Re: [OE-core][whinlatter][PATCH] barebox/barebox-tools: upgrade 2025.09.0 -> 2025.09.3

["Yoann Congal" <yoann.congal@smile.fr>]

On Wed Apr 8, 2026 at 2:09 AM CEST, Ankur Tyagi via lists.openembedded.org wrote:
> From: Ankur Tyagi <ankur.tyagi85@gmail.com>
>
> 2025.09.3
> ---------
> Fixed FIT image vulnerability
> https://lore.barebox.org/barebox/abljJRMecNdejSD0@pengutronix.de/
>
> Changelog:
> https://github.com/barebox/barebox/compare/v2025.09.2...v2025.09.3
>
> 2025.09.2
> ---------
> Changelog:
> https://github.com/barebox/barebox/compare/v2025.09.1...v2025.09.2
>
> 2025.09.1
> ---------
> This stable release is specifically targeted at whinlatter which is
> currently at v2025.09.0
> https://lore.barebox.org/barebox/aUkaSKDePHF8__LB@pengutronix.de/
>
> Changelog:
> https://github.com/barebox/barebox/compare/v2025.09.0...v2025.09.1
>
> Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>

I'm a bit torn on this one. Because on one hand, this looks like a
proper stable branch (and I appreciate the effort), but on the other
hand, there are changes that I find too risky:
For example:
* API Change: https://github.com/barebox/barebox/commit/5e9f709b2b56bd9689e174572ef2af59b9fed5d2
* New feature: https://github.com/barebox/barebox/compare/v2025.09.0...v2025.09.3#diff-2dd6d3e4c91931c982f091155a47dd8d03e26731f8d59b112e938508fe12255aR1

Thoughts?

In the meantime, I will keep it in my branch for awareness.

> ---
>  meta/recipes-bsp/barebox/barebox-common.inc | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/meta/recipes-bsp/barebox/barebox-common.inc b/meta/recipes-bsp/barebox/barebox-common.inc
> index e41d0858fd..91865b4d44 100644
> --- a/meta/recipes-bsp/barebox/barebox-common.inc
> +++ b/meta/recipes-bsp/barebox/barebox-common.inc
> @@ -3,6 +3,6 @@ SECTION = "bootloaders"
>  
>  LIC_FILES_CHKSUM = "file://COPYING;md5=f5125d13e000b9ca1f0d3364286c4192"
>  
> -PV = "2025.09.0"
> +PV = "2025.09.3"
>  SRC_URI = "https://barebox.org/download/barebox-${PV}.tar.bz2"
> -SRC_URI[sha256sum] = "7df1aa47bb7bf1763a729137ac773e69a4052812af094475d739fc63a9295f0d"
> +SRC_URI[sha256sum] = "e87eb863cbe45e4f5af8930825c8f6e20c02b82451e9e1125ea1c73c1fb49a87"


-- 
Yoann Congal
Smile ECS