dns/knot-resolver5.7.8

dns/knot-resolver: Update 5.7.6 => 5.7.8

Upstream now supports:
- LMDB 1.0.0.
- libdnssec merged into libknot (knot >=3.6).

Changelog:
https://gitlab.nic.cz/knot/knot-resolver/raw/v5.7.8/NEWS

PR:		298518
Approved by:	osa, vvd (Mentors, implicit)

databases/lmdb0: Add port for LMDB 0.9.x legacy ABI

LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.

Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.

This commit introduces databases/lmdb0 as a holding port for the 0.9.35
release, pinned to the 0.x branch with PORTSCOUT=limit:^0. and mutually
conflicting with databases/lmdb, which retains 1.0. The two packages
cannot be installed simultaneously, but having lmdb0 available means:

* Ports known to require the 0.9 ABI can declare an explicit dependency
  on databases/lmdb0 until they are validated against 1.0.
* Users with existing databases in the 0.9 format can still access the
  mdb_dump and mdb_load utilities to migrate data before upgrading.
* The package conflict prevents accidental mixing.

All 50 direct dependents of databases/lmdb are redirected to
databases/lmdb0 for now with a PORTREVISION bump, effectively restoring
the tree to the state prior to the LMDB 1.0 update. Once all dependent
ports are validated against LMDB 1.0, they will be moved back to
databases/lmdb and databases/lmdb0 will be removed.

PR:             ports/296530

*/*: Bump all devel/protobuf consumers

They must always be bumped after devel/protobuf because it include
following files whose filenames contain %%PORTVERSION%%. Consequently,
the shlib will always change when PORTVERSION is increased.

lib/libprotobuf-lite.so.%%PORTVERSION%%.0
lib/libprotobuf.so.%%PORTVERSION%%.0
lib/libprotoc.so.%%PORTVERSION%%.0

Approved by:	portmgr (blanket; fixing consumers)

dns/knot-resolver: minor changes missed in the previous update

PR:		291718

dns/knot-resolver: Bump PORTREVISION after update dns/knot3 3.4.8 => 3.5.0

PR:	289918

dns/knot-resolver: Update 5.7.5 => 5.7.6 (security fixes)

Security
--------
- DoS: fix a rare segfault in `resolve` function (!1720)
  Someone controlling the DNS traffic might be able
  to trigger this crash intentionally and too often.
- DoS: drop a wrong assertion/crash (!1721)
  Someone controlling the DNS traffic will most likely be able
  to trigger this crash intentionally and too often.

Changelog:
https://gitlab.nic.cz/knot/knot-resolver/raw/v5.7.6/NEWS

- Modify MASTER_SITES in Makefile, see:
https://lists.nic.cz/hyperkitty/list/knot-resolver-users@lists.nic.cz/thread/H3M2A7NJR6MHRU53MW7P4SW2IWY4QX74/
- Move cmake from BUILD_DEPENDS to USES.

PR:		288586
Approved by:	Leo Vandewoestijne <freebsd@dns.company> (maintainer)
MFH:		2025Q3

lang/luajit: update to v2.1

Disconnect lang/luajit-devel from the build, will be removed soon.
Bump PORTREVISIONs for the consumers.

Discussed with:	adamw
PR:		225342

dns/knot-resolver: Update 5.7.4 => 5.7.5

Security
* DoS: fix unconfirmed crashes with the line below (!1683) [system]
  requirement "h && h->end > h->begin" failed in queue_pop_impl

Release notes:
https://www.knot-resolver.cz/2025-04-24-knot-resolver-5.7.5.html

PR:	286628
MFH:	2025Q2

devel/protobuf: Update to 29.4

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

devel/protobuf: Update to 29.3

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

devel/protobuf: Update to 28.3

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

devel/protobuf: Update to 28.2

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

dns/knot-resolver: Remove libtool as dependency

Not used in project

Approved by:	portmgr (blanket)

devel/protobuf: Update to 28.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

devel/protobuf: Update to 28.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

dns/knot-resolver: Upgrade 5.7.3 → 5.7.4

Changelog:
  Security
    reduce buffering of transmitted data, especially TCP-based in
    userspace Also expose some of the new tweaks in lua:
        (require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000
        (require 'ffi').C.the_worker.engine.net.listen_{tcp,udp}_buflens.{snd,rcv}
  Improvements
    add the fresh DNSSEC root key "KSK-2024" already, Key ID 38696
    (!1556)
  Incompatible changes
    libknot 3.0.x support is dropped (!1558) Upstream last maintained
    3.0.x in spring 2022.
https://www.knot-resolver.cz/2024-07-23-knot-resolver-5.7.4.html

