Re: librewolf port

På onsdag 15. juli 2026 kl. 09:01, skrev Leah Rowe
<[email protected]>:

> Hi everyone,
>
> Just a heads up, I won't be working on the port this month; if someone
> else wants to keep it up to date for a few weeks that'll be great.
>
> Sorry for not getting in touch sooner. I felt it right to just say it
> how it is.
>
> I'll be back in a few weeks to maintain it again.
>


Hope to see you back soon, good luck with those weeks. Thanks for the
heads up.

> The patching pretty much just mirrors whatever goes on in the firefox
> port so it should be easy to maintain.
>
> --
> Company director, Minifree Ltd
> Registered in England, No. 9361826 | VAT No. GB202190462
> Registered Office: 19 Hilton Road, Canvey Island, Essex SS8 9QA, UK
>
>


Built/tested both 152.0.{4,5,6}-1 on current/amd64 with privsep.

// Did the updates, building, packaging and test/checks after changing
// version in Makefile for 152.0.6-1
$ cd /usr/ports/www/librewolf/ && make makesum patch update-patches build update-plist package test ; make port-lib-depends-check check-shlib-syms


===>  Regression tests for librewolf-152.0.6pl1
The regression tests require a running instance of X.
You will also need to set the environment variable DISPLAY
to point to an active X11 display and XAUTHORITY to point
to the appropriate .Xauthority file.
*** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:3099 '/usr/ports/pobj/librewolf-152.0.6pl1/build-amd64/.test_done': @exit 1)
*** Error 2 in /usr/ports/www/librewolf (/usr/ports/infrastructure/mk/bsd.port.mk:2722 'test': @lock=librewolf-152.0.6pl1;  export _LOCKS_HE...)

librewolf-152.0.6pl1(www/librewolf):
Extra:  Xtst.11
/usr/local/lib/librewolf/gmp-clearkey/0.1/libclearkey.so.1.0 --> /usr/ports/pobj/librewolf-152.0.6pl1/fake-amd64/usr/local/lib/librewolf/gmp-clearkey/0.1/libclearkey.so.1.0
No dynamic export changes
/usr/local/lib/librewolf/libgkcodecs.so.1.0 --> /usr/ports/pobj/librewolf-152.0.6pl1/fake-amd64/usr/local/lib/librewolf/libgkcodecs.so.1.0
No dynamic export changes
/usr/local/lib/librewolf/liblgpllibs.so.1.0 --> /usr/ports/pobj/librewolf-152.0.6pl1/fake-amd64/usr/local/lib/librewolf/liblgpllibs.so.1.0
No dynamic export changes
/usr/local/lib/librewolf/libmozavcodec.so.1.0 --> /usr/ports/pobj/librewolf-152.0.6pl1/fake-amd64/usr/local/lib/librewolf/libmozavcodec.so.1.0
No dynamic export changes
/usr/local/lib/librewolf/libmozavutil.so.1.0 --> /usr/ports/pobj/librewolf-152.0.6pl1/fake-amd64/usr/local/lib/librewolf/libmozavutil.so.1.0
No dynamic export changes
/usr/local/lib/librewolf/libmozgtk.so.1.0 --> /usr/ports/pobj/librewolf-152.0.6pl1/fake-amd64/usr/local/lib/librewolf/libmozgtk.so.1.0
No dynamic export changes
/usr/local/lib/librewolf/libmozinference.so.1.0 --> /usr/ports/pobj/librewolf-152.0.6pl1/fake-amd64/usr/local/lib/librewolf/libmozinference.so.1.0
No dynamic export changes
/usr/local/lib/librewolf/libmozsqlite3.so.1.0 --> /usr/ports/pobj/librewolf-152.0.6pl1/fake-amd64/usr/local/lib/librewolf/libmozsqlite3.so.1.0
No dynamic export changes
/usr/local/lib/librewolf/libmozwayland.so.1.0 --> /usr/ports/pobj/librewolf-152.0.6pl1/fake-amd64/usr/local/lib/librewolf/libmozwayland.so.1.0
No dynamic export changes
/usr/local/lib/librewolf/libxul.so.1.0 --> /usr/ports/pobj/librewolf-152.0.6pl1/fake-amd64/usr/local/lib/librewolf/libxul.so.1.0
No dynamic export changes
--
// Checks look fine or the same as before. No plist or patch changes
// like the 152.0.{4,5}-1 updates preceding it.


