Merge branch 'project-chip:master' into master

.github/workflows/build.yaml

@@ -138,7 +138,7 @@ jobs:
         if: github.actor != 'restyled-io[bot]'
 
         container:
-            image: ghcr.io/project-chip/chip-build:54
+            image: ghcr.io/project-chip/chip-build:65
             volumes:
                 - "/:/runner-root-volume"
                 - "/tmp/log_output:/tmp/test_logs"

.github/workflows/qemu.yaml

@@ -27,7 +27,7 @@ concurrency:
 
 env:
     CHIP_NO_LOG_TIMESTAMPS: true
-    
+
 jobs:
 
     qemu-esp32:
@@ -75,12 +75,7 @@ jobs:
         name: Tizen
 
         runs-on: ubuntu-latest
-        # NOTE: job temporarely disabled as it seems flaky. The flake does not result in usable
-        #       logs so the current theory is that we run out of space. This is unusual as
-        #       larger docker images succeed at bootstrap, however it needs more investigation
-        #       to detect an exact/real root cause.
-        if: false
-        # if: github.actor != 'restyled-io[bot]'
+        if: github.actor != 'restyled-io[bot]'
 
         container:
             image: ghcr.io/project-chip/chip-build-tizen-qemu:54

.github/workflows/stale.yaml

@@ -0,0 +1,42 @@
+name: "Process Stale Issues and PRs"
+on:
+    workflow_dispatch:
+    schedule:
+        - cron: "30 1 * * *"
+
+permissions:
+    issues: write
+    pull-requests: write
+
+jobs:
+    stale:
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/stale@v9
+              with:
+                  stale-issue-message:
+                      "This issue has been automatically marked as stale because
+                      it has not had recent activity. It will be closed if no
+                      further activity occurs. Remove stale label or comment or
+                      this will be closed in 30 days."
+                  stale-pr-message:
+                      "This pull request has been automatically marked as stale
+                      because it has not had recent activity. It will be closed
+                      if no further activity occurs. Remove stale label or
+                      comment or this will be closed in 10 days."
+                  close-issue-message:
+                      "This stale issue has been automatically closed. Thank you
+                      for your contributions."
+                  close-pr-message:
+                      "This stale pull request has been automatically closed.
+                      Thank you for your contributions."
+                  days-before-issue-stale: 30
+                  days-before-issue-close: -1 # Don't close them for now
+                  days-before-pr-stale: 90
+                  days-before-pr-close: 10
+                  exempt-issue-labels:
+                      "security,blocked,cert blocker,build issue,Spec XML
+                      align,CI/CD improvements,memory"
+                  exempt-pr-labels:
+                      "security,blocked,cert blocker,build issue,Spec XML
+                      align,CI/CD improvements,memory"

.mergify.yml

@@ -1,20 +1,29 @@
 pull_request_rules:
+  - name: Label conflicting pull requests
+    description: Add a label to a pull request with conflict to spot it easily
+    conditions:
+      - conflict
+      - '-closed'
+    actions:
+      label:
+        toggle:
+          - conflict
   - name: Automatic merge on PullApprove
     conditions:
       - or:
-        - "check-success=pullapprove"
-        - label="fast track"
-      - "#approved-reviews-by>=1"
-      - "#review-threads-unresolved=0"
-      - "-draft"
-      - "label!=docker"            # Don't auto merge docker images
-      - "#check-failure=0"         # Don't auto merge with a failure
-      - "#check-pending=0"         # Don't auto merge with anything pending
-      - "check-success~=Build"     # Don't auto merge unless a build has succeeded, needed because above is true on a fresh PR before builds
+          - check-success=pullapprove
+          - label="fast track"
+      - '#approved-reviews-by>=1'
+      - '#review-threads-unresolved=0'
+      - '-draft'
+      - label!=docker
+      - '#check-failure=0'
+      - '#check-pending=0'
+      - check-success~=Build
       - or:
-        - "check-success=pullapprove"
-        - "check-skipped=pullapprove"
-        - "check-neutral=pullapprove"
+          - check-success=pullapprove
+          - check-skipped=pullapprove
+          - check-neutral=pullapprove
     actions:
       merge:
         method: squash

.restyled.yaml

@@ -72,7 +72,6 @@ exclude:
     - "scripts/tools/zap/tests/outputs/**/*" # Matches generated output 1:1
     - "examples/chef/sample_app_util/test_files/*.yaml"
     - "examples/chef/zzz_generated/**/*"
-    - "examples/platform/nxp/k32w/k32w0/scripts/demo_generated_certs/**/*"
     - "examples/tv-casting-app/darwin/MatterTvCastingBridge/MatterTvCastingBridge/zap-generated/*" # zap-generated files
     - "integrations/cloudbuild/*.yaml" # uglier long command line content
     - "scripts/run_codegen_targets.sh" # shellharden breaks for loops over command outputs

.vscode/settings.json

@@ -134,7 +134,9 @@
         "thread": "cpp",
         "variant": "cpp",
         "any": "cpp",
-        "future": "cpp"
+        "future": "cpp",
+        "list": "cpp",
+        "unordered_set": "cpp"
     },
     // Configure paths or glob patterns to exclude from file watching.
     "files.watcherExclude": {

BUILD.gn

@@ -689,23 +689,23 @@ if (current_toolchain != "${dir_pw_toolchain}/default:default") {
 
   if (enable_k32w_lighting_app_build) {
     group("k32w_lighting_app") {
-      deps = [ "${chip_root}/examples/lighting-app/nxp/k32w/k32w0/(${chip_root}/config/k32w/toolchain:k32w_lighting_app)" ]
+      deps = [ "${chip_root}/examples/lighting-app/nxp/k32w0/(${chip_root}/config/k32w/toolchain:k32w_lighting_app)" ]
     }
 
     extra_build_deps += [ ":k32w_lighting_app" ]
   }
 
   if (enable_k32w_lock_app_build) {
     group("k32w_lock_app") {
-      deps = [ "${chip_root}/examples/lock-app/nxp/k32w/k32w0/(${chip_root}/config/k32w/toolchain:k32w_lock_app)" ]
+      deps = [ "${chip_root}/examples/lock-app/nxp/k32w0/(${chip_root}/config/k32w/toolchain:k32w_lock_app)" ]
     }
 
     extra_build_deps += [ ":k32w_lock_app" ]
   }
 
   if (enable_k32w_shell_app_build) {
     group("k32w_shell_app") {
-      deps = [ "${chip_root}/examples/shell/nxp/k32w/k32w0/(${chip_root}/config/k32w/toolchain:k32w_shell_app)" ]
+      deps = [ "${chip_root}/examples/shell/nxp/k32w0/(${chip_root}/config/k32w/toolchain:k32w_shell_app)" ]
     }
 
     extra_build_deps += [ ":k32w_shell_app" ]

build/config/compiler/BUILD.gn

@@ -334,7 +334,11 @@ config("warnings_third_party") {
 }
 
 config("symbols_default") {
-  cflags = [ "-g${symbol_level}" ]
+  if (strip_symbols) {
+    cflags = [ "-s" ]
+  } else {
+    cflags = [ "-g${symbol_level}" ]
+  }
 }
 
 config("std_default") {
@@ -489,6 +493,7 @@ config("libfuzzer_fuzzing") {
 
 config("oss_fuzz") {
   cflags = string_split(getenv("CFLAGS"))
+  cflags_cc = string_split(getenv("CXXFLAGS"))
   ldflags = string_split(getenv("CXXFLAGS"))
   ldflags += [ getenv("LIB_FUZZING_ENGINE") ]
 }

build/config/compiler/compiler.gni

@@ -30,11 +30,11 @@ declare_args() {
   symbol_level = 2
 
   # Enable position independent code (-fPIC).
-  enable_pic =
-      current_os == "linux" || current_os == "mac" || current_os == "android"
+  enable_pic = current_os == "linux" || current_os == "mac" ||
+               current_os == "android" || current_os == "tizen"
 
   # Enable position independent executables (-pie).
-  enable_pie = current_os == "linux"
+  enable_pie = current_os == "linux" || current_os == "tizen"
 
   # Remove unwind tables from the binary to save space.
   exclude_unwind_tables = current_os != "android"
@@ -48,6 +48,9 @@ declare_args() {
   # enable libfuzzer
   is_libfuzzer = false
 
+  # Remove all symbol table and relocation information from the binary.
+  strip_symbols = false
+
   # Generate code coverage analysis artifacts when enabled.
   use_coverage = false
 

config/beken/BUILD.gn

@@ -21,10 +21,7 @@ import("//build_overrides/chip.gni")
 #import("${chip_root}/build/chip/tests.gni")
 
 group("beken") {
-  deps = [
-    "${chip_root}/examples/lighting-app/beken:MatterApp",
-    "${chip_root}/src/lib",
-  ]
+  deps = [ "${chip_root}/src/lib" ]
 }
 group("default") {
   deps = [ ":beken" ]

config/k32w/toolchain/BUILD.gn

@@ -20,27 +20,27 @@ import("${build_root}/toolchain/arm_gcc/arm_toolchain.gni")
 arm_toolchain("k32w_lighting_app") {
   toolchain_args = {
     current_os = "freertos"
-    import("${chip_root}/examples/lighting-app/nxp/k32w/k32w0/args.gni")
+    import("${chip_root}/examples/lighting-app/nxp/k32w0/args.gni")
   }
 }
 
 arm_toolchain("k32w_lock_app") {
   toolchain_args = {
     current_os = "freertos"
-    import("${chip_root}/examples/lock-app/nxp/k32w/k32w0/args.gni")
+    import("${chip_root}/examples/lock-app/nxp/k32w0/args.gni")
   }
 }
 
 arm_toolchain("k32w_contact_sensor_app") {
   toolchain_args = {
     current_os = "freertos"
-    import("${chip_root}/examples/contact-sensor-app/nxp/k32w/k32w0/args.gni")
+    import("${chip_root}/examples/contact-sensor-app/nxp/k32w0/args.gni")
   }
 }
 
 arm_toolchain("k32w_shell_app") {
   toolchain_args = {
     current_os = "freertos"
-    import("${chip_root}/examples/shell/nxp/k32w/k32w0/args.gni")
+    import("${chip_root}/examples/shell/nxp/k32w0/args.gni")
   }
 }