Skip to content

Conversation

@57300
Copy link
Contributor

@57300 57300 commented Jul 8, 2025

manifest-pr-skip

rugeGerritsen and others added 30 commits June 16, 2025 11:00
The nRF54H20 supports a Bluetooth controller.
The HCI driver interface has changed upstream in
zephyrproject-rtos/zephyr#72323
so now we need to add it to device tree.

Signed-off-by: Rubin Gerritsen <[email protected]>
(cherry picked from commit 960a734)
By default, the BLE stack calls sent callback for ATT data when the data
is passed to BLE controller for transmission. Enabling this Kconfig
option delays calling the sent callback until data transmission is
finished by BLE controller (the callback is delayed until receiving the
num complete packets event).

Jira: NCSDK-27422

Signed-off-by: Marek Pieta <[email protected]>
(cherry picked from commit 0761c83)
The Thingy:53 enabled MCUboot and external flash by default.
Therefore, it should also enable drivers for its external
flash by default.

Signed-off-by: Sigurd Hellesvik <[email protected]>
(cherry picked from commit fead683)
Adds handling code to allow selecting the correct image slot when
using QSPI XIP in DirectXIP mode

Signed-off-by: Jamie McCrae <[email protected]>
(cherry picked from commit 5ad9110)
While Partition Manager is enabled, it manages the offset
by itself.

Signed-off-by: Andrzej Puzdrowski <[email protected]>
(cherry picked from commit 5c79bb3)
Add overlay for nrf54l15dk to enable eGPIO tests.

Signed-off-by: Jakub Zymelka <[email protected]>
Signed-off-by: Marcin Szymczyk <[email protected]>
(cherry picked from commit a609424)
…neric

-This commit prevents legacy mbed TLS configurations from being in
 conflict with PSA Configurations while using nrf_security.
-This [nrf noup] is reworked from an earlier cherry-pick of
 commit d8c96cf, but has the following
 changes:
 - Endif's relevant that is using our pattern for masking
   configs duplicated or in conflict in nrf_security
  (by using if !(NRF_SECURITY || NORDIC_SECURITY_BACKEND)) is
  made clearer by adding a comment at their corresponding endif
  (# !(NRF_SECURITY || NORDIC_SECURITY_BACKEND))
 - Changes to zephyr_init.c for entropy_dev checking for
   CONFIG_NRF_CC3XX_PLATFORM is removed as the symbol entropy_dev
   doesn't exist in this file anymore

ref: NCSDK-13503

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit d4fab1d)
-This is a [nrf noup] because PSA_WANT_GENERATE_RANDOM is a Nordic
 configuration that is not found upstream. This was previously in
 commit 5cfe575 but has been split out

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit 135006f)
-This commit is a [nrf noup] because it removes configuration options
 for cryptographic algortihms available in Mbed TLS but which is not
 actively supported in nRF Connect SDK.
 The list of algorithms removed:
 - AES CFB - Cipher Feedback block cipher
 - AES OFB - Output Feedback block cipher
 - FFDH
 - RIPEMD160
 - Aria
 - Camellia
 - DES

 The removal of these algorithms is based both on a wish to remove
 weaker cryptography and unsupported features in the products we have
 today.

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit 8f0235e)
-This is a [nrf noup] as this the upstream version of PSA crypto configs
 is generated by tooling, and there is no mechanisms to qualify
 that dependent configurations are enabled (by depends or select).
-This adds dependency-mapping between configurations in the Kconfigs
 added for PSA crypto in upstream.
-Selecting CHACHA20 key type if PSA_WANT_ALG_STREAM_CIPHER is
 enabled

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit 42d56de)
-This commit is a [nrf noup] because PSA crypto configs in upstream
 Zephyr doesn't have help-text in their configurations and we don't
 want to duplicate configurations to control the value
-This adds warning for SHA-1 and MD5 usage

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit 28c7ad7)
-This is a [nrf noup] because the upstream Zephyr is generated using
 a script and is not committed as-is as source-code. The relevant
 responsible person for this feature has received information about
 the missing configuration and this will be resolved upstream in
 Mbed TLS and will propagate down to zephyr. Once this has happened,
 this [nrf noup] can be dropped.
-Add missing PSA_WANT_KEY_TYPE_RSA_KEY_DERIVE

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit 5b4a2b0)
-PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC is internally resolved by
 Mbed TLS. It has been made promptless in a previous commit.
 Keeping this change separated since the Kconfig.psa is auto-generated
 and it would likely be a bit more complex to handle this in a
 single commit. Upstream maintainers have been notified about this
 mismatch in configurations.

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit 3839fe5)
Makes the boot banner function weak, this resolves an issue when
building with llext enabled which uses different build options
than a normal zephyr build

Signed-off-by: Jamie McCrae <[email protected]>
(cherry picked from commit 09b4446)
Although ZVFS is experimental, the warning is annoying the matter team.
Therefore, remove the experimental selection.

