Makefile: update for 2025.08.1

Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
CHANGES: update for 2025.08.1
2025-10-11 23:31:22 +02:00 · 2025-10-11 23:30:33 +02:00 · 2025-10-09 10:06:38 +02:00 · 2025-10-09 08:47:44 +02:00 · 2025-10-09 08:45:15 +02:00 · 2025-10-09 08:45:05 +02:00
1761 changed files with 15128 additions and 11506 deletions
@@ -1,10 +1,15 @@
 board/amarula/vyasa/post-build.sh Shellcheck
+board/andes/ae350/patches/uboot/0001-mmc-ftsdc010_mci-Support-DTS-of-ftsdc010-driver-for-.patch lib_patch.Upstream
+board/andes/ae350/patches/uboot/0002-spl-Align-device-tree-blob-address-at-8-byte-boundar.patch lib_patch.Upstream
+board/andes/ae350/post-build.sh Shellcheck
 board/arcturus/aarch64-ucls1012a/post-build.sh Shellcheck
 board/arcturus/aarch64-ucls1012a/post-image.sh Shellcheck
 board/aspeed/common/post-image.sh Shellcheck
 board/asus/tinker/post-build.sh Shellcheck
 board/atmel/flasher.sh Shellcheck
 board/beagleboard/beaglebone-qt5/patches/linux/0001-keep-jtag-clock-alive-for-debugger.patch lib_patch.Upstream
+board/beagleboard/beaglebone/post-build.sh Shellcheck
+board/beagleboard/beagleboneai/post-build.sh Shellcheck
 board/boundarydevices/common/post-build.sh Shellcheck
 board/boundarydevices/common/post-image.sh Shellcheck
 board/broadcom/northstar/post-image.sh Shellcheck
@@ -74,8 +79,11 @@ boot/syslinux/0014-Fix-build-with-binutils-note-gnu-property-section.patch lib_p
 boot/syslinux/0016-Workaround-multiple-definition-of-symbol-errors.patch lib_patch.Upstream
 boot/syslinux/0017-Replace-builtin-strlen-that-appears-to-get-optimized.patch lib_patch.Upstream
 configs/am574x_idk_defconfig lib_defconfig.ForceCheckHash
+configs/andes_ae350_45_defconfig lib_defconfig.ForceCheckHash
 configs/arcturus_ucls1012a_defconfig lib_defconfig.ForceCheckHash
 configs/arcturus_ucp1020_defconfig lib_defconfig.ForceCheckHash
+configs/aspeed_ast2500evb_defconfig lib_defconfig.ForceCheckHash
+configs/aspeed_ast2600evb_defconfig lib_defconfig.ForceCheckHash
 configs/asus_tinker-s_rk3288_defconfig lib_defconfig.ForceCheckHash
 configs/asus_tinker_rk3288_defconfig lib_defconfig.ForceCheckHash
 configs/atmel_sama5d27_som1_ek_mmc_dev_defconfig lib_defconfig.ForceCheckHash
@@ -113,6 +121,7 @@ configs/imx6ullevk_defconfig lib_defconfig.ForceCheckHash
 configs/imx6ulpico_defconfig lib_defconfig.ForceCheckHash
 configs/imx7dpico_defconfig lib_defconfig.ForceCheckHash
 configs/imx8mqevk_defconfig lib_defconfig.ForceCheckHash
+configs/imxrt1050-evk_defconfig lib_defconfig.ForceCheckHash
 configs/khadas_vim3_defconfig lib_defconfig.ForceCheckHash
 configs/kontron_bl_imx8mm_defconfig lib_defconfig.ForceCheckHash
 configs/kontron_smarc_sal28_defconfig lib_defconfig.ForceCheckHash
@@ -147,8 +156,11 @@ configs/olpc_xo175_defconfig lib_defconfig.ForceCheckHash
 configs/olpc_xo1_defconfig lib_defconfig.ForceCheckHash
 configs/orangepi_pc2_defconfig lib_defconfig.ForceCheckHash
 configs/orangepi_zero_plus_defconfig lib_defconfig.ForceCheckHash
+configs/pc_x86_64_bios_defconfig lib_defconfig.ForceCheckHash
+configs/pc_x86_64_efi_defconfig lib_defconfig.ForceCheckHash
 configs/pine64_defconfig lib_defconfig.ForceCheckHash
 configs/pine64_pinecube_defconfig lib_defconfig.ForceCheckHash
+configs/pine64_star64_defconfig lib_defconfig.ForceCheckHash
 configs/s6lx9_microboard_defconfig lib_defconfig.ForceCheckHash
 configs/sipeed_lichee_rv_defconfig lib_defconfig.ForceCheckHash
 configs/sipeed_lichee_rv_dock_defconfig lib_defconfig.ForceCheckHash
@@ -202,6 +214,8 @@ package/android-tools/0010-adb-added-patch-for-openssl-1.1.0-compatibility.patch
 package/aoetools/0001-Change-shell-script-interpreter-from-bin-bash-to-bin.patch lib_patch.Upstream
 package/apache/0001-cross-compile.patch lib_patch.Upstream
 package/apache/S50apache Shellcheck lib_sysv.Indent lib_sysv.Variables
+package/apitrace/0001-thirdparty-libbacktrace-backtrace-h-include-config.h.patch lib_patch.Upstream
+package/apitrace/0002-gltrace-Avoid-__libc_dlsym-and-__libc_dlopen_mode-on-GLIBC-2-34.patch lib_patch.Upstream
 package/apr-util/0001-remove-checkapr.patch lib_patch.Upstream
 package/apr/0001-sys-param-h.patch lib_patch.Upstream
 package/apr/0002-Revert-Backport-r1872164.-Fix-the-name-of-libtool-wh.patch lib_patch.Upstream
@@ -215,6 +229,9 @@ package/asterisk/0004-install-samples-need-the-data-files.patch lib_patch.Upstre
 package/at/0001-Makefile.in-fix-make-install-for-non-root-don-t-stri.patch lib_patch.Upstream
 package/at/S99at lib_sysv.Indent lib_sysv.Variables
 package/attr/0001-build-with-older-GCCs.patch lib_patch.Upstream
+package/aufs-util/0001-remove-user-settings.patch lib_patch.Upstream
+package/aufs-util/0002-no-check-ver.patch lib_patch.Upstream
+package/aufs-util/0003-no-strip-lib.patch lib_patch.Upstream
 package/aumix/0001-fix-incorrect-makefile-am.patch lib_patch.Upstream
 package/autoconf/0001-dont-add-dirty-to-version.patch lib_patch.Upstream
 package/automake/0001-noman.patch lib_patch.Upstream
@@ -227,7 +244,10 @@ package/bash/0001-input.h-add-missing-include-on-stdio.h.patch lib_patch.Upstrea
 package/bash/0002-parse.y-fix-compilation-for-non-multibyte-builds.patch lib_patch.Upstream
 package/bc/0001-bc-use-MAKEINFO-variable-for-docs.patch lib_patch.Upstream
 package/bc/0002-notice-read-and-write-errors-on-input-and-output.patch lib_patch.Upstream
+package/bc/0003-dc-fix-exit-code-of-q-command.patch lib_patch.Upstream
+package/bc/0004-no-gen-libmath.patch lib_patch.Upstream
 package/bcache-tools/0001-Don-t-inline-crc64-for-gcc-5-compatability.patch lib_patch.Upstream
+package/bctoolbox/0001-Fix-Libs.private-flags-for-mbedtls.patch lib_patch.Upstream
 package/bcusdk/0002-eibd-fix-endless-recursion-when-using-USB-backends.patch lib_patch.Upstream
 package/bearssl/0001-Fix-missing-objdir-dependency.patch lib_patch.Upstream
 package/benejson/0001-c-std.patch lib_patch.Upstream
@@ -269,6 +289,7 @@ package/cgroupfs-mount/S30cgroupfs Shellcheck lib_sysv.Indent lib_sysv.Variables
 package/chipmunk/0001-Fix-build-failure-on-musl.patch lib_patch.Upstream
 package/chrony/S49chronyd lib_sysv.Variables
 package/cmake/0001-rename-cmake-rootfile.patch lib_patch.Upstream
+package/cmocka/0001-Don-t-redefine-uintptr_t.patch lib_patch.Upstream
 package/collectd/0001-src-netlink.c-remove-REG_NOERROR.patch lib_patch.Upstream
 package/connman/S45connman lib_sysv.Variables
 package/copas/0001-Do-not-load-coxpcall-for-LuaJIT.patch lib_patch.Upstream
@@ -315,6 +336,9 @@ package/dhcp/S80dhcp-relay Shellcheck lib_sysv.Variables
 package/dhcp/S80dhcp-server Shellcheck lib_sysv.Variables
 package/dhcp/dhclient-script Shellcheck lib_shellscript.TrailingSpace
 package/dhcpcd/S41dhcpcd lib_sysv.Indent lib_sysv.Variables
+package/dillo/0001-usr-local-include.patch lib_patch.Upstream
+package/dillo/0002-Fix-openssl-detection.patch lib_patch.Upstream
+package/dillo/0004-fix-build-with-gcc-10.patch lib_patch.Upstream
 package/dmalloc/0001-configure-fix-build-on-mips.patch lib_patch.Upstream
 package/dmalloc/0003-configure-allow-overriding-some-tests.patch lib_patch.Upstream
 package/dmalloc/0004-Makefile-use-the-configure-detected-or-user-supplied.patch lib_patch.Upstream
@@ -332,6 +356,7 @@ package/dt/0002-dt-default-source-define.patch lib_patch.Upstream
 package/dtc/0001-Fix-include-guards-for-older-kernel-u-boot-sources.patch lib_patch.Upstream
 package/dvblast/0001-missing-lm.patch lib_patch.Upstream
 package/dvblast/0002-fix-int-types.patch lib_patch.Upstream
+package/dvbsnoop/0001-musl-types-h.patch lib_patch.Upstream
 package/dvdrw-tools/0001-limits.h.patch lib_patch.Upstream
 package/dvdrw-tools/0002-Include-sysmacros.h-to-compile-with-newer-gcc.patch lib_patch.Upstream
 package/earlyoom/0001-main.c-fix-build-with-kernel-4.3.patch lib_patch.Upstream
@@ -359,6 +384,8 @@ package/exim/0001-Build-buildconfig-for-the-host.patch lib_patch.Upstream
 package/exim/0002-Don-t-make-backup-copies-of-installed-files.patch lib_patch.Upstream
 package/exim/0003-Skip-version-check-and-symlink-installation.patch lib_patch.Upstream
 package/exim/S86exim lib_sysv.Indent lib_sysv.Variables
+package/expect/0001-enable-cross-compilation.patch lib_patch.Upstream
+package/expect/0002-allow-tcl-build-directory.patch lib_patch.Upstream
 package/fail2ban/S60fail2ban Shellcheck lib_sysv.Variables
 package/fakedate/fakedate Shellcheck
 package/falcosecurity-libs/0001-cmake-Permit-setting-GRPC_CPP_PLUGIN.patch lib_patch.Upstream
@@ -450,6 +477,7 @@ package/grpc/0003-disable-unconditionally-downloading-api-repos.patch lib_patch.
 package/gstreamer1/gstd/0001-Don-t-require-gstd-check-user-xenv.sh-for-systemd-se.patch lib_patch.Upstream
 package/guile/0001-calculate-csqrt_manually.patch lib_patch.Upstream
 package/guile/0002-Makefile.am-fix-build-without-makeinfo.patch lib_patch.Upstream
+package/gumbo-parser/0001-configure.ac-fix-build-without-C.patch lib_patch.Upstream
 package/gutenprint/0001-use-pregen-xmli18n-header.patch lib_patch.Upstream
 package/gutenprint/0002-cups-support-replaces-static-with-static-libtool-lib.patch lib_patch.Upstream
 package/harfbuzz/0001-meson.build-check-for-pthread.h.patch lib_patch.Upstream
@@ -465,8 +493,9 @@ package/ibrcommon/0001-ibrcommon-data-File.cpp-support-POSIX-basename-call.patch
 package/ibrcommon/0002-ibrcommon-added-openssl-1.1-compatibility-264.patch lib_patch.Upstream
 package/ibrcommon/0003-ibrcommon-ssl-gcm-fix-static-build-with-openssl.patch lib_patch.Upstream
 package/icu/0001-dont-build-static-dynamic-twice.patch lib_patch.Upstream
-package/icu/0002-link-icudata-as-data-only.patch lib_patch.Upstream
-package/icu/0003-fix-static-linking-with-icu-uc.patch lib_patch.Upstream
+package/icu/0002-workaround-toolchain-bugs.patch lib_patch.Upstream
+package/icu/0003-link-icudata-as-data-only.patch lib_patch.Upstream
+package/icu/0004-fix-static-linking-with-icu-uc.patch lib_patch.Upstream
 package/ifmetric/0001-Fix-issue-NETLINK-Packet-too-small-or-truncated-92-1.patch lib_patch.Upstream
 package/ifplugd/0001-cross.patch lib_patch.Sob lib_patch.Upstream
 package/ifplugd/0002-fix-headers.patch lib_patch.Sob lib_patch.Upstream
@@ -555,6 +584,7 @@ package/libfuse/0002-util-ulockmgr_server-c-conditionally-define-closefrom-fix-g
 package/libgcrypt/0001-configure.ac-add-an-option-to-disable-tests.patch lib_patch.Upstream
 package/libgpiod/0001-build-add-a-configure-switch-for-building-examples.patch lib_patch.Upstream
 package/libgsm/0001-Misc-fixes-from-Archlinux.patch lib_patch.Upstream
+package/libgtk2/0001-reduce-dependencies.patch lib_patch.Upstream
 package/libgtk3/0001-Remove-Gdk-dependency-from-gtk-encode-symbolic-svg.patch lib_patch.Upstream
 package/libhdhomerun/0001-dont-strip.patch lib_patch.Upstream
 package/libiio/S99iiod Shellcheck lib_sysv.Variables
@@ -595,9 +625,11 @@ package/liboping/0005-src-oping.c-always-use-s-style-format-for-printf-sty.patch
 package/libp11/0001-src-p11_attr.c-fix-build-with-gcc-4.8.patch lib_patch.Upstream
 package/libpthsem/0001-fix-build-on-linux-3.x-host.patch lib_patch.Upstream
 package/libressl/0001-always-expose-SSL_OP_NO_TLSv1_3.patch lib_patch.Upstream
+package/libroxml/0001-src-roxml_mem.h-add-missing-extern.patch lib_patch.Upstream
 package/librsvg/0001-gdk-pixbuf-loader-Makefile.am-set-GDK_PIXBUF_MODULED.patch lib_patch.Upstream
 package/librtlsdr/0001-Makefile.am-respect-DESTDIR-with-install-udev-rules.patch lib_patch.Upstream
 package/libselinux/0001-Do-not-use-PYCEXT-and-rely-on-the-installed-file-nam.patch lib_patch.Upstream
+package/libsepol/0001-support-static-only.patch lib_patch.Upstream
 package/libserial/0001-SerialPort.cpp-fix-build-when-size_t-is-an-unsigned-.patch lib_patch.Upstream
 package/libserial/0002-SerialPort.cpp-don-t-use-high-baudrates-when-not-ava.patch lib_patch.Upstream
 package/libshdata/0001-backend-Add-missing-include-files.patch lib_patch.Upstream
@@ -616,6 +648,7 @@ package/libsvg/0001-fix-expat-static-declaration.patch lib_patch.Upstream
 package/libsvg/0002-Fix-undefined-symbol-png_set_gray_1_2_4_to_8.patch lib_patch.Upstream
 package/libtalloc/0001-buildtools-wafsamba-add-disable-stack-protector-opti.patch lib_patch.Upstream
 package/libtelnet/0001-fix-compilation-without-zlib.patch lib_patch.Upstream
+package/libtheora/0001-link-libtheoradec.patch lib_patch.Upstream
 package/libtomcrypt/0001-fix-CVE-2019-17362.patch lib_patch.Upstream
 package/libtommath/0001-Build-test-bn_mp_set_double-c-on-more-platforms.patch lib_patch.Upstream
