FreeBSD/src 9597338 — sys/arm/allwinner axp81x.c

axp81x: Set the maximum voltage of the AXP805 regulators

AXP805_REG() did not set voltage_max, so a regulator without
regulator-max-microvolt in the FDT got a maximum of 0 and its
initialisation failed with ERANGE.  Compute it from the minimum and the
steps of the two ranges, like the value of the AXP813 DCDC7.

Reported by:    llm-postcr
Tested on:      H6
DeltaFile
+2-0sys/arm/allwinner/axp81x.c
+2-01 files

FreeBSD/src 7327788 — sys/arm/allwinner axp81x.c

axp81x: Allow the interrupt handler to sleep

The interrupt handler reads and writes the registers of the PMU, which
can sleep: the I2C controller the AXP805 is on in the H6 waits for the
end of the transfer, and taking the bus waits when it is busy.  The
handler runs in an interrupt thread, which cannot sleep unless the
interrupt is marked as sleepable, so the first interrupt would panic a
kernel with INVARIANTS.  Mark it, the interrupt is not shared.

Reported by:    llm-postcr
Tested on:      A64, H6
DeltaFile
+2-1sys/arm/allwinner/axp81x.c
+2-11 files

FreeBSD/src 97db601 — sys/arm/allwinner axp81x.c

axp81x: Always set the delay of the regulator methods

axp8xx_regnode_set_voltage() and axp8xx_regnode_enable() only set the
delay when they succeeded, so the callers could use an uninitialized
value after an error.  Set it first like the default methods do.

Reported by:    llm-postcr
Tested on:      A64
DeltaFile
+4-4sys/arm/allwinner/axp81x.c
+4-41 files

FreeBSD/src 010f31a — sys/dev/regulator regulator.c

regulator: Do not delay when setting the voltage failed

regnode_set_voltage_checked() called regnode_delay() with the delay
returned by the driver even when REGNODE_SET_VOLTAGE() failed.  A driver
does not have to set it on error, so the delay could be a random value
from the stack.  Only wait when the voltage was set, like
regnode_set_voltage() does.

Reported by:    llm-postcr
Tested on:      A64
DeltaFile
+2-1sys/dev/regulator/regulator.c
+2-11 files

FreeBSD/src 6046a35 — stand/common md.c

loader: Read the partition table of md images

md is a DEVT_DISK device but never called disk_open(), so reads always started
at offset 0 of the image. A partitioned image, such as a memstick image booted
memdisk=, has its partition table there, not a filesystem, and the loader stops
with "MD not present".

Reviewed by:    imp
Approved by:    imp
Sponsored by:   Netflix
Differential Revision:  https://ron-dev.freebsd.org/FreeBSD/src/pulls/99
DeltaFile
+24-9stand/common/md.c
+24-91 files

FreeBSD/src 9ff8ab2 — stand/common bootstrap.h md.c, stand/efi/loader main.c

loader.efi: Give the md probe a struct disk_devdesc

probe_md_currdev() named md through set_currdev_devsw(), which builds a plain
struct devdesc. Once md uses disk_fmtdev(), that reads d_slice and d_partition
past the end of the struct, and currdev becomes a name built from stack garbage.

Use a struct disk_devdesc instead, and open the device first so the name shows
the slice and partition actually found. When the image has no partition table,
fall back to the whole image, as before.

Add md_get_size() and move MD_BLOCK_SIZE to bootstrap.h so main.c
can open the device.

Reviewed by:    imp
Approved by:    imp
Sponsored by:   Netflix
Differential Revision:  https://ron-dev.freebsd.org/FreeBSD/src/pulls/98
DeltaFile
+31-1stand/efi/loader/main.c
+16-1stand/common/md.c
+3-0stand/common/bootstrap.h
+50-23 files

FreeBSD/ports aa2ae4e — www/freenginx Makefile, www/nginx Makefile

www/{nginx,nginx-devel,freenginx}: Chase the ip_anon module update

Sponsored by:   Netzkommune GmbH
DeltaFile
+1-1www/nginx/Makefile
+1-1www/nginx-devel/Makefile
+1-1www/freenginx/Makefile
+3-33 files

FreeBSD/src d687c9f — stand/common disk.c

stand: Accept any device name in disk_parsedev()

disk_parsedev() only accepted names starting with "disk" or "vdisk", so other
DEVT_DISK devices using disk_fmtdev() could print a name they could not parse
back, e.g. "md0s2a:".
Skip any alphabetic prefix instead; devparse() has already matched it to the
devsw.