This may be reverted once upstream unselects experimental.

Signed-off-by: Bjarki Arge Andreasen <[email protected]>
(cherry picked from commit 9585555)
Add support for nRF91x by providing overlay configuration file.

Signed-off-by: Juha Ylinen <[email protected]>
Signed-off-by: Robert Lubos <[email protected]>
(cherry picked from commit 5e3f37c)
Make sure Wi-Fi driver is enabled in networking samples supporting Wi-Fi
when sysbuild is used.
For shields we cannot automate this, as sysbuild doesn't recognize
shields, so, Wi-Fi has to be explicitly enabled, this is done for
twister in Wi-Fi sample.

Signed-off-by: Robert Lubos <[email protected]>
Signed-off-by: Chaitanya Tata <[email protected]>
(cherry picked from commit 8ef3878)
- We don't use this mechanism in nRF Connect SDK

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit 481036f)
…nload

-We handle legacy Crypto API support specially (favoring PSA crypto)
 the tests here require MD interface to build, which needs the config
 MBEDTLS_LEGACY_CRYPTO_C to be enable to get access to

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit c193934)
-This adds crypto support for ipv6 tests by enabling
 CONFIG_MBEDTLS_LEGACY_CRYPTO_C

Signed-off-by: Frank Audun Kvamtrø <[email protected]>
(cherry picked from commit 248ec26)
Upstream certificates are RSA3K + Suite-B, they are not support yet on
nRF boards, so, generate a new certificate for both phase1 and phase2
and use them.

Signed-off-by: Chaitanya Tata <[email protected]>
Signed-off-by: Ravi Dondaputi <[email protected]>
(cherry picked from commit 84b6888)
Allow for an additional buffer reference if callback is provided. This
can be used to extend lifetime of the net buffer until the data
transmission is confirmed by ACK of the remote.

Signed-off-by: Marek Pieta <[email protected]>
(cherry picked from commit d6539f4)
If ATT sent callback is delayed until data transmission is done by BLE
controller, the transmitted buffer may have an additional reference. The
reference is used to extend lifetime of the net buffer until the data
transmission is confirmed by ACK of the remote.

send_buf function can be called multiple times, if buffer has to be
fragmented over HCI. In that case, the callback is provided as an
argument only for the last transmitted fragment. The `buf->ref == 1`
check is skipped because it's impossible to properly validate number of
references for the sent fragments if buffers may have the additional
reference.

Jira: NCSDK-28624

Signed-off-by: Marek Pieta <[email protected]>
(cherry picked from commit e589307)
The option notifies application that MCUboot has been configured
to use SHA512 for image hashing.

Signed-off-by: Dominik Ermel <[email protected]>
(cherry picked from commit 9e17253)
Adds support for images signed with SHA512.

Signed-off-by: Dominik Ermel <[email protected]>
(cherry picked from commit 7377a5c)
Increase stack size as support for SHA512 requires more data.

Signed-off-by: Dominik Ermel <[email protected]>
(cherry picked from commit 191fb02)
Add support for sysbuild 54h20 building
added nrf54h20 cpurad configuration to hci_ipc sample.

Signed-off-by: Aytürk Düzen <[email protected]>
Signed-off-by: Vinayak Kariappa Chettimada <[email protected]>
(cherry picked from commit d2f19a2)
Disable processing of extended ADV packets by mesh scanner.
This is done to prevent loss of scan time due to reception
of pointer packets while scanning for mesh packets.

Signed-off-by: Ingar Kulbrandstad <[email protected]>
(cherry picked from commit 6e14114)
This is a long-term noup patch because crypto driver support is
NCS-only for both cryptocell and CRACEN.

Set HAS_HW_NRF_CC3XX to be defined in NS build when cryptocell
is accessed through the PSA API.
We need to know which CC3XX features are available.

Set PSA as the entropy source for 54L.

PSA is the only NCS-supported interface to CRACEN.

Signed-off-by: Georgios Vasilakis <[email protected]>
Signed-off-by: Joakim Andersson <[email protected]>
Signed-off-by: Dominik Ermel <[email protected]>
Signed-off-by: Sebastian Bøe <[email protected]>
Signed-off-by: Robert Lubos <[email protected]>
Signed-off-by: Rubin Gerritsen <[email protected]>
(cherry picked from commit ffe9d59)
The SoftDevice Controller is a different controller than
the open source link layer with a different set of quirks.
It should therefore have its own device tree binding.

This commit converts the SoftDevice Controller driver
to use this new DTS binding instead of reusing the existing one.

This commit updates or adds additional overlays for
existing samples, applications and tests that were using the
open source link layer.

Signed-off-by: Rubin Gerritsen <[email protected]>
Signed-off-by: Kristoffer Rist Skøien <[email protected]>
Signed-off-by: Rafał Kuźnia <[email protected]>
(cherry picked from commit a55b00a)
alxelax and others added 2 commits July 8, 2025 10:04
… not own it

Commit adds destruction of the persisted in PSA ITS key if
mesh does not own it (zero bit in the bitmap of persisted keys).

This is not standard mesh behavior, but might happen
if something happens between removing key data in mesh and
in the crypto library (for example power off in bettwen).

Previously, mesh wasn't able to import key with gotten stuck
key id. The current fix reproduces more robust behavior.

Upstream PR #: 92780

Signed-off-by: Aleksandr Khromykh <[email protected]>
Add definition of MSPI_PORT for other platforms to make the test
generic.

Upstream PR #: 92790

Signed-off-by: Magdalena Pastula <[email protected]>
nordicjm and others added 24 commits July 9, 2025 08:54
… reset

Adds an optional boot mode field which can be used to boot into a
specific image or mode using MCUmgr's OS mgmt reset command

Signed-off-by: Jamie McCrae <[email protected]>
(cherry picked from commit 0adcf2e)
Automatically enable booting radio core if BT HCI interface is enabled.

Upstream PR #: 92787

Signed-off-by: Tomasz Chyrowicz <[email protected]>
…_len update"

This reverts commit 3c484e8.

Signed-off-by: Olivier Lesage <[email protected]>
Introduce a new bt_hci_cmd_alloc() API which only allocates a command
buffer and reserves sufficient headroom for H:4 and command headers, but
doesn't actually encode any of those headers into the buffer. Additionally,
modify bt_hci_cmd_send() and bt_hci_cmd_send_sync() so that they handle
such buffers and perform the header encoding correctly. To avoid
duplication, bt_hci_cmd_send_sync() now builds upon (i.e. calls internally)
the bt_hci_cmd_send() API.

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit b530b26)
The command buffer was incorrectly encoded due to the recent change to H:4
encoding. Instead of fixing the header offset, just use the newly
introduced bt_hci_cmd_alloc() API, since that takes care of correctly
encoding the command header when it gets sent.

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit 6c61c8c)
Use bt_hci_cmd_alloc() instead of the soon to be deprecated
bt_hci_cmd_create().

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit 2ea9605)
Use bt_hci_cmd_alloc() instead of the soon to be deprecated
bt_hci_cmd_create().

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit 47fa056)
Use bt_hci_cmd_alloc() instead of the soon to be deprecated
bt_hci_cmd_create().

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit fa0aece)
Use bt_hci_cmd_alloc() instead of the soon to be deprecated
bt_hci_cmd_create().

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit 0d47556)
Use bt_hci_cmd_alloc() instead of the soon to be deprecated
bt_hci_cmd_create().

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit e23d5a0)
Use bt_hci_cmd_alloc() instead of the soon to be deprecated
bt_hci_cmd_create().

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit 6f26436)
Use bt_hci_cmd_alloc() instead of the soon to be deprecated
bt_hci_cmd_create().

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit 354e75d)
Use bt_hci_cmd_alloc() instead of the soon to be deprecated
bt_hci_cmd_create().

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit e9f0612)
Use bt_hci_cmd_alloc() instead of the soon to be deprecated
bt_hci_cmd_create().

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit 8962129)
Use bt_hci_cmd_alloc() instead of the soon to be deprecated
bt_hci_cmd_create().

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit 3056d07)
Use bt_hci_cmd_alloc() instead of the soon to be deprecated
bt_hci_cmd_create().

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit 58fe2ab)
Use bt_hci_cmd_alloc() instead of the soon to be deprecated
bt_hci_cmd_create().

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit 187ec70)
Use bt_hci_cmd_alloc() instead of the soon to be deprecated
bt_hci_cmd_create().

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit b0bed23)
These tests have some sort of simple host implementation, which reuses the
bt_hci_cmd_create() API name, but the implementation is actually local and
something that can be made static. Change the function to be static and
rename it to be more in line with other internal functions.

Signed-off-by: Johan Hedberg <[email protected]>
(cherry picked from commit 978614a)
The new raw TX handling relies on these APIs, so, implement them for
Zephyr shim.

Signed-off-by: Chaitanya Tata <[email protected]>
(cherry picked from commit b8d31f1)
Fixes the issue of leave the packets in the pending queue till a new TX
comes.

Signed-off-by: Chaitanya Tata <[email protected]>
(cherry picked from commit ae198b8)
Monitor mode doesn't require station mode. Disabling station mode
require necessary changes to work monitor mode.

Upstream PR #: 92226

Signed-off-by: Kapil Bhatt <[email protected]>
…monitor

Disabling station mode require necessary changes to work monitor mode.

Upstream PR #: 92226

Signed-off-by: Kapil Bhatt <[email protected]>
manifest-pr-skip

Signed-off-by: Grzegorz Swiderski <[email protected]>
@57300 57300 force-pushed the remove-default-periphconf branch from cf0458f to 2cd3248 Compare July 10, 2025 12:50
@57300 57300 closed this Sep 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.