 package/libtorrent/0001-libtorrent.pc.in-add-Libs.Private.patch lib_patch.Upstream
@@ -628,6 +661,7 @@ package/lighttpd/0001-Modify-the-default-lighttpd-configuration-file-to-ha.patch
 package/lighttpd/S50lighttpd Shellcheck lib_sysv.EmptyLastLine lib_sysv.Indent lib_sysv.Variables
 package/linknx/0001-configure-ac-tweak-CPPUNIT-conditional.patch lib_patch.Upstream
 package/linknx/0002-src-Makefile.am-fix-linking-with-log4cpp.patch lib_patch.Upstream
+package/linphone/0001-src-core-paths-paths.cpp-fix-powerpc-build.patch lib_patch.Upstream
 package/linux-zigbee/0001-test-serial-Remove-test-serial.patch lib_patch.Upstream
 package/linux-zigbee/0002-addrdb-coord-config-parse.y-add-missing-time.h-inclu.patch lib_patch.Upstream
 package/linuxptp/S65ptp4l Shellcheck lib_sysv.Indent
@@ -649,6 +683,7 @@ package/lockfile-progs/0001-sus3v-legacy.patch lib_patch.Sob lib_patch.Upstream
 package/lshw/0001-solve-Compile-error-when-g-version-is-less-than-5.patch lib_patch.Upstream
 package/ltrace/0001-arm-plt.patch lib_patch.Upstream
 package/ltrace/0002-sparc-add-missing-library.h-include.patch lib_patch.Upstream
+package/ltrace/0003-configure.ac-fix-autoreconf-with-autoconf-2.70.patch lib_patch.Upstream
 package/lttng-babeltrace/0001-tests-lib-Makefile.am-remove-unneeded-static-flag.patch lib_patch.Upstream
 package/lttng-babeltrace/0002-configure.ac-fix-popt-static-build.patch lib_patch.Upstream
 package/lttng-libust/0001-configure.ac-add-disable-tests.patch lib_patch.Upstream
@@ -683,6 +718,8 @@ package/matchbox-panel/0003-mb-applet-battery.patch lib_patch.Upstream
 package/matchbox-startup-monitor/0001-true-false.patch lib_patch.Upstream
 package/matchbox/0001-defaulttheme.patch lib_patch.Upstream
 package/matchbox/0002-src-Fix-build-with-gcc-10.patch lib_patch.Upstream
+package/mediastreamer/0001-src-videofilters-nowebcam.c-fix-build-without-ffmpeg.patch lib_patch.Upstream
+package/mediastreamer/0002-Use-AV_INPUT_BUFFER_PADDING_SIZE-to-determine-paddin.patch lib_patch.Upstream
 package/memstat/0001-PATH_MAX.patch lib_patch.Upstream
 package/mender-connect/S43mender-connect Shellcheck
 package/menu-cache/0001-Support-gcc10-compilation.patch lib_patch.Upstream
@@ -690,12 +727,17 @@ package/mesa3d-demos/0001-demos-makes-opengl-an-optional-component.patch lib_pat
 package/meson-tools/0001-amlbootenc-gxl-remove-non-std-C-convention-in-for.patch lib_patch.Upstream
 package/meson/0001-Prefer-ext-static-libs-when-default-library-static.patch lib_patch.Upstream
 package/meson/0002-mesonbuild-dependencies-base.py-add-pkg_config_stati.patch lib_patch.Upstream
+package/metacity/0001-add-libm-reference.patch lib_patch.Upstream
+package/metacity/0002-gconf.patch lib_patch.Upstream
+package/metacity/0003-mag-add-libm-reference.patch lib_patch.Upstream
 package/mfgtools/0001-lnx_def.h-fix-conflicting-declaration-of-__time64_t.patch lib_patch.Upstream
 package/mii-diag/0001-strchr.patch lib_patch.Sob lib_patch.Upstream
 package/mini-snmpd/0001-linux.c-fix-musl-build.patch lib_patch.Upstream
 package/minidlna/S60minidlnad Shellcheck lib_sysv.Indent lib_sysv.Variables
 package/minissdpd/S50minissdpd Shellcheck lib_sysv.Indent lib_sysv.Variables
 package/modem-manager/S44modem-manager Shellcheck lib_sysv.Variables
+package/mongrel2/0001-Do-not-run-tests.patch lib_patch.Upstream
+package/mongrel2/0002-Fix-Makefiles-for-cross-compilation.patch lib_patch.Upstream
 package/monit/0001-Do-not-force-building-a-statically-linked-binary.patch lib_patch.Upstream
 package/mono-gtksharp3/0001-Fixes-MONO_PROFILE_ENTER_LEAVE-undeclared.patch lib_patch.Upstream
 package/mono-gtksharp3/0002-Mono-compilation-error-branch.patch lib_patch.Upstream
@@ -763,6 +805,7 @@ package/nuttcp/0001-susv3-legacy.patch lib_patch.Upstream
 package/nvidia-driver/0001-use-LDFLAGS.patch lib_patch.Upstream
 package/octave/0001-Fix-BLAS-library-integer-size-detection.patch lib_patch.Upstream
 package/ofono/S46ofono lib_sysv.Variables
+package/ola/0001-ola-fix-compilation-with-musl-1-2-3.patch lib_patch.Upstream
 package/olsr/0001-olsrd-migrate-to-using-bison-3.7.1.patch lib_patch.Upstream
 package/olsr/0002-lib-pud-Makefile-fix-parallel-build.patch lib_patch.Upstream
 package/olsr/0003-pud-adapt-to-API-changes-in-gpsd-3-20.patch lib_patch.Upstream
@@ -1009,6 +1052,7 @@ package/supervisor/S99supervisord lib_sysv.Variables
 package/suricata/0001-configure.ac-allow-the-user-to-override-RUST_TARGET.patch lib_patch.Upstream
 package/suricata/S99suricata Shellcheck
 package/swupdate/swupdate.sh Shellcheck
+package/sylpheed/0001-harden-link-checker-before-accepting-click.patch lib_patch.Upstream
 package/sysvinit/0001-Makefile-disable-stack-protector-strong.patch lib_patch.Upstream
 package/tar/0001-lib-getrandom.c-fix-build-with-uclibc-1.0.35.patch lib_patch.Upstream
 package/targetcli-fb/S50target Shellcheck lib_sysv.Variables
@@ -1026,9 +1070,11 @@ package/ti-sgx-um/0001-Makefile-do-not-install-init-script.patch lib_patch.Upstr
 package/ti-sgx-um/S80ti-sgx lib_sysv.Variables
 package/ti-utils/0001-plt.h-fix-build-with-gcc-10.patch lib_patch.Upstream
 package/tinyalsa/0001-include-time.h-before-asound.h.patch lib_patch.Upstream
+package/tinycbor/0001-Makefile-add-DISABLE_WERROR.patch lib_patch.Upstream
 package/tinycompress/0001-wave-add-time.h-missing-header-inclusion.patch lib_patch.Upstream
 package/tinydtls/0001-sha2-sha2.c-fix-build-on-big-endian.patch lib_patch.Upstream
 package/tinyxml/0001-In-stamp-always-advance-the-pointer-if-p-0xef.patch lib_patch.Upstream
+package/tpm2-tss/0001-Temporary-fix-for-build-without-C.patch lib_patch.Upstream
 package/transmission/S92transmission Shellcheck lib_sysv.ConsecutiveEmptyLines lib_sysv.Indent lib_sysv.Variables
 package/triggerhappy/S10triggerhappy Shellcheck lib_sysv.Indent lib_sysv.Variables
 package/trinity/0001-Fix-build-with-GCC-10.patch lib_patch.Upstream
@@ -1042,7 +1088,8 @@ package/tstools/0001-build-get-along-with-buildroot.patch lib_patch.Upstream
 package/tvheadend/0001-no-check_config.patch lib_patch.Upstream
 package/tvheadend/S99tvheadend Shellcheck lib_sysv.Indent lib_sysv.Variables
 package/uboot-tools/0001-drop-configh-from-tools.patch lib_patch.Upstream
-package/uboot-tools/0002-tools-Makefile-fix-C-LD-FLAGS-with-CROSS_BUILD_TOOLS.patch lib_patch.Upstream
+package/uboot-tools/0002-tools-only-in-no-dot-config-targets.patch lib_patch.Upstream
+package/uboot-tools/0003-tools-Makefile-fix-C-LD-FLAGS-with-CROSS_BUILD_TOOLS.patch lib_patch.Upstream
 package/ubus/0001-Install-server-and-client-examples.patch lib_patch.Upstream
 package/uemacs/01-clear-ixon-termios-flag.patch lib_patch.Upstream
 package/uhd/0001-host-CMakeLists-add-boost-unit_test_framework-requir.patch lib_patch.Upstream
@@ -1098,6 +1145,9 @@ package/vte/0002-build-Fix-check-for-fstack-protector-compiler-support.patch lib
 package/vtun/0001-fix-installation.patch lib_patch.Upstream
 package/vtun/0002-fix-ssl-headers-checks.patch lib_patch.Upstream
 package/vtun/0003-openssl11.patch lib_patch.Upstream
+package/waffle/0001-cmake-forward-cflags-from-.pc-files-to-waffle-cflags.patch lib_patch.Upstream
+package/waffle/0002-wayland-fix-build-against-version-1-20.patch lib_patch.Upstream
+package/waffle/0003-drop-C-dependency.patch lib_patch.Upstream
 package/wampcc/0001-Add-RISC-V-endian-detection.patch lib_patch.Upstream
 package/wampcc/0002-include-wampcc-platform.h-fix-build-with-musl-1.2.0.patch lib_patch.Upstream
 package/wampcc/0003-Broken-build-on-Windows.patch lib_patch.Upstream
@@ -1,124 +1,3 @@
-2025.11-rc2, released November 30th, 2025
-
-	Fixes all over the tree.
-
-	Infrastructure: support/scripts/check-merged (introduced in
-	2025.11-rc1) no longer relies on getopt from util-linux
-
-	Defconfigs: pine64 star: Update U-Boot and Linux kernel to fix
-	builds with GCC 14.x
-
-	Updated/fixed packages: 18xx-ti-utils, depot-tools, e2fsprogs,
-	enscript, fio, gnutls, intel-mediadriver, intel-vpl-gpu-rt,
-	ledmon, libpng, libteam, lmbench, mongoose, netsnmp,
-	nss-pam-ldapd, open-plc-utils, oprofile, pdmenu, php-apcu,
-	php-pecl-dbus, php-xdebug, php-yaml, python-flask-restx,
-	python-pysocks, python-starlette, sane-backends, sbc, sdl,
-	stress-ng, swipl, syslinux, time, tmux, tor, uboot-tools,
-	woff2, xfsprogs, yaml-cpp
-
-	Removed packages: libargtable2, starfive-spltool
-
-2025.11-rc1, released November 20th, 2025
-
-	Fixes all over the tree and new features.
-
-	Infrastructure:
-
-	- Support merged /usr/sbin/ (E.G. sbin a symlink to bin rather
-	  than separate directories), which is required by systemd
-	  256+
-
-	- support/scripts/cve-check can now be used to enrich a SBOM
-	  in CycloneDX format (as generated by
-	  utils/generate-cyclonedx) with vulnerability analysis from
-	  the NVD database.
-
-	Dropped a number of old and unmaintained packages and external
-	toolchains.
-
-	New defconfigs: Compulab IOT-GATE-iMX8 EBBR, QEMU x86-64 EFI
-
-	Removed defconfigs: at91sam9260eknf, atmel_sama5d3xek,
-	roseapplepi
-
-	New packages: broot, bvi, go-bootstrap-stage4, libpam-pkcs11,
-	llama-cpp, nnn, python-crccheck, python-fs, python-patch-ng,
-	python-pyfatfs, python-scp, python-whitenoise, snapboot, wmenu
-
-	Removed packages: aufs, aufs-util, axfsutils, bctoolbox,
-	belle-sip, belr, dmenu-wayland, dvbsnoop,
-	ev3dev-linux-drivers, expect, fbtft, gtk2-engines, gtkperf,
-	leafpad, lesstif, libbson, libglade, libgtk2, libjwt, libsexy,
-	linphone, logsurfer, mediastreamer, metacity, mongrel2, ola,
-	ortp, procrank_linux, ramspeed, sylpheed
-
-2025.08.2, released November 20, 2025
-
-    Important / security related fixes:
-
-	- bind: CVE-2025-8677, CVE-2025-40778, CVE-2025-40780
-	- dante: CVE-2024-54662
-	- erlang: CVE-2024-53846, CVE-2025-4748, CVE-2025-26618, CVE-2025-30211,
-	          CVE-2025-32433, CVE-2025-46712, CVE-2025-48038,
-	          CVE-2025-48039, CVE-2025-48040, CVE-2025-48041
-	- hostapd: CVE-2025-24912
-	- imagemagick: CVE-2025-62171
-	- iptraf-ng: CVE-2024-52949
-	- libarchive: CVE-2025-25724
-	- libglib2: CVE-2024-54662
-	- libvips: CVE-2025-29769, CVE-2025-59933
-	- libvpx: CVE-2025-5283
-	- libxslt: CVE-2025-24855, CVE-2024-55549
-	- mbedtls: CVE-2025-54764, CVE-2025-59438
-	- modsecurity2: CVE-2025-52891, CVE-2025-54571
-	- netdata: CVE-2023-22496, CVE-2023-22497
-	- podman: CVE-2025-9566
-	- poppler: CVE-2024-6239, CVE-2024-56378, CVE-2025-32364,
-	           CVE-2025-32365, CVE-2025-43903, CVE-2025-50420,
-	           CVE-2025-52886
-	- python3: gh-139312, gh-139700, gh-139400, gh-135661, gh-135661,
-	           gh-102555, gh-135462, gh-118350, gh-86155
-	- python-webpy: CVE-2025-3818
-	- redis: CVE-2025-46817, CVE-2025-46818, CVE-2025-46819, CVE-2025-49844
-	- samba: CVE-2025-3818, CVE-2025-10230
-	- shairport-sync: Upstream security fixes without CVE
-	- squid: CVE-2025-59362
-	- suricata: CVE-2024-37151, CVE-2024-38535
-	- tpm2-tss: CVE-2024-29040
-	- xerces: CVE-2024-23807
-	- zabbix: CVE-2025-27231, CVE-2025-27236, CVE-2025-27238, CVE-2025-49641
-	- zip: CVE-2018-13410
-
-	Infrastructure updates/fixes:
-
-	- Improved matching of CPE ID with NVD database, resulting in more accurate
-	  identification of CVEs.
-	- brmake: avoid garbled output with top-level parallel build
-
-	Updated / fixed packages: 4th, audit, bind, cmake, crun, dante,
-	ebtables, erlang, freeradius-server, freerdp, gpsd, gstd, hostapd,
-	imagemagick, iptraf-ng, ledmon, libarchive, libcurl, libdbi-drivers,
-	libdisplay-info, libglib2, libgphoto2, libgtk3, libheif, libiconv,
-	libsemanage, libshout, libsolv, libtpms, libvips, libvpx, libwpe,
-	libxslt, linux, linux-headers, live555, mbedtls, micropython,
-	mjpg-streamer, modsecurity2, netdata, podman, poppler, python3,
-	python-flask-cors, python-webpy, quota, qt6multimedia, redis, refpolicy,
-	samba4, shairport-sync, selinux-python, sexpect, siproxd, sqlite, squid,
-	suricata, tor, tpm2-tss, waffle, webkitgtk, wireless-regdb, wpewebkit,
-	xerces, zabbix, zip
-
-	Removed package: ramspeed
-
-	Boards updated / fixed: andes_ae350_45, beaglebone, beagleboneai,
-	cubieboard1, cubieboard2, imx6ulz_bsh_smm_m2, imx8mn_bsh_smm_s2,
-	imx8mn_bsh_smm_s2_pro, olimex_a20_olinuxino_lime*, stm32f429_disco_xip,
-	stm32f746_disco_sd, stm32f769_disco_sd, stm32mp1*_dk*, ti_am62x_sk
-
-	Test Improvements:
-
-	- Capture output of failing commands on host.
-
 2025.08.1, released October 11, 2025

    Important / security related fixes:
@@ -276,162 +155,6 @@
 	Removed packages: libebur128, libolm, libwebsock,
 	python-dunamai, python-poetry-dynamic-versioning

-2025.05.3, released October 11, 2025
-
-    This is the final release on the 2025.05.x branch.
-
-    Important / security related fixes:
-
-    - atop: CVE-2025-31160
-    - civetweb: CVE-2025-55763
-    - cjson: CVE-2025-57052
-    - connman: CVE-2025-32366, CVE-2025-32743
-    - cups: CVE-2025-58060, CVE-2025-58364
-    - exiv2: CVE-2023-44398, CVE-2024-24826, CVE-2024-25112, CVE-2024-39695,
-             CVE-2025-26623, CVE-2025-54080, CVE-2025-55304
-    - expat: CVE-2025-59375
-    - fastd: CVE-2025-24356
-    - fetchmail: CVE number pending
-    - ghostscript: CVE-2025-59798, CVE-2025-59799, CVE-2025-59800,
-                   CVE-2025-59801
-    - imagemagick: CVE-2023-5341, CVE-2025-55004, CVE-2025-55005,
-                   CVE-2025-55160
-    - intel-microcode: CVE-2025-20053, CVE-2025-20109, CVE-2025-22839,
-                       CVE-2025-22840, CVE-2025-22889, CVE-2025-26403
-    - jasper: CVE-2023-51257, CVE-2025-8835
-    - libcurl: CVE-2025-10148, CVE-2025-9086
-    - libopenssl: CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
-    - libssh: CVE-2025-8114, CVE-2025-8277
-    - lua: CVE-2014-5461
-    - opencv4: CVE-2025-53644
-    - pcre2: CVE-2025-58050
-    - poco: CVE-2025-6375
-    - postgresql: CVE-2025-8713, CVE-2025-8714, CVE-2025-8715
-    - python-django: CVE-2025-57833, CVE-2025-59681, CVE-2025-59682
-    - python-flask-cors: CVE-2024-6839, CVE-2024-6844, CVE-2024-6866
-    - python-pip: CVE-2025-8869
-    - raptor: CVE-2024-57822, CVE-2024-57823
-    - sqlite: CVE-2025-6965
-    - syslog-ng: CVE-2024-47619
-    - tiff: CVE-2024-13978, CVE-2025-8961, CVE-2025-9165
-    - udisks: CVE-2025-8067
-    - wireshark: CVE-2025-5601
-
-    Updated / fixed packages: asterisk, avrdude, boinc, boot-wrapper-aarch64,
-    cjson, cpp-httplib, cutekeyboard, docker-engine, ecryptfs-utils, fatcat,
-    fetchmail, firewalld, gnupg2, gnuplot, htpdate, iputils, jose, kodi,
-    libfreeimage, libopenssl, libselinux, libsemanage, libxkbcommon,
-    libxmlrpc, linux-firmware, linuxptp, llvm, lua-utf8, luaossl, luvi,
-    mariadb, mbpfan, micropython, modsecurity2, mosquitto, opencv4, openjpeg,
-    pango, php-lua, policycoreutils, python-aiohttp-session, python-certifi,
-    python-cryptography, python-flask-cors, python-pytz, python3, rtl_433,
-    ruby, samba4, sysprof, ti-k3-boot-firmware, tiff, tor, uclibc, upx,
-    webkitgtk, wlroots, x11r7, xilinx-embeddedsw, xilinx-prebuilt, zziplib
-
-    Removed package: netstat-nat
-
-    Boards updated / fixed: versal, ti_am62x_sk, qemu/{x86, x86_64},
-    zedboard, beagleboneai
-
-    Boards removed: roseapplepi, at91sam9260eknf, atmel_sama5d3xek
-
-    Test Improvements:
-
-    - TestSWIPL: increase timeout value
-    - TestOpenJdk: remove stime() function call
-    - test_hardening: update toolchain to aarch64 for checksec tests
-    - test_docker_compose: update kernel & VM CPU
-    - TestZfsUclibc: use internal backend for uClibc-ng toolchain
-    - GitTestBase: remove git daemon due to Gitlab-CI security settings
-
-2025.05.2, released September 09, 2025
-
-	Important / security related fixes:
-
-	- libssh: CVE-2025-4878, CVE-2025-5318, CVE-2025-5351, CVE-2025-5372,
-	    CVE-2025-5449, CVE-2025-5987
-	- glibc: CVE-2025-5702, CVE-2025-5745, CVE-2025-8058
-	- gnutls: CVE-2025-32989, CVE-2025-32988, CVE-2025-32990, CVE-2025-6395
-	- python3: CVE-2025-8194
-	- libhtp: CVE-2025-53537
-	- tiff: CVE-2025-8176, CVE-2025-8177
-	- libglib2: CVE-2025-6052
-	- ofono: CVE-2023-2794, CVE-2024-7537, CVE-2024-7539, CVE-2024-7540,
-	    CVE-2024-7541, CVE-2024-7542
-	- elfutils: CVE-2025-1352, CVE-2025-1365, CVE-2025-1371, CVE-2025-1372,
-	    CVE-2025-1376, CVE-2025-1377
-	- grub2: CVE-2024-45777, CVE-2024-45778, CVE-2024-45779,
-	    CVE-2024-45780, CVE-2024-45782, CVE-2024-56737, CVE-2024-56738,
-	    CVE-2025-0678, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686,
-	    CVE-2025-0689, CVE-2025-1125
-	- openjpeg: CVE-2025-54874
-	- go: CVE-2025-4674, CVE-2025-47907
-	- gst1-plugins-base: CVE-2025-47806, CVE-2025-47807
-	- gst1-plugins-good: CVE-2025-47219, CVE-2025-47183
-	- vorbis-tools: CVE-2023-43361
-	- vim: CVE-2024-41957, CVE-2024-41965, CVE-2024-45306, CVE-2024-47814,
-	    CVE-2025-1215, CVE-2025-22134, CVE-2025-24014, CVE-2025-26603,
-	    CVE-2025-29768, CVE-2025-53905, CVE-2025-53906
-	- ffmpeg: CVE-2023-6602
-	- lighttpd: CVE-2025-8671
-	- python-h2: CPE-2025-57804
-	- cpp-httplib: CVE-2025-46728
-
-	Removed packages: liboauth, thttpd
-
-	Removed defconfigs: at91sam9g20dfc, at91sam9g45m10ek,
-	at91sam9rlek, bananapro, beelink_gs1, chromebook_snow, galileo,
-	odroidxu4, orangepi_lite2, orangepi_one_plus, pcengines_apu2,
-	pine64_sopine, riotboard, rock64, rock_pi_n8, socrates_cyclone5,
-	toradex_apalis_imx6, ts7680, engicam_imx6*, kontron_pitx_imx8m,
-	imx6ulz_bsh_smm_m2,
-
-	Test Improvements:
-
-	- test_gstreamer1: raise tesseract-ocr timeout to 15s
-	- test_wine: fix test after bootlin toolchains update
-	- test_numactl: fix test after bootlin toolchains update
-	- test_dpdk: fix test after bootlin toolchains update
-	- test_msr_tools: fix test after bootlin toolchains update
-	- test_dmidecode: fix test after bootlin toolchains update
-	- test_iso9660: use a more recent toolchain
-	- test_grub: use glibc toolchain
-	- test_wget: replace thttpd by Busybox's httpd server
-	- test_libcurl: replace thttpd by Busybox's httpd server
-	- test_systemd_selinux: fix test after bootlin toolchains update
-
-	Updated / fixed packages: python-propcache, pipewire, apache, xinetd,
-	libssh, glibc, libhtp, libapparmor, libopenssl, rpi-firmware,
-	brcmfmac_sdio-firmware-rpi, grout, php-pecl-dbus, tini, snooze, ngrep,
-	libzenoh-pico, janet, cjson, flatcc, nanocom, rtl8189es, gcc, ofono,
-	python-numpy, elfutils, libtracefs, tinyssh, start-stop-daemon, bcusdk,
-	prboom, setserial, grub2, openjpeg, go, gstreamer1, gst1-plugins-base,
-	gst1-plugins-good, gst1-plugins-bad, gst1-plugins-ugly, gst1-devtools,
-	gst1-libav, gst1-python, gst1-rtsp-server, gst1-vaapi,
-	gstreamer1-editing-services, vorbis-tools, jq, lbijwt, vim, ffmpeg,
-	libv4l, python-yarl, lirc-tools, b43-firmware, tcpreplay, libsvgtiny,
-	libsoxr, lighttpd, uclibc, vde2, libcap-ng, python-h2, squid, ipmitool,
-	ell, proftpd, liblog4c-localtime, wpewebkit, weston, cpp-httplib,
-	ipset, python3, python-aexpect, libftdi1
-
-	Infrastructure updates/fixes:
-	- Various tweaks to utils/generate-cyclonedx for better SBOM
-	  compatibility and project name/version customization
-	- go: make pre-built compiler provide target support too
-	- test-pkg: add new option -T/--toolchain-name
-	- pkg-utils.mk: include package directory in show-info output
-	- bump-stable-kernel-versions: new tool
-
-	Boards updated / fixed:
-
-	- qemu_sh4*: switch back to disk emulation
-	- acmesystems_acqua_a5_*: update linux
-	- sipeed_licheepi_zero: update linux & uboot
-	- zynqmp: increase vfat partition to 64M
-	- qemu_{arm,aarch64}_{ebbr,sbsa}*: linux needs host python3
-	- canaan_kd233, sipeed*: use BR2_LINUX_KENREL_IMAGE_TARGET_NAME
-	- ci20: U-Boot needs host-openssl
-
 2025.05.1, released August 11th, 2025

 	Important / security related fixes:
@@ -633,227 +356,6 @@
 	- netsnmp: unexpected header length in /proc/net/snmp...
 	  https://gitlab.com/buildroot.org/buildroot/-/issues/110

-2025.02.8, released November 20, 2025
-
-    Important / security related fixes:
-
-	- bind: CVE-2025-8677, CVE-2025-40778, CVE-2025-40780
-	- dante: CVE-2024-54662
-	- erlang: CVE-2024-53846, CVE-2025-4748, CVE-2025-26618, CVE-2025-30211,
-	          CVE-2025-32433, CVE-2025-46712, CVE-2025-48038,
-	          CVE-2025-48039, CVE-2025-48040, CVE-2025-48041
-	- hostapd: CVE-2025-24912
-	- imagemagick: CVE-2025-62171
-	- iptraf-ng: CVE-2024-52949
-	- libarchive: CVE-2025-25724
-	- libglib2: CVE-2024-54662
-	- libvips: CVE-2025-29769, CVE-2025-59933
-	- libvpx: CVE-2025-5283
-	- libxslt: CVE-2025-24855, CVE-2024-55549
-	- mbedtls: CVE-2025-54764, CVE-2025-59438
-	- modsecurity2: CVE-2025-52891, CVE-2025-54571
-	- netdata: CVE-2023-22496, CVE-2023-22497
-	- poppler: CVE-2024-6239, CVE-2024-56378, CVE-2025-32364,
-	           CVE-2025-32365, CVE-2025-43903, CVE-2025-50420,
-	           CVE-2025-52886
-	- python3: gh-139312, gh-139700, gh-139400, gh-135661, gh-135661,
-	           gh-102555, gh-135462, gh-118350, gh-86155
-	- python-webpy: CVE-2025-3818
-	- redis: CVE-2025-46817, CVE-2025-46818, CVE-2025-46819, CVE-2025-49844
-	- samba: CVE-2025-3818, CVE-2025-10230
-	- shairport-sync: Upstream security fixes without CVE
-	- squid: CVE-2025-59362
-	- suricata: CVE-2024-37151, CVE-2024-38535
-	- tpm2-tss: CVE-2024-29040
-	- xerces: CVE-2024-23807
-	- zabbix: CVE-2025-27231, CVE-2025-27236, CVE-2025-27238, CVE-2025-49641
-	- zip: CVE-2018-13410
-
-	Infrastructure updates/fixes:
-
-	- Improved matching of CPE ID with NVD database, resulting in more
-	  accurate identification of CVEs.
-	- brmake: avoid garbled output with top-level parallel build
-
-	Updated / fixed packages: 4th, audit, bind, cmake, crun, dante,
-	ebtables, erlang, freeradius-server, gpsd, gstd, hostapd, imagemagick,
-	iptraf-ng, iozone, ledmon, libarchive, libcurl, libdbi-drivers,
-	libdisplay-info, libglib2, libgphoto2, libgtk3, libheif, libsemanage,
-	libshout, libsolv, libtpms, libvips, libvpx, libwpe, libxslt, linux,
-	linux-headers, live555, mbedtls, micropython, mjpg-streamer,
-	modsecurity2, netdata, netsnmp, poppler, python3, python-flask-cors,
-	python-webpy, quota, qt6multimedia, redis, refpolicy, samba4,
-	selinux-python, sexpect, shairport-sync, siproxd, sqlite, squid,
-	suricata, tor, tpm2-tss, waffle, webkitgtk, wireless-regdb, wpewebkit,
-	xerces, zabbix, zip
-
-	Removed package: ramspeed
-
-	Boards updated / fixed: beagleboneai, cubieboard1, cubieboard2,
-	stm32f429_disco_xip, stm32f746_disco_sd, stm32f769_disco_sd,
-
-	Test Improvements:
-
-	- Capture output of failing commands on host.
-
-2025.02.7, released October 11, 2025
-
-    Important / security related fixes:
-
-    - asterisk: CVE-2024-42491
-    - atop: CVE-2025-31160
-    - civetweb: CVE-2025-55763
-    - cjson: CVE-2025-57052
-    - connman: CVE-2025-32366, CVE-2025-32743
-    - cups: CVE-2025-58060, CVE-2025-58364
-    - exiv2: CVE-2023-44398, CVE-2024-24826, CVE-2024-25112, CVE-2024-39695,
-             CVE-2025-26623, CVE-2025-54080, CVE-2025-55304
-    - expat: CVE-2025-59375
-    - fastd: CVE-2025-24356
-    - fetchmail: CVE-2025-61962
-    - ghostscript: CVE-2025-59798, CVE-2025-59799, CVE-2025-59800, CVE-2025-59801
-    - imagemagick: CVE-2023-5341, CVE-2025-55004, CVE-2025-55005, CVE-2025-55160
-    - intel-microcode: CVE-2025-20053, CVE-2025-20109, CVE-2025-22839,
-                       CVE-2025-22840, CVE-2025-22889, CVE-2025-26403
-    - jasper: CVE-2023-51257, CVE-2025-8835
-    - libcurl: CVE-2025-10148, CVE-2025-9086
-    - libopenssl: CVE-2025-9230, CVE-2025-9231, CVE-2025-9232
-    - libssh: CVE-2025-8114, CVE-2025-8277
-    - lua: CVE-2014-5461
-    - opencv4: CVE-2025-53644
-    - pcre2: CVE-2025-58050
-    - poco: CVE-2025-6375
-    - postgresql: CVE-2025-8713, CVE-2025-8714, CVE-2025-8715
-    - python-django: CVE-2025-57833, CVE-2025-59681, CVE-2025-59682
-    - python-flask-cors: CVE-2024-6839, CVE-2024-6844, CVE-2024-6866
-    - python-pip: CVE-2025-8869
-    - raptor: CVE-2024-57822, CVE-2024-57823
-    - sqlite: CVE-2025-6965
-    - syslog-ng: CVE-2024-47619
-    - tiff: CVE-2024-13978, CVE-2025-8961, CVE-2025-9165
-    - udisks: CVE-2025-8067
-    - webkitgtk: CVE-2025-24189, CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
-      CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
-      CVE-2025-43240, CVE-2025-43265, CVE-2025-6558
-    - wireshark: CVE-2025-5601
-
-    Updated / fixed packages: asterisk, atop, boinc, civetweb, cjson,
-    connman, cpp-httplib, cups, cutekeyboard, ecryptfs-utils, exiv2, expat,
-    fastd, fetchmail, ghostscript, gnupg2, gnuplot, htpdate, imagemagick,
-    intel-microcode, iputils, jasper, jose, kodi, libcurl, libopenssl,
-    libssh, libxkbcommon, libxmlrpc, linux-firmware, linux-headers,
-    linuxptp, llvm-project, lua, luaossl, luvi, mariadb, micropython,
-    modsecurity2, opencv4, opencv4-contrib, openjpeg, pango, pcre2, poco,
-    postgresql, python-certifi, python-cryptography, python-django,
-    python-flask-cors, python-pip, python-pyopenssl, python-pytz, raptor,
-    rtl_433, ruby, samba4, sqlite, syslog-ng, sysprof, tiff, tor, uclibc,
-    udisks, upx, webkitgtk, wireshark, wlroots, x11r7, zziplib
-
-    Removed package: netstat-nat
-
-    Boards updated / fixed: beagleboneai, qemu/{x86, x86_64}, ti_am62x_sk
-    versal, zedboard
-
-    Boards removed: roseapplepi, atmel_sama5d3xek, at91sam9260eknf
-
-    Test Improvements:
-
-    - TestSWIPL: increase timeout value
-    - TestOpenJdk: remove stime() function call
-    - test_hardening: update toolchain to aarch64 for checksec tests
-    - test_docker_compose: update kernel & VM CPU
-    - TestZfsUclibc: use internal backend for uClibc-ng toolchain
-    - GitTestBase: remove git daemon due to Gitlab-CI security settings
-
-2025.02.6, released September 09, 2025
-
-	Important / security related fixes:
-
-	- libssh: CVE-2025-4878, CVE-2025-5318, CVE-2025-5351, CVE-2025-5372,
-	    CVE-2025-5449, CVE-2025-5987
-	- glibc: CVE-2025-5702, CVE-2025-5745, CVE-2025-8058
-	- gnutls: CVE-2025-32989, CVE-2025-32988, CVE-2025-32990, CVE-2025-6395
-	- python3: CVE-2025-8194
-	- libhtp: CVE-2025-53537
-	- tiff: CVE-2025-8176, CVE-2025-8177
-	- libglib2: CVE-2025-6052
-	- ofono: CVE-2023-2794, CVE-2024-7537, CVE-2024-7539, CVE-2024-7540,
-	    CVE-2024-7541, CVE-2024-7542
-	- elfutils: CVE-2025-1352, CVE-2025-1365, CVE-2025-1371, CVE-2025-1372,
-	    CVE-2025-1376, CVE-2025-1377
-	- grub2: CVE-2024-45777, CVE-2024-45778, CVE-2024-45779,
-	    CVE-2024-45780, CVE-2024-45782, CVE-2024-56737, CVE-2024-56738,
-	    CVE-2025-0678, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686,
-	    CVE-2025-0689, CVE-2025-1125
-	- openjpeg: CVE-2025-54874
-	- go: CVE-2025-4674, CVE-2025-47907
-	- gst1-plugins-base: CVE-2025-47806, CVE-2025-47807
-	- gst1-plugins-good: CVE-2025-47219, CVE-2025-47183
-	- vorbis-tools: CVE-2023-43361
-	- quickjs: CVE-2025-46688
-	- libde265: CVE-2024-38949, CVE-2024-38950
-	- vim: CVE-2024-41957, CVE-2024-41965, CVE-2024-45306, CVE-2024-47814,
-	    CVE-2025-1215, CVE-2025-22134, CVE-2025-24014, CVE-2025-26603,
-	    CVE-2025-29768, CVE-2025-53905, CVE-2025-53906
-	- ffmpeg: CVE-2023-6602
-	- lighttpd: CVE-2025-8671
-	- python-h2: CPE-2025-57804
-	- cpp-httplib: CVE-2025-46728
-	- iperf3: CVE-2025-54349, CVE-2025-54350
-
-	Removed package: liboauth, thttpd
-
-	Removed defconfig: at91sam9g20dfc, at91sam9g45m10ek,
-	at91sam9rlek, bananapro, beelink_gs1, chromebook_snow, galileo,
-	odroidxu4, orangepi_lite2, orangepi_one_plus, pcengines_apu2,
-	pine64_sopine, riotboard, rock64, rock_pi_n8, socrates_cyclone5,
-	toradex_apalis_imx6, ts7680, engicam_imx6*, kontron_pitx_imx8m, imx6ulz_bsh_smm_m2,
-
-	Test Improvements:
-
-	- test_gstreamer1: raise tesseract-ocr timeout to 15s
-	- test_wine: fix test after bootlin toolchains update
-	- test_numactl: fix test after bootlin toolchains update
-	- test_dpdk: fix test after bootlin toolchains update
-	- test_msr_tools: fix test after bootlin toolchains update
-	- test_dmidecode: fix test after bootlin toolchains update
-	- test_iso9660: use a more recent toolchain
-	- test_gruby: use glibc toolchain
-	- test_wget: replace thttpd by Busybox's httpd server
-	- test_libcurl: replace thttpd by Busybox's httpd server
-	- test_systemd_selinux: fix test after bootlin toolchains update
-
-	Updated / fixed packages: python-propcache, pipewire, apache, xinetd,
-	libssh, glibc, libhtp, libapparmor, php-pecl-dbus, tini, snooze, ngrep,
-	libzenoh-pico, janet, nanocom, rtl8189es, gcc, ofono, python-numpy,
-	elfutils, libtracefs, tinyssh, start-stop-daemon, bcusdk, prboom,
-	setserial, grub2, openjpeg, go, gstreamer1, gst1-plugins-base,
-	gst1-plugins-good, gst1-plugins-bad, gst1-plugins-ugly, gst1-devtools,
-	gst1-libav, gst1-python, gst1-rtsp-server, gst1-vaapi,
-	gstreamer1-editing-services, vorbis-tools, quickjs, libde265, vim,
-	ffmpeg, libv4l, python-yarl, lirc-tools, b43-firmware, tcpreplay,
-	libsvgtiny, libsoxr, lighttpd, uclibc, vde2, libcap-ng, python-h2,
-	squid, ipmitool, ell, proftpd, liblog4c-localtime, wpewebkit, weston,
-	cpp-httplib, ipset, iperf3
-
-	Infrastructure updates/fixes:
-	- Various tweaks to utils/generate-cyclonedx for better SBOM
-	  compatibility and project name/version customization
-	- go: make pre-built compiler provide target support too
-	- test-pkg: add new option -T/--toolchain-name
-	- pkg-utils.mk: include package directory in show-info output
-	- bump-stable-kernel-versions: new tool
-
-	Boards updated / fixed:
-
-	- qemu_sh4*: switch back to disk emulation
-	- acmesystems_acqua_a5_*: update linux
-	- sipeed_licheepi_zero: update linux & uboot
-	- zynqmp: increase vfat partition to 64M
-	- qemu_{arm,aarch64}_{ebbr,sbsa}*: linux needs host python3
-	- canaan_kd233, sipeed*: use BR2_LINUX_KENREL_IMAGE_TARGET_NAME
-	- ci20: U-Boot needs host-openssl
-
 2025.02.5, released August 11, 2025

