HardenedBSD/src 4aa13e3 — sys/dev/aq aq_hw_llh.h aq_ring.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+25-0sys/dev/aq/aq_hw.c
+19-4sys/dev/aq/aq_main.c
+9-0sys/dev/aq/aq_hw_llh.c
+5-0sys/dev/aq/aq_hw_llh_internal.h
+0-4sys/dev/aq/aq_ring.c
+3-0sys/dev/aq/aq_hw_llh.h
+61-81 files not shown
+63-87 files

HardenedBSD/src 17d610b — sys/dev/aq aq_hw_llh.h aq_ring.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+25-0sys/dev/aq/aq_hw.c
+19-4sys/dev/aq/aq_main.c
+9-0sys/dev/aq/aq_hw_llh.c
+5-0sys/dev/aq/aq_hw_llh_internal.h
+0-4sys/dev/aq/aq_ring.c
+3-0sys/dev/aq/aq_hw_llh.h
+61-81 files not shown
+63-87 files

HardenedBSD/src 6639956 — sys/dev/aq aq_hw_llh.h aq_ring.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+25-0sys/dev/aq/aq_hw.c
+19-4sys/dev/aq/aq_main.c
+9-0sys/dev/aq/aq_hw_llh.c
+5-0sys/dev/aq/aq_hw_llh_internal.h
+0-4sys/dev/aq/aq_ring.c
+3-0sys/dev/aq/aq_hw_llh.h
+61-81 files not shown
+63-87 files

HardenedBSD/ports eb150a5 — databases/openldap25-server Makefile, databases/openldap26-server pkg-plist Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+0-447net/openldap25-server/Makefile
+447-0databases/openldap25-server/Makefile
+0-439net/openldap26-server/Makefile
+439-0databases/openldap26-server/Makefile
+0-322net/openldap26-server/pkg-plist
+322-0databases/openldap26-server/pkg-plist
+1,208-1,208147 files not shown
+4,151-3,655153 files

LLVM/project a1c9df8 — llvm/utils/gn/secondary/llvm/lib/ABI BUILD.gn

[gn build] Port f6e450004591 (#226369)
DeltaFile
+1-0llvm/utils/gn/secondary/llvm/lib/ABI/BUILD.gn
+1-01 files

LLVM/project 045cefb — llvm/utils/gn/secondary/lldb/source/Target BUILD.gn

[gn build] Port d0c787e447e1 (#226368)
DeltaFile
+1-0llvm/utils/gn/secondary/lldb/source/Target/BUILD.gn
+1-01 files

LLVM/project 0ce55c6 — llvm/utils/gn/secondary/llvm/lib/Target/X86 BUILD.gn

[gn build] Port 9d90850fe6b0 (#226367)
DeltaFile
+1-0llvm/utils/gn/secondary/llvm/lib/Target/X86/BUILD.gn
+1-01 files

LLVM/project d9635c6 — llvm/utils/gn/secondary/llvm/lib/TargetParser BUILD.gn, llvm/utils/gn/secondary/llvm/unittests/TargetParser BUILD.gn

[gn build] Port 6bef34a7ebbe (#226366)
DeltaFile
+1-0llvm/utils/gn/secondary/llvm/unittests/TargetParser/BUILD.gn
+1-0llvm/utils/gn/secondary/llvm/lib/TargetParser/BUILD.gn
+2-02 files

LLVM/project 1777581 — mlir/test/Dialect/NVGPU invalid.mlir

[mlir][nvgpu] Add negative tests for invalid FP8 warpgroup MMA types (#208047)

Add negative tests for invalid FP8 type combinations in
nvgpu.warpgroup.mma.

FP8 inputs are supported for f16/f32 accumulators, but the verifier
should still reject unsupported combinations such as FP8 accumulators
and mixed FP8/non-FP8 input element types.

Tested:
  llvm-lit mlir/test/Dialect/NVGPU/invalid.mlir
DeltaFile
+22-0mlir/test/Dialect/NVGPU/invalid.mlir
+22-01 files

HardenedBSD/ports eac692d — filesystems/ltfs Makefile distinfo

filesystems/ltfs: Update to 2.4.9.0

Changelog: https://github.com/LinearTapeFileSystem/ltfs/releases/tag/v2.4.9.0-10523
DeltaFile
+3-3filesystems/ltfs/distinfo
+2-2filesystems/ltfs/Makefile
+5-52 files

FreeBSD/ports eac692d — filesystems/ltfs Makefile distinfo

filesystems/ltfs: Update to 2.4.9.0

Changelog: https://github.com/LinearTapeFileSystem/ltfs/releases/tag/v2.4.9.0-10523
DeltaFile
+3-3filesystems/ltfs/distinfo
+2-2filesystems/ltfs/Makefile
+5-52 files

NetBSD/pkgsrc wfPaxnm — doc CHANGES-2026

   doc: Updated devel/rust-bindgen to 0.72.1nb1
VersionDeltaFile
1.6359+2-1doc/CHANGES-2026
+2-11 files

FreeBSD/ports d72c8f5 — security/sshguard Makefile, security/sshguard/files patch-src_parser_attack__scanner.l

security/sshguard: Backport upstream patch

To fix HOSTNAME field in syslog header handling.

PR:             298836
Approved by:    Kevin Zheng <kevinz5000 at gmail.com> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit 15f83b9d89941e55ac06600250304bcd7b00db3a)
DeltaFile
+17-0security/sshguard/files/patch-src_parser_attack__scanner.l
+1-1security/sshguard/Makefile
+18-12 files

FreeBSD/ports 15f83b9 — security/sshguard Makefile, security/sshguard/files patch-src_parser_attack__scanner.l

security/sshguard: Backport upstream patch

To fix HOSTNAME field in syslog header handling.

PR:             298836
Approved by:    Kevin Zheng <kevinz5000 at gmail.com> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
DeltaFile
+17-0security/sshguard/files/patch-src_parser_attack__scanner.l
+1-1security/sshguard/Makefile
+18-12 files

HardenedBSD/ports 15f83b9 — security/sshguard Makefile, security/sshguard/files patch-src_parser_attack__scanner.l

security/sshguard: Backport upstream patch

To fix HOSTNAME field in syslog header handling.

PR:             298836
Approved by:    Kevin Zheng <kevinz5000 at gmail.com> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
DeltaFile
+17-0security/sshguard/files/patch-src_parser_attack__scanner.l
+1-1security/sshguard/Makefile
+18-12 files

NetBSD/pkgsrc s1TQ1TH — devel/rust-bindgen Makefile

   devel/rust-bindgen: add clang dependency

   Use the clang-sys crate which reuqires clang at least as TOOL_DEPENDS.
   Although, in this cases it looks for libclang at run time - reported by he@

   Moreover, rust-bindgen no longer works with e.g. clang19, so require 21.
VersionDeltaFile
1.7+4-1devel/rust-bindgen/Makefile
+4-11 files

LLVM/project 7944324 — llvm/utils/gn/secondary/clang/unittests/offload-arch BUILD.gn

[gn] port 6bef34a7ebbef (#226362)
DeltaFile
+1-0llvm/utils/gn/secondary/clang/unittests/offload-arch/BUILD.gn
+1-01 files

NetBSD/pkgsrc 5ckMHe0 — doc CHANGES-2026

   doc: Updated sysutils/lla to 0.6.5
VersionDeltaFile
1.6358+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc ERidG6o — sysutils/lla cargo-depends.mk Makefile

   sysutils/lla: update to 0.6.5

   [0.6.5] - 2026-09-21
   Fixed

       The Unix installer can once again be executed through the documented
       curl ... | bash command without an unset BASH_SOURCE error.
       The Windows installer now handles GitHub checksum manifests correctly in
       Windows PowerShell 5.1 and avoids its legacy Internet Explorer parsing prompt.
VersionDeltaFile
1.29+16-16sysutils/lla/distinfo
1.28+4-4sysutils/lla/cargo-depends.mk
1.31+4-4sysutils/lla/Makefile
+24-243 files

