OPNSense/core 6fdbcb0src/opnsense/mvc/app/library/OPNsense/Core Shell.php

backend: rearrange functions in Shell class
DeltaFile
+30-28src/opnsense/mvc/app/library/OPNsense/Core/Shell.php
+30-281 files

OPNSense/core 90a0178src/etc/inc util.inc, src/opnsense/mvc/app/library/OPNsense/Core Shell.php

backend: introduce Shell::run_safe and use it instead
DeltaFile
+31-68src/opnsense/mvc/app/library/OPNsense/Core/Shell.php
+1-16src/etc/inc/util.inc
+4-7src/opnsense/mvc/app/library/OPNsense/Trust/Store.php
+36-913 files

LLVM/project 62e590dpolly/lib/Support RegisterPasses.cpp

Silence unused warning
DeltaFile
+0-16polly/lib/Support/RegisterPasses.cpp
+0-161 files

LLVM/project edbf9e4mlir/lib/Dialect/Bufferization/Transforms OneShotAnalysis.cpp

[mlir] Remove a redundant cast (NFC) (#168241)

llvm::all_of already returns bool.

Identified with readability-redundant-casting.
DeltaFile
+1-1mlir/lib/Dialect/Bufferization/Transforms/OneShotAnalysis.cpp
+1-11 files

LLVM/project 019e90fllvm/include/llvm/ADT DenseMap.h

[ADT] Group public functions in DenseMap.h (NFC) (#168239)

This patch groups public functions, including the constructors, the
destructor, and the copy/move assignment operators.
DeltaFile
+21-25llvm/include/llvm/ADT/DenseMap.h
+21-251 files

LLVM/project 324e92bpolly/include/polly ScopPass.h, polly/lib/Analysis ScopPass.cpp

[Polly] Remove ScopPass infrastructure
DeltaFile
+0-264polly/include/polly/ScopPass.h
+0-134polly/lib/Analysis/ScopPass.cpp
+3-113polly/lib/Support/RegisterPasses.cpp
+0-66polly/unittests/ScopPassManager/PassManagerTest.cpp
+0-44polly/lib/Support/PollyPasses.def
+0-43polly/lib/Transform/DeLICM.cpp
+3-66437 files not shown
+53-1,16143 files

OPNSense/core 20f5b67src/opnsense/mvc/app/views/OPNsense/IPsec sessions.volt

VPN: IPsec: Status Overview - hide phase 2 output based on phase 1 status instead of the row count for phase 2. closes https://github.com/opnsense/core/issues/9397

This likely has been in here for a very long time, but when filtering phase 2 entries, the grid can hide to never being shown again. To solve this without too much glue, look at the connected status of the phase 1 in order to show the children.
DeltaFile
+6-9src/opnsense/mvc/app/views/OPNsense/IPsec/sessions.volt
+6-91 files

FreeBSD/ports 0d0b5b5audio/lilv distinfo Makefile

audio/lilv: Update to 0.26.0

ChangeLog: https://drobilla.net/2025/11/12/lilv-0-26-0.html
DeltaFile
+3-3audio/lilv/distinfo
+1-1audio/lilv/Makefile
+4-42 files

FreeBSD/ports 22074abdevel/R-cran-testthat Makefile distinfo

devel/R-cran-testthat: Update to 3.3.0

- Put tests as safe
  A custom do-test and UTF-8 env needed to be set so tests succeed

ChangeLog: https://cloud.r-project.org/web/packages/testthat/news/news.html
DeltaFile
+15-15devel/R-cran-testthat/Makefile
+3-3devel/R-cran-testthat/distinfo
+18-182 files

FreeBSD/ports f3108c5math/intx distinfo Makefile

math/intx: Update to 0.14.0

ChangeLog: https://github.com/chfast/intx/releases/tag/v0.14.0
DeltaFile
+3-3math/intx/distinfo
+1-1math/intx/Makefile
+4-42 files

FreeBSD/src e0c41afrelease/tools vmimage.subr

vmimage.subr: Enable FreeBSD-base repo if pkgbase

When creating a VM image using pkgbase, create a configuration file in
/usr/local/etc/pkg/repos/FreeBSD.conf which enables the FreeBSD-base
repository.  (This repository is defined in /etc/pkg/FreeBSD.conf as
being disabled by default.)

Reported by:    Mark Millard
MFC after:      immediately (needed for 15.0-RC1)
DeltaFile
+4-0release/tools/vmimage.subr
+4-01 files

FreeBSD/src a96230eusr.sbin/bsdinstall/scripts pkgbase.in

bsdinstall: Enable FreeBSD-base repo when pkgbase

When performing a pkgbase install, create a configuration file in
/usr/local/etc/pkg/repos/FreeBSD.conf which enables the FreeBSD-base
repository.  (This repository is defined in /etc/pkg/FreeBSD.conf as
being disabled by default.)

Reported by:    Mark Millard
Reviewed by:    markj
MFC after:      immediately (needed for 15.0-RC1)
Differential Revision:  https://reviews.freebsd.org/D53777
DeltaFile
+4-0usr.sbin/bsdinstall/scripts/pkgbase.in
+4-01 files

OPNSense/core fa16cd7. plist, src/etc/inc util.inc

backend: move Safe to Shell class

Migrate the one user in the Monit migration to shell_safe() because
that is the most appropriate here (no error code needed, just output).
DeltaFile
+0-71src/opnsense/mvc/app/library/OPNsense/Core/Safe.php
+40-0src/opnsense/mvc/app/library/OPNsense/Core/Shell.php
+4-6src/opnsense/mvc/app/models/OPNsense/Monit/Migrations/M1_0_0.php
+4-4src/etc/inc/util.inc
+0-1plist
+48-825 files

LLVM/project 6cedafbllvm/lib/Target/X86 X86ISelLowering.cpp, llvm/test/CodeGen/X86 vselect.ll

X86: Handle poison in buildFromShuffleMostly (#168218)

DeltaFile
+3-3llvm/test/CodeGen/X86/vselect.ll
+2-2llvm/lib/Target/X86/X86ISelLowering.cpp
+5-52 files

OpenBSD/ports JtYSHSpdatabases/postgresql distinfo Makefile, databases/postgresql/pkg PLIST-docs

   update to postgresql-17.7
   CVE-2025-12817 (server privs issue), CVE-2025-12818 (INT_MAX overflow in alloc)
VersionDeltaFile
1.106.2.1+2-2databases/postgresql/distinfo
1.311.2.1+1-1databases/postgresql/Makefile
1.119.2.1+1-0databases/postgresql/pkg/PLIST-docs
+4-33 files

LLVM/project e009de2llvm/lib/Transforms/Vectorize LoopVectorize.cpp VPlanPatternMatch.h

[LV] Use VPlan pattern matching in adjustRecipesForReductions (NFC)

Replace the assert checking if CurrentLinkI is a CmpInst with a pattern
matching check in the if condition. This uses VPlan-level pattern matching
instead of inspecting the underlying instruction type.
DeltaFile
+1-4llvm/lib/Transforms/Vectorize/LoopVectorize.cpp
+4-0llvm/lib/Transforms/Vectorize/VPlanPatternMatch.h
+5-42 files

NetBSD/pkgsrc 9R8GLHIdoc CHANGES-2025

   doc: Added audio/sndio version 1.10.0
VersionDeltaFile
1.6750+2-1doc/CHANGES-2025
+2-11 files

FreeBSD/src 10a4f2drelease/tools vmimage.subr

vmimage.subr: Log pkg/local.sqlite if pkgbase

We were doing this in vm_extra_install_packages but VM images without
any extra packages installed would not get this installed.  This
results in a pkgbase system which thinks it doesn't have any packages
installed (even though all the files are right there).

Add a "metalog_add_data ./var/db/pkg/local.sqlite" call to the pkgbase
install code path, and make the call from vm_extra_install_packages
conditional on !PKGBASE.

Reported by:    Michael Dexter
MFC after:      immediately (needed for 15.0-RC1)
DeltaFile
+4-1release/tools/vmimage.subr
+4-11 files

OPNSense/core 7d04c17. plist, src/etc/inc util.inc

backend: move exec_safe, pass_safe and shell_safe to a class #9325

Do a clean cut to a class for these functions first.  We need them in the
MVC code and this is a good opportunity to try and add them to the legacy
code via the wrappers.

The others should follow but let's settle on better names first perhaps.
DeltaFile
+71-0src/opnsense/mvc/app/library/OPNsense/Core/Safe.php
+12-32src/etc/inc/util.inc
+1-0plist
+84-323 files

NetBSD/pkgsrc bYaN2ZKaudio Makefile

   audio: add sndio
VersionDeltaFile
1.716+2-1audio/Makefile
+2-11 files

OpenBSD/ports Ua8rKpKgames/openmw/patches patch-components_files_linuxpath_cpp

   Add missing patch, pointed out by Brad.
VersionDeltaFile
1.3+20-10games/openmw/patches/patch-components_files_linuxpath_cpp
+20-101 files

NetBSD/pkgsrc Fq2sTqlaudio/sndio Makefile PLIST, audio/sndio/files sndio.sh

   audio/sndio: initial import of package

   Import sndio-1.0.1 from wip.
   Initially ported to NetBSD by Kamil Rytarowski.
   Maintained by @kikadf in wip in more recent years,
   with minor modifications added by @vins.

   Sndio is a small audio and MIDI framework part of the OpenBSD project. It
   provides an lightweight audio & MIDI server and a fully documented user-space
   API to access either the server or directly the hardware in a uniform way.
   Sndio is designed to work for desktop applications, but pays special attention
   to synchronization mechanisms and reliability required by music applications.
   Reliability through simplicity are part of the project goals.
VersionDeltaFile
1.1+56-0audio/sndio/patches/patch-configure
1.1+50-0audio/sndio/Makefile
1.1+49-0audio/sndio/PLIST
1.1+43-0audio/sndio/patches/patch-libsndio_sio__oss.c
1.1+43-0audio/sndio/files/sndio.sh
1.1+12-0audio/sndio/buildlink3.mk
+253-02 files not shown
+266-08 files

FreeBSD/src 66f2f1csys/netpfil/pf pf.c, tests/sys/netpfil/pf divert-to.sh

pf: handle divert packets

In a divert setup pf_test_state() may return PF_PASS, but not set the state
pointer. We didn't handle that, and as a result crashed immediately afterwards
trying to dereference that NULL state pointer.

Add a test case to provoke the problem.

PR:             260867
MFC after:      2 weeks
Submitted by:   Phil Budne <phil.budne at gmail.com>
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+43-0tests/sys/netpfil/pf/divert-to.sh
+12-8sys/netpfil/pf/pf.c
+55-82 files

NetBSD/pkgsrc-wip b14bc40sndio Makefile distinfo, sndio/files sndio.sh

sndio: more fixes
* Standardise configure options across target platforms, to avoid PLIST
  inconsistencies.
* Use /var/run/sndio as home directory for the _sndio users, as stated
  in the official docs.
* Fix OSS patch for NetBSD.
* USe libbsd on Linux.
* Improve rc.d script:
    - create /var/run/sndio directory if non existent.
    - use daemonize to put sndio in background with debug option
      enabled. Redirect output to a log file inside sndio's directory.

Package tested and working on NetBSD 10.1, with AUDIODEVICE set to
`rsnd/0' (accessing /dev/audio directly through libsndio).
I also built SoX with sunaudio disabled and sndio support turned on.
Playing a .wav file works fine when AUDIODEVICE points to rsnd/0.
DeltaFile
+21-9sndio/Makefile
+27-0sndio/files/sndio.sh
+16-6sndio/patches/patch-libsndio_sio__oss.c
+12-6sndio/patches/patch-configure
+2-2sndio/distinfo
+78-235 files

LLVM/project d831f8dllvm/lib/CodeGen/SelectionDAG LegalizeVectorTypes.cpp LegalizeVectorOps.cpp, llvm/test/CodeGen/AArch64 loop-dependence-mask-ccmp.ll alias_mask.ll

[SelectionDAG] Fix AArch64 machine verifier bug when expanding LOOP_DEPENDENCE_MASK (#168221)

TargetConstant nodes don't match TableGen ImmLeaf patterns during
instruction selection. When this zero constant flows into the AArch64
CCMP formation code, the machine verifier hits an assertion in expensive
checks.

Fixes: #168227
DeltaFile
+45-0llvm/test/CodeGen/AArch64/loop-dependence-mask-ccmp.ll
+4-6llvm/test/CodeGen/AArch64/alias_mask.ll
+1-1llvm/lib/CodeGen/SelectionDAG/LegalizeVectorTypes.cpp
+1-1llvm/lib/CodeGen/SelectionDAG/LegalizeVectorOps.cpp
+51-84 files

OPNSense/core f1fcc94src/etc/inc interfaces.inc system.inc, src/etc/inc/plugins.inc.d ipsec.inc dpinger.inc

backend: switch to mwexecfb() #9325
DeltaFile
+2-2src/etc/inc/plugins.inc.d/ipsec.inc
+1-1src/etc/inc/plugins.inc.d/dpinger.inc
+1-1src/etc/inc/interfaces.inc
+1-1src/etc/inc/plugins.inc.d/ntpd.inc
+1-1src/etc/inc/plugins.inc.d/unbound.inc
+1-1src/etc/inc/system.inc
+7-76 files

OPNSense/core 981f9a5src/etc/inc filter.inc

firewall: mwexecf() stuff #9325

mwexecfn() is actually really good to for grepping and therefore future
audits.  Two weird spots marked anyway.
DeltaFile
+8-8src/etc/inc/filter.inc
+8-81 files

OPNSense/core 17b4150src/etc/inc util.inc

system: mwexecf() for legacy service controls #9325
DeltaFile
+3-3src/etc/inc/util.inc
+3-31 files

OPNSense/core 175c159src/etc/inc system.inc util.inc, src/etc/inc/plugins.inc.d dhcpd.inc

backend: switch the previously touched join()s to implode()s
DeltaFile
+4-4src/etc/inc/system.inc
+2-2src/etc/inc/plugins.inc.d/dhcpd.inc
+1-1src/etc/inc/util.inc
+7-73 files

OPNSense/core 85908b5src/opnsense/scripts/firmware/repos OPNsense.php

firmware: replace joined command with new apporach #9325
DeltaFile
+8-5src/opnsense/scripts/firmware/repos/OPNsense.php
+8-51 files