From noreply at github.com  Mon Aug 24 00:57:25 2026
From: noreply at github.com (Lucas Holt)
Date: Sun, 23 Aug 2026 21:57:25 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 7c9d4e: mail/postfix: update
 to 3.11.6
Message-ID: <MidnightBSD/mports/push/refs/heads/mail/postfix/000000-7c9d4e@github.com>

  Branch: refs/heads/mail/postfix
  Home:   https://github.com/MidnightBSD/mports
  Commit: 7c9d4e82a019d04d6f8e053d4084df2b451f6aa4
      https://github.com/MidnightBSD/mports/commit/7c9d4e82a019d04d6f8e053d4084df2b451f6aa4
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-24 (Mon, 24 Aug 2026)

  Changed paths:
    M mail/postfix/Makefile
    M mail/postfix/distinfo

  Log Message:
  -----------
  mail/postfix: update to 3.11.6

Upstream release of August 10, 2026, which Wietse describes as
addressing medium-impact problems, some of which enable remote denial
of service or policy bypass.  No CVEs were assigned.

Policy bypass: the SMTP server failed to reset MAIL FROM and RCPT TO
state after smtpd_end_of_data_restrictions rejected a message, leaving
the client and server desynchronized.  A crafted client could then send
RCPT TO and DATA with no MAIL FROM and deliver a second message that
skipped check_recipient_access, because the recipient counter was
already > 1.  The same desync let a second message bypass Milter policy
enforcement after a Milter had accepted the first.  Present since
Postfix 2.2 (2004).

Denial of service: SMTP server command history memory exhaustion via
many very small BDAT requests; a null pointer read crash after a BDAT
command error followed by DATA; a null pointer read crash parsing a
malformed Dovecot AUTH response; and address verification cache
poisoning through postdrop, which could force rejection of mail that
should be accepted.

Also fixes read-after-free, uninitialized read and over-read defects in
postscreen_dnsbl.c, postscreen_haproxy.c, util/inet_connect.c,
dns_lookup.c (MX and SRV record over-read dating to 1997), postsuper.c,
record.c and sock_addr.c.

Reported by Qualys and OpenAI Security.  No port patches needed
adjusting; all four apply unchanged.

AI-Assisted-by: Claude Opus 5 (1M context) <noreply at anthropic.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Mon Aug 24 00:58:51 2026
From: noreply at github.com (Lucas Holt)
Date: Sun, 23 Aug 2026 21:58:51 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] cfe54e: mail/postfix: update
 to 3.11.6 (#774)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/e6ce42-cfe54e@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: cfe54e58656c0a80847dae5bda3f86da99bc9393
      https://github.com/MidnightBSD/mports/commit/cfe54e58656c0a80847dae5bda3f86da99bc9393
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-24 (Mon, 24 Aug 2026)

  Changed paths:
    M mail/postfix/Makefile
    M mail/postfix/distinfo

  Log Message:
  -----------
  mail/postfix: update to 3.11.6 (#774)

Updates `mail/postfix` from 3.11.5 to 3.11.6 (upstream release of August
10, 2026).

## Why

Wietse describes 3.11.6 as addressing "medium-impact problems that need
to be fixed as some enable remote DOS or policy bypass." **No CVEs were
assigned**, so vulnerability databases will not flag 3.11.5 ? I checked,
and the only hits returned for that version are false positives from
2001?2003.

**Policy bypass.** The SMTP server failed to reset `MAIL FROM` / `RCPT
TO` state after `smtpd_end_of_data_restrictions` rejected a message,
desynchronizing client and server. A crafted client could then send
`RCPT TO` and `DATA` with no `MAIL FROM` and deliver a second message
that skipped `check_recipient_access`, because the recipient counter was
already > 1. The same desync let a second message bypass Milter policy
enforcement after a Milter had accepted the first. Present since Postfix
2.2 (2004).

**Denial of service.**
- SMTP server command-history memory exhaustion via many very small
`BDAT` requests (since 3.4)
- Null pointer read crash after a `BDAT` command error followed by
`DATA` (since 3.4)
- Null pointer read crash parsing a malformed Dovecot AUTH response
(since 2.4)
- Address verification cache poisoning through `postdrop` ? a local user
could force rejection of mail that should be accepted (since 1.1)

**Memory safety.** Read-after-free, uninitialized-read and over-read
fixes in `postscreen_dnsbl.c`, `postscreen_haproxy.c`,
`util/inet_connect.c`, `dns_lookup.c` (MX/SRV record over-read dating to
1997), `postsuper.c`, `record.c` and `sock_addr.c`.

Reported by Qualys and OpenAI Security.

## Port changes

Version bump and distinfo only. All four patches
(`extra-patch-blacklistd`, `patch-conf_main.cf`, `patch-makedefs`,
`patch-src_tls_tls__server.c`) apply unchanged, and `pkg-plist` needed
no edits.

## Validation

| Check | Result |
|---|---|
| `bmake makesum` | SHA256 `b9a74870?8d07`, 5289392 bytes |
| `bmake patch` | pass, all four patches apply cleanly |
| `bmake build` (default) | pass ? 19 bin, 36 libexec |
| `bmake fake` + `bmake package` (default) | pass |
| `bmake build` + `package` (pgsql flavor) | pass, `postfix-pgsql.so`
built |
| `portlint` | 1 fatal + 10 warnings ? **identical on 3.11.5**,
pre-existing |

Fixes verified present in the distfile rather than inferred from the
version: `src/global/mail_version.h` reads `MAIL_VERSION_NUMBER
"3.11.6"` / `MAIL_RELEASE_DATE "20260809"`, and `HISTORY` carries both
the policy-bypass and memory-safety entries.

Built on amd64. Two flavors of seven were built (`default`, `pgsql`);
`ldap`, `mongo`, `mysql`, `sasl` and `sqlite` were not, since the change
is a version bump with no flavor-specific edits ? worth a cluster run to
confirm.

Two pre-existing quirks noted but deliberately left alone, as they are
out of scope for this update:
- `bmake fake` reports `etc/postfix/*.sample`, `main.cf.default`,
`bounce.cf.default` and `TLS_LICENSE` as "missing from the plist". False
positive ? the checker does not expand `%%PFETC%%`. Verified the files
are present in the built package.
- `PFETC` carries a trailing slash, so package paths render as
`etc/postfix//main.cf.sample`. Cosmetic.

Not installed on the build host, which runs sendmail.

? Generated with [Claude Code](https://claude.com/claude-code)

## Summary by Sourcery

Update the Postfix port to the 3.11.6 upstream release.

Bug Fixes:
- Update Postfix to 3.11.6, incorporating upstream fixes for SMTP policy
bypasses, denial-of-service conditions, and multiple memory-safety
issues.

Chores:
- Refresh the distfile checksum metadata for the new Postfix release.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications


From noreply at github.com  Mon Aug 24 00:58:53 2026
From: noreply at github.com (Lucas Holt)
Date: Sun, 23 Aug 2026 21:58:53 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/mail/postfix/7c9d4e-000000@github.com>

  Branch: refs/heads/mail/postfix
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Mon Aug 24 09:10:35 2026
From: noreply at github.com (Lucas Holt)
Date: Mon, 24 Aug 2026 06:10:35 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 54b692: lang/python312:
 stabilize GitHub patch fetches
Message-ID: <MidnightBSD/mports/push/refs/heads/lang/python312/000000-54b692@github.com>

  Branch: refs/heads/lang/python312
  Home:   https://github.com/MidnightBSD/mports
  Commit: 54b6921c9fb896c2959c932edfe3eff2e5f19e27
      https://github.com/MidnightBSD/mports/commit/54b6921c9fb896c2959c932edfe3eff2e5f19e27
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-24 (Mon, 24 Aug 2026)

  Changed paths:
    M lang/python312/Makefile
    M lang/python312/distinfo

  Log Message:
  -----------
  lang/python312: stabilize GitHub patch fetches

Request full object indexes so GitHub patch output does not change when abbreviated object IDs grow, and refresh the corresponding checksums.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Mon Aug 24 09:14:43 2026
From: noreply at github.com (Lucas Holt)
Date: Mon, 24 Aug 2026 06:14:43 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 87aa82: lang/python312:
 stabilize GitHub patch fetches (#775)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/cfe54e-87aa82@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 87aa82a7736b424d1e8ef84f476ef4af7a28a9fc
      https://github.com/MidnightBSD/mports/commit/87aa82a7736b424d1e8ef84f476ef4af7a28a9fc
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-24 (Mon, 24 Aug 2026)

  Changed paths:
    M lang/python312/Makefile
    M lang/python312/distinfo

  Log Message:
  -----------
  lang/python312: stabilize GitHub patch fetches (#775)

## Summary

- request full Git object IDs for the three CPython commit patches
- refresh patch checksums and sizes
- prevent future checksum churn when GitHub lengthens abbreviated object
IDs

## Validation

- `BATCH=yes bmake makesum`
- fresh `bmake checksum` from an empty temporary distfile directory
- `BATCH=yes bmake patch`
- `BATCH=yes bmake`
- `BATCH=yes bmake fake`
- `BATCH=yes bmake package`
- `BATCH=yes bmake check-license`
- `portlint -AC lang/python312` (0 fatal errors; 11 pre-existing
warnings)
- confirmed patch bodies are unchanged after excluding Git `index`
metadata

## Existing QA warnings

`fake-qa` still reports the existing undeclared `libb2` dependency, two
pkg-config plist omissions, a non-ELF GDB helper warning, and an
ineffective `REINPLACE_CMD`. These are outside this fetch-only change.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Mon Aug 24 09:14:45 2026
From: noreply at github.com (Lucas Holt)
Date: Mon, 24 Aug 2026 06:14:45 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/lang/python312/54b692-000000@github.com>

  Branch: refs/heads/lang/python312
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Mon Aug 24 23:55:40 2026
From: noreply at github.com (Lucas Holt)
Date: Mon, 24 Aug 2026 20:55:40 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] c7eb34: dns/bind920: remove
 obsolete helper header
Message-ID: <MidnightBSD/mports/push/refs/heads/dns/bind920/000000-c7eb34@github.com>

  Branch: refs/heads/dns/bind920
  Home:   https://github.com/MidnightBSD/mports
  Commit: c7eb34de976ee9e234593411d61caddb0997cc08
      https://github.com/MidnightBSD/mports/commit/c7eb34de976ee9e234593411d61caddb0997cc08
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-24 (Mon, 24 Aug 2026)

  Changed paths:
    M dns/bind920/pkg-plist

  Log Message:
  -----------
  dns/bind920: remove obsolete helper header

BIND 9.20.26 removed isc/helper.h, so retaining it in pkg-plist prevents package creation.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Mon Aug 24 23:56:34 2026
From: noreply at github.com (Lucas Holt)
Date: Mon, 24 Aug 2026 20:56:34 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/dns/bind920/c7eb34-000000@github.com>

  Branch: refs/heads/dns/bind920
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Mon Aug 24 23:56:33 2026
From: noreply at github.com (Lucas Holt)
Date: Mon, 24 Aug 2026 20:56:33 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 3fa5c2: dns/bind920: remove
 obsolete helper header (#776)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/87aa82-3fa5c2@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 3fa5c23b9ae0badc49b7639a5f8911bb9cd77f28
      https://github.com/MidnightBSD/mports/commit/3fa5c23b9ae0badc49b7639a5f8911bb9cd77f28
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-24 (Mon, 24 Aug 2026)

  Changed paths:
    M dns/bind920/pkg-plist

  Log Message:
  -----------
  dns/bind920: remove obsolete helper header (#776)

## Summary

- remove `include/isc/helper.h` from `pkg-plist`
- align the plist with BIND 9.20.26, which no longer installs that
header
- restore package creation

## Validation

- `BATCH=yes bmake makesum`
- clean `BATCH=yes bmake patch`
- clean `BATCH=yes bmake`
- clean `BATCH=yes bmake fake`
- clean `BATCH=yes bmake package`
- `BATCH=yes bmake test` (target exited successfully without substantive
test output)
- `BATCH=yes bmake check-license`
- `portlint -AC dns/bind920`

Package created successfully as `bind920-9.20.26.mport`. Existing
fake-qa stripping, dependency, and ineffective `REINPLACE_CMD` warnings
are unchanged and outside this plist-only fix.

## Summary by Sourcery

Bug Fixes:
- Remove the obsolete BIND helper header from the package plist so
bind920 packages can be created successfully with BIND 9.20.26.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 09:23:01 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 06:23:01 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 3573ec:
 databases/postgresql18-server: fix fake installation
Message-ID: <MidnightBSD/mports/push/refs/heads/databases/postgresql18-server/000000-3573ec@github.com>

  Branch: refs/heads/databases/postgresql18-server
  Home:   https://github.com/MidnightBSD/mports
  Commit: 3573ec8e186f32ffdf4e493aa51509a1b067153f
      https://github.com/MidnightBSD/mports/commit/3573ec8e186f32ffdf4e493aa51509a1b067153f
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-25 (Tue, 25 Aug 2026)

  Changed paths:
    M databases/postgresql18-server/Makefile

  Log Message:
  -----------
  databases/postgresql18-server: fix fake installation

Pass the framework fake arguments to PostgreSQL install targets and use the already fake-adjusted installation paths exactly once. This fixes the PostgreSQL 15 and 16 client package failures caused by duplicated staging roots.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 09:24:10 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 06:24:10 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 49c0f7:
 databases/postgresql18-server: fix fake installati...
Message-ID: <MidnightBSD/mports/push/refs/heads/master/3fa5c2-49c0f7@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 49c0f7c33c0839417eab0ed980ea49dbab053761
      https://github.com/MidnightBSD/mports/commit/49c0f7c33c0839417eab0ed980ea49dbab053761
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-25 (Tue, 25 Aug 2026)

  Changed paths:
    M databases/postgresql18-server/Makefile

  Log Message:
  -----------
  databases/postgresql18-server: fix fake installation (#777)

## Summary

- pass the mports fake-install arguments to PostgreSQL install targets
- use fake-adjusted PREFIX and DOCSDIR paths exactly once
- fix the shared staging logic used by PostgreSQL 15 and 16 clients

## Magus failures

- postgresql15-client, ID 2249593, amd64: fake failed when strip
received a duplicated fake-root path
- postgresql16-client, ID 2249601, amd64: same failure
- analyzer classification: Partially supported; it identified the
duplicated staging path but missed the omitted FAKE_MAKEARGS

## Validation

- postgresql15-client 15.18: build, fake, and package passed
- postgresql16-client 16.14: build, fake, and package passed
- check-license passed for both clients
- client test targets exited successfully; no substantive client tests
were defined
- git diff --check passed
- portlint was run and reports pre-existing formatting and plist
findings in the shared port

## Summary by Sourcery

Fix PostgreSQL fake-install staging so server and client packages
install, strip, and stage files under the correct paths.

Bug Fixes:
- Fix fake installation of PostgreSQL server and client components by
propagating fake-install arguments to all relevant install targets.
- Prevent duplicated fake-root paths during stripping and staging of
PostgreSQL files.
- Correct shared staging behavior for PostgreSQL 15 and 16 clients.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 09:24:11 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 06:24:11 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/databases/postgresql18-server/3573ec-000000@github.com>

  Branch: refs/heads/databases/postgresql18-server
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 21:57:31 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 18:57:31 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] f926ae: mail/dovecot24:
 select Python for installed helper
Message-ID: <MidnightBSD/mports/push/refs/heads/mail/dovecot24/000000-f926ae@github.com>

  Branch: refs/heads/mail/dovecot24
  Home:   https://github.com/MidnightBSD/mports
  Commit: f926ae90b6118403d0f4aed37650d795e2f625fd
      https://github.com/MidnightBSD/mports/commit/f926ae90b6118403d0f4aed37650d795e2f625fd
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-25 (Tue, 25 Aug 2026)

  Changed paths:
    M mail/dovecot24/Makefile

  Log Message:
  -----------
  mail/dovecot24: select Python for installed helper

Add the Python runtime extension so shebangfix rewrites settings-history.py to the versioned interpreter instead of the invalid unversioned python path. Bump PORTREVISION so all three flavors are rebuilt.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 22:23:08 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 19:23:08 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] f679c9: www/tomcat9: update
 to 9.0.121
Message-ID: <MidnightBSD/mports/push/refs/heads/www/tomcat9/000000-f679c9@github.com>

  Branch: refs/heads/www/tomcat9
  Home:   https://github.com/MidnightBSD/mports
  Commit: f679c9f7a174c27b8f2bddb225e612bdfaf69b64
      https://github.com/MidnightBSD/mports/commit/f679c9f7a174c27b8f2bddb225e612bdfaf69b64
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-25 (Tue, 25 Aug 2026)

  Changed paths:
    M www/tomcat9/Makefile
    M www/tomcat9/distinfo

  Log Message:
  -----------
  www/tomcat9: update to 9.0.121

Update to the security release addressing the August 25 Tomcat vulnerabilities.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 22:38:51 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 19:38:51 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 83687f: www/tomcat101:
 update to 10.1.59
Message-ID: <MidnightBSD/mports/push/refs/heads/www/tomcat101/000000-83687f@github.com>

  Branch: refs/heads/www/tomcat101
  Home:   https://github.com/MidnightBSD/mports
  Commit: 83687fcff62c2f9bd40866bef5bd01d9848ccb42
      https://github.com/MidnightBSD/mports/commit/83687fcff62c2f9bd40866bef5bd01d9848ccb42
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-25 (Tue, 25 Aug 2026)

  Changed paths:
    M www/tomcat101/Makefile
    M www/tomcat101/distinfo

  Log Message:
  -----------
  www/tomcat101: update to 10.1.59

Update to the security release addressing the August 25 Tomcat vulnerabilities.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 22:39:19 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 19:39:19 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] e1bf08: mail/dovecot24:
 select Python for installed helper...
Message-ID: <MidnightBSD/mports/push/refs/heads/master/49c0f7-e1bf08@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: e1bf083bbd29a9ed7217103fbeafc6951fd3c171
      https://github.com/MidnightBSD/mports/commit/e1bf083bbd29a9ed7217103fbeafc6951fd3c171
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-25 (Tue, 25 Aug 2026)

  Changed paths:
    M mail/dovecot24/Makefile

  Log Message:
  -----------
  mail/dovecot24: select Python for installed helper (#778)

## Summary

- add the Python runtime extension so shebangfix selects the versioned
interpreter
- bump PORTREVISION to rebuild all Dovecot 2.4 flavors
- fix fake-qa failures for Magus IDs 2255253, 2255254, and 2255255

## Root cause

The existing shebangfix declaration rewrote the upstream python3 shebang
to /usr/local/bin/python because no Python version was selected. Magus
rejects that unversioned interpreter during fake QA. With python:run,
the staged helper uses /usr/local/bin/python3.12 and records the
lang/python312 runtime dependency.

The analyzer was partially supported: it identified the shebang area but
recommended shebangfix, which was already present, and missed the
missing Python runtime selection.

## Validation

- default flavor: clean, patch, build, fake, package passed
- mysql flavor: clean, patch, build, fake, package passed
- pgsql flavor: clean, patch, build, fake, package passed
- all three packages contain #!/usr/local/bin/python3.12 in
settings-history.py
- check-license passed
- test target exited successfully; no substantive test commands were
defined
- portlint: 0 fatal errors, 7 pre-existing warnings
- git diff --check passed

## Summary by Sourcery

Select the versioned Python runtime for Dovecot's installed helper
script.

Bug Fixes:
- Ensure the Dovecot settings-history helper uses a versioned Python
interpreter and declares the corresponding runtime dependency, fixing
fake-QA failures.

Build:
- Bump PORTREVISION to rebuild all Dovecot 2.4 flavors.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 22:39:21 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 19:39:21 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/mail/dovecot24/f926ae-000000@github.com>

  Branch: refs/heads/mail/dovecot24
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 22:49:02 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 19:49:02 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 0c1526: www/tomcat9: update
 to 9.0.121 (#779)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/e1bf08-0c1526@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 0c15260ede0109129fae9d4cde10e7425f6ffa69
      https://github.com/MidnightBSD/mports/commit/0c15260ede0109129fae9d4cde10e7425f6ffa69
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-25 (Tue, 25 Aug 2026)

  Changed paths:
    M www/tomcat9/Makefile
    M www/tomcat9/distinfo

  Log Message:
  -----------
  www/tomcat9: update to 9.0.121 (#779)

Update Tomcat 9 to the August 2026 security release.

This fixes CVE-2026-73180, CVE-2026-68763, CVE-2026-68569,
CVE-2026-66422, CVE-2026-66299, CVE-2026-65927, CVE-2026-65905,
CVE-2026-65637, CVE-2026-65183, and CVE-2026-65182.

Validation:
- BATCH=yes bmake -C www/tomcat9 clean patch check-license
- BATCH=yes bmake -C www/tomcat9 build fake package test
- portlint -AC www/tomcat9
- git diff --check

## Summary by Sourcery

Bug Fixes:
- Update Tomcat 9 to version 9.0.121, incorporating the August 2026
security fixes for the listed CVEs.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 22:49:03 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 19:49:03 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/www/tomcat9/f679c9-000000@github.com>

  Branch: refs/heads/www/tomcat9
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 22:49:17 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 19:49:17 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 22a2e2: www/tomcat101:
 update to 10.1.59 (#780)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/0c1526-22a2e2@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 22a2e29e81935e292f6dc47d09cab97e0d130cc9
      https://github.com/MidnightBSD/mports/commit/22a2e29e81935e292f6dc47d09cab97e0d130cc9
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-25 (Tue, 25 Aug 2026)

  Changed paths:
    M www/tomcat101/Makefile
    M www/tomcat101/distinfo

  Log Message:
  -----------
  www/tomcat101: update to 10.1.59 (#780)

Update Tomcat 10.1 to the August 2026 security release. Tomcat 10.1.58
was not released because its release vote failed; 10.1.59 is the first
published fixed version.

This fixes CVE-2026-73180, CVE-2026-68763, CVE-2026-68569,
CVE-2026-68525, CVE-2026-66422, CVE-2026-66299, CVE-2026-65927,
CVE-2026-65905, CVE-2026-65637, CVE-2026-65183, and CVE-2026-65182.

Validation:
- BATCH=yes bmake -C www/tomcat101 clean patch check-license
- BATCH=yes bmake -C www/tomcat101 build fake package test
- portlint -AC www/tomcat101
- git diff --check

## Summary by Sourcery

Bug Fixes:
- Update Tomcat 10.1 to version 10.1.59, incorporating the August 2026
security fixes for the listed CVEs.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 22:49:19 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 19:49:19 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/www/tomcat101/83687f-000000@github.com>

  Branch: refs/heads/www/tomcat101
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 23:01:41 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 20:01:41 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] d9b263: www/tomcat110:
 update to 11.0.25
Message-ID: <MidnightBSD/mports/push/refs/heads/www/tomcat110/000000-d9b263@github.com>

  Branch: refs/heads/www/tomcat110
  Home:   https://github.com/MidnightBSD/mports
  Commit: d9b263477b6d61b3a640524cdeacbc11d2df27af
      https://github.com/MidnightBSD/mports/commit/d9b263477b6d61b3a640524cdeacbc11d2df27af
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-25 (Tue, 25 Aug 2026)

  Changed paths:
    M www/tomcat110/Makefile
    M www/tomcat110/distinfo

  Log Message:
  -----------
  www/tomcat110: update to 11.0.25

Update to the security release addressing the August 25 Tomcat vulnerabilities.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 23:02:22 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 20:02:22 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 501bb0: www/tomcat110:
 update to 11.0.25 (#781)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/22a2e2-501bb0@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 501bb054c7df9626964e48e8c7313e7db62826bd
      https://github.com/MidnightBSD/mports/commit/501bb054c7df9626964e48e8c7313e7db62826bd
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-25 (Tue, 25 Aug 2026)

  Changed paths:
    M www/tomcat110/Makefile
    M www/tomcat110/distinfo

  Log Message:
  -----------
  www/tomcat110: update to 11.0.25 (#781)

Update Tomcat 11 to the August 2026 security release.

This fixes CVE-2026-73180, CVE-2026-68763, CVE-2026-68569,
CVE-2026-68525, CVE-2026-66422, CVE-2026-66299, CVE-2026-65927,
CVE-2026-65905, CVE-2026-65637, CVE-2026-65183, and CVE-2026-65182.

Validation:
- BATCH=yes bmake -C www/tomcat110 clean patch check-license
- BATCH=yes bmake -C www/tomcat110 build fake package test
- portlint -AC www/tomcat110
- git diff --check

## Summary by Sourcery

Bug Fixes:
- Update Tomcat 11 to version 11.0.25, incorporating the August 2026
security fixes.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Tue Aug 25 23:02:24 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 20:02:24 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/www/tomcat110/d9b263-000000@github.com>

  Branch: refs/heads/www/tomcat110
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Wed Aug 26 00:17:57 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:17:57 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 837218: hwpmc: detach PMCs on
 exec of setuid/setgid binaries
Message-ID: <MidnightBSD/src/push/refs/heads/master/950fb3-837218@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 83721860c21345333193f2e1a525f73db288ab95
      https://github.com/MidnightBSD/src/commit/83721860c21345333193f2e1a525f73db288ab95
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M sys/dev/hwpmc/hwpmc_mod.c

  Log Message:
  -----------
  hwpmc: detach PMCs on exec of setuid/setgid binaries

pmc_can_attach() returned the negation of its decision: callers treat a
zero return as "may attach", but the function returned !decline_attach,
so a declined attach reported success and an allowed one reported
failure.  Its only caller is the PMC_FN_PROCESS_EXEC handler, which
detaches PMCs from a process whose credentials changed across execve(2).
With the inverted result, PMCs were detached only when the owner still
had the privilege to keep them, and were left attached when it did not.

An unprivileged local user who had attached PMCs to a process could
therefore continue monitoring it after it executed a setuid or setgid
image.

Return EPERM when the attach is declined and 0 otherwise.

This is CVE-2026-58089 / FreeBSD-SA-26:56.hwpmc.

Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:17:58 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:17:58 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 4eed45: hwpmc: detach PMCs on
 exec of setuid/setgid binaries
Message-ID: <MidnightBSD/src/push/refs/heads/stable/4.1/5ee85c-4eed45@github.com>

  Branch: refs/heads/stable/4.1
  Home:   https://github.com/MidnightBSD/src
  Commit: 4eed45c7460c37ef07ed0a2703bd2e1162d4e54f
      https://github.com/MidnightBSD/src/commit/4eed45c7460c37ef07ed0a2703bd2e1162d4e54f
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M sys/dev/hwpmc/hwpmc_mod.c

  Log Message:
  -----------
  hwpmc: detach PMCs on exec of setuid/setgid binaries

pmc_can_attach() returned the negation of its decision: callers treat a
zero return as "may attach", but the function returned !decline_attach,
so a declined attach reported success and an allowed one reported
failure.  Its only caller is the PMC_FN_PROCESS_EXEC handler, which
detaches PMCs from a process whose credentials changed across execve(2).
With the inverted result, PMCs were detached only when the owner still
had the privilege to keep them, and were left attached when it did not.

An unprivileged local user who had attached PMCs to a process could
therefore continue monitoring it after it executed a setuid or setgid
image.

Return EPERM when the attach is declined and 0 otherwise.

This is CVE-2026-58089 / FreeBSD-SA-26:56.hwpmc.

Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5
(cherry picked from commit 83721860c21345333193f2e1a525f73db288ab95)



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:17:58 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:17:58 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 9313d0: hwpmc: detach PMCs on
 exec of setuid/setgid binaries
Message-ID: <MidnightBSD/src/push/refs/heads/stable/4.0/3d0065-9313d0@github.com>

  Branch: refs/heads/stable/4.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 9313d0f63599bae53ed7e665b075382ef74cb4e9
      https://github.com/MidnightBSD/src/commit/9313d0f63599bae53ed7e665b075382ef74cb4e9
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M sys/dev/hwpmc/hwpmc_mod.c

  Log Message:
  -----------
  hwpmc: detach PMCs on exec of setuid/setgid binaries

pmc_can_attach() returned the negation of its decision: callers treat a
zero return as "may attach", but the function returned !decline_attach,
so a declined attach reported success and an allowed one reported
failure.  Its only caller is the PMC_FN_PROCESS_EXEC handler, which
detaches PMCs from a process whose credentials changed across execve(2).
With the inverted result, PMCs were detached only when the owner still
had the privilege to keep them, and were left attached when it did not.

An unprivileged local user who had attached PMCs to a process could
therefore continue monitoring it after it executed a setuid or setgid
image.

Return EPERM when the attach is declined and 0 otherwise.

This is CVE-2026-58089 / FreeBSD-SA-26:56.hwpmc.

Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5
(cherry picked from commit 83721860c21345333193f2e1a525f73db288ab95)



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:21:07 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:21:07 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] dca750: sound: fix
 use-after-free in the SNDCTL_DSP_SYNCST...
Message-ID: <MidnightBSD/src/push/refs/heads/stable/4.1/4eed45-dca750@github.com>

  Branch: refs/heads/stable/4.1
  Home:   https://github.com/MidnightBSD/src
  Commit: dca750a2414797be750e9ac3409a75c9f72f62fe
      https://github.com/MidnightBSD/src/commit/dca750a2414797be750e9ac3409a75c9f72f62fe
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M sys/dev/sound/pcm/channel.h
    M sys/dev/sound/pcm/dsp.c

  Log Message:
  -----------
  sound: fix use-after-free in the SNDCTL_DSP_SYNCSTART handler

dsp_oss_syncstart() looks up a sync group by id and then tries to lock
every member channel with CHN_TRYLOCK().  When a trylock failed it
dropped the locks it had taken and msleep()ed on the sync group list
lock, then continued iterating over the group's member list.  Dropping
that lock allows another thread to trigger or tear down the same sync
group, freeing both the member entries and the group itself, so the
resumed iteration walked freed memory.  An unprivileged local user with
two or more sound devices could use this to escalate privileges.

Break out of the member loop after sleeping and let the enclosing loop
re-search the sync group list by id, which handles the group having gone
away.  Only retry when msleep() timed out; a signal still aborts.

Add PCM_SG_LOCKPTR() and use it rather than naming the mutex directly.

This is CVE-2026-58091 / FreeBSD-SA-26:58.sound.

Obtained from:	FreeBSD
Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5
(cherry picked from commit acf4907b8925c6a14ab2b5d624f36b9fcb90a6d6)



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:21:07 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:21:07 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] acf490: sound: fix
 use-after-free in the SNDCTL_DSP_SYNCST...
Message-ID: <MidnightBSD/src/push/refs/heads/master/837218-acf490@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: acf4907b8925c6a14ab2b5d624f36b9fcb90a6d6
      https://github.com/MidnightBSD/src/commit/acf4907b8925c6a14ab2b5d624f36b9fcb90a6d6
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M sys/dev/sound/pcm/channel.h
    M sys/dev/sound/pcm/dsp.c

  Log Message:
  -----------
  sound: fix use-after-free in the SNDCTL_DSP_SYNCSTART handler

dsp_oss_syncstart() looks up a sync group by id and then tries to lock
every member channel with CHN_TRYLOCK().  When a trylock failed it
dropped the locks it had taken and msleep()ed on the sync group list
lock, then continued iterating over the group's member list.  Dropping
that lock allows another thread to trigger or tear down the same sync
group, freeing both the member entries and the group itself, so the
resumed iteration walked freed memory.  An unprivileged local user with
two or more sound devices could use this to escalate privileges.

Break out of the member loop after sleeping and let the enclosing loop
re-search the sync group list by id, which handles the group having gone
away.  Only retry when msleep() timed out; a signal still aborts.

Add PCM_SG_LOCKPTR() and use it rather than naming the mutex directly.

This is CVE-2026-58091 / FreeBSD-SA-26:58.sound.

Obtained from:	FreeBSD
Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:21:07 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:21:07 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 1828cb: sound: fix
 use-after-free in the SNDCTL_DSP_SYNCST...
Message-ID: <MidnightBSD/src/push/refs/heads/stable/4.0/9313d0-1828cb@github.com>

  Branch: refs/heads/stable/4.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 1828cbc9684a354d145ea872c3283b3d1f94117e
      https://github.com/MidnightBSD/src/commit/1828cbc9684a354d145ea872c3283b3d1f94117e
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M sys/dev/sound/pcm/channel.h
    M sys/dev/sound/pcm/dsp.c

  Log Message:
  -----------
  sound: fix use-after-free in the SNDCTL_DSP_SYNCSTART handler

dsp_oss_syncstart() looks up a sync group by id and then tries to lock
every member channel with CHN_TRYLOCK().  When a trylock failed it
dropped the locks it had taken and msleep()ed on the sync group list
lock, then continued iterating over the group's member list.  Dropping
that lock allows another thread to trigger or tear down the same sync
group, freeing both the member entries and the group itself, so the
resumed iteration walked freed memory.  An unprivileged local user with
two or more sound devices could use this to escalate privileges.

Break out of the member loop after sleeping and let the enclosing loop
re-search the sync group list by id, which handles the group having gone
away.  Only retry when msleep() timed out; a signal still aborts.

Add PCM_SG_LOCKPTR() and use it rather than naming the mutex directly.

This is CVE-2026-58091 / FreeBSD-SA-26:58.sound.

Obtained from:	FreeBSD
Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5
(cherry picked from commit acf4907b8925c6a14ab2b5d624f36b9fcb90a6d6)



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:23:33 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:23:33 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] f4c672: ppp: fix three
 overflows in multilink endpoint dis...
Message-ID: <MidnightBSD/src/push/refs/heads/stable/4.0/1828cb-f4c672@github.com>

  Branch: refs/heads/stable/4.0
  Home:   https://github.com/MidnightBSD/src
  Commit: f4c6725cbd9e437cfbb9e72e06fce7a7af91349e
      https://github.com/MidnightBSD/src/commit/f4c6725cbd9e437cfbb9e72e06fce7a7af91349e
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M usr.sbin/ppp/lcp.c
    M usr.sbin/ppp/mp.c

  Log Message:
  -----------
  ppp: fix three overflows in multilink endpoint discriminator handling

mp_Enddisc() formats an endpoint discriminator into a 100 byte static
buffer.  For the magic and unrecognised classes it emits two hex digits
per byte but clamped the length as though each byte took one character,
so a discriminator longer than about half the buffer overflowed it.
Clamp to half the remaining space, and cast through unsigned char so
bytes with the high bit set are not sign extended into eight digits.
[CVE-2026-58095]

LcpDecodeConfig() did not check that a received TY_ENDDISC option is at
least the three bytes RFC 1717 requires before computing "len - 3".  A
two byte option made that -1, which reached both memcpy() and an
address[-1] store.  Reject undersized options.  [CVE-2026-58096]

mp_SetEnddisc() copied the "set enddisc psn" argument with strcpy() into
the fixed size enddisc address buffer.  Use strlcpy() and fail the
command if the argument does not fit.  [CVE-2026-58097]

ppp(8) is setuid root, so the first two are reachable by a malicious
peer and the third by any user permitted to run it.

This is FreeBSD-SA-26:60.ppp.

Obtained from:	FreeBSD
Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5
(cherry picked from commit b7e1a31adeb4ef341d97704c78bc9e60178f969d)



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:23:33 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:23:33 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] b7e1a3: ppp: fix three
 overflows in multilink endpoint dis...
Message-ID: <MidnightBSD/src/push/refs/heads/master/acf490-b7e1a3@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: b7e1a31adeb4ef341d97704c78bc9e60178f969d
      https://github.com/MidnightBSD/src/commit/b7e1a31adeb4ef341d97704c78bc9e60178f969d
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M usr.sbin/ppp/lcp.c
    M usr.sbin/ppp/mp.c

  Log Message:
  -----------
  ppp: fix three overflows in multilink endpoint discriminator handling

mp_Enddisc() formats an endpoint discriminator into a 100 byte static
buffer.  For the magic and unrecognised classes it emits two hex digits
per byte but clamped the length as though each byte took one character,
so a discriminator longer than about half the buffer overflowed it.
Clamp to half the remaining space, and cast through unsigned char so
bytes with the high bit set are not sign extended into eight digits.
[CVE-2026-58095]

LcpDecodeConfig() did not check that a received TY_ENDDISC option is at
least the three bytes RFC 1717 requires before computing "len - 3".  A
two byte option made that -1, which reached both memcpy() and an
address[-1] store.  Reject undersized options.  [CVE-2026-58096]

mp_SetEnddisc() copied the "set enddisc psn" argument with strcpy() into
the fixed size enddisc address buffer.  Use strlcpy() and fail the
command if the argument does not fit.  [CVE-2026-58097]

ppp(8) is setuid root, so the first two are reachable by a malicious
peer and the third by any user permitted to run it.

This is FreeBSD-SA-26:60.ppp.

Obtained from:	FreeBSD
Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:23:34 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:23:34 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 0f8a90: ppp: fix three
 overflows in multilink endpoint dis...
Message-ID: <MidnightBSD/src/push/refs/heads/stable/4.1/dca750-0f8a90@github.com>

  Branch: refs/heads/stable/4.1
  Home:   https://github.com/MidnightBSD/src
  Commit: 0f8a90d2efe6858a6113963629733a3cb0fc91f4
      https://github.com/MidnightBSD/src/commit/0f8a90d2efe6858a6113963629733a3cb0fc91f4
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M usr.sbin/ppp/lcp.c
    M usr.sbin/ppp/mp.c

  Log Message:
  -----------
  ppp: fix three overflows in multilink endpoint discriminator handling

mp_Enddisc() formats an endpoint discriminator into a 100 byte static
buffer.  For the magic and unrecognised classes it emits two hex digits
per byte but clamped the length as though each byte took one character,
so a discriminator longer than about half the buffer overflowed it.
Clamp to half the remaining space, and cast through unsigned char so
bytes with the high bit set are not sign extended into eight digits.
[CVE-2026-58095]

LcpDecodeConfig() did not check that a received TY_ENDDISC option is at
least the three bytes RFC 1717 requires before computing "len - 3".  A
two byte option made that -1, which reached both memcpy() and an
address[-1] store.  Reject undersized options.  [CVE-2026-58096]

mp_SetEnddisc() copied the "set enddisc psn" argument with strcpy() into
the fixed size enddisc address buffer.  Use strlcpy() and fail the
command if the argument does not fit.  [CVE-2026-58097]

ppp(8) is setuid root, so the first two are reachable by a malicious
peer and the third by any user permitted to run it.

This is FreeBSD-SA-26:60.ppp.

Obtained from:	FreeBSD
Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5
(cherry picked from commit b7e1a31adeb4ef341d97704c78bc9e60178f969d)



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:27:44 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:27:44 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 27fd4d: tty: revalidate the
 terminal after relocking in TI...
Message-ID: <MidnightBSD/src/push/refs/heads/stable/4.1/0f8a90-13679d@github.com>

  Branch: refs/heads/stable/4.1
  Home:   https://github.com/MidnightBSD/src
  Commit: 27fd4dd7a95acbf2bdd29de30aa52b76f5541fea
      https://github.com/MidnightBSD/src/commit/27fd4dd7a95acbf2bdd29de30aa52b76f5541fea
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M sys/kern/tty.c

  Log Message:
  -----------
  tty: revalidate the terminal after relocking in TIOCSCTTY and TIOCSPGRP

Both ioctls drop the tty lock so that they can take proctree_lock in the
correct order, then simply tty_lock() again.  Nothing was rechecked
after relocking, so a terminal that was being destroyed in the window
could still be linked into the calling process' session, leaving a
freed tty reachable through it.  An unprivileged local user could race
this to escalate privileges.

Relock with ttydev_enter(), which fails with ENXIO once the device is
gone or fully closed, and return that error with the tty relocked as the
caller expects.

This is CVE-2026-58093 / FreeBSD-SA-26:62.tty.

Obtained from:	FreeBSD
Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5
(cherry picked from commit 652567fbb4e827fe9e246319fb6278b271bf4b6f)


  Commit: 13679ddb8b73a79f0e5e0695dec712e0481eb59a
      https://github.com/MidnightBSD/src/commit/13679ddb8b73a79f0e5e0695dec712e0481eb59a
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M sys/kern/uipc_shm.c
    M sys/sys/mman.h

  Log Message:
  -----------
  posixshm: fix a TOCTOU race in the FIOSSHMLPGCNF handler

The FIOSSHMLPGCNF handler validated conf->psind against the object's
existing shm_lp_psind before taking the rangelock, and only then
assigned it.  Two threads could each see an unconfigured object and
proceed, so an object could end up with psind == 2 while only
pagesizes[1] worth of pages had been populated for it, which an
unprivileged local user can use to escalate privileges.

Acquire the rangelock before the checks and drop it on each error path.
While here, make shm_write() test shm_lp_psind under the rangelock too,
and have shm_mmap_large() assert that its caller holds it.

This is CVE-2026-58094 / FreeBSD-SA-26:63.posixshm.

Obtained from:	FreeBSD
Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5
(cherry picked from commit 99f13408f95dff486a818414660f9032712be485)


Compare: https://github.com/MidnightBSD/src/compare/0f8a90d2efe6...13679ddb8b73

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:27:44 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:27:44 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 652567: tty: revalidate the
 terminal after relocking in TI...
Message-ID: <MidnightBSD/src/push/refs/heads/master/b7e1a3-99f134@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 652567fbb4e827fe9e246319fb6278b271bf4b6f
      https://github.com/MidnightBSD/src/commit/652567fbb4e827fe9e246319fb6278b271bf4b6f
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M sys/kern/tty.c

  Log Message:
  -----------
  tty: revalidate the terminal after relocking in TIOCSCTTY and TIOCSPGRP

Both ioctls drop the tty lock so that they can take proctree_lock in the
correct order, then simply tty_lock() again.  Nothing was rechecked
after relocking, so a terminal that was being destroyed in the window
could still be linked into the calling process' session, leaving a
freed tty reachable through it.  An unprivileged local user could race
this to escalate privileges.

Relock with ttydev_enter(), which fails with ENXIO once the device is
gone or fully closed, and return that error with the tty relocked as the
caller expects.

This is CVE-2026-58093 / FreeBSD-SA-26:62.tty.

Obtained from:	FreeBSD
Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5


  Commit: 99f13408f95dff486a818414660f9032712be485
      https://github.com/MidnightBSD/src/commit/99f13408f95dff486a818414660f9032712be485
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M sys/kern/uipc_shm.c
    M sys/sys/mman.h

  Log Message:
  -----------
  posixshm: fix a TOCTOU race in the FIOSSHMLPGCNF handler

The FIOSSHMLPGCNF handler validated conf->psind against the object's
existing shm_lp_psind before taking the rangelock, and only then
assigned it.  Two threads could each see an unconfigured object and
proceed, so an object could end up with psind == 2 while only
pagesizes[1] worth of pages had been populated for it, which an
unprivileged local user can use to escalate privileges.

Acquire the rangelock before the checks and drop it on each error path.
While here, make shm_write() test shm_lp_psind under the rangelock too,
and have shm_mmap_large() assert that its caller holds it.

This is CVE-2026-58094 / FreeBSD-SA-26:63.posixshm.

Obtained from:	FreeBSD
Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5


Compare: https://github.com/MidnightBSD/src/compare/b7e1a31adeb4...99f13408f95d

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:27:43 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:27:43 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 54e75b: tty: revalidate the
 terminal after relocking in TI...
Message-ID: <MidnightBSD/src/push/refs/heads/stable/4.0/f4c672-1e2c48@github.com>

  Branch: refs/heads/stable/4.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 54e75b901150e4a9a523829722c87782a46aa471
      https://github.com/MidnightBSD/src/commit/54e75b901150e4a9a523829722c87782a46aa471
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M sys/kern/tty.c

  Log Message:
  -----------
  tty: revalidate the terminal after relocking in TIOCSCTTY and TIOCSPGRP

Both ioctls drop the tty lock so that they can take proctree_lock in the
correct order, then simply tty_lock() again.  Nothing was rechecked
after relocking, so a terminal that was being destroyed in the window
could still be linked into the calling process' session, leaving a
freed tty reachable through it.  An unprivileged local user could race
this to escalate privileges.

Relock with ttydev_enter(), which fails with ENXIO once the device is
gone or fully closed, and return that error with the tty relocked as the
caller expects.

This is CVE-2026-58093 / FreeBSD-SA-26:62.tty.

Obtained from:	FreeBSD
Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5
(cherry picked from commit 652567fbb4e827fe9e246319fb6278b271bf4b6f)


  Commit: 1e2c48c51ffe769d582ca1471b43967b15a2b0cd
      https://github.com/MidnightBSD/src/commit/1e2c48c51ffe769d582ca1471b43967b15a2b0cd
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M sys/kern/uipc_shm.c
    M sys/sys/mman.h

  Log Message:
  -----------
  posixshm: fix a TOCTOU race in the FIOSSHMLPGCNF handler

The FIOSSHMLPGCNF handler validated conf->psind against the object's
existing shm_lp_psind before taking the rangelock, and only then
assigned it.  Two threads could each see an unconfigured object and
proceed, so an object could end up with psind == 2 while only
pagesizes[1] worth of pages had been populated for it, which an
unprivileged local user can use to escalate privileges.

Acquire the rangelock before the checks and drop it on each error path.
While here, make shm_write() test shm_lp_psind under the rangelock too,
and have shm_mmap_large() assert that its caller holds it.

This is CVE-2026-58094 / FreeBSD-SA-26:63.posixshm.

Obtained from:	FreeBSD
Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5
(cherry picked from commit 99f13408f95dff486a818414660f9032712be485)


Compare: https://github.com/MidnightBSD/src/compare/f4c6725cbd9e...1e2c48c51ffe

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:55:47 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:55:47 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] c0abab: Vendor import of
 OpenSSL 3.0.22
Message-ID: <MidnightBSD/src/push/refs/heads/vendor/openssl/c62c24-c0abab@github.com>

  Branch: refs/heads/vendor/openssl
  Home:   https://github.com/MidnightBSD/src
  Commit: c0abab1c84d8f46007312b5ad25715aef8bec8ce
      https://github.com/MidnightBSD/src/commit/c0abab1c84d8f46007312b5ad25715aef8bec8ce
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M CHANGES.md
    M CONTRIBUTING.md
    M NEWS.md
    M README-FIPS.md
    M VERSION.dat
    M apps/lib/apps.c
    M apps/lib/vms_term_sock.c
    M apps/s_client.c
    R crypto/aes/aes_x86core.c
    M crypto/aes/asm/aesni-mb-x86_64.pl
    M crypto/aes/asm/aesni-sha1-x86_64.pl
    M crypto/aes/asm/aesni-sha256-x86_64.pl
    M crypto/asn1/a_d2i_fp.c
    M crypto/asn1/a_mbstr.c
    M crypto/asn1/asn1_gen.c
    M crypto/bn/asm/rsaz-avx2.pl
    M crypto/bn/asm/rsaz-x86_64.pl
    M crypto/bn/asm/x86_64-mont.pl
    M crypto/bn/asm/x86_64-mont5.pl
    M crypto/bn/bn_add.c
    M crypto/bn/bn_exp.c
    M crypto/bn/bn_lib.c
    M crypto/chacha/asm/chacha-x86.pl
    M crypto/chacha/asm/chacha-x86_64.pl
    M crypto/cmp/cmp_protect.c
    M crypto/cmp/cmp_vfy.c
    M crypto/cms/cms_asn1.c
    M crypto/cms/cms_env.c
    M crypto/cms/cms_kari.c
    M crypto/cms/cms_local.h
    M crypto/cms/cms_pwri.c
    M crypto/cms/cms_smime.c
    M crypto/ct/ct_b64.c
    M crypto/ctype.c
    M crypto/dh/dh_backend.c
    M crypto/dh/dh_check.c
    M crypto/ec/asm/ecp_nistz256-x86_64.pl
    M crypto/ec/asm/x25519-x86_64.pl
    M crypto/err/openssl.txt
    M crypto/ffc/ffc_params_generate.c
    M crypto/modes/asm/aesni-gcm-x86_64.pl
    M crypto/modes/asm/ghash-x86_64.pl
    M crypto/pem/pvkfmt.c
    M crypto/pkcs12/p12_add.c
    M crypto/pkcs12/p12_decr.c
    M crypto/pkcs12/p12_utl.c
    M crypto/pkcs7/pk7_doit.c
    M crypto/pkcs7/pk7_lib.c
    M crypto/poly1305/asm/poly1305-x86.pl
    M crypto/poly1305/asm/poly1305-x86_64.pl
    M crypto/rand/rand_lib.c
    M crypto/sha/asm/sha1-586.pl
    M crypto/sha/asm/sha1-mb-x86_64.pl
    M crypto/sha/asm/sha1-x86_64.pl
    M crypto/sha/asm/sha256-586.pl
    M crypto/sha/asm/sha256-mb-x86_64.pl
    M crypto/sha/asm/sha512-x86_64.pl
    M crypto/threads_win.c
    M crypto/x509/by_dir.c
    M crypto/x509/pcy_cache.c
    M crypto/x509/v3_ncons.c
    M crypto/x509/x509_err.c
    M crypto/x509/x509_vfy.c
    M crypto/x509/x_crl.c
    M crypto/x509/x_pubkey.c
    M doc/man3/ASN1_INTEGER_get_int64.pod
    M doc/man3/ASN1_aux_cb.pod
    M doc/man3/ASN1_item_d2i_bio.pod
    M doc/man3/BIO_s_datagram.pod
    M doc/man3/BN_generate_prime.pod
    M doc/man3/SSL_CTX_set_verify.pod
    M doc/man7/fips_module.pod
    M doc/man7/openssl-core_dispatch.h.pod
    M include/internal/constant_time.h
    M include/openssl/x509err.h
    M providers/baseprov.c
    M providers/defltprov.c
    M providers/fips-sources.checksums
    M providers/fips.checksum
    M providers/fips/fipsprov.c
    M providers/implementations/ciphers/cipher_aes_ocb.c
    M providers/implementations/ciphers/cipher_chacha20_poly1305.c
    M providers/implementations/ciphers/ciphercommon_ccm.c
    M providers/implementations/macs/poly1305_prov.c
    M providers/implementations/rands/test_rng.c
    M providers/implementations/signature/rsa_sig.c
    M providers/implementations/storemgmt/file_store_any2obj.c
    M ssl/record/rec_layer_d1.c
    M ssl/record/record.h
    M ssl/record/record_local.h
    M ssl/record/ssl3_record.c
    M ssl/s3_lib.c
    M ssl/statem/statem_clnt.c
    M ssl/statem/statem_srvr.c
    M ssl/t1_lib.c
    M test/asn1_decode_test.c
    M test/build.info
    A test/certs/delta-crl-as-complete-ca.pem
    A test/certs/delta-crl-as-complete-delta-reasons.pem
    A test/certs/delta-crl-as-complete-delta.pem
    A test/certs/delta-crl-as-complete-leaf.pem
    A test/certs/server-ec-compressed-cert.pem
    A test/certs/server-ec-compressed-key.pem
    A test/cmp_extracerts_dos_test.c
    M test/cmp_protect_test.c
    M test/cmsapitest.c
    M test/crltest.c
    M test/endecode_test.c
    M test/evp_extra_test.c
    M test/p_test.c
    M test/pkcs7_test.c
    M test/punycode_test.c
    A test/recipes/20-test_app_s_client.t
    M test/recipes/25-test_verify.t
    M test/recipes/30-test_evp_data/evprand.txt
    M test/recipes/65-test_cmp_msg.t
    M test/recipes/80-test_cms.t
    A test/recipes/80-test_cms_data/authenticated_attrs.pem
    A test/recipes/80-test_cms_data/authenveloped_attrs.pem
    A test/recipes/80-test_cms_data/bad_authenveloped_attrs.pem
    M test/recipes/80-test_cmsapi.t
    M test/recipes/80-test_ssl_new.t
    M test/secmemtest.c
    A test/ssl-tests/33-compressed-spki.cnf
    A test/ssl-tests/33-compressed-spki.cnf.in
    M test/v3ext.c
    M util/markdownlint.rb

  Log Message:
  -----------
  Vendor import of OpenSSL 3.0.22



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:55:49 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:55:49 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src]
Message-ID: <MidnightBSD/src/push/refs/tags/vendor/openssl/3.0.22/000000-c0abab@github.com>

  Branch: refs/tags/vendor/openssl/3.0.22
  Home:   https://github.com/MidnightBSD/src

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:56:09 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:56:09 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 08a555: OpenSSL: fix
 AES-WRAP-PAD heap overflow, cap buffe...
Message-ID: <MidnightBSD/src/push/refs/heads/stable/4.0/1e2c48-08a555@github.com>

  Branch: refs/heads/stable/4.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 08a555214df08ebd870f68da212a0f10e63c6b36
      https://github.com/MidnightBSD/src/commit/08a555214df08ebd870f68da212a0f10e63c6b36
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING
    M crypto/openssl/crypto/cms/cms_kari.c
    M crypto/openssl/ssl/record/rec_layer_d1.c
    M crypto/openssl/ssl/record/record_local.h
    M crypto/openssl/ssl/record/ssl3_record.c

  Log Message:
  -----------
  OpenSSL: fix AES-WRAP-PAD heap overflow, cap buffered DTLS records

Backport two fixes from OpenSSL 3.0.22 to the 1.1.1 branch, which is
end of life upstream and only receives these fixes in a premium support
release.

cms_kek_cipher() allocated its output buffer using the output length
reported by EVP_CipherUpdate(), but on its integrity-failure paths the
AES-WRAP-PAD primitive writes and cleanses up to the input length,
giving an 8 byte out-of-bounds heap write reachable through CMS key
unwrapping.  Size the buffer for that worst case.  [CVE-2026-63072]

dtls1_buffer_record() capped each of its three queues at 100 entries,
each holding an entire read buffer.  A peer can send a stream of tiny
next-epoch records and force disproportionate heap use.  Upstream both
stopped taking the whole read buffer and lowered the next-epoch queue
limit; take the limit change here, which needs no rework of the record
layer: dtls1_buffer_record() now takes the limit as an argument and the
unprocessed_rcds queue passes 16 rather than 100.  The other two queues
are unchanged - processed_rcds is filled from unprocessed_rcds and so
cannot exceed it, and buffered_app_data holds real application data.
This bounds the amplification rather than eliminating it.
[CVE-2026-54874, partial]

The remaining CVEs in FreeBSD-SA-26:61.openssl do not apply to 1.1.1:
the CMP issues (CVE-2026-63073, CVE-2026-63074, CVE-2026-63076) need
code that 1.1.1 does not have, the QUIC and raw public key issues
(CVE-2026-14457, CVE-2026-18798, CVE-2026-63075) are 3.4 and later, and
CVE-2026-75803 is 3.0 and later.

