FreeBSD/ports 1214cc7sysutils/appjail-devel distinfo Makefile

sysutils/appjail-devel: Update to 4.7.1.20251223

ChangeLog:
https://github.com/DtxdF/AppJail/commits/08bfc568c0c353ce8ec4a974d879d8addaf6912c/
DeltaFile
+3-3sysutils/appjail-devel/distinfo
+2-2sysutils/appjail-devel/Makefile
+5-52 files

FreeBSD/ports 34d0477sysutils/appjail distinfo Makefile

sysutils/appjail: Update to 4.7.1

ChangeLog: https://github.com/DtxdF/AppJail/releases/tag/v4.7.1
DeltaFile
+3-3sysutils/appjail/distinfo
+1-1sysutils/appjail/Makefile
+4-42 files

LLVM/project 035d4f3mlir/cmake/modules AddMLIRPython.cmake, mlir/examples/standalone pyproject.toml

globals doesn't work
DeltaFile
+3-17mlir/examples/standalone/test/python/smoketest.py
+12-6mlir/lib/Bindings/Python/Globals.cpp
+6-4mlir/cmake/modules/AddMLIRPython.cmake
+0-4mlir/test/Examples/standalone/test.wheel.toy
+3-0mlir/examples/standalone/pyproject.toml
+0-2mlir/include/mlir/Bindings/Python/Globals.h
+24-336 files

LLVM/project c3be13ellvm/include/llvm/Transforms/Utils UnrollLoop.h LoopPeel.h, llvm/lib/Transforms/Scalar LoopUnrollPass.cpp

[LoopPeel] Peel last iteration to enable load widening

In loops that contain multiple consecutive small loads (e.g., 3 bytes
loading i8's), peeling the last iteration makes it safe to read beyond
the accessed region, enabling the use of a wider load (e.g., i32) for
all other N-1 iterations.

Patterns such as:
```
  %a = load i8, ptr %p
  %b = load i8, ptr %p+1
  %c = load i8, ptr %p+2
  ...
  %p.next = getelementptr i8, ptr %p, 3
```

Can be transformed to:
```
  %wide = load i32, ptr %p  ; Read 4 bytes

    [9 lines not shown]
DeltaFile
+616-0llvm/test/Transforms/LoopUnroll/peel-last-iteration-load-widening.ll
+230-1llvm/lib/Transforms/Utils/LoopPeel.cpp
+104-0llvm/test/Transforms/LoopUnroll/peel-last-iteration-load-widening-be.ll
+24-10llvm/lib/Transforms/Scalar/LoopUnrollPass.cpp
+10-8llvm/include/llvm/Transforms/Utils/UnrollLoop.h
+7-1llvm/include/llvm/Transforms/Utils/LoopPeel.h
+991-206 files

LLVM/project 42ba7ecllvm/include/llvm/Transforms/Utils UnrollLoop.h LoopPeel.h, llvm/lib/Transforms/Scalar LoopUnrollPass.cpp

[LoopPeel] Peel last iteration to enable load widening

In loops that contain multiple consecutive small loads (e.g., 3 bytes
loading i8's), peeling the last iteration makes it safe to read beyond
the accessed region, enabling the use of a wider load (e.g., i32) for
all other N-1 iterations.

Patterns such as:
```
  %a = load i8, ptr %p
  %b = load i8, ptr %p+1
  %c = load i8, ptr %p+2
  ...
  %p.next = getelementptr i8, ptr %p, 3
```

Can be transformed to:
```
  %wide = load i32, ptr %p  ; Read 4 bytes

    [9 lines not shown]
DeltaFile
+617-0llvm/test/Transforms/LoopUnroll/peel-last-iteration-load-widening.ll
+230-1llvm/lib/Transforms/Utils/LoopPeel.cpp
+104-0llvm/test/Transforms/LoopUnroll/peel-last-iteration-load-widening-be.ll
+24-10llvm/lib/Transforms/Scalar/LoopUnrollPass.cpp
+10-8llvm/include/llvm/Transforms/Utils/UnrollLoop.h
+7-1llvm/include/llvm/Transforms/Utils/LoopPeel.h
+992-206 files

