From patchwork Fri Jul 31 12:25:16 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 94050 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 71AF3C5516F for ; Fri, 31 Jul 2026 12:25:46 +0000 (UTC) Received: from OSPPR02CU001.outbound.protection.outlook.com (OSPPR02CU001.outbound.protection.outlook.com [40.107.159.8]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5297.1785500744671923250 for ; Fri, 31 Jul 2026 05:25:45 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=iRhYwDGn; spf=pass (domain: ericsson.com, ip: 40.107.159.8, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Hvj2lv4+bNApxdILrwVL8vDPwNayqjv6KG7brhSGtEFHZyVrCh5qjC74HyZmuMg6c/Rsst2rgMOyDrGiaf8LZwRGOb4ZoFYjKbGFUSbq3uSLUdVMnEeE8HukgEQsChSR9beEDivx4TlKqVJfdoVRCFiUl38QG3JemmiUky6tO4geBR1SWfAjtwdEx96ulw2u5pXXuMoGGKXpoIKeFUPCETpEaB5vb9Yb3H4yJq6ljy/NmAjzuchbNedAxJIu+HQ5ul2teFzg3BLZqy8xTKU5BCQqHaXhrAiasokmhTSBVyF7udJdm+EM2wWzIRRg2YsjfeId1Kr4CGGT6eaf669ZQA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=/6JPgg4YfMP9zuqgOvHtlM29NWtwk/4Rhayk+FOdoeA=; b=LPH3BJzHny2u7XTge/4Zu+R0sO5KhMkMlPac960l4oCsedH/QX7kYHMV5XiH9WCAcSMWnN3miBVT+GVWMsp1A7okwctjYDe3S9nOQuVnugBKIf2WpfWaEu93uthiK8mcQylt//zU+OWY0oIg68dVrVz80tYnDSrStB3Kc/GEPfRwFV5aZ43eM7mleVSBhw0Y0qz5gWPanpyYbnBIwGaxyCT93fZYr1ZKdXsTP1hr9o8dksWyUGXRTPPyJF6oLUhaG+O/aHiuWdNkVy9MlOlhE768cgy+FQzu+S8npvnatlMut32SsL/XiuzUYzC/DHy1XPDQ3pOrxL8IHh+onMgQhA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=gmail.com smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/6JPgg4YfMP9zuqgOvHtlM29NWtwk/4Rhayk+FOdoeA=; b=iRhYwDGnlHK2w74jOaIpVV0g/Z/dwNgYR2kQ1pSJbecB/4vQlEwtLJBRnfng2EU86HrB4anuBfPK7AyuEN721Xy6JkIjQDDHu5BWLX+7XDCvW0TuoqNRF3nRx3h9aElEnfdii4k/qWv999BQModuWcZzB0TnS7SJgqg9HUgBo2gjVXouKZ4ivNGlzHyU8/fY0F1+Su5jxgeBGeqeSMkIhqqid6ECh0TO+qC1L50Q4AJed0Y7ZxIUqbkO6XjBbQ30B2qg6Kv5sB5+ofT3+eVqgkUZnWH3cF0P8n00tQmudd8Nmb4Dqfqt96w7iwqJSm0k/56f8LhO6CdTLgwVpGVh7Q== Received: from AS4PR10CA0020.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:5d8::10) by PA4PR07MB8416.eurprd07.prod.outlook.com (2603:10a6:102:2a4::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.10; Fri, 31 Jul 2026 12:25:38 +0000 Received: from DU6PEPF0000B620.eurprd02.prod.outlook.com (2603:10a6:20b:5d8:cafe::3b) by AS4PR10CA0020.outlook.office365.com (2603:10a6:20b:5d8::10) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.16 via Frontend Transport; Fri, 31 Jul 2026 12:25:38 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by DU6PEPF0000B620.mail.protection.outlook.com (10.167.8.136) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Fri, 31 Jul 2026 12:25:38 +0000 Received: from seroius18815.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.66) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37; Fri, 31 Jul 2026 14:25:33 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18815.sero.gic.ericsson.se (Postfix) with ESMTP id 7A99A4020DF7; Fri, 31 Jul 2026 14:25:32 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 4A22D700DF49; Fri, 31 Jul 2026 14:25:32 +0200 (CEST) From: To: CC: , , , , Daniel Turull Subject: [PATCH 1/7] util-linux: inherit upstream-stable-release-point Date: Fri, 31 Jul 2026 14:25:16 +0200 Message-ID: <20260731122522.1647968-2-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.54.0 In-Reply-To: <20260731122522.1647968-1-daniel.turull@ericsson.com> References: <20260731122522.1647968-1-daniel.turull@ericsson.com> MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DU6PEPF0000B620:EE_|PA4PR07MB8416:EE_ X-MS-Office365-Filtering-Correlation-Id: 407a4634-ec4a-4ffb-f471-08deeefed448 X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|82310400026|1800799024|23010399003|36860700016|376014|18002099003|22082099003|13003099007|10067099003|11063799006|56012099006|6133799003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(82310400026)(1800799024)(23010399003)(36860700016)(376014)(18002099003)(22082099003)(13003099007)(10067099003)(11063799006)(56012099006)(6133799003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: ePmt8fVMj+PKbe5v6hSLCmYKy8TtXNhRPIlEJ/GDRio1fp6rlIPIulZOFBoPgKy0TVcVZHPm0pKDGDvCSwBdqBSQsNtRgOJCh4L94Vggb7QgyKT6RlD5zl/BQqbqBBAXEfLbp4jQqn3Gcf4j+8QaE/o23DBgsknJFR4S7o9WmK/ew3CQsO2no1nQOP1qX3F3jOZa1cB6o750iKJpl9FnEUkZD2gzGW1sfaIOsFPvSocC6SP5Ay4ojCRd2pIr/bjmuDeD8b2TrbyYB3Z0QXMpQsnmCgI+W86YjXdgRsZvnQS0Ng1NlH5l2mFKq7TDGaiAV6N/j8lHxLBfbe4zfoOLeUggfZGcGrCi/6XWq6C9WSTh75mPNYa7Wrs9WT0kiuPJL66dBNfosGRCf/vOcW0tgg7IWjBA61HyEVnOBkL8p6iKiPqcnhYnqBjm1Lr9r4sY X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Jul 2026 12:25:38.3006 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 407a4634-ec4a-4ffb-f471-08deeefed448 X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: DU6PEPF0000B620.eurprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA4PR07MB8416 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 31 Jul 2026 12:25:46 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242436 From: Daniel Turull util-linux's README ("Stable Branches") documents stable/v. branches whose maintenance releases are bug fixes only, so upgrades within a major.minor are stable point upgrades per the OE-Core stable release policy (ref-manual, "Stable Point Release Upgrades"). https://docs.yoctoproject.org/dev/ref-manual/release-process.html#stable-point-release-upgrades https://github.com/util-linux/util-linux/blob/v2.42.2/README#L95 Checked the last point release for feature creep: 2.42.2 (Jun 16 2026), against 2.42.1 (May 18 2026): 32 commits, all fixes or hardening -- memory safety (a libblkid use-after-free, two buffer overflows, a libfdisk GPT fix), privilege tightening (X-mount.subdir restricted for non-root), diagnostics (fanotify queue overflow detection) and documentation. No new options or behaviour. These releases are not picked up on the OE stable branches: util-linux has had zero point-release bumps on kirkstone, scarthgap or wrynose since each branch forked from master, leaving them at 2.37.4, 2.39.3 and 2.41.3 respectively. This addresses that gap going forward. This addresses the general case on master, where PV is 2.42.x. Since the regex is derived from PV, an older branch scopes it to that branch's series, and the 2.39 series scarthgap ships does not qualify. 