OPNSense/ports aeaec0cwww/phalcon Makefile distinfo

www/phalcon: update to 5.22.0
DeltaFile
+3-3www/phalcon/distinfo
+1-1www/phalcon/Makefile
+4-42 files

NetBSD/pkgsrc-wip dfe4569py-schema PLIST Makefile

py-schema: fix PLIST for latest setuptools and depend on it
DeltaFile
+1-3py-schema/Makefile
+1-1py-schema/PLIST
+2-42 files

HardenedBSD/src dfa6afecontrib/expat Makefile.in, contrib/expat/lib internal.h xmltok.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+349-5contrib/expat/tests/basic_tests.c
+100-123contrib/expat/lib/xmlparse.c
+139-64contrib/expat/lib/xmltok.c
+67-100contrib/expat/lib/internal.h
+105-56contrib/expat/Makefile.in
+157-0contrib/expat/tests/hash_tests.c
+917-34854 files not shown
+1,614-85960 files

HardenedBSD/src aa9e9a5contrib/expat Makefile.in, contrib/expat/lib internal.h xmltok.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+349-5contrib/expat/tests/basic_tests.c
+100-123contrib/expat/lib/xmlparse.c
+139-64contrib/expat/lib/xmltok.c
+67-100contrib/expat/lib/internal.h
+105-56contrib/expat/Makefile.in
+157-0contrib/expat/tests/hash_tests.c
+917-34854 files not shown
+1,614-85960 files

HardenedBSD/src faad511contrib/expat Makefile.in, contrib/expat/lib internal.h xmltok.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+349-5contrib/expat/tests/basic_tests.c
+100-123contrib/expat/lib/xmlparse.c
+139-64contrib/expat/lib/xmltok.c
+67-100contrib/expat/lib/internal.h
+105-56contrib/expat/Makefile.in
+157-0contrib/expat/tests/hash_tests.c
+917-34854 files not shown
+1,614-85960 files

LLVM/project 6506e73orc-rt/include/orc-rt-internal/support/sys WinErrorToORCError.h, orc-rt/lib/bedrock/sys/windows Memory.cpp

[orc-rt] Add Windows virtual memory support (#224521)

Adds Windows virtual-memory support for ORC-RT
Also adds a small Windows error helper that converts GetLastError()
results into ORC-RT Error values with the corresponding system message.
Turns back on all the memory tests for windows.
DeltaFile
+57-7orc-rt/lib/bedrock/sys/windows/Memory.cpp
+43-0orc-rt/include/orc-rt-internal/support/sys/WinErrorToORCError.h
+2-3orc-rt/test/regression/check-rt-process-info.test
+5-0orc-rt/test/regression/lit.cfg.py
+1-2orc-rt/test/unit/bedrock/sps/SimpleNativeMemoryMapSPSCITest.cpp
+0-2orc-rt/test/unit/bedrock/SimpleNativeMemoryMapTest.cpp
+108-146 files

HardenedBSD/ports 9fd3658misc/ollama Makefile, misc/py-litellm Makefile.crates distinfo

Merge branch 'freebsd/main' into hardenedbsd/main
DeltaFile
+391-289security/pass-cli/distinfo
+187-136security/pass-cli/Makefile.crates
+209-3misc/py-litellm/distinfo
+104-1misc/py-litellm/Makefile.crates
+63-0security/vuxml/vuln/2026.xml
+18-20misc/ollama/Makefile
+972-44954 files not shown
+1,259-69260 files

LLVM/project 31c90c1cross-project-tests/riscv lto-inline-asm-abi.c, llvm/lib/Target/RISCV/AsmParser RISCVAsmParser.cpp

[RISC-V][MC] Update ELF streamer ArchString when emitting RISCVAttrs::ARCH

During LTO, the TargetMachine subtarget is initialized with the linker's
default CPU (e.g. `generic-rv64`, `rv64i2p1`), while
RISCVAsmPrinter::emitStartOfAsmFile() reconstructs the module's actual ISA from
the `riscv-isa` module flag and emits RISCVAttrs::ARCH via
RISCVTargetELFStreamer::emitTextAttribute(). Previously only
RISCVAsmParser::parseDirectiveAttribute() called setArchString() after
emitTextAttribute(RISCVAttrs::ARCH, ...), so direct object emission bypassed
the update and tagged `.text` with `$xrv64i2p1` instead of the module's
full architecture string.

