]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/log
thirdparty/openembedded/openembedded-core-contrib.git
2 months agonewlib: Upgrade 4.4.0 -> 4.5.0
Alejandro Hernandez Samaniego [Tue, 20 May 2025 18:24:46 +0000 (18:24 +0000)] 
newlib: Upgrade 4.4.0 -> 4.5.0

Licence changes:
- Adds BSD-2 for libm ld128 functions on 5c5ae2c08
- Adds Synopsys arc-*-* targets on 820dd50

Signed-off-by: Alejandro Hernandez Samaniego <alejandro@enedino.org>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agorust: Use patchelf in place of chrpath to edit rpaths
Khem Raj [Mon, 19 May 2025 22:51:54 +0000 (15:51 -0700)] 
rust: Use patchelf in place of chrpath to edit rpaths

chrpath has limitations e.g. the original rpath in ELF have to bigger in size
than the one being edited into it by chrpath, some toolchains do not use RPATH
but emit the RUNPATHs into ELF files and chrpath is not able to handle the
runpaths, this is the case with mips and pp32 build of rust, especially
when using clang compiler to build them.

patchelf can do more:

Modify RUNPATH entries
Add RPATH/RUNPATH where none existed
Set longer paths than the original
Convert between RPATH and RUNPATH

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoltp: backport patch to fix compilation error for Skylake -march=x86-64-v3
Yogesh Tyagi [Mon, 19 May 2025 11:08:17 +0000 (19:08 +0800)] 
ltp: backport patch to fix compilation error for Skylake -march=x86-64-v3

When the input compiler enables AVX, stack realignment requirements
causes gcc to fail to omit %rbp use, due to which the test fails to
clobber %rbp in inline asm.  Disable AVX to build the test on x86_64 so
that the test continues working.

Signed-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibgcrypt: upgrade 1.11.0 -> 1.11.1
Hongxu Jia [Mon, 19 May 2025 08:10:00 +0000 (16:10 +0800)] 
libgcrypt: upgrade 1.11.0 -> 1.11.1

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoman-pages: upgrade 6.13 -> 6.14
Hongxu Jia [Mon, 19 May 2025 08:09:59 +0000 (16:09 +0800)] 
man-pages: upgrade 6.13 -> 6.14

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agokernel-module-split: Allow for external conf files
Michal Sieron [Tue, 29 Apr 2025 13:20:36 +0000 (15:20 +0200)] 
kernel-module-split: Allow for external conf files

Some recipes might provide conf files produced during build phase or
simply tracked in the VCS instead of generating them with Yocto.
In such cases those conf files wouldn't be assigned to correct packages.
With this change, if user wants to generate a conf file they still can,
but not generating them won't prevent assigning the file to proper
package given the file exists.

Signed-off-by: Michal Sieron <michalwsieron@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agomesa: add support for asahi drivers
Markus Volk [Sun, 18 May 2025 16:10:10 +0000 (18:10 +0200)] 
mesa: add support for asahi drivers

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agomesa: update 25.0.5 -> 25.1.0
Markus Volk [Sun, 18 May 2025 16:10:09 +0000 (18:10 +0200)] 
mesa: update 25.0.5 -> 25.1.0

- drop two merged patches
- clover frontend is always compiled, even if not enabled
  clover is deprecated and was removed in master branch
  add a patch to fix that
- install gbm_backend_abi.h

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agokexec-tools: Fix ppc build
Khem Raj [Sat, 17 May 2025 15:02:13 +0000 (08:02 -0700)] 
kexec-tools: Fix ppc build

Compiler can analyse function pointer parameters now a days and
it reports the mismatches, hence fixed.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agolibvorbis: Ignore -mfused-madd as well for clang
Khem Raj [Sat, 17 May 2025 14:22:28 +0000 (07:22 -0700)] 
libvorbis: Ignore -mfused-madd as well for clang

This option is not universal for all compilers

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agoovmf: Upgrade to 202502 release
Khem Raj [Sat, 17 May 2025 01:31:48 +0000 (18:31 -0700)] 
ovmf: Upgrade to 202502 release

Refresh patches

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agom4: Upgrade to 1.4.20 release
Khem Raj [Sat, 17 May 2025 08:17:47 +0000 (01:17 -0700)] 
m4: Upgrade to 1.4.20 release

This has been 4 years in making, it has fixes to build with gcc-15
and some patches are upstream [1] [2]

This release collects several years of portability improvements, as
well as a couple of minor optimizations to performance.  Notable
improvements in this release include faster execution of the 'eval'
builtin. More details [3]

[1] https://github.com/coreutils/gnulib/commit/2d830e4a792fcd9f614ed08a7f18584b8b21d23b
[2] https://git.savannah.gnu.org/gitweb/?p=libsigsegv.git;a=commitdiff;h=a6ff69873110c0a8ba6f7fd90532dbc11224828c
[3] https://lists.gnu.org/archive/html/m4-announce/2025-05/msg00000.html

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agozip: fix a buffer overflow detected issue
Ming Liu [Fri, 16 May 2025 08:17:31 +0000 (10:17 +0200)] 
zip: fix a buffer overflow detected issue

A "buffer overflow detected" issue was observed as follows:
| *** buffer overflow detected ***: terminated
|
| zip error: Interrupted (aborting)

This issue is addressed by:
https://bugzilla.redhat.com/show_bug.cgi?id=2165653

Port the fix.

Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agoRevert "xserver-xorg: mark CVEs fixed in 21.1.16 as fixed"
Ross Burton [Fri, 16 May 2025 11:10:27 +0000 (12:10 +0100)] 
Revert "xserver-xorg: mark CVEs fixed in 21.1.16 as fixed"

The CPE data in the NVD database is now complete, so these overrides are
no longer needed.

This reverts commit e3419fbaf2999a821e1890a12ab27285cc25b577.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agoRevert "xwayland: mark CVEs fixed in 24.1.6 as fixed"
Ross Burton [Fri, 16 May 2025 11:09:17 +0000 (12:09 +0100)] 
Revert "xwayland: mark CVEs fixed in 24.1.6 as fixed"

The CPE data in the NVD database is now complete, so these overrides are
no longer needed.

