Tianocore/edk2.git, branch dependabot/github_actions/actions/create-github-app-token-3

GitHub Action: Bump actions/create-github-app-token from 2 to 3

2026-04-06T13:22:52+00:00

Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2 to 3. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](https://github.com/actions/create-github-app-token/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot]

BaseTools: Only check for GCC prefixes when targeting

2026-04-03T05:32:14+00:00

LinuxGccToolChain is checking for the environment variable GCC_AARCH64_PREFIX when GCC_AARCH64_INSTALL is set in the environment variables. GCC_AARCH64_INSTALL is set when any gcc aarch64 compiler is installed (i.e. aarch64-none-elf, aarch64-linux-gnu, aarch64-unknown-elf all result in a GCC_AARCH64_INSTALL environment variable). When compiling for an X86 target, if an AARCH64 tool chain is installed in the system, this will result in an error due to the GCC_AARCH64_PREFIX not being set. Add a check based upon TARGET_ARCH and and only verify the prefixes when attempting to build AARCH64. Replicate the same check for RISCV and LOONGARCH64 architectures as well. Signed-off-by: Aaron Pop

DynamicTablesPkg: handle missing 'iommu-map' in root complex parser

2026-04-03T00:17:05+00:00

Some guests (e.g. kvmtool) do not provide a SMMU, so the PCI node in the DTB lacks an 'iommu-map'. The current code ASSERTs during boot with: "ASSERT [ConfigurationManagerDxe] RootComplexParser.c(244): (Data != ((void *) 0)) && ((DataSize % (4 * sizeof (UINT32))) == 0)" Instead, return EFI_NOT_FOUND when 'iommu-map' is absent so firmware boot can proceed. Cc: Ard Biesheuvel Cc: Leif Lindholm Cc: Gerd Hoffmann Signed-off-by: Sami Mujawar

ArmVirtPkg: Kvmtool: Only install IORT if ITS is present

2026-04-03T00:17:05+00:00

When the Kvmtool guest is launched without ITS support i.e. when --irq-chip=gicv3-its option is not specified or if --irq-chip=gicv3 is specified, the guest VM does not have an ITS. In such scenarios the guest firmware must not install the IORT table. Therefore, add checks to see if ITS is present before installing the IORT ACPI table. Cc: Ard Biesheuvel Cc: Leif Lindholm Cc: Gerd Hoffmann Signed-off-by: Sami Mujawar

BaseTools: Enable 4k alignment for tool chains

2026-04-02T19:56:18+00:00

Reordering x64 toolchain defines (GCCS) to use a DLINK_XIPFLAGS to set common-page-size to 0x40. Otherwise use default align (0x1000 for x64). Reorder CLANGDWARF toolchain defines to use DLINK_XIPFLAGS to set common-page-size to 0x40 (matching existing behavior) and otherwise use default linker value (0x1000 for x64). Required modifying build_rule.template to support CLANGDWARF build family for SEC, PEI_CORE, PEIM type files. Signed-off-by: Aaron Pop

MdePkg: Added several mock libraries for google test

2026-04-02T03:27:19+00:00

Added several mock libraries for google test so one can make google test drives consuming those libraries: - MockReportStatusCodeLib - MockSerialPortLib Signed-off-by: Paddy Deng

MdeModulePkg: Added several mock libraries for google test

2026-04-02T03:27:19+00:00

Added several mock libraries for google test so one can make google test drives consuming those libraries: - MockTpmMeasurementLib - MockFirmwareVolumeShadowPpi Signed-off-by: Paddy Deng

CryptoPkg: Added MockBaseCryptLib for google test

2026-04-02T03:27:19+00:00

Added BaseCryptLib's mock library for google test so one can make google test drives consuming it Signed-off-by: Paddy Deng

OvmfPkg/PlatformInitLib: redefine low memory

2026-04-01T13:06:53+00:00

Traditionally "low memory" is all memory below 4G. The code logic dates back to the days where OVMF has used the CMOS to figure how much memory is installed instead of the e820 table provided by qemu. That approach to memory detection implicitly assumes there is a single block of memory below 4G. Should that not be the case things fall apart. This happens in case OVMF runs under SVSM and SVSM caves out a chunk of memory below 4G for itself, passing the remaining two blocks of memory below 4G on to OVMF (via igvm memory map). Fix that by redefining what OVMF considers "low memory". It is the first block of memory (with base address zero) now. This fixes the SVSM use case outlined above. For other use cases nothing will change. Signed-off-by: Gerd Hoffmann

UefiCpuPkg/MpInitLib: Skip ucode rev dump if not loaded in the library

2026-04-01T04:10:15+00:00

MicrocodeDetect() loads microcode in the first thread of each core and populates MicrocodeRevision and MicrocodeEntryAddr fields. AMD CPUs use a separate function to load microcode, leaving MicrocodePatchRegionSize as zero. In the case, the function returns early without populating these fields, leaving them as zero. As a result, the misleading debug output (Microcode revision = 00000000, expected = 00000000) may appear on AMD systems, implying microcode was not applied when it actually was. To avoid the confusion, skip the microcode revision dump when it is not loaded in the library. Signed-off-by: Phil Noh