<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/meta-virtualization.git/recipes-devtools/go, branch master</title>
<subtitle>Mirror of git.yoctoproject.org/meta-virtualization</subtitle>
<id>https://git.enea.com/cgit/linux/meta-virtualization.git/atom?h=master</id>
<link rel='self' href='https://git.enea.com/cgit/linux/meta-virtualization.git/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-virtualization.git/'/>
<updated>2026-06-03T03:45:59+00:00</updated>
<entry>
<title>grpc-go: update to v1.81.1</title>
<updated>2026-06-03T03:45:59+00:00</updated>
<author>
<name>Bruce Ashfield</name>
<email>bruce.ashfield@gmail.com</email>
</author>
<published>2026-06-03T03:45:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-virtualization.git/commit/?id=3fa3953cffa1e1ebd24828ce90619dc0c1525d5b'/>
<id>urn:sha1:3fa3953cffa1e1ebd24828ce90619dc0c1525d5b</id>
<content type='text'>
Bumping grpc-go to version v1.81.1, which comprises the following commits:

    caf0772c Change version from 1.81.1-dev to 1.81.1 (#9122)
    6ccbeebf Cherry-pick #9111 into v1.81.x (#9121)
    b33c29e4 Cherry-pick #9081 into v1.81.x (#9102)
    c45fae6d Change version to 1.81.1-dev (#9063)
    cb182283 Change version to 1.81.0 (#9062)
    96748f97 Cherry-pick #9105 to 1.81.x (#9106)
    91832222 Cherry pick #9055, #9032 to v1.81.x (#9095)
    5cba6da4 Revert "deps: update dependencies for all modules (#9065)" (#9067)
    af8a9364 deps: update dependencies for all modules (#9065)
    cdc60dfa transport: optimize heap allocations in ready reader and update syscall connection handling (#9035)
    208d053e xds/resolver: pass complete XDSConfig in RPC context for HTTP filters (gRFC A83) (#9046)
    50fe1cc7 test: Fix flaky test `TestServerStreaming_ClientCallRecvMsgTwice` in `end2end_test.go`. (#9058)
    d574bad1 build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 (#9050)
    b8bf4d04 build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /interop/xds (#9051)
    19d23bf9 build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /examples (#9052)
    74b3acd1 xds: remove TODO to replace Endpoint with resolver.Endpoint struct (#9049)
    1c132b9b tests: avoid relying on socket reads/writes for synchronization (#9033)
    280b81bd build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#9042)
    ce2bdef9 transport: fixes non-linux environment failures (#9048)
    71849e8c xds: change clusterimpl to add SNI to handshake info (#9016)
    5fdb6d08 mem: add `Buffer.Slice()` (#8977)
    aa4d2818 xds/internal/client: Add async gauge metrics for Connected and Resources (A78) (#8807)
    a21508ee transport: move readyreader to its own package (#9037)
    99312fed stats: Use service import for gRPC code (#9034)
    21438020 xds: LRS custom metrics changes (a85) (#9005)
    2b8b708f interop: regenerate proto (#9028)
    c754bf92 transport: Fix handling of closed connections in ReadyReader (#9031)
    c33aa45e alts: Release read buffer when blocked on socket read (#8964)
    34da8d03 transport: Add values to the grpc.disconnect_error label for grpc.subchannel.disconnections metric (A94) (#8973)
    2de5b1c0 grpclb: replace testServer with StubServer in grpclb_test.go (#8979)
    0fe467a5 binarylog: replace testServer with StubServer in binarylog_end2end_test.go (#8978)