FreeBSD/ports 6ec31c9sysutils/bastille pkg-plist Makefile

sysutils/bastille: Upgrade port to 1.3.0.251222

Co-authored-by: Michael Osipov <michaelo at FreeBSD.org>
PR:             291885
Release Notes:  https://github.com/BastilleBSD/bastille/releases/tag/1.3.0.251222
DeltaFile
+48-7sysutils/bastille/pkg-plist
+13-11sysutils/bastille/Makefile
+5-3sysutils/bastille/distinfo
+66-213 files

LLVM/project ed9bc1ccompiler-rt/test/fuzzer merge-posix.test

[Fuzzer] Mark test as unsupported on Windows

bf932867acc003f4dd5bf4d8b295f764a3a85c91 enabled this test to run on
Windows again, but it started failing due to the use of ulimit.
Redisable it on Windows.

https://lab.llvm.org/buildbot/#/builders/107/builds/16280
DeltaFile
+2-0compiler-rt/test/fuzzer/merge-posix.test
+2-01 files

LLVM/project 2ad7a8fllvm/utils profcheck-xfail.txt

[ProfCheck] Exclude merge functions test

7d2d4f695d7f2907f790a107f84d3c5ed58cb531 added this test, exposing
existing profcheck breakage within the merge functions pass. Exclude it
for now until we get to merge functions.
DeltaFile
+1-0llvm/utils/profcheck-xfail.txt
+1-01 files

LLVM/project eeab393llvm/include/llvm/Transforms/Utils LoopPeel.h UnrollLoop.h, llvm/lib/Transforms/Scalar LoopUnrollPass.cpp

[LoopPeel] Peel last iteration to enable natural-sized load widening

In loop that contain multiple consecutive small loads (e.g., 3 bytes
loading i8s), peeling the last iteration makes it safe to read beyond
the accessed region, enabling a wider load (e.g., i32) for all other
N-1 iterations.

This optimization targets patterns like:
```
  %a = load i8, ptr %p
  %b = load i8, ptr %p+1
  %c = load i8, ptr %p+2
  ...
  %p.next = getelementptr i8, ptr %p, 3
```

