security/py-netbox-secrets: Depend on net-mgmt/netbox
This is a NetBox plugin: it imports netbox.* modules that only exist
inside the NetBox application, and pkg-message assumes NetBox is
installed. Add net-mgmt/netbox to RUN_DEPENDS so the plugin cannot
be installed without it.
While here, add concurrent to USE_PYTHON and fix portlint warnings.
PR: 299777
MFH: 2026Q4
(cherry picked from commit af532dd8aaa62b15967bb56ac61f77be9d7d1a68)
devel/py-dj60-strawberry-graphql: Fix with Python 3.13 and the deps
- The asgi and fastapi extras need python-multipart (starlette's
request.form()), but the ASGI and FASTAPI options pulled in
devel/py-multipart, an unrelated package with the same import name.
Depend on www/py-python-multipart instead.
- Upstream's cli extra also requires python-multipart, starlette,
uvicorn and websockets: the "strawberry dev" command runs a Starlette
app with WebSocket routes under uvicorn. Add them to
CLI_RUN_DEPENDS.
- strawberry/ext/dataclasses/dataclasses.py is a vendored helper for
Python < 3.10 that nothing imports (strawberry requires 3.10+ and
uses dataclass(kw_only=True)). On Python 3.13 it cannot be
imported, because dataclasses._create_fn was removed. Remove it.
- The CLI option is off by default, but bin/strawberry is installed
anyway and only raises MissingOptionalDependenciesError. Do not
[9 lines not shown]
devel/py-strawberry-graphql: Fix with Python 3.13 and the dependencies
- The asgi and fastapi extras need python-multipart (starlette's
request.form()), but the ASGI and FASTAPI options pulled in
devel/py-multipart, an unrelated package with the same import name.
It only worked because www/py-starlette's FULL option brings
python-multipart in. Depend on www/py-python-multipart instead.
- Upstream's cli extra also requires python-multipart, starlette,
uvicorn and websockets: the "strawberry dev" command runs a Starlette
app with WebSocket routes under uvicorn. Add them to
CLI_RUN_DEPENDS.
- strawberry/ext/dataclasses/dataclasses.py is a vendored helper that
builds keyword-only __init__ methods for Python < 3.10. strawberry
requires Python 3.10+ and uses dataclass(kw_only=True), so nothing
imports it; on Python 3.13 it cannot be imported at all, because it
uses dataclasses._create_fn, which was removed. Remove it.
[9 lines not shown]
[SROA][NFC] Move duplicated code in presplitLoadsAndStores into class (#224653)
presplitLoadsAndStores contains a bunch of duplicated code to do with
iterating over split slices and generating the loads/stores/slices for
them. Move all of this into a helper class to get rid of this
duplication.
There's one place where the code isn't an exact duplicate, and that's in
the handling of metadata on split stores, where stores of loads had some
extra metadata compared to other stores, and now all stores have this
extra metadata. This doesn't cause any change in behaviour though, as
the stores that now get extra metadata are in the Stores list, meaning
they're stores to allocas that we're pre-splitting so they can later be
eliminated, which means it doesn't matter what metadata they have.
java/openjdk27: Version 27.0.1.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
(cherry picked from commit 3a98a6ce03587bf3d3cf98f436c4cc97f3d936f1)
devel/py-strawberry-graphql: Fix with Python 3.13 and the dependencies
- The asgi and fastapi extras need python-multipart (starlette's
request.form()), but the ASGI and FASTAPI options pulled in
devel/py-multipart, an unrelated package with the same import name.
It only worked because www/py-starlette's FULL option brings
python-multipart in. Depend on www/py-python-multipart instead.
- Upstream's cli extra also requires python-multipart, starlette,
uvicorn and websockets: the "strawberry dev" command runs a Starlette
app with WebSocket routes under uvicorn. Add them to
CLI_RUN_DEPENDS.
- strawberry/ext/dataclasses/dataclasses.py is a vendored helper that
builds keyword-only __init__ methods for Python < 3.10. strawberry
requires Python 3.10+ and uses dataclass(kw_only=True), so nothing
imports it; on Python 3.13 it cannot be imported at all, because it
uses dataclasses._create_fn, which was removed. Remove it.
[8 lines not shown]
devel/py-dj60-strawberry-graphql: Fix with Python 3.13 and the deps
- The asgi and fastapi extras need python-multipart (starlette's
request.form()), but the ASGI and FASTAPI options pulled in
devel/py-multipart, an unrelated package with the same import name.
Depend on www/py-python-multipart instead.
- Upstream's cli extra also requires python-multipart, starlette,
uvicorn and websockets: the "strawberry dev" command runs a Starlette
app with WebSocket routes under uvicorn. Add them to
CLI_RUN_DEPENDS.
- strawberry/ext/dataclasses/dataclasses.py is a vendored helper for
Python < 3.10 that nothing imports (strawberry requires 3.10+ and
uses dataclass(kw_only=True)). On Python 3.13 it cannot be
imported, because dataclasses._create_fn was removed. Remove it.
- The CLI option is off by default, but bin/strawberry is installed
anyway and only raises MissingOptionalDependenciesError. Do not
[8 lines not shown]
security/py-netbox-secrets: Depend on net-mgmt/netbox
This is a NetBox plugin: it imports netbox.* modules that only exist
inside the NetBox application, and pkg-message assumes NetBox is
installed. Add net-mgmt/netbox to RUN_DEPENDS so the plugin cannot
be installed without it.
While here, add concurrent to USE_PYTHON and fix portlint warnings.
PR: 299777
MFH: 2026Q4
[CodeExtractor] Remove handling for lifetime marker on bitcast (NFCI) (#235718)
Nowadays lifetime markers are required to directly take an alloca,
there cannot be a bitcast in between, so all of this code is dead.
If it weren't dead it wouldn't work either, because it assumes an
old signature for the lifetime intrinsics that accepted the size
as first argument.
java/openjdk27: Version 27.0.1.0.3 more cert fixes
Update to latest upstream patch version to address more issues with the
eMudhra certificate incident.
See also: https://openjdk.org/emudhra
MFH: 2026Q4
Security: CVE 2026-114820
Security: JDK-8395690
Sponsored by: The FreeBSD Foundation
[C++26] Stop diagnosing #embed as an extension in C++26 mode (P1967R14) (#233285)
`#embed` was adopted into C++26, but Clang still diagnosed it as "a
Clang extension" in every C++ mode.
- Move the `#embed` extension/compatibility diagnostics to the
C23Compat/CXX26Compat framework: no diagnostic in C++26 mode, "#embed is
a C++2c extension" (`-Wc++26-extensions`) in earlier C++ modes, and a
`-Wpre-c++26-compat` compatibility warning in C++26 mode. C mode
diagnostics are unchanged.
- Deliberately do **not** define the `__cpp_pp_embed` feature-test macro
yet: per the [feature-test-macro
criteria](https://clang.llvm.org/docs/InternalsManual.html#feature-test-macros),
it should wait until the known braced-list miscompile (#222796) is fixed
by #231938; it will be proposed in a follow-up.
- Update the status page to Partial: the remaining known issues are the
braced-list initialization bugs around multi-byte `#embed` (#222796 and
friends), which are being fixed separately (#218262, #231938).
[2 lines not shown]
[DFSan] Remove check for icmp constant expression (NFC) (#235709)
icmp constant expressions are no longer supported, so we should
only check for the instruction form.
[BitcodeWriter] Remove support for fneg constant expression (NFC) (#235710)
fneg constant expressions are no longer supported, so can never
be written to bitcode.
[SCEV] Use willNotOverflow() for IV increment nuw/nsw (NFCI) (#235700)
IsIncrementNSW/IsIncrementNUW check for nsw/nuw in the same way
as willNotOverflow(), so reuse the helper.
[CIR] Admit only CIR types as nested CIR types
FuncType::verify required every type reachable from a signature to be a
CIR type, and proved it with a deep walk on every !cir.func construction.
#232863 memoized the walk in the dialect behind a mutex, but a record
that is still incomplete cannot be cached, and during CIRGen most of them
are.
The walk was needed because !cir.ptr, !cir.array, !cir.data_member,
!cir.bitfield and the record types took unconstrained mlir::Type
parameters. Constrain them to CIR types instead. Each type then checks
only its own parameters, a CIR type holds only CIR types at any depth,
and FuncType::verify checks only its inputs and result. The walk, the
cache and the mutex go away.
- Pointee and data member types use a new CIR_DialectType constraint,
and the array element constraint now requires it too.
- Bit-field storage and record members are checked in their verifiers.
Union padding is already limited to !u8i.
[17 lines not shown]
[CIR][AArch64] Use CIR float types in getSVEType (#233896)
getSVEType built the bf16 and f32 vectors from mlir::Builder's
getBF16Type() and getF32Type(), which return builtin MLIR types.
!cir.vector only accepts CIR element types, so an assertions build
aborts in VectorType::get and a release build creates an invalid type.
Use getBfloat16Ty() and getSingleTy(), as the f16 and f64 cases do.
No SVE builtin reaches these cases yet, so a lit test can't cover them.
Instead, CIRBaseBuilderTy now deletes mlir::Builder's builtin float
getters, so this mistake fails to compile.
Assisted-by: Claude Code (Claude Opus 5.5)
devel/got: update to 0.130.1
User-visible changes:
- default to using SHA256 object IDs in newly created repositories
The got-portable-0.130 release accidentally skipped some commits
from got 0.130.
devel/got: update to 0.130.1
User-visible changes:
- default to using SHA256 object IDs in newly created repositories
The got-portable-0.130 release accidentally skipped some commits
from got 0.130.
[IR] Remove redundant function return alignment check (NFC) (#235690)
getRetAlign() on CallBase already falls back to the alignment of
the callee function, no need to do it again here.
[mlir][tosa] Add tosa.argmin lowering to Linalg (#233754)
Add ArgMinConverter following the existing ArgMaxConverter, including
reduction initialization and pattern registration.
Add conversion tests covering static and dynamic shapes, NaN modes, f16
inputs, and i64 indices.
Assisted-by: Codex