    Important / security related fixes:
@@ -144,322 +144,6 @@ endif

 ###############################################################################

-comment "Legacy options removed in 2025.11"
-
-config BR2_PACKAGE_LIBARGTABLE2
-	bool "libargtable2 has been removed"
-	select BR2_LEGACY
-	help
-	  libargtable2 is unmaintained and has been removed
-
-config BR2_PACKAGE_OLA
-	bool "ola has been removed"
-	select BR2_LEGACY
-	help
-	  ola is incompatible with current versions of protobuf
-
-config BR2_PACKAGE_BATMAN_ADV_NC
-	bool "batman-adv removed network coding"
-	select BR2_LEGACY
-	help
-	  batman-adv removed B.A.T.M.A.N. network coding
-
-config BR2_PACKAGE_DVBSNOOP
-	bool "dvbsnoop has been removed"
-	select BR2_LEGACY
-	help
-	  dvbsnoop is unmaintained and has been removed
-
-config BR2_PACKAGE_PROCRANK_LINUX
-	bool "procrank_linux has been removed"
-	select BR2_LEGACY
-	help
-	  procrank_linux is unmaintained and has been removed
-
-config BR2_PACKAGE_MONGREL2
-	bool "mongrel2 has been removed"
-	select BR2_LEGACY
-	help
-	  mongrel2 is incompatible with MbedTLS 3.6 and has been removed
-
-config BR2_PACKAGE_EXPECT
-	bool "expect has been removed"
-	select BR2_LEGACY
-	help
-	  expect is unmaintained and has been removed
-
-config BR2_PACKAGE_BCTOOLBOX
-	bool "bctoolbox has been removed"
-	select BR2_LEGACY
-	help
-	  This package has been removed as part of the linphone
-	  removal. In addition, newer version of linphone directly
-	  bundle bctoolbox making a separate package unnecessary.
-
-config BR2_PACKAGE_ORTP
-	bool "ortp has been removed"
-	select BR2_LEGACY
-	help
-	  This package has been removed as part of the linphone
-	  removal. In addition, newer version of linphone directly
-	  bundle ortp making a separate package unnecessary.
-
-config BR2_PACKAGE_MEDIASTREAMER
-	bool "mediastreamer has been removed"
-	select BR2_LEGACY
-	help
-	  This package has been removed as part of the linphone
-	  removal. In addition, newer version of linphone directly
-	  bundle mediastreamer making a separate package unnecessary.
-
-config BR2_PACKAGE_BELR
-	bool "belr has been removed"
-	select BR2_LEGACY
-	help
-	  This package has been removed as part of the linphone
-	  removal. In addition, newer version of linphone directly
-	  bundle belr making a separate package unnecessary.
-
-config BR2_PACKAGE_BELLE_SIP
-	bool "belle-sip has been removed"
-	select BR2_LEGACY
-	help
-	  This package has been removed as part of the linphone
-	  removal. In addition, newer version of linphone directly
-	  bundle belle-sip making a separate package unnecessary.
-
-config BR2_PACKAGE_LINPHONE
-	bool "linphone has been removed"
-	select BR2_LEGACY
-	help
-	  This package was no longer maintained in Buildroot and was
-	  no longer building. It can be re-added if someone volunteers
-	  to fix the issues, update the package and maintain it.
-
-config BR2_PACKAGE_LIBJWT
-	bool "libjwt has been removed"
-	select BR2_LEGACY
-	help
-	  The only dependee of libjwt, asterisk, is incompatible with
-	  version 3 so the version bundled with asterisk is used and
-	  this package has been removed.
-
-config BR2_PACKAGE_RAMSPEED
-	bool "ramspeed has been removed"
-	select BR2_LEGACY
-	help
-	  The ramspeed package was removed as it is not maintained
-	  anymore and the upstream repo is gone.
-
-config BR2_PACKAGE_LESSTIF
-	bool "lesstif has been removed"
-	select BR2_LEGACY
-	help
-	  lesstif is unmaintained and has been removed
-
-config BR2_KERNEL_HEADERS_6_16
-	bool "kernel headers version 6.16.x are no longer supported"
-	select BR2_LEGACY
-	help
-	  Version 6.16.x of the Linux kernel headers are no longer
-	  maintained upstream and are now removed.
-
-config BR2_PACKAGE_MURATA_CYW_FW_CYW4339_1CK
-	bool "This firmware has been removed"
-	select BR2_LEGACY
-	help
-	  This firmware has been removed from Murata package
-
-config BR2_PACKAGE_MURATA_CYW_FW_CYW4339_ZP
-	bool "BR2_PACKAGE_MURATA_CYW_FW_CYW4339_ZP has been renamed"
-	select BR2_LEGACY
-	select BR2_PACKAGE_MURATA_CYW_FW_CYW4339
-	help
-	  The option has been renamed to
-	  BR2_PACKAGE_MURATA_CYW_FW_CYW4339
-
-config BR2_PACKAGE_LIBBSON
-	bool "libbson has been removed"
-	select BR2_LEGACY
-	help
-	  libbson is officially deprecated upstream and has been removed
-
-config BR2_TARGET_ROOTFS_AXFS
-	bool "AXFS root filesystem has been removed"
-	select BR2_LEGACY
-	help
-	  AXFS root filesystem support has been removed.
-
-config BR2_PACKAGE_LOGSURFER
-	bool "logsurfer has been removed"
-	select BR2_LEGACY
-	help
-	  Logsurfer last updates was on 2011 and fails to build with
-	  GCC14.
-
-config BR2_LINUX_KERNEL_EXT_FBTFT
-	bool "FB TFT drivers are deprecated"
-	select BR2_LEGACY
-	help
-	  FB TFT drivers were only needed for linux kernels until v3.19,
-	  since v4.0 the drivers are included in the staging area.
-
-config BR2_PACKAGE_DMENU_WAYLAND
-	bool "dmenu-wayland has been removed"
-	select BR2_LEGACY
-	help
-	  The package has been abandoned for several years.
-	  The only package that previously relied on dmenu-wayland
-	  was sway, and that now relies on wmenu. Please select
-	  wmenu instead.
-
-config BR2_PACKAGE_SYLPHEED
-	bool "sylpheed has been removed"
-	select BR2_LEGACY
-	help
-	  Due to the removal of libgtk2, the sylpheed package has been
-	  removed.
-
-config BR2_PACKAGE_PINENTRY_GTK2
-	bool "gtk2 backend of pinentry has been removed"
-	select BR2_LEGACY
-	help
-	  Due to the removal of libgtk2, the gtk2 backend of pinentry
-	  has been removed.
-
-config BR2_PACKAGE_OPENCV4_WITH_GTK
-	bool "opencv4 gtk support has been removed"
-	select BR2_LEGACY
-	help
-	  Due to the removal of libgtk2, the gtk support of opencv4
-	  has been removed. gtk3 support is still available.
-
-config BR2_PACKAGE_OPENCV3_WITH_GTK
-	bool "opencv3 gtk support has been removed"
-	select BR2_LEGACY
-	help
-	  Due to the removal of libgtk2, the gtk support of opencv3
-	  has been removed. gtk3 support is still available.
-
-config BR2_PACKAGE_NETSURF_GTK
-	bool "gtk frontend of netsurf has been removed"
-	select BR2_LEGACY
-	help
-	  Due to the removal of libgtk2, the gtk frontend of netsurf
-	  has been removed. The gtk3 frontend can be used instead for
-	  example.
-
-config BR2_PACKAGE_METACITY
-	bool "metacity has been removed"
-	select BR2_LEGACY
-	help
-	  The metacity package has been removed, as libgtk2 has been
-	  removed as well.
-
-config BR2_PACKAGE_LIBSEXY
-	bool "libsexy has been removed"
-	select BR2_LEGACY
-	help
-	  The libsexy package has been removed, as libgtk2 has been
-	  removed as well.
-
-config BR2_PACKAGE_LIBGLADE
-	bool "libglade has been removed"
-	select BR2_LEGACY
-	help
-	  The libglade package has been removed, as libgtk2 has been
-	  removed as well.
-
-config BR2_PACKAGE_LEAFPAD
-	bool "leafpad has been removed"
-	select BR2_LEGACY
-	help
-	  The leafpad package has been removed, as libgtk2 has been
-	  removed as well.
-
-config BR2_PACKAGE_GTKPERF
-	bool "gtkperf has been removed"
-	select BR2_LEGACY
-	help
-	  The gtkperf package has been removed, as libgtk2 has been
-	  removed as well.
-
-config BR2_PACKAGE_GTK2_ENGINES
-	bool "gtk2-engines has been removed"
-	select BR2_LEGACY
-	help
-	  The gtk2-engines package has been removed, as libgtk2 has
-	  been removed as well.
-
-config BR2_PACKAGE_GKRELLM_CLIENT
-	bool "gkrellm client has been removed"
-	select BR2_LEGACY
-	help
-	  The gkrellm client option has been removed, as it required
-	  libgtk2, which was removed from Buildroot.
-
-config BR2_PACKAGE_CWIID_WMGUI
-	bool "cwiid wmgui has been removed"
-	select BR2_LEGACY
-	help
-	  The wmgui part of cwiid required libgtk2, which has been
-	  removed from Buildroot.
-
-config BR2_LINUX_KERNEL_EXT_AUFS
-	bool "Aufs Filesystem Module patch has been removed"
-	select BR2_LEGACY
-	help
-	  aufs kernel module patch is unmaintained and has been
-	  removed.
-
-config BR2_PACKAGE_AUFS_UTIL
-	bool "aufs-util has been removed"
-	select BR2_LEGACY
-	help
-	  aufs-util package is unmaintained and has been removed.
-
-config BR2_TOOLCHAIN_EXTERNAL_LINARO_ARMEB
-	bool "Linaro armeb 2018.05 external toolchain is deprecated"
-	select BR2_LEGACY
-	help
-	  Linaro armeb 2018.05 is no longer maintained and has been
-	  removed from Buildroot.
-
-config BR2_TOOLCHAIN_EXTERNAL_LINARO_ARM
-	bool "Linaro ARM 2018.05 external toolchain is deprecated"
-	select BR2_LEGACY
-	help
-	  Linaro ARM 2018.05 is no longer maintained and has been
-	  removed from Buildroot.
-
-config BR2_TOOLCHAIN_EXTERNAL_LINARO_AARCH64_BE
-	bool "Linaro AArch64 BE 2018.05 external toolchain is deprecated"
-	select BR2_LEGACY
-	help
-	  Linaro AArch64 2018.05 BE is no longer maintained and has been
-	  removed from Buildroot.
-
-config BR2_TOOLCHAIN_EXTERNAL_LINARO_AARCH64
-	bool "Linaro AArch64 2018.05 external toolchain is deprecated"
-	select BR2_LEGACY
-	help
-	  Linaro AArch64 2018.05 is no longer maintained and has been
-	  removed from Buildroot.
-
-config BR2_TOOLCHAIN_EXTERNAL_CODESOURCERY_MIPS
-	bool "Sourcery CodeBench MIPS external toolchain is deprecated"
-	select BR2_LEGACY
-	help
-	  Sourcery CodeBench MIPS 2016.05 is no longer maintained
-	  and has been removed from Buildroot.
-
-config BR2_LINUX_KERNEL_EXT_EV3DEV_LINUX_DRIVERS
-	bool "ev3dev Linux drivers have been removed"
-	select BR2_LEGACY
-	help
-	  Linux drivers for LEGO MINDSTORMS EV3 from the ev3dev project
-	  are targeting an outdated kernel which is no longer supported.
-
 comment "Legacy options removed in 2025.08"

 config BR2_PACKAGE_NETSTAT_NAT
@@ -86,10 +86,6 @@ F:	package/modem-manager/
 N:	Aleksandr Makarov <aleksandr.o.makarov@gmail.com>
 F:	package/cpp-httplib/

-N:	Alexander Shirokov <shirokovalexs@gmail.com>
-F:	package/broot/
-F:	package/nnn/
-
 N:	Alessandro Partesotti <a.partesotti@gmail.com>
 F:	package/oatpp/

@@ -149,9 +145,6 @@ F:	configs/cubieboard2_defconfig
 N:	Alexey Lukyanchuk <skif@skif-web.ru>
 F:	package/zabbix/

-N: 	Alexis Lothoré <alexis.lothore@bootlin.com>
-F: 	package/python-scp
-
 N:	Alistair Francis <alistair@alistair23.me>
 F:	board/sifive/
 F:	boot/opensbi/
@@ -177,9 +170,6 @@ F:	package/libkrb5/
 F:	package/p7zip/
 F:	package/wine/

-N:	Andrea Ricchi <andrea.ricchi@amarulasolutions.com>
-F:	package/cutekeyboard/
-
 N:	Andreas Klinger <ak@it-klinger.de>
 F:	package/ply/

@@ -407,6 +397,7 @@ F:	package/libcec/
 F:	package/libcodec2/
 F:	package/libcrossguid/
 F:	package/libde265/
+F:	package/libdecor/
 F:	package/libdeflate/
 F:	package/libdisplay-info/
 F:	package/libdrm/
@@ -414,6 +405,7 @@ F:	package/libdvbcsa/
 F:	package/libdvdcss/
 F:	package/libdvdnav/
 F:	package/libdvdread/
+F:	package/libfreeglut/
 F:	package/libfribidi/
 F:	package/libg7221/
 F:	package/libglew/
@@ -486,7 +478,6 @@ F:	package/perl-uri/
 F:	package/perl-www-robotrules/
 F:	package/php/
 F:	package/pngquant/
-F:	package/postgresql/
 F:	package/pppd/
 F:	package/privoxy/
 F:	package/pure-ftpd/
@@ -582,6 +573,7 @@ F:	package/jailhouse/
 F:	package/sunxi-boards/

 N:	Carsten Schoenert <c.schoenert@gmail.com>
+F:	package/dvbsnoop/
 F:	package/libdvbsi/
 F:	package/libsvg/
 F:	package/libsvg-cairo/
@@ -810,8 +802,6 @@ F:	package/connman/
 F:	package/empty/
 F:	package/iana-assignments/
 F:	package/inih/
-F:	package/less/
-F:	package/libgphoto2/
 F:	package/pocketpy/
 F:	package/sscep/
 F:	package/tinyinit/
@@ -838,7 +828,9 @@ F:	package/libtalloc/
 N:	David Lechner <david@lechnology.com>
 F:	board/lego/ev3/
 F:	configs/lego_ev3_defconfig
+F:	linux/linux-ext-ev3dev-linux-drivers.mk
 F:	package/brickd/
+F:	package/ev3dev-linux-drivers/

 N:	David Pierret <david.pierret@smile.fr>
 F:	package/bat/
@@ -878,7 +870,6 @@ N:	Dimitar Tomov <dimi@tpm.dev>
 F:	package/wolftpm/

 N:	Dimitrios Siganos <dimitris@siganos.org>
-F:	package/bvi/
 F:	package/wireless-regdb/

 N:	Dmitry Chestnykh <dm.chestnykh@gmail.com>
@@ -886,6 +877,9 @@ F:	board/qemu/sparc-ss10/
 F:	configs/qemu_sparc_ss10_defconfig
 F:	package/uclibc-ng-test/

+N:	Dominik Faessler <faessler@was.ch>
+F:	package/logsurfer/
+
 N:	Dominik Michael Rauh <dmrauh@posteo.de>
 F:	package/gdal/

@@ -1018,6 +1012,8 @@ F:	package/openzwave/

 N:	Fabrice Fontaine <fontaine.fabrice@gmail.com>
 F:	package/bearssl/
+F:	package/belle-sip/
+F:	package/belr/
 F:	package/boinc/
 F:	package/cairo/
 F:	package/daq3/
@@ -1048,6 +1044,7 @@ F:	package/libcue/
 F:	package/libebml/
 F:	package/libgee/
 F:	package/libglib2/
+F:	package/libgtk2/
 F:	package/libgtk3/
 F:	package/libhtp/
 F:	package/libidn/
@@ -1115,10 +1112,8 @@ F:	package/python-aiomqtt/
 F:	package/python-pyasynchat/
 F:	package/python-pyasyncore/
 F:	support/testing/tests/package/sample_python_networkmanager_goi.py
-F:	support/testing/tests/package/sample_python_pyroute2.py
 F:	support/testing/tests/package/test_nftables.py
 F:	support/testing/tests/package/test_python_networkmanager_goi.py
-F:	support/testing/tests/package/test_python_pyroute2.py

 N:	Flávio Tapajós <flavio.tapajos@newtesc.com.br>
 F:	configs/asus_tinker-s_rk3288_defconfig
@@ -1750,7 +1745,6 @@ F:	package/at-spi2-core/
 F:	package/earlyoom/
 F:	package/gconf/
 F:	package/libnss/
-F:	package/llama-cpp/
 F:	package/llvm-project/clang/
 F:	package/llvm-project/lld/
 F:	package/llvm-project/llvm/
@@ -1789,6 +1783,9 @@ F:	package/libmodbus/
 F:	package/ltris/
 F:	package/opentyrian/

+N:	Julien Corjon <corjon.j@ecagroup.com>
+F:	package/qt5/
+
 N:	Julien Grossholtz <julien.grossholtz@openest.io>
 F:	board/raspberrypi/
 F:	configs/raspberrypizero2w_defconfig
@@ -1815,6 +1812,7 @@ F:	package/libopenmpt/
 F:	package/mokutil/
 F:	package/oath-toolkit/
 F:	package/octave/
+F:	package/ola/
 F:	package/openblas/
 F:	package/opencsd/
 F:	package/openmpi/
@@ -1935,7 +1933,6 @@ F:	support/testing/tests/package/test_libjxl.py
 F:	support/testing/tests/package/test_lighttpd.py
 F:	support/testing/tests/package/test_links.py
 F:	support/testing/tests/package/test_links/
-F:	support/testing/tests/package/test_llama_cpp.py
 F:	support/testing/tests/package/test_lrzip.py
 F:	support/testing/tests/package/test_lrzsz.py
 F:	support/testing/tests/package/test_ltp_testsuite.py
@@ -1970,6 +1967,8 @@ F:	support/testing/tests/package/test_numactl.py
 F:	support/testing/tests/package/test_numactl/
 F:	support/testing/tests/package/test_oath_toolkit.py
 F:	support/testing/tests/package/test_octave.py
+F:	support/testing/tests/package/test_ola.py
+F:	support/testing/tests/package/test_ola/
 F:	support/testing/tests/package/test_openblas.py
 F:	support/testing/tests/package/test_openocd.py
 F:	support/testing/tests/package/test_parted.py
@@ -2128,6 +2127,9 @@ F:	package/python-gunicorn/
 F:	support/testing/tests/package/sample_python_flask.py
 F:	support/testing/tests/package/test_python_flask.py

+N:	Lionel Orry <lionel.orry@gmail.com>
+F:	package/mongrel2/
+
 N:	Lothar Felten <lothar.felten@gmail.com>
 F:	board/bananapi/bananapi-m2-ultra/
 F:	board/beagleboard/beaglebone/
@@ -2274,7 +2276,6 @@ F:	package/python-typing-inspection/
 F:	package/python-tzlocal/
 F:	package/python-sdbus-modemmanager/
 F:	package/python-waitress/
-F:	package/python-whitenoise/
 F:	support/testing/tests/package/test_python_apscheduler.py
 F:	support/testing/tests/package/test_python_crc.py
 F:	support/testing/tests/package/test_python_django.py
@@ -2285,7 +2286,6 @@ F:	support/testing/tests/package/test_python_ruamel_yaml.py
 F:	support/testing/tests/package/test_python_sdbus_modemmanager.py
 F:	support/testing/tests/package/test_python_tzlocal.py
 F:	support/testing/tests/package/test_python_waitress.py
-F:	support/testing/tests/package/test_python_whitenoise.py
 F:	support/testing/tests/package/sample_python_apscheduler.py
 F:	support/testing/tests/package/sample_python_crc.py
 F:	support/testing/tests/package/sample_python_django.py
@@ -2988,6 +2988,7 @@ F:	package/wlr-randr/

 N:	Semyon Kolganov <semenak94@mail.ru>
 F:	package/fmt/
+F:	package/libbson/
 F:	package/lua-resty-http/
 F:	package/mpir/

@@ -3172,6 +3173,7 @@ F:	package/x265/
 N:	Thomas Bonnefille <thomas.bonnefille@bootlin.com>
 F:	board/pine64/star64
 F:	configs/pine64_star64_defconfig
+F:	package/starfive-spltool/

 N:	Thomas Claveirole <thomas.claveirole@green-communications.fr>
 F:	package/fcgiwrap/
@@ -3191,8 +3193,6 @@ F:	package/xorcurses/
 N:	Thomas Perale <thomas.perale@mind.be>
 F:	package/go/
 F:	utils/generate-cyclonedx
-F:	support/scripts/cve-check
-F:	support/scripts/cve.py

 N:	Thomas Petazzoni <thomas.petazzoni@bootlin.com>
 F:	arch/Config.in.arm
@@ -3243,11 +3243,8 @@ F:	package/pkg-autotools.mk
 F:	package/pkg-generic.mk
 F:	package/python3/
 F:	package/python-augeas/
-F:	package/python-crccheck/
 F:	package/python-flask-expects-json/
-F:	package/python-fs/
 F:	package/python-git/
-F:	package/python-pyfatfs/
 F:	package/python-qrcode/
 F:	package/python-serial/
 F:	package/python-unittest-xml-reporting/
@@ -3259,7 +3256,6 @@ F:	package/rt-tests/
 F:	package/rtc-tools/
 F:	package/sam-ba/
 F:	package/scons/
-F:	package/snagboot/
 F:	package/squashfs/
 F:	package/tinifier/
 F:	package/wayland/
@@ -3276,17 +3272,10 @@ F:	support/testing/tests/package/sample_python_git.py
 F:	support/testing/tests/package/sample_python_unittest_xml_reporting.py
 F:	support/testing/tests/package/test_nodejs.py
 F:	support/testing/tests/package/test_python_augeas.py
-F:	support/testing/tests/package/test_python_crccheck.py
 F:	support/testing/tests/package/test_python_flask.py
 F:	support/testing/tests/package/test_python_flask_expects_json.py
-F:	support/testing/tests/package/test_python_fs.py
 F:	support/testing/tests/package/test_python_git.py
-F:	support/testing/tests/package/test_python_pyfatfs.py
-F:	support/testing/tests/package/test_python_pyusb.py
-F:	support/testing/tests/package/test_python_serial.py
-F:	support/testing/tests/package/test_snagboot.py
 F:	support/testing/tests/package/test_python_unittest_xml_reporting.py
-F:	support/testing/tests/package/test_python_xmodem.py
 F:	support/testing/tests/toolchain/test_external_arm.py
 F:	toolchain/

@@ -3352,12 +3341,10 @@ F:	package/utp_com/

 N:	Vincent Stehlé <vincent.stehle@arm.com>
 F:	board/arm/fvp-ebbr/
-F:	board/compulab/iot-gate-imx8-ebbr/
 F:	board/pine64/rockpro64-ebbr/
 F:	board/qemu/aarch64-ebbr/
 F:	board/qemu/arm-ebbr/
 F:	configs/arm_fvp_ebbr_defconfig
-F:	configs/iot-gate-imx8_ebbr_defconfig
 F:	configs/qemu_aarch64_ebbr_defconfig
 F:	configs/qemu_arm_ebbr_defconfig
 F:	configs/rockpro64_ebbr_defconfig
@@ -3408,7 +3395,7 @@ F:	configs/stm32f746_disco_sd_defconfig
 F:	package/asterisk/
 F:	package/evilwm/
 F:	package/fbv/
-F:	package/libpam-pkcs11/
+F:	package/libjwt/
 F:	package/mksh/
 F:	package/ruby/
 F:	package/uclibc/
@@ -3529,7 +3516,7 @@ F:	utils/scanpypi
 N:	Yunhao Tian <t123yh.xyz@gmail.com>
 F:	package/libopenaptx/

-N:	Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com>
+N:	Zoltan Gyarmati <zgyarmati@zgyarmati.de>
 F:	package/crudini/
 F:	package/grantlee/
 F:	package/libusb/
@@ -92,9 +92,9 @@ all:
 .PHONY: all

 # Set and export the version string
-export BR2_VERSION := 2025.11-rc2
+export BR2_VERSION := 2025.08.1
 # Actual time the release is cut (for reproducible builds)
-BR2_VERSION_EPOCH = 1764530000
+BR2_VERSION_EPOCH = 1760218300

 # Save running make version since it's clobbered by the make package
 RUNNING_MAKE_VERSION := $(MAKE_VERSION)
@@ -781,12 +781,19 @@ endif

 # For a merged /usr, ensure that /lib, /bin and /sbin and their /usr
 # counterparts are appropriately setup as symlinks ones to the others.
-	@$(call MESSAGE,"Sanity check in overlays $(call qstrip,$(BR2_ROOTFS_OVERLAY))")
-	support/scripts/check-merged \
-		-t overlay \
-		$(if $(BR2_ROOTFS_MERGED_USR),-u) \
-		$(if $(BR2_ROOTFS_MERGED_BIN),-b) \
-		$(call qstrip,$(BR2_ROOTFS_OVERLAY))
+ifeq ($(BR2_ROOTFS_MERGED_USR),y)
+
+	$(foreach d, $(call qstrip,$(BR2_ROOTFS_OVERLAY)), \
+		@$(call MESSAGE,"Sanity check in overlay $(d)")$(sep) \
+		$(Q)not_merged_dirs="$$(support/scripts/check-merged-usr.sh $(d))"; \
+		test -n "$$not_merged_dirs" && { \
+			echo "ERROR: The overlay in $(d) is not" \
+				"using a merged /usr for the following directories:" \
+				$$not_merged_dirs; \
+			exit 1; \
+		} || true$(sep))
+
+endif # merged /usr

