Changelog:
Security
reduce buffering of transmitted data, especially TCP-based in
userspace Also expose some of the new tweaks in lua:
(require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000
(require 'ffi').C.the_worker.engine.net.listen_{tcp,udp}_buflens.{snd,rcv}
Improvements
add the fresh DNSSEC root key "KSK-2024" already, Key ID 38696
(!1556)
Incompatible changes
libknot 3.0.x support is dropped (!1558) Upstream last maintained
3.0.x in spring 2022.
https://www.knot-resolver.cz/2024-07-23-knot-resolver-5.7.4.html
PR: 280688
ChangeLog: https://www.knot-resolver.cz/2023-08-22-knot-resolver-5.7.0.html
Security
* avoid excessive TCP reconnections in a few more cases Like before, the remote
server had to behave nonsensically in order to inflict this upon itself, but
it might be abusable for DoS.
Improvements
* forwarding mode: tweak dealing with failures from forwarders, in particular
prefer sending CD=0 upstream
Bugfixes
* fix unusual timestamp format in debug dumps of records
* adjust linker options; it should help less common platforms
* hints module: fix names inside home.arpa.
* EDNS padding (RFC 8467) compatibility with knot-dns 3.3 libs
PR: 273308
Reported by: freebsd@dns.company (maintainer)
The logic in USES=python will automatically convert this to 3.8+ by
itself.
Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.
finance/quickfix: mark BROKEN with PYTHON
libtool: compile: c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
^~~~~~~~~~
1 warning and 1 error generated.
Reviewed by: portmgr, vishwin, yuri
Differential Revision: <https://reviews.freebsd.org/D40568>
- Remove unused TEST option
- Remove broken TESTCONFIG and TESTEXTRA options
- Update TESTUNIT option description to reflect that it only builds
tests so `make test` can be run after
ChangeLog: https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html
PR: 269368
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.
There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.
The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.
Approved by: portmgr (tcberner)
After commit 19c2289c66eba7a9a02ebd0862c5009ceb36f637
dns/knot3: upgrade to 3.2.0
the pkg-plist of the slave port must be updated as well.
Also bump PORTREVISION on consumer dns/knot-resolver.
PR: 265999
Approved by: tcberner (mentor)
Differential Revision: https://reviews.freebsd.org/D36308
- Bump PORTREVISION for package change
====> Checking for pkg-plist issues (check-plist)
===> Parsing plist
===> Checking for items in STAGEDIR missing from pkg-plist
Error: Orphaned: lib/knot-resolver/debug_opensslkeylog.so
===> Checking for items in pkg-plist which are not in STAGEDIR
===> Error: Plist issues found.
*** Error code 1
Stop.
make: stopped in /usr/ports/dns/knot-resolver
This also fixes the kresd.conf @sample, prefer the maintainer's
approach in the cleanup patch that arrived after d94ae2c3c666
PR: 254765
Approved by: Leo Vandewoestijne <freebsd@dns.company> (maintainer)
The port was not using the @sample functionality correctly, stage the
correct sample config in post-install and fix the pkg-plist.
PR: 254765
Reported by: Marcel <marcel@brickporch.com>
Approved by: maintainer timeout
- Repocopy textproc/py-sphinx to textproc/py-sphinx18
Update it to 1.8.5 (latest version from 1.8.X).
This version supports Python 2 and 3.
Add test target.
- textproc/py-sphinx: Update to 3.0.2
Python 3 only (3.5+).
Add test target.
- Mk/Uses/python.mk: Add PY_SPHINX
Shared macro to use with flavors and not break
ports with USES=python (all versions).
Python >=3.5 --> textproc/py-sphinx (v3.0.2)
Python < 3.5 --> textproc/py-sphinx18 (v1.8.5)
All ports that uses sphinx were changed to use the new variable
${PY_SPHINX} in the dependency line, exceptions:
* Ports that fails to build with sphinx 3.0.2 because of code.
They are pointing to textproc/py-sphinx18 directly.
There aren't many ports.
* Ports that doesn't know Python flavors.
- Add several patches to fix Sphinx consumers
The most common issues are related with pkg-plist, the output
files from Sphinx changes between versions, keep this dynamically
is the better approach.
This will save time in future sphinx updates.
PR: 245629
Exp-run by: antoine
Ports using USES=lua:module or lua:flavors will be flavored. A range of
supported lua versions can be set using XX-YY (or XX-, or -YY, or simply ZZ)
for ports not supporting all lua versions.
USES=lua sets LUA_FLAVOR that needs to be used on all dependencies of
flavored lua ports, in a similar way as PHP or Python flavors.
PR: 245038
Submitted by: andrew tao11 riddles org uk
Reviewed by: mat, kevans, russ haley gmail com
Approved by: mat (portmgr)
Differential Revision: https://reviews.freebsd.org/D16494
