www/freenginx-devel1.31.4_8

www/freenginx-devel: third-party modules management (+)

- update rds_csv to its recent snapshot
- update rds_json to its recent snapshot
- remove a needless patch

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: third-party modules management (+)

- update xss module its recent snapshot
- remove a needless patch

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: third-party modules management (+)

- update OWASP ModSecurity module to its recent snapshot

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: third-party modules management (+)

- update http_auth_jwt module to v2.4.0

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: third-party modules management (+)

- update stream_lua to its recent snapshot
- remove the upstreamed patches

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: third-party module management

Update the stream-lua module to its recent release 0.0.17R4,
and enable it.
Remove ignore list.

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: fix Makefile.extmod

Reported by:	dvl
Fixes:		2feda91f5a9601467e22ef3af387181bd456230c

www/freenginx-devel: respect CFLAGS and LDFLAGS

Adopt and move out ports infra variables of the main Makefile.
Sort out thid-party modules variables.

Bump PORTREVISION.

PR:		292432

Thanks to:	fluffy
Sponsored by:	tipi.work

www/freenginx-devel: clean up the port infra

NJS_QJS knob and related patches have been removed a long time ago.
Do not bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: update njs 0.9.4 -> 0.9.5 (+)

Bump PORTREVISION.

<ChangeLog>

nginx modules:

*) Feature: added native module support for QuickJS engine.
   The following directives were added: js_load_http_native_module,
   js_load_stream_native_module.

*) Bugfix: fixed js_body_filter with multiple chunks for QuickJS
   engine.

*) Bugfix: fixed buffer_type inheritance in if blocks for js_body_filter.
   Previously, when js_body_filter was used inside an if block,
   the data parameter received Buffer type instead of the expected
   String type.

*) Bugfix: fixed js_body_filter when data is not in memory.
   Previously, when upstream data was delivered from nginx cache,
   js_body_filter was not able to process it correctly.

*) Bugfix: improved r.subrequest() error handling.
   Fixed a problem of a lost write event when the njs handler
   making r.subrequest() is called from a lua handler as a
   subrequest.

Core:

*) Bugfix: fixed XMLAttr object.
   Pointer to xmlAttr could become invalid when the parent XMLNode
   was modified.

*) Bugfix: fixed XMLNode update.

*) Bugfix: fixed ArrayBuffer with detached buffers.

*) Bugfix: added missing detached array checks.

*) Bugfix: fixed fs.mkdir() and friends.

*) Bugfix: fixed path restoration in fs.mkdir() and friends on
   error.

*) Bugfix: fixed missed allocation check in promise code.

</ChangeLog>

www/freenginx-devel: third-party modules management (+)

- update vts module to its recent snapshot

Remove upstreamed patch.

Sponsored by:	tipi.work

www/freenginx-devel: third-party modules management

o) update http_redis module: 0.4.0 -> 0.4.1

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: update third-party cache_purge module to v2.5.5

www/freenginx-devel: update dependencies after enabling geoip module

Bump PORTREVISION once again.

www/freenginx-devel: update from 1.29.3 to 1.29.4

Enable the updated geoip module.

Sponsored by:	tipi.work

<ChangeLog>

*) Feature: support for GeoIP2 databases in the MaxMind DB (MMDB) format
   in the ngx_http_geoip_module and ngx_stream_geoip_module modules; the
   "geoip_set" directive.

*) Bugfix: disk cache size might be calculated incorrectly on the XFS
   file system with the "largeio" mount option.

*) Bugfix: of minor potential bugs.

</ChangeLog>

devel/grpc: Update to 1.76.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases

www/freenginx-devel: don't link thumbextractor module with libpostproc

libpostproc has been removed from newer ffmpeg and it not needed
with ffmpeg6 either.

Bump PORTREVISION.

PR:		289067
Sponsored by:	tipi.work

www/freenginx-devel: update third-party OTEL module

Remove needless patch, it's added to the upstream.
Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: update list of dependencies

Bump PORTREVISION.

www/freenginx-devel: update from 1.29.2 to 1.29.3

<ChangeLog>

*) Feature: loading of certificates and secret keys from hardware tokens
   with OpenSSL STORE API.

*) Change: loading of external character entities declared in the
   internal DTD subset is now disabled by default in the
   ngx_http_xslt_filter_module; loading can be enabled with the
   "xml_external_entities" directive.