This reverts commit 76c7bb2b9c1b5300f957f11e1601816f8f90b501.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agobuildstats-diff: find last two buildstats files if none are specified
Ross Burton [Fri, 16 May 2025 10:42:06 +0000 (11:42 +0100)] 
buildstats-diff: find last two buildstats files if none are specified

If no buildstats directories are specified, then find the last two runs
under BUILDDIR.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agoinsane.bbclass: Add unimplemented-ptest detection for cargo-based tests
Ines KCHELFI [Fri, 16 May 2025 09:09:11 +0000 (11:09 +0200)] 
insane.bbclass: Add unimplemented-ptest detection for cargo-based tests

Extend unimplemented-ptest QA check to detect Rust tests.
Note: To enable this QA check, add the following to your local.conf:
  WARN_QA += "unimplemented-ptest"

Examples of Rust-based meta-oe packages triggering unimplemented-ptest:

WARNING: cbindgen-0.28.0-r0 do_patch: QA Issue: cbindgen: cargo-based tests detected [unimplemented-ptest]
WARNING: fdfindd-10.2-r0 do_patch: QA Issue: fdfindd: cargo-based tests detected [unimplemented-ptest]
WARNING: deqp-runner-0.20.3-r0 do_patch: QA Issue: deqp-runner: cargo-based tests detected [unimplemented-ptest]
WARNING: bindgen-cli-0.71.1-r0 do_patch: QA Issue: bindgen-cli: cargo-based tests detected [unimplemented-ptest]
WARNING: python3-maturin-1.8.3-r0 do_patch: QA Issue: python3-maturin: cargo-based tests detected [unimplemented-ptest]
WARNING: uutils-coreutils-0.0.30-r0 do_patch: QA Issue: uutils-coreutils: cargo-based tests detected [unimplemented-ptest]

Signed-off-by: Ines KCHELFI <ines.kchelfi@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agolinux: add CVE_STATUS for a chrome* bug
Randy MacLeod [Thu, 15 May 2025 19:05:23 +0000 (15:05 -0400)] 
linux: add CVE_STATUS for a chrome* bug

This is not a linux-yocto CVE yet it shows up in the reports as:
   linux-yocto-custom CVE-2023-3079  0.0  8.8  Unpatched  https://nvd.nist.gov/vuln/detail/CVE-2023-3079

For reference, the CPE says:
  Affects cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
So affects all Linux systems,
  Running on/with cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

[ YOCTO #15780 ]

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
2 months agocryptodev-linux: clean up do_install
Ross Burton [Thu, 15 May 2025 15:43:05 +0000 (16:43 +0100)] 
cryptodev-linux: clean up do_install

The upstream Makefile now supports installing the headers directly[1],
so use the target instead of calling install manually.

[1] https://github.com/cryptodev-linux/cryptodev-linux/commit/e3962fea4e1816df420c36ad72845f90dfcfb611

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoopensbi: Pass CROSS_COMPILE and REPRODUCIBLE flags
Khem Raj [Thu, 15 May 2025 21:28:10 +0000 (14:28 -0700)] 
opensbi: Pass CROSS_COMPILE and REPRODUCIBLE flags

When using clang pass LLVM=y to makefile so it can select needed bits
using clang

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoiputils: Security fix for CVE-2025-47268
Yi Zhao [Fri, 16 May 2025 01:33:57 +0000 (09:33 +0800)] 
iputils: Security fix for CVE-2025-47268

CVE-2025-47268
ping in iputils through 20240905 allows a denial of service (application
error or incorrect data collection) via a crafted ICMP Echo Reply
packet, because of a signed 64-bit integer overflow in timestamp
multiplication.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-47268

Patch from:
https://github.com/iputils/iputils/commit/070cfacd7348386173231fb16fad4983d4e6ae40

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoconnman: Fix CVE-2025-32366
Praveen Kumar [Thu, 15 May 2025 06:08:08 +0000 (11:38 +0530)] 
connman: Fix CVE-2025-32366

In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length
that depends on an RR RDLENGTH value, i.e., *rdlen=ntohs(rr->rdlen)
and memcpy(response+offset,*end,*rdlen) without a check for whether
the sum of *end and *rdlen exceeds max. Consequently, *rdlen may be
larger than the amount of remaining packet data in the current state
of parsing. Values of stack memory locations may be sent over the
network in a response.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-32366

Upstream-patch:
https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=8d3be0285f1d4667bfe85dba555c663eb3d704b4

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agobabeltrace2: Update patch to upstreamed version of patch
Khem Raj [Wed, 14 May 2025 21:42:27 +0000 (14:42 -0700)] 
babeltrace2: Update patch to upstreamed version of patch

Update to the version of patch that landed upstream

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agosystemtap: Remove unneeded -Wno-dangling-pointer
Khem Raj [Wed, 14 May 2025 20:58:02 +0000 (13:58 -0700)] 
systemtap: Remove unneeded -Wno-dangling-pointer

This was added by me in below commit [1] to overcome a RISCV build failure
with gcc 13, the issue is gone with gcc-15

[1] https://git.yoctoproject.org/poky/commit/?id=4f09a93611134351381415d69228317d8a779014

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoptest-packagelists: Add riscv64 exclusions so we can add testing
Richard Purdie [Wed, 14 May 2025 22:06:34 +0000 (23:06 +0100)] 
ptest-packagelists: Add riscv64 exclusions so we can add testing

Add failing tests to the list of broken tests for riscv64 so we can
then start running the working tests and spot regressions.

We can them aim to remove these over time as they start working.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agooeqa/selftest/rust: Add exclusion to fix riscv64 builds
Richard Purdie [Wed, 14 May 2025 21:58:17 +0000 (22:58 +0100)] 
oeqa/selftest/rust: Add exclusion to fix riscv64 builds

There was one failure occurring in rust testing for qemuriscv64. Exclude
that test so we can enable in automated testing.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agogcc: Fix riscv multilib issues in plain toolchains
Richard Purdie [Wed, 14 May 2025 14:29:16 +0000 (15:29 +0100)] 
gcc: Fix riscv multilib issues in plain toolchains

RISC-V multilib currently doesn't work at all. We could disable multilib for
the riscv platform but that would then behave differently to all our others.
Instead, copy the non-multilib config over the multilib config for now for
riscv, meaning we can keep the platforms similar.

This isn't quite enough as the triplet specific c++ headers are in the wrong
place leading to compiler issues and testimage failures. Work around that too
until someone adds full multilib support for the platform (if desired).

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agodropbear: upgrade 2024.86 -> dropbear_2025.88
Peter Marko [Wed, 14 May 2025 19:14:38 +0000 (21:14 +0200)] 
dropbear: upgrade 2024.86 -> dropbear_2025.88

Handles CVE-2025-47203

SHA1 algorithms were removed by default, so patch for disabling it was
removed together with its package option. Doing it with conditional
patch was anyway a bad design. If someone still needs it, it should be
done via sed command on the config file.

Refreshed remaining patches.

Added patch to fix regression of the CVE fix.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agodropbear: add mirror
Peter Marko [Wed, 14 May 2025 19:14:37 +0000 (21:14 +0200)] 
dropbear: add mirror

Main download page is currently unavailable, switch to mirror listed in
README file of the dropbear repository and release tarballs.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agovalgrind: Fix build with clang
Khem Raj [Wed, 14 May 2025 16:47:42 +0000 (09:47 -0700)] 
valgrind: Fix build with clang

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agokernel-devsrc.bb: Replace extra System.map file with symlink
Erick Shepherd [Tue, 13 May 2025 19:47:42 +0000 (14:47 -0500)] 
kernel-devsrc.bb: Replace extra System.map file with symlink

Currently there are two .map files being copied to $kerneldir/build.
One of the files is System.map and the other is
System.map-<kernel version>. Each .map file takes up about 5MB and
have identical sha256sum hashes. This change will make it so only
System.map-<kernel version> is copied in order to save disk space.
It also recreates System.map as a symlink to that .map file.

