FreeBSD/ports be4a589 — security/osv-scanner Makefile distinfo

security/osv-scanner: Update to 2.7.0

ChangeLog:
https://github.com/google/osv-scanner/releases/tag/v2.7.0
DeltaFile
+5-5security/osv-scanner/distinfo
+2-2security/osv-scanner/Makefile
+7-72 files

NetBSD/pkgsrc 16iJTWL — doc CHANGES-2026

   doc: note addition of mail/dkim-rotate* (by riastradh@)
VersionDeltaFile
1.7058+4-1doc/CHANGES-2026
+4-11 files

NetBSD/pkgsrc JRAMbcY — sysutils/xenkernel418 distinfo, sysutils/xenkernel420 distinfo

   Pullup ticket #7272 - requested by bouyer
   sysutils/xenkernel418: Security fix
   sysutils/xenkernel420: Security fix
   sysutils/xentools418: Security fix
   sysutils/xentools420: Security fix

   Revisions pulled up:
   - sysutils/xenkernel418/distinfo                                1.15
   - sysutils/xenkernel420/distinfo                                1.9
   - sysutils/xentools418/Makefile                                 1.18
   - sysutils/xentools418/distinfo                                 1.15
   - sysutils/xentools418/version.mk                               1.12
   - sysutils/xentools420/Makefile                                 1.14
   - sysutils/xentools420/distinfo                                 1.9
   - sysutils/xentools420/version.mk                               1.8

   ---
      Module Name:      pkgsrc
      Committed By:     bouyer

    [27 lines not shown]
VersionDeltaFile
1.7.2.1+4-4sysutils/xentools420/version.mk
1.11.2.1+4-4sysutils/xentools418/version.mk
1.14.2.1+4-4sysutils/xentools418/distinfo
1.8.2.1+4-4sysutils/xenkernel420/distinfo
1.14.2.1+4-4sysutils/xenkernel418/distinfo
1.8.2.1+3-3sysutils/xentools420/distinfo
+23-236 files

FreeBSD/src 7668705 — sys/netinet/tcp_stacks rack.c

tcp/rack: reject wma_divisor values <= 0

The net.inet.tcp.rack.measure.wma_divisor sysctl is the divisor
of the goodput weighted moving average used when the dynamic
goodput multiplier is enabled.  Setting it to 0 panics the kernel.

Make the variable and the sysctl unsigned, reject 0 and values
above INT32_MAX.

MFC after:      1 month
Found with:     Claude Code Opus 5.5
Reviewed by:    tuexen, glebius, markj (early version)
Differential Revision:  https://reviews.freebsd.org/D60759
DeltaFile
+21-5sys/netinet/tcp_stacks/rack.c
+21-51 files

LLVM/project 35f840b — llvm/lib/Transforms/Vectorize SLPVectorizer.cpp, llvm/lib/Transforms/Vectorize/SLPVectorizer SLPUtils.cpp SLPCompatibilityAnalysis.h

[𝘀𝗽𝗿] initial version

Created using spr 1.3.7
DeltaFile
+74-28llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPCompatibilityAnalysis.cpp
+57-13llvm/lib/Transforms/Vectorize/SLPVectorizer.cpp
+21-43llvm/test/Transforms/SLPVectorizer/X86/interchangeable-cmp-predicates.ll
+20-11llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPCompatibilityAnalysis.h
+12-8llvm/test/Transforms/SLPVectorizer/revec.ll
+2-1llvm/lib/Transforms/Vectorize/SLPVectorizer/SLPUtils.cpp
+186-1046 files

FreeBSD/ports 3db6975 — databases/lmdb0 Makefile distinfo

databases/lmdb0: update to 0.9.36

This is a bugfix release.

Notable changes since 0.9.35:
 - ITS#7772 - limit sub-page growth when re-adding existing data
 - ITS#8335 - more input validation for put(MDB_MULTIPLE)
 - ITS#9388 - fix mdb_stat page counts for dupsort DBs
 - ITS#10054 - fix write of 2GB values
 - ITS#10522 - reject 0-length values in DUPSORT DBs
DeltaFile
+3-3databases/lmdb0/distinfo
+1-1databases/lmdb0/Makefile
+4-42 files

LLVM/project 27e262a — llvm/test/Transforms/SLPVectorizer revec.ll, llvm/test/Transforms/SLPVectorizer/X86 interchangeable-cmp-predicates.ll

