Major changes

• Security hardening everywhere
• libpkg: add the pkg_repo_meta_extra() API
• full support for musl
• keys: fall back on the host keys when using a root directory
• pkg set -v: store the vital flag as a user override combined with the
  package’s own flag
• clean: keep the exact archives of the installed packages
• db: add out-of-schema pkg_local and pkg_attr to improve changes
  without schema incompatibilities
• upgrade/install: report why each installed package that the plan
  removes
• upgrade/install: require an explicit confirmation before removing
  explicitly installed packages
• upgrade/install: require an explicit confirmation before removing
  explicitly installed packages
• upgrade/install: add -N/–no-remove and NEVER_REMOVE to refuse
  removing unrequested packages
• solver: hold an upgrade back instead of removing an explicitly
  installed package, and report the packages that are held back
• libpkg: recognize loongarch64 ELF objects and the loongarch:64 ABI
• scheduler: order the packages providing a shared library or a named
  provide before the packages requiring them
• signing: add an ML-DSA-87 signer, keys are created with pkg key
  –create -t mldsa and repositories are signed with –sign-type mldsa,
  with SHA512 as the digest

Minor changes:

• config: make PKG_CONFIG_FILE a configuration variable
• libpkg: escape spaces in metalog filenames
• fetch: detect up-to-date responses that do not carry a 304 Not
  Modified
• repo: keep the previously fetched catalogue when an update fails
• checksum: add the z-base-32 and hex encodings for sha256, blake2 and
  blake2s
• support for openssl 4
• signing command can override the checksum algorithm
• rwhich performance improvements
• fix: a plist variable name matching
• db: the read-only commands can read a database created by an older
  pkg(8) (skipping upgrades)
• solver: do not install a package offered by several repositories when
  nothing needs it.
• libfetch: sync with FreeBSD-current
• update vendored softwares to latest versions
• pkg add: remove the temporary files and directories left by a failed
  extraction
• triggers: honour RUN_SCRIPTS

https://cgit.freebsd.org/ports/commit/?id=f16b6dd0f7c1c3a2e0447e192e39e72f21d85eb0