CVS commit: pkgsrc/net/unbound

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Aug 13 09:26:02 UTC 2026

Modified Files:
        pkgsrc/net/unbound: Makefile distinfo
        pkgsrc/net/unbound/patches: patch-configure

Log Message:
unbound: updated to 1.26.0

1.26.0

Features

Update icannbundle.pem certificates in unbound-anchor. It has the public keys for 2009 to 2029 and for 2025 to 2045.
Fix to add `max-transfer-size` and `max-transfer-time` that limit auth-zone and rpz transfer amount and time taken. Default is disabled. This hardens against unbounded transfers. Thanks to Qifan 
Zhang, Palo Alto Networks, for the report.
Merge 1087: Overload `local_data_remove` to support removing specific records.
Merge 1433 from jisakiel: Add new static zone type block_aaaa to suppress AAAA queries.
Fix 1477: respip + dns64: dns64 uses A records modified by respip instead of original A records. Adds local-zone types block_a_wdata and block_aaaa_wdata, that are like block_a and block_aaaa, and 
uses local-data if present.


To generate a diff of this commit:
cvs rdiff -u -r1.136 -r1.137 pkgsrc/net/unbound/Makefile
cvs rdiff -u -r1.91 -r1.92 pkgsrc/net/unbound/distinfo
cvs rdiff -u -r1.8 -r1.9 pkgsrc/net/unbound/patches/patch-configure

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/unbound/Makefile
diff -u pkgsrc/net/unbound/Makefile:1.136 pkgsrc/net/unbound/Makefile:1.137
--- pkgsrc/net/unbound/Makefile:1.136   Mon Jun 22 19:38:50 2026
+++ pkgsrc/net/unbound/Makefile Thu Aug 13 09:26:02 2026
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.136 2026/06/22 19:38:50 wiz Exp $
+# $NetBSD: Makefile,v 1.137 2026/08/13 09:26:02 adam Exp $
 
-DISTNAME=      unbound-1.25.1
-PKGREVISION=   1
+DISTNAME=      unbound-1.26.0
 CATEGORIES=    net
 MASTER_SITES=  https://nlnetlabs.nl/downloads/unbound/
 
@@ -45,28 +44,28 @@ PLIST_VARS+=                sha2 gost
 .if defined(USE_BUILTIN.openssl) && ${USE_BUILTIN.openssl:tl} == yes
 PLIST_VARS.gost!=      \
        if ${PKG_ADMIN} pmatch 'openssl>=1.0.0' ${BUILTIN_PKG.openssl}; then \
-               ${ECHO} "yes";                                          \
-       else                                                            \
-               ${ECHO} "no";                                           \
+               ${ECHO} "yes";  \
+       else                    \
+               ${ECHO} "no";   \
        fi
 PLIST_VARS.sha2!=      \
        if ${PKG_ADMIN} pmatch 'openssl>=0.9.8' ${BUILTIN_PKG.openssl}; then \
-               ${ECHO} "yes";                                          \
-       else                                                            \
-               ${ECHO} "no";                                           \
+               ${ECHO} "yes";  \
+       else                    \
+               ${ECHO} "no";   \
        fi
 .else
 PLIST_VARS.gost!=      \
-       if ${PKG_INFO} -qe 'openssl>=1.0.0'; then                       \
-               ${ECHO} yes;                                            \
-       else                                                            \
-               ${ECHO} no;                                             \
+       if ${PKG_INFO} -qe 'openssl>=1.0.0'; then \
+               ${ECHO} yes;    \
+       else                    \
+               ${ECHO} no;     \
        fi
 PLIST_VARS.sha2!=      \
-       if ${PKG_INFO} -qe 'openssl>=0.9.8'; then                       \
-               ${ECHO} yes;                                            \
-       else                                                            \
-               ${ECHO} no;                                             \
+       if ${PKG_INFO} -qe 'openssl>=0.9.8'; then \
+               ${ECHO} yes;    \
+       else                    \
+               ${ECHO} no;     \
        fi
 .endif
 .if ${PLIST_VARS.gost} == "yes"

Index: pkgsrc/net/unbound/distinfo
diff -u pkgsrc/net/unbound/distinfo:1.91 pkgsrc/net/unbound/distinfo:1.92
--- pkgsrc/net/unbound/distinfo:1.91    Thu May 21 09:11:02 2026
+++ pkgsrc/net/unbound/distinfo Thu Aug 13 09:26:02 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.91 2026/05/21 09:11:02 adam Exp $
+$NetBSD: distinfo,v 1.92 2026/08/13 09:26:02 adam Exp $
 
-BLAKE2s (unbound-1.25.1.tar.gz) = ef3b05b6e747820d92e3f8cd4d233731efb62ac8458ef9c325a90de3ea5581ab
-SHA512 (unbound-1.25.1.tar.gz) = a536ff1d9b637e4ffa46ab498919ddf089b4498e65c748748c4920a6da52e1f5bacfbba9ac1dc47798d168e2ea64a7ae7ea2a581464d1fcabae241a6e38c8d13
-Size (unbound-1.25.1.tar.gz) = 6832247 bytes
-SHA1 (patch-configure) = dba648dda11d13f72f8f435ce448d0ee91d1e0bc
+BLAKE2s (unbound-1.26.0.tar.gz) = 724d14c740fd50c4f5c9143e3d5ad22b0b2e431b3a7fbf28160f41a21c293b1a
+SHA512 (unbound-1.26.0.tar.gz) = d061a4fd89b83e9e2c122b4479547f86548856710c801df01ce0aff8f0b4df9a61760cb7418b8ba7c79d504e6af49d7affc480f0730890bc818709007a931efd
+Size (unbound-1.26.0.tar.gz) = 6945614 bytes
+SHA1 (patch-configure) = dc26a7799d5001fe86c3742160633152309a670f

Index: pkgsrc/net/unbound/patches/patch-configure
diff -u pkgsrc/net/unbound/patches/patch-configure:1.8 pkgsrc/net/unbound/patches/patch-configure:1.9
--- pkgsrc/net/unbound/patches/patch-configure:1.8      Thu May 21 09:11:02 2026
+++ pkgsrc/net/unbound/patches/patch-configure  Thu Aug 13 09:26:02 2026
@@ -1,4 +1,4 @@
-$NetBSD: patch-configure,v 1.8 2026/05/21 09:11:02 adam Exp $
+$NetBSD: patch-configure,v 1.9 2026/08/13 09:26:02 adam Exp $
 
 Properly detect pthread_set_name_np() by linking, not compiling, as
 -Wno-implicit-function-declaration can result with false positive.
@@ -6,9 +6,9 @@ Properly detect pthread_set_name_np() by
 Pretend expat.h is found: it is guaranteed by PkgSrc, but on Darwin it might
 be buried inside an SDK; we don't want the SDK path being exposed in CFLAGS.
 
---- configure.orig     2026-05-20 08:28:41.000000000 +0000
+--- configure.orig     2026-08-04 07:08:52.000000000 +0000
 +++ configure
-@@ -19982,7 +19982,7 @@ main (void)
+@@ -20407,7 +20407,7 @@ main (void)
    return 0;
  }
  _ACEOF
@@ -17,7 +17,16 @@ be buried inside an SDK; we don't want t
  then :
  
            { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-@@ -23109,7 +23109,7 @@ fi
+@@ -20521,7 +20521,7 @@ main (void)
+   return 0;
+ }
+ _ACEOF
+-if ac_fn_c_try_compile "$LINENO"
++if ac_fn_c_try_link "$LINENO"
+ then :
+ 
+           { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+@@ -23841,7 +23841,7 @@ fi
  
  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for libexpat" >&5
  printf %s "checking for libexpat... " >&6; }