[PATCH 1/4] repo: upgrade 2.71 -> 2.72

[PATCH 1/4] repo: upgrade 2.71 -> 2.72

[Jaipaul Cheernam]

upload: add --ignore-remote-commits
docs: add Repology links for distro package versions
docs: release: update release process to match current practice
docs: release: remove stale Project References table

Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
---
 meta/recipes-devtools/repo/{repo_2.71.bb => repo_2.72.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/repo/{repo_2.71.bb => repo_2.72.bb} (94%)

diff --git a/meta/recipes-devtools/repo/repo_2.71.bb b/meta/recipes-devtools/repo/repo_2.72.bb
similarity index 94%
rename from meta/recipes-devtools/repo/repo_2.71.bb
rename to meta/recipes-devtools/repo/repo_2.72.bb
index 9d9dceb32c..10e9208ebf 100644
--- a/meta/recipes-devtools/repo/repo_2.71.bb
+++ b/meta/recipes-devtools/repo/repo_2.72.bb
@@ -11,7 +11,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=3b83ef96387f14655fc854ddc3c6bd57"
 
 SRC_URI = "git://gerrit.googlesource.com/git-repo.git;protocol=https;branch=main;tag=v${PV} \
            "
-SRCREV = "338ddb7d83ea35d5aef94d3c5d95c74fa3845780"
+SRCREV = "365629015667e04739f59070e745548a728549c8"
 
 MIRRORS += "git://gerrit.googlesource.com/git-repo.git git://github.com/GerritCodeReview/git-repo.git"
 

[PATCH 2/4] rsync: upgrade 3.5.1 -> 3.5.2

[Jaipaul Cheernam]

NEWS: https://download.samba.org/pub/rsync/NEWS#3.5.2

- Fixed interrupted `--append` and `--inplace` transfers writing the final
  256 KiB buffer twice. An interrupted destination now remains a clean prefix
  which the next transfer can resume or repair.
- Fixed uploads through `rrsync` when the destination file already exists.
  Existing files are now reached beneath a pinned parent directory instead of
  being passed as an unwritable `/proc/self/fd/N` destination.
- Fixed poor matching performance on large sparse and repeated-block files
  when duplicate checksum chains exhausted the search limit. Valid basis
  blocks are no longer hidden behind duplicate entries.
- Bounded strong-checksum work when a malicious receiver supplies weak
  checksums that collide with consecutive rolling windows
  (CVE-2026-119741).
- Prevented the `--inplace` matcher from advancing its aligned basis index
  beyond the available checksum entries. This avoids signed overflow on large
  source files when the peer supplies a small block count.
- Recovered from failed hard-link creation without aborting or hanging the
  generator. Remaining members fall back to a fresh hard-link group when the
  original destination inode cannot accept another link.
- Prevented an out-of-bounds write while invalidating a sender checksum after
  a file read error when the negotiated checksum length is zero.
- Fixed a daemon receiver stack overflow when queued deletion output reached
  `--max-alloc`. Quiet daemon transfers no longer queue deletion messages
  unless the client requested them.
- Fixed a `--files-from` pull from a subdirectory of a daemon module, which
  read each listed file from the module root instead.  It could send, and with
  `--remove-source-files` delete, a same-named file the module's filter
  excludes.
- Fixed password files whose first line is empty. The parser no longer skips
  the empty line and uses a later password.
- Escaped terminal control characters in filenames and diagnostics written to
  standard output, standard error and log files while preserving printable
  text in the active locale.
- Preserved Cygwin and MSYS2 UNC roots during ownership-checked path walks.
- Restored daemon startup from accepted named Unix sockets on standard input,
  including filesystem and Linux abstract sockets used for socket activation.
  Unnamed local socket pairs remain non-daemon channels.
- Fixed forward-DNS hostname entries in daemon `hosts allow` and `hosts deny`
  lists for IPv6 peers. Address comparison is now binary and family-aware.
- Preserved Unix symlink permissions on systems which require `fchmodat()` to
  change the mode of a symlink rather than its target.
- Restored builds on systems without `O_CLOEXEC` or `O_DIRECTORY`, including
  Solaris 10.

- Added `--nice` to adjust CPU and I/O scheduling priorities for local and
  remote rsync processes. Daemon clients and rrsync cannot raise server-side
  priorities.
- Human-readable output now uses dynamic precision to show three significant
  digits and appends `i` to binary unit suffixes. `--progress` uses the same
  formatter for transfer rates and labels byte counts and rates with `B` and
  `B/s`. Example output includes `46.7M`, `48.8Mi`, `782,448B` and
  `113,295B/s`. File-list, created-directory and skipped-deletion counts also
  use thousands separators.
- Added `--delay-symlinks` to defer creating new and changed symlinks until
  other transferred files are in place. It implies `--no-inc-recursive` and
  requires protocol 29 or newer with support on the receiving side. It cannot
  be combined with `--remove-source-files`, `--hard-links`, `--compare-dest`,
  `--copy-dest` or `--link-dest`.

------------------------------------------------------------------------------
| 04 Nov 2026  | 3.5.2  |                  | 33          |

Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
---
 ...-Add-missing-prototypes-to-function-declarations.patch | 8 ++++----
 meta/recipes-devtools/rsync/files/determism.patch         | 4 ++--
 .../rsync/files/makefile-no-rebuild.patch                 | 6 +++---
 .../rsync/{rsync_3.5.1.bb => rsync_3.5.2.bb}              | 2 +-
 4 files changed, 10 insertions(+), 10 deletions(-)
 rename meta/recipes-devtools/rsync/{rsync_3.5.1.bb => rsync_3.5.2.bb} (97%)

diff --git a/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch b/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch
index 1f1fc3f3b3..9f271fa6e2 100644
--- a/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch
+++ b/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch
@@ -1,4 +1,4 @@
-From 56a785a7d964f797a786b2d5b75d9cee51b530b1 Mon Sep 17 00:00:00 2001
+From 5db6185e95929b7edc665b5f029ffd6a6f900eb3 Mon Sep 17 00:00:00 2001
 From: Khem Raj <raj.khem@gmail.com>
 Date: Mon, 29 Aug 2022 19:53:28 -0700
 Subject: [PATCH] Add missing prototypes to function declarations
@@ -50,10 +50,10 @@ index 7476f6a..b939a0c 100644
  	if (partial_string_buf) {
  		if (partial_string_len)
 diff --git a/log.c b/log.c
-index 889b57b..19e5e98 100644
+index bf30df9..7da831b 100644
 --- a/log.c
 +++ b/log.c
-@@ -140,7 +140,7 @@ static void logit(int priority, const char *buf)
+@@ -147,7 +147,7 @@ static void logit(int priority, const char *buf)
  	}
  }
  
@@ -63,7 +63,7 @@ index 889b57b..19e5e98 100644
  	int options = LOG_PID;
  
 diff --git a/main.c b/main.c
-index ed6e554..b5f9448 100644
+index 63c35a1..2d0c165 100644
 --- a/main.c
 +++ b/main.c
 @@ -250,7 +250,7 @@ void read_del_stats(int f)
diff --git a/meta/recipes-devtools/rsync/files/determism.patch b/meta/recipes-devtools/rsync/files/determism.patch
index 890275f6d7..8883f9ffab 100644
--- a/meta/recipes-devtools/rsync/files/determism.patch
+++ b/meta/recipes-devtools/rsync/files/determism.patch
@@ -1,4 +1,4 @@
-From e784131e4ccbaf8ad7107d1f7a7f13da8c675827 Mon Sep 17 00:00:00 2001
+From 637d3e6dd6414c89b3a0e96eccbb8b37d179acec Mon Sep 17 00:00:00 2001
 From: Richard Purdie <richard.purdie@linuxfoundation.org>
 Date: Sun, 21 Feb 2021 09:45:48 +0000
 Subject: [PATCH] rsync: Fix a file sorting determinism issue
@@ -25,7 +25,7 @@ https://github.com/WayneD/rsync/commit/d3085f7add38a5cf833a0b31cb0637ff46c80f8d
  1 file changed, 5 insertions(+)
 
 diff --git a/Makefile.in b/Makefile.in
-index de24949..bb9bb27 100644
+index 9de687e..44a8ee6 100644
 --- a/Makefile.in
 +++ b/Makefile.in
 @@ -28,6 +28,11 @@ MKDIR_P=@MKDIR_P@
diff --git a/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch b/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch
index 59255d15e7..4734f2c7c4 100644
--- a/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch
+++ b/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch
@@ -1,4 +1,4 @@
-From 0e1f2aec0dbfc150013860b42b41645cebe236b7 Mon Sep 17 00:00:00 2001
+From 79b3194efff7e55ae9d0fadc40d45bec4bd37ea7 Mon Sep 17 00:00:00 2001
 From: Ross Burton <ross.burton@intel.com>
 Date: Tue, 12 Apr 2016 15:51:54 +0100
 Subject: [PATCH] rsync: remove upstream's rebuild logic
@@ -13,10 +13,10 @@ Signed-off-by: Ross Burton <ross.burton@intel.com>
  1 file changed, 54 deletions(-)
 
 diff --git a/Makefile.in b/Makefile.in
-index 716171d..de24949 100644
+index 3a5d509..9de687e 100644
 --- a/Makefile.in
 +++ b/Makefile.in
-@@ -267,60 +267,6 @@ conf: configure.sh config.h.in
+@@ -306,60 +306,6 @@ conf: configure.sh config.h.in
  .PHONY: gen
  gen: conf proto.h man git-version.h
  
diff --git a/meta/recipes-devtools/rsync/rsync_3.5.1.bb b/meta/recipes-devtools/rsync/rsync_3.5.2.bb
similarity index 97%
rename from meta/recipes-devtools/rsync/rsync_3.5.1.bb
rename to meta/recipes-devtools/rsync/rsync_3.5.2.bb
index 6b121ab1a8..299b444898 100644
--- a/meta/recipes-devtools/rsync/rsync_3.5.1.bb
+++ b/meta/recipes-devtools/rsync/rsync_3.5.2.bb
@@ -16,7 +16,7 @@ SRC_URI = "https://download.samba.org/pub/${BPN}/src/${BP}.tar.gz \
            file://determism.patch \
            file://0001-Add-missing-prototypes-to-function-declarations.patch \
            "
-SRC_URI[sha256sum] = "c55f9c9dc10fb8bec397b399a0fdded53cc9a2d8e30891bb0d63724d25c37bef"
+SRC_URI[sha256sum] = "a10d591825251e070f74c98df3daad195def4ed81b4a2de16169026aea33f6c8"
 
 # Out-of-tree builds don't install the documentation currently
 # https://github.com/RsyncProject/rsync/issues/846

[PATCH 3/4] xorgproto: upgrade 2025.1 -> 2026.1

[Jaipaul Cheernam]

CompareLog: https://gitlab.freedesktop.org/xorg/proto/xorgproto/-/compare/xorgproto-2025.1...xorgproto-2026.1

Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
---
 .../xorg-proto/{xorgproto_2025.1.bb => xorgproto_2026.1.bb}     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-graphics/xorg-proto/{xorgproto_2025.1.bb => xorgproto_2026.1.bb} (90%)

diff --git a/meta/recipes-graphics/xorg-proto/xorgproto_2025.1.bb b/meta/recipes-graphics/xorg-proto/xorgproto_2026.1.bb
similarity index 90%
rename from meta/recipes-graphics/xorg-proto/xorgproto_2025.1.bb
rename to meta/recipes-graphics/xorg-proto/xorgproto_2026.1.bb
index e187c56fbc..37327b2d06 100644
--- a/meta/recipes-graphics/xorg-proto/xorgproto_2025.1.bb
+++ b/meta/recipes-graphics/xorg-proto/xorgproto_2026.1.bb
@@ -9,7 +9,7 @@ LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://COPYING-x11proto;md5=0b9fe3db4015bcbe920e7c67a39ee3f1"
 
 SRC_URI = "${XORG_MIRROR}/individual/proto/${BP}.tar.xz"
-SRC_URI[sha256sum] = "56898c716c0578df8a2d828c9c3e5c528277705c0484381a81960fe1a67668e8"
+SRC_URI[sha256sum] = "f9bfe4a9ed8c8ab9d2a3b0d49797f046052dadd06b7a8b45dbffaffb137e8290"
 
 inherit meson
 

[PATCH 4/4] ppp: upgrade 2.5.4 -> 2.5.5

[Jaipaul Cheernam]

ReleaseNotes: https://github.com/ppp-project/ppp/releases/tag/v2.5.5

This is a bug-fix and security release, with no new features. Changes include:

 - Fix bugs where hook scripts such as /etc/ppp/ip-up were not being run.
 - Fix bugs causing PPP_SCRIPT_INSTANCE to be set incorrectly for some scripts.
 - Fix validation of received frames in the RADIUS plugin, along with some further hardening against incorrect received frames.
 - Fix generation of MPPE keys when EAP-TLS is being used with TLS 1.3. This makes it work with Windows clients, but breaks compatibility with earlier versions of pppd (but only in the case where EAP-TLS and MPPE and the 'max-tls-version 1.3' option are all being used).
 - Various cases existed in the MPPE code where the link could come up without MPPE encryption despite it being requested via one or more of the 'require-mppe', 'require-mppe-40' or 'require-mppe-128' options. This is now fixed. Also, pppd will now accept an MPPE CCP configuration option requesting no encryption from the peer if MPPE is not required (rather than rejecting it).
 - Fix a bug where the password from a file specified with the '+ua' option was not being used.

Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
---
 meta/recipes-connectivity/ppp/{ppp_2.5.4.bb => ppp_2.5.5.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-connectivity/ppp/{ppp_2.5.4.bb => ppp_2.5.5.bb} (98%)

diff --git a/meta/recipes-connectivity/ppp/ppp_2.5.4.bb b/meta/recipes-connectivity/ppp/ppp_2.5.5.bb
similarity index 98%
rename from meta/recipes-connectivity/ppp/ppp_2.5.4.bb
rename to meta/recipes-connectivity/ppp/ppp_2.5.5.bb
index 6f7977ece3..4a21b94907 100644
--- a/meta/recipes-connectivity/ppp/ppp_2.5.4.bb
+++ b/meta/recipes-connectivity/ppp/ppp_2.5.5.bb
@@ -25,7 +25,7 @@ SRC_URI = "https://download.samba.org/pub/${BPN}/${BP}.tar.gz \
            file://ppp@.service \
            "
 
-SRC_URI[sha256sum] = "379a630a40d858a1347f6592d671791dde12101697a743ef9900012f3765be31"
+SRC_URI[sha256sum] = "0ebbcfef906d16cfbb9cbdd19c0d92aa3df2fd8fdd29731f614c58d16a279aa5"
 
 inherit autotools pkgconfig systemd
 

Re: [OE-core] [PATCH 2/4] rsync: upgrade 3.5.1 -> 3.5.2

[Mathieu Dubois-Briand]

On Wed Nov 4, 2026 at 12:38 PM CET, Jaipaul Cheernam wrote:
> NEWS: https://download.samba.org/pub/rsync/NEWS#3.5.2
>
> - Fixed interrupted `--append` and `--inplace` transfers writing the final
>   256 KiB buffer twice. An interrupted destination now remains a clean prefix
>   which the next transfer can resume or repair.
> - Fixed uploads through `rrsync` when the destination file already exists.
>   Existing files are now reached beneath a pinned parent directory instead of
>   being passed as an unwritable `/proc/self/fd/N` destination.
> - Fixed poor matching performance on large sparse and repeated-block files
>   when duplicate checksum chains exhausted the search limit. Valid basis
>   blocks are no longer hidden behind duplicate entries.
> - Bounded strong-checksum work when a malicious receiver supplies weak
>   checksums that collide with consecutive rolling windows
>   (CVE-2026-119741).
> - Prevented the `--inplace` matcher from advancing its aligned basis index
>   beyond the available checksum entries. This avoids signed overflow on large
>   source files when the peer supplies a small block count.
> - Recovered from failed hard-link creation without aborting or hanging the
>   generator. Remaining members fall back to a fresh hard-link group when the
>   original destination inode cannot accept another link.
> - Prevented an out-of-bounds write while invalidating a sender checksum after
>   a file read error when the negotiated checksum length is zero.
> - Fixed a daemon receiver stack overflow when queued deletion output reached
>   `--max-alloc`. Quiet daemon transfers no longer queue deletion messages
>   unless the client requested them.
> - Fixed a `--files-from` pull from a subdirectory of a daemon module, which
>   read each listed file from the module root instead.  It could send, and with
>   `--remove-source-files` delete, a same-named file the module's filter
>   excludes.
> - Fixed password files whose first line is empty. The parser no longer skips
>   the empty line and uses a later password.
> - Escaped terminal control characters in filenames and diagnostics written to
>   standard output, standard error and log files while preserving printable
>   text in the active locale.
> - Preserved Cygwin and MSYS2 UNC roots during ownership-checked path walks.
> - Restored daemon startup from accepted named Unix sockets on standard input,
>   including filesystem and Linux abstract sockets used for socket activation.
>   Unnamed local socket pairs remain non-daemon channels.
> - Fixed forward-DNS hostname entries in daemon `hosts allow` and `hosts deny`
>   lists for IPv6 peers. Address comparison is now binary and family-aware.
> - Preserved Unix symlink permissions on systems which require `fchmodat()` to
>   change the mode of a symlink rather than its target.
> - Restored builds on systems without `O_CLOEXEC` or `O_DIRECTORY`, including
>   Solaris 10.
>
> - Added `--nice` to adjust CPU and I/O scheduling priorities for local and
>   remote rsync processes. Daemon clients and rrsync cannot raise server-side
>   priorities.
> - Human-readable output now uses dynamic precision to show three significant
>   digits and appends `i` to binary unit suffixes. `--progress` uses the same
>   formatter for transfer rates and labels byte counts and rates with `B` and
>   `B/s`. Example output includes `46.7M`, `48.8Mi`, `782,448B` and
>   `113,295B/s`. File-list, created-directory and skipped-deletion counts also
>   use thousands separators.
> - Added `--delay-symlinks` to defer creating new and changed symlinks until
>   other transferred files are in place. It implies `--no-inc-recursive` and
>   requires protocol 29 or newer with support on the receiving side. It cannot
>   be combined with `--remove-source-files`, `--hard-links`, `--compare-dest`,
>   `--copy-dest` or `--link-dest`.
>
> ------------------------------------------------------------------------------
> | 04 Nov 2026  | 3.5.2  |                  | 33          |
>
> Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
> ---

Hi Jaipaul,

https://download.samba.org looks down, so we can not fetch the sources
and put in in the mirror. I will try again later this week.

https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/5054

Thanks,
Mathieu

-- 
Mathieu Dubois-Briand, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com

Re: [OE-core] [PATCH 2/4] rsync: upgrade 3.5.1 -> 3.5.2

[Jaipaul Cheernam]

On 2026-11-04 14:52, Mathieu Dubois-Briand wrote:
> https://download.samba.org looks down, so we can not fetch the sources
> and put in in the mirror. I will try again later this week.
>
> https://autobuilder.yoctoproject.org/valkyrie/#/builders/29/builds/5054

Hi Mathieu,

It did worked for me this morning and yes, now its failing for me as well.

github is working , may be we can  change source to github if issue is 
persistent  .


Regards,

Jaipaul