From patchwork Thu Aug 20 07:22:58 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 95875 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 78A96C5DF8C for ; Thu, 20 Aug 2026 07:23:07 +0000 (UTC) Received: from a27-30.smtp-out.us-west-2.amazonses.com (a27-30.smtp-out.us-west-2.amazonses.com [54.240.27.30]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1698.1787210579172421816 for ; Thu, 20 Aug 2026 00:22:59 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky header.b=gmqLYtRh; dkim=pass header.i=@amazonses.com header.s=hsbnp7p3ensaochzwyq5wwmceodymuwv header.b=bTl58Ks2; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.30, mailfrom: 010101a01e0d38a8-17e2e2bb-af60-4aca-9fdf-ac38f73a29c3-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky; d=yoctoproject.org; t=1787210578; h=Content-Type:MIME-Version:From:To:Subject:Message-Id:Date; bh=+9b/134Zb1mqcUww2HHGbG+t0QvFtsvikLPBH9G35Xw=; b=gmqLYtRhOohZg1bfz7MJcaTsiQOZlpw+154qVEONYDLsnkIsFoO46smYWHuSkjJ6 ixm0INY5lqdwrSa6GVqp2D9ddeJXoEdmD0UWXXRoIIZ0nT/5eK89ryE9AoM77nQAy4g +nnvd8J8VRbd8IdyKFDY3VXF1CCSBN4rlkQhrZ0s= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1787210578; h=Content-Type:MIME-Version:From:To:Subject:Message-Id:Date:Feedback-ID; bh=+9b/134Zb1mqcUww2HHGbG+t0QvFtsvikLPBH9G35Xw=; b=bTl58Ks2IdzIWypBs2fdUZNpLH5IqFVhNmGkn/FReQAYC2jaNKihzBYhjj3K9vl/ vf0+jBdd7beHWQ6wAy2mxm1QgvbfHrDaeThzf7CJsFQ3AqdULMFJiDDP3MegxvyDNkN 5VGSUM6wtF0CGrjXCkvUGshczPxwCfIrNxzTb7KE= MIME-Version: 1.0 From: auh@yoctoproject.org To: openembedded-core@lists.openembedded.org Subject: [AUH] bind: upgrading to 9.20.27 SUCCEEDED Message-ID: <010101a01e0d38a8-17e2e2bb-af60-4aca-9fdf-ac38f73a29c3-000000@us-west-2.amazonses.com> Date: Thu, 20 Aug 2026 07:22:58 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2026.08.20-54.240.27.30 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 20 Aug 2026 07:23:07 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243810 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *bind* to *9.20.27* has Succeeded. Next steps: - apply the patch: git am 0001-bind-upgrade-9.20.26-9.20.27.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From 8ccc212a050981102720b3e6eb53e485beb2c07d Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Thu, 20 Aug 2026 05:09:55 +0000 Subject: [PATCH] bind: upgrade 9.20.26 -> 9.20.27 Source: doc/changelog/changelog-9.20.27.rst BIND 9.20.27 ------------ New Features ~~~~~~~~~~~~ - Disclose active Negative Trust Anchors with Extended DNS Error 33. ``566e7018278`` A Negative Trust Anchor (RFC 7646) turns off DNSSEC validation for a domain, so a name that would normally fail validation resolves instead. named now marks such answers with Extended DNS Error code 33, "Negative Trust Anchor", so operators can see at a glance when a response came back only because an NTA was in effect. :gl:`#6268` :gl:`!12426` - Add development guidance for AI coding agents under .agents/skills/ ``ef651c93709`` This adds a set of skill documents that give AI coding agents the project's established practices up front instead of having them rediscovered (or gotten wrong) in every session: the canonical build and test invocations, the memory-allocator contract, the disciplines for RCU mutation, per-loop sharded structures, struct-layout work, and flight-recorder debugging of concurrency bugs, plus the commit and merge-request conventions. :gl:`!12401` - Add more unit tests for isc_time API. ``9d6855ef735`` While working on internal 64-bit time for BIND 9, the unit test suite for isc_time API has been extended. Backport the unit tests from 64-bit time branch to the main branch. This should make the unit tests for isc_time API (mostly) complete. Related to #2959 :gl:`!12432` Feature Changes ~~~~~~~~~~~~~~~ - Batch qp transaction for RPZ updates. ``cb40fb91fa2`` RPZ was built around fine-grained locking, but that forces the use of many small qp transactions. With this MR, we switch qp transaction to handle the full update to the rpz summary structure. While this serializes the RPZ updates, the reduced overhead from batching qp transactions more than compensates for it and results in improvements for big RPZ zones. :gl:`#5787`, #6270 :gl:`!12493` - Pass the work callback result to the done callback. ``65cdb7c7613`` The `isc_work` callback now returns `isc_result_t` and the value is handed to the done callback, so the callers no longer need their own result-passing state. :gl:`!12391` Bug Fixes ~~~~~~~~~ - Dig +yaml producing invalid YAML when a lookup fails. ``65d1776959e`` When "dig +yaml" was run and no server could be reached, dig printed its plain-text startup banner (the "; \<\<\>\> DiG ..." and ";; global options" lines) ahead of the machine-readable output, so the result was not valid YAML and could not be parsed. dig no longer emits that banner in YAML mode. As part of the same change, the banner is now built only after the whole command line has been read, so options given after the query name (such as +nocmd, +short and +yaml) are correctly reflected in it. :gl:`#1230` :gl:`!12430` - Ensure NSEC authority does not cross zonecut boundary. ``0baaddd096a`` When using a cached NSEC record to prove that a delegation is insecure, we now check that the signer [Changelog truncated as it exceeds 3000 characters; the full changelog can be found in an attachment to the AUH email] --- .../bind/bind/0001-avoid-start-failure-with-bind-user.patch | 2 +- .../0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch | 2 +- ...0001-named-lwresd-V-and-start-log-hide-build-options.patch | 4 ++-- ...bind-ensure-searching-for-json-headers-searches-sysr.patch | 4 ++-- meta/recipes-connectivity/bind/bind/conf.patch | 2 +- .../bind/bind/init.d-add-support-for-read-only-rootfs.patch | 2 +- .../bind/bind/make-etc-initd-bind-stop-work.patch | 2 +- .../bind/{bind_9.20.26.bb => bind_9.20.27.bb} | 2 +- 8 files changed, 10 insertions(+), 10 deletions(-) rename meta/recipes-connectivity/bind/{bind_9.20.26.bb => bind_9.20.27.bb} (97%) diff --git a/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch b/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch index 4bc8b4630c..30da1e9fd3 100644 --- a/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch +++ b/meta/recipes-connectivity/bind/bind/0001-avoid-start-failure-with-bind-user.patch @@ -1,4 +1,4 @@ -From cf7537b0ddccefd04dcb82ca470262ce61afb252 Mon Sep 17 00:00:00 2001 +From 7682cbc2fa624fbeeb088736e154090d92c8b524 Mon Sep 17 00:00:00 2001 From: Chen Qi Date: Mon, 15 Oct 2018 16:55:09 +0800 Subject: [PATCH] avoid start failure with bind user diff --git a/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch b/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch index c9dbff3817..f1d8a8e569 100644 --- a/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch +++ b/meta/recipes-connectivity/bind/bind/0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch @@ -1,4 +1,4 @@ -From fa7670386a1643de5b976f6928e42662b968d807 Mon Sep 17 00:00:00 2001 +From a633e336c248ceab41d3182848b65c95e90ef88c Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Fri, 10 Apr 2026 23:33:49 +0000 Subject: [PATCH] m4: Backport ax_prog_cc_for_build.m4 macros diff --git a/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch b/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch index 740d1e98e2..da4057064e 100644 --- a/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch +++ b/meta/recipes-connectivity/bind/bind/0001-named-lwresd-V-and-start-log-hide-build-options.patch @@ -1,4 +1,4 @@ -From 41901eaecf617abf8f2608e07baa775c75436a15 Mon Sep 17 00:00:00 2001 +From 