FreeBSD/ports 4bccc46 — security/ca_root_nss Makefile distinfo

security/ca_root_nss: Update to 3.132

Changelog: https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_132.html

Sponsored by:   Netzkommune GmbH

(cherry picked from commit 2d417a60ba05f8e8ce0e22f60068989fbbc75b8d)
DeltaFile
+3-3security/ca_root_nss/distinfo
+1-1security/ca_root_nss/Makefile
+4-42 files

FreeBSD/ports 2d417a6 — security/ca_root_nss Makefile distinfo

security/ca_root_nss: Update to 3.132

Changelog: https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_132.html

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3security/ca_root_nss/distinfo
+1-1security/ca_root_nss/Makefile
+4-42 files

LLVM/project 048f118 — libc/include/llvm-libc-macros/linux fcntl-macros.h CMakeLists.txt, libc/test/src/fcntl posix_fallocate_test.cpp posix_fadvise_test.cpp

[libc] Expose sys/stat.h mode_t constants in fcntl.h (#234438)

Per POSIX standard, `<fcntl.h>` should provide macro like: `S_IRWXU`

```
The <fcntl.h> header shall define the symbolic constants for file modes
for use as values of mode_t as described in <sys/stat.h>.`
```

Do this by including internal header with `sys/stat.h` macro values
inside a similar
internal header providing `fcntl.h` macro values. Reflect this in CMake
dependencies,
and update unit tests to remove explicit inclusion (assuming that
fcntl-macros would
additionally cover the values from sys-stat-macros).

This is the path of least resistance. Potentially, we can do a more
explicit and precise

    [3 lines not shown]
DeltaFile
+8-6libc/include/llvm-libc-macros/linux/CMakeLists.txt
+0-4libc/test/src/fcntl/CMakeLists.txt
+2-0libc/include/llvm-libc-macros/linux/fcntl-macros.h
+0-1libc/test/src/fcntl/posix_fallocate_test.cpp
+0-1libc/test/src/fcntl/posix_fadvise_test.cpp
+0-1libc/test/src/fcntl/posix_fadvise64_test.cpp
+10-131 files not shown
+10-147 files

LLVM/project 4e1caa5 — llvm/lib/CodeGen/SelectionDAG LegalizeTypes.h LegalizeVectorTypes.cpp, llvm/test/CodeGen/AArch64 sve-fixed-length-masked-expandloads.ll sve-fixed-length-masked-stores.ll

[SDAG] Add MLOAD/MSTORE mask scalarization support to LegalizeVectorTypes (#230202)
DeltaFile
+40-0llvm/test/CodeGen/AArch64/sve-fixed-length-masked-loads.ll
+39-0llvm/test/CodeGen/AArch64/sve-fixed-length-masked-stores.ll
+38-0llvm/lib/CodeGen/SelectionDAG/LegalizeVectorTypes.cpp
+37-0llvm/test/CodeGen/AArch64/sve-fixed-length-masked-expandloads.ll
+2-0llvm/lib/CodeGen/SelectionDAG/LegalizeTypes.h
+156-05 files

LLVM/project 8c6a7e6 — llvm/tools/llc/lib llcdriver.cpp, llvm/tools/opt optdriver.cpp

[llc][opt] Remove duplicate pass initialization. (#234408)

These passes are also initialized in initializeScalarOpts or
initializeCodeGen
DeltaFile
+0-5llvm/tools/llc/lib/llcdriver.cpp
+0-2llvm/tools/opt/optdriver.cpp
+0-72 files

LLVM/project 6e76986 — llvm/lib/Support RISCVISAUtils.cpp

[RISCV] Add base ISAs to RankFlags in RISCVISAUtils.cpp. NFC (#234490)

Replaces some magic constants with named values.
DeltaFile
+9-5llvm/lib/Support/RISCVISAUtils.cpp
+9-51 files

FreeBSD/src 8133230 — contrib/openbsm/bin/auditdistd proto_tls.c

auditdistd: Avoid deprecated OpenSSL APIs

SSL_use_RSAPrivateKey_file() was deprecated in OpenSSL 3.0.  Use the
more generic SSL_use_PrivateKey_file() instead.