Obtained from:	OpenSSL (3.0.22)
Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:56:09 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:56:09 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] c0abab: Vendor import of
 OpenSSL 3.0.22
Message-ID: <MidnightBSD/src/push/refs/heads/master/99f134-565695@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: c0abab1c84d8f46007312b5ad25715aef8bec8ce
      https://github.com/MidnightBSD/src/commit/c0abab1c84d8f46007312b5ad25715aef8bec8ce
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M CHANGES.md
    M CONTRIBUTING.md
    M NEWS.md
    M README-FIPS.md
    M VERSION.dat
    M apps/lib/apps.c
    M apps/lib/vms_term_sock.c
    M apps/s_client.c
    R crypto/aes/aes_x86core.c
    M crypto/aes/asm/aesni-mb-x86_64.pl
    M crypto/aes/asm/aesni-sha1-x86_64.pl
    M crypto/aes/asm/aesni-sha256-x86_64.pl
    M crypto/asn1/a_d2i_fp.c
    M crypto/asn1/a_mbstr.c
    M crypto/asn1/asn1_gen.c
    M crypto/bn/asm/rsaz-avx2.pl
    M crypto/bn/asm/rsaz-x86_64.pl
    M crypto/bn/asm/x86_64-mont.pl
    M crypto/bn/asm/x86_64-mont5.pl
    M crypto/bn/bn_add.c
    M crypto/bn/bn_exp.c
    M crypto/bn/bn_lib.c
    M crypto/chacha/asm/chacha-x86.pl
    M crypto/chacha/asm/chacha-x86_64.pl
    M crypto/cmp/cmp_protect.c
    M crypto/cmp/cmp_vfy.c
    M crypto/cms/cms_asn1.c
    M crypto/cms/cms_env.c
    M crypto/cms/cms_kari.c
    M crypto/cms/cms_local.h
    M crypto/cms/cms_pwri.c
    M crypto/cms/cms_smime.c
    M crypto/ct/ct_b64.c
    M crypto/ctype.c
    M crypto/dh/dh_backend.c
    M crypto/dh/dh_check.c
    M crypto/ec/asm/ecp_nistz256-x86_64.pl
    M crypto/ec/asm/x25519-x86_64.pl
    M crypto/err/openssl.txt
    M crypto/ffc/ffc_params_generate.c
    M crypto/modes/asm/aesni-gcm-x86_64.pl
    M crypto/modes/asm/ghash-x86_64.pl
    M crypto/pem/pvkfmt.c
    M crypto/pkcs12/p12_add.c
    M crypto/pkcs12/p12_decr.c
    M crypto/pkcs12/p12_utl.c
    M crypto/pkcs7/pk7_doit.c
    M crypto/pkcs7/pk7_lib.c
    M crypto/poly1305/asm/poly1305-x86.pl
    M crypto/poly1305/asm/poly1305-x86_64.pl
    M crypto/rand/rand_lib.c
    M crypto/sha/asm/sha1-586.pl
    M crypto/sha/asm/sha1-mb-x86_64.pl
    M crypto/sha/asm/sha1-x86_64.pl
    M crypto/sha/asm/sha256-586.pl
    M crypto/sha/asm/sha256-mb-x86_64.pl
    M crypto/sha/asm/sha512-x86_64.pl
    M crypto/threads_win.c
    M crypto/x509/by_dir.c
    M crypto/x509/pcy_cache.c
    M crypto/x509/v3_ncons.c
    M crypto/x509/x509_err.c
    M crypto/x509/x509_vfy.c
    M crypto/x509/x_crl.c
    M crypto/x509/x_pubkey.c
    M doc/man3/ASN1_INTEGER_get_int64.pod
    M doc/man3/ASN1_aux_cb.pod
    M doc/man3/ASN1_item_d2i_bio.pod
    M doc/man3/BIO_s_datagram.pod
    M doc/man3/BN_generate_prime.pod
    M doc/man3/SSL_CTX_set_verify.pod
    M doc/man7/fips_module.pod
    M doc/man7/openssl-core_dispatch.h.pod
    M include/internal/constant_time.h
    M include/openssl/x509err.h
    M providers/baseprov.c
    M providers/defltprov.c
    M providers/fips-sources.checksums
    M providers/fips.checksum
    M providers/fips/fipsprov.c
    M providers/implementations/ciphers/cipher_aes_ocb.c
    M providers/implementations/ciphers/cipher_chacha20_poly1305.c
    M providers/implementations/ciphers/ciphercommon_ccm.c
    M providers/implementations/macs/poly1305_prov.c
    M providers/implementations/rands/test_rng.c
    M providers/implementations/signature/rsa_sig.c
    M providers/implementations/storemgmt/file_store_any2obj.c
    M ssl/record/rec_layer_d1.c
    M ssl/record/record.h
    M ssl/record/record_local.h
    M ssl/record/ssl3_record.c
    M ssl/s3_lib.c
    M ssl/statem/statem_clnt.c
    M ssl/statem/statem_srvr.c
    M ssl/t1_lib.c
    M test/asn1_decode_test.c
    M test/build.info
    A test/certs/delta-crl-as-complete-ca.pem
    A test/certs/delta-crl-as-complete-delta-reasons.pem
    A test/certs/delta-crl-as-complete-delta.pem
    A test/certs/delta-crl-as-complete-leaf.pem
    A test/certs/server-ec-compressed-cert.pem
    A test/certs/server-ec-compressed-key.pem
    A test/cmp_extracerts_dos_test.c
    M test/cmp_protect_test.c
    M test/cmsapitest.c
    M test/crltest.c
    M test/endecode_test.c
    M test/evp_extra_test.c
    M test/p_test.c
    M test/pkcs7_test.c
    M test/punycode_test.c
    A test/recipes/20-test_app_s_client.t
    M test/recipes/25-test_verify.t
    M test/recipes/30-test_evp_data/evprand.txt
    M test/recipes/65-test_cmp_msg.t
    M test/recipes/80-test_cms.t
    A test/recipes/80-test_cms_data/authenticated_attrs.pem
    A test/recipes/80-test_cms_data/authenveloped_attrs.pem
    A test/recipes/80-test_cms_data/bad_authenveloped_attrs.pem
    M test/recipes/80-test_cmsapi.t
    M test/recipes/80-test_ssl_new.t
    M test/secmemtest.c
    A test/ssl-tests/33-compressed-spki.cnf
    A test/ssl-tests/33-compressed-spki.cnf.in
    M test/v3ext.c
    M util/markdownlint.rb

  Log Message:
  -----------
  Vendor import of OpenSSL 3.0.22


  Commit: f3aaa6315f11700b1892fc56c7bf2600afd9cdd3
      https://github.com/MidnightBSD/src/commit/f3aaa6315f11700b1892fc56c7bf2600afd9cdd3
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M crypto/openssl/CHANGES.md
    M crypto/openssl/CONTRIBUTING.md
    M crypto/openssl/NEWS.md
    M crypto/openssl/README-FIPS.md
    M crypto/openssl/VERSION.dat
    M crypto/openssl/apps/lib/apps.c
    M crypto/openssl/apps/lib/vms_term_sock.c
    M crypto/openssl/apps/s_client.c
    R crypto/openssl/crypto/aes/aes_x86core.c
    M crypto/openssl/crypto/aes/asm/aesni-mb-x86_64.pl
    M crypto/openssl/crypto/aes/asm/aesni-sha1-x86_64.pl
    M crypto/openssl/crypto/aes/asm/aesni-sha256-x86_64.pl
    M crypto/openssl/crypto/asn1/a_d2i_fp.c
    M crypto/openssl/crypto/asn1/a_mbstr.c
    M crypto/openssl/crypto/asn1/asn1_gen.c
    M crypto/openssl/crypto/bn/asm/rsaz-avx2.pl
    M crypto/openssl/crypto/bn/asm/rsaz-x86_64.pl
    M crypto/openssl/crypto/bn/asm/x86_64-mont.pl
    M crypto/openssl/crypto/bn/asm/x86_64-mont5.pl
    M crypto/openssl/crypto/bn/bn_add.c
    M crypto/openssl/crypto/bn/bn_exp.c
    M crypto/openssl/crypto/bn/bn_lib.c
    M crypto/openssl/crypto/chacha/asm/chacha-x86.pl
    M crypto/openssl/crypto/chacha/asm/chacha-x86_64.pl
    M crypto/openssl/crypto/cmp/cmp_protect.c
    M crypto/openssl/crypto/cmp/cmp_vfy.c
    M crypto/openssl/crypto/cms/cms_asn1.c
    M crypto/openssl/crypto/cms/cms_env.c
    M crypto/openssl/crypto/cms/cms_kari.c
    M crypto/openssl/crypto/cms/cms_local.h
    M crypto/openssl/crypto/cms/cms_pwri.c
    M crypto/openssl/crypto/cms/cms_smime.c
    M crypto/openssl/crypto/ct/ct_b64.c
    M crypto/openssl/crypto/ctype.c
    M crypto/openssl/crypto/dh/dh_backend.c
    M crypto/openssl/crypto/dh/dh_check.c
    M crypto/openssl/crypto/ec/asm/ecp_nistz256-x86_64.pl
    M crypto/openssl/crypto/ec/asm/x25519-x86_64.pl
    M crypto/openssl/crypto/err/openssl.txt
    M crypto/openssl/crypto/ffc/ffc_params_generate.c
    M crypto/openssl/crypto/modes/asm/aesni-gcm-x86_64.pl
    M crypto/openssl/crypto/modes/asm/ghash-x86_64.pl
    M crypto/openssl/crypto/pem/pvkfmt.c
    M crypto/openssl/crypto/pkcs12/p12_add.c
    M crypto/openssl/crypto/pkcs12/p12_decr.c
    M crypto/openssl/crypto/pkcs12/p12_utl.c
    M crypto/openssl/crypto/pkcs7/pk7_doit.c
    M crypto/openssl/crypto/pkcs7/pk7_lib.c
    M crypto/openssl/crypto/poly1305/asm/poly1305-x86.pl
    M crypto/openssl/crypto/poly1305/asm/poly1305-x86_64.pl
    M crypto/openssl/crypto/rand/rand_lib.c
    M crypto/openssl/crypto/sha/asm/sha1-586.pl
    M crypto/openssl/crypto/sha/asm/sha1-mb-x86_64.pl
    M crypto/openssl/crypto/sha/asm/sha1-x86_64.pl
    M crypto/openssl/crypto/sha/asm/sha256-586.pl
    M crypto/openssl/crypto/sha/asm/sha256-mb-x86_64.pl
    M crypto/openssl/crypto/sha/asm/sha512-x86_64.pl
    M crypto/openssl/crypto/threads_win.c
    M crypto/openssl/crypto/x509/by_dir.c
    M crypto/openssl/crypto/x509/pcy_cache.c
    M crypto/openssl/crypto/x509/v3_ncons.c
    M crypto/openssl/crypto/x509/x509_err.c
    M crypto/openssl/crypto/x509/x509_vfy.c
    M crypto/openssl/crypto/x509/x_crl.c
    M crypto/openssl/crypto/x509/x_pubkey.c
    M crypto/openssl/doc/man3/ASN1_INTEGER_get_int64.pod
    M crypto/openssl/doc/man3/ASN1_aux_cb.pod
    M crypto/openssl/doc/man3/ASN1_item_d2i_bio.pod
    M crypto/openssl/doc/man3/BIO_s_datagram.pod
    M crypto/openssl/doc/man3/BN_generate_prime.pod
    M crypto/openssl/doc/man3/SSL_CTX_set_verify.pod
    M crypto/openssl/doc/man7/fips_module.pod
    M crypto/openssl/doc/man7/openssl-core_dispatch.h.pod
    M crypto/openssl/include/internal/constant_time.h
    M crypto/openssl/include/openssl/x509err.h
    M crypto/openssl/providers/baseprov.c
    M crypto/openssl/providers/defltprov.c
    M crypto/openssl/providers/fips-sources.checksums
    M crypto/openssl/providers/fips.checksum
    M crypto/openssl/providers/fips/fipsprov.c
    M crypto/openssl/providers/implementations/ciphers/cipher_aes_ocb.c
    M crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305.c
    M crypto/openssl/providers/implementations/ciphers/ciphercommon_ccm.c
    M crypto/openssl/providers/implementations/macs/poly1305_prov.c
    M crypto/openssl/providers/implementations/rands/test_rng.c
    M crypto/openssl/providers/implementations/signature/rsa_sig.c
    M crypto/openssl/providers/implementations/storemgmt/file_store_any2obj.c
    M crypto/openssl/ssl/record/rec_layer_d1.c
    M crypto/openssl/ssl/record/record.h
    M crypto/openssl/ssl/record/record_local.h
    M crypto/openssl/ssl/record/ssl3_record.c
    M crypto/openssl/ssl/s3_lib.c
    M crypto/openssl/ssl/statem/statem_clnt.c
    M crypto/openssl/ssl/statem/statem_srvr.c
    M crypto/openssl/ssl/t1_lib.c
    M crypto/openssl/test/asn1_decode_test.c
    M crypto/openssl/test/build.info
    A crypto/openssl/test/certs/delta-crl-as-complete-ca.pem
    A crypto/openssl/test/certs/delta-crl-as-complete-delta-reasons.pem
    A crypto/openssl/test/certs/delta-crl-as-complete-delta.pem
    A crypto/openssl/test/certs/delta-crl-as-complete-leaf.pem
    A crypto/openssl/test/certs/server-ec-compressed-cert.pem
    A crypto/openssl/test/certs/server-ec-compressed-key.pem
    A crypto/openssl/test/cmp_extracerts_dos_test.c
    M crypto/openssl/test/cmp_protect_test.c
    M crypto/openssl/test/cmsapitest.c
    M crypto/openssl/test/crltest.c
    M crypto/openssl/test/endecode_test.c
    M crypto/openssl/test/evp_extra_test.c
    M crypto/openssl/test/p_test.c
    M crypto/openssl/test/pkcs7_test.c
    M crypto/openssl/test/punycode_test.c
    A crypto/openssl/test/recipes/20-test_app_s_client.t
    M crypto/openssl/test/recipes/25-test_verify.t
    M crypto/openssl/test/recipes/30-test_evp_data/evprand.txt
    M crypto/openssl/test/recipes/65-test_cmp_msg.t
    M crypto/openssl/test/recipes/80-test_cms.t
    A crypto/openssl/test/recipes/80-test_cms_data/authenticated_attrs.pem
    A crypto/openssl/test/recipes/80-test_cms_data/authenveloped_attrs.pem
    A crypto/openssl/test/recipes/80-test_cms_data/bad_authenveloped_attrs.pem
    M crypto/openssl/test/recipes/80-test_cmsapi.t
    M crypto/openssl/test/recipes/80-test_ssl_new.t
    M crypto/openssl/test/secmemtest.c
    A crypto/openssl/test/ssl-tests/33-compressed-spki.cnf
    A crypto/openssl/test/ssl-tests/33-compressed-spki.cnf.in
    M crypto/openssl/test/v3ext.c
    M crypto/openssl/util/markdownlint.rb

  Log Message:
  -----------
  Merge OpenSSL 3.0.22 from vendor branch

Merge vendor/openssl 3.0.22 into crypto/openssl.

Vendor commit: c0abab1c84

AI-Assisted-by: Claude Opus 5


  Commit: 5656955eaec1121eda1d3c478922a77cd81f14f4
      https://github.com/MidnightBSD/src/commit/5656955eaec1121eda1d3c478922a77cd81f14f4
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  UPDATING: note OpenSSL 3.0.22

Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5


Compare: https://github.com/MidnightBSD/src/compare/99f13408f95d...5656955eaec1

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 00:56:10 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 21:56:10 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] c0abab: Vendor import of
 OpenSSL 3.0.22
Message-ID: <MidnightBSD/src/push/refs/heads/stable/4.1/13679d-58d9e8@github.com>

  Branch: refs/heads/stable/4.1
  Home:   https://github.com/MidnightBSD/src
  Commit: c0abab1c84d8f46007312b5ad25715aef8bec8ce
      https://github.com/MidnightBSD/src/commit/c0abab1c84d8f46007312b5ad25715aef8bec8ce
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M CHANGES.md
    M CONTRIBUTING.md
    M NEWS.md
    M README-FIPS.md
    M VERSION.dat
    M apps/lib/apps.c
    M apps/lib/vms_term_sock.c
    M apps/s_client.c
    R crypto/aes/aes_x86core.c
    M crypto/aes/asm/aesni-mb-x86_64.pl
    M crypto/aes/asm/aesni-sha1-x86_64.pl
    M crypto/aes/asm/aesni-sha256-x86_64.pl
    M crypto/asn1/a_d2i_fp.c
    M crypto/asn1/a_mbstr.c
    M crypto/asn1/asn1_gen.c
    M crypto/bn/asm/rsaz-avx2.pl
    M crypto/bn/asm/rsaz-x86_64.pl
    M crypto/bn/asm/x86_64-mont.pl
    M crypto/bn/asm/x86_64-mont5.pl
    M crypto/bn/bn_add.c
    M crypto/bn/bn_exp.c
    M crypto/bn/bn_lib.c
    M crypto/chacha/asm/chacha-x86.pl
    M crypto/chacha/asm/chacha-x86_64.pl
    M crypto/cmp/cmp_protect.c
    M crypto/cmp/cmp_vfy.c
    M crypto/cms/cms_asn1.c
    M crypto/cms/cms_env.c
    M crypto/cms/cms_kari.c
    M crypto/cms/cms_local.h
    M crypto/cms/cms_pwri.c
    M crypto/cms/cms_smime.c
    M crypto/ct/ct_b64.c
    M crypto/ctype.c
    M crypto/dh/dh_backend.c
    M crypto/dh/dh_check.c
    M crypto/ec/asm/ecp_nistz256-x86_64.pl
    M crypto/ec/asm/x25519-x86_64.pl
    M crypto/err/openssl.txt
    M crypto/ffc/ffc_params_generate.c
    M crypto/modes/asm/aesni-gcm-x86_64.pl
    M crypto/modes/asm/ghash-x86_64.pl
    M crypto/pem/pvkfmt.c
    M crypto/pkcs12/p12_add.c
    M crypto/pkcs12/p12_decr.c
    M crypto/pkcs12/p12_utl.c
    M crypto/pkcs7/pk7_doit.c
    M crypto/pkcs7/pk7_lib.c
    M crypto/poly1305/asm/poly1305-x86.pl
    M crypto/poly1305/asm/poly1305-x86_64.pl
    M crypto/rand/rand_lib.c
    M crypto/sha/asm/sha1-586.pl
    M crypto/sha/asm/sha1-mb-x86_64.pl
    M crypto/sha/asm/sha1-x86_64.pl
    M crypto/sha/asm/sha256-586.pl
    M crypto/sha/asm/sha256-mb-x86_64.pl
    M crypto/sha/asm/sha512-x86_64.pl
    M crypto/threads_win.c
    M crypto/x509/by_dir.c
    M crypto/x509/pcy_cache.c
    M crypto/x509/v3_ncons.c
    M crypto/x509/x509_err.c
    M crypto/x509/x509_vfy.c
    M crypto/x509/x_crl.c
    M crypto/x509/x_pubkey.c
    M doc/man3/ASN1_INTEGER_get_int64.pod
    M doc/man3/ASN1_aux_cb.pod
    M doc/man3/ASN1_item_d2i_bio.pod
    M doc/man3/BIO_s_datagram.pod
    M doc/man3/BN_generate_prime.pod
    M doc/man3/SSL_CTX_set_verify.pod
    M doc/man7/fips_module.pod
    M doc/man7/openssl-core_dispatch.h.pod
    M include/internal/constant_time.h
    M include/openssl/x509err.h
    M providers/baseprov.c
    M providers/defltprov.c
    M providers/fips-sources.checksums
    M providers/fips.checksum
    M providers/fips/fipsprov.c
    M providers/implementations/ciphers/cipher_aes_ocb.c
    M providers/implementations/ciphers/cipher_chacha20_poly1305.c
    M providers/implementations/ciphers/ciphercommon_ccm.c
    M providers/implementations/macs/poly1305_prov.c
    M providers/implementations/rands/test_rng.c
    M providers/implementations/signature/rsa_sig.c
    M providers/implementations/storemgmt/file_store_any2obj.c
    M ssl/record/rec_layer_d1.c
    M ssl/record/record.h
    M ssl/record/record_local.h
    M ssl/record/ssl3_record.c
    M ssl/s3_lib.c
    M ssl/statem/statem_clnt.c
    M ssl/statem/statem_srvr.c
    M ssl/t1_lib.c
    M test/asn1_decode_test.c
    M test/build.info
    A test/certs/delta-crl-as-complete-ca.pem
    A test/certs/delta-crl-as-complete-delta-reasons.pem
    A test/certs/delta-crl-as-complete-delta.pem
    A test/certs/delta-crl-as-complete-leaf.pem
    A test/certs/server-ec-compressed-cert.pem
    A test/certs/server-ec-compressed-key.pem
    A test/cmp_extracerts_dos_test.c
    M test/cmp_protect_test.c
    M test/cmsapitest.c
    M test/crltest.c
    M test/endecode_test.c
    M test/evp_extra_test.c
    M test/p_test.c
    M test/pkcs7_test.c
    M test/punycode_test.c
    A test/recipes/20-test_app_s_client.t
    M test/recipes/25-test_verify.t
    M test/recipes/30-test_evp_data/evprand.txt
    M test/recipes/65-test_cmp_msg.t
    M test/recipes/80-test_cms.t
    A test/recipes/80-test_cms_data/authenticated_attrs.pem
    A test/recipes/80-test_cms_data/authenveloped_attrs.pem
    A test/recipes/80-test_cms_data/bad_authenveloped_attrs.pem
    M test/recipes/80-test_cmsapi.t
    M test/recipes/80-test_ssl_new.t
    M test/secmemtest.c
    A test/ssl-tests/33-compressed-spki.cnf
    A test/ssl-tests/33-compressed-spki.cnf.in
    M test/v3ext.c
    M util/markdownlint.rb

