HardenedBSD/src 406596b — sys/netinet/libalias alias_local.h alias_db.h

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+102-42sys/netinet/libalias/alias_db.c
+7-1sys/netinet/libalias/alias_db.h
+4-1sys/netinet/libalias/alias_local.h
+113-443 files

HardenedBSD/src 5cebf4c — sys/netinet/libalias alias_local.h alias_db.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+102-42sys/netinet/libalias/alias_db.c
+7-1sys/netinet/libalias/alias_db.h
+4-1sys/netinet/libalias/alias_local.h
+113-443 files

HardenedBSD/ports 36b8bbb — databases/py-deltalake distinfo, devel/tauri-cli distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+1,175-1,172www/filepizza/pkg-plist
+639-577lang/rustpython/distinfo
+545-533devel/tauri-cli/distinfo
+409-469misc/rash/distinfo
+363-341databases/py-deltalake/distinfo
+321-290lang/rustpython/Makefile
+3,452-3,382115 files not shown
+5,756-5,628121 files

LLVM/project 98863ae — llvm/lib/Support KnownFPClass.cpp, llvm/test/Transforms/Attributor nofpclass-sqrt.ll

Revert "[KnownFPClass] Refine positive zero result for sqrt (#214987)"

This reverts commit dfabf2df7d27cbaf96b849251c36b8228762ee87.
DeltaFile
+6-139llvm/test/Transforms/Attributor/nofpclass-sqrt.ll
+4-9llvm/lib/Support/KnownFPClass.cpp
+10-1482 files

LLVM/project 095663b — clang/lib/Parse ParseDecl.cpp, clang/test/Interpreter execute.cpp

Revert "[clang-repl] Fix crashing on unusable top-level declarations" (#230734)

Reverts llvm/llvm-project#230054

This is causing a test failure on a Windows bot:
https://lab.llvm.org/buildbot/#/builders/46/builds/42541
DeltaFile
+0-4clang/test/Interpreter/execute.cpp
+1-3clang/lib/Parse/ParseDecl.cpp
+1-72 files

HardenedBSD/ports 1f9c636 — devel/py-ruff Makefile distinfo, devel/ruff Makefile Makefile.crates

devel/{,py-}ruff: update 0.16.9 → 0.17.0

ReleaseNotes: https://github.com/astral-sh/ruff/releases/tag/0.17.0
DeltaFile
+53-59devel/ruff/distinfo
+53-59devel/py-ruff/distinfo
+26-29devel/py-ruff/Makefile
+25-28devel/ruff/Makefile.crates
+1-1devel/ruff/Makefile
+158-1765 files

HardenedBSD/ports b242400 — Tools/scripts update-rust-port.sh

Tools/scripts/update-rust-port.sh: update, make more robust
DeltaFile
+79-31Tools/scripts/update-rust-port.sh
+79-311 files

FreeBSD/ports 12a6e35 — databases/pgbarman/files patch-pyproject.toml, devel/py-xdg-user-dirs/files patch-pyproject.toml

devel/{,py-}uv{,-build}: update 0.12.19 → 0.13.0
DeltaFile
+71-59devel/uv/distinfo
+34-28devel/uv/Makefile.crates
+11-0devel/py-xdg-user-dirs/files/patch-pyproject.toml
+11-0databases/pgbarman/files/patch-pyproject.toml
+9-0dns/py-dnspython/files/patch-pyproject.toml
+9-0misc/py-ag2/files/patch-pyproject.toml
+145-878 files not shown
+157-10014 files

FreeBSD/ports 1f9c636 — devel/py-ruff Makefile distinfo, devel/ruff Makefile Makefile.crates

devel/{,py-}ruff: update 0.16.9 → 0.17.0

ReleaseNotes: https://github.com/astral-sh/ruff/releases/tag/0.17.0
DeltaFile
+53-59devel/ruff/distinfo
+53-59devel/py-ruff/distinfo
+26-29devel/py-ruff/Makefile
+25-28devel/ruff/Makefile.crates
+1-1devel/ruff/Makefile
+158-1765 files

FreeBSD/ports b242400 — Tools/scripts update-rust-port.sh

Tools/scripts/update-rust-port.sh: update, make more robust
DeltaFile
+79-31Tools/scripts/update-rust-port.sh
+79-311 files

HardenedBSD/ports 12a6e35 — databases/pgbarman/files patch-pyproject.toml, devel/py-xdg-user-dirs/files patch-pyproject.toml

devel/{,py-}uv{,-build}: update 0.12.19 → 0.13.0
DeltaFile
+71-59devel/uv/distinfo
+34-28devel/uv/Makefile.crates
+11-0devel/py-xdg-user-dirs/files/patch-pyproject.toml
+11-0databases/pgbarman/files/patch-pyproject.toml
+9-0dns/py-dnspython/files/patch-pyproject.toml
+9-0misc/py-ag2/files/patch-pyproject.toml
+145-878 files not shown
+157-10014 files

