FreeBSD/ports 27f70bc — devel/raylib distinfo pkg-plist, devel/raylib/files patch-src_external_miniaudio.h patch-src_CMakeLists.txt

devel/raylib: Update 6.0 => 6.2

Changelog:
https://github.com/raysan5/raylib/releases/tag/6.2

- Remove unnecessary post-install.
- Install includes in include/raylib/ instead if include/.
- Parametrize libs version.
- Exclude from extract 70+MB examples.

PR:             300468
Sponsored by:   UNIS Labs (vvd)
DeltaFile
+8-8devel/raylib/Makefile
+6-6devel/raylib/pkg-plist
+11-0devel/raylib/files/patch-src_CMakeLists.txt
+3-3devel/raylib/distinfo
+2-2devel/raylib/files/patch-src_external_miniaudio.h
+30-195 files

FreeBSD/ports 41a114e — net/krill Makefile.crates Makefile

net/krill: Update 0.16.0 => 0.16.1

Release Notes:
https://community.nlnetlabs.nl/t/krill-0-16-1-no-small-wonder-released/3498

Changelog:
https://github.com/NLnetLabs/krill/releases/tag/v0.16.1

PR:             300484
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2026-109140
Security:       CVE-2026-109141
Security:       CVE-2026-109142
MFH:            2026Q4

(cherry picked from commit 360b2c7c3ebb002e51a4ccacd01a6deff52608b1)
DeltaFile
+5-5net/krill/distinfo
+1-2net/krill/Makefile
+1-1net/krill/Makefile.crates
+7-83 files

FreeBSD/src 9ed1713 — sys/dev/bnxt/bnxt_en bnxt.h if_bnxt.c

bnxt: add 400GBase-FR4 support

Support 400GBase-FR4 optics, allowing the driver to report
"Ethernet autoselect (400GBase-FR4 <full-duplex>)"  for FR4
media.

Differential Revision: https://reviews.freebsd.org/D61135
Reviewed by: sumit.saxena_broadcom.com
Sponsored by: Netflix
DeltaFile
+10-0sys/dev/bnxt/bnxt_en/if_bnxt.c
+1-0sys/dev/bnxt/bnxt_en/bnxt.h
+11-02 files

FreeBSD/ports 360b2c7 — net/krill Makefile.crates Makefile

net/krill: Update 0.16.0 => 0.16.1

Release Notes:
https://community.nlnetlabs.nl/t/krill-0-16-1-no-small-wonder-released/3498

Changelog:
https://github.com/NLnetLabs/krill/releases/tag/v0.16.1

PR:             300484
Approved by:    osa, vvd (mentors, implicit)
Security:       CVE-2026-109140
Security:       CVE-2026-109141
Security:       CVE-2026-109142
MFH:            2026Q4
DeltaFile
+5-5net/krill/distinfo
+1-2net/krill/Makefile
+1-1net/krill/Makefile.crates
+7-83 files

FreeBSD/ports 2902843 — security/vuxml/vuln 2026.xml

security/vuxml: Add net/krill vulnerabilities

PR:             300484
Approved by:    osa, vvd (mentors, implicit)
DeltaFile
+37-0security/vuxml/vuln/2026.xml
+37-01 files

FreeBSD/src dc5a7d9 — sys/netinet/tcp_stacks rack.c

Broadcom tester's were able to trigger a KASSERT in rack due to an accounting issue.

The recently added code to rack to help minimize reordering issues had a KASSERT for protection of its counting field. This
was consistently. Triggered in broadcom's testing lab. They came up with a partial solution.. but one of their fixes was
also incorrect causing the counter to increase incorrectly as well. I worked with them to give them an updated patch (the one
attached in this review). They have tested that in their same repro environment and confirm this fixes the issue.

Reviewed by:tuexen, nickbanks_netflix.com
Differential Revision:  <https://reviews.freebsd.org/D61136>
DeltaFile
+33-1sys/netinet/tcp_stacks/rack.c
+33-11 files

FreeBSD/ports b1756db — security/netbird Makefile distinfo

security/netbird: Update 0.81.5 => 0.82.0

This release removes MySQL store and deprecates Rosenpass,
please see pkg-message or the changelog for more details.

Changelog:
https://github.com/netbirdio/netbird/releases/tag/v0.82.0

PR:             300474
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4

(cherry picked from commit f0cd3120b45056ae22c134e3df1bb9ab98c34b77)
DeltaFile
+14-0security/netbird/pkg-message
+5-5security/netbird/distinfo
+1-1security/netbird/Makefile
+20-63 files

FreeBSD/ports f0cd312 — security/netbird Makefile distinfo

security/netbird: Update 0.81.5 => 0.82.0

This release removes MySQL store and deprecates Rosenpass,
please see pkg-message or the changelog for more details.

Changelog:
https://github.com/netbirdio/netbird/releases/tag/v0.82.0

PR:             300474
Approved by:    osa, vvd (mentors, implicit)
MFH:            2026Q4
DeltaFile
+14-0security/netbird/pkg-message
+5-5security/netbird/distinfo
+1-1security/netbird/Makefile
+20-63 files

FreeBSD/src 662deb4 — sys/dev/hwpmc hwpmc_amd.c

hwpmc/amd: prime UMC perfmon block before programming counter registers

UMC counter register writes do not take effect while no counter in the
channel is enabled. Reserve the last counter slot of each UMC channel
and keep it enabled with EventSelect=0 so writes to the remaining slots
take effect. Reserved slots are not exposed to MI code.

UMC perfmon MSRs are package-scoped. A per-socket reference count arms
the reserved slots on the first amd_pcpu_init() for a socket and
disarms them on the last amd_pcpu_fini().

Reviewed by:    mhorne
Sponsored by:   AMD
Signed-off-by:  Osvaldo Janeri Filho <ojanerif at amd.com>
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2422
DeltaFile
+110-10sys/dev/hwpmc/hwpmc_amd.c
+110-101 files

FreeBSD/src 4b8e4e6 — sys/riscv/riscv locore.S

riscv: Map the DTB when it is outside the kernel's 1GB region

When the kernel is started directly by SBI firmware, locore.S maps only
the 1GB region that contains the kernel, and initriscv() reads the DTB
through that mapping at the physical address passed in a1.  If the
firmware put the DTB in another 1GB region, as QEMU does with more than
1GB of RAM, fake_preload_metadata() faults before the console is up and
the kernel hangs.

Also map the 1GB region that contains the DTB.

This fixes direct kernel booting without FreeBSD loader(8).

PR:             299088
Reviewed by:    mhorne
Fixes:          bfb857546984 ("riscv: Construct an identity map in locore.S")
MFC after:      1 week
Signed-off-by:  Rick Richard <rick at sloservers.com>

(cherry picked from commit 509d65fae512c24fc755d6a8b3b41bb967e6c5e1)
DeltaFile
+15-3sys/riscv/riscv/locore.S
+15-31 files

FreeBSD/src 80c954a — contrib/libarchive/libarchive archive_read_support_format_iso9660.c archive_read.c, contrib/libarchive/libarchive/test test_read_format_zip_streamable_skip.c test_archive_write_close_callback.c

libarchive: merge from vendor branch

libarchive 3.8.11

ChangeLog:
https://github.com/libarchive/libarchive/compare/v3.8.10...v3.8.11

Obtained from:  libarchive
Vendor commit:  03036ffa409a2aa1c5bbad35be2202641a040fda
MFC after:      3 days

(cherry picked from commit 322d4227521380a61850b3d4f2ebd2b42343a254)
DeltaFile
+170-0contrib/libarchive/libarchive/test/test_write_format_pax_mac_meta.c
+65-98contrib/libarchive/tar/creation_set.c
+98-48contrib/libarchive/libarchive/archive_read.c
+106-0contrib/libarchive/libarchive/test/test_archive_write_close_callback.c
+60-43contrib/libarchive/libarchive/archive_read_support_format_iso9660.c
+99-0contrib/libarchive/libarchive/test/test_read_format_zip_streamable_skip.c
+598-18988 files not shown
+2,556-46994 files

FreeBSD/src 3dba72d — lib/libpmc libpmc_pmu_util.c, lib/libpmc/pmu-events jevents.c

libpmc: Fix AMD L3 counter parameter parsing

Fix two small bugs affecting the event parsing of AMD L3 counters.
AMD's manual and JSON disagree about the naming scheme on recent
processors.  I use the naming scheme present in the recent PPRs to be
consistent, so in the JSON parser we rename 'allslices' to 'allsources'
just as we already do with sliceid and sourceid.  Also ensure that we
parse the 0x prefix present in the newer JSON files.

Reviewed by:    mhorne
Sponsored by:   Netflix
MFC after:      1 week
Pull Request:   https://github.com/freebsd/freebsd-src/pull/2180

(cherry picked from commit d38b3a5ead0d3507080da5321144219b13d43aa9)
DeltaFile
+8-1lib/libpmc/pmu-events/jevents.c
+4-4lib/libpmc/libpmc_pmu_util.c
+12-52 files

FreeBSD/src 8f1f763 — lib/libpmc/pmu-events jevents.c

jevents: include file path in whitelist error message

A small enhancement.

Reviewed by:    Ali Mashtizadeh <ali at mashtizadeh.com>
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D55830

(cherry picked from commit f0e0c4c52971f58d41a89690d402520500d286bd)
DeltaFile
+1-1lib/libpmc/pmu-events/jevents.c
+1-11 files

FreeBSD/src e7c7fed — lib/libpmc/pmu-events pmu-events.h jevents.c

libpmc/pmu-events: Add support for new json fields

This change adds support for three new Intel fields to jevents.c:
 - MetricThreshold
 - MetricgroupNoGroup
 - DefaultMetricgroupName

Reviewed by:    ali_mashtizadeh.com, mhorne
Differential Revision:  https://reviews.freebsd.org/D56017
MFC after:      1 week

(cherry picked from commit 6ad94d549eb2286d791abd5634400d8ef36d8259)
DeltaFile
+24-0lib/libpmc/pmu-events/jevents.c
+3-0lib/libpmc/pmu-events/pmu-events.h
+27-02 files

FreeBSD/src 60edd11 — lib/libpmc libpmc.c libpmc_pmu_util.c, lib/libpmc/pmu-events jevents.c

libpmc: Explicitly whitelist json fields

Adds all missing Intel fields and turns jevents.c into an explicit white
list mechanism so that we no longer ignore important fields that often
invalidate the counter.  The json event parser must now parse every
field on each architecture that we support.  This has been tested by
running tinderbox and manually running jevent against our current json
repository.  As a bonus I fixed spelling errors in the AMD JSON
definitions.

Sponsored by: Netflix

Reviewed by: imp
Pull Request: https://github.com/freebsd/freebsd-src/pull/2055

(cherry picked from commit bfb2fd5f66183454cfe8771595df09c0f23c7efb)
DeltaFile
+100-29lib/libpmc/pmu-events/jevents.c
+19-0lib/libpmc/libpmc_pmu_util.c
+4-1lib/libpmc/libpmc.c
+1-1lib/libpmc/pmu-events/arch/x86/amdzen6/load-store.json
+1-1lib/libpmc/pmu-events/arch/x86/amdzen5/load-store.json
+1-1lib/libpmc/pmu-events/arch/x86/amdzen4/cache.json
+126-336 files

FreeBSD/src 8b55ee6 — lib/libpmc/pmu-events/arch/x86/amdzen6 l3-cache.json execution.json

libpmc: Import AMD Zen 6 PMU events.

Sponsored by: Netflix

Reviewed by: imp
Pull Request: https://github.com/freebsd/freebsd-src/pull/2049

(cherry picked from commit 178d0b5b8da7480f455273aedf40dd8f1e785d3f)
DeltaFile
+1,106-0lib/libpmc/pmu-events/arch/x86/amdzen6/floating-point.json
+523-0lib/libpmc/pmu-events/arch/x86/amdzen6/load-store.json
+339-0lib/libpmc/pmu-events/arch/x86/amdzen6/recommended.json
+326-0lib/libpmc/pmu-events/arch/x86/amdzen6/l2-cache.json
+192-0lib/libpmc/pmu-events/arch/x86/amdzen6/execution.json
+177-0lib/libpmc/pmu-events/arch/x86/amdzen6/l3-cache.json
+2,663-06 files not shown
+3,217-112 files

FreeBSD/src 58d080e — lib/libpmc/pmu-events/arch/x86/amdzen5 l3-cache.json l2-cache.json

libpmc: Import AMD Zen 5 PMU events.

Sponsored by:           Netflix

Reviewed by: imp
Pull Request: https://github.com/freebsd/freebsd-src/pull/1954

(cherry picked from commit bae832487038b2c8778dc6f52700b4353175ccec)
DeltaFile
+1,634-0lib/libpmc/pmu-events/arch/x86/amdzen5/data-fabric.json
+812-0lib/libpmc/pmu-events/arch/x86/amdzen5/floating-point.json
+517-0lib/libpmc/pmu-events/arch/x86/amdzen5/load-store.json
+457-0lib/libpmc/pmu-events/arch/x86/amdzen5/recommended.json
+266-0lib/libpmc/pmu-events/arch/x86/amdzen5/l2-cache.json
+177-0lib/libpmc/pmu-events/arch/x86/amdzen5/l3-cache.json
+3,863-07 files not shown
+4,518-013 files

FreeBSD/ports 59077d6 — security/keychain Makefile

security/keychain: drop maintainership
DeltaFile
+1-1security/keychain/Makefile
+1-11 files

FreeBSD/ports 5b78209 — databases/mongodb-tools Makefile distinfo

databases/mongodb-tools: 100.20.1

Released 2026-11-02

Changes:
https://github.com/mongodb/mongo-tools/blob/master/CHANGELOG.md#100201
DeltaFile
+3-3databases/mongodb-tools/distinfo
+1-1databases/mongodb-tools/Makefile
+4-42 files

FreeBSD/ports 27e149a — deskutils/nextcloudclient Makefile distinfo

deskutils/nextcloudclient: Update to 35.0.2
DeltaFile
+3-3deskutils/nextcloudclient/distinfo
+1-1deskutils/nextcloudclient/Makefile
+4-42 files

FreeBSD/ports c387273 — www/freenginx Makefile, www/nginx Makefile

www/{nginx,nginx-devel,freenginx}: 3rd-party modules management

Chase the vod module update, which these ports build in themselves.

Sponsored by:   Netzkommune GmbH
DeltaFile
+1-1www/nginx/Makefile
+1-1www/nginx-devel/Makefile
+1-0www/freenginx/Makefile
+3-23 files

FreeBSD/ports c2983dc — www/nginx-module-vod Makefile distinfo

www/nginx-module-vod: Update to 1.11.2

Changelog:
https://github.com/dio-az/nginx-vod-module/blob/v1.11.2/CHANGELOG.md

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/nginx-module-vod/distinfo
+1-1www/nginx-module-vod/Makefile
+4-42 files

FreeBSD/ports 6a977cd — www/freenginx pkg-plist

www/freenginx: Remove stale subs_filter plist entry

The option went away with the module, the packing list kept its line.

