summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* python3-lxml: upgrade 5.3.1 -> 5.3.2Wang Mingyu2025-04-101-1/+1
| | | | | | | | | | | | Changelog: * Binary wheels use libxml2 2.12.10 and libxslt 1.1.42. * Binary wheels for Windows use a patched libxml2 2.11.9 and libxslt 1.1.39. (From OE-Core rev: 9b10654668dc372fa0e57afe113fd82a89ebce15) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-flit-core: upgrade 3.11.0 -> 3.12.0Wang Mingyu2025-04-101-1/+1
| | | | | | | | (From OE-Core rev: 1063bb21317954c30a3dafbf24fad3349e9a2cbd) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-calver: upgrade 2025.04.01 -> 2025.04.02Wang Mingyu2025-04-101-1/+1
| | | | | | | | | | | | | Changelog: ============ - Update build backend - Support running tests from source distribution (From OE-Core rev: 0166cd80a538d3a326ff0593b9c8bebde1cdc561) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meson: upgrade 1.7.1 -> 1.7.2Wang Mingyu2025-04-102-6/+6
| | | | | | | | | | | 0001-Make-CPU-family-warnings-fatal.patch refreshed for 1.7.2 (From OE-Core rev: b8c15494900cdacfdcfa18526b8ad33cb9ce5ee3) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lighttpd: upgrade 1.4.78 -> 1.4.79Wang Mingyu2025-04-101-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== * [ci] update deps pkg names for lighttpd on Cygwin * [ci] MSYS detection kludge in tests/LightyTest.pm * [autotools] spelling Couldn't => Could not * [mod_openssl] revert SSL_CTX default cert assign * [mod_openssl] spelling in comment * [TLS] issue trace if unable to check/refresh cert * [ci] Cygwin Invoke-WebRequest -MaximumRetryCount 3 * [ci] Cygwin prefer D:\ drive * [ci] Cygwin remove redundant call to setup.exe * [core] set server.max-fds = 4096 if not specified * [core] clear Linux ambient capabilities, if any * [core] rename remove_pid_file() -> server_pid_file_remove() * [core] retry pidfile open on Linux * [doc] systemd lighttpd.service hardening * [doc] move TLS config to separate file tls.conf * [doc] systemd lighttpd.service hardening addition * [doc] systemd lighttpd*.socket activation examples * [core] default listen() backlog to SOMAXCONN * [ci] fix meson build execution selection (From OE-Core rev: 5066f75e7588a158111bedbf1ce9975e2d26c2c7) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* harfbuzz: upgrade 11.0.0 -> 11.0.1Wang Mingyu2025-04-101-1/+1
| | | | | | | | (From OE-Core rev: 6b5880eb73e62f1b4ae4b7ff90f33e14b35c88d4) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gawk: upgrade 5.3.1 -> 5.3.2Wang Mingyu2025-04-103-60/+5
| | | | | | | | | | | | | | 0001-Add-parameter-signatures-for-getenv-and-getopt.patch removed since it's included in 5.3.2 0001-configure.ac-re-enable-disabled-printf-features.patch refreshed for 5.3.2` (From OE-Core rev: a8773ae9d866063e0562589af44b90a89b5cd93c) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ell: upgrade 0.75 -> 0.76Wang Mingyu2025-04-101-1/+1
| | | | | | | | | | | Changelog: Fix issue with random scalar generation. (From OE-Core rev: 62bd49794d7654d3d111bff10bd40e812c05f2ee) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* lib: oe: Add cve_check to BBIMPORTSJoshua Watt2025-04-101-1/+2
| | | | | | | | | | | Adds cve_check.py to BBIMPORTS so the functions it exposes will be correctly scanned for dependencies in the dependency scanner (From OE-Core rev: 52ead33c6b6e2532c57b7b28b862ba38b575f9e3) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libjpeg-turbo: fix upstream release checkingRoss Burton2025-04-101-5/+2
| | | | | | | | | | | | | | New releases are no longer made to SourceForge and the GitHub releases are considered official according to https://libjpeg-turbo.org, so inherit github-releases and update the SRC_URI. This now reports that we need to upgrade to 3.1.0. (From OE-Core rev: e7e11ab30a40ba8862e62c4cc1a0af91ff93b6e5) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ovmf: fix CVE-2025-2295Hongxu Jia2025-04-102-0/+57
| | | | | | | | | | | | | | | | | | According to [1], EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service. Refer debian [2], backport a patch from edk2 [3] to fix CVE-2025-2295 [1] https://nvd.nist.gov/vuln/detail/CVE-2025-2295 [2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1100594 [3] https://github.com/tianocore/edk2/commit/17cdc512f02a2dfd1b9e24133da56fdda099abda (From OE-Core rev: 0f59dec939cf0d313b1b01b1e7bf10e059d9d0ac) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cve-update-nvd2-native: add workaround for json5 style listPeter Marko2025-04-101-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | NVD responses changed to an invalid json between: * April 5, 2025 at 3:03:44 AM GMT+2 * April 5, 2025 at 4:19:48 AM GMT+2 The last response is since then in format { "resultsPerPage": 625, "startIndex": 288000, "totalResults": 288625, "format": "NVD_CVE", "version": "2.0", "timestamp": "2025-04-07T07:17:17.534", "vulnerabilities": [ {...}, ... {...}, ] } Json does not allow trailing , in responses, that is json5 format. So cve-update-nvd2-native do_Fetch task fails with log backtrace ending: ... File: '/builds/ccp/meta-siemens/projects/ccp/../../poky/meta/recipes-core/meta/cve-update-nvd2-native.bb', lineno: 234, function: update_db_file 0230: if raw_data is None: 0231: # We haven't managed to download data 0232: return False 0233: *** 0234: data = json.loads(raw_data) 0235: 0236: index = data["startIndex"] 0237: total = data["totalResults"] 0238: per_page = data["resultsPerPage"] ... File: '/usr/lib/python3.11/json/decoder.py', lineno: 355, function: raw_decode 0351: """ 0352: try: 0353: obj, end = self.scan_once(s, idx) 0354: except StopIteration as err: *** 0355: raise JSONDecodeError("Expecting value", s, err.value) from None 0356: return obj, end Exception: json.decoder.JSONDecodeError: Expecting value: line 1 column 1442633 (char 1442632) ... There was no announcement about json format of API v2.0 by nvd. Also this happens only if whole database is queried (database update is fine, even when multiple pages as queried). And lastly it's only the cve list, all other lists inside are fine. So this looks like a bug in NVD 2.0 introduced with some update. Patch this with simple character deletion for now and let's monitor the situation and possibly switch to json5 in the future. Note that there is no native json5 support in python, we'd have to use one of external libraries for it. (From OE-Core rev: 6e526327f5c9e739ac7981e4a43a4ce53a908945) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* numactl: mark Fix-the-test-output-format.patch as InappropriateAlexander Kanavin2025-04-101-1/+1
| | | | | | | | (From OE-Core rev: 8df27ff912a25077222a02d2ca9d1252f1f15c26) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* apr: drop libtoolize_check.patchAlexander Kanavin2025-04-102-38/+0
| | | | | | | | | | | | It's not clear what the intent was: libtool executable is present in the native sysroot and can be used to obtain versions during build time. (From OE-Core rev: 9d16c45ed4caea9b0e3fe6e5dad983707dd10c65) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* avahi: mark initscript.patch as InappropriateAlexander Kanavin2025-04-101-1/+5
| | | | | | | | (From OE-Core rev: 1489c424a7a4728834d8253f81711ac0df25db9d) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vim: mark no-path-adjust.patch as InappropriateAlexander Kanavin2025-04-101-1/+1
| | | | | | | | (From OE-Core rev: ab08938dc2d5658930a92abc5b4cefe4b975e582) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gst-devtools: submit 0001-connect-has-a-different-signature-on-musl.patch ↵Alexander Kanavin2025-04-101-1/+1
| | | | | | | | | | upstream (From OE-Core rev: 1ca89ea00103523d8877eed5b71eec2ba824510a) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ifupdown: mark defn2-c-man-don-t-rely-on-dpkg-architecture-to-set-a.patch as ↵Alexander Kanavin2025-04-101-1/+1
| | | | | | | | | | Inappropriate (From OE-Core rev: 30eefe0adacc6a064a0958fc8f463a3331ad12fa) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mdadm: update 4.3 -> 4.4Alexander Kanavin2025-04-1014-320/+56
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This update has been tested with glibc/musl and gcc/clang in all four combinations. Drop patches: 0001-Use-CC-to-check-for-implicit-fallthrough-warning-sup.patch 0001-fix-gcc-8-format-truncation-warning.patch 0001-util.c-add-limits.h-include-for-NAME_MAX-definition.patch mdadm-3.3.2_x32_abi_time_t.patch (issue fixed upstream) 0001-include-libgen.h-for-basename-API.patch 0001-mdadm.h-Undefine-dprintf-before-redefining.patch (issue no longer occurs) 0001-mdadm-add-option-y-for-use-syslog-to-recive-event-re.patch (service file significantly rewritten, the need for the tweak should be reassessed) debian-no-Werror.patch (replaced with setting CWFLAGS to an empty string in the recipe; we already set correct flags via CC/CFLAGS, and upstream's only get in the way) (From OE-Core rev: 913312b5b544ce804656fe3a297e09bafb5838fc) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* mdadm: fetch from gitAlexander Kanavin2025-04-102-6/+10
| | | | | | | | | | | | | | | Upstream has released a new version (4.4) but not the tarball for it. Adjust one of the devtool selftests, as it requires that the recipe under test is using a tarball. Another selftest also needs to be tweaked to correctly clean up its modifications to that same recipe on test completion. (From OE-Core rev: de635a9bc0392689ff36b50e7f91572d3fbaac09) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* apt: remove 0001-Hide-fstatat64-and-prlimit64-defines-on-musl.patchAlexander Kanavin2025-04-102-49/+0
| | | | | | | | | | | | The recipe unconditionally disables seccomp, so the code isn't even compiled. If this needs to come back in the future please submit upstream first. (From OE-Core rev: 9d058504213f79979a7f1f59527172b71df95a71) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xserver-xorg: submit ↵Alexander Kanavin2025-04-101-2/+5
| | | | | | | | | | 0001-xf86pciBus.c-use-Intel-ddx-only-for-pre-gen4-hardwar.patch upstream (From OE-Core rev: 74da2ba88c6d2b88a68a3ad63b3603b82d7f4e03) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tcl: provide a description for shared library name fixup patchAlexander Kanavin2025-04-101-2/+8
| | | | | | | | (From OE-Core rev: 71bfc7e302ad66d989cb991b75dfcffdfa455987) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vulkan-samples: rewrite and submit reproducubility patch upstreamAlexander Kanavin2025-04-104-51/+32
| | | | | | | | | | | | At some point the problematic define ceased to be used anywhere, and so we can simply patch it out (and remove the associated option setting from the recipe). (From OE-Core rev: 4acbb1b92b9e51d6a741458d6cbd0c48ab55f6ca) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ca-certificates: submit sysroot patch upstream, drop default-sysroot.patchAlexander Kanavin2025-04-105-118/+49
| | | | | | | | | | | | | | | | | | | | ca-certificates/0002-update-ca-certificates-use-SYSROOT.patch was using a non-standard environment variable, and was replaced with a patch that adds a command line option (and then this was submitted upstream). ca-certificates recipe was tweaked accordingly, and nothing else in core or meta-oe is using update-ca-certificates. Drop default-sysroot.patch as the use case is unclear: sysroot is explicitly specified in all known invocations of update-ca-certificate, and if there's a place where it isn't, then update-ca-certificates will error out trying to write to /etc, and should be fixed to explicitly specify the sysroot. (From OE-Core rev: 90d9f0ba674d4fe8e9291f0513c13dff3775c545) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* elfutils: remove 0001-dso-link-change.patchAlexander Kanavin2025-04-102-50/+0
| | | | | | | | | | The original linking issues seem to be long gone. (From OE-Core rev: 71b56605f95d87f48a25bc42aa7f830c2ef298fc) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* elfutils: remove 0001-libasm-may-link-with-libbz2-if-found.patchAlexander Kanavin2025-04-102-40/+0
| | | | | | | | | | The original linking issues seem to be long gone. (From OE-Core rev: 16868477597125296c8618177cd4f61baacd878b) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* tcl8: mark pending patches as inappropriateAlexander Kanavin2025-04-103-3/+3
| | | | | | | | | | Upstream submission should be done for tcl 9.x patches. (From OE-Core rev: 2671c3183a74617e79f6879b228f2df8055397fb) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* perl-cross: submit determinism.patch upstreamAlexander Kanavin2025-04-101-1/+1
| | | | | | | | (From OE-Core rev: 514365235743528802e3f854d21f991a1bc01674) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: replace problematic pending patch with upstream submissionAlexander Kanavin2025-04-103-110/+41
| | | | | | | | | | | | | | | | | | | The now-removed patch was added for clang compatibility, but over time started fixing problems that do not exist, and got its description to mismatch the content. The new patch is fixing the only problem with clang that still occurs. I verified that all files that were patched before still build without errors. If you find other issues (this would be with non-default options probably), please fix them similarly. (From OE-Core rev: 6b8bd203180375a6b97345ddaa5fef7f68219ea6) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-webcolors: upgrade 24.8.0 -> 24.11.1Lei Maohui2025-04-101-1/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix the issue that: | Traceback (most recent call last): | File "/mnt/test/build_auh/tmp/work/core2-64-poky-linux/python3-webcolors/24.11.1/recipe-sysroot-native/usr/lib/pyth on3.13/site-packages/pyproject_hooks/_impl.py", line 402, in _call_hook | raise BackendUnavailable( | ...<4 lines>... | ) | pyproject_hooks._impl.BackendUnavailable: Cannot import 'pdm.backend' python3-webcolors has migrated to pdm-backend | diff --git a/pyproject.toml b/pyproject.toml | index 6fcec77..9f2dfa9 100644 | --- a/pyproject.toml | +++ b/pyproject.toml | @@ -1,65 +1,110 @@ | [build-system] | -requires = ["setuptools>=61.0"] | -build-backend = "setuptools.build_meta" | +requires = [ | + "pdm-backend", | +] | +build-backend = "pdm.backend" (From OE-Core rev: 4b02af34cbffb62c8242d21e5d797ae114d4f421) Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* python3-pdm python3-pdm-{backend,build-locked}: move from meta-pythonLei Maohui2025-04-104-0/+48
| | | | | | | | | | | python3-pdm and python3-pdm-backend are dependencies of python3-webcolors python3-pdm itself depends on python3-pdm-build-locked (From OE-Core rev: 6d064f60275b294dc6fc0e6480a0e5b0e7820934) Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* cargo-c,rust: Fix build on risv32Khem Raj2025-04-105-237/+152
| | | | | | | | | | Apply fix in libc that are needed for rustix-0.38 to build. (From OE-Core rev: c21fd6f1c0b6a9df9950c541025f24e342b7a118) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez5: remove obsolete patch for test-gattGuðni Már Gilbert2025-04-102-41/+0
| | | | | | | | | | | The issue is no longer present. Tested BlueZ 5.80 and 5.82 The issue has likely been gone for quite a while. (From OE-Core rev: 87ab9c39c497c2a8b558e8d6ce673a931a5887b2) Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* insane.bbclass: Report all invalid PACKAGECONFIGs for a recipe at oncePeter Kjellerstedt2025-04-081-4/+4
| | | | | | | | | | | Rather than reporting each invalid PACKAGECONFIG with a separate error message, report them all with one error message. (From OE-Core rev: bf9366583f53fe2498d7aa9192ebfe6562887cf3) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* insane.bbclass: Move test for invalid PACKAGECONFIGs to do_recipe_qaPeter Kjellerstedt2025-04-081-10/+10
| | | | | | | | | | | This makes sure invalid PACKAGECONFIGs are reported also for recipes that have no do_configure task, e.g., packagegroups. (From OE-Core rev: d3325c384a7df54c564cae093659cf7b692629f2) Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* xinetd: use monotonic timeLi Wang2025-04-082-0/+326
| | | | | | | | | | | | | | | | | | | When using xinet.d to limit rsync connections, it can't handle changes in system time. When time is set back, the connection limit is reached very quickly and rsync gets deactivated, if time is changed again, rsync is never reactivated. The current timer of xinet.d is based on the time() and is affected by the system time. Use clock_gettime() with CLOCK_MONOTONIC as the new timer because CLOCK_MONOTONIC clock is not affected by discontinuous jumps in the system time. (From OE-Core rev: e4bfd2cc66c4b5614513ec50806492efc8df75be) Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa: Update lzip version in buildzip testcaseKhem Raj2025-04-081-1/+1
| | | | | | | | (From OE-Core rev: 5200dcb39834790542c429d70cf54db07ff7a378) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez5: upgrade 5.80 -> 5.82Guðni Már Gilbert2025-04-084-5/+5
| | | | | | | | | | | | | | | | | | | | | Changelog: Fix issue with handling BAP state transitions. Fix issue with handling D-Bus interface removal. Fix issue with handling MAP and supported features. Fix issue with handling SDP record for Phonebook Access Client. Fix issue with handling AVRCP PDU parameters length mismatch. Fix issue with handling AVRCP PDU for SetAbsoluteVolume. Fix issue with handling AVDTP bad media transport format. Fix issue with handling support for LL Privacy setting. Full Changelog: https://github.com/bluez/bluez/compare/5.80...5.82 (From OE-Core rev: f42ee87abcfca80a803bf44fb91b41f29a2c7d70) Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* initscripts: add function log_success_msg/log_failure_msg/log_warning_msgChangqing Li2025-04-082-1/+21
| | | | | | | | | | | | | | | | | | | | | | * add function log_success_msg/log_failure_msg/log_warning_msg, some packages still use these functions, like mariadb, refer [1], without these function, with sysV init manager, mariadb will report error: root@qemux86-64:~# /etc/init.d/mysqld status /etc/init.d/mysqld: line 383: log_success_msg: command not found * remove RCONFLICTS with lsbinitscripts, LSB support already remove in [2] [1] https://github.com/MariaDB/server/blob/main/support-files/mysql.server.sh#L104 [2] https://git.openembedded.org/openembedded-core/commit/?id=fb064356af615d67d85b65942103bf943d84d290 [3] https://refspecs.linuxbase.org/LSB_4.0.0/LSB-Core-generic/LSB-Core-generic/iniscrptfunc.html (From OE-Core rev: b57824d0ec593898abd9eb957c2ff1317bb74440) Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* oeqa/selftest/wic: add test for excluding symlinksYi Zhao2025-04-081-5/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add test to check if --exclude-path option can exclude symlinks. This test validates commit[1]. Test result: $ oe-selftest -r wic.Wic.test_exclude_path 2025-04-03 15:11:25,211 - oe-selftest - INFO - meta-selftest layer not found in BBLAYERS, adding it 2025-04-03 15:11:30,016 - oe-selftest - INFO - Adding layer libraries: 2025-04-03 15:11:30,017 - oe-selftest - INFO - /buildarea/poky/meta/lib 2025-04-03 15:11:30,017 - oe-selftest - INFO - /buildarea/poky/meta-yocto-bsp/lib 2025-04-03 15:11:30,017 - oe-selftest - INFO - /buildarea/poky/meta-selftest/lib 2025-04-03 15:11:30,019 - oe-selftest - INFO - Checking base configuration is valid/parsable NOTE: Starting bitbake server... 2025-04-03 15:11:31,652 - oe-selftest - INFO - Adding: "include selftest.inc" in /buildarea/poky/build-st/conf/local.conf 2025-04-03 15:11:31,653 - oe-selftest - INFO - Adding: "include bblayers.inc" in bblayers.conf 2025-04-03 15:11:31,653 - oe-selftest - INFO - test_exclude_path (wic.Wic) 2025-04-03 15:43:11,341 - oe-selftest - INFO - ... ok 2025-04-03 15:43:11,341 - oe-selftest - INFO - ---------------------------------------------------------------------- 2025-04-03 15:43:11,342 - oe-selftest - INFO - Ran 1 test in 1899.900s 2025-04-03 15:43:11,342 - oe-selftest - INFO - OK 2025-04-03 15:43:14,834 - oe-selftest - INFO - RESULTS: 2025-04-03 15:43:14,835 - oe-selftest - INFO - RESULTS - wic.Wic.test_exclude_path: PASSED (1899.69s) 2025-04-03 15:43:14,836 - oe-selftest - INFO - SUMMARY: 2025-04-03 15:43:14,836 - oe-selftest - INFO - oe-selftest () - Ran 1 test in 1899.900s 2025-04-03 15:43:14,836 - oe-selftest - INFO - oe-selftest - OK - All required tests passed (successes=1, skipped=0, failures=0, errors=0) [1] https://git.openembedded.org/openembedded-core/commit/?id=42e829ac1e9d74646b6dfb327b18b15f6b0df60b (From OE-Core rev: 0dd455bed9b52c0cf237ea2f8bd1a8f7890078e9) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rust-llvm: Disable benchmarks by cmake optionsKhem Raj2025-04-082-26/+1
| | | | | | | | | | | | | Drop patch to exclusively disable it in code It seems to be fixed upstream [1] [1] https://github.com/rust-lang/cmake-rs/pull/158 (From OE-Core rev: 60b4b0808a3b961917ed8abe16b9f7df2a311952) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libdnf: upgrade 0.73.4 -> 0.74.0Wang Mingyu2025-04-083-91/+9
| | | | | | | | (From OE-Core rev: 2606586c10b9a3297fcab15cd45f519975649655) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* spdx30: handle Unknown CVE_STATUSPeter Marko2025-04-081-0/+2
| | | | | | | | | | | | | | | | | | | CVE_STATUS can be also "Unknown" since oe-core commit d25f1817752bc8a84c40dcbef75f7559801ce15e When this status type is used, build fails with e.g. ERROR: openssl-3.4.1-r0 do_create_spdx: Unknown CVE-2025-0001 status 'Unknown' Since this is now a valid status, it needs to be handled. It cannot be mapped to any VEX status (see below), so just skip it. Possible VEX statuses are: NOT AFFECTED, AFFECTED, FIXED, and UNDER INVESTIGATION. (From OE-Core rev: 2d3081ef63c8a54df62a2a08bd36008c20eed65a) Signed-off-by: Peter Marko <peter.marko@siemens.com> cc: Marta Rybczynska <rybczynska@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dropbear/dropbearkey.service: Allow extra arguments for key generationMike Looijmans2025-04-081-1/+1
| | | | | | | | | | | | | | | | Just like the "init" version this script, pass $DROPBEAR_RSAKEY_ARGS to the 'dropbearkey' program when generating a host key. This allows to speed up SSH connections on read-only root systems by adding the line DROPBEAR_RSAKEY_ARGS="-s 1024" into /etc/default/dropbear. See also: c0efbcb47ab3 ("dropbear/init: Allow extra arguments for key generation") (From OE-Core rev: 3ae2c70fe83bc242b7a13655bc38431c81033c66) Signed-off-by: Mike Looijmans <mike.looijmans@topic.nl> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* time: fix runtime version from UNKNOWN to 1.9Chen Qi2025-04-081-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | The runtime version of time is determined by: build-aux/git-version-gen .tarball-version But there's no .tarball-version in the tarball. So we add this file manually with ${PV} as the content if it does not exist. Note that there's a patch for upstream: https://lists.gnu.org/archive/html/bug-time/2021-01/msg00000.html So it's possible that when this time recipe is upgraded to a new version, we won't need such adjust any more. Before the fix, time --version: time (GNU Time) UNKNOWN After the fix, time --version: time (GNU Time) 1.9 (From OE-Core rev: 201d1851666d558124226c871754a581cf427530) Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* base-files: add gshadow entry in nsswitch.confYi Zhao2025-04-081-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We encountered a newgrp regression in shadow 4.17.3: root@qemux86-64:~# groupadd g1 root@qemux86-64:~# useradd t1 root@qemux86-64:~# gpasswd g1 Changing the password for group g1 New Password: Re-enter new password: root@qemux86-64:~# sudo -u t1 newgrp g1 Password: Invalid password. root@qemux86-64:~# In versions prior to shadow 4.17.3, shadow used an internal implementation to support shadow group because it could not correctly detect whether glibc supports shadow group in a cross-compilation environment. In 4.17.3, it can correctly check whether glibc supports shadow group even in a cross-compilation environment[1]. If supported, shadow will use it instead of its own internal implementation. Shadow group support in glibc requires adding a gshadow entry in nsswitch.conf. After the patch: root@qemux86-64:~# groupadd g1 root@qemux86-64:~# useradd t1 root@qemux86-64:~# gpasswd g1 Changing the password for group g1 New Password: Re-enter new password: root@qemux86-64:~# sudo -u t1 newgrp g1 Password: t1@qemux86-64:/home/root$ [1] https://github.com/shadow-maint/shadow/commit/da6b9cff02d583ef169a0bc0c1014b19b5fad2fb (From OE-Core rev: 0cb122f17cf264ef904880351db1c0bb325fe5a6) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* migration-guides: add release notes for 5.0.8Lee Chee Yang2025-04-032-1/+227
| | | | | | | | | | (From yocto-docs rev: 3b50193fa0c9acf4a601aeae6e1c78d0e4a05aef) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 7494df521ed9c70e877dbdef1adfe38ad717682f) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* migration-guides: add release notes for 5.1.4Lee Chee Yang2025-04-032-0/+138
| | | | | | | | | | (From yocto-docs rev: 4602e6b42118e7fbd3b6aa07782779047d209bb0) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit f7c8fdfdfef0cac529594af5bdb72e53b29262fe) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ref-manual/variables.rst: HOST_CC_ARCH: fix wrong SDK referenceAntonin Godard2025-04-031-2/+1
| | | | | | | | | | | | | When building for nativesdk recipes, HOST_CC_ARCH equals SDK_CC_ARCH, not BUILDSDK_CC_ARCH which doesn't exist. Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de> (From yocto-docs rev: a4a8aca22bb854756eb2ed1e652331bec3c7c68e) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> (cherry picked from commit 08fc3446cb13b5bd8781874d2d996899ce12b082) Signed-off-by: Antonin Godard <antonin.godard@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>