2.39 adopted the new kernel mount API, so 2.39.1 introduced LIBMOUNT_FORCE_MOUNT2={always,never,auto} as, in its own words, "a stable workaround for use cases where new kernel API is not ready to use"; the series also took new CPU model support and libblkid bcachefs sub-device label probing. That is a property of the 2.39 series rather than of the project -- 2.42.2 is 32 commits of pure fixes -- but it means this must not be backported unchanged, and each branch's series needs checking on its own. For the avoidance of doubt it is not a development-series effect either: util-linux has no development/stable version split, and pre-release work goes to -rc tags. AI-Generated: Kiro with Claude Opus 5 Signed-off-by: Daniel Turull --- meta/recipes-core/util-linux/util-linux.inc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/meta/recipes-core/util-linux/util-linux.inc b/meta/recipes-core/util-linux/util-linux.inc index 460b996403..c22b599f1a 100644 --- a/meta/recipes-core/util-linux/util-linux.inc +++ b/meta/recipes-core/util-linux/util-linux.inc @@ -22,3 +22,7 @@ SRC_URI = "${KERNELORG_MIRROR}/linux/utils/util-linux/v${MAJOR_VERSION}/util-lin SRC_URI[sha256sum] = "03a05d3adf9602ef128f2da05b84b3205ce60c351e5737c0370f74000679ce8a" CVE_PRODUCT = "util-linux" + +# util-linux publishes bugfix/security-only point releases on its +# stable/v branches. +inherit upstream-stable-release-point From patchwork Fri Jul 31 12:25:17 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 94056 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9CF2EC5516D for ; Fri, 31 Jul 2026 12:25:56 +0000 (UTC) Received: from OSPPR02CU001.outbound.protection.outlook.com (OSPPR02CU001.outbound.protection.outlook.com [40.107.159.69]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5300.1785500746728503760 for ; Fri, 31 Jul 2026 05:25:47 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=i9SLM8gN; spf=pass (domain: ericsson.com, ip: 40.107.159.69, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=q4DvPTEVNascfqE/UUFkxhDc840lu1hyxNPe3Uet+EOYd4u1Ljbdg7rJ+0zCg37FObunOctkI/Uf83cdUy8fJZKn6Z4WNp3Ws4bQpLMaOV8ci1GQKrbbFoaNULgKO1k9rTdZEU10Y4bIL/CtCWpnCGhSEVmplFQkfDAATpuyyr/zhPZWmn4PaXa1zrNQ72Q/x92UNdqxyd08IyyRNV/v9ch3cw3ajwFEUtNw9P2opmnQj8eiT1KsYkPFu/2i8DXxfoHPSD6mgZXJWJUl8cf56Z2OOFz9H2AbFNsgJI4tI4kckFz0hSjMHTyELlpnFUM/9wx2j0ff2p9lUpDEGS8sCw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=f/O7mWuibsntTN07dNUueCgIceceFr7F9pCtNAkssM0=; b=Xbby0+SappuaZP6nOM2OIM6ulMVEz2H9AhCzgRCeATEqHJ6WOCFNgIRN/LmMK4dngIAJkz7vQaEBHkjeR6V4bm+xAmu93xXM4ouFRvDD6JXI3Dl+nrKi7SqpLz7B8jokZfLTU5vf/+NkeAe5BQnVdm8PmBMModohkuAwSya8aggsosLedL569rxqUKwd+6GjFtTrqSER40Bi1gHKGfF7mh0Qi00sUQjrk23/BtG0x7uaRugBBdZ6M5CPLNMeRvQ0/5ZXR9oyJ1+WqCKKl9VbHqeIBTQ9Ts4O4Gt+JUVKfyrYdwzfg5d66xfynq7d5EbdS/bwSQl3CtmFBQmx64f10Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=gmail.com smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=f/O7mWuibsntTN07dNUueCgIceceFr7F9pCtNAkssM0=; b=i9SLM8gNKcf75onUFFlQocfAEeDWMSftnEBbn6eqCm8KLpPEhuzy/m7YZIaSeLRJrSlkcu4R/n2MayPVv9D/fMyfYRsXV2mL/KFUp58BEmzQ1fuR7t6Tx4RutNOsFBkeShm6Qn5ctTKkWu4dFsMNJFIUQd6Lve8LTPjpm5BLydzwINwJFZ1xc8WG1WYyS9InvPDLZOOKNtGbnKg3cBgkKHxVzNvuWV6PkrhYVRVs48jY6tmz/b0vp6J+6BKxjm6GYTzED1ZN2bgayNcKIqCEjdgumYaud79CpusoKQyiyf1QFFRTFbYPbw6SyAQQnGr2q/cv+qx8zCXrLN8kmt0b0w== Received: from AS9P309CA0023.EURP309.PROD.OUTLOOK.COM (2603:10a6:20b:45d::23) by GV2PR07MB9082.eurprd07.prod.outlook.com (2603:10a6:150:b0::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.10; Fri, 31 Jul 2026 12:25:37 +0000 Received: from DB5PEPF00014B98.eurprd02.prod.outlook.com (2603:10a6:20b:45d:cafe::a4) by AS9P309CA0023.outlook.office365.com (2603:10a6:20b:45d::23) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.292.10 via Frontend Transport; Fri, 31 Jul 2026 12:25:37 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by DB5PEPF00014B98.mail.protection.outlook.com (10.167.8.165) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Fri, 31 Jul 2026 12:25:36 +0000 Received: from seroius18814.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.62) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37; Fri, 31 Jul 2026 14:25:33 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18814.sero.gic.ericsson.se (Postfix) with ESMTP id 79DB64020B6B; Fri, 31 Jul 2026 14:25:32 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 4E0F0700DF4B; Fri, 31 Jul 2026 14:25:32 +0200 (CEST) From: To: CC: , , , , Daniel Turull Subject: [PATCH 2/7] systemd: inherit upstream-stable-release-point Date: Fri, 31 Jul 2026 14:25:17 +0200 Message-ID: <20260731122522.1647968-3-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.54.0 In-Reply-To: <20260731122522.1647968-1-daniel.turull@ericsson.com> References: <20260731122522.1647968-1-daniel.turull@ericsson.com> MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB5PEPF00014B98:EE_|GV2PR07MB9082:EE_ X-MS-Office365-Filtering-Correlation-Id: a39ac35c-7807-4a93-4222-08deeefed383 X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|82310400026|1800799024|23010399003|36860700016|376014|18002099003|22082099003|3023799007|13003099007|10067099003|11063799006|56012099006; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(82310400026)(1800799024)(23010399003)(36860700016)(376014)(18002099003)(22082099003)(3023799007)(13003099007)(10067099003)(11063799006)(56012099006);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: eXRSgtS6zmcXK9V86CsdPpbIPTtXuC6fYbCHdz2Q2eWq6AiiwS3xYaYz1WCQ06sofT3LEi1FCuhunjXF4pitPxSr/v+AWs80azxE1fEjVPVcW6EgJxIo3u7YZ06j03Ml+DiCr/cokBAwKriz5PchSkvsSc2Tm+BguaWUZkCS9uNznzPYS5aeNEQ7l24ihbmfazTL8ZWBviiDsatXF6dhvkgJhuFUQO1IdIDtxEAiK3jnGN5Wbwya0c0I5BoibrMpMs7EwiS3Q2AIcGKZJwH8LkmLpNmy1s7euZSxeJp9Et5YpscsrBFpONRdmQ3eRx+2MgCGeQrUB3RAK2hd2RRVqAERmVrdpIVkKPeqC1/5dLiJBK/MyzGTJTnxeI+VxoJvELaGeCL5yd29rFRkaLOnNAygMmVLZMKQvT2eNGSgKH0LpBKeMgz+LQPl3whoIesj X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Jul 2026 12:25:36.9972 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: a39ac35c-7807-4a93-4222-08deeefed383 X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: DB5PEPF00014B98.eurprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV2PR07MB9082 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 31 Jul 2026 12:25:56 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242438 From: Daniel Turull systemd's README ("STABLE BRANCHES AND BACKPORTS") documents per-release stable branches carrying backported patches. The current one, v261-stable, is branched in the main repository; the README still points at the systemd-stable repository, which holds the branches up to v255. The major is a single version part (261 -> 261.1), so upgrades within a major are stable point upgrades per the OE-Core stable release policy (ref-manual, "Stable Point Release Upgrades"). STABLE_VERSION_PARTS is set to 1 accordingly. https://docs.yoctoproject.org/dev/ref-manual/release-process.html#stable-point-release-upgrades https://github.com/systemd/systemd/blob/v261.1/README#L460 https://github.com/systemd/systemd/tree/v261-stable Checked the last point release for feature creep: 261.2 (Jul 23 2026), against 261.1 (Jun 26 2026): 277 commits, mostly fixes. NEWS files both releases under "CHANGES WITH 261" and gives neither its own entry. Four items are feature-shaped: refcounting, argument handling and JSON output additions, plus one new internal string-util flag. Those are small internal additions on a real, diverged stable branch rather than mainline drift, and none introduce a new subsystem: closer in scope to a security-hardening batch than a feature release, though broader than a pure bugfix release. These bumps are not free: the scarthgap 255.4 -> 255.13 bump was held for a v2 because TCLIBC=musl broke, and was merged once fixed. A point release being fixes-only upstream does not remove the need to build and test it. Already tracked this way on the OE stable branches, counting only bumps made since each branch forked from master: kirkstone 250.4 -> 250.14 and scarthgap 255.4 -> 255.21. wrynose has had no point-release bump yet. AI-Generated: Kiro with Claude Opus 5 Signed-off-by: Daniel Turull --- meta/recipes-core/systemd/systemd.inc | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/meta/recipes-core/systemd/systemd.inc b/meta/recipes-core/systemd/systemd.inc index bb499a0587..0348f9f08d 100644 --- a/meta/recipes-core/systemd/systemd.inc +++ b/meta/recipes-core/systemd/systemd.inc @@ -21,4 +21,9 @@ SRC_URI = "git://github.com/systemd/systemd.git;protocol=https;branch=${SRCBRANC CVE_PRODUCT = "systemd" +# systemd publishes bugfix/security-only releases on its stable/v-stable +# branches (e.g. 261 -> 261.1). The major is a single version part. +STABLE_VERSION_PARTS = "1" +inherit upstream-stable-release-point + CVE_STATUS[CVE-2019-3815] = "not-applicable-platform: only applied to RHEL" From patchwork Fri Jul 31 12:25:18 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 94055 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9E4F8C55174 for ; Fri, 31 Jul 2026 12:25:56 +0000 (UTC) Received: from PA4PR04CU001.outbound.protection.outlook.com (PA4PR04CU001.outbound.protection.outlook.com [40.107.162.68]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5301.1785500747864041096 for ; Fri, 31 Jul 2026 05:25:48 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=Lb/soQhG; spf=pass (domain: ericsson.com, ip: 40.107.162.68, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=REj6oYKbpvgq8wONXluSwUXRgko6y6DjN1To9LWGzJwlZzQN7wzAe72CDbwjyc7emKX5oKw8+Dgqd9QhOj6E8eLoBDUo1wk5NFCovB6uuvQ49iSo3wyVdgYIN5pPAZSHz5KQ7PMrqYkf69S6Mho9tEpXV3tTr/QQ30YvKZUTzM+TRCHtH6H34jhyPVl55j+mrSE6nswi4+38se8giUjW/xEj7EAIpSm22ycKNE7ZkbvVS8rR6JJj/Y5R5OVkTiA5Sn77rOVTIMR6aKdRgv3XQyZ/FgY8vfalavhY/sGZ/7HXYDKTMgnRu0zS7VCZNNQ6zwWIYHivWn/za1cBctccDQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=exNhqBMp8U7MX6wLy14/8fcGiKSzMhjdG5UpSBDHLRY=; b=QmwKU4BmJZ4GvCv4qD3HnllxMcGXO2vjszkUkkXSdPefpan/UVZktxgFH/ql53B7x/RKU2a6oUL210pQlbsXXyIvNcRBuT6PG4Ztt+P6Rw2EDg5gpijN/fGk/R3bCsNphxoz3/Cprg1ROStAUcQLrJnAgPLbRY1RYJl0YYRaYTJOq87XupvE6OhRvs6fxswyRiyBW2R3PHcUL0M6WQw8RkxPV33z5JvNBG6jNNdG0ff9fm1zyvViH2lvl96ObES+EHlRWDAauXN3HrziDs2ws5kOaQ0LXUZlRo8ZT5vLByvOaUNUtfLQ02buRLZgodWGGihke8W5S4D6KQIpk0siKg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=gmail.com smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=exNhqBMp8U7MX6wLy14/8fcGiKSzMhjdG5UpSBDHLRY=; b=Lb/soQhGtU68xF9EMBFeifGKeM3uXHbmIuU2Hn8dP1g4a/BnMIs13PV1FLj1ulUQnlWKOchelAQvCGTZhAF8gqVZoKgEj4PWKqrwV1pKrrYM+15pL6xMw/BVTkGvVY/c+vyBxaiNWv7Z9T8pbbipGZQWs81GLwaqQh2YxzaDw0vW881VrUN3JZoX5gJJk2xcgPHqn90PHr4Yfw9NLvHUaS9F+1AoHnr2Fmqa3p45OMWdqFVyEHWJBxIcOyW5qWG/nLREyZqGmOj8erg6Dx+I3miLKzKShLWfKEMyQyFRq8EBxEpA3ws92n3SYCdh44egEvCIH/TWnMzt5XQi5zI8lQ== Received: from DUZPR01CA0254.eurprd01.prod.exchangelabs.com (2603:10a6:10:4b5::26) by GV2PR07MB9108.eurprd07.prod.outlook.com (2603:10a6:150:b6::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.10; Fri, 31 Jul 2026 12:25:41 +0000 Received: from DB1PEPF000509E8.eurprd03.prod.outlook.com (2603:10a6:10:4b5:cafe::64) by DUZPR01CA0254.outlook.office365.com (2603:10a6:10:4b5::26) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.16 via Frontend Transport; Fri, 31 Jul 2026 12:25:40 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by DB1PEPF000509E8.mail.protection.outlook.com (10.167.242.58) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Fri, 31 Jul 2026 12:25:40 +0000 Received: from seroius18813.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.65) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37; Fri, 31 Jul 2026 14:25:40 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18813.sero.gic.ericsson.se (Postfix) with ESMTP id 8AD7C99674; Fri, 31 Jul 2026 14:25:32 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 526EC700DF4C; Fri, 31 Jul 2026 14:25:32 +0200 (CEST) From: To: CC: , , , , Daniel Turull Subject: [PATCH 3/7] glib-2.0: inherit upstream-stable-release-point Date: Fri, 31 Jul 2026 14:25:18 +0200 Message-ID: <20260731122522.1647968-4-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.54.0 In-Reply-To: <20260731122522.1647968-1-daniel.turull@ericsson.com> References: <20260731122522.1647968-1-daniel.turull@ericsson.com> MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB1PEPF000509E8:EE_|GV2PR07MB9108:EE_ X-MS-Office365-Filtering-Correlation-Id: e3fb2497-a357-4ca3-f7bf-08deeefed5a2 X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|82310400026|1800799024|36860700016|376014|13003099007|56012099006|10067099003|11063799006|22082099003|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(23010399003)(82310400026)(1800799024)(36860700016)(376014)(13003099007)(56012099006)(10067099003)(11063799006)(22082099003)(18002099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: FqfUwV48CpbV+0BfKG2ceUKvRffYuowUnZ78mAdLqhOeHS8tep1PhgpUysTWtTKT8XTcBHRTj6sUzqp/YcrsEK6SUmJJIIN05+fUdslvXzrCALPs4Zc3WMMo3SmptxgV6A4oOs9AVFDMkBhIsxiSctoYlDz3F2JxO9BGeeFPidXT+BVYbbjk0c3460IDXG4xdrFIweNargkd07mPymHny4RxdUfq6dgg1gUPaASoUXfZqthPaf1O9GFt6ruiO9aY2b3EorQHOvO2B2WLXIf7s9OOHdWJ/seG7vYJ2TJm7JdsVVtrOL4pZEJZKKeehuo6EOeAZLa+fwD9lfWxLLsqGmW1HqZREIPr/c3cnMBrk0iBDMpruGJJY4jaBESk1Jui+zuJBsxPX6P3O7nqozxpczSSNPO9WK2BphAK8RW8AtrRU3hSU3nte9SSPbbT1gQv X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Jul 2026 12:25:40.5661 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: e3fb2497-a357-4ca3-f7bf-08deeefed5a2 X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: DB1PEPF000509E8.eurprd03.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV2PR07MB9108 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 31 Jul 2026 12:25:56 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242439 From: Daniel Turull GLib's docs/backports.md states that only bug and documentation fixes are backported to the current stable branch, that new features and API/ABI changes must not be, and that micro stable releases are intended as drop-in replacements. So upgrades within a major.minor are stable point upgrades per the OE-Core stable release policy (ref-manual, "Stable Point Release Upgrades"). https://docs.yoctoproject.org/dev/ref-manual/release-process.html#stable-point-release-upgrades https://gitlab.gnome.org/GNOME/glib/-/blob/2.88.2/docs/backports.md#L18 Checked the last two point releases for feature creep: 2.88.2 (Jun 25 2026): entirely "Bugs fixed" backports plus translation updates. 2.88.1 (May 02 2026): seven fixes -- a GCC 16 miscompilation, a GRegex out-of-bounds read with security impact, and five further out-of-bounds reads. No API or behaviour changes. The series opened with 2.88.0 (Mar 16 2026), which must stay outside the regex as the feature-level release. Already tracked this way on the OE stable branches, counting only bumps made since each branch forked from master: kirkstone 2.72.0 -> 2.72.3, scarthgap 2.78.4 -> 2.78.6, and wrynose 2.88.0 -> 2.88.2. AI-Generated: Kiro with Claude Opus 5 Signed-off-by: Daniel Turull --- meta/recipes-core/glib-2.0/glib.inc | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/meta/recipes-core/glib-2.0/glib.inc b/meta/recipes-core/glib-2.0/glib.inc index fafb7e3391..200ae3dc32 100644 --- a/meta/recipes-core/glib-2.0/glib.inc +++ b/meta/recipes-core/glib-2.0/glib.inc @@ -30,7 +30,9 @@ LEAD_SONAME = "libglib-2.0.*" GNOMEBN = "glib" -inherit gettext gi-docgen gnomebase ptest-gnome upstream-version-is-even bash-completion gio-module-cache manpages gobject-introspection-data +# GLib publishes bugfix/security-only micro releases on its stable +# (even-minor) series. +inherit gettext gi-docgen gnomebase ptest-gnome upstream-version-is-even bash-completion gio-module-cache manpages gobject-introspection-data upstream-stable-release-point S = "${UNPACKDIR}/${GNOMEBN}-${PV}" From patchwork Fri Jul 31 12:25:19 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 94051 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6C0BCC54F54 for ; Fri, 31 Jul 2026 12:25:46 +0000 (UTC) Received: from MRWPR03CU001.outbound.protection.outlook.com (MRWPR03CU001.outbound.protection.outlook.com [40.107.130.48]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5298.1785500744982684122 for ; Fri, 31 Jul 2026 05:25:45 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=e7eX1gXM; spf=pass (domain: ericsson.com, ip: 40.107.130.48, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=CsMCieD1ipZZB7cA5pNa+ymH7Kol8TT+WjqPly9nktwOJCRUhpeB3QmZ+YJgwurE06xNoByVAswQ1I8FgfrGsT7TUE2zc35waU7IXsz7MkOwnMJRY89Adb5FbEANl34dG4YSc5MiSEhA9bSwX5kGY8ANWqYdxUSTqzoPIvXOZQPWD7NjvHCGtOm46LPPKJH2bL8y9JpslTd3kGboBt3qe/ItzUMzVTGQleELwqe+5ZVLyrA/EZB0r+9zB0hIrv9Y05W10gA20qBS7k8aDtrWBjXqlIieuTosrpvNEM4KtN+BB9HxGpKcSoRt3umGE2vtjldAA1k/399KZcD/YVdLQQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=yF8AIE730hOiaYER6T4JJKkn6y+4ubztAaZafccmFj4=; b=Jhsf09I4/yLUR52kngRPfVywIGhhmlROZhukEBghpJuDhiGRmYvG9dmbOPTgyVkPsSl1lucPca/gGdzAP8R5BZ52j7zo+98mFiayVU7Gl1mhakkPAfpa11//cF51BKdJYx0xp7fdrtto5Vzs2Fe8U0p0XdKvduFZl3UF461vNOQIBNiU+93IDPWZ6L+OFv4nMT9KYTEfOjz8NQviigVue8w9uRqf6c23MnyqAZ/eorZfeO5nyMLCq0Pd1URSSkN1PDqpd+yF0URN5N9k8fgaKA3xlmmWZ7tiY3VKeoj/5y1PRUW1C1z85FUI7RUGxYaUOQerWReQwTH8ccvRuhLoyg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=gmail.com smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yF8AIE730hOiaYER6T4JJKkn6y+4ubztAaZafccmFj4=; b=e7eX1gXMpyT6SNTRBaJxtXKl4jEZsmb5Gy0N2HgP9znrZiOqy2y0KoQxSZ5vsufcthfubReD4ulos8X7FYqX1WjrnfhCbMtHhWMzwB9PoSXWuyk26CSiYbLlgt/jJCsA88nQr+WOeNMgcejVC08OZ6k9qsDeshZrpS5WVoswJ531HuT8G1l9GLphv3Nb0hAR9OgFM3RNnNiohKOcia/whd0gEH81rIQ2U8TNtqUFuHvPev07LcqHM6rpCSuOwGeOiajxgDTbgU+lvVZ9KrlYaWHqB3Il6fDyAxmf+m3syCa5Srob1NnVL2P7iYpcxpmNVeafCrhTFVJ4DeIefBDVHA== Received: from DUZPR01CA0151.eurprd01.prod.exchangelabs.com (2603:10a6:10:4bd::13) by VI1PR07MB6368.eurprd07.prod.outlook.com (2603:10a6:800:141::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.10; Fri, 31 Jul 2026 12:25:37 +0000 Received: from DU2PEPF00028D0D.eurprd03.prod.outlook.com (2603:10a6:10:4bd:cafe::53) by DUZPR01CA0151.outlook.office365.com (2603:10a6:10:4bd::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.16 via Frontend Transport; Fri, 31 Jul 2026 12:25:37 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by DU2PEPF00028D0D.mail.protection.outlook.com (10.167.242.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Fri, 31 Jul 2026 12:25:37 +0000 Received: from seroius18815.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.60) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37; Fri, 31 Jul 2026 14:25:33 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18815.sero.gic.ericsson.se (Postfix) with ESMTP id 87F434020DF8; Fri, 31 Jul 2026 14:25:32 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 5696C700DF4E; Fri, 31 Jul 2026 14:25:32 +0200 (CEST) From: To: CC: , , , , Daniel Turull Subject: [PATCH 4/7] dbus: inherit upstream-stable-release-point Date: Fri, 31 Jul 2026 14:25:19 +0200 Message-ID: <20260731122522.1647968-5-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.54.0 In-Reply-To: <20260731122522.1647968-1-daniel.turull@ericsson.com> References: <20260731122522.1647968-1-daniel.turull@ericsson.com> MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DU2PEPF00028D0D:EE_|VI1PR07MB6368:EE_ X-MS-Office365-Filtering-Correlation-Id: 52039d36-429a-4244-d971-08deeefed3c7 X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|82310400026|1800799024|23010399003|36860700016|376014|18002099003|22082099003|13003099007|10067099003|56012099006|11063799006; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(82310400026)(1800799024)(23010399003)(36860700016)(376014)(18002099003)(22082099003)(13003099007)(10067099003)(56012099006)(11063799006);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: RxgVs6DS6pUR3SPjjyXjwtVY4azqsWjJV+qgH1sG8tLijr9NkPbB1EaBKiY4Kt+KuS/dnQWQ58SkyApq7wYtxzoKE0ELw3Sh6ftEt+YCFncCxv8sSkQ8h3Laf4LKXZNGUcfD0onZ+jx0QDEGwp7JkaM7E4heVSSN9Phfhej01X7ro+mw6NPbBSZVCK5ilpSh7Ugh6+kkS5DTQigxmdvJiAt846ENBNtd1VnYS4qpmLignK8NqAUPjGVPia0CGmH8i/HIgNg6jbX1aBgQdxhmDRvqrxAzg5QmMmULhRCoLJ4h1nvKWt3FlRz9jEytvzb66dukalimBAq9DoUyC1A3oHfCXrwdof0Gin2GuOZla7XBYvmO4w86DWwHT/UsL7Sj8QcIOYIxw8zULXcL7oFAJCUY2lthQ1gi1YVRCUlEbUmE94jOa87ZHBEcVl1gRrCn X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Jul 2026 12:25:37.4542 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 52039d36-429a-4244-d971-08deeefed3c7 X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: DU2PEPF00028D0D.eurprd03.