NetBSD/pkgsrc-wip 5369ccb — praat TODO

praat: Add reference to CVE-2026-110698
DeltaFile
+2-0praat/TODO
+2-01 files

NetBSD/pkgsrc-wip 1bb3643 — libADLMIDI TODO

libADLMIDI: Add reference to CVE-2026-111161
DeltaFile
+2-0libADLMIDI/TODO
+2-01 files

NetBSD/pkgsrc-wip ca996ab — frp TODO

frp: Add reference to CVE-2026-110619
DeltaFile
+2-0frp/TODO
+2-01 files

NetBSD/pkgsrc-wip aa3ad3d — uade TODO

uade: Add reference to CVE-2026-111164
DeltaFile
+3-0uade/TODO
+3-01 files

NetBSD/pkgsrc-wip a1ff2d3 — tuxguitar TODO

tuxguitar: Add reference to recent CVEs

While here also make the references consistent with most pkgsrc-wip
TODO.
DeltaFile
+2-4tuxguitar/TODO
+2-41 files

NetBSD/pkgsrc-wip f36bade — parted TODO

parted: Add reference to recent CVEs
DeltaFile
+3-0parted/TODO
+3-01 files

NetBSD/pkgsrc-wip be7b2f9 — busybox TODO

busybox: Add reference to recent CVEs
DeltaFile
+3-2busybox/TODO
+3-21 files

HardenedBSD/src e74ab99 — sys/compat/linuxkpi/common/include/linux rwlock.h mutex.h, sys/conf options

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+1-28sys/compat/linuxkpi/common/include/linux/kconfig.h
+3-5sys/compat/linuxkpi/common/include/linux/spinlock.h
+2-4sys/compat/linuxkpi/common/include/linux/kernel.h
+2-2sys/compat/linuxkpi/common/include/linux/mutex.h
+0-3sys/conf/options
+1-1sys/compat/linuxkpi/common/include/linux/rwlock.h
+9-439 files not shown
+15-5215 files

HardenedBSD/src 4d7637a — contrib/llvm-project/compiler-rt/lib/asan asan_malloc_win.cpp asan_allocator.h, contrib/llvm-project/compiler-rt/lib/hwasan hwasan_allocation_functions.cpp

Merge remote-tracking branch 'rad/hardened/15-stable/main' into hardened/15-stable/pledge
DeltaFile
+108-8contrib/llvm-project/compiler-rt/lib/asan/asan_allocator.cpp
+32-32contrib/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp
+32-0contrib/llvm-project/compiler-rt/lib/hwasan/hwasan_allocation_functions.cpp
+26-4contrib/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp
+22-5contrib/llvm-project/compiler-rt/lib/asan/asan_allocator.h
+5-5contrib/llvm-project/compiler-rt/lib/asan/asan_malloc_win.cpp
+225-543 files not shown
+231-639 files

HardenedBSD/src 3d086e1 — sys/compat/linuxkpi/common/include/linux rwlock.h mutex.h, sys/conf options

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+1-28sys/compat/linuxkpi/common/include/linux/kconfig.h
+3-5sys/compat/linuxkpi/common/include/linux/spinlock.h
+2-4sys/compat/linuxkpi/common/include/linux/kernel.h
+2-2sys/compat/linuxkpi/common/include/linux/mutex.h
+0-3sys/conf/options
+1-1sys/compat/linuxkpi/common/include/linux/rwlock.h
+9-439 files not shown
+15-5215 files

HardenedBSD/src d7a704e — contrib/llvm-project/compiler-rt/lib/asan asan_malloc_win.cpp asan_allocator.h, contrib/llvm-project/compiler-rt/lib/hwasan hwasan_allocation_functions.cpp

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+108-8contrib/llvm-project/compiler-rt/lib/asan/asan_allocator.cpp
+32-32contrib/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp
+32-0contrib/llvm-project/compiler-rt/lib/hwasan/hwasan_allocation_functions.cpp
+26-4contrib/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp
+22-5contrib/llvm-project/compiler-rt/lib/asan/asan_allocator.h
+5-5contrib/llvm-project/compiler-rt/lib/asan/asan_malloc_win.cpp
+225-543 files not shown
+231-639 files