Move the setArchString() call into RISCVTargetELFStreamer::emitTextAttribute()
when emitting RISCVAttrs::ARCH so both `.attribute arch` and
RISCVTargetStreamer::emitTargetAttributes() update the active mapping symbol
ISA.

This commit was created with the help of AI tools
DeltaFile
+8-11cross-project-tests/riscv/lto-inline-asm-abi.c
+2-5llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp
+6-0llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp
+16-163 files

LLVM/project f914594llvm/lib/Linker IRMover.cpp

address feedback
DeltaFile
+1-1llvm/lib/Linker/IRMover.cpp
+1-11 files

LLVM/project e9da4adlld/test/ELF/lto riscv-target-abi.ll

address feedback
DeltaFile
+14-11lld/test/ELF/lto/riscv-target-abi.ll
+14-111 files

LLVM/project 9d6ed92cross-project-tests lit.cfg.py

address feedback
DeltaFile
+9-10cross-project-tests/lit.cfg.py
+9-101 files

LLVM/project 4057f8elibc/src/__support/threads/linux/aarch64 tls.cpp, libc/src/__support/threads/linux/riscv tls.cpp

[libc] Move Linux TLS routines from crt1.o into libc.a (#225418)

init_tls, cleanup_tls, and set_thread_ptr are per-thread routines used
by both Thread::run in libc.a and main-thread startup in crt1.o, but
tls.cpp was previously only merged into crt1.o. Linking libc.a without
crt1.o (such as a self-contained shared library statically linking
libc.a, or an executable built with -nostartfiles) failed with undefined
hidden symbols when thread.cpp.o was pulled in.

Move {x86_64,aarch64,riscv}/tls.cpp from libc/startup/linux/ to
libc/src/__support/threads/linux/ alongside tcb.h (matching prior
migrations of auxv and program_invocation_name from startup into src so
dependencies flow from startup -> src). Expose them via a forwarding
ALIAS target libc.src.__support.threads.linux.tls depended on by both
thread and do_start, and remove tls from merge_relocatable_object(crt1).

Mark init_tls with [[gnu::flatten]] and compile tls with
${libc_opt_high_flag}. Once tls.cpp.o is in libc.a rather than first on
the link line inside crt1.o, an earlier object compiled with

    [9 lines not shown]
DeltaFile
+0-81libc/startup/linux/aarch64/tls.cpp
+81-0libc/src/__support/threads/linux/aarch64/tls.cpp
+0-75libc/startup/linux/x86_64/tls.cpp
+75-0libc/src/__support/threads/linux/x86_64/tls.cpp
+0-57libc/startup/linux/riscv/tls.cpp
+57-0libc/src/__support/threads/linux/riscv/tls.cpp
+213-21310 files not shown
+292-27316 files

LLVM/project 20bc398.github/workflows libcxx-benchmark-commit.yml libcxx-pr-benchmark.yml, .github/workflows/libcxx/build-at-commit action.yml

[libc++] Extract building libc++ into a composite action (#224670)

This allows reusing the same build script for the PR benchmark and
the historical benchmarking jobs. This also opens the door to adding
new configurations where the library isn't rebuilt (e.g. where the
artifacts are pulled from a pre-built location, or even testing against
non-libc++.

