]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/log
thirdparty/openembedded/openembedded-core-contrib.git
9 days agomeson: upgrade to 1.10.0
Ross Burton [Thu, 11 Dec 2025 17:55:47 +0000 (17:55 +0000)] 
meson: upgrade to 1.10.0

Release notes:
- Support for the `counted_by` attribute
- Added a `values()` method for dictionaries
- Add cmd_array method to ExternalProgram
- Microchip XC32 compiler support
- Added OS/2 support
- Android cross file generator
- Array `.slice()` method
- `-Db_msvcrt` on clang
- Added `build_subdir` arg to various targets
- Support for Cargo workspaces
- Experimental Codegen module
- Methods from compiler object now accept strings for include_directories
- `meson format` has a new `--check-diff` option
- `-Db_thinlto_cache` now supported for GCC
- Using `meson.get_compiler()` to get a language from another project is marked broken
- Experimental C++ import std support
- Common `Cargo.lock` for all Cargo subprojects
- Add a configure log in meson-logs
- Added new `namingscheme` option
- Rewriter improvements
- Passing `-C default-linker-libraries` to rustc
- `rustc` will receive `-C embed-bitcode=no` and `-C lto` command line options
- New method to handle GNU and Windows symbol visibility for C/C++/ObjC/ObjC++
- Vala BuildTarget dependency enhancements
- `i18n.xgettext` now accepts CustomTarget and CustomTargetIndex as sources

Drop 0001-python-module-do-not-manipulate-the-environment-when.patch as
this code no longer exists.

Rebase 0001-Make-CPU-family-warnings-fatal.patch as code moved.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agooeqa/selftest/meson: use iputils instead of libepoxy
Ross Burton [Thu, 11 Dec 2025 17:55:46 +0000 (17:55 +0000)] 
oeqa/selftest/meson: use iputils instead of libepoxy

libepoxy is suboptimal for the SDK testing purposes, mainly because it
is a GL-based library so we have to disable all of the functionality.
While this hasn't been a problem, meson 1.9.2 introduces a change of
behaviour which breaks the build.

Take this opportunity to switch to iputils, which is actively maintained,
has minimal dependencies, and builds faster.

Also move some asserts into build_meson() to avoid duplication in the
test case.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agoclasses/meson: no need to export STAGING_DIR_HOST
Ross Burton [Thu, 11 Dec 2025 17:55:45 +0000 (17:55 +0000)] 
classes/meson: no need to export STAGING_DIR_HOST

If we use ${} for STAGING_DIR_HOST then the correct paths get written
into the command earlier.

Also use STAGING_LIBDIR, it's the same end result but more idiomatic.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agoclasses/meson: clean up path arguments
Ross Burton [Thu, 11 Dec 2025 17:55:44 +0000 (17:55 +0000)] 
classes/meson: clean up path arguments

The --bindir (etc.) arguments can be absolute paths, so there's no need
to work out the relative paths and we can instead pass them directly.

Also re-order the options to match the order in the Meson manual, for
ease of checking that we pass all the paths that Meson uses.

Notably, we don't set --licensedir, but we handle license manifests
ourselves.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agoclasses/meson: set LD
Ross Burton [Thu, 11 Dec 2025 17:55:43 +0000 (17:55 +0000)] 
classes/meson: set LD

Set binaries.ld in the toolchain files and remove the unset from the
environment, as ld no longer appears to need special handling.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agoclasses/meson: drop meson_do_qa_configure as it is non-functional
Ross Burton [Thu, 11 Dec 2025 17:55:42 +0000 (17:55 +0000)] 
classes/meson: drop meson_do_qa_configure as it is non-functional

The patches to meson to add this warning were removed in 2021[1], so
remove the checks that look for them.

[1] oe-core cb2a7dcc86d ("meson: update 0.57.2 -> 0.58.0")

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agorecipes: remove *.la from FILES for recipes using meson
Ross Burton [Thu, 11 Dec 2025 17:55:41 +0000 (17:55 +0000)] 
recipes: remove *.la from FILES for recipes using meson

These recipes no longer use libtool to build libraries, so they don't
ship .la files anymore.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agoiputils: just set bindir, not prefix
Ross Burton [Thu, 11 Dec 2025 17:55:40 +0000 (17:55 +0000)] 
iputils: just set bindir, not prefix

We just want to put the binaries into base_bindir and nothing else, so
set bindir instead of prefix.

This is currently moot as iputils only installs binaries, but this is
the right thing to do and allows further cleanups.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agolibxml2: remove obsolete ptest RDEPENDS
Ross Burton [Thu, 11 Dec 2025 15:50:41 +0000 (15:50 +0000)] 
libxml2: remove obsolete ptest RDEPENDS

As part of the libxml2 2.10.3 upgrade[1] the run-ptest was moved from
calling make to running the tests directly, but the make dependency was
not removed.

Also verified that there is no bash usage in the tests, so also remove
the bash dependency.

[1] oe-core ec5f380a142 ("libxml2: upgrade 2.9.14 -> 2.10.3")

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agopatchtest/selftest: Ensure HEAD is attached before running attach tests case
Naftaly RALAMBOARIVONY [Thu, 11 Dec 2025 15:06:46 +0000 (16:06 +0100)] 
patchtest/selftest: Ensure HEAD is attached before running attach tests case

If the repo is in a detached HEAD state, create and check out a temporary branch
to attach HEAD. If the branch already exists, the error is raised via run_sh.

Add a check to verify that the Git state has not changed before and
after the test in the attached HEAD.

Signed-off-by: Naftaly RALAMBOARIVONY <naftaly.ralamboarivony@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agopatchtest/selftest: Add coverage for detached and attached HEAD cases
Naftaly RALAMBOARIVONY [Thu, 11 Dec 2025 15:06:45 +0000 (16:06 +0100)] 
patchtest/selftest: Add coverage for detached and attached HEAD cases

Extend the selftest to run against both modes to ensure correct behavior and
prevent regressions when operating in a detached HEAD environment.

Two test modes are run: Git attached and detached, via the
'run_tests()' function.

Signed-off-by: Naftaly RALAMBOARIVONY <naftaly.ralamboarivony@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agopatchtest/selftest: Extract head-attached test loop into function
Naftaly RALAMBOARIVONY [Thu, 11 Dec 2025 15:06:44 +0000 (16:06 +0100)] 
patchtest/selftest: Extract head-attached test loop into function

Move the loop that run the tests in head attached tests into a function
'test_head_attached'. Also add an explicit check for the case where no patches
are found and exit with an error.

Signed-off-by: Naftaly RALAMBOARIVONY <naftaly.ralamboarivony@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agopatchtest/selftest: refactor patch retrieval and result analysis
Naftaly RALAMBOARIVONY [Thu, 11 Dec 2025 15:06:43 +0000 (16:06 +0100)] 
patchtest/selftest: refactor patch retrieval and result analysis

Move the code responsible for collecting patches into a new get_patches()
function. It returns a list of dictionaries containing:
- test ID
- patch name
- expected result
- root path

Refactor result analysis code into an analyze_result() function that updates the
counts dictionary.

These two refactorings will make it easier to add a new test in detached HEAD
mode.

Signed-off-by: Naftaly RALAMBOARIVONY <naftaly.ralamboarivony@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agopatchtest/selftest: convert separate count variables into a results dictionary
Naftaly RALAMBOARIVONY [Thu, 11 Dec 2025 15:06:42 +0000 (16:06 +0100)] 
patchtest/selftest: convert separate count variables into a results dictionary

Change the variables used to count test results:
- passcount
- failcount
- skipcount
- xpasscount
- xfailcount
- xskipcount
- errorcount

into a single dictionary named counts, in order to make it easier
to pass these values to a result analysis and display function
(print_results).

