OPNSense/tools 9a9f894config/26.1 plugins.conf, config/26.7 plugins.conf

config: also add cloudflared plugin now that it's merged
DeltaFile
+1-0config/26.1/plugins.conf
+1-0config/26.7/plugins.conf
+2-02 files

FreeNAS/freenas 4e829efsrc/middlewared/middlewared/plugins/truenas_connect update.py heartbeat.py, src/middlewared/middlewared/pytest/unit/plugins test_truenas_connect.py

NAS-141224 / 26.0.0-RC.1 / Let TrueNAS Connect self-heal after deregistration (by sonicaj) (#19085)

This commit fixes an issue where a TrueNAS Connect certificate could not
be deleted (even with force) because TNC stayed wedged in a renewal
state and never auto-unset itself. The heartbeat is the only thing that
unsets TNC and removes its cert when it gets a 401, but its start guard
only allowed the CONFIGURED state while the loop it guards ran across
all configured states, so it died immediately in
CERT_RENEWAL_IN_PROGRESS/SUCCESS/FAILURE and never saw the 401 that
signals deregistration.

We widen the guard to match the loop, add CERT_RENEWAL_FAILURE to the
configured states (with a boot-time renewal retry), and surface a 401
from the renewal check into the same unset path instead of swallowing it
as "renewal not needed".

Original PR: https://github.com/truenas/middleware/pull/19079

Co-authored-by: Waqar Ahmed <waqarahmedjoyia at live.com>
DeltaFile
+195-2src/middlewared/middlewared/pytest/unit/plugins/test_truenas_connect.py
+26-0src/middlewared/middlewared/plugins/truenas_connect/update.py
+3-17src/middlewared/middlewared/plugins/truenas_connect/heartbeat.py
+11-0src/middlewared/middlewared/plugins/truenas_connect/acme.py
+7-2src/middlewared/middlewared/plugins/truenas_connect/state.py
+4-0src/middlewared/middlewared/plugins/truenas_connect/utils.py
+246-216 files

LLVM/project 5fba4d0.github/workflows test-suite.yml

[GitHub] Fix whitespace in test-suite.yml (#202992)
DeltaFile
+1-1.github/workflows/test-suite.yml
+1-11 files

OPNSense/plugins 901e334. README.md LICENSE, net/cloudflared/src/opnsense/mvc/app/models/OPNsense/Cloudflared Cloudflared.xml

net/cloudflared: post-merge QA
DeltaFile
+7-7net/cloudflared/src/opnsense/mvc/app/models/OPNsense/Cloudflared/Cloudflared.xml
+1-1README.md
+1-0LICENSE
+0-0net/cloudflared/src/opnsense/scripts/syslog/logformats/cloudflared.py
+9-84 files

LLVM/project 7507012llvm/lib/Target/AMDGPU AMDGPURegBankLegalizeHelper.cpp, llvm/test/CodeGen/AMDGPU amdpal-callable.ll dynamic_stackalloc.ll

[AMDGPU][GISEL] Adding new reg bank select rules for G_DYN_STACKALLOC (#200369)

Add register bank selection and legalization support for
G_DYN_STACKALLOC in the new RegBankLegalize framework.
DeltaFile
+60-82llvm/test/CodeGen/AMDGPU/GlobalISel/regbankselect-dyn-stackalloc.mir
+56-0llvm/lib/Target/AMDGPU/AMDGPURegBankLegalizeHelper.cpp
+4-7llvm/test/CodeGen/AMDGPU/amdpal-callable.ll
+3-3llvm/test/CodeGen/AMDGPU/GlobalISel/dynamic-alloca-uniform.ll
+2-2llvm/test/CodeGen/AMDGPU/dynamic_stackalloc.ll
+2-2llvm/test/CodeGen/AMDGPU/GlobalISel/non-entry-alloca.ll
+127-962 files not shown
+133-978 files

LLVM/project f3d5fdalldb/packages/Python/lldbsuite/test/make Makefile.rules

[lldb][Windows] Fix ECHO_TO_FILE/ECHO_APPEND_FILE (#202968)

The Windows recipes for these macros were printf "%s\n" $(1). The
callers wrap content in single quotes (for the POSIX printf), but the
test recipes run under cmd.exe on Windows, which keeps the single quotes
literal and word-splits on spaces, and the bundled printf additionally
mangles backslashes and spaces. The result is garbage generated files
(e.g. a modulemap whose first line is 'module, or a truncated SDK path
from a "Program Files" directory).

Write the file with cmd's echo after stripping the callers' single
quotes. echo runs in the recipe shell, so unlike GNU make's $(file ...)
it still works after a preceding MKDIR_P in the same recipe.

This is a reland of https://github.com/llvm/llvm-project/pull/202612
which add the changes in the wrong if/else branch.

rdar://179218545
DeltaFile
+2-2lldb/packages/Python/lldbsuite/test/make/Makefile.rules
+2-21 files

LLVM/project e5d74b0runtimes/cmake config-Fortran.cmake

[flang-rt][cmake] Fix Windows build with CMAKE_Fortran_SIMULATE_ID (#202981)

The PR #198205 sets CMAKE_Fortran_SIMULATE_ID to "GNU", since Flang has
no alternative driver such as an equivalent to clang-cl. But it breaks
the Windows build with
```
LINK : warning LNK4044: unrecognized option '/lpsapi'; ignored
LINK : warning LNK4044: unrecognized option '/lshell32'; ignored
LINK : warning LNK4044: unrecognized option '/lole32'; ignored
LINK : warning LNK4044: unrecognized option '/luuid'; ignored
LINK : warning LNK4044: unrecognized option '/ladvapi32'; ignored
LINK : warning LNK4044: unrecognized option '/lws2_32'; ignored
LINK : warning LNK4044: unrecognized option '/lntdll'; ignored
LINK : warning LNK4044: unrecognized option '/ldelayimp'; ignored
```

The reason is interesting. With CMAKE_Fortran_SIMULATE_ID=GNU, CMake
will include the Windows-GNU.cmake
platform file. That file overwrites CMAKE_LINK_LIBRARY_FLAG with

    [16 lines not shown]
DeltaFile
+11-2runtimes/cmake/config-Fortran.cmake
+11-21 files

OPNSense/plugins ed049cdnet/cloudflared/src/etc/inc/plugins.inc.d cloudflared.inc, net/cloudflared/src/opnsense/mvc/app/controllers/OPNsense/Cloudflared/Api ServiceController.php

net/cloudflared: new plugin for Cloudflare Tunnel integration (#5429)

Wraps the net/cloudflared FreeBSD port to manage the cloudflared daemon
via the standard OPNsense service control interface.
DeltaFile
+104-0net/cloudflared/src/opnsense/scripts/syslog/logformats/cloudflared.py
+78-0net/cloudflared/src/etc/inc/plugins.inc.d/cloudflared.inc
+52-0net/cloudflared/src/opnsense/mvc/app/views/OPNsense/Cloudflared/index.volt
+46-0net/cloudflared/src/opnsense/mvc/app/models/OPNsense/Cloudflared/Cloudflared.xml
+42-0net/cloudflared/src/opnsense/mvc/app/controllers/OPNsense/Cloudflared/forms/general.xml
+39-0net/cloudflared/src/opnsense/mvc/app/controllers/OPNsense/Cloudflared/Api/ServiceController.php
+361-013 files not shown
+566-019 files

OpenBSD/ports Fmw4u88audio/mpg123 distinfo Makefile

   audio/mpg123: maintenance update to 1.33.6
VersionDeltaFile
1.83+2-2audio/mpg123/distinfo
1.134+1-1audio/mpg123/Makefile
+3-32 files

LLVM/project dcf9add.github/workflows test-suite.yml, .github/workflows/test-suite configure-and-build.sh aarch64.cmake

[Github][RFC] Add workflow to diff codegen on llvm-test-suite (#190010)

A common task when reviewing PRs in the LLVM subproject is checking out
the PR locally, building it, running it on some benchmarks e.g.
llvm-test-suite, and comparing the codegen against some known version.

The process is fairly laborious so this PR adds a GitHub workflow to
automate it. It's triggered by commenting "/test-suite" on a PR. The
workflow will kick off, build clang with the head and base of the PR,
build the benchmarks in llvm-test-suite for several configurations with
each version of clang, compute the diff in the output assembly via the
[tdiff.py
script](https://github.com/llvm/llvm-test-suite/blob/main/utils/tdiff.py),
and then report back with the diffs in a comment.

Here's an example on my fork where you can see the diff of a codegen
change in the RISC-V backend:
https://github.com/lukel97/llvm-project/pull/7#issuecomment-4283315532


    [26 lines not shown]
DeltaFile
+156-0.github/workflows/test-suite.yml
+12-0.github/workflows/test-suite/configure-and-build.sh
+9-0.github/workflows/test-suite/aarch64.cmake
+9-0.github/workflows/test-suite/riscv64.cmake
+6-0.github/workflows/test-suite/llvm.cmake
+5-0.github/workflows/test-suite/x86_64.cmake
+197-01 files not shown
+198-07 files

LLVM/project 8e4b90fclang/lib/StaticAnalyzer/Checkers StdLibraryFunctionsChecker.cpp

[clang][StaticAnalyzer] Optimize standard-library summaries for size (#202662)

StdLibraryFunctionsChecker::initFunctionSummaries is a large one-time
initialization routine. Its initializer-list construction is cold, but
optimizing it for speed causes extensive inlining and repeated
construction code in the binary.

Mark initFunctionSummaries with LLVM_ATTRIBUTE_MINSIZE so the optimizer
keeps the existing table construction out of line and selects
size-oriented code generation. Analyzer behavior and the runtime summary
representation are unchanged.

In the LLVM 22 Bazel build, standalone clang decreases from 130,098,288
to 130,015,696 bytes (-82,592), and stripped clang decreases from
108,098,128 to 107,999,520 bytes (-98,608).

Work towards #202616

AI tool disclosure: Co-authored with OpenAI Codex.
DeltaFile
+1-1clang/lib/StaticAnalyzer/Checkers/StdLibraryFunctionsChecker.cpp
+1-11 files

LLVM/project ce0668bclang/test/Analysis/Scalable/ssaf-format/LUSummary summary-data.test id-table.test, clang/test/Analysis/Scalable/ssaf-format/LUSummary/Inputs rt-two-summary-types.json

[clang][ssaf] Convert `JSONFormat` tests for `LUSummary` and `LUSummaryEncoding` to lit tests (#192738)
DeltaFile
+0-2,076clang/unittests/ScalableStaticAnalysisFramework/Serialization/JSONFormatTest/LUSummaryTest.cpp
+240-0clang/test/Analysis/Scalable/ssaf-format/LUSummary/Inputs/rt-two-summary-types.json
+202-0clang/test/Analysis/Scalable/ssaf-format/LUSummary/summary-data.test
+148-0clang/test/Analysis/Scalable/ssaf-format/LUSummary/id-table.test
+104-0clang/test/Analysis/Scalable/ssaf-format/LUSummary/linkage.test
+84-0clang/test/Analysis/Scalable/ssaf-format/LUSummary/top-level.test
+778-2,07664 files not shown
+2,213-2,07670 files

LLVM/project fcfa763llvm/lib/Target/AMDGPU SIRegisterInfo.cpp

AMDGPU: Fix finding TRI from TRI (#202970)
DeltaFile
+1-1llvm/lib/Target/AMDGPU/SIRegisterInfo.cpp
+1-11 files

LLVM/project bc94cdbclang/include/clang/DependencyScanning DependencyScanningFilesystem.h, clang/lib/DependencyScanning DependencyScanningFilesystem.cpp

Reapply "[clang][deps] Add in-flight query caching to `DependencyScanningFilesystemSharedCache`" (#202804) (#202881)

Revert the revert in https://github.com/llvm/llvm-project/pull/202804,
and add an additional guard for the test which is not applicable on all
platforms.
DeltaFile
+140-143clang/lib/DependencyScanning/DependencyScanningFilesystem.cpp
+216-0clang/unittests/DependencyScanning/DependencyScanningFilesystemTest.cpp
+72-143clang/include/clang/DependencyScanning/DependencyScanningFilesystem.h
+56-13llvm/include/llvm/Support/VirtualFileSystem.h
+30-0llvm/unittests/Support/VirtualFileSystemTest.cpp
+0-26llvm/lib/Support/VirtualFileSystem.cpp
+514-3251 files not shown
+516-3257 files

LLVM/project a6b58e0mlir/include/mlir/Dialect/OpenACC/Transforms Passes.td, mlir/lib/Dialect/OpenACC/Transforms ACCImplicitData.cpp

[mlir][acc] Add ignore-default-none option to ACCImplicitData (#202442)

ACCImplicitData currently skips implicit data mapping when a visible
default(none) clause is present, per the OpenACC rule that no implicit
data attributes apply in that case.

That default is reasonable when a frontend already verifies
default(none) and ensures all user variables have an explicit data
clause. Without that checking, generating implicit mappings would risk
silently mapping user variables that should have been explicit under
default(none).

There are still cases where implicit mapping is needed even with
default(none):
- The frontend reports default(none) violations as warnings and
compilation continues, so some user variables may reach this pass
without explicit data clauses and still need implicit mapping.
- Compiler-generated temps or interior pointers may be live-in to the
region and still require implicit mapping even when all user variables

    [5 lines not shown]
DeltaFile
+23-0mlir/test/Dialect/OpenACC/acc-implicit-data-defaultnone.mlir
+8-1mlir/include/mlir/Dialect/OpenACC/Transforms/Passes.td
+5-3mlir/lib/Dialect/OpenACC/Transforms/ACCImplicitData.cpp
+36-43 files

OpenBSD/src jZRnLwPusr.bin/tmux cmd-find.c

   While grouped sessions are being killed, it can leave session which are
   not really useful as targets (no active pane or current window) in the
   tree. Make cmd_find_best_session skip these. GitHub issue 5167.
VersionDeltaFile
1.85+17-1usr.bin/tmux/cmd-find.c
+17-11 files

FreeBSD/src 4bdcff5sys/powerpc/booke machdep_e500.c, sys/powerpc/include spr.h

powerpc/booke: Add watchdog driver

The Book-E watchdog is effectively a state machine based around an AND
mask of the timebase register.  A single bit (0-63) is watched in the
timebase register, and when it transitions (by counting *or* by
programmatically setting) an exception is triggered.  The first
exception triggers a core interrupt.  The second is programmable.
In our case, we panic on the first and reset on second.
DeltaFile
+71-0sys/powerpc/booke/machdep_e500.c
+3-0sys/powerpc/include/spr.h
+74-02 files

FreeBSD/src d08cb1dsys/dev/watchdog watchdog.c

watchdog: Fix a couple type issues

* Force the type of the literal `1` passed to nstosbt() to ensure it's a
  64-bit type (or larger).  Otherwise it gets inconveniently typed to
  int, resulting in truncation.
* Use `flsll()` when converting sbt to power-of-2-nanoseconds to fix
  32-bit compatibility.

PR:             292616
Obtained from:  Hewlett Packard Enterprise
Fixes:  26d6617f3 ("watchdog: Convert to using sbintime_t format")
MFC after:      3 days
DeltaFile
+2-2sys/dev/watchdog/watchdog.c
+2-21 files

LLVM/project 31541b9llvm/test/CodeGen/AArch64 clmul.ll

[AArch64] Add missing test for clmul.i128 (#202961)
DeltaFile
+1,308-0llvm/test/CodeGen/AArch64/clmul.ll
+1,308-01 files

LLVM/project 3986949mlir/include/mlir/Dialect/Affine/Transforms Passes.td, mlir/lib/Dialect/Affine/Transforms SimplifyAffineWithBounds.cpp

[MLIR][Affine] Simplify affine.for bounds by pruning redundant expressions via ValueBoundsConstraintSet (#199032)

This PR introduces a new pattern `SimplifyAffineForBoundMap` to simplify
multi-result lower and upper bounds of `affine.for` loops by pruning
redundant expressions leveraging `ValueBoundsConstraintSet`. This PR
addresses the limitation where the built-in folder of `affine.for` can
only handle constant bounds.
DeltaFile
+86-1mlir/lib/Dialect/Affine/Transforms/SimplifyAffineWithBounds.cpp
+29-1mlir/test/Dialect/Affine/simplify-with-bounds.mlir
+2-2mlir/include/mlir/Dialect/Affine/Transforms/Passes.td
+117-43 files

LLVM/project 314b4cbllvm/include/llvm/CodeGen TargetInstrInfo.h, llvm/lib/CodeGen MachineUniformityAnalysis.cpp

review
DeltaFile
+2-2llvm/lib/Target/AMDGPU/SIInstrInfo.cpp
+2-1llvm/lib/CodeGen/MachineUniformityAnalysis.cpp
+1-0llvm/include/llvm/CodeGen/TargetInstrInfo.h
+1-0llvm/lib/Target/AMDGPU/SIInstrInfo.h
+6-34 files

OPNSense/core 18e623csrc/opnsense/mvc/app/views/OPNsense/Firewall filter_rule.volt

Firewall: Rules: add banner if no rules defined (#10396)

(cherry picked from commit 84ae8875d439fa8a2ae402e89ecf811eeee9fd31)
DeltaFile
+22-0src/opnsense/mvc/app/views/OPNsense/Firewall/filter_rule.volt
+22-01 files

OPNSense/core bcaee51src/etc/inc filter.lib.inc, src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api FilterController.php

Firewall: Rules [new]: Always show automatic and legacy rules, and a few more UI tweaks (#10355)

(cherry picked from commit 18533b4c60c27253f8c2ebbdfd9bc11d6450da1d)
(cherry picked from commit 6402be8a5420f26192474f01af552b6617421513)
(cherry picked from commit 446ef1aef945029c4bd7b90b6bfd318abcfceb00)
DeltaFile
+229-88src/opnsense/mvc/app/views/OPNsense/Firewall/filter_rule.volt
+19-43src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api/FilterController.php
+6-3src/opnsense/www/js/opnsense_bootgrid.js
+5-1src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogFilterRule.xml
+1-1src/etc/inc/filter.lib.inc
+260-1365 files

OPNSense/core 56da1bbsrc/opnsense/mvc/app/models/OPNsense/OpenVPN OpenVPN.xml

VPN: OpenVPN: Instances - require at least 1 for vpnid field, same as auto-number should use. closes https://github.com/opnsense/core/issues/10394

(cherry picked from commit b243971aed52c6106881f6142765930e220e1dac)
DeltaFile
+1-0src/opnsense/mvc/app/models/OPNsense/OpenVPN/OpenVPN.xml
+1-01 files

OPNSense/core 3b9b69bsrc/opnsense/www/js opnsense_bootgrid.js

bootgrid: allow column selection exclusions

(cherry picked from commit 3507ecffc4ad7ae30932a189c89d5646d7b0be5e)
DeltaFile
+5-3src/opnsense/www/js/opnsense_bootgrid.js
+5-31 files

OPNSense/core 9c4d4efsrc/opnsense/mvc/app/views/OPNsense/IDS index.volt

Services: Intrusion Detection: Administration - fix regression in https://github.com/opnsense/core/commit/9271d08bf3ff3eedfa069c2d0b6c5c6f428ccfe4, closes https://github.com/opnsense/core/issues/10393

It looks like the action buttons lost their bindings, this commit restores the function, although it removes the batch function which previously splitted the set in parts.
Usually the size of the url shouldn't be that much of an issue.

