CVS commit: pkgsrc/mail/rspamd

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Nov 16 21:39:50 UTC 2025

Modified Files:
        pkgsrc/mail/rspamd: Makefile PLIST cfgfiles.mk distinfo
        pkgsrc/mail/rspamd/patches: patch-src_plugins_lua_dmarc.lua
Removed Files:
        pkgsrc/mail/rspamd/patches: patch-src_lua_lua__util.c

Log Message:
rspamd: update to 3.14.0.

3.14.0: 10 Nov 2025
  * [Feature] Fuzzy check: Add HTML fuzzy hashing for structural similarity matching
  * [Feature] Fuzzy check: Add per-rule text_hashes toggle for HTML-only fuzzy rules
  * [Feature] Fuzzy check: Add structured checks configuration with backward compatibility
  * [Feature] Fuzzy storage: Implement full TCP protocol support with auto-switch
  * [Feature] Fuzzy check: Add TCP connection management and error handling
  * [Feature] URL: Add task:get_cta_urls() API for proper CTA domain extraction
  * [Feature] URL: Move CTA processing into dedicated module
  * [Feature] URL: Add url:get_hash() method for efficient deduplication without string conversion
  * [Feature] GPT: Add web search context support with Redis caching
  * [Feature] HTML: Add infrastructure for async URL rewriting with Lua bindings
  * [Feature] HTML: Add task:rewrite_html_urls() and task:get_html_urls() Lua API
  * [Feature] WebUI: Implement dark mode with theme toggle and auto detection
  * [Feature] Aliases: Add advanced resolution with loop detection for converging paths
  * [Feature] Milter: Add ESMTP argument parsing with Lua API access
  * [Feature] Milter: Add per-recipient ESMTP args parsing and metadata access
  * [Feature] Milter: Support array of positions for remove_headers operations
  * [Feature] Proxy: Add client IP preservation in message headers through chain
  * [Feature] Rspamc: Add milter.add_headers object format support to --mime
  * [Feature] Configwizard: Add Postfix integration wizard using postconf utility
  * [Feature] Build: Add comprehensive BSD workflows (FreeBSD, NetBSD, OpenBSD) with Lua version selection
  * [Feature] Build: Add automated code review GitHub Actions workflow with Rspamd-specific guidelines
  * [Feature] Build: Add Docker-based integration test suite with ASAN and real corpus
  * [Feature] Build: Add automatic public suffix list synchronization
  * [Feature] Multimap: Add support for symbols with leading numerals
  * [Feature] DMARC: Add Auto-Reply-To and Precedence headers to prevent out-of-office replies
  * [Feature] Platform: Add NetBSD memory usage tracking support
  * [Feature] Utilities: Add fuzzy Redis migration utility
  * [Feature] Bayes: Allow skipping local/authenticated mail in autolearn condition
  * [Feature] ARC: Add DKIM signing key API for flexible ARC signing
  * [Feature] Logger: Add type specifiers support for better formatting
  * [Feature] Heap: Add rspamd_heap_push_slot to eliminate double allocation
  * [Fix] DNS: Preserve req->pos during reply validation to prevent packet truncation on UDP-to-TCP retransmits
  * [Fix] DNS: Regenerate transaction ID before copying to TCP buffer to avoid collisions
  * [Fix] DNS: Fix nameserver round-robin when using /etc/resolv.conf
  * [Fix] DNS: Fix TCP uninitialized memory leak
  * [Fix] DMARC: Add batching and forced GC for Redis connections to prevent pool exhaustion
  * [Fix] DMARC: Validate and normalize batch_size to prevent fractional indexing and loop errors
  * [Fix] DMARC: Refactor reporting to use helper functions and async maps
  * [Fix] Allocator: Fix jemalloc/system malloc mixing in getline() to prevent crashes
  * [Fix] Allocator: Fix allocator mismatches in hiredis
  * [Fix] Allocator: Fix allocator mismatches in libucl
  * [Fix] Hyperscan: Use runtime version instead of compile-time for database validation
  * [Fix] Hyperscan: Auto-recreate invalid unserialized cache files on version mismatch
  * [Fix] Memory: Fix leaks in fuzzy storage khash tables
  * [Fix] Memory: Fix leaks in upstream address parsing
  * [Fix] Memory: Fix leaks in *-any address parsing
  * [Fix] Memory: Fix OpenSSL providers cleanup
  * [Fix] Memory: Fix UCL object memory leak in Lua integration
  * [Fix] Memory: Fix stat metadata tokenization leak
  * [Fix] Fuzzy TCP: Fix double-release in fuzzy_tcp_session
  * [Fix] Fuzzy TCP: Fix refcount leak in destructor
  * [Fix] Fuzzy TCP: Fix timeout handling and buffer overflow
  * [Fix] Fuzzy TCP: Fix endianness mismatch in framing protocol
  * [Fix] Fuzzy TCP: Fix race conditions and fd reuse bugs
  * [Fix] Fuzzy TCP: Use pure ev_timer for session timeouts
  * [Fix] Fuzzy TCP: Fix server replies and client event handling
  * [Fix] Shutdown: Keep srv events active during shutdown to track auxiliary processes
  * [Fix] ARC: Restore strict header ordering to comply with RFC 8617
  * [Fix] ARC: Add ed25519 key support
  * [Fix] Composites: Implement two-phase evaluation for postfilter dependencies
  * [Fix] Composites: Use null-terminated string for symbol lookup
  * [Fix] URL: Refactor extraction to prevent DoS with hash-based deduplication
  * [Fix] URL: Add 50k URL limit with warning for DoS protection
  * [Fix] URL: Skip HTML_DISPLAYED URLs in CTA detection
  * [Fix] URL: Fix CTA priority preservation in extract_specific_urls
  * [Fix] Bayes: Improve Redis server discovery
  * [Fix] Bayes: Only bypass learn when header value matches
  * [Fix] ESMTP: Robust per-recipient parsing in milter with safe cursor advance
  * [Fix] ESMTP: Refcount ESMTP args in proxy_session_refresh to avoid use-after-free
  * [Fix] ESMTP: Correct Lua stack cleanup in lua_task_get_rcpt_esmtp_args
  * [Fix] HTML: Correct attribute value offset calculation for URL rewriting
  * [Fix] HTML: Add HTML entity encoding for URL rewriting
  * [Fix] HTML: Fix segfault due to incorrect HTML features access
  * [Fix] HTML: Fix frequency-based ordering in domain hashing
  * [Fix] HTML: Fix shingles hash generation bugs
  * [Fix] HTML: Fix memory leaks in shingles generation
  * [Fix] HTML: Fix memory management in html_cta.process_html_links
  * [Fix] HTML: Fix CSS class normalization in fuzzy tokens
  * [Fix] HTML: Fix cache key collision between text and HTML fuzzy hashes
  * [Fix] OpenBSD: Fix kinfo_proc structure member names
  * [Fix] OpenBSD: Disable Hyperscan (not available)
  * [Fix] FreeBSD: Fix zstd package name
  * [Fix] FreeBSD: Add IGNORE_OSVERSION for package version mismatches
  * [Fix] NetBSD: Setup pkgin and PKG_PATH before installing packages
  * [Fix] NetBSD: Fix missing dependencies and package names
  * [Fix] BSD: Remove -j flag from ninja in all BSD workflows
