subtree updates (scarthgap 11/3/2025)scarthgap

poky: ca27724b44..c4a4df3e72:
  Adam Blank (3):
        kernel-dev/common.rst: fix the in-tree defconfig description
        ref-manual/variables.rst: fix the description of KBUILD_DEFCONFIG
        ref-manual/variables.rst: fix the description of STAGING_DIR

  Aditya Tayade (1):
        e2fsprogs: removed 'sed -u' option

  Adrian Freihofer (15):
        kernel-fitimage: fix intentation
        kernel-fitimage: fix external dtb check
        devtool: modify support debug-builds
        devtool: ide-sdk sort cmake preset
        devtool: ide-sdk recommend DEBUG_BUILD
        oe-selftest: devtool ide-sdk use modify debug-build
        devtool: ide-sdk remove the plugin from eSDK installer
        uboot-config: fix devtool modify with kernel-fitimage
        sdk-manual: extensible.rst: devtool ide-sdk improve
        sdk-manual: extensible.rst: update devtool ide-sdk
        ref-manual: kernel-fitimage.bbclass does not use SPL_SIGN_KEYNAME
        llvm: update from 18.1.6 to 18.1.8
        llvm: fix build with gcc-15
        expect: Revert "expect-native: fix do_compile failure with gcc-14"
        expect: fix native build with GCC 15

  Alban Bedel (1):
        bind: Fix build with the `httpstats` package config enabled

  Aleksandar Nikolic (12):
        cve-check: Introduce CVE_CHECK_MANIFEST_JSON_SUFFIX
        install-buildtools: remove md5 checksum validation
        install-buildtools: fix "test installation" step
        install-buildtools: update base-url, release and installer version
        ref-manual: introduce CVE_CHECK_REPORT_PATCHED variable
        scripts/install-buildtools: Update to 5.0.5
        scripts/install-buildtools: Update to 5.0.6
        scripts/install-buildtools: Update to 5.0.7
        scripts/install-buildtools: Update to 5.0.9
        scripts/install-buildtools: Update to 5.0.10
        scripts/install-buildtools: Update to 5.0.11
        scripts/install-buildtools: Update to 5.0.12

  Alessio Cascone (1):
        tzcode-native: Fix compiler setting from 2023d version

  Alexander Kanavin (29):
        mesa: remove obsolete 0001-meson.build-check-for-all-linux-host_os-combinations.patch
        kexec-tools: submit 0003-kexec-ARM-Fix-add_buffer_phys_virt-align-issue.patch upstream
        vorbis: mark patch as Inactive-Upstream
        grub: mark grub-module-explicitly-keeps-symbole-.module_license.patch as a workaround
        perl: submit the rest of determinism.patch upstream
        iptables: submit 0001-configure-Add-option-to-enable-disable-libnfnetlink.patch upstream
        xserver-xorg: upgrade 21.1.12 -> 21.1.13
        mobile-broadband-provider-info: upgrade 20230416 -> 20240407
        python3: submit deterministic_imports.patch upstream as a ticket
        glib-networking: submit eagain.patch upstream
        glslang: mark 0001-generate-glslang-pkg-config.patch as Inappropriate
        tcp-wrappers: mark all patches as inactive-upstream
        automake: mark new_rt_path_for_test-driver.patch as Inappropriate
        settings-daemon: submit addsoundkeys.patch upstream and update to a revision that has it
        dpkg: mark patches adding custom non-debian architectures as inappropriate for upstream
        libacpi: mark patches as inactive-upstream
        apr: drop 0007-explicitly-link-libapr-against-phtread-to-make-gold-.patch
        pulseaudio, desktop-file-utils: correct freedesktop.org -> www.freedesktop.org SRC_URI
        sysvinit: take release tarballs from github
        package_rpm: use zstd's default compression level
        package_rpm: restrict rpm to 4 threads
        rust: add reproducibility patch to eliminate host leakage
        rust: build the default set of tools
        rust: use rust-snapshot binaries only in rust-native
        rust: correctly link rust-snapshot into build/stage0
        pkg-config-native: pick additional search paths from $EXTRA_NATIVE_PKGCONFIG_PATH
        selftest/rust: correctly form the PATH environment variable
        perlcross: update 1.5.2 -> 1.6
        mtools: upgrade 4.0.43 -> 4.0.44

  Alexis Cellier (1):
        systemd: add libpcre2 as RRECOMMENDS if pcre2 is enabled

  Alexis Lothoré (3):
        oeqa/utils/postactions: transfer whole archive over ssh instead of doing individual copies
        oeqa/postactions: fix exception handling
        oeqa/ssh: allow to retrieve raw, unformatted ouput

  Alon Bar-Lev (1):
        module.bbclass: add KBUILD_EXTRA_SYMBOLS to install

  Alper Ak (2):
        ref-manual/variables.rst: document INHIBIT_DEFAULT_RUST_DEPS
        ref-manual/variables.rst: document INHIBIT_UPDATERCD_BBCLASS

  Anders Heimer (1):
        libpam: mark CVE-2025-6018 as not applicable

  Andrew Fernandes (1):
        gtk+: add missing libdrm dependency

  Andrew Kreimer (1):
        manuals: remove repeated word

  Antonin Godard (77):
        ref-manual: add missing CVE_CHECK manifest variables
        ref-manual: add missing TESTIMAGE_FAILED_QA_ARTIFACTS
        ref-manual: add missing EXTERNAL_KERNEL_DEVICETREE variable
        ref-manual: add missing OPKGBUILDCMD variable
        ref-manual: merge patch-status-* to patch-status
        ref-manual: structure.rst: document missing tmp/ dirs
        overview-manual: concepts: add details on package splitting
        ref-manual: faq: add q&a on class appends
        ref-manual: release-process: update releases.svg
        ref-manual: release-process: refresh the current LTS releases
        ref-manual: release-process: update releases.svg with month after "Current"
        ref-manual: release-process: add a reference to the doc's release
        ref-manual: devtool-reference: refresh example outputs
        ref-manual: devtool-reference: document missing commands
        conf.py: rename :cve: role to :cve_nist:
        doc: Makefile: remove inkscape, replace by rsvg-convert
        doc: Makefile: add support for xelatex
        doc: add a download page for epub and pdf
        sphinx-static/switchers.js.in: do not refer to URL_ROOT anymore
        conf.py: add a bitbake_git extlink
        dev-manual: document how to provide confs from layer.conf
        dev-manual: bblock: use warning block instead of attention
        standards.md: add a section on admonitions
        ref-manual: classes: fix bin_package description
        Gather dependencies in poky.yaml.in
        poky.yaml.in: add missing locales dependency
        poky.yaml.in: replace inkscape dependency by librsvg2-bin
        system-requirements: add fedora 39 to supported distros
        system-requirements: update list of supported distros
        system-requirements.rst: add dependencies for pdf builds
        Update the documentation for SRCPV
        poky.conf: add new tested distros
        ref-manual/qa-checks: remove patch-status-core/patch-status-noncore
        contributor-guide/submit-changes.rst: suggest to remove the git signature
        ref-manual/devtool-reference: add warning note on deploy-target and shared objects
        SSTATE_MIRRORS/SOURCE_MIRROR_URL: add instructions for mirror authentication
        ref-manual/packages: move ptest section to the test-manual
        ref-manual: move runtime-testing section to the test-manual
        Update autobuilder URLs to valkyrie
        test-manual/reproducible-builds: fix reproducible links
        test-manual/ptest: link to common framework ptest classes
        dev-manual/building: document the initramfs-framework recipe
        ref-manual/faq: add q&a on systemd as default
        contributor-guide/submit-changes: add policy on AI generated code
        Add favicon for the documentation html
        overview-manual/concepts: remove PR from the build dir list
        ref-manual/variables.rst: WATCHDOG_TIMEOUT: fix recipe name
        ref-manual/variables.rst: document autotools class related variables
        documentation/conf.py: define a manpage url
        ref-manual/variables.rst: add manpage links for toolchain variables
        ref-manual/variables.rst: add missing documentation for BUILD_* variables
        ref-manual/variables.rst: document missing SDK_*_ARCH variables
        ref-manual/variables.rst: document HOST_*_ARCH variables
        ref-manual/variables.rst: HOST_CC_ARCH: fix wrong SDK reference
        ref-manual/variables.rst: improve the PKGV documentation
        poky.yaml: introduce DISTRO_LATEST_TAG
        Fix dead links that use the DISTRO macro
        dev-manual/sbom.rst: fix wrong build outputs
        test-manual/intro: remove Buildbot version used
        ref-manual/release-process: update releases.svg
        overview-manual/concepts.rst: fix sayhello hardcoded bindir
        ref-manual/system-requirements.rst: update supported distributions
        ref-manual/variables.rst: document the FIT_CONF_PREFIX variable
        ref-manual/variables.rst: document SPL_DTB_BINARY
        ref-manual/classes.rst: document the testexport class
        dev-manual/security-subjects.rst: update mailing lists
        test-manual/yocto-project-compatible.rst: fix a typo
        ref-manual/structure: document the auto.conf file
        ref-manual/variables.rst: document UNINATIVE_URL/CHECKSUM
        ref-manual/classes.rst: extend the uninative class documentation
        ref-manual/classes,variables: document the CCACHE_DISABLE variable
        ref-manual/variables.rst: document the REQUIRED_MACHINE_FEATURES variable
        ref-manual/variables.rst: document the REQUIRED_COMBINED_FEATURES variable
        ref-manual/variables.rst: document the REQUIRED_IMAGE_FEATURES variable
        ref-manual/variables.rst: document the USE_NLS variable
        ref-manual/classes.rst: gettext: extend the documentation of the class
        ref-manual/classes.rst: document the relative_symlinks class

  Anuj Mittal (1):
        sqlite3: upgrade 3.45.1 -> 3.45.3

  Archana Polampalli (51):
        less: fix CVE-2024-32487
        ofono: fix CVE-2023-2794
        ffmpeg: fix CVE-2023-49502
        ffmpeg: fix CVE-2024-31578
        ffmpeg: fix CVE-2024-31582
        ffmpeg: fix CVE-2023-50008
        ffmpeg: fix CVE-2024-32230
        qemu: fix CVE-2024-7409
        ffmpeg: fix CVE-2023-49501
        ffmpeg: fix CVE-2024-28661
        ffmpeg: fix CVE-2023-50007
        ffmpeg: fix CVE-2023-49528
        ffmpeg: fix CVE-2024-7055
        ffmpeg: fix CVE-2024-35366
        ffmpeg: fix CVE-2024-35367
        ffmpeg: fix CVE-2024-35368
        rsync: fix CVE-2024-12084
        rsync: fix CVE-2024-12085
        rsync: fix CVE-2024-12086
        rsync: fix CVE-2024-12087
        rsync: fix CVE-2024-12088
        rsync: fix CVE-2024-12747
        ffmpeg: fix CVE-2024-35365
        ffmpeg: fix CVE-2024-36613
        ffmpeg: fix CVE-2024-36616
        ffmpeg: fix CVE-2024-36617
        ffmpeg: fix CVE-2024-36618
        ffmpeg: fix CVE-2024-36619
        ffmpeg: fix CVE-2024-35369
        gstreamer1.0-rtsp-server: fix CVE-2024-44331
        ffmpeg: fix CVE-2025-25473
        ffmpeg: fix CVE-2025-25471
        ffmpeg: fix CVE-2025-22921
        ffmpeg: fix CVE-2025-0518
        ffmpeg: Correct the CVE ID to fix CVE-2025-22919
        openssh: fix CVE-2025-26465
        go: fix CVE-2025-22870
        ghostscript: upgrade 10.04.0 -> 10.05.0
        perlcross: 1.6 -> 1.6.2
        perl: upgrade 5.38.2 -> 5.38.4
        xwayland: fix CVE-2025-49175
        xwayland: fix CVE-2025-49176
        xwayland: fix CVE-2025-49177
        xwayland: fix CVE-2025-49178
        xwayland: fix CVE-2025-49179
        xwayland: fix CVE-2025-49180
        gdk-pixbuf: fix CVE-2025-7345
        go: fix CVE-2025-4674
        ffmpeg: upgrade 6.1.2 -> 6.1.3
        ffmpeg: fix CVE-2025-1594
        go: fix CVE-2025-47906

  Ashish Sharma (11):
        bind: Upgrade 9.18.25 -> 9.18.28
        ruby: Backport fix for CVE-2024-27282
        ruby: Fix CVE-2025-27219
        binutils: Fix CVE-2025-1176
        binutils: patch CVE-2025-1178 & CVE-2024-57360
        binutils: patch CVE-2025-1181
        binutils: patch CVE-2025-1182
        libsoup: patch CVE-2025-46420
        libsoup-2.4: Fix CVE-2025-46420
        libsoup: patch CVE-2025-4476
        screen: patch CVE-2025-46805

  AshishKumar Mishra (2):
        systemd: backport fix for handle USE_NLS from master
        p11-kit: backport fix for handle USE_NLS from master

  Barne Carstensen (1):
        test-manual: update runtime-testing Exporting Tests section

  Bartosz Golaszewski (1):
        linux-firmware: add a package for ath12k firmware

  Benjamin Szőke (2):
        archiver.bbclass: Fix work-shared checking for kernel recipes
        mc: fix source URL

  Bin Lan (1):
        lttng-ust: backport patch to fix cmake-multiple-shared-libraries build error

  Bruce Ashfield (54):
        linux-yocto/6.6: update to v6.6.36
        linux-yocto/6.6: update to v6.6.38
        linux-yocto/6.6: update to v6.6.40
        linux-yocto/6.6: update to v6.6.43
        kernel-devsrc: remove 64 bit vdso cmd files
        linux-yocto/6.6: update to v6.6.44
        linux-yocto/6.6: update to v6.6.45
        linux-yocto/6.6: fix genericarm64 config warning
        linux-yocto/6.6: update to v6.6.47
        linux-yocto/6.6: update to v6.6.49
        linux-yocto/6.6: update to v6.6.50
        linux-yocto/6.6: update to v6.6.52
        linux-yocto/6.6: update to v6.6.54
        linux-yocto/6.6: update to v6.6.56
        linux-yocto/6.6: update to v6.6.58
        linux-yocto/6.6: genericarm64.cfg: enable CONFIG_DMA_CMA
        linux-yocto/6.6: update to v6.6.59
        linux-yocto/6.6: update to v6.6.60
        linux-yocto/6.6: update to v6.6.62
        linux-yocto/6.6: bsp/genericarm64: disable ARM64_SME
        linux-yocto/6.6: update to v6.6.63
        linux-yocto/6.6: update to v6.6.64
        linux-yocto/6.6: update to v6.6.66
        linux-yocto/6.6: update to v6.6.69
        linux-yocto/6.6: update to v6.6.75
        linux-yocto/6.6: update to v6.6.77
        linux-yocto/6.6: update to v6.6.78
        linux-yocto/6.6: update to v6.6.80
        linux-yocto/6.6: update to v6.6.82
        linux-yocto/6.6: update to v6.6.83
        linux-yocto/6.6: update to v6.6.84
        linux-yocto/6.6: update to v6.6.85
        linux-yocto/6.6: fix beaglebone ethernet
        linux-yocto/6.6: update to v6.6.86
        linux-yocto/6.6: update to v6.6.87
        linux-yocto/6.6: update to v6.6.88
        linux-yocto/6.6: update to v6.6.89
        linux-yocto/6.6: update to v6.6.91
        linux-yocto/6.6: update to v6.6.92
        linux-yocto/6.6: update to v6.6.93
        linux-yocto/6.6: update to v6.6.94
        linux-yocto/6.6: update to v6.6.96
        linux-yocto/6.6: update to v6.6.98
        linux-yocto/6.6: update to v6.6.99
        linux-yocto/6.6: update to v6.6.100
        linux-yocto/6.6: update to v6.6.101
        linux-yocto/6.6: update to v6.6.102
        linux-yocto/6.6: update to v6.6.103
        linux-yocto/6.6: update to v6.6.106
        linux-yocto/6.6: update to v6.6.107
        linux-yocto/6.6: update to v6.6.108
        linux-yocto/6.6: update to v6.6.109
        linux-yocto/6.6: update to v6.6.110
        linux-yocto/6.6: update to v6.6.111

  Carlos Alberto Lopez Perez (1):
        icu: Backport patch to fix build issues with long paths (>512 chars)

  Carlos Sánchez de La Lama (1):
        ref-manual: clarify KCONFIG_MODE default behaviour

  Catalin Popescu (1):
        Revert "bluez5: remove configuration files from install task"

  Changqing Li (48):
        apt-native: don't let dpkg overwrite files by default
        apt: runtime error: filename too long (tmpdir length)
        webkitgtk: fix do_configure error on beaglebone-yocto
        webkitgtk: fix do_compile errors on beaglebone-yocto
        vulkan-samples: fix do_compile error when -Og enabled
        multilib.conf: remove appending to PKG_CONFIG_PATH
        gettext: fix a parallel build issue
        pixman: fixing inline failure with -Og
        rt-tests: rt_bmark.py: fix TypeError
        curl: correct the PACKAGECONFIG for native/nativesdk
        libpng: update SRC_URI
        expect-native: fix do_compile failure with gcc-14
        libcap-ng: update SRC_URI
        sysvinit: backport patch for fixing one issue of pidof
        acpica: fix CVE-2024-24856
        libsoup: fix CVE-2024-52530, CVE-2024-52531
        rxvt-unicode.inc: disable the terminfo installation by setting TIC to :
        sanity.bbclass: skip check_userns for non-local uid
        systemd: enable create-log-dirs
        babeltrace: extend to nativesdk
        babeltrace2: extend to nativesdk
        patch.py: set commituser and commitemail for addNote
        initscripts: add function log_success_msg/log_failure_msg/log_warning_msg
        buildtools-tarball: move setting of envvars to respective envfile
        buildtools-tarball: add envvars into BB_ENV_PASSTHROUGH_ADDITIONS
        buildtools-tarball: Make buildtools respects host CA certificates
        libsoup: fix CVE-2025-32908
        libsoup: fix CVE-2025-32907
        libsoup-2.4: fix CVE-2025-32907
        libsoup-2.4: fix do_compile failure
        libsoup-2.4: fix CVE-2025-32053
        libsoup: fix CVE-2025-32053
        libsoup-2.4: fix CVE-2025-32052
        libsoup: fix CVE-2025-32052
        libsoup: fix CVE-2025-32051
        libsoup-2.4: fix CVE-2025-32050
        libsoup: fix CVE-2025-32050
        libsoup-2.4: fix CVE-2025-46421
        libsoup: fix CVE-2025-46421
        libsoup-2.4: fix CVE-2025-4948
        libsoup: fix CVE-2025-4948
        libsoup-2.4: fix CVE-2025-4476
        libsoup-2.4: fix CVE-2025-2784
        libsoup: fix CVE-2025-2784
        icu: fix CVE-2025-5222
        libsoup-2.4: refresh CVE-2025-4969.patch
        libsoup-2.4: fix CVE-2025-4945
        libsoup: fix CVE-2025-4945

  Chen Qi (8):
        libnl: change HOMEPAGE
        qemu: back port patches to fix riscv64 build failure
        toolchain-shar-extract.sh: exit when post-relocate-setup.sh fails
        libgfortran: fix buildpath QA issue
        bitbake: data_smart.py: remove unnecessary ? from __expand_var_regexp__
        bitbake: data_smart.py: simple clean up
        bitbake: data_smart.py: clear expand_cache in _setvar_update_overridevars
        coreutils: fix CVE-2025-5278

  Chris Laplante (6):
        bitbake: persist_data: close connection in SQLTable __exit__
        bitbake: fetch2: use persist_data context managers
        bitbake: ui/knotty: print log paths for failed tasks in summary
        bitbake: ui/knotty: respect NO_COLOR & check for tty; rename print_hyperlink => format_hyperlink
        bitbake: cooker: Make cooker 'skiplist' per-multiconfig/mc
        util-linux: use ${B} instead of ${WORKDIR}/build, to fix building under devtool

  Christian Taedcke (1):
        iptables: fix memory corruption when parsing nft rules

  Christos Gavros (2):
        ref-manual/variables.rst: document the IMAGE_ROOTFS_MAXSIZE variable
        ref-manual/variables.rst: document the INITRAMFS_MAXSIZE variable

  Claus Stovgaard (1):
        lib/oe/package-manager: skip processing installed-pkgs with empty globs

  Clayton Casciato (1):
        uboot-sign: fix concat_dtb arguments

  Colin McAllister (2):
        udev-extraconf: Add collect flag to mount
        busybox: Fix cut with "-s" flag

  Colin Pinnell McAllister (1):
        ffmpeg: fix CVE-2025-1373

  Daniel Semkowicz (2):
        os-release: Fix VERSION_CODENAME in case it is empty
        gstreamer1.0-plugins-bad: fix buffer allocation fail for v4l2codecs

  Daniel Turull (4):
        package: export debugsources in PKGDESTWORK as json
        spdx: add option to include only compiled sources
        xz: ignore CVE-2024-47611
        libxml2: ignore CVE-2025-8732

  David Nyström (3):
        openssh: fix CVE-2025-61985
        openssh: fix CVE-2025-61984
        lz4: fix CVE-2025-62813

  Deepak Rathore (1):
        default-distrovars.inc: Fix CONNECTIVITY_CHECK_URIS redirect issue

  Deepesh Varatharajan (13):
        binutils: stable 2.42 branch updates
        glibc: stable 2.39 branch updates.
        binutils: stable 2.42 branch update
        binutils: Fix CVE-2025-0840
        glibc: stable 2.39 branch updates
        binutils: stable 2.42 branch updates
        binutils: Fix CVE-2025-5245
        binutils: Fix CVE-2025-5244
        gcc: Upgrade to GCC 13.4
        binutils: stable 2.42 branch updates
        binutils: Fix CVE-2025-7545
        glibc: stable 2.39 branch updates
        glibc: stable 2.39 branch updates

  Deepthi Hemraj (5):
        binutils: stable 2.42 branch updates
        glibc: stable 2.39 branch updates
        rust-llvm: Fix CVE-2024-0151
        binutils: stable 2.42 branch update
        glibc: stable 2.39 branch updates

  Denys Dmytriyenko (3):
        weston: upgrade 13.0.0 -> 13.0.1
        gcc: unify cleanup of include-fixed, apply to cross-canadian
        nativesdk-libtool: sanitize the script, remove buildpaths

  Divya Chellam (16):
        libpam: fix CVE-2024-10041
        libxml2: Upgrade 2.12.8 -> 2.12.9
        wget: fix CVE-2024-10524
        vim: Upgrade 9.1.0764 -> 9.1.1043
        vim: Upgrade 9.1.1043 -> 9.1.1115
        ruby: fix CVE-2025-27220
        ruby: fix CVE-2025-27221
        screen: fix CVE-2025-46802
        screen: fix CVE-2025-46804
        libarchive: fix CVE-2025-5914
        libarchive: fix CVE-2025-5915
        libarchive: fix CVE-2025-5916
        libarchive: fix CVE-2025-5917
        libarchive: fix CVE-2025-5918
        wpa-supplicant: fix CVE-2022-37660
        vim: upgrade 9.1.1652 -> 9.1.1683

  Divyanshu Rathore (1):
        ffmpeg: upgrade 6.1.1 -> 6.1.2

  Dixit Parmar (1):
        ref-manual: document KERNEL_SPLIT_MODULES variable

  Dmitry Baryshkov (1):
        xserver-xorg: fix CVE-2023-5574 status

  Emil Kronborg (3):
        insane.bbclass: remove skipping of cross-compiled packages
        insane.bbclass: fix HOST_ variable names
        insane.bbclass: remove leftover variables and comment

  Enrico Jörns (6):
        wic: engine.py: use raw string for escape sequence
        wic: bootimg-efi: fix error handling
        bitbake: bitbake-diffsigs: fix handling when finding only a single sigfile
        ref-manual/variables.rst: update ROOT_HOME documentation
        conf.py: tweak SearchEnglish to be hyphen-friendly
        conf.py: improve SearchEnglish to handle terms with dots

  Erik Lindsten (1):
        overview-manual/yp-intro.rst: fix broken link to article

  Esben Haabendal (3):
        pulseaudio: fix webrtc audio depdency
        files: Amend overlayfs unit descriptions with path information
        files: overlayfs-create-dirs: Improve mount unit dependency

  Etienne Cordonnier (6):
        oeqa/runtime: fix regression in minidebuginfo test
        oeqa/runtime: make minidebuginfo test work with coreutils
        oeqa/runtime: fix race-condition in minidebuginfo test
        python3-setuptools-scm: respect GIT_CEILING_DIRECTORIES
        ref-manual/variables.rst: document SSTATE_SKIP_CREATION
        bitbake: gcp.py: remove slow calls to gsutil stat

  Fabio Berton (2):
        ccache.conf: Add include_file_ctime to sloppiness
        linux-libc-headers: Fix invalid conversion in cn_proc.h

  Florian Kreutzer (1):
        dropbear: backport fix for concurrent channel open/close

  Gassner, Tobias.ext (1):
        rootfs: Ensure run-postinsts is not uninstalled for read-only-rootfs-delayed-postinsts

  Gauthier HADERER (1):
        populate_sdk_ext.bclass: make sure OECORE_NATIVE_SYSROOT is exported.

  Guocai He (2):
        tcf-agent: correct the SRC_URI
        minicom: correct the SRC_URI

  Guénaël Muller (1):
        ref-manual: use standardized method accross both ubuntu and debian for locale install

  Guðni Már Gilbert (15):
        pam: Fix for CVE-2024-22365
        python3-attrs: drop python3-ctypes from RDEPENDS
        bluez5: remove redundant patch for MAX_INPUT
        shared-mime-info: drop itstool-native from DEPENDS
        libpam: drop cracklib from DEPENDS
        systemd: drop intltool-native from DEPENDS
        systemd-boot: drop intltool-native from DEPENDS
        python3-poetry-core: drop python3-six from RDEPENDS
        dnf: drop python3-iniparse from DEPENDS and RDEPENDS
        python3: upgrade 3.12.6 -> 3.12.7
        python3: upgrade 3.12.7 -> 3.12.8
        systemd: upgrade 255.13 -> 255.17
        systemd: upgrade 255.17 -> 255.18
        bluez5: add missing tools to noinst-tools package
        systemd: upgrade 255.18 -> 255.21

  Gyorgy Sarvari (1):
        conf/bitbake.conf: use gnu mirror instead of main server

  Haixiao Yan (2):
        glibc: Add single-threaded fast path to rand()
        buildtools-tarball: fix unbound variable issues under 'set -u'

  Harish Sadineni (7):
        binutils: Add missing perl modules to RDEPENDS for nativesdk variant
        rust-target-config: Fix TARGET_C_INT_WIDTH with correct size
        rust: fix for rust multilib sdk configuration
        rust: remove redundant cargo config file
        oeqa/sdk/context: fix for gtk3 test failure during do_testsdk
        binutils: Fix CVE-2025-1179
        binutils: set CVE_STATUS for CVE-2025-1180

  Hiago De Franco (2):
        weston: backport patch to allow neatvnc < v0.9.0
        bluez5: backport patch to fix address type when loading keys

  Hitendra Prajapati (24):
        ghostscript: upgrade 10.02.1 -> 10.03.1
        ruby: fix CVE-2024-27281
        vte: fix CVE-2024-37535
        curl: fix CVE-2024-8096
        webkitgtk: upgrade 2.44.1 -> 2.44.3
        cups: Backport fix for CVE-2024-47175
        libarchive: fix CVE-2024-48957 & CVE-2024-48958
        libsoup: fix CVE-2024-52532
        ghostscript: upgrade 10.03.1 -> 10.04.0
        libsndfile: fix CVE-2024-50612
        ofono: Fix multiple CVEs
        libcap: fix CVE-2025-1390
        elfutils: Fix multiple CVEs
        go: fix CVE-2025-22871
        libsoup-3.4.4: Fix CVE-2025-4969
        libsoup-2.4: Fix CVE-2025-4969
        libxml2: fix CVE-2025-6021
        libxml2: fix CVE-2025-49794 & CVE-2025-49796
        libpam: fix CVE-2025-6020
        gstreamer1.0-plugins-base: fix CVE-2025-47808
        gstreamer1.0-plugins-base: fix CVE-2025-47806
        gstreamer1.0-plugins-good: fix multiple CVEs
        gstreamer1.0-plugins-base: fix CVE-2025-47807
        grub2: mark CVE-2024-2312 as not applicable

  Hongxu Jia (10):
        ovmf: fix CVE-2024-38796
        ovmf: fix CVE-2024-1298
        u-boot: fix CVE-2024-57254
        u-boot: fix CVE-2024-57255
        u-boot: fix CVE-2024-57256
        u-boot: fix CVE-2024-57257
        u-boot: fix CVE-2024-57258
        u-boot: fix CVE-2024-57259
        rpm: keep leading `/' from sed operation
        u-boot: fix CVE-2024-42040

  Igor Opaniuk (1):
        wic: bootimg-efi: Support + symbol in filenames

  Jaeyoon Jung (2):
        makedevs: Fix issue when rootdir of / is given
        makedevs: Fix matching uid/gid

  Jagadeesh Krishnanjanappa (1):
        tune-cortexa32: set tune feature as armv8a

  Jan Vermaete (1):
        sdk: The main in the C example should return an int

  Jeroen Hofstee (2):
        bluez5: make media control a PACKAGECONFIG option
        bluez5: backport a patch to fix btmgmt -i

  Jiaying Song (9):
        liba52: fix do_fetch error
        enchant2: fix do_fetch error
        libxml-parser-perl: fix do_fetch error
        python3-zipp: fix CVE-2024-5569
        subversion: fix CVE-2024-46901
        boost: fix do_fetch error
        binutils: File name too long causing failure to open temporary head file in dlltool
        python3-requests: upgrade 2.32.3 -> 2.32.4
        ruby-ptest : some ptest fixes

  Jinfeng Wang (3):
        tzdata&tzcode-native: upgrade 2024a -> 2024b
        mtools: upgrade 4.0.48 -> 4.0.49
        systemtap: Fix task_work_cancel build

  Joao Marcos Costa (1):
        ref-manual/variables.rst: expand IMAGE_OVERHEAD_FACTOR glossary entry

  Joe Slater (1):
        oe-debuginfod: add option for data storage

  Joerg Schmidt (1):
        bitbake: bblayers/query: Fix using "removeprefix" string method

  Johannes Schneider (1):
        ppp: Revert lock path to /var/lock

  Jon Mason (4):
        oeqa/runtime/ssh: add retry logic and sleeps to allow for slower systems
        oeqa/runtime/ssh: check for all errors at the end
        oeqa/runtime/ssh: increase the number of attempts
        openssh: add backported header file include

  Jonas Gorski (1):
        rootfs-postcommands.bbclass: make opkg status reproducible

  Jookia (1):
        populate_sdk_ext.bbclass: Fix undefined variable error

  Jose Quaresma (7):
        go: upgrade 1.22.4 -> 1.22.5
        oeqa/runtime/scp: requires openssh-sftp-server
        openssh: drop rejected patch fixed in 8.6p1 release
        openssh: systemd sd-notify patch was rejected upstream
        openssh: systemd notification was implemented upstream
        go: upgrade 1.22.5 -> 1.22.6
        bitbake: bitbake: doc/user-manual: Update the BB_HASHSERVE_UPSTREAM

  Joshua Watt (3):
        bitbake: asyncrpc: Use client timeout for websocket open timeout
        bitbake: Remove custom exception backtrace formatting
        bitbake: Use a "fork" multiprocessing context

  João Marcos Costa (1):
        variables.rst: fix LAYERDEPENDS description

  Julien Stephan (5):
        README: add instruction to run Vale on a subset
        documentation: Makefile: add SPHINXLINTDOCS to specify subset to sphinx-lint
        styles: vocabularies: Yocto: add sstate
        ref-manual: variables: add SIGGEN_LOCKEDSIGS* variables
        dev-manual: add bblock documentation

  Jörg Sommer (5):
        classes/kernel: No symlink in postinst without KERNEL_IMAGETYPE_SYMLINK
        doc/features: remove duplicate word in distribution feature ext2
        doc/features: describe distribution feature pni-name
        ptest-runner: Update 2.4.4 -> 2.4.5
        runqemu: Fix detection of -serial parameter

  Kai Kang (3):
        multilib.bbclass: replace deprecated e.data with d
        cmake-qemu.bbclass: fix if criterion
        glibc: fix fortran header file conflict for arm

  Khem Raj (26):
        linux-yocto: Enable team net driver
        systemd.bbclass: Clarify error message
        grub,grub-efi: Remove -mfpmath=sse on x86
        python3: Treat UID/GID overflow as failure
        gawk: Remove References to /usr/local/bin/gawk
        busybox: CVE-2023-42364 and CVE-2023-42365 fixes
        busybox: Add fix for CVE-2023-42366
        gcc: Fix spurious '/' in GLIBC_DYNAMIC_LINKER on microblaze
        gnupg: Document CVE-2022-3219 and mark wontfix
        openssh: Mark CVE-2023-51767 as wont-fix
        libpcre2: Update base uri PhilipHazel -> PCRE2Project
        python3: Drop empty patch
        qemu: Do not define sched_attr with glibc >= 2.41
        e2fsprogs: Fix build failure with gcc 15
        parted: Fix build with GCC 15
        bash: Stick to C17 std
        ncurses: Pin to C17 standard
        unzip: Fix build with GCC-15
        m4: Stick to C17 standard
        gmp: Fix build with GCC15/C23
        gmp: Fix build with older gcc versions
        gdbm: Use C11 standard
        unifdef: Don't use C23 constexpr keyword
        libtirpc: Fix build with gcc-15/C23
        cpio: Pin to use C17 std
        expect: Fix build with GCC 15

  Kirill Yatsenko (1):
        iptables: fix save/restore symlinks with libnftnl PACKAGECONFIG enabled

  Konrad Weihmann (3):
        runqemu: keep generating tap devices
        testimage: fallback for empty IMAGE_LINK_NAME
        testexport: fallback for empty IMAGE_LINK_NAME

  Kyungjik Min (1):
        pulseaudio: Add audio group explicitly

  Lee Chee Yang (24):
        migration-notes: add release notes for 5.0.1
        migration-guides: add release notes for 4.0.19
        migration-guides: add release notes for 5.0.2
        migration-guide: add release notes for 4.0.20
        migration-guides: add release notes for 5.0.3
        migration-guide: add release notes for 4.0.21
        migration-guides: add release notes for 5.0.4
        migration-guide: add release notes for 4.0.22
        migration-guides: add release notes for 5.0.5
        migration-guides: add release notes for 4.0.23
        migration-guides: add release notes for 5.0.6
        migration-guides: add release notes for 4.0.24
        migration-guides: add release notes for 5.0.7
        migration-guides: add release notes for 4.0.25
        migration-guides: add release notes for 5.0.8
        migration-guides: add release notes for 4.0.26
        migration-guides: add release notes for 5.0.9
        migration-guides: add release notes for 4.0.27
        migration-guide: add release notes for 5.0.10
        migration-guides: add release notes for 4.0.28
        migration-guides: add release notes for 5.0.11
        migration-guides: add release notes for 4.0.29
        migration-guides: add release notes for 5.0.12
        migration-guides: add release notes for 4.0.30

  Libo Chen (1):
        runqemu: fix special characters bug

  Louis Rannou (1):
        image_qa: fix error handling

  Macpaul Lin (1):
        linux-firmware: upgrade 20240312 -> 20240909

  Madhu Marri (1):
        qemu 8.2.7: ignore CVE-2023-1386

  Makarios Christakis (1):
        icu: Adjust ICU_DATA_DIR path on big endian targets

  Marco Cavallini (1):
        dev-manual/start.rst: added missing command in Optimize your VHDX file using DiskPart

  Marek Vasut (3):
        u-boot: kernel-fitimage: Fix dependency loop if UBOOT_SIGN_ENABLE and UBOOT_ENV enabled
        base-files: Drop /bin/sh dependency
        u-boot: kernel-fitimage: Restore FIT_SIGN_INDIVIDUAL="1" behavior

  Mark Hatle (9):
        package.py: Fix static debuginfo split
        package.py: Fix static library processing
        selftest-hardlink: Add additional test cases
        create-spdx-*: Support multilibs via SPDX_MULTILIB_SSTATE_ARCHS
        oeqa sdk cases: Skip SDK test cases when TCLIBC is newlib
        create-sdpx-2.2.bbclass: Switch from exists to isfile checking debugsrc
        populate_sdk_ext: write_local_conf add shutil import
        cve-update-nvd2-native: Handle BB_NO_NETWORK and missing db
        bitbake: bitbake: runqueue: Verify mcdepends are valid

  Markus Volk (3):
        libadwaita: update 1.5.0 -> 1.5.1
        gcc: add a backport patch to fix an issue with tzdata 2024b
        ninja: fix build with python 3.13

  Marta Rybczynska (1):
        vulnerabilities/classes: remove references to cve-check text format

  Martin Jansa (22):
        selftest: add Upstream-Status to .patch files
        libgfortran.inc: fix nativesdk-libgfortran dependencies
        populate_sdk_base: inherit nopackages
        meta-world-pkgdata: Inherit nopackages
        python3-lxml=v5.0.2
        mc: set ac_cv_path_ZIP to avoid buildpaths QA issues
        libpam: re-add missing libgen include
        cairo: fix build with gcc-15 on host
        bash: use -std=gnu17 also for native CFLAGS
        cmake: fix build with gcc-15 on host
        git: fix build with gcc-15 on host
        pkgconfig: fix build with gcc-15
        libgpg-error: fix build with gcc-15
        rust-llvm: fix build with gcc-15
        elfutils: fix build with gcc-15
        binutils: fix build with gcc-15
        dbus-glib: fix build with gcc-15
        bitbake: bitbake: Bump version to 2.8.1
        license.py: avoid deprecated ast.Str
        sanity.conf: Update minimum bitbake version to 2.8.1
        lib/oe/utils: use multiprocessing from bb
        flex: fix build with gcc-15 on host

  Matthias Pritschet (1):
        ref-manual: fix typo and move SYSROOT_DIRS example

  Matthias Schiffer (1):
        curl: only set CA bundle in target build

  Michael Haener (1):
        oeqa/runtime/ping: don't bother trying to ping localhost

  Michael Halstead (4):
        yocto-uninative: Update to 4.6 for glibc 2.40
        yocto-uninative: Update to 4.7 for glibc 2.41
        yocto-uninative: Update to 4.8 for GCC 15.1
        yocto-uninative: Update to 4.9 for glibc 2.42

  Michael Opdenacker (5):
        maintainers.inc: update self e-mail address
        doc: Makefile: publish pdf and epub versions too
        dev-manual: fix styling of references to bmaptool
        dev-manual/bmaptool.rst: correct command for bmaptool-native
        dev-manual/bmaptool.rst: simplify and fix instructions

  Michal Seben (1):
        timedated: wait for jobs before SetNTP response

  Mikko Rapeli (1):
        ovmf-native: remove .pyc files from install

  Mingli Yu (1):
        llvm: Enable libllvm for native build

  Moritz Haase (2):
        meta: Enable '-o pipefail' for the SDK installer
        cmake: Correctly handle cost data of tests with arbitrary chars in name

  NeilBrown (1):
        nfs-utils: don't use signals to shut down nfs server.

  Nguyen Dat Tho (1):
        libatomic-ops: Update GITHUB_BASE_URI

  Nikhil R (1):
        cmake: Add PACKAGECONFIG option for debugger support

  Niko Mauno (15):
        dnf/mesa: Fix missing leading whitespace with ':append'
        libyaml: Fix warning regarding unpatched CVE
        systemd: Mitigate /var/log type mismatch issue
        systemd: Mitigate /var/tmp type mismatch issue
        image_types.bbclass: Use --force also with lz4,lzop
        util-linux: Add PACKAGECONFIG option to mitigate rootfs remount error
        iw: Fix LICENSE
        dejagnu: Fix LICENSE
        unzip: Fix LICENSE
        zip: Fix LICENSE
        tiff: Fix LICENSE
        gcr: Fix LICENSE
        python3-maturin: Fix cross compilation issue for armv7l, mips64, ppc
        cve-check.bbclass: Mitigate symlink related error
        cve-check.bbclass: Fix symlink handling also for text files

  Nitin Wankhade (1):
        examples: genl: fix wrong attribute size

  Oleksandr Hnatiuk (2):
        icu: remove host references in nativesdk to fix reproducibility
        gcc: remove paths to sysroot from configargs.h and checksum-options for gcc-cross-canadian

  Patrick Wicki (1):
        gpgme: move gpgme-tool to own sub-package

  Paul Barker (2):
        meta-ide-support: Mark recipe as MACHINE-specific
        dev-manual, test-manual: Update autobuilder output links

  Paul Gerber (1):
        uboot-sign: fix counters in do_uboot_assemble_fitimage

  Pavel Zhukov (1):
        package_rpm: Check if file exists before open()

  Pedro Ferreira (3):
        buildhistory: Fix intermittent package file list creation
        buildhistory: Restoring files from preserve list
        rust-common.bbclass: soft assignment for RUSTLIB path

  Peter Kjellerstedt (1):
        image.bbclass: Drop support for ImageQAFailed exceptions in image_qa

