FreeBSD/ports c4dcbf4 — devel/glab pkg-plist Makefile

devel/glab: update to 1.125.0

Changes:        https://gitlab.com/gitlab-org/cli/-/releases
DeltaFile
+5-5devel/glab/distinfo
+2-2devel/glab/Makefile
+2-0devel/glab/pkg-plist
+9-73 files

FreeBSD/ports d2b4e38 — devel/llvm19 Makefile, devel/llvm19/files patch-flang_runtime_io-api-minimal.cpp libc++21-flang_runtime_io-api-minimal.cpp

devel/llvm19: fix build on 15.1, 14.4

This patch only works on systems with the libc++ from LLVM 21 so bound
its application appropriatly.

PR:             299993, 296203
Fixes:          6a0f728d9cd8 ("devel/llvm19: fix build with flang and libc++ 21")
DeltaFile
+0-24devel/llvm19/files/patch-flang_runtime_io-api-minimal.cpp
+24-0devel/llvm19/files/libc++21-flang_runtime_io-api-minimal.cpp
+5-0devel/llvm19/Makefile
+29-243 files

OPNSense/plugins 4b7bc50 — net/frr pkg-descr

net/frr: changelog
DeltaFile
+2-0net/frr/pkg-descr
+2-01 files

FreeBSD/ports fa646dc — security/vuxml/vuln 2026.xml

security/vuxml: Document p5-Starman multiple vulnerabilities
DeltaFile
+50-0security/vuxml/vuln/2026.xml
+50-01 files

LLVM/project a3ee37a — flang/lib/Optimizer/Transforms LoopInvariantCodeMotion.cpp, flang/test/Transforms licm-nested-hoist-aggressive.fir

[flang] Avoid a quadratic walk in FIR LICM's nested-region hoisting (#236138)

With `hoist-from-nested-regions=aggressive`, `flang-licm` considers
every operation in a loop's nested regions as a candidate, and for each
candidate `canMoveOutOfOp` is called once per intermediate ancestor up
to the loop. `canMoveOutOfOp` walks the candidate's whole subtree and
calls `fir::canMoveOutOf` on each nested operation. So an
`scf.if`/`fir.if` that holds a large part of the loop body is walked
again for every enclosing level and again for every `if` nested in it.
On routines with deeply nested IF blocks inside loops this takes minutes
of compile time.

`fir::canMoveOutOf` consults only the region owner's
`OperationMoveOpInterface` and returns true when the owner does not
implement it, so in that case the result of the walk is known in
advance. This patch returns early instead of walking. The pass result
does not change.

The new test checks that hoisting through operations without the

    [3 lines not shown]
DeltaFile
+36-0flang/test/Transforms/licm-nested-hoist-aggressive.fir
+7-0flang/lib/Optimizer/Transforms/LoopInvariantCodeMotion.cpp
+43-02 files

FreeBSD/ports 4ebfa74 — www/p5-Starman Makefile distinfo

www/p5-Starman: update 0.4018 -> 0.4019

Changelog: https://metacpan.org/dist/Starman/changes

Security:       CVE-2026-115824
Security:       CVE-2026-115822
Security:       CVE-2026-115823
Security:       CVE-2026-115817
Security:       CVE-2026-40560
DeltaFile
+3-3www/p5-Starman/distinfo
+1-1www/p5-Starman/Makefile
+4-42 files

FreeBSD/ports 5fedc98 — security/vuxml/vuln 2026.xml

security/vuxml: Document p5-Plack memory allocation vulnerability
DeltaFile
+27-0security/vuxml/vuln/2026.xml
+27-01 files

OPNSense/plugins 51ffb8d — net/netflector/src/etc/rc.syshook.d/carp 20-netflector, net/netflector/src/opnsense/mvc/app/controllers/OPNsense/Netflector/forms dialogEdit.xml

net/netflector: sync with master
DeltaFile
+74-0net/netflector/src/opnsense/mvc/app/models/OPNsense/Netflector/FieldTypes/ServiceTypeField.php
+15-2net/netflector/src/opnsense/mvc/app/models/OPNsense/Netflector/Netflector.xml
+7-8net/netflector/src/opnsense/mvc/app/models/OPNsense/Netflector/FieldTypes/PortListField.php
+12-1net/netflector/src/opnsense/mvc/app/controllers/OPNsense/Netflector/forms/dialogEdit.xml
+5-0net/netflector/src/etc/rc.syshook.d/carp/20-netflector
+3-0net/netflector/src/opnsense/service/templates/OPNsense/Netflector/netflector.toml
+116-113 files not shown
+119-149 files

OPNSense/plugins 4953cd4 — net/netflector Makefile

net/netflector: ready for release
DeltaFile
+1-2net/netflector/Makefile
+1-21 files

