untrusted comment: verify with openbsd-65-base.pub
RWSZaRmt1LEQT2u5sothBTviqmlEOA6xX77zn23NWQYZo/aXgB8y2TdANkc/DBw3/8mVQtw8HjlQS+aUj+KuX9j0/1WDftcm2gg=

OpenBSD 6.5 errata 016, November 16, 2019:

A new kernel may require newer firmware images. Make sysupgrade
opportunistically update firmware images.

Apply by doing:
    signify -Vep /etc/signify/openbsd-65-base.pub -x 016_sysupgrade.patch.sig \
        -m - | (cd /usr/src && patch -p0)

And then rebuild and install sysupgrade:
    cd /usr/src/usr.sbin/sysupgrade
    make obj
    make
    make install

Index: usr.sbin/sysupgrade/sysupgrade.sh
===================================================================
RCS file: /cvs/src/usr.sbin/sysupgrade/sysupgrade.sh,v
retrieving revision 1.25.2.1
diff -u -p -r1.25.2.1 sysupgrade.sh
--- usr.sbin/sysupgrade/sysupgrade.sh	2 Oct 2019 17:18:14 -0000	1.25.2.1
+++ usr.sbin/sysupgrade/sysupgrade.sh	12 Nov 2019 21:11:24 -0000
@@ -197,6 +197,9 @@ rm -f /home/_sysupgrade/{${CLEAN}}
 __EOT
 fi
 
+echo Fetching updated firmware.
+fw_update || echo "Warning: firmware not updated."
+
 install -F -m 700 bsd.rd /bsd.upgrade
 sync