head	1.37;
access;
symbols
	pkgsrc-2026Q1:1.36.0.2
	pkgsrc-2026Q1-base:1.36
	pkgsrc-2025Q4:1.33.0.2
	pkgsrc-2025Q4-base:1.33
	pkgsrc-2025Q3:1.30.0.2
	pkgsrc-2025Q3-base:1.30
	pkgsrc-2025Q2:1.28.0.2
	pkgsrc-2025Q2-base:1.28
	pkgsrc-2025Q1:1.26.0.2
	pkgsrc-2025Q1-base:1.26
	pkgsrc-2024Q4:1.25.0.4
	pkgsrc-2024Q4-base:1.25
	pkgsrc-2024Q3:1.25.0.2
	pkgsrc-2024Q3-base:1.25
	pkgsrc-2024Q2:1.22.0.2
	pkgsrc-2024Q2-base:1.22
	pkgsrc-2024Q1:1.19.0.2
	pkgsrc-2024Q1-base:1.19
	pkgsrc-2023Q4:1.17.0.2
	pkgsrc-2023Q4-base:1.17
	pkgsrc-2023Q3:1.13.0.2
	pkgsrc-2023Q3-base:1.13
	pkgsrc-2023Q2:1.10.0.2
	pkgsrc-2023Q2-base:1.10
	pkgsrc-2023Q1:1.7.0.2
	pkgsrc-2023Q1-base:1.7
	pkgsrc-2022Q4:1.2.0.2
	pkgsrc-2022Q4-base:1.2;
locks; strict;
comment	@# @;


1.37
date	2026.04.08.05.45.07;	author bsiegert;	state Exp;
branches;
next	1.36;
commitid	FFJx9trbRMg7k7BG;

1.36
date	2026.03.06.21.08.01;	author bsiegert;	state Exp;
branches
	1.36.2.1;
next	1.35;
commitid	AQtIeR1eh5qvuXwG;

1.35
date	2026.02.24.08.45.35;	author bsiegert;	state Exp;
branches;
next	1.34;
commitid	IrpU9bGVDwSIHBvG;

1.34
date	2026.01.15.19.54.52;	author bsiegert;	state Exp;
branches;
next	1.33;
commitid	Zuo9UmMrkrU4HwqG;

1.33
date	2025.12.02.19.25.18;	author bsiegert;	state Exp;
branches;
next	1.32;
commitid	269raRGxaHJBWRkG;

1.32
date	2025.10.16.17.59.59;	author bsiegert;	state Exp;
branches;
next	1.31;
commitid	RAGpkHmyeYCUYOeG;

1.31
date	2025.10.08.06.54.35;	author bsiegert;	state Exp;
branches;
next	1.30;
commitid	5p46uH9RJXSFyJdG;

1.30
date	2025.09.06.13.17.08;	author bsiegert;	state Exp;
branches;
next	1.29;
commitid	cojusOdnRBFGHE9G;

1.29
date	2025.08.31.10.02.57;	author bsiegert;	state Exp;
branches;
next	1.28;
commitid	SdH7Ppgppxg5PR8G;

1.28
date	2025.06.06.14.01.36;	author bsiegert;	state Exp;
branches;
next	1.27;
commitid	JbNcx43ItkrmUPXF;

1.27
date	2025.04.05.18.51.25;	author bsiegert;	state Exp;
branches;
next	1.26;
commitid	5KX0APffNjdlvTPF;

1.26
date	2025.03.07.20.54.28;	author bsiegert;	state Exp;
branches
	1.26.2.1;
next	1.25;
commitid	rfTPfnLphAPl7bMF;

1.25
date	2024.09.06.18.48.55;	author bsiegert;	state Exp;
branches;
next	1.24;
commitid	sM1YPLxu37gUgMoF;

1.24
date	2024.08.11.15.57.09;	author bsiegert;	state Exp;
branches;
next	1.23;
commitid	Q02ZqKpOSdvP9qlF;

1.23
date	2024.07.03.06.59.30;	author bsiegert;	state Exp;
branches;
next	1.22;
commitid	clKUvbmZS6C5rmgF;

1.22
date	2024.06.13.13.47.07;	author bsiegert;	state Exp;
branches;
next	1.21;
commitid	JAoDOmAvI7TNkPdF;

1.21
date	2024.06.01.14.03.00;	author bsiegert;	state Exp;
branches;
next	1.20;
commitid	ffwNZJIDPPV5OhcF;

1.20
date	2024.04.05.19.14.08;	author bsiegert;	state Exp;
branches;
next	1.19;
commitid	eg3d1kDRSryvmZ4F;

1.19
date	2024.02.07.14.50.57;	author bsiegert;	state Exp;
branches;
next	1.18;
commitid	7gDVHFycBNsGLvXE;

1.18
date	2024.01.10.19.14.37;	author bsiegert;	state Exp;
branches;
next	1.17;
commitid	UV9PAPQbNGpZ7WTE;

1.17
date	2023.12.05.19.46.14;	author bsiegert;	state Exp;
branches;
next	1.16;
commitid	U47ig27ZDVHCsjPE;

1.16
date	2023.11.10.15.45.19;	author bsiegert;	state Exp;
branches;
next	1.15;
commitid	o3oFzjmXZZyOV4ME;

1.15
date	2023.10.29.14.48.19;	author bsiegert;	state Exp;
branches;
next	1.14;
commitid	jWdavz5Nyqs70xKE;

1.14
date	2023.10.15.12.04.29;	author bsiegert;	state Exp;
branches;
next	1.13;
commitid	ty8v2zrF0XsQxIIE;

1.13
date	2023.09.08.19.06.10;	author bsiegert;	state Exp;
branches
	1.13.2.1;
next	1.12;
commitid	c6lIkxn2TQcc40EE;

1.12
date	2023.08.26.16.31.36;	author bsiegert;	state Exp;
branches;
next	1.11;
commitid	g2P4Ffplg5e8DjCE;

1.11
date	2023.07.15.10.53.05;	author bsiegert;	state Exp;
branches;
next	1.10;
commitid	AvpTGe7iqymJ6TwE;

1.10
date	2023.05.05.19.37.36;	author bsiegert;	state Exp;
branches;
next	1.9;
commitid	QnXJTC5u3Ar9iOnE;

1.9
date	2023.04.27.19.18.28;	author nikita;	state Exp;
branches;
next	1.8;
commitid	NP0F02U4Re7brMmE;

1.8
date	2023.04.05.20.47.51;	author bsiegert;	state Exp;
branches;
next	1.7;
commitid	otfbJh3QwD1ZDXjE;

1.7
date	2023.03.08.20.31.11;	author nikita;	state Exp;
branches;
next	1.6;
commitid	jO8SBf1wxOK1smgE;

1.6
date	2023.03.08.13.38.50;	author bsiegert;	state Exp;
branches;
next	1.5;
commitid	zjDge6tGIbvHakgE;

1.5
date	2023.02.16.15.02.00;	author bsiegert;	state Exp;
branches;
next	1.4;
commitid	0nue7vmM3ce6hLdE;

1.4
date	2023.01.11.17.28.33;	author bsiegert;	state Exp;
branches;
next	1.3;
commitid	PPGNtzdC4VB0f99E;

1.3
date	2022.12.28.18.56.17;	author nikita;	state Exp;
branches;
next	1.2;
commitid	TJfT0jOCt4Dcam7E;

1.2
date	2022.12.08.16.14.17;	author bsiegert;	state Exp;
branches;
next	1.1;
commitid	OJV7UsBeEDopVL4E;

1.1
date	2022.11.05.13.42.58;	author nikita;	state Exp;
branches;
next	;
commitid	urDB4y3QqnnS8w0E;

1.36.2.1
date	2026.04.22.14.32.13;	author maya;	state Exp;
branches;
next	;
commitid	iDHLLUhOplH6NXCG;

1.26.2.1
date	2025.04.05.20.45.10;	author maya;	state Exp;
branches;
next	;
commitid	ts1uPa8RLrwE7UPF;

1.13.2.1
date	2023.10.22.18.44.16;	author spz;	state Exp;
branches;
next	1.13.2.2;
commitid	F5xCMl0v6Vo6xEJE;

1.13.2.2
date	2023.12.06.12.08.50;	author spz;	state Exp;
branches;
next	;
commitid	fLEciuttqVQKToPE;


desc
@@


1.37
log
@Revbump all Go packages after security update
@
text
@# $NetBSD: Makefile,v 1.36 2026/03/06 21:08:01 bsiegert Exp $

PKGNAME=	gopass-1.15.5
PKGREVISION=	28
DISTNAME=	gopass-${GITHUB_TAG}
CATEGORIES=	security
MASTER_SITES=	${MASTER_SITE_GITHUB:=gopasspw/}
GITHUB_PROJECT=	gopass
GITHUB_TAG=	v${PKGVERSION_NOREV}

MAINTAINER=	pkgsrc-users@@NetBSD.org
HOMEPAGE=	https://www.gopass.pw/
COMMENT=	Rewrite of the pass password manager in Go
LICENSE=	mit

EXTRACT_USING=	bsdtar

.include "go-modules.mk"

GO_BUILD_PATTERN=	.
CHECK_RELRO_SKIP+=	bin/gopass

INSTALLATION_DIRS+=	bin \
			share/bash-completion/completions \
			share/fish/vendor_completions.d \
			share/zsh/site-functions

do-build:
	${RUN} cd ${WRKSRC} && ${PKGSRC_SETENV} ${MAKE_ENV} ${GO} install -v ${GO_BUILD_PATTERN}

post-build:
	cd ${WRKDIR}/.gopath && \
	./bin/gopass completion bash > ${WRKSRC}/completion.bash && \
	./bin/gopass completion fish > ${WRKSRC}/completion.fish && \
	./bin/gopass completion zsh  > ${WRKSRC}/completion.zsh

do-install:
	${INSTALL_PROGRAM} ${WRKDIR}/.gopath/bin/* ${DESTDIR}${PREFIX}/bin
	${INSTALL_DATA} ${WRKSRC}/completion.bash \
			${DESTDIR}${PREFIX}/share/bash-completion/completions/gopass
	${INSTALL_DATA} ${WRKSRC}/completion.fish \
			${DESTDIR}${PREFIX}/share/fish/vendor_completions.d/gopass.fish
	${INSTALL_DATA} ${WRKSRC}/completion.zsh \
			${DESTDIR}${PREFIX}/share/zsh/site-functions/_gopass

.include "../../lang/go/go-module.mk"
.include "../../mk/bsd.pkg.mk"
@


1.36
log
@Revbump all Go packages after go126 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.35 2026/02/24 08:45:35 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	27
@


1.36.2.1
log
@Revbump all Go packages after go126 security fix
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.36 2026/03/06 21:08:01 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	28
@


1.35
log
@Revbump all Go packages after default version bump
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.34 2026/01/15 19:54:52 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	26
@


1.34
log
@Revbump all Go packages after go125 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.33 2025/12/02 19:25:18 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	25
@


1.33
log
@Revbump all Go packages after go125 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.32 2025/10/16 17:59:59 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	24
@


1.32
log
@Revbump all Go packages after go125 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.31 2025/10/08 06:54:35 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	23
@


1.31
log
@Revbump all Go packages after go125 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.30 2025/09/06 13:17:08 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	22
@


1.30
log
@Revbump all Go packages after go125 security update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.29 2025/08/31 10:02:57 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	21
@


1.29
log
@Revbump all Go packages after moving to go125
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.28 2025/06/06 14:01:36 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	20
@


1.28
log
@Revbump all Go packages after go124 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.27 2025/04/05 18:51:25 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	19
@


1.27
log
@Belated revbump for all Go packages after go124 update

I forgot to do the revbump again, sorry for doing it so late after the
update.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.26 2025/03/07 20:54:28 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	18
@


1.26
log
@Revbump all Go packages after go124 update

I realize I forgot to do the revbump after updating the default Go
version to 1.24, so let's do that now.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.25 2024/09/06 18:48:55 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	17
@


1.26.2.1
log
@Pulup ticket #6952 - Update PKGREVISION for all Go packages.

Go had a security update to one of the builtin libraries.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.26 2025/03/07 20:54:28 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	18
@


1.25
log
@Revbump all Go packages after go122 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.24 2024/08/11 15:57:09 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	16
@


1.24
log
@Revbump all Go packages after update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.23 2024/07/03 06:59:30 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	15
@


1.23
log
@Revbump all Go packages after go122 security update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.22 2024/06/13 13:47:07 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	14
@


1.22
log
@Revbump all Go packages after go122 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.21 2024/06/01 14:03:00 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	13
@


1.21
log
@Revbump all Go packages, default Go version is now 1.22.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.20 2024/04/05 19:14:08 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	12
@


1.20
log
@Revbump all Go packages after go121 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.19 2024/02/07 14:50:57 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	11
@


1.19
log
@Revbump all Go packages after go121 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.18 2024/01/10 19:14:37 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	10
@


1.18
log
@Revbump all Go packages after go121 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.17 2023/12/05 19:46:14 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	9
@


1.17
log
@Revbump all Go packages after go121 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.16 2023/11/10 15:45:19 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	8
@


1.16
log
@Revbump all Go packages after go121 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.15 2023/10/29 14:48:19 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	7
@


1.15
log
@Revbump all Go packages because go121 is now the default
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.14 2023/10/15 12:04:29 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	6
@


1.14
log
@Revbump all Go packages after go120 security update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13 2023/09/08 19:06:10 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	5
@


1.13
log
@Revbump all Go packages after go120 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.12 2023/08/26 16:31:36 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	4
@


1.13.2.1
log
@Pullup ticket #6812 - requested by bsiegert
lang/go120: security update
lang/go: version info update
audio/gospt: RevBump
audio/ymuse: RevBump
chat/coyim: RevBump
chat/gomuks: RevBump
chat/matterircd: RevBump
chat/senpai: RevBump
chat/ssh-chat: RevBump
databases/go-ldap: RevBump
databases/influxdb: RevBump
databases/mongo-tools: RevBump
databases/mysqld_exporter: RevBump
databases/postgres_exporter: RevBump
databases/prometheus: RevBump
databases/promscale: RevBump
databases/sqlc: RevBump
databases/timescaledb-tune: RevBump
devel/asmfmt: RevBump
devel/conftest: RevBump
devel/errcheck: RevBump
devel/fq: RevBump
devel/git-lfs: RevBump
devel/go-ed25519: RevBump
devel/go-gocode: RevBump
devel/go-golang-lru: RevBump
devel/go-gopkgs: RevBump
devel/go-goptlib: RevBump
devel/go-goreturns: RevBump
devel/go-gox: RevBump
devel/go-impl: RevBump
devel/go-logrus: RevBump
devel/go-nbreader: RevBump
devel/go-pty: RevBump
devel/go-review: RevBump
devel/go-siphash: RevBump
devel/go-staticcheck: RevBump
devel/go-swagger: RevBump
devel/go-sys: RevBump
devel/go-tools: RevBump
devel/go-wire: RevBump
devel/go-xerrors: RevBump
devel/golangci-lint: RevBump
devel/golint: RevBump
devel/gomodifytags: RevBump
devel/gopls: RevBump
devel/goredo: RevBump
devel/gotags: RevBump
devel/gotests: RevBump
devel/govulncheck: RevBump
devel/lazygit: RevBump
devel/mob: RevBump
devel/nancy: RevBump
devel/opa: RevBump
devel/packr: RevBump
devel/reftools: RevBump
devel/regal: RevBump
devel/revive: RevBump
devel/shfmt: RevBump
devel/syft: RevBump
editors/micro: RevBump
filesystems/kubo: RevBump
graphics/gif2png: RevBump
lang/joker: RevBump
mail/opensmtpd-filter-rspamd: RevBump
mail/opensmtpd-filter-senderscore: RevBump
mail/postforward: RevBump
meta-pkgs/bulk-test-essential: RevBump
misc/exercism: RevBump
net/amazon-ecs-cli: RevBump
net/amfora: RevBump
net/bombadillo: RevBump
net/croc: RevBump
net/czds: RevBump
net/dnscontrol: RevBump
net/dnscrypt-proxy2: RevBump
net/gh: RevBump
net/go-dnstap: RevBump
net/go-net: RevBump
net/go-websocket: RevBump
net/gunison: RevBump
net/gvproxy: RevBump
net/hub: RevBump
net/ipget: RevBump
net/kubectl: RevBump
net/libquic: RevBump
net/mangos: RevBump
net/nats-server: RevBump
net/obfs4proxy: RevBump
net/rclone: RevBump
net/stern: RevBump
net/syncthing: RevBump
net/terraform-provider-archive: RevBump
net/terraform-provider-aws: RevBump
net/terraform-provider-kubernetes: RevBump
net/terraform-provider-local: RevBump
net/terraform-provider-null: RevBump
net/terraform-provider-random: RevBump
net/terraform-provider-template: RevBump
net/terraform-provider-vultr: RevBump
net/terraform: RevBump
net/tut: RevBump
net/vultr-cli: RevBump
pkgtools/pkglint: RevBump
security/2fa: RevBump
security/age: RevBump
security/amass: RevBump
security/authelia: RevBump
security/cfssl: RevBump
security/dnsx: RevBump
security/go-asn1-ber: RevBump
security/go-crypto: RevBump
security/go-getpass: RevBump
security/go-mkcert: RevBump
security/gopass: RevBump
security/httpx: RevBump
security/nuclei: RevBump
security/oauth2c: RevBump
security/osv-scanner: RevBump
security/subfinder: RevBump
security/tlsx: RevBump
security/trufflehog: RevBump
security/vault: RevBump
shells/elvish: RevBump
shells/oh-my-posh: RevBump
sysutils/beats: RevBump
sysutils/consul: RevBump
sysutils/direnv: RevBump
sysutils/fzf: RevBump
sysutils/goreman: RevBump
sysutils/lf: RevBump
sysutils/node_exporter: RevBump
sysutils/packer: RevBump
sysutils/podman: RevBump
sysutils/restic: RevBump
sysutils/vultr: RevBump
textproc/glow: RevBump
textproc/go-kr-text: RevBump
textproc/go-md2man: RevBump
textproc/go-mmark: RevBump
textproc/go-text: RevBump
textproc/miller: RevBump
textproc/sift: RevBump
www/apisprout: RevBump
www/caddy: RevBump
www/gitea: RevBump
www/go-ffuf: RevBump
www/go-minify: RevBump
www/gotosocial: RevBump
www/grafana: RevBump
www/hugo: RevBump
www/jira-cli: RevBump
www/mycorrhiza: RevBump
www/pup: RevBump
www/restish: RevBump
www/shoutrrr: RevBump

Revisions pulled up:
- lang/go/version.mk                                            1.190,1.192
- lang/go120/PLIST                                              1.9
- lang/go120/distinfo                                           1.10-1.11

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   bsiegert
   Date:           Sat Oct  7 18:09:35 UTC 2023

   Modified Files:
           pkgsrc/lang/go: version.mk
           pkgsrc/lang/go120: PLIST distinfo

   Log Message:
   go120: update to 1.20.9 (security).

   cmd/go: line directives allows arbitrary execution during build

   "//line" directives can be used to bypass the restrictions on "//go:cgo_"
   directives, allowing blocked linker and compiler flags to be passed during
   compliation. This can result in unexpected execution of arbitrary code when
   running "go build". The line directive requires the absolute path of the file in
   which the directive lives, which makes exploting this issue significantly more
   complex.

   This is CVE-2023-39323 and Go issue https://go.dev/issue/63211.

   View the release notes for more information:
   https://go.dev/doc/devel/release#go1.20.9

   To generate a diff of this commit:
   cvs rdiff -u -r1.189 -r1.190 pkgsrc/lang/go/version.mk
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/lang/go120/PLIST
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/go120/distinfo

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   bsiegert
   Date:           Sun Oct 15 11:02:08 UTC 2023

   Modified Files:
           pkgsrc/lang/go: version.mk
           pkgsrc/lang/go120: distinfo

   Log Message:
   go120: update to 1.20.10 (security)

   net/http: rapid stream resets can cause excessive work

   A malicious HTTP/2 client which rapidly creates requests and
   immediately resets them can cause excessive server resource consumption.
   While the total number of requests is bounded to the
   http2.Server.MaxConcurrentStreams setting, resetting an in-progress
   request allows the attacker to create a new request while the existing
   one is still executing.

   HTTP/2 servers now bound the number of simultaneously executing
   handler goroutines to the stream concurrency limit. New requests
   arriving when at the limit (which can only happen after the client
   has reset an existing, in-flight request) will be queued until a
   handler exits. If the request queue grows too large, the server
   will terminate the connection.

   This issue is also fixed in golang.org/x/net/http2 v0.17.0,
   for users manually configuring HTTP/2.

   The default stream concurrency limit is 250 streams (requests)
   per HTTP/2 connection. This value may be adjusted using the
   golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams
   setting and the ConfigureServer function.

   This is CVE-2023-39325 and Go issue https://go.dev/issue/63417.
   This is also tracked by CVE-2023-44487.

   To generate a diff of this commit:
   cvs rdiff -u -r1.191 -r1.192 pkgsrc/lang/go/version.mk
   cvs rdiff -u -r1.10 -r1.11 pkgsrc/lang/go120/distinfo
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13 2023/09/08 19:06:10 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	5
@


1.13.2.2
log
@Pullup ticket #6822 - requested by bsiegert
lang/go120: security update
lang/go121: security update
lang/go: metadata update
audio/gospt: revision bump
audio/ymuse: revision bump
chat/coyim: revision bump
chat/gomuks: revision bump
chat/matterircd: revision bump
chat/senpai: revision bump
chat/ssh-chat: revision bump
databases/go-ldap: revision bump
databases/influxdb: revision bump
databases/mongo-tools: revision bump
databases/mysqld_exporter: revision bump
databases/postgres_exporter: revision bump
databases/prometheus: revision bump
databases/promscale: revision bump
databases/sqlc: revision bump
databases/timescaledb-tune: revision bump
devel/asmfmt: revision bump
devel/conftest: revision bump
devel/errcheck: revision bump
devel/fq: revision bump
devel/git-lfs: revision bump
devel/go-ed25519: revision bump
devel/go-gocode: revision bump
devel/go-golang-lru: revision bump
devel/go-gopkgs: revision bump
devel/go-goptlib: revision bump
devel/go-goreturns: revision bump
devel/go-gox: revision bump
devel/go-impl: revision bump
devel/go-logrus: revision bump
devel/go-nbreader: revision bump
devel/go-pty: revision bump
devel/go-review: revision bump
devel/go-siphash: revision bump
devel/go-staticcheck: revision bump
devel/go-swagger: revision bump
devel/go-sys: revision bump
devel/go-tools: revision bump
devel/go-wire: revision bump
devel/go-xerrors: revision bump
devel/golangci-lint: revision bump
devel/golint: revision bump
devel/gomodifytags: revision bump
devel/gopls: revision bump
devel/goredo: revision bump
devel/gotags: revision bump
devel/gotests: revision bump
devel/govulncheck: revision bump
devel/lazygit: revision bump
devel/mob: revision bump
devel/nancy: revision bump
devel/opa: revision bump
devel/packr: revision bump
devel/reftools: revision bump
devel/regal: revision bump
devel/revive: revision bump
devel/shfmt: revision bump
devel/syft: revision bump
editors/micro: revision bump
filesystems/kubo: revision bump
graphics/gif2png: revision bump
lang/joker: revision bump
mail/opensmtpd-filter-rspamd: revision bump
mail/opensmtpd-filter-senderscore: revision bump
mail/postforward: revision bump
misc/exercism: revision bump
net/amazon-ecs-cli: revision bump
net/amfora: revision bump
net/bombadillo: revision bump
net/croc: revision bump
net/czds: revision bump
net/dnscontrol: revision bump
net/dnscrypt-proxy2: revision bump
net/gh: revision bump
net/go-dnstap: revision bump
net/go-net: revision bump
net/go-websocket: revision bump
net/gunison: revision bump
net/gvproxy: revision bump
net/hub: revision bump
net/ipget: revision bump
net/kubectl: revision bump
net/libquic: revision bump
net/mangos: revision bump
net/nats-server: revision bump
net/obfs4proxy: revision bump
net/rclone: revision bump
net/stern: revision bump
net/syncthing: revision bump
net/terraform-provider-archive: revision bump
net/terraform-provider-aws: revision bump
net/terraform-provider-kubernetes: revision bump
net/terraform-provider-local: revision bump
net/terraform-provider-null: revision bump
net/terraform-provider-random: revision bump
net/terraform-provider-template: revision bump
net/terraform-provider-vultr: revision bump
net/terraform: revision bump
net/tut: revision bump
net/vultr-cli: revision bump
pkgtools/pkglint: revision bump
security/2fa: revision bump
security/age: revision bump
security/amass: revision bump
security/authelia: revision bump
security/cfssl: revision bump
security/dnsx: revision bump
security/go-asn1-ber: revision bump
security/go-crypto: revision bump
security/go-getpass: revision bump
security/go-mkcert: revision bump
security/gopass: revision bump
security/httpx: revision bump
security/nuclei: revision bump
security/oauth2c: revision bump
security/osv-scanner: revision bump
security/subfinder: revision bump
security/tlsx: revision bump
security/trufflehog: revision bump
security/vault: revision bump
shells/elvish: revision bump
shells/oh-my-posh: revision bump
sysutils/beats: revision bump
sysutils/consul: revision bump
sysutils/direnv: revision bump
sysutils/fzf: revision bump
sysutils/goreman: revision bump
sysutils/lf: revision bump
sysutils/node_exporter: revision bump
sysutils/packer: revision bump
sysutils/podman: revision bump
sysutils/restic: revision bump
sysutils/vultr: revision bump
textproc/glow: revision bump
textproc/go-kr-text: revision bump
textproc/go-md2man: revision bump
textproc/go-mmark: revision bump
textproc/go-text: revision bump
textproc/miller: revision bump
textproc/sift: revision bump
www/apisprout: revision bump
www/caddy: revision bump
www/gitea: revision bump
www/go-ffuf: revision bump
www/go-minify: revision bump
www/gotosocial: revision bump
www/grafana: revision bump
www/hugo: revision bump
www/jira-cli: revision bump
www/mycorrhiza: revision bump
www/pup: revision bump
www/restish: revision bump
www/shoutrrr: revision bump

Revisions pulled up:
- lang/go/version.mk                                            1.194
- lang/go120/PLIST                                              1.10
- lang/go120/distinfo                                           1.12
- lang/go121/PLIST                                              1.4
- lang/go121/distinfo                                           1.4
- audio/gospt/Makefile                       by patch
- audio/ymuse/Makefile                       by patch
- chat/coyim/Makefile                        by patch
- chat/gomuks/Makefile                       by patch
- chat/matterircd/Makefile                   by patch
- chat/senpai/Makefile                       by patch
- chat/ssh-chat/Makefile                     by patch
- databases/go-ldap/Makefile                 by patch
- databases/influxdb/Makefile                by patch
- databases/mongo-tools/Makefile             by patch
- databases/mysqld_exporter/Makefile         by patch
- databases/postgres_exporter/Makefile       by patch
- databases/prometheus/Makefile              by patch
- databases/promscale/Makefile               by patch
- databases/sqlc/Makefile                    by patch
- databases/timescaledb-tune/Makefile        by patch
- devel/asmfmt/Makefile                      by patch
- devel/conftest/Makefile                    by patch
- devel/errcheck/Makefile                    by patch
- devel/fq/Makefile                          by patch
- devel/git-lfs/Makefile                     by patch
- devel/go-ed25519/Makefile                  by patch
- devel/go-gocode/Makefile                   by patch
- devel/go-golang-lru/Makefile               by patch
- devel/go-gopkgs/Makefile                   by patch
- devel/go-goptlib/Makefile                  by patch
- devel/go-goreturns/Makefile                by patch
- devel/go-gox/Makefile                      by patch
- devel/go-impl/Makefile                     by patch
- devel/go-logrus/Makefile                   by patch
- devel/go-nbreader/Makefile                 by patch
- devel/go-pty/Makefile                      by patch
- devel/go-review/Makefile                   by patch
- devel/go-siphash/Makefile                  by patch
- devel/go-staticcheck/Makefile              by patch
- devel/go-swagger/Makefile                  by patch
- devel/go-sys/Makefile                      by patch
- devel/go-tools/Makefile                    by patch
- devel/go-wire/Makefile                     by patch
- devel/go-xerrors/Makefile                  by patch
- devel/golangci-lint/Makefile               by patch
- devel/golint/Makefile                      by patch
- devel/gomodifytags/Makefile                by patch
- devel/gopls/Makefile                       by patch
- devel/goredo/Makefile                      by patch
- devel/gotags/Makefile                      by patch
- devel/gotests/Makefile                     by patch
- devel/govulncheck/Makefile                 by patch
- devel/lazygit/Makefile                     by patch
- devel/mob/Makefile                         by patch
- devel/nancy/Makefile                       by patch
- devel/opa/Makefile                         by patch
- devel/packr/Makefile                       by patch
- devel/reftools/Makefile                    by patch
- devel/regal/Makefile                       by patch
- devel/revive/Makefile                      by patch
- devel/shfmt/Makefile                       by patch
- devel/syft/Makefile                        by patch
- editors/micro/Makefile                     by patch
- filesystems/kubo/Makefile                  by patch
- graphics/gif2png/Makefile                  by patch
- lang/joker/Makefile                        by patch
- mail/opensmtpd-filter-rspamd/Makefile      by patch
- mail/opensmtpd-filter-senderscore/Makefile by patch
- mail/postforward/Makefile                  by patch
- misc/exercism/Makefile                     by patch
- net/amazon-ecs-cli/Makefile                by patch
- net/amfora/Makefile                        by patch
- net/bombadillo/Makefile                    by patch
- net/croc/Makefile                          by patch
- net/czds/Makefile                          by patch
- net/dnscontrol/Makefile                    by patch
- net/dnscrypt-proxy2/Makefile               by patch
- net/gh/Makefile                            by patch
- net/go-dnstap/Makefile                     by patch
- net/go-net/Makefile                        by patch
- net/go-websocket/Makefile                  by patch
- net/gunison/Makefile                       by patch
- net/gvproxy/Makefile                       by patch
- net/hub/Makefile                           by patch
- net/ipget/Makefile                         by patch
- net/kubectl/Makefile                       by patch
- net/libquic/Makefile                       by patch
- net/mangos/Makefile                        by patch
- net/nats-server/Makefile                   by patch
- net/obfs4proxy/Makefile                    by patch
- net/rclone/Makefile                        by patch
- net/stern/Makefile                         by patch
- net/syncthing/Makefile                     by patch
- net/terraform-provider-archive/Makefile    by patch
- net/terraform-provider-aws/Makefile        by patch
- net/terraform-provider-kubernetes/Makefile by patch
- net/terraform-provider-local/Makefile      by patch
- net/terraform-provider-null/Makefile       by patch
- net/terraform-provider-random/Makefile     by patch
- net/terraform-provider-template/Makefile   by patch
- net/terraform-provider-vultr/Makefile      by patch
- net/terraform/Makefile                     by patch
- net/tut/Makefile                           by patch
- net/vultr-cli/Makefile                     by patch
- pkgtools/pkglint/Makefile                  by patch
- security/2fa/Makefile                      by patch
- security/age/Makefile                      by patch
- security/amass/Makefile                    by patch
- security/authelia/Makefile                 by patch
- security/cfssl/Makefile                    by patch
- security/dnsx/Makefile                     by patch
- security/go-asn1-ber/Makefile              by patch
- security/go-crypto/Makefile                by patch
- security/go-getpass/Makefile               by patch
- security/go-mkcert/Makefile                by patch
- security/gopass/Makefile                   by patch
- security/httpx/Makefile                    by patch
- security/nuclei/Makefile                   by patch
- security/oauth2c/Makefile                  by patch
- security/osv-scanner/Makefile              by patch
- security/subfinder/Makefile                by patch
- security/tlsx/Makefile                     by patch
- security/trufflehog/Makefile               by patch
- security/vault/Makefile                    by patch
- shells/elvish/Makefile                     by patch
- shells/oh-my-posh/Makefile                 by patch
- sysutils/beats/Makefile                    by patch
- sysutils/consul/Makefile                   by patch
- sysutils/direnv/Makefile                   by patch
- sysutils/fzf/Makefile                      by patch
- sysutils/goreman/Makefile                  by patch
- sysutils/lf/Makefile                       by patch
- sysutils/node_exporter/Makefile            by patch
- sysutils/packer/Makefile                   by patch
- sysutils/podman/Makefile                   by patch
- sysutils/restic/Makefile                   by patch
- sysutils/vultr/Makefile                    by patch
- textproc/glow/Makefile                     by patch
- textproc/go-kr-text/Makefile               by patch
- textproc/go-md2man/Makefile                by patch
- textproc/go-mmark/Makefile                 by patch
- textproc/go-text/Makefile                  by patch
- textproc/miller/Makefile                   by patch
- textproc/sift/Makefile                     by patch
- www/apisprout/Makefile                     by patch
- www/caddy/Makefile                         by patch
- www/gitea/Makefile                         by patch
- www/go-ffuf/Makefile                       by patch
- www/go-minify/Makefile                     by patch
- www/gotosocial/Makefile                    by patch
- www/grafana/Makefile                       by patch
- www/hugo/Makefile                          by patch
- www/jira-cli/Makefile                      by patch
- www/mycorrhiza/Makefile                    by patch
- www/pup/Makefile                           by patch
- www/restish/Makefile                       by patch
- www/shoutrrr/Makefile                      by patch