  Peter Marko (144):
        flac: fix buildpaths warnings
        cargo: remove True option to getVar calls
        ncurses: switch to new mirror
        busybox: Patch CVE-2021-42380
        busybox: Patch CVE-2023-42363
        libstd-rs,rust-cross-canadian: set CVE_PRODUCT to rust
        curl: Patch CVE-2024-6197
        glibc: cleanup old cve status
        qemu: set cve status for CVE-2023-6683
        libmnl: explicitly disable doxygen
        libyaml: ignore CVE-2024-35326
        libyaml: Ignore CVE-2024-35325
        curl: Patch CVE-2024-7264
        python3: Upgrade 3.12.5 -> 3.12.6
        wpa-supplicant: Ignore CVE-2024-5290
        wpa-supplicant: Patch CVE-2024-3596
        wpa-supplicant: Patch security advisory 2024-2
        rust: ignore CVE-2024-43402
        openssl: patch CVE-2024-9143
        cve-check: add support for cvss v4.0
        go: upgrade 1.22.6 -> 1.22.7
        go: upgrade 1.22.7 -> 1.22.8
        dropbear: backport patch for CVE-2023-48795
        curl: patch CVE-2024-9681
        gstreamer1.0: set status for CVE-2024-0444
        expat: upgrade 2.6.3 -> 2.6.4
        builder: set CVE_PRODUCT
        qemu: set CVE-2024-6505 to fixed
        gstreamer1.0-plugins-good: fix several CVEs
        gstreamer1.0-plugins-base: patch CVE-2024-47538
        gstreamer1.0-plugins-base: patch CVE-2024-47607
        gstreamer1.0-plugins-base: patch CVE-2024-47615
        gstreamer1.0-plugins-good: patch CVE-2024-47613
        gstreamer1.0-plugins-good: patch several CVEs
        gstreamer1.0-plugins-base: patch CVE-2024-47541
        gstreamer1.0-plugins-base: patch CVE-2024-47542
        gstreamer1.0-plugins-good: patch CVE-2024-47599
        gstreamer1.0-plugins-base: patch CVE-2024-47600
        gstreamer1.0-plugins-good: patch CVE-2024-47606
        gstreamer1.0-plugins-good: patch CVE-2024-47606
        gstreamer1.0-plugins-good: patch CVE-2024-47774
        gstreamer1.0-plugins-good: patch several CVEs
        gstreamer1.0-plugins-base: patch CVE-2024-47835
        gstreamer1.0: ignore CVEs fixed in plugins recipes
        socat: patch CVE-2024-54661
        ofono: patch CVE-2024-7540, CVE-2024-7541, CVE-2024-7542
        ofono: patch CVE-2023-4232
        ofono: patch CVE-2023-4235
        openssl: patch CVE-2024-13176
        go: upgrade 1.22.8 -> 1.22.9
        go: upgrade 1.22.9 -> 1.22.10
        go: upgrade 1.22.10 -> 1.22.11
        glibc: stable 2.39 branch updates
        python3: upgrade 3.12.8 -> 3.12.9
        go: upgrade 1.22.11 -> 1.22.12
        cmake: apply parallel build settings to ptest tasks
        subversion: ignore CVE-2024-45720
        gnutls: patch CVE-2024-12243
        openssl: upgrade 3.2.3 -> 3.2.4
        libxml2: upgrade 2.12.9 -> 2.12.10
        grub: drop obsolete CVE statuses
        grub: backport strlcpy function
        grup: patch CVE-2024-45781
        grub: patch CVE-2024-45782 and CVE-2024-56737
        grub: patch CVE-2024-45780
        grub: patch CVE-2024-45783
        grub: patch CVE-2025-0624
        grub: patch CVE-2024-45774
        grub: patch CVE-2024-45775
        grub: patch CVE-2025-0622
        grub: patch CVE-2024-45776
        grub: patch CVE-2024-45777
        grub: patch CVE-2025-0690
        grub: patch CVE-2025-1118
        grub: patch CVE-2024-45778 and CVE-2024-45779
        grub: patch CVE-2025-0677, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686 and CVE-2025-0689
        grub: patch CVE-2025-0678 and CVE-2025-1125
        libarchive: patch CVE-2025-1632 and CVE-2025-25724
        xserver-xorg: mark CVEs fixed in 21.1.16 as fixed
        cve-update-nvd2-native: handle missing vulnStatus
        expat: patch CVE-2024-8176
        freetype: follow-up patch for CVE-2025-27363
        ofono: patch CVE-2024-7537
        cve-update-nvd2-native: add workaround for json5 style list
        xz: upgrade 5.4.6 -> 5.4.7
        xz: patch CVE-2025-31115
        libarchive: upgrade 3.7.4 -> 3.7.9
        sqlite3: patch CVE-2025-3277
        sqlite3: patch CVE-2025-29088
        ppp: patch CVE-2024-58250
        libxml2: patch CVE-2025-32414
        libxml2: patch CVE-2025-32415
        glib-2.0: patch CVE-2025-3360
        Revert "cve-update-nvd2-native: Tweak to work better with NFS DL_DIR"
        sqlite3: mark CVE-2025-29087 as patched
        python3: upgrade 3.12.9 -> 3.12.11
        testimage: get real os-release file
        net-tools: patch CVE-2025-46836
        go: set status of CVE-2024-3566
        glibc: stable 2.39 branch updates
        python3: update CVE product
        busybox: apply patch for CVE-2023-39810
        iputils: patch CVE-2025-48964
        orc: set CVE_PRODUCT
        openssl: CVE-2024-41996
        openssl: patch CVE-2025-27587
        gnutls: patch CVE-2025-32989
        gnutls: patch read buffer overrun in the "pre_shared_key" extension
        gnutls: patch reject zero-length version in certificate request
        gnutls: patch CVE-2025-32988
        gnutls: patch CVE-2025-32990
        gnutls: patch CVE-2025-6395
        ncurses: patch CVE-2025-6141
        libxml2: patch CVE-2025-6170
        glibc: fix CVE-2025-8058
        python3: patch CVE-2025-8194
        go: ignore CVE-2025-0913
        dropbear: patch CVE-2025-47203
        glib-2.0: ignore CVE-2025-4056
        qemu: set status of CVE-2024-7730 to fixed
        go-binary-native: ignore CVE-2025-0913
        glib-2.0: patch CVE-2025-7039
        glib-2.0: patch CVE-2025-6052
        dpkg: patch CVE-2025-6297
        libarchive: patch regression of patch for CVE-2025-5918
        vim: upgrade 9.1.1198 -> 9.1.1652
        sudo: remove devtool FIXME comment
        busybox: patch CVE-2025-46394
        gstreamer1.0: ignore CVEs fixed in plugins
        gstreamer1.0: ignore CVE-2025-2759
        ghostscript: patch CVE-2025-59798
        ghostscript: patch CVE-2025-59799
        ghostscript: patch CVE-2025-59800
        expat: follow-up for CVE-2024-8176
        tiff: ignore 5 CVEs
        ffmpeg: ignore 8 CVEs fixed in 6.1.1 and 6.1.3 releases
        openssl: upgrade 3.2.4 -> 3.2.6
        qemu: patch CVE-2024-8354
        binutils: patch CVE-2025-11082
        binutils: patch CVE-2025-11083
        gnupg: mark CVE-2025-30258 as patched
        python3: upgrade 3.12.11 -> 3.12.12
        vulnerabilities: update nvdcve file name
        expat: patch CVE-2025-59375

  Philip Lorenz (3):
        cmake: Fix sporadic issues when determining compiler internals
        cve-check: Add missing call to exit_if_errors
        shared-mime-info: Handle USE_NLS

  Poonam Jadhav (2):
        curl: ignore CVE-2025-0725
        libpng: Add ptest

  Praveen Kumar (7):
        connman :fix CVE-2025-32743
        connman :fix CVE-2025-32366
        glib-2.0: fix CVE-2025-4373
        go: fix CVE-2025-4673
        sudo: upgrade 1.9.15p5 -> 1.9.17p1
        go: fix CVE-2025-47907
        bind: upgrade 9.18.33 -> 9.18.41

  Preeti Sachan (1):
        ltp: backport patch to fix compilation error for x86_64

  Priyal Doshi (2):
        tzdata/tzcode-native: upgrade 2024b -> 2025a
        tzdata/tzcode-native: upgrade 2025a -> 2025b

  Purushottam Choudhary (1):
        virglrenderer: Add patch to fix -int-conversion build issue

  Quentin Schulz (14):
        mmc-utils: fix URL
        weston-init: fix weston not starting when xwayland is enabled
        docs: README: specify how to contribute instead of pointing at another file
        docs: conf.py: silence SyntaxWarning on js_splitter_code
        ref-manual: classes: reword to clarify that native/nativesdk options are exclusive
        ref-manual: classes: nativesdk: move note to appropriate section
        go-helloworld: fix license
        contributor-guide: submit-changes: fix improper bold string
        contributor-guide: submit-changes: clarify example with Yocto bug ID
        contributor-guide: submit-changes: align CC tag description
        contributor-guide: submit-changes: make the Cc tag follow kernel guidelines
        contributor-guide: submit-changes: reword commit message instructions
        contributor-guide: submit-changes: number instruction list in commit your changes
        contributor-guide: submit-changes: make "Crediting contributors" part of "Commit your changes"

  Rajeshkumar Ramasamy (2):
        glib-networking: fix CVE-2025-60018
        glib-networking: fix CVE-2025-60019

  Randy MacLeod (1):
        systemd: stable update 255.4 -> 255.13

  Ranjitsinh Rathod (1):
        rust: Add new varaible RUST_ENABLE_EXTRA_TOOLS

  Rasmus Villemoes (1):
        iptables: remove /etc/ethertypes

  Regis Dargent (1):
        udev-extraconf: fix network.sh script did not configure hotplugged interfaces

  Richard Purdie (60):
        selftest/cases/runtime_test: Exclude centos-9 from virgl tests
        cve-exclusion: Drop the version comparision/warning
        bitbake: codeparser/data: Ensure module function contents changing is accounted for
        bitbake: codeparser: Skip non-local functions for module dependencies
        pseudo: Update to pull in python 3.12+ fix
        layer.conf: Add os-release to SIGGEN_EXCLUDERECIPES_ABISAFE
        oeqa/sdk/case: Ensure DL_DIR is populated with artefacts if used
        create-spdx-3.0/populate_sdk_base: Add SDK_CLASSES inherit mechanism to fix tarball SPDX manifests
        pseudo: Fix to work with glibc 2.40
        pseudo: Update to include open symlink handling bugfix
        nasm: Upgrade 2.16.01 -> 2.16.03
        oeqa/runtime/ssh: In case of failure, show exit code and handle -15 (SIGTERM)
        oeqa/selftest/reproducibile: Explicitly list virtual targets
        expat: 2.6.2 -> 2.6.3
        ruby: Make docs generation deterministic
        libedit: Make docs generation deterministic
        buildhistory: Simplify intercept call sites and drop SSTATEPOSTINSTFUNC usage
        scripts/install-buildtools: Update to 5.0.3
        bitbake.conf: Add truncate to HOSTTOOLS
        license: Fix directory layout issues
        libsdl2: Fix non-deterministic configure option for libsamplerate
        bitbake: tests/fetch: Use our own mirror of sysprof to decouple from gnome gitlab
        bitbake: tests/fetch: Use our own mirror of mobile-broadband-provider to decouple from gnome gitlab
        cve_check: Use a local copy of the database during builds
        pseudo: Fix envp bug and add posix_spawn wrapper
        oeqa/runtime/ssh: Rework ssh timeout
        oeqa/runtime/ssh: Fix incorrect timeout fix
        qemurunner: Clean up serial_lock handling
        bitbake: fetch2/git: Use quote from shlex, not pipes
        bitbake: fetch/wget: Increase timeout to 100s from 30s
        bitbake: runqueue: Fix performance of multiconfigs with large overlap
        bitbake: runqueue: Optimise setscene loop processing
        bitbake: runqueue: Fix scenetask processing performance issue
        do_package/sstate/sstatesig: Change timestamp clamping to hash output only
        selftest/reproducible: Drop rawlogs
        selftest/reproducible: Clean up pathnames
        resulttool: Allow store to filter to specific revisions
        resulttool: Use single space indentation in json output
        oeqa/utils/gitarchive: Return tag name and improve exclude handling
        resulttool: Fix passthrough of --all files in store mode
        resulttool: Add --logfile-archive option to store mode
        resulttool: Handle ltp rawlogs as well as ptest
        resulttool: Clean up repoducible build logs
        resulttool: Trim the precision of duration information
        resulttool: Improve repo layout for oeselftest results
        cve-update-nvd2-native: Tweak to work better with NFS DL_DIR
        bitbake: tests/fetch: Fix git shallow test failure with git >= 2.48
        bitbake: utils: Print information about lock issue before exiting
        bitbake: utils: Tweak lock_timeout logic
        bitbake: utils: Add signal blocking for lock_timeout
        bitbake: event/utils: Avoid deadlock from lock_timeout() and recursive events
        bitbake: toaster/tests/buildtest: Switch to new CDN
        bitbake: fetch2: Avoid deprecation warning
        sstatetests: Switch to new CDN
        local.conf.sample: Switch to new CDN
        bitbake: ast: Change deferred inherits to happen per recipe
        brief-yoctoprojectqs/ref-manual: Switch to new CDN
        bitbake: test/fetch: Switch u-boot based test to use our own mirror
        mtools: upgrade 4.0.46 -> 4.0.47
        bitbake: utils: Optimise signal/sigmask performance

  Robert Kovacsics (1):
        sdk: Fix path length limit to match reserved size

  Robert P. J. Day (7):
        Clean up explanation of minimum required version numbers
        overview-manual: small number of pedantic cleanups
        bsp guide: update kernel version example to 6.12
        bsp-guide: update lonely "4.12" kernel reference to "6.12"
        bsp-guide: update all of section 1.8.2 to reflect current beaglebone conf file
        variables.rst: remove references to obsolete tar packaging
        overview-manual/yp-intro.rst: update on-target packaging info

  Robert Yang (7):
        bitbake: data_smart: Improve performance for VariableHistory
        release-notes-5.0.rst: NO_OUTPUT -> NO_COLOR
        bitbake: gitsm: Add call_process_submodules() to remove duplicated code
        bitbake: gitsm: Remove downloads/tmpdir when failed
        cml1.bbclass: do_diffconfig: Don't override .config with .config.orig
        libgcrypt: Fix building error with '-O2' in sysroot path
        groff: Fix race issues for parallel build

  Rogerio Guerra Borin (1):
        u-boot: ensure keys are generated before assembling U-Boot FIT image

  Rohini Sangam (1):
        vim: Upgrade 9.1.0698 -> 9.1.0764

  Roland Kovacs (3):
        gnupg: update 2.4.5 -> 2.4.8
        libxml2: fix CVE-2025-49795
        sqlite3: fix CVE-2025-6965

  Ross Burton (31):
        cpio: mark CVE-2023-7216 as disputed
        fribidi: upgrade 1.0.13 -> 1.0.14
        gstreamer1.0: skip another known flaky test
        libportal: fix rare build race
        meson: don't use deprecated pkgconfig variable
        curl: skip FTP tests in run-ptest
        gawk: update patch status
        python3-pycryptodome(x): use python_setuptools_build_meta build class
        gstreamer1.0: disable flaky baseparser tests
        librsvg: don't try to run target code at build time
        icu: update patch Upstream-Status
        strace: download release tarballs from GitHub
        tcl: skip io-13.6 test case
        groff: fix rare build race in hdtbl
        sanity: check for working user namespaces
        python3: add dependency on -compression to -core
        classes/nativesdk: also override TUNE_PKGARCH
        classes/qemu: use tune to select QEMU_EXTRAOPTIONS, not package architecture
        oeqa/selftest/rust: skip on all MIPS platforms
        Remove all mention of core-image-lsb
        ref-manual: don't refer to poky-lsb
        ref-manual: remove OE_IMPORTS
        puzzles: ignore three new CVEs for a different puzzles
        xserver-xf86-config: add a configuration fragment to disable screen blanking
        xserver-xf86-config: remove obsolete configuration files
        grub2: fix CVE-2024-56738
        libxslt: apply patch for CVE-2025-7424
        expect: update code for Tcl channel implementation
        expect: don't run aclocal in do_configure
        expect: cleanup do_install
        pulseaudio: ignore CVE-2024-11586

  Ryan Eatmon (2):
        u-boot.inc: Refactor do_* steps into functions that can be overridden
        uboot: Allow for customizing installed/deployed file names

  Sana Kazi (1):
        gcc-cross-canadian.inc: Fix buildpaths error for pthread.h

  Sandeep Gundlupet Raju (1):
        tune-cortexr52: Remove aarch64 for ARM Cortex-R52

  Saravanan (2):
        python3-xmltodict: fix CVE-2025-9375
        cmake: fix CVE-2025-9301

  Savvas Etairidis (1):
        systemd: Rename systemd_v255.21 to systemd_255.21

  Sergei Zhmylev (1):
        lsb-release: fix Distro Codename shell escaping

  Shubham Kulkarni (1):
        libpam: Update fix for CVE-2024-10041

  Shunsuke Tokumoto (1):
        python3-setuptools: Add "python:setuptools" to CVE_PRODUCT

  Siddharth Doshi (5):
        Tiff: Security fix for CVE-2024-7006
        vim: Upgrade 9.1.0114 -> 9.1.0682
        wpa-supplicant: Upgrade 2.10 -> 2.11
        vim: Upgrade 9.1.0682 -> 9.1.0698
        openssl: Upgrade 3.2.2 -> 3.2.3

  Simon A. Eugster (1):
        documentation: Fix typo in standards.md

  Simone Weiß (3):
        tzdata: Add tzdata.zi to tzdata-core package
        sanity: Check if tar is gnutar
        curl: Ignore CVE-2024-32928

  Soumya Sambu (12):
        python3-idna: upgrade 3.6 -> 3.7
        python3-certifi: Fix CVE-2024-39689
        python3-setuptools: Fix CVE-2024-6345
        python3: Fix CVE-2024-7592
        python3: Fix CVE-2024-8088
        python3-requests: upgrade 2.32.1 -> 2.32.2
        python3-requests: upgrade 2.32.0 -> 2.32.3
        python3-jinja2: upgrade 3.1.4 -> 3.1.6
        git: Upgrade 2.44.1 -> 2.44.3
        elfutils: Fix CVE-2025-1371
        elfutils: Fix CVE-2025-1376
        elfutils: Fix CVE-2025-1377

  Stanislav Vovk (1):
        libpam: fix CVE-2024-10963

  Stefan Mueller-Klieser (1):
        kernel-arch: add macro-prefix-map in KERNEL_CC

  Steve Sakoman (35):
        Revert "apt: runtime error: filename too long (tmpdir length)"
        poky.conf: bump version for 5.0.3
        build-appliance-image: Update to scarthgap head revision
        Revert "wpa-supplicant: Upgrade 2.10 -> 2.11"
        poky.conf: bump version for 5.0.4
        build-appliance-image: Update to scarthgap head revision
        build-appliance-image: Update to scarthgap head revision
        release-notes-4.0: update BB_HASHSERVE_UPSTREAM for new infrastructure
        poky.conf: bump version for 5.0.5
        build-appliance-image: Update to scarthgap head revision
        webkitgtk: fix erroneous use of unsuported DEBUG_LEVELFLAG variable
        llvm: reduce size of -dbg package
        poky.conf: bump version for 5.0.6
        build-appliance-image: Update to scarthgap head revision
        poky.conf: bump version for 5.0.7
        build-appliance-image: Update to scarthgap head revision
        Revert "rust: Add new varaible RUST_ENABLE_EXTRA_TOOLS"
        build-appliance-image: Update to scarthgap head revision
        poky.conf: add ubuntu2404 to SANITY_TESTED_DISTROS
        poky.conf: bump version for 5.0.8
        build-appliance-image: Update to scarthgap head revision
        Revert "gcc-cross-canadian.inc: Fix buildpaths error for pthread.h"
        poky.conf: bump version for 5.0.9
        build-appliance-image: Update to scarthgap head revision
        poky.conf: bump version for 5.0.10
        build-appliance-image: Update to scarthgap head revision
        poky.conf: bump version for 5.0.11
        build-appliance-image: Update to scarthgap head revision
        Revert "sudo: Fix CVE-2025-32462"
        poky.conf: bump version for 5.0.12
        build-appliance-image: Update to scarthgap head revision
        selftest/cases/meta_ide.py: use use gnu mirror instead of main server
        oeqa/sdk/cases/buildcpio.py: use gnu mirror instead of main server
        poky.conf: bump version for 5.0.13
        build-appliance-image: Update to scarthgap head revision

  Sunil Dora (2):
        gcc: Fix c++: tweak for Wrange-loop-construct
        binutils: Fix CVE-2025-1153

  Talel BELHAJ SALEM (1):
        dev-manual/building.rst: add note about externalsrc variables absolute paths

  Talel BELHAJSALEM (1):
        contributor-guide: Remove duplicated words

  Teresa Remmet (1):
        recipes-bsp: usbutils: Fix usb-devices command using busybox

  Trevor Gamblin (7):
        python3: skip test_concurrent_futures/test_deadlock
        python3: skip test_multiprocessing/test_active_children test
        maintainers.inc: add self for unassigned python recipes
        python3: upgrade 3.12.4 -> 3.12.5
        python3: skip readline limited history tests
        python3-urllib3: upgrade 2.2.1 -> 2.2.2
        reproducible-builds.rst: show how to build a single package

  Trevor Woerner (5):
        contributor-guide/submit-changes: encourage patch version changelogs
        ref-manual/variables.rst: document WIC_CREATE_EXTRA_ARGS
        sphinx-lint: trailing whitespace
        sphinx-lint: missing space after literal
        sphinx-lint: unbalanced inline literal markup

  Ulrich Ölmann (1):
        initramfs-framework: fix typos

  Victor Giraud (1):
        busybox: fix CVE-2022-48174

  Victor Kamensky (1):
        systemtap: fix systemtap-native build error on Fedora 40

  Vijay Anusuri (44):
        openssh: fix CVE-2024-39894
        apr: upgrade 1.7.4 -> 1.7.5
        libpcap: Security fix for CVE-2023-7256 & CVE-2024-8006
        xserver-xorg: upgrade 21.1.13 -> 21.1.14
        glib-2.0: Backport fix for CVE-2024-52533
        bind: Upgrade 9.18.28 -> 9.18.33
        openssh: Fix CVE-2025-26466
        xwayland: Fix CVE-2024-9632
        xwayland: Fix CVE-2025-26594
        xwayland: Fix CVE-2025-26595
        xwayland: Fix CVE-2025-26596
        xwayland: Fix CVE-2025-26597
        xwayland: Fix CVE-2025-26598
        xwayland: Fix CVE-2025-26599
        xwayland: Fix CVE-2025-26600
        xwayland: Fix CVE-2025-26601
        libtasn1: upgrade 4.19.0 -> 4.20.0
        xserver-xorg: upgrade 21.1.15 -> 21.1.16
        libxslt: upgrade 1.1.39 -> 1.1.43
        vim: Upgrade 9.1.1115 -> 9.1.1198
        libsoup: Fix CVE-2025-32910
        libsoup: Fix CVE-2025-32909
        libsoup: Fix CVE-2025-32911 & CVE-2025-32913
        libsoup: Fix CVE-2025-32912
        libsoup: Fix CVE-2025-32906
        libsoup-2.4: Fix CVE-2024-52530
        libsoup-2.4: Fix CVE-2024-52531
        libsoup-2.4: Fix CVE-2024-52532
        libsoup-2.4: Fix CVE-2025-32906
        libsoup-2.4: Fix CVE-2025-32909
        libsoup: Fix CVE-2025-32914
        openssh: Fix for CVE-2025-32728
        libsoup-2.4: Fix CVE-2025-32910
        libsoup-2.4: Fix CVE-2025-32911 & CVE-2025-32913
        libsoup-2.4: Fix CVE-2025-32912
        libsoup-2.4: Fix CVE-2025-32914
        python3-setuptools: Fix CVE-2025-47273
        kea: upgrade 2.4.1 -> 2.4.2
        sudo: Fix CVE-2025-32462
        git: Upgrade 2.44.3 -> 2.44.4
        xserver-xorg: upgrade 21.1.6 -> 21.1.18
        cups: upgrade 2.4.10 -> 2.4.11
        cups: Fix for CVE-2025-58060 and CVE-2025-58364
        gstreamer1.0-plugins-bad: Fix CVE-2025-3887

  Virendra Thakur (3):
        rust-cross-canadian: Set CVE_STATUS ignore for CVE-2024-43402
        util-linux: Add fix to isolate test fstab entries using CUSTOM_FSTAB
        curl: set conditional CVE_STATUS for CVE-2025-5025

  Vishwas Udupa (1):
        openssl: rewrite ptest installation

  Vrushti Dabhi (1):
        curl: update CVE_STATUS for CVE-2025-5025

  Vyacheslav Yurkov (1):
        systemd: Password agents shouldn't be optional

  Wadim Egorov (1):
        watchdog: Set watchdog_module in default config

  Wang Mingyu (18):
        ed: upgrade 1.20.1 -> 1.20.2
        llvm: upgrade 18.1.5 -> 18.1.6
        mesa: upgrade 24.0.5 -> 24.0.7
        wireless-regdb: upgrade 2024.01.23 -> 2024.05.08
        orc: upgrade 0.4.38 -> 0.4.39
        cups: upgrade 2.4.9 -> 2.4.10
        libadwaita: upgrade 1.5.1 -> 1.5.2
        libdnf: upgrade 0.73.1 -> 0.73.2
        wireless-regdb: upgrade 2024.05.08 -> 2024.07.04
        cryptodev: upgrade 1.13 -> 1.14
        orc: upgrade 0.4.39 -> 0.4.40
        wireless-regdb: upgrade 2024.07.04 -> 2024.10.07
        gnupg: upgrade 2.4.4 -> 2.4.5
        xserver-xorg: upgrade 21.1.14 -> 21.1.15
        ghostscript: upgrade 10.05.0 -> 10.05.1
        mtools: upgrade 4.0.44 -> 4.0.45
        mtools: upgrade 4.0.45 -> 4.0.46
        mtools: upgrade 4.0.47 -> 4.0.48

