OPNSense/core f1c82b3src/etc/inc filter.inc filter.lib.inc, src/etc/inc/plugins.inc.d pf.inc openvpn.inc

firewall: pluginify filter_core_get_default_nat_outbound_networks() #10539

Bring a bit of structure into this legacy code: move the "plugin"
parts to its own "oubound_net" run target, collect it with the new
filter_auto_source_nat() and just iterate over it from the code
that needs this.  We do all of this to provide a possible configd
target to expose the actual automatic rules skeleton to the MVC
source NAT GUI.

  # pluginctl -r outbound_nat
  {
    "pf": {
      "wan": {
        "lan": "LAN networks",
        "lo0": "Loopback networks",
        "127.0.0.0/8": "127.0.0.0/8"
      }
    }
  }
DeltaFile
+14-31src/etc/inc/filter.inc
+13-31src/www/firewall_nat_out.php
+12-19src/etc/inc/filter.lib.inc
+25-0src/etc/inc/plugins.inc.d/pf.inc
+24-0src/etc/inc/plugins.inc.d/openvpn.inc
+21-0src/etc/inc/plugins.inc.d/ipsec.inc
+109-811 files not shown
+109-827 files

LLVM/project 921f4dallvm/lib/Transforms/Vectorize SLPVectorizer.cpp CMakeLists.txt, llvm/lib/Transforms/Vectorize/SLPVectorizer SLPCostAnalysis.cpp SLPCostAnalysis.h

[SLP][Modularisation][NFC] Extract free cost helpers into SLPCostAnalysis (#210278)

Move the BoUpSLP-independent cost helpers out of SLPVectorizer.cpp into
SLPVectorizer/SLPCostAnalysis.{h,cpp} (namespace llvm::slpvectorizer).

Moved:
  * getShuffleCost
  * getGEPCosts

RFC: https://discourse.llvm.org/t/modularizing-slpvectorizer-cpp/90922
DeltaFile
+87-206llvm/lib/Transforms/Vectorize/SLPVectorizer.cpp
+131-0llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPCostAnalysis.cpp
+53-0llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPCostAnalysis.h
+1-0llvm/lib/Transforms/Vectorize/CMakeLists.txt
+272-2064 files

FreeBSD/ports 2782ca6www/srt Makefile pkg-plist

www/srt: add SRTFFPLAY option

PR:             293009
DeltaFile
+9-3www/srt/Makefile
+1-1www/srt/pkg-plist
+10-42 files

LLVM/project 0b16957llvm/lib/Target/RISCV RISCVISelLowering.cpp, llvm/test/CodeGen/RISCV zicond-opts.ll

[RISCV] Don't transfer (select c, t, f) to Zicond when optimizing for size (#163501)

The Zicond form of (select c, t, f), (or (czero_eqz t, c),
(czero_nez f, c)), has no compressed encodings and is always 12 bytes.
The branch form (branch + mv) is at most 8 bytes, and with the C
extension
4 bytes when the branch compresses (c.mv always does) or 6 bytes when it
does not; it shrinks further when a condition is shared across selects.
Since it is never larger by byte count, skip the Zicond transform under
optsize via !DAG.shouldOptForSize().

Fixes https://github.com/llvm/llvm-project/issues/158633.
DeltaFile
+63-0llvm/test/CodeGen/RISCV/zicond-opts.ll
+3-2llvm/lib/Target/RISCV/RISCVISelLowering.cpp
+66-22 files

LLVM/project 09630a7llvm/test/CodeGen/AMDGPU call-constexpr.ll call-constexpr-gisel.ll

[LLC][AMDGPU] start using new pass manager for backend codegen
DeltaFile
+0-388llvm/test/CodeGen/AMDGPU/call-constexpr.ll
+243-0llvm/test/CodeGen/AMDGPU/call-constexpr-gisel.ll
+238-0llvm/test/CodeGen/AMDGPU/call-constexpr-sdag.ll
+115-115llvm/test/CodeGen/AMDGPU/memmove-var-size.ll
+67-64llvm/test/CodeGen/AMDGPU/recursive-resource-usage-mcexpr.ll
+46-46llvm/test/CodeGen/AMDGPU/function-resource-usage.ll
+709-61384 files not shown
+1,064-94490 files

