]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/log
thirdparty/openembedded/openembedded-core.git
4 weeks agoscripts/patchtest: simplify traceback logging, remove whitespace
Trevor Gamblin [Thu, 18 Jun 2026 20:36:29 +0000 (16:36 -0400)] 
scripts/patchtest: simplify traceback logging, remove whitespace

We currently use the logging module to wrap tracebacks when a failure
occurs. The traceback module is sufficient for this task, so use it
directly. Also remove a redundant import of the traceback module, and
fix some whitespace in the getResult class that was missed previously.

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agoscripts/patchtest: simplify _runner()
Trevor Gamblin [Thu, 18 Jun 2026 20:36:28 +0000 (16:36 -0400)] 
scripts/patchtest: simplify _runner()

- Use the test suite's countTestCases() method directly instead of
  creating a variable
- Simplify return logic - we still want to fail early if there are no
  test suites to use, but otherwise we can reduce it to a single return
  value determination based on the result of runner.run()
- Add a newline above where the 'runner' variable is initialized

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agoscripts/patchtest: clean up startTestRun()
Trevor Gamblin [Thu, 18 Jun 2026 20:36:27 +0000 (16:36 -0400)] 
scripts/patchtest: clean up startTestRun()

- Initialize self.repo directly instead of in two steps
- Remove extra whitespace when setting error and failure members

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agoscripts/patchtest: refactor results methods
Trevor Gamblin [Thu, 18 Jun 2026 20:36:26 +0000 (16:36 -0400)] 
scripts/patchtest: refactor results methods

The add{Error,Failure,Success,Skip} methods used by the inner
PatchTestResult class re-use a lot of nearly-identical code. Encapsulate
the logic used into two new functions:

1. _format_test_description(), which includes all of the original
   syntax/tag cleanup logic
2. _write_patchtest_result(), which formats the actual result lines that
   patchtest ultimately emits (to console and/or file)

selftest:

|============================================================================
|Testsuite summary for patchtest
|============================================================================
|# TOTAL: 38
|# XPASS: 18
|# XFAIL: 18
|# XSKIP: 2
|# PASS: 0
|# FAIL: 0
|# SKIP: 0
|# ERROR: 0
|============================================================================

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agoqemuboot.bbclass: add missing task dependency on kernel deploy
Siva Balasubramanian [Fri, 12 Jun 2026 08:58:22 +0000 (14:28 +0530)] 
qemuboot.bbclass: add missing task dependency on kernel deploy

do_write_qemuboot_conf had no dependency on the kernel deploy task,
so if the kernel was rebuilt without invalidating the rootfs sstate,
the task was skipped and .qemuboot.conf was left stale while new
image artifacts were deployed with a new timestamp suffix.

Add do_write_qemuboot_conf[depends] on KERNEL_DEPLOY_DEPEND using a
Python inline expression that skips the dependency when
INITRAMFS_IMAGE_BUNDLE=1. When the initramfs is bundled into the
kernel, linux-yocto:do_deploy depends on the initramfs image
completing first, so an unconditional kernel deploy dependency on
do_write_qemuboot_conf would create a circular dependency.

KERNEL_DEPLOY_DEPEND is defined with ?= in image.bbclass and is
already used by do_build[depends] for the same reason.

Fixes: https://bugzilla.yoctoproject.org/show_bug.cgi?id=14520
Signed-off-by: Siva Balasubramanian <sivakumar.bs@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agomesa: fix INSANE_SKIP package name for mesa-gl
Antoine Gouby [Wed, 24 Jun 2026 09:56:58 +0000 (11:56 +0200)] 
mesa: fix INSANE_SKIP package name for mesa-gl

mesa.inc is shared by both mesa.bb and mesa-gl.bb. The variable
INSANE_SKIP:${PN}-megadriver expands to mesa-gl-megadriver when
included by mesa-gl.bb, but the package is always named mesa-megadriver
(hardcoded via PACKAGES =+). The skip therefore had no effect for
mesa-gl builds.

This was hidden until mesa 26.1.0 removed the with_gbm condition from
the dril subdir build, causing mesa-gl to now install DRI driver
symlinks into mesa-megadriver for the first time.

Use ${MLPREFIX}mesa-megadriver to correctly handle both mesa-gl builds
(where MLPREFIX is empty) and multilib variants (where it expands to
e.g. "lib32-").

Signed-off-by: Antoine Gouby <antoine.gouby@toradex.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agopython3-cython: make generated _cyutility.c be reproducible
Zhixiong Chi [Wed, 24 Jun 2026 04:58:16 +0000 (12:58 +0800)] 
python3-cython: make generated _cyutility.c be reproducible

While python3 module use cython to build shared moudle utility library,
the generated source file _cyutility.c is not stable at each build and
made the generated library not be reproducible.

When the option "--generated-shared" is used to generated __cyutility as the
link https://github.com/scikit-learn/scikit-learn/pull/31151/files, the path
for filename_table in the generated pyx/c file contains tmp dir which is not
predictable though it has been updated to the relative path, and it caused
the generated output file is not stable at each build and made the generated
library is not reproducible [1] between builds.

example as python3_pandas:

vim build/_cyutility.c
......
/* #### Code section: filename_table ### */

static const char* const __pyx_f[] = {
  "../../../../../../../../../../../../tmp/tmpXXXXXX/_cyutility.pyx",
  "<stringsource>",
};

After applied this commit, vim build/_cyutility.c
......
/* #### Code section: filename_table ### */

static const char* const __pyx_f[] = {
  "_cyutility.pyx",
  "<stringsource>",
};

This commit use SharedUtilitySourceDescriptor instead of unpredictable
temporary directory unpredictable tmpdir in the generated source file
to assure the file _cyutility.c should be reproducible.

[1] https://reproducible-builds.org/

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agorecipes.txt: correct misspelled "utilties"
Robert P. J. Day [Tue, 23 Jun 2026 08:22:41 +0000 (04:22 -0400)] 
recipes.txt: correct misspelled "utilties"

Fix "utilties" to "utilities".

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agolocal.conf.sample.extended: update fortran example
João Marcos Costa [Mon, 22 Jun 2026 08:39:26 +0000 (10:39 +0200)] 
local.conf.sample.extended: update fortran example

Since Whinlatter [1], FORTRAN is set by a weak assignment, so the
':forcevariable' is no longer needed.

Update the example accordingly, and replace the outdated comments above.

