to ensure the kernel FIT image signing keys are available when creating
the U-Boot DTB. This is done only if the signing of the kernel FIT image
is enabled (UBOOT_SIGN_ENABLE="1").
The lack of the dependency causes build errors when executing a build
with no kernel FIT keys initially present in the keys directory. In such
cases one would see an output like this in the Bitbake logs:
Log data follows:
| DEBUG: Executing shell function do_uboot_assemble_fitimage
| Couldn't open RSA private key: '/workdir/build/keys/fit/dev.key': No such file or directory
| Failed to sign 'signature' signature node in 'conf-1' conf node
| FIT description: Kernel Image image with one or more FDT blobs
| ...
This issue was introduced by commit 259bfa86f384 where the dependency
between U-Boot and the kernel was removed (for good reasons). Before
that commit the dependency was set via DEPENDS so that, in terms of
tasks, one had:
With the removal of the first dependency, no more guarantees exist that
the keys would be present when assembling the U-Boot FIT image. That's
the situation we are solving with the present commit.
Fixes: 259bfa86f384 ("u-boot: kernel-fitimage: Fix dependency loop if UBOOT_SIGN_ENABLE and UBOOT_ENV enabled") Signed-off-by: Rogerio Guerra Borin <rogerio.borin@toradex.com> Cc: Marek Vasut <marex@denx.de> Cc: Sean Anderson <sean.anderson@seco.com> Cc: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ines KCHELFI [Mon, 12 May 2025 14:44:09 +0000 (16:44 +0200)]
rpm-sequoia: add ptest
In rpm-sequoia, some default paths in test code (OUT_DIR,
CARGO_MANIFEST_DIR) are invalid at runtime and cause test failures.
To fix this, patch the test code (symbols.rs) to support overriding these
paths via optional environment variables: FORCE_RUNTIME_PATH_LIB and
FORCE_RUNTIME_PATH_SRC.
Also make -ptest package RDEPEND on -dev package.
Tests take less than a second so this is added to PTEST_FAST.
ptest result:
|root@qemux86-64:~# ptest-runner rpm-sequoia
|START: ptest-runner
|2025-05-02T15:57
|BEGIN: /usr/lib/rpm-sequoia/ptest
|
|running 1 test
|test symbols ... ok
|
|test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
|
|
|running 2 tests
|test tests::merge_certs_mismatch ... ok
|test tests::merge_certs ... ok
|
|test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
|
|DURATION: 0
|END: /usr/lib/rpm-sequoia/ptest
|2025-05-02T15:57
|STOP: ptest-runner
|TOTAL: 1 FAIL: 0
Ines KCHELFI [Mon, 12 May 2025 14:44:11 +0000 (16:44 +0200)]
ptest-cargo: fix tests output format for testimage
In testimage, the ptest-runner output parser expects test results to follow
a specific format,with lines beginning with PASS:, FAIL:, or SKIP:. ptest-cargo,
currently, does not emit any of those lines and the parser treats the test
section as having no results, causing a test failure with :
AssertionError:
ptests which had no test results:
['<package>']
This patch ensures that the recipes using ptest-cargo class explicitly emits
PASS: or FAIL: lines, making the results compatible with the test parser and
preventing test failures.
Trevor Gamblin [Mon, 12 May 2025 14:43:51 +0000 (10:43 -0400)]
python3-cython: upgrade 3.0.12 -> 3.1.0
Many changes are included with this release, including support for
freethreading builds of CPython 3.13, cleanup of legacy code, and many
other features and bug fixes.
Modify 0001-Makefile.pre-use-qemu-wrapper-when-gathering-profile.patch
to remove 'test_types' from the pgo-wrapper call, since that fails now
under qemu.
Khem Raj [Mon, 12 May 2025 04:10:47 +0000 (21:10 -0700)]
compile-rt: Fix building compiler-native on aarch64 build hosts.
Using target triple confuses the native system compiler to find
libgcc and C runtime during compiler-rt-native build
Fixes
| /home/khem/yoe/build/tmp/hosttools/ld: cannot find crtbeginS.o: No such file or directory
| /home/khem/yoe/build/tmp/hosttools/ld: cannot find -lgcc: No such file or directory
| /home/khem/yoe/build/tmp/hosttools/ld: cannot find -lgcc_s: No such file or directory
| clang: error: linker command failed with exit code 1 (use -v to see invocation)
| ninja: build stopped: subcommand failed.
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Yi Zhao [Fri, 9 May 2025 14:55:00 +0000 (22:55 +0800)]
openssl: add fips support
* Add PACKAGECONFIG[fips] to enable fips build.
* Split a new package openssl-ossl-module-fips for fips.so.
* Add pkg_postinst_ontarget for openssl-ossl-module-fips to ensure the
config file fipsmodule.cnf is created on target. This is because we
should not use the same fipsmodule.cnf on different machines.
The 'openssl fipsinstall' commandline in pkg_postinst_ontarget will do
the following things:
1. Run the FIPS module self tests on target.
2. Generate config file fipsmodule.conf containing information about
the FIPS module such as the calculated MAC of the module.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:03:34 +0000 (17:03 +0800)]
python3-yamllint: upgrade 1.37.0 -> 1.37.1
Changelog:
=============
- Rule comments: tell how many spaces are expected
- Rule quoted-strings: Fix only-when-needed on multiline with backslash
- Config: Report if rules is not a dict
- Fix test_codec_built_in_equivalent() test when run with pytest
- CI: Fix TestPyPI "dev0" versions for master commits on tags
- Docs: Add links to GitHub repository and releases
- Docs: Fix GitLab integration example
- Docs: Fix GitLab integration link
- Fix the tests badge link on the README
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changelog:
=============
- Fix TypeError when taking the union of typing_extensions.TypeAliasType and a
typing.TypeAliasType on Python 3.12 and 3.13.
- Backport from CPython PR #132160 to avoid having user arguments shadowed in
generated __new__ by @typing_extensions.deprecated.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:03:30 +0000 (17:03 +0800)]
python3-poetry-core: upgrade 2.1.2 -> 2.1.3
Changed
----------
- Update list of supported licenses
Fixed
--------
- Fix an issue where the union of specific inverse or partially inverse markers
was not simplified
- Fix an issue where optional dependencies defined in the project section were
treated as non-optional when a source was defined for them in the tool.poetry
section
- Fix an issue where markers with === were not parsed correctly
- Fix an issue where local versions with upper case letters caused an error
- Fix an issue where extra markers with a value starting with "in" were not
validated correctly
- Fix an issue where inheriting from WheelBuilder was unnecessarily difficult
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:03:28 +0000 (17:03 +0800)]
python3-pdm: upgrade 2.23.1 -> 2.24.1
Features & Improvements
------------------------
- New command pdm new that behaves like pdm init but creates a new project.
- Support use --name as project name for command pdm new e.g. pdm new hello --name world
- Support exporting to pylock.toml format as described by PEP 751.
Bug Fixes
---------
- Pass the --quiet option to pdm sync command.
- If a .python-version file is found and it contains multiple lines, the file
will be ignored. The usage of the .python-version file can be disabled, if
configuration value python.use_python_version (or environment variable PDM_USE_PYTHON_VERSION) is False.
- fix pdm config -e command to open read-only file under linux
- Replace project names and import names in both README.md and pyproject.toml when running pdm init <template>.
- Fix a bug that URL dependency hashes are not updated if running pdm lock --update-reuse.
- Install the project when using the BaseSynchronizer with install_self set
to True. This fixes the bug that when calling pdm sync --quiet, it skips
installing the project itself.
- Mark one additional test as requiring network, and fix another one
not to require it anymore.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:03:27 +0000 (17:03 +0800)]
python3-packaging: upgrade 24.2 -> 25.0
Changelog:
============
- Re-add a test for Unicode file name parsing
- Upgrade to ruff 0.9.1
- Add support for PEP 738 Android tags
- feat(markers): support 'extras' and 'dependency_groups' markers
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:03:25 +0000 (17:03 +0800)]
python3-markdown: upgrade 3.7 -> 3.8
Changelog:
===========
Changed
-------
- DRY fix in abbr extension by introducing method create_element
- Clean up test directory by removing some redundant tests and port non-redundant cases to the newer test framework.
