]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/log
thirdparty/openembedded/openembedded-core.git
8 months agolibssh2: remove status for CVE-2023-48795
Peter Marko [Fri, 6 Dec 2024 18:25:11 +0000 (19:25 +0100)] 
libssh2: remove status for CVE-2023-48795

Entry for this CVE was corrected in NVD DB, we no longer need to set
status for it.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoelfutils: backport a fix for libeu objects missing in libelf.a
Martin Jansa [Sat, 7 Dec 2024 08:27:08 +0000 (09:27 +0100)] 
elfutils: backport a fix for libeu objects missing in libelf.a

* since the 0.192 upgrade from:
  https://git.openembedded.org/openembedded-core/commit/?id=1d6ac3c811798732e6addc798656bbe104661d77
  some recipes are failing to build, backport a fix

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolibpam: add packageconfig for selinux
Yi Zhao [Sun, 8 Dec 2024 14:56:02 +0000 (22:56 +0800)] 
libpam: add packageconfig for selinux

Add PACKAGECONFIG[selinux] to support build with selinux.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoRevert "uboot-sign: fix U-Boot binary with public key"
Ryan Eatmon [Fri, 6 Dec 2024 21:09:17 +0000 (15:09 -0600)] 
Revert "uboot-sign: fix U-Boot binary with public key"

This reverts commit 0d14e99aa18ee38293df63d585fafc270a4538be.

The patch removed logic required for correct handling of
UBOOT_SUFFIX=img or UBOOT_SUFFIX=rom.  We need to find a better way to
handle the fix for [YOCTO #15649].

Signed-off-by: Ryan Eatmon <reatmon@ti.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolibtool: update 2.5.2 -> 2.5.4
Alexander Kanavin [Wed, 4 Dec 2024 06:49:01 +0000 (07:49 +0100)] 
libtool: update 2.5.2 -> 2.5.4

2.5.2 was a beta, upstream made two stable releases since:
https://savannah.gnu.org/news/?id=10676
https://savannah.gnu.org/news/?id=10693

Drop libtool/0001-ltmain.in-Handle-trailing-slashes-on-install-command.patch
(merged upstream)

Apply the multilib patch unconditionally as it could be applied to add variants.

For the other it was pointed out that it:
"potentially has side effects for native builds. It breaks the ability
to run files in the .libs directory which in the cross case we don't
care about but some natives did once used to do that. The risk is they
find host things instead."

License-Update: change of FSF address to a URI

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agodtc: upgrade 1.7.0 -> 1.7.2
Alexander Kanavin [Wed, 4 Dec 2024 06:48:57 +0000 (07:48 +0100)] 
dtc: upgrade 1.7.0 -> 1.7.2

Remove patches (both applied upstream).

Add a tests option that is disabled by default
(as previously it was inside a is_cross() condition and
so was always disabled).

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agocargo-c-native: update 0.10.3 -> 0.10.5
Alexander Kanavin [Wed, 4 Dec 2024 06:49:16 +0000 (07:49 +0100)] 
cargo-c-native: update 0.10.3 -> 0.10.5

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agogo-helloworld: update to latest revision
Alexander Kanavin [Wed, 4 Dec 2024 06:49:15 +0000 (07:49 +0100)] 
go-helloworld: update to latest revision

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolibpam: update 1.6.1 -> 1.7.0
Alexander Kanavin [Wed, 4 Dec 2024 06:49:14 +0000 (07:49 +0100)] 
libpam: update 1.6.1 -> 1.7.0

Change from autotools to meson.

ptest support is removed for now, as pam-ptest isn't executed
on the autobuilder.

Adjust packaging as pam now installs everything into /usr rather than /.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolibpipeline: update 1.5.7 -> 1.5.8
Alexander Kanavin [Wed, 4 Dec 2024 06:49:13 +0000 (07:49 +0100)] 
libpipeline: update 1.5.7 -> 1.5.8

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agotexinfo: update 7.1 -> 7.1.1
Alexander Kanavin [Wed, 4 Dec 2024 06:49:12 +0000 (07:49 +0100)] 
texinfo: update 7.1 -> 7.1.1

Rather than try to patch out specific manpages needing help2man,
simply don't build them: this is less prone to tricky rebase
conflicts.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agovulkan-samples: update to latest revision
Alexander Kanavin [Wed, 4 Dec 2024 06:49:11 +0000 (07:49 +0100)] 
vulkan-samples: update to latest revision

Drop patch as issue fixed upstream.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopixman: update 0.42.2 -> 0.44.0
Alexander Kanavin [Wed, 4 Dec 2024 06:49:10 +0000 (07:49 +0100)] 
pixman: update 0.42.2 -> 0.44.0

Drop two backports.

Drop iwmmxt support from recipe and patch (upstream has removed it).

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agotiff: update 4.6.0 -> 4.7.0
Alexander Kanavin [Wed, 4 Dec 2024 06:49:09 +0000 (07:49 +0100)] 
tiff: update 4.6.0 -> 4.7.0

Drop all CVE backports.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agowebkitgtk: update 2.44.3 -> 2.46.4
Alexander Kanavin [Wed, 4 Dec 2024 06:49:08 +0000 (07:49 +0100)] 
webkitgtk: update 2.44.3 -> 2.46.4

Drop 0001-Fix-build-issues-with-latest-Clang.patch
(backport)
30e1d5e22213fdaca2a29ec3400c927d710a37a8.patch
(issue fixed upstream)

Add an option that when absent causes a build failure.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolibgit2: update 1.8.2 -> 1.8.4
Alexander Kanavin [Wed, 4 Dec 2024 06:49:07 +0000 (07:49 +0100)] 
libgit2: update 1.8.2 -> 1.8.4

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoutfcpp: update 4.0.5 -> 4.0.6
Alexander Kanavin [Wed, 4 Dec 2024 06:49:06 +0000 (07:49 +0100)] 
utfcpp: update 4.0.5 -> 4.0.6

