FreeBSD/src 71bb028 — contrib/sqlite3 sqlite3.h shell.c, contrib/sqlite3/autosetup sqlite-config.tcl jimsh0.c

sqlite3: Vendor import of sqlite3 3.54.1

Release notes at https://sqlite.org/releaselog/3_54_1.html.

Obtained from:  https://www.sqlite.org/2026/sqlite-autoconf-3540100.tar.gz
Security:       84cd82e1-d49f-11f1-bae2-3497f65b111b
                CVE-2026-119371
                CVE-2026-119372
                CVE-2026-119373
                CVE-2026-119374
                CVE-2026-119375
                CVE-2026-119376
                CVE-2026-119377
                CVE-2026-119378
                CVE-2026-119379
                CVE-2026-119591
MFC after:      1 day

Merge commit '8fcea37c441fdc95cbfc8c34eeb0dcddbc02dca1'
DeltaFile
+5,620-4,102contrib/sqlite3/sqlite3.c
+3,375-809contrib/sqlite3/shell.c
+1,963-977contrib/sqlite3/autosetup/jimsh0.c
+162-87contrib/sqlite3/autosetup/sqlite-config.tcl
+126-28contrib/sqlite3/sqlite3.h
+72-15contrib/sqlite3/tea/generic/tclsqlite3.c
+11,318-6,0186 files not shown
+11,347-6,03912 files

LLVM/project 352d9bc — clang/include/clang/Basic AttrDocs.td, clang/lib/Sema SemaSYCL.cpp

[clang][SYCL] Diagnose variadic sycl_external function (#216393)

SYCL device code does not support variadic function calls.
DeltaFile
+30-0clang/test/SemaSYCL/sycl-external-attr.cpp
+23-0clang/test/CodeGenSYCL/sycl-external-attr-variadic.cpp
+15-0clang/test/SemaSYCL/sycl-external-attr-variadic-undefined.cpp
+12-0clang/lib/Sema/SemaSYCL.cpp
+7-1clang/test/CodeGenSPIRV/spirv-host-adaptation-valist.cpp
+6-0clang/include/clang/Basic/AttrDocs.td
+93-15 files not shown
+104-311 files

LLVM/project 90b5f66 — llvm/test/tools/llubi no_return_callsite.ll no_return.ll, llvm/tools/llubi/lib Interpreter.cpp

[llubi] Report immediate UB for returning from a noreturn function (#238135)

We should report immediate UB if someone tries to return from a noreturn
function per LangRef.

Fixes #235431.
DeltaFile
+25-0llvm/test/tools/llubi/no_return_indirect.ll
+20-0llvm/test/tools/llubi/no_return_callsite.ll
+20-0llvm/test/tools/llubi/no_return.ll
+5-0llvm/tools/llubi/lib/Interpreter.cpp
+70-04 files

LLVM/project b6e6ef5 — lld/MachO SyntheticSections.cpp, lld/MachO/Arch ARM64.cpp

Revert "[lld][MachO] Support Objective-C class selector stubs (#219744)"

This reverts commit 331b53d73e4c4087f985aa1fe2fa7099eefd27a3.
DeltaFile
+0-379lld/test/MachO/arm64-objc-class-stubs.s
+0-172lld/test/MachO/arm64-objc-class-stubs-weak.s
+14-115lld/MachO/SyntheticSections.cpp
+0-85lld/MachO/Arch/ARM64.cpp
+0-82lld/test/MachO/arm64-objc-class-stubs-dead.s
+0-46lld/test/MachO/objc-class-stubs-unsupported.s
+14-8795 files not shown
+21-94911 files

NetBSD/pkgsrc fTWYlBJ — doc TODO CHANGES-2026

   doc: Updated misc/libreoffice to 26.8.2.2
VersionDeltaFile
1.28285+1-2doc/TODO
1.7594+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc rVfTu85 — misc/libreoffice PLIST Makefile, misc/libreoffice/patches patch-external_pdfium_UnpackedTarball__pdfium.mk patch-external_mariadb-connector-c_netbsd.patch

   misc/libreoffice: Update to 26.8.2.2

   Changelog:
   26.8.2.2:
   Bugs fixed compared to 26.8.1 RC1:

       ofz#528260798 out-of-memory [Xisco Fauli]
       tdf#106359 Support for Web Query (.iqy) files [Caolán McNamara]
       tdf#144175 Remove strings from l10n in html export [Julien Nabet]
       tdf#150754 GtkCheckMenuItem shows no check mark on macOS (GtkRadioMenuItem does) [Dan Williams]
       tdf#154463 AutoCorrect (multiple characters => 1 character) in Text Form Field crashes Writer [Andreas Heinisch]
       tdf#162752 Writer freezes when entering the menu "Character..." of a rich text or plain text control element while it is fully selected [Justin Luth]
       tdf#167472 Issues with some template names [Laurent Balland]
       tdf#168461 I am receiving error when calling Libre Office 25.8.1.1, (PYTHONHOME var?) [Neil Roberts]
       tdf#168910 White lines across the image when scrolling [Jonathan Clark]
       tdf#169219 Frame with relative size and anchored to page changes size when opening properties. [Justin Luth]
       tdf#169387 Error after upgrading LibreOffice (PYTHONHOME var?) [Neil Roberts]
       tdf#169697 Can't hear audio in presentations anymore (Windows) [Jonathan Clark]
       tdf#170177 Add options to limit hyphenation 1) if it is too close to the right constituent boundary and 2) only at constituent boundaries [László Németh]

    [69 lines not shown]
VersionDeltaFile
1.14+84-112misc/libreoffice/patches/patch-external_pdfium_pkgsrc.patch.1
1.179+19-19misc/libreoffice/distinfo
1.4+8-8misc/libreoffice/patches/patch-external_mariadb-connector-c_netbsd.patch
1.397+5-6misc/libreoffice/Makefile
1.12+4-4misc/libreoffice/patches/patch-external_pdfium_UnpackedTarball__pdfium.mk
1.69+2-2misc/libreoffice/PLIST
+122-1516 files

LLVM/project 2ac7a95 — clang/docs ReleaseNotes.md, clang/lib/Sema SemaChecking.cpp

[clang] Fix crash on __builtin_addressof of an overload set (#235313)

Fixes #77928

```cpp
template <typename T> void f(int *) {}
void (*p)(int *) = __builtin_addressof(f<int>);
```

Clang crashes on this (an invalid `cast<OverloadExpr>`).
`BuiltinAddressof` leaves an overload set operand unresolved like `&`
does, but nothing resolves it later for the builtin.
This resolves the operand with `CheckPlaceholderExpr`, so it behaves
like `std::addressof`.
DeltaFile
+11-0clang/test/SemaCXX/builtins.cpp
+9-0clang/lib/Sema/SemaChecking.cpp
+5-0clang/docs/ReleaseNotes.md
+25-03 files

LLVM/project 6f3ec76 — clang/tools/clang-linker-wrapper ClangLinkerWrapper.cpp

[offload] Remove redundant call to usesLLVMOffloadWrapper (#238343)

usesLLVMOffloadWrapper was called twice when it could just be used to
override the Kind once for both bundleLinkedOutput and wrapDeviceImages.
This also allows that path to take the verbose image bundling.
DeltaFile
+2-5clang/tools/clang-linker-wrapper/ClangLinkerWrapper.cpp
+2-51 files

NetBSD/pkgsrc ICwm2ie — graphics/vulkan-tools Makefile

   graphics/vulkan-tools: Fix runtime check errors
VersionDeltaFile
1.7+3-1graphics/vulkan-tools/Makefile
+3-11 files

OPNSense/plugins 2559252 — security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient LeCertificate.php LeCommon.php, security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeAutomation Base.php

security/acme-client: clear recorded deploy hook in cert-home domain configs (#5871)

Co-authored-by: cysimons <cysimons at cisco.com>
DeltaFile
+40-0security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeCommon.php
+1-22security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeAutomation/Base.php
+6-0security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeCertificate.php
+47-223 files

NetBSD/pkgsrc bhDMJN6 — doc CHANGES-2026

   doc: Updated www/firefox-l10n to 159.0.1
VersionDeltaFile
1.7593+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc e7kWejh — doc CHANGES-2026

   doc: Updated x11/kitty to 0.50.0
VersionDeltaFile
1.7592+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 4maCW5B — www/firefox-l10n Makefile distinfo

   www/firefox-l10n: Update to 159.0.1

   * Sync with www/firefox-159.0.1.
VersionDeltaFile
1.303+310-310www/firefox-l10n/distinfo
1.322+2-2www/firefox-l10n/Makefile
+312-3122 files

NetBSD/pkgsrc h9cdtfW — x11/kitty Makefile go-modules.mk

   kitty: update to 0.50.0

   - Allow docking kitty windows to the edges of other windows or of the
     tab, for status bars, file trees, etc. Create them with launch
     --type=window-dock or launch --type=tab-dock, see Docked windows

   - A new option restore_session_after_logout to save the state of
     every kitty instance, including scrollback, when logging out,
     restarting or shutting down and restore it the next time kitty
     starts. On macOS, the state is encrypted with a key in the
     keychain. On Linux, it requires the Inhibit desktop portal. See
     Restoring kitty after logging out

   - Allow using tabs like named workspaces: A new launch
     --focus-existing option to focus an existing window or tab instead
     of creating a new one, a new by-title value for launch --location
     to keep tabs in alphabetical order and new options for kitten @
     detach-window and the detach_window action to send windows to a
     named tab, creating it if needed

    [266 lines not shown]
VersionDeltaFile
1.45+163-87x11/kitty/PLIST
1.51+82-82x11/kitty/distinfo
1.25+27-27x11/kitty/go-modules.mk
1.109+2-3x11/kitty/Makefile
+274-1994 files

LLVM/project 5619c67 — clang/test/Modules cxx20-fatal-module-loader-error.cpp

Fix clang/test/Modules/cxx20-fatal-module-loader-error.cpp (#238138)

On some platforms this test fails because the "2>&1" merges stdout and
stderr. This can cause the output to interleaved in unpredictable ways.

The work round is to keep the output streams separate and check each
independently
DeltaFile
+3-2clang/test/Modules/cxx20-fatal-module-loader-error.cpp
+3-21 files

NetBSD/pkgsrc g7zgwEz — doc CHANGES-2026

   doc: Updated www/firefox to 159.0.1
VersionDeltaFile
1.7591+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc LIsDtAL — www/firefox distinfo, www/firefox/patches patch-python_sites_mach.txt patch-third__party_libwebrtc_modules_portal_portal__gn_moz.build

   www/firefox: Update to 159.0.1

   Changelog:
   159.0.1:
   Fixed

     * Fixed the dot that marks a tab needing attention being hard to see with
       some themes, depending on the system accent color. (Bug 2086347)

     * Fixed a command prompt window briefly appearing on Windows when Firefox
       restarts to apply an update. (Bug 2081809)

     * Fixed passkey sign-in failing on websites that share passkeys across
       related sites, such as Facebook and Instagram. (Bug 2085450)

     * Fixed crashes on Windows that could occur with some antivirus or other
       security software installed, in some cases also leaving WebGL disabled. (
       Bug 2083648)


    [274 lines not shown]
VersionDeltaFile
1.18+7-17www/firefox/patches/patch-config_makefiles_rust.mk
1.598+9-9www/firefox/distinfo
1.8+2-11www/firefox/patches/patch-config_gcc-stl-wrapper.template.h
1.3+5-5www/firefox/patches/patch-third__party_libwebrtc_modules_portal_portal__gn_moz.build
1.29+5-5www/firefox/patches/patch-browser_app_profile_firefox.js
1.6+4-4www/firefox/patches/patch-python_sites_mach.txt
+32-512 files not shown
+38-578 files

LLVM/project a28b964 — libc/src/__support/FPUtil NearestIntegerOperations.h, libc/test/src/math/smoke UfromfpxTest.h UfromfpTest.h

[libc][math] Use exact exclusive upper bounds for fromfp conversions (#236477)

Use exact, exclusive power-of-two upper bounds in fromfp/fromfpx and
their
unsigned variants. This rejects the rounded-up endpoint and avoids
FE_INEXACT
while constructing the bound. Add wide-width regressions for all four
families. Public types and ABI are unchanged.

Tests: 28 smoke configurations per compiler with GCC 13 and Clang 18 on
x86-64 Linux.

Assisted-by: GitHub Copilot

Signed-off-by: sriramshastry <sriramshastry at gmail.com>
DeltaFile
+20-0libc/test/src/math/smoke/UfromfpxTest.h
+20-0libc/test/src/math/smoke/UfromfpTest.h
+20-0libc/test/src/math/smoke/FromfpxTest.h
+20-0libc/test/src/math/smoke/FromfpTest.h
+7-8libc/src/__support/FPUtil/NearestIntegerOperations.h
+87-85 files

LLVM/project 9e83eae — clang/docs ReleaseNotes.md, clang/lib/CodeGen ABIInfoImpl.h ABIInfoImpl.cpp

[clang][PowerPC] Pass single-member unions in GPRs on ELFv1 (#223481)

The 64-bit PowerPC ELFv1 ABI (section 3.2.3) passes "one member
aggregates
passed by value containing a floating point value" in FPRs, and an
aggregate
containing one vector value in a VR. Section 3.1.6 defines aggregates as
structures and arrays and lists unions separately, so a union is never
unwrapped this way.

Clang used isSingleElementStruct, which also accepts unions, so it
passed
`union { float a; }`, `struct { union { float a; } u; }` and
`union { struct { float a; } s; }` in f1 where GCC passes them in r3.
The same
happened for double, long double and 128-bit vector members.

Add an AllowUnions parameter to isSingleElementStruct and refuse unions
on

    [10 lines not shown]
DeltaFile
+63-0clang/test/CodeGen/PowerPC/ppc64-union-onefloat.c
+13-4clang/lib/CodeGen/ABIInfoImpl.cpp
+7-2clang/lib/CodeGen/Targets/PPC.cpp
+6-0clang/docs/ReleaseNotes.md
+4-0clang/lib/CodeGen/ABIInfoImpl.h
+93-65 files

LLVM/project 29de125 — llvm/test/CodeGen/AArch64 build-vector-extract.ll aarch64-neon-vector-insert-uaddlv.ll

Update Test Checks
DeltaFile
+644-665llvm/test/CodeGen/AArch64/neon-dotreduce.ll
+215-189llvm/test/CodeGen/AArch64/shuffle-insert-zero.ll
+13-17llvm/test/CodeGen/AArch64/aarch64-neon-vector-insert-uaddlv.ll
+1-3llvm/test/CodeGen/AArch64/build-vector-extract.ll
+873-8744 files

LLVM/project 8321cee — llvm/lib/Target/AArch64 AArch64InstrInfo.td, llvm/test/CodeGen/AArch64 shuffle-insert-zero.ll

[AArch64][DAG] Improve codegen for clearing upper vector lanes

Add patterns that use scalar fmov instruction to clear the upper lanes of a vector
DeltaFile
+227-406llvm/test/CodeGen/AArch64/shuffle-insert-zero.ll
+50-0llvm/lib/Target/AArch64/AArch64InstrInfo.td
+277-4062 files

LLVM/project d6c2518 — llvm/test/Transforms/InstCombine insert-element-shuffle-vector-debugloc.ll vec_shuffle.ll

Update test checks
DeltaFile
+5-5llvm/test/Transforms/InstCombine/insert-extract-shuffle.ll
+4-4llvm/test/Transforms/InstCombine/vec_shuffle.ll
+1-1llvm/test/Transforms/InstCombine/insert-element-shuffle-vector-debugloc.ll
+10-103 files

LLVM/project 4148aa9 — llvm/lib/Transforms/InstCombine InstCombineVectorOps.cpp, llvm/test/Transforms/InstCombine vec_shuffle.ll

[InstCombine] Canonicalise Vector Shuffle that clears upper bits

Currently, shuffle vectors that are equivalent to preserving lane 0 and clearing the uppers lanes of a vector result in different shuffle vectors and masks

Recognise and canonicalise the shuffleVectors to the same form allowing for easier recognition in the backend
DeltaFile
+57-0llvm/test/Transforms/InstCombine/vec_shuffle.ll
+47-0llvm/lib/Transforms/InstCombine/InstCombineVectorOps.cpp
+104-02 files

LLVM/project 74a854f — llvm/utils/TableGen/Common CodeGenSchedule.cpp

TableGen: Keep the instregex prefix for patterns with a top-level ?

instregex discarded a pattern's literal prefix, and ran the regex on
every instruction, if the pattern had a ? outside parentheses, as in
LDPS?Wi. A ? only makes the atom before it optional, and an atom
directly before it is already dropped from the prefix. Only a top-level
| makes the prefix unusable.

AArch64GenSubtargetInfo.inc tablegen run:

            Gigainstructions  Gigacycles      CPU seconds
  Before    44.6              18.8            5.7
  After     43.1 (-3.4%)      17.8 (-4.9%)    5.4 (-4.6%)

Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+3-2llvm/utils/TableGen/Common/CodeGenSchedule.cpp
+3-21 files

LLVM/project a68936f — llvm/utils/TableGen/Common CodeGenSchedule.cpp

TableGen: Match each instregex pattern only once (#235485)

Scheduling models use the same instregex patterns many times, and every
use matched the pattern against the instruction names again. AArch64
evaluates 12501 patterns, only 4344 of them distinct, for a total of 34
million regex matches. Cache the instructions each pattern matches, so a
repeated pattern costs a lookup.

