OPNSense/core e752882 — src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api FirewallController.php, src/opnsense/mvc/app/controllers/OPNsense/Hostdiscovery SettingsController.php

Only unhide columns if the ACL allows access, guard calls if user is not privileged, move state lookup as aggregated action to the firewall controller
DeltaFile
+0-49src/opnsense/mvc/app/controllers/OPNsense/Hostdiscovery/Api/SettingsController.php
+48-0src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/FirewallController.php
+26-6src/opnsense/mvc/app/views/OPNsense/Hostdiscovery/settings.volt
+22-0src/opnsense/mvc/app/controllers/OPNsense/Hostdiscovery/SettingsController.php
+3-0src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
+0-1src/opnsense/mvc/app/models/OPNsense/Hostdiscovery/ACL/ACL.xml
+99-566 files

LLVM/project bcdcfc2 — clang/lib/CIR/Dialect/IR CIRDialectBytecode.cpp, mlir/include/mlir/IR BytecodeBase.td

[mlir][ODS] Fully qualify names in generated bytecode readers and writers

The code generated by `-gen-bytecode` referred to MLIR and LLVM
constructs such as `MLIRContext`, `DialectBytecodeReader`,
`LogicalResult`, `TypeSwitch` and `getChecked` without qualification,
as did the snippets in `BytecodeBase.td`. It therefore only compiled in
a source file with `using namespace mlir;`.

This PR fully qualifies all names emitted by the generator and by
`BytecodeBase.td`. Performed a minor refactor while doing so that also fixes an error message and makes the code less ad-hoc

Co-authored-by: Claude <noreply at anthropic.com>
DeltaFile
+75-64mlir/tools/mlir-tblgen/BytecodeDialectGen.cpp
+23-19mlir/include/mlir/IR/BytecodeBase.td
+5-5mlir/test/mlir-tblgen/bytecode-write.td
+0-5clang/lib/CIR/Dialect/IR/CIRDialectBytecode.cpp
+1-1mlir/test/mlir-tblgen/bytecode-reserved.td
+1-1mlir/test/Bytecode/bytecode_callback_full_override.mlir
+105-951 files not shown
+107-957 files

LLVM/project 84c624e — offload/liboffload/src OffloadImpl.cpp, offload/plugins-nextgen/amdgpu/src rtl.cpp

[Offload] Don't use libomptarget allocation types in liboffload (#240830)

Use liboffload types to describe memory types from the liboffload
interface all the way to the plugins. Convert in libomptarget from its
own types to liboffload ones.

Because this was the last usage of omptarget.h in liboffload, remove the
includes.

Note: there's no longer a default memory type in liboffload. Which in
practice was always resolved to be device memory so it doesn't really
matter.

Assisted by Claude.
DeltaFile
+11-38offload/liboffload/src/OffloadImpl.cpp
+21-22offload/plugins-nextgen/common/src/PluginInterface.cpp
+21-20offload/plugins-nextgen/amdgpu/src/rtl.cpp
+18-18offload/plugins-nextgen/level_zero/src/L0Memory.cpp
+19-17offload/plugins-nextgen/common/include/PluginInterface.h
+17-15offload/plugins-nextgen/cuda/src/rtl.cpp
+107-13014 files not shown
+208-22820 files

LLVM/project d8c08b1 — llvm/lib/Target/SPIRV SPIRVEmitIntrinsics.cpp, llvm/test/CodeGen/SPIRV/instructions select-phi.ll

[SPIRV] Don't retype call results when unifying pointer element types
DeltaFile
+12-10llvm/test/CodeGen/SPIRV/pointers/type-deduce-simple-for.ll
+5-3llvm/test/CodeGen/SPIRV/pointers/phi-valid-operand-types.ll
+5-3llvm/test/CodeGen/SPIRV/instructions/select-phi.ll
+8-0llvm/lib/Target/SPIRV/SPIRVEmitIntrinsics.cpp
+30-164 files

LLVM/project a28603d — llvm/test/CodeGen/SPIRV/instructions select-phi.ll, llvm/test/CodeGen/SPIRV/pointers phi-valid-operand-types.ll type-deduce-simple-for.ll

Pre-commit tests
DeltaFile
+44-0llvm/test/CodeGen/SPIRV/pointers/type-deduce-simple-for.ll
+25-0llvm/test/CodeGen/SPIRV/pointers/phi-valid-operand-types.ll
+19-0llvm/test/CodeGen/SPIRV/instructions/select-phi.ll
+88-03 files

