FreeBSD/ports 23bd499 — net-p2p/go-ethereum Makefile distinfo

net-p2p/go-ethereum: Update 1.17.9 => 1.17.10

Changelog:
* This is a quick release that postpones the Amsterdam fork on the
  Hoodi testnet, previously scheduled for Oct 26, 2026, 17:42:48 UTC.
  Hoodi node operators running v1.17.9 must upgrade before then.
  New date will be set in future release; other networks are unaffected.
* Snap sync now switches to snap/2 automatically once Amsterdam is active.
  Use '--snap.v2=false' or '--snap.v2=true' to force a protocol.
* Optimize DUP/SWAP dispatch in the interpreter
https://github.com/ethereum/go-ethereum/releases/tag/v1.17.10

PR:             299947
Approved by:    Enrique Fynn <me at enriquefynn.com> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q4

(cherry picked from commit 85ad0319366a70bd6b9a0d4548e684e469882f23)
DeltaFile
+5-5net-p2p/go-ethereum/distinfo
+1-1net-p2p/go-ethereum/Makefile
+6-62 files

FreeBSD/ports 85ad031 — net-p2p/go-ethereum Makefile distinfo

net-p2p/go-ethereum: Update 1.17.9 => 1.17.10

Changelog:
* This is a quick release that postpones the Amsterdam fork on the
  Hoodi testnet, previously scheduled for Oct 26, 2026, 17:42:48 UTC.
  Hoodi node operators running v1.17.9 must upgrade before then.
  New date will be set in future release; other networks are unaffected.
* Snap sync now switches to snap/2 automatically once Amsterdam is active.
  Use '--snap.v2=false' or '--snap.v2=true' to force a protocol.
* Optimize DUP/SWAP dispatch in the interpreter
https://github.com/ethereum/go-ethereum/releases/tag/v1.17.10

PR:             299947
Approved by:    Enrique Fynn <me at enriquefynn.com> (maintainer)
Approved by:    osa, vvd (Mentors, implicit)
MFH:            2026Q4
DeltaFile
+5-5net-p2p/go-ethereum/distinfo
+1-1net-p2p/go-ethereum/Makefile
+6-62 files

LLVM/project 89585c6 — bolt/lib/Core AddressMap.cpp, bolt/test/RISCV address-map-rv32.s

[BOLT] Fix address map parsing for 32-bit targets (#229567)

## Problem

`AddressMap::emit()` serializes each address-map entry as two 8-byte
values. However, `AddressMap::parse()` used the target code-pointer size
when reading them.

For a 32-bit target, such as RV32, the parser consequently interpreted
every 16-byte entry as two 8-byte entries. This corrupted the parsed map
and could trigger the duplicate-label assertion.

The issue is pre-existing and generic to BOLT. It was exposed by the
RISC-V tests while validating #229407.

## Fix

Define the serialized value and entry sizes once and use them
consistently for both emission and parsing. Address-map parsing is

    [8 lines not shown]
DeltaFile
+17-11bolt/lib/Core/AddressMap.cpp
+27-0bolt/test/RISCV/address-map-rv32.s
+44-112 files

OpenZFS/src 54e6a20 — cmd/zstream zstream_raw.c

zstream: read BLKSSZGET into an int in zstream raw

The BLKSSZGET ioctl stores an int, but zstream raw passed a pointer to
the uint64_t volume.sectorsize.  On little-endian systems this happens
to work because the upper half was already zero, but on big-endian
systems the sector size ends up in the upper 32 bits (512 << 32, or
2 TiB).  free_blocks() then rounds the start of a freed range up to
2 TiB and writes zeros from the start of the range towards it.  On any
smaller device that write fails with ENOSPC at the end of the device,
so zstream raw exits at the first FREE record with a nonzero offset,
after zeroing from that offset to the end of the device.  Every zvol
stream has such a record before its data (the free past the end of the
volume), so zstream raw could not apply a zvol stream to a block
device on big-endian systems at all.

Read the value into an int and assign it.

