Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *libgit2* to *1.9.7* has Succeeded.
Next steps:
- apply the patch: git am 0001-libgit2-upgrade-1.9.6-1.9.7.patch
- check the changes to upstream patches and summarize them in the commit
message,
- compile an image that contains the package
- perform some basic sanity tests
- amend the patch and sign it off: git commit -s --reset-author --amend
- send it to the appropriate mailing list
Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.
Please review the attached files for further information and build/update
failures.
Any problem please file a bug at
https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler
Regards,
The Upgrade Helper
-- >8 --
>From 7f7f9f5b3528f464f3ed56f5b01f1ab1dbabbf41 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <[email protected]>
Date: Fri, 14 Aug 2026 06:36:36 +0000
Subject: [PATCH] libgit2: upgrade 1.9.6 -> 1.9.7
Source: docs/changelog.md
v1.9.7
------
This is an security release with one change.
* Escape remote repository paths in libssh2
In v1.9.2, we started escaping repository paths in the OpenSSH-based
exec ssh transport. Bring the same escaping to the libssh2 transport
to avoid any potential command injection.
In addition, changes have been ported from the main branch to update
CI builds.
---
...cmake-mark-system-libraries-are-private-link-librari.patch | 4 +---
.../libgit2/{libgit2_1.9.6.bb => libgit2_1.9.7.bb} | 2 +-
2 files changed, 2 insertions(+), 4 deletions(-)
rename meta/recipes-support/libgit2/{libgit2_1.9.6.bb => libgit2_1.9.7.bb}
(93%)
diff --git
a/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch
b/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch
index 267770ae6f..93f1f3a870 100644
---
a/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch
+++
b/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch
@@ -1,4 +1,4 @@
-From 5670d3eed82f0d64766158809bf3d0c7c631b0ea Mon Sep 17 00:00:00 2001
+From 41048806aec8a4b71f3ccf11fdedbec88080a675 Mon Sep 17 00:00:00 2001
From: Ross Burton <[email protected]>
Date: Thu, 23 Jul 2026 17:35:23 +0100
Subject: [PATCH] cmake: mark system libraries are private link libraries
@@ -38,5 +38,3 @@ index 8045ddef9..fafdb09ec 100644
target_include_directories(libgit2package SYSTEM PRIVATE ${LIBGIT2_INCLUDES})
target_include_directories(libgit2package INTERFACE
$<INSTALL_INTERFACE:${CMAKE_INSTALL_INCLUDEDIR}>)
---
-2.43.0
diff --git a/meta/recipes-support/libgit2/libgit2_1.9.6.bb
b/meta/recipes-support/libgit2/libgit2_1.9.7.bb
similarity index 93%
rename from meta/recipes-support/libgit2/libgit2_1.9.6.bb
rename to meta/recipes-support/libgit2/libgit2_1.9.7.bb
index b17b22c63e..2de3503aac 100644
--- a/meta/recipes-support/libgit2/libgit2_1.9.6.bb
+++ b/meta/recipes-support/libgit2/libgit2_1.9.7.bb
@@ -8,7 +8,7 @@ DEPENDS = "curl openssl zlib libssh2 libgcrypt libpcre2"
SRC_URI =
"git://github.com/libgit2/libgit2.git;branch=maint/v1.9;protocol=https;tag=v${PV}
\
file://0001-cmake-mark-system-libraries-are-private-link-librari.patch"
-SRCREV = "26055f5af74ab1cf636d272e8a34315496d3f06f"
+SRCREV = "49e408b3208bc3093757a1c2db938d3590f3f412"
inherit cmake
--
2.47.1
packages/x86-64-v3-poky-linux/libgit2/libgit2: FILELIST: removed "/usr/lib/libgit2.so.1.9.6", added "/usr/lib/libgit2.so.1.9.7" Changes to packages/x86-64-v3-poky-linux/libgit2 (sysroot): /usr/lib/libgit2.so.1.9 changed symlink target from libgit2.so.1.9.6 to libgit2.so.1.9.7 /usr/lib/libgit2.so.1.9.6 moved to /usr/lib/libgit2.so.1.9.7
Changelog for libgit2: 1.9.6 -> 1.9.7 Source: docs/changelog.md v1.9.7 ------ This is an security release with one change. * Escape remote repository paths in libssh2 In v1.9.2, we started escaping repository paths in the OpenSSH-based exec ssh transport. Bring the same escaping to the libssh2 transport to avoid any potential command injection. In addition, changes have been ported from the main branch to update CI builds.
