[PATCH] btrfs-progs: Update to version 6.16

[PATCH] btrfs-progs: Update to version 6.16

[Adolf Belka]

- Update from version 6.15 to 6.16
- Update of rootfile not required
- Changelog
    6.16
	   * mkfs:
	      * print label of existing filesystem if attempting to overwrite
	      * remove note about changed defaults in 6.15
	      * discard support detection uses the ioctl and not sysfs, this should
	        work for all types of block devices
	   * device usage: fix printing units of partition sizes, used to be in 512B
	     sectors
	   * defrag: new option --nocomp to request no compression (kernel 6.17)
	   * check: detect missing orphan items for deleted subvolumes
	   * subvol delete: don't print warning if filesystem is mounted with
	     user_subvol_rm_allowed
	   * build: add build support for Android
	   * other:
	      * cleanups and refactoring
	      * sync sources with kernel
	      * documentation updates
	      * CI and test updates

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/btrfs-progs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/btrfs-progs b/lfs/btrfs-progs
index 952a59909..652ae34ea 100644
--- a/lfs/btrfs-progs
+++ b/lfs/btrfs-progs
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 6.15
+VER        = 6.16
 
 # https://mirrors.edge.kernel.org/pub/linux/kernel/people/kdave/btrfs-progs/
 
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 5e79b7606fb236bc21e5b2401f5d6b27ad0ffb1b8ceef3ed9c7042b384508b1e1cc2a3a451d94e5369fa1592d91da78264caabe74bf1d907ac8e513a86b6fed8
+$(DL_FILE)_BLAKE2 = 375c60a93bc5b62d7c3a94d5ed108b81786b27f2beba27d85bcede94a892d84e71b1fe00a1574cc53066fe77bb37408b2b382db4a1664fefcc676c1c3efa1c60
 
 install : $(TARGET)
 
-- 
2.51.0

[PATCH] core198: Ship btrfs-progs

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/198/filelists/btrfs-progs | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/198/filelists/btrfs-progs

diff --git a/config/rootfiles/core/198/filelists/btrfs-progs b/config/rootfiles/core/198/filelists/btrfs-progs
new file mode 120000
index 000000000..d7a2f6f52
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/btrfs-progs
@@ -0,0 +1 @@
+../../../common/btrfs-progs
\ No newline at end of file
-- 
2.51.0

[PATCH] core198: Ship gdbm

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/198/filelists/gdbm | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/198/filelists/gdbm

diff --git a/config/rootfiles/core/198/filelists/gdbm b/config/rootfiles/core/198/filelists/gdbm
new file mode 120000
index 000000000..ecf63bf59
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/gdbm
@@ -0,0 +1 @@
+../../../common/gdbm
\ No newline at end of file
-- 
2.51.0

[PATCH] core198: Ship harfbuzz

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/198/filelists/harfbuzz | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/198/filelists/harfbuzz

diff --git a/config/rootfiles/core/198/filelists/harfbuzz b/config/rootfiles/core/198/filelists/harfbuzz
new file mode 120000
index 000000000..ffe1e0d0b
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/harfbuzz
@@ -0,0 +1 @@
+../../../common/harfbuzz
\ No newline at end of file
-- 
2.51.0

[PATCH] core198: Ship hwdata

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/198/filelists/hwdata | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/198/filelists/hwdata

diff --git a/config/rootfiles/core/198/filelists/hwdata b/config/rootfiles/core/198/filelists/hwdata
new file mode 120000
index 000000000..ced911666
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/hwdata
@@ -0,0 +1 @@
+../../../common/hwdata
\ No newline at end of file
-- 
2.51.0

[PATCH] core198: Ship libinih

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/198/filelists/libinih | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/198/filelists/libinih

diff --git a/config/rootfiles/core/198/filelists/libinih b/config/rootfiles/core/198/filelists/libinih
new file mode 120000
index 000000000..7f703bed7
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/libinih
@@ -0,0 +1 @@
+../../../common/libinih
\ No newline at end of file
-- 
2.51.0

[PATCH] core198: Ship lsof

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/198/filelists/lsof | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/198/filelists/lsof

diff --git a/config/rootfiles/core/198/filelists/lsof b/config/rootfiles/core/198/filelists/lsof
new file mode 120000
index 000000000..1353d33e5
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/lsof
@@ -0,0 +1 @@
+../../../common/lsof
\ No newline at end of file
-- 
2.51.0

[PATCH] core198: Ship nano

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/198/filelists/nano | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/198/filelists/nano

diff --git a/config/rootfiles/core/198/filelists/nano b/config/rootfiles/core/198/filelists/nano
new file mode 120000
index 000000000..2f07279c0
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/nano
@@ -0,0 +1 @@
+../../../common/nano
\ No newline at end of file
-- 
2.51.0

[PATCH] core198: Ship sudo

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/198/filelists/sudo | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/198/filelists/sudo

diff --git a/config/rootfiles/core/198/filelists/sudo b/config/rootfiles/core/198/filelists/sudo
new file mode 120000
index 000000000..0d3c45e04
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/sudo
@@ -0,0 +1 @@
+../../../common/sudo
\ No newline at end of file
-- 
2.51.0

[PATCH] core198: Ship whois

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/198/filelists/whois | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/198/filelists/whois

diff --git a/config/rootfiles/core/198/filelists/whois b/config/rootfiles/core/198/filelists/whois
new file mode 120000
index 000000000..60cbd1894
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/whois
@@ -0,0 +1 @@
+../../../common/whois
\ No newline at end of file
-- 
2.51.0

[PATCH] fping: Update to version 5.4

[Adolf Belka]

- Update from version 5.3 to 5.4
- Update of rootfile not required
- Changelog
    5.4
     Bugfixes
	- Memory allocation safety checks for event storage (thanks David.A for bug report)
	- Fix off-by-one boundary check in seqmap code (thanks David.A for bug report)
	- The minimum value for the period (-p flag) is now 0.001 milliseconds,
	  since it probably never makes sense to use a smaller value, and to avoid doing
	  a very large memory allocation for event storage.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/fping | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/fping b/lfs/fping
index 714372710..1f8d41772 100644
--- a/lfs/fping
+++ b/lfs/fping
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = A program to ping multiple hosts
 
