OPNSense/core 0d36b76src/etc/inc filter.lib.inc, src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api FilterController.php

Merge remote-tracking branch 'origin/master' into firewall-overload-table
DeltaFile
+16-0src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/ArrayField.php
+4-4src/opnsense/www/js/opnsense_bootgrid.js
+1-7src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api/FilterController.php
+1-1src/opnsense/mvc/app/views/OPNsense/Firewall/alias.volt
+1-1src/opnsense/mvc/app/library/OPNsense/Core/ConfigMaintenance.php
+1-1src/etc/inc/filter.lib.inc
+24-142 files not shown
+26-168 files

FreeBSD/ports 5453dcanet/openldap26-server distinfo Makefile

net/openldap26-server: upgrade to 2.6.12.
DeltaFile
+3-3net/openldap26-server/distinfo
+1-2net/openldap26-server/Makefile
+4-52 files

HardenedBSD/src e6da1d2bin/sh sh.1, release/tools vmimage.subr

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+252-157sys/kern/sched_ule.c
+214-183sys/kern/sched_4bsd.c
+234-0sys/kern/sched_shim.c
+83-113release/tools/vmimage.subr
+182-9bin/sh/sh.1
+103-7sys/sys/sched.h
+1,068-46942 files not shown
+1,259-67248 files

HardenedBSD/src 03912e0share/man/man7 tuning.7, share/man/man9 intro.9

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+26-0share/man/man7/tuning.7
+19-2sys/kern/sched_4bsd.c
+8-8sys/powerpc/powermac/platform_powermac.c
+7-0tools/tools/nanobsd/embedded/common
+5-1share/mk/src.opts.mk
+1-3share/man/man9/intro.9
+66-145 files not shown
+74-1611 files

FreeBSD/ports 98b6891lang/dotnet pkg-plist distinfo

lang/dotnet: Update to 9.0.12
DeltaFile
+89-105lang/dotnet/pkg-plist
+5-5lang/dotnet/distinfo
+4-4lang/dotnet/Makefile
+98-1143 files

FreeBSD/ports 2f6f29clang/dotnet-host distinfo Makefile

lang/dotnet-host: Update to 9.0.12
DeltaFile
+3-3lang/dotnet-host/distinfo
+1-1lang/dotnet-host/Makefile
+4-42 files

HardenedBSD/src 5051544lib/libc/net getnetbydns.c, sys/powerpc/aim moea64_native.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+90-9sys/powerpc/powermac/platform_powermac.c
+5-0sys/powerpc/aim/moea64_native.c
+3-0lib/libc/net/getnetbydns.c
+98-93 files

HardenedBSD/ports e7da9e9math/R-cran-mnormt distinfo Makefile, textproc/television distinfo Makefile.crates

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+5-7textproc/television/distinfo
+3-3math/R-cran-mnormt/distinfo
+2-3textproc/television/Makefile.crates
+2-2math/R-cran-mnormt/Makefile
+1-2textproc/television/Makefile
+13-175 files

NetBSD/pkgsrc cU46f5snet/yt-dlp PLIST distinfo

   upgrade to 2026.1.29.

   makes youtube work again is the main change.  other changes include
   removed dead upstreams and random fixes for dozens of others.
VersionDeltaFile
1.56+16-10net/yt-dlp/PLIST
1.77+4-4net/yt-dlp/distinfo
1.84+2-2net/yt-dlp/Makefile
+22-163 files

LLVM/project ca7ececllvm/test/CodeGen/X86 non-foldable-with-the-same-mask.mir interleave-load-fold.ll

[X86] Add baseline tests exposing invalid masked folds. (#178411)

This tests exposes invalid same-mask fold.

We need prevent folding the load into an "interleave‑type instruction",
because doing so removes the double mask application, which affects the
final result of the operation. For some instructions, folding the load
is simply invalid, even if the same mask is used. I have already
prepared a patch.

