japanese/ebview-gtk2: Fix crashes immediately after startup
Since japanese/ebview was removed in 2014, remove CONFLICTS.
Switch from REINPLACE_CMD to patchfile.
PR: 297153
Approved by: fluffy (mentor)
Co-authored-by: mce
(cherry picked from commit e1c65a93e348dddf2ab5a5b099f4d2fae262d0b2)
[DAG] Use getLegalMaskAndStepVector in expandGetActiveLaneMask
Currently we will either use the mask vector type if it's big enough to fit the elements, or promote the element width to the scalar operand type.
In the latter case we will end up with a vector element type larger than strictly necessary, which means a v32i1 mask will get promoted to v32i64 on RISC-V, which isn't a legal type, and expansion fails.
We can use a legal vector type that's just small enough via getLegalMaskAndStepVector, which is already used by expandVectorFindLastActive, expandCttzElts etc. This fixes crashes on RISC-V and also uses a more compact step vector. It also means we can handle scalable vectors.
We need to move the function into TargetLowering.cpp to use the getLegalMaskAndStepVector, but this brings it inline with the other expansions.
databases/p5-DBI: update 1.648 -> 1.654
Changelog: https://metacpan.org/dist/DBI/changes
Major changes for 1.650:
- Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739)
- Fix out-of-bounds read in preparse of SQL that starts with a comment (CVE-2026-14740)
- Fix code injection via Profile DSN attribute or DBI_PROFILE variable (CVE-2026-14380)
Major changes for 1.651:
- Fix inverted comparisons for strings in DBI::SQL::Nano (CVE-2026-15043)
- Fix DBD::File to ensure that the table is not a symlink outside of f_dir (CVE-2026-15392)
- Fix an out-of-bounds error when a statement handle has no fields but the source row is not empty (CVE-2026-60082)
- Add an overridable upper bound $MAX_PATH_DEPTH for DBI::ProfileData (CVE-2026-60081)
Major changes for 1.652:
- require perl >= 5.12
- Force placeholder limit on :# and :p# too (CVE-2026-73194)
- Limit statements to 292 Mb in preparse (CVE-2026-73193)
[23 lines not shown]
Add bucket recovery APIs
There are various situations in which we can have orphaned
buckets. Examples include:
* bucket is deleted and admin wants to reinstate.
* the NAS is disaster recovery instance and needs to activate
buckets after switching datasets to read-write.
This is facilited by inserting a .truenas_s3/config_backup.json
file inside each bucket (daemon-owned path) and restoring the
DB row / S3 config with some user-provided overrides if required.
Two new API endpoints are added:
* sharing.s3.recoverable_buckets lists mounted datasets containing
orphaned buckets.
* sharing.s3.recover basically takes a list of datasets and rebuilds
bucket configuration from backups for them.
[libc][math] Fix lgammaf 1-ULP errors in non-FMA builds (#225449)
There were some inaccuracies in the non-FMA builds.
I retested exhaustively with FMA both enabled and disabled, and all
tests seems to pass noww.
editors/openoffice-devel: Update to a new snapshot
Update openoffice-devel to a newer snapshot
Change the splash screen to say OpenOffice 5.
MFH: 2026Q3
clean: make the keep_installed_archive test reliable
A file rebuilt within the same second keeps the same mtime, and the
file:// fetcher then answers EPKG_UPTODATE: the cached catalogue is left
unchanged and pkg clean keeps the archive of the removed package.
Wait a second before rebuilding the repository so that the new catalogue
is newer than the cached one.
[AMDGPU] Fix missed WMMA C-operand co-exec hazard
The gfx1250 WMMA co-execution hazard check treats only A, B and the
SWMMAC index as registers the in-flight MMA still reads. C (src2 of a
non-SWMMAC WMMA) is missing, so a VALU scheduled into the MMA's shadow
can clobber C and the MMA consumes the new value.
This is latent while C is tied to vdst, since the existing D check then
covers it. It miscompiles where the tie does not hold: for
v_wmma_bf16f32_16x16x32_bf16, whose D is narrower than C, and for the
_threeaddr form of any WMMA.
Add src2 to the checked set for non-SWMMAC WMMAs.
www/adjuster: Update 3.249 => 3.250
Commit log:
* Added a native cgi option (no need for WSGI).
* Fix Python 3 compatibility for non-function htmlFilter settings.
* Updated Annotator Generator to version 3.43 which fixes a cross-site
scripting vulnerability.
https://github.com/ssb22/adjuster/compare/v3.249...v3.250
PR: 298818
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q3
(cherry picked from commit a205e4a71a0739d64baddf2b65e9334eba6d59e2)
www/adjuster: Update 3.248 => 3.249
This release adds support for the new HTTP QUERY method to Web Adjuster,
as well as several updates to Annotator Generator's Android code generation.
Commit log:
https://github.com/ssb22/adjuster/compare/v3.248...v3.249
PR: 298094
Reported by: Silas S. Brown <ssb22 at cam.ac.uk> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
(cherry picked from commit a2ba42cb3a8cafce2439a5ce726217deeed6e447)
www/adjuster: Update 3.249 => 3.250
Commit log:
* Added a native cgi option (no need for WSGI).
* Fix Python 3 compatibility for non-function htmlFilter settings.
* Updated Annotator Generator to version 3.43 which fixes a cross-site
scripting vulnerability.
https://github.com/ssb22/adjuster/compare/v3.249...v3.250
PR: 298818
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q3
FastISel: Assert the emitted instruction defines the result
The fallback path copied the result out of implicit_defs()[0], assuming
the first implicit physical register def is the result. That is an X86
assumption about MUL/IMUL, and it is unreachable for all but
fastEmitInst_r: FastISelEmitter skips any instruction whose first
operand is not an output register, so every opcode reaching these
helpers from generated code has an explicit def.
Co-Authored-By: Claude Opus 5 <noreply at anthropic.com>
NAS-142270 / 27.0.0-BETA.1 / Add Webshare MCP option (#19870)
## Context
Webshare ships an MCP server configured through the `mcp` block of the
webshare-auth config, and there was no way to turn it on from
middleware.
## Solution
- **New settings**: `webshare.update` accepts `mcp_enabled`,
`mcp_allowed_groups` and `mcp_allow_write`, which are rendered into the
`mcp` block. `allowed_hosts` is left unset.
- **MCP groups must be login groups**: webshare only checks login groups
at OAuth consent, while token refresh and session spawn check only the
MCP groups, so every MCP group must be `truenas_webshare` or an entry of
`groups`. Otherwise MCP access could outlive Webshare access. Enabling
MCP without a group is rejected, since webshare denies everyone on an
empty list.
- **Canonical group names**: MCP groups are resolved through NSS,
compared by gid and stored under their canonical name, so a directory
[3 lines not shown]
fetch: test the nominal 304 up to date path
Add a test where the server honours If-Modified-Since and answers 304,
checking that pkg reports the catalogue as up to date and that the
server really answered 304, next to the test covering servers that
always answer 200.
fetch: detect up to date responses without a 304
The libfetch fetcher returned EPKG_UPTODATE only when the server
answered 304 Not Modified. A server answering 200 to a conditional
request made pkg download the repository catalogue again on every
update (issue #2742).
Compare the mtime of the response with the one sent in
If-Modified-Since and return EPKG_UPTODATE when it did not change,
like the file:// fetcher already does.
[AArch64] Make compiling arm_neon.h faster (#226378)
Replace two linear scans with map lookups.
On my system, reduces time to compile a TU that does nothing but
`#include <arm_neon.h>` from 92.0 ms ± 1.4 ms to 70.9 ms ± 1.3 ms.
No behavior change.
LoongArch: Respect the target-abi module flag in the ELF header
The target streamer read the ABI from MCTargetOptions when constructed,
so the e_flags recorded the command line -target-abi and ignored the
module flag.
Co-Authored-By: Claude Opus 5 <noreply at anthropic.com>
