OPNSense/core 633a313src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms dialogSNatRule.xml, src/opnsense/mvc/app/models/OPNsense/Firewall Filter.php Filter.xml

Firewall: NAT: Source NAT: add pool options and source hash key (#10815)
DeltaFile
+20-0src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogSNatRule.xml
+14-0src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml
+9-0src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php
+2-0src/opnsense/scripts/filter/list_legacy_outbound_nat.php
+45-04 files

LLVM/project ccc8f19llvm/lib/CodeGen VirtRegMap.cpp

VirtRegMap: Pass instruction and operand to readsUndefSubreg

The helper recovered the instruction from the operand's parent to look up its
slot index. Pass the containing instruction and the operand directly so it no
longer depends on MachineOperand::getParent().

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+4-4llvm/lib/CodeGen/VirtRegMap.cpp
+4-41 files

LLVM/project 3e8f824llvm/test/CodeGen/AMDGPU opt-sgpr-to-vgpr-copy.mir fold-imm-f16-f32.mir

[AMDGPU] Update MIR syntax for REG_SEQUENCE in tests (#219469)

Use names instead of numbers for the subreg index operands in
REG_SEQUENCE instructions.

I went back to when these tests were created to get the correct mapping:

  sub0, // 1
  sub1, // 2
  sub2, // 3
  sub3, // 4

  sub0_sub1,    // 17
  sub2_sub3,    // 18
DeltaFile
+24-24llvm/test/CodeGen/AMDGPU/shrink-vop3-carry-out.mir
+24-24llvm/test/CodeGen/AMDGPU/clamp-omod-special-case.mir
+20-20llvm/test/CodeGen/AMDGPU/fold-immediate-output-mods.mir
+9-9llvm/test/CodeGen/AMDGPU/fold-imm-f16-f32.mir
+6-6llvm/test/CodeGen/AMDGPU/opt-sgpr-to-vgpr-copy.mir
+83-835 files

OPNSense/core 7729c98src/etc rc.freebsd

rc: add watchdog to shutdown, reboot and reload_all cases (#10813)

This will prevent shutdown/reboot actions from getting stuck indefinitely if a process misbehaves by ignoring the term signal. The timeout is set to 30 seconds and relies on the rc status call to provide a valid pid to determine if a process is stuck.
DeltaFile
+31-0src/etc/rc.freebsd
+31-01 files

NetBSD/pkgsrc BVEyUb4devel/py-ipython distinfo PLIST

   py-ipython: updated to 9.17.0

   IPython 9.17

   Summary

   This release is mostly about how long IPython takes to start. Two further
   passes over the startup path -- deferring imports to their use sites, keeping
   pygments' plugin machinery out of it, and declaring IPython's own magics
   lazily -- together cut a large fraction off ``import IPython`` and off getting
   to a prompt, without any change in behaviour. Alongside that: a new
   ``IPYTHON_KITTY_GRAPHICS`` environment variable to override terminal graphics
   detection, ``as`` aliasing in :magic:`aimport`, and two input- and
   output-handling fixes.

   There are no backwards-incompatible changes in this release.
VersionDeltaFile
1.123+5-5devel/py-ipython/Makefile
1.90+4-4devel/py-ipython/distinfo
1.31+7-1devel/py-ipython/PLIST
+16-103 files

OPNSense/core 0d8331bsrc/etc rc.freebsd

rc: keep this as it was
DeltaFile
+1-1src/etc/rc.freebsd
+1-11 files

NetBSD/src Q2wakUCsys/sys param.h

   sys/param.h: Welcome to 11.99.8, courtsey of struct proc reordering.

   PR kern/60653: posix_spawn(3) causes incorrect stack base information

   XXX kernel ABI revbump -- NOT FOR PULLUP
VersionDeltaFile
1.747+2-2sys/sys/param.h
+2-21 files

NetBSD/pkgsrc jDgS4Z3audio/faac distinfo PLIST

   faac: updated to 1.50

   1.50

   Build quantize_sse library with hidden symbols
   Don't call exit() from the library
   Define some more default_options in Meson build
   Fix some warnings in frontend/maingui.c
   Default to buildtype=release in Meson build
   Initialize data variable in huffcode()
   Remove the faulty HAVE_STRCASECMP check and other pointless header checks
   CI: Let Meson build set CFLAGS
   Disallow PNS in MPEG-2 mode to match spec
   frontend: Change default to MPEG-4 as MPEG-2 is obsolete
   Add max-channels option to change MAX_CHANNELS from 64
   Fix PNS to stay on in JOINT_MS for low-bitrate accuracy
   Replace redundant cpe, sce, and lfe boolean flags in ChannelInfo with an enum
   Reduce MAX_CHANNELS to 8 for ADTS compliance
   tns: Prevent division-by-zero or instability on highly correlated signals

    [7 lines not shown]
VersionDeltaFile
1.20+4-8audio/faac/Makefile
1.15+4-4audio/faac/distinfo
1.7+5-3audio/faac/PLIST
+13-153 files

LLVM/project 0f188d5llvm/lib/CodeGen RegAllocFast.cpp

RegAllocFast: Pass instruction and operand to isTiedToNotUndef

The helper recovered the instruction from the operand's parent to look up the
tied operand. Pass the containing instruction and the operand directly so it
no longer depends on MachineOperand::getParent().

