Signed-off-by: Jonas Gorski <[email protected]>

Loosely based to the latest internal MR, with the following changes:

* add licence and copyright
* slightly reword the help
* drop support for older bitbake versions
* add support for differences in yocto kirkstone
* allow setting version names
* ensure tmpdir always gets deleted
* dropped the single repo mode
* allow ignoring layers
* redirect tool output to STDERR instead of dropping it
* do not return a non zero exitcode when using an external workdir

Signed-off-by: Jonas Gorski <[email protected]>
(cherry picked from commit f296075)

Add a script for creating a release branch, with automatically

* setting FEEDURIPREFIX to release
* adding a changelog.txt with all commits since the previous release
* setting default.xml to fixed revision
* setting bisdn-linux in default.xml to a revision including the above
  changes
* Do a sanity check that the meta-ofdpa's top commit subjects are the
  same (but do not abort, as this may be acceptable).

as well as updating it with a new revision.

Requires xmlstarlet installed for updating the default.xml.

Signed-off-by: Jonas Gorski <[email protected]>
(cherry picked from commit 0bb0ff3)

Add a line to document how to enable CVE checks during build to the
example configuration.

Signed-off-by: Jonas Gorski <[email protected]>
(cherry picked from commit 6fb251b)

Add a new flag for calculating fixed CVEs between two versions.

This works by getting open CVEs for each package included in the image,
then comparing the lists.

Creates output like this:

  Fixed CVEs:
  c-ares:
    CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067

  dbus:
    CVE-2023-34969

  docker-ce:
    CVE-2023-28840 CVE-2023-28841 CVE-2023-28842

Be aware that the check is rather slow due to rate limiting by the CVE
database.

Signed-off-by: Jonas Gorski <[email protected]>
(cherry picked from commit 8b4d3cb)

Now that we can check for CVEs, use that information for our releases.

Signed-off-by: Jonas Gorski <[email protected]>
(cherry picked from commit 2bbeda4)

Since this is the branch for v4.x releases, we should use v4.x as the
basebranch.

Signed-off-by: Jonas Gorski <[email protected]>

Set the FEEDURIPREFIX to the release path.

Signed-off-by: Jonas Gorski <[email protected]>

Set release revisions in default.xml based on http://repo.bisdn.de.s3-eu-central-1.amazonaws.com/nightly_builds/agema-ag5648/v4.x/onie-bisdn-full-agema-ag5648-202503250229.xml.

Signed-off-by: Jonas Gorski <[email protected]>

Signed-off-by: Jonas Gorski <[email protected]>

Update build-bisdn-linux to include the generated changelog.txt and release
FEEDURIPREFIX.

Signed-off-by: Jonas Gorski <[email protected]>