Commit Graph

2444 Commits

Author SHA1 Message Date
Hongxu Jia 6d835df920 php: remove php-phar to support reproducible build
According to [1][2], generate phar.php during cross-compile can't be
done, but upstream test res of $(TEST_PHP_EXECUTABLE) is not suitable
for Yocto.

Explicitly set TEST_PHP_EXECUTABLE_RES = "1" to not generate phar.php
for target recipe

Drop 0005-sapi-cli-config.m4-fix-build-directory.patch which is obsolete
for generating phar.php

After apply this commit
...log.do_compile...
Generating phar.php
Skipping phar.php generating during cross compilation
Generating phar.phar
Skipping phar.phar generating during cross compilation
...log.do_compile...

Then php supports reproducible build

[1] https://github.com/php/php-src/issues/11099
[2] https://github.com/php/php-src/commit/93fa9613e162d1a0e8479ba83c4b6a399846e209

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-18 08:23:47 -08:00
Wang Mingyu 7693ed512e ctags: upgrade 6.2.20251109.0 -> 6.2.20251116.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-18 08:23:42 -08:00
Gyorgy Sarvari 1e2731fce0 yasm: patch CVE-2021-33456
Details: https://nvd.nist.gov/vuln/detail/CVE-2021-33465

The patch was taken from Debian:
https://sources.debian.org/patches/yasm/1.3.0-8/1020-hash-null-CVE-2021-33456.patch/

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-15 15:49:44 -08:00
Gyorgy Sarvari 66a0b01b52 yasm: patch CVE-2021-33464
Details: https://nvd.nist.gov/vuln/detail/CVE-2021-33464

The patch was taken from Debian:
https://sources.debian.org/patches/yasm/1.3.0-8/1010-nasm-pp-no-env-CVE-2021-33464.patch/

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-15 15:49:44 -08:00
Gyorgy Sarvari cc30757a7f yasm: patch CVE-2023-29579
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-29579

The patch was taken from Debian:
https://sources.debian.org/patches/yasm/1.3.0-8/1000-x86-dir-cpu-CVE-2023-29579.patch/

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-15 15:49:44 -08:00
Gyorgy Sarvari 93f85e4fd2 yasm: add alternative CVE_PRODUCT
There are multiple vendors for yasm:

$ sqlite3 ./nvdcve_2-2.db "select distinct vendor, product from products where product = 'yasm';"
tortall|yasm
yasm_project|yasm

Both products refer to the same application

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-15 15:49:44 -08:00
Khem Raj f3cc7f1d7f cbindgen: Fix getrandom build with musl/riscv32
New upgrade to 0.29.2 broke it.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-13 23:02:37 -08:00
Markus Volk b9370342b4 fex: add recipe
Fex is a fast usermode x86 and x86-64 emulator for Arm64 Linux
It is used by 'valve' to run windows games on snapdragon

Compilation requires TOOLCHAIN = "clang"

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-13 23:02:36 -08:00
Yi Zhao 62b2b23e0c protobuf: update UPSTREAM_CHECK_GITTAGREGEX
Update UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable
verison.

Before the patch:
$ devtool latest-version protobuf
INFO: Current version: 6.31.1
INFO: Latest version:

After the patch:
$ devtool latest-version protobuf
INFO: Current version: 6.31.1
INFO: Latest version: 6.31.1
INFO: Latest version's commit: 74211c0dfc2777318ab53c2cd2c317a2ef9012de

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-12 09:39:00 -08:00
Yi Zhao a07d522d70 php: add UPSTREAM_CHECK_URI
Add UPSTREAM_CHECK_URI and UPSTREAM_CHECK_REGEX to check the correct
latest stable verison.

Before the patch:
$ devtool latest-version php
INFO: Current version: 8.4.14
INFO: Latest version:

After the patch:
$ devtool latest-version php
INFO: Current version: 8.4.14
INFO: Latest version: 8.4.14

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-12 09:39:00 -08:00
Yi Zhao 7d800ebd21 abseil-cpp: add UPSTREAM_CHECK_URI
Add UPSTREAM_CHECK_URI and UPSTREAM_CHECK_REGEX to check the correct
latest stable verison.

