chore(deps): update dependency llvm/llvm-project to v23

[renovate]

This PR contains the following updates:

Package	Update	Change
llvm/llvm-project	major	22 → 23

---

Release Notes

llvm/llvm-project (llvm/llvm-project)

v23: LLVM 23.1.0

Compare Source

LLVM 23.1.0 Release

• Linux x86_64: xz archive (signature), zstd archive (signature)
• Linux Arm64: xz archive (signature), zstd archive (signature)

• Windows x64 (64-bit): installer (signature), xz archive (signature), zstd archive (signature)

Download links for common platforms will appear above once builds have completed, if they are available. Check the full list of release packages at the bottom of this release page if you do not find a link above.

If you do not find a release package for your platform, you may be able to find a community built package on the LLVM Discourse forum thread for this release. Remember that these are built by volunteers and may not always be available. If you rely on a platform or configuration that is not one of the defaults, we suggest you use the binaries that your platform provides, or build your own release packages.

Package Types

Each platform has binary release packages. The file name starts with either LLVM- or clang+llvm- and ends with the platform's name. For example, LLVM-23.1.0-Linux-ARM64.tar.xz contains LLVM binaries for Arm64 Linux. Binary archive packages may be available as .tar.xz or .tar.zst files. The .tar.zst files contain the same package contents, but use zstd compression.

Except for Windows. Where LLVM-*.msi is an installer intended for using LLVM as a toolchain and the archive clang+llvm- contains the contents of the installer, plus libraries and tools not normally used in a toolchain. You most likely want the LLVM- installer, unless you are developing software which itself uses LLVM, in which case choose clang+llvm-.

In addition, source archives are available:

• To get all the llvm-project source code for this release, choose llvm-project-23.1.0.src.tar.xz.
• test-suite-23.1.0.src.tar.xz is an archive of the LLVM Test Suite) for this release.

Verifying Packages

All packages come with a matching .sig and/or .jsonl file. You should use these to verify the integrity of the packages.

If it has a .sig file, it should have been signed by the release managers using GPG. Download the keys from the LLVM website, import them into your keyring and use them to verify the file:

$ gpg --import release-keys.asc
$ gpg --verify <package file name>.sig <package file name>

If it has a .jsonl file, use gh to verify the package:

$ gh attestation verify --repo llvm/llvm-project <package file name>
(if you are able to connect to GitHub)
$ gh attestation verify --repo llvm/llvm-project <package file name> --bundle <package file name>.jsonl
(using attestation file on disk)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.