[mlir][docs] Add guidance on "non observable" side effect modeling (#242620)
Mention that a dialect defines which aspects of execution are observable
and which are
implementation details outside that semantic model. Also add a few
examples.
Discussion:
https://discourse.llvm.org/t/guidance-on-not-observable-side-effect-modeling/92790
Assisted-by: Codex
devel/electron45: Add port: Build cross-platform desktop apps with JavaScript, HTML, and CSS
Build cross platform desktop apps with JavaScript, HTML, and CSS.
It's easier than you think.
If you can build a website, you can build a desktop app. Electron is a
framework for creating native applications with web technologies like
JavaScript, HTML, and CSS. It takes care of the hard parts so you can
focus on the core of your application.
WWW: https://electronjs.org/
net-im/tuwunel: Update to 2.0.0
Adds logins through OIDC, JWT and the Matrix Authentication Service,
media storage on S3 and Google Cloud Storage, the Synapse admin API
and outgoing mail. The server now checks its configuration on
startup and warns about settings that do not fit the host.
Build the features upstream enables by default, except for those that
only apply to Linux. Point to the thread limit a large database pool
runs into, and to the fallocate setting ZFS wants.
Changes:
https://github.com/matrix-construct/tuwunel/releases
Sponsored by: Netzkommune GmbH
shell: restore: skip files in /conf/backup the system didn't name, and don't abort on a backup it can't read (#11187)
Option 13 read the part of every config-*.xml name after "config-" as a
timestamp and ran date -r on it. Under set -e, one name that isn't a
timestamp ended the script before any backup was listed, and so did a
backup xmllint can't parse. Only take names with a digit after
"config-", skip those whose timestamp isn't all digits, and list a
backup whose user and notes can't be read without them.
Per review: run date -r once per backup and skip a name it can't read,
and skip a backup that isn't valid XML (xmllint --noout) rather than
listing it without notes, since it couldn't be restored anyway. The
user and notes lookups are back as they were. Fix the indent of the
following if.
Update polltime mask to include slash character (#11059)
Monit 6.0.0 deprecates the "every N cycles" statement in favour of cron-style
schedules such as every "*/3 * * * *". The polltime field of the Monit
service dialog rejects "/", so the recommended cron step syntax cannot be
entered from the GUI.
This extends the polltime mask in Monit.xml to allow "/" and updates the
validation message accordingly. No backend change is required: cron-style
values are already passed through and quoted correctly by the monitrc template.
Tested operationally on OPNsense 26.7.7 with Monit 6.0.0:
entered */3 * * * * for services previously set to every 3 cycles
generated monitrc contains every "*/3 * * * *"
monit -t passes, the "every N cycles" deprecation warnings are gone
alerting behaviour unchanged
Fixes: #11058
18674 pcitool clears bits 35:32 of 64-bit BAR addresses
Reviewed by: Robert Mustacchi <rm at fingolfin.org>
Approved by: Gordon Ross <gordon.w.ross at gmail.com>
openbao: update to 2.7.2
security:
- auth/cert: Add resolve path canonicalization to CRL paths. GHSA-736f-82w7-hj22.
- secrets/approle: Add resolve path canonicalization in Role ID paths. GHSA-736f-82w7-hj22.
- secrets/identity: Ensure client_type=public is denied with client_credentials=true in the OIDC provider. GHSA-q824-44ff-f5j5.
- secrets/ssh: Deny wildcards (*) in SSH certificate identity templating by default. Configurable via the allow_wildcards_in_identity_templates parameter. GHSA-h76r-48x5-36hg.
- secrets/transit: Ensure imported key backup does not allow clobbering arbitrary keys through path traversal. GHSA-5pmx-2p74-x478.
Plus various bugfixes
[VPlan] Build SCEV of VPDerivedIVRecipe like its expansion (NFC). (#242804)
Compute the SCEV of a VPDerivedIVRecipe as Start + zext-or-trunc(Index)
* Step, matching expandVPDerivedIV. Previously Start and Step were
truncated or sign-extended to the type of Index, so the SCEV had Index's
type rather than the recipe's, and VPScalarIVStepsRecipe truncated it
back. Remove that truncate.
All derived IVs queried today have an Index at least as wide as Start,
where both forms fold to the same SCEV.
[ConstantFolding] Use the pointer width for ptrtoint of inttoptr (#237878)
Previously, folding `ptrtoint (inttoptr C)` truncated C to the address
width and dropped the non-address bits; use the pointer width instead.
Fixes #235642.
Assisted-by: Claude Opus 5.5
