LLVM/project 661ce2b — clang/lib/CodeGen CodeGenModule.cpp, clang/test/DebugInfo/CXX coff.cpp

[CodeGen] Always emit CodeView compiler info for UEFI targets (#188383)

UEFI is based on the MSVC toolchain conventions. PR #142970 made Windows
targets always emit minimal CodeView compiler information (`S_OBJNAME`
and `S_COMPILE3`) even when debug info is otherwise disabled, matching
MSVC. Make UEFI targets behave the same way.
DeltaFile
+31-0clang/test/DebugInfo/CXX/coff.cpp
+25-2llvm/test/DebugInfo/COFF/uefi-nodebug.ll
+5-5clang/lib/CodeGen/CodeGenModule.cpp
+4-3llvm/lib/CodeGen/AsmPrinter/AsmPrinter.cpp
+2-0clang/test/DebugInfo/Generic/version-coff.c
+67-105 files

LLVM/project bcce4d7 — llvm/include/llvm/CodeGen AccelTable.h, llvm/include/llvm/IR Dominators.h

[llvm] Adjust LLVM_ABI annotations for ELF/Mach-O (#232393)

Some annotations were not at the right level (class or method) for some
use cases. These ensure that the dylib build with default visibility set
to hidden properly works for macOS and Linux with tests.

The effort to build LLVM as a dylib is tracked in #109483.
DeltaFile
+6-8llvm/include/llvm/CodeGen/AccelTable.h
+6-6llvm/include/llvm/SandboxIR/Pass.h
+3-3llvm/lib/Transforms/Vectorize/VPlan.h
+1-1llvm/lib/Transforms/Vectorize/VPlanValue.h
+1-1llvm/lib/IR/Dominators.cpp
+1-1llvm/include/llvm/IR/Dominators.h
+18-206 files

OPNSense/core c83a0d1 — src/opnsense/mvc/app/models/OPNsense/IPsec IPsec.xml

ipsec: missing Required=Y
DeltaFile
+1-0src/opnsense/mvc/app/models/OPNsense/IPsec/IPsec.xml
+1-01 files

OPNSense/core b742f95 — src/opnsense/mvc/app/models/OPNsense/Interfaces NetworkInterface.xml

interfaces: blank description "None" is the default
DeltaFile
+0-2src/opnsense/mvc/app/models/OPNsense/Interfaces/NetworkInterface.xml
+0-21 files

OPNSense/core 43fc1ea — src/opnsense/mvc/app/models/OPNsense/Auth User.php

System: Access: Users - add small validation warning a user for scope changes including a note to explains its purpose and constraints.

(cherry picked from commit 5b9254a70fe236d010b7d4c9e4480b3b652af211)
DeltaFile
+9-0src/opnsense/mvc/app/models/OPNsense/Auth/User.php
+9-01 files

NetBSD/pkgsrc-wip eb071b6 — fooyin Makefile

fooyin: simplify

Fix build with modular X.
DeltaFile
+7-18fooyin/Makefile
+7-181 files

LLVM/project 2b7c642 — llvm/lib/Transforms/IPO AttributorAttributes.cpp

Attributor: Reach fixpoint in AACallEdges if there are only direct calls

The callees when there are only direct, live calls will not change.
No other attributes matter, but this ran the update a second time to
find out.

Instructions spent in amdgpu-attributor:
  rocPRIM test_device_scan, gfx942:          1265M -> 1263M (-0.2%)
  Blender Cycles HIP kernel, gfx1100:        488M -> 487M (-0.2%)
  rocPRIM 16 tests, full LTO, closed world:  4381M -> 4359M (-0.5%)

Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+6-0llvm/lib/Transforms/IPO/AttributorAttributes.cpp
+6-01 files

OPNSense/core 935f419 — src/etc/ssl opnsense.cnf

System: Trust: mark "X509v3 Key Usage" critical

PR: https://github.com/opnsense/core/issues/10999

(cherry picked from commit e6c5b7edf0ebf06248c5b091ee8382b83c29f0be)
(cherry picked from commit 9a9796feae52eae8c79a877a492db04172e0af3b)
DeltaFile
+3-3src/etc/ssl/opnsense.cnf
+3-31 files

OPNSense/core 1886788 — . plist, src/opnsense/mvc/app/controllers/OPNsense/Monit/Api StatusController.php

monit: fetch status through configd for strict security mode (#11037)
DeltaFile
+22-45src/opnsense/mvc/app/controllers/OPNsense/Monit/Api/StatusController.php
+66-0src/opnsense/scripts/monit/status.php
+6-0src/opnsense/service/conf/actions.d/actions_monit.conf
+1-0plist
+95-454 files

OPNSense/core 5e32997 — src/etc/inc auth.inc, src/etc/rc.subr.d recover livemode

system: installer as a real user on demand (#10888)

This allows the installer to use authenticated integration
and SSH keys as a full root user overlay.

(cherry picked from commit 4311c5a3b324e5217675050340bff47aa738dc94)
(cherry picked from commit bf468af18e6d32eb0b1aee09af3447c1280cb229)
DeltaFile
+61-29src/etc/rc.subr.d/livemode
+24-17src/etc/inc/auth.inc
+10-0src/opnsense/mvc/app/library/OPNsense/Auth/Services/WebGui.php
+0-2src/etc/rc.subr.d/recover
+1-1src/opnsense/scripts/auth/sync_user.php
+96-495 files

LLVM/project cfabc07 — llvm/lib/Transforms/IPO AttributorAttributes.cpp

Attributor: Don't create call site AACallEdges for direct calls

AACallEdgesFunction created an AACallEdges for every call-like
instruction in the function including intrinsics. For a direct call
without callback metadata, the call site attribute only ever adds the
callee, so add it directly.

Instructions spent in amdgpu-attributor:
  rocPRIM test_device_scan, gfx942:          1963M -> 1768M (-9.9%)
  Blender Cycles HIP kernel, gfx1100:        636M -> 622M (-2.2%)
  rocPRIM 16 tests, full LTO, closed world:  7415M -> 6511M (-12.2%)

Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+8-0llvm/lib/Transforms/IPO/AttributorAttributes.cpp
+8-01 files

LLVM/project 42ac09c — llvm/include/llvm/Target TargetSelectionDAG.td, llvm/lib/Target/AArch64 AArch64InstrInfo.td

TableGen: Share the xforms for FP immediate bits (#232492)

AArch64 and AMDGPU defined identical bitcast_fpimm_to_iN xforms, and
Hexagon defined an equivalent ftoi. Define them once in
TargetSelectionDAG.td.

Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+6-12llvm/lib/Target/Hexagon/HexagonPatterns.td
+0-17llvm/lib/Target/AMDGPU/SIInstrInfo.td
+16-0llvm/include/llvm/Target/TargetSelectionDAG.td
+0-10llvm/lib/Target/AArch64/AArch64InstrInfo.td
+1-1llvm/lib/Target/Hexagon/HexagonPatternsHVX.td
+23-405 files

FreeNAS/freenas 2129457 — src/middlewared/middlewared/plugins/kmip zfs_keys.py, tests/api2 test_kmip.py

Fix KMIP ZFS key sync with nested encryption roots

## Problem
`get_encrypted_datasets` queried `zfs.resource` with `get_children=True`, which rejects overlapping paths. Nested key-encrypted roots (e.g. a key-encrypted pool root plus a child created with its own key) are a normal layout, so every full push and pull of ZFS keys failed with a validation error, leaving keys stuck on the KMIP server and breaking server changes. Separately, push and pull pruned the in-memory key cache down to the filtered database rows instead of the datasets that exist, so the scoped push that runs whenever a key-encrypted dataset is created or has its key changed evicted every other KMIP-managed key from memory.

## Solution
Check existence by querying the exact paths without `get_children`, and prune the cache only of keys whose dataset no longer exists in ZFS. Pruning pops entries in place so concurrent sync jobs don't drop each other's keys. The KMIP push/pull integration test now covers a nested encryption root and checks the cache survives a scoped push.
DeltaFile
+20-19src/middlewared/middlewared/plugins/kmip/zfs_keys.py
+20-6tests/api2/test_kmip.py
+40-252 files

LLVM/project 636c61e — libc/include CMakeLists.txt libintl.yaml, libc/src/libintl textdomain.h textdomain.cpp

[libc] Add <libintl.h> and textdomain stub (#232351)

POSIX.1-2024 standardises the <libintl.h> message translation
interfaces. Because LLVM-libc currently supports only the "C" locale,
message catalog functions can be satisfied with stateless stubs that do
not access the filesystem.

Added the <libintl.h> header generation specification and the textdomain
entrypoint behind LLVM_LIBC_ENABLE_EXPERIMENTAL_ENTRYPOINTS, returning
"messages" when querying or resetting the domain and returning the input
domain name otherwise.

Assisted-by: Automated tooling, human reviewed.
DeltaFile
+29-0libc/test/src/libintl/libintl_test.cpp
+29-0libc/src/libintl/textdomain.cpp
+25-0libc/src/libintl/textdomain.h
+15-0libc/test/src/libintl/CMakeLists.txt
+15-0libc/include/libintl.yaml
+9-0libc/include/CMakeLists.txt
+122-019 files not shown
+175-425 files

FreeBSD/doc 643dc81 — website/data/zh-tw/news news.toml

traditional Chinese Translation of the latest news items (October 2026)
DeltaFile
+17-0website/data/zh-tw/news/news.toml
+17-01 files

FreeBSD/ports 3cb1186 — security/nmap-devel Makefile distinfo

security/nmap-devel: Update to the latest GH commit
DeltaFile
+8-0security/nmap-devel/pkg-plist
+3-3security/nmap-devel/distinfo
+2-3security/nmap-devel/Makefile
+13-63 files

FreeBSD/ports da9ed1d — security/nmap Makefile distinfo

security/nmap: Update to 7.992
DeltaFile
+8-0security/nmap/pkg-plist
+3-3security/nmap/distinfo
+1-1security/nmap/Makefile
+12-43 files

LLVM/project c047b9c — clang/lib/CodeGen/TargetBuiltins RISCV.cpp, clang/test/CodeGen/RISCV rvp-intrinsics.c

[RISCV][P-ext] Add scalar mulq(r) intrinsics (#232316)

Add the scalar "Q-format" Multiplication intrinsics:
https://github.com/riscv/riscv-p-spec/blob/master/P-ext-intrinsics.adoc#q-format-multiplication

- `__riscv_mulq_i32`
- `__riscv_mulqr_i32`

RV32 selects `mulq`/`mulqr` directly. RV64 has no scalar forms, so the
intrinsics use `pmulq.w`/`pmulqr.w` on the low words, the same way as
the scalar `aadd`/`asub` intrinsics (#230710).
DeltaFile
+34-0llvm/lib/Target/RISCV/RISCVISelLowering.cpp
+34-0clang/test/CodeGen/RISCV/rvp-intrinsics.c
+18-0llvm/test/CodeGen/RISCV/rv64p.ll
+18-0llvm/test/CodeGen/RISCV/rv32p.ll
+15-0cross-project-tests/intrinsic-header-tests/riscv_packed_simd.c
+8-0clang/lib/CodeGen/TargetBuiltins/RISCV.cpp
+127-03 files not shown
+140-09 files

HardenedBSD/src c3647be — sys/dev/iwm if_iwm_time_event.h if_iwmvar.h, sys/kern uipc_sockbuf.c uipc_ktls.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+221-4sys/dev/iwm/if_iwm.c
+8-5sys/dev/iwm/if_iwm_sta.c
+7-0sys/dev/iwm/if_iwmvar.h
+2-2sys/kern/uipc_ktls.c
+1-2sys/dev/iwm/if_iwm_time_event.h
+1-1sys/kern/uipc_sockbuf.c
+240-142 files not shown
+242-158 files

