FreeNAS/freenas 7ff99b6 — src/middlewared/middlewared/alert/source license_usage.py, src/middlewared/middlewared/plugins/container lifecycle.py

Simplify license delegate active check and usage alert

This commit makes some changes where license delegates decided whether the node is the active controller by reading failover.status.get_local and the VIP rows themselves; they now use the existing failover.is_single_master_node check, same as the TNC heartbeat.

It also turns the unlicensed features in use alert from a 10 minute polling source into a one-shot alert that is evaluated at the end of truenas.license.apply, once at system.ready on the active node and when a node becomes master, since gates already block new use of unlicensed features so the list can only shrink between license changes. A license daemon error still leaves the existing alert untouched.

VM and container updates are gated by the license again without carving out autostart-only edits, since an autostart instance coming back on a re-grant is what autostart means and the admin can change it once licensed.

Stopping active VMs and containers is simplified as well. The libvirt reachability probe, the resume-before-stop of suspended instances and the extra private endpoints are gone; a suspended VM is powered off and a suspended container killed, shutdown and failover call stop_active directly, and the pool import license guard for containers is dropped since container.start already refuses when unlicensed.
DeltaFile
+40-25src/middlewared/middlewared/pytest/unit/plugins/truenas/test_license_delegates.py
+10-39src/middlewared/middlewared/pytest/unit/plugins/vm/test_stop_active.py
+5-39src/middlewared/middlewared/plugins/container/lifecycle.py
+39-2src/middlewared/middlewared/plugins/truenas/license.py
+6-33src/middlewared/middlewared/plugins/vm/lifecycle.py
+4-34src/middlewared/middlewared/alert/source/license_usage.py
+104-17210 files not shown
+126-22816 files

LLVM/project a1220b9 — llvm/lib/Transforms/Vectorize SLPVectorizer.cpp

clang-format
DeltaFile
+10-10llvm/lib/Transforms/Vectorize/SLPVectorizer.cpp
+10-101 files

LLVM/project 267d7ad — llvm/lib/Target/AMDGPU AMDGPUAttributor.cpp

AMDGPU: Check implicit argument accesses with a single walk

Each update of AAAMDAttributes visited all call-like instructions of
the function up to seven times, for each implicit kernel argument plus
lds_kernel_id. Check all the relevant accesses in one pass.

Instructions spent in amdgpu-attributor:
  rocPRIM test_device_scan, gfx942:          1429M -> 1385M (-3.0%)
  Blender Cycles HIP kernel, gfx1100:        507M -> 504M (-0.6%)
  rocPRIM 16 tests, full LTO, closed world:  5283M -> 5091M (-3.6%)

Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+102-72llvm/lib/Target/AMDGPU/AMDGPUAttributor.cpp
+102-721 files

LLVM/project 19cd457 — llvm/lib/Transforms/Scalar GVN.cpp, llvm/test/Transforms/GVN masked-load-store-no-mem-dep.ll masked-load-store.ll

[GVN] Add support for MSSA-path in masked store-to-load forwarding (#229757)

Following up on #157689, extend `processMaskedLoad` to employ MemorySSA
to locate the masked store that accesses the memory location of the
subsequent masked load. In order for the forwarding to be legal, the
store and load need to access the same memory location, which is
inherently provided by MemoryDependenceAnalysis, and needs instead be
explicitly checked with MSSA.
DeltaFile
+60-11llvm/test/Transforms/GVN/masked-load-store.ll
+30-6llvm/lib/Transforms/Scalar/GVN.cpp
+1-0llvm/test/Transforms/GVN/masked-load-store-no-mem-dep.ll
+91-173 files

LLVM/project 9b5bbec — llvm/lib/Transforms/Vectorize SLPVectorizer.cpp

move ValueToGatherNodes, ReassocScalarToTreeEntries and RTChecksFinalized to SharedCandidateState
DeltaFile
+44-47llvm/lib/Transforms/Vectorize/SLPVectorizer.cpp
+44-471 files

FreeBSD/ports b2d5666 — graphics/photocraft Makefile distinfo

graphics/photocraft: update to 0.9.0

Changelog:      https://github.com/storytold/photocraft/releases/tag/v0.9.0
DeltaFile
+211-3graphics/photocraft/distinfo
+106-3graphics/photocraft/Makefile
+317-62 files

FreeBSD/ports 9377490 — chinese/gcin Makefile, chinese/gcin/files patch-configure patch-tsa2d32.cpp

chinese/gcin: fix build on powerpc64*

Build with -fsigned-char: the phrase tables flag mixed-case English
words with a negative length stored in plain char. Also fix the hash
index of 1-byte keys in tsa2d32 on big-endian.
DeltaFile
+12-0chinese/gcin/files/patch-tsa2d32.cpp
+9-0chinese/gcin/files/patch-configure
+0-2chinese/gcin/Makefile
+21-23 files

FreeBSD/ports f033b22 — security/kuku/files patch-CMakeLists.txt patch-src_kuku_internal_hash.h

security/kuku: fix build on powerpc64

Upstream rejects big-endian targets because item words and the BLAKE2xb-seeded
tabulation table were read in native byte order, so a big-endian build would
compute a different table layout than little-endian peers. Define both in
little-endian byte order instead (a no-op on little-endian targets) and drop
the guards.
DeltaFile
+137-0security/kuku/files/patch-src_kuku_common.h
+33-0security/kuku/files/patch-src_kuku_internal_hash.h
+19-0security/kuku/files/patch-CMakeLists.txt
+189-03 files

FreeBSD/ports 282aecf — math/lcalc pkg-plist Makefile

math/lcalc: update to 2.2.2

Fixes the build with math/pari 2.19.0, which removed gaffect() and gaffsg().

Changelog:      https://gitlab.com/sagemath/lcalc/-/releases/2.2.2
DeltaFile
+3-3math/lcalc/distinfo
+2-2math/lcalc/Makefile
+1-1math/lcalc/pkg-plist
+6-63 files

FreeBSD/ports db5830f — ftp/py-curl-cffi/files patch-libs.json

ftp/py-curl-cffi: fix build on powerpc64le

platform.uname().machine is "powerpc" on every FreeBSD PowerPC flavour, so the
"powerpc64" entry introduced by the 0.16.3 update never matched and the build
died with "Unsupported arch".
DeltaFile
+1-1ftp/py-curl-cffi/files/patch-libs.json
+1-11 files

FreeBSD/ports 5dbbf82 — net/tcplog_dumper/files patch-tcplog__dumper.c

net/tcplog_dumper: fix build on powerpc64

struct tcp_log_bbr lost its ininput member in FreeBSD 14.0 (a370832bec5f);
it was only referenced by the big-endian conversion code.
DeltaFile
+13-0net/tcplog_dumper/files/patch-tcplog__dumper.c
+13-01 files

FreeBSD/ports 4455ec0 — misc/outside/files patch-cargo-crates_savefile-derive-0.19.0_src_lib.rs patch-cargo-crates_savefile-0.19.0_src_lib.rs

misc/outside: fix build on powerpc64

The savefile crate refuses to build on big-endian targets with its
bit-vec feature, and its raw-memory fast paths write native byte order
there while the data is read back as little-endian, corrupting the
cache on round-trip. Serialize the BitVec storage words as little-endian
and disable the fast paths on big-endian.
DeltaFile
+93-0misc/outside/files/patch-cargo-crates_savefile-0.19.0_src_lib.rs
+11-0misc/outside/files/patch-cargo-crates_savefile-derive-0.19.0_src_lib.rs
+104-02 files

FreeBSD/ports 6144a75 — sysutils/fastfetch distinfo Makefile

sysutils/fastfetch: update to 2.70.0

Drop QUICKJS option, removed upstream.

Changelog:      https://github.com/fastfetch-cli/fastfetch/releases/tag/2.70.0
DeltaFile
+3-8sysutils/fastfetch/Makefile
+3-3sysutils/fastfetch/distinfo
+6-112 files

FreeBSD/ports 8489b73 — www/qt6-webengine/files patch-src_3rdparty_chromium_third__party_dav1d_libdav1d_src_ppc_dav1d__types.h patch-src_3rdparty_chromium_v8_BUILD.gn

www/qt6-webengine: add powerpc64le support

The architecture layer is derived from Chimera Linux's qt6-qtwebengine
ppc64le patchset, reduced to the files FreeBSD actually compiles and
adapted to FreeBSD:
- gn: map uname -m "powerpc" to ppc64 in host arch detection
- cmake/QtToolchainHelpers: map power64 to the ppc64 GN arch
- build/config/compiler: don't force a Linux target triple on BSD
- PartitionAlloc: ppc64 GN wiring, dynamic-page-size ASLR variant on BSD
  (as for arm64), pin kAlignment to 16 (alignof(max_align_t) is 8 while
  long double is 64-bit)
- v8: POWER8 baseline with AltiVec/VSX; make
  Assembler::kMaximalBufferSize public, as the 6.11.2 baseline compiler
  needs it
- base: define kThreadPriorityToNiceValueMapForTest on BSD; on ppc64 the
  TOC reference survives --gc-sections
- blink/webaudio: fix the stale scalar ProcessARateVector fallback
  signature in delay.cc
- devtools: don't create a zero-sized @rollup/plugin-terser worker pool

    [8 lines not shown]
DeltaFile
+51-0www/qt6-webengine/files/patch-src_3rdparty_chromium_third__party_dav1d_config_linux_ppc64_config.h
+33-0www/qt6-webengine/files/patch-src_3rdparty_chromium_third__party_libvpx_BUILD.gn
+29-0www/qt6-webengine/files/patch-src_3rdparty_chromium_v8_test_BUILD.gn
+23-1www/qt6-webengine/files/patch-src_3rdparty_chromium_third__party_dawn_src_dawn_common_Platform.h
+19-4www/qt6-webengine/files/patch-src_3rdparty_chromium_v8_BUILD.gn
+22-0www/qt6-webengine/files/patch-src_3rdparty_chromium_third__party_dav1d_libdav1d_src_ppc_dav1d__types.h
+177-524 files not shown
+467-2230 files

FreeBSD/ports 4068bdb — devel/jetbrains-rustrover Makefile

devel/jetbrains-rustrover: fix pty4j and sqlite paths on powerpc64le

The IDE looks up libsqliteij.so under linux-x86_64 on anything that is
not arm64, and pty4j uses JNA arch name ppc64le.
DeltaFile
+4-3devel/jetbrains-rustrover/Makefile
+4-31 files

FreeBSD/ports 0effc31 — devel/jetbrains-clion pkg-plist Makefile

devel/jetbrains-clion: enable on powerpc64le

JetBrains provides no build of its clangd fork for powerpc64le, and the
IDE refuses a stock clangd, so the bundled clang tools are not installed
there.
DeltaFile
+16-4devel/jetbrains-clion/Makefile
+6-6devel/jetbrains-clion/pkg-plist
+22-102 files

FreeBSD/ports f4a4a79 — emulators/azahar Makefile

emulators/azahar: enable on powerpc64le

There is no dynarmic JIT backend for PowerPC, so the CPU falls back
to the interpreter.
DeltaFile
+1-1emulators/azahar/Makefile
+1-11 files

FreeBSD/ports d498309 — databases/clickhouse-cpp Makefile

databases/clickhouse-cpp: enable on powerpc64le
DeltaFile
+2-2databases/clickhouse-cpp/Makefile
+2-21 files

FreeBSD/ports 7bed7b0 — biology/hmmer Makefile, biology/hmmer/files patch-easel_esl__vmx.h patch-configure

biology/hmmer: add powerpc64le support

Swap vec_sld operands on little-endian so the Altivec code keeps its
big-endian element order, and drop the configure check that rejects
VMX on little-endian.
DeltaFile
+17-0biology/hmmer/files/patch-configure
+13-0biology/hmmer/files/patch-easel_esl__vmx.h
+1-1biology/hmmer/Makefile
+31-13 files

FreeBSD/ports 5a80069 — security/vuxml/vuln 2026.xml

security/vuxml: Document www/newsboat vulnerabilities

PR:             299303
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+30-0security/vuxml/vuln/2026.xml
+30-01 files

OPNSense/core 0b48638 — src/opnsense/mvc/app/controllers/OPNsense/Core/Api SnapshotsController.php

snapshots: notes: small fix

(cherry picked from commit 2ae9689a560d41f33d511767f27fe0608e8d01b7)
DeltaFile
+1-1src/opnsense/mvc/app/controllers/OPNsense/Core/Api/SnapshotsController.php
+1-11 files

OPNSense/core c2c4738 — src/opnsense/mvc/app/controllers/OPNsense/IDS/Api SettingsController.php

Services: Intrusion Detection - always initialize reference_html

reported by:  Ada Logics using Anthropic

(cherry picked from commit ef0218f46bc235b6d89580aa1f6ffeec5dce644f)
DeltaFile
+7-1src/opnsense/mvc/app/controllers/OPNsense/IDS/Api/SettingsController.php
+7-11 files

OPNSense/core 6ab59e2 — src/opnsense/mvc/app/controllers/OPNsense/IPsec/forms settings.xml, src/opnsense/mvc/app/models/OPNsense/IPsec IPsec.xml

ipsec: add charon retry_initiate_interval to advanced settings (#11002)

(cherry picked from commit 2722a1ac8df047b80f6a638463e526ae3d0072d2)
(cherry picked from commit 2e6909bd7915f6622c47958297277090b89c264c)
DeltaFile
+5-1src/opnsense/mvc/app/models/OPNsense/IPsec/IPsec.xml
+6-0src/opnsense/mvc/app/controllers/OPNsense/IPsec/forms/settings.xml
+11-12 files

OPNSense/core 5b6ccdb — src/opnsense/mvc/app/library/OPNsense/Firewall FilterRule.php, src/opnsense/mvc/app/models/OPNsense/Routing Gateways.php

