LLVM/project f53d356 — clang/lib/CIR/Dialect/Transforms CIRABIClassifier.cpp, clang/lib/CIR/Dialect/Transforms/TargetLowering CIRABIRewriteContext.cpp

[CIR] Flatten unions passed Direct in CallConvLowering
DeltaFile
+114-0clang/test/CIR/Transforms/abi-lowering/amdgpu-union.cir
+30-13clang/lib/CIR/Dialect/Transforms/TargetLowering/CIRABIRewriteContext.cpp
+9-5clang/lib/CIR/Dialect/Transforms/CIRABIClassifier.cpp
+153-183 files

LLVM/project 007d9bd — libc/lib CMakeLists.txt

[libc] Generate a stub for libresolv.a (#242188)

Create an empty libresolv.a static archive on Linux to avoid link errors
when build rules (such as Go's `net cgo` package) explicitly pass
`-lresolv` to the linker. Resolver symbols reside in the main `libc.a`
archive instead (as in glibc 2.34+).

Follows the pattern set in commits
https://github.com/llvm/llvm-project/commit/ede01decbcb34bd2f04b9102ab96664cc6d5aa4b
and
https://github.com/llvm/llvm-project/commit/ae5117cb45b860bf473337523d7fe4a6367dd8d1.

Assisted-by: Automated tooling, human reviewed.
DeltaFile
+1-1libc/lib/CMakeLists.txt
+1-11 files

LLVM/project 0f3b203 — clang/lib/CIR/Dialect/Transforms CIRABIClassifier.cpp, clang/test/CIR/Transforms/abi-lowering amdgpu-complex.cir

[CIR] Flatten wide _Complex arguments in CallConvLowering
DeltaFile
+135-0clang/test/CIR/Transforms/abi-lowering/amdgpu-complex.cir
+12-0clang/lib/CIR/Dialect/Transforms/CIRABIClassifier.cpp
+147-02 files

LLVM/project e0f180f — llvm/lib/ExecutionEngine/JITLink JITLinkGeneric.cpp, llvm/unittests/ExecutionEngine/JITLink JITLinkGenericTests.cpp

[JITLink] Handle errors after allocation for empty graphs (#242164)

Graphs with no alloc actions and only NoAlloc sections skip memory
allocation, so JITLinkerBase's Alloc member is null for the rest of the
link. Any failure after the point where allocation would have happened
(in a post-allocation, pre-fixup or post-fixup pass, in notifyResolved,
or during fixup) goes through abandonAllocAndBailOut, which asserted
that Alloc was non-null, and would have dereferenced null in release
builds. It now reports the error directly when there is no allocation to
abandon.

The new JITLinkGenericPassErrorTest.FailingPassIsReported test adds a
failing pass to each pass list in turn, for both an empty graph and a
graph with one external symbol, and checks that the error is reported
exactly once, that the link stops, and that the allocation (if any) is
abandoned.
DeltaFile
+110-4llvm/unittests/ExecutionEngine/JITLink/JITLinkGenericTests.cpp
+5-1llvm/lib/ExecutionEngine/JITLink/JITLinkGeneric.cpp
+115-52 files

LLVM/project a3e16b7 — libcxx/docs/Status Cxx26Issues.csv, libcxx/test/std/utilities/optional/optional.monadic transform_ref.mandates.verify.cpp

[libc++] Mark LWG4299 and LWG4304 as Complete (#241193)

Both LWG4299 and LWG4304 relate to optional<T&>, which libc++ has
conformed to since optional<T&> was implemented in LLVM 22 (#155202).

LWG4304 constrains optional<T&>::value_or so that optional<T&> is
well-formed when T is a function or array type (already tested in
value_or.compile.pass.cpp). LWG4299 adds a Mandates that the result type
U of optional<T&>::transform is a valid contained type for optional,
which libc++ enforces via static_assert.

This adds a test covering the Mandates for optional<T&>::transform and
marks both LWG4299 and LWG4304 as complete in Cxx26Issues.csv.

Fixes #171339
Fixes #171343

---------

Signed-off-by: anant <anant1234466 at gmail.com>
DeltaFile
+57-0libcxx/test/std/utilities/optional/optional.monadic/transform_ref.mandates.verify.cpp
+2-2libcxx/docs/Status/Cxx26Issues.csv
+59-22 files

LLVM/project 6423907 — lld/ELF MarkLive.cpp

[ELF] MarkLive: Simplify processSectionEdges with member function. NFC (#242192)
DeltaFile
+36-47lld/ELF/MarkLive.cpp
+36-471 files

LLVM/project 9babcf5 — llvm/test/CodeGen/AMDGPU bf16.ll minimumnum.bf16.ll

!fixup Merge the tryAssignCSRFirstTimeMinCost into tryAssignCSRFirstTime and make it enable by default

Note: I still added a hook, shouldSpillInsteadOfFirstCSRUse, to avoid a test case crash. The crash happens because AMDGPU has a register class that isn’t suitable for this kind of spill.

