FreeBSD/ports 774b6e7audio/pipewire-spa-oss-ng Makefile distinfo

audio/pipewire-spa-oss-ng: Update to 0.9.12

Match FreeBSD's scaled PCM secondary-buffer policy and cache
nonuniform silence fills so larger rings remain allocation-free on
the data loop.

Stabilize native timer readiness coverage, harden checked SPA FFI
pointers, and refresh Rust dependencies.
DeltaFile
+29-29audio/pipewire-spa-oss-ng/distinfo
+14-14audio/pipewire-spa-oss-ng/Makefile
+43-432 files

NetBSD/pkgsrc K9piZ0Nnet/terraform-provider-null Makefile, net/terraform-provider-vultr Makefile

   terraform-provider-*: fix path to wip
VersionDeltaFile
1.72+2-2net/terraform-provider-vultr/Makefile
1.73+2-2net/terraform-provider-null/Makefile
+4-42 files

LLVM/project ad3ba45orc-rt/include/orc-rt-internal/bedrock TargetDetails.h, orc-rt/include/orc-rt-internal/support StringExtras.h

[orc-rt] Add include/orc-rt-internal for internal APIs. (#219386)

Headers here are not installed. A prefix directory rather than a
separate include root, so that internality is visible at each #include
site.

Moved in: support/{Endian,StringExtras}.h; orc-rt-utils/CommandLine.h
becomes orc-rt-internal/tools/CommandLine.h, retiring orc-rt-utils/ as a
third include root; and lib/bedrock/{Environment,GDBJITRegistrar,
TargetDetails}.h, so lib/ now holds only translation units and the two
Unix/*.inc fragments. That also removes the last "../" include, and
orc-rt-bedrock-impl-headers, which existed only to expose lib/ for
cross-directory includes.
DeltaFile
+0-264orc-rt/include/orc-rt-utils/CommandLine.h
+264-0orc-rt/include/orc-rt-internal/tools/CommandLine.h
+0-179orc-rt/include/orc-rt/support/StringExtras.h
+179-0orc-rt/include/orc-rt-internal/support/StringExtras.h
+0-51orc-rt/lib/bedrock/TargetDetails.h
+51-0orc-rt/include/orc-rt-internal/bedrock/TargetDetails.h
+494-49424 files not shown
+628-63830 files

LLVM/project 1047073llvm/include/llvm/ADT FoldingSet.h, llvm/unittests/ADT FoldingSet.cpp

[ADT] Fix FoldingSetIterator::operator* pointer adjustment for multiple inheritance (#219349)

b7dc8e356b89 replaced the void*->FoldingSetNode*->T* cast in
FoldingSetIteratorImpl::getNode() with a direct void*->T* cast, dropping
the base-to-derived adjustment needed when FoldingSetNode isn't T's
first base. Restore the FoldingSetNode* intermediate cast.

Found via a downstream user with a multiply-inherited FoldingSetNode
type that iterates its FoldingSet directly (via find_if over
begin()/end()), corrupting the dereferenced pointer and crashing.

---------

Co-authored-by: Claude Sonnet 5 <noreply at anthropic.com>
DeltaFile
+17-0llvm/unittests/ADT/FoldingSet.cpp
+1-1llvm/include/llvm/ADT/FoldingSet.h
+18-12 files

NetBSD/src jTkV5rwdistrib/sets/lists/tests mi, tests/kernel Makefile h_getstack.c

   Test various methods of getting the process's stack base and size.

   And test the effect of fork, vfork, failed execve, and posix_spawn on
   them.

   PR kern/60653: posix_spawn(3) causes incorrect stack base information
VersionDeltaFile
1.22+582-2tests/kernel/t_signal_and_sp.c
1.1+244-0tests/kernel/getstack.c
1.1+44-0tests/kernel/getstack.h
1.1+39-0tests/kernel/h_getstack.c
1.99+7-1tests/kernel/Makefile
1.1429+2-1distrib/sets/lists/tests/mi
+918-41 files not shown
+920-57 files

NetBSD/src LL4tVKcsys/kern exec_script.c kern_exec.c

   exec: Free struct exec_package::ep_emul_arg in more error paths.

