🐡🐡🐡
Shell tips
Want to know if security fixes are waiting for you, without installing them yet? syspatch -c lists the available patches, and syspatch -l the ones already installed. It prints nothing when you are up to date, so you can put syspatch -c in root's crontab: you will get a mail only when a new patch is out.
Since erratum 005, OpenBSD 8.0 comes with dbupdate(8). It refreshes the list of certificate authorities (/etc/ssl/cert.pem) and the time zones (/usr/share/zoneinfo) between two releases. Run doas dbupdate -n to see what it would do without changing anything. If you added your own certificate authority to cert.pem, move it to /etc/ssl/cert.local.pem: dbupdate puts it back on top after each update.