16 files changed, 766 insertions, 135 deletions
diff --git a/dev-libs/boost/boost-1.88.0-r1.ebuild b/dev-libs/boost/boost-1.88.0-r1.ebuild
index 0076cdfdb2ba..8e6519ff5c30 100644
--- a/dev-libs/boost/boost-1.88.0-r1.ebuild
+++ b/dev-libs/boost/boost-1.88.0-r1.ebuild
@@ -9,7 +9,7 @@ EAPI=8
 # (e.g. https://www.boost.org/users/history/version_1_83_0.html)
 # Note that the latter may sometimes feature patches not on the former too.
 
-PYTHON_COMPAT=( python3_{11..13} )
+PYTHON_COMPAT=( python3_{11..14} )
 
 inherit dot-a edo flag-o-matic multiprocessing python-r1 toolchain-funcs multilib-minimal
 
@@ -57,6 +57,10 @@ PATCHES=(
 	"${FILESDIR}"/${PN}-1.88.0-range-any_iterator.patch
 	"${FILESDIR}"/${PN}-1.88.0-system-crashing-test.patch
 	"${FILESDIR}"/${PN}-1.88.0-yap-cstdint.patch
+	# https://github.com/boostorg/dll/issues/108
+	"${FILESDIR}"/${PN}-1.89.0-dll-no-lto.patch
+	"${FILESDIR}"/${PN}-1.89.0-python-exclude-broken-tests.patch
+	"${FILESDIR}"/${PN}-1.89.0-python-pickle.patch
 )
 
 create_user-config.jam() {
@@ -148,7 +152,12 @@ src_configure() {
 	# https://bugs.gentoo.org/943975
 	# https://github.com/boostorg/quickbook/issues/27
 	# https://github.com/boostorg/spirit/issues/800
-	use tools && filter-lto
+	#
+	# Tests also fail:
+	# https://bugs.gentoo.org/956660
+	# https://github.com/boostorg/smart_ptr/issues/121
+	# https://github.com/boostorg/thread/issues/415
+	filter-lto
 
 	lto-guarantee-fat
 
@@ -276,8 +285,6 @@ multilib_src_test() {
 		"phoenix"
 		# Unable to find file or target named (yes, really)
 		"predef"
-		# AttributeError: property '<unnamed Boost.Python function>' of 'X' object has no setter
-		"python"
 		# vec_access.hpp:95:223: error: static assertion failed: Boost QVM static assertion failure
 		"qvm"
 		# regex_timer.cpp:19: ../../../boost/timer.hpp:21:3: error: #error This header is
diff --git a/dev-libs/boost/boost-1.89.0.ebuild b/dev-libs/boost/boost-1.89.0.ebuild
index aa056e2388ec..a0daf51136c3 100644
--- a/dev-libs/boost/boost-1.89.0.ebuild
+++ b/dev-libs/boost/boost-1.89.0.ebuild
@@ -55,8 +55,12 @@ PATCHES=(
 	"${FILESDIR}"/${PN}-1.88.0-range-any_iterator.patch
 	"${FILESDIR}"/${PN}-1.88.0-system-crashing-test.patch
 	"${FILESDIR}"/${PN}-1.88.0-yap-cstdint.patch
+	# https://github.com/boostorg/dll/issues/108
+	"${FILESDIR}"/${PN}-1.89.0-dll-no-lto.patch
 	"${FILESDIR}"/${PN}-1.89.0-graph-remove-system-dependency.patch
 	"${FILESDIR}"/${PN}-1.89.0-predef-include-path.patch
+	"${FILESDIR}"/${PN}-1.89.0-python-exclude-broken-tests.patch
+	"${FILESDIR}"/${PN}-1.89.0-python-pickle.patch
 	"${FILESDIR}"/${PN}-1.89.0-unordered-no-tbb.patch
 )
 
@@ -149,7 +153,12 @@ src_configure() {
 	# https://bugs.gentoo.org/943975
 	# https://github.com/boostorg/quickbook/issues/27
 	# https://github.com/boostorg/spirit/issues/800
-	use tools && filter-lto
+	#
+	# Tests also fail:
+	# https://bugs.gentoo.org/956660
+	# https://github.com/boostorg/smart_ptr/issues/121
+	# https://github.com/boostorg/thread/issues/415
+	filter-lto
 
 	lto-guarantee-fat
 
@@ -236,13 +245,13 @@ multilib_src_test() {
 		"config"
 		# undefined reference to `boost::math::concepts::real_concept boost::math::bernoulli_b2n<boost::math::concepts::real_concept>(int)
 		"math"
-		# PyObject* boost::parameter::python::aux::unspecified_type():
-		#   /usr/include/python3.13/object.h:339:30: error: lvalue required as left operand of assignment
+		# In function 'PyObject* boost::parameter::python::aux::unspecified_type()':
+		#  /usr/include/python3.13/object.h:339:30: error: lvalue required as left operand of assignment
+		#  #define Py_TYPE(ob) Py_TYPE(_PyObject_CAST(ob))
+		#                      ~~~~~~~^~~~~~~~~~~~~~~~~~~~
 		"parameter_python"
 		# scope/lambda_tests22.cpp(27): test 'x == 1' failed in function 'int main()'
 		"phoenix"
-		# AttributeError: property '<unnamed Boost.Python function>' of 'X' object has no setter
-		"python"
 		# vec_access.hpp:95:223: error: static assertion failed: Boost QVM static assertion failure
 		"qvm"
 		# Processing file ../boost_1_89_0/libs/regex/example/../include/boost/regex/v5/regex_iterator.hpp
diff --git a/dev-libs/boost/files/boost-1.89.0-dll-no-lto.patch b/dev-libs/boost/files/boost-1.89.0-dll-no-lto.patch
new file mode 100644
index 000000000000..cdbcf7606f34
--- /dev/null
+++ b/dev-libs/boost/files/boost-1.89.0-dll-no-lto.patch
@@ -0,0 +1,16 @@
+Unconditionally disable LTO in case it's injected from the outside.
+LTO breaks the test as some symbols and sections are gone/rearranged.
+
+https://github.com/boostorg/dll/issues/108
+
+--- a/libs/dll/test/Jamfile.v2
++++ a/libs/dll/test/Jamfile.v2
+@@ -36,7 +36,7 @@ project
+       [ requires cxx11_static_assert ]
+    # linux
+       <target-os>linux:<linkflags>"-ldl"
+-      <toolset>gcc:<cxxflags>"-Wall -Wextra -pedantic -Wno-long-long"
++      <toolset>gcc:<cxxflags>"-Wall -Wextra -pedantic -Wno-long-long -fno-lto"
+ 
+    # others
+       <local-visibility>hidden
diff --git a/dev-libs/boost/files/boost-1.89.0-python-exclude-broken-tests.patch b/dev-libs/boost/files/boost-1.89.0-python-exclude-broken-tests.patch
new file mode 100644
index 000000000000..98321d8efd8b
--- /dev/null
+++ b/dev-libs/boost/files/boost-1.89.0-python-exclude-broken-tests.patch
@@ -0,0 +1,28 @@
+Exclude tests that are either obsolete or simply don't work.
+The upcast.cpp test error message looks suspiciously like the
+parameter_python build failure; probably due to a newer Python
+Object API break.
+
+--- a/libs/python/test/Jamfile
++++ b/libs/python/test/Jamfile
+@@ -111,11 +111,6 @@ bpl-test crossmod_exception
+ [ bpl-test andreas_beyer ]
+ [ bpl-test wrapper_held_type ]
+ 
+-[ bpl-test polymorphism2_auto_ptr
+-  : polymorphism2_auto_ptr.py polymorphism2.py polymorphism2_auto_ptr.cpp
+-  : [ requires auto_ptr ]
+-]
+-
+ [ bpl-test polymorphism ]
+ [ bpl-test polymorphism2 ]
+ 
+@@ -239,8 +234,6 @@ bpl-test crossmod_opaque
+ [ py-compile object_manager.cpp ]
+ [ py-compile copy_ctor_mutates_rhs.cpp ]
+ 
+-[ py-run upcast.cpp ]
+-
+ [ py-compile select_holder.cpp ]
+ 
+ [ run select_from_python_test.cpp ../src/converter/type_id.cpp
diff --git a/dev-libs/boost/files/boost-1.89.0-python-pickle.patch b/dev-libs/boost/files/boost-1.89.0-python-pickle.patch
new file mode 100644
index 000000000000..dab13c439c73
--- /dev/null
+++ b/dev-libs/boost/files/boost-1.89.0-python-pickle.patch
@@ -0,0 +1,104 @@
+https://github.com/boostorg/python/pull/482
+
+From: Eisuke Kawashima <e-kwsm@users.noreply.github.com>
+Date: Mon, 31 Mar 2025 19:49:28 +0900
+Subject: [PATCH] fix(test.pickle): fix for change in the return value of object.__reduce__()
+
+https://docs.python.org/3.11/library/pickle.html#object.__reduce__
+
+fix #461
+---
+ test/pickle1.py | 26 ++++++++++++++++++++++++--
+ test/pickle4.py | 26 ++++++++++++++++++++++++--
+ 2 files changed, 48 insertions(+), 4 deletions(-)
+
+diff --git a/libs/python/test/pickle1.py b/libs/python/test/pickle1.py
+index b8f4efd9b0..0df59a4b3a 100644
+--- a/libs/python/test/pickle1.py
++++ b/libs/python/test/pickle1.py
+@@ -9,8 +9,10 @@
+     1
+     >>> pickle1_ext.world.__name__
+     'world'
+-    >>> pickle1_ext.world('Hello').__reduce__()
++    >>> pickle1_ext.world('Hello').__reduce__()  # doctest: +PY310
+     (<class 'pickle1_ext.world'>, ('Hello',))
++    >>> pickle1_ext.world('Hello').__reduce__()  # doctest: +PY311
++    (<class 'pickle1_ext.world'>, ('Hello',), None)
+     >>> wd = pickle1_ext.world('California')
+     >>> pstr = pickle.dumps(wd)
+     >>> wl = pickle.loads(pstr)
+@@ -31,7 +33,27 @@ def run(args = None):
+ 
+     if args is not None:
+         sys.argv = args
+-    return doctest.testmod(sys.modules.get(__name__))
++
++    # > https://docs.python.org/3.11/library/pickle.html#object.__reduce__
++    # object.__reduce__() returns
++    # - python 3.10 or prior: a 2-element tuple
++    # - python 3.11 or later: a 3-element tuple (object's state added)
++    PY310 = doctest.register_optionflag("PY310")
++    PY311 = doctest.register_optionflag("PY311")
++
++    class ConditionalChecker(doctest.OutputChecker):
++        def check_output(self, want, got, optionflags):
++            if (optionflags & PY311) and (sys.version_info[:2] < (3, 11)):
++                return True
++            if (optionflags & PY310) and (sys.version_info[:2] >= (3, 11)):
++                return True
++            return doctest.OutputChecker.check_output(self, want, got, optionflags)
++
++    runner = doctest.DocTestRunner(ConditionalChecker())
++    for test in doctest.DocTestFinder().find(sys.modules.get(__name__)):
++        runner.run(test)
++
++    return doctest.TestResults(runner.failures, runner.tries)
+     
+ if __name__ == '__main__':
+     print("running...")
+diff --git a/libs/python/test/pickle4.py b/libs/python/test/pickle4.py
+index be813bbb13..3cf4d7241f 100644
+--- a/libs/python/test/pickle4.py
++++ b/libs/python/test/pickle4.py
+@@ -12,8 +12,10 @@
+     1
+     >>> pickle4_ext.world.__name__
+     'world'
+-    >>> pickle4_ext.world('Hello').__reduce__()
++    >>> pickle4_ext.world('Hello').__reduce__()  # doctest: +PY310
+     (<class 'pickle4_ext.world'>, ('Hello',))
++    >>> pickle4_ext.world('Hello').__reduce__()  # doctest: +PY311
++    (<class 'pickle4_ext.world'>, ('Hello',), None)
+     >>> wd = pickle4_ext.world('California')
+     >>> pstr = pickle.dumps(wd)
+     >>> wl = pickle.loads(pstr)
+@@ -29,7 +31,27 @@ def run(args = None):
+ 
+     if args is not None:
+         sys.argv = args
+-    return doctest.testmod(sys.modules.get(__name__))
++
++    # > https://docs.python.org/3.11/library/pickle.html#object.__reduce__
++    # object.__reduce__() returns
++    # - python 3.10 or prior: a 2-element tuple
++    # - python 3.11 or later: a 3-element tuple (object's state added)
++    PY310 = doctest.register_optionflag("PY310")
++    PY311 = doctest.register_optionflag("PY311")
++
++    class ConditionalChecker(doctest.OutputChecker):
++        def check_output(self, want, got, optionflags):
++            if (optionflags & PY311) and (sys.version_info[:2] < (3, 11)):
++                return True
++            if (optionflags & PY310) and (sys.version_info[:2] >= (3, 11)):
++                return True
++            return doctest.OutputChecker.check_output(self, want, got, optionflags)
++
++    runner = doctest.DocTestRunner(ConditionalChecker())
++    for test in doctest.DocTestFinder().find(sys.modules.get(__name__)):
++        runner.run(test)
++
++    return doctest.TestResults(runner.failures, runner.tries)
+     
+ if __name__ == '__main__':
+     print("running...")
diff --git a/dev-libs/elfutils/elfutils-0.194.ebuild b/dev-libs/elfutils/elfutils-0.194.ebuild
index 6d56d1f683d2..91998fe8b015 100644
--- a/dev-libs/elfutils/elfutils-0.194.ebuild
+++ b/dev-libs/elfutils/elfutils-0.194.ebuild
@@ -21,7 +21,7 @@ else
 	SRC_URI="https://sourceware.org/elfutils/ftp/${PV}/${P}.tar.bz2"
 	SRC_URI+=" verify-sig? ( https://sourceware.org/elfutils/ftp/${PV}/${P}.tar.bz2.sig )"
 
-	KEYWORDS="~alpha ~amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux"
+	KEYWORDS="~alpha ~amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86 ~amd64-linux ~x86-linux"
 
 	BDEPEND="verify-sig? ( >=sec-keys/openpgp-keys-elfutils-20240301 )"
 fi
diff --git a/dev-libs/libax25/libax25-0.0.12_rc5.ebuild b/dev-libs/libax25/libax25-0.0.12_rc5.ebuild
deleted file mode 100644
index 3eea73794bff..000000000000
--- a/dev-libs/libax25/libax25-0.0.12_rc5.ebuild
+++ /dev/null
@@ -1,35 +0,0 @@
-# Copyright 1999-2023 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=7
-
-MY_P=${PN}-$(ver_rs 3 '-')
-
-inherit autotools
-
-DESCRIPTION="AX.25 library for hamradio applications"
-HOMEPAGE="http://www.linux-ax25.org/"
-SRC_URI="http://www.linux-ax25.org/pub/${PN}/${MY_P}.tar.xz"
-
-LICENSE="LGPL-2+"
-SLOT="0"
-KEYWORDS="amd64 ppc x86"
-IUSE="static-libs"
-
-S=${WORKDIR}/${MY_P}
-
-src_prepare() {
-	use elibc_musl && eapply "${FILESDIR}/${P}-musl.patch"
-	eapply_user
-	eautoreconf
-}
-
-src_configure() {
-	econf  $(use_enable static-libs static)
-}
-
-src_install() {
-	default
-	find "${D}" -name '*.la' -type f -delete || die
-	emake DESTDIR="${D}" installconf
-}
diff --git a/dev-libs/libfilezilla/files/libfilezilla-0.51.1-musl.patch b/dev-libs/libfilezilla/files/libfilezilla-0.51.1-musl.patch
new file mode 100644
index 000000000000..a3d6dd094fc6
--- /dev/null
+++ b/dev-libs/libfilezilla/files/libfilezilla-0.51.1-musl.patch
@@ -0,0 +1,12 @@
+Bug: https://bugs.gentoo.org/966066
+
+--- a/lib/local_filesys.cpp
++++ b/lib/local_filesys.cpp
+@@ -16,6 +16,7 @@
+ #include <unistd.h>
+ #include <string.h>
+ #include <utime.h>
++#include <limits.h>
+ #endif
+ 
+ namespace fz {
diff --git a/dev-libs/libfilezilla/libfilezilla-0.51.1-r1.ebuild b/dev-libs/libfilezilla/libfilezilla-0.51.1-r1.ebuild
new file mode 100644
index 000000000000..3f00f9957b7e
--- /dev/null
+++ b/dev-libs/libfilezilla/libfilezilla-0.51.1-r1.ebuild
@@ -0,0 +1,64 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit autotools flag-o-matic
+
+DESCRIPTION="C++ library offering some basic functionality for platform-independent programs"
+HOMEPAGE="https://lib.filezilla-project.org/"
+# Broken URL behind CDN
+SRC_URI="https://dev.gentoo.org/~dlan/distfiles/${PN}/${P}.tar.xz"
+
+LICENSE="GPL-2+"
+SLOT="0/48" # libfilezilla.so version
+KEYWORDS="~amd64 ~arm ~arm64 ~ppc ~ppc64 ~riscv ~x86"
+IUSE="test"
+
+RESTRICT="!test? ( test )"
+
+RDEPEND="
+	dev-libs/nettle:0=
+	>=net-libs/gnutls-3.5.7:=
+	virtual/libcrypt:=
+"
+DEPEND="${RDEPEND}
+	test? ( dev-util/cppunit )"
+BDEPEND="virtual/pkgconfig"
+
+PATCHES=(
+	"${FILESDIR}"/${PN}-0.37.1-pthread.patch
+	"${FILESDIR}"/${PN}-0.41.0-gcc13.patch
+	"${FILESDIR}"/${PN}-0.51.1-musl.patch
+)
+
+pkg_pretend() {
+	if [[ ${MERGE_TYPE} != binary ]]; then
+		if ! test-flag-CXX -std=c++14; then
+			eerror "${P} requires C++14-capable C++ compiler. Your current compiler"
+			eerror "does not seem to support -std=c++14 option. Please upgrade your compiler"
+			eerror "to gcc-4.9 or an equivalent version supporting C++14."
+			die "Currently active compiler does not support -std=c++14"
+		fi
+	fi
+}
+
+src_prepare() {
+	default
+	# we patch configure.ac
+	eautoreconf
+}
+
+src_configure() {
+	if use ppc || use arm || use hppa; then
+		# bug 727652
+		append-libs -latomic
+	fi
+
+	econf --disable-static
+}
+
+src_install() {
+	default
+	find "${ED}" -type f -name "*.la" -delete || die
+}
diff --git a/dev-libs/libfilezilla/libfilezilla-0.52.0.ebuild b/dev-libs/libfilezilla/libfilezilla-0.52.0-r1.ebuild
index d57e443a00ce..8f0ef14f886f 100644
--- a/dev-libs/libfilezilla/libfilezilla-0.52.0.ebuild
+++ b/dev-libs/libfilezilla/libfilezilla-0.52.0-r1.ebuild
@@ -29,6 +29,7 @@ BDEPEND="virtual/pkgconfig"
 PATCHES=(
 	"${FILESDIR}"/${PN}-0.37.1-pthread.patch
 	"${FILESDIR}"/${PN}-0.41.0-gcc13.patch
+	"${FILESDIR}"/${PN}-0.51.1-musl.patch
 )
 
 pkg_pretend() {
diff --git a/dev-libs/libutf8proc/Manifest b/dev-libs/libutf8proc/Manifest
index 776dffc4c2fa..e6ee6d1578af 100644
--- a/dev-libs/libutf8proc/Manifest
+++ b/dev-libs/libutf8proc/Manifest
@@ -1,5 +1,6 @@
 DIST libutf8proc-2.10.0.tar.gz 199045 BLAKE2B 5fdbf4d2606033c752ca965593431714cbc968a3c41905410e32cb2bd707a651428ee9fda0abfc365bf2129816fce392c3fe537426d64412ca543fe97dc14af5 SHA512 92a771606bcbecbb86c8d101931bc042dc7035938a665a7a449c2d8a7d3255df9df9c77c5cab0fc9dcaecb04be970149f60bfff463fc813e96727b7035ca9bb4
 DIST libutf8proc-2.11.0.tar.gz 201577 BLAKE2B 02ce6437fa09b2435383859ce0d283aa4b20fc0dce53c09e7b8c555ded5f7eefc685cd32804351683efb3e36045da1f1eb4a25e74220cf1814767ecfcdce6011 SHA512 bf9bfb20036e8b709449ee4a11592becf99e61f4c82d03519ab9de1a93ca47d6f8ed4b0bb471f7ca3ae06293275a391a9102ae810a9e07e914789d05ddbd25ab
 DIST libutf8proc-2.11.1.tar.gz 198822 BLAKE2B c43882d383df3bcc9d52863572eded291e749961b19f624d2e1b33da125e7c86678efe0d8eeed1b67e559cef2dcc1cdbce40aaabecc0795f57a114fc3223b754 SHA512 ab76c36864b40d5c7ab0bdfd400702bc79c3178ac4f2526c2965ad7257d082ff92c48b68342659a982fd039318aa421a02546a9c52699eae49584f0d25fb16d0
+DIST libutf8proc-2.11.2.tar.gz 199356 BLAKE2B 0db54f2b5ab029fcb9ae387320b5b9be4751e7d695330989c78ab8b85d780f8814c5cded80d5361aa0998c973fbf6a2b3903ba174a41246409a1c3e5f991db25 SHA512 1c5c5c21d09f5afae0eecdfe7698bc5a87a19b4c524396e4a55f7338a1d3907cf74e3252160bc3e6708d79904e83768563986d2ef9db6ead92e557742ac1bd73
 DIST libutf8proc-EastAsianWidth-16.0.0.xz 71896 BLAKE2B 84baaf37ca8252e13605edfc52ca9fa2966cbb49289ca522314a93128a232eea7fd49da1b8301377f973d333dabbd5a43d2d661aa74790fe81ca68335ddef6c7 SHA512 a558cc22b0caf5fcfd0c7d0cb224192c8c43eddad5267f69b544bce1f243f4209d836d373f448a922506ea0b43d55b26394f3dcbe1c0ce39b84a5cb854ac3506
 DIST libutf8proc-EastAsianWidth-17.0.0.xz 72628 BLAKE2B fc58d2ffbe4966fe167248e0703ed1e36f06c0e5338da0c2d800d0813b47800e5971c929fc29999acb6cedff74a0b038a30a3560166248874005911bb4fa92ce SHA512 7bee0fd890f8d0dc3cd64ad74be47173b8057ce1710990fbed585ff96ffd782b0443ffa7561d62ea22d84ffcbd68e58fa28cb3f60db37467f4a6847ca40729da
diff --git a/dev-libs/libutf8proc/libutf8proc-2.11.2.ebuild b/dev-libs/libutf8proc/libutf8proc-2.11.2.ebuild
new file mode 100644
index 000000000000..956eed65cff2
--- /dev/null
+++ b/dev-libs/libutf8proc/libutf8proc-2.11.2.ebuild
@@ -0,0 +1,66 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="8"
+
+inherit toolchain-funcs
+
+EAW="${PN}-EastAsianWidth-17.0.0"
+
+DESCRIPTION="A clean C Library for processing UTF-8 Unicode data"
+HOMEPAGE="https://github.com/JuliaStrings/utf8proc"
+SRC_URI="https://github.com/JuliaStrings/${PN#lib}/releases/download/v${PV}/${P#lib}.tar.gz -> ${P}.tar.gz
+	cjk? ( https://dev.gentoo.org/~hattya/distfiles/${EAW}.xz )"
+
+LICENSE="MIT"
+SLOT="0/${PV}"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux ~x64-macos"
+IUSE="cjk static-libs test"
+RESTRICT="!test? ( test )"
+
+BDEPEND="test? ( =app-i18n/unicode-data-17.0* )"
+S="${WORKDIR}/${P#lib}"
+
+QA_PKGCONFIG_VERSION="3.2.0"
+
+src_prepare() {
+	if use cjk; then
+		einfo "Modifying East Asian Ambiguous (A) as wide ..."
+		cp "${WORKDIR}"/${EAW} ${PN#lib}_data.c || die
+
+		sed -i \
+			-e "/return .*_CATEGORY_CO/s/ ||.*/;/" \
+			-e "/if (ambiguous/,/}/d" \
+			-e "/0xe000/d" \
+			test/charwidth.c
+	fi
+
+	sed -i "/^libdir/s:/lib:/$(get_libdir):" Makefile
+	default
+}
+
+src_compile() {
+	emake \
+		AR="$(tc-getAR)" \
+		CC="$(tc-getCC)" \
+		prefix="${EPREFIX}/usr"
+}
+
+src_test() {
+	cp "${BROOT}"/usr/share/unicode-data/{DerivedCoreProperties,{Normalization,auxiliary/GraphemeBreak}Test}.txt data || die
+
+	local name
+	for name in Uppercase Lowercase; do
+		sed -n "/# Derived Property: ${name}/,/# Total code points:/p" data/DerivedCoreProperties.txt >data/${name}.txt
+	done
+
+	emake CC="$(tc-getCC)" check
+}
+
+src_install() {
+	emake \
+		DESTDIR="${D}" \
+		prefix="${EPREFIX}/usr" \
+		install
+	use static-libs || find "${ED}" -name '*.a' -delete || die
+}
diff --git a/dev-libs/m17n-lib/Manifest b/dev-libs/m17n-lib/Manifest
index 61746babce13..6dbf2a2b8704 100644
--- a/dev-libs/m17n-lib/Manifest
+++ b/dev-libs/m17n-lib/Manifest
@@ -1,2 +1 @@
-DIST m17n-lib-1.8.4.tar.gz 1119271 BLAKE2B 790a002e0abd66d7db0d61ab0240712b2810e698c73d507a5054ad83d4a7a7258c4407d5167ce92fc4c1f3acdfc9f8d3244634af801cde2a00762f09d5e1d823 SHA512 7e322788aed8a758a8c289112433aabccd12dacf14b247ba9060503bcc44930c9251f0c4e718987b9a151de097e72bc1e07c8096f7f4ad83a7d7183a549721d6
 DIST m17n-lib-1.8.6.tar.gz 1134862 BLAKE2B d51974643f7c76ccb96f8e9849c7850880d6c206beb07a2dddbe5b885d4ad97d092f80382ad0e3ebe72d76e04510b6ae1753f0395add09250ebc17647a62d57d SHA512 4fe3e9d2f88a90e8e9b30ee53a71612f937ab3d4c5243075f39de13818522e5c595840f67b3411b03d403affeafeb1802158b6ae8ddf80a1e695d1105b595a59
diff --git a/dev-libs/m17n-lib/m17n-lib-1.8.4-r2.ebuild b/dev-libs/m17n-lib/m17n-lib-1.8.4-r2.ebuild
deleted file mode 100644
index 78a32a556786..000000000000
--- a/dev-libs/m17n-lib/m17n-lib-1.8.4-r2.ebuild
+++ /dev/null
@@ -1,89 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI="8"
-
-inherit autotools
-
-DESCRIPTION="Multilingual Library for Unix/Linux"
-HOMEPAGE="https://www.nongnu.org/m17n/"
-SRC_URI="mirror://nongnu/m17n/${P}.tar.gz"
-
-LICENSE="LGPL-2.1+"
-SLOT="0"
-KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ppc ppc64 ~riscv ~sparc x86"
-IUSE="X anthy athena bidi fontconfig gd libotf libxml2 spell xft"
-
-RDEPEND=">=dev-db/m17n-db-${PV}
-	X? (
-		x11-libs/libX11
-		x11-libs/libXt
-		athena? ( x11-libs/libXaw )
-		bidi? ( dev-libs/fribidi )
-		fontconfig? ( media-libs/fontconfig )
-		gd? ( media-libs/gd[png] )
-		libotf? ( dev-libs/libotf )
-		xft? (
-			media-libs/freetype
-			x11-libs/libXft
-		)
-	)
-	anthy? ( app-i18n/anthy )
-	libxml2? ( dev-libs/libxml2:= )
-	spell? ( app-text/aspell )"
-DEPEND="${RDEPEND}"
-BDEPEND="virtual/pkgconfig"
-
-PATCHES=(
-	"${FILESDIR}"/${P}-configure.patch
-	"${FILESDIR}"/${PN}-freetype.patch
-	"${FILESDIR}"/${PN}-ispell.patch
-)
-
-src_prepare() {
-	default
-
-	eautoreconf
-	# workaround for parallel install
-	sed -i "/^install-module/s/:/: install-libLTLIBRARIES/" src/Makefile.in
-}
-
-src_configure() {
-	local myconf=(
-		$(use_with anthy)
-		$(use_with libxml2)
-		$(use_with spell ispell)
-	)
-	if use X; then
-		myconf+=(
-			$(use_with athena)
-			$(use_with bidi fribidi)
-			$(use_with fontconfig)
-			$(use_with xft freetype)
-			$(use_with gd)
-			--with-gui
-			$(use_with libotf)
-			--with-x
-			$(use_with xft)
-		)
-	else
-		myconf+=(
-			--without-athena
-			--without-fontconfig
-			--without-freetype
-			--without-fribidi
-			--without-gd
-			--without-gui
-			--without-libotf
-			--without-x
-			--without-xft
-		)
-	fi
-
-	econf "${myconf[@]}"
-}
-
-src_install() {
-	default
-	find "${ED}" -name '*.la' -delete || die
-}
diff --git a/dev-libs/nss/Manifest b/dev-libs/nss/Manifest
index 32898afdf6af..310b2bf0bd5f 100644
--- a/dev-libs/nss/Manifest
+++ b/dev-libs/nss/Manifest
@@ -4,3 +4,4 @@ DIST nss-3.112.2.tar.gz 76622860 BLAKE2B 5c076163affbfb57625cbc16dacf80a4cb36d87
 DIST nss-3.116.tar.gz 76661970 BLAKE2B 2a9a43a4319447d087fa107b3a5d33e769212177a334660a92ee68b17eb0554d2194e1c3d1eb32c01b083e49b6707e8e3ed1628c407d7efc2bb3aea073249f19 SHA512 35ce4d077b733bb27a235583a27d085a988e0ac09a8390ce482e037c2fd5724a39044e01865d9a78632bd23fe26db0f5508dc27dc7640b2713c784ce8533639f
 DIST nss-3.117.tar.gz 76684970 BLAKE2B cf078cb1d48fbbf39e2661b6cdb9d610db3d0c13bcec68bacaf7cce8165cbf91229f9931008d1bfd28a561cc1fca994fbf3a174ddb7de2cf10ad4208926764a0 SHA512 12e6eaa67d290fc8146dee2d92017fd481e4969d556870ec4200aab8d2590efe63686ca9cca5cc1b95c7078cc0ab7f1e27e77de5a1a2b75c4f1f3b4b65c700fe
 DIST nss-3.118.1.tar.gz 77625759 BLAKE2B 6b2f8bf0707801755b95a863eccf62f6cc9a381bf23e543ba6cff1ad41608846aa4632de6e4b7bc93b005bc43af21e32ae932e1e598ce89c2857c40a236fed6f SHA512 c031b9e200832689c8c02ac3a8327f4d8c74cb10ad1f5cefb8c6a15a469e910e3ea7bacfa617ce4c46d6e77d5a174b1fac89508c94c96e7888ee1838471ab7cc
+DIST nss-3.119.tar.gz 77633205 BLAKE2B 65a90414c0affbe3a814f26f8223f9f175a39082ae1f59699068953e9de3b9ab1bc23b28654978c5c6087310461de53df24753a8e9ef2978bbb562436799df62 SHA512 f2dc601bf6070c493e7577f4fc5d329fdefe6b1cd09e88680b39f0cd6181bbfdce4eedb67d5c612a13f7ad1e57c8de81b366b6565f9353442b4443e041df26b3
diff --git a/dev-libs/nss/nss-3.119.ebuild b/dev-libs/nss/nss-3.119.ebuild
new file mode 100644
index 000000000000..ecb59fc1e1cf
--- /dev/null
+++ b/dev-libs/nss/nss-3.119.ebuild
@@ -0,0 +1,447 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit dot-a flag-o-matic multilib toolchain-funcs multilib-minimal
+
+NSPR_VER="4.37"
+RTM_NAME="NSS_${PV//./_}_RTM"
+
+DESCRIPTION="Mozilla's Network Security Services library that implements PKI support"
+HOMEPAGE="https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS"
+SRC_URI="https://archive.mozilla.org/pub/security/nss/releases/${RTM_NAME}/src/${P}.tar.gz
+	cacert? ( https://dev.gentoo.org/~juippis/mozilla/patchsets/nss-3.104-cacert-class1-class3.patch )"
+
+LICENSE="|| ( MPL-2.0 GPL-2 LGPL-2.1 )"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux ~x64-solaris"
+IUSE="cacert test test-full +utils cpu_flags_ppc_altivec cpu_flags_x86_avx2 cpu_flags_x86_sse3 cpu_flags_ppc_vsx"
+
+REQUIRED_USE="test-full? ( test )"
+
+PROPERTIES="test_network"
+RESTRICT="test"
+
+# pkg-config called by nss-config -> virtual/pkgconfig in RDEPEND
+RDEPEND="
+	>=dev-libs/nspr-${NSPR_VER}[${MULTILIB_USEDEP}]
+	>=dev-db/sqlite-3.8.2[${MULTILIB_USEDEP}]
+	>=virtual/zlib-1.2.8-r1:=[${MULTILIB_USEDEP}]
+	virtual/pkgconfig
+"
+DEPEND="${RDEPEND}"
+BDEPEND="dev-lang/perl"
+
+S="${WORKDIR}/${P}/${PN}"
+
+MULTILIB_CHOST_TOOLS=(
+	/usr/bin/nss-config
+)
+
+PATCHES=(
+	"${FILESDIR}"/nss-3.103-gentoo-fixes-add-pkgconfig-files.patch
+	"${FILESDIR}"/nss-3.21-gentoo-fixup-warnings.patch
+)
+
+src_prepare() {
+	default
+
+	if use cacert ; then
+		eapply -p2 "${DISTDIR}"/nss-3.104-cacert-class1-class3.patch
+	fi
+
+	pushd coreconf >/dev/null || die
+	# hack nspr paths
+	echo 'INCLUDES += -I$(DIST)/include/dbm' \
+		>> headers.mk || die "failed to append include"
+
+	# modify install path
+	sed -e '/CORE_DEPTH/s:SOURCE_PREFIX.*$:SOURCE_PREFIX = $(CORE_DEPTH)/dist:' \
+		-i source.mk || die
+
+	# Respect LDFLAGS
+	sed -i -e 's/\$(MKSHLIB) -o/\$(MKSHLIB) \$(LDFLAGS) -o/g' rules.mk
+
+	# Workaround make-4.4's change to sub-make, bmo#1800237, bgo#882069
+	sed -i -e "s/^CPU_TAG = _.*/CPU_TAG = _$(nssarch)/" Linux.mk || die
+
+	popd >/dev/null || die
+
+	# Fix pkgconfig file for Prefix
+	sed -i -e "/^PREFIX =/s:= /usr:= ${EPREFIX}/usr:" \
+		config/Makefile || die
+
+	# use host shlibsign if need be #436216
+	if tc-is-cross-compiler ; then
+		sed -i \
+			-e 's:"${2}"/shlibsign:shlibsign:' \
+			cmd/shlibsign/sign.sh || die
+	fi
+
+	# dirty hack
+	sed -i -e "/CRYPTOLIB/s:\$(SOFTOKEN_LIB_DIR):../freebl/\$(OBJDIR):" \
+		lib/ssl/config.mk || die
+	sed -i -e "/CRYPTOLIB/s:\$(SOFTOKEN_LIB_DIR):../../lib/freebl/\$(OBJDIR):" \
+		cmd/platlibs.mk || die
+
+	multilib_copy_sources
+	lto-guarantee-fat
+
+	strip-flags
+}
+
+multilib_src_configure() {
+	# Ensure we stay multilib aware
+	sed -i -e "/@libdir@/ s:lib64:$(get_libdir):" config/Makefile || die
+}
+
+nssarch() {
+	# Most of the arches are the same as $ARCH
+	local t=${1:-${CHOST}}
+	case ${t} in
+		*86*-pc-solaris2*) echo "i86pc"   ;;
+		aarch64*)          echo "aarch64" ;;
+		hppa*)             echo "parisc"  ;;
+		i?86*)             echo "i686"    ;;
+		x86_64*)           echo "x86_64"  ;;
+		*)                 tc-arch ${t}   ;;
+	esac
+}
+
+nssbits() {
+	local cc cppflags="${1}CPPFLAGS" cflags="${1}CFLAGS"
+	if [[ ${1} == BUILD_ ]]; then
+		cc=$(tc-getBUILD_CC)
+	else
+		cc=$(tc-getCC)
+	fi
+	# TODO: Port this to toolchain-funcs tc-get-ptr-size/tc-get-build-ptr-size
+	echo > "${T}"/test.c || die
+	${cc} ${!cppflags} ${!cflags} -fno-lto -c "${T}"/test.c -o "${T}/${1}test.o" || die
+	case $(file -S "${T}/${1}test.o") in
+		*32-bit*x86-64*) echo USE_X32=1;;
+		*64-bit*|*ppc64*|*x86_64*) echo USE_64=1;;
+		*32-bit*|*ppc*|*i386*) ;;
+		*) die "Failed to detect whether ${cc} builds 64bits or 32bits, disable distcc if you're using it, please";;
+	esac
+}
+
+multilib_src_compile() {
+	# use ABI to determine bit'ness, or fallback if unset
+	local buildbits mybits
+	case "${ABI}" in
+		n32) mybits="USE_N32=1";;
+		x32) mybits="USE_X32=1";;
+		s390x|*64) mybits="USE_64=1";;
+		${DEFAULT_ABI})
+			einfo "Running compilation test to determine bit'ness"
+			mybits=$(nssbits)
+			;;
+	esac
+	# bitness of host may differ from target
