[OE-core][kirkstone 0/1] Pull request

[OE-core][kirkstone 0/1] Pull request

[Yoann Congal]

This is a last minute fix about the git:// protocol migration.
It passed oe-selftest:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/69/builds/209

The following changes since commit f2bc121f821f684a541b1f4e317078c50d29c389:

  scripts/install-buildtools: Update to 4.0.34 (2026-04-10 00:51:17 +0200)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-next
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-next

for you to fetch changes up to b507de6d469890f14d153c0eb48361d97d24a71e:

  oeqa/selftest/git-submodule-test: Default to https git protocol for YP/OE repos (2026-04-10 13:26:01 +0200)

----------------------------------------------------------------

Yoann Congal (1):
  oeqa/selftest/git-submodule-test: Default to https git protocol for
    YP/OE repos

 .../recipes-test/git-submodule-test/git-submodule-test.bb     | 4 ++--
 meta/lib/oeqa/selftest/cases/archiver.py                      | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

[OE-core][kirkstone 1/1] oeqa/selftest/git-submodule-test: Default to https git protocol for YP/OE repos

[Yoann Congal]

From: Yoann Congal <yoann.congal@smile.fr>

Following up on commit 139102a73d41 ("recipes: Default to https git protocol where possible"),
> The recommendation from server maintainers is that the https protocol
> is both faster and more reliable than the dedicated git protocol at this point.
> Switch to it where possible.

Use ";protocol=https" for the parent git submodule and, also, update the
SRCREV to point to a commit where submodules are reference through a
https:// URL instead of a git:// one.

Update the expected output of the archiver test.

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 .../recipes-test/git-submodule-test/git-submodule-test.bb     | 4 ++--
 meta/lib/oeqa/selftest/cases/archiver.py                      | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/meta-selftest/recipes-test/git-submodule-test/git-submodule-test.bb b/meta-selftest/recipes-test/git-submodule-test/git-submodule-test.bb
index fa3041b7d8f..3f66cf6919d 100644
--- a/meta-selftest/recipes-test/git-submodule-test/git-submodule-test.bb
+++ b/meta-selftest/recipes-test/git-submodule-test/git-submodule-test.bb
@@ -5,8 +5,8 @@ LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda
 
 INHIBIT_DEFAULT_DEPS = "1"
 
-SRC_URI = "gitsm://git.yoctoproject.org/git-submodule-test;branch=master"
-SRCREV = "a2885dd7d25380d23627e7544b7bbb55014b16ee"
+SRC_URI = "gitsm://git.yoctoproject.org/git-submodule-test;branch=master;protocol=https"
+SRCREV = "f280847494763cdcf71197557a81ba7d8a6bce42"
 
 S = "${WORKDIR}/git"
 
diff --git a/meta/lib/oeqa/selftest/cases/archiver.py b/meta/lib/oeqa/selftest/cases/archiver.py
index 75195241b79..ad2dd2dda65 100644
--- a/meta/lib/oeqa/selftest/cases/archiver.py
+++ b/meta/lib/oeqa/selftest/cases/archiver.py
@@ -301,8 +301,8 @@ class Archiver(OESelftestTestCase):
 
         bb_vars = get_bb_vars(['DEPLOY_DIR_SRC'])
         for target_file_name in [
-            'gitsmshallow_git.yoctoproject.org.git-submodule-test_a2885dd-1_master.tar.gz',
-            'gitsmshallow_git.yoctoproject.org.bitbake-gitsm-test1_bare_120f4c7-1.tar.gz',
+            'gitsmshallow_git.yoctoproject.org.git-submodule-test_f280847-1_master.tar.gz',
+            'gitsmshallow_git.yoctoproject.org.bitbake-gitsm-test1_bare_79a0efa-1.tar.gz',
             'gitsmshallow_git.yoctoproject.org.bitbake-gitsm-test2_bare_f66699e-1.tar.gz',
             'gitsmshallow_git.openembedded.org.bitbake_bare_52a144a-1.tar.gz',
             'gitsmshallow_git.openembedded.org.bitbake_bare_c39b997-1.tar.gz'

Re: [OE-core][kirkstone 1/1] oeqa/selftest/git-submodule-test: Default to https git protocol for YP/OE repos

[Richard Purdie]

On Fri, 2026-04-10 at 14:27 +0200, Yoann Congal via lists.openembedded.org wrote:
> From: Yoann Congal <yoann.congal@smile.fr>
> 
> Following up on commit 139102a73d41 ("recipes: Default to https git protocol where possible"),
> > The recommendation from server maintainers is that the https protocol
> > is both faster and more reliable than the dedicated git protocol at this point.
> > Switch to it where possible.
> 
> Use ";protocol=https" for the parent git submodule and, also, update the
> SRCREV to point to a commit where submodules are reference through a
> https:// URL instead of a git:// one.
> 
> Update the expected output of the archiver test.
> 
> Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
> ---
>  .../recipes-test/git-submodule-test/git-submodule-test.bb     | 4 ++--
>  meta/lib/oeqa/selftest/cases/archiver.py                      | 4 ++--
>  2 files changed, 4 insertions(+), 4 deletions(-)
> 
> diff --git a/meta-selftest/recipes-test/git-submodule-test/git-submodule-test.bb b/meta-selftest/recipes-test/git-submodule-test/git-submodule-test.bb
> index fa3041b7d8f..3f66cf6919d 100644
> --- a/meta-selftest/recipes-test/git-submodule-test/git-submodule-test.bb
> +++ b/meta-selftest/recipes-test/git-submodule-test/git-submodule-test.bb
> @@ -5,8 +5,8 @@ LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda
>  
>  INHIBIT_DEFAULT_DEPS = "1"
>  
> -SRC_URI = "gitsm://git.yoctoproject.org/git-submodule-test;branch=master"
> -SRCREV = "a2885dd7d25380d23627e7544b7bbb55014b16ee"
> +SRC_URI = "gitsm://git.yoctoproject.org/git-submodule-test;branch=master;protocol=https"
> +SRCREV = "f280847494763cdcf71197557a81ba7d8a6bce42"
>  
>  S = "${WORKDIR}/git"
>  
> diff --git a/meta/lib/oeqa/selftest/cases/archiver.py b/meta/lib/oeqa/selftest/cases/archiver.py
> index 75195241b79..ad2dd2dda65 100644
> --- a/meta/lib/oeqa/selftest/cases/archiver.py
> +++ b/meta/lib/oeqa/selftest/cases/archiver.py
> @@ -301,8 +301,8 @@ class Archiver(OESelftestTestCase):
>  
>          bb_vars = get_bb_vars(['DEPLOY_DIR_SRC'])
>          for target_file_name in [
> -            'gitsmshallow_git.yoctoproject.org.git-submodule-test_a2885dd-1_master.tar.gz',
> -            'gitsmshallow_git.yoctoproject.org.bitbake-gitsm-test1_bare_120f4c7-1.tar.gz',
> +            'gitsmshallow_git.yoctoproject.org.git-submodule-test_f280847-1_master.tar.gz',
> +            'gitsmshallow_git.yoctoproject.org.bitbake-gitsm-test1_bare_79a0efa-1.tar.gz',
>              'gitsmshallow_git.yoctoproject.org.bitbake-gitsm-test2_bare_f66699e-1.tar.gz',
>              'gitsmshallow_git.openembedded.org.bitbake_bare_52a144a-1.tar.gz',
>              'gitsmshallow_git.openembedded.org.bitbake_bare_c39b997-1.tar.gz'

Does master need that? At a quick look it probably should...

I'm wondering if this should be using an isolated downloads directory
for the test and it is seeing files from previous builds?

Cheers,

Richard

Re: [OE-core][kirkstone 1/1] oeqa/selftest/git-submodule-test: Default to https git protocol for YP/OE repos

[Yoann Congal]

[-- Attachment #1: Type: text/plain, Size: 3587 bytes --]

Le sam. 11 avr. 2026, 09:28, Richard Purdie <
richard.purdie@linuxfoundation.org> a écrit :

> On Fri, 2026-04-10 at 14:27 +0200, Yoann Congal via lists.openembedded.org
> wrote:
> > From: Yoann Congal <yoann.congal@smile.fr>
> >
> > Following up on commit 139102a73d41 ("recipes: Default to https git
> protocol where possible"),
> > > The recommendation from server maintainers is that the https protocol
> > > is both faster and more reliable than the dedicated git protocol at
> this point.
> > > Switch to it where possible.
> >
> > Use ";protocol=https" for the parent git submodule and, also, update the
> > SRCREV to point to a commit where submodules are reference through a
> > https:// URL instead of a git:// one.
> >
> > Update the expected output of the archiver test.
> >
> > Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
> > ---
> >  .../recipes-test/git-submodule-test/git-submodule-test.bb     | 4 ++--
> >  meta/lib/oeqa/selftest/cases/archiver.py                      | 4 ++--
> >  2 files changed, 4 insertions(+), 4 deletions(-)
> >
> > diff --git a/meta-selftest/recipes-test/git-submodule-test/
> git-submodule-test.bb b/meta-selftest/recipes-test/git-submodule-test/
> git-submodule-test.bb
> > index fa3041b7d8f..3f66cf6919d 100644
> > --- a/meta-selftest/recipes-test/git-submodule-test/
> git-submodule-test.bb
> > +++ b/meta-selftest/recipes-test/git-submodule-test/
> git-submodule-test.bb
> > @@ -5,8 +5,8 @@ LIC_FILES_CHKSUM =
> "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda
> >
> >  INHIBIT_DEFAULT_DEPS = "1"
> >
> > -SRC_URI = "gitsm://
> git.yoctoproject.org/git-submodule-test;branch=master"
> > -SRCREV = "a2885dd7d25380d23627e7544b7bbb55014b16ee"
> > +SRC_URI = "gitsm://
> git.yoctoproject.org/git-submodule-test;branch=master;protocol=https"
> > +SRCREV = "f280847494763cdcf71197557a81ba7d8a6bce42"
> >
> >  S = "${WORKDIR}/git"
> >
> > diff --git a/meta/lib/oeqa/selftest/cases/archiver.py
> b/meta/lib/oeqa/selftest/cases/archiver.py
> > index 75195241b79..ad2dd2dda65 100644
> > --- a/meta/lib/oeqa/selftest/cases/archiver.py
> > +++ b/meta/lib/oeqa/selftest/cases/archiver.py
> > @@ -301,8 +301,8 @@ class Archiver(OESelftestTestCase):
> >
> >          bb_vars = get_bb_vars(['DEPLOY_DIR_SRC'])
> >          for target_file_name in [
> > -
> 'gitsmshallow_git.yoctoproject.org.git-submodule-test_a2885dd-1_master.tar.gz',
> > -
> 'gitsmshallow_git.yoctoproject.org.bitbake-gitsm-test1_bare_120f4c7-1.tar.gz',
> > +
> 'gitsmshallow_git.yoctoproject.org.git-submodule-test_f280847-1_master.tar.gz',
> > +
> 'gitsmshallow_git.yoctoproject.org.bitbake-gitsm-test1_bare_79a0efa-1.tar.gz',
> >
> 'gitsmshallow_git.yoctoproject.org.bitbake-gitsm-test2_bare_f66699e-1.tar.gz',
> >
> 'gitsmshallow_git.openembedded.org.bitbake_bare_52a144a-1.tar.gz',
> >
> 'gitsmshallow_git.openembedded.org.bitbake_bare_c39b997-1.tar.gz'
>
> Does master need that? At a quick look it probably should...
>


Yes it does need it. And this is not the only reference patched on
kirkstone that is not patch on master, I will send the series to master as
soon as possible.

>
> I'm wondering if this should be using an isolated downloads directory
> for the test and it is seeing files from previous builds?
>

Yes, surely.

But more generally, a universe fetch, on a empty dl_dir and a blocked
git:// protocol (can be done locally with a firewall rule, don't know about
doing that on AB) should be interesting...

Regards,

>
> Cheers,
>
> Richard
>

[-- Attachment #2: Type: text/html, Size: 6067 bytes --]

[OE-core][kirkstone 0/1] Pull request

[Yoann Congal]

Fixes to improve the local CVE database reliability. Even if the branch
is EOL, the CVE metrics is the only part we maintain.
Should fix 15660 – [kirkstone, scarthgap] AB-INT: cve-update-nvd2-native-1.0-r0 do_fetch: CVE database update failed
https://bugzilla.yoctoproject.org/show_bug.cgi?id=15660

The following changes since commit 51259c7e933a2ac8ebc01604d6e65607b76b7b56:

  build-appliance-image: Update to kirkstone head revision (2026-04-10 14:14:10 +0100)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/kirkstone-next
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/kirkstone-next

for you to fetch changes up to 9687b9409d3a1e121f0f04de856055764d0a392e:

  cve-update: Avoid NFS caching issues (2026-07-31 01:06:35 +0200)

----------------------------------------------------------------

Paul Barker (1):
  cve-update: Avoid NFS caching issues

 meta/recipes-core/meta/cve-update-db-native.bb   | 9 +++++++--
 meta/recipes-core/meta/cve-update-nvd2-native.bb | 9 +++++++--
 2 files changed, 14 insertions(+), 4 deletions(-)