FreeBSD/ports 796f109multimedia/jellyfin distinfo Makefile, multimedia/jellyfin/files/packagejsons package-lock.json package.json

multimedia/jellyfin: update to 10.11.10

Release notes:
- Fix GHSA-f47c-m7gr-q92j, GHSA-jg92-mrxq-vv75, GHSA-wwwm-px48-fpvq (security)
- Fix stale UserData cache
- Fix/user manager collation
- Fix XSS in listview (jellyfin-web)

(cherry picked from commit 88ee059d8dfde92a07114891f104892f4f1fe6ec)
DeltaFile
+9-9multimedia/jellyfin/distinfo
+2-2multimedia/jellyfin/files/packagejsons/package-lock.json
+1-1multimedia/jellyfin/Makefile
+1-1multimedia/jellyfin/files/packagejsons/package.json
+13-134 files

FreeBSD/ports 8ff6253multimedia/jellyfin distinfo pkg-plist, multimedia/jellyfin/files/packagejsons package-lock.json package.json

multimedia/jellyfin: update to 10.11.8

(cherry picked from commit fb5be169620dc37f850f5b44902ef101a376708f)
DeltaFile
+9-9multimedia/jellyfin/distinfo
+2-2multimedia/jellyfin/files/packagejsons/package-lock.json
+1-1multimedia/jellyfin/pkg-plist
+1-1multimedia/jellyfin/Makefile
+1-1multimedia/jellyfin/files/packagejsons/package.json
+14-145 files

LLVM/project 0285f1cmlir/include/mlir/Support ThreadLocalCache.h, mlir/lib/Conversion/PDLToPDLInterp RootOrdering.cpp

[mlir] Don't assume non-erased DenseMap entries remain valid after erase. NFC (#199365)

Like the preceding llvm/ change, fix MLIR sites that reuse an iterator
or bucket reference after erasing from the same map, in preparation for
backward-shift DenseMap deletion which relocates surviving entries.

Use DenseMap::remove_if in ThreadLocalCache::clearExpiredEntries and the
RootOrdering cycle contraction (deferring the in-cycle graph erases
until
after iteration). ThreadLocalCache::get reads the value into a local and
bufferizeOp snapshots the worklist before folding, since those erases
re-enter via a rewriter listener.

Aided by Claude Opus 4.7
DeltaFile
+20-20mlir/lib/Conversion/PDLToPDLInterp/RootOrdering.cpp
+9-6mlir/include/mlir/Support/ThreadLocalCache.h
+8-2mlir/lib/Dialect/Bufferization/Transforms/Bufferize.cpp
+37-283 files

FreeBSD/ports bec8c52audio/ncspot distinfo Makefile.crates

audio/ncspot: update 1.3.3 -> 1.3.4

Changelog: https://github.com/hrkfdn/ncspot/releases/tag/v1.3.4
DeltaFile
+143-99audio/ncspot/distinfo
+70-48audio/ncspot/Makefile.crates
+1-2audio/ncspot/Makefile
+214-1493 files

FreeBSD/ports 399058bsecurity/vuxml/vuln 2026.xml

security/vuxml: document jellyfin < 10.11.10 vulnerabilities

Three security advisories fixed in jellyfin 10.11.10:
- GHSA-f47c-m7gr-q92j
- GHSA-jg92-mrxq-vv75
- GHSA-wwwm-px48-fpvq

References:
https://github.com/jellyfin/jellyfin/security/advisories/GHSA-f47c-m7gr-q92j
https://github.com/jellyfin/jellyfin/security/advisories/GHSA-jg92-mrxq-vv75
https://github.com/jellyfin/jellyfin/security/advisories/GHSA-wwwm-px48-fpvq
https://github.com/jellyfin/jellyfin/releases/tag/v10.11.10
DeltaFile
+33-0security/vuxml/vuln/2026.xml
+33-01 files

FreeBSD/ports 88ee059multimedia/jellyfin distinfo Makefile, multimedia/jellyfin/files/packagejsons package-lock.json package.json

multimedia/jellyfin: update to 10.11.10

Release notes:
- Fix GHSA-f47c-m7gr-q92j, GHSA-jg92-mrxq-vv75, GHSA-wwwm-px48-fpvq (security)
- Fix stale UserData cache
- Fix/user manager collation
- Fix XSS in listview (jellyfin-web)
DeltaFile
+9-9multimedia/jellyfin/distinfo
+2-2multimedia/jellyfin/files/packagejsons/package-lock.json
+1-1multimedia/jellyfin/files/packagejsons/package.json
+1-1multimedia/jellyfin/Makefile
+13-134 files

NetBSD/src rEZNlmVsys/arch/aarch64/aarch64 pmap_machdep.c, sys/arch/aarch64/include pmap_machdep.h

   aarch64: mi pmap: save a PTE software bit when doing modify emulation.

