FreeBSD/ports a49d46dnet/croc Makefile distinfo

net/croc: Update to 11.3.1
DeltaFile
+5-5net/croc/distinfo
+1-1net/croc/Makefile
+6-62 files

FreeBSD/ports 7e8d800net/cliproxyapi Makefile distinfo

net/cliproxyapi: Update to 7.2.122
DeltaFile
+5-5net/cliproxyapi/distinfo
+1-1net/cliproxyapi/Makefile
+6-62 files

FreeBSD/ports 093eccfmultimedia/jellyfin Makefile

multimedia/jellyfin: fix the harfbuzz dependency
DeltaFile
+2-2multimedia/jellyfin/Makefile
+2-21 files

LLVM/project aa46cfellvm/include/llvm/Transforms/Utils BuildLibCalls.h, llvm/lib/Transforms/Utils BuildLibCalls.cpp SimplifyLibCalls.cpp

[MemProf] Support cold-only and min hint when optimizing existing hot/cold new (#218803)

Change -optimize-existing-hot-cold-new to an enum option supporting:
- none (default): Do not optimize existing hot/cold new calls
- cold: Only optimize existing hot/cold new calls if determined to be
cold
- always: Always optimize existing hot/cold new calls

Add a new option -min-existing-hot-cold-new-hint (off by default) that,
when optimizing an existing hot/cold operator new call, takes the
minimum
of the compiler hint and the existing hint.
DeltaFile
+98-45llvm/lib/Transforms/Utils/SimplifyLibCalls.cpp
+59-5llvm/test/Transforms/InstCombine/simplify-libcalls-new.ll
+12-14llvm/lib/Transforms/Utils/BuildLibCalls.cpp
+6-7llvm/include/llvm/Transforms/Utils/BuildLibCalls.h
+175-714 files

LLVM/project 9c46718llvm/lib/ProfileData SampleProfWriter.cpp, llvm/test/tools/llvm-profdata eytzinger-split-nametable-partition.test

[SampleProfile] Apply minor readability cleanups (#217878)
DeltaFile
+2-2llvm/lib/ProfileData/SampleProfWriter.cpp
+1-1llvm/test/tools/llvm-profdata/eytzinger-split-nametable-partition.test
+3-32 files

FreeBSD/src 3180d4d. Makefile.in configdata.pm, crypto/aes aes_x86core.c

openssl: import 3.0.22

This change adds OpenSSL 3.0.22 from upstream [1].

The 3.0.22 artifact was been verified via PGP key [2] and by SHA256 checksum [3].

This is a security patch release. The highest severity issue is medium.

More information about the release (from a high level) can be found in
the release notes [4].

Updated via [5] with `update_openssl.sh 3.0.22`.

1. https://github.com/openssl/openssl/releases/download/openssl-3.0.22/openssl-3.0.22.tar.gz
2. https://github.com/openssl/openssl/releases/download/openssl-3.0.22/openssl-3.0.22.tar.gz.asc
3. https://github.com/openssl/openssl/releases/download/openssl-3.0.22/openssl-3.0.22.tar.gz.sha256
4. https://github.com/openssl/openssl/blob/openssl-3.0.22/NEWS.md
5. https://codeberg.org/ngie/freebsd-powertools:shell/update_openssl.sh@c2f51140
DeltaFile
+0-34,159Makefile
+0-32,703configdata.pm
+0-11,231Makefile.in
+0-870crypto/aes/aes_x86core.c
+622-3test/evp_extra_test.c
+396-1test/endecode_test.c
+1,018-78,967125 files not shown
+3,685-79,452131 files

LLVM/project f50a689mlir/lib/Dialect/LLVMIR/Transforms InlinerInterfaceImpl.cpp, mlir/test/Dialect/LLVMIR inlining-alias-scopes.mlir

[mlir][LLVM] Use a disjoint scope domain when inlining noalias

This matches recent changes to the LLVM inliner.