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	bsiegert
   Date:		Fri Nov 10 15:39:34 UTC 2023

   Modified Files:
   	pkgsrc/lang/go: version.mk
   	pkgsrc/lang/go120: PLIST distinfo
   	pkgsrc/lang/go121: PLIST distinfo

   Log Message:
   Update go120 to 1.20.11 and go121 to 1.21.4 (security).

   These minor releases include 2 security fixes following the security policy:

   - path/filepath: recognize \??\ as a Root Local Device path prefix.

    On Windows, a path beginning with \??\ is a Root Local Device path equivalent
    to a path beginning with \\?\. Paths with a \??\ prefix may be used to access
    arbitrary locations on the system. For example, the path \??\c:\x is
    equivalent to the more common path c:\x.

    The filepath package did not recognize paths with a \??\ prefix as special.

    Clean could convert a rooted path such as \a\..\??\b into
    the root local device path \??\b. It will now convert this
    path into .\??\b.

    IsAbs did not report paths beginning with \??\ as absolute.
    It now does so.

    VolumeName now reports the \??\ prefix as a volume name.

    Join(`\`, `??`, `b`) could convert a seemingly innocent
    sequence of path elements into the root local device path
    \??\b. It will now convert this to \.\??\b.

    This is CVE-2023-45283 and https://go.dev/issue/63713.

   - path/filepath: recognize device names with trailing spaces and superscripts

    The IsLocal function did not correctly detect reserved names in some cases:

    reserved names followed by spaces, such as "COM1 ".
    "COM" or "LPT" followed by a superscript 1, 2, or 3.
    IsLocal now correctly reports these names as non-local.

    This is CVE-2023-45284 and https://go.dev/issue/63713.


   To generate a diff of this commit:
   cvs rdiff -u -r1.193 -r1.194 pkgsrc/lang/go/version.mk
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/go120/PLIST
   cvs rdiff -u -r1.11 -r1.12 pkgsrc/lang/go120/distinfo
   cvs rdiff -u -r1.3 -r1.4 pkgsrc/lang/go121/PLIST pkgsrc/lang/go121/distinfo
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13.2.1 2023/10/22 18:44:16 spz Exp $
d4 1
a4 1
PKGREVISION=	6
@


1.12
log
@Revbump all Go packages after go120 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.11 2023/07/15 10:53:05 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	3
@


1.11
log
@Revbump all Go packages after go120 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.10 2023/05/05 19:37:36 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	2
@


1.10
log
@Revbump all Go packages after go120 security update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.9 2023/04/27 19:18:28 nikita Exp $
d4 1
a4 1
PKGREVISION=	1
@


1.9
log
@gopass: update to version 1.15.5

Changelog:

1.15.5 / 2023-04-07

    Use Go1.20 (#2567)
    [ENHANCEMENT] Add internal pager (ov). (#2510)
    [cleanup] Stop requiring RELEASE_NOTES (#2580)
    [postrel] Pull before updating integrations
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2023/04/05 20:47:51 bsiegert Exp $
d4 1
@


1.8
log
@Revbump all Go packages after yesterday's go120 security update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2023/03/08 20:31:11 nikita Exp $
d3 1
a3 2
PKGNAME=	gopass-1.15.4
PKGREVISION=	1
d12 1
a12 1
COMMENT=	The slightly more awesome Standard Unix Password Manager for Teams
@


1.7
log
@gopass: update to version 1.15.4

ChangeLog (taken from https://github.com/gopasspw/gopass/releases):