FreeBSD/ports 000a835 — www/p5-Plack Makefile distinfo

www/p5-Plack: update 1.0055 -> 1.0057

Changelog: https://metacpan.org/dist/Plack/changes

Security:       CVE-2026-115825
DeltaFile
+3-3www/p5-Plack/distinfo
+1-1www/p5-Plack/Makefile
+4-42 files

FreeBSD/ports 12a9b03 — security/vuxml/vuln 2026.xml

security/vuxml: Document p5-HTTP-Body multiple vulnerabilities
DeltaFile
+64-0security/vuxml/vuln/2026.xml
+64-01 files

FreeBSD/ports 89a2556 — www/p5-Mojo-DOM58 Makefile distinfo

www/p5-Mojo-DOM58: update 3.002 -> 3.003

Changelog: https://metacpan.org/dist/Mojo-DOM58/changes
DeltaFile
+3-3www/p5-Mojo-DOM58/distinfo
+1-1www/p5-Mojo-DOM58/Makefile
+4-42 files

FreeBSD/ports 56d4fe2 — www/p5-Dancer2 Makefile distinfo

www/p5-Dancer2: update 2.2.2 -> 2.3.0

Changelog: https://metacpan.org/dist/Dancer2/changes

Major changes:
    - PR #1866: JSON serializer should not leak file/line detail
    - GH #1794: Add support for HTTP QUERY method.
    - GH #1863: Fix the JSON serializer modifying the data it is given.

Security:       PR #1866: JSON serializer should not leak file/line detail
DeltaFile
+3-3www/p5-Dancer2/distinfo
+1-1www/p5-Dancer2/Makefile
+4-42 files

FreeBSD/ports c8f0e19 — www/p5-HTTP-Body Makefile distinfo

www/p5-HTTP-Body: update 1.23 -> 1.24

Changelog: https://metacpan.org/dist/HTTP-Body/changes

Security:       CVE-2026-116131
Security:       CVE-2026-116132
Security:       CVE-2026-116133
Security:       CVE-2026-116134
Security:       CVE-2026-116135
Security:       CVE-2026-116285
Security:       CVE-2026-116531
DeltaFile
+3-3www/p5-HTTP-Body/distinfo
+1-1www/p5-HTTP-Body/Makefile
+4-42 files

FreeBSD/ports 3b50830 — security/vuxml/vuln 2026.xml

security/vuxml: Document p5-MIME-Tools multiple vulnerabilities
DeltaFile
+58-0security/vuxml/vuln/2026.xml
+58-01 files

FreeBSD/ports 1a4ce17 — mail/p5-MIME-Tools distinfo Makefile

mail/p5-MIME-Tools: update 5.519 -> 5.522

Changelog: https://metacpan.org/dist/MIME-tools/changes

Security:       CVE-2026-116264
Security:       CVE-2026-116265
Security:       CVE-2026-116266
Security:       CVE-2026-116267
Security:       CVE-2026-116268
Security:       CVE-2026-116269
Security:       CVE-2026-116270
Security:       CVE-2026-116271
Security:       CVE-2026-116272
Security:       CVE-2026-116273
DeltaFile
+3-3mail/p5-MIME-Tools/distinfo
+4-2mail/p5-MIME-Tools/Makefile
+7-52 files

FreeBSD/ports 650eca6 — converters/p5-Sereal Makefile distinfo

converters/p5-Sereal: update 5.010 -> 5.011

Changelog: https://metacpan.org/dist/Sereal/changes
DeltaFile
+3-3converters/p5-Sereal/distinfo
+1-1converters/p5-Sereal/Makefile
+4-42 files

FreeBSD/ports 88d540e — converters/p5-Sereal-Decoder Makefile distinfo

converters/p5-Sereal-Decoder: update 5.010 -> 5.011

Changelog: https://metacpan.org/dist/Sereal-Decoder/changes
DeltaFile
+3-3converters/p5-Sereal-Decoder/distinfo
+1-1converters/p5-Sereal-Decoder/Makefile
+4-42 files

FreeBSD/ports a230f02 — converters/p5-Sereal-Encoder Makefile distinfo

converters/p5-Sereal-Encoder: update 5.010 -> 5.011

Changelog: https://metacpan.org/dist/Sereal-Encoder/changes
DeltaFile
+3-3converters/p5-Sereal-Encoder/distinfo
+1-1converters/p5-Sereal-Encoder/Makefile
+4-42 files

FreeBSD/ports f5bd9f0 — security/vuxml/vuln 2026.xml

security/vuxml: Document p5-GD security issues
DeltaFile
+27-0security/vuxml/vuln/2026.xml
+27-01 files

OPNSense/ports 941caa7 — . UIDs GIDs, opnsense/netflector Makefile distinfo

opnsense/netflector: update to 0.17.1

https://github.com/netflector/netflector/releases/tag/v0.17.1

Adds a netflector user and group (678) to UIDs and GIDs: the service now drops root to it.
DeltaFile
+37-13opnsense/netflector/files/netflector.in
+15-15opnsense/netflector/distinfo
+10-7opnsense/netflector/Makefile
+1-1UIDs
+1-1GIDs
+64-375 files

FreeBSD/ports 0b000c2 — graphics/p5-GD Makefile distinfo, graphics/p5-GD/files patch-Makefile.PL

graphics/p5-GD: update 2.83 -> 2.91

Changelog: https://metacpan.org/dist/GD/changes

Port changes:
    - Use CPAN:RURBAN macro, latest releasees are not available in the by-module path
    - Remove patch which looks useless

Security:       CVE-2026-11526
DeltaFile
+0-69graphics/p5-GD/files/patch-Makefile.PL
+3-3graphics/p5-GD/distinfo
+2-1graphics/p5-GD/Makefile
+5-733 files

OPNSense/plugins 3e0e087 — sysutils/dec-hw Makefile, sysutils/dec-hw/src/opnsense/www/js/widgets DecHW.js

sysutils/dec-hw: sync with master
DeltaFile
+6-3sysutils/dec-hw/src/opnsense/www/js/widgets/DecHW.js
+1-1sysutils/dec-hw/Makefile
+7-42 files

OPNSense/plugins f1a1100 — sysutils/dec-hw Makefile

sysutils/dec-hw: bump
DeltaFile
+1-1sysutils/dec-hw/Makefile
+1-11 files

OPNSense/plugins 3be7b20 — www/caddy Makefile pkg-descr, www/caddy/src/opnsense/mvc/app/controllers/OPNsense/Caddy/forms general.xml

www/caddy: sync with master
DeltaFile
+6-0www/caddy/src/opnsense/mvc/app/controllers/OPNsense/Caddy/forms/general.xml
+4-0www/caddy/pkg-descr
+1-2www/caddy/Makefile
+3-0www/caddy/src/opnsense/service/templates/OPNsense/Caddy/Config/Caddyfile
+1-0www/caddy/src/opnsense/mvc/app/models/OPNsense/Caddy/Caddy.xml
+15-25 files

OPNSense/core 9a1d036 — src/etc/inc/plugins.inc.d openssh.inc

system: style fix

(cherry picked from commit 2d6c4707fc1dc12d32f58d3000e4cb7cfd022b67)
DeltaFile
+2-1src/etc/inc/plugins.inc.d/openssh.inc
+2-11 files

OPNSense/core 2d6c470 — src/etc/inc/plugins.inc.d openssh.inc

system: style fix
DeltaFile
+2-1src/etc/inc/plugins.inc.d/openssh.inc
+2-11 files

OPNSense/core ec8d6dc — src/etc rc.routing_configure, src/etc/inc system.inc

System: Routes: Configuration - bold StaticRoute class into legacy code and plugins  for  https://github.com/opnsense/core/issues/10569 (#11104)

As a first step, it's easiest to refactor system_routing_configure() to use our new class and leave the callers alone.
We should likely double check the callers at some point too, but impact is easier to assess when the number of changes is slightly more limited.

With this change in place, you could now configure mulitple paths for the same destination.
DeltaFile
+11-113src/etc/inc/system.inc
+2-92src/etc/inc/plugins.inc.d/dpinger.inc
+4-2src/opnsense/mvc/app/library/OPNsense/System/StaticRoute.php
+0-4src/etc/rc.routing_configure
+17-2114 files

OPNSense/core 810afcd — src/opnsense/mvc/app/views/OPNsense/IPsec sessions.volt

ipsec: refactor sessions page and retain phase 1 grid selection on tunnel start/stop

(cherry picked from commit 783e1f15ec9e45fe11f7874cd281086599e4fdd6)
DeltaFile
+48-35src/opnsense/mvc/app/views/OPNsense/IPsec/sessions.volt
+48-351 files

LLVM/project c649ccf — llvm/lib/Target/AArch64 AArch64ISelLowering.cpp, llvm/test/CodeGen/AArch64 bf16-fp128-converts.ll

[AArch64] Fix non-strict scalar bf16/fp128 conversions (#234868)

Fix crashes when lowering non-strict scalar conversions between bf16
and fp128. Both directions now go through fp32. The fp128-to-bf16 path
uses the existing round-to-odd helper before the final bf16 conversion.

Add codegen tests for both directions, covering scalar returns and
loads/stores with and without bf16 support.

Fixes #172400.
DeltaFile
+272-0llvm/test/CodeGen/AArch64/bf16-fp128-converts.ll
+17-1llvm/lib/Target/AArch64/AArch64ISelLowering.cpp
+289-12 files