From patchwork Wed Apr 22 15:18:57 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Alexander Kanavin X-Patchwork-Id: 86663 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C967BF9EDF9 for ; Wed, 22 Apr 2026 15:19:12 +0000 (UTC) Received: from mail-wr1-f49.google.com (mail-wr1-f49.google.com [209.85.221.49]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.85241.1776871149097297330 for ; Wed, 22 Apr 2026 08:19:09 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=HD/QRt21; spf=pass (domain: gmail.com, ip: 209.85.221.49, mailfrom: alex.kanavin@gmail.com) Received: by mail-wr1-f49.google.com with SMTP id ffacd0b85a97d-43fe62837baso3412127f8f.3 for ; Wed, 22 Apr 2026 08:19:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1776871147; x=1777475947; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=mOI8QpSnS8uTJDTzA1iTFf70sgNwvxU/EXIYxHXSHi8=; b=HD/QRt21VMyukxsroHu6weMVkXVBqBAY/dAB2skAoHC33jT+2H4bmd3Ar/uevC2AZe U2Ss33lEsEnMzgCcJ5KK5QED9YGCH55gO0gSUQ+2StVoEenBKqV/l2QM/PnsbCaSo59+ jKLB5QX3RfgfFkwqxhLqls/zCPTrqCcBYVWHKwHCJ3o7Wue/1Yi9F+NuJ8WlxHtD+wjb 2RlO8jKSuizzZ8oYHWxYgKg+tyrcUKg4+ttZ4VVrgcokQAfu5XetyTUjt59fgqXtxuJt OxGkAZqzVXVeZVzizYymtpei1oM9gEdOSmHdJXHg7WFMJUd9fWEtsqe9+GLudpeWBtjh nt8g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1776871147; x=1777475947; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=mOI8QpSnS8uTJDTzA1iTFf70sgNwvxU/EXIYxHXSHi8=; b=dYotjziWCKonsElpM4nl1WyfDsPUiBRNOWAOCPuqelgwpWuncYOsLZXYc3OMX6kpou Ig+KHcYs6lkIOMmuca/GfqM9NrRDC/lfShU8W3RVv/GwngvSgC4vXyD6+lM0hreCBjzA YQ4vrj+clyHnFgkOVfDjEn4j8fGzpA5fTqJ5MsStH/Xz7FKpNOGqqtmcDAaW1JXS0LXH L9BvTPrMgsoq8HdBjiZLjTaegCnZzGQKTrW0v8wgzrZbbcGUNlgTZqLQJKVg42pJg4pP rUF0agdgkrbJoJ4ElNjHrf2v/ezGzWZJ1cJoTUhQdC/6V1tfbj8+s2N9lQA1PGN5ai35 FjYg== X-Gm-Message-State: AOJu0YzXBLA1RWiNxDckyWRXj7iYHCnDrIBWPO/Lvz0A6xcPeqTqF3PR 4/YyDU26LDzpF7XZ3+pcAX3Cf0fRoIjjts3OXPOpNPbfs4bCH8ASeCleEWdLpg== X-Gm-Gg: AeBDiesAjS+oK4hia8fqA+UD+Emc4ET8ODVTKuZ2LIMSQppI2fFVzcPTGG4GNKhBpD8 qVbu0FkLcDvK23zubVEtaPiwB+u81dzDxhuFoQrlWVFVdTnQUC7qlSMmPdngmvyaM4cMdavxCu1 HAAkKxNi6qalzYClQG+tW0mSyIdFdDCWiIzwunPDVbHt/TLBT+6gLAVNnNNEBbHkx9OiEJf9wc3 urbKwn4J5OqH8e4XX5lnM+818wBTxnesneiLqo+zfi+LbpJZAUI0kzT7wZNt/eBTlcwsehSbtS+ Y6m8c7YgQ15MxPoJZD7iRU1anEg12Amji26sf8LMaUMhe3lDbjHfTtCPOgYhThO4ffIDw82+6cU ev5tYj7/fKtaLBZqjmFh3zt9UcKNmnBOkrTY8bfl+NHVV8L90a8K1/fi2pxPZ1mT/mHoWHbnvBn oEoRtMOEPtsOhTYL57CzdAV8TGPWeSbrgzpKtmk9fiKlHrkrX+giGteuidGPIlDKyv6KVXLQ== X-Received: by 2002:a5d:584c:0:b0:43f:dc86:d61f with SMTP id ffacd0b85a97d-43fe3db30c8mr37813213f8f.14.1776871147059; Wed, 22 Apr 2026 08:19:07 -0700 (PDT) Received: from Zen2.lab.linutronix.de. (drugstore.linutronix.de. [80.153.143.164]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43fe4cc07bbsm49384206f8f.11.2026.04.22.08.19.06 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 22 Apr 2026 08:19:06 -0700 (PDT) From: Alexander Kanavin To: openembedded-core@lists.openembedded.org Cc: Alexander Kanavin Subject: [PATCH 1/2] libjpeg-turbo: exclude x.y.9z versions from upstream check Date: Wed, 22 Apr 2026 17:18:57 +0200 Message-ID: <20260422151858.2598801-1-alex.kanavin@gmail.com> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 22 Apr 2026 15:19:12 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/235728 From: Alexander Kanavin E.g. the current 3.1.90 is a pre-release and shouldn't be considered. Signed-off-by: Alexander Kanavin --- meta/recipes-graphics/jpeg/libjpeg-turbo_3.1.3.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-graphics/jpeg/libjpeg-turbo_3.1.3.bb b/meta/recipes-graphics/jpeg/libjpeg-turbo_3.1.3.bb index 26e84ca42c..f3e1ff59a6 100644 --- a/meta/recipes-graphics/jpeg/libjpeg-turbo_3.1.3.bb +++ b/meta/recipes-graphics/jpeg/libjpeg-turbo_3.1.3.bb @@ -10,6 +10,7 @@ DEPENDS:append:x86:class-target = " nasm-native" SRC_URI = "${GITHUB_BASE_URI}/download/${PV}/${BP}.tar.gz" SRC_URI[sha256sum] = "075920b826834ac4ddf97661cc73491047855859affd671d52079c6867c1c6c0" +UPSTREAM_CHECK_REGEX = "releases/tag/(?P\d+\.\d+\.(?!9\d+)\d+(\.\d+)*)" PE = "1" From patchwork Wed Apr 22 15:18:58 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Alexander Kanavin X-Patchwork-Id: 86662 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D724FF9EDF8 for ; Wed, 22 Apr 2026 15:19:12 +0000 (UTC) Received: from mail-wr1-f51.google.com (mail-wr1-f51.google.com [209.85.221.51]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.85242.1776871150112006898 for ; Wed, 22 Apr 2026 08:19:10 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20251104 header.b=ULhTJXnR; spf=pass (domain: gmail.com, ip: 209.85.221.51, mailfrom: alex.kanavin@gmail.com) Received: by mail-wr1-f51.google.com with SMTP id ffacd0b85a97d-43d70b3e159so2838161f8f.0 for ; Wed, 22 Apr 2026 08:19:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1776871148; x=1777475948; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=BBUbx3NOz1ugc22kir0qApPpflo+vqQAQ0FJpa2ojxM=; b=ULhTJXnRIF39ULJZ9po+mo39XrR7E1EiSUi62aBDAI5Fm81BodI5yrABamERGqmxtf kpFytU6RbF2PBvuZ6BeefFIBeyB5m/ulVik1uB4TqW90w9noDDXSMhbMh8fjC1JMyYRV TPnhz7dfHjoVhhI71ayyGvAxYaRwHM7WCOeBrScvNkK6R1uqQjhvzy7P/MiIxVD1jORY XkF/8fVFV6K5TOAJkdXpCVv0eR5TpDj2z9AdsaJpD1ZQfVpAGP9iS8A+1ta4dZ4zsTNb pfp3vaYHx5g4Bv8Giay6IaqV9DUmNU8AsHy9yCE4YVXNu/+ElLxAd+eEsEJpNkOvtrEo y28Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1776871148; x=1777475948; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=BBUbx3NOz1ugc22kir0qApPpflo+vqQAQ0FJpa2ojxM=; b=g4+SCjsnixWp+/8s9PpeMeA9rjDy99O8IL8B/baxHfRF6RrGRi0vl95Mou/NdRAEkG ILA33MTU2V3MTKTpM8cgk9COAvBJ318ZouBzOuH8hlpWmC8YdxrB33K9PN+vOygjVmHP y9BnCXAed7LkHYBG4DHSE5JCer/r9ToeM/LsblNJ38FNCIji1p8wXMenR+wL1SiGSdu4 0FKxsJrWI6R9Ymnw2SlOAcAx3BJz4G0TbDWmOFsBJdiNgQg9/7EAhdGPeiwYZvgIFIg9 JF9yfXyiZ2yD2XcOkX7BloQVZrbgnyqHyY9iFjiDu2ZTMVKeCWoRMV0YV+l8L2hFeN4j 2RLQ== X-Gm-Message-State: AOJu0YyvX8HSJUf7d3U2za1fKIzv8+ZLoU3ZZ/EuerkJ8ojYBe5sML0f R0TneFftoPcYJEaDMEQEedNcq94y9L3VwCk5bG0Y0eHx+6sUkcdlGdB3mSFF+Q== X-Gm-Gg: AeBDietqkkwfyVRls9WNuesvpTJhSQ4Qw5QofSnUoF3hb993Wfet+EJ9X+qDY0ZNvl5 J68E47i9mmS64cXMG4SvLd19q6N26YwPxlN+5rk7ALzg76cJP4SCOfZtEuClJnPMSPhVA/yMKMq nQW8s7chVRqCKcpzHfdnH4EOsl3b1UYuGPzl6LZjktYvQFql7Il1q1W7yWWGTaJVTlgEIC7IHBb bNo4LtBZv1/ke/8Wwv94spOgAXJUNs44bD5ilC5vvsBeLf+/HNgFqA5ALAMdwc+UOJYIb+xq3G4 Lww7QvNeGJa5CXYjZIP6Zgs4TpdLxvhRbbq7Ver+SYGgOUcmt2yoasj8k7/QxzGeB7nzHhEMpGa G4qvfgvbOoelU2O9BkjaRDnCeSR0q//XU5aloWZz0w1pnea951KDoyjwwwkmS+tW2xIAqL6nXoR 8/CXeSckiWBO3lGO6Yr8IexB/cExNqWtSaOGfnmFza6f3kdO/BvUk/K7qyuUXUU6yrraaRhg== X-Received: by 2002:a5d:5889:0:b0:43d:7a97:78b5 with SMTP id ffacd0b85a97d-43fe3e0a448mr34077896f8f.33.1776871147830; Wed, 22 Apr 2026 08:19:07 -0700 (PDT) Received: from Zen2.lab.linutronix.de. (drugstore.linutronix.de. [80.153.143.164]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-43fe4cc07bbsm49384206f8f.11.2026.04.22.08.19.07 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 22 Apr 2026 08:19:07 -0700 (PDT) From: Alexander Kanavin To: openembedded-core@lists.openembedded.org Cc: Alexander Kanavin Subject: [PATCH 2/2] sbom-cve-check: exclude recipes from version checks and version updates Date: Wed, 22 Apr 2026 17:18:58 +0200 Message-ID: <20260422151858.2598801-2-alex.kanavin@gmail.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20260422151858.2598801-1-alex.kanavin@gmail.com> References: <20260422151858.2598801-1-alex.kanavin@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 22 Apr 2026 15:19:12 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/235729 From: Alexander Kanavin These recipes rely on AUTOREV enabled with a fragment, and upstream otherwise updates them far too often to make regular version updates feasible. Signed-off-by: Alexander Kanavin --- .../recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc | 1 + 1 file changed, 1 insertion(+) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc index fbdc561e8c..8f8639ab6c 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-db.inc @@ -2,6 +2,7 @@ INHIBIT_DEFAULT_DEPS = "1" EXCLUDE_FROM_WORLD = "1" +RECIPE_NO_UPDATE_REASON = "Recipe is enabled via fragment that also sets AUTOREV, and so it doesn't require manual updates" inherit native require conf/sbom-cve-check-config.inc