OPNSense/core c264c90src/opnsense/mvc/app/library/OPNsense/Core ConfigMaintenance.php, src/www interfaces.php

interfaces: check dhcpdv6.enabled for -1 and add legacy config sections

PR: https://forum.opnsense.org/index.php?topic=50580.0
DeltaFile
+2-2src/www/interfaces.php
+2-0src/opnsense/mvc/app/library/OPNsense/Core/ConfigMaintenance.php
+4-22 files

LLVM/project 1ce7a81compiler-rt/include/fuzzer FuzzedDataProvider.h

fuzzer: modernize FuzzedDataProvider conversions (#177794)

This change modernizes FuzzedDataProvider.h now that C++17+ is standard
in LLVM.
Replace the runtime if with if constexpr in ConvertUnsignedToSigned
Make the unsigned/signed comparison explicit by casting TS::max() to TU
DeltaFile
+3-3compiler-rt/include/fuzzer/FuzzedDataProvider.h
+3-31 files

LLVM/project 10afcd4flang/test/Lower derived-pointer-components.f90 do_loop.f90

[flang][NFC] Converted five tests from old lowering to new lowering (part 12) (#178831)

Tests converted from test/Lower: derived-pointer-components.f90,
derived-type-finalization.f90, derived-types.f90, do_loop.f90,
do_loop_unstructured.f90
DeltaFile
+376-378flang/test/Lower/derived-pointer-components.f90
+83-67flang/test/Lower/do_loop.f90
+65-53flang/test/Lower/derived-types.f90
+44-63flang/test/Lower/derived-type-finalization.f90
+29-23flang/test/Lower/do_loop_unstructured.f90
+597-5845 files

OPNSense/core 889098csrc/opnsense/mvc/app/controllers/OPNsense/Firewall/Api FilterBaseController.php

Firewall: Rules [new]: FilterBaseController requires Base\UserException (#9669)

(cherry picked from commit ec20be4dd42be415d44b1373c49ce7e336944de9)
DeltaFile
+1-0src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api/FilterBaseController.php
+1-01 files

NetBSD/pkgsrc qPePG40doc CHANGES-2026

   doc: Updated sysutils/tealdeer to 1.8.1
VersionDeltaFile
1.752+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc S7N3Kz6sysutils/tealdeer distinfo Makefile

   tealdeer: update to 1.8.1

   This patch release tweaks the enabled features for ureq, the library we
   use to perform HTTP requests when updating the cache. In particular,
   support for socks proxies is now enabled.
VersionDeltaFile
1.12+10-4sysutils/tealdeer/distinfo
1.17+2-2sysutils/tealdeer/Makefile
1.8+2-0sysutils/tealdeer/cargo-depends.mk
+14-63 files

OPNSense/core ec20be4src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api FilterBaseController.php

Firewall: Rules [new]: FilterBaseController requires Base\UserException (#9669)

DeltaFile
+1-0src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api/FilterBaseController.php
+1-01 files

NetBSD/pkgsrc 0fCvR2Adoc CHANGES-2026

   doc: Updated net/tor to 0.4.8.22
VersionDeltaFile
1.751+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc s4Joe4hnet/tor distinfo Makefile

   tor: Update to 0.4.8.22

   Changes:
   Changes in version 0.4.8.22 - 2026-01-28
     This is likely the very last release of the 0.4.8.x series. Three major
     bugfixes detailled below including two affecting directory servers (basically
     all relays). We strongly recommend upgrading as soon as possible.

     o Major bugfixes (security):
       - Avoid an out-of-bounds read error that could occur with
         V1-formatted cells. Fixes bug 41180; bugfix on 0.4.8.1-alpha. This
         is tracked as TROVE-2025-016.

     o Major bugfixes (directory servers):
       - Allow old clients to fetch the consensus even if they use version
         0 of the SENDME protocol. In mid 2025 we changed the required
         minimum version of the "FlowCtrl" protocol to 1, meaning directory
         caches hang up on clients that send a version 0 SENDME cell. Since
         old clients were no longer able to retrieve the consensus, they

    [42 lines not shown]
VersionDeltaFile
1.139+4-4net/tor/distinfo
1.195+2-2net/tor/Makefile
+6-62 files

OPNSense/core ae22620src/etc/inc filter.lib.inc

firewall: fix typo with sprintf(); closes #9664

(cherry picked from commit 476ad93d6f380c18ee766353c15235e462864398)
DeltaFile
+1-1src/etc/inc/filter.lib.inc
+1-11 files

OPNSense/core dcef846src/opnsense/service/conf/actions.d actions_hostwatch.conf

interfaces: host discovery: make sure the full dump includes NDP output if hostwatch is disabled

(cherry picked from commit f7fac5a6f4ac9ba502acab688a6d8092d942d77d)
DeltaFile
+1-1src/opnsense/service/conf/actions.d/actions_hostwatch.conf
+1-11 files

OPNSense/core 96dd059src/opnsense/mvc/app/models/OPNsense/Interfaces/Migrations SET1_0_0.php

interfaces: fix migration for no-release option

This was introduced in d87ce014d96f storing the enabled value as "yes"
instead of true.  Threat it the same as the debug option.

