devel/electron{42,43}: Install electron.d.ts
Some applications (e.g. VSCode) requires the file to be present while
building. Although it can be downloaded from Electron's releases page,
include here for convenience.
VE: Use splitAt in expandExtendStackPseudo
Replace the manual block-splitting in expandExtendStackPseudo with
MachineBasicBlock::splitAt. Reduces boilerplate, but there's some
block renumbering churn in the output.
Co-authored-by: Claude (Claude-Opus-4.8)
VE: Compute live-ins after splitting for EXTEND_STACK expansion
expandExtendStackPseudo splits its block but left the new blocks without
live-in lists, so their uses of registers live across the split are
rejected by -verify-machineinstrs.
Co-authored-by: Claude (Claude-Opus-4.8)
KDE Plasma: updated to 6.7.4
11 months of updates including:
Plasma 6.6:
* Plasma 6.6 makes your life as easy as possible, without sacrificing the
flexibility or features that have made Plasma the most versatile desktop
in the known universe.
* With that in mind, we’ve improved Plasma’s usability and accessibility,
and added practical new features into the mix.
Plasma 6.7:
* Plasma 6.7 brings powerful new features to KDE’s classic desktop, and
refines its user experience to new levels.
* Enjoy thoughtfully-designed improvements that solve real problems, a
sneak peek of future theming bliss, better performance, and more.
* Per-screen virtual desktops
* Test your microphone volume
[5 lines not shown]
rc.subr tests: service jail behaviour of run_rc_command
Twenty cases over where each rc option and each method executes for a
jailed service, the jail's lifetime, and the svcj option handling. Each
case drives the service inside a chroot built in its ATF work directory.
MFC after: 1 week
MFC to: stable/15
Assisted-by: Claude Code (Opus 5)
(cherry picked from commit b5dcd8f9d6ae702adbc1627839b5235a28839370)
rc.subr: svcj - add a setaudit option
setaudit(8) is prefixed to the command inside the jail when
${name}_audit_user is set, and needs allow.setaudit.
This is not added automatically when ${name}_audit_user is set, this
needs an administrative setting of the options on purpose.
MFC after: 1 week
MFC to: stable/15
(cherry picked from commit 9125bc0727dbbf82b1c6a5f7c380f7b8c27b74dd)
rc.conf.5: note that a negative nice value does not reach a service jail
Raising a process' priority is not permitted inside a jail, and nice(1)
warns and executes the command anyway, so the service comes up at its login
class priority.
Not changing the date, as a commit a moment before this, one changed it
already.
MFC after: 1 week
MFC to: stable/15
(cherry picked from commit be834d62e990b58eb2e67ce9b48b635b645dcea1)
rc.subr: svcj - run a service's own restart and status methods in its jail
A script that defines non-default restart_cmd or status_cmd should
execute them in the service jail. Where there is no jail to enter,
restart starts the service instead of failing.
Fixes: 2efbd480f1d3 rc: add service jails framework
MFC after: 1 week
MFC to: stable/15
Assisted-by: Claude Code (Opus 5)
(cherry picked from commit 327dae5081059eb97af0cf319a444b3937ff4db2)
rc.subr: svcj - remove the service jail when the service is not running
A service whose tracked process had died while another process of its own
kept the jail alive, therefore left svcj-${name} behind, and the next start
would fail.
Fixes: 2efbd480f1d3 rc: add service jails framework
MFC after: 1 week
MFC to: stable/15
Assisted-by: Claude Code (Opus 5)
(cherry picked from commit a70ca1ebd8add7ea99b5674de715ae5fbf389dce)
rc.subr: svcj - let svcj_all_enable enable service jails
Fix the logic for svcj_all_enable.
Fixes: 2efbd480f1d3 rc: add service jails framework
MFC after: 1 week
MFC to: stable/15
(cherry picked from commit 21e53eeaffcac0be3427b7edb3b8739344a65174)
rc.subr: svcj - send the stop signal from inside the service jail
A service running under ${name}_user was signalled from the host as that
user, which the parent of a jail may no longer do: since 8a5ceebece03 an
unprivileged process would need allow.unprivileged_parent_tampering.
Stop and reload therefore failed and left both the service and its jail
running.
MFC after: 1 week
MFC to: stable/15
(cherry picked from commit 6155e17019f6ae08c74913b7ffb9312434f33a9f)
mlt: update to 7.40.0
Version 7.40.0
Framework
- Some fixes for `win32_fopen()`.
- Security fixes for time formatting in `mlt_properties`.
- Security fix to disable deprecated `ante` & `post` properties in `mlc_consumer`.
- Added more properties to `metaschema.yaml` (new version 7.2).
Modules
- Added `audio_formats` and `image_formats` properties to all service metadata.
- Many improvements to the `openfx` module:
- fixed potential overflows in `snprintf()` calls
- multi-threading: frame- and slice-based
- many compatibility fixes
- added support for 2D and 3D numeric parameters (uses `mlt_rect`)
- fixed preview scaling
- fixed the default for `choice` (`values` in `metaschema.yaml`) parameters
[82 lines not shown]
[IR] Unique attribute sets and lists in a UniquingSet. NFC (#221525)
Switch to UniquingSet to remove FoldingSetNodeID serialization overhead
on every AttributeSet::get and AttributeList::get.
Attribute and AttributeSet are single-pointer wrappers whose operator==
is pointer equality. Specializing `is_hashable_data` selects the fast
`hash_combine_range_impl` overload that calls `combine_bytes` directly,
skipping copying element by element.
`hash_combine_range` deduces its element type as `const T`, so
`is_hashable_data<const T>` now follows `is_hashable_data<T>` and a type
need only specialize the unqualified form.
Aided by Opus 5
net/freeipa-server: Fix client enrollment paths
ipa-join used the upstream default /etc/ipa/ca.crt, so it could not
build a
TLS context and enrollment stopped at "Unable to determine root DN". The
client port already patches this constant; the server port ships the
same
ipaclient tree and needs it too.
configure_krb5_snippet() copied its snippet into a krb5.conf.d that
nothing
creates, which aborted the install with FileNotFoundError. It now
creates
the directory, which is where FreeIPA points krb5.conf's includedir
anyway.
Reported by: usenix17
https://github.com/joneum/FreeBSD-freeipa-server/issues/3
Sponsored by: Netzkommune GmbH
New package, chicken6.
From Kogule Ryo in PR pkg/60583.
CHICKEN is a Scheme-to-C compiler supporting most of the language
features as defined in the Revised^5 Report on Scheme and Revised^7 Report on
Scheme small language. CHICKEN generates quite portable C code, and files
compiled by it (including itself) should work without any changes on most
platforms.
The whole package is distributed under a BSD license and as such free
to use and modify as long as you adhere to its terms (see the manual).
Linkage to C modules and C-library functions is straightforward, so
it's easy to access C from Scheme. Compiled code can be embedded into
existing C programs without problems. The generated code supports
full tail-recursion, first-class continuations, multiple values and
dynamic-wind.
ktextaddons: update to 2.1.2
It contains some fixes:
- When we define default dialog size, it didn't work when screen scale size
was different to 100%
- In textaddons autogenerate lib, don't allow to collapse with double click
in textautogeneratehistorylistview
- Reduce duplicate FlowLayout class
- Fix attachment widget layout (Use QToolButton). This class is used in kaichat.
- Fix initialise variable in plugincommonmodelinstalledinfosdelegate
- Reduce duplicate code in plugin textaddons autogenerate