Signed-off-by: Erick Shepherd <erick.shepherd@ni.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibxcvt: allow native build
Markus Volk [Tue, 13 May 2025 06:27:17 +0000 (08:27 +0200)] 
libxcvt: allow native build

'mutter' requires the 'cvt' binary at compile time to build the native backend
For this it depends on xserver-xorg-cvt-native, which is currently broken and
also deprecated.
[https://gitlab.freedesktop.org/xorg/xserver/-/merge_requests/637]

This commit would allow to use libxcvt-native to provide the needed binary
instead.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agocoreutils: Drop 0001-local.mk-fix-cross-compiling-problem.patch
Robert Yang [Tue, 13 May 2025 14:10:14 +0000 (07:10 -0700)] 
coreutils: Drop 0001-local.mk-fix-cross-compiling-problem.patch

The patch is used for fixing:
| Makefile:3418: *** Recursive variable 'INSTALL' references itself (eventually).  Stop.

Now the code and check and set that correctly:
if CROSS_COMPILING
cu_install_program = @INSTALL@
else
cu_install_program = src/ginstall
endif

So just drop the patch.

And also remove the ginstall hack to fix ptest case failure when single-binary
is enabled, I can't find the reason on why it was needed from git log.

Fixed:
install: missing file operand
Try 'install --help' for more information.

* Reproducer:
DISTRO_FEATURES:append = " ptest"
EXTRA_IMAGE_FEATURES:append = " ptest-pkgs"
IMAGE_INSTALL:append = " coreutils"
PACKAGECONFIG:append:pn-coreutils = " single-binary"

$ bitbake core-image-sato
$ runqemu tmp/deploy/images/qemux86-64/ nographic kvm

On target:
$ cd /usr/lib/coreutils/ptest
$ ./run-ptest
============================================================================
Testsuite summary for GNU coreutils 9.6
============================================================================
TOTAL: 655
PASS:  529
SKIP:  126
XFAIL: 0
FAIL:  0
XPASS: 0
ERROR: 0
============================================================================
make[1]: Leaving directory '/usr/lib/coreutils/ptest'

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agocoreutils: Fix file-rdeps for single-binary
Robert Yang [Tue, 13 May 2025 10:19:00 +0000 (03:19 -0700)] 
coreutils: Fix file-rdeps for single-binary

Fixed:
DISTRO_FEATURES:append = " ptest"
PACKAGECONFIG:append:pn-coreutils = " single-binary"

$ bitbake coreutils
ERROR: coreutils-9.6-r0 do_package_qa: QA Issue: /usr/lib/coreutils/ptest/src/yes contained in package coreutils-ptest requires /path/to//tmp/work/core2-64-poky-linux/coreutils/9.6/build/src/coreutils, but no providers found in RDEPENDS:coreutils-ptest? [file-rdeps]

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agotestimage: get real os-release file
Peter Marko [Tue, 13 May 2025 07:41:57 +0000 (09:41 +0200)] 
testimage: get real os-release file

/etc/os-release is a symlink to /usr/lib.
Symlink is retrieved as a dead link which points to nowhere if also the
original file is not accompanying it.
Fetch the real file in addition to this link.

Alternative could be to use "tar -h" (supported also by busybox tar),
however that could lose some important information if links are relevant
for failure analysis.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agorust: re-enable the unit tests that are previously ignored
Deepesh Varatharajan [Tue, 13 May 2025 09:32:08 +0000 (02:32 -0700)] 
rust: re-enable the unit tests that are previously ignored

Some unit tests were previously marked as ignored due to failures in earlier
versions of Rust. With the upgrade to Rust 1.85.1, these tests are now passing
consistently. They've been re-enabled and verified to run successfully on the
latest version.

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoopenssh: Upgrade 9.9p2 -> 10.0p1
Richard Purdie [Tue, 13 May 2025 15:27:57 +0000 (16:27 +0100)] 
openssh: Upgrade 9.9p2 -> 10.0p1

Fix sshd by ensuring the agent daemon is included.

Internally, this release is versioned as 10.0p2 but upstream don't plan to
change this or re-release.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibsoup-2.4: Drop recipe as obsolete
Richard Purdie [Tue, 13 May 2025 12:43:42 +0000 (13:43 +0100)] 
libsoup-2.4: Drop recipe as obsolete

The last user in OE-Core was gst-examples. This has been upgraded and the dependency
dropped, all other users can use libsoup3 instead. Therefore remove the obsolete and
deprecated version.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agogst-examples: Update 1.18.6 -> 1.26.1
Richard Purdie [Tue, 13 May 2025 12:39:30 +0000 (13:39 +0100)] 
gst-examples: Update 1.18.6 -> 1.26.1

Update to the version from the gstreamer monorepo, bringing it back
into line with the other gstreamer revisions.

Drop the libsoup-2.4 dependency which disables the webrtc code, we
weren't building that anyway as it needs libnice enabled in
gstreamer-plugins-bad.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agou-boot: ensure keys are generated before assembling U-Boot FIT image
Rogerio Guerra Borin [Mon, 12 May 2025 15:48:37 +0000 (12:48 -0300)] 
u-boot: ensure keys are generated before assembling U-Boot FIT image

Add the task dependency:

do_uboot_assemble_fitimage -> virtual/kernel:do_kernel_generate_rsa_keys

to ensure the kernel FIT image signing keys are available when creating
the U-Boot DTB. This is done only if the signing of the kernel FIT image
is enabled (UBOOT_SIGN_ENABLE="1").

The lack of the dependency causes build errors when executing a build
with no kernel FIT keys initially present in the keys directory. In such
cases one would see an output like this in the Bitbake logs:

Log data follows:
| DEBUG: Executing shell function do_uboot_assemble_fitimage
| Couldn't open RSA private key: '/workdir/build/keys/fit/dev.key': No such file or directory
| Failed to sign 'signature' signature node in 'conf-1' conf node
| FIT description: Kernel Image image with one or more FDT blobs
| ...

This issue was introduced by commit 259bfa86f384 where the dependency
between U-Boot and the kernel was removed (for good reasons). Before
that commit the dependency was set via DEPENDS so that, in terms of
tasks, one had:

u-boot:do_configure -> virtual/kernel:do_populate_sysroot

and the chain leading to the key generation was:

virtual/kernel:do_populate_sysroot -> virtual/kernel:do_install
virtual/kernel:do_install -> virtual/kernel:do_assemble_fitimage
virtual/kernel:do_assemble_fitimage -> virtual/kernel:do_kernel_generate_rsa_keys

With the removal of the first dependency, no more guarantees exist that
the keys would be present when assembling the U-Boot FIT image. That's
the situation we are solving with the present commit.

Fixes: 259bfa86f384 ("u-boot: kernel-fitimage: Fix dependency loop if UBOOT_SIGN_ENABLE and UBOOT_ENV enabled")
Signed-off-by: Rogerio Guerra Borin <rogerio.borin@toradex.com>
Cc: Marek Vasut <marex@denx.de>
Cc: Sean Anderson <sean.anderson@seco.com>
Cc: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agorpm-sequoia: add ptest
Ines KCHELFI [Mon, 12 May 2025 14:44:09 +0000 (16:44 +0200)] 
rpm-sequoia: add ptest

In rpm-sequoia, some default paths in test code (OUT_DIR,
CARGO_MANIFEST_DIR) are invalid at runtime and cause test failures.

To fix this, patch the test code (symbols.rs) to support overriding these
paths via optional environment variables: FORCE_RUNTIME_PATH_LIB and
FORCE_RUNTIME_PATH_SRC.

Also make -ptest package RDEPEND on -dev package.

Tests take less than a second so this is added to PTEST_FAST.

ptest result:
|root@qemux86-64:~# ptest-runner rpm-sequoia
|START: ptest-runner
|2025-05-02T15:57
|BEGIN: /usr/lib/rpm-sequoia/ptest
|
|running 1 test
|test symbols ... ok
|
|test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
|
|
|running 2 tests
|test tests::merge_certs_mismatch ... ok
|test tests::merge_certs ... ok
|
|test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
|
|DURATION: 0
|END: /usr/lib/rpm-sequoia/ptest
|2025-05-02T15:57
|STOP: ptest-runner
|TOTAL: 1 FAIL: 0

Signed-off-by: Ines KCHELFI <ines.kchelfi@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoptest-cargo: fix tests output format for testimage
Ines KCHELFI [Mon, 12 May 2025 14:44:11 +0000 (16:44 +0200)] 
ptest-cargo: fix tests output format for testimage

In testimage, the ptest-runner output parser expects test results to follow
a specific format,with lines beginning with PASS:, FAIL:, or SKIP:. ptest-cargo,
currently, does not emit any of those lines and the parser treats the test
section as having no results, causing a test failure with :

AssertionError:
ptests which had no test results:
['<package>']

This patch ensures that the recipes using ptest-cargo class explicitly emits
PASS: or FAIL: lines, making the results compatible with the test parser and
preventing test failures.

Signed-off-by: Ines KCHELFI <ines.kchelfi@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-cython: upgrade 3.0.12 -> 3.1.0
Trevor Gamblin [Mon, 12 May 2025 14:43:51 +0000 (10:43 -0400)] 
python3-cython: upgrade 3.0.12 -> 3.1.0

Many changes are included with this release, including support for
freethreading builds of CPython 3.13, cleanup of legacy code, and many
other features and bug fixes.

Changelog: https://github.com/cython/cython/blob/master/CHANGES.rst

Patch '0001-Output-import-relative-paths-in-generated-C-code.-GH.patch'
is included in 3.1.0, so we no longer need the backport:

|tgamblin@megalith ~/workspace/git/pythonsrc/cython (master)$ git tag --contains 20bceea6b19ffc2f65b9fba2e4f737f09e5a2b20
|3.1.0
|3.1.0-1
|3.1.0a1
|3.1.0b1
|3.1.0rc1
|3.1.0rc2

Reproducibility looks OK.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3: upgrade 3.13.2 -> 3.13.3
Trevor Gamblin [Mon, 12 May 2025 13:23:05 +0000 (09:23 -0400)] 
python3: upgrade 3.13.2 -> 3.13.3

This adds some security fixes and many new changes to the library.

Changelog: https://docs.python.org/3/whatsnew/changelog.html#python-3-13-3-final

Modify 0001-Makefile.pre-use-qemu-wrapper-when-gathering-profile.patch
to remove 'test_types' from the pgo-wrapper call, since that fails now
under qemu.

Reproducibility looks OK.

ptest results OK:

|== Tests result: SUCCESS ==
|
|29 tests skipped:
|    test.test_asyncio.test_windows_events
|    test.test_asyncio.test_windows_utils test.test_gdb.test_backtrace
|    test.test_gdb.test_cfunction test.test_gdb.test_cfunction_full
|    test.test_gdb.test_misc test.test_gdb.test_pretty_print
|    test_android test_apple test_asdl_parser test_clinic test_devpoll
|    test_free_threading test_generated_cases test_idle test_ioctl
|    test_kqueue test_launcher test_msvcrt test_startfile test_tcl
|    test_tkinter test_ttk test_ttk_textonly test_turtle test_winapi
|    test_winconsoleio test_winreg test_wmi
|
|9 tests skipped (resource denied):
|    test_curses test_peg_generator test_pyrepl test_smtpnet
|    test_socketserver test_urllib2net test_urllibnet test_winsound
|    test_zipfile64
|
|442 tests OK.
|
|Total duration: 2 min 48 sec
|Total tests: run=43,896 skipped=2,268
|Total test files: run=471/480 skipped=29 resource_denied=9
|Result: SUCCESS
|DURATION: 169
|END: /usr/lib/python3/ptest
|2025-05-12T12:34
|STOP: ptest-runner
|TOTAL: 1 FAIL: 0
|root@qemux86-64:~#

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolinux-firmware: upgrade 20250410 -> 20250509
Vivek Puar [Mon, 12 May 2025 11:36:15 +0000 (17:06 +0530)] 
linux-firmware: upgrade 20250410 -> 20250509

Adding QUPv3 firmware for QCS9100 platform

License-Update: additional files

Signed-off-by: Vivek Puar <vpuar@qti.qualcomm.com>
Cc: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agocompiler-rt-sanitizers: Fix native builds on aarch64 build hosts
Khem Raj [Tue, 13 May 2025 06:32:03 +0000 (23:32 -0700)] 
compiler-rt-sanitizers: Fix native builds on aarch64 build hosts

Add logic to deduce compiler-rt target architecture based on tune
features

Cleanup the cmake options for native/nativesdk/target recipes

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agocompile-rt: Fix building compiler-native on aarch64 build hosts.
Khem Raj [Mon, 12 May 2025 04:10:47 +0000 (21:10 -0700)] 
compile-rt: Fix building compiler-native on aarch64 build hosts.

Using target triple confuses the native system compiler to find
libgcc and C runtime during compiler-rt-native build

Fixes
|     /home/khem/yoe/build/tmp/hosttools/ld: cannot find crtbeginS.o: No such file or directory
|     /home/khem/yoe/build/tmp/hosttools/ld: cannot find -lgcc: No such file or directory
|     /home/khem/yoe/build/tmp/hosttools/ld: cannot find -lgcc_s: No such file or directory
|     clang: error: linker command failed with exit code 1 (use -v to see invocation)
|     ninja: build stopped: subcommand failed.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agogo: upgrade 1.24.2 -> 1.24.3
Peter Marko [Sun, 11 May 2025 17:40:37 +0000 (19:40 +0200)] 
go: upgrade 1.24.2 -> 1.24.3

Upgrade to latest 1.24.x release [1]:

$ git --no-pager log --oneline go1.24.2..go1.24.3
34c8b14ca9 (release-branch.go1.24) [release-branch.go1.24] go1.24.3
8947f3395e [release-branch.go1.24] os: avoid escape from Root via paths ending in ../
06fd2f115b [release-branch.go1.24] cmd/compile: remove no-longer-necessary recursive inlining checks
f66ab6521c [release-branch.go1.24] cmd/internal/obj/wasm: use i64 for large return addr
c1f9c2c7b0 [release-branch.go1.24] cmd/go/internal/load: join incompatible and dirty build specifiers with .
0ab64e2caa [release-branch.go1.24] runtime: cleanup M vgetrandom state before dropping P
56eb99859d [release-branch.go1.24] internal/runtime/maps: pass proper func PC to race.WritePC/race.ReadPC
43130aff52 [release-branch.go1.24] runtime: fix 9-arg syscall on darwin/amd64
b2c005e7b2 [release-branch.go1.24] crypto/tls: fix ECH compatibility
a9d9b55709 [release-branch.go1.24] cmd/link: choose one with larger size for duplicated BSS symbols
fa7217f74d [release-branch.go1.24] os: avoid panic in Root when symlink references the root

Fixes CVE-2025-22873

[1] https://github.com/golang/go/compare/go1.24.2...go1.24.3

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agocompiler-rt: Exclude sync builtins from build when arm < v6
Khem Raj [Sat, 10 May 2025 22:05:43 +0000 (15:05 -0700)] 
compiler-rt: Exclude sync builtins from build when arm < v6

arm architecture < v6 does not have the dmb support, therefore do
not add the sync primitives to compiler-rt builtins build

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agocompiler-rt: Map the COMPILER_RT_DEFAULT_TARGET_ARCH
Khem Raj [Sat, 10 May 2025 22:05:42 +0000 (15:05 -0700)] 
compiler-rt: Map the COMPILER_RT_DEFAULT_TARGET_ARCH

COMPILER_RT_DEFAULT_TARGET_ARCH is not 1 to 1 match with HOST_ARCH
especially for armv5/arm4

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoopenssl: add fips support
Yi Zhao [Fri, 9 May 2025 14:55:00 +0000 (22:55 +0800)] 
openssl: add fips support

* Add PACKAGECONFIG[fips] to enable fips build.
* Split a new package openssl-ossl-module-fips for fips.so.
* Add pkg_postinst_ontarget for openssl-ossl-module-fips to ensure the
  config file fipsmodule.cnf is created on target. This is because we
  should not use the same fipsmodule.cnf on different machines.
  The 'openssl fipsinstall' commandline in pkg_postinst_ontarget will do
  the following things:
  1. Run the FIPS module self tests on target.
  2. Generate config file fipsmodule.conf containing information about
     the FIPS module such as the calculated MAC of the module.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolinux/cve-exclusion: Update exclusions after kernel update
Mathieu Dubois-Briand [Mon, 12 May 2025 13:09:26 +0000 (15:09 +0200)] 
linux/cve-exclusion: Update exclusions after kernel update

Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoswig: upgrade 4.3.0 -> 4.3.1
Wang Mingyu [Mon, 12 May 2025 09:03:39 +0000 (17:03 +0800)] 
swig: upgrade 4.3.0 -> 4.3.1

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoshaderc: upgrade 2025.1 -> 2025.2
Wang Mingyu [Mon, 12 May 2025 09:03:38 +0000 (17:03 +0800)] 
shaderc: upgrade 2025.1 -> 2025.2

Changelog:
===========
 - Update dependencies: Glslang, SPIRV-Tools, SPIRV-Headers
 - Supports BFloat16 floating point types

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoresolvconf: upgrade 1.92 -> 1.93
Wang Mingyu [Mon, 12 May 2025 09:03:37 +0000 (17:03 +0800)] 
resolvconf: upgrade 1.92 -> 1.93

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agorepo: upgrade 2.53 -> 2.54
Wang Mingyu [Mon, 12 May 2025 09:03:36 +0000 (17:03 +0800)] 
repo: upgrade 2.53 -> 2.54

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agore2c: upgrade 4.1 -> 4.2
Wang Mingyu [Mon, 12 May 2025 09:03:35 +0000 (17:03 +0800)] 
re2c: upgrade 4.1 -> 4.2

Changelog:
============
- Added Swift backend
- Added options:
   "--lang swift"
   "--computed-gotos-relative"
- Added configurations:
   "re2c:cgoto:relative", "re2c:computed-gotos:relative"
   "re2c:yyfn:throw"
- Added syntax file code templates:
   "code:cgoto"
   "code:cgoto_data"
   "code:yytarget_filter"
   "code:type_yyctable"
- Added syntax file conditionals:
   ".cgoto.relative"
   ".yyfn.throw"

- Added some C++ benchmarks without submatch extraction.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-yamllint: upgrade 1.37.0 -> 1.37.1
Wang Mingyu [Mon, 12 May 2025 09:03:34 +0000 (17:03 +0800)] 
python3-yamllint: upgrade 1.37.0 -> 1.37.1

Changelog:
=============
- Rule comments: tell how many spaces are expected
- Rule quoted-strings: Fix only-when-needed on multiline with backslash
- Config: Report if rules is not a dict
- Fix test_codec_built_in_equivalent() test when run with pytest
- CI: Fix TestPyPI "dev0" versions for master commits on tags
- Docs: Add links to GitHub repository and releases
- Docs: Fix GitLab integration example
- Docs: Fix GitLab integration link
- Fix the tests badge link on the README

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-typing-extensions: upgrade 4.13.1 -> 4.13.2
Wang Mingyu [Mon, 12 May 2025 09:03:32 +0000 (17:03 +0800)] 
python3-typing-extensions: upgrade 4.13.1 -> 4.13.2

Changelog:
=============
- Fix TypeError when taking the union of typing_extensions.TypeAliasType and a
  typing.TypeAliasType on Python 3.12 and 3.13.
- Backport from CPython PR #132160 to avoid having user arguments shadowed in
  generated __new__ by @typing_extensions.deprecated.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-pycairo: upgrade 1.27.0 -> 1.28.0
Wang Mingyu [Mon, 12 May 2025 09:03:31 +0000 (17:03 +0800)] 
python3-pycairo: upgrade 1.27.0 -> 1.28.0

Changelog:
 https://pycairo.readthedocs.io/en/latest/changelog.html#v1-28-0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-poetry-core: upgrade 2.1.2 -> 2.1.3
Wang Mingyu [Mon, 12 May 2025 09:03:30 +0000 (17:03 +0800)] 
python3-poetry-core: upgrade 2.1.2 -> 2.1.3

Changed
----------
- Update list of supported licenses

Fixed
--------
- Fix an issue where the union of specific inverse or partially inverse markers
  was not simplified
- Fix an issue where optional dependencies defined in the project section were
  treated as non-optional when a source was defined for them in the tool.poetry
  section
- Fix an issue where markers with === were not parsed correctly
- Fix an issue where local versions with upper case letters caused an error
- Fix an issue where extra markers with a value starting with "in" were not
  validated correctly
- Fix an issue where inheriting from WheelBuilder was unnecessarily difficult

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-pip: upgrade 25.0.1 -> 25.1.1
Wang Mingyu [Mon, 12 May 2025 09:03:29 +0000 (17:03 +0800)] 
python3-pip: upgrade 25.0.1 -> 25.1.1

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-pdm: upgrade 2.23.1 -> 2.24.1
Wang Mingyu [Mon, 12 May 2025 09:03:28 +0000 (17:03 +0800)] 
python3-pdm: upgrade 2.23.1 -> 2.24.1

Features & Improvements
------------------------
- New command pdm new that behaves like pdm init but creates a new project.
- Support use --name as project name for command pdm new e.g. pdm new hello --name world
- Support exporting to pylock.toml format as described by PEP 751.

Bug Fixes
---------
- Pass the --quiet option to pdm sync command.
- If a .python-version file is found and it contains multiple lines, the file
  will be ignored. The usage of the .python-version file can be disabled, if
  configuration value python.use_python_version (or environment variable PDM_USE_PYTHON_VERSION) is False.
- fix pdm config -e command to open read-only file under linux
- Replace project names and import names in both README.md and pyproject.toml when running pdm init <template>.
- Fix a bug that URL dependency hashes are not updated if running pdm lock --update-reuse.
- Install the project when using the BaseSynchronizer with install_self set
  to True. This fixes the bug that when calling pdm sync --quiet, it skips
  installing the project itself.
- Mark one additional test as requiring network, and fix another one
  not to require it anymore.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-packaging: upgrade 24.2 -> 25.0
Wang Mingyu [Mon, 12 May 2025 09:03:27 +0000 (17:03 +0800)] 
python3-packaging: upgrade 24.2 -> 25.0

Changelog:
============
- Re-add a test for Unicode file name parsing
- Upgrade to ruff 0.9.1
- Add support for PEP 738 Android tags
- feat(markers): support 'extras' and 'dependency_groups' markers

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-meson-python: upgrade 0.17.1 -> 0.18.0
Wang Mingyu [Mon, 12 May 2025 09:03:26 +0000 (17:03 +0800)] 
python3-meson-python: upgrade 0.17.1 -> 0.18.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-markdown: upgrade 3.7 -> 3.8
Wang Mingyu [Mon, 12 May 2025 09:03:25 +0000 (17:03 +0800)] 
python3-markdown: upgrade 3.7 -> 3.8

Changelog:
===========
Changed
-------
- DRY fix in abbr extension by introducing method create_element
- Clean up test directory by removing some redundant tests and port non-redundant cases to the newer test framework.
- Improved performance of the raw HTML post-processor

Fixed
---------
- Backslash Unescape IDs set via attr_list on toc
- Ensure md_in_html processes content inside "markdown" blocks as they are parsed outside of "markdown" blocks to keep things more consistent for third-party extensions
- md_in_html handle tags within inline code blocks better
- md_in_html fix handling of one-liner block HTML handling
- Ensure <center> is treated like a block-level element
- Ensure that abbr extension respects AtomicString and does not process perceived abbreviations in these strings
- Ensure smarty extension correctly renders nested closing quotes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-mako: upgrade 1.3.9 -> 1.3.10
Wang Mingyu [Mon, 12 May 2025 09:03:24 +0000 (17:03 +0800)] 
python3-mako: upgrade 1.3.9 -> 1.3.10

Changelog:
- Fix undefined variable errors when strict_undefined=True when using a
nested list comprehension.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-lxml: upgrade 5.3.2 -> 5.4.0
Wang Mingyu [Mon, 12 May 2025 09:03:23 +0000 (17:03 +0800)] 
python3-lxml: upgrade 5.3.2 -> 5.4.0

Bugfix:
-Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve several CVEs.
(Binary wheels for Windows continue to use a patched libxml2 2.11.9 and libxslt 1.1.39.)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-jsonschema-specifications: upgrade 2024.10.1 -> 2025.4.1
Wang Mingyu [Mon, 12 May 2025 09:03:22 +0000 (17:03 +0800)] 
python3-jsonschema-specifications: upgrade 2024.10.1 -> 2025.4.1

Changelog:
- Add SPDX license identifier

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-hypothesis: upgrade 6.131.0 -> 6.131.14
Wang Mingyu [Mon, 12 May 2025 09:03:21 +0000 (17:03 +0800)] 
python3-hypothesis: upgrade 6.131.0 -> 6.131.14

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-hatch-fancy-pypi-readme: upgrade 24.1.0 -> 25.1.0
Wang Mingyu [Mon, 12 May 2025 09:03:20 +0000 (17:03 +0800)] 
python3-hatch-fancy-pypi-readme: upgrade 24.1.0 -> 25.1.0

Changelog:
==========
- $HFPR_PACKAGE_NAME is now replaced by the package name in the PyPI readme.
- Support for Python 3.7.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-certifi: upgrade 2025.1.31 -> 2025.4.26
Wang Mingyu [Mon, 12 May 2025 09:03:19 +0000 (17:03 +0800)] 
python3-certifi: upgrade 2025.1.31 -> 2025.4.26

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopython3-calver: upgrade 2025.04.02 -> 2025.04.17
Wang Mingyu [Mon, 12 May 2025 09:03:18 +0000 (17:03 +0800)] 
python3-calver: upgrade 2025.04.02 -> 2025.04.17

Changelog:
- test: Delete SOURCE_DATE_EPOCH envvar if already present for robustness

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agopixman: upgrade 0.44.2 -> 0.46.0
Wang Mingyu [Mon, 12 May 2025 09:03:17 +0000 (17:03 +0800)] 
pixman: upgrade 0.44.2 -> 0.46.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoman-db: upgrade 2.13.0 -> 2.13.1
Wang Mingyu [Mon, 12 May 2025 09:03:15 +0000 (17:03 +0800)] 
man-db: upgrade 2.13.0 -> 2.13.1

0001-check-for-_nl_msg_cat_cntr-in-configure.patch
flex.patch
removed since they're included in 2.13.1

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibxkbcommon: upgrade 1.8.1 -> 1.9.2
Wang Mingyu [Mon, 12 May 2025 09:03:14 +0000 (17:03 +0800)] 
libxkbcommon: upgrade 1.8.1 -> 1.9.2

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibxft: upgrade 2.3.8 -> 2.3.9
Wang Mingyu [Mon, 12 May 2025 09:03:13 +0000 (17:03 +0800)] 
libxft: upgrade 2.3.8 -> 2.3.9

Changelog:
==========
- manpage formatting-fixes
- meson: Add option to build with meson
- Require xproto >= 7.0.22 for _X_UNUSED
- Remove support for building with pre-C89 versions of C
- Remove support for building with pre-X11R7 versions of X
- fix potential buffer overrun in _XftGlyphDefault
- issue 21: remove redundant/out-of-place prototype for XftNameUnparse
- build-fix for older versions of freetype2: FT_HAS_SVG was added late in 2021
- issue 19: Problem loading "SourceCodePro-Regular" font in Fedora

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibuv: upgrade 1.50.0 -> 1.51.0
Wang Mingyu [Mon, 12 May 2025 09:03:12 +0000 (17:03 +0800)] 
libuv: upgrade 1.50.0 -> 1.51.0

