Anjay 3.12.0

Author: anuar2k

.dockerignore

@@ -34,7 +34,7 @@ posix-config.h
 anjay-*.cmake
 Doxyfile
 /doc/sphinx/source/conf.py
-tests/integration/framework/nsh-lwm2m/pymbedtls/build/
+tools/test-framework-tools/pymbedtls/build/
 
 # other
 Makefile
@@ -54,7 +54,7 @@ __pycache__/
 *.orig
 *.egg-info
 *.pyc
-/tests/integration/framework/nsh-lwm2m/coap/pymbedtls*
+/tools/test-framework-tools/pymbedtls*
 compile_commands.json
 
 /avs_commons/install

.github/workflows/anjay-tests.yml

@@ -1,4 +1,4 @@
-# Copyright 2017-2025 AVSystem <avsystem@avsystem.com>
+# Copyright 2017-2026 AVSystem <avsystem@avsystem.com>
 # AVSystem Anjay LwM2M SDK
 # All rights reserved.
 #
@@ -8,12 +8,13 @@
 name: Anjay tests
 on: [push]
 jobs:
-  ubuntu2004-compilers-test:
+  ubuntu2204-compilers-test:
     runs-on: ubuntu-latest
-    container: avsystemembedded/anjay-travis:ubuntu-20.04-2.2
+    container: avsystemembedded/anjay-travis:ubuntu-22.04-3.0
     env:
       CC: ${{ matrix.CC }}
       CXX: ${{ matrix.CXX }}
+      MEM_CHECK_TOOL: ${{ matrix.MEM_CHECK_TOOL }}
     steps:
       # NOTE: workaround for https://github.com/actions/checkout/issues/760
       - run: git config --global safe.directory '*'
@@ -23,25 +24,39 @@ jobs:
           submodules: recursive
       - run: apt-get update
       - run: apt-get -y install $CC $CXX
-      - run: ./devconfig --with-valgrind --without-analysis -DWITH_VALGRIND_TRACK_ORIGINS=OFF -DWITH_URL_CHECK=OFF -DWITH_IPV6=OFF
-      - run: env CC=gcc LC_ALL=C.UTF-8 make -j
-      - run: env CC=gcc LC_ALL=C.UTF-8 make check
+      - run: ./devconfig $MEM_CHECK_TOOL --without-analysis -DWITH_VALGRIND_TRACK_ORIGINS=OFF -DWITH_IPV6=OFF
+      - run: |
+          . /venv/bin/activate
+          env CC=gcc LC_ALL=C.UTF-8 make -j
+      - run: |
+          . /venv/bin/activate
+          env CC=gcc LC_ALL=C.UTF-8 make check
     strategy:
       fail-fast: false
       matrix:
         include:
-          - CC: gcc-8
-            CXX: g++-8
-          - CC: gcc-9
-            CXX: g++-9
-          - CC: gcc-10
-            CXX: g++-10
-          - CC: clang-10
-            CXX: clang++-10
+          - CC: gcc-11
+            CXX: g++-11
+            MEM_CHECK_TOOL: --with-valgrind
+          - CC: gcc-12
+            CXX: g++-12
+            MEM_CHECK_TOOL: --with-valgrind
+          - CC: clang-11
+            CXX: clang++-11
+            MEM_CHECK_TOOL: --with-valgrind
+          - CC: clang-12
+            CXX: clang++-12
+            MEM_CHECK_TOOL: --with-valgrind
+          - CC: clang-13
+            CXX: clang++-13
+            MEM_CHECK_TOOL: --with-valgrind
+          - CC: clang-14
+            CXX: clang++-14
+            MEM_CHECK_TOOL: --without-memcheck # NOTE: workaround for https://bugzilla.mozilla.org/show_bug.cgi?id=1758782
 
