HardenedBSD/src 4f924c7sys/dev/e1000 if_em.h e1000_regs.h, sys/dev/ixgbe if_ix.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+229-22sys/dev/e1000/if_em.c
+13-0sys/dev/e1000/e1000_defines.h
+12-0sys/dev/ixgbe/if_ix.c
+9-0sys/dev/e1000/e1000_regs.h
+3-0sys/dev/e1000/if_em.h
+266-225 files

HardenedBSD/src 17fd152sys/dev/e1000 if_em.h e1000_regs.h, sys/dev/ixgbe if_ix.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+229-22sys/dev/e1000/if_em.c
+13-0sys/dev/e1000/e1000_defines.h
+12-0sys/dev/ixgbe/if_ix.c
+9-0sys/dev/e1000/e1000_regs.h
+3-0sys/dev/e1000/if_em.h
+266-225 files

HardenedBSD/src ce58fb7share/man/man9 iflibdd.9 iflibdi.9, sys/dev/ixgbe ixgbe_type.h if_ixv.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+43-6sys/net/iflib.c
+35-0share/man/man9/iflibdi.9
+12-1sys/dev/ixgbe/if_ixv.c
+7-4share/man/man9/iflibdd.9
+5-0sys/net/iflib.h
+2-2sys/dev/ixgbe/ixgbe_type.h
+104-131 files not shown
+107-137 files

LLVM/project 844b687clang/lib/AST/ByteCode EvaluationResult.cpp

[clang][bytecode] Use a SmallPtrSet in collectBlocks() (#218192)

Not sure why I used a SetVector here, but switch it to a SmallPtrSet
(this also gets rid of an additional include when #186045 gets merged).
DeltaFile
+4-3clang/lib/AST/ByteCode/EvaluationResult.cpp
+4-31 files

HardenedBSD/ports b468343devel/py-conditional Makefile, devel/py-tatsu-lts Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+0-54,792www/elgg/pkg-plist
+0-14,907www/groupoffice/pkg-plist
+12-16finance/fava/Makefile
+26-0devel/py-tatsu-lts/Makefile
+16-1www/elgg/Makefile
+10-6devel/py-conditional/Makefile
+64-69,72227 files not shown
+139-69,79133 files

LLVM/project d964190mlir/include/mlir/Bindings/Python IRAttributes.h

[MLIR][Python] Don't throw in PyDenseArrayIterator dunderNext (#218193)

`PyDenseArrayIterator::dunderNext` signaled iterator exhaustion by
throwing `nanobind::stop_iteration()`. Raising a C++ exception to signal
`StopIteration` incurs stack-unwinding cost on every loop over a dense
array attribute.

#175377 replaced this pattern with `PyErr_SetNone(PyExc_StopIteration)`
(return a null object after setting the Python error indicator) for the
other iterators in the bindings. `PyDenseArrayIterator` was missed in
that change and still throws. This PR applies the same conversion to
`PyDenseArrayIterator::dunderNext`.

Assisted by: Claude
DeltaFile
+10-5mlir/include/mlir/Bindings/Python/IRAttributes.h
+10-51 files

LLVM/project ebc9d86llvm/include/llvm/ADT FoldingSet.h, llvm/lib/Support FoldingSet.cpp

[FoldingSet] Invalidate iterators on mutation (#218179)

Tighten FoldingSet's iterator contract so that, like DenseMap (#199369)
and StringMap (#202237), mutating the set invalidates iterators obtained
before the call. insert / remove (successful) / clear / move bump the
epoch, so a stale iterator fails under LLVM_ENABLE_ABI_BREAKING_CHECKS.

LLM-aided
DeltaFile
+48-0llvm/unittests/ADT/FoldingSet.cpp
+21-11llvm/include/llvm/ADT/FoldingSet.h
+10-1llvm/lib/Support/FoldingSet.cpp
+79-123 files

LLVM/project 0a1ed5cllvm/test/Feature codegen-plugin-passes.mir, llvm/tools/llc NewPMDriver.cpp llc.cpp

Reapply "[llc] Register pass plugin callbacks with the new pass manager" (#217727) (#218163)

Reapplies #217727 (aa8d1afeed37), reverted in #218119 (91b04b4d45d9).

The test hardcoded Clang's spelling of an anonymous namespace in
--print-pipeline-passes output. The pass name comes from getTypeName(),
which scrapes __PRETTY_FUNCTION__; that spells anonymous namespaces as
"(anonymous namespace)" under Clang but "{anonymous}" under GCC. Relax
the FileCheck pattern so it is compiler-agnostic.
DeltaFile
+17-0llvm/test/Feature/codegen-plugin-passes.mir
+8-8llvm/tools/llc/NewPMDriver.h
+4-4llvm/tools/llc/llc.cpp
+4-1llvm/tools/llc/NewPMDriver.cpp
+33-134 files

LLVM/project 94ce03bllvm/lib/Target/SPIRV SPIRVPassRegistry.def

[𝘀𝗽𝗿] changes to main this commit is based on

Created using spr 1.3.7

[skip ci]
DeltaFile
+2-2llvm/lib/Target/SPIRV/SPIRVPassRegistry.def
+2-21 files

LLVM/project 9518291llvm/lib/Target/SPIRV SPIRVStructurizerWrapper.h SPIRVRegularizer.h

[𝘀𝗽𝗿] initial version

Created using spr 1.3.7
DeltaFile
+2-2llvm/lib/Target/SPIRV/SPIRVPassRegistry.def
+1-1llvm/lib/Target/SPIRV/SPIRVStructurizerWrapper.h
+1-1llvm/lib/Target/SPIRV/SPIRVRegularizer.h
+1-1llvm/lib/Target/SPIRV/SPIRVPushConstantAccess.h
+1-1llvm/lib/Target/SPIRV/SPIRVPrepareGlobals.h
+1-1llvm/lib/Target/SPIRV/SPIRVPrepareFunctions.h
+7-78 files not shown
+15-1514 files

LLVM/project a980881llvm/lib/Target/SPIRV SPIRVPassRegistry.def

[𝘀𝗽𝗿] initial version

Created using spr 1.3.7
DeltaFile
+2-2llvm/lib/Target/SPIRV/SPIRVPassRegistry.def
+2-21 files

LLVM/project 4c2a5f6llvm/include/llvm/IR PassManager.h, llvm/include/llvm/Transforms/Instrumentation CopyProf.h

[𝘀𝗽𝗿] initial version

Created using spr 1.3.7
DeltaFile
+9-10llvm/include/llvm/IR/PassManager.h
+3-3llvm/include/llvm/Transforms/Instrumentation/CopyProf.h
+12-132 files

LLVM/project cfba34ellvm/include/llvm/Transforms/Instrumentation CopyProf.h

[𝘀𝗽𝗿] changes to main this commit is based on

Created using spr 1.3.7

[skip ci]
DeltaFile
+3-3llvm/include/llvm/Transforms/Instrumentation/CopyProf.h
+3-31 files

LLVM/project 62d19d5llvm/include/llvm/Transforms/Instrumentation CopyProf.h

[𝘀𝗽𝗿] initial version

Created using spr 1.3.7
DeltaFile
+3-3llvm/include/llvm/Transforms/Instrumentation/CopyProf.h
+3-31 files

HardenedBSD/ports 90c1b15chinese/opencc pkg-plist Makefile, chinese/opencc/files patch-cmake_GitVersion.cmake

chinese/opencc: update to 1.4.2

- Remove patch-cmake_GitVersion.cmake (fix included upstream)

PR:             ports/297780
Approved by:    maintainer
DeltaFile
+0-16chinese/opencc/files/patch-cmake_GitVersion.cmake
+3-3chinese/opencc/distinfo
+1-1chinese/opencc/pkg-plist
+1-1chinese/opencc/Makefile
+5-214 files

FreeBSD/ports 90c1b15chinese/opencc pkg-plist Makefile, chinese/opencc/files patch-cmake_GitVersion.cmake

chinese/opencc: update to 1.4.2

- Remove patch-cmake_GitVersion.cmake (fix included upstream)

PR:             ports/297780
Approved by:    maintainer
DeltaFile
+0-16chinese/opencc/files/patch-cmake_GitVersion.cmake
+3-3chinese/opencc/distinfo
+1-1chinese/opencc/pkg-plist
+1-1chinese/opencc/Makefile
+5-214 files

LLVM/project 2f4a2d5clang/include/clang/ScalableStaticAnalysis BuiltinAnchorSources.def, clang/include/clang/ScalableStaticAnalysis/SourceTransformation/Transformations CppBoundedBuffers.h

[clang][ssaf] Add cpp-bounded-buffers source transformation (#210457)

Adds the first built-in transformation, `cpp-bounded-buffers`, which
rewrites buffers -- raw pointers and arrays -- into bounded types
(`bounded_ptr<T>`, `bounded_array<T, N>`) using the reachability
computed by `UnsafeBufferReachableAnalysis`.

The transformation collects every reachable pointer/array declarator and
function return declared in the translation unit, then either rewrites
it or records a SARIF note explaining why it did not. Shapes that are
not yet handled -- multi-level pointers, pointer to array, references to
pointers, multi-dimensional and unbounded arrays, multi-declarator
groups, macro-spelled declarators, and trailing return types -- are
reported rather than rewritten, and a final pass reports any reachable
entity that was neither rewritten nor otherwise accounted for. Edits are
validated and committed atomically, so a declarator whose edit cannot be
formed (such as a raw array of function pointers) is reported instead of
mangled.


    [4 lines not shown]
DeltaFile
+672-0clang/unittests/ScalableStaticAnalysis/SourceTransformation/CppBoundedBuffersTest.cpp
+611-0clang/lib/ScalableStaticAnalysis/SourceTransformation/Transformations/CppBoundedBuffers.cpp
+83-0clang/include/clang/ScalableStaticAnalysis/SourceTransformation/Transformations/CppBoundedBuffers.h
+2-0clang/lib/ScalableStaticAnalysis/SourceTransformation/CMakeLists.txt
+1-0clang/unittests/ScalableStaticAnalysis/CMakeLists.txt
+1-0clang/include/clang/ScalableStaticAnalysis/BuiltinAnchorSources.def
+1,370-06 files

OpenBSD/src AA3yc3Flib/libcrypto/man ASN1_STRING_length.3

   Make deprecation of ASN1_STRING_data(3) more prominent

   The function has been deprecated for a long time: OpenSSL did so when
   adding ASN1_STRING_get0_data in 1.1.0. beck removed it from OpenSSL 4.
   The reason is that it returns a modifiable "string" and you should not
   be modifying an ASN1_STRING this way. You should be using one of the
   clumsy, inconvenient accessors.

   schwarze merged the deprecation when adding documentation for
   ASN1_STRING_get0_data() in 2018. Make this a bit more obvious: move
   function to the end of the documented functions in this page, and mark
   it deprecated in the SYNOPSIS, too.

   I'm aware that deprecation does not work. I was hopeful to be able to
   remove the function in the last cycle, but that did not happen and it
   might not happen in this cycle either. It will happen at some point,
   though.

