FreeNAS/freenas 3370185src/middlewared/middlewared/api/v26_0_0 container.py, src/middlewared/middlewared/api/v27_0_0 container.py

Add recursive option to container delete

## Problem
A container whose dataset has dependents could not be deleted at all, and the attempt was not free: the libvirt domain was torn down before ZFS refused the destroy, killing a running container and discarding a suspended one's state for a delete that was never going to succeed.

## Solution
Validate the dataset up front, before any libvirt state is touched, so a delete that cannot succeed is refused cleanly and the container is left exactly as it was. Adds a `recursive` delete option that destroys the dataset together with its dependents for callers who do want it gone. Both refusals are now validation errors naming the option that lifts them, which means deleting a running container without `force` returns a validation error where it previously returned a call error.
DeltaFile
+65-1tests/api2/test_container.py
+45-10src/middlewared/middlewared/plugins/container/crud.py
+11-1src/middlewared/middlewared/api/v26_0_0/container.py
+10-0src/middlewared/middlewared/api/v27_0_0/container.py
+4-0src/middlewared/middlewared/plugins/container/__init__.py
+135-125 files

LLVM/project e4693c0libc CMakeLists.txt, libc/config/linux config.json

[libc] Add __isoc99_fscanf alias. (#213125)

- Add LLVM_LIBC_ADD_FUNCTION_C_ALIAS macro to add another C alias public
symbol to a function.
- Add LIBC_CONF_SCANF_PROVIDE_ISOC99_ALIASES config
- Add __isoc99_fscanf for generic fscanf target if
LIBC_CONF_SCANF_PROVIDE_ISOC99_ALIASES is set.
- Similarly: scanf, vfscanf, vscanf.
DeltaFile
+16-0libc/src/__support/common.h
+5-0libc/config/linux/config.json
+5-0libc/CMakeLists.txt
+4-0libc/src/stdio/vsscanf.cpp
+4-0libc/src/stdio/sscanf.cpp
+4-0libc/src/stdio/generic/vscanf.cpp
+38-06 files not shown
+61-112 files

OPNSense/core adc74b5src/opnsense/mvc/app/controllers/OPNsense/Base ControllerBase.php, src/opnsense/mvc/app/controllers/OPNsense/Core/Api MenuController.php

menu: add Favorites section - minor cleanups for https://github.com/opnsense/core/pull/10033
DeltaFile
+0-115src/opnsense/mvc/app/models/OPNsense/Core/Favorites.php
+25-25src/opnsense/www/js/opnsense_favorites.js
+15-13src/opnsense/mvc/app/controllers/OPNsense/Core/Api/MenuController.php
+12-6src/opnsense/mvc/app/models/OPNsense/Core/Menu/Menu.php
+4-2src/opnsense/mvc/app/controllers/OPNsense/Base/ControllerBase.php
+3-2src/www/head.inc
+59-1633 files not shown
+60-1669 files

NetBSD/src zvzrQRLexternal/cddl/osnet/lib/libdtrace Makefile

   libdtrace/Makefile: Add to, don't overwrite, CLEANFILES.

   PR lib/60530: NetBSD 11.0 cleandir leaves
   external/cddl/osnet/lib/libdtrace/obj/dtrace.expsym around
VersionDeltaFile
1.35+2-2external/cddl/osnet/lib/libdtrace/Makefile
+2-21 files

NetBSD/src ZYWB1Opdoc CHANGES-11.1

   Tickets #394 - #398, #400 - #404, #409, #410
VersionDeltaFile
1.1.2.2+69-1doc/CHANGES-11.1
+69-11 files

NetBSD/src GprLSBusys/dev/usb motg.c

   Pull up following revision(s) (requested by skrll in ticket #410):

        sys/dev/usb/motg.c: revision 1.44

   motg: support control transfers (endpoint zero) aborts.

   Tested by Brook Milligan.
VersionDeltaFile
1.43.4.1+24-25sys/dev/usb/motg.c
+24-251 files

NetBSD/src 2m9Y3npdoc CHANGES-9.5

   Tickets #2042 - #2044
VersionDeltaFile
1.1.2.122+31-1doc/CHANGES-9.5
+31-11 files

LLVM/project 7ed5bbeclang/lib/Parse ParseOpenMP.cpp, clang/test/SemaOpenMP gh197162.c invalid-clause-on-directive.c

[Clang][OpenMP] Skip Sema actions for invalid assumption clauses (#212822)

Do not call the Sema actions for absent, contains, and nullary assumption
clauses after the parser has diagnosed that the clause is not allowed on the
current directive.

Add assertions documenting that these Sema actions must only receive clauses
allowed on the current directive, and add tests covering all affected clause
kinds.

