Skip to content

Release: merge master-next to master (2026-04-22)#15548

Merged
rpcme merged 29 commits into
masterfrom
master-next
Apr 22, 2026
Merged

Release: merge master-next to master (2026-04-22)#15548
rpcme merged 29 commits into
masterfrom
master-next

Conversation

@rpcme
Copy link
Copy Markdown
Member

@rpcme rpcme commented Apr 22, 2026

Weekly release: master-next → master

Changes since last release

  • aws-greengrass-component-sdk: add samples PACKAGECONFIG flag, restructure install
  • Remove greengrass helloworld recipes (replaced by SDK samples)
  • aws-sdk-cpp: upgrade 1.11.790 → 1.11.791
  • python3-botocore: upgrade 1.42.89 → 1.42.90
  • python3-boto3: upgrade 1.42.89 → 1.42.90
  • aws-crt-python: upgrade 0.32.0 → 0.32.1
  • aws-cli: upgrade 1.44.79 → 1.44.80
  • ci: migrate cve-check to sbom-cve-check for PR and nightly workflows
  • ci: pr-cve-check optimized to only scan changed recipes (static allow list)
  • aws-greengrass-component-sdk: rename recipe filename to match version 1.0.1
  • greengrass-common: fix invalid variable assignment (community contribution)
  • ci: use REVIEWER_TOKEN instead of deprecated BOT2_CREDENTIAL
  • Branch protection enabled on master and master-next (no more force pushes)
  • python3-botocore: upgrade 1.42.90 → 1.42.91
  • python3-boto3: upgrade 1.42.90 → 1.42.91
  • aws-iot-device-sdk-python-v2: version upgrade
  • aws-cli-v2: version upgrade
  • aws-cli: upgrade 1.44.80 → 1.44.81
  • corretto-11-bin, corretto-17-bin, corretto-21-bin, corretto-25-bin, corretto-8-bin: version upgrades

rpcme and others added 29 commits April 14, 2026 11:16
- auto-backport: remove kirkstone-next target
- build-test-all-branches: remove kirkstone/kirkstone-next
- ff-merge: clean up to only active branches (master, scarthgap, whinlatter)

Kirkstone (Yocto 4.0 LTS) reached EOL April 2026. Also removed
dunfell, gatesgarth, hardknott, honister, zeus, langdale, mickledore,
nanbield, styhead, and walnascar from ff-merge defaults as all are EOL.

Signed-off-by: Richard Elberger <elberger@amazon.com>
SDK recipe:
- Remove patch 0003 (cdylib + panic_handler) — upstream uses rlib-only,
  cdylib caused duplicate panic_impl conflicts with std consumers
- Switch BUILD_SHARED_LIBS=OFF (matches upstream static-only model)
- Remove libgg_sdk.so install (no longer produced)

C++ helloworld:
- Remove stale #include <gg/types.hpp> (doesn't exist in v1.0.1)

Rust helloworld:
- Should now work — rlib no longer contains panic_handler

Components are self-contained static binaries per upstream design.
The SDK is a build-time dependency only.

Fixes #15475

Signed-off-by: Richard Elberger <elberger@amazon.com>
Make sample binary compilation opt-in via PACKAGECONFIG[samples].
Default is off — users enable with:
  PACKAGECONFIG:append:pn-aws-greengrass-component-sdk = " samples"

When enabled:
- Builds C samples (CMake BUILD_SAMPLES=ON)
- Builds C++ samples (via BUILD_CPP + BUILD_SAMPLES)
- Builds Rust examples (cargo --examples)
- Installs sample binaries to /usr/bin/
- Installs component recipe JSONs to /usr/share/greengrass/component-recipes/
- Packages as aws-greengrass-component-sdk-samples

The component recipe JSONs serve as deployment reference templates
that users can customize with their S3 bucket and thing group.

NOTE: Yocto SDK (populate_sdk) integration needs verification.

Signed-off-by: Richard Elberger <elberger@amazon.com>
The 5 standalone helloworld recipes (bash, c, cpp, python, rust) are
superseded by the upstream samples now built and packaged by the
aws-greengrass-component-sdk recipe via PACKAGECONFIG[samples].

The upstream SDK samples are more comprehensive (40 samples covering
all 13 IPC operations in C, C++, and Rust) and are maintained by
the SDK upstream.

The helloworld-rust recipe also had a panic_handler conflict with
the SDK's no_std rlib that blocked all workflow-only PRs (#15475).

Users who want sample components should use:
  IMAGE_INSTALL:append = " aws-greengrass-component-sdk-samples"

The README in recipes-sdk/aws-greengrass-component-sdk/ documents
how to write custom component recipes.

Signed-off-by: Richard Elberger <elberger@amazon.com>
…lows

cve-check.bbclass was removed from OE-core master (2026-03-31,
commit 00de455). Replace with sbom-cve-check-recipe which is the
official successor.

Changes to both pr-cve-check.yml and nightly-cve-check.yml:
- INHERIT: cve-check → create-spdx-3.0 sbom-cve-check-recipe
- Task: cve_check → sbom_cve_check_recipe
- Output: collect .sbom-cve-check.yocto.json files (same format
  as old cve-summary.json via yocto-cve-check-manifest export)
- Re-enable PR trigger on master-next

Fixes #15461

Signed-off-by: Richard Elberger <elberger@amazon.com>
The pr-cve-check workflow was running CVE checks against every .bb
recipe in the layer on every PR, causing very long run times.

Add a 'changed' job (mirroring build-test-recipe pattern) that detects
which recipes were modified in the PR, then only CVE-check those.
Skip the CVE check entirely if no recipe files changed.
The automated version upgrade (PR #15416) updated the recipe contents
to version 1.0.1 but did not rename the file from _0.4.bb to _1.0.1.bb.

Rename the file and remove the explicit PV assignment since the version
is now derived from the filename per Yocto convention.

Reported-by: ChenQi1989 <https://github.com/ChenQi1989>
…on.inc

This line ${GG_ROOT}/plugins = "${GG_ROOT}/plugins" should be changed to
GG_PLUGINS = "${GG_ROOT}/plugins".

Signed-off-by: Xiaozhan Li <xiaozhan.li.cn@windriver.com>
@rpcme rpcme requested a review from a team as a code owner April 22, 2026 17:10
@rpcme rpcme merged commit fefdcc6 into master Apr 22, 2026
23 of 26 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants