OPNSense/tools 877ba55 — config/26.7 base.plist.amd64

config: rebase for 26.7.9
DeltaFile
+1-0config/26.7/base.plist.amd64
+1-01 files

FreeNAS/freenas e1c9a89 — docs/source/api field_markers.rst, src/middlewared/middlewared/api/base model.py

Use `Multiline`
DeltaFile
+0-86src/middlewared/middlewared/pytest/unit/api/base/types/test_single_line_string.py
+81-5src/middlewared/middlewared/pytest/unit/api/base/test_line_breaks.py
+68-11docs/source/api/field_markers.rst
+1-16src/middlewared/middlewared/api/base/types/string.py
+16-1src/middlewared/middlewared/api/base/model.py
+7-9src/middlewared/middlewared/api/v28_0_0/ups.py
+173-12813 files not shown
+202-15219 files

FreeBSD/src 8910f9e — sys/arm/include platformvar.h, sys/dev/usb usb_hub_acpi.c

kobj: Make the containers of pointers to base classes constant

The containers (arrays) will not be modified during runtime.

Reviewed by:    kib, imp
MFC after:      2 weeks
Differential Revision:  https://reviews.freebsd.org/D61297
DeltaFile
+4-4sys/sys/kobj.h
+3-3sys/kern/subr_kobj.c
+1-1sys/dev/usb/usb_hub_acpi.c
+1-1sys/arm/include/platformvar.h
+9-94 files

FreeBSD/ports db3cd51 — java/openjdk25 Makefile

java/openjdk25: set wxneeded on bootstrap jdk

The upstream fix to Bug 296945 set the wxneeded flag for executables;
however, it did not do so for the bootstrap jdk.
This patch fixes that.

PR:             300566
Reported by:    mondo.debater_0q at icloud.com
Reviewed by:    haraldei
Approved by:    haraldei
DeltaFile
+2-1java/openjdk25/Makefile
+2-11 files

FreeNAS/freenas 59e66d6 — src/middlewared/middlewared/pytest/unit/api/base test_secret_default_wrap.py, src/middlewared/middlewared/utils pydantic_.py

NAS-145061 / 28.0.0-BETA.1 / Document a Secret field's default as its value in the API schema (#20114)

`BaseModel` wraps a concrete default on a `Secret[...]` field in a
`Secret` (see `test_secret_default_wrap.py`). Pydantic encodes that
default in the JSON schema as the secret's redacted display: `""` for a
falsy value, `"**********"` otherwise. So the dump documents, for
example, `S3CredentialsModel.skip_region` as `{"type": "boolean",
"default": ""}` and `max_upload_parts` as `{"type": "integer",
"default": "**********"}`.

A default whose type contradicts its schema breaks generated clients.
`json-schema-to-typescript`, which `@truenas/api-client` uses, emits
`boolean & string` for these fields. That type is `never`, so no caller
can write them through the typed client.

`utils.pydantic_.model_json_schema`, the one place the dump, the docs
and `get_json_schema` build schemas from, now uses a
`GenerateJsonSchema` subclass. Its `encode_default` unwraps a `Secret`
default to its value. A default is a constant in the code, not a user's

    [22 lines not shown]
DeltaFile
+18-0src/middlewared/middlewared/pytest/unit/api/base/test_secret_default_wrap.py
+14-1src/middlewared/middlewared/utils/pydantic_.py
+32-12 files

LLVM/project c089977 — llvm/lib/Target/AMDGPU AMDGPUInstructionSelector.cpp, llvm/test/CodeGen/AMDGPU stacksave_stackrestore.ll

[AMDGPU][GISel] Fix stack pointer shift direction in selectStackRestore
DeltaFile
+28-28llvm/test/CodeGen/AMDGPU/stacksave_stackrestore.ll
+8-8llvm/test/CodeGen/AMDGPU/GlobalISel/inst-select-stacksave-stackrestore.mir
+4-4llvm/lib/Target/AMDGPU/AMDGPUInstructionSelector.cpp
+40-403 files

LLVM/project f5ae04b — llvm/include/llvm/CodeGen SelectionDAG.h, llvm/lib/CodeGen/SelectionDAG SelectionDAG.cpp LegalizeTypes.cpp

[DAG] Replace getLibraryOptions helper with getSelectionDAGOptions (#240799)

