From 8fa074613052ebb11ceba7be0ac2d8573461d0e9 Mon Sep 17 00:00:00 2001 From: "flowzone-app[bot]" <124931076+flowzone-app[bot]@users.noreply.github.com> Date: Sat, 27 Jan 2024 06:28:38 +0000 Subject: [PATCH] v5.1.16 --- .versionbot/CHANGELOG.yml | 331 ++++++++++++++++++++++++++++++++++++++ CHANGELOG.md | 121 ++++++++++++++ VERSION | 2 +- 3 files changed, 453 insertions(+), 1 deletion(-) diff --git a/.versionbot/CHANGELOG.yml b/.versionbot/CHANGELOG.yml index 1ef42146..a81633bf 100644 --- a/.versionbot/CHANGELOG.yml +++ b/.versionbot/CHANGELOG.yml @@ -1,3 +1,334 @@ +- commits: + - subject: Update layers/meta-balena to 0acd247aa20716b1ceda746e5ff5b7a2634ff427 + hash: 7888d6b09b4a537cb72c7cd9ef5618629e0d666f + body: Update layers/meta-balena + footer: + Changelog-entry: Update layers/meta-balena to 0acd247aa20716b1ceda746e5ff5b7a2634ff427 + changelog-entry: Update layers/meta-balena to 0acd247aa20716b1ceda746e5ff5b7a2634ff427 + author: Self-hosted Renovate Bot + nested: + - commits: + - subject: Update tests/leviathan digest to 7c94243 + hash: fe9fcfac3f90fd78c8e704a268a16d9b93527a0f + body: Update tests/leviathan + footer: + Change-type: patch + change-type: patch + author: Self-hosted Renovate Bot + nested: + - commits: + - subject: Update balena-os/leviathan-worker to v2.9.28 + hash: 756cd0253d0e061e7fa7eaba8d64e9356558dde7 + body: | + Update balena-os/leviathan-worker from 2.9.27 to 2.9.28 + footer: + Change-type: patch + change-type: patch + author: Self-hosted Renovate Bot + nested: [] + version: leviathan-2.29.41 + title: "" + date: 2024-01-26T15:03:05.906Z + version: meta-balena-5.1.16 + title: "" + date: 2024-01-27T02:56:42.770Z + - commits: + - subject: "networkmanager: make FORWARD rules for shared interfaces last in + chain" + hash: 089f4d639383a4981d4840f9e22cccc97270b339 + body: > + At this moment there is a race condition between NetworkManager + + and the engine when a shared interface is configured. If the interface + + is configured first and the engine second, the containers are allowed + + to access DHCP hosts behind the shared interface. If the engine comes + + up first and the shared interface second, access will be denied. + + + This patch adds a dispatcher script that always configures the firewall + + rules as if the engine came up last. This does not really address + + the underlying issue but it overcomes the race condition and makes + + the behavior deterministic, which is good enough at this point. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Michal Toman + signed-off-by: Michal Toman + author: Michal Toman + nested: [] + version: meta-balena-5.1.15 + title: "" + date: 2024-01-26T20:11:41.626Z + - commits: + - subject: Update tests/leviathan digest to e618772 + hash: 134b8f2e7f8f75c67e4aa49feb8d0d38c0e5121b + body: Update tests/leviathan + footer: + Change-type: patch + change-type: patch + author: Self-hosted Renovate Bot + nested: + - commits: + - subject: Update Lock file maintenance + hash: 601c03a87a8073ffa13e1abcdf51bb403f571f66 + body: | + Update + footer: + Change-type: patch + change-type: patch + author: Self-hosted Renovate Bot + nested: [] + version: leviathan-2.29.40 + title: "" + date: 2024-01-23T19:29:48.498Z + - commits: + - subject: Update actions/upload-artifact digest to 26f96df + hash: f9f08bf7810406b4fb16a3b1ac2345ad205d3c83 + body: | + Update actions/upload-artifact + footer: + Change-type: patch + change-type: patch + author: Self-hosted Renovate Bot + nested: [] + version: leviathan-2.29.39 + title: "" + date: 2024-01-23T18:31:12.292Z + version: meta-balena-5.1.14 + title: "" + date: 2024-01-24T00:07:16.859Z + - commits: + - subject: Start extract-balena-ca before os-config update + hash: 1b43e70a712145abe11c6fe6332d29b4dde50c49 + body: | + For os-config to use the OS wide ca certificate + instead of an existing balenaRootCA in the + config.json + footer: + Change-type: patch + change-type: patch + author: jaomaloy + nested: [] + version: meta-balena-5.1.13 + title: "" + date: 2024-01-23T10:52:48.191Z + - commits: + - subject: Update tests/leviathan digest to 6be4049 + hash: 