FreeBSD/ports 8923874security/softhsm2 Makefile distinfo

security/softhsm2: Updae 2.6.1 => 2.7.0

Changelog:
https://github.com/softhsm/SoftHSMv2/releases/tag/2.7.0

- Upstream changed site.
- Cleanup the port.

PR:             292670
Approved by:    Jaap Akkerhuis <jaap at NLnetLabs.nl> (maintainer)
MFH:            2026Q1
Co-authored-by: Jaap Akkerhuis <jaap at NLnetLabs.nl>
DeltaFile
+12-17security/softhsm2/Makefile
+3-3security/softhsm2/distinfo
+3-3security/softhsm2/pkg-plist
+18-233 files

LLVM/project 9e84bd4llvm/include/llvm/ADT GenericUniformityImpl.h, llvm/lib/Analysis UniformityAnalysis.cpp

use CallbackVH for deletion/RAUW
DeltaFile
+45-0llvm/lib/Analysis/UniformityAnalysis.cpp
+12-1llvm/include/llvm/ADT/GenericUniformityImpl.h
+57-12 files

FreeBSD/ports b2907f3databases/mongosh Makefile, sysutils/intel-pcm Makefile

*/*: bump PORTREVISION following libsimdjson.so soname change

Reported by:    meta
Fixes:          f9dd1c82078f6f1df3bb396459f915b51532d331
DeltaFile
+1-1sysutils/intel-pcm/Makefile
+1-1databases/mongosh/Makefile
+1-1www/node22/Makefile
+1-0www/node20/Makefile
+1-0www/node25/Makefile
+1-0www/node24/Makefile
+6-31 files not shown
+7-37 files

LLVM/project 717a9abllvm/lib/Analysis InstructionSimplify.cpp, llvm/test/Transforms/InstSimplify structured-gep.ll

[InstSimplify] Add support for llvm.structured.gep (#182874)

Similar to GEP, the SGEP instruction with no indices can be simplified
by directly using the base pointer.
DeltaFile
+91-0llvm/test/Transforms/InstSimplify/structured-gep.ll
+2-0llvm/lib/Analysis/InstructionSimplify.cpp
+93-02 files

FreeBSD/src f3364d3sys/netinet tcp_timewait.c

tcp: improve handling of segments in TIME WAIT

The check for excluding duplicate ACKs needs to consider only TH_SYN
and TH_FIN. We know that TH_ACK is set and TH_RST is cleared. All
other flags, in particular TH_ECE, TH_CWR, and TH_AE needs to be
ignored for the check.

PR:                     292293
Reviewed by:            rrs
MFC after:              3 days
Sponsored by:           Netflix, Inc.
Differential Revision:  https://reviews.freebsd.org/D55489
DeltaFile
+1-1sys/netinet/tcp_timewait.c
+1-11 files

HardenedBSD/src 198d6d7lib/libc/db/mpool mpool.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+4-0lib/libc/db/mpool/mpool.c
+4-01 files

LLVM/project 90144c2llvm/lib/Target/WebAssembly WebAssemblyInstrSIMD.td, llvm/test/CodeGen/WebAssembly simd-extadd.ll

[WebAssembly] optimize ext + shuffle + add into addext (#182849)

cc https://github.com/llvm/llvm-project/issues/179143

This adds a second pattern: we already recognize "shuffle + extend +
add" as `addext`, this adds another pattern for "extend + shuffle +
add", which can come up when programs are optimized.
DeltaFile
+52-3llvm/lib/Target/WebAssembly/WebAssemblyInstrSIMD.td
+32-0llvm/test/CodeGen/WebAssembly/simd-extadd.ll
+84-32 files

FreeBSD/src 8d2f910sys/netinet tcp_timewait.c

tcp: BBLog incoming packets in TCPS_TIME_WAIT

PR:                     292293
Reviewed by:            rrs, rscheff, pouria, Nick Banks, Peter Lei
MFC after:              3 days
Sponsored by:           Netflix, Inc.
Differential Revision:  https://reviews.freebsd.org/D5546
DeltaFile
+3-0sys/netinet/tcp_timewait.c
+3-01 files

HardenedBSD/src d5b4709lib/libc/db/mpool mpool.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+4-0lib/libc/db/mpool/mpool.c
+4-01 files

FreeBSD/src 4e28874sys/netinet tcp_input.c tcp_ecn.c, sys/netinet/tcp_stacks rack.c

When TCP ECN decides it wants to assure an ACK is sent it needs to do it correctly and with some limits.

So in testing I have found two interesting cases where ECN is going
to make it so that an ack will be sent right away. These cases need
to be limited to being in the ESTABLISHED state. You don't want ECN
sending ACK's when we are transitioning in front or end states.
Also we don't start a delayed ack timer <and> at the same time set
the ACKNOW flag, thats just plain wrong.

Reviewed by: tuexen, rscheff
Differential Revision:<https://reviews.freebsd.org/D55460>
DeltaFile
+5-2sys/netinet/tcp_input.c
+4-1sys/netinet/tcp_ecn.c
+4-1sys/netinet/tcp_stacks/rack.c
+13-43 files

FreeNAS/freenas 5e66908src/middlewared/middlewared/alembic/versions/26.0 2026-02-25_00-00_smb-minimum-protocol.py, src/middlewared/middlewared/api/v26_0_0 smb.py

replace enable_smb1 boolena with minimum_protocol

This commit responds to an increasing trend where our user
base has disabling all non-SMB3 dialect support on the
SMB server as a part of a compliance checklist. Originally
we presented a simply boolean checkbox to re-enable SMB1
support. The new field is a string containing minimum
protocol that may be set to the following values:

*SMB1* - this enables SMB1 support (as well as SMB2/3). Users
generally *shouldn't* enable SMB1 unless they have a good
reason to (for example a very expensive CNC mill with
dependency on a very old version of Windows).

*SMB2* - (default) this disables SMB1 support, but allows
SMB2/3 protocol access. The minimum supported SMB dialect
is 2.04 (Windows Vista / older linux clients).

*SMB3* - new. This disables SMB1 support, and *also* disables

    [8 lines not shown]
DeltaFile
+45-0src/middlewared/middlewared/alembic/versions/26.0/2026-02-25_00-00_smb-minimum-protocol.py
+19-2tests/unit/test_smb_service.py
+9-5src/middlewared/middlewared/api/v26_0_0/smb.py
+7-7src/middlewared/middlewared/plugins/smb.py
+5-2src/middlewared/middlewared/plugins/smb_/util_smbconf.py
+2-2tests/api2/test_audit_smb.py
+87-184 files not shown
+94-2510 files

HardenedBSD/ports 1978871editors/fresh distinfo Makefile.crates, www/fmd-server distinfo Makefile

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+307-3editors/fresh/distinfo
+154-2editors/fresh/Makefile.crates
+89-0www/fmd-server/distinfo
+86-0www/fmd-server/Makefile
+36-0www/fmd-server/files/fmd-server.in
+15-0www/fmd-server/pkg-descr
+687-532 files not shown
+772-6138 files

LLVM/project 9d55f14llvm/lib/Target/SPIRV SPIRVCommandLine.cpp, llvm/test/CodeGen/SPIRV/extensions/SPV_KHR_float_controls2 disabled-on-amd.ll

[SPIRV][AMD] Reenable `SPV_KHR_float_control2` for AMD flavored SPIRV (#182873)

`SPV_KHR_float_controls2` is enabled in the translator after
https://github.com/khronosgroup/spirv-llvm-translator/pull/3475.

This extension was disabled since we were not able to translate it back.

This patch reverts #169659.
DeltaFile
+0-23llvm/test/CodeGen/SPIRV/extensions/SPV_KHR_float_controls2/disabled-on-amd.ll
+0-6llvm/lib/Target/SPIRV/SPIRVCommandLine.cpp
+0-292 files

LLVM/project c48f60ellvm/lib/CodeGen ExpandIRInsts.cpp

Unify expandPow2Division/expandPow2Remainder into expandPow2DivRem.