-VER        = 5.3
+VER        = 5.4
 
 THISAPP    = fping-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = fping
-PAK_VER    = 9
+PAK_VER    = 10
 
 DEPS       =
 
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = cc7b8bd2c8099c8bfb5e14d5b27f45cf1dc1aef24f941f5bf9c7aede95dac9472d2fe4033e8b7ea66fea8d901b99a7c908e7beff5484c0577c3f88517ef1a7ea
+$(DL_FILE)_BLAKE2 = b3c2f3ac8cb2d27593ad7a937c2fb27ab67bef3cd0d912a2a08b52bf9a96b2e5a5637567f0ef1203f86fefc99036a78ee05d69f175bdb1c2d62b6eaf6e474284
 
 install : $(TARGET)
 
-- 
2.51.0

[PATCH] gdbm: Update to version 1.26

[Adolf Belka]

- Update from version 1.25 to 1.26
- Update of rootfile not required
- Changelog
    1.26
	* Fixed build on musl libc
	* Fixed build on MacOS
	* Improved testsuite

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/gdbm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/gdbm b/lfs/gdbm
index 4fd3cae7e..d762f47e9 100644
--- a/lfs/gdbm
+++ b/lfs/gdbm
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.25
+VER        = 1.26
 
 THISAPP    = gdbm-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 6abf5f77823dda7ebcaa775d58f7a311c8f73c7521fe223398b5cb4b4831ad177cfd87fd42f2b24ca2fc5984af7d51abcc5e509ceb6aab2746a52aecb550654b
+$(DL_FILE)_BLAKE2 = 9423ea16ee3e8f1ce57ea32371f49919e2a3819a206a61ce927676a08a71a6a495d3949714bff7be789dfce75bf0ab0ac76f07ec673b71a84ae32bd8cd483781
 
 install : $(TARGET)
 
-- 
2.51.0

[PATCH] git: Update to version 2.51.0

[Adolf Belka]

