Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1129 commits
Select commit Hold shift + click to select a range
b577aaa
security/intel/cbnt/measurement.c: support MTL and newer
SergiiDmytruk Aug 20, 2025
fe73350
configs/config.hardkernel_odroid_h4: bump to v0.9.1-rc3
macpijan Aug 22, 2025
dcd76be
configs/config.hardkernel_odroid_h4_netcard: Bump to v0.9.1-rc3
miczyg1 Aug 22, 2025
831ace5
configs/config.protectli_v*: use the black empty logo
filipleple Aug 1, 2025
4f76f7f
build.sh: protectli: add default logo
mkopec Mar 28, 2025
1eaca2b
configs/config.protectli_vp2430: bump version to v0.9.0-rc6
mkopec Mar 28, 2025
f079fb9
configs/config.protectli_vp2430: Disable 1G pages and bump to rc7
filipleple Apr 18, 2025
a9ebc5c
configs/config.protectli_vp2430: bump version to v0.9.0
mkopec Apr 30, 2025
b2883ee
configs/config.protectli_vp2440: remove Intel ME options
filipleple Aug 1, 2025
4974caf
mainboard/protectli/vault_adl_n: disable unused devices and params
filipleple Aug 4, 2025
36579d5
mb/protectli/vault_adl_n/Kconfig: disable S3 sleep
filipleple Aug 14, 2025
f4f3afd
configs/config.protectli_vp2440: Disable 1G pages
filipleple Aug 14, 2025
58c33de
configs/config.protectli_vp2440: bump to rc4
filipleple Aug 14, 2025
71c1651
mb/protectli/vault_adl_n/romstage_fsp_params.c: remove unnecessary ch…
filipleple Aug 20, 2025
b326fa7
3rdparty/dasharo-blobs: update to origin/main
filipleple Aug 25, 2025
6d16357
configs/config.protectli_vp2440: bump version to v0.9.0
filipleple Aug 25, 2025
05872a3
capsule.sh: name capsule consistently with ROMs built by build.sh
wiktormowinski Aug 25, 2025
fdea68a
configs/config.novacustom_nuc_box: bump up to v0.9.0
filipleple Aug 26, 2025
3897e74
mb/novacustom/mtl-h: Clean up GPIO tables
mkopec Aug 28, 2025
7c66d48
payloads/edk2/Kconfig.dasharo: bump EDK for SMMSTORE recovery
SergiiDmytruk Aug 28, 2025
5da61ef
drivers/crb/tis.c: reserve TPM MMIO address range
SergiiDmytruk Aug 31, 2025
26c7344
payloads/edk2/Kconfig.dasharo: bump EDK for TPM detection workaround
SergiiDmytruk Aug 31, 2025
00e8331
configs/config.protectli_vault_jsl_v1*: bump to v0.9.4-rc3
SergiiDmytruk Sep 1, 2025
eecfbfc
payloads/external/iPXE/Makefile: bump revision for i219 fix
filipleple Aug 21, 2025
dd51660
soc/intel/cmn/blk/graphics: ensure framebuffer is allocated <4G
filipleple Aug 26, 2025
8da053f
soc/intel/cmn/blk/i2c: ensure resources are allocated <4G
filipleple Aug 26, 2025
495ff2f
soc/intel/cmn/blk/cse/cse.c: ensure resources are allocated <4G
filipleple Aug 26, 2025
872d9bf
src/mainboard/novacustom/mtl-h/variants/*/gpio.c: allow USB-PD EEPROM…
filipleple Aug 28, 2025
7f6ebd1
configs/config.novacustom_v540tu: bump up to rc6
filipleple Aug 21, 2025
149992c
soc/intel/alderlake/fsp_params.c: Fix CPU features programming on S3 …
miczyg1 Sep 2, 2025
4b58775
payloads/external/edk2/Kconfig.dasharo: Bump edk2 rev to fix input drain
miczyg1 Sep 2, 2025
60b2a9a
vc/dasharo/options.h: Expose descriptor writeability flag as EFI var
mkopec Sep 1, 2025
e1c904d
vc/dasharo/options.c: Don't enable HMRFPO on capsule update
mkopec Sep 2, 2025
7d10ea6
configs/config.hardkernel_odroid_h4: Bump to v0.9.1
miczyg1 Sep 2, 2025
c1c7f92
configs/config.protectli_vault_jsl_v1*: bump to v0.9.4-rc4