HardenedBSD/ports 00f6887 — sysutils/zoxide Makefile Makefile.crates

sysutils/zoxide: Update to 0.10.0

PR:             294085
Approved by:    maintainer timeout (7 months)
DeltaFile
+195-163sysutils/zoxide/distinfo
+127-0sysutils/zoxide/Makefile.crates
+1-114sysutils/zoxide/Makefile
+323-2773 files

FreeBSD/ports 00f6887 — sysutils/zoxide Makefile Makefile.crates

sysutils/zoxide: Update to 0.10.0

PR:             294085
Approved by:    maintainer timeout (7 months)
DeltaFile
+195-163sysutils/zoxide/distinfo
+127-0sysutils/zoxide/Makefile.crates
+1-114sysutils/zoxide/Makefile
+323-2773 files

LLVM/project a2dc8b4 — clang/lib/AST/ByteCode InterpFrame.cpp, clang/test/AST/ByteCode cxx20.cpp

[clang][bytecode] Fix a crash with invalid function frames (#230524)

This happens with the fake frames we create for the `TrivialCopy`
opcode.
DeltaFile
+20-0clang/test/AST/ByteCode/cxx20.cpp
+5-0clang/lib/AST/ByteCode/InterpFrame.cpp
+25-02 files

HardenedBSD/ports 411cc41 — textproc/dasel Makefile distinfo

textproc/dasel: Update to 3.11.2

PR:             296267
Approved by:    maintainer timeout (4 months)
DeltaFile
+5-5textproc/dasel/distinfo
+2-3textproc/dasel/Makefile
+7-82 files

FreeBSD/ports 411cc41 — textproc/dasel Makefile distinfo

textproc/dasel: Update to 3.11.2

PR:             296267
Approved by:    maintainer timeout (4 months)
DeltaFile
+5-5textproc/dasel/distinfo
+2-3textproc/dasel/Makefile
+7-82 files

FreeBSD/ports 788c774 — net-p2p/py-stig distinfo Makefile

net-p2p/py-stig: Update 0.14.2a0 => 0.15.0a0

* Switch distutils => pep517
DeltaFile
+7-4net-p2p/py-stig/Makefile
+3-3net-p2p/py-stig/distinfo
+10-72 files

HardenedBSD/ports 788c774 — net-p2p/py-stig distinfo Makefile

net-p2p/py-stig: Update 0.14.2a0 => 0.15.0a0

* Switch distutils => pep517
DeltaFile
+7-4net-p2p/py-stig/Makefile
+3-3net-p2p/py-stig/distinfo
+10-72 files

LLVM/project 2181986 — clang/lib/Parse ParseDecl.cpp, clang/test/Interpreter execute.cpp

Revert "[clang-repl] Fix crashing on unusable top-level declarations (#230054)"

This reverts commit 6e92994f7a95d11cf450f6bec62104a0028b83cb.
DeltaFile
+0-4clang/test/Interpreter/execute.cpp
+1-3clang/lib/Parse/ParseDecl.cpp
+1-72 files

NetBSD/othersrc ImguMsx — usr.bin/gooeymux keyboard.c

   don't unconditionally set MOD_NUMLOCK, it may do unintended things on certain
   laptop keyboards. Instead read the LED status and inherit what's there.
VersionDeltaFile
1.6+9-2usr.bin/gooeymux/keyboard.c
+9-21 files

LLVM/project d19748b — llvm/lib/Analysis/models regalloc-eviction-test-model.inc inline-oz-test-model.inc

[MLGO] Remove std includes from pre-generated test models (#230724)

c90b6414e607 (#227941) always registers the test models in
llvm/lib/Analysis/models/*.inc.

The generated InlinerModels.h and RegAllocEvictModels.h include each
model header inside a namespace.

With LLVM_ENABLE_MODULES=ON, the models' `#include <map>` and `#include
<string>` become module imports inside that namespace, which clang
rejects:

error: redundant #include of module 'std_map' appears within namespace
'llvm::regalloc_Model1_ns'
           [-Wmodules-import-nested-redundant]

This patch removes the includes, since MLInlineAdvisor.cpp and
MLRegAllocEvictAdvisor.cpp already include <map> and <string> before the
model headers.

    [3 lines not shown]
DeltaFile
+0-2llvm/lib/Analysis/models/regalloc-eviction-test-model.inc
+0-2llvm/lib/Analysis/models/inline-oz-test-model.inc
+0-42 files

LLVM/project 006de98 — llvm/lib/Target/Mips MipsMachineFunction.cpp, llvm/test/CodeGen/Mips tls-static.ll global-pointer-reg.ll

[Mips] Remove unused -mips-fix-global-base-reg (#230733)

Unused since 3ecc5273c148 (2012). Remove its RUN
lines from tls-static.ll, whose STATIC32/STATIC64 checks cover the same
output, and delete the disabled global-pointer-reg.ll.
DeltaFile
+0-24llvm/test/CodeGen/Mips/global-pointer-reg.ll
+0-15llvm/test/CodeGen/Mips/tls-static.ll
+0-5llvm/lib/Target/Mips/MipsMachineFunction.cpp
+0-443 files

LLVM/project 6d14e84 — clang/test/CodeGen/AArch64/sve recps.c, clang/test/CodeGen/AArch64/sve-intrinsics acle_sve_recps.c

[clang][CIR] Add tests for SVE RECPS intrinsics (#229228)

Tests for plain SVE `svrecps`
(https://developer.arm.com/architectures/instruction-sets/intrinsics#q=svrecps).

