OPNSense/ports fb144c2security/strongswan/files patch-revert-bf165afb780b

WIP
DeltaFile
+72-0security/strongswan/files/patch-revert-bf165afb780b
+72-01 files

LLVM/project 8756ee1flang/lib/Lower PFTBuilder.cpp

Add assertion
DeltaFile
+1-0flang/lib/Lower/PFTBuilder.cpp
+1-01 files

LLVM/project 88107b2llvm/utils profcheck-xfail.txt

[ProfCheck] Add expand-multi-result.ll to profcheck-xfail.txt (#223614)

From #218634 
Added for the same reason as other
`PreISelIntrinsicLowering/AArch64/expand-*` tests. Fixes `profcheck`
failure.
DeltaFile
+1-0llvm/utils/profcheck-xfail.txt
+1-01 files

OPNSense/ports d79f340opnsense/pkg pkg-plist Makefile, opnsense/pkg/files patch-src_Makefile.autosetup patch-7ea9566835a82f111d7771f58168babc5e0dde6a.patch

opnsense/pkg: update to 2.8.4
DeltaFile
+0-33opnsense/pkg/files/patch-7ea9566835a82f111d7771f58168babc5e0dde6a.patch
+7-13opnsense/pkg/distinfo
+8-11opnsense/pkg/Makefile
+0-11opnsense/pkg/files/patch-src_Makefile.autosetup
+8-3opnsense/pkg/pkg-plist
+23-715 files

FreeNAS/freenas 913bf40tests/api2 test_replication_concurrency.py

Test that multiple `replication.run_run_onetime` jobs submitted at once work properly
DeltaFile
+78-0tests/api2/test_replication_concurrency.py
+78-01 files

LLVM/project b2a0e07clang/include/clang/Analysis/Analyses/LifetimeSafety LifetimeAnnotations.h, clang/lib/Analysis/LifetimeSafety LifetimeAnnotations.cpp Checker.cpp

owner-constructor-inference
DeltaFile
+38-0clang/test/Sema/LifetimeSafety/safety.cpp
+6-2clang/lib/Analysis/LifetimeSafety/Checker.cpp
+5-0clang/lib/Analysis/LifetimeSafety/LifetimeAnnotations.cpp
+5-0clang/include/clang/Analysis/Analyses/LifetimeSafety/LifetimeAnnotations.h
+54-24 files

LLVM/project c6bad7cllvm/lib/Target/AMDGPU SIRegisterInfo.cpp, llvm/test/CodeGen/AMDGPU sgpr-scavenge-fi-stack-id.ll sgpr-spill-to-vmem-scc-clobber-reserved-exec-copy.mir

[AMDGPU] Scale the frame register in place when lowering scalar frame indices (#221972)

Lowering a scalar frame index needs a scalar temporary, and under full
SGPR pressure the scavenger emergency-spills instead, which flips EXEC
with `s_not_b64` and clobbers SCC, With SCC live the spill builder gives
up with `error: unhandled SGPR spill to memory`.

Use `FrameReg` itself as the temporary and restore it after the
instruction with `S_MUL_I32`, which unlike `S_LSHL_B32` does not write
SCC, folding a non-zero offset back through an
`S_ADDC_U32`/`S_BITCMP1_B32`/`S_BITSET0_B32` sequence when SCC is still
live.
This is restricted to SALU instructions with a single frame index that
do not otherwise touch `FrameReg`; everything else keeps the existing
path, including the emergency spill.

Assisted-by: Claude Opus 5
DeltaFile
+168-0llvm/test/CodeGen/AMDGPU/sgpr-spill-to-vmem-scc-clobber-reserved-exec-copy.mir
+77-13llvm/lib/Target/AMDGPU/SIRegisterInfo.cpp
+3-23llvm/test/CodeGen/AMDGPU/sgpr-scavenge-fi-stack-id.ll
+248-363 files

LLVM/project aa7f417llvm/lib/Analysis LoopAccessAnalysis.cpp, llvm/test/Analysis/LoopAccessAnalysis evaluate-at-symbolic-max-backedge-taken-count-may-wrap.ll depend_diff_types.ll

[LAA] Allow zero-distance dependences between mixed-width accesses (#221531)

Allow zero-distance dependences between mixed-width accesses to be
classified as `Forward` when they have a common byte stride.

`getDependenceDistanceStrideAndSize` already requires non-zero strides
in the same direction, each a multiple of the corresponding type's
allocation size. A common byte stride is therefore at least as large as
either access. With equal starting addresses, accesses from different
iterations cannot overlap.

