HardenedBSD/ports f1359d5filesystems/diffsnap Makefile, graphics/nvidia-drm-kmod Makefile.common

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+257-283net/telemt/distinfo
+127-140net/telemt/Makefile.crates
+46-0net/telemt/files/patch-src_proxy_tests_direct__relay__security__tests_nofollow.rs
+36-0graphics/nvidia-drm-kmod/Makefile.common
+17-14filesystems/diffsnap/Makefile
+26-0net/telemt/files/patch-src_proxy_tests_direct__relay__security__tests_anchored.rs
+509-43770 files not shown
+729-68976 files

FreeBSD/ports 4054b89sysutils/liburcu distinfo Makefile

sysutils/liburcu: Update 0.15.6 => 0.15.7

While here:
- Drop backported patches since they are included in the release.
- Add TEST_DEPENDS=bash.
- Sort Makefile (pet portclippy).

Changelog:
https://github.com/urcu/userspace-rcu/blob/v0.15.7/ChangeLog

Commit log:
https://github.com/urcu/userspace-rcu/compare/v0.15.6...v0.15.7

PR:             298447
Approved by:    no maintainer
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+7-15sysutils/liburcu/Makefile
+3-17sysutils/liburcu/distinfo
+10-322 files

HardenedBSD/ports 4054b89sysutils/liburcu distinfo Makefile

sysutils/liburcu: Update 0.15.6 => 0.15.7

While here:
- Drop backported patches since they are included in the release.
- Add TEST_DEPENDS=bash.
- Sort Makefile (pet portclippy).

Changelog:
https://github.com/urcu/userspace-rcu/blob/v0.15.7/ChangeLog

Commit log:
https://github.com/urcu/userspace-rcu/compare/v0.15.6...v0.15.7

PR:             298447
Approved by:    no maintainer
Approved by:    osa, vvd (Mentors, implicit)
DeltaFile
+7-15sysutils/liburcu/Makefile
+3-17sysutils/liburcu/distinfo
+10-322 files

Linux/linux 2f0c1cfarch/s390/crypto Makefile phmac_s390.c, arch/s390/kernel debug.c perf_pai.c

Merge tag 's390-7.3-3' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux

Pull s390 fixes from Vasily Gorbik:

 - Fix NULL pointer dereferences in s390dbf when setting debug levels or
   resizing debug areas while logging events. Remove duplicate messages
   about kernel parameter overrides

 - Fix PAI perf crashes when per task events move to newly onlined CPUs.
   Add CPU hotplug callbacks to allocate and free the per-CPU data

 - Fix mutex use in atomic context in AES and PAES CTR code by using
   semaphore trylocks instead. Remove conditional locking and enable
   Clang CONTEXT_ANALYSIS for the crypto code

 - Fix scatterlist walk error handling in AES and PAES and avoid freeing
   PAES walk resources twice

 - Fix missing scrubbing of temporary AES and PAES buffers, including

    [32 lines not shown]
DeltaFile
+136-60arch/s390/kernel/perf_pai.c
+116-72arch/s390/crypto/paes_s390.c
+55-32arch/s390/crypto/aes_s390.c
+36-18arch/s390/kernel/debug.c
+26-10arch/s390/crypto/phmac_s390.c
+2-0arch/s390/crypto/Makefile
+371-1921 files not shown
+371-1937 files

LLVM/project b6ca452llvm/utils/gn/secondary/llvm/lib/Frontend/HLSL BUILD.gn, llvm/utils/gn/secondary/llvm/unittests/Frontend BUILD.gn

[gn build] Port 4214b4601f49 (#223190)
DeltaFile
+1-0llvm/utils/gn/secondary/llvm/unittests/Frontend/BUILD.gn
+1-0llvm/utils/gn/secondary/llvm/lib/Frontend/HLSL/BUILD.gn
+2-02 files

LLVM/project d65afeallvm/utils/gn/secondary/lldb/source/Plugins/SymbolFile/DWARF BUILD.gn

[gn build] Port 0f47e798205b (#223189)
DeltaFile
+1-0llvm/utils/gn/secondary/lldb/source/Plugins/SymbolFile/DWARF/BUILD.gn
+1-01 files

