FreeBSD/ports b20b2dbdevel/gitaly distinfo, net/gitlab-agent distinfo

www/gitlab: security and patch update to 19.1.1

Changes:        https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-1-1-released/
Security:       ee1e7aef-7117-11f1-873f-2cf05da270f3
DeltaFile
+11-11devel/gitaly/distinfo
+6-6www/gitlab/distinfo
+5-5www/gitlab-pages/distinfo
+5-5www/gitlab-workhorse/distinfo
+5-5net/gitlab-agent/distinfo
+4-4www/gitlab/Makefile.common
+36-361 files not shown
+39-397 files

FreeBSD/ports a9385cbsecurity/vuxml/vuln 2026.xml

security/vuxml: document gitlab vulnerabilities
DeltaFile
+53-0security/vuxml/vuln/2026.xml
+53-01 files

LLVM/project 0192c9fllvm/lib/Target/RISCV/AsmParser RISCVAsmParser.cpp, llvm/test/MC/RISCV xqcili-load-address.s

[RISCV] Add assembler support to lower `la/lla` to `qc.e.li` (#205782)

This patch updates the `RISCVAsmParser::emitLoadLocalAddress` function
to enable lowering of the `la/lla` pseudos to `qc.e.li` from the
Qualcomm uC Xqcili extension.
DeltaFile
+41-0llvm/test/MC/RISCV/xqcili-load-address.s
+7-2llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp
+48-22 files

LLVM/project bf354feclang/include/clang/CIR/Dialect/IR CIROps.td, clang/lib/CIR/CodeGen CIRGenItaniumCXXABI.cpp

[CIR] Add invariant attribute to cir.load (#204283)

Model LLVM's `!invariant.load` metadata on `cir.load` via an optional
`invariant` UnitAttr, lower it to the `llvm.load isInvariant` flag.
Update existing `LoadOp::create` call sites with new parameter.
DeltaFile
+31-0clang/test/CIR/CodeGen/vtable-load-invariant.cpp
+21-0clang/test/CIR/Lowering/load-invariant.cir
+20-0clang/test/CIR/IR/load-invariant.cir
+10-5clang/lib/CIR/Dialect/Transforms/TargetLowering/LowerItaniumCXXABI.cpp
+6-5clang/lib/CIR/CodeGen/CIRGenItaniumCXXABI.cpp
+9-1clang/include/clang/CIR/Dialect/IR/CIROps.td
+97-115 files not shown
+112-1911 files

FreeBSD/ports 1475dd5www/R-cran-httr2 distinfo Makefile

www/R-cran-httr2: Update to 1.2.3

Changelog: https://cran.r-project.org/web/packages/httr2/news/news.html
DeltaFile
+3-3www/R-cran-httr2/distinfo
+3-1www/R-cran-httr2/Makefile
+6-42 files

LLVM/project e03a23blibcxx/src text_encoding.cpp, libcxx/test/std/localization/locales/locale/locale.members encoding.pass.cpp

[libc++] Cast 0 to `__locale_t` in `text_encoding.cpp` (#205882)

- As mentioned
https://github.com/llvm/llvm-project/pull/141312#issuecomment-4799649766,
platforms which define `locale_t` as not a pointer fail would fail to
compile. This should fix the picolibc case.
- As an aside, also disable the `encoding.pass.cpp` test for llvm-libc
as that also uses `__get_locale_encoding()`
DeltaFile
+1-1libcxx/src/text_encoding.cpp
+1-0libcxx/test/std/localization/locales/locale/locale.members/encoding.pass.cpp
+2-12 files

FreeBSD/ports 3f329d0security/libssh2 Makefile

security/libssh2: Fix 26d1ee8df82d589fb233b27ce1e9c66de999b60d

Approved by:    portmgr (blanket)
DeltaFile
+1-1security/libssh2/Makefile
+1-11 files

LLVM/project 06144adllvm/lib/Target/X86 X86TargetVerifier.cpp X86TargetMachine.cpp, llvm/test/Verifier/X86 target-verifier.ll lit.local.cfg

[X86] Add target verifier with subtarget-dependent checks

Add an X86 TargetVerify, registered by triple, so the target-independent
TargetVerifierPass dispatches to it for X86 modules.