   We should really formalize the destruction path for these temporary
   exec data structures; these error branches are all tangled messes of
   spaghetti.

   PR kern/60657: panic: kernel diagnostic assertion "epp->ep_emul_arg
   == NULL" failed: file
   "/home/riastradh/netbsd/current/src/sys/kern/kern_exec.c", line 535

   Test case forthcoming (it would panic the testbed) as part of

   PR kern/60653: posix_spawn(3) causes incorrect stack base information

   which is how I stumbled upon this.
VersionDeltaFile
1.534+27-2sys/kern/kern_exec.c
1.86+11-2sys/kern/exec_script.c
+38-42 files

FreeBSD/ports 1973a23devel/py-setuptools-gettext distinfo Makefile, devel/py-setuptools-gettext/files patch-setuptools__gettext_____init____.py

devel/py-setuptools-gettext: Update to 0.1.18

- Switch to DISTVERSION to follow Porter's Handbook:
  https://docs.freebsd.org/en/books/porters-handbook/book/#makefile-versions
- Switch to pep517
- Add tests (pytest)
- Fix tests requirement by patch: "Fix import failure with setuptools < 69.0 (setuptools.modified)"
- Take maintainership

ChangeLog:      https://github.com/breezy-team/setuptools-gettext/releases/tag/v0.1.18
PR:             297482
Reviewed by:    michaelo
DeltaFile
+16-0devel/py-setuptools-gettext/files/patch-setuptools__gettext_____init____.py
+8-5devel/py-setuptools-gettext/Makefile
+3-3devel/py-setuptools-gettext/distinfo
+27-83 files

FreeBSD/ports c75ed9esysutils/duplicity distinfo Makefile, sysutils/duplicity/files patch-setup.py extra-patch-setup.py

sysutils/duplicity: Update to 3.2.0.2

- Remove NLS option to avoid extra patch

ChangeLog: https://duplicity.gitlab.io/stable/CHANGELOG.html
DeltaFile
+0-31sysutils/duplicity/files/extra-patch-setup.py
+25-6sysutils/duplicity/files/patch-pyproject.toml
+0-21sysutils/duplicity/files/patch-setup.py
+6-6sysutils/duplicity/Makefile
+3-3sysutils/duplicity/distinfo
+34-675 files

FreeBSD/ports 12861c7editors/neovim-qt Makefile distinfo

editors/neovim-qt: Update to 0.2.20

- Upstream defaults to Qt6 now.

ChangeLog: https://github.com/equalsraf/neovim-qt/releases/tag/v0.2.20
DeltaFile
+3-3editors/neovim-qt/distinfo
+1-2editors/neovim-qt/Makefile
+4-52 files

FreeBSD/ports aabcdb8devel/gitaly distinfo, net/gitlab-agent distinfo

www/gitlab: security and patch update to 19.3.1

Changes:        https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-1-released/?nav=19.3.1
Security:       161b1c49-a29b-11f1-a883-2cf05da270f3
DeltaFile
+13-13devel/gitaly/distinfo
+6-6www/gitlab/distinfo
+5-5www/gitlab-workhorse/distinfo
+5-5www/gitlab-pages/distinfo
+5-5net/gitlab-agent/distinfo
+1-1www/gitlab/Makefile.common
+35-356 files

FreeBSD/ports 1afb7eedevel/sbt Makefile distinfo

devel/sbt: update to 2.0.8 release
DeltaFile
+3-3devel/sbt/distinfo
+1-1devel/sbt/Makefile
+4-42 files

LLVM/project c3a8b92llvm/lib/Target/RISCV RISCVTargetTransformInfo.cpp, llvm/test/Transforms/InstCombine/RISCV riscv-vsetvlimax-range.ll riscv-vsetvli-range.ll

[RISCV] Attach VLMAX range attribute for vsetvli/vsetvlimax in InstCombine

Attach a range return attribute to riscv_vsetvli/vsetvlimax so the generic
value analyses can reason about the result via CallBase::getRange(), using the
subtarget's real VLEN instead of the architectural maximum.

