Skip to content

Conversation

@valeriosetti
Copy link
Collaborator

@valeriosetti valeriosetti commented Oct 20, 2025

Extend README file explaining how version bumping to upstream Mbed TLS' releases should be handled.

@valeriosetti valeriosetti changed the title doc: add document to exaplain how version bumping should be handled doc: add document to explain how version bumping should be handled Oct 20, 2025
@valeriosetti valeriosetti force-pushed the upstream-sync-strategy branch from 6b28424 to 310c271 Compare October 20, 2025 11:47
@valeriosetti valeriosetti requested a review from mbolivar October 20, 2025 15:34
@valeriosetti
Copy link
Collaborator Author

@mbolivar I added you as reviewer as well for this PR because during the security meeting today (October 20th) I was told you might have some opinion on this so I wanted to have your feedback as well.

@valeriosetti valeriosetti mentioned this pull request Oct 21, 2025
Copy link
Collaborator

@tomi-font tomi-font left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think I like the idea but it's lacking some details. (And there are weird uses of ' and the possessive form.)
Also, some open questions:

  • We might still have to follow the convention of calling the default branch zephyr. I think it wouldn't hurt and would be more clear, simple.
  • We might want to have more details on the workflow of actually performing an update, some simple steps to make sure everyone is on the same page.

@valeriosetti
Copy link
Collaborator Author

@tomi-font I've updated the document based on the discussion we had offline and the work I've done in #79. Since most of the document was rewritten not all the comments that you made still apply.
Please take another look and let me know what you think :)

@valeriosetti valeriosetti force-pushed the upstream-sync-strategy branch from 9933c46 to 9b627c6 Compare October 29, 2025 08:20
Copy link
Collaborator

@tomi-font tomi-font left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overall in favor of the proposed approach.

@valeriosetti valeriosetti force-pushed the upstream-sync-strategy branch from 9ec0475 to c7f1640 Compare October 30, 2025 22:34
@valeriosetti valeriosetti force-pushed the upstream-sync-strategy branch from c7f1640 to af49d7e Compare October 30, 2025 22:41
@valeriosetti valeriosetti changed the title doc: add document to explain how version bumping should be handled doc: extend README explaining how version bumping should be handled Oct 31, 2025
Copy link
Collaborator

@tomi-font tomi-font left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Almost LGTM!

This commit extends README file explaining how version bumping to
upstream Mbed TLS' releases should be handled in the Zephyr's fork of
Mbed TLS.

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
@valeriosetti valeriosetti force-pushed the upstream-sync-strategy branch from d0e9679 to df10be8 Compare November 3, 2025 13:34
Copy link
Collaborator

@tomi-font tomi-font left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice!

---------------

This section talks about Mbed TLS, but the same guidelines apply to the other
forks of the TF-M and Mbed TLS projects.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I particularly not a fan of creating a policy for another repository in here. I know most people working on TF-M are also working on MBED TLS but they are different projects. For me either it would be done in Zephyr's doc or in both projects. I think we should copy it there as well.

Copy link
Collaborator Author

@valeriosetti valeriosetti Nov 4, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#78 (comment)
#78 (comment)

I think @tomi-font would like to use this document as guide for few other modules (see also https://github.com/zephyrproject-rtos/tf-m-tests/pull/16/files). However since this guideline might not be super generic, he proposed to keep it confined to Mbed TLS and TF-M and not to go in Zephyr documentation.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The point was exactly to have a single source of truth, and have the other relevant repos point to it. Maintaining copies of it is just extra duplication work and pretty much guaranteed to fall out of sync so I'm really not in favor of that.

And as @valeriosetti said IMO this is very specific to those repos and only affects people contributing to them so here just seems like the natural place for that.

`[zep fromlist]` and finally `[zep noup]`.
- Cherry-pick commits without `-x` nor `-s` so as not to inflate the commit
message over time, unless you had to modify the commit and it's not just a
clean cherry-pick.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wouldn't it possibly inflate only [zep noup] ? The others will come fresh from the list / tree and wouldn't make sense whoever is cherry picking them sign off ?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I proposed that because we have experience with this in NCS and it's just not nice and has no added value when you have a noup with 10 sign-offs and cherry picked from [...] lines. It gets messy and you don't even know anymore who contributed or modified the patch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants