CVS commit: pkgsrc/chat/prosody

["Stephen Borrill" <sborrill%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   sborrill
Date:           Tue Oct 13 10:29:13 UTC 2026

Modified Files:
        pkgsrc/chat/prosody: Makefile PLIST distinfo

Log Message:
prosody: update to 13.0.7

Changes since 13.0.3:

13.0.7:

Minor changes

    rostermanager, mod_roster: Include 'approved' attribute in roster items (thanks singpolyma)
    util.startup: Always apply umask (thanks Max Hearnden)
    Update TLS profile data from Mozilla/TLSRef
    net.server_epoll: Disable read timeouts on server sockets
    net.unbound: Reset and apply new config on reload
    net.unbound: Simplify by removing cancel()
    util.poll: Reject file descriptors outside of FD_SETSIZE in all methods
    net.websocket: Release connection and input state on disconnect
    net.server_select: Release queued strings on forced close
    net.unbound: Let in-flight queries complete after re-initialization
    net.server_epoll: Release pending write buffers on destruction
    net.server_event: Release retained state on destruction
    net.server_event: Fix incorrect flag logic for watchfd handles
    prosodyctl check: Validate tls_profile and tls_profile_version

13.0.6:

Fixes and improvements

    mod_cloud_notify: Use correct stanza id when clearing table entries (mem leak)
    mod_admin_shell: Don't echo new password back to the client
    util.pubsub: Remove JIDs not permitted to be subscribed on affiliation change (fixes #1709)

Minor changes

    mod_account_activity: Don't traceback when called without options
    util.jsonschema: Always accept 0 for multipleOf properties
    util.paths: Fix check for adding installer path to package.cpath
    util.datamanager: Fix listing of host stores
    util.crypto: Use post-Lua 5.1 buffer API for improved memory safety
    util.dataforms: Don't treat invalid jid-multi fields as missing
    util.crypto: Ensure signing parameter is a string
    util.poll: Reject unsupported file descriptors when using select() backend
    util.pubsub: Ensure deleted node stays in memory store deletion failed
    util.ringbuffer: Fix incorrect returned position from :find() for #needle~=1
    util.pposix: Fix incorrect syslog facility mapping
    util.ringbuffer: find(): Fix find logic bugs
    util.signal: Fix signalfd closure on non-Linux systems
    net.websocket: Fix traceback in client if server doesn't respond with Connection header
    net.server_event: Fix incorrect flag logic for watchfd handles
    mod_debug_stanzas: Only clear active_filters when there are no subscribers
    mod_carbons: Fix 'to' attribute of stanzas to own account
    net.stun: Fix parsing of STUN packets with 0-length attributes
    mod_storage_memory: Fix assignment to 'with' when calling archive:set()
    net.http.parser: Include final component in path normalization check
    mod_register_ibr: Use set_password() instead of create_user() for resets
    mod_vcard: Ignore invalid photo data
    util.timer: Fix incorrect rescheduling of some kinds of timers

13.0.5:

Security

    mod_proxy65: Consistently apply authorization checks
    mod_proxy65: Don't proxy data until after bytestream activation
    mod_c2s, mod_s2s: Introduce new pre-authentication stanza size limit
    Add limit for stanza max child elements
    mod_c2s: Remove timers immediately on disconnection
    net.server_epoll: Clean up timers after disconnection

Fixes and improvements

    net.http.parser: Fix handling of chunked request
    MUC: Advertise hats feature on room JID (thanks Daniel)
    moduleapi: Use multitable add/remove instead of set (fixes memory leak)
    mod_cloud_notify: Fix leaking iq response handlers by using send_iq()
    Improve federation with servers using only IP addresses
    prosody: Prevent loading local code when installed system-wide
    mod_http_file_share: Improve handling of Range requests
    mod_carbons: Fix some carbons decision-making bugs (fixes #1861: mod_carbons does not forward "sent" MUC PMs to other clients)

Minor changes

    net.resolvers: Fix to avoid SRV lookups for IP addresses
    prosody: Abort earlier on incompatible Lua version
    mod_turn_external: hand out credentials for type == turns too
    mod_s2s: Fully validate stream addressing
    prosodyctl check features: Warn if http file sharing enabled on both host and component
    util.prosodyctl: Don't check for mod_posix being disabled, it's deprecated
    util.startup: Improve error message when failing to load config file
    util.x509: Add support for iPAddress certs
    prosodyctl: Trim any trailing newline from password entry
    mod_admin_shell: Make cert index search path relative to config file
    mod_admin_shell: Improve multi-host command handling
    mod_admin_shell: Show help listing when specifying only a section name
    mod_admin_shell: Ensure password validity when setting passwords for new/existing users
    mod_account_activity: Handle authentication provider returning no user info
    config: Use default value when enum option has incorrect value
    mod_http: "Handle" streaming requests to avoid invoking redirect handler

13.0.4:

Fixes and improvements

    mod_s2s: Fix traceback when outgoing s2s queue is full
    util.uuid: Fix padding of group 2 of UUIDv7 to use zeroes

Minor changes

    core.modulemanager: Fix shell commands on components
    mod_s2s: Explicitly prevent sending recursive error replies when queue is full
    modulemanager: Allow component modules to specify additional inherited modules
    prosodyctl check features: Use modulemanager to calculate modules that will actually be loaded
    prosodyctl check features: change recommendation from mod_muc_mam to mod_mam
    prosodyctl check config: Fix traceback when zero modules are enabled
    mod_pubsub: Fail early if loaded outside of a component to prevent misconfiguration
    doap: Add XEP-0486
    mod_pubsub/commands: Fix listing item numbers along with item names
    mod_account_activity: Handle authentication provider returning no user info
    mod_mam: Automatically load mod_muc_mam if loaded on a MUC component
    mod_muc: Inherit mod_mam if globally loaded


To generate a diff of this commit:
cvs rdiff -u -r1.59 -r1.60 pkgsrc/chat/prosody/Makefile
cvs rdiff -u -r1.15 -r1.16 pkgsrc/chat/prosody/PLIST
cvs rdiff -u -r1.31 -r1.32 pkgsrc/chat/prosody/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/chat/prosody/Makefile
diff -u pkgsrc/chat/prosody/Makefile:1.59 pkgsrc/chat/prosody/Makefile:1.60
--- pkgsrc/chat/prosody/Makefile:1.59   Wed Jan 14 13:03:05 2026
+++ pkgsrc/chat/prosody/Makefile        Tue Oct 13 10:29:13 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.59 2026/01/14 13:03:05 sborrill Exp $
+# $NetBSD: Makefile,v 1.60 2026/10/13 10:29:13 sborrill Exp $
 
-DISTNAME=      prosody-13.0.3
+DISTNAME=      prosody-13.0.7
 CATEGORIES=    chat
 MASTER_SITES=  https://prosody.im/downloads/source/
 

Index: pkgsrc/chat/prosody/PLIST
diff -u pkgsrc/chat/prosody/PLIST:1.15 pkgsrc/chat/prosody/PLIST:1.16
--- pkgsrc/chat/prosody/PLIST:1.15      Wed Oct 15 10:34:42 2025
+++ pkgsrc/chat/prosody/PLIST   Tue Oct 13 10:29:13 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.15 2025/10/15 10:34:42 sborrill Exp $
+@comment $NetBSD: PLIST,v 1.16 2026/10/13 10:29:13 sborrill Exp $
 bin/prosody
 bin/prosodyctl
 lib/prosody/core/certmanager.lua
@@ -263,6 +263,7 @@ lib/prosody/util/termcolours.lua
 lib/prosody/util/throttle.lua
 lib/prosody/util/time.so
 lib/prosody/util/timer.lua
+lib/prosody/util/tlsref.lua
 lib/prosody/util/uuid.lua
 lib/prosody/util/watchdog.lua
 lib/prosody/util/x509.lua

Index: pkgsrc/chat/prosody/distinfo
diff -u pkgsrc/chat/prosody/distinfo:1.31 pkgsrc/chat/prosody/distinfo:1.32
--- pkgsrc/chat/prosody/distinfo:1.31   Wed Jan 14 13:03:05 2026
+++ pkgsrc/chat/prosody/distinfo        Tue Oct 13 10:29:13 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.31 2026/01/14 13:03:05 sborrill Exp $
+$NetBSD: distinfo,v 1.32 2026/10/13 10:29:13 sborrill Exp $
 
-BLAKE2s (prosody-13.0.3.tar.gz) = f817fbd1cc913165f4a48a1e0429b2fe4351ad8374f1fb4037b1f272241866cc
-SHA512 (prosody-13.0.3.tar.gz) = d12e537586313a32543f2de86aec960be0e2834d212825e9dc8590287d05150cdf2ee514c8f14130fa1d531a516c49cc3c6e446f793330e2320c008e55a3413b
-Size (prosody-13.0.3.tar.gz) = 738587 bytes
+BLAKE2s (prosody-13.0.7.tar.gz) = 79bb4bb6f453f0f80d16cfb0cf9ddc50456ef21540a5aad412988abdc44f7df0
+SHA512 (prosody-13.0.7.tar.gz) = 53056342911f26451ef21f39b8ba53a3f27752a65f190516d21892c4740f8ce163f8a9b943feab438fd32e10643466037a42519c7673c0e0dc85e4dc107a7321
+Size (prosody-13.0.7.tar.gz) = 745079 bytes
 SHA1 (patch-makefile) = 846c12b98ba275f2d091f8d6aaa1c18617a9fd20
 SHA1 (patch-prosody.cfg.lua.dist) = d656a4896d95bc79304924760df46edf8157caa2
 SHA1 (patch-util-src_makefile) = b656902271845237eda3862b7795ccde621e694d