Sponsored by:   Klara, Inc.
Sponsored by:   Qualys, Inc.
Reviewed by:    emaste
Differential Revision:  https://reviews.freebsd.org/D60899
DeltaFile
+2-2contrib/openbsm/bin/auditdistd/proto_tls.c
+2-21 files

FreeBSD/src 3200a27 — sys/netinet sctputil.c sctp_usrreq.c

sctp: Allow to ignore iface type when determining address scope

Scope restriction by loopback interface was not specified in
the draft-stewart-tsvwg-sctp-ipv4 draft and having global address
on loopback interface is common.
Therefore, allow to skip loopback interface type check in sctp.

Reviewed by:    tuexen
Differential Revision:  https://reviews.freebsd.org/D60938
DeltaFile
+15-1sys/netinet/sctp_pcb.c
+15-0sys/netinet/sctp_asconf.c
+10-0sys/netinet/sctp_sysctl.c
+10-0sys/netinet/sctp_output.c
+8-0sys/netinet/sctputil.c
+8-0sys/netinet/sctp_usrreq.c
+66-13 files not shown
+77-39 files

LLVM/project eb7e366 — llvm/lib/Target/AArch64 AArch64InstrFormats.td SVEInstrFormats.td

Apply suggestions
DeltaFile
+6-6llvm/lib/Target/AArch64/AArch64SVEInstrInfo.td
+0-4llvm/lib/Target/AArch64/AArch64InstrFormats.td
+2-2llvm/lib/Target/AArch64/SVEInstrFormats.td
+8-123 files

FreeBSD/ports b881223 — www/nginx-devel Makefile version.mk

www/nginx-devel: Update to 1.31.8

Worker processes could be killed by SIGBUS when using HTTP/3 on platforms
with strict alignment requirements, and exited on start or reconfiguration
if working_directory named a directory that does not exist.  That
directive is now read relative to the nginx prefix, not to the current
directory.

Changelog: https://nginx.org/en/CHANGES

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/nginx-devel/distinfo
+1-1www/nginx-devel/version.mk
+0-1www/nginx-devel/Makefile
+4-53 files

FreeBSD/ports ae947c4 — www/nginx-acme Makefile distinfo

www/nginx-acme: Chase the nginx-devel update

Changelog: https://nginx.org/en/CHANGES

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/nginx-acme/distinfo
+1-1www/nginx-acme/Makefile
+4-42 files

FreeBSD/ports a40d0d1 — www/freenginx Makefile, www/nginx Makefile

www/{nginx,freenginx}: Chase the 3rd party module updates

Sponsored by:   Netzkommune GmbH
DeltaFile
+1-1www/nginx/Makefile
+1-1www/freenginx/Makefile
+2-22 files

FreeBSD/ports d6a3c93 — www/nginx-module-fancyindex Makefile distinfo

www/nginx-module-fancyindex: Update to 0.6.0

fancyindex_localtime set in an http block was not inherited by the
locations below it.

Changelog: https://github.com/aperezdc/ngx-fancyindex/blob/v0.6.0/CHANGELOG.md

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/nginx-module-fancyindex/distinfo
+2-2www/nginx-module-fancyindex/Makefile
+5-52 files

FreeBSD/ports 4dc5fba — www/nginx-module-memc Makefile distinfo

www/nginx-module-memc: Update to 0.21

The $memc_flags_as_http_time handler dereferenced a context that is NULL
when the variable is read outside a memc request.

Changelog: https://github.com/openresty/memc-nginx-module/compare/v0.20...v0.21

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/nginx-module-memc/distinfo
+1-1www/nginx-module-memc/Makefile
+4-42 files

FreeBSD/ports f4f56c0 — www/nginx-module-encrypted-session Makefile distinfo

www/nginx-module-encrypted-session: Update to 0.10

The MAC of a session was compared with ngx_strncmp, which stops at the
first byte that differs and so tells an attacker how much of a forged MAC
was right.  The comparison is CRYPTO_memcmp now.  The expiry timestamp was
read through a uint64_t cast of an unaligned pointer, which faults on
architectures that require alignment; it is copied before it is read.