  Log Message:
  -----------
  Vendor import of OpenSSL 3.0.22


  Commit: 2b520554bded70b840f536a42080d98b71bb9f0e
      https://github.com/MidnightBSD/src/commit/2b520554bded70b840f536a42080d98b71bb9f0e
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M crypto/openssl/CHANGES.md
    M crypto/openssl/CONTRIBUTING.md
    M crypto/openssl/NEWS.md
    M crypto/openssl/README-FIPS.md
    M crypto/openssl/VERSION.dat
    M crypto/openssl/apps/lib/apps.c
    M crypto/openssl/apps/lib/vms_term_sock.c
    M crypto/openssl/apps/s_client.c
    R crypto/openssl/crypto/aes/aes_x86core.c
    M crypto/openssl/crypto/aes/asm/aesni-mb-x86_64.pl
    M crypto/openssl/crypto/aes/asm/aesni-sha1-x86_64.pl
    M crypto/openssl/crypto/aes/asm/aesni-sha256-x86_64.pl
    M crypto/openssl/crypto/asn1/a_d2i_fp.c
    M crypto/openssl/crypto/asn1/a_mbstr.c
    M crypto/openssl/crypto/asn1/asn1_gen.c
    M crypto/openssl/crypto/bn/asm/rsaz-avx2.pl
    M crypto/openssl/crypto/bn/asm/rsaz-x86_64.pl
    M crypto/openssl/crypto/bn/asm/x86_64-mont.pl
    M crypto/openssl/crypto/bn/asm/x86_64-mont5.pl
    M crypto/openssl/crypto/bn/bn_add.c
    M crypto/openssl/crypto/bn/bn_exp.c
    M crypto/openssl/crypto/bn/bn_lib.c
    M crypto/openssl/crypto/chacha/asm/chacha-x86.pl
    M crypto/openssl/crypto/chacha/asm/chacha-x86_64.pl
    M crypto/openssl/crypto/cmp/cmp_protect.c
    M crypto/openssl/crypto/cmp/cmp_vfy.c
    M crypto/openssl/crypto/cms/cms_asn1.c
    M crypto/openssl/crypto/cms/cms_env.c
    M crypto/openssl/crypto/cms/cms_kari.c
    M crypto/openssl/crypto/cms/cms_local.h
    M crypto/openssl/crypto/cms/cms_pwri.c
    M crypto/openssl/crypto/cms/cms_smime.c
    M crypto/openssl/crypto/ct/ct_b64.c
    M crypto/openssl/crypto/ctype.c
    M crypto/openssl/crypto/dh/dh_backend.c
    M crypto/openssl/crypto/dh/dh_check.c
    M crypto/openssl/crypto/ec/asm/ecp_nistz256-x86_64.pl
    M crypto/openssl/crypto/ec/asm/x25519-x86_64.pl
    M crypto/openssl/crypto/err/openssl.txt
    M crypto/openssl/crypto/ffc/ffc_params_generate.c
    M crypto/openssl/crypto/modes/asm/aesni-gcm-x86_64.pl
    M crypto/openssl/crypto/modes/asm/ghash-x86_64.pl
    M crypto/openssl/crypto/pem/pvkfmt.c
    M crypto/openssl/crypto/pkcs12/p12_add.c
    M crypto/openssl/crypto/pkcs12/p12_decr.c
    M crypto/openssl/crypto/pkcs12/p12_utl.c
    M crypto/openssl/crypto/pkcs7/pk7_doit.c
    M crypto/openssl/crypto/pkcs7/pk7_lib.c
    M crypto/openssl/crypto/poly1305/asm/poly1305-x86.pl
    M crypto/openssl/crypto/poly1305/asm/poly1305-x86_64.pl
    M crypto/openssl/crypto/rand/rand_lib.c
    M crypto/openssl/crypto/sha/asm/sha1-586.pl
    M crypto/openssl/crypto/sha/asm/sha1-mb-x86_64.pl
    M crypto/openssl/crypto/sha/asm/sha1-x86_64.pl
    M crypto/openssl/crypto/sha/asm/sha256-586.pl
    M crypto/openssl/crypto/sha/asm/sha256-mb-x86_64.pl
    M crypto/openssl/crypto/sha/asm/sha512-x86_64.pl
    M crypto/openssl/crypto/threads_win.c
    M crypto/openssl/crypto/x509/by_dir.c
    M crypto/openssl/crypto/x509/pcy_cache.c
    M crypto/openssl/crypto/x509/v3_ncons.c
    M crypto/openssl/crypto/x509/x509_err.c
    M crypto/openssl/crypto/x509/x509_vfy.c
    M crypto/openssl/crypto/x509/x_crl.c
    M crypto/openssl/crypto/x509/x_pubkey.c
    M crypto/openssl/doc/man3/ASN1_INTEGER_get_int64.pod
    M crypto/openssl/doc/man3/ASN1_aux_cb.pod
    M crypto/openssl/doc/man3/ASN1_item_d2i_bio.pod
    M crypto/openssl/doc/man3/BIO_s_datagram.pod
    M crypto/openssl/doc/man3/BN_generate_prime.pod
    M crypto/openssl/doc/man3/SSL_CTX_set_verify.pod
    M crypto/openssl/doc/man7/fips_module.pod
    M crypto/openssl/doc/man7/openssl-core_dispatch.h.pod
    M crypto/openssl/include/internal/constant_time.h
    M crypto/openssl/include/openssl/x509err.h
    M crypto/openssl/providers/baseprov.c
    M crypto/openssl/providers/defltprov.c
    M crypto/openssl/providers/fips-sources.checksums
    M crypto/openssl/providers/fips.checksum
    M crypto/openssl/providers/fips/fipsprov.c
    M crypto/openssl/providers/implementations/ciphers/cipher_aes_ocb.c
    M crypto/openssl/providers/implementations/ciphers/cipher_chacha20_poly1305.c
    M crypto/openssl/providers/implementations/ciphers/ciphercommon_ccm.c
    M crypto/openssl/providers/implementations/macs/poly1305_prov.c
    M crypto/openssl/providers/implementations/rands/test_rng.c
    M crypto/openssl/providers/implementations/signature/rsa_sig.c
    M crypto/openssl/providers/implementations/storemgmt/file_store_any2obj.c
    M crypto/openssl/ssl/record/rec_layer_d1.c
    M crypto/openssl/ssl/record/record.h
    M crypto/openssl/ssl/record/record_local.h
    M crypto/openssl/ssl/record/ssl3_record.c
    M crypto/openssl/ssl/s3_lib.c
    M crypto/openssl/ssl/statem/statem_clnt.c
    M crypto/openssl/ssl/statem/statem_srvr.c
    M crypto/openssl/ssl/t1_lib.c
    M crypto/openssl/test/asn1_decode_test.c
    M crypto/openssl/test/build.info
    A crypto/openssl/test/certs/delta-crl-as-complete-ca.pem
    A crypto/openssl/test/certs/delta-crl-as-complete-delta-reasons.pem
    A crypto/openssl/test/certs/delta-crl-as-complete-delta.pem
    A crypto/openssl/test/certs/delta-crl-as-complete-leaf.pem
    A crypto/openssl/test/certs/server-ec-compressed-cert.pem
    A crypto/openssl/test/certs/server-ec-compressed-key.pem
    A crypto/openssl/test/cmp_extracerts_dos_test.c
    M crypto/openssl/test/cmp_protect_test.c
    M crypto/openssl/test/cmsapitest.c
    M crypto/openssl/test/crltest.c
    M crypto/openssl/test/endecode_test.c
    M crypto/openssl/test/evp_extra_test.c
    M crypto/openssl/test/p_test.c
    M crypto/openssl/test/pkcs7_test.c
    M crypto/openssl/test/punycode_test.c
    A crypto/openssl/test/recipes/20-test_app_s_client.t
    M crypto/openssl/test/recipes/25-test_verify.t
    M crypto/openssl/test/recipes/30-test_evp_data/evprand.txt
    M crypto/openssl/test/recipes/65-test_cmp_msg.t
    M crypto/openssl/test/recipes/80-test_cms.t
    A crypto/openssl/test/recipes/80-test_cms_data/authenticated_attrs.pem
    A crypto/openssl/test/recipes/80-test_cms_data/authenveloped_attrs.pem
    A crypto/openssl/test/recipes/80-test_cms_data/bad_authenveloped_attrs.pem
    M crypto/openssl/test/recipes/80-test_cmsapi.t
    M crypto/openssl/test/recipes/80-test_ssl_new.t
    M crypto/openssl/test/secmemtest.c
    A crypto/openssl/test/ssl-tests/33-compressed-spki.cnf
    A crypto/openssl/test/ssl-tests/33-compressed-spki.cnf.in
    M crypto/openssl/test/v3ext.c
    M crypto/openssl/util/markdownlint.rb

  Log Message:
  -----------
  Merge OpenSSL 3.0.22 from vendor branch

Merge vendor/openssl 3.0.22 into crypto/openssl.

Vendor commit: c0abab1c84

AI-Assisted-by: Claude Opus 5


  Commit: 58d9e81ebd603f06706663daefd04677c9a9e1ec
      https://github.com/MidnightBSD/src/commit/58d9e81ebd603f06706663daefd04677c9a9e1ec
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  UPDATING: note OpenSSL 3.0.22

Signed-off-by: Lucas Holt <luke at foolishgames.com>
AI-Assisted-by: Claude Opus 5
(cherry picked from commit 5656955eaec1121eda1d3c478922a77cd81f14f4)


Compare: https://github.com/MidnightBSD/src/compare/13679ddb8b73...58d9e81ebd60

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 01:02:00 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 22:02:00 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 766709: Update revision to
 4.0.8 in newvers.sh
Message-ID: <MidnightBSD/src/push/refs/heads/laffer1-patch-2/000000-766709@github.com>

  Branch: refs/heads/laffer1-patch-2
  Home:   https://github.com/MidnightBSD/src
  Commit: 766709dc6d64ede9c60adae7e772d0482006aa52
      https://github.com/MidnightBSD/src/commit/766709dc6d64ede9c60adae7e772d0482006aa52
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M sys/conf/newvers.sh

  Log Message:
  -----------
  Update revision to 4.0.8 in newvers.sh

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 01:02:21 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 22:02:21 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 026909: Update revision to
 4.0.8 in newvers.sh (#490)
Message-ID: <MidnightBSD/src/push/refs/heads/stable/4.0/08a555-026909@github.com>

  Branch: refs/heads/stable/4.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 026909d0ee8faeca0766ef184e6d7b26605936ab
      https://github.com/MidnightBSD/src/commit/026909d0ee8faeca0766ef184e6d7b26605936ab
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M sys/conf/newvers.sh

  Log Message:
  -----------
  Update revision to 4.0.8 in newvers.sh (#490)

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 01:02:23 2026
From: noreply at github.com (Lucas Holt)
Date: Tue, 25 Aug 2026 22:02:23 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src]
Message-ID: <MidnightBSD/src/push/refs/heads/laffer1-patch-2/766709-000000@github.com>

  Branch: refs/heads/laffer1-patch-2
  Home:   https://github.com/MidnightBSD/src

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Wed Aug 26 09:30:32 2026
From: noreply at github.com (Lucas Holt)
Date: Wed, 26 Aug 2026 06:30:32 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 036407: mail/thunderbird:
 update to 154.0
Message-ID: <MidnightBSD/mports/push/refs/heads/mail/thunderbird/000000-036407@github.com>

  Branch: refs/heads/mail/thunderbird
  Home:   https://github.com/MidnightBSD/mports
  Commit: 0364078b21b2f3913ec2d4f5deb0044834469e7a
      https://github.com/MidnightBSD/mports/commit/0364078b21b2f3913ec2d4f5deb0044834469e7a
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M mail/thunderbird/Makefile
    M mail/thunderbird/distinfo
    A mail/thunderbird/files/patch-third__party_angle_angle__common__gn_moz.build
    A mail/thunderbird/files/patch-third__party_angle_angle__program__version__id__gn_moz.build
    A mail/thunderbird/files/patch-toolkit_xre_nsXREDirProvider.cpp
    M mail/thunderbird/files/patch-xpcom_base_nsMemoryInfoDumper.cpp

  Log Message:
  -----------
  mail/thunderbird: update to 154.0

Update to the security release addressing MFSA 2026-78.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Wed Aug 26 09:52:53 2026
From: noreply at github.com (Lucas Holt)
Date: Wed, 26 Aug 2026 06:52:53 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 7a0275: mail/thunderbird:
 update to 154.0 (#782)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/501bb0-7a0275@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 7a0275ce80ed43cba3c93007ff6bd82dc5289fb9
      https://github.com/MidnightBSD/mports/commit/7a0275ce80ed43cba3c93007ff6bd82dc5289fb9
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M mail/thunderbird/Makefile
    M mail/thunderbird/distinfo
    A mail/thunderbird/files/patch-third__party_angle_angle__common__gn_moz.build
    A mail/thunderbird/files/patch-third__party_angle_angle__program__version__id__gn_moz.build
    A mail/thunderbird/files/patch-toolkit_xre_nsXREDirProvider.cpp
    M mail/thunderbird/files/patch-xpcom_base_nsMemoryInfoDumper.cpp

  Log Message:
  -----------
  mail/thunderbird: update to 154.0 (#782)

## Summary

- update Thunderbird to 154.0 for MFSA 2026-78
- require NSS 3.126
- add ANGLE generated-file rules needed by the 154.0 build
- avoid the X11 `Success` macro collision in the NSS include path
- refresh the nsMemoryInfoDumper patch context

## Validation

- `bmake makesum`
- clean `bmake patch`
- `bmake check-license` (MPL 2.0 confirmed in the source)
- `MAKE_JOBS_UNSAFE=yes bmake build`
- `MAKE_JOBS_UNSAFE=yes bmake fake package test`
- fake QA and plist check passed
- staged `libxul.so` links NSS, NSPR, and libproxy with no unresolved
proxy-setting symbol
- `git diff --check`
- `portlint -AC` (0 fatal errors; existing warnings only)

Security advisory:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-78/

## Summary by Sourcery

Update Thunderbird to 154.0 with the dependencies and platform build
adjustments required for the new release.

Bug Fixes:
- Resolve the X11 `Success` macro conflict that interferes with NSS
integration.

Enhancements:
- Update Thunderbird to version 154.0 and require NSS 3.126.
- Add the ANGLE build rules required by Thunderbird 154.0.
- Refresh the FreeBSD nsMemoryInfoDumper patch for the updated source
layout.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Wed Aug 26 09:52:54 2026
From: noreply at github.com (Lucas Holt)
Date: Wed, 26 Aug 2026 06:52:54 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/mail/thunderbird/036407-000000@github.com>

  Branch: refs/heads/mail/thunderbird
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Wed Aug 26 11:45:26 2026
From: noreply at github.com (Lucas Holt)
Date: Wed, 26 Aug 2026 08:45:26 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 86201b: math/py-pandas:
 update to 2.3.3
Message-ID: <MidnightBSD/mports/push/refs/heads/math/py-pandas/000000-86201b@github.com>

  Branch: refs/heads/math/py-pandas
  Home:   https://github.com/MidnightBSD/mports
  Commit: 86201bae3459d7e55fe65a1522941afe2b979932
      https://github.com/MidnightBSD/mports/commit/86201bae3459d7e55fe65a1522941afe2b979932
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M math/py-pandas/Makefile
    M math/py-pandas/distinfo
    R math/py-pandas/files/patch-pandas__libs_tslibs_np_datetime.pxd
    R math/py-pandas/files/patch-pandas__libs_tslibs_np_datetime.pyx
    R math/py-pandas/files/patch-pandas__libs_tslibs_strptime.pyx
    M math/py-pandas/files/patch-pyproject.toml

  Log Message:
  -----------
  math/py-pandas: update to 2.3.3

Update pandas for compatibility with Python 3.12 and NumPy 2.x, use the Meson backend, and add a focused complex hashing test.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Wed Aug 26 13:28:16 2026
From: noreply at github.com (Lucas Holt)
Date: Wed, 26 Aug 2026 10:28:16 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] e7dfdc: math/py-pandas:
 update to 2.3.3 (#783)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/7a0275-e7dfdc@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: e7dfdc2ca05542f990a230fdb584c1067902b16f
      https://github.com/MidnightBSD/mports/commit/e7dfdc2ca05542f990a230fdb584c1067902b16f
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M math/py-pandas/Makefile
    M math/py-pandas/distinfo
    R math/py-pandas/files/patch-pandas__libs_tslibs_np_datetime.pxd
    R math/py-pandas/files/patch-pandas__libs_tslibs_np_datetime.pyx
    R math/py-pandas/files/patch-pandas__libs_tslibs_strptime.pyx
    M math/py-pandas/files/patch-pyproject.toml

  Log Message:
  -----------
  math/py-pandas: update to 2.3.3 (#783)

## Summary
- update pandas from 2.0.3 to 2.3.3 for Python 3.12 and NumPy 2.x
compatibility
- switch to the Meson Python backend and select flavor-specific
Meson/Cython commands
- remove obsolete pandas 2.0.3 Cython patches and add a focused complex
hashing test

Fixes Magus port 2255641:
https://www.midnightbsd.org/magus/ports/2255641

## Validation
- `BATCH=yes bmake makesum`
- `BATCH=yes bmake patch`
- `BATCH=yes bmake`
- `BATCH=yes bmake fake`
- `BATCH=yes bmake package`
- `BATCH=yes bmake test`
- `BATCH=yes bmake check-license`
- `portlint -AC math/py-pandas` (0 fatal errors; existing PORTEPOCH and
maintainer-mode warnings)
- `git diff --check`

## Summary by Sourcery

Update the pandas port to 2.3.3 and modernize its build, dependencies,
and validation for current Python and NumPy versions.