SergiiDmytruk Sep 2, 2025
5feb3fa
configs/config.novacustom_v5*: bump to rc6
mkopec Sep 3, 2025
69a0c47
mb/asrock: Add SPR 1S server board ASRock Rack SPC741D8-2L2T/BCM
May 15, 2025
8a2323a
3rdparty/fsp: update for working EagleStream FSP
mkopec Sep 8, 2025
6a8c934
soc/intel/xeon-sp/spr: Hook up public FSP bin and headers
ArthurHeymans Feb 7, 2024
95a235f
soc/intel/cmn/blk/lpc/lpc_def.h: Add ESPI_CS1_ENABLE definition
mkopec Sep 10, 2025
6be1337
mb/asrock/spc741d8/bootblock.c: Enable BMC on eSPI CS1#
mkopec Sep 10, 2025
7a959a0
configs/config.asrock_spc741d8: Add Dasharo defconfig
mkopec Jul 24, 2025
f1b989b
3rdparty/dasharo-blobs: bump for SPC741D8 blobs
mkopec Sep 10, 2025
ccd1a5e
configs/config.asrock_spc741d8: Use blobs from dasharo-blobs
mkopec Sep 10, 2025
01b3ef0
configs: Regenerate defconfigs for Dasharo platforms
mkopec Sep 10, 2025
da77989
configs/config.asrock_spc741d8: Set CONFIG_LOCALVERSION
mkopec Sep 10, 2025
ebec5e1
build.sh: Add ASRock Rack SPC741D8-2L2T/BCM support
mkopec Sep 10, 2025
3011159
.github/workflows/build.yml: build ASRock Rack SPC741D8-2L2T/BCM
mkopec Sep 10, 2025
7ed3d58
mb/asrock/spc741d8/Kconfig: Enable Intel SPI block
mkopec Sep 10, 2025
c966d78
configs/config.asrock_spc741d8: Enable SMM_BWP
mkopec Sep 10, 2025
b3743b6
configs/config.asrock_spc741d8: reduce logging, enable edk2 cbmem log…
mkopec Sep 10, 2025
70778c2
configs/config.asrock_spc741d8: enable Dasharo logo
mkopec Sep 10, 2025
f65fa65
build.sh: Fix indentation of ASRock Rack helptext
mkopec Sep 10, 2025
9588952
.github/workflows/build.yml: Fix asrock rack build command
mkopec Sep 11, 2025
b55921c
build.sh: Fix ASRock Rack helptext alignment
mkopec Sep 11, 2025
d74a38f
tag-check.yml: Add CI workflow
philipanda Sep 9, 2025
5b5b0ad
tag-check.yml: Consistent print formatting
philipanda Sep 10, 2025
a72e5ac
tag-check.yml: remove redundant tag fetches
philipanda Sep 10, 2025
5e2741e
configs/config.asrock_spc741d8: Enable more Dasharo features
mkopec Sep 11, 2025
75f77aa
configs/config.asrock_spc741d8: bump to rc2
mkopec Sep 11, 2025
253809a
soc/intel/xeon_sp/spr/Kconfig: define max CPU temperature
mkopec Sep 11, 2025
2b121cc
Revert "soc/intel/xeon_sp/spr/Kconfig: define max CPU temperature"
mkopec Sep 12, 2025
30c9224
configs/config.asrock_spc741d8: disable CPU throttling option
mkopec Sep 12, 2025
b440295
configs/config.asrock_spc741d8: bump to rc3
mkopec Sep 12, 2025
20827de
configs/config.novacustom_v5*: bump to rc7
mkopec Sep 12, 2025
4fe6eaf
payloads/external/edk2/Kconfig.dasharo: bump for EFI var attribute fix
mkopec Sep 12, 2025
0826846
mb/protectli/vault_jsl/mainboard.c: don't report LANs via SMBIOS Type 41
SergiiDmytruk Sep 14, 2025
22e4349
src/include/smbios.h: fix SMBIOS_DEVICE_TYPE_COUNT
SergiiDmytruk Sep 14, 2025
91420db
configs/config.novacustom_v5.0tu: bump to 1.0.0
mkopec Sep 16, 2025
ff859fa
configs/config.asrock_spc741d8: disable power and ME submenus
mkopec Sep 16, 2025
6d5ff6a
mb/asrock/spc741d8/board.fmd: add BOOTSPLASH region
mkopec Sep 16, 2025
5107f9c
configs/config.asrock_spc741d8: bump to rc4
mkopec Sep 16, 2025
c362a0e
drivers/pc80/tpm/tis.c: Obtain PCI device path from domain
mkopec Sep 17, 2025
e3a739f
configs/config.msi_ms7d25: Bump to v1.1.5-rc1
miczyg1 Sep 16, 2025
500c7d9
configs/config.msi_ms7e06: Bump to v0.9.3-rc1
miczyg1 Sep 16, 2025
7cfe4f9
configs/config.msi_ms7d25_ddr4: Disable PCIe hotplug for consistency
miczyg1 Sep 17, 2025
36ba9d8
configs/config.msi_ms7d25: Bump to v1.1.5
miczyg1 Sep 17, 2025
8cd61b8
configs/config.msi_ms7e06: Bump to v0.9.3
miczyg1 Sep 17, 2025
cee8ddf
configs/config.asrock_spc741d8: bump to non-rc
mkopec Sep 18, 2025
6e197f5
config.novacustom_v5*: disable DMA protection option
filipleple Sep 10, 2025
6db1ef3
payloads/edk2/Kconfig.dasharo: bump EDK to disable MMX and SSE
SergiiDmytruk Sep 26, 2025
040f1e6
build.yml: Add a job for building nucbox
philipanda Aug 22, 2025
a14f742
.github/workflows/build.yml: fix build_novacustom dependency
filipleple Oct 1, 2025
d1bcdd1
.github/workflows/build.yml: don't look for EC for NUC BOX
filipleple Oct 1, 2025
8311312
configs/config.protectli_vault_jsl_*: bump up to rc5
filipleple Oct 1, 2025
17c0381
mb/novacustom/mtl-h/variants/dgpu/overridetree.cb: Fix dGPU not comin…
mkopec Oct 2, 2025
bc1ccfd
configs/config.novacustom_v5.0tu: bump version to v1.0.1-rc1
mkopec Oct 3, 2025
0bb89b5
configs/config.novacustom_v5.0tnx: bump version to v1.0.0-rc8
mkopec Oct 3, 2025
4eed42d
.github/scripts/capsule-lint.sh: fix hex->dec conversion
SergiiDmytruk Oct 3, 2025
344cb44
src/mb/protectli/vault_cml/mainboard.c: add VP4651
filipleple Oct 10, 2025
e088898
configs/config.novacustom_nv4x_adl: CBFS allow unverified decompression
Syquel Sep 10, 2025
62fc4f5
configs/config.novacustom_v5*: unset boot resolution, set setup menu …
mkopec Oct 16, 2025
487fdca
mb/{novacustom,clevo}: Bump SMMSTORE size to 512K
mkopec Oct 16, 2025
c0d2051
payloads/external/edk2/Kconfig.dasharo: bump for varstore calculation…
mkopec Oct 17, 2025
279a9aa
util/smmstoretool: Support other block sizes
benjamindoron Jul 11, 2025
9174358
src/Kconfig: add bootsplash region file path
filipleple Oct 1, 2025
fa6e69f
Makefile: add BOOTSPLASH region logo
filipleple Sep 11, 2025
5e8ac19
build.sh: don't patch the Protectli logo
filipleple Sep 11, 2025
06162ba
ec/dasharo/ec: Enable PS/2 probing
mkopec Oct 21, 2025
1e6a33d
mb/{clevo,novacustom}: enable debug SMI
mkopec Oct 24, 2025
74be0cd
configs/config.protectli_vp66xx: bump to rc2
filipleple Oct 28, 2025
49ff9e6
mb/novacustom/mtl-h: Add per-variant HDA subsystem IDs
mkopec Oct 28, 2025
c1c7940
drivers/pc80/tpm/tis.c: fix TPM ACPI device path again
mkopec Oct 21, 2025
ebe6b5a
security/intel: Split out ACM support from TXT directory
mkopec Oct 28, 2025
a57a691
security/intel/cbnt/Kconfig: Don't select Intel TXT
mkopec Oct 28, 2025
9dbfb0d
security/intel/cbnt/logging.c: Add CBnT version of intel_txt_processo…
mkopec Oct 28, 2025
2d268d4
configs: Regenerate defconfigs for Dasharo platforms
mkopec Oct 29, 2025
467b051
configs/config.novacustom_v5*: bump RC numbers
mkopec Nov 3, 2025
b9af8eb
NV4x_Adl bump defconfig to v1.8.0-rc4
philipanda Nov 5, 2025
431a1d1
ns5x_adl bump defconfig to v1.8.0-rc4
philipanda Nov 5, 2025
4cef6a3
pcengines_uefi_apu2 defconfig version bump to v0.9.1-rc3
DonVasyl Nov 6, 2025
68dc2a4
pcengines_uefi_apu3, 4, 6 defconfig version bump to v0.9.1-rc3
DonVasyl Nov 6, 2025
5bdb3f4
Revert "soc/alderlake/Makefile.mk: use microcode from dasharo-blobs"
Tonux599 Nov 12, 2025
