OPNSense/core 92d87e9src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms dialogFilterRule.xml, src/opnsense/mvc/app/library/OPNsense/Firewall Rule.php

Add the received-on to the cartesian product of multi select rules
DeltaFile
+26-17src/opnsense/mvc/app/library/OPNsense/Firewall/Rule.php
+12-0src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php
+3-2src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogFilterRule.xml
+1-1src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml
+42-204 files

LLVM/project a909ce1flang/test/Fir convert-to-llvm-openmp-and-fir.fir, mlir/test/Conversion/ArithToLLVM arith-to-llvm.mlir

[mlir] Build llvm.mlir.constant attributes from the result type

Many conversion patterns created `llvm.mlir.constant` with a value attribute
whose type does not match the result type. The most common case was pairing an
`index`-typed attribute with the converted index type:

  llvm.mlir.constant(1 : index) : i64

but there were also plain width and signedness mismatches, e.g. NVGPU's
`makeI64Const` built `i64` constants from `i32` attributes, and the NVVM `fdiv`
expansion used `ui32` attributes on `i32` values.

Translation to LLVM IR ignores the attribute type and uses the result type, so
the emitted IR was correct, but the attribute type is meaningless in this state
and anything that reads it back sees the wrong type. Derive the attribute from
the result type in every case; where the result is the converted index type,
`LLVM::createIndexAttrConstant` now does this for all of its callers.

In `ArithToLLVM`, retype the value attribute when the type converter maps

    [13 lines not shown]
DeltaFile
+63-63mlir/test/Target/LLVMIR/llvmir.mlir
+58-58mlir/test/Conversion/MemRefToLLVM/memref-to-llvm.mlir
+115-1mlir/test/Conversion/ArithToLLVM/arith-to-llvm.mlir
+55-55mlir/test/Conversion/MemRefToLLVM/expand-then-convert-to-llvm.mlir
+49-43flang/test/Fir/convert-to-llvm-openmp-and-fir.fir
+45-45mlir/test/Conversion/MemRefToLLVM/convert-dynamic-memref-ops.mlir
+385-265106 files not shown
+1,144-885112 files

LLVM/project 092f866mlir/include/mlir/Dialect/LLVMIR LLVMDialect.h, mlir/lib/Dialect/LLVMIR/IR LLVMDialect.cpp

[mlir][NFC] Expose getConstantElementType from the LLVM dialect

The `llvm.mlir.constant` verifier determines the element type it compares by
looking through LLVM array types and then a vector or tensor type. Conversion
code that builds such constants needs the same notion, so make the helper
available instead of leaving it file-static in `LLVMDialect.cpp`.

Co-Authored-By: Claude Opus 5 (1M context) <noreply at anthropic.com>
DeltaFile
+7-0mlir/include/mlir/Dialect/LLVMIR/LLVMDialect.h
+3-3mlir/lib/Dialect/LLVMIR/IR/LLVMDialect.cpp
+10-32 files

OPNSense/core 9e16220src/opnsense/mvc/app/views/layout_partials base_dialog.volt

fix dialog
DeltaFile
+1-1src/opnsense/mvc/app/views/layout_partials/base_dialog.volt
+1-11 files

OPNSense/core 3ff53bcsrc/opnsense/mvc/app/views/layout_partials form_input_tr.volt base_form.volt

fa-cog fa-sm
DeltaFile
+2-2src/opnsense/mvc/app/views/layout_partials/base_form.volt
+2-2src/opnsense/mvc/app/views/layout_partials/base_dialog.volt
+1-1src/opnsense/mvc/app/views/layout_partials/form_input_tr.volt
+5-53 files

LLVM/project b8028f7clang/docs ReleaseNotes.md, clang/include/clang/Basic DiagnosticGroups.td

Revert "Reland "[Clang] Enable -Wunused-template under -Wall" (#208001)" (#218638)

This reverts commit 1529d35adbd6f13aa234a5f4cfd9ac0e28bdd338.

