files