AI disclosure: Claude wrote the code, I wrote the commit message and
have done initial review.
DeltaFile
+28-25mlir/lib/Dialect/LLVMIR/Transforms/InlinerInterfaceImpl.cpp
+10-18mlir/test/Dialect/LLVMIR/inlining-alias-scopes.mlir
+38-432 files

LLVM/project 8194eb2mlir/include/mlir/Dialect/LLVMIR LLVMAttrDefs.td, mlir/lib/Dialect/LLVMIR/Transforms InlinerInterfaceImpl.cpp

[mlir][LLVM] Add disjointScopes to AliasScopeDomainAttr

This also updates the MLIR-side inliner to clone disjoint domains
while cloning alias scopes, matching changes to LLVM.

AI disclosure: Claude wrote the code, I wrote the commit message and
looked at the code.
DeltaFile
+25-0mlir/test/Target/LLVMIR/Import/metadata-alias-scopes.ll
+23-0mlir/test/Target/LLVMIR/attribute-alias-scopes.mlir
+17-2mlir/include/mlir/Dialect/LLVMIR/LLVMAttrDefs.td
+4-2mlir/lib/Target/LLVMIR/ModuleImport.cpp
+4-1mlir/lib/Dialect/LLVMIR/Transforms/InlinerInterfaceImpl.cpp
+2-2mlir/lib/Target/LLVMIR/ModuleTranslation.cpp
+75-76 files

LLVM/project 35b0ce7llvm/lib/Target/AMDGPU AMDGPULowerModuleLDSPass.cpp, llvm/test/CodeGen/AMDGPU lower-lds-struct-aa-memcpy.ll remove-no-kernel-id-attribute.ll

[AMDGPU] Use a disjoint scope domain for merged LDS structs

When lowering LDS values, all the values are mutually disjoint, so we
can use the newly-added disjoint scopes feature to simplify the IR.

AI disclosure: Claude wrote this and I reviewed it and wrote the
 commit message
DeltaFile
+15-52llvm/lib/Target/AMDGPU/AMDGPULowerModuleLDSPass.cpp
+35-10llvm/test/CodeGen/AMDGPU/lower-module-lds-precise-allocate-to-module-struct.ll
+15-18llvm/test/CodeGen/AMDGPU/lower-lds-struct-aa.ll
+11-13llvm/test/CodeGen/AMDGPU/lower-module-lds-via-hybrid.ll
+8-12llvm/test/CodeGen/AMDGPU/remove-no-kernel-id-attribute.ll
+9-10llvm/test/CodeGen/AMDGPU/lower-lds-struct-aa-memcpy.ll
+93-1156 files not shown
+139-16112 files

LLVM/project e621ec6llvm/lib/Target/AMDGPU AMDGPULowerKernelArguments.cpp, llvm/test/CodeGen/AMDGPU lower-kernargs.ll si-split-load-store-alias-info.ll

[AMDGPU] Use a disjoint scope domain for noalias kernel arguments

All noalias arguments of a kernel are disjoint with each other, so we
can use a disjoint scope to save on metadata construction.

AI disclosure: Claude wrote this, I looked at it and wrote this
message.
DeltaFile
+53-64llvm/test/CodeGen/AMDGPU/lower-noalias-kernargs.ll
+20-13llvm/lib/Target/AMDGPU/AMDGPULowerKernelArguments.cpp
+11-11llvm/test/CodeGen/AMDGPU/lower-kernel-arguments-noalias-call-no-ptr-args.ll
+8-8llvm/test/CodeGen/AMDGPU/si-split-load-store-alias-info.ll
+4-4llvm/test/CodeGen/AMDGPU/lower-kernargs.ll
+96-1005 files

LLVM/project 4ca9b8dclang/test/CodeGen arm_neon_intrinsics.c arm-v8.2a-neon-intrinsics-generic.c, llvm/lib/Bitcode/Reader MetadataLoader.cpp

