dns/knot33.6.1

dns/knot3: Update 3.6.0 => 3.6.1

Changelog:
https://www.knot-dns.cz/2026-10-09-version-361.html

PR:		299380
Approved by:	osa, vvd (Mentors, implicit)
MFH:		2026Q4

dns/knot3: Don't abuse DOCS for MANPAGES

The %%DOCS%% substitution was both installing the manpages
and the documentation, so fix that by using MANPAGES instead.

While here:
- Remove option descriptions for IDN and DOCS since
  they are already defined in Mk/bsd.options.desc.mk.
- Pet portclippy.

PR:		298789
Approved by:	osa, vvd (Mentors, implicit)
Co-authored-by:	Vladimir Druzenko <vvd@FreeBSD.org>

dns/knot3: Upstream has support for LMDB 1.0.0

PR:		296529
Approved by:	osa, vvd (Mentors, implicit)

dns/{knot3,py-libknot}: Update 3.5.8 => 3.6.0

Changelog:
https://www.knot-dns.cz/2026-09-08-version-360.html

PR:		298376
Approved by:	osa, vvd (Mentors, implicit)
MFH:		2026Q3

dns/{knot3,py-libknot}: Update 3.5.7 => 3.5.8

Changelog:
https://www.knot-dns.cz/2026-09-04-version-358.html

PR:		298191
Reported by:	Leo Vandewoestijne <freebsd@dns.company> (maintainer)
Approved by:	osa, vvd (Mentors, implicit)
MFH:		2026Q3

dns/{knot3,py-libknot}: Update 3.5.6 => 3.5.7

Changelog:
https://www.knot-dns.cz/2026-08-18-version-357.html

PR:		297852
Sponsored by:	UNIS Labs
MFH:		2026Q3

dns/knot3: Update 3.5.5 => 3.5.6

Changelog:
https://www.knot-dns.cz/2026-07-20-version-356.html

PR:		296979
Sponsored by:	UNIS Labs
MFH:		2026Q3

*: Fix dependency on lmdb0

databases/lmdb0: Add port for LMDB 0.9.x legacy ABI

LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.

Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.

This commit introduces databases/lmdb0 as a holding port for the 0.9.35
release, pinned to the 0.x branch with PORTSCOUT=limit:^0. and mutually
conflicting with databases/lmdb, which retains 1.0. The two packages
cannot be installed simultaneously, but having lmdb0 available means:

* Ports known to require the 0.9 ABI can declare an explicit dependency
  on databases/lmdb0 until they are validated against 1.0.
* Users with existing databases in the 0.9 format can still access the
  mdb_dump and mdb_load utilities to migrate data before upgrading.
* The package conflict prevents accidental mixing.

All 50 direct dependents of databases/lmdb are redirected to
databases/lmdb0 for now with a PORTREVISION bump, effectively restoring
the tree to the state prior to the LMDB 1.0 update. Once all dependent
ports are validated against LMDB 1.0, they will be moved back to
databases/lmdb and databases/lmdb0 will be removed.

PR:             ports/296530

dns/{knot3,py-libknot}: Update 3.5.4 => 3.5.5

Changelog:
https://www.knot-dns.cz/2026-06-12-version-355.html

PR:		296249
Approved by:	osa, vvd (Mentors, implicit)
MFH:		2026Q2

dns/{knot3,py-libknot}: Update 3.5.3 => 3.5.4

Changelog:
https://www.knot-dns.cz/2026-04-02-version-354.html

PR:		294867
Sponsored by:	UNIS Labs
MFH:		2026Q2

dns/{knot3,py-libknot}: Update 3.5.2 => 3.5.3

Changelog:
https://www.knot-dns.cz/2026-01-16-version-353.html

PR:	292727
MFH:	2026Q1

*/*: De-orbit alias.mk

Mk/Uses/alias.mk was an attempt for compat with DPorts, but has rotted.
This feature was never documented in the PHB, so there is no work to
be done by the docs@ team.

Nothing against DragonFly, but if DPorts still needs FreeBSD 9
support, they really should work that out with upstream projects.

Ultimately, we don't need to keep carrying this outdated feature that
doesn't affect us.

dns/{knot3,py-libknot}: Update 3.5.0 => 3.5.2

Changelog:
https://gitlab.nic.cz/knot/knot-dns/raw/v3.5.2/NEWS

PR:		291264 289611
Approved by:	Leo Vandewoestijne <freebsd@dns.company> (maintainer)
MFH:		2025Q4

dns/{knot3,py-libknot}: Upgrade 3.4.8 => 3.5.0

Changelog:
https://www.knot-dns.cz/2025-09-18-version-350.html

PR:	289918

dns/knot3: Update to 3.4.8

PR:		288537
Reported by:	maintainer

*/*: Bump PORTREVISION for devel/protobuf-c update

libprotobuf-c.so once again has version info.  Force a rebuild of
its consumers.

PR:		282060
MFH:		2025Q3
Sponsored by:	<If the change was sponsored by an organization.>

dns/{knot3,py-libknot}: Upgrade 3.4.6 => 3.4.7

Changelog:
https://www.knot-dns.cz/2025-06-04-version-347.html

PR:	287291

dns/{knot3,py-libknot}: Update 3.4.5 => 3.4.6

Important bugfixes:
knotd: TLS handshake fails on FreeBSD
knotd: outbound QUIC communication fails on FreeBSD

Changelog:
https://www.knot-dns.cz/2025-04-10-version-346.html

PR:	286151
MFH:	2025Q2

dns/{knot3,py-libknot}: Update 3.4.4 => 3.4.5

Changelog:
https://www.knot-dns.cz/2025-03-18-version-345.html

PR:	285522

dns/{knot3,py-libknot}: Update 3.4.3 → 3.4.4

Changelog:
https://www.knot-dns.cz/2025-01-22-version-344.html

PR:	284318
MFH:	2025Q1

dns/knot3: Workaround due to bug in service(8): /usr/sbin/service: ERROR: USAGE: load_rc_config_var name var

/usr/sbin/service: ERROR: USAGE: load_rc_config_var name var

This is very old and known bug in service(8) from 2016:
https://bugs.freebsd.org/208534
https://reviews.freebsd.org/D5833

PR:		284100
Approved by:	Leo Vandewoestijne <freebsd@dns.company> (maintainer)
MFH:		2025Q1

dns/{knot3,py-libknot}: Update 3.4.2 → 3.4.3

Changelog:
https://www.knot-dns.cz/2024-12-06-version-343.html

PR:	283225

dns/{knot3,py-libknot}: Update 3.4.1 → 3.4.2

Changelog:
https://www.knot-dns.cz/2024-10-31-version-342.html

PR:	282446
MFH:	2024Q4

dns/{knot3,py-libknot}: Update 3.4.0 → 3.4.1

Changelog:
https://www.knot-dns.cz/2024-10-14-version-341.html

PR:	282104
MFH:	2024Q4

dns/{knot3,py-libknot}: Update 3.3.8 → 3.4.0, improve ports

Changelog:
https://www.knot-dns.cz/2024-09-02-version-340.html

PR:	281087

dns/knot3: Add options

And prepare to replace knot3-lib which will be deprecated.

PR:		277332
Reported by:	trashcan@ellael.org

dns/knot3: update 3.3.7 → 3.3.8

Changelog:
https://www.knot-dns.cz/2024-07-22-version-338.html

PR:	280414
MFH:	2024Q3

dns/knot3: Update to 3.3.7

Changelog: https://www.knot-dns.cz/2024-06-25-version-337.html

PR:		279989
Approved by:	tcberner (mentor, implicit)

dns/knot3: upgrade to 3.3.6

Externalization of the port version to help keeping in sync with the upcoming
port dns/py-libknot to be introduced in PR #278280.

ChangeLog: https://www.knot-dns.cz/2024-06-12-version-336.html

Features:

 * knotd: configurable control socket backlog size (see 'control.backlog')
 * knotd: optional configuration of congruency of generated keytags (see
   'policy.keytag-modulo')
 * knotc: support for exporting configuration schema in JSON (see 'conf-export')
 * mod-dnstap: configuration of sink allows TCP address specification

Improvements:

 * knotd: last-signed serial is stored to KASP even if not a secondary zone
 * knotd: allowed catalog role member in a catalog template configuration
 * knotd: some references in a zone configuration can be set empty to override
   a template
 * knotd: allowed zone backup during a zone transaction
 * knotd: add remote TSIG key name to outgoing event logs
 * knotc: zone backup with '+keysonly' silently uses all defaults as 'off'
 * kxdpgun: host name can be used for target specification
 * libs: upgraded embedded libngtcp2 to 1.5.0
 * doc: various fixes and updates