AArch64GenSubtargetInfo.inc tablegen run:
```
            Gigainstructions  Gigacycles      CPU seconds
  Before    67.9              31.1            9.4
  After     44.6 (-34.3%)     18.8 (-39.6%)   5.7 (-39.1%)
```
All 366 tablegen runs in an LLVM build with all targets:
```
            Gigainstructions  Gigacycles      CPU seconds
  Before    2252              1409            499
  After     2188 (-2.8%)      1380 (-2.1%)    489 (-1.9%)
```
Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+17-11llvm/utils/TableGen/Common/CodeGenSchedule.cpp
+17-111 files

FreeNAS/freenas 0984981 — src/middlewared/middlewared/alembic/versions/27.0 2026-11-03_14-00_webshare_mcp.py, src/middlewared/middlewared/api/v27_0_0 webshare.py

Add Webshare MCP option

## Context
Webshare ships an MCP server configured through the `mcp` block of the webshare-auth config, and there was no way to turn it on from middleware. This brings the MCP settings from master to 27.

## Solution
- **New settings**: `webshare.update` accepts `mcp_enabled`, `mcp_allowed_groups` and `mcp_allow_write`, which are rendered into the `mcp` block. `allowed_hosts` is left unset.
- **MCP groups must be login groups**: webshare only checks login groups at OAuth consent, while token refresh and session spawn check only the MCP groups, so every MCP group must be `truenas_webshare` or an entry of `groups`. Otherwise MCP access could outlive Webshare access. Enabling MCP without a group is rejected, since webshare denies everyone on an empty list.
- **Canonical group names**: MCP groups are resolved through NSS, compared by gid and stored under their canonical name, so a directory service group typed differently from its NSS name still matches its login group entry.
- **Migration**: the new columns are added by a migration that skips itself when they already exist, so the same file can be carried to master alongside its existing revision.
- Validation now collects every error before raising, and the `truenas_webshare` group name lives in a single constant.
DeltaFile
+83-27src/middlewared/middlewared/plugins/webshare/config.py
+69-0tests/api2/test_webshare_mcp.py
+32-0src/middlewared/middlewared/alembic/versions/27.0/2026-11-03_14-00_webshare_mcp.py
+19-0src/middlewared/middlewared/api/v27_0_0/webshare.py
+7-2src/middlewared/middlewared/etc_files/webshare-auth/config.json.py
+4-4tests/api2/test_webshare_search.py
+214-332 files not shown
+218-358 files

FreeBSD/src e58325f — sys/dev/iicbus iichid.c

iichid: keep a fixed sampling cadence in polled mode

Touchpads using sampling mode have a sampling task which is run at
a certain polling rate. When the system is under load this task may
not complete quickly which might stretch the time taken beyond what
the polling rate should be, leading to dropped touchpad motion.
On my laptop this causes the touchpad to be barely useable when
the system is under heavy load, and it is really difficult to move
the cursor since so many events are dropped.

This change adjusts the sampling loop to schedule the next polling
event to take place at a specific time in the future, based on the
polling period. If servicing the poll takes longer due to load then
the next sample will still be scheduled at its original time.

Approved by:    wulf, khng (mentor)
Differential Revision:  https://reviews.freebsd.org/D0914
DeltaFile
+17-1sys/dev/iicbus/iichid.c
+17-11 files

FreeBSD/src 8fcea37 — . sqlite3rc.h VERSION, autosetup sqlite-config.tcl

sqlite3: Vendor import of sqlite3 3.54.1

Release notes at https://sqlite.org/releaselog/3_54_1.html.

Obtained from:  https://www.sqlite.org/2026/sqlite-autoconf-3540100.tar.gz
DeltaFile
+219-160sqlite3.c
+49-9shell.c
+6-6sqlite3.h
+1-1sqlite3rc.h
+1-1VERSION
+1-0autosetup/sqlite-config.tcl
+277-1776 files

FreeNAS/freenas 308bd87 — tests/unit test_directoryservices_idmap_cache.py

Format new directory services idmap cache unit test with ruff
DeltaFile
+111-94tests/unit/test_directoryservices_idmap_cache.py
+111-941 files

LLVM/project 2d1b755 — llvm/include/llvm/Transforms/Vectorize LoopVectorizationLegality.h, llvm/lib/Transforms/Vectorize VPlanUtils.h VPlanAnalysis.h

[LV] Strip unused forward declarations (NFC) (#238313)

Assisted-by: llm
DeltaFile
+0-3llvm/lib/Transforms/Vectorize/VPlanHelpers.h
+0-3llvm/lib/Transforms/Vectorize/VPlan.h
+0-2llvm/lib/Transforms/Vectorize/VPlanAnalysis.h
+0-2llvm/lib/Transforms/Vectorize/LoopVectorizationPlanner.h
+0-2llvm/include/llvm/Transforms/Vectorize/LoopVectorizationLegality.h
+0-1llvm/lib/Transforms/Vectorize/VPlanUtils.h
+0-136 files