11add38
intel-microcode: update to microcode-20251111
Tonux599 Nov 12, 2025
588dad2
payloads/external/edk2/Kconfig.dasharo: bump EDK2 for TPM multibank d…
filipleple Nov 7, 2025
6e96f19
configs/config.protectli_vault_jsl_*: bump version to v0.9.4-rc6
filipleple Nov 14, 2025
217612e
pcengines_uefi_apu2, 3, 4, 6 defconfig version bump to v0.9.1
DonVasyl Nov 20, 2025
3bff2c5
mb/protectli/vault_adl_n/variants/vp2440/overridetree.cb: disable ASP…
mkopec Nov 24, 2025
e26b10e
configs/config.protectli_vp2440: bump version number to v0.9.1-rc1
mkopec Nov 24, 2025
d98362e
src/mainboard/protectli/vault_jsl/mainboard.c: Disable ASPM for Wi-Fi…
mkopec Nov 25, 2025
43c5721
configs/config.protectli_vault_jsl_v1*: bump RC number to 7
mkopec Nov 25, 2025
2baf6f6
payloads/external/edk2/Kconfig.dasharo: bump for fused laptop update fix
mkopec Dec 3, 2025
0bc8495
configs/config.novacustom_v5*: bump to next RC
mkopec Dec 3, 2025
5337771
config.novacustom_ns5x_adl & nv4x_adl: version bump to 1.8.0-rc5
DonVasyl Dec 12, 2025
2f7fcc8
ns5x_adl & nv4x_adl: CONFIG_DRIVERS_EFI_MAIN_FW_VERSION & LSV bump.
DonVasyl Dec 12, 2025
270ea70
configs/config.protectli_vault_jsl_*: bump to non-rc
filipleple Dec 12, 2025
5bd5381
soc/intel: Add function to report ME FWSTS in SMBIOS
miczyg1 Dec 31, 2023
1ac3d12
mb/novacustom/mtl-h/ramstage.c: Generate SMBIOS table with ME FWSTS
mkopec Dec 9, 2025
dc779c4
payloads/external/edk2/Kconfig.dasharo: bump rev for BtG key checking
mkopec Dec 9, 2025
9de28ad
src/mainboard/protectli/vault_adl_p/devicetree.cb: add usb wake
wiktormowinski Dec 9, 2025
f0d9939
configs/config.protectli_vp66xx: enable ME
wiktormowinski Dec 9, 2025
61fbb24
src/mainboard/protectli/vault_adl_p/devicetree.cb: enable wake on eth
wiktormowinski Dec 10, 2025
3d2a284
src/mainboard/protectli/vault_adl_p/devicetree.cb:add all 3 ports
wiktormowinski Dec 18, 2025
b5b8c81
configs/config.protectli_vp66xx: bump to rc3
wiktormowinski Dec 19, 2025
c504b65
vendorcode/dasharo/options.c: extract fum_is_active()
SergiiDmytruk Jan 6, 2026
86ae818
vendor/dasharo/options.c: introduce "disk capsules" boot
SergiiDmytruk Jan 6, 2026
d4ca178
lib/coreboot_table: report "disk capsules" boot in CBMEM
SergiiDmytruk Dec 31, 2025
73c145e
drivers/efi/capsules.c: enable capsule access for "disc capsules" boot
SergiiDmytruk Dec 31, 2025
8f8f6e6
payloads/edk2/Kconfig.dasharo: bump EDK for "immediate" on-disk capsules
SergiiDmytruk Jan 6, 2026
45f5034
mb/hardkernel/odroid-h4/mainboard.c: generate SMBIOS table with ME FWSTS
SergiiDmytruk Jan 7, 2026
3ea91b8
payloads/edk2: add EDK2_CAPSULE_ON_DISK_SUPPORT option
SergiiDmytruk Jan 7, 2026
8c3789c
configs/config.msi_*: enable EDK2_CAPSULE_ON_DISK_SUPPORT
SergiiDmytruk Jan 7, 2026
1d9783f
security/tpm/tss/tcg-2.0/tss: move tpm2_get_capability_pcrs() here
SergiiDmytruk Nov 30, 2025
f914321
security/tpm: prepare API for multiple active banks
SergiiDmytruk Dec 1, 2025
0d078b0
security/tpm/tss/tcg-2.0: enable extending multiple PCR banks
SergiiDmytruk Dec 12, 2025
e30e24d
security/tpm: stop using fixed-size entries in TPM 2.0 log
SergiiDmytruk Dec 13, 2025
43d9efb
security/intel/cbnt/measurement.c: extract measurement functions
SergiiDmytruk Dec 14, 2025
06a919b
security/intel/cbnt/measurement.c: support multiple PCR banks