Bugfixes:

 * knotd: reset TCP connection not removed from a connection pool
 * knotd: server wrongly tries to remove removed ZONEMD
 * knotd: failed to parse empty list from a textual configuration
 * knotd: blocking zone signing in combination with an open transaction causes a
   deadlock
 * knotd: missing RCU lock when sending NOTIFY
 * kdig: QNAME letter case isn't preserved if IDN is enabled
 * kdig: failed to parse empty QNAME (do not fill question section)
 * kxdpgun: floating point exception on SIGUSR1 #927
 * libknot: incorrect handling of regular QUIC tokens in incoming initials
 * python: failed to set an empty configuration value

PR:		279828

dns/knot3: Update to 3.3.5

changeLog:
https://www.knot-dns.cz/2024-03-06-version-335.html

PR:		277864
Approved by:	garga (mentor, implicit), maintainer (implicit)

dns/knot3: Update to 3.3.4

ChangeLog:
https://www.knot-dns.cz/2024-01-24-version-334.html

PR:		277305
Approved by:	garga (mentor), Leo Vandewoestijne (maintainer)
Differential Revision: https://reviews.freebsd.org/D44137

dns/knot3: Sanitize MANPREFIX

Approved by:    portmgr (blanket)

dns/knot3: Update version 3.3.2=>3.3.3

Changelog: https://www.knot-dns.cz/2023-12-13-version-333.html

PR:		275763
Approved by:	submitter is maintainer

dns/knot3: update to 3.3.2

Changelog: https://www.knot-dns.cz/2023-10-20-version-332.html

PR:		274691

dns/knot3: upgrade to 3.3.1

ChangeLog: https://gitlab.nic.cz/knot/knot-dns/raw/v3.2.10/NEWS

PR:		273927
Reported by:	freebsd@dns.company (maintainer)

dns/knot3: upgrade to 3.3.0

ChangeLog: https://www.knot-dns.cz/2023-08-28-version-330.html

PR:		273394
Reported by:	freebsd@dns.company (maintainer)

dns/knot3: upgrade to 3.2.9

ChangeLog: https://gitlab.labs.nic.cz/knot/knot-dns/raw/v3.2.9/NEWS

Improvements:
-------------
 * keymgr: 'import-pkcs11' not allowed if no PKCS #11 keystore backend is
   configured
 * keymgr: more verbose key import errors
 * doc: extended migration notes
 * doc: various improvements

Bugfixes:
---------
 * knotd: server may crash when storing changeset of a big zone migrating
   to/from NSEC3
 * knotd: zone refresh loop when all masters are outdated and timers cleared
 * knotd: failed to active D-Bus notifications if not started as systemd service
 * kjournalprint: database transaction not properly closed when terminated
   prematurely

PR:		272752
Reported by:	freebsd@dns.company (maintainer)

dns/knot3: Update to 3.2.8

ChangeLog: https://gitlab.nic.cz/knot/knot-dns/raw/v3.2.8/NEWS

Improvements:
-------------
 * kdig: malformed messages are parsed and printed using a best-effort approach
 * python: new dname from wire initialization

Bugfixes:
---------
 * knotd: missing outgoing NOTIFY upon refresh if one of more primaries is up-to-date
 * knotd: journal loop detection can prevent zone from loading
 * knotd: cryptic error message when journal is full #842
 * knotd: failed to query catalog zone over UDP
 * configure: libngtcp2 check wrongly requires version 0.13.0 instead of 0.13.1

PR:		272222
Reported by:	clukas@firc.de
Approved by:	freebsd@dns.company (maintainer)

dns/knot3: upgrade to 3.2.7

ChangeLog: https://www.knot-dns.cz/2023-06-06-version-327.html

Features:

 * knotd: new configuration option for preserving incoming IXFR changeset
   history (see 'zone.ixfr-by-one')

Improvements:

 * knotd: journal ensures the stored changeset's SOA serials are strictly
   increasing
 * knotd: more effective handling of zero KNOT_ZONE_LOAD_TIMEOUT_SEC environment
   value
 * knotd, kdig: incoming transfer fails if a message has the TC bit set
 * knotd, kjournalprint: store or print the timestamp of changeset creation
 * kxdpgun: load only necessary number of queries (Thanks to Petr Špaček)
 * kxdpgun: print ratio of sent vs. requested queries (Thanks to Petr Špaček)
 * kxdpgun: print percentages as floats (Thanks to Petr Špaček)
 * kjournalprint: ability to print a changeset loop
 * kjournalprint: added changset serials information to '-z -d' output
 * packaging: RHEL9 requires libxdp like fedora since RHEL 9.2
 * doc: various improvements