[IR] Add alias scope domains with disjoint scopes

See RFC at
https://discourse.llvm.org/t/rfc-disjoint-scope-alias-scope-noalias-domains/91537

This commit adds support for declaring an alias scope domain disjoint.
Disjoint domains are ones where each scope is implicitly `!noalias`
with each other scope in the domain. This is represented by adding an
`i1` into the scope's domain as the second argument, with `i1 true`
representing disjoint scopes and `i1 false` representing the old
non-disjoint behavior. AutoUpgrade mechanisms have been added to add
in the missing `i1 false` to existing metadata.

This commit updates alias analysis to know about disjoint scopes and
updates the function cloner to also clone the alias domain if it's
disjoint (since, as a herd of LLMs discovered, you don't want the old
IR to be noalias with a clone of itself).

Commits to migrate passes to use disjoint scopes where that's an

    [4 lines not shown]
DeltaFile
+72-72clang/test/CodeGen/arm-v8.2a-neon-intrinsics-generic.c
+54-54clang/test/CodeGen/arm_neon_intrinsics.c
+97-0llvm/lib/Bitcode/Reader/MetadataLoader.cpp
+95-0llvm/test/Transforms/InstCombine/noalias-scope-decl-disjoint-domain.ll
+42-42llvm/test/Transforms/LoopUnroll/peel-loop-noalias-scope-decl.ll
+39-35llvm/test/CodeGen/MIR/AMDGPU/machine-metadata.mir
+399-203189 files not shown
+1,342-718195 files

LLVM/project 0e0ca42clang/test/CodeGen arm-v8.2a-neon-intrinsics-generic.c arm_neon_intrinsics.c, llvm/lib/Transforms/Utils InlineFunction.cpp

[Inliner] Use a disjoint scope domain for noalias arguments

InlineFunction creates alias.scope/noalias metadata to represent the
set of `noalias` arguments to a function. We don't need the `!noalias`
now that we have the ability to use disjoint scopes, saving us IR size
and metadata bloat.

TODO move these to a previous commit.
Also changes InstCombine to not drop the experimental.noalias.scope.decl
for disjoint scopes even if they're not mentioned in a `!noalias`, but
do still delete them if they're not used.
DeltaFile
+324-324clang/test/CodeGen/arm_neon_intrinsics.c
+72-72clang/test/CodeGen/arm-v8.2a-neon-intrinsics-generic.c
+35-30llvm/lib/Transforms/Utils/InlineFunction.cpp
+13-14llvm/test/Transforms/Inline/noalias-calls2.ll
+12-12llvm/test/Transforms/Inline/noalias2.ll
+11-11llvm/test/Transforms/PhaseOrdering/pr39282.ll
+467-4639 files not shown
+487-48315 files

LLVM/project 2bb0571llvm/test/tools/UpdateTestChecks/update_test_checks dot_value_in_metadata_string.test, llvm/test/tools/UpdateTestChecks/update_test_checks/Inputs dot_value_in_metadata_string.ll dot_value_in_metadata_string.ll.expected

[utils] Don't rename %. inside quoted strings in test checkseg

Replacing `%.foo` with `%dotfoo` everywhere also caught any `%.foo`
inside metadata, which would then cause incorrect CHECK lines to be
generated (since the value in the metedata isn't going to be
modified).

This commit fixes the issue by matching quoted strings in a regex
before looking for %. to replace.