SergiiDmytruk Dec 15, 2025
194f4ca
security/vboot/tpm_common.c: support multiple banks
SergiiDmytruk Dec 15, 2025
3bb636b
lib/cbfs.c,security/tpm/tspi: support multiple banks
SergiiDmytruk Dec 15, 2025
e4f7fa4
security/tpm: detect and use all active PCR banks
SergiiDmytruk Dec 15, 2025
a7bd2ea
payloads/edk2: add EDK2_SHOW_CAPSULE_REPORT option
SergiiDmytruk Jan 15, 2026
9dc69c5
configs/config.msi_*: enable EDK2_SHOW_CAPSULE_REPORT
SergiiDmytruk Jan 15, 2026
2efa30b
payloads/edk2/Kconfig.dasharo: bump EDK for capsule results dialog
SergiiDmytruk Jan 15, 2026
a3897ac
mb/protectli/vault_adl_n: vp2440: reenable ASPM and disable clk gating
mkopec Jan 20, 2026
7141c82
configs/config.protectli_vp2440: bump to v0.9.1-rc2
mkopec Jan 23, 2026
cffafc0
ifdtool: Add set top swap size PCH strap subcommand
philipanda Oct 6, 2025
6cd2a2b
ifittool: allow adding files from a separate region
filipleple Oct 16, 2025
1338bb2
intel soc,southbridge: Add Kconfig to set TSBS in IFD during build
philipanda Oct 9, 2025
a76884d
Makefile.mk: separate bootblocks into BOOTBLOCK and TOPSWAP
filipleple Oct 17, 2025
d53f711
src/southbridge/intel/common/firmware/Makefile.mk: fix after cherrypick
filipleple Nov 18, 2025
6387a57
soc/intel/common/block/rtc/rtc.c: control Top Swap via CMOS option
filipleple Nov 21, 2025
efb6a7d
soc/intel/common/block/rtc/rtc.c: Top Swap: add Slot B selection mech…
filipleple Nov 21, 2025
45465bb
sb/intel/common/firmware/Makefile.mk: fix INTEL_IFD_SET_TOP_SWAP_BOOT…
SergiiDmytruk Dec 8, 2025
06cf949
src/Kconfig: add MAINBOARD_NEEDS_CMOS_OPTIONS
SergiiDmytruk Dec 9, 2025
29b4a6e
cpu/intel/fit/Makefile.mk: make FIT in TOPSWAP point at MCU in COREBO…
SergiiDmytruk Dec 9, 2025
d96d6b7
Makefile.mk,cpu/intel/fit/Makefile.mk: introduce CBFS_REGIONS
SergiiDmytruk Dec 9, 2025
315b6d1
Makefile.mk: don't add bootblock after other files
SergiiDmytruk Dec 9, 2025
e8edcf0
security/lockdown/lockdown.c: option to lock COREBOOT and BOOTBLOCK
filipleple Dec 8, 2025
d6065d7
CBFS verification: support Top Swap redundancy
philipanda Dec 10, 2025
8a79ad1
src/mainboard/protectli/vault_adl_p/: Redundancy configuration
filipleple Nov 13, 2025
c9a3f7c
src/mainboard/protectli/vault_adl_p/Kconfig: cleanup after redundancy
filipleple Jan 20, 2026
10e9b41
src/mainboard/protectli/vault_adl_p/Kconfig: Capsule Update config
filipleple Nov 13, 2025
877f1da
soc/intel/common/block: build rtc into postcar
filipleple Jan 21, 2026
8a63e17
configs/config.protectli_vp66xx: unset ME HAP disable
filipleple Jan 21, 2026
b5848f9
src/lib/cbfs.c: fix cbfs_fmap_region_hint() call
filipleple Jan 21, 2026
5142035
mainboard/protectli/vault_adl_p/Kconfig: remove duplicate flag
filipleple Jan 23, 2026
e8941b3
src/lib/cbfs.c: Add more helpers for unverified areas
mkopec Jan 13, 2026
58e4479
security/intel/txt: load TXT ACMs from BOOTBLOCK region if redundancy
mkopec Jan 13, 2026
be3ac2f
security/intel/acm/Makefile.mk: add ACMs to appropriate redundancy re…
mkopec Dec 1, 2025
61db5ed
protectli/vault_adl_p/cmos.layout: define CBNT CMOS data
mkopec Jan 13, 2026
99c4344
security/intel/acm/Makefile.mk: Fix including ACMs in topswap regions
mkopec Jan 13, 2026
707660a
security/intel/cbnt/Makefile.mk: include manifests in topswap blocks