Bugfixes:

 * knotd: journal loading can get stuck in a multi-changeset loop
 * knotd: missing RCU lock when reading zone through the control interface
 * knotd: server start D-Bus signaling doesn't work well if the zone file is
   missing, catalog zones are used, or in the async-start mode
 * knotd: test suite fails on 32bit architectures on musl 1.2 and newer
 * knotd: failed to process zero-length messages over QUIC
 * libs: compilation with embedded ngtcp2 fails if there is another ngtcp2 in
   the path

PR:		272088
Reported by:	freebsd@dns.company (maintainer)

dns/knot3: Update to 3.2.6

ChangeLog:	https://www.knot-dns.cz/2023-04-04-version-326.html
PR:		270634

dns/knot3: Update to 3.2.5

ChangeLog:	https://www.knot-dns.cz/2023-02-02-version-325.html
PR:		269367

dns/knot3: Update to 3.2.4

ChangeLog:	https://gitlab.nic.cz/knot/knot-dns/raw/v3.2.4/NEWS
PR:		268325

dns/knot3: Update to 3.2.3

Improvements:

 * knotd: new per-zone DS push configuration option (see 'zone.ds-push')
 * libs: upgraded embedded libngtcp2 to 0.11.0

Bugfixes:

 * knsupdate: program crashes when sending an update
 * knotd: server drops more responses over UDP under higher load
 * knotd: missing EDNS padding in responses over QUIC
 * knotd: some memory issues when handling unusual QUIC traffic
 * kxdpgun: broken IPv4 source subnet processing
 * kdig: incorrect handling of unsent data over QUIC

PR:		267965
Reported by:	clukas@firc.de
Approved by:	freebsd@dns.company (maintainer)

