OPNSense/core 2569433src/etc/inc config.inc, src/opnsense/mvc/app/controllers/OPNsense/Base ApiControllerBase.php ApiMutableServiceControllerBase.php

mvc: create runInterfaceRegistation and use it from all required spots

1. Fix the stale cache after applying new interfaces/devices in existing paths
2. Allow to call it from controllers who do not use invokeInterfaceRegistration()

Needs to be patched into Device apply/reconfigures next.
DeltaFile
+22-24src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api/GroupController.php
+11-0src/opnsense/mvc/app/controllers/OPNsense/Base/ApiControllerBase.php
+1-8src/etc/inc/config.inc
+2-3src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api/ServiceController.php
+1-1src/opnsense/mvc/app/controllers/OPNsense/Base/ApiMutableServiceControllerBase.php
+1-1src/opnsense/mvc/app/controllers/OPNsense/Wireguard/Api/ServiceController.php
+38-371 files not shown
+39-387 files

OPNSense/core 18d7b7asrc/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api BridgeSettingsController.php GifSettingsController.php

interfaces: patch runInterfaceRegistration() into device applies

Note that configure should run before registration in order to pick up
additional runtime information in the assignment list cache (if applicable).
DeltaFile
+1-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api/BridgeSettingsController.php
+1-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api/GifSettingsController.php
+1-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api/GreSettingsController.php
+1-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api/LaggSettingsController.php
+1-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api/LoopbackSettingsController.php
+1-0src/opnsense/mvc/app/controllers/OPNsense/Interfaces/Api/VlanSettingsController.php
+6-01 files not shown
+7-07 files

FreeBSD/src 04f25efcontrib/pf/authpf authpf.c

authpf(8) read_config() should chop off trailing white space

if administrator mistakenly types into configuration file

anchor=authpf_test

where 'authpf_test' is followed by white space, the authpf(8)
is going to use anchor 'authpf_test ' instead of the 'authpf_test'
which is defined in pf.conf(5) as 'anchor authpf_test/*'

issue kindly reported and patch submitted by

Avinash Duduskar <avinash.duduskar (_at_) gmail (_dot_) com>

OK sashan@

PR:             296958
MFC after:      1 week
Obtained from:  OpenBSD, sashan <sashan at openbsd.org>, 2d12a8e44d
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+2-2contrib/pf/authpf/authpf.c
+2-21 files

LLVM/project d622ff1llvm CMakeLists.txt

[AMDGPU] Make libc build backwards compatible (triple)

https://github.com/llvm/llvm-project/pull/210032 updated the triple but
did not introduce backwards compatibility, leading to, e.g., failing
check-offload tests due to missing libc.
DeltaFile
+5-1llvm/CMakeLists.txt
+5-11 files

LLVM/project f07e2f1clang/lib/Analysis ThreadSafety.cpp, clang/test/Sema warn-thread-safety-analysis.c

Thread Safety Analysis: Don't warn at joins that re-branch on a try-lock result (#209796)

Previously, when the result of a try-lock call is branched on more than
once, the paths between the branches would disagree on whether the
capability is held while remaining consistent at each branch. The analysis
then gave a false positive warning at the intermediate join:

    mutex 'lock' is not held on every path through here

Create getTerminatorTrylockCall() helper from getEdgeLockset(); if the terminator
of a block branches on the result of a call to a try_acquire_capability-function
(perhaps negated or stored in a local variable), this helper returns that call and
its callee.

Use this new helper in getTerminatorTrylockCaps(), which will return the
capabilities acquired by a trylock; feed these capabilites to intersectAndWarn()
during a branch join, in order to avoid false positives.

Soundness is preserved because intersectAndWarn() still removes the

    [7 lines not shown]
DeltaFile
+102-31clang/lib/Analysis/ThreadSafety.cpp
+54-0clang/test/SemaCXX/warn-thread-safety-analysis.cpp
+15-0clang/test/Sema/warn-thread-safety-analysis.c
+171-313 files

OPNSense/core 137513csrc/etc/inc interfaces.inc, src/etc/inc/plugins.inc.d core.inc

interfaces: permit a vlan device as bridge member, resolve VLAN devices indirectly via interfaces_configure() (#10584)

* interfaces: permit a vlan device as bridge member

* interfaces: resolve VLAN devices indirectly via interfaces_configure()

This also adds device creation for parents so that we ca naturally
resolve QinQ and VLANs on bridges.