- Update from version 2.50.1 to 2.51.0
- Update of rootfile not required
- Changelog
    2.51.0
	UI, Workflows & Features
	 * Userdiff patterns for the R language have been added.
	 * Documentation for "git send-email" has been updated with a bit more
	   credential helper and OAuth information.
	 * "git cat-file --batch" learns to understand %(objectmode) atom to
	   allow the caller to tell missing objects (due to repository
	   corruption) and submodules (whose commit objects are OK to be
	   missing) apart.
	 * "git diff --no-index dirA dirB" can limit the comparison with
	   pathspec at the end of the command line, just like normal "git
	   diff".
	 * "git subtree" (in contrib/) learned to grok GPG signing its commits.
	 * "git whatchanged" that is longer to type than "git log --raw"
	   which is its modern rough equivalent has outlived its usefulness
	   more than 10 years ago.  Plan to deprecate and remove it.
	 * An interchange format for stash entries is defined, and subcommand
	   of "git stash" to import/export has been added.
	 * "git merge/pull" has been taught the "--compact-summary" option to
	   use the compact-summary format, intead of diffstat, when showing
	   the summary of the incoming changes.
	 * "git imap-send" has been broken for a long time, which has been
	   resurrected and then taught to talk OAuth2.0 etc.
	 * Some error messages from "git imap-send" has been updated.
	 * When "git daemon" sees a signal while attempting to accept() a new
	   client, instead of retrying, it skipped it by mistake, which has
	   been corrected.
	 * The reftable ref backend has matured enough; Git 3.0 will make it
	   the default format in a newly created repositories by default.
	 * "netrc" credential helper has been improved to understand textual
	   service names (like smtp) in addition to the numeric port numbers
	   (like 25).
	 * Lift the limitation to use changed-path filter in "git log" so that
	   it can be used for a pathspec with multiple literal paths.
	 * Clean up the way how signature on commit objects are exported to
	   and imported from fast-import stream.
	 * Remove unsupported, unused, and unsupportable old option from "git
	   log".
	 * Document recently added "git imap-send --list" with an example.
	 * "git pull" learned to pay attention to pull.autostash configuration
	   variable, which overrides rebase/merge.autostash.
	 * "git for-each-ref" learns "--start-after" option to help
	   applications that want to page its output.
	 * "git switch" and "git restore" are declared to be no longer
	   experimental.
	 * "git -c alias.foo=bar foo -h baz" reported "'foo' is aliased to
	   'bar'" and then went on to run "git foo -h baz", which was
	   unexpected.  Tighten the rule so that alias expansion is reported
	   only when "-h" is the sole option.
	Performance, Internal Implementation, Development Support etc.
	 * "git pack-objects" learned to find delta bases from blobs at the
	   same path, using the --path-walk API.
	 * CodingGuidelines update.
	 * Add settings for Solaris 10 & 11.
	 * Meson-based build/test framework now understands TAP output
	   generated by our tests.
	 * "Do not explicitly initialize to zero" rule has been clarified in
	   the CodingGuidelines document.
	 * A test helper "test_seq" function learned the "-f <fmt>" option,
	   which allowed us to simplify a lot of test scripts.
	 * A lot of stale stuff has been removed from the contrib/ hierarchy.
	 * "git push" and "git fetch" are taught to update refs in batches to
	   gain performance.
	 * Some code paths in "git prune" used to ignore the passed-in
	   repository object and used the `the_repository` singleton instance
	   instead, which has been corrected.
	 * Update ".clang-format" and ".editorconfig" to match our style guide
	   a bit better.
	 * "make coccicheck" succeeds even when spatch made suggestions, which
	   has been updated to fail in such a case.
	 * Code clean-up around object access API.
	 * Define .precision to more canned parse-options type to avoid bugs
	   coming from using a variable with a wrong type to capture the
	   parsed values.
	 * Flipping the default hash function to SHA-256 at Git 3.0 boundary
	   is planned.
	 * Declare weather-balloon we raised for "bool" type 18 months ago a
	   success and officially allow using the type in our codebase.
	 * GIT_TEST_INSTALLED was not honored in the recent topic related to
	   SHA256 hashes, which has been corrected.
	 * The pop_most_recent_commit() function can have quite expensive
	   worst case performance characteristics, which has been optimized by
	   using prio-queue data structure.
	 * Move structure definition from unrelated header file to where it
	   belongs.
	 * To help our developers, document what C99 language features are
	   being considered for adoption, in addition to what past experiments
	   have already decided.
	 * The reftable unit tests are now ported to the "clar" unit testing
	   framework.
	 * Redefine where the multi-pack-index sits in the object subsystem,
	   which recently was restructured to allow multiple backends that
	   support a single object source that belongs to one repository.  A
	   MIDX does span multiple "object sources".
	 * Reduce implicit assumption and dependence on the_repository in the
	   object-file subsystem.
	Bug Fixes
	 * A memory-leak in an error code path has been plugged.
	   (merge 7082da85cb ly/commit-graph-graph-write-leakfix later to maint).
	 * A memory-leak in an error code path has been plugged.
	   (merge aedebdb6b9 ly/fetch-pack-leakfix later to maint).
	 * Some leftover references to documentation source files that no
	   longer exist, due to recent ".txt" -> ".adoc" renaming, have been
	   corrected.
	   (merge 3717a5775a jw/doc-txt-to-adoc-refs later to maint).
	 * "git stash -p <pathspec>" improvements.
	   (merge 468817bab2 pw/stash-p-pathspec-fixes later to maint).
	 * "git send-email" incremented its internal message counter when a
	   message was edited, which made logic that treats the first message
	   specially misbehave, which has been corrected.
	   (merge 2cc27b3501 ag/send-email-edit-threading-fix later to maint).
	 * "git stash" recorded a wrong branch name when submodules are
	   present in the current checkout, which has been corrected.
	   (merge ffb36c64f2 kj/stash-onbranch-submodule-fix later to maint).
	 * When asking to apply mailmap to both author and committer field
	   while showing a commit object, the field that appears later was not
	   correctly parsed and replaced, which has been corrected.
	   (merge abf94a283f sa/multi-mailmap-fix later to maint).
	 * "git maintenance" lacked the care "git gc" had to avoid holding
	   onto the repository lock for too long during packing refs, which
	   has been remedied.
	   (merge 1b5074e614 ps/maintenance-ref-lock later to maint).
	 * Avoid regexp_constraint and instead use comparison_constraint when
	   listing functions to exclude from application of coccinelle rules,
	   as spatch can be built with different regexp engine X-<.
	   (merge f2ad545813 jc/cocci-avoid-regexp-constraint later to maint).
	 * Updating submodules from the upstream did not work well when
	   submodule's HEAD is detached, which has been improved.
	   (merge ca62f524c1 jk/submodule-remote-lookup-cleanup later to maint).
	 * Remove unnecessary check from "git daemon" code.
	   (merge 0c856224d2 cb/daemon-fd-check-fix later to maint).
	 * Use of sysctl() system call to learn the total RAM size used on
	   BSDs has been corrected.