Reduces compile time impact by avoiding most
DAG.getLibraryOptions().get<SelectionDAGOptions>() lookups
DeltaFile
+16-29llvm/lib/CodeGen/SelectionDAG/DAGCombiner.cpp
+2-5llvm/lib/CodeGen/SelectionDAG/LegalizeTypes.cpp
+3-3llvm/include/llvm/CodeGen/SelectionDAG.h
+2-0llvm/lib/CodeGen/SelectionDAG/SelectionDAG.cpp
+23-374 files

LLVM/project 1d7b0b4 — offload/test/offloading atomic_fp_hints.c

fix formatting
DeltaFile
+2-1offload/test/offloading/atomic_fp_hints.c
+2-11 files

FreeNAS/freenas c07e6f8 — src/freenas/etc/logrotate.d truesearchd, src/middlewared/middlewared/etc_files/syslog-ng syslog-ng.conf.mako

Log TrueSearch to its own file and keep SMB running in its tests

syslog-ng writes the messages of truesearchd and truesearch-indexer to
/var/log/truesearchd.log. The default log files no longer get them.
logrotate rotates the new file. test_475_syslog checks both programs.

The TrueSearch api2 tests created a second share with smb_share. That
asset stops the SMB service when it exits. Middleware then stopped
TrueSearch. The later tests found no daemon. A helper in the test
module now creates and deletes the second share. It does not stop SMB.

truesearch.query requires a path. test_legacy_api no longer calls it
without arguments.
DeltaFile
+13-2tests/api2/test_truesearch.py
+12-0src/freenas/etc/logrotate.d/truesearchd
+10-0tests/api2/test_475_syslog.py
+6-1src/middlewared/middlewared/etc_files/syslog-ng/conf.d/tnfilters.conf.mako
+7-0src/middlewared/middlewared/etc_files/syslog-ng/syslog-ng.conf.mako
+4-0tests/api2/test_legacy_api.py
+52-36 files

FreeNAS/freenas a9f79ad — src/middlewared/middlewared/plugins/network_ global_config.py

Compare the list forms of globalconfig hosts and domains before they become the newline/space separated db strings
DeltaFile
+3-2src/middlewared/middlewared/plugins/network_/global_config.py
+3-21 files

LLVM/project 040e24b — llvm/test/CodeGen/AMDGPU lrint.ll fp_to_uint.ll, llvm/test/CodeGen/AMDGPU/GlobalISel fptosi.bf16.ll

[DAGCombiner][GlobalISel] Fold floor into unsigned FP-to-int conversions (#239233)

Add shared SelectionDAG/GlobalISel combines to eliminate floors before
unsigned FP-to-int conversions.
* IR conversion is equivalent (reusing an existing comment):
https://github.com/llvm/llvm-project/pull/231060#issuecomment-6120567356
* Removing the floor is a refinement for `fptoui` and preserves the
result for `fptoui.sat`.
* Shared floors are allowed, following #231060. This can enable tail
calls but can also introduce spills when the floor is a libcall.
* `InstCombine` could have this pattern as well, but AMDGPU lowering
explicitly creates a floor with two users, so these combines are still
useful.

Updated existing codegen checks for:
* `f32 -> u32`, `f64 -> u32`, and `f16 -> u16`
* 64-bit results, saturation, and vectors
* source modifiers and the normal, true16, and fake16 variants


    [6 lines not shown]
DeltaFile
+292-291llvm/test/CodeGen/AMDGPU/bf16.ll
+129-128llvm/test/CodeGen/AMDGPU/GlobalISel/fptosi.bf16.ll
+7-238llvm/test/CodeGen/RISCV/half-round-conv.ll
+108-108llvm/test/CodeGen/AMDGPU/lround.ll
+105-109llvm/test/CodeGen/AMDGPU/fp_to_uint.ll
+99-99llvm/test/CodeGen/AMDGPU/lrint.ll
+740-97321 files not shown
+1,490-1,92427 files

pkgng/pkgng 1f48d47 — . NEWS, src query.c

query: fix "%R"

Fixes: #2777
DeltaFile
+26-0tests/frontend/query.sh
+1-1src/query.c
+2-0NEWS
+29-13 files

FreeNAS/freenas b5272ed — src/middlewared/middlewared/alembic/versions/28.0 2026-11-10_12-00_scrub_line_breaks.py

Make all string fields single-line by default
DeltaFile
+326-0src/middlewared/middlewared/alembic/versions/28.0/2026-11-10_12-00_scrub_line_breaks.py
+326-01 files

