Skip to content

Release: merge master-next to master (2026-04-27)#15575

Closed
rpcme wants to merge 46 commits into
masterfrom
master-next
Closed

Release: merge master-next to master (2026-04-27)#15575
rpcme wants to merge 46 commits into
masterfrom
master-next

Conversation

@rpcme
Copy link
Copy Markdown
Member

@rpcme rpcme commented Apr 27, 2026

Weekly release: master-next → master

Recipe Updates

  • aws-sdk-cpp: 1.11.793 → 1.11.796
  • python3-botocore: 1.42.92 → 1.42.95
  • python3-boto3: 1.42.92 → 1.42.95
  • aws-cli-v2: 2.34.33 → 2.34.36
  • aws-cli: 1.44.82 → 1.44.85
  • aws-crt-python: 0.32.0 → 0.32.1
  • aws-iot-device-sdk-python-v2: 1.28.2 → 1.29.0
  • python3-s3transfer: 0.16.0 → 0.16.1
  • amazon-ssm-agent: 3.3.4177.0 → 3.3.4268.0
  • aws-greengrass-component-sdk: 1.0.1 → 1.0.2
  • corretto-8-bin: 8.482.08.1 → 8.492.09.1
  • corretto-11-bin: 11.0.30.7.1 → 11.0.31.11.1
  • corretto-17-bin: 17.0.18.9.1 → 17.0.19.10.1
  • corretto-21-bin: 21.0.10.7.1 → 21.0.11.10.1
  • corretto-25-bin: 25.0.2.10.1 → 25.0.3.9.1

Bug Fixes

  • greengrass-common: fix invalid variable assignment (community contribution by @lxz0503)
  • aws-greengrass-component-sdk: rename recipe filename to match version 1.0.1

Infrastructure & CI

rpcme and others added 30 commits April 14, 2026 11:16
- auto-backport: remove kirkstone-next target
- build-test-all-branches: remove kirkstone/kirkstone-next
- ff-merge: clean up to only active branches (master, scarthgap, whinlatter)

Kirkstone (Yocto 4.0 LTS) reached EOL April 2026. Also removed
dunfell, gatesgarth, hardknott, honister, zeus, langdale, mickledore,
nanbield, styhead, and walnascar from ff-merge defaults as all are EOL.

Signed-off-by: Richard Elberger <elberger@amazon.com>
SDK recipe:
- Remove patch 0003 (cdylib + panic_handler) — upstream uses rlib-only,
  cdylib caused duplicate panic_impl conflicts with std consumers
- Switch BUILD_SHARED_LIBS=OFF (matches upstream static-only model)
- Remove libgg_sdk.so install (no longer produced)

C++ helloworld:
- Remove stale #include <gg/types.hpp> (doesn't exist in v1.0.1)

Rust helloworld:
- Should now work — rlib no longer contains panic_handler

Components are self-contained static binaries per upstream design.
The SDK is a build-time dependency only.

Fixes #15475

Signed-off-by: Richard Elberger <elberger@amazon.com>
Make sample binary compilation opt-in via PACKAGECONFIG[samples].
Default is off — users enable with:
  PACKAGECONFIG:append:pn-aws-greengrass-component-sdk = " samples"

When enabled:
- Builds C samples (CMake BUILD_SAMPLES=ON)
- Builds C++ samples (via BUILD_CPP + BUILD_SAMPLES)
- Builds Rust examples (cargo --examples)
- Installs sample binaries to /usr/bin/
- Installs component recipe JSONs to /usr/share/greengrass/component-recipes/
- Packages as aws-greengrass-component-sdk-samples

The component recipe JSONs serve as deployment reference templates
that users can customize with their S3 bucket and thing group.

NOTE: Yocto SDK (populate_sdk) integration needs verification.

Signed-off-by: Richard Elberger <elberger@amazon.com>
The 5 standalone helloworld recipes (bash, c, cpp, python, rust) are
superseded by the upstream samples now built and packaged by the
aws-greengrass-component-sdk recipe via PACKAGECONFIG[samples].