Assisted by Claude
DeltaFile
+49-0.github/workflows/libcxx/build-at-commit/action.yml
+16-31libcxx/utils/ci/lnt/run-benchmarks
+19-7.github/workflows/libcxx-pr-benchmark.yml
+23-2.github/workflows/libcxx-benchmark-commit.yml
+4-3libcxx/utils/ci/lnt/README.md
+1-0libcxx/utils/ci/run-buildbot
+112-436 files

LLVM/project 85fca8fclang-tools-extra/clang-tidy/readability IdentifierNamingCheck.cpp, clang-tools-extra/docs ReleaseNotes.md

[clang-tidy] Fix crash in readability-identifier-naming (#220221)

This PR contains the fix for the `readability-identifier-naming` crash.
The crash happens because the checker calls `hasMemberName` on a base
class without checking if that base class actually has a definition
first (like when it's just forward-declared). I added a
`RD->hasDefinition()` guard to fix it.

Fixes #213948
DeltaFile
+8-0clang-tools-extra/test/clang-tidy/checkers/readability/identifier-naming.cpp
+1-1clang-tools-extra/clang-tidy/readability/IdentifierNamingCheck.cpp
+2-0clang-tools-extra/docs/ReleaseNotes.md
+11-13 files

LLVM/project f5f1fd6lld/MachO SyntheticSections.h MapFile.cpp, lld/test/MachO x86-64-objc-stubs.s objc-stubs-order-file.s

[lld-macho] Print Objective-C stubs in map files (#225302)

Match ld-prime by listing synthesized Objective-C message-send stubs in
Mach-O map files, including their final addresses and mode-specific sizes.
DeltaFile
+14-6lld/test/MachO/arm64-objc-stubs-dead.s
+14-2lld/test/MachO/arm64-objc-stubs.s
+10-0lld/MachO/MapFile.cpp
+8-1lld/test/MachO/objc-stubs-order-file.s
+7-1lld/test/MachO/x86-64-objc-stubs.s
+1-0lld/MachO/SyntheticSections.h
+54-106 files

LLVM/project 66a1e86llvm/lib/Transforms/Scalar LICM.cpp, llvm/test/Transforms/LICM hoist-phi.ll

[LICM] Relax Hoistable Branch if all of the incoming node are hoistable

Like PhiNode, a branch is possibly hoistable if all of the parents are
possible to hoist. The only difference is that we cannot hoisting to
PreHeader as it might erase itself in getOrCreateHoistedBlock. This is
why we have IsReplicatedBy check in hasExactlyReplicatedControlFlow.

In phi, it is not a matter as we only change the incoming node from a
phi node without overwrite its dominator.

Also, we fix a bug while we have nested hoisted node. In that case, we
have to find the LCA of the dominators of all users.
DeltaFile
+167-4llvm/test/Transforms/LICM/hoist-phi.ll
+78-31llvm/lib/Transforms/Scalar/LICM.cpp
+245-352 files

LLVM/project 4c8a437orc-rt/test/unit CMakeLists.txt ErrorMatchersTest.cpp

[orc-rt] Add gmock matchers for Error and Expected<T> (#225596)

Ports llvm/Testing/Support/Error.h to orc_rt: EXPECT_THAT_ERROR and
ASSERT_THAT_ERROR, EXPECT_THAT_EXPECTED and ASSERT_THAT_EXPECTED, and
the Succeeded, Failed, Failed<InfoT>, FailedWithMessage and HasValue
matchers.

Two departures from the original. An orc_rt Error carries at most one
ErrorInfoBase -- there is no joinErrors -- so the holder keeps a single
error, FailedWithMessage takes one matcher rather than a variadic pack,
and FailedWithMessageArray is dropped. ErrorInfoBase has
dynamicRTTIName, so a type mismatch names the type that did turn up
rather than reporting only that the expected one was absent.

Header-only, under test/unit with the other test helpers rather than in
a shipped testing library. ErrorMatchersTest exercises each matcher
against a matching and a non-matching value, the latter through gtest's
failure interception.
DeltaFile
+304-0orc-rt/test/unit/ErrorMatchers.h
+185-0orc-rt/test/unit/ErrorMatchersTest.cpp
+2-0orc-rt/test/unit/CMakeLists.txt
+491-03 files

LLVM/project 081cc09clang/docs/analyzer checkers.md, clang/lib/StaticAnalyzer/Checkers/WebKit RawPtrRefSafetyModel.cpp RawPtrRefLocalVarsChecker.cpp

[WebKit Checkers] Add alpha.webkit.UnborrowedLocalVarsChecker (#225274)

This is a new checker that requires a Borrow<T> when using a
pointer/reference/view that is lifetimebound to a CanBorrow type.

A CanBorrow type is a type that tracks views into its interior at
runtime, and calls crashIfBorrowed() when it invalidates such views.
Vector is the motivating example.

A design description is available at:
https://github.com/WebKit/WebKit/wiki/SaferCPP:-Borrowed-Pointer-Use-After-Destruction

I implemented UnborrowedLocalVarsChecker in terms of the existing
alpha.webkit.*LocalVarsChecker system because the requirement to hold an
overlooking smart-pointer-like-thing is pretty similar.

In some cases where the new checker is stricter than the existing
checker, this patch conditionalizes the strictness. The plan is to
upgrade existing checkers in a follow-up patch.

Assisted-by: Claude
DeltaFile
+656-0clang/test/Analysis/Checkers/WebKit/unborrowed-local-vars.cpp
+195-35clang/lib/StaticAnalyzer/Checkers/WebKit/ASTUtils.cpp
+220-0clang/test/Analysis/Checkers/WebKit/mock-canborrow.h
+81-35clang/lib/StaticAnalyzer/Checkers/WebKit/RawPtrRefLocalVarsChecker.cpp
+90-0clang/docs/analyzer/checkers.md
+84-2clang/lib/StaticAnalyzer/Checkers/WebKit/RawPtrRefSafetyModel.cpp
+1,326-728 files not shown
+1,520-8114 files

NetBSD/src C7g9EZMsys/external/gpl2/dts/dist/arch/arm/boot/dts/st stm32mp151c-mecio1r0.dts stm32mp153c-mecio1r1.dts, sys/external/gpl2/dts/dist/arch/arm64/boot/dts/freescale fsl-lx2160a.dtsi

   Import dts from Linux 6.12.111
VersionDeltaFile
1.1.1.2+234-0sys/external/gpl2/dts/dist/include/dt-bindings/power/qcom,rpmhpd.h
1.1.1.5+1-224sys/external/gpl2/dts/dist/include/dt-bindings/power/qcom-rpmpd.h
1.1.1.5+141-42sys/external/gpl2/dts/dist/arch/arm64/boot/dts/freescale/fsl-lx2160a.dtsi
1.1.1.2+16-130sys/external/gpl2/dts/dist/arch/arm/boot/dts/st/stm32mp15x-mecio1-io.dtsi
1.1.1.2+144-0sys/external/gpl2/dts/dist/arch/arm/boot/dts/st/stm32mp153c-mecio1r1.dts
1.1.1.2+128-0sys/external/gpl2/dts/dist/arch/arm/boot/dts/st/stm32mp151c-mecio1r0.dts
+664-396136 files not shown
+1,490-872142 files

FreeBSD/ports 98ac31ewww/filebrowser-quantum Makefile distinfo

www/filebrowser-quantum: Update to 1.5.6

ChangeLogs:

- https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.5.4-stable
- https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.5.5-stable
- https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.5.6-stable
DeltaFile
+7-7www/filebrowser-quantum/distinfo
+3-4www/filebrowser-quantum/Makefile
+10-112 files

HardenedBSD/ports c733a2esysutils/appjail-devel Makefile distinfo

sysutils/appjail-devel: Update to 5.7.0.20260922

ChangeLog:
https://github.com/DtxdF/AppJail/commits/e1ac743749e7cba9582c1829a4f2047b50e22fa8/
DeltaFile
+3-3sysutils/appjail-devel/distinfo
+2-2sysutils/appjail-devel/Makefile
+5-52 files