LLVM/project 964ac05 — clang/lib/CodeGen CGStmtOpenMP.cpp, llvm/include/llvm/Frontend/OpenMP OMPConstants.h

implement feedback
DeltaFile
+66-0offload/test/offloading/atomic_fp_hints.c
+16-0llvm/include/llvm/Frontend/OpenMP/OMPConstants.h
+2-8clang/lib/CodeGen/CGStmtOpenMP.cpp
+84-83 files

NetBSD/pkgsrc 08WEfRP — doc CHANGES-2026

   Updated www/py-aioquic, databases/py-alembic
VersionDeltaFile
1.7903+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc aJjbQhX — databases/py-alembic Makefile distinfo

   py-alembic: updated to 1.20.1

   1.20.1

   bug

   [bug] [autogenerate]
   Fixed issue where a table or column comment set to an empty string would cause autogenerate to detect a comment change on every run. As most backends, including PostgreSQL, MySQL, MariaDB and Oracle, don’t store an empty string comment distinctly from no comment, autogenerate now treats an empty string comment the same as None when comparing comments. Additionally, an empty string comment is now rendered in op.create_table() and op.add_column() directives, where it was previously omitted. Pull request courtesy vineoy.

   [bug] [autogenerate] [postgresql]
   Fixed rendering of the PostgreSQL DOMAIN type in autogenerated migration scripts. Previously the type was rendered using repr(), which omitted the check, not_null, default, collation, constraint_name, schema and create_type arguments and did not apply a dialect prefix to the underlying data type. The full set of arguments is now rendered and the underlying data type is rendered using the standard type-rendering logic. Pull request courtesy Sebastian Cao.

   [bug] [autogenerate] [postgresql]
   Fixed false-positive “Computed default cannot be modified” warning emitted during autogenerate when comparing PostgreSQL Computed columns whose reflected SQL expression includes type cast specifiers such as ::regconfig or ::text, which PostgreSQL adds to the expression as stored. These cast specifiers are now stripped before comparison so that otherwise equivalent expressions no longer trigger the warning. Pull request courtesy Sebastian Cao.

   [bug] [autogenerate] [postgresql]
   Fixed issue where autogenerate would detect an unchanged PostgreSQL expression-based index as modified when the expression included type casts, such as a cast to a type with a length or precision, a nested cast, or a cast followed by a DESC modifier.

   [bug] [postgresql]

    [13 lines not shown]
VersionDeltaFile
1.42+4-4databases/py-alembic/distinfo
1.54+3-3databases/py-alembic/Makefile
+7-72 files

FreeNAS/freenas 369eccb — src/middlewared/middlewared/alembic/versions/28.0 2026-11-10_11-00_hosts_json.py, src/middlewared/middlewared/plugins/network_ global_config.py

Convert `gc_hosts` to JSON array
DeltaFile
+40-0src/middlewared/middlewared/alembic/versions/28.0/2026-11-10_11-00_hosts_json.py
+1-6src/middlewared/middlewared/plugins/network_/global_config.py
+41-62 files

LLVM/project 3c094c8 — llvm/lib/Target/AMDGPU SIFoldOperands.cpp, llvm/test/CodeGen/AMDGPU select-identical-vector-lanes.ll fold-select-identical.mir

[AMDGPU] Fold S_CSELECT with identical sources in SIFoldOperands (#240525)

tryFoldCndMask already folds a V_CNDMASK whose two sources are the same 
register or the same immediate. Do the same for S_CSELECT_B32 and 
S_CSELECT_B64.

These selects arise when two vectors with matching lanes are built in 
one block and selected between in another, for example tensor 
descriptors built outside a loop. Isel sees only the cross-block vector 
registers, so it selects every lane, and only PeepholeOptimizer reveals 
that some lanes are the same value. Folding the select lets MachineLICM 
hoist the resulting move out of the loop.

Co-Authored-By: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+137-0llvm/test/CodeGen/AMDGPU/fold-select-identical.mir
+53-0llvm/test/CodeGen/AMDGPU/select-identical-vector-lanes.ll
+21-5llvm/lib/Target/AMDGPU/SIFoldOperands.cpp
+211-53 files

NetBSD/pkgsrc wTuKZhI — www/py-aioquic Makefile distinfo

   py-aioquic: updated to 1.7.2

   1.7.2

   * Fix data written to a stream returned by
     :meth:`~aioquic.asyncio.QuicConnectionProtocol.create_stream` being
     truncated when it was a :class:`memoryview` whose items are wider than one
     byte.
   * Improve type annotations: all functions in the library are now annotated.
   * Fix the demo application with Starlette 1.0.
   * Remove the SiDUCK example, as the draft it implemented expired without being
     adopted.
VersionDeltaFile
1.8+4-4www/py-aioquic/distinfo
1.12+2-2www/py-aioquic/Makefile
+6-62 files

FreeNAS/freenas c6a1183 — src/middlewared/middlewared/api/v25_10_0 ssh.py, src/middlewared/middlewared/api/v25_10_1 ssh.py

Use `Multiline`
DeltaFile
+27-17src/middlewared/middlewared/api/v27_0_0/ssh.py
+27-17src/middlewared/middlewared/api/v25_10_5/ssh.py
+27-17src/middlewared/middlewared/api/v25_10_2/ssh.py
+27-17src/middlewared/middlewared/api/v25_10_1/ssh.py
+27-17src/middlewared/middlewared/api/v25_10_0/ssh.py
+27-16src/middlewared/middlewared/api/v28_0_0/ssh.py
+162-101318 files not shown
+1,752-996324 files

FreeNAS/freenas 4792036 — src/middlewared/middlewared/alembic/versions/28.0 2026-11-10_12-00_tnc_allowed_origins.py, src/middlewared/middlewared/api/v28_0_0 tn_connect.py

Allow configured origins to read /api/versions for TrueNAS Connect

nginx answers CORS on /api/versions only when the system is registered
with TrueNAS Connect, and only for the TNC web app (plus `ng serve` on
dev and staging). A TNC client run against an unregistered system (an
ephemeral TNC stack, local development, CI) cannot read the versions, so
@truenas/api-client falls back to v25.10.0 on systems that serve newer
API versions.

* tn_connect gains `allowed_origins`, set with the private
  tn_connect.update_environment. Each must be an origin exactly as a
  browser sends it: https with a lowercase host name, or http to
  localhost or 127.0.0.1, with an optional port and no path. Unlike the
  endpoints it may change while TNC is enabled. update_environment now
  reloads nginx after a write, since the endpoints and the origins both
  reach its CORS maps.
* /api/versions answers CORS, with Vary: Origin, when the system is
  registered or allowed_origins is not empty. Its map lists the allowed
  origins and falls back to the existing $allow_origin. /_download keeps

    [7 lines not shown]
DeltaFile
+109-1src/middlewared/middlewared/pytest/unit/plugins/test_truenas_connect.py
+26-0src/middlewared/middlewared/alembic/versions/28.0/2026-11-10_12-00_tnc_allowed_origins.py
+19-3src/middlewared/middlewared/plugins/truenas_connect/config.py
+19-3src/middlewared/middlewared/etc_files/local/nginx/nginx.conf.mako
+8-0src/middlewared/middlewared/plugins/truenas_connect/utils.py
+7-0src/middlewared/middlewared/api/v28_0_0/tn_connect.py
+188-72 files not shown
+190-78 files

OPNSense/core 25c8736 — src/opnsense/mvc/app/models/OPNsense/Interfaces NetworkInterface.php, src/opnsense/mvc/app/models/OPNsense/Interfaces/FieldTypes NetworkInterfaceField.php

interfaces: fix faulty handling of "dhcp6-ia-pd-len" during assignments save

(cherry picked from commit 5236c13aff37d6e5f8b541de0f24984e0d1c20d9)
(cherry picked from commit 520263875f33f1b30b8c6f1d8d23f620acc0602e)
DeltaFile
+6-4src/opnsense/mvc/app/models/OPNsense/Interfaces/NetworkInterface.php
+1-0src/opnsense/mvc/app/models/OPNsense/Interfaces/FieldTypes/NetworkInterfaceField.php
+7-42 files

OPNSense/core c5c215d — src/opnsense/mvc/app/views/layouts default.volt, src/opnsense/www/css opnsense-bootgrid-layout.css

mvc: bootgrid: add a clear button to the search field (#11139)

(cherry picked from commit afa4c8fac0848dbf8ff2af57cb3f8a032d02b868)
DeltaFile
+24-0src/opnsense/www/css/opnsense-bootgrid-layout.css
+17-0src/opnsense/www/js/opnsense_bootgrid.js
+1-0src/opnsense/mvc/app/views/layouts/default.volt
+42-03 files

FreeNAS/freenas 445a3db —

Empty commit to create PR on github.