Changelog:
===========
* win: fix leak in uv_os_tmpdir
* docs: fix RTD build
* win: lazy-load [GS]etThreadDescription symbols
* linux: try preadv64/pwritev64 before preadv/pwritev
* win: check cwd length before spawning a child process
* macos,bsd: handle missing /dev/null in chroot env
* doc: fix README link text
* win: fix order of FILE_STAT_BASIC_INFORMATION struct fields
* macos: increase child process stdio buffer size
* doc: add C3 bindings to LINKS.md
* unix: remove unnecessary errno.h include in poll.c
* win: fix the inconsistency in volume serial number
* unix: add thread affinity support on openharmony
* unix: enable getrusage for SunOS
* unix,win: accept NAN/INFINITY as file timestamps
* win: add ENABLE_VIRTUAL_TERMINAL_INPUT raw tty mode
* test: handle UV_ENOTSUP in platform_output
* doc: fix rendering of threading.html
* unix,sunos: enable use of sendmmsg on Solaris and Illumos
* unix: handle out of memory in iface name copy
* openbsd: do not error out if cpuspeed is not available
* test: skip thread_name_threadpool on AIX/IBMi
* aix,ibmi: fix undeclared identifiers
* unix,sunos: prefer SO_REUSEPORT for load balancing
* doc: free lib pointer before function return
* test: link with libm
* style: rename parameter to match definition
* test: support partial output lines in test runner
* build: switch from c90 to c11
* linux: allow nul bytes in abstract socket address
* sunos: use pipe2 on solaris and illumos
* unix: remove TOCTOU issues from uv_pipe_chmod
* unix: use pipe_fname if getsockname returns nothing
* haiku: use uint32 instead of uint32_t
* doc: update thread pool stack size comment
* unix: improve uv_loop_init OOM handling
* test: merge uv_tcp_connect callbacks
* test: skip multievent tests on macOS with TSAN enabled
* linux: align CPU quota calculation with Rust
* kqueue: improve fs event watcher OOM handling
* sunos: improve fs event watcher OOM handling
* build: shorten instructions for cmake build

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoliburcu: upgrade 0.15.1 -> 0.15.2
Wang Mingyu [Mon, 12 May 2025 09:03:11 +0000 (17:03 +0800)] 
liburcu: upgrade 0.15.1 -> 0.15.2

Changelog:
==========
 * fix: __atomic_always_lock_free() not a constant expression on g++ < 5.1
 * fix: urcu assert fallback for pre-C11 builds
 * doc: update uatomic-api for static assert
 * Add uatomic size static assert for 's390'
 * Add uatomic size static assert for 'sparc64'
 * Add uatomic size static assert for 'ppc'
 * Add uatomic size static assert for 'x86'
 * Add uatomic size static assert for 'generic'
 * Add uatomic size static assert
 * Use UATOMIC_HAS_ATOMIC_INT/LLONG in generic implementation
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for x86
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for tile
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for sparc64
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for s390
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for riscv
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for ppc
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for nios2
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for mips
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for m68k
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for loongarch
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for ia64
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for hppa
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for 'gcc' arch
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for arm
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for alpha
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for aarch64
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for atomic builtins
 * Add builtin atomics size static asserts
 * cleanup: use URCU_GCC_VERSION from compiler.h
 * fix: atomic builtins defines for type support
 * Move back CMM_LOAD/STORE_SHARED to volatile access
 * Add cmm_annotate_mem_acquire() to URCU_DEREFERENCE_USE_VOLATILE rcu_dereference
 * Use uatomic_load CMM_RELAXED in URCU_DEREFERENCE_USE_VOLATILE
 * Fix: Re-introduce URCU_DEREFERENCE_USE_VOLATILE read barrier depends for alpha
 * Tree-wide: Rename to uatomic_load/uatomic_store
 * src: Use __*__ for attribute names
 * API: Use __*__ for attribute names
 * Fix Changelog 0.15.1 date

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibsdl2: upgrade 2.32.4 -> 2.32.6
Wang Mingyu [Mon, 12 May 2025 09:03:10 +0000 (17:03 +0800)] 
libsdl2: upgrade 2.32.4 -> 2.32.6

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibpng: upgrade 1.6.47 -> 1.6.48
Wang Mingyu [Mon, 12 May 2025 09:03:09 +0000 (17:03 +0800)] 
libpng: upgrade 1.6.47 -> 1.6.48

Changelog:
============
-  Fixed the floating-point version of the mDCv setter 'png_set_mDCv'.
-  Added #error directives to discourage the inclusion of private
   libpng implementation header files in PNG-supporting applications.
-  Added the CMake build option 'PNG_LIBCONF_HEADER', to be used as an
   alternative to 'DFA_XTRA'.
-  Removed the Travis CI configuration files

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibjpeg-turbo: upgrade 3.0.1 -> 3.1.0
Wang Mingyu [Mon, 12 May 2025 09:03:08 +0000 (17:03 +0800)] 
libjpeg-turbo: upgrade 3.0.1 -> 3.1.0

License-Update: zlib License clarifications

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibjitterentropy: upgrade 3.6.2 -> 3.6.3
Wang Mingyu [Mon, 12 May 2025 09:03:07 +0000 (17:03 +0800)] 
libjitterentropy: upgrade 3.6.2 -> 3.6.3

Changelog:
================
- Correct time stamp processing on AIX
- Use high-resolution time stamp on Apple Silicon
- GCD power-up test: consider OSR

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibgpg-error: upgrade 1.51 -> 1.55
Wang Mingyu [Mon, 12 May 2025 09:03:06 +0000 (17:03 +0800)] 
libgpg-error: upgrade 1.51 -> 1.55

0001-Do-not-fail-when-testing-config-scripts.patch
refreshed for 1.55

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibffi: upgrade 3.4.7 -> 3.4.8
Wang Mingyu [Mon, 12 May 2025 09:03:05 +0000 (17:03 +0800)] 
libffi: upgrade 3.4.7 -> 3.4.8

not-win32.patch
refreshed for 3.4.8

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibcgroup: upgrade 3.1.0 -> 3.2.0
Wang Mingyu [Mon, 12 May 2025 09:03:04 +0000 (17:03 +0800)] 
libcgroup: upgrade 3.1.0 -> 3.2.0

0001-include-Makefile-install-systemd.h-by-default.patch
removed since it's included in 3.2.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agolibadwaita: upgrade 1.7.0 -> 1.7.2
Wang Mingyu [Mon, 12 May 2025 09:03:03 +0000 (17:03 +0800)] 
libadwaita: upgrade 1.7.0 -> 1.7.2

90d68222c184f681472d9d9ce2ae443ebd76386e.patch
removed since it's included in 1.7.2

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agokexec-tools: upgrade 2.0.30 -> 2.0.31
Wang Mingyu [Mon, 12 May 2025 09:03:02 +0000 (17:03 +0800)] 
kexec-tools: upgrade 2.0.30 -> 2.0.31

