OPNSense/core b50692a — src/www system_general.php

system: bring in a help text edit from master
DeltaFile
+1-1src/www/system_general.php
+1-11 files

LLVM/project dd0c192 — mlir/lib/Conversion/ArithToLLVM ArithToLLVM.cpp, mlir/test/Conversion/ArithToLLVM arith-to-llvm.mlir

[mlir][ArithToLLVM] Do not lower sitofp to unsupported float types (#230975)

The LLVM type converter maps float types with no LLVM equivalent (for
example
f8E4M3FN, f8E5M2 and f8E8M0FNU) to an integer of the same width. Unlike
`UIToFPOpLowering`, `FPToSIOpLowering` and `FPToUIOpLowering`,
`SIToFPOpLowering` did not set `FailOnUnsupportedFP`. As a result, it
produced an invalid op that the verifier rejects:

  'llvm.sitofp' op result #0 must be floating point LLVM type or LLVM
  dialect-compatible vector of floating point LLVM type, but got 'i8'

Reproducer (`mlir-opt --convert-arith-to-llvm`, or `--convert-to-llvm`):

  %0 = arith.sitofp %arg0 : i32 to f8E4M3FN

Set `FailOnUnsupportedFP` so that the op stays unconverted, as the other
int/float conversions already do. Users can emulate the op first with
`arith-emulate-unsupported-floats`.

    [5 lines not shown]
DeltaFile
+19-0mlir/test/Conversion/ArithToLLVM/arith-to-llvm.mlir
+3-1mlir/lib/Conversion/ArithToLLVM/ArithToLLVM.cpp
+22-12 files

OPNSense/core 733c84f — src/opnsense/mvc/app/views/layouts default.volt, src/www head.inc

ui: close mobile menu when a menu entry opens another tab of the current page (#10942)

(cherry picked from commit 2881fb1be507587dfbf7038d2c83ce556bef0696)
DeltaFile
+3-0src/www/head.inc
+3-0src/opnsense/mvc/app/views/layouts/default.volt
+6-02 files

OPNSense/core d72dcd8 — src/opnsense/mvc/app/models/OPNsense/Firewall Alias.php

Firewall: Aliases - port aliases require content, add validation.

ref: https://github.com/opnsense/core/pull/10946
(cherry picked from commit a3797f031bc705d4c72fcaa7dd05e8edfb60f425)
DeltaFile
+3-0src/opnsense/mvc/app/models/OPNsense/Firewall/Alias.php
+3-01 files

OPNSense/core 621c12b — src/opnsense/mvc/app/library/OPNsense/Firewall ForwardRule.php

Firewall: NAT: Destination NAT - fix typo in parseRdrRules() causing faulty rules not being disabled. ref: https://github.com/opnsense/core/pull/10944

(cherry picked from commit 8e6f3f34a90051ca6819e23c22e84a5afca856bf)
DeltaFile
+1-1src/opnsense/mvc/app/library/OPNsense/Firewall/ForwardRule.php
+1-11 files

NetBSD/pkgsrc-wip 22b1e14 — clang PLIST, flang PLIST

llvm: updated to 23.1.3
DeltaFile
+0-731llvm/patches/patch-203680
+397-293clang/PLIST
+141-44mlir/PLIST
+98-18llvm/PLIST
+50-19flang/PLIST
+23-13libcxx/PLIST
+709-1,11849 files not shown
+892-1,26255 files

HardenedBSD/src c814c23 — sys/ufs/ffs ffs_vnops.c, sys/ufs/ufs ufs_vnops.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+386-0tests/sys/fs/ufs/sync_test.c
+191-0tools/test/stress2/misc/nlink6.sh
+83-38sys/ufs/ffs/ffs_vnops.c
+19-23sys/ufs/ufs/ufs_vnops.c
+36-0usr.bin/ncal/tests/ncal_test.sh
+24-0usr.bin/ncal/ncal.c
+739-6111 files not shown
+801-6317 files

HardenedBSD/src 500d9a9 — sys/ufs/ffs ffs_vnops.c, sys/ufs/ufs ufs_vnops.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+386-0tests/sys/fs/ufs/sync_test.c
+191-0tools/test/stress2/misc/nlink6.sh
+83-38sys/ufs/ffs/ffs_vnops.c
+19-23sys/ufs/ufs/ufs_vnops.c
+36-0usr.bin/ncal/tests/ncal_test.sh
+24-0usr.bin/ncal/ncal.c
+739-6111 files not shown
+801-6317 files