Changelog: https://github.com/openresty/encrypted-session-nginx-module/compare/7ffe4ec...v0.10

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3www/nginx-module-encrypted-session/distinfo
+2-2www/nginx-module-encrypted-session/Makefile
+5-52 files

LLVM/project 23179a2 — flang/lib/Semantics openmp-utils.cpp

Add missing include
DeltaFile
+1-0flang/lib/Semantics/openmp-utils.cpp
+1-01 files

LLVM/project 43c24f0 — llvm/lib/Target/RISCV RISCVInstrInfoP.td

[RISCV][P-ext] Use PatGprGpr to simplify some patterns. NFC (#234502)

Assisted-by: Claude
DeltaFile
+27-54llvm/lib/Target/RISCV/RISCVInstrInfoP.td
+27-541 files

LLVM/project 31f5108 — llvm/lib/Target/SPIRV SPIRVNonSemanticDebugHandler.h SPIRVNonSemanticDebugHandler.cpp, llvm/test/CodeGen/SPIRV/debug-info debug-type-composite-self-pointer.ll debug-global-variable-skip-static-member.ll

[SPIRV] Move the emission of some remaining cases under getOrCreateDebugScope. (#229487)

Move the emission of some remaining cases under `getOrCreateDebugScope`.

---------

Co-authored-by: Cursor <cursoragent at cursor.com>
DeltaFile
+20-28llvm/lib/Target/SPIRV/SPIRVNonSemanticDebugHandler.cpp
+26-0llvm/test/CodeGen/SPIRV/debug-info/debug-type-member-static-int.ll
+26-0llvm/test/CodeGen/SPIRV/debug-info/debug-type-member-static-self-pointer.ll
+18-6llvm/test/CodeGen/SPIRV/debug-info/debug-global-variable-skip-static-member.ll
+8-14llvm/lib/Target/SPIRV/SPIRVNonSemanticDebugHandler.h
+3-3llvm/test/CodeGen/SPIRV/debug-info/debug-type-composite-self-pointer.ll
+101-516 files

LLVM/project 58936cb — clang/docs ReleaseNotes.md, clang/lib/Sema Sema.cpp

[Clang] Diagnose require_explicit_initialization for C tentative definitions (#234210)

In C, a tentative definition that is never completed is zero-initialized
(C17 6.9.2p2). However, `-Wuninitialized-explicit-init` did not diagnose
such definitions when they contained fields marked
`require_explicit_initialization`.

This patch adds a check in `Sema::ActOnEndOfTranslationUnit()` for
tentative definitions that remain uncompleted. Definitions completed
later retain their existing initialization checks.

Added regression tests in
`clang/test/Sema/attr-require-explicit-init-tentative.c`.

Fixes #232483

AI assistance: Claude was used to understand parts of the existing code
and assist with regression-test development, including some
`expected-warning` annotations. I reviewed and verified the submitted
changes.
DeltaFile
+36-0clang/test/Sema/attr-require-explicit-init-tentative.c
+14-0clang/lib/Sema/Sema.cpp
+4-0clang/docs/ReleaseNotes.md
+54-03 files

FreeNAS/freenas b27b58d — docs/source/accounts scram_authentication.rst, src/middlewared/middlewared/plugins/pool_ dedup.py

NAS-144438 / 27.0.0 / Renumber `removed_in` markers left stale by the version rename (by Qubad786) (#20041)

## Problem
The 26 -> 27 / 27 -> 28 version rename renamed the API directories but
not the hand-written version numbers. Markers written as
`removed_in='v27'` before the rename meant "the release after 26", which
is now 28, so `auth.login`, `auth.login_with_api_key`,
`system.advanced.syslog_certificate_authority_choices` and
`system.product_type` were flagged private on the v27.0.0 API too. Calls
to them logged the "Private method ... without private_methods enabled"
warning, and the generated docs said they were scheduled for removal in
v27.