PR: https://forum.opnsense.org/index.php?topic=50575.0 (and others)
(cherry picked from commit 7a11458ea23424dd475d394cb2f64015df257849)
DeltaFile
+1-1src/opnsense/mvc/app/models/OPNsense/Interfaces/Migrations/SET1_0_0.php
+1-11 files

NetBSD/pkgsrc DetntyKdoc pkg-vulnerabilities

   pkg-vulnerabilities: restrict CVE-2021-39246 to older tor

   This was fixed in tor-0.4.6.10 and should be no longer a problem given that v2
   onion addresses should be no longer around and supported.
VersionDeltaFile
1.724+2-2doc/pkg-vulnerabilities
+2-21 files

OpenBSD/ports tAkC8Jcdatabases/openldap distinfo Makefile, databases/openldap/patches patch-doc_man_man5_slapd-config_5 patch-doc_man_man5_slapd_conf_5

   update to openldap-2.6.12
VersionDeltaFile
1.76+2-2databases/openldap/distinfo
1.211+1-2databases/openldap/Makefile
1.2+1-1databases/openldap/patches/patch-doc_man_man5_slapd-config_5
1.2+1-1databases/openldap/patches/patch-doc_man_man5_slapd_conf_5
+5-64 files

NetBSD/src xVzbX0mdoc CHANGES-9.5

   Ticket #2001
VersionDeltaFile
1.1.2.97+6-1doc/CHANGES-9.5
+6-11 files

NetBSD/src Rglj36Dusr.sbin/ypserv/yppush yppush.c

   Pull up following revision(s) (requested by mrg in ticket #2001):

        usr.sbin/ypserv/yppush/yppush.c: revision 1.26

   _SC_OPEN_MAX can exceed FD_SETSIZE. Use the compat value svc_maxfd+1
   from the rpc library similar to ypbind(8).

   The custom _svc_run() function is required as the standard svc_run()
   may hang for retries.

   Fixes PR 59750.
VersionDeltaFile
1.24.44.1+2-2usr.sbin/ypserv/yppush/yppush.c
+2-21 files

NetBSD/src EVrh8xfdoc CHANGES-10.2

   Ticket #1230
VersionDeltaFile
1.1.2.90+7-1doc/CHANGES-10.2
+7-11 files

NetBSD/src m6oEXTeusr.sbin/ypserv/yppush yppush.c

   Pull up following revision(s) (requested by mrg in ticket #1230):

        usr.sbin/ypserv/yppush/yppush.c: revision 1.26

   _SC_OPEN_MAX can exceed FD_SETSIZE. Use the compat value svc_maxfd+1
   from the rpc library similar to ypbind(8).

   The custom _svc_run() function is required as the standard svc_run()
   may hang for retries.

   Fixes PR 59750.
VersionDeltaFile
1.25.2.1+2-2usr.sbin/ypserv/yppush/yppush.c
+2-21 files

NetBSD/src L144QlAdoc CHANGES-11.0

   Ticket #168
VersionDeltaFile
1.1.2.73+7-1doc/CHANGES-11.0
+7-11 files

FreeBSD/src 574d46bshare/man/man4 epair.4, sys/net if_epair.c

epair: add VLAN_HWTAGGING

Add capability VLAN_HWTAGGING to the epair interface and enable it by
default.
When sending a packet over a VLAN interface that uses an epair
interface, the flag M_VLANTAG and the ether_vtag (which contains the
VLAN ID and/or PCP) are set in the mbuf to inform the hardware that
the VLAN header has to be added. The sending epair end does not need
to actually add a VLAN header. It can just pass the mbuf with this
setting to the other epair end, which receives the packet. The
receiving epair end can just pass the mbuf with this setting to the
upper layer. Due to this setting, the upper layer believes that there
was a VLAN header that has been removed by the interface.
If the packet later leaves the host, the outgoing physical interface
can add the VLAN header in hardware if it supports VLAN_HWTAGGING.
If not, the implementation of Ethernet or bridge adds the VLAN header
in software.

Reviewed by:            zlei, tuexen

    [2 lines not shown]
DeltaFile
+16-12sys/net/if_epair.c
+19-1share/man/man4/epair.4
+35-132 files

NetBSD/src Kr7Awyxusr.sbin/ypserv/yppush yppush.c

   Pull up following revision(s) (requested by mrg in ticket #168):

        usr.sbin/ypserv/yppush/yppush.c: revision 1.26

   _SC_OPEN_MAX can exceed FD_SETSIZE. Use the compat value svc_maxfd+1
   from the rpc library similar to ypbind(8).

   The custom _svc_run() function is required as the standard svc_run()
   may hang for retries.

