| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
1.31.4 25 Aug 2026 05:47:14
    |
Jochen Neumeister (joneum)  |
www/nginx-devel: Update to 1.31.4
*) Feature: the "proxy_protocol" directive in the stream and mail
modules now supports the PROXY protocol version 2.
*) Change: now HTTP/2 and gRPC requests to backends are always sent with
the ":authority" pseudo-header, and HTTP/1.1 requests - with the
"Host" header.
*) Bugfix: a segmentation fault might occur in a worker process if the
"select" method was used.
*) Bugfix: incomplete gRPC responses with a non-zero "Content-Length"
header line are now treated as malformed.
(Only the first 15 lines of the commit message are shown above ) |
1.31.3_6 24 Aug 2026 13:50:15
    |
Jochen Neumeister (joneum)  |
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Point the MODSECURITY3 option at the owasp-modsecurity account, which now
hosts ModSecurity-nginx; the SpiderLabs path only works through GitHub's
redirect. Pin all three ports to the same commit 9eb44fd; they carried
v1.0.3, fd28e6a and v1.0.3.
Also restore two mangled lines in the freenginx MODSECURITY3 branch, which
had lost their first character, leaving the port without --with-ld-opt and
without the pcre2 dependency when the option was on.
Sponsored by: Netzkommune GmbH |
1.31.3_5 19 Aug 2026 08:26:51
    |
Jochen Neumeister (joneum)  |
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Copy the module sources with cp instead of COPYTREE_SHARE in the
LUA and LUASTREAM pre-configure targets. COPYTREE_SHARE hardlinks
the files and then fails to chmod them when poudriere builds as an
unprivileged user.
Convert www/nginx-module-lua into a pure source-only port. The
prebuilt DSO conflicted with the module built by the nginx ports.
Add compat patches so lua-nginx-module builds against freenginx.
PR: 297651
Reported by: Brad Ackerman
Sponsored by: Netzkommune GmbH |
1.31.3_5 14 Aug 2026 14:32:43
    |
Jochen Neumeister (joneum)  |
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Rename www/lua-stream-nginx-module to www/nginx-module-lua-stream
to follow the nginx-module-* naming scheme for dedicated 3rd-party
module ports and adjust the consumers. Relax the BUILD_DEPENDS to
an unversioned dependency while here, matching the LUA option.
While here, rename the internal NJS_QJS_CFLAGS variable to
_NJS_QJS_CFLAGS so it is no longer treated as an option helper.
Sponsored by: Netzkommune GmbH |
1.31.3_5 13 Aug 2026 22:42:16
    |
Jochen Neumeister (joneum)  |
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Start moving the bundled 3rd-party modules into dedicated
nginx-module-* ports, so that module versions are maintained in a
single place instead of the GH_TUPLE lists of the nginx ports.
As a first step, convert www/nginx-module-lua into a hybrid port
that installs the lua-nginx-module sources next to the prebuilt
DSO and use them in the three nginx ports via an unversioned
BUILD_DEPENDS instead of fetching from GitHub.
Sponsored by: Netzkommune GmbH |
1.31.3_5 13 Aug 2026 15:31:56
    |
Jochen Neumeister (joneum)  |
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
- Add new NJS_QJS option to build the NJS module with the QuickJS
engine (lang/quickjs), which upstream recommends since njs 1.0.0
- Warn users with NJS enabled that the built-in njs engine is EOL
- Keep builds deterministic with NJS_QJS disabled (NJS_QUICKJS=NO)
- nginx-devel: remove leftover NJS_QJS bits pointing to deleted
patches; stop the QuickJS include path from clobbering the base
cc-opt flags
- nginx-full: enable NJS_QJS by default
Sponsored by: Netzkommune GmbH |
1.31.3_5 09 Aug 2026 14:25:46
    |
Jochen Neumeister (joneum)  |
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Update bundled third-party modules; where upstream now offers a tag,
switch from a commit hash to the version tag:
- array_var: v0.05 -> v0.06
- cache_purge: hash -> 3.0.2
- ngx_devel_kit: v0.3.3 -> v0.3.4
- drizzle: hash -> v0.1.14
- aws_auth: -> f3d9862 (stays on a hash; the 2.1.1 tag lacks the
OpenSSL 3.0 build fix)
Adjust the drizzle config patch to the module's new extraction
directory name.
For freenginx, add a patch to ngx_aws_auth: freenginx dropped
ngx_http_request_t.start_sec, so obtain the request time from
ngx_time() there instead.
Sponsored by: Netzkommune GmbH |
1.31.3_4 09 Aug 2026 07:24:25
    |
Jochen Neumeister (joneum)  |
www/{nginx,nginx-devel,freenginx}: 3rd-party modules management
Move the bundled fdintino nginx-upload-module to release 2.3.0 and work
around its PCRE2 incompatibility.
Since the removal of the PCRE1 option nginx is built against PCRE2 only.
The module's regex filter for upload_pass_form_field still tests the
ngx_regex_exec() return code for "rc == 0", which is only true under
PCRE1; PCRE2 returns the number of captures (>= 0) on a match, so
matching
form fields were silently dropped and upload_pass_form_field was
unusable
on any dynamic (DSO) build. Relax the test to "rc >= 0" (workaround
from
upstream pull request 152).
freenginx: additionally adapt the module to the removal of r->start_sec
in freenginx >= 1.29 (nginx_version >= 1029000), which is otherwise a
build failure.
PR: 271781
Sponsored by: Netzkommune GmbH |
1.31.3_3 08 Aug 2026 22:30:15
    |
Jochen Neumeister (joneum)  |
www/{nginx-devel,freenginx}: 3rd-party modules management
The nginx_upstream_check_module extra-patches no longer matched the
current sources, so builds with HTTP_UPSTREAM_CHECK enabled failed.
nginx-devel: refresh the ngx_http_upstream_round_robin.c extra-patch for
nginx 1.31; reuse the patch already carried by www/nginx.
freenginx: regenerate the round_robin extra-patch against freenginx's
sources, and add extra-patch-ngx_http_upstream_check_module.c which
replaces the module's use of the ngx_http_status_t 'count' member
(removed in freenginx) with a local variable.
PR: 295745
Sponsored by: Netzkommune GmbH |
1.31.3_2 05 Aug 2026 07:54:11
    |
Jochen Neumeister (joneum)  |
www/{nginx,nginx-devel,freenginx}: 3rd-pary modules managemeht
Fix build and loading of the 3rd party gridfs module after the
devel/mongo-c-driver 2.x update.
The module config now obtains include and linker flags from
pkg-config instead of deriving them from the ports tree's
DISTVERSION. The previous approach ran a recursive make into
devel/mongo-c-driver on every make invocation, even with GRIDFS
unset, and derived the libbson include path from the mongo-c-driver
version although devel/libbson is a separate port with its own
DISTVERSION. Both directories happen to carry the same version
today, so the mismatch was not visible yet.
While here, add the missing assert.h include. The module calls
assert() without declaring it, which left an unresolvable symbol
"assert" in the shared object -- libc only exports __assert. Since
nginx dlopen()s modules with RTLD_NOW, load_module refused to load
the module at runtime.
Also correct a typo in one of the patch file names.
PR: 296604, 296605, 296606
Sponsored by: Netzkommune GmbH |
1.31.3_1 04 Aug 2026 12:03:37
    |
Yusuf Yaman (nxjoseph)  |
www/{nginx,nginx-devel}: Forgot to bump portrevision
Fixes: 2fc4e25bbaae
Fixes: 206b53381e95
Reported by: Jochen Neumeister <joneum@FreeBSD.org> (via mail)
Approved by: osa, vvd (Mentors, implicit) |
1.31.3 04 Aug 2026 11:46:48
    |
Yusuf Yaman (nxjoseph)  Author: Hiroo Ono |
www/nginx-devel: chase devel/mongo-c-driver update
PR: 296605
Reported by: Hiroo Ono <hiroo.ono+freebsd@gmail.com> (author)
Approved by: Jochen Neumeister <joneum@FreeBSD.org> (maintainer timeout, 3+
weeks)
Approved by: osa, vvd (Mentors, implicit) |
1.31.3 18 Jul 2026 09:36:02
    |
Jochen Neumeister (joneum)  |
www/nginx-devel: Update to 1.31.3
Changes:
*) Security: heap buffer overflow when using the map directive with
regex matching (CVE-2026-42533)
*) Security: uninitialized memory access when using unnamed regex
captures with the "slice" directive or background cache update
(CVE-2026-60005)
*) Security: use-after-free when processing a specially crafted
proxied backend response with the ngx_http_ssi_filter_module
(CVE-2026-56434)
*) Change: the size of headers and trailers in HTTP/2 responses in
the ngx_http_proxy_v2_module and ngx_http_grpc_module is now
limited with "proxy_buffer_size" and "grpc_buffer_size" (Only the first 15 lines of the commit message are shown above ) |
1.31.2_3 11 Jul 2026 12:20:46
    |
Po-Chuan Hsieh (sunpoet)  |
devel/grpc: Update to 1.82.0
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/grpc/grpc/releases |
1.31.2_2 08 Jul 2026 13:30:30
    |
Po-Chuan Hsieh (sunpoet)  |
devel/grpc: Update to 1.81.1
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/grpc/grpc/releases |
1.31.2_1 24 Jun 2026 18:07:29
    |
Jochen Neumeister (joneum)  |
*/*: update NGINX JavaScript to 1.0.0
Changelog: https://nginx.org/en/docs/njs/changes.html
Sponsored by: Netzkommune GmbH |
1.31.2 18 Jun 2026 16:10:59
    |
Jochen Neumeister (joneum)  |
www/nginx-devel: Update to 1.31.2
Changes with nginx 1.31.2 17 Jun
2026
*) Security: use-after-free might occur when using HTTP/3 and
processing
a specially crafted QUIC session, allowing an attacker to cause
worker process memory corruption or segmentation fault in a
worker
process (CVE-2026-42530).
