FreeBSD/src dedb4d3sys/net pfvar.h, sys/netpfil/pf pf_lb.c pf.c

pf: Don't return src node and hash from pf_map_addr_sn

The function pf_map_addr_sn() already returns naddr and nkif, there is
no need to return the source node too, it is redundant.
DeltaFile
+38-48sys/netpfil/pf/pf_lb.c
+1-3sys/netpfil/pf/pf.c
+0-1sys/net/pfvar.h
+39-523 files

FreeBSD/ports 9a6518dgraphics/vulkan-validation-layers Makefile distinfo

graphics/vulkan-validation-layers: Update 1.4.320 => 1.4.321, take maintainership

While here fix warnings from portclippy.
Move pkg-plist to PLIST_FILES as it only contained 2 files.
Add USE_LDCONFIG=yes.

PR:     288141
DeltaFile
+11-7graphics/vulkan-validation-layers/Makefile
+3-3graphics/vulkan-validation-layers/distinfo
+0-2graphics/vulkan-validation-layers/pkg-plist
+14-123 files

FreeBSD/ports 70b30c1net/traefik distinfo Makefile

net/traefik: Update to upstream release 3.4.4

Details:
- Bugfixes, see
  https://github.com/traefik/traefik/releases/tag/v3.4.4

MFH:            2025Q3
(cherry picked from commit 8416467964c249f5af65319ec2b098478ee88862)
DeltaFile
+3-3net/traefik/distinfo
+2-2net/traefik/Makefile
+5-52 files

FreeBSD/ports 8b69fd8sysutils/data-prepper pkg-plist distinfo

sysutils/data-prepper: Update to 2.12.0

Changelogs:
  https://github.com/opensearch-project/data-prepper/releases/tag/2.12.0

Event:          Berlin Hackathon 202507
Differential Revision:  https://reviews.freebsd.org/D51274
DeltaFile
+107-83sysutils/data-prepper/pkg-plist
+3-3sysutils/data-prepper/distinfo
+1-1sysutils/data-prepper/Makefile
+111-873 files

FreeBSD/ports b06839ctextproc/opensearch-dashboards distinfo Makefile

textproc/opensearch-dashboards: Update to 3.1.0

Changelogs:
  https://github.com/opensearch-project/OpenSearch-Dashboards/releases/tag/3.1.0

Event:          Berlin Hackathon 202507
Differential Revision:  https://reviews.freebsd.org/D51273
DeltaFile
+3-3textproc/opensearch-dashboards/distinfo
+1-1textproc/opensearch-dashboards/Makefile
+4-42 files

FreeBSD/ports 0581597textproc/opensearch distinfo Makefile

textproc/opensearch: Update to 3.1.0

Changelogs:
  https://github.com/opensearch-project/OpenSearch/releases/tag/3.1.0

Event:          Berlin Hackathon 202507
Differential Revision:  https://reviews.freebsd.org/D51272
DeltaFile
+3-3textproc/opensearch/distinfo
+1-1textproc/opensearch/Makefile
+4-42 files

FreeBSD/ports 89b6cadwww/angie-module-lua Makefile

www/angie-module-lua: Update ngx_devel_kit 0.3.3 => 0.3.4

The www/angie-module-lua uses ngx_devel_kit in GH_TUPLE.

Changelog for ngx_devel_kit:
https://github.com/vision5/ngx_devel_kit/releases/tag/v0.3.4

PR:             288100 288166
Approved by:    Oleg A. Mamontov <oleg at mamontov.net> (maintainer, implicit - inactive for more than 9 months)
DeltaFile
+1-1www/angie-module-lua/Makefile
+1-11 files

FreeBSD/ports e8103f4net/liferea pkg-plist Makefile, net/liferea/files extra-patch-libxml

net/liferea: update to 1.16-RC4

Release Notes: https://github.com/lwindolf/liferea/releases

Also, adopt port.
This rc seems to be more stable and well-behaved than the two years
old 1.14 series.
DeltaFile
+19-27net/liferea/pkg-plist
+0-28net/liferea/files/extra-patch-libxml
+6-9net/liferea/Makefile
+3-3net/liferea/distinfo
+28-674 files

FreeBSD/src 3e827cbsys/netpfil/ipfilter/netinet ip_fil_freebsd.c

ipfilter: fix LINT-NOINET6 build

Event:          Berlin 2025 Hackathon
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+3-2sys/netpfil/ipfilter/netinet/ip_fil_freebsd.c
+3-21 files

