FreeBSD/src b2a270dlib/libjail jail.c, usr.sbin/jail/tests jail_basic_test.sh

libjail: fix fetching mac.label for multiple jails

When doing a basic `jls -n`, jls(8) will jailparam_get() the mac.label
for every jail on the system using the same set of jailparams, and thus
the same jp_value.  We only init the mac_t the first time, so the first
jail would populate it with `?` from /etc/mac.conf and the resulting
jail_get(2) would clobber it with the empty string, then a second jail
would try to pass the empty string to the kernel and fail because it
must have a non-zero length.

Fix it by invoking jps_get() every time.  Drop some comments to note
that jps_get() will be invoked with zero || garbage from previous call,
and be sure that we don't leak our previous mac_t.  There aren't any
other jps_get implementations at this time, so this shouldn't cause any
unexpected problems.

Reported by:    ivy
Reviewed by:    jamie
Differential Revision:  https://reviews.freebsd.org/D57280
DeltaFile
+25-6lib/libjail/jail.c
+4-1usr.sbin/jail/tests/jail_basic_test.sh
+29-72 files

FreeBSD/ports 3f8b177editors/fresh Makefile Makefile.crates

editors/fresh: Update to 0.5.1

Changes:        https://github.com/sinelaw/fresh/blob/v0.5.1/CHANGELOG.md
DeltaFile
+3-27editors/fresh/distinfo
+0-12editors/fresh/Makefile.crates
+1-2editors/fresh/Makefile
+4-413 files

FreeBSD/ports 5e3a051x11-fonts/monaspace Makefile pkg-plist

x11-fonts/monaspace: Improve port

Simplify do-install and rely on common mechanisms to follow other
ports in tree

PR:             297718
Reviewed by:    lwhsu (maintainer)
DeltaFile
+215-0x11-fonts/monaspace/pkg-plist
+9-15x11-fonts/monaspace/Makefile
+224-152 files

FreeBSD/ports b83dd17multimedia/mediamtx Makefile distinfo, multimedia/mediamtx/files patch-internal_core_core.go

multimedia/mediamtx: Update to 1.21.0

Changelog:
https://github.com/bluenviron/mediamtx/releases/tag/v1.21.0
DeltaFile
+68-7multimedia/mediamtx/files/patch-internal_core_core.go
+7-7multimedia/mediamtx/distinfo
+2-3multimedia/mediamtx/Makefile
+77-173 files

FreeBSD/ports e009c43dns/blocky Makefile distinfo

dns/blocky: Update to 0.35.0

Changelog: https://github.com/0xERR0R/blocky/releases/tag/v0.35.0
DeltaFile
+5-5dns/blocky/distinfo
+1-2dns/blocky/Makefile
+6-72 files

FreeBSD/ports b75aeefnet/libpcap pkg-plist distinfo, net/libpcap/files patch-Makefile.in

net/libpcap: Update to 1.10.7

Switch to CMake for a cleaner port

Changelog:
https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.10.7/CHANGES

PR:             298290
Reviewed by:    garga (maintainer)
Security:       CVE-2026-0799
                CVE-2026-31912
                CVE-2026-31911
                CVE-2026-6244
                CVE-2026-6554
DeltaFile
+0-65net/libpcap/files/patch-Makefile.in
+28-15net/libpcap/Makefile
+3-3net/libpcap/distinfo
+1-1net/libpcap/pkg-plist
+32-844 files

FreeBSD/ports 9f61741science Makefile, science/py-scikit-rf distinfo pkg-descr

math/py-scikit-rf: new port

scikit-rf (aka skrf) is an Open Source, BSD-licensed package for
RF/Microwave engineering implemented in the Python programming language.
It provides a modern, object-oriented library which is both flexible
and scalable.

