FreeBSD/ports 8e5f9e8 — java/openjdk11 distinfo Makefile

java/openjdk11: Update to 11.0.33, incl eMudhra fixes

Update to latest upstream patch version to address issues with the
eMudhra certificate incident.

See also: https://openjdk.org/emudhra

MFH:            2026Q4
Security:       CVE 2026-114820
Security:       JDK-8395690
Sponsored by:   The FreeBSD Foundation
DeltaFile
+3-4java/openjdk11/Makefile
+3-3java/openjdk11/distinfo
+6-72 files

FreeBSD/ports 7eb6001 — net-im/telegram-desktop Makefile distinfo

net-im/telegram-desktop: update to 7.4.0 release (+)

Release notes:  https://github.com/telegramdesktop/tdesktop/releases/tag/v7.3.4 \
                https://github.com/telegramdesktop/tdesktop/releases/tag/v7.3.5 \
                https://github.com/telegramdesktop/tdesktop/releases/tag/v7.4.0
DeltaFile
+3-3net-im/telegram-desktop/distinfo
+1-2net-im/telegram-desktop/Makefile
+4-52 files

FreeBSD/ports a52ed4d — net-im/tg_owt Makefile distinfo

net-im/tg_owt: update tp 2026-10-30 snapshot
DeltaFile
+3-3net-im/tg_owt/distinfo
+2-2net-im/tg_owt/Makefile
+5-52 files

OPNSense/src 3ab879a — sbin/ipfw ipfw2.h ipfw.8, sys/netpfil/ipfw dn_sched.h dn_sched_cake.h

dummynet: CAKE scheduler test

Taken from: https://github.com/pletch/opnsense-cake/blob/main/patches/opnsense-src-cake.patch 017caf0
DeltaFile
+2,902-0sys/netpfil/ipfw/dn_sched_cake.c
+331-4sbin/ipfw/dummynet.c
+301-0sys/netpfil/ipfw/dn_sched_cake.h
+162-1sbin/ipfw/ipfw.8
+27-0sbin/ipfw/ipfw2.h
+11-0sys/netpfil/ipfw/dn_sched.h
+3,734-53 files not shown
+3,739-79 files

NetBSD/pkgsrc-wip 5b798ad — trivy Makefile go-modules.mk

trivy: updated to 0.76.2
DeltaFile
+207-177trivy/distinfo
+68-58trivy/go-modules.mk
+1-1trivy/Makefile
+276-2363 files

FreeBSD/src feab010 — lib/libfetch common.c

libfetch: Use monotonic clock for timeouts

MFC after:      1 week
Reviewed by:    imp
Differential Revision:  https://reviews.freebsd.org/D61225
DeltaFile
+38-48lib/libfetch/common.c
+38-481 files

OPNSense/ports 6fbcb6b — textproc/expat2 pkg-plist Makefile

textproc/expat2: sync with upstream

Taken from: FreeBSD
DeltaFile
+3-3textproc/expat2/distinfo
+1-1textproc/expat2/pkg-plist
+1-1textproc/expat2/Makefile
+5-53 files

OPNSense/ports b5fee68 — security/openvpn distinfo Makefile

security/openvpn: partially sync with upstream

Taken from: FreeBSD
DeltaFile
+5-2security/openvpn/Makefile
+3-3security/openvpn/distinfo
+8-52 files

LLVM/project c185699 — llvm/test/CodeGen/AMDGPU fmax3-maximumnum.ll fmin3-minimumnum.ll

[AMDGPU][NFC] Enable GlobalISel in fmax3-maximumnum and fmin3-minimumnum (#239485)
DeltaFile
+4,386-1,684llvm/test/CodeGen/AMDGPU/fmin3-minimumnum.ll
+4,384-1,682llvm/test/CodeGen/AMDGPU/fmax3-maximumnum.ll
+8,770-3,3662 files

LLVM/project 59a4363 — llvm/lib/Transforms/Vectorize SLPVectorizer.cpp, llvm/lib/Transforms/Vectorize/SLPVectorizer SLPCostAnalysis.h SLPCompatibilityAnalysis.cpp

[SLP][modularisation][NFC] Move BoUpSLP-independent helpers to SLP util modules (#237651)

Move file-local helpers that do not depend on BoUpSLP out of
SLPVectorizer.cpp into the self-contained SLPVectorizer/ modules:

- SLPCostAnalysis: buildIntrinsicArgTypes, getVectorCallCosts,
isPoorThroughputOp (with PoorThroughputOpCache, getVectorOpCost and
getPoorThroughputTypeKey), isFusableFMulOperand,
getVectorInstrContextHint, hasHighRegisterPressure.
- SLPCompatibilityAnalysis: getMainAltOpsNoStateVL, checkEVsForVecCalls.
- SLPShuffleAnalysis: performExtractsShuffleAction (with ValueSelect).
- SLPUtils: areTwoInsertFromSameBuildVector.
- SLPReductionUtils: the body of HorizontalReduction::getRdxKind, which
now forwards to it. This drops the file-static getRdxKind wrapper that
called back into HorizontalReduction.

Part of the SLPVectorizer.cpp modularization effort:
https://discourse.llvm.org/t/modularizing-slpvectorizer-cpp/90922

Assisted by AI
DeltaFile
+21-625llvm/lib/Transforms/Vectorize/SLPVectorizer.cpp
+201-0llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPCostAnalysis.cpp
+112-0llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPShuffleAnalysis.h
+98-0llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPReductionUtils.cpp
+81-0llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPCompatibilityAnalysis.cpp
+52-0llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPCostAnalysis.h
+565-6254 files not shown
+656-62510 files

NetBSD/pkgsrc JkJtXth — multimedia/moviebox-tui Makefile

   multimedia/moviebox-tui: fix dependency

   Spotted by leot@ during mpv revbump.
   moviebox-tui only depends on the mpv executable.

   While here remove duplicate line.
VersionDeltaFile
1.9+2-3multimedia/moviebox-tui/Makefile
+2-31 files

LLVM/project 5ad1eb8 — llvm/test/Transforms/LoopVectorize/WebAssembly/CostModel convolve2d.ll

[NFC][WebAssembly] Precommit test (#239244)

For vectorizer cost model.
DeltaFile
+297-0llvm/test/Transforms/LoopVectorize/WebAssembly/CostModel/convolve2d.ll
+297-01 files

LLVM/project 5ee0347 — llvm/lib/Target/SPIRV SPIRVInstructionSelector.cpp, llvm/test/CodeGen/SPIRV layout.ll const-nested-vecs.ll

Bitcast typed base to i8* for GV op of G_PTR_ADD since its offset is actually a byte count
DeltaFile
+35-24llvm/lib/Target/SPIRV/SPIRVInstructionSelector.cpp
+3-3llvm/test/CodeGen/SPIRV/const-nested-vecs.ll
+4-1llvm/test/CodeGen/SPIRV/opencl/basic/progvar_prog_scope_init.ll
+2-2llvm/test/CodeGen/SPIRV/layout.ll
+2-1llvm/test/CodeGen/SPIRV/pointers/irtrans-added-int-const-32-64.ll
+46-315 files

LLVM/project 15efb63 — llvm/lib/Target/SPIRV SPIRVInstructionSelector.cpp, llvm/test/CodeGen/SPIRV addrspacecast-ptradd-global.ll

Address nit feedback
DeltaFile
+5-5llvm/lib/Target/SPIRV/SPIRVInstructionSelector.cpp
+2-6llvm/test/CodeGen/SPIRV/addrspacecast-ptradd-global.ll
+7-112 files

LLVM/project b183896 — llvm/lib/Target/SPIRV SPIRVInstructionSelector.cpp, llvm/test/CodeGen/SPIRV addrspacecast-ptradd-non-null.ll addrspacecast-ptradd-global.ll