Few examples
```
EVEX.128.66.0F.WIG 67 /r VPACKUSWB xmm1{k1}{z}, xmm2, xmm3/m128 
A: 00010203 7F000001 80000002 DEADBEEF  
E : 00000000 00000001 00000002 00000003  
D: 11111111 22222222 33333333 44444444  
k = 0x0400  
Masked_e = 00000000 00000000 00000000 00000000 (vmovdqu8{k}{z} Masked_e E) 
res1 = 00000000 00000000 00010000 00000000   (VPACKUSWB D{k}{z}, A, E) 

    [27 lines not shown]
DeltaFile
+874-0llvm/test/CodeGen/X86/non-foldable-with-the-same-mask.mir
+38-0llvm/test/CodeGen/X86/interleave-load-fold.ll
+912-02 files

OPNSense/plugins 590bd92security/wazuh-agent/src/opnsense/scripts/wazuh opnsense-fw

security/wazuh-agent: fix syntax error in opnsense-fw active response (#5174)

Fix critical syntax error in opnsense-fw active response script that prevents IPs from being added to the __wazuh_agent_drop alias.

## Problem
The script contains invalid Python syntax - a variable assignment inside a dictionary literal:
```python
"parameters":{
   unique_key = "%s-%s" % (...)  # Invalid Python syntax
   "keys": [unique_key]
}
```

This causes the script to fail with a SyntaxError on all 'add' commands, meaning attacking IPs are never blocked.

## Changes
- Move unique_key assignment outside dictionary literal (fixes SyntaxError)
- Fix typo: 'even' -> 'event' in error message
- Add debug logging for easier troubleshooting

    [3 lines not shown]
DeltaFile
+8-5security/wazuh-agent/src/opnsense/scripts/wazuh/opnsense-fw
+8-51 files

FreeBSD/src d76b8a9sys/powerpc/powermac platform_powermac.c

powerpc: explicitly cast the timebase printfs

This is causing compilation issues on powerpc:powerpc GENERIC.

(cherry picked from commit 03e4cc9fdeb2a6445f13cd41b471927a0f722fff)
DeltaFile
+8-8sys/powerpc/powermac/platform_powermac.c
+8-81 files

HardenedBSD/src 10a0132sys/powerpc/powermac platform_powermac.c

powerpc: explicitly cast the timebase printfs

This is causing compilation issues on powerpc:powerpc GENERIC.

(cherry picked from commit 03e4cc9fdeb2a6445f13cd41b471927a0f722fff)
DeltaFile
+8-8sys/powerpc/powermac/platform_powermac.c
+8-81 files

FreeBSD/src 10a0132sys/powerpc/powermac platform_powermac.c

powerpc: explicitly cast the timebase printfs

This is causing compilation issues on powerpc:powerpc GENERIC.

(cherry picked from commit 03e4cc9fdeb2a6445f13cd41b471927a0f722fff)
DeltaFile
+8-8sys/powerpc/powermac/platform_powermac.c
+8-81 files

FreeBSD/src 03e4cc9sys/powerpc/powermac platform_powermac.c

powerpc: explicitly cast the timebase printfs

This is causing compilation issues on powerpc:powerpc GENERIC.
DeltaFile
+8-8sys/powerpc/powermac/platform_powermac.c
+8-81 files

HardenedBSD/src 03e4cc9sys/powerpc/powermac platform_powermac.c

powerpc: explicitly cast the timebase printfs

This is causing compilation issues on powerpc:powerpc GENERIC.
DeltaFile
+8-8sys/powerpc/powermac/platform_powermac.c
+8-81 files

LLVM/project 9bde15dlibcxx/docs/ReleaseNotes 23.rst, libcxx/include future

[libc++] Deprecate std::launch::any extension (#173397)

`std::launch::any` was a draft C++11 feature that was removed before the
final standard but it has remained in libc++ as an extension. This patch
marks it as deprecated and suggests using `std::launch::async |
std::launch::deferred` instead.

- Used `_LIBCPP_DEPRECATED_` to mark `std::launch::any` as deprecated
with an associated warning message recommending `std::launch::async |
std::launch::deferred` instead.
- Added a `.verify.cpp` test to validate the deprecation warning.
- Updated existing tests to avoid using the deprecated extension.
- Added note about deprecation in docs.

Fixes #173219

---------

Co-authored-by: Louis Dionne <ldionne.2 at gmail.com>
DeltaFile
+11-17libcxx/test/std/thread/futures/futures.overview/launch.pass.cpp
+22-0libcxx/test/libcxx/thread/futures/launch_any_deprecated.verify.cpp
+7-2libcxx/include/future
+3-0libcxx/docs/ReleaseNotes/23.rst
+1-1libcxx/test/libcxx/thread/nodiscard.verify.cpp
+0-1libcxx/test/std/thread/futures/futures.async/async.pass.cpp
+44-216 files

LLVM/project 737f444libc/shared/math sqrtf.h, libc/src/__support/math sqrtf.h CMakeLists.txt

[libc][math] Refactor sqrtf to header-only  (#178778)

Refactors sqrtf to be header-only.

Closes #177649.
DeltaFile
+24-0libc/src/__support/math/sqrtf.h
+23-0libc/shared/math/sqrtf.h
+9-1utils/bazel/llvm-project-overlay/libc/BUILD.bazel
+8-0libc/src/__support/math/CMakeLists.txt
+2-4libc/src/math/generic/sqrtf.cpp
+1-2libc/src/math/generic/CMakeLists.txt
+67-73 files not shown
+70-79 files

FreeBSD/ports d999bcfmath/R-cran-mnormt distinfo Makefile

math/R-cran-mnormt: Update to 2.1.2

Switch WWW to canonical form.

Changelog: https://cran.r-project.org/web/packages/mnormt/news.html
DeltaFile
+3-3math/R-cran-mnormt/distinfo
+2-2math/R-cran-mnormt/Makefile
+5-52 files

HardenedBSD/ports d999bcfmath/R-cran-mnormt distinfo Makefile

math/R-cran-mnormt: Update to 2.1.2

Switch WWW to canonical form.

Changelog: https://cran.r-project.org/web/packages/mnormt/news.html
DeltaFile
+3-3math/R-cran-mnormt/distinfo
+2-2math/R-cran-mnormt/Makefile
+5-52 files

LLVM/project a9a092cllvm/lib/Target/RISCV RISCVInstrInfo.td, llvm/test/CodeGen/RISCV float-intrinsics.ll bittest.ll

[RISCV] Add isel pattern (setlt (shl X, 32), 0) -> srliw. (#178765)

DAGCombiner sometimes turns (setlt (sext_inreg, X, i32), 0) into this
now so we need another pattern.

I tried to remove the sext_inreg pattern but it seems DAGCombiner
doesn't always do this transform. I suspect it depends on if
SimplifyDemandedBits visits the setcc. We could probably make (setlt Y,
0) call SimplifyDemandedBits on itself.

Fixes #178600.
DeltaFile
+6-8llvm/test/CodeGen/RISCV/float-intrinsics.ll
+2-4llvm/test/CodeGen/RISCV/bittest.ll
+1-0llvm/lib/Target/RISCV/RISCVInstrInfo.td
+9-123 files

LLVM/project 10f2611lldb/include/lldb/Interpreter/Interfaces ScriptedFrameInterface.h, lldb/source/Plugins/Process/scripted ScriptedFrame.cpp ScriptedFrame.h

[lldb] Add support for ScriptedFrame to provide values/variables. (#178575)


This patch adds plumbing to support the implementations of StackFrame::Get{*}Variable{*} on ScriptedFrame. The major pieces required are:
- A modification to ScriptedFrameInterface, so that we can actually call the python methods.
- A corresponding update to the python implementation to call the python methods.
- An implementation in ScriptedFrame that can get the variable list on construction inside ScriptedFrame::Create, and pass that list into the ScriptedFrame so it can get those values on request.

There is a major caveat, which is that if the values from the python side don't have variables attached, right now, they won't be passed into the scripted frame to be stored in the variable list. Future discussions around adding support for 'extended variables' when printing frame variables may create a reason to change the VariableListSP into a ValueObjectListSP, and generate the VariableListSP on the fly, but that should be addressed at a later time.

This patch also adds tests to the frame provider test suite to prove these changes all plumb together correctly.

Related radar: rdar://165708771
DeltaFile
+82-0lldb/test/API/functionalities/scripted_frame_provider/test_frame_providers.py
+66-0lldb/source/Plugins/Process/scripted/ScriptedFrame.cpp
+53-0lldb/test/API/functionalities/scripted_frame_provider/TestScriptedFrameProvider.py
+28-0lldb/source/Plugins/ScriptInterpreter/Python/Interfaces/ScriptedFramePythonInterface.cpp
+21-0lldb/source/Plugins/Process/scripted/ScriptedFrame.h
+9-0lldb/include/lldb/Interpreter/Interfaces/ScriptedFrameInterface.h
+259-02 files not shown
+269-08 files

LLVM/project 120b482llvm/lib/Target/AMDGPU AMDGPULegalizerInfo.cpp AMDGPURegisterBankInfo.cpp, llvm/test/CodeGen/AMDGPU/GlobalISel legalize-sitofp.mir

Revert "[AMDGPU] Replace AMDGPUISD::FFBH_I32 with ISD::CTLS" (#178837)

Revert to unblock buildbot:
https://lab.llvm.org/buildbot/#/builders/206/builds/12769
DeltaFile
+10-10llvm/test/CodeGen/AMDGPU/GlobalISel/legalize-sitofp.mir
+2-7llvm/lib/Target/AMDGPU/AMDGPULegalizerInfo.cpp
+0-7llvm/lib/Target/AMDGPU/AMDGPURegisterBankInfo.cpp
+1-2llvm/lib/Target/AMDGPU/SIISelLowering.cpp
+2-1llvm/lib/Target/AMDGPU/AMDGPUInstrInfo.td
+1-1llvm/lib/Target/AMDGPU/AMDGPUISelLowering.cpp
+16-281 files not shown
+17-297 files

FreeBSD/src efd7c55sys/powerpc/aim moea64_native.c

powerpc: disable the TLBIE lock, it's not needed for POWER8

According to POWER8_UM_v1.3_16MAR2016 3.8.3 Translation Lookaside
Buffer (TLB), POWER8 supports lockless TLBIE operations.

Locally Tested:

* IBM POWER8 Revision 2.0, dual socket, 160 threads

Differential Revision:  https://reviews.freebsd.org/D54855
Approved by:    jhibbits

(cherry picked from commit 9a5baa9c585652fb7bd4ccd45d567204caf349f2)
DeltaFile
+5-0sys/powerpc/aim/moea64_native.c
+5-01 files

FreeBSD/src f7358bcsys/powerpc/powermac platform_powermac.c

powerpc: add a best-effort SMP time base sync for G5's that need it

There's no timebase freeze platform routine registered on my dual 2.3GHz
G5 PPC970FX Apple PowerMac.

For platforms without an explicit timebase freeze/unfreeze, we'll have to
make do with what we have - which for now is an explicit hand-crafted
spinlock/rendezvous method.

* For existing platforms, they'll still continue to clock freeze /
  rendezvous; albeit with some stronger atomic bits now (from jhibbits@.)
* Instead of the fallback being "no timesync", implement a
  best-effort one which does a similar rendezvous barrier between
  BSP and APs, but instead of freeze/unfreeze the first instruction
  after the CPUs all register they're ready is to set the timebase.

This has resulted in many reboots of my Powermac G5 dual-socket device
correctly starting and running in SMP mode.


    [4 lines not shown]
DeltaFile
+90-9sys/powerpc/powermac/platform_powermac.c
+90-91 files

FreeBSD/src 8baa4e9release/powerpc mkisoimages.sh

powerpc: fix release image building for Apple partitions

awk changed somewhere between 14 and 15 and it stopped accepting
a hexadecimal number as its input - it will always return 0.
This results in a very badly written apple boot block.

So just remove it; do the math in shell.

PR:             kern/292341
Differential Revision:  https://reviews.freebsd.org/D54639
Reviewed by:    imp
MFC after:      1 week

(cherry picked from commit 7afa03963c448a14b1735a10eaf84941b0b74862)
DeltaFile
+1-1release/powerpc/mkisoimages.sh
+1-11 files

FreeBSD/src 6665996sys/powerpc/powerpc swtch32.S swtch64.S

powerpc: put the isync inside the TD_LOCK() checking loop

Fix a narrow window where the lock is unlocked but the checking CPU
hasn't flushed things appropriately.

Inside this window the CPU inside cpu_switch() will loop forever thinking
the destination thread is still blocked/locked even though it is not.

This manifests as the system hanging after starting all APs.

I've seen this reliably trigger in qemu-system-ppc64 running power9 pseries
guests; the more CPUs the more likely it triggers at boot.

PR: kern/292167
Differential Revision:  https://reviews.freebsd.org/D54478
Reviewed by:    jhibbits
MFC after:      1 week
Relnotes:       yes

(cherry picked from commit 8df2e542146801fd01675e56724eaa567d04c209)
DeltaFile
+1-1sys/powerpc/powerpc/swtch32.S
+1-1sys/powerpc/powerpc/swtch64.S
+2-22 files

HardenedBSD/src 0a45c88sys/powerpc/aim moea64_native.c

powerpc: disable the TLBIE lock, it's not needed for POWER8

According to POWER8_UM_v1.3_16MAR2016 3.8.3 Translation Lookaside
Buffer (TLB), POWER8 supports lockless TLBIE operations.

Locally Tested:

* IBM POWER8 Revision 2.0, dual socket, 160 threads

Differential Revision:  https://reviews.freebsd.org/D54855
Approved by:    jhibbits

(cherry picked from commit 9a5baa9c585652fb7bd4ccd45d567204caf349f2)
DeltaFile
+5-0sys/powerpc/aim/moea64_native.c
+5-01 files

FreeBSD/src 0a45c88sys/powerpc/aim moea64_native.c

powerpc: disable the TLBIE lock, it's not needed for POWER8

According to POWER8_UM_v1.3_16MAR2016 3.8.3 Translation Lookaside
Buffer (TLB), POWER8 supports lockless TLBIE operations.

Locally Tested:

* IBM POWER8 Revision 2.0, dual socket, 160 threads

Differential Revision:  https://reviews.freebsd.org/D54855
Approved by:    jhibbits

(cherry picked from commit 9a5baa9c585652fb7bd4ccd45d567204caf349f2)
DeltaFile
+5-0sys/powerpc/aim/moea64_native.c
+5-01 files

FreeBSD/src b30d064sys/powerpc/powermac platform_powermac.c

powerpc: add a best-effort SMP time base sync for G5's that need it

There's no timebase freeze platform routine registered on my dual 2.3GHz
G5 PPC970FX Apple PowerMac.

For platforms without an explicit timebase freeze/unfreeze, we'll have to
make do with what we have - which for now is an explicit hand-crafted
spinlock/rendezvous method.

* For existing platforms, they'll still continue to clock freeze /
  rendezvous; albeit with some stronger atomic bits now (from jhibbits@.)
* Instead of the fallback being "no timesync", implement a
  best-effort one which does a similar rendezvous barrier between
  BSP and APs, but instead of freeze/unfreeze the first instruction
  after the CPUs all register they're ready is to set the timebase.

This has resulted in many reboots of my Powermac G5 dual-socket device
correctly starting and running in SMP mode.


    [4 lines not shown]
DeltaFile
+90-9sys/powerpc/powermac/platform_powermac.c
+90-91 files