FreeNAS/freenas ca4920asrc/middlewared/middlewared/plugins/smb_ sharesec.py, src/middlewared/middlewared/pytest/unit/utils test_security_descriptor.py

Fix parsing / flush of legacy share acl format

Between TrueNAS 13 and SCALE we altered the format for SMB share
ACLs that is written to our sqlite3 database from a basic
security descriptor string as formatted by the sharesec utility
to the actual secuirty descriptor bytes that are stored in the
share_info.tdb file. This commit fixes handling for cases where
user has the old format written to the DB and adds tests.
DeltaFile
+32-0src/middlewared/middlewared/pytest/unit/utils/test_security_descriptor.py
+13-0src/middlewared/middlewared/utils/security_descriptor.py
+3-1src/middlewared/middlewared/plugins/smb_/sharesec.py
+48-13 files

FreeBSD/ports 4740aadsecurity/vuxml/vuln 2025.xml

security/vuxml: Add forgejo vulnerability

 * CVE-2025-68937
DeltaFile
+30-0security/vuxml/vuln/2025.xml
+30-01 files

FreeBSD/ports 946fbaewww/gohugo distinfo Makefile

www/gohugo: Update to 0.153.3

ChangeLog: https://github.com/gohugoio/hugo/releases/tag/v0.153.3

 * build(deps): bump github.com/bep/imagemeta from 0.12.0 to 0.12.1
 * Fix error with _content.gotmpl file with index.md siblings

ChangeLog: https://github.com/gohugoio/hugo/releases/tag/v0.153.4

Set cascade target to the content matrix if not set in the cascade itself.

Approved by: doceng@ (implicit)
DeltaFile
+5-5www/gohugo/distinfo
+1-1www/gohugo/Makefile
+6-62 files

FreeBSD/src 3e2093dsys/modules/linux Makefile, sys/modules/linux_common Makefile

linux: Add required symbol to EXPORT_SYMS list

PR:             291270
DeltaFile
+1-0sys/modules/linux_common/Makefile
+1-0sys/modules/linux/Makefile
+2-02 files

FreeBSD/ports 39b3765databases/sq distinfo Makefile

databases/sq: Update to 0.48.10
DeltaFile
+7-7databases/sq/distinfo
+1-2databases/sq/Makefile
+8-92 files

FreeBSD/ports 782cf5bsysutils/mult distinfo Makefile

sysutils/mult: Update to 0.3.0
DeltaFile
+7-7sysutils/mult/distinfo
+1-2sysutils/mult/Makefile
+8-92 files

FreeBSD/ports 8be929cnet/redpanda-connect distinfo Makefile

net/redpanda-connect: Update to 4.76.1
DeltaFile
+5-5net/redpanda-connect/distinfo
+1-1net/redpanda-connect/Makefile
+6-62 files

FreeBSD/ports afd3478devel/gitid distinfo Makefile

devel/gitid: Update to 1.3.0
DeltaFile
+5-5devel/gitid/distinfo
+1-2devel/gitid/Makefile
+6-72 files

FreeBSD/src 6ea0537sys/modules/qat/qat_api Makefile, sys/modules/qat/qat_common Makefile

qat: Export missing symbols in qat_common

Some symbols required by dependent modules were missing from
qat_common.ko and qat_api.ko, causing load failures when local symbol
resolution is disabled.

PR:             291271
Reviewed by:    zlei, markj
Differential Revision:  https://reviews.freebsd.org/D54107
DeltaFile
+1-1sys/modules/qat/qat_common/Makefile
+1-1sys/modules/qat/qat_api/Makefile
+2-22 files

LLVM/project 9b65f28mlir/docs Canonicalization.md

address comments
DeltaFile
+12-7mlir/docs/Canonicalization.md
+12-71 files

FreeBSD/ports 6852532www/trac-tocmacro Makefile distinfo

www/trac-tocmacro: change download location to my mirror
DeltaFile
+5-10www/trac-tocmacro/Makefile
+3-3www/trac-tocmacro/distinfo
+8-132 files

FreeBSD/ports 53dba21www/trac-markdownmacro Makefile distinfo

www/trac-markdownmacro: change download location to my mirror
DeltaFile
+5-11www/trac-markdownmacro/Makefile
+3-3www/trac-markdownmacro/distinfo
+8-142 files

FreeBSD/ports cbf9e5awww/trac-accountmanager Makefile distinfo

www/trac-accountmanager: change download location to my mirror
DeltaFile
+5-11www/trac-accountmanager/Makefile
+3-3www/trac-accountmanager/distinfo
+8-142 files

LLVM/project 144dc74llvm/lib/Transforms/InstCombine InstCombineSimplifyDemanded.cpp, llvm/test/Transforms/InstCombine fsh.ll

[InstCombine] Drop range metadata when simplifying `fshl` with demanded bits (#173864)

InstCombine may rewrite `llvm.fshl` operands when simplifying based on
demanded bits, which can invalidate previously attached return value
constraints. Except from range attribute, `!range` metadata could also
be not dropped after operand rewriting, leading to stale
poison-generating metadata and potential miscompilations.

This patch drops poison-generating annotations when `fshl` operands are
simplified, ensuring that `!range` metadata is cleared consistently with
return attributes.

Alive2 proof: https://alive2.llvm.org/ce/z/EVUvY6

Fixes #173793
DeltaFile
+15-0llvm/test/Transforms/InstCombine/fsh.ll
+2-2llvm/lib/Transforms/InstCombine/InstCombineSimplifyDemanded.cpp
+17-22 files

LLVM/project 96f40afllvm/include/llvm/Support KnownFPClass.h, llvm/lib/Analysis ValueTracking.cpp

InstCombine: Handle fmul in SimplifyDemandedFPClass
DeltaFile
+122-1llvm/lib/Transforms/InstCombine/InstCombineSimplifyDemanded.cpp
+46-39llvm/test/Transforms/InstCombine/simplify-demanded-fpclass-fmul.ll
+5-59llvm/lib/Analysis/ValueTracking.cpp
+58-0llvm/lib/Support/KnownFPClass.cpp
+29-0llvm/include/llvm/Support/KnownFPClass.h
+260-995 files

LLVM/project 58a85fcllvm/test/Transforms/InstCombine simplify-demanded-fpclass-fmul.ll

InstCombine: Add baseline tests for fmul SimplifyDemandedFPClass handling
DeltaFile
+792-0llvm/test/Transforms/InstCombine/simplify-demanded-fpclass-fmul.ll
+792-01 files

FreeNAS/freenas 959e921src/middlewared/middlewared/plugins/apps custom_app_utils.py, src/middlewared/middlewared/plugins/apps/ix_apps utils.py metadata.py

NAS-139089 / 25.10.2 / Use CSafeLoader for YAML Loading... (by essinghigh) (#17912)

... to avoid holding the GIL

I've been raising a lot of PRs lately, had some time off work, so
apologies for the spam :)

### Problem
Users running apps have been reporting high `asyncio_loop` CPU% util
since around 25.04.
See:
https://forums.truenas.com/t/asyncio-loop-over-100-cpu-middlewared-gui-slow-seems-docker-ghcr-custom-app-related/49461
Through profiling middleware with py-spy, I found that YAML parsing
accounts for approximately 50% of the stack traces during high
utilization periods. PyYAML's pure Python implementation is CPU
intensive and, more importantly, holds the GIL, blocking the asyncio
loop.

### Solution

    [19 lines not shown]
DeltaFile
+21-21src/middlewared/middlewared/pytest/unit/plugins/apps/test_quoted_str_dumper.py
+19-0src/middlewared/middlewared/plugins/apps/ix_apps/utils.py
+4-4src/middlewared/middlewared/plugins/apps/ix_apps/metadata.py
+4-3src/middlewared/middlewared/pytest/unit/plugins/apps/test_upgrade_values.py
+3-3src/middlewared/middlewared/plugins/apps/ix_apps/lifecycle.py
+2-1src/middlewared/middlewared/plugins/apps/custom_app_utils.py
+53-322 files not shown
+57-348 files

FreeNAS/freenas 454d35csrc/middlewared/middlewared/plugins/apps migration_utils.py, src/middlewared/middlewared/plugins/apps/ix_apps utils.py metadata.py

NAS-139089 / 26.04 / Use CSafeLoader for YAML Loading... (#17906)

... to avoid holding the GIL

I've been raising a lot of PRs lately, had some time off work, so
apologies for the spam :)

### Problem
Users running apps have been reporting high `asyncio_loop` CPU% util
since around 25.04.
See:
https://forums.truenas.com/t/asyncio-loop-over-100-cpu-middlewared-gui-slow-seems-docker-ghcr-custom-app-related/49461
Through profiling middleware with py-spy, I found that YAML parsing
accounts for approximately 50% of the stack traces during high
utilization periods. PyYAML's pure Python implementation is CPU
intensive and, more importantly, holds the GIL, blocking the asyncio
loop.

### Solution

    [15 lines not shown]
DeltaFile
+21-21src/middlewared/middlewared/pytest/unit/plugins/apps/test_quoted_str_dumper.py
+19-0src/middlewared/middlewared/plugins/apps/ix_apps/utils.py
+4-4src/middlewared/middlewared/plugins/apps/ix_apps/metadata.py
+4-3src/middlewared/middlewared/pytest/unit/plugins/apps/test_upgrade_values.py
+3-3src/middlewared/middlewared/plugins/apps/ix_apps/lifecycle.py
+2-1src/middlewared/middlewared/plugins/apps/migration_utils.py
+53-322 files not shown
+57-348 files

OPNSense/core 3e810bdsrc/etc/inc interfaces.inc

interfaces: prepare for #7647 by clustering the id-assoc blocks

This way we can retroactively render the full sections in the configuration.
Some research still needed for how dhcp6c tracks these numbers (also across
interfaces worst case).

The old $id logic with the increment doesn't make much sense at first glance
given the example config in the ticket.
DeltaFile
+27-12src/etc/inc/interfaces.inc
+27-121 files

LLVM/project e4722c6llvm/include/llvm/Support KnownFPClass.h, llvm/lib/Analysis ValueTracking.cpp

InstCombine: Handle exp/exp2/exp10 in SimplifyDemandedFPClass (#173432)

I'm working on optimizing out the tail sequences in the
implementations of the 4 different flavors of pow. These
include chains of selects on the various edge cases.

Related to #64870
DeltaFile
+91-0llvm/lib/Transforms/InstCombine/InstCombineSimplifyDemanded.cpp
+34-47llvm/test/Transforms/InstCombine/simplify-demanded-fpclass-exp.ll
+5-24llvm/lib/Analysis/ValueTracking.cpp
+21-0llvm/lib/Support/KnownFPClass.cpp
+3-0llvm/include/llvm/Support/KnownFPClass.h
+154-715 files

FreeBSD/ports 9b5b656audio/asterisk-espeak Makefile, audio/asterisk-flite Makefile

*/asterisk-*: default flavor must be the first one
DeltaFile
+2-2audio/asterisk-espeak/Makefile
+2-2audio/asterisk-flite/Makefile
+2-2net/asterisk-chan_sccp/Makefile
+2-2net/asterisk-g72x/Makefile
+8-84 files

FreeBSD/ports 7b3a2f3graphics/opencv pkg-plist distinfo

graphics/opencv: Update to 4.12.0

PR:             292002
Reviewed by:    vishwin
Co-authored-by: Gleb Popov <arrowd at FreeBSD.org>
DeltaFile
+62-60graphics/opencv/pkg-plist
+5-7graphics/opencv/distinfo
+2-4graphics/opencv/Makefile
+69-713 files

FreeBSD/src daef625usr.sbin/bhyve/slirp slirp-helper.c

bhyve: Use a blocking socket in the helper process

The send_packet callback does not handle EAGAIN, and on the recv side we
already use poll() and MSG_DONTWAIT to implement a non-blocking loop.

PR:             291616
Tested by:      novel
Fixes:          0e62ebd20172 ("bhyve: Move the slirp backend out into a separate process")
Differential Revision:  https://reviews.freebsd.org/D54340
DeltaFile
+2-0usr.sbin/bhyve/slirp/slirp-helper.c
+2-01 files

LLVM/project 75a0347llvm/include/llvm/ADT iterator.h

[ADT] Fix MSVC build after iterator C++20 fix (#173495)

Fixes an MSCV build issue after the C++20 fix in
https://github.com/llvm/llvm-project/pull/169772. See the [failure
log](https://productionresultssa1.blob.core.windows.net/actions-results/604d315e-edbd-401f-9a85-9ec5fcbc4996/workflow-job-run-99b94847-47a4-5b95-9933-44db3e32a2a7/logs/job/job-logs.txt?rsct=text%2Fplain&se=2025-12-24T11%3A16%3A19Z&sig=3leOtxGMlJmAMzOCtakzD8%2FOQCXF2HfflooR%2Bm%2Bt7Ng%3D&ske=2025-12-24T21%3A53%3A06Z&skoid=ca7593d4-ee42-46cd-af88-8b886a2f84eb&sks=b&skt=2025-12-24T09%3A53%3A06Z&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skv=2025-11-05&sp=r&spr=https&sr=b&st=2025-12-24T11%3A06%3A14Z&sv=2025-11-05)
in the IREE downstream project.

Making IsRandomAccess, IsBidirectional public ensures that they are
always accessible, avoiding the access-related SFINAE ambiguity that
causes different compilers to handle this differently.

The build is passing after this change:
https://github.com/iree-org/iree/actions/runs/20485132054/job/58865989220?pr=22979
DeltaFile
+4-1llvm/include/llvm/ADT/iterator.h
+4-11 files

LLVM/project 6e161f1llvm/lib/Support KnownFPClass.cpp

Use propagateNaN
DeltaFile
+1-4llvm/lib/Support/KnownFPClass.cpp
+1-41 files

LLVM/project 9e8a478llvm/lib/Transforms/InstCombine InstCombineSimplifyDemanded.cpp

Use fcPositive
DeltaFile
+1-2llvm/lib/Transforms/InstCombine/InstCombineSimplifyDemanded.cpp
+1-21 files

LLVM/project fd553b6llvm/include/llvm/Support KnownFPClass.h, llvm/lib/Analysis ValueTracking.cpp

Make KnownFPClass::exp not side-effecting
DeltaFile
+9-7llvm/lib/Transforms/InstCombine/InstCombineSimplifyDemanded.cpp
+5-9llvm/lib/Analysis/ValueTracking.cpp
+5-5llvm/lib/Support/KnownFPClass.cpp
+1-1llvm/include/llvm/Support/KnownFPClass.h
+20-224 files

LLVM/project 0a74f72llvm/include/llvm/Support KnownFPClass.h, llvm/lib/Analysis ValueTracking.cpp

InstCombine: Handle exp/exp2/exp10 in SimplifyDemandedFPClass

I'm working on optimizing out the tail sequences in the
implementations of the 4 different flavors of pow. These
include chains of selects on the various edge cases.

Related to #64870
DeltaFile
+90-0llvm/lib/Transforms/InstCombine/InstCombineSimplifyDemanded.cpp
+34-47llvm/test/Transforms/InstCombine/simplify-demanded-fpclass-exp.ll
+24-0llvm/lib/Support/KnownFPClass.cpp
+2-17llvm/lib/Analysis/ValueTracking.cpp
+3-0llvm/include/llvm/Support/KnownFPClass.h
+153-645 files

LLVM/project fc8ec0dllvm/test/Transforms/InstCombine simplify-demanded-fpclass-exp.ll

InstCombine: Add baseline tests for exp SimplifyDemandedFPClass (#173431)

DeltaFile
+502-0llvm/test/Transforms/InstCombine/simplify-demanded-fpclass-exp.ll
+502-01 files

LLVM/project 3b09719llvm/lib/Analysis ValueTracking.cpp, llvm/test/Transforms/Attributor nofpclass-exp.ll

ValueTracking: Improve handling of exp intrinsic for overflow (#173430)

Teach exp handling that positive inputs cannot introduce overflow,
and negative inputs cannot introduce underflow.
DeltaFile
+24-24llvm/test/Transforms/Attributor/nofpclass-exp.ll
+12-0llvm/lib/Analysis/ValueTracking.cpp
+2-2llvm/test/Transforms/Attributor/AMDGPU/nofpclass-amdgcn-exp.ll
+38-263 files