- Improved performance of the raw HTML post-processor
Fixed
---------
- Backslash Unescape IDs set via attr_list on toc
- Ensure md_in_html processes content inside "markdown" blocks as they are parsed outside of "markdown" blocks to keep things more consistent for third-party extensions
- md_in_html handle tags within inline code blocks better
- md_in_html fix handling of one-liner block HTML handling
- Ensure <center> is treated like a block-level element
- Ensure that abbr extension respects AtomicString and does not process perceived abbreviations in these strings
- Ensure smarty extension correctly renders nested closing quotes
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:03:23 +0000 (17:03 +0800)]
python3-lxml: upgrade 5.3.2 -> 5.4.0
Bugfix:
-Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve several CVEs.
(Binary wheels for Windows continue to use a patched libxml2 2.11.9 and libxslt 1.1.39.)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:03:13 +0000 (17:03 +0800)]
libxft: upgrade 2.3.8 -> 2.3.9
Changelog:
==========
- manpage formatting-fixes
- meson: Add option to build with meson
- Require xproto >= 7.0.22 for _X_UNUSED
- Remove support for building with pre-C89 versions of C
- Remove support for building with pre-X11R7 versions of X
- fix potential buffer overrun in _XftGlyphDefault
- issue 21: remove redundant/out-of-place prototype for XftNameUnparse
- build-fix for older versions of freetype2: FT_HAS_SVG was added late in 2021
- issue 19: Problem loading "SourceCodePro-Regular" font in Fedora
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:03:12 +0000 (17:03 +0800)]
libuv: upgrade 1.50.0 -> 1.51.0
Changelog:
===========
* win: fix leak in uv_os_tmpdir
* docs: fix RTD build
* win: lazy-load [GS]etThreadDescription symbols
* linux: try preadv64/pwritev64 before preadv/pwritev
* win: check cwd length before spawning a child process
* macos,bsd: handle missing /dev/null in chroot env
* doc: fix README link text
* win: fix order of FILE_STAT_BASIC_INFORMATION struct fields
* macos: increase child process stdio buffer size
* doc: add C3 bindings to LINKS.md
* unix: remove unnecessary errno.h include in poll.c
* win: fix the inconsistency in volume serial number
* unix: add thread affinity support on openharmony
* unix: enable getrusage for SunOS
* unix,win: accept NAN/INFINITY as file timestamps
* win: add ENABLE_VIRTUAL_TERMINAL_INPUT raw tty mode
* test: handle UV_ENOTSUP in platform_output
* doc: fix rendering of threading.html
* unix,sunos: enable use of sendmmsg on Solaris and Illumos
* unix: handle out of memory in iface name copy
* openbsd: do not error out if cpuspeed is not available
* test: skip thread_name_threadpool on AIX/IBMi
* aix,ibmi: fix undeclared identifiers
* unix,sunos: prefer SO_REUSEPORT for load balancing
* doc: free lib pointer before function return
* test: link with libm
* style: rename parameter to match definition
* test: support partial output lines in test runner
* build: switch from c90 to c11
* linux: allow nul bytes in abstract socket address
* sunos: use pipe2 on solaris and illumos
* unix: remove TOCTOU issues from uv_pipe_chmod
* unix: use pipe_fname if getsockname returns nothing
* haiku: use uint32 instead of uint32_t
* doc: update thread pool stack size comment
* unix: improve uv_loop_init OOM handling
* test: merge uv_tcp_connect callbacks
* test: skip multievent tests on macOS with TSAN enabled
* linux: align CPU quota calculation with Rust
* kqueue: improve fs event watcher OOM handling
* sunos: improve fs event watcher OOM handling
* build: shorten instructions for cmake build
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:03:11 +0000 (17:03 +0800)]
liburcu: upgrade 0.15.1 -> 0.15.2
Changelog:
==========
