From: Daniel Turull Date: Tue, 4 Aug 2026 14:11:34 +0000 (+0200) Subject: sqlite3: inherit upstream-stable-release-point X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=22cd1dfc82049e47be5e73057c2f12cda036f352;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git sqlite3: inherit upstream-stable-release-point SQLite cuts a per-minor maintenance branch for each release series, branch-3.53 matching the current PV alongside branch-3.52, -3.51 and -3.50, and tags patch releases off it. Superseded branches keep receiving them: 3.44.5 and 3.42.1 were released in mid-2025, long after 3.50 was current. So upgrades within a major.minor are stable point upgrades per the OE-Core stable release policy (ref-manual, "Stable Point Release Upgrades"). https://docs.yoctoproject.org/dev/ref-manual/release-process.html#stable-point-release-upgrades https://github.com/sqlite/sqlite/tree/branch-3.53 Checked the whole current series. 3.53.1 (May 05 2026) through 3.53.4 (Jul 24 2026) are almost entirely memory-safety and corruption-handling fixes: five out-of-bounds reads, two buffer overreads or overwrites, two integer overflows, hot-journal rollback with a zeroed super-journal record, safer double-to-int64 conversion, and mutex acquisition added to a batch of sqlite3_* entry points. 3.53.0 (Apr 09 2026) opens the series and does add API surface, confirming X.Y.0 bumps must stay outside the regex. Two additive exceptions in 3.53.4, neither touching the core library ABI: the SQLITE_SHELL_EDITION compile-time option for the CLI, and sqlite3_intck_register() in the incremental integrity-check extension. Already tracked this way on the OE stable branches, counting only bumps since each branch forked: kirkstone 3.38.2 -> 3.38.3 -> 3.38.5 and scarthgap 3.45.1 -> 3.45.3. wrynose is at 3.51.3 with no in-series bump yet. AI-Generated: Kiro with Claude Opus 5 Signed-off-by: Daniel Turull Signed-off-by: Mathieu Dubois-Briand --- diff --git a/meta/recipes-support/sqlite/sqlite3.inc b/meta/recipes-support/sqlite/sqlite3.inc index 94dbc38ec5e..8791749dc85 100644 --- a/meta/recipes-support/sqlite/sqlite3.inc +++ b/meta/recipes-support/sqlite/sqlite3.inc @@ -21,7 +21,7 @@ UPSTREAM_CHECK_REGEX = "releaselog/(?P(\d+[\.\-_]*)+)\.html" CVE_PRODUCT = "sqlite" -inherit pkgconfig siteinfo +inherit pkgconfig siteinfo upstream-stable-release-point # enable those which are enabled by default in configure PACKAGECONFIG ?= "fts4 fts5 rtree dyn_ext"