subtree updatesstyhead

poky: subtree update:5d88faa0f3..ecd195a3ef
Aditya Tayade (1):
      e2fsprogs: removed 'sed -u' option

Adrian Freihofer (12):
      oe-selftest: fitimage refactor u-boot-tools-native
      oe-selftest: fitimage drop test-mkimage-wrapper
      oe-selftest: fitimage cleanup asserts
      oe-selftest: fitimage fix test_initramfs_bundle
      kernel-fitimage: fix handling of empty default dtb
      pybootchartgui.py: python 3.12+ regexes
      kernel-fitimage: fix intentation
      kernel-fitimage: fix external dtb check
      uboot-config: fix devtool modify with kernel-fitimage
      devtool: modify kernel adds append twice
      devtool: remove obsolete SRCTREECOVEREDTASKS handling
      cml1: add do_savedefconfig

Alban Bedel (2):
      bind: Fix build with the `httpstats` package config enabled
      util-linux: Add `findmnt` to the bash completion RDEPENDS

Alejandro Hernandez Samaniego (1):
      tclibc-picolibc: Adds a new TCLIBC variant to build with picolibc as C library

Aleksandar Nikolic (2):
      cve-check: Introduce CVE_CHECK_MANIFEST_JSON_SUFFIX
      scripts/install-buildtools: Update to 5.1

Alessandro Pecugi (1):
      runqemu: add sd card device

Alexander Kanavin (100):
      perf: drop newt from tui build requirements
      libnewt: move to meta-oe
      python3: submit deterministic_imports.patch upstream as a ticket
      glib-networking: submit eagain.patch upstream
      psmisc: merge .inc into .bb
      psmisc: drop duplicate entries
      psmisc: remove 0001-Use-UINTPTR_MAX-instead-of-__WORDSIZE.patch
      openssh: drop add-test-support-for-busybox.patch
      libfm-extra: drop unneeded 0001-nls.m4-Take-it-from-gettext-0.15.patch
      glslang: mark 0001-generate-glslang-pkg-config.patch as Inappropriate
      tcp-wrappers: mark all patches as inactive-upstream
      automake: mark new_rt_path_for_test-driver.patch as Inappropriate
      settings-daemon: submit addsoundkeys.patch upstream and update to a revision that has it
      dpkg: mark patches adding custom non-debian architectures as inappropriate for upstream
      libacpi: mark patches as inactive-upstream
      python3: drop deterministic_imports.patch
      lib/oe/recipeutils: return a dict in get_recipe_upgrade_status() instead of a tuple
      lib/recipeutils: add a function to determine recipes with shared include files
      recipeutils/get_recipe_upgrade_status: group recipes when they need to be upgraded together
      devtool/upgrade: use PN instead of BPN for naming newly created upgraded recipes
      devtool/upgrade: rename RECIPE_UPDATE_EXTRA_TASKS -> RECIPE_UPGRADE_EXTRA_TASKS
      python3-jinja2: fix upstream version check
      ca-certificates: get sources from debian tarballs
      pulseaudio, desktop-file-utils: correct freedesktop.org -> www.freedesktop.org SRC_URI
      xf86-video-intel: correct SRC_URI as freedesktop anongit is down
      python3-cython: correct upstream version check
      python3-babel: drop custom PYPI settings
      python3-cython: fix upstream check again
      sysvinit: take release tarballs from github
      bash: upgrade 5.2.21 -> 5.2.32
      boost: upgrade 1.85.0 -> 1.86.0
      ccache: upgrade 4.10.1 -> 4.10.2
      cmake: upgrade 3.30.1 -> 3.30.2
      dpkg: upgrade 1.22.10 -> 1.22.11
      e2fsprogs: upgrade 1.47.0 -> 1.47.1
      epiphany: upgrade 46.0 -> 46.3
      gstreamer1.0: upgrade 1.24.5 -> 1.24.6
      kmod: upgrade 32 -> 33
      kmscube: upgrade to latest revision
      libadwaita: upgrade 1.5.2 -> 1.5.3
      libedit: upgrade 20240517-3.1 -> 20240808-3.1
      libnl: upgrade 3.9.0 -> 3.10.0
      librepo: upgrade 1.17.0 -> 1.18.1
      libva: upgrade 2.20.0 -> 2.22.0
      linux-firmware: upgrade 20240513 -> 20240811
      lua: upgrade 5.4.6 -> 5.4.7
      mpg123: upgrade 1.32.6 -> 1.32.7
      mtools: upgrade 4.0.43 -> 4.0.44
      nghttp2: upgrade 1.62.0 -> 1.62.1
      puzzles: upgrade to latest revision
      python3-dtschema: upgrade 2024.4 -> 2024.5
      python3-uritools: upgrade 4.0.2 -> 4.0.3
      python3-webcolors: upgrade 1.13 -> 24.8.0
      sqlite3: upgrade 3.45.3 -> 3.46.1
      stress-ng: upgrade 0.17.08 -> 0.18.02
      webkitgtk: upgrade 2.44.1 -> 2.44.3
      weston: upgrade 13.0.1 -> 13.0.3
      xkeyboard-config: upgrade 2.41 -> 2.42
      xz: upgrade 5.4.6 -> 5.6.2
      mesa: set PV from the .inc file and not via filenames
      meta/lib/oe/sstatesig.py: do not error out if sstate files fail on os.stat()
      piglit: add a patch to address host contamination for wayland-scanner
      selftest: always tweak ERROR_QA/WARN_QA per package
      selftest: use INIT_MANAGER to enable systemd instead of custom settings
      xmlto: check upstream version tags, not new commits
      glib-2.0: update 2.80.2 -> 2.80.4
      lttng-modules: update 2.13.13 -> 2.13.14
      automake: update 1.16.5 -> 1.17
      fmt: update 10.2.1 -> 11.0.2
      git: 2.45.2 -> 2.46.0
      perlcross: update 1.5.2 -> 1.6
      perl: update 5.38.2 -> 5.40.0
      gnu-config: update to latest revision
      python3-license-expression: update 30.3.0 -> 30.3.1
      python3-pip: 24.0 -> 24.2
      python3-pyopenssl: update 24.1.0 -> 24.2.1
      python3-pyyaml: update 6.0.1 -> 6.0.2
      python3-scons: update 4.7.0 -> 4.8.0
      cargo-c-native: update 0.9.30 -> 0.10.3
      go-helloworld: update to latest revision
      vulkan-samples: update to latest revision
      ffmpeg: update 6.1.1 -> 7.0.2
      libksba: update 1.6.6 -> 1.6.7
      p11-kit: update 0.25.3 -> 0.25.5
      iproute2: upgrade 6.9.0 -> 6.10.0
      ifupdown: upgrade 0.8.41 -> 0.8.43
      libdnf: upgrade 0.73.2 -> 0.73.3
      mmc-utils: upgrade to latest revision
      adwaita-icon-theme: upgrade 46.0 -> 46.2
      hicolor-icon-theme: upgrade 0.17 -> 0.18
      waffle: upgrade 1.8.0 -> 1.8.1
      libtraceevent: upgrade 1.8.2 -> 1.8.3
      alsa-utils: upgrade 1.2.11 -> 1.2.12
      lz4: upgrade 1.9.4 -> 1.10.0
      vte: upgrade 0.74.2 -> 0.76.3
      cracklib: update 2.9.11 -> 2.10.2
      selftest/sstatetests: run CDN mirror check only once
      package_rpm: use zstd's default compression level
      package_rpm: restrict rpm to 4 threads
      ref-manual: merge two separate descriptions of RECIPE_UPGRADE_EXTRA_TASKS

Alexander Sverdlin (1):
      linux-firmware: Move Silabs wfx firmware to a separate package

Alexandre Belloni (1):
      oeqa/selftest/oescripts: pinentry update to 1.3.1

Alexis Lothoré (4):
      oeqa/ssh: allow to retrieve raw, unformatted ouput
      oeqa/utils/postactions: transfer whole archive over ssh instead of doing individual copies
      oeqa/postactions: fix exception handling
      oeqa/postactions: do not uncompress retrieved archive on host

Andrew Oppelt (1):
      testexport: support for executing tests over serial

Andrey Zhizhikin (1):
      devicetree.bbclass: switch away from S = WORKDIR

Antonin Godard (38):
      ref-manual: add missing CVE_CHECK manifest variables
      ref-manual: add new vex class
      ref-manual: add new retain class and variables
      ref-manual: add missing nospdx class
      ref-manual: add new RECIPE_UPGRADE_EXTRA_TASKS variable
      ref-manual: drop siteconfig class
      ref-manual: add missing TESTIMAGE_FAILED_QA_ARTIFACTS
      ref-manual: add missing image manifest variables
      ref-manual: add missing EXTERNAL_KERNEL_DEVICETREE variable
      ref-manual: drop TCLIBCAPPEND variable
      ref-manual: add missing OPKGBUILDCMD variable
      ref-manual: add missing variable PRSERV_UPSTREAM
      ref-manual: merge patch-status-* to patch-status
      ref-manual: add mission pep517-backend sanity check
      release-notes-5.1: update release note for styhead
      release-notes-5.1: fix spdx bullet point
      ref-manual: fix ordering of insane checks list
      release-notes-5.1: add beaglebone-yocto parselogs test oeqa failure
      ref-manual: structure.rst: document missing tmp/ dirs
      overview-manual: concepts: add details on package splitting
      ref-manual: faq: add q&a on class appends
      ref-manual: release-process: update releases.svg
      ref-manual: release-process: refresh the current LTS releases
      ref-manual: release-process: update releases.svg with month after "Current"
      ref-manual: release-process: add a reference to the doc's release
      ref-manual: devtool-reference: refresh example outputs
      ref-manual: devtool-reference: document missing commands
      conf.py: rename :cve: role to :cve_nist:
      doc: Makefile: remove inkscape, replace by rsvg-convert
      doc: Makefile: add support for xelatex
      doc: add a download page for epub and pdf
      sphinx-static/switchers.js.in: do not refer to URL_ROOT anymore
      migration-guides: 5.1: fix titles
      conf.py: add a bitbake_git extlink
      dev-manual: document how to provide confs from layer.conf
      dev-manual: bblock: use warning block instead of attention
      standards.md: add a section on admonitions
      ref-manual: classes: fix bin_package description

Benjamin Szőke (1):
      mc: fix source URL

Bruce Ashfield (40):
      linux-yocto/6.6: update to v6.6.34
      linux-yocto/6.6: update to v6.6.35
      linux-yocto/6.6: fix AMD boot trace
      linux-yocto/6.6: update to v6.6.36
      linux-yocto/6.6: update to v6.6.38
      linux-yocto/6.6: update to v6.6.40
      linux-yocto/6.6: update to v6.6.43
      linux-libc-headers: update to v6.10
      kernel-devsrc: remove 64 bit vdso cmd files
      linux-yocto: introduce 6.10 reference kernel
      linux-yocto/6.10: update to v6.10
      linux-yocto/6.10: update to v6.10.2
      linux-yocto/6.10: update to v6.10.3
      oeqa/runtime/parselogs: update pci BAR ignore for kernel 6.10
      oeqa/runtime/parselogs: mips: skip sysctl warning
      yocto-bsp: set temporary preferred version for genericarm64
      lttng-modules: backport patches for kernel v6.11
      linux-yocto-dev: bump to v6.11
      linux-yocto-rt/6.10: update to -rt14
      linux-yocto/6.10: cfg: disable nfsd legacy client tracking
      linux-yocto/6.6: update to v6.6.44
      poky/poky-tiny: bump preferred version to 6.10
      linux-yocto/6.6: update to v6.6.45
      linux-yocto/6.6: fix genericarm64 config warning
      linux-yocto/6.6: update to v6.6.47
      linux-yocto/6.10: fix CONFIG_PWM_SYSFS config warning
      linux-yocto/6.10: update to v6.10.7
      linux-yocto/6.10: update to v6.10.8
      linux-yocto/6.6: update to v6.6.49
      linux-yocto/6.6: update to v6.6.50
      linux-yocto/6.10: cfg: arm64 configuration updates
      linux-yocto/6.6: update to v6.6.52
      linux-yocto/6.6: update to v6.6.54
      linux-yocto/6.10: update to v6.10.11
      linux-yocto/6.10: update to v6.10.12
      linux-yocto/6.10: update to v6.10.13
      linux-yocto/6.10: update to v6.10.14
      linux-yocto/6.10: genericarm64.cfg: enable CONFIG_DMA_CMA
      linux-yocto/6.10: cfg: gpio: allow to re-enable the deprecated GPIO sysfs interface
      linux-yocto/6.10: bsp/genericarm64: disable ARM64_SME

Carlos Alberto Lopez Perez (1):
      icu: Backport patch to fix build issues with long paths (>512 chars)

Changhyeok Bae (1):
      ethtool: upgrade 6.7 -> 6.9

Changqing Li (11):
      pixman: fix do_compile error
      vulkan-samples: fix do_compile error when -Og enabled
      multilib.conf: remove appending to PKG_CONFIG_PATH
      pixman: update patch for fixing inline failure with -Og
      rt-tests: rt_bmark.py: fix TypeError
      libcap-ng: update SRC_URI
      apt-native: don't let dpkg overwrite files by default
      webkitgtk: fix do_configure error on beaglebone-yocto
      bitbake.conf: drop VOLATILE_LOG_DIR, use FILESYSTEM_PERMS_TABLES instead
      bitbake.conf: drop VOLATILE_TMP_DIR, use FILESYSTEM_PERMS_TABLES instead
      rxvt-unicode.inc: disable the terminfo installation by setting TIC to :

Chen Qi (13):
      pciutils: remove textrel INSANE_SKIP
      systemd: upgrade from 255.6 to 256
      systemd-boot: upgrade from 255.6 to 256
      util-linux/util-linux-libuuid: upgrade from 2.39.3 to 2.40.1
      libssh2: remove util-linux-col from ptest dependencies
      kexec-tools: avoid kernel warning
      json-c: use upstream texts for SUMMARY and DESCRIPTION
      util-linux/util-linux-libuuid: upgrade from 2.40.1 to 2.40.2
      shadow: upgrade from 4.15.1 to 4.16.0
      json-c: avoid ptest failure caused by valgrind
      toolchain-shar-extract.sh: exit when post-relocate-setup.sh fails
      libgfortran: fix buildpath QA issue
      shadow: use update-alternatives to handle groups.1

Chris Laplante (4):
      bitbake: ui/knotty: print log paths for failed tasks in summary
      bitbake: ui/knotty: respect NO_COLOR & check for tty; rename print_hyperlink => format_hyperlink
      bitbake: persist_data: close connection in SQLTable __exit__
      bitbake: fetch2: use persist_data context managers

Chris Spencer (1):
      cargo_common.bbclass: Support git repos with submodules

Christian Lindeberg (3):
      bitbake: fetch2: Add gomod fetcher
      bitbake: fetch2: Add gomodgit fetcher
      bitbake: tests/fetch: Update GoModTest and GoModGitTest

Christian Taedcke (1):
      iptables: fix memory corruption when parsing nft rules

Clara Kowalsky (1):
      resulttool: Add support to create test report in JUnit XML format

Claus Stovgaard (1):
      lib/oe/package-manager: skip processing installed-pkgs with empty globs

Clayton Casciato (1):
      uboot-sign: fix concat_dtb arguments

Clément Péron (1):
      openssl: Remove patch already upstreamed

Colin McAllister (2):
      udev-extraconf: Add collect flag to mount
      busybox: Fix cut with "-s" flag

Corentin Lévy (1):
      python3-libarchive-c: add ptest

Dan McGregor (1):
      bitbake: prserv: increment 9 to 10 correctly

Daniel McGregor (1):
      libpam: use libdir in conditional

Daniel Semkowicz (1):
      os-release: Fix VERSION_CODENAME in case it is empty

Daniil Batalov (1):
      spdx30_tasks.py: fix typo in call of is_file method

Deepesh Varatharajan (1):
      rust: Rust Oe-Selftest Reduce the testcases in exclude list

Deepthi Hemraj (5):
      llvm: Fix CVE-2024-0151
      glibc: stable 2.39 branch updates.
      binutils: stable 2.42 branch updates
      glibc: stable 2.40 branch updates
      glibc: stable 2.40 branch updates.

Denys Dmytriyenko (3):
      llvm: extend llvm-config reproducibility fix to nativesdk class
      nativesdk-libtool: sanitize the script, remove buildpaths
      gcc: unify cleanup of include-fixed, apply to cross-canadian

Divya Chellam (1):
      python3: Upgrade 3.12.5 -> 3.12.6

Dmitry Baryshkov (12):
      mesa: fix QA warnings caused by freedreno tools
      xserver-xorg: fix CVE-2023-5574 status
      lib/spdx30_tasks: improve error message
      linux-firmware: make qcom-sc8280xp-lenovo-x13s-audio install Linaro licence
      linux-firmware: add packages with SM8550 and SM8650 audio topology files
      linux-firmware: move -qcom-qcm2290-wifi before -ath10k
      linux-firmware: use wildcards to grab all qcom-qcm2290/qrb4210 wifi files
      linux-firmware: package qcom-vpu firmware
      linux-firmware: restore qcom/vpu-1.0/venus.mdt compatibility symlink
      piglit: add missing dependency on wayland
      linux-firmware: add packages for Qualcomm XElite GPU firmware
      linux-firmware: split ath10k package

Enguerrand de Ribaucourt (6):
      bitbake: fetch2/npmsw: fix fetching git revisions not on master
      bitbake: fetch2/npmsw: allow packages not declaring a registry version
      npm: accept unspecified versions in package.json
      recipetool: create_npm: resolve licenses defined in package.json
      recipetool: create: split guess_license function
      recipetool: create_npm: reuse license utils

Enrico Jörns (2):
      bitbake: bitbake-diffsigs: fix handling when finding only a single sigfile
      archiver.bbclass: fix BB_GENERATE_MIRROR_TARBALLS checking

Esben Haabendal (1):
      mesa: Fix build with etnaviv gallium driver

Etienne Cordonnier (3):
      oeqa/runtime: fix race-condition in minidebuginfo test
      bitbake: gcp.py: remove slow calls to gsutil stat
      systemd: make home directory readable by systemd-coredump

Fabio Estevam (1):
      u-boot: upgrade 2024.04 -> 2024.07

Florian Amstutz (1):
      u-boot: Fix potential index error issues in do_deploy with multiple u-boot configurations

Gassner, Tobias.ext (1):
      rootfs: Ensure run-postinsts is not uninstalled for read-only-rootfs-delayed-postinsts

Gauthier HADERER (1):
      populate_sdk_ext.bclass: make sure OECORE_NATIVE_SYSROOT is exported.

Guðni Már Gilbert (7):
      python3-setuptools: drop python3-2to3 from RDEPENDS
      bluez5: drop modifications to Python shebangs
      bluez5: cleanup redundant backslashes
      python3-attrs: drop python3-ctypes from RDEPENDS
      gobject-introspection: split tools and giscanner into a separate package
      bluez5: upgrade 5.77 -> 5.78
      bluez5: remove redundant patch for MAX_INPUT

Harish Sadineni (4):
      gcc-runtime: enabling "network" task specific flag
      oeqa/selftest/gcc: Fix host key verfication failure
      oeqa/selftest/gcc: Fix kex exchange identification error
      binutils: Add missing perl modules to RDEPENDS for nativsdk variant

Het Patel (1):
      zlib: Add CVE_PRODUCT to exclude false positives

Hiago De Franco (1):
      weston: backport patch to allow neatvnc < v0.9.0

Hongxu Jia (1):
      gcc-source: Fix racing on building gcc-source-14.2.0 and lib32-gcc-source-14.2.0

Intaek Hwang (6):
      alsa-plugins: set CVE_PRODUCT
      mpfr: set CVE_PRODUCT
      libatomic-ops: set CVE_PRODUCT
      gstreamer1.0-plugins-bad: set CVE_PRODUCT
      python3-lxml: set CVE_PRODUCT
      python3-psutil: set CVE_PRODUCT

Jaeyoon Jung (2):
      makedevs: Fix issue when rootdir of / is given
      makedevs: Fix matching uid/gid

Jagadeesh Krishnanjanappa (1):
      tune-cortexa32: set tune feature as armv8a

Jan Vermaete (2):
      python3-websockets: added python3-zipp as RDEPENDS
      ref-manual: added wic.zst to the IMAGE_TYPES

Jinfeng Wang (2):
      glib-2.0: fix glib-2.0 ptest failure when upgrading tzdata2024b
      tzdata/tzcode-native: upgrade 2024a -> 2024b

Johannes Schneider (3):
      systemd: add PACKAGECONFIG for bpf-framework
      systemd: bpf-framework: 'propagate' the '--sysroot=' for crosscompilation
      systemd: bpf-framework: pass 'recipe-sysroot' to BPF compiler

John Ripple (1):
      packagegroup-core-tools-profile.bb: Enable aarch64 valgrind

Jon Mason (6):
      oeqa/runtime/ssh: add retry logic and sleeps to allow for slower systems
      oeqa/runtime/ssh: check for all errors at the end
      docs: modify reference from python2.py to python.py
      kernel.bbclass: remove unused CMDLINE_CONSOLE
      oeqa/runtime/ssh: increase the number of attempts
      wpa-supplicant: add patch to check for kernel header version when compiling macsec

Jonas Gorski (1):
      rootfs-postcommands.bbclass: make opkg status reproducible

Jonas Munsin (1):
      bzip2: set CVE_PRODUCT

Jonathan GUILLOT (1):
      cronie: add inotify PACKAGECONFIG option

Jose Quaresma (14):
      go: upgrade 1.22.3 -> 1.22.4
      go: drop the old 1.4 bootstrap C version
      openssh: fix CVE-2024-6387
      go: upgrade 1.22.4 -> 1.22.5
      openssh: drop rejected patch fixed in 8.6p1 release
      openssh: systemd sd-notify patch was rejected upstream
      oeqa/runtime/scp: requires openssh-sftp-server
      libssh2: fix ptest regression with openssh 9.8p1
      openssh: systemd notification was implemented upstream
      openssh: upgrade 9.7p1 -> 9.8p1
      libssh2: disable-DSA-by-default
      go: upgrade 1.22.5 -> 1.22.6
      bitbake: bitbake: doc/user-manual: Update the BB_HASHSERVE_UPSTREAM
      oeqa/selftest: Update the BB_HASHSERVE_UPSTREAM

Joshua Watt (22):
      binutils-cross-testsuite: Rename to binutils-testsuite
      classes/spdx-common: Move SPDX_SUPPLIER
      scripts/pull-spdx-licenses.py: Add script
      licenses: Update to SPDX license version 3.24.0
      classes/create-spdx-2.2: Handle SemVer License List Versions
      classes-recipe/image: Add image file manifest
      classes-global/staging: Exclude do_create_spdx from automatic sysroot extension
      classes-recipe/image_types: Add SPDX_IMAGE_PURPOSE to images
      classes-recipe: nospdx: Add class
      classes-recipe/baremetal-image: Add image file manifest
      selftest: sstatetests: Exclude all SPDX tasks
      classes/create-spdx-2.2: Handle empty packages
      classes/create-spdx-3.0: Add classes
      selftest: spdx: Add SPDX 3.0 test cases
      classes/spdx-common: Move to library
      classes/create-spdx-3.0: Move tasks to library
      Switch default spdx version to 3.0
      classes-recipe/multilib_script: Expand before splitting
      classes/create-spdx-image-3.0: Fix SSTATE_SKIP_CREATION
      lib/spdx30_tasks: Report all missing providers
      lib/oe/sbom30.py: Fix build parameters
      bitbake: Remove custom exception backtrace formatting

Julien Stephan (5):
      README: add instruction to run Vale on a subset
      documentation: Makefile: add SPHINXLINTDOCS to specify subset to sphinx-lint
      styles: vocabularies: Yocto: add sstate
      ref-manual: variables: add SIGGEN_LOCKEDSIGS* variables
      dev-manual: add bblock documentation

Jörg Sommer (7):
      classes/kernel: No symlink in postinst without KERNEL_IMAGETYPE_SYMLINK
      ref-manual: add DEFAULT_TIMEZONE variable
      ptest-runner: Update 2.4.4 -> 2.4.5
      runqemu: Fix detection of -serial parameter
      buildcfg.py: add dirty status to get_metadata_git_describe
      doc/features: remove duplicate word in distribution feature ext2
      doc/features: describe distribution feature pni-name

Kai Kang (3):
      glibc: fix fortran header file conflict for arm
      systemd: fix VERSION_TAG related build error
      kexec-tools: update COMPATIBLE_HOST because of makedumpfile

Katawann (1):
      cve-check: add field "modified" to JSON report

Khem Raj (38):
      llvm: Update to 18.1.8
      utils.bbclass: Use objdump instead of readelf to compute SONAME
      mesa: Including missing LLVM header
      mesa: Add packageconfig knob to control tegra gallium driver
      gdb: Upgrade to 15.1 release
      busybox: Fix tc applet build when using kernel 6.8+
      busybox: CVE-2023-42364 and CVE-2023-42365 fixes
      busybox: Add fix for CVE-2023-42366
      gcc-14: Mark CVE-2023-4039 as fixed in GCC14+
      systemd: Replace deprecate udevadm command
      glibc: Upgrade to 2.40
      glibc: Remove redundant configure option --disable-werror
      libyaml: Update status of CVE-2024-35328
      libyaml: Change CVE status to wontfix
      binutils: Upgrade to 2.43 release
      binutils: Fix comment about major version
      gcc: Upgrade to GCC 14.2
      gnupg: Document CVE-2022-3219 and mark wontfix
      systemd: Refresh patch to remove patch-fuzz
      quota: Apply a backport to fix basename API with musl
      bluez5: Fix build with musl
      musl: Update to 1.2.5 release
      musl: Upgrade to latest tip of trunk
      gdb: Fix build with latest clang
      fmt: Get rid of std::copy
      aspell: Backport a fix to build with gcc-15/clang-19
      openssh: Mark CVE-2023-51767 as wont-fix
      python: Backport fixes for CVE-2024-7592
      ffmpeg: Fix build on musl linux systems
      kea: Replace Name::NameString with vector of uint8_t
      webkitgtk: Fix build issues with clang-19
      glibc: Fix the arm/arm64 worsize.h uniificationb patch
      gcc: Fix spurious '/' in GLIBC_DYNAMIC_LINKER on microblaze
      libpcre2: Update base uri PhilipHazel -> PCRE2Project
      linux-yocto: Enable l2tp drivers when ptest featuee is on
      bluez: Fix mesh builds on musl
      qemu: Fix build on musl/riscv64
      ffmpeg: Disable asm optimizations on x86

Konrad Weihmann (6):
      testimage: fallback for empty IMAGE_LINK_NAME
      python3-docutils: fix interpreter lines
      testexport: fallback for empty IMAGE_LINK_NAME
      python_flit_core: remove python3 dependency
      runqemu: keep generating tap devices
      runqemu: remove unused uid variable

Lee Chee Yang (10):
      migration-guides: add release notes for 4.0.19
      migration-guides: add release notes for 5.0.2
      migration-guide: add release notes for 4.0.20
      migration-guides: add release notes for 5.0.3
      migration-guide: add release notes for 4.0.21
      release-notes-5.1: update for several section
      migration-guide: add release notes for 4.0.22
      migration-guides: add release notes for 5.0.4
      migration-guides: add release notes for 5.0.5
      migration-guides: add release notes for 4.0.23

Leon Anavi (1):
      u-boot.inc: WORKDIR -> UNPACKDIR transition

Leonard Göhrs (1):
      bitbake: fetch2/npm: allow the '@' character in package names

Louis Rannou (1):
      image_qa: fix error handling

Marc Ferland (2):
      appstream: refresh patch
      appstream: add qt6 PACKAGECONFIG option

Marcus Folkesson (1):
      bootimg-partition: break out code to a common library.

