HardenedBSD/src a8d8953lib/libc/tests/secure fortify_uio_test.c, sbin/ifconfig ifgif.c

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+270-34sys/net/if_gif.c
+194-0sbin/ifconfig/ifgif.c
+160-0tests/sys/netlink/test_rtnl_gif.c
+51-83sys/kern/kern_malloc.c
+80-20lib/libc/tests/secure/fortify_uio_test.c
+42-30sys/vm/uma_core.c
+797-16721 files not shown
+977-24127 files

HardenedBSD/src 78e8b0esbin/nvmecontrol nvmecontrol.8, sys/dev/acpica acpi.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+35-24sys/dev/acpica/acpi.c
+4-6sys/vm/uma_core.c
+4-4sys/kern/imgact_elf.c
+5-1sbin/nvmecontrol/nvmecontrol.8
+5-0sys/dev/igc/igc_base.c
+53-355 files

HardenedBSD/src aefd85fshare/man/man4 mt7921.4, sys/contrib/dev/mediatek/mt76 zzz_fw_ports_fwget.sh

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+25-39share/man/man4/mt7921.4
+17-8sys/contrib/dev/mediatek/mt76/zzz_fw_ports_fwget.sh
+24-0usr.sbin/fwget/pci/pci_network_ittim
+7-7usr.sbin/fwget/pci/pci_network_mediatek
+1-0usr.sbin/fwget/pci/pci
+74-545 files

HardenedBSD/src cecb0f4sys/dev/igc igc_base.c

igc: Apply ASPM L1.2 workaround to all I226 devices

Classify I226_LMVP and I226_BLANK_NVM as I226 silicon so they
receive the I226-specific ASPM L1.2 workaround.

PR:             279245
MFC after:      1 week
Pull-Request:   https://github.com/freebsd/freebsd-src/pull/2318
DeltaFile
+5-0sys/dev/igc/igc_base.c
+5-01 files

FreeBSD/src cecb0f4sys/dev/igc igc_base.c

igc: Apply ASPM L1.2 workaround to all I226 devices

Classify I226_LMVP and I226_BLANK_NVM as I226 silicon so they
receive the I226-specific ASPM L1.2 workaround.

PR:             279245
MFC after:      1 week
Pull-Request:   https://github.com/freebsd/freebsd-src/pull/2318
DeltaFile
+5-0sys/dev/igc/igc_base.c
+5-01 files

FreeBSD/doc 610d2a4website/content/en/releases/15.1R upgrading.adoc

15.1: Tidy architecture notes

CPU architectures have a lot of names,
only use the names we've been using consistently.

Reviewed by:    emaste
DeltaFile
+4-6website/content/en/releases/15.1R/upgrading.adoc
+4-61 files

FreeBSD/ports 5cf2ccccad/cura Makefile, devel/py-trimesh Makefile

all: expire indirect consumers of lang/cython0 on 2026-09-15
DeltaFile
+4-1science/py-chempy/Makefile
+4-1net/py-pytradfri/Makefile
+4-1games/unknown-horizons/Makefile
+4-1devel/py-trimesh/Makefile
+4-1cad/cura/Makefile
+4-0misc/py-torch-geometric/Makefile
+24-56 files

HardenedBSD/ports 5cf2ccccad/cura Makefile, devel/py-trimesh Makefile

all: expire indirect consumers of lang/cython0 on 2026-09-15
DeltaFile
+4-1science/py-chempy/Makefile
+4-1net/py-pytradfri/Makefile
+4-1games/unknown-horizons/Makefile
+4-1devel/py-trimesh/Makefile
+4-1cad/cura/Makefile
+4-0misc/py-torch-geometric/Makefile
+24-56 files

LLVM/project 9001032libc/hdr elf_proxy.h CMakeLists.txt, libc/include CMakeLists.txt elf.yaml

[libc] Move generated elf header to include (#211428)

The fact that `hdr/elf_proxy.h` was generated with headergen was causing
dependency issues. This shouldn't be necessary, and this PR moves it out
into `include` to avoid needing headergen for an overlay build.

Assisted-by: Automated tooling, human reviewed.
DeltaFile
+667-0libc/include/llvm-libc-proxy/elf_proxy.yaml
+2-664libc/include/elf.yaml
+59-0libc/include/llvm-libc-proxy/CMakeLists.txt
+4-52libc/hdr/CMakeLists.txt
+5-47libc/include/CMakeLists.txt
+27-0libc/hdr/elf_proxy.h
+764-7633 files not shown
+773-7779 files

LLVM/project 0973493.github/workflows llvm-abi-tests.yml

workflows/llvm-abi-tests: Cache the baseline abi (#211968)

This way we don't need to recompute it for every workflow.
DeltaFile
+23-0.github/workflows/llvm-abi-tests.yml
+23-01 files

FreeNAS/freenas 8d29e94src/middlewared/middlewared/etc_files/local snmpd.conf.mako

Key the SNMP sysObjectID off hardware rather than the license

This commit adds changes to derive the sysObjectID suffix from the new hardware identity package instead of system.is_enterprise. sysObjectID is meant to tell a monitoring station what kind of box it is talking to, so a licensing predicate was never the right input - the same physical chassis was advertising a different identity depending on whether a license happened to be installed.