* fix: __atomic_always_lock_free() not a constant expression on g++ < 5.1
* fix: urcu assert fallback for pre-C11 builds
* doc: update uatomic-api for static assert
* Add uatomic size static assert for 's390'
* Add uatomic size static assert for 'sparc64'
* Add uatomic size static assert for 'ppc'
* Add uatomic size static assert for 'x86'
* Add uatomic size static assert for 'generic'
* Add uatomic size static assert
* Use UATOMIC_HAS_ATOMIC_INT/LLONG in generic implementation
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for x86
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for tile
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for sparc64
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for s390
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for riscv
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for ppc
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for nios2
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for mips
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for m68k
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for loongarch
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for ia64
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for hppa
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for 'gcc' arch
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for arm
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for alpha
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for aarch64
* Add UATOMIC_HAS_ATOMIC_INT/LLONG for atomic builtins
* Add builtin atomics size static asserts
* cleanup: use URCU_GCC_VERSION from compiler.h
* fix: atomic builtins defines for type support
* Move back CMM_LOAD/STORE_SHARED to volatile access
* Add cmm_annotate_mem_acquire() to URCU_DEREFERENCE_USE_VOLATILE rcu_dereference
* Use uatomic_load CMM_RELAXED in URCU_DEREFERENCE_USE_VOLATILE
* Fix: Re-introduce URCU_DEREFERENCE_USE_VOLATILE read barrier depends for alpha
* Tree-wide: Rename to uatomic_load/uatomic_store
* src: Use __*__ for attribute names
* API: Use __*__ for attribute names
* Fix Changelog 0.15.1 date
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:03:09 +0000 (17:03 +0800)]
libpng: upgrade 1.6.47 -> 1.6.48
Changelog:
============
- Fixed the floating-point version of the mDCv setter 'png_set_mDCv'.
- Added #error directives to discourage the inclusion of private
libpng implementation header files in PNG-supporting applications.
- Added the CMake build option 'PNG_LIBCONF_HEADER', to be used as an
alternative to 'DFA_XTRA'.
- Removed the Travis CI configuration files
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:03:00 +0000 (17:03 +0800)]
harfbuzz: upgrade 11.1.0 -> 11.2.0
Changelog:
============
- Painting of COLRv1 fonts without clip boxes is now about 10 times faster.
- Synthetic bold/slant of a sub font is now respected, instead of using the parent's.
- Glyph extents for fonts synthetic bold/slant are now accurately calculated.
- Various build fixes
- New API:
+hb_font_is_synthetic()
+hb_font_draw_glyph_or_fail_func_t
+hb_font_paint_glyph_or_fail_func_t
+hb_font_funcs_set_draw_glyph_or_fail_func()
+hb_font_funcs_set_paint_glyph_or_fail_func()
+hb_font_draw_glyph_or_fail()
+hb_font_paint_glyph_or_fail()
- Deprecated API:
-hb_font_draw_glyph_func_t
-hb_font_paint_glyph_func_t
-hb_font_funcs_set_draw_glyph_func()
-hb_font_funcs_set_paint_glyph_func()
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:02:57 +0000 (17:02 +0800)]
fmt: upgrade 11.1.4 -> 11.2.0
Changelog:
============
- Added the 's' specifier for 'std::error_code'. It allows formatting an error
message as a string.
- Fixed formatting of 'std::chrono::local_time' and 'tm'
- Added diagnostics for cases when timezone information is not available.
- Deprecated 'fmt::localtime' in favor of 'std::localtime'.
- Fixed compilation with GCC 15 and C++20 modules enabled
- Fixed handling of named arguments in format specs
- Added error reporting for duplicate named arguments
- Fixed formatting of 'long' with 'FMT_BUILTIN_TYPES=0'
- Optimized 'text_style' using bit packing
- Added support for incomplete types
- Fixed a flush issue in 'fmt::print' when using libstdc++
- Fixed 'fmt::println' usage with 'FMT_ENFORCE_COMPILE_STRING' and legacy
- Removed legacy header 'fmt/core.h' from docs
- Worked around limitations of '__builtin_strlen' during constant evaluation
- Worked around a bug in MSVC v141
- Removed the 'fmt_detail' namespace
- Removed specializations of 'std::is_floating_point' in tests
- Fixed a CMake error when setting 'CMAKE_MODULE_PATH' in the pedantic mode
- Updated the Bazel config
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:02:56 +0000 (17:02 +0800)]
epiphany: upgrade 48.0 -> 48.3
Changelog:
===========
- Fix crash when opening downloaded file
- Fix crash when opening incognito window
- Fix Crash when trying to select download location
- Fix Crash in escape_csv_field() when exporting passwords
- Fix Adding WhatsApp as a web app crashes
- Fix Pressing Escape key in addressbar resets the cursor to beginning of
the widget
- Fix Epiphay shouldn't show the privacy dialog in incognito mode
- Fix (CVE-2025-3839) Require user interaction before opening URL in
external application
- Fix Code cleanup
- Fix window: fix crash when force closing window without session
- Fix Several fixes for password export
- Fix Remove Granite support from Tech Preview and Canary
- Fix find-toolbar: fix crash on load-changed
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:02:52 +0000 (17:02 +0800)]
cups: upgrade 2.4.11 -> 2.4.12
Changelog:
===========
- GnuTLS follows system crypto policies now
- Added 'NoSystem' SSLOptions value
- Now we raise alert for certificate issues
- Added Kyocera USB quirk
- The scheduler now logs a job's debugging history if the backend fails
- Fixed a potential timing issue with 'cupsEnumDests'
- Fixed a potential "lost PPD" condition in the scheduler
- Fixed a compressed file error handling bug
- Fixed a bug in the make-and-model whitespace trimming code
- Fixed a removal of IPP Everywhere permanent queue if installation failed
- Fixed 'ServerToken None' in scheduler
- Fixed invalid IPP keyword values created from PPD option names
- Fixed handling of "media" and "PageSize" in the same print request
- Fixed client raster printing from macOS
- Fixed the default User-Agent string.
- Fixed a recursion issue in 'ippReadIO'.
- Fixed handling incorrect radix in 'scan_ps()'
- Fixed validation of dateTime values with time zones more than UTC+11
- Fixed attributes returned by the Create-Xxx-Subscriptions requests
- Fixed 'ippDateToTime' when using a non GMT/UTC timezone
- Fixed 'job-completed' event notifications for jobs that are cancelled before
started
- Fixed DNS-SD discovery with 'ippfind'
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:02:46 +0000 (17:02 +0800)]
babeltrace2: upgrade 2.1.0 -> 2.1.1
Changelog:
===========
* src.ctf.lttng-live: remove lttng_live_lazy_msg_init function
* src.ctf.lttng-live: fix comment formatting
* README.adoc: Update working version to 2.1
* fix: export bt_component_class_sink_simple_borrow
* fix: building from the release tarball without flex
* doc/api/libbabeltrace2: use '<code>' i.o. '<span>' in '<dt>'
* Fix: doc/api/libbabeltrace2/Doxyfile.in: set version to 2.1
* babeltrace2-sink.text.pretty(7): add missing default param. value
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Mon, 12 May 2025 09:02:44 +0000 (17:02 +0800)]
appstream: upgrade 1.0.4 -> 1.0.5
Changelog:
============
Features:
* qt: Expose markup conversion utils
* desktop-styles: Add android and iOS
* validator: Check for xml:lang="en" being used on description template elements
* validator: Flag cases of raw text in "description" elements
* metadata: Add more known extensions into as_metadata_file_guess_style()
Specification:
* docs: Clarify that the style segment of a screenshot environment is optional
* docs: Explain consequences of defining an icon for desktop-app metainfo
* docs: Clarify that description content must be in p/li elements
Bugfixes:
* validator: mark as_validator_issue_tag_list static
* docs: Add workaround for gi-docgen misnaming devhelp files
* compose: Do not permit SVG images as screenshots
* compose: Don't "forget" to scan remaining paths when re-encountering a dir
* pool: Try explicit singular term match if we only have low-quality tokens
* utils: Provide compatibility with Fedora icon tarballs when installing them
* utils: Remove leftover g_chmod()
* zstd-decompressor: Pass output/written data when decompression finished
* utils: Expect a dash in icons file name
* utils: Recognize .yml* and .yaml* file extension variants, and .zst extension
* utils: Rename the appstream file when re-saving it on install
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Richard Purdie [Sat, 10 May 2025 15:54:21 +0000 (16:54 +0100)]
bitbake.conf/pseudo: Switch from exclusion list to inclusion list
Currently, pseudo tracks all files referenced within its presence unless
they're listed in an exclusion list. The exclusion list has grown to be
fairly unwieldy.