[1]: https://git.openembedded.org/openembedded-core/commit/?id=50abae55eda0115d073bbc6552f2fcb4ecbb7949

Signed-off-by: João Marcos Costa <joaomarcos.costa@bootlin.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agodmidecode: fix x86-only tools being installed on ARM targets
Wei Gao [Mon, 22 Jun 2026 07:00:50 +0000 (15:00 +0800)] 
dmidecode: fix x86-only tools being installed on ARM targets

The dmidecode Makefile uses $(shell uname -m) to detect architecture, which
returns the build host's arch (x86_64) during cross-compilation. This causes
x86-only utilities (biosdecode, vpddecode, ownership) to be incorrectly built
and installed on ARM targets.

On NVIDIA Tegra234, running biosdecode triggers a flood of CBB fabric
DECODE_ERR interrupts (23,568+ printk messages dropped) by scanning
non-existent x86 BIOS memory at 0xF0000-0xFFFFF.

Fix by passing TARGET_ARCH to the Makefile's MACHINE variable, so it correctly
detects the target architecture and skips x86-only tools on ARM builds.

Signed-off-by: Wei Gao <wei.gao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agocmake-native: prevent host libidn2 contamination
Jaipaul Cheernam [Thu, 18 Jun 2026 07:54:05 +0000 (09:54 +0200)] 
cmake-native: prevent host libidn2 contamination

The bundled cmcurl in CMake 4.3.x unconditionally enables USE_LIBIDN2
and calls find_package(Libidn2). On hosts with libidn2-devel installed
(common on RHEL/EL8), this detects the host library during configure
but the compile fails because the compiler is correctly restricted to
the native sysroot:

  fatal error: idn2.h: No such file or directory

This was introduced in the upgrade from CMake 3.28.x to 4.3.x, where
the bundled cmcurl added find_package(Libidn2) for IDN support.

cmake-native does not need IDN support in its internal curl usage.
Use CMAKE_DISABLE_FIND_PACKAGE_Libidn2 to prevent the host package
from being found without patching the source.

Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Reviewed-by: Anders Heimer <anders.heimer@est.tech>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agonospdx: also drop do_create_recipe_sbom
Hiago De Franco [Fri, 19 Jun 2026 18:34:06 +0000 (15:34 -0300)] 
nospdx: also drop do_create_recipe_sbom

create-spdx-3.0 adds do_create_recipe_sbom, which assembles the recipe
SBOM from the SPDX document produced by do_create_recipe_spdx.

nospdx deletes do_create_recipe_spdx but leaves do_create_recipe_sbom
in, so on a recipe that inherits nospdx it has no SPDX document to read
and, if executed, fails with:

  ERROR: meta-world-pkgdata-1.0-r0 do_create_recipe_sbom: Could not find
  a static SPDX document named static-meta-world-pkgdata

do_create_recipe_sbom is reachable via sbom-cve-check-recipe.bbclass or
explicit "bitbake -c create_recipe_sbom". In those cases nospdx recipes
such as meta-world-pkgdata break. Delete it alongside the other recipe
SPDX task.

Signed-off-by: Hiago De Franco <hfranco@baylibre.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agopackagegroup-core-base-utils.bb: delete duplicate "PACKAGE_ARCH" line
Robert P. J. Day [Fri, 19 Jun 2026 17:56:20 +0000 (13:56 -0400)] 
packagegroup-core-base-utils.bb: delete duplicate "PACKAGE_ARCH" line

Given that this assignment:

  PACKAGE_ARCH = "${MACHINE_ARCH}"

is immediately before the line:

  inherit packagegroup

it's pointless to also have it afterwards.

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agooe: pass gcc and tmux commands as lists
Anders Heimer [Fri, 19 Jun 2026 09:26:31 +0000 (11:26 +0200)] 
oe: pass gcc and tmux commands as lists

Avoid shell=True in subprocess calls.

Handle OSError if gcc cannot be started.

Signed-off-by: Anders Heimer <anders.heimer@est.tech>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agoptest-packagelists.inc: disable glib-2.0 for RISCV64
João Marcos Costa [Wed, 24 Jun 2026 08:38:54 +0000 (10:38 +0200)] 
ptest-packagelists.inc: disable glib-2.0 for RISCV64

Timeouts and other intermittent failures have been observed in the
autobuilder, and they are tracked in different entries at Bugzilla:

- https://bugzilla.yoctoproject.org/show_bug.cgi?id=15891
- https://bugzilla.yoctoproject.org/show_bug.cgi?id=16230

They also happen when musl is enabled, but not only.

Signed-off-by: João Marcos Costa <joaomarcos.costa@bootlin.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agomaintainers.inc: update ownership for linux-firmware
Vivek Puar [Mon, 22 Jun 2026 08:17:10 +0000 (13:47 +0530)] 
maintainers.inc: update ownership for linux-firmware

I propose to take ownership for linux-firmware recipe.

Signed-off-by: Vivek Puar <vpuar@qti.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agorng-tools: remove obsolete CFLAGS
Ross Burton [Mon, 22 Jun 2026 14:28:45 +0000 (15:28 +0100)] 
rng-tools: remove obsolete CFLAGS

There's no need to set this explicitly, as upstream does this since 6.16
onwards[1].

[1] rng-tools 57be6d ("configure.ac: fix jitterentropy internal timers
    detection")

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agolibjitterentropy: fix license statement
Ross Burton [Mon, 22 Jun 2026 14:28:35 +0000 (15:28 +0100)] 
libjitterentropy: fix license statement

LICENSE clearly states the alternative to BSD is GPL-2.0-only:

  ALTERNATIVELY, this product may be distributed under the terms of the
  GNU General Public License, in which case the provisions of the GPL2
  are required INSTEAD OF the above restrictions.

Use GPL-2.0-only, and reorder to match.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agolibssh2: fix CVE-2026-55199
Daniel Turull [Mon, 22 Jun 2026 14:28:18 +0000 (16:28 +0200)] 
libssh2: fix CVE-2026-55199

Backport patch to fix CVE-2026-55199.
https://nvd.nist.gov/vuln/detail/CVE-2026-55199

Upstream fix:
  https://github.com/libssh2/libssh2/commit/17626857d20b3c9a1addfa45979dadcee1cd84a4

Tested with ptest:
Before: PASSED: 3, FAILED: 0, SKIPPED: 0
After: PASSED: 3, FAILED: 0, SKIPPED: 0

Reviewed-by: Anders Heimer <anders.heimer@est.tech>
Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agobinutils: Fix CVE-2026-6846
Jaipaul Cheernam [Mon, 22 Jun 2026 13:01:15 +0000 (15:01 +0200)] 
binutils: Fix CVE-2026-6846

This patch applies the upstream fix as referenced in [2], using the commit shown in [1].

