FreeBSD/ports 4f0eaf1devel/gitaly distinfo, net/gitlab-agent distinfo

www/gitlab: security and patch update to 18.11.1

Changes:        https://docs.gitlab.com/releases/patches/patch-release-gitlab-18-11-1-released/
Security:       73b927a6-3ecd-11f1-be20-2cf05da270f3
DeltaFile
+11-11devel/gitaly/distinfo
+6-6www/gitlab/distinfo
+5-5www/gitlab-workhorse/distinfo
+5-5www/gitlab-pages/distinfo
+5-5net/gitlab-agent/distinfo
+4-4www/gitlab/Makefile
+36-361 files not shown
+37-377 files

FreeBSD/src c0e26f7share/man/man4 ukbd.4 hkbd.4, sys/dev/hid hkbd.c

hkbd/ukbd: sysctls to swap macbook kbd modifiers

Many applications, desktop environments, window managers & text editors
favor the usage of Alt or Ctrl over Super (Cmd). On a Macbook it is
quite annoying that the Super (Cmd) key gets pride of place by the spacebar.

The standard MacBook Cmd key location only really makes sense for macOS
or maybe in some tiling wm if Mod4/Super is your main modifier.
For most mainstream desktops and window managers, having Alt or Ctrl
in that location makes much much more sense.

This patch adds two sysctls for swapping either Opt(Alt) or Ctrl with Cmd(Super).

Linux has similar sysctls to this; allowing a user to make an Apple
keyboard more "orthodox"/useful at a level that takes effect independent
of typing context - ie) tty, Xorg and/or wayland.

Having a sysctl to do these swaps means that a user doesn't have to faff
about with both creating a custom vt keymap AND figure out which magic

    [8 lines not shown]
DeltaFile
+38-0sys/dev/usb/input/ukbd.c
+38-0sys/dev/hid/hkbd.c
+13-1share/man/man4/ukbd.4
+13-1share/man/man4/hkbd.4
+102-24 files

FreeBSD/ports dd3ccf6databases/pg_textsearch pkg-plist distinfo

databases/pg_textsearch: Update to 1.1.0
DeltaFile
+4-4databases/pg_textsearch/pkg-plist
+3-3databases/pg_textsearch/distinfo
+1-1databases/pg_textsearch/Makefile
+8-83 files

FreeBSD/ports 94630acsecurity/vuxml/vuln 2026.xml

security/vuxml: document gitlab vulnerabilities
DeltaFile
+49-0security/vuxml/vuln/2026.xml
+49-01 files

FreeBSD/ports 49f44e7sysutils/py-ansible-core Makefile

sysutils/py-ansible-core: Only portscout the master ports

Never the metaport. This avoids false positives due to the metaport
using a 2.19 instead of 2.20 (because 2.20 requires Python 3.12 to be
the default python).
DeltaFile
+3-0sysutils/py-ansible-core/Makefile
+3-01 files

FreeBSD/ports f5a0746sysutils/py-ansible-core220 distinfo Makefile

sysutils/py-ansible-core220: Update to 2.20.5
DeltaFile
+3-3sysutils/py-ansible-core220/distinfo
+1-1sysutils/py-ansible-core220/Makefile
+4-42 files

FreeBSD/ports ec2517dsysutils/mise distinfo Makefile

sysutils/mise: update 2026.4.18 → 2026.4.19
DeltaFile
+79-87sysutils/mise/distinfo
+39-43sysutils/mise/Makefile
+118-1302 files

FreeBSD/ports 2bf4474devel/args distinfo Makefile

devel/args: update 6.4.7 → 6.4.10
DeltaFile
+3-3devel/args/distinfo
+2-2devel/args/Makefile
+5-52 files

FreeBSD/ports ba3fd3fmisc/py-runloop-api-client Makefile distinfo

misc/py-runloop-api-client: update 0.60.0 → 1.20.0
DeltaFile
+4-3misc/py-runloop-api-client/Makefile
+3-3misc/py-runloop-api-client/distinfo
+7-62 files

FreeBSD/ports a965318archivers/ouch distinfo Makefile

archivers/ouch: update 0.6.1 → 0.7.1
DeltaFile
+125-79archivers/ouch/distinfo
+62-40archivers/ouch/Makefile
+187-1192 files

FreeBSD/ports 375e2famisc/lean-ctx distinfo Makefile

misc/lean-ctx: update 3.3.2 → 3.3.3
DeltaFile
+3-3misc/lean-ctx/distinfo
+1-1misc/lean-ctx/Makefile
+4-42 files

FreeBSD/ports dec2c95www/py-qh3 distinfo Makefile

www/py-qh3: update 1.7.2 → 1.7.3
DeltaFile
+5-5www/py-qh3/distinfo
+2-2www/py-qh3/Makefile
+7-72 files

FreeBSD/src 6260b7dusr.sbin/jls jls.c jls.8

jls: add a -c mode to check for a jail's existence

This is intended to be primarily used in scripts that want to check if
a jail exists before taking some action -- for instance, the jail(8)
test cleanup functions that want to remove the jail if it still exists.
Having a mode that limits its output for their usage is useful both
for cleaner scripts and also to avoid masking real problems.

