Update PLIST according to the recent change.

Bump PORTREVISION.

Update third-party dynamic_upstream module.
Add third-party dynamic_healthcheck module.

Bump PORTREVISION.

Update third-party modules to their recent releases:

o) ip2proxy-nginx
o) slact-nchan

Bump PORTREVISION.

Update nginx from 1.19.1 to 1.19.2.
Update njs module from 0.4.2 to 0.4.3.

While I'm here soften some variables and target definitions to
prepare the port for a separate build of dynamic modules.

<Changelog for nginx 1.19.2>

*) Change: now nginx starts closing keepalive connections before all
   free worker connections are exhausted, and logs a warning about this
   to the error log.

*) Change: optimization of client request body reading when using
   chunked transfer encoding.

Update passenger and its third-party module for www/nginx-devel
from 6.0.5 to 6.0.6.

Update the following third-party modules to their new versions:
o) cache_purge
o) clojure

Bump PORTREVISION.

Update third-party brotli module to v1.0.0rc.

Bump PORTREVISION.

Update from 1.19.0 to 1.19.1.

<ChangeLog>

*) Change: the "lingering_close", "lingering_time", and
   "lingering_timeout" directives now work when using HTTP/2.

*) Change: now extra data sent by a backend are always discarded.

*) Change: now after receiving a too short response from a FastCGI
   server nginx tries to send the available part of the response to the
   client, and then closes the client connection.

*) Change: now after receiving a response with incorrect length from a
   gRPC backend nginx stops response processing with an error.

Update third-party modules:

o) lua from 0.10.15 to 0.10.17
o) njs from 0.4.1 to 0.4.2

Bump PORTREVISION.

<ChangeLog for njs 0.4.2>

Core:

*) Feature: added RegExp.prototype[Symbol.replace].

*) Feature: introduced line level backtrace.

Move NJS knob out of the HTTP group cause NGINX JavaScript module
distribution provides modules for http and stream (tcp/udp).

Bump PORTREVISION.

Add kernel TLS option.

It's possible to build nginx on FreeBSD13 with security/openssl
port, compiled with kernel TLS option as well.

Bump PORTREVISION.

Based
on:	https://github.com/nginx/nginx/compare/branches/stable-1.16...bsdjhb:ktls-1.16
Reviewed by:	jhb
Tested by:	jhb

Update passenger and its third-party module from
6.0.4 to 6.0.5.

Bump PORTREVISION for www/nginx-devel.

Merge r538002 from www/nginx.

Update 3rd party module nginx-link-function to 3.2.3.

Bump PORTREVISION.

Merge r537527 and r537550 from www/nginx:

1. Switch with the nginx-upload-module to fdintino, they support http/2:        
                                                       
https://github.com/fdintino/nginx-upload-module/.

2. Update 3rd party module nginx-link-function to 3.2.2.

Bump PORTREVISION.

PR:	246746 [1]
	246897 [2]

Update nginx from 1.18.0 to 1.19.0.

<ChangeLog>

*) Feature: client certificate validation with OCSP.

*) Bugfix: "upstream sent frame for closed stream" errors might occur
   when working with gRPC backends.

*) Bugfix: OCSP stapling might not work if the "resolver" directive was
   not specified.

*) Bugfix: connections with incorrect HTTP/2 preface were not logged.

</ChangeLog>

Update njs module from 0.4.0 to 0.4.1.

While I'm here add '--with-compat' option to the configure script
to enable dynamic modules compatibility.

<ChangeLog>

*) Feature: added support for multi-value headers in r.headersIn.

*) Feature: introduced raw headers API.

*) Feature: added TypedScript API description.

Core:

*) Bugfix: fixed Array.prototype.slice() for sparse arrays.

</ChangeLog>

Remove legacy third-party modules:

o) modsecurity2
o) fastdfs

All modules, including all third-party modules, are dynamic now.

Bump PORTREVISION.

Add third-party opentracing dynamic module.

Bump PORTREVISION.

Add cookie_flag third-party dynamic module.

While I'm here create a description for STREAM related
modules.

Bump PORTREVISION.

- update libgd to 2.3.0
- new option RAQM
- resurrect deprecated gdlib-config
- bump dependend ports

Convert third-party ngx_http_h264_streaming module to dynamic.

Bump PORTREVISION.

Add missing patches for r533146.

Pointy hat:	osa

Convert another 3 third-party modules to dynamic:

o) ngx_http_subs_filter
o) ngx_http_upstream_check
o) ngx_http_response

Bump PORTREVISION.

Convert another 3 third-party modules to dynamic:

o) http_json_status
o) http_mogilefs
o) http_notice

Bump PORTREVISION.

Convert another 2 third-party modules to dynamic:

o) rds_csv
o) rds_json

Bump PORTREVISION.

Convert another 2 third-party modules to dynamic:

o) slowfs_cache
o) xss

Bump PORTREVISION.

Convert another 7 third-party modules to dynamic:

o) gridfs
o) http_push_stream
o) http_upstream_sticky
o) http_video_thumbextractor
o) http_zip
o) let
o) link

Bump PORTREVISION.

Convert another 5 third-party modules to dynamic:

o) drizzle
o) http_dav_ext
o) http_footer_filter
o) http_ip2location
o) http_ip2proxy

Bump PORTREVISION.

Convert the following third-party modules to dynamic:

o) accept_language
o) modsecurity3

While I'm here fix the third-party auth_krb5 module build.

Bump PORTREVISION.

Third-party postgres module is dynamic now and remove
the legacy patch.
While I'm here update the PORTSCOUT.

Bump PORTREVISION.

Update njs module from 0.3.9 to 0.4.0.

<ChangeLog>

*) Feature: added js_import directive.

*) Feature: added support for multi-value headers in r.headersOut.

*) Improvement: iteration over r.headersOut with special headers.

*) Improvement: iteration over r.headersOut with duplicates.

*) Change: r.responseBody property handler now returns "undefined"
   instead of throwing an exception if response body is not available.

Add the knob for the quiet startup.

Bump PORTREVISION.

PR:		245830
Submitted by:	marck

Update some third-party modules to their recent versions.

Convert the following third-party modules to dynamic:
o) ajp
o) cache_purge
o) vts
o) websockify

Bump PORTREVISION.

Update nginx from 1.17.10 to 1.18.0.

<ChangeLog>

*) 1.18.x stable branch.

</ChangeLog>

Update nginx from 1.17.9 to 1.17.10.

Keep third-party modules knobs sorted, but DEVEL_KIT must be
earlier cause ARRAYVAR depends on it, so partially revert back
r531124.

<ChangeLog>

*) Feature: the "auth_delay" directive.

</ChangeLog>

Fix the build issue.

A typo was introduced with r531086.

Do not bump PORTREVISION.

Pointy hat:	osa
Eagle eye:	"Herbert J. Skuhra" <herbert@gojira.at>

Add http_degradation module.

While I'm here keep the knobs inside their groups sorted.

Bump PORTREVISION.

Add STREAM_REALIP knob for the ngx_stream_realip module. (*)

Enable STREAM_REALIP knob by default.

Also, create STREAMGRP group for stream-specific modules.

Bump PORTREVISION.

Requested by:	Kirill I. <kerya@kerya.net> (*)

Update nginx from 1.17.8 to 1.17.9.

<ChangeLog>

*) Change: now nginx does not allow several "Host" request header lines.

*) Bugfix: nginx ignored additional "Transfer-Encoding" request header
   lines.

*) Bugfix: socket leak when using HTTP/2.

*) Bugfix: a segmentation fault might occur in a worker process if OCSP
   stapling was used.

*) Bugfix: in the ngx_http_mp4_module.

*) Bugfix: nginx used status code 494 instead of 400 if errors with code
   494 were redirected with the "error_page" directive.

*) Bugfix: socket leak when using subrequests in the njs module and the
   "aio" directive.

</ChangeLog>

Update NGINX JavaScript (aka njs) module from 0.3.8 to 0.3.9.

To avoid a potential conflict between two versions of LuaJIT let's
update mod_security's dependecy list and use lang/luajit-openresty
instead of original lang/luajit.

Bump PORTREVISION.

Partially revert back r524489, the trird-party opentracing module
is not ready yet to be added to the port.

Bump PORTREVISION.

Commit missing patches for r524122.

Eagle eye notice from:	joneum
No cookie for:		osa

Add link-function third-party module, it provides dynamic linking to
your application in a server context and call the function of your
application in a location directive.

Bump PORTREVISION.

Update nginx from 1.17.7 to 1.17.8.
Update third-party njs module from 0.3.7 to 0.3.8.

<ChangeLog with nginx 1.17.8>

*) Feature: variables support in the "grpc_pass" directive.

*) Bugfix: a timeout might occur while handling pipelined requests in an
   SSL connection; the bug had appeared in 1.17.5.

*) Bugfix: in the "debug_points" directive when using HTTP/2.
   Thanks to Daniil Bondarev.

</ChangeLog>

Update the nginx.8 man page location after r523104.
Bump PORTREVISION.

Update third-party modsecurity3 module to 1.0.1.
Bump PORTREVISION.

Update from 1.17.6 to 1.17.7.

<ChangeLog>

*) Bugfix: a segmentation fault might occur on start or during
   reconfiguration if the "rewrite" directive with an empty replacement
   string was used in the configuration.

*) Bugfix: a segmentation fault might occur in a worker process if the
   "break" directive was used with the "alias" directive or with the
   "proxy_pass" directive with a URI.

*) Bugfix: the "Location" response header line might contain garbage if
   the request URI was rewritten to the one containing a null character.

Update third-party modules ip2location and ip2proxy to
their recent versions.

Bump PORTREVISION.

Update two third-party modules to their recent versions:

o) modsecurity3
o) vod

Remove the needless patch for the third-party vod module,
it's been added to the upstream.

Bump PORTREVISION.

The stream module doesn't imply on the http module in terms of
SSL/TLS usage.

Bump PORTREVISION.

Update third-party auth_ldap module to the recent version.

Bump PORTREVISION.

Update portscount.
No functional change.

Update nginx from 1.17.5 to 1.17.6.
Update njs module from 0.3.6 to 0.3.7.

<ChangeLog with nginx 1.17.6>

*) Feature: the $proxy_protocol_server_addr and
   $proxy_protocol_server_port variables.

*) Feature: the "limit_conn_dry_run" directive.

*) Feature: the $limit_req_status and $limit_conn_status variables.

</ChangeLog>

<ChangeLog with njs 0.3.7>

Update the extra patch for the third-party spnego module,
it was missing with r517770.

Bump PORTREVISION.

PR:	242031

Add support for FreeBSD accept filters.

Bump PORTREVISION.

PR:	238739

When nginx compiled with third-party spnego module, a worker process
may crash due to read-after-free operation.  This third-party module
update fix the issue.

Bump PORTREVISION.

PR:	235296

Merge r517734 revision from www/nginx.
Bump PORTREVISION.

PR:	240274

Merge the r517639 for third-party passenger module from the
www/nginx to fix the build. (*)

While I'm here sort pkg-plist.

Bump PORTREVISION.

PR:		241753 (*)

Add USES={gl,gnome,mate,sdl,xorg} missed in the last round

Update third-party modules to their recent versions.

Switch third-party brotli module's github repo back to google
cause eustas repo, the previous one, has been archived by the
owner.

Bump PORTREVISION.

Fix the issue with third-aprty modsecurity2 module, it is not
being built into after selection.
An additional useful file is installed now.

Bump PORTREVISION.

Submitted by:	Felipe Zipitria <felipe.zipitria@owasp.org> (in a private mail)

Update nginx from 1.17.4 to 1.17.5.
Update njs module from 0.3.5 to 0.3.6.
Sync third-party fastdfs module version with www/nginx.

<ChangeLog for nginx 1.17.5>

*) Feature: now nginx uses ioctl(FIONREAD), if available, to avoid
   reading from a fast connection for a long time.

*) Bugfix: incomplete escaped characters at the end of the request URI
   were ignored.

*) Bugfix: "/." and "/.." at the end of the request URI were not
   normalized.

Drop the ipv6 virtual category for w* category as it is not relevant anymore

Update nginx from 1.17.3 to the latest bugfix release 1.17.4.

Move third-party SLICE_AHEAD knob down to other third-party
knobs. (*)

Requested by:	Herbert J. Skuhra <herbert@gojira.at> (*)

<ChangeLog>

*) Change: better detection of incorrect client behavior in HTTP/2.

*) Change: in handling of not fully read client request body when
   returning errors in HTTP/2.

*) Bugfix: the "worker_shutdown_timeout" directive might not work when

Add missing patch in r512184.

Spotted by:	Herbert J. Skuhra <herbert@gojira.at>

Update from 6.0.3 to 6.0.4.

Add the following third-party modules:
o) ip2location
o) ip2proxy

Add third-party slice_ahead feature.

Update third-party passenger module to the latest release 6.0.3.

Switch third-party lua module dependence from lang/luajit (2.0) to
lang/luajit-openresty (2.1).

Bump PORTREVISION.

Update third-party njs module from 0.3.4 to 0.3.5.
Bump PORTREVISION.

<ChangeLog>

Core:
*) Bugfix: fixed module importing using require(). The bug was
   introduced in 0.3.4.

*) Bugfix: fixed [[SetPrototypeOf]].

</ChangeLog>

Convert to UCL & cleanup pkg-message (categories w)

Security update nginx from 1.17.2 to 1.17.3.

<ChangeLog with nginx 1.17.3>

*) Security: when using HTTP/2 a client might cause excessive memory
   consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
   CVE-2019-9516).

*) Bugfix: "zero size buf" alerts might appear in logs when using
   gzipping; the bug had appeared in 1.17.2.

*) Bugfix: a segmentation fault might occur in a worker process if the
   "resolver" directive was used in SMTP proxy.

</ChangeLog>

Update some third-party modules to their recent revisions.
Update the download protocol from http to https.

Bump PORTREVISION.

PR:	239776

multimedia/ffmpeg: update to 4.2

Changes:	https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/n4.2:/Changelog
ABI:		https://abi-laboratory.pro/tracker/timeline/ffmpeg/

Update nginx from 1.17.1 to 1.17.2.
Update third-party nchan module from 1.2.3 to 1.2.6.

<ChangeLog with nginx 1.17.2>

*) Change: minimum supported zlib version is 1.2.0.4.
   Thanks to Ilya Leoshkevich.

*) Change: the $r->internal_redirect() embedded perl method now expects
   escaped URIs.

*) Feature: it is now possible to switch to a named location using the
   $r->internal_redirect() embedded perl method.

*) Bugfix: in error handling in embedded perl.

Install njs command line utility as a part of the third-party
njs module.

Bump PORTREVISION.

Update nginx from 1.17.0 to 1.17.1.
Update njs module from 0.3.2 to 0.3.3.

<ChangeLog with nginx 1.17.1>

*) Feature: the "limit_req_dry_run" directive.

*) Feature: when using the "hash" directive inside the "upstream" block
   an empty hash key now triggers round-robin balancing.
   Thanks to Niklas Keller.

*) Bugfix: a segmentation fault might occur in a worker process if
   caching was used along with the "image_filter" directive, and errors
   with code 415 were redirected with the "error_page" directive; the
   bug had appeared in 1.11.10.

Update nginx from 1.16.0 to new mainline version 1.17.0.
Update njs module from 0.3.1 to 0.3.2.

<ChangeLog with nginx 1.17.0>

*) Feature: variables support in the "limit_rate" and "limit_rate_after"
   directives.

*) Feature: variables support in the "proxy_upload_rate" and
   "proxy_download_rate" directives in the stream module.

*) Change: minimum supported OpenSSL version is 0.9.8.

*) Change: now the postpone filter is always built.

Update from 1.15.12 to 1.16.0.

<ChangeLog>

*) 1.16.x stable branch.

</ChangeLog>

Update from 1.15.11 to 1.15.12.
Update third-party njs module from 0.3.0 to 0.3.1.

<ChangeLogs>

Changes with nginx 1.15.12                             16 Apr 2019

*) Bugfix: a segmentation fault might occur in a worker process if
   variables were used in the "ssl_certificate" or "ssl_certificate_key"
   directives and OCSP stapling was enabled.

Changes with njs 0.3.1                                 16 Apr 2019

Core:

Update from 1.15.10 to 1.15.11.

<ChangeLogs>

*) Bugfix: in the "ssl_stapling_file" directive on Windows.

</ChangeLogs>

Update from 1.15.9 to 1.15.10.
Update third-party njs module from 0.2.8 to 0.3.0.

<ChangeLogs>

http://nginx.org/en/CHANGES
http://nginx.org/en/docs/njs/changes.html#njs0.3.0

</ChangeLogs>

www/nginx-devel: DAV modules requires xslt

adding module in /www/nginx-devel/work/nginx-dav-ext-module-3.0.0
 + ngx_http_dav_ext_module was configured
checking for PCRE library ... found
checking for PCRE JIT support ... found
checking for OpenSSL library ... found
checking for zlib library ... found
checking for libxslt ... not found
checking for libxslt in /usr/local/ ... not found
checking for libxslt in /usr/pkg/ ...  not found
checking for libxslt in /opt/local/ ... not found
./configure: error: the HTTP XSLT module requires the libxml2/libxslt
libraries. You can either do not enable the module or install the libraries.

Update third-party lua module to its recent version 0.10.14.

Bump PORTREVISION.

Fix PORTSCOUT.
Update third-party dav-ext module to its recent version 3.0.0.

Bump PORTREVISION.

Update from 1.15.8 to 1.15.9.

<ChangeLog>

*) Feature: variables support in the "ssl_certificate" and
   "ssl_certificate_key" directives.

*) Feature: the "poll" method is now available on Windows when using
   Windows Vista or newer.

*) Bugfix: if the "select" method was used on Windows and an error
   occurred while establishing a backend connection, nginx waited for
   the connection establishment timeout to expire.

*) Bugfix: the "proxy_upload_rate" and "proxy_download_rate" directives
   in the stream module worked incorrectly when proxying UDP datagrams.

</ChangeLog>

Update passenger and its third-party modules for www/nginx and
www/nginx-devel from 6.0.1 to 6.0.2.

Bump PORTREVISION for www/nginx and www/nginx-devel.

Update third-party njs module to its recent version 0.2.8.

Bump PORTREVISION.

Add the license file.

Remove GeoIP-related options. Where possible, replace GeoIP 1 defaults
with GeoIP 2.

Also, as suggested by zi, add an UPDATING note about this.

Update third-party tarantool module to its recent version.
Bump RORTREVISION.

Update passenger and its third-party modules for www/nginx and
www/nginx-devel from 6.0.0 to 6.0.1.

While I'm here:
o) remove a needless whitespace and tabs;
o) add a patch to disable anonymouse telemetry for passenger by default.

Update third-party modsecurity module from 2.9.2 to 2.9.3.
Bump PORTREVISION.

Add the extra patch to disable anonymous telemetry for the
third-party passenger module.

Update from 1.15.7 to 1.15.8.
Update clojure, modsecurity and njs third-party modules to their recent
versions.
Disable anonymous telemetry reporting in third-party passenger module
by default.

<ChangeLog>

*) Feature: the $upstream_bytes_sent variable.
   Thanks to Piotr Sikora.

*) Feature: new directives in vim syntax highlighting scripts.
   Thanks to Gena Makhomed.

*) Bugfix: in the "proxy_cache_background_update" directive.

Upgrade passenger and its third-party modules for www/nginx and
www/nginx-devel from 5.3.7 to 6.0.0.

<ChangeLog>

* Introduces support for *all* programming languages. Yes that's
  right... Java, Elixir, Go -- Passenger now supports them all!
  This effort is called "generic language support".
* Bumps the preferred Nginx version to 1.15.7.
* Introduces anonymous usage telemetry, which helps us improve
  Passenger.  Please read the docs on what data is collected and
  how to disable this.
* [Nginx] Introduces a new option "passenger_request_buffering on|off",
  to allow disabling request body buffering. This is only supported in
  Nginx >= 1.15.3. Closes GH-2121.
* Updated various library versions used in precompiled binaries (used
  for e.g. gem installs):
  - OpenSSL: 1.0.2q (was: 1.0.2p)
  - libcurl: 7.62.0 (was: 7.61.1)
  - Ruby: 2.3.8 (was: 2.3.7)

</ChangeLog>

Update passenger and it's modules for www/nginx and
www/nginx-devel ports to 5.3.7.

Update from 1.15.6 to 1.15.7.
Update clojure and njs third-party modules to their recent versions.

MFH:		2018Q4

<ChangeLog>

*) Feature: the "proxy_requests" directive in the stream module.

*) Feature: the "delay" parameter of the "limit_req" directive.
   Thanks to Vladislav Shabanov and Peter Shchuchkin.

*) Bugfix: memory leak on errors during reconfiguration.

*) Bugfix: in the $upstream_response_time, $upstream_connect_time, and
   $upstream_header_time variables.

*) Bugfix: a segmentation fault might occur in a worker process if the
   ngx_http_mp4_module was used on 32-bit platforms.

</ChangeLog>

Rename www/mod_security3 to security/modsecurity3.  It is not an Apache
module, and the upstream name is ModSecurity in a single word.

PR:		233351
Submitted by:	Marie Helene Kvello-Aune, Marius Halden (maintainer)
Differential Revision:	https://reviews.freebsd.org/D18353

Change the distribution for the third-party upstream_fair module,
it contains fixes for openssl 1.1.
Remove the needless patch.

Bump PORTREVISION.

Update ImageMagick to 6.9.10.14 [1]

* Add PKGNAMESUFFIX and rename the directory. This was done to show
  that IM6 is not the "main" version. But still fully supported by upstream.
* Convert a number of options to optionhelpers.
* Add option for ISO/IEC 23008-12:2017 HEIF suport
* Add comment to pkg-descr explaining IM6's "legacy" tag.
* Add comment to the patch-config_policy.xml file why it still needed.

Please note that IM7 is not a drop in replacement due to library API and
command arguments changes. And as a result ports need to decide for themself
which version to use.

Chase these changes in all the ports that using IM6.

PR:		225102 (based on, only the version update) [1]
Submitted by:	Pascal Christen <pascal.christen@hostpoint.ch>

Security update from 1.15.5 to 1.15.6.

Temporary disable third-party upstream_fair module, it should
be updated to build with the modern version of the nginx.

While I'm here fix some whitespaces.

MFH:		2018Q4
Security:	84ca56be-e1de-11e8-bcfd-00e04c1ea73d

<ChangeLog>

*) Security: when using HTTP/2 a client might cause excessive memory
   consumption (CVE-2018-16843) and CPU usage (CVE-2018-16844).