dns/knot3: Update to 3.2.2

ChangeLog:	https://www.knot-dns.cz/2022-11-01-version-322.html
PR:		267634

dns/knot3-lib: upgrade to 3.2.1

Changes: https://www.knot-dns.cz/2022-09-09-version-321.html

PR:	266377

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

dns/knot3: upgrade to 3.2.0

Changes: https://www.knot-dns.cz/2022-08-22-version-320.html

PR:	265992

dns: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Allan Jude <allanjude@freebsd.org>
  *  Amar Takhar <verm@drunkmonk.net>
  *  Anders Nordby <anders@fix.no>
  *  Andrew Greenwood <greenwood.andy@gmail.com>
  *  Anton Berezin <tobez@FreeBSD.org>
  *  Ashish SHUKLA <ashish@FreeBSD.org>
  *  Attila Nagy <bra@fsn.hu>
  *  Bas Kruit <baskruit@bsltwr.dhis.org>
  *  Bruce M. Simpson <bms@FreeBSD.org>
  *  Carlos J Puga Medina <cpm@fbsd.es>
  *  Chris St Denis (<chris@ctgameinfo.com>)
  *  Clement Laforet <clement@FreeBSD.org>
  *  Clement Laforet <sheepkiller@cultdeadsheep.org>
  *  Dan Langille <dvl@FreeBSD.org>
  *  Dan Pelleg <daniel+mdnsd@pelleg.org>
  *  Dan Smith <dan@algenta.com>
  *  David O'Brien (obrien@NUXI.com)
  *  Dean Hollister <dean@odyssey.apana.org.au>
  *  Dirk Froemberg <dirk@FreeBSD.org>
  *  Dmitry Pryadko <d.pryadko@rambler-co.ru>
  *  Dmitry Sivachenko <mitya@yandex-team.ru>
  *  Dominik Brettnacher <domi@saargate.de>
  *  Douglas Thrift <douglas@douglasthrift.net>
  *  Edwin Groothuis (edwin@mavetju.org)
  *  Edwin Groothuis <edwin@mavetju.org>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Eyal Soha <esoha@attbi.com>
  *  Filip Parag <filip@parag.rs>
  *  Filippo Natali <filippo.natali@gmail.com>
  *  Frank Behrens
  *  Gea-Suan Lin <gslin@gslin.org>
  *  Geoffroy Desvernay <dgeo@centrale-marseille.fr>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Goran Mekić <meka@tilda.center>
  *  Hajimu UMEMOTO <ume@FreeBSD.org>
  *  Herve Quiroz <hq@FreeBSD.org>
  *  Hirohisa Yamaguchi <umq@ueo.co.jp>
  *  Hye-Shik Chang <perky@fallin.lv>
  *  Jaap Akkerhuis <jaap@NLnetLabs.nl>
  *  James FitzGibbon <jfitz@FreeBSD.org>
  *  Jase Thew <freebsd@beardz.net>
  *  Jimmy Bergman jimmy@sigint.se
  *  Jin-Shan Tseng <tjs@cdpa.nsysu.edu.tw>
  *  Joe Barbish
  *  Jov <amutu@amutu.com>
  *  Jui-Nan Lin <jnlin@freebsd.cs.nctu.edu.tw>
  *  Karl Dietz (Karl.Dietz@frankfurt.netsurf.de)
  *  Kirill Ponomarew <ponomarew@oberon.net>
  *  Koen Martens <gmc@sonologic.nl>
  *  Konstantin Saurbier <saurbier@math.uni-bielefeld.de>
  *  Kostya Lukin <lukin@okbmei.msk.su>
  *  Kris Kennaway <kris@FreeBSD.org>
  *  Kubilay Kocak <koobs@FreeBSD.org>
  *  Kurt Jaeger <fbsd-ports@opsec.eu>
  *  Leo Vandewoestijne <freebsd@dns-lab.com>
  *  Leo Vandewoestijne <freebsd@dns.company>
  *  MIHIRA Yoshiro <sanpei@jp.FreeBSD.org>
  *  Marcin Gondek <drixter@e-utp.net>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Mark Linimon <linimon@lonesome.com>
  *  Mark Pulford <mark@kyne.com.au>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Matthew Hunt <mph@pobox.com>
  *  Matthew Seaman
  *  Michael Cardell Widerkrantz <mc@hack.org>
  *  Moritz Warning <moritzwarning@web.de>
  *  Natacha Porte <natbsd@instinctive.eu>
  *  Neil Blakey-Milner
  *  Olivier Duchateau
  *  Paul Chvostek <paul@it.ca>
  *  Paul Dlug <paul@aps.org>
  *  Philippe Pepiot <phil@philpep.org>
  *  Piotr Kubaj <pkubaj@FreeBSD.org>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Rafal Lesniak <fbsd@grid.einherjar.de>
  *  Roman Shterenzon <roman@xpert.com>
  *  Rong-En Fan <rafan@FreeBSD.org>
  *  Roy Marples <roy@marples.name>
  *  Ryan Steinmetz <rpsfa@rit.edu>
  *  Ryan Steinmetz <zi@FreeBSD.org>
  *  Sahil Tandon <sahil@tandon.net>
  *  Seamus Venasse <svenasse@polaris.ca>
  *  Sergei Kolobov <sergei@FreeBSD.org>
  *  Sergei Kolobov <sergei@kolobov.com>
  *  Sergey Matveychuk <sem@FreeBSD.org>
  *  Sergey Skvortsov <skv@protey.ru>
  *  Simon Dick <simond@irrelevant.org>
  *  Stefan Esser <se@FreeBSD.org>
  *  Steve Wills <swills@FreeBSD.org>
  *  Steve Wills <swills@freebsd.org>
  *  Steven Honson
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
  *  Timothy Beyer <beyert@cs.ucr.edu>
  *  Waitman Gobble <waitman@waitman.net>
  *  Wen Heping <wen@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Zane C, Bowers <vvelox@vvelox.net>
  *  adamw
  *  alexis
  *  andrew@ugh.net.au
  *  bkhl
  *  clsung
  *  clsung@dragon2.net
  *  dglo@ssec.wisc.edu
  *  dnscheckengine-port@academ.com (Stan Barber)
  *  fenner
  *  geniusj@ods.org
  *  ijliao
  *  ismail.yenigul@endersys.com.tr
  *  krion
  *  mark@foster.cc
  *  n@nectar.com
  *  roam@FreeBSD.org
  *  rodrigc@FreeBSD.org
  *  rpsfa@rit.edu
  *  sten@blinkenlights.nl

With hat:	portmgr