  Weisser, Pascal (1):
        ref-manual: Add missing variable IMAGE_ROOTFS_MAXSIZE

  Weisser, Pascal.ext (1):
        qemuboot: Trigger write_qemuboot_conf task on changes of kernel image realpath

  Xiangyu Chen (2):
        qemu: Upgrade 8.2.1 -> 8.2.2
        lttng-modules: fix sched_stat_runtime changed in Linux 6.6.66

  Yash Shinde (4):
        binutils: Fix CVE-2024-53589
        binutils: Fix CVE-2025-7546
        binutils: fix CVE-2025-11081
        binutils: fix CVE-2025-8225

  Yi Zhao (5):
        libcap-ng: upgrade 0.8.4 -> 0.8.5
        libcap-ng-python: upgrade 0.8.4 -> 0.8.5
        rpm: fix expansion of %_libdir in macros
        iputils: Security fix for CVE-2025-47268
        kea: set correct permissions for /var/run/kea

  Yogita Urade (10):
        qemu: upgrade 8.2.2 -> 8.2.3
        qemu: fix CVE-2024-4467
        ruby: upgrade 3.2.2 -> 3.3.5
        qemu: upgrade 8.2.3 -> 8.2.7
        curl: fix CVE-2024-11053
        curl: fix CVE-2025-0167
        python3-urllib3: fix CVE-2025-50181
        curl: fix CVE-2025-9086
        tiff: fix CVE-2025-9900
        tiff: ignore CVE-2025-8961

  Zhang Peng (3):
        avahi: fix CVE-2024-52616
        mpg123: upgrade 1.32.6 -> 1.32.10
        avahi: fix CVE-2024-52615

  aszh07 (3):
        xz: Update LICENSE variable for xz packages
        ffmpeg: Add "libswresample libavcodec" to CVE_PRODUCT
        libarchive: Fix CVE-2024-20696

  rajmohan r (1):
        glibc-y2038-tests: remove glibc-y2038-tests_2.39.bb recipe

meta-openembedded: 78a14731cf..15e18246dd:
  Adrian Freihofer (2):
        networkmanager: remove modemmanager rdepends
        thrift: fix build with gcc 15

  Alexandre Truong (4):
        source-han-sans-*-fonts: Switch away from SVN fetcher in SRC_URI
        lcov: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        hunspell-dictionaries: switch branch from master to main
        evince: Update status for CVE-2011-0433 and CVE-2011-5244

  Alexandre Videgrain (1):
        openbox: fix crash on alt+tab with fullscreen app

  AmateurECE (1):
        pipewire: Add glib-2.0-native dep for bluez5

  Andrej Valek (1):
        externalsrc: fix support in various components

  Anil Dongare (1):
        libssh 0.10.6: Fix CVE-2025-8114

  Ankur Tyagi (25):
        tinyproxy: patch CVE-2023-49606
        frr: patch CVE-2024-44070
        libavif: ignore CVE-2025-48175
        libconfuse: patch CVE-2022-40320
        hdf5: patch CVE-2025-2913
        hdf5: patch CVE-2025-2914
        hdf5: patch CVE-2025-2915
        hdf5: patch CVE-2025-2923, CVE-2025-6816, CVE-2025-6856
        hdf5: patch CVE-2025-2924
        hdf5: patch CVE-2025-2925
        hdf5: patch CVE-2025-6269, CVE-2025-6270, CVE-2025-6516
        libppd: patch CVE-2024-47175
        libcupsfilters: patch CVE-2024-47076
        libraw: patch CVE-2025-43961 CVE-2025-43962
        libraw: patch CVE-2025-43963
        libraw: patch CVE-2025-43964
        zlog: fix CVE-2024-22857
        memcached: patch CVE-2023-46852
        memcached: patch CVE-2023-46853
        ndpi: ignore CVE-2025-25066
        libiec61850: patch CVE-2024-26529
        libiec61850: patch CVE-2024-45970
        libiec61850: patch CVE-2024-45971
        mbedtls: upgrade 3.6.4 -> 3.6.5
        hostapd: patch CVE-2025-24912

  Archana Polampalli (4):
        modejs: upgrade 20.18.0 -> 20.18.2
        tftpy: fix CVE-2023-46566
        tcpreplay: fix CVE-2024-22654
        apache2: upgrade 2.4.64 - 2.4.65

  Ariel D'Alessandro (1):
        pipewire: Install missing ALSA config files

  Armin Kuster (1):
        Revert "mariadb: fix runtime failure on riscv"

  Ashish Sharma (2):
        nginx: Backport fix for CVE-2024-7347
        postgresql: Backport fix for CVE-2024-7348

  AshishKumar Mishra (1):
        meta-oe: image: optionally remove RAW image after sparse image creation

  Awais Belal (2):
        mongodb: fix build with python 3.12
        mongodb: update to 4.4.29

  BINDU (1):
        flatbuffers: adapt for cross-compilation environments

  Barry Grussling (1):
        postgresql: Break perl RDEPENDS

  Bastian Krause (2):
        libsocketcan: use https instead of git protocol
        canutils: use https instead of git protocol

  Benjamin Szőke (1):
        tree: fix broken links

  Changqing Li (11):
        pavucontrol: update SRC_URI
        libatasmart: Update SRC_URI
        mariadb: fix runtime failure on riscv
        dlt-daemon: make DLT_WatchdogSec configurable
        abseil-cpp: upgrade 20240116.2 -> 20240116.3
        nginx: fix CVE-2025-23419
        libblockdev: fix CVE-2025-6019
        udisks2: Hardening measure of CVE-2025-6019
        phpmyadmin: upgrade 5.2.1 -> 5.2.2
        luajit: fix several CVEs
        mariadb: correct STACK_DIRECTION setting

  Chen Qi (6):
        libdbd-mysql-perl: avoid invoking assert_lib at do_configure stage
        python3-protobuf: remove useless and problematic .pth file
        graphviz: remove obsolete and problematic patch
        protobuf: fix CVE-2024-7254
        protobuf: upgrade from 4.25.3 to 4.25.8
        python3-protobuf: upgrade from 4.25.3 to 4.25.8

  Chris Laplante (1):
        poco: fix branch: master => poco-1.12.5

  Christos Gavros (1):
        corosync: reproducibility issue

  Claus Stovgaard (2):
        lcov: sort RDEPENDS alphabetical
        lcov: Add missing RDEPENDS

  Clayton Casciato (1):
        chrony: use inherit_defer for conditional inherit of useradd

  Deepak Rathore (1):
        protobuf 4.25.8: Mark CVE-2024-7254 as patched

  Divya Chellam (7):
        nginx: upgrade 1.25.3 -> 1.25.4
        redis: upgrade 7.2.6 -> 7.2.7
        krb5: fix CVE-2025-24528
        openvpn: upgrade 2.6.12 -> 2.6.14
        libssh: fix CVE-2025-4878
        libssh: fix CVE-2025-5987
        jq: fix CVE-2025-9403

  Dmitry Baryshkov (1):
        android-tools: Create flag file /etc/usb-debugging-enabled

  Esben Haabendal (1):
        netplan: add missing runtime dependencies

  Etienne Cordonnier (3):
        uutils-coreutils: upgrade 0.0.25 -> 0.0.26
        uutils-coreutils: upgrade 0.0.26 -> 0.0.27
        uutils-coreutils: fix compilation with selinux

  Fabrice Aeschbacher (1):
        mosquitto: upgrade 2.0.18 -> 2.0.19

  Fathi Boudra (2):
        python3-django: upgrade 4.2.11 -> 4.2.16
        python3-django: upgrade 5.0.4 -> 5.0.9

  Frank de Brabander (3):
        python3-pydantic-core: fix incompatible version
        python3-pydantic-core: fix TMPDIR path reference
        python3-pydantic-core: add missing RDEPENDS for ptest

  Grygorii Tertychnyi (1):
        libusbgx: fix gadget-stop install

  Guocai He (6):
        python3-pylint: correct the SRC_URI
        libconfig: correct the SRC_URI
        logcheck: correct the SRC_URI
        thrift: correct the SRC_URI
        softhsm: correct the SRC_URI
        mariadb: File conflicts for multilib

  Guðni Már Gilbert (1):
        mbedtls: upgrade 3.6.3.1 -> 3.6.4

  Gyorgy Sarvari (35):
        poppler: fix typos in CVE-2025-52886-0001.patch
        mod-dnssd: update SRC_URI
        mosh: set working SRC_URI
        psqlodbc: set valid SRC_URI
        collectd: set working SRC_URI
        apache2: ignore irrelevant CVEs
        civetweb: patch CVE-2025-55763
        dovecot: patch CVE-2022-30550
        pm-qa: update git fetch protocol
        tokyocabinet: switch to working SRC_URI
        tokyocabinet: fix license
        iperf2: ignore irrelevant CVEs
        jasper: patch CVE-2025-8835
        jasper: patch CVE-2025-8836
        jasper: patch CVE-2025-8837
        etcd: patch CVE-2023-32082
        freerdp3: patch CVE-2024-32039 and CVE-2024-32041
        freerdp3: patch CVE-2024-32040
        freerdp3: patch CVE-2024-32458
        freerdp3: patch CVE-2024-32459
        freerdp3: patch CVE-2024-32460
        freerdp3: patch CVE-2024-32658
        freerdp3: patch CVE-2025-32659
        freerdp3: patch CVE-2024-32660
        freerdp3: patch CVE-2024-32661
        freerdp3: patch CVE-2024-32662
        exiv2: patch CVE-2025-26623
        exiv2: patch CVE-2025-54080
        exiv2: patch CVE-2025-55304
        redis: upgrade 6.2.18 -> 6.2.20
        emacs: patch CVE-2024-30202
        emacs: patch CVE-2024-30203
        emacs: patch CVE-2024-30204
        emacs: patch CVE-2024-30205
        emacs: patch CVE-2024-39331

  Haixiao Yan (4):
        openvpn: fix CVE-2024-28882
        openvpn: upgrade 2.6.10 -> 2.6.12
        lmsensors: Clean stale files for sensord to avoid incorrect GCC header dependencies
        python3-posix-ipc: fix runtime error

  Harish Sadineni (1):
        bpftool: Add support for riscv64

  Hieu Van Nguyen (1):
        gphoto2: Fix contains reference to TMPDIR [buildpaths] warning

  Hitendra Prajapati (8):
        tgt: fix CVE-2024-45751
        libssh: fix CVE-2025-5318
        redis: fix CVE-2025-32023
        libssh: fix CVE-2025-5351 & CVE-2025-5372
        open-vm-tools: fix CVE-2025-22247
        libssh: fix CVE-2025-4877
        openjpeg: fix for CVE-2025-54874
        libjxl: fix CVE-2024-11403 & CVE-2024-11498

  Hongxu Jia (1):
        nodejs: support cross compile without qemu user conditionally

  J. S (2):
        nodejs: upgrade 20.16.0 -> 20.17.0
        nodejs: upgrade 20.17.0 -> 20.18.0

  J. S. (3):
        znc: Fix buildpaths QA errors
        nodejs: cleanup
        xfce4 update HOMEPAGEs

  Jan Vermaete (1):
        python3-werkzeug: added python3-difflib as RDEPENDS

  Jason Schonberg (1):
        nodejs: upgrade 20.13.0 -> 20.16.0

  Jef Driesen (2):
        nginx: fix the tarball and license checksums
        lcov: Add missing RDEPENDS for nativesdk

  Jeroen Hofstee (5):
        nodejs: backport a patch to prevent brotli crashing nodejs
        can-utils: fix printing / reading timestamps
        can-utils: handle CAN_ERR_CNT correctly
        php: ignore CVE-2024-3566
        nodejs: ignore CVE-2024-3566

  Jeroen Knoops (1):
        nng: Rename default branch of github.com:nanomsg/nng.git

  Jiaying Song (15):
        rrdtool: Fix do_populate_sysroot QA issues
        nftables: change ptest output format
        debootstrap: fix do_fetch error
        wireguard-tools: fix do_fetch error
        vlock: fix do_fetch error
        openipmi: upgrade 2.0.34->2.0.36
        tcpreplay: fix CVE-2023-43279
        xfce-dusk-gtk3: fix do_fetch error
        eject: fix do_fetch error
        libdev-checklib-perl: fix do_fetch error
        xmlsec1: Switch SRC_URI to use github release
        chrony: fix do_fetch error
        v4l-utils: Fix QA and build errors related to _TIME_BITS on 32-bit
        webkitgtk3: update 2.44.1 -> 2.44.3
        webkitgtk3: fix do_configure error on beaglebone-yocto

  Jinfeng Wang (2):
        netplan: Fix CVE-2022-4968
        postfix: fix rootfs file difference

  Justin Bronder (1):
        python3-xmodem: replace hardcoded /usr with ${prefix}

  Khem Raj (32):
        python3-pydantic-core: Fix build with python 3.12.4
        log4cpp: Fix buildpaths QA error
        python3-pydantic: Upgrade to 2.7.3
        mariadb: Upgrade to 10.11.9 release
        ndisc: Remove buildpaths from binaries
        ndisc6: Fix reproducible build
        ghex,gnome-chess,gnome-photos: Add missing dep on itstool-native
        nodejs: Upgrade to 20.13.0 release
        nodejs: Fix build with libc++ 19
        wolfssl: Add packageconfig for reproducible build
        blueman: Fix buildpathe issue with cython generated code
        botan: Make it reproducible
        keepalived: Make build reproducible
        ldns: Fix buildpaths QA issues
        python3-kivy: Remove buildpaths from comments in generated C sources
        python3-pyproj: Fix buildpaths QA Error
        python3-pyproj: Remove absolute paths from cython generated .c files
        python3-pycocotools: Remove absolute paths from comments
        lprng: Specify target paths for needed utilities
        fwknop: Specify target locations of gpg and wget
        e2tools: Fix buildpaths QA warning in config.status in ptest
        sharutils: Let POSIX_SHELL be overridable from environment
        python3-posix-ipc: switch to PEP-517 build backend
        gtkwave: Add libtirpc to depends
        ssmping: Use debian mirror for SRC_URI
        enca: Fix cross builds
        ckermit: Define return type for main
        ckermit: Fix build with GCC-15
        procmail: Fix build with GCC-14
        uim: Stick to C17
        freerdp: Upgrade 2.11.2 -> 2.11.7
        influxdb: Do not remove non-existing files

  Leon Anavi (2):
        sip: Upgrade 6.8.3 -> 6.8.6
        sip: Fix homepage and license

  Leonard Anderweit (1):
        lmsensors: Fix build without sensord

  Libo Chen (3):
        thin-provisioning-tools: install missed thin_shrink and era_repair
        grpc: Fix CVE-2024-7246
        libgpiod: fix gpiod-cxx-test failed test case

  Marc Ferland (2):
        polkit: update SRC_URI
        libvncserver: fix generated LibVNCServerTargets.cmake

  Markus Volk (4):
        exiv2: update 0.28.0 -> 0.28.2
        gnome-remote-desktop: update 46.1 -> 46.2
        geary: add itstool-native dependency
        eog: add itstool-native dependency

  Martin Jansa (13):
        bolt: package systemd_system_unitdir correctly
        giflib: fix build with gold and avoid imagemagick-native dependency
        Revert "gcab: ignore buildpaths error from sources"
        gpm: fix buildpaths QA issue
        xerces-c: fix buildpaths QA issue
        xmlrpc-c: update SRCREV
        lapack: add PACKAGECONFIG for cblas
        lapack: fix buildpaths in ptest also when CBLAS is enabled
        gcab: fix buildpaths QA issue
        python3-posix-ipc: improve build_support
        python3-h5py: backport fixes for incompatible-pointer-types issues
        abseil-cpp: fix build with gcc-15 on host
        nodejs: fix build with gcc-15 on host

  Martin Schwan (1):
        linuxptp: Add systemd instance specifier for ptp4l dependency

  Michael Olbrich (1):
        nftables: avoid python dependencies when building without python

  Michael Opdenacker (1):
        kernel-hardening-checker: backport recipe

  Mikko Rapeli (3):
        fwupd: skip buildpaths errors
        gcab: ignore buildpaths error from sources
        libjcat: skip buildpaths check

  Mingli Yu (2):
        asio: Add ptest support
        ptest-packagelists-meta-oe.inc: Add asio

  Neel Gandhi (1):
        v4l-utils: Install media ctrl header and library files

  Nikhil R (2):
        nftables: Conditionally add ${PN}-python as RDEPENDS for ptest
        rocksdb: Add an option to set static library

  Niko Mauno (16):
        python3-xlsxwriter: Fix LICENSE
        python3-cbor2: Fix LICENSE and LIC_FILES_CHKSUM
        python3-crc32c: Amend LICENSE declaration
        python3-email-validator: Fix LICENSE
        python3-lru-dict: Fix LICENSE and change SUMMARY to DESCRIPTION
        python3-mock: Fix LICENSE
        python3-parse-type: Fix LICENSE
        python3-pillow: Fix LICENSE and change SUMMARY to DESCRIPTION
        python3-platformdirs: Fix LICENSE
        python3-colorama: Fix LICENSE
        python3-fann2: Fix LICENSE
        python3-nmap: Fix LICENSE and LIC_FILES_CHKSUM
        python3-pycurl: Fix LICENSE
        python3-googleapis-common-protos: Fix LIC_FILES_CHKSUM
        python3-haversine: Fix LIC_FILES_CHKSUM
        python3-libevdev: Fix LIC_FILES_CHKSUM

  Ninette Adhikari (6):
        imagemagick: Update status for CVE
        imagemagick: Update status for CVE
        imagemagick: Update status for CVE
        xsp: CVE status update for CVE-2006-2658
        influxdb: Update CVE status for CVE-2019-10329
        monkey: Update status for CVE-2013-2183

  Peter Kjellerstedt (6):
        hostapd: Support running "devtool modify hostapd"
        hostapd: Only include the relevant parts from README in LIC_FILES_CHKSUM
        libjs-jquery-icheck: Correct LIC_FILES_CHKSUM
        libdevmapper: Inherit nopackages
        ebtables: Remove the dependecy on bash
        libeigen: Remove LGPL code

  Peter Marko (41):
        libndp: Patch CVE-2024-5564
        squid: patch CVE-2024-37894
        hostapd: Patch CVE-2024-3596
        hostapd: Patch security advisory 2024-2
        nss: patch CVE-2024-6602
        nss: patch CVE-2024-6609
        squid: conditionally set status of CVE-2024-45802
        thrift: fix c++ generated code compilation with clang
        grpc: patch CVE-2024-11407
        python3-grpcio: patch CVE-2024-11407
        python3-grpcio(-tools): fix build concurrency issue
        libmodbus: patch CVE-2024-10918
        libmodbus: ignore CVE-2023-26793 and CVE-2024-34244
        libcoap: patch CVE-2024-31031
        spdlog: patch CVE-2025-6140
        minifi-cpp: patch spdlog CVE-2025-6140
        poco: ignore additional failing tests
        poco: patch CVE-2025-6375
        nginx: patch CVE-2025-53859
        fontforge: patch CVE-2024-25081 and CVE-2024-25082
        fcgi: patch CVE-2025-23016
        procmail: patch CVE-2014-3618
        procmail: patch CVE-2017-16844.
        ace: ignore CVE-2009-1147
        audiofile: fix multiple CVEs
        audiofile: patch CVE-2017-6829
        audiofile: fix multiple CVEs
        audiofile: patch CVE-2017-6831
        audiofile: patch CVE-2017-6839
        emlog: set CVE_PRODUCT
        freerdp: patch CVE-2024-32661
        freerdp: mark CVE-2024-32662 as fixed
        freerdp3: set CVE_PRODUCT
        corosync: fix upstream version check
        corosync: upgrade 3.1.6 -> 3.1.9
        corosync: patch CVE-2025-30472
        dash: set CVE_PRODUCT
        gattlib: mark CVE-2019-6498 as fixed
        memcached: ignore disputed CVE-2022-26635
        monkey: ignore CVE-2013-1771
        squid: patch CVE-2025-59362

  Poonam Jadhav (1):
        tcpreplay: Fix CVE-2023-4256

  Praveen Kumar (4):
        php: upgrade 8.2.28 -> 8.2.29
        polkit: fix CVE-2025-7519
        yasm: fix CVE-2024-22653
        cjson: upgrade 1.7.18 -> 1.7.19

  Preeti Sachan (1):
        bpftool: fix libelf.h not found error

  Raghuvarya S (2):
        android-tools-adbd.service: Update ConditionPathExists to /etc
        android-toold-adbd: Fix inconsistency between selinux configurations

  Rajeshkumar Ramasamy (1):
        open-vm-tools: fix CVE-2025-41244

  Randolph Sapp (2):
        opencl-clhpp: add native and nativesdk
        vulkan-cts: allow vulkan versions > 1.3

  Randy MacLeod (1):
        python3-pyyaml-include: support native and nativesdk build

  Robert Yang (1):
        hostapd: Add CVE id to CVE-2024-3596_00.patch

  Roland Kovacs (2):
        jq-1.7.1: Backport multiple CVE fixes
        jq: add Upstream-Status and CVE tags into .patch files

  Ryan Eatmon (1):
        kernel-selftest: Update to allow for turning on all tests

  Sana Kazi (2):
        libp11: Treat all openssl-3.x releases the same
        imagemagick: guard sed operations in do_install for optional files

  Saravanan (2):
        udisks2: upgrade 2.10.1 -> 2.10.2
        fio: fix CVE-2025-10823

  Scott Murray (2):
        python3-grpcio: Fix build with gcc-14
        python3-grpcio: backport abseil-cpp RISC-V fix

  Shubham Pushpkar (2):
        wireshark 4.2.7: Fix CVE-2024-9781
        cjson 1.7.18: Fix CVE-2025-57052

  Siddharth Doshi (2):
        apache2: Upgrade 2.4.59 -> 2.4.60
        apache2: Upgrade 2.4.60 -> 2.4.62

  Sofiane HAMAM (2):
        Wolfssl: add ptest
        wolfssl: Upgrade 5.7.0 -> 5.7.2

