Changes within the 7.0 LTS branch:
- 7.0.28: raise the maximum supported MariaDB (12.3), MySQL (9.7) and
TimescaleDB (2.27) versions; update VMware alarm discovery; fix excessive
history upload delay for Zabbix agents (ZBX-27495); assorted frontend/agent
fixes.
- 7.0.29: raise the maximum supported TimescaleDB version to 2.28; fix a
potential VMware collector crash on vCenter connectivity loss (ZBX-27975);
fix RabbitMQ template duplicate discovery keys; fix trend-average producing
inf values (ZBX-27453); fix remote command execution for trigger actions
when the target host is monitored by a proxy group (ZBX-27665).
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Deliberately switch from the conservative 2.0.x branch to upstream's
recommended 2.1.x line (upstream describes 2.0.x as "provided for the more
conservative distros" and recommends 2.1.x for most users).
Notable changes across the 2.1.x arc:
- Remove the flashrom plugin (2.1.0).
- Add native CBOR parsing and drop the libcbor2 dependency (2.1.2).
- No longer depend on json-glib, libarchive or protobuf-c (2.1.2).
- Add a systemd-pcrlock plugin wired into UEFI updates; add MTD lock and TCG
disk-encryption security attributes and support for externally-managed EFI
signature lists; enable more plugins when compiling for Android.
- Security/robustness: require trusted metadata for device updates, disallow
force installs over D-Bus, and numerous segfault / out-of-bounds-read fixes.
2.1.x removed the cbor, libarchive, plugin_flashrom and protobuf
meson options. Removed plugin_flashrom and protobuf from the default
PACKAGECONFIG, deleted the now-dead PACKAGECONFIG for libarchive,
plugin_flashrom, protobuf
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changes:
- imtcp/omfwd: add experimental TCP stream compression (zlib/zstd), distinct
from TLS-native compression.
- core: fix negated exact-priority filters such as local4.!=debug so they
match all documented priorities except the negated one.
- rainerscript: preserve embedded NULs at C-string boundaries; warn on
constant boolean AND/OR operands.
- imfile: deliver same-file monitors independently; RFC3164 parser honors
parser.parseHostnameAndTag at runtime; invalidate the cached programname
when a message tag changes.
- General hardening and testbench de-flaking across many commits.
8.2606.0 makes libyaml an explicit configure feature (previously
auto-detected) that is enabled by default.
Added PACKAGECONFIG for libyaml and keep it disabled
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changes across the 0.7.x series:
- 0.7.0: build fonts reproducibly (source restructuring, hence the major
version bump); generate OTF by default instead of TTF; provide LaTeX
OpenType fonts for XeTeX.
- 0.7.1 - 0.7.3: further reproducibility fixes; make Purisa/Sawasdee
embeddable-as-installable in PDF; glyph-width and PANOSE fixes; normalize
OS/2 Typo metrics for consistent line spacing.
- 0.7.4: fix parallel-build failure and a Type1 reproducibility issue; add a
Stylistic Set 1 (ss01) lookup for descenderless YO YING and THO THAN;
balance Kinnari/Norasi cubic splines.
- The 'ttf' tarball moved upstream from .../software/ttf-tlwg/ to
.../software/fonts-tlwg/fonts/ (old path 404s for this version); SRC_URI
updated accordingly.
- 0.7.4 relocated the fontconfig .conf files into the source tarball at
fonts-tlwg-${PV}/fontconfig/, so do_install:append now iterates that path
(58 ttf + 14 conf files installed).
- Updated LIC_FILES_CHKSUM md5 for COPYING: upstream additively added a
"LaTeX Supports" LPPL section (merged fonts-tlwg LaTeX package); no existing
license text removed, declared LICENSE unchanged.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changes:
- Add dnf and dnf_group package modules.
- Refactor cfe_autorun_inventory_packages; use a Python script to check the
Linux distribution version.
- Add cryptsetup to the stdlib paths.
- Add full-hosts-delete and 2FA support to the distributed cleanup script.
- Numerous lint/format cleanups, a fixed pip packages-promise regex, and
CHANGELOG formatting improvements.
Release announcement:
https://cfengine.com/blog/2026/cfengine-3-28-released-introspection/
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changes (spanning the 1.19.0 and 1.19.1 releases):
- Add a Path iterator (Cairo::Path::Element / const_iterator) and matching
path-iter example.
- Add XCB device and XCB surface APIs, and an Xlib device API.
- Surface gains create_similar_image(), supports_mime_type(), map_to_image()
and the MappedImageSurface class.
- Add the mesh pattern API.
- 1.19.1: mark Cairo::Path::Element/const_iterator for export in the Windows
build, fix a memory leak in Context::pop_group(), plus build/doc fixes.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changes:
- New --monitor option to run a command and watch its input, output, or both.
- Allow decimal values for --rate-limit; extend the %T / %{buffer-percent}
format to indicate the transfer method when the buffer is not being used.
