FreeNAS/freenas 368cea6src/middlewared/middlewared/plugins auth.py, src/middlewared/middlewared/utils/account authenticator.py utmp.py

Remove python-pam and plumb in pam_truenas

This commit removes the python-pam Python library dependency from
TrueNAS middleware and replaces it with truenas_pypam. The most
significant change is the migration of API key authentication from
simple PBKDF2 password hashing to SCRAM-SHA512 (Salted Challenge
Response Authentication Mechanism) as defined in RFC5802. SCRAM is an
authentication protocol that uses PBKDF2-HMAC-SHA512 for key
derivation. API keys are now stored with SCRAM-derived credentials
including salt, stored_key, server_key, and iteration count fields in
the database. A database migration automatically converts existing
PBKDF2-hashed API keys to SCRAM format transparently—existing API keys
will continue to work without requiring regeneration. The commit adds a
new SCRAM authentication mechanism for challenge-response authentication
with replay resistance and mutual validation capabilities, while
maintaining the existing API_KEY_PLAIN mechanism for simple
authentication.

The refactoring includes comprehensive changes to the authentication

    [10 lines not shown]
DeltaFile
+375-508src/middlewared/middlewared/utils/account/authenticator.py
+231-231tests/unit/test_utmp.py
+0-397src/middlewared/middlewared/utils/account/utmp.py
+0-358tests/unit/test_pam_tdb.py
+193-123src/middlewared/middlewared/plugins/auth.py
+47-115src/middlewared/middlewared/utils/account/faillock.py
+846-1,73232 files not shown
+1,512-2,18438 files

FreeBSD/ports b461122www/tomcat-devel distinfo Makefile

www/tomcat-devel: Update 11.0.15 => 11.0.18

Changelog:
https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.18_(markt)

MFH:    2026Q1
(cherry picked from commit a61ac34ceff85f8d8f9c9797934680a1590fb4fb)
DeltaFile
+3-3www/tomcat-devel/distinfo
+1-1www/tomcat-devel/Makefile
+1-1www/tomcat-devel/pkg-plist
+5-53 files

FreeBSD/ports ca0b2fdwww/tomcat110 distinfo pkg-plist

www/tomcat110: Update 11.0.15 => 11.0.18

Changelog:
https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.18_(markt)

MFH:    2026Q1
(cherry picked from commit ddce2457fd3b1b87191546e29b7832b256a262ee)
DeltaFile
+3-3www/tomcat110/distinfo
+1-1www/tomcat110/pkg-plist
+1-1www/tomcat110/Makefile
+5-53 files

FreeBSD/ports e66bef8www/tomcat101 distinfo Makefile

www/tomcat101: Update 10.1.50 => 10.1.52

Changelog:
https://tomcat.apache.org/tomcat-10.1-doc/changelog.html#Tomcat_10.1.52_(schultz)

MFH:    2026Q1
(cherry picked from commit 184d4ed0f3d66c6697ae151df74e0925a8c0a0fd)
DeltaFile
+3-3www/tomcat101/distinfo
+1-1www/tomcat101/Makefile
+4-42 files

LLVM/project 7c3a211clang/lib/AST ExprConstant.cpp, clang/lib/AST/ByteCode InterpFrame.cpp

[clang][ExprConst] Fix rendering of explicit this parameters (#177551)

in compile-time backtraces.

The two test cases used to be rendered as `foo(s, 0)` and `foo2(s)`.
DeltaFile
+30-0clang/test/SemaCXX/cxx2b-deducing-this.cpp
+11-15clang/lib/AST/ExprConstant.cpp
+12-8clang/lib/AST/ByteCode/InterpFrame.cpp
+53-233 files

FreeBSD/ports a61ac34www/tomcat-devel distinfo Makefile

www/tomcat-devel: Update 11.0.15 => 11.0.18

Changelog:
https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.18_(markt)

MFH:    2026Q1
DeltaFile
+3-3www/tomcat-devel/distinfo
+1-1www/tomcat-devel/Makefile
+1-1www/tomcat-devel/pkg-plist
+5-53 files

FreeBSD/ports ddce245www/tomcat110 distinfo Makefile

www/tomcat110: Update 11.0.15 => 11.0.18

Changelog:
https://tomcat.apache.org/tomcat-11.0-doc/changelog.html#Tomcat_11.0.18_(markt)

MFH:    2026Q1
DeltaFile
+3-3www/tomcat110/distinfo
+1-1www/tomcat110/Makefile
+1-1www/tomcat110/pkg-plist
+5-53 files

FreeBSD/ports 184d4edwww/tomcat101 distinfo Makefile

www/tomcat101: Update 10.1.50 => 10.1.52

Changelog:
https://tomcat.apache.org/tomcat-10.1-doc/changelog.html#Tomcat_10.1.52_(schultz)

MFH:    2026Q1
DeltaFile
+3-3www/tomcat101/distinfo
+1-1www/tomcat101/Makefile
+4-42 files

LLVM/project 16d8d4bllvm/lib/Target/WebAssembly WebAssemblyISelLowering.cpp, llvm/test/CodeGen/WebAssembly simd-shuffle-widen.ll

[WebAssembly] Fix crash in ReplaceNodeResults for ANY_EXTEND_VECTOR_INREG (#178374)

Fixes a crash during type legalization by allowing
ISD::ANY_EXTEND_VECTOR_INREG to fall back to default expansion instead
of hitting llvm_unreachable.

Fixed: #177209
DeltaFile
+50-0llvm/test/CodeGen/WebAssembly/simd-shuffle-widen.ll
+1-0llvm/lib/Target/WebAssembly/WebAssemblyISelLowering.cpp
+51-02 files

LLVM/project 11081ebllvm/lib/Target/X86 X86TargetTransformInfo.cpp, llvm/test/Transforms/SLPVectorizer/X86 pr176906.ll

[CostModel][X86] reduce_add(vXi1) will lower as a scalar ctpop (#178400)

Fixes #176906
DeltaFile
+13-118llvm/test/Transforms/SLPVectorizer/X86/pr176906.ll
+11-0llvm/lib/Target/X86/X86TargetTransformInfo.cpp
+24-1182 files

LLVM/project 4476360flang/test/Lower const-arg-glob.f90

[flang][NFC] Separated test for --enable-constant-argument-globalisation (#178350)

The test for --enable-constant-argument-globalisation was added to
existing lowering test as part of
https://github.com/llvm/llvm-project/commit/de528ffb17ebce96e0bc4dde1749146c41ca1d0d

Decouple this test from the other lowering tests to ease conversion to
HLFIR lowering.

Co-authored-by: Jean Perier <jperier at nvidia.com>

Co-authored-by: Jean Perier <jperier at nvidia.com>
DeltaFile
+13-0flang/test/Lower/const-arg-glob.f90
+13-01 files

FreeBSD/src 0cca627sys/dev/acpica acpi.c

acpi: Use AcpiGbl_FACS even on ACPI_REDUCED_HARDWARE

This has been possible since ACPICA 20240827, and is actually
a requirement to get out of S3 on ACPI_REDUCED_HARDWARE (that said, we
don't implement S3 on arm64 yet).

Relevant ACPICA commit:
https://github.com/acpica/acpica/commit/79cd933e7b370e8d3fb490bf36ca5d111a12f96a.

Reviewed by:    obiwac
MFC after:      2 weeks
MFC to:         stable/15
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D54625
DeltaFile
+0-2sys/dev/acpica/acpi.c
+0-21 files

FreeBSD/src 526c09asys/dev/acpica acpi.c

acpi: Use only AcpiGetSleepTypeData() to determine Sx support

Previously, we would first call AcpiEvaluateObject() to execute \_Sx
before calling AcpiGetSleepTypeData().  This was unnecessary, as
AcpiGetSleepTypeData() performs the same call itself.  While doing so,
the latter function logs any other error than AE_NOT_FOUND (which
indicates that a particular sleep state is not supported), which most
probably is an added benefit of this change.

Reviewed by:    obiwac
MFC after:      2 weeks
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D54624
DeltaFile
+5-5sys/dev/acpica/acpi.c
+5-51 files

FreeBSD/src 149e6c6sys/dev/acpica acpi_spmc.c

acpi_spmc(4): Fix compilation on 32-bit platforms

Fixes:          c5daa5a4c32c ("acpi_spmc: Add system power management controller driver")
Sponsored by:   The FreeBSD Foundation
DeltaFile
+4-1sys/dev/acpica/acpi_spmc.c
+4-11 files

FreeBSD/src a9f7074sys/dev/aic7xxx ahc_pci.c

ahc(4): Fix a warning on i386 compilation

Fixes:          cd036e891a35 ("ahc_pci.c: If bus_dma...")
MFC after:      3 days
Sponsored by:   The FreeBSD Foundation
DeltaFile
+1-1sys/dev/aic7xxx/ahc_pci.c
+1-11 files

NetBSD/pkgsrc dPZMgvUdoc CHANGES-2026

   Removed devel/py-functools32; Updated www/py-django-binary-database-files
VersionDeltaFile
1.710+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc wrp1i9rwww/py-django-binary-database-files distinfo Makefile

   py-django-binary-database-files: updated to 1.0.19

   1.0.19
   Unknown changes
VersionDeltaFile
1.9+4-4www/py-django-binary-database-files/distinfo
1.13+3-4www/py-django-binary-database-files/Makefile
+7-82 files

NetBSD/pkgsrc XJKPJH5doc CHANGES-2026

   doc: Updated devel/garden to 2.5.1
VersionDeltaFile
1.709+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 6WrYdcVdevel/garden distinfo cargo-depends.mk

   devel/garden: update to 2.5.1

   v2.5.1

   Released 2026-01-27
   Fixes:

   Updated the command-line parser to account for a change in behavior in clap v4.5.55.
VersionDeltaFile
1.25+139-145devel/garden/distinfo
1.25+45-47devel/garden/cargo-depends.mk
1.26+4-4devel/garden/Makefile
+188-1963 files

NetBSD/pkgsrc ORPd7xGdevel Makefile, devel/py-functools32 Makefile PLIST

   py-functools32: removed; not needed nor useful anymore
VersionDeltaFile
1.4581+1-2devel/Makefile
1.3+1-1devel/py-functools32/Makefile
1.4+1-1devel/py-functools32/PLIST
1.4+1-1devel/py-functools32/distinfo
1.2+0-0devel/py-functools32/DESCR
+4-55 files

FreeBSD/ports a42ee7ewww Makefile, www/surge Makefile pkg-descr

www/surge: Add high-performance download manager

Surge is a TUI/CLI download manager with parallel downloads,
pause/resume, speed graphs, and browser extension support.
DeltaFile
+19-0www/surge/Makefile
+12-0www/surge/pkg-descr
+5-0www/surge/distinfo
+1-0www/Makefile
+37-04 files

NetBSD/pkgsrc-wip b9786a6recordbox distinfo cargo-depends.mk, recordbox/patches patch-meson.build

recordbox: start package

Probably too Linux-specific.
DeltaFile
+1,296-0recordbox/distinfo
+432-0recordbox/cargo-depends.mk
+34-0recordbox/Makefile
+20-0recordbox/DESCR
+13-0recordbox/patches/patch-meson.build
+6-0recordbox/TODO
+1,801-02 files not shown
+1,804-08 files

LLVM/project 51845a5llvm/lib/Transforms/Vectorize SLPVectorizer.cpp, llvm/test/Transforms/SLPVectorizer/X86 crash-on-out-of-bound-extract.ll

[SLP] Fix crash on extractelement with out-of-bounds index.....Fixes … (#176918)

…The cose modeling logic was attempting to set a bit in APInt for an
out-of-bounds index, causing an assertion failure. This patch ignores
OOB indices as they produce poison- which is already handled.
Fixes #176780  

this is the same test result which produces this bug 

<img width="1600" height="964" alt="image"
src="https://github.com/user-attachments/assets/80593902-9d15-4e18-850b-a558bca8518e"
/>
DeltaFile
+32-0llvm/test/Transforms/SLPVectorizer/X86/crash-on-out-of-bound-extract.ll
+8-1llvm/lib/Transforms/Vectorize/SLPVectorizer.cpp
+40-12 files

NetBSD/pkgsrc-wip 7e0bfc4py-pandoc PLIST Makefile

py-pandoc: update to version 1.16.2

This also updates the known HOMEPAGE for this package.

Tested on macOS/amd64.
DeltaFile
+3-4py-pandoc/PLIST
+3-3py-pandoc/Makefile
+3-3py-pandoc/distinfo
+9-103 files

NetBSD/pkgsrc ItyF0tNdoc CHANGES-2026

   doc: Updated sysutils/yadm to 3.2.2nb1
VersionDeltaFile
1.708+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 9kalWHHsysutils/yadm options.mk Makefile

   yadm: adapt for gpg binary name change

   Bump PKGREVISION.
VersionDeltaFile
1.2+5-5sysutils/yadm/options.mk
1.4+2-1sysutils/yadm/Makefile
+7-62 files

LLVM/project 2b00a7allvm/test/CodeGen/AMDGPU amdgcn.bitcast.1024bit.ll amdgcn.bitcast.512bit.ll, polly/lib/External/isl/include/isl typed_cpp.h cpp.h

Merge branch 'users/chapuni/cov/single/switch' into users/chapuni/cov/single/trunk
DeltaFile
+47,161-55,379llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.1024bit.ll
+52,760-0polly/lib/External/isl/include/isl/typed_cpp.h
+17,188-14,558llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.512bit.ll
+12,842-18,547llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.960bit.ll
+30,864-0polly/lib/External/isl/include/isl/cpp.h
+11,654-16,786llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.896bit.ll
+172,469-105,2703,670 files not shown
+558,802-337,9423,676 files

NetBSD/pkgsrc qf4IM2Sdoc CHANGES-2026

   doc: Updated sysutils/duplicity to 3.0.7nb1
VersionDeltaFile
1.707+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 9144ytpsysutils/duplicity Makefile

   duplicity: adapt for gnupg binary name change

   Bump PKGREVISION.
VersionDeltaFile
1.79+3-3sysutils/duplicity/Makefile
+3-31 files

LLVM/project 3a1b1a7llvm/test/CodeGen/AMDGPU amdgcn.bitcast.1024bit.ll amdgcn.bitcast.512bit.ll, polly/lib/External/isl/include/isl typed_cpp.h cpp.h

Merge branch 'users/chapuni/cov/single/binop-base' into users/chapuni/cov/single/binop
DeltaFile
+47,161-55,379llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.1024bit.ll
+52,760-0polly/lib/External/isl/include/isl/typed_cpp.h
+17,188-14,558llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.512bit.ll
+12,842-18,547llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.960bit.ll
+30,864-0polly/lib/External/isl/include/isl/cpp.h
+11,654-16,786llvm/test/CodeGen/AMDGPU/amdgcn.bitcast.896bit.ll
+172,469-105,2703,669 files not shown
+558,797-337,9403,675 files