[SPIR-V] Fix G_PTR_ADD selection for addrspacecast global initializers
DeltaFile
+71-9llvm/test/CodeGen/SPIRV/addrspacecast-ptradd-global.ll
+31-9llvm/lib/Target/SPIRV/SPIRVInstructionSelector.cpp
+7-8llvm/test/CodeGen/SPIRV/addrspacecast-ptradd-non-null.ll
+109-263 files

LLVM/project 1ca71f1 — llvm/test/CodeGen/SPIRV addrspacecast-ptradd-non-null.ll addrspacecast-ptradd-global.ll

Pre-commit test cases
DeltaFile
+30-0llvm/test/CodeGen/SPIRV/addrspacecast-ptradd-global.ll
+20-0llvm/test/CodeGen/SPIRV/addrspacecast-ptradd-non-null.ll
+50-02 files

LLVM/project 8ba5335 — llvm/include/llvm/CodeGen TargetLowering.h, llvm/lib/CodeGen TargetLoweringBase.cpp

[NFC][SelectionDAG] Removed canOpTrap, migrating callers to isSafeToSpeculativelyExecute. (#238906)

The implementation of canOpTrap seems to answer a different question
because there are many trapping operations not accounted for. The
the only use really wants to know if it's safe to widen a lane-wise 
operation by concatenating poison lanes to its operands.
DeltaFile
+0-13llvm/lib/CodeGen/TargetLoweringBase.cpp
+0-6llvm/include/llvm/CodeGen/TargetLowering.h
+2-2llvm/lib/CodeGen/SelectionDAG/LegalizeVectorTypes.cpp
+2-213 files

LLVM/project a7422d4 — llvm/test/CodeGen/X86 vector-deinterleave7-i16.ll vector-deinterleave8-i64.ll

[X86] Add thorough vector.interleave/deinterleave test coverage (#239549)

Based off the existing vector-interleaved-store/load tests

Small step towards fully supporting vector.interleave/deinterleave
intrinsics - this is mainly to show what we're up against :(

First half of #234626
DeltaFile
+29,293-0llvm/test/CodeGen/X86/vector-interleave7-i16.ll
+29,228-0llvm/test/CodeGen/X86/vector-interleaved7-i8.ll
+27,225-0llvm/test/CodeGen/X86/vector-interleave7-i32.ll
+26,140-0llvm/test/CodeGen/X86/vector-deinterleave7-i8.ll
+25,861-0llvm/test/CodeGen/X86/vector-deinterleave8-i64.ll
+25,769-0llvm/test/CodeGen/X86/vector-deinterleave7-i16.ll
+163,516-050 files not shown
+746,725-056 files

LLVM/project 4ab8787 — flang/include/flang/Optimizer/Builder/Runtime Allocatable.h, flang/lib/Lower ConvertCall.cpp

[flang][cuda] Release allocatable function results with their allocator (#239042)

Under `-gpu=unified`, a plain allocatable function result gets the
unified allocator, so the callee allocates it with that allocator. The
caller still moved the result into an `hlfir.expr`, whose buffer is
released with an inlined `free`, so a program like `s = trim(f())` with
a `character(:), allocatable` result crashed in `free()`.

A result with a CUDA data attribute was already kept as a variable and
released with the CUDA-aware deallocation (209945). This extends that
path to every allocatable result under `-gpu=unified`. The cleanup of a
result that must be destroyed (a derived type with allocatable
components or a final procedure) had the same problem for both kinds of
result, because it always freed the result inline. It now releases the
storage through `AllocatableDeallocateNoFinal`, which uses the allocator
recorded in the descriptor and does not finalize the result a second
time.

