git: 9c22f6eb5b81 - main - security/nss: update to 3.129

From: Christoph Moench-Tegeder <cmt_at_FreeBSD.org>
Date: Thu, 10 Sep 2026 20:11:45 UTC
The branch main has been updated by cmt:

URL: https://cgit.FreeBSD.org/ports/commit/?id=9c22f6eb5b81a94b0986dc3768177c9cd7458a3d

commit 9c22f6eb5b81a94b0986dc3768177c9cd7458a3d
Author:     Christoph Moench-Tegeder <cmt@FreeBSD.org>
AuthorDate: 2026-09-10 20:10:26 +0000
Commit:     Christoph Moench-Tegeder <cmt@FreeBSD.org>
CommitDate: 2026-09-10 20:10:26 +0000

    security/nss: update to 3.129
    
    Release Notes:
      https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_129.html
    
    Also, while cleaning up patches for bugs fixed upstream, remove parts
    for long unsupported architectures.
---
 security/nss/Makefile                        |  3 +--
 security/nss/distinfo                        |  6 ++---
 security/nss/files/patch-coreconf_FreeBSD.mk | 33 ++++++++--------------------
 3 files changed, 13 insertions(+), 29 deletions(-)

diff --git a/security/nss/Makefile b/security/nss/Makefile
index 216701f19ac3..42c2366551c7 100644
--- a/security/nss/Makefile
+++ b/security/nss/Makefile
@@ -1,6 +1,5 @@
 PORTNAME=	nss
-PORTREVISION=	1
-DISTVERSION=	3.128
+DISTVERSION=	3.129
 CATEGORIES=	security
 MASTER_SITES=	MOZILLA/security/${PORTNAME}/releases/${DISTNAME:tu:C/[-.]/_/g}_RTM/src
 
diff --git a/security/nss/distinfo b/security/nss/distinfo
index a304ce4c9168..f3a8712c2e88 100644
--- a/security/nss/distinfo
+++ b/security/nss/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1787853045
-SHA256 (nss-3.128.tar.gz) = 70ea638f4e4fc341b24782ef9af6d88a2d3280ef5e46736748411fe8ca586351
-SIZE (nss-3.128.tar.gz) = 87053743
+TIMESTAMP = 1789059131
+SHA256 (nss-3.129.tar.gz) = 38baa3b0a18a3f674843473b549753c96419a0151abd1e7a9b214ce0493d0785
+SIZE (nss-3.129.tar.gz) = 87255363
diff --git a/security/nss/files/patch-coreconf_FreeBSD.mk b/security/nss/files/patch-coreconf_FreeBSD.mk
index 4dcdac86b856..68630950626c 100644
--- a/security/nss/files/patch-coreconf_FreeBSD.mk
+++ b/security/nss/files/patch-coreconf_FreeBSD.mk
@@ -1,4 +1,6 @@
---- coreconf/FreeBSD.mk.orig	2018-08-31 12:55:53 UTC
+diff --git coreconf/FreeBSD.mk coreconf/FreeBSD.mk
+index fcbf23f6a..280d3a140 100644
+--- coreconf/FreeBSD.mk
 +++ coreconf/FreeBSD.mk
 @@ -5,9 +5,9 @@
  
@@ -13,7 +15,7 @@
  RANLIB			= ranlib
  
  CPU_ARCH		= $(OS_TEST)
-@@ -20,7 +20,29 @@ endif
+@@ -20,6 +20,16 @@ endif
  ifeq ($(CPU_ARCH),amd64)
  CPU_ARCH		= x86_64
  endif
@@ -23,40 +25,23 @@
 +ifneq (,$(filter powerpc%, $(CPU_ARCH)))
 +CPU_ARCH		= ppc
 +endif
- 
-+ifneq (,$(findstring 64,$(OS_TEST)))
-+USE_64			= 1
-+endif
 +
-+# Test toolchain for endianness copying what coreconf/Linux.mk does to avoid
-+# ld: error: duplicate symbol: platform_ghash_support
-+# https://github.com/mozilla/nss/blob/NSS_3_128_RTM/coreconf/Linux.mk#L191-L197
-+# https://phabricator.services.mozilla.com/D303870
-+# https://github.com/mozilla/nss/commit/e57221034e01373bd1b6a5cd654796b1ec89a915
-+ENDIANNESS := $(shell echo | $(CC) -dM -E - | grep __BYTE_ORDER__)
-+ifeq ($(findstring __ORDER_LITTLE_ENDIAN__,$(ENDIANNESS)),__ORDER_LITTLE_ENDIAN__)
-+    LITTLE_ENDIAN := 1
-+else
-+    LITTLE_ENDIAN := 0
++ifneq (,$(findstring 64,$(OS_TEST)))
++USE_64		= 1
 +endif
-+
+ 
  OS_CFLAGS		= $(DSO_CFLAGS) -Wall -Wno-switch -DFREEBSD -DHAVE_STRERROR -DHAVE_BSD_FLOCK
  
- DSO_CFLAGS		= -fPIC
-@@ -46,7 +56,11 @@ else
+@@ -46,7 +56,7 @@ else
  DLL_SUFFIX		= so.1.0
  endif
  
 -MKSHLIB			= $(CC) $(DSO_LDOPTS)
-+ifneq (,$(filter alpha ia64,$(OS_TEST)))
-+MKSHLIB			= $(CC) -Wl,-Bsymbolic -lc $(DSO_LDOPTS)
-+else
 +MKSHLIB			= $(CC) -Wl,-Bsymbolic $(DSO_LDOPTS)
-+endif
  ifdef MAPFILE
  	MKSHLIB += -Wl,--version-script,$(MAPFILE)
  endif
-@@ -55,4 +69,5 @@ PROCESS_MAP_FILE = grep -v ';-' $< | \
+@@ -55,4 +65,5 @@ PROCESS_MAP_FILE = grep -v ';-' $< | \
  
  G++INCLUDES		= -I/usr/include/g++