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython3-maturin: update 1.7.1 -> 1.7.4
Alexander Kanavin [Wed, 4 Dec 2024 06:49:05 +0000 (07:49 +0100)] 
python3-maturin: update 1.7.1 -> 1.7.4

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython3-markdown: update 3.6 -> 3.7
Alexander Kanavin [Wed, 4 Dec 2024 06:49:04 +0000 (07:49 +0100)] 
python3-markdown: update 3.6 -> 3.7

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agobtrfs-tools: update 6.10.1 -> 6.11
Alexander Kanavin [Wed, 4 Dec 2024 06:49:03 +0000 (07:49 +0100)] 
btrfs-tools: update 6.10.1 -> 6.11

Use github, as kernel.org has the needed tag, but not the branch it's on.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoxf86-video-fbdev: update 0.5.0 -> 0.5.1
Alexander Kanavin [Wed, 4 Dec 2024 06:49:00 +0000 (07:49 +0100)] 
xf86-video-fbdev: update 0.5.0 -> 0.5.1

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoswig: upgrade 4.2.1 -> 4.3.0
Alexander Kanavin [Wed, 4 Dec 2024 06:48:59 +0000 (07:48 +0100)] 
swig: upgrade 4.2.1 -> 4.3.0

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython3-dtc: update 1.7.0 -> 1.7.2
Alexander Kanavin [Wed, 4 Dec 2024 06:48:58 +0000 (07:48 +0100)] 
python3-dtc: update 1.7.0 -> 1.7.2

Remove patch, as it is a leftover from meta-virtualization times
where python3-dtc was ahead of dtc in oe-core and had to be tweaked.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agovirglrenderer: upgrade 1.0.1 -> 1.1.0
Alexander Kanavin [Wed, 4 Dec 2024 06:48:56 +0000 (07:48 +0100)] 
virglrenderer: upgrade 1.0.1 -> 1.1.0

drm-msm-experimental option removed upstream.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agocups: upgrade 2.4.10 -> 2.4.11
Alexander Kanavin [Wed, 4 Dec 2024 06:48:55 +0000 (07:48 +0100)] 
cups: upgrade 2.4.10 -> 2.4.11

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython3-beartype: upgrade 0.18.5 -> 0.19.0
Alexander Kanavin [Wed, 4 Dec 2024 06:48:54 +0000 (07:48 +0100)] 
python3-beartype: upgrade 0.18.5 -> 0.19.0

Change backend to hatchling.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoelfutils: upgrade 0.191 -> 0.192
Alexander Kanavin [Wed, 4 Dec 2024 06:48:53 +0000 (07:48 +0100)] 
elfutils: upgrade 0.191 -> 0.192

License-Update: copyright years

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agodebugedit: upgrade 5.0 -> 5.1
Alexander Kanavin [Wed, 4 Dec 2024 06:48:52 +0000 (07:48 +0100)] 
debugedit: upgrade 5.0 -> 5.1

Remove 0002-sepdebugcrcfix.c-do-not-use-64bit-variants.patch
as the issues were fixed upstream.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopkg-config-native: pick additional search paths from $EXTRA_NATIVE_PKGCONFIG_PATH
Alexander Kanavin [Wed, 4 Dec 2024 06:48:51 +0000 (07:48 +0100)] 
pkg-config-native: pick additional search paths from $EXTRA_NATIVE_PKGCONFIG_PATH

This was prompted by working on librsvg update: the new meson-driven
version wants to query values from .pc files residing in its own
build directory, and modifies PKG_CONFIG_PATH accordingly.

When using the pkg-config-native wrapper such modifications
have no effect, and we have to pass them in manually
from the recipe via EXTRA_NATIVE_PKGCONFIG_PATH variable.

This variable is already defined (with an empty value) and
appended to PKG_CONFIG_PATH export in the native class, so this
simply extends its use to the wrapper.

(Appending to PKG_CONFIG_PATH in the wrapper, instead of resetting it,
is not an option as that can lead to contamination with the cross values).

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agocargo.bbclass: do not install libraries by default
Alexander Kanavin [Wed, 4 Dec 2024 06:48:49 +0000 (07:48 +0100)] 
cargo.bbclass: do not install libraries by default

'cargo install' only installs executables and examples into the system,
and we should follow that. Libraries are vendored into
build trees from the crate registry and then baked directly into executables.

Neverthless, there's now a condition variable, so individual recipes can
opt into installing libraries if there's a use case for it.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agogcr: drop obsolete autotools setting
Alexander Kanavin [Wed, 4 Dec 2024 06:48:48 +0000 (07:48 +0100)] 
gcr: drop obsolete autotools setting

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agomeson.bbclass: enable qemu exe wrapper in nativesdk
Alexander Kanavin [Wed, 4 Dec 2024 06:48:47 +0000 (07:48 +0100)] 
meson.bbclass: enable qemu exe wrapper in nativesdk

nativesdk builds are cross-builds like target ones, and
so meson expectations regarding ability to run binaries are the same:
either provide the wrapper, or disable the build time options that
need executing target binaries during build time (if such options
are made available by upstream).

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agobarebox: add more common items into shared .inc with barebox-tools
Alexander Kanavin [Wed, 4 Dec 2024 06:48:46 +0000 (07:48 +0100)] 
barebox: add more common items into shared .inc with barebox-tools

barebox-tools needs to be updated in lockstep with barebox,
and was already once erroneously updated to 2024.10 without
barebox itself.

Particularly, this change puts PV into .inc as well for both
recipes. This will allow AUH to produce correct update patches,
as barebox recipe is mutually exclusive with u-boot, and
so isn't handled by AUH. mesa-gl recipe uses a similar trick
with mesa.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agomtd-utils: set PV directly in the recipe filename
Alexander Kanavin [Wed, 4 Dec 2024 06:48:45 +0000 (07:48 +0100)] 
mtd-utils: set PV directly in the recipe filename

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agomaintainers.inc: unassign myself (don't panic!)
Alexander Kanavin [Wed, 4 Dec 2024 06:48:44 +0000 (07:48 +0100)] 
maintainers.inc: unassign myself (don't panic!)

