CVS commit: pkgsrc/net/haproxy

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Nov 21 09:25:15 UTC 2025

Modified Files:
        pkgsrc/net/haproxy: Makefile distinfo
        pkgsrc/net/haproxy/patches: patch-include_haproxy_proxy-t.h

Log Message:
haproxy: updated to 3.2.9

3.2.9
- MINOR: ssl/sample: expose ssl_*c_curve for AWS-LC
- Revert "BUG/MEDIUM: connections: permit to permanently remove an idle conn"
- BUG/MEDIUM: connection: do not reinsert a purgeable conn in idle list
- BUG/MEDIUM: connection/ssl: also fix the ssl_sock_io_cb() regarding idle list
- BUG/MINOR: config: Limit "tune.maxpollevents" parameter to 1000000
- BUG/MEDIUM: stick-tables: Make sure updates are seen as local
- BUG/MINOR: quic: close connection on CID alloc failure
- BUG/MINOR: acme: more explicit error when BIO_new_file()
- BUG/MEDIUM: acme: move from mt_list to a rwlock + ebmbtree
- BUG/MINOR: acme: can't override the default resolver
- BUG/MINOR: check: fix reuse-pool if MUX inherited from server
- DOC: configuration: add missing ssllib_name_startswith()
- DOC: configuration: add missing openssl_version predicates
- BUG/MEDIUM: stick-tables: Always return the good stksess from stktable_set_entry
- BUG/MINOR: stick-tables: Fix return value for __stksess_kill()
- MINOR: h1: h1_release() should return if it destroyed the connection
- BUG/MEDIUM: h1: prevent a crash on HTTP/2 upgrade
- BUG/MINOR: quic-be: backend SSL session reuse fix (OpenSSL 3.5)
- BUG/MEDIUM: mworker: signals inconsistencies during startup and reload
- BUG/MINOR: mworker: wrong signals during startup
- BUG/MINOR: ssl: remove dead code in ssl_sock_from_buf()
- BUG/MINOR: acme: alert when the map doesn't exist at startup
- DOC: acme: add details about the DNS-01 support
- DOC: acme: explain how to dump the certificates
- DOC: acme: configuring acme needs a crt file
- BUG/MEDIUM: queues: Don't forget to unlock the queue before exiting
- MINOR: muxes: Support an optional ALPN string when defining mux protocols
- MINOR: config: Do proto detection for listeners before checks about ALPN
- BUG/MEDIUM: config: Use the mux protocol ALPN by default for listeners if forced
- BUG/MEDIUM: proxy: do not align proxy_per_tgroup beyond allocator's capabilities
- ADMIN: haproxy-dump-certs: implement a certificate dumper
- ADMIN: dump-certs: don't update the file if it's up to date
- ADMIN: dump-certs: create files in a tmpdir
- ADMIN: dump-certs: fix lack of / in -p
- ADMIN: dump-certs: use same error format as haproxy
- ADMIN: dump-certs: let dry-run compare certificates
- DOC: http: document 413 response code


To generate a diff of this commit:
cvs rdiff -u -r1.145 -r1.146 pkgsrc/net/haproxy/Makefile
cvs rdiff -u -r1.136 -r1.137 pkgsrc/net/haproxy/distinfo
cvs rdiff -u -r1.3 -r1.4 \
    pkgsrc/net/haproxy/patches/patch-include_haproxy_proxy-t.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/haproxy/Makefile
diff -u pkgsrc/net/haproxy/Makefile:1.145 pkgsrc/net/haproxy/Makefile:1.146
--- pkgsrc/net/haproxy/Makefile:1.145   Sun Nov  9 12:53:47 2025
+++ pkgsrc/net/haproxy/Makefile Fri Nov 21 09:25:15 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.145 2025/11/09 12:53:47 adam Exp $
+# $NetBSD: Makefile,v 1.146 2025/11/21 09:25:15 adam Exp $
 
-DISTNAME=      haproxy-3.2.8
+DISTNAME=      haproxy-3.2.9
 CATEGORIES=    net www
 MASTER_SITES=  https://www.haproxy.org/download/${PKGVERSION_NOREV:R}/src/
 

Index: pkgsrc/net/haproxy/distinfo
diff -u pkgsrc/net/haproxy/distinfo:1.136 pkgsrc/net/haproxy/distinfo:1.137
--- pkgsrc/net/haproxy/distinfo:1.136   Sun Nov  9 12:53:47 2025
+++ pkgsrc/net/haproxy/distinfo Fri Nov 21 09:25:15 2025
@@ -1,10 +1,10 @@
-$NetBSD: distinfo,v 1.136 2025/11/09 12:53:47 adam Exp $
+$NetBSD: distinfo,v 1.137 2025/11/21 09:25:15 adam Exp $
 
-BLAKE2s (haproxy-3.2.8.tar.gz) = 2693d0c6f9b67afe5b12cb98e9fec70541cab6d28e6d1be0fe74be55096640ae
-SHA512 (haproxy-3.2.8.tar.gz) = 1640c31c942410f0e7c705bc1cd9f077023f73ea611e3222856089521c7e7dcf8533eef31680883798c0b18137894594dcf9e3f4e958abe2842342755ed68fe4
-Size (haproxy-3.2.8.tar.gz) = 5119011 bytes
+BLAKE2s (haproxy-3.2.9.tar.gz) = 2ddf0c57ed02bc3b6ae4aa06366f4031c3041899ac13a5279564da55b9d26349
+SHA512 (haproxy-3.2.9.tar.gz) = fd694adcdccbba54121e686f32cfb2281abfc97c6716835aa35013f05b85033c4967a056f02ecbc6ed613dda44d55373d2577e452079ba4e2bfa7b2fe0fff172
+Size (haproxy-3.2.9.tar.gz) = 5123457 bytes
 SHA1 (patch-Makefile) = 36c0e5d46b30d7b28fdb4b3fdbb4fe052fa8d850
-SHA1 (patch-include_haproxy_proxy-t.h) = 2006a3bd2cc95652b9e7d52fb85b3065788138cd
+SHA1 (patch-include_haproxy_proxy-t.h) = c040d4f8c6b72413779fa370d02ecd28f679fd0a
 SHA1 (patch-include_haproxy_queue-t.h) = bf2ea918a6d8ec3d3fb2f88b7b9303a695381d96
 SHA1 (patch-include_haproxy_queue.h) = eed5ea43212462134fb60b50c2a32e619e104d51
 SHA1 (patch-include_haproxy_server-t.h) = b9d0cc41f56d7103e4e016b1ce3dc7960e10008a

Index: pkgsrc/net/haproxy/patches/patch-include_haproxy_proxy-t.h
diff -u pkgsrc/net/haproxy/patches/patch-include_haproxy_proxy-t.h:1.3 pkgsrc/net/haproxy/patches/patch-include_haproxy_proxy-t.h:1.4
--- pkgsrc/net/haproxy/patches/patch-include_haproxy_proxy-t.h:1.3      Thu May 29 20:36:26 2025
+++ pkgsrc/net/haproxy/patches/patch-include_haproxy_proxy-t.h  Fri Nov 21 09:25:15 2025
@@ -1,8 +1,8 @@
-$NetBSD: patch-include_haproxy_proxy-t.h,v 1.3 2025/05/29 20:36:26 adam Exp $
+$NetBSD: patch-include_haproxy_proxy-t.h,v 1.4 2025/11/21 09:25:15 adam Exp $
 
 Avoid 'struct queue' conflict.
 
---- include/haproxy/proxy-t.h.orig     2025-05-28 14:35:14.000000000 +0000
+--- include/haproxy/proxy-t.h.orig     2025-11-21 06:44:17.000000000 +0000
 +++ include/haproxy/proxy-t.h
 @@ -302,7 +302,7 @@ struct error_snapshot {
  
@@ -11,5 +11,5 @@ Avoid 'struct queue' conflict.
 -      struct queue queue;
 +      struct haqueue queue;
        struct lbprm_per_tgrp lbprm;
- } THREAD_ALIGNED(64);
+ };