Log message:
net/coturn: Require openssl 3

Upstream did not note this rather significant change in NEWS :-(
Restores building on NetBSD 9.

No PKGREVISION, as I think this is a NOP on systems that used openssl
3 anyway, and it didn't build on those that defaulted to 1.1.1.

Log message:
net/coturn: Restore wrongly-deleted comment

Log message:
coturn: updated to 4.9.0

4.9.0

Changelist:
- Fix thread sanitizer warning
- OpenSSL: migrate to modern API for DH param
- Migrate AES-128 encryption from deprecated OpenSSL API to EVP
- Fix unbounded strcpy in stun_method_str (ns_turn_msg.c)
- Fix missing null termination in addr_to_string (ns_turn_ioaddr.c)
- Fix missing null termination after strncpy in DB drivers
- Fix unbounded strcpy in HTTP response (http_server.c)
- Remove ubuntu20, DEBUG builds from build matrix
- Fix buffer overflow in decryptPassword  in mysql
- Fix missing null termination after strncpy in MongoDB driver (dbd_mongo.c)
- Fix buffer overflow in decrypt_aes_128
- Fix Web Admin Password Check

Log message:
net/coturn: Update to 4.8.0

Release 4.8.0

Changelist:
- Allow faster packet validation on listener threads (#1768) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Fix order of arguments to calloc (#1790) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Fix crashes while setting socket buffer size (#1789) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Implement configurable buffer sizes (#1780) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Update Alpine to 3.23.2 version in Docker image (tyranron \ 
<tyranron@gmail.com>)
- Update Debian "trixie" to 20251208 snapshot in Docker image \ 
(tyranron <tyranron@gmail.com>)
- Use bool to enable prometheus (#1779) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Fix memory leak using libevent (#1751) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Addressed possible null pointer dereferences (#1729) (redraincatching \ 
<99604494+redraincatching@users.noreply.github.com>)
- Address possible null pointer dereferences (#1744) (redraincatching \ 
<99604494+redraincatching@users.noreply.github.com>)
- Improve const correctness in coturn (#1424) (Michael Jones \ 
<jonesmz@users.noreply.github.com>)
- Update attribute values according to RFC 8656 (#1748) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Fixing missing dependencies in Makefile (#1739) (Jun Lyu \ 
<71107931+Meiye-lj@users.noreply.github.com>)
- Add fuzzing to ci workflows (#1745) (redraincatching \ 
<99604494+redraincatching@users.noreply.github.com>)
- mainreplay: fix leak in decrypt_aes_128() (#1737) (Lidong Yan \ 
<502024330056@smail.nju.edu.cn>)
- Upgrade Debian to "trixie" in Docker image (tyranron \ 
<tyranron@gmail.com>)
- Fix typo in Docker CI spec (tyranron <tyranron@gmail.com>)
- Verify CHANGELOG date on Docker CI (tyranron <tyranron@gmail.com>)
- Fix logging before parsing logging cmd line args (#1723) (Gustavo Garcia \ 
<gustavogb@gmail.com>)
- Fix dead link in turnserver.spec Source0 field (#1722) (Copilot \ 
<198982749+Copilot@users.noreply.github.com>)
- reduce calls to random (#1710) (redraincatching \ 
<99604494+redraincatching@users.noreply.github.com>)
- Fix null pointer dereference in set_ssl_ctx function (#1720) (Gustavo Garcia \ 
<gustavogb@gmail.com>)
- Add configurable CPU count option for containerized environments (#1717) \ 
(Copilot <198982749+Copilot@users.noreply.github.com>)
- Fix memory and resource leaks in udp_create_server_socket( ) (#1714) (lhywk \ 
<lhywkd22@gmail.com>)
- Add define to disable OAuth support (#1713) (Shane <ignignokterr@gmail.com>)
- typo correction (#1715) (redraincatching \ 
<99604494+redraincatching@users.noreply.github.com>)
- refactored tri-state to bools (#1709) (redraincatching \ 
<99604494+redraincatching@users.noreply.github.com>)
- addressed null pointer deref warnings (#1712) (redraincatching \ 
<99604494+redraincatching@users.noreply.github.com>)
- removed unnecessary null check (#1706) (redraincatching \ 
<99604494+redraincatching@users.noreply.github.com>)
- Fix compiler warnings in source files (#1704) (Gustavo Garcia \ 
<gustavogb@gmail.com>)
- Revert random number generation (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- guarantee no oob write in strncat (#1702) (redraincatching \ 
<99604494+redraincatching@users.noreply.github.com>)
- Fix issues with Global Allocation Count for drain mode (#1699) (Scott Godin \ 
<sgodin@sipspectrum.com>)
- fix: comment out verbose mode by default (#1696) (Amin Farjadi \ 
<31803062+amin-farjadi@users.noreply.github.com>)

Contributors:
- Amin Farjadi <31803062+amin-farjadi@users.noreply.github.com>
- Copilot <198982749+Copilot@users.noreply.github.com>
- dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Gustavo Garcia <gustavogb@gmail.com>
- Jun Lyu <71107931+Meiye-lj@users.noreply.github.com>
- Kai Ren <tyranron@gmail.com>
- lhywk <lhywkd22@gmail.com>
- Lidong Yan <502024330056@smail.nju.edu.cn>
- Michael Jones <jonesmz@users.noreply.github.com>
- Pavel Punsky <eakraly@users.noreply.github.com>
- redraincatching <99604494+redraincatching@users.noreply.github.com>
- Scott Godin <sgodin@sipspectrum.com>
- Shane <ignignokterr@gmail.com>
- tyranron <tyranron@gmail.com>