// Also did a sig and sha512 checks against manually downloaded
// .sig and sha512sum
$ cd /usr/ports/distfiles/librewolf/ && sq verify --signature-file=librewolf-152.0.6-1.source.tar.gz.sig librewolf-152.0.6-1.source.tar.gz ; sha512 -c librewolf-152.0.6-1.source.tar.gz.sha512sum
Authenticating 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 (LibreWolf Maintainers <[email protected]>) using the web of trust:
  Fully authenticated (120 of 120) 662E3CDD6FE329002D0CA5BB40339DD82B12EF16, LibreWolf Maintainers <[email protected]>
    ◯─┬ A629B716FBCB64C87477BC775525083E97A93CAA
    │ └ (Local Trust Root)
    │
    │  certified the following binding on 2026‑05‑13
    │
    └─┬ 662E3CDD6FE329002D0CA5BB40339DD82B12EF16
      └ LibreWolf Maintainers <[email protected]>

  Authenticated signature made by 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 (LibreWolf Maintainers <[email protected]>)

1 authenticated signature.
(SHA512) librewolf-152.0.6-1.source.tar.gz: OK
--

// Updated just fine.
# TRUSTED_PKG_PATH=/usr/ports/packages/amd64/all/ pkg_add -Dsnap -u librewolf
librewolf-152.0.5pl1->152.0.6pl1: ok
--

Ran 152.0.6-1 on sway for a few hours. Looks fine so far.

Patches these security vulnerabilities fixed upstream:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-62/
https://www.mozilla.org/en-US/security/advisories/mfsa2026-67/

I might of missed some mozconfig-openbsd changes or improvements that
would be preferable. Thoughts?

Please let me know if I forgot to attach or do something. Patch
attached in and with email for convenience.

Looks similar to recent diffs for www/mozilla-firefox.

Comments, concerns, testing, and/or okays welcome.

Hope this helps. May you all stay cool in this hot weather.
--
yaydn

♪ No, I'm a fish, come swim with me, come ♪

♪ Only that what's open can be true.
Full transparency is best for me and you. ♪


Index: Makefile
===================================================================
RCS file: /cvs/ports/www/librewolf/Makefile,v
diff -u -p -u -p -r1.4 Makefile
--- Makefile	25 Jun 2026 05:37:44 -0000	1.4
+++ Makefile	16 Jul 2026 05:39:16 -0000
@@ -13,7 +13,7 @@ ONLY_FOR_ARCHS =	amd64 aarch64 riscv64

 # If upstream adds revision number -x, it will become plx in OpenBSD, e.g.
 # librewolf-149.0.2-2 (upstream) becomes librewolf-149.0.2pl2 (patch level 2)
-MOZILLA_DIST_VERSION =	152.0.2-1
+MOZILLA_DIST_VERSION =	152.0.6-1
 MOZILLA_VERSION =	${MOZILLA_DIST_VERSION:C/-([0-9]+)$/pl\1/}

 MOZILLA_PROJECT =	librewolf
Index: distinfo
===================================================================
RCS file: /cvs/ports/www/librewolf/distinfo,v
diff -u -p -u -p -r1.4 distinfo
--- distinfo	25 Jun 2026 05:37:44 -0000	1.4
+++ distinfo	16 Jul 2026 05:39:16 -0000
@@ -1,2 +1,2 @@
-SHA256 (librewolf/librewolf-152.0.2-1.source.tar.gz) = LbAAYGrxrLUOhXpX90TSrkAyXQ2BprtrpkhCK5EUtiU=
-SIZE (librewolf/librewolf-152.0.2-1.source.tar.gz) = 1155807761
+SHA256 (librewolf/librewolf-152.0.6-1.source.tar.gz) = BBkwy3HutWW3Nv+ObQRDgTFGM7LDwrGatnS/Phn3+HA=
+SIZE (librewolf/librewolf-152.0.6-1.source.tar.gz) = 1156714022

Index: Makefile
===================================================================
RCS file: /cvs/ports/www/librewolf/Makefile,v
diff -u -p -u -p -r1.4 Makefile
--- Makefile	25 Jun 2026 05:37:44 -0000	1.4
+++ Makefile	16 Jul 2026 05:39:16 -0000
@@ -13,7 +13,7 @@ ONLY_FOR_ARCHS =	amd64 aarch64 riscv64
 
 # If upstream adds revision number -x, it will become plx in OpenBSD, e.g.
 # librewolf-149.0.2-2 (upstream) becomes librewolf-149.0.2pl2 (patch level 2)
-MOZILLA_DIST_VERSION =	152.0.2-1
+MOZILLA_DIST_VERSION =	152.0.6-1
 MOZILLA_VERSION =	${MOZILLA_DIST_VERSION:C/-([0-9]+)$/pl\1/}
 
 MOZILLA_PROJECT =	librewolf
Index: distinfo
===================================================================
RCS file: /cvs/ports/www/librewolf/distinfo,v
diff -u -p -u -p -r1.4 distinfo
--- distinfo	25 Jun 2026 05:37:44 -0000	1.4
+++ distinfo	16 Jul 2026 05:39:16 -0000
@@ -1,2 +1,2 @@
-SHA256 (librewolf/librewolf-152.0.2-1.source.tar.gz) = LbAAYGrxrLUOhXpX90TSrkAyXQ2BprtrpkhCK5EUtiU=
-SIZE (librewolf/librewolf-152.0.2-1.source.tar.gz) = 1155807761
+SHA256 (librewolf/librewolf-152.0.6-1.source.tar.gz) = BBkwy3HutWW3Nv+ObQRDgTFGM7LDwrGatnS/Phn3+HA=
+SIZE (librewolf/librewolf-152.0.6-1.source.tar.gz) = 1156714022