Bug Fixes:
- Update pandas to 2.3.3 with compatibility for Python 3.12 and NumPy
2.x.

Enhancements:
- Migrate the port to the Meson Python build backend and support
flavor-specific build commands.
- Refresh runtime and optional dependencies for the updated pandas
release.
- Remove obsolete pandas 2.0.3 compatibility patches and add focused
complex-value hashing validation.

Build:
- Update build requirements and packaging configuration for pandas
2.3.3.

Tests:
- Add a focused package test covering complex Series uniqueness and
installed-version validation.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Wed Aug 26 13:28:17 2026
From: noreply at github.com (Lucas Holt)
Date: Wed, 26 Aug 2026 10:28:17 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/math/py-pandas/86201b-000000@github.com>

  Branch: refs/heads/math/py-pandas
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Wed Aug 26 19:39:37 2026
From: noreply at github.com (Lucas Holt)
Date: Wed, 26 Aug 2026 16:39:37 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 5193eb: dns/bind-tools:
 update library plist for 9.20.26
Message-ID: <MidnightBSD/mports/push/refs/heads/dns/bind-tools/000000-5193eb@github.com>

  Branch: refs/heads/dns/bind-tools
  Home:   https://github.com/MidnightBSD/mports
  Commit: 5193eb02c25a84fa50fe9092b6976e7cc742835c
      https://github.com/MidnightBSD/mports/commit/5193eb02c25a84fa50fe9092b6976e7cc742835c
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-26 (Wed, 26 Aug 2026)

  Changed paths:
    M dns/bind-tools/pkg-plist

  Log Message:
  -----------
  dns/bind-tools: update library plist for 9.20.26

Update the slave port plist to match the versioned libraries installed by bind920 after its 9.20.26 update. This restores fake and package creation.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 07:47:52 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 04:47:52 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 1675ea: dns/bind-tools:
 update library plist for 9.20.26 (...
Message-ID: <MidnightBSD/mports/push/refs/heads/master/e7dfdc-1675ea@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 1675ea417610c5afa8e6e14919abfbaea7a1bdbd
      https://github.com/MidnightBSD/mports/commit/1675ea417610c5afa8e6e14919abfbaea7a1bdbd
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M dns/bind-tools/pkg-plist

  Log Message:
  -----------
  dns/bind-tools: update library plist for 9.20.26 (#784)

## Summary

- update the five versioned BIND library plist entries from 9.20.23 to
9.20.26
- restore fake and package creation after the dns/bind920 9.20.26 update

## Validation

- BATCH=yes bmake -C dns/bind-tools clean
- BATCH=yes bmake -C dns/bind-tools fake
- BATCH=yes bmake -C dns/bind-tools package
- portlint -AC dns/bind-tools
- git diff --check

The port has no implemented test command; its test target is a no-op
beyond the standard fake prerequisite.

## Summary by Sourcery

Update dns/bind-tools packaging metadata for BIND 9.20.26 and restore
package generation.

Bug Fixes:
- Restore successful fake and package creation for dns/bind-tools
following the BIND 9.20.26 update.

Enhancements:
- Update the five versioned BIND library plist entries from 9.20.23 to
9.20.26.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 07:47:52 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 04:47:52 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/dns/bind-tools/5193eb-000000@github.com>

  Branch: refs/heads/dns/bind-tools
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 08:05:16 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 05:05:16 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 21867e: archivers/gzip: fix
 CVE-2026-41992
Message-ID: <MidnightBSD/mports/push/refs/heads/archivers/gzip/000000-21867e@github.com>

  Branch: refs/heads/archivers/gzip
  Home:   https://github.com/MidnightBSD/mports
  Commit: 21867e2042f64ccbe3fff82c810c219e9dffb992
      https://github.com/MidnightBSD/mports/commit/21867e2042f64ccbe3fff82c810c219e9dffb992
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M archivers/gzip/Makefile
    A archivers/gzip/files/patch-unlzh.c

  Log Message:
  -----------
  archivers/gzip: fix CVE-2026-41992

Clear the shared LZH decoding arrays before starting a stream so stale state from prior LZW input cannot cause an out-of-bounds read. Bump PORTREVISION for the patched package.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 08:06:38 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 05:06:38 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] b5338a: archivers/gzip: fix
 CVE-2026-41992 (#785)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/1675ea-b5338a@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: b5338ab265cf39601360ceddc5fd1e7cfe1891b6
      https://github.com/MidnightBSD/mports/commit/b5338ab265cf39601360ceddc5fd1e7cfe1891b6
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M archivers/gzip/Makefile
    A archivers/gzip/files/patch-unlzh.c

  Log Message:
  -----------
  archivers/gzip: fix CVE-2026-41992 (#785)

## Summary

- backport the current GNU gzip fix for CVE-2026-41992
- clear shared LZH decoder arrays before each LZH stream so stale LZW
state cannot cause an out-of-bounds read
- bump PORTREVISION for the patched 1.14 package

Upstream disclosure:
https://www.openwall.com/lists/oss-security/2026/08/23/1
Upstream source:
https://cgit.git.savannah.gnu.org/cgit/gzip.git/plain/unlzh.c

## Validation

- BATCH=yes bmake -C archivers/gzip makesum
- BATCH=yes bmake -C archivers/gzip patch
- BATCH=yes bmake -C archivers/gzip
- BATCH=yes bmake -C archivers/gzip fake
- BATCH=yes bmake -C archivers/gzip package
- BATCH=yes bmake -C archivers/gzip check-license
- portlint -AC archivers/gzip
- git diff --check

Package created: Packages/amd64/All/gzip-1.14_1.mport

The upstream check suite reports 28 passed, 1 skipped, and 1 failed. The
unrelated pipe-output test fails because MidnightBSD commands report
broken-pipe exit status differently; the port currently does not wire
this suite into bmake test. Fake QA also reports the existing DOCS files
missing from pkg-plist.

## Summary by Sourcery

Patch gzip 1.14 to prevent an LZH decoder out-of-bounds read caused by
stale shared state.

Bug Fixes:
- Backport the GNU gzip fix for CVE-2026-41992 by resetting shared LZH
decoder state before processing each stream, preventing stale data from
causing out-of-bounds reads.

Build:
- Bump the gzip package PORTREVISION for the security patch.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 08:06:40 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 05:06:40 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/archivers/gzip/21867e-000000@github.com>

  Branch: refs/heads/archivers/gzip
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 08:14:25 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 05:14:25 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 436fc7: editors/vim: update
 to 9.2.1014
Message-ID: <MidnightBSD/mports/push/refs/heads/editors/vim/000000-436fc7@github.com>

  Branch: refs/heads/editors/vim
  Home:   https://github.com/MidnightBSD/mports
  Commit: 436fc72fae6193b08c71bcbf568877692b666e9f
      https://github.com/MidnightBSD/mports/commit/436fc72fae6193b08c71bcbf568877692b666e9f
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M editors/vim/Makefile
    M editors/vim/distinfo

  Log Message:
  -----------
  editors/vim: update to 9.2.1014

Update to the latest upstream patch level, including the current security fixes.

AI-Assisted-by: Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 08:17:06 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 05:17:06 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 8ef3d7: editors/vim: update
 to 9.2.1014 (#786)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/b5338a-8ef3d7@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 8ef3d7732fe0d403dcd2c453ca3e8882001983e5
      https://github.com/MidnightBSD/mports/commit/8ef3d7732fe0d403dcd2c453ca3e8882001983e5
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M editors/vim/Makefile
    M editors/vim/distinfo

  Log Message:
  -----------
  editors/vim: update to 9.2.1014 (#786)

## Summary

- update Vim from 9.2.0742 to the latest upstream patch level, 9.2.1014
- refresh the distfile checksum and size
- include upstream security fixes through patch 9.2.1014

## Validation

- bmake makesum
- gzip -t Distfiles/vim-vim-v9.2.1014_GH0.tar.gz
- bmake check-license
- bmake clean patch
- bmake
- bmake fake package
- staged vim --version reports patches 1-1014
- portlint -C: 0 fatal errors, 3 pre-existing ordering/maintainer-mode
warnings

Upstream tests were not run because the port sets NO_TEST=yes; its
Makefile documents that the suite hangs indefinitely on Magus.

## Summary by Sourcery

Update the Vim editor port to upstream patch level 9.2.1014.

Bug Fixes:
- Include upstream Vim security fixes through patch level 9.2.1014.

Enhancements:
- Update the Vim port from 9.2.0742 to 9.2.1014.

Chores:
- Refresh the Vim distfile checksum and size.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 08:17:07 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 05:17:07 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/editors/vim/436fc7-000000@github.com>

  Branch: refs/heads/editors/vim
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 08:53:55 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 05:53:55 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 818d92: editors/emacs:
 update to 31.1
Message-ID: <MidnightBSD/mports/push/refs/heads/editors/emacs/000000-818d92@github.com>

  Branch: refs/heads/editors/emacs
  Home:   https://github.com/MidnightBSD/mports
  Commit: 818d924dd72750119388cbb3c3ad5f5f2f7a408d
      https://github.com/MidnightBSD/mports/commit/818d924dd72750119388cbb3c3ad5f5f2f7a408d
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M Mk/extensions/emacs.mk
    M editors/emacs/Makefile
    M editors/emacs/distinfo
    R editors/emacs/files/patch-src_image.c
    M editors/emacs/pkg-plist

  Log Message:
  -----------
  editors/emacs: update to 31.1

Update the stable Emacs framework version and Canna patch, refresh the plist, and use the ports SQLite dependency selected by configure. Emacs 31.1 includes the upstream TRAMP hardening for CVE-2026-79992.

AI-Assisted-by: Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 08:54:35 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 05:54:35 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] fa14bc: ai/claude-code:
 update to 2.1.243
Message-ID: <MidnightBSD/mports/push/refs/heads/ai/claude-code/000000-fa14bc@github.com>

  Branch: refs/heads/ai/claude-code
  Home:   https://github.com/MidnightBSD/mports
  Commit: fa14bc9cfa57e97807b5cb0f1d8bc641da5b5d60
      https://github.com/MidnightBSD/mports/commit/fa14bc9cfa57e97807b5cb0f1d8bc641da5b5d60
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M ai/claude-code/Makefile
    M ai/claude-code/distinfo

  Log Message:
  -----------
  ai/claude-code: update to 2.1.243

AI-Assisted-by: Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 11:17:27 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 08:17:27 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] d40fe4: ai/claude-code:
 update to 2.1.243 (#788)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/8ef3d7-d40fe4@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: d40fe47236b97e52e2cc4a153910a884f6bd774e
      https://github.com/MidnightBSD/mports/commit/d40fe47236b97e52e2cc4a153910a884f6bd774e
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M ai/claude-code/Makefile
    M ai/claude-code/distinfo

  Log Message:
  -----------
  ai/claude-code: update to 2.1.243 (#788)

## Summary
- update Claude Code from 2.1.241 to 2.1.243
- refresh the distfile checksum and size

Note: npm currently advertises 2.1.247 as latest; this PR intentionally
preserves the submitted 2.1.243 update.

## Validation
- `bmake check-license`
- `bmake clean patch`
- `bmake build fake package`
- `git diff --check`
- `portlint -C` (0 fatal errors; 5 pre-existing style warnings)

## Summary by Sourcery

Update the Claude Code port to release 2.1.243.

Enhancements:
- Update the packaged Claude Code release to version 2.1.243.

Chores:
- Refresh the distfile metadata for the updated release.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 11:17:29 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 08:17:29 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/ai/claude-code/fa14bc-000000@github.com>

  Branch: refs/heads/ai/claude-code
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 11:18:15 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 08:18:15 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 2faeb1: editors/emacs:
 update to 31.1 (#787)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/d40fe4-2faeb1@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 2faeb144df4e98c3ef8f445b0449435fd2df84ff
      https://github.com/MidnightBSD/mports/commit/2faeb144df4e98c3ef8f445b0449435fd2df84ff
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M Mk/extensions/emacs.mk
    M editors/emacs/Makefile
    M editors/emacs/distinfo
    R editors/emacs/files/patch-src_image.c
    M editors/emacs/pkg-plist

  Log Message:
  -----------
  editors/emacs: update to 31.1 (#787)

## Summary
- update GNU Emacs from 30.2 to 31.1 and refresh the plist
- update the stable version in `Mk/extensions/emacs.mk` so dependent
ports resolve Emacs 31.1
- update the Canna patch and preserve native compilation during
bootstrap
- remove the obsolete local CVE-2026-6861 patch, which is included
upstream
- declare the ports SQLite dependency selected by configure

Emacs 31.1 contains the upstream TRAMP hardening for CVE-2026-79992.
Reverse dry-running the disclosed fix against the 31.1 source succeeds
for every hunk, confirming the release contains that patch.

## Validation
- `bmake makesum`
- `bmake check-license`
- `bmake clean patch`
- `bmake`
- `bmake fake package`
- `bmake FLAVOR=canna clean package`
- fake-QA passed for default and Canna flavors
- `bmake test` (port has no implemented test target)
- all stable/devel `USES=emacs` flavor variables checked with
`japanese/ddskk`
- `git diff --check`
- `portlint -C` (pre-existing COMMENT_* ordering fatals; no new fatal
specific to this update)

## Summary by Sourcery

Update the Emacs port and its shared extension metadata to support Emacs
31.1 and refreshed flavors.

Bug Fixes:
- Remove the obsolete local CVE-2026-6861 patch now included in upstream
Emacs.

Enhancements:
- Upgrade the stable Emacs port and dependent-port metadata to version
31.1.
- Refresh the Canna flavor for Emacs 31.1 while preserving native
compilation during bootstrap.
- Declare SQLite as a ports-provided dependency and refresh the package
plist for the new release.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 11:18:17 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 08:18:17 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/editors/emacs/818d92-000000@github.com>

  Branch: refs/heads/editors/emacs
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 18:58:14 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 15:58:14 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] da2cbc:
 sysutils/rust-coreutils: refresh 0.8.0 crates
Message-ID: <MidnightBSD/mports/push/refs/heads/sysutils/rust-coreutils/000000-da2cbc@github.com>

  Branch: refs/heads/sysutils/rust-coreutils
  Home:   https://github.com/MidnightBSD/mports
  Commit: da2cbcd0d6c98ccdaf03bc6e6f623f25025decc9
      https://github.com/MidnightBSD/mports/commit/da2cbcd0d6c98ccdaf03bc6e6f623f25025decc9
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M sysutils/rust-coreutils/Makefile.crates
    M sysutils/rust-coreutils/distinfo

  Log Message:
  -----------
  sysutils/rust-coreutils: refresh 0.8.0 crates

Regenerate the Cargo crate manifest and checksums from the 0.8.0 lockfile. The version update retained the 0.7.0 dependency set, causing Magus configuration to fail at clap_mangen.

AI-Assisted-by: Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 19:06:25 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 16:06:25 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] ac1dd8:
 sysutils/rust-coreutils: refresh 0.8.0 crates (#789)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/2faeb1-ac1dd8@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: ac1dd8d8ffdcf898fba7007f42c56f395e3ce79c
      https://github.com/MidnightBSD/mports/commit/ac1dd8d8ffdcf898fba7007f42c56f395e3ce79c
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M sysutils/rust-coreutils/Makefile.crates
    M sysutils/rust-coreutils/distinfo

  Log Message:
  -----------
  sysutils/rust-coreutils: refresh 0.8.0 crates (#789)

## Summary
- regenerate `CARGO_CRATES` from the rust-coreutils 0.8.0 `Cargo.lock`
- refresh crate checksums and sizes
- fix Magus port 2257796 failing configure because the stale 0.7.0
manifest provided `clap_mangen-0.2.31` while 0.8.0 requires `clap_mangen
^0.3`

The generated manifest exactly matches FreeBSD's known-good
rust-coreutils 0.8.0 crate manifest.

## Validation
- `bmake makesum`
- `bmake check-license`
- `bmake clean configure`
- `bmake build`
- `bmake fake package`
- staged `uu-coreutils --version` reports 0.8.0
- `portlint -C` (0 fatal errors)
- `git diff --check`

`NO_TEST=yes` is pre-existing, so the upstream test suite was not run.

## Summary by Sourcery

Bug Fixes:
- Refresh the rust-coreutils 0.8.0 crate manifest and checksums so the
port uses the correct dependency set and configures successfully.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 19:06:28 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 16:06:28 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/sysutils/rust-coreutils/da2cbc-000000@github.com>

  Branch: refs/heads/sysutils/rust-coreutils
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 20:19:45 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 17:19:45 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] e6082e: sysutils/zellij:
 avoid staged path in binary
Message-ID: <MidnightBSD/mports/push/refs/heads/sysutils/zellij/000000-e6082e@github.com>

  Branch: refs/heads/sysutils/zellij
  Home:   https://github.com/MidnightBSD/mports
  Commit: e6082e768489375587f7c0c0acb2092f5f0213c0
      https://github.com/MidnightBSD/mports/commit/e6082e768489375587f7c0c0acb2092f5f0213c0
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M sysutils/zellij/Makefile

  Log Message:
  -----------
  sysutils/zellij: avoid staged path in binary

Install the release artifact built with the real prefix instead of rebuilding it during cargo install with the fake prefix.

AI-Assisted-by: Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 21:07:14 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 18:07:14 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 22a506: sysutils/zellij:
 avoid staged path in binary (#790)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/ac1dd8-22a506@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 22a506b43e5c75874bc63661f15b7a4d95aca48a
      https://github.com/MidnightBSD/mports/commit/22a506b43e5c75874bc63661f15b7a4d95aca48a
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-27 (Thu, 27 Aug 2026)

  Changed paths:
    M sysutils/zellij/Makefile

  Log Message:
  -----------
  sysutils/zellij: avoid staged path in binary (#790)



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Thu Aug 27 21:07:15 2026
From: noreply at github.com (Lucas Holt)
Date: Thu, 27 Aug 2026 18:07:15 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/sysutils/zellij/e6082e-000000@github.com>

  Branch: refs/heads/sysutils/zellij
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Fri Aug 28 11:36:13 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 08:36:13 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] ee35eb: ai/claude-code:
 update to 2.1.248
Message-ID: <MidnightBSD/mports/push/refs/heads/ai/claude-code/000000-ee35eb@github.com>

  Branch: refs/heads/ai/claude-code
  Home:   https://github.com/MidnightBSD/mports
  Commit: ee35eb0b10eec529dafa70a4d6adfa9e5d631a98
      https://github.com/MidnightBSD/mports/commit/ee35eb0b10eec529dafa70a4d6adfa9e5d631a98
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:
    M ai/claude-code/Makefile
    M ai/claude-code/distinfo

  Log Message:
  -----------
  ai/claude-code: update to 2.1.248

AI-Assisted-by: Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Fri Aug 28 11:38:19 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 08:38:19 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 6620ee: ai/claude-code:
 update to 2.1.248 (#791)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/22a506-6620ee@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 6620eec77d527067ffd24bd7000f216db8f4d3d7
      https://github.com/MidnightBSD/mports/commit/6620eec77d527067ffd24bd7000f216db8f4d3d7
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:
    M ai/claude-code/Makefile
    M ai/claude-code/distinfo

  Log Message:
  -----------
  ai/claude-code: update to 2.1.248 (#791)

## Summary
- update Claude Code from 2.1.243 to 2.1.248
- refresh the npm tarball checksum and size

## Validation
- BATCH=yes bmake makesum
- BATCH=yes bmake clean patch
- BATCH=yes bmake
- BATCH=yes bmake fake package
- BATCH=yes bmake test
- staged binary: 2.1.248 (Claude Code)
- xz -t Packages/amd64/All/claude-code-2.1.248.mport
- BATCH=yes bmake check-license
- portlint -C ai/claude-code (0 fatal errors; 5 pre-existing warnings)
- git diff --check

## Summary by Sourcery

Update the Claude Code port to the 2.1.248 release.