FreeBSD/ports 907ef03net-p2p/radarr pkg-plist distinfo

net-p2p/radarr: Update 5.25.0.10024 => 5.26.2.10099

Changelog:
https://github.com/Radarr/Radarr/releases/tag/v5.26.2.10099

PR:             288094
Approved by:    Michiel van Baak Jansen <michiel at vanbaak.eu> (maintainer)
DeltaFile
+9-9net-p2p/radarr/pkg-plist
+3-3net-p2p/radarr/distinfo
+1-1net-p2p/radarr/Makefile
+13-133 files

FreeBSD/ports 99cbc81net-p2p/prowlarr distinfo Makefile

net-p2p/prowlarr: Update 1.36.3.5071 => 1.37.0.5076

Changelog:
https://github.com/Prowlarr/Prowlarr/releases/tag/v1.37.0.5076

PR:             288102
Approved by:    Michiel van Baak Jansen <michiel at vanbaak.eu> (maintainer)
DeltaFile
+3-3net-p2p/prowlarr/distinfo
+1-1net-p2p/prowlarr/Makefile
+4-42 files

FreeBSD/ports 84bf329net-p2p/sonarr distinfo Makefile

net-p2p/sonarr: Update 4.0.14.2939 => 4.0.15.2941

Changelog:
https://github.com/Sonarr/Sonarr/releases/tag/v4.0.15.2941

PR:             288056
Approved by:    Michiel van Baak Jansen <michiel at vanbaak.eu> (maintainer)
DeltaFile
+3-3net-p2p/sonarr/distinfo
+1-1net-p2p/sonarr/Makefile
+4-42 files

FreeBSD/ports 8416467net/traefik distinfo Makefile

net/traefik: Update to upstream release 3.4.4

Details:
- Bugfixes, see
  https://github.com/traefik/traefik/releases/tag/v3.4.4

MFH:            2025Q3
DeltaFile
+3-3net/traefik/distinfo
+2-2net/traefik/Makefile
+5-52 files

FreeBSD/ports f426885science/packmol distinfo Makefile

science/packmol: Update to 21.0.4

ChangeLog: https://github.com/m3g/packmol/releases/tag/v21.0.4
DeltaFile
+3-3science/packmol/distinfo
+1-1science/packmol/Makefile
+4-42 files

FreeBSD/ports cf7638cdevel/libev/files patch-ev.c patch-Makefile.in

devel/libev: Unbreak current after inotify add

After inotify was added to main, if condition bellow leads to build error
related to missing (linux) statfs.h header.

Fix it by adjusting correct headers:

 #if EV_USE_INOTIFY
-# include <sys/statfs.h>
+# include <sys/mount.h>
 # include <sys/inotify.h>

While here, refresh patches.

Approved by:    portmgr (blanket, build fix)
Sugested by:    markj
See also;       https://lists.freebsd.org/archives/dev-commits-src-all/2025-July/057269.html
DeltaFile
+11-2devel/libev/files/patch-ev.c
+2-2devel/libev/files/patch-Makefile.in
+2-2devel/libev/files/patch-configure
+15-63 files

FreeBSD/src 7c5cc95sys/net pfvar.h, sys/netpfil/pf pf_lb.c pf_table.c

pf: Use the table on root always if current table is not active.

ok sashan

Obtained from:  OpenBSD, yasuoka <yasuoka at openbsd.org>, 26b6297991
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+21-28sys/netpfil/pf/pf_lb.c
+17-9sys/netpfil/pf/pf_table.c
+2-0sys/net/pfvar.h
+40-373 files

FreeBSD/src 9f21a94sbin/pfctl pfctl_optimize.c pfctl_parser.h, sys/netpfil/pf pf.h

pf: rename PF_OPT_TABLE_PREFIX to PF_OPTIMIZER_TABLE_PFX

Move it to pf.h.
OPT is misleading and usually refers to command line arguments to pfctl

ok sashan kn

Obtained from:  OpenBSD, henning <henning at openbsd.org>, 9c6ad19ba4
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+3-3sbin/pfctl/pfctl_optimize.c
+0-1sbin/pfctl/pfctl_parser.h
+1-0sys/netpfil/pf/pf.h
+4-43 files

FreeBSD/src 116eabasys/netpfil/pf pf_ioctl.c

pf: when calculating the ruleset's checksum, skip automatic table names.

the checksum is exclusively used for pfsync to verify rulesets are identical
on all nodes. the automatic table names are random and have a near zero
chance to match. found at a customer in zurich
ok sashan kn

Obtained from:  OpenBSD, henning <henning at openbsd.org>, 7f1a6fd2a8
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+3-1sys/netpfil/pf/pf_ioctl.c
+3-11 files

FreeBSD/src a4b7e54sbin/pfctl pfctl.8

pfctl.8: Mention hostid and checksum

Complete the description of "-s info -v" such that grepping for them
in the manual pager yields something.