    8de729c0 xds: fix typo in `xdsresource.Metadata` (#9026)
    b71c2620 grpc/stats: Add support for custom labels in per call metrics (A108) (#9008)
    f1d1ce56 xds/rbac: add additional handling for addresses with ports (#8990)
    c20fba0f xds: Exported `buildXDSClientConfig` to use in external packages and update `xds_fake_transport.go`. (#9014)
    6477252c test: Fix flaky test `TestServerStreaming_ClientCallSendMsgTwice` in `end2end_test.go`. (#9004)
    2eade05a Fix flaky test `TestAggregatedClusterSuccess_SwitchBetweenLeafAndAggregate` in aggregate_cluster_test.go. (#9009)
    89af32f6 xds: Add SNI related field in handshake info (#8965)
    45a3304f stats: replace testServer with StubServer in stats_test.go (#8980)
    52bf4d9e build(deps): bump google.golang.org/grpc from 1.70.0 to 1.79.3 in /cmd/protoc-gen-go-grpc (#8988)
    4b786ffb xds: replace net with netip in `xds/xdsclient` and `xds/server` (#8909)
    ccc8d7bd priority: implement changes to child policy caching specified in A115 (#8997)
    99d6291e test/xds: wait for server to enter SERVING mode before sending the first RPC (#9003)
    12e91ddb xds: add support for HTTP filter state retention, as specified in A83 (#8924)
    58bbf8ab grpc: enforce strict path checking for incoming requests on the server (#8985)
    d0d7cab7 github: set testing CI names to be stable (#8982)
    36e13de7 grpclb: replace net.IP with netip.Addr (#8918)
    7f783427 xdsclient: fix panic on empty resource in ADS response (#8970)
    e5563c65 change directory name `fakeTransport` to `faketransport`. (#8976)
    7daee260 grpc: introduce ErrRetriesExhausted to wrap retry failures (#8894)
    f967422a transport: make the client send a RST_STREAM when it receives an END_STREAM from the server (#8832)
    99f36d4a xds/testutils: add fakeTransport for testing. (#8890)
    98573cbe rls: update rls cache metrics to use async gauge framework (#8808)
    fd539615 xds: leaf clusters provide the handshake info instead of top level cluster (#8956)
    ad2d82e3 xdsresource: add SNI related fields in security config of CDS update for A101 (#8941)
    d0ea4f35 cds: use a grpcsync.Event instead of a channel to communicate resource names being requested (#8960)
    0e2c0ea1 deps: update dependencies for all modules (#8969)
    81c7924e xds/clusterresolver: improve configbuilder tests by removing globals (#8939)
    71a4abb6 xds: regenrate expired SPIFFE certs (#8963)
    1acfea83 grpc: Enable shared write buffers by default (#8957)
    8360b4c4 xds/resolver: make service config human readable in the log (#8958)
    223662f0 cds: increase defaultTestTimeout to 10s for e2e tests (#8959)
    b9f79673 xds/resolver: remove unnecessary error check in test (#8955)
    549306ae Update gRPC-Go's dependency versions on master (#8953)
    5c4e754a Change version to 1.81.0-dev (#8950)
    7e2686f9 cdsbalancer: Update comment about usage of BalancerAttributes (#8951)
    b6597b3d xds/clusterimpl: use xdsConfig for updates and remove redundant fields from LB config (#8945)
    1d4fa8a7 xds: change cdsbalancer to use update from dependency manager (#8907)
    8f47d364 attributes: Replace internal map with linked list (#8933)
    22e1ee80 xds: add panic recovery in xdsclient resource unmarshalling. (#8895)
    7136e99e credentials/alts: Pool write buffers (#8919)
    46a31de5 security/advancedtls: fix macOS compatibility in CRL script (#8932)
    38eb2de1 protoc-gen-go-grpc: remove use_generic_streams_experimental flag (defaults to true) (#8936)
    7bc57850 xds: fix copy-paste bug in WeightExpirationPeriod config (#8915)
    d2eab687 balancer/rls: fix goroutine leak in control_channel_test (#8898)
    c9d52ee6 xds/xdsclient: add EDS sum of endpoint weights does not exceed MaxUint32 (#8899)
    4a83bf96 ringhash: enable behaviors of A76 by default (#8922)
    ace972de orca: fix goroutine leak in fakeORCAService.StreamCoreMetrics (#8911)
    19e41284 xds: decouple A76 and A86 EDS metadata parsing (#8875)
    b6f89f74 mem: Move buffer pool implementations to internal (#8910)
    c1a9239e xds/rbac: replace legacy net to netip (#8908)
    3be7e2d0 mem: Add faster tiered buffer pool (#8775)
    13e24552 correctly check nil stream (#8905)
    944f0585 client: process RPC stats/tracing only when a handler is configured (#8874)
    2c113abf advancedtls: re-generate test certs and increase expiry (#8900)
    779b7922 xds: refactor server-side HTTP filter processing (#8878)
    e08fc36d resolver: Add resolver.EndpointMap.All() to iterate over keys and values (#8867)
    d7b3f936 cdsbalancer: Increase timeout for test (#8889)
    78601448 mem: ensure `Reader` buffers are reused on early return (#8886)
    0f69b6eb credentials: add end-to-end tests for JWT call credentials behavior (#8818)
    9d8ede99 xds: split service and message codegen import (#8881)
    12fc393c xdsdepmgr: add functionality for cluster subscription (#8792)
    55bfbbb2 xds/clusterresolver: implement gRFC A61 changes for LOGICAL_DNS clusters (#8733)
    830c9098 cmd/protoc-gen-go-grpc: bump -version to 1.6.1 for release (#8879)
    b7b1cce6 examples: Poll for expected server logs in test (#8871)
    2abe1f0d github: Add config for Gemini code assist (#8873)
    46350a74 channelz: Regenerate proto (#8872)
    49e224f8 xds/googlec2p: Revert PR 8829 that removed `SetFallbackBootstrapConfig` (#8869)
    61d569d3 *: Implementation of weighted random shuffling (A113) (#8864)
    7985bb44 rls: Fix flaky test TestPickerUpdateOnDataCacheSizeDecrease (#8856)
    3e475d7c xdsclient: add test for custom xDS resource subscription (#8834)
    0dc1bcd1 client/picker: log loop to V(2) (#8863)
    69b542a5 credentials/tls: verify overwritten authority against only leaf certificate (#8831)
    e6ca4177 xds/googlec2p: remove legacy `SetFallbackBootstrapConfig` and fix tests. (#8829)
    6601041b documentation: improve proxy documentation (#8840)
    65b3eeb0 transport: warn when header list size exceeds 8KB (#8845)
    19ace67b outlierdetection: move ParseConfig test to a test-only package (#8833)
    c05cfb36 balancer/rls: Use log *f functions with format args (#8859)
    a8d11ced balancer: introduce env flag for case-sensitive registry (#8837)
    c7ec4d9a test: use testpb alias in stream_test.go for proto messages. (#8854)
    1c79a7c8 transport: fix potential race in `TestKeepaliveClientClosesWithActiveStreams`. (#8827)
    72789830 xds: fix typo in log message (#8843)
    c2d81b71 deps: update dependencies for all modules (#8853)
    3fb101d6 hierarchy: Use public API for testing (#8846)
    de165147 Change version to 1.80.0-dev (#8852)

Signed-off-by: Bruce Ashfield &lt;bruce.ashfield@gmail.com&gt;
</content>
</entry>
<entry>
<title>go-distribution: Add CVE_PRODUCT to align with NVD CPE</title>
<updated>2026-04-21T13:11:11+00:00</updated>
<author>
<name>Himanshu Jadon</name>
<email>hjadon@cisco.com</email>
</author>
<published>2026-04-21T02:43:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-virtualization.git/commit/?id=f8bbbf1f7d7b5c7ef6b2c9c86a93cb44524bc740'/>
<id>urn:sha1:f8bbbf1f7d7b5c7ef6b2c9c86a93cb44524bc740</id>
<content type='text'>
CVE_PRODUCT has been set to docker:registry to align with the NVD CPE
product namespace for the distribution/registry codebase.

Only a single CPE entry exists in the NVD for this product:
 cpe:2.3:a:docker:registry

This ensures CVEs tracked for docker registry are matched for this recipe.

Signed-off-by: Himanshu Jadon &lt;hjadon@cisco.com&gt;
Signed-off-by: Bruce Ashfield &lt;bruce.ashfield@gmail.com&gt;
</content>
</entry>
<entry>
<title>go recipes: update to latest upstream releases</title>
<updated>2026-03-26T15:54:03+00:00</updated>
<author>
<name>Bruce Ashfield</name>
<email>bruce.ashfield@gmail.com</email>
</author>
<published>2026-03-26T14:25:30+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-virtualization.git/commit/?id=5ccb61a7a67d4f4e9a31301630a3224076bcc4b4'/>
<id>urn:sha1:5ccb61a7a67d4f4e9a31301630a3224076bcc4b4</id>
<content type='text'>
Update all active Go library recipes to their latest releases:

- go-md2man: 1.0.10 → 2.0.7 (update GO_IMPORT for v2 module path)
- go-cli: 1.1.0 → 2.27.7 (moved to github.com/urfave/cli/v2)
- go-connections: 0.2.1 → 0.6.0
- go-dbus: 4.0.0 → 5.2.2 (update GO_IMPORT for v5 module path)
- go-distribution: 2.6.0 → 3.0.0 (repo moved to distribution/distribution)
- go-fsnotify: 1.5.1 → 1.9.0
- go-logrus: 0.11.0 → 1.9.4
- go-mux: unversioned → 1.8.1
- go-patricia: 2.2.6 → 2.3.3
- go-systemd: 4 → 22.7.0 (update GO_IMPORT for v22 module path)
- grpc-go: 1.59.0 → 1.79.3

Signed-off-by: Bruce Ashfield &lt;bruce.ashfield@gmail.com&gt;
</content>
</entry>
<entry>
<title>go recipes: remove dead and archived projects</title>
<updated>2026-03-26T14:15:15+00:00</updated>
<author>
<name>Bruce Ashfield</name>
<email>bruce.ashfield@gmail.com</email>
</author>
<published>2026-03-26T14:15:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-virtualization.git/commit/?id=ce4a0ce9006998863a7cb50ac2eee67d06ba3c08'/>
<id>urn:sha1:ce4a0ce9006998863a7cb50ac2eee67d06ba3c08</id>
<content type='text'>
Remove Go library recipes for projects that are archived, deprecated,
or otherwise dead upstream:

- go-capability: No releases ever published, community moved to
  github.com/moby/sys/capability
- go-context: Superseded by Go stdlib context.Context (since Go 1.7)
- go-libtrust: Archived on GitHub, no releases ever published
- go-metalinter: Archived and deprecated since 2019, replaced by
  golangci-lint
- go-pty: Archived since 2020, moved to github.com/creack/pty

None of these are referenced as build dependencies by any recipe in
meta-virtualization. External consumers should migrate to the
upstream-recommended replacements.

Signed-off-by: Bruce Ashfield &lt;bruce.ashfield@gmail.com&gt;
</content>
</entry>
<entry>
<title>runx, go-build: mark as deprecated in favor of vxn</title>
<updated>2026-02-26T01:05:01+00:00</updated>
<author>
<name>Bruce Ashfield</name>
<email>bruce.ashfield@gmail.com</email>
</author>
<published>2026-02-19T19:14:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-virtualization.git/commit/?id=ba23ccd3390b7fbebfed641ebfcd978a0ba406dd'/>
<id>urn:sha1:ba23ccd3390b7fbebfed641ebfcd978a0ba406dd</id>
<content type='text'>
Update SUMMARY and DESCRIPTION to note that runx is unmaintained
(upstream dormant since 2022) and that vxn provides the same Xen DomU
container functionality with pluggable hypervisor backends. go-build
is the serial FD handler companion to runx and is similarly superseded.

Signed-off-by: Bruce Ashfield &lt;bruce.ashfield@gmail.com&gt;
</content>
</entry>
<entry>
<title>grpc-go 1.59.0+git: Ignore CVE-2024-7246</title>
<updated>2025-09-04T01:40:45+00:00</updated>
<author>
<name>Anil Dongare</name>
<email>adongare@cisco.com</email>
</author>
<published>2025-08-29T05:22:27+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-virtualization.git/commit/?id=23dff61259191a203e92c2f766dccbe44e880aba'/>
<id>urn:sha1:23dff61259191a203e92c2f766dccbe44e880aba</id>
<content type='text'>
Upstream Repository: https://github.com/grpc/grpc-go

Bug Details: https://nvd.nist.gov/vuln/detail/CVE-2024-7246
Type: Security Fix
CVE: CVE-2024-7246
Score: 6.3 (Medium)
Patch: https://github.com/grpc/grpc/issues/36245

Analysis:
-CVE-2024-7246 describes an HTTP/2 HPACK header table poisoning
 issue found in the gRPC C-core implementation (grpc/grpc).
-The vulnerability does not apply to the pure Go implementation
 (grpc-go) used in Yocto (meta-virtualization layer).
-Marking as not-applicable-config (implementation difference).
-The affected code path is not present in grpc-go.Hence ignoring the
  CVE for grpc-go.

Reference:
[1] https://nvd.nist.gov/vuln/detail/CVE-2024-7246
[2] https://github.com/grpc/grpc/issues/36245
[3] Upstream gRPC release notes confirming fixed versions for gRPC
    C-core (not grpc-go).

Signed-off-by: Anil Dongare &lt;adongare@cisco.com&gt;
Signed-off-by: Bruce Ashfield &lt;bruce.ashfield@gmail.com&gt;
</content>
</entry>
<entry>
<title>devtools: adapt to UNPACKDIR changes</title>
<updated>2025-06-26T02:55:55+00:00</updated>
<author>
<name>Bruce Ashfield</name>
<email>bruce.ashfield@gmail.com</email>
</author>
<published>2025-06-26T02:40:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-virtualization.git/commit/?id=be0039855faef0f996966f3bc195ea418f2a40ab'/>
<id>urn:sha1:be0039855faef0f996966f3bc195ea418f2a40ab</id>
<content type='text'>
This commit updates the container recipes to the OE core UNPACKDIR
changes.

  - We drop references to WORKDIR
  - We adjust destsuffix fetches to use BB_GIT_DEFAULT_DESTSUFFIX
    instead of 'git'
  - Update our GOPATH references to use UNPACKDIR
  - Drop S = assignemnts where possible

Signed-off-by: Bruce Ashfield &lt;bruce.ashfield@gmail.com&gt;
</content>
</entry>
<entry>
<title>notary: drop recipe</title>
<updated>2025-04-18T13:55:58+00:00</updated>
<author>
<name>Bruce Ashfield</name>
<email>bruce.ashfield@gmail.com</email>
</author>
<published>2025-04-17T18:39:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-virtualization.git/commit/?id=050030c8d68194b27c3245af792b553ac6ea6b6d'/>
<id>urn:sha1:050030c8d68194b27c3245af792b553ac6ea6b6d</id>
<content type='text'>
Notary has had the depreciated warning for quite some time,
dropping the recipe.

Signed-off-by: Bruce Ashfield &lt;bruce.ashfield@gmail.com&gt;
</content>
</entry>
<entry>
<title>go-cli: use main branch</title>
<updated>2024-11-12T23:14:33+00:00</updated>
<author>
<name>Martin Jansa</name>
<email>martin.jansa@gmail.com</email>
</author>
<published>2024-11-11T16:36:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-virtualization.git/commit/?id=aca728f51b2d9aec9ce1b7fc9bf53a42ad1f7808'/>
<id>urn:sha1:aca728f51b2d9aec9ce1b7fc9bf53a42ad1f7808</id>
<content type='text'>
* master was renamed to main long time ago

Signed-off-by: Martin Jansa &lt;martin.jansa@gmail.com&gt;
Signed-off-by: Bruce Ashfield &lt;bruce.ashfield@gmail.com&gt;
</content>
</entry>
<entry>
<title>go-build: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}</title>
<updated>2024-05-29T13:16:56+00:00</updated>
<author>
<name>Bruce Ashfield</name>
<email>bruce.ashfield@gmail.com</email>
</author>
<published>2024-05-24T03:43:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-virtualization.git/commit/?id=95852d19d2b989bb983c9128ec25f033e5b7c7ff'/>
<id>urn:sha1:95852d19d2b989bb983c9128ec25f033e5b7c7ff</id>
<content type='text'>
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

Signed-off-by: Bruce Ashfield &lt;bruce.ashfield@gmail.com&gt;
</content>
</entry>
</feed>
