FreeNAS/freenas dec2e3bsrc/middlewared/middlewared/api/v27_0_0 truenas.py

add api schema
DeltaFile
+10-0src/middlewared/middlewared/api/v27_0_0/truenas.py
+10-01 files

FreeNAS/freenas 5627091src/middlewared/middlewared/plugins/truenas license_utils.py license.py

add truenas.license.fingerprint api
DeltaFile
+31-6src/middlewared/middlewared/plugins/truenas/license_utils.py
+13-0src/middlewared/middlewared/plugins/truenas/license.py
+44-62 files

LLVM/project aeb8969mlir/include/mlir/Dialect/Vector/Transforms VectorRewritePatterns.h, mlir/lib/Dialect/Vector/Transforms VectorUnroll.cpp

[mlir][vector] Skip redundant affine.apply when unrolling transfer ops. (#192700)

Unrolling transfer ops generates affine.apply ops for every
non-broadcasted dimension, even when the offset being added is zero.
Skip these.

Also export sliceTransferIndices to allow downstream projects to call
this method.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply at anthropic.com>
DeltaFile
+33-0mlir/test/Dialect/Vector/vector-transfer-unroll.mlir
+6-8mlir/lib/Dialect/Vector/Transforms/VectorUnroll.cpp
+6-0mlir/include/mlir/Dialect/Vector/Transforms/VectorRewritePatterns.h
+45-83 files

OPNSense/core 41d9295src/opnsense/mvc/app/controllers/OPNsense/Kea/forms dialogSubnet6.xml dialogPDPool6.xml, src/opnsense/mvc/app/models/OPNsense/Kea KeaDhcpv6.php

Hide fields used for static prefix configuration if the subnet and pd_pool are dynamic.
DeltaFile
+25-1src/opnsense/mvc/app/views/OPNsense/Kea/dhcpv6.volt
+2-0src/opnsense/mvc/app/controllers/OPNsense/Kea/forms/dialogSubnet6.xml
+2-0src/opnsense/mvc/app/controllers/OPNsense/Kea/forms/dialogPDPool6.xml
+1-1src/opnsense/mvc/app/models/OPNsense/Kea/KeaDhcpv6.php
+30-24 files

LLVM/project 8b8c271llvm/lib/CodeGen/SelectionDAG SelectionDAG.cpp, llvm/test/CodeGen/RISCV combine-is_fpclass.ll

[DAG] computeKnownFPClass - add ISD::EXTRACT_SUBVECTOR/INSERT_SUBVECTOR handling. (#190378)

This patch implements `ISD::EXTRACT_SUBVECTOR` and
`ISD::INSERT_SUBVECTOR` handling in `SelectionDAG::computeKnownFPClass`.
Fixes: #189586
DeltaFile
+12-45llvm/test/CodeGen/RISCV/combine-is_fpclass.ll
+44-0llvm/lib/CodeGen/SelectionDAG/SelectionDAG.cpp
+56-452 files

FreeNAS/freenas ecc92d9src/middlewared/middlewared/api/v27_0_0 truenas.py

add api schema
DeltaFile
+10-0src/middlewared/middlewared/api/v27_0_0/truenas.py
+10-01 files

FreeNAS/freenas bcff590src/middlewared/middlewared/plugins/truenas license_utils.py license.py

add truenas.license.fingerprint
DeltaFile
+31-6src/middlewared/middlewared/plugins/truenas/license_utils.py
+13-0src/middlewared/middlewared/plugins/truenas/license.py
+44-62 files

LLVM/project 857baf3clang/lib/CIR/CodeGen/Targets AMDGPU.cpp, clang/test/CIR/CodeGenHIP amdgpu-attrs.hip

[CIR][AMDGPU] Set amdgpu_kernel calling convention on HIP kernels (#195381)
DeltaFile
+2-2clang/test/CIR/CodeGenHIP/amdgpu-attrs.hip
+2-1clang/lib/CIR/CodeGen/Targets/AMDGPU.cpp
+4-32 files

LLVM/project 8c77d07llvm/docs LangRef.rst

[LangRef] Clarify requirement for non-pow-2 align bundle (#195631)

Now that null pointers are not necessarily zero pointers, I believe that
`"align"` with a non-power-of-two alignment should be requiring a zero
pointer specifically, not a null pointer.

This is because a zero pointer is aligned for any alignment (which we
can generalize to non-power-of-two alignments), while a -1 null pointer
only has alignment 1.
DeltaFile
+1-1llvm/docs/LangRef.rst
+1-11 files

Dreckly/dreckly 05877begames/jfsw Makefile

jfsw: limit lines to 80 characters
DeltaFile
+4-2games/jfsw/Makefile
+4-21 files

LLVM/project e319841mlir/include/mlir/Dialect/LLVMIR ROCDLOps.td, mlir/test/Dialect/LLVMIR rocdl.mlir

Fix MLIR
DeltaFile
+15-15mlir/test/Dialect/LLVMIR/rocdl.mlir
+15-15mlir/test/Target/LLVMIR/rocdl.mlir
+12-11mlir/include/mlir/Dialect/LLVMIR/ROCDLOps.td
+42-413 files

FreeBSD/ports 4b7d949emulators/Ymir distinfo Makefile, emulators/Ymir/files patch-apps_ymir-sdl3_src_app_ui_windows_about__window.cpp

emulators/Ymir: Update 0.3.0 => 0.3.1

* Upstream removed the Ymir_INCLUDE_PACKAGING build option, so the port
  removes it from CMAKE_OFF.

* Ymir documents all dependencies in its "About" window. This also
  includes the vendored miniz from the vendored libchdr dependency and
  requires the version constant from miniz.h. This library is currently
  not available as a port and the Ymir port unbundles libchdr in the
  first place, which is also configured to use the system-provided libz
  instead of miniz.
  Therefore remove all miniz references to unbreak the build.

Changelog:
https://github.com/StrikerX3/Ymir/releases/tag/v0.3.1

PR:             294992
Sponsored by:   UNIS Labs
DeltaFile
+22-4emulators/Ymir/files/patch-apps_ymir-sdl3_src_app_ui_windows_about__window.cpp
+3-3emulators/Ymir/distinfo
+2-3emulators/Ymir/Makefile
+27-103 files

FreeBSD/ports 9f7221bgraphics/exrtools pkg-plist Makefile

graphics/exrtools: Update to 0.5
DeltaFile
+20-0graphics/exrtools/pkg-plist
+14-3graphics/exrtools/Makefile
+3-2graphics/exrtools/distinfo
+37-53 files

LLVM/project 39761abmlir/docs Tokens.md, mlir/include/mlir/IR CommonTypeConstraints.td BuiltinTypeInterfaces.td

[mlir][IR] Add builtin `TokenTypeInterface`
DeltaFile
+89-0mlir/docs/Tokens.md
+59-0mlir/test/IR/token-type-interface.mlir
+32-0mlir/test/lib/Dialect/Test/TestOps.td
+12-12mlir/test/Dialect/SparseTensor/invalid.mlir
+19-2mlir/include/mlir/IR/CommonTypeConstraints.td
+20-0mlir/include/mlir/IR/BuiltinTypeInterfaces.td
+231-1412 files not shown
+272-3818 files

OPNSense/core 4ae16bcsrc/etc/inc/plugins.inc.d captiveportal.inc

Captive Portal: remove redirection on HTTPS, ditch non-functional pass statement as well

In theory, clients only use HTTP to detect the presence of a portal.
If they were to use HTTPS, the 302 redirect would in most cases
not be accessible, as the certificate presented is most likely not
valid, cutting off the communication before any redirect to a login
page can happen.

The portal itself can and should remain accessible on HTTPS, as this
is the URL the redirect is pointing to. This may be attached to a
valid certificate as well, but the key point is that access to
this URL doesn't strictly need redirection for everything on port
443.

This should prevent clients opening bogus connections to the
captive portal, which consumes a lot of TLS traffic on the network
stack, bogging down lighttpd in bigger setups and creating
a lot of established states in pf.
DeltaFile
+46-47src/etc/inc/plugins.inc.d/captiveportal.inc
+46-471 files

FreeBSD/src 1b149c2usr.sbin/mixer mixer.c mixer.8, usr.sbin/mixer/tests mixer_test.sh

mixer(8): Deprecate some unintuitive control values

This is a follow-up to cc7479d7dc9b ("mixer(8): Improve mute and recsrc
controls"). These deprecated values will be completely removed on
2026-06-15.

Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Reviewed by:    0mp
Pull Request:   https://ron-dev.freebsd.org/FreeBSD/src/pulls/21

(cherry picked from commit a28bb575c89c8de62684419ece1ff5e070e4ce24)
(cherry picked from commit 54922e4ec8909829a7ca8d2158c2a514a06df094)
DeltaFile
+31-17usr.sbin/mixer/mixer.c
+9-11usr.sbin/mixer/mixer.8
+1-17usr.sbin/mixer/tests/mixer_test.sh
+41-453 files

FreeBSD/ports e3ff142x11/i3lock-color Makefile distinfo

x11/i3lock-color: Update 2.13.c.4 => 2.13.c.5, fix build

Changelog:
github.com/Raymo111/i3lock-color/releases/tag/2.13.c.5

Port changes:
* Remove unneeded GNU_CONFIGURE_MANPREFIX.
* Fix build by removing redundant STRIP_CMD.
* Switch from GCC to system clang.
* Add bash completions for bash and zsh.
* Pet portfmt.

PR:             294968
Reported by:    Dan Kotowski
Approved by:    vvd (co-mentor)
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q2

(cherry picked from commit bbdc019af2a94372d0355e17b82819fef453a112)
DeltaFile
+23-10x11/i3lock-color/Makefile
+3-3x11/i3lock-color/distinfo
+26-132 files

FreeBSD/ports bbdc019x11/i3lock-color Makefile distinfo

x11/i3lock-color: Update 2.13.c.4 => 2.13.c.5, fix build

Changelog:
github.com/Raymo111/i3lock-color/releases/tag/2.13.c.5

Port changes:
* Remove unneeded GNU_CONFIGURE_MANPREFIX.
* Fix build by removing redundant STRIP_CMD.
* Switch from GCC to system clang.
* Add bash completions for bash and zsh.
* Pet portfmt.

PR:             294968
Reported by:    Dan Kotowski
Approved by:    vvd (co-mentor)
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q2
DeltaFile
+23-10x11/i3lock-color/Makefile
+3-3x11/i3lock-color/distinfo
+26-132 files

FreeBSD/src 8acc4c1contrib/libc-vis vis.3

vis.3: Try to better describe VIS_SAFE

The current text fails to draw the reader's attention to the fact that
VIS_SAFE essentially exempts certain characters from being encoded.

While here, fix some markup nits.

MFC after:      1 week
Reviewed by:    markj
Differential Revision:  https://reviews.freebsd.org/D56716
DeltaFile
+19-13contrib/libc-vis/vis.3
+19-131 files

FreeBSD/ports ad4b544sysutils/mixer Makefile

sysutils/mixer: Retire port

There is /etc/rc.d/mixer already, and does the same thing.

PR:             294661
Sponsored by:   The FreeBSD Foundation
Approved by:    mwm at mired.org (maintainer timeout, 2 weeks), diizzy
DeltaFile
+4-0sysutils/mixer/Makefile
+4-01 files

Dreckly/dreckly 7e4e08agames/jfsw Makefile distinfo, games/jfsw/patches patch-jfbuild_include_compat.h patch-jfbuild_src_mmulti.c

jfsw: Initial import.
DeltaFile
+59-0games/jfsw/Makefile
+30-0games/jfsw/patches/patch-jfbuild_include_compat.h
+18-0games/jfsw/distinfo
+18-0games/jfsw/patches/patch-jfbuild_src_mmulti.c
+15-0games/jfsw/patches/patch-jfaudiolib_Makefile
+15-0games/jfsw/patches/patch-jfaudiolib_src_midi.c
+155-05 files not shown
+190-011 files

NetBSD/pkgsrc-wip 83d4aa4plasma6-kwin Makefile

plasma6-kwin: libopeninput now in devel
DeltaFile
+1-1plasma6-kwin/Makefile
+1-11 files

FreeBSD/src e3fc367krb5/include autoconf.h, krb5/util/build-tools krb5-config.sh Makefile

krb5: Adjust additional version strings

Fixes:          736e411a737b

(cherry picked from commit c64ee36e5d09ecee4ce4951047014c8461734fb5)
DeltaFile
+2-2krb5/include/autoconf.h
+1-1krb5/util/build-tools/krb5-config.sh
+1-0krb5/util/build-tools/Makefile
+4-33 files

FreeBSD/src ea93554krb5 Makefile.inc

krb5: Adjust version to 1.22.2

Fixes:          736e411a737b
(cherry picked from commit 8f46ba065143d9d89968a20b23844287d54c04a2)
DeltaFile
+1-1krb5/Makefile.inc
+1-11 files

FreeBSD/src 919b107crypto/krb5 README, crypto/krb5/src configure patchlevel.h

krb5: import MIT 1.22.2

Merge commit '90c687295e2d62f9411fc5b571f5af4e8ee187a7'

