Signed-off-by: João Marcos Costa <joaomarcos.costa@bootlin.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wei Gao [Mon, 22 Jun 2026 07:00:50 +0000 (15:00 +0800)]
dmidecode: fix x86-only tools being installed on ARM targets
The dmidecode Makefile uses $(shell uname -m) to detect architecture, which
returns the build host's arch (x86_64) during cross-compilation. This causes
x86-only utilities (biosdecode, vpddecode, ownership) to be incorrectly built
and installed on ARM targets.
On NVIDIA Tegra234, running biosdecode triggers a flood of CBB fabric
DECODE_ERR interrupts (23,568+ printk messages dropped) by scanning
non-existent x86 BIOS memory at 0xF0000-0xFFFFF.
Fix by passing TARGET_ARCH to the Makefile's MACHINE variable, so it correctly
detects the target architecture and skips x86-only tools on ARM builds.
Signed-off-by: Wei Gao <wei.gao@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jaipaul Cheernam [Thu, 18 Jun 2026 07:54:05 +0000 (09:54 +0200)]
cmake-native: prevent host libidn2 contamination
The bundled cmcurl in CMake 4.3.x unconditionally enables USE_LIBIDN2
and calls find_package(Libidn2). On hosts with libidn2-devel installed
(common on RHEL/EL8), this detects the host library during configure
but the compile fails because the compiler is correctly restricted to
the native sysroot:
fatal error: idn2.h: No such file or directory
This was introduced in the upgrade from CMake 3.28.x to 4.3.x, where
the bundled cmcurl added find_package(Libidn2) for IDN support.
cmake-native does not need IDN support in its internal curl usage.
Use CMAKE_DISABLE_FIND_PACKAGE_Libidn2 to prevent the host package
from being found without patching the source.
Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech> Reviewed-by: Anders Heimer <anders.heimer@est.tech> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Hiago De Franco [Fri, 19 Jun 2026 18:34:06 +0000 (15:34 -0300)]
nospdx: also drop do_create_recipe_sbom
create-spdx-3.0 adds do_create_recipe_sbom, which assembles the recipe
SBOM from the SPDX document produced by do_create_recipe_spdx.
nospdx deletes do_create_recipe_spdx but leaves do_create_recipe_sbom
in, so on a recipe that inherits nospdx it has no SPDX document to read
and, if executed, fails with:
ERROR: meta-world-pkgdata-1.0-r0 do_create_recipe_sbom: Could not find
a static SPDX document named static-meta-world-pkgdata
do_create_recipe_sbom is reachable via sbom-cve-check-recipe.bbclass or
explicit "bitbake -c create_recipe_sbom". In those cases nospdx recipes
such as meta-world-pkgdata break. Delete it alongside the other recipe
SPDX task.
Signed-off-by: Hiago De Franco <hfranco@baylibre.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Robert P. J. Day [Fri, 19 Jun 2026 17:56:20 +0000 (13:56 -0400)]
packagegroup-core-base-utils.bb: delete duplicate "PACKAGE_ARCH" line
Given that this assignment:
PACKAGE_ARCH = "${MACHINE_ARCH}"
is immediately before the line:
inherit packagegroup
it's pointless to also have it afterwards.
Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
They also happen when musl is enabled, but not only.
Signed-off-by: João Marcos Costa <joaomarcos.costa@bootlin.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Mon, 22 Jun 2026 14:28:35 +0000 (15:28 +0100)]
libjitterentropy: fix license statement
LICENSE clearly states the alternative to BSD is GPL-2.0-only:
ALTERNATIVELY, this product may be distributed under the terms of the
GNU General Public License, in which case the provisions of the GPL2
are required INSTEAD OF the above restrictions.
Use GPL-2.0-only, and reorder to match.
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Reviewed-by: Anders Heimer <anders.heimer@est.tech> Signed-off-by: Daniel Turull <daniel.turull@ericsson.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Reviewed-by: Anders Heimer <anders.heimer@est.tech> Signed-off-by: Daniel Turull <daniel.turull@ericsson.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Nate Kent [Thu, 18 Jun 2026 11:50:01 +0000 (13:50 +0200)]
sudo: fix pam-wheel sed for sudo 1.9.17p2 sudoers
[YOCTO #16321]
In version 1.9.17p2, the line that the recipe uses to add the 'wheel'
group to the sudoers file does not exist. This updates the sed usage to
the actual line in question.