Reviewed by:    imp
Approved by:    imp
Sponsored by:   Netflix
Differential Revision:  https://ron-dev.freebsd.org/FreeBSD/src/pulls/97
DeltaFile
+8-8stand/common/disk.c
+8-81 files

FreeBSD/ports 270a520 — www/nginx-module-ip-anon Makefile distinfo

www/nginx-module-ip-anon: Update to 0.2.0

Adds $remote_addr_hash, a keyed one-way pseudonym of the client
address.  Logs can still tell clients apart and limit_req can act per
client, without an address being written anywhere.  The hash is
HMAC-MD5 so it also works in builds without OpenSSL, and without a
secret the variable is not defined at all.

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/nginx-module-ip-anon/distinfo
+1-1www/nginx-module-ip-anon/Makefile
+4-42 files

FreeBSD/ports d4af9ea — www/immich Makefile distinfo

www/immich: Update to 3.4.1

Shared link cover queries no longer drag, .hif files are recognised as
HEIF, and the Prometheus exporter listens on all interfaces.

Changelog:
https://github.com/immich-app/immich/releases/tag/v3.4.1

Sponsored by:   Netzkommune GmbH
DeltaFile
+3,127-3,127www/immich/pkg-plist
+5-5www/immich/distinfo
+1-1www/immich/Makefile
+3,133-3,1333 files

FreeBSD/ports 1f518f9 — www/immich-cli Makefile distinfo

www/immich-cli: Update to 3.4.1

Changelog:
https://github.com/immich-app/immich/releases/tag/v3.4.1

Sponsored by:   Netzkommune GmbH
DeltaFile
+5-5www/immich-cli/distinfo
+1-1www/immich-cli/Makefile
+6-62 files

FreeBSD/ports bc76035 — www/immich-ml Makefile distinfo

www/immich-ml: Update to 3.4.1

Changelog:
https://github.com/immich-app/immich/releases/tag/v3.4.1

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/immich-ml/distinfo
+1-1www/immich-ml/Makefile
+4-42 files

FreeBSD/src 46c2d93 — stand/efi/loader decompress.c

loader.efi: Allocate ram disks as EfiReservedMemoryType

The kernel adds EfiLoaderData ranges to physmap and reuses the pages, so a
memdisk=root is overwritten while the system runs. The kernel skips
EfiReservedMemoryType, which ACPI requires for a registered RAM disk.

Fixes:          85fb40bad584
Reviewed by:    imp
Approved by:    imp
Sponsored by:   Netflix
Differential Revision:  https://ron-dev.freebsd.org/FreeBSD/src/pulls/96
DeltaFile
+7-6stand/efi/loader/decompress.c
+7-61 files

FreeBSD/ports 47e2781 — net/tigervnc-viewer Makefile

net/tigervnc-viewer: Bump again to trigger rebuild against FLTK 1.4

PORTREVISION had been bumped at PR 296190 (320e46a) in the master port,
bumping to PORTREVISION=1 did not take effect. Bumping again.
DeltaFile
+1-1net/tigervnc-viewer/Makefile
+1-11 files

FreeBSD/src f4be858 — sys/dev/sound/pci envy24ht.c

snd_envy24ht: Fix out-of-bounds DMA buffer indexing

378e0c5c8967 reduced the number of playback channels from 5 to 1. This
introduced a regression, because the global DMA buffer indexing was not
adapted accordingly, which now results in kernel panics because of
out-of-bounds reads into the buffer. Additionally, because of wrong
indexing, recording channels ended up being serviced by the playback
part of envy24ht_intr().

Register 1 recording channel instead of 2 + sc->adcn, as the recording
DMA buffer only has room for 1 stereo stream. With 1 channel per
direction, give each channel the first index of its direction
(ENVY24HT_CHAN_PLAY_DAC1 and ENVY24HT_CHAN_REC_ADC1).

While here, fix the buffer wrap in envy24ht_r16sl(). It has to be
ch->size / ch->unit, but was copied verbatim from the 32-bit equivalent,
whose samples are twice as large, so 16-bit recording wrapped halfway
through the DMA buffer and never read the second half.


    [8 lines not shown]
DeltaFile
+11-22sys/dev/sound/pci/envy24ht.c
+11-221 files

FreeBSD/ports b2b13ac — sysutils/fjord distinfo Makefile, sysutils/fjord/files fjordd.in

sysutils/fjord: Update to 0.4.3

- Require cni-epair 1.2.1, which no longer sends the host's name to
  the DHCP server for every container
- Install sbin/fjord, a link to fjordd that runs its new CLI
- rc.d: start after appjail

Changelog:      https://github.com/daemonless/fjord/releases/tag/v0.4.3
Reviewed by:    dtxdf
Approved by:    dtxdf (mentor)
Differential Revision:  https://reviews.freebsd.org/D61442
DeltaFile
+7-4sysutils/fjord/Makefile
+3-3sysutils/fjord/distinfo
+1-1sysutils/fjord/files/fjordd.in
+11-83 files

FreeBSD/ports d3e3316 — devel/vectorscan Makefile distinfo, devel/vectorscan/files patch-CMakeLists.txt patch-cmake_build__wrapper.sh

devel/vectorscan: update to 5.4.14

 - Update 5.4.13 to 5.4.14
 - Drop patch for cmake/build_wrapper.sh; upstream rewrote it to use
   nm -f posix, which works with llvm-nm
 - Patch cmake/build_wrapper.cmake so the new libcsyms.sh step uses
   /lib/libc.so.7 instead of libc.so.6 (otherwise the libc symbol list
   is silently empty) and runs the script with sh instead of bash
 - aarch64: add elf_aux_info()-based SVE/SVE2 detection for the fat
   runtime dispatcher; upstream only implements it on Linux, so SVE
   variants were never selected on FreeBSD.  Also require SVE2 bitperm
   for the sve2 variant, since it is built with +sve2-bitperm.
   Verified to fall back to NEON on a non-SVE CPU (eMAG); not yet
   tested on SVE hardware.
DeltaFile
+38-0devel/vectorscan/files/patch-src_util_arch_arm_cpuid__inline.h
+0-14devel/vectorscan/files/patch-cmake_build__wrapper.sh
+14-0devel/vectorscan/files/patch-cmake_build__wrapper.cmake
+4-4devel/vectorscan/files/patch-CMakeLists.txt
+3-3devel/vectorscan/distinfo
+1-1devel/vectorscan/Makefile
+60-226 files

FreeBSD/ports e7e7e92 — editors/openoffice-devel distinfo Makefile, editors/openoffice-devel/files patch-rhino_makefile.mk patch-external__deps.lst

editors/openoffice-devel: update to a new snapshot

Upgrade to a newer snapshot of the upstream trunk branch.
DeltaFile
+13-0editors/openoffice-devel/files/patch-external__deps.lst
+11-0editors/openoffice-devel/files/patch-rhino_makefile.mk
+5-3editors/openoffice-devel/distinfo
+5-3editors/openoffice-devel/Makefile
+34-64 files

FreeBSD/ports 7ea5a0b — misc/py-litellm Makefile.crates Makefile, misc/py-litellm/files patch-pyproject.toml

misc/py-litellm: Update to 1.109.0

Changelog: https://github.com/BerriAI/litellm/releases/tag/v1.109.0

Reported by:    portscout
DeltaFile
+9-9misc/py-litellm/distinfo
+3-3misc/py-litellm/Makefile.crates
+4-2misc/py-litellm/Makefile
+1-1misc/py-litellm/files/patch-pyproject.toml
+17-154 files

FreeBSD/ports 4f90282 — devel/py-python-discovery Makefile distinfo

devel/py-python-discovery: Update to 1.9.5

ChangeLog:

1. https://github.com/tox-dev/python-discovery/releases/tag/1.7.0
2. https://github.com/tox-dev/python-discovery/releases/tag/1.8.0
3. https://github.com/tox-dev/python-discovery/releases/tag/1.9.0
4. https://github.com/tox-dev/python-discovery/releases/tag/1.9.1
5. https://github.com/tox-dev/python-discovery/releases/tag/1.9.2
6. https://github.com/tox-dev/python-discovery/releases/tag/1.9.4
7, https://github.com/tox-dev/python-discovery/releases/tag/1.9.5

Reported by:    "github-actions[bot]" <notifications at github.com>
DeltaFile
+3-3devel/py-python-discovery/distinfo
+1-1devel/py-python-discovery/Makefile
+4-42 files

FreeBSD/ports c59c6d4 — databases/mongodb70 Makefile distinfo

databases/mongodb70: 7.0.48

Announcement:
https://www.mongodb.com/community/forums/t/mongodb-7-0-48-is-released/344844?u=r_k

Release Notes:
https://www.mongodb.com/docs/manual/release-notes/7.0/#7048---nov-10-2026

Security:       CVE-2026-118383 https://www.mongodb.com/community/forums/t/important-mongodb-security-update-available-action-required-november-10-2026/344843?u=r_k
Security:       a lot more CVEs in the Release Notes
DeltaFile
+3-3databases/mongodb70/distinfo
+1-1databases/mongodb70/Makefile
+4-42 files

FreeBSD/ports 4f4f1b1 — security/libressl-devel Makefile distinfo

security/libressl-devel: Update to 4.4.1

Quarterly is still on LibreSSL 4.3 branch

Security:       3047b511-dde7-11f1-8135-8447094a420f
MFH:            2026Q4
(cherry picked from commit 9edd19e562cc4be35bd96435d3bda4852ac379cb)
DeltaFile
+3-3security/libressl-devel/distinfo
+1-1security/libressl-devel/Makefile
+4-42 files

FreeBSD/ports 5403508 — security/vuxml/vuln 2026.xml

security/vuxml: Update version ranges for LibreSSL
DeltaFile
+3-1security/vuxml/vuln/2026.xml
+3-11 files

FreeBSD/ports 9edd19e — security/libressl-devel Makefile distinfo

security/libressl-devel: Update to 4.4.1

Security:       3047b511-dde7-11f1-8135-8447094a420f
MFH:            2026Q4
DeltaFile
+3-3security/libressl-devel/distinfo
+1-2security/libressl-devel/Makefile
+4-52 files

FreeBSD/ports 11f3eaf — www/nextcloud-contacts Makefile distinfo

www/nextcloud-contacts: Update to 8.10.0
DeltaFile
+3-3www/nextcloud-contacts/distinfo
+1-1www/nextcloud-contacts/Makefile
+4-42 files

FreeBSD/ports 2b108e9 — www/nextcloud-notes Makefile distinfo

www/nextcloud-notes: Update to 6.1.1
DeltaFile
+3-3www/nextcloud-notes/distinfo
+1-1www/nextcloud-notes/Makefile
+4-42 files

FreeBSD/ports 51f4681 — devel/php-composer Makefile distinfo

devel/php-composer: Update to 2.11.2

PR:             300704
Approved by:    Naram Qashat <cyberbotx at cyberbotx.com> (maintainer)
DeltaFile
+3-3devel/php-composer/distinfo
+1-1devel/php-composer/Makefile
+4-42 files

FreeBSD/ports ad52601 — devel/git Makefile pkg-plist

devel/git: Update to 2.56.1

This is a set of coordinated security fix releases addressing
CVE-2026-111760, CVE-2026-113408, CVE-2026-114466, CVE-2026-114467,
CVE-2026-114469 and CVE-2026-105437.

Security:       24e1443d-dd3b-11f1-b094-bc2411e144f8
Sponsored by:   Rubicon Communications, LLC ("Netgate")

(cherry picked from commit 7d40a651884b57e4f196f63511e85fdfd4edc0ad)
DeltaFile
+7-7devel/git/distinfo
+6-0devel/git/pkg-plist
+1-1devel/git/Makefile
+14-83 files

FreeBSD/ports 71a3c2d — security/libressl Makefile distinfo

security/libressl: Update to 4.3.5

Quarterly is still on LibreSSL 4.3 branch

Security:       3047b511-dde7-11f1-8135-8447094a420f
MFH:            2026Q4
(cherry picked from commit b1b326d995176cb56beebc126e6916e0c29ca4f0)
DeltaFile
+73-0security/libressl/Makefile.new
+3-3security/libressl/distinfo
+1-1security/libressl/Makefile
+77-43 files

FreeBSD/ports dd57765 — textproc/hs-pandoc Makefile Makefile.cabal, textproc/hs-pandoc/files patch-__cabal__deps_crypton-2.0.1_cbits_crypton__f2m.c patch-__cabal__deps_crypton-2.2.6_cbits_crypton__f2m.c

textproc/hs-pandoc: Update 3.13 => 3.14
DeltaFile
+65-181textproc/hs-pandoc/distinfo
+28-73textproc/hs-pandoc/Makefile.cabal
+10-0textproc/hs-pandoc/files/patch-__cabal__deps_crypton-2.2.6_cbits_crypton__f2m.c
+0-9textproc/hs-pandoc/files/patch-__cabal__deps_crypton-2.0.1_cbits_crypton__f2m.c
+1-1textproc/hs-pandoc/Makefile
+104-2645 files