   Fixes PR 59750.
VersionDeltaFile
1.25.6.1+2-2usr.sbin/ypserv/yppush/yppush.c
+2-21 files

OpenBSD/ports UcgHBROtelephony/asterisk/20 distinfo Makefile, telephony/asterisk/20/patches patch-configure_ac patch-Makefile

   update to asterisk-20.18.1
VersionDeltaFile
1.10+3-3telephony/asterisk/20/patches/patch-configure_ac
1.2+2-2telephony/asterisk/20/patches/patch-Makefile
1.33+2-2telephony/asterisk/20/distinfo
1.6+2-2telephony/asterisk/20/patches/patch-configs_samples_asterisk_conf_sample
1.3+1-1telephony/asterisk/20/patches/patch-build_tools_cflags_xml
1.53+1-1telephony/asterisk/20/Makefile
+11-112 files not shown
+13-138 files

OpenBSD/ports JxgVx0Ltelephony/asterisk/22 distinfo Makefile, telephony/asterisk/22/patches patch-configure_ac patch-Makefile

   update to asterisk-22.8.1
VersionDeltaFile
1.4+3-3telephony/asterisk/22/patches/patch-configure_ac
1.2+2-2telephony/asterisk/22/patches/patch-Makefile
1.13+2-2telephony/asterisk/22/distinfo
1.4+2-2telephony/asterisk/22/patches/patch-configs_samples_asterisk_conf_sample
1.5+1-1telephony/asterisk/22/patches/patch-res_res_rtp_asterisk_c
1.22+1-1telephony/asterisk/22/Makefile
+11-112 files not shown
+13-138 files

LLVM/project 07ec2fallvm/lib/Analysis ValueTracking.cpp, llvm/test/Transforms/Attributor nofpclass-fma.ll nofpclass-fmul.ll

ValueTracking: Revert noundef checks in computeKnownFPClass for fmul/fma (#178850)

This functionally reverts fd5cfcc41311c6287e9dc408b8aae499501660e1 and
35ce17b6f6ca5dd321af8e6763554b10824e4ac4.

This was correct and necessary, but is causing performance regressions
since isGuaranteedNotToBeUndef is apparently not smart enough to detect
through recurrences. Revert this for the release branch.

Also the test coverage was inadequate for the fma case, so add a new
case which changes with and without the check.
DeltaFile
+24-0llvm/test/Transforms/Attributor/nofpclass-fma.ll
+4-5llvm/lib/Analysis/ValueTracking.cpp
+1-1llvm/test/Transforms/Attributor/nofpclass-fmul.ll
+29-63 files

LLVM/project 3d01fffllvm/test/CodeGen/SPIRV/transcoding OpGroupAsyncCopy-strided-64.ll

Merge branch 'users/mgcarrasco/spirv/fix-spirv-val-tests' into users/jmmartinez/spirv/memory_consumption
DeltaFile
+0-1llvm/test/CodeGen/SPIRV/transcoding/OpGroupAsyncCopy-strided-64.ll
+0-11 files

LLVM/project 40f2a5dllvm/lib/Target/AMDGPU AMDGPURegBankLegalizeHelper.cpp AMDGPURegBankLegalizeRules.cpp, llvm/test/CodeGen/AMDGPU/GlobalISel fpext.ll unmerge-sgpr-s16.ll

AMDGPU/GlobalISel: Regbanklegalize rules for G_UNMERGE_VALUES

Move G_UNMERGE_VALUES handling to AMDGPURegBankLegalizeRules.cpp.
Fix sgpr S16 unmerge by lowering using shift and using S32.
Previously sgpr S16 unmerge was selected using _lo16 and _hi16 subreg
indexes which are exclusive to vgpr register classes.
For remaing cases we do trivial mapping, assigns same reg bank
to all operands, vgpr or sgpr.
DeltaFile
+47-0llvm/lib/Target/AMDGPU/AMDGPURegBankLegalizeHelper.cpp
+13-27llvm/test/CodeGen/AMDGPU/GlobalISel/fpext.ll
+36-0llvm/test/CodeGen/AMDGPU/GlobalISel/unmerge-sgpr-s16.ll
+24-0llvm/lib/Target/AMDGPU/AMDGPURegBankLegalizeRules.cpp
+14-9llvm/test/CodeGen/AMDGPU/GlobalISel/uaddsat.ll
+14-9llvm/test/CodeGen/AMDGPU/GlobalISel/usubsat.ll
+148-452 files not shown
+156-498 files

OPNSense/core 8ecd344src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api FilterBaseController.php

Firewall: Rules [new]: FilterBaseController requires Base\UserException
DeltaFile
+1-0src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api/FilterBaseController.php
+1-01 files

NetBSD/pkgsrc rMVwz7xdoc CHANGES-2026

   doc: Updated wm/dwm to 6.8
VersionDeltaFile
1.750+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc zJ42OFqwm/dwm distinfo Makefile

   dwm: Update to 6.8

   Changes:
   6.8
   - This fixes a regression in getatomprop().
VersionDeltaFile
1.25+4-4wm/dwm/distinfo
1.28+2-2wm/dwm/Makefile
+6-62 files

OpenBSD/ports PnvxqXUtelephony/spandsp Makefile

   use https for HOMEPAGE/SITES
VersionDeltaFile
1.24+3-3telephony/spandsp/Makefile
+3-31 files