FreeBSD/ports 49ee85bdevel/gitaly distinfo, net/gitlab-agent distinfo

www/gitlab: security and patch update to 19.4.1

Changes:        https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/?nav=19.4.1
Security:       3f11e437-b7cd-11f1-a883-2cf05da270f3
DeltaFile
+13-13devel/gitaly/distinfo
+6-6www/gitlab/distinfo
+5-5www/gitlab-workhorse/distinfo
+5-5www/gitlab-pages/distinfo
+5-5net/gitlab-agent/distinfo
+1-1www/gitlab/Makefile.common
+35-356 files

LLVM/project 9672f46llvm/lib/ExecutionEngine/Orc/Shared OrcRTBridge.cpp

[ORC] Name eh-frame alloc actions using ORC rt convention. (#226014)

Rename the eh-frame alloc actions (register, deregister) using the new
ORC runtime's conventions for alloc-action naming.

This aligns the names used in LLVM with an upcoming implementation in
the new ORC runtime.
DeltaFile
+2-2llvm/lib/ExecutionEngine/Orc/Shared/OrcRTBridge.cpp
+2-21 files

LLVM/project c986ee5llvm/lib/ExecutionEngine/Orc/Debugging PerfSupportPlugin.cpp

[ORC] Mangle PerfSupportPlugin runtime function names as C (#226010)

The llvm_orc_registerJITLoaderPerf{Start,End,Impl} names are extern "C"
functions in JITLoaderPerf.cpp, so describe them as C names rather than
Verbatim. PerfSupportPlugin is ELF-only, where C mangling adds no
prefix, so this is a no-op in practice.
DeltaFile
+3-3llvm/lib/ExecutionEngine/Orc/Debugging/PerfSupportPlugin.cpp
+3-31 files

LLVM/project 74a5374.github/workflows/containers/github-action-ci-tooling Dockerfile

[Github] Fix TODO around LLVM version in tooling container (#226015)

Now that the build job uses a newer version of podamn we can get this
fixed.
DeltaFile
+17-22.github/workflows/containers/github-action-ci-tooling/Dockerfile
+17-221 files

LLVM/project 9f980b2mlir/include/mlir-c IR.h, mlir/lib/CAPI/IR IR.cpp

[mlir-c] Add mlirOperationIsAncestor and mlirOperationIsProperAncestor
DeltaFile
+64-0mlir/test/CAPI/ir.c
+10-0mlir/include/mlir-c/IR.h
+8-0mlir/lib/CAPI/IR/IR.cpp
+82-03 files

LLVM/project 01f3fe9clang/include/clang/Basic TargetID.h, clang/lib/Basic TargetID.cpp

[clang] Move normalizeForBundler to TargetID for reuse (#225049)

This PR is a prerequisite for #218337. It moves `normalizeForBundler
`from `HIPUtility.cpp` into `clang/Basic/TargetID` so the HIP toolchain,
`clang-linker-wrapper`, and `clang-repl` can share the same
offload-bundle target-name policy.

Assisted by Claude Opus 4.8
DeltaFile
+1-23clang/tools/clang-linker-wrapper/ClangLinkerWrapper.cpp
+1-21clang/lib/Driver/ToolChains/HIPUtility.cpp
+20-0clang/lib/Basic/TargetID.cpp
+10-0clang/include/clang/Basic/TargetID.h
+32-444 files

LLVM/project 18c1aa8flang/lib/Semantics resolve-names.cpp, flang/test/Lower/CUDA cuda-gpu-managed.cuf

[flang][cuda] Apply implicit managed attribute to scalar pointers (#225934)

Under -gpu=mem:managed, allocatables and array pointers already get an
implicit CUDA managed attribute, but scalar data pointers can still be
EntityDetails during FinishSpecificationPart and only become objects in
ConvertToObjectEntity. That left ALLOCATE of a scalar pointer on the
host heap, so present() failed to find it.

