+man:makefs[8] now accepts an autotrim option that sets the autotrim property of the created ZFS pool to on or off, allowing imported pools to start trimming freed space without a separate zpool set step. When the option is omitted, the pool retains the default value of off.
Clang on FreeBSD now defaults to the LLVM linker (ld.lld) unless explicitly overridden, avoiding unexpected use of GNU ld from the system package manager; no user action is required for default behavior.
gitref:8d0154e64186[repository=src].
@@ -384,14 +391,15 @@
man:less[1] has been updated to v710.
gitref:d3c6de9c3cab[repository=src].
-libarchive has been updated to 3.8.9.
-gitref:750cc0502912[repository=src].
+libarchive has been updated to 3.8.11.
+gitref:80c954a926c6[repository=src].
LLVM compiler infrastructure, including clang, compiler-rt, libc++, libunwind, lld, lldb, and openmp, has been updated to llvm-project 21.1.8.
gitref:e40599641e0e[repository=src].
lutok has been updated to 0.6.2.
-gitref:6dcc931d2b00[repository=src].
+gitref:6dcc931d2b00[repository=src],
+gitref:d6cf497d2a1c[repository=src].
openresolv now trims leading dots from domain names in resolvconf, which affects DNS resolution behavior for users with such configurations.
gitref:4fff1e9f1076[repository=src].
@@ -412,8 +420,8 @@
sqlite3 has been updated to 3.53.3.
gitref:c81e5aa8a52e[repository=src].
-tzdata has been updated to 2026e.
-gitref:961a842fdd3a[repository=src].
+tzdata has been updated to 2026f.
+gitref:406279104888[repository=src].
unbound has been updated to 1.26.1.
gitref:99c63b819cb5[repository=src].
@@ -516,6 +524,12 @@
The man:ixl[4] driver now enforces SR-IOV virtual function VLAN policies, with access VFs restricted to a hardware PVID and trunk VFs limited to 16 VLANs (VLAN 0 implicitly admitted). Hardware VLAN anti-spoofing and untrusted-VF limits of 18 MAC addresses and 16 VLANs are applied, and the effective policy is reported through the VF status interface and documented in ixl(4).
gitref:3be664785727[repository=src].
+The man:ixgbe[4] driver now isolates a virtual function whose guest driver repeatedly causes transmit failures after a reset, preventing one faulty guest from leaving an 82599 or X540 physical function unusable for other guests. This keeps the physical port available to all other guests on the same adapter.
+gitref:de91b2a0c393[repository=src].
+
+The man:ntsync[4] driver provides kernel-level support for Windows NT synchronization primitives via a `/dev/ntsync` device compatible with the Linux interface used by Wine and Proton. This allows Wine-based applications and games to perform thread synchronization in the kernel instead of user space, reducing overhead and improving performance and stability for multi-threaded Windows software on FreeBSD.
+gitref:43702cfc0ccb[repository=src].
+
[[drivers-removals]]
=== Deprecated and Removed Drivers
@@ -537,6 +551,9 @@
The msdosfs file system now handles file names containing surrogate pair characters, allowing access to files and directories with emoji or other supplementary-plane Unicode characters. Media written on other operating systems with such names are fully readable.
gitref:8f3585150016[repository=src].
+man:zpool-export[8] now returns `EBUSY` when a zvol block device is in use, instead of hanging indefinitely, matching the behavior for mounted ZFS datasets.
+gitref:cc010bbc3491[repository=src].
+
[[boot]]
== Boot Loader Changes
@@ -545,6 +562,51 @@
[[boot-loader]]
=== Boot Loader Changes
+The UEFI boot loader now applies command-line overrides earlier, so console selection via man:efibootmgr[8] takes effect before the GELI passphrase prompt. This provides serial console access on systems that do not advertise a serial console through ConOut.
+gitref:ea041ed323ee[repository=src].
+
+man:bhyveload[8] now releases its host /boot handle before executing guest boot scripts, limiting the sandbox's exposure to the host /boot directory.
+gitref:84ec2d3b67df[repository=src].
+
+The boot loader now rejects ELF files with inconsistent segment sizes (where a segment's file size exceeds its in-memory size), preventing malformed kernels from being loaded. Normal boot is unaffected.
