Skip to content

[code sync] Merge code from sonic-net/sonic-buildimage:202505 to 202506#2197

Open
mssonicbld wants to merge 19 commits intoAzure:202506from
mssonicbld:sonicbld/202506-merge
Open

[code sync] Merge code from sonic-net/sonic-buildimage:202505 to 202506#2197
mssonicbld wants to merge 19 commits intoAzure:202506from
mssonicbld:sonicbld/202506-merge

Conversation

@mssonicbld
Copy link
Copy Markdown
Collaborator

* cf556dada - (head/202505) [build][202505] Avoid using jsonpath_ng v1.8.0 in sonic slave image. (#26772) (2026-04-16) [yijingyan2]
* 9fa82d4cd - [build] upgrade p4lang package versions (#26732) (2026-04-15) [yijingyan2]
* 44db8701e - [build] Enable pip no build isolation config for swi tools (#26684) (2026-04-14) [yijingyan2]
* 837329333 - [build] Fix grpcio 1.15.1 install failure in arm64 env. (#26682) (2026-04-12) [mssonicbld]
* 87517a27d - Enable PORT PHY attribute collection by default (#26716) (2026-04-11) [mssonicbld]
* 43fbbeee3 - [submodule] Update submodule sonic-swss to the latest HEAD automatically (#26698) (2026-04-10) [mssonicbld]
* 7ec3ad44f - [Arista] Update thermal sensors after adding TH5 diodes in platform driver (#26562) (2026-04-09) [mssonicbld]
* e6e29a618 - [202505] Upgrade Broadcom xgs SAI version to 13.2.1.36 (#26481) (2026-04-09) [zitingguo-ms]
* c7ed4d35a - [submodule] Update submodule sonic-swss to the latest HEAD automatically (#26648) (2026-04-08) [mssonicbld]
* 778da86a5 - [submodule] Update submodule sonic-platform-daemons to the latest HEAD automatically (#26647) (2026-04-08) [mssonicbld]
* 458631974 - fix: tornato and natsever security (#26460) (2026-04-07) [Austin (Thang Pham)]
* 19920f2ad - fix: golang security and security apt upgrade (#26420) (2026-03-30) [Austin (Thang Pham)]
* 63672a4ed - [ci/build]: Upgrade SONiC package versions (#24920) (2026-03-30) [mssonicbld]<br>```

mssonicbld and others added 13 commits March 30, 2026 06:13
[202505] Upgrade SONiC package Versions
Signed-off-by: Austin Pham <austinpham@microsoft.com>
Why I did it
cherry-pick #26459

Currently, 202505 is failing on PTF add topo. This is because when raising a PR to sonic-buildimage, changes from PTF is not included for sonic-mgmt tests. So the test is always testing on previous build.

I did a force PTF build here manually https://elastictest.org/scheduler/testplan/69ce3a31511c8798ab89ad1f with this build and can see that it passed add-topo with PTF change.

Once we force-merged this, our add-topo for 202505 will be unblock

Signed-off-by: Austin Pham <austinpham@microsoft.com>
…D automatically (#26647)

#### Why I did it
src/sonic-platform-daemons
```
* 8e36084 - (HEAD -> 202505, origin/202505) Make polling intervals in the ThermalMonitor class configurable (Azure#781) (20 hours ago) [mssonicbld]
* 9a084f7 - [ci] Use correct slave container image. (Azure#790) (24 hours ago) [Liu Shilong]
```
#### How I did it
#### How to verify it
#### Description for the changelog
…lly (#26648)

#### Why I did it
src/sonic-swss
```
* 88071ff3 - (HEAD -> 202505, origin/202505) [202505] Setting default nexthop weight to 1 in `fpmsyncd` (#4422) (65 minutes ago) [mramezani95]
* 72e67371 - Added MAX pre-FEC BER for link health monitoring (#4177) (5 hours ago) [mssonicbld]
```
#### How I did it
#### How to verify it
#### Description for the changelog
Why I did it
Upgrade the xgs SAI version to 13.2.1.36 to include the following fixes.

13.2.1.36: Fix for - Preemphasis Settings Are Not Correctly Applied to Subordinated Interfaces
13.2.1.35: Add OBM drops to IF_IN_DISCARDS counter
13.2.1.34: Pkt_Trim: Unable to Disable Trim when one tc_colot_to_dscp map is applied on multiple ports.
13.2.1.33: Ingress ACL table creation failed due to insufficient resource
13.2.1.32: [HFT]Incorporate Customer feedback on Element Id, Chunk Count along with SDK recommendation on resource error
13.2.1.31: [DNX][CSP CS00012420434]Polarization seen between LAG and ECMP within the same box
13.2.1.30: sai_query_stats_capability support for SAI_OBJECT_TYPE_SWITCH
13.2.1.29: SONIC-116157: enable SAI_TAM_TEL_TYPE_ATTR_SWITCH_ENABLE_PORT_STATS_INGRESS/EGRESS as non functional attributes in capablity and create/get/set APIs
13.2.1.28: bcm_switch_control_set(0, bcmSwitchPcieHotSwapDisable, 1) support through SAI code
Work item tracking
Microsoft ADO (number only): 37339937
How I did it
Update the xgs SAI version in sai.mk file.