AI disclosure: Claude found and fixed this, I wrote the commit message
DeltaFile
+22-0llvm/test/tools/UpdateTestChecks/update_test_checks/Inputs/dot_value_in_metadata_string.ll.expected
+10-1llvm/utils/UpdateTestChecks/common.py
+11-0llvm/test/tools/UpdateTestChecks/update_test_checks/Inputs/dot_value_in_metadata_string.ll
+7-0llvm/test/tools/UpdateTestChecks/update_test_checks/dot_value_in_metadata_string.test
+50-14 files

FreeBSD/ports 597ff51textproc/wdiff Makefile distinfo

textproc/wdiff: update to 1.2.3
DeltaFile
+3-40textproc/wdiff/pkg-plist
+3-2textproc/wdiff/distinfo
+2-2textproc/wdiff/Makefile
+8-443 files

LLVM/project 24ac21ellvm/lib/Target/RISCV RISCVTargetTransformInfo.cpp

Address comments

Created using spr 1.3.6-beta.1
DeltaFile
+12-11llvm/lib/Target/RISCV/RISCVTargetTransformInfo.cpp
+12-111 files

FreeBSD/src 185f1a1crypto/aes aes_x86core.c, doc/man3 X509_verify_cert.pod

openssl: import 3.5.8

This change adds OpenSSL 3.5.8 from upstream [1].

The 3.5.8 artifact was been verified via PGP key [2] and by SHA256 checksum [3].

This is a security patch release. The highest severity issue is medium.

More information about the release (from a high level) can be found in
the release notes [4].

Updated via [5] with `update_openssl.sh 3.5.8`.

1. https://github.com/openssl/openssl/releases/download/openssl-3.5.8/openssl-3.5.8.tar.gz
2. https://github.com/openssl/openssl/releases/download/openssl-3.5.8/openssl-3.5.8.tar.gz.asc
3. https://github.com/openssl/openssl/releases/download/openssl-3.5.8/openssl-3.5.8.tar.gz.sha256
4. https://github.com/openssl/openssl/blob/openssl-3.5.8/NEWS.md
5. https://codeberg.org/ngie/freebsd-powertools:shell/update_openssl.sh@c2f51140
DeltaFile
+0-867crypto/aes/aes_x86core.c
+851-3test/evp_extra_test.c
+394-125test/evp_extra_test2.c
+476-32test/endecode_test.c
+439-61doc/man3/X509_verify_cert.pod
+337-5test/radix/quic_tests.c
+2,497-1,093256 files not shown
+8,213-2,267262 files

OpenBSD/ports GUyRsS2news/sabnzbd Makefile distinfo

   Update to sabnzbd-5.1.2

   Fixes critical RCE (GHSA-rgqj-28c2-gxwp) and path traversal
   (GHSA-75g3-96fr-7p2r) vulnerabilities. Overview on changes:
   https://github.com/sabnzbd/sabnzbd/releases/tag/5.1.2
VersionDeltaFile
1.58+2-2news/sabnzbd/distinfo
1.83+1-1news/sabnzbd/Makefile
+3-32 files

LLVM/project fb4b133llvm/lib/Analysis ValueTracking.cpp, llvm/test/Transforms/InstCombine/RISCV riscv-vsetvlimax-ispow2.ll

[ValueTracking] Treat RISC-V vsetvlimax as a power of two (#218831)

VLMAX = VLEN * LMUL / SEW is always a non-zero power of two for any valid
vtype, so llvm.riscv.vsetvlimax is a power of two regardless of SEW/LMUL or
whether a vscale_range is present. Report this in isKnownToBeAPowerOfTwo
so that consumers such as ctpop and the x & (x - 1) idiom can fold.

Assisted-by: TRAE CLI (Opus 4.8)
DeltaFile
+63-0llvm/test/Transforms/InstCombine/RISCV/riscv-vsetvlimax-ispow2.ll
+4-0llvm/lib/Analysis/ValueTracking.cpp
+67-02 files

FreeBSD/ports f62c942security/vuxml/vuln 2026.xml

security/vuxml: correct a tpyo

FreeBSD-SA-26:61.openssl not FreeBSD-SA-26:62.openssl.

Fixes:          6caee4041ace ("security/vuxml: reference FreeBSD-SA-26:61.openssl")
Pointy hat to:  philip
DeltaFile
+1-1security/vuxml/vuln/2026.xml
+1-11 files

LLVM/project f79da0allvm/include/llvm/Analysis TargetTransformInfo.h, llvm/lib/Transforms/Scalar ExpandMemCmp.cpp

[ExpandMemCmp] Apply NumLoadsPerBlock to ordering compares (#215186)

Make NumLoadsPerBlock control both equality and ordering memcmp
expansions. For ordering comparisons, pack consecutive legal loads
in memory order into a value no wider than the target preferred
load width, then compare the packed values. This preserves
lexicographic semantics while reducing conditional branches.

BPF uses groups of eight byte-load pairs, so an align-1 32-byte
comparison forms four i64 compare blocks instead of 32 byte compare
blocks.

Other targets retain their existing default ordering behavior unless
grouping is explicitly requested.

Assisted-by: TRAE CLI (GPT-5)
DeltaFile
+898-0llvm/test/Transforms/ExpandMemCmp/BPF/memcmp.ll
+190-107llvm/test/Transforms/ExpandMemCmp/X86/memcmp.ll
+168-75llvm/lib/Transforms/Scalar/ExpandMemCmp.cpp
+56-75llvm/test/CodeGen/X86/memcmp-more-load-pairs.ll
+14-14llvm/test/CodeGen/X86/memcmp-more-load-pairs-x32.ll
+5-3llvm/include/llvm/Analysis/TargetTransformInfo.h
+1,331-2748 files not shown
+1,342-28014 files

FreeBSD/ports efb5ff9security/vuxml/vuln 2026.xml

security/vuxml: remove duplicate OpenSSL entry

Reference FreeBSD-SA-26:35.openssl in the existing entry for OpenSSL
CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766,
CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770,
CVE-2026-45445, CVE-2026-45446 and CVE-2026-45447 instead of duplicating
the entry.

FreeBSD-SA-26:35.openssl affected all supported versions of FreeBSD.
DeltaFile
+8-82security/vuxml/vuln/2026.xml
+8-821 files

FreeBSD/ports d4032casecurity/vuxml/vuln 2026.xml

security/vuxml: add FreeBSD SAs issued on 2026-08-25

FreeBSD-SA-26:56.hwpmc affects all supported releases
FreeBSD-SA-26:57.unix affects 15.0R and 15.1R
FreeBSD-SA-26:58.sound affects all supported releases
FreeBSD-SA-26:59.mac_do affects 15.0R and 15.1R
FreeBSD-SA-26:60.ppp affects all supported releases
FreeBSD-SA-26:62.tty affects all supported releases
FreeBSD-SA-26:63.posixshm affects all supported releases
DeltaFile
+267-0security/vuxml/vuln/2026.xml
+267-01 files

FreeBSD/ports 6caee40security/vuxml/vuln 2026.xml

security/vuxml: reference FreeBSD-SA-26:61.openssl

Add a reference to FreeBSD-SA-26:61.openssl (issued 2026-08-25) to the
vuxml entry for OpenSSL CVE-2026-14457, CVE-2026-18798, CVE-2026-54874,
CVE-2026-63072, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075 and
CVE-2026-63076

FreeBSD-SA-26:61.openssl affects all supported versions of FreeBSD
DeltaFile
+8-0security/vuxml/vuln/2026.xml
+8-01 files

LLVM/project 2c972ab.github/workflows/containers/github-action-ci-tooling Dockerfile

[Github] Bump formatting/tools container to 23.1.0 (#218815)

Now that 23.1.0 has been released, we should update the container to
ensure we're using the latest released version of the tooling.
DeltaFile
+2-2.github/workflows/containers/github-action-ci-tooling/Dockerfile
+2-21 files

LLVM/project 16852a1.github/workflows pr-code-format.yml

[Github] Hash pin ci-format container (#218816)

This follows our own CI best practices and ensures zizmor/CodeQL will
not complain about this when people inevitably touch it in the future.
DeltaFile
+1-1.github/workflows/pr-code-format.yml
+1-11 files

FreeBSD/ports d4af645devel/wasmer Makefile Makefile.crates

devel/wasmer: Update to 7.3.0

Changelog: https://github.com/wasmerio/wasmer/blob/main/CHANGELOG.md#730---21082026

PR:             297771
Reported by:    Krešimir Jozić <kjozic at gmail.com> (maintainer)
DeltaFile
+537-487devel/wasmer/distinfo
+267-242devel/wasmer/Makefile.crates
+1-2devel/wasmer/Makefile
+805-7313 files

LLVM/project cfe9defllvm/lib/IR Verifier.cpp, llvm/test/Verifier/RISCV vsetvli.ll

[RISCV][Verifier] Check operands and result type of RISC-V vsetvli/vsetvlimax (#218594)

The result of `llvm.riscv.vsetvli/vsetvlimax` models VLMAX (or a VL bounded
by it) and is only defined for XLen, so the result type must be i32 or i64.
Narrower types cannot represent the architectural VLMAX range of [1, 65536]
that value analyses rely on.

Also check that the VSEW and VLMUL immediate operands encode a valid
SEW/LMUL pair (VSEW <= 3, VLMUL != reserved), so that consumers can
assume a well-formed vtype.

Assisted-by: TRAE CLI (Opus 4.8)
DeltaFile
+25-0llvm/test/Verifier/RISCV/vsetvli.ll
+22-0llvm/lib/IR/Verifier.cpp
+47-02 files

LLVM/project 106601aclang/lib/CIR/CodeGen CIRGenBuiltinAArch64.cpp, clang/test/CodeGen arm-neon-vld.c

[CIR][AArch64] Upstream load (vld1_*/vld1q_*) NEON builtins (#218319)

Related to https://github.com/llvm/llvm-project/issues/185382

CIR lowering for load intrinsics (`vld1_*`/`vld1q_*`)

(https://arm-software.github.io/acle/neon_intrinsics/advsimd.html#stride)

Port tests:
- `clang/test/CodeGen/AArch64/neon-intrinsics.c`
- `clang/test/CodeGen/AArch64/neon-ldst-one.c`
- `clang/test/CodeGen/AArch64/poly64.c`
- `clang/test/CodeGen/arm-neon-vld.c`

to `clang/test/CodeGen/AArch64/neon/load.c`
DeltaFile
+2,240-0clang/test/CodeGen/AArch64/neon/load.c
+365-576clang/test/CodeGen/arm-neon-vld.c
+1-743clang/test/CodeGen/AArch64/neon-ldst-one.c
+0-698clang/test/CodeGen/AArch64/neon-intrinsics.c
+66-14clang/lib/CIR/CodeGen/CIRGenBuiltinAArch64.cpp
+0-20clang/test/CodeGen/AArch64/poly64.c
+2,672-2,0511 files not shown
+2,678-2,0577 files

FreeBSD/ports aa5f496security/sniffglue Makefile distinfo

sniffglue: Update to 0.16.2

Changelog: https://github.com/kpcyrd/sniffglue/releases/tag/v0.16.2

PR:             295174
Reported by:    Martin Filla <freebsd at sysctl.cz> (maintainer)
Reviewed by:    vvd, nxjoseph
DeltaFile
+223-213security/sniffglue/distinfo
+111-107security/sniffglue/Makefile
+334-3202 files

NetBSD/src 4ARDWxvsys/nfs nfs_syscalls.c

   nfs: Work around missing VM_MIN/MAX_KERNEL_ADDRESS on amd64 rump.

   PR kern/60645: nfssvc(2): arithmetic overflow in input array sizing
VersionDeltaFile
1.168+5-3sys/nfs/nfs_syscalls.c
+5-31 files