Which can be transformed to:
```
  %wide = load i32, ptr %p  ; Read 4 bytes

    [9 lines not shown]
DeltaFile
+617-0llvm/test/Transforms/LoopUnroll/peel-last-iteration-load-widening.ll
+235-1llvm/lib/Transforms/Utils/LoopPeel.cpp
+104-0llvm/test/Transforms/LoopUnroll/peel-last-iteration-load-widening-be.ll
+15-3llvm/lib/Transforms/Scalar/LoopUnrollPass.cpp
+7-1llvm/include/llvm/Transforms/Utils/LoopPeel.h
+2-1llvm/include/llvm/Transforms/Utils/UnrollLoop.h
+980-66 files

LLVM/project ec1a65fllvm/lib/CodeGen/SelectionDAG DAGCombiner.cpp, llvm/test/CodeGen/AArch64 fp-to-int-to-fp.ll

[DAGCombiner] Relax nsz constraint with fp->int->fp optimizations (#164503)

`NoSignedZerosFPMath` isn't a hard requirements and in some contexts we
can still apply the truncation without worrying. For example, in cases
where the users of this sequence are overwriting the sign-bit (fabs) or
simply ignoring it (fcmp).
I think the same logic can be applied elsewhere for other DAG
optimizations.
DeltaFile
+18-124llvm/test/CodeGen/X86/setoeq.ll
+68-0llvm/test/CodeGen/AArch64/fp-to-int-to-fp.ll
+3-2llvm/lib/CodeGen/SelectionDAG/DAGCombiner.cpp
+89-1263 files

LLVM/project 1bcf740clang-tools-extra/clang-tidy ClangTidyModuleRegistry.h ClangTidyModule.h, clang-tools-extra/clangd TidyProvider.cpp

[clang-tidy] Merge `ClangTidyModuleRegistry.h` into `ClangTidyModule.h` (#173231)

As far as I can tell, the only effect of having
`ClangTidyModuleRegistry.h` be a separate header is that it forces you
to include two headers instead of one before you can actually define
your clang-tidy module.
DeltaFile
+6-10clang-tools-extra/clang-tidy/ClangTidyModuleRegistry.h
+7-0clang-tools-extra/clang-tidy/ClangTidyModule.h
+4-0clang-tools-extra/docs/ReleaseNotes.rst
+1-1clang-tools-extra/clangd/TidyProvider.cpp
+1-1clang-tools-extra/clang-tidy/ClangTidy.cpp
+1-1clang-tools-extra/clang-tidy/ClangTidyOptions.cpp
+20-1330 files not shown
+20-4336 files

DragonFlyBSD/src 7f7e8e1sys/dev/virtual/virtio/block virtio_blk.c

virtio_blk - Respect VIRTIO_MAX_VIRTQUEUES limit (currently at 8) as well.

* There is currently a hardcoded limit of VIRTIO_MAX_VIRTQUEUES virtqueues
  in the virtio_pci(4) driver's softc struct, that virtio_blk needs to
  respect for now.
DeltaFile
+5-8sys/dev/virtual/virtio/block/virtio_blk.c
+5-81 files

FreeBSD/src 8d5a11clib/clang/libclang Makefile, lib/clang/liblldb Makefile

src.conf: Add WITH_LLVM_LINK_STATIC_LIBRARIES build knob

In commit 2e47f35be5dc libllvm, libclang and liblldb were converted into
private shared libraries. This allowed clang, lld, lldb, and other llvm
tools to be linked against these shared libraries, which makes them
smaller and avoids duplication.

However, this also comes at the cost of some performance, since the
dynamic libraries are quite large, and contain lots of long symbols
(mangled C++ identifiers).

Add a WITH_LLVM_LINK_STATIC_LIBRARIES build knob that can be used to go
back to the previous behavior: libllvm, libclang and liblldb are built
as internal static libraries, i.e. only available during buildworld, and
fully linked into the various executables such as clang, lld, etc.

PR:             287447
Reviewed by:    emaste
MFC after:      1 week
Differential Revision: https://reviews.freebsd.org/D50956
DeltaFile
+12-1lib/clang/liblldb/Makefile
+8-3tools/build/mk/OptionalObsoleteFiles.inc
+4-5lib/clang/libllvm/Makefile
+8-1share/man/man5/src.conf.5
+4-4lib/clang/libclang/Makefile
+6-0tools/build/options/WITH_LLVM_LINK_STATIC_LIBRARIES
+42-147 files not shown
+61-1713 files

LLVM/project 57683c6clang-tools-extra/clangd/test system-include-extractor.test, clang-tools-extra/test/clang-tidy/infrastructure custom-query-check-not-enable.cpp custom-query-check.cpp

[clang-tools-extra] Remove use of REQUIRES: shell (#173313)

REQUIRES: shell does not have the intended effect now that the internal
shell is enabled by default and only prevents tests from running on
Windows. This patch removes the directive for portable tests and
switches it to a UNSUPPORTED: system-windows tag for non-portable tests
to make the intention more clear.
DeltaFile
+2-1clang-tools-extra/test/clang-tidy/infrastructure/custom-query-check-not-enable.cpp
+2-1clang-tools-extra/test/clang-tidy/infrastructure/custom-query-check.cpp
+1-1clang-tools-extra/clangd/test/system-include-extractor.test
+0-1clang-tools-extra/test/clang-tidy/infrastructure/hide-progress-flag-scripts.cpp
+5-44 files

OpenZFS/src f041375include/os/linux/spl/sys kmem.h, module/os/linux/spl spl-kmem-cache.c

kmem: don't add __GFP_COMP for KM_VMEM allocations

It hasn't been necessary since Linux 3.13
(torvalds/linux at a57a49887eb33), and since 6.19 the kernel warns if you
use it.

Sponsored-by: https://despairlabs.com/sponsor/
Reviewed-by: Tony Hutter <hutter2 at llnl.gov>
Reviewed-by: Brian Behlendorf <behlendorf1 at llnl.gov>
Signed-off-by: Rob Norris <robn at despairlabs.com>
Closes #18053
DeltaFile
+4-1include/os/linux/spl/sys/kmem.h
+1-1module/os/linux/spl/spl-kmem-cache.c
+5-22 files

OpenZFS/src f95e306module/os/linux/spl spl-kmem.c spl-kmem-cache.c

kmem: don't pass __GFP_HIGHMEM to __vmalloc

Since Linux 4.12 (torvalds/linux at 19809c2da28ae) __GFP_HIGHMEM has been
automatically added to calls to __vmalloc() internally, so we don't need
it anymore. This is good, because since 6.19 the kernel warns if you use
__GFP_HIGHMEM.

Sponsored-by: https://despairlabs.com/sponsor/
Reviewed-by: Tony Hutter <hutter2 at llnl.gov>
Reviewed-by: Brian Behlendorf <behlendorf1 at llnl.gov>
Signed-off-by: Rob Norris <robn at despairlabs.com>
Closes #18053
DeltaFile
+2-2module/os/linux/spl/spl-kmem.c
+1-1module/os/linux/spl/spl-kmem-cache.c
+3-32 files

OpenZFS/src 3c8665cconfig kernel-inode-state.m4 kernel.m4, include/os/linux/kernel/linux vfs_compat.h

Linux 6.19: replace i_state access with inode_state_read_once()

Sponsored-by: https://despairlabs.com/sponsor/
Reviewed-by: Tony Hutter <hutter2 at llnl.gov>
Reviewed-by: Brian Behlendorf <behlendorf1 at llnl.gov>
Signed-off-by: Rob Norris <robn at despairlabs.com>
Closes #18053
DeltaFile
+23-0config/kernel-inode-state.m4
+8-0include/os/linux/kernel/linux/vfs_compat.h
+2-1module/os/linux/zfs/zfs_vnops_os.c
+2-0config/kernel.m4
+35-14 files

FreeBSD/ports ebe1fb8emulators/flexemu distinfo Makefile

emulators/flexemu: Update to 3.31

Changelog:      https://github.com/aladur/flexemu/compare/V3.30...V3.31

Reported by:    portscout, Repology
MFH:            2025Q4

