NetBSD/pkgsrc-wip b9e7f26py-patool TODO

py-patool: Add reference to CVE-2026-29509
DeltaFile
+2-0py-patool/TODO
+2-01 files

NetBSD/pkgsrc-wip 0b43d3bantlr TODO

antlr: Add references to recent CVEs
DeltaFile
+2-0antlr/TODO
+2-01 files

NetBSD/pkgsrc-wip 2f69e52shaarli TODO

shaarli: Add reference to CVE-2026-4882[23]
DeltaFile
+2-1shaarli/TODO
+2-11 files

NetBSD/pkgsrc-wip 7e1ca08py-keras TODO

py-keras: Add reference to CVE-2026-12480
DeltaFile
+1-1py-keras/TODO
+1-11 files

NetBSD/pkgsrc-wip 57a80e8forgejo TODO

forgejo: Add reference to CVE-2026-59102
DeltaFile
+1-1forgejo/TODO
+1-11 files

NetBSD/pkgsrc-wip 1289644electron34 TODO

electron34: Add reference to CVE-2026-54257
DeltaFile
+1-1electron34/TODO
+1-11 files

NetBSD/pkgsrc-wip 217494fdokuwiki TODO

dokuwiki: Add reference to CVE-2026-37106
DeltaFile
+1-1dokuwiki/TODO
+1-11 files

LLVM/project c2b50a1llvm/test/CodeGen/RISCV determine-callee-saves-gpr.mir

[CodeGen] Add tests for `determineCalleeSaves`. (#204855)
DeltaFile
+1,283-0llvm/test/CodeGen/RISCV/determine-callee-saves-gpr.mir
+1,283-01 files

OpenZFS/src e78fa48cmd/zstream zstream_queue.c zstream_chain.c

zstream: multithreading

This PR extends the `zstream_chain` mechanism introduced in #18509 to
include support for multithreading. It makes three main changes.

- It adds `zstream_queue.[ch]`, a generic FIFO queue with multiple
  worker threads. This is a freestanding construct not directly tied to
  ZFS or to the `zstream_chain` mechanism.

- It adapts `zstream_chain.[ch]` to allow both single-threaded and
  multithreaded steps.

- It converts `zstream_fletcher4.[ch]` and `zstream_recompress.[ch]`
  to use multithreading.

### Motivation

This patch significantly speeds recompression on modern CPUs. The
ultimate goal is to add a `zstream dedup` or `zstream pack` subcommand

    [92 lines not shown]
DeltaFile
+817-0cmd/zstream/zstream_queue.c
+245-62cmd/zstream/zstream_chain.c
+224-70cmd/zstream/zstream_fletcher4.c
+105-41cmd/zstream/zstream_recompress.c
+138-0cmd/zstream/zstream_queue.h
+48-23cmd/zstream/zstream_chain.h
+1,577-19614 files not shown
+1,717-24120 files

FreeBSD/doc 8ead66awebsite/content/en where.adoc, website/content/en/releases _index.adoc

website: 14.3 is now EOL

Reviewed by:    ziaee
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D58011
DeltaFile
+0-55website/content/en/where.adoc
+1-2website/content/en/releases/_index.adoc
+1-1website/content/en/releng/_index.adoc
+0-1website/content/en/security/_index.adoc
+1-0website/content/en/security/unsupported.adoc
+3-595 files

LLVM/project b7623f5llvm/test/Transforms/LoopVectorize/AArch64 reduction-recurrence-costs-sve.ll partial-reduce-dot-product-neon.ll, llvm/test/Transforms/LoopVectorize/RISCV gather-scatter-cost.ll

[VPlan] Strip early-bail in noalias-check (#203936)

canHoistOrSinkWithNoAliasCheck currently bails eagerly when the
candidate memory location doesn't have a scope. This is unnecessary,
because the alias check automatically handles this: stripping this check
allows us to run the loop, which would never get to the alias check if
none of the recipes write to memory. The end result is that a read-only
FirstBB to LastBB ranges are determined not to alias with anything, even
if the scope metadata is absent, leading to licm-load-store
improvements.
DeltaFile
+306-107llvm/test/Transforms/LoopVectorize/AArch64/reduction-recurrence-costs-sve.ll
+43-81llvm/test/Transforms/LoopVectorize/RISCV/gather-scatter-cost.ll
+60-60llvm/test/Transforms/LoopVectorize/AArch64/partial-reduce-dot-product-neon.ll
+57-15llvm/test/Transforms/LoopVectorize/X86/cost-model-i386.ll
+39-23llvm/test/Transforms/LoopVectorize/X86/replicating-load-store-costs.ll
+30-30llvm/test/Transforms/LoopVectorize/AArch64/pr60831-sve-inv-store-crash.ll
+535-31632 files not shown
+759-54338 files

LLVM/project e8c4e99llvm/lib/Transforms/Vectorize VPlan.h, llvm/unittests/Transforms/Vectorize VPlanTest.cpp

[VPlan] Strip secondary SIVSteps constructor (NFC) (#207193)

Migrate the only use-site in unit-test to use the canonical constructor.
DeltaFile
+2-12llvm/lib/Transforms/Vectorize/VPlan.h
+1-2llvm/unittests/Transforms/Vectorize/VPlanTest.cpp
+3-142 files

LLVM/project 7be1887llvm/lib/Transforms/Vectorize VPlanTransforms.cpp, llvm/test/Transforms/LoopVectorize/VPlan expand-scev.ll

[VPlan] Don't preserve NSW in mul -> shl conversion for bw-1 op. (#207280)

When the shift amount is bitwidth - 1, shl nsw would be poison, while
mul nsw is defined. Don't preserve the flag.

https://alive2.llvm.org/ce/z/NgHU_m

Fixes https://github.com/llvm/llvm-project/issues/205252.
DeltaFile
+9-3llvm/lib/Transforms/Vectorize/VPlanTransforms.cpp
+1-1llvm/test/Transforms/LoopVectorize/VPlan/expand-scev.ll
+10-42 files

OpenBSD/src wfzn6iDusr.bin/tmux status.c

   Use message-style as default for message-format again. GitHub issue 5315.
VersionDeltaFile
1.272+2-2usr.bin/tmux/status.c
+2-21 files

LLVM/project 11576callvm/lib/Analysis ConstantFolding.cpp, llvm/test/Transforms/InstSimplify/ConstProp saturating-add-sub.ll

[ConstFold] Eliminate some undef-folding (#207184)

The patch is merely a cleanup, with no real-world impact: undef-folding
is no longer useful these days.
DeltaFile
+12-12llvm/test/Transforms/InstSimplify/ConstProp/saturating-add-sub.ll
+0-7llvm/lib/Analysis/ConstantFolding.cpp
+12-192 files

OpenBSD/src ZcAYWzSusr.bin/tmux cmd-split-window.c

   Do not double free or leak pane on failure, from Uzair Aftab in GitHub
   issue 5316.
VersionDeltaFile
1.139+18-7usr.bin/tmux/cmd-split-window.c
+18-71 files

LLVM/project 9a896c3lldb/include/lldb/Target Target.h, lldb/source/Breakpoint BreakpointResolver.cpp

Add a pre-filter to the breakpoint resolver overrides (#198845)

That way if an override only wants to override, say, file and line
breakpoints, it can say that when it registers itself, and we won't do
the work of creating the resolver and checking with it if the breakpoint
wasn't of the requested type.

---------

Co-authored-by: Jonas Devlieghere <jonas at devlieghere.com>
DeltaFile
+185-44lldb/test/API/functionalities/breakpoint/scripted_bkpt/overrides_resolver/TestOverridesResolver.py
+62-1lldb/test/API/functionalities/breakpoint/scripted_bkpt/overrides_resolver/bkpt_resolver.py
+44-11lldb/source/Target/Target.cpp
+51-0lldb/source/Breakpoint/BreakpointResolver.cpp
+15-14lldb/include/lldb/Target/Target.h
+19-2lldb/source/Commands/CommandObjectBreakpoint.cpp
+376-727 files not shown
+428-7813 files

LLVM/project 130d6c3clang/test/CXX/drs cwg3088.cpp cwg30xx.cpp, clang/www cxx_dr_status.html

[clang] Add test for CWG3088 about macros defining special identifiers (#189309)

This PR adds a test for
[CWG3088](https://cplusplus.github.io/CWG/issues/3088.html) "Clarify
macro treatment of identifiers with special meaning".

[[cpp.replace.general] paragraph
9](https://eel.is/c++draft/cpp.replace.general#9) reads as follows:
> A translation unit shall not `#define` or `#undef` macro names
lexically identical to keywords, to the identifiers listed in Table
[4](https://eel.is/c++draft/lex.name#tab:lex.name.special), or to the
[_attribute-token_](https://eel.is/c++draft/dcl.attr.grammar#nt:attribute-token)s
described in [[dcl.attr]](https://eel.is/c++draft/dcl.attr), except that
the macro names `likely` and `unlikely` may be defined as function-like
macros and may be
undefined[.](https://eel.is/c++draft/cpp.replace.general#9.sentence-1)
>
> [Note [1](https://eel.is/c++draft/cpp.replace.general#note-1): An
alternative token ([[lex.digraph]](https://eel.is/c++draft/lex.digraph))

    [20 lines not shown]
DeltaFile
+623-0clang/test/CXX/drs/cwg3088.cpp
+2-0clang/test/CXX/drs/cwg30xx.cpp
+1-1clang/www/cxx_dr_status.html
+626-13 files

LLVM/project abe1aeellvm/test/Transforms/LoopVectorize/VPlan expand-scev.ll

[LV] Add test showing incorrect nsw flag on shl. (NFC) (#207242)

Add test for https://github.com/llvm/llvm-project/issues/205252
DeltaFile
+34-0llvm/test/Transforms/LoopVectorize/VPlan/expand-scev.ll
+34-01 files

LLVM/project e1d11a6clang/lib/Sema SemaDeclCXX.cpp, clang/test/SemaTemplate ctad.cpp

[clang] fix crash-on-invalid with deduction guides (#207263)

Fix crash when a template template parameter specialization is used as a
deduced type.

This is a regression since Clang 22, and this will be backported, so no
release notes.

Fixes #203261
DeltaFile
+17-0clang/test/SemaTemplate/ctad.cpp
+4-3clang/lib/Sema/SemaDeclCXX.cpp
+21-32 files

LLVM/project 1ced7e5llvm/lib/Target/DirectX DXILLegalizePass.cpp, llvm/test/CodeGen/DirectX legalize-switch-unreachable.ll

[DirectX] Remove now unreachable blocks in dxil legalize (#207259)

I think when I first wrote
https://github.com/llvm/llvm-project/pull/193592, I had been under the
assumption that the dead block would be removed for us so the test and
pass did not check that the branch was removed in the pass.

This was a wrong assumption and we need to manually remove the blocks.
This change does so by invoking the helper to do so.

For context: this issue reappeared in the offload test suite after
https://github.com/llvm/llvm-project/pull/205433 landed because the loop
could no longer unroll and the dangling branch appeared.

Resolves: https://github.com/llvm/llvm-project/issues/207095
DeltaFile
+61-11llvm/test/CodeGen/DirectX/legalize-switch-unreachable.ll
+4-0llvm/lib/Target/DirectX/DXILLegalizePass.cpp
+65-112 files

LLVM/project bc34ef2lldb/cmake/modules AddLLDB.cmake

[lldb] Fix rpath settings for LLDB.framework in buildtree when using LLVM dylib (#207270)

The LLDB.framework location in your build tree relative to the LLVM
dylib differs from an actual installation (which may be located
elsewhere). As-is, we cannot even use the LLDB.framework in the
buildtree because resources in the framework fail to load the LLVM
dylib.
DeltaFile
+15-0lldb/cmake/modules/AddLLDB.cmake
+15-01 files

LLVM/project 6e451c4clang/lib/Lex LiteralSupport.cpp, cross-project-tests/debuginfo-tests/dexter-tests optnone-vectors-and-functions.cpp optnone-simple-functions.cpp

Rebase, added expand store support

Created using spr 1.3.7
DeltaFile
+147-39clang/lib/Lex/LiteralSupport.cpp
+92-73cross-project-tests/debuginfo-tests/dexter-tests/optnone-vectors-and-functions.cpp
+98-51cross-project-tests/debuginfo-tests/dexter-tests/optnone-simple-functions.cpp
+74-60cross-project-tests/debuginfo-tests/dexter-tests/optnone-loops.cpp
+58-33cross-project-tests/debuginfo-tests/dexter-tests/optnone-fastmath.cpp
+86-0libcxx/test/benchmarks/algorithms/sorting/lower_upper_bound.bench.cpp
+555-25698 files not shown
+1,773-707104 files

OpenBSD/ports M4KPA6Vgraphics/coin Makefile distinfo, graphics/coin/patches patch-testsuite_TestSuiteUtils_cpp

   graphics/coin: update to 4.0.9

   ok sthen@ and tb@
   Need for a major library bump caught by tb, thanks!
VersionDeltaFile
1.1+12-0graphics/coin/patches/patch-testsuite_TestSuiteUtils_cpp
1.8+2-6graphics/coin/Makefile
1.7+2-2graphics/coin/distinfo
+16-83 files

OpenBSD/ports NDfJoeFwww/superhtml Makefile

   www/superhtml: explicitly set CPU

   lang/zig default behaviour is to compile for the specific CPU on which it
   runs. This specifies a more generic baseline CPU for amd64 and arm64.
   Here's hoping that this fixes the issues observed with the binary in
   current packages.
VersionDeltaFile
1.2+4-0www/superhtml/Makefile
+4-01 files

LLVM/project 7139c74llvm/test/Transforms/SLPVectorizer/X86 store-expand-non-pow2.ll

[SLP][NFC]Add a test with the masked non-power-of-2 stores, NFC



Reviewers: 

Pull Request: https://github.com/llvm/llvm-project/pull/207275
DeltaFile
+24-0llvm/test/Transforms/SLPVectorizer/X86/store-expand-non-pow2.ll
+24-01 files

FreeNAS/freenas bfaacddsrc/middlewared/middlewared/plugins/pool_ utils.py dataset.py

NAS-141651 / 26.0.0-RC.1 / Gate ZFS deduplication on pool creation (by sonicaj) (#19252)

This commit adds changes to extend the ZFS deduplication license gate to
pool creation, which previously let a pool's root dataset be created
with dedup enabled on a system that is not entitled to it. The check is
factored into a shared validate_dedup_license helper so pool.create and
the dataset create/update path enforce it identically and stay in sync.

Original PR: https://github.com/truenas/middleware/pull/19251

Co-authored-by: Waqar Ahmed <waqarahmedjoyia at live.com>
DeltaFile
+29-0src/middlewared/middlewared/plugins/pool_/utils.py
+2-17src/middlewared/middlewared/plugins/pool_/dataset.py
+3-1src/middlewared/middlewared/plugins/pool_/pool.py
+34-183 files

OpenBSD/src N4Zmunsusr.bin/cal cal.1 cal.c

   cal: make specifying a month conflict with -y

   ok jca@
VersionDeltaFile
1.34+6-2usr.bin/cal/cal.1
1.36+5-1usr.bin/cal/cal.c
+11-32 files

FreeBSD/ports 35fa0efwww/librewolf distinfo Makefile, www/librewolf/files patch-python_sites_mach.txt patch-gfx_skia_skia_src_core_SkCpu.cpp

www/librewolf: Update 152.0.2-1 => 152.0.4-1

Changelog:
https://www.firefox.com/en-US/firefox/152.0.3/releasenotes/
https://www.firefox.com/en-US/firefox/152.0.4/releasenotes/

- Remove unnecessary patches and add new patches from www/firefox.

PR:             296456
Sponsored by:   UNIS Labs
Co-authored-by: Vladimir Druzenko <vvd at FreeBSD.org>
MFH:            2026Q2

(cherry picked from commit f88f2d39ba23200cee2456222ad4fdf458b3163e)
DeltaFile
+31-0www/librewolf/files/patch-python_sites_mach.txt
+0-29www/librewolf/files/patch-gfx_skia_skia_src_core_SkCpu.cpp
+16-0www/librewolf/files/patch-third__party_xsimd_include_xsimd_types_xsimd__vsx__register.hpp
+0-11www/librewolf/files/patch-toolkit_xre_nsXREDirProvider.cpp
+3-3www/librewolf/distinfo
+1-1www/librewolf/Makefile
+51-446 files

LLVM/project 1823581libc/src/__support big_int.h, libc/test/src/__support integer_literals_test.cpp

[libc] Make BigInt trivially constructible (#206277)

This makes BigInt trivially constructible and additionally fixes the
failures caused by the upcoming change in constexpr functions.
DeltaFile
+27-44libc/src/__support/big_int.h
+1-1libc/test/src/__support/integer_literals_test.cpp
+28-452 files