ports-mgmt/pkg-devel 2.8.99.4

ports-mgmt/pkg-devel: add missing file

git add was forgotten

Reported by:	bdrewery

ports-mgmt/pkg-devel: 2.8.4

Fixes for the plist @var
speed up pkg rwhich
add a rc script for deferred triggers at firstboot

ports-mgmt/pkg-devel: 2.8.99.3

- fix support for loongarch
- signing command can override the checksum algorithm

ports-mgmt/pkg-devel: update to 2.8.99.2

Changes:
- fix build with openssl4 (which drop supports for old version of
  signatures)
- support longarch64
- solver: hold an upgrade back instread of removing an explicitly
  installed package
- solver: require an explicit confirmation before remove installed
  package
- solver report why each installed package is planed to be removed
- scheduler: fix support for shlibs ordering and provider/requires
  ordering
- checksum add sha512
- repo: fix hang when using a hashed repository
- repo: keep previously fetched catalogue when an update failes
- fetch detect http server that do not carry a 304 Not Modified
- metalog: escape spaces
- config: make PKG_CONFIG_FILE a configuration variable
- keys: fall back on the host keys when using a root directory
- pkg_elf: support musl elf interpreter
- some code hardening

ports-mgmt/pkg-devel: update to 2.8.99.1

Changes:
- security: bound vulnerability database downloads and decompression; build a temporary database and atomically replace it only after validation
- security: bound repository archive downloads and extraction (1 GiB or half of free temporary storage, 1 MiB metadata) and reject duplicate members and oversized target members
- security: bound repository signature extraction (8 MiB callback response, at most 8 signature entries of 1 MiB each)
- security: drop to nobody before entering Capsicum in the sandboxed archive and signature callbacks
- security: enforce the signed package size while fetching, capping the stream even when the server omits a Content-Length
- security: reject invalid repository signature types; only pubkey, fingerprints and none are accepted
- repo: keep file lists out of the data catalog
- repo: open the catalogue read-only when checking its validity
- rwhich: store the compressed filesite as a standalone file
- rwhich: verify the repository signature and store the filesite as a raw compressed file
- rwhich: add a global and a per-repository configuration
- fix: report (added)/(removed) reinstall reasons only once
- fix: use-after-free during the additional SAT cycle
- fix: deferred rc script execution
- rcscript: add a dedicated PKG_EVENT_RC_SCRIPT event for rc.d script actions
- fix: remove leftover nested @dir parents on deinstall
- fix: non-root reads of WAL databases with missing sidecar files fall back to immutable mode
- db: respect compression_level for the file db and the repository metadata
- macho: map macOS 26 / iOS 19 to Darwin 25 in pkg config abi
- libpkg: add PKG_EVENT_PKG_FETCH_BEGIN to report the package being downloaded (for PackageKit)
- utils: always print the signature_type
- fix: SRV/HTTP-mirror fetch only retried the first server; walk the server list once with a per-server retry budget and report SRV/mirror-list lookup failures

ports-mgmt/pkg-devel: update to 2.7.99.3 (will become 2.8.0)

Changes:
- db: switch the local database to WAL journal mode with synchronous=NORMAL for better read concurrency and faster writes
- db: huge optimisation of the local DB, drop 15 redundant single-column indexes, add a flavors VIEW and shlib_id indexes
- db: open read-only databases with SQLITE_OPEN_READONLY, falling back to immutable=1 when WAL sidecar files are inaccessible
- binary repo: use 16K pages and synchronous=OFF during bulk catalog updates to speed up pkg update
- pkgdb: convert implicit SQL-89 JOINs to explicit JOIN syntax and optimize several queries
- osvf: update to the official OSVf JSON schema 1.7.5, parse CVE names, add osv_type for VuXML version-checking compatibility
- install: add -X as an alias for --register-only
- plist: support @for ... @end loops and # comments
- compression: respect DECOMPRESSION_THREADS when decompressing
- repo: support storing arbitrary data in the repository meta file
- multiple bug fixes
- some refactoring for consistency of the code
- refactor: add SPDX license identifier tags to source files
- plug additional memory leaks and fix resource leaks
- update sqlite to 3.53.2

ports-mgmt/pkg-devel: update to 2.7.99.2

Changes:
- periodic: daily checksum is now off by default
- extract: prefer mtime from manifest over archive
- db: fix some concurrency issues
- which: always show the matched path
- checksum: new pkg-checksum(8) command to generate and validate checksums
- checksum: use blake2b everywhere we can
- repo: use blake2 instead of sha256
- rwhich: implement file tracking and search for remote repositories
- backup_lib: prevent accumulating old libs and badly match them
- backup_lib: fix backup_library with rootdir
- pkg-which: fix spurious warning message with -p
- progress: don't add new line for file_meta and dir_meta event
- fix: replace system() with execlp() for man page display
- fix: query_select discards valid input on EOF without newline
- fix: harden input validation found by fuzzing
- fix: handle trailing %% in printf format strings
- fix: handle empty string in pkg_deps_parse_formula()
- refactor: convert all internal linked lists (utlist.h) to vec
- libelf: fix Linux/powerpc64 build
- libecc: support Linux/ppc64
- manpages: add documentation for pkg-checksum(8) and pkg_checksum(3)
- plug multiple memory leaks and fix resource leaks
- lots of code cleanup
- update sqlite to 3.53.1
- update lua to 5.4.8
- update libucl to 0.9.4

all: drop support for FreeBSD 13, mips and risc64sf

Reviewed by:            many (*)
Differential Revision:  https://reviews.freebsd.org/D55624
Differential Revision:  https://reviews.freebsd.org/D55642 (merged in from bofh)

many (*)
  acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
  jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
  nobutaka pkubaj se tagattie thj

  Anton Saietskii
  GenericRikka
  Gert Doering
  Jan Bramkamp
  Oleh Hushchenkov
  Oleksandr Kryvulia
  Ralf van der Enden
  Yamagi

  desktop kde python tcltk office

ports-mgmt/pkg-devel: fix missing pkg.conf.sample

PR:	294836

ports-mgmt/pkg-devel: update to 2.7.99.1

Changes:
- rcscript: rewrite entirely to be safer
- triggers: make the per-package trigger per file instead of per directory
- delete: add -G/--exclude-glob
- repositories: add enable/disable/reset support
- vuln: install and upgrade now show if they are about to install vulnerable packages
- version: add IGNORE_MAJOR to pkg.conf
- lua: add pkg.exec_capture, a pkg.exec version capturing stdout/stderr
- autoremove: add -qn for script friendly output
- fflags: emit in string value and also accept integers
- info -e: only return 0 if all the packages in the command line exist
- install: respect -q
- quiet: do not print messages when quiet is requested
- query: fix %y/%Y
- upgrade: don't propose to downgrade to solve a provide/require
- upgrade: clarify the message when a package is not found
- upgrade: generalize the more verbose explanation of changes
- fetch: respect RFC 3986
- lock: do not error in expected (un)lock state
- shlibs: also remove ignored shlibs provided from shlibs required
- backup_libraries: atomic replacement and fully respect rootdir
- DB: in case of remote db corrupted, destroy it to give a chance to rebuild
- DB: loudly complain if the DB cannot be opened
- repo: do not delete repositories in overrides, simply disable them
- Honor --repository flag for disabled repos as documented
- rquery: retire %M, it is not in the repository metadata
- options: remove %Od and %OD, they were never used and populated
- (r)query: if %{ is encountered, fallback on using directly pkg_printf(3)
- vital: now explicitly state the SAT solver issues are due to a vital package
- check: skip missing metadata
- check: relax privileges requirements
- check: clarify the error message
- options: give more explanation on option change
- search: improve error message and fix multiple JSON formatted results
- update: show a warning when trying to update a non existent repository
- fingerprints: fallback on the host to find them when using -r
- libucl: accept more boolean values
- Add a periodic script to check for dependencies
- Declare CheriBSD and CheriABI OS and ABI
- build: replace autosetup by bbuild
- update sqlite to 3.53.0
- libucl: update to latest upstream version
- libecc: update to latest version
- plug multiple memory leaks
- lots of code cleanup

ports-mgmt/pkg-devel: 2.6.99.6

Changes:
- query: fix empty line output for purely multiline formats breaking poudriere
- pkg-backup: make the compression configurable
- sign_pkg.sh: use the .pkg extension

ports-mgmt/pkg-devel: update to 2.6.99.5

Changes:
- libpkg: fix --register-only with empty packages
- query: fix crash on multiline

ports-mgmt/pkg-devel: update to 2.6.99.4

Changes:
- info: fix version comparison with multi-character operators (>=, <=)
- fix --register-only to populate config file contents
- attempt config file merge for force install
- query: add %y and %Y for provides/requires

