Merged changes ahead of v6.5.2.202603

.git-blame-ignore-revs

@@ -0,0 +1,42 @@
+# Commits that changed file headers, copyright lines or version constants across
+# the whole tree. They carry no behavioural change, so `git blame` should look
+# through them to the commit that last touched the code itself.
+#
+# GitHub applies this file automatically. To use it locally, run once:
+#
+#     git config blame.ignoreRevsFile .git-blame-ignore-revs
+#
+# Add a commit here only when it is mechanical and repository-wide. A commit
+# that changes behaviour does not belong in this file, however large it is.
+
+# 2024-01-29  Update copyright.
+# 1472 files
+db360a10fa19060b0af93141fe9854e83be40152
+
+# 2024-01-30  Update version id string.
+# 52 files
+6982945ebbaf3458f96fd2c25556dd35dba6f97e
+
+# 2024-02-28  Update version to 6.4.1
+# 49 files
+36193be68800023f837c3629017ff04c5b342bf4
+
+# 2026-03-06  Updated ports copyright headers and version number
+# 46 files
+262702f19a0e52fe53b08156077275b900a8d06b
+
+# 2026-03-06  Updated copyright headers and removed revision history
+# 2275 files
+c40927a49065de48dab53e0efb49b6f7c3f31223
+
+# 2026-05-28  Updated version constants ahead of the v6.5.1.202602 release (#154)
+# 1475 files
+2fdd6e0a47818b687cb241c59266429b846c1834
+
+# 2026-05-28  Added missing copyright headers
+# 3004 files
+6ba13dbdb753d1a6ab64c8497a11d9f682d65d15
+
+# 2026-09-15  Normalized the AI disclosure comment to one fixed line per file (#188)
+# 70 files
+ab87d54f238141331f1295d957f68350c3ecf546

.github/dependabot.yml

@@ -33,14 +33,11 @@ version: 2
 # Dependabot ecosystem can parse. That pin moves by hand.
 updates:
   - package-ecosystem: "github-actions"
-    # "/" is the only accepted value for this ecosystem; it covers
-    # .github/workflows and .github/actions. The cross-repository reusable
-    # workflow in regression_test.yml
-    # (eclipse-threadx/threadx/.github/workflows/regression_template.yml@master)
-    # is correctly left alone: it references a branch, not a version, so there
-    # is nothing for Dependabot to move. Tracking that branch is deliberate --
-    # it is first-party, in the same organisation, and it means this repository
-    # picks up harness fixes without a bump here.
+    # Reusable workflow revisions are reviewed with the dependency bootstrap.
+    # Keep those pins outside automated version updates.
+    ignore:
+      - dependency-name: "eclipse-threadx/threadx"
+      - dependency-name: "eclipse-threadx/threadx/.github/workflows/regression_template.yml"
     directory: "/"
 
     schedule:

.github/workflows/regression_test.yml

@@ -1,39 +1,46 @@
 # Copyright (c) 2024 Microsoft Corporation
 # Copyright (c) 2026 Eclipse ThreadX contributors
-#
-# This program and the accompanying materials are made available under the
-# terms of the MIT License which is available at
-# https://opensource.org/licenses/MIT.
-#
 # SPDX-License-Identifier: MIT
-
-# This is a basic workflow that is manually triggered
-
 name: GUIX Regression Test
 
-# Controls when the action will run. Triggers the workflow on push or pull request
-# events but only for the master branch
 on:
-  workflow_dispatch:  
+  workflow_dispatch:
   push:
-    branches: [ master ]
+    branches: [master, dev]
   pull_request:
-    branches: [ master ]
-
-# A workflow run is made up of one or more jobs that can run sequentially or in parallel
+    branches: [master, dev]
+
+permissions:
+  contents: read
+
 jobs:
-  # This workflow contains a single job called "linux_job"
   guix:
+    # GitHub validates deployment permissions even when deployment is skipped.
+    # The called test job narrows its own token and cannot deploy Pages.
     permissions:
       contents: read
       issues: read
       checks: write
       pull-requests: write
       pages: write
       id-token: write
-
-    uses: eclipse-threadx/threadx/.github/workflows/regression_template.yml@master
+    uses: eclipse-threadx/threadx/.github/workflows/regression_template.yml@729959fed0fc380d68c2bdcb2b4d7a5430f5c21a
     with:
+      install_script: ./scripts/ci_install.sh
+      build_script: ./scripts/ci_build.sh
+      test_script: ./scripts/ci_test.sh
       cmake_path: ./test/guix_test/cmake
       result_affix: GUIX
-
+      # The install step here also builds default_build_coverage, because the
+      # suite is staged across the three steps to fit their limits. The best run
+      # on record took 8.2 of the default ten minutes and four have been lost at
+      # the cap, so the packages and the checkout have been leaving too little
+      # of it for the build. See issue #205 for moving that build out.
+      install_timeout_minutes: 20
+      # Five configurations are built here, and the best run on record took 11.8
+      # of the default fifteen minutes. Six advisories added regression tests
+      # this week, so that margin is closing rather than steady.
+      build_timeout_minutes: 25
+      coverage_name: merged
+      coverage_thresholds: '98 100'
+      skip_deploy: ${{ github.ref != 'refs/heads/master' || (github.event_name != 'push' && github.event_name != 'workflow_dispatch') }}

.github/workflows/repo_checks.yml

@@ -0,0 +1,63 @@
+###############################################################################
+# Copyright (c) 2026 Eclipse ThreadX contributors
+#
+# This program and the accompanying materials are made available under the
+# terms of the MIT License which is available at
+# https://opensource.org/licenses/MIT.
+#
+# AI Disclosure: This file was largely AI-generated by Claude Code (Opus 5).
+# The AI-generated portions may be considered public domain (CC0-1.0)
+# and not subject to the project's licence. The human contributor has
+# reviewed and verified that the code is correct.
+#
+# SPDX-License-Identifier: MIT and CC0-1.0
+###############################################################################
+
+name: repo_checks
+
+# Repository-wide text checks.
+#
+# THIS LIVES IN ITS OWN WORKFLOW BECAUSE IT MUST NOT BE PATH-FILTERED, and a
+# path filter is a property of a workflow rather than of a job.  The check
+# selects its input with `git ls-files` and scans every tracked file, so any
+# file at all can carry a finding.
+#
+# That is not hypothetical here.  The pass that introduced the fixed
+# disclosure line covered source files only, and the drift it was meant to end
+# survived for months afterwards in CMake files, toolchain files, shell and
+# PowerShell scripts, a GDB script and a Visual Studio manifest -- precisely
+# the files a source-path filter would have skipped.  A workflow that gates no
+# pull request anybody opens is worse than no workflow, because it looks like
+# coverage.
+#
+# Cheap enough that running it on everything costs nothing worth measuring: it
+# is grep over a repository this size, with no toolchain, no build and no
+# cache.
+
+on:
+  # No `paths:` on either trigger, deliberately.  See above.
+  push:
+    branches: [ dev, master ]
+  pull_request:
+    branches: [ dev, master ]
+
+# A second push to the same branch makes the first answer irrelevant.
+concurrency:
+  group: repo-checks-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  checks:
+    runs-on: ubuntu-24.04
+    steps:
+    # Actions are pinned to a commit SHA with the version in the trailing
+    # comment.  A tag can be moved; a SHA cannot, which is what makes "which
+    # code ran in our CI" answerable from the repository.
+    - name: Check out the repository
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+    - name: Check the AI disclosure comments
+      run: scripts/check_ai_disclosure.sh

.github/workflows/studio_demo_test.yml

@@ -6,7 +6,7 @@
 # https://opensource.org/licenses/MIT.
 #
 # SPDX-License-Identifier: MIT
-# Some portions generated by Claude Code (Opus 5).
+# Portions of this file were generated with AI assistance.
 
 # This is a basic workflow that is manually triggered
 
@@ -27,6 +27,7 @@ on:
 jobs:
   # This workflow contains a single job called "linux_job"
   run_tests:
+    name: GUIX Studio Demo
     permissions:
       contents: read
       issues: read

.github/workflows/studio_demo_test_compile.yml

@@ -6,7 +6,7 @@
 # https://opensource.org/licenses/MIT.
 #
 # SPDX-License-Identifier: MIT
-# Some portions generated by Claude Code (Opus 5).
+# Portions of this file were generated with AI assistance.
 
 # This is a basic workflow that is manually triggered
 
@@ -27,6 +27,7 @@ on:
 jobs:
   # This workflow contains a single job called "linux_job"
   run_tests:
+    name: GUIX Studio Demo Compile
     permissions:
       contents: read
       issues: read

.github/workflows/studio_msix_package.yml

@@ -6,7 +6,7 @@
 # https://opensource.org/licenses/MIT.
 #
 # SPDX-License-Identifier: MIT
-# Some portions generated by Claude Code (Opus 5).
+# Portions of this file were generated with AI assistance.
 
 # This is a basic workflow that is manually triggered
 

.github/workflows/studio_view_test.yml

@@ -6,25 +6,26 @@
 # https://opensource.org/licenses/MIT.
 #
 # SPDX-License-Identifier: MIT
-# Some portions generated by Claude Code (Opus 5).
+# Portions of this file were generated with AI assistance.
 
 # This is a basic workflow that is manually triggered
 
 name: GUIX Studio View Test
 
 # Controls when the action will run. Triggers the workflow on push or pull request
-# events but only for the master branch
+# events for the master and dev branches
 on:
   workflow_dispatch:  
   push:
-    branches: [ master ]
+    branches: [ master, dev ]
   pull_request:
-    branches: [ master ]
+    branches: [ master, dev ]
 
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
   # This workflow contains a single job
   run_tests:
+    name: GUIX Studio View
     permissions:
       contents: read
       issues: read

.gitignore

@@ -19,3 +19,10 @@ CTestTestfile.cmake
 /guix_studio/installer/vc_runtime/
 /guix_studio/studiox.aps
 *.user
+
+.venv-ci/
+/test/guix_test/cmake/build/
+/test/guix_test/cmake/threadx/
+/test/guix_test/cmake/.run.sh
+/test/guix_test/cmake/coverage_report/
+__pycache__/