Re: [oe] [meta-networking][scarthgap][PATCH] mbedtls: fix git fetcher conflict by using SRC_URI.

[Mikko Rapeli <mikko.rapeli@linaro.org>]

Hi,

On Fri, Aug 15, 2025 at 11:39:25AM +0200, Alexander Kanavin via lists.openembedded.org wrote:
> On Fri, 15 Aug 2025 at 11:36, Marko, Peter <Peter.Marko@siemens.com> wrote:
> > This was moved from scathgap-next to scarthgap yesterday, so timing is clear
> > https://lists.openembedded.org/g/openembedded-devel/message/118942
> >
> > The successful autobuilder runs are a mystery.
> > Maybe the code throws only if the sources are not in downloads (e.g. autobuilder has these from master).
> 
> The more worrying scenario is that there was no actual build at any
> point before this landed, I hope that is not the case.
> 
> I don't object to the fixes, just want to find out where the quality
> gating process failed.

FWIW, most users of mbedtls in the Arm firmware land embed the git repo or sources
directly and don't use this recipe. This is problematic for SBOM, CVE security
handling etc but this how things are currently. Users are u-boot, trusted-firmware-a,
trusted-firmware-m, OP-TEE etc. Thus this recipe may have very few users even when
mbedtls is used in a lot of places.

Cheers,

-Mikko