FreeBSD/ports 5574f72 — cad/hs-verismith Makefile Makefile.cabal

cad/hs-verismith: Update dependencies, try to fix build on aarch64

PR:               300682
DeltaFile
+17-15cad/hs-verismith/distinfo
+8-8cad/hs-verismith/Makefile.cabal
+1-3cad/hs-verismith/Makefile
+26-263 files

FreeBSD/ports 97bb248 — mail/nextcloud-mail Makefile distinfo

mail/nextcloud-mail: Update to 5.13.2
DeltaFile
+3-3mail/nextcloud-mail/distinfo
+1-1mail/nextcloud-mail/Makefile
+4-42 files

OPNSense/core 44b3d9a — src/www authgui.inc

system: try to fix Norwegian/Vietnamese
DeltaFile
+4-4src/www/authgui.inc
+4-41 files

LLVM/project c59ab66 — llvm/lib/Analysis ValueTracking.cpp, llvm/test/Transforms/InferAlignment gep-recurrence.ll

[ValueTracking] Know alignment of pointer IVs stepped by a GEP (#237132)

A pointer phi that is advanced by a getelementptr of itself, such as

  %iv      = phi ptr [ %start, %preheader ], [ %iv.next, %latch ]
  %iv.next = getelementptr i8, ptr %iv, i64 16

had no known alignment unless an llvm.assume anchored it. The existing
recurrence handling in computeKnownBitsFromOperator() only matches a
BinaryOperator step, so pointer IVs were not covered.

Every value the phi takes is the start value plus a whole number of
steps, and tz(a + b) >= min(tz(a), tz(b)). Use the trailing zeros of the
start value, evaluated on its incoming edge, and the maximum preserved
alignment of the step GEP as a lower bound on the trailing zeros of the
phi.

This lets InferAlignment and other clients of known bits recover the
alignment of loop-carried pointers.

    [4 lines not shown]
DeltaFile
+171-15llvm/test/Transforms/InferAlignment/gep-recurrence.ll
+20-0llvm/lib/Analysis/ValueTracking.cpp
+191-152 files

LLVM/project 847ab25 — clang/lib/CodeGen CGBuilder.h, llvm/docs ReleaseNotes.md

[IRBuilder] Enable GEP canonicalization by default (#240885)

This enables canonicalization of GEPs to ptradd form by default, with a
disableGEPCanonicalization() opt-out. The opt-out is added to all the
places where this would currently affect test output.

disableGEPCanonicalization() calls will get dropped in followup changes,
together with the necessary test adjustments.

AI was used to insert the disableGEPCanonicalization() calls in all the
necessary places.
DeltaFile
+18-0llvm/lib/Transforms/Utils/LowerMemIntrinsics.cpp
+12-4clang/lib/CodeGen/CGBuilder.h
+9-0llvm/lib/Transforms/Instrumentation/MemorySanitizer.cpp
+5-2llvm/include/llvm/IR/IRBuilder.h
+7-0llvm/lib/Transforms/Instrumentation/DataFlowSanitizer.cpp
+7-0llvm/docs/ReleaseNotes.md
+58-651 files not shown
+147-1757 files

LLVM/project fe6fcb9 — libc/src/__support/OSUtil/linux/syscall_wrappers CMakeLists.txt symlinkat.h, libc/src/unistd/linux CMakeLists.txt symlinkat.cpp

[libc] Use a syscall wrapper for symlinkat

This PR move symlinkat behind the centralized syscall wrappers, following libc/docs/dev/syscall_wrapper_refactor.md.
DeltaFile
+34-0libc/src/__support/OSUtil/linux/syscall_wrappers/symlinkat.h
+11-9libc/src/unistd/linux/symlinkat.cpp
+16-2utils/bazel/llvm-project-overlay/libc/BUILD.bazel
+12-0libc/src/__support/OSUtil/linux/syscall_wrappers/CMakeLists.txt
+5-4libc/src/unistd/linux/CMakeLists.txt
+78-155 files

LLVM/project 77f815e — libc/src/__support/OSUtil/linux/syscall_wrappers CMakeLists.txt symlink.h, libc/src/unistd/linux CMakeLists.txt symlink.cpp

[libc] Use a syscall wrapper for symlink

This PR move symlink behind the centralized syscall wrappers, following libc/docs/dev/syscall_wrapper_refactor.md.
DeltaFile
+40-0libc/src/__support/OSUtil/linux/syscall_wrappers/symlink.h
+11-16libc/src/unistd/linux/symlink.cpp
+17-2utils/bazel/llvm-project-overlay/libc/BUILD.bazel
+13-0libc/src/__support/OSUtil/linux/syscall_wrappers/CMakeLists.txt
+5-4libc/src/unistd/linux/CMakeLists.txt
+86-225 files