For a very long time my focus hasn't been these recipes
in particular; rather I'm trying to ensure oe-core as a whole
doesn't fall too far behind upstream releases. To better reflect
this reality, I wish to be no longer listed for any specific
recipes.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolib: oeqa: spdx: Add tests for extra options
Joshua Watt [Tue, 3 Dec 2024 22:37:10 +0000 (15:37 -0700)] 
lib: oeqa: spdx: Add tests for extra options

Adds a test for several of the extra options provided by the SPDX
classes. In particular, these are the options that can produce
non-reproducible results, so are not enabled by default in OE core. This
test takes care to configure the build so that the tests do run in a
reproducible manner so that pre-built test objects can be pulled from
sstate

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolib: spdx: Fix SPDX_BUILD_HOST
Joshua Watt [Tue, 3 Dec 2024 22:37:09 +0000 (15:37 -0700)] 
lib: spdx: Fix SPDX_BUILD_HOST

The call to make a new import for the SPDX_BUILD_HOST was incorrect,
since it was asking for the key named "SPDX_BUILD_HOST", instead of the
key name contained in that variable

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoclasses: create-spdx: Fix variable dependencies
Joshua Watt [Tue, 3 Dec 2024 22:37:08 +0000 (15:37 -0700)] 
classes: create-spdx: Fix variable dependencies

A few variable dependencies were incorrect from the SPDX tasks, which
prevented rebuilds from occurring, or caused them to occur when they
should not.

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolib: sbom30: Fix agent reference
Joshua Watt [Tue, 3 Dec 2024 22:37:07 +0000 (15:37 -0700)] 
lib: sbom30: Fix agent reference

When a agent reference was being used, the code was not using the
correct base variable to look up the agent

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolib: sbom30: Fix import handling
Joshua Watt [Tue, 3 Dec 2024 22:37:06 +0000 (15:37 -0700)] 
lib: sbom30: Fix import handling

Fixes a bug in the way that imports where being handled, due to a
misspelled variable

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolrzsz: update SRC_URI to avoid redirect
Ross Burton [Tue, 3 Dec 2024 20:02:26 +0000 (20:02 +0000)] 
lrzsz: update SRC_URI to avoid redirect

This server redirects to https:, so we might as well avoid the redirect.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agooeqa/gitarchive: Fix syntax warning
Richard Purdie [Tue, 3 Dec 2024 13:43:30 +0000 (13:43 +0000)] 
oeqa/gitarchive: Fix syntax warning

The backslash characters cause syntax warnings, mark the strings are raw
to avoid this.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolinux-yocto: add and use GPL-2.0-with-syscall-note license
Denis OSTERLAND-HEIM [Tue, 3 Dec 2024 12:18:54 +0000 (13:18 +0100)] 
linux-yocto: add and use GPL-2.0-with-syscall-note license

See Linux COPYING, LICENSES/preferred/GPL-2.0
and LICENSES/exceptions/Linux-syscall-note.

Signed-off-by: Denis Osterland-Heim <denis.osterland@diehl.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agometa/lib: move buildstats.py and rootfspostcommands.py into oe
Chen Qi [Tue, 3 Dec 2024 04:53:09 +0000 (12:53 +0800)] 
meta/lib: move buildstats.py and rootfspostcommands.py into oe

These two files are the only ones that are left in meta/lib.
They logically belong to meta/lib/oe, so move them there.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoqemu: set CVE-2024-6505 to fixed
Peter Marko [Mon, 2 Dec 2024 23:39:41 +0000 (00:39 +0100)] 
qemu: set CVE-2024-6505 to fixed

NVD DB has this CVE as version-less (with "-").

Patch [3] is linked from [1] via [2].
[1] https://nvd.nist.gov/vuln/detail/CVE-2024-6505
[2] https://bugzilla.redhat.com/show_bug.cgi?id=2295760
[3] https://gitlab.com/qemu-project/qemu/-/commit/f1595ceb

$ git describe f1595ceb
v9.1.0-rc0-38-gf1595ceb9a
$ git tag --contains f1595ceb | grep -v -- -rc.$
v9.1.0
v9.1.1
v9.1.2

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolib: spdx30_tasks: Fix supplied By
Joshua Watt [Mon, 2 Dec 2024 19:20:23 +0000 (12:20 -0700)] 
lib: spdx30_tasks: Fix supplied By

Fixes the supplied by property in SPDX to use the correct name

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agosystemd: remove custom rootlibexecdir and replace with nonarch_libdir
Ricardo Salveti [Tue, 3 Dec 2024 03:05:20 +0000 (00:05 -0300)] 
systemd: remove custom rootlibexecdir and replace with nonarch_libdir

The rootprefix build option was deprecated in systemd 255, making the
custom rootlibexecdir unnecessary, so remove it in favor of the standard
nonarch_libdir definition.

Signed-off-by: Ricardo Salveti <ricardo.salveti@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agosystemd: split long line in pkg_postinst
Ricardo Salveti [Tue, 3 Dec 2024 03:05:19 +0000 (00:05 -0300)] 
systemd: split long line in pkg_postinst

Cosmetic change only to avoid max line length patchset failures when
changing the target line.

Signed-off-by: Ricardo Salveti <ricardo.salveti@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agosystemd: drop deprecated rootlibdir, rootprefix and split-usr options
Ricardo Salveti [Tue, 3 Dec 2024 03:05:18 +0000 (00:05 -0300)] 
systemd: drop deprecated rootlibdir, rootprefix and split-usr options

Support for split-usr and unmerged-usr were both removed as part of the
systemd 255 release, so remove the current deprecated rootlibdir,
rootprefix and split-usr options from the recipe.

Signed-off-by: Ricardo Salveti <ricardo.salveti@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoautomake: fix do_compile error when perl is under a very long path
Changqing Li [Fri, 22 Nov 2024 06:57:33 +0000 (14:57 +0800)] 
automake: fix do_compile error when perl is under a very long path

Fixed:
bitbake automake-native failed with error:
| :; HELP2MAN_NAME="Generate Makefile.in files for configure from Makefile.am"; export HELP2MAN_NAME; LONGPATH/tmp/hosttools/mkdir -p doc && AUTOMAKE_HELP2MAN=true ./pre-inst-env LONGPATH/tmp/hosttools/perl ../automake-1.17/doc/help2man --output=doc/automake-1.17.1 --info-page=automake --name="${HELP2MAN_NAME}" bin/automake-1.17
| help2man: can't get `--help' info from bin/aclocal-1.17
| Try `--no-discard-stderr' if option outputs to stderr
| make: *** [Makefile:3818: doc/aclocal-1.17.1] Error 2

In above command,  `bin/aclocal-1.17 --help` will be runned, since
@PERL@ is replaced as the full path of perl, it is possible that the
shebang line exceeds the max limit and causes above error, because the
kernel imposes a maximum length on the text that follows the "#!"
characters at the start of a script; characters beyond the limit are
ignored.  Before Linux 5.1, the limit is 127 characters.  Since Linux
5.1, the limit is 255 characters.

Add back the forced perl settings and add a patch for workaround the
fatal error caused by space in perl path

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoyocto-check-layer: expand to cover all required QA checks
Denys Dmytriyenko [Wed, 20 Nov 2024 00:22:42 +0000 (19:22 -0500)] 
yocto-check-layer: expand to cover all required QA checks

insane.bbclass now defines CHECKLAYER_REQUIRED_TESTS list with required
QA checks that are becoming mandatory for Yocto Project Compatible layers.

Update yocto-check-layer.bbclass in order to catch when packages from such
layers try to skip any of the required QA checks.

Signed-off-by: Denys Dmytriyenko <denys@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython3-hatchling: upgrade 1.25.0 -> 1.26.3
Ross Burton [Mon, 2 Dec 2024 12:45:50 +0000 (12:45 +0000)] 
python3-hatchling: upgrade 1.25.0 -> 1.26.3

1.26.3:
- Support an old import path that is still used by some consumers like
  Hatch

1.26.2:
- Back-populate string license fields (License-Expression) for core
  metadata versions prior to 2.4
- Remove the License-Expression and License-Files core metadata from
  version 2.2 that was missed in the previous minor release

1.26.1:
- Add backward compatibility for the old license-files metadata field
- Support an old import path that is still used by some consumers like
  Hatch

1.26.0:
- The license-files metadata field has been updated to the latest spec
  and is now just an array of glob patterns
- Support version 2.4 of core metadata for the wheel and sdist targets
- Add HATCH_METADATA_CLASSIFIERS_NO_VERIFY environment variable to
  disable trove classifier verification
- Add .pixi to the list of directories that cannot be traversed
- Bump the minimum supported version of packaging to 24.2
- No longer write package metadata for license expressions and files for
  versions of core metadata prior to 2.4
- Properly enable Zip64 support for the wheel target
- Properly ignore parent .gitingore files when the project root matches
  one of the patterns

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopango: upgrade 1.54.0 -> 1.55.0
Ross Burton [Mon, 2 Dec 2024 12:45:49 +0000 (12:45 +0000)] 
pango: upgrade 1.54.0 -> 1.55.0

- Support Unicode 16
- Add pango_font_map_add_font_file
- fontconfig: Reject patterns without FC_FILE
- coretext: Actually use .AppleSystemUIFont
- coretext: Keep track of variations
- win32: Use font options for caching
- win32: Keep variations in PangoWin32Font
- build: Require harfbuzz 8.4.0
- build: Require fontconfig 2.15
- build: Require meson 1.2.0
- build: Require Window 10

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoncurses: Add alacritty terminfo
Peter Delevoryas [Mon, 2 Dec 2024 08:06:29 +0000 (00:06 -0800)] 
ncurses: Add alacritty terminfo

This installs alacritty terminal info alongside other terminal emulator
information.

```
$ ls /usr/share/terminfo/a
alacritty  ansi  ansi80x25  ansis  aterm
```

Alacritty is a relatively popular new terminal emulator. Without this,
users need to use workarounds like `export TERM=xterm` to get terminal
escape sequences to work (most of alacritty matches xterm/etc).

Some true-color features do not work correctly with `TERM=xterm` though.

Signed-off-by: Peter Delevoryas <peter@pjd.dev>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agogcc-sanitizers: Add riscv64 as compatible host
Deepthi Hemraj [Mon, 2 Dec 2024 04:35:14 +0000 (20:35 -0800)] 
gcc-sanitizers: Add riscv64 as compatible host

RISC-V offers several virtual memory address schemes (Sv39, Sv48, and Sv57),
but ASan currently supports only Sv39 on RISC-V64.
For RISC-V64 Sv39, ASan uses custom allocator configurations
tuned to manage large allocations efficiently.
These tunings are incompatible with larger address spaces like
Sv48/Sv57 due to differences in region sizes and alignment.

For riscv64, Asan's tuning for Sv39 can be enabled in qemu
by using the appropriate flag in the command line as shown below:
runqemu nographic qemuparams="-cpu rv64,sv39=true"

Additionally, the COMPATIBLE_HOST list in gcc-sanitizers has been
updated to include riscv64. All necessary tests were successfully
conducted on both hardware(Microchip PolarFire SoC)
and the qemurisv64 environment, with ASan effectively
detecting memory errors in both scenarios.

Signed-off-by: Deepthi Hemraj <Deepthi.Hemraj@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython3-urllib3: upgrade 2.2.2 -> 2.2.3
Guðni Már Gilbert [Sun, 1 Dec 2024 10:42:08 +0000 (10:42 +0000)] 
python3-urllib3: upgrade 2.2.2 -> 2.2.3

* The package now requires python3-hatch-vcs-native at build-time
* Updated HOMEPAGE to point to the correct Github repository. The old link re-directs to the same link.