  * [Fix] Multimap: Handle symbols with leading numerals
  * [Fix] Aliases: Prevent creation of malformed email addresses
  * [Fix] Aliases: Fix alias loop detection for converging paths
  * [Fix] Aliases: Fix is_local_domain to support backend objects
  * [Fix] Aliases: Correct to_local when no recipients present
  * [Fix] Aliases: Fix set_addr validation to prevent malformed addresses
  * [Fix] MIME: Remove Authentication-Results and anonymize envelope-from in Received headers
  * [Fix] Mempool: Prevent double-free in destructor cleanup
  * [Fix] Rspamadm: Unbreak dnstool command
  * [Fix] Integration tests: Fix ASAN configuration and startup diagnostics
  * [Minor] Replace GHashTable with khash in fuzzy_check.c and lua_textpart_get_cta_urls
  * [Minor] Update cache key prefix to match module name in llm_search_context
  * [Minor] Fix llm_search_context to follow Rspamd idioms
  * [Minor] Refactor llm_search_context to use lua_cache module
  * [Minor] Address review comments in various modules
  * [Minor] Fix droid usage
  * [Minor] Use GPT-5 Codex for code reviews
  * [Minor] Update libucl with automatic stack management
  * [Rework] Prioritize CTA URLs in redirector and Lua helpers
  * [Rework] RBL configuration: Add new from selectors, content_urls checks, and lower_utf8 for hashed domains
  * [Rework] Make Bayes learn guards configurable
  * [Rework] Refactor element visibility control to use Bootstrap classes
  * [Rework] Use postconf utility for Postfix configuration in configwizard
  * [Rework] Remove Lua-level HTTP header parsing in ESMTP args getters
  * [Rework] Add CFG_REF_* macros with debug logging for config refcounting
  * [Rework] Move OpenSSL providers from global to libs_ctx
  * [Rework] Convert heap to fully intrusive kvec-based implementation
  * [Rework] Add specialized pool types for long-lived and short-lived allocations
  * [Rework] Improve memory pool destructors with smart preallocation based on pool type
  * [Project] Restrict code review workflow to authorized maintainers
  * [Project] Add Claude Code and Cursor AI assistant configuration
  * [WebUI] Replace Glyphicons with FontAwesome SVG icons
  * [WebUI] Update CodeJar to version 4.3.0
  * [WebUI] Update Node.js and ESLint
  * [WebUI] Update D3-based visualization libs
  * [WebUI] Replace deprecated alert-error class with alert-danger
  * [WebUI] Add search syntax hint to history table filter input
  * [WebUI] Fix theme toggle default to auto
  * [WebUI] Keep classifiers list when request is skipped
  * [WebUI] Repopulate classifier dropdown
  * [WebUI] Add comment for removeEventListener
  * [WebUI] Fix icon rendering race condition in tab initialization
  * [Test] Add comprehensive Lua unit tests for HTML URL rewriting
  * [Test] Add unit tests for HTML URL rewriting patch engine
  * [Test] Add functional tests for HTML fuzzy hashing
  * [Test] Add ARC chain verification tests with multiple signatures
  * [Test] Add e2e for classifier dropdown population
  * [Test] Multimap symbol with leading numerals
  * [Test] Sync public suffix list automatically
  * [Test] Update JS linters
  * [Test] Fix integration test environment variable passing
  * [Test] Add detailed error output for integration test failures


To generate a diff of this commit:
cvs rdiff -u -r1.129 -r1.130 pkgsrc/mail/rspamd/Makefile
cvs rdiff -u -r1.37 -r1.38 pkgsrc/mail/rspamd/PLIST
cvs rdiff -u -r1.16 -r1.17 pkgsrc/mail/rspamd/cfgfiles.mk
cvs rdiff -u -r1.69 -r1.70 pkgsrc/mail/rspamd/distinfo
cvs rdiff -u -r1.5 -r0 pkgsrc/mail/rspamd/patches/patch-src_lua_lua__util.c
cvs rdiff -u -r1.2 -r1.3 \
    pkgsrc/mail/rspamd/patches/patch-src_plugins_lua_dmarc.lua

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/rspamd/Makefile
diff -u pkgsrc/mail/rspamd/Makefile:1.129 pkgsrc/mail/rspamd/Makefile:1.130
--- pkgsrc/mail/rspamd/Makefile:1.129   Tue Nov  4 11:42:45 2025
+++ pkgsrc/mail/rspamd/Makefile Sun Nov 16 21:39:50 2025
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.129 2025/11/04 11:42:45 wiz Exp $
+# $NetBSD: Makefile,v 1.130 2025/11/16 21:39:50 wiz Exp $
 #
 # When updating this, run 'make cfgfiles'.
 
-DISTNAME=      rspamd-3.13.2
-PKGREVISION=   1
+DISTNAME=      rspamd-3.14.0
 CATEGORIES=    mail
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=rspamd/}
 

Index: pkgsrc/mail/rspamd/PLIST
diff -u pkgsrc/mail/rspamd/PLIST:1.37 pkgsrc/mail/rspamd/PLIST:1.38
--- pkgsrc/mail/rspamd/PLIST:1.37       Sun Nov  2 21:17:43 2025
+++ pkgsrc/mail/rspamd/PLIST    Sun Nov 16 21:39:50 2025
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.37 2025/11/02 21:17:43 wiz Exp $
+@comment $NetBSD: PLIST,v 1.38 2025/11/16 21:39:50 wiz Exp $
 bin/rspamadm
 bin/rspamadm-${PKGVERSION}
 bin/rspamc
@@ -33,6 +33,7 @@ share/examples/rspamd/maps.d/spf_dkim_wh
 share/examples/rspamd/maps.d/surbl-whitelist.inc
 share/examples/rspamd/metrics.conf
 share/examples/rspamd/modules.conf
+share/examples/rspamd/modules.d/aliases.conf
 share/examples/rspamd/modules.d/antivirus.conf
 share/examples/rspamd/modules.d/arc.conf
 share/examples/rspamd/modules.d/asn.conf
@@ -162,7 +163,9 @@ share/rspamd/lualib/fun.lua
 share/rspamd/lualib/global_functions.lua
 share/rspamd/lualib/llm_common.lua
 share/rspamd/lualib/llm_context.lua
+share/rspamd/lualib/llm_search_context.lua
 share/rspamd/lualib/lpegre.lua
+share/rspamd/lualib/lua_aliases.lua
 share/rspamd/lualib/lua_auth_results.lua
 share/rspamd/lualib/lua_aws.lua
 share/rspamd/lualib/lua_bayes_learn.lua
@@ -183,6 +186,7 @@ share/rspamd/lualib/lua_ffi/init.lua
 share/rspamd/lualib/lua_ffi/linalg.lua
 share/rspamd/lualib/lua_ffi/spf.lua
 share/rspamd/lualib/lua_fuzzy.lua
+share/rspamd/lualib/lua_fuzzy_html.lua
 share/rspamd/lualib/lua_lexer.lua
 share/rspamd/lualib/lua_magic/heuristics.lua
 share/rspamd/lualib/lua_magic/init.lua
@@ -271,6 +275,7 @@ share/rspamd/lualib/rspamadm/statistics_
 share/rspamd/lualib/rspamadm/template.lua
 share/rspamd/lualib/rspamadm/vault.lua
 share/rspamd/lualib/tableshape.lua
+share/rspamd/plugins/aliases.lua
 share/rspamd/plugins/antivirus.lua
 share/rspamd/plugins/arc.lua
 share/rspamd/plugins/asn.lua
@@ -333,6 +338,7 @@ share/rspamd/rules/controller/maps.lua
 share/rspamd/rules/controller/neural.lua
 share/rspamd/rules/controller/selectors.lua
 share/rspamd/rules/forwarding.lua
+share/rspamd/rules/fuzzy_html_phishing.lua
 share/rspamd/rules/headers_checks.lua
 share/rspamd/rules/html.lua
 share/rspamd/rules/mid.lua
@@ -348,12 +354,11 @@ share/rspamd/rules/subject_checks.lua
 share/rspamd/www/README.md
 share/rspamd/www/apple-touch-icon.png
 share/rspamd/www/browserconfig.xml
-share/rspamd/www/css/FooTable.Glyphicons.css
+share/rspamd/www/css/FooTable.FontAwesome.css
 share/rspamd/www/css/bootstrap.min.css
 share/rspamd/www/css/codejar-linenumbers.css
 share/rspamd/www/css/d3evolution.css
 share/rspamd/www/css/d3pie.css
-share/rspamd/www/css/font-glyphicons.css
 share/rspamd/www/css/footable.standalone.min.css
 share/rspamd/www/css/nprogress.css
 share/rspamd/www/css/prism.css
@@ -362,16 +367,15 @@ share/rspamd/www/css/svg-with-js.min.css
 share/rspamd/www/favicon-16x16.png
 share/rspamd/www/favicon-32x32.png
 share/rspamd/www/favicon.ico
-share/rspamd/www/fonts/glyphicons-halflings-regular.ttf
-share/rspamd/www/fonts/glyphicons-halflings-regular.woff
-share/rspamd/www/fonts/glyphicons-halflings-regular.woff2
 share/rspamd/www/img/asc.png
 share/rspamd/www/img/desc.png
 share/rspamd/www/img/drop-area.svg
 share/rspamd/www/img/rspamd_logo_navbar.png
+share/rspamd/www/img/rspamd_logo_navbar_dark.png
 share/rspamd/www/index.html
 share/rspamd/www/js/app/common.js
 share/rspamd/www/js/app/config.js
+share/rspamd/www/js/app/footable-fontawesome.js
 share/rspamd/www/js/app/graph.js
 share/rspamd/www/js/app/history.js
 share/rspamd/www/js/app/libft.js

Index: pkgsrc/mail/rspamd/cfgfiles.mk
diff -u pkgsrc/mail/rspamd/cfgfiles.mk:1.16 pkgsrc/mail/rspamd/cfgfiles.mk:1.17
--- pkgsrc/mail/rspamd/cfgfiles.mk:1.16 Sun Nov  2 21:17:43 2025
+++ pkgsrc/mail/rspamd/cfgfiles.mk      Sun Nov 16 21:39:50 2025
@@ -1,3 +1,3 @@
-# $NetBSD: cfgfiles.mk,v 1.16 2025/11/02 21:17:43 wiz Exp $
+# $NetBSD: cfgfiles.mk,v 1.17 2025/11/16 21:39:50 wiz Exp $
 # Do not edit, regenerate using 'make cfgfiles'
-CFGFILES=      actions.conf common.conf composites.conf groups.conf lang_detection.inc local.d/antivirus.conf.example local.d/module.conf.example logging.inc lua.local.d/module.lua.example 
maps.d/dmarc_whitelist.inc maps.d/exe_clickbait.inc maps.d/maillist.inc maps.d/mid.inc maps.d/mime_types.inc maps.d/redirectors.inc maps.d/spf_dkim_whitelist.inc maps.d/surbl-whitelist.inc 
metrics.conf modules.conf modules.d/antivirus.conf modules.d/arc.conf modules.d/asn.conf modules.d/aws_s3.conf modules.d/bayes_expiry.conf modules.d/bimi.conf modules.d/chartable.conf 
modules.d/clickhouse.conf modules.d/contextal.conf modules.d/dcc.conf modules.d/dkim.conf modules.d/dkim_signing.conf modules.d/dmarc.conf modules.d/elastic.conf modules.d/emails.conf 
modules.d/external_relay.conf modules.d/external_services.conf modules.d/force_actions.conf modules.d/forged_recipients.conf modules.d/fuzzy_check.conf modules.d/gpt.conf modules.d/greylist.conf 
modules.d/hfilter.conf modules.d/history_redis.conf modules.d
 /http_headers.conf modules.d/known_senders.conf modules.d/maillist.conf modules.d/metadata_exporter.conf modules.d/metric_exporter.conf modules.d/mid.conf modules.d/milter_headers.conf 
modules.d/mime_types.conf modules.d/multimap.conf modules.d/mx_check.conf modules.d/neural.conf modules.d/once_received.conf modules.d/p0f.conf modules.d/phishing.conf modules.d/ratelimit.conf 
modules.d/rbl.conf modules.d/redis.conf modules.d/regexp.conf modules.d/replies.conf modules.d/reputation.conf modules.d/rspamd_update.conf modules.d/spamassassin.conf modules.d/spamtrap.conf 
modules.d/spf.conf modules.d/surbl.conf modules.d/trie.conf modules.d/url_redirector.conf modules.d/whitelist.conf modules.local.d/module.conf.example options.inc override.d/module.conf.example 
rspamd.conf scores.d/content_group.conf scores.d/fuzzy_group.conf scores.d/headers_group.conf scores.d/hfilter_group.conf scores.d/mime_types_group.conf scores.d/mua_group.conf 
scores.d/phishing_group.conf scores.d/policies_group.con
 f scores.d/rbl_group.conf scores.d/statistics_group.conf scores.d/subject_group.conf scores.d/surbl_group.conf scores.d/whitelist_group.conf settings.conf statistic.conf worker-controller.inc 
worker-fuzzy.inc worker-normal.inc worker-proxy.inc
+CFGFILES=      actions.conf common.conf composites.conf groups.conf lang_detection.inc local.d/antivirus.conf.example local.d/module.conf.example logging.inc lua.local.d/module.lua.example 
maps.d/dmarc_whitelist.inc maps.d/exe_clickbait.inc maps.d/maillist.inc maps.d/mid.inc maps.d/mime_types.inc maps.d/redirectors.inc maps.d/spf_dkim_whitelist.inc maps.d/surbl-whitelist.inc 
metrics.conf modules.conf modules.d/aliases.conf modules.d/antivirus.conf modules.d/arc.conf modules.d/asn.conf modules.d/aws_s3.conf modules.d/bayes_expiry.conf modules.d/bimi.conf 
modules.d/chartable.conf modules.d/clickhouse.conf modules.d/contextal.conf modules.d/dcc.conf modules.d/dkim.conf modules.d/dkim_signing.conf modules.d/dmarc.conf modules.d/elastic.conf 
modules.d/emails.conf modules.d/external_relay.conf modules.d/external_services.conf modules.d/force_actions.conf modules.d/forged_recipients.conf modules.d/fuzzy_check.conf modules.d/gpt.conf 
modules.d/greylist.conf modules.d/hfilter.conf modules.d/histo
 ry_redis.conf modules.d/http_headers.conf modules.d/known_senders.conf modules.d/maillist.conf modules.d/metadata_exporter.conf modules.d/metric_exporter.conf modules.d/mid.conf 
modules.d/milter_headers.conf modules.d/mime_types.conf modules.d/multimap.conf modules.d/mx_check.conf modules.d/neural.conf modules.d/once_received.conf modules.d/p0f.conf modules.d/phishing.conf 
modules.d/ratelimit.conf modules.d/rbl.conf modules.d/redis.conf modules.d/regexp.conf modules.d/replies.conf modules.d/reputation.conf modules.d/rspamd_update.conf modules.d/spamassassin.conf 
modules.d/spamtrap.conf modules.d/spf.conf modules.d/surbl.conf modules.d/trie.conf modules.d/url_redirector.conf modules.d/whitelist.conf modules.local.d/module.conf.example options.inc 
override.d/module.conf.example rspamd.conf scores.d/content_group.conf scores.d/fuzzy_group.conf scores.d/headers_group.conf scores.d/hfilter_group.conf scores.d/mime_types_group.conf 
scores.d/mua_group.conf scores.d/phishing_group.conf scor
 es.d/policies_group.conf scores.d/rbl_group.conf scores.d/statistics_group.conf scores.d/subject_group.conf scores.d/surbl_group.conf scores.d/whitelist_group.conf settings.conf statistic.conf 
worker-controller.inc worker-fuzzy.inc worker-normal.inc worker-proxy.inc

Index: pkgsrc/mail/rspamd/distinfo
diff -u pkgsrc/mail/rspamd/distinfo:1.69 pkgsrc/mail/rspamd/distinfo:1.70
--- pkgsrc/mail/rspamd/distinfo:1.69    Tue Nov  4 11:42:45 2025
+++ pkgsrc/mail/rspamd/distinfo Sun Nov 16 21:39:50 2025
@@ -1,14 +1,13 @@
-$NetBSD: distinfo,v 1.69 2025/11/04 11:42:45 wiz Exp $
+$NetBSD: distinfo,v 1.70 2025/11/16 21:39:50 wiz Exp $
 
-BLAKE2s (rspamd-3.13.2.tar.gz) = e1ee82597db1781c24b0cc986f42586db7072f969511ad63144c0a33d7875cee
-SHA512 (rspamd-3.13.2.tar.gz) = ff8d9c59f6d0caabf563e2c07bff5adf8cb82dd0988d595900e0206a0315433c69ee425c50d4b5073c3d14f16615f11d7776986fe77b41daed7801e7522244ba
-Size (rspamd-3.13.2.tar.gz) = 6634719 bytes
+BLAKE2s (rspamd-3.14.0.tar.gz) = 5b2521edf0b76af873c8a22ec536da7765da8f5f4d48447846957ec1e6434a64
+SHA512 (rspamd-3.14.0.tar.gz) = 709a4d1d875492b1269c325f043b48fd6a9da137250514ca068d3a2ca87d7401e356f37f11a3d47b815032b72d363991779e239b0bf2017ed7cea13cedf3ffc5
+Size (rspamd-3.14.0.tar.gz) = 6720727 bytes
 SHA1 (patch-CMakeLists.txt) = 25a1264b573d5a1f7ff9a1ac7b8453c5d9cb0a06
 SHA1 (patch-cmake_Toolset.cmake) = fbc4027fedb4261ce913701ebbb32d8395bc7783
 SHA1 (patch-contrib_fpconv_fpconv.c) = b1ec2b07570674458e69020ccbf25f0374d894f6
 SHA1 (patch-lualib_rspamadm_dmarc__report.lua) = 93ccb04512dd84ea83de44c394571ef2bebe6bd2
 SHA1 (patch-src_libserver_symcache_symcache__impl.cxx) = 8a5c69ab343409427619a9cbc0dc080d548b9c53
 SHA1 (patch-src_libstat_backends_redis__backend.cxx) = 4c60287a574066a841c76081cd88512a57f0b27f
-SHA1 (patch-src_lua_lua__util.c) = 11c99335b6fe18f38c9dc713b65ac7554f6eaa8e
-SHA1 (patch-src_plugins_lua_dmarc.lua) = 972b78415e11bde2f8b224632291ba299d02656c
+SHA1 (patch-src_plugins_lua_dmarc.lua) = a10b16e53438ee2cde79bc45f35608571be1a581
 SHA1 (patch-src_rspamd.c) = 1903994d5970af57de9c5d522df3dd12576c8418

Index: pkgsrc/mail/rspamd/patches/patch-src_plugins_lua_dmarc.lua
diff -u pkgsrc/mail/rspamd/patches/patch-src_plugins_lua_dmarc.lua:1.2 pkgsrc/mail/rspamd/patches/patch-src_plugins_lua_dmarc.lua:1.3
--- pkgsrc/mail/rspamd/patches/patch-src_plugins_lua_dmarc.lua:1.2      Sun Nov  2 21:17:43 2025
+++ pkgsrc/mail/rspamd/patches/patch-src_plugins_lua_dmarc.lua  Sun Nov 16 21:39:50 2025
@@ -1,18 +1,18 @@
-$NetBSD: patch-src_plugins_lua_dmarc.lua,v 1.2 2025/11/02 21:17:43 wiz Exp $
+$NetBSD: patch-src_plugins_lua_dmarc.lua,v 1.3 2025/11/16 21:39:50 wiz Exp $
 
 os.date() require integer as second argument but get_date() returns
 float on NetBSD.  So, convert return value of get_date() to integer.
 
 This fix is provided from Yoshitaka Tokugawa <toku at tokugawa.org>.
 
---- src/plugins/lua/dmarc.lua.orig     2025-10-05 18:04:57.000000000 +0000
+--- src/plugins/lua/dmarc.lua.orig     2025-11-16 21:33:51.465412541 +0000
 +++ src/plugins/lua/dmarc.lua
-@@ -323,7 +323,7 @@ local function dmarc_validate_policy(tas
+@@ -296,7 +296,7 @@ local function dmarc_validate_policy(tas
  
-     -- Prepare and send redis report element
-     local period = os.date('%Y%m%d',
--      task:get_date({ format = 'connect', gmt = false }))
-+      math.floor(task:get_date({ format = 'connect', gmt = false })))
+       -- Prepare and send redis report element
+       local period = os.date('%Y%m%d',
+-        task:get_date({ format = 'connect', gmt = false }))
++        math.floor(task:get_date({ format = 'connect', gmt = false })))
  
-     -- Dmarc domain key must include dmarc domain, rua and period
-     local dmarc_domain_key = table.concat(
+       -- Dmarc domain key must include dmarc domain, rua and period
+       local dmarc_domain_key = table.concat(