Merge the two functions into one to share the common signed-path logic (freeze, bias, ashr) and reduce code duplication, as suggested.
DeltaFile
+66-85llvm/lib/CodeGen/ExpandIRInsts.cpp
+66-851 files

LLVM/project 0000728llvm/lib/CodeGen ExpandIRInsts.cpp

Fixed comments as requested.
DeltaFile
+2-1llvm/lib/CodeGen/ExpandIRInsts.cpp
+2-11 files

LLVM/project 92ef987llvm/lib/CodeGen ExpandIRInsts.cpp, llvm/test/CodeGen/AMDGPU div_v2i128.ll div_i128.ll

[CodeGen] Expand power-of-2 div/rem at IR level in ExpandIRInsts.

Previously, power-of-2 div/rem operations wider than
MaxLegalDivRemBitWidth were excluded from IR expansion and left for
backend peephole optimizations. Some backends can fail to process such
instructions in case we switch off DAGCombiner.

Now ExpandIRInsts expands them into shift/mask sequences:
- udiv X, 2^C  ->  lshr X, C
- urem X, 2^C  ->  and X, (2^C - 1)
- sdiv X, 2^C  ->  bias adjustment + ashr X, C
- srem X, 2^C  ->  X - (((X + Bias) >> C) << C)

Special cases handled:
- Division/remainder by 1 or -1 (identity, negation, or zero)
- Exact division (sdiv exact skips bias, produces ashr exact)
- Negative power-of-2 divisors (result is negated)
- INT_MIN divisor (correct via countr_zero on bit pattern)
DeltaFile
+69-1,283llvm/test/CodeGen/AMDGPU/div_v2i128.ll
+148-0llvm/test/Transforms/ExpandIRInsts/X86/sdiv129.ll
+55-93llvm/test/CodeGen/X86/div_i129_v_pow2k.ll
+125-9llvm/lib/CodeGen/ExpandIRInsts.cpp
+115-0llvm/test/Transforms/ExpandIRInsts/X86/srem129.ll
+20-49llvm/test/CodeGen/AMDGPU/div_i128.ll
+532-1,4344 files not shown
+645-1,46410 files

LLVM/project 4fb17f4llvm/test/CodeGen/AMDGPU div_i128.ll, llvm/test/Transforms/ExpandIRInsts/X86 divrem-pow2.ll sdiv129.ll

Addressed review comments:

- Added proofs for power-of-2 div/rem expansion in ExpandIRInsts at
  https://alive2.llvm.org/ce/z/Y-iWm-
- Tests updated as requested.

Also added CreateFreeze() where needed.
DeltaFile
+255-0llvm/test/Transforms/ExpandIRInsts/X86/divrem-pow2.ll
+0-148llvm/test/Transforms/ExpandIRInsts/X86/sdiv129.ll
+0-115llvm/test/Transforms/ExpandIRInsts/X86/srem129.ll
+0-51llvm/test/Transforms/ExpandIRInsts/X86/udiv129.ll
+24-11llvm/test/CodeGen/AMDGPU/div_i128.ll
+0-25llvm/test/Transforms/ExpandIRInsts/X86/urem129.ll
+279-3503 files not shown
+291-3539 files

OPNSense/ports c1695a2sysutils/nut pkg-plist

sysutils/nut: add these missing files
DeltaFile
+5-0sysutils/nut/pkg-plist
+5-01 files

HardenedBSD/ports 93f469awww Makefile, www/fmd-server distinfo Makefile

www/fmd-server: [NEW PORT] FMD server to locate and control your devices

FMD allows you to locate and remotely control your Android device.
This is useful if you have lost or misplaced it. FMD is decentralised, and
users remain in full control of their data.

WWW: https://fmd-foss.org
DeltaFile
+89-0www/fmd-server/distinfo
+86-0www/fmd-server/Makefile
+36-0www/fmd-server/files/fmd-server.in
+15-0www/fmd-server/pkg-descr
+1-0www/Makefile
+227-05 files

FreeBSD/ports 93f469awww Makefile, www/fmd-server distinfo Makefile

www/fmd-server: [NEW PORT] FMD server to locate and control your devices

FMD allows you to locate and remotely control your Android device.
This is useful if you have lost or misplaced it. FMD is decentralised, and
users remain in full control of their data.