How to verify it
Load image on a DUT, all containers and bgp are up and running.

Which release branch to backport (provide reason below if selected)
N/A - this PR targets 202505 directly.

Signed-off-by: zitingguo zitingguo@microsoft.com
…river (#26562)

<!--
 Please make sure you've read and understood our contributing guidelines:
 https://github.com/Azure/SONiC/blob/gh-pages/CONTRIBUTING.md

 failure_prs.log skip_prs.log Make sure all your commits include a signature generated with `git commit -s` **

 If this is a bug fix, make sure your description includes "fixes #xxxx", or
 "closes #xxxx" or "resolves #xxxx"

 Please provide the following information:
-->

#### Why I did it
TH5 diodes are being added in platform driver, so need to update the platform.json here to pass sonic-mgmt tests.

##### Work item tracking
- Microsoft ADO **(number only)**:

#### How I did it

#### How to verify it

<!--
If PR needs to be backported, then the PR must be tested against the base branch and the earliest backport release branch and provide tested image version on these two branches. For example, if the PR is requested for master, 202211 and 202012, then the requester needs to provide test results on master and 202012.
-->

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [ ] 202305
- [ ] 202311
- [ ] 202405
- [ ] 202411
- [ ] 202505
- [x] 202511

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

- [ ] <!-- image version 1 -->
- [ ] <!-- image version 2 -->

#### Description for the changelog
<!--
Write a short (one line) summary that describes the changes in this
pull request for inclusion in the changelog:
-->

<!--
 Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.
-->

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

Signed-off-by: Sonic Build Admin <sonicbld@microsoft.com>

#### A picture of a cute animal (not mandatory but encouraged)
…lly (#26698)

Why I did it
src/sonic-swss

* e9dcd50b - (HEAD -> 202505, origin/202505) Temporarily moving the PORT_PHY_ATTR ERR messages to NOTICE level. (#4463) (3 minutes ago) [mssonicbld]
How I did it
How to verify it
Description for the changelog

Signed-off-by: mssonicbld <sonicbld@microsoft.com>
#### Why I did it
These are some useful counters which should be enabled by default.

##### Work item tracking
- Microsoft ADO **(number only)**:

#### How I did it
Added the config to init_cfg.json.j2

#### How to verify it

<!--
If PR needs to be backported, then the PR must be tested against the base branch and the earliest backport release branch and provide tested image version on these two branches. For example, if the PR is requested for master, 202211 and 202012, then the requester needs to provide test results on master and 202012.
-->

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [ ] 202305
- [ ] 202311
- [ ] 202405
- [ ] 202411
- [x] 202505
- [x] 202511

#### Tested branch (Please provide the tested image version)
I have tested it on 202505
<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

- [ ] <!-- image version 1 -->
- [ ] <!-- image version 2 -->

#### Description for the changelog
<!--
Write a short (one line) summary that describes the changes in this
pull request for inclusion in the changelog:
-->
Enable PORT PHY attribute collection by default
<!--
 Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.
-->

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

Signed-off-by: Sonic Build Admin <sonicbld@microsoft.com>

#### A picture of a cute animal (not mandatory but encouraged)
<!--
 Please make sure you've read and understood our contributing guidelines:
 https://github.com/Azure/SONiC/blob/gh-pages/CONTRIBUTING.md

 failure_prs.log Make sure all your commits include a signature generated with `git commit -s` **

 If this is a bug fix, make sure your description includes "fixes #xxxx", or
 "closes #xxxx" or "resolves #xxxx"

 Please provide the following information:
-->

#### Why I did it
arm64 builds start to fail since 2026/02/09.
Root Cause is pypi package setuptools released new version v82.0.0. [LINK](https://setuptools.pypa.io/en/stable/history.html)
pkg_resources is removed from setuptools.

pip3 uses tem env to build packages and uses latest dependency version. grpcio 1.51.1 didn't include pkg_resources in its dependencies. Build will fail.

Why amd64 and armhf build succeed? Because they have manylinux wheel. They don't need to build from source.

Open question:
How can we avoid this kind of build break?
Disable tem env for 'pip install'?
##### Work item tracking
- Microsoft ADO **(number only)**:

#### How I did it
Use host env instead of tem env when pip install grpcio.
#### How to verify it

<!--
If PR needs to be backported, then the PR must be tested against the base branch and the earliest backport release branch and provide tested image version on these two branches. For example, if the PR is requested for master, 202211 and 202012, then the requester needs to provide test results on master and 202012.
-->

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [ ] 202305
- [ ] 202311
- [ ] 202405
- [ ] 202411
- [ ] 202505
- [ ] 202511

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

- [ ] <!-- image version 1 -->
- [ ] <!-- image version 2 -->

#### Description for the changelog
<!--
Write a short (one line) summary that describes the changes in this
pull request for inclusion in the changelog:
-->

<!--
 Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.
-->

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

Signed-off-by: Sonic Build Admin <sonicbld@microsoft.com>

#### A picture of a cute animal (not mandatory but encouraged)
Signed-off-by: Yijing Yan <yijingyan@microsoft.com>
Signed-off-by: Yijing Yan <yijingyan@microsoft.com>
…(#26772)

Fix jsonpath_ng new release 1.8.0's issue.
Signed-off-by: Yijing Yan <yijingyan@microsoft.com>
@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines successfully started running 1 pipeline(s).

- Upgrade Go toolchain 1.25.8 → 1.25.9 (fixes CVE-2026-32280 through
  CVE-2026-32289: stdlib crypto/tls, archive/tar, html/template, os)
- Bump go.opentelemetry.io/otel/sdk v1.40.0 → v1.43.0 in gnmic
  (CVE-2026-39883: PATH hijacking via BSD kenv)
- Add github.com/go-jose/go-jose/v4@v4.1.4 to gnmic, gnoic, grpcurl
  (CVE-2026-34986: DoS via crafted JSON Web Encryption)
- Bump github.com/docker/docker to latest in gnmic
  (CVE-2026-34040: authorization bypass, CVE-2026-33997: privilege
  validation bypass during plugin installation)
- Add aws-sdk-go-v2 eventstream/s3 latest to gnmic
  (GHSA-xmrv-pmrh-hhx2: DoS via panic in AWS SDK for Go v2)
- Existing apt-get upgrade covers libpng16-16 fix
  (CVE-2026-33416: use-after-free, CVE-2026-33636: OOB read/write)

Signed-off-by: Austin Pham <austinpham@microsoft.com>
@mssonicbld mssonicbld force-pushed the sonicbld/202506-merge branch from d1efaef to a9ca0b2 Compare April 20, 2026 03:02
@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines will not run the associated pipelines, because the pull request was updated after the run command was issued. Review the pull request again and issue a new run command.

yijingyan2 and others added 2 commits April 20, 2026 14:20
Why I did it
cherry-pick #22793 to fix docker dash-engine debian connection issue in vs build

why needed for 202505 branch:
The image builds in 202505 sometimes fail due to network access to archive.ubuntu.com:80 issue.

W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/focal/InRelease  Connection failed [IP: 185.125.190.81 80]
W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/focal-updates/InRelease  Connection failed [IP: 185.125.190.82 80]
W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/focal-backports/InRelease  Connection failed [IP: 91.189.91.81 80]
W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/focal-security/InRelease  Connection failed [IP: 91.189.91.81 80]
W: Some index files failed to download. They have been ignored, or old ones used instead.
With this change, we can use our debian mirror for a more stable connection.


Signed-off-by: Yijing Yan <yijingyan@microsoft.com>
…cy (#26895)

<!--
 Please make sure you've read and understood our contributing guidelines:
 https://github.com/Azure/SONiC/blob/gh-pages/CONTRIBUTING.md

 failure_prs.log skip_prs.log Make sure all your commits include a signature generated with `git commit -s` **

 If this is a bug fix, make sure your description includes "fixes #xxxx", or
 "closes #xxxx" or "resolves #xxxx"

 Please provide the following information:
-->

#### Why I did it
1. We already use apt to install python3-gi in SONiC image according to #22326
But docker-sonic-vs.gz change is missed in that PR.
##### Work item tracking
- Microsoft ADO **(number only)**: 32869072

#### How I did it
1. Install python3-gi in docker-sonic-vs.gz image.
#### How to verify it

<!--
If PR needs to be backported, then the PR must be tested against the base branch and the earliest backport release branch and provide tested image version on these two branches. For example, if the PR is requested for master, 202211 and 202012, then the requester needs to provide test results on master and 202012.
-->

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [ ] 202205
- [ ] 202211
- [ ] 202305
- [ ] 202311
- [ ] 202405
- [ ] 202411
- [ ] 202505

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

- [ ] <!-- image version 1 -->
- [ ] <!-- image version 2 -->

#### Description for the changelog
<!--
Write a short (one line) summary that describes the changes in this
pull request for inclusion in the changelog:
-->

<!--
 Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.
-->

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

Signed-off-by: Sonic Build Admin <sonicbld@microsoft.com>

#### A picture of a cute animal (not mandatory but encouraged)
@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@mssonicbld mssonicbld force-pushed the sonicbld/202506-merge branch from a9ca0b2 to 94b6f88 Compare April 21, 2026 03:02
@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines will not run the associated pipelines, because the pull request was updated after the run command was issued. Review the pull request again and issue a new run command.

[202505] Upgrade SONiC package Versions
@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines will not run the associated pipelines, because the pull request was updated after the run command was issued. Review the pull request again and issue a new run command.

@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@mssonicbld mssonicbld force-pushed the sonicbld/202506-merge branch from 022f774 to 5ff4c29 Compare April 24, 2026 03:03
@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines will not run the associated pipelines, because the pull request was updated after the run command was issued. Review the pull request again and issue a new run command.

@mssonicbld mssonicbld force-pushed the sonicbld/202506-merge branch from 5ff4c29 to db8df2c Compare April 25, 2026 03:02
@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines will not run the associated pipelines, because the pull request was updated after the run command was issued. Review the pull request again and issue a new run command.

@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@mssonicbld mssonicbld force-pushed the sonicbld/202506-merge branch from db8df2c to 1e13603 Compare April 26, 2026 03:03
@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines will not run the associated pipelines, because the pull request was updated after the run command was issued. Review the pull request again and issue a new run command.

@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@mssonicbld mssonicbld force-pushed the sonicbld/202506-merge branch from 1e13603 to 171363a Compare April 27, 2026 03:03
@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines will not run the associated pipelines, because the pull request was updated after the run command was issued. Review the pull request again and issue a new run command.

@mssonicbld mssonicbld force-pushed the sonicbld/202506-merge branch from 171363a to be5a803 Compare April 28, 2026 03:02
@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines will not run the associated pipelines, because the pull request was updated after the run command was issued. Review the pull request again and issue a new run command.

@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@mssonicbld mssonicbld force-pushed the sonicbld/202506-merge branch from be5a803 to 3b7d63f Compare April 29, 2026 03:03
@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines will not run the associated pipelines, because the pull request was updated after the run command was issued. Review the pull request again and issue a new run command.

@yijingyan2
Copy link
Copy Markdown

/azp run

@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines successfully started running 1 pipeline(s).

@mssonicbld mssonicbld force-pushed the sonicbld/202506-merge branch from 3b7d63f to b7d9690 Compare April 30, 2026 03:08
@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines will not run the associated pipelines, because the pull request was updated after the run command was issued. Review the pull request again and issue a new run command.

mssonicbld and others added 2 commits April 30, 2026 20:20
<!--
     Please make sure you've read and understood our contributing guidelines:
     https://github.com/Azure/SONiC/blob/gh-pages/CONTRIBUTING.md

     ** Make sure all your commits include a signature generated with `git commit -s` **

     If this is a bug fix, make sure your description includes "fixes #xxxx", or
     "closes #xxxx" or "resolves #xxxx"

     Please provide the following information:
-->

#### Why I did it

With this commit here, PTF replace nnpy with pynng [p4lang/ptf](p4lang/ptf@ebc00f9)

However, we don't have pynng. To unblock us now, I'll pin ptf_nn_agent.py to a previous version that doesn't require pynng

##### Work item tracking
- Microsoft ADO **(number only)**:

#### How I did it

#### How to verify it

<!--
If PR needs to be backported, then the PR must be tested against the base branch and the earliest backport release branch and provide tested image version on these two branches. For example, if the PR is requested for master, 202211 and 202012, then the requester needs to provide test results on master and 202012.
-->

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [ ] 202305
- [ ] 202311
- [ ] 202405
- [ ] 202411
- [ ] 202505
- [ ] 202511

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

- [ ] <!-- image version 1 -->
- [ ] <!-- image version 2 -->

#### Description for the changelog
<!--
Write a short (one line) summary that describes the changes in this
pull request for inclusion in the changelog:
-->

<!--
 Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.
-->

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

Signed-off-by: Sonic Build Admin <sonicbld@microsoft.com>

#### A picture of a cute animal (not mandatory but encouraged)
@mssonicbld
Copy link
Copy Markdown
Collaborator Author

/azp run

@mssonicbld mssonicbld force-pushed the sonicbld/202506-merge branch from b7d9690 to 3759e09 Compare May 1, 2026 03:02
@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines will not run the associated pipelines, because the pull request was updated after the run command was issued. Review the pull request again and issue a new run command.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants