FreeBSD/ports 64d1765 — security/tailscale Makefile distinfo

security/tailscale: Update to 1.104.4

MFH:            2026Q4
(cherry picked from commit a21981a86a420e02f621461b6ff2b96c97ee02b0)
DeltaFile
+5-5security/tailscale/distinfo
+1-1security/tailscale/Makefile
+6-62 files

FreeBSD/ports a21981a — security/tailscale Makefile distinfo

security/tailscale: Update to 1.104.4

MFH:            2026Q4
DeltaFile
+5-5security/tailscale/distinfo
+1-1security/tailscale/Makefile
+6-62 files

FreeNAS/freenas 1fd1c7c —

Empty commit to create PR on github.

You should reset it
DeltaFile
+0-00 files

FreeNAS/freenas c8ef9e0 — src/middlewared/middlewared/plugins/alert oneshot.py __init__.py, src/middlewared/middlewared/plugins/ups upssched_event.py utils.py

NAS-144937 / 28.0.0-BETA.1 / Fix flaky UPS alerts (#20076)

* Receiving any message that was not in `alert_mapping` (i.e. `NOCOMM`,
`FSD` and `SHUTDOWN`) removed all alerts with some probability
* Alert creation raced with deletion (this commit introduces long
overdue `oneshot_replace`)
* Fix test utils. The dummy driver only notices whole-second mtime
changes, so sometimes fake data was not published at all.
DeltaFile
+86-12tests/api2/test_530_ups.py
+18-0src/middlewared/middlewared/plugins/alert/__init__.py
+7-3src/middlewared/middlewared/plugins/ups/__init__.py
+7-0src/middlewared/middlewared/plugins/alert/oneshot.py
+1-3src/middlewared/middlewared/plugins/ups/upssched_event.py
+4-0src/middlewared/middlewared/plugins/ups/utils.py
+123-186 files

OPNSense/core c7a0e7c — src/etc/inc filter.inc, src/opnsense/scripts/filter list_non_mvc_rules.php

firewall: NAT: add same query performance fix for automatic rules as in 889bcde
DeltaFile
+17-2src/opnsense/scripts/filter/list_non_mvc_rules.php
+5-7src/opnsense/service/conf/actions.d/actions_filter.conf
+11-1src/etc/inc/filter.inc
+33-103 files

FreeBSD/ports daf6d10 — security/vuxml/vuln 2026.xml

security/vuxml: Document Pillow vulnerabilities

PR:             300087
Sponsored by:   Netzkommune GmbH
DeltaFile
+73-0security/vuxml/vuln/2026.xml
+73-01 files

LLVM/project 0406c39 — offload/ci amdgpu-offload-build-only.py

[BBot][AMDGPU] Port amdgpu-offload-build-only to in-tree (#236077)

This ports the AnnotatedBuilder from llvm-zorg to the ScriptedBuilder
that lives inside llvm-project. That is one more step to tie the AMDGPU
buildbot fleet to the versioning of llvm-project and making it easier to
reproduce and use locally.

Assisted-by: Claude
(Apologies for forgetting in the first version)
DeltaFile
+46-0offload/ci/amdgpu-offload-build-only.py
+46-01 files

LLVM/project ad46922 — libc/src/__support/regex regex_parser.h regex_parser.cpp, libc/src/regex regcomp.cpp

[libc][regex] Add alternation, grouping, and subexpression counting (#235943)

In POSIX Extended Regular Expressions (ERE), alternation '|' has the lowest precedence and separates alternative branches, while grouping '()' overrides precedence and delimits subexpressions. POSIX specifies that unmatched ')'
at top level is treated as an ordinary character, empty subexpressions '()' are valid, and unclosed '(' or empty alternation branches must be rejected. Uncontrolled recursive parsing of deeply nested parentheses also presents a stack exhaustion risk that standard libraries must defend against.

Implement alternation and parenthesized subexpressions in regex_parser via recursive descent with an explicit nesting cap of 128 levels (MAX_GROUP_DEPTH) returning REG_ESPACE upon overflow. Share a single ParsedAtomStack across recursive frames and fold both concatenation and alternation branches right-to-left so canonical right-associated AST construction remains O(1) per branch without per-frame buffers or orphaned intermediate nodes.  Treat unmatched ')' at nesting depth 0 as a literal character per POSIX.1-2024
9.4.3, enforce REG_EPAREN on unclosed parentheses, reject empty alternation branches with REG_BADPAT, and populate preg->re_nsub with the count of parenthesized subexpressions upon successful compilation.

External compliance suites: Henry Spencer suite passes 168/456 (+42) boolean/error cases and 65/456 (+10) full-position cases; AT&T testregex passes 252/400 (+178) ERE boolean/error cases and 254/473 (+178) overall
boolean/error cases with 0 regressions.

