Re: [PATCH 11/11] migration-guides/release-notes-5.2: update for upcoming 5.2 release

["Antonin Godard" <antonin.godard@bootlin.com>]

Hi Antonin,

On Mon Mar 17, 2025 at 10:06 AM CET, Antonin Godard wrote:
[...]
>     -  Import ``makedumpfile`` from meta-openembedded, as the ``kexec-tools``
>        recipe :term:`RDEPENDS` on it.
> @@ -69,6 +123,30 @@ New Features / Enhancements in |yocto-ver|
>        </meta-openembedded>`, a recipe for hardware identification and
>        configuration data, needed by ``libdisplay-info``.
>  
> +   -  The ``cve-update-db-native`` was restored from kirkstone and can be used
> +      to update the CVE National Vulnerability Database (NVD). Add support for
> +      the FKIE-CAD (https://github.com/fkie-cad/nvd-json-data-feeds) CVE source
> +      for it.
> +
> +   -  The ``rpm-sequoia-crypto-policy`` to ship a crypto policy file for the
> +      ``rpm-sequoia`` recipe.

Messed up the alignment starting from here...

> +  -  The ``libsass`` and ``sassc`` for the C/C++ port of the Sass CSS
> +     pre-compiler, required by the ``libadwaita`` recipe.
> +
> +  -  ``python3-roman-numerals-py``: module providing utilities for working with
> +     well-formed Roman numerals. ``python3-sphinx`` relies on this recipe.
> +
> +  -  The ``fastfloat`` recipe, a header-only library for fast number parsing.
> +     This will be a dependency for the ``vte`` recipe in later versions.
> +
> +  -  The ``avahi-libnss-mdns`` was renamed from ``libnss-mdns``.
> +
> +  -  The ``cargo-c`` was renamed from ``cargo-c-native``.
> +
> +  -  The ``tcl8`` recipe was added to support the failing build of ``expect``.
> +     The ``tcl`` recipe (version 9) remains the main recipe for this component.
> +

...up to there. Will fix in v2.

>  -  New core classes:
>  
>     -  New :ref:`ref-classes-uki` class for building Unified Kernel Images (UKI).
> @@ -79,12 +157,23 @@ New Features / Enhancements in |yocto-ver|
>        this class. This class also strips potential build paths in the compilation
>        output for reproducibility.
>  
> +   -  New :ref:`ref-classes-ptest-python-pytest` class to automatically
> +      configure :ref:`ref-classes-ptest` for Python packages using the `pytest
> +      <https://docs.pytest.org>`__ unit test framework.
> +
>  -  Architecture-specific changes:
>  
>     -  ``tune-cortexa32``: set tune feature to ``armv8a``.
>  
> +   -  Add the ``loongarch64`` architecture for the ``grub2`` and ``llvm``
> +      recipes. It was also added to build with ``musl`` as the toolchain.
> +
>  -  QEMU / ``runqemu`` changes:
>  
> +   -  ``qemu/machine``: change the  ``QEMU_EXTRAOPTIONS_${TUNE_PKGARCH}`` syntax
> +      in QEMU machine definitions to ``QEMU_EXTRAOPTIONS:tune-${TUNE_PKGARCH}``
> +      to follow the same patterns as other QEMU-related variables.
> +
>  -  Documentation changes:
>  
>     -  Use ``rsvg`` as a replacement of ``inkscape`` to convert svg files in the
> @@ -93,6 +182,10 @@ New Features / Enhancements in |yocto-ver|
>     -  The ``cve`` role was replaced by ``cve_nist`` to avoid a conflict with
>        more recent version of Sphinx.
>  
> +   -  New documentation on the multiconfig feature: :doc:`/dev-manual/multiconfig`.
> +
> +   -  New documentation on ``bblock``: :doc:`/dev-manual/bblock`.
> +
>  -  Go changes:
>  
>     -  The :ref:`ref-classes-go-mod` class now sets an internal variable
> @@ -116,6 +209,9 @@ New Features / Enhancements in |yocto-ver|
>     -  Add the variable :term:`WIC_SECTOR_SIZE` to control the sector size of Wic
>        images.
>  
> +   -  ``bootimg-efi``: Support "+" symbol in filenames passed in
> +      :term:`IMAGE_EFI_BOOT_FILES`.
> +
>  -  SDK-related changes:
>  
>     -  Add support for ZST-compression through :term:`SDK_ARCHIVE_TYPE`, by
> @@ -126,6 +222,11 @@ New Features / Enhancements in |yocto-ver|
>  
>     -  Enable ``ipv6``, ``acl``, and ``xattr`` in :term:`DISTRO_FEATURES_NATIVESDK`.
>  
> +   -  Toolchain SDKs (``meta-toolchain``) now properly supports the ``usrmerge``
> +      feature (part of :term:`DISTRO_FEATURES`).
> +
> +   -  The ``pipefail`` shell option is now added to the SDK installer script.
> +
>  -  Testing-related changes:
>  
>     -  ``oeqa/postactions``: Fix archive retrieval from target.
> @@ -144,8 +245,12 @@ New Features / Enhancements in |yocto-ver|
>  
>     -  ``oeqa/selftest``: add a test for bitbake "-e" and "-getvar" difference.
>  
> +   -  ``oeqa/selftest``: Fix failure when configuration contains ``BBLAYERS:append``
> +
>     -  ``oeqa/ssh``: improve performance and log sizes when handling large files.
>  
> +   -  ``oeqa/poisoning``: fix and improve gcc include poisoning tests.
> +
>  -  Utility script changes:
>  
>     -  The ``patchreview.py`` script now uses the ``check_upstream_status`` from
> @@ -172,19 +277,42 @@ New Features / Enhancements in |yocto-ver|
>           :term:`CHECKLAYER_REQUIRED_TESTS` to get the list of QA checks to verify
>           when running the ``yocto-check-layer`` script.
>  
> +   -  New ``oe-image-files-spdx`` script utility directory under
> +      ``scripts/contrib`` to that processes the SPDX 3.0.1 output from a build
> +      and lists all the files on the root file system with their checksums.
> +
>  -  BitBake changes:
>  
> -   -  ``fetch2``: do not preserve ownership when unpacking.
> +   -  Add a new ``include_all`` directive, which can be used to include multiple
> +      files present in the same location in different layers.
> +
> +   -  Fetcher related changes (``fetch2``):
> +
> +      -  Do not preserve ownership when unpacking.
> +
> +      -  switch from Sqlite ``persist_data`` to a standard cache file
> +         for checksums, and drop ``persist_data``.
> +
> +      -  add support for GitHub codespaces by adding the
> +         ``GITHUB_TOKEN`` to the list of variables exported during ``git``
> +         invocations.
>  
> -   -  ``fetch2``: switch from Sqlite ``persist_data`` to a standard cache file
> -      for checksums, and drop ``persist_data``.
> +      -  set User-Agent to 'bitbake/version' instead of a "fake
> +         mozilla" user agent.
>  
> -   -  ``fetch2``: add support for GitHub codespaces by adding the
> -      ``GITHUB_TOKEN`` to the list of variables exported during ``git``
> -      invocations.
> +      -  ``wget``: handle HTTP 308 Permanent Redirect.
>  
> -   -  ``fetch2``: set User-Agent to 'bitbake/version' instead of a "fake
> -      mozilla" user agent.
> +      -  ``wget``: increase timeout to 100s from 30s to match CDN worst
> +         response time.
> +
> +      -  Add support for fast initial shallow fetch. The fetcher will prefer an
> +         initial shallow clone, but will re-utilize an existing bare clone if
> +         there is one. If the remote server does not allow shallow fetches, the
> +         fetcher falls back to a bare clone. This improves the data transfer
> +         size on the initial fetch of a repository, eliminates the need to use
> +         an HTTPS tarball :term:`SRC_URI` to reduce data transfer, and allows
> +         SSH-based authentication when using non-public repos, so additional
> +         HTTPS tokens may not be required.
>  
>     -  ``compress``: use ``lz4`` instead of ``lz4c``, as ``lz4c`` as been
>        considered deprecrated since 2018.
> @@ -192,14 +320,13 @@ New Features / Enhancements in |yocto-ver|
>     -  ``server/process``: decrease idle/main loop frequency, as it is idle and
>        main loops have socket select calls to know when to execute.
>  
> -   -  ``bitbake-worker``: improve bytearray truncation performance when large
> -       amounts of data are being transferred from the cooker to the worker.
> +   -  ``bitbake-worker``:
>  
> -   -  ``bitbake-worker/cooker``: increase the default pipe size from 64KB to
> -      512KB for better efficiency when transferring large amounts of data.
> +      -  improve bytearray truncation performance when large
> +         amounts of data are being transferred from the cooker to the worker.
>  
> -   -  ``fetch/wget``: increase timeout to 100s from 30s to match CDN worst
> -      response time.
> +      -  ``cooker``: increase the default pipe size from 64KB to
> +         512KB for better efficiency when transferring large amounts of data.
>  
>     -  ``bitbake-getvar``: catch ``NoProvider`` exception to improve error
>        readability when a recipe is not found with ``--recipe``.
> @@ -219,6 +346,18 @@ New Features / Enhancements in |yocto-ver|
>     -  ``knotty`` now hints the user if :term:`MACHINE` was not set in
>        the ``local.conf`` file.
>  
> +   -  ``utils``: add Go mod h1 checksum support, specific to Go modules. Use
> +      with ``goh1``.
> +
> +   -  The parser now catches empty variable name assignments such as::
> +
> +         += "value"
> +
> +      The previous code would have assigned ``value`` to the variable named ``+``.
> +
> +   -  ``hashserv``: Add the ``gc-mark-stream`` command for batch hash marking.
> +
> +
>  -  Packaging changes:
>  
>     -  ``systemd``: extract dependencies from ``.note.dlopen`` ELF segments, to
> @@ -235,13 +374,18 @@ New Features / Enhancements in |yocto-ver|
>  
>  -  LLVM related changes:
>  
> +   -  Set ``LLVM_HOST_TRIPLE`` for cross-compilation, which is recommended when
> +      cross-compiling Llvm.
> +
>  -  SPDX-related changes:
>  
> -   -  SPDX 3.0: Find local sources when searching for debug sources.
> +   -  SPDX 3.0:
>  
> -   -  SPDX 3.0: Map ``gitsm`` URIs to ``git``.
> +      -  Find local sources when searching for debug sources.
>  
> -   -  SPDX 3.0: Link license and build by alias instead of SPDX ID.
> +      -  Map ``gitsm`` URIs to ``git``.
> +
> +      -  Link license and build by alias instead of SPDX ID.
>  
>     -  Fix SPDX tasks not running when code changes (use of ``file-checksums``).
>  
> @@ -256,6 +400,14 @@ New Features / Enhancements in |yocto-ver|
>        ``devtool modify my-recipe --debug-build`` followed by
>        ``devtool ide-sdk my-recipe my-image``.
>  
> +   -  ``create-spdx``: support line numbers for :term:`NO_GENERIC_LICENSE`
> +      license types.
> +
> +   -  ``spdx30``: Adds a "contains" relationship that relates the root file
> +      system package to the files contained in it. If a package provides a file
> +      with a matching hash and path, it will be linked, otherwise a new File
> +      element will be created.
> +
>  -  Patchtest-related changes:
>  
>     -  Refactor pattern definitions in a ``patterns`` module.
> @@ -299,6 +451,8 @@ New Features / Enhancements in |yocto-ver|
>        currently prints warning message for every unpatched CVE the
>        :ref:`ref-classes-cve-check` class finds.
>  
> +   -  Allow choosing the CVE feed with :term:`NVD_DB_VERSION`.
> +
>  -  New :term:`PACKAGECONFIG` options for individual recipes:
>  
>        -  ``perf``: ``zstd``
> @@ -308,15 +462,61 @@ New Features / Enhancements in |yocto-ver|
>        -  ``libpam``: ``selinux``
>        -  ``libsecret``: ``pam``
>        -  ``rpm``: ``sequoia``
> +      -  ``systemd``: ``apparmor``, ``fido``, ``mountfsd``, ``nsresourced``
> +      -  ``ovmf``: ``debug``

Also here, will fix in v2.

Antonin

-- 
Antonin Godard, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com