-  ubuntu2204-compilers-test:
+  ubuntu2404-compilers-test:
     runs-on: ubuntu-latest
-    container: avsystemembedded/anjay-travis:ubuntu-22.04-2.2
+    container: avsystemembedded/anjay-travis:ubuntu-24.04-3.0
     env:
       CC: ${{ matrix.CC }}
       CXX: ${{ matrix.CXX }}
@@ -55,35 +70,39 @@ jobs:
           submodules: recursive
       - run: apt-get update
       - run: apt-get -y install $CC $CXX
-      - run: ./devconfig $MEM_CHECK_TOOL --without-analysis -DWITH_VALGRIND_TRACK_ORIGINS=OFF -DWITH_URL_CHECK=OFF -DWITH_IPV6=OFF
-      - run: env CC=gcc LC_ALL=C.UTF-8 make -j
-      - run: env CC=gcc LC_ALL=C.UTF-8 make check
+      - run: ./devconfig $MEM_CHECK_TOOL --without-analysis -DWITH_VALGRIND_TRACK_ORIGINS=OFF -DWITH_IPV6=OFF
+      - run: |
+          . /venv/bin/activate
+          env CC=gcc LC_ALL=C.UTF-8 make -j
+      - run: |
+          . /venv/bin/activate
+          env CC=gcc LC_ALL=C.UTF-8 make check
     strategy:
       fail-fast: false
       matrix:
         include:
-          - CC: gcc-11
-            CXX: g++-11
-            MEM_CHECK_TOOL: --with-valgrind
           - CC: gcc-12
             CXX: g++-12
             MEM_CHECK_TOOL: --with-valgrind
-          - CC: clang-11
-            CXX: clang++-11
+          - CC: gcc-13
+            CXX: g++-13
             MEM_CHECK_TOOL: --with-valgrind
-          - CC: clang-12
-            CXX: clang++-12
+          - CC: gcc-14
+            CXX: g++-14
             MEM_CHECK_TOOL: --with-valgrind
-          - CC: clang-13
-            CXX: clang++-13
+          - CC: clang-17
+            CXX: clang++-17
+            MEM_CHECK_TOOL: --with-valgrind
+          - CC: clang-18
+            CXX: clang++-18
+            MEM_CHECK_TOOL: --with-valgrind
+          - CC: clang-19
+            CXX: clang++-19
             MEM_CHECK_TOOL: --with-valgrind
-          - CC: clang-14
-            CXX: clang++-14
-            MEM_CHECK_TOOL: --without-memcheck # NOTE: workaround for https://bugzilla.mozilla.org/show_bug.cgi?id=1758782
 
   rockylinux9-compilers-test:
     runs-on: ubuntu-latest
-    container: avsystemembedded/anjay-travis:rockylinux-9-2.2
+    container: avsystemembedded/anjay-travis:rockylinux-9-3.0
     env:
       CC: ${{ matrix.CC }}
       CXX: ${{ matrix.CXX }}
@@ -98,9 +117,13 @@ jobs:
       - run: dnf install -y $CC
       # Solve issues with EPERM when running dumpcap
       - run: setcap '' $(which dumpcap)
-      - run: ./devconfig --with-valgrind --without-analysis -DWITH_VALGRIND_TRACK_ORIGINS=OFF -DWITH_URL_CHECK=OFF -DWITH_IPV6=OFF
-      - run: env CC=gcc LC_ALL=C.UTF-8 make -j
-      - run: env CC=gcc LC_ALL=C.UTF-8 make check
+      - run: ./devconfig --with-valgrind --without-analysis -DWITH_VALGRIND_TRACK_ORIGINS=OFF -DWITH_IPV6=OFF
+      - run: |
+          . /venv/bin/activate
+          env CC=gcc LC_ALL=C.UTF-8 make -j
+      - run: |
+          . /venv/bin/activate
+          env CC=gcc LC_ALL=C.UTF-8 make check
     strategy:
       fail-fast: false
       matrix:
@@ -110,21 +133,16 @@ jobs:
           - CC: clang
             CXX: clang++
 
-  macOS-compilers-test:
-    runs-on: macos-14
-    env:
-      CC: ${{ matrix.CC }}
-      CXX: ${{ matrix.CXX }}
-      COMPILER_VERSION: ${{ matrix.COMPILER_VERSION }}
-      MEM_CHECK_TOOL: ${{ matrix.MEM_CHECK_TOOL }}
+  macOS-test:
+    runs-on: "${{ matrix.RUNNER }}"
     steps:
       # NOTE: v2 requires Git 2.18 for submodules, it's not present in the image
       - uses: actions/checkout@v1
         with:
           submodules: recursive
       - run: brew update
       # NOTE: try the brew install command twice to work around "brew link" errors
-      - run: INSTALL_CMD="brew install python3 openssl ${COMPILER_VERSION:+$COMPILER_VERSION}"; $INSTALL_CMD || $INSTALL_CMD
+      - run: INSTALL_CMD="brew install python3 openssl"; $INSTALL_CMD || $INSTALL_CMD
       # NOTE: Some tests don't pass on mbedTLS 3.6.2 now, so we need to install an older version
       #       Homebrew only specifiers major version of mbedTLS, so let's pin the version to 3.6.0 manually
       - run: curl -f https://raw.githubusercontent.com/Homebrew/homebrew-core/219dabf6cab172fb8b62b4d8598e016e190c3c20/Formula/m/mbedtls.rb > /tmp/mbedtls.rb
@@ -140,23 +158,19 @@ jobs:
       - run: brew install embedded/mbedtls/mbedtls
       - run: brew pin mbedtls
       # NOTE: The above command may have installed a new version of Python, that's why we launch it weirdly
-      - run: /usr/bin/env python3 -m pip install -r requirements.txt --break-system-packages
-      - run: env JAVA_HOME="$JAVA_HOME_17_X64" ./devconfig $MEM_CHECK_TOOL --without-analysis --no-examples -DWITH_VALGRIND_TRACK_ORIGINS=OFF -DWITH_URL_CHECK=OFF -DWITH_IPV6=OFF -DMBEDTLS_ROOT_DIR=/opt/homebrew/opt/mbedtls
-      - run: LC_ALL=en_US.UTF-8 make -j
-      - run: LC_ALL=en_US.UTF-8 make check
+      # NOTE: We manualy create env since devconfig does not use /usr/bin/env python3
+      - run: /usr/bin/env python3 -m venv venv
+      - run: env JAVA_HOME="$JAVA_HOME_17_X64" ./devconfig --with-asan --without-analysis --no-examples -DWITH_VALGRIND_TRACK_ORIGINS=OFF -DWITH_IPV6=OFF -DMBEDTLS_ROOT_DIR=/opt/homebrew/opt/mbedtls
+      - run: |
+          . venv/bin/activate
+          LC_ALL=en_US.UTF-8 make -j
+      - run: |
+          . venv/bin/activate
+          LC_ALL=en_US.UTF-8 make check
     strategy:
       fail-fast: false
       matrix:
         include:
-          - CC: /opt/homebrew/opt/gcc@14/bin/gcc-14
-            CXX: /opt/homebrew/opt/gcc@14/bin/g++-14
-            COMPILER_VERSION: gcc@14
-            MEM_CHECK_TOOL: --without-memcheck
-            # NOTE: llvm is temporarily disabled due to problem with header search paths
-            # - CC: /opt/homebrew/opt/llvm@20/bin/clang
-            #   CXX: /opt/homebrew/opt/llvm@20/bin/clang++
-            #   COMPILER_VERSION: llvm@20
-            #   MEM_CHECK_TOOL: --with-asan
-          - CC: cc
-            CXX: c++
-            MEM_CHECK_TOOL: --with-asan
+          - RUNNER: macos-14
+          - RUNNER: macos-15
+          - RUNNER: macos-26