[SLP][NFC]Add a test for trunc i1 to icmp, NFC



Reviewers: 

Pull Request: https://github.com/llvm/llvm-project/pull/233122
DeltaFile
+254-0llvm/test/Transforms/SLPVectorizer/X86/interchangeable-cmp-predicates.ll
+69-0llvm/test/Transforms/SLPVectorizer/revec.ll
+323-02 files

LLVM/project c4fe77e — llvm/lib/DWARFLinker/Classic DWARFLinker.cpp, llvm/lib/DWARFLinker/Parallel DWARFLinkerCompileUnit.cpp DIEAttributeCloner.cpp

[DWARFLinker] Emit DW_AT_addr_base for units that had none (#219357)

Fix DWARFv5 units that reach the linker without DW_AT_addr_base, as GCC
emits them at -O2. Both linkers rewrite range and location lists into
base_addressx entries, which resolve through DW_AT_addr_base, but they
only ever patch an attribute copied from the input. With nothing to
patch, the classic linker hits the llvm_unreachable in patchAddrBase(),
and the parallel linker writes indices with no base, so the unit's
ranges resolve from address 0.

Add DW_AT_addr_base to every DWARFv5 unit root that lacks one, whatever
its tag, and emit the unit's .debug_addr contribution even when no
address was pooled, so the attribute always points at a table. Update
mode does not rewrite ranges, so nothing is added there.

The tests link a compile unit root and a partial unit root with both
linkers and check the attribute, the address table, the range list and
--verify. The compile unit test also checks that update mode adds no
attribute, and a third test links a unit that pools no address.

    [3 lines not shown]
DeltaFile
+116-0llvm/test/tools/llvm-dwarfutil/ELF/X86/dwarf5-no-addr-base.test
+105-0llvm/test/tools/llvm-dwarfutil/ELF/X86/dwarf5-no-addr-base-partial-unit.test
+74-0llvm/test/tools/llvm-dwarfutil/ELF/X86/dwarf5-no-addr-base-empty.test
+20-0llvm/lib/DWARFLinker/Parallel/DIEAttributeCloner.cpp
+14-2llvm/lib/DWARFLinker/Classic/DWARFLinker.cpp
+2-3llvm/lib/DWARFLinker/Parallel/DWARFLinkerCompileUnit.cpp
+331-51 files not shown
+334-57 files

OpenBSD/src PfkxC6z — sys/dev/usb uhidev.c

   Handle empty USB HID responses that could otherwise lead to out of bounds
   memcpy().

   Report and diff from Acts1631.

   ok deraadt@
VersionDeltaFile
1.114+10-3sys/dev/usb/uhidev.c
+10-31 files

LLVM/project e90fde1 — llvm/lib/CodeGen/SelectionDAG DAGCombiner.cpp, llvm/test/CodeGen/AArch64 fpclamptosat.ll

[DAGCombiner] Fold umin(fp_to_uint(x), 0) to 0 (#232231)

`PerformUMinFpToSatCombine` turns `umin(fp_to_uint(x), (2^n)-1)` into
`fp_to_uint_sat`.

When the clamp width is 0 (2^0-1), `n` is also 0, and `getIntegerVT(0)`
then asserts in `IntegerType::get`, which requires a width of at least
1.

Since an unsigned value is never below 0, the `umin`'s result will
always be 0 as well.
DeltaFile
+16-1llvm/test/CodeGen/ARM/fpclamptosat.ll
+17-0llvm/test/CodeGen/RISCV/fpclamptosat.ll
+13-0llvm/test/CodeGen/WebAssembly/fpclamptosat.ll
+12-0llvm/test/CodeGen/X86/fpclamptosat.ll
+12-0llvm/test/CodeGen/AArch64/fpclamptosat.ll
+5-0llvm/lib/CodeGen/SelectionDAG/DAGCombiner.cpp
+75-16 files

LLVM/project edd70e7 — cross-project-tests/intrinsic-header-tests riscv_packed_simd.c

fixup! update cross-project test
DeltaFile
+6-6cross-project-tests/intrinsic-header-tests/riscv_packed_simd.c
+6-61 files

LLVM/project 0b50885 — llvm/lib/Target/RISCV RISCVISelLowering.cpp, llvm/test/CodeGen/RISCV rvp-simd-32.ll

[RISCV][P-ext] Use concat_vectors with 0 in widenPackedVectorWithZeros.

This will be legalized and combined to a vector_shuffle. That
shuffle can then be matched to a pack with x0 after #232892.

This changes the zext.w to a pack, but that's not obviously worse.
If we need to canonicalize we can add a DAG combine later.
DeltaFile
+8-8llvm/test/CodeGen/RISCV/rvp-simd-32.ll
+4-5llvm/lib/Target/RISCV/RISCVISelLowering.cpp
+12-132 files

LLVM/project 557fb42 — llvm/lib/Target/RISCV RISCVISelLowering.cpp, llvm/test/CodeGen/RISCV rvp-insert-subvector.ll

[RISCV][P-ext] Remove custom lowering of insert_subvector for v2i16/v4i8 on RV64.

This was for handling inserting into a zero vector. After #232892
we let the insert_subvector legalize to a shuffle_vector which we
can then lower as pack.

This changes the codegen from zext.w to pack, but that's not
necessarily worse. If it turns out to be a problem we can
canonicalize pack with zero with a DAGCombine or isel patterns in
the future.
DeltaFile
+3-11llvm/lib/Target/RISCV/RISCVISelLowering.cpp
+2-2llvm/test/CodeGen/RISCV/rvp-insert-subvector.ll
+5-132 files

LLVM/project 26e8f25 — llvm/lib/Target/RISCV RISCVISelLowering.cpp

[RISCV][P-ext] Create zero vector rather than bitcasting from i32 0 in lowerINSERT_SUBVECTOR. (#232852)

Teach LowerBUILD_VECTOR to create SPLAT_VECTOR when all operands are the
same to prevent regression.
DeltaFile
+5-1llvm/lib/Target/RISCV/RISCVISelLowering.cpp
+5-11 files

LLVM/project 05d5e1f — llvm/lib/Target/RISCV RISCVISelLowering.cpp, llvm/test/CodeGen/RISCV rvp-simd-32.ll rvp-simd-64.ll

[RISCV][P-ext] Call tryWidenMaskForShuffle at the end of P extension shuffle lowering. (#232892)

If the shuffle mask has contiguous elements we can try shuffling them
using a large element type.
DeltaFile
+24-48llvm/test/CodeGen/RISCV/rvp-simd-64.ll
+0-8llvm/test/CodeGen/RISCV/rvp-simd-32.ll
+4-1llvm/lib/Target/RISCV/RISCVISelLowering.cpp
+28-573 files

LLVM/project dc057e3 — flang/unittests/Frontend CompilerInstanceTest.cpp FrontendActionTest.cpp, flang/unittests/Semantics OpenMPUtils.cpp

[flang,unittest] Initialize targets before creating a CompilerInstance. NFC (#233117)

Initialize targets first to register library options before creating a
CompilerInstance.
DeltaFile
+9-4flang/unittests/Semantics/OpenMPUtils.cpp
+9-4flang/unittests/Frontend/FrontendActionTest.cpp
+3-3flang/unittests/Frontend/CompilerInstanceTest.cpp
+21-113 files

LLVM/project ce640be — flang/lib/Semantics canonicalize-omp.cpp

[flang][OpenMP] Simplify some code with parser::Unwrap, NFC (#233113)
DeltaFile
+8-30flang/lib/Semantics/canonicalize-omp.cpp
+8-301 files

OpenZFS/src 7c3d85a — module/zfs zil.c, tests/zfs-tests/tests/functional/slog slog.kshlib slog_replay_fs_split_truncate.ksh

ZIL replay can apply part of a split WR_NEED_COPY write

After a crash while an fsync() is still writing the log, ZIL replay can
apply the first part of a write without the rest, leaving the write
torn at an arbitrary 8-byte-aligned offset.  This exposes a state that
no reader could have observed before the crash: new data up to the
tear, old data after it.  While POSIX doesn't specify anything before
fsync() completes, ZFS intends to preserve the atomicity of writes as
much as possible: writes within a single block are intended to be
atomic, with larger writes torn only on recordsize boundaries.