mkopec Jan 13, 2026
086d893
mb/protectli/vault_adl_p: enable Boot Guard and add fixes for ACM pla…
mkopec Jan 13, 2026
d6059b3
security/intel/cbnt/Makefile.mk: add KM to TS FIT
mkopec Jan 14, 2026
1022543
mb/protectli/vault_adl_p/romstage_fsp_params.c: map BIOS ACM properly…
mkopec Jan 14, 2026
efa239c
cpu/intel/fit/Makefile.mk: make TS FIT point to ucode in slot B
mkopec Jan 14, 2026
cde0a4b
util/cbfstool/ifittool.c: Use relative addresses when adding FIT entries
mkopec Jan 14, 2026
db7d338
lib/cbfs.c: cbfs_unverified_area_lookup: add missing return
mkopec Jan 19, 2026
81a6626
security/intel/cbnt/Makefile.mk: Place BPM in topswap blocks only if …
mkopec Jan 19, 2026
25bd783
security/intel/txt/ramstage.c: don't unconditionally map ACM from boo…
mkopec Jan 19, 2026
3b152fa
configs/config.protectli_vp66xx: enable CBnT
mkopec Jan 21, 2026
28b2a89
security/intel/cbnt/Makefile.mk: Place KM in topswap blocks only if r…
mkopec Jan 21, 2026
9221df9
cpu/intel/fit/Makefile.mk: set TS_MCU_REGION=COREBOOT_TS only once
mkopec Jan 21, 2026
12c12eb
mb/protectli/vault_adl_p/top_swap.fmd: set TSBS size to 1M
mkopec Jan 21, 2026
aedffff
configs/config.protectli_vp66xx: set TSBS size and enable CBnT logging
mkopec Jan 21, 2026
84767f7
mb/protectli/vault_adl_p/Kconfig: set default TSBB size to 1M
mkopec Jan 22, 2026
a0a41c9
mb/protectli/vault_adl_p/top_swap.fmd: rearrange to fill space
mkopec Jan 22, 2026
e5aa7af
security/intel: drop redundant TS region definitions
mkopec Jan 22, 2026
00b6cf7
configs/config.protectli_vp66xx: enable CBnT stauts menu
mkopec Jan 23, 2026
7d8567b
configs/config.protectli_vp66xx: bump to rc4
filipleple Jan 23, 2026
020318e
configs/config.novacustom_v5*0tnx: bump version to final v1.0.0
mkopec Jan 28, 2026
1d07968
configs/config.novacustom_v5*0tu: bump version to final v1.0.1
mkopec Jan 28, 2026
c7bf17c
drivers/efi/capsules.c: auto-set attempt_slot_b on capsule detection
filipleple Jan 28, 2026
774ba50
payloads/external/edk2/Kconfig.dasharo: bump for BtG KM check
mkopec Feb 5, 2026
33cf8a7
mb/protectli/vault_adl_n/var/vp2440: disable CLKREQ on I226
mkopec Feb 6, 2026
db4f742
configs/config.protectli_vp2440: Bump to rc3
mkopec Feb 6, 2026
8446aad
soc/intel/meteorlake: Use Arrow Lake FSP
Sean-StarLabs Oct 19, 2025
4afbb09
3rdparty/fsp: Update for ArrowLakeUH
dancesWithMachines Feb 4, 2026
241d435
nuc_box/kconfig: Use Arrow Lake FSP
dancesWithMachines Feb 4, 2026
a4dd840
mb/novacustom/mtl-h: Use ARL-UH FSP
mkopec Feb 6, 2026
eeacbc3
[automated change] Update µcode 2026-02-10
mkopec Feb 11, 2026
c89083c
vc/dasharo/options.c: Use the FUM Request variable for determining FUM
mkopec Feb 9, 2026
4ef3103
payloads/external/edk2/Kconfig.dasharo: Bump for FUM fixes
mkopec Feb 9, 2026
d46f261
payloads/external/edk2/Kconfig.dasharo: bump for BB update fix
mkopec Feb 10, 2026
459a846
configs/config.hardkernel_odroid_h4*: Bump version to v0.9.2-rc1
mkopec Feb 10, 2026
3730ed8
mb/novacustom/mtl-h: Bump Energy Performance Preference to 45%
mkopec Feb 12, 2026
4db0b0a
mb/clevo/adl-p/acpi/mainboard.asl: add GPE 6B handling
filipleple Feb 11, 2026
08b0935
clevo/adl-p/Kconfig: build nv4x_adl with IoT FSP
filipleple Feb 17, 2026
e7c7699
edk2/Kconfig.dasharo: bump revision for nv4x_adl fixes