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB6368 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 31 Jul 2026 12:25:46 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242437 From: Daniel Turull D-Bus's CONTRIBUTING.md documents even-minor stable branches, currently dbus-1.16.x, that receive only cherry-picked bug fixes, so upgrades within a major.minor are stable point upgrades per the OE-Core stable release policy (ref-manual, "Stable Point Release Upgrades"). It also states that odd-minor development branches such as 1.17.x are not supported at all and receive no bug fixes, not even for security vulnerabilities, so only the even-minor stable series should be tracked. https://docs.yoctoproject.org/dev/ref-manual/release-process.html#stable-point-release-upgrades https://gitlab.freedesktop.org/dbus/dbus/-/blob/dbus-1.16.2/CONTRIBUTING.md#L65 Checked the only point release in the series so far for feature creep, the 1.16.x series having just one non-.0 release to date: 1.16.2 (Feb 27 2025): two items -- one build-regression fix for verbose-mode builds against libselinux >= 3.8, and a documentation update. No API or behaviour changes. Already tracked this way on the OE stable branches, counting only bumps made since each branch forked from master: kirkstone 1.14.0 -> 1.14.8. scarthgap has had zero point-release bumps since its fork and remains at 1.14.10; wrynose ships 1.16.2 as its initial version with no bump yet. AI-Generated: Kiro with Claude Opus 5 Signed-off-by: Daniel Turull --- meta/recipes-core/dbus/dbus_1.16.2.bb | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/meta/recipes-core/dbus/dbus_1.16.2.bb b/meta/recipes-core/dbus/dbus_1.16.2.bb index 2e2d1ec55a..c7815d78f7 100644 --- a/meta/recipes-core/dbus/dbus_1.16.2.bb +++ b/meta/recipes-core/dbus/dbus_1.16.2.bb @@ -5,6 +5,12 @@ SECTION = "base" inherit meson pkgconfig gettext upstream-version-is-even ptest-gnome +# D-Bus publishes bugfix/security-only micro releases on its stable +# (even-minor) branches. Odd-minor development branches (e.g. 1.17.x) are +# not supported at all and receive no bug fixes, not even for security +# vulnerabilities, so only the even-minor stable series is tracked here. +inherit upstream-stable-release-point + LICENSE = "AFL-2.1 OR GPL-2.0-or-later" LIC_FILES_CHKSUM = "file://COPYING;md5=eb0ffc69a965797a3d6686baa153ef05 \ file://dbus/dbus.h;beginline=6;endline=22;md5=df4251a6c6e15e6a9e3c77b2ac30065d \ From patchwork Fri Jul 31 12:25:20 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 94054 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 83850C54F54 for ; Fri, 31 Jul 2026 12:25:56 +0000 (UTC) Received: from PA4PR04CU001.outbound.protection.outlook.com (PA4PR04CU001.outbound.protection.outlook.com [40.107.162.43]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5302.1785500749745724411 for ; Fri, 31 Jul 2026 05:25:50 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=RoNqZn9D; spf=pass (domain: ericsson.com, ip: 40.107.162.43, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=CLkpVbXeFpBLYM4HcCoDHBTAChe+EVnf2n6LzA2pz+/SMeAs2sCn4GkJCtgzhjvy7VPaXBMCKzifWGzUxtLRtLaKJAWXvTaqtxUePOm5+Rcd6W8bo5XfbEtJJqaT8mxWHp3NIz6pHAO4uWFHRBtKJvuB8dQTXwJvs1V2PbvmBKHg9rbZzuJKa9rZk8Z8BnGBWfct8d2DPRX52k8ozG+DLJBPDD2NZJH1XxNJaBqha7XVGvhowvWr9SB5wWRH45uS/ebglleC5qDTU+O/Mb/NaudCXto3IvgD/S0u3xEbFk2GWaJhdEZOdPmNq5/ygAt7hh6W1BvQX9T512VPKX78Eg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=HTXelzOeQpjsWpwmlGHavAx7fYMRTtparPuSm72r518=; b=Wo973C2cCW55CQQds51xO4K+fI3yLl6id1aeXHEutnOxLhzo3/S338GoHdP2Joc8RxrDMuWmjZ03QZbik216USLAu+CaQE2ZCecoY6nI86gUbb9Y+yyKycYk61XPEWYeuiygBVfbF1IJa05tL7R42TqKB1kOvbfnWxoTW7OKTvQ2KilbBAH6vL/FKBUw1DKPOd5A3+jIXThwg/YrwV7sjxve9pEb+pDI9617dOVL91J0ZW1NBPxSs//1WGljk/8EaMt5/Gw9PU5fJeKUTfj3NmGd21uh+r/kJna72yuKDJDtSTXaBX/ExjjKmzv6TusVh8Yrmf/5vfPx/Chg4Yy+MQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=gmail.com smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HTXelzOeQpjsWpwmlGHavAx7fYMRTtparPuSm72r518=; b=RoNqZn9D5q4tDFyz+r8ktNtMt9WLBd8YNmBlj/wzH4tL4vdu/HXD3wVyaioRfE/+roh1/TDiVwLPCYPuYL5ZIqhbhoA9/6cEe+GkLNmTP2yEUaCu0msmrSh4ZcZu0N6qLXgfE9UDoXe+JOFXI0LrQ2W/J3oFM8ZvL+Xni38P+agN8jrEL22381gxFcX3xQHgp0v5wPXTISb58YuqtQeVZE37ETRLaLALWhHKDvjMm5IqCtU9z3pLL7bIkReFFUMQSeMtYfTuSqleC9SSyqN41kT8//B4JxLR+oZkx1FNxoD4aIeBIkDGCO6cWTsox08htsRiMoFLcFuq7rxAPgl/Uw== Received: from AM8P251CA0023.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:21b::28) by PA4PR07MB8645.eurprd07.prod.outlook.com (2603:10a6:102:272::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.10; Fri, 31 Jul 2026 12:25:44 +0000 Received: from DB1PEPF000509F5.eurprd02.prod.outlook.com (2603:10a6:20b:21b:cafe::93) by AM8P251CA0023.outlook.office365.com (2603:10a6:20b:21b::28) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.15 via Frontend Transport; Fri, 31 Jul 2026 12:25:44 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by DB1PEPF000509F5.mail.protection.outlook.com (10.167.242.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Fri, 31 Jul 2026 12:25:44 +0000 Received: from seroius18815.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.68) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37; Fri, 31 Jul 2026 14:25:34 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18815.sero.gic.ericsson.se (Postfix) with ESMTP id 1E6B24020B46; Fri, 31 Jul 2026 14:25:32 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 5AE15700DF50; Fri, 31 Jul 2026 14:25:32 +0200 (CEST) From: To: CC: , , , , Daniel Turull Subject: [PATCH 5/7] xz: inherit upstream-stable-release-point Date: Fri, 31 Jul 2026 14:25:20 +0200 Message-ID: <20260731122522.1647968-6-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.54.0 In-Reply-To: <20260731122522.1647968-1-daniel.turull@ericsson.com> References: <20260731122522.1647968-1-daniel.turull@ericsson.com> MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB1PEPF000509F5:EE_|PA4PR07MB8645:EE_ X-MS-Office365-Filtering-Correlation-Id: bb2f1f93-c8e7-4df0-b737-08deeefed7f5 