WWW: https://fmd-foss.org
DeltaFile
+89-0www/fmd-server/distinfo
+86-0www/fmd-server/Makefile
+36-0www/fmd-server/files/fmd-server.in
+15-0www/fmd-server/pkg-descr
+1-0www/Makefile
+227-05 files

FreeBSD/src 454212bsys/kern uipc_socket.c, sys/netinet sctp_syscalls.c

sctp: fix so_proto when peeling off a socket

Reported by:            glebius
Reviewed by:            rrs
Fixes:                  d195b3783fa4 ("sctp: fix socket type created by sctp_peeloff()")
Differential Revision:  https://reviews.freebsd.org/D55454
DeltaFile
+2-2sys/kern/uipc_socket.c
+3-1sys/netinet/sctp_syscalls.c
+1-1sys/sys/socketvar.h
+6-43 files

LLVM/project 634e75fllvm/lib/CodeGen ExpandIRInsts.cpp

Fixed comments as requested.
DeltaFile
+2-1llvm/lib/CodeGen/ExpandIRInsts.cpp
+2-11 files

LLVM/project 668870clldb/source/Host/windows PseudoConsole.cpp

[lldb][windows] add a 50ms sleep when closing the ConPTY (#183280)

Since https://github.com/llvm/llvm-project/pull/182302 was merged,
`x86-64-gp-write.test` is flaky.

This patch reintroduces the 50ms sleep that was removed in
https://github.com/llvm/llvm-project/pull/182302 to fix the flakyness
while we investigate it.
DeltaFile
+4-0lldb/source/Host/windows/PseudoConsole.cpp
+4-01 files

OPNSense/ports c733de0databases/py-sqlite3 Makefile

databases/py-sqlite3: release port revision now that package name changes
DeltaFile
+1-1databases/py-sqlite3/Makefile
+1-11 files

OPNSense/tools 7ac2a42config/26.1 make.conf

config: disable py-sphinx dependencies for Python 3.13
DeltaFile
+12-10config/26.1/make.conf
+12-101 files

LLVM/project 8fe060cllvm/include/llvm/ADT GenericUniformityImpl.h GenericUniformityInfo.h

review: keep unknown values divergent
DeltaFile
+7-12llvm/include/llvm/ADT/GenericUniformityImpl.h
+0-4llvm/include/llvm/ADT/GenericUniformityInfo.h
+7-162 files

OPNSense/ports f07d823sysutils/nut pkg-plist distinfo, sysutils/nut/files patch-m4_nut__check_libltdl.m4

sysutils/nut: update to 2.8.3 to fix Python 3.13
DeltaFile
+7-7sysutils/nut/files/patch-m4_nut__check_libltdl.m4
+4-4sysutils/nut/pkg-plist
+3-3sysutils/nut/distinfo
+1-2sysutils/nut/Makefile
+15-164 files

FreeBSD/ports fef4e7ddns/nsnotifyd distinfo Makefile

dns/nsnotifyd: Update to 2.4

The new -S option tells nsnotifyd to send all SOA queries to a specific
server.

re: https://dotat.at/@/2026-02-24-nsnotifyd-2-4-released.html
DeltaFile
+3-3dns/nsnotifyd/distinfo
+1-1dns/nsnotifyd/Makefile
+4-42 files

HardenedBSD/ports fef4e7ddns/nsnotifyd distinfo Makefile

dns/nsnotifyd: Update to 2.4

The new -S option tells nsnotifyd to send all SOA queries to a specific
server.

re: https://dotat.at/@/2026-02-24-nsnotifyd-2-4-released.html
DeltaFile
+3-3dns/nsnotifyd/distinfo
+1-1dns/nsnotifyd/Makefile
+4-42 files

LLVM/project 4cf1a61clang/tools/driver driver.cpp, llvm/cmake/modules AddLLVM.cmake

[NFC] Add comments for PR “[LLVM][CLANG] Update signal‑handling behavior to comply with POSIX”  (#183206)

This PR adds comments to address post‑commit review feedback on commit
15488a7f78ce7b9ae3c06b031134e5cb339b335c.
DeltaFile
+2-1clang/tools/driver/driver.cpp
+2-0llvm/cmake/modules/AddLLVM.cmake
+4-12 files