  Soumya Sambu (14):
        python3-sqlparse: Fix CVE-2024-4340
        python3-werkzeug: upgrade 3.0.1 -> 3.0.3
        gtk+: Fix CVE-2024-6655
        python3-twisted: Fix CVE-2024-41671
        python3-flask-cors: Fix CVE-2024-6221
        python3-werkzeug: upgrade 3.0.3 -> 3.0.6
        python3-tornado: Upgrade 6.4 -> 6.4.2
        python3-django: upgrade 4.2.16 -> 4.2.17
        python3-django: upgrade 5.0.9 -> 5.0.10
        python3-django: upgrade 5.0.10 -> 5.0.11
        python3-django: upgrade 4.2.17 -> 4.2.18
        php: Upgrade 8.2.26 -> 8.2.28
        iniparser: Fix CVE-2025-0633
        python3-django: upgrade 4.2.18 -> 4.2.20

  Sunil Dora (1):
        layer.conf: add bpftrace to NON_MULTILIB_RECIPES

  Swamil Jain (1):
        kmsxx: Revert to using original name for kmstest

  Thomas Roos (1):
        libcamera: backport 0.4.0 from master-next

  Tim Orling (1):
        python3-pydantic: upgrade 2.7.3 -> 2.7.4

  Trevor Woerner (2):
        apache2: use update-alternatives for httpd
        iperf3: throughput fix

  Vijay Anusuri (16):
        krb5: upgrade 1.21.2 -> 1.21.3
        wireshark: upgrade 4.2.4 -> 4.2.5
        wireshark: upgrade 4.2.5 -> 4.2.7
        php: upgrade 8.2.24 -> 8.2.26
        openjpeg: upgrade 2.5.0 -> 2.5.3
        postgresql: upgrade 16.5 -> 16.8
        wireshark: upgrade 4.2.7 -> 4.2.9
        proftpd: Fix CVE-2024-57392
        redis: upgrade 7.2.7 -> 7.2.8
        wireshark: upgrade 4.2.9 -> 4.2.12
        proftpd: Fix CVE-2023-51713
        apache2: Upgrade 2.4.62 -> 2.4.64
        poppler: Fix CVE-2025-43718
        redis: upgrade 7.2.8 -> 7.2.11
        redis: upgrade 6.2.16 -> 6.2.18
        vorbis-tools: Fix CVE-2023-43361

  Virendra Thakur (2):
        opensc: Fix multiple cve CVE-2024-45615-45616-45617-45618-45619-45620
        unbound: Fix CVE-2024-8508

  Wang Mingyu (18):
        python3-email-validator: upgrade 2.1.0 -> 2.1.1
        python3-pydantic: upgrade 2.7.0 -> 2.7.1
        cjson: upgrade 1.7.17 -> 1.7.18
        samba: upgrade 4.19.7 -> 4.19.8
        postgresql: upgrade 16.3 -> 16.4
        redis: upgrade 7.2.4 -> 7.2.5
        mosquitto: upgrade 2.0.19 -> 2.0.20
        uutils-coreutils: upgrade 0.0.27 -> 0.0.28
        nana: Fix buildpaths warning.
        fetchmail: Fix buildpaths warning.
        fetchmail: disable rpath to fix buildpaths warning.
        python3-posix-ipc: upgrade 1.1.1 -> 1.2.0
        mbedtls: upgrade 3.6.3 -> 3.6.3.1
        geoip: fix do_fetch error
        rp-pppoe: update SRC_URI
        procmail: fix build failure with gcc-14
        procmail: Add -Wno-implicit-int to fix error of do_compile
        libiec61850: upgrade 1.5.1 -> 1.5.3

  Wentao Zhang (1):
        meta-oe/conf/layer.conf: remove libbpf from NON_MULTILIB_RECIPES for x86 and x86-64

  Xiangyu Chen (1):
        crash: fix crash cannot work with kaslr

  Yi Zhao (12):
        samba: upgrade 4.19.6 -> 4.19.7
        mbedtls: upgrade 3.6.0 -> 3.6.1
        mbedtls: upgrade 2.28.8 -> 2.28.9
        libldb: upgrade 2.8.0 -> 2.8.1
        mbedtls: upgrade 3.6.1 -> 3.6.2
        freeradius: upgrade 3.2.3 -> 3.2.5
        hostapd: Security fix for CVE-2023-52160
        redis: upgrade 7.2.5 -> 7.2.6
        mbedtls: upgrade 2.28.9 -> 2.28.10
        mbedtls: 3.6.2 -> 3.6.3
        wxwidgets: upgrade 3.2.1 -> 3.2.6
        redis: upgrade 6.2.14 -> 6.2.16

  Yoann Congal (3):
        packagegroup-meta-oe: fix lvgl inclusion
        mdio-tools: fix mdio-netlink kernel module reproducibility
        gutenprint: fix a build race-condition

  Yogesh Tyagi (1):
        tbb-native: Fix build with gcc-13

  Yogita Urade (18):
        graphviz: fix CVE-2023-46045
        hdf5: upgrade to 1.14.4
        poppler: CVE-2024-6239
        krb5: fix CVE-2024-26458 and CVE-2024-26461
        php: upgrade 8.2.20 -> 8.2.24
        postgresql: upgrade 16.4 -> 16.5
        poppler: fix CVE-2024-56378
        poppler: fix CVE-2025-32364
        poppler: fix CVE-2025-32365
        poppler: fix CVE-2025-43903
        syslog-ng: fix CVE-2024-47619
        postgresql: upgrade 16.8 -> 16.9
        mariadb: upgrade 10.11.9 -> 10.11.12
        poppler: fix CVE-2025-52886
        poppler: fix CVE-2025-50420
        postgresql: upgrade 16.9 -> 16.10
        indent: fix CVE-2023-40305
        poppler: fix CVE-2025-52885

  Zhang Peng (21):
        hiredis: remove ANSI color from ptest result
        frr: fix CVE-2024-34088
        frr: fix CVE-2024-31950
        frr: fix CVE-2024-31951
        frr: fix CVE-2024-31948
        frr: fix CVE-2024-31949
        libgsf: upgrade 1.14.52 -> 1.14.53
        glade: fix CVE-2020-36774
        opensc: fix CVE-2024-8443
        lapack: fix TMPDIR reference in do_package_qa
        iperf3: upgrade 3.16 -> 3.18
        gnuplot: fix CVE-2025-3359
        gnuplot: fix CVE-2025-31176
        gnuplot: fix CVE-2025-31177
        gnuplot: fix CVE-2025-31178
        gnuplot: fix CVE-2025-31179
        gnuplot: fix CVE-2025-31180
        gnuplot: fix CVE-2025-31181
        iperf3: fix CVE-2025-54349
        iperf3: fix CVE-2025-54350
        wxwidgets: fix CVE-2024-58249

  Zoltán Böszörményi (1):
        gutenprint: 5.3.5

  akash hadke (1):
        python3-flatbuffers: provide nativesdk support

  alperak (8):
        tayga: Fix contains reference to TMPDIR [buildpaths] warning
        etcd-cpp-apiv3: Fix contains reference to TMPDIR [buildpaths] warning
        exiv2: Upgrade 0.28.2 to 0.28.3 for CVE fix
        jsonrpc: Fix contains reference to TMPDIR [buildpaths] warning
        rdist: Fix contains reference to TMPDIR [buildpaths] warning
        perfetto: Fix contains reference to TMPDIR [buildpaths] warning
        hplip: Fix contains reference to TMPDIR [buildpaths] warning
        boinc-client: Fix contains reference to TMPDIR [buildpaths] warning

  gudnimar (1):
        pipewire: upgrade 1.0.5 -> 1.0.9

  hongxu (2):
        p7zip: fix CVE-2023-52169 and CVE-2023-52168
        indent: fix CVE-2024-0911

  kjlau0112 (1):
        mbedtls: drop tag parameter from SRC_URI.

  mark.yang (1):
        srecord: fix build failure with gcc-15

meta-raspberrypi: 1918a27419..8767e2ff80:
  Adam Schafer (1):
        add raspi-utils recipe to scarthgap branch

  Andrei Gherzan (1):
        docs: Fix ReadTheDocs sphinx.configuration requirement

  Ayoub Zaki (1):
        raspberrypi5: add bcm2712d0 overlay required for booting up correctly

  Bassem Nomany (1):
        mesa: update to 24.3.1

  Damiano Ferrari (2):
        rpi-eeprom: Update to latest release
        rpi-bootfiles: Update to latest release

  Florin Sarbu (1):
        linux-raspberrypi.inc: Change defconfig for RPi3 64 bits

  Garrett Brown (1):
        linux: Enable CONFIG_I2C_BRCMSTB for proper HDMI I2C support

  Gijs Peskens (1):
        raspberrypi5.conf: Add CM5 dtb's

  Jaeyoon Jung (1):
        linux-raspberrypi: Drop deprecated configs from android-driver.cfg

  Joshua Watt (1):
        linux-firmware-rpidistro: Fix WiFi on Raspberry Pi 5

  Khem Raj (2):
        linux-raspberrypi-6.6: Upgrade to 6.6.63
        rpi-base: Remove bcm2712-rpi-5-b.dtb from RPI_KERNEL_DEVICETREE target

  Leon Anavi (11):
        yocto-builder/Dockerfile: Ubuntu 22.04
        rpi-base.inc: vc4-kms-dsi-ili9881-7inch.dtbo
        u-boot_%.bbappend: Increase CONFIG_SYS_BOOTM_LEN
        wayland-protocols: Upgrade 1.38 -> 1.45
        mesa: Upgrade 24.3.1 -> 25.1.3
        mesa: Upgrade 25.1.3 -> 25.1.6
        mesa_%.bbappend: DISTRO_FEATURES for wayland
        mesa: wayland-protocols: Fix signatures
        linux-firmware-rpidistro: Update and stabilize
        rpi-base.inc: Add w1-gpio-pi5.dtbo
        rpi-base.inc: Add rpi-backlight.dtbo

  Markus Volk (4):
        linux-raspberrypi: add recipe for 6.12
        linux-raspberrypi: update 6.12.2 -> 6.12.25
        rpi-default-versions: Switch default kernel to 6.12
        rpi-bootfiles: update to latest release

  Martin Jansa (3):
        docker-build: use --no-cache
        Revert "rpi-default-versions: Switch default kernel to 6.12"
        mesa, wayland-protocols: use separate recipe instead of bbappend

  Matthias Klein (1):
        linux-firmware-rpidistro: Upgrade to bookworm/20230625-2+rpt3

  Omri Sarig (1):
        linux-firmware-rpidistro: Fix wireless error message on RPi

  Pierrick Curt (1):
        rpi-base: build uart dts overlays by default

  Thomas Roos (1):
        Moving bcm2712d0.dtbo into rpi-base.inc

meta-arm: 58268ddccb..0f1e7bf92c:
  Amr Mohamed (5):
        kas: Update kas configuration for fvp-base.yml file
        arm-systemready/linux-distros: new inc file for unattended installation
        arm-systemready/linux-distros: Add kickstart file for Fedora unattended
        arm-systemready/oeqa: Add new test for Fedora unattended installation
        kas: Add new yml file for Distros unattended installation

  Ben (3):
        arm-systemready/linux-distros: Implement unattended openSUSE
        arm-systemready/oeqa: Add unattended installation testcase
        kas: Include unattended openSUSE test

  Bence Balogh (1):
        arm-bsp/trusted-firmware-m: corstone1000: Fix MPU configuration

  Harsimran Singh Tungal (1):
        arm-bsp,kas: corstone1000: enable External System based on new yml file

  Hugues KAMBA MPIANA (1):
        arm-bsp/documentation: corstone1000: Add SystemReady IR v2.0 certification

  Jon Mason (4):
        arm-toolchain: remove libmount-mountfd-support when using binary toolchain
        arm-bsp/fvp-base: Get 6.10 kernel working
        arm/linux-yocto: disable CONFIG_MTD_NAND_FSL_IFC
        arm-systemready/ir-acs: Update URL

  Jose Quaresma (1):
        bsp: optee-client: cleanup old tee-supplicant

  Luca Fancellu (2):
        arm/oeqa: Introduce retry mechanism for fvp_devices run_cmd
        arm/lib: Handle timeout for spawn object on stop()

  Romain Naour (4):
        external-arm-toolchain: remove old sed fixup for libc.so
        external-arm-toolchain: wrap symlink handling under usrmerge check
        external-arm-toolchain: override dynamic loader path with usrmerge enabled
        external-arm-toolchain: rebuild libmvec.so symlink if any

  Ross Burton (5):
        arm-base/linux-yocto: revert interim 6.10 patch for fvp-base
        arm-system-ready/arm-systemready-ir-acs: add version to download filename
        CI: use canonical git.yoctoproject.org URLs
        arm/execstack-native: add new recipe
        arm/fvp-base-a-aem: remove spurious executable stack from one library

  Vasyl Vavrychuk (3):
        external-arm-toolchain: wrap base_libdir vs libdir manipulations under usrmerge check
        external-arm-toolchain: in libc.so GNU ld script use base_libdir
        external-arm-toolchain: remove ${base_libdir}/libpthread*.so from FILES:${PN}

meta-security: 11ea91192d..bc865c5276:
  Hitendra Prajapati (2):
        clamav: fix CVE-2024-20505 & CVE-2024-20506
        libhtp: fix CVE-2024-45797

  Vijay Anusuri (2):
        tpm2-tools: Upgrade 5.5 -> 5.7
        tpm2-tss: upgrade 4.0.1 -> 4.0.2

Change-Id: Ief5b086436b2f3a4e819546fcd1bb9a5b1f608dd
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>

30 files changed, 864 insertions, 69 deletions

diff --git a/meta-raspberrypi/.github/actions/docker-build/action.yml b/meta-raspberrypi/.github/actions/docker-build/action.yml
index b91668e366..c1a37f602b 100644
--- a/meta-raspberrypi/.github/actions/docker-build/action.yml
+++ b/meta-raspberrypi/.github/actions/docker-build/action.yml
@@ -32,7 +32,7 @@ runs:
         n=1
         until [ "$n" -gt "$tries" ]; do
           echo "Building the docker image ${{ inputs.docker_image }}-${{ inputs.id }}... try $n..."
-          if docker build . -f "${{ inputs.docker_image }}/Dockerfile" -t "${{ inputs.docker_image }}-${{ inputs.id }}"; then
+          if docker build --no-cache . -f "${{ inputs.docker_image }}/Dockerfile" -t "${{ inputs.docker_image }}-${{ inputs.id }}"; then
             # This can fail if a dangling images cleaning job runs in
             # parallel. So we try this a couple of times to minimize
             # conflict. This is because while building, docker creates a
diff --git a/meta-raspberrypi/.github/workflows/compliance.yml b/meta-raspberrypi/.github/workflows/compliance.yml
index ec489f0095..1207acbdd3 100644
--- a/meta-raspberrypi/.github/workflows/compliance.yml
+++ b/meta-raspberrypi/.github/workflows/compliance.yml
@@ -23,7 +23,9 @@ jobs:
           id: ${{ github.event.number }}
       - name: Do DCO check
         run: |
-          docker run --rm -v "$GITHUB_WORKSPACE:/work:ro" \
+          docker run --rm --security-opt apparmor=unconfined \
+            --security-opt seccomp=unconfined \
+            -v "$GITHUB_WORKSPACE:/work:ro" \
             --env "BASE_REF=$GITHUB_BASE_REF" \
             "dco-check-${{ github.event.number }}"
       - name: Cleanup temporary docker image
diff --git a/meta-raspberrypi/.github/workflows/docker-images/README.md b/meta-raspberrypi/.github/workflows/docker-images/README.md
index 86cfddc191..7b8fce8b24 100644
--- a/meta-raspberrypi/.github/workflows/docker-images/README.md
+++ b/meta-raspberrypi/.github/workflows/docker-images/README.md
@@ -17,5 +17,5 @@ passing the appropriate `-f` argument.
 Here is an example for building the `dco-check` image:
 
 ```
-docker build . -f dco-check/Dockerfile -t dco-check
+docker build --no-cache . -f dco-check/Dockerfile -t dco-check
 ```
diff --git a/meta-raspberrypi/.github/workflows/docker-images/yocto-builder/Dockerfile b/meta-raspberrypi/.github/workflows/docker-images/yocto-builder/Dockerfile
index 87221b9e79..728b473d62 100644
--- a/meta-raspberrypi/.github/workflows/docker-images/yocto-builder/Dockerfile
+++ b/meta-raspberrypi/.github/workflows/docker-images/yocto-builder/Dockerfile
@@ -2,20 +2,21 @@
 #
 # SPDX-License-Identifier: MIT
 
-FROM ubuntu:20.04
+FROM ubuntu:22.04
 
 ARG DEBIAN_FRONTEND="noninteractive"
-RUN apt-get update -qq
+RUN apt-get update -q -y
 RUN apt-get install -y eatmydata
 
 # Yocto/OE build host dependencies
 # Keep this in sync with
-# https://git.yoctoproject.org/poky/tree/documentation/poky.yaml
+# https://git.yoctoproject.org/poky/tree/documentation/poky.yaml.in
+# https://git.yoctoproject.org/poky/tree/documentation/tools/host_packages_scripts/ubuntu_essential.sh
 RUN eatmydata apt-get install -qq -y \
-	gawk wget git diffstat unzip texinfo gcc build-essential chrpath \
-	socat cpio python3 python3-pip python3-pexpect xz-utils debianutils \
-	iputils-ping python3-git python3-jinja2 libegl1-mesa libsdl1.2-dev \
-	pylint3 xterm python3-subunit mesa-common-dev zstd liblz4-tool
+	build-essential chrpath cpio debianutils diffstat file gawk gcc \
+	git iputils-ping libacl1 liblz4-tool locales python3 python3-git \
+	python3-jinja2 python3-pexpect python3-pip python3-subunit socat \
+	texinfo unzip wget xz-utils zstd
 
 # en_US.UTF-8 is required by the build system
 RUN eatmydata apt-get install -qq -y locales \
@@ -29,6 +30,9 @@ RUN eatmydata apt-get clean && rm -rf /var/lib/apt/lists/*
 RUN echo "dash dash/sh boolean false" | debconf-set-selections \
  && dpkg-reconfigure dash
 
+# Fix the resource exhaustion problem on the build infrastructure
+RUN echo 'vm.max_map_count = 4048576' >> /etc/sysctl.conf
+
 # Run under normal user called 'ci'
 RUN useradd --create-home --uid 1000 --shell /usr/bin/bash ci
 USER ci
diff --git a/meta-raspberrypi/.github/workflows/yocto-builds.yml b/meta-raspberrypi/.github/workflows/yocto-builds.yml
index 408d25ea29..87b009b0a8 100644
--- a/meta-raspberrypi/.github/workflows/yocto-builds.yml
+++ b/meta-raspberrypi/.github/workflows/yocto-builds.yml
@@ -66,7 +66,8 @@ jobs:
         if: steps.changed-files-specific.outputs.any_changed == 'true'
       - name: Build the image
         run: |
-          docker run --rm \
+          docker run --rm --security-opt apparmor=unconfined \
+            --security-opt seccomp=unconfined \
             -v "$GITHUB_WORKSPACE:/work:ro" \
             -v "$DL_DIR:$DL_DIR:rw" \
             -v "$SSTATE_DIR:$SSTATE_DIR:rw" \
@@ -76,6 +77,7 @@ jobs:
             --env "IMAGE=${{ matrix.image }}" \
             --env "DL_DIR=$DL_DIR" \
             --env "SSTATE_DIR=$SSTATE_DIR" \
+            --ulimit "nofile=1024:1048576" \
             "yocto-builder-${{ github.event.number }}" \
             /entrypoint-build.sh
         if: steps.changed-files-specific.outputs.any_changed == 'true'
diff --git a/meta-raspberrypi/.github/workflows/yocto-layer.yml b/meta-raspberrypi/.github/workflows/yocto-layer.yml
index fa11815f1e..555241b105 100644
--- a/meta-raspberrypi/.github/workflows/yocto-layer.yml
+++ b/meta-raspberrypi/.github/workflows/yocto-layer.yml
@@ -42,7 +42,8 @@ jobs:
         if: steps.changed-files-specific.outputs.any_changed == 'true'
       - name: Run yocto-check-layer
         run: |
-          docker run --rm -v "$GITHUB_WORKSPACE:/work:ro" \
+          docker run --rm --security-opt apparmor=unconfined \
+            -v "$GITHUB_WORKSPACE:/work:ro" \
             --env "BASE_REF=$GITHUB_BASE_REF" \
             "yocto-builder-${{ github.event.number }}" \
             /entrypoint-yocto-check-layer.sh
diff --git a/meta-raspberrypi/.readthedocs.yaml b/meta-raspberrypi/.readthedocs.yaml
index 5e8dc2074d..1438e1750d 100644
--- a/meta-raspberrypi/.readthedocs.yaml
+++ b/meta-raspberrypi/.readthedocs.yaml
@@ -1,5 +1,7 @@
 version: 2
 
+sphinx:
+  configuration: docs/conf.py
 build:
   os: ubuntu-22.04
   tools:
diff --git a/meta-raspberrypi/conf/machine/include/rpi-base.inc b/meta-raspberrypi/conf/machine/include/rpi-base.inc
index a5fd1a4578..9a8cadec92 100644
--- a/meta-raspberrypi/conf/machine/include/rpi-base.inc
+++ b/meta-raspberrypi/conf/machine/include/rpi-base.inc
@@ -58,15 +58,30 @@ RPI_KERNEL_DEVICETREE_OVERLAYS ?= " \
     overlays/pps-gpio.dtbo \
     overlays/rpi-ft5406.dtbo \
     overlays/rpi-poe.dtbo \
+    overlays/uart0.dtbo \
+    overlays/uart0-pi5.dtbo \
+    overlays/uart1.dtbo \
+    overlays/uart1-pi5.dtbo \
+    overlays/uart2.dtbo \
+    overlays/uart2-pi5.dtbo \
+    overlays/uart3.dtbo \
+    overlays/uart3-pi5.dtbo \
+    overlays/uart4.dtbo \
+    overlays/uart4-pi5.dtbo \
+    overlays/uart5.dtbo \
     overlays/vc4-fkms-v3d.dtbo \
     overlays/vc4-fkms-v3d-pi4.dtbo \
     overlays/vc4-kms-v3d.dtbo \
     overlays/vc4-kms-v3d-pi4.dtbo \
     overlays/vc4-kms-v3d-pi5.dtbo \
     overlays/vc4-kms-dsi-7inch.dtbo \
+    overlays/vc4-kms-dsi-ili9881-7inch.dtbo \
+    overlays/rpi-backlight.dtbo \
     overlays/w1-gpio.dtbo \
     overlays/w1-gpio-pullup.dtbo \
+    overlays/w1-gpio-pi5.dtbo \
     overlays/wm8960-soundcard.dtbo \
+    overlays/bcm2712d0.dtbo \
     "
 