.github/workflows/coverity.yml

@@ -1,4 +1,4 @@
-# Copyright 2017-2025 AVSystem <avsystem@avsystem.com>
+# Copyright 2017-2026 AVSystem <avsystem@avsystem.com>
 # AVSystem Anjay LwM2M SDK
 # All rights reserved.
 #
@@ -12,7 +12,7 @@ on:
 jobs:
   coverity:
     runs-on: ubuntu-latest
-    container: avsystemembedded/anjay-travis:ubuntu-22.04-2.2
+    container: avsystemembedded/anjay-travis:ubuntu-22.04-3.0
     env:
       # NOTE: These need to be configured in GitHub Actions GUI
       COVERITY_EMAIL: ${{ secrets.COVERITY_EMAIL }}
@@ -29,7 +29,7 @@ jobs:
           bash -c 'cd coverity_tool && \
               wget https://scan.coverity.com/download/linux64 --post-data "token=$COVERITY_SCAN_TOKEN&project=AVSystem%2FAnjay" -O coverity_tool.tgz && \
               tar xf coverity_tool.tgz'
-      - run: ./devconfig --without-analysis -DWITH_URL_CHECK=OFF -DWITH_NESTED_FUNCTION_MUTEX_LOCKS=OFF -DWITH_IPV6=OFF
+      - run: ./devconfig --without-analysis -DWITH_NESTED_FUNCTION_MUTEX_LOCKS=OFF -DWITH_IPV6=OFF
       - run: env LC_ALL=C.UTF-8 ./coverity_tool/cov-analysis*/bin/cov-build --dir cov-int make
       - run: tar zcf cov-int.tgz cov-int
       - run: |

.gitignore

@@ -36,7 +36,6 @@ anjay-*.cmake
 Doxyfile
 /doc/sphinx/source/conf.py
 tests/integration/run_tests.sh
-tests/integration/framework/nsh-lwm2m/pymbedtls/build/
 
 # other
 Makefile
@@ -57,7 +56,6 @@ __pycache__/
 *.egg-info
 *.pyc
 *.cache
-/tests/integration/framework/nsh-lwm2m/coap/pymbedtls*
 compile_commands.json
 
 /avs_commons/install
@@ -72,3 +70,12 @@ examples/*-build
 
 # Anjay persistence files
 *-persistence.dat
+
+# Python venv
+/venv/
+build/
+dist/
+*.egg-info/
+
+# py-build-cmake cache
+.py-build-cmake_cache

.gitmodules

@@ -1,10 +1,3 @@
-[submodule "tests/integration/framework/nsh-lwm2m/pymbedtls/src/pybind11"]
-	path = tests/integration/framework/nsh-lwm2m/pymbedtls/src/pybind11
-	url = https://github.com/pybind/pybind11.git
-	ignore = untracked
-[submodule "tests/integration/framework/nsh-lwm2m/powercmd"]
-	path = tests/integration/framework/nsh-lwm2m/powercmd
-	url = https://github.com/dextero/powercmd.git
 [submodule "deps/avs_commons"]
 	path = deps/avs_commons
 	url = https://github.com/AVSystem/avs_commons.git

CHANGELOG.md

@@ -1,5 +1,37 @@
 # Changelog
 
+## 3.12.0 (January 30th, 2026)
+
+### BREAKING CHANGES
+
+- PEP 668 was adopted. Using Python based tools requires a virtual environment
+  and `devconfig` script ensures it's activated.
+- Most tools from `tests/integration/framework` were extracted 
+  into `tools/test-framework-tools` directory which is being installed 
+  in venv by `devconfig`
+
+### Bugfixes
+- Fixed crash in avs_coap when block transfers are disabled and outgoing
+  message does not fit into the external output buffer.
+- (commercial version only) Fixed a bug that made it impossible to set a Master
+  Secret which length was anything other than 16 bytes (OSCORE).
+- Fixed avs_coap tests for GCC 15
+
+### Features
+- Added traffic interceptor usage to demo application.
+- (commercial version only) Made it possible to set the maximum length of the
+  Master Secret and Master Salt using the AVS_COAP_OSCORE_MASTER_SECRET_SIZE
+  and AVS_COAP_OSCORE_MASTER_SALT_SIZE options, respectively.
+- Removed experimental tags from server connection status API, IPSO objects v2
+  API, Software Management object API, CoAP Download retry API and
+  Confirmable Notification status callback API.
+
+### Improvements
+- Reworked the help menu in Anjay Demo.
+- (commercial version only) Added support for running PKCS11 integration tests
+  with OpenSSL as (D)TLS backend.
+- Migrated pymbedtls build system to pyproject.toml.
+
 ## 3.11.0 (September 26th, 2025)
 
 ### BREAKING CHANGES

CMakeLists.txt

@@ -1,4 +1,4 @@
-# Copyright 2017-2025 AVSystem <avsystem@avsystem.com>
+# Copyright 2017-2026 AVSystem <avsystem@avsystem.com>
 # AVSystem Anjay LwM2M SDK
 # All rights reserved.
 #
@@ -8,7 +8,7 @@
 cmake_minimum_required(VERSION 3.16)
 
 project(anjay C)
-set(ANJAY_VERSION "3.11.0" CACHE STRING "Anjay library version")
+set(ANJAY_VERSION "3.12.0" CACHE STRING "Anjay library version")
 set(ANJAY_BINARY_VERSION 1.0.0)
 
 set(ANJAY_SOURCE_DIR "${CMAKE_CURRENT_SOURCE_DIR}")
@@ -22,6 +22,11 @@ set(CMAKE_EXPORT_COMPILE_COMMANDS ON)
 
 include(CheckFunctionExists)
 
+if(WITH_DEMO OR WITH_INTEGRATION_TESTS)
+    # ensure Python venv is active
+    include(cmake/requirePython3venv.cmake)
+endif()
+
 # On Linux, one needs to link libdl to use dlsym(). On BSD, it is not necessary,
 # and even harmful, since libdl does not exist.
 set(CMAKE_REQUIRED_INCLUDES "dlfcn.h")
@@ -617,7 +622,7 @@ if(WITH_TEST)
     add_custom_target(check)
     add_custom_target(anjay_unit_check)
     add_dependencies(check anjay_unit_check)
-    
+
     # anjay_test
     add_executable(anjay_test EXCLUDE_FROM_ALL
                    $<TARGET_PROPERTY:anjay,SOURCES>
@@ -737,15 +742,6 @@ if(WITH_TEST)
                      toc_check
                      config_log_check)
 
-    if(EXISTS "${CMAKE_CURRENT_SOURCE_DIR}/.git")
-        option(WITH_LICENSE_TEST "Enable checking if all files have the license boilerplate" OFF)
-        if(WITH_LICENSE_TEST)
-            add_custom_target(anjay_license_check
-                              COMMAND "${CMAKE_CURRENT_SOURCE_DIR}/tools/license_headers.py"
-                              WORKING_DIRECTORY "${CMAKE_CURRENT_SOURCE_DIR}")
-            add_dependencies(anjay_unit_check anjay_license_check)
-        endif()
-    endif()
 
     # Symbol validation
     add_custom_target(symbols_check COMMAND ${CMAKE_CTEST_COMMAND} -R "'^test_.*_symbols$$'" --output-on-failure)

CONTRIBUTING.rst

@@ -1,5 +1,5 @@
 ..
-   Copyright 2017-2025 AVSystem <avsystem@avsystem.com>
+   Copyright 2017-2026 AVSystem <avsystem@avsystem.com>
    AVSystem Anjay LwM2M SDK
    All rights reserved.