]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/log
thirdparty/openembedded/openembedded-core.git
3 months agoglib-2.0: fix gdatetime ptest failure with glibc 2.43
Hemanth Kumar M D [Thu, 12 Mar 2026 16:10:22 +0000 (09:10 -0700)] 
glib-2.0: fix gdatetime ptest failure with glibc 2.43

glib/gdatetime.test ptest was failing after glibc 2.43 upgrade.
Backport upstream fix from glib commit 7c837a52.

Upstream: https://gitlab.gnome.org/GNOME/glib/-/issues/3895

Signed-off-by: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoltp: workaround openat2 build failure with glibc 2.43
Hemanth Kumar M D [Thu, 12 Mar 2026 16:10:21 +0000 (09:10 -0700)] 
ltp: workaround openat2 build failure with glibc 2.43

glibc 2.43 added native openat2() support, causing LTP's configure to
set HAVE_OPENAT2=1 and skip its own internal definitions, resulting in
a build failure. Add a patch to undef HAVE_OPENAT2 in lapi/openat2.h
as a workaround until a proper fix is found.

Signed-off-by: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agobarebox-tools: fix build failure with glibc 2.43
Hemanth Kumar M D [Thu, 12 Mar 2026 16:10:20 +0000 (09:10 -0700)] 
barebox-tools: fix build failure with glibc 2.43

glibc 2.43 introduces linux/openat2.h through the fcntl include chain
(bits/fcntl-linux.h -> linux/openat2.h) which expects __u64 to be
defined before inclusion. Move <fcntl.h> in barebox scripts/include/
linux/types.h to after the typedef definitions to fix the build.

Signed-off-by: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibxcrypt: avoid discarded-qualifiers build failure with glibc 2.43
Hemanth Kumar M D [Thu, 12 Mar 2026 16:10:19 +0000 (09:10 -0700)] 
libxcrypt: avoid discarded-qualifiers build failure with glibc 2.43

With the glibc 2.43 upgrade, building nativesdk-libxcrypt triggers a
-Wdiscarded-qualifiers warning in crypt-gost-yescrypt.c and
crypt-sm3-yescrypt.c which becomes a build failure due to -Werror.

Signed-off-by: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agogcc-runtime: avoid discarded-qualifiers build failure with glibc 2.43
Hemanth Kumar M D [Thu, 12 Mar 2026 16:10:18 +0000 (09:10 -0700)] 
gcc-runtime: avoid discarded-qualifiers build failure with glibc 2.43

With the glibc 2.43 upgrade, building gcc-runtime triggers a
-Wdiscarded-qualifiers warning in libgomp/affinity-fmt.c which
becomes a build failure due to -Werror.

Add -Wno-error=discarded-qualifiers to CFLAGS as a workaround until
the upstream const-correctness issue in libgomp is resolved.

Signed-off-by: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agogettext: upgrade 0.26 -> 1.0
Randy MacLeod [Thu, 12 Mar 2026 16:10:17 +0000 (09:10 -0700)] 
gettext: upgrade 0.26 -> 1.0

Release notes:
https://savannah.gnu.org/news/?id=10853

Changelog:
1.0: https://lists.gnu.org/archive/html/info-gnu/2026-01/msg00007.html

- gettext-minimal-native: update Makevars.template source path to new
  location under gettext-tools/wizard/po-templates/traditional/

- use-pkgconfig.patch: refresh patch hunks to match updated upstream
  context in libxml.m4 and selinux-selinux-h.m4, update selinux
  discovery: replace AC_SEARCH_LIBS (getfilecon_raw) with
  PKG_CHECK_MODULES for correct sysroot handling

- gettext_1.0.bb: add autotools ptest directory and install
  gettext-tools autotools build artifacts for ptest

ptest results:

=======================
All 630 tests passed
(41 tests were not run)
=======================
DURATION: 45
END: /usr/lib/gettext/ptest
2026-03-09T17:58
STOP: ptest-runner
TOTAL: 1 FAIL: 0

With the previous version:
All 626 tests passed
(40 tests were not run)

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agobitbake.conf: Set PACKAGECONFIG vardepvalue
Richard Purdie [Wed, 11 Mar 2026 11:06:05 +0000 (11:06 +0000)] 
bitbake.conf: Set PACKAGECONFIG vardepvalue

For PACKAGECONFIG settings in recipes, we care about the end value, we don't
really care how it is constructed. bbappends to recipes can add things to
the default PACKAGECONFIG settings, for example being dependent on a DISTRO_FEATURE
or another variable. If the computed value doesn't change, the task hashes can remain
constant, allowing for better sstate reuse.

To do this, set a vardepvalue of the variable value itself, ignoring how
the actual value is calculated.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agocargo-c: update 0.10.20 -> 0.10.21
Deepesh Varatharajan [Mon, 9 Mar 2026 08:33:32 +0000 (01:33 -0700)] 
cargo-c: update 0.10.20 -> 0.10.21

Changes are here:
https://github.com/lu-zero/cargo-c/compare/v0.10.20...v0.10.21

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolua: upgrade from 5.4.8 to 5.5.0
Changqing Li [Mon, 9 Mar 2026 06:07:41 +0000 (14:07 +0800)] 
lua: upgrade from 5.4.8 to 5.5.0

Changes:
https://www.lua.org/manual/5.5/readme.html#changes

PLATS linux-readline is moved, and readline is changed to load
dynamically, refer [1], keep readline as PACKAGECONFIG to allow user to
remove readline dependency.

Lua use dlopen by default, and LUA_READLINELIB is set to libreadline.so,
but libreadline.so is in the dev package, which will make Lua cannot
load libreadline even when libreadline is installed. Make readline as
build dependency and detect the real libreadline name and set LUA_READLINELIB

[1] https://github.com/lua/lua/commit/366c85564874d560b3608349f752e9e490f9002d
[2] https://github.com/lua/lua/blob/master/lua.c#L520

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agotcl8: fix tclConfig.sh after UNPACKDIR change
Krupal Ka Patel [Mon, 9 Mar 2026 05:31:15 +0000 (22:31 -0700)] 
tcl8: fix tclConfig.sh after UNPACKDIR change

Adapt the  sed command that edits TCL_SRC_DIR in tclConfig.sh
This is needed so that tk in meta-oe is capable of reading
the required header file

Remove buildpath from TCL_BUILD_STUB_LIB_PATH in tclConfig.sh

Signed-off-by: Krupal Ka Patel <krkapate@cisco.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agopython3-setuptools: drop Windows launcher executables on non-mingw builds
Krupal Ka Patel [Mon, 9 Mar 2026 05:19:33 +0000 (22:19 -0700)] 
python3-setuptools: drop Windows launcher executables on non-mingw builds

setuptools installs Windows launcher executables (cli*.exe, gui*.exe)
into site-packages. These binaries are only used on Windows platforms
but are packaged for target, native, and nativesdk builds.

Remove the Windows launcher executables when not building for a mingw
(mingw32/mingw64) host to avoid shipping unused Windows binaries.

Signed-off-by: Krupal Ka Patel <krkapate@cisco.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agopython3-pip: drop unused Windows distlib launcher templates
Krupal Ka Patel [Mon, 9 Mar 2026 05:18:26 +0000 (22:18 -0700)] 
python3-pip: drop unused Windows distlib launcher templates

pip vendors distlib which ships Windows launcher template binaries
(*.exe) under pip/_vendor/distlib. These files are only used on
Windows systems but are installed and packaged for target, native,
and nativesdk builds.

Remove the distlib *.exe templates when not building for a mingw
(mingw32/mingw64) host to avoid shipping unused Windows binaries and
reduce package noise.

Signed-off-by: Krupal Ka Patel <krkapate@cisco.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agogcc-source: Use allarch.bbclass
Joshua Watt [Tue, 10 Mar 2026 18:38:22 +0000 (12:38 -0600)] 
gcc-source: Use allarch.bbclass

Converts the recipe to use allarch.bbclass. This is necessary because
SSTATE_PKGARCH is set to "allarch" based on if allarch is inherited or
not. If it is not, SSTATE_PKGARCH has the value "all", which means any
data written out based on it cannot be found (because "all" is not in
SSTATE_ARCHS)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agollvm-project-source: Use allarch.bbclass
Joshua Watt [Tue, 10 Mar 2026 18:38:21 +0000 (12:38 -0600)] 
llvm-project-source: Use allarch.bbclass

Converts the recipe to use allarch.bbclass. This is necessary because
SSTATE_PKGARCH is set to "allarch" based on if allarch is inherited or
not. If it is not, SSTATE_PKGARCH has the value "all", which means any
data written out based on it cannot be found (because "all" is not in
SSTATE_ARCHS)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoselftest/glibc: add docstrings to the selftest classes
Adrian Freihofer [Sun, 8 Mar 2026 15:15:07 +0000 (16:15 +0100)] 
selftest/glibc: add docstrings to the selftest classes

Add docstrings to GlibcSelfTest classes and comments to the
glibc-testsuite recipe explaining how this test concept works.