---------

Co-authored-by: Franco Fichtner <franco at opnsense.org>
DeltaFile
+42-34src/etc/inc/interfaces.inc
+11-14src/opnsense/scripts/interfaces/reconfigure_vlans.php
+2-1src/etc/inc/plugins.inc.d/core.inc
+0-1src/opnsense/mvc/app/models/OPNsense/Interfaces/FieldTypes/VlanInterfaceField.php
+55-504 files

LLVM/project 5205cd7llvm/test/tools/llvm-reduce/Inputs sleep-and-check-stores.py

[llvm-reduce] Tighten the check to count actual store NFC (#210933)
DeltaFile
+1-1llvm/test/tools/llvm-reduce/Inputs/sleep-and-check-stores.py
+1-11 files

LLVM/project b9ba0bellvm/docs LangRef.md, llvm/lib/CodeGen/SelectionDAG LegalizeVectorTypes.cpp TargetLowering.cpp

[SDAG] Specify unsigned compares for loop.dependence.{war|raw} masks (#197437)

Previously, the LangRef was ambiguous about the sign of comparisons used
to create the loop dependence masks. This resulted in the expansion not
following the intended semantics for extreme inputs.

For example, %ptrA = 0, %ptrB = UINT_MAX, should result in a (RAW) mask
with all lanes active. However, previously we'd do ``(%elementSize *
lane) < abs(%ptrB - %ptrA)``, which due to incorrectly using signed
arithmetic would result in a mask with a single lane active as
``abs(%ptrB - %ptrA)`` resulted in 1, not `UINT_MAX`. In other words,
``abs(%ptrB - %ptrA)`` should be ``unsigned-absolute-difference(%ptrA,
%ptrB)``.

Follow up to #188248.
DeltaFile
+25-30llvm/test/CodeGen/AArch64/alias_mask.ll
+24-29llvm/test/CodeGen/AArch64/alias_mask_scalable.ll
+23-20llvm/docs/LangRef.md
+5-26llvm/lib/CodeGen/SelectionDAG/LegalizeVectorTypes.cpp
+18-9llvm/lib/CodeGen/SelectionDAG/TargetLowering.cpp
+17-5llvm/test/CodeGen/AArch64/alias_mask_scalable_nosve2.ll
+112-1191 files not shown
+129-1197 files

LLVM/project 8beb627lldb/source/Interpreter CommandInterpreter.cpp OptionArgParser.cpp, lldb/test/API/commands/memory/read TestMemoryRead.py

[lldb] Add array decaying (#210918)

In C, an array name in an expression "decays" into a pointer to its
first element. LLDB did not honor this: commands like `memory read
my_array` did not work correctly, because an aggregate type has no
scalar value, so trying to obtain one (ResolveValue/GetValueAsUnsigned)
failed.

This MR adds explicit array decay: for array-typed expressions, the
address of the array object itself is used instead of its (non-existent)
scalar value.
DeltaFile
+42-0lldb/test/API/commands/memory/read/TestMemoryRead.py
+18-1lldb/source/Interpreter/CommandInterpreter.cpp
+13-2lldb/source/Interpreter/OptionArgParser.cpp
+73-33 files

OPNSense/core 2660a4csrc/etc/inc interfaces.inc

interfaces: typo for code tracing
DeltaFile
+1-1src/etc/inc/interfaces.inc
+1-11 files

OPNSense/core 582d5a6src/etc/inc config.inc, src/opnsense/mvc/app/controllers/OPNsense/Base ApiControllerBase.php ApiMutableServiceControllerBase.php

mvc: create runInterfaceRegistation and use it from all required spots

1. Fix the stale cache after applying new interfaces/devices in existing paths
2. Allow to call it from controllers who do not use invokeInterfaceRegistration()

Needs to be patched into Device apply/reconfigures next.
DeltaFile
+24-24src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api/GroupController.php
+11-0src/opnsense/mvc/app/controllers/OPNsense/Base/ApiControllerBase.php
+1-8src/etc/inc/config.inc
+3-3src/opnsense/mvc/app/controllers/OPNsense/OpenVPN/Api/ServiceController.php
+3-1src/opnsense/mvc/app/controllers/OPNsense/Wireguard/Api/ServiceController.php
+1-1src/opnsense/mvc/app/controllers/OPNsense/Base/ApiMutableServiceControllerBase.php
+43-371 files not shown
+44-387 files

LLVM/project cf7a612lldb/test/API/tools/lldb-dap/completions TestDAP_completions.py

[lldb-dap] Migrate the Completions tests (#210829)

Drop the Scenario dataclass as it is now clear what we are testing for.
DeltaFile
+202-258lldb/test/API/tools/lldb-dap/completions/TestDAP_completions.py
+202-2581 files

FreeNAS/freenas 44dd41asrc/middlewared/debian control

NAS-141885 / 27.0.0-BETA.1 / Depend on websockify explicitly for SPICE display (#19365)

## Problem
VMs with a SPICE display device shell out to the `websockify` binary at
runtime (truenas_pylibvirt's display device runs `websockify --web
/usr/share/spice-html5/ ...` to proxy the console to the web UI). We
never declared that dependency though — websockify only got installed as
a transitive `Recommends:` of `spice-html5`. Once truenas_build disabled
`install_recommends` by default, the `truenas` package started
installing with `--no-install-recommends`, so websockify silently
stopped being pulled in and SPICE consoles broke.

