bfs: update to 4.1.3. Changes:

## Bug fixes

- Fixed a segfault when binaries built on macOS 26.4+ were run on older macOS
  versions (#229)
- Fixed a potential hang in the test suite
- Fixed `./configure`-time detection of `sysctlbyname()` on FreeBSD (#219)
- Bumped the default version number, which was missed in 4.1.1
- Fixed `./configure CFLAGS=...` being overridden by auto-detected flags
- Fixed the build for WASIX
- Fixed the build on Android < 11 (#215)
- `bfs` now takes system-wide open file limits into account.
  Previously, a handful of concurrent `bfs` instances could overwhelm a system
  with a low global limit, particularly macOS.
- Fixed an invalid optimization that transformed

      $ bfs -user you -or -user me

  into just

      $ bfs -user you

  The bug was originally introduced in bfs 2.0 (October 14, 2020). (#155)
- Only the last `-files0-from` argument now has any effect, to match GNU find
- Fixed `-execdir {}`, which was inadvertently broken in bfs 4.0
- Fixed `-fstype` with btrfs subvolumes (requires Linux 5.8+)
- Fixed `-ls` with timestamps very far in the future
- Fixed the `posix/exec_sigmask` test on mips64el Linux
- Fixed time-related tests with `mawk 1.3.4 20250131` (#152)
- Fixed a bug that could cause child processes (e.g. from `-exec`) to run with
  all signals blocked.
  The bug was introduced in version 3.3.
- Fixed a man page typo (#144)
- Fixed the build on PowerPC macOS (#145)
- Fixed a bug introduced in bfs 4.0.3 that colorized every file as if it had
  capabilities on non-Linux systems (#146)
- Fixed an assertion failure when `$LS_COLORS` contained escaped NUL bytes like
  `*\0.gz=`
- Fixed a use-after-free bug introduced in bfs 4.0 when unregistering and
  re-registering signal hooks.
  This could be reproduced with `bfs -nocolor` by repeatedly sending
  `SIGINFO`/`SIGUSR1` to toggle the status bar.
- Fixed a hang present since bfs 3.0 colorizing paths like `notdir/file`, where
  `notdir` is a symlink pointing to a non-directory file.
- Fixed `./configure --help`, which was broken since `bfs` 4.0
- Fixed compiler flag auto-detection on systems with non-GNU `sed`.
  This fixes a potential race condition on FreeBSD since `bfs` 4.0 due to the
  switch to `_Fork()` without passing `-z now` to the linker.
- Fixed `$MAKE distcheck` when `$MAKE` is not `make`, e.g. `gmake distcheck` on
  BSD
- Fixed some roff syntax issues in the `bfs` manpage
- Fixed an assertion failure optimizing expressions like `bfs -not \( -prune ,
  -type f \)` since `bfs` 3.1.
  Release builds were not affected, since their assertions are disabled and the
  behaviour was otherwise correct.
- `bfs` no longer prints a "suppressed errors" warning unless `-noerror` is
  actually suppressing errors
- Fixed commands like `./configure CC=clang --enable-release` that set variables
  before other options
- Fixed the build on RISC-V with GCC versions older than 14
- Fixed running `bfs` under Valgrind
- Fixed the exit code when failing to execute a non-existent command with
  `-exec`/`-ok` on some platforms including OpenBSD and HPPA
- Fixed `$LS_COLORS` case-sensitivity to match GNU ls more closely when the same
  extension is specified multiple times
- Fixed the `-status` bar on Solaris/Illumos
- Reduced the scope of the symbolic link loop change in version 3.3.
  `-xtype l` remains true for symbolic link loops, matching a change in GNU
  findutils 4.10.0.
  However, `-L` will report an error, just like `bfs` prior to 3.3 and other
  `find` implementations, as required by POSIX.
- `-regextype emacs` now supports shy (non-capturing) groups
- Fixed `-status` bar visual corruption when the terminal is resized
- `bfs` now prints a reset escape sequence when terminated by a signal in the
  middle of colored output (#138)
- `./configure CFLAGS=...` no longer overrides flags from `pkg-config` during
  configuration
- Fixed some rarely-used code paths that clean up after allocation failures
- On Linux, the `io_uring` feature probing introduced in `bfs` 3.1.2 only
  applied to one thread, causing all other threads to avoid using io_uring
  entirely.
  The probe results are now copied to all threads correctly.
- On Linux, we now check for supported `io_uring` operations before using them,
  which should fix `bfs` on 5.X series kernels that support `io_uring` but not
  all of `openat()`/`close()`/`statx()`
- Fixed a test failure triggered by certain filesystem types for `/tmp` (#131)
- Fixed parsing and interpretation of timezone offsets for explicit reference
  times used in `-*since` and `-newerXt`
- Fixed the build on m68k
- `-quit` and `-exit` could be ignored in the iterative deepening modes (`-S
  {ids,eds}`).
  This is now fixed.
  The bug was introduced in version 3.0.3.
- Fixed two possible errors in sort mode (`-s`):
  - Too many open files
  - Out of memory
- Fixed handling of FreeBSD union mounts
- Fixed `NO_COLOR` handling when it's set to the empty string
- Fixed some portability issues:
  - OpenBSD
  - NetBSD
  - DragonFly BSD
  - Illumos
- Fixed a segfault when reporting errors under musl
- Iterative deepening modes (`-S {ids,eds}`) were performing iterative
  *breadth*-first searches since `bfs` 3.0, negating any advantages they may
  have had over normal breadth-first search.
  They now do iterative *depth*-first searches as expected.
- Fixed a linked-list corruption that could lead to an infinite loop on macOS
  and other non-Linux, non-FreeBSD platforms
- Fixed an out-of-bounds memory read that could occur when escaping a string
  containing an incomplete multi-byte character
- Traversal fixes that mostly affect large directory trees (#107)
  - `bfs` could encounter `EMFILE`, close a file, and retry many times,
    particularly with `-j1`
  - Breadth-first search could become highly unbalanced, negating many of the
    benefits of `bfs`
  - On non-{Linux,FreeBSD} platforms, directories could stay open longer than
    necessary, consuming extra memory
- Fixed handling of the "normal text" color (`no` in `$LS_COLORS`) to match GNU
  ls