HardenedBSD/ports ca1925e — japanese/mozc3-server distinfo Makefile, japanese/mozc3-server/files patch-src_MODULE.bazel extra-patch-merge_dictionaries.py

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+2,031-1,894security/bitwarden-cli/files/packagejsons/package-lock.json
+618-0japanese/mozc3-server/Makefile
+163-0japanese/mozc3-server/files/extra-patch-merge_dictionaries.py
+123-0sysutils/chkcrontab/distinfo
+118-0japanese/mozc3-server/files/patch-src_MODULE.bazel
+115-0japanese/mozc3-server/distinfo
+3,168-1,894120 files not shown
+4,740-2,172126 files

LLVM/project ce28553 — clang/test/CodeGen ms-intrinsics-other.c ms-intrinsics.c

Fix clang lit test
DeltaFile
+12-12clang/test/CodeGen/ms-intrinsics.c
+4-4clang/test/CodeGen/ms-intrinsics-other.c
+16-162 files

LLVM/project 7bcfa2a — llvm/lib/Transforms/InstCombine InstCombineAtomicRMW.cpp, llvm/test/Transforms/InstCombine atomicrmw-add-neg.ll

[InstCombine] Canonicalize atomicrmw sub of a constant to add

Rewrite `atomicrmw sub ptr, C` as `atomicrmw add ptr, -C`. This
matches the canonical form InstCombine already uses for plain `sub`.
In wrapping arithmetic $old - C = old + (-C)$, so both the stored
value and the returned old value stay the same, including when C is
`INT_MIN`. Ordering, syncscope and metadata are kept.

```llvm
; before
%old = atomicrmw sub ptr %p, i32 1 syncscope("agent") monotonic
; after
%old = atomicrmw add ptr %p, i32 -1 syncscope("agent") monotonic
```
This benefits AMDGPU, for example: https://godbolt.org/z/39xsYro3o
DeltaFile
+7-0llvm/lib/Transforms/InstCombine/InstCombineAtomicRMW.cpp
+2-2llvm/test/Transforms/InstCombine/atomicrmw-add-neg.ll
+9-22 files

LLVM/project 844b1f4 — llvm/lib/Transforms/InstCombine InstCombineAtomicRMW.cpp, llvm/test/Transforms/InstCombine atomicrmw-add-neg.ll

Support vector
DeltaFile
+4-3llvm/lib/Transforms/InstCombine/InstCombineAtomicRMW.cpp
+3-3llvm/test/Transforms/InstCombine/atomicrmw-add-neg.ll
+7-62 files

LLVM/project df32ff8 — llvm/test/Transforms/InstCombine atomicrmw-add-neg.ll

[InstCombine] Add tests for atomicrmw sub of a constant. NFC (#232625)

atomicrmw sub C can be canonicalized to atomicrmw add -C because both
produce the same stored and returned values under wrapping arithmetic.
Cover syncscope, INT_MIN, and negative cases.
DeltaFile
+74-0llvm/test/Transforms/InstCombine/atomicrmw-add-neg.ll
+74-01 files

LLVM/project 2b6e0cb — cross-project-tests/dtlto remote-options.test, lld/COFF LTO.cpp

[LTO,lld] Initialize lto::Config::PTO with LibraryOptions

Commit 27e2fc2de79d (#233026) switched `llvm-lto2` and `lld` from
`cl::ParseCommandLineOptions` to `cl::parseCommandLineOptions(LibraryOptions, ...)`
and set `lto::Config::LibraryOptions`, but left `lto::Config::PTO`
default-constructed with a null `LibraryOptionsContext`. As a result,
`PipelineTuningOptions` read `PassesOptions::Global` instead of the parsed
`LibraryOptions`, causing flags like `-enable-loopinterchange=false` to be
ignored (`cross-project-tests :: dtlto/remote-options.test`).

Initialize `PTO` with `PipelineTuningOptions(LibraryOptions)` in `llvm-lto2`
and `lld` (`COFF`, `ELF`, `MachO`, `wasm`), matching `clang`s
`BackendUtil.cpp`.

Note: This root-cause analysis and patch were generated by an AI coding
assistant (LLM-aided).
DeltaFile
+2-0cross-project-tests/dtlto/remote-options.test
+1-0llvm/tools/llvm-lto2/llvm-lto2.cpp
+1-0lld/wasm/LTO.cpp
+1-0lld/MachO/LTO.cpp
+1-0lld/ELF/LTO.cpp
+1-0lld/COFF/LTO.cpp
+7-06 files

LLVM/project 2d04110 — clang/test/OpenMP single_codegen.cpp threadprivate_codegen.cpp

[clang][OpenMP] Regenerate stale checks in two codegen tests (NFC) (#232041)

The generated checks in these two tests no longer match what
`update_cc_test_checks.py` produces, mostly attribute and metadata
numbers. They still pass because those positions match any number.
Regenerating them separately keeps the real changes in #220316
reviewable.

No functional change. Regenerated with `update_cc_test_checks.py`, and
the tests pass before and after.

The contents of this PR is created with help from Claude Code.
DeltaFile
+1,275-1,275clang/test/OpenMP/threadprivate_codegen.cpp
+626-626clang/test/OpenMP/single_codegen.cpp
+1,901-1,9012 files

FreeBSD/ports f419273 — devel/R-cran-pkgdepends Makefile

devel/R-cran-pkgdepends: Add compiles to USES:cran

This port compiles so add compiles to USES=cran and remove unneeded
NO_ARCH_IGNORE.

Let's bump it as a just in case.

Inspired by: baebf92d1acf ("devel/R-cran-pbapply, math/R-cran-metadat: Remove redundant NO_ARCH")

MFH:            2026Q4
(cherry picked from commit 2aa026cd5b0ad42d6cc14a428a1ac64f845d6e0d)
DeltaFile
+18-19devel/R-cran-pkgdepends/Makefile
+18-191 files

FreeBSD/ports 5824cd3 — security/cryptopp-modern Makefile distinfo

security/cryptopp-modern: Update to 2026.10.0

ChangeLog:
https://github.com/cryptopp-modern/cryptopp-modern/releases/tag/2026.10.0

MFH:            2026Q4
(cherry picked from commit 06595766c0a7c6e35c0f8e5e04864337f3ddcba9)
DeltaFile
+3-3security/cryptopp-modern/distinfo
+1-1security/cryptopp-modern/Makefile
+4-42 files

FreeBSD/ports 7c2aa15 — graphics/imv pkg-plist distinfo, graphics/imv/files patch-src_imv.c patch-doc_imv.1.txt

graphics/imv: Update to 5.0.1

- FreeImage backend was removed upstream; BMP and WebP support
  now come from the new NSBMP and WEBP options (on by default)
- Add new options: FF (farbfeld), JXL (on by default), NSBMP, WEBP
- NSGIF is no longer broken
- Disable the QOI backend (not ported)
- Drop ICU linking patch, fixed upstream (now uses icu-uc)
- Rename the sample config in post-install instead of patching meson.build

Changelog:      https://git.sr.ht/~exec64/imv/tree/master/item/CHANGELOG
PR:             299377
MFH:            2026Q4
(cherry picked from commit a5c9087871ed544894206a5347be43d491fe1fc3)
DeltaFile
+26-9graphics/imv/Makefile
+0-32graphics/imv/files/patch-meson.build
+3-3graphics/imv/distinfo
+2-2graphics/imv/pkg-plist
+2-2graphics/imv/files/patch-src_imv.c
+2-2graphics/imv/files/patch-doc_imv.1.txt
+35-506 files

NetBSD/pkgsrc 3l4PmVk — doc CHANGES-2026

   doc: Remove duplicate monit entry
VersionDeltaFile
1.7051+1-2doc/CHANGES-2026
+1-21 files

OpenBSD/src Fw4YmTc — usr.sbin/npppd/pptp pptpd.c

   Handle errno properly when accepting a PPTP connection.  Previously,
   file descriptor exhaustion could cause the accept loop to spin
   indefinitely.