The emitted value changes for some systems: a licensed Mini or whitebox now reports 1 instead of 2, and an unlicensed single-controller iX box reports 2 instead of 1. Physical iX hardware and HA VMs are unaffected. That is observable to anything polling us over SNMP, since a station keys its polling template off this value, so it wants a release note.

Worth noting this file has no test coverage and etc_files is excluded from mypy, so CI says nothing about it. The template was compiled and rendered locally against each hardware class to confirm the polarity and that the OID prefix is unchanged.
DeltaFile
+3-1src/middlewared/middlewared/etc_files/local/snmpd.conf.mako
+3-11 files

FreeBSD/src 868158fsbin/nvmecontrol nvmecontrol.8

nvmecontrol.8: Explain non-operational power modes

`nvmecontrol power -l ...` lists the available power modes.
Non-operational modes are marked with an asterisk. While here,
add <device-id | namespace-id> to the "nvmecontrol power" synopsis.

MFC after:              3 days
Reviewed by:            dab, imp, michaelo, ziaee
Differential Revision:  https://reviews.freebsd.org/D58480
DeltaFile
+5-1sbin/nvmecontrol/nvmecontrol.8
+5-11 files

HardenedBSD/src 868158fsbin/nvmecontrol nvmecontrol.8

nvmecontrol.8: Explain non-operational power modes

`nvmecontrol power -l ...` lists the available power modes.
Non-operational modes are marked with an asterisk. While here,
add <device-id | namespace-id> to the "nvmecontrol power" synopsis.

MFC after:              3 days
Reviewed by:            dab, imp, michaelo, ziaee
Differential Revision:  https://reviews.freebsd.org/D58480
DeltaFile
+5-1sbin/nvmecontrol/nvmecontrol.8
+5-11 files

FreeNAS/freenas 216bffdsrc/middlewared/middlewared/pytest/unit/utils test_hardware_probe.py test_hardware_classify.py, src/middlewared/middlewared/utils/hardware __init__.py types.py

Add a hardware identity package and route entitlements through it

This commit adds changes to pull hardware detection out of the entitlement engine into utils/hardware, split into a pure classifier that takes DMI values as arguments and a probe that owns the one impure step. Detecting what a machine is was never an entitlement concern, and keeping the classifier pure means it is testable without mocking anything.

HA virtual machines are now recognised. IXKVM comes out of the QEMU manufacturer plus the node serial convention, and bhyve is only treated as HA when the TrueNAS_A/TrueNAS_B backplane device is actually attached, so ordinary development bhyve VMs are not swept in. Both map to TrueNAS hardware, which moves them from the community to the hardware side of the feature matrix: an unlicensed HA VM loses dedup and gains SED, and a licensed HA VM without the fibre channel key gains fibre channel. That is a deliberate call - an HA VM stands in for an appliance and should be entitled as one.

The whole answer is cached for the life of the process since nothing it reads can change without a reboot, and the backplane scan only runs when DMI already says the guest is bhyve. The backplane probe reads sysfs rather than going through udev; the two resolve to the same file and sysfs does not need udevd running. The mypy workflow picks up the new package, without which it would not be type checked at all.
DeltaFile
+151-0src/middlewared/middlewared/pytest/unit/utils/test_hardware_classify.py
+81-0src/middlewared/middlewared/utils/hardware/classify.py
+70-0src/middlewared/middlewared/utils/hardware/probe.py
+68-0src/middlewared/middlewared/utils/hardware/types.py
+59-0src/middlewared/middlewared/pytest/unit/utils/test_hardware_probe.py
+31-0src/middlewared/middlewared/utils/hardware/__init__.py
+460-06 files not shown
+488-4812 files

LLVM/project b051169clang/lib/CIR/CodeGen CIRGenBuiltinAMDGPU.cpp, clang/test/CIR/CodeGenHIP builtins-amdgcn-vi-f16.hip builtins-amdgcn.hip

[CIR][AMDGPU] Add support for AMDGCN ldexp builtins (#198087)

Adds support for the following AMDGCN ldexp builtins:

- __builtin_amdgcn_ldexp (double)
- __builtin_amdgcn_ldexpf (float)
- __builtin_amdgcn_ldexph (half)

