Build date: 1780956003 - Mon Jun  8 22:00:03 UTC 2026
Build cvs date: 1780955179 - Mon Jun  8 21:46:19 UTC 2026
Build id: 2026-06-09.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P lib/libcrypto/ecdh/ecdh.c
P lib/libssl/ssl_kex.c
P lib/libssl/ssl_local.h
P lib/libssl/ssl_tlsext.c
P lib/libssl/tls_key_share.c
P regress/lib/libssl/unit/Makefile
U regress/lib/libssl/unit/ssl_kex.c
P regress/usr.sbin/bgpd/config/bgpd.conf.16.ok
M sys/dev/usb/uhidev.c
P usr.bin/newsyslog/newsyslog.8
P usr.bin/tmux/cmd-choose-tree.c
P usr.bin/tmux/cmd-display-panes.c
P usr.bin/tmux/cmd-server-access.c
P usr.bin/tmux/cmd-split-window.c
P usr.bin/tmux/format.c
P usr.bin/tmux/mode-tree.c
P usr.bin/tmux/options-table.c
P usr.bin/tmux/proc.c
P usr.bin/tmux/screen-write.c
P usr.bin/tmux/screen.c
P usr.bin/tmux/server-acl.c
P usr.bin/tmux/server-client.c
P usr.bin/tmux/tmux.1
P usr.bin/tmux/tmux.h
P usr.bin/tmux/window-client.c
P usr.bin/tmux/window-tree.c
P usr.bin/tmux/window.c
P usr.sbin/bgpd/printconf.c
M usr.sbin/bgpd/session.c
P usr.sbin/ntpd/client.c
P usr.sbin/ntpd/ntp.c
P usr.sbin/rpki-client/repo.c

commit URIEaor3OR7kfA16
Author: nicm
Date: 2026/06/08 21:46:19

  Fix squash-groups skipping every session, GitHub issue 5180 from Bryce
  Miller.

  usr.bin/tmux/window-tree.c

commit 7ACuy1lmduYA1hRZ
Author: nicm
Date: 2026/06/08 21:38:19

  Allow ACLs to use groups as well as users, GitHub issue 4917.

  usr.bin/tmux/cmd-server-access.c
  usr.bin/tmux/proc.c
  usr.bin/tmux/server-acl.c
  usr.bin/tmux/tmux.1
  usr.bin/tmux/tmux.h

commit 4DbJZIXJZJZqHXG1
Author: nicm
Date: 2026/06/08 21:19:52

  Add a relative time option for time formatting, GitHub issue 5009.

  usr.bin/tmux/format.c
  usr.bin/tmux/tmux.1

commit IP7TjjnXvR1lMSdX
Author: nicm
Date: 2026/06/08 21:01:33

  Add a -h flag to choose-tree and choose-client to hide the pane
  containing the mode, intended for use with floating panes. From Michael
  Grant, GitHub issue 5177.

  usr.bin/tmux/cmd-choose-tree.c
  usr.bin/tmux/tmux.1
  usr.bin/tmux/window-client.c
  usr.bin/tmux/window-tree.c

commit 0ehttdQNJmzhEVKG
Author: nicm
Date: 2026/06/08 20:44:57

  Add -T to new-pane to set the title; GitHub issue 5176 from Michael Grant.

  usr.bin/tmux/cmd-split-window.c
  usr.bin/tmux/tmux.1

commit Dv9FUjUNnGl42wUf
Author: nicm
Date: 2026/06/08 20:42:39

  Add display-panes-format to change the top-of-pane text shown with
  display-panes.

  usr.bin/tmux/cmd-display-panes.c
  usr.bin/tmux/options-table.c
  usr.bin/tmux/tmux.1

commit 4Z1hdz8iMROjAJuJ
Author: nicm
Date: 2026/06/08 20:41:21

  When entering or leaving the alternate screen, discard any pending
  resizes. Improves flicking with scrollbars and programs that leave and
  enter the alternate screen on every WINCH like nano. GitHub issue 4772.

