FreeBSD/ports 1e8c0ee — multimedia/haruna Makefile, multimedia/jellyfin-desktop Makefile

*/*: Chase mpvqt update
DeltaFile
+1-1multimedia/jellyfin-desktop/Makefile
+1-0net-im/tokodon/Makefile
+1-0multimedia/plasmatube/Makefile
+1-0multimedia/haruna/Makefile
+4-14 files

FreeBSD/ports c36bdc5 — multimedia/mpvqt Makefile distinfo

multimedia/mpvqt: Update to 1.2.1
DeltaFile
+3-3multimedia/mpvqt/distinfo
+2-3multimedia/mpvqt/Makefile
+5-62 files

LLVM/project f6b41f1 — llvm/include/llvm/Analysis AliasAnalysis.h, llvm/lib/Analysis BasicAliasAnalysis.cpp

[InstCombine] Remove redundant separate_storage assumes (#233736)

When it can already be proven that two pointers don't alias without the
`separate_storage` assume there is no point in keeping
`separate_storage` assumptions around.
DeltaFile
+28-0llvm/test/Transforms/InstCombine/assume-separate_storage.ll
+7-0llvm/lib/Transforms/InstCombine/InstCombineCalls.cpp
+3-2llvm/lib/Analysis/BasicAliasAnalysis.cpp
+3-0llvm/include/llvm/Analysis/AliasAnalysis.h
+41-24 files

LLVM/project 7d594cc — llvm/lib/Target/AMDGPU VOP2Instructions.td

[AMDGPU] Restore gfx90a predicate on V_MUL_LEGACY_F32_e64_gfx90a. NFCI. (#232035)

#116288 removed both the AssemblerPredicate and SubtargetPredicate of
isGFX90APlus that applied to V_MUL_LEGACY_F32_e64_gfx90a, leaving it
with no predicates at all. Since it has a different encoding from the
GFX6-GFX10 versions of v_mul_legacy_f32_e64, this meant that the asm
matcher could have selected the wrong encoding on those targets. It
only selected the right one because V_MUL_LEGACY_F32_e64_gfx90a is
defined last.

Restore an AssemblerPredicate of isGFX90APlus on just this instruction,
and fix the stale closing comment on the let block that used to set it
for all of the gfx90a multiclasses.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply at anthropic.com>

Co-authored-by: Claude Opus 5.5 (1M context) <noreply at anthropic.com>
DeltaFile
+2-3llvm/lib/Target/AMDGPU/VOP2Instructions.td
+2-31 files

FreeBSD/ports 40de5f6 — math/py-jaxlib Makefile

math/py-jaxlib: add flavors
DeltaFile
+5-2math/py-jaxlib/Makefile
+5-21 files

FreeBSD/ports 8306d00 — www/py-dj60-django-auth-ldap Makefile distinfo, www/py-dj60-django-auth-ldap/files patch-pyproject.toml

www/py-dj60-django-auth-ldap: Update to 5.4.0

Changelog:

https://github.com/django-auth-ldap/django-auth-ldap/releases/tag/5.4.0
DeltaFile
+13-0www/py-dj60-django-auth-ldap/files/patch-pyproject.toml
+3-3www/py-dj60-django-auth-ldap/distinfo
+2-2www/py-dj60-django-auth-ldap/Makefile
+18-53 files

FreeBSD/ports a66c6fa — www/py-django-auth-ldap Makefile distinfo, www/py-django-auth-ldap/files patch-pyproject.toml

www/py-django-auth-ldap: Update to 5.4.0

Changelog:

https://github.com/django-auth-ldap/django-auth-ldap/releases/tag/5.4.0
DeltaFile
+13-0www/py-django-auth-ldap/files/patch-pyproject.toml
+3-3www/py-django-auth-ldap/distinfo
+2-3www/py-django-auth-ldap/Makefile
+18-63 files

FreeBSD/ports 8639c20 — www/py-django-reversion Makefile distinfo

www/py-django-reversion: Update to 6.4.0

Changelog:

https://github.com/etianen/django-reversion/releases/tag/v6.4.0
DeltaFile
+3-3www/py-django-reversion/distinfo
+1-1www/py-django-reversion/Makefile
+4-42 files

FreeBSD/ports 32b7631 — www/py-django-tree-queries distinfo Makefile

www/py-django-tree-queries: Update to 0.28.0

Changelog:

https://github.com/feincms/django-tree-queries/blob/0.28/CHANGELOG.rst
DeltaFile
+3-3www/py-django-tree-queries/distinfo
+3-3www/py-django-tree-queries/Makefile
+6-62 files