Factor the implicit managed/pinned attribution into
ApplyImplicitCUDADataAttr and invoke it from FinishSpecificationPart,
component declarations, and ConvertToObjectEntity. Skip it when
SetCUDADataAttr is applying an explicit attribute.
DeltaFile
+41-39flang/lib/Semantics/resolve-names.cpp
+44-0flang/test/Lower/CUDA/cuda-gpu-managed.cuf
+85-392 files

NetBSD/pkgsrc CFOr1BXdoc CHANGES-2026

   doc: Updated net/ruby-net-ping to 2.2.0
VersionDeltaFile
1.6293+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 5ih4cfanet/ruby-net-ping Makefile distinfo

   net/ruby-net-ping: update to 2.2.0

   2.2.0 (2026-09-22)

   * Add support for HTTP to ping URLs requiring a query parameter, carrying
     forward #25 by Kenneth Perry (@thothonegan) #50.
VersionDeltaFile
1.19+4-4net/ruby-net-ping/distinfo
1.19+2-2net/ruby-net-ping/Makefile
+6-62 files

NetBSD/pkgsrc IU5Dd3jdoc CHANGES-2026

   doc: Updated mail/ruby-mime-types-data to 3.2026.0922
VersionDeltaFile
1.6292+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc Fsecj3Fmail/ruby-mime-types-data Makefile distinfo

   mail/ruby-mime-types-data: update to 3.2026.0922

   3.2026.0921 (2026-09-21)

   * Updated registry entries from the IANA media registry and provisional
     media registry and the Apache Tika media registry as of the release date.

   * Upgraded hoe-halostatue with a fix for YAML issues.

   3.2026.0922 (2026-09-22)

   * Updated registry entries from the IANA media registry and provisional
     media registry and the Apache Tika media registry as of the release date.
VersionDeltaFile
1.56+4-4mail/ruby-mime-types-data/distinfo
1.54+2-2mail/ruby-mime-types-data/Makefile
+6-62 files

LLVM/project 60bafedclang/lib/AST/ByteCode InterpStack.cpp InterpStack.h

[clang][bytecode] Split `InterpFrame::shrink()`/`peekData()` into slow and fast paths (#225761)

And move the fast path to the header file, so it can be more easily
inlined.
DeltaFile
+22-2clang/lib/AST/ByteCode/InterpStack.h
+4-16clang/lib/AST/ByteCode/InterpStack.cpp
+26-182 files

NetBSD/pkgsrc b2IQKBgdoc CHANGES-2026

   doc: Updated graphics/ruby-RMagick to 7.1.5
VersionDeltaFile
1.6291+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc SSp40RVgraphics/ruby-RMagick Makefile distinfo

   graphics/ruby-RMagick: update to 7.1.5

   7.1.5 (2026-09-23)

   Important

   More strings that ImageMagick would read from a file now raise ArgumentError.

   Montage#title= and the caption, comment and label options, set through
   Info#caption=, #comment=, #label= or Info#[]=, now reject a value whose
   first non-blank character is @, as Image#polaroid has done since
   7.1.4. ImageMagick read the file it named and put its contents into the
   montage or into the metadata of the image being read.  These checks and the
   one in Image#polaroid also reject a %[fx:@...], %[hex:@...] or %[pixel:@...]
   escape, which ImageMagick 7 reads from the named file as well, and their
   message now says the value "must not name a file with '@'".

   Image#profile! now accepts only the profile formats of ImageMagick's META
   coder (8BIM, APP1, EXIF, ICC, ICM, IPTC, XMP and their variants) and raises

    [22 lines not shown]
VersionDeltaFile
1.94+4-4graphics/ruby-RMagick/distinfo
1.212+2-2graphics/ruby-RMagick/Makefile
+6-62 files

LLVM/project f6e4500llvm/include/llvm/ABI TargetInfo.h DefaultTargetInfo.h, llvm/lib/ABI CMakeLists.txt DefaultTargetInfo.cpp

[ABI] Add DefaultTargetInfo for default argument/return classification (#225009)

Summary: 
- Introduce `DefaultTargetInfo`, the `llvm::abi` analogue of
`clang::CodeGen::DefaultABIInfo`.
- It provides self-consistent, non-ABI-specific argument/return
classification that targets without special rules can inherit and
delegate to.

Changes:
- `DefaultTargetInfo.h`: new `DefaultTargetInfo` class declaring
`classifyArgumentType`, `classifyReturnType`, and a `computeInfo`
override.
- `DefaultTargetInfo.cpp`: implement them mirroring classic
`DefaultABIInfo`.
- `TargetInfoTest.cpp`: exercise the classifiers through a minimal
`DefaultTargetInfo` subclass.
- Added `hasInt128Type()` and `getLongLongWidth()` hooks plus a
`getBitIntRegThreshold()` helper mirroring classic, and use it in both

    [6 lines not shown]
DeltaFile
+164-9llvm/unittests/ABI/TargetInfoTest.cpp
+63-0llvm/lib/ABI/DefaultTargetInfo.cpp
+38-0llvm/include/llvm/ABI/DefaultTargetInfo.h
+11-0llvm/include/llvm/ABI/TargetInfo.h
+1-0llvm/lib/ABI/CMakeLists.txt
+277-95 files

FreeBSD/src 8d94a93contrib/atf/atf-sh integration_test.sh

integration_test: backport fix from freebsd/atf

See the related merge commit for more details.

MFC after:      28 days
Obtained from:  [freebsd/atf at 2690b04c][upstream]
Fixes:          95223108 ("contrib/atf: upgrade to 0.26")

Merge commit '8fd09407c8e64fd26d095c9b00990c545577db5a'

[upstream]: https://github.com/freebsd/atf/commit/2690b04cbc608af165a58426b7275c063b779f03
DeltaFile
+1-1contrib/atf/atf-sh/integration_test.sh
+1-11 files

FreeBSD/src 8fd0940atf-sh integration_test.sh

atf-sh/integration_test: fix hang when invoked via kyua

The code in `create_test_program` called cat on top of the calling
function, resulting in code that would hang waiting for an EOF to be
sent. This was wrong. Pass the heredoc output directly to
`create_test_program` so the content is output to the test program once.

Closes: #201
Signed-off-by: Enji Cooper <ngie at FreeBSD.org>
DeltaFile
+1-1atf-sh/integration_test.sh
+1-11 files

NetBSD/pkgsrc JPwzquUdoc CHANGES-2026

   doc: Updated finance/ruby-braintree to 4.41.0
VersionDeltaFile
1.6290+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc WqSLSc7finance/ruby-braintree Makefile PLIST

   finance/ruby-braintree: update to 4.41.0

   4.41.0 (2026-09-16)

   * Add preferred_payment_method_token to ClientToken.generate
   * Fix path traversal vulnerability in CreditCard, CreditCardVerification,
     Customer, MerchantAccount, PayPalAccount, PaymentMethod,
     PaymentMethodNonce, Plan, SepaDirectDebitAccount, Subscription, Testing,
     Transaction, TransactionLineItem, UsBankAccount, and
     UsBankAccountVerification gateways by validating that IDs used in request
     paths do not contain path separators or relative-path segments
   * Add ach_type to transaction search
   * Add surcharge_amount to Transaction.refund
VersionDeltaFile
1.42+4-4finance/ruby-braintree/distinfo
1.25+5-1finance/ruby-braintree/PLIST
1.39+2-2finance/ruby-braintree/Makefile
+11-73 files

LLVM/project a73ee13libcxx/include/__locale_dir/support windows.h, libcxx/src/support/win32 locale_win32.cpp

add back & to __locale_t for windows
DeltaFile
+1-1libcxx/src/support/win32/locale_win32.cpp
+1-1libcxx/include/__locale_dir/support/windows.h
+2-22 files

LLVM/project 1c0ab03llvm/lib/Target/RISCV RISCVISelLowering.cpp, llvm/test/CodeGen/RISCV tail-calls.ll tail-calls-sret.ll

[RISCV] Support tail calls for functions with sret parameters (#223999)

This PR allows RISC-V tail calls from functions with an `sret`
parameter in a conservative set of cases.

RISC-V currently rejects a tail call whenever either the caller or the
callee has an `sret` parameter. This unnecessarily prevents tail-call
optimization.

