CST 4.0.1 replaces the custom Makefile build with CMake. Inherit the
cmake class, use the source src directory, and switch the parser
dependency from byacc to bison. Add json-c and point CMake at its staged
headers.
Disable installation of internal CST static libraries. Suppress line
directives from flex and bison generated sources to avoid embedding build
paths in the output.
Refresh source and license checksums and account for json-c's MIT
license. Drop the obsolete Makefile race fix.
Import Debian's check_return_values.patch from its packaging repository:
https://salsa.debian.org/collabora-team/imx-code-signing-tool
It handles fgets() failures required by the warning-as-error build.
Signed-off-by: Fabio Estevam <festevam@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Replace the long-dead anthy 9100h (last released 2009, fetched from an old
Ubuntu source tarball) with the maintained fork anthy-unicode, which is UTF-8
native and actively released on GitHub.
anthy-unicode renames its libraries (libanthy-unicode, libanthydic-unicode,
libanthyinput-unicode), pkg-config module file (anthy-unicode.pc), headers
(includedir/anthy-unicode-1.0/anthy), config file (anthy-unicode.conf) and
binaries (anthy-*-unicode). The recipe and packaging are updated accordingly:
libanthy-unicode0 for the runtime libraries and the standard PN-dev for the
development files.
The cross-compilation strategy is carried over from the old recipe: dictionary
generation runs helper programs (mkfiledic, mkworddic, mkdepgraph, calctrans,
proccorpus) that cannot execute when cross compiling. native-helpers.patch
promotes them to bin_PROGRAMS so anthy-unicode-native stages them into the
native sysroot; target-helpers.patch makes the target dictionary rules call
them from PATH instead of ./. not_build_elc.patch avoids byte-compiling the
Emacs lisp (no target Emacs under cross compilation). The patches are
regenerated against anthy-unicode's -unicode-suffixed libtool archives. The
legacy 2ch_t.patch is dropped; anthy-unicode has no mkanthydic/2ch.t.
uim is switched from the legacy EUC-JP anthy backend to the UTF-8
anthy-unicode backend it already supports: configure with --without-anthy
--with-anthy-utf8, DEPENDS on anthy-unicode, and the uim-anthy package is
renamed uim-anthy-utf8 (plugin libuim-anthy-utf8, anthy-utf8*.scm, module
registered as anthy-utf8) with RDEPENDS on libanthy-unicode0.
packagegroup-meta-oe: anthy -> anthy-unicode.
Verified by building anthy-unicode-native and anthy-unicode for
x86-64 (do_package_qa clean): the native helpers stage into the native
sysroot, the target build generates anthy.wdic/anthy.dep/anthy.dic via those
native helpers, and packaging splits into anthy-unicode, libanthy-unicode0 and
anthy-unicode-dev. uim variables verified by parse (it requires the x11
DISTRO_FEATURE, which the qemux86-64 yoe distro strips, so it is not buildable
in this configuration).
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
do_compile panicked in rice-c/build.rs:
thread 'main' panicked at rice-c/build.rs:101:
Could not find rice-proto.h header
rice-c/build.rs builds the internal rice-proto C library in-tree via
"cargo cinstall --prefix <OUT_DIR>/rice-proto-cbuild" and then locates
it through system-deps + pkg-config. The generated rice-proto.pc carries
an absolute prefix pointing into the in-build OUT_DIR. pkgconfig.bbclass
exports PKG_CONFIG_SYSROOT_DIR=${STAGING_DIR_HOST}, and pkgconf prepends
that sysroot onto the already-absolute prefix, yielding a doubled,
non-existent include path (recipe-sysroot/<abs-build-path>/include/rice).
The header search then fails. The internal lib is never staged in the
sysroot, so sysroot rewriting must not be applied to its .pc.
Clear PKG_CONFIG_SYSROOT_DIR so the internal prefix is used verbatim.
openssl-sys is the only other pkg-config consumer in the crate graph and
would break without the sysroot, so point it at the target openssl
directly via OPENSSL_LIB_DIR/OPENSSL_INCLUDE_DIR (openssl-sys returns
those and skips its pkg-config probe when both are set). Verified a clean
build: rice-proto.h is found and librice-proto/librice-io plus the header
are packaged.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
do_compile failed building the userspace mount helper:
mount.vboxsf.c:38:10: fatal error: errno.h: No such file or directory
vbsfmount.c:36:10: fatal error: assert.h: No such file or directory
The kernel modules build fine; only the userspace utility fails. This
recipe inherits module, and module.bbclass sets INHIBIT_DEFAULT_DEPS=1
(kernel modules build -nostdinc and do not need libc). That suppresses
BASE_DEFAULT_DEPS (virtual/cross-cc virtual/compilerlibs virtual/libc)
and only re-adds virtual/cross-cc + virtual/cross-binutils, so the
target libc headers and crt objects are never staged into
recipe-sysroot. But this recipe also compiles an ordinary hosted
userspace program (utils/mount.vboxsf), which needs libc.
Add back virtual/compilerlibs and virtual/libc. Using the same
virtual/* provider names OE lists in BASE_DEFAULT_DEPS keeps this
correct across libc (glibc/musl) and toolchain (gcc/clang) choices.
Verified errno.h is staged and mount.vboxsf compiles, links and is
packaged into ${base_sbindir}.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Added a recipe that caps the memory usage of individual systemd
services without modifying those services' own recipes. Services and
limits are given via MEMORY_CONTROL_SERVICES as space-separated
<unit>:<limit>[:<oom_policy>] entries. For each recipe, it generates
a systemd drop-in under ${systemd_system_unitdir} setting MemoryMax,
MemoryHigh (70% of max), and MemorySwapMax=0. The optional "kill" policy
also adds OOMPolicy=continue and OOMScoreAdjust=500.
The service list is empty by default, so the recipe is a no-op until a
distro, machine, or product .bbappend configures it. Drop-ins install to
the system unit directory so systemd reads them at boot with no
daemon-reload. Entries are validated at build time so a bad limit fails
the build.
Signed-off-by: Ishaan Desai <Ishaan.Desai@ibm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Fixes:
WARNING: meta-oe/recipes-support/liboauth/liboauth_1.0.3.bb: liboauth: LICENSE is using an old syntax and should be upgraded to: "GPL-2.0-only OR MIT"
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Fixes:
WARNING: meta-oe/recipes-dbs/influxdb/influxdb_1.8.10.bb: influxdb: LICENSE is using an old syntax and should be upgraded to: "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND EPL-1.0 AND ISC AND MIT AND MPL-2.0"
WARNING: meta-oe/recipes-support/crucible/crucible_2025.05.28.bb: crucible: LICENSE is using an old syntax and should be upgraded to: "Apache-2.0 AND BSD-3-Clause AND MIT"
WARNING: meta-oe/recipes-test/syzkaller/syzkaller_git.bb: syzkaller: LICENSE is using an old syntax and should be upgraded to: "Apache-2.0 AND BSD-3-Clause AND MIT"
WARNING: meta-oe/recipes-test/syzkaller/syzkaller_git.bb: syzkaller-native: LICENSE is using an old syntax and should be upgraded to: "Apache-2.0 AND BSD-3-Clause AND MIT"
WARNING: meta-oe/recipes-test/syzkaller/syzkaller_git.bb: nativesdk-syzkaller: LICENSE is using an old syntax and should be upgraded to: "Apache-2.0 AND BSD-3-Clause AND MIT"
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade libsimplelog to the latest upstream version 1.1.0.
Drop 0001-allow-build-with-cmake-4.patch as it is now integrated
upstream (commit 4827c4325063266f6d2a7e133a9d3a9050ff6a3c).
Update LIC_FILES_CHKSUM due to upstream updating the copyright year
range from 2024 to 2024-2026 in LICENSE.txt. The project remains fully
under the MIT license.
Append -D__LINUX__=1 and -D_GNU_SOURCE=1 to EXTRA_OECMAKE to enable
Linux and GNU-specific extensions like sched_getcpu() for better
performance effectiveness. These flags are optional; without them,
version 1.1.0 remains fully backward compatible and adapts perfectly
with strictly POSIX musl environments.
Signed-off-by: Thuận Nguyễn-Thái <nguyenthaithuanalg@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Introduce a new binary log feature based on UTF-8 encoding patterns
to optimize logging capabilities.
Add cache hit and miss tracking mechanism to monitor performance
effectiveness.
Signed-off-by: Thuận Nguyễn-Thái <nguyenthaithuanalg@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog: https://webkitgtk.org/2026/07/09/webkitgtk2.52.5-released.html
Note that while the changelog suggests that this is just a bugfix release,
there are a lot of CVEs which have been addressed in this release.
CVE-2024-4367, CVE-2026-39872, CVE-2026-43663, CVE-2026-43676, CVE-2026-43699,
CVE-2026-43701, CVE-2026-43705, CVE-2026-43707, CVE-2026-43712, CVE-2026-43713,
CVE-2026-43715, CVE-2026-43716, CVE-2026-43720, CVE-2026-43721, CVE-2026-43725,
CVE-2026-43726, CVE-2026-43727, CVE-2026-43731, CVE-2026-43732, CVE-2026-43734,
CVE-2026-43740, CVE-2026-43742, CVE-2026-43745
See : https://webkitgtk.org/security/WSA-2026-0004.html for details.
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changes:
=========
CPU package count is no longer reported in the default output.
Users can still print it in custom formats via {packages}
Bugfixes:
==========
Fixed compatibility with WSL 2.9.3 (#2433, WM, Linux)
Fixed accurate AMD GPU names are not queried in driverSpecific mode (GPU, Linux)
Fixed GPU core counting for Apple Silicon GPU on Asahi Linux (GPU, Linux)
Some internal cleanups and optimizations
Features:
=========
Added Astra Linux version detection (OS, Linux)
Improved performance of Windows PowerShell version detection (Shell, Windows)
Improved performance of Media module on macOS (Media, macOS)
Added proxmox backup server detection (#2443, OS, Linux)
Logos:
======
Added Flatcar, Azure Linux
Added Chimera_small, Chimera2, Parabola2_small, PostmarketOS2, Qubes_small
Updated linuxmint_small
Cleaned up distro names
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The target build runs uim-module-manager (from uim-native, via PATH) to
generate scm/installed-modules.scm. Module registration makes the tool
uim_init() and dlopen the uim C plugins found in LIBUIM_PLUGIN_LIB_DIR,
which scm/Makefile hardcodes to the target build's uim/.libs. The native
uim-module-manager therefore loads target objects (and, transitively, the
target libuim) into the native process, which crashes do_compile when the
build host ABI differs from the target:
make[1]: *** [Makefile:869: installed-modules.scm] Segmentation fault
seen building for x86-64-v3-poky-linux on an x86-64 host.
Make LIBUIM_PLUGIN_LIB_DIR overridable in scm/Makefile.am and point it at
the native plugin directory (${STAGING_LIBDIR_NATIVE}/uim/plugin) for the
target build, so the native tool loads compatible native plugins. The
generated installed-modules.scm is architecture independent, so the result
is unchanged. The native build is unaffected (the patch and override are
class-target only).
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
============
- Fixed a 'TypeError' on PHP 8 when 'Security::$static_classes' was set to a
non-array value (e.g. the string ''none'') to disable static class access;
any non-array value now cleanly denies access. Use 'Security::$static_classes =
null' to disable access to all static classes.
- Security: the built-in 'stream:' resource type now validates the nested
stream wrapper against the security policy, so a template such as
'stream:php://filter/...' can no longer bypass 'Security::$streams' (including
'Security::$streams = null') to read local files
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This bugfix release addresses several build issues after the transision
to meson. These bugs didn't really affect the yocto recipe but let's
update the package for completness.
Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The PACKAGECONFIG entries introduced by the conversion were all missing
their build-dependency in the third field (the only exception was raqm,
which already had libraqm there). As a result the hard-coded DEPENDS
line was compensating by always pulling in every library regardless of
which features were actually selected.
Evidence from the configure logs confirms which libraries were found or
missed across the three configurations:
pre-conversion:
checking for zlib... yes
checking for libpng... yes
checking for freetype2 >= 9.8.3... yes
checking for libjpeg... yes
checking for libtiff-4... yes
post-conversion, unfixed (zlib, png, and tiff checks absent entirely):
checking for freetype2 >= 9.8.3... yes
checking for libjpeg... yes
post-conversion, fixed:
checking for zlib... yes
checking for libpng... yes
checking for freetype2 >= 9.8.3... yes
checking for libjpeg... yes
checking for libtiff-4... yes
Add the correct Yocto package name to the third field of every entry:
avif -> libavif
fontconfig -> fontconfig
freetype -> freetype
heif -> libheif
jpeg -> jpeg
liq -> libimagequant
png -> libpng
tiff -> tiff
webp -> libwebp
x -> virtual/libx11
xpm -> libxpm
zlib -> zlib
With the dependencies now managed by PACKAGECONFIG, the unconditional
DEPENDS assignment is redundant and can be removed.
Fixes: be9f029b6c ("gd: Support PACKAGECONFIG")
AI-Generated: codex/claude-sonnet 4.6 (high)
Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Before the PACKAGECONFIG conversion, png, zlib, and tiff support was
always enabled: those libraries were in DEPENDS and autoconf picked
them up automatically because no --without-* flag was passed for them.
The conversion introduced a regression by not including them in the
default PACKAGECONFIG, causing the mechanism to emit --without-png,
--without-zlib, and --without-tiff, silently disabling those features.
Evidence from the configure logs:
pre-conversion:
--with-jpeg=<sysroot>/usr/lib/.. --with-freetype=yes
--without-fontconfig --without-webp --without-xpm --without-x
(no --with/--without for png, zlib, or tiff; autoconf detects them)
post-conversion, unfixed:
--with-freetype --with-jpeg
--without-png --without-tiff --without-zlib <-- regression
post-conversion, fixed:
--with-freetype --with-jpeg
--with-png --with-tiff --with-zlib <-- restored
Add png, zlib, and tiff to the default PACKAGECONFIG so the out-of-
the-box feature set is unchanged from before the conversion.