X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|82310400026|23010399003|376014|1800799024|36860700016|13003099007|6133799003|56012099006|11063799006|10067099003|22082099003|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(82310400026)(23010399003)(376014)(1800799024)(36860700016)(13003099007)(6133799003)(56012099006)(11063799006)(10067099003)(22082099003)(18002099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 6fF04Z/lGbf2ATTqaAT7nqAK8zVTDLDQ/Sn31DLXUeD2GXEiKomcPEdkYFBrmlGHNHAQL/CcKVVbK5HpZKs6TrG/IrDmp/5haXI+agBNDw1EAfyA7fG6mpGzepFdkFRB40op1LrZ4xM4DXmopGA+tAw9v+TZiqc7in74PxHDYXj+Lzp95cNU0xIFDs5l/6C7FGOembLXMFoPNVIqZ5oL8Jh9diVHhB6qBQ3RoWj/YT69PM01ULQ+7GVElbzsCqM7iaUMshoDUfh2pIfVisadrL85Orc4tORW0WX++G+QO4O7V7Zr+1UftUdlwLBD1+o2TqH8Bs/fcmNMNH/5mOS90QojldhxZXMOQpfJFj2RTJuaV23YgRGEhz/EmmqqTr/mkNX0kAXM8drBzDx2joKFU8Nb7ThcGivhrQPXQvoX9/sps5UJYf+pvgFRILq6VH7b X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Jul 2026 12:25:44.4722 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: bb2f1f93-c8e7-4df0-b737-08deeefed7f5 X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: DB1PEPF000509F5.eurprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA4PR07MB8645 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 31 Jul 2026 12:25:56 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242440 From: Daniel Turull XZ Utils's README documents that an even minor (Y) is a stable series where the revision (Z) "is incremented when bugs get fixed without adding any new features". So upgrades within a major.minor are stable point upgrades per the OE-Core stable release policy (ref-manual, "Stable Point Release Upgrades"). https://docs.yoctoproject.org/dev/ref-manual/release-process.html#stable-point-release-upgrades https://github.com/tukaani-project/xz/blob/v5.8.3/README#L138 Checked the last two point releases for feature creep: 5.8.3 (Mar 31 2026): one CVE (CVE-2026-34743, a buffer overflow in lzma_index_append), one invalid-memory-access fix, build portability fixes for Windows ARM64EC and Hurd, and man page translations. No new options or API. 5.8.2 (Dec 17 2025): build portability fixes for four toolchains, a RHEL 9 kernel-bug workaround, and a resource-aware memory-limit default tweak that is a bugfix rather than a new feature. No new options or API. Already tracked this way on the OE stable branches, counting only bumps made since each branch forked from master: kirkstone picked up 5.2.6 and scarthgap 5.4.7, one bump each. AI-Generated: Kiro with Claude Opus 5 Signed-off-by: Daniel Turull --- meta/recipes-extended/xz/xz_5.8.3.bb | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/meta/recipes-extended/xz/xz_5.8.3.bb b/meta/recipes-extended/xz/xz_5.8.3.bb index b76b1726e4..0735696011 100644 --- a/meta/recipes-extended/xz/xz_5.8.3.bb +++ b/meta/recipes-extended/xz/xz_5.8.3.bb @@ -34,6 +34,10 @@ SRC_URI[sha256sum] = "3d3a1b973af218114f4f889bbaa2f4c037deaae0c8e815eec381c3d546 UPSTREAM_CHECK_REGEX = "releases/tag/v(?P\d+(\.\d+)+)" UPSTREAM_CHECK_URI = "https://github.com/tukaani-project/xz/releases/" +# XZ Utils publishes bugfix/security-only micro releases on its stable +# (even-minor) branches. +inherit upstream-stable-release-point + CACHED_CONFIGUREVARS += "gl_cv_posix_shell=/bin/sh" inherit autotools gettext ptest From patchwork Fri Jul 31 12:25:21 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 94052 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 7AA47C5516D for ; Fri, 31 Jul 2026 12:25:46 +0000 (UTC) Received: from AS8PR04CU009.outbound.protection.outlook.com (AS8PR04CU009.outbound.protection.outlook.com [52.101.70.39]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5294.1785500741652086570 for ; Fri, 31 Jul 2026 05:25:42 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=fJnFy1z0; spf=pass (domain: ericsson.com, ip: 52.101.70.39, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=QAz6TtoEk6+sfi1yahqNllatZPu0uTJycvUSuDPdAv3lCV6YDkJzPgSb1nZg3/r1dd7Ur+hz3iDpAXSiyiOaMEP/7fwV2Q/5HGLGrAGbFIGuoY2CkQeSME3s/n01iaiVX42QaNGTHx+4bgloGbj4dVITh6rmsWX0xU5h8UVsdhJ+PpSwB9fnuUT/OyKsBXNSlLZKUvIAU8wzJRjLWRqRPYdvuim66fcCwss7NjlcidepRbrJ9+AAvTf3sj7vGrdCG/wxHquEEuu14bDRZ/jJaEKzbJ7ysoOHHJ7/yb/9OiUQ+NS+iWVoySWBxndFzi3I3EqlFCwn8WLOpPqg4pYFiw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=OAkRwJr8c4kC6e2YD9vYM+Q3cMqZ4mAtBTO657KYvfA=; b=gusmsm8Msg9nw6iwFLtJ9W622X8044940kgSCukqmE/Jd9vGCDJ07jQ/O/J4ZszrNmszV1vOwhf+hUGVo8mAVgcWNx8uLrzJh2kqX58ASAFrD5SwP2Cs5hbBJQ6HU/NPkBBoXEhH5L2zgaqg7nMmYBe1xRL9aqOHFIUsYBnSpRmxmirgIS0Z+Mlj7jBY7pQ9q0vpIdOGQotr6vo7zhrzrT6WW/OyKkiQvLUT1hj2/8SxL14YoNnV62hr+bK+WXSFVTy9Jk1fWZo1FqELKp9feIpNqtlhGZdjWcK0aiyG402DjpNKMMLdhgYx4swpcayewmWgy0xRvn9AvGkN3RiBEA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=gmail.com smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OAkRwJr8c4kC6e2YD9vYM+Q3cMqZ4mAtBTO657KYvfA=; b=fJnFy1z0C0faxYRtPtDAsPzO5xehTOo0SzxwesticruYAhN0Qb843+n0F8woIFIMcMescHuhqKgxXeaEDtFRDrvCgRDOOnx9E5pk7hYBN0xGC01IYOOXTwZq+VbuGRQJ6YG/In5Wyvow2xXiVmmz83ATG7Upo7CSzlzL4Lx5Pu2Uoub6lyO4vv6LjFB48ILMyQyOnjhAtBwnsuKGNl0p2TTIOozi8pnbMVD4k9pYhHlg0twMqqI+5SxlPoYILw4wGrnUqUml+gfYCynQkSjbFQxLdcCsIOLNQYGY5OS3FwhbE7R/+yKBY3jU7aqyVHkPllWWN9qq9Fali1xtQdWCpg== Received: from DUZPR01CA0144.eurprd01.prod.exchangelabs.com (2603:10a6:10:4bd::26) by DBAPR07MB6967.eurprd07.prod.outlook.com (2603:10a6:10:192::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.11; Fri, 31 Jul 2026 12:25:36 +0000 Received: from DU2PEPF00028D0D.eurprd03.prod.outlook.com (2603:10a6:10:4bd:cafe::38) by DUZPR01CA0144.outlook.office365.com (2603:10a6:10:4bd::26) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.15 via Frontend Transport; Fri, 31 Jul 2026 12:25:36 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by DU2PEPF00028D0D.mail.protection.outlook.com (10.167.242.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.5 via Frontend Transport; Fri, 31 Jul 2026 12:25:36 +0000 Received: from seroius18814.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.63) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37; Fri, 31 Jul 2026 14:25:33 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18814.sero.gic.ericsson.se (Postfix) with ESMTP id 1A2694020C02; Fri, 31 Jul 2026 14:25:32 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 5F238700DF51; Fri, 31 Jul 2026 14:25:32 +0200 (CEST) From: To: CC: , , , , Daniel Turull Subject: [PATCH 6/7] git: inherit upstream-stable-release-point Date: Fri, 31 Jul 2026 14:25:21 +0200 Message-ID: <20260731122522.1647968-7-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.54.0 In-Reply-To: <20260731122522.1647968-1-daniel.turull@ericsson.com> References: <20260731122522.1647968-1-daniel.turull@ericsson.com> MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DU2PEPF00028D0D:EE_|DBAPR07MB6967:EE_ X-MS-Office365-Filtering-Correlation-Id: b361b9a2-8fb0-42b1-8a42-08deeefed344 X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|36860700016|376014|82310400026|1800799024|13003099007|6133799003|56012099006|10067099003|5023799004|11063799006|22082099003|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(23010399003)(36860700016)(376014)(82310400026)(1800799024)(13003099007)(6133799003)(56012099006)(10067099003)(5023799004)(11063799006)(22082099003)(18002099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: U2IQ2Pecn4jX3ycuIfLF2MOI5y1hzSyGgUOCyVnodUXxtJmAp+i1x1MT32W4T+afFnjd4Elkz5NrcDj2J59hktDva7P23Cx07EbZQvlShF581NNsrakRShM34vNQnRE6yszBsPZtCzRgqv+MPD9abdQSa2cdnelZ+LBPWRatGJz/dR3ea/aZ+JQTZYhhaTue8TiNOIzZC1BNEkAD8VwJVVSEBV6nLPHRaXkAwOvYKTG5QW7EoeoHE6kUiG4bDmB5rW8V+N1R9KFkRrkGEuRnfWsdeLbllIRatBjisoXz1CNKgH1FG99Et54d/az4JaGIy97oZrrIkXAmjegm+zyNozPYCGUUKDFq7fFvRRsiz5N+jD29viS9eOZhW2dJv/xuppsZTLKshF7qKec/TkAA8aFmkSZ8TL8cWUvYBZnPVlUssX+4t6VivpwoZDtfnzta X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Jul 2026 12:25:36.5926 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: b361b9a2-8fb0-42b1-8a42-08deeefed344 X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: DU2PEPF00028D0D.eurprd03.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBAPR07MB6967 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 31 Jul 2026 12:25:46 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242435 From: Daniel Turull Git's maintainer documentation defines the version scheme explicitly: vX.Y.0 are feature releases carrying bugfixes and enhancements in any area, while vX.Y.Z (Z>0) maintenance releases "contain only bugfixes for the corresponding vX.Y.0 feature release and earlier maintenance releases". So upgrades within a major.minor are stable point upgrades per the OE-Core stable release policy (ref-manual, "Stable Point Release Upgrades"). https://docs.yoctoproject.org/dev/ref-manual/release-process.html#stable-point-release-upgrades https://github.com/git/git/blob/v2.55.0/Documentation/howto/maintain-git.adoc#L47 Checked recent maintenance releases for feature creep: 2.44.4 (May 28 2025): CVE fixes only, seven of them, merged up from the fixes that appeared in v2.43.7. The release notes contain nothing else. 2.35.7 (Feb 06 2023): four fixes -- two libcurl portability fixes, and two symlink-escape fixes in apply and clone back-merged from older maintenance lines. No 2.55.x point release exists yet, 2.55.0 being the current tip, so this relies on the documented policy plus the historical pattern above rather than a same-series point release. The ref-manual admits that basis: a recipe may qualify on clear historical evidence that a class of bump is bugfix-only (ref-manual, "Criteria for Qualifying Upstreams"). Already tracked this way on the OE stable branches, counting only bumps made since each branch forked from master: kirkstone 2.35.2 -> 2.35.7, five point bumps, and scarthgap 2.44.0 -> 2.44.4, three point bumps. wrynose ships 2.53.0 as its initial version with no bump yet. AI-Generated: Kiro with Claude Opus 5 Signed-off-by: Daniel Turull --- meta/recipes-devtools/git/git_2.55.0.bb | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/meta/recipes-devtools/git/git_2.55.0.bb b/meta/recipes-devtools/git/git_2.55.0.bb index 426cc13371..ecb7a8e1d1 100644 --- a/meta/recipes-devtools/git/git_2.55.0.bb +++ b/meta/recipes-devtools/git/git_2.55.0.bb @@ -46,6 +46,10 @@ EXTRA_OECONF:append:class-native = " --with-gitconfig=/etc/gitconfig " # Needs brokensep as this doesn't use automake inherit autotools-brokensep perlnative bash-completion manpages +# Git's maintainer docs define vX.Y.Z (Z>0) maintenance releases as +# bugfix-only, scoped to the corresponding vX.Y.0 feature release. +inherit upstream-stable-release-point + EXTRA_OEMAKE = "NO_RUST=1 NO_PYTHON=1 CFLAGS='${CFLAGS}' LDFLAGS='${LDFLAGS}'" EXTRA_OEMAKE += "'PERL_PATH=/usr/bin/env perl'" EXTRA_OEMAKE += "COMPUTE_HEADER_DEPENDENCIES=no" From patchwork Fri Jul 31 12:25:22 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Daniel Turull X-Patchwork-Id: 94053 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 92018C5516F for ; Fri, 31 Jul 2026 12:25:56 +0000 (UTC) Received: from GVXPR05CU001.outbound.protection.outlook.com (GVXPR05CU001.outbound.protection.outlook.com [52.101.83.27]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5305.1785500755408662987 for ; Fri, 31 Jul 2026 05:25:55 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="dkim: body hash did not verify" header.i=@ericsson.com header.s=selector2 header.b=QONWl4m9; spf=pass (domain: ericsson.com, ip: 52.101.83.27, mailfrom: edaturu@ericsson.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=b+NiM2extHkbyh6N+r4PtcgsrisBh350df6ZFSo2jIN+lnb94xcyrUZouMSrUDiswrdAx8uUsSsUSXPQnLRmHrLky7D2Irf/hZk4dt03kKiURDn1vBSxWjcbmGi5zqm49lxAQPx/3rmL91hbmtMI3Iio5yZVpiEj9X3hXkWgOn0wSbZWKR5XBBy4V//XNM3BELYtF8wIZ3cfTk2w9agv6PhzQCMYVhV5rNPbpQOj2Dm437aXls6N8/aOspOSwIl78fCPraIlur0pPFOOQcRkyUD2oCYpmA+/1BazTZmf10s8AUgo/ln8xk3RoAP7MbVuiK2PoKEaen8xQmlTtf3hBg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=TDPDmVSQ7WBel52MoYX+mueeEpcz32xJfShJmlFz7vI=; b=RyL0g7aegGrUeSMIli97yE39syOxZNgLhdhJHZYSmVzuAaZCAnLYFyQrEIhY8zeH90JMVaW6CIjS3Nd5SKx8ZwkjU5ShGKu5S1CCvLsvnGI+zJtMzb4cKBJ3S6wdTj7IFJrpMLLQItUAyVud59wuVoA8IdC3qlCsTdps+ebkPDElfoD3tbS0oF/lSc/RBVq7BzNEuv4pZLMfD/9RKDU4VfrMHRt/KJeokulmNbQkroSVjrNJXJicSG4GKJkQTpOV5P33uB040QO7Ljrg26Wu0T1RPciZIhdPPfqbDyZPclXosP+MvZmgg7l70i8v+vIVliqZIJJ5yDK5xuBSWUOXng== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 192.176.1.74) smtp.rcpttodomain=gmail.com smtp.mailfrom=ericsson.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=ericsson.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TDPDmVSQ7WBel52MoYX+mueeEpcz32xJfShJmlFz7vI=; b=QONWl4m9PMBVcvjqBzsJe3Qp1O9mEdBQkroswWQq6/k6w7VBcuuqC0qOcFMRcC+ZFfIDTZnCwtoHn9MgHrjT32AU1+QKvhsSiEj+lo4hHy7YjMQ239hAeK+uHJyZ4fcmA4FlVxIuAOdckSz443Ha40gfKkKzpffCbKHq+cKlN/s9nZlBSvFmm6SBEvTRu3vUDEykpQY+tFmjbjVthvOahNle6IUWbaXec56Z+nPcYVdR3sW+vHlqmGVlOU4DyFiS7kYXQ9tAExFTg1Tsks+P3vjBlLc8XpnteM5FlbhZeur01JlhVYFCbZb63NWeQ373LV0/zO6StPO8yTwTMA8WLQ== Received: from DU2PR04CA0359.eurprd04.prod.outlook.com (2603:10a6:10:2b4::26) by GV1PR07MB10143.eurprd07.prod.outlook.com (2603:10a6:150:20c::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.10; Fri, 31 Jul 2026 12:25:46 +0000 Received: from DB5PEPF00014B8E.eurprd02.prod.outlook.com (2603:10a6:10:2b4:cafe::28) by DU2PR04CA0359.outlook.office365.com (2603:10a6:10:2b4::26) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.270.15 via Frontend Transport; Fri, 31 Jul 2026 12:25:46 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 192.176.1.74) smtp.mailfrom=ericsson.