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+5-5llvm/lib/CodeGen/RegAllocFast.cpp
+5-51 files

OPNSense/core f4f93e7src/etc rc.freebsd

rc: remove equality check, current_pid can be anything
DeltaFile
+5-7src/etc/rc.freebsd
+5-71 files

NetBSD/src rSyjIZKsys/kern kern_fork.c, sys/sys proc.h

   struct proc: Put p_stackbase in the [p_startcopy,p_endcopy) range.

   It is inherited by the child because the child has exactly the same
   memory layout as the parent.

   Cleanup after:

   PR kern/60653: posix_spawn(3) causes incorrect stack base information

   XXX kernel ABI revbump -- NOT FOR PULLUP
VersionDeltaFile
1.236+2-10sys/kern/kern_fork.c
1.375+2-2sys/sys/proc.h
+4-122 files

LLVM/project 6eeabb9libcxx/include tuple

Speed up pre-C++20 operator<(std::tuple, std::tuple) (#214646)

Reduces the compile time of `operator<` for tuples, as `std::get` appears slow to compile.
DeltaFile
+4-2libcxx/include/tuple
+4-21 files

FreeBSD/src bf05236sys/netpfil/pf pf.h pf_syncookies.c

pf: Send syncookies from the receiving thread

pf sends outbound packets by offloading them to a single per-vnet SWI handler
through the `V_pf_sendqueue` mbuf queue. A large DDoS attack may overwhelm
that per-vnet queue with syncookie packets and cause contention in the SWI
handler that negatively affects other pf operations.

Fix this by sending the initial syncookie challenge from the context
of the receiving thread. This avoids the syncookie-induced contention on
the `pf_intr` mbuf queue.

Sponsored by:   Klara, Inc.
Sponsored by:   Entersekt
MFC after:      3 weeks
Reviewed by:    kp
Differential Revision:  https://reviews.freebsd.org/D59068
DeltaFile
+39-28sys/netpfil/pf/pf.c
+29-3sys/netpfil/pf/pf_syncookies.c
+8-1sys/netpfil/pf/pf.h
+76-323 files

LLVM/project b90e2bcllvm/lib/CodeGen DetectDeadLanes.cpp

CodeGen: Pass instruction to DetectDeadLanes::isUndefInput (#219467)

The helper only used the operand to recover its parent instruction. Pass
the containing instruction directly so it no longer depends on the
MachineOperand's parent.

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+4-4llvm/lib/CodeGen/DetectDeadLanes.cpp
+4-41 files

LLVM/project 85e73b1llvm/include/llvm/CodeGen LiveRangeEdit.h, llvm/lib/CodeGen LiveRangeEdit.cpp

CodeGen: Pass instruction to LiveRangeEdit::useIsKill (#219466)

The helper only used the operand to recover its parent instruction. Pass
the containing instruction directly so it no longer depends on the
MachineOperand parent.

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+2-3llvm/lib/CodeGen/LiveRangeEdit.cpp
+3-2llvm/include/llvm/CodeGen/LiveRangeEdit.h
+5-52 files

LLVM/project bd37900llvm/lib/Target/AMDGPU SIShrinkInstructions.cpp

AMDGPU: Pass instruction and operand to isKImmOperand/isKUImmOperand

These helpers recovered the instruction and operand index from the operand's
parent to call isInlineConstant. Pass the containing instruction and the
operand directly so they no longer depend on MachineOperand::getParent().

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+12-10llvm/lib/Target/AMDGPU/SIShrinkInstructions.cpp
+12-101 files

LLVM/project 0fd5ebellvm/lib/Transforms/InstCombine InstCombineCompares.cpp, llvm/test/Transforms/InstCombine abs-intrinsic.ll

[InstCombine] Remove INT_MIN poison check from abs(X) u< C --> X + (C-1) u<= 2*(C-1) fold. (#219264)

Removed the check from this fold for the second argument of abs being
true (meaning the call returns poison for INT_MIN). This works because
if the second argument of abs is false, abs will return INT_MIN when
called on INT_MIN which results in false for both the original form and
the folded form due to the use of unsigned comparisons.

Proof: https://alive2.llvm.org/ce/z/qJRB-b

Closes #219163
DeltaFile
+4-4llvm/test/Transforms/InstCombine/abs-intrinsic.ll
+2-5llvm/lib/Transforms/InstCombine/InstCombineCompares.cpp
+6-92 files

FreeBSD/ports 17e64c9misc/codex Makefile

misc/codex: Directly use install command instead of CARGO_INSTALL_PATH

Using the ports framework's install target (from cargo.mk) with
CARGO_INSTALL_PATH specified seems to run build again, which consumes
too much time, even when the build phase has successfully finished. To
avoid that, use custom do-install target with install command.

While here, remove extraneous binary (logs_client) from installation.