This commit does not change the code itself.

Related [Yocto #16113]

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agospirv-tools: backport a fix for building with gcc-16
Martin Jansa [Sun, 8 Mar 2026 12:49:31 +0000 (13:49 +0100)] 
spirv-tools: backport a fix for building with gcc-16

Fixes:
https://errors.yoctoproject.org/Errors/Details/905195/
when building on host with gcc-16

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agogcc: backport a fix for building with gcc-16
Martin Jansa [Sun, 8 Mar 2026 12:18:12 +0000 (13:18 +0100)] 
gcc: backport a fix for building with gcc-16

Fixes:
https://errors.yoctoproject.org/Errors/Details/905192/
when building on host with gcc-16

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agom4: upgrade to 1.4.21
Martin Jansa [Thu, 5 Mar 2026 18:03:29 +0000 (19:03 +0100)] 
m4: upgrade to 1.4.21

https://lists.gnu.org/archive/html/m4-announce/2026-02/msg00000.html
This release is being made mainly to cater to recent glibc changes in
light of the C23 language standard.  However, it also includes fixes
for some corner-case bugs in eval and when using the defn macro on
builtins.

Fixes m4-native builds on hosts with glibc-2.43 like:
./stdlib.h:827:20: error: expected identifier or '(' before '_Generic'
./string.h:777:20: error: expected identifier or '(' before '_Generic'

Remove 0001-gettext-h-Avoid-gcc-Wformat-security-warnings-with-d.patch
which is included in gnulib revision used by m4 since:
https://gitweb.git.savannah.gnu.org/gitweb/?p=m4.git;a=commit;h=beee8d26382460010338c37f9dd9f823aa9f4ee8

LIC_FILES_CHKSUM was updated for barem4.m4 and testbarem4.m4 from:
https://gitweb.git.savannah.gnu.org/gitweb/?p=m4.git;a=blobdiff;f=examples/COPYING;h=e623b2b9394cbd1784a4964bbac105050296f33b;hp=7e73a1219b542fa035facc47cdb3dd81132e6373;hb=900a90f624cee4a8c1c02c4d6a61ef1ed26a17d1;hpb=c7b96d682958532c4eb2d5c2d81bb6ac342fd410

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibpam: set status for CVE-2024-10041
Peter Marko [Fri, 6 Mar 2026 06:55:14 +0000 (07:55 +0100)] 
libpam: set status for CVE-2024-10041

This CVE was fixed in v1.6.1 (per [1]).
NVD tracks it as version-less CVE for RedHat.

[1] https://security-tracker.debian.org/tracker/CVE-2024-10041

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoprocps: support ptest when TCLIBC is glibc
Changqing Li [Fri, 6 Mar 2026 04:05:53 +0000 (12:05 +0800)] 
procps: support ptest when TCLIBC is glibc

* Support ptest for procps TCLIBC is glibc. The configure.ac only match
  LINUX as "linux-gnu", we can patch it to make test can run on musl lib
system, but the upstream testsuite should only run on gnu libc host,
some test cases only suitable for glibc, eg: Some of the error messages
for free command on musl system is not the same as glibc system, which
will make test failed. In order to avoid some other unexpected failure,
just support ptest for glibc.

* Bug [1] is filed for musl support, we may can add support for musl
  libc later when upstream add the musl support

* procps's testsuite use DejaGnu test framework.  The testsuite is
  expected to run during build time, this implementation create the same
folder structure as the testsuite expected to make it can work well.

[1] https://gitlab.com/procps-ng/procps/-/issues/420

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agouboot-config: fix KCONFIG_CONFIG_ROOTDIR path
Francesco Valla [Wed, 4 Mar 2026 23:04:05 +0000 (00:04 +0100)] 
uboot-config: fix KCONFIG_CONFIG_ROOTDIR path

Commit 22e96b3 ("u-boot: Make sure the build dir is unique for each
UBOOT_CONFIG") changed the u-boot build directory name to include the
UBOOT_CONFIG value the build is performed for. Align to the new pattern
also the KCONFIG_CONFIG_ROOTDIR variable, which is used by devtool to
create a config baseline in case the menuconfig task is enabled.

This fixes the following error, which can be seen when building u-boot
under devtool and UBOOT_CONFIG contains a single configuration:

  cp: cannot stat '<u-boot-builddir>/<u-boot-defconfig>/.config': No such file or directory

Signed-off-by: Francesco Valla <francesco@valla.it>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agocross-canadian.bbclass: merged /usr support
Peter de Ridder [Wed, 4 Mar 2026 16:03:36 +0000 (17:03 +0100)] 
cross-canadian.bbclass: merged /usr support

Use ${root_prefix} instead of ${base_prefix} while setting
${target_base_prefix}, otherwise we might loose the root prefix configuration
change in case of 'usrmerge' distro feature is enabled.

Signed-off-by: Peter de Ridder <peter.de.ridder@jotron.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agosanity.bbclass: warn when sstate is outside of build dir, but hash equiv database...
Alexander Kanavin [Wed, 4 Mar 2026 10:25:31 +0000 (11:25 +0100)] 
sanity.bbclass: warn when sstate is outside of build dir, but hash equiv database is inside it

This should help with the long-standing usability problem: when
someone tweaks the configuration to put sstate somewhere else than
the default (so that it can be shared between local builds, or over NFS),
they should also share the hash equivalency database, but no indication
would be given to the user to do so.

This will issue a warning and recommend to start a dedicated hash equivalency
server (if sstate is on NFS), or set BB_HASHSERVE_DB_DIR (if it isn't).

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agogrub: fix grub installation error on i386 target
Yi Zhao [Tue, 3 Mar 2026 01:58:45 +0000 (09:58 +0800)] 
grub: fix grub installation error on i386 target

Commit 1a5417f39[1] introduced a grub installation error on i386 target:

  grub-mkimage: error: `/usr/lib/grub/i386-pc/kernel.img' is
  miscompiled: its start address is 0x9074 instead of 0x9000: ld.gold
  bug?.

A series of patches are under review in grub mailing list[2]. Once these
patches are merged, we will backport them to the current version.

Currently, referring to Gentoo[3] and Libreboot[4], revert the following
commits as a workaround:
1a5417f39 configure: Check linker for --image-base support
ac042f3f5 configure: Print a more helpful error if autoconf-archive is
          not installed

[1] https://cgit.git.savannah.gnu.org/cgit/grub.git/commit/?id=1a5417f39a0ccefcdd5440f2a67f84d2d2e26960
[2] https://lists.gnu.org/archive/html/grub-devel/2026-02/msg00039.html
[3] https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f5a995ac689a7132651ef6b2b87295c392899427
[4] https://codeberg.org/libreboot/lbmk/src/branch/master/config/grub/nvme/patches/0010-Revert-configure-Check-linker-for-image-base-support.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agogrub: upgrade 2.12 -> 2.14
Yi Zhao [Tue, 3 Mar 2026 01:58:44 +0000 (09:58 +0800)] 
grub: upgrade 2.12 -> 2.14

ChangeLog:
* libgcrypt 1.11.
* LVM LV integrity and cachevol support.
* EROFS support.
* GRUB environment block inside the Btrfs header support.
* NX support for EFI platforms.
* shim loader protocol support.
* BLS and UKI support.
* Argon2 KDF support.
* TPM2 key protector support.
* Appended Signature Secure Boot Support for PowerPC.
* New option to block command line interface.
* Support dates outside of 1901..2038 range.
* zstdio decompression support.
* EFI code improvements and fixes.
* TPM driver fixes.
* Filesystems fixes.
* CVE and Coverity fixes.
* Tests improvements.
* Documentation improvements.

Drop backport patches.
Refresh local patches.
Split grub-bash-completion package by inheriting bash-completion.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoqemurunner: Drop nographic option now runqemu falls back to VNC
Richard Purdie [Tue, 10 Mar 2026 23:33:10 +0000 (23:33 +0000)] 
qemurunner: Drop nographic option now runqemu falls back to VNC

Since runqemu now falls back to vnc or a none display if DISPLAY isn't set,
we no longer need to pass nographic to the qemu commandline and can allow
runqemu just to handle it.

One challenge with nographic is that it changes more that just the display
setting, it can affect the serial and parallel port mappings so this also
makes settings slightly more consistent accross environments.

Ultimately, this allows us to stop requiring X desktops whilst still having
a way to connect to the display over VNC for debugging.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoscripts/runqemu: Allow VNC use as a fallback when there is no DISPLAY set
Richard Purdie [Tue, 10 Mar 2026 23:33:09 +0000 (23:33 +0000)] 
scripts/runqemu: Allow VNC use as a fallback when there is no DISPLAY set

We would like to be able to fall back on QEMU's internal VNC server when
there is no DISPLAY available. Add code to do this, putting a socket for
VNC alongside the network interface tap lock files.

This won't work if tap networking isn't enabled but in most of our use
cases it will be and it avoids having to invent a new location for the
sockets. If there are needs outside this, that can be addressed in future.

Also move the other "publicvnc" code to be alongside the rest of the graphics
parameters for ease of reading the code. The publicvnc option doesn't
work for this use case as it can't handle multiple concurrent qemu istances.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolicense_image.bbclass: report all packages with incompatible license
Martin Jansa [Thu, 5 Mar 2026 22:30:31 +0000 (23:30 +0100)] 
license_image.bbclass: report all packages with incompatible license

When multiple packages cannot be installed it shows only first one it
finds, because of bb.fatal use. It might require many iterations to find
all packages to avoid.

e.g. with ptest enabled and GPL-3.0-or-later, GPL-3.0-only set as
incompatible licenses you might get list like this for relatively small
image:

ERROR: image-1.0-r0 do_rootfs: Some packages cannot be installed into the image because they have incompatible licenses:
        bzip2-ptest (GPL-3.0-or-later)
        coreutils (GPL-3.0-or-later)
        coreutils-stdbuf (GPL-3.0-or-later)
        diffutils (GPL-3.0-or-later)
        findutils (GPL-3.0-or-later)
        gawk (GPL-3.0-or-later)
        gnutls-openssl (GPL-3.0-or-later)
        gnutls-ptest (GPL-3.0-or-later)
        grep (GPL-3.0-only)
        make (GPL-3.0-only)
        mpfr (LGPL-3.0-or-later)
        python3-dbusmock (GPL-3.0-only)
        readline (GPL-3.0-or-later)
        sed (GPL-3.0-or-later)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agosubversion: fix race in parallel builds
Ross Burton [Thu, 5 Mar 2026 11:51:30 +0000 (11:51 +0000)] 
subversion: fix race in parallel builds

In parallel build its possible for objects to be written into directories
that do not exist yet, as mkdir-init and local-all are executed at the
same time.

This fix is ugly, but a proper fix would be quite invasive. Upstream have
been informed of the problem.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agognutls: make C99 detection more resiliant
Ross Burton [Thu, 5 Mar 2026 11:51:29 +0000 (11:51 +0000)] 
gnutls: make C99 detection more resiliant

gnutls checks that the compiler supports C99 code by checking that the
standard being used is C99 or C11. This will fail with autoconf 2.73,
which will tell the compiler to use C23 by default.

Change the logic so that the build works with C23 by flipping the logic:
we know that C89 is less than C99, but we don't know the names of future
standards.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agovim: upgrade 9.2.0 -> 9.2.0110
Peter Marko [Thu, 5 Mar 2026 21:05:45 +0000 (22:05 +0100)] 
vim: upgrade 9.2.0 -> 9.2.0110

Solves CVE-2026-28417, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420,
       CVE-2026-28421 and CVE-2026-28422.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoinetutils: patch CVE-2026-28372
Peter Marko [Thu, 5 Mar 2026 18:50:39 +0000 (19:50 +0100)] 
inetutils: patch CVE-2026-28372

Pick patch according to [1] (equivalent to patch from [2]).

[1] https://security-tracker.debian.org/tracker/CVE-2026-28372
[2] https://nvd.nist.gov/vuln/detail/CVE-2026-28372

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoREADME: add global note about C locale sorting
Yoann Congal [Thu, 5 Mar 2026 18:50:19 +0000 (19:50 +0100)] 
README: add global note about C locale sorting

Other locale might have different order for the "-" character and lead
to unstable sorting.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agomaintainers.inc: add note about C locale sorting
Yoann Congal [Thu, 5 Mar 2026 18:50:18 +0000 (19:50 +0100)] 
maintainers.inc: add note about C locale sorting

Other locale might have different order for the "-" character and lead
to unstable sorting.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agodtc: backport fix for build with glibc-2.43
Martin Jansa [Thu, 5 Mar 2026 18:03:30 +0000 (19:03 +0100)] 
dtc: backport fix for build with glibc-2.43

glibc-2.43 isn't used in OE builds yet, but this fixes dtc-native:
https://errors.yoctoproject.org/Errors/Details/903983/

../sources/dtc-1.7.2/libfdt/fdt_overlay.c: In function â€˜overlay_fixup_phandle’:
../sources/dtc-1.7.2/libfdt/fdt_overlay.c:424:21: error: assignment discards â€˜const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
  424 |                 sep = memchr(fixup_str, ':', fixup_len);
      |                     ^
../sources/dtc-1.7.2/libfdt/fdt_overlay.c:434:21: error: assignment discards â€˜const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
  434 |                 sep = memchr(name, ':', fixup_len);
      |                     ^
cc1: all warnings being treated as errors

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agogcc: Fix gcc-libitm false positives in regression report
Harish Sadineni [Thu, 5 Mar 2026 13:16:22 +0000 (05:16 -0800)] 
gcc: Fix gcc-libitm false positives in regression report

Some of the gcc-libitm test cases include build paths (e.g. [1]) in their results.
When comparing two build outputs, these embedded paths cause resulttool to incorrectly report regressions.

[1] ptestresult.gcc-libitm-user.libitm.c++/dropref.C -B /srv/pokybuild/yocto-worker/qemuarm64-tc/build/build-st-64312/
    ..../libitm/../libstdc++-v3/src/.libs (test for excess errors): PASS

This leads to a false regression such as:
PASS â†’ No matching test result

Upstream-Status: Backport [https://gcc.gnu.org/cgit/gcc/patch/?id=b129ff0880c6d10e0379b46889d01255ee8d1f82,
                           https://gcc.gnu.org/cgit/gcc/patch/?id=66ce317036f2eb5aeb96d5e4b9e468799d7566b]

Signed-off-by: Harish Sadineni <Harish.Sadineni@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agopython3-imagesize: upgrade 1.4.1 -> 2.0.0
Jiaying Song [Thu, 5 Mar 2026 07:39:21 +0000 (15:39 +0800)] 
python3-imagesize: upgrade 1.4.1 -> 2.0.0

Changes:
https://github.com/shibukawa/imagesize_py/compare/1.4.1...2.0.0
https://github.com/shibukawa/imagesize_py/blob/master/README.rst

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoalsa-ucm-conf: Backport the channel fix for lemans and monaco boards
Mohammad Rafi Shaik [Fri, 6 Mar 2026 06:27:04 +0000 (11:57 +0530)] 
alsa-ucm-conf: Backport the channel fix for lemans and monaco boards

Remove Fixed channel setting for Qualcomm lemans and monaco boards to support
stereo capture.

Signed-off-by: Mohammad Rafi Shaik <mohammad.rafi.shaik@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoalsa-ucm-conf: Remove JackControl from TALOS EVK HiFi config
Le Qi [Thu, 5 Mar 2026 03:15:18 +0000 (11:15 +0800)] 
alsa-ucm-conf: Remove JackControl from TALOS EVK HiFi config

The EVK board does not support headset or jack detection.
Keeping JackControl entries prevents PipeWire (wpctl) from
exposing sinks and sources correctly.

Remove JackControl from Headphones and Headset devices so
PipeWire can enumerate playback and capture nodes normally.

link: https://github.com/alsa-project/alsa-ucm-conf/pull/704
Signed-off-by: Le Qi <le.qi@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agosystemd: package lib/nvpcr as part of systemd
Ricardo Salveti [Thu, 5 Mar 2026 22:00:42 +0000 (19:00 -0300)] 
systemd: package lib/nvpcr as part of systemd

systemd 259 includes NvPCRs JSON snippets when tpm2 support is enabled
via packageconfig, so make sure they are also included as part of the
main systemd package.