LLVM/project da1374d — libc/src/__support/OSUtil/linux/syscall_wrappers CMakeLists.txt linkat.h, libc/src/unistd/linux CMakeLists.txt linkat.cpp

[libc] Use a syscall wrapper for linkat

This PR move linkat behind the centralized syscall wrappers, following libc/docs/dev/syscall_wrapper_refactor.md.
DeltaFile
+34-0libc/src/__support/OSUtil/linux/syscall_wrappers/linkat.h
+11-10libc/src/unistd/linux/linkat.cpp
+16-3utils/bazel/llvm-project-overlay/libc/BUILD.bazel
+12-0libc/src/__support/OSUtil/linux/syscall_wrappers/CMakeLists.txt
+4-4libc/src/unistd/linux/CMakeLists.txt
+77-175 files

LLVM/project 1ce1f8e — libc/src/__support/OSUtil/linux/syscall_wrappers CMakeLists.txt getsid.h, libc/src/unistd/linux CMakeLists.txt getsid.cpp

[libc] Use a syscall wrapper for getsid

This PR move getsid behind the centralized syscall wrappers, following libc/docs/dev/syscall_wrapper_refactor.md.
DeltaFile
+34-0utils/bazel/llvm-project-overlay/libc/BUILD.bazel
+34-0libc/src/__support/OSUtil/linux/syscall_wrappers/getsid.h
+11-7libc/src/unistd/linux/getsid.cpp
+13-0libc/src/__support/OSUtil/linux/syscall_wrappers/CMakeLists.txt
+4-2libc/src/unistd/linux/CMakeLists.txt
+96-95 files

LLVM/project 67fd3cc — llvm/lib/Target/AMDGPU AMDGPUCodeGenPrepare.cpp, llvm/test/CodeGen/AMDGPU amdgpu-codegenprepare-mul24-mad64.ll mad_u64_u32_mul24.ll

address review feedback
DeltaFile
+186-66llvm/test/CodeGen/AMDGPU/mad_u64_u32_mul24.ll
+100-27llvm/test/CodeGen/AMDGPU/amdgpu-codegenprepare-mul24-mad64.ll
+4-0llvm/lib/Target/AMDGPU/AMDGPUCodeGenPrepare.cpp
+290-933 files

LLVM/project dbddf2b — llvm/lib/Target/AMDGPU AMDGPUCodeGenPrepare.cpp, llvm/test/CodeGen/AMDGPU atomic_optimizations_local_pointer.ll atomic_optimizations_global_pointer.ll

[AMDGPU] Keep divergent i64 mul feeding an add for the mad64 fold
DeltaFile
+123-0llvm/test/CodeGen/AMDGPU/mad_u64_u32_mul24.ll
+84-0llvm/test/CodeGen/AMDGPU/amdgpu-codegenprepare-mul24-mad64.ll
+24-30llvm/test/CodeGen/AMDGPU/idot4-test.ll
+20-4llvm/lib/Target/AMDGPU/AMDGPUCodeGenPrepare.cpp
+9-9llvm/test/CodeGen/AMDGPU/atomic_optimizations_global_pointer.ll
+7-7llvm/test/CodeGen/AMDGPU/atomic_optimizations_local_pointer.ll
+267-506 files

LLVM/project a08072b — offload/plugins-nextgen/common/include GenericProfiler.h

[Offload] allow GenericProfiler.h to compile with GCC (#241174)

The current GenericProfiler header doesn't compile with GCC. GCC >= 12
don't seem to like the `[[maybe_unused]]` in the deduction guide, while
older ones don't support the deduction guide at all.

LLVM minimum GCC version seems to be still 7.4 so adjust the
GenericProfiler header to not use the deduction guide.

Assisted by Claude.
DeltaFile
+13-17offload/plugins-nextgen/common/include/GenericProfiler.h
+13-171 files

FreeBSD/ports 72bc814 — net/cloudflared Makefile.gomod distinfo, net/cloudflared/files patch-go.sum patch-cmd_cloudflared_generic__service.go

net/cloudflared: Update to 2026.10.7

MFH:            2026Q4
PR:             300153
Approved by:    maintainer timeout (egypcio, 2 weeks)
Reviewed by:    arrowd
Differential Revision:  https://reviews.freebsd.org/D61306

(cherry picked from commit 9238666429c34a9e55a8201250b7bdd29bdae5f7)
DeltaFile
+522-0net/cloudflared/files/modules.txt
+177-3net/cloudflared/distinfo
+98-0net/cloudflared/Makefile.gomod
+14-0net/cloudflared/files/patch-go.mod
+12-0net/cloudflared/files/patch-cmd_cloudflared_generic__service.go
+11-0net/cloudflared/files/patch-go.sum
+834-31 files not shown
+840-67 files

FreeBSD/ports 9238666 — net/cloudflared Makefile.gomod distinfo, net/cloudflared/files patch-go.sum patch-cmd_cloudflared_generic__service.go

net/cloudflared: Update to 2026.10.7

MFH:            2026Q4
PR:             300153
Approved by:    maintainer timeout (egypcio, 2 weeks)
Reviewed by:    arrowd
Differential Revision:  https://reviews.freebsd.org/D61306
DeltaFile
+522-0net/cloudflared/files/modules.txt
+177-3net/cloudflared/distinfo
+98-0net/cloudflared/Makefile.gomod
+14-0net/cloudflared/files/patch-go.mod
+12-0net/cloudflared/files/patch-cmd_cloudflared_generic__service.go
+11-0net/cloudflared/files/patch-go.sum
+834-31 files not shown
+840-67 files

FreeBSD/ports 7362a4c — textproc/codesearch Makefile, textproc/consul-template Makefile

various: Bump Go ports for Go 1.26.11 / 1.27.4
DeltaFile
+1-1textproc/fzf/Makefile
+1-1textproc/dyff/Makefile
+1-1textproc/dasel/Makefile
+1-1textproc/csvq/Makefile
+1-1textproc/consul-template/Makefile
+1-1textproc/codesearch/Makefile
+6-6843 files not shown
+849-818849 files

FreeBSD/ports 596f718 — lang/go127 Makefile distinfo

lang/go127: Update to 1.27.4

Changes:
  go1.27.4 (released 2026-11-10) includes security fixes to cgo, the go
  command, the compiler, the linker, and the net/http package, as well
  as bug fixes to the assembler, the compiler, the runtime, toolchain
  bootstrapping, and the crypto/fips140, crypto/hkdf, crypto/rsa,
  crypto/tls, and net packages.

MFH:            2026Q4
(cherry picked from commit d385e2920918ef942585f9955d9e31f0a0c22f05)
DeltaFile
+3-3lang/go127/distinfo
+1-1lang/go127/Makefile
+4-42 files

FreeBSD/ports f4bffbf — lang/go126 Makefile distinfo

lang/go126: Update to 1.26.11

Changes:
  go1.26.11 (released 2026-11-10) includes security fixes to cgo, the go
  command, the compiler, the linker, and the net/http package, as well
  as bug fixes to the assembler, the compiler, the runtime, toolchain
  bootstrapping, and the crypto/fips140, crypto/hkdf, crypto/rsa,
  crypto/tls, net, and net/http packages.

MFH:            2026Q4
(cherry picked from commit c112de9e568feddaf7644108f547d3e1e52ce24b)
DeltaFile
+3-3lang/go126/distinfo
+1-1lang/go126/Makefile
+4-42 files

FreeBSD/ports 4fe2176 — security/vuxml/vuln 2026.xml

security/vuxml: Document Mbed TLS4 vulnerabilities

PR:             296595
Approved by:    osa, vvd (mentors, implicit)
DeltaFile
+75-0security/vuxml/vuln/2026.xml
+75-01 files

LLVM/project abcf345 — llvm/test/Transforms/LoopVectorize/AArch64 force-scalable-vectorization-always-bf16.ll multiple-result-intrinsics.ll

[LV][NFC] Add vscale_range(1,16) attribute to more SVE tests (#240844)

This PR follows on from #239669

In some tests like

  Transforms/LoopVectorize/AArch64/sve-interleaved-masked-accesses.ll
  Transforms/LoopVectorize/AArch64/outer_loop_prefer_scalable.ll
  Transforms/LoopVectorize/AArch64/scalable-struct-return.ll
  Transforms/LoopVectorize/AArch64/sve-tail-folding-option.ll

I've tried to preserve existing tail-folding behaviour by changing
the trip count so that it's not a known multiple of the maximum
value of any scalable VF.
DeltaFile
+167-181llvm/test/Transforms/LoopVectorize/AArch64/sve-tail-folding-option.ll
+105-115llvm/test/Transforms/LoopVectorize/AArch64/sve-interleaved-masked-accesses.ll
+80-133llvm/test/Transforms/LoopVectorize/AArch64/sve-epilog-vect.ll
+42-87llvm/test/Transforms/LoopVectorize/AArch64/optsize_minsize.ll
+19-61llvm/test/Transforms/LoopVectorize/AArch64/multiple-result-intrinsics.ll
+18-52llvm/test/Transforms/LoopVectorize/AArch64/force-scalable-vectorization-always-bf16.ll
+431-62920 files not shown
+664-96026 files

NetBSD/pkgsrc 8CW93nj — doc CHANGES-2026

   Updated devel/gperftools, devel/py-cachelib
VersionDeltaFile
1.7916+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc OVOHCj0 — devel/py-cachelib Makefile PLIST

   py-cachelib: updated to 0.17.2

   0.17.2

   - Add ``SASLMemcachedCache`` and ``SpreadSASLMemcachedCache`` backends from
     flask-caching.
VersionDeltaFile
1.18+4-4devel/py-cachelib/distinfo
1.9+4-1devel/py-cachelib/PLIST
1.20+2-2devel/py-cachelib/Makefile
+10-73 files

LLVM/project f90f026 — clang/lib/CIR/Dialect/Transforms CIRABIClassifier.cpp, clang/lib/CIR/Dialect/Transforms/TargetLowering CIRABIRewriteContext.cpp

[CIR] Flatten unions passed Direct in CallConvLowering
DeltaFile
+114-0clang/test/CIR/Transforms/abi-lowering/amdgpu-union.cir
+30-13clang/lib/CIR/Dialect/Transforms/TargetLowering/CIRABIRewriteContext.cpp
+9-5clang/lib/CIR/Dialect/Transforms/CIRABIClassifier.cpp
+153-183 files

NetBSD/pkgsrc ey4kR8D — devel/gperftools Makefile distinfo

   gperftools: updated to 2.19.3

   gperftools 2.19.3 is out!

   This is another bug-fix release on top of 2.19.2. It updates the
   vendored aw-backtrace.

   With the previous version of aw-backtrace, we got broken backtraces on
   aarch64 when gperftools was built with -fstack-protector-strong, which
   is the default compiler setting on many distros, e.g. Ubuntu (see
   https://github.com/gperftools/gperftools/issues/1653). This release
   fixes that and related issues. aw-backtrace's own CI now also tests
   builds with stack protector, hardening (-mbranch-protection or
   -fcf-protection), without frame pointers, and, on x86-64,
   x86-64-v3 builds (stack realignment).

   Notable changes:

   * aw-backtrace now has a small piece of assembly (aw-asm-x86_64.S and

    [25 lines not shown]
VersionDeltaFile
1.27+4-4devel/gperftools/distinfo
1.32+2-2devel/gperftools/Makefile
+6-62 files

FreeBSD/src 427747f — sys/dev/acpica acpi_cpu.c

acpi_cpu: No longer disable idle during suspend

This had been introduced in 3331373ce733 ("Disable CPU idle states
during suspend and reenable them during resume.") to work around C-state
selection logic which would skip C-states which returned immediately,
considering them "broken".

This workaround is incompatible with suspend-to-idle however, which
requires CPUs to be in their idle states, and is no longer relevant
either way since b0baaaaecf1a ("Avoid comparing negative signed to
positive unsignad values.") removed the C-state skipping logic the
previous change was working around.

Reviewed by:    olce
Sponsored by:   The FreeBSD Foundation
Pull Request:   https://ron-dev.freebsd.org/FreeBSD/src/pulls/71
Differential Revision:  https://reviews.freebsd.org/D60649
DeltaFile
+2-28sys/dev/acpica/acpi_cpu.c
+2-281 files

LLVM/project 4f75128 — clang/lib/CIR/CodeGen CIRGenBuiltinX86.cpp, clang/test/CIR/CodeGen target-features-error-2.c

[CIR][X86] Add support for cmpps/cmppd* builtins (#228491)

This basically ports corresponding OGCG code using `cir.vec.fcmp`
instruction and/or intrinsic calls.
I used claude to help with testing and mechanical code changes.
DeltaFile
+392-0clang/test/CIR/CodeGenBuiltins/X86/cmp-fp-builtins.c
+135-1clang/lib/CIR/CodeGen/CIRGenBuiltinX86.cpp
+117-0clang/test/CIR/CodeGenBuiltins/X86/cmp-fp16-512-builtins.c
+43-0clang/test/CIR/CodeGenBuiltins/X86/cmp-bf16-builtins.c
+0-2clang/test/CIR/CodeGen/target-features-error-2.c
+687-35 files