Before the patch:
$ devtool latest-version abseil-cpp
INFO: Current version: 20250814.1
INFO: Latest version:

After the patch:
$ devtool latest-version abseil-cpp
INFO: Current version: 20250814.1
INFO: Latest version: 20250814.1

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-12 09:38:57 -08:00
Wang Mingyu c3410af221 json-schema-validator: upgrade 2.3.0 -> 2.4.0
Changelog:
===========
- Added CI job to publish GitHub release
- Maintenance to Fedora CI infrastructure
- Reference validation using contains() result rather than exception handling
- add support for $defs instead of definitions
- Apply clang-format / fix "test / Check pre-commit" failures
- Adding verbose error messages for logical combinations
- fix: issue-311
- Fix cmake install target on windows
- error-messages: Numeric limit errors should show maximum precision
- Add Fedora packaging
- Improve and fix bugs in Conanfile

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-11 10:19:41 -08:00
Wang Mingyu 5817326052 ctags: upgrade 6.2.20251026.0 -> 6.2.20251109.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-11 10:19:41 -08:00
Khem Raj 430667a97c heaptrack: Update to latest tip of trunk
* It has cmake 4 fixes
* Drop all patches, they are no more needed
* Fix build with glibc-2.43/c23
* Enabled on riscv64, since libunwind now supports it

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-10 20:31:54 -08:00
Jan Vermaete d41b4f0447 tk: disable zipfs in configuration
The tk.tcl file was missing on the rootfs.

  File "/usr/lib/python3.13/tkinter/__init__.py", line 2459, in __init__
    self.tk = _tkinter.create(screenName, baseName, className, interactive, wantobjects, useTk, sync, use)
              ~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  _tkinter.TclError: Can't find a usable tk.tcl in the following directories:
    //zipfs:/app/tk_library //zipfs:/lib/tk/tk_library //zipfs:/lib/tk /usr/lib/tk9.0 /usr/lib/tcl9.0/tk9.0 /usr/lib/tk9.0 /usr/lib/tk9.0 /lib/tk9.0 /usr/library

By disabling the zipfs options the tk.tcl is in the rootfs.

Debian did also disable this option.
@see: https://sources.debian.org/src/tk9.0/9.0.2-1/debian/rules#L39

Tested on Walnascar.  But master does have the same version of Tk.

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-10 07:50:05 -08:00
Gyorgy Sarvari c103e53f0d cbindgen: upgrade 0.28.0 -> 0.29.2
Drop patch that is incorporated in this release.

Changelog:

0.29.2
 * Request serde's std feature to avoid issues with newer toml versions.

0.29.1
 * enum: Track dependencies properly in enumerations.
 * constant: Handle cfg in associated constants.
 * Remove "display" feature from the toml crate
 * Fix incorrect detection of duplicated constants
 * docs: Correct after_include type in example config (fix)
 * cargo update
 * Update toml to 0.9

0.29.0
 * Support no-export annotation for statics and functions.
 * Fixed conditional fields of constexpr literal structs
 * Add rename rule for generated associated constant
 * Upgrade heck to 0.5
 * Add support for an optional nullable attribute
 * docs.md: Fix deprecated_with_note and deprecated_variant_with_note being spelled as 'notes'
 * Fix generic with "void" default
 * Fixed error generation of structures using the keyword as inside arrays
 * Added test for unsafe(no_mangle) attribute
 * Fixed handling of trait methods containing the unsafe attribute
 * Rename -Zparse-only

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-08 23:04:38 -08:00
Michael Wyraz abbbaf2ef8 gpp: Add recipe
gpp is a general-purpose preprocessor

Signed-off-by: Michael Wyraz <mw@brick4u.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-11-04 23:15:08 -08:00
Ankur Tyagi fb27cbf27a mercurial: set CVE_PRODUCT to "mercurial-scm:mercurial mercurial:mercurial"
Other product "mercurial" introduce false CVE finding like:

https://nvd.nist.gov/vuln/detail/CVE-2022-43410

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-30 21:33:54 -07:00
Hongxu Jia fe7aaabb1c nodejs: fix gcc compile failed for 32 bit arm target
Use gcc to compile failed for 32 bit arm target

$ echo 'MACHINE = "qemuarm"' >> conf/local.conf
$ bitbake nodejs
...
 2645 |         );
      |         ^
../deps/llhttp/src/llhttp.c:2643:11: error: incompatible type for argument 1 of 'vandq_u16'
 2643 |           vcgeq_u8(input, vdupq_n_u8(' ')),
      |           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      |           |
      |           uint8x16_t
...