 RPI_KERNEL_DEVICETREE ?= " \
@@ -86,7 +101,6 @@ RPI_KERNEL_DEVICETREE ?= " \
     broadcom/bcm2710-rpi-cm3.dtb \
     broadcom/bcm2711-rpi-cm4.dtb \
     broadcom/bcm2711-rpi-cm4s.dtb \
-    broadcom/bcm2712-rpi-5-b.dtb \
     "
 
 KERNEL_DEVICETREE ??= " \
diff --git a/meta-raspberrypi/conf/machine/raspberrypi-armv8.conf b/meta-raspberrypi/conf/machine/raspberrypi-armv8.conf
index 0128bdc712..0b42309245 100644
--- a/meta-raspberrypi/conf/machine/raspberrypi-armv8.conf
+++ b/meta-raspberrypi/conf/machine/raspberrypi-armv8.conf
@@ -33,6 +33,10 @@ RPI_KERNEL_DEVICETREE = " \
     broadcom/bcm2711-rpi-cm4.dtb \
     broadcom/bcm2711-rpi-cm4s.dtb \
     broadcom/bcm2712-rpi-5-b.dtb \
+    broadcom/bcm2712-rpi-cm5-cm5io.dtb \
+    broadcom/bcm2712-rpi-cm5-cm4io.dtb \
+    broadcom/bcm2712-rpi-cm5l-cm5io.dtb \
+    broadcom/bcm2712-rpi-cm5l-cm4io.dtb \
 "
 
 SDIMG_KERNELIMAGE ?= "kernel8.img"
diff --git a/meta-raspberrypi/conf/machine/raspberrypi5.conf b/meta-raspberrypi/conf/machine/raspberrypi5.conf
index 03f15c35fb..636c965af5 100644
--- a/meta-raspberrypi/conf/machine/raspberrypi5.conf
+++ b/meta-raspberrypi/conf/machine/raspberrypi5.conf
@@ -15,6 +15,10 @@ MACHINE_EXTRA_RRECOMMENDS += "\
 
 RPI_KERNEL_DEVICETREE = " \
     broadcom/bcm2712-rpi-5-b.dtb \
+    broadcom/bcm2712-rpi-cm5-cm5io.dtb \
+    broadcom/bcm2712-rpi-cm5-cm4io.dtb \
+    broadcom/bcm2712-rpi-cm5l-cm5io.dtb \
+    broadcom/bcm2712-rpi-cm5l-cm4io.dtb \
 "
 
 SDIMG_KERNELIMAGE ?= "kernel_2712.img"
diff --git a/meta-raspberrypi/recipes-bsp/bootfiles/rpi-bootfiles.bb b/meta-raspberrypi/recipes-bsp/bootfiles/rpi-bootfiles.bb
index b04f24be22..eb31d54003 100644
--- a/meta-raspberrypi/recipes-bsp/bootfiles/rpi-bootfiles.bb
+++ b/meta-raspberrypi/recipes-bsp/bootfiles/rpi-bootfiles.bb
@@ -5,14 +5,14 @@ LIC_FILES_CHKSUM = "file://LICENCE.broadcom;md5=c403841ff2837657b2ed8e5bb474ac8d
 
 inherit deploy nopackages
 
-RPIFW_DATE ?= "20240319"
-SRCREV = "9f24f4bc2bdd07ffd158cfbb4bce88a2efc4c1f5"
+RPIFW_DATE ?= "20250430"
+SRCREV = "bc7f439c234e19371115e07b57c366df59cc1bc7"
 SHORTREV = "${@d.getVar("SRCREV", False).__str__()[:7]}"
-RPIFW_SRC_URI ?= "https://api.github.com/repos/raspberrypi/firmware/tarball/9f24f4bc2bdd07ffd158cfbb4bce88a2efc4c1f5;downloadfilename=raspberrypi-firmware-${SHORTREV}.tar.gz"
+RPIFW_SRC_URI ?= "https://api.github.com/repos/raspberrypi/firmware/tarball/${SRCREV};downloadfilename=raspberrypi-firmware-${SHORTREV}.tar.gz"
 RPIFW_S ?= "${WORKDIR}/raspberrypi-firmware-${SHORTREV}"
 
 SRC_URI = "${RPIFW_SRC_URI}"
-SRC_URI[sha256sum] = "4b436f8946b139c6a1202375ef55d4848e3bcd8c1a9cb47000e06d7ecec828f7"
+SRC_URI[sha256sum] = "2c027debbef53c86c9ff9197d056d501b95f6ad214ad4db00a8a59b947574eb1"
 
 PV = "${RPIFW_DATE}"
 
diff --git a/meta-raspberrypi/recipes-bsp/rpi-eeprom/rpi-eeprom_git.bb b/meta-raspberrypi/recipes-bsp/rpi-eeprom/rpi-eeprom_git.bb
index 2e10253e90..f3ca5e31a9 100644
--- a/meta-raspberrypi/recipes-bsp/rpi-eeprom/rpi-eeprom_git.bb
+++ b/meta-raspberrypi/recipes-bsp/rpi-eeprom/rpi-eeprom_git.bb
@@ -1,15 +1,15 @@
 SUMMARY = "Installation scripts and binaries for the Raspberry Pi 4 EEPROM"
-DESCRIPTION = "This repository contains the rpi4 bootloader and scripts \
+DESCRIPTION = "This repository contains the rpi4/rpi5 bootloader and scripts \
 for updating it in the spi eeprom"
 LICENSE = "BSD-3-Clause & Broadcom-RPi"
-LIC_FILES_CHKSUM = "file://LICENSE;md5=f546ed4f47e9d4c1fe954ecc9d3ef4f3"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=a6c5149578a16272119f3f9c13d6549b"
 
 SRC_URI = " \
     git://github.com/raspberrypi/rpi-eeprom.git;protocol=https;branch=master \
 "
 
-SRCREV = "36e58db5c2a2656e553441f4f48f32227809105d"
-PV = "v.2024.02.16-2712"
+SRCREV = "1bd0a1052b2e74d7af04de18d30b5edb12d8a423"
+PV = "v2025.03.10-2712"
 
 S = "${WORKDIR}/git"
 
diff --git a/meta-raspberrypi/recipes-bsp/u-boot/files/maxsize.cfg b/meta-raspberrypi/recipes-bsp/u-boot/files/maxsize.cfg
new file mode 100644
index 0000000000..1b09831dbf
--- /dev/null
+++ b/meta-raspberrypi/recipes-bsp/u-boot/files/maxsize.cfg
@@ -0,0 +1 @@
+CONFIG_SYS_BOOTM_LEN=0x1000000
diff --git a/meta-raspberrypi/recipes-bsp/u-boot/u-boot_%.bbappend b/meta-raspberrypi/recipes-bsp/u-boot/u-boot_%.bbappend
index e50acf5fb3..e575569a57 100644
--- a/meta-raspberrypi/recipes-bsp/u-boot/u-boot_%.bbappend
+++ b/meta-raspberrypi/recipes-bsp/u-boot/u-boot_%.bbappend
@@ -5,6 +5,7 @@ SRC_URI:append:rpi = " \
 "
 
 SRC_URI:append:rpi = " file://0001-rpi-always-set-fdt_addr-with-firmware-provided-FDT-address.patch"
+SRC_URI:append:raspberrypi4 = " file://maxsize.cfg"
 
 DEPENDS:append:rpi = " u-boot-default-script"
 