This fixes the following issue when tpm2 is enabled in systemd:

ERROR: systemd-1_259.1-r0 do_package: QA Issue: systemd: Files/directories
were installed but not shipped in any package:
  /usr/lib/nvpcr
  /usr/lib/nvpcr/cryptsetup.nvpcr
  /usr/lib/nvpcr/hardware.nvpcr

Signed-off-by: Ricardo Salveti <ricardo.salveti@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agosystemd: upgrade 259.1 -> 259.3
Peter Marko [Wed, 4 Mar 2026 23:11:39 +0000 (00:11 +0100)] 
systemd: upgrade 259.1 -> 259.3

Update to latest revision of v259.
Drop patches included in this release.

Changes: https://github.com/systemd/systemd/compare/v259.1...v259.3

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agosystemd: properly package new container files
Peter Marko [Wed, 4 Mar 2026 23:11:38 +0000 (00:11 +0100)] 
systemd: properly package new container files

v259 added more container files which need to ba correctly packaged.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agogo: upgrade 1.26.0 -> 1.26.1
Peter Marko [Fri, 6 Mar 2026 22:34:02 +0000 (23:34 +0100)] 
go: upgrade 1.26.0 -> 1.26.1

Upgrade to latest 1.26.x release [1]:

$ git --no-pager log --oneline go1.26.0..go1.26.1
e87b10ea2a (tag: go1.26.1) [release-branch.go1.26] go1.26.1
e792d6aa95 [release-branch.go1.26] crypto/x509: fix name constraint checking panic
a761c9ff70 [release-branch.go1.26] crypto/x509: fix full email constraint matching
994692847a [release-branch.go1.26] html/template: properly escape URLs in meta content attributes
65c7d7a9fb [release-branch.go1.26] net/url: reject IPv6 literal not at start of host
e28ac674af [release-branch.go1.26] cmd/go: revert update default go directive in mod or work init
4d1051fdc9 [release-branch.go1.26] cmd: re-vendor x/tools for Go 1.26.1
8cce3ab20c [release-branch.go1.26] os: avoid escape from Root via ReadDir or Readdir
ef041913a8 [release-branch.go1.26] cmd/compile: ensure StructMake/ArrayMake1 of direct interfaces are unwrapped
155c25e249 [release-branch.go1.26] cmd/compile: pointer-shaped types are SSAable even if lots of 0-sized fields
c5723195a6 [release-branch.go1.26] net/smtp: prevent test failures due to expired test certificate
f67a1f4c76 [release-branch.go1.26] cmd/go: fix pkg-config flag sanitization
4659d630da [release-branch.go1.26] cmd/compile: avoid folding 64-bit integers into 32-bit constants
6fb3df88d4 [release-branch.go1.26] go/analysis/passes/modernize: add vendored code
85050c90ee [release-branch.go1.26] cmd/compile: fix mis-compilation for static array initialization
12c0690eeb [release-branch.go1.26] cmd/compile: don't drop same register twice
e8df1a6697 [release-branch.go1.26] reflect: use &zeroVal[0] instead of nil for data field for zero-sized payloads
167ef716ba [release-branch.go1.26] cmd/compile: rewriteFixedLoad: ensure AuxInt is sign-extended
495e6c6b09 [release-branch.go1.26] internal/syscall/windows: correct some enums and syscall signatures
29618c4439 [release-branch.go1.26] cmd/link: don't pass -Wl,-S on illumos
c283d1f762 [release-branch.go1.26] os: support deleting inaccessible files in RemoveAll

Fixes CVE-2026-27137, CVE-2026-27138, CVE-2026-27142, CVE-2026-25679 and
      CVE-2026-27139.

Release information: [2]

[1] https://github.com/golang/go/compare/go1.26.0...go1.26.1
[2] https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agokernel_module.py: add missing license header
Adrian Freihofer [Fri, 6 Mar 2026 21:08:35 +0000 (22:08 +0100)] 
kernel_module.py: add missing license header

This is a fixup for commit 570dd06a703c9346672055d52a2461f2715a515b
module.bbclass: move environment setup to kernel_module.py

Copy also the MIT SPDX license header from the file where this lines
were copied from.

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agorust: Drop revert-link-std-statically-in-rustc_driver-feature.patch
Deepesh Varatharajan [Fri, 6 Mar 2026 11:35:25 +0000 (03:35 -0800)] 
rust: Drop revert-link-std-statically-in-rustc_driver-feature.patch

Starting from Rust 1.82, std is statically linked with rustc_driver.so.
This change affected the runtime dependencies of the rustc_main test
binary, causing tests to fail in QEMU because librustc_driver*.so is
not shipped and cannot be found.

After discussing with upstream, the patch is removed, and the test is
skipped using #[cfg(not(test))]. The rustc_main function does not include
any test code,so this safely restores the feature without impacting tests.

Upstream Discussion:
https://github.com/rust-lang/rust/pull/153409

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agocargo-c: Move recipe out of rust directory
Deepesh Varatharajan [Fri, 6 Mar 2026 08:24:28 +0000 (00:24 -0800)] 
cargo-c: Move recipe out of rust directory

cargo-c is an external Cargo extension used to build Rust libraries
with a C-compatible ABI and generate C headers and pkg-config files.
Since it is not part of the standard Rust toolchain, move it from the
rust directory to cargo-c under recipes-devtools for better organization
and maintainability.

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agorust: Upgrade 1.93.0 -> 1.94.0
Deepesh Varatharajan [Fri, 6 Mar 2026 06:35:02 +0000 (22:35 -0800)] 
rust: Upgrade 1.93.0 -> 1.94.0

https://blog.rust-lang.org/2026/03/05/Rust-1.94.0/

Rust Changes:
https://github.com/rust-lang/rust/releases/tag/1.94.0

Cargo Changes:
https://doc.rust-lang.org/nightly/cargo/CHANGELOG.html#cargo-194-2026-03-05

Rebased patch:
rust-oe-selftest.patch

Backported patch:
0001-Update-call-llvm-intrinsics-test.patch
To fix riscv64 oe-selftest failure with 1.94.0

Test results:

rust v1.94.0
+-------------+---------+---------+
| Machine     | Passed  | Skipped |
+-------------+---------+---------+
| qemux86-64  |  21910  |   659   |
| qemux86     |  21657  |   912   |
| qemuarm64   |  21722  |   847   |
| qemuarm     |  21638  |   931   |
| qemuriscv64 |  21684  |   885   |
+-------------+---------+---------+

Test results difference (1.94.0 - 1.93.0):

+-------------+--------+---------+
| Machine     | Passed | Skipped |
+-------------+--------+---------+
| qemux86-64  |  +221  |   +13   |
| qemux86     |  +218  |   +16   |
| qemuarm64   |  +227  |   +7    |
| qemuarm     |  +217  |   +17   |
| qemuriscv64 |  +218  |   +16   |
+-------------+--------+---------+

Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agotexinfo: upgrade texinfo 7.2 -> 7.3
Zhang Peng [Fri, 6 Mar 2026 05:03:13 +0000 (13:03 +0800)] 
texinfo: upgrade texinfo 7.2 -> 7.3

Upgrade to latest revision of 7.3
- Refresh patch 0001-Makefile.am-do-not-build-manpages.patch
- Remove -I ${S}/gnulib/m4 from EXTRA_AUTORECONF since configure.ac
  already defines AC_CONFIG_MACRO_DIRS
- Fix QA issue for load_txi_modules (new file in 7.3)

Release Note:[https://lists.gnu.org/archive/html/bug-texinfo/2026-03/msg00007.html]

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibksba: upgrade 1.6.7 -> 1.6.8
Yi Zhao [Thu, 5 Mar 2026 23:23:27 +0000 (07:23 +0800)] 
libksba: upgrade 1.6.7 -> 1.6.8

ChangeLog:
https://github.com/gpg/libksba/blob/libksba-1.6.8/NEWS

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agofile: upgrade 5.46 -> 5.47
Yi Zhao [Thu, 5 Mar 2026 23:23:26 +0000 (07:23 +0800)] 
file: upgrade 5.46 -> 5.47

ChangeLog:
https://github.com/file/file/blob/FILE5_47/ChangeLog

Remove backport patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoiptables: upgrade 1.8.12 -> 1.8.13
Yi Zhao [Thu, 5 Mar 2026 23:23:25 +0000 (07:23 +0800)] 
iptables: upgrade 1.8.12 -> 1.8.13

ChangeLog:
https://www.netfilter.org/projects/iptables/files/changes-iptables-1.8.13.txt

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibfyaml: init add
Changqing Li [Tue, 24 Feb 2026 01:41:47 +0000 (09:41 +0800)] 
libfyaml: init add

Depended by recipe appstream

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoiproute2: upgrade 6.18.0 -> 6.19.0
Andrej Kozemcak [Thu, 5 Mar 2026 09:33:53 +0000 (10:33 +0100)] 
iproute2: upgrade 6.18.0 -> 6.19.0

Drop fix-musl.patch as it was merged upstream.
Add missing include for types (linux/types.h).

Changes:
  - new dpll command for managing Digital Phase-Locked Loop devices via netlink.
  - expanded CAN XL support
  - MPTCP improvements
  - devlink:
    - added support for 64‑bit parameters
    - added new SWITCHDEV_INACTIVE eswitch mode
    - added burst period configuration for health reporters
  - genl:
    - supports JSON output
  - ifstat, nstat, lnstat:
    - converted to use the high-level json_print API for unified JSON output

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agotcl8: prefer tcl's own tzdata
Ross Burton [Fri, 6 Mar 2026 15:21:10 +0000 (15:21 +0000)] 
tcl8: prefer tcl's own tzdata

The little thread that was "one of the tcl test cases fails with system
tzdata" has unravelled upstream into a series of problems with the tz
code when the system tzdata is used:

https://core.tcl-lang.org/tcl/tktview/51aa53616067cb63900b17ca1d71f07b094ffa1a

Add a PACKAGECONFIG for the option, and default to using the tcl tzdata
until the issues are resolved upstream.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agotcl: prefer tcl's own tzdata
Ross Burton [Fri, 6 Mar 2026 15:21:09 +0000 (15:21 +0000)] 
tcl: prefer tcl's own tzdata

The little thread that was "one of the tcl test cases fails with system
tzdata" has unravelled upstream into a series of problems with the tz
code when the system tzdata is used:

https://core.tcl-lang.org/tcl/tktview/51aa53616067cb63900b17ca1d71f07b094ffa1a

Add a PACKAGECONFIG for the option, and default to using the tcl tzdata
until the issues are resolved upstream.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agotcl8: rewrite ptest (again)
Ross Burton [Thu, 5 Mar 2026 15:06:15 +0000 (15:06 +0000)] 
tcl8: rewrite ptest (again)

Backport the previous commit's changes for tcl9 to the tc8 recipe:

I discovered that running a single test case with tcltest doesn't let
you know if the test failed or not, so when run-ptest moved away from
using all.tcl[1] we were always marking the tests as passing.

So, revert that commit and use all.tcl as a test runner. This is more
noisy, but importantly will let us know if a test failed.

Remove our un-upstreamable tweaks to the interp tests and instead skip
the test that is known to be fragile, so we don't have to carry a patch
forever.

Don't install another copy of the entire Tcl library for the tests, as
there is no real point.  This does then expose a bug in the tests where
clock-59.2 assumes that it is running in a source tree and behaves
differently if the system tzdata is being used.  This is being worked on
upstream[2], for now skip this test.

Clean up musl overriding so it's more resiliant.

Exit 1 if a test fails.

[1] oe-core 9c41887f2a ("tcl: improve test execution loop")
[2] https://core.tcl-lang.org/tcl/tktview/51aa53616067cb63900b17ca1d71f07b094ffa1a

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agotcl: rewrite ptest (again)
Ross Burton [Thu, 5 Mar 2026 15:06:14 +0000 (15:06 +0000)] 
tcl: rewrite ptest (again)

I discovered that running a single test case with tcltest doesn't let
you know if the test failed or not, so when run-ptest moved away from
using all.tcl[1] we were always marking the tests as passing.

So, revert that commit and use all.tcl as a test runner. This is more
noisy, but importantly will let us know if a test failed.

Remove our un-upstreamable tweaks to the interp tests and instead skip
the test that is known to be fragile, so we don't have to carry a patch
forever.

Don't install another copy of the entire Tcl library for the tests, as
there is no real point.  This does then expose a bug in the tests where
clock-59.2 assumes that it is running in a source tree and behaves
differently if the system tzdata is being used.  This is being worked on
upstream[2], for now skip this test.

Clean up musl overriding so it's more resiliant.

Exit 1 if a test fails.

[1] oe-core 9c41887f2a ("tcl: improve test execution loop")
[2] https://core.tcl-lang.org/tcl/tktview/51aa53616067cb63900b17ca1d71f07b094ffa1a

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoblueprint-compiler: upgrade 0.19.0 -> 0.20.0
Liu Yiding [Wed, 4 Mar 2026 05:14:59 +0000 (13:14 +0800)] 
blueprint-compiler: upgrade 0.19.0 -> 0.20.0

Changelog:
  https://gitlab.gnome.org/GNOME/blueprint-compiler/-/releases/v0.20.0

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agopython3-setuptools: upgrade 80.9.0 -> 82.0.0
Hongxu Jia [Wed, 4 Mar 2026 04:54:10 +0000 (12:54 +0800)] 
python3-setuptools: upgrade 80.9.0 -> 82.0.0

Remove python3-pkg-resources

History v82.0.0 [1]:

Deprecations and Removals
- pkg_resources has been removed from Setuptools. Most common uses of pkg_resources have
  been superseded by the importlib.resources and importlib.metadata projects. Projects
  and environments relying on pkg_resources for namespace packages or other behavior
  should depend on older versions of setuptools. (#3085)

[1] https://setuptools.pypa.io/en/stable/history.html#v82-0-0

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agopython3-semantic-version: remove python3-pkg-resources from runtime depends
Hongxu Jia [Wed, 4 Mar 2026 04:54:13 +0000 (12:54 +0800)] 
python3-semantic-version: remove python3-pkg-resources from runtime depends

Due to setuptools removes and deprecates pkg_resources in 82.0.0 [1],
python-semanticversion import `pkg_resources` conditionally for Python 3.8- [2],
because we have python 3.14+, then python3-pkg-resources is not necessary
for us, remove it from runtime depends

[1] https://setuptools.pypa.io/en/stable/history.html#v82-0-0
[2] https://github.com/rbarrois/python-semanticversion/commit/306fbe1b2222d218c62c2ddb32d91eeea8957951

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agopython3-scons: remove python3-pkg-resources from runtime depends
Hongxu Jia [Wed, 4 Mar 2026 04:54:12 +0000 (12:54 +0800)] 
python3-scons: remove python3-pkg-resources from runtime depends

Due to setuptools removes and deprecates pkg_resources in 82.0.0 [1],
SCons nowhere in its code does import `setuptools` or `pkg_resources` [2],
remove python3-pkg-resources from runtime depends

[1] https://setuptools.pypa.io/en/stable/history.html#v82-0-0
[2] https://github.com/SCons/scons/commit/e27b28c6b3ca8c9155bff38891189eb73deab611

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agomeson: remove python3-pkg-resources from runtime depends
Hongxu Jia [Wed, 4 Mar 2026 04:54:11 +0000 (12:54 +0800)] 
meson: remove python3-pkg-resources from runtime depends

Due to setuptools removes and deprecates pkg_resources in 82.0.0 [1]
meson removes setuptools and uses mesondata instead [2], remove
python3-pkg-resources from runtime depends

[1] https://setuptools.pypa.io/en/stable/history.html#v82-0-0
[2] https://github.com/mesonbuild/meson/commit/05ddd6543d4c4fc33b4c64f26291e73f49733f71

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoncurses: upgrade 6.5 -> 6.6
Hongxu Jia [Wed, 4 Mar 2026 10:28:11 +0000 (18:28 +0800)] 
ncurses: upgrade 6.5 -> 6.6

1. License-Update: copyright years updated

2. Fix installed-vs-shipped QA error
...
ERROR: ncurses-6.6-r0 do_package: QA Issue: ncurses: Files/directories were installed but not shipped in any package:
  /usr/lib
ncurses: 1 installed and not shipped files. [installed-vs-shipped]
...

Due to commit [1], upstream hardcoded `lib` to create symlink
...
 ** sym-linked tmp/work/x86-64-v3-oe-linux/ncurses/6.6/image/usr/lib/terminfo for compatibility
...

Apply a local patch to not create symlink terminfo under image/usr/lib,
and clean up symlink remove operation in recipe

3. Delete backport patch
- CVE-2025-6141.patch

4. Announcing ncurses 6.6:
  https://lists.gnu.org/archive/html/info-gnu/2025-12/msg00010.html

[1] https://github.com/ThomasDickey/ncurses-snapshots/commit/a60b584d93ab59e1df0bc9661b7

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoautotools: remove deletion of aclocal.m4
Ross Burton [Wed, 4 Mar 2026 16:48:34 +0000 (16:48 +0000)] 
autotools: remove deletion of aclocal.m4

We've historically[1] deleted any aclocal.m4 file in the source tree
before autoreconfing on the grounds that it is "too shy" to overwrite
aclocal.m4, so we forcibly delete the aclocal.m4 unless aclocal has been
excluded in autoreconf.

However, this shyness has been removed in autoconf 2.70[2] and autoreconf
will always call aclocal, which will rewrite the file if needed.

So, remove the explicit deletion of aclocal.m4.  I've verified that a
build of all recipes in core that use autotools have identical
aclocal.m4 files before and after this change.

[1] This code appears in oe-classic during 2011 but originated in a
    BitKeeper commit, so predates our use of git.

[2] autoconf bc7e12e7 ("autoreconf: drop support for old (< 1.8) aclocal versions")

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoreadline: improve aclocal.m4 handling
Ross Burton [Wed, 4 Mar 2026 16:48:33 +0000 (16:48 +0000)] 
readline: improve aclocal.m4 handling

I don't know why I decided to copy aclocal.m4 to acinclude.m4 to avoid
autotools.bbclass deleting the upstream hand-maintained aclocal.m4, but
I did.

A neater fix is to exclude aclocal, which has the side-effect of not
deleting aclocal.m4 in do_configure.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agorxvt-unicode: improve aclocal.m4 handling
Ross Burton [Wed, 4 Mar 2026 16:48:32 +0000 (16:48 +0000)] 
rxvt-unicode: improve aclocal.m4 handling

I don't know why we copy aclocal.m4 to acinclude.m4 to avoid
autotools.bbclass deleting the upstream hand-maintained aclocal.m4, but
we do.

A neater fix is to exclude aclocal, which has the side-effect of not
deleting aclocal.m4 in do_configure.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolzop: remove custom aclocal.m4 handling
Ross Burton [Wed, 4 Mar 2026 16:48:31 +0000 (16:48 +0000)] 
lzop: remove custom aclocal.m4 handling

The aclocal.m4 wrangling is historical, the custom macros are now part
of lzop-1.04/autoconf/local.m4 and the aclocal.m4 in the tarball is in
fact generated with aclocal.

Thus we no longer need to ship an acinclude.m4 or exclude aclocal from
running.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agogperf: remove autoreconf tweaks
Ross Burton [Wed, 4 Mar 2026 16:48:30 +0000 (16:48 +0000)] 
gperf: remove autoreconf tweaks

Since gperf 3.3[1] gperf uses aclocal, so we don't need to do anything
special anymore to autoreconf.

[1] gperf e60835d ("build: Use Automake in lib/.")

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agovulkan-samples: upgrade to latest revision
Wang Mingyu [Wed, 4 Mar 2026 11:02:47 +0000 (19:02 +0800)] 
vulkan-samples: upgrade to latest revision

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agopython3: skip test_only_active_thread test
Trevor Gamblin [Tue, 3 Mar 2026 15:40:45 +0000 (10:40 -0500)] 
python3: skip test_only_active_thread test

Skip a test we've seen failing intermittently, since it may be another
occurring due to variable load on the Autobuilder.

Fixes: [YOCTO #16178]
Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoshadow: upgrade 4.18.0 -> 4.19.4
Andrej Kozemcak [Tue, 3 Mar 2026 13:36:45 +0000 (14:36 +0100)] 
shadow: upgrade 4.18.0 -> 4.19.4

Changelog:  https://github.com/shadow-maint/shadow/blob/4.19.4/ChangeLog

  - useradd.8: fix default group ID (Tim Biermann)
  - revert drop of subid_init() (Serge Hallyn)
  - Georgian translation (NorwayFun)
  - useradd: Avoid taking unneeded space: do not reset non-existent data
    in lastlog (David Kalnischkies)
  - relax username restrictions (Alexander Kanavin)
  - selinux: check MLS enabled before setting serange (genBTC)
  - copy_tree: use fchmodat instead of chmod (Samanta Navarro)
  - copy_tree: don't block on FIFOs (Samanta Navarro)
  - add shell linter (Jan Macku)
  - copy_tree: carefully treat permissions (Samanta Navarro)
  - lib/commonio: make lock failures more detailed (Luca BRUNO)
  - lib: use strzero and memzero where applicable (Christian Göttsche)
  - Update Dutch translation (Frans Spiesschaert)
  - Don't test for NULL before calling free (Alex Colomar)
  - Use libc MAX() and MIN() (Alejandro Colomar)
  - chage: Fix regression in print_date (Xiami)
  - usermod: report error if homedir does not exist (Iker Pedrosa)
  - libmisc: minimum id check for system accounts (Iker Pedrosa)
  - fix usermod -rG x y wrongly adding a group (xyz)
  - man: add missing space in useradd.8.xml (Iker Pedrosa)
  - lastlog: check for localtime() return value (Iker Pedrosa)
  - Raise limit for passwd and shadow entry length (Iker Pedrosa)
  - Remove adduser-old.c (Alejandro Colomar)
  - useradd: Fix buffer overflow when using a prefix (David Michael)
  - Don't warn when failed to open /etc/nsswitch.conf (Serge Hallyn

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibunistring: upgrade 1.4.1 -> 1.4.2
Andrej Kozemcak [Tue, 3 Mar 2026 13:36:44 +0000 (14:36 +0100)] 
libunistring: upgrade 1.4.1 -> 1.4.2

  - prepare for 1.4.2 release.
    - version.sh: Bump version number, date, gnulib version.
    - README: Update version.
    - NEWS: Update.
  - sync with gnulib.
    - lib/unistring/cdefs.h: Update from gnulib/m4/gnulib-common.m4.
      (_GL_UNNAMED): New macro.
      (_UC_UNNAMED): Apply
    - new C macro _GL_UNNAMED
  - Make the generated <unistring/stdint.h> more usable in C++ mode.
  - lib/Makefile.am (unistring/stdint.h): In C++ 11 or newer mode, just use
    <cstdint>.

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoiptables: upgrade 1.8.11 -> 1.8.12
Andrej Kozemcak [Tue, 3 Mar 2026 13:36:43 +0000 (14:36 +0100)] 
iptables: upgrade 1.8.11 -> 1.8.12

Changes:
  - fix null dereference parsing bitwise operations.
  - refuse to run under file capabilities, ie. getauxval(AT_SECURE).
  - fix for all-zero mask on Big Endian in arptables-nft.
  - support adding and replacing a rule in the same batch in iptables-nft.

  - filter
-A FORWARD -m comment --comment "new rule being replaced"
-R FORWARD 1 -m comment --comment "new replacing rule"
COMMIT

  - print -X in xtables-monitor command for base chains.
  - remove incorrect libebt_redirect translations.
  - translate bare '-m sctp' match to '-p sctp' just like TCP and UDP.
  - support for info-request and info-reply icmp types.
  - fix interface comparisons in `-C` commands in iptables-nft.
  - several fixes for ip[6]tables-translate, the tool to ease migration
    to nftables.
  - document flush behaviour with --noflush for user-defined chains.

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agofreetype: upgrade 2.14.1 -> 2.14.2
Andrej Kozemcak [Tue, 3 Mar 2026 13:36:41 +0000 (14:36 +0100)] 
freetype: upgrade 2.14.1 -> 2.14.2

Changelog: https://gitlab.freedesktop.org/freetype/freetype/-/blob/f4205da14867c5387cd6a329b90ee10a6df6eeff/docs/CHANGES

Changes:
  - Several  changes  related  to  LCD  filtering  are implemented  to
    achieve better performance and encourage sound practices.

Bug fixes:
  - A bunch of potential security problems have been found.  All users
    should update.
  - The italic angle in `PS_FontInfo`  is now stored  as a fixed-point
    value  in degrees  for  all  Type 1 fonts  and  their derivatives,
    consistent  with  CFF  fonts  and  common  practices.  The  broken
    underline position and thickness values are fixed for CFF fonts.

Miscellaneous:
  - The `x` field in the `FT_Span` structure is now unsigned.
  - Demo  program  `ftgrid` got  an  option  `-m`  to select  a  start
    character to display.
  - Similarly, demo program  `ftmulti` got an option `-m`  to select a
    text string for rendering.
  - Option  `-d` in  the demo  program `ttdebug`  is now  called `-a`,
    expecting  a  comma-separated  list  of  axis  values.   The  user
    interface is also slightly improved.
  - The `ftinspect` demo program can now be compiled with Qt6, too.

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoca-certificates: upgrade 20250419 -> 20260223
Andrej Kozemcak [Tue, 3 Mar 2026 13:36:40 +0000 (14:36 +0100)] 
ca-certificates: upgrade 20250419 -> 20260223

Changelog:
 * Update Mozilla certificate authority bundle to version 2.82
    The following certificate authorities were added (+):
    + TrustAsia TLS ECC Root CA
    + TrustAsia TLS RSA Root CA
    + SwissSign RSA TLS Root CA 2022 - 1
    + OISTE Server Root ECC G1
    +  OISTE Server Root RSA G1
    The following certificate authorities were removed (-):
    - GlobalSign Root CA
    - Entrust.net Premium 2048 Secure Server CA
    - Baltimore CyberTrust Root (closes: #1121936)
    - Comodo AAA Services root
    - XRamp Global CA Root
    - Go Daddy Class 2 CA
    - Starfield Class 2 CA
    - CommScope Public Trust ECC Root-01
    - CommScope Public Trust ECC Root-02
    - CommScope Public Trust RSA Root-01
    - CommScope Public Trust RSA Root-02
  * Use dh_usrlocal to create /usr/local/share/ca-certificates

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoxorgproto: upgrade 2024.1 -> 2025.1
Wang Mingyu [Tue, 3 Mar 2026 10:09:28 +0000 (18:09 +0800)] 
xorgproto: upgrade 2024.1 -> 2025.1

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agottyrun: upgrade 2.40.0 -> 2.41.0
Wang Mingyu [Tue, 3 Mar 2026 10:09:26 +0000 (18:09 +0800)] 
ttyrun: upgrade 2.40.0 -> 2.41.0

Changes of existing tools:
------------------------------
- chreipl: Make --bootparms work for ECKD re-IPL
- cpacfstats: Add 'unauthorized' state to CPU-MF counters
- cpictl: Detect RHCOS using VARIANT_ID
- hsci: Automatically set appropriate MTU for HSCI
- libutil: Add util_readlink() and util_readlinkat() helpers
- libutil: Add util_startswith() to util_str
- libutil: Add utility parsing functions
- lschp: Add support for structured output (--format)
- lsreipl: Suppress 'clear' output if not supported
- pvimg: Add '--format text' support to 'pvimg info'
- pvimg: Add '--print-schema ' option to 'pvimg info'
- pvimg: Add '--show-secrets' flag to 'pvimg info'
- pvimg: Provide improved JSON output to 'pvimg info --format json'
- pvinfo: Improve User experience on non-SE enabled systems
- zipl/ngdump: Ensure ext4 file system is used on dump partition
- zkey: Add support for integrity protected disks using HMAC keys

Bug Fixes:
-------------
- cpumf/pai: Handle different size of perf_event_attr
- lscss: Fix memory leak
- zipl: Fix dump job on tape devices

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agotaglib: upgrade 2.1.1 -> 2.2
Wang Mingyu [Tue, 3 Mar 2026 10:09:25 +0000 (18:09 +0800)] 
taglib: upgrade 2.1.1 -> 2.2

Changelog:
=========
 * Support for Matroska (MKA, MKV) and WebM files.
 * Support for NI STEM in MP4 files.
 * New method isDsd() in WavPack Properties.
 * Stricter verification of ID3v2 frames.
 * Fix setting the last header flag in Ogg FLAC files.
 * Fix reading of the last page in Ogg streams.
 * Avoid corrupting invalid Ogg FLAC files without Vorbis comment.
 * Windows: Support MP4 files with 64-bit atoms.
 * Fix use of property keys with non-ASCII characters in C bindings.
 * Fix building with Android NDK 29.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agospirv-llvm-translator: upgrade 21.1.3 -> 21.1.5
Wang Mingyu [Tue, 3 Mar 2026 10:09:24 +0000 (18:09 +0800)] 
spirv-llvm-translator: upgrade 21.1.3 -> 21.1.5

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agosbc: upgrade 2.1 -> 2.2
Wang Mingyu [Tue, 3 Mar 2026 10:09:23 +0000 (18:09 +0800)] 
sbc: upgrade 2.1 -> 2.2

Changelog:
 Fix issue when compiling with C23 requirements.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agorpm-sequoia-crypto-policy: upgrade to latest revision
Wang Mingyu [Tue, 3 Mar 2026 10:09:22 +0000 (18:09 +0800)] 
rpm-sequoia-crypto-policy: upgrade to latest revision

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agop11-kit: upgrade 0.26.1 -> 0.26.2
Wang Mingyu [Tue, 3 Mar 2026 10:09:21 +0000 (18:09 +0800)] 
p11-kit: upgrade 0.26.1 -> 0.26.2

Changelog:
 rpc: fix NULL dereference via C_DeriveKey with specific NULL parameters (CVE-2026-2100)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibxmlb: upgrade 0.3.24 -> 0.3.25
Wang Mingyu [Tue, 3 Mar 2026 10:09:20 +0000 (18:09 +0800)] 
libxmlb: upgrade 0.3.24 -> 0.3.25

Bugfixes:
 - Correctly decompress heavily compressed zstd streams

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibx11: upgrade 1.8.12 -> 1.8.13
Wang Mingyu [Tue, 3 Mar 2026 10:09:19 +0000 (18:09 +0800)] 
libx11: upgrade 1.8.12 -> 1.8.13

License-Update: Drop vestiges of OS/2 support

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibuv: upgrade 1.51.0 -> 1.52.0
Wang Mingyu [Tue, 3 Mar 2026 10:09:18 +0000 (18:09 +0800)] 
libuv: upgrade 1.51.0 -> 1.52.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibtraceevent: upgrade 1.8.6 -> 1.9.0
Wang Mingyu [Tue, 3 Mar 2026 10:09:17 +0000 (18:09 +0800)] 
libtraceevent: upgrade 1.8.6 -> 1.9.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibsoup: upgrade 3.6.5 -> 3.6.6
Wang Mingyu [Tue, 3 Mar 2026 10:09:16 +0000 (18:09 +0800)] 
libsoup: upgrade 3.6.5 -> 3.6.6

Changelog:
============
* websocket: Fix out-of-bounds read in process_frame
* Check nulls returned by soup_date_time_new_from_http_string()
* Numerous fixes to handling of Range headers
* server: close the connection after responsing a request containing Content-Length and Transfer-Encoding
* Use CRLF as line boundary when parsing chunked enconding data
* websocket: do not accept messages frames after closing due to an error
* Sanitize filename of content disposition header values
* Always validate the headers value when coming from untrusted source
* uri-utils: do host validation when checking if a GUri is valid
* multipart: check length of bytes read soup_filter_input_stream_read_until()
* message-headers: Reject duplicate Host headers
* server: null-check soup_date_time_to_string()
* auth-digest: fix crash in soup_auth_digest_get_protection_space()
* session: fix 'heap-use-after-free' caused by 'finishing' queue item twice
* cookies: Avoid expires attribute if date is invalid
* http1: Set EOF flag once content-length bytes have been read
* date-utils: Add value checks for date/time parsing
* multipart: Fix multiple boundry limits
* Fixed multiple possible memory leaks
* message-headers: Correct merge of ranges
* body-input-stream: Correct chunked trailers end detection
* server-http2: Correctly validate URIs
* multipart: Fix read out of buffer bounds under soup_multipart_new_from_message()
* headers: Ensure Request-Line comprises entire first line
* tests: Fix MSVC build error
* Fix possible deadlock on init from gmodule usage
* Add Cornish translation
* Update Turkish translation
* Update Uighur translation
* Update Romanian translation
* Add Uzbek (Latin) translation
* Add Kazakh translation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibgpg-error: upgrade 1.58 -> 1.59
Wang Mingyu [Tue, 3 Mar 2026 10:09:15 +0000 (18:09 +0800)] 
libgpg-error: upgrade 1.58 -> 1.59

License-Update: Copyright year updated to 2026.

Changelog:
=============
* Take care of POSIX semaphore "shared" semantics.  This fixes a
  problem on NetBSD.
* Fix preparing the environment block on Windows.
* Fix for GPGRT_PROCESS_*_KEEP flags on Windows.
* Update Russian and Swedish translations.
* Introduce autogen.rc variable autogen_use_force.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibfontenc: upgrade 1.1.8 -> 1.1.9
Wang Mingyu [Tue, 3 Mar 2026 10:09:14 +0000 (18:09 +0800)] 
libfontenc: upgrade 1.1.8 -> 1.1.9

Changelog:
===========
- gitlab CI: drop the ci-fairy check-mr job
- meson: Add option to build with meson
- configure: Use pkg-config to handle zlib dependency if possible

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agolibcap-ng/libcap-ng-python: Upgrade 0.9 -> 0.9.1
Wang Mingyu [Tue, 3 Mar 2026 10:09:13 +0000 (18:09 +0800)] 
libcap-ng/libcap-ng-python: Upgrade 0.9 -> 0.9.1

Changelog:
==============
- Deprecate captest
- In cap-audit, if tested app uses file system based capabilities, drop setpcap
- In cap-audit, fully resolve paths before classifying
- In cap-audit, add JSON escaping to output
- In cap-audit, filter pre-exec, startup, and shutdown capability noise
- pscap now has a --tree disply mode
- More code cleanups
- Improve output alignment of various utilities

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoless: upgrade 691 -> 692
Wang Mingyu [Tue, 3 Mar 2026 10:09:12 +0000 (18:09 +0800)] 
less: upgrade 691 -> 692

Changelog:
==========
- Revert HOME key to scroll to beginning of file and END key to scroll to end of file
- Configure tty to leave CR and NL unmodified
- Add commands to lesskey parser (forw-bell-hilite, goto-pos and osc8-jump).
- Add key sequences to lesskey parser (\kE, \kF, \kH, \kI, \kM, and \kS).
- Fix bug using negative value with -z option
- Fix bug handling empty terminfo capabilties
- Fix memory leak in setupterm
- Make lesstest ignore system locale (nl_langinfo)

License-Update: Copyright year updated to 2026.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agohwdata: upgrade 0.403 -> 0.404
Wang Mingyu [Tue, 3 Mar 2026 10:09:11 +0000 (18:09 +0800)] 
hwdata: upgrade 0.403 -> 0.404

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agofastfloat: upgrade 8.2.2 -> 8.2.3
Wang Mingyu [Tue, 3 Mar 2026 10:09:10 +0000 (18:09 +0800)] 
fastfloat: upgrade 8.2.2 -> 8.2.3

Changelog:
=========
- add base check for uint8
- fix issue with s390x.
- optimize uint16 parsing
- optimize fastfloat_strncasecmp
- Bump the github-actions group across 1 directory with 4 updates
- fix early return error in fastfloat_strncasecmp
- Clarify behavior for underflow
- Fix overzealous build-time /permissive- propagating to compile-time (cross-compilation bug)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoenchant2: upgrade 2.8.14 -> 2.8.15
Wang Mingyu [Tue, 3 Mar 2026 10:09:09 +0000 (18:09 +0800)] 
enchant2: upgrade 2.8.14 -> 2.8.15

Bugfix:
=========
- removing a word that happens to be at the end of a personal word list
  file has not worked since 2.7.0.
- the way that personal word lists are merged with the current
  session has been changed so that personal word list words now appear in
  suggestions with providers that support adding words to the current session
  (Aspell and Hunspell).

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoed: upgrade 1.22.4 -> 1.22.5
Wang Mingyu [Tue, 3 Mar 2026 10:09:08 +0000 (18:09 +0800)] 
ed: upgrade 1.22.4 -> 1.22.5

Changelog:
============
- Use 'sizeof active_list[0]' instead of 'sizeof (line_node **)'.
- A file name ending in slash '/' is now diagnosed as 'Invalid filename'
  instead of 'Is a directory'.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agodiffoscope: upgrade 311 -> 313
Wang Mingyu [Tue, 3 Mar 2026 10:09:07 +0000 (18:09 +0800)] 
diffoscope: upgrade 311 -> 313

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoccache: upgrade 4.12.2 -> 4.12.3
Wang Mingyu [Tue, 3 Mar 2026 10:09:06 +0000 (18:09 +0800)] 
ccache: upgrade 4.12.2 -> 4.12.3

License-Update: Copyright year updated to 2026

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agoxauth: upgrade 1.1.4 -> 1.1.5
Hongxu Jia [Tue, 3 Mar 2026 06:56:40 +0000 (14:56 +0800)] 
xauth: upgrade 1.1.4 -> 1.1.5

ChangeLog in 1.1.5:

commit 6fe9365f11181a043f151f2e67f36015c278791d
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Wed Dec 31 11:58:21 2025 -0800

    xauth 1.1.5

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
commit 1cb1d8e0284870a03970a0a45d1c8cfe7ec6a696
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sun May 18 16:31:05 2025 -0700

    man page: fix warnings from `mandoc -T lint` and `groff -rCHECKSTYLE=10`

    mandoc: xauth.1:26:13: WARNING: cannot parse date, using it verbatim: TH xauth 1.1.4
    mandoc: xauth.1:33:2: WARNING: skipping paragraph macro: PP after SH
    mandoc: xauth.1:225:2: WARNING: skipping paragraph macro: sp after PP
    mandoc: xauth.1:216:2: WARNING: skipping paragraph macro: PP after SH
    mandoc: xauth.1:254:2: WARNING: skipping paragraph macro: PP after SH
    an.tmac:xauth.1:96: style: blank line in input
    an.tmac:xauth.1:104: style: blank line in input
    an.tmac:xauth.1:114: style: blank line in input
    an.tmac:xauth.1:122: style: blank line in input
    an.tmac:xauth.1:130: style: blank line in input
    an.tmac:xauth.1:135: style: blank line in input
    an.tmac:xauth.1:142: style: blank line in input
    an.tmac:xauth.1:166: style: blank line in input

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Part-of: <https://gitlab.freedesktop.org/xorg/app/xauth/-/merge_requests/28>

commit 0d43570ad3ca169464daf4304151c9b8d7ab05b8
Author: Michael Gilbert <michael.s.gilbert@gmail.com>
Date:   Fri Jul 22 14:57:37 2011 -0400

    xauth: needs cookie handling warnings in man page [Debian bug #635109]

Reported-by: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=635109
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Part-of: <https://gitlab.freedesktop.org/xorg/app/xauth/-/merge_requests/27>

commit 23735afd04ab561914aa3d5465532be0a6975fef
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sun Mar 30 09:07:57 2025 -0700

    Improve man page formatting

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Part-of: <https://gitlab.freedesktop.org/xorg/app/xauth/-/merge_requests/26>

commit 9e238deb87c07ecda45ad86ff1e4a49125839446
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sun Mar 23 13:14:50 2025 -0700

    Add --help and --version options

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Part-of: <https://gitlab.freedesktop.org/xorg/app/xauth/-/merge_requests/26>

commit eb8b2ef585dc837558cc3f02f85cb88d2a6de5db
Author: Alan Coopersmith <alan.coopersmith@oracle.com>
Date:   Sun Mar 23 11:25:50 2025 -0700

    Report unknown argument that caused error before printing usage message

Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
    Part-of: <https://gitlab.freedesktop.org/xorg/app/xauth/-/merge_requests/26>

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agopython3-xmltodict: upgrade 1.0.2 -> 1.0.3
Hongxu Jia [Tue, 3 Mar 2026 06:56:39 +0000 (14:56 +0800)] 
python3-xmltodict: upgrade 1.0.2 -> 1.0.3

Release notes[1]:

Bug Fixes

- unparse: serialize None text/attrs as empty values (fixes #401) (aa16511)

Documentation

- readme: fix Fedora and Arch package links (fd6a73b)

[1] https://github.com/martinblech/xmltodict/releases/tag/v1.0.3

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
3 months agopython3-uv-build: upgrade 0.9.28 -> 0.10.4
Hongxu Jia [Tue, 3 Mar 2026 06:56:38 +0000 (14:56 +0800)] 
python3-uv-build: upgrade 0.9.28 -> 0.10.4

Released on 2026-02-17[1].
Enhancements

    Remove duplicate references to the affected paths when showing uv python errors (#18008)
    Skip discovery of workspace members that contain only git-ignored files, including in sub-directories (#18051)

Bug fixes

    Don't panic when initialising a package at the filesystem root (e.g. uv init / --name foo) (#17983)
    Fix permissions on wheel and sdist files produced by the uv_build build backend (#18020)
    Revert locked file change to fix locked files on NFS mounts (#18071)

[1] https://github.com/astral-sh/uv/releases/tag/0.10.4

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>