Reviewed-by: Brian Behlendorf <behlendorf1 at llnl.gov>
Signed-off-by: Will Rouesnel <wrouesnel at wrouesnel.com>
Closes #19324
DeltaFile
+4-1cmd/zstream/zstream_raw.c
+4-11 files

OpenZFS/src 21a8964 — cmd/zpool zpool_vdev.c

zpool: compare special and dedup vdevs only with normal vdevs

Since 1d9c32c16 a special or dedup vdev may be more redundant than the
normal vdevs, but get_replication() still compared each special or dedup
vdev with the previous special or dedup vdev.  A pool with a 3-way
special mirror and a 2-way dedup mirror on 2-way mirror normal vdevs,
each of which is individually acceptable, was therefore reported as
inconsistent.  check_replication() skips all checks for an inconsistent
pool, so a later non-redundant addition was accepted without -f:

  zpool create tank mirror f1 f2 special mirror f3 f4 f5
  zpool add tank dedup mirror f6 f7    # accepted
  zpool add tank f8                    # accepted without -f

At the same time, creating the same layout in one step was rejected:

  zpool create tank mirror f1 f2 special mirror f3 f4 f5 \
      dedup mirror f6 f7               # rejected


    [14 lines not shown]
DeltaFile
+40-18cmd/zpool/zpool_vdev.c
+40-181 files

OpenZFS/src fb9fa8a — tests/runfiles common.run, tests/zfs-tests/tests Makefile.am

ZTS: test replication checks with mixed special and dedup

Add alloc_class_018_pos.  It creates a 2-way mirror pool with a 3-way
special mirror and a 2-way dedup mirror, both in one step and with
'zpool add', and checks that adding a single disk to it is refused
without -f.  It also checks that a less redundant dedup device is
rejected when added together with a more redundant special device.

This currently fails: creating the pool in one step is rejected as an
inconsistent replication level, while building it with 'zpool add'
succeeds and the pool is then considered inconsistent, so the single
disk is accepted without -f.  The fix follows in the next commit.

Reviewed-by: Brian Behlendorf <behlendorf1 at llnl.gov>
Signed-off-by: Will Rouesnel <wrouesnel at wrouesnel.com>
Closes #19288
DeltaFile
+82-0tests/zfs-tests/tests/functional/alloc_class/alloc_class_018_pos.ksh
+1-1tests/runfiles/common.run
+1-0tests/zfs-tests/tests/Makefile.am
+84-13 files

LLVM/project 7baaab1 — libc/src/__support/macros attributes.h, libc/src/mathvec asinf.h acospif.h

[libc][mathvec] Add macro for vector PCS (#235009)

Adds LIBC_VECTOR_PCS as a macro to mathvec, which allows target specific
vector procedure call standards to be added as function attributes, such
as aarch64_vector_pcs for AdvSIMD.
DeltaFile
+5-3libc/src/mathvec/aarch64/expf.cpp
+6-0libc/src/__support/macros/attributes.h
+2-1libc/src/mathvec/asinf.h
+2-1libc/src/mathvec/acospif.h
+2-1libc/src/mathvec/acoshf.h
+2-1libc/src/mathvec/acosf.h
+19-729 files not shown
+77-3635 files

LLVM/project 4b984e0 — clang/unittests/Format FormatTest.cpp, libc/include/llvm-libc-types EFI_TABLE_HEADER.h

Merge branch 'main' into users/david-xl/memprof-matching-calls
DeltaFile
+92-68mlir/lib/Interfaces/ControlFlowInterfaces.cpp
+129-1mlir/unittests/Interfaces/ControlFlowInterfacesTest.cpp
+15-1clang/unittests/Format/FormatTest.cpp
+7-2libc/src/__support/OSUtil/uefi/io.h
+7-2libc/src/__support/OSUtil/uefi/io.cpp
+7-2libc/include/llvm-libc-types/EFI_TABLE_HEADER.h
+257-7632 files not shown
+432-12538 files

FreeBSD/ports e51b5d2 — www/immich-public-proxy distinfo Makefile

www/immich-public-proxy: Update to 4.1.1

Changelog: https://github.com/alangrainger/immich-public-proxy/releases/tag/v4.1.1

Sponsored by:   Netzkommune GmbH
DeltaFile
+45-19www/immich-public-proxy/pkg-plist
+24-13www/immich-public-proxy/Makefile
+5-5www/immich-public-proxy/distinfo
+74-373 files

FreeBSD/ports 8bcce67 — security/vuxml/vuln 2026.xml

security/vuxml: Document ca_root_nss vulnerability

Sponsored by:   Netzkommune GmbH
DeltaFile
+44-0security/vuxml/vuln/2026.xml
+44-01 files

FreeBSD/ports 07170d6 — misc/py-insightface Makefile distinfo

misc/py-insightface: Update to 2.1

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3misc/py-insightface/distinfo
+2-2misc/py-insightface/Makefile
+5-52 files

FreeBSD/ports 57df141 — www/bunkerweb pkg-plist, www/bunkerweb/files patch-src_bw_lua_bunkerweb_pushswap.lua patch-src_common_confs_init-worker-lua.conf

www/bunkerweb: Update to 1.6.17

This release fixes several access control issues, among them a URI
rewrite in a custom configuration that skipped the bans, lists, rate
limit, antibot, authentication and ModSecurity checks.

Changelog: https://github.com/bunkerity/bunkerweb/releases/tag/v1.6.17

Sponsored by:   Netzkommune GmbH
DeltaFile
+517-1www/bunkerweb/pkg-plist
+27-27www/bunkerweb/files/patch-src_common_confs_init-stream-lua.conf
+27-27www/bunkerweb/files/patch-src_common_confs_init-lua.conf
+19-10www/bunkerweb/files/patch-src_bw_lua_bunkerweb_api.lua
+7-7www/bunkerweb/files/patch-src_common_confs_init-worker-lua.conf
+11-0www/bunkerweb/files/patch-src_bw_lua_bunkerweb_pushswap.lua
+608-723 files not shown
+613-779 files

FreeBSD/ports c087e83 — graphics/py-rapidocr Makefile distinfo, graphics/py-rapidocr/files patch-pyproject.toml

graphics/py-rapidocr: Update to 3.10.0

Changelog: https://github.com/RapidAI/RapidOCR/releases/tag/v3.10.0

Sponsored by:   Netzkommune GmbH
DeltaFile
+3-3graphics/py-rapidocr/distinfo
+3-2graphics/py-rapidocr/files/patch-pyproject.toml
+1-1graphics/py-rapidocr/Makefile
+7-63 files

FreeBSD/ports 42a052f — textproc/py-wcmatch Makefile distinfo

textproc/py-wcmatch: update to 11.2

Changes:        https://github.com/facelessuser/wcmatch/releases/tag/11.2
Reported-by:    portscout, repology
DeltaFile
+3-3textproc/py-wcmatch/distinfo
+1-1textproc/py-wcmatch/Makefile
+4-42 files

FreeBSD/ports 2002ccd — textproc/py-bracex Makefile distinfo

textproc/py-bracex: update to 3.2

Changes:        https://github.com/facelessuser/bracex/releases/tag/3.2
Reported-by:    portscout, repology
DeltaFile
+3-3textproc/py-bracex/distinfo
+1-1textproc/py-bracex/Makefile
+4-42 files

FreeBSD/src 91bff7d — sys/netinet in_pcb_var.h in_pcb.h, sys/netinet6 in6_pcb.c

Revert "inpcb: add single peer local port caching"

This reverts commit 289082428c764ed282623cc6f7ee9b7448fddad1.