*) Bugfix: the ngx_http_xslt_filter_module might try loading of external
   character entities over the network, which might cause blocking of
   the worker process for a significant time.

*) Bugfix: the "working_directory", "google_perftools_profiles",
   "geoip_country", "geoip_city", "geoip_org", and "xml_entities"
   directives incorrectly handled relative paths.

</ChangeLog>

www/freenginx-devel: update third-party lua module (+)

to its recent snapshot.  The patches have been added to the upstream,
so the module builds just fine.

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: add third-party keyval module

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: enable third-party http_upload module

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: enable third-party passenger module

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: enable third-party modules (+)

- sts
- vod

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: enable third-party vts module

Adopted from:	https://github.com/vozlt/nginx-module-vts/pull/326

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: update third-party echo module

Third-party echo module is compatible with freenginx now, no
patches are required.

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: third-party modules management (+)

*) update lua module: 0.10.28 -> 0.10.29
*) update stream_lua module: 0.0.16 -> 0.0.17

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: enable third-party set_misc module

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: enable third-party lua module

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: enable third-party echo module

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: enable third-party OTel module

Bump PORTREVISION.

Sponsored by:	tipi.work

www/freenginx-devel: update njs 0.9.3 -> 0.9.4 (+)

Sponsored by:	tipi.work

<ChangeLog>

nginx modules:

*) Feature: added HTTP forward proxy support for ngx.fetch() API.

Core:

*) Bugfix: fixed r.subrequest() to a location with JS handler
   for QuickJS. The bug became visible after
   bellard/quickjs@42eb2795.

</ChangeLog>

www/freenginx-devel: update njs 0.9.1 -> 0.9.3 (+)

While I'm here, adopt the start-up script for jail usage.

Bump PORTREVISION.

<ChangeLog>

Changes with njs 0.9.3                       07 Oct 2025

nginx modules:

*) Bugfix: fixed heap-use-after-free while module loading.

*) Bugfix: fixed heap-use-after-free in js_set handler used
   in log phase. The issue was introduced in 04f6dfb (0.9.2).

Changes with njs 0.9.2                       23 Sep 2025

nginx modules:

*) Feature: added HTTP keepalive support for ngx.fetch() API.

*) Improvement: added configure time check when js_import is
   not defined.

*) Bugfix: fixed merging of js_path directives.

*) Bugfix: fixed building when http_ssl and stream_ssl
   unavailable.

Core:

*) Change: increased the default stack size to 160k for njs VM.

*) Feature: added njs.on('exit') API for qjs engine.

*) Improvement: optimized memory consumption while streaming
   in qjs.

*) Bugfix: fixed building qjs engine with clang 19.

*) Bugfix: fixed building with GCC 15 and -O3.

</ChangeLog>

www/freenginx-devel: update from 1.27.2 to 1.29.2

Due to changes in freenginx core several third-party modules are
required additional patching.

<ChangeLog>

Changes with freenginx 1.29.2                                    23 Sep 2025

    *) Feature: support for the Encrypted Client Hello (ECH) extension of
       the TLS 1.3 protocol.

Changes with freenginx 1.29.1                                    26 Aug 2025

    *) Change: now responses from proxied servers over HTTP/0.9 are rejected
       as invalid by default; the "proxy_allow_http09" directive allows
       processing of such responses.

    *) Change: stricter syntax checks are now applied to the "Host" request
       header line.

    *) Feature: now interim 1xx responses of proxied servers are ignored.

    *) Feature: certificates for IP addresses are now supported when
       verifying backend SSL certificates.

    *) Feature: the "proxy_allow_duplicate_chunked" directive.
       Thanks to Gennady Bekasov.

    *) Bugfix: when using a host name in the request line, the "_" and some
       other characters were not allowed, as well as zone identifiers in
       IPv6 addresses.

    *) Workaround: "shutdown() failed (22: Invalid argument)" alerts might
       appear in logs on NetBSD.

    *) Bugfix: in the mail proxy module.

Changes with freenginx 1.29.0                                    08 Jul 2025

    *) Change: the "directio" directive now works when returning responses
       from cache.

    *) Change: the "limit_rate" directive now uses the leaky bucket
       algorithm, allowing more accurate enforcement of the specified rate;
       the "limit_rate_after" directive specifies the allowed size of
       traffic bursts.

    *) Change: the $request_time variable now remains correct on system time
       changes.