These checks depend on the features in a function's target-cpu /
target-features attributes, which the generic triple-only IR verifier
cannot see. The MCSubtargetInfo is built from those attributes, so no
TargetMachine is needed and the pass runs from generic pipelines:

  - x86 instruction-set intrinsics (llvm.x86.avx/avx2/avx512.*) require
    the matching AVX/AVX2/AVX-512 feature.
  - 128/256-bit AVX-512 intrinsics additionally require AVX512VL.
  - The x86_amx type requires AMX-TILE.
DeltaFile
+151-0llvm/lib/Target/X86/X86TargetVerifier.cpp
+41-0llvm/test/Verifier/X86/target-verifier.ll
+6-0llvm/lib/Target/X86/X86TargetMachine.cpp
+6-0llvm/lib/Target/X86/X86.h
+2-0llvm/test/Verifier/X86/lit.local.cfg
+1-0llvm/lib/Target/X86/CMakeLists.txt
+207-06 files

LLVM/project c2f10e0llvm/lib/CodeGen/SelectionDAG DAGCombiner.cpp, llvm/test/CodeGen/RISCV/rvv zvdot4a8i-sdnode.ll

[DAGCombiner] Fold multiplication through vp_merge into `partial_reduce_*mla` (#205890)

DAGCombiner is already doing this right now:
```
partial_reduce_*mla(acc, sel(p, mul(*ext(a), *ext(b)), splat(0)), splat(1))
   -> partial_reduce_*mla(acc, sel(p, a, splat(0)), b)
```
We should be able to have drop-in support for vp_merge (not for
vp_select though) as the select in the pattern above. This patch adds
such support.

The test is checking whether RISC-V's Zvdot4a8i instruction is
generated, as it depends on this pattern to fold away not just the
multiplication but also the sign / zero extensions.
DeltaFile
+36-0llvm/test/CodeGen/RISCV/rvv/zvdot4a8i-sdnode.ll
+13-4llvm/lib/CodeGen/SelectionDAG/DAGCombiner.cpp
+49-42 files

FreeBSD/ports 26d1ee8security/libssh2 Makefile distinfo

security/libssh2: Fix CVE-2026-7598

Backport upstream commit 256d04b60d80bf1190e96b0ad1e91b2174d744b1
to fix CVE-2026-7598

Reference:
https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1

PR:             295742
Approved by:    Maintainer timeout, 2+ weeks
DeltaFile
+3-1security/libssh2/Makefile
+3-1security/libssh2/distinfo
+6-22 files

FreeBSD/ports 265dd74multimedia/libass Makefile distinfo

multimedia/libass: Update to 0.17.5

Changelog: https://github.com/libass/libass/releases/tag/0.17.5
DeltaFile
+6-3multimedia/libass/Makefile
+3-3multimedia/libass/distinfo
+1-2multimedia/libass/pkg-plist
+10-83 files

FreeBSD/ports 2ed459daudio/fooyin distinfo pkg-plist

audio/fooyin: Update to 0.11.1

Changelog: https://github.com/fooyin/fooyin/releases/tag/v0.11.1
DeltaFile
+3-3audio/fooyin/distinfo
+3-0audio/fooyin/pkg-plist
+1-1audio/fooyin/Makefile
+7-43 files

LLVM/project 2919ad7clang/lib/Driver SanitizerArgs.cpp, clang/test/Driver fsanitize-shadow-call-stack-hexagon.c

[Hexagon] Add ShadowCallStack support (#200508)

Implement the software ShadowCallStack for Hexagon.

On Hexagon, r19 is used as the shadow stack pointer (reserved via
-ffixed-r19). On function entry the LR (r31) is saved to the shadow
stack and the pointer is advanced; on exit the LR is restored from the
shadow stack before returning.

Prologue sequence:

    r19 = add(r19, #4)
    memw(r19+#-4) = r31

Epilogue sequence (between deallocframe/jumpr r31):

    r31 = memw(r19+#-4)
    r19 = add(r19, #-4)


    [5 lines not shown]
DeltaFile
+141-13llvm/lib/Target/Hexagon/HexagonFrameLowering.cpp
+145-0llvm/test/CodeGen/Hexagon/shadow-call-stack.ll
+26-0compiler-rt/test/shadowcallstack/libc_support.h
+12-0clang/test/Driver/fsanitize-shadow-call-stack-hexagon.c
+7-1compiler-rt/test/shadowcallstack/lit.cfg.py
+8-0clang/lib/Driver/SanitizerArgs.cpp
+339-143 files not shown
+344-159 files

LLVM/project c675ecdllvm/test/CodeGen/AMDGPU div_v2i128.ll sched-handleMoveUp-dead-def-join.mir, llvm/test/MC/AMDGPU gfx13_asm_vop3_dpp16.s gfx12_asm_vop3_dpp16.s

Merge branch 'users/ikudrin/clang-findallocationfunction-simplify' into users/ikudrin/clang-cwg2282
DeltaFile
+12,991-3,310llvm/test/MC/AMDGPU/gfx13_asm_vop3_dpp16.s
+11,856-3,719llvm/test/MC/AMDGPU/gfx12_asm_vop3_dpp16.s
+0-8,306llvm/test/MC/Disassembler/AMDGPU/gfx12_dasm_vop3_dpp16.txt
+5,672-0llvm/test/MC/Disassembler/AMDGPU/gfx12_dasm_vop3_dpp16-fake.txt
+2,592-2,587llvm/test/CodeGen/AMDGPU/div_v2i128.ll
+5,126-0llvm/test/CodeGen/AMDGPU/sched-handleMoveUp-dead-def-join.mir
+38,237-17,9224,926 files not shown
+211,717-158,8994,932 files

OpenBSD/src Qh039bBlib/libc/asr getaddrinfo_async.c

   Make getaddrinfo(3) check hnok_lenient() earlier.

   r1.60 added special handling for localhost names; this was done before the
   hnok_lenient() check, ensure this validation applies to localhost names too.

   ok florian
VersionDeltaFile
1.68+12-9lib/libc/asr/getaddrinfo_async.c
+12-91 files

LLVM/project bf3a9d3llvm/lib/Target/AMDGPU AMDGPURewriteAGPRCopyMFMA.cpp, llvm/test/CodeGen/AMDGPU rewrite-vgpr-mfma-to-agpr-spill-discontiguous-interval.mir

[AMDGPU] Fix overlapping insert crash during rewrite-agpr-copy-mfma

Fixes https://github.com/llvm/llvm-project/issues/204224

Guard against a possibly wrong interference result for a discontiguous
stack slot interval by using the entire range.

A spilled stack slot can have a discontiguous live interval, e.g. a single
value live across several disjoint segments:

  [a, b)  [c, d)  ........gap........  [e, f)

with gaps where the slot is dead. The interference check previously only
considered the covered segments, so it could pick a PhysReg that is free
within them but busy inside a gap. Unspilling replaces the slot with a vreg
whose recomputed interval is continuous over [a, f) (it fills the gaps),
so assigning that PhysReg could overlap the value live in the gap and trip
the "Overlapping insert" assertion in LiveRegMatrix::assign. Checking
interference over the whole [a, f) hull avoids this.

    [2 lines not shown]
DeltaFile
+734-0llvm/test/CodeGen/AMDGPU/rewrite-vgpr-mfma-to-agpr-spill-discontiguous-interval.mir
+14-1llvm/lib/Target/AMDGPU/AMDGPURewriteAGPRCopyMFMA.cpp
+748-12 files

LLVM/project 6062226llvm/test/tools/llubi byval.ll byval_padding.ll, llvm/tools/llubi/lib Interpreter.cpp

[llubi] Add support for byval pointer arguments (#201852)

This patch adds support for the byval attribute. The hidden copy is
implemented as memcpy with the allocation size of the specified type.
See https://github.com/llvm/llvm-project/pull/205576 for more
information.
DeltaFile
+56-1llvm/tools/llubi/lib/Interpreter.cpp
+56-0llvm/test/tools/llubi/byval.ll
+49-0llvm/test/tools/llubi/byval_padding.ll
+25-0llvm/test/tools/llubi/byval_lifetime.ll
+18-0llvm/test/tools/llubi/byval_oversize.ll
+18-0llvm/test/tools/llubi/byval_mismatch3.ll
+222-18 files not shown
+347-114 files

LLVM/project cf6d792clang/include/clang/Basic BuiltinsAMDGPU.td, clang/test/CodeGen amdgpu-builtin-processor-is.c amdgpu-builtin-is-invocable.c

[AMDGPU][GFX1250] Support asyncmark builtin (#205697)
DeltaFile
+4-3clang/test/CodeGenOpenCL/builtins-amdgcn-asyncmark-errs.cl
+3-3clang/include/clang/Basic/BuiltinsAMDGPU.td
+2-2clang/test/CodeGenCXX/dynamic-cast-address-space.cpp
+1-1clang/test/CodeGen/amdgpu-builtin-processor-is.c
+1-1clang/test/CodeGen/amdgpu-builtin-is-invocable.c
+1-0clang/test/CodeGenOpenCL/builtins-amdgcn-asyncmark.cl
+12-101 files not shown
+13-107 files

LLVM/project 3ddeaebcompiler-rt/lib/instrumentor-tools instrumentor_runtime.h README.md, compiler-rt/lib/instrumentor-tools/flop-counter flop_counter_runtime.cpp CMakeLists.txt

Revert "[Instrumentor] Add runtime examples: [1/N] A flop counter" (#205960)

This reverts commit 61cbfabb7ade682a64f516c871b2bacb1e3e324a.