Reviewed by:    jamie

(cherry picked from commit 1d8590371049bb14a6410fa83cd03d9eca32f764)
DeltaFile
+44-4usr.sbin/jls/jls.c
+18-2usr.sbin/jls/jls.8
+62-62 files

FreeBSD/src 0985637usr.sbin/jls jls.c

jls: minor simplification to arg handling

It's easier to reason about the state of argc/argv if we just augment
them by optind after our getopt() loop.

No functional change, but this sets the stage for another change to add
a `-c` mode to (c)heck for the existence of a jail quietly without
the caller having to worry about spurious output.

Reviewed by:    jamie

(cherry picked from commit dbaaadd4373a725950ad11e578dab61537b7c4f2)
DeltaFile
+6-4usr.sbin/jls/jls.c
+6-41 files

FreeBSD/src a3af06dusr.sbin/jls jls.c

jls(8): Complete libxo transition

Reviewed by:    des

(cherry picked from commit 20bb77c4b91837837dbccc40c9cc90eb43026131)
DeltaFile
+3-3usr.sbin/jls/jls.c
+3-31 files

FreeBSD/src c84d08ausr.sbin/jail command.c

jail: fix crash with startup commands on a jail without name

Jail name is optional, thus don't try setenv(NULL).

Fixes:  d8f021add40c321c4578da55dae52fb93c7ccb5f

(cherry picked from commit 78c4f821f43d530ba1f2a6308a64a8483208ebe3)
DeltaFile
+2-2usr.sbin/jail/command.c
+2-21 files

FreeBSD/src 1a4e4e0usr.sbin/jail config.c, usr.sbin/jail/tests jail_basic_test.sh

jail: fix backfilling the "name" for jid-named jails

Using the cfparam variant of add_param() will actually copy the name and
flags from the passed-in param, which I hadn't considered.  We actually
want the name/flags from the "name" param so that we can do variable
expansion against it right after that -- otherwise it cannot be found,
since variable expansion actually searches by name.

While we're here, `jls -e` was the intermediate name for `jls -c` that
never saw the light of the day.  Fix our existence test.

Reviewed by:    jamie
Fixes:  02944d8c49 ("jail: consistently populate the KP_JID [...]")

(cherry picked from commit b81fd3fc8b20eaad64b5c41826432124fd92d6a7)
DeltaFile
+14-1usr.sbin/jail/tests/jail_basic_test.sh
+1-1usr.sbin/jail/config.c
+15-22 files

FreeBSD/src df670d2usr.sbin/jail command.c config.c, usr.sbin/jail/tests jail_basic_test.sh

jail: consistently populate the KP_JID and KP_NAME parameters

The gaps here, specifically, were:
 - When we have to discover a running jail's jid from name, we should
    populate the missing jid param
 - When we populate jid/name from the config, if the name is a jid we
    wouldn't populate the name; now we do both.
 - When we create a jail, we should populate jid and name with whatever
    details we have now that we didn't both.

As a consequence, we can cleanup a few things:
 - vnet.interface and zfs.dataset can just always use the jid
 - Trying to populate JNAME should always work now, where it would be
    a little crashy before if you create a jail that didn't have a name
    or jid on the command line
 - We can simplify the just-prior JID population now that we'll keep a
    stringified jid in our intparams.

This primarily fixes the below, but the issues with vnet.interface and

    [6 lines not shown]
DeltaFile
+129-0usr.sbin/jail/tests/jail_basic_test.sh
+25-11usr.sbin/jail/command.c
+12-1usr.sbin/jail/config.c
+7-0usr.sbin/jail/jail.c
+173-124 files

FreeBSD/src 28b8f26usr.sbin/jail/tests jail_basic_test.sh commands.jail.conf

jail: tests: cleanup the commands test a bit

We shouldn't be doing setup in a head() function, as this can cause
various problems.  For instance, in this case, it caused test listing
to fail in some cases if we didn't get to execute the cleanup properly
by complaining to stderr if the directory could not be created.

Switch to using atf_check for sanity checking stdout; most of these
expressions are self-explanatory and will make it clear what the problem
is.

commands.jail.conf contains a hard-coded path that we can avoid, which
is probably good to avoid weird conflicts if other tests try to copy it
and do the same.  Just make a copy of our jail.conf and add the test's
$PWD to it to get a generally unique jail root.

Finally, simplify the cleanup handler a bit.

Reviewed by:    jamie

    [2 lines not shown]
DeltaFile
+20-15usr.sbin/jail/tests/jail_basic_test.sh
+0-2usr.sbin/jail/tests/commands.jail.conf
+20-172 files

FreeBSD/src eefbf74usr.sbin/jail jail.8 command.c, usr.sbin/jail/tests jail_basic_test.sh commands.jail.conf

jail: add JID, JNAME and JPATH to environment for exec.* commands

Although variable substitution is available in the jail configuration
file, the jail identifier is often not since it is dynamically
attributed at run time.

In order to facilitate scripting of exec.* commands executed on the
system, this change sets the JID, JNAME and JPATH environment variables.

These variables are not added when using exec.clean. Neither are they
for commands executed inside jails, to avoid disclosing information
about the host system.

Reviewed by: imp

(cherry picked from commit d8f021add40c321c4578da55dae52fb93c7ccb5f)
DeltaFile
+21-0usr.sbin/jail/jail.8
+13-1usr.sbin/jail/command.c
+9-2usr.sbin/jail/tests/jail_basic_test.sh
+3-0usr.sbin/jail/tests/commands.jail.conf
+46-34 files

FreeBSD/src 8d68038usr.sbin/jail/tests jail_basic_test.sh

jail: tests: cosmetic-ish improvements

The new version of incrementing `jid` is a little cleaner and harder to
mess up, and also fix a nwlin omission while we're here.

These comments were dropped on D51502; ngie takes a co-author credit
so that they're not blamed for the commit message, but I can't claim
that I tweaked their suggestions.

Co-authored-by: ngie
DeltaFile
+2-1usr.sbin/jail/tests/jail_basic_test.sh
+2-11 files

FreeBSD/src 1f41f56. Makefile.inc1

makeman: switch over to the .lua implementation

Nobody will test it as long as it's not tied into the top-level target,
and we don't really have a good reason not to cut over to it since it
does produce identical results.  Switch over but do not remove the old
sh implementation yet, just in case.

Note that this replacement is driven by a significant speedup from how
the new version is designed: tha lua version actually tries to
parallelize its data collection efforts to speed up generation.

Reviewed by:    imp (previous version), emaste
Differential Revision:  https://reviews.freebsd.org/D56558
DeltaFile
+9-7Makefile.inc1
+9-71 files

FreeBSD/ports 4bef845graphics/spirv-cross distinfo pkg-plist

graphics/spirv-cross: Update 1.4.335.0 => 1.4.341.0

Changelog:
https://github.com/KhronosGroup/SPIRV-Cross/releases/tag/vulkan-sdk-1.4.341.0

PR:             294716
Sponsored by:   UNIS Labs
DeltaFile
+3-3graphics/spirv-cross/distinfo
+1-1graphics/spirv-cross/pkg-plist
+1-1graphics/spirv-cross/Makefile
+5-53 files

FreeBSD/ports ce64e3bgraphics/mesa-devel distinfo Makefile

graphics/mesa-devel: update to 26.1.b.305

Changes:        https://gitlab.freedesktop.org/mesa/mesa/-/compare/81feb2e7f11...c5edb900465
DeltaFile
+3-3graphics/mesa-devel/distinfo
+2-2graphics/mesa-devel/Makefile
+5-52 files

FreeBSD/ports c9d179demulators/rpcs3 distinfo Makefile

emulators/rpcs3: update to 0.0.40.19240

Changes:        https://github.com/RPCS3/rpcs3/compare/ea0d8a0d78...e26c80c129
DeltaFile
+3-3emulators/rpcs3/distinfo
+2-2emulators/rpcs3/Makefile
+5-52 files

FreeBSD/ports 6b3b9fex11-wm/cagebreak Makefile distinfo

x11-wm/cagebreak: update to 3.2.0

Changes:        https://github.com/project-repo/cagebreak/releases/tag/3.2.0
Reported by:    Repology
DeltaFile
+4-3x11-wm/cagebreak/Makefile
+3-3x11-wm/cagebreak/distinfo
+7-62 files

FreeBSD/ports 79ed0d6comms/chirp distinfo Makefile

comms/chirp: update to 20260417

Event: Boston Marathon 2026
DeltaFile
+3-3comms/chirp/distinfo
+1-1comms/chirp/Makefile
+4-42 files

FreeBSD/ports 301f803devel/ruby-build distinfo Makefile

devel/ruby-build: Update to 20260422

Changes:        https://github.com/rbenv/ruby-build/releases/tag/v20260422
(cherry picked from commit 6e003e6e232004aa7511663580f7c8272878247c)
DeltaFile
+3-3devel/ruby-build/distinfo
+1-1devel/ruby-build/Makefile
+4-42 files

FreeBSD/ports 6e003e6devel/ruby-build distinfo Makefile

devel/ruby-build: Update to 20260422

Changes:        https://github.com/rbenv/ruby-build/releases/tag/v20260422
DeltaFile
+3-3devel/ruby-build/distinfo
+1-1devel/ruby-build/Makefile
+4-42 files

FreeBSD/src 06a51a5sys/compat/linuxkpi/common/include/linux gfp.h, sys/compat/linuxkpi/common/src linux_page.c

linuxkpi: Implement __GFP_THISNODE in alloc_pages()

It indicates to `alloc_pages()` to allocate the pages from the current
NUMA domain. If it couldn't, it should not retry elsewhere and return
failure.

Reviewed by:    bz
Sponsored by:   The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D56590
DeltaFile
+12-3sys/compat/linuxkpi/common/src/linux_page.c
+1-1sys/compat/linuxkpi/common/include/linux/gfp.h
+13-42 files