The upstream SDK samples are more comprehensive (40 samples covering
all 13 IPC operations in C, C++, and Rust) and are maintained by
the SDK upstream.

The helloworld-rust recipe also had a panic_handler conflict with
the SDK's no_std rlib that blocked all workflow-only PRs (#15475).

Users who want sample components should use:
  IMAGE_INSTALL:append = " aws-greengrass-component-sdk-samples"

The README in recipes-sdk/aws-greengrass-component-sdk/ documents
how to write custom component recipes.

Signed-off-by: Richard Elberger <elberger@amazon.com>
…lows

cve-check.bbclass was removed from OE-core master (2026-03-31,
commit 00de455). Replace with sbom-cve-check-recipe which is the
official successor.

Changes to both pr-cve-check.yml and nightly-cve-check.yml:
- INHERIT: cve-check → create-spdx-3.0 sbom-cve-check-recipe
- Task: cve_check → sbom_cve_check_recipe
- Output: collect .sbom-cve-check.yocto.json files (same format
  as old cve-summary.json via yocto-cve-check-manifest export)
- Re-enable PR trigger on master-next

Fixes #15461

Signed-off-by: Richard Elberger <elberger@amazon.com>
The pr-cve-check workflow was running CVE checks against every .bb
recipe in the layer on every PR, causing very long run times.

Add a 'changed' job (mirroring build-test-recipe pattern) that detects
which recipes were modified in the PR, then only CVE-check those.
Skip the CVE check entirely if no recipe files changed.
The automated version upgrade (PR #15416) updated the recipe contents
to version 1.0.1 but did not rename the file from _0.4.bb to _1.0.1.bb.

Rename the file and remove the explicit PV assignment since the version
is now derived from the filename per Yocto convention.

Reported-by: ChenQi1989 <https://github.com/ChenQi1989>
…on.inc

This line ${GG_ROOT}/plugins = "${GG_ROOT}/plugins" should be changed to
GG_PLUGINS = "${GG_ROOT}/plugins".

Signed-off-by: Xiaozhan Li <xiaozhan.li.cn@windriver.com>
meta-aws-maintainer and others added 16 commits April 23, 2026 03:11
In addition to the update, fixes the bindgen clang args and removes
unnecessary patches.
Replace the Docker-based label checker (which requires REVIEWER_TOKEN
and fails with 401 on fork PRs) with a simple gh API call using the
default GITHUB_TOKEN. Skip approve/merge steps if the label is not
present instead of failing the workflow.

This prevents red X on non-bot PRs.
Add Releases and Pinning section with examples for kas.yml and
git submodule usage. Add supported branches table with EOL dates.
Remove reference to kirkstone (EOL April 2026).

Fixes #15476
Remove kirkstone from BitBake version mapping comment.

Rulesets updated separately:
- Removed kirkstone-next from -next staging branches ruleset
- Deleted kirkstone-next specific ruleset

Partial fix for #15552
The COMPATIBLE_MACHINE filter had three bugs causing false CI failures:

1. Only recognized "null" as a blocking default, but amazon-cloudwatch-agent
   uses "(^$)" which also means "no machine matches"

2. The qemuarm override check only looked for armv7a/armv7ve but not :arm,
   missing recipes that use the base arm override

3. The explicit arch-specific null check only covered qemuarm and qemuriscv64,
   missing qemuarm64 and qemux86-64

Also removes corretto-*/firecracker-bin/jailer-bin from THINGS_TO_EXCLUDE
since the filter now handles them properly via COMPATIBLE_MACHINE.

Proven locally against all recipes for all four qemu machines.

Fixes #15547
@rpcme
Copy link
Copy Markdown
Member Author

rpcme commented Apr 27, 2026

Closing — master now has the stale file cleanup from #15576. Creating fresh release PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants