Version 0.120 of Game of Trees has been released (and the port updated):

• disable gotwebd authentication if it is not enabled in /etc/gotwebd.conf
• ensure that GOTWEBD_LOGIN_TIMEOUT is used consistently at build time
• prevent date-specific gotsysd regress failures due to asctime_r whitespace
• make gotwebd refuse to start up if the _gotwebd user is root
• make gotwebd warn if the webserver's user is set to root in /etc/gotwebd.conf
• add /etc/gotwebd.conf parameters for hiding repositories
• reject bad hostnames provided to the gotsh weblogin command
• allow gotwebd to optionally display a login hint when authentication fails

LibreSSL version 4.1.1 and 4.0.1 have been released.

The 4.1.1 release notes read:

Version 0.119 of Game of Trees has been released (and the port updated):

The OpenBSD 7.8 release cycle is entering its final phases…

With the following commit, Theo de Raadt (deraadt@) moved -current to version 7.8 (dropping the "-beta"):

List:       openbsd-cvs
Subject:    CVS: cvs.openbsd.org: src
From:       Theo de Raadt <deraadt () cvs ! openbsd ! org>
Date:       2025-09-30 14:49:51

CVSROOT:	/cvs
Module name:	src
Changes by:	deraadt@cvs.openbsd.org	2025/09/30 08:49:51

Modified files:
	sys/conf       : newvers.sh 

Log message:
move out of -beta

For those unfamiliar with the process:
this is not the 7.8 release, but is part of the standard build-up to the release.

Remember: It's time to start using "-D snap" with pkg_add(1) (and pkg_info(1)).

(Regular readers will know what comes next…)
This serves as an excellent reminder to upgrade snapshots frequently, test both base and ports, and report problems [plus, of course, donate!].

Claudio Jeker (claudio@) announced the release of version 8.9 of OpenBGPD, the OpenBSD project's Border Gateway Protocol (BGP) daemon:

We have released OpenBGPD 8.9, which will be arriving in the
OpenBGPD directory of your local OpenBSD mirror soon.

This release includes the following changes to the previous release:

    * In verbose mode log the NOTIFICATION data for UPDATE errors.

    * Fix a busy loop error in the pfkey handling for OpenBSD and FreeBSD.

    * Introduce monotime - an internal time API using microsecond
      resolution.

    * Fix accounting of the pending update counter

    * Use new ibufq interface instead of handrolling the same.

    * Large refactoring of internal APIs to make the code easier to share
      and cleaner.

The OpenBSD project has announced the release of version 9.6 of rpki-client:

The BSDCan 2025 video playlist is now complete and available on both Peertube and Youtube.

The OpenBSD focused talks are as follows:

• A distributed filesystem for OpenBSD by Rob Keizer
  • PT
  • YT
• The state of 3d-printing from OpenBSD by Andrew Hewus Fresh
  • PT
  • YT
• Confidential Computing with OpenBSD The Next Step by Hans Jörg Höxer
  • PT
  • YT
• Adventures in porting a Wayland Compositor to NetBSD and OpenBSD by Jeff Frasca
  • PT
  • YT

With this commit, the development slows into release-mode preparing for the 7.8 release of OpenBSD.

The commit message reads,

List:       openbsd-cvs
Subject:    CVS: cvs.openbsd.org: src
From:       Theo de Raadt <deraadt () cvs ! openbsd ! org>
Date:       2025-09-10 15:58:20

CVSROOT:	/cvs
Module name:	src
Changes by:	deraadt@cvs.openbsd.org	2025/09/10 10:00:04

Modified files:
	etc/root       : root.mail 
	sys/sys        : param.h 
	share/mk       : sys.mk 
	sys/arch/macppc/stand/tbxidata: bsd.tbxi 
	usr.bin/signify: signify.1 
	sys/conf       : newvers.sh 

Log message:
crank to 7.8-beta

7.8-beta snapshots are already starting to appear on OpenBSD mirrors.

Time to bring out your odd machines and give snapshots a go, if we want 7.8 to be the best release yet.

Version 0.118 of Game of Trees has been released (and the port updated):

• security fix for -portable: gotwebd can be tricked into reading repositories outside its repos_path; bug introduced in got-0.111; OpenBSD is not affected
• make 'tog diff' show the repository name in names of patches written to /tmp
• plug memory leaks which were making gotwebd regress tests fail
• fix parallel processing of requests in gotwebd, improving responsiveness
• set gotwebd pledges according to address families of listening sockets
• run gotwebd fcgi parameter parsing in a dedicated process under pledge "stdio"
• make gotd commit notifications only show history which is unique to the branch
• enable sftp/scp support in the sshd_config file generated by gotsysd
• make gotsysd-managed repositories readable for the _gotd group