System: Gateways - fix protocol selection for dynamic interfaces without ipprotocol set and make sure policy based routing rules can use these for both protocols

PR: https://github.com/opnsense/core/issues/10978

(cherry picked from commit a0e544cfb820d26a0265b716daa564bde88e3468)
(cherry picked from commit c353e1a23143e4c8555d58e53da997f5972ec14e)
(cherry picked from commit eae12d7a34d9d3fe8e9515445e3728dc17108f43)
DeltaFile
+3-0src/opnsense/mvc/app/models/OPNsense/Routing/Gateways.php
+1-0src/opnsense/mvc/app/library/OPNsense/Firewall/FilterRule.php
+4-02 files

OPNSense/core 149318d — src/opnsense/mvc/app/controllers/OPNsense/IPsec/Api TunnelController.php, src/opnsense/mvc/app/controllers/OPNsense/IPsec/forms settings.xml

VPN: IPsec: Deprecate IKEv1 (#10925)

(cherry picked from commit 8837a247fce1046e85f7d405dc949bfadbf0934a)
(cherry picked from commit 8d271b7d69174f8c4d36cc313ece839bfa5f4ea4)
DeltaFile
+89-0src/opnsense/mvc/app/library/OPNsense/System/Status/IPsecIkev1Status.php
+20-1src/opnsense/mvc/app/views/OPNsense/IPsec/connections.volt
+16-1src/opnsense/mvc/app/views/OPNsense/IPsec/sessions.volt
+10-6src/opnsense/mvc/app/controllers/OPNsense/IPsec/Api/TunnelController.php
+6-6src/opnsense/mvc/app/controllers/OPNsense/IPsec/forms/settings.xml
+5-5src/opnsense/mvc/app/models/OPNsense/IPsec/Swanctl.xml
+146-194 files not shown
+154-2610 files

OPNSense/core 94efd01 — src/opnsense/scripts/shell firmware.sh

firmware: update these numbers

(cherry picked from commit 452c4a39c7756f5ee4eb82e1a81f1356980a44a5)
DeltaFile
+2-2src/opnsense/scripts/shell/firmware.sh
+2-21 files

OPNSense/core 0a41bab — src/etc/rc.syshook.d/early 15-templates, src/etc/rc.syshook.d/update 10-refresh.sh

system: write /etc/os-release; closes #11009

Submitted by: Alok K. Dhir

(cherry picked from commit d6e8389c733060dffc9b7ab1d7bbb7abe70737cf)
(cherry picked from commit a2222b02a54c41efc7f219d7447fdc2e4def2132)
(cherry picked from commit ada5990f2c02c0553267a6ae59e17663e8055485)
DeltaFile
+33-7src/sbin/opnsense-version
+9-3src/man/man8/opnsense-version.8
+3-0src/etc/rc.syshook.d/update/10-refresh.sh
+3-0src/etc/rc.syshook.d/early/15-templates
+48-104 files

OPNSense/core ff04d18 — . plist, src/etc/inc/plugins.inc.d core.inc ipsec.inc

ipsec: move ping_hosts.sh to legacy plugin and harden

The script doesn't need to be in core and does not need to be
run by default.  Tampering with /tmp/tmpHOSTS without legacy
IPsec running would allow creating the file with a non-root
user which the script would pick up and potentially evaluate.

The fix for ping_hosts.sh will be in the matching plugins commit.

Reported by: Adam Korczynski of Ada Logics using Anrophic

(cherry picked from commit d111374705013c217910a0d12399ca436c6c9b9c)
DeltaFile
+0-126src/sbin/ping_hosts.sh
+15-4src/etc/inc/plugins.inc.d/ipsec.inc
+0-1src/etc/inc/plugins.inc.d/core.inc
+0-1plist
+15-1324 files

OPNSense/core 82ee94c — . plist, src/opnsense/scripts/interfaces apply_legacy_if_changes.php

interfaces: priv-sep script for interface apply the legacy way #9352

(cherry picked from commit dfc07590e93505f935a18815323a3d2c11695b9d)
DeltaFile
+54-0src/opnsense/scripts/interfaces/apply_legacy_if_changes.php
+1-13src/www/interfaces.php
+6-0src/opnsense/service/conf/actions.d/actions_interface.conf
+1-0plist
+62-134 files

LLVM/project c4a7814 — llvm/lib/Target/AMDGPU SILowerI1Copies.cpp

[AMDGPU] Remove unneeded check after SSA update in SILowerI1Copies. NFC. (#232219)

Since the switch to MachineIDFSSAUpdater in c59c19bf5921 this condition
is always true, since MachineIDFSSAUpdater never reuses existing phis.
DeltaFile
+2-4llvm/lib/Target/AMDGPU/SILowerI1Copies.cpp
+2-41 files