Update to 3.51.0.
Use Tclsqlite from cyqlite.sourceforge.io.
Distfile is at the same place on SF as other Tcl distfiles.
MODTCL_VERSION=8.6
Enable test, install example.
New build options that are now enabled by default:
SQLITE_ENABLE_PERCENTILE
SQLITE_ENABLE_STMTVTAB
SQLITE_ENABLE_UNKNOWN_SQL_FUNCTION
SQLITE_ENABLE_UPDATE_DELETE_LIMIT
SQLITE_OMIT_DEPRECATED
Don't set build options that are now enabled by default:
SQLITE_ENABLE_COLUMN_METADATA
[5 lines not shown]
Use LIBname_VERSION with library('libname', name_prefix: '')
We patch meson to use the LIBname_VERSION variables coming from
SHARED_LIBS in the ports tree. Teach our patch about name_prefix, so
porters can stop patching meson.build to remove name_prefix: ''.
Longer explanation is in
https://marc.info/?l=openbsd-ports&m=176290899309221&w=2
ok ajacoutot@ (maintainer)
ok kirill@
update ipython to 9.7.0
Rename the package from ipython3 to ipython. Tweak the Makefile as
suggested by sthen@ by symlinking MODPY_BIN to WRKDIR/bin/python which lets
us drop a patch.
MFC: SECURITY update to openvpn-2.6.16
Fixes CVE-2025-13086
|Fix memcmp check for the hmac verification in the 3way handshake.
|This bug renders the HMAC based protection against state exhaustion on
|receiving spoofed TLS handshake packets in the OpenVPN server inefficient.
Full changelog:
https://github.com/OpenVPN/openvpn/blob/v2.6.16/Changes.rst
SECURITY update to openvpn-2.6.16
Fixes CVE-2025-13086
|Fix memcmp check for the hmac verification in the 3way handshake.
|This bug renders the HMAC based protection against state exhaustion on
|receiving spoofed TLS handshake packets in the OpenVPN server inefficient.
Full changelog:
https://github.com/OpenVPN/openvpn/blob/v2.6.16/Changes.rst
merge textproc/libxml,-python (py3-libxml) into textproc/libxml; there's no
direct equivalent any more (py3-lxml is the suggested replacement but it's
not a drop-in) and having the old package lying around causes an issue for
updates.
drop @pkgpath textproc/libxml; this was copied from PLIST-main but is the
default for a package built from ports/textproc/libxml without multipackages
anyway. update path is ok with just this; it was present directly in
PLIST-main so there's a valid update path. (that is ok because libxml
went from single- to multi-packages and back again; had it started as
multi-packages in the first place there would have been no @pkgpath in
PLIST-main - had that been the case, we'd need @pkgpath textproc,-main).
ok aja landry