- Performance: use splice() in more circumstances, use copy_file_range(2)
when input and output are both regular files, and speed up --discard by
splicing to /dev/null internally.
- Fixes: report signal interrupts on a new line (no "^C" over the progress),
prevent an endless wait on unread output-pipe data, avoid double-EOF on
spliced terminal input, and error out when the --pidfile cannot be replaced.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changes:
- core: remove the deprecated DCT and JPX decoders; GPG-based signature
improvements; fix a signature regression (KDE bug #520496); fix added
annotations getting lost in some cases (#1732); fix crashes in malformed
documents.
- utils: pdfinfo now sanitizes its output.
- cpp: add render_hint::ignore_paper_color to allow a transparent paper color.
- glib: construct PopplerPage::mutex, fixing a crash on macOS (#1743).
- qt5/qt6: fix a crash in some signature operations (#1737).
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changes:
- Fix a bug (introduced in 2.5.0) with multi-slots readers.
- Add support for the Haiku operating system.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changes:
- Add support for the --unreachable-script callback to filter unreachable
branch and MC/DC expressions.
- Update llvm2lcov to support llvm/22.
- Generate man and HTML documentation from RST sources.
- Various bug fixes and test-coverage improvements.
lcov 2.5's install target now generates its man pages (and HTML)
from RST via sphinx-build instead of shipping pre-built man pages as 2.4 did.
Added DEPENDS += python3-sphinx-native python3-sphinx-rtd-theme-native to
preserve the man-page packaging behavior (the install target hard-codes
"man html" and docs/conf.py uses the sphinx_rtd_theme).
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changes:
- 1.8.1: correctly close the slots of a multi-slots reader; fix three minor
issues found by AISLE in partnership with Red Hat; other minor improvements.
- 1.8.2: fix initialisation of composite devices (such as Yubico tokens) and
correctly close the slots of a serial multi-slots reader.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changes:
- Allow sorting the process list on any column via the new 'O' key
(case-insensitive column name, ascending/descending); the 'A' automatic
sort on the most-utilized resource is dropped.
- Show oom_score and oom_score_adj per process, and a system-wide available
(reclaimable) memory breakdown per category in bar-graph mode.
- Improved offline/online and hotpluggable CPU detection; maximum number of
CPUs raised from 2048 to 4096.
- Show full user and group names with the -i flag; support longer pod and
container names in parsable/json output.
- atopgpud now also gathers graphical-use NVIDIA GPU stats, can run without
root privileges, and uses UNIX domain sockets instead of TCP sockets.
- Raw file format is incompatible with previous versions (convert with
atopconvert).
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
oe-core carries a backport of libarchive PR #2846 (see
0003-Convert-RPM-reader-into-a-proper-format-supporting-b.patch, added
for RPM 6 support) which converts the RPM reader from a filter into a
proper format. That drops archive_read_support_filter_rpm() from the
public API in favour of archive_read_support_format_rpm(), and
fuse-archive fails to compile:
lib/reader.cc:509:9: error: use of undeclared identifier
archive_read_support_filter_rpm
Add a patch selecting the available entry point at compile time.
ARCHIVE_FORMAT_RPM is defined by archive.h only in versions providing
the new format, so it is an exact feature test and the recipe keeps
building against both stock and patched libarchive.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
We now have Rust 1.71+ version in oe-core so we can build ruff,
add it to the ptest runtime dependencies, install docs and fix
paths in test_docs.py.
There is a known jemallocator issue on aarch64 that affects ruff
and some of the pydantic tests from test_docs.py:
E <jemalloc>: Unsupported system page size E memory allocation of 4 bytes failed
More details about JEMALLOC_SYS_WITH_LG_PAGE:
https://github.com/gnzlbg/jemallocator/issues/170#issuecomment-1503228963
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Add a recipe for devtools, Python's missing debug print command and
more. Release 0.12.2:
- install debug into builtins via DebugProxy
From release 0.12.1:
- Fix docs publish.
From release 0.12.0:
- build docs on CI
- Update usage to reflect the recent addition of the pytest plugin
- Support dataclasses with slots
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Add a recipe for pytest-examples, Pytest plugin for testing examples
in docstrings and markdown files. Release v0.0.18:
- Adapts tests to pytest 8.3.4
- Increases triple quote search
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Ruff is an extremely fast Python linter and code formatter, written
in Rust. Add a recipe for release 0.16.0:
- Ruff now enables a much larger set of rules by default (413, up
from 59). See the blog post for more details and the new Default
Rules page for a full listing of the enabled rules.
- Ruff can now format Python code blocks in Markdown files and will
do this by default. See the documentation for more details.
- Ruff now supports ruff: ignore comments at the ends of lines,
like noqa comments, or on the line preceding a diagnostic. For
example, these both suppress an unused-import (F401) diagnostic.