Fails compiler-rt standalone builds, though, locally it works fine :(
DeltaFile
+0-293compiler-rt/lib/instrumentor-tools/instrumentor_runtime.h
+0-164compiler-rt/lib/instrumentor-tools/flop-counter/flop_counter_runtime.cpp
+0-82compiler-rt/lib/instrumentor-tools/flop-counter/CMakeLists.txt
+0-77compiler-rt/lib/instrumentor-tools/flop-counter/README.md
+0-75compiler-rt/test/instrumentor-tools/lit.cfg.py
+0-49compiler-rt/lib/instrumentor-tools/README.md
+0-74020 files not shown
+1-96626 files

LLVM/project bd53dfeflang/test/Semantics/CUDA cuf14.cuf cuf15.cuf

[flang][cuda][NFC] Fix some typos and misplaced comment (#205933)
DeltaFile
+2-2flang/test/Semantics/CUDA/cuf14.cuf
+2-2flang/test/Semantics/CUDA/cuf15.cuf
+1-1flang/test/Semantics/CUDA/cuf-proc-attr-error.cuf
+1-1flang/test/Semantics/CUDA/cuf09.cuf
+6-64 files

FreeBSD/ports 68b32d1www/phalcon distinfo Makefile

www/phalcon: update to 5.16.0.
DeltaFile
+3-3www/phalcon/distinfo
+1-1www/phalcon/Makefile
+4-42 files

LLVM/project f0f5f77llvm/utils/gn/secondary/clang-tools-extra/unittests/clang-tidy BUILD.gn

[gn build] Port fcc105f40c8e (#205959)
DeltaFile
+1-0llvm/utils/gn/secondary/clang-tools-extra/unittests/clang-tidy/BUILD.gn
+1-01 files

LLVM/project df15df9llvm/utils/gn/secondary/llvm/unittests/IR BUILD.gn

[gn build] Port 2ce6fc677fdb (#205958)
DeltaFile
+1-0llvm/utils/gn/secondary/llvm/unittests/IR/BUILD.gn
+1-01 files

LLVM/project a4404f2llvm/utils/gn/secondary/libcxx/include BUILD.gn, llvm/utils/gn/secondary/libcxx/src BUILD.gn

[gn] port 8a531c3608c7 (#205957)
DeltaFile
+1-0llvm/utils/gn/secondary/libcxx/include/BUILD.gn
+1-0llvm/utils/gn/secondary/libcxx/src/BUILD.gn
+2-02 files

FreeBSD/src 961f481sys/kern sched_ule.c

sched_ule: Fix off by one in preempt_thresh definition

Since 'preempt_thresh' is set to PRI_MIN_KERN by default, and comparison
of the considered thread's priority with that threshold is done with
'<=', PRI_MIN_KERN threads actually can preempt other threads, contrary
to other non-interrupt kernel ones (between PRI_MIN_KERN + 1 and
PRI_MAX_KERN).

So, replace the comparison operator '<=' by '<'.  The alternative would
be to change the default value, but changing the comparison instead has
the benefit to be consistent with the 0 setting (which forbids
preemption entirely), since allowing only threads with priority 0 to
preempt becomes possible.

Consequently, we also change the default value for the FULL_PREEMPTION
option by adding 1 to PRI_MAX_IDLE (in practice, that does not make any
difference in the current setting, since no preemption will happen if
the new priority value is not strictly lower than the current one, and
PRI_MAX_IDLE is PRI_MAX, the highest possible priority).

    [8 lines not shown]
DeltaFile
+2-2sys/kern/sched_ule.c
+2-21 files

FreeBSD/src ae9f664sys/fs/nfs nfs_commonkrpc.c

nfs_commonkrpc.c: Improve handling of NFSv4.1/4.2 recovery

Commit 4d80d4913e79 fixed a long standing bug in the recovery
code.  However. glebius@ reported seeing multiple
recovery cycles with this patch during an NFSv4.1/4.2
server reboot.

This commit should minimize the risk of multiple
recovery cycles.