PR:	280688

devel/protobuf: Update to 27.3

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

dns/knot-resolver: Depend on knot3

In preparation for the removal of dns/knot3-lib

dns/knot-resolver: fixing rc scripts krescachegc and kresd

* kresd.i lacked activation of defined status_cmd="${name}_status"

 * dns/knot-resolver/files/krescachegc.in needed full clean-up:

	* daemon didn't start due to missing '-c <resolver_cache>'
	* missing 'start', 'stop' and 'status' functionality added

PR:		277540
Reported by:	trashcan@ellael.org

dns/knot-resolver: make the rc scripts service jails aware

PR:		279632
Approved by:	maintainer

dns/knot-resolver: Update to 5.7.2

changeLog:
https://www.knot-resolver.cz/2024-03-27-knot-resolver-5.7.2.html

PR:		278364
Approved by:	submitter is maintainer

dns/knot-resolver: Update version 5.7.0=>5.7.1

Changelog: https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html

PR:		277306
Approved by:	portmgr (security)

*/*: Sanitize MANPREFIX for meson ports

Approved by:	portmgr

devel/protobuf: Update to 24.4

- Use USES=pathfix to fix .pc installation
- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

dns/knot-resolver: upgrade to 5.7.0

ChangeLog: https://www.knot-resolver.cz/2023-08-22-knot-resolver-5.7.0.html

Security

 * avoid excessive TCP reconnections in a few more cases Like before, the remote
   server had to behave nonsensically in order to inflict this upon itself, but
   it might be abusable for DoS.

Improvements

 * forwarding mode: tweak dealing with failures from forwarders, in particular
   prefer sending CD=0 upstream

Bugfixes

 * fix unusual timestamp format in debug dumps of records
 * adjust linker options; it should help less common platforms
 * hints module: fix names inside home.arpa.
 * EDNS padding (RFC 8467) compatibility with knot-dns 3.3 libs

PR:		273308
Reported by:	freebsd@dns.company (maintainer)

all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>

dns/knot-resolver: Update to 5.6.0

- Remove unused TEST option
 - Remove broken TESTCONFIG and TESTEXTRA options
 - Update TESTUNIT option description to reflect that it only builds
   tests so `make test` can be run after

ChangeLog:	https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html
PR:		269368

dns/knot-resolver: Fix file permissions

To enable cache garbage collector
PR:		267016
Reported by:	yonas.yanfa@gmail.com

dns/knot-resolver: Use USES=luajit (defaults to luajit-devel)

dns/knot-resolver: Fix service status

Add status() function to rc script.

PR:		266320
Reported by:	yonas.yanfa@gmail.com
Approved by:	freebsd@dns.company (maintainer, timeout > 1 month)

devel/protobuf: Update to 3.21.7

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

*/*: Update path set in BUILD_DEPENDS for CMake in more ports

Commit b23ea4e2d2f51b53d8915fe9fd7b4efbdd575e38 changed its location to
devel/cmake-core

Approved by:	portmgr (blanket)

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

dns/knot-resolver: upgrade to 5.5.2

ChangeLog: https://www.knot-resolver.cz/2022-08-16-knot-resolver-5.5.2.html

PR:		266020
Reported by:	freebsd@dns.company (maintainer)

dns/knot3-lib: Fix pkg-plist after master upgrade

After commit 19c2289c66eba7a9a02ebd0862c5009ceb36f637
dns/knot3: upgrade to 3.2.0
the pkg-plist of the slave port must be updated as well.

Also bump PORTREVISION on consumer dns/knot-resolver.

PR:			265999
Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D36308

dns: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Allan Jude <allanjude@freebsd.org>
  *  Amar Takhar <verm@drunkmonk.net>
  *  Anders Nordby <anders@fix.no>
  *  Andrew Greenwood <greenwood.andy@gmail.com>
  *  Anton Berezin <tobez@FreeBSD.org>
  *  Ashish SHUKLA <ashish@FreeBSD.org>
  *  Attila Nagy <bra@fsn.hu>
  *  Bas Kruit <baskruit@bsltwr.dhis.org>
  *  Bruce M. Simpson <bms@FreeBSD.org>
  *  Carlos J Puga Medina <cpm@fbsd.es>
  *  Chris St Denis (<chris@ctgameinfo.com>)
  *  Clement Laforet <clement@FreeBSD.org>
  *  Clement Laforet <sheepkiller@cultdeadsheep.org>
  *  Dan Langille <dvl@FreeBSD.org>
  *  Dan Pelleg <daniel+mdnsd@pelleg.org>
  *  Dan Smith <dan@algenta.com>
  *  David O'Brien (obrien@NUXI.com)
  *  Dean Hollister <dean@odyssey.apana.org.au>
  *  Dirk Froemberg <dirk@FreeBSD.org>
  *  Dmitry Pryadko <d.pryadko@rambler-co.ru>
  *  Dmitry Sivachenko <mitya@yandex-team.ru>
  *  Dominik Brettnacher <domi@saargate.de>
  *  Douglas Thrift <douglas@douglasthrift.net>
  *  Edwin Groothuis (edwin@mavetju.org)
  *  Edwin Groothuis <edwin@mavetju.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Eyal Soha <esoha@attbi.com>
  *  Filip Parag <filip@parag.rs>
  *  Filippo Natali <filippo.natali@gmail.com>
  *  Frank Behrens
  *  Gea-Suan Lin <gslin@gslin.org>
  *  Geoffroy Desvernay <dgeo@centrale-marseille.fr>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Goran Mekić <meka@tilda.center>
  *  Hajimu UMEMOTO <ume@FreeBSD.org>
  *  Herve Quiroz <hq@FreeBSD.org>
  *  Hirohisa Yamaguchi <umq@ueo.co.jp>
  *  Hye-Shik Chang <perky@fallin.lv>
  *  Jaap Akkerhuis <jaap@NLnetLabs.nl>
  *  James FitzGibbon <jfitz@FreeBSD.org>
  *  Jase Thew <freebsd@beardz.net>
  *  Jimmy Bergman jimmy@sigint.se
  *  Jin-Shan Tseng <tjs@cdpa.nsysu.edu.tw>
  *  Joe Barbish
  *  Jov <amutu@amutu.com>
  *  Jui-Nan Lin <jnlin@freebsd.cs.nctu.edu.tw>
  *  Karl Dietz (Karl.Dietz@frankfurt.netsurf.de)
  *  Kirill Ponomarew <ponomarew@oberon.net>
  *  Koen Martens <gmc@sonologic.nl>
  *  Konstantin Saurbier <saurbier@math.uni-bielefeld.de>
  *  Kostya Lukin <lukin@okbmei.msk.su>
  *  Kris Kennaway <kris@FreeBSD.org>
  *  Kubilay Kocak <koobs@FreeBSD.org>
  *  Kurt Jaeger <fbsd-ports@opsec.eu>
  *  Leo Vandewoestijne <freebsd@dns-lab.com>
  *  Leo Vandewoestijne <freebsd@dns.company>
  *  MIHIRA Yoshiro <sanpei@jp.FreeBSD.org>
  *  Marcin Gondek <drixter@e-utp.net>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Mark Linimon <linimon@lonesome.com>
  *  Mark Pulford <mark@kyne.com.au>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Matthew Hunt <mph@pobox.com>
  *  Matthew Seaman
  *  Michael Cardell Widerkrantz <mc@hack.org>
  *  Moritz Warning <moritzwarning@web.de>
  *  Natacha Porte <natbsd@instinctive.eu>
  *  Neil Blakey-Milner
  *  Olivier Duchateau
  *  Paul Chvostek <paul@it.ca>
  *  Paul Dlug <paul@aps.org>
  *  Philippe Pepiot <phil@philpep.org>
  *  Piotr Kubaj <pkubaj@FreeBSD.org>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Rafal Lesniak <fbsd@grid.einherjar.de>
  *  Roman Shterenzon <roman@xpert.com>
  *  Rong-En Fan <rafan@FreeBSD.org>
  *  Roy Marples <roy@marples.name>
  *  Ryan Steinmetz <rpsfa@rit.edu>
  *  Ryan Steinmetz <zi@FreeBSD.org>
  *  Sahil Tandon <sahil@tandon.net>
  *  Seamus Venasse <svenasse@polaris.ca>
  *  Sergei Kolobov <sergei@FreeBSD.org>
  *  Sergei Kolobov <sergei@kolobov.com>
  *  Sergey Matveychuk <sem@FreeBSD.org>
  *  Sergey Skvortsov <skv@protey.ru>
  *  Simon Dick <simond@irrelevant.org>
  *  Stefan Esser <se@FreeBSD.org>
  *  Steve Wills <swills@FreeBSD.org>
  *  Steve Wills <swills@freebsd.org>
  *  Steven Honson
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
  *  Timothy Beyer <beyert@cs.ucr.edu>
  *  Waitman Gobble <waitman@waitman.net>
  *  Wen Heping <wen@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Zane C, Bowers <vvelox@vvelox.net>
  *  adamw
  *  alexis
  *  andrew@ugh.net.au
  *  bkhl
  *  clsung
  *  clsung@dragon2.net
  *  dglo@ssec.wisc.edu
  *  dnscheckengine-port@academ.com (Stan Barber)
  *  fenner
  *  geniusj@ods.org
  *  ijliao
  *  ismail.yenigul@endersys.com.tr
  *  krion
  *  mark@foster.cc
  *  n@nectar.com
  *  roam@FreeBSD.org
  *  rodrigc@FreeBSD.org
  *  rpsfa@rit.edu
  *  sten@blinkenlights.nl