 	$(foreach d, $(call qstrip,$(BR2_ROOTFS_OVERLAY)), \
 		@$(call MESSAGE,"Copying overlay $(d)")$(sep) \
@@ -1 +0,0 @@
-../linux/linux.hash
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  c71af3d2c86c0a0deca4f54b51d1c35217082b030052cc3513dc42e852652733  linux-v6.0.y-andes.tar.gz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  d11702103f177a2914e94eec57ce5ed820296d874f6b6525c4482e55d71a3667  opensbi-1.6.tar.gz
@@ -0,0 +1,38 @@
+From 16aad5594e08550295ea3c12c1c9ed6f64774748 Mon Sep 17 00:00:00 2001
+From: Rick Chen <rick@andestech.com>
+Date: Tue, 29 Mar 2022 13:41:10 +0800
+Subject: [PATCH] mmc: ftsdc010_mci: Support DTS of ftsdc010 driver for
+ generic dma
+
+The ftsdc010 driver has been implemented for generic dma in Linux
+kernel. And its compatible is andestech,atfsdc010g to distinguish
+the legacy andestech,atfsdc010 which is not for generic dma.
+
+Althought the ftsdc010_mci driver in U-Boot does not use dma, but
+it still can work well with the mmc node for generic dma. So add
+the compatible string to support it.
+
+Signed-off-by: Rick Chen <rick@andestech.com>
+
+Upstream-Status: Pending
+
+Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com>
+---
+ drivers/mmc/ftsdc010_mci.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/drivers/mmc/ftsdc010_mci.c b/drivers/mmc/ftsdc010_mci.c
+index 570d54cf9d..65b1d447a8 100644
+--- a/drivers/mmc/ftsdc010_mci.c
+++ b/drivers/mmc/ftsdc010_mci.c
+@@ -460,6 +460,7 @@ int ftsdc010_mmc_bind(struct udevice *dev)
+ 
+ static const struct udevice_id ftsdc010_mmc_ids[] = {
+ 	{ .compatible = "andestech,atfsdc010" },
+	{ .compatible = "andestech,atfsdc010g" },
+ 	{ }
+ };
+ 
+-- 
+2.34.1
+
@@ -0,0 +1,42 @@
+From 933ad8a59f7fd9b2088badc3e97167d750a40b5a Mon Sep 17 00:00:00 2001
+From: Bin Meng <bmeng.cn@gmail.com>
+Date: Mon, 12 Jul 2021 11:52:31 +0800
+Subject: [PATCH] spl: Align device tree blob address at 8-byte boundary
+
+Since libfdt v1.6.1, a new requirement on the device tree address via:
+
+  commit 5e735860c478 ("libfdt: Check for 8-byte address alignment in fdt_ro_probe_()")
+
+must be met that the device tree must be loaded in to memory at an
+8-byte aligned address.
+
+Signed-off-by: Bin Meng <bmeng.cn@gmail.com>
+
+This patch was imported from U-boot patchwork:
+https://patchwork.ozlabs.org/project/uboot/patch/20210712035231.26475-1-bmeng.cn@gmail.com/
+
+Signed-off-by: Yu Chien Peter Lin <peterlin@andestech.com>
+---
+ common/spl/spl_fit.c | 6 ++++++
+ 1 file changed, 6 insertions(+)
+
+diff --git a/common/spl/spl_fit.c b/common/spl/spl_fit.c
+index a35be529..a76ad14a 100644
+--- a/common/spl/spl_fit.c
+++ b/common/spl/spl_fit.c
+@@ -382,6 +382,12 @@ static int spl_fit_append_fdt(struct spl_image_info *spl_image,
+ 	 */
+ 	image_info.load_addr = spl_image->load_addr + spl_image->size;
+ 
+	/*
+	 * Since libfdt v1.6.1, the device tree must be loaded in to memory
+	 * at an 8-byte aligned address.
+	 */
+	image_info.load_addr = roundup(image_info.load_addr, 8);
+
+ 	/* Figure out which device tree the board wants to use */
+ 	node = spl_fit_get_image_node(ctx, FIT_FDT_PROP, index++);
+ 	if (node < 0) {
+-- 
+2.34.1
+
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1,3 +1,3 @@
 #!/bin/sh
-cp "$BINARIES_DIR"/Image "$TARGET_DIR"/boot
-cp "$BINARIES_DIR"/ae350_ax45mp.dtb "$TARGET_DIR"/boot
+cp $BINARIES_DIR/Image $TARGET_DIR/boot
+cp $BINARIES_DIR/ae350_ax45mp.dtb $TARGET_DIR/boot
@@ -30,11 +30,11 @@ image flash.img {
 	partition fitimage {
 		image = "image.itb"
 		offset = 512K
-		size = 7000K
+		size = 4352K
 	}

 	partition spare {
-		offset = 7512K
-		size =  25256K
+		offset = 4864K
+		size = 27904K
 	}
 }
@@ -1,2 +0,0 @@
-# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  5be3daa1f9427b1bdb34c4894d9c1adfac38cff674376fe0611a3065729a1a81  linux-6.16.7.tar.xz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1,2 +0,0 @@
-# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  5be3daa1f9427b1bdb34c4894d9c1adfac38cff674376fe0611a3065729a1a81  linux-6.16.7.tar.xz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  16da36d1832f058cf1a6673b6a2eedeef1260576c15e76c4998e30d0fb13d339  uboot-66672e5af36fe294df56f8e7942069e3909f3790-git4.tar.gz
@@ -3,8 +3,8 @@
 BOARD_DIR="$(dirname $0)"
 mkimage=$HOST_DIR/bin/mkimage

-BOARD_DT=$(sed -nr \
-           -e 's|^BR2_LINUX_KERNEL_INTREE_DTS_NAME="(aspeed/)?([a-z0-9\-]*).*"$|\2|p' \
+BOARD_DT=$(sed -n \
+           's/^BR2_LINUX_KERNEL_INTREE_DTS_NAME="\([a-z0-9\-]*\).*"$/\1/p' \
           ${BR2_CONFIG})

 sed -e "s/%BOARD_DTB%/${BOARD_DT}.dtb/" \
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  1db327d0743e97ec725fefe05065a6fb779abe3063845fc3b551a4a716247c0a  linux-6.12.34-ti-arm32-r12.tar.gz
+sha256  3654ca31003d90d20b195b23f8d60b78fcffbf0fd7fed6116c22719e20ac933d  linux-6.12.23-ti-arm32-r11.tar.gz
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1,6 +1,6 @@
 #!/bin/sh
-BOARD_DIR="$(dirname "$0")"
+BOARD_DIR="$(dirname $0)"

-cp "${BOARD_DIR}/uEnv.txt" "${BINARIES_DIR}/uEnv.txt"
+cp $BOARD_DIR/uEnv.txt $BINARIES_DIR/uEnv.txt

-install -m 0644 -D "${BOARD_DIR}/extlinux.conf" "${BINARIES_DIR}/extlinux/extlinux.conf"
+install -m 0644 -D $BOARD_DIR/extlinux.conf $BINARIES_DIR/extlinux/extlinux.conf
@@ -1,3 +1,4 @@
 #!/bin/sh
+BOARD_DIR="$(dirname $0)"

-cp board/beagleboard/beagleboneai/uEnv.txt "$BINARIES_DIR/uEnv.txt"
+cp board/beagleboard/beagleboneai/uEnv.txt $BINARIES_DIR/uEnv.txt
@@ -1,2 +1,2 @@
 # From https://cdn.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  55432b2af352f7bf3053c348d8549df2f2deeaa4a361c65d638c2f3b2ca7ec96  linux-6.12.56.tar.xz
+sha256  6e562502a8fd11639f558e43b74f0df0d85fa85e60f5332acb275a75a35f5345  linux-6.12.39.tar.xz
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1,2 +1,2 @@
 # From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  55432b2af352f7bf3053c348d8549df2f2deeaa4a361c65d638c2f3b2ca7ec96  linux-6.12.56.tar.xz
+sha256  4a168aed2de5a81aadd90ba2b153860a98d99bfc34651936e17f18e54f01ba8c  linux-6.12.36.tar.xz
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1,45 +0,0 @@
-image efi-part.vfat {
-	vfat {
-		file EFI {
-			image = "efi-part/EFI"
-		}
-
-		file Image {
-			image = "Image"
-		}
-	}
-
-	size = 64M
-}
-
-image disk.img {
-	hdimage {
-		partition-table-type = "gpt"
-	}
-
-	# When in eMMC user data, this protects U-Boot environment
-	partition env {
-		partition-type-uuid = u-boot-env
-		offset = 17K
-		size = 16K
-	}
-
-	# This allows to boot from recovery SD card
-	partition firmware {
-		image = "flash.bin"
-		# Linux reserved
-		partition-type-uuid = 8DA63339-0007-60C0-C436-083AC8230908
-		offset = 33K
-	}
-
-	partition boot {
-		image = "efi-part.vfat"
-		partition-type-uuid = esp
-		bootable = true
-	}
-
-	partition root {
-		partition-type-uuid = root-arm64
-		image = "rootfs.ext2"
-	}
-}
@@ -1,6 +0,0 @@
-set default="0"
-set timeout="5"
-
-menuentry "Buildroot" {
-	linux /Image root=PARTLABEL=root rootwait
-}
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  e11880bf39dabfcb5945b58e848ddba661a1cd92425a997c626dec62b2dac6a9  arm-trusted-firmware-v2.13-git4.tar.gz
@@ -1 +0,0 @@
-../linux/linux.hash
@@ -1,2 +0,0 @@
-# From https://cdn.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  231311bd7084dc3129944d26bb43be6ff837da82fb2104a67704aebca8bfa69f  linux-6.16.8.tar.xz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  e6c6b93e2be417df57ceb05a2eb6505744e3fbdd3b2ae5e5bf79bf6028b6f84d  optee-client-4.7.0.tar.gz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  976b9c184678516038d4e79766608e81d10bf136f76fd0db2dc48f90f994fbd9  optee-os-4.7.0.tar.gz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1,69 +0,0 @@
-#!/bin/sh
-set -eux
-
-BOARD_DIR=$(dirname "$0")
-
-# Override the default GRUB configuration file with our own.
-cp -vf "${BOARD_DIR}/grub.cfg" "${BINARIES_DIR}/efi-part/EFI/BOOT/grub.cfg"
-
-BINMAN_DIR="$BINARIES_DIR/binman"
-BINMAN_DTB="$BINMAN_DIR/u-boot.dtb"
-UBOOT_DIR=$(find "$BUILD_DIR" -maxdepth 1 -type d -name 'uboot-*')
-
-# Adjust binman dtb.
-rm -fr "$BINMAN_DIR"
-mkdir -v "$BINMAN_DIR"
-cp -v "$UBOOT_DIR/u-boot.dtb" "$BINMAN_DTB"
-# Add the fip image to the list of loadables.
-fdtput -t s "$BINMAN_DTB" /binman/section/fit/configurations/@config-SEQ loadables atf fip
-# Remove the tee node to avoid duplicate, as it is in the FIP image.
-fdtput --remove "$BINMAN_DTB" /binman/section/fit/images/tee
-
-# Generate flash image with binman.
-# We do this here to break the build dependency loop involving tf-a, op-tee, and
-# u-boot.
-# We use BL2 instead of BL31 in this configuration.
-(cd "${UBOOT_DIR}" && \
-./tools/binman/binman \
-	--toolpath ./tools \
-	-v5 \
-	build \
-	-u \
-	-d "$BINMAN_DTB" \
-	-O . \
-	-m \
-	--allow-missing \
-	--fake-ext-blobs \
-	-I "$BINMAN_DIR" \
-	-I . \
-	-I ./board/compulab/imx8mm-cl-iot-gate \
-	-I arch/arm/dts \
-	-a of-list="imx8mm-cl-iot-gate-optee" \
-	-I "$BINARIES_DIR" \
-	-a atf-bl31-path=bl2.bin \
-	-a tee-os-path= \
-	-a ti-dm-path= \
-	-a opensbi-path= \
-	-a default-dt="imx8mm-cl-iot-gate-optee" \
-	-a scp-path= \
-	-a rockchip-tpl-path= \
-	-a spl-bss-pad= \
-	-a tpl-bss-pad=1 \
-	-a vpl-bss-pad=1 \
-	-a spl-dtb=y \
-	-a tpl-dtb= \
-	-a vpl-dtb= \
-	-a pre-load-key-path= \
-	-a of-spl-remove-props="interrupt-parent interrupts" \
-	)
-
-# Copy the flash image.
-cp -v "$UBOOT_DIR/flash.bin" "$BINARIES_DIR/"
-
-# Verify that it will fit in the eMMC boot partition.
-size=$(du -b "$BINARIES_DIR/flash.bin" |cut -f 1)
-
-if [ "$size" -gt 4160512 ]; then
-	echo "Flash image is too big! (${size} bytes)" >&2
-	exit 1
-fi
@@ -1,131 +0,0 @@
-Introduction
-============
-
-The iot-gate-imx8_ebbr_defconfig is meant to illustrate some aspects of the Arm
-EBBR specification[1] and the Arm SystemReady Devicetree band[2].
-It allows building an AArch64 disk image with a U-Boot based firmware
-implementing the subset of UEFI defined by EBBR, as well as a Linux OS booting
-with UEFI, to run on the Compulab IOT-GATE-iMX8. [3]
-
-This configuration is not related with the official BSP from Compulab. [4]
-
-Building
-========
-
-  $ make iot-gate-imx8_ebbr_defconfig
-  $ make
-
-Generated files under output/images/:
-
-* disk.img: An eMMC or USB key disk image comprising TF-A, OP-TEE, the U-Boot
-  bootloader, the GRUB bootloader, the Linux kernel and the root filesystem.
-
-* flash.bin: A firmware image suitable for flashing in eMMC boot partition
-  comprising TF-A, OP-TEE and the U-Boot bootloader.
-
-Running
-=======
-
-Before flashing the firmware to eMMC, make sure that you have the IOTG-ACC-M2SD
-M.2 to SD adapter for recovery and prepare a recovery SD card. [5]
-Insert the SD card and the M.2 adapter.
-
-Prepare a USB key on a PC:
-
-  # dd if=output/images/disk.img of=<USB key device> ; sync
-
-Insert the USB key, close jumper E1 on the board to select recovery boot,
-connect to the UART console on the micro USB connector (a Silicon Labs CP2104
-UART bridge) with baudrate 115200, power on the board and break to U-Boot
-prompt.
-
-Flash the firmware from the USB key to the eMMC boot partition:
-
-  u-boot=> usb start
-  u-boot=> usb dev 0
-  u-boot=> usb read ${loadaddr} 0x42 0x1fbe
-  u-boot=> mmc dev 2 1
-  u-boot=> mmc write ${loadaddr} 0x42 0x1fbe
-  u-boot=> mmc partconf 2 0 1 0
-
-Power off the board, remove jumper E1 and the M.2 SD card adapter, then restart
-the board; it should boot to Linux, with the root filesystem on the USB key.
-
-Other setups are also possible, with the firmware and/or the root filesystem in
-the eMMC user data. The firmware binary is also available as flash.bin for
-convenience, to allow network download for example.
-
-With the firmware in the eMMC boot partition, it is possible to install or run
-another OS supporting the EBBR specification.
-
-The image generated by the aarch64_efi_defconfig, the images from Linux
-distributions such as Debian, Fedora, openSUSE, Ubuntu, OpenWrt and Yocto, and
-the Arm ACS Devicetree images[6] are examples of compatible OS images.
-
-When installing other OSes to eMMC, it is recommended to protect the first 32KB
-of the user data with a partition, as this is where the U-Boot environment can
-be saved.
-
-Firmware details
-================
-
-Noteworthy firmware features:
-
- TF-A, OP-TEE & U-Boot
- UEFI, with EFI variables stored on disk in the ESP
- Support for ethernet, USB and RTC
- U-Boot environment in eMMC user data (starting from byte 0x4400)
-
-Architecture diagram:
-
-                 Non-Secure          :   Secure
-                                     :
-       +---------------------------+ :
-  EL0  |          Busybox          | :
-       +---------------------------+ : +--------+
-  EL1  |           Linux           | : | OP-TEE |  S-EL1
-       +---------------------------+ : +--------+
-  EL2  | U-Boot, GRUB, Linux (kvm) | :
-       +---------------------------+ :
-  ...................................:
-       +----------------------------------------+
-       |          ROM, U-Boot SPL, TF-A         |  EL3
-       +----------------------------------------+
-
-Boot flow:
-
-  ROM -+-> SPL -> TF-A -+-> OP-TEE
-                        `-> U-Boot -> GRUB -> Linux -> Busybox
-
-The ROM loads U-Boot SPL.
-U-Boot SPL does the DRAM setup, loads the fit image with TF-A, OP-TEE, U-Boot
-and the Devicetree.
-In this configuration TF-A is booting with BL2 and BL31.
-OP-TEE amends the Devicetree, calls back TF-A to go to normal world.
-U-Boot loads GRUB with UEFI, boots Linux at EL2.
-
-Miscellaneous
-=============
-
-This configuration is based on the work of Paul Liu[7] and is inspired by the
-other configurations related with EBBR, and the Arm SystemReady Devicetree Band
-Integration and Testing Guide[8].
-
-To avoid a circular build dependency, we skip the binman step during U-Boot
-build:
-
-  BR2_TARGET_UBOOT_CUSTOM_MAKEOPTS="cmd_binman=:"
-
-Then we run binman manually in the post-image script.
-
-Firmware update and UEFI Secure Boot are currently not supported.
-The disk image cannot be used for SD card recovery at this point.
-
-[1] https://github.com/ARM-software/ebbr
-[2] https://www.arm.com/architecture/system-architectures/systemready-compliance-program/systemready-devicetree-band
-[3] https://www.compulab.com/products/iot-gateways/iot-gate-imx8-industrial-arm-iot-gateway/
-[4] https://mediawiki.compulab.com/w/index.php?title=Building_IOT-GATE-iMX8_and_SBC-IOT-iMX8_Yocto_Linux_images
-[5] https://mediawiki.compulab.com/w/index.php?title=IOT-GATE-iMX8_and_SBC-IOT-iMX8:_U-Boot:_Recovery
-[6] https://github.com/ARM-software/arm-systemready/tree/main/SystemReady-devicetree-band/prebuilt_images
-[7] https://git.linaro.org/plugins/gitiles/people/paul.liu/systemready/build-scripts
-[8] https://developer.arm.com/documentation/DUI1101/latest/
@@ -1,6 +0,0 @@
-CONFIG_ARCH_MISC_INIT=y
-CONFIG_CMD_RNG=y
-CONFIG_DM_REGULATOR_ANATOP=y
-CONFIG_DM_RNG=y
-CONFIG_FSL_CAAM=y
-CONFIG_PHY_ANEG_TIMEOUT=5000
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4850cf670a032c70f38b713a27d62046c5f747caf028c5f50b18f98606a9eb1  linux-6.12.52.tar.xz
+sha256  643142c1b5991560dd12f950825cc19e4497b95b82641918ecff1177f4130c1d  linux-6.12.24.tar.xz
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718  u-boot-2025.04.tar.bz2
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4850cf670a032c70f38b713a27d62046c5f747caf028c5f50b18f98606a9eb1  linux-6.12.52.tar.xz
+sha256  643142c1b5991560dd12f950825cc19e4497b95b82641918ecff1177f4130c1d  linux-6.12.24.tar.xz
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718  u-boot-2025.04.tar.bz2
@@ -20,7 +20,7 @@ main ()
 		"${HOST_DIR}/bin/mkimage_imx8" -soc IMX9 -c \
 			-ap "${BINARIES_DIR}/bl31.bin" a55 ${ATF_LOAD_ADDR} \
 			-ap "${BINARIES_DIR}/u-boot-hash.bin" a55 0x80200000 \
-			-ap "${BINARIES_DIR}/tee-raw.bin" a55 0x96000000 \
+			-ap "${BINARIES_DIR}/tee.bin" a55 0x96000000 \
 			-out "${BINARIES_DIR}/u-boot-atf-container.img"
 	else
 		"${HOST_DIR}/bin/mkimage_imx8" -soc IMX9 -c \
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  4b685080a094cb0f0489b8114ae8b73c37ec13eda9f5618c8b6311ff1f472f57  imx-optee-os-lf-6.12.3-1.0.0.tar.gz
@@ -1 +0,0 @@
-../linux/linux.hash
@@ -1,2 +0,0 @@
-# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  0fcbbbbcd456e87bbbfc8bf37af541fda62ccfcce76903503424fd101ef7bdee  linux-6.12.43.tar.xz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  738f029c6bfcdac5649e2c252970b1f44c1ce7fee9fe4657a25edc666375ffa8  atf-lf-6.12.20-2.0.0.tar.gz
+sha256  2751fcd3eb9080c34531f68ca2e1f571a60f4220853df53a5ebed9835abf8c13  atf-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  c98177e85ace6400b06301101af3065e90463920c3e166da4ed22deffe960fb8  linux-lf-6.12.20-2.0.0.tar.gz
+sha256  9e2fff1014f1b196be8149c63a6054e40b1b36b222e53db3f445c96c856066e0  linux-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  a39f7db3ffd2b7263ea5d02b0631decac1c89f7c1b96b77ba8e302f3641a3eb3  u-boot-lf-6.12.20-2.0.0.tar.gz
+sha256  8708fc95844d020f79b87f954f29073ae9b230de3e41117e7fb379294da946ac  u-boot-lf-6.12.3-1.0.0.tar.gz
@@ -10,22 +10,21 @@ For more details about the board and the QorIQ Layerscape SoC, see the following

 Layerscape platforms are officially supported by NXP under the Layerscape
 Debian Linux SDK (LDLSDK). This uses components from Linux Factory (project
-common with i.MX), but has a slower release cadence than LF. The currently used
-tag is lf-6.12.20-2.0.0, which is in line with the latest LF tag. Generally, in
-Buildroot, the latest Linux Factory release tag is always used, which may be
-considered pre-release software, as it may contain features which are not yet
-documented, and it generally undergoes less testing.
+common with i.MX), currently tag lf-6.6.36-2.1.0, two releases behind the
+latest lf-6.12.3-1.0.0.  In Buildroot, the latest Linux Factory release tag
+is used, which may be considered pre-release software, as it may contain
+features which are not yet documented, and it generally undergoes less testing.

 For the software Layerscape Debian Linux SDK User Guide, see:
  - https://docs.nxp.com/bundle/UG10143/page/topics/about_this_document.html
  - https://www.nxp.com/docs/en/user-guide/UG10143.pdf

 The components from NXP are:
-  - rcw, lf-6.12.20-2.0.0
-  - atf (fork), lf-6.12.20-2.0.0
-  - uboot (fork), lf-6.12.20-2.0.0
+  - rcw, lf-6.12.3-1.0.0
+  - atf (fork), lf-6.12.3-1.0.0
+  - uboot (fork), lf-6.12.3-1.0.0
  - cadence-dp-firmware (blob), 8.16
-  - linux (fork), lf-6.12.20-2.0.0
+  - linux (fork), lf-6.12.3-1.0.0

 Build
 =====
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  738f029c6bfcdac5649e2c252970b1f44c1ce7fee9fe4657a25edc666375ffa8  atf-lf-6.12.20-2.0.0.tar.gz
+sha256  2751fcd3eb9080c34531f68ca2e1f571a60f4220853df53a5ebed9835abf8c13  atf-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  c98177e85ace6400b06301101af3065e90463920c3e166da4ed22deffe960fb8  linux-lf-6.12.20-2.0.0.tar.gz
+sha256  9e2fff1014f1b196be8149c63a6054e40b1b36b222e53db3f445c96c856066e0  linux-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  a39f7db3ffd2b7263ea5d02b0631decac1c89f7c1b96b77ba8e302f3641a3eb3  u-boot-lf-6.12.20-2.0.0.tar.gz
+sha256  8708fc95844d020f79b87f954f29073ae9b230de3e41117e7fb379294da946ac  u-boot-lf-6.12.3-1.0.0.tar.gz
@@ -10,24 +10,23 @@ for more details about the board and the QorIQ Layerscape SoC, see the following

 Layerscape platforms are officially supported by NXP under the Layerscape
 Debian Linux SDK (LDLSDK). This uses components from Linux Factory (project
-common with i.MX), but has a slower release cadence than LF. The currently used
-tag is lf-6.12.20-2.0.0, which is in line with the latest LF tag. Generally, in
-Buildroot, the latest Linux Factory release tag is always used, which may be
-considered pre-release software, as it may contain features which are not yet
-documented, and it generally undergoes less testing.
+common with i.MX), currently tag lf-6.6.36-2.1.0, two releases behind the
+latest lf-6.12.3-1.0.0.  In Buildroot, the latest Linux Factory release tag
+is used, which may be considered pre-release software, as it may contain
+features which are not yet documented, and it generally undergoes less testing.

 For the software Layerscape Debian Linux SDK User Guide, see:
  - https://docs.nxp.com/bundle/UG10143/page/topics/about_this_document.html
  - https://www.nxp.com/docs/en/user-guide/UG10143.pdf

 The components from NXP are:
-  - rcw, lf-6.12.20-2.0.0
-  - atf (fork), lf-6.12.20-2.0.0
-  - uboot (fork), lf-6.12.20-2.0.0
-  - qoriq-fm-ucode (blob), lf-6.12.20-2.0.0
-  - linux (fork), lf-6.12.20-2.0.0
-  - fmlib, lf-6.12.20-2.0.0
-  - fmc, lf-6.12.20-2.0.0
+  - rcw, lf-6.12.3-1.0.0
+  - atf (fork), lf-6.12.3-1.0.0
+  - uboot (fork), lf-6.12.3-1.0.0
+  - qoriq-fm-ucode (blob), lf-6.12.3-1.0.0
+  - linux (fork), lf-6.12.3-1.0.0
+  - fmlib, lf-6.12.3-1.0.0
+  - fmc, lf-6.12.3-1.0.0

 Build
 =====
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  738f029c6bfcdac5649e2c252970b1f44c1ce7fee9fe4657a25edc666375ffa8  atf-lf-6.12.20-2.0.0.tar.gz
+sha256  2751fcd3eb9080c34531f68ca2e1f571a60f4220853df53a5ebed9835abf8c13  atf-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  c98177e85ace6400b06301101af3065e90463920c3e166da4ed22deffe960fb8  linux-lf-6.12.20-2.0.0.tar.gz
+sha256  9e2fff1014f1b196be8149c63a6054e40b1b36b222e53db3f445c96c856066e0  linux-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  a39f7db3ffd2b7263ea5d02b0631decac1c89f7c1b96b77ba8e302f3641a3eb3  u-boot-lf-6.12.20-2.0.0.tar.gz
+sha256  8708fc95844d020f79b87f954f29073ae9b230de3e41117e7fb379294da946ac  u-boot-lf-6.12.3-1.0.0.tar.gz
@@ -11,24 +11,23 @@ For more details about the board and the QorIQ Layerscape SoC, see the following

 Layerscape platforms are officially supported by NXP under the Layerscape
 Debian Linux SDK (LDLSDK). This uses components from Linux Factory (project
-common with i.MX), but has a slower release cadence than LF. The currently used
-tag is lf-6.12.20-2.0.0, which is in line with the latest LF tag. Generally, in
-Buildroot, the latest Linux Factory release tag is always used, which may be
-considered pre-release software, as it may contain features which are not yet
-documented, and it generally undergoes less testing.
+common with i.MX), currently tag lf-6.6.36-2.1.0, two releases behind the
+latest lf-6.12.3-1.0.0.  In Buildroot, the latest Linux Factory release tag
+is used, which may be considered pre-release software, as it may contain
+features which are not yet documented, and it generally undergoes less testing.

 For the software Layerscape Debian Linux SDK User Guide, see:
  - https://docs.nxp.com/bundle/UG10143/page/topics/about_this_document.html
  - https://www.nxp.com/docs/en/user-guide/UG10143.pdf

 The components from NXP are:
-  - rcw, lf-6.12.20-2.0.0
-  - atf (fork), lf-6.12.20-2.0.0
-  - uboot (fork), lf-6.12.20-2.0.0
-  - qoriq-fm-ucode (blob), lf-6.12.20-2.0.0
-  - linux (fork), lf-6.12.20-2.0.0
-  - fmlib, lf-6.12.20-2.0.0
-  - fmc, lf-6.12.20-2.0.0
+  - rcw, lf-6.12.3-1.0.0
+  - atf (fork), lf-6.12.3-1.0.0
+  - uboot (fork), lf-6.12.3-1.0.0
+  - qoriq-fm-ucode (blob), lf-6.12.3-1.0.0
+  - linux (fork), lf-6.12.3-1.0.0
+  - fmlib, lf-6.12.3-1.0.0
+  - fmc, lf-6.12.3-1.0.0

 Build
 =====
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  738f029c6bfcdac5649e2c252970b1f44c1ce7fee9fe4657a25edc666375ffa8  atf-lf-6.12.20-2.0.0.tar.gz
+sha256  2751fcd3eb9080c34531f68ca2e1f571a60f4220853df53a5ebed9835abf8c13  atf-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  c98177e85ace6400b06301101af3065e90463920c3e166da4ed22deffe960fb8  linux-lf-6.12.20-2.0.0.tar.gz
+sha256  9e2fff1014f1b196be8149c63a6054e40b1b36b222e53db3f445c96c856066e0  linux-lf-6.12.3-1.0.0.tar.gz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  a39f7db3ffd2b7263ea5d02b0631decac1c89f7c1b96b77ba8e302f3641a3eb3  u-boot-lf-6.12.20-2.0.0.tar.gz
+sha256  8708fc95844d020f79b87f954f29073ae9b230de3e41117e7fb379294da946ac  u-boot-lf-6.12.3-1.0.0.tar.gz
@@ -10,24 +10,23 @@ for more details about the board and the QorIQ Layerscape SoC, see the following

 Layerscape platforms are officially supported by NXP under the Layerscape
 Debian Linux SDK (LDLSDK). This uses components from Linux Factory (project
-common with i.MX), but has a slower release cadence than LF. The currently used
-tag is lf-6.12.20-2.0.0, which is in line with the latest LF tag. Generally, in
-Buildroot, the latest Linux Factory release tag is always used, which may be
-considered pre-release software, as it may contain features which are not yet
-documented, and it generally undergoes less testing.
+common with i.MX), currently tag lf-6.6.36-2.1.0, two releases behind the
+latest lf-6.12.3-1.0.0.  In Buildroot, the latest Linux Factory release tag
+is used, which may be considered pre-release software, as it may contain
+features which are not yet documented, and it generally undergoes less testing.

 For the software Layerscape Debian Linux SDK User Guide, see:
  - https://docs.nxp.com/bundle/UG10143/page/topics/about_this_document.html
  - https://www.nxp.com/docs/en/user-guide/UG10143.pdf

 The components from NXP are:
-  - rcw, lf-6.12.20-2.0.0
-  - atf (fork), lf-6.12.20-2.0.0
-  - uboot (fork), lf-6.12.20-2.0.0
-  - qoriq-fm-ucode (blob), lf-6.12.20-2.0.0
-  - linux (fork), lf-6.12.20-2.0.0
-  - fmlib, lf-6.12.20-2.0.0
-  - fmc, lf-6.12.20-2.0.0
+  - rcw, lf-6.12.3-1.0.0
+  - atf (fork), lf-6.12.3-1.0.0
+  - uboot (fork), lf-6.12.3-1.0.0
+  - qoriq-fm-ucode (blob), lf-6.12.3-1.0.0
+  - linux (fork), lf-6.12.3-1.0.0
+  - fmlib, lf-6.12.3-1.0.0
+  - fmc, lf-6.12.3-1.0.0

 Build
 =====
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  c435bd74d1c21fc5a950781a50d78bae2b93944144694843359948ad3afc72a5  linux-6.12.50.tar.xz
+sha256  4a168aed2de5a81aadd90ba2b153860a98d99bfc34651936e17f18e54f01ba8c  linux-6.12.36.tar.xz
@@ -1,2 +1,2 @@
 # Locally computed
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -1 +0,0 @@
-../linux/linux.hash
@@ -1,2 +0,0 @@
-# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  e82fe40871743048226987bd349ef107168b15aab90140e872ca4ed470922e25  linux-6.12.47.tar.xz
@@ -12,8 +12,8 @@ image sdcard.img {
        }

        partition uboot {
-                image = "u-boot.itb"
-                partition-type-uuid = xbootldr
+                image = "opensbi_uboot_payload.img"
+                partition-type-uuid = 5B193300-FC78-40CD-8002-E86C45580B47
                offset = 4M
        }

@@ -1,4 +1,4 @@
 label star64
  kernel /boot/Image
  devicetree /boot/jh7110-pine64-star64.dtb
-  append root=/dev/mmcblk1p3 rootwait earlycon=sbi
+  append root=/dev/mmcblk1p3 earlycon=sbi
@@ -1,2 +0,0 @@
-# From https://www.kernel.org/pub/linux/kernel/v6.x/sha256sums.asc
-sha256  165ca1c37c4607b90e731996b7c1e3311285167d13deeedf08f3f1f0b9d2541a  linux-6.12.57.tar.xz
@@ -1,2 +0,0 @@
-# Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
@@ -0,0 +1,9 @@
+#!/bin/bash
+BOARD_DIR="$CONFIG_DIR"/board/pine64/star64
+
+# Add header to the SPL
+"$HOST_DIR"/bin/spl_tool -c -f "$BINARIES_DIR"/u-boot-spl.bin
+
+# Create the u-boot FIT image
+cp "$BOARD_DIR"/star64-uboot-fit-image.its "$BINARIES_DIR"
+mkimage -f "$BINARIES_DIR"/star64-uboot-fit-image.its -A riscv -O u-boot -T firmware "$BINARIES_DIR"/opensbi_uboot_payload.img
@@ -0,0 +1,29 @@
+/dts-v1/;
+
+/ {
+	description = "U-boot-spl FIT image for JH7110 Pine64 Star64";
+	#address-cells = <2>;
+
+	images {
+		firmware {
+			description = "u-boot";
+			data = /incbin/("fw_payload.bin");
+			type = "firmware";
+			arch = "riscv";
+			os = "u-boot";
+			load = <0x0 0x40000000>;
+			entry = <0x0 0x40000000>;
+			compression = "none";
+		};
+	};
+
+	configurations {
+		default = "config-1";
+
+		config-1 {
+			description = "U-boot-spl FIT config for JH7110 Pine64 Star64";
+			firmware = "firmware";
+		};
+	};
+};
+
@@ -17,7 +17,7 @@ Run the emulation with:

  qemu-system-aarch64 \
    -M sbsa-ref \
-    -cpu neoverse-n2 \
+    -cpu neoverse-n1 \
    -smp 4 \
    -m 1024 \
    -nographic \
@@ -1,32 +0,0 @@
-image efi-part.vfat {
-	vfat {
-		file EFI {
-			image = "efi-part/EFI"
-		}
-
-		file bzImage {
-			image = "bzImage"
-		}
-	}
-
-	size = 16352K # 16MB - 32KB
-}
-
-image disk.img {
-	hdimage {
-		partition-table-type = "gpt"
-	}
-
-	partition boot {
-		image = "efi-part.vfat"
-		partition-type-uuid = U
-		offset = 32K
-		bootable = true
-	}
-
-	partition root {
-		partition-type-uuid = root-x86-64
-		partition-uuid = %PARTUUID%
-		image = "rootfs.ext2"
-	}
-}
@@ -1,6 +0,0 @@
-set default="0"
-set timeout="5"
-
-menuentry "Buildroot" {
-	linux /bzImage root=PARTUUID=%PARTUUID% rootwait console=tty1 console=ttyS0
-}
@@ -1,59 +0,0 @@
-CONFIG_SYSVIPC=y
-CONFIG_SMP=y
-CONFIG_HYPERVISOR_GUEST=y
-CONFIG_PARAVIRT=y
-CONFIG_EFI=y
-# CONFIG_GCC_PLUGINS is not set
-CONFIG_MODULES=y
-CONFIG_MODULE_UNLOAD=y
-CONFIG_NET=y
-CONFIG_PACKET=y
-CONFIG_UNIX=y
-CONFIG_INET=y
-# CONFIG_WIRELESS is not set
-CONFIG_PCI=y
-CONFIG_DEVTMPFS=y
-CONFIG_DEVTMPFS_MOUNT=y
-CONFIG_VIRTIO_BLK=y
-CONFIG_BLK_DEV_SD=y
-CONFIG_SCSI_VIRTIO=y
-CONFIG_ATA=y
-CONFIG_ATA_PIIX=y
-CONFIG_NETDEVICES=y
-CONFIG_VIRTIO_NET=y
-CONFIG_NE2K_PCI=y
-CONFIG_8139CP=y
-# CONFIG_WLAN is not set
-CONFIG_INPUT_EVDEV=y
-CONFIG_SERIAL_8250=y
-CONFIG_SERIAL_8250_CONSOLE=y
-CONFIG_VIRTIO_CONSOLE=y
-CONFIG_HW_RANDOM_VIRTIO=m
-CONFIG_DRM=y
-CONFIG_DRM_I915=y
-CONFIG_DRM_QXL=y
-CONFIG_DRM_VIRTIO_GPU=y
-CONFIG_DRM_BOCHS=y
-CONFIG_FB=y
-CONFIG_FB_VESA=y
-CONFIG_FB_EFI=y
-CONFIG_FIRMWARE_EDID=y
-CONFIG_SOUND=y
-CONFIG_SND=y
-CONFIG_SND_HDA_INTEL=y
-CONFIG_SND_HDA_GENERIC=y
-CONFIG_USB=y
-CONFIG_USB_XHCI_HCD=y
-CONFIG_USB_EHCI_HCD=y
-CONFIG_USB_UHCI_HCD=y
-CONFIG_USB_STORAGE=y
-CONFIG_VIRTIO_PCI=y
-CONFIG_VIRTIO_BALLOON=y
-CONFIG_VIRTIO_INPUT=y
-CONFIG_VIRTIO_MMIO=y
-CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES=y
-CONFIG_EXT4_FS=y
-CONFIG_FUSE_FS=y
-CONFIG_TMPFS_POSIX_ACL=y
-CONFIG_SQUASHFS=y
-CONFIG_UNWINDER_FRAME_POINTER=y
@@ -1,11 +0,0 @@
-#!/bin/sh
-
-set -u
-set -e
-
-# Add a console on tty1
-if [ -e "${TARGET_DIR}/etc/inittab" ]; then
-    grep -qE '^tty1::' "${TARGET_DIR}/etc/inittab" || \
-	sed -i '/GENERIC_SERIAL/a\
-tty1::respawn:/sbin/getty -L  tty1 0 vt100 # QEMU graphical window' "${TARGET_DIR}/etc/inittab"
-fi
@@ -1,8 +0,0 @@
-#!/bin/sh
-
-BOARD_DIR="$(dirname "$0")"
-
-PARTUUID=$(dumpe2fs "${BINARIES_DIR}/rootfs.ext2" 2>/dev/null | sed -n 's/^Filesystem UUID: *\(.*\)/\1/p')
-sed "s/%PARTUUID%/$PARTUUID/g" "${BOARD_DIR}/grub.cfg.in" > "${BINARIES_DIR}/efi-part/EFI/BOOT/grub.cfg"
-sed "s/%PARTUUID%/$PARTUUID/g" "${BOARD_DIR}/genimage.cfg.in" > "${BINARIES_DIR}/genimage.cfg"
-support/scripts/genimage.sh -c "${BINARIES_DIR}/genimage.cfg"
@@ -1,28 +0,0 @@
-Intro
-=====
-
-This is a x86_64 UEFI Linux boot demo in QEMU virt machine.
-
-Build
-=====
-
-    make qemu_x86_64_efi_defconfig
-    make
-
-Emulation
-=========
-
-Run the emulation with:
-
-    qemu-system-x86_64 \
-        -M pc \
-        -m 1024 \
-        -serial stdio \
-        -bios output/images/OVMF.fd \
-        -drive file=output/images/disk.img,format=raw \
-        -netdev user,id=net0 \
-        -device virtio-net-pci,netdev=net0 # qemu_x86_64_efi_defconfig
-
-Optionally add -smp N to emulate a SMP system with N CPUs.
-
-The login prompt will appear in the graphical window.
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  663507accae673afcf4e210b4ae8d4352e61d926202e5da3f04bf71ca1d2c0b5  linux-6.12.53.tar.xz
+sha256  ab48800ab49985a78d2318ae8ac5f28fd3e123ea17357ef21498105a53337336  linux-6.12.22.tar.xz
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718  u-boot-2025.04.tar.bz2
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  c29387aeee085fbcbd91236224b9df805063bac43615e75cea2c6b29604a5c73  linux-6.1.155.tar.xz
+sha256  97b59faf3f1925f296442a73a64439a447366f1d434be579803877097c5abe70  linux-6.1.133.tar.xz
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  9c4efdd7ee550d524c017b5dae27725374526311e983661850cd880af671cb2a  linux-5.15.186.tar.xz
+sha256  9319a47b1e9b5d344ff6015431856d0c9640e4faedc527c87f9129061a27136f  linux-5.15.179.tar.xz
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
+sha256  439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718  u-boot-2025.04.tar.bz2
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  348d6faada05fd4684450cd7c4e666c3c98cdb96f2309b1520c9a92a378c267e  linux-5.15.194.tar.xz
+sha256  9319a47b1e9b5d344ff6015431856d0c9640e4faedc527c87f9129061a27136f  linux-5.15.179.tar.xz
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718  u-boot-2025.04.tar.bz2
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  348d6faada05fd4684450cd7c4e666c3c98cdb96f2309b1520c9a92a378c267e  linux-5.15.194.tar.xz
+sha256  9319a47b1e9b5d344ff6015431856d0c9640e4faedc527c87f9129061a27136f  linux-5.15.179.tar.xz
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  439d3bef296effd54130be6a731c5b118be7fddd7fcc663ccbc5fb18294d8718  u-boot-2025.04.tar.bz2
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  663507accae673afcf4e210b4ae8d4352e61d926202e5da3f04bf71ca1d2c0b5  linux-6.12.53.tar.xz
+sha256  0fcbbbbcd456e87bbbfc8bf37af541fda62ccfcce76903503424fd101ef7bdee  linux-6.12.43.tar.xz
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256  b4f032848e56cc8f213ad59f9132c084dbbb632bc29176d024e58220e0efdf4a  u-boot-2025.10.tar.bz2
+sha256  0f933f6c5a426895bf306e93e6ac53c60870e4b54cda56d95211bec99e63bec7  u-boot-2025.07.tar.bz2
@@ -0,0 +1,50 @@
+From e79a96ff89b11fea03680633ab830894288ee9f0 Mon Sep 17 00:00:00 2001
+From: Neal Frager <neal.frager@amd.com>
+Date: Thu, 28 Nov 2024 07:50:28 +0000
+Subject: [PATCH] arm64: versal: vek280 prebuilt pdi is incorrect
+
+The prebuilt vpl_gen_fixed.pdi for the vek280 is incorrect and does not define
+the DDR memory region for address 0x8 0000 0000 - 0x8 8000 0000.  For this
+reason, the intree Linux dts memory node for the vek280 will not boot.
+
+This patch works around the issue until the prebuilt pdi file is changed.
+
+https://github.com/Xilinx/soc-prebuilt-firmware/blob/xilinx_v2024.2/vek280-versal/vpl_gen_fixed.pdi
+
+Upstream: n/a
+
+Signed-off-by: Neal Frager <neal.frager@amd.com>
+---
+ arch/arm64/boot/dts/xilinx/versal-vek280-revA.dts | 2 +-
+ arch/arm64/boot/dts/xilinx/versal-vek280-revB.dts | 2 +-
+ 2 files changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/arch/arm64/boot/dts/xilinx/versal-vek280-revA.dts b/arch/arm64/boot/dts/xilinx/versal-vek280-revA.dts
+index ad5d590318e6..a306eacca5b3 100644
+--- a/arch/arm64/boot/dts/xilinx/versal-vek280-revA.dts
+++ b/arch/arm64/boot/dts/xilinx/versal-vek280-revA.dts
+@@ -19,7 +19,7 @@ / {
+ 
+ 	memory: memory@0 {
+ 		device_type = "memory";
+-		reg = <0 0 0 0x80000000>, <0x8 0x0 0x1 0x80000000>; /* 2GB + 6GB */
+		reg = <0 0 0 0x80000000>, <0x8 0x80000000 0x1 0x80000000>; /* 2GB + 6GB */
+ 	};
+ 
+ 	chosen {
+diff --git a/arch/arm64/boot/dts/xilinx/versal-vek280-revB.dts b/arch/arm64/boot/dts/xilinx/versal-vek280-revB.dts
+index a5ee80a373e2..ba54a5ef0c73 100644
+--- a/arch/arm64/boot/dts/xilinx/versal-vek280-revB.dts
+++ b/arch/arm64/boot/dts/xilinx/versal-vek280-revB.dts
+@@ -19,7 +19,7 @@ / {
+ 
+ 	memory: memory@0 {
+ 		device_type = "memory";
+-		reg = <0 0 0 0x80000000>, <0x8 0x00000000 0x1 0x80000000>; /* 2GB + 6GB */
+		reg = <0 0 0 0x80000000>, <0x8 0x80000000 0x1 0x80000000>; /* 2GB + 6GB */
+ 	};
+ 
+ 	chosen {
+-- 
+2.25.1
+
@@ -73,18 +73,17 @@ you need to add them by yourself.
 1) Start with a defconfig supported by Buildroot (e.g. Zedboard)
    make zynq_zed_defconfig

-2) make menuconfig
-    Visit the following menu to enable BR2_TARGET_UBOOT_ZYNQ
+2) make uboot-menuconfig
+    Visit the following menu and enable CONFIG_XILINX_PS_INIT_FILE

-    Bootloaders  --->
-       U-Boot  --->
-           [*]   Boot on the Xilinx Zynq SoCs
+    ARM architecture  --->
+       [*] Zynq/ZynqMP PS init file(s) location

-3) make menuconfig
-    In the same menu, configure BR2_TARGET_UBOOT_ZYNQ_PS7_INIT_FILE
-
-    Bootloaders  --->
-       U-Boot  --->
-          (<Path to ps7_init_gpl.c>) Custom ps7_init_gpl file
+3) Copy ps7_init_gpl.c/h generated by the Xilinx Vivado tools into
+   output/build/uboot-custom/board/xilinx/zynq/custom_hw_platform/

 4) make
+
+Note: The files in step 3 will need to be re-copied after cleaning the
+output directory and at this time, there is no way to save them as
+part of the buildroot configuration, except as a U-Boot patch.
@@ -1,5 +1,5 @@
 # Locally computed:
-sha256  c9fcac5e28e1501bcffb3b36d56487cbefcf7cb708e00f48fe6360ef82fb3847  boot-wrapper-aarch64-b621b157b42f1fe398520cf499db88aa654c78e2-git4.tar.gz
+sha256  faa2843eaa3bc219da5ba9f69c02b45081a7634038faef5cba216d5e927ca2be  boot-wrapper-aarch64-ac6742520ded1da30d500f74e8affe86e27cabd5-git4.tar.gz

 # Hash for license files:
 sha256  bdaa479b497358151fc1166dc75a613e68321320b945e92ea07a4b6dc9a63271  LICENSE.txt
@@ -4,7 +4,7 @@
 #
 ################################################################################

-BOOT_WRAPPER_AARCH64_VERSION = b621b157b42f1fe398520cf499db88aa654c78e2
+BOOT_WRAPPER_AARCH64_VERSION = ac6742520ded1da30d500f74e8affe86e27cabd5
 BOOT_WRAPPER_AARCH64_SITE = https://git.kernel.org/pub/scm/linux/kernel/git/mark/boot-wrapper-aarch64.git
 BOOT_WRAPPER_AARCH64_SITE_METHOD = git
 BOOT_WRAPPER_AARCH64_LICENSE = BSD-3-Clause
@@ -1,3 +1,3 @@
 # Locally calculated
-sha256  1e675a98f6bcf81fbae1141779b9e72ec28773d0e5ec77bdcc890f14502615a4  edk2-edk2-stable202508-git4.tar.gz
+sha256  e05130e107d476cdec0846f55f22e00fb2cc0030b60fafce464a6cf10134d18d  edk2-edk2-stable202505-git4.tar.gz
 sha256  50ce20c9cfdb0e19ee34fe0a51fc0afe961f743697b068359ab2f862b494df80  License.txt
@@ -4,7 +4,7 @@
 #
 ################################################################################

-EDK2_VERSION = edk2-stable202508
+EDK2_VERSION = edk2-stable202505
 EDK2_SITE = https://github.com/tianocore/edk2
 EDK2_SITE_METHOD = git
 EDK2_LICENSE = BSD-2-Clause-Patent
@@ -167,7 +167,7 @@ config BR2_TARGET_OPTEE_OS_ADDITIONAL_VARIABLES

 config BR2_TARGET_OPTEE_OS_CORE_IMAGES
 	string "Binary boot images"
-	default "tee.bin tee-raw.bin tee-*_v2.bin"
+	default "tee.bin tee-*_v2.bin"
 	help
 	  Names of generated image files that are installed in the
 	  output images/ directory.
@@ -1,3 +1,3 @@
 # locally computed hash
-sha256  46319cd228d8f2c06c744241c0f342412329a7c630436fce7f82cf6936b1d603  shim-16.1.tar.bz2
+sha256  d503f778dc75895d3130da07e2ff23d2393862f95b6cd3d24b10cbd4af847217  shim-16.0.tar.bz2
 sha256  15edf527919ddcb2f514ab9d16ad07ef219e4bb490e0b79560be510f0c159cc2  COPYRIGHT
@@ -4,7 +4,7 @@
 #
 ################################################################################

-SHIM_VERSION = 16.1
+SHIM_VERSION = 16.0
 SHIM_SITE = https://github.com/rhboot/shim/releases/download/$(SHIM_VERSION)
 SHIM_SOURCE = shim-$(SHIM_VERSION).tar.bz2
 SHIM_LICENSE = BSD-2-Clause
@@ -56,9 +56,6 @@ SYSLINUX_POST_PATCH_HOOKS += SYSLINUX_CLEANUP
 # syslinux build system has no convenient way to pass CFLAGS,
 # and the internal zlib should take precedence so -I shouldn't
 # be used.
-# gcc-15 defaults to -std=gnu23 which introduces build failures.
-# We force "-std=gnu17" for gcc version supporting it. Earlier gcc
-# versions will work, since they are using the older standard.
 # Install in a temporary location that eases final install into
 # images/ (see corresponding command, below).
 # Repeat the target, otherwise syslinux will try to build everything
@@ -68,7 +65,7 @@ define SYSLINUX_BUILD_CMDS
 	$(TARGET_MAKE_ENV) $(MAKE1) \
 		ASCIIDOC_OK=-1 \
 		A2X_XML_OK=-1 \
-		CC="$(TARGET_CC) $(if $(BR2_TOOLCHAIN_GCC_AT_LEAST_8),-std=gnu17)" \
+		CC="$(TARGET_CC) -std=gnu17" \
 		LD="$(TARGET_LD)" \
 		OBJCOPY="$(TARGET_OBJCOPY)" \
 		AS="$(TARGET_AS)" \
--- a/Show More
+++ b/Show More