I keep it enable by default but disable for AMDGPU.
DeltaFile
+217-230llvm/test/CodeGen/AMDGPU/minimumnum.ll
+217-230llvm/test/CodeGen/AMDGPU/maximumnum.ll
+196-230llvm/test/CodeGen/AMDGPU/fcopysign.bf16.ll
+208-208llvm/test/CodeGen/AMDGPU/minimumnum.bf16.ll
+208-208llvm/test/CodeGen/AMDGPU/maximumnum.bf16.ll
+148-158llvm/test/CodeGen/AMDGPU/bf16.ll
+1,194-1,26429 files not shown
+1,792-1,99035 files

LLVM/project 8206b23 — llvm/lib/DebugInfo/PDB/Native GSIStreamBuilder.cpp

[LLD][COFF] Parallelize serialization of PDB Publics. NFC
DeltaFile
+10-8llvm/lib/DebugInfo/PDB/Native/GSIStreamBuilder.cpp
+10-81 files

FreeBSD/src fb9033d — sys/conf newvers.sh

15.2: Update to BETA2

Approved by:    re (implicit)
DeltaFile
+1-1sys/conf/newvers.sh
+1-11 files

FreeBSD/src 193586d — lib/libc/xdr xdr.c, sys/xdr xdr.c

xdr: Fix xdr_string

Forcing maxsize to RPC_MAXDATASIZE breaks code that deliberately uses
XDR with longer strings than permitted by SunRPC.

MFC after:      1 week
Fixes:          6448ec89e739 (" * limit size of buffers to RPC_MAXDATASIZE")
Fixes:          e17d7ab869bb ("xdr_string: don't leak strings with xdr_free")
Sponsored by:   Klara, Inc.
Sponsored by:   NetApp, Inc.
Reviewed by:    kevans, brooks
Differential Revision:  https://reviews.freebsd.org/D59994

(cherry picked from commit d2018cedb414ef17e77b7fc2fa19fd81328da46b)

xdr: Limit xdr_wrapstring

The previous commit (re)introduced the possibility that a malicious or
corrupt message can cause the receiver to allocate a very large amount

    [11 lines not shown]
DeltaFile
+2-2sys/xdr/xdr.c
+2-2lib/libc/xdr/xdr.c
+4-42 files

FreeBSD/src 8909018 — lib/libc/xdr xdr.c, sys/xdr xdr.c

xdr_string: don't leak strings with xdr_free

Historically (and in a small amount of older software such as OpenAFS),
developers would attempt to free XDR strings with

        xdr_free((xdrproc_t)xdr_string, &string)

This resulted in xdr_free calling xdr_string with only two intentional
arguments and whatever was left in the third argument register.  If the
register held a sufficently small number, xdr_string would return FALSE
and not free the string (no one checks the return values).

Software should instead free strings with:

        xdr_free((xdrproc_t)xdr_wrapstring, &string)

Because buggy software exists in the wild, act as though xdr_wrapstring
was used in the XDR_FREE case and plug these leaks.


    [9 lines not shown]
DeltaFile
+7-0sys/xdr/xdr.c
+7-0lib/libc/xdr/xdr.c
+14-02 files

HardenedBSD/src eed0fb6 — include unistd.h, sbin/devd devd.8

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+28-44usr.sbin/bsnmpd/modules/snmp_hostres/hostres_device_tbl.c
+54-6sbin/devd/devd.8
+56-0tests/sys/kern/vn_io_fault1.c
+26-11tests/sys/kern/ssl_sendfile.c
+22-8include/unistd.h
+7-11sbin/devd/tests/client_test.c
+193-8013 files not shown
+232-9619 files

HardenedBSD/src 583613b — sys/dev/iavf iavf_vc_common.c if_iavf_iflib.c, sys/dev/tpm tpm_tis_core.c tpm_crb.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+745-337sys/dev/tpm/tpm.c
+461-152sys/dev/tpm/tpm_crb.c
+351-137sys/dev/tpm/tpm_tis_core.c
+359-45sys/dev/iavf/if_iavf_iflib.c
+254-130sys/dev/iavf/iavf_vc_common.c
+97-143sys/net/iflib.c
+2,267-94440 files not shown
+3,157-1,08846 files

LLVM/project bab211d — utils/bazel MODULE.bazel MODULE.bazel.lock

[Bazel] Update mpfr to 4.2.2.bcr.4 (#242184)

Updates the BCR mpfr dependency from 4.2.2.bcr.3 to 4.2.2.bcr.4 to
restore float128 detection when building MPFR from source
(bazelbuild/bazel-central-registry#11691).

