www/pomerium-envoy-custom 1.37.0.20261001_1

various: Bump Go ports for Go 1.26.10 / 1.27.3

www/pomerium-envoy-custom: Fix build on aarch64

gperftools has no way to read the program counter from a signal's
ucontext on FreeBSD/aarch64, so its CPU profiler, which Envoy builds
with --define tcmalloc=gperftools, failed to compile:

  getpc-inl.h:393:22: error: no member named 'Get' in ...

On FreeBSD/aarch64 the kernel stores the interrupted PC in
uc_mcontext.mc_gpregs.gp_elr.  Add an accessor for it to gperftools
and apply the patch through the gperftools http_archive in envoy's
bazel/repositories.bzl, the same way the msgpack patch is applied.
The hunk offsets of the other entries in that patch are refreshed
while here.

The gperftools change has been verified with getpc_test on an Ampere
eMAG running FreeBSD 15.1 and submitted upstream.  The full port has
only been test-built on amd64 so far.

Upstream PR: https://github.com/gperftools/gperftools/pull/1647

www/pomerium-envoy-custom: update to 1.37.0.20261001

Update to envoy-custom commit 8b998d0f6ff3, which moves the bundled
Envoy from 1.38.2 to 1.38.5, as required by pomerium 0.33.4.

While here, link the envoy binary as a position-independent
executable so that it benefits from ASLR.

various: Bump Go ports

many: Bump go ports for 1.26.8 and 1.27.1

www/pomerium-envoy-custom: Attempt to fix LuaJIT build on aarch64

On FreeBSD aarch64, Bazel resolves the CPU constraint to its canonical
name @platforms//cpu:aarch64 rather than the @platforms//cpu:arm64
alias.  Add aarch64 to the HOST_CONSTRAINTS check in luajit.bzl so
the platform is correctly detected on arm64 FreeBSD.

various: Bump go ports for go-1.25.14 / 1.26.7

various: Bump go ports for go-1.25.13 / 1.26.6

www/pomerium-envoy-custom: fix GOROOT to track default Go version

Use ${GO_SUFFIX} instead of hardcoded go125, so the GOROOT path
tracks whatever Go version USES=go selects.  This fixes a build
failure after the default Go version was switched to 1.26.

www/pomerium-envoy-custom: update to 1.37.0.20260618

Update pomerium-envoy-custom to commit 16ede7a56f2f (envoy f387231af8).

Major changes for this version bump:
- Remove obsolete FreeBSD patches (ares, zlib, zstd cmake targets removed
  upstream; luajit_build.sh and -GNinja already upstream)
- Regenerate remaining FreeBSD patches for new envoy source
- Replace envoy_toolshed stub with real extraction (v0.3.35)
- Remove rules_oci (not needed for FreeBSD binary build)
- Remove custom LLVM toolchain; use system Clang via
  --extra_toolchains=@local_config_cc//:all
- Add --override_repository for renamed repos (re2, yaml-cpp, brotli, etc.)
- Add FreeBSD support to toolchains_llvm v1.7.0
- Add FreeBSD support to pomerium's luajit.bzl platform detection
- Create FreeBSD-specific openssh config.h
- Fix LuaJIT getentropy conflict with FreeBSD SSP headers
- Build nghttp2 from source (envoy patches add custom API)
- Add FreeBSD to rules_foreign_cc cmake generator detection
- Add transitive deps to DISTFILES (helly25_bzl, tar.bzl, jq.bzl, yq.bzl,
  argparse, aspect_bazel_lib, nghttp2 source)
- Update stale GH_TUPLE versions (dd_trace_cpp, libcircllhist, vpp_vcl, etc.)
- Link with -lgcc_eh for LuaJIT dynamic EH frame symbols

various: Bump go ports for go-1.25.12 / 1.26.5

www/{pomerium-envoy-custom,pomerium}: update to 1.36.8-p1 / 0.32.9

various: Bump go ports for go-1.25.11 / go-1.26.4

various: Bump ports for Go 1.25.10

www/pomerium-envoy-custom: add a port for pomerium's envoy fork.

This port is different from www/envoy and is used exclusively by pomerium.

www/pomerium: upgrade to 0.32.6.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>