Signed-off-by: Nate Kent <nathan@otiv.ai> Tested-by: Siva Balasubramanian <sivakumar.bs@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Upgrade the firmware package to latest release. Add RCA firmware for
tas257x, add firmware for NXP IW61x SDIO WiFi device, bluetooth firmware
for NFA725B (QCA2066), add BCS calibration firmware for QCC2072. Add gpu,
audio and modem packages for QCOM shikra board.
Firmware licenses and few that are not at the top level (qca/NOTICE.txt,
qcom/NOTICE.txt, wfx/LICENCE.wf200) are moved to a LICENSES directory as
per the REUSE specification. Update LIC_FILES_CHKSUM, NO_GENERIC_LICENSE
and do_install accordingly. Remove REMOVE_UNLICENSED entries for firmware
files that were deleted upstream.
Signed-off-by: Vivek Puar <vpuar@qti.qualcomm.com> Cc: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Bruce Ashfield [Tue, 23 Jun 2026 01:28:04 +0000 (21:28 -0400)]
kern-tools: bump SRCREV for conditional 'depends on X if Y' support
Pull in the yocto-kernel-tools fix for the kernel's conditional Kconfig
dependency syntax (kernel commit 76df6815dab7, first in v7.0). Without it,
do_kernel_configcheck fails on v7.0+ trees once a config uses the syntax
(drivers/hv MSHV_ROOT):
drivers/hv/Kconfig:77: error: couldn't parse
'depends on HYPERV_VMBUS if HYPERV_VMBUS': extra tokens at end of line
This SRCREV also carries the symbol_why.py/kconf_check audit hardening
(surface parse failures instead of swallowing them) and the new hermetic
Kconfiglib self-test.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Leon Anavi [Mon, 22 Jun 2026 08:17:56 +0000 (11:17 +0300)]
python3-numpy: Upgrade 2.4.6 -> 2.5.0
Upgrade to release 2.5.0:
Numpy 2.5.0 is a transitional release. It drops support for Python 3.11,
marking the end of distutils, and expires a large number of deprecations
made in the 2.0.x release. It also improves free threading and brings
sorting into compliance with the array-api standard with the addition of
descending sorts. There is also a fair amount of preparation for Python
3.15, which will be supported starting with the first rc.
- Distutils has been removed
- Many expired deprecations
- Many new deprecations
- Many static typing improvements
- Improved support for free threading
- Support for descending sorts
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Add warnings disabling as upstream does something custom that clashes
with oe's flags:
| cc1: error: '-Wformat-security' ignored without '-Wformat' [-Werror=format-security]
Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Paul Barker [Fri, 19 Jun 2026 18:32:22 +0000 (19:32 +0100)]
python3-dtschema: upgrade 2026.4 -> 2026.6
Tools:
- Fix a case of stderr output not be atomic and getting interleaved
- Relax checks on overlapping types
- Fix handling of matrix types with unbounded dimensions
- Apply fixups under "definitions"
Meta-schemas:
- Ensure matrix properties have 2 levels of items
- Exclude "xlnx,channels" from vendor properties as it can be a node
name, too
Schemas:
- New PCI properties "aspm-no-l1ss" and "aspm-no-l1". Add constraints
for T_POWER_ON property.
- Drop constraints on iommu-map to support variable #iommu-cells
For more details, see:
https://github.com/devicetree-org/dt-schema/releases/tag/v2026.06
Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Paul Barker [Fri, 19 Jun 2026 18:32:21 +0000 (19:32 +0100)]
lsof: upgrade 4.99.6 -> 4.99.7
- lsof_free_result(): handle result == NULL by @neek78 (#349)
- [linux] Fix missing parenthesis in lstat error message format by
@cuiweixie (#350)
- Fix use-after-free in lsof_select_process_regex by @cuiweixie (#351)
- Fix truncated fd numbers in -F field output by @kurok (#352)
- Add -J/-j options for JSON and JSON Lines output format. -J outputs a
JSON envelope with process and file information; -j outputs JSON Lines
format where each line is a JSON object representing a file descriptor
by @kurok (#353)
- Document non-UTF-8 encoding behavior in JSON output by @kurok (#355)
- Follow autoconf conventions for --enable/--disable help output by
@kurok (#356)
- Skip building liblsof when --disable-liblsof is given by @kurok (#357)
- [linux] Display connection state for UDP sockets with -T option by
@kurok (#358)
- Add more information to the tutorial about debugging busy mounts by
@jakobcornell (#360)
- Fix case sensitivity in INSTALL commands by @AngelofVerdant (#361)
- [netbsd] Fix support for NetBSD 10/11 by @jiegec (#363)
For more details, see:
https://github.com/lsof-org/lsof/releases/tag/4.99.7
Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Feature Changes:
- Fall back to TCP on receipt of a UDP response with a mismatched query ID. [GL #5449]
- Limit the number of glue records cached from a referral. [GL #5701]
- Fix a resolver stall on a CNAME response to a DS query. [GL #5878]
Bug Fixes:
- The resolver now removes other RRsets at the same name when caching a CNAME. [GL #5302]
- Fix `nxdomain-redirect` combined with `dns64`. [GL #5789]
- Fix DNS64 owner case after DNAME restart. [GL #5934]
- Clear REDIRECT flag when it isn't needed. [GL #5936]
- Disable output escaping in `bind9.xsl`. [GL #5990]
- Fix crash on badly configured secondary signer. [GL #5993]
- Fix a possible crash on concurrent TKEY DELETE for the same key. [GL #6001]
- Reject RRSIG records covering meta-types. [GL #6002]
For more details, see:
https://bind9.readthedocs.io/en/stable/notes.html#notes-for-bind-9-20-24
Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Paul Barker [Fri, 19 Jun 2026 18:32:19 +0000 (19:32 +0100)]
libportal: upgrade 0.9.1 -> 0.10.0
Dependencies:
- GLib >= 2.80 is required
- Meson >= 0.62.0 is required
- g-ir-scanner required if building with introspection
Features:
- Support directory selection in xdp_portal_open_file() (#211)
- Add clipboard API and support InputCapture session persistence (#214, #220)
Bug fixes:
- Replace deprecated Gio.UnixInputStream with GioUnix.InputStream in tests (#205)
- Fix a memory leak in the background API (#216)
- Specify --doc-format=gi-docgen when building introspection (#221)
- Use canonical property names and G_PARAM_STATIC_STRINGS for all GObject properties in inputcapture (#222)
- Fix invalid free of call-related data in inputcapture (#217)
- Expose libportal/settings.h header in libportal/portal.h (#199)
- Fix build with Qt 6.9+ (#200)
- Don't install glib-backports.h as part of public headers (#193)
For more details, see:
https://github.com/flatpak/libportal/releases/tag/0.10.0
Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Ross Burton [Thu, 18 Jun 2026 10:55:22 +0000 (11:55 +0100)]
libinput: upgrade 1.30.2 -> 1.31.3
Drop CVE backports, all patches integrated into this release.
libinput 1.31.0:
The disable-while-typing and disable-while-trackpointing timeouts are
now configurable (within reasonable limits).
We now support fast 3fg swipes when 3fg drag is enabled.
A new API to get a tablet tool's (marketing) name is now available:
libinput_tablet_tool_get_name().
libinput 1.31.1:
Fixes CVE-2026-35093 and CVE-2026-35094.
libinput 1.31.2:
Important fix for the new fast-swipe interaction during 3fg dragging. A
wrong timestamp calculation could cause slow movements to be interpreted
as swipes in some cases.
Another fix for the Acer Swift SFX14-73G (and likely other devices with
a similar touchpad) fixes a stuttering cursor caused by wrong SYN_REPORT
handling in libinput.
libinput 1.31.3:
Fixes CVE-2026-50265.
libinput 1.31.4:
Two fixes for libinput record, the --autorestart interval handling was
broken for intervals 5s and higher, and a convenience fix for running
with --autorestart.
Eraser buttons can now be mapped to any button (previously only
BTN_STYLUS, BTN_STYULUS2 and BTN_STYLUS3 were permitted).
Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Whilst this doesn't remove all possible issues, removing files in /bin/
directories, then removing support files (like shared libraries) does
reduce the potential for weird failures if the system calls things like
python3.
[YOCTO #16323]
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
devtool: provide explicit error for missing "script" command
Without this "script" command, the "devtool build" provides a very
ambigous error: `/bin/sh: line 1: script: command not found`. With this
patch we provide a more detailed error.
On Fedora 43 the "script" command is not present by default, one needs
to install the "util-linux-script" package. On other systems it's in a
different package.
Signed-off-by: Walter Werner Schneider <contact@schnwalter.eu> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
scripts/rpm2cpio.sh: Use 'xz -dc' instead of xzcat
rpm2cpio.sh calls xzcat to decompress,and xzcat is equivalent to:
xz --decompress --stdout (-d and -c, in short)
Since commit d1930f8, it is assumed that xz is provided, but 'xzcat'
used in rpm2cpio.sh is not listed in HOSTTOOLS. With it being only a
symlink, and with commit eb3ec74 replacing bzip2 with bunzip2 in a
similar way, this fixes the bin_package class for rpm without adding
xzcat to HOSTTOOLS.