FreeBSD/ports 878e052security/agave/files patch-Cargo.lock patch-programs_sbf_Cargo.lock

security/agave: Unbundle protobuf

PR:             293210
Requested by:   Robert Clausecker <fuz at FreeBSD.org>
DeltaFile
+34-0security/agave/files/patch-Cargo.lock
+26-0security/agave/files/patch-programs_sbf_Cargo.lock
+26-0security/agave/files/patch-dev-bins_Cargo.lock
+16-0security/agave/files/patch-storage-bigtable_build-proto_src_main.rs
+16-0security/agave/files/patch-storage-proto_build.rs
+12-0security/agave/files/patch-storage-proto_Cargo.toml
+130-04 files not shown
+155-510 files

NetBSD/pkgsrc xGY4wKjdoc CHANGES-2026

   Updated security/py-oath, math/py-numexpr
VersionDeltaFile
1.4620+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc JB814Q2math/py-numexpr distinfo Makefile

   py-numexpr: updated to 2.14.2

   Changes from 2.14.1 to 2.14.2

   * Added a ``disable_cache`` parameter to ``evaluate()`` to bypass the
     internal expression cache. Thanks to 27rabbitlt.
   * Added Windows ARM64 wheel builds.
   * Dropped support for Python 3.10.
   * No longer build free-threaded Python 3.13 wheels, matching NumPy's own
     support.
   * Avoid keeping arrays passed as ``out=`` alive in the ``re_evaluate`` cache
   * Guarded out-of-range shift counts (shift amount >= bit width) in the
     integer ``<<``/``>>`` opcodes, which was undefined behavior in C and could
     return garbage results. Thanks to uwezkhan
   * Fixed ``run_interpreter()`` unconditionally returning success even when
     the VM engine failed, so execution errors are now correctly raised
     instead of silently discarded
   * Fixed a reference leak of ``constsig`` on the allocation-failure path in
     ``NumExpr_init()``
VersionDeltaFile
1.36+4-4math/py-numexpr/distinfo
1.47+2-2math/py-numexpr/Makefile
+6-62 files

NetBSD/pkgsrc buKx2IFsecurity/py-oath Makefile PLIST

   py-oath: updated to 1.4.5

   1.4.5
   * fix licensing metadata in setup.py, license is BSD 3-clause not MIT
   * fix ci workflow
   * fix typos (Tim Gates)
   * fix dead declaration for test_suite in setup.py
VersionDeltaFile
1.7+6-5security/py-oath/Makefile
1.2+6-5security/py-oath/PLIST
1.7+4-4security/py-oath/distinfo
+16-143 files

FreeBSD/ports efcb7ddscience/q Makefile, science/q/files patch-qdyn.f90 patch-qpi.f90

science/q: Fix build with GCC 15 on 16

PR:             293339
Reported by:    Lorenzo Salvadore <salvadore at freebsd.org>
DeltaFile
+38-0science/q/files/patch-qdyn.f90
+38-0science/q/files/patch-qpi.f90
+1-1science/q/Makefile
+77-13 files

LLVM/project ea52aa0clang/lib/Basic TargetInfo.cpp, clang/lib/Basic/Targets SPIR.h AMDGPU.cpp

[clang] Use key-value initialization for LangASMap (NFCI) (#210259)

The original implementation requires each target to list a value for
every LangAS in exact enum order. This forces targets to specify
mappings for unrelated address spaces and makes it easy to introduce
ordering bugs, such as the one fixed in
4479f3397f827291c51698fbaa685b1a9493467a.

