git: 9a0873337198 - main - ports-mgmt/pkg-devel: update to 2.8.99.1

The branch main has been updated by bapt:

URL: https://cgit.FreeBSD.org/ports/commit/?id=9a0873337198928e739f8b03c44416cb908027cf

commit 9a0873337198928e739f8b03c44416cb908027cf
Author:     Baptiste Daroussin <bapt@FreeBSD.org>
AuthorDate: 2026-08-10 11:49:14 +0000
Commit:     Baptiste Daroussin <bapt@FreeBSD.org>
CommitDate: 2026-08-10 11:54:09 +0000

    ports-mgmt/pkg-devel: update to 2.8.99.1
    
    Changes:
    - security: bound vulnerability database downloads and decompression; build a temporary database and atomically replace it only after validation
    - security: bound repository archive downloads and extraction (1 GiB or half of free temporary storage, 1 MiB metadata) and reject duplicate members and oversized target members
    - security: bound repository signature extraction (8 MiB callback response, at most 8 signature entries of 1 MiB each)
    - security: drop to nobody before entering Capsicum in the sandboxed archive and signature callbacks
    - security: enforce the signed package size while fetching, capping the stream even when the server omits a Content-Length
    - security: reject invalid repository signature types; only pubkey, fingerprints and none are accepted
    - repo: keep file lists out of the data catalog
    - repo: open the catalogue read-only when checking its validity
    - rwhich: store the compressed filesite as a standalone file
    - rwhich: verify the repository signature and store the filesite as a raw compressed file
    - rwhich: add a global and a per-repository configuration
    - fix: report (added)/(removed) reinstall reasons only once
    - fix: use-after-free during the additional SAT cycle
    - fix: deferred rc script execution
    - rcscript: add a dedicated PKG_EVENT_RC_SCRIPT event for rc.d script actions
    - fix: remove leftover nested @dir parents on deinstall
    - fix: non-root reads of WAL databases with missing sidecar files fall back to immutable mode
    - db: respect compression_level for the file db and the repository metadata
    - macho: map macOS 26 / iOS 19 to Darwin 25 in pkg config abi
    - libpkg: add PKG_EVENT_PKG_FETCH_BEGIN to report the package being downloaded (for PackageKit)
    - utils: always print the signature_type
    - fix: SRV/HTTP-mirror fetch only retried the first server; walk the server list once with a per-server retry budget and report SRV/mirror-list lookup failures
---
 ports-mgmt/pkg-devel/Makefile | 4 ++--
 ports-mgmt/pkg-devel/distinfo | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/ports-mgmt/pkg-devel/Makefile b/ports-mgmt/pkg-devel/Makefile
index 7f4b5a530e32..b20dffa861ad 100644
--- a/ports-mgmt/pkg-devel/Makefile
+++ b/ports-mgmt/pkg-devel/Makefile
@@ -1,5 +1,5 @@
 PORTNAME=	pkg
-DISTVERSION=	2.7.99.3
+DISTVERSION=	2.8.99.1
 _PKG_VERSION=	${DISTVERSION}
 CATEGORIES=	ports-mgmt
 PKGNAMESUFFIX=	-devel
@@ -12,7 +12,7 @@ LICENSE=	BSD2CLAUSE
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	freebsd
-GH_TAGNAME=	037f655e1
+GH_TAGNAME=	efa833c0d
 
 USE_LDCONFIG=	${PREFIX}/lib/compat/pkg
 HAS_CONFIGURE=	yes
diff --git a/ports-mgmt/pkg-devel/distinfo b/ports-mgmt/pkg-devel/distinfo
index 2a92fa9f451b..9fecbf6563c5 100644
--- a/ports-mgmt/pkg-devel/distinfo
+++ b/ports-mgmt/pkg-devel/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1782478930
-SHA256 (freebsd-pkg-2.7.99.3-037f655e1_GH0.tar.gz) = 4c62ddc21b9474c328502579dbe5dde9b537fa338e3aefd36d73c081e2c6655f
-SIZE (freebsd-pkg-2.7.99.3-037f655e1_GH0.tar.gz) = 12279456
+TIMESTAMP = 1786362426
+SHA256 (freebsd-pkg-2.8.99.1-efa833c0d_GH0.tar.gz) = 7ec541a59027b98d1ddb72c9ae34f8e2e3450522ad0e6318db033dfebe8333a9
+SIZE (freebsd-pkg-2.8.99.1-efa833c0d_GH0.tar.gz) = 12293994