With hat:	portmgr

dns/knot-resolver: upgrade to 5.5.0

ChangeLog: https://www.knot-resolver.cz/2022-03-15-knot-resolver-5.5.0.html

PR:	264222
Reported by:	freebsd@dns.company (maintainer)

dns/knot-resolver: Fix PLIST

- Bump PORTREVISION for package change

====> Checking for pkg-plist issues (check-plist)
===> Parsing plist
===> Checking for items in STAGEDIR missing from pkg-plist
Error: Orphaned: lib/knot-resolver/debug_opensslkeylog.so
===> Checking for items in pkg-plist which are not in STAGEDIR
===> Error: Plist issues found.
*** Error code 1

Stop.
make: stopped in /usr/ports/dns/knot-resolver

devel/protobuf: Update to 3.20.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

devel/protobuf: Update to 3.19.4

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

dns/knot-resolver: Update to 5.4.4

Changelog:	https://www.knot-resolver.cz/2022-01-05-knot-resolver-5.4.4.html

PR:		261087

dns/knot-resolver: Update to 5.4.3

Changelog:	https://www.knot-resolver.cz/2021-12-01-knot-resolver-5.4.3.html

PR:		260800

dns/knot-resolver: Update to 5.4.1

ChangeLog: https://www.knot-resolver.cz/2021-08-19-knot-resolver-5.4.1.html

PR:		258020

dns/knot-resolver: Update to 5.4.0

Changes: https://www.knot-resolver.cz/2021-07-29-knot-resolver-5.4.0.html

PR:		257553

devel/protobuf: Update to 3.17.3

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases
PR:		257026
Exp-run by:	antoine

dns/knot-resolver: Apply maintainer's cleanup

This also fixes the kresd.conf @sample, prefer the maintainer's
approach in the cleanup patch that arrived after d94ae2c3c666

PR:		254765
Approved by:	Leo Vandewoestijne <freebsd@dns.company> (maintainer)

dns/knot-resolver: Fix @sample use

The port was not using the @sample functionality correctly, stage the
correct sample config in post-install and fix the pkg-plist.

PR:		254765
Reported by:	Marcel <marcel@brickporch.com>
Approved by:	maintainer timeout

all: Remove all other $FreeBSD keywords.

Remove # $FreeBSD$ from Makefiles.