Fixes: be9f029b6c ("gd: Support PACKAGECONFIG")
AI-Generated: codex/claude-sonnet 4.6 (high)
Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
pcp-native compiles the pcp sources src/pmns/lex.l which does
'#include <readline/readline.h>'. The native recipe only depended on
python3/setuptools/flex/bison, so with the header search correctly
limited to the sysroot
0001-configure-Limit-the-header-search-to-sysroot.patch
the build fails on hosts without readline development headers installed:
lex.l:25:10: fatal error: readline/readline.h: No such file or directory
Depend on readline-native (and ncurses-native, which readline links
against) so the headers and libraries come from the native sysroot
rather than the build host, mirroring the target recipe DEPENDS. This
makes the native build reproducible and host independent.
Verified by building pcp-native from scratch
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- When searching, the viewport is placed snug left where possible.
- The ability to read and write files in old Mac format was removed
(that is: files that use a lone carriage return as line ending).
- The ^T toggle between WhereIs and GotoLine has been dropped.
- When --backup is active, in some situations no backup was made,
or it had a wrong timestamp. Both issues are fixed now.
- When nano crashes or is killed, any .save file is not chmodded
to the permissions of the base file, nor chowned to its owner.
- M-Ins and M-Del have become rebindable.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The Makefile bakes LD_RUN_PATH=...:$(HOME)/lib:/usr/local/lib:... into the
command binaries via LDENV, embedding the build host HOME directory in the
shipped binaries:
do_package_qa: QA Issue: File /usr/bin/tchmgr ... contains reference to the
build host HOME directory [buildpaths]
Strip the $(HOME)/lib and /usr/local/lib entries from the generated Makefile
after configure.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
GCC 16 reports a set-but-unused variable in the JSON parser, and avro builds
with -Werror:
lang/c++/impl/json/JsonIO.cc:296:30: error: variable 'n' set but not used
[-Werror=unused-but-set-variable=]
Extend the existing toolchain-gcc -Wno-error workaround to cover it.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
do_configure generates autoconf.h by compiling and running a
small lock-feature probe with the build-host compiler.
The Makefile hardcodes the target networking libs
(-lnet -lnsl, from the libnet/libnsl2 DEPENDS)
into LDFLAGS, but those only exist in the target sysroot,
so the native link fails with
'cannot find -lnet/-lnsl'
The probe does not use them, so override LDFLAGS for this native
step with just what it needs.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
mbuffer's Makefile invokes 'bash mkversion.sh' with no path
which only works in the source tree so set B = S.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
configure cannot probe for a pipefail-capable shell when
cross compiling; pass --with-shell=/bin/bash and add bash
to runtime deps.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
clang does not recognise -Wmaybe-uninitialized and errors on
the -Wno-error form under -Werror,-Wunknown-warning-option
apply it only for the gcc toolchain.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
fix -Werror=poison-system-directories in g-ir-scanner
CMake's pkg_check_modules stores the bare INCLUDEDIR variable (/usr/include)
on imported targets' INTERFACE_INCLUDE_DIRECTORIES. WebKit's FindGI.cmake
forwards every interface include dir to g-ir-scanner as -I, so the
introspection compile is invoked with -I/usr/include. With a GCC configured
with --enable-poison-system-directories=error (as in OpenEmbedded cross gcc):
cc1: error: include location "/usr/include" is unsafe for cross-compilation
[-Werror=poison-system-directories]
g-ir-scanner only extracts -D/-I/-U from CFLAGS (not -Wno-error flags), so the
warning cannot be relaxed via the recipe CFLAGS. Filter the bare host system
include directories (/usr/include, /usr/local/include) out of the scanner flags
in FindGI.cmake instead; the sysroot include path is added automatically.
filter bare system include dirs from gir generator expr
The FindGI g-ir-scanner fix only filtered /usr/include from the dependency
loop that builds scanner_flags. The include dirs also reach the scanner via
the per-target INTERFACE_INCLUDE_DIRECTORIES generator expression that is
joined into -I flags on the g-ir-scanner command line, which was left
unfiltered.
JavaScriptCore-4.1.gir happens to carry no bare /usr/include on its target
so it succeeded, but WebKit2/WebKitGTK does, so the WebKitGTK introspection
still failed under the OpenEmbedded cross compiler:
cc1: error: include location "/usr/include" is unsafe for cross-compilation
[-Werror=poison-system-directories]
Filter /usr/include and /usr/local/include out of the target_inc generator
expression with $<FILTER:...,EXCLUDE,...> too.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Fabio Estevam
Khem Raj
Alexander Stein
Ankur Tyagi
Wang Mingyu
Ishaan Desai
Martin Jansa
Thuận Nguyễn-Thái
Peter Marko
Jason Schonberg
Max Krummenacher
Bartosz Golaszewski
Trevor Woerner