VLMAX = VLEN * LMUL / SEW. vsetvlimax returns exactly VLMAX; vsetvli returns
0 <= vl <= min(AVL, VLMAX), which equals AVL only when AVL cannot exceed the
smallest possible VLMAX. Otherwise vl may shrink below VLMAX (to 0 at runtime),
so we only claim the VLMAX-derived upper bound.

Fixes #217784.

Assisted-by: TRAE CLI (Opus 4.8)

Reviewers: efriedma-quic, preames, lenary, lukel97

Reviewed By: lukel97

Pull Request: https://github.com/llvm/llvm-project/pull/218652
DeltaFile
+125-0llvm/test/Transforms/InstCombine/RISCV/riscv-vsetvli-range.ll
+107-0llvm/test/Transforms/InstCombine/RISCV/riscv-vsetvlimax-range.ll
+59-0llvm/lib/Target/RISCV/RISCVTargetTransformInfo.cpp
+291-03 files

NetBSD/src VI1buQWsys/ufs/lfs lfs_vfsops.c

   Move lfs_free_orphans() later in the mount sequence to avoid deadlock.
VersionDeltaFile
1.401+5-5sys/ufs/lfs/lfs_vfsops.c
+5-51 files

HardenedBSD/src 1e12d09sbin/mount_nullfs mount_nullfs.c, sys/kern vfs_mount.c vfs_cache.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+20-26usr.bin/fortune/fortune/fortune.c
+13-3usr.bin/fortune/fortune/fortune.6
+4-4sys/kern/kern_rangelock.c
+3-3sys/kern/vfs_mount.c
+3-3sys/kern/vfs_cache.c
+3-3sbin/mount_nullfs/mount_nullfs.c
+46-423 files not shown
+52-469 files

HardenedBSD/src 6b40c70share/man/man4 nvme.4 iflib.4, sys/dev/bnxt/bnxt_en if_bnxt.c

Merge remote-tracking branch 'rad/hardened/15-stable/main' into hardened/15-stable/pledge
DeltaFile
+203-42sys/net/iflib.c
+59-0share/man/man4/iflib.4
+38-18share/man/man4/nvme.4
+7-3sys/dev/enetc/if_enetc.c
+7-2sys/dev/bnxt/bnxt_en/if_bnxt.c
+5-3sys/dev/vmware/vmxnet3/if_vmx.c
+319-683 files not shown
+325-709 files

HardenedBSD/src 991ec8bsbin/mount_nullfs mount_nullfs.c, sys/kern vfs_mount.c vfs_cache.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+20-26usr.bin/fortune/fortune/fortune.c
+13-3usr.bin/fortune/fortune/fortune.6
+4-4sys/kern/kern_rangelock.c
+3-3sys/kern/vfs_mount.c
+3-3sys/kern/vfs_cache.c
+3-3sbin/mount_nullfs/mount_nullfs.c
+46-423 files not shown
+52-469 files

HardenedBSD/src da0fe99share/man/man4 nvme.4 iflib.4, sys/dev/bnxt/bnxt_en if_bnxt.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+203-42sys/net/iflib.c
+59-0share/man/man4/iflib.4
+38-18share/man/man4/nvme.4
+7-3sys/dev/enetc/if_enetc.c
+7-2sys/dev/bnxt/bnxt_en/if_bnxt.c
+5-3sys/dev/vmware/vmxnet3/if_vmx.c
+319-683 files not shown
+325-709 files

HardenedBSD/ports 65fd885net/croc distinfo, net/freerdp3 Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+41-0security/vuxml/vuln/2026.xml
+24-6net/freerdp3/Makefile
+7-7www/redmine61/Makefile
+5-5net/redpanda-connect/distinfo
+5-5net/nats-server/distinfo
+5-5net/croc/distinfo
+87-2819 files not shown
+130-6925 files