There are two issues:
- The change appear fairly disruptive so close to release (see comments
on #208001)
 - there are false positives (see #218429)

(cherry picked from commit 8710728e04184f0a695a3898effd40df5a2b8aef)
DeltaFile
+0-5clang/docs/ReleaseNotes.md
+0-2clang/test/Misc/warning-wall.c
+1-1clang/test/SemaCXX/warn-variable-not-needed.cpp
+1-1clang/test/SemaCXX/warn-func-not-needed.cpp
+1-1clang/include/clang/Basic/DiagnosticGroups.td
+3-105 files

LLVM/project f1cdfbellvm/lib/Target/X86 X86ISelLowering.cpp, llvm/test/CodeGen/X86 fminimumnum-fmaximumnum.ll

[X86] Fix NaN handling in minimumnum/maximumnum zero fixup (#217420)

Fix the X86 lowering of `minimumnum`/`maximumnum` when the first operand
is NaN and signed-zero handling is required.

`PSEUDO_FMIN`/`PSEUDO_FMAX` already select the numeric second operand
when the first operand is NaN. However, the subsequent signed-zero fixup can
modify that numeric result using the sign bit of the first operand.

For example, `minimumnum(-qNaN, +1.0)` can therefore turn the correctly
selected `+1.0` into `-1.0`.

Restore the second operand when the first operand is NaN after the
signed-zero fixup. The additional check is restricted to numeric min/max
operations where NaNs cannot be ignored and the first operand is not
already known to be non-NaN.

The existing handling for a NaN second operand remains unchanged.


    [14 lines not shown]
DeltaFile
+823-249llvm/test/CodeGen/X86/fminimumnum-fmaximumnum.ll
+7-0llvm/lib/Target/X86/X86ISelLowering.cpp
+830-2492 files

LLVM/project 81e0360lldb/bindings interfaces.swig macros.swig, lldb/bindings/python python-typemaps.swig

[lldb] Fix SBStructuredData::GetStringValue method (#216875)

In python the method's signature is
```py
class SBStructuredData:
    def GetStringValue(self, dst_len: int) -> str:
```
There is no way from python to get the total data from GetStringValue
regardless of how many times you call GetStringValue.

Update the implementation
```py
    def GetStringValue(self, len: int = 0) -> str:
```

Fixes crash when input is None in `SBStructuredData.SetStringValue`
Don't trim the result when called with the `dynamic` property.

(cherry picked from commit 93377d703115b45c3ad8f5f218cb85769d24a1b0)
DeltaFile
+31-14lldb/bindings/python/python-typemaps.swig
+27-2lldb/test/API/python_api/sbstructureddata/TestStructuredDataAPI.py
+24-0lldb/bindings/macros.swig
+10-6lldb/include/lldb/Core/StructuredDataImpl.h
+2-2lldb/tools/lldb-dap/LLDBUtils.cpp
+3-0lldb/bindings/interfaces.swig
+97-243 files not shown
+100-289 files

LLVM/project 24fdc74llvm/lib/Analysis ScalarEvolution.cpp, llvm/test/Analysis/ScalarEvolution no-wrap-unknown-becount.ll different-loops-recs.ll

[SCEV] Use the cheap BE-count formula if the IV cannot overflow. (#218251)

howManyLessThans computes the backedge-taken count as "((End - Start) +
(Stride - 1)) /u Stride" when that addition is known not to overflow,
and otherwise via getUDivCeilSCEV.

canIVOverflowOnLT returning false establishes RHS <= MAX - (Stride - 1).
End is max(RHS, Start) and Start is at least MIN, so the distance End -
Start is at most MAX - (Stride - 1) - MIN, which is UMAX - (Stride - 1)
for both the signed and the unsigned interpretation, and the addition
cannot overflow.

This unifies the logic matching the howManyGreatherThans, in preparation
for unifying it with howManyLessThans.

Alive2 Proof: https://alive2.llvm.org/ce/z/aXPPxq

PR: https://github.com/llvm/llvm-project/pull/218251
DeltaFile
+29-29llvm/test/Analysis/ScalarEvolution/different-loops-recs.ll
+7-19llvm/test/Transforms/LoopVectorize/nested-loops-scev-expansion.ll
+6-12llvm/test/Transforms/LoopVectorize/RISCV/induction-costs.ll
+6-10llvm/test/Transforms/LoopVectorize/RISCV/blocks-with-dead-instructions.ll
+11-3llvm/lib/Analysis/ScalarEvolution.cpp
+6-6llvm/test/Analysis/ScalarEvolution/no-wrap-unknown-becount.ll
+65-793 files not shown
+71-889 files