Signed-off-by: Naftaly RALAMBOARIVONY <naftaly.ralamboarivony@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agopatchtest: fix failure when oe-core repo is in detached HEAD
Naftaly RALAMBOARIVONY [Thu, 11 Dec 2025 15:06:41 +0000 (16:06 +0100)] 
patchtest: fix failure when oe-core repo is in detached HEAD

Patchtest fails when oe-core git repo is in a "detached HEAD" state:

Error log:

> File "/usr/lib/python3/dist-packages/git/repo/base.py", line 881, in
active_branch return self.head.reference ^^^^^^^^^^^^^^^^^^^

> File "/usr/lib/python3/dist-packages/git/refs/symbolic.py", line 311, in
_get_reference raise TypeError("%s is a detached symbolic reference as it
points to %r" % (self, sha)) TypeError: HEAD is a detached symbolic reference
as it points to '3dd31d3b29730fa1130645d76bb71914ac036335' None

In this case, no current branch is available for the clean operation.

To fix this, updates the checkout logic:
- if a current branch is available, use it,
- otherwise, fall back to the commit pointed to by HEAD.

This ensures that the script works correctly even when HEAD is detached.

Signed-off-by: Naftaly RALAMBOARIVONY <naftaly.ralamboarivony@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agorust: Upgrade 1.91.0 -> 1.91.1
Yash Shinde [Thu, 11 Dec 2025 14:08:17 +0000 (06:08 -0800)] 
rust: Upgrade 1.91.0 -> 1.91.1

https://blog.rust-lang.org/2025/11/10/Rust-1.91.1/

Test results summary:

   rust v1.91.1
   +-----------+--------+---------+
   | Machine   | Passed | Ignored |
   +-----------+--------+---------+
   | arm-32    | 29,968 |  1,510  |
   | arm-64    | 30,071 |  1,447  |
   | x86-32    | 29,985 |  1,489  |
   | x86-64    | 30,229 |  1,247  |
   | riscv-64  | 30,045 |  1,472  |
   +-----------+--------+---------+

   Test results difference (1.91.1 - 1.90):
   +-----------+--------+---------+
   | Machine   | Passed | Ignored |
   +-----------+--------+---------+
   | arm-32    |  +451  |   -19   |
   | arm-64    |  +463  |   -24   |
   | x86-32    |  +477  |   -18   |
   | x86-64    |  +326  |   -28   |
   | riscv-64  |  +461  |   -22   |
   +-----------+--------+---------+

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agorust: remove passing tests from excluded and ignored list.
Yash Shinde [Thu, 11 Dec 2025 14:08:16 +0000 (06:08 -0800)] 
rust: remove passing tests from excluded and ignored list.

Remove the ignore tags for passing riscv64 tests and
drop obsolete "tests/codegen-llvm/issues/issue-122805.rs"
from exclude test list.

The test was renamed to "dont-shuffle-bswaps.rs" and passes now:
https://github.com/rust-lang/rust/commit/3580698996f6da6f006477809d7959bffcfd3bf0

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agorust: Upgrade 1.90.0 -> 1.91.0
Yash Shinde [Thu, 11 Dec 2025 14:08:15 +0000 (06:08 -0800)] 
rust: Upgrade 1.90.0 -> 1.91.0

https://blog.rust-lang.org/2025/10/30/Rust-1.91.0/

* Recent updates to rustc now require 'target_pointer_width'
  to be specified as an integer.
  Cast it to 'int' in rust target configuration to resolve the
  type consistency error.
  https://github.com/rust-lang/rust/pull/144443

* The "remote-test-server" bin is now generated in stage2-tools-bin dir
  rather than stage1. Update the test suite and recipe accordingly.

* Rebase existing patches with v1.91.0.

* Drop merged patches with rust v1.91.0.
  - 0001-libunwind-Use-gcs-instead-of-gcs-target-attribute.patch
    https://github.com/llvm/llvm-project/pull/138077/commits/bcc31a9384d2df1c0f27ef140e1f0f9ee493034f

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agooeqa/selftest/rust: Exclude tier-check and fix openssl-sys build error
Yash Shinde [Thu, 11 Dec 2025 14:08:14 +0000 (06:08 -0800)] 
oeqa/selftest/rust: Exclude tier-check and fix openssl-sys build error

- Exclude tier-check which fails due to file not found error.

Testing stage2 platform support check (x86_64-poky-linux-gnu)
Compiling tier-check v0.1.0
(/srv/pokybuild/yocto-worker/qemux86-64-tc/build/build-st-1400964/tmp/work/x86-64-v3-poky-linux/rust/1.91.1/sources/rustc-1.91.1-src/src/tools/tier-check)
thread 'main' (163263) panicked at src/tools/tier-check/src/main.rs:16:10:
rustc should run: Os { code: 2, kind: NotFound, message: "No such file or directory" }

Reported: https://github.com/rust-lang/rust/issues/149171

- Fix following error by providing openssl in the image:
error: failed to run custom build command for `openssl-sys v0.9.109`

Failed to find OpenSSL development headers.
You can try fixing this setting the `OPENSSL_DIR` environment variable
pointing to your OpenSSL installation or installing OpenSSL headers package
specific to your distribution.

- Exclude "tests/assembly-llvm/c-variadic-arm.rs" failing on arm32.

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agooeqa/selftest/rust: add missing zlib and zstd dependencies
Peter Tatrai [Thu, 11 Dec 2025 14:08:13 +0000 (06:08 -0800)] 
oeqa/selftest/rust: add missing zlib and zstd dependencies

LLVM requires zlib and zstd support for compression routines
used by rustc_codegen_llvm and related components.

Recipe-level RUSTFLAGS are not propagated in qemu image, causing bootstrap
test linkage failures. When these libraries are absent in the selftest
execution environment, bootstrap test binaries fail to link and cause
following failure:

  error: linking with `target-rust-ccld` failed: exit status: 1
  = note: undefined reference to `compress2'
  = note: undefined reference to `uncompress'
  = note: undefined reference to `ZSTD_decompress'
  = note: undefined reference to `ZSTD_isError'
  = note: undefined reference to `ZSTD_compress2'
  = note: undefined reference to `crc32'

Explicitly pass `-lz` and `-lzstd` in the image and ensure the corresponding
runtime libraries are present in the image.
It was initially reported on qemuppc and later seen across all tested
architectures (arm32/64, riscv64, x86_32/64).

https://lists.openembedded.org/g/openembedded-core/message/225636

Signed-off-by: Peter Tatrai <peter.tatrai.ext@siemens.com>
Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agosassc: fix runtime version when using git shallow tarball
Yi Zhao [Thu, 11 Dec 2025 02:25:16 +0000 (10:25 +0800)] 
sassc: fix runtime version when using git shallow tarball

Add tag to SRC_URI to fix runtime version when using git shallow
tarball.

Before the fix:
$ sassc --version
sassc: 66f0
libsass: 7037
sass2scss: 1.1.1
sass: 3.5

After the fix:
$ sassc --version
sassc: 3.6.2
libsass: 3.6.6
sass2scss: 1.1.1
sass: 3.5

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agolibsass: fix runtime version when using git shallow tarball
Yi Zhao [Thu, 11 Dec 2025 02:25:15 +0000 (10:25 +0800)] 
libsass: fix runtime version when using git shallow tarball

Add tag to SRC_URI to fix runtime version when using git shallow
tarball.

Before the fix:
$ sassc --version
sassc: 66f0
libsass: 7037
sass2scss: 1.1.1
sass: 3.5

After the fix:
$ sassc --version
sassc: 3.6.2
libsass: 3.6.6
sass2scss: 1.1.1
sass: 3.5

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agomesa: upgrade 25.2.5 -> 25.3.1
Dmitry Baryshkov [Wed, 10 Dec 2025 17:58:49 +0000 (19:58 +0200)] 
mesa: upgrade 25.2.5 -> 25.3.1

Upgrade Mesa to the latest release. Drop VDPAU tracker (dropped
upstream). Add support for ethosu and rocket Gallium drivers.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agomesa: enable hasvk Intel Vulkan driver
Dmitry Baryshkov [Wed, 10 Dec 2025 17:58:48 +0000 (19:58 +0200)] 
mesa: enable hasvk Intel Vulkan driver

Enable the iris_hasvk, Ivy Bridge, Haswell and Broadwell Vulkan driver.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agomesa: enable virtio and gfxstream Vulkan drivers
Dmitry Baryshkov [Wed, 10 Dec 2025 17:58:47 +0000 (19:58 +0200)] 
mesa: enable virtio and gfxstream Vulkan drivers

Enable two more virtual drivers: gfxstream and virtio. Replace the
'virgl' PACKAGECONFIG with 'virtio' which now governs all virtual
drivers.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agomesa: fix drivers sorting order
Dmitry Baryshkov [Wed, 10 Dec 2025 17:58:46 +0000 (19:58 +0200)] 
mesa: fix drivers sorting order

Fix few issues that were left unnoticed or breaking sorting order.