LLVM/project 3b17fa2lld/MachO ObjC.h ObjC.cpp, lld/test/MachO objc-category-merging-minimal.s objc-category-merging-swift-protocol-conformance.s

[lld-macho] Remove symbol name assumptions from category merging (#217276)

The category merger required every __objc_catlist entry to point to a
symbol named with the `__OBJC_$_CATEGORY_` or `__CATEGORY_` prefix and
hit llvm_unreachable otherwise. Such names cannot be relied upon: `ld
-r` rewrites the names of category body symbols to generated names like
`l002`, and linking its output crashes lld.

The merger also used symbol names to predict the layout of protocol
lists, which is fragile even for conventionally named inputs. The repro
https://github.com/llvm/llvm-project/pull/95124#issuecomment-4267900795
fired the "Protocol list does not match expected size" assertion.

Remove the category symbol name requirement, and drop the layout
assertion together with the SourceLanguage machinery.
DeltaFile
+394-0lld/test/MachO/objc-category-merging-swift-protocol-conformance.s
+15-72lld/MachO/ObjC.cpp
+6-0lld/test/MachO/objc-category-merging-minimal.s
+0-3lld/MachO/ObjC.h
+415-754 files

LLVM/project fb9a86cmlir/include/mlir/Dialect/LLVMIR NVVMOps.td, mlir/lib/Dialect/LLVMIR/IR NVVMDialect.cpp

[MLIR][NVVM] Add S2G and Reduce override NVVM Dialect ops (#216481)

This change adds S2G and Reduction NVVM Dialect operations with tensor
map override capability.
DeltaFile
+371-0mlir/test/Target/LLVMIR/nvvm/tma_store_reduce_override.mlir
+211-0mlir/lib/Dialect/LLVMIR/IR/NVVMDialect.cpp
+179-0mlir/include/mlir/Dialect/LLVMIR/NVVMOps.td
+153-0mlir/test/Target/LLVMIR/nvvm/tma_store_override.mlir
+66-0mlir/test/Target/LLVMIR/nvvm/nvvmir-invalid/tma_store_override_invalid.mlir
+59-0mlir/test/Target/LLVMIR/nvvm/nvvmir-invalid/tma_reduce_override_invalid.mlir
+1,039-06 files

OpenBSD/ports vstBI4xsecurity/nss Makefile distinfo

   security/nss: update to 3.128. will be required for firefox 156.

   see https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_128.html
VersionDeltaFile
1.177+2-2security/nss/distinfo
1.218+1-1security/nss/Makefile
+3-32 files

LLVM/project 6e170cebolt/lib/Target/RISCV RISCVMCPlusBuilder.cpp, bolt/test/RISCV plt-call.test

[BOLT][RISCV] Implement indirect PLT calls (#219184)

This patch implements `MCPlusBuilder::createIndirectPLTCall` for RISC-V,
enabling BOLT's `--plt=hot` and `--plt=all` optimizations for RISC-V
binaries.

The PLT call pass replaces direct calls and tail calls to PLT entries
with indirect calls through the corresponding resolved GOT slot. The
generated sequence is:

    auipc  t3, %pcrel_hi(target at GOT)
    l[dw]  t3, %pcrel_lo(.Lpcrel_hi)(t3)
    jalr   ra, t3, 0
DeltaFile
+53-0bolt/lib/Target/RISCV/RISCVMCPlusBuilder.cpp
+44-0bolt/test/RISCV/plt-call.test
+97-02 files

LLVM/project 2876d94llvm/lib/Target/WebAssembly WebAssemblyISelLowering.cpp, llvm/test/CodeGen/WebAssembly f16-intrinsics.ll

[WebAssembly] Expand v8f16 SELECT_CC (#218922)

Follow up for #213280 (read
https://github.com/llvm/llvm-project/pull/213280#discussion_r3797603654)