LLVM/project d68717aclang/test/CodeGen/Sparc sparc-vaarg.c

[NFC][Sparc] add more V8 `va_arg` tests (#218720)

pre-commit for https://github.com/llvm/llvm-project/pull/214981
DeltaFile
+163-21clang/test/CodeGen/Sparc/sparc-vaarg.c
+163-211 files

OPNSense/core 04cb65dsrc/opnsense/mvc/app/controllers/OPNsense/Firewall/forms dialogFilterRule.xml, src/opnsense/mvc/app/views/OPNsense/Firewall filter_rule.volt

Make the header formatters more individual
DeltaFile
+2-2src/opnsense/mvc/app/views/OPNsense/Firewall/filter_rule.volt
+1-0src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogFilterRule.xml
+3-22 files

NetBSD/pkgsrc pkS2Oilmail/exim-html Makefile

   exim-html: fix MASTER_SITES
VersionDeltaFile
1.56+2-2mail/exim-html/Makefile
+2-21 files

NetBSD/pkgsrc ak86hTslang/gcc16 Makefile.common

   gcc16: remove SunOS section that doesn't apply any longer
VersionDeltaFile
1.2+1-8lang/gcc16/Makefile.common
+1-81 files

LLVM/project f6f43d3llvm/lib/Transforms/Utils BuildLibCalls.cpp, llvm/test/Transforms/InferFunctionAttrs annotate.ll

[Transforms] Infer attributes for posix_memalign
DeltaFile
+8-0llvm/lib/Transforms/Utils/BuildLibCalls.cpp
+2-1llvm/test/Transforms/InferFunctionAttrs/annotate.ll
+10-12 files

LLVM/project 11d30dbclang/test/OpenMP bug54082.c callback_capture_lifetime.cpp, flang/test/Integration/OpenMP callback-capture-lifetime.f90

[OpenMP] Seed noalias for host callback captures

The generic Attributor can derive noalias and the related lifetime facts for callback-mapped capture arguments, but OpenMPOpt does not seed AANoAlias in its restricted host run. Consequently capture-container loads remain in loops under dereferenceable-at-point semantics.

Seed AANoAlias for pointer arguments mapped to broker operands by callback metadata. Existing call-site reasoning checks every callback and direct call site and rejects escaped or aliased slots. LICM can then hoist immutable capture-container loads without changing the callback ABI or adding an OpenMP-specific hoisting transform.

Add LLVM, Clang, and Flang coverage for pointer, scalar, and aggregate captures together with escaped, duplicated, unmapped, and unknown-use negatives.
DeltaFile
+262-0llvm/test/Transforms/OpenMP/callback-capture-lifetime.ll
+48-0flang/test/Integration/OpenMP/callback-capture-lifetime.f90
+41-0clang/test/OpenMP/callback_capture_lifetime.cpp
+19-2llvm/lib/Transforms/IPO/OpenMPOpt.cpp
+9-11clang/test/OpenMP/bug54082.c
+6-6llvm/test/Transforms/OpenMP/parallel_region_merging.ll
+385-191 files not shown
+390-247 files

LLVM/project 4832256llvm/lib/Transforms/IPO AttributorAttributes.cpp, llvm/test/Transforms/Attributor callbacks.ll callback-noalias.ll

[Attributor] Check callback broker argument aliases correctly

AbstractCallSite uses separate callback argument and broker operand numbers. AANoAliasCallSiteArgument currently skips the callback argument number while iterating broker operands, which can skip an unrelated operand and incorrectly infer noalias for aliased callback arguments.

Skip the mapped call-site operand instead. Add a duplicated-operand regression where the callback and broker argument numbers differ.
DeltaFile
+57-0llvm/test/Transforms/Attributor/callback-noalias.ll
+28-26llvm/test/Transforms/Attributor/callbacks.ll
+5-5llvm/test/Transforms/OpenMP/parallel_deletion.ll
+1-1llvm/lib/Transforms/IPO/AttributorAttributes.cpp
+91-324 files

OPNSense/core ec11fdfsrc/etc/inc interfaces.inc, src/etc/inc/plugins.inc.d core.inc

interfaces: adjustments to remaining isset() use in wlan code
DeltaFile
+8-14src/etc/inc/interfaces.inc
+2-1src/etc/inc/plugins.inc.d/core.inc
+10-152 files