NetBSD/pkgsrc T82j1To — doc CHANGES-2026

   doc: Updated multimedia/moviebox-tui to 0.1.24
VersionDeltaFile
1.6357+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc taDQ8ht — multimedia/moviebox-tui cargo-depends.mk Makefile

   multimedia/moviebox-tui: update to 0.1.24

   Added

       Scoop Package Manager Distribution:
           Added native Scoop manifest in bucket/moviebox-tui.json supporting Windows x64 and arm64 architectures with automated hash verification.
           Automated Scoop manifest synchronization alongside Homebrew in .github/workflows/manifests.yml from release SHA256SUMS.
           Added InstallationEnvironment::Scoop detection in src/updater/apply.rs with update prompt shortcuts ([s]).
       Adaptive Stream Resolution Picker:
           Decomposed multi-bitrate DASH streams in src/providers/moviebox/adapt.rs into selectable quality rows (1080p, 720p, 480p).
           Threaded quality constraints to player builders, injecting --ytdl-format for mpv/IINA and --adaptive-maxheight for VLC.
       Custom Player Executable Path Configuration:
           Added vlc_path, mpv_path, and iina_path fields to Config in src/config.rs and src/tui/state.rs.
           Supported persisted custom player paths with automatic static path cache invalidation upon configuration updates.

   Changed

       Streamlined Download Failure Notifications:
           Replaced verbose, truncated DASH download failure guidance with terse, actionable commands (Run: winget install yt-dlp.yt-dlp Gyan.FFmpeg).

    [57 lines not shown]
VersionDeltaFile
1.2+4-4multimedia/moviebox-tui/distinfo
1.2+3-3multimedia/moviebox-tui/Makefile
1.2+0-0multimedia/moviebox-tui/cargo-depends.mk
+7-73 files

NetBSD/pkgsrc PJI6j3Z — doc CHANGES-2026

   doc: Updated devel/sem to 0.25.0
VersionDeltaFile
1.6356+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc hQYS9RT — devel/sem cargo-depends.mk Makefile

   devel/sem: update 0.25.0

   Adds BSL (1C:Enterprise) language support, fixes TypeScript instance field
   typing for all three declaration forms, and retains added and deleted
   containers in semantic diffs.

   Minor rather than patch: the diff output change is observable behaviour, and
   sem-core gained a public feature.
VersionDeltaFile
1.9+7-4devel/sem/distinfo
1.9+4-4devel/sem/Makefile
1.3+1-0devel/sem/cargo-depends.mk
+12-83 files

NetBSD/pkgsrc DZFd78Y — doc CHANGES-2026

   doc: Updated chat/iamb to 0.0.12
VersionDeltaFile
1.6355+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc W60w5Yf — chat/iamb Makefile cargo-depends.mk, chat/iamb/patches patch-src_main.rs

   chat/iamb: update to 0.0.12

   Features / Improvements ✨

       Open :members in the same window by default (#458)
       Render image previews lazily (#464)
       Support generating shell-completions using clap_complete (#489)
       Support basic sticker viewing (#502)
       Open Matrix URIs on the command line and support user mentions (#508)
       MSC4027: Display image reactions (#518)
       Improve completions (#520)
       Add config option set_window_title (#528)
       Support login via a configured password file (#558)
       Support disabling SSL verification (#565)
       Add :mentions window and hopefully finally fix unreads (#579)
       Support placing encryption indicator in room title instead of prompt (#581)
       Add configurable cursor shape via settings.terminal.cursor_shape (#587)
       Support media captions (#592)
       Store event cache in ~/.cache/iamb (#596)

    [101 lines not shown]
VersionDeltaFile
1.8+1,435-1,229chat/iamb/distinfo
1.7+477-408chat/iamb/cargo-depends.mk
1.10+3-3chat/iamb/Makefile
1.2+1-1chat/iamb/patches/patch-src_main.rs
+1,916-1,6414 files

LLVM/project 7a732b1 — orc-rt/test/regression lit.cfg.py README.md, orc-rt/test/regression/jit-free-foundations lit.local.cfg

[orc-rt] Reorganize regression tests, add JIT'd code support (#226356)

Reorganize orc-rt/test/regression so that tests are placed by the
question they ask, rather than by the kind of input they use:

  jit-free-foundations/  Tests of runtime facilities that can be
                         exercised without JIT'd code: ogre's command
                         line, process info, logging, and (in future)
                         connection lifecycle.
  languages/<language>/  Tests that source-language constructs behave
                         correctly when JIT'd under the ORC runtime.
  object-formats/<format>/<arch>/
                         Tests that object format features (e.g.
                         relocations, sections, and directives) are
                         handled correctly, written in assembly.

A README.md describes where tests should go, and the conventions for
writing them. Existing tests move into jit-free-foundations/, and
init.test is renamed to ogre-help.test to describe what it tests. The

    [35 lines not shown]
DeltaFile
+119-0orc-rt/test/regression/README.md
+80-0orc-rt/test/regression/lit.cfg.py
+0-22orc-rt/test/regression/logging/os_log/delivery.test
+22-0orc-rt/test/regression/jit-free-foundations/logging/os_log/delivery.test
+15-0orc-rt/test/regression/object-formats/mach-o/arm64/return-zero.s
+13-0orc-rt/test/regression/jit-free-foundations/lit.local.cfg
+249-2236 files not shown
+396-13142 files

LLVM/project 8e72548 — orc-rt/include/orc-rt/bedrock SocketConnector.h, orc-rt/lib/bedrock/sys/posix SocketConnector.cpp

[orc-rt] Reject non-socket descriptors in socket:adopt (#226354)

The socket connector now checks with getsockopt(SO_TYPE) that the
descriptor named by a socket:adopt spec is a socket before wrapping it
in a SocketHandle. Non-sockets (pipes, files, etc.) are rejected with an
error and left open. Sockets are claimed after verification so that they
can be closed on error paths (e.g. if GetAttachInfo fails).

Adds SocketConnectorTest.
DeltaFile
+89-0orc-rt/test/unit/bedrock/SocketConnectorTest.cpp
+16-1orc-rt/lib/bedrock/sys/posix/SocketConnector.cpp
+4-0orc-rt/include/orc-rt/bedrock/SocketConnector.h
+1-0orc-rt/test/unit/CMakeLists.txt
+110-14 files

HardenedBSD/src 050683b — sys/dev/aq aq_main.c

aq: Report partial initialization failures to iflib

Stop initialization when hardware setup, ring initialization/start, or
datapath start fails. Run the existing best-effort stop/cache/reset
cleanup and report the failure through iflib_init_failed(). Do not keep
configuring later rings or publish the interface as running.

Reviewed by:    nprice
MFC after:      2 weeks
Sponsored by:   BBOX.io
Differential Revision:  https://reviews.freebsd.org/D59853
DeltaFile
+15-4sys/dev/aq/aq_main.c
+15-41 files

FreeBSD/src 050683b — sys/dev/aq aq_main.c

aq: Report partial initialization failures to iflib

Stop initialization when hardware setup, ring initialization/start, or
datapath start fails. Run the existing best-effort stop/cache/reset
cleanup and report the failure through iflib_init_failed(). Do not keep
configuring later rings or publish the interface as running.

Reviewed by:    nprice
MFC after:      2 weeks
Sponsored by:   BBOX.io
Differential Revision:  https://reviews.freebsd.org/D59853
DeltaFile
+15-4sys/dev/aq/aq_main.c
+15-41 files

HardenedBSD/src 4993c10 — sys/dev/aq aq_hw_llh.h aq_ring.c

aq: Invalidate the descriptor cache after stopping all rings

Atlantic controllers can retain receive descriptors and their data
addresses after their rings are disabled. Reusing or releasing those
mappings without invalidating the device cache has caused observed
IOMMU and SMMU faults in the referenced Linux reports (7a1bb49461b1,
ed4d81c4b3f2 and 7526183cfdbe).

Move global cache invalidation out of the per-ring stop routine. Disable
every ring first, toggle invalidation once, and wait for its completion
indication. Exclude Atlantic A0, as in the upstream workaround. Report
a completion timeout rather than silently discarding it.

Reviewed by:    nprice
MFC after:      2 weeks
Sponsored by:   BBOX.io
Differential Revision:  https://reviews.freebsd.org/D59852
DeltaFile
+25-0sys/dev/aq/aq_hw.c
+9-0sys/dev/aq/aq_hw_llh.c
+5-0sys/dev/aq/aq_hw_llh_internal.h
+0-4sys/dev/aq/aq_ring.c
+4-0sys/dev/aq/aq_main.c
+3-0sys/dev/aq/aq_hw_llh.h
+46-41 files not shown
+48-47 files