Thanks to Trung Nguyen of CyStack.
*) Security: a heap memory buffer overflow might occur in a worker
process when using a configuration with "ignore_invalid_headers(Only the first 15 lines of the commit message are shown above ) |
1.31.0_3 14 Jun 2026 15:15:46
    |
Jochen Neumeister (joneum)  Author: Ryan Steinmetz |
www/{nginx,nginx-devel,freenginx}: 3rd-pary modules managemeht
Update mod_zip to 1.3.0 and switch Github author to evanmiller as this
seems to be author that the other, less current, versions are forked
from.
PR: 295934
Sponsored by: Netzkommune GmbH |
1.31.0_2 25 May 2026 17:08:15
    |
Jochen Neumeister (joneum)  |
www/{nginx,nginx-devel,freenginx}: use lua-stream-nginx-module port
Replace the embedded LUASTREAM GH_TUPLE handling with a
BUILD_DEPENDS on www/lua-stream-nginx-module and use the
module sources from the dedicated port during the build.
Add freenginx compatibility patches for lua-stream-nginx-module.
Also update lua-stream-nginx-module to version 0.0.17.
PR: 294426
Sponsored by: Netzkommune GmbH |
1.31.0_1 23 May 2026 18:16:44
    |
Jochen Neumeister (joneum)  |
*/*: update NGINX JavaScript to 0.9.9
Changelog: https://nginx.org/en/docs/njs/changes.html
Sponsored by: Netzkommune GmbH |
1.31.0 19 May 2026 17:13:30
    |
Jochen Neumeister (joneum)  |
www/nginx-devel: Update to 1.31.0
Changes with nginx 1.31.0 13 May
2026
*) Security: when using the "proxy_set_body" directive, an attacker
might inject data in the proxied request to an HTTP/2 backend
(CVE-2026-42926).
Thanks to Mufeed VH of Winfunc Research.
*) Security: a heap memory buffer overflow might occur in a worker
process while handling a specially crafted request by
ngx_http_rewrite_module, potentially resulting in arbitrary code
execution (CVE-2026-42945).
Thanks to Leo Lin.(Only the first 15 lines of the commit message are shown above ) |
1.29.8 04 May 2026 09:27:02
    |
Jochen Neumeister (joneum)  |
www/nginx-devel: Update to 1.29.8
Changes with nginx 1.29.8 07 Apr
2026
*) Feature: the "max_headers" directive.
Thanks to Maxim Dounin.
*) Feature: OpenSSL 4.0 compatibility.
*) Feature: now the "include" directive inside the "geo" block
supports
wildcards.
*) Bugfix: in processing of HTTP 103 (Early Hints) responses from a
proxied backend.
*) Bugfix: the $request_port and $is_request_port variables were not
available in subrequests.
Sponsored by: Netzkommune GmbH |
1.29.7_2 03 May 2026 14:16:15
    |
Jochen Neumeister (joneum)  |
*/*: update NGINX JavaScript to 0.9.8
Changelog: https://nginx.org/en/docs/njs/changes.html
Sponsored by: Netzkommune GmbH |
1.29.7_1 27 Apr 2026 13:06:50
    |
Po-Chuan Hsieh (sunpoet)  |
devel/grpc: Update to 1.80.0
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/grpc/grpc/releases |
1.29.7 26 Mar 2026 21:22:26
    |
Jochen Neumeister (joneum)  |
www/nginx-devel: Update to 1.29.7
Changes with nginx 1.29.7 24 Mar
2026
*) Security: a buffer overflow might occur while handling a COPY or
MOVE
request in a location with "alias", allowing an attacker to
modify
the source or destination path outside of the document root
(CVE-2026-27654).
Thanks to Calif.io in collaboration with Claude and Anthropic
Research.
*) Security: processing of a specially crafted mp4 file by the(Only the first 15 lines of the commit message are shown above ) |
1.29.5_2 26 Mar 2026 17:06:05
    |
Jochen Neumeister (joneum)  |
*/*: update NGINX JavaScript to 0.9.6
Changelog: https://nginx.org/en/docs/njs/changes.html
Sponsored by: Netzkommune GmbH |
1.29.5_1 09 Mar 2026 19:19:40
    |
Jochen Neumeister (joneum)  |
www/*nginx*: Update 3-party modul passenger
Update third-party modul passenger to 6.1.2
PR: 292546
Sponsored by: Netzkommune GmbH |
1.29.5_1 09 Mar 2026 18:18:14
    |
Po-Chuan Hsieh (sunpoet)  |
devel/grpc: Update to 1.78.0
- Add OPENTELEMETRY option: disable by default for now due to build failure
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/grpc/grpc/releases |
1.29.5 07 Mar 2026 11:25:28
    |
Jochen Neumeister (joneum)  |
www/*nginx: Switch nginx-vod-module to maintained fork
The original Kaltura nginx-vod-module repository is no longer actively
maintained and has been incompatible with FFmpeg 8 due to removed
legacy API calls.
Switch to the actively maintained fork:
https://github.com/diogoazevedos/nginx-vod-module
This restores compatibility with newer FFmpeg versions.
Reported by: Jim Terhune via ML
Sponsored by: Netzkommune GmbH |
1.29.5 14 Feb 2026 09:42:54
    |
Jochen Neumeister (joneum)  Author: FiLiS |
www/nginx-devel: Update to 1.29.5
Changes with nginx 1.29.5 04 Feb
2026
*) Security: an attacker might inject plain text data in the
response
from an SSL backend (CVE-2026-1642).
*) Bugfix: use-after-free might occur after switching to the next
gRPC
or HTTP/2 backend.
*) Bugfix: an invalid HTTP/2 request might be sent after switching
to(Only the first 15 lines of the commit message are shown above ) |
1.29.4_2 31 Jan 2026 12:10:06
    |
Jochen Neumeister (joneum)  |
*/*: update NGINX JavaScript to 0.9.5
Changes with njs 0.9.5
Release Date: 13 January 2026
nginx modules:
Feature: added native module support for qjs engine for http and
stream.
Bugfix: fixed js_body_filter with multiple chunks for qjs engine.
Bugfix: fixed buffer_type inheritance in if blocks for
js_body_filter. Previously, when js_body_filter was used inside an if(Only the first 15 lines of the commit message are shown above ) |
1.29.4_1 06 Jan 2026 12:29:25
    |
Jochen Neumeister (joneum)  Author: Sergey A. Osokin |
www/lua-resty-core: update to 0.1.32
- Update lua-resty-core from 0.1.31 to 0.1.32
- Bump PORTREVISION for freenginx, nginx, and nginx-devel
PR: 290817
Approvd by: zi (autoapproved)
Sponsored by: Netzkommune GmbH |
1.29.4 28 Dec 2025 09:25:03
    |
Jochen Neumeister (joneum)  |
www/nginx-devel: Update to 1.29.4
Changelog:
*) Feature: the ngx_http_proxy_module supports HTTP/2.
*) Feature: Encrypted ClientHello TLS extension support when using
OpenSSL ECH feature branch; the "ssl_ech_file" directive.
Thanks to Stephen Farrell.
*) Change: validation of host and port in the request line, "Host"
header field, and ":authority" pseudo-header field has been
changed
to follow RFC 3986.
*) Change: now a single LF used as a line terminator in a chunked(Only the first 15 lines of the commit message are shown above ) |
1.29.3_2 29 Nov 2025 23:21:51
    |
Po-Chuan Hsieh (sunpoet)  |
devel/grpc: Update to 1.76.0
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/grpc/grpc/releases |
1.29.3_1 09 Nov 2025 19:06:02
    |
Jochen Neumeister (joneum)  |
*/*: update NGINX JavaScript to 0.9.4
Changes with njs 0.9.4
Release Date: 28 October 2025
nginx modules:
Feature: added HTTP forward proxy support for ngx.fetch() API.
Core:
Bugfix: fixed r.subrequest() to a location with JS handler for
QuickJS. The bug became visible after bellard/quickjs@42eb2795.
Sponsored by: Netzkommune GmbH |
1.29.3 08 Nov 2025 10:18:25
    |
Jochen Neumeister (joneum)  |
www/nginx-devel: Update to 1.29.3
Sponsored by: Netzkommune GmbH |
1.29.2_1 25 Oct 2025 14:30:30
    |
Jochen Neumeister (joneum)  |
*/*: update NGINX JavaScript to 0.9.3
Changes with njs 0.9.3
Release Date: 07 October 2025
nginx modules:
- Bugfix: fixed heap-use-after-free while module loading.
- Bugfix: fixed heap-use-after-free in js_set handler used in log
phase. The issue was introduced in 04f6dfb (0.9.2).
Changes with njs 0.9.2
(Only the first 15 lines of the commit message are shown above ) |
1.29.2 19 Oct 2025 07:53:45
    |
Jochen Neumeister (joneum)  |
www/nginx-devel: Update to 1.29.2
Changes with nginx 1.29.2 07 Oct
2025
*) Feature: now nginx can be built with AWS-LC.
Thanks Samuel Chiang.
*) Bugfix: now the "ssl_protocols" directive works in a virtual
server
different from the default server when using OpenSSL 1.1.1 or
newer.
*) Bugfix: SSL handshake always failed when using TLSv1.3 with
OpenSSL(Only the first 15 lines of the commit message are shown above ) |
1.29.1_3 18 Oct 2025 23:50:31
    |
Po-Chuan Hsieh (sunpoet)  |
devel/grpc: Update to 1.75.1
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/grpc/grpc/releases |
1.29.1_2 18 Oct 2025 18:01:39
    |
Jochen Neumeister (joneum)  |
www/nginx-devel: Take Maintainership
Sponsored by: Netzkommune GmbH |
1.29.1_2 14 Oct 2025 14:57:26
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: release maintainership |
1.29.1_2 29 Aug 2025 14:34:22
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: add missing patch for a third-party nats module
Fixes: 440ea1147823c49e67ee4ee0e8444fe3ee8e330a |
1.29.1_2 29 Aug 2025 14:34:22
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update the start script service jails ready
Based on
https://cgit.FreeBSD.org/ports/commit/?id=a3fbcaec539824a635d1bd53a2508fafae06ec6a
See also:
https://docs.freebsd.org/en/articles/rc-scripting/#rcng-instancing
Bump PORTREVISION. |
1.29.1_1 24 Aug 2025 19:06:27
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: add third-party nats module
Bump PORTREVISION. |
1.29.1 23 Aug 2025 13:21:00
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: define NGINX_VERSION in a separate file |
1.29.1 15 Aug 2025 15:56:49
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: security update from 1.29.0 to 1.29.1
*) Security: processing of a specially crafted login/password when using
the "none" authentication method in the ngx_mail_smtp_module might
cause worker process memory disclosure to the authentication server
(CVE-2025-53859).
<ChangeLog>
*) Change: now TLSv1.3 certificate compression is disabled by default.
*) Feature: the "ssl_certificate_compression" directive.
*) Feature: support for 0-RTT in QUIC when using OpenSSL 3.5.1 or newer.
(Only the first 15 lines of the commit message are shown above ) |
1.29.0_5 12 Aug 2025 18:15:31
    |
Po-Chuan Hsieh (sunpoet)  |
devel/grpc: Update to 1.74.0
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/grpc/grpc/releases |
1.29.0_4 12 Jul 2025 03:37:44
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: third-party modules management
o) ngx_devel_kit: update to 0.3.4
o) headers_more: update to 0.39
o) spnego-http-auth (aka auth_krb5): update to 1.1.3
Bump PORTREVISION. |
1.29.0_3 10 Jul 2025 19:14:08
    |
Sergey A. Osokin (osa)  |
*/*: update NGINX JavaScript: 0.9.0 -> 0.9.1 (+)
Bump PORTREVISION for www/unit.
<ChangeLog>
nginx modules:
*) Feature: added Fetch API for QuickJS engine.
*) Feature: added state file for a shared dictionary.
*) Bugfix: fixed handling of Content-Length header when
a body is provided for Fetch API.
(Only the first 15 lines of the commit message are shown above ) |
1.29.0_2 03 Jul 2025 19:52:31
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: adjusted OpenSSL 3.5 QUIC API feature test updated
Bump PORTREVISION. |
1.29.0_1 02 Jul 2025 19:15:06
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: substitute QTLS option with OSSL35
New OSSL35 knob for support OpenSSL starting from 3.5.1.
Bump PORTREVISION. |
1.29.0 25 Jun 2025 17:24:42
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update from 1.28.0 to 1.29.0
<ChangeLog>
*) Feature: support for response code 103 from proxy and gRPC backends;
the "early_hints" directive.
*) Feature: loading of secret keys from hardware tokens with OpenSSL
provider.
*) Feature: support for the "so_keepalive" parameter of the "listen"
directive on macOS.
*) Change: the logging level of SSL errors in a QUIC handshake has been
changed from "error" to "crit" for critical errors, and to "info" for (Only the first 15 lines of the commit message are shown above ) |
1.28.0_8 17 Jun 2025 19:09:49
    |
Po-Chuan Hsieh (sunpoet)  |
devel/grpc: Update to 1.73.0
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/grpc/grpc/releases |
1.28.0_7 04 Jun 2025 15:53:12
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: make the rc script service jails aware
Submitted by: netchild
PR: 280030 |
1.28.0_6 27 May 2025 21:01:51
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: third-party modules update to their recent snapshots
- modsecurity;
- vts.
Bump PORTREVISION. |
1.28.0_5 21 May 2025 19:32:34
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party redis module to version 0.4.0
Bump PORTREVISION. |
1.28.0_4 18 May 2025 15:33:08
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party ngx_http_redis module (+)
to the recent snapshot.
Bump PORTREVISION. |
1.28.0_3 18 May 2025 03:15:41
    |
Po-Chuan Hsieh (sunpoet)  |
devel/grpc: Update to 1.72.0
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/grpc/grpc/releases |
1.28.0_2 11 May 2025 09:29:42
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: fix NJS module build with modern version of clang
Bump PORTREVISION.
Thanks to: fluffy
Reported by: vanilla |
1.28.0_1 11 May 2025 00:49:23
    |
Sergey A. Osokin (osa)  |
*/*: update NGINX JavaScript: 0.8.10 -> 0.9.0 (+)
The patches applied to the www/unit are based on
https://github.com/nginx/unit/pull/1611/
Thanks to: Andrew Clayton <a.clayton@nginx.com>
<ChangeLog>
Core:
*) Feature: refactored working with built-in strings, symbols
and small integers.
Performance improvements (arewefastyet/benchmarks/v8-v7 benchmark):
Richards: +57% (631 → 989)
Crypto: +7% (1445 → 1551)
RayTrace: +37% (562 → 772)
NavierStokes: +20% (2062 → 2465)
Overall score: +29% (1014 → 1307)
*) Bugfix: fixed regexp undefined value of captured group.
*) Bugfix: fixed GCC 15 build with -Wunterminated-string-initialization.
</ChangeLog> |
1.28.0_2 07 May 2025 12:38:08
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: fix NJS configure on FreeBSD 13.5
PR: 286637 |
1.28.0_1 30 Apr 2025 15:26:03
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party http auth_jwt module (+)
from 2.3.0 to 2.3.1.
Bump PORTREVISION.
ChangeLog: https://github.com/TeslaGov/ngx-http-auth-jwt-module/compare/2.3.0...2.3.1 |
1.28.0 30 Apr 2025 15:02:41
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update portscout rules |
1.28.0 23 Apr 2025 16:17:58
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: security update from 1.27.5 to 1.28.0
<ChangeLog>
*) 1.28.x stable branch.
*) Bugfix: nginx could not be built by gcc 15 if ngx_http_v2_module or
ngx_http_v3_module modules were used.
*) Bugfix: nginx might not be built by gcc 14 or newer with -O3 -flto
optimization if ngx_http_v3_module was used.
</ChangeLog> |
1.27.5_1 18 Apr 2025 05:37:04
    |
Po-Chuan Hsieh (sunpoet)  |
devel/protobuf: Update to 29.4
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/protocolbuffers/protobuf/releases |
1.27.5 17 Apr 2025 10:17:22
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update 1.27.4 -> 1.27.5
<ChangeLog>
*) Feature: CUBIC congestion control in QUIC connections.
*) Change: the maximum size limit for SSL sessions cached in shared
memory has been raised to 8192.
*) Bugfix: in the "grpc_ssl_password_file", "proxy_ssl_password_file",
and "uwsgi_ssl_password_file" directives when loading SSL
certificates and encrypted keys from variables; the bug had appeared
in 1.23.1.
*) Bugfix: in the $ssl_curve and $ssl_curves variables when using
pluggable curves in OpenSSL.
*) Bugfix: nginx could not be built with musl libc.
Thanks to Piotr Sikora.
*) Performance improvements and bugfixes in HTTP/3.
</ChangeLog> |
1.27.4_8 17 Apr 2025 01:05:19
    |
Sergey A. Osokin (osa)  |
*/*: update NGINX JavaScript: 0.8.9 -> 0.8.10 (+)
<ChangeLog>
nginx modules:
*) Feature: reading r.requestText or r.requestBuffer from
a temp file.
Previously, an exception was thrown when accessing r.requestText
or r.requestBuffer if a client request body size exceeded
client_body_buffer_size.
*) Improvement: improved reporting of unhandled promise rejections.
*) Bugfix: fixed name corruption in variable and header processing. (Only the first 15 lines of the commit message are shown above ) |
1.27.4_7 12 Apr 2025 18:18:40
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: fix revision and project name for the third-party (+)
modsecurity module.
Bump PORTREVISION.
Fixes: 71d982a7dd4cf45b9f5e00074558b61c814a6a79
Reported by: Saiful Alam |
1.27.4_6 12 Apr 2025 17:53:25
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: third-party ModSecurity module update (+)
... to the latest snapshot.
Bump PORTREVISION.
Submitted by: Saiful Alam <saifulmr@hotmail.com>
PR: 286050 |
1.27.4_5 11 Apr 2025 00:16:40
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party passenger module to 6.0.27
Bump PORTREVISION. |
1.27.4_4 30 Mar 2025 01:45:01
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party spnego module (+)
... to its recent snapshot.
Bump PORTREVISION. |
1.27.4_3 25 Feb 2025 18:47:32
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party passenger module to 6.0.26
Bump PORTREVISION. |
1.27.4_2 23 Feb 2025 12:47:41
    |
Jason E. Hale (jhale)  |
*/*: Chase devel/abseil update |
1.27.4_1 07 Feb 2025 21:34:57
    |
Po-Chuan Hsieh (sunpoet)  |
devel/grpc: Update to 1.70.1
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/grpc/grpc/releases |
1.27.4 05 Feb 2025 17:13:33
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: security update from 1.27.3 to 1.27.4
<ChangeLog>
*) Security: insufficient check in virtual servers handling with TLSv1.3
SNI allowed to reuse SSL sessions in a different virtual server, to
bypass client SSL certificates verification (CVE-2025-23419).
*) Feature: the "ssl_object_cache_inheritable", "ssl_certificate_cache",
"proxy_ssl_certificate_cache", "grpc_ssl_certificate_cache", and
"uwsgi_ssl_certificate_cache" directives.
*) Feature: the "keepalive_min_timeout" directive.
*) Workaround: "gzip filter failed to use preallocated memory" alerts (Only the first 15 lines of the commit message are shown above ) |
1.27.3_17 05 Feb 2025 01:39:24
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: third-party modules management (+)
o) update sticky-module-ng to it's recent snapshot by
changing provider;
o) add http-auth-jwt module.
Bump PORTREVISION. |
1.27.3_16 04 Feb 2025 21:39:46
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party modules...
to their recent snapshots or versions:
o) push-stream
o) http_substitutions_filter
o) upload
o) upload-progress
o) upstream_check
o) mod_zip
o) naxsi
o) rds-csv
o) rds-json
o) redis2
o) rtmp
o) set-misc
o) sflow
o) srcache
o) vts
o) xss
Bump PORTREVISION. |
1.27.3_15 04 Feb 2025 20:08:11
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party ip2location-ip2proxy module...
after net/ip2proxy recent update.
Bump PORTREVISION.
Also, fix my previous commit for the third-party stream-lua module.
Fixes: 4e51506ec92c7ee330509ade93bb618c6f8101f3 |
1.27.3_14 04 Feb 2025 19:29:32
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party modules...
to their recent snapshots or versions:
o) array-var
o) aws_auth
o) ct
o) echo
o) dynamic_upstream
o) encrypted-session
o) headers_more
o) http-auth-digest
o) auth-ldap
o) auth_pam
o) eval
o) fancyindex
o) geoip2
o) ip2location
o) http_json_status
o) passenger
Bump PORTREVISION. |
1.27.3_13 04 Feb 2025 17:00:03
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party modules (+)
o) stream-lua to 0.0.16;
o) memc to 0.20.
Bump PORTREVISION. |
1.27.3_12 03 Feb 2025 17:04:55
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party lua module 0.10.26 -> 0.10.28
Bump PORTREVISION. |
1.27.3_11 03 Feb 2025 16:37:15
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party modsecurity3 module...
to the recent snapshot.
Update the project name to `owasp-security'.
Bump PORTREVISION. |
1.27.3_10 28 Jan 2025 17:23:28
    |
Po-Chuan Hsieh (sunpoet)  |
devel/protobuf: Update to 29.3
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/protocolbuffers/protobuf/releases |
1.27.3_9 28 Jan 2025 17:15:24
    |
Po-Chuan Hsieh (sunpoet)  |
devel/grpc: Update to 1.69.0
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/grpc/grpc/releases |
1.27.3_8 14 Jan 2025 15:14:42
    |
Sergey A. Osokin (osa)  |
*/*: update NGINX JavaScript: 0.8.8 -> 0.8.9 (+)
<ChangeLog>
nginx modules:
*) Bugfix: removed extra VM creation per server.
Previously, when js_import was declared in http or stream blocks,
an extra copy of the VM instance was created for each server
block. This was not needed and consumed a lot of memory for
configurations with many server blocks.
This issue was introduced in 9b674412 (0.8.6) and was partially
fixed for location blocks only in 685b64f0 (0.8.7).
Core:
*) Feature: added fs module for QuickJS engine.
</ChangeLog> |
1.27.3_7 06 Jan 2025 23:44:51
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party modsecurity module
to the recent snapshot.
Bump PORTREVISION. |
1.27.3_6 06 Jan 2025 17:45:57
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party modules
... to their recent snapshots:
- shibboleth
- vod
- vts
Bump PORTREVISION. |
1.27.3_5 05 Jan 2025 23:25:03
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update third-party http_push (aka nchan) module...
to its recent version - 1.3.7.
Bump PORTREVISION. |
1.27.3_4 20 Dec 2024 16:51:35
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: fix third-party modsecurity module build |
1.27.3_4 20 Dec 2024 16:22:50
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: optimize NJS infrastructure (+)
- remove NJS_QJS and NJS_XML knobs, always build such components
- add arguments to NJS' configure
- remove needless patches
- the port depends on devel/pcre2, so move `--with-ld-opt' to the
main configure level
Bump PORTREVISION. |
1.27.3_3 19 Dec 2024 23:04:08
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update OTel module to the recent snapshot
Bump PORTREVISION. |
1.27.3_2 17 Dec 2024 18:45:53
    |
Sergey A. Osokin (osa)  |
*/*: update NGINX JavaScript: 0.8.7 -> 0.8.8 (+)
Bump PORTREVISION for the www/unit.
<ChangeLog>
nginx modules:
*) Feature: implemented shared dictionary for QuickJS engine.
*) Improvement: js_preload_object is refactored.
*) Bugfix: fixed limit rated output.
*) Bugfix: optimized use of SSL contexts for (Only the first 15 lines of the commit message are shown above ) |
1.27.3_1 02 Dec 2024 21:29:59
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update NGINX OTel module (no-cmake branch)
Bump PORTREVISION. |
1.27.3 26 Nov 2024 17:45:32
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update from 1.27.2 to 1.27.3
<ChangeLog>
*) Feature: the "server" directive in the "upstream" block supports the
"resolve" parameter.
*) Feature: the "resolver" and "resolver_timeout" directives in the
"upstream" block.
*) Feature: SmarterMail specific mode support for IMAP LOGIN with
untagged CAPABILITY response in the mail proxy module.
*) Change: now TLSv1 and TLSv1.1 protocols are disabled by default.
(Only the first 15 lines of the commit message are shown above ) |
1.27.2_6 21 Nov 2024 22:23:27
    |
Sergey A. Osokin (osa)  |
www/nginx-devel: update NGINX OTel module to the recent snapshot
Bump PORTREVISION. |
1.27.2_5 21 Nov 2024 20:52:38
    |
Po-Chuan Hsieh (sunpoet)  |
devel/grpc: Update to 1.68.0
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/grpc/grpc/releases |
1.27.2_4 12 Nov 2024 03:13:54
    |
Joseph Mingrone (jrm)  |
Bump PORTREVISIONs after grpc shlib change in 2715f16944541b6b
PR: 282624
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D47513 |
1.27.2_3 29 Oct 2024 14:38:30
    |
Po-Chuan Hsieh (sunpoet)  |
devel/protobuf: Update to 28.3
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/protocolbuffers/protobuf/releases |
1.27.2_2 23 Oct 2024 14:22:45
    |
Sergey A. Osokin (osa)  |
*/*: update NGINX JavaScript: 0.8.5 -> 0.8.7 (+)
<ChangeLog>
Changes with njs 0.8.7 22 Oct 2024
nginx modules:
*) Bugfix: eliminated unnecessary VM creation.
Previously, njs consumed memory proportionally to the number of
nginx locations. The issue was introduced in 9b674412 (0.8.6).
*) Improvement: added strict syntax validation for js_body_filter.
*) Improvement: improved error messages for module loading (Only the first 15 lines of the commit message are shown above ) |
1.27.2_1 14 Oct 2024 05:05:22
    |
Po-Chuan Hsieh (sunpoet)  |
devel/grpc: Update to 1.67.0
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://github.com/grpc/grpc/releases |