These are lowered to the `llvm.ldexp` intrinsic.
DeltaFile
+14-4clang/lib/CIR/CodeGen/CIRGenBuiltinAMDGPU.cpp
+16-0clang/test/CIR/CodeGenHIP/builtins-amdgcn.hip
+10-0clang/test/CIR/CodeGenHIP/builtins-amdgcn-vi-f16.hip
+40-43 files

LLVM/project 362d72fflang/test/Semantics modfile84.f90 modfile85.f90

[flang][NFC] Rename modfile84.f90 to modfile85.f90 (#213371)

Avoid clash on case insensitive system
DeltaFile
+0-46flang/test/Semantics/modfile84.f90
+46-0flang/test/Semantics/modfile85.f90
+46-462 files

NetBSD/pkgsrc-wip 6ef87adCodeWhale COMMIT_MSG Makefile

Update CodeWhale to v.0.9.3
DeltaFile
+117-117CodeWhale/distinfo
+38-38CodeWhale/cargo-depends.mk
+3-3CodeWhale/Makefile
+1-1CodeWhale/COMMIT_MSG
+159-1594 files

HardenedBSD/ports 6d360dddevel/electron39 Makefile, devel/electron39/files patch-sandbox_policy_openbsd_sandbox__openbsd.cc patch-chrome_browser_about__flags.cc

devel/electron39: Remove expired port

2026-06-30 devel/electron39: EOLed upstream, switch to newer version
DeltaFile
+0-14,701devel/electron39/files/packagejsons/yarn.lock
+0-945devel/electron39/files/packagejsons/.yarn/releases/yarn-4.12.0.cjs
+0-470devel/electron39/files/patch-rust-1.95
+0-446devel/electron39/Makefile
+0-403devel/electron39/files/patch-chrome_browser_about__flags.cc
+0-399devel/electron39/files/patch-sandbox_policy_openbsd_sandbox__openbsd.cc
+0-17,3641,662 files not shown
+1-58,8731,668 files

FreeBSD/ports 6d360dddevel/electron39 Makefile, devel/electron39/files patch-services_device_hid_hid__service__fido.cc patch-chrome_browser_about__flags.cc

devel/electron39: Remove expired port

2026-06-30 devel/electron39: EOLed upstream, switch to newer version
DeltaFile
+0-14,701devel/electron39/files/packagejsons/yarn.lock
+0-945devel/electron39/files/packagejsons/.yarn/releases/yarn-4.12.0.cjs
+0-470devel/electron39/files/patch-rust-1.95
+0-446devel/electron39/Makefile
+0-403devel/electron39/files/patch-chrome_browser_about__flags.cc
+0-399devel/electron39/files/patch-services_device_hid_hid__service__fido.cc
+0-17,3641,662 files not shown
+1-58,8731,668 files

FreeBSD/ports 5d1171ccomms/zigbee2mqtt Makefile, security/caldera Makefile

all: expire direct consumers of www/node20 on 2026-09-30

This happens to be the date when www/qt5-webengine expires, which
is also a node20 consumer (on i386, same for qt6-webengine).
DeltaFile
+2-2security/caldera/Makefile
+4-0comms/zigbee2mqtt/Makefile
+2-1www/qt6-webengine/Makefile
+8-33 files

HardenedBSD/ports 5d1171ccomms/zigbee2mqtt Makefile, security/caldera Makefile

all: expire direct consumers of www/node20 on 2026-09-30

This happens to be the date when www/qt5-webengine expires, which
is also a node20 consumer (on i386, same for qt6-webengine).
DeltaFile
+2-2security/caldera/Makefile
+4-0comms/zigbee2mqtt/Makefile
+2-1www/qt6-webengine/Makefile
+8-33 files

HardenedBSD/ports 4fab9b8textproc/sigil Makefile, textproc/sigil/files patch-sigil-sh

textproc/sigil: Add patch to workaround crash on close

Add a patch to workaround for issue:
https://github.com/Sigil-Ebook/Sigil/issues/874

Bump port revision.

PR:             296967
Reported-by:    Jonathan Chen <jonc at chen.org.nz> (maintainer)
DeltaFile
+16-0textproc/sigil/files/patch-sigil-sh
+1-0textproc/sigil/Makefile
+17-02 files

FreeBSD/ports 4fab9b8textproc/sigil Makefile, textproc/sigil/files patch-sigil-sh

textproc/sigil: Add patch to workaround crash on close

Add a patch to workaround for issue:
https://github.com/Sigil-Ebook/Sigil/issues/874

Bump port revision.

PR:             296967
Reported-by:    Jonathan Chen <jonc at chen.org.nz> (maintainer)
DeltaFile
+16-0textproc/sigil/files/patch-sigil-sh
+1-0textproc/sigil/Makefile
+17-02 files

LLVM/project 38d2732llvm/include/llvm/Transforms/Scalar DropUnnecessaryAssumes.h, llvm/lib/Transforms/Scalar DropUnnecessaryAssumes.cpp

[DropAssumes] Print drop-deref in pipeline where appropriate (#211905)

drop-deref was added as an option in #166947 and is parsed correctly,
but is not serialized. This can make it difficult to reduce test cases,
especially automatically with llvm/utils/reduce_pipeline.py.

This patch implements printPipeline() to serialize drop-deref where
appropriate.
DeltaFile
+8-0llvm/lib/Transforms/Scalar/DropUnnecessaryAssumes.cpp
+3-0llvm/test/Other/new-pm-print-pipeline.ll
+3-0llvm/include/llvm/Transforms/Scalar/DropUnnecessaryAssumes.h
+14-03 files

NetBSD/pkgsrc Wvzv1xkdoc CHANGES-2026

   doc: Updated news/eilmeldung to 1.7.1
VersionDeltaFile
1.4876+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc LgBFV8anews/eilmeldung Makefile cargo-depends.mk

   news/eilmeldung: update to 1.7.1

   1.7.1 - 2026-07-27

   This is a minor release with mainly bugfixes. However, there is a kind of breaking change:

       breaking change for scoop users: eilmeldung is now in scoop main.

       bugfix in article content display
           no content is shown if now article is selected
           tags are now updated correctly
           an error on command clear now leads to an error message instead of a crash
           undo tagging now bevaves correctly if an article already had the tag before
       bump dependencies

   1.7.0 - 2026-07-20

   🙈 Ever thought, it is a shame that life has no undo function? 🙈 At least, eilmeldung has one now!


    [16 lines not shown]
VersionDeltaFile
1.8+622-628news/eilmeldung/distinfo
1.8+206-208news/eilmeldung/cargo-depends.mk
1.8+4-4news/eilmeldung/Makefile
+832-8403 files

NetBSD/pkgsrc 7Nvu61edoc CHANGES-2026

   doc: Updated devel/feluda to 1.15.0
VersionDeltaFile
1.4875+2-1doc/CHANGES-2026
+2-11 files

NetBSD/pkgsrc 8fp5mWEdevel/feluda Makefile cargo-depends.mk

   devel/feluda: update to 1.15.0

   What's Changed

       build(deps): bump com.fasterxml.jackson.core:jackson-databind from 2.16.1 to 2.22.0 in /examples/java-example/maven-example in the maven group across 1 directory by @dependabot[bot] in #228
       feat(licenses): detect licenses from SPDX source file headers by @anistark in #229
       fix(licenses): offline license text and copyleft restrictiveness by @anistark in #230
       refactor: tidy string-argument ergonomics with impl Into<String> by @anistark in #231
       docs: surface the github action and open community channels by @anistark in #232
       feat(scan): flag foreign license headers in own source files by @anistark in #233
       fix(java): resolve maven pom property placeholders in parent coords by @anistark in #234
       feat(go): migrate license resolution to the official pkg.go.dev API by @anistark in #235
       feat(tui): overhaul the --gui table layout, theme, and interactions by @anistark in #236
       feat(cli): update --help and --version output by @anistark in #237
       build(deps): bump com.fasterxml.jackson.core:jackson-databind from 2.22.0 to 2.22.1 in /examples/java-example/maven-example in the maven group across 1 directory by @dependabot[bot] in #239
       fix(node): strip YAML quotes from scoped dep names in pnpm-lock.yaml by @01luyicheng in #238
       feat(scan): detect vendored and unmanaged dependencies by @anistark in #240
       docs: redesign the site styling and add host serve by @anistark in #242
VersionDeltaFile
1.21+4-73devel/feluda/distinfo
1.21+0-23devel/feluda/cargo-depends.mk
1.24+2-2devel/feluda/Makefile
+6-983 files

LLVM/project 458b207mlir/lib/Dialect/OpenACC/Transforms ACCRoutineLowering.cpp

[OpenACC][NFC] Minor clean up in ACCRoutineLowering. (#213333)

Minor NFC clean up after recent changes to remove nohost handling from
ACCRoutineLowering.

Assisted-by: Codex
DeltaFile
+8-12mlir/lib/Dialect/OpenACC/Transforms/ACCRoutineLowering.cpp
+8-121 files

LLVM/project d0d8c85llvm/lib/Target/X86 X86ISelLowering.cpp, llvm/test/CodeGen/X86 vector-shuffle-combining.ll

[X86] getTargetConstantBitsFromNode - ensure constant data is from a vector type (#213360)

Fixes #213251
DeltaFile
+58-2llvm/test/CodeGen/X86/vector-shuffle-combining.ll
+17-15llvm/lib/Target/X86/X86ISelLowering.cpp
+75-172 files