PR:             297995
Reported by:    Robert Cina <transitive at gmail.com>
Co-authored-by: Robert Cina <transitive at gmail.com>
DeltaFile
+8-10misc/codex/Makefile
+8-101 files

OPNSense/core 760e601src/opnsense/mvc/app/models/OPNsense/Firewall Filter.xml

Use values consistently
DeltaFile
+6-6src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml
+6-61 files

LLVM/project da74db0llvm/lib/Target/AMDGPU SIInstrInfo.cpp

AMDGPU: Avoid querying operand parent in isLegalRegOperand (#219464)

This is accessible through MachineRegisterInfo and doesn't need to
look at the operand parent chain.

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+2-2llvm/lib/Target/AMDGPU/SIInstrInfo.cpp
+2-21 files

LLVM/project 16adc28llvm/test/TableGen AMDGPUTargetDefSubArchSpelling.td AMDGPUTargetDefErrors.td, llvm/utils/TableGen/Basic AMDGPUTargetDefEmitter.cpp

AMDGPU: Harden assumed subarch triple spelling

Guard against values that require multiple hex digits or
don't fit in the IsaVersion struct fields.

Co-Authored-By: Claude <noreply at anthropic.com> (Claude Opus 4.8)
DeltaFile
+68-2llvm/test/TableGen/AMDGPUTargetDefErrors.td
+23-10llvm/utils/TableGen/Basic/AMDGPUTargetDefEmitter.cpp
+12-1llvm/test/TableGen/AMDGPUTargetDefSubArchSpelling.td
+103-133 files

LLVM/project d88c2efllvm/lib/Transforms/Vectorize VPlanRecipes.cpp, llvm/test/Transforms/LoopVectorize/AArch64 cmp_cost.ll

[VPlan] Pass the mask's compare predicate when costing a blend. (#218422)

Pass the predicate to getCmpSelInstrCost in VPBlendRecipe if the mask is
a compare. This improves cost estimates on targets like AArch64 where
selects on compares can be lowered more efficiently.
DeltaFile
+164-4llvm/test/Transforms/LoopVectorize/AArch64/cmp_cost.ll
+11-3llvm/lib/Transforms/Vectorize/VPlanRecipes.cpp
+175-72 files

Illumos/gate 02c36fdusr/src/uts/intel/os hma.c

18377 hma conflates CPU ID with sequence ID
Reviewed by: Hans Rosenfeld <rosenfeld at grumpf.hope-2000.org>
Reviewed by: Toomas Soome <tsoome at me.com>
Approved by: Gordon Ross <gordon.w.ross at gmail.com>
DeltaFile
+20-13usr/src/uts/intel/os/hma.c
+20-131 files

LLVM/project a804574llvm/lib/Target/X86 X86AsmPrinter.cpp

X86: Pass instruction to inline asm register printing helpers

printAsmMRegister and printAsmVRegister only used the operand to recover its
parent instruction's inline asm dialect. Pass the containing instruction
directly so they no longer depend on MachineOperand::getParent().

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+9-8llvm/lib/Target/X86/X86AsmPrinter.cpp
+9-81 files

LLVM/project 29e6ba4llvm/lib/Target/AArch64 AArch64LoadStoreOptimizer.cpp

AArch64: Pass instruction and operand to load/store rename helpers

isRewritableImplicitDef and canRenameMOP only used the operand to recover its
parent instruction. Pass the containing instruction and the operand directly
so they no longer depend on MachineOperand::getParent().

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+11-10llvm/lib/Target/AArch64/AArch64LoadStoreOptimizer.cpp
+11-101 files

DragonFlyBSD/src c2a9515gnu/usr.bin/mpc Makefile config.h

mpc: Update config.h and makefile
DeltaFile
+23-30gnu/usr.bin/mpc/config.h
+17-15gnu/usr.bin/mpc/Makefile
+40-452 files

DragonFlyBSD/src e840728contrib/mpc README.DELETED README.DRAGONFLY

contrib/mpc: Update README.DELETED and README.DRAGONFLY
DeltaFile
+14-5contrib/mpc/README.DRAGONFLY
+8-8contrib/mpc/README.DELETED
+22-132 files

DragonFlyBSD/src dde5640contrib/mpc/src pow.c log10.c

Merge branch 'vendor/MPC'

Upgrade from 1.0.3 to 1.4.1.
DeltaFile
+710-0contrib/mpc/src/radius.c
+452-32contrib/mpc/src/asin.c
+425-0contrib/mpc/src/balls.c
+399-10contrib/mpc/src/fr_div.c
+121-248contrib/mpc/src/log10.c
+263-104contrib/mpc/src/pow.c
+2,370-39445 files not shown
+4,793-1,44251 files

DragonFlyBSD/src 92a61c6gnu/usr.bin/mpfr mparam.h Makefile

mpfr: Update mparam.h and makefile
DeltaFile
+102-61gnu/usr.bin/mpfr/Makefile
+43-42gnu/usr.bin/mpfr/mparam.h
+145-1032 files

FreeBSD/ports f368139security/vuxml/vuln 2026.xml

security/vuxml: Document Elixir vulnerabilities

Sponsored by:  SkunkWerks, GmbH
DeltaFile
+78-0security/vuxml/vuln/2026.xml
+78-01 files