NetBSD/src Fyg2oWI — external/gpl2/mkhybrid/dist write.c tree.c, external/gpl2/mkhybrid/dist/libhfs_iso hfs.c data.c

   macppc: add MKREPRO support to mkhybrid and fix bugs

   1) Fix overlapping strcpy which triggers fortify checks on some hosts
   2) Add -timestamp option
   2) Don't leak stack garbage into the generated image
VersionDeltaFile
1.8+57-2external/gpl2/mkhybrid/dist/mkisofs.c
1.2+29-0external/gpl2/mkhybrid/dist/libhfs_iso/data.c
1.3+13-0external/gpl2/mkhybrid/dist/mkhybrid.8
1.4+7-3external/gpl2/mkhybrid/dist/tree.c
1.2+4-4external/gpl2/mkhybrid/dist/libhfs_iso/hfs.c
1.3+3-2external/gpl2/mkhybrid/dist/write.c
+113-116 files not shown
+127-1612 files

HardenedBSD/ports 5a0393d — devel/py-omegaconf Makefile, games/openbve Makefile distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+49-0security/vuxml/vuln/2026.xml
+35-13games/openbve/distinfo
+14-18net/freerdp3/Makefile
+17-10games/openbve/Makefile
+16-10devel/py-omegaconf/Makefile
+0-21games/openbve/files/patch-source_TrainEditor2_TrainEditor2.csproj
+131-7213 files not shown
+175-12019 files

LLVM/project db36cde — mlir/include/mlir/Dialect/GPU/IR GPUOps.td, mlir/include/mlir/Dialect/OpenACC OpenACCOps.td

[mlir] `HasParallelRegion` means region may be parallel
DeltaFile
+64-0mlir/test/Dialect/Bufferization/Transforms/buffer-loop-hoisting.mlir
+22-19mlir/include/mlir/Dialect/OpenMP/OpenMPOps.td
+6-4mlir/include/mlir/Interfaces/LoopLikeInterface.h
+3-3mlir/include/mlir/Dialect/OpenACC/OpenACCOps.td
+4-0utils/bazel/llvm-project-overlay/mlir/BUILD.bazel
+2-1mlir/include/mlir/Dialect/GPU/IR/GPUOps.td
+101-276 files not shown
+107-2912 files

LLVM/project cadc31b — llvm/lib/CodeGen MachineOutliner.cpp, llvm/lib/IR StructuralHash.cpp

[CodeGen] Source-qualify hashes of module-local globals for GFM and outliner (#219938)

Global function merging and outliner compare hashes across modules. Some
globals are hashed by name, so two modules that each define a same-named
global with local linkage produce identical operand hashes although they
denote different storage. The hash collision caused both GFM and GFO to
make quite a few non-beneficial optimization decisions.

Add a `SourceQualifyLocalGlobals` option to IR `StructuralHash` and MIR
`stableHashValue`. When set, the name-based hash of a global with local
linkage is combined with the source file name of its module. The module
identifier itself is not suitable: the linker may name the module after
an unstable temporary LTO object file, which would make the supposedly
stable hash vary from run to run and between the generate and use
rounds. Content-based hashes are unchanged, so equivalent literals still
merge across modules.

The option defaults to off, so other users of `stableHashValue` and
`StructuralHash` keep their hashes.
DeltaFile
+94-0llvm/unittests/MIR/MachineStableHashTest.cpp
+79-0llvm/test/CodeGen/AArch64/cgdata-outline-source-qualified-globals.ll
+60-0llvm/test/CodeGen/AArch64/cgdata-merge-source-qualified-globals.ll
+50-0llvm/unittests/IR/StructuralHashTest.cpp
+38-10llvm/lib/IR/StructuralHash.cpp
+12-2llvm/lib/CodeGen/MachineOutliner.cpp
+333-124 files not shown
+365-2210 files

HardenedBSD/src 7fe1d8a — sys/contrib/zlib gzwrite.c

MFV: zlib: Fix buffer overflow bug in non-blocking gzwrite.

MFC after:      3 days
DIfferential revision:  https://reviews.freebsd.org/D60695
DeltaFile
+4-1sys/contrib/zlib/gzwrite.c
+4-11 files

FreeBSD/src 7fe1d8a — sys/contrib/zlib gzwrite.c

MFV: zlib: Fix buffer overflow bug in non-blocking gzwrite.