[1] https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=7a089e0302382f4d4e077941156e1eaa68d01393
[2] https://security-tracker.debian.org/tracker/CVE-2026-6846

Tested with binutils-testsuite (bitbake binutils-testsuite -c check):
  binutils: PASSED: 327, FAILED: 0, SKIPPED: 5
  gas:      PASSED: 2091, FAILED: 0, SKIPPED: 4
  ld:       PASSED: 1899, FAILED: 0, SKIPPED: 129

Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agolibssh2: fix CVE-2026-55200
Daniel Turull [Mon, 22 Jun 2026 09:33:25 +0000 (11:33 +0200)] 
libssh2: fix CVE-2026-55200

Backport patch to fix CVE-2026-55200.
https://nvd.nist.gov/vuln/detail/CVE-2026-55200

Upstream fix:
  https://github.com/libssh2/libssh2/commit/97acf3dfda80c91c3a8c9f2372546301d4a1a7a8

Tested with ptest:
Before: PASSED: 3, FAILED: 0, SKIPPED: 0
After: PASSED: 3, FAILED: 0, SKIPPED: 0

Reviewed-by: Anders Heimer <anders.heimer@est.tech>
Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agotcl: disable the timer tests in run-ptest
Ross Burton [Thu, 18 Jun 2026 16:52:12 +0000 (17:52 +0100)] 
tcl: disable the timer tests in run-ptest

We've seen the timer tests fail on the autobuilder, presumably because
any tests that are exercising the timers will be unstable on a loaded
system.

[ YOCTO #16324 ]

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agosudo: fix pam-wheel sed for sudo 1.9.17p2 sudoers
Nate Kent [Thu, 18 Jun 2026 11:50:01 +0000 (13:50 +0200)] 
sudo: fix pam-wheel sed for sudo 1.9.17p2 sudoers

[YOCTO #16321]

In version 1.9.17p2, the line that the recipe uses to add the 'wheel'
group to the sudoers file does not exist. This updates the sed usage to
the actual line in question.

Signed-off-by: Nate Kent <nathan@otiv.ai>
Tested-by: Siva Balasubramanian <sivakumar.bs@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agosystemd-boot: remove unused variables
Nico [Tue, 16 Jun 2026 07:37:40 +0000 (09:37 +0200)] 
systemd-boot: remove unused variables

Remove the unused re import and target variable from the
anonymous Python function.

No functional change intended.

Signed-off-by: Nico <nicolaie.busuioc@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agolinux-firmware: upgrade 20260519 -> 20260622
Vivek Puar [Wed, 24 Jun 2026 03:53:02 +0000 (09:23 +0530)] 
linux-firmware: upgrade 20260519 -> 20260622

Upgrade the firmware package to latest release. Add RCA firmware for
tas257x, add firmware for NXP IW61x SDIO WiFi device, bluetooth firmware
for NFA725B (QCA2066), add BCS calibration firmware for QCC2072. Add gpu,
audio and modem packages for QCOM shikra board.

Firmware licenses and few that are not at the top level (qca/NOTICE.txt,
qcom/NOTICE.txt, wfx/LICENCE.wf200) are moved to a LICENSES directory as
per the REUSE specification. Update LIC_FILES_CHKSUM, NO_GENERIC_LICENSE
and do_install accordingly. Remove REMOVE_UNLICENSED entries for firmware
files that were deleted upstream.

Signed-off-by: Vivek Puar <vpuar@qti.qualcomm.com>
Cc: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agokern-tools: bump SRCREV for conditional 'depends on X if Y' support
Bruce Ashfield [Tue, 23 Jun 2026 01:28:04 +0000 (21:28 -0400)] 
kern-tools: bump SRCREV for conditional 'depends on X if Y' support

Pull in the yocto-kernel-tools fix for the kernel's conditional Kconfig
dependency syntax (kernel commit 76df6815dab7, first in v7.0). Without it,
do_kernel_configcheck fails on v7.0+ trees once a config uses the syntax
(drivers/hv MSHV_ROOT):

    drivers/hv/Kconfig:77: error: couldn't parse
    'depends on HYPERV_VMBUS if HYPERV_VMBUS': extra tokens at end of line

This SRCREV also carries the symbol_why.py/kconf_check audit hardening
(surface parse failures instead of swallowing them) and the new hermetic
Kconfiglib self-test.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agogn: upgrade to latest revision
Alexander Kanavin [Fri, 19 Jun 2026 08:32:43 +0000 (10:32 +0200)] 
gn: upgrade to latest revision

Remove patch as issue is fixed upstream.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agowaffle: upgrade 1.8.1 -> 1.8.2
Ross Burton [Mon, 22 Jun 2026 13:24:23 +0000 (14:24 +0100)] 
waffle: upgrade 1.8.1 -> 1.8.2

Drop upstreamed patch.

Also remove the obsolete python3 DEPENDS, this hasn't been needed since
the port to Meson.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agopython3-numpy: Upgrade 2.4.6 -> 2.5.0
Leon Anavi [Mon, 22 Jun 2026 08:17:56 +0000 (11:17 +0300)] 
python3-numpy: Upgrade 2.4.6 -> 2.5.0

Upgrade to release 2.5.0:

Numpy 2.5.0 is a transitional release. It drops support for Python 3.11,
marking the end of distutils, and expires a large number of deprecations
made in the 2.0.x release. It also improves free threading and brings
sorting into compliance with the array-api standard with the addition of
descending sorts. There is also a fair amount of preparation for Python
3.15, which will be supported starting with the first rc.

- Distutils has been removed
- Many expired deprecations
- Many new deprecations
- Many static typing improvements
- Improved support for free threading
- Support for descending sorts

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agoovmf: upgrade edk2-stable202511 -> edk2-stable202605
Alexander Kanavin [Wed, 17 Jun 2026 19:27:01 +0000 (21:27 +0200)] 
ovmf: upgrade edk2-stable202511 -> edk2-stable202605

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agovte: upgrade 0.82.2 -> 0.84.0
Alexander Kanavin [Fri, 19 Jun 2026 08:32:56 +0000 (10:32 +0200)] 
vte: upgrade 0.82.2 -> 0.84.0

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agolibrsvg: upgrade: 2.62.2 -> 2.62.3
Alexander Kanavin [Fri, 19 Jun 2026 08:32:55 +0000 (10:32 +0200)] 
librsvg: upgrade: 2.62.2 -> 2.62.3

Drop patch merged upstream.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agoparted: upgrade 3.6 -> 3.7
Alexander Kanavin [Fri, 19 Jun 2026 08:32:54 +0000 (10:32 +0200)] 
parted: upgrade 3.6 -> 3.7

Drop three patches, as they're either obsolete, or merged upstream.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agoman-pages: upgrade 6.17 -> 6.18
Alexander Kanavin [Fri, 19 Jun 2026 08:32:53 +0000 (10:32 +0200)] 
man-pages: upgrade 6.17 -> 6.18

License-Update: formatting

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agolibsolv: upgrade 0.7.37 -> 0.7.39
Alexander Kanavin [Fri, 19 Jun 2026 08:32:52 +0000 (10:32 +0200)] 
libsolv: upgrade 0.7.37 -> 0.7.39

Drop a patch as upstream solved the issue separately by moving the
data to the heap.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agoelfutils: upgrade 0.194 -> 0.195
Alexander Kanavin [Fri, 19 Jun 2026 08:32:51 +0000 (10:32 +0200)] 
elfutils: upgrade 0.194 -> 0.195

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agodebugedit: upgrade 5.2 -> 5.3
Alexander Kanavin [Fri, 19 Jun 2026 08:32:50 +0000 (10:32 +0200)] 
debugedit: upgrade 5.2 -> 5.3

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agoinetutils: upgrade 2.7 -> 2.8
Alexander Kanavin [Fri, 19 Jun 2026 08:32:49 +0000 (10:32 +0200)] 
inetutils: upgrade 2.7 -> 2.8

All dropped patches are backports.

Add warnings disabling as upstream does something custom that clashes
with oe's flags:
| cc1: error: '-Wformat-security' ignored without '-Wformat' [-Werror=format-security]

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agolttng-ust: upgrade 2.14.0 -> 2.15.1
Alexander Kanavin [Fri, 19 Jun 2026 08:32:47 +0000 (10:32 +0200)] 
lttng-ust: upgrade 2.14.0 -> 2.15.1

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agolttng-modules: upgrade 2.14.4 -> 2.15.1
Alexander Kanavin [Fri, 19 Jun 2026 08:32:46 +0000 (10:32 +0200)] 
lttng-modules: upgrade 2.14.4 -> 2.15.1

Drop a backported patch.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agolttng-tools: upgrade 2.14.1 -> 2.15.1
Alexander Kanavin [Fri, 19 Jun 2026 08:32:45 +0000 (10:32 +0200)] 
lttng-tools: upgrade 2.14.1 -> 2.15.1

Adjust ptest tweaks and packaging to account for test data and test cases changes/renames.

Add a patch to address reproducibility issues.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agoutil-linux: upgrade 2.41.3 -> 2.42.2
Alexander Kanavin [Fri, 19 Jun 2026 08:32:44 +0000 (10:32 +0200)] 
util-linux: upgrade 2.41.3 -> 2.42.2

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agoffmpeg: upgrade 8.1.1 -> 8.1.2
Paul Barker [Fri, 19 Jun 2026 18:32:23 +0000 (19:32 +0100)] 
ffmpeg: upgrade 8.1.1 -> 8.1.2

- Various fixes for out-of-bounds accesses, buffer overflows, integer
  overflows, SIGFPE, use-after-free/double-free and NULL-deref issues.

- Input validation and robustness improvements.

- Correctness and functional fixes.

- Compatibility with NVIDIA Video Codec SDK 13.1.

For more details, see:
  https://git.ffmpeg.org/gitweb/ffmpeg.git/blob_plain/refs/heads/release/8.1:/Changelog

Also, add a link to the submitted patch.

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agopython3-dtschema: upgrade 2026.4 -> 2026.6
Paul Barker [Fri, 19 Jun 2026 18:32:22 +0000 (19:32 +0100)] 
python3-dtschema: upgrade 2026.4 -> 2026.6

Tools:
- Fix a case of stderr output not be atomic and getting interleaved
- Relax checks on overlapping types
- Fix handling of matrix types with unbounded dimensions
- Apply fixups under "definitions"

Meta-schemas:
- Ensure matrix properties have 2 levels of items
- Exclude "xlnx,channels" from vendor properties as it can be a node
  name, too

Schemas:
- New PCI properties "aspm-no-l1ss" and "aspm-no-l1". Add constraints
  for T_POWER_ON property.
- Drop constraints on iommu-map to support variable #iommu-cells

For more details, see:
  https://github.com/devicetree-org/dt-schema/releases/tag/v2026.06

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agolsof: upgrade 4.99.6 -> 4.99.7
Paul Barker [Fri, 19 Jun 2026 18:32:21 +0000 (19:32 +0100)] 
lsof: upgrade 4.99.6 -> 4.99.7

- lsof_free_result(): handle result == NULL by @neek78 (#349)
- [linux] Fix missing parenthesis in lstat error message format by
  @cuiweixie (#350)
- Fix use-after-free in lsof_select_process_regex by @cuiweixie (#351)
- Fix truncated fd numbers in -F field output by @kurok (#352)
- Add -J/-j options for JSON and JSON Lines output format. -J outputs a
  JSON envelope with process and file information; -j outputs JSON Lines
  format where each line is a JSON object representing a file descriptor
  by @kurok (#353)
- Document non-UTF-8 encoding behavior in JSON output by @kurok (#355)
- Follow autoconf conventions for --enable/--disable help output by
  @kurok (#356)
- Skip building liblsof when --disable-liblsof is given by @kurok (#357)
- [linux] Display connection state for UDP sockets with -T option by
  @kurok (#358)
- Add more information to the tutorial about debugging busy mounts by
  @jakobcornell (#360)
- Fix case sensitivity in INSTALL commands by @AngelofVerdant (#361)
- [netbsd] Fix support for NetBSD 10/11 by @jiegec (#363)

For more details, see:
  https://github.com/lsof-org/lsof/releases/tag/4.99.7

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agobind: upgrade 9.20.23 -> 9.20.24
Paul Barker [Fri, 19 Jun 2026 18:32:20 +0000 (19:32 +0100)] 
bind: upgrade 9.20.23 -> 9.20.24

Removed Features:
- Remove ineffective TCP fallback after repeated UDP timeouts. [GL #5529]

Feature Changes:
- Fall back to TCP on receipt of a UDP response with a mismatched query ID. [GL #5449]
- Limit the number of glue records cached from a referral. [GL #5701]
- Fix a resolver stall on a CNAME response to a DS query. [GL #5878]

Bug Fixes:
- The resolver now removes other RRsets at the same name when caching a CNAME. [GL #5302]
- Fix `nxdomain-redirect` combined with `dns64`. [GL #5789]
- Fix DNS64 owner case after DNAME restart. [GL #5934]
- Clear REDIRECT flag when it isn't needed. [GL #5936]
- Disable output escaping in `bind9.xsl`. [GL #5990]
- Fix crash on badly configured secondary signer. [GL #5993]
- Fix a possible crash on concurrent TKEY DELETE for the same key. [GL #6001]
- Reject RRSIG records covering meta-types. [GL #6002]

For more details, see:
  https://bind9.readthedocs.io/en/stable/notes.html#notes-for-bind-9-20-24

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agolibportal: upgrade 0.9.1 -> 0.10.0
Paul Barker [Fri, 19 Jun 2026 18:32:19 +0000 (19:32 +0100)] 
libportal: upgrade 0.9.1 -> 0.10.0

Dependencies:
- GLib >= 2.80 is required
- Meson >= 0.62.0 is required
- g-ir-scanner required if building with introspection

Features:
- Support directory selection in xdp_portal_open_file() (#211)
- Add clipboard API and support InputCapture session persistence (#214, #220)

Bug fixes:
- Replace deprecated Gio.UnixInputStream with GioUnix.InputStream in tests (#205)
- Fix a memory leak in the background API (#216)
- Specify --doc-format=gi-docgen when building introspection (#221)
- Use canonical property names and G_PARAM_STATIC_STRINGS for all GObject properties in inputcapture (#222)
- Fix invalid free of call-related data in inputcapture (#217)
- Expose libportal/settings.h header in libportal/portal.h (#199)
- Fix build with Qt 6.9+ (#200)
- Don't install glib-backports.h as part of public headers (#193)

For more details, see:
  https://github.com/flatpak/libportal/releases/tag/0.10.0

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
4 weeks agolibinput: upgrade 1.30.2 -> 1.31.3
Ross Burton [Thu, 18 Jun 2026 10:55:22 +0000 (11:55 +0100)] 
libinput: upgrade 1.30.2 -> 1.31.3

Drop CVE backports, all patches integrated into this release.

libinput 1.31.0:

The disable-while-typing and disable-while-trackpointing timeouts are
now configurable (within reasonable limits).

We now support fast 3fg swipes when 3fg drag is enabled.

A new API to get a tablet tool's (marketing) name is now available:
libinput_tablet_tool_get_name().

libinput 1.31.1:

Fixes CVE-2026-35093 and CVE-2026-35094.

libinput 1.31.2:

Important fix for the new fast-swipe interaction during 3fg dragging. A
wrong timestamp calculation could cause slow movements to be interpreted
as swipes in some cases.

Another fix for the Acer Swift SFX14-73G (and likely other devices with
a similar touchpad) fixes a stuttering cursor caused by wrong SYN_REPORT
handling in libinput.

libinput 1.31.3:

Fixes CVE-2026-50265.

libinput 1.31.4:

Two fixes for libinput record, the --autorestart interval handling was
broken for intervals 5s and higher, and a convenience fix for running
with --autorestart.

Eraser buttons can now be mapped to any button (previously only
BTN_STYLUS, BTN_STYULUS2 and BTN_STYLUS3 were permitted).

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agosstate: Reduce native sysroot execution race potential
Richard Purdie [Thu, 18 Jun 2026 15:39:43 +0000 (16:39 +0100)] 
sstate: Reduce native sysroot execution race potential

Whilst this doesn't remove all possible issues, removing files in /bin/
directories, then removing support files (like shared libraries) does
reduce the potential for weird failures if the system calls things like
python3.

[YOCTO #16323]

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agotoaster.bbclass: Support layers that are not Git repositories
Peter Kjellerstedt [Wed, 17 Jun 2026 09:40:37 +0000 (11:40 +0200)] 
toaster.bbclass: Support layers that are not Git repositories

Not all layers are Git repositories, e.g., the workspace layer created
by devtool.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
6 weeks agodevtool: provide explicit error for missing "script" command
Walter Werner Schneider [Sat, 13 Jun 2026 12:11:26 +0000 (15:11 +0300)] 
devtool: provide explicit error for missing "script" command

Without this "script" command, the "devtool build" provides a very
ambigous error: `/bin/sh: line 1: script: command not found`. With this
patch we provide a more detailed error.

On Fedora 43 the "script" command is not present by default, one needs
to install the "util-linux-script" package. On other systems it's in a
different package.

Signed-off-by: Walter Werner Schneider <contact@schnwalter.eu>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
6 weeks agoscripts/rpm2cpio.sh: Use 'xz -dc' instead of xzcat
Florin Diaconescu [Mon, 15 Jun 2026 15:39:44 +0000 (18:39 +0300)] 
scripts/rpm2cpio.sh: Use 'xz -dc' instead of xzcat

rpm2cpio.sh calls xzcat to decompress,and xzcat is equivalent to:
xz --decompress --stdout (-d and -c, in short)

Since commit d1930f8, it is assumed that xz is provided, but 'xzcat'
used in rpm2cpio.sh is not listed in HOSTTOOLS. With it being only a
symlink, and with commit eb3ec74 replacing bzip2 with bunzip2 in a
similar way, this fixes the bin_package class for rpm without adding
xzcat to HOSTTOOLS.

Signed-off-by: Florin Diaconescu <florin.diaconescu009@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
6 weeks agobinutils: Upgrade to 2.46.1 release
Hemanth Kumar M D [Mon, 15 Jun 2026 11:11:53 +0000 (04:11 -0700)] 
binutils: Upgrade to 2.46.1 release

This release contains bug fixes for:
* PR34028
* PR34088
* PR34125

Release notes: https://lists.gnu.org/archive/html/info-gnu/2026-06/msg00003.html

git log --oneline 49d4d3fafa4ec4ff5a3460d91d5b1ed5286487db..5e56594815854de5eca35c7c04b11705d0f19c02

5e565948158 This is the 2.46.1 release
a195046618e gprof: fix testsuite with older glibc
4bcbe5932ae sim: fix a few -Wdiscarded-qualifiers errors
66bf5c4dd9a Fix even more -Wdiscarded-qualifers issues
3e4fd1a57ec bfd: fix 2 more -Wdiscarded-qualifiers errors
e7b4e8eb10a check sframe version in _bfd_elf_parse_sframe
e6336a0b1c4 Correct calls to sframe_encoder_free
09a510d7e3f Correct calls to sframe_decoder_free
1f5796eedaf Fix discarded-qualifiers problems in ldlang.c
1d74be61a50 ld: Fix calls to strchr that discard or use wrong const qualifiers
922d530f0aa binutils: fix C23 -Wdiscarded-qualifiers errors
b88558ce1a1 Fix the strrchr error for DOS based filesystem
36ced277bcc gprof: Fix strchr discarded qualifier call
c27aa8783da ld: Limit PR ld/34088 test to Linux/x86-64 and Linux/aarch64
2cd5360f35a ld: Maintain the input file order
155188ea10a x86: refine special casing of insns with MSR as immediate

Testing Results:
+-------------------------------+--------+--------+------+
| Metric                        | Before | After  | Diff |
+-------------------------------+--------+--------+------+
| Expected passes               | 327    | 327    | 0    |
| Untested testcases            | 5      | 5      | 0    |
| Unsupported tests             | 9      | 9      | 0    |
+-------------------------------+--------+--------+------+

Signed-off-by: Hemanth Kumar M D <Hemanth.KumarMD@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
6 weeks agolibaio: update SRC_URI
Ross Burton [Wed, 17 Jun 2026 09:32:23 +0000 (10:32 +0100)] 
libaio: update SRC_URI

libaio has moved to Codeberg as pagure.io will be closed down shortly.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
6 weeks agopython3-uritools: Upgrade 6.1.0 -> 6.1.2
Leon Anavi [Tue, 16 Jun 2026 07:28:23 +0000 (10:28 +0300)] 
python3-uritools: Upgrade 6.1.0 -> 6.1.2

Upgrade to release 6.1.2:

- Minor documentation improvements.
- Update build environment.

License-Update: Update years

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
6 weeks agogstreamer1.0-plugins-good: remove dangling libsoup2 ref
Colin Pinnell McAllister [Mon, 15 Jun 2026 22:12:12 +0000 (17:12 -0500)] 
gstreamer1.0-plugins-good: remove dangling libsoup2 ref

The removed soup2 packageconfig option is still included in a condition
to either add libsoup-2.4 or libsoup as a RDEPEND for ${PN}-soup. Since
soup3 is now the only packageconfig option, libsoup can be
unconditionally used.

Signed-off-by: Colin Pinnell McAllister <colinmca242@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
6 weeks agoREADME: Merge OE-Core and QEMU READMEs into one
Richard Purdie [Thu, 18 Jun 2026 08:49:17 +0000 (09:49 +0100)] 
README: Merge OE-Core and QEMU READMEs into one

OE-Core originally had separate READMEs due to the layout with Poky. This
reason no longer exists and we can merge things into one README now which
should make the contribution information easier to find for users.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoREADME.qemu: Update to match current architecture support
Richard Purdie [Thu, 18 Jun 2026 08:45:48 +0000 (09:45 +0100)] 
README.qemu: Update to match current architecture support

The README is out of date, update to add qemuriscv64 and lower
the importance of powerpc/mips.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agolibpcre: remove recipe
Peter Marko [Tue, 16 Jun 2026 19:49:58 +0000 (21:49 +0200)] 
libpcre: remove recipe

libpcre is obsolete project replaced by libpcre2.
It was not updated for last 5 years.
There is no consumer of this recipe in oe-core anymore.

It will be moved to meta-openembedded until all consumers migrate to
libpcre2 there, too.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agowget: remove pcre packageconfig option
Peter Marko [Wed, 17 Jun 2026 17:31:26 +0000 (19:31 +0200)] 
wget: remove pcre packageconfig option

libpcre is obsolete project replaced by libpcre2.
Also libpcre2 is the current default packageconfig option.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoslang: disable pcre packageconfig by default
Peter Marko [Wed, 17 Jun 2026 17:31:27 +0000 (19:31 +0200)] 
slang: disable pcre packageconfig by default

ibpcre is obsolete project replaced by libpcre2.
It is being removed from oe-core.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agorecipetool: remove handling of libpcre
Peter Marko [Tue, 16 Jun 2026 19:49:59 +0000 (21:49 +0200)] 
recipetool: remove handling of libpcre

libpcre recipe was removed from oe-core.
No new project should use obsolete dependencies.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agomesa: upgrade 26.0.6 -> 26.1.2
Wang Mingyu [Tue, 16 Jun 2026 10:17:24 +0000 (18:17 +0800)] 
mesa: upgrade 26.0.6 -> 26.1.2

add patches to fix compilation with GCC < 13

Add two patches to fix build failures when using older GCC:
- Fix typed enum syntax not supported by GCC 11.
- Fix variable declaration after case label not allowed by GCC 10.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoinstall-buildtools: auto-discover environment setup script via glob
Jaipaul Cheernam [Tue, 16 Jun 2026 10:57:34 +0000 (12:57 +0200)] 
install-buildtools: auto-discover environment setup script via glob

The environment setup script installed by a buildtools tarball is named
environment-setup-<arch>-<sdk-name>-linux. The script previously hardcoded
"pokysdk" for this component, so any distro that ships buildtools under a
different SDK name gets a FileNotFoundError after an otherwise successful
install.

Use glob.glob() to discover the environment setup script by pattern
matching on environment-setup-<arch>-*-linux in the install directory.
Since a buildtools install should produce exactly one such script, error
out if zero or more than one match is found.

Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoless: clean up recipe
Ross Burton [Tue, 16 Jun 2026 13:12:34 +0000 (14:12 +0100)] 
less: clean up recipe

The previous upgrade[1] cleaned up the do_install() task but it is now
identical to the task provided by autotools.bbclass so we can remove it.

Whilst here, remove redundant whitespace from EXTRA_OEMAKE and use -C
instead of cd in do_compile_ptest().

[1] oe-core c057b662a0a ("less: upgrade 692 -> 704")

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoghostscript: upgrade 10.07.0 -> 10.07.1
Wang Mingyu [Tue, 16 Jun 2026 12:59:19 +0000 (13:59 +0100)] 
ghostscript: upgrade 10.07.0 -> 10.07.1

out-of-tree.patch refreshed for 10.07.1.
[ link updated to new ticket - RB ]

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agolibinput: fix CVE-2026-50292
Omkar Patil [Tue, 16 Jun 2026 12:41:49 +0000 (18:11 +0530)] 
libinput: fix CVE-2026-50292

In libinput before 1.30.4 and 1.31.x before 1.31.3,
libinput-device-group unescaped phys output can inject
udev properties leading to arbitrary root code execution

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2026-50292]

Signed-off-by: Omkar Patil <OmkarAbaji.Patil@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agovex: drop obsolete conflict check with cve-check class
Peter Marko [Tue, 16 Jun 2026 19:23:18 +0000 (21:23 +0200)] 
vex: drop obsolete conflict check with cve-check class

cve-check class was removed, so this check is obsolete.

>From commit message introducing vex class it's not clear why this check
is present, but presumably to not extend the cve status multiple times.
Thas is no longer possible since commit
45e18f4270d084d81c21b1e5a4a601ce975d8a77 introduced sanity check to
prevent that from happening.
Therefore it's also not necessary to rewrite this check to new
sbom-cve-check(-recipe) classes.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoclang/llvm: Upgrade to 22.1.8 release
Sunil Dora [Tue, 16 Jun 2026 18:49:00 +0000 (11:49 -0700)] 
clang/llvm: Upgrade to 22.1.8 release

https://discourse.llvm.org/t/llvm-22-1-8-released/91084

Brings following fixes:
ca7933e47d3a [libc++] Disable mistakenly enabled `optional<T&>` constructors for `optional<T>` (#194446)
208ef916cf20 [WebAssembly] narrow instructions use signed saturation (#201798)
e80beda6e255 [VPlan] Account for any-of costs in legacy cost model
3397c37d5d31 Inline stack probes immediately after `allocateStack` in `eliminateCallFramePseudoInstr` (#195456)
1f5aee55a3fc [DAG] Narrow vselect mask to vXi1 in foldToMaskedStore (#201609)
070e505ce21d [LLD][ELF] Add missing initialization of Symbol `used` member.
761b9134dd9b [BPF] treat compiler fence as codegen no-op (#196734)
724301d98c6e Fix "Cannot select" crash on bitcast between f64 and int vector types (#201509)
60c18c6aeaed [CMake][Release] Use llvm-bitcode-strip on Darwin for build with -ffat-lto-objects (#200764)
b65aa9b5ea8d [Clang] Profile the NNS of UnresolvedUsingType and CXXThisType correctly in concept hashing (#199617)
b4fe3880d09b Bump version to 22.1.8

Signed-off-by: Sunil Dora <sunilkumar.dora@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agostrace: remove skip-bpf.patch
Alexander Kanavin [Tue, 16 Jun 2026 19:16:26 +0000 (21:16 +0200)] 
strace: remove skip-bpf.patch

Issue was resolved in https://github.com/strace/strace/commit/982e5ff96a670473187ccdf6e2d8ddb3c40c82e1

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agovirglrenderer: upgrade 1.2.0 -> 1.3.0
Alexander Kanavin [Tue, 16 Jun 2026 19:16:25 +0000 (21:16 +0200)] 
virglrenderer: upgrade 1.2.0 -> 1.3.0

Drop two configurations options removed upstream.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agotcf-agent: upgrade 1.9.0 -> 1.11.0
Alexander Kanavin [Tue, 16 Jun 2026 19:16:24 +0000 (21:16 +0200)] 
tcf-agent: upgrade 1.9.0 -> 1.11.0

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agopython3-dtc: upgrade 1.7.2 -> 1.8.1
Alexander Kanavin [Tue, 16 Jun 2026 19:16:23 +0000 (21:16 +0200)] 
python3-dtc: upgrade 1.7.2 -> 1.8.1

Switch to python_mesonpy.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoppp: upgrade 2.5.2 -> 2.5.3
Alexander Kanavin [Tue, 16 Jun 2026 19:16:22 +0000 (21:16 +0200)] 
ppp: upgrade 2.5.2 -> 2.5.3

[RP: Tweak to ensure SUMMARY changes were the correct lines]
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoperl: upgrade 5.42.0 -> 5.42.2
Alexander Kanavin [Tue, 16 Jun 2026 19:16:21 +0000 (21:16 +0200)] 
perl: upgrade 5.42.0 -> 5.42.2

Add a patch to perlcross to support building this perl
version (perlcross is sluggish to support new perl releases
lately).

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoneard: upgrade 0.19 -> 0.20
Alexander Kanavin [Tue, 16 Jun 2026 19:16:20 +0000 (21:16 +0200)] 
neard: upgrade 0.19 -> 0.20

Drop the systemduserunitdir option as it's removed upstream:
https://github.com/linux-nfc/neard/commit/80e112f0f86b9a7296955e77822de4cc75808860

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoltp: upgrade 20260130 -> 20260529
Alexander Kanavin [Tue, 16 Jun 2026 19:16:19 +0000 (21:16 +0200)] 
ltp: upgrade 20260130 -> 20260529

Drop 0001-ltp-fix-build-failure-with-glibc-2.43.patch
as issue is resolved upstream.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agolibfyaml: upgrade 0.9.4 -> 0.9.6
Alexander Kanavin [Tue, 16 Jun 2026 19:16:18 +0000 (21:16 +0200)] 
libfyaml: upgrade 0.9.4 -> 0.9.6

Add backports to address 32bit/musl fails.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agolibcap-ng: upgrade 0.9.1 -> 0.9.3
Alexander Kanavin [Tue, 16 Jun 2026 19:16:17 +0000 (21:16 +0200)] 
libcap-ng: upgrade 0.9.1 -> 0.9.3

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoigt-gpu-tools: upgrade 2.3 -> 2.4
Alexander Kanavin [Tue, 16 Jun 2026 19:16:16 +0000 (21:16 +0200)] 
igt-gpu-tools: upgrade 2.3 -> 2.4

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agojansson: add a recipe from meta-oe
Alexander Kanavin [Tue, 16 Jun 2026 19:16:15 +0000 (21:16 +0200)] 
jansson: add a recipe from meta-oe

This is a new hard dependency of igt-gpu-tools.

Adjust:
update to latest version
correct CVE_CHECK_IGNORE -> CVE_STATUS

License-Update: dtoa license used for dtoa.c per https://github.com/akheron/jansson/commit/2297a2e320ebecc6dc98f7034a2f38509ad1d7f5

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agodtc: upgrade 1.7.2 -> 1.8.1
Alexander Kanavin [Tue, 16 Jun 2026 19:16:14 +0000 (21:16 +0200)] 
dtc: upgrade 1.7.2 -> 1.8.1

License-Update: typo fix

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agowhich: upgrade 2.23 -> 2.25
Alexander Kanavin [Tue, 16 Jun 2026 19:16:13 +0000 (21:16 +0200)] 
which: upgrade 2.23 -> 2.25

License-Update: copyright years

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agopython3-shacl2code: upgrade 1.0.1 -> 1.1.0
Alexander Kanavin [Tue, 16 Jun 2026 19:16:12 +0000 (21:16 +0200)] 
python3-shacl2code: upgrade 1.0.1 -> 1.1.0

Add a patch to python3-spdx-python-model to support this release.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agonettle: upgrade 3.10.2 -> 4.0
Alexander Kanavin [Tue, 16 Jun 2026 19:16:11 +0000 (21:16 +0200)] 
nettle: upgrade 3.10.2 -> 4.0

License-Update: formatting

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agowget: disable NTLM support
Alexander Kanavin [Tue, 16 Jun 2026 19:16:10 +0000 (21:16 +0200)] 
wget: disable NTLM support

This is long-obsolete, relies on outdated, easly breakable crypto [1],
and no longer compiles with latest nettle release.

[1] https://en.wikipedia.org/wiki/NTLM

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agominicom: upgrade 2.10 -> 2.11.1
Alexander Kanavin [Tue, 16 Jun 2026 19:16:09 +0000 (21:16 +0200)] 
minicom: upgrade 2.10 -> 2.11.1

License-Update: removed old vcs lines

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agolibxkbcommon: upgrade 1.13.1 -> 1.13.2
Alexander Kanavin [Tue, 16 Jun 2026 19:16:08 +0000 (21:16 +0200)] 
libxkbcommon: upgrade 1.13.1 -> 1.13.2

Backport a patch to address no-x11 failures.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agolibslirp: upgrade 4.9.1 -> 4.9.3
Alexander Kanavin [Tue, 16 Jun 2026 19:16:07 +0000 (21:16 +0200)] 
libslirp: upgrade 4.9.1 -> 4.9.3

License-Update: license moved to a separate file
https://gitlab.com/qemu-project/libslirp/-/commit/d6cfac6d060d57c0e38a9c61157eaf6962b6c257

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agolibmd: upgrade 1.1.0 -> 1.2.0
Alexander Kanavin [Tue, 16 Jun 2026 19:16:06 +0000 (21:16 +0200)] 
libmd: upgrade 1.1.0 -> 1.2.0

License-Update: formatting, copyright years, additional files under bsd-2-clause

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agovulkan-utility-libraries: upgrade 1.4.341.0 -> 1.4.350.0
Alexander Kanavin [Tue, 16 Jun 2026 19:16:04 +0000 (21:16 +0200)] 
vulkan-utility-libraries: upgrade 1.4.341.0 -> 1.4.350.0

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agovulkan-loader: upgrade 1.4.341.0 -> 1.4.350.0
Alexander Kanavin [Tue, 16 Jun 2026 19:16:03 +0000 (21:16 +0200)] 
vulkan-loader: upgrade 1.4.341.0 -> 1.4.350.0

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agovulkan-tools: upgrade 1.4.341.0 -> 1.4.350.0
Alexander Kanavin [Tue, 16 Jun 2026 19:16:02 +0000 (21:16 +0200)] 
vulkan-tools: upgrade 1.4.341.0 -> 1.4.350.0

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agospirv-tools: upgrade 1.4.341.0 -> 1.4.350.0
Alexander Kanavin [Tue, 16 Jun 2026 19:16:01 +0000 (21:16 +0200)] 
spirv-tools: upgrade 1.4.341.0 -> 1.4.350.0

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agovulkan-validation-layers: upgrade 1.4.341.0 -> 1.4.350.0
Alexander Kanavin [Tue, 16 Jun 2026 19:16:00 +0000 (21:16 +0200)] 
vulkan-validation-layers: upgrade 1.4.341.0 -> 1.4.350.0

Use UPDATE_DEPS=OFF as otherwise dependencies will be pulled from the network in do_configure.

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoglslang: upgrade 1.4.341.0 -> 1.4.350.0
Alexander Kanavin [Tue, 16 Jun 2026 19:15:59 +0000 (21:15 +0200)] 
glslang: upgrade 1.4.341.0 -> 1.4.350.0

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agogstreamer1.0: upgrade 1.28.2 -> 1.28.4 (the remaining pieces)
Alexander Kanavin [Tue, 16 Jun 2026 19:15:58 +0000 (21:15 +0200)] 
gstreamer1.0: upgrade 1.28.2 -> 1.28.4 (the remaining pieces)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agogstreamer1.0: disable an intermittently failing test
Alexander Kanavin [Tue, 16 Jun 2026 19:15:57 +0000 (21:15 +0200)] 
gstreamer1.0: disable an intermittently failing test

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoalsa-ucm-conf: remove stale comment
Nicolas Dechesne [Tue, 16 Jun 2026 16:49:59 +0000 (18:49 +0200)] 
alsa-ucm-conf: remove stale comment

The "Something went wrong at upstream tarballing" comment was added in
commit 3b69f6c450 ("alsa-ucm-conf: upgrade 1.2.4 -> 1.2.5") to flag a
one-off issue with that release tarball. It has since been carried
forward through every upgrade despite no longer being relevant, so
remove it.

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@oss.qualcomm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
6 weeks agoalsa-ucm-conf: upgrade 1.2.15.3 -> 1.2.16.1
Nicolas Dechesne [Tue, 16 Jun 2026 16:49:58 +0000 (18:49 +0200)] 
alsa-ucm-conf: upgrade 1.2.15.3 -> 1.2.16.1

All local backported patches are now part of this release, so drop them.

Changelog: https://www.alsa-project.org/wiki/Changes_v1.2.15.3_v1.2.16
Changelog: https://www.alsa-project.org/wiki/Changes_v1.2.16_v1.2.16.1

Signed-off-by: Nicolas Dechesne <nicolas.dechesne@oss.qualcomm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>