Requested by:   markj
DeltaFile
+1-243sys/netinet/in_pcb.c
+1-1sys/netinet/in_pcb.h
+0-1sys/netinet6/in6_pcb.c
+0-1sys/netinet/in_pcb_var.h
+2-2464 files

LLVM/project 338b514 — llvm/lib/Target/AMDGPU SIISelLowering.cpp, llvm/test/CodeGen/AMDGPU inline-asm-16bit-physreg-no-true16-err.ll

AMDGPU: Reject 16-bit physical register inline asm constraints without true16

Constraints naming 16-bit physical registers such as {v1.l}, {v1.h},
{s1.l} or {a1.l} were accepted on subtargets without true16, which
then hit an assertion in copyPhysReg. Report the constraint as
unallocatable instead.

Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+58-0llvm/test/CodeGen/AMDGPU/inline-asm-16bit-physreg-no-true16-err.ll
+5-1llvm/lib/Target/AMDGPU/SIISelLowering.cpp
+63-12 files

LLVM/project e958faf — clang/lib/Format TokenAnnotator.cpp ContinuationIndenter.cpp, clang/unittests/Format FormatTest.cpp

[clang-format] Handle TT_EnumEqual in expression precedence and RHS indentation (#232918)

Follow-up to #223011 and #223435; Fixes #231986

When #194154 changed enum assignment `=` from `TT_BinaryOperator` to
`TT_EnumEqual`, `ExpressionParser::getCurrentPrecedence()` and
`ContinuationIndenter::addTokenOnCurrentLine()` were not updated to
check `TT_EnumEqual`:

1. Because `ExpressionParser::getCurrentPrecedence()` ignored
`TT_EnumEqual`, an enum initializer with a binary expression (such as
`FLAG = 1 << 21`) was not split at `=`. Instead, `FakeLParens` for the
RHS operator was attached to the enum identifier itself, causing
`moveStatePastFakeLParens()` and `getNewLineColumn()` to apply
`ContinuationIndentWidth` twice (+8 spaces instead of +4) when breaking
after `=`.
2. When `<EnumIdentifier> = <FirstOperand>` fit within the column limit,
both the double indentation penalty after `=` and the missing
`TT_EnumEqual` check in `ContinuationIndenter::addTokenOnCurrentLine()`

    [8 lines not shown]
DeltaFile
+15-1clang/unittests/Format/FormatTest.cpp
+1-1clang/lib/Format/TokenAnnotator.cpp
+1-1clang/lib/Format/ContinuationIndenter.cpp
+17-33 files

FreeBSD/ports 9cb3821 — devel/py-lazr.delegates distinfo Makefile

devel/py-lazr.delegates: Update to 4.0.0

PR:             299722
Reported by:    Patrick Crandol <patrick _at__ crandol.com>
DeltaFile
+6-4devel/py-lazr.delegates/Makefile
+3-3devel/py-lazr.delegates/distinfo
+9-72 files

FreeNAS/freenas 5df12f2 — src/middlewared/middlewared/alert/source security.py, src/middlewared/middlewared/etc_files shadow.mako

NAS-144865 / 27.0.0 / Fix crashes when `min_password_age` is `None` (#20046)

* Fix `shadow` generation silent crash
* Fix `user.set_password` crash on DS account (now raises a proper error
instead)
* Fix min_password_age check crash if password age is null
DeltaFile
+51-0tests/unit/test_shadow_account_policy.py
+20-19src/middlewared/middlewared/plugins/account.py
+16-0tests/directory_services/test_directory_services_basic.py
+11-0tests/api2/test_password_reset.py
+7-3src/middlewared/middlewared/alert/source/security.py
+4-1src/middlewared/middlewared/etc_files/shadow.mako
+109-236 files

FreeNAS/freenas a46d3f1 —

Empty commit to create PR on github.

You should reset it
DeltaFile
+0-00 files

FreeNAS/freenas e9d7b50 — src/middlewared/middlewared auth.py, src/middlewared/middlewared/plugins auth.py

NAS-144873 / 27.0.0 / Fix `become_readonly` in token sessions (#20048)

`become_readonly` updates `app.authenticated_credentials.user` changing
its privilege.

`TokenSessionManagerCredentials` maintain reference to its parent
credentials user, so when `become_readonly` is called in a token
session, the parent session is also affected.

Additionally, `TokenSessionManagerCredentials` ignored its assigned
`allowlist` and reported parent session roles.
DeltaFile
+81-0tests/api2/test_privilege_become_readonly.py
+15-3src/middlewared/middlewared/auth.py
+8-1src/middlewared/middlewared/plugins/auth.py
+104-43 files

LLVM/project 6f77544 — llvm/lib/Target/PowerPC PPCTargetMachine.cpp PPCTLSDynamicCall.cpp, llvm/test/CodeGen/PowerPC O3-pipeline.ll O0-pipeline.ll

PowerPC: Remove LiveVariables run and unused LiveIntervals requirement

PPCTLSDynamicCall has not used LiveIntervals since 3ff319c69047, but
still required the analysis. LiveIntervals requires there to be no
unreachable blocks or otherwise it asserts. These blocks were
indirectly removed by adding the extra LiveVariables run, because
LiveVariables has a declared requirement on
UnreachableMachineBasicBlockElim.

Drop the dead analysis requirements along with the LiveVariables run.
This also avoids computing LiveIntervals at -O0 for PIC.

Co-authored-by: Claude Opus 5.5 <noreply at anthropic.com>
DeltaFile
+54-0llvm/test/CodeGen/PowerPC/tls-dynamic-call-unreachable-block.ll
+2-9llvm/lib/Target/PowerPC/PPCTLSDynamicCall.cpp
+1-7llvm/lib/Target/PowerPC/PPCTargetMachine.cpp
+0-5llvm/test/CodeGen/PowerPC/O0-pipeline.ll
+0-4llvm/test/CodeGen/PowerPC/O3-pipeline.ll
+57-255 files

LLVM/project 11445be — libc/include/llvm-libc-types EFI_TABLE_HEADER.h EFI_SYSTEM_TABLE.h, libc/src/__support/OSUtil/uefi io.h io.cpp

[libc][uefi][NFC] Update file headers to the current format (#235032)

Replace the legacy titled separator comments across the UEFI sources and
type headers with the Doxygen file header block. This brings the UEFI
files in line with the current LLVM coding standards.
DeltaFile
+7-2libc/src/__support/OSUtil/uefi/io.h
+7-2libc/src/__support/OSUtil/uefi/io.cpp
+7-2libc/include/llvm-libc-types/EFI_TABLE_HEADER.h
+7-2libc/include/llvm-libc-types/EFI_SYSTEM_TABLE.h
+7-2libc/include/llvm-libc-types/EFI_STATUS.h
+7-2libc/include/llvm-libc-types/EFI_HANDLE.h
+42-1224 files not shown
+188-3830 files

LLVM/project 55d1d7e — llvm/lib/CodeGen BasicBlockSections.cpp BasicBlockMatchingAndInference.cpp

[CodeGen] Assume BBIDs are set in BasicBlockSections and matching/inference (#235056)

MachineFunction::CreateMachineBasicBlock always assigns a BBID when
-basic-block-sections=list (or the BB address map) is enabled. Both the
hot-cluster construction in BasicBlockSections and
BasicBlockMatchingAndInference::initWeightInfoByBBID only run in list
mode, so the checks for a missing BBID, and the fallback to the block
number, are dead code. Remove them.
DeltaFile
+2-5llvm/lib/CodeGen/BasicBlockSections.cpp
+2-5llvm/lib/CodeGen/BasicBlockMatchingAndInference.cpp
+4-102 files

LLVM/project 48a2034 — clang/unittests/CIR ControlFlowTest.cpp, mlir/lib/Interfaces ControlFlowInterfaces.cpp

Reland "[mlir] Fix false positive loops in RegionBranchOpInterface::hasLoop" (#234591)

Relands #233784, reverted in #234573 because it broke two CIR unit
tests.

Those tests expected hasLoop() to be true for cir.await and
cir.coroutine, although neither has a cycle: resume is reachable from
ready both directly and through suspend, and the coroutine reaches exit
and destroy along several paths. That was the false positive this change
fixes. The relanded change updates both expectations to false.

Original description:

`RegionBranchOpInterface::hasLoop` reported a loop whenever its
traversal popped a region it had already visited. The worklist gets one
entry per successor of each terminator, so a region reachable along two
paths was popped twice even without a cycle, for example when two
terminators of a region branch to the same successor region.


    [7 lines not shown]
DeltaFile
+92-68mlir/lib/Interfaces/ControlFlowInterfaces.cpp
+129-1mlir/unittests/Interfaces/ControlFlowInterfacesTest.cpp
+2-5clang/unittests/CIR/ControlFlowTest.cpp
+223-743 files

LLVM/project c414de2 — llvm/lib/Transforms/IPO MemProfContextDisambiguation.cpp, llvm/test/Transforms/MemProfContextDisambiguation matching-calls.ll mergenodes-matching-calls.ll

[MemProf] Fix remapping of matching calls when assigning function clones

When a function has several calls with identical callsite metadata, they
are recorded on one context node with the extra calls in
Node->MatchingCalls. If that function is cloned by context
disambiguation, assignFunctions must remap each version's matching calls
through the function clone's CallMap, the same way it remaps the primary
Call.

Two problems in the IR path:

* AssignCallsiteCloneToFuncClone rewrote the matching calls of the
  original node (Node->MatchingCalls) instead of those of the callsite
  clone being assigned. The clone node (whose MatchingCalls were copied
  from the original at creation) kept the original instructions, and the
  original node's list was overwritten with the clone's. UpdateCalls then
  updated each function version's matching calls with the other version's
  callee clone, i.e. swapped.


    [16 lines not shown]
DeltaFile
+193-0llvm/test/Transforms/MemProfContextDisambiguation/mergenodes-matching-calls.ll
+41-29llvm/lib/Transforms/IPO/MemProfContextDisambiguation.cpp
+54-0llvm/test/Transforms/MemProfContextDisambiguation/matching-calls.ll
+288-293 files

FreeBSD/src f172668 — sys/net iflib.c

iflib: Do not pull up trailing IPv4 fragments to the L4 header

iflib_parse_header() pulls every IPv4 packet up to the end of the TCP or
UDP header, including fragments at a non-zero offset, which carry no L4
header at all.  A trailing fragment shorter than that header (1-7 bytes
of UDP, 1-19 bytes of TCP) makes m_pullup() fail and the frame is freed
without a trace in the interface counters.

Only parse the L4 header on the first fragment.  TSO never produces
fragments, so assert that.

With a 1500-byte MTU every UDP datagram of 1473-1479 bytes is lost
behind a forwarding host whose ingress NIC sets receive checksum flags,
or on any VLAN with hardware tagging.  SIP over UDP is a common victim.

Reported by:    Alex Roberts
Reviewed by:    gallatin
Fixes:          c224b2ce7de0 ("iflib: don't pullup UDP payloads to the TCP header size")
See also:       https://redmine.pfsense.org/issues/17196

    [2 lines not shown]
DeltaFile
+11-4sys/net/iflib.c
+11-41 files

FreeBSD/src c31cc43 — usr.bin/sockstat main.c

sockstat: improve consistency

Include the entries of the BBLOG STATE column in the computation
of the column width as done also for other columns.
Also set first to falso only when needed.

Sponsored by:   Netflix, Inc.

(cherry picked from commit 732c8d2a1a0e169bad1c02b1e54a4306861bde4a)
DeltaFile
+5-1usr.bin/sockstat/main.c
+5-11 files

FreeBSD/ports 82c7331 — multimedia/kdenlive Makefile, multimedia/mlt7-qt Makefile

*/*: Rebuild after fixing qt6-base

PR:             299633
Reported by:    Benoit Felix

(cherry picked from commit e7153f0163a0526a547b5d4bc697b8869d2da11d)
DeltaFile
+1-1multimedia/mlt7-qt/Makefile
+1-1multimedia/kdenlive/Makefile
+1-0net-p2p/qbittorrent/Makefile
+1-0multimedia/shotcut-qt6/Makefile
+4-24 files