Build date: 1785016803 - Sat Jul 25 22:00:03 UTC 2026
Build cvs date: 1784990984 - Sat Jul 25 14:49:44 UTC 2026
Build id: 2026-07-26.1
Build tags: amd64-regress ports sysupgrade

Applied the following diff(s):
/home/anton/tmp/robsd/src-sys-em.diff
/home/anton/tmp/robsd/src-sys-uhidev-sispm.diff
/home/anton/tmp/robsd/src-sysupgrade.diff

P distrib/sets/lists/man/mi
P gnu/llvm/clang/include/clang/Options/Options.td
P gnu/llvm/clang/lib/Driver/ToolChains/Clang.cpp
P gnu/llvm/llvm/lib/Target/Mips/CMakeLists.txt
P gnu/llvm/llvm/lib/Target/Mips/Mips.h
cvs server: gnu/llvm/llvm/lib/Target/Mips/MipsLoongson2FBTBFix.cpp is no longer in the repository
P gnu/llvm/llvm/lib/Target/Mips/MipsTargetMachine.cpp
P gnu/llvm/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp
P gnu/llvm/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp
P lib/libcrypto/ui/ui_lib.c
M sys/dev/usb/uhidev.c
M usr.sbin/bgpd/session.c
P usr.sbin/httpd/config.c
P usr.sbin/httpd/httpd.c
P usr.sbin/httpd/httpd.conf.5
P usr.sbin/httpd/httpd.h
P usr.sbin/httpd/parse.y
P usr.sbin/httpd/server.c
P usr.sbin/httpd/server_fcgi.c
P usr.sbin/httpd/server_http.c
P usr.sbin/relayd/relayd.conf.5

commit S5lpj0QqKVkOZ3kz
Author: naddy
Date: 2026/07/25 14:49:44

  llvm: g/c-collect local changes for now-retired loongson platform

  ok visa@

  gnu/llvm/clang/include/clang/Options/Options.td
  gnu/llvm/clang/lib/Driver/ToolChains/Clang.cpp
  gnu/llvm/llvm/lib/Target/Mips/CMakeLists.txt
  gnu/llvm/llvm/lib/Target/Mips/Mips.h
  gnu/llvm/llvm/lib/Target/Mips/MipsTargetMachine.cpp
  gnu/llvm/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp
  gnu/llvm/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp

commit WIQlmB2tJAuBTWPC
Author: deraadt
Date: 2026/07/25 14:44:25

  sync

  distrib/sets/lists/man/mi

commit 1I1ebgw3yI5QEzkc
Author: rsadowski
Date: 2026/07/25 08:58:14

  httpd: don't send the fastcgi param struct over imsg

  Send one imsg per param with a small fixed header (fastcgi_param_imsg)
  followed by the name and value bytes, and read it back with imsg_get_ibuf()
  and ibuf_get_string(). The struct now uses dynamic buffer instead of fixed,
  and the value limit is raised to 8192. Parse order is now preserved end-to-end
  instead of being reversed twice. This follows the config order.

  Feedback and OK kirill@

  usr.sbin/httpd/config.c
  usr.sbin/httpd/httpd.h
  usr.sbin/httpd/parse.y
  usr.sbin/httpd/server.c

commit jzDlyWfL2mY5bvB4
Author: tb
Date: 2026/07/25 07:33:43

  Unlock CRYPTO_LOCK_UI on ui_open_session() failure

  Both ui_open_session() implementations, open_console() in ui_openssl.c
  in base, and the one in ui_openssl_win.c in portable, grab the lock of
  type CRYPTO_LOCK_UI before doing anything else.

  The only internal (and, as far as I can tell, the only existing) caller,
  UI_process(), returns immediately on failure. The calling thread thus
  keeps holding the lock and the next call to UI_process() will block
  indefinitely. Fix this by using the common exit path, which calls
  ui_close_session() aka close_console(), both implementations of which
  release the lock.

  Thanks to Kartik (@sage-mode-hunter) who proposed an alternative fix for
  ui_openssl_win.c, which we would have to apply to ui_openssl.c as well.

  Matches OpenSSL behavior since PR #2037
  Closes https://github.com/libressl/portable/pull/1334

  ok kenjiro

  lib/libcrypto/ui/ui_lib.c

commit oB6fI1iIjb2akI8V
Author: rsadowski
Date: 2026/07/25 07:19:19

  relayd: correct edh relayd.conf.5

  The previous wording implied that omitting "params" defaulted to auto.
  "edh" alone enables EDH in auto mode, while leaving the directive out
  keeps EDH disabled (equivalent to no edh / edh params none).

  usr.sbin/relayd/relayd.conf.5

commit 5KEwLoBCLLkTwkOR
Author: rsadowski
Date: 2026/07/25 05:48:39

  httpd: add custom HTTP header support

  Allow httpd.conf to set/add/remove custom HTTP response headers or Suppress
  existing ones. This enables httpd to add security headers, custom metadata,
  or remove unwanted headers without modifying app/fastcgi code.

  Three new directives are added:

  header option
  Manipulate HTTP response headers.  Multiple header statements may
  be specified.  Valid options are:

  set name value [always]
  Set a custom HTTP response header with the specified name
  and value.  If a header with the same name is already
  present in the response, its value will be replaced.  The
  header is added to successful responses (2xx and 3xx
  status codes) by default.

  add name value [always]
  Add a custom HTTP response header with the specified name
  and value.  Unlike set, this option appends the header
  even if one with the same name already exists, allowing
  for multiple headers with the same name.  The header is
  added to successful responses (2xx and 3xx status codes)
  by default.

  remove name [always]
  Suppress the HTTP response header with the specified
  name.  This can be used to remove headers added by
  default, such as "Last-Modified", as well as headers
  inherited from a parent server configuration.

  If always is specified, the header is also added to error
  responses (4xx and 5xx).

  Header names are limited to 256 characters and values to 8192
  characters.  Headers defined in a location block are inherited
  from the server context and override defined headers with the
  same name.  If you do not wish to inherit these, you can remove
  them again with remove.

  Example configuration:

  server "example.com" {
  listen on * tls port 443

  header set "X-Content-Type-Options" "nosniff" always
  header set "X-Frame-Options" "SAMEORIGIN" always
  header set "Referrer-Policy" "no-referrer" always
  header set "X-Permitted-Cross-Domain-Policies" "none" always
  header set "X-XSS-Protection" "0" always

  # Avoid info leak: strip the revealing header
  header remove "X-Powered-By"

  location "/api/*" {
  header add "Access-Control-Allow-Origin" "https://app.example.com"
  header add "Access-Control-Allow-Methods" "GET, POST, OPTIONS"

  # Enforce cookie flags
  header set "Set-Cookie" "id=5; HttpOnly; Secure; SameSite=Strict"

  # Framing is irrelevant for a JSON API, drop from server context
  header remove "X-Frame-Options"

  # APIs should not be cached
  header set "Cache-Control" "no-store" always
  }
  }

  The implementation follows the existing pattern form FastCGI parameters.

  Feedback and help from sthen@, claudio@, op@, kirill@ and many others.

  OK op@ kirill@

  usr.sbin/httpd/config.c
  usr.sbin/httpd/httpd.c
  usr.sbin/httpd/httpd.conf.5
  usr.sbin/httpd/httpd.h
  usr.sbin/httpd/parse.y
  usr.sbin/httpd/server.c
  usr.sbin/httpd/server_fcgi.c
  usr.sbin/httpd/server_http.c