OpenBSD/ports uMghXCznet/icinga/core2 Makefile distinfo

   update to icinga2-2.16.5
VersionDeltaFile
1.69+2-2net/icinga/core2/distinfo
1.161+1-1net/icinga/core2/Makefile
+3-32 files

LLVM/project d31eaf1mlir/include/mlir/Dialect/SCF/Utils Utils.h, mlir/lib/Dialect/SCF/Utils Utils.cpp

[mlir] Add splitForOpAtBound utility and use it in loop unrolling (#215108)

## Summary
Adds `splitForOpAtPoint` to split an `scf.for` at a given split point:
- first loop: `[lowerBound, splitPoint)`
- second loop: `[splitPoint, upperBound)`
The original loop is not mutated in place. Two new loops are cloned,
iter-args
are chained from the first to the second, uses of the original results
are
rewired, and the original op is erased. The helper returns `{first,
second}`.
The split point is validated as:
- `lowerBound <= splitPoint < upperBound`
- `step > 0`
- `splitPoint == lowerBound + k * step`
When the needed values are constant, an invalid split fails at compile
time.
When any of them is dynamic, the same conditions are emitted as runtime

    [15 lines not shown]
DeltaFile
+341-0mlir/test/Dialect/SCF/split-for-op-at-point.mlir
+58-15mlir/lib/Dialect/SCF/Utils/Utils.cpp
+59-0mlir/test/lib/Dialect/SCF/TestSCFUtils.cpp
+18-0mlir/test/Dialect/SCF/loop-unroll.mlir
+17-0mlir/include/mlir/Dialect/SCF/Utils/Utils.h
+9-0mlir/lib/Dialect/Utils/StaticValueUtils.cpp
+502-151 files not shown
+505-157 files

LLVM/project f726b86libc/src/__support/FPUtil sqrt.h

[libc] Only use the x86_64 sqrt inline asm on x86_64 (#218721)

x86_64/sqrt.h is included whenever SSE2 is available, but it #errors out
unless the target is x86_64. This breaks 32-bit x86 builds which enable
SSE2 (e.g. -march=pentium4 -mfpmath=sse), so also require x86_64 here
and let 32-bit x86 use the unconditionally-included generic/sqrt.h
instead.
DeltaFile
+1-1libc/src/__support/FPUtil/sqrt.h
+1-11 files

OpenBSD/ports 6vuHsWMwww/tomcat/v10 Makefile distinfo, www/tomcat/v10/pkg DESCR-examples PLIST-examples

   update to tomcat-10.1.59
VersionDeltaFile
1.41.2.4+4-4www/tomcat/v10/distinfo
1.35.2.2+3-1www/tomcat/v10/pkg/PLIST-examples
1.48.2.4+1-1www/tomcat/v10/Makefile
1.1.18.1+2-0www/tomcat/v10/pkg/DESCR-examples
+10-64 files

OpenBSD/ports X6TPpudwww/tomcat/v10 Makefile distinfo, www/tomcat/v10/pkg DESCR-examples PLIST-examples

   update to tomcat-10.1.59
VersionDeltaFile
1.45+4-4www/tomcat/v10/distinfo
1.37+3-1www/tomcat/v10/pkg/PLIST-examples
1.52+1-1www/tomcat/v10/Makefile
1.2+2-0www/tomcat/v10/pkg/DESCR-examples
+10-64 files

LLVM/project 1b0e2e1mlir/lib/Dialect/SCF/Transforms LoopSpecialization.cpp, mlir/test/Dialect/SCF for-loop-peeling-front.mlir

[mlir][SCF] Skip dynamic front-peeling for non-index loops (#218238)

`peelForLoopFirstIteration` computes the new lower bound with an
`affine.apply` whose operands are the loop's lower bound and step.
`affine.apply` requires operands of type `index`, while `scf.for` also
permits signless integer IV and bounds, so the operation can be
constructed with operands that it does not accept.

This is the same underlying issue as #216631 / #217909, in the sibling
"peel front" path.

Skip the front-peeling path when the loop induction variable is not
`index`, mirroring the guard added in #217909. The existing
constant-bounds path is unaffected.