## New features

- Added support for the `$LSCOLORS` variable used by FreeBSD and macOS (#54,
  #157)
- Implemented `./configure --version=X.Y.Z`, mainly for packagers to override
  the version number
- To match BSD `find` (and the POSIX Utility Syntax Guidelines), multiple flags
  can now be given in a single argument like `-LEXO2`.
  Previously, you would have had to write `-L -E -X -O2`.
- Explicit timestamps can now be written as `@SECONDS_SINCE_EPOCH`.
  For example, `bfs -newermt @946684800` will print files modified since January
  1, 2000 (UTC).
- The new `-noerror` option suppresses all error messages during traversal.
  (#142)
- The `-status` bar can now be toggled by `SIGINFO`
  (<kbd>Ctrl</kbd>+<kbd>T</kbd>) on systems that support it, and `SIGUSR1` on
  other systems
- `-regextype` now supports all regex types from GNU find (#21)
- File birth times are now supported on OpenBSD
- New `-limit N` action that quits immediately after `N` results
- Implemented `-context` (from GNU find) for matching SELinux contexts (#27)
- Implemented `-printf %Z` for printing SELinux contexts
- On Linux, `bfs` now uses io_uring for async I/O
- On all platforms, `bfs` can now perform `stat()` calls in parallel,
  accelerating queries like `-links`, `-newer`, and `-size`, as well as
  colorized output
- On FreeBSD, `-type w` now works to find whiteouts like the system `find`
- `bfs` now reads directories asynchronously and in parallel (#101).
  Performance is significantly improved as a result.
  Parallelism is controlled by the new `-j` flag, e.g. `-j1`, `-j2`, etc.

## Changes

- Switched from C17 to C23 by default.
  C17 is still supported as a fallback as long as your compiler supports some
  common extensions.
- `bfs` now takes CPU affinity into account when picking how many threads to use
- `-execdir /bin/...` is now allowed even with a relative path in `$PATH`
- *Expect* is no longer a test suite dependency
- Fixed the build against old liburing versions (#147)
- Async I/O performance optimizations
- Minor refactoring of the build system
- `-mount` now excludes mount points entirely, to comply with the recently
  published POSIX 2024 standard.
  Use `-xdev` to include the mount point itself, but not its contents.
  `bfs` has been warning about this change since version 1.5.1 (September 2019).
- `-perm` now takes the current file creation mask into account when parsing a
  symbolic mode like `+rw`, as clarified by POSIX defect 1392.
    This matches the behaviour of BSD `find`, contrary to the behaviour of GNU
    `find`.
- Symbolic link loops are now treated like other broken links, rather than an
  error
- `./configure` now expects `--with-libacl`, `--without-libcap`, etc. rather
  than `--enable-`/`--disable-`
- The ` ` (space) flag is now restricted to numeric `-printf` specifiers
- The build system has been rewritten, and there is now a configure step:

      $ ./configure
      $ make

  See `./configure --help` or docs/BUILDING.md for more details.
- Improved platform support
  - Implemented `-acl` on Solaris/Illumos
  - Implemented `-xattr` on DragonFly BSD
- Performance and scalability improvements
- The file count in `bfs -status` now has a thousands separator
- Improved `bfs -j2` performance
- Optimized `-exec` by using `posix_spawn()` when possible, which can avoid the
  overhead of `fork()`
- `-execdir` and `-okdir` are now rejected if `$PATH` contains a relative path,
  matching the behaviour of GNU find
- Leading whitespace is no longer accepted in integer command line arguments
  like `-links ' 1'`
- Iterative deepening modes (`-S {ids,eds}`) were optimized by delaying teardown
  until the very end
- Parallel depth-first search (`-S dfs`) was optimized to avoid enqueueing every
  file separately
- `-files0-from` now allows an empty set of paths to be given, matching GNU
  findutils 4.9.0
- Reduced memory consumption in multi-threaded searches
- Many man page updates
- `bfs` now uses the C17 standard version, up from C11
- Due to #101, `bfs` now requires some additional C and POSIX features:
  - Standard C atomics (`<stdatomic.h>`)
  - POSIX threads (`<pthread.h>`)
- `$LS_COLORS` extensions written in different cases (e.g.
  `*.jpg=35:*.JPG=01;35`) are now matched case-sensitively, to match the new
  behaviour of GNU ls since coreutils version 9.2
- Added a warning/error if `$LS_COLORS` can't be parsed, depending on whether
  `-color` is requested explicitly
- Filenames with control characters are now escaped when printing with `-color`
- Build flags like `WITH_ONIGURUMA` have been renamed to `USE_ONIGURUMA`