    *) Feature: the "send_min_rate" and "client_body_min_rate" directives.

    *) Feature: the "limit_rate" and "limit_rate_after" directives in the
       mail proxy module.

    *) Feature: the "lingering_close", "lingering_time", and
       "lingering_timeout" directives in the mail proxy module.

    *) Feature: connection limiting in the mail proxy module.

    *) Workaround: the "send_timeout" directive might not work when the
       kernel TCP memory limit was reached on Linux.

    *) Workaround: gcc 15.1 compatibility.

    *) Bugfix: a segmentation fault might occur in a worker process if the
       "proxy_ssl_password_file" directive was used in the stream module;
       the bug had appeared in 1.23.1.

    *) Bugfix: a segmentation fault might occur in a worker process on
       shutdown; the bug had appeared in 1.27.2.

    *) Bugfix: in the "open_file_cache" directive.

Changes with freenginx 1.27.6                                    15 Apr 2025

    *) Workaround: the X25519MLKEM768 group name was not shown in the
       $ssl_curve and $ssl_curves variables when using OpenSSL 3.5.

    *) Bugfix: a segmentation fault might occur in a worker process if the
       "proxy_ssl_password_file" directive was used along with variables in
       the "proxy_ssl_certificate" or "proxy_ssl_certificate_key"
       directives; the bug had appeared in 1.23.1.

Changes with freenginx 1.27.5                                    08 Apr 2025

    *) Feature: the "multipath" parameter of the "listen" directive.
       Thanks to Maxime Dourov and Anthony Doeraene.

    *) Change: SSL session reuse is no longer allowed between servers with
       different certificates set by the "ssl_trusted_certificate" directive
       if client SSL certificate verification is enabled.

    *) Workaround: when using TLSv1.3 with OpenSSL 1.1.1e or newer, it was
       possible to reuse an SSL session in a different virtual server
       context, notably with different certificates set by the
       "ssl_client_certificate" directive.

    *) Workaround: "gzip filter failed to use preallocated memory" alerts
       appeared in logs when using zlib-ng.

Changes with freenginx 1.27.4                                    03 Sep 2024

    *) Feature: the $ssl_client_fingerprint_sha256 variable.

    *) Feature: the "Auth-SSL-Fingerprint-SHA256 header line is now passed
       to the mail proxy authentication server.

    *) Change: MIME type for the "js" extension has been changed to
       "text/javascript", the "mjs" extension now uses the "text/javascript"
       MIME type, and the "md" and "markdown" extensions now use the
       "text/markdown" MIME type; the default value of the "charset_types"
       directive now includes "text/javascript" and "text/markdown".

    *) Bugfix: a segmentation fault might occur in a worker process if the
       ngx_http_mp4_module was used; the bug had appeared in 1.5.13.

    *) Bugfix: a segmentation fault might occur in a worker process when
       handling requests with the "Expect: 100-continue" request header
       line; the bug had appeared in 1.27.0.

Changes with freenginx 1.27.3                                    13 Aug 2024

    *) Change: now the "Age" backend response header line is taken into
       account when caching.
       Thanks to Hiroaki Nakamura.

    *) Feature: the $upstream_cache_age variable.

    *) Change: during graceful shutdown of old worker processes keepalive
       connections are now closed only after timeout specified with the
       "lingering_timeout" directive expires.

    *) Feature: improvements in building on Windows.

</ChangeLog>

devel/grpc: Update to 1.75.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases

www/freengxinx-devel: take mainternship

Approved by:	joneum (maintainier)

devel/grpc: Update to 1.74.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases

devel/grpc: Update to 1.73.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases

devel/grpc: Update to 1.72.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases

devel/protobuf: Update to 29.4

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

*/*: Chase devel/abseil update

devel/grpc: Update to 1.70.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases

devel/protobuf: Update to 29.3

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

devel/grpc: Update to 1.69.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases

www/freenginx-devel: Update to 1.27.4

Update to 1.27.4, fix Invalid root path

PR:	280401
Sponsored by:	Netzkommune GmbH

devel/grpc: Update to 1.68.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases

Bump PORTREVISIONs after grpc shlib change in 2715f16944541b6b

PR:		282624
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D47513

devel/protobuf: Update to 28.3

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/protocolbuffers/protobuf/releases

devel/grpc: Update to 1.67.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/grpc/grpc/releases