Commit Graph

3771 Commits

Author SHA1 Message Date
Markus Volk
bb4a993e25 libcheck: use cmake instead of autotools
- this fixes a build issue seen with current master-next branch:
| check.texi:1610: warning: node prev pointer for `Testing Signal Handling and Exit Values' is `Selective Running of Tests' but prev is `Selecting Tests Based on Arbitrary Tags' in menu
| check.texi:2051: warning: node prev pointer for `TAP Logging' is `Test Logging' but prev is `XML Logging' in menu
| make[2]: Leaving directory '/home/flk/poky/build/tmp/work/corei7-64-poky-linux/libcheck/0.15.2/build/doc'
| make[2]: *** [Makefile:452: ../../check-0.15.2/doc/check.info] Error 1
| make[1]: *** [Makefile:574: all-recursive] Error 1
| make[1]: Leaving directory '/home/flk/poky/build/tmp/work/corei7-64-poky-linux/libcheck/0.15.2/build'
| make: *** [Makefile:420: all] Error 2
| ERROR: oe_runmake failed
| WARNING: /home/flk/poky/build/

- checkmk adds a reproducibility issue. @AWK_PATH@ is  unique, because awk is
  in hosttools. We dont want it that way for target. Use a '-D' assignment to
  fix this (Thanks to Ross.Burton@arm.com).

(From OE-Core rev: a61ed8dc5449bfb871379c6afd03c94ff27ca1fe)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-16 17:57:29 +01:00
Ross Burton
81998e407f sassc: put version in recipe filename
A recipe that fetches from git but is otherwise a released version
should not be using _git.bb recipe names.

Put the version in the filename and drop the explicit PV.

(From OE-Core rev: 51d406b519360aa03c919d01d0d3c602cf17bd5f)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-09 17:43:42 +01:00
Ross Burton
7fb980ed73 libsass: put version in recipe filename
A recipe that fetches from git but is otherwise a released version
should not be using _git.bb recipe names.

Put the version in the filename and drop the explicit PV.

(From OE-Core rev: e9494c0a30c3bf113542c1bca9283cb90570e5c5)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-09 17:43:42 +01:00
Peter Marko
140fde4c34 curl: upgrade 8.12.1 -> 8.14.1
Handle CVE-2025-4947 and CVE-2025-5025.

CVE-2025-5399 fixed in 8.14.1 was introduced only in 8.13.0, so Yocto
never had version vulnerable to it.

Rebase patches.

Add openssl-native dependency fo ptest to fix following error:

    Missing or broken 'openssl' tool. openssl 1.0.2+ is required.
    Without it, this script cannot generate the necessary certificates
    the curl test suite needs for all its TLS related tests. at
    ../../../curl-8.14.0/tests/certs/genserv.pl line 33.

Install curlinfo for tests required since 8.14.0
7a1211d474

(From OE-Core rev: d990ee6c49e3fcf969e54688397d47f0d0892ba1)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-09 17:43:41 +01:00
Gyorgy Sarvari
8d1fa3d126 diffoscope: upgrade 293 -> 297
Also, remove the musl restriction - it builds successfully with both glibc and musl.

Changelog:
294:
- Correct longstanding issue where many ">"-based version tests used in
  conditional fixtures were broken due to the lack of a __gt__ method.
  Thanks, Colin Watson! (Closes: #1102658)
- Address a long-hidden issue in the test_versions testsuite where we weren't
  actually testing ">" as it was masked by the tests for equality in the
  testsuite.
- Update copyright years.

295:
- Use --walk over the potentially dangerous --scan argument of zipdetails(1).
  (Closes: reproducible-builds/diffoscope#406)

296:
- Don't rely on zipdetails' --walk functionality to be available; only add
  that argument after testing for a new enough versions.
  (Closes: reproducible-builds/diffoscope#408)
- Disable and then re-enable failing on stable-bpo.
- Update copyright years.
- Add NuGet package support.

297:
- Add a LZMA comparator and tests.

(From OE-Core rev: 7ba8b83d4d24ce81bba971f8ca274f95d11996ba)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-09 17:43:41 +01:00
Wang Mingyu
f8aa2f674e taglib: upgrade 2.0.2 -> 2.1
(From OE-Core rev: bfbbb897c0ab8366c762da134ffe53e915071557)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-05 11:02:23 +01:00
Wang Mingyu
1ba0338933 libusb1: upgrade 1.0.28 -> 1.0.29
(From OE-Core rev: 9b2a50cb8b59dd5a4e4382482c8401e185096e9b)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-05 11:02:23 +01:00
Wang Mingyu
29972a8eaa liburcu: upgrade 0.15.2 -> 0.15.3
(From OE-Core rev: bebf4c689da174805e53f5f92462a15dda7ec6ac)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-05 11:02:23 +01:00
Wang Mingyu
1f51eca39c libunwind: upgrade 1.8.1 -> 1.8.2
0003-Fixed-miscompilation-of-unw_getcontext-on-ARM.patch
0004-Rework-inline-aarch64-as-for-setcontext.patch
removed since they're included in 1.8.2

libatomic.patch
malloc.patch
refreshed for 1.8.2

(From OE-Core rev: 02c3d8de66fa1342d729a17654b0ac14e07b8860)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-05 11:02:23 +01:00
Wang Mingyu
5c50dc09b2 hwdata: upgrade 0.394 -> 0.395
(From OE-Core rev: e491c4274f309f00430673334cbdfacbfe773e63)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-05 11:02:22 +01:00
Wang Mingyu
fc8bc81c9c gpgme: upgrade 1.24.2 -> 1.24.3
(From OE-Core rev: fcac9a5b9a0803524bf644b97f7563cbc0c74140)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-05 11:02:22 +01:00
Wang Mingyu
4fef5e7fc7 enchant2: upgrade 2.8.4 -> 2.8.6
(From OE-Core rev: 861c8072698c97619888ca70528995b567c696ee)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-05 11:02:22 +01:00
Wang Mingyu
949e2cc738 apr: upgrade 1.7.5 -> 1.7.6
0001-Add-option-to-disable-timed-dependant-tests.patch
0001-configure-Remove-runtime-test-for-mmap-that-can-map-.patch
0002-apr-Remove-workdir-path-references-from-installed-ap.patch
0005-configure.in-fix-LTFLAGS-to-make-it-work-with-ccache.patch
refreshed for 1.7.6

(From OE-Core rev: 21721ba0701acbb691d59da7892af10a222d3fcb)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-05 11:02:22 +01:00
Hiago De Franco
19bee937be libgcrypt: fix compile error for t-thread-local
Currently the libgcrypt-native build is failing with the following
error:

| ld: t_thread_local-t-thread-local.o: in function `main':
| t-thread-local.c:(.text.startup+0x187): undefined reference to `pthread_create'
| ld: t-thread-local.c:(.text.startup+0x1d0): undefined reference to `pthread_join'

Backport the fix from upstream and add "-lpthread" to
"t_thread_local_CFLAGS" to make the compilation successfull, similar to
what 0004-tests-Makefile.am-fix-undefined-reference-to-pthread.patch
does.

(From OE-Core rev: d2daf78a083688b82625800919cdc6c6555fcc52)

Signed-off-by: Hiago De Franco <hiago.franco@toradex.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-05 11:02:21 +01:00
Jason Schonberg
58c7fe0d28 icu: upgrade 76-1 -> 77-1
License-Update: Update copyright year of Unicode 3.0 license 2024 -> 2025

Update the HOMEPAGE to reflect where the address actually resolves.

(From OE-Core rev: d8da5da2c8f0674dcf5aa1646e0c1303a83aeafd)

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-02 22:17:24 +01:00
Gyorgy Sarvari
77b7006d77 ca-certificates: fix on-target postinstall script
When the package is installed directly on the machine (instead of
installing it in the rootfs directly), the postinstall script fails with
the following error:

/usr/sbin/update-ca-certificates: line 75: shift: shift count out of range

The reason is that the "update-ca-certificates" script is executed with
the "--sysroot" argument, and as the sysroot $D is passed. However on the
target system this variable doesn't exist, so the argument is passed without
this mandatory value, and the execution fails.

To avoid this error, check if the $D variable exists, and pass the --sysroot
argument only when it does.

Reported-by: WXbet <Wxbet@proton.me>
(From OE-Core rev: cf39461e97098a1b28693299677888ba7e8bfccf)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-27 09:01:16 +01:00
Yi Zhao
982ef9ddeb libcap: upgrade 2.75 -> 2.76
ChangeLog:
https://sites.google.com/site/fullycapable/release-notes-for-libcap#h.wqnp1zp1o8bm

Refresh local patch.

(From OE-Core rev: cf409e0c2d5e90af9ad7cbb389c37f5f3a7a4b4e)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-27 09:01:16 +01:00
Markus Volk
3003615eb5 boost: add process library
This fixes an error seen with current wesnoth:
| ../build/tmp/work/corei7-64-poky-linux/wesnoth/1.19.12/recipe-sysroot-native/usr/bin/x86_64-poky-linux/../../libexec/x86_64-poky-linux/gcc/x86_64-poky-linux/15.1.0/ld: src/libwesnoth-common.a(filesystem.cpp.o): in function `boost::process::v2::environment::detail::is_executable(boost::filesystem::path const&, boost::system::error_code&)':
| /usr/include/boost/process/v2/detail/environment_posix.hpp:81:(.text._ZN5boost7process2v211environment15find_executableINS2_12current_viewEEENS_10filesystem4pathES6_OT_[_ZN5boost7process2v211environment15find_executableINS2_12current_viewEEENS_10filesystem4pathES6_OT_]+0x24c): undefined reference to `boost::process::v2::environment::detail::has_x_access(char const*)'
| collect2: error: ld returned 1 exit status
| ninja: build stopped: subcommand failed.

(From OE-Core rev: 6530896d40c403039e5ab8f2e09c2cba908c26e4)

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-27 09:01:16 +01:00
Liu Yiding
32b3f35bf6 libunwind: disable installation of tests dir
fix the issue that:
| Error: Transaction test error:
|   file /usr/libexec/libunwind/check-namespace.sh conflicts between attempted installs of libunwind-1.8.1-r0.core2_64 and lib32-libunwind-1.8.1-r0.core2_32
|   file /usr/libexec/libunwind/test-runner conflicts between attempted installs of libunwind-1.8.1-r0.core2_64 and lib32-libunwind-1.8.1-r0.core2_32

By default, test suite from srcdir/tests/* will be installed to /usr/libexec/libunwind, here pass --disable-tests to not install test suite.
Test suite can be added to libunwind-ptest in the future if needed

(From OE-Core rev: 9d9c36cd5fc59e88bcd8a08ba70ced996c7d74be)

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-22 14:36:49 +01:00
Hongxu Jia
fa96265154 libgcrypt: upgrade 1.11.0 -> 1.11.1
(From OE-Core rev: 73bcdedc80a83e241d2162b10a2244a8dbd0e403)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-22 14:36:49 +01:00
Richard Purdie
09c768e203 libsoup-2.4: Drop recipe as obsolete
The last user in OE-Core was gst-examples. This has been upgraded and the dependency
dropped, all other users can use libsoup3 instead. Therefore remove the obsolete and
deprecated version.

(From OE-Core rev: 94ebc5b798aed6eea642c5e2a4df24b386520636)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-15 10:55:26 +01:00
Wang Mingyu
06f0cb9438 re2c: upgrade 4.1 -> 4.2
Changelog:
============
- Added Swift backend
- Added options:
   "--lang swift"
   "--computed-gotos-relative"
- Added configurations:
   "re2c:cgoto:relative", "re2c:computed-gotos:relative"
   "re2c:yyfn:throw"
- Added syntax file code templates:
   "code:cgoto"
   "code:cgoto_data"
   "code:yytarget_filter"
   "code:type_yyctable"
- Added syntax file conditionals:
   ".cgoto.relative"
   ".yyfn.throw"

- Added some C++ benchmarks without submatch extraction.

(From OE-Core rev: 7e3df01de59b55bb3fc8fef9fb36a98ca9b007fd)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-13 10:29:21 +01:00
Wang Mingyu
d5564d3c81 liburcu: upgrade 0.15.1 -> 0.15.2
Changelog:
==========
 * fix: __atomic_always_lock_free() not a constant expression on g++ < 5.1
 * fix: urcu assert fallback for pre-C11 builds
 * doc: update uatomic-api for static assert
 * Add uatomic size static assert for 's390'
 * Add uatomic size static assert for 'sparc64'
 * Add uatomic size static assert for 'ppc'
 * Add uatomic size static assert for 'x86'
 * Add uatomic size static assert for 'generic'
 * Add uatomic size static assert
 * Use UATOMIC_HAS_ATOMIC_INT/LLONG in generic implementation
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for x86
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for tile
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for sparc64
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for s390
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for riscv
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for ppc
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for nios2
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for mips
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for m68k
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for loongarch
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for ia64
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for hppa
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for 'gcc' arch
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for arm
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for alpha
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for aarch64
 * Add UATOMIC_HAS_ATOMIC_INT/LLONG for atomic builtins
 * Add builtin atomics size static asserts
 * cleanup: use URCU_GCC_VERSION from compiler.h
 * fix: atomic builtins defines for type support
 * Move back CMM_LOAD/STORE_SHARED to volatile access
 * Add cmm_annotate_mem_acquire() to URCU_DEREFERENCE_USE_VOLATILE rcu_dereference
 * Use uatomic_load CMM_RELAXED in URCU_DEREFERENCE_USE_VOLATILE
 * Fix: Re-introduce URCU_DEREFERENCE_USE_VOLATILE read barrier depends for alpha
 * Tree-wide: Rename to uatomic_load/uatomic_store
 * src: Use __*__ for attribute names
 * API: Use __*__ for attribute names
 * Fix Changelog 0.15.1 date

(From OE-Core rev: e9b7585ca81d72962f4e7d57b3d0ff3524e5762b)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-13 10:29:21 +01:00
Wang Mingyu
3d833dcea5 libjitterentropy: upgrade 3.6.2 -> 3.6.3
Changelog:
================
- Correct time stamp processing on AIX
- Use high-resolution time stamp on Apple Silicon
- GCD power-up test: consider OSR

(From OE-Core rev: b08ca541d00f8154d66dbdbace7102c88c9cdc39)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-13 10:29:21 +01:00
Wang Mingyu
fe51bad381 libgpg-error: upgrade 1.51 -> 1.55
0001-Do-not-fail-when-testing-config-scripts.patch
refreshed for 1.55

(From OE-Core rev: b340702af103c1d116f8434f6e7509605954b28a)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-13 10:29:21 +01:00
Wang Mingyu
abb3c012ac libffi: upgrade 3.4.7 -> 3.4.8
not-win32.patch
refreshed for 3.4.8

(From OE-Core rev: ca7f1abfba5462a8f09b328c34380e6faeae8b32)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-13 10:29:21 +01:00
Wang Mingyu
089df5b119 iso-codes: upgrade 4.17.0 -> 4.18.0
License-Update: Replace FSF postal address with their website

(From OE-Core rev: ad5266e0c182acef99598663403524233526691f)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-13 10:29:21 +01:00
Wang Mingyu
2682c20aab enchant2: upgrade 2.8.2 -> 2.8.4
(From OE-Core rev: c21da4dd936a8da187fa4a3251126e57a23f6727)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-13 10:29:20 +01:00
Wang Mingyu
c21d7e4628 debianutils: upgrade 5.21 -> 5.22
(From OE-Core rev: 8023bf9b54f125342532361d5eed8cde4eb3eb4f)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-13 10:29:20 +01:00
Wang Mingyu
890c360c55 ca-certificates: upgrade 20241223 -> 20250419
0001-Revert-mozilla-certdata2pem.py-print-a-warning-for-e.patch
0001-update-ca-certificates-don-t-use-Debianisms-in-run-p.patch
refreshed for 20250419

0002-sbin-update-ca-certificates-add-a-sysroot-option.patch
removed since it's included in 20250419

(From OE-Core rev: e39cc1fb7234bf2b37856296d3c0d10ddf8cae64)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-13 10:29:20 +01:00
Wang Mingyu
b2483c9111 boost: upgrade 1.87.0 -> 1.88.0
(From OE-Core rev: 2aaa023d0a55cce49b4d6bad53137c97386d31bf)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-13 10:29:20 +01:00
Wang Mingyu
c50df08145 at-spi2-core: upgrade 2.56.1 -> 2.56.2
Changelog:
===========
* Fix the build with glib < 2.76.
* a11y-manager-device: Fix unmap_keysym_modifier.

(From OE-Core rev: 2f6da18f8bf9e41fdc4b0d65eb0352719973ff66)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-13 10:29:20 +01:00
Wang Mingyu
e23150613b appstream: upgrade 1.0.4 -> 1.0.5
Changelog:
============
Features:
 * qt: Expose markup conversion utils
 * desktop-styles: Add android and iOS
 * validator: Check for xml:lang="en" being used on description template elements
 * validator: Flag cases of raw text in "description" elements
 * metadata: Add more known extensions into as_metadata_file_guess_style()

Specification:
 * docs: Clarify that the style segment of a screenshot environment is optional
 * docs: Explain consequences of defining an icon for desktop-app metainfo
 * docs: Clarify that description content must be in p/li elements

Bugfixes:
 * validator: mark as_validator_issue_tag_list static
 * docs: Add workaround for gi-docgen misnaming devhelp files
 * compose: Do not permit SVG images as screenshots
 * compose: Don't "forget" to scan remaining paths when re-encountering a dir
 * pool: Try explicit singular term match if we only have low-quality tokens
 * utils: Provide compatibility with Fedora icon tarballs when installing them
 * utils: Remove leftover g_chmod()
 * zstd-decompressor: Pass output/written data when decompression finished
 * utils: Expect a dash in icons file name
 * utils: Recognize .yml* and .yaml* file extension variants, and .zst extension
 * utils: Rename the appstream file when re-saving it on install

(From OE-Core rev: 75f749b3e1c5bc04bcebace716e188812c2e4f30)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-13 10:29:20 +01:00
Changqing Li
1f881c0a6b libsoup-2.4: fix CVE-2024-52532
CVE-2024-52532:
GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption.
during the reading of certain patterns of WebSocket data from clients.

Refer:
https://nvd.nist.gov/vuln/detail/CVE-2024-52532

(From OE-Core rev: 4efb2f03cf47382bf79aec333109c78e309c337b)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-12 22:01:55 +01:00
Changqing Li
d491b63035 libsoup-2.4: fix build failure
Backport 2 patches to fix build failures

(From OE-Core rev: 31ddbed4155f36ff8cda5fcf7e6c301ae63cd62f)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-12 22:01:55 +01:00
Yi Zhao
26b1de046e sassc: fix runtime version
The sassc_version.h should be generated from sassc_version.h.in. But
there is already a sassc_version.h file in source directory. When ${S}
!= ${B}, the sassc_version.h is generated in build directory, and the
original sassc_version.h in source directory is not overwritten.
However, the latter is used during the build, resulting in a missing
runtime version. Remove sassc_version.h from source directory to ensure
that the one in build directory is used during the build.

Before the fix:
$ sassc --version
sassc: [NA]
libsass: [NA]
sass2scss: 1.1.1
sass: 3.5

After the fix:
$ sassc  --version
sassc: 3.6.2
libsass: 3.6.6
sass2scss: 1.1.1
sass: 3.5

(From OE-Core rev: 25be2756a719e82e94ee55d7cf42f30546366b6a)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-08 10:28:18 +01:00
Yi Zhao
5e75b1b428 libsass: fix runtime version
The version.h should be generated from version.h.in. But there is
already a version.h file in source directory. When ${S} != ${B}, the
version.h is generated in build directory, and the original version.h in
source directory is not overwritten. However, the latter is used during
the build, resulting in a missing runtime version. Remove version.h from
source directory to ensure that the one in build directory is used
during the build.

Before the fix:
$ sassc --version
sassc: [NA]
libsass: [NA]
sass2scss: 1.1.1
sass: 3.5

After the fix:
$ sassc  --version
sassc: 3.6.2
libsass: 3.6.6
sass2scss: 1.1.1
sass: 3.5

(From OE-Core rev: 88fc48d65dfc61b6a89018c3348b369aa450a8c0)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-08 10:28:18 +01:00
Changqing Li
e5902fa07b libsoup-2.4: fix CVE-2025-32911
CVE-2025-32911:
A use-after-free type vulnerability was found in libsoup, in the
soup_message_headers_get_content_disposition() function. This flaw
allows a malicious HTTP client to cause memory corruption in the libsoup
server.

Backport patches to fix it

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-32911
[2] https://gitlab.gnome.org/GNOME/libsoup/-/issues/433

(From OE-Core rev: 839d93bbb1ca7a51b659b8cb9def9b354a99518f)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-01 14:22:54 +01:00
Richard Purdie
ca65114e5e recipes: Drop remaining md5sum checksums
We have long since obsoleted md5sum in favour of sha256sum. Drop the remaining
56 entries (which were showing many recipes hadn't been touched in a long time).
They all do have the corresponding sha256sum entries as is clear from the diff.

(From OE-Core rev: 7e4bfcc9706fa8a09f6a0004174a2c3b21c90df3)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-05-01 14:22:53 +01:00
Changqing Li
0a4d64647d icu: set ac_cv_path_install to ensure install tool reproducibility
icu will check program install path during do_configure, eg:
checking for a BSD-compatible install... /path/to/install -c

And this path will be writen into pkgdata.inc:
INSTALL_CMD=$(INSTALL-L)

Decided by if install is installed into recipe-sysroot-native during
do_configure stage, the INSTALL_CMD could be
/build/tmp/work/corei7-64-wrs-linux/icu/76-1/recipe-sysroot-native/usr/bin/install
or /build/tmp/hosttools/install if the build is rerun after the sysroot was
extended.

set ac_cv_path_install to install under hosttools to make a deterministic
result of INSTALL_CMD, avoid vary caused by the execute sequence of
another task which DEPENDS on coreutils-native and independent with
do_configure

[RP: Removed paths from ac_cv_path_install to simplify and avoid QA error too]
(From OE-Core rev: 208143e060cda6e22ae1e8c618e033fa9144b323)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-04-29 13:28:10 +01:00
Ross Burton
70910dad0d bmaptool: put the PV in the filename
We're shipping a release but the filename suggests it is a git snapshot.

To avoid version-going-backwards errors we need to continue to put +git
in the PV, so add a comment to remind the upgrader to remove it.

(From OE-Core rev: 467a75c70506720e5603143afc2d005cf14cffeb)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-04-29 09:55:32 +01:00
Ross Burton
bcf2a29314 libunwind: fix the build with GCC 15
Backport a patch from upstream to fix the build when GCC 15 is used.

(From OE-Core rev: cdae3b07ac4b5e59e33d96c1da9c5dda53de9d04)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-04-29 09:55:31 +01:00
Ross Burton
35c08bed88 libunwind: fix build when unused sections are garbage collected
poky-tiny uses gcsections.inc to strip unused sections from the
binaries.  However, on qemuarm5/qemuarm64 with poky-tiny this appears to
result in too much being removed and the link fails:

  ld: .libs/Gtest-trace: hidden symbol `__aarch64_cas8_acq_rel' in
  libgcc.a(cas_8_4.o) is referenced by DSO

Work around this by disabling gcsections.inc.

(From OE-Core rev: 3291827895906e879a7f115eae78aec921a5aa96)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-04-29 09:55:31 +01:00
Ross Burton
bb3fc52010 libunwind: check if libatomic is needed at configure time
Backport a patch submitted upstream to conditionally link explicitly to
libatomic, so we don't need to that in the recipe.

(From OE-Core rev: 797e645dbcb8a05a2514afc2d5bc2b0b661a0d0e)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-04-29 09:55:31 +01:00
Ross Burton
f2dc1e086c libunwind: refresh ppc32/musl patch
There was a precedence order problem in the patch so update to the latest
version in the pull request.

(From OE-Core rev: c64c4ca0c72f6fde3b1d5cfea5803ddf16550fd5)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-04-29 09:55:31 +01:00
Nguyen Dat Tho
bbcc57ba12 libatomic-ops: Update GITHUB_BASE_URI
libatomic-ops moves to new repo https://github.com/ivmai/libatomic_ops
according to topic: https://github.com/bdwgc/libatomic_ops/issues/66

(From OE-Core rev: e65452b60d04bae3cdc4f5f5883f60ed78c60594)

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-04-29 09:55:31 +01:00
Alexander Kanavin
5eb2bdff94 libunwind: use github-releases class to determine latest versions
(From OE-Core rev: 43ee9831326eac7877b7f148b145c0369c9a06cb)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-04-29 09:55:31 +01:00
Changqing Li
8dcd0f73eb buildtools-tarball: Make buildtools respects host CA certificates
To adapt user network enviroment, buildtools should first try to use
the user configured envs like SSL_CERT_FILE/CURL_CA_BUNDLE/..., if these
envs is not set, then use the auto-detected ca file and ca path, and
finally use the CA certificates in buildtools.

nativesdk-openssl set OPENSSLDIR as "/not/builtin", need set SSL_CERT_FILE/SSL_CERT_DIR to work

nativesdk-curl don't set default ca file, need
SSL_CERT_FILE/SSL_CERT_DIR or CURL_CA_BUNDLE/CURL_CA_PATH to work

nativesdk-git actually use libcurl, and GIT_SSL_CAPATH/GIT_SSL_CAINFO
also works

nativesdk-python3-requests will use cacert.pem under python module certifi by
default, need to set REQUESTS_CA_BUNDLE

(From OE-Core rev: 8a7ec52e9b35654bee48cd948c6c34c63db3e265)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-04-24 11:27:06 +01:00
Ross Burton
2af4e73f2f libunwind: Upgrade 1.6.2 -> 1.8.1
* change download location to GitHub
* refresh patches
* on ppc32/musl we need to link with -latomic
* make the -Wno-error more specific (only ppc32/musl)

Includes tweaks from Adriaan Schmidt based on original work from Ross.

(From OE-Core rev: 8b0d9fe7bd37817f387b10c23fe62b8a00c95713)

Signed-off-by: Adriaan Schmidt <adriaan.schmidt@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-04-20 10:11:16 +01:00
Fabio Estevam
44d9d94ccd bmaptool: upgrade 3.8.0 -> 3.9.0
Update to the 3.9.0 version.

This version has switched to use hatch as the build backend, so adjust it
accordingly.

The INSANE_SKIP can now be safely removed as explained by
commit 824009560776 ("bmaptool: temporarily silence the pep517-backend warning").

python3-six is no longer a runtime dependency since bmaptool
commit a67976e80daf ("Remove six from production code"), so remove its
RDEPENDS entry.

(From OE-Core rev: dc13e76726e3bb528cf381dedb0e881a96bf64b3)

Signed-off-by: Fabio Estevam <festevam@denx.de>
Reviewed-by: Marcel Ziswiler <marcel@ziswiler.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-04-17 11:03:22 +01:00