FreeBSD/ports 2cb2b25net-mgmt/rubygem-oxidized Makefile, net-mgmt/rubygem-oxidized/files oxidized.in

net-mgmt/rubygem-oxidized: Fix rc script restart race with daemon(8)

PR:             298397
Approved by:    Nick Hilliard <nick at foobar.org> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3

(cherry picked from commit 76fac30da491935c886be15985b2d30c543d1018)
DeltaFile
+2-2net-mgmt/rubygem-oxidized/files/oxidized.in
+1-1net-mgmt/rubygem-oxidized/Makefile
+3-32 files

LLVM/project ca8f82bllvm/lib/Support KnownFPClass.cpp, llvm/test/Transforms/InstCombine known-bits.ll

[KnownFPClass] Restrict KnownFPClass::bitcast/toKnownBits deductions to verified FP semantics (#221133)

`KnownFPClass::bitcast` and `KnownFPClass::toKnownBits` previously made
deductions for floating-point semantics whose bit representations had
not been verified.

I have made it so `KnownFPClass::bitcast` and
`KnownFPClass::toKnownBits` return `fcAllFlags`/unknown for any
`APFloat` semantics we have not verified. Currently, this prevents
potentially invalid deductions for `PPCDoubleDouble` (mostly in regards
to the signbit and endianess). It also allows these functions to be
"safely" used with the 4/6/8 bit floating point types since we
conservatively return unknown.

Currently the list of supported/verified semantics for both `bitcast`
and `toKnownBits` are:
```
IEEEhalf
BFloat

    [4 lines not shown]
DeltaFile
+71-0llvm/unittests/Support/KnownFPClassTest.cpp
+34-0llvm/lib/Support/KnownFPClass.cpp
+3-1llvm/test/Transforms/InstCombine/known-bits.ll
+108-13 files

HardenedBSD/ports 76fac30net-mgmt/rubygem-oxidized Makefile, net-mgmt/rubygem-oxidized/files oxidized.in

net-mgmt/rubygem-oxidized: Fix rc script restart race with daemon(8)

PR:             298397
Approved by:    Nick Hilliard <nick at foobar.org> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
DeltaFile
+2-2net-mgmt/rubygem-oxidized/files/oxidized.in
+1-1net-mgmt/rubygem-oxidized/Makefile
+3-32 files

FreeBSD/ports 76fac30net-mgmt/rubygem-oxidized Makefile, net-mgmt/rubygem-oxidized/files oxidized.in

net-mgmt/rubygem-oxidized: Fix rc script restart race with daemon(8)

PR:             298397
Approved by:    Nick Hilliard <nick at foobar.org> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q3
DeltaFile
+2-2net-mgmt/rubygem-oxidized/files/oxidized.in
+1-1net-mgmt/rubygem-oxidized/Makefile
+3-32 files

FreeBSD/src 741cd29sys/fs/nfs nfs_commonkrpc.c, sys/fs/nfsclient nfs_clrpcops.c

nfscl: Yet more fixes for the NFS over RDMA client glue

This should be it for a while, but there will be another cycle
of "glue" updates.  I just found out that I'll need to create
an alternate code path that uses a contigmalloc() blob instead
of scatter/gather of pages, since some NICs cannot do the
scatter/gather of pages well.

This commit should not affect non-RDMA behaviour.

MFC after:      3 months
Fixes:  884ee8d6c9b4 ("nfscl: Add some glue for client side NFS over RDMA")
DeltaFile
+20-2sys/rpc/clntrdma.h
+21-0sys/rpc/rpc_generic.c
+4-2sys/fs/nfsclient/nfs_clrpcops.c
+1-1sys/rpc/clnt_rc.c
+2-0sys/fs/nfs/nfs_commonkrpc.c
+48-55 files

HardenedBSD/src 741cd29sys/fs/nfs nfs_commonkrpc.c, sys/fs/nfsclient nfs_clrpcops.c

nfscl: Yet more fixes for the NFS over RDMA client glue

This should be it for a while, but there will be another cycle
of "glue" updates.  I just found out that I'll need to create
an alternate code path that uses a contigmalloc() blob instead
of scatter/gather of pages, since some NICs cannot do the
scatter/gather of pages well.

This commit should not affect non-RDMA behaviour.

MFC after:      3 months
Fixes:  884ee8d6c9b4 ("nfscl: Add some glue for client side NFS over RDMA")
DeltaFile
+20-2sys/rpc/clntrdma.h
+21-0sys/rpc/rpc_generic.c
+4-2sys/fs/nfsclient/nfs_clrpcops.c
+1-1sys/rpc/clnt_rc.c
+2-0sys/fs/nfs/nfs_commonkrpc.c
+48-55 files

NetBSD/pkgsrc-wip d366103. TODO, llama.cpp Makefile PLIST

llama.cpp: update to 0.4.0.

llama.cpp 0.4.0 adds initial Qwen3.8-Flash-Next and Nemotron-3-Puzzle
support, on-demand tensor reading, per-slot server context limits,
video input options, and a ggml update to 0.23.0 with major sparse
flash attention and RDMA work.
DeltaFile
+6-6llama.cpp/distinfo
+3-3llama.cpp/PLIST
+3-3llama.cpp/Makefile.common
+0-1TODO
+1-0llama.cpp/Makefile
+13-135 files

FreeNAS/freenas dec936asrc/middlewared/middlewared/pytest/unit/utils test_entitlements.py

NAS-143046 / 26.0.0-RC.1 / Exempt TNC_SUB from the product matrix completeness check (by sonicaj) (#19696)

This commit adds changes to keep the target vector completeness
assertion passing now that TNC_SUB exists in the LicenseFeature enum.
TNC_SUB reports a TrueNAS Connect account tier rather than a product
matrix row, so there is no HW/CE column that could grant or withhold it
and giving it a vector would add a row nothing ever consults.

Original PR: https://github.com/truenas/middleware/pull/19691

Co-authored-by: Waqar Ahmed <waqarahmedjoyia at live.com>
DeltaFile
+4-1src/middlewared/middlewared/pytest/unit/utils/test_entitlements.py