	   (merge 781c1cf571 cb/total-ram-bsd-fix later to maint).
	 * Drop FreeBSD 4 support and declare that we support only FreeBSD 12
	   or later, which has memmem() supported.
	   (merge 0392f976a7 bs/config-mak-freebsd later to maint).
	 * A diff-filter with negative-only specification like "git log
	   --diff-filter=d" did not trigger correctly, which has been fixed.
	   (merge 375ac087c5 jk/all-negative-diff-filter-fix later to maint).
	 * A failure to open the index file for writing due to conflicting
	   access did not state what went wrong, which has been corrected.
	   (merge 9455397a5c hy/read-cache-lock-error-fix later to maint).
	 * Tempfile removal fix in the codepath to sign commits with SSH keys.
	   (merge 4498127b04 re/ssh-sign-buffer-fix later to maint).
	 * Code and test clean-up around string-list API.
	   (merge 6e5b26c3ff sj/string-list later to maint).
	 * "git apply -N" should start from the current index and register
	   only new files, but it instead started from an empty index, which
	   has been corrected.
	   (merge 2b49d97fcb rp/apply-intent-to-add-fix later to maint).
	 * Leakfix with a new and a bit invasive test on pack-bitmap files.
	   (merge bfd5522e98 ly/load-bitmap-leakfix later to maint).
	 * "git fetch --prune" used to be O(n^2) expensive when there are many
	   refs, which has been corrected.
	   (merge 87d8d8c5d0 ph/fetch-prune-optim later to maint).
	 * When a ref creation at refs/heads/foo/bar fails, the files backend
	   now removes refs/heads/foo/ if the directory is otherwise not used.
	   (merge a3a7f20516 ps/refs-files-remove-empty-parent later to maint).
	 * "pack-objects" has been taught to avoid pointing into objects in
	   cruft packs from midx.
	 * "git remote" now detects remote names that overlap with each other
	   (e.g., remote nickname "outer" and "outer/inner" are used at the
	   same time), as it will lead to overlapping remote-tracking
	   branches.
	   (merge a5a727c448 jk/remote-avoid-overlapping-names later to maint).
	 * The gpg.program configuration variable, which names a pathname to
	   the (custom) GPG compatible program, can now be spelled with ~tilde
	   expansion.
	   (merge 7d275cd5c0 jb/gpg-program-variable-is-a-pathname later to maint).
	 * Our <sane-ctype.h> header file relied on that the system-supplied
	   <ctype.h> header is not later included, which would override our
	   macro definitions, but "amazon linux" broke this assumption.  Fix
	   this by preemptively including <ctype.h> near the beginning of
	   <sane-ctype.h> ourselves.
	   (merge 9d3b33125f ps/sane-ctype-workaround later to maint).
	 * Clean-up compat/bswap.h mess.
	   (merge f4ac32c03a ss/compat-bswap-revamp later to maint).
	 * Meson-based build did not handle libexecdir setting correctly,
	   which has been corrected.
	   (merge 056dbe8612 rj/meson-libexecdir-fix later to maint).
	 * Document that we do not require "real" name when signing your
	   patches off.
	   (merge 1f0fed312a bc/contribution-under-non-real-names later to maint).
	 * "git commit" that concludes a conflicted merge failed to notice and remove
	   existing comment added automatically (like "# Conflicts:") when the
	   core.commentstring is set to 'auto'.
	   (merge 92b7c7c9f5 ac/auto-comment-char-fix later to maint).
	 * "git rebase -i" with bogus rebase.instructionFormat configuration
	   failed to produce the todo file after recording the state files,
	   leading to confused "git status"; this has been corrected.
	   (merge ade14bffd7 ow/rebase-verify-insn-fmt-before-initializing-state later to maint).
	 * A few file descriptors left unclosed upon program completion in a
	   few test helper programs are now closed.
	   (merge 0f1b33815b hl/test-helper-fd-close later to maint).
	 * Interactive prompt code did not correctly strip CRLF from the end
	   of line on Windows.
	   (merge 711a20827b js/prompt-crlf-fix later to maint).
	 * The config API had a set of convenience wrapper functions that
	   implicitly use the_repository instance; they have been removed and
	   inlined at the calling sites.
	 * "git add/etc -p" now honor the diff.context configuration variable,
	   and also they learn to honor the -U<n> command-line option.
	   (merge 2b3ae04011 lm/add-p-context later to maint).
	 * The case where a new submodule takes a path where there used to be a
	   completely different subproject is now dealt with a bit better than
	   before.
	   (merge 5ed8c5b465 kj/renamed-submodule later to maint).
	 * The deflate codepath in "git archive --format=zip" had a
	   longstanding bug coming from misuse of zlib API, which has been
	   corrected.
	 * Other code cleanup, docfix, build fix, etc.
	   (merge b257adb571 lo/my-first-ow-doc-update later to maint).
	   (merge 8b34b6a220 ly/sequencer-update-squash-is-fixup-only later to maint).
	   (merge 5dceb8bd05 ly/do-not-localize-bug-messages later to maint).
	   (merge 61372dd613 ly/commit-buffer-reencode-leakfix later to maint).
	   (merge 81cd1eef7d ly/pack-bitmap-root-leakfix later to maint).
	   (merge bfc9f9cc64 ly/submodule-update-failure-leakfix later to maint).
	   (merge 65dff89c6b ma/doc-diff-cc-headers later to maint).
	   (merge efb61591ee jm/bundle-uri-debug-output-to-fp later to maint).
	   (merge a3d278bb64 ly/prepare-show-merge-leakfix later to maint).
	   (merge 1fde1c5daf ac/preload-index-wo-the-repository later to maint).
	   (merge 855cfc65ae rm/t2400-modernize later to maint).
	   (merge 2939494284 ly/run-builtin-use-passed-in-repo later to maint).
	   (merge ff73f375bb jg/mailinfo-leakfix later to maint).
	   (merge 996f14c02b jj/doc-branch-markup-fix later to maint).
	   (merge 1e77de1864 cb/ci-freebsd-update-to-14.3 later to maint).
	   (merge b0e9d25865 jk/fix-leak-send-pack later to maint).
	   (merge f3a9558c8c bs/remote-helpers-doc-markup-fix later to maint).
	   (merge c4e9775c60 kh/doc-config-subcommands later to maint).
	   (merge de404249ab ps/perlless-test-fixes later to maint).
	   (merge 953049eed8 ts/merge-orig-head-doc-fix later to maint).
	   (merge 0c83bbc704 rj/freebsd-sysinfo-build-fix later to maint).
	   (merge ad7780b38f ps/doc-pack-refs-auto-with-files-backend-fix later to maint).
	   (merge f4fa8a3687 rh/doc-glob-pathspec-fix later to maint).
	   (merge b27be108c8 ja/doc-git-log-markup later to maint).
	   (merge 14d7583beb pw/config-kvi-remove-path later to maint).
	   (merge f31abb421d jc/do-not-scan-argv-without-parsing later to maint).
	   (merge 26552cb62a jk/unleak-reflog-expire-entry later to maint).
	   (merge 339d95fda9 jc/ci-print-test-failures-fix later to maint).
	   (merge 8c3add51a8 cb/meson-avoid-broken-macos-pcre2 later to maint).
	   (merge 5247da07b8 ps/meson-clar-decls-fix later to maint).
	   (merge f3ef347bb2 ch/t7450-recursive-clone-test-fix later to maint).
	   (merge 4ac3302a1a jc/doc-release-vs-clear later to maint).
	   (merge 3bdd897413 ms/meson-with-ancient-git-wo-ls-files-dedup later to maint).
	   (merge cca758d324 kh/doc-fast-import-historical later to maint).
	   (merge 9b0781196a jc/test-hashmap-is-still-here later to maint).
	   (merge 1bad05bacc jk/revert-squelch-compiler-warning later to maint).
	   (merge 3a7e783d9c dl/squelch-maybe-uninitialized later to maint).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/git | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/git b/lfs/git
index abdfe1a38..a0d655ec9 100644
--- a/lfs/git
+++ b/lfs/git
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.50.1
+VER        = 2.51.0
 SUMMARY    = Fast, scalable, distributed revision control system
 
 THISAPP    = git-$(VER)
@@ -33,7 +33,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = git
-PAK_VER    = 39
+PAK_VER    = 40
 
 DEPS       = perl-Authen-SASL perl-Net-SMTP-SSL
 
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 4e5e3168d7dd88cc508920dd773df2ec6b568c70e8068a18010f01241ebc9e9140ca13a9820e14f0d4695e966c436aef305a81e61cc66007b756b75f48dd5d16
+$(DL_FILE)_BLAKE2 = b385ee2c7aed601435952c983045055c970cdda607d83ae8ba904ee10e5e76bca097ccbe0f22e4e1467c6d606c9eecb952ffb382f351124325b6fd5d87083596
 
 install : $(TARGET)
 
-- 
2.51.0

[PATCH] harfbuzz: Update to version 11.4.3

[Adolf Belka]

- Update from version 11.2.1 to 11.4.3
- Update of rootfile
- Changelog
    11.4.3
	- Make shaping fail much faster for certain malformed fonts (e.g., those that
	  trigger infinite recursion).
	- Fix undefined behaviour introduced in 11.4.2.
	- Fix detection of the “Cambria Math” font when fonts are scaled, so the
	  workaround for the bad `MATH` table constant is applied.
    11.4.2
	- Various performance and memory usage improvements.
	- The `hb-shape` command line tool can now be built with the amalgamated
	  `harfbuzz.cc` source.
	- Fix regression in handling version 2 of `avar` table.
	- Increase various buffer length limits for better handling of fonts that
	  generate huge number of glyphs per codepoint (e.g. Noto Sans Duployan)
	- Improvements to the harfrust shaper for more accurate testing.
    11.4.1
	- Fix clang compiler warnings.
    11.4.0
	- General shaping and subsetting speedups.
	- Fix in Graphite shaping backend when glyph advances became negative.
	- Subsetting improvements, pruning empty mark-attachment lookups.
	- Don't use the macro name `_S`, which is reserved by system liberaries.
	- Build fixes and speedup.
	- Add a `kbts` shaping backend that calls into the `kb_text_shape`
	  single-header shaping library. This is purely for testing and
	  performance evaluation and we do NOT recommend using it for any
	  other purposes.
    11.3.3
	- Fix but in vertical shaping of fonts without the vmtx table.
    11.3.2
	- Fix build with non-compliant C++11 compilers that don't recognize
	  the "and" keyword.
    11.3.1
	- Fix crasher in the glyph_v_origin function introduced in
	  11.3.0.
    11.3.0
	- Speed up handling fonts with very large number of variations:
	  - Drawing by up to 40%.
	  - Calculating glyph extents by up to 15%.
	  - Getting horizontal glyph advances by up to 45%.
	- Speed up getting horizontal and vertical glyph advances by up to 24%.
	- Significantly speed up vertical text shaping.
	- Various documentation improvements.
	- Various build improvements.
	- Various subsetting improvements.
	- Various improvements to Rust font functions (fontations integration) and shaper (HarfRust integration).
	- Rename harfruzz option and shaper to harfrust following upstream rename.
	- Implement hb_face_reference_blob() for DirectWrite font functions.
	- New API:
	  +hb_font_get_glyph_origins_func_t
	  +hb_font_get_glyph_h_origins_func_t
	  +hb_font_get_glyph_v_origins_func_t
	  +hb_font_funcs_set_glyph_h_origins_func()
	  +hb_font_funcs_set_glyph_v_origins_func()
	  +hb_font_get_glyph_h_origins()
	  +hb_font_get_glyph_v_origins()

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/harfbuzz | 8 ++++----
 lfs/harfbuzz                     | 4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/config/rootfiles/common/harfbuzz b/config/rootfiles/common/harfbuzz
index 1b129edcf..08603435f 100644
--- a/config/rootfiles/common/harfbuzz
+++ b/config/rootfiles/common/harfbuzz
@@ -47,16 +47,16 @@ usr/include/harfbuzz/hb-script-list.h
 #usr/lib/cmake/harfbuzz/harfbuzz-config.cmake
 #usr/lib/libharfbuzz-cairo.so
 usr/lib/libharfbuzz-cairo.so.0
-usr/lib/libharfbuzz-cairo.so.0.61121.0
+usr/lib/libharfbuzz-cairo.so.0.61143.0
 #usr/lib/libharfbuzz-gobject.so
 usr/lib/libharfbuzz-gobject.so.0
-usr/lib/libharfbuzz-gobject.so.0.61121.0
+usr/lib/libharfbuzz-gobject.so.0.61143.0
 #usr/lib/libharfbuzz-subset.so
 usr/lib/libharfbuzz-subset.so.0
-usr/lib/libharfbuzz-subset.so.0.61121.0
+usr/lib/libharfbuzz-subset.so.0.61143.0
 #usr/lib/libharfbuzz.so
 usr/lib/libharfbuzz.so.0
-usr/lib/libharfbuzz.so.0.61121.0
+usr/lib/libharfbuzz.so.0.61143.0
 #usr/lib/pkgconfig/harfbuzz-cairo.pc
 #usr/lib/pkgconfig/harfbuzz-gobject.pc
 #usr/lib/pkgconfig/harfbuzz-subset.pc
diff --git a/lfs/harfbuzz b/lfs/harfbuzz
index 03ba8b6a5..574b51f15 100644
--- a/lfs/harfbuzz
+++ b/lfs/harfbuzz
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 11.2.1
+VER        = 11.4.3
 
 THISAPP    = harfbuzz-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 1c2553a02b4254c06f41a429c498439796e3c307ea2b1325b3ee99a4a87dc817bcc0ceb4ec23f0b1c708e3488249ce5f05913f4ab50fc2a66605b3e238f39d5d
+$(DL_FILE)_BLAKE2 = 88b2e29e28fd604457f40d26b85fc368823a08cdb2060138764534621d25620e0e25018719c9f64fcecca5051dcf4760bbcd05038cf32caa1902e27173ee1232
 
 install : $(TARGET)
 
-- 
2.51.0

[PATCH] hwdata: Update to version 0.398

[Adolf Belka]

- Update from version 0.396 to 0.398
- Update of rootfile not required
- Changelog
    0.398
	Update usb and vendor ids
    0.397
	Update usb and vendor ids

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/hwdata | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/hwdata b/lfs/hwdata
index 00791fbbb..e83b6f37f 100644
--- a/lfs/hwdata
+++ b/lfs/hwdata
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 0.396
+VER        = 0.398
 
 THISAPP    = hwdata-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = a4d74693a78719337dfecae11da0cbd437686da6ff29091961014e75ffe598734f34c62a00a7d0a13b64a02964fc4c5ff54f22a6f87aeebe693f2fa15e366d06
+$(DL_FILE)_BLAKE2 = 415cf2e0e1735c4b0a2186421e85186f20ae3b165a8224923ef24471b98f3f923484072702c2f0c21dffe98ad2144459e14f2829b77c110e2397141da2bde676
 
 install : $(TARGET)
 
-- 
2.51.0

[PATCH] libinih: Update to version 61

[Adolf Belka]

- Update from version 58 to 61
- Update of rootfile not required
- Changelog
    61
	    add option to disable the test suite by @sage-etcher in #195
	    add ini_parse_string_length() that avoids internal strlen(), and ease… by
		@lihuiba in #196
	    Fix bug where name only options are not processed after an error has
		occurred by @msquire in #197
	    Optimise ini_rstrip() by @msquire in #198
    60
	    test long lines by @isidroas in #190
	    Require C++ only for the host machine; bump project version to 59 by
		@bgilbert in #191
	    meson: fix tests under Windows by @neheb in #192
    59
	    INIReader: change variable visibility from private to protected by
		@meiyasan in #165
	    Add meson test driver by @matoro in #170
	    Swap rstrip() and lskip() to reduce execution time of strlen() by
		@isidroas in #177
	    Add preprocessor exclusions when INI_ALLOW_MULTILINE=0 by @isidroas in #178
	    tests: define only once the compiler and flag by @isidroas in #179
	    Test that long sections are truncated by @isidroas in #180
	    Add INIReader Sections and Keys methods by @Ishan09811 in #186
	    If a line is longer than INI_MAX_LINE, consume input up to next newline by
		@benhoyt in #188

