From patchwork Thu Apr 16 06:47:18 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 86224 X-Patchwork-Delegate: yoann.congal@smile.fr Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 50052F8807F for ; Thu, 16 Apr 2026 06:48:32 +0000 (UTC) Received: from mail-wm1-f68.google.com (mail-wm1-f68.google.com [209.85.128.68]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.7579.1776322111257314787 for ; Wed, 15 Apr 2026 23:48:31 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google header.b=KpX06+sL; spf=pass (domain: smile.fr, ip: 209.85.128.68, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f68.google.com with SMTP id 5b1f17b1804b1-488a29e6110so80098775e9.3 for ; Wed, 15 Apr 2026 23:48:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google; t=1776322109; x=1776926909; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=r3uz/IBC8WoEl6OgkTCty9zioKhFMNZuwF2w6RxRGuE=; b=KpX06+sLZSb670wsjj4RTY8PhaQuVozU42+u4DCupN6iXrNRur0T5Rlu+05YnO3xWC CsUJ1TvNUsW6EdvilQqiB8afTV93q/pwc4vOwAsyulMy8KNk8ht3tsofylz8pohuy6hu YZ8qFc7PRR9BHpyOG6wpteMlbhij42Aevlm40= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1776322109; x=1776926909; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=r3uz/IBC8WoEl6OgkTCty9zioKhFMNZuwF2w6RxRGuE=; b=P4hW9bEcNfPvKgr8OBYSIg0OhIVUATCQTTWdEN+v/ibcPaKzGaHuAjzlXKfYy+T1z8 f1djXNAmVWge06ca8p/k8WCvbbr0LoGemqrS/KRFanhjE7CMPvkyDzqjWA4idVeXd1tC yLqFdKEPTtxo05RtQEajd/iDBCxkx0PxY/bTwMGAjpcxpP5ux3604k1Gb1ueBvDBLcAF lYi32COAHUmVHZETniCB41llAF7QHJEV7m1fWb+CKe1pp2g6ogSzFGPMd8RKeMvXFGWQ IHz0RiBS5ofQw7oMpjH+sn1oy3c+eCjBTW2CR+/XscWbOuuMMzBhjr7DyvDpVl1q6FwU Utrg== X-Gm-Message-State: AOJu0YxBmR2Ufd3LCYP0ea4GxJgwelnHBVtTPYaWCL2QhAf/5k56APSe RD4vs9mbE1brz0+x+V5EVYrjXLfiLXS4YqxBgUXJXQmYYn8hrXjZDM70+x0J9j0sIkyeBJENS6k fETfdCLz1sPB7 X-Gm-Gg: AeBDievDqSSZdx0r34trCYRwZOAeWtrBWOOhn8UdE1PDlsSosUugAAADw6IA0Ezrk4y 1AF6ioxLzdlcy5i15rtLjhVwo78PUR89ed9yiBEWBBhcdZcGd8+5MTu+w9gxL1wT6/B0AXnPn1t bsLjX2b/da3iRaH1Dp0yi0hD0+vne65pRCsBnhDw9xNCIzeYs7S3v/0plzkZ3oJ2GL69D9fQKB7 hk+q8z01CwSOXY6HS4oRJdFTYr6GMFcS96pPekIkviuvtZEPwMiYRjVrnVipJcDcJ0PHxnoCUdF ET2ENtdT2iLF9cgbJxSMOVbantYkxxSPUFAnP/mrhaWvCutRIh4qUonii4F1Wj6W6dBx6ZRmY+d Y1cJYxIzhCuDC8r4anSAZk00TgVWjivA7iVw+oE/l6gqQupVvkcB/cQbfmBRASzbwdtWEtpX1jc D71GDLVhuUK6k/NBbKCz9DwDsqDHJm/ayloX3aCY7Fpap/CtFvbGRcSSL3eeNkz4fiFxI/Gsstr KjXD7IqAf4HdzN3TgfrSTONFXjuMru67O8tRg== X-Received: by 2002:a05:600c:474c:b0:485:35d3:ce59 with SMTP id 5b1f17b1804b1-488d68101edmr316629135e9.10.1776322109251; Wed, 15 Apr 2026 23:48:29 -0700 (PDT) Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43ead3d5ea9sm11200017f8f.21.2026.04.15.23.48.28 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 15 Apr 2026 23:48:28 -0700 (PDT) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][whinlatter 17/47] go: upgrade 1.25.8 -> 1.25.9 Date: Thu, 16 Apr 2026 08:47:18 +0200 Message-ID: <3be4eeea60a52b8694ae0688d794bb44991ae634.1776321810.git.yoann.congal@smile.fr> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 16 Apr 2026 06:48:32 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/235359 From: Peter Marko Upgrade to latest 1.25.x release [1]: $ git --no-pager log --oneline go1.25.8..go1.25.9 7076e01d9d (tag: go1.25.9) [release-branch.go1.25] go1.25.9 abaa0cbb25 [release-branch.go1.25] cmd/go: disallow cgo trust boundary bypass 02f574a830 [release-branch.go1.25] crypto/tls: prevent deadlock when client sends multiple key update messages 82b0cdb741 [release-branch.go1.25] archive/tar: limit the number of old GNU sparse format entries 7d2dd3488c [release-branch.go1.25] cmd/compile: fix loopbce overflow check logic 72cc33629a [release-branch.go1.25] cmd/compile: fix mem access overlap detection 3ed3169244 [release-branch.go1.25] html/template: properly track JS template literal brace depth across contexts 4c79c4223e [release-branch.go1.25] internal/syscall/unix: properly support AT_SYMLINK_NOFOLLOW on Linux edc1e4a5f2 [release-branch.go1.25] crypto/x509: fix signature checking limit 210b8112b1 [release-branch.go1.25] crypto/x509: hoist policy pruning out of loop 93a4f03ed8 [release-branch.go1.25] runtime/race: apply LLVM zero-initialization fix cff64a5cf3 [release-branch.go1.25] cmd/go: tests: rename git-min-vers->git-sha256 7301bd39d1 [release-branch.go1.25] cmd/go: skip git sha256 tests if git < 2.29 f9532f001a [release-branch.go1.25] test/fixedbugs: remove issue46234 test timeout 4f81fbf332 [release-branch.go1.25] doc: remove template use in godebug.md aed39507b1 [release-branch.go1.25] cmd/go/internal/cache: update trim timestamp before trimming 9a6627a5db [release-branch.go1.25] crypto/x509: fix wildcard domain exclusions. 19c660de6b [release-branch.go1.25] cmd/compile/internal/typecheck: simplify tcSliceHeader b02c84a684 [release-branch.go1.25] cmd/internal/testdir: pass -buildid to link command 814b540c17 [release-branch.go1.25] cmd/internal/testdir: unify link command de86eaeb0f [release-branch.go1.25] cmd/cgo/internal/test: use (syntactic) constant for C array bound Fixes CVE-2026-32282, CVE-2026-32289, CVE-2026-27144, CVE-2026-27143, CVE-2026-32288, CVE-2026-32283, CVE-2026-27140, CVE-2026-32280 and CVE-2026-32281. Release information: [2] [1] https://github.com/golang/go/compare/go1.25.8...go1.25.9 [2] https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU Signed-off-by: Peter Marko Signed-off-by: Yoann Congal --- meta/recipes-devtools/go/{go-1.25.8.inc => go-1.25.9.inc} | 2 +- ...binary-native_1.25.8.bb => go-binary-native_1.25.9.bb} | 6 +++--- ...oss-canadian_1.25.8.bb => go-cross-canadian_1.25.9.bb} | 0 .../go/{go-cross_1.25.8.bb => go-cross_1.25.9.bb} | 0 .../go/{go-crosssdk_1.25.8.bb => go-crosssdk_1.25.9.bb} | 0 .../go/{go-runtime_1.25.8.bb => go-runtime_1.25.9.bb} | 0 ...go-make-content-based-hash-generation-less-pedan.patch | 8 ++++---- .../go/0006-cmd-go-make-GOROOT-precious-by-default.patch | 2 +- meta/recipes-devtools/go/{go_1.25.8.bb => go_1.25.9.bb} | 0 9 files changed, 9 insertions(+), 9 deletions(-) rename meta/recipes-devtools/go/{go-1.25.8.inc => go-1.25.9.inc} (91%) rename meta/recipes-devtools/go/{go-binary-native_1.25.8.bb => go-binary-native_1.25.9.bb} (79%) rename meta/recipes-devtools/go/{go-cross-canadian_1.25.8.bb => go-cross-canadian_1.25.9.bb} (100%) rename meta/recipes-devtools/go/{go-cross_1.25.8.bb => go-cross_1.25.9.bb} (100%) rename meta/recipes-devtools/go/{go-crosssdk_1.25.8.bb => go-crosssdk_1.25.9.bb} (100%) rename meta/recipes-devtools/go/{go-runtime_1.25.8.bb => go-runtime_1.25.9.bb} (100%) rename meta/recipes-devtools/go/{go_1.25.8.bb => go_1.25.9.bb} (100%) diff --git a/meta/recipes-devtools/go/go-1.25.8.inc b/meta/recipes-devtools/go/go-1.25.9.inc similarity index 91% rename from meta/recipes-devtools/go/go-1.25.8.inc rename to meta/recipes-devtools/go/go-1.25.9.inc index 5db1b1c04cb..9a96f6f1704 100644 --- a/meta/recipes-devtools/go/go-1.25.8.inc +++ b/meta/recipes-devtools/go/go-1.25.9.inc @@ -18,4 +18,4 @@ SRC_URI += "\ file://0011-cmd-link-stop-forcing-binutils-gold-dependency-on-aa.patch \ file://0001-runtime-when-using-cgo-on-386-call-C-sigaction-funct.patch \ " -SRC_URI[main.sha256sum] = "e988d4a2446ac7fe3f6daa089a58e9936a52a381355adec1c8983230a8d6c59e" +SRC_URI[main.sha256sum] = "0ec9ef8ebcea097aac37decae9f09a7218b451cd96be7d6ed513d8e4bcf909cf" diff --git a/meta/recipes-devtools/go/go-binary-native_1.25.8.bb b/meta/recipes-devtools/go/go-binary-native_1.25.9.bb similarity index 79% rename from meta/recipes-devtools/go/go-binary-native_1.25.8.bb rename to meta/recipes-devtools/go/go-binary-native_1.25.9.bb index df6cb542fb6..b11b822c946 100644 --- a/meta/recipes-devtools/go/go-binary-native_1.25.8.bb +++ b/meta/recipes-devtools/go/go-binary-native_1.25.9.bb @@ -9,9 +9,9 @@ PROVIDES = "go-native" # Checksums available at https://go.dev/dl/ SRC_URI = "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOTUPLE}" -SRC_URI[go_linux_amd64.sha256sum] = "ceb5e041bbc3893846bd1614d76cb4681c91dadee579426cf21a63f2d7e03be6" -SRC_URI[go_linux_arm64.sha256sum] = "7d137f59f66bb93f40a6b2b11e713adc2a9d0c8d9ae581718e3fad19e5295dc7" -SRC_URI[go_linux_ppc64le.sha256sum] = "28ed144a945e4d7188c93f8d85fb772a98ed18f8f9f8d3a650696b739f8cc57c" +SRC_URI[go_linux_amd64.sha256sum] = "00859d7bd6defe8bf84d9db9e57b9a4467b2887c18cd93ae7460e713db774bc1" +SRC_URI[go_linux_arm64.sha256sum] = "ec342e7389b7f489564ed5463c63b16cf8040023dabc7861256677165a8c0e2b" +SRC_URI[go_linux_ppc64le.sha256sum] = "b0c41c7da1fc8d39020d65296a0dc54167afd9f76d67064e22c31ce3d839a739" UPSTREAM_CHECK_URI = "https://golang.org/dl/" UPSTREAM_CHECK_REGEX = "go(?P\d+(\.\d+)+)\.linux" diff --git a/meta/recipes-devtools/go/go-cross-canadian_1.25.8.bb b/meta/recipes-devtools/go/go-cross-canadian_1.25.9.bb similarity index 100% rename from meta/recipes-devtools/go/go-cross-canadian_1.25.8.bb rename to meta/recipes-devtools/go/go-cross-canadian_1.25.9.bb diff --git a/meta/recipes-devtools/go/go-cross_1.25.8.bb b/meta/recipes-devtools/go/go-cross_1.25.9.bb similarity index 100% rename from meta/recipes-devtools/go/go-cross_1.25.8.bb rename to meta/recipes-devtools/go/go-cross_1.25.9.bb diff --git a/meta/recipes-devtools/go/go-crosssdk_1.25.8.bb b/meta/recipes-devtools/go/go-crosssdk_1.25.9.bb similarity index 100% rename from meta/recipes-devtools/go/go-crosssdk_1.25.8.bb rename to meta/recipes-devtools/go/go-crosssdk_1.25.9.bb diff --git a/meta/recipes-devtools/go/go-runtime_1.25.8.bb b/meta/recipes-devtools/go/go-runtime_1.25.9.bb similarity index 100% rename from meta/recipes-devtools/go/go-runtime_1.25.8.bb rename to meta/recipes-devtools/go/go-runtime_1.25.9.bb diff --git a/meta/recipes-devtools/go/go/0001-cmd-go-make-content-based-hash-generation-less-pedan.patch b/meta/recipes-devtools/go/go/0001-cmd-go-make-content-based-hash-generation-less-pedan.patch index 6d75266cbe6..921e59c4a20 100644 --- a/meta/recipes-devtools/go/go/0001-cmd-go-make-content-based-hash-generation-less-pedan.patch +++ b/meta/recipes-devtools/go/go/0001-cmd-go-make-content-based-hash-generation-less-pedan.patch @@ -109,7 +109,7 @@ index 7b073165d5..1f618be0bb 100644 } // Configuration specific to compiler toolchain. -@@ -2639,8 +2641,25 @@ func envList(key, def string) []string { +@@ -2636,8 +2638,25 @@ func envList(key, def string) []string { return args } @@ -136,7 +136,7 @@ index 7b073165d5..1f618be0bb 100644 if cppflags, err = buildFlags("CPPFLAGS", "", p.CgoCPPFLAGS, checkCompilerFlags); err != nil { return } -@@ -2656,6 +2675,13 @@ func (b *Builder) CFlags(p *load.Package) (cppflags, cflags, cxxflags, fflags, l +@@ -2653,6 +2672,13 @@ func (b *Builder) CFlags(p *load.Package) (cppflags, cflags, cxxflags, fflags, l if ldflags, err = buildFlags("LDFLAGS", DefaultCFlags, p.CgoLDFLAGS, checkLinkerFlags); err != nil { return } @@ -150,7 +150,7 @@ index 7b073165d5..1f618be0bb 100644 return } -@@ -2673,7 +2699,7 @@ func (b *Builder) cgo(a *Action, cgoExe, objdir string, pcCFLAGS, pcLDFLAGS, cgo +@@ -2670,7 +2696,7 @@ func (b *Builder) cgo(a *Action, cgoExe, objdir string, pcCFLAGS, pcLDFLAGS, cgo p := a.Package sh := b.Shell(a) @@ -159,7 +159,7 @@ index 7b073165d5..1f618be0bb 100644 if err != nil { return nil, nil, err } -@@ -3237,7 +3263,7 @@ func (b *Builder) swigOne(a *Action, file, objdir string, pcCFLAGS []string, cxx +@@ -3238,7 +3264,7 @@ func (b *Builder) swigOne(a *Action, file, objdir string, pcCFLAGS []string, cxx p := a.Package sh := b.Shell(a) diff --git a/meta/recipes-devtools/go/go/0006-cmd-go-make-GOROOT-precious-by-default.patch b/meta/recipes-devtools/go/go/0006-cmd-go-make-GOROOT-precious-by-default.patch index 15ffdb3cf38..4ac478be851 100644 --- a/meta/recipes-devtools/go/go/0006-cmd-go-make-GOROOT-precious-by-default.patch +++ b/meta/recipes-devtools/go/go/0006-cmd-go-make-GOROOT-precious-by-default.patch @@ -94,7 +94,7 @@ index 1f618be0bb..651fa64582 100644 if err := sh.Mkdir(a.Objdir); err != nil { return err } -@@ -1739,6 +1756,14 @@ func (b *Builder) linkShared(ctx context.Context, a *Action) (err error) { +@@ -1736,6 +1753,14 @@ func (b *Builder) linkShared(ctx context.Context, a *Action) (err error) { return err } diff --git a/meta/recipes-devtools/go/go_1.25.8.bb b/meta/recipes-devtools/go/go_1.25.9.bb similarity index 100% rename from meta/recipes-devtools/go/go_1.25.8.bb rename to meta/recipes-devtools/go/go_1.25.9.bb