You should reset it
DeltaFile
+0-00 files

FreeNAS/freenas dec4ce4 — tests/sharing_protocols/smb test_smb_ha.py

NAS-145192 / 28.0.0-BETA.1 / `pytest.skip` ban follow-up (#20173)
DeltaFile
+3-7tests/sharing_protocols/smb/test_smb_ha.py
+3-71 files

FreeNAS/freenas d4ff391 — src/middlewared/middlewared/pytest/unit/api/base test_secret_default_wrap.py, src/middlewared/middlewared/utils pydantic_.py

NAS-145061 / 28.0.0-BETA.1 / Document a Secret field's default as its value in the API schema (#20114)

`BaseModel` wraps a concrete default on a `Secret[...]` field in a
`Secret` (see `test_secret_default_wrap.py`). Pydantic encodes that
default in the JSON schema as the secret's redacted display: `""` for a
falsy value, `"**********"` otherwise. So the dump documents, for
example, `S3CredentialsModel.skip_region` as `{"type": "boolean",
"default": ""}` and `max_upload_parts` as `{"type": "integer",
"default": "**********"}`.

A default whose type contradicts its schema breaks generated clients.
`json-schema-to-typescript`, which `@truenas/api-client` uses, emits
`boolean & string` for these fields. That type is `never`, so no caller
can write them through the typed client.

## Changes

`utils.pydantic_.model_json_schema`, the one place the dump, the docs
and `get_json_schema` build schemas from, now uses a

    [26 lines not shown]
DeltaFile
+15-1src/middlewared/middlewared/utils/pydantic_.py
+15-0src/middlewared/middlewared/pytest/unit/api/base/test_secret_default_wrap.py
+30-12 files

NetBSD/pkgsrc pzt4Wg9 — doc TODO CHANGES-2026

   Updated security/mit-krb5, archivers/lz4
VersionDeltaFile
1.7902+3-1doc/CHANGES-2026
1.28355+1-2doc/TODO
+4-32 files

NetBSD/pkgsrc EcX9wN7 — archivers/lz4 Makefile distinfo, archivers/lz4/patches patch-lib_Makefile

   lz4: updated to 1.11.1

   1.11.1

   LZ4 v1.11.1 is a point release, whose main purpose is to fix LZ4_resetStreamHC(), an obsolete symbol, on dirty memory. While reset functions are expected to reset valid states, LZ4_resetStreamHC() has been working fine on dirty memory, which made it possible to employ it as an initializer instead. Hence, some (hopefully rare) applications may have developed a dependency on this property. v1.11.0 did not respect this undocumented behavior: on a dirty state, compression at levels >= 10 could result in a write out of bounds. Thus v1.11.1 is released to restore the previous behavior.

   This is mostly of importance for distributions and package managers, as liblz4 may be paired with older binaries that are no longer updated. LZ4_resetStreamHC() was replaced by LZ4_initStreamHC() in v1.9.0 (2019). Applications still employing this symbol are invited to migrate.

   This release also restores the (deprecated) unprefixed lz4frame enums, for applications that still need them. They now generate a deprecation warning: once again, actively maintained applications should move to the prefixed names. Build configurations accidentally broken in v1.11.0 work again: make with BUILD_STATIC=no or BUILD_SHARED=no, and MinGW with clang and lld.
VersionDeltaFile
1.15+9-9archivers/lz4/patches/patch-lib_Makefile
1.29+5-5archivers/lz4/distinfo
1.31+3-3archivers/lz4/Makefile
+17-173 files

FreeNAS/freenas 08e75a9 — src/middlewared/middlewared/plugins/pool_ pool.py, src/middlewared/middlewared/test/integration/assets pool.py

Properly calculate new spare partition size
DeltaFile
+69-2tests/api2/test_pool_spare.py
+23-12src/middlewared/middlewared/test/integration/assets/pool.py
+29-0src/middlewared/middlewared/plugins/pool_/pool.py
+8-1src/middlewared/middlewared/test/integration/utils/pool.py
+2-2tests/api2/test_alert.py
+131-175 files

OPNSense/src 1633399 — sys/dev/ice ice_lib.c

Revert "ice(4): Fix link speed after changing cable type"

This reverts commit 27ffeba0e6b5b8d8ebb8eec9d2566f56421ee946.

PR: https://forum.opnsense.org/index.php?topic=52405.msg276938#msg276938
DeltaFile
+7-11sys/dev/ice/ice_lib.c
+7-111 files