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/libinih | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/lfs/libinih b/lfs/libinih
index 2df1d7799..7a0eca385 100644
--- a/lfs/libinih
+++ b/lfs/libinih
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2024  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 58
+VER        = 61
 
 THISAPP    = inih-r$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = ba71b21b30c039df026adbd29b422b064934046ced21a37479421e866b73969826dc1fea4e3bc0c5ea427248c774d8f80b83056c54769d454bafa2f336d08024
+$(DL_FILE)_BLAKE2 = 6e0d5c3976db52c2a49c56026be79e00ff21fd92a96c37e13478c0e70ed955ec555af66f9737beb4e1338bb286418d86ae401098a6e7b9f599e05619458fea29
 
 install : $(TARGET)
 
@@ -76,7 +76,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@$(PREBUILD)
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
 	$(UPDATE_AUTOMAKE)
-	cd $(DIR_APP) && meson --prefix=/usr builddir/
+	cd $(DIR_APP) && meson \
+				--prefix=/usr \
+				builddir/
 	cd $(DIR_APP) && ninja -C builddir/ $(MAKETUNING)
 	cd $(DIR_APP) && ninja -C builddir/ install
 	@rm -rf $(DIR_APP)
-- 
2.51.0

[PATCH] lsof: Update to version 4.99.5

[Adolf Belka]

- Update from version 4.99.4 to 4.99.5
- Update of rootfile not required
- Changelog
    4.99.5
	[linux] fix legacy linux kernel compatibility due to missing
	 /proc/self/ns (#329)
	[linux] fix potential null pointer deference, reported by
	 @mono-trip (#332)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/lsof | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/lsof b/lfs/lsof
index b22d5e0fd..9bae57788 100644
--- a/lfs/lsof
+++ b/lfs/lsof
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2024  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 4.99.4
+VER        = 4.99.5
 
 THISAPP    = lsof-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 43e97874779797733433c0942f47dd5bebdaf5ef12153ede91b472c044d9ca63a03aee38c0d5a939b3c3bc7b40321dac5d241da39ca108f1ca3355c6571bc253
+$(DL_FILE)_BLAKE2 = 998ce85c7a0e742e6f7696d00ee3b6bb8aa6b6e5c30d5c76ac1fc74ea7d8062d73da4de54f433147b74ef4a6d6ac168f70ee68773c82269e07ec3f90bd9b8a8c
 
 install : $(TARGET)
 
-- 
2.51.0

[PATCH] nano: Update to version 8.6

[Adolf Belka]

- Update from version 8.5 to 8.6
- Update of rootfile not required
- Changelog
    8.6
	• The GotoLine menu accepts the prefixes ++ and -- for jumping
	  a number of lines forward or backward.
	• Anchors are not forgotten when a line number is given on the
	  command line.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/nano | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/nano b/lfs/nano
index cc41e36f6..d0c83e40b 100644
--- a/lfs/nano
+++ b/lfs/nano
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 8.5
+VER        = 8.6
 
 THISAPP    = nano-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 85de6d5349ed2332d41c054ff64979d7b00ec3c792564fcfb6ebed56b74a17c948117218a50297fead17674c06755afba393e73466eb2af9d3bb33af085c4f23
+$(DL_FILE)_BLAKE2 = f7e17085d237ec3512b21bb732c2ebcf71a96991344acd0efc3592a650be856aed3ad958df59e27f332f750ac5e46ba7ed06b23093c8b68c4bf0a94aeecd2af0
 
 install : $(TARGET)
 
-- 
2.51.0

[PATCH] postfix: Update to version 3.10.4

[Adolf Belka]

- Update from version 3.10.2 to 3.10.4
- Update of rootfile not required
- Changelog
    3.10.4
      Fixes for postscreen(8):
        Bugfix (defect introduced: postfix-2.2, date 20050203): after detecting a
	 lookup table change, and after starting a new postscreen process, the old
	 postscreen process logged an ENOTSOCK error while attempting to accept a
	 connection on a socket that it was no longer listening on. This error was
	 introduced first in the multi_server skeleton code, and was five years later
	 duplicated in the event_server skeleton that was created for postscreen.
	 Problem reported by Florian Piekert.
        Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting a cache
	 table change and before starting a new postscreen process, the old postscreen
	 process did not close the postscreen_cache_map, and therefore kept an
	 exclusive lock that could prevent a new postscreen process from starting.
	 Problem reported by Florian Piekert.
      Fixes for tlsproxy(8):
        Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible support
	 for the legacy configuration parameters tlsproxy_client_level and
	 tlsproxy_client_policy. This disabled the tlsproxy TLS client role when a
	 legacy parameter was set (instead of the newer tlsproxy_client_security_level
	 or tlsproxy_client_policy_maps). Reported by John Doe, diagnosed by Viktor
	 Dukhovni.
        Bugfix (defect introduced: Postfix 3.4): with the TLS client role disabled by
	 configuration, the tlsproxy daemon dereferenced a null pointer while handling
	 a tlsproxy client request. Reported by John Doe.
      Reducing process churn: Postfix daemons no longer automatically restart after a
	btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time change, when
	they opened that table for writing.
      Portability: deleted an <openssl/engine.h> build dependency, because the feature
	is being removed from OpenSSL, and Postfix no longer needs it.
      Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will no longer
	maintain TLSRPT statistics for messages that contain a "TLS-Required: no"
	header. This can prevent TLSRPT notifications for TLSRPT notifications.
      Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS client code
	logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS connection"
	(right), for a new or resumed TLS session, when a server offered a trusted
	(valid PKI trust chain) certificate that did not match the expected server name
	pattern. Fix by Viktor Dukhovni.
    3.10.3
      This release fixes defects that were introduced in Postfix 3.10. These were
	fixed first in the Postfix 3.11 unstable release.
      The defects exist only with the default configuration "tls_required_enable = yes".
	    Bugfix (defect introduced: Postfix-3.10, date 20250117): include the
		current TLS security level in the SMTP connection cache lookup key for
		lookups by next-hop destination, to avoid reusing the same SMTP
		connection when sending messages with and without a "TLS-Required: no"
		header. Likewise, include the current TLS security level in the TLS
		session lookup key, to avoid reusing the same TLS session info when
		sending messages with and without a "TLS-Required: no" header.
	    Bugfix (defect introduced: Postfix-3.10, date 20250117): the Postfix SMTP
		client attempted to look up TLSA records even with "TLS-Required: no".
		This could result in unnecessary failures. Fix by Viktor Dukhovni &
		Wietse.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/postfix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/postfix b/lfs/postfix
index 5dd1a3c98..2bc0174d1 100644
--- a/lfs/postfix
+++ b/lfs/postfix
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = A fast, secure, and flexible mailer
 
-VER        = 3.10.2
+VER        = 3.10.4
 
 THISAPP    = postfix-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = postfix
-PAK_VER    = 48
+PAK_VER    = 49
 
 DEPS       =
 
@@ -72,7 +72,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = b75fec52e837d43e0fa5d6ede3f44ccc62144133a2c433f536c566362b20a6a9b8a8cbf8e11f64d84fa751311cc9451158cda0edc212a0e45a9097530f41cea4
+$(DL_FILE)_BLAKE2 = e0a9b3dbd858e9b2bacb137b886ef35a89220caf91da5bcb90de5fd3df7285645deaff6e58f571cdc75966098cf13190b0315690c270b9f3ed69a21e63d2d3ab
 
 install : $(TARGET)
 
-- 
2.51.0

[PATCH] rpcbind: Update to version 1.2.8

[Adolf Belka]

- Update from version 1.2.7 to 1.2.8
- Update of rootfile not required
- Changelog
    1.2.8
	rpcinfo: Removed a number of "old-style function definition" warnings
	rpcbind: Add -v flag to print version and config
	    This helps to see compiled time options, e.g. remote calls enablement.
	    $ ./rpcbind -v
	    rpcbind 1.2.7
	    debug: no, libset debug: no, libwrap: no, nss modules: files,
		remote calls: no, statedir: /run/rpcbind, systemd: yes,
		user: root, warm start: no
	man/rpcbind: Update list of options
	    -L was removed in 718ab7e, -w added in 9b1aaa6, -f added in eb36cf1.
	    Fixes: 718ab7e ("Removed the documentation about the non-existent '-L' flag")
	    Fixes: 9b1aaa6 ("Allow the warms start code to be enabled at compile
		time...")
	    Fixes: eb36cf1 ("rpcbind: add no-fork mode")
	Comment out ListenStream=@/run/rpcbind.sock
	[nfs/nfs-utils/rpcbind] rpcbind: avoid dereferencing NULL from realloc()
	    Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2173869
	Move rpbind's default configuration to /run verses /var/run
	Move rpcbind.lock to /run
	    Most of the distros have /var/run as symlink to /run.
	    Because /var may be a separate partition, and could even be mounted via
	    NFS, having to look directly to /run help to avoid issues rpcbind
	    startup early in boot when /var might not be available.
	systemd/rpcbind.service.in: Want/After systemd-tmpfiles-setup
	    Add Want/After systemd-tmpfiles-setup.service. This is taken from Fedora
	    rpcbind-0.2.4-5.fc25 patch [1] which tried to handle bug #1401561 [2]
	    where /var/run/rpcbind.lock cannot be created due missing /var/run/
	    directory. But the suggestion to add RequiresMountFor=... was
	    implemented in ee569be ("Fix boot dependency in systemd service file").
	    But even with RequiresMountsFor=/run/rpcbind in rpcbind.service and
	    /run/rpcbind.lock there is error on openSUSE Tumbleweed with rpcbind
	    1.2.6:
	    rpcbind.service: Failed at step NAMESPACE spawning /usr/sbin/rpcbind:
		Read-only file system
	    Adding systemd-tmpfiles-setup.service fixes it.
	    NOTE: Debian uses for this purpose remote-fs-pre.target (also works, but
	    systemd-tmpfiles-setup.service looks to me more specific).
	    openSUSE uses only After=sysinit.target as a result of #1117217 [3]
	    (also works).
	    [1] https://src.fedoraproject.org/rpms/rpcbind/blob/rawhide/f/rpcbind-0.2.4-systemd-service.patch
	    [2] https://bugzilla.redhat.com/show_bug.cgi?id=1401561
	    [3] https://bugzilla.suse.com/show_bug.cgi?id=1117217
	systemd/rpcbind.service.in: Add various hardenings options
	    We've been running rpcbind 1.2.6 with it in openSUSE since 2021.
	    NOTE: In systemd < 244 (released Nov 2019) some of these options are
	    unknown and will produce warnings, see
	    https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
	man/rpcbind: Add Files section to manpage
	    Previous commit added 3 non-default files, mention them in man page.
	systemd/rpcbind.service.in: Add few default EnvironmentFile
	    Add some defaults so that distros can drop patches to configure it.
	    * openSUSE and Fedora use /etc/sysconfig/rpcbind
	    https://build.opensuse.org/projects/network/packages/rpcbind/files/0001-systemd-unit-files.patch?expand=1
	    https://src.fedoraproject.org/rpms/rpcbind/blob/f41/f/rpcbind-0.2.3-systemd-envfile.patch
	    * Debian uses /etc/rpcbind.conf and /etc/default/rpcbind
	    https://salsa.debian.org/debian/rpcbind/-/blob/buster/debian/rpcbind.service?ref_type=heads
	    Add all these 3 in order:
	    * /etc/rpcbind.conf
	    * /etc/default/rpcbind
	    * /etc/sysconfig/rpcbind

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/rpcbind | 15 +++++++--------
 1 file changed, 7 insertions(+), 8 deletions(-)

diff --git a/lfs/rpcbind b/lfs/rpcbind
index a707d9c05..196089af6 100644
--- a/lfs/rpcbind
+++ b/lfs/rpcbind
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Transport independent RPC portmapper
 
-VER        = 1.2.7
+VER        = 1.2.8
 
 THISAPP    = rpcbind-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = rpcbind
-PAK_VER    = 8
+PAK_VER    = 9
 
 DEPS       =
 
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = f1e79b304ce5fe06c1c256d3512d999daffca782d956440f612b8a957ad7ddb35356b47aa4f4105d5b24d820daab32ec3a0f4a3b8ac76bb7adf5c3ed22d2ef01
+$(DL_FILE)_BLAKE2 = 70bef658aafc4b1b626a7e9ff312b34748e0142a0a93d058c28d6599545281464f27a5546abe287f0dd369e5264cb38940f85e5e6c128cb0e0f7aaa4b841ab77
 
 install : $(TARGET)
 
@@ -83,11 +83,10 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE)
 	cd $(DIR_APP) && sed -i "/servname/s:rpcbind:sunrpc:" src/rpcbind.c
 	cd $(DIR_APP) && ./configure \
-		--prefix=/usr \
-		--bindir=/sbin \
-		--with-rpcuser=root \
-		--without-systemdsystemunitdir
-
+				--prefix=/usr \
+				--bindir=/sbin \
+				--with-rpcuser=root \
+				--without-systemdsystemunitdir
 	cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE)
 	cd $(DIR_APP) && make install
 	#install initscripts
-- 
2.51.0

[PATCH] sudo: Update to version 1.9.17p2

[Adolf Belka]

- Update from version 1.9.17p1 to 1.9.17p2
- Update of rootfile not required
- Changelog
    1.9.17p2
	 * Fixed a bug introduced in sudo 1.9.16 that could result in sudo
	   sending SIGHUP to all processes on the system in certain rare
	   cases.  The bug could manifest if sudo is running a command in
	   a pseudo-terminal, sudo terminates the command due to an internal
	   error, and the user's terminal is revoked.  GitHub issue #458.
	 * Fixed a bug introduced in sudo 1.9.12 that caused sudo to abort
	   when the "intercept" and "intercept_verify" options are enabled
	   in sudoers and either the command line arguments or the environment
	   contains a string larger than the page size (usually 4096).  This
	   only Linux affects systems that support the ptrace_readv_string()
	   function.  GitHub issue #453.
	 * Fixed a bug in sudo's configure script introduced in sudo 1.9.17
	   that prevented mdoc-format man pages from being used on systems
	   without the mandoc utility.  Bug #1077.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/sudo | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/sudo b/lfs/sudo
index c2c221417..f605ff683 100644
--- a/lfs/sudo
+++ b/lfs/sudo
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.9.17p1
+VER        = 1.9.17p2
 
 THISAPP    = sudo-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 21771348a8de392767c366bb938951327dcc64a4cedee716a802435899e5135c218468271833a9e3ab9d90bda29e36c0870e27dd333d3a5c64fb8e3a5ebbff58
+$(DL_FILE)_BLAKE2 = dd42ff4fd571ba8489cc59d71a09c7e0483d21daf9faf7e697beedc04d9f170b01e60446af179c949a3da115b616fbec07aff8fbf8b7d502161c24d1b35b7a69
 
 install : $(TARGET)
 
-- 
2.51.0

[PATCH] whois: Update to version 5.6.4

[Adolf Belka]

- Update from version 5.6.1 to 5.6.4
- Update of rootfile not required
- Changelog
    5.6.4
	* Updated the .cm and .to TLD servers.
    5.6.3
	* Added the .sr and .мон (.xn--l1acc, Mongolia) TLD servers.
	* Use readpassphrase(3) on OpenBSD and FreeBSD.
    5.6.2
	* Updated the .post and .in (and related IDN TLDs) TLD servers.
	* Removed 1 new gTLDs which is no longer active.
	* Build-Depend on libcrypt-dev. (Closes: #1106977)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/whois | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/whois b/lfs/whois
index e8ada71e7..951e2f858 100644
--- a/lfs/whois
+++ b/lfs/whois
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 5.6.1
+VER        = 5.6.4
 
 THISAPP    = whois-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = fde0acb2edc7d10e588d73f68cd83303986f05c986b1a237a4e635fe7a54d94073712907136b80a283b4733203a8ffa3588d1deb4bf8783d35943095fefbdd89
+$(DL_FILE)_BLAKE2 = 212ad7c3ce09804fa988b913cc0fc664bc09aa0fabd35570b3038da5d2c6df4eb4866fab083002549c2e3ac734765a139be67f74c019e22c0b93f3d222146196
 
 install : $(TARGET)
 
-- 
2.51.0

[PATCH] wsdd: Update to version 0.9

[Adolf Belka]

- Update from version 0.8 to 0.9
- Update of rootfile not required
- Changelog
    0.9
      Added
	- Add command line argument to set source port for multicast message for better
	  firewall interoperability (#216)
	- Add initial support for SunOS (#223), without dynamic address/interface
	  monitoring. Thanks to Carsten Grzemba.
	- Add Socket-activated systemd service (#218). Thanks to Alessandro Astone.
      Changed
	- Devices are now recorded based on their URI provided in the endpoint
	  reference address, which is not neccessarily a UUID. This also affects API
	  (see #226).
	- make `/etc/default/wsdd` optional for systemd (see #212)
	- Remove support for Python 3.7 and 3.8 in Github workflows.
      Fixed
	- Clean conection turn-down for Python pre-3.13. Thanks to Alessandro Astone
	- Handle TimeoutError in metadata exchange.
	- Proper handling of endpoint addresses as URIs, not UUIDs, see #226.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/wsdd | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/lfs/wsdd b/lfs/wsdd
index 84a563a46..4ba4da28f 100644
--- a/lfs/wsdd
+++ b/lfs/wsdd
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2024  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 0.8
+VER        = 0.9
 SUMMARY    = A Web Service Discovery host daemon.
 
 THISAPP    = wsdd-$(VER)
@@ -33,7 +33,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = wsdd
-PAK_VER    = 3
+PAK_VER    = 4
 
 DEPS       =
 
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = e4b8e29073b6ea23b73d2f740f6dbabd8c90b615de32d9972c59e5a822daf6232fcdeafb180492a37c4a29ec266c733b160376abedce3b6a90feded2aed25aa2
+$(DL_FILE)_BLAKE2 = 8f3b20b8ddc5424fd33ec37c7f9314145ff9a91a0b49f9edd47e1691b3e775e17015bc4b2c115dd05994824140434a67c5a51637254e001922f9e1e927de8124
 
 install : $(TARGET)
 
-- 
2.51.0