## Solution
Changed those markers and their docstrings to `v28`. The `v27` markers
that were already relabeled from `v26` after the rename are correct and
are left alone. Also fixed the old numbering in the `pool.ddt_prefetch`
`versionremoved` note, the SCRAM authentication doc ("TrueNAS 26" -> 27,
"removed from the v27 API" -> v28) and the auth integration test

    [4 lines not shown]
DeltaFile
+14-14docs/source/accounts/scram_authentication.rst
+2-2tests/api2/test_auth_login_ex.py
+1-1src/middlewared/middlewared/plugins/truenas_connect/update.py
+1-1src/middlewared/middlewared/plugins/system/product.py
+1-1src/middlewared/middlewared/plugins/pool_/dedup.py
+19-195 files

OPNSense/core 601a625 — src/opnsense/mvc/app/controllers/OPNsense/Core/Api ServiceController.php, src/opnsense/mvc/app/models/OPNsense/Core/ACL ACL.xml

Use simpleactionbutton instead
DeltaFile
+16-2src/opnsense/mvc/app/views/OPNsense/Core/service_settings.volt
+9-0src/opnsense/mvc/app/controllers/OPNsense/Core/Api/ServiceController.php
+1-0src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
+26-23 files

LLVM/project 79293e5 — llvm/lib/ExecutionEngine/JITLink JITLink.cpp, llvm/test/ExecutionEngine/JITLink/x86-64 ELF_R_X86_64_8.s

[JITLink] Print the fixup address, not the target, on overflow (#231402)

Summary:
Corrected JITLink out of range relocation diagnostic message to report
the actual fixup address, previously was printing the target address
instead. This issue was found while debugging the PPC64 backend
contributing to LLVM BOLT. When relocation fails because the destination
is far away, JITLink should print where the branch starts (fix up
address) and where it wants to go (Target address). Though the error
message was printing the Target address twice, making difficult to
determine the actual displacement.

Code Details:
makeTargetOutOfRangeError() says "fixup at address" but prints the
target address, which the message already shows as "relocation target".
The address being patched never appears, so the message cannot show how
far out of range the edge is.

This regressed in 0c33799e374a (#145423).

    [4 lines not shown]
DeltaFile
+2-2llvm/lib/ExecutionEngine/JITLink/JITLink.cpp
+3-1llvm/test/ExecutionEngine/JITLink/x86-64/ELF_R_X86_64_8.s
+5-32 files

FreeNAS/freenas 07acee4 — src/middlewared/middlewared/api/v27_0_0 s3.py, src/middlewared/middlewared/api/v28_0_0 s3.py

Back out the show-once access key secret

Before: S3AccesskeyEntry had no secret. s3.accesskey.create, and
s3.accesskey.update with rotate, returned S3AccesskeyEntryWithSecret.
The credentials file read the secret through the private
s3.accesskey.render_rows.

Now: the access key design matches the base branch again. The entry
carries the secret as a Secret field, which holders of
SHARING_S3_WRITE can read. create and update return the entry. The
credentials file renders from s3.accesskey.query. The credentials
template, the access key tests and the test helpers are the base
branch's files again.

Unchanged: the rewritten access key field and type descriptions, and
the shortened comments in accesskey_crud.py and config.py.
DeltaFile
+14-47src/middlewared/middlewared/plugins/truenas_s3/accesskey_crud.py
+20-15tests/api2/test_s3_accesskey.py
+9-17src/middlewared/middlewared/api/v28_0_0/s3.py
+9-17src/middlewared/middlewared/api/v27_0_0/s3.py
+14-12src/middlewared/middlewared/etc_files/truenas_s3/credentials.conf.mako
+6-5src/middlewared/middlewared/plugins/truenas_s3/config.py
+72-1132 files not shown
+75-1168 files

LLVM/project a81ce28 — llvm/lib/CodeGen/SelectionDAG DAGCombiner.cpp, llvm/lib/Target/AArch64 AArch64ISelLowering.cpp

[SDAG] Fold interleaves of matching vector halves (#234211)

Fold
```
   interleave(extract_{lo,hi}(a), extract_{lo,hi}(b))
-> extract_{lo,hi}(interleave(a, b))
```
when the wider interleave is legal.

Doing this as a generic DAGCombine has the benefit that the
tests for wider SVE vectors (vscale_range > 1) now also improve.

This subsumes the equivalent AArch64-specific combine.

assisted-by: codex
DeltaFile
+60-50llvm/test/CodeGen/AArch64/interleave-combine-zip.ll
+0-51llvm/lib/Target/AArch64/AArch64ISelLowering.cpp
+27-0llvm/lib/CodeGen/SelectionDAG/DAGCombiner.cpp
+87-1013 files

OPNSense/core 9c519f0 — src/opnsense/mvc/app/views/OPNsense/Core service_settings.volt

not needed
DeltaFile
+0-2src/opnsense/mvc/app/views/OPNsense/Core/service_settings.volt
+0-21 files

FreeBSD/ports 9517a53 — net/rustconn Makefile Makefile.crates

net/rustconn: Update to 0.23.19

ChangeLog:

1. https://github.com/totoshko88/RustConn/releases/tag/v0.23.15
2. https://github.com/totoshko88/RustConn/releases/tag/v0.23.16
3. https://github.com/totoshko88/RustConn/releases/tag/v0.23.17
4. https://github.com/totoshko88/RustConn/releases/tag/v0.23.18
5. https://github.com/totoshko88/RustConn/releases/tag/v0.23.19

ChangeLog:      "github-actions[bot]" <notifications at github.com>
DeltaFile
+53-49net/rustconn/distinfo
+25-23net/rustconn/Makefile.crates
+1-1net/rustconn/Makefile
+79-733 files

FreeBSD/ports fc35060 — multimedia/mlt7 pkg-plist distinfo, multimedia/mlt7-glaxnimate Makefile

multimedia/mlt7: Update to 7.42.0

- Add PLACEBO option
- Enable RNNOISE and options that do not pull new dependencies
- Drop stale patch

Release notes: https://github.com/mltframework/mlt/releases/tag/v7.42.0
DeltaFile
+0-153multimedia/mlt7/files/patch-ffmpeg9
+10-4multimedia/mlt7/Makefile
+6-5multimedia/mlt7-qt/Makefile
+3-3multimedia/mlt7/distinfo
+3-2multimedia/mlt7-glaxnimate/Makefile
+3-0multimedia/mlt7/pkg-plist
+25-1671 files not shown
+26-1687 files

OPNSense/core e14e87c — src/opnsense/mvc/app/controllers/OPNsense/Core/Api ServiceController.php, src/opnsense/mvc/app/controllers/OPNsense/Core/forms service.xml

Add a service settings menu for the supervisor
DeltaFile
+43-0src/opnsense/mvc/app/views/OPNsense/Core/service_settings.volt
+35-0src/opnsense/mvc/app/models/OPNsense/Core/Service.php
+17-0src/opnsense/mvc/app/controllers/OPNsense/Core/forms/service.xml
+12-1src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
+13-0src/opnsense/mvc/app/models/OPNsense/Core/Service.xml
+7-4src/opnsense/mvc/app/controllers/OPNsense/Core/Api/ServiceController.php
+127-56 files not shown
+139-1612 files

LLVM/project 6d72f75 — llvm/include/llvm/CodeGen/GlobalISel LegalizerHelper.h, llvm/lib/CodeGen/GlobalISel LegalizerHelper.cpp

GlobalISel: Add a lowering of G_FCONSTANT to G_CONSTANT

RISCV and ARM both custom legalized G_FCONSTANT into a G_CONSTANT with
the same bits. Add LegalizerHelper::lowerFConstantAsConstant and use it
in both.

Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+2-10llvm/lib/Target/RISCV/GISel/RISCVLegalizerInfo.cpp
+2-8llvm/lib/Target/ARM/ARMLegalizerInfo.cpp
+8-0llvm/lib/CodeGen/GlobalISel/LegalizerHelper.cpp
+2-0llvm/include/llvm/CodeGen/GlobalISel/LegalizerHelper.h
+14-184 files

LLVM/project 00f53ea — llvm/lib/CodeGen/SelectionDAG LegalizeDAG.cpp, llvm/lib/Target/LoongArch LoongArchFloat32InstrInfo.td LoongArchISelLowering.h

SelectionDAG: Build FP immediates from integer bits in the legalizer

Teach the generic legalizer to legalize FP immediates as a bitcast of
an opaque integer constant. Migrate LoongArch to use the new helper
instead of doing it in custom lowering.

Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+33-34llvm/lib/Target/LoongArch/LoongArchISelLowering.cpp
+25-15llvm/lib/CodeGen/SelectionDAG/LegalizeDAG.cpp
+5-0llvm/lib/Target/LoongArch/LoongArchISelLowering.h
+2-2llvm/lib/Target/LoongArch/LoongArchFloat32InstrInfo.td
+65-514 files