From patchwork Fri Aug 14 06:36:45 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 95226 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id E5B0CC5DF72 for ; Fri, 14 Aug 2026 06:36:47 +0000 (UTC) Received: from a27-33.smtp-out.us-west-2.amazonses.com (a27-33.smtp-out.us-west-2.amazonses.com [54.240.27.33]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7572.1786689406601564117 for ; Thu, 13 Aug 2026 23:36:46 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky header.b=X6u0axHw; dkim=pass header.i=@amazonses.com header.s=hsbnp7p3ensaochzwyq5wwmceodymuwv header.b=cnXTmgx6; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.33, mailfrom: 0101019ffefcc38b-7eeecbfa-f877-4e01-bba7-15e8af8cc88f-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky; d=yoctoproject.org; t=1786689406; h=Content-Type:MIME-Version:From:To:Subject:Message-Id:Date; bh=xs5MAHsV1rttCJTNHUErezLy6gh9XM1dFPH2HS44mgQ=; b=X6u0axHwlO5yGE9lUDQURZHjElgqLHuvwImCKZIoQ2vvYSUdu4sJtnTTjNoUXt56 VXGgt9LuW27V9BA7tZ551pOB+vsCq03divyXzOBBd4hdbh7UtEc/Skq4tw1/kqlGin9 uqoq9VyUSpTn5tLCZ49k1OPTyRpLWV6oSs1RhbzA= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1786689406; h=Content-Type:MIME-Version:From:To:Subject:Message-Id:Date:Feedback-ID; bh=xs5MAHsV1rttCJTNHUErezLy6gh9XM1dFPH2HS44mgQ=; b=cnXTmgx6RUXHJ3MVWN1h0JxGugZtaDh5d/+d1an4qLVuSdPJ03Tq2Pen0NJTPNbX 6pN7xAmw+65yjCHYgK7sr2Bh27pSPeRhGd/6rOwKJEDXdW8dU74MAjupaX+cuj4vw71 uIUqla2w6SSazyt++GBFLyQWaoTKaFM6BCf5i3xU= MIME-Version: 1.0 From: auh@yoctoproject.org To: openembedded-core@lists.openembedded.org Subject: [AUH] libgit2: upgrading to 1.9.7 SUCCEEDED Message-ID: <0101019ffefcc38b-7eeecbfa-f877-4e01-bba7-15e8af8cc88f-000000@us-west-2.amazonses.com> Date: Fri, 14 Aug 2026 06:36:45 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2026.08.14-54.240.27.33 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 14 Aug 2026 06:36:47 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/243415 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *libgit2* to *1.9.7* has Succeeded. Next steps: - apply the patch: git am 0001-libgit2-upgrade-1.9.6-1.9.7.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From 7f7f9f5b3528f464f3ed56f5b01f1ab1dbabbf41 Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Fri, 14 Aug 2026 06:36:36 +0000 Subject: [PATCH] libgit2: upgrade 1.9.6 -> 1.9.7 Source: docs/changelog.md v1.9.7 ------ This is an security release with one change. * Escape remote repository paths in libssh2 In v1.9.2, we started escaping repository paths in the OpenSSH-based exec ssh transport. Bring the same escaping to the libssh2 transport to avoid any potential command injection. In addition, changes have been ported from the main branch to update CI builds. --- ...cmake-mark-system-libraries-are-private-link-librari.patch | 4 +--- .../libgit2/{libgit2_1.9.6.bb => libgit2_1.9.7.bb} | 2 +- 2 files changed, 2 insertions(+), 4 deletions(-) rename meta/recipes-support/libgit2/{libgit2_1.9.6.bb => libgit2_1.9.7.bb} (93%) diff --git a/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch b/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch index 267770ae6f..93f1f3a870 100644 --- a/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch +++ b/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch @@ -1,4 +1,4 @@ -From 5670d3eed82f0d64766158809bf3d0c7c631b0ea Mon Sep 17 00:00:00 2001 +From 41048806aec8a4b71f3ccf11fdedbec88080a675 Mon Sep 17 00:00:00 2001 From: Ross Burton Date: Thu, 23 Jul 2026 17:35:23 +0100 Subject: [PATCH] cmake: mark system libraries are private link libraries @@ -38,5 +38,3 @@ index 8045ddef9..fafdb09ec 100644 target_include_directories(libgit2package SYSTEM PRIVATE ${LIBGIT2_INCLUDES}) target_include_directories(libgit2package INTERFACE $) --- -2.43.0 diff --git a/meta/recipes-support/libgit2/libgit2_1.9.6.bb b/meta/recipes-support/libgit2/libgit2_1.9.7.bb similarity index 93% rename from meta/recipes-support/libgit2/libgit2_1.9.6.bb rename to meta/recipes-support/libgit2/libgit2_1.9.7.bb index b17b22c63e..2de3503aac 100644 --- a/meta/recipes-support/libgit2/libgit2_1.9.6.bb +++ b/meta/recipes-support/libgit2/libgit2_1.9.7.bb @@ -8,7 +8,7 @@ DEPENDS = "curl openssl zlib libssh2 libgcrypt libpcre2" SRC_URI = "git://github.com/libgit2/libgit2.git;branch=maint/v1.9;protocol=https;tag=v${PV} \ file://0001-cmake-mark-system-libraries-are-private-link-librari.patch" -SRCREV = "26055f5af74ab1cf636d272e8a34315496d3f06f" +SRCREV = "49e408b3208bc3093757a1c2db938d3590f3f412" inherit cmake