From patchwork Mon Jun 1 15:35:29 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 89008 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 18CC4CD8C88 for ; Mon, 1 Jun 2026 15:35:44 +0000 (UTC) Received: from a27-23.smtp-out.us-west-2.amazonses.com (a27-23.smtp-out.us-west-2.amazonses.com [54.240.27.23]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.1555.1780328130323382964 for ; Mon, 01 Jun 2026 08:35:30 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky header.b=hhG9q1+F; dkim=pass header.i=@amazonses.com header.s=hsbnp7p3ensaochzwyq5wwmceodymuwv header.b=FK1v+r4J; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.23, mailfrom: 0101019e83d362e8-2c63af76-29df-4656-92d2-99f2f125b2b2-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky; d=yoctoproject.org; t=1780328129; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date; bh=egV/uAmXvPZh3kRoz8VDX8jicGGZD4S2rCNPnSwgn7c=; b=hhG9q1+FC9o6zT+JrG1KlDeaD/TLFHeZtgtqGwpPnXFG9Q6763X6a0xxueBq8h3I yRg638FRf2Cx+BQSP4DwmZts+rArxBF1uGB4OxMj72kim5vMkEH7P/kboIV+AMr+YgQ 45TPEtxw2VQpIKy/uiefl5w6ZUy1s4Ogvl6zRJqc= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1780328129; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date:Feedback-ID; bh=egV/uAmXvPZh3kRoz8VDX8jicGGZD4S2rCNPnSwgn7c=; b=FK1v+r4J6V4dNzNKeHir3EjuJPfYyyQjtG58eYVWVh9b6ab9k+HooksF40zwZGrM uB1BJZ8lzGLnSLakHYQ5J7KwtWiZZTSDgDyu4jPQ1h1jPtXh5NznhccJfQVYzvwj/HY bGknZp4hZ6ns+o6jCw3PyQK6oYAJ6PjtUezYJ9HE= MIME-Version: 1.0 From: auh@yoctoproject.org To: Benjamin Robin , Benjamin Robin Cc: openembedded-core@lists.openembedded.org Subject: [AUH] sbom-cve-check-update-cvelist-native,sbom-cve-check-update-nvd-native: upgrading to 2026-06-01,2026.06.01-000006 SUCCEEDED Message-ID: <0101019e83d362e8-2c63af76-29df-4656-92d2-99f2f125b2b2-000000@us-west-2.amazonses.com> Date: Mon, 1 Jun 2026 15:35:29 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2026.06.01-54.240.27.23 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 01 Jun 2026 15:35:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/237848 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *sbom-cve-check-update-cvelist-native,sbom-cve-check-update-nvd-native* to *2026-06-01,2026.06.01-000006* has Succeeded. Next steps: - apply the patch: git am 0001-sbom-cve-check-update-cvelist-native-sbom-cve-check-.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From 7d4d760837cd74c07e87b5b15e51299e314bcc46 Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Mon, 1 Jun 2026 06:19:07 +0000 Subject: [PATCH] sbom-cve-check-update-cvelist-native,sbom-cve-check-update-nvd-native: upgrade 2026-05-07 -> 2026-06-01,2026.05.07-000006 -> 2026.06.01-000006 --- ...07.bb => sbom-cve-check-update-cvelist-native_2026-06-01.bb} | 2 +- ...bb => sbom-cve-check-update-nvd-native_2026.06.01-000006.bb} | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-cvelist-native_2026-05-07.bb => sbom-cve-check-update-cvelist-native_2026-06-01.bb} (89%) rename meta/recipes-devtools/sbom-cve-check/{sbom-cve-check-update-nvd-native_2026.05.07-000006.bb => sbom-cve-check-update-nvd-native_2026.06.01-000006.bb} (89%) diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-05-07.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-01.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-05-07.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-01.bb index 7670172c40..257585d444 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-05-07.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-cvelist-native_2026-06-01.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/CVEProject/cvelistV5" SRC_URI = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "cvelist" -SRCREV = "dd0e93c75034d0167498174c886a56729edc44de" +SRCREV = "00891ca3cf68cc6e81cac1272ffa6fb7423a5361" UPSTREAM_CHECK_GITTAGREGEX = "(?P.+)_baseline" require sbom-cve-check-update-db.inc diff --git a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.05.07-000006.bb b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.01-000006.bb similarity index 89% rename from meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.05.07-000006.bb rename to meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.01-000006.bb index 02446e30ce..05c08887a3 100644 --- a/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.05.07-000006.bb +++ b/meta/recipes-devtools/sbom-cve-check/sbom-cve-check-update-nvd-native_2026.06.01-000006.bb @@ -6,7 +6,7 @@ HOMEPAGE = "https://github.com/fkie-cad/nvd-json-data-feeds" SRC_URI = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=" SBOM_CVE_CHECK_DB_NAME = "nvd-fkie" -SRCREV = "72d8841c8ad9083ebf6723063f275444ea0d76f9" +SRCREV = "bc103d3a7763c1242677c937b7736efabcbc55e0" UPSTREAM_CHECK_GITTAGREGEX = "v(?P.+)" require sbom-cve-check-update-db.inc