Mark `v8f16 SELECT_CC` for expansion so scalar comparison-based selects
lower through the existing comparison and `v128.select` patterns
DeltaFile
+32-0llvm/test/CodeGen/WebAssembly/f16-intrinsics.ll
+2-2llvm/lib/Target/WebAssembly/WebAssemblyISelLowering.cpp
+34-22 files

LLVM/project 49f7deaorc-rt/include/orc-rt/bedrock Error.h SimplePackedSerialization.h, orc-rt/include/orc-rt/support Error.h SimplePackedSerialization.h

[orc-rt] Split headers into support/ and bedrock/ layers. NFC. (#219374)

Follow-up to 8c7563a40a5b, which nested the runtime's headers under
include/orc-rt/bedrock/ and noted that library-neutral headers would
later be split back out.

The split names a layer -- who may include whom. support/ holds
vocabulary and utilities that depend on nothing else in orc-rt; bedrock/
holds the runtime components (Session, Service, the memory map, the
dylib manager, the SPS controller interfaces) and may include support/.
SPIRE will be able to include both. orc-rt-c/ gains the same layering.

Note that support/ is a layer inside the bedrock library, not a separate
one: Error.cpp and RTTI.cpp still compile into orc-rt-bedrock.

Also folded in: bedrock/sps-ci/ -> bedrock/sps/ in both include/ and
lib/; include guards derived from each header's path, as LLVM does
(ORC_RT_SUPPORT_ERROR_H); test/unit/ mirrored onto the new layout, with
cross-layer test helpers left at its root; test-target FOLDER properties

    [3 lines not shown]
DeltaFile
+0-1,194orc-rt/test/unit/SessionTest.cpp
+1,194-0orc-rt/test/unit/bedrock/SessionTest.cpp
+0-826orc-rt/include/orc-rt/bedrock/SimplePackedSerialization.h
+826-0orc-rt/include/orc-rt/support/SimplePackedSerialization.h
+0-714orc-rt/include/orc-rt/bedrock/Error.h
+714-0orc-rt/include/orc-rt/support/Error.h
+2,734-2,734236 files not shown
+16,547-16,529242 files

LLVM/project 5715274mlir/lib/Dialect/SPIRV/Transforms SPIRVConversion.cpp, mlir/test/Conversion/MemRefToSPIRV memref-to-spirv.mlir bitwidth-emulation.mlir

[mlir][SPIRV] Fix `StorageBuffer` access conversion for emulated i16 (#218693)

Follows up on commit 202ece6. In the absence of `Int16` and
`StorageBuffer16BitAccess` in the target, `i16` isn't any different from
byte & sub-byte types. As exposed by downstream smoke tests of the IREE
project, an edge case where this causes issues is a 0/1-rank memref.
Semantically:
```
memref<i16>  ->  ptr<struct<array<1 x i32>>>
```
Since the array lengths are the same in the absence of actual packing,
just the index bounds check doesn't catch this and `InBoundsAccessChain`
still gets chosen. In the end, the memref op fails to lower through the
same restriction in `MemRefToSPIRV` that the original change apparently
had to work around - only `AccessChain` is expected there.

As a more general criterion, the change just compares array the element
types and picks `AccessChain` upon mismatch.


    [6 lines not shown]
DeltaFile
+17-19mlir/lib/Dialect/SPIRV/Transforms/SPIRVConversion.cpp
+20-0mlir/test/Conversion/MemRefToSPIRV/bitwidth-emulation.mlir
+6-1mlir/test/Conversion/MemRefToSPIRV/memref-to-spirv.mlir
+43-203 files

LLVM/project fe5a382llvm/lib/MC/MCParser AsmParser.cpp

[MCParser] Fix some bound checking when scanning macro body (#219367)
DeltaFile
+5-5llvm/lib/MC/MCParser/AsmParser.cpp
+5-51 files

OPNSense/core c303e9dsrc/etc/inc filter.inc, src/etc/inc/plugins.inc.d openssh.inc

locking: make sure to add +e [CLOEXEC] so locks can't be inherited by child processes, for https://github.com/opnsense/core/issues/10807
DeltaFile
+1-1src/opnsense/mvc/app/models/OPNsense/Interfaces/NetworkInterface.php
+1-1src/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php
+1-1src/etc/inc/plugins.inc.d/openssh.inc
+1-1src/etc/inc/filter.inc
+4-44 files

HardenedBSD/src 2c68ad4lib/libutil mntopts.c, sbin/mount_nullfs mount_nullfs.c mount_nullfs.8

nullfs: Allow VSOCK to be mounted on top of another VSOCK

In the world of containers, mounting a unix(4) socket is a common
practice to allow communication between processes within containers.
For example, both Podman and Docker can expose a unix(4) socket,
and that same unix(4) socket can be mounted as a file accessible
to a process inside a container, allowing that application to control
Podman or Docker. Another example is PHP-FPM with NGINX, where,
instead of using TCP/IP for communication between containers, a
unix(4) socket is sufficient.

However, nullfs(4) and all related components do not allow mounting
a VSOCK on top of another. The current workaround involves creating
the socket in a directory and mounting that directory. This is an
option, though it does not provide a good user experience compared
to directly mounting a VSOCK on top of another, since the application
that creates the socket may create other sockets in that directory,
and the user may not wish to share them, or, worse yet, applications
that create unix(4) sockets may not provide any authentication at

    [7 lines not shown]
DeltaFile
+3-3sys/kern/vfs_mount.c
+3-3sys/kern/vfs_cache.c
+3-3sbin/mount_nullfs/mount_nullfs.c
+4-2sbin/mount_nullfs/mount_nullfs.8
+1-1sys/fs/nullfs/null_vfsops.c
+1-1lib/libutil/mntopts.c
+15-136 files

FreeBSD/src 2c68ad4lib/libutil mntopts.c, sbin/mount_nullfs mount_nullfs.c mount_nullfs.8

nullfs: Allow VSOCK to be mounted on top of another VSOCK

In the world of containers, mounting a unix(4) socket is a common
practice to allow communication between processes within containers.
For example, both Podman and Docker can expose a unix(4) socket,
and that same unix(4) socket can be mounted as a file accessible
to a process inside a container, allowing that application to control
Podman or Docker. Another example is PHP-FPM with NGINX, where,
instead of using TCP/IP for communication between containers, a
unix(4) socket is sufficient.

However, nullfs(4) and all related components do not allow mounting
a VSOCK on top of another. The current workaround involves creating
the socket in a directory and mounting that directory. This is an
option, though it does not provide a good user experience compared
to directly mounting a VSOCK on top of another, since the application
that creates the socket may create other sockets in that directory,
and the user may not wish to share them, or, worse yet, applications
that create unix(4) sockets may not provide any authentication at

    [7 lines not shown]
DeltaFile
+3-3sys/kern/vfs_mount.c
+3-3sys/kern/vfs_cache.c
+3-3sbin/mount_nullfs/mount_nullfs.c
+4-2sbin/mount_nullfs/mount_nullfs.8
+1-1sys/fs/nullfs/null_vfsops.c
+1-1lib/libutil/mntopts.c
+15-136 files

LLVM/project 57f293fllvm/lib/Target/X86 X86InstrPredicates.td X86InstrFragments.td, llvm/test/CodeGen/X86 adox-flags.ll adox.ll

[X86] Emit adox instead of adc for overflow add (#216609)

ADOX is like ADC but with OF instead of the CF and can only be encoded
with a pair of 32 or 64 bit regs.

Basically this applies in cases where the overflow flag is being added.
DeltaFile
+273-0llvm/test/CodeGen/X86/adox.ll
+137-0llvm/test/CodeGen/X86/adox-flags.ll
+67-0llvm/lib/Target/X86/X86ISelLowering.cpp
+32-1llvm/lib/Target/X86/X86InstrArithmetic.td
+1-0llvm/lib/Target/X86/X86InstrPredicates.td
+1-0llvm/lib/Target/X86/X86InstrFragments.td
+511-16 files