OPNSense/plugins ce226aawww/nginx/src/opnsense/service/templates/OPNsense/Nginx http.conf

nginx: fix HTTP/3 reuseport duplicates (#5184)
DeltaFile
+9-2www/nginx/src/opnsense/service/templates/OPNsense/Nginx/http.conf
+9-21 files

OPNSense/plugins 2b98f07security/maltrail/src/etc/rc.d opnsense-maltrailsensor opnsense-maltrailserver

rc.d: use absolute path for python3 in maltrailsensor + maltrailserver (#5466)

service(8) invokes rc.d scripts with PATH=/sbin:/bin:/usr/sbin:/usr/bin
via `env -i`, which does not include /usr/local/bin where python3 lives.
daemon(8)'s execvp("python3") ENOENTs all four PATH entries and the
supervisor exits silently after the pre-detach parent has already
returned 0 to rc.subr. Net result: service start exits 0 with nothing
running, and boot-time autostart is broken when maltrailsensor_enable=YES.

Use absolute path /usr/local/bin/python3 to bypass the PATH lookup,
matching the convention used by other OPNsense plugin rc.d scripts
(stunnel, ddclient, tinc, openconnect).

Validated on OPNsense 26.4 / FreeBSD 14.3-RELEASE-p12 across
3 start/stop cycles + truss re-trace + full cold-start reboot.

Co-authored-by: Tom Reid <tokamaktx at users.noreply.github.com>
DeltaFile
+1-1security/maltrail/src/etc/rc.d/opnsense-maltrailsensor
+1-1security/maltrail/src/etc/rc.d/opnsense-maltrailserver
+2-22 files

OPNSense/core 524440csrc/opnsense/mvc/app/models/OPNsense/Core/ACL ACL.xml

system: sync ACL name

PR: https://github.com/opnsense/core/issues/9471
DeltaFile
+1-1src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
+1-11 files

LLVM/project 24b8cfamlir/test/Target/SPIRV selection.mlir

[mlir][SPIR-V] Add roundtrip and validation test for spirv.Switch (NFC) (#200572)

Add missing `spirv-val` tests for spirv.Switch operation
DeltaFile
+29-0mlir/test/Target/SPIRV/selection.mlir
+29-01 files

LLVM/project 2b95597mlir/test/Conversion/MemRefToSPIRV bitwidth-emulation.mlir

[mlir][SPIR-V] Add i64 tests for MemRef bitwidth emulation (NFC) (#200724)
DeltaFile
+40-1mlir/test/Conversion/MemRefToSPIRV/bitwidth-emulation.mlir
+40-11 files

OPNSense/core 92bdd54src/opnsense/mvc/app/controllers/OPNsense/Base ControllerBase.php

mvc: do not translate empty strings

PR: https://github.com/opnsense/core/issues/10369
DeltaFile
+4-1src/opnsense/mvc/app/controllers/OPNsense/Base/ControllerBase.php
+4-11 files

OpenBSD/src 86rRUSlusr.bin/tmux cmd-run-shell.c tmux.1

   Allow run-shell arguments after a shell command to be expanded as #1, #2
   and so on. From Rasmus Thystrup Karstensen in GitHub issue 5121.
VersionDeltaFile
1.91+15-6usr.bin/tmux/cmd-run-shell.c
1.1059+17-3usr.bin/tmux/tmux.1
1.368+9-2usr.bin/tmux/format.c
+41-113 files

OpenBSD/src 7MAH8Mmusr.bin/ssh session.c

   differentiate between execution failures and subsystem not found when
   logging why a subsystem failed to start; GHPR#637 from cuiweixie
VersionDeltaFile
1.349+27-24usr.bin/ssh/session.c
+27-241 files

OPNSense/core 2210933src/opnsense/mvc/app/controllers/OPNsense/Hostdiscovery/Api ServiceController.php, src/opnsense/scripts/interfaces list_hosts.py

hostwatch: normalize list_hosts output
DeltaFile
+2-2src/opnsense/mvc/app/controllers/OPNsense/Hostdiscovery/Api/ServiceController.php
+2-0src/opnsense/scripts/interfaces/list_hosts.py
+4-22 files

FreeBSD/ports 8fe8a25security/bitwarden-cli distinfo, security/bitwarden-cli/files/packagejsons package-lock.json package.json

security/bitwarden-cli: Update to 2026.5.0

Changelog: https://github.com/bitwarden/clients/releases/tag/cli-v2026.5.0

Reported by:    GitHub (watch releases)
DeltaFile
+2,423-1,565security/bitwarden-cli/files/packagejsons/package-lock.json
+39-38security/bitwarden-cli/files/packagejsons/package.json
+15-0security/bitwarden-cli/files/packagejsons/libs/logging-angular/package.json
+11-0security/bitwarden-cli/files/packagejsons/libs/organization-invite-link/package.json
+5-5security/bitwarden-cli/distinfo
+4-4security/bitwarden-cli/files/packagejsons/apps/cli/package.json
+2,497-1,6124 files not shown
+2,501-1,61610 files

LLVM/project 0cb280fllvm/lib/Target/AArch64 AArch64RegisterInfo.td SMEInstrFormats.td, llvm/lib/Target/AArch64/AsmParser AArch64AsmParser.cpp

[AArch64][llvm] Restrict luti6 (4 regs, 8-bit) to 0 <= Zn <= 7

The `luti6` instruction (table, four registers, 8-bit) should only
allow `0 <= Zn <= 7`, since there's only 3 bits. It actually allows:
```
   luti6 { z0.b - z3.b }, zt0, { z8 - z10 }
```
which produces a duplicate encoding to the following:
```
   luti6 { z0.b - z3.b }, zt0, { z0 - z2 }
```

Fix tablegen to ensure Zn is only allowed in correct range of 0 to 7.
DeltaFile
+15-0llvm/lib/Target/AArch64/AArch64RegisterInfo.td
+5-0llvm/test/MC/AArch64/SME2p3/luti6-diagnostics.s
+4-0llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp
+1-1llvm/lib/Target/AArch64/SMEInstrFormats.td
+25-14 files

LLVM/project fb8cb1blldb/include/lldb/Target Process.h, lldb/source/Plugins/Process/gdb-remote ProcessGDBRemote.cpp ProcessGDBRemote.h

[lldb] Strip pointer metadata in ReadMemoryRanges (#200398)

The Process base class is generally responsible for fixing pointer
metadata before delegating memory reads to concrete Process
specializations. However, ReadMemoryRanges was a direct path into the
derived classes, which made it so that pointer metadata was never
stripped.

This commit creates a non-virtual ReadMemoryRanges in Process, which
clears pointer metadata, before delegating to the new virtual method
DoReadMemoryRanges. This also allows, in the future, to plug into the
memory cache system.
DeltaFile
+86-0lldb/unittests/Target/MemoryTest.cpp
+8-4lldb/include/lldb/Target/Process.h
+11-0lldb/source/Target/Process.cpp
+5-5lldb/source/Plugins/Process/gdb-remote/ProcessGDBRemote.cpp
+4-4lldb/source/Plugins/Process/gdb-remote/ProcessGDBRemote.h
+114-135 files

LLVM/project fe4b56cutils/bazel/llvm-project-overlay/llvm BUILD.bazel

[bazel] Port 7a435ca (#200749)
DeltaFile
+2-2utils/bazel/llvm-project-overlay/llvm/BUILD.bazel
+2-21 files

OPNSense/core 79ee3b4. LICENSE

LICENSE: sync
DeltaFile
+1-1LICENSE
+1-11 files

OPNSense/core f8ff073src/opnsense/scripts/health updaterrd.php

src: typo
DeltaFile
+1-1src/opnsense/scripts/health/updaterrd.php
+1-11 files

LLVM/project 261e0f4libc/config/linux/aarch64 headers.txt, libc/config/linux/riscv headers.txt

[libc] Add netinet/tcp.h header (#200356)

This patch adds the netinet/tcp.h header definition. For now I'm only
adding TCP_NODELAY to it, as that's the only constant specified by
POSIX.

I also include the header in the public headers list for linux targets
and hook it up to the implementation status docs.

I don't add a test as this is just a constant definition, and it would
be very hard to devise (if even possible over a loopback interface) a
test to check that the option has the desired effect (in fact, POSIX
says that an implementation doesn't even have to let you set the
option).

Assisted by Gemini.
DeltaFile
+10-0libc/include/netinet/tcp.yaml
+8-0libc/include/CMakeLists.txt
+3-0libc/utils/docgen/netinet/tcp.yaml
+1-0libc/config/linux/aarch64/headers.txt
+1-0libc/config/linux/riscv/headers.txt
+1-0libc/config/linux/x86_64/headers.txt
+24-02 files not shown
+26-08 files

OPNSense/core fe52ea7src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api InterfaceController.php, src/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes InterfaceField.php

Firewall - fix interface sortng by value for live-log and groups, closes https://github.com/opnsense/core/issues/10348

We might consider moving the sorting logic to BaseListField at some point as most cases expect sort by value anyway and we only have a couple of exceptions to that logic.