(cherry picked from commit 736e411a737b9f57c1303e6d15c5afd4f63af0d3)
DeltaFile
+14-23crypto/krb5/src/lib/krb5/ccache/cc_mslsa.c
+23-1crypto/krb5/README
+10-10crypto/krb5/src/configure
+8-0crypto/krb5/src/lib/krb5/ccache/cc_file.c
+3-3crypto/krb5/src/patchlevel.h
+2-2crypto/krb5/src/man/krb5kdc.man
+60-3934 files not shown
+120-9740 files

FreeBSD/src a22ad16crypto/krb5/src/lib/gssapi/spnego negoex_util.c

krb5: Fix two NegoEx parsing vulnerabilities

Bring in upstream commit 2e75f0d93 fixing two CVEs. Upstream commit
log is:

 In parse_nego_message(), check the result of the second call to
 vector_base() before dereferencing it.  In parse_message(), check for
 a short header_len to prevent an integer underflow when calculating
 the remaining message length.

 Reported by Cem Onat Karagun.

 CVE-2026-40355:

 In MIT krb5 release 1.18 and later, if an application calls
 gss_accept_sec_context() on a system with a NegoEx mechanism
 registered in /etc/gss/mech, an unauthenticated remote attacker can
 trigger a null pointer dereference, causing the process to terminate.


    [10 lines not shown]
DeltaFile
+6-1crypto/krb5/src/lib/gssapi/spnego/negoex_util.c
+6-11 files

LLVM/project 3b9f8f0clang/include/clang/Analysis AnalysisDeclContext.h, clang/lib/Analysis AnalysisDeclContext.cpp

[analyzer][NFC] Merge `BlockInvocationContext` class into `StackFrameContext` (#194857)

At the moment, the execution stack in the analyzer is represented with
the `LocationContext` base class and its two sub-classes
`StackFrameContext` and `BlockInvocationContext`. This hierarchy,
however, is more complicated than necessary and, in issue #190973, a
roadmap was created to reduce this hierarchy down to just a single
`StackFrame` class.

This patch implements the first five steps of that roadmap.
Specifically, the functionality of `BlockInvocationContext` was merged
into the `StackFrameContext` class and the `BlockInvocationContext`
class was removed together with its usages.
DeltaFile
+22-67clang/include/clang/Analysis/AnalysisDeclContext.h
+10-51clang/lib/Analysis/AnalysisDeclContext.cpp
+9-9clang/lib/StaticAnalyzer/Core/MemRegion.cpp
+7-10clang/lib/StaticAnalyzer/Core/ExprEngineCallAndReturn.cpp
+0-12clang/lib/StaticAnalyzer/Core/ExprEngineCXX.cpp
+1-1clang/lib/StaticAnalyzer/Core/CallEvent.cpp
+49-1506 files

NetBSD/pkgsrc-wip 360f828. Makefile, tex-tikz-timing Makefile PLIST

tex-tikz-timing: remove - now in graphics/tex-tikz-timing
DeltaFile
+0-19tex-tikz-timing/Makefile
+0-13tex-tikz-timing/PLIST
+0-6tex-tikz-timing/DESCR
+0-5tex-tikz-timing/distinfo
+0-3tex-tikz-timing/COMMIT_MSG
+0-1Makefile
+0-476 files

FreeNAS/freenas 1b397f1src/middlewared/middlewared/etc_files/ipa ca.crt.py, src/middlewared/middlewared/plugins/certificate create_handlers.py crud.py

Fix longstring usages
DeltaFile
+11-24src/middlewared/middlewared/plugins/certificate/create_handlers.py
+5-11src/middlewared/middlewared/plugins/certificate/crud.py
+4-7src/middlewared/middlewared/plugins/truenas_connect/acme.py
+1-4src/middlewared/middlewared/plugins/directoryservices_/ipa_join_mixin.py
+2-2src/middlewared/middlewared/plugins/kmip/update.py
+1-1src/middlewared/middlewared/etc_files/ipa/ca.crt.py
+24-496 files

FreeNAS/freenas d834b7bsrc/middlewared/middlewared/plugins/tunable crud.py, tests/api2 test_tunables.py

NAS-140882 / 27.0.0-BETA.1 / only update initramfs on value change (#18884)

When a tunable is updated, we only need to regenerate initramfs if the
actual value or enabled state is changed. If someone changes the
comment, there is no reason to regenerate it. Adds a test to validate
this scenario too.
DeltaFile
+30-0tests/api2/test_tunables.py
+11-6src/middlewared/middlewared/plugins/tunable/crud.py
+41-62 files