Fixes #212780.
DeltaFile
+25-0clang/test/SemaOpenMP/invalid-clause-on-directive.c
+6-4clang/lib/Parse/ParseOpenMP.cpp
+0-6clang/test/SemaOpenMP/gh197162.c
+31-103 files

NetBSD/src qzmi31Yexternal/public-domain/tz/dist theory.html europe

   Pull up the following, requested by kre in ticket #2044:

        external/public-domain/tz/dist/Makefile         up to 1.6
        external/public-domain/tz/dist/NEWS             up to 1.8
        external/public-domain/tz/dist/TZDATA_VERSION   up to 1.46
        external/public-domain/tz/dist/africa           up to 1.4
        external/public-domain/tz/dist/australasia      up to 1.13
        external/public-domain/tz/dist/europe           up to 1.6
        external/public-domain/tz/dist/leap-seconds.list up to 1.12
        external/public-domain/tz/dist/leapseconds      up to 1.12
        external/public-domain/tz/dist/northamerica     up to 1.7
        external/public-domain/tz/dist/theory.html      up to 1.6
        external/public-domain/tz/dist/version          up to 1.19
        external/public-domain/tz/dist/ziguard.awk      up to 1.1.1.12
        external/public-domain/tz/dist/zone.tab         up to 1.6
        external/public-domain/tz/dist/zone1970.tab     up to 1.7
        external/public-domain/tz/dist/zonenow.tab      up to 1.8
        doc/3RDPARTY                                    (apply patch)

   Updates tzdata to 2023cgtz
VersionDeltaFile
1.1.1.20.2.10+32-159external/public-domain/tz/dist/africa
1.1.1.23.2.11+107-14external/public-domain/tz/dist/northamerica
1.1.1.27.2.13+70-7external/public-domain/tz/dist/NEWS
1.1.1.24.2.12+17-28external/public-domain/tz/dist/Makefile
1.1.1.24.2.12+14-7external/public-domain/tz/dist/europe
1.1.1.8.2.10+9-9external/public-domain/tz/dist/theory.html
+249-22410 files not shown
+275-24716 files

NetBSD/src I4uyjqSdoc CHANGES-10.2

   Tickets #1320 - #1322
VersionDeltaFile
1.1.2.122+31-1doc/CHANGES-10.2
+31-11 files

NetBSD/src kjQIgeAexternal/public-domain/tz/dist theory.html europe

   Pull up the following, requested by kre in ticket #1322

        external/public-domain/tz/dist/Makefile         up to 1.6
        external/public-domain/tz/dist/NEWS             up to 1.8
        external/public-domain/tz/dist/TZDATA_VERSION   up to 1.46
        external/public-domain/tz/dist/africa           up to 1.4
        external/public-domain/tz/dist/australasia      up to 1.13
        external/public-domain/tz/dist/europe           up to 1.6
        external/public-domain/tz/dist/leap-seconds.list up to 1.12
        external/public-domain/tz/dist/leapseconds      up to 1.12
        external/public-domain/tz/dist/northamerica     up to 1.7
        external/public-domain/tz/dist/theory.html      up to 1.6
        external/public-domain/tz/dist/version          up to 1.19
        external/public-domain/tz/dist/ziguard.awk      up to 1.1.1.12
        external/public-domain/tz/dist/zone.tab         up to 1.6
        external/public-domain/tz/dist/zone1970.tab     up to 1.7
        external/public-domain/tz/dist/zonenow.tab      up to 1.8
        doc/3RDPARTY                                    (apply patch)

   Update tzdata to 2023c (gtc).
VersionDeltaFile
1.1.1.30.2.6+32-159external/public-domain/tz/dist/africa
1.1.1.32.2.7+107-14external/public-domain/tz/dist/northamerica
1.1.1.40.2.7+70-7external/public-domain/tz/dist/NEWS
1.1.1.35.2.6+17-28external/public-domain/tz/dist/Makefile
1.1.1.36.2.6+14-7external/public-domain/tz/dist/europe
1.1.1.17.2.5+9-9external/public-domain/tz/dist/theory.html
+249-22410 files not shown
+275-24716 files

NetBSD/pkgsrc-wip abcd23apy-keras TODO

py-keras: Add reference to CVE-2026-9335
DeltaFile
+1-1py-keras/TODO
+1-11 files

NetBSD/src 8oXR3dXsys/netinet raw_ip.c

   Pull up following revision(s) (requested by he in ticket #2043):

        sys/netinet/raw_ip.c: revision 1.187 (patch)

   inet: respect IP_TOS and IP_TTL for raw sockets
VersionDeltaFile
1.179.4.1+4-4sys/netinet/raw_ip.c
+4-41 files