Mark Hatle (7):
      create-sdpx-2.2.bbclass: Switch from exists to isfile checking debugsrc
      package.py: Fix static debuginfo split
      package.py: Fix static library processing
      selftest-hardlink: Add additional test cases
      spdx30_tasks.py: switch from exists to isfile checking debugsrc
      create-spdx-*: Support multilibs via SPDX_MULTILIB_SSTATE_ARCHS
      oeqa sdk cases: Skip SDK test cases when TCLIBC is newlib

Markus Volk (4):
      libinput: update 1.25.0 -> 1.26.1
      systemd: dont set polkit permissions manually
      gtk4: update 4.14.4 -> 4.14.5
      gcc: add a backport patch to fix an issue with tzdata 2024b

Marta Rybczynska (9):
      classes/kernel.bbclass: update CVE_PRODUCT
      cve-check: encode affected product/vendor in CVE_STATUS
      cve-extra-inclusions: encode CPEs of affected packages
      cve-check: annotate CVEs during analysis
      vex.bbclass: add a new class
      cve-check-map: add new statuses
      selftest: add test_product_match
      cve-json-to-text: add script
      cve-check: remove the TEXT format support

Martin Hundeb?ll (1):
      ofono: upgrade 2.7 -> 2.8

Martin Jansa (10):
      libgfortran.inc: fix nativesdk-libgfortran dependencies
      hdparm: drop NO_GENERIC_LICENSE[hdparm]
      gstreamer1.0-plugins-bad: add PACKAGECONFIG for gtk3
      kernel.bbclass: add original package name to RPROVIDES for -image and -base
      meta-world-pkgdata: Inherit nopackages
      populate_sdk_base: inherit nopackages
      mc: set ac_cv_path_ZIP to avoid buildpaths QA issues
      bitbake.conf: DEBUG_PREFIX_MAP: add -fmacro-prefix-map for STAGING_DIR_NATIVE
      bitbake: Revert "fetch2/gitsm: use configparser to parse .gitmodules"
      ffmpeg: fix packaging examples

Mathieu Dubois-Briand (1):
      oeqa/postactions: Fix archive retrieval from target

Matthew Bullock (1):
      openssh: allow configuration of hostkey type

Matthias Pritschet (1):
      ref-manual: fix typo and move SYSROOT_DIRS example

Michael Halstead (1):
      yocto-uninative: Update to 4.6 for glibc 2.40

Michael Opdenacker (1):
      doc: Makefile: publish pdf and epub versions too

Michal Sieron (1):
      insane: remove obsolete QA errors

Mikko Rapeli (2):
      systemd: update from 256 to 256.4
      ovmf-native: remove .pyc files from install

Mingli Yu (1):
      llvm: Enable libllvm for native build

Niko Mauno (17):
      dnf/mesa: Fix missing leading whitespace with ':append'
      systemd: Mitigate /var/log type mismatch issue
      systemd: Mitigate /var/tmp type mismatch issue
      libyaml: Amend CVE status as 'upstream-wontfix'
      image_types.bbclass: Use --force also with lz4,lzop
      util-linux: Add PACKAGECONFIG option to mitigate rootfs remount error
      iw: Fix LICENSE
      dejagnu: Fix LICENSE
      unzip: Fix LICENSE
      zip: Fix LICENSE
      tiff: Fix LICENSE
      gcr: Fix LICENSE
      python3-maturin: Fix cross compilation issue for armv7l, mips64, ppc
      bitbake.conf: Mark VOLATILE_LOG_DIR as obsolete
      bitbake.conf: Mark VOLATILE_TMP_DIR as obsolete
      docs: Replace VOLATILE_LOG_DIR with FILESYSTEM_PERMS_TABLES
      docs: Replace VOLATILE_TMP_DIR with FILESYSTEM_PERMS_TABLES

Ola x Nilsson (4):
      scons.bbclass: Add scons class prefix to do_configure
      insane: Remove redundant returns
      ffmpeg: Package example files in ffmpeg-examples
      glibc: Fix missing randomness in __gen_tempname

Oleksandr Hnatiuk (2):
      icu: remove host references in nativesdk to fix reproducibility
      gcc: remove paths to sysroot from configargs.h and checksum-options for gcc-cross-canadian

Otavio Salvador (1):
      u-boot: Ensure we use BFD as linker even if using GCC for it

Patrick Wicki (1):
      gpgme: move gpgme-tool to own sub-package

Paul Barker (1):
      meta-ide-support: Mark recipe as MACHINE-specific

Paul Eggleton (1):
      classes: add new retain class for retaining build results

Paul Gerber (1):
      uboot-sign: fix counters in do_uboot_assemble_fitimage

Pavel Zhukov (1):
      package_rpm: Check if file exists before open()

Pedro Ferreira (2):
      buildhistory: Fix intermittent package file list creation
      buildhistory: Restoring files from preserve list

Peter Kjellerstedt (9):
      systemd: Correct the indentation in do_install()
      systemd: Move the MIME file to a separate package
      license_image.bbclass: Rename license-incompatible to license-exception
      test-manual: Add a missing dot
      systemd.bbclass: Clean up empty parent directories
      oeqa/selftest/bbclasses: Add tests for systemd and update-rc.d interaction
      systemd: Remove a leftover reference to ${datadir}/mime
      bitbake: fetch2/gomod: Support URIs with only a hostname
      image.bbclass: Drop support for ImageQAFailed exceptions in image_qa

Peter Marko (17):
      cargo: remove True option to getVar calls
      poky-sanity: remove True option to getVar calls
      flac: fix buildpaths warnings
      bitbake: fetch/clearcase: remove True option to getVar calls in clearcase module
      busybox: Patch CVE-2021-42380
      busybox: Patch CVE-2023-42363
      libstd-rs,rust-cross-canadian: set CVE_PRODUCT to rust
      glibc: cleanup old cve status
      libmnl: explicitly disable doxygen
      libyaml: ignore CVE-2024-35326
      libyaml: Ignore CVE-2024-35325
      wpa-supplicant: Ignore CVE-2024-5290
      cve-check: add support for cvss v4.0
      go: upgrade 1.22.6 -> 1.22.7
      go: upgrade 1.22.7 -> 1.22.8
      cve-check: do not skip cve status description after :
      cve-check: fix malformed cve status description with : characters

Philip Lorenz (1):
      curl: Reenable auth support for native and nativesdk

Primoz Fiser (2):
      pulseaudio: Add PACKAGECONFIG for optional OSS support
      pulseaudio: Remove from time64.inc exception list

Purushottam Choudhary (2):
      kmscube: Upgrade to latest revision
      virglrenderer: Add patch to fix -int-conversion build issue

Quentin Schulz (4):
      bitbake: doc: releases: mark mickledore as outdated
      bitbake: doc: releases: add nanbield to the outdated manuals
      bitbake: doc: releases: add scarthgap
      weston-init: fix weston not starting when xwayland is enabled

Rasmus Villemoes (3):
      iptables: remove /etc/ethertypes
      openssh: factor out sshd hostkey setup to separate function
      systemd: include sysvinit in default PACKAGECONFIG only if in DISTRO_FEATURES

Regis Dargent (1):
      udev-extraconf: fix network.sh script did not configure hotplugged interfaces

Ricardo Simoes (2):
      volatile-binds: Do not create workdir if OverlayFS is disabled
      volatile-binds: Remove workdir if OverlayFS fails

Richard Purdie (116):
      maintainers: Drop go-native as recipe removed
      oeqa/runtime/parselogs: Add some kernel log trigger keywords
      bitbake: codeparser/data: Ensure module function contents changing is accounted for
      bitbake: codeparser: Skip non-local functions for module dependencies
      native/nativesdk: Stop overriding unprefixed *FLAGS variables
      qemu: Upgrade 9.0.0 -> 9.0.1
      oeqa/runtime/ssh: In case of failure, show exit code and handle -15 (SIGTERM)
      oeqa/selftest/reproducibile: Explicitly list virtual targets
      abi_version/package: Bump hashequiv version and package class version
      testimage/postactions: Allow artifact collection to be skipped
      python3: Drop generating a static libpython
      bitbake.conf: Drop obsolete debug compiler options
      bitbake.conf: Further cleanup compiler optimization flags
      oeqa/selftest/incompatible_lic: Ensure tests work with ERROR_QA changes
      oeqa/selftest/locale: Ensure tests work with ERROR_QA changes
      meson: Fix native meson config
      busybox: reconfigure wget https support by default for security
      poky-tiny: Update FULL_OPTIMIZATION to match core changes
      icu/perf: Drop SPDX_S variable
      insane: Promote long standing warnings to errors
      selftest/fortran-helloworld: Fix buildpaths error
      build-appliance-image: Update to master head revision
      distro/include: Add yocto-space-optimize, disabling debugging for large components
      testimage: Fix TESTIMAGE_FAILED_QA_ARTIFACTS setting
      oeqa/postactions: Separate artefact collection from test result collection
      qemu: Drop mips workaround
      poky: Enable yocto-space-optimize.inc
      time64.inc: Add warnings exclusion for known toolchain problems for now
      pseudo: Fix to work with glibc 2.40
      pseudo: Update to include open symlink handling bugfix
      create-spdx-3.0/populate_sdk_base: Add SDK_CLASSES inherit mechanism to fix tarball SPDX manifests
      libtool: Upgrade 2.5.0 -> 2.5.1
      qemu: Upgrade 9.0.1 -> 9.0.2
      populate_sdk_base: Ensure nativesdk targets have do_package_qa run
      cve_check: Use a local copy of the database during builds
      pixman: Backport fix for recent binutils
      musl: Show error when used with multilibs
      sdpx: Avoid loading of SPDX_LICENSE_DATA into global config
      perf: Drop perl buildpaths skip
      m4: Drop ptest INSANE_SKIPs
      gettext: Drop ptest INSANE_SKIPs
      glibc-y2038-tests: Fix debug split and drop INSANE_SKIPs
      glibc-y2038-tests: Don't force distro policy
      glib-initial: Inherit nopackages
      vim: Drop vim-tools INSANE_SKIP as not needed
      coreutils: Fix intermittent ptest issue
      coreutils: Update merged patch to backport status
      bitbake.conf: Add truncate to HOSTTOOLS
      bitbake.conf: Include cve-check-map earlier, before distro
      bitbake: BBHandler: Handle comments in addtask/deltask
      bitbake: cache: Drop unused function
      bitbake: cookerdata: Separate out data_hash and hook to tinfoil
      bitbake: BBHandler/ast: Improve addtask handling
      bitbake: build: Ensure addtask before/after tasknames have prefix applied
      bitbake: codeparser: Allow code visitor expressions to be declared in metadata
      lib/oe: Use new visitorcode functionality for qa.handle_error()
      insane: Optimise ERROR_QA/WARN_QA references in do_populate_sysroot
      insane: Drop oe.qa.add_message usage
      insane: Add missing vardepsexclude
      insane: Further simplify code
      insane: Allow ERROR_QA to use 'contains' hash optimisations for do_package_qa
      selftest/sstatetests: Extend to cover ERROR_QA/WARN_QA common issues
      lz4: Fix static library reproducibility issue
      lz4: Disable static libraries again
      abi-version/ssate: Bump to avoid systemd hash corruption issue
      buildhistory: Simplify intercept call sites and drop SSTATEPOSTINSTFUNC usage
      sstate: Drop SSTATEPOSTINSTFUNC support
      lttng-tools: 2.13.13 -> 2.13.14
      libtool: 2.5.1 -> 2.5.2
      gettext: Drop obsolete ptest conditional in do_install
      elfutils: Drop obsolete ptest conditional in do_install
      expat: 2.6.2 -> 2.6.3
      license: Fix directory layout issues
      sstate: Make do_recipe_qa and do_populate_lic non-arch specific
      bitbake: siggen: Fix rare file-checksum hash issue
      insane: Remove dependency on TCLIBC from QA test
      conf/defaultsetup.conf: Drop TCLIBCAPPEND
      poky.conf: Drop TCLIBCAPPEND
      layer.conf: Drop scarthgap namespace from LAYERSERIES
      layer.conf: Update to styhead
      Revert "python3-setuptools: upgrade 72.1.0 -> 72.2.0"
      ruby: Make docs generation deterministic
      libedit: Make docs generation deterministic
      poky-tiny: Drop TCLIBCAPPEND
      libsdl2: Fix non-deterministic configure option for libsamplerate
      bitbake: toaster: Update fixtures for styhead
      scripts/install-buildtools: Update to 5.0.3
      build-appliance-image: Update to master head revision
      poky.conf: Bump version for 5.1 styhead release
      build-appliance-image: Update to master head revision
      bitbake: fetch2/git: Use quote from shlex, not pipes
      efi-bootdisk.wks: Increase overhead-factor to avoid test failures
      binutils: Fix binutils mingw packaging
      bitbake: tests/fetch: Use our own mirror of sysprof to decouple from gnome gitlab
      bitbake: tests/fetch: Use our own mirror of mobile-broadband-provider to decouple from gnome gitlab
      pseudo: Fix envp bug and add posix_spawn wrapper
      oeqa/runtime/ssh: Rework ssh timeout
      oeqa/runtime/ssh: Fix incorrect timeout fix
      qemurunner: Clean up serial_lock handling
      bitbake: fetch/wget: Increase timeout to 100s from 30s
      openssl: Fix SDK environment script to avoid unbound variable
      bitbake: runqueue: Fix performance of multiconfigs with large overlap
      bitbake: runqueue: Optimise setscene loop processing
      bitbake: runqueue: Fix scenetask processing performance issue
      do_package/sstate/sstatesig: Change timestamp clamping to hash output only
      selftest/reproducible: Drop rawlogs
      selftest/reproducible: Clean up pathnames
      resulttool: Allow store to filter to specific revisions
      resulttool: Use single space indentation in json output
      oeqa/utils/gitarchive: Return tag name and improve exclude handling
      resulttool: Fix passthrough of --all files in store mode
      resulttool: Add --logfile-archive option to store mode
      resulttool: Handle ltp rawlogs as well as ptest
      resulttool: Clean up repoducible build logs
      resulttool: Trim the precision of duration information
      resulttool: Improve repo layout for oeselftest results

Robert Joslyn (1):
      curl: Update to 8.9.1

Robert Yang (8):
      bitbake: cache: Remove invalid symlink for bb_cache.dat
      bitbake: fetch2/git: Use git shallow fetch to implement clone_shallow_local()
      bitbake: bitbake: tests/fetch: Update GitShallowTest for clone_shallow_local()
      bitbake: data_smart: Improve performance for VariableHistory
      release-notes-5.0.rst: NO_OUTPUT -> NO_COLOR
      bitbake: gitsm: Add call_process_submodules() to remove duplicated code
      bitbake: gitsm: Remove downloads/tmpdir when failed
      cml1.bbclass: do_diffconfig: Don't override .config with .config.orig

Rohini Sangam (1):
      vim: Upgrade 9.1.0698 -> 9.1.0764

Ross Burton (92):
      expect: fix configure with GCC 14
      expect: update code for Tcl channel implementation
      libxcrypt: correct the check for a working libucontext.h
      bash: fix configure checks that fail with GCC 14.1
      gstreamer1.0: disable flaky baseparser tests
      librsvg: don't try to run target code at build time
      librsvg: upgrade to 2.57.3
      linux-libc-headers: remove redundant install_headers patch
      glibc: add task to list exported symbols
      oeqa/sdk: add out-of-tree kernel module building test
      openssl: disable tests unless ptest is enabled
      openssl: strip the test suite
      openssl: rewrite ptest installation
      ell: upgrade 0.66 -> 0.67
      ofono: upgrade 2.8 -> 2.9
      ruby: upgrade 3.3.0 -> 3.3.4
      gtk+3: upgrade 3.24.42 -> 3.24.43
      pango: upgrade 1.52.2 -> 1.54.0
      Revert "python3: drop deterministic_imports.patch"
      python3: add dependency on -compression to -core
      python3-jsonschema: rename nongpl PACKAGECONFIG
      python3-setuptools: RDEPEND on python3-unixadmin
      python3-poetry-core: remove python3-pathlib2 dependency
      pytest-runner: remove python3-py dependency
      python3-chardet: remove pytest-runner DEPENDS
      python3-websockets: remove unused imports
      python3-beartype: add missing RDEPENDS
      python3-jsonschema: remove obsolete RDEPENDS
      python3-pluggy: clean up RDEPENDS
      python3-scons: remove obsolete RDEPENDS
      gi-docgen: remove obsolete python3-toml dependency
      python3-jinja2: remove obsolete python3-toml dependency
      python3-setuptools-rust: remove obsolete python3-toml dependency
      python3-setuptools-scm: remove obsolete python3-tomli dependency
      python3-zipp: remove obsolete dependencies
      python3-importlib-metadata: remove obsolete dependencies
      python3-pathspec: use python_flit_core
      python3-pyasn1: merge bb/inc
      python3-pyasn1: use python_setuptools_build_meta build class
      python3-beartype: use python_setuptools_build_meta build class
      python3-cffi: use python_setuptools_build_meta build class
      python3-psutil: use python_setuptools_build_meta build class
      python3-pycryptodome(x): use python_setuptools_build_meta build class
      python3-pyelftools: use python_setuptools_build_meta build class
      python3-ruemel-yaml: use python_setuptools_build_meta build class
      python3-scons: use python_setuptools_build_meta build class
      python3-websockets: use python_setuptools_build_meta build class
      python3-setuptools-scm: remove python3-tomli dependency
      python3-spdx-tools: use python_setuptools_build_meta build class
      python3-subunit: use python_setuptools_build_meta build class
      python3-uritools: use python_setuptools_build_meta build class
      python3-yamllint: use python_setuptools_build_meta build class
      python3-mako: add dependency on python3-misc for timeit
      python3-uritools: enable ptest
      gi-docgen: upgrade to 2024.1
      python3-pytest: clean up RDEPENDS
      libcap-ng: clean up recipe
      glib-networking: upgrade 2.78.1 -> 2.80.0
      python3-unittest-automake-output: add dependency on unittest
      python3-idna: generalise RDEPENDS
      python3-jsonpointer: upgrade 2.4 -> 3.0.0
      ptest-packagelists: sort entries
      python3-cffi: generalise RDEPENDS
      python3-cffi: enable ptest
      python3-packaging: enable ptest
      python3-idna: enable ptest
      setuptools3: check for a PEP517 build system selection
      insane: add pep517-backend to WARN_QA
      python3-numpy: ignore pep517-backend warnings
      bmaptool: temporarily silence the pep517-backend warning
      meson: upgrade 1.4.0 -> 1.5.1
      python3-pathlib2: remove recipe (moved to meta-python)
      python3-rfc3986-validator: remove recipe (moved to meta-python)
      python3-py: remove recipe (moved to meta-python)
      pytest-runner: remove recipe (moved to meta-python)
      python3-importlib-metadata: remove recipe (moved to meta-python)
      python3-toml: remove recipe (moved to meta-python)
      python3-tomli: remove recipe (moved to meta-python)
      bblayers/machines: add bitbake-layers command to list machines
      ffmpeg: fix build with binutils 2.43 on arm with commerical codecs
      vulkan-samples: limit to aarch64/x86-64
      bitbake: fetch2/gitsm: use configparser to parse .gitmodules
      systemd: add missing dependency on libkmod to udev
      sanity: check for working user namespaces
      bitbake.conf: mark TCLIBCAPPEND as deprecated
      bitbake: fetch2: don't try to preserve all attributes when unpacking files
      icu: update patch Upstream-Status
      ffmpeg: nasm is x86 only, so only DEPEND if x86
      ffmpeg: no need for textrel INSANE_SKIP
      strace: download release tarballs from GitHub
      tcl: skip io-13.6 test case
      groff: fix rare build race in hdtbl

Ryan Eatmon (3):
      u-boot.inc: Refactor do_* steps into functions that can be overridden
      oe-setup-build: Fix typo
      oe-setup-build: Change how we get the SHELL value

Sabeeh Khan (1):
      linux-firmware: add new package for cc33xx firmware

Sakib Sajal (1):
      blktrace: ask for python3 specifically

Samantha Jalabert (1):
      cve_check: Update selftest with new status detail

Sergei Zhmylev (1):
      lsb-release: fix Distro Codename shell escaping

Shunsuke Tokumoto (1):
      python3-setuptools: Add "python:setuptools" to CVE_PRODUCT

Siddharth Doshi (5):
      libxml2: Upgrade 2.12.7 -> 2.12.8
      Tiff: Security fix for CVE-2024-7006
      vim: Upgrade 9.1.0114 -> 9.1.0682
      wpa-supplicant: Upgrade 2.10 -> 2.11
      vim: Upgrade 9.1.0682 -> 9.1.0698

Simone Weiß (2):
      gnutls: upgrade 3.8.5 -> 3.8.6
      curl: Ignore CVE-2024-32928

Sreejith Ravi (1):
      package.py: Add Requires.private field in process_pkgconfig

Stefan Mueller-Klieser (1):
      icu: fix make-icudata package config

Steve Sakoman (3):
      release-notes-4.0: update BB_HASHSERVE_UPSTREAM for new infrastructure
      poky.conf: bump version for 5.1.1
      build-appliance-image: Update to styhead head revision

Sundeep KOKKONDA (3):
      binutils: stable 2.42 branch updates
      oeqa/selftest/reproducibile: rename of reproducible directories
      rust: rustdoc reproducibility issue fix

Talel BELHAJSALEM (1):
      contributor-guide: Remove duplicated words

Teresa Remmet (1):
      recipes-bsp: usbutils: Fix usb-devices command using busybox

Theodore A. Roth (2):
      ca-certificates: update 20211016 -> 20240203
      ca-certificates: Add comment for provenance of SRCREV

Thomas Perrot (2):
      opensbi: bump to 1.5
      opensbi: bump to 1.5.1

Tim Orling (8):
      python3-rpds-py: upgrade 0.18.1 -> 0.20.0
      python3-alabaster: upgrade 0.7.16 -> 1.0.0
      python3-cffi: upgrade 1.16.0 -> 1.17.0
      python3-more-itertools: upgrade 10.3.0 -> 10.4.0
      python3-wheel: upgrade 0.43.0 -> 0.44.0
      python3-zipp: upgrade 3.19.2 -> 3.20.0
      python3-attrs: upgrade 23.2.0 -> 24.2.0
      python3-setuptools-rust: upgrade 1.9.0 -> 1.10.1

Tom Hochstein (2):
      time64.inc: Simplify GLIBC_64BIT_TIME_FLAGS usage
      weston: Add missing runtime dependency on freerdp

Trevor Gamblin (37):
      dhcpcd: upgrade 10.0.6 -> 10.0.8
      python3-hypothesis: upgrade 6.103.0 -> 6.103.2
      python3-psutil: upgrade 5.9.8 -> 6.0.0
      python3-testtools: upgrade 2.7.1 -> 2.7.2
      python3-urllib3: upgrade 2.2.1 -> 2.2.2
      maintainers.inc: add self for unassigned python recipes
      MAINTAINERS.md: fix patchtest entry
      python3-pytest-subtests: upgrade 0.12.1 -> 0.13.0
      python3-hypothesis: upgrade 6.103.2 -> 6.105.1
      python3-setuptools: upgrade 69.5.1 -> 70.3.0
      bind: upgrade 9.18.27 -> 9.20.0
      cmake: upgrade 3.29.3 -> 3.30.1
      dpkg: upgrade 1.22.6 -> 1.22.10
      nettle: upgrade 3.9.1 -> 3.10
      patchtest/patch.py: remove cruft
      scripts/patchtest.README: cleanup, add selftest notes
      kea: upgrade 2.4.1 -> 2.6.1
      python3-sphinx: upgrade 7.4.7 -> 8.0.2
      python3-hypothesis: upgrade 6.108.4 -> 6.108.10
      python3-pytest: upgrade 8.3.1 -> 8.3.2
      python3-sphinxcontrib-applehelp: upgrade 1.0.8 -> 2.0.0
      python3-sphinxcontrib-devhelp: upgrade 1.0.6 -> 2.0.0
      python3-sphinxcontrib-htmlhelp: upgrade 2.0.6 -> 2.1.0
      python3-sphinxcontrib-qthelp: upgrade 1.0.8 -> 2.0.0
      python3-sphinxcontrib-serializinghtml: upgrade 1.1.10 -> 2.0.0
      libassuan: upgrade 2.5.7 -> 3.0.1
      python3-setuptools: upgrade 71.1.0 -> 72.1.0
      python3-hypothesis: upgrade 6.108.10 -> 6.110.1
      python3-cython: upgrade 3.0.10 -> 3.0.11
      python3: upgrade 3.12.4 -> 3.12.5
      python3: skip readline limited history tests
      piglit: upgrade 22eaf6a91c -> c11c9374c1
      python3-hypothesis: upgrade 6.111.1 -> 6.111.2
      python3-pyparsing: upgrade 3.1.2 -> 3.1.4
      patchtest: test_mbox: remove duplicate regex definition
      patchtest: test_shortlog_length: omit shortlog prefixes
      patchtest: test_non_auh_upgrade: improve parse logic

Troels Dalsgaard Hoffmeyer (1):
      bitbake: build/exec_task: Log str() instead of repr() for exceptions in build

Tronje Krabbe (1):
      rust-target-config: Update data layouts for 32-bit arm targets

Ulrich Ölmann (2):
      initramfs-framework: fix typos
      buildhistory: fix typos

Vijay Anusuri (4):
      wget: Fix for CVE-2024-38428
      apr: upgrade 1.7.4 -> 1.7.5
      xserver-xorg: upgrade 21.1.13 -> 21.1.14
      xwayland: upgrade 24.1.3 -> 24.1.4

Vivek Puar (1):
      linux-firmware: upgrade 20240811 -> 20240909

Wadim Egorov (1):
      watchdog: Set watchdog_module in default config

Wang Mingyu (125):
      alsa-lib: upgrade 1.2.11 -> 1.2.12
      alsa-plugins: upgrade 1.2.7.1 -> 1.2.12
      alsa-ucm-conf: upgrade 1.2.11 -> 1.2.12
      git: upgrade 2.45.1 -> 2.45.2
      createrepo-c: upgrade 1.1.1 -> 1.1.2
      diffoscope: upgrade 267 -> 271
      enchant2: upgrade 2.7.3 -> 2.8.1
      fribidi: upgrade 1.0.14 -> 1.0.15
      gstreamer: upgrade 1.24.3 -> 1.24.4
      libevdev: upgrade 1.13.1 -> 1.13.2
      libjitterentropy: upgrade 3.4.1 -> 3.5.0
      libpcre2: upgrade 10.43 -> 10.44
      pciutils: upgrade 3.12.0 -> 3.13.0
      rng-tools: upgrade 6.16 -> 6.17
      ttyrun: upgrade 2.32.0 -> 2.33.1
      btrfs-tools: handle rename of inode_includes() from e2fsprogs 1.47.1
      rt-tests: upgrade 2.6 -> 2.7
      base-passwd: upgrade 3.6.3 -> 3.6.4
      btrfs-tools: upgrade 6.8.1 -> 6.9.2
      ccache: upgrade 4.10 -> 4.10.1
      createrepo-c: upgrade 1.1.2 -> 1.1.3
      cups: upgrade 2.4.9 -> 2.4.10
      debianutils: upgrade 5.19 -> 5.20
      diffoscope: upgrade 271 -> 272
      dnf: upgrade 4.20.0 -> 4.21.0
      gdbm: upgrade 1.23 -> 1.24
      gstreamer: upgrade 1.24.4 -> 1.24.5
      harfbuzz: upgrade 8.5.0 -> 9.0.0
      libadwaita: upgrade 1.5.1 -> 1.5.2
      libdnf: upgrade 0.73.1 -> 0.73.2
      libdrm: upgrade 2.4.120 -> 2.4.122
      libproxy: upgrade 0.5.6 -> 0.5.7
      librsvg: upgrade 2.57.3 -> 2.58.1
      libsdl2: upgrade 2.30.4 -> 2.30.5
      opkg: upgrade 0.6.3 -> 0.7.0
      opkg-utils: upgrade 0.6.3 -> 0.7.0
      pinentry: upgrade 1.3.0 -> 1.3.1
      python3-certifi: upgrade 2024.6.2 -> 2024.7.4
      python3-hatchling: upgrade 1.24.2 -> 1.25.0
      python3-importlib-metadata: upgrade 7.1.0 -> 8.0.0
      python3-maturin: upgrade 1.6.0 -> 1.7.0
      python3-pycairo: upgrade 1.26.0 -> 1.26.1
      python3-trove-classifiers: upgrade 2024.5.22 -> 2024.7.2
      repo: upgrade 2.45 -> 2.46
      sysstat: upgrade 12.7.5 -> 12.7.6
      wireless-regdb: upgrade 2024.05.08 -> 2024.07.04
      cryptodev: upgrade 1.13 -> 1.14
      asciidoc: upgrade 10.2.0 -> 10.2.1
      glslang: upgrade 1.3.283.0 -> 1.3.290.0
      gsettings-desktop-schemas: upgrade 46.0 -> 46.1
      kexec-tools: upgrade 2.0.28 -> 2.0.29
      libproxy: upgrade 0.5.7 -> 0.5.8
      librsvg: upgrade 2.58.1 -> 2.58.2
      libsolv: upgrade 0.7.29 -> 0.7.30
      libtirpc: upgrade 1.3.4 -> 1.3.5
      orc: upgrade 0.4.38 -> 0.4.39
      python3-bcrypt: upgrade 4.1.3 -> 4.2.0
      python3-dbusmock: upgrade 0.31.1 -> 0.32.1
      python3-hypothesis: upgrade 6.105.1 -> 6.108.4
      python3-importlib-metadata: upgrade 8.0.0 -> 8.2.0
      python3-jsonschema: upgrade 4.22.0 -> 4.23.0
      python3-pytest-subtests: upgrade 0.13.0 -> 0.13.1
      python3-pytest: upgrade 8.2.2 -> 8.3.1
      python3-setuptools: upgrade 70.3.0 -> 71.1.0
      python3-sphinx: upgrade 7.3.7 -> 7.4.7
      python3-sphinxcontrib-htmlhelp: upgrade 2.0.5 -> 2.0.6
      python3-sphinxcontrib-qthelp: upgrade 1.0.7 -> 1.0.8
      spirv-headers: upgrade 1.3.283.0 -> 1.3.290.0
      spirv-tools: upgrade 1.3.283.0 -> 1.3.290.0
      strace: upgrade 6.9 -> 6.10
      sysklogd: upgrade 2.5.2 -> 2.6.0
      vulkan-headers: upgrade 1.3.283.0 -> 1.3.290.0
      vulkan-loader: upgrade 1.3.283.0 -> 1.3.290.0
      vulkan-tools: upgrade 1.3.283.0 -> 1.3.290.0
      vulkan-utility-libraries: upgrade 1.3.283.0 -> 1.3.290.0
      vulkan-validation-layers: upgrade 1.3.283.0 -> 1.3.290.0
      vulkan-volk: upgrade 1.3.283.0 -> 1.3.290.0
      xwayland: upgrade 24.1.0 -> 24.1.1
      binutils: upgrade 2.43 -> 2.43.1
      btrfs-tools: upgrade 6.9.2 -> 6.10.1
      createrepo-c: upgrade 1.1.3 -> 1.1.4
      diffoscope: upgrade 272 -> 276
      dnf: upgrade 4.21.0 -> 4.21.1
      enchant2: upgrade 2.8.1 -> 2.8.2
      erofs-utils: upgrade 1.7.1 -> 1.8.1
      ethtool: upgrade 6.9 -> 6.10
      freetype: upgrade 2.13.2 -> 2.13.3
      libx11: upgrade 1.8.9 -> 1.8.10
      libxfont2: upgrade 2.0.6 -> 2.0.7
      libxtst: upgrade 1.2.4 -> 1.2.5
      pkgconf: upgrade 2.2.0 -> 2.3.0
      python3-babel: upgrade 2.15.0 -> 2.16.0
      python3-hypothesis: upgrade 6.110.1 -> 6.111.1
      python3-lxml: upgrade 5.2.2 -> 5.3.0
      python3-setuptools: upgrade 72.1.0 -> 72.2.0
      rpcbind: upgrade 1.2.6 -> 1.2.7
      sysklogd: upgrade 2.6.0 -> 2.6.1
      ttyrun: upgrade 2.33.1 -> 2.34.0
      xwayland: upgrade 24.1.1 -> 24.1.2
      systemd: upgrade 256.4 -> 256.5
      acpica: upgrade 20240322 -> 20240827
      cairo: upgrade 1.18.0 -> 1.18.2
      dhcpcd: upgrade 10.0.8 -> 10.0.10
      diffoscope: upgrade 276 -> 277
      ell: upgrade 0.67 -> 0.68
      libdrm: upgrade 2.4.122 -> 2.4.123
      libsoup: upgrade 3.4.4 -> 3.6.0
      liburcu: upgrade 0.14.0 -> 0.14.1
      mc: upgrade 4.8.31 -> 4.8.32
      nghttp2: upgrade 1.62.1 -> 1.63.0
      ofono: upgrade 2.9 -> 2.10
      python3-certifi: upgrade 2024.7.4 -> 2024.8.30
      python3-idna: upgrade 3.7 -> 3.8
      python3-maturin: upgrade 1.7.0 -> 1.7.1
      python3-pbr: upgrade 6.0.0 -> 6.1.0
      python3-websockets: upgrade 12.0 -> 13.0.1
      python3-zipp: upgrade 3.20.0 -> 3.20.1
      taglib: upgrade 2.0.1 -> 2.0.2
      wayland-protocols: upgrade 1.36 -> 1.37
      wayland: upgrade 1.23.0 -> 1.23.1
      git: upgrade 2.46.0 -> 2.46.1
      libevdev: upgrade 1.13.2 -> 1.13.3
      orc: upgrade 0.4.39 -> 0.4.40
      wireless-regdb: upgrade 2024.07.04 -> 2024.10.07
      xwayland: upgrade 24.1.2 -> 24.1.3

Weisser, Pascal.ext (1):
      qemuboot: Trigger write_qemuboot_conf task on changes of kernel image realpath

Yash Shinde (12):
      rust: Oe-selftest fixes for rust v1.76
      rust: Upgrade 1.75.0->1.76.0
      rust: reproducibility issue fix with v1.76
      rust: Oe-selftest changes for rust v1.77
      rust: Upgrade 1.76.0->1.77.0
      rust: Upgrade 1.77.0->1.77.1
      rust: Upgrade 1.77.1->1.77.2
      rust: Oe-selftest changes for rust v1.78
      rust: Upgrade 1.77.2->1.78.0
      zlib: Enable PIE for native builds
      rust: Oe-selftest changes for rust v1.79
      rust: Upgrade 1.78.0->1.79.0

Yi Zhao (9):
      libsdl2: upgrade 2.30.3 -> 2.30.4
      less: upgrade 643 -> 661
      util-linux: install lastlog2 volatile file
      rpm: fix expansion of %_libdir in macros
      libsdl2: upgrade 2.30.5 -> 2.30.6
      bind: upgrade 9.20.0 -> 9.20.1
      libpcap: upgrade 1.10.4 -> 1.10.5
      libsdl2: upgrade 2.30.6 -> 2.30.7
      systemd: fix broken links for sysvinit-compatible commands

Yoann Congal (10):
      Revert "insane: skip unimplemented-ptest on S=WORKDIR recipes"
      insane: skip unimplemented-ptest checks if disabled
      spirv-tools: Fix git-describe related reproducibility
      spirv-tools: Update merged patch to backport status
      oeqa/selftest: Only rewrite envvars paths that absolutely point to builddir
      migration/release-notes-5.1: document oeqa/selftest envvars change
      release-notes-5.1: document added python3-libarchive-c ptest
      release-notes-5.1: document fixed _test_devtool_add_git_url test
      release-notes-5.1: document spirv-tools reproducibility
      python3-maturin: sort external libs in wheel files

Yuri D'Elia (1):
      bitbake: fetch2/git: Enforce default remote name to "origin"

Zoltan Boszormenyi (1):
      rpcbind: Fix boot time start failure

aszh07 (2):
      xz: Update LICENSE variable for xz packages
      ffmpeg: Add "libswresample libavcodec" to CVE_PRODUCT

gudnimg (1):
      bluez5: upgrade 5.72 -> 5.77

hongxu (7):
      libgpg-error: 1.49 -> 1.50
      man-pages: 6.8 -> 6.9.1
      libxml2: 2.12.8 -> 2.13.3
      readline: 8.2 -> 8.2.13
      libxslt: 1.1.39 -> 1.1.42
      xmlto: 0.0.28 -> 0.0.29
      gnupg: 2.4.5 -> 2.5.0

simit.ghane (2):
      libgcrypt: Fix building error with '-O2' in sysroot path
      libgcrypt: upgrade 1.10.3 -> 1.11.0

y75zhang (1):
      bitbake: fetch/wget: checkstatus: drop shared connecton when catch Timeout error

meta-openembedded: 487a2d5695..5d54a52fbe:
  Adrian Freihofer (1):
        networkmanager: remove modemmanager rdepends

  Akash Hadke (1):
        python3-flatbuffers: provide nativesdk support

  Alba Herrerías (1):
        yelp: fix unterminated string

  Alexander Kanavin (1):
        libnewt: add from oe-core

  Alexander Stein (1):
        luajit: Fix host development package

  Alexandre Truong (99):
        ace: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        acpitool: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        anthy: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        atop: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        bitwise: Include UPSTREAM_CHECK_REGEX to fix UNKNOWN_BROKEN status
        cfengine-masterfiles: Include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        ckermit: Include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        cloc: include UPSTREAM_CHECK_REGEX to fix UNKNOWN_BROKEN status
        cups-filters: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        cxxtest: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        czmq: include UPSTREAM_CHECK_REGEX to fix UNKNOWN_BROKEN status
        daemontools: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        doxygen: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        duktape: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        fftw: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        fltk: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        fltk-native: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        fwupd: include UPSTREAM_CHECK_REGEX to fix UNKNOWN_BROKEN status
        gmime: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        gnome-themes-extra: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        gradm: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        graphviz: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        gtkperf: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        hplip: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        icewm: include UPSTREAM_CHECK_REGEX to fix UNKNOWN_BROKEN status
        irssi: include UPSTREAM_CHECK_REGEX to fix UNKNOWN_BROKEN status
        jansson: modify existing UPSTREAM_CHECK_REGEX
        lcov: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        leptonica: include UPSTREAM_CHECK_REGEX to fix UNKNOWN_BROKEN status
        libcdio-paranoia: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libdbus-c++: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libftdi: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        libgnt: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libiodbc: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libjs-jquery: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        liblinebreak: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libmng: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libmtp: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libnice: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libopusenc: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libpaper: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libpcsc-perl: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libsdl-gfx: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        libsigc++-2.0: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libsigc++-3: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libsmi: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libspiro: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libstatgrab: include UPSTREAM_CHECK_REGEX to fix UNKNOWN_BROKEN status
        libwmf: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        libx86-1: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        libxml++-5.0: include UPSTREAM_CHECK_REGEX to fix UNKNOWN_BROKEN status
        logwarn: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        lprng: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        mcpp: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        mozjs-115: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        mscgen: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        msgpack-cpp: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        msktutil: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        nmon: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        nss: modify UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        obexftp: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        onig: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        openbox: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        openct: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        openobex: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        p7zip: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        pngcheck: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        rsyslog: modify existing UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        sblim-cmpi-devel: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        sblim-sfc-common: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        ttf-ubuntu-font-family: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        ttf-wqy-zenhei: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        uml-utilities: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        xrdp: include UPSTREAM_CHECK_* to fix UNKNOWN_BROKEN status
        xscreensaver: include UPSTREAM_CHECK_URI to fix UNKNOWN_BROKEN status
        can-isotp: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        con2fbmap: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        cpufrequtils: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        dbus-daemon-proxy: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        devmem2: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        edid-decode: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        fb-test: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        firmwared: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        funyahoo-plusplus: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        hunspell-dictionaries: switch branch from master to main
        hunspell-dictionaries: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        icyque: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        iksemel: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        kconfig-frontends: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        libbacktrace: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        libc-bench: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        libubox: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        linux-serial-test: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        musl-rpmatch: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        pam-plugin-ccreds: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        pcimem: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        pim435: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        properties-cpp: include UPSTREAM_CHECK_COMMITS to fix UNKNOWN_BROKEN status
        pegtl: add ptest support

  Alexandre Videgrain (1):
        openbox: fix crash on alt+tab with fullscreen app

  Anuj Mittal (1):
        tbb: pass TBB_STRICT=OFF to disable -Werror

  Archana Polampalli (1):
        apache2: Upgrade 2.4.60 -> 2.4.61

  Armin Kuster (2):
        meta-openemnedded: Add myself as styhead maintainer
        audit: fix build when systemd is enabled.

  BINDU (1):
        flatbuffers: adapt for cross-compilation environments

  Barry Grussling (1):
        postgresql: Break perl RDEPENDS

  Bartosz Golaszewski (4):
        python3-gpiod: update to v2.2.0
        python3-virtualenv: add missing run-time dependencies
        libgpiod: update v2.1.2 -> v2.1.3
        python3-gpiod: update v2.2.0 -> v2.2.1

  Benjamin Szőke (1):
        tree: fix broken links

  Carlos Alberto Lopez Perez (1):
        sysprof: upgrade 3.44.0 -> 3.48.0

  Changqing Li (4):
        python3-h5py: remove unneeded CFLAGS
        pavucontrol: update SRC_URI
        libatasmart: Update SRC_URI
        libdbi-perl: upgrade 1.643 -> 1.644

  Chen Qi (2):
        python3-protobuf: remove useless and problematic .pth file
        jansson: add JSON_INTEGER_IS_LONG_LONG for cmake

  Christian Eggers (2):
        lvgl: fix version in shared library file name
        lvgl: update upstream-status of all patches

  Christophe Vu-Brugier (2):
        nvme-cli: upgrade 2.9.1 -> 2.10.2
        exfatprogs: upgrade 1.2.4 -> 1.2.5

  Dimitri Bouras (1):
        python3-geomet: Switch to setuptools_build_meta build backend

  Dmitry Baryshkov (6):
        android-tools: make PN-adbd as a systemd package
        deqp-runner: improved version of parallel-deqp-runner
        packagegroup-meta-oe: include deqp-runner into packagegroup-meta-oe-graphics
        README.md: discourage use of GitHub pull request system
        android-tools: create flag flag file for adbd at a proper location
        gpsd: apply patch to fix gpsd building on Musl

  Einar Gunnarsson (2):
        yavta: Update to kernel 6.8
        v4l-utils: Install media ctrl pkgconfig files

  Enrico Jörns (6):
        libconfuse: move to meta-oe
        libconfuse: provide native and nativesdk support
        libconfuse: replace DESCRIPTION by SUMMARY
        libconfuse: switch to release tar archive
        libconfuse: add backported patch to fix search path logic
        genimage: add new recipe

  Esben Haabendal (1):
        netplan: add missing runtime dependencies

  Etienne Cordonnier (3):
        uutils-coreutils: upgrade 0.0.26 -> 0.0.27
        uutils-coreutils: disable buildpaths error
        perfetto: upgrade 31.0 -> 47.0

  Fabio Estevam (1):
        imx-cst: Add recipe

  Faiz HAMMOUCHE (6):
        uim: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        unixodbc: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        xdotool: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        xf86-input-tslib: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        wvstrams: Unmaintained upstream, add UPSTREAM_VERSION_UNKNOWN
        wvdial: Unmaintained upstream, add UPSTREAM_VERSION_UNKNOWN

  Fathi Boudra (2):
        python3-django: upgrade 4.2.11 -> 4.2.16
        python3-django: upgrade 5.0.6 -> 5.0.9

  Frank de Brabander (1):
        python3-pydantic-core: fix incompatible version

  Fredrik Hugosson (1):
        lvm2: Remove the lvm2-udevrules package

  Ghislain Mangé (1):
        wireshark: fix typo in PACKAGECONFIG[zstd]

  Gianfranco Costamagna (1):
        vbxguestdrivers: upgrade 7.0.18 -> 7.0.20

  Guocai He (1):
        mariadb: File conflicts for multilib

  Guðni Már Gilbert (5):
        python3-incremental: improve packaging
        python3-twisted: upgrade 24.3.0 -> 24.7.0
        python3-incremental: drop python3-twisted-core from RDEPENDS
        python3-twisted: add python3-attrs to RDEPENDS
        python3-automat: upgrade 22.10.0 -> 24.8.1

  Harish Sadineni (1):
        bpftool: Add support for riscv64

  Hauke Lampe (1):
        postgresql: Use packageconfig flag for readline dependency

  Hitendra Prajapati (1):
        tcpdump: fix CVE-2024-2397

  Hongxu Jia (1):
        nodejs: support cross compile without qemu user conditionally

  Hubert Wiśniewski (1):
        libcamera: Use multiple of sizeof as malloc size

  J. S. (8):
        znc: Fix buildpaths QA errors
        webmin: upgrade 2.111 -> 2.202
        nodejs: upgrade 20.16.0 -> 20.17.0
        syslog-ng: upgrade 4.6.0 -> 4.7.0
        xfce4-panel: upgrade 4.18.3 -> 4.18.4
        nodejs: upgrade 20.17.0 -> 20.18.0
        xfce4-panel: upgrade 4.18.4 -> 4.18.5
        nodejs: cleanup

  Jamin Lin (1):
        drgn: add new recipe

  Jan Luebbe (2):
        python3-grpcio-reflection: new recipe
        python3-grpcio-channelz: new recipe

  Jan Vermaete (3):
        python3-protobuf: added python3-ctypes as RDEPENDS
        protobuf: version bump 4.25.3 -> 4.25.4
        netdata: version bump 1.47.0 -> 1.47.1

  Jason Schonberg (1):
        nodejs: upgrade 20.13.0 -> 20.16.0

  Jeremy A. Puhlman (1):
        net-snmp: Set ps flag value since it checks the host

  Jeroen Knoops (1):
        nng: Rename default branch of github.com:nanomsg/nng.git

  Jiaying Song (3):
        nftables: change ptest output format
        wireguard-tools: fix do_fetch error
        vlock: fix do_fetch error

  Jose Quaresma (6):
        composefs: the srcrev hash was the release tag
        ostree: Upgrade 2024.6 -> 2024.7
        composefs: upgrade 1.0.4 -> 1.0.5
        gpsd: make the meta-python dependency conditionally
        Revert "gpsd: make the meta-python dependency conditionally"
        gpsd: condition the runtime dependence of pyserial on the pygps

  Justin Bronder (1):
        python3-xmodem: replace hardcoded /usr with ${prefix}

  Jörg Sommer (5):
        dnsmasq: Install conf example from upstream instead of our version
        dnsmasq: set config dhcp6, broken-rtc by FEATURES
        gpsd: upgrade 3.24 -> 3.25; new gpsd-snmp
        bluealsa: upgrade 4.0.0+git -> 4.3.0
        zsh: update 5.8 -> 5.9

  Kai Kang (1):
        libosinfo: add runtime dependency osinfo-db

  Katariina Lounento (1):
        libtar: patch CVEs

  Keith McRae (1):
        ntp: Fix status call reporting incorrect value

  Khem Raj (142):
        python3-tornado: Switch to python_setuptools_build_meta
        rdma-core: Fix recvfrom override errors with glibc 2.40 and clang
        tipcutils: Replace WORKDIR with UNPACKDIR
        rdma-core: Do not use overloadable attribute with musl
        python3-pint: Upgrade to 24.1
        flite: Fix buld with clang fortify enabled distros
        python3-inflate64: Fix build with clang fortified glibc headers
        renderdoc: Upgrade to 1.33
        renderdoc: Fix build with clang fortify and glibc 2.40
        overlayfs-tools: Fix build with musl
        webmin: Upgrade to 2.111 release
        opencv: Check GTK3DISTROFEATURES for enabling gtk support
        opencv: Add missing trailing slash
        sysprof: Fix build with llvm libunwind
        log4cpp: Fix buildpaths QA error
        ldns: Upgrade to 1.8.4
        libwmf: Fix buildpaths QA Errors in libwmf-config
        Revert "libftdi: Fix missing ftdi_eeprom"
        vsomeip: Fix build with GCC-14
        turbostat: Add band-aid to build from 6.10+ kernel
        python3-daemon: Fix build with PEP-575 build backend
        zfs: Upgrade to 2.2.5 release
        e2tools: Fix buildpaths QA warning in config.status in ptest
        glibmm: Upgrade to 2.66.7 release
        transmission: Upgrade to 4.0.6 release
        wolfssl: Add packageconfig for reproducible build
        lprng: Specify target paths for needed utilities
        sharutils: Let POSIX_SHELL be overridable from environment
        freediameter: Fix buildpaths QA error
        libforms: Remove buildpaths from fd2ps and fdesign scripts
        blueman: Fix buildpathe issue with cython generated code
        fvwm: Fix buildpaths QA Errors
        proftpd: Upgrade to 1.3.8b
        botan: Make it reproducible
        ndisc: Remove buildpaths from binaries
        python3-kivy: Remove buildpaths from comments in generated C sources
        keepalived: Make build reproducible
        fwknop: Upgrade to 2.6.11
        fwknop: Specify target locations of gpg and wget
        ippool: Fix buildpaths QA error
        ot-br-posix: Define config files explicitly
        libyui: Upgrade to 4.6.2
        fluentbit: Make it deprecated
        python3-pyproj: Fix buildpaths QA Error
        python3-pyproj: Remove absolute paths from cython generated .c files
        libyui-ncurses: Fix buildpaths QA Error
        ftgl: Upgrade to 2.4.0
        ftgl: Switch to maintained fork
        frr: Upgrade to 10.1 release
        python3-pandas: Downgrade version check for numpy to 1.x
        python3-pycocotools: Use build pep517-backend
        python3-pycocotools: Downgrade numpy version needed to 1.x
        python3-pycocotools: Remove absolute paths from comments
        raptor2: Do not use curl-config to detect curl
        libgsf: Fix build with libxml2 2.13+
        libspatialite: Upgrade to 5.1
        libblockdev: Fix build with latest e2fsprogs
        bluealsa: Fix build on musl
        bluealsa: Update cython patch to latest upstream patch
        mariadb: Upgrade to 10.11.9 release
        gerbera: Upgrade to 2.2.0
        e2tools: Fix build with automake 1.17
        minidlna: Upgrade to 1.3.3 release
        vlc: Upgrade to 3.0.21
        libplacebo: Add recipe
        mpv: Upgrade to 0.38.0 release
        libmpdclient,mpc: Upgrade to 2.22 and 0.35 respectively
        vlc: Disable recipe
        mpd: Upgrade to 0.23.15+git
        xdg-desktop-portal-wlr: Update to latest on master branch
        ltrace: Switch to gitlab SRC_URI
        webkitgtk3: Fix build with latest clang
        python3-grpcio: Upgrade to 1.66.1 release
        grpc: Upgrade to 1.66.1 release
        mozjs-115: fix build with clang and libc++ 19
        nmap: Upgrade to 7.95
        etcd-cpp-apiv3: Fix build with gprc 2.66+
        paho-mqtt-cpp: Upgrade to 1.4.1 release
        poppler: Upgrade to 24.09.0 release
        nodejs: Fix build with libc++ 19
        poco: Drop RISCV patch
        paho-mqtt-cpp: Move to tip of 1.4.x branch
        netdata: Upgrade to 1.47.0
        freeipmi: Add recipe
        opentelemetry-cpp: Fix build with clang-19
        opengl-es-cts,vulkan-cts: Upgrade recipes to 3.2.11.0 and 1.3.9.2
        libcereal: Fix build with clang-19
        libjxl: Upgrade to 0.10.3 release
        python3-serpent: Add missing rdeps for ptests to run
        python3-parse-type: Add missing rdep on six for ptests
        paho-mqtt-cpp: Use system paho-mqtt-c
        python3-serpent: Fix typo attr -> attrs
        python3-tzdata: Add missing attrs modules rdep for ptests
        python3-trustme: Add missing ptest rdeps on attrs and six modules
        python3-service-identity: Fix ptest rdeps
        python3-fsspec: Add recipe
        ptest-packagelists-meta-python: Add python3-fsspec to fast test list
        python3-pyyaml-include: Add missing dependencies for ptests
        python3-py-cpuinfo: Fix ptest runtime deps
        python3-flask: Add missing ptest deps
        yavta: Upgrade SRCREV to include 64bit time_t print format errors
        libjxl: Do not use -mrelax-all on RISCV with clang
        python3-wrapt: Add missing rdep on misc modules for ptests
        python3-pillow: Add missing rdep on py3-compile for ptests
        python-ujson: Use python_setuptools_build_meta
        python3-pylint: Add missing ptest rdep on python3-misc
        python3-fastjsonschema: Add missing rdeps for ptests
        python3-pytest-mock: Upgrade to 3.14.0
        protobuf-c: Link with libatomic on riscv32
        highway: Disable RVV on RISCV-32
        dav1d: Disable asm code on rv32
        mosh: Use libatomic on rv32 for atomics
        dlm: Disable fcf-protection on riscv32
        usbguard: Link with libatomic on rv32
        transmission: Link with libatomic on riscv32
        ot-br-posix: Link with libatomic on rv32
        opentelemetry-cpp: Link with libatomic on rv32
        mozjs-115: Fix build on riscv32
        netdata: Add checks for 64-bit atomic builtins
        liburing: Upgrade to 2.7 and fix build on riscv32
        highway: Fix cmake to detect riscv32
        libjxl: Disable sizeless-vectors on riscv32
        kernel-selftest: Fix build on 32bit arches with 64bit time_t
        reptyr: Do not build for riscv32
        python3-typer: Disable test_rich_markup_mode tests
        python3-pydbus: Add missing rdep on xml module for ptests
        python3-pdm: Upgrade to 2.19.1
        python3-pdm-backend: Upgrade to 2.4.1 release
        python3-ujson: Add python misc modules to ptest rdeps
        python3-gunicorn: Add missing rdeps for ptests
        python3-eth-hash: Add packageconfigs and switch to pep517-backend
        python3-validators: Add missing rdeps for ptests
        python3-pint: Upgrade to 0.24.3
        python3-pytest-mock: Fix ptests
        python3-sqlparse: Add missing rdep on mypy module for ptests
        libhugetlbfs: Use linker wrapper during build
        webkitgtk3: Always use -g1 for debug flags
        webkitgtk3: Fix build break with latest gir
        ndisc6: Fix reproducible build
        rsyslog: Enable 64bit atomics check
        xmlsec1: Switch SRC_URI to use github release
        python3-pdm-build-locked: Add recipe

  Kieran Bingham (1):
        libcamera: Add support for pycamera

  Leon Anavi (39):
        python3-eth-utils: Upgrade 3.0.0 -> 4.1.1
        python3-requests-file: Upgrade 1.5.1 -> 2.1.0
        python3-filelock: Upgrade 3.14.0 -> 3.15.3
        python3-hexbytes: Upgrade 1.2.0 -> 1.2.1
        python3-moteus: Upgrade 0.3.70 -> 0.3.71
        python3-tornado: Upgrade 6.4 -> 6.4.1
        python3-paho-mqtt: Upgrade 2.0.0 -> 2.1.0
        python3-pyperclip: Upgrade 1.8.2 -> 1.9.0
        python3-whitenoise: Upgrade 6.6.0 -> 6.7.0
        python3-pycocotools: Upgrade 2.0.7 -> 2.0.8
        python3-cbor2: Upgrade 5.6.3 -> 5.6.4
        python3-gunicorn: Upgrade 21.2.0 -> 22.0.0
        python3-aiohttp: Upgrade 3.9.5 -> 3.10.0
        python3-aiosignal: switch to PEP-517 build backend
        python3-pycares: switch to PEP-517 build backend
        python3-multidict: switch to PEP-517 build backend
        python3-cachetools: Upgrade 5.3.3 -> 5.4.0
        python3-coverage: switch to PEP-517 build backend
        coverage: Upgrade 7.6.0 -> 7.6.1
        python3-aiohttp: Upgrade 3.10.0 -> 3.10.1
        python3-hatch-requirements-txt: Add recipe
        python3-pymongo: Upgrade 4.7.3 -> 4.8.0
        python3-itsdangerous: Upgrade 2.1.2 -> 2.2.0
        python3-sniffio: witch to PEP-517 build backend
        python3-sniffio: Upgrade 1.3.0 -> 1.3.1
        python3-qface: Upgrade 2.0.10 -> 2.0.11
        python3-argcomplete: switch to PEP-517 build backend
        python3-argcomplete: Upgrade 3.4.0 -> 3.5.0
        python3-prettytable: Upgrade 3.10.2 -> 3.11.0
        python3-transitions: Upgrade 0.9.1 -> 0.9.2
        python3-apispec: Upgrade 6.4.0 -> 6.6.1
        python3-imageio: Upgrade 2.34.2 -> 2.35.0
        python3-aiohttp: Upgrade 3.10.1 -> 3.10.3
        python3-watchdog: Upgrade 4.0.1 -> 4.0.2
        python3-soupsieve: Upgrade 2.5 -> 2.6
        python3-fastjsonschema: Upgrade 2.18.0 -> 2.20.0
        python3-dirty-equals: Upgrade 0.7.1 -> 0.8.0
        python3-path: Upgrade 16.14.0 -> 17.0.0
        python3-astroid: Upgrade 3.2.4 -> 3.3.2

  Libo Chen (1):
        thin-provisioning-tools: install missed thin_shrink and era_repair

  Liyin Zhang (1):
        sound-theme-freedesktop: Update SRC_URI

  Luca Boccassi (4):
        dbus-broker: upgrade 32 -> 36
        polkit: stop overriding DAC on /usr/share/polkit-1/rules.d
        polkit: update 124 -> 125
        polkit: install group rules in /usr/share/ instead of /etc/

  Marc Ferland (3):
        polkit: update SRC_URI
        polikt: add elogind packageconfig option
        polkit: add libs-only PACKAGECONFIG option

  Markus Volk (28):
        exiv2: update 0.28.0 -> 0.28.2
        wireplumber: update 0.5.3 -> 0.5.5
        pipewire: update 1.0.7 -> 1.2.0
        flatpak: add PACKAGECONFIG for dconf
        lvm2: install all systemd service files
        nss: update 3.101 > 3.102
        geary: update 44.1 -> 46.0
        dav1d: update 1.4.2 -> 1.4.3
        pipewire: update 1.2.0 -> 1.2.1
        flatpak: update 1.15.8 -> 1.15.9
        blueman: update 2.3.5 -> 2.4.3
        pipewire: update 1.2.1 -> 1.2.2
        webkitgtk3: update 2.44.2 -> 2.44.3
        iwd: update 2.18 -> 2.19
        bubblewrap: update 0.9.0 -> 0.10.0
        flatpak: update 1.15.9 -> 1.15.10
        pipewire: update 1.2.2 -> 1.2.3
        cleanup after polkit fix
        libspelling: add recipe
        wireplumber: update 0.5.5. -> 0.5.6
        gnome-disk-utility: update 46.0 -> 46.1
        rygel: update 0.42.5 -> 0.44.0
        colord: add configuration to fix runtime
        iwd: update 2.19 -> 2.20
        iwd: use internal ell
        gnome-shell: add gnome-control-center dependency
        gnome-desktop: update 44.0 -> 44.1
        cryptsetup: fix udev PACKAGECONFIG

  Martin Jansa (15):
        lvgl: install lv_conf.h in ${includedir}/${BPN}
        giflib: fix build with gold and avoid imagemagick-native dependency
        recipes: ignore various issues fatal with gcc-14 (for 32bit MACHINEs)
        recipes: ignore various issues fatal with gcc-14
        bolt: package systemd_system_unitdir correctly
        pkcs11-provider: backport a fix for build with gcc-14
        blueman: fix installation paths
        polkit-group-rule: package polkit rules
        vdpauinfo: require x11 in DISTRO_FEATURES
        gpm: fix buildpaths QA issue
        xerces-c: fix buildpaths QA issue
        gcab: keep buildpaths QA issue as a warning
        gcab: fix buildpaths QA issue
        nmap: depend on libpcre2 not libpcre
        xmlrpc-c: update SRCREV

  Maxin John (1):
        nginx: add PACKAGECONFIG knobs for fastcgi, scgi and uwsgi

  Michael Trimarchi (1):
        cpuset: Add recipe for cpuset tool 1.6.2

  Mikko Rapeli (3):
        fwupd: skip buildpaths errors
        gcab: ignore buildpaths error from sources
        libjcat: skip buildpaths check

  Neel Gandhi (1):
        v4l-utils: Install media ctrl header and library files

  Nikhil R (1):
        rocksdb: Add an option to set static library

  Niko Mauno (27):
        pkcs11-provider: Upgrade 0.3 -> 0.5
        opensc: Amend FILES:${PN} declaration
        opensc: Add 'readline' PACKAGECONFIG option
        opensc: Drop virtual/libiconv from DEPENDS
        opensc: Fix LICENSE declaration
        opensc: Cosmetic fixes
        python3-xlsxwriter: Fix LICENSE
        python3-ansi2html: Fix HOMEPAGE and LICENSE
        python3-cbor2: Fix LICENSE and LIC_FILES_CHKSUM
        python3-cbor2: Sanitize recipe content
        python3-crc32c: Amend LICENSE declaration
        python3-email-validator: Fix LICENSE
        python3-lru-dict: Fix LICENSE and change SUMMARY to DESCRIPTION
        python3-mock: Fix LICENSE
        python3-parse-type: Fix LICENSE
        python3-parse-type: Cosmetic fixes
        python3-pillow: Fix LICENSE and change SUMMARY to DESCRIPTION
        python3-platformdirs: Fix LICENSE
        python3-colorama: Fix LICENSE
        python3-fann2: Fix LICENSE
        python3-nmap: Fix LICENSE and LIC_FILES_CHKSUM
        python3-pycurl: Fix LICENSE
        python3-googleapis-common-protos: Fix LIC_FILES_CHKSUM
        python3-haversine: Fix LIC_FILES_CHKSUM
        python3-libevdev: Fix LIC_FILES_CHKSUM
        python3-smbus2: Fix LIC_FILES_CHKSUM
        python3-xmodem: Fix LIC_FILES_CHKSUM

  Ninette Adhikari (15):
        imagemagick: Update status for CVE
        mercurial: Update CVE status for CVE-2022-43410
        influxdb: Update CVE status for CVE-2019-10329
        links: CVE status update for CVE-2008-3319
        usrsctp: CVE status update for CVE-2019-20503
        libraw: CVE status update for CVE-2020-22628 and CVE-2023-1729
        xsp: CVE status update for CVE-2006-2658
        apache2:apache2-native: CVE status update
        gimp: CVE status update
        php-native: CVE status update for CVE-2022-4900
        xterm: CVE status update CVE-1999-0965
        redis: Update status for CVE-2022-3734
        monkey: Update status for CVE-2013-2183
        apache2: Update CVE status
        imagemagick: Update status for CVE

  Peter Kjellerstedt (2):
        libdevmapper: Inherit nopackages
        poppler: Correct the configuration options

  Peter Marko (4):
        cjson: fix buildpath warnings
        squid: Upgrade to 6.10
        nginx: Upgrade stable 1.26.0 -> 1.26.2
        nginx: Upgrade mainline 1.25.3 -> 1.27.1

  Poonam Jadhav (1):
        tcpreplay: Fix CVE-2023-4256

  Przemyslaw Zegan (1):
        libftdi: Fix missing ftdi_eeprom

  Quentin Schulz (1):
        nftables: fix pep517-backend warning

  Randolph Sapp (2):
        vulkan-cts: add workaround for createMeshShaderMiscTestsEXT
        opencl-clhpp: add native and nativesdk

  Randy MacLeod (2):
        libee: remove recipe since libee is obsolete
        liblinebreak: remove obsolete library

  Ricardo Simoes (8):
        magic-enum: add recipe
        magic-enum: Disable unused-value warning in tests
        memtool: Add recipe
        directfb: Order PACKAGECONFIG alphabetically
        directfb: Add freetype PACKAGECONFIG
        directfb: Add zlib PACKAGECONFIG
        directfb: Fix C++17 build warning
        magic-enum: Upgrade v0.9.5 -> v0.9.6

  Richard Tollerton (1):
        tmux: Upgrade to 3.4

  Robert Middleton (1):
        Upgrade dbus-cxx to 2.5.2

  Ross Burton (9):
        libabigail: add recipe for the ABI Generic Analysis and Instrumentation Library
        libabigail: refresh musl/fts patch
        python3-importlib-metadata: add from openembedded-core
        python3-pathlib2: add from openembedded-core
        python3-py: add from openembedded-core
        python3-pytest-runner: add from openembedded-core
        python3-rfc3986-validator: add from openembedded-core
        python3-toml: add from openembedded-core
        python3-tomli: add from openembedded-core

  Rouven Czerwinski (1):
        softhsm: add destroyed global access prevention patch

  Ryan Eatmon (2):
        mpv: Fix typo in x11 option
        kernel-selftest: Update to allow for turning on all tests

  Shinji Matsunaga (1):
        audit: Fix CVE_PRODUCT

  Siddharth Doshi (1):
        apache2: Upgrade 2.4.59 -> 2.4.60

  Soumya Sambu (4):
        php: Upgrade to 8.2.20
        python3-werkzeug: upgrade 3.0.1 -> 3.0.3
        gtk+: Fix CVE-2024-6655
        python3-flask-cors: Fix CVE-2024-6221

  Thomas Perrot (1):
        vdpauinfo: add recipe

  Tim Orling (7):
        python3-configobj: switch to PEP-517 build backend
        python3-tzdata: add recipe for v2024.1
        python3-tzdata: enable ptest
        python3-pydantic-core: upgrade 2.18.4 -> 2.21.0
        python3-pydantic: upgrade 2.7.3 -> 2.8.2
        python3-pydantic-core: backport patch
        python3-psycopg: add v3.2.1

  Tom Geelen (4):
        python3-sqlparse 0.4.4 -> 0.5.0
        python3-bleak 0.21.1 -> 0.22.2
        python3-aiohue: 4.7.1 -> 4.7.2
        python3-pyjwt 2.8.0 -> 2.9.0

  Trevor Gamblin (1):
        python3-pandas: upgrade 2.0.3 -> 2.2.2

  Trevor Woerner (2):
        apache2: use update-alternatives for httpd
        python3-matplotlib-inline: update 0.1.6 → 0.1.7 plus fixes

  Tymoteusz Burak (1):
        dediprog-flasher: Add recipe

  Valeria Petrov (1):
        apache2: do not depend on zlib header and libs from host

  Vijay Anusuri (3):
        tipcutils: Add systemd support
        krb5: upgrade 1.21.2 -> 1.21.3
        wireshark: upgrade 4.2.6 -> 4.2.7

  Vyacheslav Yurkov (1):
        overlayfs: Use explicit version

  Wang Mingyu (306):
        cryptsetup: upgrade 2.7.2 -> 2.7.3
        ctags: upgrade 6.1.20240602.0 -> 6.1.20240623.0
        dialog: upgrade 1.3-20240307 -> 1.3-20240619
        editorconfig-core-c: upgrade 0.12.7 -> 0.12.9
        exiftool: upgrade 12.85 -> 12.87
        frr: upgrade 10.0 -> 10.0.1
        gensio: upgrade 2.8.4 -> 2.8.5
        gtkwave: upgrade 3.3.119 -> 3.3.120
        iniparser: upgrade 4.2.2 -> 4.2.4
        libbpf: upgrade 1.4.2 -> 1.4.3
        libcgi-perl: upgrade 4.64 -> 4.66
        libcrypt-openssl-random-perl: upgrade 0.16 -> 0.17
        libdaq: upgrade 3.0.14 -> 3.0.15
        libextutils-helpers-perl: upgrade 0.026 -> 0.027
        libfido2: upgrade 1.14.0 -> 1.15.0
        libimobiledevice-glue: upgrade 1.2.0 -> 1.3.0
        mcelog: upgrade 199 -> 200
        msgraph: upgrade 0.2.2 -> 0.2.3
        networkmanager-openvpn: upgrade 1.11.0 -> 1.12.0
        opentelemetry-cpp: upgrade 1.15.0 -> 1.16.0
        openvpn: upgrade 2.6.10 -> 2.6.11
        python3-ansi2html: upgrade 1.9.1 -> 1.9.2
        python3-argcomplete: upgrade 3.3.0 -> 3.4.0
        python3-bandit: upgrade 1.7.8 -> 1.7.9
        python3-coverage: upgrade 7.5.3 -> 7.5.4
        python3-djangorestframework: upgrade 3.15.1 -> 3.15.2
        python3-email-validator: upgrade 2.1.1 -> 2.2.0
        python3-filelock: upgrade 3.15.3 -> 3.15.4
        python3-flexparser: upgrade 0.3 -> 0.3.1
        python3-google-api-python-client: upgrade 2.131.0 -> 2.134.0
        python3-google-auth: upgrade 2.29.0 -> 2.30.0
        python3-googleapis-common-protos: upgrade 1.63.0 -> 1.63.1
        python3-huey: upgrade 2.5.0 -> 2.5.1
        python3-langtable: upgrade 0.0.66 -> 0.0.67
        python3-marshmallow: upgrade 3.21.2 -> 3.21.3
        python3-meh: upgrade 0.51 -> 0.52
        python3-openpyxl: upgrade 3.1.3 -> 3.1.4
        python3-parse: upgrade 1.20.1 -> 1.20.2
        python3-pdm-backend: upgrade 2.3.0 -> 2.3.1
        python3-pint: upgrade 0.23 -> 0.24
        python3-portalocker: upgrade 2.8.2 -> 2.10.0
        python3-prompt-toolkit: upgrade 3.0.45 -> 3.0.47
        python3-pycodestyle: upgrade 2.11.1 -> 2.12.0
        python3-pymisp: upgrade 2.4.190 -> 2.4.194
        python3-pymongo: upgrade 4.7.2 -> 4.7.3
        python3-pyproject-api: upgrade 1.6.1 -> 1.7.1
        python3-redis: upgrade 5.0.4 -> 5.0.6
        python3-responses: upgrade 0.25.0 -> 0.25.3
        python3-robotframework: upgrade 7.0 -> 7.0.1
        python3-scikit-build: upgrade 0.17.6 -> 0.18.0
        python3-sqlalchemy: upgrade 2.0.30 -> 2.0.31
        python3-tox: upgrade 4.15.0 -> 4.15.1
        python3-types-psutil: upgrade 5.9.5.20240516 -> 6.0.0.20240621
        python3-virtualenv: upgrade 20.26.2 -> 20.26.3
        qpdf: upgrade 11.9.0 -> 11.9.1
        tesseract: upgrade 5.3.4 -> 5.4.1
        thingsboard-gateway: upgrade 3.5 -> 3.5.1
        openldap: upgrade 2.6.7 -> 2.6.8
        openldap: fix lib32-openldap build failure with gcc-14
        sblim-sfcc: fix build failure with gcc-14
        openct: fix build failure with gcc-14
        libcurses-perl: upgrade 1.41 -> 1.45
        ctags: upgrade 6.1.20240623.0 -> 6.1.20240630.0
        feh: upgrade 3.10.2 -> 3.10.3
        gexiv2: upgrade 0.14.2 -> 0.14.3
        isomd5sum: upgrade 1.2.4 -> 1.2.5
        libndp: upgrade 1.8 -> 1.9
        networkmanager: upgrade 1.48.0 -> 1.48.2
        python3-a2wsgi: upgrade 1.10.4 -> 1.10.6
        python3-aiofiles: upgrade 23.2.1 -> 24.1.0
        python3-alembic: upgrade 1.13.1 -> 1.13.2
        python3-awesomeversion: upgrade 24.2.0 -> 24.6.0
        python3-dbus-fast: upgrade 2.21.3 -> 2.22.1
        python3-gast: upgrade 0.5.4 -> 0.6.0
        python3-google-api-core: upgrade 2.19.0 -> 2.19.1
        python3-google-api-python-client: upgrade 2.134.0 -> 2.135.0
        python3-googleapis-common-protos: upgrade 1.63.1 -> 1.63.2
        python3-imageio: upgrade 2.34.1 -> 2.34.2
        python3-ipython: upgrade 8.25.0 -> 8.26.0
        python3-openpyxl: upgrade 3.1.4 -> 3.1.5
        python3-pdm: upgrade 2.15.4 -> 2.16.1
        python3-pymodbus: upgrade 3.6.8 -> 3.6.9
        python3-rapidjson: upgrade 1.17 -> 1.18
        python3-redis: upgrade 5.0.6 -> 5.0.7
        python3-twine: upgrade 5.1.0 -> 5.1.1
        python3-types-setuptools: upgrade 70.0.0.20240524 -> 70.1.0.20240627
        python3-web3: upgrade 6.19.0 -> 6.20.0
        fetchmail: disable rpath to fix buildpaths warning.
        procmail: fix build failure with gcc-14
        botan: upgrade 3.4.0 -> 3.5.0
        ctags: upgrade 6.1.20240630.0 -> 6.1.20240714.0
        exiftool: upgrade 12.87 -> 12.89
        gnome-keyring: upgrade 46.1 -> 46.2
        hwdata: upgrade 0.383 -> 0.384
        imlib2: upgrade 1.12.2 -> 1.12.3
        ipset: upgrade 7.21 -> 7.22
        libass: upgrade 0.17.2 -> 0.17.3
        libbpf: upgrade 1.4.3 -> 1.4.5
        lvm2: upgrade 2.03.24 -> 2.03.25
        libio-socket-ssl-perl: upgrade 2.085 -> 2.088
        mpich: upgrade 4.2.1 -> 4.2.2
        nano: upgrade 8.0 -> 8.1
        networkmanager: upgrade 1.48.2 -> 1.48.4
        poke: upgrade 4.1 -> 4.2
        python3-argh: upgrade 0.31.2 -> 0.31.3
        python3-astroid: upgrade 3.2.2 -> 3.2.3
        python3-coverage: upgrade 7.5.4 -> 7.6.0
        python3-humanize: upgrade 4.9.0 -> 4.10.0
        python3-moteus: upgrade 0.3.71 -> 0.3.72
        python3-oletools: upgrade 0.60.1 -> 0.60.2
        python3-pdm-backend: upgrade 2.3.1 -> 2.3.2
        python3-pillow: upgrade 10.3.0 -> 10.4.0
        python3-portalocker: upgrade 2.10.0 -> 2.10.1
        python3-prettytable: upgrade 3.10.0 -> 3.10.2
        python3-py7zr: upgrade 0.21.0 -> 0.21.1
        python3-sympy: upgrade 1.12.1 -> 1.13.0
        python3-tomlkit: upgrade 0.12.5 -> 0.13.0
        python3-types-setuptools: upgrade 70.1.0.20240627 -> 70.3.0.20240710
        python3-validators: upgrade 0.28.3 -> 0.32.0
        qcbor: upgrade 1.3 -> 1.4
        sngrep: upgrade 1.8.1 -> 1.8.2
        thin-provisioning-tools: upgrade 1.0.12 -> 1.0.13
        tree: upgrade 2.1.1 -> 2.1.3
        wireshark: upgrade 4.2.5 -> 4.2.6
        wolfssl: upgrade 5.7.0 -> 5.7.2
        xterm: upgrade 392 -> 393
        zenity: upgrade 4.0.1 -> 4.0.2
        apache2: upgrade 2.4.61 -> 2.4.62
        cfengine-masterfiles: upgrade 3.21.0 -> 3.21.5
        cmark: upgrade 0.31.0 -> 0.31.1
        cryptsetup: upgrade 2.7.3 -> 2.7.4
        ctags: upgrade 6.1.20240714.0 -> 6.1.20240804.0
        eog: upgrade 45.3 -> 45.4
        fwupd: upgrade 1.9.18 -> 1.9.22
        gmime: upgrade 3.2.13 -> 3.2.15
        gnome-bluetooth: upgrade 46.0 -> 46.1
        googletest: upgrade 1.14.0 -> 1.15.2
        icewm: upgrade 3.4.5 -> 3.6.0
        leptonica: upgrade 1.82.0 -> 1.84.1
        libiodbc: upgrade 3.52.15 -> 3.52.16
        liblinebreak: upgrade 1.2 -> 2.1
        libnvme: upgrade 1.9 -> 1.10
        libpaper: upgrade 2.1.2 -> 2.2.5
        libpcsc-perl: upgrade 1.4.14 -> 1.4.15
        libsdl-gfx: upgrade 2.0.25 -> 2.0.27
        libtdb: upgrade 1.4.10 -> 1.4.11
        libtracefs: upgrade 1.8.0 -> 1.8.1
        logwarn: upgrade 1.0.14 -> 1.0.17
        logwatch: upgrade 7.10 -> 7.11
        msgpack-cpp: upgrade 6.1.0 -> 6.1.1
        neatvnc: upgrade 0.8.0 -> 0.8.1
        networkmanager: upgrade 1.48.4 -> 1.48.6
        nss: upgrade 3.102 -> 3.103
        openipmi: upgrade 2.0.35 -> 2.0.36
        opentelemetry-cpp: upgrade 1.16.0 -> 1.16.1
        openvpn: upgrade 2.6.11 -> 2.6.12
        python3-a2wsgi: upgrade 1.10.6 -> 1.10.7
        python3-aiohappyeyeballs: upgrade 2.3.2 -> 2.3.4
        python3-astroid: upgrade 3.2.3 -> 3.2.4
        python3-autobahn: upgrade 23.6.2 -> 24.4.2
        python3-croniter: upgrade 2.0.5 -> 3.0.3
        python3-langtable: upgrade 0.0.67 -> 0.0.68
        python3-pdm-backend: upgrade 2.3.2 -> 2.3.3
        python3-pure-eval: upgrade 0.2.2 -> 0.2.3
        python3-pyfanotify: upgrade 0.2.2 -> 0.3.0
        python3-pymisp: upgrade 2.4.194 -> 2.4.195
        python3-pymodbus: upgrade 3.6.9 -> 3.7.0
        python3-pytest-lazy-fixtures: upgrade 1.0.7 -> 1.1.1
        python3-qface: upgrade 2.0.8 -> 2.0.10
        python3-rapidjson: upgrade 1.18 -> 1.19
        python3-redis: upgrade 5.0.7 -> 5.0.8
        python3-regex: upgrade 2024.5.15 -> 2024.7.24
        python3-sqlparse: upgrade 0.5.0 -> 0.5.1
        python3-sympy: upgrade 1.13.0 -> 1.13.1
        python3-tqdm: upgrade 4.66.4 -> 4.66.5
        python3-types-setuptools: upgrade 70.3.0.20240710 -> 71.1.0.20240726
        python3-validators: upgrade 0.32.0 -> 0.33.0
        python3-web3: upgrade 6.20.0 -> 6.20.1
        python3-xmlschema: upgrade 3.3.1 -> 3.3.2
        qcbor: upgrade 1.4 -> 1.4.1
        rsyslog: upgrade 8.2404.0 -> 8.2406.0
        ttf-abyssinica: upgrade 2.100 -> 2.201
        wavemon: upgrade 0.9.5 -> 0.9.6
        xmlsec1: upgrade 1.3.4 -> 1.3.5
        picocom: upgrade 2023-04 -> 2024
        hostapd: upgrade 2.10 -> 2.11
        python3-incremental: upgrade 22.10.0 -> 24.7.2
        colord-gtk: upgrade 0.3.0 -> 0.3.1
        ctags: upgrade 6.1.20240804.0 -> 6.1.20240825.0
        fwupd: upgrade 1.9.22 -> 1.9.24
        hwdata: upgrade 0.384 -> 0.385
        lastlog2: upgrade 1.2.0 -> 1.3.1
        libbytesize: upgrade 2.10 -> 2.11
        libei: upgrade 1.2.1 -> 1.3.0
        libnet-dns-perl: upgrade 1.45 -> 1.46
        libtdb: upgrade 1.4.11 -> 1.4.12
        libtest-harness-perl: upgrade 3.48 -> 3.50
        xdg-dbus-proxy: upgrade 0.1.5 -> 0.1.6
        mdns: upgrade 2200.120.24 -> 2200.140.11
        mutter: upgrade 46.2 -> 46.4
        networkmanager: upgrade 1.48.6 -> 1.48.10
        pamela: upgrade 1.1.0 -> 1.2.0
        pcsc-tools: upgrade 1.7.1 -> 1.7.2
        postgresql: upgrade 16.3 -> 16.4
        python3-aiohappyeyeballs: upgrade 2.3.4 -> 2.4.0
        python3-aiohttp: upgrade 3.10.3 -> 3.10.5
        python3-aiohue: upgrade 4.7.2 -> 4.7.3
        python3-cachetools: upgrade 5.4.0 -> 5.5.0
        python3-dbus-fast: upgrade 2.22.1 -> 2.24.0
        python3-eth-utils: upgrade 4.1.1 -> 5.0.0
        python3-gunicorn: upgrade 22.0.0 -> 23.0.0
        python3-imageio: upgrade 2.35.0 -> 2.35.1
        python3-importlib-metadata: upgrade 8.2.0 -> 8.4.0
        python3-marshmallow: upgrade 3.21.3 -> 3.22.0
        python3-nocasedict: upgrade 2.0.3 -> 2.0.4
        python3-nocaselist: upgrade 2.0.2 -> 2.0.3
        python3-paramiko: upgrade 3.4.0 -> 3.4.1
        python3-py7zr: upgrade 0.21.1 -> 0.22.0
        python3-pycodestyle: upgrade 2.12.0 -> 2.12.1
        python3-pymisp: upgrade 2.4.195 -> 2.4.196
        python3-pyzstd: upgrade 0.16.0 -> 0.16.1
        python3-simplejson: upgrade 3.19.2 -> 3.19.3
        python3-sqlalchemy: upgrade 2.0.31 -> 2.0.32
        python3-sympy: upgrade 1.13.1 -> 1.13.2
        python3-tomlkit: upgrade 0.13.0 -> 0.13.2
        python3-typer: upgrade 0.12.3 -> 0.12.5
        python3-types-python-dateutil: upgrade 2.9.0.20240316 -> 2.9.0.20240821
        python3-types-setuptools: upgrade 71.1.0.20240726 -> 73.0.0.20240822
        python3-xxhash: upgrade 3.4.1 -> 3.5.0
        rsyslog: upgrade 8.2406.0 -> 8.2408.0
        samba: upgrade 4.19.7 -> 4.19.8
        sanlock: upgrade 3.9.3 -> 3.9.4
        unbound: upgrade 1.20.0 -> 1.21.0
        lastlog2: remove recipe since it has been merged into util-linux
        ctags: upgrade 6.1.20240825.0 -> 6.1.20240908.0
        eog: upgrade 45.4 -> 47.0
        flatpak-xdg-utils: upgrade 1.0.5 -> 1.0.6
        gensio: upgrade 2.8.5 -> 2.8.7
        gnome-autoar: upgrade 0.4.4 -> 0.4.5
        hwdata: upgrade 0.385 -> 0.387
        libbpf: upgrade 1.4.5 -> 1.4.6
        libcompress-raw-bzip2-perl: upgrade 2.212 -> 2.213
        libcompress-raw-lzma-perl: upgrade 2.212 -> 2.213
        libcompress-raw-zlib-perl: upgrade 2.212 -> 2.213
        libextutils-helpers-perl: upgrade 0.027 -> 0.028
        libio-compress-lzma-perl: upgrade 2.212 -> 2.213
        libio-compress-perl: upgrade 2.212 -> 2.213
        libio-socket-ssl-perl: upgrade 2.088 -> 2.089
        libspiro: upgrade 20221101 -> 20240903
        nano: upgrade 8.1 -> 8.2
        python3-dbus-fast: upgrade 2.24.0 -> 2.24.2
        python3-executing: upgrade 2.0.1 -> 2.1.0
        python3-filelock: upgrade 3.15.4 -> 3.16.0
        python3-httpx: upgrade 0.27.0 -> 0.27.2
        python3-ipython: upgrade 8.26.0 -> 8.27.0
        python3-kiwisolver: upgrade 1.4.5 -> 1.4.7
        python3-parse-type: upgrade 0.6.2 -> 0.6.3
        python3-pefile: upgrade 2023.2.7 -> 2024.8.26
        python3-platformdirs: upgrade 4.2.2 -> 4.3.1
        python3-pulsectl: upgrade 24.4.0 -> 24.8.0
        python3-pymetno: upgrade 0.12.0 -> 0.13.0
        python3-pymisp: upgrade 2.4.196 -> 2.4.197
        python3-pymodbus: upgrade 3.7.0 -> 3.7.2
        python3-rich: upgrade 13.7.1 -> 13.8.0
        python3-scikit-build: upgrade 0.18.0 -> 0.18.1
        python3-types-psutil: upgrade 6.0.0.20240621 -> 6.0.0.20240901
        python3-types-python-dateutil: upgrade 2.9.0.20240821 -> 2.9.0.20240906
        python3-validators: upgrade 0.33.0 -> 0.34.0
        python3-virtualenv: upgrade 20.26.3 -> 20.26.4
        python3-watchdog: upgrade 4.0.2 -> 5.0.2
        python3-yarl: upgrade 1.9.4 -> 1.10.0
        python3-zeroconf: upgrade 0.132.2 -> 0.134.0
        uhubctl: upgrade 2.5.0 -> 2.6.0
        valijson: upgrade 1.0.2 -> 1.0.3
        xfsdump: upgrade 3.1.12 -> 3.2.0
        xterm: upgrade 393 -> 394
        bdwgc: upgrade 8.2.6 -> 8.2.8
        ctags: upgrade 6.1.20240908.0 -> 6.1.20240915.0
        gnome-backgrounds: upgrade 46.0 -> 47.0
        gnome-chess: upgrade 46.0 -> 47.0
        gnome-font-viewer: upgrade 46.0 -> 47.0
        libmanette: upgrade 0.2.7 -> 0.2.9
        pegtl: upgrade 3.2.7 -> 3.2.8
        python3-elementpath: upgrade 4.4.0 -> 4.5.0
        python3-eventlet: upgrade 0.36.1 -> 0.37.0
        python3-filelock: upgrade 3.16.0 -> 3.16.1
        python3-greenlet: upgrade 3.0.3 -> 3.1.0
        python3-nmap: upgrade 1.6.0 -> 1.9.1
        python3-paramiko: upgrade 3.4.1 -> 3.5.0
        python3-platformdirs: upgrade 4.3.1 -> 4.3.6
        python3-psycopg: upgrade 3.2.1 -> 3.2.2
        python3-pyasn1-modules: upgrade 0.4.0 -> 0.4.1
        python3-pymisp: upgrade 2.4.197 -> 2.4.198
        python3-pyproject-api: upgrade 1.7.1 -> 1.7.2
        python3-pyunormalize: upgrade 15.1.0 -> 16.0.0
        python3-regex: upgrade 2024.7.24 -> 2024.9.11
        python3-rich: upgrade 13.8.0 -> 13.8.1
        python3-robotframework: upgrade 7.0.1 -> 7.1
        python3-virtualenv: upgrade 20.26.4 -> 20.26.5
        python3-xmlschema: upgrade 3.3.2 -> 3.4.1
        python3-yarl: upgrade 1.10.0 -> 1.11.1
        stunnel: upgrade 5.72 -> 5.73
        tecla: upgrade 46.0 -> 47.0
        traceroute: upgrade 2.1.5 -> 2.1.6
        nmap: Fix off-by-one overflow in the IP protocol table.
        python3-alembic: upgrade 1.13.2 -> 1.13.3

  Yi Zhao (48):
        libldb: upgrade 2.8.0 -> 2.8.1
        samba: upgrade 4.19.6 -> 4.19.7
        devecot: set dovecot.conf file mode with chmod
        packagegroup-xfce-extended: fix typo of gobject-introspection-data feature
        lastlog2: specify correct pamlibdir
        wtmpdb: specify correct pamlibdir
        libnftnl: upgrade 1.2.6 -> 1.2.7
        nftables: upgrade 1.0.9 -> 1.1.0
        netplan: upgrade 1.0 -> 1.0.1
        snort3: upgrade 3.1.84.0 -> 3.3.1.0
        snort3: upgrade 3.3.1.0 -> 3.3.2.0
        tcpreplay: upgrade 4.4.4 -> 4.5.1
        libdaq: upgrade 3.0.15 -> 3.0.16
        audit: upgrade 4.0.1 -> 4.0.2
        snort3: upgrade 3.3.2.0 -> 3.3.3.0
        snort3: upgrade 3.3.3.0 -> 3.3.4.0
        tcpdump: upgrade 4.99.4 -> 4.99.5
        cryptsetup: upgrade 2.7.4 -> 2.7.5
        dracut: upgrade 102 -> 103
        freeradius: upgrade 3.2.3 -> 3.2.5
        autofs: upgrade 5.1.8 -> 5.1.9
        mbedtls: upgrade 3.6.0 -> 3.6.1
        mbedtls: upgrade 2.28.8 -> 2.28.9
        drbd-utils: upgrade 9.27.0 -> 9.28.0
        mm-common: upgrade 1.0.4 -> 1.0.6
        lvm2: upgrade 2.03.25 -> 2.03.26
        geoclue: upgrade 2.7.1 -> 2.7.2
        s-nail: upgrade 14.9.24 -> 14.9.25
        crash: upgrade 8.0.4 -> 8.0.5
        mce-inject: upgrade to latest git rev
        mce-test: update to latest git rev
        fltk: upgrade 1.3.8 -> 1.3.9
        openjpeg: upgrade 2.5.0 -> 2.5.2
        netplan: upgrade 1.0.1 -> 1.1
        libssh: upgrade 0.10.6 -> 0.11.1
        jsoncpp: upgrade 1.9.5 -> 1.9.6
        debootstrap: upgrade 1.0.132 -> 1.0.137
        frr: upgrade 10.1 -> 10.1.1
        open-vm-tools: upgrade 12.3.5 -> 12.4.5
        v4l-utils: upgrade 1.26.1 -> 1.28.1
        catch2: upgrade 3.6.0 -> 3.7.0
        tbb: upgrade 2021.11.0 -> 2021.13.0
        abseil-cpp: upgrade 20240116.2 -> 20240722.0
        protobuf: add abseil-cpp to RDEPENDS
        protobuf: upgrade 4.25.4 -> 4.25.5
        lksctp-tools: upgrade 1.0.19 -> 1.0.20
        tcpslice: upgrade 1.7 -> 1.8
        libhugetlbfs: upgrade 2.23 -> 2.24

  Yoann Congal (39):
        python3-redis: add an archive prefix to avoid clashing with redis
        pidgin: Upgrade to 2.14.13
        daq: fix SRC_URI to point to the real 2.0.7 release
        pidgin: Update Upstream-Status for gcc-14 compatibility patch
        pidgin: Remove gcc-14 compatibility workaround
        dbus-broker: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        mariadb: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        mbuffer: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        microcom: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        openbox-xdgmenu: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        proxy-libintl: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        pugixml: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        pv: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        sblim-sfcc: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        source-code-pro-fonts: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        stalonetray: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        testfloat: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        tk: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        tmux: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        ttf-abyssinica: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        zeromq: update UPSTREAM_CHECK_* variables to fix devtool upgrades
        qad: Add UPSTREAM_CHECK_COMMITS
        reboot-mode: Add UPSTREAM_CHECK_COMMITS
        s-suite: Add UPSTREAM_CHECK_COMMITS
        syzkaller: Add UPSTREAM_CHECK_COMMITS
        yavta: Add UPSTREAM_CHECK_COMMITS
        zsync-curl: Add UPSTREAM_CHECK_COMMITS
        klibc: fix debug pkgs reproducibility
        polkit: Switch PAM files to common-*
        polkit: fix build on sysvinit
        grilo: fix buildpaths QA error
        non-repro-meta-python: exclude packages that failed previously
        README.md: Hint at "git request-pull"
        non-repro-meta-networking: exclude packages that failed previously
        non-repro-meta-filesystems: update known reproducible packages
        non-repro-meta-networking: update known non-reproducible list
        polkit: Update Upstream-Status of a merged patch
        wtmpdb: fix installed-vs-shipped build error
        minidlna: fix reproducibility

  Yogesh Tyagi (1):
        python3-pybind11 : upgrade 2.11.1 -> 2.12.0

  Yogita Urade (3):
        hdf5: upgrade to 1.14.4
        poppler: CVE-2024-6239
        krb5: fix CVE-2024-26458 and CVE-2024-26461

  Zhang Peng (1):
        hiredis: remove ANSI color from ptest result

  alba@thehoodiefirm.com (1):
        apache2:apache2-native: sort CVE status

  alperak (61):
        recipes: set S to fix the QA warning
        pcp: Fix contains reference to TMPDIR [buildpaths] warnings
        boinc-client: Fix contains reference to TMPDIR [buildpaths] warning
        rdist: Fix contains reference to TMPDIR [buildpaths] warning
        gphoto2: Fix contains reference to TMPDIR [buildpaths] warning
        hplip: Fix contains reference to TMPDIR [buildpaths] warning
        jsonrpc: Fix contains reference to TMPDIR [buildpaths] warning
        exiv2: Upgrade 0.28.2 to 0.28.3 for CVE fix
        tayga: Fix contains reference to TMPDIR [buildpaths] warning
        etcd-cpp-apiv3: Fix contains reference to TMPDIR [buildpaths] warning
        python3-lazy: switch to PEP-517 build backend
        python3-classes: switch to PEP-517 build backend
        python3-eventlet: switch to PEP-517 build backend
        python3-bitstruct: switch to PEP-517 build backend
        python3-dbus-fast: switch to PEP-517 build backend
        python3-brotli: switch to PEP-517 build backend
        python3-pymongo: switch to PEP-517 build backend
        python3-can: switch to PEP-517 build backend
        python3-pyaudio: switch to PEP-517 build backend
        python3-term: switch to PEP-517 build backend
        python3-screeninfo: switch to PEP-517 build backend
        python3-pykickstart: switch to PEP-517 build backend
        python3-click-repl: switch to PEP-517 build backend
        python3-evdev: switch to PEP-517 build backend
        python3-qrcode: switch to PEP-517 build backend
        python3-pyproj: switch to PEP-517 build backend
        python3-file-magic: switch to PEP-517 build backend
        python3-joblib: switch to PEP-517 build backend
        python3-dill: switch to PEP-517 build backend
        python3-luma-oled: switch to PEP-517 build backend
        python3-pyudev: switch to PEP-517 build backend
        python3-xmlschema: switch to PEP-517 build backend
        python3-lru-dict: switch to PEP-517 build backend
        python3-ipython: switch to PEP-517 build backend
        python3-portion: switch to PEP-517 build backend
        python3-lazy-object-proxy: switch to PEP-517 build backend
        python3-aioserial: switch to PEP-517 build backend
        perfetto: Fix contains reference to TMPDIR [buildpaths] warning
        python3-reedsolo: upgrade 2.0.13 -> 2.1.0b1
        blueman: Fix do_package QA issue
        python3-service-identity: switch to PEP-517 build backend
        python3-parse-type: switch to PEP-517 build backend
        python3-regex: switch to PEP-517 build backend
        python3-pytest-timeout: switch to PEP-517 build backend
        python3-pytest-metadata: switch to PEP-517 build backend
        python3-pyroute: switch to PEP-517 build backend
        python3-pyjwt: switch to PEP-517 build backend
        python3-pyasn1-modules: switch to PEP-517 build backend
        python3-py-cpuinfo: switch to PEP-517 build backend
        python3-django: switch to PEP-517 build backend
        python3-greenlet: switch to PEP-517 build backend
        python3-gevent: switch to PEP-517 build backend
        python3-msgpack: upgrade 1.0.8 -> 1.1.0
        python3-sqlalchemy: Upgrade 2.0.32 -> 2.0.35 and switch to PEP-517 build backend
        python3-alembic: switch to PEP-517 build backend
        python3-inflate64: switch to PEP-517 build backend
        python3-spidev: switch to PEP-517 build backend
        python3-pastedeploy: switch to PEP-517 build backend
        python3-reedsolo: switch to PEP-517 build backend
        curlpp: Fix build issue
        libhugetlbfs: Fix contains reference to TMPDIR [buildpaths] error

  ptak (1):
        opencv: upgrade 4.9.0 -> 4.10.0

  quic-raghuvar (2):
        android-tools-adbd.service: Change /var to /etc in ConditionPathExists
        android-toold-adbd: Fix inconsistency between selinux configurations

  rajmohan r (1):
        unbound: Add ptest for unbound

  s-tokumoto (2):
        capnproto: Add "capnp" to CVE_PRODUCT
        fuse: Add "fuse:fuse" to CVE_PRODUCT

meta-security: b4a8bc606f..e2c44c8b5d:
  Anusmita Dutta Mazumder (1):
        Add styhead LAYERSERIES_COMPAT

  Armin Kuster (18):
        recipes-*: convert WORKDIR->UNPACKDIR
        apparmor: fix QA Warnings
        python3-fail2ban: convert WORKDIR->UNPACKDIR
        krill: Fix QA warnings
        suricata: fix QA warnings
        isic: Fix config error
        arpwatch: Fix compile error
        chipsec: Fix QA Warnings
        tpm-tools: fix QA and compile errors.
        ima-policy: Fix S=UNPACKDIR
        harden/initscripts: UNPACKDIR fix
        harden-image-minima: Fix usermod
        aide: update to latest stable.
        python3-privacyidea: switch to PEP-517 build backend
        switch to PEP-517 build backend
        python3-tpm2-pyts: switch to PEP-517 build backend
        gitlab-ci: minor tweaks to try
        layer.conf: Update to styhead release name series

  Chen Qi (1):
        libgssglue: switch to use git source

  Hitendra Prajapati (2):
        sssd: Fix CVE-2023-3758
        libhtp: fix CVE-2024-45797

  Martin Jansa (4):
        {tcp,udp}-smack-test: fix few more implicit-function-declaration issues fatal with gcc-14
        README.md: fix sendemail.to value
        suricata: run whole autotools_do_configure not just oe_runconf
        layer.conf: Update to styhead release name series

  Mikko Rapeli (9):
        python3-tpm2-pytss: update from 2.1.0 to 2.3.0
        parsec-service: UNPACKDIR fixes
        bastille: UNPACKDIR fixes
        initramfs-framework-ima: UNPACKDIR fix
        ima-policy-appraise-all: UNPACKDIR fix
        ima-policy-simple: UNPACKDIR fix
        ima-policy-hashed: set S
        ima-policy-appraise-all: set S
        ima-policy-simple: set S

  Rasmus Villemoes (1):
        fail2ban: update to 1.1.0+

  Ricardo Salveti (1):
        tpm2-tss: drop libgcrypt

  Siddharth Doshi (1):
        Suricata: Security Fix for CVE-2024-37151, CVE-2024-38534, CVE-2024-38535, CVE-2024-38536

  Stefan Berger (3):
        meta-integrity: Remove stale variables and documentation
        meta-integrity: Add IMA_EVM_PRIVKEY_KEY_OPT to pass options to evmctl
        meta-integrity: Enable passing private key password

  Vijay Anusuri (1):
        tpm2-tools: Upgrade 5.5 -> 5.7

  Wang Mingyu (3):
        ima-policy-hashed: Start WORKDIR -> UNPACKDIR transition
        suricata: Start WORKDIR -> UNPACKDIR transition
        trousers: Start WORKDIR -> UNPACKDIR transition

  Yi Zhao (3):
        openscap: fix PACKAGECONFIG[remediate_service]
        openscap: upgrade 1.3.10 -> 1.4.0
        scap-security-guide: upgrade 0.1.73 -> 0.1.74

meta-raspberrypi: eb8ffc4e63..97d7a6b5ec:
  Andrew Lalaev (1):
        rpi-base.inc: add the disable-wifi-pi5 overlay

  Bastian Wanner (1):
        udev-rules-rpi.bb: Fix psplash systemd connection

  Garrett Brown (1):
        linux: Enable CONFIG_I2C_BRCMSTB for proper HDMI I2C support

  Jaeyoon Jung (1):
        linux-raspberrypi: Drop deprecated configs from android-driver.cfg

  Jan Vermaete (5):
        kas: updated the refspec syntax of the kas file
        README.md: pi3-disable-bt is renamed to disable-bt in kas example
        rpi-base.inc: added the disable-bt-pi5 device tree overlay
        raspi-utils: added new recipe
        extra-build-config.md: added a white line

  Khem Raj (6):
        linux-raspberrypi: Upgrade kernel to 6.6.36
        weston-init.bbappend: Delete
        layer.conf: Update to walnascar (5.2) layer/release series
        linux-raspberrypi-6.6: Upgrade to 6.6.63
        rpi-base: Remove bcm2712-rpi-5-b.dtb from RPI_KERNEL_DEVICETREE target
        SECURITY.md: Add instructions for reporting security issues

  Leon Anavi (2):
        rpi-u-boot-scr: WORKDIR -> UNPACKDIR transition
        conf/layer.conf: Remove meta-lts-mixins

  Luca Carlon (1):
        picamera-libs: removed unused libraries from python3-picamera

  Martin Jansa (1):
        mesa: rename bbappend to match new recipe name from oe-core

  Matthias Klein (1):
        linux-firmware-rpidistro: Upgrade to bookworm/20230625-2+rpt3

  Pierrick Curt (1):
        rpi-base: build uart dts overlays by default

  Robert Yang (1):
        conf/layer.conf: Remove duplicated BBFILES

  Victor Löfgren (1):
        README.md: Update link to compatible layers

  Vincent Davis Jr (2):
        rpi-default-providers: remove vlc,ffmpeg PREFFERED_PROVIDER
        docs: include PREFERRED_PROVIDER_ffmpeg,vlc change

meta-arm: 981425c54e..18bc3f9389:
  Ali Can Ozaslan (2):
        arm-bsp/trusted-firmware-m: corstone1000: Increase PS size
        arm-bsp/optee: corstone1000: Update upstream status

  Amr Mohamed (5):
        arm-systemready/README.md: add ARM_FVP_EULA_ACCEPT
        arm-systemready/linux-distros: new inc file for unattended installation
        arm-systemready/linux-distros: Add kickstart file for Fedora unattended
        arm-systemready/oeqa: Add new test for Fedora unattended installation
        kas: Add new yml file for Distros unattended installation

  Ben (3):
        arm-systemready/linux-distros: Implement unattended openSUSE
        arm-systemready/oeqa: Add unattended installation testcase
        kas: Include unattended openSUSE test

  Bence Balogh (18):
        arm-bsp/optee:corstone1000: Update optee to v4.2
        arm-bsp/optee: Remove OP-TEE OS v4.1 recipe
        arm-bsp/trusted-firmware-a: Upgrade Corstone1000 to TF-A v2.11
        arm-bsp/u-boot: corstone1000: use mdata v2
        arm-bsp/trusted-firmware-a: corstone1000: update upstream statuses
        arm-bsp/trusted-firmware-m: corstone1000: upgrade to TF-M v2.1.x
        arm-bsp/trusted-services: corstone1000: align PSA crypto structs with TF-M
        arm-bsp/trusted-firmware-m: Remove TF-M v2.0 recipe
        arm-bsp/trusted-firmware-m: corstone1000: fix bank offset
        arm-bsp/trusted-firmware-m: corstone1000: add Secure Debug
        arm-bsp/documentation: corstone1000: add Secure Debug test
        CI: Add secure debug build for Corstone-1000
        arm-bsp/linux-yocto: corstone1000: bump to v6.10
        arm-bsp/documentation: corstone1000: remove TEE driver load
        arm-bsp/trusted-firmware-m: corstone1000: Fix MPU configuration
        arm-bsp/trusted-firmware-m: corstone1000: Update metadata handling
        arm-bsp/trusted-firmware-m: corstone1000: Update patches
        arm-bsp/trusted-firmware-m: corstone1000: Fix Secure Debug connection due to token version mismatch

  Delane Brandy (1):
        arm-bsp/corstone1000: Update Corstone-1000 user guide

  Emekcan Aras (1):
        arm-bsp/trusted-firmware-m: corstone1000: Switch to metadata v2

  Harsimran Singh Tungal (7):
        arm-bsp/u-boot: corstone1000: fix U-Boot patch
        arm-bsp/trusted-services: corstone1000: fix compilation issues
        arm-bsp/trusted-services: fix compilation issues for ts-newlib
        arm-bsp/trusted-firmware-a: corstone1000: fix compilation issue for FVP multicore
        arm-bsp,kas: corstone1000: enable External System based on new yml file
        arm-bsp,documentation: corstone1000: update user documentation
        arm-bsp/trusted-services: corstone1000: Update Trusted-Services patches

  Hugues KAMBA MPIANA (4):
        arm-bsp/documentation: corstone1000: Mention PMOD module as prerequisite
        arm-bsp/documentation: corstone1000: Amend documentation for CORSTONE1000-2024.11 release
        kas: corstone-1000: Update the SHA of the Yocto layer dependencies for the CORSTONE1000-2024.11 release.
        kas: corstone-1000: Pin Yocto layer dependencies for CORSTONE1000-2024.11 release

  Hugues Kamba-Mpiana (2):
        arm-bsp/documentation: corstone1000: Deprecation of Sphinx context injection
        arm-bsp/documentation: corstone1000: Install Sphinx theme as recommended

  Javier Tia (3):
        arm/optee: Add optee udev rules
        arm: Enable Secure Boot in all required recipes
        arm/qemuarm64-secureboot: Enable UEFI Secure Boot

  Jon Mason (31):
        arm-bsp/fvp-base: update version to 11.26.11
        arm/qemuarm64-secureboot: fix qemu parameter
        arm-toolchain: fix for WORKDIR changes
        arm-systemready: WORKDIR to UNPACKDIR changes
        CI: remove ts-smm-gateway for qemuarm64-secureboot-ts
        arm-toolchain: update to 13.3
        CI: remove unnecessary clang settings
        CI: add poky-altcfg
        arm/opencsd: update to 1.5.3
        arm/boot-wrapper-aarch64: update with latest patch
        arm/gn: update to the latest commit
        CI: remove xorg test removal from edk2
        arm-bsp/fvp-base: add edk2 testimage support
        arm-bsp/fvp-base: u-boot patch clean-up
        arm: use devtool to clean-up patches
        arm-bsp: remove unreferenced patches and configs
        arm/trusted-firmware-a: remove workaround patch for qemuarm64-secureboot
        arm/qemu-efi-disk: add rootwait to bootargs
        arm/arm-tstee: pin kernel to 6.6 to workaround issue
        arm/trusted-firmware-a: update LICENSE entry
        arm/musl: work around trusted services error
        arm/libts: Patch to fix 6.10 kernel builds breaks
        arm-bsp/documentation: corstone1000: Improve user guide
        arm-toolchain: remove libmount-mountfd-support when using binary toolchain
        arm-bsp/fvp-base: support poky-altcfg
        arm-bsp/fvp-base: Get 6.10 kernel working
        arm-bsp/fvp: Re-enable parselogs
        arm/optee-os: Backport the clang fixes
        arm-bsp/fvp-base: use trusted-firmware-a v2.11
        CI: Rework qemuarm64-secureboot matrix
        CI: remove branch name

  Luca Fancellu (2):
        arm/oeqa: Introduce retry mechanism for fvp_devices run_cmd
        arm/lib: Handle timeout for spawn object on stop()

  Mariam Elshakfy (1):
        arm/trusted-services: Move ts-newlib compilation fix to meta-arm

  Martin Jansa (1):
        layer.conf: Update to styhead release name series

  Mikko Rapeli (8):
        optee-os: asm debug prefix fixes
        optee-os: remove absolute paths
        optee-os-tadevkit: remove buildpaths INSANE_SKIP
        optee-os: remove buildpaths INSANE_SKIP
        optee-os: fix buildpaths QA failure on corstone1000
        ts-newlib: setup git with check_git_config
        arm/optee-client: fix systemd service dependencies
        trusted-firmware-a: fix panic on kv260/zynqmp

  Peter Hoyes (1):
        arm/fvpboot: Revert "Disable timing annotation by default"

  Quentin Schulz (2):
        add basic b4 config file
        arm/trusted-firmware-a: add recipe for more-recent-but-not-yet-released source code

  Ross Burton (9):
        CI: update to Kas 4.4 image
        arm-systemready: explicitly disable SPDX in the fake image classes
        arm/edk2-firmware: set CVE_PRODUCT to the correct CPE
        arm-bsp/linux-yocto: update for linux 6.10
        CI: switch to building against styhead branches where possible
        CI: add KAS_BUILD_DIR variable
        CI: remove duplicate arm-systemready-ir-acs
        CI: transform testimage reports into JUnit XML reports
        arm-base/linux-yocto: revert interim 6.10 patch for fvp-base

  Ziad Elhanafy (2):
        arm/oeqa: Enable pexpect profiling for testcase debugging
        arm-systemready/linux-distros: Follow WORKDIR -> UNPACKDIR transition

Change-Id: I8c03dc8ed1822e0356c1d3dcf86b5c408aff3f78
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>

10 files changed, 384 insertions, 241 deletions

diff --git a/poky/meta/classes-global/insane.bbclass b/poky/meta/classes-global/insane.bbclass
index 6888fa06f0..1691d96b64 100644
--- a/poky/meta/classes-global/insane.bbclass
+++ b/poky/meta/classes-global/insane.bbclass
@@ -26,26 +26,25 @@
 
 # Elect whether a given type of error is a warning or error, they may
 # have been set by other files.
-WARN_QA ?= " libdir xorg-driver-abi buildpaths \
+WARN_QA ?= "32bit-time native-last pep517-backend"
+ERROR_QA ?= "dev-so debug-deps dev-deps debug-files arch pkgconfig la \
             textrel incompatible-license files-invalid \
             infodir build-deps src-uri-bad symlink-to-sysroot multilib \
             invalid-packageconfig host-user-contaminated uppercase-pn \
             mime mime-xdg unlisted-pkg-lics unhandled-features-check \
-            missing-update-alternatives native-last missing-ptest \
+            missing-update-alternatives missing-ptest \
             license-exists license-no-generic license-syntax license-format \
-            license-incompatible license-file-missing obsolete-license \
-            32bit-time virtual-slash \
-            "
-ERROR_QA ?= "dev-so debug-deps dev-deps debug-files arch pkgconfig la \
-            perms dep-cmp pkgvarcheck perm-config perm-line perm-link \
-            split-strip packages-list pkgv-undefined var-undefined \
+            license-exception license-file-missing obsolete-license \
+            libdir xorg-driver-abi buildpaths \
+            dep-cmp pkgvarcheck perm-config perm-line perm-link \
+            packages-list pkgv-undefined var-undefined \
             version-going-backwards expanded-d invalid-chars \
             license-checksum dev-elf file-rdeps configure-unsafe \
             configure-gettext perllocalpod shebang-size \
-            already-stripped installed-vs-shipped ldflags compile-host-path \
-            install-host-path pn-overrides unknown-configure-option \
+            already-stripped installed-vs-shipped ldflags \
+            pn-overrides unknown-configure-option \
             useless-rpaths rpaths staticdev empty-dirs \
-            patch-fuzz patch-status \
+            patch-fuzz patch-status virtual-slash \
             "
 # Add usrmerge QA check based on distro feature
 ERROR_QA:append = "${@bb.utils.contains('DISTRO_FEATURES', 'usrmerge', ' usrmerge', '', d)}"
@@ -55,8 +54,6 @@ FAKEROOT_QA = "host-user-contaminated"
 FAKEROOT_QA[doc] = "QA tests which need to run under fakeroot. If any \
 enabled tests are listed here, the do_package_qa task will run under fakeroot."
 
-ALL_QA = "${WARN_QA} ${ERROR_QA}"
-
 UNKNOWN_CONFIGURE_OPT_IGNORE ?= "--enable-nls --disable-nls --disable-silent-rules --disable-dependency-tracking --disable-static"
 
 # This is a list of directories that are expected to be empty.
@@ -84,7 +81,7 @@ def package_qa_clean_path(path, d, pkg=None):
     return path.replace(d.getVar("TMPDIR"), "/").replace("//", "/")
 
 QAPATHTEST[shebang-size] = "package_qa_check_shebang_size"
-def package_qa_check_shebang_size(path, name, d, elf, messages):
+def package_qa_check_shebang_size(path, name, d, elf):
     import stat
     if os.path.islink(path) or stat.S_ISFIFO(os.stat(path).st_mode) or elf:
         return
@@ -103,25 +100,22 @@ def package_qa_check_shebang_size(path, name, d, elf, messages):
             return
 
         if len(stanza) > 129:
-            oe.qa.add_message(messages, "shebang-size", "%s: %s maximum shebang size exceeded, the maximum size is 128." % (name, package_qa_clean_path(path, d, name)))
+            oe.qa.handle_error("shebang-size", "%s: %s maximum shebang size exceeded, the maximum size is 128." % (name, package_qa_clean_path(path, d, name)), d)
             return
 
 QAPATHTEST[libexec] = "package_qa_check_libexec"
-def package_qa_check_libexec(path,name, d, elf, messages):
+def package_qa_check_libexec(path,name, d, elf):
 
     # Skip the case where the default is explicitly /usr/libexec
     libexec = d.getVar('libexecdir')
     if libexec == "/usr/libexec":
-        return True
+        return
 
     if 'libexec' in path.split(os.path.sep):
-        oe.qa.add_message(messages, "libexec", "%s: %s is using libexec please relocate to %s" % (name, package_qa_clean_path(path, d, name), libexec))
-        return False
-
-    return True
+        oe.qa.handle_error("libexec", "%s: %s is using libexec please relocate to %s" % (name, package_qa_clean_path(path, d, name), libexec), d)
 
 QAPATHTEST[rpaths] = "package_qa_check_rpath"
-def package_qa_check_rpath(file,name, d, elf, messages):
+def package_qa_check_rpath(file,name, d, elf):
     """
     Check for dangerous RPATHs
     """
@@ -143,10 +137,10 @@ def package_qa_check_rpath(file,name, d, elf, messages):
             rpath = m.group(1)
             for dir in bad_dirs:
                 if dir in rpath:
-                    oe.qa.add_message(messages, "rpaths", "package %s contains bad RPATH %s in file %s" % (name, rpath, file))
+                    oe.qa.handle_error("rpaths", "package %s contains bad RPATH %s in file %s" % (name, rpath, file), d)
 
 QAPATHTEST[useless-rpaths] = "package_qa_check_useless_rpaths"
-def package_qa_check_useless_rpaths(file, name, d, elf, messages):
+def package_qa_check_useless_rpaths(file, name, d, elf):
     """
     Check for RPATHs that are useless but not dangerous
     """
@@ -173,31 +167,31 @@ def package_qa_check_useless_rpaths(file, name, d, elf, messages):
             if rpath_eq(rpath, libdir) or rpath_eq(rpath, base_libdir):
                 # The dynamic linker searches both these places anyway.  There is no point in
                 # looking there again.
-                oe.qa.add_message(messages, "useless-rpaths", "%s: %s contains probably-redundant RPATH %s" % (name, package_qa_clean_path(file, d, name), rpath))
+                oe.qa.handle_error("useless-rpaths", "%s: %s contains probably-redundant RPATH %s" % (name, package_qa_clean_path(file, d, name), rpath), d)
 
 QAPATHTEST[dev-so] = "package_qa_check_dev"
-def package_qa_check_dev(path, name, d, elf, messages):
+def package_qa_check_dev(path, name, d, elf):
     """
     Check for ".so" library symlinks in non-dev packages
     """
 
     if not name.endswith("-dev") and not name.endswith("-dbg") and not name.endswith("-ptest") and not name.startswith("nativesdk-") and path.endswith(".so") and os.path.islink(path):
-        oe.qa.add_message(messages, "dev-so", "non -dev/-dbg/nativesdk- package %s contains symlink .so '%s'" % \
-                 (name, package_qa_clean_path(path, d, name)))
+        oe.qa.handle_error("dev-so", "non -dev/-dbg/nativesdk- package %s contains symlink .so '%s'" % \
+                 (name, package_qa_clean_path(path, d, name)), d)
 
 QAPATHTEST[dev-elf] = "package_qa_check_dev_elf"
-def package_qa_check_dev_elf(path, name, d, elf, messages):
+def package_qa_check_dev_elf(path, name, d, elf):
     """
     Check that -dev doesn't contain real shared libraries.  The test has to
     check that the file is not a link and is an ELF object as some recipes
     install link-time .so files that are linker scripts.
     """
     if name.endswith("-dev") and path.endswith(".so") and not os.path.islink(path) and elf:
-        oe.qa.add_message(messages, "dev-elf", "-dev package %s contains non-symlink .so '%s'" % \
-                 (name, package_qa_clean_path(path, d, name)))
+        oe.qa.handle_error("dev-elf", "-dev package %s contains non-symlink .so '%s'" % \
+                 (name, package_qa_clean_path(path, d, name)), d)
 
 QAPATHTEST[staticdev] = "package_qa_check_staticdev"
-def package_qa_check_staticdev(path, name, d, elf, messages):
+def package_qa_check_staticdev(path, name, d, elf):
     """
     Check for ".a" library in non-staticdev packages
     There are a number of exceptions to this rule, -pic packages can contain
@@ -206,22 +200,22 @@ def package_qa_check_staticdev(path, name, d, elf, messages):
     """
 
     if not name.endswith("-pic") and not name.endswith("-staticdev") and not name.endswith("-ptest") and path.endswith(".a") and not path.endswith("_nonshared.a") and not '/usr/lib/debug-static/' in path and not '/.debug-static/' in path:
-        oe.qa.add_message(messages, "staticdev", "non -staticdev package contains static .a library: %s path '%s'" % \
-                 (name, package_qa_clean_path(path, d, name)))
+        oe.qa.handle_error("staticdev", "non -staticdev package contains static .a library: %s path '%s'" % \
+                 (name, package_qa_clean_path(path, d, name)), d)
 
 QAPATHTEST[mime] = "package_qa_check_mime"
-def package_qa_check_mime(path, name, d, elf, messages):
+def package_qa_check_mime(path, name, d, elf):
     """
     Check if package installs mime types to /usr/share/mime/packages
     while no inheriting mime.bbclass
     """
 
     if d.getVar("datadir") + "/mime/packages" in path and path.endswith('.xml') and not bb.data.inherits_class("mime", d):
-        oe.qa.add_message(messages, "mime", "package contains mime types but does not inherit mime: %s path '%s'" % \
-                 (name, package_qa_clean_path(path, d, name)))
+        oe.qa.handle_error("mime", "package contains mime types but does not inherit mime: %s path '%s'" % \
+                 (name, package_qa_clean_path(path, d, name)), d)
 
 QAPATHTEST[mime-xdg] = "package_qa_check_mime_xdg"
-def package_qa_check_mime_xdg(path, name, d, elf, messages):
+def package_qa_check_mime_xdg(path, name, d, elf):
     """
     Check if package installs desktop file containing MimeType and requires
     mime-types.bbclass to create /usr/share/applications/mimeinfo.cache
@@ -244,10 +238,10 @@ def package_qa_check_mime_xdg(path, name, d, elf, messages):
             if name == d.getVar('PN'):
                 pkgname = '${PN}'
             wstr += "If yes: add \'inhert mime-xdg\' and \'MIME_XDG_PACKAGES += \"%s\"\' / if no add \'INSANE_SKIP:%s += \"mime-xdg\"\' to recipe." % (pkgname, pkgname)
-            oe.qa.add_message(messages, "mime-xdg", wstr)
+            oe.qa.handle_error("mime-xdg", wstr, d)
         if mime_type_found:
-            oe.qa.add_message(messages, "mime-xdg", "%s: contains desktop file with key 'MimeType' but does not inhert mime-xdg: %s" % \
-                    (name, package_qa_clean_path(path, d, name)))
+            oe.qa.handle_error("mime-xdg", "%s: contains desktop file with key 'MimeType' but does not inhert mime-xdg: %s" % \
+                    (name, package_qa_clean_path(path, d, name)), d)
 
 def package_qa_check_libdir(d):
     """
@@ -313,18 +307,18 @@ def package_qa_check_libdir(d):
         oe.qa.handle_error("libdir", "\n".join(messages), d)
 
 QAPATHTEST[debug-files] = "package_qa_check_dbg"
-def package_qa_check_dbg(path, name, d, elf, messages):
+def package_qa_check_dbg(path, name, d, elf):
     """
     Check for ".debug" files or directories outside of the dbg package
     """
 
     if not "-dbg" in name and not "-ptest" in name:
         if '.debug' in path.split(os.path.sep):
-            oe.qa.add_message(messages, "debug-files", "%s: non debug package contains .debug directory %s" % \
-                     (name, package_qa_clean_path(path, d, name)))
+            oe.qa.handle_error("debug-files", "%s: non debug package contains .debug directory %s" % \
+                     (name, package_qa_clean_path(path, d, name)), d)
 
 QAPATHTEST[arch] = "package_qa_check_arch"
-def package_qa_check_arch(path,name,d, elf, messages):
+def package_qa_check_arch(path,name,d, elf):
     """
     Check if archs are compatible
     """
@@ -340,7 +334,7 @@ def package_qa_check_arch(path,name,d, elf, messages):
 
     if host_arch == "allarch":
         pn = d.getVar('PN')
-        oe.qa.add_message(messages, "arch", pn + ": Recipe inherits the allarch class, but has packaged architecture-specific binaries")
+        oe.qa.handle_error("arch", pn + ": Recipe inherits the allarch class, but has packaged architecture-specific binaries", d)
         return
 
     # avoid following links to /usr/bin (e.g. on udev builds)
@@ -358,17 +352,18 @@ def package_qa_check_arch(path,name,d, elf, messages):
             host_os == "linux-gnu_ilp32" or re.match(r'mips64.*32', d.getVar('DEFAULTTUNE')))
     is_bpf = (oe.qa.elf_machine_to_string(elf.machine()) == "BPF")
     if not ((machine == elf.machine()) or is_32 or is_bpf):
-        oe.qa.add_message(messages, "arch", "Architecture did not match (%s, expected %s) in %s" % \
-                 (oe.qa.elf_machine_to_string(elf.machine()), oe.qa.elf_machine_to_string(machine), package_qa_clean_path(path, d, name)))
+        oe.qa.handle_error("arch", "Architecture did not match (%s, expected %s) in %s" % \
+                 (oe.qa.elf_machine_to_string(elf.machine()), oe.qa.elf_machine_to_string(machine), package_qa_clean_path(path, d, name)), d)
     elif not ((bits == elf.abiSize()) or is_32 or is_bpf):
-        oe.qa.add_message(messages, "arch", "Bit size did not match (%d, expected %d) in %s" % \
-                 (elf.abiSize(), bits, package_qa_clean_path(path, d, name)))
+        oe.qa.handle_error("arch", "Bit size did not match (%d, expected %d) in %s" % \
+                 (elf.abiSize(), bits, package_qa_clean_path(path, d, name)), d)
     elif not ((littleendian == elf.isLittleEndian()) or is_bpf):
-        oe.qa.add_message(messages, "arch", "Endiannes did not match (%d, expected %d) in %s" % \
-                 (elf.isLittleEndian(), littleendian, package_qa_clean_path(path, d, name)))
+        oe.qa.handle_error("arch", "Endiannes did not match (%d, expected %d) in %s" % \
+                 (elf.isLittleEndian(), littleendian, package_qa_clean_path(path, d, name)), d)
+package_qa_check_arch[vardepsexclude] = "DEFAULTTUNE"
 
 QAPATHTEST[desktop] = "package_qa_check_desktop"
-def package_qa_check_desktop(path, name, d, elf, messages):
+def package_qa_check_desktop(path, name, d, elf):
     """
     Run all desktop files through desktop-file-validate.
     """
@@ -377,10 +372,10 @@ def package_qa_check_desktop(path, name, d, elf, messages):
         output = os.popen("%s %s" % (desktop_file_validate, path))
         # This only produces output on errors
         for l in output:
-            oe.qa.add_message(messages, "desktop", "Desktop file issue: " + l.strip())
+            oe.qa.handle_error("desktop", "Desktop file issue: " + l.strip(), d)
 
 QAPATHTEST[textrel] = "package_qa_textrel"
-def package_qa_textrel(path, name, d, elf, messages):
+def package_qa_textrel(path, name, d, elf):
     """
     Check if the binary contains relocations in .text
     """
@@ -392,21 +387,17 @@ def package_qa_textrel(path, name, d, elf, messages):
         return
 
     phdrs = elf.run_objdump("-p", d)
-    sane = True
 
     import re
     textrel_re = re.compile(r"\s+TEXTREL\s+")
     for line in phdrs.split("\n"):
         if textrel_re.match(line):
-            sane = False
-            break
-
-    if not sane:
-        path = package_qa_clean_path(path, d, name)
-        oe.qa.add_message(messages, "textrel", "%s: ELF binary %s has relocations in .text" % (name, path))
+            path = package_qa_clean_path(path, d, name)
+            oe.qa.handle_error("textrel", "%s: ELF binary %s has relocations in .text" % (name, path), d)
+            return
 
 QAPATHTEST[ldflags] = "package_qa_hash_style"
-def package_qa_hash_style(path, name, d, elf, messages):
+def package_qa_hash_style(path, name, d, elf):
     """
     Check if the binary has the right hash style...
     """
@@ -438,11 +429,12 @@ def package_qa_hash_style(path, name, d, elf, messages):
             sane = True
     if has_syms and not sane:
         path = package_qa_clean_path(path, d, name)
-        oe.qa.add_message(messages, "ldflags", "File %s in package %s doesn't have GNU_HASH (didn't pass LDFLAGS?)" % (path, name))
+        oe.qa.handle_error("ldflags", "File %s in package %s doesn't have GNU_HASH (didn't pass LDFLAGS?)" % (path, name), d)
+package_qa_hash_style[vardepsexclude] = "TCLIBC"
 
 
 QAPATHTEST[buildpaths] = "package_qa_check_buildpaths"
-def package_qa_check_buildpaths(path, name, d, elf, messages):
+def package_qa_check_buildpaths(path, name, d, elf):
     """
     Check for build paths inside target files and error if paths are not
     explicitly ignored.
@@ -459,11 +451,11 @@ def package_qa_check_buildpaths(path, name, d, elf, messages):
         file_content = f.read()
         if tmpdir in file_content:
             path = package_qa_clean_path(path, d, name)
-            oe.qa.add_message(messages, "buildpaths", "File %s in package %s contains reference to TMPDIR" % (path, name))
+            oe.qa.handle_error("buildpaths", "File %s in package %s contains reference to TMPDIR" % (path, name), d)
 
 
 QAPATHTEST[xorg-driver-abi] = "package_qa_check_xorg_driver_abi"
-def package_qa_check_xorg_driver_abi(path, name, d, elf, messages):
+def package_qa_check_xorg_driver_abi(path, name, d, elf):
     """
     Check that all packages containing Xorg drivers have ABI dependencies
     """
@@ -478,20 +470,20 @@ def package_qa_check_xorg_driver_abi(path, name, d, elf, messages):
         for rdep in bb.utils.explode_deps(d.getVar('RDEPENDS:' + name) or ""):
             if rdep.startswith("%sxorg-abi-" % mlprefix):
                 return
-        oe.qa.add_message(messages, "xorg-driver-abi", "Package %s contains Xorg driver (%s) but no xorg-abi- dependencies" % (name, os.path.basename(path)))
+        oe.qa.handle_error("xorg-driver-abi", "Package %s contains Xorg driver (%s) but no xorg-abi- dependencies" % (name, os.path.basename(path)), d)
 
 QAPATHTEST[infodir] = "package_qa_check_infodir"
-def package_qa_check_infodir(path, name, d, elf, messages):
+def package_qa_check_infodir(path, name, d, elf):
     """
     Check that /usr/share/info/dir isn't shipped in a particular package
     """
     infodir = d.expand("${infodir}/dir")
 
     if infodir in path:
-        oe.qa.add_message(messages, "infodir", "The %s file is not meant to be shipped in a particular package." % infodir)
+        oe.qa.handle_error("infodir", "The %s file is not meant to be shipped in a particular package." % infodir, d)
 
 QAPATHTEST[symlink-to-sysroot] = "package_qa_check_symlink_to_sysroot"
-def package_qa_check_symlink_to_sysroot(path, name, d, elf, messages):
+def package_qa_check_symlink_to_sysroot(path, name, d, elf):
     """
     Check that the package doesn't contain any absolute symlinks to the sysroot.
     """
@@ -501,10 +493,10 @@ def package_qa_check_symlink_to_sysroot(path, name, d, elf, messages):
             tmpdir = d.getVar('TMPDIR')
             if target.startswith(tmpdir):
                 path = package_qa_clean_path(path, d, name)
-                oe.qa.add_message(messages, "symlink-to-sysroot", "Symlink %s in %s points to TMPDIR" % (path, name))
+                oe.qa.handle_error("symlink-to-sysroot", "Symlink %s in %s points to TMPDIR" % (path, name), d)
 
 QAPATHTEST[32bit-time] = "check_32bit_symbols"
-def check_32bit_symbols(path, packagename, d, elf, messages):
+def check_32bit_symbols(path, packagename, d, elf):
     """
     Check that ELF files do not use any 32 bit time APIs from glibc.
     """
@@ -623,11 +615,9 @@ def check_32bit_symbols(path, packagename, d, elf, messages):
             if not allowed:
                 msgformat = elfpath + " uses 32-bit api '%s'"
                 for sym in usedapis:
-                    oe.qa.add_message(messages, '32bit-time', msgformat % sym)
-                oe.qa.add_message(
-                    messages, '32bit-time',
-                    'Suppress with INSANE_SKIP = "32bit-time"'
-                )
+                    oe.qa.handle_error('32bit-time', msgformat % sym, d)
+                oe.qa.handle_error('32bit-time', 'Suppress with INSANE_SKIP = "32bit-time"', d)
+check_32bit_symbols[vardepsexclude] = "OVERRIDES"
 
 # Check license variables
 do_populate_lic[postfuncs] += "populate_lic_qa_checksum"
@@ -788,54 +778,14 @@ def qa_check_staged(path,d):
                         oe.qa.handle_error("pkgconfig", error_msg, d)
 
             if not skip_shebang_size:
-                errors = {}
-                package_qa_check_shebang_size(path, "", d, None, errors)
-                for e in errors:
-                    oe.qa.handle_error(e, errors[e], d)
-
-
-# Run all package-wide warnfuncs and errorfuncs
-def package_qa_package(warnfuncs, errorfuncs, package, d):
-    warnings = {}
-    errors = {}
-
-    for func in warnfuncs:
-        func(package, d, warnings)
-    for func in errorfuncs:
-        func(package, d, errors)
-
-    for w in warnings:
-        oe.qa.handle_error(w, warnings[w], d)
-    for e in errors:
-        oe.qa.handle_error(e, errors[e], d)
-
-    return len(errors) == 0
-
-# Run all recipe-wide warnfuncs and errorfuncs
-def package_qa_recipe(warnfuncs, errorfuncs, pn, d):
-    warnings = {}
-    errors = {}
-
-    for func in warnfuncs:
-        func(pn, d, warnings)
-    for func in errorfuncs:
-        func(pn, d, errors)
-
-    for w in warnings:
-        oe.qa.handle_error(w, warnings[w], d)
-    for e in errors:
-        oe.qa.handle_error(e, errors[e], d)
-
-    return len(errors) == 0
+                package_qa_check_shebang_size(path, "", d, None)
 
 def prepopulate_objdump_p(elf, d):
     output = elf.run_objdump("-p", d)
     return (elf.name, output)
 
 # Walk over all files in a directory and call func
-def package_qa_walk(warnfuncs, errorfuncs, package, d):
-    warnings = {}
-    errors = {}
+def package_qa_walk(checkfuncs, package, d):
     elves = {}
     for path in pkgfiles[package]:
             elf = None
@@ -856,18 +806,11 @@ def package_qa_walk(warnfuncs, errorfuncs, package, d):
     for path in pkgfiles[package]:
             if path in elves:
                 elves[path].open()
-            for func in warnfuncs:
-                func(path, package, d, elves.get(path), warnings)
-            for func in errorfuncs:
-                func(path, package, d, elves.get(path), errors)
+            for func in checkfuncs:
+                func(path, package, d, elves.get(path))
             if path in elves:
                 elves[path].close()
 
-    for w in warnings:
-        oe.qa.handle_error(w, warnings[w], d)
-    for e in errors:
-        oe.qa.handle_error(e, errors[e], d)
-
 def package_qa_check_rdepends(pkg, pkgdest, skip, taskdeps, packages, d):
     # Don't do this check for kernel/module recipes, there aren't too many debug/development
     # packages and you can get false positives e.g. on kernel-module-lirc-dev
@@ -988,20 +931,18 @@ def package_qa_check_deps(pkg, pkgdest, d):
     check_valid_deps('RCONFLICTS')
 
 QAPKGTEST[usrmerge] = "package_qa_check_usrmerge"
-def package_qa_check_usrmerge(pkg, d, messages):
-
+def package_qa_check_usrmerge(pkg, d):
     pkgdest = d.getVar('PKGDEST')
     pkg_dir = pkgdest + os.sep + pkg + os.sep
     merged_dirs = ['bin', 'sbin', 'lib'] + d.getVar('MULTILIB_VARIANTS').split()
     for f in merged_dirs:
         if os.path.exists(pkg_dir + f) and not os.path.islink(pkg_dir + f):
             msg = "%s package is not obeying usrmerge distro feature. /%s should be relocated to /usr." % (pkg, f)
-            oe.qa.add_message(messages, "usrmerge", msg)
-            return False
-    return True
+            oe.qa.handle_error("usrmerge", msg, d)
+            return
 
 QAPKGTEST[perllocalpod] = "package_qa_check_perllocalpod"
-def package_qa_check_perllocalpod(pkg, d, messages):
+def package_qa_check_perllocalpod(pkg, d):
     """
     Check that the recipe didn't ship a perlocal.pod file, which shouldn't be
     installed in a distribution package.  cpan.bbclass sets NO_PERLLOCAL=1 to
@@ -1015,54 +956,47 @@ def package_qa_check_perllocalpod(pkg, d, messages):
     if matches:
         matches = [package_qa_clean_path(path, d, pkg) for path in matches]
         msg = "%s contains perllocal.pod (%s), should not be installed" % (pkg, " ".join(matches))
-        oe.qa.add_message(messages, "perllocalpod", msg)
+        oe.qa.handle_error("perllocalpod", msg, d)
 
 QAPKGTEST[expanded-d] = "package_qa_check_expanded_d"
-def package_qa_check_expanded_d(package, d, messages):
+def package_qa_check_expanded_d(package, d):
     """
     Check for the expanded D (${D}) value in pkg_* and FILES
     variables, warn the user to use it correctly.
     """
-    sane = True
     expanded_d = d.getVar('D')
 
     for var in 'FILES','pkg_preinst', 'pkg_postinst', 'pkg_prerm', 'pkg_postrm':
         bbvar = d.getVar(var + ":" + package) or ""
         if expanded_d in bbvar:
             if var == 'FILES':
-                oe.qa.add_message(messages, "expanded-d", "FILES in %s recipe should not contain the ${D} variable as it references the local build directory not the target filesystem, best solution is to remove the ${D} reference" % package)
-                sane = False
+                oe.qa.handle_error("expanded-d", "FILES in %s recipe should not contain the ${D} variable as it references the local build directory not the target filesystem, best solution is to remove the ${D} reference" % package, d)
             else:
-                oe.qa.add_message(messages, "expanded-d", "%s in %s recipe contains ${D}, it should be replaced by $D instead" % (var, package))
-                sane = False
-    return sane
+                oe.qa.handle_error("expanded-d", "%s in %s recipe contains ${D}, it should be replaced by $D instead" % (var, package), d)
 
 QAPKGTEST[unlisted-pkg-lics] = "package_qa_check_unlisted_pkg_lics"
-def package_qa_check_unlisted_pkg_lics(package, d, messages):
+def package_qa_check_unlisted_pkg_lics(package, d):
     """
     Check that all licenses for a package are among the licenses for the recipe.
     """
     pkg_lics = d.getVar('LICENSE:' + package)
     if not pkg_lics:
-        return True
+        return
 
     recipe_lics_set = oe.license.list_licenses(d.getVar('LICENSE'))
     package_lics = oe.license.list_licenses(pkg_lics)
     unlisted = package_lics - recipe_lics_set
     if unlisted:
-        oe.qa.add_message(messages, "unlisted-pkg-lics",
+        oe.qa.handle_error("unlisted-pkg-lics",
                                "LICENSE:%s includes licenses (%s) that are not "
-                               "listed in LICENSE" % (package, ' '.join(unlisted)))
-        return False
+                               "listed in LICENSE" % (package, ' '.join(unlisted)), d)
     obsolete = set(oe.license.obsolete_license_list()) & package_lics - recipe_lics_set
     if obsolete:
-        oe.qa.add_message(messages, "obsolete-license",
-                               "LICENSE:%s includes obsolete licenses %s" % (package, ' '.join(obsolete)))
-        return False
-    return True
+        oe.qa.handle_error("obsolete-license",
+                               "LICENSE:%s includes obsolete licenses %s" % (package, ' '.join(obsolete)), d)
 
 QAPKGTEST[empty-dirs] = "package_qa_check_empty_dirs"
-def package_qa_check_empty_dirs(pkg, d, messages):
+def package_qa_check_empty_dirs(pkg, d):
     """
     Check for the existence of files in directories that are expected to be
     empty.
@@ -1075,7 +1009,7 @@ def package_qa_check_empty_dirs(pkg, d, messages):
             recommendation = (d.getVar('QA_EMPTY_DIRS_RECOMMENDATION:' + dir) or
                               "but it is expected to be empty")
             msg = "%s installs files in %s, %s" % (pkg, dir, recommendation)
-            oe.qa.add_message(messages, "empty-dirs", msg)
+            oe.qa.handle_error("empty-dirs", msg, d)
 
 def package_qa_check_encoding(keys, encode, d):
     def check_encoding(key, enc):
@@ -1099,7 +1033,7 @@ HOST_USER_UID := "${@os.getuid()}"
 HOST_USER_GID := "${@os.getgid()}"
 
 QAPATHTEST[host-user-contaminated] = "package_qa_check_host_user"
-def package_qa_check_host_user(path, name, d, elf, messages):
+def package_qa_check_host_user(path, name, d, elf):
     """Check for paths outside of /home which are owned by the user running bitbake."""
 
     if not os.path.lexists(path):
@@ -1120,17 +1054,14 @@ def package_qa_check_host_user(path, name, d, elf, messages):
     else:
         check_uid = int(d.getVar('HOST_USER_UID'))
         if stat.st_uid == check_uid:
-            oe.qa.add_message(messages, "host-user-contaminated", "%s: %s is owned by uid %d, which is the same as the user running bitbake. This may be due to host contamination" % (pn, package_qa_clean_path(path, d, name), check_uid))
-            return False
+            oe.qa.handle_error("host-user-contaminated", "%s: %s is owned by uid %d, which is the same as the user running bitbake. This may be due to host contamination" % (pn, package_qa_clean_path(path, d, name), check_uid), d)
 
         check_gid = int(d.getVar('HOST_USER_GID'))
         if stat.st_gid == check_gid:
-            oe.qa.add_message(messages, "host-user-contaminated", "%s: %s is owned by gid %d, which is the same as the user running bitbake. This may be due to host contamination" % (pn, package_qa_clean_path(path, d, name), check_gid))
-            return False
-    return True
+            oe.qa.handle_error("host-user-contaminated", "%s: %s is owned by gid %d, which is the same as the user running bitbake. This may be due to host contamination" % (pn, package_qa_clean_path(path, d, name), check_gid), d)
 
 QARECIPETEST[unhandled-features-check] = "package_qa_check_unhandled_features_check"
-def package_qa_check_unhandled_features_check(pn, d, messages):
+def package_qa_check_unhandled_features_check(pn, d):
     if not bb.data.inherits_class('features_check', d):
         var_set = False
         for kind in ['DISTRO', 'MACHINE', 'COMBINED']:
@@ -1141,13 +1072,32 @@ def package_qa_check_unhandled_features_check(pn, d, messages):
             oe.qa.handle_error("unhandled-features-check", "%s: recipe doesn't inherit features_check" % pn, d)
 
 QARECIPETEST[missing-update-alternatives] = "package_qa_check_missing_update_alternatives"
-def package_qa_check_missing_update_alternatives(pn, d, messages):
+def package_qa_check_missing_update_alternatives(pn, d):
     # Look at all packages and find out if any of those sets ALTERNATIVE variable
     # without inheriting update-alternatives class
     for pkg in (d.getVar('PACKAGES') or '').split():
         if d.getVar('ALTERNATIVE:%s' % pkg) and not bb.data.inherits_class('update-alternatives', d):
             oe.qa.handle_error("missing-update-alternatives", "%s: recipe defines ALTERNATIVE:%s but doesn't inherit update-alternatives. This might fail during do_rootfs later!" % (pn, pkg), d)
 
+def parse_test_matrix(matrix_name, skip, d):
+        testmatrix = d.getVarFlags(matrix_name) or {}
+        g = globals()
+        checks = []
+        for w in (d.getVar("WARN_QA") or "").split():
+            if w in skip:
+               continue
+            if w in testmatrix and testmatrix[w] in g:
+                checks.append(g[testmatrix[w]])
+
+        for e in (d.getVar("ERROR_QA") or "").split():
+            if e in skip:
+               continue
+            if e in testmatrix and testmatrix[e] in g:
+                checks.append(g[testmatrix[e]])
+        return checks
+parse_test_matrix[vardepsexclude] = "ERROR_QA WARN_QA"
+
+
 # The PACKAGE FUNC to scan each package
 python do_package_qa () {
     import subprocess
@@ -1203,24 +1153,6 @@ python do_package_qa () {
     for dep in taskdepdata:
         taskdeps.add(taskdepdata[dep][0])
 
-    def parse_test_matrix(matrix_name):
-        testmatrix = d.getVarFlags(matrix_name) or {}
-        g = globals()
-        warnchecks = []
-        for w in (d.getVar("WARN_QA") or "").split():
-            if w in skip:
-               continue
-            if w in testmatrix and testmatrix[w] in g:
-                warnchecks.append(g[testmatrix[w]])
-
-        errorchecks = []
-        for e in (d.getVar("ERROR_QA") or "").split():
-            if e in skip:
-               continue
-            if e in testmatrix and testmatrix[e] in g:
-                errorchecks.append(g[testmatrix[e]])
-        return warnchecks, errorchecks
-
     for package in packages:
         skip = set((d.getVar('INSANE_SKIP') or "").split() +
                    (d.getVar('INSANE_SKIP:' + package) or "").split())
@@ -1233,20 +1165,21 @@ python do_package_qa () {
             oe.qa.handle_error("pkgname",
                     "%s doesn't match the [a-z0-9.+-]+ regex" % package, d)
 
-        warn_checks, error_checks = parse_test_matrix("QAPATHTEST")
-        package_qa_walk(warn_checks, error_checks, package, d)
+        checks = parse_test_matrix("QAPATHTEST", skip, d)
+        package_qa_walk(checks, package, d)
 
-        warn_checks, error_checks = parse_test_matrix("QAPKGTEST")
-        package_qa_package(warn_checks, error_checks, package, d)
+        checks = parse_test_matrix("QAPKGTEST", skip, d)
+        for func in checks:
+            func(package, d)
 
         package_qa_check_rdepends(package, pkgdest, skip, taskdeps, packages, d)
         package_qa_check_deps(package, pkgdest, d)
 
-    warn_checks, error_checks = parse_test_matrix("QARECIPETEST")
-    package_qa_recipe(warn_checks, error_checks, pn, d)
+    checks = parse_test_matrix("QARECIPETEST", skip, d)
+    for func in checks:
+        func(pn, d)
 
-    if 'libdir' in d.getVar("ALL_QA").split():
-        package_qa_check_libdir(d)
+    package_qa_check_libdir(d)
 
     oe.qa.exit_if_errors(d)
 }
@@ -1264,6 +1197,10 @@ python() {
     pkgs = (d.getVar('PACKAGES') or '').split()
     for pkg in pkgs:
         d.appendVarFlag("do_package_qa", "vardeps", " INSANE_SKIP:{}".format(pkg))
+    funcs = d.getVarFlags("QAPATHTEST")
+    funcs.update(d.getVarFlags("QAPKGTEST"))
+    funcs.update(d.getVarFlags("QARECIPETEST"))
+    d.appendVarFlag("do_package_qa", "vardeps", " ".join(funcs.values()))
 }
 
 SSTATETASKS += "do_package_qa"
@@ -1363,10 +1300,10 @@ python do_qa_patch() {
     srcdir = d.getVar('S')
     if not bb.utils.contains('DISTRO_FEATURES', 'ptest', True, False, d):
         pass
+    elif not (bb.utils.contains('ERROR_QA', 'unimplemented-ptest', True, False, d) or bb.utils.contains('WARN_QA', 'unimplemented-ptest', True, False, d)):
+        pass
     elif bb.data.inherits_class('ptest', d):
         bb.note("Package %s QA: skipping unimplemented-ptest: ptest implementation detected" % d.getVar('PN'))
-    elif srcdir == d.getVar('WORKDIR'):
-        bb.note("Package %s QA: skipping unimplemented-ptest: This check is not supported for recipe with \"S = \"${WORKDIR}\"" % d.getVar('PN'))
 
     # Detect perl Test:: based tests
     elif os.path.exists(os.path.join(srcdir, "t")) and any(filename.endswith('.t') for filename in os.listdir(os.path.join(srcdir, 't'))):
@@ -1562,8 +1499,7 @@ do_unpack[postfuncs] += "do_qa_unpack"
 python () {
     import re
 
-    tests = d.getVar('ALL_QA').split()
-    if "desktop" in tests:
+    if bb.utils.contains('ERROR_QA', 'desktop', True, False, d) or bb.utils.contains('WARN_QA', 'desktop', True, False, d):
         d.appendVar("PACKAGE_DEPENDS", " desktop-file-utils-native")
 
     ###########################################################################
@@ -1613,11 +1549,10 @@ python () {
         oe.qa.handle_error("pkgvarcheck", "recipe uses DEPENDS:${PN}, should use DEPENDS", d)
 
     # virtual/ is meaningless for these variables
-    if "virtual-slash" in (d.getVar("ALL_QA") or "").split():
-        for k in ['RDEPENDS', 'RPROVIDES']:
-            for var in bb.utils.explode_deps(d.getVar(k + ':' + pn) or ""):
-                if var.startswith("virtual/"):
-                    oe.qa.handle_error("virtual-slash", "%s is set to %s but the substring 'virtual/' holds no meaning in this context. It only works for build time dependencies, not runtime ones. It is suggested to use 'VIRTUAL-RUNTIME_' variables instead." % (k, var), d)
+    for k in ['RDEPENDS', 'RPROVIDES']:
+        for var in bb.utils.explode_deps(d.getVar(k + ':' + pn) or ""):
+            if var.startswith("virtual/"):
+                oe.qa.handle_error("virtual-slash", "%s is set to %s but the substring 'virtual/' holds no meaning in this context. It only works for build time dependencies, not runtime ones. It is suggested to use 'VIRTUAL-RUNTIME_' variables instead." % (k, var), d)
 
     issues = []
     if (d.getVar('PACKAGES') or "").split():
@@ -1627,8 +1562,7 @@ python () {
             if d.getVar(var, False):
                 issues.append(var)
 
-        fakeroot_tests = d.getVar('FAKEROOT_QA').split()
-        if set(tests) & set(fakeroot_tests):
+        if bb.utils.contains('ERROR_QA', 'host-user-contaminated', True, False, d) or bb.utils.contains('WARN_QA', 'host-user-contaminated', True, False, d):
             d.setVarFlag('do_package_qa', 'fakeroot', '1')
             d.appendVarFlag('do_package_qa', 'depends', ' virtual/fakeroot-native:do_populate_sysroot')
     else:
diff --git a/poky/meta/classes-global/license.bbclass b/poky/meta/classes-global/license.bbclass
index b2e0d3faba..043715fcc3 100644
--- a/poky/meta/classes-global/license.bbclass
+++ b/poky/meta/classes-global/license.bbclass
@@ -18,8 +18,14 @@ LICENSE_CREATE_PACKAGE ??= "0"
 LICENSE_PACKAGE_SUFFIX ??= "-lic"
 LICENSE_FILES_DIRECTORY ??= "${datadir}/licenses/"
 
+LICENSE_DEPLOY_PATHCOMPONENT = "${SSTATE_PKGARCH}"
+LICENSE_DEPLOY_PATHCOMPONENT:class-cross = "native"
+LICENSE_DEPLOY_PATHCOMPONENT:class-native = "native"
+# Ensure the *value* of SSTATE_PKGARCH is captured as it is used in the output paths
+LICENSE_DEPLOY_PATHCOMPONENT[vardepvalue] += "${LICENSE_DEPLOY_PATHCOMPONENT}"
+
 addtask populate_lic after do_patch before do_build
-do_populate_lic[dirs] = "${LICSSTATEDIR}/${PN}"
+do_populate_lic[dirs] = "${LICSSTATEDIR}/${LICENSE_DEPLOY_PATHCOMPONENT}/${PN}"
 do_populate_lic[cleandirs] = "${LICSSTATEDIR}"
 
 python do_populate_lic() {
@@ -29,7 +35,7 @@ python do_populate_lic() {
     lic_files_paths = find_license_files(d)
 
     # The base directory we wrangle licenses to
-    destdir = os.path.join(d.getVar('LICSSTATEDIR'), d.getVar('SSTATE_PKGARCH'), d.getVar('PN'))
+    destdir = os.path.join(d.getVar('LICSSTATEDIR'), d.getVar('LICENSE_DEPLOY_PATHCOMPONENT'), d.getVar('PN'))
     copy_license_files(lic_files_paths, destdir)
     info = get_recipe_info(d)
     with open(os.path.join(destdir, "recipeinfo"), "w") as f:
@@ -39,7 +45,7 @@ python do_populate_lic() {
 }
 
 PSEUDO_IGNORE_PATHS .= ",${@','.join(((d.getVar('COMMON_LICENSE_DIR') or '') + ' ' + (d.getVar('LICENSE_PATH') or '') + ' ' + d.getVar('COREBASE') + '/meta/COPYING').split())}"
-# it would be better to copy them in do_install:append, but find_license_filesa is python
+# it would be better to copy them in do_install:append, but find_license_files is python
 python perform_packagecopy:prepend () {
     enabled = oe.data.typed_value('LICENSE_CREATE_PACKAGE', d)
     if d.getVar('CLASSOVERRIDE') == 'class-target' and enabled:
@@ -149,14 +155,14 @@ def find_license_files(d):
             # and "with exceptions" being *
             # we'll just strip out the modifier and put
             # the base license.
-            find_license(node.s.replace("+", "").replace("*", ""))
+            find_licenses(node.s.replace("+", "").replace("*", ""))
             self.generic_visit(node)
 
         def visit_Constant(self, node):
-            find_license(node.value.replace("+", "").replace("*", ""))
+            find_licenses(node.value.replace("+", "").replace("*", ""))
             self.generic_visit(node)
 
-    def find_license(license_type):
+    def find_licenses(license_type):
         try:
             bb.utils.mkdirhier(gen_lic_dest)
         except:
diff --git a/poky/meta/classes-global/mirrors.bbclass b/poky/meta/classes-global/mirrors.bbclass
index 862648eec5..d68d30b0f2 100644
--- a/poky/meta/classes-global/mirrors.bbclass
+++ b/poky/meta/classes-global/mirrors.bbclass
@@ -88,7 +88,7 @@ git://.*/.*                   git://HOST/git/PATH;protocol=https \
 BB_GIT_SHALLOW:pn-binutils = "1"
 BB_GIT_SHALLOW:pn-binutils-cross-${TARGET_ARCH} = "1"
 BB_GIT_SHALLOW:pn-binutils-cross-canadian-${TRANSLATED_TARGET_ARCH} = "1"
-BB_GIT_SHALLOW:pn-binutils-cross-testsuite = "1"
+BB_GIT_SHALLOW:pn-binutils-testsuite = "1"
 BB_GIT_SHALLOW:pn-binutils-crosssdk-${SDK_SYS} = "1"
 BB_GIT_SHALLOW:pn-binutils-native = "1"
 BB_GIT_SHALLOW:pn-nativesdk-binutils = "1"
diff --git a/poky/meta/classes-global/package.bbclass b/poky/meta/classes-global/package.bbclass
index aa1eb5e901..6cd8c0140f 100644
--- a/poky/meta/classes-global/package.bbclass
+++ b/poky/meta/classes-global/package.bbclass
@@ -476,7 +476,7 @@ python do_package () {
     # cache.  This is useful if an item this class depends on changes in a
     # way that the output of this class changes.  rpmdeps is a good example
     # as any change to rpmdeps requires this to be rerun.
-    # PACKAGE_BBCLASS_VERSION = "5"
+    # PACKAGE_BBCLASS_VERSION = "6"
 
     # Init cachedpath
     global cpath
diff --git a/poky/meta/classes-global/package_rpm.bbclass b/poky/meta/classes-global/package_rpm.bbclass
index 474d2491eb..021c53593f 100644
--- a/poky/meta/classes-global/package_rpm.bbclass
+++ b/poky/meta/classes-global/package_rpm.bbclass
@@ -10,7 +10,7 @@ IMAGE_PKGTYPE ?= "rpm"
 
 RPM = "rpm"
 RPMBUILD = "rpmbuild"
-RPMBUILD_COMPMODE ?= "${@'w19T%d.zstdio' % int(d.getVar('ZSTD_THREADS'))}"
+RPMBUILD_COMPMODE ?= "${@'w3T%d.zstdio' % int(d.getVar('ZSTD_THREADS'))}"
 
 PKGWRITEDIRRPM = "${WORKDIR}/deploy-rpms"
 
@@ -201,14 +201,22 @@ python write_specfile () {
                 try:
                     owner = pwd.getpwuid(stat_f.st_uid).pw_name
                 except Exception as e:
-                    bb.error("Content of /etc/passwd in sysroot:\n{}".format(
-                        open(d.getVar("RECIPE_SYSROOT") +"/etc/passwd").read()))
+                    filename = d.getVar('RECIPE_SYSROOT') + '/etc/passwd'
+                    if os.path.exists(filename):
+                        bb.error("Content of /etc/passwd in sysroot:\n{}".format(
+                            open(filename).read()))
+                    else:
+                        bb.error("File {} doesn't exist in sysroot!".format(filename))
                     raise e
                 try:
                     group = grp.getgrgid(stat_f.st_gid).gr_name
                 except Exception as e:
-                    bb.error("Content of /etc/group in sysroot:\n{}".format(
-                        open(d.getVar("RECIPE_SYSROOT") +"/etc/group").read()))
+                    filename = d.getVar("RECIPE_SYSROOT") +"/etc/group"
+                    if os.path.exists(filename):
+                        bb.error("Content of /etc/group in sysroot:\n{}".format(
+                            open(filename).read()))
+                    else:
+                        bb.error("File {} doesn't exists in sysroot!".format(filename))
                     raise e
                 return "%attr({:o},{},{}) ".format(mode, owner, group)
 
@@ -688,6 +696,7 @@ python do_package_rpm () {
     cmd = cmd + " --define '_use_internal_dependency_generator 0'"
     cmd = cmd + " --define '_binaries_in_noarch_packages_terminate_build 0'"
     cmd = cmd + " --define '_build_id_links none'"
+    cmd = cmd + " --define '_smp_ncpus_max 4'"
     cmd = cmd + " --define '_source_payload %s'" % rpmbuild_compmode
     cmd = cmd + " --define '_binary_payload %s'" % rpmbuild_compmode
     cmd = cmd + " --define 'clamp_mtime_to_source_date_epoch 1'"
diff --git a/poky/meta/classes-global/retain.bbclass b/poky/meta/classes-global/retain.bbclass
new file mode 100644
index 0000000000..46e8c256cf
--- /dev/null
+++ b/poky/meta/classes-global/retain.bbclass
@@ -0,0 +1,182 @@
+# Creates a tarball of the work directory for a recipe when one of its
+# tasks fails, or any other nominated directories.
+# Useful in cases where the environment in which builds are run is
+# ephemeral or otherwise inaccessible for examination during
+# debugging.
+#
+# To enable, simply add the following to your configuration:
+#
+# INHERIT += "retain"
+#
+# You can specify the recipe-specific directories to save upon failure
+# or always (space-separated) e.g.:
+#
+# RETAIN_DIRS_FAILURE = "${WORKDIR};prefix=workdir"    # default
+# RETAIN_DIRS_ALWAYS = "${T}"
+#
+# Naturally you can use overrides to limit it to a specific recipe:
+# RETAIN_DIRS_ALWAYS:pn-somerecipe = "${T}"
+#
+# You can also specify global (non-recipe-specific) directories to save:
+#
+# RETAIN_DIRS_GLOBAL_FAILURE = "${LOG_DIR}"
+# RETAIN_DIRS_GLOBAL_ALWAYS = "${BUILDSTATS_BASE}"
+#
+# If you wish to use a different tarball name prefix than the default of
+# the directory name, you can do so by specifying a ;prefix= followed by
+# the desired prefix (no spaces) in any of the RETAIN_DIRS_* variables.
+# e.g. to always save the log files with a "recipelogs" as the prefix for
+# the tarball of ${T} you would do this:
+#
+# RETAIN_DIRS_ALWAYS = "${T};prefix=recipelogs"
+#
+# Notes:
+# * For this to be useful you also need corresponding logic in your build
+#   orchestration tool to pick up any files written out to RETAIN_OUTDIR
+#   (with the other assumption being that no files are present there at
+#   the start of the build, since there is no logic to purge old files).
+# * Work directories can be quite large, so saving them can take some time
+#   and of course space.
+# * Tarball creation is deferred to the end of the build, thus you will
+#   get the state at the end, not immediately upon failure.
+# * Extra directories must naturally be populated at the time the retain
+#   class goes to save them (build completion); to try ensure this for
+#   things that are also saved on build completion (e.g. buildstats), put
+#   the INHERIT += "retain" after the INHERIT += lines for the class that
+#   is writing out the data that you wish to save.
+# * The tarballs have the tarball name as a top-level directory so that
+#   multiple tarballs can be extracted side-by-side easily.
+#
+# Copyright (c) 2020, 2024 Microsoft Corporation
+#
+# SPDX-License-Identifier: GPL-2.0-only
+#
+
+RETAIN_OUTDIR ?= "${TMPDIR}/retained"
+RETAIN_DIRS_FAILURE ?= "${WORKDIR};prefix=workdir"
+RETAIN_DIRS_ALWAYS ?= ""
+RETAIN_DIRS_GLOBAL_FAILURE ?= ""
+RETAIN_DIRS_GLOBAL_ALWAYS ?= ""
+RETAIN_TARBALL_SUFFIX ?= "${DATETIME}.tar.gz"
+RETAIN_ENABLED ?= "1"
+
+
+def retain_retain_dir(desc, tarprefix, path, tarbasepath, d):
+    import datetime
+
+    outdir = d.getVar('RETAIN_OUTDIR')
+    bb.utils.mkdirhier(outdir)
+    suffix = d.getVar('RETAIN_TARBALL_SUFFIX')
+    tarname = '%s_%s' % (tarprefix, suffix)
+    tarfp = os.path.join(outdir, '%s' % tarname)
+    tardir = os.path.relpath(path, tarbasepath)
+    cmdargs = ['tar', 'cfa', tarfp]
+    # Prefix paths within the tarball with the tarball name so that
+    # multiple tarballs can be extracted side-by-side
+    tarname_noext = os.path.splitext(tarname)[0]
+    if tarname_noext.endswith('.tar'):
+        tarname_noext = tarname_noext[:-4]
+    cmdargs += ['--transform', 's:^:%s/:' % tarname_noext]
+    cmdargs += [tardir]
+    try:
+        bb.process.run(cmdargs, cwd=tarbasepath)
+    except bb.process.ExecutionError as e:
+        # It is possible for other tasks to be writing to the workdir
+        # while we are tarring it up, in which case tar will return 1,
+        # but we don't care in this situation (tar returns 2 for other
+        # errors so we we will see those)
+        if e.exitcode != 1:
+            bb.warn('retain: error saving %s: %s' % (desc, str(e)))
+
+
+addhandler retain_task_handler
+retain_task_handler[eventmask] = "bb.build.TaskFailed bb.build.TaskSucceeded"
+
+addhandler retain_build_handler
+retain_build_handler[eventmask] = "bb.event.BuildStarted bb.event.BuildCompleted"
+
+python retain_task_handler() {
+    if d.getVar('RETAIN_ENABLED') != '1':
+        return
+
+    dirs = d.getVar('RETAIN_DIRS_ALWAYS')
+    if isinstance(e, bb.build.TaskFailed):
+        dirs += ' ' + d.getVar('RETAIN_DIRS_FAILURE')
+
+    dirs = dirs.strip().split()
+    if dirs:
+        outdir = d.getVar('RETAIN_OUTDIR')
+        bb.utils.mkdirhier(outdir)
+        dirlist_file = os.path.join(outdir, 'retain_dirs.list')
+        pn = d.getVar('PN')
+        taskname = d.getVar('BB_CURRENTTASK')
+        with open(dirlist_file, 'a') as f:
+            for entry in dirs:
+                f.write('%s %s %s\n' % (pn, taskname, entry))
+}
+
+python retain_build_handler() {
+    outdir = d.getVar('RETAIN_OUTDIR')
+    dirlist_file = os.path.join(outdir, 'retain_dirs.list')
+
+    if isinstance(e, bb.event.BuildStarted):
+        if os.path.exists(dirlist_file):
+            os.remove(dirlist_file)
+        return
+
+    if d.getVar('RETAIN_ENABLED') != '1':
+        return
+
+    savedirs = {}
+    try:
+        with open(dirlist_file, 'r') as f:
+            for line in f:
+                pn, _, path = line.rstrip().split()
+                if not path in savedirs:
+                    savedirs[path] = pn
+        os.remove(dirlist_file)
+    except FileNotFoundError:
+        pass
+
+    if e.getFailures():
+        for path in (d.getVar('RETAIN_DIRS_GLOBAL_FAILURE') or '').strip().split():
+            savedirs[path] = ''
+
+    for path in (d.getVar('RETAIN_DIRS_GLOBAL_ALWAYS') or '').strip().split():
+        savedirs[path] = ''
+
+    if savedirs:
+        bb.plain('NOTE: retain: retaining build output...')
+        count = 0
+        for path, pn in savedirs.items():
+            prefix = None
+            if ';' in path:
+                pathsplit = path.split(';')
+                path = pathsplit[0]
+                for param in pathsplit[1:]:
+                    if '=' in param:
+                        name, value = param.split('=', 1)
+                        if name == 'prefix':
+                            prefix = value
+                        else:
+                            bb.error('retain: invalid parameter "%s" in RETAIN_* variable value' % param)
+                            return
+                    else:
+                        bb.error('retain: parameter "%s" missing value in RETAIN_* variable value' % param)
+                        return
+            if prefix:
+                itemname = prefix
+            else:
+                itemname = os.path.basename(path)
+            if pn:
+                # Always add the recipe name in front
+                itemname = pn + '_' + itemname
+            if os.path.exists(path):
+                retain_retain_dir(itemname, itemname, path, os.path.dirname(path), d)
+                count += 1
+            else:
+                bb.warn('retain: path %s does not currently exist' % path)
+        if count:
+            item = 'archive' if count == 1 else 'archives'
+            bb.plain('NOTE: retain: saved %d %s to %s' % (count, item, outdir))
+}
diff --git a/poky/meta/classes-global/sanity.bbclass b/poky/meta/classes-global/sanity.bbclass
index 1d242f0f0a..72dab0fea2 100644
--- a/poky/meta/classes-global/sanity.bbclass
+++ b/poky/meta/classes-global/sanity.bbclass
@@ -475,6 +475,29 @@ def check_wsl(d):
             bb.warn("You are running bitbake under WSLv2, this works properly but you should optimize your VHDX file eventually to avoid running out of storage space")
     return None
 
+def check_userns():
+    """
+    Check that user namespaces are functional, as they're used for network isolation.
+    """
+
+    # There is a known failure case with AppAmrmor where the unshare() call
+    # succeeds (at which point the uid is nobody) but writing to the uid_map
+    # fails (so the uid isn't reset back to the user's uid). We can detect this.
+    parentuid = os.getuid()
+    pid = os.fork()
+    if not pid:
+        try:
+            bb.utils.disable_network()
+        except:
+            pass
+        os._exit(parentuid != os.getuid())
+
+    ret = os.waitpid(pid, 0)[1]
+    if ret:
+        bb.fatal("User namespaces are not usable by BitBake, possibly due to AppArmor.\n"
+                 "See https://discourse.ubuntu.com/t/ubuntu-24-04-lts-noble-numbat-release-notes/39890#unprivileged-user-namespace-restrictions for more information.")
+
+
 # Require at least gcc version 8.0
 #
 # This can be fixed on CentOS-7 with devtoolset-6+
@@ -641,6 +664,7 @@ def check_sanity_version_change(status, d):
     status.addresult(check_git_version(d))
     status.addresult(check_perl_modules(d))
     status.addresult(check_wsl(d))
+    status.addresult(check_userns())
 
     missing = ""
 
diff --git a/poky/meta/classes-global/sstate.bbclass b/poky/meta/classes-global/sstate.bbclass
index beb22f424e..8e0391c666 100644
--- a/poky/meta/classes-global/sstate.bbclass
+++ b/poky/meta/classes-global/sstate.bbclass
@@ -4,7 +4,7 @@
 # SPDX-License-Identifier: MIT
 #
 
-SSTATE_VERSION = "12"
+SSTATE_VERSION = "14"
 
 SSTATE_ZSTD_CLEVEL ??= "8"
 
@@ -103,7 +103,6 @@ SSTATECREATEFUNCS[vardeps] = "SSTATE_SCAN_FILES"
 SSTATEPOSTCREATEFUNCS = ""
 SSTATEPREINSTFUNCS = ""
 SSTATEPOSTUNPACKFUNCS = "sstate_hardcode_path_unpack"
-SSTATEPOSTINSTFUNCS = ""
 EXTRA_STAGING_FIXMES ?= "HOSTTOOLS_DIR"
 
 # Check whether sstate exists for tasks that support sstate and are in the
@@ -161,7 +160,10 @@ python () {
     d.setVar('SSTATETASKS', " ".join(unique_tasks))
     for task in unique_tasks:
         d.prependVarFlag(task, 'prefuncs', "sstate_task_prefunc ")
-        d.appendVarFlag(task, 'postfuncs', " sstate_task_postfunc")
+        # Generally sstate should be last, execpt for buildhistory functions
+        postfuncs = (d.getVarFlag(task, 'postfuncs') or "").split()
+        newpostfuncs = [p for p in postfuncs if "buildhistory" not in p] + ["sstate_task_postfunc"] + [p for p in postfuncs if "buildhistory" in p]
+        d.setVarFlag(task, 'postfuncs', " ".join(newpostfuncs))
         d.setVarFlag(task, 'network', '1')
         d.setVarFlag(task + "_setscene", 'network', '1')
 }
@@ -349,15 +351,10 @@ def sstate_install(ss, d):
         prepdir(dest)
         bb.utils.rename(src, dest)
 
-    for postinst in (d.getVar('SSTATEPOSTINSTFUNCS') or '').split():
-        # All hooks should run in the SSTATE_INSTDIR
-        bb.build.exec_func(postinst, d, (sstateinst,))
-
     for lock in locks:
         bb.utils.unlockfile(lock)
 
-sstate_install[vardepsexclude] += "SSTATE_ALLOW_OVERLAP_FILES SSTATE_MANMACH SSTATE_MANFILEPREFIX"
-sstate_install[vardeps] += "${SSTATEPOSTINSTFUNCS}"
+sstate_install[vardepsexclude] += "SSTATE_ALLOW_OVERLAP_FILES SSTATE_MANMACH SSTATE_MANFILEPREFIX STAMP"
 
 def sstate_installpkg(ss, d):
     from oe.gpg_sign import get_signer
@@ -644,15 +641,6 @@ def sstate_package(ss, d):
 
     tmpdir = d.getVar('TMPDIR')
 
-    fixtime = False
-    if ss['task'] == "package":
-        fixtime = True
-
-    def fixtimestamp(root, path):
-        f = os.path.join(root, path)
-        if os.lstat(f).st_mtime > sde:
-            os.utime(f, (sde, sde), follow_symlinks=False)
-
     sstatebuild = d.expand("${WORKDIR}/sstate-build-%s/" % ss['task'])
     sde = int(d.getVar("SOURCE_DATE_EPOCH") or time.time())
     d.setVar("SSTATE_CURRTASK", ss['task'])
@@ -667,8 +655,6 @@ def sstate_package(ss, d):
         # to sstate tasks but there aren't many of these so better just avoid them entirely.
         for walkroot, dirs, files in os.walk(state[1]):
             for file in files + dirs:
-                if fixtime:
-                    fixtimestamp(walkroot, file)
                 srcpath = os.path.join(walkroot, file)
                 if not os.path.islink(srcpath):
                     continue
@@ -690,11 +676,6 @@ def sstate_package(ss, d):
         bb.utils.mkdirhier(plain)
         bb.utils.mkdirhier(pdir)
         bb.utils.rename(plain, pdir)
-        if fixtime:
-            fixtimestamp(pdir, "")
-            for walkroot, dirs, files in os.walk(pdir):
-                for file in files + dirs:
-                    fixtimestamp(walkroot, file)
 
     d.setVar('SSTATE_BUILDDIR', sstatebuild)
     d.setVar('SSTATE_INSTDIR', sstatebuild)
@@ -727,7 +708,7 @@ def sstate_package(ss, d):
 
     return
 
-sstate_package[vardepsexclude] += "SSTATE_SIG_KEY"
+sstate_package[vardepsexclude] += "SSTATE_SIG_KEY SSTATE_PKG"
 
 def pstaging_fetch(sstatefetch, d):
     import bb.fetch2
diff --git a/poky/meta/classes-global/staging.bbclass b/poky/meta/classes-global/staging.bbclass
index 3678a1b441..c2213ffa2b 100644
--- a/poky/meta/classes-global/staging.bbclass
+++ b/poky/meta/classes-global/staging.bbclass
@@ -652,10 +652,17 @@ python do_prepare_recipe_sysroot () {
 addtask do_prepare_recipe_sysroot before do_configure after do_fetch
 
 python staging_taskhandler() {
+    EXCLUDED_TASKS = (
+        "do_prepare_recipe_sysroot",
+        "do_create_spdx",
+    )
     bbtasks = e.tasklist
     for task in bbtasks:
+        if task in EXCLUDED_TASKS:
+            continue
+
         deps = d.getVarFlag(task, "depends")
-        if task != 'do_prepare_recipe_sysroot' and (task == "do_configure" or (deps and "populate_sysroot" in deps)):
+        if task == "do_configure" or (deps and "populate_sysroot" in deps):
             d.prependVarFlag(task, "prefuncs", "extend_recipe_sysroot ")
 }
 staging_taskhandler[eventmask] = "bb.event.RecipeTaskPreProcess"
diff --git a/poky/meta/classes-global/utils.bbclass b/poky/meta/classes-global/utils.bbclass
index 957389928f..c9cae8930f 100644
--- a/poky/meta/classes-global/utils.bbclass
+++ b/poky/meta/classes-global/utils.bbclass
@@ -15,7 +15,7 @@ oe_soinstall() {
 	        ;;
 	esac
 	install -m 755 $1 $2/$libname
-	sonamelink=`${READELF} -d $1 |grep 'Library soname:' |sed -e 's/.*\[\(.*\)\].*/\1/'`
+	sonamelink=`${OBJDUMP} -p $1 | grep SONAME | awk '{print $2}'`
 	if [ -z $sonamelink ]; then
 		bbfatal "oe_soinstall: $libname is missing ELF tag 'SONAME'."
 	fi
@@ -147,7 +147,7 @@ oe_libinstall() {
 		# special case hack for non-libtool .so.#.#.# links
 		baselibfile=`basename "$libfile"`
 		if (echo $baselibfile | grep -qE '^lib.*\.so\.[0-9.]*$'); then
-			sonamelink=`${READELF} -d $libfile |grep 'Library soname:' |sed -e 's/.*\[\(.*\)\].*/\1/'`
+			sonamelink=`${OBJDUMP} -p $libfile | grep SONAME | awk '{print $2}'`
 			solink=`echo $baselibfile | sed -e 's/\.so\..*/.so/'`
 			if [ -n "$sonamelink" -a x"$baselibfile" != x"$sonamelink" ]; then
 				__runcmd ln -sf $baselibfile $destpath/$sonamelink