diff --git a/meta-raspberrypi/recipes-devtools/raspi-utils/raspi-utils_git.bb b/meta-raspberrypi/recipes-devtools/raspi-utils/raspi-utils_git.bb
new file mode 100644
index 0000000000..7c31620426
--- /dev/null
+++ b/meta-raspberrypi/recipes-devtools/raspi-utils/raspi-utils_git.bb
@@ -0,0 +1,53 @@
+SUMMARY = "A collection of scripts and simple applications"
+LICENSE = "BSD-3-Clause"
+LIC_FILES_CHKSUM = "file://LICENCE;md5=4c01239e5c3a3d133858dedacdbca63c"
+
+RCONFLICTS:${PN} = "userland"
+DEPENDS:append = " dtc"
+PACKAGES =+ " ${PN}-raspinfo"
+PACKAGES =+ " ${PN}-ovmerge"
+RDEPENDS:${PN}-raspinfo += " bash"
+RDEPENDS:${PN}-ovmerge += " perl"
+
+PV = "1.0+git"
+
+SRC_URI = "git://github.com/raspberrypi/utils;protocol=https;branch=master"
+
+SRCREV = "b9c63214c535d7df2b0fa6743b7b3e508363c25a"
+
+FILES:${PN}:append = " \
+    ${datadir}/bash-completion/completions/pinctrl \
+    ${datadir}/bash-completion/completions/vcgencmd \
+"
+FILES:${PN}-raspinfo += "${bindir}/raspinfo"
+FILES:${PN}-ovmerge += "${bindir}/ovmerge"
+
+S = "${WORKDIR}/git"
+
+OECMAKE_TARGET_COMPILE = "\
+    dtmerge/all \
+    eeptools/all \
+    otpset/all \
+    overlaycheck/all \
+    ovmerge/all \
+    pinctrl/all \
+    raspinfo/all \
+    vcgencmd/all \
+    vclog/all \
+    vcmailbox/all \
+"
+
+OECMAKE_TARGET_INSTALL = "\
+    dtmerge/install \
+    eeptools/install \
+    otpset/install \
+    overlaycheck/install \
+    ovmerge/install \
+    pinctrl/install \
+    raspinfo/install \
+    vcgencmd/install \
+    vclog/install \
+    vcmailbox/install \
+"
+
+inherit cmake
\ No newline at end of file
diff --git a/meta-raspberrypi/recipes-graphics/mesa/mesa/0001-dont-build-clover-frontend.patch b/meta-raspberrypi/recipes-graphics/mesa/mesa/0001-dont-build-clover-frontend.patch
new file mode 100644
index 0000000000..5f45f94fea
--- /dev/null
+++ b/meta-raspberrypi/recipes-graphics/mesa/mesa/0001-dont-build-clover-frontend.patch
@@ -0,0 +1,29 @@
+From: Markus Volk <f_l_k@t-online.de>
+Date: Sun, 19 Mai 2025 15:34:46 +0100
+Subject: [PATCH] dont build clover frontend
+
+The clover frontend is deprecated and is always built with opencl, even if
+using rusticl. Additionally it adds a reproducibility issue.
+
+Upstream-Status: Inappropriate [oe-specific]
+Signed-off-by: Markus Volk <f_l_k@t-online.de>
+
+--- a/src/gallium/meson.build	2025-05-07 18:35:10.000000000 +0200
++++ b/src/gallium/meson.build	2025-05-18 17:05:23.677694272 +0200
+@@ -195,15 +195,11 @@
+ else
+   driver_d3d12 = declare_dependency()
+ endif
+-if with_gallium_clover or with_tests
++if with_tests
+   # At the moment, clover and gallium/tests are the only two consumers
+   # for pipe-loader
+   subdir('targets/pipe-loader')
+ endif
+-if with_gallium_clover
+-  subdir('frontends/clover')
+-  subdir('targets/opencl')
+-endif
+ if with_gallium_rusticl
+   subdir('frontends/rusticl')
+   subdir('targets/rusticl')
diff --git a/meta-raspberrypi/recipes-graphics/mesa/mesa/0001-fix-FTBFS-clc-switch-to-new-non-owned-TargetOptions-.patch b/meta-raspberrypi/recipes-graphics/mesa/mesa/0001-fix-FTBFS-clc-switch-to-new-non-owned-TargetOptions-.patch
new file mode 100644
index 0000000000..2633869625
--- /dev/null
+++ b/meta-raspberrypi/recipes-graphics/mesa/mesa/0001-fix-FTBFS-clc-switch-to-new-non-owned-TargetOptions-.patch
@@ -0,0 +1,39 @@
+From 531c6696d42953cd642dea7bf70153285c7949ae Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Kai=20Wasserb=C3=A4ch?= <kai@dev.carbon-project.org>
+Date: Tue, 6 May 2025 14:36:57 +0200
+Subject: [PATCH] fix(FTBFS): clc: switch to new non-owned `TargetOptions` for
+ LLVM 21
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+Upstream hid the `TargetOptions` in commit 985410f87f2d19910a8d327527fd30062b042b63
+
+Use the new `getTargetOpts()` to obtain the `TargetOptions` for
+`setTarget()`.
+
+Upstream-Status: Backport [https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/34835]
+
+Signed-off-by: Kai Wasserbäch <kai@dev.carbon-project.org>
+Closes: https://gitlab.freedesktop.org/mesa/mesa/-/issues/13079
+Reference: https://github.com/llvm/llvm-project/commit/985410f87f2d19910a8d327527fd30062b042b63
+Reviewed-by: Karol Herbst <kherbst@redhat.com>
+Part-of: <https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/34835>
+---
+ src/compiler/clc/clc_helpers.cpp | 4 ++++
+ 1 file changed, 4 insertions(+)
+
+--- a/src/compiler/clc/clc_helpers.cpp
++++ b/src/compiler/clc/clc_helpers.cpp
+@@ -874,7 +874,11 @@ clc_compile_to_llvm_module(LLVMContext &
+                            diag_opts));
+ 
+    c->setTarget(clang::TargetInfo::CreateTargetInfo(
++#if LLVM_VERSION_MAJOR >= 21
++                   c->getDiagnostics(), c->getInvocation().getTargetOpts()));
++#else
+                    c->getDiagnostics(), c->getInvocation().TargetOpts));
++#endif
+ 
+    c->getFrontendOpts().ProgramAction = clang::frontend::EmitLLVMOnly;
+ 
diff --git a/meta-raspberrypi/recipes-graphics/mesa/mesa/0001-freedreno-don-t-encode-build-path-into-binaries.patch b/meta-raspberrypi/recipes-graphics/mesa/mesa/0001-freedreno-don-t-encode-build-path-into-binaries.patch
new file mode 100644
index 0000000000..953a724dc0
--- /dev/null
+++ b/meta-raspberrypi/recipes-graphics/mesa/mesa/0001-freedreno-don-t-encode-build-path-into-binaries.patch
@@ -0,0 +1,110 @@
+From 027ac36756cc75eea9ed4fee135a351af30b35fd Mon Sep 17 00:00:00 2001
+From: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
+Date: Tue, 16 Jul 2024 12:32:47 +0300
+Subject: [PATCH] freedreno: don't encode build path into binaries
+
+Encoding build-specific path into installed binaries is generally
+frowned upon. It harms the reproducibility of the build and e.g.
+OpenEmbedded now considers that to be an error.
+
+Instead of hardcoding rnn_src_path into the RNN_DEF_PATH define specify
+it manually when running the tests.
+
+Upstream-Status: Submitted [https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/30206]
+Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
+---
+ src/freedreno/afuc/meson.build   | 4 ++++
+ src/freedreno/decode/meson.build | 4 +++-
+ src/freedreno/meson.build        | 2 +-
+ 3 files changed, 8 insertions(+), 2 deletions(-)
+
+diff --git a/src/freedreno/afuc/meson.build b/src/freedreno/afuc/meson.build
+index bb7cebf5a748..351cc31ef2de 100644
+--- a/src/freedreno/afuc/meson.build
++++ b/src/freedreno/afuc/meson.build
+@@ -56,10 +56,12 @@ if with_tests
+   asm_fw = custom_target('afuc_test.fw',
+     output: 'afuc_test.fw',
+     command: [asm, files('../.gitlab-ci/traces/afuc_test.asm'), '@OUTPUT@'],
++    env: {'RNN_PATH': rnn_src_path},
+   )
+   asm_fw_a7xx = custom_target('afuc_test_a7xx.fw',
+     output: 'afuc_test_a7xx.fw',
+     command: [asm, files('../.gitlab-ci/traces/afuc_test_a7xx.asm'), '@OUTPUT@'],
++    env: {'RNN_PATH': rnn_src_path},
+   )
+   test('afuc-asm',
+     diff,
+@@ -120,11 +122,13 @@ if cc.sizeof('size_t') > 4
+     disasm_fw = custom_target('afuc_test.asm',
+       output: 'afuc_test.asm',
+       command: [disasm, '-u', files('../.gitlab-ci/reference/afuc_test.fw')],
++      env: {'RNN_PATH': rnn_src_path},
+       capture: true
+     )
+     disasm_fw_a7xx = custom_target('afuc_test_a7xx.asm',
+       output: 'afuc_test_a7xx.asm',
+       command: [disasm, '-u', files('../.gitlab-ci/reference/afuc_test_a7xx.fw')],
++      env: {'RNN_PATH': rnn_src_path},
+       capture: true
+     )
+     test('afuc-disasm',
+diff --git a/src/freedreno/decode/meson.build b/src/freedreno/decode/meson.build
+index 469eeb4eb597..dfa1c12d0d9f 100644
+--- a/src/freedreno/decode/meson.build
++++ b/src/freedreno/decode/meson.build
+@@ -194,6 +194,7 @@ if dep_lua.found() and dep_libarchive.found()
+       log = custom_target(name + '.log',
+         output: name + '.log',
+         command: [cffdump, '--unit-test', args, files('../.gitlab-ci/traces/' + name + '.rd.gz')],
++        env: {'RNN_PATH': rnn_src_path},
+         capture: true,
+       )
+       test('cffdump-' + name,
+@@ -247,7 +248,8 @@ if with_tests
+       output: name + '.log',
+       command: [crashdec, args, files('../.gitlab-ci/traces/' + name + '.devcore')],
+       capture: true,
+-      env: {'GALLIUM_DUMP_CPU': 'false'},
++      env: {'GALLIUM_DUMP_CPU': 'false',
++            'RNN_PATH': rnn_src_path},
+     )
+ 
+     test('crashdec-' + name,
+diff --git a/src/freedreno/meson.build b/src/freedreno/meson.build
+index 98e49b8fcf0e..145e72597eb9 100644
+--- a/src/freedreno/meson.build
++++ b/src/freedreno/meson.build
+@@ -6,7 +6,7 @@ inc_freedreno_rnn = include_directories('rnn')
+ 
+ rnn_src_path = dir_source_root + '/src/freedreno/registers'
+ rnn_install_path = get_option('datadir') + '/freedreno/registers'
+-rnn_path = rnn_src_path + ':' + get_option('prefix') + '/' + rnn_install_path
++rnn_path = get_option('prefix') + '/' + rnn_install_path
+ 
+ dep_libarchive = dependency('libarchive', allow_fallback: true, required: false)
+ dep_libxml2 = dependency('libxml-2.0', allow_fallback: true, required: false)
+diff --git a/src/freedreno/registers/gen_header.py b/src/freedreno/registers/gen_header.py
+--- a/src/freedreno/registers/gen_header.py
++++ b/src/freedreno/registers/gen_header.py
+@@ -885,13 +885,14 @@ The rules-ng-ng source files this header
+ """)
+ 	maxlen = 0
+ 	for filepath in p.xml_files:
+-		maxlen = max(maxlen, len(filepath))
++		maxlen = max(maxlen, len(os.path.basename(filepath)))
+ 	for filepath in p.xml_files:
+-		pad = " " * (maxlen - len(filepath))
++		filename = os.path.basename(filepath)
++		pad = " " * (maxlen - len(filename))
+ 		filesize = str(os.path.getsize(filepath))
+ 		filesize = " " * (7 - len(filesize)) + filesize
+ 		filetime = time.ctime(os.path.getmtime(filepath))
+-		print("- " + filepath + pad + " (" + filesize + " bytes, from " + filetime + ")")
++		print("- " + filename + pad + " (" + filesize + " bytes, from " + filetime + ")")
+ 	if p.copyright_year:
+ 		current_year = str(datetime.date.today().year)
+ 		print()
+---
+2.39.2
+
diff --git a/meta-raspberrypi/recipes-graphics/mesa/mesa/0001-meson-misdetects-64bit-atomics-on-mips-clang.patch b/meta-raspberrypi/recipes-graphics/mesa/mesa/0001-meson-misdetects-64bit-atomics-on-mips-clang.patch
new file mode 100644
index 0000000000..baa98a0d46
--- /dev/null
+++ b/meta-raspberrypi/recipes-graphics/mesa/mesa/0001-meson-misdetects-64bit-atomics-on-mips-clang.patch
@@ -0,0 +1,24 @@
+From 02cc21800fe29f566add525e63f619c0536d6e7b Mon Sep 17 00:00:00 2001
+From: Khem Raj <raj.khem@gmail.com>
+Date: Mon, 13 Jan 2020 15:23:47 -0800
+Subject: [PATCH] meson misdetects 64bit atomics on mips/clang
+
+Upstream-Status: Pending
+Signed-off-by: Khem Raj <raj.khem@gmail.com>
+---
+ src/util/u_atomic.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/util/u_atomic.c b/src/util/u_atomic.c
+index 5a5eab4..e499516 100644
+--- a/src/util/u_atomic.c
++++ b/src/util/u_atomic.c
+@@ -21,7 +21,7 @@
+  * IN THE SOFTWARE.
+  */
+ 
+-#if defined(MISSING_64BIT_ATOMICS) && defined(HAVE_PTHREAD)
++#if !defined(__clang__) && defined(MISSING_64BIT_ATOMICS) && defined(HAVE_PTHREAD)
+ 
+ #include <stdint.h>
+ #include <pthread.h>
diff --git a/meta-raspberrypi/recipes-graphics/mesa/mesa_25.1.6.bb b/meta-raspberrypi/recipes-graphics/mesa/mesa_25.1.6.bb
new file mode 100644
index 0000000000..b09a5e172e
--- /dev/null
+++ b/meta-raspberrypi/recipes-graphics/mesa/mesa_25.1.6.bb
@@ -0,0 +1,383 @@
+SUMMARY = "A free implementation of the OpenGL API"
+DESCRIPTION = "Mesa is an open-source implementation of the OpenGL specification - \
+a system for rendering interactive 3D graphics.  \
+A variety of device drivers allows Mesa to be used in many different environments \
+ranging from software emulation to complete hardware acceleration for modern GPUs. \
+Mesa is used as part of the overall Direct Rendering Infrastructure and X.org \
+environment."
+
+HOMEPAGE = "http://mesa3d.org"
+BUGTRACKER = "https://bugs.freedesktop.org"
+SECTION = "x11"
+LICENSE = "MIT"
+LIC_FILES_CHKSUM = "file://docs/license.rst;md5=ffe678546d4337b732cfd12262e6af11"
+
+PE = "2"
+
+SRC_URI = "https://archive.mesa3d.org/mesa-${PV}.tar.xz \
+           file://0001-meson-misdetects-64bit-atomics-on-mips-clang.patch \
+           file://0001-freedreno-don-t-encode-build-path-into-binaries.patch \
+           file://0001-dont-build-clover-frontend.patch \
+           file://0001-fix-FTBFS-clc-switch-to-new-non-owned-TargetOptions-.patch \
+"
+
+SRC_URI[sha256sum] = "9f2b69eb39d2d8717d30a9868fdda3e0c0d3708ba32778bbac8ddb044538ce84"
+PV = "25.1.6"
+
+UPSTREAM_CHECK_GITTAGREGEX = "mesa-(?P<pver>\d+(\.\d+)+)"
+
+#because we cannot rely on the fact that all apps will use pkgconfig,
+#make eglplatform.h independent of MESA_EGL_NO_X11_HEADER
+do_install:append() {
+  # sed can't find EGL/eglplatform.h as it doesn't get installed when glvnd enabled.
+  # So, check if EGL/eglplatform.h exists before running sed.
+  if ${@bb.utils.contains('PACKAGECONFIG', 'egl', 'true', 'false', d)} && [ -f ${D}${includedir}/EGL/eglplatform.h ]; then
+      sed -i -e 's/^#elif defined(__unix__) && defined(EGL_NO_X11)$/#elif defined(__unix__) \&\& defined(EGL_NO_X11) || ${@bb.utils.contains('PACKAGECONFIG', 'x11', '0', '1', d)}/' ${D}${includedir}/EGL/eglplatform.h
+  fi
+  # These are ICDs, apps are not supposed to link against them                                                                                                              
+  if ${@bb.utils.contains('PACKAGECONFIG', 'glvnd', 'true', 'false', d)} ; then                                                                                             
+      rm -f ${D}${libdir}/libEGL_mesa.so ${D}${libdir}/libGLX_mesa.so                                                                                                       
+  fi
+}
+
+DEPENDS = "expat makedepend-native flex-native bison-native libxml2-native zlib chrpath-replacement-native python3-mako-native gettext-native python3-pyyaml-native"
+EXTRANATIVEPATH += "chrpath-native"
+GLPROVIDES = " \
+    ${@bb.utils.contains('PACKAGECONFIG', 'opengl', 'virtual/libgl', '', d)} \
+    ${@bb.utils.contains('PACKAGECONFIG', 'gles', 'virtual/libgles1 virtual/libgles2 virtual/libgles3', '', d)} \
+    ${@bb.utils.contains('PACKAGECONFIG', 'egl', 'virtual/egl', '', d)} \
+"
+PROVIDES = " \
+    ${@bb.utils.contains('PACKAGECONFIG', 'glvnd', '', d.getVar('GLPROVIDES'), d)} \
+    ${@bb.utils.contains('PACKAGECONFIG', 'gbm', 'virtual/libgbm', '', d)} \
+    virtual/mesa \
+    "
+
+inherit meson pkgconfig python3native gettext features_check rust
+
+BBCLASSEXTEND = "native nativesdk"
+
+ANY_OF_DISTRO_FEATURES = "opengl vulkan"
+
+PLATFORMS ??= "${@bb.utils.filter('PACKAGECONFIG', 'x11 wayland', d)}"
+
+# set the MESA_BUILD_TYPE to either 'release' (default) or 'debug'
+# by default the upstream mesa sources build a debug release
+# here we assume the user will want a release build by default
+MESA_BUILD_TYPE ?= "release"
+def check_buildtype(d):
+    _buildtype = d.getVar('MESA_BUILD_TYPE')
+    if _buildtype not in ['release', 'debug']:
+        bb.fatal("unknown build type (%s), please set MESA_BUILD_TYPE to either 'release' or 'debug'" % _buildtype)
+    if _buildtype == 'debug':
+        return 'debugoptimized'
+    return 'plain'
+MESON_BUILDTYPE = "${@check_buildtype(d)}"
+
+EXTRA_OEMESON = " \
+    -Dglx-read-only-text=true \
+    -Dplatforms='${@",".join("${PLATFORMS}".split())}' \
+"
+
+def strip_comma(s):
+    return s.strip(',')
+
+PACKAGECONFIG = " \
+	gallium \
+	video-codecs \
+	${@bb.utils.filter('DISTRO_FEATURES', 'x11 vulkan wayland glvnd', d)} \
+	${@bb.utils.contains('DISTRO_FEATURES', 'opengl', 'opengl egl gles gbm virgl', '', d)} \
+	${@bb.utils.contains('DISTRO_FEATURES', 'vulkan', 'zink', '', d)} \
+"
+
+# skip all Rust dependencies if we are not building OpenCL"
+INHIBIT_DEFAULT_RUST_DEPS = "${@bb.utils.contains('PACKAGECONFIG', 'opencl', '', '1', d)}"
+
+PACKAGECONFIG:append:x86 = " libclc gallium-llvm intel amd nouveau svga"
+PACKAGECONFIG:append:x86-64 = " libclc gallium-llvm intel amd nouveau svga"
+PACKAGECONFIG:append:i686 = " libclc gallium-llvm intel amd nouveau svga"
+PACKAGECONFIG:append:class-native = " libclc gallium-llvm amd nouveau svga"
+
+# "gbm" requires "opengl"
+PACKAGECONFIG[gbm] = "-Dgbm=enabled,-Dgbm=disabled"
+
+X11_DEPS = "xorgproto virtual/libx11 libxext libxxf86vm libxdamage libxfixes xrandr xorgproto libxshmfence"
+# "x11" requires "opengl"
+PACKAGECONFIG[x11] = ",-Dglx=disabled,${X11_DEPS}"
+PACKAGECONFIG[wayland] = ",,wayland-native wayland libdrm wayland-protocols"
+
+VULKAN_DRIVERS_AMD = "${@bb.utils.contains('PACKAGECONFIG', 'amd', ',amd', '', d)}"
+VULKAN_DRIVERS_ASAHI = "${@bb.utils.contains('PACKAGECONFIG', 'asahi libclc opencl', ',asahi', '', d)}"
+VULKAN_DRIVERS_INTEL = "${@bb.utils.contains('PACKAGECONFIG', 'intel libclc', ',intel', '', d)}"
+VULKAN_DRIVERS_SWRAST = ",swrast"
+# Crashes on x32
+VULKAN_DRIVERS_SWRAST:x86-x32 = ""
+VULKAN_DRIVERS_LLVM = "${VULKAN_DRIVERS_SWRAST}${VULKAN_DRIVERS_AMD}${VULKAN_DRIVERS_ASAHI}${VULKAN_DRIVERS_INTEL}"
+
+VULKAN_DRIVERS = ""
+VULKAN_DRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'freedreno', ',freedreno', '', d)}"
+VULKAN_DRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'broadcom', ',broadcom', '', d)}"
+VULKAN_DRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'gallium-llvm', '${VULKAN_DRIVERS_LLVM}', '', d)}"
+VULKAN_DRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'imagination', ',imagination-experimental', '', d)}"
+VULKAN_DRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'panfrost', ',panfrost', '', d)}"
+PACKAGECONFIG[vulkan] = "-Dvulkan-drivers=${@strip_comma('${VULKAN_DRIVERS}')}, -Dvulkan-drivers='',glslang-native vulkan-loader vulkan-headers"
+
+# mesa development and testing tools support, per driver
+TOOLS = ""
+TOOLS_DEPS = ""
+TOOLS:append = "${@bb.utils.contains('PACKAGECONFIG', 'etnaviv', ',etnaviv', '', d)}"
+TOOLS:append = "${@bb.utils.contains('PACKAGECONFIG', 'freedreno', ',freedreno', '', d)}"
+TOOLS:append = "${@bb.utils.contains('PACKAGECONFIG', 'lima', ',lima', '', d)}"
+TOOLS:append = "${@bb.utils.contains('PACKAGECONFIG', 'panfrost', ',panfrost', '', d)}"
+TOOLS:append = "${@bb.utils.contains('PACKAGECONFIG', 'imagination', ',imagination', '', d)}"
+
+# dependencies for tools.
+TOOLS_DEPS:append = "${@bb.utils.contains('PACKAGECONFIG', 'freedreno', ' ncurses libxml2 ', '', d)}"
+
+# the fdperf tool requires libconfig (a part of meta-oe) so it needs special
+# treatment in addition to the usual 'freedreno tools'.
+PACKAGECONFIG[freedreno-fdperf] = ",,libconfig"
+
+PACKAGECONFIG[tools] = "-Dtools=${@strip_comma('${TOOLS}')}, -Dtools='', ${TOOLS_DEPS}"
+
+PACKAGECONFIG[opengl] = "-Dopengl=true, -Dopengl=false"
+PACKAGECONFIG[glvnd] = "-Dglvnd=enabled, -Dglvnd=disabled, libglvnd"
+
+# "gles" requires "opengl"
+PACKAGECONFIG[gles] = "-Dgles1=enabled -Dgles2=enabled, -Dgles1=disabled -Dgles2=disabled"
+
+# "egl" requires "opengl"
+PACKAGECONFIG[egl] = "-Degl=enabled, -Degl=disabled"
+
+# "opencl" also requires libclc and gallium-llvm to be present in PKGCONFIG!
+# Be sure to enable them both for the target and for the native build.
+PACKAGECONFIG[opencl] = "-Dgallium-rusticl=true, -Dgallium-rusticl=false, bindgen-cli-native"
+
+PACKAGECONFIG[broadcom] = ""
+PACKAGECONFIG[etnaviv] = ",,python3-pycparser-native"
+PACKAGECONFIG[freedreno] = ""
+PACKAGECONFIG[vc4] = ""
+PACKAGECONFIG[v3d] = ""
+PACKAGECONFIG[zink] = ""
+
+GALLIUMDRIVERS = "softpipe"
+# gallium swrast was found to crash Xorg on startup in x32 qemu
+GALLIUMDRIVERS:x86-x32 = ""
+
+GALLIUMDRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'etnaviv', ',etnaviv', '', d)}"
+GALLIUMDRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'freedreno', ',freedreno', '', d)}"
+GALLIUMDRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'vc4', ',vc4', '', d)}"
+GALLIUMDRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'v3d', ',v3d', '', d)}"
+GALLIUMDRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'zink', ',zink', '', d)}"
+
+GALLIUMDRIVERS_ASAHI = "${@bb.utils.contains('PACKAGECONFIG', 'asahi libclc opencl', ',asahi', '', d)}"
+GALLIUMDRIVERS_AMD = "${@bb.utils.contains('PACKAGECONFIG', 'amd', ',r300', '', d)}"
+GALLIUMDRIVERS_IRIS = "${@bb.utils.contains('PACKAGECONFIG', 'intel libclc', ',iris', '', d)}"
+GALLIUMDRIVERS_NOUVEAU = "${@bb.utils.contains('PACKAGECONFIG', 'nouveau', ',nouveau', '', d)}"
+GALLIUMDRIVERS_RADEONSI = "${@bb.utils.contains('PACKAGECONFIG', 'amd', ',radeonsi', '', d)}"
+GALLIUMDRIVERS_LLVMPIPE = ",llvmpipe"
+# llvmpipe crashes on x32
+GALLIUMDRIVERS_LLVMPIPE:x86-x32 = ""
+GALLIUMDRIVERS_SVGA = "${@bb.utils.contains('PACKAGECONFIG', 'svga', ',svga', '', d)}"
+GALLIUMDRIVERS_LLVM = "${GALLIUMDRIVERS_LLVMPIPE}${GALLIUMDRIVERS_AMD}${GALLIUMDRIVERS_ASAHI}${GALLIUMDRIVERS_IRIS}${GALLIUMDRIVERS_NOUVEAU}${GALLIUMDRIVERS_RADEONSI}${GALLIUMDRIVERS_SVGA}"
+
+PACKAGECONFIG[amd] = ""
+PACKAGECONFIG[nouveau] = ""
+PACKAGECONFIG[svga] = ""
+PACKAGECONFIG[virgl] = ""
+
+GALLIUMDRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'gallium-llvm', '${GALLIUMDRIVERS_LLVM}', '', d)}"
+GALLIUMDRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'amd', ',r600', '', d)}"
+GALLIUMDRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'virgl', ',virgl', '', d)}"
+
+MESA_CLC = "system"
+MESA_CLC:class-native = "enabled"
+INSTALL_MESA_CLC = "false"
+INSTALL_MESA_CLC:class-native = "true"
+MESA_NATIVE = "mesa-native"
+MESA_NATIVE:class-native = ""
+
+PACKAGECONFIG[gallium] = "-Dgallium-drivers=${@strip_comma('${GALLIUMDRIVERS}')}, -Dgallium-drivers='', libdrm"
+PACKAGECONFIG[gallium-llvm] = "-Dllvm=enabled -Dshared-llvm=enabled, -Dllvm=disabled, llvm llvm-native elfutils"
+PACKAGECONFIG[libclc] = "-Dmesa-clc=${MESA_CLC} -Dinstall-mesa-clc=${INSTALL_MESA_CLC} -Dmesa-clc-bundle-headers=enabled,,libclc spirv-tools spirv-llvm-translator ${MESA_NATIVE}"
+PACKAGECONFIG[va] = "-Dgallium-va=enabled,-Dgallium-va=disabled,libva-initial"
+PACKAGECONFIG[vdpau] = "-Dgallium-vdpau=enabled,-Dgallium-vdpau=disabled,libvdpau"
+
+PACKAGECONFIG[imagination] = "-Dimagination-srv=true,-Dimagination-srv=false"
+
+PACKAGECONFIG[asahi] = ""
+
+PACKAGECONFIG[intel] = ""
+GALLIUMDRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'intel', ',i915,crocus', '', d)}"
+
+PACKAGECONFIG[lima] = ""
+GALLIUMDRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'lima', ',lima', '', d)}"
+
+PACKAGECONFIG[panfrost] = ""
+GALLIUMDRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'panfrost', ',panfrost', '', d)}"
+
+PACKAGECONFIG[tegra] = ""
+GALLIUMDRIVERS:append = "${@bb.utils.contains('PACKAGECONFIG', 'tegra', ',tegra,nouveau', '', d)}"
+
+PACKAGECONFIG[vulkan-beta] = "-Dvulkan-beta=true,-Dvulkan-beta=false"
+
+PACKAGECONFIG[perfetto] = "-Dperfetto=true,-Dperfetto=false,libperfetto"
+
+PACKAGECONFIG[unwind] = "-Dlibunwind=enabled,-Dlibunwind=disabled,libunwind"
+
+PACKAGECONFIG[lmsensors] = "-Dlmsensors=enabled,-Dlmsensors=disabled,lmsensors"
+
+VIDEO_CODECS ?= "${@bb.utils.contains('LICENSE_FLAGS_ACCEPTED', 'commercial', 'all', 'all_free', d)}"
+PACKAGECONFIG[video-codecs] = "-Dvideo-codecs=${VIDEO_CODECS}, -Dvideo-codecs=''"
+
+PACKAGECONFIG[teflon] = "-Dteflon=true, -Dteflon=false"
+
+# llvmpipe is slow if compiled with -fomit-frame-pointer (e.g. -O2)
+FULL_OPTIMIZATION:append = " -fno-omit-frame-pointer"
+
+CFLAGS:append:armv5 = " -DMISSING_64BIT_ATOMICS"
+CFLAGS:append:armv6 = " -DMISSING_64BIT_ATOMICS"
+
+# Remove the mesa dependency on mesa-dev, as mesa is empty
+DEV_PKG_DEPENDENCY = ""
+
+# GLES2 and GLES3 implementations are packaged in a single library in libgles2-mesa.
+# Add a dependency so the GLES3 dev package is associated with its implementation.
+RPROVIDES:libgles2-mesa += "libgles3-mesa"
+RPROVIDES:libgles2-mesa-dev += "libgles3-mesa-dev"
+
+RDEPENDS:libopencl-mesa += "${@bb.utils.contains('PACKAGECONFIG', 'opencl', 'libclc spirv-tools spirv-llvm-translator', '', d)}"
+
+PACKAGES =+ "libegl-mesa libegl-mesa-dev \
+             libgallium \
+             libgl-mesa libgl-mesa-dev \
+             libglx-mesa libglx-mesa-dev \
+             libglapi libglapi-dev \
+             libgbm libgbm-dev \
+             libgles1-mesa libgles1-mesa-dev \
+             libgles2-mesa libgles2-mesa-dev \
+             libopencl-mesa \
+             libteflon \
+             mesa-megadriver mesa-vulkan-drivers \
+             mesa-vdpau-drivers mesa-tools \
+            "
+
+do_install:append () {
+    # libwayland-egl has been moved to wayland 1.15+
+    rm -f ${D}${libdir}/libwayland-egl*
+    rm -f ${D}${libdir}/pkgconfig/wayland-egl.pc
+}
+
+# For the packages that make up the OpenGL interfaces, inject variables so that
+# they don't get Debian-renamed (which would remove the -mesa suffix), and
+# RPROVIDEs/RCONFLICTs on the generic libgl name.
+python __anonymous() {
+    pkgconfig = (d.getVar('PACKAGECONFIG') or "").split()
+    mlprefix = d.getVar("MLPREFIX")
+    suffix = ""
+    if "-native" in d.getVar("PN"):
+        suffix = "-native"
+
+    for p in ("libegl", "libgl", "libglx", "libgles1", "libgles2", "libgles3", "libopencl"):
+        fullp = mlprefix + p + "-mesa" + suffix
+        d.appendVar("RRECOMMENDS:" + fullp, " ${MLPREFIX}mesa-megadriver" + suffix)
+
+    d.setVar("DEBIAN_NOAUTONAME:%slibopencl-mesa%s" % (mlprefix, suffix), "1")
+
+    if 'glvnd' in pkgconfig:
+        for p in ("libegl", "libglx"):
+            fullp = mlprefix + p + "-mesa" + suffix
+            d.appendVar("RPROVIDES:" + fullp, ' virtual-%s-icd' % p)
+    else:
+        for p in (("egl", "libegl", "libegl1"),
+                  ("opengl", "libgl", "libgl1"),
+                  ("gles", "libgles1", "libglesv1-cm1"),
+                  ("gles", "libgles2", "libglesv2-2", "libgles3")):
+            if not p[0] in pkgconfig:
+                continue
+            fullp = mlprefix + p[1] + "-mesa" + suffix
+            pkgs = " " + " ".join(mlprefix + x + suffix for x in p[1:])
+            d.setVar("DEBIAN_NOAUTONAME:" + fullp, "1")
+            d.appendVar("RREPLACES:" + fullp, pkgs)
+            d.appendVar("RPROVIDES:" + fullp, pkgs)
+            d.appendVar("RCONFLICTS:" + fullp, pkgs)
+
+            # For -dev, the first element is both the Debian and original name
+            fullp = mlprefix + p[1] + "-mesa-dev" + suffix
+            pkgs = " " + mlprefix + p[1] + "-dev" + suffix
+            d.setVar("DEBIAN_NOAUTONAME:" + fullp, "1")
+            d.appendVar("RREPLACES:" + fullp, pkgs)
+            d.appendVar("RPROVIDES:" + fullp, pkgs)
+            d.appendVar("RCONFLICTS:" + fullp, pkgs)
+}
+
+python mesa_populate_packages() {
+    pkgs = ['mesa', 'mesa-dev', 'mesa-dbg']
+    for pkg in pkgs:
+        d.setVar("RPROVIDES:%s" % pkg, pkg.replace("mesa", "mesa-dri", 1))
+        d.setVar("RCONFLICTS:%s" % pkg, pkg.replace("mesa", "mesa-dri", 1))
+        d.setVar("RREPLACES:%s" % pkg, pkg.replace("mesa", "mesa-dri", 1))
+
+    import re
+    dri_drivers_root = oe.path.join(d.getVar('PKGD'), d.getVar('libdir'), "dri")
+    if os.path.isdir(dri_drivers_root):
+        dri_pkgs = sorted(os.listdir(dri_drivers_root))
+        lib_name = d.expand("${MLPREFIX}mesa-megadriver")
+        for p in dri_pkgs:
+            m = re.match(r'^(.*)_dri\.so$', p)
+            if m:
+                pkg_name = " ${MLPREFIX}mesa-driver-%s" % legitimize_package_name(m.group(1))
+                d.appendVar("RPROVIDES:%s" % lib_name, pkg_name)
+                d.appendVar("RCONFLICTS:%s" % lib_name, pkg_name)
+                d.appendVar("RREPLACES:%s" % lib_name, pkg_name)
+}
+
+PACKAGESPLITFUNCS =+ "mesa_populate_packages"
+
+PACKAGES_DYNAMIC += "^mesa-driver-.*"
+PACKAGES_DYNAMIC:class-native = "^mesa-driver-.*-native"
+
+FILES:mesa-megadriver = "${libdir}/dri/* ${datadir}/drirc.d"
+FILES:mesa-vulkan-drivers = "${libdir}/libvulkan_*.so ${libdir}/libpowervr_rogue.so ${datadir}/vulkan"
+FILES:${PN}-vdpau-drivers = "${libdir}/vdpau/*.so.*"
+FILES:libegl-mesa = "${libdir}/libEGL*.so.* ${datadir}/glvnd/egl_vendor.d"
+FILES:libgbm = "${libdir}/libgbm.so.* ${libdir}/gbm/*_gbm.so"
+FILES:libgallium = "${libdir}/libgallium-*.so"
+FILES:libgles1-mesa = "${libdir}/libGLESv1*.so.*"
+FILES:libgles2-mesa = "${libdir}/libGLESv2.so.*"
+FILES:libgl-mesa = "${libdir}/libGL.so.*"
+FILES:libglx-mesa = "${libdir}/libGLX*.so.*"
+FILES:libopencl-mesa = "${libdir}/lib*OpenCL.so* ${sysconfdir}/OpenCL/vendors/*.icd"
+FILES:libglapi = "${libdir}/libglapi.so.*"
+
+FILES:${PN}-dev = "${libdir}/pkgconfig/dri.pc ${includedir}/GL/internal/dri_interface.h ${includedir}/vulkan ${libdir}/vdpau/*.so"
+FILES:libegl-mesa-dev = "${libdir}/libEGL*.* ${includedir}/EGL ${includedir}/KHR ${libdir}/pkgconfig/egl.pc"
+FILES:libgbm-dev = "${libdir}/libgbm.* ${libdir}/pkgconfig/gbm.pc ${includedir}/gbm.h ${includedir}/gbm_backend_abi.h"
+FILES:libgl-mesa-dev = "${libdir}/libGL.* ${includedir}/GL/*.h ${libdir}/pkgconfig/gl.pc"
+FILES:libglapi-dev = "${libdir}/libglapi.*"
+FILES:libgles1-mesa-dev = "${libdir}/libGLESv1*.* ${includedir}/GLES ${libdir}/pkgconfig/glesv1*.pc"
+FILES:libgles2-mesa-dev = "${libdir}/libGLESv2.* ${includedir}/GLES2 ${includedir}/GLES3 ${libdir}/pkgconfig/glesv2.pc"
+FILES:libteflon = "${libdir}/libteflon.so"
+# catch all to get all the tools and data
+FILES:${PN}-tools = "${bindir} ${datadir}"
+ALLOW_EMPTY:${PN}-tools = "1"
+
+# All DRI drivers are symlinks to libdril_dri.so
+INSANE_SKIP:${PN}-megadriver += "dev-so"
+
+# OpenCL ICDs package also ship correspondig .so files, there is no -dev package
+INSANE_SKIP:libopencl-mesa += "dev-so"
+
+# Fix upgrade path from mesa to mesa-megadriver
+RREPLACES:mesa-megadriver = "mesa"
+RCONFLICTS:mesa-megadriver = "mesa"
+RPROVIDES:mesa-megadriver = "mesa"
+
+# Use this newer version only for rpi MACHINEs
+COMPATIBLE_MACHINE = "^rpi$"
+# This version doesn't have kmsro and dri3 added by 
+# recipes-graphics/mesa/mesa_%.bbappend
+# already removed in master branch with:
+# https://github.com/agherzan/meta-raspberrypi/pull/1456
+# https://github.com/agherzan/meta-raspberrypi/pull/1472
+PACKAGECONFIG:remove:rpi = "kmsro dri3"
diff --git a/meta-raspberrypi/recipes-graphics/wayland/wayland-protocols_1.45.bb b/meta-raspberrypi/recipes-graphics/wayland/wayland-protocols_1.45.bb
new file mode 100644
index 0000000000..7ef86e11c0
--- /dev/null
+++ b/meta-raspberrypi/recipes-graphics/wayland/wayland-protocols_1.45.bb
@@ -0,0 +1,27 @@
+SUMMARY = "Collection of additional Wayland protocols"
+DESCRIPTION = "Wayland protocols that add functionality not \
+available in the Wayland core protocol. Such protocols either add \
+completely new functionality, or extend the functionality of some other \
+protocol either in Wayland core, or some other protocol in \
+wayland-protocols."
+HOMEPAGE = "http://wayland.freedesktop.org"
+LICENSE = "MIT"
+LIC_FILES_CHKSUM = "file://COPYING;md5=c7b12b6702da38ca028ace54aae3d484 \
+                    file://stable/presentation-time/presentation-time.xml;endline=26;md5=4646cd7d9edc9fa55db941f2d3a7dc53"
+
+SRC_URI = "https://gitlab.freedesktop.org/wayland/wayland-protocols/-/releases/${PV}/downloads/wayland-protocols-${PV}.tar.xz"
+SRC_URI[sha256sum] = "4d2b2a9e3e099d017dc8107bf1c334d27bb87d9e4aff19a0c8d856d17cd41ef0"
+
+UPSTREAM_CHECK_URI = "https://gitlab.freedesktop.org/wayland/wayland-protocols/-/tags"
+UPSTREAM_CHECK_REGEX = "releases/(?P<pver>.+)"
+
+DEPENDS += "wayland-native"
+
+inherit meson pkgconfig allarch
+
+EXTRA_OEMESON += "-Dtests=false"
+
+BBCLASSEXTEND = "native nativesdk"
+
+# Use this newer version only for rpi MACHINEs
+COMPATIBLE_MACHINE = "^rpi$"
diff --git a/meta-raspberrypi/recipes-kernel/linux-firmware-rpidistro/linux-firmware-rpidistro/0001-Default-43455-firmware-to-standard-variant.patch b/meta-raspberrypi/recipes-kernel/linux-firmware-rpidistro/linux-firmware-rpidistro/0001-Default-43455-firmware-to-standard-variant.patch
deleted file mode 100644
index f67d95b22c..0000000000
--- a/meta-raspberrypi/recipes-kernel/linux-firmware-rpidistro/linux-firmware-rpidistro/0001-Default-43455-firmware-to-standard-variant.patch
+++ /dev/null
@@ -1,28 +0,0 @@
-From b9db43e36ad0942d33cb4db5b394abd722862568 Mon Sep 17 00:00:00 2001
-From: Andrei Gherzan <andrei.gherzan@huawei.com>
-Date: Fri, 9 Sep 2022 20:28:06 +0200
-Subject: [PATCH] Default 43455 firmware to standard variant
-
-The firmware for 43455 is loaded as a symlink: brcmfmac43455-sdio.bin.
-This symlink is now broken as the debian package handles the right
-target of this symlink through a postinstall. We don't have that logic
-here so we default to the standard variant.
-
-Upstream-Status: Inappropriate [issue reported at https://github.com/RPi-Distro/firmware-nonfree/issues/26]
-Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
----
- debian/config/brcm80211/brcm/brcmfmac43455-sdio.bin | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/debian/config/brcm80211/brcm/brcmfmac43455-sdio.bin b/debian/config/brcm80211/brcm/brcmfmac43455-sdio.bin
-index 9c39208..b914838 120000
---- a/debian/config/brcm80211/brcm/brcmfmac43455-sdio.bin
-+++ b/debian/config/brcm80211/brcm/brcmfmac43455-sdio.bin
-@@ -1 +1 @@
--../cypress/cyfmac43455-sdio.bin
-\ No newline at end of file
-+../cypress/cyfmac43455-sdio-standard.bin
-\ No newline at end of file
--- 
-2.25.1
-
diff --git a/meta-raspberrypi/recipes-kernel/linux-firmware-rpidistro/linux-firmware-rpidistro/0002-Default-all-RPi-43455-boards-to-standard-variant.patch b/meta-raspberrypi/recipes-kernel/linux-firmware-rpidistro/linux-firmware-rpidistro/0002-Default-all-RPi-43455-boards-to-standard-variant.patch
new file mode 100644
index 0000000000..745fdb629e
--- /dev/null
+++ b/meta-raspberrypi/recipes-kernel/linux-firmware-rpidistro/linux-firmware-rpidistro/0002-Default-all-RPi-43455-boards-to-standard-variant.patch
@@ -0,0 +1,79 @@
+From 20741d848c32e0fb2e4841cf8bbc9ec3d198bb6b Mon Sep 17 00:00:00 2001
+From: Omri Sarig <omri.sarig@prevas.dk>
+Date: Thu, 9 Jan 2025 19:00:10 +0100
+Subject: [PATCH 2/2] Default all RPi 43455 boards to standard variant
+
+As the patch above explains, the symlink that is being used by the
+brcmfmac43455-sdio.* files is one that is created by the Debian system,
+which we do not have in our implementation. Therefore, when the system
+tries to load these files, an error message is generated.
+
+By changing the symlinks to be to the standard variant, the problem is
+solved for the build.
+
+The code is also working without this patch - when the driver is unable
+to load the board-specific file (such as
+brcmfmac43455-sdio.raspberrypi,3-model-a-plus.bin), it reverts to using
+the base file (brcmfmac43455-sdio.bin), which is a correct link (as it
+is fixed in the patch above). However, the driver is still generating an
+error message in this case, which is being solved by linking the
+board-specific files to the standard variant as well.
+
+Upstream-Status: Inappropriate [issue reported at https://github.com/RPi-Distro/firmware-nonfree/issues/26]
+Signed-off-by: Omri Sarig <omri.sarig@prevas.dk>
+---
+ .../brcm/brcmfmac43455-sdio.raspberrypi,3-model-a-plus.bin      | 2 +-
+ .../brcm/brcmfmac43455-sdio.raspberrypi,3-model-b-plus.bin      | 2 +-
+ .../brcm/brcmfmac43455-sdio.raspberrypi,4-compute-module.bin    | 2 +-
+ .../brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,4-model-b.bin | 2 +-
+ .../brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,5-model-b.bin | 2 +-
+ 5 files changed, 5 insertions(+), 5 deletions(-)
+
+diff --git a/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,3-model-a-plus.bin b/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,3-model-a-plus.bin
+index 9c39208..b914838 120000
+--- a/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,3-model-a-plus.bin
++++ b/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,3-model-a-plus.bin
+@@ -1 +1 @@
+-../cypress/cyfmac43455-sdio.bin
+\ No newline at end of file
++../cypress/cyfmac43455-sdio-standard.bin
+\ No newline at end of file
+diff --git a/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,3-model-b-plus.bin b/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,3-model-b-plus.bin
+index 9c39208..b914838 120000
+--- a/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,3-model-b-plus.bin
++++ b/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,3-model-b-plus.bin
+@@ -1 +1 @@
+-../cypress/cyfmac43455-sdio.bin
+\ No newline at end of file
++../cypress/cyfmac43455-sdio-standard.bin
+\ No newline at end of file
+diff --git a/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,4-compute-module.bin b/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,4-compute-module.bin
+index 9c39208..b914838 120000
+--- a/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,4-compute-module.bin
++++ b/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,4-compute-module.bin
+@@ -1 +1 @@
+-../cypress/cyfmac43455-sdio.bin
+\ No newline at end of file
++../cypress/cyfmac43455-sdio-standard.bin
+\ No newline at end of file
+diff --git a/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,4-model-b.bin b/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,4-model-b.bin
+index 9c39208..b914838 120000
+--- a/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,4-model-b.bin
++++ b/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,4-model-b.bin
+@@ -1 +1 @@
+-../cypress/cyfmac43455-sdio.bin
+\ No newline at end of file
++../cypress/cyfmac43455-sdio-standard.bin
+\ No newline at end of file
+diff --git a/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,5-model-b.bin b/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,5-model-b.bin
+index 9c39208..b914838 120000
+--- a/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,5-model-b.bin
++++ b/debian/config/brcm80211/brcm/brcmfmac43455-sdio.raspberrypi,5-model-b.bin
+@@ -1 +1 @@
+-../cypress/cyfmac43455-sdio.bin
+\ No newline at end of file
++../cypress/cyfmac43455-sdio-standard.bin
+\ No newline at end of file
+-- 
+2.34.1
+
diff --git a/meta-raspberrypi/recipes-kernel/linux-firmware-rpidistro/linux-firmware-rpidistro_git.bb b/meta-raspberrypi/recipes-kernel/linux-firmware-rpidistro/linux-firmware-rpidistro_git.bb
index 1b4305820e..df5dcd92d3 100644
--- a/meta-raspberrypi/recipes-kernel/linux-firmware-rpidistro/linux-firmware-rpidistro_git.bb
+++ b/meta-raspberrypi/recipes-kernel/linux-firmware-rpidistro/linux-firmware-rpidistro_git.bb
@@ -7,7 +7,7 @@ SECTION = "kernel"
 
