CVS commit: pkgsrc/net/ngtcp2

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Nov  2 18:20:55 UTC 2026

Modified Files:
        pkgsrc/net/ngtcp2: Makefile PLIST distinfo

Log Message:
ngtcp2: updated to 1.26.0

1.26.0

doc: Add pseudo code and documentation for writing packets with GSO
build(deps): bump actions/stale from 10 to 11
Cleanup
No stream is closed just because STOP_SENDING is received
Restructure conn
Tighten long header packet length check for 32-bit platform
map: Remove key if resizing table fails
examples/server: Check QUIC version
Add callback for extendmaxdata
Update callback tests
Do not retire the fallback DCID if it is still used
Fix CUBIC CWND increment function
Call extend_max_data on handshake completion
Return STREAM_LIMIT error if the limit is violated by STREAMS_BLOCKED
Add ngtcp2_conn_tx_strmq_push_if_not
Send STREAM_DATA_BLOCKED/DATA_BLOCKED when data is actually blocked
Update doc
Simplify ngtcp2_conn_write_stream
Rework the incoming NEW_CONNECTION_ID validation
Assert that ngtcp2_conn_tls_early_data_rejected only called from client
Return NGTCP2_ERR_STREAM_STATE for RESET_STREAM against local uni stream
Remove the code that handles the case that is too large for UDP datagram
Rename offset in ngtcp2_data_blocked and ngtcp2_stream_data_blocked
Add transport parameters decode tests
Add more transport parameter decoding tests
Add wf test
Add test for resending NEW_TOKEN
Rtb test
Simplify conn test
GHA: Bump Ubuntu to 26.04
Examples rewrite tests with new munit cxx assertions
Bump clang-format to 21
GHA: Bump clang to 21
GHA: Bump ubuntu to 26.04
Use packaged ossl
GHA: Reduce openssl1/3 jobs
GHA: Reduce cmake jobs
GHA: Fix quic interop runner
Tweak the maximum value of ngtcp2_ratelim.burst
Update doc
Fix slow start pacing gain
Reset max UDP payload size when the peer's IP address changes
Check picotls encryption level
Check ossl encryption level
Server should send CONNECTION_CLOSE in earlier level
GHA: Use libressl for macos build
Add oss-scanner files
examples/client: Fix div by zero
examples/server: Do not truncate file sizes on 32-bit targets
Limit token length
Add 0 length STREAM frame filter to rtb_reclaim_on_retry
Fix max decryptable pkt num marker before first decryption
Penalize the short stream data write
Optimize ngtcp2_rtb_reclaim_on_pto
ngtcp2_conn_write_aggregate_pkt2: Check path to end aggregation
Bump libressl to v4.4.0
send_quantum should be at least single MTU
Use validated_path before it is gone
Graceful connection closure when 1 RTT key is installed more than once
Process 0RTT packet only after 0RTT and 1RTT keys are available
Limit client's PATH_RESPONSE to the unvalidated path
Explicitly verify path validation timeout
Make PATH_RESPONSE PTO eliciting
Reclaim connection level flow control window in stream close for RESET_STREAM
Refine ngtcp2_rob fragmentation threshold detection
Deal with the early HANDSHAKE_DONE from server
Improve map hasher
Rearm loss timer after it is cancelled by anti-amplification limit
Properly handle the case when client migrates back to the original path
Do not start pv round if no PATH_CHALLENGE is sent
Make ngtcp2_pkt_decode_version_cid return error on zero input
Keep congestion state if nothing has been delivered
Deal with TLS stack that does not bail out without transport params
Fix packet number decoding
Deal with the connection ID limit error
Reject ACK that acknowledges packet that is sent later
Remove rejection from handshake address because it is unreliable
Reset ppe pending state without WRITE_MORE flag set
Deal with stream shutdown in stop_sending callback
Revert "Stop buffering data after shutting downstream read"
Prevent a used DCID from being retired
Avoid abandoned DCID stranded
Return error when ngtcp2_conn_initiate_key_update called during handshake
Avoid DCID reuse
Derive initial key before version is negotiated
Prevent a used DCID from being retired in the another way
Do not call dcid_status callback until handshake completes
Revert "Make sure that NGTCP2_CONN_FLAG_PPE_PENDING is not leaked"
Do not block PATH_RESPONSE due to lack of DCID and credit
Reset CUBIC undo variables once a loss is confirmed
Fix conn_shutdown_stream_read
Tweak key update confirmation
Fix memory leak
Count decryption failures for Handshake and 0RTT keys
examples/server Fix handler leak
Install preferred address before reading server 0.5RTT packets
Ensure at least 1 byte frame is allocated on encoding
Count empty STREAM frame toward glitch counter
Do not clear PTO eliciting flag
Fix bug that lost_datagram is not called
crypto/ossl: Guard tx_level from 0RTT as well
hqclient: Remove streams on close
Fix 0RTT key not discarded with callback
Send the control frames in 0RTT
Revert "Count empty STREAM frame toward glitch counter"
Fix invalid qlog with PADDING only packet
Deal with out of memory after getting Connection ID
Remove problematic glitch counter for some frames
Write stream data thresh
Fix ngtcp2_vec_merge
Stop the path validation upfront
Simplify map insert
Bump tls deps
Fix heap overruns when malloc is only 4-byte aligned (like on ESP32)
examples: Deal with if_indextoname failure
GHA: Remove macos-15


To generate a diff of this commit:
cvs rdiff -u -r1.41 -r1.42 pkgsrc/net/ngtcp2/Makefile
cvs rdiff -u -r1.36 -r1.37 pkgsrc/net/ngtcp2/PLIST
cvs rdiff -u -r1.38 -r1.39 pkgsrc/net/ngtcp2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/ngtcp2/Makefile
diff -u pkgsrc/net/ngtcp2/Makefile:1.41 pkgsrc/net/ngtcp2/Makefile:1.42
--- pkgsrc/net/ngtcp2/Makefile:1.41     Sun Aug  2 07:19:39 2026
+++ pkgsrc/net/ngtcp2/Makefile  Mon Nov  2 18:20:55 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.41 2026/08/02 07:19:39 adam Exp $
+# $NetBSD: Makefile,v 1.42 2026/11/02 18:20:55 adam Exp $
 
-DISTNAME=      ngtcp2-1.25.0
+DISTNAME=      ngtcp2-1.26.0
 CATEGORIES=    net
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=ngtcp2/}
 GITHUB_RELEASE=        v${PKGVERSION_NOREV}

Index: pkgsrc/net/ngtcp2/PLIST
diff -u pkgsrc/net/ngtcp2/PLIST:1.36 pkgsrc/net/ngtcp2/PLIST:1.37
--- pkgsrc/net/ngtcp2/PLIST:1.36        Sun Aug  2 07:19:39 2026
+++ pkgsrc/net/ngtcp2/PLIST     Mon Nov  2 18:20:55 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.36 2026/08/02 07:19:39 adam Exp $
+@comment $NetBSD: PLIST,v 1.37 2026/11/02 18:20:55 adam Exp $
 include/ngtcp2/ngtcp2.h
 include/ngtcp2/ngtcp2_crypto.h
 include/ngtcp2/ngtcp2_crypto_ossl.h
@@ -10,11 +10,11 @@ lib/cmake/ngtcp2/ngtcp2Targets.cmake
 lib/libngtcp2.a
 lib/libngtcp2.so
 lib/libngtcp2.so.16
-lib/libngtcp2.so.16.11.0
+lib/libngtcp2.so.16.12.0
 lib/libngtcp2_crypto_ossl.a
 lib/libngtcp2_crypto_ossl.so
 lib/libngtcp2_crypto_ossl.so.0
-lib/libngtcp2_crypto_ossl.so.0.3.1
+lib/libngtcp2_crypto_ossl.so.0.3.2
 lib/pkgconfig/libngtcp2.pc
 lib/pkgconfig/libngtcp2_crypto_ossl.pc
 share/doc/ngtcp2/README.rst

Index: pkgsrc/net/ngtcp2/distinfo
diff -u pkgsrc/net/ngtcp2/distinfo:1.38 pkgsrc/net/ngtcp2/distinfo:1.39
--- pkgsrc/net/ngtcp2/distinfo:1.38     Sun Aug  2 07:19:39 2026
+++ pkgsrc/net/ngtcp2/distinfo  Mon Nov  2 18:20:55 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.38 2026/08/02 07:19:39 adam Exp $
+$NetBSD: distinfo,v 1.39 2026/11/02 18:20:55 adam Exp $
 
-BLAKE2s (ngtcp2-1.25.0.tar.xz) = 4370031d66eeea60860157defb9d6c40cb8e31711130219b30589f633847c195
-SHA512 (ngtcp2-1.25.0.tar.xz) = b5ebf0a4248a13b9231ac0b6353adbf6634a19bb57db3cf39947746c399ebc5085f780a540d246b7226bb994a920ad0cc9b755ebd9fe58c18a6838d50b6bc90e
-Size (ngtcp2-1.25.0.tar.xz) = 709136 bytes
+BLAKE2s (ngtcp2-1.26.0.tar.xz) = 3d433d8353871b0ff6676f1f30fc3e9098c32ccd590839cc30b4cec107d1c9b2
+SHA512 (ngtcp2-1.26.0.tar.xz) = 3f4ecf8720d3b43034b120111e804e453044d159fe1a69134a599260be80f6c600810679b2d285c271321e9e88b3ce127c6793d5c142a746278038d807208bbf
+Size (ngtcp2-1.26.0.tar.xz) = 733792 bytes