+4-11 files

HardenedBSD/ports e575876ports-mgmt/ports-tools pkg-plist distinfo

ports-mgmt/ports-tools: Update 1.8 => 1.10, take maintainership

Changelogs:
https://github.com/ppekala/ports-tools/releases/tag/1.9
https://github.com/ppekala/ports-tools/releases/tag/1.10

- Fix warnings from portclippy.

PR:             298445
Sponsored by:   UNIS Labs (vvd, commit patch)
DeltaFile
+5-5ports-mgmt/ports-tools/Makefile
+3-3ports-mgmt/ports-tools/distinfo
+0-1ports-mgmt/ports-tools/pkg-plist
+8-93 files

FreeBSD/ports e575876ports-mgmt/ports-tools pkg-plist distinfo

ports-mgmt/ports-tools: Update 1.8 => 1.10, take maintainership

Changelogs:
https://github.com/ppekala/ports-tools/releases/tag/1.9
https://github.com/ppekala/ports-tools/releases/tag/1.10

- Fix warnings from portclippy.

PR:             298445
Sponsored by:   UNIS Labs (vvd, commit patch)
DeltaFile
+5-5ports-mgmt/ports-tools/Makefile
+3-3ports-mgmt/ports-tools/distinfo
+0-1ports-mgmt/ports-tools/pkg-plist
+8-93 files

NetBSD/pkgsrc QCfyxgidoc TODO CHANGES-2026

   doc: Updated devel/gitte to 0.10.1
VersionDeltaFile
1.27903+1-2doc/TODO
1.6064+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc xUL6IBKdevel/gitte PLIST Makefile

   gitte: update to 0.10.1.

   0.10.1

   This bugfix release fixes signing in Flatpak builds and adds small UI improvements.

   0.10.0

   This release adds side-by-side diffs, Git LFS and submodule support,
   signing configuration, remote management, and major performance
   improvements.

   0.9.1

   This bugfix release corrects ref resolution when refreshing the
   commit log and improves detection of authentication failures from
   modern Git forges.

   0.9.0

    [17 lines not shown]
VersionDeltaFile
1.2+448-508devel/gitte/distinfo
1.2+148-168devel/gitte/cargo-depends.mk
1.3+3-4devel/gitte/Makefile
1.2+5-0devel/gitte/PLIST
+604-6804 files

LLVM/project 9f58baellvm/lib/Target/AMDGPU AMDGPU.td, llvm/lib/Target/AMDGPU/Utils AMDGPUBaseInfo.cpp

[AMDGPU] Fix LDS reporting for gfx6

Change-Id: Idaa597f95d7a3028e3848726948892b1f66a220d
DeltaFile
+17-0llvm/unittests/Target/AMDGPU/AMDGPUUnitTests.cpp
+7-7llvm/test/CodeGen/AMDGPU/occupancy-levels.ll
+5-4llvm/lib/Target/AMDGPU/AMDGPU.td
+4-3llvm/lib/Target/AMDGPU/Utils/AMDGPUBaseInfo.cpp
+5-1llvm/unittests/TargetParser/TargetParserTest.cpp
+38-155 files

HardenedBSD/src 75a1939share/man/man4 aq.4, sys/dev/aq aq_fw.h aq_fw2x.c

aq(4): arm PHY thermal shutdown from the admin poll

move thermal shutdown arming to the admin poll

this gives a more reasonable delay prior to the first attempt, and also
allows us to retry and make the option runtime-tuneable via a new
disable_thermal_arm sysctl

Approved by:    adrian (mentor)
Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D59593

Signed-off-by: Nick Price <nprice at FreeBSD.org>
DeltaFile
+34-1sys/dev/aq/aq2_fw.c
+30-0sys/dev/aq/aq_irq.c
+14-10sys/dev/aq/aq_main.c
+16-6sys/dev/aq/aq_fw2x.c
+20-1share/man/man4/aq.4
+2-2sys/dev/aq/aq_fw.h
+116-201 files not shown
+118-207 files

FreeBSD/src 75a1939share/man/man4 aq.4, sys/dev/aq aq_fw.h aq_fw2x.c

aq(4): arm PHY thermal shutdown from the admin poll

move thermal shutdown arming to the admin poll

this gives a more reasonable delay prior to the first attempt, and also
allows us to retry and make the option runtime-tuneable via a new
disable_thermal_arm sysctl

Approved by:    adrian (mentor)
Reviewed by:    adrian
Differential Revision:  https://reviews.freebsd.org/D59593

Signed-off-by: Nick Price <nprice at FreeBSD.org>
DeltaFile
+34-1sys/dev/aq/aq2_fw.c
+30-0sys/dev/aq/aq_irq.c
+14-10sys/dev/aq/aq_main.c
+16-6sys/dev/aq/aq_fw2x.c
+20-1share/man/man4/aq.4
+2-2sys/dev/aq/aq_fw.h
+116-201 files not shown
+118-207 files

FreeBSD/src b3f7a43etc/mtree BSD.tests.dist, share/man/man4 fdescfs.4

fdescfs: descend through /dev/fd/N when mounted linrdlnk

Linux resolves a path below /proc/self/fd/N in the directory the
descriptor names, and linprocfs makes /proc/<pid>/fd a symlink to
/dev/fd.  Under linrdlnk the fdescfs node carries only VV_READLINK,
which namei will not walk through, so such a path fails with ENOTDIR.

Return the underlying vnode from fdesc_lookup for a non-final component,
or a trailing slash, reusing the machinery the nodup option already
uses.  The last component is untouched, so open("/dev/fd/N") keeps its
dup(2) semantic; a descriptor with no vnode behind it, such as a pipe,
yields ENOTDIR.

Add ATF coverage for traversal, descriptor reuse, and preservation of
last-component and mount-option semantics.

Approved by:    adrian (mentor)
Reviewed by:    kib, adrian
Differential Revision:  https://reviews.freebsd.org/D59393

    [2 lines not shown]
DeltaFile
+373-0tests/sys/fs/fdescfs/fdescfs_test.c
+15-1sys/fs/fdescfs/fdesc_vnops.c
+9-0tests/sys/fs/fdescfs/Makefile
+6-1share/man/man4/fdescfs.4
+2-0etc/mtree/BSD.tests.dist
+1-0tests/sys/fs/Makefile
+406-26 files

HardenedBSD/src b3f7a43etc/mtree BSD.tests.dist, share/man/man4 fdescfs.4

fdescfs: descend through /dev/fd/N when mounted linrdlnk

Linux resolves a path below /proc/self/fd/N in the directory the
descriptor names, and linprocfs makes /proc/<pid>/fd a symlink to
/dev/fd.  Under linrdlnk the fdescfs node carries only VV_READLINK,
which namei will not walk through, so such a path fails with ENOTDIR.

Return the underlying vnode from fdesc_lookup for a non-final component,
or a trailing slash, reusing the machinery the nodup option already
uses.  The last component is untouched, so open("/dev/fd/N") keeps its
dup(2) semantic; a descriptor with no vnode behind it, such as a pipe,
yields ENOTDIR.

Add ATF coverage for traversal, descriptor reuse, and preservation of
last-component and mount-option semantics.

Approved by:    adrian (mentor)
Reviewed by:    kib, adrian
Differential Revision:  https://reviews.freebsd.org/D59393

    [2 lines not shown]
DeltaFile
+373-0tests/sys/fs/fdescfs/fdescfs_test.c
+15-1sys/fs/fdescfs/fdesc_vnops.c
+9-0tests/sys/fs/fdescfs/Makefile
+6-1share/man/man4/fdescfs.4
+2-0etc/mtree/BSD.tests.dist
+1-0tests/sys/fs/Makefile
+406-26 files

LLVM/project e7d233bclang/lib/ScalableStaticAnalysis/SourceTransformation/Transformations CppBoundedBuffers.cpp

clang-format
DeltaFile
+2-2clang/lib/ScalableStaticAnalysis/SourceTransformation/Transformations/CppBoundedBuffers.cpp
+2-21 files

LLVM/project 0b53ccbclang/lib/ScalableStaticAnalysis/SourceTransformation CMakeLists.txt, clang/lib/ScalableStaticAnalysis/SourceTransformation/Transformations CppBoundedBuffers.cpp

[SSAF][clang-reforge] Retrofit expressions after CppBoundedBuffers decl rewrites

PR #210457 introduces declaration rewriting.  When CppBoundedBuffers
rewrites a declaration or return type to a bounded_ptr/bounded_array,
some of the existing uses of that entity needs retrofit.

This commit creates expression rewrites for the following patterns:

- Append '.data()' to call arguments when necessary parameter is not
  transformed but argument is transformed.
- Append '.as_bounded<T>()' to call arguments when both parameter and
  argument are transformed but element types are not identical.
- Rewrite '&e[i]' to '(e + i)' and '&*e'/'&(*e)' to 'e', if 'e' is
  transformed.
- Rewrite '(T*)e', 'static_cast<T*>(e)', and 'reinterpret_cast<T*>(e)'
  to 'e.as_bounded<T>()', if 'e' is transformed.

The 3rd step of
rdar://187125348
DeltaFile
+446-5clang/lib/ScalableStaticAnalysis/SourceTransformation/Transformations/CppBoundedBuffers.cpp
+246-1clang/unittests/ScalableStaticAnalysis/SourceTransformation/CppBoundedBuffersTest.cpp
+9-0clang/lib/ScalableStaticAnalysis/SourceTransformation/CMakeLists.txt
+7-0llvm/utils/gn/secondary/clang/lib/ScalableStaticAnalysis/SourceTransformation/BUILD.gn
+708-64 files

OpenBSD/src QX9D2ynshare/zoneinfo/datfiles zone1970.tab zonenow.tab

   Update to 2026dgtz from https://github.com/JodaOrg/global-tz
    o Canada’s Northwest Territories moved to permanent -06 on 2026-08-21.
    o Obsolescent settings like TZ="EST5EDT" now conform better to POSIX.
    o Colombia’s 1992-05-02 spring forward was at 00:00, not 24:00.
    o Iran’s 1979-05-26 spring forward was at 00:00, not 24:00.
VersionDeltaFile
1.94+81-47share/zoneinfo/datfiles/northamerica
1.47+50-6share/zoneinfo/datfiles/backward
1.86+17-14share/zoneinfo/datfiles/southamerica
1.114+19-7share/zoneinfo/datfiles/asia
1.10+3-3share/zoneinfo/datfiles/zonenow.tab
1.36+2-2share/zoneinfo/datfiles/zone1970.tab
+172-791 files not shown
+174-817 files

HardenedBSD/src cb2964fsys/amd64/conf MINIMAL GENERIC, sys/powerpc/conf QORIQ64 MPC85XX

amd64, powerpc: Enable tpm(4) in supported kernels

tpm(4) was removed from amd64 GENERIC because it broke suspend and
resume.  The preceding lifecycle, state-save, interrupt, locality, and
teardown fixes address those failures for both TPM 1.2 and TPM 2.0.

Restore the driver to amd64 GENERIC and MINIMAL, where TPM entropy
harvesting remained enabled.  Enable the driver and entropy harvesting
in the MPC85XX and QORIQ64 configurations, which already provide FDT,
spibus, and the platform SPI controller required by FDT-attached TPMs.
Leave the generic AIM and POWER configurations unchanged because they
have no TPM attachment bus.

The TPM 1.2 path completed repeated S3 cycles and command tests on
ThinkPad T430 and T440p systems.  The TPM 2.0 path completed repeated
device and full-system suspend/resume cycles on a ThinkPad P51.  The
PowerPC configuration matrix was checked to retain tpm(4) only where its
FDT SPI attachment path is present.


    [8 lines not shown]
DeltaFile
+2-3sys/amd64/conf/MINIMAL
+2-3sys/amd64/conf/GENERIC
+2-0sys/powerpc/conf/QORIQ64
+2-0sys/powerpc/conf/MPC85XX
+8-64 files

FreeBSD/src cb2964fsys/amd64/conf MINIMAL GENERIC, sys/powerpc/conf QORIQ64 MPC85XX

amd64, powerpc: Enable tpm(4) in supported kernels

tpm(4) was removed from amd64 GENERIC because it broke suspend and
resume.  The preceding lifecycle, state-save, interrupt, locality, and
teardown fixes address those failures for both TPM 1.2 and TPM 2.0.

Restore the driver to amd64 GENERIC and MINIMAL, where TPM entropy
harvesting remained enabled.  Enable the driver and entropy harvesting
in the MPC85XX and QORIQ64 configurations, which already provide FDT,
spibus, and the platform SPI controller required by FDT-attached TPMs.
Leave the generic AIM and POWER configurations unchanged because they
have no TPM attachment bus.

The TPM 1.2 path completed repeated S3 cycles and command tests on
ThinkPad T430 and T440p systems.  The TPM 2.0 path completed repeated
device and full-system suspend/resume cycles on a ThinkPad P51.  The
PowerPC configuration matrix was checked to retain tpm(4) only where its
FDT SPI attachment path is present.


    [8 lines not shown]
DeltaFile
+2-3sys/amd64/conf/MINIMAL
+2-3sys/amd64/conf/GENERIC
+2-0sys/powerpc/conf/QORIQ64
+2-0sys/powerpc/conf/MPC85XX
+8-64 files

NetBSD/pkgsrc YntntZTdoc TODO CHANGES-2026

   doc: Updated devel/coccinelle to 1.3.3
VersionDeltaFile
1.27902+1-2doc/TODO
1.6063+2-1doc/CHANGES-2026
+3-32 files

NetBSD/pkgsrc PzY1inLdevel/coccinelle Makefile distinfo

   coccinelle: update to 1.3.3.

   * 1.3.3
   ** Bugfixes:
   - Improve performance with satLabel cache (thanks to Denis Efremov)
VersionDeltaFile
1.20+4-4devel/coccinelle/distinfo
1.49+2-2devel/coccinelle/Makefile
+6-62 files