(cherry picked from commit 6ffad1bb73da9db36c409130fcf00a9af286f94f)
DeltaFile
+2-1src/opnsense/mvc/app/controllers/OPNsense/Diagnostics/Api/InterfaceController.php
+2-1src/opnsense/mvc/app/models/OPNsense/Firewall/FieldTypes/InterfaceField.php
+4-22 files

LLVM/project 4c23489llvm/lib/CodeGen/SelectionDAG TargetLowering.cpp, llvm/test/CodeGen/Hexagon/autohvx cttz-elts-split.ll

[TargetLowering] Split CTTZ_ELTS when its step vector requires splitting (#197623)

Follow-up to #190914: getLegalMaskAndStepVector() returns an empty
StepVec to signal that the operation should be split. Only
expandVectorFindLastActive handled this; expandCttzElts crashed by
dereferencing the null SDValue during vector op legalization. Apply the
same split-and-recurse strategy, preferring the low half since CTTZ_ELTS
finds the first active lane.

Assisted-by: Anthropic::claude-4.6
DeltaFile
+354-0llvm/test/CodeGen/Hexagon/autohvx/cttz-elts-split.ll
+23-0llvm/lib/CodeGen/SelectionDAG/TargetLowering.cpp
+377-02 files

LLVM/project 78f429cllvm/lib/Target/AArch64 AArch64SVEInstrInfo.td, llvm/test/CodeGen/AArch64 sve2-sra.ll

[AArch64][SVE] Match (add_like x (lsr y, c)) -> usra x, y, c

Modify SVE USRA pattern to accept add_like, so both add and or disjoint
forms can select usra.

Add known-bits support for predicated SVE logical shifts, allowing
or_disjoint matching to prove disjointness for plain ORs where possible.
DeltaFile
+80-0llvm/test/CodeGen/AArch64/sve2-sra.ll
+2-2llvm/lib/Target/AArch64/AArch64SVEInstrInfo.td
+82-22 files

NetBSD/pkgsrc Qg6zyBndoc CHANGES-2026

   Updated net/py-txtorcon, net/py-pyrate-limiter
VersionDeltaFile
1.3408+3-1doc/CHANGES-2026
+3-11 files

NetBSD/pkgsrc qZKpMornet/py-pyrate-limiter distinfo Makefile

   py-pyrate-limiter: updated to 4.2.0

   4.2.0

   Guard sync _delay_waiter against negative wait values from bucket backends
   fix(docs): align docstrings and fix: db_path=None temporary DB behavior
   Typo fix for pypi
   bug fix: Limiter initialization in README for SQLite
   fix: add close() method to avoid ResourceWarning about unclosed transports
VersionDeltaFile
1.3+4-4net/py-pyrate-limiter/distinfo
1.3+4-3net/py-pyrate-limiter/Makefile
+8-72 files

LLVM/project 91b77dcllvm/include/llvm/IR DebugLoc.h, llvm/lib/AsmParser LLParser.cpp

[IR] Don't use TrackingMDNodeRef for DebugLoc (#200649)

TrackingMDNodeRef is expensive and the tracking functionality is only
used when parsing textual LLVM IR. Therefore, store a plain DILocation
pointer in DebugLoc and update the debug locs explicitly when parsing
finishes.

Invalid debug metadata now fails directly at parsing and not (just)
later when verifying. A consequence is that old-style DILocations cannot
be parsed from textual IR anymore.

As related cleanup, remove the now-unused hasTrivialDestructor() on
TrackingMDRef.

While work on changing DILocation to no longer be metadata is on the
way, it is going to take a while to finish, we can get this immediate
performance and max-rss improvement earlier.
DeltaFile
+25-38llvm/include/llvm/IR/DebugLoc.h
+0-42llvm/test/Verifier/dbg-declare-invalid-debug-loc.ll
+38-0llvm/test/Assembler/dbg-declare-invalid-debug-loc.ll
+0-36llvm/unittests/Frontend/OpenMPIRBuilderTest.cpp
+26-2llvm/lib/AsmParser/LLParser.cpp
+6-14llvm/lib/IR/AutoUpgrade.cpp
+95-13229 files not shown
+175-24135 files

FreeNAS/freenas 40d3838src/middlewared/middlewared/plugins/apps cert_attachments.py

NAS-141217 / 27.0.0-BETA.1 / Fix crash on middleware startup (#19044)

Caused by https://github.com/truenas/middleware/pull/19034
DeltaFile
+1-1src/middlewared/middlewared/plugins/apps/cert_attachments.py
+1-11 files

LLVM/project fa02a6ellvm/lib/Transforms/Utils SimplifyCFG.cpp, llvm/test/Transforms/SimplifyCFG rangereduce.ll

[SimplifyCFG] Permit less dense lookup tables (#200664)

It should be most often beneficial to generate a lookup table instead of
a jump table: the lookup table is rarely larger, but saves on
instructions and an indirect branch. Therefore, adjust the lookup table
threshold to match the jump table threshold.

The motivation is clang::Decl::castToDeclContext, which is a rather hot
function when parsing C++ programs, but the switch density is just 38%.
This improves stage2-O0g by 0.17% (7zip/kimwitu++ >0.5%).
DeltaFile
+27-26llvm/test/Transforms/SimplifyCFG/rangereduce.ll
+15-11llvm/lib/Transforms/Utils/SimplifyCFG.cpp
+4-9llvm/test/Transforms/SimplifyCFG/RISCV/switch-of-powers-of-two.ll
+46-463 files

OPNSense/core 95bedd8src/etc/inc/plugins.inc.d ntpd.inc

network time: small cleanups in ntpd_configure_gps()
DeltaFile
+25-25src/etc/inc/plugins.inc.d/ntpd.inc
+25-251 files

NetBSD/pkgsrc GPxa1Yhnet/py-txtorcon distinfo Makefile

   py-txtorcon: updated to 26.6.0

   26.6.0

   * eliminate GeoIP as a dependency
     This will still load Tor's geoip-db if GeoIP is installed, and the database is found.
     Only country-codes are supported by this database.
     Essentially this is just optimization: txtorcon will ask Tor for the country-code of anything interesting via the existing `get_location()` API.
VersionDeltaFile
1.10+4-4net/py-txtorcon/distinfo
1.13+2-3net/py-txtorcon/Makefile
+6-72 files

NetBSD/pkgsrc JtUG14pdoc CHANGES-2026

   Updated devel/py-pip, textproc/py-sphinx-autodoc-typehints, graphics/py-tifffile, misc/py-tibs
VersionDeltaFile
1.3407+5-1doc/CHANGES-2026
+5-11 files

NetBSD/pkgsrc mKSSm01misc/py-tibs distinfo Makefile

   py-tibs: updated to 0.9.0

   0.9.0
   Adding periodic checks for Python signals in more methods that could...
VersionDeltaFile
1.3+4-4misc/py-tibs/distinfo
1.3+2-2misc/py-tibs/Makefile
+6-62 files

NetBSD/pkgsrc TtIqQpsgraphics/py-tifffile distinfo Makefile

   py-tifffile: updated to 2026.6.1

   2026.6.1

   - Replace NullContext with contextlib.nullcontext (breaking).
   - Fix writing monochrome linear_raw
   - Fix keyboard axis selection in imshow interactive viewer
   - Fix reading short ASCII string tag values from NDPI.
   - Add option to suppress writing extrasamples tag.
   - Verify origin of codecs.
VersionDeltaFile
1.64+4-4graphics/py-tifffile/distinfo
1.73+2-2graphics/py-tifffile/Makefile
+6-62 files

LLVM/project 13e62f0llvm/lib/Passes PassBuilderPipelines.cpp, llvm/test/Other new-pm-defaults.ll new-pm-thinlto-postlink-defaults.ll

[LoopInterchange] Enable it by default (#124911)

This enables loop-interchange, which was first discussed here:
https://discourse.llvm.org/t/enabling-loop-interchange/82589

All bugs have been fixed, including DependenceAnalysis, and all
components have at least one maintainer; default enablement is
now meeting the requirements in the Developer's policy.

This has been a major effort by different people, many thanks to:
- Ryotaro Kasuga,
- Madhur Amilkanthwar,
- Sebastian Pop,
- Ehsan Amiri,
- Michael Kruse,
- Nikita Popov,
- Sjoerd Meijer.
DeltaFile
+1-1llvm/lib/Passes/PassBuilderPipelines.cpp
+1-0llvm/test/Other/new-pm-defaults.ll
+1-0llvm/test/Other/new-pm-thinlto-postlink-defaults.ll
+1-0llvm/test/Other/new-pm-thinlto-postlink-pgo-defaults.ll
+1-0llvm/test/Other/new-pm-thinlto-postlink-samplepgo-defaults.ll
+5-15 files