   From Acts1631
VersionDeltaFile
1.36+6-6usr.sbin/npppd/pptp/pptpd.c
+6-61 files

NetBSD/pkgsrc H6xeTJB — doc CHANGES-2026

   doc: Updated sysutils/monit to 6.0.0
VersionDeltaFile
1.7050+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc IyOCI7i — doc CHANGES-2026

   doc: Updated sysutils/monit to 6.0.0
VersionDeltaFile
1.7049+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc OMf3Wap — sysutils/monit Makefile distinfo

   monit: Update to 6.0.0

   pkgsrc changes:
   - Enable for DragonflyBSD, according the changelog it was tested on
     DragonflyBSD 6.4 (NOTE: I have not tested it in pkgsrc though!)

   Changes:
   - New: The every statement can now reliably be used with minute
     precision. Like crontab, the every statement will run a service check
     only once per minute, regardless of poll-cycle time. This means that
     you can now use checks like this and be sure it runs only one time at
     the intended time:
       check program weekly_report with path /var/monit/weekly_report.sh
         every "15 8 * * 1"
         if status != 0 then alert
     This will run the above weekly_report.sh one time every Monday at 08:15
     (or as soon as possible after that time if the validation loop is
     delayed). Cron matching is asynchronous to the validation loop,
     ensuring checks run once even if validate takes longer than a minute to

    [130 lines not shown]
VersionDeltaFile
1.14+4-4sysutils/monit/distinfo
1.29+3-3sysutils/monit/Makefile
+7-72 files

OpenBSD/src Oqo7c2C — usr.sbin/npppd/pptp pptp_ctrl.c

   Reject a PPTP control packet with an invalid length field.
   Previously, an invalid packet could cause the input event loop to spin
   indefinitely, effectively hanging the process until it was terminated.

   From Acts1631
VersionDeltaFile
1.14+10-2usr.sbin/npppd/pptp/pptp_ctrl.c
+10-21 files

OPNSense/core 125cc93 — src/opnsense/mvc/app/models/OPNsense/Trust/FieldTypes CertificatesField.php

System: Trust: Certificates - authorityInfoAccess missing in extns(), closes https://github.com/opnsense/core/issues/11046
DeltaFile
+4-0src/opnsense/mvc/app/models/OPNsense/Trust/FieldTypes/CertificatesField.php
+4-01 files

HardenedBSD/ports 8a3c754 — misc/codex Makefile distinfo, misc/codex/files patch-codex-rs_tui_src_main.rs patch-codex-rs_core_tests_suite_remote__env.rs

misc/codex: Update to 0.163.0

Changelog: https://github.com/openai/codex/releases/tag/rust-v0.163.0

Reported by:    GitHub (watch releases)
DeltaFile
+13-9misc/codex/distinfo
+7-7misc/codex/files/patch-codex-rs_Cargo.lock
+5-5misc/codex/files/patch-codex-rs_tui_src_clipboard__copy.rs
+4-5misc/codex/Makefile
+0-8misc/codex/files/patch-codex-rs_tui_src_main.rs
+4-4misc/codex/files/patch-codex-rs_core_tests_suite_remote__env.rs
+33-388 files not shown
+55-5814 files

FreeBSD/ports 8a3c754 — misc/codex Makefile distinfo, misc/codex/files patch-codex-rs_tui_src_main.rs patch-codex-rs_core_tests_suite_remote__env.rs

misc/codex: Update to 0.163.0

Changelog: https://github.com/openai/codex/releases/tag/rust-v0.163.0

Reported by:    GitHub (watch releases)
DeltaFile
+13-9misc/codex/distinfo
+7-7misc/codex/files/patch-codex-rs_Cargo.lock
+5-5misc/codex/files/patch-codex-rs_tui_src_clipboard__copy.rs
+4-5misc/codex/Makefile
+0-8misc/codex/files/patch-codex-rs_tui_src_main.rs
+4-4misc/codex/files/patch-codex-rs_core_tests_suite_remote__env.rs
+33-388 files not shown
+55-5814 files