summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* influxdb: Do not skip it anymoreKhem Raj2025-07-061-1/+0
| | | | | | The gomod fetcher has all the needed modules in SRC_URI now Signed-off-by: Khem Raj <raj.khem@gmail.com>
* influxdb: Do not skip it anymoreChristian Lindeberg2025-07-061-0/+1
| | | | | | | The network access during compile task has been resolved now. Change-Id: Id7a8510ae1095a2430d26015bdd6cc54b633781f Signed-off-by: Khem Raj <raj.khem@gmail.com>
* influxdb: Use GO_SRCURI_DESTSUFFIX in SRC_URIChristian Lindeberg2025-07-061-1/+1
| | | | | | | | Use the GO_SRCURI_DESTSUFFIX convenience variable for the Go main module in the SRC_URI variable. Signed-off-by: Christian Lindeberg <christian.lindeberg@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* influxdb: remove S in recipes that fetch from git via setting ↵Alper Ak2025-07-061-3/+1
| | | | | | | | | | | | | BB_GIT_DEFAULT_DESTSUFFIX Removing all the S = ${WORKDIR}/git assignments works because BB_GIT_DEFAULT_DESTSUFFIX is set to match S from bitbake.conf (which itself is set to match typical tarball releases). ERROR: influxdb-1.8.10-r0 do_unpack: Recipes that set S = "${WORKDIR}/git" or S = "${UNPACKDIR}/git" should remove that assignment, as S set by bitbake.conf in oe-core now works. Signed-off-by: Alper Ak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* influxdb: Use go module fetcherChristian Lindeberg2025-07-063-24/+458
| | | | | | | | | | | Use the go module fetcher instead of allowing network access during the compile task. Apply patch to replace github.com/pkg/term with github.com/kraj/term unconditionally to avoid conditional module dependencies. Reorder variables according to the recipe style guide. Signed-off-by: Christian Lindeberg <christian.lindeberg@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pstack: Do not define redundant SKhem Raj2025-07-062-4/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-cmd2: Upgrade 2.6.2 -> 2.7.0Leon Anavi2025-07-041-1/+2
| | | | | | | | | | Upgrade to release 2.7.0: - Integrated rich-argparse with cmd2's default argparse help formatter (Cmd2HelpFormatter). Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-rich-argparse: Add recipeLeon Anavi2025-07-041-0/+16
| | | | | | | | | | Add recipe for release 1.7.1: - Fix TypeError on nightly builds (Python 3.14.0a7+) due to new HelpFormatter arguments. The console parameter is now keyword-only. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-progress: Upgrade 1.6 -> 1.6.1Leon Anavi2025-07-041-2/+2
| | | | | | | | | | | | | | | Upgrade to release 1.6.1: - Migrate setup.py to pyproject.toml Fixes: WARNING: python3-progress-1.6.1-r0 do_check_backend: QA Issue: inherits setuptools3 but has pyproject.toml with setuptools.build_meta, use the correct class [pep517-backend] Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-dateparser: Upgrade 1.2.1 -> 1.2.2Leon Anavi2025-07-041-1/+1
| | | | | | | | | | | | Upgrade to release 1.2.2: - Handle the Russian preposition "c" - Fix weekday search - Add Python 3.14 support - Cache timezone offsets to improve import time Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dracut: add 'git' recipe with DEFAULT_PREFERENCE = -1Koen Kooi2025-07-041-0/+106
| | | | | | | | | | | | | | | | | | This updates to a revision that has PR1260, which uses ELF entries to get dependencies instead of (cross-)ldd. This makes it useable as a tool to generate initramfses using cross tools, in e.g. do_rootfs. Since this is not using a tagged release and changes the base logic, add it as a non-default option using DEFAULT_PREFERENCE = -1. Extend to native(-sdk) to accomplish just that. The host-built initramfs (using a custom bbclass) as well as the on-target built initramfs have been tested on qrb2210-rb1-core-kit and qcs6490-rb3gen-core-kit machines and work as intented. Signed-off-by: Koen Kooi <koen.kooi@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gutenprint: fix a build race-conditionYoann Congal2025-07-042-1/+63
| | | | | | | | | | | | | | | | Gutenprint install hooks run in parallel but depend on each other. This is a race condition and might trigger a build failure (e.g on AB [0]): | chmod 700 $WORKDIR/image/usr/libexec/cups/backend/backend_gutenprint | chmod: cannot access '$WORKDIR/image/usr/libexec/cups/backend/backend_gutenprint': Not a directory | make[5]: *** [Makefile:2166: install-exec-hook] Error 1 Fixes this by adding an explicit dependency between the dependent targets. [0]: https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/46/steps/33/logs/stdio Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pstack: Disable build on riscvKhem Raj2025-07-031-0/+3
| | | | | | It is not yet ported to riscv architecture Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nilfs-utils: Respect usrmege when defining base_sbindirKhem Raj2025-07-032-1/+40
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Michael Estner <michaelestner@web.de>
* imsettings: Disable two warnings with clangKhem Raj2025-07-031-0/+1
| | | | | | | clang is fussy and this package is old. It should perhaps be removed but this keeps it going so let it be. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pandas: Loosen the search path for generated file sparse.pyx.cKhem Raj2025-07-031-1/+1
| | | | | | | Hardcoded path works only when target is x86_64, but fails for other architectures, loosen the search path regexp Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pstack: Always use gcc to compile itKhem Raj2025-07-031-0/+2
| | | | | | | | | | Fails to build/compile with clang TMPDIR/work/cortexa15t2hf-neon-yoe-linux-gnueabi/pstack/2.11/sources/pstack-2.11/libpstack/archreg.h:94:1: error: member access into incomplete type 'const CoreRegisters' (aka 'const pstack::Elf::user_regs_struct') 94 | REGMAP(0, regs[0]) | ^ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-types-psutil: Use pep517-backendKhem Raj2025-07-031-1/+1
| | | | | | | | Fixes QA Issue: inherits setuptools3 but has pyproject.toml with setuptools.build_meta, use the correct class [pep517-backend] Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.4.8 -> 8.4.10Jason Schonberg2025-07-031-1/+1
| | | | | | | | | | | | | | | This is a security update. There are fixes for memory leaks, segfaults and CVEs. CVE-2025-1735 CVE-2025-1220 CVE-2025-6491 Changelog: https://www.php.net/ChangeLog-8.php#8.4.10 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libftdi: Backport patches to support builds with CMake 4+Moritz Haase2025-07-034-0/+147
| | | | | | | | | | | | | | The commits have been merged upstream, but there hasn't been a release containing them yet (last upstream release was years ago). Pulling them in unblocks builds with CMake 4+ in the context of a patch series bumping CMake to 4.0.3 in openembedded-core (see [0]). [0]: https://lists.openembedded.org/g/openembedded-core/topic/113946576 CC: antonin.godard@bootlin.com CC: alex.kanavin@gmail.com Signed-off-by: Moritz Haase <Moritz.Haase@bmw.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* udisks2: Hardening measure of CVE-2025-6019Changqing Li2025-07-022-0/+52
| | | | | | | | | | | | Refer [1], CVE-2025-6019 is strongly related to udisk daemon, and this is a hardening measure related to this. [1] https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt [2] https://security-tracker.debian.org/tracker/CVE-2025-6019 [3] https://ubuntu.com/blog/udisks-libblockdev-lpe-vulnerability-fixes-available Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libblockdev: fix CVE-2025-6019Changqing Li2025-07-022-0/+32
| | | | | | | | | | | | | | | | | | | | | | CVE-2025-6019: A Local Privilege Escalation (LPE) vulnerability was found in libblockdev. Generally, the "allow_active" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. Normally, udisks mounts user-provided filesystem images with security flags like nosuid and nodev to prevent privilege escalation. However, a local attacker can create a specially crafted XFS image containing a SUID-root shell, then trick udisks into resizing it. This mounts their malicious filesystem with root privileges, allowing them to execute their SUID-root shell and gain complete control of the system. Refer: https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: fix rootfs file differenceJinfeng Wang2025-07-022-0/+32
| | | | | | | | Rootfs file differs with the same project configure, add preliminary setting to avoid this. Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libusbgx: exit with failure code when no UDC is detectedErnest Van Hoecke2025-07-021-1/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The systemd target `usb-gadget.target` is triggered by udev when a UDC first comes up. It can happen that by the time gadget-start runs, this UDC has been removed from the system again. Have the gadget-start script exit with status 1 when `ls /sys/class/udc` returns nothing. Causing a service failure when no UDC is detected and no default was given, allows the service to be restarted by a udev rule calling the service (and not the target since those are not reentrant) directly. On its own this patch will not do much. For example, we saw such a situation using the DWC3 USB controller and usb-conn-gpio kernel modules as loadables. By the time of the DWC3 init, udev was active, and during init DWC3 started the USB OTG port in device mode. If a pen drive was plugged in at boot, it would quickly switch to host mode right after initialisation, emitting another udev event for the removal of the UDC. The systemd target as thus reached, but by the time gadget-start ran, the UDC was gone. dwc3 init usb-conn-gpio role switch │ │ ▼ ▼ udev: add UDC─┐ udev: del UDC─────►/sys/class/udc empty │ │ │ x │ │ │ ▼ └────────────►usb-gadget.target─────►gadget-start Signed-off-by: Ernest Van Hoecke <ernest.vanhoecke@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jq: Add tzdata to ptest rdepsKhem Raj2025-07-021-0/+2
| | | | | | This is needed for some ptests to pass Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xfce4-screenshooter: Fix build for wayland systemsKhem Raj2025-07-021-2/+6
| | | | | | | | Ensure that wayland-scanner is added to dependencies Create protocols directory as well where the .c files generated during build are emitted into. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: upgrade 4.5.3 -> 4.5.4Jason Schonberg2025-07-021-1/+1
| | | | | | | | | This version brings a fix for CVE-2024-45624 Changlog: https://www.pgpool.net/docs/latest/en/html/release-4-5-4.html Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libp11-native: fix engine installDenis OSTERLAND-HEIM2025-07-021-0/+1
| | | | | | | | | | openssl-native is compiled with a engine path /not/builtin and the config file provides the actual path. The configure script looks up this not working path. To make it work, provide the runtime path via configure argument. Signed-off-by: Denis OSTERLAND-HEIM <denis.osterland@diehl.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* hwloc: upgrade 2.9.3 -> 2.12.1Liu Yiding2025-07-021-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Version 2.12.1 -------------- * Add hwloc-calc's --default-nodes option to hwloc-bind and hwloc-info. * Improve the --best-memattr "default" fallback, try to use "default" memory nodes, and add verbose messages and warnings if some performance info are incomplete or missing. Thanks to Antoine Morvan for the report. * Fix CPU and memory binding on different locations, thanks to Antoine Morvan for the report. * Add HWLOC_LOCAL_NUMANODE_FLAG_INTERSECT_LOCALITY and enable it by default in hwloc-calc --local-memory for finding local NUMA nodes that do not exactly match input locations. Thanks to Antoine Morvan for the report. * Fix a possible crash in the x86 backend when Qemu is configured to expose multicore/thread CPUs that are actually single-core/thread. Thanks to Georg Pfuetzenreuter. Version 2.12.0 -------------- * Add hwloc_topology_get_default_nodeset() for the set of default NUMA nodes. - hwloc-calc now has --default-nodes option. * Rework oneAPI LevelZero support to use zesInit() and avoid the need to set ZES_ENABLE_SYSMAN=1 in the environment. - zesDriverGetDeviceByUuidExp() is now required in the L0 runtime. - ZES/Sysman variants were added in hwloc/levelzero.h to specifically handle ZES/Sysman device handles. * Fix the locality of AMD GPU partitions, thanks to Edgar Leon for reporting and debugging the issue. * Better detect Cray Slingshot NICs, thanks to Edgar Leon. * Add support for Die objects and Module groups on Windows. * Only filter-out Dies that are identical to their Packages when it applies to all Dies. * Improve hwloc-calc to handle CPU-less NUMA nodes or platforms with heterogeneous memory without requiring --nodeset-output. * hwloc-calc now accepts counting/listing cpukinds and memory tiers with -N and -I cpukind/memorytier. * The systemd-dbus-api output of hwloc-calc has changed, and --nodeset-output-format was added, to support NUMA node outputs. Thanks to Pierre Neyron. * Update NVLink bandwidth and CUDA capabilities up to NVIDIA Blackwell. * Fix some NUMA syscalls on Linux for platforms with old libc headers. * Some minor fixes in distances. Version 2.11.2 -------------- * Add missing CPU info attrs on aarch64 on Linux. * Use ACPI CPPC on Linux to get better information about cpukinds, at least on AMD CPUs. * Fix crash when manipulating cpukinds after topology duplication, thanks to Hadrien Grasland for the report. * Fix missing input target checks in memattr functions, thanks to Hadrien Grasland for the report. * Fix a memory leak when ignoring NUMA distances on FreeBSD. * Fix build failure on old Linux distributions without accessat(). * Fix non-Windows importing of XML topologies and CPUID dumps exported on Windows. * hwloc-calc --cpuset-output-format systemd-dbus-api now allows to generate AllowedCPUs information for systemd slices. See the hwloc-calc manpage for examples. Thanks to Pierre Neyron. * Some fixes in manpage EXAMPLES and split them into subsections. Version 2.11.1 -------------- * Fix bash completions, thanks Tavis Rudd. Version 2.11.0 -------------- * API + Add HWLOC_MEMBIND_WEIGHTED_INTERLEAVE memory binding policy on Linux 6.9+. Thanks to Honggyu Kim for the patch. - weighted_interleave_membind is added to membind support bits. - The "weighted" policy is added to the hwloc-bind tool. + Add hwloc_obj_set_subtype(). Thanks to Hadrien Grasland for the report. * GPU support + Don't hide the GPU NUMA node on NVIDIA Grace Hopper. + Get Intel GPU OpenCL device locality. + Add bandwidths between subdevices in the LevelZero XeLinkBandwidth matrix. + Fix PCI Gen4+ link speed of NVIDIA GPU obtained from NVML, thanks to Akram Sbaih for the report. * Windows support + Fix Windows support when UNICODE is enabled, several hwloc features were missing, thanks to Martin for the report. + Fix the enabling of CUDA in Windows CMake build, Thanks to Moritz Kreutzer for the patch. + Fix CUDA/OpenCL test source path in Windows CMake. * Tools + Option --best-memattr may now return multiple nodes. Additional configuration flags may be given to tweak its behavior. + hwloc-info has a new --get-attr option to get a single attribute. + hwloc-info now supports "levels", "support" and "topology" special keywords for backward compatibility for hwloc 3.0. + The --taskset command-line option is superseded by the new --cpuset-output-format which also allows to export as list. + hwloc-calc may now import bitmasks described as a list of bits with the new "--cpuset-input-format list". * Misc + The MemoryTiersNr info attribute in the root object now says how many memory tiers were built. Thanks to Antoine Morvan for the report. + Fix the management of infinite cpusets in the bitmap printf/sscanf API as well as in command-line tools. + Add section "Compiling software on top of hwloc's C API" in the documentation with examples for GNU Make and CMake, thanks to Florent Pruvost for the help. Version 2.10.0 -------------- * Heterogeneous Memory core improvements + Better heuristics to identify the subtype of memory such as HBM, DRAM, NVM, CXL-DRAM, etc. + Build memory tiers, i.e. sets of NUMA nodes with the same subtype and similar performance. - NUMA node tier ranks are exposed in the new MemoryTier info attribute (starts from 0 for highest bandwidth tier).. + See the new Heterogeneous Memory section in the documentation. * API + Add hwloc_topology_free_group_object() to discard a Group created by hwloc_topology_alloc_group_object(). * Linux backend + Fix cpukinds on NVIDIA Grace to report identical cores even if they actually have very small frequency differences. Thanks to John C. Linford for the report. + Add CXLDevice attributes to CXL DAX objects and NUMA nodes to show which PCI device implements which window. + Ignore buggy memory-side caches and memory attributes when fake NUMA emulation is enabled on the Linux kernel command-line. + Add more info attributes in MemoryModule Misc objects, thanks to Zubiao Xiong for the patch. + Get CPUModel and CPUFamily info attributes on LoongArch platforms. * x86 backend + Add support for new AMD CPUID leaf 0x80000026 for better detection of Core Complex and Die on Zen4 processors. + Improve Zhaoxin CPU topology detection. * Tools + Input locations and many command-line options (e.g. hwloc-calc -I -N -H, lstopo --only) now accept filters such as "NUMA[HBM]" so that only objects are that type and subtype are considered. - NUMA[tier=1] is also accepted for selecting NUMA nodes depending on their MemoryTier info attribute. + Add --object-output to hwloc-calc to report the type as a prefix to object indexes, e.g. Core:2 instead of 2 in the output of -I. + hwloc-info --ancestor and --descendants now accepts kinds of objects instead of single types. - The new --first option only shows the first matching object. + Add --children-of-pid to hwloc-ps to show a hierarchy of processes. Thanks to Antoine Morvan for the suggestion. + Add --misc-from to lstopo to add Misc objects described in a file. - To be combined with the new hwloc-ps --lstopo-misc for a customizable lstopo --top replacement. * Misc + lstopo may now configure the layout of memory object placed above, for instance with --children-order memory:above:vert. + Fix XML import from memory or stdin when using libxml2 2.12. + Fix installation failures when configuring with --target, thanks to Clement Foyer for the patch. + Fix support for 128bit pointer architectures. + Remove Netloc. Changelog: https://github.com/open-mpi/hwloc/blob/v2.12/NEWS Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* signing.bbclass: make PEM loading compatible with OpenSC 0.26.0Enrico Jörns2025-07-021-12/+10
| | | | | | | | | | | | | | | | | | | | | | With https://github.com/OpenSC/OpenSC/pull/3174 which is part of 0.26.0, OpenSC does not support reading the (DER-converted) object data from stdin anymore. However, OpenSC/pkcs11-tool also supports reading PEM files directly. This we can use for simply replacing and simplifying the stdin piping in signing_import_cert_from_pem(). Only for password-protected files we still have to use OpenSSL for conversion, since OpenSC/pkcs11-tool currently doesn't have a mechanism for providing passwords. For these cases, we store the converted PEM into a simple temporary file. This handling is sufficient, since SoftHSM import should be used for example keys only and SoftHSM also doesn't protect the keys in any way. Keys which actually need to be protected are stored in HSMs and accessed via their PKCS#11 URIs. Signed-off-by: Enrico Jörns <ejo@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pychromecast: Allow max version to 0.46.1 for python3-wheelKhem Raj2025-07-012-0/+24
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gtkwave: Add libtirpc to dependsKhem Raj2025-07-011-0/+1
| | | | | | It was missing as the recipe is using --with-tirpc Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gpicview: add recipeHiago De Franco2025-07-011-0/+22
| | | | | | | | GPicView is a simple and fast GTK+ image viewer for X which is lightweight, desktop independent and has minimal lib dependency. Signed-off-by: Hiago De Franco <hiago.franco@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-m2crypto: Use qq format when time_t is 64bit on 32bit systemMingli Yu2025-07-012-0/+81
| | | | | | | | | | | | | | | | | | | | | | | | | Fixes: # python3 -munittest -v test_ssl.MiscSSLClientTestCase.test_server_simple_timeouts test_server_simple_timeouts (test_ssl.MiscSSLClientTestCase.test_server_simple_timeouts) ... ERROR ====================================================================== ERROR: test_server_simple_timeouts (test_ssl.MiscSSLClientTestCase.test_server_simple_timeouts) ---------------------------------------------------------------------- Traceback (most recent call last): File "/opt/python3-m2crypto/tests/test_ssl.py", line 474, in test_server_simple_timeouts s.set_socket_read_timeout(SSL.timeout()) ~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/M2Crypto/SSL/Connection.py", line 680, in set_socket_read_timeout self.socket.setsockopt( ~~~~~~~~~~~~~~~~~~~~~~^ socket.SOL_SOCKET, socket.SO_RCVTIMEO, timeo.pack() ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ) ^ OSError: [Errno 22] Invalid argument Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pybind11-json: support native buildYishai Jaffe2025-07-011-0/+2
| | | | | | | Add support for native build of python3-pybind11-json Signed-off-by: Yishai Jaffe <yishai1999@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* json-schema-validator: support native buildYishai Jaffe2025-07-011-0/+2
| | | | | | | Add support for native build of json-schema-validator Signed-off-by: Yishai Jaffe <yishai1999@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zeromq: support native buildYishai Jaffe2025-07-011-0/+2
| | | | | | | Add support for native build of zeromq Signed-off-by: Yishai Jaffe <yishai1999@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pstack: add recipeWen Yang2025-07-014-0/+108
| | | | | | | This recipe provides pstack for C/C++, Go, Rust, and Python. Signed-off-by: Wen Yang <wen.yang@linux.dev> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: Fix build after S moved into UNPACKDIRKhem Raj2025-07-011-7/+3
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Revert "nodejs: inherit qemu class conditionally"Alexander Kanavin2025-07-011-8/+6
| | | | | | | | | | | | | | | | Plenty of other recipes inherit qemu unconditionally, including some pretty foundational ones like python3, and they do not need this fix. I think something else is going on here, and that issue needs to be properly investigated. There's a request to provide steps to observe the issue, but the original patch author so far hasn't been able to reproduce it on demand: https://lists.openembedded.org/g/openembedded-devel/topic/113861973 This reverts commit b2a950a75b15c93f625bfe6514bc248c9310813f. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-icecream: Upgrade 2.1.4 -> 2.1.5Leon Anavi2025-06-301-1/+1
| | | | | | | | | | | | | | Upgrade to release 2.1.5: - Changed: Improved printing for variables of type str. - Fixed issues that affected the output of multiline strings and strings containing special characters such as escaped newlines and tabs. - Strings are now printed exactly as they are, faithfully representing their actual value. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-bitarray: Upgrade 3.4.2 -> 3.4.3Leon Anavi2025-06-301-1/+1
| | | | | | | | | | | | | | | | | | | Upgrade to release 3.4.3: - minor updates to documentation C-level: - simplify and speedup `extend_unicode01()` - customize `resize_lite()` - avoid unused code - use `PyTypeObject` for bitarray type object in `_util.c` to be consistent with `_bitarray.c` - add and improve comments to implementation of sparse bitarray compression - simplify `sc_count()` Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-cmd2: Upgrade 2.6.1 -> 2.6.2Leon Anavi2025-06-301-2/+2
| | | | | | | | | | | | | Upgrade to release 2.6.2: - Added explicit support for free-threaded versions of Python, starting with version 3.14 - Restored code to set a parser's prog value in the with_argparser decorator. This is to preserve backward compatibility in the cmd2 2.0 family. This functionality will be removed in cmd2 3.0.0. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* boinc-client: fix hostname reproducibilityYoann Congal2025-06-301-1/+4
| | | | | | | | The generated svn_version.h contains the hostname which makes it non-reproducible. Fix this by removing the hostname from the file. Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cppzmq: support native buildYishai Jaffe2025-06-291-0/+2
| | | | | | | Add support for native build of cppzmq Signed-off-by: Yishai Jaffe <yishai1999@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* signing.bbclass: remove signing_import_cert_chain_from_pemJohannes Schneider2025-06-281-29/+0
| | | | | | | | | | | | | | | With the now available set|get|has_ca functions to establish a CA link between roles during their import, the signing_import_cert_chain_from_pem can now be removed. As it had the shortcoming of dynamically creating roles, which are harder to handle then the manually/specifically setup CA roles. This effectively reverts: a825b853634 signing.bbclass: add certificate ca-chain handling Reviewed-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* signing.bbclass: add signing_extract_cert helpersJohannes Schneider2025-06-281-1/+25
| | | | | | | | | Add extract-cert wrapping helper functions, to easily extract certificates again that had been previously imported into the softhsm. Reviewed-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* signing.bbclass: add signing_get_intermediate_certsJohannes Schneider2025-06-281-0/+21
| | | | | | | | | | | | | | | | | | | | | Add a method that returns a list of intermediary CA roles. When using a complex PKI structure with for example "openssl cms", these roles can then be iterated over adding in turn a '-certificate'. Pseudo-code example: for intermediate in $(signing_get_intermediate_certs 'FooBaa'); do signing_extract_cert_pem $intermediate $intermediate.pem CMD+=" --certificate=$intermediate.pem" done The typical use-case would be adding these intermediate certificates to the CMS structure so that the relying party can build the chain from the signing leaf certificate to the locally stored trusted CA certificate. Reviewed-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* signing.bbclass: add get_root_certJohannes Schneider2025-06-281-0/+16
| | | | | | | | | | Add a helper method to retrieve the root CA certificate for a given role, by walking the chain that has been setup with signing_import_set_ca up to the last element - which is the root. Reviewed-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* signing.bbclass: add set|get|has_ca functionsJohannes Schneider2025-06-281-1/+49
| | | | | | | | | | | | | | | | Add a mechanism to establish a (metadata) link between roles and signer certificates, in the form of a new 'ca' variable. It must point from one role or cert to the signer certificate to preserve the leaf->intermediary-> root certificate relation. With this additional mechanism, it would be now possible to import a complex PKI tree of certificates and then later during usage of one role, reconstruct the certificate chain from the leaf, through multiple intermediary, and up to the root certificate. Reviewed-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>