filesystems/ltfs: Fix portscout version detection
GitHub tags are vX.Y.Z.W-NNNNN. Portscout normalizes the IBM
build suffix as an extra version component and reports the
current tag as a new release. Skip that tag in both forms.
filesystems/ltfs: Fix portscout version detection
GitHub tags are vX.Y.Z.W-NNNNN. Portscout normalizes the IBM
build suffix as an extra version component and reports the
current tag as a new release. Skip that tag in both forms.
[lldb] Support i386 Linux TLS thread pointers (DW_OP_form_tls_address) (#216463)
Fixes #211473.
On i386 Linux, `gs` contains a segment selector rather than the
thread-pointer address. LLDB's i386 native register context did not
expose `LLDB_REGNUM_GENERIC_TP`, so
`DynamicLoaderPOSIXDYLD::GetThreadLocalData` could not locate the
current thread's DTV and module TLS block. As a result, valid
`DW_OP_form_tls_address` and `DW_OP_GNU_push_tls_address` expressions
failed to evaluate.
Mapping the existing `gs` register to the generic thread pointer would
be incorrect because it would expose the selector as an address. The
selector's GDT entry must instead be resolved by the Linux process
tracing the inferior.
## Fix
[38 lines not shown]
net/freeipa-server: Update to 4.13.2
Upstream moved to Codeberg, follow it in MASTER_SITES.
Use the samba framework instead of a hardcoded samba416 dependency [1].
Require sssd2 2.13.1_2 or newer. Earlier revisions leave ${prefix}
unexpanded in SSSDConfig, which makes ipa-server-install fail.
Own the HTTP keytab by www. httpd runs with GSS_USE_PROXY=no and reads
the keytab itself, so a root-owned one left mod_auth_gssapi without
server credentials.
Keep the rc(8) program paths of the Kerberos services in place so a
running kadmind stays visible to rc(8) while it is disabled. Without
them ipactl reported it as stopped and ipactl restart waited forever.
Make the D-Bus system bus a prerequisite of certmonger and oddjobd.
Without it certmonger does not start and oddjobd retries forever, which
[11 lines not shown]
net/freeipa-server: Update to 4.13.2
Upstream moved to Codeberg, follow it in MASTER_SITES.
Use the samba framework instead of a hardcoded samba416 dependency [1].
Require sssd2 2.13.1_2 or newer. Earlier revisions leave ${prefix}
unexpanded in SSSDConfig, which makes ipa-server-install fail.
Own the HTTP keytab by www. httpd runs with GSS_USE_PROXY=no and reads
the keytab itself, so a root-owned one left mod_auth_gssapi without
server credentials.
Keep the rc(8) program paths of the Kerberos services in place so a
running kadmind stays visible to rc(8) while it is disabled. Without
them ipactl reported it as stopped and ipactl restart waited forever.
Make the D-Bus system bus a prerequisite of certmonger and oddjobd.
Without it certmonger does not start and oddjobd retries forever, which
[11 lines not shown]
security/dogtag-pki: Update to 11.10.1
Switch to Java 21.
Adapt the FreeBSD parts to the reworked upstream tree: guard the SELinux
import and its call sites, replace the remaining runuser call with
subprocess privilege switching, and pass APP_SERVER_CM through the
environment, which 11.10 reads instead of the CMake define.
Give pki-tomcatd a bounded stop. jsvc records the pid of its child in
the pidfile while the parent handles SIGTERM, and Tomcat can deadlock in
JSS while closing LDAP connections, so rc(8) would wait forever and
stall the system shutdown.
Changes: https://github.com/dogtagpki/pki/releases
Sponsored by: Netzkommune GmbH
security/dogtag-jss: Update to 5.10.1
Switch to Java 21.
Disable ML-DSA and ML-KEM: JSS otherwise declares more SSL
authentication types than security/nss provides, which trips a static
assertion at runtime.
Changes: https://github.com/dogtagpki/jss/releases
Sponsored by: Netzkommune GmbH
security/dogtag-jss: Update to 5.10.1
Switch to Java 21.
Disable ML-DSA and ML-KEM: JSS otherwise declares more SSL
authentication types than security/nss provides, which trips a static
assertion at runtime.
Changes: https://github.com/dogtagpki/jss/releases
Sponsored by: Netzkommune GmbH
security/dogtag-pki: Update to 11.10.1
Switch to Java 21.
Adapt the FreeBSD parts to the reworked upstream tree: guard the SELinux
import and its call sites, replace the remaining runuser call with
subprocess privilege switching, and pass APP_SERVER_CM through the
environment, which 11.10 reads instead of the CMake define.
Give pki-tomcatd a bounded stop. jsvc records the pid of its child in
the pidfile while the parent handles SIGTERM, and Tomcat can deadlock in
JSS while closing LDAP connections, so rc(8) would wait forever and
stall the system shutdown.
Changes: https://github.com/dogtagpki/pki/releases
Sponsored by: Netzkommune GmbH
[docs] Address PDB and DirectX migration review
Fix MyST cross-references and emphasis in the PDB documentation. Replace all DirectX DXContainer and DXILResources reST list-tables with native MyST list-tables, preserve local external-link definitions, and format the nested Root Signature table for source readability.
Validation:
- ninja -C build docs-llvm-html
- validate_rst_md_html_ids.py on the four touched documents (stable IDs preserved; existing MyST heading permalink context noise remains)
- check_markdown_html_render.py on the four touched documents
- git diff --check
- scanned touched files for internal-only markers