 LICENSE = "GPL-2.0-only & binary-redist-Cypress-rpidistro & Synaptics-rpidistro"
 LIC_FILES_CHKSUM = "\
-    file://debian/copyright;md5=291ee5385b4cf74b10c5fb5a46a7bbc6 \
+    file://debian/copyright;md5=454e44c688dc909e16223e4aee63568c \
 "
 # Where these are no common licenses, set NO_GENERIC_LICENSE so that the
 # license files will be copied from the fetched source.
@@ -16,10 +16,10 @@ NO_GENERIC_LICENSE[Synaptics-rpidistro] = "debian/copyright"
 LICENSE_FLAGS = "synaptics-killswitch"
 
 SRC_URI = "git://github.com/RPi-Distro/firmware-nonfree;branch=bookworm;protocol=https \
-    file://0001-Default-43455-firmware-to-standard-variant.patch \
+    file://0002-Default-all-RPi-43455-boards-to-standard-variant.patch \
 "
-SRCREV = "223ccf3a3ddb11b3ea829749fbbba4d65b380897"
-PV = "20230625-2+rpt2"
+SRCREV = "c9d3ae6584ab79d19a4f94ccf701e888f9f87a53"
+PV = "20240709-2~bpo12+1+rpt3"
 S = "${WORKDIR}/git"
 
 inherit allarch
@@ -27,6 +27,11 @@ inherit allarch
 do_configure[noexec] = "1"
 do_compile[noexec] = "1"
 
+# The minimal firmware doesn't work with Raspberry Pi 5, so default to the
+# standard firmware
+CYFMAC43455_SDIO_FIRMWARE ??= "minimal"
+CYFMAC43455_SDIO_FIRMWARE:raspberrypi5 ??= "standard"
+
 do_install() {
     install -d ${D}${nonarch_base_libdir}/firmware/brcm ${D}${nonarch_base_libdir}/firmware/cypress
 
@@ -43,8 +48,12 @@ do_install() {
     done
 
     cp -R --no-dereference --preserve=mode,links -v debian/config/brcm80211/cypress/* ${D}${nonarch_base_libdir}/firmware/cypress/
+    ln -s cyfmac43455-sdio-${CYFMAC43455_SDIO_FIRMWARE}.bin ${D}${nonarch_base_libdir}/firmware/cypress/cyfmac43455-sdio.bin
 
     rm ${D}${nonarch_base_libdir}/firmware/cypress/README.txt
+
+    install -d ${D}${sysconfdir}/modprobe.d
+    install -m 0644 debian/rpi-brcmfmac.conf ${D}${sysconfdir}/modprobe.d/
 }
 
 PACKAGES = "\
@@ -55,6 +64,7 @@ PACKAGES = "\
     ${PN}-bcm43455 \
     ${PN}-bcm43456 \
     ${PN}-license \
+    ${PN}-module-conf \
 "
 
 LICENSE:${PN}-bcm43430 = "binary-redist-Cypress-rpidistro"
@@ -85,13 +95,14 @@ FILES:${PN}-bcm43455 = " \
 "
 FILES:${PN}-bcm43456 = "${nonarch_base_libdir}/firmware/brcm/brcmfmac43456*"
 FILES:${PN}-license = "${nonarch_base_libdir}/firmware/copyright.firmware-nonfree-rpidistro"
-
-RDEPENDS:${PN}-bcm43430 += "${PN}-license"
-RDEPENDS:${PN}-bcm43436 += "${PN}-license"
-RDEPENDS:${PN}-bcm43436s += "${PN}-license"
-RDEPENDS:${PN}-bcm43439 += "${PN}-license"
-RDEPENDS:${PN}-bcm43455 += "${PN}-license"
-RDEPENDS:${PN}-bcm43456 += "${PN}-license"
+FILES:${PN}-module-conf = "${sysconfdir}/modprobe.d"
+
+RDEPENDS:${PN}-bcm43430 += "${PN}-license ${PN}-module-conf"
+RDEPENDS:${PN}-bcm43436 += "${PN}-license ${PN}-module-conf"
+RDEPENDS:${PN}-bcm43436s += "${PN}-license ${PN}-module-conf"
+RDEPENDS:${PN}-bcm43439 += "${PN}-license ${PN}-module-conf"
+RDEPENDS:${PN}-bcm43455 += "${PN}-license ${PN}-module-conf"
+RDEPENDS:${PN}-bcm43456 += "${PN}-license ${PN}-module-conf"
 
 RCONFLICTS:${PN}-bcm43430 = "linux-firmware-raspbian-bcm43430"
 RCONFLICTS:${PN}-bcm43436 = "linux-firmware-bcm43436"
diff --git a/meta-raspberrypi/recipes-kernel/linux/files/android-drivers.cfg b/meta-raspberrypi/recipes-kernel/linux/files/android-drivers.cfg
index f74ac0e1c7..f1259a1653 100644
--- a/meta-raspberrypi/recipes-kernel/linux/files/android-drivers.cfg
+++ b/meta-raspberrypi/recipes-kernel/linux/files/android-drivers.cfg
@@ -1,8 +1,3 @@
-CONFIG_ANDROID=y
-
 #CONFIG_ANDROID_BINDERFS is not set
 CONFIG_ANDROID_BINDER_IPC=y
 CONFIG_ANDROID_BINDER_DEVICES="binder"
-
-CONFIG_ASHMEM=y
-
diff --git a/meta-raspberrypi/recipes-kernel/linux/files/vc4graphics.cfg b/meta-raspberrypi/recipes-kernel/linux/files/vc4graphics.cfg
index 0b4ba48434..3e5c19b7b8 100644
--- a/meta-raspberrypi/recipes-kernel/linux/files/vc4graphics.cfg
+++ b/meta-raspberrypi/recipes-kernel/linux/files/vc4graphics.cfg
@@ -1,4 +1,5 @@
 CONFIG_I2C_BCM2835=y
+CONFIG_I2C_BRCMSTB=y
 CONFIG_DRM=y
 CONFIG_DRM_FBDEV_EMULATION=y
 CONFIG_DRM_VC4=y
diff --git a/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi-v7_6.12.bb b/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi-v7_6.12.bb
new file mode 100644
index 0000000000..f5677085c1
--- /dev/null
+++ b/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi-v7_6.12.bb
@@ -0,0 +1,6 @@
+# SPDX-FileCopyrightText: Andrei Gherzan <andrei.gherzan@huawei.com>
+#
+# SPDX-License-Identifier: MIT
+
+require linux-raspberrypi-v7.inc
+require linux-raspberrypi_6.12.bb
diff --git a/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi.inc b/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi.inc
index e62ff3ff7c..036ff220c1 100644
--- a/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi.inc
+++ b/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi.inc
@@ -28,7 +28,7 @@ KBUILD_DEFCONFIG:raspberrypi ?= "bcmrpi_defconfig"
 KBUILD_DEFCONFIG:raspberrypi-cm3 ?= "bcm2709_defconfig"
 KBUILD_DEFCONFIG:raspberrypi2 ?= "bcm2709_defconfig"
 KBUILD_DEFCONFIG:raspberrypi3 ?= "bcm2709_defconfig"
-KBUILD_DEFCONFIG:raspberrypi3-64 ?= "bcmrpi3_defconfig"
+KBUILD_DEFCONFIG:raspberrypi3-64 ?= "bcm2711_defconfig"
 KBUILD_DEFCONFIG:raspberrypi4 ?= "bcm2711_defconfig"
 KBUILD_DEFCONFIG:raspberrypi4-64 ?= "bcm2711_defconfig"
 KBUILD_DEFCONFIG:raspberrypi-armv7 ?= "bcm2711_defconfig"
diff --git a/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi_6.12.bb b/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi_6.12.bb
new file mode 100644
index 0000000000..e9b7951684
--- /dev/null
+++ b/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi_6.12.bb
@@ -0,0 +1,31 @@
+LINUX_VERSION ?= "6.12.25"
+LINUX_RPI_BRANCH ?= "rpi-6.12.y"
+LINUX_RPI_KMETA_BRANCH ?= "yocto-6.12"
+
+SRCREV_machine = "3dd2c2c507c271d411fab2e82a2b3b7e0b6d3f16"
+SRCREV_meta = "1f6ab68a1d86836bf1b82b791df03da3cfeacb3f"
+
+KMETA = "kernel-meta"
+
+SRC_URI = " \
+    git://github.com/raspberrypi/linux.git;name=machine;branch=${LINUX_RPI_BRANCH};protocol=https \
+    git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=${LINUX_RPI_KMETA_BRANCH};destsuffix=${KMETA} \
+    file://powersave.cfg \
+    file://android-drivers.cfg \
+    "
+
+require linux-raspberrypi.inc
+
+KERNEL_DTC_FLAGS += "-@ -H epapr"
+
+RDEPENDS:${KERNEL_PACKAGE_NAME}:raspberrypi-armv7:append = " ${RASPBERRYPI_v7_KERNEL_PACKAGE_NAME}"
+RDEPENDS:${KERNEL_PACKAGE_NAME}-base:raspberrypi-armv7:append = " ${RASPBERRYPI_v7_KERNEL_PACKAGE_NAME}-base"
+RDEPENDS:${KERNEL_PACKAGE_NAME}-image:raspberrypi-armv7:append = " ${RASPBERRYPI_v7_KERNEL_PACKAGE_NAME}-image"
+RDEPENDS:${KERNEL_PACKAGE_NAME}-dev:raspberrypi-armv7:append = " ${RASPBERRYPI_v7_KERNEL_PACKAGE_NAME}-dev"
+RDEPENDS:${KERNEL_PACKAGE_NAME}-vmlinux:raspberrypi-armv7:append = " ${RASPBERRYPI_v7_KERNEL_PACKAGE_NAME}-vmlinux"
+RDEPENDS:${KERNEL_PACKAGE_NAME}-modules:raspberrypi-armv7:append = " ${RASPBERRYPI_v7_KERNEL_PACKAGE_NAME}-modules"
+RDEPENDS:${KERNEL_PACKAGE_NAME}-dbg:raspberrypi-armv7:append = " ${RASPBERRYPI_v7_KERNEL_PACKAGE_NAME}-dbg"
+
+DEPLOYDEP = ""
+DEPLOYDEP:raspberrypi-armv7 = "${RASPBERRYPI_v7_KERNEL}:do_deploy"
+do_deploy[depends] += "${DEPLOYDEP}"
diff --git a/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi_6.6.bb b/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi_6.6.bb
index b4d9953e1e..3b67f16542 100644
--- a/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi_6.6.bb
+++ b/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi_6.6.bb
@@ -1,9 +1,9 @@
-LINUX_VERSION ?= "6.6.22"
+LINUX_VERSION ?= "6.6.63"
 LINUX_RPI_BRANCH ?= "rpi-6.6.y"
 LINUX_RPI_KMETA_BRANCH ?= "yocto-6.6"
 
-SRCREV_machine = "c04af98514c26014a4f29ec87b3ece95626059bd"
-SRCREV_meta = "6a24861d6504575a4a9f92366285332d47c7e111"
+SRCREV_machine = "e442e5c1ab6bff5b5460b4fc949beb72aaf77970"
+SRCREV_meta = "52ff0d75713ce61962b325a2090bd55e216f0cf3"
 
 KMETA = "kernel-meta"