2.2.3 (2024-09-12)
==================
Features
--------
- Added support for Python 3.13.

Bugfixes
--------
- Fixed the default encoding of chunked request bodies to be UTF-8 instead of ISO-8859-1. All other methods of supplying a request body already use UTF-8 starting in urllib3 v2.0.
- Fixed ResourceWarning on CONNECT with Python < 3.11.4 by backporting https://github.com/python/cpython/issues/103472
- Adjust tolerance for floating-point comparison on Windows to avoid flakiness in CI
- Fixed a crash where certain standard library hash functions were absent in restricted environments.
- Fixed mypy error when adding to ``HTTPConnection.default_socket_options``.

HTTP/2 (experimental)
---------------------
See details: https://github.com/urllib3/urllib3/releases/tag/2.2.3

Deprecations and Removals
-------------------------
- Note for downstream distributors: the ``_version.py`` file has been removed and is now created at build time by hatch-vcs.
- Drop support for end-of-life PyPy3.8 and PyPy3.9

Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopiglit: update the patch to fix building the test without wayland
Dmitry Baryshkov [Sat, 30 Nov 2024 23:13:31 +0000 (01:13 +0200)] 
piglit: update the patch to fix building the test without wayland

Fix the following error appearing if building on a pure-X11 distros:

<PATH>/git/tests/egl/egl-wayland.c:29:10: fatal error: wayland-client.h: No such file or directory
   29 | #include <wayland-client.h>
      |          ^~~~~~~~~~~~~~~~~~

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agodnf: drop python3-iniparse from DEPENDS and RDEPENDS
Guðni Már Gilbert [Sat, 30 Nov 2024 12:39:11 +0000 (12:39 +0000)] 
dnf: drop python3-iniparse from DEPENDS and RDEPENDS

python3-iniparse dependency was dropped 2019, see the
following commit as reference:
https://github.com/rpm-software-management/dnf/pull/1329/commits/d7d0e0e2f9d8c7d021c794821ad0b56a39ebc01f

When looking at the Git history, this happened around tag 4.2.1

Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython3-poetry-core: drop python3-six from RDEPENDS
Guðni Már Gilbert [Sat, 30 Nov 2024 12:27:31 +0000 (12:27 +0000)] 
python3-poetry-core: drop python3-six from RDEPENDS

Looking at the history, python3-six was removed as a dependency
in the poetry.lock file in v1.5.2

Even before v1.5.2 and until now (v1.9.1) there is no code in
the package which imports the six module. So it can be safely
dropped from the recipe.

Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agokmscube: Use COPYING for licensing information
Fabio Estevam [Fri, 29 Nov 2024 11:54:03 +0000 (08:54 -0300)] 
kmscube: Use COPYING for licensing information

Since kmscube commit d874c7811854 ("add license file"), the COPYING file
has been introduced for holding the licensing information for the
project.

Make LIC_FILES_CHKSUM point to the COPYING file to make the licensing
text information more explicit instead of extracting it from the
kmscube.c file.

License-Update: Point to the dedicated COPYING file.

Signed-off-by: Fabio Estevam <festevam@denx.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agogcc: remove unused JAVA variable
Rasmus Villemoes [Thu, 28 Nov 2024 08:31:54 +0000 (09:31 +0100)] 
gcc: remove unused JAVA variable

As commit 81551871b183 (gcc: Remove Java support variables) correctly
stated

  Java support was removed in upstream gcc 7.

but this line snuck back in with commit bbf32e24608c (gcc-9: Add
recipes for gcc 9.1 release).

Signed-off-by: Rasmus Villemoes <ravi@prevas.dk>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolibinput: upgrade 1.26.2 -> 1.27.0
Wang Mingyu [Thu, 28 Nov 2024 00:13:12 +0000 (08:13 +0800)] 
libinput: upgrade 1.26.2 -> 1.27.0

Changelog:
 https://gitlab.freedesktop.org/libinput/libinput/-/releases

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agobuildhistory: Drop git-gc call as obsolete
Richard Purdie [Mon, 2 Dec 2024 23:17:31 +0000 (23:17 +0000)] 
buildhistory: Drop git-gc call as obsolete

buildhistory used to result in many individual objects in the repo which
could affect performance. This gc call was added over a decade ago to avoid
those performance issues. Modern git calls git-gc when needed and this kind
of workaround should no longer be needed.

There is a small chance this is contributing to problems with the autobuilder
buildhistory repositories, so simplifying the code may help that too.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agognu-efi: upgrade to 4.0.0
Ross Burton [Fri, 29 Nov 2024 17:38:03 +0000 (17:38 +0000)] 
gnu-efi: upgrade to 4.0.0

gnu-efi isn't making releases on SourceForge anymore, so switch to git
clones and track releases on GitHub.

License-Update: "Copright" typo fixed.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agognu-efi: fix license
Ross Burton [Fri, 29 Nov 2024 17:38:02 +0000 (17:38 +0000)] 
gnu-efi: fix license

gnu-efi is a mix of BSD and GPL licensed source code, not a choice
between the two.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agognu-efi: remove obsolete patch
Ross Burton [Fri, 29 Nov 2024 17:38:01 +0000 (17:38 +0000)] 
gnu-efi: remove obsolete patch

The original patch in 2013[1] did this:

+-libefi.a: libefi.a($(OBJS))
++libefi.a: $(OBJS)

The Makefile no longer uses this syntax and simply replacing $^ with
$(OBJS) is a no-op, so this patch isn't needed.

[1] meta-intel c2c13d4dba2d9c70862891adf0b250ce2be65f68

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agognu-efi: pass HOSTCC and INCLUDEDIR
Ross Burton [Fri, 29 Nov 2024 17:38:00 +0000 (17:38 +0000)] 
gnu-efi: pass HOSTCC and INCLUDEDIR

Pass the correct host compiler (HOSTCC) and include directory to the
build.

Also enable verbose builds (V=1).

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agogcr: correct gpg2 -> gpg
hongxu [Fri, 29 Nov 2024 15:33:30 +0000 (07:33 -0800)] 
gcr: correct gpg2 -> gpg

Due to commit [gnupg: upgrade 2.5.0 -> 2.5.1] applied, drop
gpg2 and use gpg to instead

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agognupg: upgrade 2.5.0 -> 2.5.1
hongxu [Fri, 29 Nov 2024 15:33:29 +0000 (07:33 -0800)] 
gnupg: upgrade 2.5.0 -> 2.5.1

Due to upstream [build: Remove configure option --enable-gpg-is-gpg2][1],
drop option --enable-gpg-is-gpg2 and remove gpg2/gpgv2 installation

Due to upsream [doc: Remove included yat2m and build HTML versions of
the man pages.][2], it used standard detection on yat2m other than build
it from source. Because no native recipe provide yat2m in Yocto,
explicitly disable doc via option --disable-doc

[1] https://github.com/gpg/gnupg/commit/2125f228d36c0882a87bce433a18253154653d50
[2] https://github.com/gpg/gnupg/commit/60c541f5880e8c603ca9372d3ca8b7ad68b97018

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython: backport patches to support openssl 3.4.0
Peter Marko [Fri, 29 Nov 2024 18:27:20 +0000 (19:27 +0100)] 
python: backport patches to support openssl 3.4.0

https://github.com/python/cpython/pull/127331
https://github.com/python/cpython/pull/127361

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoopenssl: upgrade 3.3.1 -> 3.4.0
Peter Marko [Wed, 23 Oct 2024 18:48:29 +0000 (20:48 +0200)] 
openssl: upgrade 3.3.1 -> 3.4.0

Release information:
https://github.com/openssl/openssl/blob/openssl-3.4/NEWS.md#major-changes-between-openssl-33-and-openssl-340-22-oct-2024

Handles CVE-2024-9143

Refreshed patches.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agokmscube: Upgrade to the latest revision
Fabio Estevam [Thu, 28 Nov 2024 16:12:36 +0000 (13:12 -0300)] 
kmscube: Upgrade to the latest revision

Upgrade to the latest revision and remove the patch because the
original problem has already been fixed upstream by kmscube
commit 311eaaaa473d ("kmscube: gears: use only GLES2").

Signed-off-by: Fabio Estevam <festevam@denx.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoscocat: upgrade 1.8.0.0 -> 1.8.0.1
hongxu [Wed, 27 Nov 2024 23:36:00 +0000 (15:36 -0800)] 
scocat: upgrade 1.8.0.0 -> 1.8.0.1

Rebase 0001-fix-compile-procan.c-failed.patch to 1.8.0.1

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agogpgme: upgrade 1.23.2 -> 1.24.0
hongxu [Wed, 27 Nov 2024 23:35:59 +0000 (15:35 -0800)] 
gpgme: upgrade 1.23.2 -> 1.24.0

Reabse patches:
- 0001-pkgconfig.patch
- 0001-autogen.sh-remove-unknown-in-version.patch

Drop backport patch:
- 0004-python-import.patch

Drop obsolete patch:
- 0008-do-not-auto-check-var-PYTHON.patch

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoman-db: upgrade 2.12.1 -> 2.13.0
hongxu [Wed, 27 Nov 2024 23:35:57 +0000 (15:35 -0800)] 
man-db: upgrade 2.12.1 -> 2.13.0

Due to meta-clang has upgraded clang to 19.1.2 release [1]
which contains clang fix [2], drop 0001-man-Move-local-variable-declaration-to-function-scop.patch

[1] https://github.com/kraj/meta-clang/commit/d3180c5e597f587c822192caba3ceced2452b861
[2] https://github.com/llvm/llvm-project/commit/8bd06d5b6584

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoselftest/static-group: Add seat
Richard Purdie [Wed, 27 Nov 2024 10:12:55 +0000 (10:12 +0000)] 
selftest/static-group: Add seat

With a group added to the seatd recipe, we need an entry in our
static group file for selftest.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoweston-init: Make weston user member of seat group
Khem Raj [Wed, 27 Nov 2024 19:59:04 +0000 (11:59 -0800)] 
weston-init: Make weston user member of seat group

This enables weston launch to access the seatd socket
/run/seatd.sock to communicate properly to acquire seat

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoseatd: Create seat user and package systemd service
Khem Raj [Wed, 27 Nov 2024 19:59:03 +0000 (11:59 -0800)] 
seatd: Create seat user and package systemd service

With latest version seatd does not work properly if
user access permissions are not correctly set, therefore
create 'seat' group and package the seatd.service file
and enable it by default with systemd distro feature

set logind to systemd when using systemd as default init system

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agomtd-utils: upgrade 2.2.0 -> 2.2.1
Alexander Kanavin [Mon, 25 Nov 2024 12:01:07 +0000 (13:01 +0100)] 
mtd-utils: upgrade 2.2.0 -> 2.2.1

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agobarebox: move version checksum to common .inc
Enrico Jörns [Mon, 25 Nov 2024 11:10:12 +0000 (12:10 +0100)] 
barebox: move version checksum to common .inc

This makes it more obvious to update barebox and barebox-tools together
and should help the AUH to update both.

Suggested-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Enrico Jörns <ejo@pengutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agobarebox: upgrade 2024.09.0 -> 2024.10.0
Enrico Jörns [Mon, 25 Nov 2024 11:10:11 +0000 (12:10 +0100)] 
barebox: upgrade 2024.09.0 -> 2024.10.0

Regular barebox release.

* cleanups and bug fixes
* larger font for high-res displays

Changelog: https://lore.barebox.org/barebox/ZxIdBi3xLj0dHqzi@pengutronix.de/T/

Signed-off-by: Enrico Jörns <ejo@pengutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agocve-check: fix cvesInRecord
Peter Marko [Sun, 24 Nov 2024 20:13:42 +0000 (21:13 +0100)] 
cve-check: fix cvesInRecord

Currently flag cvesInRecord is set to false if all CVEs are ignored or
patched. This is inconsistent as it shows false if a CVE was fixed via
patch and true if this CVE was fixed by upgrade. In both cases the CVE
is valid and was fixed.

As I understand this flag, it should say if any CVE exists for
particular component's product (regardless of how this CVE is handled)
and can be used to validate if a product is correctly set.

Note that skipping ignored CVEs may make sense in some cases, as ignored
may mean that NVD DB is wrong, but in many cases it is ignored for other
reasons. Further patch can be done to evaluate ignore subtype but that
would be against my understanding of this flag as described above.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agocve-check: restore CVE_CHECK_SHOW_WARNINGS functionality
Peter Marko [Sun, 24 Nov 2024 20:13:41 +0000 (21:13 +0100)] 
cve-check: restore CVE_CHECK_SHOW_WARNINGS functionality

Commit 05ef4f2a7b225c8d230eaca8d333ffb921729d79 removed this
functionality by accident. It was implemented in text exporter, while it
should have been a global feature independent on exporter type to avoid
such accidental deletion.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Cc: Marta Rybczynska <marta.rybczynska@ygreky.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolibssh2: mark CVE-2023-48795 as fixed
Peter Marko [Sun, 24 Nov 2024 19:11:26 +0000 (20:11 +0100)] 
libssh2: mark CVE-2023-48795 as fixed

NVD DB has typo in version (1.11.10 instead of 1.11.1)
Version 1.11.1 is the currently the latest one, there is no .10

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoqemu: Fix build on riscv64
Khem Raj [Sun, 24 Nov 2024 17:59:35 +0000 (09:59 -0800)] 
qemu: Fix build on riscv64

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agodefault-providers: define keymaps virtual runtime provider
Peter Marko [Wed, 27 Nov 2024 19:23:34 +0000 (20:23 +0100)] 
default-providers: define keymaps virtual runtime provider

VIRTUAL-RUNTIME_keymaps is defined in busybox init manager and also in
some package groups. Defining distro features in recipes is wrong.
Also this is not directly related to init manager.
So move all these definitions to default-providers.inc

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoinit-manager: define dev_manager for all init managers
Peter Marko [Wed, 27 Nov 2024 19:23:33 +0000 (20:23 +0100)] 
init-manager: define dev_manager for all init managers

Currently VIRTUAL-RUNTIME_dev_manager is defined by some init managers
with "??=" and in packagegroup-core-boot with "?=".
This means that this variable is different in this package group and in
all other the recipes.
This was discovered when trying to use new feature INIT_MANAGER when
migrating to scarthgap and using systemd distro. After deleting all
VIRTUAL_RUNTIME providers defined in init-manager-systemd udev was
installed additionally via packagegroup-core-boot.

Having a distro settings overriden in single recipe is wrong and needs
to be corrected. Therefore let's define the setting in all init managers
and remove it from packagegroup-core-boot.

core-image-tiny-initramfs has a dilemma - use busybox-mdev even if
distro does not enable it in busybox recipe to keep the image tiny, or
rather not install it even if distro enables it in busybox.
This patch chooses the first option.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agokernel-uboot: Support lzma compressed algorithm
Jamin Lin [Wed, 20 Nov 2024 06:17:24 +0000 (14:17 +0800)] 
kernel-uboot: Support lzma compressed algorithm

Linux kernel supports to compress its output binary with lzma algorithm and
U-Boot support to decompress lzma compressed image.

Both xz and lzma algorithms are identical and users can use xz utility with
format parameter to compress Image which supports lzma algorithm.

Add the following command to support lzma. This command is refer to Linux
kernel, https://github.com/torvalds/linux/blob/master/arch/powerpc/boot/wrapper

"xz --format=lzma -f -6 linux.bin"

Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agotcl: resolve conflicts with tcl8's man pages
Thomas Perrot [Tue, 26 Nov 2024 14:35:58 +0000 (15:35 +0100)] 
tcl: resolve conflicts with tcl8's man pages

Change the suffix from 'tcl' to 'tcl9' and from 'tcl8' to avoid
conflicts with the man pages provided by the tcl packages.

file /usr/share/man/mann/vwait.ntcl conflicts between attempted installs of tcl-doc-9.0.0-r0.riscv64 and tcl8-doc-8.6.15-r0.riscv64
file /usr/share/man/mann/while.ntcl conflicts between attempted installs of tcl-doc-9.0.0-r0.riscv64 and tcl8-doc-8.6.15-r0.riscv64
file /usr/share/man/mann/yield.ntcl conflicts between attempted installs of tcl-doc-9.0.0-r0.riscv64 and tcl8-doc-8.6.15-r0.riscv64
file /usr/share/man/mann/yieldto.ntcl conflicts between attempted installs of tcl-doc-9.0.0-r0.riscv64 and tcl8-doc-8.6.15-r0.riscv64
file /usr/share/man/mann/zlib.ntcl conflicts between attempted installs of tcl-doc-9.0.0-r0.riscv64 and tcl8-doc-8.6.15-r0.riscv64
[...]

Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython3: package tkinter's shared objects
Dan McGregor [Tue, 26 Nov 2024 18:06:42 +0000 (12:06 -0600)] 
python3: package tkinter's shared objects

Seems every time python is updated this gets removed. That's likely
because the tk option can't be enabled in python3-native without
creating a dependency loop.

Instead of manually editing the manifest every time, explicitly
add it in the recipe as suggested by Alexander Kanavin.

Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython3: do not overwrite FILES contents
Dan McGregor [Tue, 26 Nov 2024 18:06:41 +0000 (12:06 -0600)] 
python3: do not overwrite FILES contents

Instead of relying completely on the python packaging manifest,
allow some default values. This is useful for the edge cases that
can't be found automatically by the create_manifest step.

