OPNSense/plugins db3ff93security/acme-client/src/opnsense/mvc/app/controllers/OPNsense/AcmeClient/forms dialogValidation.xml, security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation DnsFreeMyIp.php

security/acme-client: add support for FreeMyIP DNS API (#5682)

* add support for FreeMyIP DNS API
DeltaFile
+44-0security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation/DnsFreeMyIp.php
+10-0security/acme-client/src/opnsense/mvc/app/controllers/OPNsense/AcmeClient/forms/dialogValidation.xml
+4-0security/acme-client/src/opnsense/mvc/app/models/OPNsense/AcmeClient/AcmeClient.xml
+58-03 files

LLVM/project 34dff48llvm/lib/Transforms/Vectorize SLPVectorizer.cpp, llvm/lib/Transforms/Vectorize/SLPVectorizer SLPCompatibilityAnalysis.h

[SLP]Flatten fsub/fneg chains into fadd reductions with per-operand signs

For unordered fadd reductions, reassociable (reassoc+nsz) fsub/fneg
chain links are recursed into and their leaves tracked with a flipped
sign, which is part of the grouping key, so reduced-values groups are
sign-uniform by construction. If per-value signs cannot model the
chain, the analysis restarts once without the flattening. Negated
parts are combined with vector fsub (may form per-lane fma) and
subtracted once in the final combine; no extra negations are emitted.

Fixes #211521

Reviewers: hiraditya, RKSimon

Pull Request: https://github.com/llvm/llvm-project/pull/215840
DeltaFile
+782-359llvm/lib/Transforms/Vectorize/SLPVectorizer.cpp
+93-276llvm/test/Transforms/SLPVectorizer/X86/horizontal-fadd-with-sub.ll
+20-10llvm/test/Transforms/SLPVectorizer/AMDGPU/reduction.ll
+8-8llvm/test/Transforms/SLPVectorizer/X86/horizontal-list.ll
+3-8llvm/test/Transforms/SLPVectorizer/X86/fma-operand-index.ll
+5-0llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPCompatibilityAnalysis.h
+911-6616 files not shown
+920-66612 files

HardenedBSD/src 310012clib/libarchive/tests Makefile, sys/dev/e1000 if_em.c e1000_osdep.h

Merge remote-tracking branch 'rad/hardened/15-stable/main' into hardened/15-stable/pledge
DeltaFile
+47-46sys/kern/sched_4bsd.c
+60-0sys/dev/e1000/e1000_osdep.c
+36-9sys/kern/sched_ule.c
+13-7sys/dev/e1000/e1000_osdep.h
+9-0sys/dev/e1000/if_em.c
+6-1lib/libarchive/tests/Makefile
+171-636 files

HardenedBSD/src e0333c2lib/libarchive/tests Makefile, sys/dev/e1000 if_em.c e1000_osdep.h

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+47-46sys/kern/sched_4bsd.c
+60-0sys/dev/e1000/e1000_osdep.c
+36-9sys/kern/sched_ule.c
+13-7sys/dev/e1000/e1000_osdep.h
+9-0sys/dev/e1000/if_em.c
+6-1lib/libarchive/tests/Makefile
+171-636 files

OPNSense/plugins 9102972security/acme-client/src/opnsense/mvc/app/controllers/OPNsense/AcmeClient/forms dialogValidation.xml

security/acme-client: fix gcore indentation, refs #5544
DeltaFile
+3-3security/acme-client/src/opnsense/mvc/app/controllers/OPNsense/AcmeClient/forms/dialogValidation.xml
+3-31 files

OPNSense/plugins 6d8d131security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation DnsGCore.php DnsGcore.php, security/acme-client/src/opnsense/mvc/app/models/OPNsense/AcmeClient AcmeClient.xml

security/acme-client: fix gcore class/filename/sort order, refs #5544
DeltaFile
+0-44security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation/DnsGCore.php
+44-0security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation/DnsGcore.php
+1-1security/acme-client/src/opnsense/mvc/app/models/OPNsense/AcmeClient/AcmeClient.xml
+45-453 files

LLVM/project 9fcc880llvm/lib/Transforms/Scalar ConstraintElimination.cpp, llvm/test/Transforms/ConstraintElimination induction-relational-predicate-latch.ll induction-condition-in-loop-exit-postinc.ll

[ConstraintElim] Support loops where header is also latch. (#221494)

Remove the bail out for header == latch. We now support deriving facts
from the latch condition and the restriction is no longer necessary.

This enables inferring additional flags in a number of cases, and a few
additional folds in practice:
https://github.com/dtcxzyw/llvm-opt-benchmark-nightly/pull/1200.

It also removes a surprising limitation when writing manual tests.

PR: https://github.com/llvm/llvm-project/pull/221494
DeltaFile
+38-3llvm/test/Transforms/ConstraintElimination/induction-symbolic-start-postinc.ll
+38-0llvm/test/Transforms/ConstraintElimination/induction-condition-in-loop-exit-postinc.ll
+1-2llvm/test/Transforms/ConstraintElimination/induction-relational-predicate-latch.ll
+1-1llvm/lib/Transforms/Scalar/ConstraintElimination.cpp
+78-64 files

LLVM/project ef23a99clang/include/clang/Analysis/Analyses/LifetimeSafety LifetimeSafety.h, clang/lib/Analysis/LifetimeSafety Checker.cpp

[LifetimeSafety] Gate lifetime checks behind per-diagnostic opts (#221610)

Granular Lifetime Safety Check Gating

We split `IsLifetimeSafetyEnabled` into individual check functions in
`SemaLifetimeSafety.h`.

These properties are stored in `LifetimeSafetyOpts`, which are then
checked inside the `Checker` to avoid invoking expensive reporting
functions mapping to diagnostics that are disabled.

`reportMisplacedLifetimebound` was found to be the most expensive
(possibly because it iterates on redecls).
DeltaFile
+73-43clang/lib/Sema/SemaLifetimeSafety.h
+13-4clang/lib/Analysis/LifetimeSafety/Checker.cpp
+5-0clang/include/clang/Analysis/Analyses/LifetimeSafety/LifetimeSafety.h
+91-473 files

LLVM/project 2431992mlir/lib/Dialect/LLVMIR/IR NVVMDialect.cpp, mlir/test/Dialect/LLVMIR nvvm.mlir

[mlir][NVVM] Reject f16 WGMMA accumulators for BF16 inputs (#220869)

WGMMA supports an f32 accumulator for BF16 multiplicands. The verifier
also accepted an f16 accumulator, allowing an unsupported operation
through dialect verification.

Restrict the BF16 case to f32 and add verifier coverage to the existing
NVVM dialect test.

Found by Coverity.

Assisted-by: Codex
DeltaFile
+15-0mlir/test/Dialect/LLVMIR/nvvm.mlir
+1-2mlir/lib/Dialect/LLVMIR/IR/NVVMDialect.cpp
+16-22 files

OPNSense/plugins 5c8de2csecurity/acme-client/src/opnsense/mvc/app/controllers/OPNsense/AcmeClient/forms dialogValidation.xml, security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation DnsGCore.php

Merge pull request #5544 from olofvndrhr/master

security/acme-client: Add GCore DNS Provider
DeltaFile
+44-0security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation/DnsGCore.php
+10-0security/acme-client/src/opnsense/mvc/app/controllers/OPNsense/AcmeClient/forms/dialogValidation.xml
+4-0security/acme-client/src/opnsense/mvc/app/models/OPNsense/AcmeClient/AcmeClient.xml
+58-03 files

OPNSense/plugins c507485security/acme-client/src/opnsense/mvc/app/models/OPNsense/AcmeClient/ACL ACL.xml

Merge pull request #5473 from progS1m/patch-1

security/acme-client: fix incomplete permissions
DeltaFile
+1-0security/acme-client/src/opnsense/mvc/app/models/OPNsense/AcmeClient/ACL/ACL.xml
+1-01 files

LLVM/project cd3a265clang-tools-extra/clang-tidy/bugprone MacroParenthesesCheck.cpp, clang-tools-extra/docs ReleaseNotes.md

[clang-tidy] Fix bugprone-macro-parentheses false positives for alias names (#219955)

Fixes #219922.
DeltaFile
+10-0clang-tools-extra/test/clang-tidy/checkers/bugprone/macro-parentheses.cpp
+4-0clang-tools-extra/docs/ReleaseNotes.md
+1-1clang-tools-extra/clang-tidy/bugprone/MacroParenthesesCheck.cpp
+15-13 files

LLVM/project deed172llvm/test/Analysis/CostModel/AMDGPU fused_costs.ll, llvm/test/CodeGen/AArch64 arm64-2013-01-13-ffast-fcmp.ll

CodeGen: Drop inert -fp-contract flags from tests

-fp-contract is nearly dead, but referenced in tests. These have
no output change with or without the flag now.

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+3-89llvm/test/CodeGen/AMDGPU/GlobalISel/combine-fma-add-ext-fma.ll
+6-6llvm/test/Analysis/CostModel/AMDGPU/fused_costs.ll
+4-4llvm/test/CodeGen/AMDGPU/GlobalISel/combine-fma-add-fma-mul.ll
+0-5llvm/test/CodeGen/AArch64/arm64-2013-01-13-ffast-fcmp.ll
+1-3llvm/test/CodeGen/AMDGPU/prevent-fmul-hoist-ir.ll
+2-2llvm/test/CodeGen/AMDGPU/fdot2.ll
+16-10923 files not shown
+41-13629 files

LLVM/project 1020739orc-rt CMakeLists.txt, orc-rt/lib/bedrock CMakeLists.txt

[orc-rt] Add ORC_RT_ENABLE_PIC, default on. (#221705)

An upcoming patch will add support for building bedrock as a dylib. In
preparation for this, add ORC_RT_ENABLE_PIC option, and use it to set
POSITION_INDEPENDENT_CODE (needed for shared library builds) on the
bedrock and support object libraries.
DeltaFile
+9-0orc-rt/CMakeLists.txt
+3-0orc-rt/lib/support/CMakeLists.txt
+3-0orc-rt/lib/bedrock/CMakeLists.txt
+15-03 files

LLVM/project be0fa60clang/lib/AST ExternalASTSource.cpp, clang/unittests/AST ExternalASTSourceTest.cpp

[clang][AST] Fix generation with multiple external sources (#219189)

ExternalASTSource::incrementGeneration returns the OldGeneration,
which must be taken into account in case it is delegated to the topmost
external source.

This obsoletes a long-standing downstream patch in Cling that was
previously submitted in https://reviews.llvm.org/D39714.

Test proposed by Vassil Vassilev, assisted by Claude.
DeltaFile
+43-0clang/unittests/AST/ExternalASTSourceTest.cpp
+9-8clang/lib/AST/ExternalASTSource.cpp
+52-82 files

LLVM/project 41235ecllvm/lib/Transforms/Vectorize LoopVectorizationPlanner.h LoopVectorizationPlanner.cpp

[LV] Bring isLegalGatherOrScatter in line with existing method (NFC) (#221698)

Bring isLegalGatherOrScatter in line with isLegalMaskedLoadOrStore in
prepartion to widen gathers/scatters in VPlan.
DeltaFile
+15-5llvm/lib/Transforms/Vectorize/LoopVectorize.cpp
+5-11llvm/lib/Transforms/Vectorize/LoopVectorizationPlanner.cpp
+5-3llvm/lib/Transforms/Vectorize/LoopVectorizationPlanner.h
+25-193 files

LLVM/project afb42afllvm/lib/Target/NVPTX NVPTXIntrinsics.td, llvm/test/CodeGen/NVPTX f16-add.ll f16-sub.ll

[clang][NVPTX][MLIR][NVVM] Add overloaded fadd intrinsics (#221681)

This change adds the following overloaded `fadd` intrinsics with
NVPTX codegen:

- `llvm.nvvm.fadd`
- `llvm.nvvm.fadd.ftz`
- `llvm.nvvm.fadd.sat`
- `llvm.nvvm.fadd.ftz.sat`

The rounding mode is passed in as an `i32` immediate operand.

Auto-upgrades the older non-overloaded intrinsics to the new
ones, and updates clang builtins, CIR codegen, and MLIR NVVM ops
to lower to the new intrinsics.