Assisted-by: Automated tooling, human reviewed.
DeltaFile
+131-29libc/src/__support/regex/regex_parser.cpp
+128-2libc/test/src/regex/regex_basic_test.cpp
+61-4libc/test/src/__support/regex/matcher_test.cpp
+4-2libc/src/regex/regcomp.cpp
+4-1libc/src/__support/regex/regex_parser.h
+328-385 files

LLVM/project b577892 — utils/bazel/llvm-project-overlay/mlir BUILD.bazel

[Bazel] Fixes 84d9318 (#236344)

This fixes 84d9318fef60dfe6e11baf59d6ef7a96eaf1118b (#232944).

Buildkite error link:
https://buildkite.com/llvm-project/upstream-bazel/builds?commit=84d9318fef60dfe6e11baf59d6ef7a96eaf1118b

Co-authored-by: Google Bazel Bot <google-bazel-bot at google.com>
DeltaFile
+1-0utils/bazel/llvm-project-overlay/mlir/BUILD.bazel
+1-01 files

FreeBSD/ports d241b30 — www/trafficserver pkg-plist Makefile, www/trafficserver/files trafficserver.in

www/trafficserver: Update to 10.1.5

traffic_manager is gone since 10.0, the rc.d script now starts
traffic_server. Runtime, log and cache directories are compiled to the
/var paths the package creates; before, traffic_server looked for them
under ${PREFIX}/var and did not start.

Changelog:      https://github.com/apache/trafficserver/blob/10.1.5/CHANGELOG-10.1.5

PR:             292748
Approved by:    gaod at hychen.org (maintainer timeout)
Security:       3caa3b4b-d2ab-11f1-bae2-3497f65b111b
With hat:       ports-secteam
Sponsored by:   Netzkommune GmbH

(cherry picked from commit 438e566afbe9551213d43f47a78a245a5f36fe02)
DeltaFile
+3-3www/trafficserver/files/trafficserver.in
+3-3www/trafficserver/distinfo
+3-2www/trafficserver/pkg-plist
+4-1www/trafficserver/Makefile
+13-94 files

LLVM/project cf3182a — llvm/lib/Target/AVR AVRTargetMachine.h AVR.h, llvm/test/CodeGen/AVR newpm-pipeline.ll

[𝘀𝗽𝗿] changes to main this commit is based on

Created using spr 1.3.7

[skip ci]
DeltaFile
+96-0llvm/lib/Target/AVR/AVRCodeGenPassBuilder.cpp
+90-0llvm/test/CodeGen/AVR/newpm-pipeline.ll
+49-38llvm/lib/Target/AVR/AVRShiftExpand.cpp
+33-0llvm/lib/Target/AVR/AVRPassRegistry.def
+9-2llvm/lib/Target/AVR/AVR.h
+8-0llvm/lib/Target/AVR/AVRTargetMachine.h
+285-402 files not shown
+288-428 files

LLVM/project b3f67b1 — llvm/lib/Target/AVR AVR.h AVRPassRegistry.def, llvm/test/CodeGen/AVR newpm-pipeline.ll

[𝘀𝗽𝗿] initial version

Created using spr 1.3.7
DeltaFile
+82-53llvm/lib/Target/AVR/AVRFrameLowering.cpp
+96-0llvm/lib/Target/AVR/AVRCodeGenPassBuilder.cpp
+91-0llvm/test/CodeGen/AVR/newpm-pipeline.ll
+49-38llvm/lib/Target/AVR/AVRShiftExpand.cpp
+33-0llvm/lib/Target/AVR/AVRPassRegistry.def
+19-3llvm/lib/Target/AVR/AVR.h
+370-943 files not shown
+382-979 files

FreeBSD/ports a5d5620 — security/vuxml/vuln 2026.xml

security/vuxml: Document trafficserver vulnerabilities

Sponsored by:   Netzkommune GmbH
DeltaFile
+82-0security/vuxml/vuln/2026.xml
+82-01 files

FreeBSD/ports 438e566 — www/trafficserver pkg-plist Makefile, www/trafficserver/files trafficserver.in

www/trafficserver: Update to 10.1.5

traffic_manager is gone since 10.0, the rc.d script now starts
traffic_server. Runtime, log and cache directories are compiled to the
/var paths the package creates; before, traffic_server looked for them
under ${PREFIX}/var and did not start.

Changelog:      https://github.com/apache/trafficserver/blob/10.1.5/CHANGELOG-10.1.5

PR:             292748
Approved by:    gaod at hychen.org (maintainer timeout)
Security:       3caa3b4b-d2ab-11f1-bae2-3497f65b111b
With hat:       ports-secteam
Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/trafficserver/files/trafficserver.in
+3-3www/trafficserver/distinfo
+3-2www/trafficserver/pkg-plist
+4-1www/trafficserver/Makefile
+13-94 files

LLVM/project 8e196cd — libcxx/include string, libcxx/test/std/strings/basic.string/string.modifiers/string_append size_char.pass.cpp

Reapply "[libc++] Fix incorrect size check when growing std::string" (#234545) (#234551)

There was a race condition with another commit adding another call of
`__get_amortized_growth_capacity`. This is fixed in this version.

Original commit message:

When trying to grow very large amounts the `max_size()` check could fail
due to
the result of adding the current capacity and the additional capacity
could wrap.

This reverts commit 64b40b84eb293e259cfe36add2ac34ab3dafc05c.
DeltaFile
+9-9libcxx/include/string
+11-0libcxx/test/std/strings/basic.string/string.modifiers/string_insert/size_size_char.pass.cpp
+11-0libcxx/test/std/strings/basic.string/string.modifiers/string_insert/iter_size_char.pass.cpp
+11-0libcxx/test/std/strings/basic.string/string.modifiers/string_append/size_char.pass.cpp
+42-94 files

pkgng/pkgng eeeef5d — libpkg pkg_solve.c

solve: prefer not to install packages offered by several repositories

The initial guess sets a negative phase on the variables that have no
local version, so that the solver does not install packages nobody asked
for.  This was only done when the package had a single candidate, which
is always the case with a single repository but not when several
repositories provide the same package.

In that case no phase was set, picosat fell back to its Jeroslow-Wang
heuristic, which tends to pick the positive phase for variables that
appear in dependency clauses, and unrelated packages were installed.

Set the negative phase whenever no version is installed.  Installed
packages and their upgrade candidates share the same uid, hence the same
slice, and keep their positive phase.

Fixes #2770
DeltaFile
+1-1libpkg/pkg_solve.c
+1-11 files

FreeBSD/ports 7e12063 — misc/mbuffer Makefile

misc/mbuffer: Mark FORTIFY_UNSAFE

cc -isystem /usr/local/include -O2 -pipe  -D_FORTIFY_SOURCE=2 -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing  -Wno-unused-result -DHAVE_CONFIG_H -DPREFIX=\"/usr/local\" -DSYSCONFDIR=\"/usr/local/etc\" -I. -I.  -shared -fPIC tapetest.c -o tapetest.so -lcrypto -lmd -lm -lpthread -L/usr/local/lib
idev.c:113:9: error: redefinition of 'read'
  113 | ssize_t LIBC_READ(int fd, void *buf, size_t s)
      |         ^
./config.h:78:19: note: expanded from macro 'LIBC_READ'
   78 | #define LIBC_READ read
      |                   ^
/usr/include/ssp/unistd.h:67:25: note: previous definition is here
   67 | __ssp_redirect(ssize_t, _FORTIFY_SOURCE_read, (int __fd, void *__buf,
      |                         ^
/usr/include/ssp/unistd.h:43:30: note: expanded from macro
      '_FORTIFY_SOURCE_read'
   43 | #define _FORTIFY_SOURCE_read    read
      |                                 ^
1 error generated.

PR:             300086
Submitted by:   Pascal Ernster <bugs.freebsd.org at hardfalcon.net>
DeltaFile
+2-0misc/mbuffer/Makefile
+2-01 files

LLVM/project 3e6b320 — llvm/docs AMDGPUDwarfExtensionsForHeterogeneousDebugging.md AMDGPUUsage.md, llvm/test/CodeGen/AMDGPU amdgcn.bitcast.512bit.ll amdgcn.bitcast.1024bit.ll

Merge branch 'fix-sp-before-chain-call' into stack-size-no-chain-callees
DeltaFile
+14,649-17,027llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.1024bit.ll
+0-22,228llvm/docs/AMDGPUUsage.rst
+18,097-0llvm/docs/AMDGPUUsage.md
+4,663-5,725llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.512bit.ll
+9,687-0llvm/test/TableGen/x86-fold-tables.inc
+5,324-0llvm/docs/AMDGPUDwarfExtensionsForHeterogeneousDebugging.md
+52,420-44,9804,491 files not shown
+268,585-151,2114,497 files

LLVM/project 9837af1 — llvm/lib/Target/AVR AVRTargetMachine.cpp AVRISelDAGToDAG.cpp

[AVR] Port SelectionDAGISel to NewPM

Standard NewPM pass porting.

Reviewers: arsenm, benshi001

Pull Request: https://github.com/llvm/llvm-project/pull/236243
DeltaFile
+10-1llvm/lib/Target/AVR/AVR.h
+7-2llvm/lib/Target/AVR/AVRISelDAGToDAG.cpp
+1-1llvm/lib/Target/AVR/AVRTargetMachine.cpp
+18-43 files

LLVM/project b132882 — llvm/lib/Target/AVR AVRCodeGenPassBuilder.cpp

formatting

Created using spr 1.3.7
DeltaFile
+6-3llvm/lib/Target/AVR/AVRCodeGenPassBuilder.cpp
+6-31 files

LLVM/project 907067c — llvm/lib/Target/AVR AVRCodeGenPassBuilder.cpp

[𝘀𝗽𝗿] changes introduced through rebase

Created using spr 1.3.7

[skip ci]
DeltaFile
+6-3llvm/lib/Target/AVR/AVRCodeGenPassBuilder.cpp
+6-31 files

LLVM/project 34b8553 — llvm/lib/Target/AVR AVRCodeGenPassBuilder.cpp

formatting

Created using spr 1.3.7
DeltaFile
+6-3llvm/lib/Target/AVR/AVRCodeGenPassBuilder.cpp
+6-31 files

OpenBSD/src Ixk8Qtx — sys/net pf.c

   pf(4): fix missing pf_state_key_unref()

   Reported by Acts1631.

   ok henning@
   ok sashan@
VersionDeltaFile
1.1246+2-1sys/net/pf.c
+2-11 files

FreeBSD/src dca2ad4 — libexec/rc/rc.d hostid

All Jetway NF541 seem to have the same UUID
DeltaFile
+2-0libexec/rc/rc.d/hostid
+2-01 files

NetBSD/pkgsrc AnZ7YDT — doc CHANGES-2026

   Updated time/py-time-machine, net/py-unearth
VersionDeltaFile
1.7397+3-1doc/CHANGES-2026
+3-11 files

FreeBSD/ports 26a4011 — audio/cmt distinfo Makefile

audio/cmt: update to 1.18

Changelog: https://www.ladspa.org/cmt/changes.html

take maintainership

Event: Works Must Run
(cherry picked from commit 8f7115603814403601b753ef26bd690d86f6fd60)
DeltaFile
+11-19audio/cmt/Makefile
+3-2audio/cmt/distinfo
+14-212 files

NetBSD/pkgsrc 9l0dF5o — net/py-unearth distinfo Makefile

   py-unearth: updated to 0.19.0

   0.19.0

   Breaking Changes

   Drop support for Python 3.9

   Chores

   Update pdm.lock
   Migrate from httpx to httpx2
VersionDeltaFile
1.31+9-5net/py-unearth/Makefile
1.29+4-4net/py-unearth/distinfo
+13-92 files

FreeBSD/ports 5493620 — audio/caps-plugins distinfo Makefile, audio/caps-plugins/files patch-dsp_v4f__IIR2.h patch-dsp_v4f.h

audio/caps-plugins: update to 0.9.26

Changelog: http://quitte.de/dsp/caps.html#CHANGES

take maintainership

Event: Works Must Run
(cherry picked from commit 978b455e60d0866d8c859cde22611716afbdca4c)
DeltaFile
+42-0audio/caps-plugins/files/patch-basics.h
+10-24audio/caps-plugins/Makefile
+16-0audio/caps-plugins/files/patch-dsp_v4f.h
+13-0audio/caps-plugins/files/patch-dsp_v4f__IIR2.h
+3-2audio/caps-plugins/distinfo
+84-265 files

FreeBSD/ports 1682947 — audio/suil distinfo pkg-plist

audio/suil: update to 0.10.26

Changelog: https://gitlab.com/lv2/suil/-/blob/v0.10.26/NEWS

take maintainership

(cherry picked from commit b4b55d20b9ab545d82dc2ab712138c92a534b987)
DeltaFile
+27-18audio/suil/Makefile
+3-6audio/suil/pkg-plist
+3-3audio/suil/distinfo
+33-273 files

NetBSD/pkgsrc WNC4jaE — time/py-time-machine Makefile distinfo

   py-time-machine: updated to 3.6.0

   3.6.0 (2026-10-25)

   Drop Python 3.10 support.
   Extend the Migration CLI to migrate freeze_time() class decorators on pytest-style test classes to the pytest.mark.time_machine() marker. Previously, such decorators were left unchanged and reported, since time_machine.travel() only supports unittest.TestCase subclasses as a class decorator, but they can be migrated to the marker instead.

   Extend the Migration CLI to migrate freeze_time() calls that pass the destination with the time_to_freeze keyword argument. The argument is made positional, or renamed to destination if it follows another kept keyword argument.
VersionDeltaFile
1.17+4-4time/py-time-machine/distinfo
1.19+2-2time/py-time-machine/Makefile
+6-62 files