Feedback jmc
OK sashan

Obtained from:  OpenBSD, kn <kn at openbsd.org>, 0f5c867d7c
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+4-1sbin/pfctl/pfctl.8
+4-11 files

FreeBSD/src 3030d29sbin/pfctl pfctl.c

pfctl: restore '.' at the end of these errors

The sys/netpfil/pf/table:reset_nonzero test expects them, and we're better off
not modifying errors without good reason.

Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+2-2sbin/pfctl/pfctl.c
+2-21 files

FreeBSD/src 8bced62sys/netpfil/pf pf_table.c

pf: Fix pfr_kentry_byaddr() to be used for a rule in an anchor

It couldn't find an entry if its table is attached a table on the root. This
fixes the problem "route-to <TABLE> least-states" doesn't work.
The problem is found by IIJ.

OK sashan

Obtained from:  OpenBSD, yasuoka <yasuoka at openbsd.org>, a7d8badaea
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+18-3sys/netpfil/pf/pf_table.c
+18-31 files

FreeBSD/src 1ae17b6share/man/man5 pf.conf.5

pf.conf.5: should clearly state range match operator ':' does not work for uid/gid.

OK @kn, OK @sthen

Obtained from:  OpenBSD, sashan <sashan at openbsd.org>, 4521e23a38
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+16-1share/man/man5/pf.conf.5
+16-11 files

FreeBSD/src a9706d7sbin/pfctl pfctl_optimize.c parse.y

pfctl: replace TAILQ concatenation loop with TAILQ_CONCAT

OK kn@, sashan@, florian@

Obtained from:  OpenBSD, bket <bket at openbsd.org>, c8d5c2349e
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+3-14sbin/pfctl/pfctl_optimize.c
+3-11sbin/pfctl/parse.y
+6-252 files

FreeBSD/src 8423b27sbin/pfctl pfctl_radix.c

pfctl: Refine error message

While code in pf/pfctl confusingly uses either anchor or ruleset
depending on the context, pfctl(8) (both manual and user interface)
should be consistent.

For users there are basically anchors only, so do not imply any
difference between the two terminologies.

OK sashan

Obtained from:  OpenBSD, kn <kn at openbsd.org>, 910e8feeb5
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+1-1sbin/pfctl/pfctl_radix.c
+1-11 files

FreeBSD/src c873900sbin/pfctl pfctl.c

pfctl: Fail on missing anchor

There is no reason to continue on anchor specific paths if the given
anchor does not exist.

OK sashan

Obtained from:  OpenBSD, kn <kn at openbsd.org>, ad846651a1
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+4-14sbin/pfctl/pfctl.c
+4-141 files

FreeBSD/src 0040623sbin/pfctl pfctl.c pfctl_table.c

pfctl: Do the actual pfr_strerror() to pf_strerror() rename

Missed in previous

Obtained from:  OpenBSD, kn <kn at openbsd.org>, c802a0d9d6
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+6-6sbin/pfctl/pfctl.c
+3-3sbin/pfctl/pfctl_table.c
+2-2sbin/pfctl/pfctl_optimize.c
+1-1sbin/pfctl/parse.y
+1-1sbin/pfctl/pfctl.h
+13-135 files

FreeBSD/src 7153a62sbin/pfctl pfctl.c pfctl_radix.c

pfctl: Unify error message for nonexisting anchors

pf(4) returns EINVAL for DIOCGETRULE, DIOCGETRULES and DIOCGETRULESET if
the specified anchor does not exist.

Extend and rename {pfr -> pf}_strerror() to make error message more
consistent.

There are other occasions as well but those need additional tweaks;
that's stuff for another diff.

OK and rename from sashan

Obtained from:  OpenBSD, kn <kn at openbsd.org>, e5c920154c
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+19-5sbin/pfctl/pfctl.c
+0-13sbin/pfctl/pfctl_radix.c
+4-4sbin/pfctl/pfctl_optimize.c
+23-223 files

FreeBSD/src b2c8af2sbin/pfctl pfctl_table.c

pfctl: Merge radix_perror() into simpler warnx()/errx() usage

Less nesting for clearer code.

OK sashan

Obtained from:  OpenBSD, kn <kn at openbsd.org>, e13f010528
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+11-21sbin/pfctl/pfctl_table.c
+11-211 files

FreeBSD/src c479d2bshare/man/man7 tracing.7

tracing.7: Pet linters

Event:          Berlin 2025 Hackathon
DeltaFile
+4-5share/man/man7/tracing.7
+4-51 files

FreeBSD/ports fa129aesecurity/vuxml/vuln 2025.xml

security/vuxml: extend libxml2/libxslt vuln to linux-* ports
DeltaFile
+16-0security/vuxml/vuln/2025.xml
+16-01 files