Fixes #240663

See https://github.com/bazelbuild/bazel-central-registry/issues/11691
DeltaFile
+4-2utils/bazel/MODULE.bazel.lock
+1-1utils/bazel/MODULE.bazel
+5-32 files

FreeBSD/ports 5764bc6 — www/pomerium Makefile distinfo

www/pomerium: update to 0.34.1

Changes:        https://github.com/pomerium/pomerium/releases/tag/v0.34.1
DeltaFile
+3-3www/pomerium/distinfo
+1-2www/pomerium/Makefile
+4-52 files

HardenedBSD/ports 5764bc6 — www/pomerium Makefile distinfo

www/pomerium: update to 0.34.1

Changes:        https://github.com/pomerium/pomerium/releases/tag/v0.34.1
DeltaFile
+3-3www/pomerium/distinfo
+1-2www/pomerium/Makefile
+4-52 files

OpenZFS/src 091796c — scripts commitcheck.sh

commitcheck: exempt all email trailers from the line limit

Only Signed-off-by and Reviewed-by lines are exempt from the
72-character body limit, so a Co-authored-by line with a long name
or address fails commitcheck. So do Reported-by, Tested-by,
Suggested-by and the other "-by" trailers used in this repository.

Exempt any trailer line that ends in an email address instead of
listing tags. This covers the two existing exemptions too.

Reviewed-by: Brian Behlendorf <behlendorf1 at llnl.gov>
Signed-off-by: Matthew Ahrens <matt at mahrens.org>
Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
Closes #19860
DeltaFile
+5-2scripts/commitcheck.sh
+5-21 files

LLVM/project 588ffbc — llvm/lib/Target/AMDGPU AMDGPURegisterBankInfo.cpp AMDGPULegalizerInfo.cpp, llvm/test/CodeGen/AMDGPU stacksave_stackrestore.ll

[AMDGPU][GISel] Capture the stack pointer at stacksave
DeltaFile
+254-190llvm/test/CodeGen/AMDGPU/stacksave_stackrestore.ll
+15-8llvm/lib/Target/AMDGPU/AMDGPUInstructionSelector.cpp
+8-1llvm/lib/Target/AMDGPU/AMDGPULegalizerInfo.cpp
+6-2llvm/test/CodeGen/AMDGPU/GlobalISel/inst-select-stacksave-stackrestore.mir
+0-3llvm/lib/Target/AMDGPU/AMDGPURegisterBankInfo.cpp
+283-2045 files

LLVM/project 437fb30 — llvm/lib/Target/AMDGPU SIInstrInfo.cpp, llvm/test/CodeGen/AMDGPU/GlobalISel regbankselect-amdgpu-wave-address.mir inst-select-amdgpu-wave-address.mir

Relax the verifier to accept VRegs for G_AMDGPU_WAVE_ADDRESS
DeltaFile
+20-15llvm/test/CodeGen/AMDGPU/GlobalISel/inst-select-amdgpu-wave-address.mir
+5-9llvm/test/CodeGen/AMDGPU/GlobalISel/regbankselect-amdgpu-wave-address.mir
+3-2llvm/lib/Target/AMDGPU/SIInstrInfo.cpp
+28-263 files

LLVM/project cacd2b4 — llvm/test/CodeGen/AMDGPU stacksave_stackrestore.ll

Pre-commit tests for the stackrestore fix
DeltaFile
+1,529-0llvm/test/CodeGen/AMDGPU/stacksave_stackrestore.ll
+1,529-01 files

LLVM/project 31fcaa5 — llvm/test/CodeGen/AMDGPU/GlobalISel regbankselect-amdgpu-wave-address.mir inst-select-amdgpu-wave-address.mir

Pre-commit tests for relaxing verifier
DeltaFile
+43-2llvm/test/CodeGen/AMDGPU/GlobalISel/inst-select-amdgpu-wave-address.mir
+20-1llvm/test/CodeGen/AMDGPU/GlobalISel/regbankselect-amdgpu-wave-address.mir
+63-32 files

OpenZFS/src 470e0e8 — include zfs_namecheck.h, lib/libzfs libzfs.abi

zcp: check clone names with clone_namecheck()

zfs.sync.clone() passes the new dataset's name from Lua straight to
dsl_dataset_clone_check(), which only rejects '@' and names that are
too long.  zfs clone also rejects names that fail dataset_namecheck()
(the ioctl layer checks them) and, in zfs_ioc_clone(), names with '%',
which marks internal datasets such as %recv.  A channel program can
therefore create clones that zfs(8) can't create, including ones zfs
list never shows.

Add clone_namecheck(): dataset_namecheck() plus rejecting '@' and '%',
reported as NAME_ERR_INVALCHAR with the character in 'what'.  Use it
in zfs_ioc_clone() in place of its own '@' and '%' checks, which
doesn't change what the ioctl accepts, and in a check function for
zfs.sync.clone() that runs it before dsl_dataset_clone_check().  Doing
the check there keeps zcp_sync_task()'s handling: zfs.check.clone()
returns the error, and zfs.sync.clone() still fails in open context
(zfs program -n).  Names that are too long still reach
dsl_dataset_clone_check(), which returns ENAMETOOLONG.  Add

    [8 lines not shown]
DeltaFile
+51-0tests/unit/test_namecheck.c
+24-0module/zcommon/zfs_namecheck.c
+21-1module/zfs/zcp_synctask.c
+7-0lib/libzfs/libzfs.abi
+1-2module/zfs/zfs_ioctl.c
+1-0include/zfs_namecheck.h
+105-36 files

OpenZFS/src a59feb5 — tests/runfiles common.run, tests/zfs-tests/tests Makefile.am

ZTS: test invalid clone names in channel programs

zfs.sync.clone() passes the new dataset's name from Lua to the dsl
checks, which only reject '@' and over-long names, while zfs clone
also rejects '%' and characters dataset_namecheck() refuses.  Add
tst.clone_neg, which expects EINVAL for such names.

This fails now: zfs.sync.clone() creates "fs/bad%name", which zfs list
never shows because '%' marks internal datasets, and "fs/bad*name".

Reviewed-by: Brian Behlendorf <behlendorf1 at llnl.gov>
Signed-off-by: Will Rouesnel <wrouesnel at wrouesnel.com>
Closes #19311
DeltaFile
+38-0tests/zfs-tests/tests/functional/channel_program/synctask_core/tst.clone_neg.ksh
+21-0tests/zfs-tests/tests/functional/channel_program/synctask_core/tst.clone_neg.zcp
+1-1tests/runfiles/common.run
+2-0tests/zfs-tests/tests/Makefile.am
+62-14 files

LLVM/project a9c7213 — lld/COFF PDB.cpp

[COFF] Parallelize PDB Section Contrib. NFC

PDB's createSectionContrib was computed serially.
This contains a CRC over data which can be expensive
for large binaries.
DeltaFile
+9-4lld/COFF/PDB.cpp
+9-41 files

LLVM/project 8de2ab5 — lldb/source/Core FormatEntity.cpp, lldb/test/API/functionalities/return-value-synthetic Makefile synthetic.py

Reapply "[lldb] Show synthetic children in the return value of the thread (#241947) (#242173)

This reverts commit e65a8642d426d82f145fbaac0575f4e0f6e2aa46.

https://github.com/llvm/llvm-project/pull/242068 should have fixed the
original problem.
DeltaFile
+26-0lldb/test/API/functionalities/return-value-synthetic/TestReturnValueSynthetic.py
+14-0lldb/test/API/functionalities/return-value-synthetic/main.c
+9-0lldb/test/API/functionalities/return-value-synthetic/synthetic.py
+7-1lldb/source/Core/FormatEntity.cpp
+3-0lldb/test/API/functionalities/return-value-synthetic/Makefile
+59-15 files

FreeBSD/ports 77ba9af — www/angie Makefile distinfo, www/angie-module-set-misc Makefile

www/angie: Security update to 1.12.4

This release fixes CVE-2026-93479, CVE-2026-97629, CVE-2026-95101,
CVE-2026-15176 and CVE-2026-97205, ported from nginx 1.31.7.
angie-module-njs is updated to 1.0.2, which fixes CVE-2026-101025
and CVE-2026-101019.