Co-authored-by: Michael Osipov <michaelo at FreeBSD.org>
PR:             283072
DeltaFile
+29-0science/py-scikit-rf/Makefile
+11-0science/py-scikit-rf/files/patch-pyproject.toml
+4-0science/py-scikit-rf/pkg-descr
+3-0science/py-scikit-rf/distinfo
+1-0science/Makefile
+48-05 files

FreeBSD/ports 7e420adgraphics/nvidia-drm-612-kmod distinfo, graphics/nvidia-drm-612-kmod-580 distinfo

graphics/drm-*-kmod, graphics/nvidia-drm-*-kmod: Update DRM drivers

The reason is to make them compatible with an upcoming change in
linuxkpi in FreeBSD src:
https://github.com/freebsd/drm-kmod/pull/502

Sponsored by:   The FreeBSD Foundation
DeltaFile
+3-3graphics/nvidia-drm-66-kmod/distinfo
+3-3graphics/nvidia-drm-66-kmod-devel/distinfo
+3-3graphics/nvidia-drm-66-kmod-580/distinfo
+3-3graphics/nvidia-drm-612-kmod/distinfo
+3-3graphics/nvidia-drm-612-kmod-devel/distinfo
+3-3graphics/nvidia-drm-612-kmod-580/distinfo
+18-1830 files not shown
+68-6836 files

FreeBSD/ports 4d48429security/ca_root_nss Makefile distinfo

security/ca_root_nss: Update to 3.129

Changes to the certificate store since 3.128:
- Removed Izenpe.com (server distrust after 2026-04-15, Mozilla bug
  2017322: the attribute was set on the PKCS#11 trust object instead of
  the certificate object, so it did not take effect until now)

Changelog:
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/ux-yy4Yk33U

MFH:            2026Q3

Sponsored by:   Netzkommune GmbH

(cherry picked from commit f2f3940dcd641a9624fd40229d8c1b58fabdbd48)
DeltaFile
+3-3security/ca_root_nss/distinfo
+1-1security/ca_root_nss/Makefile
+4-42 files

FreeBSD/ports f2f3940security/ca_root_nss Makefile distinfo

security/ca_root_nss: Update to 3.129

Changes to the certificate store since 3.128:
- Removed Izenpe.com (server distrust after 2026-04-15, Mozilla bug
  2017322: the attribute was set on the PKCS#11 trust object instead of
  the certificate object, so it did not take effect until now)

Changelog:
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/ux-yy4Yk33U

MFH:            2026Q3

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3security/ca_root_nss/distinfo
+1-1security/ca_root_nss/Makefile
+4-42 files

FreeBSD/src f2a2e02sys/compat/linuxkpi/common/include/linux file.h cleanup.h

linuxkpi: Define `DEFINE_CLASS()` and `CLASS()`

`DEFINE_CLASS()` is in fact named `LINUXKPI_DEFINE_CLASS()` because it
conflicts with `DEFINE_CLASS()` defined in <sys/kobj.h>.

This macro defines a type and a pair of constructor/destructor
functions.

They are to be used by `CLASS()`: this one declares a variable,
initialise it with the constructor and set the `__cleanup()` attribute
to call the destructor once the variable goes out of scope.

The DRM drivers generic code started to use `CLASS()` in Linux 6.13. It
requires the `fd` class to be defined in <linux/file.h>.

Reviewed by:    bz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57583
DeltaFile
+26-0sys/compat/linuxkpi/common/include/linux/cleanup.h
+2-0sys/compat/linuxkpi/common/include/linux/file.h
+28-02 files

FreeBSD/src 33595d4sys/compat/linuxkpi/common/include/linux pci.h, sys/compat/linuxkpi/common/src linux_pci.c

linuxkpi: Add `pci_map_rom()` and `pci_unmap_rom()`

They were already defined as macros in various places in DRM drivers,
aliasing the `vga_pci_map_bios()` and `vga_pci_unmap_bios()` functions.
Let's move them to linuxkpi and avoid copies everywhere.

Because they use the `vga_pci` code internally, `pci_map_rom()` checks
whether the given device is a video card. If it is not, it logs a "TODO"
and returns NULL.

Reviewed by:    bz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57573
DeltaFile
+27-0sys/compat/linuxkpi/common/src/linux_pci.c
+5-0sys/compat/linuxkpi/common/include/linux/pci.h
+32-02 files

FreeBSD/src fc0a5aesys/compat/linuxkpi/common/include/linux device.h

linuxkpi: Add device under parent, not under class

In `device_add()`, the function used to add the given device under its
class. This is used to build a sysctl tree. We ended up with devices or
"pseudo" devices (like the output connectors of a GPU). For example with
an output connector:

    sysctl sys.class.drm.card0-DP-1

This device should be added under its parent if it has one. With this
fix, the same output connector is now:

    sysctl sys.device.drmn1.card0.card0-DP-1

Reviewed by:    bz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D55175
DeltaFile
+4-1sys/compat/linuxkpi/common/include/linux/device.h
+4-11 files

FreeBSD/src b8b2be5sys/compat/linuxkpi/common/include/linux jiffies.h

LinuxKPI: Added jiffies64_to_msecs for amdkfd compatibility

jiffies64_to_msecs is used by kfd_process.c in the amd/amdkfd driver
from Linux kernel 6.12.

Submitted by:   Sourojeet Adhikari
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58075
DeltaFile
+1-0sys/compat/linuxkpi/common/include/linux/jiffies.h
+1-01 files

FreeBSD/src 75b9d19sys/compat/linuxkpi/common/include/linux util_macros.h

linuxkpi: Define `for_each_if()`

This macro was moved from <drm/drm_util.h> to <linux/util_macros.h> in
Linux 6.15.

Submitted by:   Sourojeet Adhikari
Approved by:    adrian, bz, emaste, seuros
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57465
DeltaFile
+18-0sys/compat/linuxkpi/common/include/linux/util_macros.h
+18-01 files

FreeBSD/ports 0f36b56devel Makefile

devel/Makefile: register py-fortranformat
DeltaFile
+1-0devel/Makefile
+1-01 files

FreeBSD/ports c9b7500devel/py-fortranformat pkg-descr distinfo

devel/py-fortranformat: new port

Generates text from a Python list of variables or will read a line of text
into Python variables according to the FORTRAN format statement passed.

PR:     282396
DeltaFile
+21-0devel/py-fortranformat/Makefile
+3-0devel/py-fortranformat/pkg-descr
+3-0devel/py-fortranformat/distinfo
+27-03 files

FreeBSD/ports fd28ba4textproc/py-zensical Makefile distinfo

textproc/py-zensical: Update to 0.0.60

Approved by:    kai (maintainer via email)
DeltaFile
+3-3textproc/py-zensical/distinfo
+1-2textproc/py-zensical/Makefile
+4-52 files

FreeBSD/ports 19708bbsysutils Makefile, sysutils/py-saltext.freebsd distinfo pkg-descr

sysutils/py-saltext.freebsd: new port

This is a Salt extension for interacting with various FreeBSD-specific
commands.  The bsd.shadow module, used by all BSDs, is also included.
The modules herein used to be part of Salt, in version 3006, but are now
developed in a separate repository.

PR:             296290
Reviewed by:    krion
Approved by:    krion (ports)
Sponsored by:   ConnectWise
DeltaFile
+26-0sysutils/py-saltext.freebsd/Makefile
+4-0sysutils/py-saltext.freebsd/pkg-descr
+3-0sysutils/py-saltext.freebsd/distinfo
+1-0sysutils/Makefile
+34-04 files

FreeBSD/ports 7d944fcsysutils Makefile, sysutils/py-saltext.zfs distinfo pkg-descr

sysutils/py-saltext.zfs: ZFS extensions for Salt 3008

This port contains modules and states that were previously builtin to
Salt 3006, but must now be installed separately.

It includes two patches used internally at Connectwise.

PR:             296290
Reviewed by:    krion
Approved by:    krion (ports)
Sponsored by:   ConnectWise
DeltaFile
+26-0sysutils/py-saltext.zfs/Makefile
+19-0sysutils/py-saltext.zfs/files/patch-src_saltext_zfs_states_zfs.py
+4-0sysutils/py-saltext.zfs/pkg-descr
+3-0sysutils/py-saltext.zfs/distinfo
+1-0sysutils/Makefile
+53-05 files

FreeBSD/ports 344b4b0sysutils/py-salt pkg-plist distinfo, sysutils/py-salt/files patch-pyproject.toml patch-tools_pkg_salt__build__backend.py

sysutils/py-salt: 3008.2

Version 3008.1 version works with Python 3.12+.  However, it lacks many
states included in Salt 3006, for example ZFS.

Version 3008.2 fixes a regression in the pkg.installed state, though it
wasn't mentioned in Salt's changelog.

PR:             296290
Approved by:    krion (maintainer)
Sponsored by:   ConnectWise
DeltaFile
+36-14sysutils/py-salt/Makefile
+0-41sysutils/py-salt/files/patch-requirements_base.txt
+21-0sysutils/py-salt/files/patch-tools_pkg_salt__build__backend.py
+10-0sysutils/py-salt/files/patch-pyproject.toml
+5-3sysutils/py-salt/distinfo
+0-5sysutils/py-salt/pkg-plist
+72-636 files

FreeBSD/src 3716da9sys/compat/linuxkpi/common/include/linux sched.h, sys/sys param.h

LinuxKPI: Add tgid to task_struct under sched.h

The amdkfd driver requires the `tgid` to be a part of the `task_struct`.
This patch introduces the `tgid` member to `task_struct`.

Reviewed by:    bz
Sponsored By:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D58228
DeltaFile
+1-1sys/sys/param.h
+1-0sys/compat/linuxkpi/common/include/linux/sched.h
+2-12 files

FreeBSD/ports 6de8f0cdevel/llvm23 Makefile distinfo, devel/llvm23/files patch-flang-rt_lib_runtime_environment.cpp

devel/llvm23: 23.1.1 release

See the annoucement for changes:
    https://discourse.llvm.org/t/llvm-23-1-1-released/91760

Sponsored by:   DARPA, AFRL
DeltaFile
+0-10devel/llvm23/files/patch-flang-rt_lib_runtime_environment.cpp
+3-3devel/llvm23/distinfo
+1-1devel/llvm23/Makefile
+4-143 files

FreeBSD/ports 924e2bdports-mgmt/appstream-generator distinfo Makefile, ports-mgmt/appstream-generator/files patch-contrib_setup_meson-install-templates.sh patch-contrib_setup_build__js.sh

ports-mgmt/appstream-generator: Update to 1.0.0
DeltaFile
+0-96ports-mgmt/appstream-generator/files/patch-backend
+13-19ports-mgmt/appstream-generator/pkg-plist
+4-19ports-mgmt/appstream-generator/Makefile
+0-16ports-mgmt/appstream-generator/files/patch-contrib_setup_build__js.sh
+0-14ports-mgmt/appstream-generator/files/patch-contrib_setup_meson-install-templates.sh
+3-5ports-mgmt/appstream-generator/distinfo
+20-1696 files

FreeBSD/ports 0b6d987devel/appstream pkg-plist distinfo, devel/appstream-compose Makefile pkg-plist

devel/appstream*: Update to 1.2.0
DeltaFile
+8-1devel/appstream-qt/pkg-plist
+4-3devel/appstream/Makefile
+4-3devel/appstream-compose/pkg-plist
+3-3devel/appstream/distinfo
+3-1devel/appstream/pkg-plist
+3-1devel/appstream-compose/Makefile
+25-126 files

FreeBSD/ports be7aa1awww/webkit2-gtk/files patch-Source_WebKit_UIProcess_glib_WebProcessPoolGLib.cpp patch-Source_cmake_WebKitMacros.cmake

www/webkit2-gtk: Pull a patch from upstream fixing build with CMake 4

Approved by:    portmgr (fixit blanket)
DeltaFile
+13-0www/webkit2-gtk/files/patch-Source_cmake_WebKitMacros.cmake
+2-2www/webkit2-gtk/files/patch-Source_WebKit_UIProcess_glib_WebProcessPoolGLib.cpp
+15-22 files

FreeBSD/src b31db8dsbin/ipfw ipfw.8

ipfw.8: more grammar fixes
DeltaFile
+3-3sbin/ipfw/ipfw.8
+3-31 files

FreeBSD/src b891252sbin/ipfw ipfw.8

ipfw.8: whitespace police
DeltaFile
+1-1sbin/ipfw/ipfw.8
+1-11 files

FreeBSD/src 055a726sbin/ipfw ipfw.8

ipfw.8: grammar
DeltaFile
+8-8sbin/ipfw/ipfw.8
+8-81 files

FreeBSD/ports d4bf1f7www/radicale Makefile distinfo

www/radicale: Update to 3.8.0

Event:          EuroBSDcon Devsummit 2026
DeltaFile
+3-3www/radicale/distinfo
+1-1www/radicale/Makefile
+4-42 files