For example:

```
%struct.Buffer = type { [7 x i32] }

; Function Attrs: mustprogress noinline nounwind uwtable
define void @foo(ptr sret(%struct.Buffer) align 4 %agg.result) {
entry:
  tail call void @bar(ptr %agg.result, i32 1, i32 2, i32 3, i32 4, i32 5, i32 6)
  ret void

    [40 lines not shown]
DeltaFile
+138-0llvm/test/CodeGen/RISCV/tail-calls-sret.ll
+6-31llvm/test/CodeGen/RISCV/tail-calls.ll
+19-6llvm/lib/Target/RISCV/RISCVISelLowering.cpp
+163-373 files

LLVM/project af00034clang/tools/clang-sycl-linker ClangSYCLLinker.cpp

[clang-sycl-linker] AOT-compile split modules concurrently (#224548)

AOT-compile all split modules in a thread pool instead of one at a time,
cutting AOT wall time when there are multiple split modules.

---------

Co-authored-by: Claude Sonnet 5 <noreply at anthropic.com>
DeltaFile
+38-12clang/tools/clang-sycl-linker/ClangSYCLLinker.cpp
+38-121 files

LLVM/project 0040e3cmlir/test/CAPI CMakeLists.txt rewrite.c

[mlir-c] Fix testDialectMaterializeConstant review comments

Correct the misleading comment about the func dialect (it does have a
constant materializer; it just declines an i32 IntegerAttr), and assert
the documented insertion-point contract: the op lands in the current
insertion block and the rewriter's insertion point is preserved.
DeltaFile
+12-12mlir/test/CAPI/rewrite.c
+2-1mlir/test/CAPI/CMakeLists.txt
+14-132 files

LLVM/project 2623044llvm/lib/TargetParser Host.cpp

[RISCV] Use vlenb CSR to set Zvl*b feature getHostCPUFeatures. (#225486)

Zvl*b features aren't exposed in HwProbe, probably because the vlenb CSR
exists.
DeltaFile
+16-0llvm/lib/TargetParser/Host.cpp
+16-01 files

LLVM/project a0e841bclang/test/Preprocessor riscv-target-features.c, llvm/docs RISCVUsage.md

[RISCV] Bump Zvfofp8min to 0.9 and add link to the spec. (#225848)

The version was bumped to 0.9 when it was moved to an ISA manual PR.
DeltaFile
+3-3clang/test/Preprocessor/riscv-target-features.c
+2-2llvm/test/MC/RISCV/attribute-arch.s
+2-2llvm/test/CodeGen/RISCV/attributes.ll
+4-0llvm/docs/RISCVUsage.md
+1-1llvm/unittests/TargetParser/RISCVISAInfoTest.cpp
+1-1llvm/lib/Target/RISCV/RISCVFeatures.td
+13-91 files not shown
+14-107 files

NetBSD/pkgsrc ehDIhGEdoc CHANGES-2026

   doc: Updated devel/ruby-tins to 1.57.0
VersionDeltaFile
1.6289+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 8IxXIAQdevel/ruby-tins Makefile distinfo

   devel/ruby-tins: update to 1.57.0

   1.57.0 (2026-09-14)

   * Add keyword and block forwarding to Expose#expose
   * Add keyword argument support to Full#full?
   * Add keyword argument support to AskAndSend
VersionDeltaFile
1.44+4-4devel/ruby-tins/distinfo
1.41+2-2devel/ruby-tins/Makefile
+6-62 files

FreeBSD/ports 42b6b5bsecurity/vuxml/vuln 2026.xml

security/vuxml: document gitlab vulnerabilities
DeltaFile
+49-0security/vuxml/vuln/2026.xml
+49-01 files

NetBSD/pkgsrc 8L4IGxPdoc CHANGES-2026

   doc: Updated devel/ruby-sexp-processor to 4.17.6
VersionDeltaFile
1.6288+2-1doc/CHANGES-2026
+2-11 files

LLVM/project 38dcabcclang/include/clang/Basic BuiltinsRISCV.td, clang/lib/CodeGen/TargetBuiltins RISCV.cpp

[RISCV][P-Ext] Remove builtins for pmerge with signed types. (#225975)

We can use the unsigned builtins to implement the signed intrinsics.
DeltaFile
+0-10clang/lib/CodeGen/TargetBuiltins/RISCV.cpp
+5-5clang/lib/Headers/riscv_packed_simd.h
+0-5clang/include/clang/Basic/BuiltinsRISCV.td
+5-203 files