In particular, tkinter can't be built for python3-native, so its
consistently missed in manifest updates.

Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython3-flit-core: upgrade 3.9.0 -> 3.10.1
Ross Burton [Wed, 27 Nov 2024 14:50:00 +0000 (14:50 +0000)] 
python3-flit-core: upgrade 3.9.0 -> 3.10.1

Summary of changes:
- The ``--python`` option can now take the path of a virtualenv folder, as an
  alternative to a Python executable.
- The metadata in packages now has the names of optional dependency groups
  ("extras") normalised, complying with version 2.3 of the metadata standard.
- Fix potential substitution of environment variables into passwords read from
  ``.pypirc`` files.
- A warning is now shown when building packages which specify the old
  ``flit.buildapi`` backend, which should be replaced by
  ``flit_core.buildapi``. It's a good idea to always set a maximum
  version for the build requirement, to protect against changes in
  future major versions of Flit.
- Avoid using the deprecated ``datetime.utcfromtimestamp()``.
- The tests for ``flit_core`` are no longer part of the installed package,
  reducing the size of the wheels.

Remove the -tests package, as the tests are no longer installed.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython3-numpy: inherit pkgconfig
Trevor Gamblin [Wed, 27 Nov 2024 21:26:56 +0000 (16:26 -0500)] 
python3-numpy: inherit pkgconfig

This was supposed to be added in oe-core commit fd656aaf7fbe
("python3-numpy: upgrade 1.26.4 -> 2.1.3"), but it somehow got missed in
the final version of that patch. Add it now to fix possible do_compile
errors on some systems, due to host paths sneaking into the meson build
options, e.g.:

| Build machine cpu family: x86_64
| Build machine cpu: x86_64
| Host machine cpu family: x86_64
| Host machine cpu: x86_64
| Target machine cpu family: x86_64
| Target machine cpu: x86_64
| Program python3 found: YES (/home/tgamblin/workspace/yocto/poky/build/tmp/work/core2-64-poky-linux-musl/python3-numpy/2.1.3/recipe-sysroot-native/usr/bin/nativepython3)
| Did not find pkg-config by name 'pkg-config'
| Found pkg-config: NO
| Run-time dependency python found: NO (tried pkgconfig, pkgconfig and sysconfig)
|
| ../numpy-2.1.3/meson.build:41:12: ERROR: Python dependency not found
|
| A full log can be found at /home/tgamblin/workspace/yocto/poky/build/tmp/work/core2-64-poky-linux-musl/python3-numpy/2.1.3/build/meson-logs/meson-log.txt

and notably (meson-log.txt snippet):

|x86_64-poky-linux-musl-g++ -m64 -march=core2 -mtune=core2 -msse3 -mfpmath=sse -fstack protector-strong -O2 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security --sysroot=/media/build/poky/build/tmp/work/core2-64-poky-linux-musl/python3-numpy/2.1.3/recipe-sysroot -I/media/build/poky/build/tmp/work/core2-64-poky-linux-musl/python3-numpy/2.1.3/recipe-sysroot/usr/include/python3.13 -I/usr/include/python3.13

A bug has been filed about this and the related gcc issue: https://bugzilla.yoctoproject.org/show_bug.cgi?id=15672

With pkgconfig on the inherit line, all include directives in
meson-log.txt end up looking something like:

|-I/home/tgamblin/workspace/yocto/poky/build/tmp/work/core2-64-poky-linux-musl/python3-numpy/2.1.3/recipe-sysroot/usr/include/python3.13

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agolib: oe: license: Add missing import
Joshua Watt [Tue, 26 Nov 2024 23:14:58 +0000 (16:14 -0700)] 
lib: oe: license: Add missing import

The code in this file uses oe.qa, but it was not imported resulting an
an exception when a license error was detected

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython3-isodate: move to meta-python
Guðni Már Gilbert [Tue, 26 Nov 2024 18:31:50 +0000 (18:31 +0000)] 
python3-isodate: move to meta-python

python3-rdflib was the last consumer of this recipe in oe-core.

Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agopython3-rdflib: drop python3-isodate from RDEPENDS
Guðni Már Gilbert [Tue, 26 Nov 2024 18:31:49 +0000 (18:31 +0000)] 
python3-rdflib: drop python3-isodate from RDEPENDS

On Python 3.11+, the built-in datetime module is used instead.
This change was made in v7.1.0 release.

See PR 2929: https://github.com/RDFLib/rdflib/blob/main/CHANGELOG.md#2024-10-17-release-710

Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoclasses/go-vendor: Use UNPACKDIR instead of WORKDIR
Joshua Watt [Tue, 26 Nov 2024 21:44:48 +0000 (14:44 -0700)] 
classes/go-vendor: Use UNPACKDIR instead of WORKDIR

modules.txt is provided using file:// in SRC_URI, therefore it will be
found in UNPACKDIR instead of WORKDIR

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoinsane: Split ERROR_QA into CHECKLAYER_REQUIRED_TESTS
Richard Purdie [Wed, 13 Nov 2024 16:36:37 +0000 (16:36 +0000)] 
insane: Split ERROR_QA into CHECKLAYER_REQUIRED_TESTS

We'd like to start requiring some set of checks are enabled for Yocto Project
Compatible Status and to pass yocto-check-layer. Start by splitting ERROR_QA
into two sets, the ones we think can be required and the ones we know have
challenges to implement (e.g. with prebuilt binaries).

To change the required list, the YP TSC would need to approve.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agoxprop: upgrade 1.2.7 -> 1.2.8
Wang Mingyu [Tue, 26 Nov 2024 01:30:02 +0000 (09:30 +0800)] 
xprop: upgrade 1.2.7 -> 1.2.8

Changelog:
 Draw truecolor icons using dual-color half blocks

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
8 months agosystemd: upgrade 256.7 -> 256.8
Wang Mingyu [Tue, 26 Nov 2024 01:30:01 +0000 (09:30 +0800)] 
systemd: upgrade 256.7 -> 256.8

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>