OPNSense/core a21815e — src/opnsense/scripts/kea kea_prefix_watcher.py

routes is a better dictionary name, make logic easier to follow
DeltaFile
+30-27src/opnsense/scripts/kea/kea_prefix_watcher.py
+30-271 files

LLVM/project f713468 — llvm/docs AMDGPUMemoryModel.md

use scope instances instead of referring back to the starting write `W` all the time
DeltaFile
+22-18llvm/docs/AMDGPUMemoryModel.md
+22-181 files

pkgng/pkgng 9c48445 — libpkg pkgdb.c, libpkg/private pkgdb.h

sqlite: match the extension entry point signature

Use the signature sqlite expects.  sqlite3ext.h, which declares the
type, cannot be included here because it redefines the whole sqlite3
API to go through the loadable extension thunk, so declare the
structure the way it does.
DeltaFile
+8-1libpkg/private/pkgdb.h
+2-2libpkg/pkgdb.c
+10-32 files

LLVM/project 54fe44c — bolt/lib/Passes LongJmp.cpp

[NFC][BOLT][AArch64] Simplify isWithinClusterRange parameters (#236980)

This is leftover from #228069 where we removed thunk estimation.
After that, isWithinClusterRange lambda no longer needs to know
how many clusters exist between Source and Target.
DeltaFile
+9-8bolt/lib/Passes/LongJmp.cpp
+9-81 files

pkgng/pkgng 5f9c349 — external/elf libtree.h

libelf: use uintptr_t in the tree fallback for macOS support
DeltaFile
+10-8external/elf/libtree.h
+10-81 files

FreeBSD/ports 15aea40 — lang/babashka Makefile distinfo

lang/babashka: Update to 1.13.229

Changes since 1.13.226:

1.13.229 (2026-10-27)

  * Bump org.babashka/cli to 0.12.92
  * Bump org.flatland/ordered to 1.16.13
  * The bb resolver retries HTTP 429, HTTP 503 and dropped
    connections, configured by the
    aether.connector.http.retryHandler.* system properties
  * The bb resolver no longer fails a version range on Windows when
    two threads fetch one maven-metadata.xml at once

1.13.228 (2026-10-25)

  * Block the keys of the compromised eMudhra intermediates, so
    re-encoded certificates are rejected too
  * The bb resolver sends proxy credentials on HTTPS CONNECT tunnels

    [41 lines not shown]
DeltaFile
+5-5lang/babashka/distinfo
+1-1lang/babashka/Makefile
+6-62 files

FreeBSD/ports 3119b13 — audio/din Makefile distinfo

audio/din: Update to 66.2

Changes since 65:

DIN Is Noise 66:

  /*
    new overtone tuning

      the ratios of all intervals are octave shifted harmonics
      of the key note.

      now the default tuning
  */
  /*
    on beater and voice-modualtion editors:

      infinite beat labels


    [53 lines not shown]
DeltaFile
+3-3audio/din/distinfo
+1-2audio/din/Makefile
+4-52 files

LLVM/project 11aabd6 — llvm/lib/Transforms/Utils VNCoercion.cpp, llvm/test/Transforms/GVN ptr-vector-coercion.ll

[GVN] Preserve provenance when forwarding `<1 x ptr>` (#235505)

GVN forwards a store or load to a load of a different type by going
through an integer. Between `ptr` and `<1 x ptr>`, the sizes match, but
only scalar pointers skipped the integer path. So the value went through
`ptrtoint` and `inttoptr`, which drops pointer provenance, instead of
going through a `bitcast`.

```llvm
store <1 x ptr> %v, ptr %p
%l = load ptr, ptr %p
```

```diff
-%1 = ptrtoint <1 x ptr> %v to <1 x i64>
-%2 = bitcast <1 x i64> %1 to i64
-%l = inttoptr i64 %2 to ptr
+%l = bitcast <1 x ptr> %v to ptr
```
DeltaFile
+75-0llvm/test/Transforms/GVN/ptr-vector-coercion.ll
+7-7llvm/lib/Transforms/Utils/VNCoercion.cpp
+82-72 files

OpenBSD/src PQsrPyU — usr.bin/ssh ssh-keygen.c hostfile.c

   check for errors when writing known_hosts files and refuse to replace
   if the replacement is incomplete.

   Anthropic ANT-2026-SZY2YGUM
VersionDeltaFile
1.102+16-4usr.bin/ssh/hostfile.c
1.500+7-3usr.bin/ssh/ssh-keygen.c
+23-72 files

OpenBSD/src RJDsqD0 — usr.bin/ssh sshconnect.c

   @revoked markers in known_hosts should apply to VerifyHostKeyDNS hostkeys
   too

   Anthropic ANT-2026-S4RA7UNG
VersionDeltaFile
1.392+55-2usr.bin/ssh/sshconnect.c
+55-21 files

OpenBSD/src faP8nbN — usr.bin/ssh ssh.c

   `ssh -Z` is intended to be a purely local operation and shouldn't
   connect to a mux socket.

   Anthopic ANT-2026-R47M7VEU
VersionDeltaFile
1.646+3-2usr.bin/ssh/ssh.c
+3-21 files

LLVM/project c842b1f — llvm/lib/Target/Mips Mips.h MipsCodeGenPassBuilder.cpp, llvm/test/CodeGen/Mips newpm-pipeline.ll

[𝘀𝗽𝗿] initial version

Created using spr 1.3.7
DeltaFile
+417-427llvm/lib/Target/Mips/MicroMipsSizeReduction.cpp
+284-0llvm/test/CodeGen/Mips/newpm-pipeline.ll
+128-119llvm/lib/Target/Mips/MipsOptimizePICCall.cpp
+66-66llvm/lib/Target/Mips/MipsExpandPseudo.cpp
+117-0llvm/lib/Target/Mips/MipsCodeGenPassBuilder.cpp
+89-8llvm/lib/Target/Mips/Mips.h
+1,101-62014 files not shown
+1,273-69620 files

LLVM/project f7d407b — llvm/lib/Target/Mips Mips.h MipsCodeGenPassBuilder.cpp, llvm/test/CodeGen/Mips newpm-pipeline.ll

[𝘀𝗽𝗿] changes to main this commit is based on

Created using spr 1.3.7

[skip ci]
DeltaFile
+417-427llvm/lib/Target/Mips/MicroMipsSizeReduction.cpp
+283-0llvm/test/CodeGen/Mips/newpm-pipeline.ll
+128-119llvm/lib/Target/Mips/MipsOptimizePICCall.cpp
+66-66llvm/lib/Target/Mips/MipsExpandPseudo.cpp
+118-0llvm/lib/Target/Mips/MipsCodeGenPassBuilder.cpp
+79-6llvm/lib/Target/Mips/Mips.h
+1,091-61813 files not shown
+1,218-66919 files

LLVM/project 9c3e5f1 — offload/libompaccsupport device.cpp, offload/test/offloading teams_reduction_grid.c

[OpenMP][offload] Size the grid of cross-team reductions by their size (#234190)

Use the ReductionDataSize for sizing the grid of xteam reductions.
Classify a reduction with a ReductionDataSize of 32bytes and more as
"large". Otherwise, we call this reduction "scalar" or "small".
Xteam reductions differ from regular loops in that they have two phases:
the intra-team reduction and the inter-team reduction. The cost of the
latter increases with the number of blocks and the ReductionDataSize.
For small reductions, aim for 16 waves/CU. For large reductions, aim for
1 block/CU.
For Generic and Generic-SPMD loops, we only use this heuristic for large
reductions and use the regular gris size heuristic otherwise since there
is currently no data for these situations.

This is an upstream port of the corresponding downstream. Measurements
have been made on MI210, MI300A, MI300X, MI350X, and MI450.

Claude assisted with this patch.
DeltaFile
+87-0offload/test/offloading/teams_reduction_grid.c
+64-0offload/libompaccsupport/device.cpp
+17-0openmp/docs/design/Runtimes.md
+168-03 files

OpenBSD/src NBVQlx9 — usr.bin/ssh sshconnect.h ssh.c

   be more careful when killing a ProxyCommand (including implicit ProxyJump
   ones); observe if it already has exited via the main ssh.c SIGCHLD handler
   and wrap the kill in sigprocmask() to avoid races.

   Prevents SIGHUP from being delivered to an unrelated process if the proxy
   command's PID is recycled.

   Antropic ANT-2026-ODQD8QBH
VersionDeltaFile
1.391+21-3usr.bin/ssh/sshconnect.c
1.645+6-3usr.bin/ssh/ssh.c
1.53+2-1usr.bin/ssh/sshconnect.h
+29-73 files

OpenBSD/src TiiS4Lf — regress/usr.bin/ssh sshcfgparse.sh cfgparse.sh

   regress test for "PubkeyAcceptedAlgorithms -*" and friends

   Anthropic ANT-2026-O2RQ9GNA
VersionDeltaFile
1.13+10-1regress/usr.bin/ssh/cfgparse.sh
1.12+4-1regress/usr.bin/ssh/sshcfgparse.sh
+14-22 files

OpenBSD/src vVsrzOn — usr.sbin/rpki-client filemode.c

   rpki-client: wrap two lines for consistency
VersionDeltaFile
1.96+5-3usr.sbin/rpki-client/filemode.c
+5-31 files

OpenBSD/src WrrHBaz — usr.bin/ssh kex-names.c

   Correctly error on a algorithm allowlist that removes all algorithms, e.g.
   `PubkeyAcceptedAlgorithms -*` rather than defaulting back to the full list

   Anthropic ANT-2026-O2RQ9GNA
VersionDeltaFile
1.11+4-4usr.bin/ssh/kex-names.c
+4-41 files

LLVM/project 2561760 — llvm/lib/Target/Mips Mips.h MipsCodeGenPassBuilder.cpp, llvm/test/CodeGen/Mips newpm-pipeline.ll

[𝘀𝗽𝗿] initial version

Created using spr 1.3.7
DeltaFile
+417-427llvm/lib/Target/Mips/MicroMipsSizeReduction.cpp
+283-0llvm/test/CodeGen/Mips/newpm-pipeline.ll
+128-119llvm/lib/Target/Mips/MipsOptimizePICCall.cpp
+66-66llvm/lib/Target/Mips/MipsExpandPseudo.cpp
+118-0llvm/lib/Target/Mips/MipsCodeGenPassBuilder.cpp
+79-6llvm/lib/Target/Mips/Mips.h
+1,091-61813 files not shown
+1,218-66919 files

LLVM/project c82caa0 — llvm/lib/Target/Mips Mips16HardFloat.cpp Mips.h, llvm/test/CodeGen/Mips newpm-pipeline.ll

[𝘀𝗽𝗿] changes to main this commit is based on

Created using spr 1.3.7

[skip ci]
DeltaFile
+280-0llvm/test/CodeGen/Mips/newpm-pipeline.ll
+128-119llvm/lib/Target/Mips/MipsOptimizePICCall.cpp
+66-66llvm/lib/Target/Mips/MipsExpandPseudo.cpp
+118-0llvm/lib/Target/Mips/MipsCodeGenPassBuilder.cpp
+69-4llvm/lib/Target/Mips/Mips.h
+33-18llvm/lib/Target/Mips/Mips16HardFloat.cpp
+694-2079 files not shown
+782-23515 files

OpenBSD/src rVt1Zmb — usr.bin/ssh misc.h readconf.c

   set a glob(3) error callback when globbing Include files to allow
   discrimination between missing files/directories and failure to open
   a file or directory.

   Avoids possible (though unlikely) situation where a local attacker could
   cause an Include'd file from being processed by doing tricks like hitting
   fd limits at the right time.

   Anthropic ANT-2026-NF7CR4JX
VersionDeltaFile
1.223+16-1usr.bin/ssh/misc.c
1.462+3-2usr.bin/ssh/servconf.c
1.422+2-2usr.bin/ssh/readconf.c
1.121+2-1usr.bin/ssh/misc.h
+23-64 files

LLVM/project 0f60508 — libc/cmake/modules LLVMLibCTestRules.cmake, libc/test/UnitTest ExecuteFunctionUnix.cpp

[libc] Reset fatal signal handlers in death test subprocesses (#236679)

Death tests (EXPECT_DEATH/ASSERT_DEATH) run the callback in a forked
child and check that the child was killed by a signal. If the test runs
under a runtime that installs its own handlers for fatal signals, the
child may not die from the signal at all. For example, on x86-64, ASan
with `handle_sigill=1` catches the SIGILL raised by `__builtin_trap()`,
prints an error report and calls `_exit()` (with the default
`abort_on_error=0` on Linux), so the test fails with:

Expected [] { optional<int> opt_empty; (void)opt_empty.value(); } to be
killed by a signal
  But it exited normally!