Fixes: 64108679ada8 ("mesa: sort out driver lists")
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agokernel-devsrc: add files for 6.18+
Bruce Ashfield [Wed, 10 Dec 2025 14:53:00 +0000 (09:53 -0500)] 
kernel-devsrc: add files for 6.18+

kernel's 6.18+ have added a dependency on rq-offsets.

The rq-offsets compile pulls in kernel/sched/rq-offsets.c plus the
scheduler-local headers (sched.h, cpudeadline.h, cpupri.h, features.h,
stats.h, ext.h) and kernel/workqueue_internal.h; those weren’t
previously in the devsrc payload, so kernel/ sched/rq-offsets.s
couldn’t be built on target.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agobuildhistory_analysis: show renamed directories
Ross Burton [Wed, 10 Dec 2025 13:56:03 +0000 (13:56 +0000)] 
buildhistory_analysis: show renamed directories

If a directory was just renamed but the contents did not change, it was
not listed in the output. This change should be listed, so be sure to
handle that case.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agogo.bbclass: change GOTMPDIR to improve reproducibility
Changqing Li [Tue, 9 Dec 2025 10:41:21 +0000 (18:41 +0800)] 
go.bbclass: change GOTMPDIR to improve reproducibility

When cgo is enabled, the Go toolchain writes temporary source files
(*.c) under GOTMPDIR and compiles them there. when -trimpath is passed
to go, Go passes options such as
-ffile-prefix-map=$WORK/b387=/tmp/go-build internally to the GCC
instance it invokes. The variable WORK is a temporary directory created
under GOTMPDIR, refer the following log:

[snip of compile log]
WORK=/build/tmp/work/x86-64-v3-wrs-linux/buildah/1.41.5/build-tmp/go-build377321751
cd $WORK/b387
TERM='dumb' x86_64-wrs-linux-gcc -m64 -march=x86-64-v3 -fstack-protector-strong -O2 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security --sysroot=/tmp/work/x86-64-v3-wrs-linux/buildah/1.41.5/recipe-sysroot -I /tmp/work/x86-64-v3-wrs-linux/buildah/1.41.5/sources/buildah-1.41.5/src/github.com/containers/buildah/vendor/github.com/proglottis/gpgme -fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=$WORK/b387=/tmp/go-build -gno-record-gcc-switches -v -D_FILE_OFFSET_BITS=64 -I $WORK/b387/ -O2 -g -ffile-prefix-map=/tmp/work/x86-64-v3-wrs-linux/buildah/1.41.5/sources/buildah-1.41.5=/usr/src/debug/buildah/1.41.5 -ffile-prefix-map=/tmp/work/x86-64-v3-wrs-linux/buildah/1.41.5/build=/usr/src/debug/buildah/1.41.5 -ffile-prefix-map=/tmp/work/x86-64-v3-wrs-linux/buildah/1.41.5/recipe-sysroot= -ffile-prefix-map=/tmp/work/x86-64-v3-wrs-linux/buildah/1.41.5/recipe-sysroot-native= -pipe -v -ffile-prefix-map=/tmp/work/x86-64-v3-wrs-linux/buildah/1.41.5/sources/buildah-1.41.5/src/github.com/containers/buildah/vendor=/_/vendor -frandom-seed=TZkSPVSBUvDMjg4wKjWS -o $WORK/b387/_x004.o -c unset_agent_info.cgo2.c
[snip of compile log]

OE also passes its own DEBUG_PREFIX_MAP to GCC(finally by CGO_CFLAGS),
including -ffile-prefix-map=${B}=${TARGET_DBGSRC_DIR}, where B is
${WORKDIR}/build. Because GOTMPDIR defaults to ${WORKDIR}/build-tmp, the
Go temporary directory looks like ${WORKDIR}/build-tmp/go-buildXYZ. Its
prefix therefore begins with ${WORKDIR}/build, so GCC matches the
DEBUG_PREFIX_MAP entry for ${B} first.

As a result, a path such as ${WORKDIR}/build-tmp/go-buildXYZ is
rewritten to ${TARGET_DBGSRC_DIR}-tmp/go-buildXYZ. This breaks the
-ffile-prefix-map option that Go itself adds, because the original WORK
path no longer matches the value Go expects. Since Go creates
go-buildXYZ directories randomly and internally, this causes the build
non-reproducible.

This patch changes GOTMPDIR from ${WORKDIR}/build-tmp to
${WORKDIR}/tmp-go-build so that the path no longer matches ${B}. This
prevents unintended replacements by OE's DEBUG_PREFIX_MAP and
restores reproducibility.

Note that pure go program like go-helloworld under OE will not have this
issue since it doen't use cgo, it is reproducible without this fix

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
9 days agowic: Remove more conflicting du parameters
Mathieu Dubois-Briand [Tue, 9 Dec 2025 15:48:02 +0000 (16:48 +0100)] 
wic: Remove more conflicting du parameters

Fix builds on Ubuntu 25.10 by making sure to use parameters that are
correctly understood by core-utils and uutils. Most of these were
already removed by a previous commit, but some occurrences were missed.

Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
13 days agokeymaps: Add HOMEPAGE variable
Weisser, Pascal [Tue, 9 Dec 2025 13:22:08 +0000 (14:22 +0100)] 
keymaps: Add HOMEPAGE variable

Add HOMEPAGE variable to keymaps recipe.

Signed-off-by: Weisser, Pascal <pascal.weisser.ext@karlstorz.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agoweston-init: Add HOMEPAGE variable
Weisser, Pascal [Tue, 9 Dec 2025 13:22:07 +0000 (14:22 +0100)] 
weston-init: Add HOMEPAGE variable

Add HOMEPAGE variable to weston-init recipe.

Signed-off-by: Weisser, Pascal <pascal.weisser.ext@karlstorz.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agossh-pregen-hostkeys: Add HOMEPAGE variable
Weisser, Pascal [Tue, 9 Dec 2025 13:22:06 +0000 (14:22 +0100)] 
ssh-pregen-hostkeys: Add HOMEPAGE variable

Add HOMEPAGE variable to ssh-pregen-hostkeys recipe.

Signed-off-by: Weisser, Pascal <pascal.weisser.ext@karlstorz.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agooe-depends-dot: handle packages with period in name
Lucas Stach [Mon, 8 Dec 2025 19:17:39 +0000 (20:17 +0100)] 
oe-depends-dot: handle packages with period in name

oe-depends-dot currently fails to look up the key when the package
name contains a period, as the key gets truncated in the split from
the task. Handle this by only splitting a single time from the right.

Signed-off-by: Lucas Stach <l.stach@pengutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agolibssh2: fix regression in KEX method validation (GH-1553)
Vijay Anusuri [Mon, 8 Dec 2025 12:59:04 +0000 (18:29 +0530)] 
libssh2: fix regression in KEX method validation (GH-1553)

Resolves: https://github.com/libssh2/libssh2/issues/1553

Regression caused by
https://github.com/libssh2/libssh2/commit/00e2a07e824db8798d94809156e9fb4e70a42f89

Backport fix
https://github.com/libssh2/libssh2/commit/4beed7245889ba149cc372f845d5969ce5103a5d

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agoshadow-securetty: add ttyS5 and ttyS6
Yongxin Liu [Mon, 8 Dec 2025 07:50:48 +0000 (15:50 +0800)] 
shadow-securetty: add ttyS5 and ttyS6

Some Intel Customer Reference Boards, such as the Elkhart Lake CRB,
provide more than 6 serial ports. Allow users to login on ttyS5 and
ttyS6.

Signed-off-by: Yongxin Liu <yongxin.liu@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agocurl: add PACKAGECONFIG for Schannel SSL/TLS support
Samuli Piippo [Fri, 5 Dec 2025 09:21:51 +0000 (09:21 +0000)] 
curl: add PACKAGECONFIG for Schannel SSL/TLS support

Add new PACKAGECONFIG to enable the Windows native Schannel SSL/TLS
library support to be available for mingw32 builds.

Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agoutil-linux/util-linux-libuuid: upgrade from 2.41.1 to 2.41.2
Chen Qi [Fri, 5 Dec 2025 06:07:20 +0000 (06:07 +0000)] 
util-linux/util-linux-libuuid: upgrade from 2.41.1 to 2.41.2

The following two patches are dropped as they are in new version:
  util-linux/0001-include-mount-api-utils-avoid-using-sys-mount.h.patch
  util-linux/0001-tests-helpers-test_sigstate.c-explicitly-reset-SIGIN.patch

Ptest change:
The new test case misc/colors needs lib/color-names.c. So copy it.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agorootfs-postcommands.bbclass: fix echo + '\n' in 'no password' banner
Chen Qi [Thu, 4 Dec 2025 08:32:07 +0000 (08:32 +0000)] 
rootfs-postcommands.bbclass: fix echo + '\n' in 'no password' banner

The '\n' means hostname instead of new line in /etc/issues.

bash and dash have different behavior on echo + '\n'.
So we avoid this '\n' and use an extra echo "" instead.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agoitstool: switch from libxml2 to python3-lxml
Hongxu Jia [Wed, 3 Dec 2025 08:24:03 +0000 (16:24 +0800)] 
itstool: switch from libxml2 to python3-lxml

Due to libxml2 deprecate python bindings[1], itstool is trying to switch
from libxml2 to lxml[2], port them to Yocto

[1] https://gitlab.gnome.org/GNOME/libxml2/-/issues/891
[2] https://github.com/itstool/itstool/pull/57

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agolibxml2: upgrade 2.14.6 -> 2.15.1
Hongxu Jia [Wed, 3 Dec 2025 08:24:02 +0000 (16:24 +0800)] 
libxml2: upgrade 2.14.6 -> 2.15.1

Due to upstream [Remove LZMA support][1], drop option --without-lzma

Due to upstream [disable python bindings by default][2] and are
planned to be removed in the 2.16 release[3][4]. If we still enable
python bindings by --with-python=yes, due to upstream [doc: Build docs
with Doxygen and xsltproc][5], build python binding requires doxygen
otherwise build will fail, and we do not provide doxygen in oe-core,
so remove python package directly.

Refresh install-tests.patch and run-ptest to not install python test
cases

Drop CVE-2025-6021.patch which is obsolete

[1] https://gitlab.gnome.org/GNOME/libxml2/-/commit/1763281cd65ded4067ddf123eb7358690c214b0b
[2] https://gitlab.gnome.org/GNOME/libxml2/-/commit/fa931566d2f541d3162c7b98c8a12e6b2a6ae542
[3] https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.0.news
[4] https://gitlab.gnome.org/GNOME/libxml2/-/issues/891
[5] https://gitlab.gnome.org/GNOME/libxml2/-/commit/bbe5827c94cc9b0e393ff3e6eef6dec2376317e2

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agolib/oe/patch: use author date as commit date for "git am"
cedric.hombourger@siemens.com [Tue, 2 Dec 2025 09:15:53 +0000 (10:15 +0100)] 
lib/oe/patch: use author date as commit date for "git am"

By default, "git am" uses the time of commit creation as the committer
date and is therefore "unique" to each build.

Use the --committer-date-is-author-date option for git to use the author
date as the committer date to get deterministic meta-data and therefore
commit hashes (which may end-up in sources or build in the form of e.g.
localversion file).

Cc: isar-users@googlegroups.com
Signed-off-by: Cedric Hombourger <cedric.hombourger@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agoncurses-terminfo-base: add tmux and tmux-256color
Etienne Cordonnier [Mon, 1 Dec 2025 11:31:26 +0000 (12:31 +0100)] 
ncurses-terminfo-base: add tmux and tmux-256color

https://git.openembedded.org/openembedded-core/commit/?id=5624dfcea87da54c49ba1d63b528da020f351908 added support for tmux in ncurses-terminfo-base in 2015
by adding "TERM=screen". However the value of TERM is now a build option of tmux, and it uses TERM="tmux-256color" in my testing on Ubuntu / macOS.

This commit restores support for tmux in ncurses-terminfo-base. This fixes e.g. `top` not working when starting `tmux`, then `adb shell`, then `top`.

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agoe2fsprogs: misc/create_inode.c: Fix for file larger than 2GB
Robert Yang [Mon, 1 Dec 2025 02:33:49 +0000 (18:33 -0800)] 
e2fsprogs: misc/create_inode.c: Fix for file larger than 2GB

Fixed:
$ dd if=/dev/zero of=../image.ext4 bs=1M count=4k
$ dd if=/dev/random of=../rootfs/largefile bs=1M count=3k
$ ./misc/mke2fs -t ext4 -d ../rootfs/ ../image.ext4
__populate_fs: Ext2 file too big while writing file "largefile"
mke2fs: Ext2 file too big while populating file system

This was because the offset is overflow, use __u64 to fix the problem.

Another code which uses ext2_off_t is copy_fs_verity_data(), but it only copies
the metadata, so it should be enough large for it, just leave it there.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agoxserver-nodm-init: avoid race condition related to udev
Chen Qi [Sat, 29 Nov 2025 04:05:03 +0000 (12:05 +0800)] 
xserver-nodm-init: avoid race condition related to udev

With systemd upgraded to 258+, there's a race condition error found
on qemuarm:

  failed to find screen to remove

This error is likely to be introduced by the following systemd commit:
https://github.com/systemd/systemd/commit/0ba9d06963ecb848e71951ed5e9f6f6f03b80b06

However, I think the commit cannot be reverted, not only because
there are a bunch of changes based on this one, but also because
the change look like a reasonable one.

Before xserver is able to handle such issue inside its codes, this service
need wait for udev to settle things before it starts. This can avoid the
above race condition error.

Fixes [YOCTO #16045]

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agosystemd: upgrade from 257.8 to 258.1
Chen Qi [Sat, 29 Nov 2025 04:05:02 +0000 (12:05 +0800)] 
systemd: upgrade from 257.8 to 258.1

v258 Release Changes:
https://github.com/systemd/systemd/releases/tag/v258

v258.1 Contains a critical fix for our link-udev-shared PACKAGECONFIG.
https://github.com/systemd/systemd/commit/49b701531486536f69dcd2ef2cfc10d468847481
(meson: fix link-udev-shared option)

License-Update: update address of FSF.
See https://github.com/systemd/systemd/commit/d4802151b0be56d79dc171880fa3df0ed6f5f8fa

The 'runlevel', 'initctl', 'telinit' related contents are removed
because they are offically removed in v258.