- Fixes are now shown in check and format --check output.
- format --check now supports the same output formats as the linter,
including the github and gitlab outputs for rendering annotations
in CI
- The filename, location, end_location, fix.edits[].location, and
fix.edits[].end_location fields in the JSON output format may now
be null rather than defaulting to the empty string and row 1,
column 1, respectively.
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
uutils-coreutils sets PROVIDES/RPROVIDES = "coreutils" and is a drop-in
replacement that cannot coexist with GNU coreutils; both ship the same
update-alternatives links. meta-oe/conf/layer.conf already selects between
them with PREFERRED_PROVIDER_coreutils{,-native,nativesdk-}, defaulting to
GNU coreutils.
PREFERRED_PROVIDER only disambiguates providers reached through a
dependency, not recipes built as explicit targets. Since uutils-coreutils
was in world, 'bitbake world' and 'bitbake universe' pulled both recipes
into the same task graph as targets, so bitbake reported:
NOTE: Multiple .bb files are due to be built which each provide coreutils:
NOTE: Multiple .bb files are due to be built which each provide coreutils-native:
NOTE: Multiple .bb files are due to be built which each provide nativesdk-coreutils:
Key EXCLUDE_FROM_WORLD off the selected provider so only the chosen
implementation is built in world/universe. Building uutils-coreutils
explicitly, or selecting it via PREFERRED_PROVIDER_coreutils, still works.
This follows the existing conditional EXCLUDE_FROM_WORLD idiom used by
mpv, sox and vlc.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
python3-py-serializable is extended to nativesdk and RDEPENDS on
python3-defusedxml, but defusedxml itself was only extended to native, so
the nativesdk variant of the dependency did not exist:
WARNING: Nothing RPROVIDES 'nativesdk-python3-defusedxml' (but virtual:nativesdk:...python3-py-serializable_2.1.0.bb RDEPENDS on or otherwise requires it)
This also made nativesdk-python3-cyclonedx-python-lib unbuildable, since it
RDEPENDS on python3-py-serializable.
nativesdk-python3-xml, the recipe's own runtime dependency, is provided by
nativesdk-python3, so the nativesdk variant resolves cleanly.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
hwloc is only a build dependency for class-target, but libhwloc was an
unconditional RDEPENDS. native.bbclass rewrites runtime dependencies via
native_filter(), which suffixes any unsuffixed dependency, so libhwloc
became libhwloc-native for tbb-native and nativesdk-libhwloc for
nativesdk-tbb. The hwloc recipe sets no BBCLASSEXTEND, so neither variant
exists and nothing can provide them:
WARNING: Nothing RPROVIDES 'libhwloc-native' (but virtual:native:...tbb_2022.3.0.bb RDEPENDS on or otherwise requires it)
WARNING: Nothing RPROVIDES 'nativesdk-libhwloc' (but virtual:nativesdk:...tbb_2022.3.0.bb RDEPENDS on or otherwise requires it)
This cascaded to tbb-dev-native/tbb-native via the generic
RDEPENDS:${PN}-staticdev in bitbake.conf, and from there to opencv-native
through opencv's PACKAGECONFIG[tbb].
Gate the runtime dependency on class-target to match the existing DEPENDS
gating. Target builds keep libhwloc unchanged.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upstream is dead. The newest tools tarball on SourceForge is
uml_utilities_20040406 from 2004-04-08 [1], which is what this recipe
tracks, and the project's last artifact of any kind is a 2.4 kernel
patch from Nov 2004. The tarball still ships CVS metadata directories.
Keeping it building against a current toolchain has meant carrying six
portability patches (~450 lines) for missing headers, stat64 -> stat and
LDFLAGS handling, with a new one needed every couple of years.
Most of what it installs is no longer relevant to UML. The current
kernel UML HOWTO [2] documents only the vector transports and does not
mention uml_net or uml_switch at all. uml_net is also installed setuid
root and execvp()s bare "ifconfig"/"route" off $PATH from that setuid
context, which is not something we should be shipping.
tunctl is not lost: meta-networking has a standalone tunctl recipe, and
uml-utilities only registered it through update-alternatives at the
default priority anyway.
Nothing in any layer depends on it - the only reference was the
meta-oe-extended packagegroup, for build coverage.
Debian has since moved to a later 20070815.4 snapshot from a different
upstream tree, and even that was removed from testing in Nov 2025 with
open RC bugs [3]. Should anyone want uml_mconsole, uml_moo/uml_mkcow or
port-helper back, the right starting point is that snapshot rather than
this one.
[1] https://sourceforge.net/projects/user-mode-linux/files/tools/1/
[2] https://docs.kernel.org/virt/uml/user_mode_linux_howto_v2.html
[3] https://tracker.debian.org/pkg/uml-utilities
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Khem Raj
Khem Raj
Gianfranco Costamagna
Leon Anavi
Wang Mingyu