889c23e5e8134f4e456681fc8a2bacc6d126271c + body: Update tests/leviathan + footer: + Change-type: patch + change-type: patch + author: Self-hosted Renovate Bot + nested: + - commits: + - subject: Update actions/upload-artifact digest to 694cdab + hash: e8ac025c685a10b02c074d34f6321bfa9a85715e + body: | + Update actions/upload-artifact + footer: + Change-type: patch + change-type: patch + author: Self-hosted Renovate Bot + nested: [] + version: leviathan-2.29.38 + title: "" + date: 2024-01-18T22:30:12.106Z + - commits: + - subject: Update actions/upload-artifact digest to 1eb3cb2 + hash: fdc77c10964cd4ad712773ce9c67ded83e5dbd58 + body: | + Update actions/upload-artifact + footer: + Change-type: patch + change-type: patch + author: Self-hosted Renovate Bot + nested: [] + version: leviathan-2.29.37 + title: "" + date: 2024-01-15T01:57:42.562Z + - commits: + - subject: Update Lock file maintenance + hash: 526e3b151506e979ad587f31c07aa5734609a796 + body: | + Update + footer: + Change-type: patch + change-type: patch + author: Self-hosted Renovate Bot + nested: [] + version: leviathan-2.29.36 + title: "" + date: 2024-01-15T00:50:36.593Z + version: meta-balena-5.1.12 + title: "" + date: 2024-01-19T03:26:08.587Z + - commits: + - subject: "kernel-balena: Only sign initramfs for EFI machines" + hash: 5e56bc8cace0b71bcbf8e216dfe2a194144ba783 + body: > + UEFI firmware in secure boot needs to authenticate the kernel + plus + + initramfs in the chain of trust. Other firmware implements secure boot + + differently and does not need this. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "balena-image: Add TPM tools conditionally on tpm machine feature" + hash: 28ec059dd898de5c61ab314475f620d8c979e0d4 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "initrdscripts: Add TPM/EFI tools conditionally on tpm machine feature" + hash: 090e79747eb1344d056cfd406d672c194dcb3bbb + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "os-helpers: rename os-helpers-secureboot to os-helpers-efi" + hash: 3f03b92c533e7c77f72128a6c5b0f345ceaf53eb + body: > + Secure boot is device specific, this helper contains EFI + specific + + helper functions. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "image-balena: extract hup boot partition checks into a function" + hash: 4caceb149848091203c1328c843cc7ce4ad4cccb + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "balena-keys: Distinguish EFI devices" + hash: dc78e4ff39bbebf11706e52c77895b6403f0730c + body: | + Non EFI devices do not need the UEFI secure boot keys. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "balena-image-flasher: only add grub configuration for EFI devices" + hash: 0c0966bc40a632945f22a2fb04c505ff42fd44e2 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + - subject: "balena-image: only add grub configuration for EFI machines" + hash: 25be7ade2fbb272101047629f8f9d0378b370cc3 + body: > + Only EFI systems need grub configuration added to the boot + partition - + + other device types that also use the signing API do not. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alex Gonzalez + signed-off-by: Alex Gonzalez + author: Alex Gonzalez + nested: [] + version: meta-balena-5.1.11 + title: "" + date: 2024-01-18T19:25:25.796Z + - commits: + - subject: "tests/bluetooth: Leave Autokit host discoverable on BT for a longer + period of time" + hash: a4f57877b7582b0e36672269471c178a7511d18f + body: > + We've noticed that leaving the host discoverable indefinitely on + Pi3 Autokit hosts solves sporadic scan failures. Thus, leaving + the host discoverable for 20 minutes should be sufficient to + prevent these cases. + footer: + Change-type: patch + change-type: patch + Signed-off-by: Alexandru Costache + signed-off-by: Alexandru Costache + author: Alexandru Costache + nested: [] + version: meta-balena-5.1.10 + title: "" + date: 2024-01-12T15:29:12.742Z + - commits: + - subject: Update tests/leviathan digest to 0210c02 + hash: 50e34dfc6013518a459c1be749804fbf837803d9 + body: Update tests/leviathan + footer: + Change-type: patch + change-type: patch + author: Self-hosted Renovate Bot + nested: + - commits: + - subject: change to ssh tunnel + hash: c15d5183a61e4ed9d437642560c2db071b1d7672 + body: "" + footer: + Change-type: patch + change-type: patch + Signed-off-by: Ryan Cooke + signed-off-by: Ryan Cooke + author: rcooke-warwick + nested: [] + version: leviathan-2.29.35 + title: "" + date: 2024-01-11T12:51:52.503Z + - commits: + - subject: Update core/contracts digest to 14a10d9 + hash: bd5f29abd2bbe194df6f7657b69b860f435b1ef7 + body: | + Update core/contracts + footer: + Change-type: patch + change-type: patch + author: Self-hosted Renovate Bot + nested: [] + version: leviathan-2.29.34 + title: "" + date: 2024-01-10T11:32:06.062Z + version: meta-balena-5.1.9 + title: "" + date: 2024-01-11T18:57:27.371Z + version: 5.1.16 + title: "" + date: 2024-01-27T06:28:32.375Z - commits: - subject: "linux-tegra: Enable binder config for Jetson Orin Nano" hash: d9b9c250e484d354fd80da11764831dab55a1f1d diff --git a/CHANGELOG.md b/CHANGELOG.md index 4333d9e3..9535ad86 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,127 @@ Change log ----------- +# v5.1.16 +## (2024-01-27) + + +
+ Update layers/meta-balena to 0acd247aa20716b1ceda746e5ff5b7a2634ff427 [Self-hosted Renovate Bot] + +> ## meta-balena-5.1.16 +> ### (2024-01-27) +> +> +>
+> Update tests/leviathan digest to 7c94243 [Self-hosted Renovate Bot] +> +>> ### leviathan-2.29.41 +>> #### (2024-01-26) +>> +>> * Update balena-os/leviathan-worker to v2.9.28 [Self-hosted Renovate Bot] +>> +> +>
+> +> +> ## meta-balena-5.1.15 +> ### (2024-01-26) +> +> * networkmanager: make FORWARD rules for shared interfaces last in chain [Michal Toman] +> +> ## meta-balena-5.1.14 +> ### (2024-01-24) +> +> +>
+> Update tests/leviathan digest to e618772 [Self-hosted Renovate Bot] +> +>> ### leviathan-2.29.40 +>> #### (2024-01-23) +>> +>> * Update Lock file maintenance [Self-hosted Renovate Bot] +>> +>> ### leviathan-2.29.39 +>> #### (2024-01-23) +>> +>> * Update actions/upload-artifact digest to 26f96df [Self-hosted Renovate Bot] +>> +> +>
+> +> +> ## meta-balena-5.1.13 +> ### (2024-01-23) +> +> * Start extract-balena-ca before os-config update [jaomaloy] +> +> ## meta-balena-5.1.12 +> ### (2024-01-19) +> +> +>
+> Update tests/leviathan digest to 6be4049 [Self-hosted Renovate Bot] +> +>> ### leviathan-2.29.38 +>> #### (2024-01-18) +>> +>> * Update actions/upload-artifact digest to 694cdab [Self-hosted Renovate Bot] +>> +>> ### leviathan-2.29.37 +>> #### (2024-01-15) +>> +>> * Update actions/upload-artifact digest to 1eb3cb2 [Self-hosted Renovate Bot] +>> +>> ### leviathan-2.29.36 +>> #### (2024-01-15) +>> +>> * Update Lock file maintenance [Self-hosted Renovate Bot] +>> +> +>
+> +> +> ## meta-balena-5.1.11 +> ### (2024-01-18) +> +> * kernel-balena: Only sign initramfs for EFI machines [Alex Gonzalez] +> * balena-image: Add TPM tools conditionally on tpm machine feature [Alex Gonzalez] +> * initrdscripts: Add TPM/EFI tools conditionally on tpm machine feature [Alex Gonzalez] +> * os-helpers: rename os-helpers-secureboot to os-helpers-efi [Alex Gonzalez] +> * image-balena: extract hup boot partition checks into a function [Alex Gonzalez] +> * balena-keys: Distinguish EFI devices [Alex Gonzalez] +> * balena-image-flasher: only add grub configuration for EFI devices [Alex Gonzalez] +> * balena-image: only add grub configuration for EFI machines [Alex Gonzalez] +> +> ## meta-balena-5.1.10 +> ### (2024-01-12) +> +> * tests/bluetooth: Leave Autokit host discoverable on BT for a longer period of time [Alexandru Costache] +> +> ## meta-balena-5.1.9 +> ### (2024-01-11) +> +> +>
+> Update tests/leviathan digest to 0210c02 [Self-hosted Renovate Bot] +> +>> ### leviathan-2.29.35 +>> #### (2024-01-11) +>> +>> * change to ssh tunnel [rcooke-warwick] +>> +>> ### leviathan-2.29.34 +>> #### (2024-01-10) +>> +>> * Update core/contracts digest to 14a10d9 [Self-hosted Renovate Bot] +>> +> +>
+> +> + +
+ # v5.1.8+rev3 ## (2024-01-24) diff --git a/VERSION b/VERSION index f986c2de..16cf70e7 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -5.1.8+rev3 \ No newline at end of file +5.1.16 \ No newline at end of file