## Other changes

- Fixed running the tests as root on Linux `8b24de3`
- Fixed some tests on Android `2724dfb` `0a5a80c`
- Stopped relying on non-POSIX touch(1) features in the tests.
  This should fix the tests on at least OpenBSD.
  `2d5edb3`
- User/group caches are now filled lazily instead of eagerly `b41dca5`
- More caches and I/O streams are flushed before -exec/-ok `f98a1c4`
- Fixed various memory safety issues found by fuzzing
  `712b137` `5ce883d` `da02def` `c55e855`
- Fixed a test failure on certain macOS versions `8b24de3`
- Mitigated a race condition when determining filesystem types (#97)
- Lots of refactoring and optimization
- Fixed use of uninitialized memory on parsing errors involving `-fprintf`
- Fixed Android build issues (#96)
- Refactored the test suite
- Fix `stat()` errors on GNU Hurd systems with glibc older than 2.35
- Added fish shell tab completion (#94).
  Thanks @xfgusta!
- Fixed deleting large NFS directories on FreeBSD (#67).
- Added support for a `bfs`-specific `BFS_COLORS` environment variable.
- Refactored the build system, directory structure, and documentation (#88, #89,
  #91).
  Thanks @ElectronicsArchiver!
- Added `zsh` completion (#86).
  Thanks @VorpalBlade!
- Updated the default color scheme to match GNU coreutils 9.1.
  Files with capabilities set are no longer colored differently by default,
  resulting in a significant performance improvement.
- Became less aggressive at triggering automounts
- Added support for out-of-tree builds with `BUILDDIR`
- Added compiler-style context for errors and warnings.
  Errors look like this:

      $ bfs -nam needle
      bfs: error: bfs -nam needle
      bfs: error:     ~~~~
      bfs: error: Unknown argument; did you mean -name?

  and warnings look like this:

      $ bfs -print -name 'needle'
      bfs: warning: bfs -print -name needle
      bfs: warning:            ~~~~~~~~~~~~
      bfs: warning: The result of this expression is ignored.
- Updated from C99 to C11
- Fixed the tests when built against musl
- Fixed a build error reported on Manjaro
- Fixed the build when Oniguruma is not installed in the default search paths
  (#82)
- Fixed string encoding bugs with Oniguruma enabled
- Fixed regex error reporting bugs
- Added the Oniguruma regular expression library as an (optional, but enabled by
  default) dependency (#81).
  Oniguruma supports more regular expression syntax types than the POSIX regex
  API, and often performs better.
  To build `bfs` without this new dependency, do `make WITH_ONIGURUMA=` to
  disable it.
  Thanks @data-man!
- Added support for the `ed`, `emacs`, `grep`, and `sed` regular expression
  types (#21)
- Before executing a process with `-execdir`/`-okdir`, `bfs` now ensures all
  output streams are flushed.
  Previously, I/O from subprocesses could be interleaved unpredictably with
  buffered I/O from `bfs` itself.
- Fixed the build on Debian kFreeBSD
- Fixed a crash on GNU Hurd when piping bfs's output
- Fixed a double-`close()` on non-Linux platforms if `fdopendir()` fails
- Reduced memory allocations on startup
- More tweaks to `PAGER` and `LESS` handling for `bfs -help` (#76)
- Use 512-byte blocks for `-ls` when `POSIXLY_CORRECT` is set (#77)
- Implemented `-files0-from FILE` to take a list of `'\0'`-separated starting
  paths.
  GNU find will implement the same feature in an upcoming release.
- Added colors to `-printf` output (#62)
- Faster recovery from `E2BIG` during `-exec`
- Fixed some incorrect coloring of broken links when links are being followed
  (`-L`)
- Made the tests work when run as root by dropping privileges.
  This may be helpful for certain packaging or CI environments, but is not
  recommended.
- Treat empty `PAGER` and `LESS` environment variables like they're unset, for
  `bfs -help` (#71).
  Thanks @markus-oberhumer!
- The soft `RLIMIT_NOFILE` is now raised automatically to a fairly large value
  when possible.
  This provides a minor performance benefit for large directory trees.
- Implemented time units for `-mtime` as found in FreeBSD find (#75)
- Fixed `-hidden` on hidden start paths
- Added a Bash completion script.
  Thanks @bmundt6!
- Fixed rounding in `-used`.
  Corresponding fixes were made to GNU find in version 4.8.0.
- Optimized the open directory representation.
  On Linux, much libc overhead is bypassed by issuing syscalls directly.
  On all platforms, a few fewer syscalls and open file descriptors will be used.
- Implemented `-flags` from BSD find
- Added a new `-status` option that displays the search progress in a bar at the
  bottom of the terminal
- Fixed an optimizer bug introduced in version 2.0 that affected some
  combinations of `-user`/`-group` and `-nouser`/`-nogroup`
- #8: New `-exclude <expression>` syntax to more easily and reliably filter out
  paths.
  For example:

      bfs -name config -exclude -name .git

  will find all files named `config`, without searching any directories (or
  files) named `.git`.
  In this case, the same effect could have been achieved (more awkwardly) with
  `-prune`:

      bfs ! \( -name .git -prune \) -name config

  But `-exclude` will work in more cases:

      # -exclude works with -depth, while -prune doesn't:
      bfs -depth -name config -exclude -name .git

      # -exclude applies even to paths below the minimum depth:
      bfs -mindepth 3 -name config -exclude -name .git
- #30: `-nohidden` is now equivalent to `-exclude -hidden`.
  This changes the behavior of command lines like

      bfs -type f -nohidden

  to do what was intended.
- Optimized the iterative deepening (`-S ids`) implementation
- Added a new search strategy: exponential deepening search (`-S eds`).
  This strategy provides many of the benefits of iterative deepening, but much
  faster due to fewer re-traversals.
- Fixed an optimizer bug that could skip `-empty`/`-xtype` if they didn't always
  lead to an action
- Implemented `-xattrname` to find files with a particular extended attribute
  (from macOS find)
- Made `-printf %l` still respect the width specifier (e.g. `%10l`) for
  non-links, to match GNU find
- Made `bfs` fail if `-color` is given explicitly and `LS_COLORS` can't be
  parsed, rather than falling back to non-colored output
- Fixed `-ls` printing numeric IDs instead of user/group names in large
  directory trees
- Cached the user and group tables for a performance boost
- Fixed interpretation of "default" ACLs
- Implemented `-s` flag to sort results
- Implemented `-newerXt` (explicit reference times), `-since`, `-asince`, etc.
- Fixed `-empty` to skip special files (pipes, devices, sockets, etc.)
- Fixed the build on NetBSD
- Added support for NFSv4 ACLs on FreeBSD
- Added a `+` after the file mode for files with ACLs in `-ls`
- Supported more file types (whiteouts, doors) in symbolic modes for
  `-ls`/`-printf %M`
- Implemented `-xattr` on FreeBSD

doc: Updated sysutils/bfs to 4.1.3

doc: Updated www/lighttpd to 1.4.83

lighttpd: update to 1.4.83. Changes:

