[mlir][OpenACC] Keep ThreadY active for inner-combine-fed worker reductions (#211696)
Example:
```fortran
res = 0
!$cuf kernel do(2) <<< *, (32,8) >>> reduce(+:res)
do j2 = 1, n2
do j1 = 1, n1
res = res + a(j1, j2)
end do
end do
```
In this code the reduction accumulator is per-(block_y, thread_y): each
worker row's shared slot is filled by an inner block-scoped combine, so
the rows hold distinct partials. The final combine into the result was
classified as not "worker-private" (block_y+thread_y into a global
dest), so it fell back to the ThreadY row-zero path and dropped every
worker but row 0 — a 2D SUM returned -1 instead of -4.
Fix: keep ThreadY active for a block_y+thread_y accumulator that is fed
[3 lines not shown]
[llvm][AArch64] Fix the location of PAuth_LR AUT CFI (#211702)
Unlike PAC CFI, we do not have the same unwinder constraint on PAuth_LR
CFI occurring before the PAC instruction. For AUT CFI, like other CFI
opcodes, these should always occur after the instruciton that they
reference.
[mlir][affine] Add affine.for verifier and move arguments check earlier (#206685)
Fixes #206628 crash by adding an earlier body argument verifier for
`affine.for`. This crash is caused because `LoopLikeOpInterface`
verifier would call `getRegionIterArgs()` and assumed induction var of
`affine.for` exists.
[VectorCombine] Fix infinite loop in foldShuffleToIdentity (#211717)
PR #211508 ("foldShuffleToIdentity - ensure we push any created
instructions to the WorkList") started re-queueing every instruction
created by generateNewInstTree onto the VectorCombine worklist. When the
regenerated tree contains a bitcast, re-queueing the bitcast's operand
lets foldBitcastShuffle sink the bitcast back into a shuffle(bitcast),
which foldShuffleToIdentity then re-matches as the same superfluous
identity. On a widen/concat shuffle chain feeding a bitcast the two
folds
ping-pong and the pass never reaches a fixed point (observed as an opt
-O3 hang/timeout).
Keep the WorkList threading from PR #211508 (it enables further folds,
e.g. the improved intrinsics_minmax and two_concats cases) but don't
re-queue the operand of a regenerated bitcast, which is the only push
that feeds the foldBitcastShuffle <-> foldShuffleToIdentity loop.
Add an X86 regression test that previously looped and now terminates.
[3 lines not shown]
Fix AD member-server breakage on HA failover and upgrade
Two related failure modes were observed on an HA Active Directory member
server: after a failover, AD users were denied API access despite
authenticating; and after an upgrade, the stored machine account secret
could be wiped, forcing a full rejoin. Both stem from winbind's local SAM
domain state and the node-local secrets.tdb being mishandled across the
boot/failover/upgrade transitions.
winbind captures the local SAM domain SID from secrets.tdb at startup.
smb.set_system_sid (net setlocalsid) can change that SID out from under a
running winbindd during failover (smb.configure runs on become-master but
winbindd is never restarted). winbindd's domain list then references a SID
the SAMR/passdb layer no longer accepts, so local/BUILTIN alias expansion
in wb_gettoken fails with NT_STATUS_NO_SUCH_DOMAIN. That failure is fatal
to the whole group token, so getgrouplist() returns only the primary gid.
The truncated grouplist no longer contains the AD group that the RBAC
privilege is granted to, and the user is denied API access -- through the
one authenticate_user branch that logged nothing.
[38 lines not shown]
py-cython: updated to 3.2.9
3.2.9 (2026-07-23)
Bugs fixed
* Indexing into freshly created lists with an out-of-bounds index could crash.
* Function arguments with default values could end up uninitialised in closures, leading to crashes.
* ``bytearray.append(None)`` could crash. The optimised code was also lacking concurrency guards.
* Some rare corner cases when concatenating text strings were resolved.
* Assignments of builtin string types to typedefs of `object` could erroneously be rejected.
* Subscripting ``type`` failed with a ``TypeError``.
* Manually disabling ``CYTHON_VECTORCALL`` in CPython could lead to invalid C code.
* Some internal Limited API version checks for Py3.12 were corrected.
Update to 0.64
Upstream changes:
0.64 - 2026-07-14, H.Merijn Brand
* Next version will require perl-5.12, following DBI
0.63 - 2026-06-22, H.Merijn Brand
* It's 2026
* New test for DBI-1.648 CVE fix
* Minor typo in doc
* Raise recommended versions for fixed CVE's
Update to 0.304
Upstream changes:
0.304 06 Feb 2026
- update META for github home
0.303 20 Jan 2026
- fix bug affecting Perl >= 5.43.6 on 'use' or import() with quoted version
[AMDGPU] Add synthetic apertures and use them for barriers
Define what a synthetic aperture is, and adjust the barrier AS
to use this new system. This makes the barrier AS even safer to
use as now we can use all 32 bits of it without ever risking
hitting a valid address of any kind (LDS or outside LDS).
[libc++] Consistently install Python and dependencies across macOS CI jobs (#211659)
On the macOS self-hosted runners, we need to install dependencies via
Homebrew and pinning the Xcode version is good for reproducibility. This
applies the guidelines documented in #211622 to libc++'s CI jobs.