In the interest of completion, this also:
- Adds intrinsics support for lowering some half-precision additions 
that were omitted earlier (`f16/f16x2` without saturation, and

    [9 lines not shown]
DeltaFile
+658-114llvm/test/Transforms/InstSimplify/const-fold-nvvm-add.ll
+111-171mlir/test/Target/LLVMIR/nvvm/subf/subf_vector.mlir
+97-158mlir/test/Target/LLVMIR/nvvm/addf/addf_vector.mlir
+137-79llvm/lib/Target/NVPTX/NVPTXIntrinsics.td
+133-0llvm/test/CodeGen/NVPTX/f16-sub.ll
+123-0llvm/test/CodeGen/NVPTX/f16-add.ll
+1,259-52234 files not shown
+2,177-1,04540 files

LLVM/project 28370a6clang/test/OpenMP parallel_for_codegen.cpp, llvm/test/CodeGen/AArch64 cmpbr-ccmp.mir

Merge branch 'main' into users/usx95/lifetime-safety-checker-pay-what-you-use
DeltaFile
+1,049-1,049clang/test/OpenMP/parallel_for_codegen.cpp
+892-872llvm/test/CodeGen/AMDGPU/llvm.amdgcn.sched.group.barrier.ll
+546-687llvm/test/CodeGen/AMDGPU/llvm.amdgcn.mfma.ll
+488-475llvm/test/CodeGen/AMDGPU/llvm.amdgcn.iglp.opt.ll
+794-0llvm/test/CodeGen/AArch64/cmpbr-ccmp.mir
+337-388llvm/test/CodeGen/AMDGPU/mfma-cd-select.ll
+4,106-3,471293 files not shown
+11,202-6,369299 files

LLVM/project eb68adallvm/lib/Target/SPIRV SPIRVNonSemanticDebugHandler.cpp, llvm/test/CodeGen/SPIRV/debug-info debug-local-variable-skip-type.ll debug-local-variable-retained-nodes.ll

[SPIRV] Add support for NSDI DebugLocalVariable.
DeltaFile
+69-11llvm/lib/Target/SPIRV/SPIRVNonSemanticDebugHandler.cpp
+58-0llvm/test/CodeGen/SPIRV/debug-info/debug-local-variable.ll
+42-0llvm/test/CodeGen/SPIRV/debug-info/debug-local-variable-records-and-retained.ll
+40-0llvm/test/CodeGen/SPIRV/debug-info/debug-local-variable-retained-nodes.ll
+40-0llvm/test/CodeGen/SPIRV/debug-info/debug-local-variable-dbg-value.ll
+32-0llvm/test/CodeGen/SPIRV/debug-info/debug-local-variable-skip-type.ll
+281-111 files not shown
+301-117 files

LLVM/project bf7aaf7llvm/include/llvm/Analysis ValueTracking.h, llvm/test/Transforms/DeadStoreElimination wide-pointer-index-offset.ll

[ValueTracking] Handle idx widths > 64 bit in GetPointerBaseWithConst. (#221692)

GetPointerBaseWithConstantOffset may be called for GEPs with indices
that do not fit into 64 bit. Use trySExtValue to avoid assertions in the
newly added tests.

PR: https://github.com/llvm/llvm-project/pull/221692
DeltaFile
+34-0llvm/test/Transforms/DeadStoreElimination/wide-pointer-index-offset.ll
+8-1llvm/include/llvm/Analysis/ValueTracking.h
+42-12 files

OpenBSD/ports dQfItdbnet/telescope/patches patch-control_c patch-telescope_c

   telescope: fix build after imsg_get() removal

   ok claudio op (maintainer)
VersionDeltaFile
1.1+24-0net/telescope/patches/patch-telescope_c
1.1+24-0net/telescope/patches/patch-net_c
1.1+21-0net/telescope/patches/patch-control_c
+69-03 files

OpenBSD/ports YbjbTTJaudio/amused/patches patch-amused_c patch-player_c

   amused: fix build after imsg_get() removal

   ok claudio op (maintainer)
VersionDeltaFile
1.1+25-0audio/amused/patches/patch-web_web_c
1.1+24-0audio/amused/patches/patch-ctl_c
1.1+23-0audio/amused/patches/patch-mpris2_mpris2_c
1.1+23-0audio/amused/patches/patch-control_c
1.2+22-0audio/amused/patches/patch-player_c
1.1+14-0audio/amused/patches/patch-amused_c
+131-06 files

LLVM/project bb577f6llvm/lib/Target/AArch64/GISel AArch64InstructionSelector.cpp, llvm/test/CodeGen/AArch64/GlobalISel preselect-process-phis.mir select-bitcast.mir

[AArch64][GlobalISel] Select i16/f16 cross-bank bitcasts (#220612)

Test bitcast_to_half in
llvm/test/CodeGen/AArch64/GlobalISel/arm64-atomic.ll crashes with

  H0 = COPY W8
  unimplemented reg-to-reg copy
  UNREACHABLE executed at

/home/culrho01/llvm-project/llvm/lib/Target/AArch64/AArch64InstrInfo.cpp:6363!

when type-based RegBankSelect (#199040) is enabled. Normal RBS keeps
both operands on GPR and moves to FPR afterward. This extends
instruction select to support bitcasts where src/dst reg bank doens't
match.

Assisted-by: codex
DeltaFile
+44-0llvm/test/CodeGen/AArch64/GlobalISel/select-bitcast.mir
+42-0llvm/lib/Target/AArch64/GISel/AArch64InstructionSelector.cpp
+4-2llvm/test/CodeGen/AArch64/GlobalISel/preselect-process-phis.mir
+90-23 files

LLVM/project 65b2748libc CMakeLists.txt, libc/docs/dev index.md code_coverage.md

[libc] Enable code coverage using continuous instrumentation profiling (#213271)

This patch adds coverage to LLVM-libc using Clang continuous
instrumentation.

The `LIBC_ENABLE_COVERAGE` CMake option enables
`-fprofile-instr-generate=libc_cov_%c%p.profraw`, `-fcoverage-mapping`,
and `-fprofile-continuous` for Clang overlay builds, and is limited to
overlay build.

Developer documentation and usage instructions are added in
`libc/docs/dev/code_coverage.md` and indexed in
`libc/docs/dev/index.md`.

Assisted-by: Automated tooling, human reviewed.
DeltaFile
+438-0libc/docs/dev/code_coverage.md
+30-0libc/CMakeLists.txt
+1-0libc/docs/dev/index.md
+469-03 files

NetBSD/pkgsrc IJmEFxGdoc CHANGES-2026

   Updated converters/py-ansi2html, devel/py-rich-click
VersionDeltaFile
1.5912+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc FfmsDMvdevel/py-rich-click Makefile distinfo

   py-rich-click: updated to 1.9.9

   1.9.9
   Fixed ctx.forward() not working with commands patched via rich_click.patch()
   Added support for Click 8.5 (resolved DeprecationWarnings)
VersionDeltaFile
1.9+4-4devel/py-rich-click/distinfo
1.13+2-2devel/py-rich-click/Makefile
+6-62 files

NetBSD/pkgsrc VqmQJBTconverters/py-ansi2html Makefile distinfo

   py-ansi2html: updated to 1.9.5

   1.9.5

   Fixes

   truecolor: only add each color once
VersionDeltaFile
1.3+4-4converters/py-ansi2html/distinfo
1.5+2-2converters/py-ansi2html/Makefile
+6-62 files

NetBSD/pkgsrc UZ5EeRqdoc TODO CHANGES-2026

   doc: Updated geography/mapserver to 8.6.6
VersionDeltaFile
1.27870+1-2doc/TODO
1.5911+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc 3mX5eASgeography/mapserver Makefile distinfo

   geography/mapserver: Update to 8.6.6

   This release contains multiple security fixes, for issues that are
   surely not all listed in pkg-vulnerabilities.

   Upstream NEWS (misplaced in HISTORY.md), less non-NEWS content:

   8.6.6 release (2026-09-06)
   --------------------------

   8.6.5 release (2026-07-10)
   --------------------------
VersionDeltaFile
1.19+4-4geography/mapserver/distinfo
1.151+2-3geography/mapserver/Makefile
+6-72 files

NetBSD/pkgsrc Dgqf3ADdoc CHANGES-2026

   Updated security/yara, security/py-yara
VersionDeltaFile
1.5910+3-1doc/CHANGES-2026
+3-11 files