   Prompted by a question by brad
VersionDeltaFile
1.32+22-19lib/libcrypto/man/ASN1_STRING_length.3
+22-191 files

LLVM/project f75f48e.github/workflows release-binaries.yml

workflows/release-binaries: Install Wix on Windows ARM64 (#217707)

Wix is used for generating the installer and is not installed by default
on Windows ARM64.
DeltaFile
+8-0.github/workflows/release-binaries.yml
+8-01 files

LLVM/project 232b40cmlir/include/mlir/Bindings/Python IRAttributes.h

[MLIR][Python] Don't throw in PyDenseArrayIterator dunderNext

Signal iterator exhaustion via PyErr_SetNone(PyExc_StopIteration) instead
of throwing nanobind::stop_iteration(), matching the pattern used by the
other iterators in the Python bindings (see #175377). Raising a C++
exception to signal StopIteration incurs stack-unwinding cost on every
loop, which PyDenseArrayIterator was still paying. The return type changes
to nanobind::typed<nanobind::object, EltTy> so the method can return a null
object after setting the Python error indicator.
DeltaFile
+10-5mlir/include/mlir/Bindings/Python/IRAttributes.h
+10-51 files

OpenBSD/src f8G1HP7lib/libcrypto/man CRYPTO_set_ex_data.3

   grammar; an program -> a program
VersionDeltaFile
1.17+3-3lib/libcrypto/man/CRYPTO_set_ex_data.3
+3-31 files

NetBSD/pkgsrc BBn207Ldoc CHANGES-2026

   doc: Updated devel/p5-Variable-Magic to 0.65
VersionDeltaFile
1.5458+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc TghZNNOdevel/p5-Variable-Magic Makefile distinfo

   p5-Variable-Magic: update to 0.65.

   0.65    2026-08-20 14:20 UTC
           + Chg : The 'delete' callback for hashes will now correctly be fired in
                   void context. VMG_COMPAT_HASH_DELETE_NOUVAR_VOID is now always
                   set to false. This is a (good) side effect of the following fix.
           + Fix : [RT #180372] Test failures under perl v5.45.2
                   Thanks Lukas Mai for reporting and providing a fix.
           + Upd : AI contributions are not welcomed.
VersionDeltaFile
1.32+4-4devel/p5-Variable-Magic/distinfo
1.49+3-4devel/p5-Variable-Magic/Makefile
+7-82 files

NetBSD/pkgsrc n3RXUzydoc CHANGES-2026

   doc: Updated www/p5-URI to 5.36
VersionDeltaFile
1.5457+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 5arVTxwwww/p5-URI Makefile distinfo

   p5-URI: update to 5.36.

   5.36      2026-08-19 19:37:22Z
       - Apply Unicode NFC normalization in URI::_idna nameprep so IDNA host
         encoding matches other clients instead of emitting a non-standard,
         non-round-tripping A-label [CVE-2026-19953] (reported by Naseeb Dangi,
         @naseeb0) (GH#191)
VersionDeltaFile
1.53+4-4www/p5-URI/distinfo
1.94+2-3www/p5-URI/Makefile
+6-72 files

FreeBSD/ports 41a6e5dwww/elgg distinfo Makefile

www/elgg: Update to 7.0.5
DeltaFile
+0-54,792www/elgg/pkg-plist
+16-1www/elgg/Makefile
+3-3www/elgg/distinfo
+19-54,7963 files

HardenedBSD/ports a707329www/groupoffice distinfo Makefile

www/groupoffice: Update to 26.0.42
DeltaFile
+0-14,907www/groupoffice/pkg-plist
+9-4www/groupoffice/Makefile
+3-3www/groupoffice/distinfo
+12-14,9143 files

HardenedBSD/ports 41a6e5dwww/elgg distinfo Makefile

www/elgg: Update to 7.0.5
DeltaFile
+0-54,792www/elgg/pkg-plist
+16-1www/elgg/Makefile
+3-3www/elgg/distinfo
+19-54,7963 files

FreeBSD/ports a707329www/groupoffice distinfo Makefile

www/groupoffice: Update to 26.0.42
DeltaFile
+0-14,907www/groupoffice/pkg-plist
+9-4www/groupoffice/Makefile
+3-3www/groupoffice/distinfo
+12-14,9143 files

FreeBSD/doc 6d7c5dedocumentation/static/pgpkeys gshapiro.key

Renew public key (extend expiration date)
DeltaFile
+276-421documentation/static/pgpkeys/gshapiro.key
+276-4211 files