FreeBSD/ports c733a2esysutils/appjail-devel Makefile distinfo

sysutils/appjail-devel: Update to 5.7.0.20260922

ChangeLog:
https://github.com/DtxdF/AppJail/commits/e1ac743749e7cba9582c1829a4f2047b50e22fa8/
DeltaFile
+3-3sysutils/appjail-devel/distinfo
+2-2sysutils/appjail-devel/Makefile
+5-52 files

HardenedBSD/ports 98ac31ewww/filebrowser-quantum Makefile distinfo

www/filebrowser-quantum: Update to 1.5.6

ChangeLogs:

- https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.5.4-stable
- https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.5.5-stable
- https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.5.6-stable
DeltaFile
+7-7www/filebrowser-quantum/distinfo
+3-4www/filebrowser-quantum/Makefile
+10-112 files

FreeBSD/ports 4925a21multimedia/navidrome Makefile distinfo, multimedia/navidrome/files pkg-message.in

multimedia/navidrome: Upgrade to 0.64.1

ChangeLogs:

- https://github.com/navidrome/navidrome/releases/tag/v0.64.0
- https://github.com/navidrome/navidrome/releases/tag/v0.64.1
DeltaFile
+7-7multimedia/navidrome/distinfo
+9-1multimedia/navidrome/files/pkg-message.in
+3-4multimedia/navidrome/Makefile
+19-123 files

FreeBSD/ports 3f99b58security/x11appjail Makefile pkg-plist

security/x11appjail: Update to 1.1.0

ChangeLog: https://github.com/DtxdF/x11appjail/releases/tag/v1.1.0
DeltaFile
+3-3security/x11appjail/distinfo
+1-1security/x11appjail/Makefile
+2-0security/x11appjail/pkg-plist
+6-43 files

HardenedBSD/ports 4925a21multimedia/navidrome Makefile distinfo, multimedia/navidrome/files pkg-message.in

multimedia/navidrome: Upgrade to 0.64.1

ChangeLogs:

- https://github.com/navidrome/navidrome/releases/tag/v0.64.0
- https://github.com/navidrome/navidrome/releases/tag/v0.64.1
DeltaFile
+7-7multimedia/navidrome/distinfo
+9-1multimedia/navidrome/files/pkg-message.in
+3-4multimedia/navidrome/Makefile
+19-123 files

HardenedBSD/ports 3f99b58security/x11appjail Makefile pkg-plist

security/x11appjail: Update to 1.1.0

ChangeLog: https://github.com/DtxdF/x11appjail/releases/tag/v1.1.0
DeltaFile
+3-3security/x11appjail/distinfo
+1-1security/x11appjail/Makefile
+2-0security/x11appjail/pkg-plist
+6-43 files

HardenedBSD/ports db7b5a5sysutils/appjail Makefile distinfo

sysutils/appjail: Update to 5.7.0

ChangeLog: https://github.com/DtxdF/AppJail/releases/tag/v5.7.0
DeltaFile
+3-3sysutils/appjail/distinfo
+1-1sysutils/appjail/Makefile
+4-42 files

FreeBSD/ports db7b5a5sysutils/appjail Makefile distinfo

sysutils/appjail: Update to 5.7.0

ChangeLog: https://github.com/DtxdF/AppJail/releases/tag/v5.7.0
DeltaFile
+3-3sysutils/appjail/distinfo
+1-1sysutils/appjail/Makefile
+4-42 files

LLVM/project 72aeee3orc-rt/test/regression check-rt-process-info.test

[orc-rt] Reconcile check-rt-process-info changes. (#225592)

3648582c0a41 was supposed to make this test more generic, but
accidentally removed it instead.

Reconcile the dropped changes with 3648582c0a41, which added page-size
checking.
DeltaFile
+3-2orc-rt/test/regression/check-rt-process-info.test
+3-21 files