Port: `clang/test/CodeGen/AArch64/sve-intrinsics/acle_sve_recps.c` to
`clang/test/CodeGen/AArch64/sve/recps.c`

Part of https://github.com/llvm/llvm-project/issues/223963.
DeltaFile
+71-0clang/test/CodeGen/AArch64/sve/recps.c
+0-68clang/test/CodeGen/AArch64/sve-intrinsics/acle_sve_recps.c
+71-682 files

LLVM/project 496b3b5 — bolt/lib/Passes LongJmp.cpp

[BOLT] Restore -relax-plt as a deprecated no-op option

c6ee71d5e8a5 removed -relax-plt from the AArch64 relaxation pass, which
makes llvm-bolt reject existing command lines that still pass it.
Re-add the option as a hidden no-op that only prints a deprecation
warning, so scripts using it keep working.
DeltaFile
+7-0bolt/lib/Passes/LongJmp.cpp
+7-01 files

FreeBSD/ports fc41391 — security/openvpn Makefile distinfo

security/openvpn: Security update 2.7.7 => 2.7.8

Changelog:
https://github.com/OpenVPN/openvpn/blob/v2.7.8/Changes.rst

PR:             299261
Security:       CVE-2026-84790
Security:       CVE-2026-88964
Security:       CVE-2026-84256
Sponsored by:   UNIS Labs (vvd, commit patch)
Pull request:   https://github.com/freebsd/freebsd-ports/pull/637
MFH:            2026Q4

(cherry picked from commit 4fbd626e70bbb611b964a6aaf9785745e4829a1b)
DeltaFile
+3-3security/openvpn/distinfo
+1-1security/openvpn/Makefile
+4-42 files

HardenedBSD/ports 4fbd626 — security/openvpn Makefile distinfo

security/openvpn: Security update 2.7.7 => 2.7.8

Changelog:
https://github.com/OpenVPN/openvpn/blob/v2.7.8/Changes.rst

PR:             299261
Security:       CVE-2026-84790
Security:       CVE-2026-88964
Security:       CVE-2026-84256
Sponsored by:   UNIS Labs (vvd, commit patch)
Pull request:   https://github.com/freebsd/freebsd-ports/pull/637
MFH:            2026Q4
DeltaFile
+3-3security/openvpn/distinfo
+1-1security/openvpn/Makefile
+4-42 files

FreeBSD/ports 4fbd626 — security/openvpn Makefile distinfo

security/openvpn: Security update 2.7.7 => 2.7.8

Changelog:
https://github.com/OpenVPN/openvpn/blob/v2.7.8/Changes.rst

PR:             299261
Security:       CVE-2026-84790
Security:       CVE-2026-88964
Security:       CVE-2026-84256
Sponsored by:   UNIS Labs (vvd, commit patch)
Pull request:   https://github.com/freebsd/freebsd-ports/pull/637
MFH:            2026Q4
DeltaFile
+3-3security/openvpn/distinfo
+1-1security/openvpn/Makefile
+4-42 files

HardenedBSD/ports 21639dd — databases/openldap25-server Makefile, databases/openldap26-server Makefile

databases/openldap2[567]-server: fix COLLECT_DESC

The collect overlay implements collective attributes (RFC 3671);
describe it as such instead of "Collect overy Services".
DeltaFile
+1-1databases/openldap27-server/Makefile
+1-1databases/openldap26-server/Makefile
+1-1databases/openldap25-server/Makefile
+3-33 files

FreeBSD/ports 21639dd — databases/openldap25-server Makefile, databases/openldap26-server Makefile

databases/openldap2[567]-server: fix COLLECT_DESC

The collect overlay implements collective attributes (RFC 3671);
describe it as such instead of "Collect overy Services".
DeltaFile
+1-1databases/openldap27-server/Makefile
+1-1databases/openldap26-server/Makefile
+1-1databases/openldap25-server/Makefile
+3-33 files

HardenedBSD/ports 85b9818 — textproc/hs-pandoc Makefile Makefile.cabal

textproc/hs-pandoc: Update 3.12 => 3.12.1

* Add WWW for Hackage package repository

Approved by:            haskell@ (alven@)
DeltaFile
+19-21textproc/hs-pandoc/distinfo
+8-8textproc/hs-pandoc/Makefile.cabal
+4-3textproc/hs-pandoc/Makefile
+31-323 files