workflows/release-documentation: Rework workflow to make it testable (#214304)
This includes several separate changes for the workflow, which were
necessary to get the testing to pass:
* Merged release-man-pages-validate-input into the release-documentation
job.
* Split the release note uploading into a separate job.
* Moved the environment declaration to the upload-man-pages job.
* Stopped forcing clang as the compiler in build-docs.sh script. This
was causing the runtimes build to fail, because the default Ubuntu
debian packages for clang where not providing all the necessary CMake
files. It seems that when you use clang as the compiler, the runtimes
try to use the cmake files installed along with it.
(cherry picked from commit e310250eb80f282efe02dee4c94454a784c6886c)
lang/go*: Drop redundant patch
This patch was originally added to lang/go122 and has been copied
forward ever since. It was a backport from the then-unreleased Go 1.23
and was never needed for any other version than 1.22.
[SampleProfile] Disambiguate terminology around "CS" in Eytzinger layout (NFC) (#215358)
The abbreviation CS (Context-Sensitive) is overloaded across LLVM
AutoFDO to describe two different concepts:
1. CSSPGO (FunctionSamples::ProfileIsCS == true): Profiles with
SecCSNameTable where top-level entries are keyed by full callstack
vectors (e.g., "A", "A->B", "A->B->C"). Multiple top-level keys can
end in the same leaf GUID, making a 1-to-1 GUID offset array
impossible.
2. Nested Profiles (IsCS / CSKeys when ProfileIsCS == false): Regular
AutoFDO profiles where top-level entries are strictly individual
function GUIDs ("A"), but their sample trees contain nested inline
callsite samples. The Eytzinger layout is 100% compatible with this
mode.
Using CS for both features is very confusing because IsCS and CSKeys
may appear to be related to CSSPGO.
[9 lines not shown]
ipsec: Fix a lock leak in ipsec_chkreplay()
Reported by: Chris Jarrett-Davies of the OpenAI Codex Security Team
Reviewed by: pouria, kp
Fixes: 0361f165f219 ("ipsec: replace SECASVAR mtx by rmlock")
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58521
(cherry picked from commit b6823a973737f06ea6cf0ea5a3083383af2ba5a4)
bsdinstall/netconfig: use a better heuristic for wlan dev desc
For devices like the rtw88, they will show up in `ifconfig -l` as
rtw880, rtw881, etc. We want to query the rtw88.0 and rtw88.1 sysctl
respectively, not rtw.880.
Chances are that there aren't more than 9 wlan devices using the same
driver. Use a better heuristic to get the device description.
Reviewed by: bz
MFC after: 3 days
Sponsored by: The FreeBSD Foundation
(cherry picked from commit c4b0b13cadac46b7c2cdfeeedeffa596c62568fa)
netinet6/nd6: Sprinkle missing prefix refcounting
When we drop the prefix lock to call nd6_prefix_offlink() or
nd6_prefix_onlink(), make sure to keep the correpsonding prefix
structure alive. It is possible for a concurrent nd6_timer() to expire
the prefix while the lock is dropped.
Reported by: Maik Muench of Secfault Security
Reviewed by: pouria, zlei
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58423
(cherry picked from commit 76ca489e0f147e9bd90408ea562087e84ed6f479)
libalias: Serialize updates to the global instance list
libalias maintains a global list of all libalias handles. The list was
updated without any locking, but nothing prevents updates from running
concurrently.
MFC after: 1 week
(cherry picked from commit 2ff705f32a2033201a8f83f1ade5ddbc0460387d)
man: Fix RFC 1918 network prefix lengths
According to RFC 1918, the following IP prefixes are reserved for
private internets:
10.0.0.0/8
172.16.0.0/12
192.168.0.0/16
This PR fixes the prefix lengths in references to private networks
("RFC 1918 networks", "the standard private IP address ranges").
The changes are limited to man pages.
Signed-off-by: Yusuke Ichiki <public at yusuke.pub>
Pull Request: https://github.com/freebsd/freebsd-src/pull/2328
(cherry picked from commit 1403ca10189c47ad1de3915eeb030deddc114685)
pf: switch to getmicro(up)time()
It is reported that micro(up)time() performs poorly in certain
virtualisation scenarios. Absolute accuracy isn't required here, so
switch to the slightly less accurate (as per the man page) get-variants.
PR: 295043
MFC after: 3 weeks
Sponsored by: Rubicon Communications, LLC ("Netgate")
(cherry picked from commit e4130ac13d2fe9c17b8f8e86d39a7b5223fe7b79)
py-pylint: updated to 4.0.7
4.0.7
False Positives Fixed
Fix a false positive for invalid-name when a module-level variable is assigned
an instance of a TypedDict subclass. Such a name is a value, not a type
definition, so it is now checked against the constant or variable regex instead
of class-rgx.
Other Bug Fixes
Fix a crash in the bad-open-mode check when the mode argument of
open is the NotImplemented constant (Python >= 3.14).
Fix a crash in the not-context-manager and not-async-context-manager
checks when the context manager infers to a value without a name, such as the
slice returned by with slice(...) / async with slice(...).
[27 lines not shown]
if_ovpn: Fix memory leak in VNET during unload
Unloading if_ovpn while it's in use by other vnets causes
memory leaks and panics.
Fix this by reverting VNET_SYSUNINIT and adjusting the SI_SUB
initialization order.
Reviewed by: markj
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D54175
(cherry picked from commit bf142ea4760bd4391092d9cc0038a0870cf7e0b2)
py-fsspec: updated to 2026.7.0
2026.7.0
Enhancements
- Single-pass ``MemoryFileSystem.find()`` to avoid O(n_dirs * n_entries) listing
- Permit composite URL protocol schemes in infer_storage_options
- Implement topdown in async walk()
Fixes
- Fix incorrect glob docstring for '[!]'
- Propagate storage_options to all backends resolved by GenericFileSystem
- Handle end=None in FirstChunkCache._fetch like the other caches
- Clamp read end to file size in BlockCache and BackgroundBlockCache(#2081)
- Create the parent dir for "x" and "a" modes under auto_mkdir
- Expand paths for mode="x" when urlpath is a list
- fix: correctly pass 'start' and 'end' parameters to super().cat_file()
[16 lines not shown]
netmap: Don't assume that user-provided strings are nul-terminated
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
(cherry picked from commit e1ab35148dd425340a88a2acaf10b972cb119f8f)
pf: Add missing PF_TS_CNT Netlink attribute
There is no parser entry for PF_TS_CNT, therefore PF_TS_REFCNT
is written starting at pfrts_cnt, causing the refcount
to be wrongly shown in the "Addresses:" section of print_tstats().
Issue: https://github.com/opnsense/src/issues/300