HardenedBSD/src 9b7cdc5 — sys/contrib/zlib gzwrite.c

Merge remote-tracking branch 'rad/hardened/15-stable/main' into hardened/15-stable/pledge
DeltaFile
+4-1sys/contrib/zlib/gzwrite.c
+4-11 files

HardenedBSD/src 4b433ac — sys/dev/iwm if_iwm_time_event.c if_iwm_time_event.h, sys/kern uipc_ktls.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+221-4sys/dev/iwm/if_iwm.c
+8-5sys/dev/iwm/if_iwm_sta.c
+7-0sys/dev/iwm/if_iwmvar.h
+2-2sys/kern/uipc_ktls.c
+1-2sys/dev/iwm/if_iwm_time_event.h
+1-1sys/dev/iwm/if_iwm_time_event.c
+240-142 files not shown
+242-158 files

HardenedBSD/src d42bdce — sys/contrib/zlib gzwrite.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+4-1sys/contrib/zlib/gzwrite.c
+4-11 files

LLVM/project 95c78f2 — clang/include/clang/CIR MissingFeatures.h, clang/include/clang/CIR/Dialect/IR CIRDialect.td

[CIR][AMDGPU] Emit !noalias.addrspace on HIP and OpenCL atomics (#232350)
DeltaFile
+38-36clang/lib/CIR/CodeGen/CIRGenAtomic.cpp
+41-6clang/test/CIR/CodeGenHIP/atomic-options.hip
+15-1clang/lib/CIR/Lowering/DirectToLLVM/LowerToLLVMIR.cpp
+14-1clang/lib/CIR/Lowering/DirectToLLVM/LowerToLLVM.cpp
+0-1clang/include/clang/CIR/MissingFeatures.h
+1-0clang/include/clang/CIR/Dialect/IR/CIRDialect.td
+109-456 files

HardenedBSD/ports 1cb4515 — databases/pgdog Makefile.crates distinfo, devel/mongo-c-driver pkg-plist

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+1,064-2,525net-im/gomuks/files/packagejsons/package-lock.json
+1,141-0databases/pgdog/distinfo
+568-0databases/pgdog/Makefile.crates
+66-50devel/mongo-c-driver/pkg-plist
+71-0multimedia/obs-studio/pkg-plist
+31-35mail/postsrsd/files/patch-CMakeLists.txt
+2,941-2,61064 files not shown
+3,448-2,78970 files

LLVM/project d35f28b — libc/src/sched/linux CMakeLists.txt sched_getscheduler.cpp, utils/bazel/llvm-project-overlay/libc BUILD.bazel

[libc] Use a syscall wrapper for `sched_getscheduler` (#232597)

This PR move `sched_getscheduler` behind the centralized syscall
wrappers, following `libc/docs/dev/syscall_wrapper_refactor.md`.
DeltaFile
+14-0utils/bazel/llvm-project-overlay/libc/BUILD.bazel
+5-6libc/src/sched/linux/sched_getscheduler.cpp
+4-2libc/src/sched/linux/CMakeLists.txt
+23-83 files

OpenBSD/ports f1s1KJp — graphics/gifsicle Makefile distinfo, graphics/gifsicle/patches patch-configure_ac

   Update to gifsicle-1.98.
VersionDeltaFile
1.5+5-5graphics/gifsicle/patches/patch-configure_ac
1.25+2-2graphics/gifsicle/distinfo
1.57+1-1graphics/gifsicle/Makefile
+8-83 files

LLVM/project 581a6be — flang/lib/Optimizer/CodeGen CodeGen.cpp, flang/test/Fir convert-to-llvm-invalid.fir

[flang] Fail fir.global conversion when the type has no LLVM equivalent

GlobalOpConversion passed the result of convertType straight to
LLVM::GlobalOp::create. For a global whose type the FIR type converter
cannot lower, such as tensor<10xi32>, that result is null and
TypeAttr::get segfaults. Return a match failure instead so the
conversion reports that fir.global could not be legalized.

Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
Signed-off-by: Keshav Vinayak Jha <keshavvinayakjha at gmail.com>
DeltaFile
+8-0flang/test/Fir/convert-to-llvm-invalid.fir
+3-0flang/lib/Optimizer/CodeGen/CodeGen.cpp
+11-02 files

OpenBSD/src I8PoiaE — share/man/man4 options.4 pppoe.4, sys/net if_pppoe.c

   pppoe(4): replace PPPOE_TERM_UNKNOWN_SESSIONS with ifconfig link2 knob

   OK bket@ claudio@
VersionDeltaFile
1.38+20-10share/man/man4/pppoe.4
1.92+16-10sys/net/if_pppoe.c
1.274+2-6share/man/man4/options.4
+38-263 files

FreeNAS/freenas c39ba72 — src/middlewared/middlewared/api/v28_0_0 zfs_resource_snapshot.py, src/middlewared/middlewared/plugins/pool_ snapshot.py

NAS-144430 / 28.0.0-BETA.1 / Standardize zfs.resource.snapshot on the zfs.resource design (#20017)

## Problem
`zfs.resource.snapshot` only partly followed the design `zfs.resource`
settled on. It still exposed `query` instead of `list`, raised on
missing paths, emitted no events, took clone properties as an untyped
dict passed straight to libzfs (so user properties failed and
internal-only properties like `mountpoint` were reachable through
clone), had no `force` acknowledgement on rename, keyed most validation
errors on the bare method name, and had several wrong descriptions.
Separately, the ZFS history hook ran the whole dataset-delete path for
every snapshot destroy, sending bogus `pool.dataset.query` REMOVED
events and, on HA, syncing encryption keys to the standby once per
destroyed snapshot. `pool.snapshot.update` silently did nothing.

## Solution
- **list**: added `zfs.resource.snapshot.list`; `query` stays as a
hidden alias for pre-v28 clients and `query_impl` is now `list_impl`.
list, query and count skip a named path that does not exist; a path

    [31 lines not shown]
DeltaFile
+0-423tests/api2/test_zfs_resource_snapshot_query.py
+413-0tests/api2/test_zfs_resource_snapshot_list.py
+207-86src/middlewared/middlewared/plugins/zfs/snapshot_ops.py
+163-86src/middlewared/middlewared/plugins/zfs/snapshot.py
+159-41src/middlewared/middlewared/api/v28_0_0/zfs_resource_snapshot.py
+93-53src/middlewared/middlewared/plugins/pool_/snapshot.py
+1,035-68941 files not shown
+1,357-88647 files

LLVM/project d2189e5 — clang/include/clang/Interpreter Interpreter.h, clang/lib/Interpreter DeviceOffload.h Interpreter.cpp

[clang-repl] Add OffloadType enum and HIP device parser skeleton (#231391)

This PR adds an OffloadType enum (Detect, CUDA, HIP) and
Interpreter::createWithDevice(), so device setup can be chosen in one
place. createWithCUDA() now forwards to it, so CUDA behaviour and
existing callers are unchanged. Detect and the HIP binary generation
return "unsupported" errors for now.

It also adds the IncrementalHIPDeviceParser class. Its constructor
checks that the device target triple is an AMDGPU one.
GenerateOffloadBinary() is a stub that will be implemented later.

Assisted by Claude Sonnet 5.5
DeltaFile
+29-0clang/lib/Interpreter/DeviceOffload.cpp
+21-3clang/lib/Interpreter/Interpreter.cpp
+15-1clang/lib/Interpreter/DeviceOffload.h
+8-0clang/include/clang/Interpreter/Interpreter.h
+73-44 files