Enhancements:
- Update the packaged Claude Code release to version 2.1.248.

Chores:
- Refresh the npm distribution metadata for the updated release.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Fri Aug 28 11:38:21 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 08:38:21 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/ai/claude-code/ee35eb-000000@github.com>

  Branch: refs/heads/ai/claude-code
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Fri Aug 28 18:18:56 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 15:18:56 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 07bfaa: mail/dovecot24:
 update to 2.4.5
Message-ID: <MidnightBSD/mports/push/refs/heads/mail/dovecot24/000000-07bfaa@github.com>

  Branch: refs/heads/mail/dovecot24
  Home:   https://github.com/MidnightBSD/mports
  Commit: 07bfaa11748042256de01facfea6312105ab960e
      https://github.com/MidnightBSD/mports/commit/07bfaa11748042256de01facfea6312105ab960e
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:
    M mail/dovecot24/Makefile
    M mail/dovecot24/distinfo
    M mail/dovecot24/pkg-plist

  Log Message:
  -----------
  mail/dovecot24: update to 2.4.5

- update dovecot from 2.4.4 to 2.4.5 and reset PORTREVISION
- refresh distinfo for the 2.4.5 tarball
- sync pkg-plist with the new release: add abnf.h, bitmap.h,
  idna.h, idna-punycode.h, imap-state-private.h, sasl-proxy.h,
  storage-version.h, xxh64.h and libexec/dovecot/imap-hibernate;
  drop punycode.h

Validation:
- distfile SHA256/size verified against distinfo
  (868c2686a61b5f8e00a3e4721789b1ab46e6528fd773a5fbed07a6ecba7731e6,
  8747733 bytes)

AI-Assisted-by: Claude Opus 5 <noreply at anthropic.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Fri Aug 28 18:25:40 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 15:25:40 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 06203e: mail/dovecot24:
 update to 2.4.5 (#792)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/6620ee-06203e@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 06203e68497c3850ee2534141d741cbb9148f392
      https://github.com/MidnightBSD/mports/commit/06203e68497c3850ee2534141d741cbb9148f392
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:
    M mail/dovecot24/Makefile
    M mail/dovecot24/distinfo
    M mail/dovecot24/pkg-plist

  Log Message:
  -----------
  mail/dovecot24: update to 2.4.5 (#792)

## Summary
- update dovecot from 2.4.4 to 2.4.5, reset `PORTREVISION` to 0
- refresh `distinfo` for the 2.4.5 tarball
- sync `pkg-plist` with the new release: add `abnf.h`, `bitmap.h`,
`idna.h`, `idna-punycode.h`, `imap-state-private.h`, `sasl-proxy.h`,
`storage-version.h`, `xxh64.h` and `libexec/dovecot/imap-hibernate`;
drop `punycode.h`

## Validation
- distfile SHA256 and size verified against `distinfo`
(`868c2686a61b5f8e00a3e4721789b1ab46e6528fd773a5fbed07a6ecba7731e6`,
8747733 bytes)
- plist changes derived from the staged 2.4.5 build

Prepared in a separate worktree off `origin/master` so it does not touch
unrelated in-flight work.

## Summary by Sourcery

Update the Dovecot 2.4 port to version 2.4.5 and align its packaging
metadata with the release.

Enhancements:
- Update the Dovecot 2.4 port to release 2.4.5 and synchronize its
package contents with the new release.

Chores:
- Refresh the distfile metadata and reset the port revision for the new
upstream release.

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Fri Aug 28 18:25:40 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 15:25:40 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/mail/dovecot24/07bfaa-000000@github.com>

  Branch: refs/heads/mail/dovecot24
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Fri Aug 28 19:05:07 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 16:05:07 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 07bfaa: mail/dovecot24:
 update to 2.4.5
Message-ID: <MidnightBSD/mports/push/refs/heads/mail/dovecot24/000000-e89f06@github.com>

  Branch: refs/heads/mail/dovecot24
  Home:   https://github.com/MidnightBSD/mports
  Commit: 07bfaa11748042256de01facfea6312105ab960e
      https://github.com/MidnightBSD/mports/commit/07bfaa11748042256de01facfea6312105ab960e
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:
    M mail/dovecot24/Makefile
    M mail/dovecot24/distinfo
    M mail/dovecot24/pkg-plist

  Log Message:
  -----------
  mail/dovecot24: update to 2.4.5

- update dovecot from 2.4.4 to 2.4.5 and reset PORTREVISION
- refresh distinfo for the 2.4.5 tarball
- sync pkg-plist with the new release: add abnf.h, bitmap.h,
  idna.h, idna-punycode.h, imap-state-private.h, sasl-proxy.h,
  storage-version.h, xxh64.h and libexec/dovecot/imap-hibernate;
  drop punycode.h

Validation:
- distfile SHA256/size verified against distinfo
  (868c2686a61b5f8e00a3e4721789b1ab46e6528fd773a5fbed07a6ecba7731e6,
  8747733 bytes)

AI-Assisted-by: Claude Opus 5 <noreply at anthropic.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: e89f06ffed985f486c08cc73fe006385b9e606b8
      https://github.com/MidnightBSD/mports/commit/e89f06ffed985f486c08cc73fe006385b9e606b8
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:
    M mail/dovecot24/Makefile
    A mail/dovecot24/files/patch-src_lib_net.c

  Log Message:
  -----------
  mail/dovecot24: fix anvil crash from missing peer pid; declare libstemmer

On MidnightBSD net_getunixcred() used getpeereid(), which cannot return
the peer pid, so every process registered with anvil as pid=-1. Anvil
keys connections by (service, pid), so imap-login processes collided
("Handshake with duplicate service=imap-login pid=-1") and anvil
eventually hit i_unreached() in anvil-connection.c and died with
SIGABRT. Use LOCAL_PEERCRED with struct xucred.cr_pid (available since
FreeBSD 13 / MidnightBSD 4) ahead of the getpeereid() fallback, which
remains in use on 3.x.

libdovecot-language links against libstemmer.so when snowballstemmer is
present but the port never declared it; add the LIB_DEPENDS.

Validation:
- bmake clean patch build fake package
- installed on a production 2.4.5 IMAP server (mbox, PAM): anvil
  duplicate-handshake warnings gone, no errors across client logins,
  doveadm who / process status working

AI-Assisted-by: Claude Opus 5 <noreply at anthropic.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>


Compare: https://github.com/MidnightBSD/mports/compare/07bfaa117480%5E...e89f06ffed98

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Fri Aug 28 19:07:01 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 16:07:01 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 06203e: mail/dovecot24:
 update to 2.4.5 (#792)
Message-ID: <MidnightBSD/mports/push/refs/heads/mail/dovecot24/e89f06-7e55bd@github.com>

  Branch: refs/heads/mail/dovecot24
  Home:   https://github.com/MidnightBSD/mports
  Commit: 06203e68497c3850ee2534141d741cbb9148f392
      https://github.com/MidnightBSD/mports/commit/06203e68497c3850ee2534141d741cbb9148f392
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:
    M mail/dovecot24/Makefile
    M mail/dovecot24/distinfo
    M mail/dovecot24/pkg-plist

  Log Message:
  -----------
  mail/dovecot24: update to 2.4.5 (#792)

## Summary
- update dovecot from 2.4.4 to 2.4.5, reset `PORTREVISION` to 0
- refresh `distinfo` for the 2.4.5 tarball
- sync `pkg-plist` with the new release: add `abnf.h`, `bitmap.h`,
`idna.h`, `idna-punycode.h`, `imap-state-private.h`, `sasl-proxy.h`,
`storage-version.h`, `xxh64.h` and `libexec/dovecot/imap-hibernate`;
drop `punycode.h`

## Validation
- distfile SHA256 and size verified against `distinfo`
(`868c2686a61b5f8e00a3e4721789b1ab46e6528fd773a5fbed07a6ecba7731e6`,
8747733 bytes)
- plist changes derived from the staged 2.4.5 build

Prepared in a separate worktree off `origin/master` so it does not touch
unrelated in-flight work.

## Summary by Sourcery

Update the Dovecot 2.4 port to version 2.4.5 and align its packaging
metadata with the release.

Enhancements:
- Update the Dovecot 2.4 port to release 2.4.5 and synchronize its
package contents with the new release.

Chores:
- Refresh the distfile metadata and reset the port revision for the new
upstream release.

Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: 7e55bd05b40d87ba1a84b1b6836dec60ef4ee5bf
      https://github.com/MidnightBSD/mports/commit/7e55bd05b40d87ba1a84b1b6836dec60ef4ee5bf
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:

  Log Message:
  -----------
  Merge branch 'master' into mail/dovecot24


Compare: https://github.com/MidnightBSD/mports/compare/e89f06ffed98...7e55bd05b40d

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Fri Aug 28 19:07:10 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 16:07:10 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/mail/dovecot24/7e55bd-000000@github.com>

  Branch: refs/heads/mail/dovecot24
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Fri Aug 28 19:07:09 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 16:07:09 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 325627: Mail/dovecot24 (#793)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/06203e-325627@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 32562722ac39e23fc02b019d4dda23788c95c2b2
      https://github.com/MidnightBSD/mports/commit/32562722ac39e23fc02b019d4dda23788c95c2b2
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:
    M mail/dovecot24/Makefile
    A mail/dovecot24/files/patch-src_lib_net.c

  Log Message:
  -----------
  Mail/dovecot24 (#793)

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Fri Aug 28 19:56:04 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 16:56:04 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] a6e700: ai/codex: update to
 0.149.0
Message-ID: <MidnightBSD/mports/push/refs/heads/ai/codex/000000-a6e700@github.com>

  Branch: refs/heads/ai/codex
  Home:   https://github.com/MidnightBSD/mports
  Commit: a6e700e80cb4c1df87c733284b7a54690694968a
      https://github.com/MidnightBSD/mports/commit/a6e700e80cb4c1df87c733284b7a54690694968a
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:
    M ai/codex/Makefile
    M ai/codex/Makefile.crates
    M ai/codex/distinfo
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build.rs
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_BUILDCONFIG.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_c++_modules.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_clang_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_compiler_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_compiler__cpu__abi.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_linux_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_linux_pkg-config.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_sanitizers_sanitizers.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_v8__target__cpu.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_detect__host__arch.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_gn__run__binary.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_linux_chrome.map
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_linux_unbundle_libusb.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_freebsd_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_gcc__solink__wrapper.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_gcc__toolchain.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_siso.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_sysroot.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_toolchain.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_abseil-cpp_absl_base_config.h
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_abseil-cpp_absl_base_internal_sysinfo.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_icu_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_partition__alloc_src_partition__alloc_stack_stack.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_include_v8config.h
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_api_api.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_base_platform_platform-freebsd.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_base_platform_platform-posix.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_diagnostics_perf-jit.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_diagnostics_perf-jit.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build.rs
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_BUILDCONFIG.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_c++_modules.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_clang_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_clang_clang.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_compiler_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_compiler__cpu__abi.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_linux_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_linux_libdrm_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_linux_pkg-config.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_ozone.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_rust.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_v8__target__cpu.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_detect__host__arch.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_dotfile__settings.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_gn__run__binary.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_chrome.map
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_strip__binary.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_strip__binary.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_unbundle_icu.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_unbundle_libpng.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_unbundle_libusb.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_modules_unified_modulemap__config.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_allocator_lib.rs
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_rust__bindgen.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_rust__bindgen__generator.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_std_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_freebsd_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_gcc__solink__wrapper.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_gcc__toolchain.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_openbsd_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_toolchain.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_abseil-cpp_absl_base_config.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_abseil-cpp_absl_base_internal_sysinfo.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_abseil-cpp_absl_debugging_internal_elf__mem__image.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libc++_src_include_____locale__dir_support_bsd__like.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libc++_src_src_chrono.cpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libc++_src_src_filesystem_filesystem__clock.cpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_AddressSpace.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_DwarfInstructions.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_EHHeaderParser.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_UnwindCursor.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_partition__alloc.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_page__allocator.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_partition__root.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_spinning__mutex.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_stack_stack.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_build__overrides_partition__alloc.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_gni_v8.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_include_v8-internal.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_include_v8config.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_api_api.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_atomicops.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_macros.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_memory.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_platform-freebsd.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_platform-openbsd.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_platform-posix.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_strings.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_sys-info.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_diagnostics_perf-jit.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_diagnostics_perf-jit.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_execution_isolate.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_flags_flags.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_libsampler_sampler.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_objects_js-temporal-zoneinfo64.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_objects_simd.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_sandbox_sandbox.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_snapshot_embedded_platform-embedded-file-writer-base.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_snapshot_embedded_platform-embedded-file-writer-base.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_snapshot_embedded_platform-embedded-file-writer-generic.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_trap-handler_handler-inside-posix.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_trap-handler_handler-inside-posix.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_trap-handler_trap-handler.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_tools_run.py
    A ai/codex/files/patch-codex-rs_Cargo.lock
    A ai/codex/files/patch-codex-rs_Cargo.toml
    A ai/codex/files/patch-codex-rs_code-mode-protocol_build.rs
    A ai/codex/files/patch-codex-rs_core_src_tools_runtimes_apply_patch.rs
    M ai/codex/files/patch-codex-rs_exec_tests_suite_mod.rs
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_address_space_randomization.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_debug_proc_maps_linux.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_debug_stack_trace_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_rand_util_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_threading_platform_thread.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_threading_platform_thread_internal_posix.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_threading_platform_thread_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_config.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_constants.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_forward.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_page_allocator_constants.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_page_allocator_internals_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_page_allocator_internals_posix.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_thread_isolation_pkey.cc
    R ai/codex/files/patch-v8_partition_alloc_libc_symbols.h

  Log Message:
  -----------
  ai/codex: update to 0.149.0

Update the vendored Cargo dependencies and V8 patches to match the 0.149.0 release. Require Rust 1.95.0 and GN 2345, and package the additional helper binaries shipped by this release.

AI-Assisted-by: Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Sat Aug 29 01:40:01 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 22:40:01 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 797fdc: ai/codex: address
 review feedback
Message-ID: <MidnightBSD/mports/push/refs/heads/ai/codex/a6e700-797fdc@github.com>

  Branch: refs/heads/ai/codex
  Home:   https://github.com/MidnightBSD/mports
  Commit: 797fdc7cd9c3ddbc96fdb642b820214039cf95b9
      https://github.com/MidnightBSD/mports/commit/797fdc7cd9c3ddbc96fdb642b820214039cf95b9
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-29 (Sat, 29 Aug 2026)

  Changed paths:
    M ai/codex/Makefile
    M ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_gni_v8.gni
    M ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_include_v8config.h

  Log Message:
  -----------
  ai/codex: address review feedback

Reset PORTREVISION for the version update, keep the resource-intensive workspace tests disabled, correct staged post-install paths, and fix BSD target typos in the V8 patches.

AI-Assisted-by: Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Sat Aug 29 01:58:33 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 22:58:33 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports]
Message-ID: <MidnightBSD/mports/push/refs/heads/ai/codex/797fdc-000000@github.com>

  Branch: refs/heads/ai/codex
  Home:   https://github.com/MidnightBSD/mports

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Sat Aug 29 01:58:33 2026
From: noreply at github.com (Lucas Holt)
Date: Fri, 28 Aug 2026 22:58:33 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] aa5612: ai/codex: update to
 0.149.0 (#794)
Message-ID: <MidnightBSD/mports/push/refs/heads/master/325627-aa5612@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: aa56122424e1888a2d5c4d25f1d2019a06d2d8dd
      https://github.com/MidnightBSD/mports/commit/aa56122424e1888a2d5c4d25f1d2019a06d2d8dd
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-29 (Sat, 29 Aug 2026)

  Changed paths:
    M ai/codex/Makefile
    M ai/codex/Makefile.crates
    M ai/codex/distinfo
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build.rs
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_BUILDCONFIG.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_c++_modules.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_clang_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_compiler_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_compiler__cpu__abi.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_linux_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_linux_pkg-config.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_sanitizers_sanitizers.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_v8__target__cpu.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_detect__host__arch.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_gn__run__binary.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_linux_chrome.map
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_linux_unbundle_libusb.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_freebsd_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_gcc__solink__wrapper.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_gcc__toolchain.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_siso.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_sysroot.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_toolchain.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_abseil-cpp_absl_base_config.h
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_abseil-cpp_absl_base_internal_sysinfo.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_icu_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_partition__alloc_src_partition__alloc_stack_stack.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_include_v8config.h
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_api_api.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_base_platform_platform-freebsd.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_base_platform_platform-posix.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_diagnostics_perf-jit.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_diagnostics_perf-jit.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build.rs
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_BUILDCONFIG.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_c++_modules.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_clang_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_clang_clang.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_compiler_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_compiler__cpu__abi.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_linux_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_linux_libdrm_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_linux_pkg-config.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_ozone.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_rust.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_v8__target__cpu.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_detect__host__arch.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_dotfile__settings.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_gn__run__binary.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_chrome.map
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_strip__binary.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_strip__binary.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_unbundle_icu.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_unbundle_libpng.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_unbundle_libusb.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_modules_unified_modulemap__config.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_allocator_lib.rs
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_rust__bindgen.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_rust__bindgen__generator.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_std_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_freebsd_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_gcc__solink__wrapper.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_gcc__toolchain.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_openbsd_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_toolchain.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_abseil-cpp_absl_base_config.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_abseil-cpp_absl_base_internal_sysinfo.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_abseil-cpp_absl_debugging_internal_elf__mem__image.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libc++_src_include_____locale__dir_support_bsd__like.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libc++_src_src_chrono.cpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libc++_src_src_filesystem_filesystem__clock.cpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_AddressSpace.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_DwarfInstructions.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_EHHeaderParser.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_UnwindCursor.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_partition__alloc.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_page__allocator.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_partition__root.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_spinning__mutex.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_stack_stack.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_build__overrides_partition__alloc.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_gni_v8.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_include_v8-internal.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_include_v8config.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_api_api.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_atomicops.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_macros.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_memory.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_platform-freebsd.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_platform-openbsd.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_platform-posix.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_strings.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_sys-info.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_diagnostics_perf-jit.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_diagnostics_perf-jit.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_execution_isolate.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_flags_flags.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_libsampler_sampler.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_objects_js-temporal-zoneinfo64.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_objects_simd.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_sandbox_sandbox.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_snapshot_embedded_platform-embedded-file-writer-base.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_snapshot_embedded_platform-embedded-file-writer-base.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_snapshot_embedded_platform-embedded-file-writer-generic.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_trap-handler_handler-inside-posix.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_trap-handler_handler-inside-posix.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_trap-handler_trap-handler.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_tools_run.py
    A ai/codex/files/patch-codex-rs_Cargo.lock
    A ai/codex/files/patch-codex-rs_Cargo.toml
    A ai/codex/files/patch-codex-rs_code-mode-protocol_build.rs
    A ai/codex/files/patch-codex-rs_core_src_tools_runtimes_apply_patch.rs
    M ai/codex/files/patch-codex-rs_exec_tests_suite_mod.rs
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_address_space_randomization.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_debug_proc_maps_linux.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_debug_stack_trace_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_rand_util_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_threading_platform_thread.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_threading_platform_thread_internal_posix.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_threading_platform_thread_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_config.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_constants.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_forward.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_page_allocator_constants.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_page_allocator_internals_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_page_allocator_internals_posix.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_thread_isolation_pkey.cc
    R ai/codex/files/patch-v8_partition_alloc_libc_symbols.h