Address this by introducing a class that supports order-independent
key-value initialization and defaults unspecified entries to 0.
DeltaFile
+29-57clang/lib/Basic/Targets/SPIR.h
+29-29clang/lib/Basic/TargetInfo.cpp
+26-26clang/lib/Basic/Targets/AMDGPU.cpp
+14-28clang/lib/Basic/Targets/NVPTX.h
+7-28clang/lib/Basic/Targets/TCE.h
+5-29clang/lib/Basic/Targets/DirectX.h
+110-1976 files not shown
+140-31112 files

DragonFlyBSD/src 90dd181sys/net if.c

net: Fix SIOCSIFDESCR fallthrough bug in ifioctl()

* Add the missing 'break' to SIOCSIFDESCR to fix the fallthrough bug.
* Remove the redundant ifnet_lock()/unlock() pair.
* Clean up the code a bit by rearranging the local variables.
DeltaFile
+11-8sys/net/if.c
+11-81 files

DragonFlyBSD/src f5f3e1fsys/net if.c

net: Fix ifnet_mtx deadlock in ifioctl()

Several error paths in ifioctl()'s switch (SIOCGIFGROUP, SIOCAIFGROUP,
SIOCDIFGROUP, SIOCSIFDESCR) return directly instead of break, bypassing
the ifnet_unlock() at the end of the function.  As a result, ifnet_mtx
is held across the switch and will block any future ifnet_lock() calls,
which basically breaks the network subsystem.

What makes matter worse is that SIOCGIFGROUP has no caps check, so
any local user can trigger such a deadlock in the network subsystem.

GitHub-PR: #47
Assisted-with: Zhipu GLM-5.2
DeltaFile
+10-12sys/net/if.c
+10-121 files

LLVM/project 3318341clang/include/clang/Basic DiagnosticFrontendKinds.td DiagnosticGroups.td, clang/lib/CodeGen BackendUtil.cpp

[CodeGen] Implement fallback path for backend NPM run
DeltaFile
+41-14clang/lib/CodeGen/BackendUtil.cpp
+3-0clang/include/clang/Basic/DiagnosticFrontendKinds.td
+1-0clang/include/clang/Basic/DiagnosticGroups.td
+45-143 files

LLVM/project dd4e0ebllvm/lib/LTO LTOBackend.cpp

[LTO] Add support for NewPM CodeGen
DeltaFile
+68-0llvm/lib/LTO/LTOBackend.cpp
+68-01 files

LLVM/project f07668aclang/lib/Driver/ToolChains Clang.cpp

[Clang][LTO][AMDGPU] start using new pass manager for backend codegen
DeltaFile
+17-2clang/lib/Driver/ToolChains/Clang.cpp
+17-21 files

OpenBSD/src KQE02sXusr.bin/ssh readconf.c

   s/= - 1/= -1/; from serity---
VersionDeltaFile
1.415+6-6usr.bin/ssh/readconf.c
+6-61 files

DragonFlyBSD/src 0667386sys/net if.c

net: Fix ifnet_mtx deadlock in ifioctl()

Several error paths in ifioctl()'s switch (SIOCGIFGROUP, SIOCAIFGROUP,
SIOCDIFGROUP, SIOCSIFDESCR) return directly instead of break, bypassing
the ifnet_unlock() at the end of the function.  As a result, ifnet_mtx
is held across the switch and will block any future ifnet_lock() calls,
which basically breaks the network subsystem.

What makes matter worse is that SIOCGIFGROUP has no caps check, so
any local user can trigger such a deadlock in the network subsystem.

GitHub-PR: #47
Assisted-with: Zhipu GLM-5.2
DeltaFile
+10-12sys/net/if.c
+10-121 files

DragonFlyBSD/src 606275esys/net if.c

net: Fix SIOCSIFDESCR fallthrough bug in ifioctl()

* Add the missing 'break' to SIOCSIFDESCR to fix the fallthrough bug.
* Remove the redundant ifnet_lock()/unlock() pair.
* Clean up the code a bit by rearranging the local variables.
DeltaFile
+11-8sys/net/if.c
+11-81 files

LLVM/project 375231dlibc/hdr/types struct_group_req.h struct_group_source_req.h, libc/include/llvm-libc-types struct_group_source_req.h struct_group_req.h

[libc] Add struct group_req, struct group_source_req, and related socket options (#210029)

Add definitions for struct group_req and struct group_source_req in
llvm-libc-types and wire them into <netinet/in.h>.