PR:     294925

(cherry picked from commit ea4886f2829bf33866c8c0c60b14a9641fc54b40)
DeltaFile
+8-5sys/fs/nfs/nfs_commonkrpc.c
+8-51 files

FreeBSD/src afc1136sys/fs/nfs nfs_commonkrpc.c

nfs_commonkrpc.c: Improve handling of NFSv4.1/4.2 recovery

Commit 4d80d4913e79 fixed a long standing bug in the recovery
code.  However. glebius@ reported seeing multiple
recovery cycles with this patch during an NFSv4.1/4.2
server reboot.

This commit should minimize the risk of multiple
recovery cycles.

PR:     294925

(cherry picked from commit ea4886f2829bf33866c8c0c60b14a9641fc54b40)
DeltaFile
+8-5sys/fs/nfs/nfs_commonkrpc.c
+8-51 files

LLVM/project 36b2048llvm/lib/Target/X86 X86FrameLowering.cpp, llvm/test/CodeGen/X86/apx push2-pop2.ll push2-pop2-cfi-seh.ll

[X86][APX] Implement push+push2+push pre-alignment strategy for PP2 (#205031)

Replace the dummy "push %rax" stack-alignment padding for APX push2/pop2
(PP2) with a push+push2+push strategy: when an even number of callee-saved
GPRs is involved, a single CSR push provides the 16-byte alignment instead
of a throwaway push %rax, and the remaining registers use push2/pop2. The
padForPush2Pop2 flag and its associated dummy push, SUB/LEA padding, and
SEH_StackAlloc emission in spill/restoreCalleeSavedRegisters are removed.

BuildStackAdjustment now uses NF (no-flags) variants of ADD/SUB, but
only as a smaller replacement for LEA, i.e. only when EFLAGS must be preserved
across the adjustment. When EFLAGS is dead the plain SUB/ADD is kept, which is
  shorter than the EVEX-encoded NF form. The NF opcodes are 64-bit
(SUB64ri32_NF/ADD64ri32_NF), so they are not used for the x32 ABI, and
they are recognized in mergeSPUpdates and the epilogue backward scan.

  Update LIT tests accordingly.

  Assisted-by: Claude Opus 4.8 (1M context) <noreply at anthropic.com>
DeltaFile
+142-89llvm/test/CodeGen/X86/apx/push2-pop2.ll
+60-62llvm/test/CodeGen/X86/apx/push2-pop2-cfi-seh.ll
+40-40llvm/test/CodeGen/X86/apx/push2-pop2-cfi-seh-v3.ll
+65-0llvm/test/CodeGen/X86/apx/nf-stackadjust.ll
+32-27llvm/lib/Target/X86/X86FrameLowering.cpp
+18-18llvm/test/CodeGen/X86/apx/pp2-with-stack-clash-protection.ll
+357-2363 files not shown
+376-2639 files

FreeBSD/src 28ae0d8sys/fs/nfs nfs_commonkrpc.c nfs_commonsubs.c

nfs: Fix argument typo to avoid a crash

A typo resulted in the wrong argument for a bytewise
comparison that could result in a crash if
the incorrect argument was not a valid pointer.

This patch fixes the argument.

While investigating this, I noticed that the
correct argument was not being filled in as
required, so this patch fixes that, as well.

Somehow, recovery from a NFSv4.1/4.2 server
crash worked during testing, so this was not
detected.  The bug/patch only affects NFS
client mounts using NFSv4.1/4.2.

PR:     294925

(cherry picked from commit 4d80d4913e79c8b5918b1f04c1c7b38e6c76b9b4)
DeltaFile
+3-2sys/fs/nfs/nfs_commonkrpc.c
+3-0sys/fs/nfs/nfs_commonsubs.c
+6-22 files

FreeBSD/src 8404328sys/fs/nfs nfs_commonkrpc.c nfs_commonsubs.c

nfs: Fix argument typo to avoid a crash

A typo resulted in the wrong argument for a bytewise
comparison that could result in a crash if
the incorrect argument was not a valid pointer.

This patch fixes the argument.

While investigating this, I noticed that the
correct argument was not being filled in as
required, so this patch fixes that, as well.

Somehow, recovery from a NFSv4.1/4.2 server
crash worked during testing, so this was not
detected.  The bug/patch only affects NFS
client mounts using NFSv4.1/4.2.

PR:     294925

(cherry picked from commit 4d80d4913e79c8b5918b1f04c1c7b38e6c76b9b4)
DeltaFile
+3-2sys/fs/nfs/nfs_commonkrpc.c
+3-0sys/fs/nfs/nfs_commonsubs.c
+6-22 files