  Log Message:
  -----------
  ai/codex: update to 0.149.0 (#794)

Summary:
- update Codex CLI and vendored Cargo dependencies to 0.149.0
- update the bundled V8 port patches to 150.4.0
- require Rust 1.95.0 and GN 2345, matching upstream build requirements
- package codex-code-mode-host, codex-responses-api-proxy, and
logs_client alongside codex
- address review feedback for package revision, staged install paths,
and BSD target detection

Validation:
- bmake makesum
- BATCH=yes bmake clean checksum check-license patch
- BATCH=yes bmake build
- BATCH=yes bmake fake
- BATCH=yes bmake package
- staged codex --version: codex-cli 0.149.0
- ldd on all four staged binaries: no missing libraries
- xz -t and archive-content check on the generated package
- review follow-up: check-license, checksum, clean patch, staged
post-install path expansion
- portlint -C: 0 fatal errors, 2 advisory warnings

Tests:
- the all-features workspace test target was attempted; the parallel run
had a release-mode integration-test link killed by SIGKILL, and a
one-job retry was stopped after more than 45 minutes while still linking
additional release-mode test artifacts. No source test failure was
reported before stopping.
- NO_TEST=yes is retained because the full workspace suite exceeds
practical time and memory limits on the build host.

---------

Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Sun Aug 30 23:58:51 2026
From: noreply at github.com (Lucas Holt)
Date: Sun, 30 Aug 2026 20:58:51 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] a6e700: ai/codex: update to
 0.149.0
Message-ID: <MidnightBSD/mports/push/refs/heads/ai/codex/000000-c3abf1@github.com>

  Branch: refs/heads/ai/codex
  Home:   https://github.com/MidnightBSD/mports
  Commit: a6e700e80cb4c1df87c733284b7a54690694968a
      https://github.com/MidnightBSD/mports/commit/a6e700e80cb4c1df87c733284b7a54690694968a
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:
    M ai/codex/Makefile
    M ai/codex/Makefile.crates
    M ai/codex/distinfo
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build.rs
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_BUILDCONFIG.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_c++_modules.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_clang_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_compiler_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_compiler__cpu__abi.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_linux_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_linux_pkg-config.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_sanitizers_sanitizers.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_v8__target__cpu.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_detect__host__arch.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_gn__run__binary.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_linux_chrome.map
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_linux_unbundle_libusb.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_freebsd_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_gcc__solink__wrapper.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_gcc__toolchain.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_siso.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_sysroot.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_toolchain.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_abseil-cpp_absl_base_config.h
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_abseil-cpp_absl_base_internal_sysinfo.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_icu_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_partition__alloc_src_partition__alloc_stack_stack.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_include_v8config.h
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_api_api.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_base_platform_platform-freebsd.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_base_platform_platform-posix.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_diagnostics_perf-jit.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_diagnostics_perf-jit.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build.rs
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_BUILDCONFIG.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_c++_modules.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_clang_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_clang_clang.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_compiler_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_compiler__cpu__abi.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_linux_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_linux_libdrm_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_linux_pkg-config.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_ozone.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_rust.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_v8__target__cpu.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_detect__host__arch.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_dotfile__settings.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_gn__run__binary.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_chrome.map
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_strip__binary.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_strip__binary.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_unbundle_icu.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_unbundle_libpng.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_unbundle_libusb.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_modules_unified_modulemap__config.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_allocator_lib.rs
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_rust__bindgen.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_rust__bindgen__generator.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_std_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_freebsd_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_gcc__solink__wrapper.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_gcc__toolchain.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_openbsd_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_toolchain.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_abseil-cpp_absl_base_config.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_abseil-cpp_absl_base_internal_sysinfo.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_abseil-cpp_absl_debugging_internal_elf__mem__image.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libc++_src_include_____locale__dir_support_bsd__like.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libc++_src_src_chrono.cpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libc++_src_src_filesystem_filesystem__clock.cpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_AddressSpace.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_DwarfInstructions.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_EHHeaderParser.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_UnwindCursor.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_partition__alloc.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_page__allocator.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_partition__root.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_spinning__mutex.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_stack_stack.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_build__overrides_partition__alloc.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_gni_v8.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_include_v8-internal.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_include_v8config.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_api_api.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_atomicops.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_macros.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_memory.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_platform-freebsd.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_platform-openbsd.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_platform-posix.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_strings.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_sys-info.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_diagnostics_perf-jit.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_diagnostics_perf-jit.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_execution_isolate.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_flags_flags.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_libsampler_sampler.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_objects_js-temporal-zoneinfo64.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_objects_simd.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_sandbox_sandbox.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_snapshot_embedded_platform-embedded-file-writer-base.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_snapshot_embedded_platform-embedded-file-writer-base.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_snapshot_embedded_platform-embedded-file-writer-generic.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_trap-handler_handler-inside-posix.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_trap-handler_handler-inside-posix.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_trap-handler_trap-handler.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_tools_run.py
    A ai/codex/files/patch-codex-rs_Cargo.lock
    A ai/codex/files/patch-codex-rs_Cargo.toml
    A ai/codex/files/patch-codex-rs_code-mode-protocol_build.rs
    A ai/codex/files/patch-codex-rs_core_src_tools_runtimes_apply_patch.rs
    M ai/codex/files/patch-codex-rs_exec_tests_suite_mod.rs
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_address_space_randomization.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_debug_proc_maps_linux.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_debug_stack_trace_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_rand_util_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_threading_platform_thread.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_threading_platform_thread_internal_posix.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_threading_platform_thread_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_config.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_constants.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_forward.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_page_allocator_constants.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_page_allocator_internals_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_page_allocator_internals_posix.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_thread_isolation_pkey.cc
    R ai/codex/files/patch-v8_partition_alloc_libc_symbols.h

  Log Message:
  -----------
  ai/codex: update to 0.149.0

Update the vendored Cargo dependencies and V8 patches to match the 0.149.0 release. Require Rust 1.95.0 and GN 2345, and package the additional helper binaries shipped by this release.

AI-Assisted-by: Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: 797fdc7cd9c3ddbc96fdb642b820214039cf95b9
      https://github.com/MidnightBSD/mports/commit/797fdc7cd9c3ddbc96fdb642b820214039cf95b9
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-29 (Sat, 29 Aug 2026)

  Changed paths:
    M ai/codex/Makefile
    M ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_gni_v8.gni
    M ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_include_v8config.h

  Log Message:
  -----------
  ai/codex: address review feedback

Reset PORTREVISION for the version update, keep the resource-intensive workspace tests disabled, correct staged post-install paths, and fix BSD target typos in the V8 patches.

AI-Assisted-by: Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: c3abf123db656e610dea480673727fbaf187f12f
      https://github.com/MidnightBSD/mports/commit/c3abf123db656e610dea480673727fbaf187f12f
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-30 (Sun, 30 Aug 2026)

  Changed paths:
    M sysutils/cpu-microcode-intel/Makefile
    M sysutils/cpu-microcode-intel/distinfo
    M sysutils/cpu-microcode-intel/pkg-message
    M sysutils/cpu-microcode-intel/pkg-plist

  Log Message:
  -----------
  sysutils/cpu-microcode-intel: update


Compare: https://github.com/MidnightBSD/mports/compare/a6e700e80cb4%5E...c3abf123db65

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications

From noreply at github.com  Sun Aug 30 23:59:47 2026
From: noreply at github.com (Lucas Holt)
Date: Sun, 30 Aug 2026 20:59:47 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/mports] 6620ee: ai/claude-code:
 update to 2.1.248 (#791)
Message-ID: <MidnightBSD/mports/push/refs/heads/ai/codex/c3abf1-2c6516@github.com>

  Branch: refs/heads/ai/codex
  Home:   https://github.com/MidnightBSD/mports
  Commit: 6620eec77d527067ffd24bd7000f216db8f4d3d7
      https://github.com/MidnightBSD/mports/commit/6620eec77d527067ffd24bd7000f216db8f4d3d7
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:
    M ai/claude-code/Makefile
    M ai/claude-code/distinfo

  Log Message:
  -----------
  ai/claude-code: update to 2.1.248 (#791)

## Summary
- update Claude Code from 2.1.243 to 2.1.248
- refresh the npm tarball checksum and size

## Validation
- BATCH=yes bmake makesum
- BATCH=yes bmake clean patch
- BATCH=yes bmake
- BATCH=yes bmake fake package
- BATCH=yes bmake test
- staged binary: 2.1.248 (Claude Code)
- xz -t Packages/amd64/All/claude-code-2.1.248.mport
- BATCH=yes bmake check-license
- portlint -C ai/claude-code (0 fatal errors; 5 pre-existing warnings)
- git diff --check

## Summary by Sourcery

Update the Claude Code port to the 2.1.248 release.

Enhancements:
- Update the packaged Claude Code release to version 2.1.248.

Chores:
- Refresh the npm distribution metadata for the updated release.

Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: 06203e68497c3850ee2534141d741cbb9148f392
      https://github.com/MidnightBSD/mports/commit/06203e68497c3850ee2534141d741cbb9148f392
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:
    M mail/dovecot24/Makefile
    M mail/dovecot24/distinfo
    M mail/dovecot24/pkg-plist

  Log Message:
  -----------
  mail/dovecot24: update to 2.4.5 (#792)

## Summary
- update dovecot from 2.4.4 to 2.4.5, reset `PORTREVISION` to 0
- refresh `distinfo` for the 2.4.5 tarball
- sync `pkg-plist` with the new release: add `abnf.h`, `bitmap.h`,
`idna.h`, `idna-punycode.h`, `imap-state-private.h`, `sasl-proxy.h`,
`storage-version.h`, `xxh64.h` and `libexec/dovecot/imap-hibernate`;
drop `punycode.h`

## Validation
- distfile SHA256 and size verified against `distinfo`
(`868c2686a61b5f8e00a3e4721789b1ab46e6528fd773a5fbed07a6ecba7731e6`,
8747733 bytes)
- plist changes derived from the staged 2.4.5 build

Prepared in a separate worktree off `origin/master` so it does not touch
unrelated in-flight work.

## Summary by Sourcery

Update the Dovecot 2.4 port to version 2.4.5 and align its packaging
metadata with the release.

Enhancements:
- Update the Dovecot 2.4 port to release 2.4.5 and synchronize its
package contents with the new release.

Chores:
- Refresh the distfile metadata and reset the port revision for the new
upstream release.

Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: 32562722ac39e23fc02b019d4dda23788c95c2b2
      https://github.com/MidnightBSD/mports/commit/32562722ac39e23fc02b019d4dda23788c95c2b2
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-28 (Fri, 28 Aug 2026)

  Changed paths:
    M mail/dovecot24/Makefile
    A mail/dovecot24/files/patch-src_lib_net.c

  Log Message:
  -----------
  Mail/dovecot24 (#793)

Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: aa56122424e1888a2d5c4d25f1d2019a06d2d8dd
      https://github.com/MidnightBSD/mports/commit/aa56122424e1888a2d5c4d25f1d2019a06d2d8dd
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-29 (Sat, 29 Aug 2026)

  Changed paths:
    M ai/codex/Makefile
    M ai/codex/Makefile.crates
    M ai/codex/distinfo
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build.rs
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_BUILDCONFIG.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_c++_modules.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_clang_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_compiler_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_compiler__cpu__abi.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_linux_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_linux_pkg-config.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_sanitizers_sanitizers.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_config_v8__target__cpu.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_detect__host__arch.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_gn__run__binary.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_linux_chrome.map
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_linux_unbundle_libusb.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_freebsd_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_gcc__solink__wrapper.py
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_gcc__toolchain.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_siso.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_sysroot.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_build_toolchain_toolchain.gni
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_abseil-cpp_absl_base_config.h
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_abseil-cpp_absl_base_internal_sysinfo.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_icu_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_third__party_partition__alloc_src_partition__alloc_stack_stack.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_BUILD.gn
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_include_v8config.h
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_api_api.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_base_platform_platform-freebsd.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_base_platform_platform-posix.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_diagnostics_perf-jit.cc
    R ai/codex/files/patch-cargo-crates_v8-149.2.0_v8_src_diagnostics_perf-jit.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build.rs
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_BUILDCONFIG.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_c++_modules.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_clang_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_clang_clang.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_compiler_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_compiler__cpu__abi.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_linux_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_linux_libdrm_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_linux_pkg-config.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_ozone.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_rust.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_config_v8__target__cpu.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_detect__host__arch.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_dotfile__settings.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_gn__run__binary.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_chrome.map
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_strip__binary.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_strip__binary.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_unbundle_icu.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_unbundle_libpng.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_linux_unbundle_libusb.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_modules_unified_modulemap__config.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_allocator_lib.rs
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_rust__bindgen.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_rust__bindgen__generator.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_rust_std_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_freebsd_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_gcc__solink__wrapper.py
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_gcc__toolchain.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_openbsd_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_build_toolchain_toolchain.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_abseil-cpp_absl_base_config.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_abseil-cpp_absl_base_internal_sysinfo.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_abseil-cpp_absl_debugging_internal_elf__mem__image.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libc++_src_include_____locale__dir_support_bsd__like.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libc++_src_src_chrono.cpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libc++_src_src_filesystem_filesystem__clock.cpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_AddressSpace.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_DwarfInstructions.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_EHHeaderParser.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_libunwind_src_src_UnwindCursor.hpp
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_partition__alloc.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_page__allocator.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_partition__root.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_spinning__mutex.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_third__party_partition__alloc_src_partition__alloc_stack_stack.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_BUILD.gn
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_build__overrides_partition__alloc.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_gni_v8.gni
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_include_v8-internal.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_include_v8config.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_api_api.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_atomicops.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_macros.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_memory.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_platform-freebsd.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_platform-openbsd.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_platform_platform-posix.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_strings.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_base_sys-info.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_diagnostics_perf-jit.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_diagnostics_perf-jit.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_execution_isolate.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_flags_flags.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_libsampler_sampler.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_objects_js-temporal-zoneinfo64.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_objects_simd.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_sandbox_sandbox.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_snapshot_embedded_platform-embedded-file-writer-base.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_snapshot_embedded_platform-embedded-file-writer-base.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_snapshot_embedded_platform-embedded-file-writer-generic.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_trap-handler_handler-inside-posix.cc
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_trap-handler_handler-inside-posix.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_src_trap-handler_trap-handler.h
    A ai/codex/files/patch-cargo-crates_v8-150.4.0_v8_tools_run.py
    A ai/codex/files/patch-codex-rs_Cargo.lock
    A ai/codex/files/patch-codex-rs_Cargo.toml
    A ai/codex/files/patch-codex-rs_code-mode-protocol_build.rs
    A ai/codex/files/patch-codex-rs_core_src_tools_runtimes_apply_patch.rs
    M ai/codex/files/patch-codex-rs_exec_tests_suite_mod.rs
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_address_space_randomization.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_debug_proc_maps_linux.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_debug_stack_trace_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_rand_util_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_threading_platform_thread.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_threading_platform_thread_internal_posix.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_base_threading_platform_thread_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_config.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_constants.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_forward.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_page_allocator_constants.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_page_allocator_internals_posix.cc
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_page_allocator_internals_posix.h
    A ai/codex/files/patch-v8-150.4.0_partition_alloc_thread_isolation_pkey.cc
    R ai/codex/files/patch-v8_partition_alloc_libc_symbols.h

  Log Message:
  -----------
  ai/codex: update to 0.149.0 (#794)

Summary:
- update Codex CLI and vendored Cargo dependencies to 0.149.0
- update the bundled V8 port patches to 150.4.0
- require Rust 1.95.0 and GN 2345, matching upstream build requirements
- package codex-code-mode-host, codex-responses-api-proxy, and
logs_client alongside codex
- address review feedback for package revision, staged install paths,
and BSD target detection

Validation:
- bmake makesum
- BATCH=yes bmake clean checksum check-license patch
- BATCH=yes bmake build
- BATCH=yes bmake fake
- BATCH=yes bmake package
- staged codex --version: codex-cli 0.149.0
- ldd on all four staged binaries: no missing libraries
- xz -t and archive-content check on the generated package
- review follow-up: check-license, checksum, clean patch, staged
post-install path expansion
- portlint -C: 0 fatal errors, 2 advisory warnings

Tests:
- the all-features workspace test target was attempted; the parallel run
had a release-mode integration-test link killed by SIGKILL, and a
one-job retry was stopped after more than 45 minutes while still linking
additional release-mode test artifacts. No source test failure was
reported before stopping.
- NO_TEST=yes is retained because the full workspace suite exceeds
practical time and memory limits on the build host.

---------

Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: 2c6516e69489f9673930a8c6eb077a416f1dee40
      https://github.com/MidnightBSD/mports/commit/2c6516e69489f9673930a8c6eb077a416f1dee40
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-08-30 (Sun, 30 Aug 2026)

  Changed paths:
    M ai/claude-code/Makefile
    M ai/claude-code/distinfo
    M mail/dovecot24/Makefile
    M mail/dovecot24/distinfo
    A mail/dovecot24/files/patch-src_lib_net.c
    M mail/dovecot24/pkg-plist

  Log Message:
  -----------
  Merge branch 'master' into ai/codex


Compare: https://github.com/MidnightBSD/mports/compare/c3abf123db65...2c6516e69489

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications