Hi folks,

The 2024.05 tag has been pushed to master on gitlab.com/lava/lava.
.deb packages have been built in GitLab CI and are published at

  https://apt.lavasoftware.org/release

Docker images for amd64 and arm64 have been built in GitLab CI and
are available from

  https://registry.gitlab.com/

and

  https://hub.docker.com/u/lavasoftware

Changes in this release
==================

Security issue

security issue as been found by Arnaud Ferraris in the callback code. Every user that can view a job can access to the callback token.
We strongly advice to upgrade LAVA to 2024.05 to fix this issue and to revoke every callback token.

# Device-types

## New device-types

* imx8mn-ddr3l-ab2
* imx91-11x11-evk
* imx93-14x14-evk
* qrb4210-rb2
* sm8550-hdk
* stm32mp157c-lxa-tac-gen1

## FVP

Allow to to import fvp ubl license file. `ubl_license` can be either a license file or a license code now.

LAVA runs `armlm activate` for the former and `armlm import` for the latter.

## meson-g12

Add a default `boot_character_delay` of 10ms for all the device-types based on `meson-g12`.

## rk3399-rock-pi-4b

Allow to override `boot(i|m)_*` variables.

lava-run

When LAVA interacts with a DUT, LAVA uses pexpect to parse the DUT output. Starting from this release, LAVA will better handle logging coming from pexpect and only print the strings sent by LAVA once.

lava-scheduler

Improve the `lava-scheduler` performances by lowering the number of SQL requests generated by the scheduling. Also improve performances by improving the job filtering when using tags.

lava-server manage

Allow to automatically update a user password from the `lava-server manage` command line. Admins should call

```shell
sudo lava-server manage users update --passwd <PASSWD> <USERNAME>
```

lava-worker

lava-worker is now running job cleanups (removing failed job temporary directory) in a specific thread to avoid blocking the main thread for too long. This was causing the lava-worker to be marked offline for some minutes with cleaning large job directories.

Rgds

--
Rémi Duraffort
Principal Tech Lead
LAVA Tech Lead
Automation Software Team
Linaro