   Use only OS_MODEMUL and release OS_MODIFIED. A mapping is deemed modified
   if it is marked RW and OS_MODEMUL which only ever happens via emulation.
VersionDeltaFile
1.17+12-13sys/arch/aarch64/include/pmap_machdep.h
1.17+6-9sys/arch/aarch64/aarch64/pmap_machdep.c
+18-222 files

pkgng/pkgng f9993a7external/fetch http.c, libpkg pkg_jobs_universe.c

fix: yet another batch at fixing leaks
DeltaFile
+4-0libpkg/pkg_jobs_universe.c
+1-1external/fetch/http.c
+5-12 files

NetBSD/src Jf3jk6esys/uvm/pmap pmap.c

   mi pmap: pmap_clear_attribute should check cached value of the attribute

   The pmap_clear_attribute implementation used by the MI pmap should
   check the cached valued of the attribute as well as any value held
   in the PTE(s).

   Some emulation implementations require this as some operations, e.g
   changing page mappings to RO, can lose PTE attribute information.
VersionDeltaFile
1.100+9-7sys/uvm/pmap/pmap.c
+9-71 files

NetBSD/src wzmalEGusr.bin/calendar/calendars calendar.christian calendar.judaic

   Update calendar entries for items happening in the first half of
   the year in the hopes that NetBSD 11.0 gets released around mid-year.
VersionDeltaFile
1.16+13-13usr.bin/calendar/calendars/calendar.christian
1.14+13-13usr.bin/calendar/calendars/calendar.judaic
1.37+11-11usr.bin/calendar/calendars/calendar.holiday
1.14+7-7usr.bin/calendar/calendars/calendar.usholiday
+44-444 files

OpenBSD/xenocara aKrhIa4. 3RDPARTY

   update
VersionDeltaFile
1.469+2-23RDPARTY
+2-21 files

NetBSD/pkgsrc MMRANL1doc CHANGES-2026

   Updated databases/py-sqlalchemy, www/py-soupsieve
VersionDeltaFile
1.3263+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc mphBLgrwww/py-soupsieve distinfo Makefile

   py-soupsieve: updated to 2.8.4

   2.8.4

   - **FIX**: Fix another inefficient attribute pattern
   - **FIX**: Limit total number of selectors processed in a pattern to prevent massive selector requests
VersionDeltaFile
1.23+4-4www/py-soupsieve/distinfo
1.23+2-2www/py-soupsieve/Makefile
+6-62 files

NetBSD/pkgsrc pDmtTa2databases/py-sqlalchemy distinfo Makefile

   py-sqlalchemy: updated to 2.0.50

   2.0.50

   orm

   [orm] [bug]

   Fixed issue where using joinedload() with PropComparator.of_type() targeting a joined-table subclass combined with PropComparator.and_() referencing a column on that subclass would generate invalid SQL, where the subclass column was not adapted to the subquery alias. Pull request courtesy Joaquin Hui Gomez.

   [orm] [bug]

   Fixed issue where the presence of a SessionEvents.do_orm_execute() event hook would cause internal execution options such as yield_per and loader-specific state from the first orm_pre_session_exec pass to leak into the second pass, leading to errors when using relationship loaders such as selectinload() and immediateload(). The execution options passed to the second compilation pass are now based on the original options plus only the explicit updates made via ORMExecuteState.update_execution_options() within the event hook.

   [orm] [bug]

   Fixed issue where using with_polymorphic() on a leaf class (a subclass with no further descendants) or a non-inherited class would fail with an AttributeError when used in an ORM statement, due to configure_mappers() not being triggered implicitly. The fix ensures that AliasedInsp participates in the _post_inspect hook, triggering mapper configuration during ORM statement compilation.

   sql

    [34 lines not shown]
VersionDeltaFile
1.86+4-4databases/py-sqlalchemy/distinfo
1.99+2-2databases/py-sqlalchemy/Makefile
+6-62 files

FreeBSD/ports 73e8dc3polish/libreoffice distinfo, portuguese/libreoffice distinfo

editors/libreoffice: update to 26.2.3 release (+)

LibreOffice 26.2.3 is the third bugfix release of the latest line.

Release notes:  https://wiki.documentfoundation.org/ReleaseNotes/26.2
Changelog:      https://wiki.documentfoundation.org/Releases/26.2.3/RC1 \
                https://wiki.documentfoundation.org/Releases/26.2.3/RC2
DeltaFile
+5-5vietnamese/libreoffice/distinfo
+5-5ukrainian/libreoffice/distinfo
+5-5russian/libreoffice/distinfo
+5-5portuguese/libreoffice/distinfo
+5-5portuguese/libreoffice-pt_BR/distinfo
+5-5polish/libreoffice/distinfo
+30-30116 files not shown
+501-496122 files

FreeBSD/src 7ba9229sbin/ipfw ipv6.c ipfw2.c, sbin/ipfw/tests test_add_rule.py

ipfw: treat ipv6 address with zero mask as 'any'

Make the behaviour similar for both IPv4 and IPv6. Also add
the corresponding tests.

PR:             294733
Differential Revision:  https://reviews.freebsd.org/D56618

(cherry picked from commit 2872268c7f6d473aae9b02ebb5d2c24fc2cff9b1)
DeltaFile
+24-0sbin/ipfw/tests/test_add_rule.py
+7-4sbin/ipfw/ipv6.c
+4-3sbin/ipfw/ipfw2.c
+2-0tests/atf_python/sys/netpfil/ipfw/insns.py
+37-74 files

FreeBSD/src 9acea8asbin/ipfw ipv6.c ipfw2.c, sbin/ipfw/tests test_add_rule.py

ipfw: treat ipv6 address with zero mask as 'any'

Make the behaviour similar for both IPv4 and IPv6. Also add
the corresponding tests.

PR:             294733
Differential Revision:  https://reviews.freebsd.org/D56618

(cherry picked from commit 2872268c7f6d473aae9b02ebb5d2c24fc2cff9b1)
DeltaFile
+24-0sbin/ipfw/tests/test_add_rule.py
+7-4sbin/ipfw/ipv6.c
+4-3sbin/ipfw/ipfw2.c
+2-0tests/atf_python/sys/netpfil/ipfw/insns.py
+37-74 files

FreeBSD/ports 5a7df29editors/libreoffice Makefile

editors/libreoffice: remove flex from dependencies

PR:             293142
DeltaFile
+1-3editors/libreoffice/Makefile
+1-31 files

NetBSD/pkgsrc 919l6tXfilesystems/fuse-httpdirfs Makefile

   fuse-httpdirfs: fix download
VersionDeltaFile
1.3+2-1filesystems/fuse-httpdirfs/Makefile
+2-11 files

OpenBSD/ports qUxH2Cwsecurity/nettle Makefile, security/nettle/pkg PLIST

   Add missing @conflict libnettle-<3.10.2p0
VersionDeltaFile
1.2+1-0security/nettle/Makefile
1.2+1-0security/nettle/pkg/PLIST
+2-02 files

OpenBSD/ports A9yGV2Ygraphics/openexr distinfo Makefile

   Update to OpenEXR-3.4.12.
VersionDeltaFile
1.50+2-2graphics/openexr/distinfo
1.89+1-1graphics/openexr/Makefile
+3-32 files

OpenBSD/ports PKUQ39yx11/gnome/libadwaita distinfo Makefile

   Update to libadwaita-1.9.1.
VersionDeltaFile
1.53+2-2x11/gnome/libadwaita/distinfo
1.60+1-1x11/gnome/libadwaita/Makefile
+3-32 files

FreeBSD/ports 62fe9c1graphics/krita distinfo Makefile

graphics/krita: update to 5.2.16 release (+)

Also fix build with llvm20+

Release notes:  https://krita.org/en/posts/2026/krita-5.2.15-released/ \
                https://krita.org/en/posts/2026/krita-5.2.16-released/
DeltaFile
+5-3graphics/krita/distinfo
+4-2graphics/krita/Makefile
+9-52 files

OpenBSD/xenocara OKGsZn3distrib/sets/lists/xbase md.armv7 md.arm64

   sync
VersionDeltaFile
1.109+3-3distrib/sets/lists/xbase/md.armv7
1.61+3-3distrib/sets/lists/xbase/md.arm64
1.229+3-3distrib/sets/lists/xbase/md.i386
1.158+3-3distrib/sets/lists/xbase/md.loongson
1.215+3-3distrib/sets/lists/xbase/md.macppc
1.95+3-3distrib/sets/lists/xbase/md.octeon
+18-184 files not shown
+30-3010 files

LLVM/project 6aa8e1cllvm/lib/Target/AMDGPU SIMemoryLegalizer.cpp, llvm/test/CodeGen/AMDGPU memory-legalizer-av-none.ll

[AMDGPU] Implement "non-av" semantics using metadata

When the MMRA tag !{!"amdgcn-av", !"none"} is present on a synchronization
operation (fence, atomic load/store/rmw/cmpxchg), suppress cache writeback
(MakeAvailable) and cache invalidation (MakeVisible) while preserving
memory ordering (waits).

This implements the metadata proposed in #191246.

Fixes: LCOMPILER-2214

Assisted-By: Claude Opus 4.6
DeltaFile
+722-0llvm/test/CodeGen/AMDGPU/memory-legalizer-av-none.ll
+47-29llvm/lib/Target/AMDGPU/SIMemoryLegalizer.cpp
+769-292 files

OpenBSD/ports dNKKdopsysutils/libva-utils distinfo Makefile, sysutils/libva-utils/patches patch-encode_mpeg2vaenc_c

   Update libva-utils to 2.23.
VersionDeltaFile
1.2+3-3sysutils/libva-utils/patches/patch-encode_mpeg2vaenc_c
1.2+2-2sysutils/libva-utils/distinfo
1.5+1-1sysutils/libva-utils/Makefile
+6-63 files

OpenBSD/ports r0epi0rgraphics/intel-media-driver distinfo Makefile, graphics/intel-media-driver/patches patch-media_softlet_linux_common_os_osservice_mos_utilities_specific_h patch-media_driver_media_top_cmake_cmake

   Update to intel-media-driver 26.1.5 ok rsadowski@
VersionDeltaFile
1.2+3-5graphics/intel-media-driver/patches/patch-media_softlet_linux_common_os_osservice_mos_utilities_specific_h
1.3+2-2graphics/intel-media-driver/patches/patch-media_driver_media_top_cmake_cmake
1.7+2-2graphics/intel-media-driver/distinfo
1.6+1-1graphics/intel-media-driver/patches/patch-media_softlet_linux_common_os_osservice_mos_utilities_specific_cpp
1.15+1-1graphics/intel-media-driver/Makefile
1.3+0-0graphics/intel-media-driver/patches/patch-media_softlet_media_top_cmake_cmake
+9-116 files

OpenBSD/xenocara iEHMCBGlib/libva depcomp missing, lib/libva/va va_trace.c Makefile.in

   Update libva to 1.23. Ok rsadowski@
VersionDeltaFile
1.2+385-26lib/libva/va/va_trace.c
1.2+206-202lib/libva/depcomp
1.2+144-259lib/libva/missing
1.5+148-183lib/libva/aclocal.m4
1.6+119-101lib/libva/Makefile.in
1.5+111-86lib/libva/va/Makefile.in
+1,113-85747 files not shown
+2,122-1,23953 files

LLVM/project ee4c5d2clang/test/AST ast-dump-lambda-json.cpp ast-dump-template-json-win32-mangler-crash.cpp, lldb/tools/lldb-dap/extension package-lock.json

Merge branch 'main' into users/kovdan01/pauth-relr-rela-movement
DeltaFile
+23,873-20,923llvm/lib/Support/UnicodeNameToCodepointGenerated.cpp
+12,365-0llvm/test/CodeGen/AMDGPU/llvm.amdgcn.av.load.b128.ll
+3,903-0llvm/test/CodeGen/NVPTX/machine-cse-predicate-inversion.ll
+2,504-1,285lldb/tools/lldb-dap/extension/package-lock.json
+0-3,387clang/test/AST/ast-dump-lambda-json.cpp
+7-3,217clang/test/AST/ast-dump-template-json-win32-mangler-crash.cpp
+42,652-28,8123,377 files not shown
+154,853-85,4223,383 files

LLVM/project 2e344c4llvm/lib/Target/AMDGPU SIMemoryLegalizer.cpp

[AMDGPU] Refactor insertRelease into insertWriteback + insertWait (NFC)

A release consists of two actions: write-back the current cache, and wait for
"relevant" outstanding operations to complete. With the new memory model, it is
possible to disable the cache write-back using "av none" semantics. This patch
cleanly separates the existing implementation so that the write-backs can be
selectively applied when such metadata is present.

Assisted-By: Claude Opus 4.6
DeltaFile
+123-137llvm/lib/Target/AMDGPU/SIMemoryLegalizer.cpp
+123-1371 files