Highlights

- add PQC hybrid KEM X25519MLKEM768 to default TLS groups
- mod_sockproxy can now route connections based on TLS SNI
- mod_proxy proxy.header enhanced config for url-path mapping of response headers
- HTTP Incremental header support
- portability/compatibility with library updates (lighttpd dependencies)

BEHAVIOR CHANGES

- add PQC hybrid KEM X25519MLKEM768 to default TLS groups
- HTTP/1.1 Upgrade: h2c has been deprecated; set default to disabled
  in lighttpd, but can still be enabled in config, and http2 prior
  knowledge is still enabled

* [systemd] add RestrictAddressFamilies AF_NETLINK
* [TLS] skip cert_is_active warnings for unset clock
* [multiple] rename plugin_data statics per module
* [mod_mbedtls] mbedtls 4.x removes mbedtls/ecp.h
* [mod_mbedtls] mbedtls 4.x removes ECDH ciph suites
* [core] clarify warning message
* [multiple] http_status.[ch]
* [core] single internal define for fs monitoring
* [core] X-Sendfile shared code
* [core] check for OTHER response headers earlier
* [core] support Incremental header
* [mod_magnet] resp_body_finished w/ r.resp_body:set()
* [core] minor code tighten
* [core] remove request_st member async_callback (unused)
* [tests] t/test_http_status.c stub
* [core] http_status_set_fin() handler_module = NULL
* [mod_magnet] http_response_reset() before HANDLER_COMEBACK
* [core] http_response_prepare() smaller funcs
* [core] add continuation framework for response prep
* [h2] add comment about zero-length payloads in padded frames
* [mod_magnet] revert recent HANDLER_COMEBACK change
* [core] remove small bit of commented out code
* [core] do not generate no-longer-used plugin funcs
* [core] minor code tighten
* [h2] fix HTTP/1.1 upgrade: h2c
* [h2] combine h2c code into h2_upgrade_h2c()
* [h2] disable HTTP/1.1 upgrade: h2c by default
* [core] clear trailer whitelist at startup
* [core] static_assert sanity check for 64-bit off_t
* [core] security: missing return on non-default path
* [mod_magnet] modify reqbody_length after file append
* [mod_openssl] check openssl func for NULL if mem err
* [mod_*_dbi] proceed if third reconnect retry succeeds
* [mod_ajp13] skip empty string (len == 65535)
* [mod_ajp13] error if backend include LF in headers
* [mod_deflate] translate '/' in etag to '~' for fn
* [mod_deflate] mod_deflate_finished() shared code
* [mod_authn_gssapi] warn if principal not in config
* [mod_authn_gssapi] mod_authn_gssapi_construct_sprinc()
* [core] support Range for QUERY
* [multiple] make most module config thread-safe
* [mod_mbedtls] EC certs require drbg init
* [multiple] quiet minor coverity warnings
* [mod_extforward] HAProxy PROXY protocol extensions
* [multiple] make most plugin objects instance-safe
* [multiple] C99 designated initializers
* [mod_auth] HTTP/2 response w/ multiple auth methods (fixes #3296)
* [doc] add comment to lighttpd.service
* [core] add .rst .xsl .xslt to builtin mimetype.assign (fixes #3295)
* [build] support lua 5.5
* [core] __attribute_packed__
* [mod_extforward] fix reading 'verify' from PROXY (fixes #3298)
* [mod_extforward] adjust reading 'verify' from PROXY (#3298)
* [core] fix Range requests with dynamic backends
* [core] adjust safety factor for max-connections (fixes #3299)
* [core] quiet coverity false positive
* [mod_boringssl] add more const
* [mod_openssl] add more const
* [mod_openssl] update openssl version EOL message
* [TLS] add PQC hybrid KEM to default TLS groups
* spelling suggestions from codespell (fixes #3303)
* [mod_maxminddb] sanity check snprintf of flt, dbl
* [multiple] add some 'const' for gcc 16 warnings
* [mod_sockproxy] configure after TLS SNI (fixes #3304)
* [core] add sanity check to li_hex2bin()
* [core] security: reject req header CGI conflicts
* [core] security: reject invalid Content-Length from backend (fixes #3309)
* [mod_gnutls] avoid double-free in error path (unlikely)
* [core] update for nettle 4.x digest func signatures
* [mod_deflate] more precisely match If-None-Match
* [core] attempt recovery on stat_cache EMFILE (fixes #3308)
* [core] option to close unused socket after restart
* [cmake] use find_package() with PCRE2
* [h2] update ls-hpack
* [mod_openssl] use OSSL_STORE_open for alt schemas
* [mod_dirlisting] faster client-side sort on huge listings
* [mod_dirlisting] additional minor javascript optim
* [mod_proxy] adjust proxy.header config parsing
* [mod_proxy] config opt for urlpath map resp hdrs (fixes #3300)
* [core] allow server.max-fds up to 1048576
* [tests] add tests for http_cgi.c varname encoding
* [mod_wstunnel] code size reduction
* [core] reduce struct gw_plugin_config size
* [mod_wstunnel] RFC 6455 p5 compliance
* [multiple] limit queue size to slow backends
* [core] use tempfiles for HTTP/1.1 upgraded backend
* [core] adjust trace for server.max-connections
* [doc] update doc/initscripts.txt
* [mod_wstunnel] disable hybi-00; obsolete
* [mod_wstunnel] adjust parsing extended frame lens
* [cmake] fix typos for mbedtls, tfpsacrypto libs
* [mod_wstunnel] reduce handler_ctx struct size
* [mod_wstunnel] stricter RFC 6455 compliance
* [mod_wstunnel] optimize unmasking client payload
* [core] propagate backend errs for h2 to RST_STREAM
* [core] propagate backend errs for HTTP/1.1 chunked
* [core] check another cond before calling cold func
* [core] update rand.c for nettle 4.x digest funcs
* [mod_wolfssl] workaround wolfssl code smells
* [mod_mbedtls] disable DHParameters w/ PSA crypto
* [TLS] debug.log-ssl-noise set TLS lib debug level
* [mod_mbedtls] workaround mbedtls 4.1.0 bug
* [mod_mbedtls] session tkts psa_alg w/ mbedtls 4.x
* [mod_gnutls] test for PQC hybrid group support

