LLVM/project 01edf18libcxx/utils/ci buildkite-pipeline.yml

[libc++][ci] Retarget the ARM BuildKite runners (#224107)

I enabled agent clusters in BuildKite since unclustered agents are not
supported anymore. As part of that, I created a new libcxx-builders-arm
queue to replace the existing queue. This patch switches the pipeline
definition so that new jobs start targeting the new queue with clustered
agents.
DeltaFile
+8-8libcxx/utils/ci/buildkite-pipeline.yml
+8-81 files

LLVM/project 203c5aellvm/lib/ExecutionEngine/Orc/Shared CMakeLists.txt

[ORC] Link LLVMOrcShared against TargetParser

Mangler::fromTriple() calls Triple::computeDataLayout(), which lives in
LLVMTargetParser, but LLVMOrcShared only lists Support as a link
component.

This goes unnoticed in a static build: the component is an archive, so
the reference is not resolved until the final executable link, where
LLVMTargetParser is present anyway. With BUILD_SHARED_LIBS=ON each
component becomes a shared library linked with -Wl,-z,defs, and linking
LLVMOrcShared itself fails:

  ld.lld: error: undefined symbol:
    llvm::Triple::computeDataLayout[abi:cxx11](llvm::StringRef) const
  >>> referenced by Mangler.cpp:50
DeltaFile
+1-0llvm/lib/ExecutionEngine/Orc/Shared/CMakeLists.txt
+1-01 files

FreeBSD/ports 312161fmail/thunderbird-esr Makefile distinfo

mail/thunderbird-esr: update to 153.3.0 (ga)

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/153.3.0esr/releasenotes/

(cherry picked from commit 10500712359d50c613a86eff7ad491c3f319c8dd)
DeltaFile
+3-3mail/thunderbird-esr/distinfo
+2-1mail/thunderbird-esr/Makefile
+5-42 files

HardenedBSD/src 506e52fcontrib/unbound configure, contrib/unbound/util configparser.c configlexer.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+3,518-3,462contrib/unbound/util/configlexer.c
+1,936-2,732contrib/unbound/configure
+2,070-2,037contrib/unbound/util/configparser.c
+779-0sys/dev/hyperv/hvuio/hv_uio.c
+371-99sys/dev/mlx5/mlx5_ib/mlx5_ib_main.c
+312-105usr.bin/truss/setup.c
+8,986-8,435120 files not shown
+12,206-9,603126 files

HardenedBSD/src 3e4b79econtrib/unbound configure, contrib/unbound/util configparser.c configlexer.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+3,518-3,462contrib/unbound/util/configlexer.c
+1,936-2,732contrib/unbound/configure
+2,070-2,037contrib/unbound/util/configparser.c
+779-0sys/dev/hyperv/hvuio/hv_uio.c
+371-99sys/dev/mlx5/mlx5_ib/mlx5_ib_main.c
+312-105usr.bin/truss/setup.c
+8,986-8,435120 files not shown
+12,206-9,603126 files

FreeNAS/freenas c494327tests/sharing_protocols/s3 test_s3_checksums.py test_s3_grants.py

Fix the S3 suite against CI run #372

The session wiped its own credentials. _clean_leftovers matched every
name by the s3proto prefix and ran inside s3_deployment, which resolves
s3_accounts first -- so it deleted the three access keys the session had
just created, and every signed request from the first test onward
answered InvalidAccessKeyId. 259 failed, 194 errored, and the 24 that
passed were the ones asserting a bare 403. It is a session fixture of
its own now, ordered ahead of the accounts.

A credential check goes in beside it, because that failure is
indistinguishable per-test from an authorization one and silent in every
case that asserts a bare 403: the session proves all three keys clear
the credential layer before a single case depends on one.

Two grant cases were wrong about the model, not about the server. An
allow mode that does not carry an operation is not a refusal of it --
where the bucket has live S3 ACLs the evaluator defers to the object's
own record, and a grantee owns what it wrote, so a WRITEONLY grantee

    [12 lines not shown]
DeltaFile
+57-12tests/sharing_protocols/s3/conftest.py
+16-1tests/sharing_protocols/s3/test_s3_grants.py
+10-4tests/sharing_protocols/s3/test_s3_checksums.py
+83-173 files

HardenedBSD/src e4efa63share/man/man4 vmx.4 uath.4

Merge remote-tracking branch 'rad/hardened/15-stable/main' into hardened/15-stable/pledge
DeltaFile
+33-61share/man/man4/udbp.4
+31-29share/man/man4/virtio_scsi.4
+25-28share/man/man4/ntb_hw_plx.4
+19-27share/man/man4/uath.4
+23-23share/man/man4/tws.4
+22-20share/man/man4/vmx.4
+153-18849 files not shown
+643-79655 files

HardenedBSD/src 9aef747contrib/unbound configure, contrib/unbound/util configparser.c configlexer.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+3,518-3,462contrib/unbound/util/configlexer.c
+1,936-2,732contrib/unbound/configure
+2,070-2,037contrib/unbound/util/configparser.c
+779-0sys/dev/hyperv/hvuio/hv_uio.c
+371-99sys/dev/mlx5/mlx5_ib/mlx5_ib_main.c
+312-105usr.bin/truss/setup.c
+8,986-8,435120 files not shown
+12,206-9,603126 files

LLVM/project ea5b2bellvm/lib/Transforms/Utils RelLookupTableConverter.cpp, llvm/test/Transforms/RelLookupTableConverter/X86 relative_lookup_table.ll

[RelLookupTableConverter] Allow multiple uses of loaded value (#223853)

RelLookupTableConverter previously required `!Load ||
!Load->hasOneUse()`, which prevented converting lookup tables if the
loaded pointer was used more than once in the function.

This restriction is unnecessary since the loaded value itself can be
used many times. The check was likely an over-zealous carryover from
`GV->hasOneUse()` and `GEP->hasOneUse()`.

Remove the check and add a test verifying that lookup tables with
multiple uses of the loaded pointer are converted.
DeltaFile
+22-0llvm/test/Transforms/RelLookupTableConverter/X86/relative_lookup_table.ll
+1-1llvm/lib/Transforms/Utils/RelLookupTableConverter.cpp
+23-12 files

FreeBSD/ports 1050071mail/thunderbird-esr Makefile distinfo

mail/thunderbird-esr: update to 153.3.0 (ga)

Release Notes:
  https://www.thunderbird.net/en-US/thunderbird/153.3.0esr/releasenotes/
DeltaFile
+3-3mail/thunderbird-esr/distinfo
+2-1mail/thunderbird-esr/Makefile
+5-42 files

HardenedBSD/src 0a72795share/man/man4 vmx.4 uath.4

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+33-61share/man/man4/udbp.4
+31-29share/man/man4/virtio_scsi.4
+25-28share/man/man4/ntb_hw_plx.4
+19-27share/man/man4/uath.4
+23-23share/man/man4/tws.4
+22-20share/man/man4/vmx.4
+153-18849 files not shown
+643-79655 files

HardenedBSD/ports f2b6d4eMk bsd.port.mk, devel/hs-haskell-language-server distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+164-154www/element-web/pkg-plist
+79-77devel/tuicr/distinfo
+43-69devel/hs-haskell-language-server/distinfo
+54-53Mk/bsd.port.mk
+100-6security/vuxml/vuln/2026.xml
+38-37devel/tuicr/Makefile.crates
+478-39680 files not shown
+920-62686 files

LLVM/project a26f60fflang/lib/Lower/OpenMP Utils.cpp ClauseProcessor.cpp, flang/test/Lower/OpenMP iterator-ranges.f90 declare-mapper-iterator.f90

[flang][OpenMP] Lower iterator modifiers in map and motion clauses

Add iterator lowering for `target data`, `target enter/exit data`,
`target update`, and map clauses inside `declare mapper`.

