diff mbox series

[AUH] libgit2: upgrading to 1.9.7 SUCCEEDED

Message ID 0101019ffefcc38b-7eeecbfa-f877-4e01-bba7-15e8af8cc88f-000000@us-west-2.amazonses.com
State New
Headers show
Series [AUH] libgit2: upgrading to 1.9.7 SUCCEEDED | expand

Commit Message

auh@yoctoproject.org Aug. 14, 2026, 6:36 a.m. UTC 
Hello,

this email is a notification from the Auto Upgrade Helper
that the automatic attempt to upgrade the recipe(s) *libgit2* to *1.9.7* has Succeeded.

Next steps:
    - apply the patch: git am 0001-libgit2-upgrade-1.9.6-1.9.7.patch
    - check the changes to upstream patches and summarize them in the commit message,
    - compile an image that contains the package
    - perform some basic sanity tests
    - amend the patch and sign it off: git commit -s --reset-author --amend
    - send it to the appropriate mailing list

Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.

Please review the attached files for further information and build/update failures.
Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler

Regards,
The Upgrade Helper

-- >8 --
From 7f7f9f5b3528f464f3ed56f5b01f1ab1dbabbf41 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <auh@yoctoproject.org>
Date: Fri, 14 Aug 2026 06:36:36 +0000
Subject: [PATCH] libgit2: upgrade 1.9.6 -> 1.9.7

Source: docs/changelog.md

v1.9.7
------

This is an security release with one change.

* Escape remote repository paths in libssh2

  In v1.9.2, we started escaping repository paths in the OpenSSH-based
  exec ssh transport. Bring the same escaping to the libssh2 transport
  to avoid any potential command injection.

In addition, changes have been ported from the main branch to update
CI builds.
---
 ...cmake-mark-system-libraries-are-private-link-librari.patch | 4 +---
 .../libgit2/{libgit2_1.9.6.bb => libgit2_1.9.7.bb}            | 2 +-
 2 files changed, 2 insertions(+), 4 deletions(-)
 rename meta/recipes-support/libgit2/{libgit2_1.9.6.bb => libgit2_1.9.7.bb} (93%)
diff mbox series

Patch

diff --git a/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch b/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch
index 267770ae6f..93f1f3a870 100644
--- a/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch
+++ b/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch
@@ -1,4 +1,4 @@ 
-From 5670d3eed82f0d64766158809bf3d0c7c631b0ea Mon Sep 17 00:00:00 2001
+From 41048806aec8a4b71f3ccf11fdedbec88080a675 Mon Sep 17 00:00:00 2001
 From: Ross Burton <ross.burton@arm.com>
 Date: Thu, 23 Jul 2026 17:35:23 +0100
 Subject: [PATCH] cmake: mark system libraries are private link libraries
@@ -38,5 +38,3 @@  index 8045ddef9..fafdb09ec 100644
  target_include_directories(libgit2package SYSTEM PRIVATE ${LIBGIT2_INCLUDES})
  target_include_directories(libgit2package INTERFACE $<INSTALL_INTERFACE:${CMAKE_INSTALL_INCLUDEDIR}>)
  
--- 
-2.43.0
diff --git a/meta/recipes-support/libgit2/libgit2_1.9.6.bb b/meta/recipes-support/libgit2/libgit2_1.9.7.bb
similarity index 93%
rename from meta/recipes-support/libgit2/libgit2_1.9.6.bb
rename to meta/recipes-support/libgit2/libgit2_1.9.7.bb
index b17b22c63e..2de3503aac 100644
--- a/meta/recipes-support/libgit2/libgit2_1.9.6.bb
+++ b/meta/recipes-support/libgit2/libgit2_1.9.7.bb
@@ -8,7 +8,7 @@  DEPENDS = "curl openssl zlib libssh2 libgcrypt libpcre2"
 SRC_URI = "git://github.com/libgit2/libgit2.git;branch=maint/v1.9;protocol=https;tag=v${PV} \
            file://0001-cmake-mark-system-libraries-are-private-link-librari.patch"
 
-SRCREV = "26055f5af74ab1cf636d272e8a34315496d3f06f"
+SRCREV = "49e408b3208bc3093757a1c2db938d3590f3f412"
 
 inherit cmake