Disable processing of extended ADV packets by mesh scanner.
This is done to prevent loss of scan time due to reception
of pointer packets while scanning for mesh packets.

Signed-off-by: Ingar Kulbrandstad <ingar.kulbrandstad@nordicsemi.no>
(cherry picked from commit 6a6f1e4)

This is a long-term noup patch because crypto driver support is
NCS-only for both cryptocell and CRACEN.

Set HAS_HW_NRF_CC3XX to be defined in NS build when cryptocell
is accessed through the PSA API.
We need to know which CC3XX features are available.

Set PSA as the entropy source for 54L.

PSA is the only NCS-supported interface to CRACEN.

Signed-off-by: Georgios Vasilakis <georgios.vasilakis@nordicsemi.no>
Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>
Signed-off-by: Dominik Ermel <dominik.ermel@nordicsemi.no>
Signed-off-by: Sebastian Bøe <sebastian.boe@nordicsemi.no>
Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Signed-off-by: Rubin Gerritsen <rubin.gerritsen@nordicsemi.no>
(cherry picked from commit 2cd9fbb)

Add a custom section in the linker which should always
be placed in the top of RAM. This will be used by the
KMU to push keys into it. Since when you provision a key
into the KMU you need to set specific a memory location
for the PUSH operation we need to keep this memory location
static across images/dfus.

The linker script inclusion which places the KMU reserved
buffer on the top of RAM doesn't work for non-XIP builds.
The Zephyr linker script will firstly load the code for
an non-XIP build in RAM and then include this KMU related
linker script which results in an unpredictable placement
of the KMU reserved area and a failed build.

In order to support non-XIP builds the linker file is not
included and the a DTS reserved-memory entry should be used.

To limit the scope, the DTS reserved memory region
is currently only supported for non-XIP builds.

This is a noup since the KMU is not supported upstream.

Ref: NCSDK-25121

Signed-off-by: Georgios Vasilakis <georgios.vasilakis@nordicsemi.no>
Signed-off-by: Robin Kastberg <robin.kastberg@iar.com>
(cherry picked from commit fbc2024)

Fixes some issues with samples/tests by adding configuration
files to satisfy TF-M requirements

Signed-off-by: Jamie McCrae <jamie.mccrae@nordicsemi.no>
(cherry picked from commit 20d3749)

Added ncs-specific modules to nrfx_config_reserved_resources.
The modules are:
- mpsl
- nrfe

Signed-off-by: Rafał Kuźnia <rafal.kuznia@nordicsemi.no>
Signed-off-by: Nikodem Kastelik <nikodem.kastelik@nordicsemi.no>
Co-authored-by: Krzysztof Chruściński <krzysztof.chruscinski@nordicsemi.no>
Signed-off-by: Eivind Jølsgard <eivind.jolsgard@nordicsemi.no>
Signed-off-by: Aleksandar Stanoev <aleksandar.stanoev@nordicsemi.no>
Signed-off-by: Piotr Pryga <piotr.pryga@nordicsemi.no>
(cherry picked from commit 5566637)

…targets.

Mesh currently works with trusted storage on real targets. Until secure
storage is supported by default disable it.

Signed-off-by: Aleksandr Khromykh <aleksandr.khromykh@nordicsemi.no>
(cherry picked from commit 35fcd6e)

…Cracen driver on nRF54H20

A larger stack is needed to accomodate the Cracen driver.

Signed-off-by: Gordon Klaus <gordon.klaus@nordicsemi.no>
(cherry picked from commit 4797b5f)

This commit brings back modifications from these reverted commits:
- f68b2ed
- e606246
slightly adjusted so that the EXMIF peripheral is still by default
handled by the mspi_dw driver, and in cases where this driver cannot
be used because something still does not work correctly, one can
switch to the old solution based on the tweaked spi_dw driver.

Signed-off-by: Andrzej Głąbek <andrzej.glabek@nordicsemi.no>
(cherry picked from commit 5878b1b)

Update Kconfig options for qualification:
 - Remove experimental on qualified feature.
 - Add experimental on unqualified feature.
 - BT_L2CAP_ECRED is not marked as experimental upstream and we qualify it
   downstream.

Signed-off-by: Joakim Andersson <joakim.andersson@nordicsemi.no>
Signed-off-by: Trond Einar Snekvik <Trond.Einar.Snekvik@nordicsemi.no>
Signed-off-by: Martí Bolívar <marti.bolivar@nordicsemi.no>
Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
Signed-off-by: Dominik Ermel <dominik.ermel@nordicsemi.no>
Signed-off-by: Ingar Kulbrandstad <ingar.kulbrandstad@nordicsemi.no>
Signed-off-by: Torsten Rasmussen <Torsten.Rasmussen@nordicsemi.no>
Signed-off-by: Herman Berget <herman.berget@nordicsemi.no>
Signed-off-by: Tomasz Moń <tomasz.mon@nordicsemi.no>
Signed-off-by: Théo Battrel <theo.battrel@nordicsemi.no>
(cherry picked from commit f23942a)

The PSA is a cryptographically secure random number generator.

It will be enabled by default, eventually,  For now, enable it manually.

Signed-off-by: Gordon Klaus <gordon.klaus@nordicsemi.no>
Signed-off-by: Tomasz Moń <tomasz.mon@nordicsemi.no>
(cherry picked from commit 60e3e91)

Necessary changes for NCS CI.

- Add a Jenkinsfile
- Add a commit-tags workflow: This enables sauce tag checking in sdk-zephyr
- compliance.yml: Disable check for merge commits, since we have upmerges
downstream. Also, since in the code we refer to Kconfig symbols that are defined
in the sdk-nrf repository, the Kconfig checks ((SysBuild)Kconfig,
(SysBuild)KconfigBasic and (SysBuild)KconfigBasicNoModules) will not pass so
exclude them. Also, disable any maintainers-related checks
- scripts/gitlint: Extend the max commit line lengths for Gitlint to account
for sauce tags
- Adapt to the changes in:
nrfconnect/action-commit-tags#4

Signed-off-by: Carles Cufi <carles.cufi@nordicsemi.no>
Signed-off-by: Dominik Ermel <dominik.ermel@nordicsemi.no>
Signed-off-by: Martí Bolívar <marti.bolivar@nordicsemi.no>
Signed-off-by: Vinayak Kariappa Chettimada <vich@nordicsemi.no>
Signed-off-by: Krishna T <krishna.t@nordicsemi.no>
Signed-off-by: Dominik Ermel <dominik.ermel@nordicsemi.no>
(cherry picked from commit 7de0c84)

Adds symbols used in NCS to the sysbuild Kconfig allow list

Signed-off-by: Jamie McCrae <jamie.mccrae@nordicsemi.no>
(cherry picked from commit 666ffc1)

Add boards/nordic/**/* to the CI-boot-test scope and remove SUIT labels.

Signed-off-by: Robert Stypa <robert.stypa@nordicsemi.no>
(cherry picked from commit f2b86e0)

Fixed board page in zephyr.

Signed-off-by: Richa Pandey <richa.pandey@nordicsemi.no>
(cherry picked from commit 3b01d33)

Enable the `empty_app_core` image when building for `cpurad`.

Signed-off-by: Grzegorz Swiderski <grzegorz.swiderski@nordicsemi.no>
(cherry picked from commit bc0141c)

The xiao_ble boards ship with a bootloader requiring an app offset of 0x27000.
The upstream board defines this via DT partitions, which will not be used if
partition manager is enabled.
Add a static partition configuration to allow binaries built for this board
to work out-of-the-box in NCS, and match the behavior with sysbuild disabled.

Signed-off-by: Aleksandar Stanoev <aleksandar.stanoev@nordicsemi.no>
(cherry picked from commit 0128a91)

Ref: NCSDK-34052

Signed-off-by: Krzysztof Szromek <krzysztof.szromek@nordicsemi.no>
(cherry picked from commit 23af03a)

Add support for nRF91x by providing overlay configuration file.

Signed-off-by: Juha Ylinen <juha.ylinen@nordicsemi.no>
Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
(cherry picked from commit 3f93b67)

Same as commit 6ec9d10 but with the REQUIRED keyword on its own
line to attempt to avoid a merge conflict when reverting/reapplying
this patch.

Signed-off-by: Jonathan Nilsen <jonathan.nilsen@nordicsemi.no>
(cherry picked from commit c4820cc)

Non-secure variants for nRF7002 DK were removed from upstream
in commit 10d4973. Revert these
changes downstream, so that the NS variants are still available.

Signed-off-by: Andrzej Głąbek <andrzej.glabek@nordicsemi.no>
Signed-off-by: Johann Fischer <johann.fischer@nordicsemi.no>
(cherry picked from commit 3f9d391)

This patch backports the nrf9131ek to a time before tfm was refactored.

To be reverted when TF-M is updated.

Signed-off-by: Maximilian Deubel <maximilian.deubel@nordicsemi.no>
(cherry picked from commit 91df299)

 Increased stack sizes for mesh provisoner sample.
 Values are based of thread analysis, plus added margin.

Signed-off-by: Stine Åkredalen <stine.akredalen@nordicsemi.no>
(cherry picked from commit abe30cf)

noup because it's about partition manager.

Fix the build of secure_storage.psa.its.secure_storage.store.zms on
nrf54l15dk/nrf54l15/cpuapp by disabling partition manager, which is
incompatible with the ZMS implementation of the ITS store module.

Disabling it only for that test as it's not needed for the others
and even makes the NS board targets fail if disabling PM.

Signed-off-by: Tomi Fontanilles <tomi.fontanilles@nordicsemi.no>
(cherry picked from commit 5fe83a2)

ZMS legacy enabled by CONFIG_SETTINGS_ZMS_LEGACY uses a different lookup
cache function that is optimized for Settings subsystem.

Signed-off-by: Riadh Ghaddab <rghaddab@baylibre.com>
(cherry picked from commit 56d74c7)

This patch should be dropped as part of the next upmerge.

The upcoming release of IronSide SE no longer disables RETAIN
in all GPIO instances on boot, so the application must be able
to handle the hardware default state of RETAIN being enabled.

The GPIO retention is properly handled by changes that are
currently only upstream and will be pulled in by the next upmerge.
This patch exists a workaround to be able to integrate
IronSide SE before the proper solution is pulled in.

Signed-off-by: Jonathan Nilsen <jonathan.nilsen@nordicsemi.no>
(cherry picked from commit fa2b950)

Allows listing sysbuild Kconfigs for SoCs

Signed-off-by: Jamie McCrae <jamie.mccrae@nordicsemi.no>
(cherry picked from commit 488c9ff)

Previously reopening of PR did not reopen manifest PR.
This commit will enable reopening of manifest PR in such case.

Signed-off-by: Kari Hamalainen <kari.hamalainen@nordicsemi.no>
(cherry picked from commit 473385a)

The definitions of slot partitions and sram partition has been
moved. Include corresponding headers.

Signed-off-by: Ravi Dondaputi <ravi.dondaputi@nordicsemi.no>
(cherry picked from commit c82c428)

Adds an override to force this Kconfig to 0 when partition manager
is enabled

Signed-off-by: Jamie McCrae <jamie.mccrae@nordicsemi.no>
(cherry picked from commit cf7c4d3)

This reverts commit 206c0ef.

Changes introduced by this commit to be moved to sdk-nrf.

Signed-off-by: Anton Zyma <anton.zyma@nordicsemi.no>

…ide"

This reverts commit bc38fb0.

Signed-off-by: Dag Erik Gjørvad <dag.erik.gjorvad@nordicsemi.no>

When TF-m is enabled on 54L the ROM_START_OFFSET should
not be overridden, even if MCUboot is enabled.

Signed-off-by: Dag Erik Gjørvad <dag.erik.gjorvad@nordicsemi.no>
(cherry picked from commit 46d1934)

Adds an override to force this Kconfig to 0 when partition manager
is enabled

Signed-off-by: Jamie McCrae <jamie.mccrae@nordicsemi.no>
(cherry picked from commit cf7c4d3)

…ooth version 6.3

Add definition and decoding for version 6.3.

Relates to zephyrproject-rtos/zephyr#109050

Upstream PR #: 109050

Signed-off-by: Vinayak Kariappa Chettimada <vich@nordicsemi.no>

…family

Add handling of the nrf92 chip family to a conditional statement.
The nrf92 family is similar to the nrf54h20 chip.

Signed-off-by: Sebastian Głąb <sebastian.glab@nordicsemi.no>
(cherry picked from commit 9702da9)

…nrf7120

Enable flash negative test for nrf7120.
Enable sample soc_flash_nrf for nrf7120.

Signed-off-by: Travis Lam <travis.lam@nordicsemi.no>
(cherry picked from commit c171ef8)

… modes

When FLASH_USES_MAPPED_PARTITION is enabled, Kconfig skips
FLASH_LOAD_OFFSET and FLASH_LOAD_SIZE. However, the linker scripts
only used the DT-based ROM_ADDR/ROM_SIZE path when both
FLASH_USES_MAPPED_PARTITION and CONFIG_XIP were set. For non-XIP
modes (e.g. MCUboot ram_load), the code fell through to the else
branch relying on the missing configs, causing ROM_SIZE to underflow
to 0xFFFFFFFFFFFFFFFF and a linker overflow error.

Fix by checking only FLASH_USES_MAPPED_PARTITION for ROM_SIZE, and
handling ROM_ADDR separately for XIP (DT address) vs non-XIP
(RAM_ADDR).

Signed-off-by: Albort Xue <yao.xue@nxp.com>
(cherry picked from commit 1cf0cc2)

The current default stack space for net_mgmt thread is 800 bytes
and it can be too small in some boards like nrf5340dk/nrf5340/cpuapp
like shown in this log. Increase the stack to 1024 so that we avoid
updating the value in near future.

Running TESTSUITE dhcpv6_tests
===================================================================
START - test_confirm_exchange_after_iface_down
E: ***** USAGE FAULT *****
E:   Stack overflow (context area not valid)
E: r0/a1:  0x00010fc4  r1/a2:  0x01000000  r2/a3:  0x00000020
E: r3/a4:  0x200022a8 r12/ip:  0x00000020 r14/lr:  0x20003088
E:  xpsr:  0x00011400
E: Faulting instruction address (r15/pc): 0x200030b8
E: >>> ZEPHYR FATAL ERROR 2: Stack overflow on CPU 0
E: Current thread: 0x20000d88 (net_mgmt)
E: Halting system

Signed-off-by: Jukka Rissanen <jukka.rissanen@nordicsemi.no>
(cherry picked from commit 46f59b0)
Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>

…et_defaults

The previous documentation was confusing. This adds much clearer
language.

Signed-off-by: Timothy Keys <timothy.keys@nordicsemi.no>

(cherry picked from commit 237dcf2)

…r ppib121

ppib121 node was missing offset that need to be applied when
setting up a connection between DPPI130 and DPPI120.

Signed-off-by: Krzysztof Chruściński <krzysztof.chruscinski@nordicsemi.no>

(cherry picked from commit 70ac296)

Use feature Kconfig instead of SoC Kconfig to determine initialization
priority as SD2PPI is not unique to only a single SoC.

Signed-off-by: Krzysztof Chruściński <krzysztof.chruscinski@nordicsemi.no>
(cherry picked from commit 61271f7)

Use DPPIC nodes to detect if certain SPU associated with that DPPIC
is present. NRF_SPUxxx defines are created even if SPU instances are
not present.

Signed-off-by: Krzysztof Chruściński <krzysztof.chruscinski@nordicsemi.no>
(cherry picked from commit 2fc1f87)

If SD2PPI configuration for GPPI is used, it indicates that
external function for configuring PPIB need to be used.

Signed-off-by: Krzysztof Chruściński <krzysztof.chruscinski@nordicsemi.no>
(cherry picked from commit 55450ea)

Raw TX data path already handle proper counting of errors in TX, do not
double count.

Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
(cherry picked from commit 080b4f4)

Add statistics tracking for raw/packet sockets (AF_PACKET), following
the same pattern as existing UDP and TCP statistics. This tracks packet
counts (sent, received, dropped) and byte counts for raw socket traffic.

The new CONFIG_NET_STATISTICS_RAW Kconfig option is enabled by default
when CONFIG_NET_SOCKETS_PACKET is active. Statistics are updated in the
AF_PACKET send path (net_context.c) and the packet socket delivery path
(connection.c).

Includes NET_MGMT user API support, periodic output, and Prometheus
metrics integration.

Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Assisted-by: Cursor:opus-4.6
(cherry picked from commit 33d6ac9)

Display raw packet socket statistics (recv, sent, drop, bytes) in the
"net stats" shell command output. This follows the same display format
as the existing UDP and TCP statistics sections.

Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
Assisted-by: Cursor:opus-4.6
(cherry picked from commit fb69902)

Pull fixes for handling raw modes in VIF add/del/change.

Signed-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>
(cherry picked from commit fe8bb65)

1.Add host-configurable option to control UMAC behavior when reaching
  max display BSS limit (toggle between terminating scan or
  prioritizing by best RSSI).
2.RPU Version update from 1.2.14.8 to 1.2.14.9.i
3.Revert "Race free sleep design", It is affecting the Throughput in Wi-Fi.
The changes will be added as Enhancement later.

Signed-off-by: Karun Kumar Eagalapati <karun.kumar@nordicsemi.no>
(cherry picked from commit 1d32d66)

…epends on BSS limit

Add Kconfig to abort the display scan when the BSS limit is reached.

Signed-off-by: Kapil Bhatt <kapil.bhatt@nordicsemi.no>
(cherry picked from commit f53d66d)

…fter warm reboot

After sys_reboot or debugger reset on nRF54LM20, USB controller fails to
initialize because the VREGUSB peripheral retains state across warm
resets. Two issues are addressed:

1. Stale VBUS_DETECTED/VBUS_REMOVED events from the previous boot
   remain set in the event registers. When interrupts are enabled
   without clearing them first, the ISR fires immediately with
   potentially wrong event type (VBUS_REMOVED can overwrite
   VBUS_DETECTED in the handler).

2. When USB cable stays connected across a reboot, no new
   VBUS_DETECTED edge occurs because the peripheral was never
   stopped. The regulator callback never fires, so the wrapper
   never posts NRF_USBHS_PHY_READY, and usbhs_enable_core()
   blocks indefinitely or times out.

Fix by clearing stale events before enabling interrupts, and by
reading the undocumented STATUS register (base + 0x400, bit 2) after
TASK_START to detect VBUS-already-present and synthesize the
REGULATOR_VOLTAGE_DETECTED callback. This matches the approach used
in the original inline vendor quirks added in commit 66b938f
("drivers: udc_dwc2: Add nRF54LM20A vendor quirks")
before the refactoring to a separate regulator driver.

Signed-off-by: Aleksander Strzebonski <aleksander.strzebonski@nordicsemi.no>
(cherry picked from commit f72c0cd)

Bumps [idna](https://github.com/kjd/idna) from 3.11 to 3.15.
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.11...v3.15)

---
updated-dependencies:
- dependency-name: idna
  dependency-version: '3.15'
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>