For example:

```fortran
!$omp target update to(iterator(i=1:n): a(i), b)
```

Conceptually, this becomes:

```text
entries = omp.iterator(i = 1 through n) {
  yield map_info(base = a, bounds = element i)
}
target_update(iterated_maps = entries, ordinary_maps = [b])
```

    [20 lines not shown]
DeltaFile
+951-0flang/test/Lower/OpenMP/motion-iterator.f90
+293-0flang/test/Lower/OpenMP/declare-mapper-iterator.f90
+186-34flang/lib/Lower/OpenMP/ClauseProcessor.cpp
+187-0flang/lib/Lower/OpenMP/Utils.cpp
+160-0flang/test/Lower/OpenMP/iterator-ranges.f90
+124-17mlir/test/Target/LLVMIR/openmp-iterator.mlir
+1,901-5126 files not shown
+2,549-21632 files

LLVM/project 22b6009llvm/lib/CAS MappedFileRegionArena.cpp

[𝘀𝗽𝗿] initial version

Created using spr 1.3.7
DeltaFile
+1-1llvm/lib/CAS/MappedFileRegionArena.cpp
+1-11 files

HardenedBSD/ports b7c2d9esecurity/vuxml/vuln 2026.xml

security/vuxml: Document Unbound vulnerabilities

PR:             298574
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+53-0security/vuxml/vuln/2026.xml
+53-01 files

FreeBSD/ports b7c2d9esecurity/vuxml/vuln 2026.xml

security/vuxml: Document Unbound vulnerabilities

PR:             298574
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+53-0security/vuxml/vuln/2026.xml
+53-01 files

LLVM/project 49a10dellvm/docs AMDGPUUsage.rst

[AMDGPU][Doc] Add documentation about ABI occupancy

This PR introduces ABI occupancy in documentation. The actual code
implementation will be in follow-up PRs.
DeltaFile
+47-2llvm/docs/AMDGPUUsage.rst
+47-21 files

FreeBSD/ports 93d1122editors/emacs Makefile, editors/emacs/files patch-lisp_progmodes_flymake.el

editors/emacs: Apply a security fix from upstream

Previous fix for CVE-2024-53920 was incomplete[0].

[0] https://www.openwall.com/lists/oss-security/2026/09/14/1

PR:             298557
MFH:            2026Q3
Security:       7ba6c085-1590-491a-98ce-5452646b196f
Security:       CVE-2024-53920
DeltaFile
+53-0editors/emacs/files/patch-lisp_progmodes_flymake.el
+1-1editors/emacs/Makefile
+54-12 files

HardenedBSD/ports 93d1122editors/emacs Makefile, editors/emacs/files patch-lisp_progmodes_flymake.el

editors/emacs: Apply a security fix from upstream

Previous fix for CVE-2024-53920 was incomplete[0].

[0] https://www.openwall.com/lists/oss-security/2026/09/14/1

PR:             298557
MFH:            2026Q3
Security:       7ba6c085-1590-491a-98ce-5452646b196f
Security:       CVE-2024-53920
DeltaFile
+53-0editors/emacs/files/patch-lisp_progmodes_flymake.el
+1-1editors/emacs/Makefile
+54-12 files

FreeBSD/ports ed88cadwww/element-web Makefile distinfo

www/element-web: Update to 1.12.28

Approved by:    maintainer (implicit, version bump, as per PR 258262)
DeltaFile
+164-154www/element-web/pkg-plist
+3-3www/element-web/distinfo
+2-2www/element-web/Makefile
+169-1593 files

HardenedBSD/ports ed88cadwww/element-web Makefile distinfo

www/element-web: Update to 1.12.28

Approved by:    maintainer (implicit, version bump, as per PR 258262)
DeltaFile
+164-154www/element-web/pkg-plist
+3-3www/element-web/distinfo
+2-2www/element-web/Makefile
+169-1593 files

HardenedBSD/ports c10a60csecurity/vuxml/vuln 2025.xml

security/vuxml: Revise emacs vulnerability

See https://www.openwall.com/lists/oss-security/2026/09/14/1

PR:             298557
DeltaFile
+5-2security/vuxml/vuln/2025.xml
+5-21 files

FreeBSD/ports c10a60csecurity/vuxml/vuln 2025.xml

security/vuxml: Revise emacs vulnerability

See https://www.openwall.com/lists/oss-security/2026/09/14/1

PR:             298557
DeltaFile
+5-2security/vuxml/vuln/2025.xml
+5-21 files

NetBSD/src 8YK35DWsys/arch/riscv/riscv bus_space_generic.S

   risc-v: revert the change for generic_bs_r_4

   According to the RISC-V ABI Calling Convention an integer scalars
   narrower than XLEN bits are widened according to the sign of their
   type up to 32 bits, then sign-extended to XLEN bits.
VersionDeltaFile
1.10+2-6sys/arch/riscv/riscv/bus_space_generic.S
+2-61 files

FreeBSD/ports bc645e8security/stunnel Makefile distinfo

security/stunnel: Update to 5.81
DeltaFile
+3-3security/stunnel/distinfo
+1-1security/stunnel/Makefile
+4-42 files

HardenedBSD/ports bc645e8security/stunnel Makefile distinfo

security/stunnel: Update to 5.81
DeltaFile
+3-3security/stunnel/distinfo
+1-1security/stunnel/Makefile
+4-42 files

LLVM/project cc0e785utils/bazel/llvm-project-overlay/llvm/unittests BUILD.bazel

Fix bazel build for llvm_exegesis_tests (#224085)

- llvm/unittests:llvm_exegesis_tests: Fixes
https://github.com/llvm/llvm-project/pull/208364 (commit 6c31f6446a55)
Root cause: Adding PerfHelperTest.cpp introduced an include of
<perfmon/perf_event.h> under HAVE_LIBPFM, which failed layering_check
and was missing a dependency on libpfm. Fix: Disable layering_check
DeltaFile
+1-0utils/bazel/llvm-project-overlay/llvm/unittests/BUILD.bazel
+1-01 files

LLVM/project 616ec37clang/docs ReleaseNotes.md, clang/lib/Sema SemaChecking.cpp

[Clang] Fix `-Wsign-compare` assertion when negating a vector of unsigned integers (#223295)

Fixes #203575

`-1 == -*c`, where `c` points to a vector of `unsigned`, hit the
`unsigned range includes negative?` assertion in `AnalyzeComparison`.
The range analysis for unary `-` and `~` (added in #126846) checks
whether the result type is unsigned with `isUnsignedIntegerType()`,
which never looks through vector types. So the negated unsigned vector
was treated as a signed negation and came back with a possibly-negative
range, even though the operand's own range was correctly unsigned. Same
story for `~*c`.

The check now uses `hasUnsignedIntegerRepresentation()`, which looks
through vector and matrix element types the same way
`IntRange::forValueOfType` and the caller in `AnalyzeComparison` already
do. The binary-operator result gets the same predicate for its
non-negative fixup, since it had the identical blind spot. With that, a
negated unsigned vector takes the same path as a negated `unsigned`
scalar, and the comparison warns about mixed signs again as it did
before Clang 21.
DeltaFile
+23-0clang/test/Sema/compare.c
+2-2clang/lib/Sema/SemaChecking.cpp
+1-0clang/docs/ReleaseNotes.md
+26-23 files

FreeBSD/ports 11b85a7dns/unbound pkg-plist Makefile

dns/unbound: Security update 1.26.0 => 1.26.1

Release Notes:
https://community.nlnetlabs.nl/t/unbound-1-26-1-released/3463

Changelog:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.26.1

PR:             298574
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-81642
Security:       CVE-2026-81634
Security:       CVE-2026-82717
Security:       CVE-2026-77955
Security:       CVE-2026-78227
Security:       CVE-2026-80225
Security:       CVE-2026-82720
Security:       CVE-2026-85501
Security:       CVE-2026-77860

    [3 lines not shown]
DeltaFile
+3-3dns/unbound/distinfo
+1-1dns/unbound/pkg-plist
+1-1dns/unbound/Makefile
+5-53 files

HardenedBSD/ports 2c57f17dns/unbound pkg-plist Makefile

dns/unbound: Security update 1.26.0 => 1.26.1

Release Notes:
https://community.nlnetlabs.nl/t/unbound-1-26-1-released/3463

Changelog:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.26.1

PR:             298574
Approved by:    osa, vvd (Mentors, implicit)
Security:       CVE-2026-81642
Security:       CVE-2026-81634
Security:       CVE-2026-82717
Security:       CVE-2026-77955
Security:       CVE-2026-78227
Security:       CVE-2026-80225
Security:       CVE-2026-82720
Security:       CVE-2026-85501
Security:       CVE-2026-77860
MFH:            2026Q3
DeltaFile
+3-3dns/unbound/distinfo
+1-1dns/unbound/pkg-plist
+1-1dns/unbound/Makefile
+5-53 files