Alive2: https://alive2.llvm.org/ce/z/KN6Hke

Fixes #218320
DeltaFile
+552-0llvm/test/Analysis/LoopAccessAnalysis/zero-distance-mixed-width.ll
+14-2llvm/lib/Analysis/LoopAccessAnalysis.cpp
+4-5llvm/test/Analysis/LoopAccessAnalysis/depend_diff_types.ll
+1-1llvm/test/Analysis/LoopAccessAnalysis/evaluate-at-symbolic-max-backedge-taken-count-may-wrap.ll
+571-84 files

LLVM/project 44b2bd2clang/docs TypeSanitizer.md

[Docs][TySan] Correct optimisation remarks (#205577)

I think I got my wires crossed here between TySan and other sanitizers
when I was using their docs for reference on how to structure this file.
If a strict aliasing violation was going to cause problems, by the time
higher level optimizations come through and restructure the code, say by
removing a load/store, you no longer have the behaviour TySan would pick
up on.
DeltaFile
+3-2clang/docs/TypeSanitizer.md
+3-21 files

FreeBSD/doc d848083website/static google96eb5b100ed66487.html google6bb24ed0b804d5e9.html

Remove google-site-verification files from www.freebsd.org

We no longer use Google services for our website.

Approved by: carlavilla
Fixes: 7a3abf9d3e (Remove Google Analytics)
DeltaFile
+0-1website/static/google96eb5b100ed66487.html
+0-1website/static/google6bb24ed0b804d5e9.html
+0-22 files

LLVM/project 0f63938clang/lib/Headers riscv_packed_simd.h, clang/test/CodeGen/RISCV rvp-intrinsics.c

[RISCV][P-ext] Support Packed Element Insert (#222268)
DeltaFile
+204-0clang/test/CodeGen/RISCV/rvp-intrinsics.c
+66-0cross-project-tests/intrinsic-header-tests/riscv_packed_simd.c
+33-0clang/test/Sema/riscv-pset-index-out-of-range.c
+25-0clang/lib/Headers/riscv_packed_simd.h
+328-04 files

LLVM/project a0aa07fllvm/lib/Target/AMDGPU AMDGPUTargetTransformInfo.cpp, llvm/test/Analysis/CostModel/AMDGPU fptoui.ll fptosi.ll

[AMDGPU] Model the cost of the expanded integer to/from floating point casts

No instruction converts to or from a 64 bit integer, and narrow vector
lanes are converted one at a time. Price these expansions by the FP64
rate, sdwa and 16 bit instruction support, and price i33 to i63 like
i64 and bf16 like f32 plus rounding.

Assisted-by: Claude Code Opus 5
DeltaFile
+312-215llvm/test/Analysis/CostModel/AMDGPU/cast.ll
+196-110llvm/test/Analysis/CostModel/AMDGPU/expanded-int-fp-casts.ll
+107-0llvm/lib/Target/AMDGPU/AMDGPUTargetTransformInfo.cpp
+60-37llvm/test/Analysis/CostModel/AMDGPU/fptoui.ll
+60-37llvm/test/Analysis/CostModel/AMDGPU/fptosi.ll
+735-3995 files

LLVM/project 4393025llvm/test/Analysis/CostModel/AMDGPU fptoui.ll fptosi.ll

[NFC][AMDGPU] Add cost tests for integer to/from floating point casts

Cover i48, i64, i128, bf16, fp128 and narrow vector lanes across FP64
rates, 16 bit instructions, sdwa and both cost kinds.

Assisted-by: Claude Code Opus 5
DeltaFile
+281-8llvm/test/Analysis/CostModel/AMDGPU/cast.ll
+286-0llvm/test/Analysis/CostModel/AMDGPU/expanded-int-fp-casts.ll
+36-6llvm/test/Analysis/CostModel/AMDGPU/fptoui.ll
+36-6llvm/test/Analysis/CostModel/AMDGPU/fptosi.ll
+639-204 files

LLVM/project 7cfdd2allvm/test/Analysis/CostModel/AMDGPU cast.ll fptoui.ll

[NFC][AMDGPU] Replace undef with poison in cast.ll, fptosi.ll and fptoui.ll (#223570)

<sub>Stack created with <a
href="https://github.com/github/gh-stack">GitHub Stacks CLI</a> • <a
href="https://gh.io/stacks-feedback">Give Feedback 💬</a></sub>
DeltaFile
+176-176llvm/test/Analysis/CostModel/AMDGPU/fptoui.ll
+176-176llvm/test/Analysis/CostModel/AMDGPU/fptosi.ll
+169-169llvm/test/Analysis/CostModel/AMDGPU/cast.ll
+521-5213 files

FreeNAS/freenas 4fc2294src/middlewared/middlewared/plugins/zfs resource_create.py snapshot_ops.py

Convert the zfs.resource services to the typesafe pattern

## Context
`zfs.resource`, `zfs.resource.snapshot` and `zfs.resource.pool` were already half-converted: public methods carried `@api_method(check_annotations=True)` and most in-process consumers already went through `call2`. What was missing was the structural half - the service classes still held the implementation. `resource_crud.py` and `snapshot_crud.py` were 800+ lines each, mixing the create pipeline, destroy validation, path helpers and per-method exception translation in with the API surface.

## Solution
**Lean shims delegating to module functions.** The three services keep only their `Config`, decorators and docstrings, and hand off to plain functions taking a `ServiceContext` - the same shape `truenas`, `catalog` and `update_` already use here. The logic lands in `resource_{query,create,destroy,ops}.py`, `snapshot_ops.py` and `prefetch_ops.py`. `create_rules.py`'s pool-inspecting helpers now take a `ServiceContext` rather than an untyped `service`, and while touching that file it picks up `from __future__ import annotations` so its annotations stop being quoted strings.

**Each service sits in a module named after its namespace** - `resource.py`, `snapshot.py`, `prefetch.py`, `tier.py` - leaving `plugins/zfs/__init__.py` empty. That is deliberate and worth keeping: a lot of modules elsewhere import cheap leaves of this package (`exceptions`, `zvol_utils`, `utils`, `encryption`), and `test/integration/assets/pool.py`, which most of the api2 suite pulls in on the client side, is one of them. Keeping the services out of `__init__.py` holds `from middlewared.plugins.zfs.exceptions import ZFSPathNotFoundException` to a handful of modules and drags in neither `middlewared.service` nor the `truenas_pylibzfs` C extension, which `tests/requirements.txt` does not install.

**`zfs.resource.pool` becomes a sub-service** of `zfs.resource` instead of only being picked up by the plugin loader, which gives it a `self.s` path. That was the last thing forcing untyped string calls into this namespace - `pool.dedup`, the failover event handler and the `pool.post_import` hook all use `call2` now, and no string call to `zfs.resource*` survives outside the over-the-wire tests. `Middleware.create_task` picks up its annotations here because the typed `pool.post_import` handler is the first thing to call it under the strict mypy run.

**Dead code dropped.** `object_count_impl.py` and the `zfs.resource.estimate_object_count` shim lost their last caller when `filesystem_/utils.py` moved to `fstatvfs`.

Two pieces of the 27.0.0 version are deliberately left out because they do not apply to this branch: the rewritten RST docstrings, which belong to the separate public-API docstring pass that has not landed here, and the entitlement gate inventory update - this branch asserts a path-agnostic `MINIMUM_GATES` floor rather than a frozen list of files, so moving the DEDUP gate into `resource_create.py` needs no change there.
DeltaFile
+0-843src/middlewared/middlewared/plugins/zfs/snapshot_crud.py
+0-832src/middlewared/middlewared/plugins/zfs/resource_crud.py
+480-0src/middlewared/middlewared/plugins/zfs/snapshot.py
+432-0src/middlewared/middlewared/plugins/zfs/resource.py
+289-0src/middlewared/middlewared/plugins/zfs/snapshot_ops.py
+180-0src/middlewared/middlewared/plugins/zfs/resource_create.py
+1,381-1,67516 files not shown
+1,827-1,83622 files

OPNSense/ports 5a9ceeasecurity/strongswan pkg-plist distinfo, security/strongswan/files patch-conf_Makefile.in patch-conf_plugins_kernel-libipsec.conf

Revert "security/strongswan: sync with upstream"

This reverts commit 3e507a5f87bc3c11084ee8d2192c5d9eef87148d.

QA says no.  Needs further investigation.
DeltaFile
+23-0security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c
+0-11security/strongswan/files/patch-conf_plugins_kernel-libipsec.conf
+4-3security/strongswan/Makefile
+3-3security/strongswan/distinfo
+5-0security/strongswan/pkg-plist
+2-2security/strongswan/files/patch-conf_Makefile.in
+37-196 files

LLVM/project 710d0c3polly/test/ScopDetect simple_loop_with_param_2.ll simple_loop_with_param.ll, polly/test/ScopInfo tempscop-printing.ll intra_bb_scalar_dep.ll

[Polly][NFC] Fix loop index in C comments of tests with nested loops (#220589)

The C pseudo-code in tests declares `long i, j`, but the inner loop
reuses `i` instead of `j`, which would overwrite the outer loop counter
and describe a different program than the IR below it.
DeltaFile
+5-5polly/test/ScopDetect/simple_loop_with_param.ll
+2-2polly/test/ScopInfo/tempscop-printing.ll
+2-2polly/test/ScopInfo/intra_bb_scalar_dep.ll
+2-2polly/test/ScopInfo/intra_and_inter_bb_scalar_dep.ll
+2-2polly/test/ScopInfo/inter_bb_scalar_dep.ll
+2-2polly/test/ScopDetect/simple_loop_with_param_2.ll
+15-156 files

LLVM/project 789c6d9llvm/lib/Transforms/Scalar LICM.cpp, llvm/test/Transforms/LICM promote-single-thread.ll

LICM: Drop -licm-force-thread-model-single in favor of the module flag

Now that the threading model is carried by the "thread-model" IR module flag,
the hidden -licm-force-thread-model-single override is redundant: a test can
select the single-threaded model by setting the module flag directly.
isThreadLocalObject reads only Module::getThreadModel.

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+1-5llvm/lib/Transforms/Scalar/LICM.cpp
+3-1llvm/test/Transforms/LICM/promote-single-thread.ll
+3-0llvm/test/Transforms/LICM/Inputs/thread-model-single.ll
+7-63 files

LLVM/project 2d3b6d5clang/lib/CodeGen BackendUtil.cpp, llvm/lib/CodeGen CommandFlags.cpp AtomicExpandPass.cpp

CodeGen: Replace TargetOptions::ThreadModel with module flag

Migrate the threading-model consumers off TargetOptions::ThreadModel and onto
the "thread-model" module flag. The main user was ARM's pass config, which is
moved into AtomicExpand, which now performs the single-thread expansion
directly.

Few tests use the -thread-model flag, so delete it and migrate those cases
to use the module flag.

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+182-0llvm/test/Transforms/AtomicExpand/ARM/thread-model-single.ll
+47-1llvm/lib/CodeGen/AtomicExpandPass.cpp
+13-5llvm/test/CodeGen/ARM/atomic-op.ll
+11-6llvm/lib/Transforms/Scalar/LICM.cpp
+0-11llvm/lib/CodeGen/CommandFlags.cpp
+0-8clang/lib/CodeGen/BackendUtil.cpp
+253-317 files not shown
+254-5413 files

LLVM/project 105edd8llvm/include/llvm/Transforms/Utils LowerAtomic.h, llvm/lib/Target/AMDGPU SIISelLowering.cpp

LowerAtomic: Preserve the volatile flag when lowering atomicrmw and cmpxchg (#223544)

These utility functions built the replacements without copying the
volatile flag from the original instruction.

Co-authored-by: Claude (Claude-Opus-4.8) <noreply at anthropic.com>
DeltaFile
+60-0llvm/test/Transforms/AtomicExpand/AMDGPU/expand-atomic-flat-i64-private-volatile.ll
+10-10llvm/test/Transforms/AtomicExpand/AMDGPU/expand-atomic-private-gas.ll
+9-8llvm/lib/Transforms/Utils/LowerAtomic.cpp
+7-5llvm/lib/Target/AMDGPU/SIISelLowering.cpp
+3-4llvm/include/llvm/Transforms/Utils/LowerAtomic.h
+2-2llvm/test/Transforms/AtomicExpand/AMDGPU/expand-cmpxchg-flat-maybe-private.ll
+91-296 files

LLVM/project 0431cbellvm/lib/Target/AArch64 AArch64SelectionDAGInfo.cpp AArch64InstrInfo.td, llvm/test/CodeGen/AArch64 intrinsic-cttz-elts-sve.ll

[AArch64] Use firstp for SVE2.2 cttz.elts (#221182)

Preserve zero-is-poison cttz.elts as a distinct AArch64ISD node.

This lets instruction selection choose firstp for SVE2.2 and SME2.2.

Keep brkb/cntp for no-poison uses and for older targets.
DeltaFile
+288-119llvm/test/CodeGen/AArch64/intrinsic-cttz-elts-sve.ll
+58-36llvm/lib/Target/AArch64/AArch64SVEInstrInfo.td
+6-2llvm/lib/Target/AArch64/AArch64ISelLowering.cpp
+3-0llvm/lib/Target/AArch64/AArch64InstrInfo.td
+1-0llvm/lib/Target/AArch64/AArch64SelectionDAGInfo.cpp
+356-1575 files

OpenBSD/src sUob2fSusr.bin/ssh misc.c

   Correct handling of DST when converting dates

   Timestamps conversion was ignoring Daylight Savings Time (DST) causing
   date conversions to be +/-1 hour under some circumstances.

   bz4004; from Khush Patel, ok deraadt
VersionDeltaFile
1.218+2-1usr.bin/ssh/misc.c
+2-11 files

LLVM/project 5fee83dllvm/lib/Target/AArch64 AArch64ISelLowering.cpp, llvm/test/CodeGen/AArch64 sve-masked-compressstore.ll

[AArch64] Promote unpacked SVE f16/bf16 compressstores 32/64-bit (#222321)

To support compressstore for unpacked 16-bit SVE floats (e.g., nxv2f16),
we need to expand the compressstore before type legalization. If we
expand after type legalization the `VECTOR_COMPRESS` node inserted won't
be promoted to a 32/64-bit element size (which means we'd have to
duplicate some type legalization in the lowering).
DeltaFile
+41-21llvm/lib/Target/AArch64/AArch64ISelLowering.cpp
+52-4llvm/test/CodeGen/AArch64/sve-masked-compressstore.ll
+93-252 files

OpenBSD/src 9RXAqYFusr.bin/ssh sk-usbhid.c

   sk-usbhid: preserve UV requirement for resident keys

   When loading resident credentials, derive SSH_SK_USER_VERIFICATION_REQD
   directly from the credential's credProtect policy.

   The previous code only preserved the flag when the authenticator did not
   report the uv capability. As a result, UV_REQUIRED credentials downloaded
   from authenticators with built-in UV were saved with flags 0x21 instead
   of 0x25.

   Do not make preservation of the credential policy depend on the
   authenticator's current UV capability. Keep compatibility with libfido2
   versions without fido_cred_prot().

   GHPR701 from Savely Krasovsky
VersionDeltaFile
1.50+6-9usr.bin/ssh/sk-usbhid.c
+6-91 files

OpenBSD/src 4vt6yr5usr.bin/ssh misc.c

   Fix memory leak on an error path in mkdir_path

   CID 913589

   OK djm@
VersionDeltaFile
1.217+2-1usr.bin/ssh/misc.c
+2-11 files

LLVM/project fa74dc3llvm/lib/CodeGen/SelectionDAG DAGCombiner.cpp

Fix lit test fail again
DeltaFile
+4-5llvm/lib/CodeGen/SelectionDAG/DAGCombiner.cpp
+4-51 files

FreeNAS/freenas a59f719src/middlewared/middlewared/plugins account.py, src/middlewared/middlewared/plugins/filesystem_ perm_check.py

Stricter user SSH public key validation to match OpenSSH behavior
DeltaFile
+154-0tests/api2/test_account_ssh_key.py
+120-0src/middlewared/middlewared/plugins/account.py
+46-11src/middlewared/middlewared/plugins/filesystem_/perm_check.py
+320-113 files

OpenBSD/src 7dzY7uLusr.bin/ssh sftp-usergroup.c sftp.c

   sftp: don't crash when glob(3) results lack stat information

   Avoid NULL deref crashes when remote glob(3) results lack stat
   information. This can happen if the sftp server selectively fails
   a stat/lstat operation.

   GHPR707 from Nguyễn Anh Bình
VersionDeltaFile
1.259+4-1usr.bin/ssh/sftp.c
1.3+2-0usr.bin/ssh/sftp-usergroup.c
+6-12 files

FreeBSD/ports a3323fddeskutils/ekphos Makefile Makefile.crates

deskutils/ekphos: Update to 0.50.10

- Update list of build dependencies
- Update WWW address and GH_ACCOUNT (the project has been moved to
  https://ekphos.nostacks.xyz/ [1])

ChangeLog:

1. https://github.com/hanebox/ekphos/releases/tag/v0.50.0 [1]
2. https://github.com/nostacks/ekphos/releases/tag/v0.50.10

Reported by:    han <notifications at github.com>
DeltaFile
+199-105deskutils/ekphos/distinfo
+99-52deskutils/ekphos/Makefile.crates
+5-5deskutils/ekphos/Makefile
+303-1623 files

FreeBSD/ports 8296c49multimedia/moonshine Makefile Makefile.crates, multimedia/moonshine/files pkg-message.in moonshine.toml.sample

multimedia/moonshine: update to 0.16.0
DeltaFile
+123-103multimedia/moonshine/distinfo
+60-50multimedia/moonshine/Makefile.crates
+6-2multimedia/moonshine/files/moonshine.toml.sample
+2-3multimedia/moonshine/Makefile
+0-3multimedia/moonshine/files/pkg-message.in
+191-1615 files