  Cvs: ----------------------------------------------------------------------

  usr.bin/tmux/screen-write.c
  usr.bin/tmux/screen.c
  usr.bin/tmux/server-client.c
  usr.bin/tmux/tmux.h

commit oPzRuYA1hy6mK3f6
Author: nicm
Date: 2026/06/08 20:38:54

  Add a -k flag to choose commands to kill the pane when the mode is
  exited (useful with floating panes).

  usr.bin/tmux/cmd-choose-tree.c
  usr.bin/tmux/tmux.1
  usr.bin/tmux/tmux.h
  usr.bin/tmux/window.c

commit U3tA9T8pqYIbegho
Author: nicm
Date: 2026/06/08 15:16:21

  Return immediately if the list is empty in mode_tree_key instead of
  crashing, from Bryce Miller in GitHub issue 5170.

  usr.bin/tmux/mode-tree.c

commit CYEM1Ee7vwP5TIBZ
Author: henning
Date: 2026/06/08 12:46:17

  when no constraints are configured, do not wait for constraint replies
  openntpd-portable commit 2760aa0, bcook@

  usr.sbin/ntpd/client.c

commit zEXZ6k3odnLXHXNY
Author: henning
Date: 2026/06/08 12:41:51

  when creating a peer out of a pool spec ("servers" in cfg), copy
  "trusted" just like weight and everything else
  openntpd-portable commit fd6d7d0 by bcook@

  usr.sbin/ntpd/ntp.c

commit Uazv6GzimeJvfcGq
Author: claudio
Date: 2026/06/08 12:29:29

  Update because printconf missed a hypen.

  -       announce as4byte yes
  +       announce as-4byte yes

  regress/usr.sbin/bgpd/config/bgpd.conf.16.ok

commit sBsVFQlpQmYUzTtG
Author: claudio
Date: 2026/06/08 12:26:45

  announce as-4byte uses a hyphen in the name. Fix printconf to output the
  statement correctly.

  usr.sbin/bgpd/printconf.c

commit 9TvcJm9CXshEsn48
Author: job
Date: 2026/06/08 12:12:00

  Save the rpkiNotify URI itself in the repository's RRDP state file

  Providing this mapping makes introspection & comparison of RRDP states
  across different instances easier.

  OK tb@

  usr.sbin/rpki-client/repo.c

commit MFcs4nZSJWs3SKAR
Author: tb
Date: 2026/06/08 12:08:08

  Add a point at infinity check to ecdh_compute_key()

  While we already check that the peer's public point is on the curve and
  will reject the point at infinity when getting the affine coordinates,
  doing this earlier avoids doing work with the private key in a clearly
  invalid case.

  Suggested by Lucca Hirschi et al.

  [An EC_KEY_check_key() call was also suggested but this is a bit expensive
  and punishes callers that do that or equivalent already (e.g. ssh)]

  ok jsing kenjiro

  lib/libcrypto/ecdh/ecdh.c

commit jY1Gllh5nP5vSSID
Author: tb
Date: 2026/06/08 12:05:25

  tlsext: add XXX to consider refusing anything but uncompressed point format

  ok jsing kenjiro

  lib/libssl/ssl_tlsext.c

commit qll3PbJQAKsUYmKq
Author: tb
Date: 2026/06/08 11:53:51

  The ssl_kex regress now passes.

  regress/lib/libssl/unit/Makefile

commit 0FYx4yaVOFnnS8Rg
Author: tb
Date: 2026/06/08 11:52:43

  ssl_kex: ensure the public key uses uncompressed encoding

  EC_POINT_oct2point() does most of the validation we need it to do, but it
  has to accept the point at infinity, compressed and hybrid encodings for
  historic reasons. So exclude these cases: the point at infinity makes no
  sense here and will be caught later in ECDH_compute_key(), the compressed
  and hybrid encodings MUST NOT be supported per RFC 8422 section 5.1.2.

  This is implemented using the strategy already used in ec_convert.c since
  the point_conversion_form_t is completely unfit for anything.

  Set decode_error to ensure we send that alert. We may make some effort to
  use illegal_parameter later.

  Issue about the missing alert and the point at infinity raised by Lucca
  Hirschi et al.

  ok jsing kenjiro

  lib/libssl/ssl_kex.c

commit K00bmDOjeXT0aRsz
Author: tb
Date: 2026/06/08 11:41:21

  Adjust ssl_kex test for signature change in ssl_kex_peer_public_ecdhe_ecp()

  regress/lib/libssl/unit/ssl_kex.c

commit qiBmTK1sbZFVybfP
Author: tb
Date: 2026/06/08 11:38:04

  Add a decode_error argument to ssl_kex_peer_public_ecdhe_ecp()

  ok jsing kenjiro

  lib/libssl/ssl_kex.c
  lib/libssl/ssl_local.h
  lib/libssl/tls_key_share.c

commit c6M3PwGycuxtXdfc
Author: tb
Date: 2026/06/08 11:31:29

  regress/libssl/unit: add a currently failing test for ECDHE kex

  regress/lib/libssl/unit/Makefile
  regress/lib/libssl/unit/ssl_kex.c

commit sSSAcy6TUmN2C9ou
Author: jsg
Date: 2026/06/08 09:53:54

  sort SEE ALSO

  usr.bin/newsyslog/newsyslog.8