Fixes:          445f9e590a9e ("www/{nginx,nginx-devel,freenginx}: 3rd-party modules management")
Sponsored by:   Netzkommune GmbH
DeltaFile
+0-1www/freenginx/pkg-plist
+0-11 files

FreeBSD/ports c896ff8 — net-mgmt/semaphore Makefile distinfo

net-mgmt/semaphore: Update to 2.19.18

Adds SEMAPHORE_SESSION_INACTIVITY_HOURS, which expires a login session
that stayed unused for that many hours.

Changelog:
https://github.com/semaphoreui/semaphore/releases/tag/v2.19.18

Sponsored by:   Netzkommune GmbH
DeltaFile
+7-7net-mgmt/semaphore/distinfo
+1-1net-mgmt/semaphore/Makefile
+8-82 files

FreeBSD/ports abd8234 — misc/py-claude-agent-sdk Makefile distinfo

misc/py-claude-agent-sdk: Update to 0.2.177

Adds an on_failure option to HookMatcher that blocks the action when a
hook callback fails, and updates the bundled Claude CLI.

Changes:
https://github.com/anthropics/claude-agent-sdk-python/blob/v0.2.177/CHANGELOG.md

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3misc/py-claude-agent-sdk/distinfo
+1-1misc/py-claude-agent-sdk/Makefile
+4-42 files

FreeBSD/ports 92c3a7a — deskutils/vit Makefile distinfo, deskutils/vit/files patch-pyproject.toml

deskutils/vit: Update to 2.3.5

Keeps the command input when quote validation fails, defers the terminal
setup until after the screen is cleared and takes calc_width from the
public urwid API.  Packaging now covers Python 3.11 through 3.15.

Changelog:
https://github.com/vit-project/vit/releases/tag/v2.3.5

Sponsored by:   Netzkommune GmbH
DeltaFile
+19-0deskutils/vit/files/patch-pyproject.toml
+3-3deskutils/vit/distinfo
+2-2deskutils/vit/Makefile
+24-53 files

FreeBSD/src 2321b3d — sbin/hastd/tests hastd_test.sh

hastd: Add full lifecycle test

Add a test case that creates and starts two nodes, has one assume the
primary role and the other the secondary role, writes to the device,
verifies that the data is synced to both nodes, then switches the roles,
and finally shuts both nodes down and compares their backing stores.

Differential Revision:  https://reviews.freebsd.org/D59676
DeltaFile
+133-1sbin/hastd/tests/hastd_test.sh
+133-11 files

FreeBSD/src a4c5803 — sbin/hastctl hastctl.8 hastctl.c, sbin/hastd hast.h hastd.8

hastd: Allow overriding the node name

Normally, hastd will use the hostname, hostuuid, or hostid as node name.
Allow overriding this with a new -n command-line option.  The argument
is treated as a replacement for the hostname, but also disables the
hostuuid and hostid logic.  This allows running multiple nodes on the
same system, which is useful for testing.

Differential Revision:  https://reviews.freebsd.org/D59675
DeltaFile
+39-7sbin/hastd/parse.y
+18-12sbin/hastctl/hastctl.c
+11-1sbin/hastctl/hastctl.8
+8-3sbin/hastd/hastd.c
+7-1sbin/hastd/hastd.8
+2-0sbin/hastd/hast.h
+85-246 files

FreeBSD/ports 719452a — devel/py-maturin Makefile Makefile.crates

devel/py-maturin: Update to 1.16.0

Changelog:

https://github.com/PyO3/maturin/releases/tag/v1.16.0
DeltaFile
+39-35devel/py-maturin/distinfo
+18-16devel/py-maturin/Makefile.crates
+1-2devel/py-maturin/Makefile
+58-533 files

FreeBSD/ports 696f414 — net-mgmt/telegraf Makefile distinfo

net-mgmt/telegraf: Update to 1.40.3

Release notes:  https://github.com/influxdata/telegraf/releases/tag/v1.40.3
DeltaFile
+5-5net-mgmt/telegraf/distinfo
+1-2net-mgmt/telegraf/Makefile
+6-72 files