FreeBSD/ports ef91f41 — textproc/py-mkdocs-autorefs Makefile distinfo

textproc/py-mkdocs-autorefs: Update to 1.4.5

Changelog:

https://github.com/mkdocstrings/autorefs/releases/tag/1.4.5
DeltaFile
+3-3textproc/py-mkdocs-autorefs/distinfo
+1-1textproc/py-mkdocs-autorefs/Makefile
+4-42 files

FreeBSD/ports c0c7419 — textproc/py-backrefs Makefile distinfo

textproc/py-backrefs: Update to 8.1

Changelog:

https://github.com/facelessuser/backrefs/releases/tag/8.1
DeltaFile
+3-3textproc/py-backrefs/distinfo
+1-1textproc/py-backrefs/Makefile
+4-42 files

FreeBSD/ports e721365 — textproc/py-ttp-templates Makefile distinfo

textproc/py-ttp-templates: Update to 0.6.18

Changelog since 0.6.4:

https://github.com/dmulyalin/ttp_templates/blob/0.6.18/docs/release_notes.md
DeltaFile
+3-3textproc/py-ttp-templates/distinfo
+1-1textproc/py-ttp-templates/Makefile
+4-42 files

FreeBSD/ports 3879b29 — net-mgmt/py-netutils Makefile distinfo

net-mgmt/py-netutils: Update to 1.19.2

Changelog:

https://github.com/networktocode/netutils/releases/tag/v1.19.2
DeltaFile
+3-3net-mgmt/py-netutils/distinfo
+1-1net-mgmt/py-netutils/Makefile
+4-42 files

FreeBSD/ports 965182a — converters/py-svglib Makefile distinfo

converters/py-svglib: Update to 2.3.2

Changelog since 2.2.0:

https://github.com/deeplook/svglib/blob/v2.3.2/CHANGELOG.md

MFH:            2026Q4
Security:       bdac753c-d1d5-11f1-985e-901b0edee044
DeltaFile
+3-3converters/py-svglib/distinfo
+1-1converters/py-svglib/Makefile
+4-42 files

FreeBSD/ports 99e0fd1 — security/vuxml/vuln 2026.xml

security/vuxml: Document py-svglib security issues

* GHSA-249c-7rgc-f52h 7.5
* GHSA-555j-qj3j-c8jv 7.5
* GHSA-2p5c-8vcc-4rcw 5.3
DeltaFile
+66-0security/vuxml/vuln/2026.xml
+66-01 files

FreeBSD/ports 1b65cce — security/py-netmiko distinfo Makefile, security/py-netmiko/files patch-pyproject.toml

security/py-netmiko: Update to 4.8.0

* Add option BULK-ENCRYPT and make it the default as well, because the
  dependency for this has been in use for quite some time and only
  became optional with this version.

* Remove no longer required patch.

Changelog:

https://github.com/ktbyers/netmiko/releases/tag/v4.8.0
DeltaFile
+11-5security/py-netmiko/Makefile
+0-13security/py-netmiko/files/patch-pyproject.toml
+3-3security/py-netmiko/distinfo
+14-213 files

LLVM/project 2d18d3a — offload/libompaccsupport device.cpp, offload/test/offloading generic_spmd_grid.c

use getDeviceBlockLimit instead of OMP_NUM_TEAMS

Trade threads for blocks only while the doubled number of blocks stays within
the device's block limit, which OMP_NUM_TEAMS may lower, instead of not trading
at all if OMP_NUM_TEAMS is set. This keeps every trade a pure one and leaves
getDeviceBlockLimit as it was.

Claude assisted with this patch.
DeltaFile
+14-12offload/libompaccsupport/device.cpp
+10-2offload/test/offloading/generic_spmd_grid.c
+4-3openmp/docs/design/Runtimes.md
+28-173 files

FreeBSD/ports ef43dd5 — databases/p5-DBD-cego Makefile distinfo

databases/p5-DBD-cego: update 1.5.10 -> 1.5.11

- Patch added for parameter quoting.
  Parameters have been quoted in the bind method, but this must be
  either done in execute. Otherwise, no parameter quoting will be done
  for direct execute calls ( e.g. $sth->execute($p1, $p2) )
DeltaFile
+3-3databases/p5-DBD-cego/distinfo
+1-1databases/p5-DBD-cego/Makefile
+4-42 files

FreeBSD/ports d037d7a — security/rustls-ffi Makefile Makefile.crates

security/rustls-ffi: Security update to 0.15.7

Security:       4538886a-d1d9-11f1-8135-8447094a420f
MFH:            2026Q4
DeltaFile
+37-37security/rustls-ffi/distinfo
+17-17security/rustls-ffi/Makefile.crates
+1-1security/rustls-ffi/Makefile
+55-553 files

FreeBSD/ports fd3f63f — security/vuxml/vuln 2026.xml

security/vuxml: Document RusTLS-ffi vulnerability
DeltaFile
+25-0security/vuxml/vuln/2026.xml
+25-01 files

FreeBSD/ports 0a70585 — misc/ollama Makefile

misc/ollama: fix fetch

Reported by:    fallout
DeltaFile
+1-1misc/ollama/Makefile
+1-11 files

OPNSense/core ba8471f — src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/forms systemhealth.xml

health: update help text
DeltaFile
+1-1src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/forms/systemhealth.xml
+1-11 files

LLVM/project 930a3d4 — flang/lib/Lower MultiImageFortran.cpp, flang/lib/Optimizer/Transforms MIFOpConversion.cpp

[flang][MIF] Adding lowering for EVENT POST/WAIT statements (#210283)

Add lowering of EVENT POST and EVENT WAIT statements to the MIF dialect
(mif.event_post / mif.event_wait), and lowering of coarray references in
hlfir.designate.

- The event variable is passed to PRIF together with the byte offset of
  the event inside its coarray, computed in MIFOpConversion
- The default initialization of event_type coarrays after
prif_allocate_coarray.
- Add lowering tests for EVENT POST / WAIT.

Nonallocatable coarrays are allocated by PRIF, so their storage is on
the heap. This
patch lowers them like allocatable variables:

- `ConvertTyp`e: the type of a coarray is now a !fir.box<!fir.heap<...>,
corank:N> so every descriptor for coarrays carries
CFI_attribute_allocatable.

    [12 lines not shown]
DeltaFile
+334-69flang/lib/Optimizer/Transforms/MIFOpConversion.cpp
+138-0flang/test/Fir/MIF/events.mlir
+132-0flang/test/Fir/MIF/events2.mlir
+99-0flang/test/Lower/MIF/coarray-character-assign.f90
+96-0flang/lib/Lower/MultiImageFortran.cpp
+77-0flang/test/Lower/MIF/coarray_namelist.f90
+876-6928 files not shown
+1,268-16634 files

OPNSense/core 20c7e2b — src/etc/inc/plugins.inc.d unbound.inc, src/opnsense/mvc/app/controllers/OPNsense/Unbound/forms general.xml

unbound: add daemon supervisor support
DeltaFile
+9-0src/opnsense/service/templates/OPNsense/Unbound/core/rc.conf.d
+6-0src/opnsense/mvc/app/controllers/OPNsense/Unbound/forms/general.xml
+1-1src/opnsense/scripts/unbound/start.sh
+2-0src/etc/inc/plugins.inc.d/unbound.inc
+1-0src/opnsense/service/templates/OPNsense/Unbound/core/+TARGETS
+1-0src/opnsense/mvc/app/models/OPNsense/Unbound/Unbound.xml
+20-11 files not shown
+21-17 files

FreeNAS/freenas 3cd3bf1 — src/middlewared/middlewared/apps webshell_app.py, src/middlewared/middlewared/pytest/unit/apps test_webshell_home_and_cwd.py

Only use the user's home directory for host web shells

## Problem
Container, app and VM web shells opened by a non-root user got that user's host home directory as HOME, and the shell child started in it. Inside containers this pointed $HOME and ~ at a host path, so the image's root dotfiles were not used.

## Solution
Pass the shell type to the worker thread and use it for both the command and the environment. Host shells keep the user's home as HOME; container, app and VM shells get /root. The shell child always starts in /root, since login changes into HOME itself for host shells.
DeltaFile
+39-8tests/api2/test_container.py
+22-15src/middlewared/middlewared/apps/webshell_app.py
+19-0src/middlewared/middlewared/pytest/unit/apps/test_webshell_home_and_cwd.py
+80-233 files

FreeNAS/freenas cab0ed6 — src/middlewared/middlewared/alembic/versions/28.0 2026-10-26_12-00_container_default_nic.py, src/middlewared/middlewared/api/v28_0_0 container.py

NAS-144247 / 28.0.0-BETA.1 / Manage container NICs explicitly instead of adding one on the fly (#20059)

## Problem
A container without a NIC device row got an implicit bridge NIC with no
MAC added on the fly at every start, so libvirt generated a new MAC each
time and the container came up with a different DHCP address after every
restart. Containers migrated from incus are usually in this state
because their eth0 came from the incus profile. Beyond the MAC churn,
silently attaching a NIC the user never configured isn't always what
users want.

## Solution
Container networking is now managed explicitly through NIC devices.

- **No implicit NIC**: a container only has network through its NIC
devices, and one without any gets a private namespace with only
loopback. This relies on truenas/truenas_pylibvirt#97 emitting
`<privnet/>` for such containers, so that has to land first.
`default_network` is dropped from the v28 container entry since it no

    [15 lines not shown]
DeltaFile
+59-0src/middlewared/middlewared/alembic/versions/28.0/2026-10-26_12-00_container_default_nic.py
+14-28src/middlewared/middlewared/plugins/container/lifecycle.py
+27-5src/middlewared/middlewared/plugins/container/migrate.py
+17-1src/middlewared/middlewared/plugins/container/factory.py
+6-4tests/api2/test_container.py
+0-9src/middlewared/middlewared/api/v28_0_0/container.py
+123-476 files not shown
+139-6612 files

LLVM/project 7f3cde2 — clang/include/clang/StaticAnalyzer/Core/PathSensitive CheckerContext.h, clang/lib/StaticAnalyzer/Checkers StreamChecker.cpp CStringChecker.cpp

[NFC][analyzer] Replace generateErrorNode with addSink (#235749)

This change replaces use of `CheckerContext::generateErrorNode` with
`getSink`, then deletes `generateErrorNode`. Textually replacing
`generateErrorNode` with `addSink` will correctly update _most_
downstream checkers; but calls of the form `C.generateErrorNode(State,
Tag)` (if there are any – there wasn't any in upstream) would need to be
updated to `C.addSink(State, C.getPredecessor(), Tag)`.

This change was motivated by the fact that `addSink` and
`generateErrorNode` did the same thing, so their separate existence
caused lots of confusion (e.g. it implied that an "error node" is
somehow different from a regular node, which was completely false).

`generateErrorNode` was the more widespread among them (roughly 80 vs 40
call sites in checkers), but its name isn't suitable for the dozens of
cases where the sink is not used for an "error" (bug report), so I
decided to keep `addSink` as the only sink-making method.


    [3 lines not shown]
DeltaFile
+0-18clang/include/clang/StaticAnalyzer/Core/PathSensitive/CheckerContext.h
+9-9clang/lib/StaticAnalyzer/Checkers/CallAndMessageChecker.cpp
+8-8clang/lib/StaticAnalyzer/Checkers/MallocChecker.cpp
+5-5clang/lib/StaticAnalyzer/Checkers/UnixAPIChecker.cpp
+4-4clang/lib/StaticAnalyzer/Checkers/StreamChecker.cpp
+4-4clang/lib/StaticAnalyzer/Checkers/CStringChecker.cpp
+30-4845 files not shown
+89-11151 files

LLVM/project 10bc977 — clang/lib/CodeGen CodeGenModule.h CGVTables.cpp, clang/test/CodeGen call-graph-section-covariant-return.cpp

[clang][CodeGen] Use the primary base chain for virtual method IDs

Identify a virtual method in the call graph section after the method it
overrides along the primary base chain of its class, as given by the record
layout. That is the vtable entry the method is placed in, which is not always
the first method it overrides.

Assisted-by: Jetski
DeltaFile
+157-24clang/test/CodeGen/call-graph-section-covariant-return.cpp
+50-18clang/lib/CodeGen/CodeGenModule.cpp
+6-6clang/lib/CodeGen/CGVTables.cpp
+5-4clang/lib/CodeGen/CodeGenModule.h
+218-524 files

FreeBSD/ports eaca17d — games/scummvm Makefile distinfo

games/scummvm: Update to 2026.4.0

Changelog:

https://downloads.scummvm.org/frs/scummvm/2026.4.0/ReleaseNotes.html
DeltaFile
+3-3games/scummvm/distinfo
+6-0games/scummvm/pkg-plist
+1-1games/scummvm/Makefile
+10-43 files

OpenBSD/ports nK2GE8S — net/snowflake_proxy Makefile modules.inc

   net/snowflake_proxy: update to 2.15.2
VersionDeltaFile
1.17+326-312net/snowflake_proxy/distinfo
1.15+108-102net/snowflake_proxy/modules.inc
1.23+1-1net/snowflake_proxy/Makefile
+435-4153 files