Major changes
- Security hardening everywhere
- libpkg: add the pkg_repo_meta_extra() API
- full support for musl
- keys: fall back on the host keys when using a root directory
- pkg set -v: store the vital flag as a user override combined with the
package’s own flag - clean: keep the exact archives of the installed packages
- db: add out-of-schema pkg_local and pkg_attr to improve changes
without schema incompatibilities - upgrade/install: report why each installed package that the plan
removes - upgrade/install: require an explicit confirmation before removing
explicitly installed packages - upgrade/install: require an explicit confirmation before removing
explicitly installed packages - upgrade/install: add -N/–no-remove and NEVER_REMOVE to refuse
removing unrequested packages - solver: hold an upgrade back instead of removing an explicitly
installed package, and report the packages that are held back - libpkg: recognize loongarch64 ELF objects and the loongarch:64 ABI
- scheduler: order the packages providing a shared library or a named
provide before the packages requiring them - signing: add an ML-DSA-87 signer, keys are created with pkg key
–create -t mldsa and repositories are signed with –sign-type mldsa,
with SHA512 as the digest
Minor changes:
- config: make PKG_CONFIG_FILE a configuration variable
- libpkg: escape spaces in metalog filenames
- fetch: detect up-to-date responses that do not carry a 304 Not
Modified - repo: keep the previously fetched catalogue when an update fails
- checksum: add the z-base-32 and hex encodings for sha256, blake2 and
blake2s - support for openssl 4
- signing command can override the checksum algorithm
- rwhich performance improvements
- fix: a plist variable name matching
- db: the read-only commands can read a database created by an older
pkg(8) (skipping upgrades) - solver: do not install a package offered by several repositories when
nothing needs it. - libfetch: sync with FreeBSD-current
- update vendored softwares to latest versions
- pkg add: remove the temporary files and directories left by a failed
extraction - triggers: honour RUN_SCRIPTS
https://cgit.freebsd.org/ports/commit/?id=f16b6dd0f7c1c3a2e0447e192e39e72f21d85eb0