The problem occurs with WR_NEED_COPY TX_WRITE records.  When such a
record does not fit in the current log block, zil_lwb_assign() splits
it into several TX_WRITE records in consecutive log blocks.  If the
system crashes after the first of those blocks is on disk but before
all of them are, zil_parse() stops at the missing block, but replay
has already applied the pieces before it.  Files are affected for
async writes that a later fsync() commits, and for writes of any size
with a slog.  Zvols are affected too, where a tear inside a sector

    [75 lines not shown]
DeltaFile
+276-6module/zfs/zil.c
+159-0tests/zfs-tests/tests/functional/slog/slog_replay_volume_split_boundary.ksh
+134-0tests/zfs-tests/tests/functional/slog/slog_replay_volume_split_write.ksh
+130-0tests/zfs-tests/tests/functional/slog/slog_replay_fs_split_write.ksh
+89-0tests/zfs-tests/tests/functional/slog/slog_replay_fs_split_truncate.ksh
+30-0tests/zfs-tests/tests/functional/slog/slog.kshlib
+818-69 files not shown
+876-1815 files

NetBSD/pkgsrc AxzTcaU — doc CHANGES-2026

   doc: Updated textproc/rumdl to 0.3.0
VersionDeltaFile
1.7057+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc szZMVrq — textproc/rumdl cargo-depends.mk Makefile

   rumdl: update to 0.3.0.

   Changed

       2.4–4.7× faster rumdl fmt than 0.2.79 on frozen documentation
       snapshots: Cargo (99 files) 4.7×, MkDocs Material (85 files) 2.6×, and
       Ruff (16 files) 2.4×. Reusing parsed Markdown and shared source analysis
       reduces repeated work. Speedups compare median elapsed times from 31 paired
       runs after five warmups on Apple M6: ordinary Rust 1.96.0 release builds,
       default threads, warm filesystem cache, and --no-config --no-cache --silent
       (--flavor=standard for Cargo/Ruff, --flavor=mkdocs for MkDocs Material).
       Output includes the correctness fixes listed below and can differ from 0.2.79.
       Code block tools are supported and remain opt-in. Missing tags, missing
       active-mode tools and invocations with no tools checked are ignored by default.
       An omitted unknown-tag policy inherits on-missing-language-definition,
       preserving existing strict configurations. Valid internal cached checks count
       as checked; applicable external tools rerun to reflect changes in their own
       configuration and environment.
       on-missing-language-definition = "warn" now reports uncovered languages;

    [134 lines not shown]
VersionDeltaFile
1.59+7-10textproc/rumdl/distinfo
1.61+2-2textproc/rumdl/Makefile
1.26+1-2textproc/rumdl/cargo-depends.mk
+10-143 files

FreeBSD/src 7ccf9ae — . Makefile.inc1

Makefile.inc1: Adjust mkimg bootstrap versions

Stream-optimized VMDK support was merged to stable/15 with
__FreeBSD_version 1501504.

Sponsored by:   Amazon
DeltaFile
+3-2Makefile.inc1
+3-21 files

HardenedBSD/src 7ccf9ae — . Makefile.inc1

Makefile.inc1: Adjust mkimg bootstrap versions

Stream-optimized VMDK support was merged to stable/15 with
__FreeBSD_version 1501504.

Sponsored by:   Amazon
DeltaFile
+3-2Makefile.inc1
+3-21 files

FreeBSD/ports e25f9f1 — games/cdogs-sdl distinfo Makefile

games/cdogs-sdl: Update to 2.5.0

- Unbundle enet and use system lib net/enet

ChangeLog:      https://github.com/cxong/cdogs-sdl/releases/tag/2.5.0
MFH:            2026Q4
(cherry picked from commit de51a9fa5915050a46c4169f1e0c8ec1a230b23a)
DeltaFile
+26-3games/cdogs-sdl/pkg-plist
+5-2games/cdogs-sdl/Makefile
+3-3games/cdogs-sdl/distinfo
+34-83 files

FreeBSD/ports 1000a5c — math/octave-forge-drafting Makefile distinfo

math/octave-forge-drafting: Update to 0.2.3.
DeltaFile
+3-3math/octave-forge-drafting/distinfo
+1-1math/octave-forge-drafting/Makefile
+4-42 files

HardenedBSD/ports 1000a5c — math/octave-forge-drafting Makefile distinfo

math/octave-forge-drafting: Update to 0.2.3.
DeltaFile
+3-3math/octave-forge-drafting/distinfo
+1-1math/octave-forge-drafting/Makefile
+4-42 files

OpenZFS/src b1f55c3 — module/zfs vdev_mirror.c

vdev_mirror: scrub every copy of a gang block in a sorted scrub

A sorted scrub queues one read per DVA of a block, and each of these
reads carries all of the block's DVAs so that a damaged copy can be
repaired.  vdev_mirror_map_init() therefore reads only the first DVA
of a scrub read while a sorted scrub runs, since the other DVAs are
checked by their own queued reads, and reads them all only on retry.

Gang blocks are not queued: dsl_scan_enqueue() issues them at once and
whole, and their gang headers and gang members are read by gang
children of that one read.  These inherit ZIO_FLAG_SCRUB and so take
the same shortcut, but nothing else ever reads their other DVAs.  A
damaged copy of a gang header or gang member, other than the first, is
neither detected nor repaired by a scrub, unless the first copy is
damaged too and the retry reads them all.  With the default
redundant_metadata=all every gang header has at least two copies, and
gang members have as many as the copies property asks for.  A legacy
scrub (zfs_scan_legacy=1) reads and repairs every copy.


    [11 lines not shown]
DeltaFile
+7-0module/zfs/vdev_mirror.c
+7-01 files

OpenZFS/src 8840d9e — tests/runfiles common.run, tests/zfs-tests/tests Makefile.am

ZTS: test that a scrub repairs every copy of a gang block

With the default redundant_metadata=all, a gang header gets one more
copy than the block it describes, up to three, and each gang child
gets as many as the block.  A scrub with the default sorted scan reads
only the first copy of each, so the other copies of a gang header or
of a gang child can be damaged without the scrub detecting or
repairing it.  A legacy scrub (zfs_scan_legacy=1) reads and repairs
them.

Add a test that forces 128K blocks to gang on a file vdev, overwrites
the second copy of a gang header (copies=1) and of a gang child
(copies=2), scrubs, and checks that both copies were restored.

This fails now: the scrub repairs neither copy.

Reviewed-by: Brian Behlendorf <behlendorf1 at llnl.gov>
Signed-off-by: Tigerblue77 <37409593+tigerblue77 at users.noreply.github.com>
Closes #19399
DeltaFile
+129-0tests/zfs-tests/tests/functional/gang_blocks/gang_blocks_scrub_copies.ksh
+1-0tests/zfs-tests/tests/Makefile.am
+1-0tests/runfiles/common.run
+131-03 files

HardenedBSD/src aa59f16 — . Makefile.inc1, sys/sys param.h

__FreeBSD_version: Bump for mkimg -f vmdks

Also, adjust bootstrap tools code in Makefile.inc1 to reflect this; in
addition to rebuilding mkimg if it is out of date, we now need to build
libz, which was not previously needed by mkimg.

Reviewed by:    kevans
MFC after:      2 weeks
Sponsored by:   Amazon
Differential Revision:  https://reviews.freebsd.org/D60153
X-Cherry-Pick:  Logic in Makefile.inc1 was adjusted for new __FreeBSD_version

(cherry picked from commit a68ba2d2ce55f7c76174239c1f678379caec5348)
DeltaFile
+5-3Makefile.inc1
+1-1sys/sys/param.h
+6-42 files

FreeBSD/src 3720eae — release Makefile.ec2

EC2: Pass --vmdk to bsdec2-image-upload if needed

Starting with version 1.5.0, bsdec2-image-upload supports uploading
stream-optimized VMDK files.  If we build images in that format, we
need to upload them appropriately.

MFC after:      2 weeks
Sponsored by:   Amazon

(cherry picked from commit 65840afc88553f89c051b96b081061a532cb7df3)
DeltaFile
+4-1release/Makefile.ec2
+4-11 files

HardenedBSD/src bce513d — usr.bin/mkimg/tests img-63x255-4096-mbr.vmdks.hex img-63x255-4096-ebr.vmdks.hex

mkimg: Add tests for vmdks format

This is the 'stream-optimized' version of the VMDK format.

MFC after:      2 weeks
Sponsored by:   Amazon
Differential Revision:  https://reviews.freebsd.org/D60154

(cherry picked from commit 65b872380ed7f7900fc581d482c5586eeca9e184)
DeltaFile
+617-0usr.bin/mkimg/tests/img-1x1-512-gpt.vmdks.hex
+617-0usr.bin/mkimg/tests/img-1x1-4096-gpt.vmdks.hex
+617-0usr.bin/mkimg/tests/img-63x255-512-gpt.vmdks.hex
+617-0usr.bin/mkimg/tests/img-63x255-4096-gpt.vmdks.hex
+596-0usr.bin/mkimg/tests/img-63x255-4096-mbr.vmdks.hex
+596-0usr.bin/mkimg/tests/img-63x255-4096-ebr.vmdks.hex
+3,660-015 files not shown
+11,963-121 files