Because such a result is kept as a variable, it is no longer moved into

    [5 lines not shown]
DeltaFile
+267-0flang/test/Lower/CUDA/cuda-gpu-unified-func-result.cuf
+71-18flang/lib/Lower/ConvertCall.cpp
+26-0flang/test/Lower/CUDA/cuda-managed-func-result.cuf
+15-0flang/lib/Optimizer/Builder/Runtime/Allocatable.cpp
+6-0flang/include/flang/Optimizer/Builder/Runtime/Allocatable.h
+385-185 files

OPNSense/core 1d8668f — src/opnsense/mvc/app/controllers/OPNsense/Auth/Api UserController.php, src/opnsense/mvc/app/controllers/OPNsense/Auth/forms dialogPriv.xml dialogUser.xml

System: Access - add "authority" option to ACLs (#11160)

(cherry picked from commit 107eb1ea69a147b4d3337670a968acb58f909d89)
(cherry picked from commit 109f23375c50edc433b2277663262901191be48d)
DeltaFile
+65-26src/opnsense/mvc/app/models/OPNsense/Core/ACL.php
+15-5src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.php
+13-1src/opnsense/mvc/app/controllers/OPNsense/Auth/Api/UserController.php
+8-0src/opnsense/mvc/app/controllers/OPNsense/Auth/forms/dialogUser.xml
+7-0src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
+5-0src/opnsense/mvc/app/controllers/OPNsense/Auth/forms/dialogPriv.xml
+113-322 files not shown
+117-328 files

OPNSense/core 6e638a9 — src/opnsense/mvc/app/models/OPNsense/Core ACL.php

System: Access: Groups - implement "source networks" check in hasPrivilege(), addendum to https://github.com/opnsense/core/issues/8754

PR: GHSA-2f7g-25f3-55v7
(cherry picked from commit 20504330acfe8e54bd21e5bb97e451e37f95c343)
DeltaFile
+3-2src/opnsense/mvc/app/models/OPNsense/Core/ACL.php
+3-21 files

LLVM/project a1333ad — clang/docs ReleaseNotes.md, clang/lib/Sema AnalysisBasedWarnings.cpp

[Clang] Fix false-positive fallthrough warning (#234848)

substatement of a case label can be wrapped in an AttributedStmt when
attributes like [[likely]] or [[unlikely]] are used. Because of this,
directly comparing the substatement pointer with the next block's label
can fail even when they refer to the same underlying case label. I put
helper function stripAttributedStmts() to unwrap nested AttributedStmt
and return underlying statement and used it in the comparisons for
SwitchCase and LabelStmt in checkFallThroughIntoBlock() to get correct
comparision check even with attrbuted labels.

- Added regression tests in
`clang/test/SemaCXX/switch-implicit-fallthrough.cpp` for the reported
issue.


#LLM  usage

I used LLM to help understand the existing Clang code, investigate the

    [4 lines not shown]
DeltaFile
+81-0clang/test/SemaCXX/switch-implicit-fallthrough.cpp
+11-2clang/lib/Sema/AnalysisBasedWarnings.cpp
+4-0clang/docs/ReleaseNotes.md
+96-23 files

LLVM/project 0bd6ddc — llvm/include/llvm/CodeGen Rematerializer.h, llvm/lib/Target/AMDGPU GCNSchedStrategy.h GCNRematStrategy.h

[AMDGPU][CodeGen] Move rematerialization strategy out of scheduler (NFC) (#238850)

This un-ties the rematerialization strategy based on the
target-independent `Rematerializer` from the `PreRARematStage`, allowing
its use at different points in the pipeline and making future changes to
the strategy easier thanks to better separation of concerns. The
strategy is moved as-is with no functional changes at the moment.
DeltaFile
+64-562llvm/lib/Target/AMDGPU/GCNSchedStrategy.cpp
+557-0llvm/lib/Target/AMDGPU/GCNRematStrategy.cpp
+336-0llvm/lib/Target/AMDGPU/GCNRematStrategy.h
+12-196llvm/lib/Target/AMDGPU/GCNSchedStrategy.h
+8-8llvm/test/CodeGen/AMDGPU/machine-scheduler-sink-trivial-remats-debug.mir
+2-2llvm/include/llvm/CodeGen/Rematerializer.h
+979-7682 files not shown
+981-7698 files

OPNSense/core 109f233 — src/opnsense/mvc/app/models/OPNsense/Core/ACL ACL.xml

system: page-all is of unrestricted authority
DeltaFile
+1-0src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
+1-01 files

OpenBSD/src UkMcHjr — share/man/man7 securelevel.7

   securelevel 2 doesn't try to prevent pf ruleset changes any more
VersionDeltaFile
1.33+2-5share/man/man7/securelevel.7
+2-51 files

LLVM/project c84ebe2 — llvm/test/Transforms/StructurizeCFG hoist-zerocost-multiple-rejections.ll

Revert "[AMDGPU][NFC] precommit test for StructurizeCFG hoist and replace els…"

This reverts commit 47acf9b1e2d2770bcb9a6f6f43c655bf710a3345.
DeltaFile
+0-1,664llvm/test/Transforms/StructurizeCFG/hoist-zerocost-multiple-rejections.ll
+0-1,6641 files

OpenBSD/src Fjol6Gn — sys/net pf_ioctl.c

   stop trying to refuse a whole bunch of ioctls when securelevel > 1, which
   was advertised as "pf filter and NAT rules may not be altered" - however,
   there are numerous other ways, like turning pf of per-interface using set
   skip, removing/adding interfaces from/to groups etc etc etc
   root is root, period. pf doesn't have anything securelevel-dependent now.
   "set skip" reported by acts1631kjv at proton
   support deraadt, ok sashan claudio sthen
VersionDeltaFile
1.437+1-57sys/net/pf_ioctl.c
+1-571 files

LLVM/project 61f8db5 — llvm/test/CodeGen/AArch64/GlobalISel invoke-result-phi.ll

[GlobalISel][AArch64] address post-merge comments

from https://github.com/llvm/llvm-project/pull/234603
DeltaFile
+1-2llvm/test/CodeGen/AArch64/GlobalISel/invoke-result-phi.ll
+1-21 files

FreeBSD/src 6ccf743 — lib/msun/src s_nexttowardf.c s_nexttoward.c

msun: fix behaviour of nextafter*() and nexttoward*() for MAX value

For an edge case at an extreme, e.g., nextafter(-DBL_MAX,-INFINITY)
do not return x+x.  Instead, evaluate x+x and assign it to a volatile
to raise an exception, and then fall through to return the correct
result in current rounding mode.

PR:             299389
MFC after:      6 days (for inclusion into releng/15.2)

(cherry picked from commit 1fb5d8265bc4bbbf1f5bc79cc1d2a7f280b446b2)
DeltaFile
+1-1lib/msun/src/s_nexttowardf.c
+1-1lib/msun/src/s_nexttoward.c
+1-1lib/msun/src/s_nextafterl.c
+1-1lib/msun/src/s_nextafterf.c
+1-1lib/msun/src/s_nextafter.c
+5-55 files

FreeBSD/src 42f9265 — lib/msun/src s_nexttowardf.c s_nexttoward.c

msun: fix behaviour of nextafter*() and nexttoward*() for MAX value

For an edge case at an extreme, e.g., nextafter(-DBL_MAX,-INFINITY)
do not return x+x.  Instead, evaluate x+x and assign it to a volatile
to raise an exception, and then fall through to return the correct
result in current rounding mode.

PR:             299389
MFC after:      6 days (for inclusion into releng/15.2)

(cherry picked from commit 1fb5d8265bc4bbbf1f5bc79cc1d2a7f280b446b2)
DeltaFile
+1-1lib/msun/src/s_nexttowardf.c
+1-1lib/msun/src/s_nexttoward.c
+1-1lib/msun/src/s_nextafterl.c
+1-1lib/msun/src/s_nextafterf.c
+1-1lib/msun/src/s_nextafter.c
+5-55 files