mbed-tls 4 support

Signed-off-by: Peter M <petermm@gmail.com>

Author: petermm

.github/workflows/build-and-test-macos.yaml

@@ -40,7 +40,7 @@ jobs:
       matrix:
         os: ["macos-14", "macos-15", "macos-15-intel", "macos-26"]
         otp: ["24", "25", "26", "27", "28"]
-        mbedtls: ["mbedtls@3"]
+        mbedtls: ["mbedtls@3","mbedtls@4"]
         cmake_opts_other: [""]
 
         include:

.github/workflows/build-libraries.yaml

@@ -19,6 +19,8 @@ jobs:
     runs-on: "ubuntu-22.04"
     strategy:
       fail-fast: false
+      matrix:
+        mbedtls: ["default", "mbedtls@4"]
 
     steps:
     - name: "Checkout repo"
@@ -36,10 +38,26 @@ jobs:
 
     - name: "Install deps"
       run: |
-        sudo apt install -y build-essential cmake gperf zlib1g-dev libmbedtls-dev
+        sudo apt install -y build-essential cmake gperf zlib1g-dev
+        if [[ "${{ matrix.mbedtls }}" == "default" ]]; then
+            sudo apt install -y libmbedtls-dev
+        fi
         # Get a more recent valgrind
         sudo snap install valgrind --classic
 
+    - name: "Install specific MbedTLS version"
+      if: matrix.mbedtls == 'mbedtls@4'
+      run: |
+        git clone --depth 1 --branch v4.0.0 https://github.com/Mbed-TLS/mbedtls
+        cd mbedtls
+        mkdir build
+        cd build
+        cmake -DENABLE_TESTING=OFF -DUSE_SHARED_MBEDTLS_LIBRARY=On -DCMAKE_INSTALL_PREFIX=/usr/local ..
+        make -j$(nproc)
+        sudo make install
+        sudo ldconfig
+        echo "MBEDTLS_ROOT_DIR=/usr/local" >> $GITHUB_ENV
+
     # Builder info
     - name: "System info"
       run: |
@@ -64,7 +82,7 @@ jobs:
     - name: "Build: run cmake"
       working-directory: build
       run: |
-        cmake -DCMAKE_BUILD_TYPE=RelWithDebInfo ..
+        cmake -DCMAKE_BUILD_TYPE=RelWithDebInfo ${MBEDTLS_ROOT_DIR:+-DMBEDTLS_ROOT_DIR=$MBEDTLS_ROOT_DIR} ..
 
     - name: "Build: run make"
       working-directory: build
@@ -122,7 +140,7 @@ jobs:
 
     - name: Release
       uses: softprops/action-gh-release@v1
-      if: startsWith(github.ref, 'refs/tags/')
+      if: startsWith(github.ref, 'refs/tags/') && matrix.mbedtls == 'default'
       with:
         draft: true
         fail_on_unmatched_files: true

.github/workflows/esp32-simtest.yaml

@@ -12,7 +12,7 @@ on:
     paths:
       - ".github/workflows/esp32-simtest.yaml"
       - "CMakeLists.txt"
-      - 'CMakeModules/**'
+      - "CMakeModules/**"
       - "libs/**"
       - "src/platforms/esp32/**"
       - "src/platforms/esp32/**/**"
@@ -22,7 +22,7 @@ on:
     paths:
       - ".github/workflows/esp32-simtest.yaml"
       - "CMakeLists.txt"
-      - 'CMakeModules/**'
+      - "CMakeModules/**"
       - "libs/**"
       - "src/platforms/esp32/**"
       - "src/platforms/esp32/**/**"
@@ -78,9 +78,9 @@ jobs:
             "esp32c3",
             "esp32c5",
             "esp32c6",
-            "esp32h2"
+            "esp32h2",
           ]
-        idf-version: ${{ ((contains(github.event.head_commit.message, 'full_sim_test')||contains(github.event.pull_request.title, 'full_sim_test')) &&  fromJSON('["v5.1.6", "v5.2.6", "v5.3.4", "v5.4.3", "v5.5.2"]')) || fromJSON('["v5.5.2"]') }}
+        idf-version: ${{ ((contains(github.event.head_commit.message, 'full_sim_test')||contains(github.event.pull_request.title, 'full_sim_test')) &&  fromJSON('["v5.1.6", "v5.2.6", "v5.3.4", "v5.4.3", "v5.5.2"]')) || fromJSON('["latest"]') }}
         exclude:
           - esp-idf-target: "esp32p4"
             idf-version: "v5.1.6"