This patch swaps PSEUDO_IGNORE_PATHS for PSEUDO_INCLUDE_PATHS which in
theory should be easier and more explicit to maintain.
This change does drop many directories from pseudo coverage including
/home and /tmp. There may be adapatations needed for recipes/classes
using pseudo in specific ways.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Khem Raj [Thu, 8 May 2025 19:13:18 +0000 (12:13 -0700)]
compiler-rt: Rename the rt libraries if compiled with arm hardfloat ABI
OE does not rely on tuple to deduce hardfloat ABI, but clang/llvm does
arm-yoe-linux-gnueabi is used for both soft and softfp and hardfp float
ABIs in OE, LLVM expects arm-yoe-linux-gnueabihf for it to be treated as
hardfloat ABI, and look for correct name for rt libraries.
We know when we compile them with Hard-float ABI so rename them in such
case so clang can find it when using -rtlib=compiler-rt it needs to
has 'armhf' suffix
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Khem Raj [Thu, 8 May 2025 19:13:16 +0000 (12:13 -0700)]
compiler-rt: Consolidate and fix cmake arguments
Specify CMAKE_C_COMPILER_TARGET and COMPILER_RT_DEFAULT_TARGET_ARCH
in common for native/target/nativesdk
set COMPILER_RT_DEFAULT_TARGET_ARCH to use HOST_ARCH across all recipe
variants
It is not needed to set COMPILER_RT_DEFAULT_TARGET_ARCH for powerpc anymore
as it is already fixed by setting COMPILER_RT_DEFAULT_TARGET_ARCH to
HOST_ARCH
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Changqing Li [Thu, 8 May 2025 09:54:28 +0000 (17:54 +0800)]
libsoup-2.4: fix CVE-2024-52532
CVE-2024-52532:
GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption.
during the reading of certain patterns of WebSocket data from clients.
Praveen Kumar [Wed, 7 May 2025 06:48:23 +0000 (06:48 +0000)]
connman: Fix CVE-2025-32743
In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c
can be NULL or an empty string when the TC (Truncated) bit is set in
a DNS response. This allows attackers to cause a denial of service
(application crash) or possibly execute arbitrary code, because those
lookup values lead to incorrect length calculations and incorrect
memcpy operations.
Yi Zhao [Thu, 8 May 2025 01:27:35 +0000 (09:27 +0800)]
python3-pygobject: RDEPENDS on gobject-introspection
Since 3.51.0, python3-pygobject depends on libgirepository 2.0 provided
by glib-2.0 instead of libgirepository 1.0 provided by
gobject-introspection[1]. It still needs the typelib files from
libgirepository-1.0 package. Add gobject-introspection as a runtime
dependency.
Fixes:
$ python3
Python 3.13.2 (main, Feb 4 2025, 14:51:09) [GCC 14.2.0] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> import gi
>>> from gi.repository import Gtk
Traceback (most recent call last):
File "/usr/lib64/python3.13/site-packages/gi/importer.py", line 139, in create_module
introspection_module = get_introspection_module(namespace)
File "/usr/lib64/python3.13/site-packages/gi/module.py", line 243, in get_introspection_module
module = IntrospectionModule(namespace, version)
File "/usr/lib64/python3.13/site-packages/gi/module.py", line 111, in __init__
repository.require(namespace, version)
~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^
gi.RepositoryError: Typelib file for namespace 'xlib', version '2.0' not found
The above exception was the direct cause of the following exception:
Traceback (most recent call last):
File "<python-input-1>", line 1, in <module>
from gi.repository import Gtk
File "/usr/lib64/python3.13/site-packages/gi/importer.py", line 141, in create_module
raise ImportError(e) from e
ImportError: Typelib file for namespace 'xlib', version '2.0' not found
Ross Burton [Sat, 10 May 2025 08:43:56 +0000 (09:43 +0100)]
meson: clean up the native template in nativesdk builds
In a nativesdk build, the native build template should be minimal as it
just needs to ensure that Meson can link with libraries in the SDK's
native sysroot.
Specifically, it shouldn't be passing BUILD_* flags to Meson as these
are for the Yocto build host, not the SDK user.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>