filipleple Feb 12, 2026
e617bc6
configs/config.novacustom_n*x_adl: bump to rc6
filipleple Feb 19, 2026
4e46317
Revert "drivers/efi/capsules.c: auto-set attempt_slot_b on capsule de…
mkopec Feb 20, 2026
3c0c468
payloads/external/edk2/Kconfig.dasharo: bump for attempt_slot_b setting
mkopec Feb 20, 2026
b6f2a14
configs/config.protectli_vp66xx: bump version to rc5
mkopec Feb 20, 2026
f214c26
Make BIOS Lock work with all BOOTMEDIA_LOCK types
mkopec Feb 20, 2026
b28eba6
configs/config.protectli_vp66xx: enable SMM_BWP
mkopec Feb 24, 2026
8bdeada
3rdparty/dasharo-blobs: Update for VP66xx ME v16.1.40.2768
mkopec Feb 25, 2026
ce45208
src/mainboard/clevo/adl-p/: move mainboard_configure_gpios(); earlier
filipleple Feb 24, 2026
5efdb5a
src/security/intel/acm: add BIOSACM stub to reserve CBFS space
filipleple Feb 25, 2026
22c38c7
configs/config.novacustom_n*x_adl: bump to rc7
filipleple Feb 24, 2026
fa9eb76
security/intel/cbnt/measurement.c: fix PCR-0 hash missing BPM
filipleple Feb 26, 2026
1520908
configs/config.novacustom_n*x_adl: bump to rc8
filipleple Feb 27, 2026
857372d
security/intel/acm/Makefile.mk: add ACM's to both FIT tables
filipleple Mar 2, 2026
6a19c7f
[automated change] Update µcode 2026-02-27
mkopec Mar 2, 2026
307f550
configs/config.protectli_vp66xx: bump to rc6
mkopec Feb 27, 2026
eea22d9
src/security/tpm: add support for getting the type of event from log
mkopec Mar 4, 2026
5db5cf9
src/security/tpm/tspi/crtm.c: skip EV_NO_ACTION events when measuring…
mkopec Mar 4, 2026
5feb2ad
mb/protectli/vault_adl_p: Add CMOS default
mkopec Mar 16, 2026
5e223bb
configs/config.protectli_vp66xx: bump to rc7
mkopec Mar 16, 2026
321a8ab
configs/config.novacustom_ns5x_adl: bump to rc9, fix logo
filipleple Mar 18, 2026
1688ec2
src/sbom: extend for Dasharo components
filipleple Mar 10, 2026
4ddf4fe
sbom/Makefile.mk: fix build in a worktree
SergiiDmytruk Mar 14, 2026
71451b9
src/sbom: review amendments
filipleple Mar 16, 2026
cf7f668
src/sbom: guarantee left-to-right processing
filipleple Mar 17, 2026
7630a13
src/sbom: add iPXE revision to SBOM
filipleple Mar 18, 2026
ebb924b
Makefile,sbom/Makefile.mk: note that `make sbom` is problematic
SergiiDmytruk Mar 18, 2026
51ef724
configs/config.novacustom_ns5x_adl: bump to rc9
mkopec Mar 24, 2026
281a7fe
configs/config.novacustom_n*x_adl: bump to final version no
mkopec Mar 26, 2026
22d712d
configs/config.dell_optiplex_9010_sff_uefi*: Enable Resizable BAR
mkopec Mar 18, 2026
2301946
mainboard/dell: clarify OptiPlex 7010/9010 SFF naming
Apr 15, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
3 changes: 3 additions & 0 deletions .codespellrc
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
[codespell]
exclude-file = .codespellx
ignore-words-list = "FPT,FTP,fpt,ftp"
Empty file added .codespellx
Empty file.
16 changes: 16 additions & 0 deletions .conform.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
---
policies:
- type: commit
spec:
header:
length: 80
imperative: false
invalidLastCharacters: .
body:
required: false
dco: true
gpg:
required: true
spellcheck:
locale: US
maximumOfOneCommit: false
87 changes: 87 additions & 0 deletions .github/scripts/capsule-lint.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,87 @@
#!/bin/bash

function get_str() {
local cfg=$1
local name=$2
sed -n 's/^'"$name"'="\(.*\)"$/\1/p' "$cfg"
}

function get_hex() {
local cfg=$1
local name=$2
sed -n 's/^'"$name"'=\(.*\)$/\1/p' "$cfg"
}

function hex_to_ver_str() {
local hex=$1

local major=${hex:2:2}
local minor=${hex:4:2}
local bugfix=${hex:6:2}
local rc=${hex:8:2}

local ver="v$((0x$major)).$((0x$minor)).$((0x$bugfix))"
if [ "$((0x$rc))" -lt 128 ]; then
ver="$ver-rc$((0x$rc))"
fi
echo "$ver"
}

if [ ! -d configs ]; then
echo "error: $(basename "$0") should be run from the root of coreboot's tree"
exit 1
fi

declare -A guids
fail=0

mapfile -t configs < <(grep -l 'EFI_UPDATE_CAPSULE' configs/config.*)
for c in "${configs[@]}"; do
local_ver=$(get_str "$c" 'CONFIG_LOCALVERSION')

guid=$(get_str "$c" 'CONFIG_DRIVERS_EFI_MAIN_FW_GUID')
ver=$(get_hex "$c" 'CONFIG_DRIVERS_EFI_MAIN_FW_VERSION')
lsv=$(get_hex "$c" 'CONFIG_DRIVERS_EFI_MAIN_FW_LSV')

# convert to lower case as normalization
guid=${guid,,*}
# remove common prefix to shorten error messages
c=${c##*/}

if [ -z "$guid" ]; then
echo "$c: missing CONFIG_DRIVERS_EFI_MAIN_FW_GUID"
fail=1
elif [ -n "${guids["$guid"]}" ]; then
echo "$c: duplicated CONFIG_DRIVERS_EFI_MAIN_FW_GUID value ($guid)"
echo "${c//?/ } also appears in ${guids["$guid"]}"
fail=1
else
guids["$guid"]=$c
fi

if [ -z "$ver" ]; then
echo "$c: missing CONFIG_DRIVERS_EFI_MAIN_FW_VERSION"
fail=1
fi
if [ -z "$lsv" ]; then
echo "$c: missing CONFIG_DRIVERS_EFI_MAIN_FW_LSV"
fail=1
fi

if [ -n "$ver" ] && [ -n "$lsv" ] && [ $(( ver < lsv )) -eq 1 ]; then
echo "$c: CONFIG_DRIVERS_EFI_MAIN_FW_VERSION < CONFIG_DRIVERS_EFI_MAIN_FW_LSV"
echo "${c//?/ } $ver < $lsv"
fail=1
fi

if [ -n "$ver" ]; then
str_ver=$(hex_to_ver_str "$ver")
if [ "$str_ver" != "$local_ver" ]; then
echo "$c: CONFIG_LOCALVERSION doesn't match CONFIG_DRIVERS_EFI_MAIN_FW_VERSION"
echo "${c//?/ } $local_ver != $str_ver ($ver)"
fail=1
fi
fi
done

exit "$fail"
Loading