v2025.12.0

[Sascha Hauer <s.hauer@pengutronix.de>]

Hi All,

Right before christmas we have a v2025.12.0 release.

Not a big release but there are still some nice things to find. First of
all sandbox can now utilize LeakSanitizer to find memory leaks. This was
already used to find several memory leaks so that sandbox now runs
through all tests without memory leaks.
The barebox TLV support now has signature support which makes it ideal
for storing factory data which can be coupled to a specific device.
Until now the barebox magicvars were only documented in the magicvar
command. With this release they are now also documented on the website,
check out https://barebox.org/doc/2025.12.0/user/variables.html.

See below for a migration guide to this release and also for a full list
of changes that went into this release.

I wish you all a merry christmas!

Sascha


Migration notes for Release v2025.12.0
======================================

Shell
-----

* An optional parameter was added to the `-c` option of `dmesg` allowing
  configuration of the number of lines to remain in the log buffer after
  clearing. When no parameter is provided to `-c`, zero is assumed, and no
  lines are retained. Earlier versions always left 10 lines of logs remain in
  the log buffer.

Configuration options
---------------------

* The syntax of ``CONFIG_CRYPTO_PUBLIC_KEYS`` was updated with the introduction
  of the keyring feature. Previously, keys selected via
  ``CONFIG_CRYPTO_PUBLIC_KEYS`` were only used for fitimage verification. Now,
  fitimage verification uses the "fit" keyring. "fit" will be selected as the
  default keyring for transition but a warning will be emitted when no keyring
  is explicitly provided. Existing users should update their keyspec for
  fitimage public keys to ``keyring=fit[,fit-hint=<fit_hint>]:<crt>``
* The fit-hints in ``CONFIG_CRYPTO_PUBLIC_KEYS`` are now limited to identifiers
  matching the regular expression ``[a-zA-Z][a-zA-Z0-9_-]*``. Public keys with
  a ``fit-hint`` not conforming to this results in an error, affected key-hints
  must be changed. Please reach out to the mailing list if this causes issues.

----------------------------------------------------------------
Ahmad Fatoum (52):
      fuzz: add context pointer to call_for_each_fuzz_test
      sandbox: export list_fuzz_tests to sandbox_main
      fuzz: do not export for_each_fuzz_test
      video: Rockchip: add vop2_data::version field like Linux
      video: vpl: add debug output when calling ioctl
      video: panel: add support for Sitronix ST7703 MIPI-DSI panel
      phy: add support for generic MIPI D-PHY
      phy: add devinfo callback
      phy: add phy_configure operation
      phy: rockchip: add Innosilicon MIPI/LVDS/TTL PHY driver
      pinctrl: support selecting states from command line
      video: make video/mipi_dsi.h header self-contained
      sound: pwm-beeper: make duty cycle configurable
      param: add support for setting parameters with percentages
      video: backlight-pwm: switch to gpiod functions
      backlight: support setting brightness as percentage
      console: print banner on every fully activated console
      regulator: implement dev_of_regulator_get
      pmdomain: look up pmdomain even if not have_genpd_providers
      pmdomain: allow callback for when devices are attached
      imd: drop .barebox_imd section from arm/riscv non-PBL lds
      common: elf: rename elf_section misnomer to elf_segment
      x86: drop unused header asm/segment.h and modes.h headers
      state: guard against empty variable set in DT
      commands: usbgadget: improve error message on failure
      usb: dwc3: port Linux i.MX8MP glue driver
      phy: freescale: imx8mq-usb: add support for 8MP/8MQ vbus-supply
      crypto: caam - skip RNG selftest when i.MX6 is in normal world
      .clangd: remove -enable-trivial-auto-var-init-zero-... flag
      lib: add talloc for overlaying a tree onto allocations
      video: stm: make multi-image compatible
      video: stm: allocate uncached framebuffer memory as write-combine
      video: stm: add explicit support for i.MX6SX
      test: self: add talloc selftest
      hush: fix memory leaks
      sandbox: add memory leak debugging tooling around LeakSanitizer
      ARM: i.MX93: reinstate aliases
      bootm: fix boot override inheritance
      boards: qemu-virt: drop fitimage-pubkey.dts
      Documentation: migration-guides: don't warn about migration-master
      Documentation: factor out build rules into stand-alone Makefile
      ci: add workflow to check documentation build is warning free
      ARM: Rockchip: document changing console baud rate
      pmdomain: fix NULL pointer derference with dummy power domains
      param: make setting a parameter to the same string value a no-op
      net: fsl_enetc: fix missing dmb() symbols on non-ARM
      i2c: omap: fix probe on am335x
      net: 9p: fix variable name in BAREBOX_MAGICVAR
      bootchooser: inline document global.bootchooser.reset_priorities
      reset_source: inline document global.system.reset*
      Documentation: generate docs for magic variables
      Documentation: turn magic variables literals into references

Fabian Pflug (1):
      console_common: get_first_active: respect security policy

Jan Luebbe (1):
      doc: user: booting-linux: document global.bootm.initrd

Jonas Rebmann (20):
      gitignore: ignore /build, /oe-logs, /oe-workdir
      commands: dmesg: clear logbuffer fully if not requested otherwise
      lib: idr: avoid dangling else in idr_for_each_entry()
      common: clean up TLV code
      crypto: Add support for keyrings
      fit: only accept keys from "fit"-keyring
      crypto: keytoc: Rename "hint" to "fit-hint" and do not use it in identifiers
      commands: keys: update output format to include keyring
      commands: tlv: Error out on invalid TLVs
      scripts: bareboxtlv-generator: Implement signature
      scripts: bareboxtlv-generator: Increase max_size in example schema
      common: tlv: Add TLV-Signature support
      common: tlv: default decoder for signed TLV
      crypto: Use "development" keys for "fit" and "tlv" keyring
      test: py: add signature to TLV integration tests
      ci: pytest: Add kconfig fragment for TLV signature integration tests
      crypto: concatenate fit development certificate with private key
      doc/barebox-tlv: Update documentation regarding TLV-Signature
      Documentation: migration-2025.12.0: List changes to CONFIG_CRYPTO_PUBLIC_KEYS
      tlv: register_device() error handling

Marco Felsch (1):
      ARM: atf: document BL32 FDT argument

Maud Spierings (4):
      scripts: imx: Makefile.mingw64: add _GNU_SOURCE
      scripts: imx: add pread implementation for mingw target
      gitignore: ignore *.exe
      pmdomain: fix collision in names when registering

Michael Grzeschik (1):
      crypto: keytoc: fix env parsing after keyring support

Sascha Hauer (28):
      mtd: peb: mtd_peb_read(): move error message to caller
      dts: update to v6.18-rc3
      dts: update to v6.18-rc4
      ARM: multi_v8_defconfig: enable more rockchip stuff
      ARM: k3: allow to take signing key from environment variable
      tlv: fix memory leak
      of: free of_fixup in of_unregister_fixup()
      bobject: free object name in bobject_del()
      bfetch: fix memory leak
      Merge branch 'for-next/arm'
      Merge branch 'for-next/dts'
      Merge branch 'for-next/imx'
      Merge branch 'for-next/memleaks'
      Merge branch 'for-next/misc'
      Merge branch 'for-next/pmdomain'
      Merge branch 'for-next/rochchip'
      Merge branch 'for-next/talloc'
      Merge branch 'for-next/tlv'
      clk: rockchip rk3588: configure CPLL in driver
      device: use free_const to free device/bobject name
      nvmem: Fix typo in Kconfig
      public-keys: fix warning message
      dm: fix memory leak
      Merge branch 'document-bootm-initrd' of https://github.com/jluebbe/barebox
      fs: fix automount when last filename component is a automountpoint
      Merge branch 'for-next/documentation'
      ARM: i.MX8MN-EVK: Fix maximum load size
      Release v2025.12.0

Sohaib Mohamed (1):
      Documentation: defaultenv-2: Document C-based init script

Steffen Trumtrar (1):
      ARM: i.MX8MP: skov: add new 10" jt101tm023 variant support

Ulrich Ölmann (2):
      docs: security-policies: fix typo
      docs: security-policies: fix code block rendering by removing extra colon

-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |