From 499bedf7aa07bb26dc19fb8b3ef5db5c8e578f52 Mon Sep 17 00:00:00 2001 From: Jeff Epler Date: Thu, 10 Jul 2025 19:46:26 +0100 Subject: [PATCH] tools/ci.sh: Always call `apt-get update` before `apt-get install`. There have been recent build failures in build_renesas_ra_board. It appears to be the case that a security update for this package was recently issued by Ubuntu for CVE-2025-4565 and the buggy version is no longer on package servers. However, it is still referred to by the cached apt metadata in the GitHub runners. Add `apt-get update` to fix this, and audit for other sites in `ci.sh` where it might also be necessary. Signed-off-by: Jeff Epler --- tools/ci.sh | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/tools/ci.sh b/tools/ci.sh index 4007dfebf..518eb7449 100755 --- a/tools/ci.sh +++ b/tools/ci.sh @@ -13,11 +13,13 @@ ulimit -n 1024 # general helper functions function ci_gcc_arm_setup { + sudo apt-get update sudo apt-get install gcc-arm-none-eabi libnewlib-arm-none-eabi arm-none-eabi-gcc --version } function ci_gcc_riscv_setup { + sudo apt-get update sudo apt-get install gcc-riscv64-unknown-elf picolibc-riscv64-unknown-elf riscv64-unknown-elf-gcc --version } @@ -35,6 +37,7 @@ function ci_picotool_setup { # c code formatting function ci_c_code_formatting_setup { + sudo apt-get update sudo apt-get install uncrustify uncrustify --version } @@ -703,6 +706,7 @@ function ci_unix_float_run_tests { } function ci_unix_clang_setup { + sudo apt-get update sudo apt-get install clang clang --version } @@ -839,6 +843,7 @@ function ci_unix_qemu_riscv64_run_tests { # ports/windows function ci_windows_setup { + sudo apt-get update sudo apt-get install gcc-mingw-w64 }