PR:             299694
Changes:        https://en.angie.software/angie/docs/oss_changes/#angie-1-12-4
Security:       a1ede43e-de8c-11f1-bae2-3497f65b111b
Security:       a1ee2283-de8c-11f1-bae2-3497f65b111b
MFH:            2026Q4
Sponsored by:   Netzkommune GmbH

(cherry picked from commit efd77031b011f43144c1397e11c15ba0d0bc16dc)
DeltaFile
+5-5www/angie/distinfo
+1-1www/angie/Makefile
+1-1www/angie-module-zstd/Makefile
+1-1www/angie-module-vod/Makefile
+1-1www/angie-module-upload/Makefile
+1-1www/angie-module-set-misc/Makefile
+10-1018 files not shown
+28-2824 files

NetBSD/pkgsrc 5WaVdFZ — doc CHANGES-2026

   Updated net/py-cloudflare, net/py-botocore, net/py-boto3, net/py-awscli
VersionDeltaFile
1.7965+5-1doc/CHANGES-2026
+5-11 files

NetBSD/pkgsrc shLIkh0 — net/py-awscli Makefile distinfo

   py-awscli: updated to 1.46.3

   1.46.3

   * bugfix:alias: Pass Windows external alias args to cmd.exe as literals
   * bugfix:codedeploy: Tighten file permissions for the on-premises instance configuration file written by ``aws deploy install``
VersionDeltaFile
1.80+4-4net/py-awscli/distinfo
1.88+2-2net/py-awscli/Makefile
+6-62 files

NetBSD/pkgsrc I5TXlBb — net/py-boto3 Makefile distinfo

   py-boto3: updated to 1.44.2

   1.44.2

   * api-change:``autoscaling``: [``botocore``] Amazon EC2 Auto Scaling now supports ASGAverageCPUUtilizationHighResolution as a predefined metric type for target tracking scaling policies.
   * api-change:``backup``: [``botocore``] Adding new notification types for SNS notifications
   * api-change:``cleanrooms``: [``botocore``] Adds a retry signal to protected query and protected job errors that indicates whether running the same request again might succeed, and defines error codes that identify the category of the failure.
   * api-change:``cloudwatch``: [``botocore``] Adds support for saving, retrieving, listing, and deleting CloudWatch metric data query definitions.
   * api-change:``cloudwatchomni``: [``botocore``] Add aggregationTemporality and monotonicity to GetContextGraph MetricMetadata
   * api-change:``connect``: [``botocore``] This release adds a LastModifiedTime and LastModifiedRegion field to ListIntegrationAssociations so customers can see at what time and in which Region an IntegrationAssociation was last modified in.
   * api-change:``ec2``: [``botocore``] This release adds support for multiple features, including EC2 Image Builder image recipes and container recipes in AMI usage reports, Amazon EC2 Detailed Monitoring adds opt-in metrics, and Global Accelerator and API Gateway V2 as resource exclusions for VPC Encryption Control.
   * api-change:``emr-containers``: [``botocore``] This release updates range of maxInQueueDepth and maxConcurrency limit from 10000 to 1000.
   * api-change:``gameliftstreams``: [``botocore``] Adds support for ApplicationStartedAt on stream sessions, a timestamp that indicates when the application launched for the stream session, returned by GetStreamSession and StartStreamSession. Also added streamingStartedAt and streamingEndedAt.
   * api-change:``guardduty``: [``botocore``] Adds the ListInvestigationRecords API, which returns the step-by-step records of a completed investigation. Adds investigation scope details and an optional structured summary to GetInvestigation. Adds filter criteria and investigation type to ListInvestigations.
   * api-change:``lightsail``: [``botocore``] Amazon Lightsail now offers web addresses, so you can quickly make a website or application reachable at a name like mysite.amazonlightsail.com. A web address is free while attached to a Lightsail CDN, with no domain to register and no SSL TLS certificate to create or renew.
   * api-change:``mediaconnect``: [``botocore``] MediaConnect adds four features. (1) RTMP Push on Router Input and Flows (RTMP, RTMPS, eRTMP). (2) PID Remapping on Router rewrites PIDs inline without transcoding. (3) Key Frame Switching transitions router inputs on video boundaries. (4) SRT Merge Input bonds redundant SRT streams.
   * api-change:``medialive``: [``botocore``] AWS Elemental MediaLive now adds a caption language setting for MediaPackage V2 output groups that signals a stream carries no closed captions.
   * api-change:``mediatailor``: [``botocore``] Add post origin manifest hook, add HLS tag processor
   * api-change:``mwaa``: [``botocore``] Amazon MWAA now supports Airflow environments with IAM Identity Center (IDC) integration and exposes OSS Airflow Multi-Team feature. Users can configure individual IDC-backed identities and fine-grained authorization, and define Dags on per-team basis.

    [7 lines not shown]
VersionDeltaFile
1.68+4-4net/py-boto3/distinfo
1.72+2-2net/py-boto3/Makefile
+6-62 files

FreeBSD/ports 0e5e0be — security/vuxml/vuln 2026.xml

security/vuxml: Document angie and angie-module-njs vulnerabilities

PR:             299694
Sponsored by:   Netzkommune GmbH
DeltaFile
+85-0security/vuxml/vuln/2026.xml
+85-01 files