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=ericsson.com; Received-SPF: Pass (protection.outlook.com: domain of ericsson.com designates 192.176.1.74 as permitted sender) receiver=protection.outlook.com; client-ip=192.176.1.74; helo=oa.msg.ericsson.com; pr=C Received: from oa.msg.ericsson.com (192.176.1.74) by DB5PEPF00014B8E.mail.protection.outlook.com (10.167.8.202) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.292.8 via Frontend Transport; Fri, 31 Jul 2026 12:25:46 +0000 Received: from seroius18813.sero.gic.ericsson.se (153.88.142.248) by smtp-central.internal.ericsson.com (100.87.178.61) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.37; Fri, 31 Jul 2026 14:25:45 +0200 Received: from seroius08462.sero.gic.ericsson.se (seroius08462.sero.gic.ericsson.se [10.63.237.245]) by seroius18813.sero.gic.ericsson.se (Postfix) with ESMTP id 57DED9987A; Fri, 31 Jul 2026 14:25:33 +0200 (CEST) Received: by seroius08462.sero.gic.ericsson.se (Postfix, from userid 160155) id 639C0700DF53; Fri, 31 Jul 2026 14:25:32 +0200 (CEST) From: To: CC: , , , , Daniel Turull Subject: [PATCH 7/7] perl: inherit upstream-stable-release-point Date: Fri, 31 Jul 2026 14:25:22 +0200 Message-ID: <20260731122522.1647968-8-daniel.turull@ericsson.com> X-Mailer: git-send-email 2.54.0 In-Reply-To: <20260731122522.1647968-1-daniel.turull@ericsson.com> References: <20260731122522.1647968-1-daniel.turull@ericsson.com> MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB5PEPF00014B8E:EE_|GV1PR07MB10143:EE_ X-MS-Office365-Filtering-Correlation-Id: ca7efe8f-67a7-415a-93ff-08deeefed91f X-SMTP-Server: smtp-central.internal.ericsson.com X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|36860700016|376014|1800799024|82310400026|13003099007|6133799003|11063799006|56012099006|5023799004|10067099003|22082099003|18002099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:192.176.1.74;CTRY:SE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oa.msg.ericsson.com;PTR:office365.se.ericsson.net;CAT:NONE;SFS:(13230040)(23010399003)(36860700016)(376014)(1800799024)(82310400026)(13003099007)(6133799003)(11063799006)(56012099006)(5023799004)(10067099003)(22082099003)(18002099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 6H/a4qU//I2gJE0QnchpdzT9KcTHwUFhWabhRkH0vsfoZJw/lEYhn26wgG55A784DH3+mFzVlewhyA1sXrANaCDL6QglLtRRjeTL8Ffp/9h94sTZU1q+LBw5cHibxTUJ7yRq0lrzxx5j6hiD9s2YWWq3N+YEQm3rYSEGbXOgNIJ4XBmEf4Xi4eOXPMXQPVT6/xjGfMJ09n0YntokKtmo3fX1oDI+zkICdHggyFvyQMCYcKXFZJvHD4Utb4F9jG4Zs8Gv9QeaW3zjsQ1Qh+mul72O8eNBxryIMlVdSLhDXq3yJlUQhhJWg5Q60WB3URr/Ofnx7vOGDY36nVtwOcgVkwEbPRpQVFJ1Nf0wbLkgQsNUzGzB5A1+gFSPFmPKKzrQGtWx2DIaScpxTY1irsQ2KiO8fiLHioV9waQi9WpScrJp3H4dA5IiyH1WFwsdEvtt X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Jul 2026 12:25:46.4132 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: ca7efe8f-67a7-415a-93ff-08deeefed91f X-MS-Exchange-CrossTenant-Id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=92e84ceb-fbfd-47ab-be52-080c6b87953f;Ip=[192.176.1.74];Helo=[oa.msg.ericsson.com] X-MS-Exchange-CrossTenant-AuthSource: DB5PEPF00014B8E.eurprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR07MB10143 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 31 Jul 2026 12:25:56 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/242441 From: Daniel Turull perlpolicy documents a strict maintenance-branch policy: new releases of a maint branch may only contain security/CVE fixes, crashing bugs, regressions, build and install blockers, portability fixes and factual documentation corrections, and must not contain patches that "add or remove features", "break binary compatibility", or "add new warnings or errors or deprecate features". New dual-life module versions are explicitly deferred to the next stable series. So upgrades within a major.minor are stable point upgrades per the OE-Core stable release policy (ref-manual, "Stable Point Release Upgrades"). Long-lived per-even-minor maint branches back this up, maint-5.6 through maint-5.42, with a documented back-porting vote process. https://docs.yoctoproject.org/dev/ref-manual/release-process.html#stable-point-release-upgrades https://github.com/Perl/perl5/blob/v5.42.2/pod/perlpolicy.pod#L259 Checked the last two point releases for feature creep. perldelta makes this easy to see, as maint releases carry no "Core Enhancements" section at all: 5.42.2 (Mar 29 2026): one CVE in a vendored dependency, CVE-2026-4176 in Compress::Raw::Zlib, plus module version bumps. States "There are no changes intentionally incompatible with 5.42.1". 5.42.1 (Mar 08 2026): four fixes -- a Configure fix so POSIX locale values can be passed in for cross-compilation, an AIX thread-safe locale workaround, a Win32 build fix, and module version bumps. States "There are no changes intentionally incompatible with Perl 5.42.0". 5.42.0 (Jul 02 2025) is the series-opening release, not a point release: it adds seven language-level features, confirming X.Y.0 bumps are feature bumps that must stay outside the regex. Cross-checked the previous series the same way: 5.40.1, 5.40.2 and 5.40.3 all show the same profile, with security, module, documentation, test and bug-fix sections only and no Core Enhancements. The policy forbidding binary-compatibility breaks in maint releases also covers the ABI concern directly. Already tracked this way on the OE stable branches, counting only bumps made since each branch forked from master: kirkstone 5.34.1 -> 5.34.3 and scarthgap 5.38.2 -> 5.38.4 are both in-series point bumps. wrynose is still at 5.42.0 while master is at 5.42.2, so it is missing the CVE-2026-4176 fix -- exactly the tracking gap --stable is meant to close. AI-Generated: Kiro with Claude Opus 5 Signed-off-by: Daniel Turull --- meta/recipes-devtools/perl/perl_5.44.0.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/perl/perl_5.44.0.bb b/meta/recipes-devtools/perl/perl_5.44.0.bb index a449b904fa..ef76df7e0f 100644 --- a/meta/recipes-devtools/perl/perl_5.44.0.bb +++ b/meta/recipes-devtools/perl/perl_5.44.0.bb @@ -27,7 +27,7 @@ SRC_URI[perl.sha256sum] = "3b855066b92491cb40e86affb1ca57d1a388aa43e51b91c7806a3 B = "${WORKDIR}/perl-${PV}-build" -inherit upstream-version-is-even update-alternatives +inherit upstream-version-is-even update-alternatives upstream-stable-release-point DEPENDS += "perlcross-native bzip2 zlib virtual/crypt" DEPENDS:append:class-native = " bzip2-replacement-native"