1.15.4 / 2023-02-12
    [BUGFIX] Also accept lower case CTE headers. (#2539, #2518)
    [BUGFIX] Commit changes to mount config changes. (#2542, #2530)
    [BUGFIX] Do not restrict pwlen when maxlen is zero. (#2537, #2536)
    [BUGFIX] Fix fossilfs sync (#2549, #2516)
    [BUGFIX] Fix recipients check for age. (#2545, #2544)
    [BUGFIX] Hide harmless git error messages. (#2547, #2543)
    [BUGFIX] Improve error handling for gopass convert (#2548, #2520)
    [ENHANCEMENT] Add edit.auto-create (#2538)

1.15.3 / 2023-01-07
    [BUGFIX] Check recipients before launching editor. (#2488, #1565)
    [BUGFIX] Fix possible concurrency issues in fsck. (#2486, #2459)
    [BUGFIX] Honor core.autosync (#2497, #2495)
    [BUGFIX] Honor fuzzy search abort (#2491, #2490)
    [ENHANCEMENT] Add nicer gopass audit HTML output (#2508)
    [ENHANCEMENT] Check recipients before adding a new one. (#2487, #1918)
    [ENHANCEMENT] Do not enforce lower case keys (#2489, #1777)
    [ENHANCEMENT] Do not rewrite ~. (#2496, #2083)
    [ENHANCEMENT] Rewrite gopass audit. Add HTML and CSV (#2506, #2504)
    [ENHANCEMENT] gitconfig: Support MultiVars (#2476, #2457)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2023/03/08 13:38:50 bsiegert Exp $
d4 1
@


1.6
log
@Revbump all Go packages after go119 security update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2023/02/16 15:02:00 bsiegert Exp $
d3 1
a3 2
PKGNAME=	gopass-1.15.2
PKGREVISION=	3
@


1.5
log
@Revbump all Go packages after go119 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2023/01/11 17:28:33 bsiegert Exp $
d4 1
a4 1
PKGREVISION=	2
@


1.4
log
@Revbump all Go packages after go119 update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2022/12/28 18:56:17 nikita Exp $
d4 1
a4 1
PKGREVISION=	1
@


1.3
log
@gopass: Update to version 1.15.2


1.15.2 / 2022-12-18
    [BUGFIX] [gitconfig] Properly parse Key-Value pairs with (#2482, #2479)
    [ENHANCEMENT] Add --force-regen flag to generate (#2475, #2474)
    [ENHANCEMENT] Add recipients hash checking. (#2481, #2478)

1.15.1 / 2022-12-11
    [BUGFIX] Fix domain alias lookup (#2455, #2453)
    [BUGFIX] Fix vim invocation. (#2456, #2424)
    [CLEANUP] Unhide fscopy and fsmove (#2444, #1831)
    [ENHANCEMENT] Add DirName template (#2452)
    [ENHANCEMENT] Add generate.symbols and generate.length (#2443, #2151)
    [ENHANCEMENT] Add template docs (#2445, #1562)
    [ENHANCEMENT] Document supported secret formats. (#2439, #1585)
    [ENHANCEMENT] Pre-populate ID with git values (#2442, #968)
    [ENHANCEMENT] Support german language in the password (#2454, #2451)

1.15.0 / 2022-12-03
    [BREAKING] New config format based on git config. (#2395, #1567, #1764, #1819, #1878, #2387, #2418)
    [BUGFIX] Fix symlink deduplication. (#2437, #2402)
    [ENHANCEMENT] Maintain secret structure when parsing (#2433, #2431)
    [ENHANCEMENT] Retain recipients file format (#2432, #2430)

New config format: gitconfg

Gopass is getting a new config format based on the one use by git itself.
The new implementation is much more flexible and extensible and will allow us
to more easily support new config options going forward. It does also support
a hierachy of configs. That means we can now support system wide defaults
as well as per mount config options.

The system wide configuration gives package maintainers and admins of multi
user deployments the option to pre-set certain options to their liking.
New default secret format

The default secret format has been rewritten to replace two of the existing
ones (KV and Plain). The new format puts a strong emphasis on retaining the
input as close as possible. And small change that might be visible in some
corner cases is that every secret now contains a terminating new line.
Recipient files can now contain comments

The parsing of the recipients files (.gpg-id) has become more flexible and
can now contain comments. These will be retained when updating these files
through gopass as well.

1.14.10 / 2022-11-09
    [BUGFIX] Correctly handle key removal on Windows (#2372, #2371)
    [DOCUMENTATION] (#1878)
    [ENHANCEMENT] Ignore comments in recipient files. (#2394, #2393)
    [ENHANCEMENT] Improve key expiration handling (#2383, #2369)
    [ENHANCEMENT] allow re-encrypting entire directory when (#2373)
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2022/12/08 16:14:17 bsiegert Exp $
d4 1
@


1.2
log
@Revbump all Go packages after go119 security update
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1 2022/11/05 13:42:58 nikita Exp $
d3 1
a3 2
PKGNAME=	gopass-1.14.9
PKGREVISION=	1
@


1.1
log
@Import wip/gopass as security/gopass.

Add gopass version 1.14.9, packaged by Iku Iwasa.

gopass is a rewrite of the pass password manager in Go with the aim of
making it cross-platform and adding additional features.  Our target
audience are professional developers and sysadmins (and especially teams of
those) who are well versed with a command line interface.  One explicit
goal for this project is to make it more approachable to non-technical
users.  We go by the UNIX philosophy and try to do one thing and do it
well, providing a stellar user experience and a sane, simple interface.
@
text
@d1 1
a1 1
# $NetBSD$
d4 1
@