ports-mgmt/pkg-devel: update to 2.6.99.3

Changes:
- libfetch: fix segfault at exit when using SRV mirror type
- solver: avoid spurious reinstall from wrong repo with multi-repo setups

ports-mgmt/pkg-devel: update to 2.6.99.2

Changes:
- fetch: switch back to libfetch, completely remove curl
- add: resolve shlibs and provides via symlink directory layout
- add: ignore dead symlinks for provides/requires
- add: skip osversion check when force is set
- install -A: do not mark upgraded/reinstalled packages as automatic
- DB: fix a race condition in db initialization
- 400.status-pkg: provide an option to select the source to check
- docs: all manpages now mention -r can be called multiple times
- docs: update usage for create, install and set commands

ports-mgmt/pkg-devel: update to 2.6.99.1

Changes:
- greatly improve the test coverage
- add support for trigger per package (pre installation, post installation)
- fix info export wrong json for multiple packages
- solver: many fixes preventing useless extra reinstallation
- jobs: prevent install -f from deleting packages
- upgrade: prevent rdeps discovery explosion
- fix crash when using external merge tool
- fix ctrl-c during download not really killing pkg
- lots of code cleanup
- prevent running in jail if fflages are involved and the jail does not allow them
- prevent running if secure_level will block them
- improve performance by adding new indexes
- don't try anymore to upgrade the DB if it is readonly
- only open the db RW if needed
- fix pkg -N with WAL
- repositories: add per repo ssh_args
- delete,install,upgrade: add --autoremove
- pkg install foo if foo is installed will now mark it as non automatic
- pkg install -A foo if foo is installed will now mark it as automatic
- query: print an empty line instead of nothing if querying a multiline with no value
- install: accept https:// as an argument
- plenty of small fixes
- updating support globs
- delete: fix -fR

ports-mgmt/pkg-devel: update to 2.6.99.0

Changes:
- triggers: fix typo regex -> regexp
- remove FreeBSD 9 compat code
- lots of documentation behaviour
- fix ordering of pkg autoremove

ports-mgmt/pkg-devel: 2.5.99.3

revert extract optimization

ports-mgmt/pkg-devel: update to 2.5.99.2

With WAL issue in readonly

ports-mgmt/pkg-devel: update to 1.5.99.1

Changes:
- Improve debug messages
- create: use -t to specify the MANIFEST file timestamps
- @dir: fix permission set via @mode
- manpages: fix some spelling
- progress:
  * pad the counters to improve the output,
  * remove the hash from the package names
- update mumhash to latest version
- fetch: add -s/--sumlnk option for mirror mode.
- fetch: honor PKG_REPO_SYMLINK env var
- triggers: only defer triggers which will fork/exec something
- db: enable WAL for databases on local file systems
- query: add support for evaluation of complex attributes
- store ignored shlibs in manifest and db
- Allow to define shlibs_{proviced,required}_ignore in the manifest directly
- configure: use some C23 features to reduce the number of checks in the configure
  script.
- drastically reduce memory usage
- fix an infinite loop on pkg autoremove
- optimization: do not extract files if the installed oone is identical
- if an extractions fails "file null mounted" complain and leave a file named
  .pkgnew aside
- upgrade multiple fixes on decision making which might have result in usesless
  request to reinstall
- pkg add ./file now check the version of the installed package if any and proposes
  to upgrade if necessary
- fix a regression in url_decode

ports-mgmt/pkg-devel: update to 2.5.99.0

Changes:
- fix a regression in fetch

ports-mgmt/pkg-devel: update to 2.4.99.2

Changes:
- update curl to 8.17.0
- update sqlite to 3.51.1
- plug a memory leak while fetching
- improve the message when not deleting a package due to lock or vital
- set a default mode for empty directories

ports-mgmt/pkg-devel: update to 2.4.99.1

Changes:
- fetch: improve error reporting
- fetch: properly integrate the curl debug informations in the pkg debug output
- fetch: display curl IP address we are fetching from in debug mode
- unregister(8): new command to remove the records from an installed package,
  keeping the files around
- install --register-only: records the packages as installed without touching
  any installed files on the filesystem. Note in case on config files it also
  the vanilla version of the file in the db so 3way merge is functional for later
  upgrades
- case sensitivity: lots of bug fixes, the behaviour is now consistent accross all
  commands and respect the default setting in pkg.conf.

ports-mgmt/pkg-devel: fix issue on 32bit en

ports-mgmt/pkg-devel: update to 2.4.99.0

Changes from 2.3.99.1 to 2.4.99.0
- Use line buffering for the metalog file handle
- Fix bug making pkg delete too many directories in case of split upgrades
- BACKUP_LIBRARIES now create one backup package per source package
- new metalog_copy lua function to create entries in the metalog cloning metadata
  from another file

ports-mgmt/pkg-devel: update to 2.3.1

Changes:
- New OSVF Parser
- New CPE Parser/Emitter
- Lots of code cleanup and simplification
- Add support for system triggers (triggers in /usr/share/pkg/triggers)
- pkg check now respects -r (rootdir)
- relax ABI checking
- Lots of improvements and bugs fixes regaring BACKUP_LIBRARIES features
- Integrate BACKUP_LIBRARIES in the solver
- Add vital flag to the list of flag which we need to consider for package reinstallation
- tack uname, gname, mtime, permissions and fflags in the db and in the manifest
  instead of relying on the tar informations. which gives us pkg check -m to check for
  for metadata changes.
- METALOG: add entries for intermediate directories
- better 404 reporting
- fix return code for pkg upgrade -n
- new pkg sets alias example in default pkg.conf
- new DEBUG_SCHEDULER_DOT_FILE option to generate a graphviz DOT format for the job graph
- loosen ordering for upgrade jobs (reduces a lot the number of split upgrades and speed up
  the scheduler on setup with large number of packages.)

ports-mgmt/pkg-devel: update to 2.2.99.2

Changes from 2.2.99.1 to 2.2.99.2
- archive improve reproducible build support
- many improvements in manpages
- scripts now support a new METALOG variable
- run pkg delete script even during split upgrades
- fetch: fix resuming
- shlib: accept full path as a valid input
- stats: only show local db, if no repo are active
- backup libraries during split upgrades if needed
- fetch: fix crash on invalid url
- upgrade: only upgrade installed things on partial upgrades
- repositories: allow negative priorities
- upgrade: when pkg self restart do not warn about the env vars.
- set: allow to bulk "partial replacement"
- add: backout support for provides/requires

ports-mgmt/pkg-devel: update to 2.2.99.1

Changes:
 - revert the scheduler "fixes" trying to reduce the
   number of "split upgrades", it causes ordering issues
 - plug some leaks
 - fix some sqlite statement leak

ports-mgmt/pkg-devel: update to 2.2.99.0

Update libcurl to 3.14.1
Update sqlite to 3.50.1
Update mum_hash to latest version

ports-mgmt/pkg-devel: 2.1.99.5

pkg changes:
- really use the cache file
- improve error message when failing at parsing manifest printing the path of
  the manifest.
- improve multi repo priosation handling
- fix selection of the most recent package in multirepo mode
- fix the scheduler over splitting the upgrades

Note this version will become 2.2.0 if all tests are ok

port changes:
remove the debug cflags by default, if needed people can always rebuild
with them and it gives the false impression of performances issues vs
release.

ports-mgmt/pkg-devel: update to 2.1.99.4

Changes from 2.1.99.3 to 2.1.99.4
- add a cache file for pkg_add()
- fix 32bits issues
- improve error message when failing at parsing manifest printing the path of
  the manifest.

ports-mgmt/pkg-devel: update to 2.1.9.3

More work on pkg add performances
Document pkg -vv
Document pkg -o
Fix a symbol collision between libmd and libcrypt in pkg-static

ports-mgmt/pkg-devel: update to 2.1.99.2

Fix regression regarding shlibs_required

ports-mgmt/pkg-devel: upgrade to 2.1.99.1

Changes:
Strong internal refactoring, to the number of memory allocations
Performance improvements in pkg_add

ports-mgmt/pkg-devel: update to 2.1.99.0

Changes:
- pkg.conf(5): mention kmods repo
- validate SHLIB_PROVIDE_PATHS_* options
- pkg(8): mention -vv
- new the FORCE_CAN_REMOVE_VITAL boolean config option
- micro optimise pkg add

ports-mgmt/pkg-devel: update to 2.0.99.10

Changes:
- accept to provide library for symlinks in valid path

ports-mgmt/pkg-devel: 2.0.99.9

Changes from 2.0.99.8 to 2.0.99.9
- pkg delete considers base libraries when not running on pkgbase system
- install: allow overwrite installation timestamp with PKG_INSTALL_EPOCH
- new --script-no-exec: which makes pkg dies if a script attempt to exec an
  external binary

ports-mgmt/pkg-devel: update to 2.0.99.8

Changes:
- info -d and info -r now shows informations about provides/requires

ports-mgmt/pkg-devel: 2.0.99.7

Changes:
- fix pkg add when not in pkgbase context

ports-mgmt/pkg-devel: Update to 2.0.99.6

Changes:
- add: readd support for provides/requires
- fix pkg bootstrap -y
- fix memory leaks
- libpkg: allow non interactive way to set IGNORE OSVERSION
- update libcurl to 8.12.1
- fix progression counters
- improve VITAL flag handling

ports-mgmt/pkg-devel: update to 2.0.99.5

Allow better control on what shlibs are provided.

Note that his needs some tweak in the ports tree which will come soon

ports-mgmt/pkg-devel: 2.0.99.4

Changes from 2.0.99.3 to 2.0.99.4
- sort list in manifest for reproducibility
- limite shlibs_requires to file starting with "lib"
- on !pkgbase ignore lib32 compat if the lib32 set is not installed
- update: be functionnal again with less than 300MB of memory available
- small performances improvements in package loading and checksum validation
- sqlite: update to 3.49.0

Changes from 2.0.99.2 to 2.0.99.3
- elf: prevent absolute path for DT_NEEDED libs
- curl: be verbose about the fetch error
- fix crash in case of conflicts
- allow to define ABI_FILE in pkg.conf(5)
- rework directories vs symlinks handling (give back flexibility to end users)

ports-mgmt/pkg-devel: update to 2.0.99.3

Changes:
- elf: prevent absolute path for DT_NEEDED libs
- curl: be verbose about the fetch error
- fix crash in case of conflicts
- allow to define ABI_FILE in pkg.conf(5)
- rework directories vs symlinks handling (give back flexibility to end users)

ports-mgmt/pkg-devel: update to 2.0.99.2

ports-mgmt/pkg-devel: update to 2.0.99.1

Changes:
- fix pkg version
- fix pkg check -d
- logs of improvements in the solver to avoid extra reinstallation on
  systems without pkgbase

ports-mgmt/pkg-devel: update to 2.0.99

Changes:
fix 2 regression spotted by the 2.0 exprun

ports-mgmt/pkg-devel: silent a warning which bothers poudriere

ports-mgmt/pkg-devel: update to 2.0 beta2

Changes:
- ignore OSVERSION if ABI is not set

ports-mgmt/pkg-devel: update to 2.0 beta1

Changes:
- the pkg target ABI is now dynamically detected, pkg can be used to cross
  install packages among OS.
- macho ABI handling completly rewritten
- ALTABI is not used anywhere anymore, we are now only working with ABI
- Lots of cleanups thanks for compiler sanitizers
- shlibs handling is now portable (and do not depend on elfhints anymore)
- deprecate ALLOW_BASE_SHLIBS, now pkg scans for /lib and /usr/lib (respecting
  rootdir) to find the list of shlibs provided by base. This scan is skipped
  when using pkgbase.
- new SHLIB_REQUIRE_IGNORE_GLOB and SHLIB_REQUIRE_IGNORE_REGEX to filter out
  some librariries to be added to shlibs_required list
- speed up pkg repo by using buffered stdio
- pkg now tracks shlibs with tagging:
   libfoo.so.1.0.0          - native (no change to status quo)
   libfoo.so.1.0.0:32       - compat 32
   libfoo.so.1.0.0:Linux    - compat Linux
   libfoo.so.1.0.0:Linux:32 - compat Linux 32
- pkg tracks 32bit compat shlibs
- pkg can track linux shlibs for linux compatibility (disabled by default) via
  TRACK_LINUX_COMPAT_SHLIBS

ports-mgmt/pkg-devel: update to 1.21.99.4

Changes:
- ABI detection related fixes
- Lots of fixs for MacOS
- Fix host component handling in file:// URLs
- build system: add --with-tsan support
- fix threads on MacOS
- pkg -vv now shows bundled/external libraries version
- pkg: -r command can be used multiple times to only enable
  the specified repositories.
- UI: small improvements in error messages
- repositories: new pkg repositories command to list configured
  repositories
- vuxml: now fetched over https
- check: now default on the -s option when no options is passed.