Release 4.7.0

Changelist:
- [BREAKING] Remove support for openssl older than 1.1.1 (#1397) (Michael Jones \ 
<jonesmz@users.noreply.github.com>)
- [BREAKING] Cleanup deprecated options (#1599) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- [BREAKING] Reverse SOFTWARE_ATTRIBUTE_OPT to avoid inverse logic (#1598) \ 
(Pavel Punsky <eakraly@users.noreply.github.com>)
- [BREAKING] Deprecate response-origin-only-with-rfc5780 (#1690) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- [BREAKING] Invert no-stun-backward-compatibility to be default on (#1689) \ 
(Pavel Punsky <eakraly@users.noreply.github.com>)
- Make older TLS versions optional (#1693) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Add missing close socket when ioa_socket call fails (#1694) (tyranron \ 
<tyranron@gmail.com>)
- Add spdx tags to all source files (#1510) (Michael Jones \ 
<jonesmz@users.noreply.github.com>)
- Address various minor clang-tidy warnings (#1513) (Michael Jones \ 
<jonesmz@users.noreply.github.com>)
- Update reference to old draft in README to RFC8016 (Gustavo Garcia \ 
<gustavogb@gmail.com>)
- Invert RFC5780 option to default off (#1688) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Add modules diagram to developer doc (#1685) (Gustavo Garcia \ 
<gustavogb@gmail.com>)
- Fix compilation warning with const - non const conversions (#1686) (Gustavo \ 
Garcia <gustavogb@gmail.com>)
- Makefile.in: Don't install sql schema into DOCSDIR (#1684) (Greg Troxel \ 
<gdt@lexort.com>)
- Fix infinite loop in ns_turn_server.c (#1460) (Asmir Mehic \ 
<asmir.mehic@gmail.com>)
- Fix the ability to compile coturn using C++ compiler (#1546) (Michael Jones \ 
<jonesmz@users.noreply.github.com>)
- Restore returning 200 OK on root prometheus path for health check (#1678) \ 
(Gustavo Garcia <gustavogb@gmail.com>)
- Improve MySQL connection error logging to include actual MySQL error message \ 
(#1679) (Gustavo Garcia <gustavogb@gmail.com>)
- redis: use dbname param when redis is unauthenticated (#1668) (maddy \ 
<maddy@kitty.garden>)
- Show allocations increment/decrement logs behind verbose flag (#1677) (Gustavo \ 
Garcia <gustavogb@gmail.com>)
- [Fix] Fix Repeated Line in Example turnserver.conf (#1671) (Stefan Kieszkowski \ 
<85728496+stefankiesz@users.noreply.github.com>)
- change for incorrect handling of TURN_NO_TLS environment variable (#1663) \ 
(Leonid Gorbachev <60500216+leonidgorbachev@users.noreply.github.com>)
- Add Content-Type header to prometheus response (#1662) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Fix infinite loop while triggering SIGHUP and log file reset causing … \ 
(#1630) (nicolas-laduguie \ 
<111897939+nicolas-laduguie@users.noreply.github.com>)
- rename and dependency extraction (#1634) (redraincatching \ 
<99604494+redraincatching@users.noreply.github.com>)
- updated types to bool in _turn_params_ to reflect C11 (#1406) (redraincatching \ 
<99604494+redraincatching@users.noreply.github.com>)
- Windows '_WTA' bug (#1624) (guoyingbo <guoyingbo@gmail.com>)
- Fix cmake issues detecting mongo and libsystemd on macOS (#1621) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Fix hiredis detection by cmake (#1620) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Drop TLS version support detection (#1617) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Cleanup ALPN_SUPPORTED define usage (#1616) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Fix warnings type conversion (#1615) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)
- Add parameter for specifying prometheus path (#1602) (Alex Gustafsson \ 
<89969483+alexg-axis@users.noreply.github.com>)
- Do not build with Ubuntu 18, use 24 (#1613) (Pavel Punsky \ 
<eakraly@users.noreply.github.com>)

Contributors:
- Alex Gustafsson <89969483+alexg-axis@users.noreply.github.com>
- Asmir Mehic <asmir.mehic@gmail.com>
- Greg Troxel <gdt@lexort.com>
- guoyingbo <guoyingbo@gmail.com>
- Gustavo Garcia <gustavogb@gmail.com>
- Kai Ren <tyranron@gmail.com>
- Leonid Gorbachev <60500216+leonidgorbachev@users.noreply.github.com>
- maddy <maddy@kitty.garden>
- Michael Jones <jonesmz@users.noreply.github.com>
- nicolas-laduguie <111897939+nicolas-laduguie@users.noreply.github.com>
- Pavel Punsky <eakraly@users.noreply.github.com>
- redraincatching <99604494+redraincatching@users.noreply.github.com>
- Stefan Kieszkowski <85728496+stefankiesz@users.noreply.github.com>
- tyranron <tyranron@gmail.com>

Log message:
*: recursive bump for icu 78.1

Log message:
*: recursive bump for icu 77 and libxml2 2.14

Log message:
net/coturn: Take MAINTAINERship

Leave previous MAINTAINER (email timed out) as co-maintainer.

Add upstream bug report about duplicate installed scheme files.

Log message:
net/coturn: Set up partitioned data directory with right permissions

(This is step 3 of the 3-way merge from wip, and I think the end.)

Because the daemon runs as a non-root user, it needs to have the state
directory pre-created with the right uid/gid and (probably) also
permissions to prevent randoms from reading the state.

PKGREVISION set to high enough that this will seem newer than the wip packages.