(cherry picked from commit 932f2747e945ab382cc3d2274d4ae524f25b2369)
DeltaFile
+20-1src/opnsense/mvc/app/views/OPNsense/IDS/index.volt
+20-11 files

OPNSense/core f5dfddasrc/opnsense/mvc/app/models/OPNsense/Dnsmasq Dnsmasq.xml, src/opnsense/mvc/app/models/OPNsense/Firewall Filter.xml

mvc: simplify assorted option values to reduce duplication

(cherry picked from commit 251559ed6a1e7bc066fd0c52c88d0995c0acba9b)
(cherry picked from commit ac55f108c51b24f2a192d72d56621d53cf73882c)
(cherry picked from commit 3f78821cb0f91eacdfa0531c986b86b1d7780517)
(cherry picked from commit 336ac4ebc55721c2ceda9d0a1814ad2ef4b8e3c9)
(cherry picked from commit 672ebf5aec4d20e57639b96b751646c1127982d6)
(cherry picked from commit 7484d4ba6b9d44ff13d808e85fa6619432975793)
(cherry picked from commit 5629b0023bcc90dbf706a7149ff4ab685124de47)
(cherry picked from commit 72403e4ace1ccbe0ff14eb14e6663a8bbef8ade0)
DeltaFile
+24-23src/opnsense/mvc/app/models/OPNsense/Monit/Monit.xml
+21-21src/opnsense/mvc/app/models/OPNsense/Trust/General.xml
+16-16src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml
+16-16src/opnsense/mvc/app/models/OPNsense/IDS/IDS.xml
+14-14src/opnsense/mvc/app/models/OPNsense/TrafficShaper/TrafficShaper.xml
+12-12src/opnsense/mvc/app/models/OPNsense/Dnsmasq/Dnsmasq.xml
+103-1027 files not shown
+135-13413 files

OPNSense/core 1e22318src/opnsense/mvc/app/controllers/OPNsense/Kea/Api Leases6Controller.php, src/opnsense/mvc/app/controllers/OPNsense/Routes/Api RoutesController.php

mvc: fix a few stale imports via linter

(cherry picked from commit 99697111d694fdc470fcd3375b0019d3d1743e94)
DeltaFile
+0-4src/opnsense/mvc/app/controllers/OPNsense/Kea/Api/Leases6Controller.php
+0-2src/opnsense/mvc/app/controllers/OPNsense/Wireguard/Api/GeneralController.php
+0-2src/opnsense/mvc/app/models/OPNsense/Interfaces/FieldTypes/VipNetworkField.php
+0-1src/opnsense/mvc/app/controllers/OPNsense/Unbound/Api/OverviewController.php
+0-1src/opnsense/mvc/app/controllers/OPNsense/Wireguard/Api/ServiceController.php
+0-1src/opnsense/mvc/app/controllers/OPNsense/Routes/Api/RoutesController.php
+0-116 files not shown
+0-1712 files

OPNSense/core 403dcd6src/opnsense/scripts/firmware hostnames.sh

firmware: retain ordering in update servers

This only pertains to the connectivity audit changes from
26.1.8.  Treat the server from opnsense-update -M as the
primary one by not sorting the result.

PR: https://forum.opnsense.org/index.php?topic=52025.0
(cherry picked from commit 74e76cbeafbb91e0bd5a6c2acbbf47959a9f436a)
DeltaFile
+1-1src/opnsense/scripts/firmware/hostnames.sh
+1-11 files

OPNSense/core 7a13129src/opnsense/scripts/firmware read.sh config.sh

firmware: stop buffering in sed

Since cmd_output was made the generic filter for subscriptions
the update log showed signs of excessive buffering.  This brings
it back to where it was and also improves the old read case.

(cherry picked from commit 5de581cd4416d6c068270994981db726045e88be)
DeltaFile
+1-1src/opnsense/scripts/firmware/read.sh
+1-1src/opnsense/scripts/firmware/config.sh
+2-22 files