0001-kexec.c-add-MFD_NOEXEC_SEAL-flag-explicitly.patch
refreshed for 2.0.31

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoiso-codes: upgrade 4.17.0 -> 4.18.0
Wang Mingyu [Mon, 12 May 2025 09:03:01 +0000 (17:03 +0800)] 
iso-codes: upgrade 4.17.0 -> 4.18.0

License-Update: Replace FSF postal address with their website

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoharfbuzz: upgrade 11.1.0 -> 11.2.0
Wang Mingyu [Mon, 12 May 2025 09:03:00 +0000 (17:03 +0800)] 
harfbuzz: upgrade 11.1.0 -> 11.2.0

Changelog:
============
- Painting of COLRv1 fonts without clip boxes is now about 10 times faster.
- Synthetic bold/slant of a sub font is now respected, instead of using the parent's.
- Glyph extents for fonts synthetic bold/slant are now accurately calculated.
- Various build fixes
- New API:
  +hb_font_is_synthetic()
  +hb_font_draw_glyph_or_fail_func_t
  +hb_font_paint_glyph_or_fail_func_t
  +hb_font_funcs_set_draw_glyph_or_fail_func()
  +hb_font_funcs_set_paint_glyph_or_fail_func()
  +hb_font_draw_glyph_or_fail()
  +hb_font_paint_glyph_or_fail()
- Deprecated API:
  -hb_font_draw_glyph_func_t
  -hb_font_paint_glyph_func_t
  -hb_font_funcs_set_draw_glyph_func()
  -hb_font_funcs_set_paint_glyph_func()

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agogrep: upgrade 3.11 -> 3.12
Wang Mingyu [Mon, 12 May 2025 09:02:59 +0000 (17:02 +0800)] 
grep: upgrade 3.11 -> 3.12

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoghostscript: upgrade 10.05.0 -> 10.05.1
Wang Mingyu [Mon, 12 May 2025 09:02:58 +0000 (17:02 +0800)] 
ghostscript: upgrade 10.05.0 -> 10.05.1

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agofmt: upgrade 11.1.4 -> 11.2.0
Wang Mingyu [Mon, 12 May 2025 09:02:57 +0000 (17:02 +0800)] 
fmt: upgrade 11.1.4 -> 11.2.0

Changelog:
============
- Added the 's' specifier for 'std::error_code'. It allows formatting an error
  message as a string.
- Fixed formatting of 'std::chrono::local_time' and 'tm'
- Added diagnostics for cases when timezone information is not available.
- Deprecated 'fmt::localtime' in favor of 'std::localtime'.
- Fixed compilation with GCC 15 and C++20 modules enabled
- Fixed handling of named arguments in format specs
- Added error reporting for duplicate named arguments
- Fixed formatting of 'long' with 'FMT_BUILTIN_TYPES=0'
- Optimized 'text_style' using bit packing
- Added support for incomplete types
- Fixed a flush issue in 'fmt::print' when using libstdc++
- Fixed 'fmt::println' usage with 'FMT_ENFORCE_COMPILE_STRING' and legacy
- Removed legacy header 'fmt/core.h' from docs
- Worked around limitations of '__builtin_strlen' during constant evaluation
- Worked around a bug in MSVC v141
- Removed the 'fmt_detail' namespace
- Removed specializations of 'std::is_floating_point' in tests
- Fixed a CMake error when setting 'CMAKE_MODULE_PATH' in the pedantic mode
- Updated the Bazel config

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoepiphany: upgrade 48.0 -> 48.3
Wang Mingyu [Mon, 12 May 2025 09:02:56 +0000 (17:02 +0800)] 
epiphany: upgrade 48.0 -> 48.3

Changelog:
===========
- Fix crash when opening downloaded file
- Fix crash when opening incognito window
- Fix Crash when trying to select download location
- Fix Crash in escape_csv_field() when exporting passwords
- Fix Adding WhatsApp as a web app crashes
- Fix Pressing Escape key in addressbar resets the cursor to beginning of
  the widget
- Fix Epiphay shouldn't show the privacy dialog in incognito mode
- Fix (CVE-2025-3839) Require user interaction before opening URL in
  external application
- Fix Code cleanup
- Fix window: fix crash when force closing window without session
- Fix Several fixes for password export
- Fix Remove Granite support from Tech Preview and Canary
- Fix find-toolbar: fix crash on load-changed

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoenchant2: upgrade 2.8.2 -> 2.8.4
Wang Mingyu [Mon, 12 May 2025 09:02:55 +0000 (17:02 +0800)] 
enchant2: upgrade 2.8.2 -> 2.8.4

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agodiffstat: upgrade 1.67 -> 1.68
Wang Mingyu [Mon, 12 May 2025 09:02:54 +0000 (17:02 +0800)] 
diffstat: upgrade 1.67 -> 1.68

License-Update: Copyright year updated to 2025

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agodebianutils: upgrade 5.21 -> 5.22
Wang Mingyu [Mon, 12 May 2025 09:02:53 +0000 (17:02 +0800)] 
debianutils: upgrade 5.21 -> 5.22

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agocups: upgrade 2.4.11 -> 2.4.12
Wang Mingyu [Mon, 12 May 2025 09:02:52 +0000 (17:02 +0800)] 
cups: upgrade 2.4.11 -> 2.4.12

Changelog:
===========
- GnuTLS follows system crypto policies now
- Added 'NoSystem' SSLOptions value
- Now we raise alert for certificate issues
- Added Kyocera USB quirk
- The scheduler now logs a job's debugging history if the backend fails
- Fixed a potential timing issue with 'cupsEnumDests'
- Fixed a potential "lost PPD" condition in the scheduler
- Fixed a compressed file error handling bug
- Fixed a bug in the make-and-model whitespace trimming code
- Fixed a removal of IPP Everywhere permanent queue if installation failed
- Fixed 'ServerToken None' in scheduler
- Fixed invalid IPP keyword values created from PPD option names
- Fixed handling of "media" and "PageSize" in the same print request
- Fixed client raster printing from macOS
- Fixed the default User-Agent string.
- Fixed a recursion issue in 'ippReadIO'.
- Fixed handling incorrect radix in 'scan_ps()'
- Fixed validation of dateTime values with time zones more than UTC+11
- Fixed attributes returned by the Create-Xxx-Subscriptions requests
- Fixed 'ippDateToTime' when using a non GMT/UTC timezone
- Fixed 'job-completed' event notifications for jobs that are cancelled before
  started
- Fixed DNS-SD discovery with 'ippfind'

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoccache: upgrade 4.11.2 -> 4.11.3
Wang Mingyu [Mon, 12 May 2025 09:02:51 +0000 (17:02 +0800)] 
ccache: upgrade 4.11.2 -> 4.11.3

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 months agoca-certificates: upgrade 20241223 -> 20250419
Wang Mingyu [Mon, 12 May 2025 09:02:50 +0000 (17:02 +0800)] 
ca-certificates: upgrade 20241223 -> 20250419

0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch
0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch
refreshed for 20250419

0002-sbin-update-ca-certificates-add-a-sysroot-option.patch
removed since it's included in 20250419

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>