MFC after:      3 days
DIfferential revision:  https://reviews.freebsd.org/D60695
DeltaFile
+4-1sys/contrib/zlib/gzwrite.c
+4-11 files

OPNSense/plugins 484ea08 — dns/ddclient pkg-descr, dns/ddclient/src/opnsense/service/conf/actions.d actions_ddclient.conf

dns/ddclient: sync with master
DeltaFile
+1-0dns/ddclient/src/opnsense/service/conf/actions.d/actions_ddclient.conf
+1-0dns/ddclient/pkg-descr
+2-02 files

OPNSense/plugins 0166570 — dns/ddclient pkg-descr

dns/ddclient: document previous
DeltaFile
+1-0dns/ddclient/pkg-descr
+1-01 files

HardenedBSD/src f3f5af3 — . gzwrite.c

Fix buffer overflow bug in non-blocking gzwrite.

This addresses CVE-2026-85091.

(cherry picked from commit df84af25dc1942490e1d1c899a07619152a46148)
DeltaFile
+4-1gzwrite.c
+4-11 files

FreeBSD/src f3f5af3 — . gzwrite.c

Fix buffer overflow bug in non-blocking gzwrite.

This addresses CVE-2026-85091.

(cherry picked from commit df84af25dc1942490e1d1c899a07619152a46148)
DeltaFile
+4-1gzwrite.c
+4-11 files

NetBSD/pkgsrc WTiqCOy — doc CHANGES-2026

   Updated lang/py-ast-serialize, devel/py-async-lru
VersionDeltaFile
1.6936+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc aV8zqy0 — devel/py-async-lru Makefile distinfo

   py-async-lru: updated to 2.4.0

   2.4.0

   Added a key parameter for custom cache key computation.
   Fixed a NameError when decorating a function whose annotations refer to names
   defined later, on Python 3.14.
   On Python 3.14, cached functions expose __annotate__ instead of
   __annotations__, as functools.lru_cache wrappers do; read their annotations
   with annotationlib.get_annotations().
VersionDeltaFile
1.6+4-4devel/py-async-lru/distinfo
1.6+3-3devel/py-async-lru/Makefile
+7-72 files

OPNSense/plugins b446272 — dns/ddclient/src/opnsense/service/conf/actions.d actions_ddclient.conf

dns/ddclient: cache supported provider lookup (#5780)
DeltaFile
+1-0dns/ddclient/src/opnsense/service/conf/actions.d/actions_ddclient.conf
+1-01 files

NetBSD/pkgsrc M93PpUf — lang/py-ast-serialize Makefile distinfo

   py-ast-serialize: updated to 0.13.0

   0.13.0
   Unknown changes
VersionDeltaFile
1.12+4-4lang/py-ast-serialize/distinfo
1.12+2-2lang/py-ast-serialize/Makefile
+6-62 files

LLVM/project f113621 — clang-tools-extra/clang-tidy/performance NoAutomaticMoveCheck.cpp, clang-tools-extra/docs ReleaseNotes.md

[clang-tidy] Fix false positive in performance-no-automatic-move for captured variables (#231359)

performance-no-automatic-move matched any `return x` where `x` is a
const local
variable, without checking whether `x` is actually local to the function
doing
the return. Inside a lambda, a captured variable still points at the
enclosing
function's VarDecl, so `[&x] { return x; }` was diagnosed. But captured
variables
are never implicitly moved from (Sema bails on
refersToEnclosingVariableOrCapture()
before it looks at constness), so dropping the const still gives a copy.

Now we skip DeclRefExprs that refer to a capture, same as
UseStdMoveCheck. A const
local declared inside the lambda body is still diagnosed.

AI Usage: an AI assistant was used while working on this fix, and I went

    [2 lines not shown]
DeltaFile
+30-1clang-tools-extra/test/clang-tidy/checkers/performance/no-automatic-move.cpp
+9-2clang-tools-extra/clang-tidy/performance/NoAutomaticMoveCheck.cpp
+5-0clang-tools-extra/docs/ReleaseNotes.md
+44-33 files

LLVM/project 04aa80a — mlir/lib/Dialect/X86/Transforms VectorContractToAMXDotProduct.cpp, mlir/test/Dialect/X86/AMX vector-contract-to-tiled-dp.mlir

[mlir][x86] Fix AMX loop carried accumulation (#231170)

Fixes the AMX contraction lowering of reduction loops whose accumulators
are carried in by an enclosing loop.