(cherry picked from commit 9eec8e90ff98967b2d5a28b542ab8dce3a1c67a4)
DeltaFile
+5-5emulators/flexemu/distinfo
+5-3emulators/flexemu/Makefile
+2-2emulators/flexemu/pkg-plist
+12-103 files

LLVM/project dab4ad7llvm/lib/Target/AMDGPU AMDGPURegBankLegalizeRules.cpp, llvm/test/CodeGen/AMDGPU llvm.amdgcn.mulhi.i24.ll llvm.amdgcn.mulhi.u24.ll

[AMDGPU][GlobalISel] Add RegBankLegalize mul24 and fmul.legacy (#173123)

Add RegBankLegalize rules for mul24 and fmul.legacy intrinsics
DeltaFile
+232-0llvm/test/CodeGen/AMDGPU/GlobalISel/llvm.amdgcn.mul24.ll
+51-6llvm/test/CodeGen/AMDGPU/GlobalISel/llvm.amdgcn.fmul.legacy.ll
+11-0llvm/lib/Target/AMDGPU/AMDGPURegBankLegalizeRules.cpp
+2-2llvm/test/CodeGen/AMDGPU/GlobalISel/regbankselect-amdgcn.fmul.legacy.mir
+1-1llvm/test/CodeGen/AMDGPU/llvm.amdgcn.mulhi.i24.ll
+1-1llvm/test/CodeGen/AMDGPU/llvm.amdgcn.mulhi.u24.ll
+298-106 files

LLVM/project ac602d8llvm/docs/DirectX DXILResources.rst, llvm/lib/Target/DirectX DXILResourceAccess.cpp DXILOpLowering.cpp

[DirectX] Disallow ElementIndex for raw buffer accesses (#173320)

Raw (as in ByteAddress) buffer accesses in DXIL must specify
ElementIndex as undef, and Structured buffer accesses must specify a
value. Ensure that we do this correctly in DXILResourceAccess, and
enforce that the operations are valid in DXILOpLowering.

Fixes #173316
DeltaFile
+78-0llvm/test/CodeGen/DirectX/RawBuffer-errors.ll
+37-10llvm/lib/Target/DirectX/DXILResourceAccess.cpp
+30-0llvm/lib/Target/DirectX/DXILOpLowering.cpp
+6-6llvm/test/CodeGen/DirectX/RawBufferLoad.ll
+6-6llvm/test/CodeGen/DirectX/RawBufferStore.ll
+8-3llvm/docs/DirectX/DXILResources.rst
+165-254 files not shown
+177-3710 files

FreeBSD/ports 9eec8e9emulators/flexemu distinfo Makefile

emulators/flexemu: Update to 3.31

Changelog:      https://github.com/aladur/flexemu/compare/V3.30...V3.31

Reported by:    portscout, Repology
MFH:            2025Q4
DeltaFile
+5-5emulators/flexemu/distinfo
+5-3emulators/flexemu/Makefile
+2-2emulators/flexemu/pkg-plist
+12-103 files

LLVM/project 7bad288clang-tools-extra/clang-tidy ClangTidyOptions.cpp, clang-tools-extra/clang-tidy/abseil StringFindStrContainsCheck.cpp

[clang-tidy][NFC] Prefer `static constexpr` over `static const` where possible (#173406)

DeltaFile
+11-11clang-tools-extra/clang-tidy/modernize/LoopConvertCheck.cpp
+11-11clang-tools-extra/clang-tidy/performance/InefficientVectorOperationCheck.cpp
+7-7clang-tools-extra/clang-tidy/modernize/UseEmplaceCheck.cpp
+2-10clang-tools-extra/clang-tidy/ClangTidyOptions.cpp
+6-5clang-tools-extra/clang-tidy/readability/StringCompareCheck.cpp
+5-4clang-tools-extra/clang-tidy/abseil/StringFindStrContainsCheck.cpp
+42-4816 files not shown
+76-7922 files

LLVM/project 5f4d2cdmlir/cmake/modules AddMLIRPython.cmake, mlir/include/mlir-c Support.h

try MLIR_PYTHON_API_EXPORTED
DeltaFile
+65-56mlir/include/mlir/Bindings/Python/IRCore.h
+4-5mlir/cmake/modules/AddMLIRPython.cmake
+2-2mlir/include/mlir/Bindings/Python/Globals.h
+2-1mlir/include/mlir/Bindings/Python/IRTypes.h
+2-0mlir/include/mlir-c/Support.h
+75-645 files

LLVM/project f6d621fmlir/cmake/modules AddMLIRPython.cmake, mlir/include/mlir-c Support.h

try MLIR_PYTHON_API_EXPORTED
DeltaFile
+569-423mlir/include/mlir/Bindings/Python/IRCore.h