## Solution
Add `websockify` to middlewared's `Depends`. It's a genuine hard runtime
dependency of the SPICE path, so declaring it explicitly makes it come
in regardless of the build's recommends setting and keeps us correct
even if spice-html5's packaging changes.
DeltaFile
+1-0src/middlewared/debian/control
+1-01 files

FreeBSD/src 54e6decsys/fs/tarfs tarfs.h

tarfs: remove unused 'ino' in mount structure.

Differential Revision:  https://reviews.freebsd.org/D57898
DeltaFile
+0-1sys/fs/tarfs/tarfs.h
+0-11 files

NetBSD/src IiYY4Ctdistrib/sets/lists/xbase mi, external/mit/xorg/bin/xclipboard Makefile

   updates for xclipboard 1.1.6, and xclock 1.2.1.
VersionDeltaFile
1.3+4-1external/mit/xorg/bin/xcutsel/Makefile
1.4+3-1external/mit/xorg/bin/xclipboard/Makefile
1.179+3-1distrib/sets/lists/xbase/mi
1.7+2-1external/mit/xorg/bin/xclock/Makefile
+12-44 files

FreeBSD/src 7c51da1contrib/kyua/cli cmd_debug.cpp, contrib/kyua/doc kyua-debug.1.in

kyua-debug: Add -P option

Add -P as shorthand for --pause-before-cleanup.

MFC after:      1 week
Reviewed by:    ngie
Differential Revision:  https://reviews.freebsd.org/D56613
DeltaFile
+2-2contrib/kyua/doc/kyua-debug.1.in
+1-0contrib/kyua/cli/cmd_debug.cpp
+3-22 files

LLVM/project 3e009b9llvm/lib/Transforms/Vectorize VPlanEVLTailFolding.cpp

[VPlan] Simplify EVL strided load match in optimizeMaskToEVL. nfc (#211193)
DeltaFile
+5-8llvm/lib/Transforms/Vectorize/VPlanEVLTailFolding.cpp
+5-81 files

NetBSD/pkgsrc NxWtCH0doc CHANGES-2026

   Updated security/py-certifi, graphics/py-matplotlib
VersionDeltaFile
1.4661+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc 2ia3KAFgraphics/py-matplotlib distinfo Makefile

   py-matplotlib: updated to 3.11.1

   3.11.1
   Bug fixes
VersionDeltaFile
1.78+4-4graphics/py-matplotlib/distinfo
1.116+2-2graphics/py-matplotlib/Makefile
1.43+2-1graphics/py-matplotlib/PLIST
+8-73 files

LLVM/project e1c80c5llvm/docs AMDGPUUsage.rst

Comments
DeltaFile
+1-1llvm/docs/AMDGPUUsage.rst
+1-11 files

LLVM/project 37509c7llvm/docs AMDGPUUsage.rst, llvm/lib/Target/AMDGPU AMDGPUISelLowering.cpp AMDGPULegalizerInfo.cpp

Comments
DeltaFile
+7-12llvm/lib/Target/AMDGPU/AMDGPUISelLowering.cpp
+8-10llvm/lib/Target/AMDGPU/AMDGPULegalizerInfo.cpp
+8-0llvm/lib/Target/AMDGPU/AMDGPUMemoryUtils.cpp
+6-0llvm/lib/Target/AMDGPU/AMDGPUMemoryUtils.h
+4-1llvm/docs/AMDGPUUsage.rst
+1-1llvm/lib/Target/AMDGPU/AMDGPUMachineFunctionInfo.cpp
+34-243 files not shown
+38-269 files

LLVM/project aa74678llvm/lib/Target/AMDGPU SIISelLowering.cpp AMDGPULegalizerInfo.cpp, llvm/test/CodeGen/AMDGPU addrspacecast-barrier.ll s-barrier-signal-var-gep.ll

[RFC][AMDGPU] Add BARRIER address space

Add a new BARRIER address space that is used for global variables that are used to represent the barrier IDs in GFX12.5.

