CVS commit: pkgsrc/www/freenginx

["Sergey A. Osokin" <osa%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   osa
Date:           Thu May 21 10:27:51 UTC 2026

Modified Files:
        pkgsrc/www/freenginx: Makefile distinfo options.mk
        pkgsrc/www/freenginx/patches: extra-patch-auto-quickjs

Log Message:
www/freenginx: update njs 0.9.8 -> 0.9.9

Bump PKGREVISION.

Sponsored by:   tipi.work

<ChangeLog>

nginx modules:

*) Security: a heap buffer overflow might occur in a worker process
   when the "js_fetch_proxy" directive value contains nginx
   variables derived from the client request ($http_*, $arg_*,
   $cookie_*, etc.) and the location's JS handler invokes
   ngx.fetch(). The issue was introduced in dea83189 (0.9.4).

*) Feature: added js_access directive.

*) Feature: added r.readRequestText(), r.readRequestArrayBuffer(),
   and r.readRequestJSON() - async methods that read the request
   body, available in js_access and js_content directives.

*) Feature: added r.readRequestForm() - async method that parses
   the request body submitted from an HTML form
   (application/x-www-form-urlencoded and multipart/form-data) and
   returns a structured accessor object.  The method is available
   in js_access and js_content directives.

*) Feature: added jsVarNames() method.  The method returns the
   names of variables declared with js_var.

Core:

*) Bugfix: fixed evaluation order of call arguments with side
   effects.  Previously, an earlier argument could observe a later
   argument's mutation, e.g. f(a, a = 2) passed 2 as both
   arguments.
   The issue was introduced in fd5e523f (0.9.7).

</ChangeLog>


To generate a diff of this commit:
cvs rdiff -u -r1.6 -r1.7 pkgsrc/www/freenginx/Makefile
cvs rdiff -u -r1.5 -r1.6 pkgsrc/www/freenginx/distinfo
cvs rdiff -u -r1.4 -r1.5 pkgsrc/www/freenginx/options.mk
cvs rdiff -u -r1.2 -r1.3 \
    pkgsrc/www/freenginx/patches/extra-patch-auto-quickjs

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/freenginx/Makefile
diff -u pkgsrc/www/freenginx/Makefile:1.6 pkgsrc/www/freenginx/Makefile:1.7
--- pkgsrc/www/freenginx/Makefile:1.6   Sun May 10 12:02:49 2026
+++ pkgsrc/www/freenginx/Makefile       Thu May 21 10:27:50 2026
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.6 2026/05/10 12:02:49 osa Exp $
+# $NetBSD: Makefile,v 1.7 2026/05/21 10:27:50 osa Exp $
 
 DISTNAME=      freenginx-1.30.0
-PKGREVISION=   2
+PKGREVISION=   3
 CATEGORIES=    www
 MASTER_SITES=  https://freenginx.org/download/
 DISTFILES=     ${DEFAULT_DISTFILES}

Index: pkgsrc/www/freenginx/distinfo
diff -u pkgsrc/www/freenginx/distinfo:1.5 pkgsrc/www/freenginx/distinfo:1.6
--- pkgsrc/www/freenginx/distinfo:1.5   Sun May 10 12:02:49 2026
+++ pkgsrc/www/freenginx/distinfo       Thu May 21 10:27:50 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.5 2026/05/10 12:02:49 osa Exp $
+$NetBSD: distinfo,v 1.6 2026/05/21 10:27:50 osa Exp $
 
 BLAKE2s (array-var-nginx-module-0.06.tar.gz) = fa6ad2a2ce3c3eba3f69287b224e9c01fcaca29a083394ab74f2f655d3e2138b
 SHA512 (array-var-nginx-module-0.06.tar.gz) = bc72158856a1be18a26ee04c6b5b0f0a20bcce688610a493bf31e2a133e7eb12e11f7c18197a09a72b1513f6a08348ee5281b9d5b84cf43603539040ebd23c26
@@ -42,9 +42,9 @@ Size (ngx_devel_kit-0.3.4.tar.gz) = 6647
 BLAKE2s (ngx_http_geoip2_module-3.4.tar.gz) = eb14ed670788d4cc46037719ebab29e1c0da53cadbb0da10198e76255d924273
 SHA512 (ngx_http_geoip2_module-3.4.tar.gz) = 18dea21e5ae2647bea1fc448058a1b773c936917245edef8d861d5e23ed92e9a3b1ec4ef43ffb2ece7b5899d787910adcf4fbd39f84d7e8d7c54759e2fee5b72
 Size (ngx_http_geoip2_module-3.4.tar.gz) = 8877 bytes
-BLAKE2s (njs-0.9.8.tar.gz) = 6bbc321260af040f35849904d52455e935071e586195cd812ca4c29c9ada53f1
-SHA512 (njs-0.9.8.tar.gz) = b42002e61569a9e850862f63c7f02f5061d34c8dcb35bedd69279af6bf76266ee93fce2d853c25588fe54119df5f2cfe1fb20b5351f60337650aa860b7b5c4ee
-Size (njs-0.9.8.tar.gz) = 967795 bytes
+BLAKE2s (njs-0.9.9.tar.gz) = 7e3bbbd6b7a2737fe4976ad21779c62992934bda85dc5856a043181f3bd84200
+SHA512 (njs-0.9.9.tar.gz) = 67b921c127fabb0ac0a8e53f63291af3227db0d2a9d67f32bfc853072403d9634f19ef736513a4007673fc98e1d3be8a5b3ac4832b04956852e43706891c38be
+Size (njs-0.9.9.tar.gz) = 994273 bytes
 BLAKE2s (openresty-echo-nginx-module-b0f344b_GH.tar.gz) = e1ed241e7d3e57024f666bc8489f83575664121a01ef9424b7d7bf4a1f8cdc3f
 SHA512 (openresty-echo-nginx-module-b0f344b_GH.tar.gz) = ef5150094fda342eec018273eb312b16fb7731474e96865374c98dafe7a507fcf9c7e5fd2766d3296afb11e0348e4b20a973d20303052a71bdec7c92bd088d38
 Size (openresty-echo-nginx-module-b0f344b_GH.tar.gz) = 53548 bytes

Index: pkgsrc/www/freenginx/options.mk
diff -u pkgsrc/www/freenginx/options.mk:1.4 pkgsrc/www/freenginx/options.mk:1.5
--- pkgsrc/www/freenginx/options.mk:1.4 Sun May 10 12:02:49 2026
+++ pkgsrc/www/freenginx/options.mk     Thu May 21 10:27:50 2026
@@ -1,4 +1,4 @@
-# $NetBSD: options.mk,v 1.4 2026/05/10 12:02:49 osa Exp $
+# $NetBSD: options.mk,v 1.5 2026/05/21 10:27:50 osa Exp $
 
 CODELOAD_SITE_GITHUB=          https://codeload.github.com/
 
@@ -387,7 +387,7 @@ PLIST.rtmp=         yes
 .endif
 
 .if !empty(PKG_OPTIONS:Mnginx-njs) || make(makesum) || make(mdi) || make(distclean)
-NJS_VERSION=           0.9.8
+NJS_VERSION=           0.9.9
 NJS_DISTNAME=          njs-${NJS_VERSION}
 NJS_DISTFILE=          ${NJS_DISTNAME}.tar.gz
 SITES.${NJS_DISTFILE}= -${MASTER_SITE_GITHUB:=nginx/njs/archive/}${NJS_VERSION}.tar.gz

Index: pkgsrc/www/freenginx/patches/extra-patch-auto-quickjs
diff -u pkgsrc/www/freenginx/patches/extra-patch-auto-quickjs:1.2 pkgsrc/www/freenginx/patches/extra-patch-auto-quickjs:1.3
--- pkgsrc/www/freenginx/patches/extra-patch-auto-quickjs:1.2   Sun May 10 12:02:49 2026
+++ pkgsrc/www/freenginx/patches/extra-patch-auto-quickjs       Thu May 21 10:27:50 2026
@@ -1,5 +1,5 @@
---- ../njs-0.9.8/auto/quickjs.orig     2026-02-07 10:37:18.963401856 -0500
-+++ ../njs-0.9.8/auto/quickjs  2026-02-07 10:38:27.281755406 -0500
+--- ../njs-0.9.9/auto/quickjs.orig     2026-02-07 10:37:18.963401856 -0500
++++ ../njs-0.9.9/auto/quickjs  2026-02-07 10:38:27.281755406 -0500
 @@ -42,9 +42,9 @@
      fi