---------

Signed-off-by: Federico Bruzzone <federico.bruzzone.i at gmail.com>
DeltaFile
+21-0mlir/test/Dialect/SCF/for-loop-peeling-front.mlir
+7-0mlir/lib/Dialect/SCF/Transforms/LoopSpecialization.cpp
+28-02 files

OPNSense/core 6d98acdsrc/etc/inc interfaces.inc, src/opnsense/mvc/app/controllers/OPNsense/Interfaces/forms dialogWireless.xml

Interfaces: Wireless: Devices - Migrate to MVC code, second phase, move settings from Interfaces into Wireless. closes https://github.com/opnsense/core/issues/10751 (#10796)

Move all settings from interface.XXX.wireless to wireless.clone and cleanup code referencing the old spot.

The console menu contained some, likely incomplete, code, which we will remove here as well, it doesn't feel very usefull trying to offer console configuration for wireless anyway.
Not all validations are being migrated, only the most relevant ones, which should be good enough.
DeltaFile
+0-999src/www/interfaces.php
+365-3src/opnsense/mvc/app/controllers/OPNsense/Interfaces/forms/dialogWireless.xml
+206-0src/opnsense/mvc/app/models/OPNsense/Interfaces/Wlan.xml
+35-136src/etc/inc/interfaces.inc
+101-0src/opnsense/mvc/app/models/OPNsense/Interfaces/Migrations/WLAN1_0_0.php
+100-0src/opnsense/mvc/app/models/OPNsense/Interfaces/Wlan.php
+807-1,1389 files not shown
+931-1,29915 files

OPNSense/core a009347src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms dialogOneToOneRule.xml dialogNptRule.xml, src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes JsonAuditField.php

Merge branch 'master' into FR10751_WiFi
DeltaFile
+161-22src/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes/AliasNameField.php
+147-0src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/JsonAuditField.php
+75-1src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogSNatRule.xml
+74-0src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogOneToOneRule.xml
+74-0src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogNptRule.xml
+74-0src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogFilterRule.xml
+605-2328 files not shown
+873-10734 files

NetBSD/src E3xReL5sys/uvm uvm_fault.c

   Kernels ALL/i386 and ALL/amd64 warn "'ticket' may be used uninitialized"
   at line 244, uvmfault_amapcopy(): "uvm_wait("fltamapcopy", ticket);".

   Restructure to reflect the logic better and keep GCC quiet.

   Ok: Taylor R Campbell

   PR kern/58964: uvm: missing wakeup on uvmexp.free
   PR kern/60029: panic: cpu0: softints stuck for 16 seconds
VersionDeltaFile
1.241+11-10sys/uvm/uvm_fault.c
+11-101 files

OPNSense/core ef61fffsrc/opnsense/mvc/app/models/OPNsense/Firewall Filter.php

Syntactically received-on is valid for all directions, but it makes sense for out rules primarily. Validate to prevent weird user decisions here.
DeltaFile
+6-0src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.php
+6-01 files

OpenBSD/src ol9kZtlsys/kern uipc_syscalls.c

   Fix control message handling in recvit to avoid out of bounds write
   to userland

   Because of the use of a unsigned variable to track the length of the
   control buffer recvit can underflow that variable because of an unchecked
   ALIGN(). This can be triggered by passing a too short buffer that is not a
   multiple of _ALIGNBYTES + 1. In such a case the kernel copies out data past
   the provided buffer.

   On top of addding the missing overflow check this also uses the proper
   socklen_t type for the msg_controllen and uses an unsigned int for the
   still overloaded variable i.

   The security implications of this are mainly theoretical.  The correct use
   of control message handling requires the use of CMSG_SPACE which ensures
   the buffer size is properly rounded. In base only dig uses a buffer that
   is not correctly rounded at the same time it is oversized enough to not
   matter.


    [2 lines not shown]
VersionDeltaFile
1.228+19-12sys/kern/uipc_syscalls.c
+19-121 files

NetBSD/pkgsrc ogjbCDAdoc CHANGES-2026

   doc: Updated security/openssl to 3.6.4nb1
VersionDeltaFile
1.5539+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc PJSJn4fsecurity/openssl Makefile

   openssl: fix pkg-config rpath

   For some reason there are two copies? and only one was fixed by pkgsrc,
   but the other one was installed.

   Fixes PR 60643.

   Bump PKGREVISION.
VersionDeltaFile
1.320+3-2security/openssl/Makefile
+3-21 files