Also define the multicast socket options using these structs:
- MCAST_JOIN_GROUP
- MCAST_LEAVE_GROUP
- MCAST_BLOCK_SOURCE
- MCAST_UNBLOCK_SOURCE
- MCAST_JOIN_SOURCE_GROUP
- MCAST_LEAVE_SOURCE_GROUP

Add layout assertions for struct group_req and struct group_source_req
to the netinet/in.h unit test.

Assisted by Gemini.
DeltaFile
+27-0libc/include/llvm-libc-types/struct_group_source_req.h
+26-0libc/hdr/types/struct_group_req.h
+26-0libc/hdr/types/struct_group_source_req.h
+26-0libc/include/llvm-libc-types/struct_group_req.h
+19-0libc/test/src/netinet/in_test.cpp
+18-0libc/hdr/types/CMakeLists.txt
+142-04 files not shown
+176-010 files

LLVM/project 4bd1a44libc/cmake/modules LLVMLibCTestRules.cmake

[libc] Make hermetic test syscall deps linux-only (#210715)

They are only used on linux, so this matches that.

They are also only used in full build mode, but hermetic tests only work
in full build mode, so we don't need to check that here. The darwin
check is a noop as (AAIU) we don't support full_build on darwin, but
I've kept it for symmetry.
DeltaFile
+17-12libc/cmake/modules/LLVMLibCTestRules.cmake
+17-121 files

FreeBSD/ports f9af639sysutils/conan Makefile

sysutils/conan: Remove stale dependency

PR:             296868
Reported by:    Alexey Vyskubov <alexey at pentode.fi>
DeltaFile
+1-1sysutils/conan/Makefile
+1-11 files

FreeBSD/ports f208eb0misc/github-copilot-cli copilot

misc/github-copilot-cli: Remove inadvertently added file
DeltaFile
+0-0misc/github-copilot-cli/copilot
+0-01 files

OpenBSD/src w0Hv2Euregress/lib/libcrypto/bn bn_mul_div.c

   bn_mul_div: use (unsigned long long) instead of (uint64_t) to print with %llu
VersionDeltaFile
1.9+2-2regress/lib/libcrypto/bn/bn_mul_div.c
+2-21 files

LLVM/project ee98df5llvm/lib/Target/AMDGPU SIInsertWaitcnts.cpp, llvm/test/CodeGen/AMDGPU expert_scheduling_gfx12.mir

[AMDGPU] Fix simplification of VM_VSRC based on VMEM waits (#178711)

Teach simplifyVmVsrc that a wait for a VMEM counter (LOAD_CNT, DS_CNT
etc) only implies a corresponding wait for VM_VSRC if there are no
outstanding VMEM operations that use a different VMEM counter.
DeltaFile
+20-9llvm/lib/Target/AMDGPU/SIInsertWaitcnts.cpp
+1-0llvm/test/CodeGen/AMDGPU/expert_scheduling_gfx12.mir
+21-92 files

LLVM/project a1a5664llvm/test/CodeGen/ARM call-graph-section.ll call-graph-section-assembly.ll, llvm/test/CodeGen/X86 call-graph-section-assembly.ll call-graph-section.ll

[NFC][llvm] Fix typo in tests (#210841)
DeltaFile
+3-3llvm/test/CodeGen/ARM/call-graph-section.ll
+3-3llvm/test/CodeGen/ARM/call-graph-section-assembly.ll
+2-2llvm/test/CodeGen/X86/call-graph-section-assembly.ll
+2-2llvm/test/CodeGen/X86/call-graph-section.ll
+10-104 files

LLVM/project f5d6b45clang/test/CodeGenCoroutines gh188230-coro-await-elidable-suspend-never-final.cpp, llvm/include/llvm/Transforms/Coroutines CoroShape.h

Fix coro.free in .resume clones when [[clang::coro_await_elidable]] is used with suspend_never final suspend

Fixes https://github.com/llvm/llvm-project/issues/188230

CoroAnnotationElide rewrites annotated safe calls to the .noalloc
variant. The noalloc frame is caller-owned, but its .resume clone is
shared with ordinary heap-allocated instances.