This is what happens to the death tests in optional_test and
expected_test, as well as the null-check death tests, when run with
`ASAN_OPTIONS=handle_sigill=1`. ASan handles SIGSEGV, SIGBUS and SIGFPE
by default, so tests expecting those fail even with default options.
That's why pkey_test and the libgen death tests are not built under

    [30 lines not shown]
DeltaFile
+37-44libc/test/src/sys/mman/linux/CMakeLists.txt
+29-0utils/bazel/llvm-project-overlay/libc/BUILD.bazel
+13-0libc/test/UnitTest/ExecuteFunctionUnix.cpp
+1-1libc/test/src/libgen/CMakeLists.txt
+1-0utils/bazel/llvm-project-overlay/libc/test/UnitTest/BUILD.bazel
+1-0libc/cmake/modules/LLVMLibCTestRules.cmake
+82-456 files

FreeBSD/ports cac73f9 — www/py-drf-yasg distinfo Makefile, www/py-drf-yasg/files patch-pyproject.toml

www/py-drf-yasg: Update to 1.21.18

* Fold the VALIDATION option whose dependency is now unconditional since
  the 1.21.16 release.

Changelog since 1.21.15:

https://github.com/axnsan12/drf-yasg/blob/1.21.18/docs/changelog.rst
DeltaFile
+2-10www/py-drf-yasg/Makefile
+5-4www/py-drf-yasg/files/patch-pyproject.toml
+3-3www/py-drf-yasg/distinfo
+10-173 files

FreeBSD/ports 04f02f0 — textproc/py-python-docs-theme Makefile distinfo

textproc/py-python-docs-theme: Update to 2026.9.1

Changelog since 2026.7:

https://github.com/python/python-docs-theme/blob/2026.9.1/CHANGELOG.md
DeltaFile
+3-3textproc/py-python-docs-theme/distinfo
+1-1textproc/py-python-docs-theme/Makefile
+4-42 files

FreeBSD/ports 7a7f160 — textproc/py-ttp-templates Makefile distinfo

textproc/py-ttp-templates: Update to 0.6.20

Changelog since 0.6.18:

https://github.com/dmulyalin/ttp_templates/blob/0.6.20/docs/release_notes.md
DeltaFile
+3-3textproc/py-ttp-templates/distinfo
+1-1textproc/py-ttp-templates/Makefile
+4-42 files

FreeBSD/ports e4fd3d0 — science/py-ruffus distinfo Makefile, science/py-ruffus/files patch-pyproject.toml

science/py-ruffus: Update to 3.0.0

* Switch to the PEP517 build framework.
* Update WWW to point to upstream repo which is more recent.

Changelog:

https://github.com/cgat-developers/ruffus/blob/v3.0.0/CHANGES.TXT
DeltaFile
+6-5science/py-ruffus/Makefile
+10-0science/py-ruffus/files/patch-pyproject.toml
+3-3science/py-ruffus/distinfo
+19-83 files

FreeBSD/ports 0a8f267 — security/py-netbox-secrets Makefile distinfo

security/py-netbox-secrets: Update to 3.1.2

Changelog:

https://github.com/Onemind-Services-LLC/netbox-secrets/releases/tag/v3.1.2

MFH:            2026Q4
DeltaFile
+3-3security/py-netbox-secrets/distinfo
+1-2security/py-netbox-secrets/Makefile
+4-52 files

FreeBSD/ports 6b8e872 — net-mgmt/py-pynetbox distinfo Makefile, net-mgmt/py-pynetbox/files patch-pyproject.toml

net-mgmt/py-pynetbox: Update to 7.9.0

Changelog:

https://github.com/netbox-community/pynetbox/releases/tag/v7.9.0
DeltaFile
+24-0net-mgmt/py-pynetbox/files/patch-pyproject.toml
+5-4net-mgmt/py-pynetbox/Makefile
+3-3net-mgmt/py-pynetbox/distinfo
+32-73 files

FreeBSD/ports c8ea15c — devel/py-inline-snapshot Makefile distinfo

devel/py-inline-snapshot: Update to 0.36.1

Changelog since 0.35.4:

https://github.com/15r10nk/inline-snapshot/blob/v0.36.1/CHANGELOG.md
DeltaFile
+3-3devel/py-inline-snapshot/distinfo
+1-1devel/py-inline-snapshot/Makefile
+4-42 files

OpenBSD/src 0c65Mzy — regress/usr.bin/ssh/unittests/hostkeys mktestdata.sh test_iterate.c, regress/usr.bin/ssh/unittests/hostkeys/testdata known_hosts

   unit test for accepting @revoked with tab separation

   Anthropic ANT-2026-LIFVTX5L
VersionDeltaFile
1.12+15-1regress/usr.bin/ssh/unittests/hostkeys/test_iterate.c
1.4+4-1regress/usr.bin/ssh/unittests/hostkeys/mktestdata.sh
1.4+1-0regress/usr.bin/ssh/unittests/hostkeys/testdata/known_hosts
+20-23 files