The values accumulated by the enclosing loop were dropped and replaced
with the initial accumulator, which produced wrong results.

Assisted-by: Claude
DeltaFile
+699-0mlir/test/Dialect/X86/AMX/vector-contract-to-tiled-dp.mlir
+58-2mlir/lib/Dialect/X86/Transforms/VectorContractToAMXDotProduct.cpp
+757-22 files

NetBSD/src vsAvhcH — sys/arch/hppa/spmath Makefile.inc Makefile

   Use tool tsort, not host tsort, for hppa spmath build
VersionDeltaFile
1.7+3-3sys/arch/hppa/spmath/Makefile
1.13+2-2sys/arch/hppa/spmath/Makefile.inc
+5-52 files

LLVM/project 860e0b5 — clang/docs ReleaseNotes.md, clang/test/Sema pragma-weak.c

fixup! Merge branch 'main' into users/aokblast/clang/sema_accept_weak_after_decl
DeltaFile
+17-18clang/test/Sema/pragma-weak.c
+0-3clang/docs/ReleaseNotes.md
+17-212 files

LLVM/project c50d8f7 — llvm/lib/Support UnicodeNameToCodepointGenerated.cpp, llvm/test/CodeGen/AMDGPU amdgcn.bitcast.896bit.ll amdgcn.bitcast.960bit.ll

Merge branch 'main' into users/aokblast/clang/sema_accept_weak_after_decl
DeltaFile
+87,171-106,572llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.1024bit.ll
+24,803-30,605llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.512bit.ll
+32,751-17,382llvm/test/CodeGen/AMDGPU/frem.ll
+23,347-23,371llvm/lib/Support/UnicodeNameToCodepointGenerated.cpp
+17,152-20,808llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.960bit.ll
+15,838-19,315llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.896bit.ll
+201,062-218,05312,024 files not shown
+938,689-679,68312,030 files

LLVM/project 6c43b4f — clang/docs ReleaseNotes.md, clang/lib/AST ItaniumMangle.cpp

fixup! [Clang] Do not assume existing substition for template specialization
DeltaFile
+20-0clang/test/CodeGenCXX/mangle-subst-template-template-parm-gh88592.cpp
+0-15clang/test/CodeGenCXX/mangle-template.cpp
+6-2clang/docs/ReleaseNotes.md
+2-0clang/lib/AST/ItaniumMangle.cpp
+28-174 files

LLVM/project 4a51cf1 — clang/include/clang/Basic BuiltinsRISCV.td, clang/lib/CodeGen/TargetBuiltins RISCV.cpp

[RISCV][P-ext] Add scalar rev16 intrinsic (#230704)

Assisted-by: Claude
DeltaFile
+10-0clang/test/CodeGen/RISCV/rvp-intrinsics.c
+9-0llvm/test/CodeGen/RISCV/rv64p.ll
+5-0clang/lib/CodeGen/TargetBuiltins/RISCV.cpp
+4-0llvm/include/llvm/IR/IntrinsicsRISCV.td
+4-0cross-project-tests/intrinsic-header-tests/riscv_packed_simd.c
+3-0clang/include/clang/Basic/BuiltinsRISCV.td
+35-02 files not shown
+37-08 files

LLVM/project f1e644b — clang/include/clang/Lex ModuleMap.h, clang/lib/Lex ModuleMap.cpp

[clang][Serialization] Make directory dependencies absolute when read (#231319)

Directory dependencies under a module's base directory are stored
relative to it, and the reader's base directory isn't always absolute:
with relocation checks enabled it is taken from where header search
found the module, which is relative through a relative search path, and
with -fmodule-file-home-is-cwd there is none. These directories were
then read back relative, so `directory-deps` reported them relative and
they never matched the absolute paths a build system reports as
invalidated.

Canonicalize them when reading the same way they are when recorded.

Assisted-by: Claude Code: opus-5.5
DeltaFile
+28-0clang/test/ClangScanDeps/modules-directory-deps.c
+13-0clang/test/Modules/validate-directory-dependencies.c
+7-2clang/lib/Serialization/ASTReader.cpp
+7-2clang/lib/Lex/ModuleMap.cpp
+5-0clang/include/clang/Lex/ModuleMap.h
+60-45 files