These barrier addresses just have values corresponding 1-1 to barrier IDs. They are still implemented on top of LDS, but the offsetting happens during an addrspacecast to generic, not whenever the barrier GV is used.

The motivation for this is to make the relation between LDS and barrier GVs explicit in the compiler. It does add a bit more complexity, but that complexity was already there, just hidden by pretending barrier GVs were actual LDS.
DeltaFile
+474-0llvm/test/CodeGen/AMDGPU/addrspacecast-barrier.ll
+81-74llvm/test/CodeGen/AMDGPU/s-barrier-signal-var-gep.ll
+72-61llvm/test/CodeGen/AMDGPU/s-barrier.ll
+59-43llvm/lib/Target/AMDGPU/SIISelLowering.cpp
+52-14llvm/lib/Target/AMDGPU/AMDGPULegalizerInfo.cpp
+32-32llvm/test/CodeGen/AMDGPU/amdgpu-lower-exec-sync.ll
+770-22448 files not shown
+1,234-57454 files

LLVM/project d2bf47cllvm/lib/Target/AMDGPU SIDefines.h AMDGPUMemoryUtils.h, llvm/test/CodeGen/AMDGPU addrspacecast-barrier.ll

Comments
DeltaFile
+4-3llvm/lib/Target/AMDGPU/SIDefines.h
+1-3llvm/test/CodeGen/AMDGPU/addrspacecast-barrier.ll
+1-1llvm/lib/Target/AMDGPU/AMDGPUMemoryUtils.h
+1-1llvm/lib/Target/AMDGPU/AMDGPULegalizerInfo.cpp
+1-1llvm/lib/Target/AMDGPU/AMDGPUMemoryUtils.cpp
+1-1llvm/lib/Target/AMDGPU/SIISelLowering.cpp
+9-106 files

LLVM/project 9986706llvm/docs AMDGPUUsage.rst

Update docs
DeltaFile
+20-13llvm/docs/AMDGPUUsage.rst
+20-131 files

LLVM/project 757c7b1llvm/docs AMDGPUUsage.rst, llvm/lib/Target/AMDGPU AMDGPULegalizerInfo.cpp SIISelLowering.cpp

[AMDGPU] Add synthetic apertures and use them for barriers

Define what a synthetic aperture is, and adjust the barrier AS
to use this new system. This makes the barrier AS even safer to
use as now we can use all 32 bits of it without ever risking
hitting a valid address of any kind (LDS or outside LDS).
DeltaFile
+72-87llvm/test/CodeGen/AMDGPU/addrspacecast-barrier.ll
+44-5llvm/docs/AMDGPUUsage.rst
+21-23llvm/lib/Target/AMDGPU/AMDGPULegalizerInfo.cpp
+18-17llvm/lib/Target/AMDGPU/SIISelLowering.cpp
+12-0llvm/lib/Target/AMDGPU/SIDefines.h
+9-0llvm/lib/Target/AMDGPU/AMDGPUMemoryUtils.cpp
+176-1324 files not shown
+186-13710 files

LLVM/project 1c0c47eclang/docs AMDGPUSupport.md

Add docs
DeltaFile
+27-0clang/docs/AMDGPUSupport.md
+27-01 files

FreeNAS/freenas 0a95978src/middlewared/middlewared/plugins/kmip connection.py

Fix `kmip_connection` error handling
DeltaFile
+1-2src/middlewared/middlewared/plugins/kmip/connection.py
+1-21 files

NetBSD/pkgsrc DBksx0csecurity/py-certifi PLIST distinfo

   py-certifi: updated to 2026.7.22

   2026.7.22
   Unknown changes
VersionDeltaFile
1.8+7-1security/py-certifi/PLIST
1.50+4-4security/py-certifi/distinfo
1.54+2-2security/py-certifi/Makefile
+13-73 files

FreeNAS/freenas d9c3bfcsrc/middlewared/middlewared/plugins/kmip zfs_keys.py

Fix KMIP in-memory cache being wiped after every push
DeltaFile
+4-2src/middlewared/middlewared/plugins/kmip/zfs_keys.py
+4-21 files

NetBSD/pkgsrc NldsBS4devel/py-urwid PLIST, lang/py-asttokens PLIST

   Remove scm info from PLIST - fixed in latest setuptools_scm
VersionDeltaFile
1.24+1-3devel/py-urwid/PLIST
1.8+1-3lang/py-asttokens/PLIST
1.14+1-3math/py-astropy/PLIST
1.6+1-3math/py-gmpy2/PLIST
1.23+1-3math/py-xarray/PLIST
1.32+1-3sysutils/ansible-lint/PLIST
+6-189 files not shown
+15-4515 files