FreeBSD/ports 8b878d8dns/dnsviz Makefile, net/py-pynmsg Makefile

security/libsodium: Update to 1.0.21

The API remains compatible but bumping all dependent ports as SHLIB
has changed.

Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE
Security: https://00f.net/2025/12/30/libsodium-vulnerability/
PR: 279347
DeltaFile
+3-5security/libsodium/distinfo
+7-1security/libsodium/pkg-plist
+1-6security/libsodium/Makefile
+1-1net/py-pynmsg/Makefile
+1-1dns/dnsviz/Makefile
+1-1net/py-saltyrtc.server/Makefile
+14-15311 files not shown
+325-195317 files

FreeBSD/ports afe630bsecurity/vuxml/vuln 2026.xml

security/vuxml: Document libsodium vuln CVE-2025-69277
DeltaFile
+29-0security/vuxml/vuln/2026.xml
+29-01 files

FreeBSD/ports 6b1cf29deskutils/freeplane distinfo Makefile

deskutils/freeplane: Update to 1.12.16

ChangeLog:      https://github.com/freeplane/freeplane/releases/tag/release-1.12.16
Reported by:    Dimitry Polivaev <notifications at github.com>
DeltaFile
+3-3deskutils/freeplane/distinfo
+1-1deskutils/freeplane/Makefile
+4-42 files

OPNSense/core 30d2b92. plist, src/etc/inc interfaces.inc system.inc

interfaces: sharednet removal, defaults and model, flattening
DeltaFile
+68-0src/opnsense/mvc/app/models/OPNsense/Core/Migrations/MTUN1_0_2.php
+13-25src/etc/inc/interfaces.inc
+5-8src/opnsense/mvc/app/models/OPNsense/Interfaces/Settings.xml
+0-6src/opnsense/mvc/app/controllers/OPNsense/Interfaces/forms/dialogSettings.xml
+2-2src/etc/inc/system.inc
+1-1plist
+89-423 files not shown
+91-449 files

OPNSense/core 508567fsrc/opnsense/mvc/app/controllers/OPNsense/Interfaces/forms dialogSettings.xml

interfaces: reword slightly
DeltaFile
+1-1src/opnsense/mvc/app/controllers/OPNsense/Interfaces/forms/dialogSettings.xml
+1-11 files

OPNSense/core 9edee33src/opnsense/mvc/app/views/OPNsense/Interface settings.volt

interfaces: remove console log and add clear button for DUID input
DeltaFile
+8-2src/opnsense/mvc/app/views/OPNsense/Interface/settings.volt
+8-21 files

OPNSense/core 48032b2src/etc config.xml.sample

interfaces: drop defaults from config.xml.sample
DeltaFile
+0-4src/etc/config.xml.sample
+0-41 files

OPNSense/core 8067d77src/etc/inc interfaces.inc

interfaces: adjust for ratimeout as well
DeltaFile
+3-2src/etc/inc/interfaces.inc
+3-21 files

OPNSense/core f035700src/opnsense/mvc/app/controllers/OPNsense/Interfaces/forms dialogSettings.xml, src/opnsense/mvc/app/models/OPNsense/Interfaces/FieldTypes DUIDField.php

interfaces: settings: convert to MVC (fixes https://github.com/opnsense/core/issues/9141)
DeltaFile
+0-441src/www/system_advanced_network.php
+93-0src/opnsense/scripts/interfaces/gen_duid.php
+92-0src/opnsense/mvc/app/models/OPNsense/Interfaces/FieldTypes/DUIDField.php
+78-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/forms/dialogSettings.xml
+73-0src/opnsense/mvc/app/models/OPNsense/Interfaces/Migrations/M1_0_0.php
+67-0src/opnsense/mvc/app/views/OPNsense/Interface/settings.volt
+403-44119 files not shown
+694-48325 files

OPNSense/core 4ec18f0src/etc/inc interfaces.lib.inc interfaces.inc

interfaces: fix per-if isset() overwrite case
DeltaFile
+8-3src/etc/inc/interfaces.lib.inc
+0-2src/etc/inc/interfaces.inc
+8-52 files

OPNSense/core ff6fde4src/opnsense/mvc/app/models/OPNsense/Radvd/Migrations M1_0_0.php

Fix issue with migration, priority should be AdvDefaultPreference here
DeltaFile
+1-1src/opnsense/mvc/app/models/OPNsense/Radvd/Migrations/M1_0_0.php
+1-11 files

NetBSD/src hrUjQVBcommon/lib/libc/arch/hppa/atomic atomic_cas_up.S

   Remove an empty line
VersionDeltaFile
1.5+1-2common/lib/libc/arch/hppa/atomic/atomic_cas_up.S
+1-21 files

LLVM/project be554f7llvm/lib/Target/SPIRV SPIRVPushConstantAccess.cpp

[NFC][SPIRV] Avoid temporary SmallVector by using make_early_inc_range
DeltaFile
+1-2llvm/lib/Target/SPIRV/SPIRVPushConstantAccess.cpp
+1-21 files

LLVM/project 85138d7llvm/lib/Target/SPIRV SPIRVPushConstantAccess.cpp

[NFC][SPIRV] SPIRVPushConstantAccess report 'changed' when there are changes
DeltaFile
+1-1llvm/lib/Target/SPIRV/SPIRVPushConstantAccess.cpp
+1-11 files

LLVM/project f28a5c8llvm/lib/Target/SPIRV SPIRVPushConstantAccess.cpp

[NFC][SPIRV] Use replaceUsesOfWith
DeltaFile
+1-4llvm/lib/Target/SPIRV/SPIRVPushConstantAccess.cpp
+1-41 files

LLVM/project 277069eflang/include/flang/Frontend CompilerInstance.h, flang/lib/Frontend FrontendActions.cpp

[Flang] Adjust pass plugin support to match Clang (#174006)

- Pass plugins can use LLVM options, matching #173287.
- Pass plugins can run a hook before codegen, matching #171872.
- Pass plugins are now tested whenever they can be built, matching
#171998.

Plugins currently don't work on AIX, tracked in #172203.
DeltaFile
+42-21flang/lib/Frontend/FrontendActions.cpp
+38-0flang/test/Driver/pass-plugin-codegen.f90
+17-1flang/include/flang/Frontend/CompilerInstance.h
+15-0flang/lib/FrontendTool/ExecuteCompilerInvocation.cpp
+7-4flang/test/Driver/pass-plugin.f90
+3-3flang/test/CMakeLists.txt
+122-292 files not shown
+124-308 files

LLVM/project 87d6c27llvm/tools/llvm-objdump COFFDump.cpp

[llvm-objdump][NFC] Use EnumEntry from Support (#174155)

Don't duplicate the EnumEntry type in llvm-objdump.

Spliced off from #173868, where this is required to avoid the name
collision.
DeltaFile
+14-18llvm/tools/llvm-objdump/COFFDump.cpp
+14-181 files

LLVM/project 76c300cbolt/lib/Passes PointerAuthCFIFixup.cpp, bolt/lib/Target/AArch64 AArch64MCPlusBuilder.cpp

[BOLT][BTI] Fix assertions checking getNumOperands (#174600)

Several BTI-related functions are checking that a call MCInst has one
non-annotation operand.

This patch changes these checks to use MCPlus::getNumPrimeOperands,
instead of getNumOperands.

Testing: 
added annotations to existing gtests to serve as regression
tests. These now also explicitly check getNumOperands and getNumPrimeOperands
usage on the annotated MCInsts.
DeltaFile
+14-0bolt/unittests/Core/MCPlusBuilder.cpp
+6-5bolt/lib/Target/AArch64/AArch64MCPlusBuilder.cpp
+1-1bolt/lib/Passes/PointerAuthCFIFixup.cpp
+21-63 files

FreeBSD/ports de3c180deskutils/ekphos distinfo Makefile, deskutils/ekphos/files patch-src_event_handler.rs patch-src_app_state.rs

deskutils/ekphos: Update to 0.15.0

ChangeLog:      https://github.com/hanebox/ekphos/releases/tag/v0.15.0
Reported by:    han <notifications at github.com>
DeltaFile
+8-17deskutils/ekphos/files/patch-src_event_handler.rs
+11-11deskutils/ekphos/files/patch-src_app_state.rs
+3-3deskutils/ekphos/distinfo
+1-1deskutils/ekphos/Makefile
+23-324 files

LLVM/project ad2c2b2clang/test/CodeGen pass-plugins.c codegen-plugins.c

[Clang][NFC] XFAIL plugin tests on AIX

See: https://github.com/llvm/llvm-project/pull/171872#issuecomment-3716175811
DeltaFile
+2-0clang/test/CodeGen/pass-plugins.c
+2-0clang/test/CodeGen/codegen-plugins.c
+4-02 files

LLVM/project c15fcd1llvm/lib/Target/AArch64 AArch64InstrFormats.td, llvm/lib/Target/AArch64/MCTargetDesc AArch64MCTargetDesc.h

Revert "[llvm-exegesis] Add AArch64 operand initializers, SetRegTo (#169912)"

This reverts commit 686ba67a1aef82d13e9368e1babaf6ce96ecf738.
DeltaFile
+0-127llvm/tools/llvm-exegesis/lib/AArch64/Target.cpp
+0-126llvm/lib/Target/AArch64/AArch64InstrFormats.td
+0-105llvm/test/tools/llvm-exegesis/AArch64/setReg_init_check.s
+2-12llvm/test/tools/llvm-exegesis/AArch64/all-opcodes.test
+0-2llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.h
+2-3725 files

LLVM/project 72f18a0llvm/lib/Transforms/Vectorize VectorCombine.cpp, llvm/test/CodeGen/AMDGPU combine-scalar-selects.ll combine-scalar-selects-asm.ll

[VectorCombine] Fold scalar selects from bitcast into vector select (#173990)

DeltaFile
+1,874-0llvm/test/CodeGen/AMDGPU/combine-scalar-selects.ll
+1,372-0llvm/test/CodeGen/AMDGPU/combine-scalar-selects-asm.ll
+118-0llvm/lib/Transforms/Vectorize/VectorCombine.cpp
+3,364-03 files

LLVM/project d618a07bolt README.md

[BOLT][Docs] Add arm/large-bolt-tests to README

On AArch64, we recommend to also test against binaries hosted at:
- https://github.com/arm/large-bolt-tests
DeltaFile
+12-5bolt/README.md
+12-51 files

FreeBSD/ports 87d266cmisc/hwdata distinfo Makefile

misc/hwdata: Update to 0.403

Reported by:    portscout!
DeltaFile
+3-3misc/hwdata/distinfo
+1-1misc/hwdata/Makefile
+4-42 files

OPNSense/core 04924a0src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms dialogSNatRule.xml, src/opnsense/mvc/app/views/OPNsense/Firewall snat_rule.volt onat_rule.volt

Merge remote-tracking branch 'origin/master' into radvd_8351
DeltaFile
+623-0src/opnsense/mvc/app/views/OPNsense/Firewall/snat_rule.volt
+597-0src/opnsense/mvc/app/views/OPNsense/Firewall/onat_rule.volt
+507-0src/opnsense/mvc/app/views/OPNsense/Firewall/npt_rule.volt
+170-139src/opnsense/mvc/app/views/OPNsense/Unbound/overview.volt
+200-81src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogSNatRule.xml
+162-118src/opnsense/www/js/opnsense_bootgrid.js
+2,259-33894 files not shown
+3,911-1,353100 files

OpenBSD/ports ziK9OJKsysutils/google-cloud-sdk distinfo Makefile, sysutils/google-cloud-sdk/pkg PLIST

   Update to google-cloud-sdk-551.0.0.
VersionDeltaFile
1.404+30-19sysutils/google-cloud-sdk/pkg/PLIST
1.421+2-2sysutils/google-cloud-sdk/distinfo
1.441+1-1sysutils/google-cloud-sdk/Makefile
+33-223 files

LLVM/project 029e529clang/docs ReleaseNotes.rst, clang/lib/Sema SemaLambda.cpp

[Clang] prevent assertion failure by avoiding always-dependent lambdas in constraint-related nested scopes (#173776)

Fixes #172814

--- 

This patch resolves an issue in which a lambda could be classified as
always-dependent while traversing nested scopes, causing an assertion
failure during capture handling.

Changes in PR #93206 expanded scope-based dependency handling in a way
that could mark certain lambdas as always-dependent when no
template-dependent context was present.

This update refines the criteria for assigning
`LambdaDependencyKind::LDK_AlwaysDependent` and applies it only after
traversal reaches a distinct enclosing function scope with
template-dependent parameters.
DeltaFile
+9-5clang/lib/Sema/SemaLambda.cpp
+7-1clang/test/SemaCXX/lambda-unevaluated.cpp
+1-0clang/docs/ReleaseNotes.rst
+17-63 files

LLVM/project 7f54675bolt README.md

[BOLT][Docs] Add arm/large-bolt-tests to README

On AArch64, we recommend to also test against binaries hosted at:
- https://github.com/arm/large-bolt-tests
DeltaFile
+11-5bolt/README.md
+11-51 files

FreeBSD/ports 23ea6c9sysutils/polkit Makefile, sysutils/polkit/files patch-test_wrapper.py patch-docs_man_polkit.xml

sysutils/polkit: update to 127

PR:             291781
Co-authored-by: Gleb Popov <arrowd at FreeBSD.org>
DeltaFile
+19-78sysutils/polkit/files/patch-test_wrapper.py
+38-40sysutils/polkit/files/patch-docs_man_polkit.xml
+10-23sysutils/polkit/Makefile
+27-0sysutils/polkit/files/patch-src_polkitagent_polkitagenthelper-pam.c
+5-13sysutils/polkit/files/patch-src_polkitbackend_meson.build
+6-6sysutils/polkit/files/patch-src_polkit_polkitunixsession.c
+105-1604 files not shown
+118-16910 files

LLVM/project a83c894llvm/include/llvm/IR Constants.h

Reapply [ConstantInt] Disable implicit truncation in ConstantInt::get() (#171456)

Reapply after additional fixes.

-----

Disable implicit truncation in the ConstantInt constructor by default.
This means that it needs to be passed a signed/unsigned (depending on
the IsSigned flag) value matching the bit width.

The intention is to prevent the recurring bug where people write
something like `ConstantInt::get(Ty, -1)`, and this "works" until `Ty`
is larger than 64-bit and then the value is incorrect due to missing
type extension.

This is the continuation of
https://github.com/llvm/llvm-project/pull/112670, which originally
allowed implicit truncation in this constructor to reduce initial scope
of the change.
DeltaFile
+4-7llvm/include/llvm/IR/Constants.h
+4-71 files