NetBSD/src 52NgRKhsys/netinet raw_ip.c

   Pull up following revision(s) (requested by he in ticket #1321):

        sys/netinet/raw_ip.c: revision 1.187

   inet: respect IP_TOS and IP_TTL for raw sockets
VersionDeltaFile
1.184.2.1+4-4sys/netinet/raw_ip.c
+4-41 files

FreeBSD/ports 9665f67net/netpeek pkg-plist Makefile

net/netpeek: Update 0.3.0 => 0.3.1

Changelog:
https://github.com/ZingyTomato/NetPeek/releases/tag/v0.3.1

Reported by:    portscout
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+3-3net/netpeek/distinfo
+1-1net/netpeek/Makefile
+1-0net/netpeek/pkg-plist
+5-43 files

NetBSD/src vbTpYHesys/dev fss.c

   Pull up following revision(s) (requested by hannken in ticket #2042):

        sys/dev/fss.c: revision 1.116

   Bracket I/O from or to the backing store with fstrans_start_lazy()
   so the fss device doesn't block before the file system is suspended.

   Should fix some deadlocks with revokation of ttys.

   PR kern/59663 (ffs_snapshot_read -> uvm_fault (or pool page empty)
VersionDeltaFile
1.107.4.2+8-2sys/dev/fss.c
+8-21 files

NetBSD/src R0oB0xUsys/dev fss.c

   Pull up following revision(s) (requested by hannken in ticket #1320):

        sys/dev/fss.c: revision 1.116

   Bracket I/O from or to the backing store with fstrans_start_lazy()
   so the fss device doesn't block before the file system is suspended.

   Should fix some deadlocks with revokation of ttys.

   PR kern/59663 (ffs_snapshot_read -> uvm_fault (or pool page empty)
VersionDeltaFile
1.113.4.2+8-2sys/dev/fss.c
+8-21 files

NetBSD/src EWRAi9xsys/dev fss.c

   Pull up following revision(s) (requested by hannken in ticket #409):

        sys/dev/fss.c: revision 1.116

   Bracket I/O from or to the backing store with fstrans_start_lazy()
   so the fss device doesn't block before the file system is suspended.

   Should fix some deadlocks with revokation of ttys.

   PR kern/59663 (ffs_snapshot_read -> uvm_fault (or pool page empty)
VersionDeltaFile
1.114.8.1+8-2sys/dev/fss.c
+8-21 files

NetBSD/src O0FohLIcrypto/external/bsd/openssh/dist kexgen.c gss-genr.c

   Pull up following revision(s) (requested by rin in ticket #404):

        crypto/external/bsd/openssh/dist/gss-genr.c: revision 1.17
        crypto/external/bsd/openssh/dist/kexgen.c: revision 1.10

   openssh: Fix up NetBSD RCSID. Otherwise, NFC
VersionDeltaFile
1.8.2.2+2-2crypto/external/bsd/openssh/dist/kexgen.c
1.12.4.3+2-2crypto/external/bsd/openssh/dist/gss-genr.c
+4-42 files

NetBSD/src En9j7Q0sys/dev/ic isp_netbsd.h, sys/dev/pci isp_pci.c

   Pull up following revision(s) (requested by thorpej in ticket #403):

        sys/dev/pci/isp_pci.c: revision 1.123
        sys/dev/ic/isp_netbsd.h: revision 1.77

   It has been observed in the wild that some individual instances of
   ISP10[24]0 controllers don't seem to like getting a 64-bit DMA address
   from our driver (at least, there seems to be some sort of incorrect
   handling vis a vis the RQSTYPE_A64 message in isp_intr()).

   Upon inspection, it was noted that in isp_pci_dmasetup(), the decision
   to use RQSTYPE_T3RQS vs RQSTYPE_T2RQS was conditional on sizeof(bus_addr_t)
   being larger than sizeof(uint32_t).

   However, this isn't the correct predicate; instead, the choice should
   be dependent on what the largest value that bus_addr_t will have.  As
   it happans, the PCI layer makes a distinction between 32-bit and 64-bit
   DMA windows, and isp_pci's use of the regular "pa->pa_dmat" would ensure
   that the DMA address always fits within 32-bits.  Therefore, there was

    [9 lines not shown]
VersionDeltaFile
1.122.34.1+15-4sys/dev/pci/isp_pci.c
1.76.34.1+4-2sys/dev/ic/isp_netbsd.h
+19-62 files

NetBSD/src ehcso6Xsys/dev/ic tulip.c

   Pull up following revision(s) (requested by thorpej in ticket #402):

        sys/dev/ic/tulip.c: revision 1.215

   Support for the 21142/21143 internal NWay block is structured like a
   PHY driver, but it was overlooked when the ifmedia/mii layer gained a
   locking protocol.  Update it to avoid a recursive mutex acquisition
   that can occur if the autonegotiation completes (very) quickly.

   PR kern/60494
VersionDeltaFile
1.213.2.1+42-10sys/dev/ic/tulip.c
+42-101 files

OPNSense/core b56c673src/opnsense/mvc/app/views/layout_partials base_tabs_header.volt

MVC: UI: base_tabs_header fix tab activation (#10606)
DeltaFile
+2-2src/opnsense/mvc/app/views/layout_partials/base_tabs_header.volt
+2-21 files

OPNSense/core d0d5950src/etc/inc/plugins.inc.d core.inc, src/www system_general.php

system: switch timezone and hostname restarts #9352
DeltaFile
+20-0src/etc/inc/plugins.inc.d/core.inc
+2-2src/www/system_general.php
+22-22 files

OPNSense/core 6a7b61esrc/opnsense/service/conf/actions.d actions_ipsec.conf actions_interface.conf

configd: further restrict configd actions to root and wwwonly for more sensitive actions (stopping services, reading certain data, ..) that won't be scheduled anyway and should have no other consumers.

addition to https://github.com/opnsense/core/commit/a313cbd5bdcfc3c9d4a55704fcdb8bbcf7182069

In the long run we might consider swapping the defaults, but since the chance of regressions is rather larger and most callouts aren't that problematic anyway, opt for explicit elevated rights for now.
DeltaFile
+8-0src/opnsense/service/conf/actions.d/actions_unbound.conf
+7-0src/opnsense/service/conf/actions.d/actions_system.conf
+6-0src/opnsense/service/conf/actions.d/actions_filter.conf
+5-0src/opnsense/service/conf/actions.d/actions_zfs.conf
+4-0src/opnsense/service/conf/actions.d/actions_ipsec.conf
+4-0src/opnsense/service/conf/actions.d/actions_interface.conf
+34-014 files not shown
+54-020 files

OPNSense/core ba7e124src/etc/inc plugins.inc, src/etc/inc/plugins.inc.d core.inc

system: change approach due to MVC entanglement

Frist approach did not work.  Make it a bit more obvious.
DeltaFile
+7-2src/sbin/pluginctl
+7-2src/etc/inc/xmlrpc/service.inc
+2-5src/etc/inc/plugins.inc
+2-2src/etc/inc/plugins.inc.d/core.inc
+18-114 files

OPNSense/core db507ccsrc/opnsense/mvc/app/controllers/OPNsense/Firewall/Api DNatController.php, src/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes FilterRuleField.php SourceNatRuleField.php

Firewall: Rules and NAT: Group invalid rules to the end of the ruleset. These rules are skipped by PF processing because they do not have a valid interface. (#10550)


---------

Co-authored-by: Stephan de Wit <stephan.de.wit at deciso.com>
DeltaFile
+72-84src/opnsense/mvc/app/views/OPNsense/Firewall/filter_rule.volt
+52-55src/opnsense/mvc/app/views/OPNsense/Firewall/nat_rule.volt
+30-2src/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes/SourceNatRuleField.php
+21-2src/opnsense/mvc/app/controllers/OPNsense/Firewall/Api/DNatController.php
+13-0src/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes/FilterRuleField.php
+188-1435 files

OPNSense/core 516617esrc/www diag_backup.php

system: move backup restore to /var/lib/php/tmp #9352
DeltaFile
+1-1src/www/diag_backup.php
+1-11 files

OPNSense/core f707063src/opnsense/service/conf/actions.d actions_dns.conf, src/www system_general.php system_advanced_admin.php

system: add dns reconfigure #9352
DeltaFile
+6-0src/opnsense/service/conf/actions.d/actions_dns.conf
+1-1src/www/system_general.php
+1-1src/www/system_advanced_admin.php
+8-23 files

OPNSense/core a810878src/opnsense/mvc/app/library/OPNsense/Firewall Rule.php ForwardRule.php

Firewall: NAT: Destination NAT - fix missing "well-known" in local-port, closes https://github.com/opnsense/core/issues/10612

While here, also suppress a php warning for an non-existing entry.
DeltaFile
+9-2src/opnsense/mvc/app/library/OPNsense/Firewall/ForwardRule.php
+1-1src/opnsense/mvc/app/library/OPNsense/Firewall/Rule.php
+10-32 files

OPNSense/core 655f951src/www system_advanced_misc.php

system: replace kernel/powerd restart now that it works #9352
DeltaFile
+10-10src/www/system_advanced_misc.php
+10-101 files