With a suspend_never final suspend, normal resumption falls through to the
coro.free-based deallocation path. Regular frontend cleanup has already run
before this point. coro.free must therefore produce the frame pointer for a
heap instance and null for a .noalloc instance.

Use the frame destroy slot as a per-instance allocation tag. Cache its value
at resume entry, before user code can resume and release the enclosing caller
frame, then compare it with the cleanup clone. Replace each coro.free result
with the frame pointer for a heap instance and null for an elided instance.

Update the CoroSplit and Clang CodeGen checks to cover the conditional

    [3 lines not shown]
DeltaFile
+84-0llvm/test/Transforms/Coroutines/coro-split-resume-fallthrough-destroy-slot.ll
+79-0clang/test/CodeGenCoroutines/gh188230-coro-await-elidable-suspend-never-final.cpp
+66-4llvm/lib/Transforms/Coroutines/CoroSplit.cpp
+5-1llvm/test/Transforms/Coroutines/coro-split-00.ll
+5-1llvm/test/Transforms/Coroutines/coro-split-addrspace.ll
+1-0llvm/include/llvm/Transforms/Coroutines/CoroShape.h
+240-61 files not shown
+241-67 files

LLVM/project 19a25a7clang/test/CodeGenCoroutines gh188230-coro-await-elidable-suspend-never-final.cpp, llvm/lib/Transforms/Coroutines CoroSplit.cpp Coroutines.cpp

Fix coro.free in .resume clones when [[clang::coro_await_elidable]] is used with suspend_never final suspend

Fixes https://github.com/llvm/llvm-project/issues/188230

CoroAnnotationElide rewrites annotated safe calls to the .noalloc
variant. The noalloc frame is caller-owned, but its .resume clone is
shared with ordinary heap-allocated instances.

With a suspend_never final suspend, normal resumption falls through to the
coro.free-based deallocation path. Regular frontend cleanup has already run
before this point. coro.free must therefore produce the frame pointer for a
heap instance and null for a .noalloc instance.

Use the frame destroy slot as a per-instance allocation tag. Cache its value
at resume entry, before user code can resume and release the enclosing caller
frame, then compare it with the cleanup clone. Replace each coro.free result
with the frame pointer for a heap instance and null for an elided instance.

Update the CoroSplit and Clang CodeGen checks to cover the conditional

    [3 lines not shown]
DeltaFile
+84-0llvm/test/Transforms/Coroutines/coro-split-resume-fallthrough-destroy-slot.ll
+79-0clang/test/CodeGenCoroutines/gh188230-coro-await-elidable-suspend-never-final.cpp
+67-5llvm/lib/Transforms/Coroutines/CoroSplit.cpp
+5-1llvm/test/Transforms/Coroutines/coro-split-addrspace.ll
+5-1llvm/test/Transforms/Coroutines/coro-split-00.ll
+1-0llvm/lib/Transforms/Coroutines/Coroutines.cpp
+241-71 files not shown
+242-77 files

NetBSD/pkgsrc h0VaNofdoc CHANGES-2026

   doc: Updated misc/sesh to 2.27.0
VersionDeltaFile
1.4619+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc rWKO8aHmisc/sesh distinfo Makefile

   misc/sesh: update to 2.27.0

   Changes since 2.26.2:

   * Fix --hide-duplicates hiding live tmux sessions
   * Picker: Emacs keybindings (Ctrl-P/Ctrl-N) for navigation
   * Fix session targeting when creating wildcard windows
   * Allow passing git flags to the clone command
   * New commands: sesh mkdir, sesh cache refresh
   * Fix git namer for sibling worktrees; add git_dir_length option
   * Configurable frecency backend via [frecency] config

   Changes in 2.26.2:

   * Revert startup_command shell-command injection experiment,
     restore send-keys method
VersionDeltaFile
1.2+4-4misc/sesh/distinfo
1.5+2-3misc/sesh/Makefile
+6-72 files