yaks: fix NetBSD build.

Add and enable yaks.

Add yaks: Shared Discovery Trees in the CLI for teams of humans and robots

yx (yaks) is a command-line tool for managing a shared TODO list as a
tree of nested goals. It's designed for teams -- humans and AI agents
working together on the same codebase.

Everyone on the team works from the same yak map. Changes sync through
git with zero merge conflicts, so you never have to coordinate who's
updating the plan.

doc: Added devel/yaks version 0.2.0

doc: Updated mail/mlmmj to 1.7.0

glib2: allow pre-10.13 macOS to configure.

mlmmj: update to 1.7.0. Changes:

1.7.0
 o New 'autosubscribe' feature: on moderated mailing list autosubscribe as
   "nomail" when if a moderator approves a mail
 o New 'selfmoderate' feature: send the moderation email to the "From" address
   for validation
 o Fix 'nonomailsub' support
 o Plenty of memory leaks
 o Fix lock issue
1.6.0
 o Remove blanks in customheaders prefix and skip empty lines
 o $bouncenumbers$ in probe are now expended to number, messageid when
   possible
 o customheaeders allow now substitution of $posteraddr$ (Erwan Mas)
 o Fix portability issue on Hurd (Erwan Mas)
1.5.2
 o Plenty of portability fixes
1.5.1
 o Fix tests on system with a running smtp server on port 25
 o Fix portability issue on arm64
 o Fix tests where some struct were not initialised properly
1.5.0
 o Add option to copy From: to Reply-To: (Graham Leggett)
 o remove contrib/pymime
 o remove contrib/foot_filter
 o granular access rejection message
 o fix duplicated bounce recording
 o Remove support for all deprecated syntax in templates
1.4.7
 o fix duplicate queued moderation notification email
 o fix build on macOS
1.4.6
 o mlmmj-make-ml: fix on OpenBSD
 o Fix another regression regarding RFC 5321
1.4.5
 o Improve error messages in case of smtp failure
 o Regression: fix mlmmj-send -r
 o Modernize autotools usage
1.4.4
 o fix regression which results in probe not containing the list
   of bounced emails
1.4.3
 o fix regression which results in loosing track of probes
1.4.2
 o fix regression in lastdigest parser
1.4.1
 o fix regression in incremental updates
1.4.0-rc3
 o fix unattended usage of mlmmj-makeml
 o fix regression regarding RFC 5321
 o fix subscription validation
1.4.0-rc2
 o fix notifymod regression
 o fix VERP regression
1.4.0-rc1
 o moderation cookie for subscription is now under the sub directory
   moderation/subscribe
 o mlmmj-make-ml: now supports non interactive mailing list creation
 o listtext: reintegrate the tree (not a submodule anymore)
 o lots of code deduplication
1.4.0-b1
 o manpage converted from man(7) to mdoc(7)
 o Fix a potential crash with mail without separator between headers and body
 o mlmmj-send: -l 6 has been removed
 o mlmmj-send: accept file descriptor number as -s argument
 o mlmmj-send: accept file descriptor number as -m argument
 o cleanup .omit files leftover if moderated emails are rejected and notmetoo
   is set.
1.4.0-a2
 o Fix a crash with forged probe emails
 o mlmmj-send does not need anymore absolute path
 o Use copy_file_range if available
 o Use arc4random_uniform if available
 o Logs are not limited anymore to 256 characters per lines
1.4.0-a1
 o Add a test suite
 o Modernize code (dprintf, posix_spawn, asprintf, getline, daemon, ...)
 o Supporting passing email to a mta over ipv6
 o Fix relaying in IPV6-only systems
 o Fix decode quoted printable subject
 o Fix parsing RFC1891
 o Fix a crash if no owner has been defined
 o Validate ranges of all integers conversion
 o New 'send' tunable to allow email passthrough
 o Add support for 'X-Original-From'
 o Reduce subscription confirmation address length to fit RFC 5321
 o Use arc4random is available
 o Reduce memory manipulation
 o When unsubscribing bouncers, keep the bounce file if something went
   wrong and report in syslog what went wrong
 o Remove the -b option from mlmmj-unsub, it is not used anymore

doc: Updated databases/p5-App-Sqitch to 1.6.1

doc: Updated devel/p5-Cucumber-TagExpressions to 8.1.0

doc: Updated devel/ruby-jirametrics to 2.20.1

doc: Updated mail/mlmmj to 1.7.0

doc: Updated textproc/moor to 2.10.2

doc: Updated textproc/p5-Text-HTML-Turndown to 0.10

doc: Updated textproc/xapian to 1.4.30

doc: Updated textproc/xapian-omega to 1.4.30

doc: Updated www/snac to 2.89

glib2: allow pre-10.13 macOS to configure.

mlmmj: update to 1.7.0. Changes:

1.7.0
 o New 'autosubscribe' feature: on moderated mailing list autosubscribe as
   "nomail" when if a moderator approves a mail
 o New 'selfmoderate' feature: send the moderation email to the "From" address
   for validation
 o Fix 'nonomailsub' support
 o Plenty of memory leaks
 o Fix lock issue
1.6.0
 o Remove blanks in customheaders prefix and skip empty lines
 o $bouncenumbers$ in probe are now expended to number, messageid when
   possible
 o customheaeders allow now substitution of $posteraddr$ (Erwan Mas)
 o Fix portability issue on Hurd (Erwan Mas)
1.5.2
 o Plenty of portability fixes
1.5.1
 o Fix tests on system with a running smtp server on port 25
 o Fix portability issue on arm64
 o Fix tests where some struct were not initialised properly
1.5.0
 o Add option to copy From: to Reply-To: (Graham Leggett)
 o remove contrib/pymime
 o remove contrib/foot_filter
 o granular access rejection message
 o fix duplicated bounce recording
 o Remove support for all deprecated syntax in templates
1.4.7
 o fix duplicate queued moderation notification email
 o fix build on macOS
1.4.6
 o mlmmj-make-ml: fix on OpenBSD
 o Fix another regression regarding RFC 5321
1.4.5
 o Improve error messages in case of smtp failure
 o Regression: fix mlmmj-send -r
 o Modernize autotools usage
1.4.4
 o fix regression which results in probe not containing the list
   of bounced emails
1.4.3
 o fix regression which results in loosing track of probes
1.4.2
 o fix regression in lastdigest parser
1.4.1
 o fix regression in incremental updates
1.4.0-rc3
 o fix unattended usage of mlmmj-makeml
 o fix regression regarding RFC 5321
 o fix subscription validation
1.4.0-rc2
 o fix notifymod regression
 o fix VERP regression
1.4.0-rc1
 o moderation cookie for subscription is now under the sub directory
   moderation/subscribe
 o mlmmj-make-ml: now supports non interactive mailing list creation
 o listtext: reintegrate the tree (not a submodule anymore)
 o lots of code deduplication
1.4.0-b1
 o manpage converted from man(7) to mdoc(7)
 o Fix a potential crash with mail without separator between headers and body
 o mlmmj-send: -l 6 has been removed
 o mlmmj-send: accept file descriptor number as -s argument
 o mlmmj-send: accept file descriptor number as -m argument
 o cleanup .omit files leftover if moderated emails are rejected and notmetoo
   is set.
1.4.0-a2
 o Fix a crash with forged probe emails
 o mlmmj-send does not need anymore absolute path
 o Use copy_file_range if available
 o Use arc4random_uniform if available
 o Logs are not limited anymore to 256 characters per lines
1.4.0-a1
 o Add a test suite
 o Modernize code (dprintf, posix_spawn, asprintf, getline, daemon, ...)
 o Supporting passing email to a mta over ipv6
 o Fix relaying in IPV6-only systems
 o Fix decode quoted printable subject
 o Fix parsing RFC1891
 o Fix a crash if no owner has been defined
 o Validate ranges of all integers conversion
 o New 'send' tunable to allow email passthrough
 o Add support for 'X-Original-From'
 o Reduce subscription confirmation address length to fit RFC 5321
 o Use arc4random is available
 o Reduce memory manipulation
 o When unsubscribing bouncers, keep the bounce file if something went
   wrong and report in syslog what went wrong
 o Remove the -b option from mlmmj-unsub, it is not used anymore

moor: update to 2.10.2. Changes:

- Fix truncated lines in man pages
- Chroma highlighter was updated
- Improved cleanup on shutdown

p5-App-Sqitch: update to 1.6.1. Changes:

- Fixed some ancient typos in sqitchtutorial-sqlite, with thanks to @ovid
  for the report!
- Updated ClickHouse logic to always specify "default" as the hostname
  when connecting and the URI includes not hostname. This ensures it
  doesn't try to use `DSN=sqitch`, which is unlikely to be a configured
  DSN, and to align with the behavior of the ClickHouse client.

p5-Cucumber-TagExpressions: update to 8.1.0. Changes:

- Render the empty tag expression as an empty string
- Improve error message for missing operands

p5-Text-HTML-Turndown: update to 0.10. Changes:

* Nicely indent generated Markdown tables
* Simplify handling of <table> tags

ruby-jirametrics: update to 2.20.1. Changes:

- Fixed an exception when using cookie based authentication.

snac: update to 2.89. Changes:

Fixed crash in pronouns processing (contributed by byte).

Added counters in the people page (contributed by byte).

New command-line option `refresh`, to refresh all follower and following
`Actor` objects, marking them as broken if they are.

xapian-bindings: reset PKGREVISION for xapian update.

xapian-omega: update to 1.4.30. Changes:

documentation:

* INSTALL: Replace with improved version based on xapian-core's.

indexers:

* omindex:

  + Fix segmentation fault if an SVG file contains both <dc:title> and <title>
    with <dc:title> first.  Bug introduced in 1.4.21.

xapian: update to 1.4.30. Changes:

API:

* Stem: 1.4.28 changed the English stemmer code to remove an exception
  for "skis" which we incorrectly thought wasn't needed.  This was not
  intended to be a functional change, so we've restored the exception.

* Stem: Fix a bug in Snowball's runtime code for decoding 4-byte UTF-8
  sequences.  This affects grouping checks against Unicode codepoints U+40000
  to U+7FFFF and U+80000 to U+FFFFF, and we would decode a higher codepoint
  value.  The largest codepoint used in a grouping in any stemmer we ship is
  U+0585 so this seems to be a latent bug.  Reported in Snowball by Stephane
  Carrez.

documentation:

* The API docs still said DatabaseError was thrown for operations on a closed
  database, but since 1.4.10 we throw its subclass DatabaseClosedError instead.

* INSTALL: List the more commonly used variable-like configure options and
  reorder the sections to present the information in a more logical order.

portability:

* Fix instance of undefined behaviour in Database::check() for glass databases.
  We would end up deleting a pointer to a non-virtual class via a pointer to
  the base class, so delete ended up called with the wrong size.  In practice
  this probably doesn't cause problems (it was detected by checks added to
  recent valgrind versions).

* Fix probe for -Bsymbolic-function on AIX.  The AIX linker doesn't support
  this flag, but it only emits a warning when it is used and that warning
  didn't match any of the patterns we already check for so we were detecting it
  as supported with the result that the build would use this option and AIX ld
  would emit a warning about ignoring it as unsupported.

* Fix compiler warnings in testsuite when building on AIX.

glib2: allow pre-10.13 macOS to configure.

Minecraft service moved, no longer need JDK.

gcc13-for-all will have to work differently.

Try to get only gcc13. Use more CPUs.

PKGVM: chsh explicitly to pkgsrc zsh.

Add `cvs gitlog`.

Add `cvs show` with gittish HEAD handling.

Add FUNDING.yml.

Add cvs-for-gits.

Add subheadings.

Auto-page annotate, log, and status.

Extract local variable.

Improve the README.

Possibly in the middle of something (belated commit).

Reformat case block.

Remove trailing colon sans sed (fails on Solaris).

Unlicense this.

Use same pager options as Git currently would.

Wordsmith.

doc: Updated databases/p5-App-Sqitch to 1.6.1

doc: Updated devel/mob to 5.4.1

doc: Updated devel/p5-Cucumber-TagExpressions to 8.1.0

doc: Updated devel/ruby-jirametrics to 2.20.1

doc: Updated mail/mlmmj to 1.7.0

doc: Updated textproc/p5-Text-HTML-Turndown to 0.10

doc: Updated textproc/xapian to 1.4.30

doc: Updated textproc/xapian-omega to 1.4.30

doc: Updated www/snac to 2.89

mlmmj: update to 1.7.0. Changes:

1.7.0
 o New 'autosubscribe' feature: on moderated mailing list autosubscribe as
   "nomail" when if a moderator approves a mail
 o New 'selfmoderate' feature: send the moderation email to the "From" address
   for validation
 o Fix 'nonomailsub' support
 o Plenty of memory leaks
 o Fix lock issue
1.6.0
 o Remove blanks in customheaders prefix and skip empty lines
 o $bouncenumbers$ in probe are now expended to number, messageid when
   possible
 o customheaeders allow now substitution of $posteraddr$ (Erwan Mas)
 o Fix portability issue on Hurd (Erwan Mas)
1.5.2
 o Plenty of portability fixes
1.5.1
 o Fix tests on system with a running smtp server on port 25
 o Fix portability issue on arm64
 o Fix tests where some struct were not initialised properly
1.5.0
 o Add option to copy From: to Reply-To: (Graham Leggett)
 o remove contrib/pymime
 o remove contrib/foot_filter
 o granular access rejection message
 o fix duplicated bounce recording
 o Remove support for all deprecated syntax in templates
1.4.7
 o fix duplicate queued moderation notification email
 o fix build on macOS
1.4.6
 o mlmmj-make-ml: fix on OpenBSD
 o Fix another regression regarding RFC 5321
1.4.5
 o Improve error messages in case of smtp failure
 o Regression: fix mlmmj-send -r
 o Modernize autotools usage
1.4.4
 o fix regression which results in probe not containing the list
   of bounced emails
1.4.3
 o fix regression which results in loosing track of probes
1.4.2
 o fix regression in lastdigest parser
1.4.1
 o fix regression in incremental updates
1.4.0-rc3
 o fix unattended usage of mlmmj-makeml
 o fix regression regarding RFC 5321
 o fix subscription validation
1.4.0-rc2
 o fix notifymod regression
 o fix VERP regression
1.4.0-rc1
 o moderation cookie for subscription is now under the sub directory
   moderation/subscribe
 o mlmmj-make-ml: now supports non interactive mailing list creation
 o listtext: reintegrate the tree (not a submodule anymore)
 o lots of code deduplication
1.4.0-b1
 o manpage converted from man(7) to mdoc(7)
 o Fix a potential crash with mail without separator between headers and body
 o mlmmj-send: -l 6 has been removed
 o mlmmj-send: accept file descriptor number as -s argument
 o mlmmj-send: accept file descriptor number as -m argument
 o cleanup .omit files leftover if moderated emails are rejected and notmetoo
   is set.
1.4.0-a2
 o Fix a crash with forged probe emails
 o mlmmj-send does not need anymore absolute path
 o Use copy_file_range if available
 o Use arc4random_uniform if available
 o Logs are not limited anymore to 256 characters per lines
1.4.0-a1
 o Add a test suite
 o Modernize code (dprintf, posix_spawn, asprintf, getline, daemon, ...)
 o Supporting passing email to a mta over ipv6
 o Fix relaying in IPV6-only systems
 o Fix decode quoted printable subject
 o Fix parsing RFC1891
 o Fix a crash if no owner has been defined
 o Validate ranges of all integers conversion
 o New 'send' tunable to allow email passthrough
 o Add support for 'X-Original-From'
 o Reduce subscription confirmation address length to fit RFC 5321
 o Use arc4random is available
 o Reduce memory manipulation
 o When unsubscribing bouncers, keep the bounce file if something went
   wrong and report in syslog what went wrong
 o Remove the -b option from mlmmj-unsub, it is not used anymore

moor: update to 2.10.2. Changes:

- Fix truncated lines in man pages
- Chroma highlighter was updated
- Improved cleanup on shutdown

p5-App-Sqitch: update to 1.6.1. Changes:

- Fixed some ancient typos in sqitchtutorial-sqlite, with thanks to @ovid
  for the report!
- Updated ClickHouse logic to always specify "default" as the hostname
  when connecting and the URI includes not hostname. This ensures it
  doesn't try to use `DSN=sqitch`, which is unlikely to be a configured
  DSN, and to align with the behavior of the ClickHouse client.

p5-Cucumber-TagExpressions: update to 8.1.0. Changes:

- Render the empty tag expression as an empty string
- Improve error message for missing operands

p5-Text-HTML-Turndown: update to 0.10. Changes:

* Nicely indent generated Markdown tables
* Simplify handling of <table> tags

xapian-bindings: reset PKGREVISION for xapian update.

xapian-omega: update to 1.4.30. Changes:

documentation:

* INSTALL: Replace with improved version based on xapian-core's.

indexers:

* omindex:

  + Fix segmentation fault if an SVG file contains both <dc:title> and <title>
    with <dc:title> first.  Bug introduced in 1.4.21.

/qmail/rejectutils -> /software/rejectutils.

Accept apple-public-source-license.

Add Darkman (seems to be Linux-specific).

Add ERRORS and otherwise clarify manpages.

Add airconnect. macOS builds, NetBSD needs porting.

Add aws-session-manager-plugin. Needs work.

Add fsl-1.1-mit-license.

Add git-sqlite.

Add initial version of rejectutils.

Add manual pages.

Add msedit. Needs too-new-for-us Rust.

Add not-yet-building ghostty.

Add novelwriter (untested).

Add qmail-spp support to qmail-rcptcheck.

Adjust previous to also avoid CTF.

After setting project SDK to 17, IntelliJ wants me to commit this.

Build with -g and enable CTF for debuggability.

Bump build JDK to 17, so Gradle 9 will work.

Classes are still built for 1.8:

$ file build/classes/kotlin/main/com/schmonz/greencently/Greencently.class
build/classes/kotlin/main/com/schmonz/greencently/Greencently.class: compiled Java class data, version 52.0 (Java 1.8)

Don't gitignore *greencently* in subdirs.

Extract TestListenerDelegate.

Extract TestResults.

Extract new qmail-qfilter-queue program.

Extract variable.

Finish removing qmail-qfilter-smtpd-queue.

Fix Sonatype Central status badge.

Fix link ordering for NetBSD.

Inline and rename delegate methods.

Inline.

Log deprecation notice (and what to do instead).

Oops, no restart required.

Optionally return viruscan's custom error message.

Organize manual testing notes.

PKGSRC_MKREPRO is already no by default.

PKGVM: format list

PKGVM: some updates.

Pass stralloc pointers. Sprinkle static.

Remove timestamp when not complete-and-green.

Replace TESTING.md with test.sh.

Run the filters listed in $QMAILQUEUEFILTERS.

Store timestamp under .greencently/. When not complete or green, remove it!

Switch to TrunkVer.

These run under -rcptcheck, not -qfilter.

Third release of netqmail (1.06).

20071130 version: netqmail 1.06
20071130 legal: qmail-1.03 is now in the public domain
20051103 doc: dot-qmail.9 updated for changed (19980613) conf-patrn default, tnx ADM

Track upstream PHP_VERSION_DEFAULT bump to 8.3.

Wordsmith.

aws-session-manager-plugin: complete some TODO items.

bootstrap: ensure sysconfdir exists.

crush: update to 0.8.1.

djbware: reduce lint, mostly by replacing SUBST_CLASSES+=djberrno with
DJB_ERRNO_FIXUP.

While here, sprinkle FORCE_C_STD (mostly c89) where it doesn't break the
build. Tested on NetBSD and macOS.

extramkconf: try s6-networking with OpenSSL.

hut: update to 0.6.0, via new upstream. Changes:

- Project config: To make using hut a more seamless experience and help
  new contributors, a config file can be added to repositories.
- Lots of new "hg" commands.
- "update" commands for most resources.
- Pager no longer messes up terminal on an internal error.
- hut now checks whether "stdin" is an interactive terminal when it
  decides whether input should be read from "$EDITOR" or "stdin".
- The deprecated not-found flag has been removed.

libvips: fix PLIST on NetBSD.

libvips: fix PLIST on macOS.

libvips: indent more consistently.

libvips: moved to pkgsrc.

libvips: update to 8.17.1.

moretools: convert to pseudo-meta-package.

mox: update to 0.0.14. Changes: many.

nbpkg-shared: UNLIMIT_RESOURCES per-package.

nbpkg: make sure sysconfdir exists.

nbpkg: use cut instead of maybe needing AWK=nawk.

qtools with -g fails CHECK_WRKREF (why?).

s/www\.qmail\.org/qmailorg.schmonz.com/g

s6-networking: openssl is default now.

testssl: update to 3.2.0. Still needs work.

xref bundled rcptchecks from qmail-rcptcheck(8).

Add LICENSE.md (the Unlicense).

Add gron, looks handy.

Add s6, tipidee.

Catch up PHP_VERSION_DEFAULT to upstream 8.2.

Defend against qemu 10.0, NetBSD/amd64 gets 1 CPU.

See: https://gitlab.com/qemu-project/qemu/-/issues/2938

Fix PKGSRC_USE_FORTIFY default.

Improve nb platform-tuple inference enough for today.

More of previous.

Not using p5-AnyEvent after all.

Revert "Defend against qemu 10.0, NetBSD/amd64 gets 1 CPU."

This reverts commit 14a0d788abc79a12a103a0180f1ef6b0d2e4bcc7.

Gonna stick with qemu 9.x for now.

Solaris 11 lost virtio interface after pkg update.

Update goals.

Use extramkconf's hardening options in nbpkg-shared.

nb: tolerate KVM acceleration.

"Show Notes" is implicit, leave it off.

/qmail/acceptutils -> /software/acceptutils.

Add second episode and show notes.

Comment out an alloc_free() that's dumping cores.