+gitref:6e4ef01c603c[repository=src].
+
+The man:boot0cfg[8] utility now accepts a regular file as its trailing argument, not just a live disk provider. This allows users to configure man:boot0[8] parameters in a binary before flashing it with man:gpart[8] bootcode or using it with man:mkimg[1].
+gitref:15a0a7d525cf[repository=src].
+
+The EFI loader now allocates trampoline memory as executable code rather than data, so firmware that enforces non-executable data protections can boot it successfully. The trampoline is the small stub that hands control from the loader over to the kernel. This improves boot reliability on affected systems.
+gitref:6db7fa3765ae[repository=src].
+{{< sponsored "The FreeBSD Foundation" >}}
+
+The boot loader now recognizes ELF constructor sections and passes them to the kernel, allowing constructors to run during boot. This is required for KASAN.
+gitref:984a3970b16f[repository=src].
+{{< sponsored "The FreeBSD Foundation" >}}
+
+The boot loader's graphical menu no longer suffers from display corruption caused by incorrect shadow buffer offset handling.
+gitref:4a1a1bf3afc7[repository=src].
+{{< sponsored "The FreeBSD Foundation" >}}
+
+The `zfskeys` boot script no longer pauses boot to ask for an interactively entered ZFS passphrase unless both `zfskeys_enable` and `zfskeys_prompt_enable` are set to `YES` in man:rc.conf[5]. This restores the previous behavior of not prompting by default.
+gitref:3f73758036c7[repository=src].
+
+man:loader.efi[8] on a ZFS root under UEFI Secure Boot with man:mac_veriexec[4] enabled no longer reports a spurious no entry error. Users booting such a configuration should update the EFI loader and re-sign it.
+gitref:6b1371fca772[repository=src].
+{{< sponsored "Defenso" >}}
+
+The lualoader adds `be-list` and `be-switch` commands so boot environments can be listed and switched directly from the loader command prompt, with matching man page updates.
+gitref:f77062f506f7[repository=src].
+
+The EFI boot loader no longer fails to boot in a situation where it previously jumped to the wrong code, fixing a load failure that could prevent booting on affected systems.
+gitref:95632c90ba32[repository=src].
+{{< sponsored "Netflix" >}}
+
+The boot loader's graphics framebuffer code now batches updates through a shadow buffer instead of flushing on every operation, improving boot time on some platforms.
+gitref:1802f2ca7215[repository=src].
+{{< sponsored "The FreeBSD Foundation" >}}
+
+The boot loader's Lua menu now follows symbolic links when locating bootable kernels, so symlinked kernel paths in /boot are detected and offered in the boot menu.
+gitref:8c78774107a7[repository=src].
+
[[network]]
== Networking
@@ -563,6 +625,13 @@
rc.firewall now supports on-disk lists for `firewall_allowservices` and `firewall_trusted`: when a list element is an absolute path, the file is read and each non-comment, non-blank line's first word is treated as an address or subnet to add to the list.
gitref:3aec74070b0d[repository=src].
+man:ifconfig[8] -v output now reports SR-IOV virtual function status for supported NICs. The display groups optional identity, initialization, resource, VLAN, administrator policy, protocol, traffic-permission, and fault-containment fields, while omitted values remain distinct from zero or false. Device-neutral PCI attachment and passthrough state remain available through man:iovctl[8] -L.
+The man:iflib[4] framework exports a per-device tx_watchdog_events counter at dev.<driver>.<unit>.iflib.tx_watchdog_events. The man:em[4], man:igb[4], and man:igc[4] drivers no longer count transmit watchdog resets as output errors, preventing those error counters from overstating packet loss.
+gitref:f7ea2d561288[repository=src].
+
[[hardware]]
== Hardware Support
@@ -585,6 +654,9 @@
[[man-pages]]
=== Man Pages
+man:man[1] now searches translated manual pages in pure language subdirectories such as share/ja/man1, share/de/man1, and share/ru/man1, in addition to locale-style paths. This allows localized pages from ports that use only $lang directories to be found instead of silently falling back to English.
+gitref:9fe7f514ef24[repository=src].
+
A manual page has been added for the man:aq[4] driver, documenting the Aquantia AQtion Ethernet driver and its supported hardware and tunables.