+	if tc-is-cross-compiler; then
+		buildbits=$(nssbits BUILD_)
+	fi
+
+	local makeargs=(
+		CC="$(tc-getCC)"
+		CCC="$(tc-getCXX)"
+		AR="$(tc-getAR) rc \$@"
+		RANLIB="$(tc-getRANLIB)"
+		OPTIMIZER=
+		${mybits}
+		disable_ckbi=0
+	)
+
+	# Take care of nspr settings #436216
+	local myCPPFLAGS="${CPPFLAGS} $($(tc-getPKG_CONFIG) nspr --cflags) -D_FILE_OFFSET_BITS=64"
+	unset NSPR_INCLUDE_DIR
+
+	export NSS_ALLOW_SSLKEYLOGFILE=1
+	export NSS_ENABLE_WERROR=0 #567158
+	export BUILD_OPT=1
+	export NSS_USE_SYSTEM_SQLITE=1
+	export NSDISTMODE=copy
+	export FREEBL_NO_DEPEND=1
+	export FREEBL_LOWHASH=1
+	export NSS_SEED_ONLY_DEV_URANDOM=1
+	export USE_SYSTEM_ZLIB=1
+	export ZLIB_LIBS=-lz
+	export ASFLAGS=""
+	# Fix build failure on arm64
+	export NS_USE_GCC=1
+	# Detect compiler type and set proper environment value
+	if tc-is-gcc; then
+		export CC_IS_GCC=1
+	elif tc-is-clang; then
+		export CC_IS_CLANG=1
+	fi
+
+	export NSS_DISABLE_GTESTS=$(usex !test 1 0)
+
+	# Include exportable custom settings defined by users, #900915
+	# Two examples uses:
+	#   EXTRA_NSSCONF="MYONESWITCH=1"
+	#   EXTRA_NSSCONF="MYVALUE=0 MYOTHERVALUE=1 MYTHIRDVALUE=1"
+	# e.g.
+	#   EXTRA_NSSCONF="NSS_ALLOW_SSLKEYLOGFILE=0"
+	# or
+	#   EXTRA_NSSCONF="NSS_ALLOW_SSLKEYLOGFILE=0 NSS_ENABLE_WERROR=1"
+	# etc.
+	if [[ -n "${EXTRA_NSSCONF}" ]]; then
+		ewarn "EXTRA_NSSCONF applied, please disable custom settings before reporting bugs."
+		read -a myextranssconf <<< "${EXTRA_NSSCONF}"
+
+		for (( i=0; i<${#myextranssconf[@]}; i++ )); do
+			export "${myextranssconf[$i]}"
+			echo "exported ${myextranssconf[$i]}"
+		done
+	fi
+
+	# explicitly disable altivec/vsx if not requested
+	# https://bugs.gentoo.org/789114
+	case ${ARCH} in
+		ppc*)
+			use cpu_flags_ppc_altivec || export NSS_DISABLE_ALTIVEC=1
+			use cpu_flags_ppc_vsx || export NSS_DISABLE_CRYPTO_VSX=1
+			;;
+	esac
+
+	use cpu_flags_x86_avx2 || export NSS_DISABLE_AVX2=1
+	use cpu_flags_x86_sse3 || export NSS_DISABLE_SSE3=1
+
+	local d
+
+	# Disables calling shlibsign during the build #956431 and #436216
+	tc-is-cross-compiler && makeargs+=( CROSS_COMPILE=1 )
+
+	# Build the host tools first.
+	LDFLAGS="${BUILD_LDFLAGS}" \
+	XCFLAGS="${BUILD_CFLAGS} -D_FILE_OFFSET_BITS=64" \
+	NSPR_LIB_DIR="${T}/fakedir" \
+	emake -C coreconf \
+		CC="$(tc-getBUILD_CC)" \
+		${buildbits-${mybits}}
+	makeargs+=( NSINSTALL="${PWD}/$(find -type f -name nsinstall)" )
+
+	# Then build the target tools.
+	for d in . lib/dbm ; do
+		CPPFLAGS="${myCPPFLAGS}" \
+		XCFLAGS="${CFLAGS} ${CPPFLAGS} -D_FILE_OFFSET_BITS=64" \
+		NSPR_LIB_DIR="${T}/fakedir" \
+		emake "${makeargs[@]}" -C ${d} OS_TEST="$(nssarch)"
+	done
+}
+
+multilib_src_test() {
+	einfo "Tests can take a *long* time, especially on a multilib system."
+	einfo "~10 minutes per lib configuration with only 'standard' tests,"
+	einfo "~40 minutes per lib configuration with 'full' tests. Bug #852755"
+
+	# https://www.linuxfromscratch.org/blfs/view/svn/postlfs/nss.html
+	# https://firefox-source-docs.mozilla.org/security/nss/legacy/nss_sources_building_testing/index.html#running_the_nss_test_suite
+	# https://www-archive.mozilla.org/projects/security/pki/nss/testnss_32.html (older)
+	export BUILD_OPT=1
+	export HOST="localhost"
+	export DOMSUF="localdomain"
+	export USE_IP=TRUE
+	export IP_ADDRESS="127.0.0.1"
+
+	# Only run the standard cycle instead of full, reducing testing time from 45 minutes to 15
+	# per lib implementation.
+	if use test-full ; then
+		# export NSS_CYCLES="standard pkix sharedb"
+		:;
+	else
+		export NSS_CYCLES="standard"
+	fi
+
+	NSINSTALL="${PWD}/$(find -type f -name nsinstall)"
+
+	cd "${BUILD_DIR}"/tests || die
+	# Hack to get current objdir (prefixed dir where built binaries are)