+55-42mlir/include/mlir/Bindings/Python/Globals.h
+4-5mlir/cmake/modules/AddMLIRPython.cmake
+4-3mlir/include/mlir/Bindings/Python/IRTypes.h
+2-0mlir/include/mlir-c/Support.h
+634-4735 files

FreeBSD/ports 72ec8b6sysutils/limine distinfo Makefile

sysutils/limine: Update 10.4.0 => 10.5.0

Changelog:
https://codeberg.org/Limine/Limine/src/tag/v10.5.0/ChangeLog

PR:     291903
DeltaFile
+3-3sysutils/limine/distinfo
+1-1sysutils/limine/Makefile
+4-42 files

LLVM/project bf93286compiler-rt/test/asan/TestCases scariness_score_test.cpp log-path_test.cpp, compiler-rt/test/fuzzer ulimit.test

[compiler-rt] Remove REQUIRES: shell lines (#173338)

The shell feature only implies that we are not running on Windows now
that the internal shell is enabled by default everywhere. Remove where
we can and rewrite to the more intentional UNSUPPORTED: system-windows
when we still need to prevent tests from running on Windows.
DeltaFile
+3-3compiler-rt/test/asan/TestCases/scariness_score_test.cpp
+1-4compiler-rt/test/asan/TestCases/log-path_test.cpp
+0-3compiler-rt/test/memprof/TestCases/log_path_test.cpp
+2-1compiler-rt/test/fuzzer/ulimit.test
+2-1compiler-rt/test/profile/instrprof-hostname.c
+2-1compiler-rt/test/hwasan/TestCases/print-memory-usage.c
+10-139 files not shown
+13-2215 files

OPNSense/core cd97719src/opnsense/mvc/app/controllers/OPNsense/IDS/forms generalSettings.xml, src/opnsense/mvc/app/models/OPNsense/IDS IDS.xml IDS.php

Services: Intrusion Detection - refactor pcap/netmap selection to "Capture mode" and add new "divert" option.

With divert we can integrate suricata in firewall rules, which makes it easier to bypass large flows.
This change requires the new SO_REUSEPORT_LB option in the kernel in order to distribute traffic over multiple workers.
DeltaFile
+46-0src/opnsense/mvc/app/models/OPNsense/IDS/Migrations/M1_1_2.php
+16-4src/opnsense/mvc/app/models/OPNsense/IDS/IDS.xml
+15-2src/opnsense/service/templates/OPNsense/IDS/rc.conf.d
+13-4src/opnsense/mvc/app/controllers/OPNsense/IDS/forms/generalSettings.xml
+3-3src/opnsense/mvc/app/models/OPNsense/IDS/IDS.php
+2-2src/opnsense/service/templates/OPNsense/IDS/suricata.yaml
+95-153 files not shown
+100-159 files

FreeBSD/ports 9cf4622sysutils/rundeck distinfo Makefile

sysutils/rundeck: Update 5.17.0 => 5.18.0

Release Notes:
https://docs.rundeck.com/docs/history/5_x/version-5.18.0.html

PR:             291890
Security:       CVE-2025-8916
Security:       CVE-2025-53864
Security:       CVE-2025-59250
Security:       CVE-2025-64756
MFH:            2025Q4
(cherry picked from commit 8d393b611a7f613740f0b3cab7cae0fd0c8cd500)
DeltaFile
+3-3sysutils/rundeck/distinfo
+2-2sysutils/rundeck/Makefile
+5-52 files

FreeBSD/ports 268ca67sysutils/rundeck distinfo Makefile

sysutils/rundeck: Update to 5.17.0

ReleaseNotes:   https://docs.rundeck.com/docs/history/5_x/version-5.17.0.html
(cherry picked from commit 7bfb0ac9a554d17c6128443bef0abfffc2344b07)
DeltaFile
+3-3sysutils/rundeck/distinfo
+2-2sysutils/rundeck/Makefile
+5-52 files

FreeBSD/ports fa4b9f1devel/oci-cli distinfo Makefile

devel/oci-cli: Update 3.71.2 => 3.71.4

Changelog:
https://github.com/oracle/oci-cli/releases/tag/v3.71.4

PR:     291893
DeltaFile
+3-3devel/oci-cli/distinfo
+1-1devel/oci-cli/Makefile
+4-42 files