4b870f60338fe45e036b8a76d47f053338920048 Mon Sep 17 00:00:00 2001 From: Hongxu Jia Date: Mon, 27 Aug 2018 21:24:20 +0800 Subject: [PATCH] `named/lwresd -V' and start log hide build options @@ -20,7 +20,7 @@ Signed-off-by: Armin Kuster 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac -index af020f0..f461229 100644 +index 56bca5b..4fd62ed 100644 --- a/configure.ac +++ b/configure.ac @@ -35,7 +35,7 @@ AC_DEFINE([PACKAGE_VERSION_EXTRA], ["][bind_VERSION_EXTRA]["], [BIND 9 Extra par diff --git a/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch b/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch index 3c7f09d6bd..9adc101247 100644 --- a/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch +++ b/meta/recipes-connectivity/bind/bind/bind-ensure-searching-for-json-headers-searches-sysr.patch @@ -1,4 +1,4 @@ -From 6a7536c66832e4d99d7d156256b1a98d9497c7de Mon Sep 17 00:00:00 2001 +From f3736e5535236cf978fd368b6905098ff6e4fd84 Mon Sep 17 00:00:00 2001 From: Paul Gortmaker Date: Tue, 9 Jun 2015 11:22:00 -0400 Subject: [PATCH] bind: ensure searching for json headers searches sysroot @@ -32,7 +32,7 @@ Signed-off-by: Paul Gortmaker 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac -index f47ce7b..af020f0 100644 +index c06a0d7..56bca5b 100644 --- a/configure.ac +++ b/configure.ac @@ -872,7 +872,7 @@ AS_CASE([$with_lmdb], diff --git a/meta/recipes-connectivity/bind/bind/conf.patch b/meta/recipes-connectivity/bind/bind/conf.patch index 8e82c57035..803456c0b3 100644 --- a/meta/recipes-connectivity/bind/bind/conf.patch +++ b/meta/recipes-connectivity/bind/bind/conf.patch @@ -1,4 +1,4 @@ -From 352339af9e6cd9fc03caff09a1b295f26dfadc32 Mon Sep 17 00:00:00 2001 +From 450187e8feac041de02afd4c0c9039cc41e04cb9 Mon Sep 17 00:00:00 2001 From: Qing He Date: Tue, 30 Nov 2010 13:35:42 +0800 Subject: [PATCH] bind: add new recipe diff --git a/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch b/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch index 73e39002ca..a2c1fbb8f7 100644 --- a/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch +++ b/meta/recipes-connectivity/bind/bind/init.d-add-support-for-read-only-rootfs.patch @@ -1,4 +1,4 @@ -From 75923521847618392e20fd9abd3245618b77c8f7 Mon Sep 17 00:00:00 2001 +From 582334d31432969be7e10906de7540f1dc64b17e Mon Sep 17 00:00:00 2001 From: Chen Qi Date: Thu, 27 Mar 2014 02:34:41 +0000 Subject: [PATCH] init.d: add support for read-only rootfs diff --git a/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch b/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch index 568e4f2e59..dc1f8f5a9a 100644 --- a/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch +++ b/meta/recipes-connectivity/bind/bind/make-etc-initd-bind-stop-work.patch @@ -1,4 +1,4 @@ -From 0224516d7bd100b6ea7b4fafdd07b42aa96cb0ba Mon Sep 17 00:00:00 2001 +From 50601a7ee8fd19ddbe9a592c57ae6197782d4c2f Mon Sep 17 00:00:00 2001 From: Roy Li Date: Thu, 15 Nov 2012 02:27:54 +0000 Subject: [PATCH] bind: make "/etc/init.d/bind stop" work diff --git a/meta/recipes-connectivity/bind/bind_9.20.26.bb b/meta/recipes-connectivity/bind/bind_9.20.27.bb similarity index 97% rename from meta/recipes-connectivity/bind/bind_9.20.26.bb rename to meta/recipes-connectivity/bind/bind_9.20.27.bb index 21ffad7bad..e915161d8c 100644 --- a/meta/recipes-connectivity/bind/bind_9.20.26.bb +++ b/meta/recipes-connectivity/bind/bind_9.20.27.bb @@ -21,7 +21,7 @@ SRC_URI = "https://ftp.isc.org/isc/bind9/${PV}/${BPN}-${PV}.tar.xz \ file://0001-m4-Backport-ax_prog_cc_for_build.m4-macros.patch \ " -SRC_URI[sha256sum] = "55248def0f870c4c46b3de72978ea972615131516663188a4564dca1d20bf350" +SRC_URI[sha256sum] = "145ab7a50b33a06d9d488b5e668c887e754f42acf8954e2b5dc7e238b080e4a0" UPSTREAM_CHECK_URI = "https://ftp.isc.org/isc/bind9/" # follow the ESV versions divisible by 2