Use '-flax-vector-conversions' to permit conversions between vectors
with differing element types or numbers of subparts

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-30 09:37:15 -07:00
Wang Mingyu 6e9d3bc12b sip: upgrade 6.13.1 -> 6.14.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-29 10:14:14 -07:00
Wang Mingyu 1504517d92 python3-psycopg: upgrade 3.2.11 -> 3.2.12
Changelog:
 Allow copy to pass different types per column, as long as the database can convert them.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-29 10:14:13 -07:00
Wang Mingyu 6057d7c8dc doxygen: upgrade 1.14.0 -> 1.15.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-29 10:14:13 -07:00
Wang Mingyu e573500dfd ctags: upgrade 6.2.20251019.0 -> 6.2.20251026.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-29 10:14:13 -07:00
Jason Schonberg aa302fbb99 nodejs: upgrade 22.21.0 -> 22.21.1
Changelog: https://github.com/nodejs/node/releases/tag/v22.21.1

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-29 10:14:13 -07:00
Khem Raj 466bf08759 pocketpy: Upgrade to 3.1.3
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-28 23:31:28 -07:00
Peter Kjellerstedt f1ce65fc8e python3-kconfiglib: Move to meta-oe
It will be needed by lvgl.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-24 20:41:20 -07:00
Adam x Nilsson 2c36d8b7f3 python3-pcpp: Add recipe for https://github.com/ned14/pcpp
It will be needed by lvgl.

Signed-off-by: Adam x Nilsson <adam.x.nilsson@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-24 20:41:20 -07:00
Jason Schonberg 3f3c8f39ed php: upgrade 8.4.13 -> 8.4.14
This is a bug fix release.

Changelog: https://www.php.net/ChangeLog-8.php#8.4.14

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-24 09:06:24 -07:00
Wang Mingyu 0fe55ce6a0 python3-psycopg: upgrade 3.2.10 -> 3.2.11
Changelog:
===========
- Fix spurious readiness flags in some of the wait functions
- Fix high CPU usage using the wait_c function on Windows
- Fix bad data on error in binary copy
- Respect Copy.set_types() in TEXT copy in C version, consistently with the Python version
- Don't raise warning, and don’t leak resources, if a builtin function is used as JSON dumper/loader function
- Improve performance of Python conversion on results loading

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-21 20:02:42 -07:00
Wang Mingyu 98bf66ce7c ctags: upgrade 6.2.20251012.0 -> 6.2.20251019.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-21 20:02:39 -07:00
Jason Schonberg a2299f5fb1 nodejs: upgrade 22.20.0 -> 22.21.0
Changelog: https://github.com/nodejs/node/releases/tag/v22.21.0

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-20 19:46:58 -07:00
Gyorgy Sarvari 6b9b29258c libdbi-perl: fix ptests
Add missing runtime dependencies for the ptest package.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-17 14:10:37 -07:00
Wang Mingyu 0040e2fb74 sip: upgrade 6.12.0 -> 6.13.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-14 09:00:25 -07:00
Wang Mingyu 2e2c7e592e mpich: upgrade 4.3.1 -> 4.3.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-14 09:00:20 -07:00
Wang Mingyu 0c42664867 ctags: upgrade 6.2.20250921.0 -> 6.2.20251012.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-14 09:00:19 -07:00
Wang Mingyu 9668f1bec9 b4: upgrade 0.14.2 -> 0.14.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-14 09:00:18 -07:00
Khem Raj cb93879fbb abseil-cpp: Upgrade to 20250814.1 release
Use tarball instead of git fetcher

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-10 20:16:29 -07:00
Changqing Li 441873fdc5 doxygen: fix reproducibility issue of doxygen-src
[ snip of CMakeLists.txt ]
BISON_TARGET(constexp
             ${CMAKE_CURRENT_LIST_DIR}/constexp.y
             ${GENERATED_SRC}/ce_parse.cpp
             COMPILE_FLAGS "${YACC_FLAGS}")
[ end of snip ]

bison embeds full paths in its generated headers, eg:
bison -o /full/build/path/generated/example.cpp ...
The header will include:
 #ifndef YY_FULL_BUILD_PATH_GENERATED_MSCGEN_LANGUAGE_HPP_INCLUDED
 #define YY_FULL_BUILD_PATH_GENERATED_MSCGEN_LANGUAGE_HPP_INCLUDED

This make doxygen-src not reproducible, fix by replacing full build path

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-10 19:27:34 -07:00
Joao Lima ecf51fd294 openocd: add fallback repository mirror
Add a fallback mirror for the openocd repository fetch
process, so that if the primary source repo.or.cz is unavailable,
the build system will attempt to download the source code from the gitHub
mirror.

Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 11:04:34 -07:00
Joao Lima e7eb50fe25 openocd: add dmem support to am64xx and j784s4 platforms
Platform support patches:
   - Add SWD native configuration files for AM64x and J784s4 boards
   - Configure DMEM access parameters in ti_k3.cfg for direct memory operations
   - Set up DAPBUS debugger and emulated AP descriptions

Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 11:04:34 -07:00
Joao Lima 050608b50d openocd: bump the openocd, jimtcl versions
Version bumps:
   - openocd: 91bd431 -> 66ea461
   - jimtcl: fcbb449 -> f160866
   - libjaylink: 9aa7a59 -> 0d23921

Signed-off-by: Joao Lima <joao.lima@hbkworld.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-09 11:04:34 -07:00
Wang Mingyu ad0d8610ed makeself: upgrade 2.5.0 -> 2.6.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:52 -07:00
Wang Mingyu aa7dcb3c2e flatbuffers: upgrade 25.2.10 -> 25.9.23
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 23:35:51 -07:00
Gyorgy Sarvari 072623d578 luajit: ignore CVE-2024-2517{6,7,8}
All 3 CVEs are fixed in the currently used revision.

Fixes:
CVE-2024-25176: https://github.com/LuaJIT/LuaJIT/commit/343ce0edaf3906a62022936175b2f5410024cbfc
CVE-2024-25177: https://github.com/LuaJIT/LuaJIT/commit/85b4fed0b0353dd78c8c875c2f562d522a2b310f
CVE-2024-25178: https://github.com/LuaJIT/LuaJIT/commit/defe61a56751a0db5f00ff3ab7b8f45436ba74c8

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-08 18:46:01 -07:00
Khem Raj 4d6f772ff1 perfetto: Use gn from native sysroot
Prebuilts shipped with sources is a x86_64 binary which works ok
on x86_64 build hosts, but we do have arm64 hosts quite commonly
used to build OE these days, where this fails miserably. Therefore
use the gn from gn-native, so we can get it targtted correctly for
build host architecture.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Ross Burton <ross.burton@arm.com>
2025-10-02 10:17:48 -07:00
Jason Schonberg 169a0b79e2 php: upgrade 8.4.12 -> 8.4.13
This is a bugfix release.  There are integer overflow and memory leak fixes included.

Changelog: https://www.php.net/ChangeLog-8.php#8.4.13

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-26 15:31:35 -07:00
Jason Schonberg fbcfd9a9f5 nodejs: upgrade 22.19.0 -> 22.20.0
Chagelog: https://github.com/nodejs/node/releases/tag/v22.20.0

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 14:17:45 -07:00
Wang Mingyu 4e4ad04233 ctags: upgrade 6.2.20250907.0 -> 6.2.20250921.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-24 10:54:44 -07:00
Jeroen Hofstee d68c56e1ed php: ignore CVE-2024-3566
CVE-2024-3566 only effects Microsoft Windows.

Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-23 07:38:37 -07:00
Changqing Li 403b9a1717 pahole: fix a Segmentation fault error
Command "pahole --btf_features=default -J" will segmentation fault when
kernel-dbg package is also installed.

$pahole --btf_features=default -J
pahole[599]: segfault at 8 ip 00007f7c92d819e2 sp 00007f7c799febe0
error 6 in libdwarves.so.1.0.0[189e2,7f7c92d72000+1c000] likely on CPU 0
(core 0, socket 0)
Code: 74 19 ff ff 48 39 dd 75 ef 4c 89 ef e8 67 19 ff ff 49 8b 7c 24 18
e8 8d 13 ff ff 49 8b 14 24 49 8b 44 24 08 4c 89 e7 45 31 e4 <48> 89 42
08 48 89 10 e8 42 19 ff ff e9 30 ff ff ff e8 58 0a ff ff
Segmentation fault (core dumped)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-09-17 08:57:42 -07:00