0001-libgit2-upgrade-1.9.6-1.9.7.patch
Description: Binary data
packages/x86-64-v3-poky-linux/libgit2: PV changed from "1.9.6" to "1.9.7" packages/x86-64-v3-poky-linux/libgit2: SRC_URI changed from "git://github.com/libgit2/libgit2.git;branch=maint/v1.9;protocol=https;tag=v1.9.6 file://0001-cmake-mark-system-libraries-are-private-link-librari.patch" to "git://github.com/libgit2/libgit2.git;branch=maint/v1.9;protocol=https;tag=v1.9.7 file://0001-cmake-mark-system-libraries-are-private-link-librari.patch" packages/x86-64-v3-poky-linux/libgit2: PKGV changed from 1.9.6 [default] to 1.9.7 [default] packages/x86-64-v3-poky-linux/libgit2/libgit2-dbg: PV changed from "1.9.6" to "1.9.7" packages/x86-64-v3-poky-linux/libgit2/libgit2-dbg: FILELIST: removed "/usr/lib/.debug/libgit2.so.1.9.6", added "/usr/lib/.debug/libgit2.so.1.9.7" packages/x86-64-v3-poky-linux/libgit2/libgit2-dbg: PKGV changed from 1.9.6 [default] to 1.9.7 [default] packages/x86-64-v3-poky-linux/libgit2/libgit2-dev: PV changed from "1.9.6" to "1.9.7" packages/x86-64-v3-poky-linux/libgit2/libgit2-dev: PKGV changed from 1.9.6 [default] to 1.9.7 [default] packages/x86-64-v3-poky-linux/libgit2/libgit2-doc: PV changed from "1.9.6" to "1.9.7" packages/x86-64-v3-poky-linux/libgit2/libgit2-doc: PKGV changed from 1.9.6 [default] to 1.9.7 [default] packages/x86-64-v3-poky-linux/libgit2/libgit2-locale: PV changed from "1.9.6" to "1.9.7" packages/x86-64-v3-poky-linux/libgit2/libgit2-locale: PKGV changed from 1.9.6 [default] to 1.9.7 [default] packages/x86-64-v3-poky-linux/libgit2/libgit2-src: PKGSIZE changed from 4630110 to 4630136 (+0%) packages/x86-64-v3-poky-linux/libgit2/libgit2-src: PV changed from "1.9.6" to "1.9.7" packages/x86-64-v3-poky-linux/libgit2/libgit2-src: FILELIST: directory renamed /usr/src/debug/libgit2/1.9.6/src/libgit2/streams -> /usr/src/debug/libgit2/1.9.7/src/libgit2/streams, directory renamed /usr/src/debug/libgit2/1.9.6/deps/ntlmclient -> /usr/src/debug/libgit2/1.9.7/deps/ntlmclient, directory renamed /usr/src/debug/libgit2/1.9.6/src/util/allocators -> /usr/src/debug/libgit2/1.9.7/src/util/allocators, directory renamed /usr/src/debug/libgit2/1.9.6/src/cli/unix -> /usr/src/debug/libgit2/1.9.7/src/cli/unix, directory renamed /usr/src/debug/libgit2/1.9.6/include/git2/sys -> /usr/src/debug/libgit2/1.9.7/include/git2/sys, directory renamed /usr/src/debug/libgit2/1.9.6/include/git2 -> /usr/src/debug/libgit2/1.9.7/include/git2, directory renamed /usr/src/debug/libgit2/1.9.6/deps/xdiff -> /usr/src/debug/libgit2/1.9.7/deps/xdiff, directory renamed /usr/src/debug/libgit2/1.9.6/src/util/unix -> /usr/src/debug/libgit2/1.9.7/src/util/unix, directory renamed /usr/src/debug/libgit2/1.9.6/sr c/util/hash -> /usr/src/debug/libgit2/1.9.7/src/util/hash, directory renamed /usr/src/debug/libgit2/1.9.6/src/util -> /usr/src/debug/libgit2/1.9.7/src/util, directory renamed /usr/src/debug/libgit2/1.9.6/src/libgit2 -> /usr/src/debug/libgit2/1.9.7/src/libgit2, directory renamed /usr/src/debug/libgit2/1.9.6/src/cli -> /usr/src/debug/libgit2/1.9.7/src/cli, directory renamed /usr/src/debug/libgit2/1.9.6/deps/llhttp -> /usr/src/debug/libgit2/1.9.7/deps/llhttp, directory renamed /usr/src/debug/libgit2/1.9.6/src/util/hash/sha1dc -> /usr/src/debug/libgit2/1.9.7/src/util/hash/sha1dc, directory renamed /usr/src/debug/libgit2/1.9.6/src/libgit2/transports -> /usr/src/debug/libgit2/1.9.7/src/libgit2/transports packages/x86-64-v3-poky-linux/libgit2/libgit2-src: PKGV changed from 1.9.6 [default] to 1.9.7 [default] packages/x86-64-v3-poky-linux/libgit2/libgit2-staticdev: PV changed from "1.9.6" to "1.9.7" packages/x86-64-v3-poky-linux/libgit2/libgit2-staticdev: PKGV changed from 1.9.6 [default] to 1.9.7 [default] packages/x86-64-v3-poky-linux/libgit2/libgit2: PV changed from "1.9.6" to "1.9.7" packages/x86-64-v3-poky-linux/libgit2/libgit2: FILELIST: removed "/usr/lib/libgit2.so.1.9.6", added "/usr/lib/libgit2.so.1.9.7" packages/x86-64-v3-poky-linux/libgit2/libgit2: PKGV changed from 1.9.6 [default] to 1.9.7 [default] Changes to packages/x86-64-v3-poky-linux/libgit2 (sysroot): /usr/lib/libgit2.so.1.9 changed symlink target from libgit2.so.1.9.6 to libgit2.so.1.9.7 /usr/lib/libgit2.so.1.9.6 moved to /usr/lib/libgit2.so.1.9.7
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#243415): https://lists.openembedded.org/g/openembedded-core/message/243415 Mute This Topic: https://lists.openembedded.org/mt/120745474/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