Disable tests explicitly. This is because we're not installing any
tests. There's no point building them out. And this puts extra burden
on making things compile for musl.

gcrypt and gnutls PACKAGECONFIGs are removed as "OpenSSL is now the only
supported cryptography backend for systemd-resolved and systemd-importd."

systemd-systemctl-native changes:
sysvinit compat actions are removed. This includes removing unncessary
patches and adding EXTRA_OEMESON. The systemctl-native should only focus
on the systemd units as it was. The removed two extra patches look like
a workaround to make do_rootfs pass. But the correct behavior is that
systemctl-native should not invoke systemd-sysv-install and only focus
on systemd units.

musl changes:
1. This version has big changes in musl patches. The goal is to
   help maintenance. I want patches to be more easily applied
   to new versions. The count of files modified by musl specific
   patches decreased from 113 (v257) to 34 (v258).
2. All patches are re-evaluated.
   This version of systemd introduces big changes in header
   files and other places. So the previous musl patches are
   re-evaluated one by one. Those that are dropped are considered not
   needed. A few new ones are added. There are some notable ones.
   0012-do-not-disable-buffer-in-writing-files.patch is dropped because
   there is not runtime error.
   0016-Fix-the-segfault-for-glob-related-codes-and-define-d.patch is
   added because this version of systemd uses strv_free to free gl_pathv
   instead of relying on globfree provided by libc.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agobase-passwd: add clock group
Chen Qi [Sat, 29 Nov 2025 04:05:01 +0000 (12:05 +0800)] 
base-passwd: add clock group

New systemd version (v258) introduces a new group, clock, to
"enable applications like linuxptp to open clocks without root
privileges".[1]

This results in warning at do_rootfs time:
WARNING: Group clock has never been defined

Add group clock with gid 81 to fix this issue. The wheel group's
gid is 80, so 81 is chosen.

Note that Debian rejects this patch because they're using sysusers
to handle such groups, including 'clock', 'kvm', 'sgx', etc. We're
not relying on sysusers, so we have to add a patch here.

Below are more detailed reasons for why these groups (wheel, sgx, kvm,
clock) need to be in base-passwd as oe-specific patches instead of being
added via separate recipes:
OE currently does not have a mechanism like systemd-sysusers that if a
group has been added, the related configurations in separate packages
do not have confliction.
In OE, when multiple recipes need the same group, and these recipes
do not necessarily have deps on each other, the current viable way
to do this is to add that group to base-passwd.
If things change in the future, which means significant change to our
useradd related bbclasses, we might do similar as Debian. But before
that, these groups need to remain in base-passwd.

[1] https://github.com/systemd/systemd/commit/af96ccfc24bc4803078a46b4ef2cdeb5decdfbcd

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agowpa-supplicant: fix sed indentation
Miaoqing Pan [Fri, 28 Nov 2025 01:36:26 +0000 (09:36 +0800)] 
wpa-supplicant: fix sed indentation

Unify indentation of sed commands in do_configure() for better
readability. No functional changes.

Reviewed-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Miaoqing Pan <miaoqing.pan@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agoudev-extraconf: Split automount and autonet into seperate packages
Vivek Puar [Tue, 25 Nov 2025 09:07:22 +0000 (14:37 +0530)] 
udev-extraconf: Split automount and autonet into seperate packages

Created two subpackages (${PN}-automount and ${PN}-autonet) to separate
udev rules and scripts for automount and autonet functionality.

If the image only needs storage devices to be auto-mounted or just needs
network hotplug handling, splitting the packages let us choose automount or
autonet package without having to care about other rules. This change does not
save much space but helps avoid installing unnecessary scripts and rules.

Signed-off-by: Vivek Puar <vpuar@qti.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agosqlite: upgrade 3.51.0 -> 3.51.1
Peter Marko [Sat, 6 Dec 2025 10:12:30 +0000 (11:12 +0100)] 
sqlite: upgrade 3.51.0 -> 3.51.1

>From https://sqlite.org/changes.html

2025-11-28 (3.51.1)
1. Fix incorrect results from nested EXISTS queries caused by the optimization in item 6b in the 3.51.0 release.
2. Fix a latent bug in fts5vocab virtual table, exposed by new optimizations in the 3.51.0 release

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agosqlite3: upgrade 3.50.4 -> 3.51.0
Peter Marko [Tue, 25 Nov 2025 22:52:57 +0000 (23:52 +0100)] 
sqlite3: upgrade 3.50.4 -> 3.51.0

Handles CVE-2025-7709.

Drop commit included in this release.
Refresh and rename the other patch.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
13 days agosqlite3: upgrade 3.48.0 -> 3.50.4
Peter Marko [Mon, 13 Oct 2025 07:08:46 +0000 (09:08 +0200)] 
sqlite3: upgrade 3.48.0 -> 3.50.4

Handle CVE-2025-3277, CVE-2025-29087 and CVE-2025-29088.

This update includes major change in how it is built.
Instead of autotools, autosetup is used.

Autosetup (https://msteveb.github.io/autosetup/) claims to be
* Replacement for autoconf in many situations
However it also claims NOT to
* Intended to replace all possible uses of autoconf
This means that some autoconf features are not available.

Recipe changes:
* stop inheriting autotools and define B, do_configure and do_install
* add patch to disable zlib as autosetup cannot be preconfigured like
  autotools to force function calls
* update packageconfig options to match new syntax
* libedit is detected with ncurses linking options (as seen in
  do_configure log)
* backport rpaths fix
* define soname to avoid file-rdeps QA error due to wrong library name
* clean B for do_configure as the new Makefiles do not seem to properly
  retrigger build if configuration changes

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agogcc: fix bad-mapper-3.C test failures on some hosts
Ross Burton [Thu, 4 Dec 2025 16:18:20 +0000 (16:18 +0000)] 
gcc: fix bad-mapper-3.C test failures on some hosts

This test tries to open an IPv6 socket to 'localhost', but some distros
(such as ubuntu 24.04) only have an IPv4 address for localhost and use
ip6-localhost for ::1.  This means the lookups fail in a way that the
test was not expecting, and the test fails.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agogcc: fix punctuation in the poisoning help output
Ross Burton [Thu, 4 Dec 2025 16:18:19 +0000 (16:18 +0000)] 
gcc: fix punctuation in the poisoning help output

The gcc test suite actually verifies the formatting of the --help output,
so add a missing period to fix a test case.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agobinutils-testsuite: fix ld tests that check for enable_libctf
Ross Burton [Thu, 4 Dec 2025 16:18:18 +0000 (16:18 +0000)] 
binutils-testsuite: fix ld tests that check for enable_libctf

The ld tests expect that the Makefile is being used and has written to
ld/enabling.exp. As we don't do that, manually write the file with the
right content.

This fixes the ld/testsuite/ld-ctf/ctf.exp tests.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agobinutils-testsuite: unset SOURCE_DATE_EPOCH when running the tests
Ross Burton [Thu, 4 Dec 2025 16:18:17 +0000 (16:18 +0000)] 
binutils-testsuite: unset SOURCE_DATE_EPOCH when running the tests

The replacing_non_deterministic_member() test in ar.exp explicitly needs
SOURCE_DATE_EPOCH to be unset:

  # This test expects SOURCE_DATE_EPOCH to not be set in the environment

I hope that the test harness could just unset this in advance of running
the tests, but until this is upstreamed we can unset it.

This fixes the test:

  ptestresult.binutils.replacing non-deterministic member (wrong size, expected: 920)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agobinutils-testsuite: run tests in the testsuite directory
Ross Burton [Thu, 4 Dec 2025 16:18:16 +0000 (16:18 +0000)] 
binutils-testsuite: run tests in the testsuite directory

The tests expect to be ran inside the testsuite directory, which means
some tests fail because files cannot be found.

This fixes the tests:

    ptestresult.binutils-gas.DWARF5 .loc 0
    ptestresult.binutils-gas.DWARF5 dir[0]

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agobinutils: Upgrade to 2.45.1 release
Khem Raj [Wed, 26 Nov 2025 01:41:45 +0000 (17:41 -0800)] 
binutils: Upgrade to 2.45.1 release

Regenerate ld/configure

Brings following changes

e3a18893e1c LoongArch: Use more appropriate assertions for the relocation of TLS LE
b136efd10a7 Re: dlltool memory leaks
b4bde11f310 ld: Don't use -mdirect-extern-access for LoongArch
ab776bc8685 lto: Set plugin_format to bfd_plugin_no only if known_used is set
cec7ab85f24 aarch64: gas: Allow movprfx with fmmla and bfscale [PR gas/33562]
0b040187894 aarch64, gas: Relax Armv9.6-A mandatory feature set
4df2be75910 i386: Add GLIBC_ABI_GNU_TLS version dependency
71c1de4b0c8 x86-64: Add GLIBC_ABI_DT_X86_64_PLT version dependency
b0fe5c23780 x86: Add GLIBC_ABI_GNU2_TLS version dependency
d5945a221ff x86: Copy non_got_ref_without_indirect_extern_access

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agoffmpeg: add a (possible) build race fix
Alexander Kanavin [Thu, 4 Dec 2025 12:18:00 +0000 (13:18 +0100)] 
ffmpeg: add a (possible) build race fix

There's been an intermittent build fail that looks like a race:
https://bugzilla.yoctoproject.org/show_bug.cgi?id=16000

While I can't say for sure if this is fixing the issue,
there's no harm in adding a backport that rearranges the
faulty code, and someone can then try to add a real fix on top
of it. Or the race goes away and we're good.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agomesa: upgrade 25.2.5 -> 25.2.8
Dmitry Baryshkov [Thu, 4 Dec 2025 12:45:04 +0000 (14:45 +0200)] 
mesa: upgrade 25.2.5 -> 25.2.8

Pick up the latest (and last) release from 25.2 branch, fixing several
issues with the drivers.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agollvm/clang: Upgrade to 21.1.7 release
Deepesh Varatharajan [Fri, 5 Dec 2025 09:55:41 +0000 (01:55 -0800)] 
llvm/clang: Upgrade to 21.1.7 release

Brings following bugfixes on top of 21.1.6

292dc2b86f66 (HEAD, tag: llvmorg-21.1.7) [LLD][COFF] Align EC code ranges to page boundaries (#168222)
9ed1927442a4 [server-llvm-21][MC] Fixing vector overflow
922c9914e14b [clangd] Clangd running with `--experimental-modules-support` crashes when the compilation database is unavailable (#153802)
33e1a55a8bc7 Bump version to 21.1.7

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agoqemu: backport block image size check fix
Mathieu Dubois-Briand [Sat, 6 Dec 2025 17:25:52 +0000 (18:25 +0100)] 
qemu: backport block image size check fix

Backport qemu patch relaxing size requirements on sdcard sizes, allowing
to use sizes that are not powers of 2, as long as they are above the
SDSC max capacity (2GiB).

Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agoqemu: upgrade 10.0.6 -> 10.0.7
Mathieu Dubois-Briand [Sat, 6 Dec 2025 17:25:51 +0000 (18:25 +0100)] 
qemu: upgrade 10.0.6 -> 10.0.7

Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agoliburcu: upgrade 0.15.3 -> 0.15.5
Ankur Tyagi [Fri, 28 Nov 2025 06:18:50 +0000 (19:18 +1300)] 
liburcu: upgrade 0.15.3 -> 0.15.5

v0.15.5
* x86: Define cmm_smp_mb() as lock; addl rather than mfence
* Introduce barrier test
* Add test_uatomic to gitignore
* Cleanup: Remove stray space
* benchmark: Add uatomic benchmark

v0.15.4
* uatomic: Fix redundant memory barriers for atomic builtin operations
* Cleanup: Remove useless declarations from urcu-qsbr
* src/urcu-bp.c: assert => urcu_posix_assert
* ppc.h: improve ppc64 caa_get_cycles on Darwin

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agolibinput: upgrade 1.29.1 -> 1.29.2
Ankur Tyagi [Fri, 28 Nov 2025 06:18:49 +0000 (19:18 +1300)] 
libinput: upgrade 1.29.1 -> 1.29.2

Release Notes:
https://gitlab.freedesktop.org/libinput/libinput/-/releases/1.29.2

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agolibxmlb: upgrade 0.3.23 -> 0.3.24
Ankur Tyagi [Fri, 28 Nov 2025 06:18:48 +0000 (19:18 +1300)] 
libxmlb: upgrade 0.3.23 -> 0.3.24

Release Notes:
https://github.com/hughsie/libxmlb/releases/tag/0.3.24

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agolibnotify: upgrade 0.8.6 -> 0.8.7
Ankur Tyagi [Fri, 28 Nov 2025 06:18:47 +0000 (19:18 +1300)] 
libnotify: upgrade 0.8.6 -> 0.8.7

Release Notes:
https://gitlab.gnome.org/GNOME/libnotify/-/blob/0.8.7/NEWS?ref_type=tags

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agomsmtp: upgrade 1.8.31 -> 1.8.32
Ankur Tyagi [Fri, 28 Nov 2025 06:18:46 +0000 (19:18 +1300)] 
msmtp: upgrade 1.8.31 -> 1.8.32

Release Notes:
https://marlam.de/msmtp/news/msmtp-1-8-32/

Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agolibtirpc: upgrade 1.3.6 -> 1.3.7
Ankur Tyagi [Fri, 28 Nov 2025 06:18:44 +0000 (19:18 +1300)] 
libtirpc: upgrade 1.3.6 -> 1.3.7

Dropped patches merged in the upstream.

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agorepo: upgrade 2.58 -> 2.59
Ankur Tyagi [Fri, 28 Nov 2025 06:18:43 +0000 (19:18 +1300)] 
repo: upgrade 2.58 -> 2.59

Changelog:
https://gerrit.googlesource.com/git-repo.git/+log/1afe96a7e997ce7748f066b206a85ac648f7a87c

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agobtrfs-tools: upgrade 6.17 -> 6.17.1
Ankur Tyagi [Fri, 28 Nov 2025 06:18:42 +0000 (19:18 +1300)] 
btrfs-tools: upgrade 6.17 -> 6.17.1

Release Notes:
https://github.com/kdave/btrfs-progs/releases/tag/v6.17.1

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agomobile-broadband-provider-info: upgrade 20250613 -> 20251101
Ankur Tyagi [Fri, 28 Nov 2025 06:18:41 +0000 (19:18 +1300)] 
mobile-broadband-provider-info: upgrade 20250613 -> 20251101

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agottyrun: upgrade 2.38.0 -> 2.39.0
Ankur Tyagi [Fri, 28 Nov 2025 06:18:40 +0000 (19:18 +1300)] 
ttyrun: upgrade 2.38.0 -> 2.39.0

Release Notes:
https://github.com/ibm-s390-linux/s390-tools/releases/tag/v2.39.0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agobase-passwd: upgrade 3.6.7 -> 3.6.8
Ankur Tyagi [Fri, 28 Nov 2025 06:18:39 +0000 (19:18 +1300)] 
base-passwd: upgrade 3.6.7 -> 3.6.8

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agodhcpcd: upgrade 10.2.4 -> 10.3.0
Ankur Tyagi [Fri, 28 Nov 2025 06:18:38 +0000 (19:18 +1300)] 
dhcpcd: upgrade 10.2.4 -> 10.3.0

Release Notes:
https://github.com/NetworkConfiguration/dhcpcd/releases/tag/v10.3.0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agolibpng: upgrade 1.6.50 -> 1.6.51
Zhang Peng [Wed, 26 Nov 2025 03:19:10 +0000 (11:19 +0800)] 
libpng: upgrade 1.6.50 -> 1.6.51

Changes from version 1.6.50 to version 1.6.51
- Fixed CVE-2025-64505 (moderate severity): Heap buffer overflow in `png_do_quantize`
  via malformed palette index. (Reported by Samsung; analyzed by Fabio Gritti.)
- Fixed CVE-2025-64506 (moderate severity): Heap buffer over-read in `png_write_image_8bit`
  with 8-bit input and `convert_to_8bit` enabled.
  (Reported by Samsung and weijinjinnihao@users.noreply.github.com; analyzed by Fabio Gritti.)
- Fixed CVE-2025-64720 (high severity): Buffer overflow in `png_image_read_composite` via
  incorrect palette premultiplication. (Reported by Samsung; analyzed by John Bowler.)
- Fixed CVE-2025-65018 (high severity): Heap buffer overflow in `png_combine_row` triggered
  via `png_image_finish_read`. (Reported by yosiimich@users.noreply.github.com.)
- Fixed a memory leak in `png_set_quantize`. (Reported by Samsung; analyzed by Fabio Gritti.)
- Removed the experimental and incomplete ERROR_NUMBERS code. (Contributed by Tobias Stoeckmann.)
- Improved the RISC-V vector extension support; required RVV 1.0 or newer. (Contributed by Filip Wasil.)
- Added GitHub Actions workflows for automated testing.
- Performed various refactorings and cleanups.

Ptest successfully passed:
============================================================================
Testsuite summary for libpng 1.6.51
============================================================================
 # TOTAL: 32
 # PASS:  32
 # SKIP:  0
 # XFAIL: 0
 # FAIL:  0
 # XPASS: 0
 # ERROR: 0
============================================================================

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agoicu: exclude debug files from ptest execution
Jiaying Song [Thu, 4 Dec 2025 06:00:53 +0000 (14:00 +0800)] 
icu: exclude debug files from ptest execution

When EXTRA_IMAGE_FEATURES contains dbg-pkgs, a .debug directory is
created containing debug symbol files that cannot be executed, causing
ptest failures such as:

/usr/lib64/icu/ptest/run-ptest: line 7: ././.debug/cintltst: cannot execute binary file: Exec format error
FAIL: ./.debug/cintltst

Modify run-ptest script to skip .debug directory files during test
execution.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agocups: upgrade from 2.4.14 to 2.4.15
Chen Qi [Thu, 4 Dec 2025 06:44:28 +0000 (06:44 +0000)] 
cups: upgrade from 2.4.14 to 2.4.15

Upgrade cups from 2.4.14 to 2.4.15.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agocoreutils: upgrade from 9.7 to 9.9
Chen Qi [Thu, 4 Dec 2025 06:44:27 +0000 (06:44 +0000)] 
coreutils: upgrade from 9.7 to 9.9

0001-sort-fix-buffer-under-read-CWE-127.patch is dropped as it has
been in version 9.9.

Adapt to upstream change about chcon and runcon:
https://gitweb.git.savannah.gnu.org/gitweb/?p=coreutils.git;a=commit;h=8ba47d09a33f0740e071a8394f3504e0fb57948e
They are not built unless selinux is available.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agoshadow: disable econf
Changqing Li [Thu, 4 Dec 2025 01:55:41 +0000 (09:55 +0800)] 
shadow: disable econf

When libeconf is installed on the host and GCC from extended buildtools
is used, the host’s libeconf is detected and -DUSE_ECONF=1 gets enabled.
However, the buildtools GCC cannot see the host header files, causing
the shadow-native do_compile fail with error:
../../shadow-4.17.3/lib/getdef.c:22:10: fatal error: libeconf.h: No such file or directory

This patch disable econf to workaround above issue.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agognutls: upgrade 3.8.10 -> 3.8.11
Peter Marko [Wed, 3 Dec 2025 19:39:09 +0000 (20:39 +0100)] 
gnutls: upgrade 3.8.10 -> 3.8.11

Release information: [1]
Includes fix for CVE-2025-9820.

Refresh patches.

Backport commit to be able to build with gcc<11 (e.g. Debian 11).

[1] https://lists.gnupg.org/pipermail/gnutls-help/2025-November/004906.html

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agobuildtools-docs-tarball: add python3-sphinxcontrib-svg2pdfconverter to the SDK
Quentin Schulz [Wed, 3 Dec 2025 11:32:32 +0000 (12:32 +0100)] 
buildtools-docs-tarball: add python3-sphinxcontrib-svg2pdfconverter to the SDK

This will soon be required for building the Yocto docs so let's add it
to the SDK toolchain.

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agopython3-sphinxcontrib-svg2pdfconverter: add new recipe
Quentin Schulz [Wed, 3 Dec 2025 11:32:31 +0000 (12:32 +0100)] 
python3-sphinxcontrib-svg2pdfconverter: add new recipe

This will be a dependency for building the Yocto docs soon, so let's add
a recipe for it.

This does SVG to PDF (or PNG) conversion for images used in Sphinx
projects.

It exposes three different Sphinx extensions, each using a different
tool for the conversion:
- cairosvg, a Python module with no available recipe,
- inkscape, only available in seemingly unmaintained 3rd party layer,
- rsvg-convert,

So we'll only support the last extension for now.

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agorpm selftests: use sha256 keys
Adam Duskett [Wed, 3 Dec 2025 15:02:51 +0000 (16:02 +0100)] 
rpm selftests: use sha256 keys

rpm selftests: use sha256 keys
Starting with RHEL9, the SHA-1 algorithm for signatures in general
and RPM package signatures specifically has been deprecated. [1]

As such, Yocto should follow suit and replace the ancient selftest signing
keys which are currently SHA1 with sequoia-compatible sha256 RSA4096 keys.

If someone runs `sq inspect ./key.secret` the output shows:
```
Invalid: No binding signature at time 2025-12-02T14:15:19Z: Policy rejected
non-revocation signature (PositiveCertification) requiring second pre-image
resistance, because SHA1 is not considered secure
```

And while there are instructions on how to update SHA1 key files to SHA256[2],
unfortuantly, the key files are 10 years old and gnupg refuses to update them.

As such, do the following:

  - Add use_sha256=True to the detach_sign call in
     meta/lib/oe/package_manager/rpm/__init__.py.

  - Add new keys in meta-selftest/files/signing/ with RSA4096 encryption and SHA256.

The keys are generated with almost the same parameters as commit 6b9d22b:

gpg gpg --expert --full-generate-key the used input was:
  - key: (8) RSA (set your own capabilities)
  - key-size: 4096
  - key-valid: 0
  - Real Name: testuser
  - Email address: testuser@email.com
  - Comment: nocomment
  - passphrase: test123

The public key and secret were then exported in armor format:
```
gpg --armor --export "$KEYID" > key.pub
gpg --output key.secret --armor --export-secret-key "$KEYID"
```

The output of `sq inspect key.secret` now shows a valid key:
```
key.secret: Transferable Secret Key.

      Fingerprint: A4C381E481817E16C5E41B6A2B910A1E01AF84DE
  Public-key algo: RSA
  Public-key size: 4096 bits
       Secret key: Encrypted
    Creation time: 2025-12-02 09:13:05 UTC
        Key flags: certification, signing, transport encryption, data-at-rest encryption

           UserID: testuser (nocomment) <testuser@email.com
```

In addition, add a gpg.batch file in case anyone else in the future needs to
regenerate the keys.

1: https://www.redhat.com/en/blog/rhel-security-sha-1-package-signatures-distrusted-rhel-9
2: https://www.redhat.com/en/blog/updating-gpg-keys-for-fedora-and-rhel

Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agoclasses/create-spdx-2.2: Fix CPE reference type
Joshua Watt [Wed, 3 Dec 2025 14:35:40 +0000 (07:35 -0700)] 
classes/create-spdx-2.2: Fix CPE reference type

The CPE reference type should be the short name ("cpe23Type") not the
full RDF IRI.

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agolib_package.bbclass: Use += to add to PACKAGE_BEFORE_PN
Peter Kjellerstedt [Wed, 3 Dec 2025 14:20:38 +0000 (15:20 +0100)] 
lib_package.bbclass: Use += to add to PACKAGE_BEFORE_PN

The bash-completion bbclass recently started to use PACKAGE_BEFORE_PN to
add the ${PN}-bash-completion package. This meant that a recipe, e.g.,
proj in meta-oe, that inherits both bash-completion and lib_package
would fail since lib_package set PACKAGE_BEFORE_PN rather than added to
it.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agorecipetool: support PEP639-variant of license key in pyproject.toml
Quentin Schulz [Wed, 3 Dec 2025 11:24:36 +0000 (12:24 +0100)] 
recipetool: support PEP639-variant of license key in pyproject.toml

Python modules using PEP639-variant of the license key[1] are currently
returning Unknown as LICENSE when using recipetool create on them
because we try to parse the key as a dict but it is now an SPDX license
expression.

This adds support for PEP639-variant of the license key, though it does
not handle the newly added license-files key[2] as I couldn't find a
dual-licensed recipe which uses that mechanism yet.

[1] https://peps.python.org/pep-0639/#add-string-value-to-license-key
[2] https://peps.python.org/pep-0639/#add-license-files-key

Signed-off-by: Quentin Schulz <quentin.schulz@cherry.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agoopkg: add PACKAGECONFIG options for acl and xattr
Etienne Cordonnier [Wed, 3 Dec 2025 10:25:14 +0000 (11:25 +0100)] 
opkg: add PACKAGECONFIG options for acl and xattr

During the last opkg update the application's ACL feature was
enabled by default, which requires acl recipe as a dependency,
however it wasn't enabled in the recipe, making compilation
fail when libacl wasn't in the sysroot.

This change adds a PACKAGECONFIG that makes acl an optional
dependency, and it is only enabled automatically if "acl"
is present in DISTRO_FEATURES.

It also enables xattr per default when the corresponding DISTRO_FEATURES
is enabled.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agoopkg: fix WITH_ACL and USE_ATTR being enabled per default
Etienne Cordonnier [Wed, 3 Dec 2025 10:25:13 +0000 (11:25 +0100)] 
opkg: fix WITH_ACL and USE_ATTR being enabled per default

ENABLE_XATTR and ENABLE_ACL were both "no" per default in autoconf, and this default
value was mistakenly changed during the cmake migration. Change it back to OFF per default

Signed-off-by: Etienne Cordonnier <ecordonnier@snap.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agoxeyes: upgrade 1.3.0 -> 1.3.1
Gyorgy Sarvari [Wed, 3 Dec 2025 09:09:19 +0000 (10:09 +0100)] 
xeyes: upgrade 1.3.0 -> 1.3.1

License-Update: added new copyright line "Copyright (c) 2023  q3k"

Shortlog:
man page: fix warnings from `mandoc -T lint` and `groff -rCHECKSTYLE=10`
Improve man page formatting
meson: Add option to build with meson
Cast Xlib XID types to xcb types
Add unused attribute to unused parameters of callback functions
Fix 5 -Wuseless-cast warnings from gcc 14.1
Fix -Wcalloc-transposed-args warnings

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agoenchant2: upgrade 2.8.12 -> 2.8.14
Gyorgy Sarvari [Wed, 3 Dec 2025 08:51:45 +0000 (09:51 +0100)] 
enchant2: upgrade 2.8.12 -> 2.8.14

Release notes:
2.8.14:
This release fixes a test failure in the previous release, and improves
enchant(1)’s word division algorithm, so that it only considers words that
contain at least one letter. (Words may contain characters that aren’t
letters, but Enchant was for example considering “1900” to be a word, which
is probably not helpful.)

2.8.13:
This release fixes a bug in the word division algorithm of enchant(1)
introduced in 2.8.4, which itself was attempting to fix bugs introduced in
the previous release. This could have caused a crash, but it seems we were
saved by careful bounds checking in GLib. Instead, it merely meant that
characters not valid at the end of a word were not removed as they should be
before spell-checking.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agoman-pages: 6.15 -> 6.16
Hongxu Jia [Wed, 3 Dec 2025 08:24:04 +0000 (16:24 +0800)] 
man-pages: 6.15 -> 6.16

See https://git.kernel.org/pub/scm/docs/man-pages/man-pages.git/tree/Changes?h=man-pages-6.16
for changelog

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agoglibc: fix gprof lookup during gmon tests
Hemanth Kumar M D [Wed, 3 Dec 2025 06:42:49 +0000 (22:42 -0800)] 
glibc: fix gprof lookup during gmon tests

A few gmon tests were failing with the following error:

    tst-gmon-gprof.sh: line 52: gprof: command not found

The test scripts look for 'gprof' binary, but the binaries are available
at target-prefixed directory with an appended prefix of ${TARGET_PREFIX}.
So, the binary should be ${TARGET_PREFIX}gprof

Testing results:

+--------------+---------+---------+-------+
| Result       | Before  | After   | Diff  |
+--------------+---------+---------+-------+
| PASS         |   6968  |   6972  |   +4  |
| XPASS        |      4  |      4  |    0  |
| FAIL         |     46  |     42  |   -4  |
| XFAIL        |     16  |     16  |    0  |
| UNSUPPORTED  |    103  |    103  |    0  |
+--------------+---------+---------+-------+

Signed-off-by: Hemanth Kumar M D <hemanth.250302@gmail.com>
Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agopython3-numpy: fix run-ptest
Changqing Li [Wed, 3 Dec 2025 05:33:34 +0000 (13:33 +0800)] 
python3-numpy: fix run-ptest

Hardcode path will make run-ptest not work when package is installed
under /usr/lib64, error like:
ERROR: file or directory not found: /usr/lib/python3.*/site-packages/numpy

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agooeqa/sdk/cases/meson.py: fix assertion for multilib
Chen Qi [Wed, 3 Dec 2025 05:22:17 +0000 (05:22 +0000)] 
oeqa/sdk/cases/meson.py: fix assertion for multilib

In case of multilib, the values of CC and HOST_ARCH in self.td are
not valid for lib32. We need to use the env vars sourced by the
env script.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agogo: upgrade 1.25.4 -> 1.25.5
Peter Marko [Tue, 2 Dec 2025 22:48:06 +0000 (23:48 +0100)] 
go: upgrade 1.25.4 -> 1.25.5

Upgrade to latest 1.25.x release [1]:

$ git --no-pager log --oneline go1.25.4..go1.25.5
fefb02adf4 (tag: go1.25.5) [release-branch.go1.25] go1.25.5
f7bce4bd6f [release-branch.go1.25] crypto/x509: prevent HostnameError.Error() from consuming excessive resource
287017aceb [release-branch.go1.25] crypto/x509: excluded subdomain constraints preclude wildcard SANs
e1ce1bfa7f [release-branch.go1.25] mime: parse media types that contain braces
433c01e94e [release-branch.go1.25] internal/syscall/windows: fix ReOpenFile sentinel error value

Fixes CVE-2025-61729 and CVE-2025-61727.

Release information: [2]

[1] https://github.com/golang/go/compare/go1.25.4...go1.25.5
[2] https://groups.google.com/g/golang-announce/c/8FJoBkPddm4

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agopython3-docutils: Upgrade 0.22 -> 0.22.3
Leon Anavi [Tue, 2 Dec 2025 09:29:26 +0000 (11:29 +0200)] 
python3-docutils: Upgrade 0.22 -> 0.22.3

Upgrade to release 0.22.3:

- Do not flag uncategorized, auxiliary elements like
  sphinx.addnodes.only when testing for invalid parents of topics
  or sidebars
- More informative error messages when a substitution definition
  contains problematic or not supported content
- Ignore combining characters when extracting a grid table block
- Ignore combining characters when parsing the grid table structure
- Fix handling of combining characters when extracting 2d-block

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agopython3-markdown: Upgrade 3.9 -> 3.10
Leon Anavi [Tue, 2 Dec 2025 09:29:25 +0000 (11:29 +0200)] 
python3-markdown: Upgrade 3.9 -> 3.10

Upgrade to release 3.10:

- Officially support Python 3.14 and PyPy 3.11
- Drop support for Python 3.9 and PyPy 3.9.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agopython3-hypothesis: Upgrade 6.142.2 -> 6.148.5
Leon Anavi [Tue, 2 Dec 2025 09:29:24 +0000 (11:29 +0200)] 
python3-hypothesis: Upgrade 6.142.2 -> 6.148.5

Upgrade to release 6.148.5:

- This patch improves the error message for FlakyStrategyDefinition
  when the precondition for a rule is flaky

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2 weeks agolinux-yocto/6.12: update CVE exclusions (6.12.60)
Bruce Ashfield [Thu, 4 Dec 2025 04:30:28 +0000 (23:30 -0500)] 
linux-yocto/6.12: update CVE exclusions (6.12.60)

Data pulled from: https://github.com/CVEProject/cvelistV5

    1/1 [
        Author: cvelistV5 Github Action
        Email: github_action@example.com
        Subject: 1 changes (0 new | 1 updated): - 0 new CVEs: - 1 updated CVEs: CVE-2025-7195
        Date: Tue, 2 Dec 2025 23:31:01 +0000

    ]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>