5e565948158 This is the 2.46.1 release a195046618e gprof: fix testsuite with older glibc 4bcbe5932ae sim: fix a few -Wdiscarded-qualifiers errors 66bf5c4dd9a Fix even more -Wdiscarded-qualifers issues 3e4fd1a57ec bfd: fix 2 more -Wdiscarded-qualifiers errors e7b4e8eb10a check sframe version in _bfd_elf_parse_sframe e6336a0b1c4 Correct calls to sframe_encoder_free 09a510d7e3f Correct calls to sframe_decoder_free 1f5796eedaf Fix discarded-qualifiers problems in ldlang.c 1d74be61a50 ld: Fix calls to strchr that discard or use wrong const qualifiers 922d530f0aa binutils: fix C23 -Wdiscarded-qualifiers errors b88558ce1a1 Fix the strrchr error for DOS based filesystem 36ced277bcc gprof: Fix strchr discarded qualifier call c27aa8783da ld: Limit PR ld/34088 test to Linux/x86-64 and Linux/aarch64 2cd5360f35a ld: Maintain the input file order 155188ea10a x86: refine special casing of insns with MSR as immediate
The removed soup2 packageconfig option is still included in a condition
to either add libsoup-2.4 or libsoup as a RDEPEND for ${PN}-soup. Since
soup3 is now the only packageconfig option, libsoup can be
unconditionally used.
Signed-off-by: Colin Pinnell McAllister <colinmca242@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Richard Purdie [Thu, 18 Jun 2026 08:49:17 +0000 (09:49 +0100)]
README: Merge OE-Core and QEMU READMEs into one
OE-Core originally had separate READMEs due to the layout with Poky. This
reason no longer exists and we can merge things into one README now which
should make the contribution information easier to find for users.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Tue, 16 Jun 2026 10:17:24 +0000 (18:17 +0800)]
mesa: upgrade 26.0.6 -> 26.1.2
add patches to fix compilation with GCC < 13
Add two patches to fix build failures when using older GCC:
- Fix typed enum syntax not supported by GCC 11.
- Fix variable declaration after case label not allowed by GCC 10.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Jaipaul Cheernam [Tue, 16 Jun 2026 10:57:34 +0000 (12:57 +0200)]
install-buildtools: auto-discover environment setup script via glob
The environment setup script installed by a buildtools tarball is named
environment-setup-<arch>-<sdk-name>-linux. The script previously hardcoded
"pokysdk" for this component, so any distro that ships buildtools under a
different SDK name gets a FileNotFoundError after an otherwise successful
install.
Use glob.glob() to discover the environment setup script by pattern
matching on environment-setup-<arch>-*-linux in the install directory.
Since a buildtools install should produce exactly one such script, error
out if zero or more than one match is found.
Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Wang Mingyu [Tue, 16 Jun 2026 12:59:19 +0000 (13:59 +0100)]
ghostscript: upgrade 10.07.0 -> 10.07.1
out-of-tree.patch refreshed for 10.07.1.
[ link updated to new ticket - RB ]
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Omkar Patil [Tue, 16 Jun 2026 12:41:49 +0000 (18:11 +0530)]
libinput: fix CVE-2026-50292
In libinput before 1.30.4 and 1.31.x before 1.31.3,
libinput-device-group unescaped phys output can inject
udev properties leading to arbitrary root code execution
Peter Marko [Tue, 16 Jun 2026 19:23:18 +0000 (21:23 +0200)]
vex: drop obsolete conflict check with cve-check class
cve-check class was removed, so this check is obsolete.
>From commit message introducing vex class it's not clear why this check
is present, but presumably to not extend the cve status multiple times.
Thas is no longer possible since commit 45e18f4270d084d81c21b1e5a4a601ce975d8a77 introduced sanity check to
prevent that from happening.
Therefore it's also not necessary to rewrite this check to new
sbom-cve-check(-recipe) classes.
Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Brings following fixes: ca7933e47d3a [libc++] Disable mistakenly enabled `optional<T&>` constructors for `optional<T>` (#194446) 208ef916cf20 [WebAssembly] narrow instructions use signed saturation (#201798) e80beda6e255 [VPlan] Account for any-of costs in legacy cost model 3397c37d5d31 Inline stack probes immediately after `allocateStack` in `eliminateCallFramePseudoInstr` (#195456) 1f5aee55a3fc [DAG] Narrow vselect mask to vXi1 in foldToMaskedStore (#201609) 070e505ce21d [LLD][ELF] Add missing initialization of Symbol `used` member. 761b9134dd9b [BPF] treat compiler fence as codegen no-op (#196734) 724301d98c6e Fix "Cannot select" crash on bitcast between f64 and int vector types (#201509) 60c18c6aeaed [CMake][Release] Use llvm-bitcode-strip on Darwin for build with -ffat-lto-objects (#200764) b65aa9b5ea8d [Clang] Profile the NNS of UnresolvedUsingType and CXXThisType correctly in concept hashing (#199617) b4fe3880d09b Bump version to 22.1.8
Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
[RP: Tweak to ensure SUMMARY changes were the correct lines] Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Nicolas Dechesne [Tue, 16 Jun 2026 16:49:59 +0000 (18:49 +0200)]
alsa-ucm-conf: remove stale comment
The "Something went wrong at upstream tarballing" comment was added in
commit 3b69f6c450 ("alsa-ucm-conf: upgrade 1.2.4 -> 1.2.5") to flag a
one-off issue with that release tarball. It has since been carried
forward through every upgrade despite no longer being relevant, so
remove it.
Signed-off-by: Nicolas Dechesne <nicolas.dechesne@oss.qualcomm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
warning: cryptography-cffi@0.49.0: .../release/build/cryptography-cffi-d4ad0316804194ce/out/_openssl.c:57:10:
fatal error: Python.h: No such file or directory
warning: cryptography-cffi@0.49.0: 57 | #include <Python.h>
warning: cryptography-cffi@0.49.0: | ^~~~~~~~~~
warning: cryptography-cffi@0.49.0: compilation terminated.
Backwards incompatible subset of upstream release notes:
49.0.0 - 2026-06-12
* BACKWARDS INCOMPATIBLE: Support for x86_64 macOS has been removed. We
now only publish arm64 wheels for macOS.
* BACKWARDS INCOMPATIBLE: Support for 32-bit Windows has been removed.
Users should move to a 64-bit Python installation.
* BACKWARDS INCOMPATIBLE: Removed the deprecated PUBLIC_KEY_TYPES,
PRIVATE_KEY_TYPES, CERTIFICATE_PRIVATE_KEY_TYPES,
CERTIFICATE_ISSUER_PUBLIC_KEY_TYPES, and CERTIFICATE_PUBLIC_KEY_TYPES
type aliases. Use PublicKeyTypes, PrivateKeyTypes,
CertificateIssuerPrivateKeyTypes, CertificateIssuerPublicKeyTypes, and
CertificatePublicKeyTypes instead. These were deprecated in version
40.0.
* BACKWARDS INCOMPATIBLE: ChaCha20 now treats the first 4 bytes of the
nonce as a 32-bit little-endian block counter (as defined in RFC 7539)
and tracks the number of bytes processed. Attempting to encrypt or
decrypt more data than the counter allows before it would overflow now
raises a ValueError rather than silently diverging from RFC 7539.
Setting the counter portion of the nonce to zero allows encrypting up
to 256 GiB with a given nonce.
* BACKWARDS INCOMPATIBLE: Loading an X.509 certificate whose ECDSA or DSA
signature AlgorithmIdentifier contains encoded NULL parameters now
raises a ValueError. Such certificates are invalid, but older versions
of Java emitted them; previously they loaded with a deprecation
warning.
For full upstream changelog, see:
https://cryptography.io/en/latest/changelog/#v49-0-0
Full comparison of changes:
https://github.com/pyca/cryptography/compare/48.0.1...49.0.0
Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Sai Sneha [Mon, 15 Jun 2026 08:43:39 +0000 (14:13 +0530)]
i2c-tools: add LGPL-2.1-or-later license for libi2c
The libi2c library included in i2c-tools is licensed under
LGPL-2.1-or-later, as stated in the upstream README and the
COPYING.LGPL file. Update LICENSE and LIC_FILES_CHKSUM to reflect
this.
Fixes: https://bugzilla.yoctoproject.org/show_bug.cgi?id=16313 Signed-off-by: Sai Sneha <saisneha196@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Robert Yang [Thu, 21 May 2026 07:46:47 +0000 (00:46 -0700)]
strace: upgrade 6.19 -> 7.0
[RP: Fix AUH patch location issues] Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
projects / thirdparty / openembedded / openembedded-core.git / log
