S-CORE Daily

[dcalavrezo-qorix]

This thread collects S-CORE Daily — daily digest of Eclipse S-CORE activity.

Each issue is posted as a comment below, so subscribe to this discussion to get every new issue as a notification. Generated automatically from public eclipse-score activity; every item links to its source. Corrections and feedback welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-08-26

Headline: A busy Wednesday for S-CORE: three releases shipped (including a breaking change in baselibs), 32 pull requests merged across 17 repositories, five community meetings posted their minutes, and 127 long-standing tracking issues in the kyron and score repos were closed.

In plain terms

Three modules cut new releases today — baselibs, bazel_cpp_toolchains, and the brand-new score_cpp_policies — with baselibs v0.2.12 carrying a breaking API change that consumers of StaticDestructionGuard need to check. Code activity was broad but incremental: clang-tidy cleanups, QNX build fixes, docs-as-code improvements, and continued work on code coverage tooling (llvm-cov) across several repositories. Community meetings covered testing report automation, Rust coding guidelines, and a quality-manager role assignment that was merged, reverted, and re-proposed pending a formal vote — worth watching if you're involved in governance. The large batch of closed issues in kyron and score appears to be historical process-template cleanup rather than new work. Nothing else in the window looks urgent for downstream users.

Releases

• baselibs — v0.2.12: basic C++ utility library update. Breaking change: StaticDestructionGuard<T>::GetStorage() now returns T& instead of a raw storage type — code that reinterpret-casts its return value needs updating.
• bazel_cpp_toolchains — v1.0.2: fixes QNX build ordering of user_link_flags relative to linked libraries, resolving undefined-reference errors.
• score_cpp_policies — v0.1.0: first release of this new repository, introducing centralized clang-tidy infrastructure and per-sanitizer Bazel features/flags.

From the meetings

Testing Community (minutes)

• Decisions: Tests should live in a separate directory, but the exact location doesn't matter since test frameworks can discover different paths.
• Open questions: Whether a single module verification report target can serve differently-configured test targets without maintenance overhead relative to the process_description template.

Infrastructure Community — Rust (minutes)

• Action items: @PLeVasseur to introduce the coding guideline in the Safety-Critical Rust Consortium's meeting the same day.

Security & Crypto FT (minutes)

• The meeting was cancelled due to holidays; discussion resumes 2026-09-09. Urgent topics should go to the security Slack channel.

Base Libs FT (minutes)

• Decisions: A new baselibs release for S-CORE 0.9 would go out the same day. For the vajson serializer open-sourcing, the code will initially live alongside the existing writer implementation with a Bazel config choice between pretty-printed and compact output, pending a performance-based decision on which to keep long-term.
• Open questions: More proposals welcome on baselibs#516 (renaming the ABI-compatible data types component).

General SW Dev Process Community (minutes)

• Decisions: @pahmann's PR adding him as Quality Manager (alongside @masc2023 and @PandaeDo) was merged. The community agreed llvm-cov based code coverage on Linux and QNX is viable, pending the Technical Lead Circle's final procedure decision.
• Action items: Process community to leave review comments, if any, on the large contribution/intro restructuring PR (score#3224).
• Open questions: How to properly configure llvm-cov on QNX given compiler-setting differences between coverage and non-coverage test runs, and who has the toolchain expertise to set it up.

Discussions worth following

• S-CORE & QNX (Infrastructure Community) — new comment from the 2026-08-26 QNX sync: good progress on an exception letter for QDL, feedback received, with a letter or timeline update expected. Link.

Code changes

baselibs

• [Change] Link unit tests to component requirements for bit-manipulation and bitmask operators, improving traceability (#499).

bazel_cpp_toolchains

• [Bug fix] Reorder user_link_flags after libraries to link, fixing QNX undefined-reference errors (#128).

communication

• [Bug fix] Resolved clang-tidy findings for stringview usage, uninitialized variables, and missing special member functions across the codebase, improving code safety and consistency (#1012, #1014, #1015).
• [Documentation] Fixed a broken link and a typo in the README (#1009).

docs-as-code

• [New feature] Testcase links in docs are now annotated with pass/fail/skip/disabled status (#739).
• [Bug fix] Improved data handling and bundle documentation, and fixed duplicate "needs" appearing from nested docs bundles (#751, #758).
• [Maintenance] Prepared needs templates for upcoming work (#762).
• 2 automated dependency updates merged (devcontainer, Python packages).

inc_security_crypto

• [Change] Restored QNX Rust toolchains in .bazelrc, unblocking QNX cross-compilation CI (#191).

inc_someip_gateway

• [Maintenance] Made Google Test a dev-only dependency so consuming modules can use the gateway's public mocks without pulling it in (#272).

lifecycle

• [Change] Introduced unified LLVM-based code coverage, replacing separate C++/Rust coverage pipelines (#526).
• [Maintenance] Standardized devcontainer integration and a small README fix (#516, #531).
• 2 automated dependency updates merged.

persistency

• [CI / automation] Improved release workflow reliability by skipping verification when release prep fails and fixing a git tagging error (#335).
• 2 automated dependency updates merged.

process_description

• [Change] Updated an implementation-process requirement, consolidating dependency-analysis needs to be fulfilled by SBOM generation instead (#783).

qnx_unit_tests

• [Change] Fixed environment-variable forwarding so multiple env vars are passed through correctly, not just the first (#41).

score

• [Change] Expanded infrastructure maintainers in CODEOWNERS (#3216). The quality-manager role-assignment PR for @pahmann was merged, then reverted, then reopened pending election-relevant approvals (#3213, #3218, #3220).

score-crates

• [Bug fix] Added cargo lockfile definitions required by a newer rules_rust version (#69).

score_cpp_policies

• [New feature] Added C++ compiler warning features (#33).

time

• [Change] Adopted the unified LLVM coverage pipeline, improved QNX download stability, and fixed a coverage job naming issue that broke the Bazel cache plugin (#186, #189, #191).
• [Maintenance] Added a cache-maintenance workflow and bumped workflow versions (#162).
• 3 automated dependency updates merged.

.eclipsefdn

• [Change] Archived the toolchains_qnx and toolchains_gcc repositories and added an incubator repository for ecu_model (#212, #219).

Overall: 10 automated dependency-update PRs merged today across inc_someip_gateway, lifecycle, logging, module_template, persistency, and time.

Issues

• lifecycle: [bug] IdentifierHash uses std::hash, unstable across compiler/toolchain builds, crashing the Launch Manager on a ControlClient request (#528).
• 23 issues opened, 127 closed in this window (most closures were long-standing kyron and score process-template tracking issues).

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-08-27

Headline: Lifecycle shipped two releases in one day (v0.4.0, v0.5.0) and a bazel module rename lands across the stack, while dependency-alignment and release-workflow cleanup dominate the merge queue.

In plain terms

The lifecycle module had a busy day: two new releases went out, and a chunk of merged work continues its migration to an mw::com-based control API and fixes to its release workflow. Across the org, a coordinated rename of the score_lifecycle_health bazel module to score_lifecycle touched multiple repos (bazel_registry, lifecycle) — one bazel_registry PR explicitly removes an incorrect 0.4.0 release, so if you consume that package, check you're not pinned to it. The Time and Persistency feature teams and the Technical Lead Circle posted their regular meeting notes, with the Tech Lead Circle flagging an interesting prototype linking Lobster traceability reports into the Sphinx docs pipeline. Nothing here looks urgent, but the lifecycle and bazel_registry renames are worth a glance if your builds depend on those modules.

Releases

• lifecycle v0.4.0 — adds working-directory support for deployment configs, plus other fixes since v0.3.0.
• lifecycle v0.5.0 — follow-up release the same day; changelog lists no new features/fixes/compatibility notes beyond v0.4.0.
• score_cpp_policies v0.1.1 — adds tests/CI for compiler-warnings features and migration documentation (#35, #37).

From the meetings

Persistency FT (minutes)

• New PR: feat: make KVS max snapshot count configurable persistency#383. Updated: persistency#376.
• Merged/closed: persistency#380, pull/386, pull/385, pull/382.
• Note: some changes merged without linking to issues.
• Open question: persistency#375 — @Ahmed-Elsaka-JC will discuss with ark whether he can handle it.
• Action item: persistency/pull/337 — @Ahmed-Elsaka-JC to review and approve if no issues; to be discussed at the next meeting.

Technical Lead Circle (minutes)

• Decision/status: no updates yet on the v0.9 release_candidate_09 branch.
• Discussed a prototype connecting Lobster traceability reports with Sphinx/sphinx-needs docs (bitmanipulation example), spanning playground branches in baselibs, docs-as-code, tooling, and score.

Time FT (minutes)

• v0.9 checklist (time#190): unclear what still needs to be done.
• ASIL-B requirements followup: all comments fixed, waiting on feedback about the meaning of ASIL_B rating in API requirements.
• Reviews: many PRs merged/closed this week. Open PRs from @gordon9901 — time#158 (@BjoernAtBosch to re-review today) and time#122 (needs more discussion). Other open PRs (doxygen docs, component requirements) are ready for review.

Code changes

.eclipsefdn

• [Change] Enable config_management module for qnx licence — (#215)

bazel_registry

• [Breaking change] Remove incorrect lifecycle 0.4.0 release — reverts a bazel-registry entry pending correct republishing (#512)
• Bazel module rename: score_lifecycle_health → score_lifecycle, part of harmonizing module names per the v0.9 release checklist (#511)

communication

• Added integration tests covering move-construction/assignment for mw::com Skeleton methods and Proxy methods, and fixed clang-tidy performance findings (#659, #820, #1003)

docs-as-code

• [Documentation] Improved metamodel reference docs (#748)
• [New feature] Added manual tag to docs targets to avoid build issues, across two follow-up PRs (#765, #766)
• [Tests] Downstream Bazel lockfile problems are now ignored so they don't block CI (#768)

inc_security_crypto

• [Bug fix] Updated stale module lockfile that was breaking workflows (#195)

inc_someip_gateway

• [Maintenance] Moved docs-as-code build rules out of shared BUILD files into per-component docs/BUILD (#273)
• [CI / automation] Bazel now retries dependency downloads to work around flaky CI networking (#274)

lifecycle

• mw::com control API: initial library-side implementation of the ilm_control interface using mw::com, closing lifecycle#480 — daemon-side follow-up still to come (#478)
• Bazel module rename: score_lifecycle_health → score_lifecycle (#530)
• Release housekeeping: aligned SCORE platform dependencies, extended release notes, adjusted/fixed the release workflow, moved sanitizer settings and docs-as-code dependency handling (#517, #534, #539, #543, #544, #547, #548)
• One automated github-actions dependency bump merged (#540)

logging

• Docs-as-code updates and CW_32 export changes merged (#280, #281)

module_template

• Automated github-actions dependency bump merged (#161)

os_autosd

• [Change] Added a docs-publish workflow, copied from module_template (#59)

score_cpp_policies

• Added CI/tests for the new compiler-warnings feature and migration documentation (#35, #37)

time

• [Change] Moved qnx_credential_helper to fix a broken cache maintenance workflow (#192)

tools

• [New feature] Introduced repo_policy_sync, a large new tool for repository policy management, followed by a src-layout refactor and a switch to run policy sync in plan mode (#10, #11, #12)

6 automated dependency bumps merged across devcontainer (1), inc_someip_gateway (2), logging (1), time (2).

Issues

• lifecycle: createTransition() aborts the whole daemon on any unrecognized run target name, instead of returning an error
• lifecycle: Remove scripts/prepare_release_notes.sh cleanup
• tooling: coverage: integration mode — scope external module roots (reference_integration)
• tooling: plantuml parser: 2.x rejects standard PlantUML constructs used in logging's design diagrams (blocks score_tooling 2.x adoption)

9 issues opened, 5 closed.

Footer

Generated automatically from public eclipse-score activity for the window shown in the briefing. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-08-30

Headline

A quiet weekend for meetings and discussions but a busy one for code: 24 pull requests merged across 21 repositories, two module releases shipped, and 38 issues closed.

In plain terms

Over the past three days (Friday through Sunday) the S-CORE project kept moving mostly through code contributions rather than meetings or discussions — there were no meeting minutes or new discussion threads in this window. Two releases went out: an updated toolchain platform module and a docs-as-code release with several new features and fixes. A notable bug fix landed in the lifecycle module addressing a hash function that wasn't stable across compilers, which could cause crashes in certain integration scenarios. Several repositories also picked up routine dependency and CI maintenance. Anyone building on lifecycle or docs-as-code should check the release notes for changes that affect their setup.

Releases

• bazel_platforms — v1.1.0: adds support for Ebclfsa 2.0.0-beta2.
• docs-as-code — v8.1.0: new features include annotating test-case links with results, a manual-build flag for docs targets (they no longer build automatically on //...), and a module verification report template; also fixes docs(data=...) usage and nesting docs_bundle() inside docs(). Modules can mix any docs-as-code 8.y.z versions.

Code changes

.eclipsefdn

• [Change] Enforce CI in inc_ecu_model — tightens CI requirements for the new repository (#220); follow-up fix to CI job names (#221).

.github

• [Change] Update profile README — automated refresh of the org profile from the latest metrics snapshot (#95).

bazel_cpp_toolchains

• [Change] Add Ebclfsa 2.0.0-beta2 — updates the toolchain so the SDK's linker (not the host's) is used correctly after extraction (#131).

bazel_platforms

• [New feature] Add Ebclfsa 2.0.0-beta2 support, matching the new release above (#22).

communication

• [Change] mw/com: add test for disabling field set/get in config — improves test coverage for a configuration option (#857).
• [Change] mw/com/dependability: split requirements into per-unit requirements for clearer traceability (#1008).

docs-as-code

• [New feature] Module verification report / complex templates — adds a new report template combining ideas from prior discussions (#763).

inc_ecu_model

• [Change] Initial repo setup — bootstraps the new repository with bazelmod, quality workflows, and placeholder code (#1).

lifecycle

• [Bug fix] Make IdentifierHash stable across compilers/binaries — fixes a hash implementation that previously wasn't guaranteed consistent across compiler/library versions, which could break identifier matching between processes (#527).
• [Change] Fix shutdown race condition in PGM that could fail integration tests (#537).
• [Change] Move to Bazel 8.7.0 (#550).
• [Bug fix] Add missing mod need in documentation (#555).
• [Change] Fix doc build (#556) and run formatter to correct a style error introduced by docs: implement general graph checks scheme #527 (#560).

logging

• [Change] Adopt the unified LLVM source-based coverage pipeline from score_tooling 2.2.0, replacing the older gcov-based coverage tooling, aligning with similar migrations in other modules (#282).

module_template

• [New feature] Integrate QNX IFS toolchain centrally — closes gaps identified in downstream modules needing QNX imagefs support (#160).

persistency

• [Bug fix] Add missing mod need in documentation (#397).

reference_integration

• [Maintenance] Bump devcontainer to 1.11.0, use KVM and docker-in-docker feature, enabling previously-broken local test/run workflows (#312).

time

• [Change] Upgrade to score_lifecycle 0.5.0 — follows the renaming of the score_lifecycle_health module to score_lifecycle, no functional changes beyond the rename (#197).

tooling

• [New feature] Add Graphviz support for Lobster reports, removing the need for a host-installed Graphviz binary and making report generation reproducible (#448).

tools

• [New feature] Discover policy PRs by label instead of branch head, fixing cases where renamed policies caused duplicate or missed pull requests (#13).
• [Maintenance] Convert score_tools into a uv workspace so components like cr_checker and repo_policy_sync can have independent dependencies (#17).
• [New feature] Extract repo_cache as a reusable component, so other tools can reuse the repository-caching logic (#18).

Dependency updates (automated): 10 automated dependency bumps merged across baselibs (2), cicd-workflows (1), inc_someip_gateway (1), infrastructure (1), lifecycle (1), module_template (2), process_description (1), and score (1).

Issues

• lifecycle — IdentifierHash uses std::hash, not stable across compiler/toolchain builds — crashes Launch Manager on a ControlClient request bug — closed, fixed by PR docs: implement general graph checks scheme #527 above.
• score — includes links are missing in several needs documentation, help wanted, high prio — closed.

12 issues opened, 38 closed in this window.

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-08-31

Headline

Eclipse S-CORE shipped four module releases and merged 32 pull requests on 2026-08-31, while community meetings zeroed in on the final checklist for the upcoming v0.9 release.

In plain terms

Several S-CORE building blocks got new versions today, including the lifecycle module (v0.6.0) and the kyron async runtime (v0.1.4). Across five community meetings, the recurring topic was readiness for the v0.9 release: which modules are done, which still need a new version, and open questions about AI-generated code and possibly delaying the release by a week. Code activity was broad — 32 substantive changes landed across 18 repositories, touching documentation tooling, the lifecycle and baselibs modules, and CI infrastructure. Nothing merged today was flagged as breaking, though one dependency update (lifecycle v0.5.0) is noted elsewhere as having introduced breaking changes to mocks. Anyone tracking the v0.9 timeline should watch the Technical Lead Circle minutes for a final go/no-go.

Releases

• bazel_cpp_toolchains v1.0.3 — adds support for Ebclfsa 2.0.0-beta2. (release)
• kyron v0.1.4 — version bump preparing for the broader v0.9 release. (release)
• lifecycle v0.6.0 — adds a "wait for file ready" condition so components can signal readiness once a configured file appears; includes other fixes and logging improvements. Pre-release notice: not intended for production use, no completed safety assessment. (release)
• score-crates v0.0.12 — fixes a Bazel cargo lockfile definition issue. (release)

From the meetings

Infrastructure Community

• Decisions/Updates: docs-as-code 8.1 adds a metamodel visualization and a module verification report template; module versions for the S-CORE 0.9 release were posted for review.
• Open questions: the reference_integration v0.9 PR does not compile out of the box (first docs build in months); potential to improve llvm caching via an external cache.
  (minutes)

Technical Lead Circle (TL & Communities & CFTs)

• Decisions: DR-8 implementation PR docs: restructure process metamodel #278 merged; PR Detailed Design #280 still in progress.
• Action items: @antonkri to double check Persistency status and prepare a module verification report PR; @arsibo to create a new Logging release; @lavrovvalera to create a new Time release; @antonkri to double check Config Management; @pawelrutkaq to check/raise crates to 0.0.12 in ref-int and switch Kyron to 1.4; @AlexanderLanin to switch docs-as-code to a newer version (e.g. 8.1.0); @antonkri to create a commit with initial release notes for modules; @antonkri to provide the tooling link for Show & Tell.
• Open questions: whether to move the release by one week; tooling module 2.1.0 brings a breaking change for reference_integration, flagged by @PiotrKorkus for the 0.10 cycle.
  (minutes, follow-up)

Architecture Community

• Decisions: reviewers should comment on PR add design decision include path #3196 (design decision include path); the name-collision question was split into a separate decision record, issue #3234.
• Open questions: clarification of the FR Shepherd role and effort expectations, requested by the Valeo-side attendee, was added to the agenda.
  (minutes, agenda addition)

SW Dev Process Community - S-CORE Safety Team

• Agenda: documents should link what they document; clarifying versioning; clarifying ownership of the Module Verification Report Template.
  (minutes)

Technical Lead Circle (Tech Lead Sync)

• Decisions: DR-8 PR docs: restructure process metamodel #278 merged, PR Detailed Design #280 in progress; module verification report should be integrated for v0.9 for baselibs, persistency, and logging.
• Action items: @antonkri to create a commit with initial release notes for modules; @PhilippM-qorix to clarify what to pay attention to when using AI-generated code (context: PR #275 review); @FScholPer to clarify whether the Eclipse Foundation Copilot license can be used in CI (helpdesk ticket opened).
• Open questions: whether to move the release by one week.
  (minutes)

Discussions worth following

• Communication FT Weekly [2026-08-31] — feature-team status update covering SOME/IP, Flatbuffers, Rust API, Methods & Fields, CI, and open bug tickets.
• S-CORE Daily — the collector thread for this newsletter series; already has 3 comments and is the place to follow future issues.

Code changes

.github

• [New feature] Add policy sync dashboard tab, giving a compliance overview with PR links and downloadable JSON (#96).

baselibs

• [Change] Add a Rust wrapper for score::cpp::stop_token, letting Rust applications interact with frameworks like lifecycle that require stop tokens (#461).
• [Change] Enable contributions under score/**/docs/** (#526).
• [Change] Retire unused OS APIs, removing unused cpuid/file-stream/make-dev libraries and making score/os:netdb public (#535).

cicd-actions

• [New feature] Optionally upload Bazel build/test profiles from CI runs for performance investigation (#32).

communication

• [Change] Move skeleton service element requirements (#1007).

config_management

• [Change] Switch to score_lifecycle v0.5.0, adapting to breaking changes introduced in that release's mocks (#58).

docs-as-code

• [New feature] Show test pass/fail status and link to source in verification report tables, instead of bare, uninformative IDs (#773).
• [Bug fix] Treat <error> test cases as failed instead of passed when parsing JUnit results (#774).
• [Bug fix] Preserve per-entry bundle data when rebasing documentation mount entries (#779).

inc_someip_gateway

• [New feature] Add a convenience alias for the SOME/IP config schema file (#262).

itf

• [Maintenance] Commit a module.bazel.lock file so Bazel lockfile-mode workflows work reliably (#140).

kyron

• [Change] Replace a raw waker array with StaticVec in wake_all, removing manual iterator bookkeeping (#167).
• [Change] Fix documentation (#169).

lifecycle

• [Change] Add "wait for file ready" condition support (#500).
• [Change] Use an identifier hash instead of an index for the dependency graph, closing a use-after-free-adjacent design issue (#523).
• [Change] Disable warnings originating from external code so the module's own warnings stay visible (#549).
• [Change] Set up the verification report using the shared central template (#551).
• [Change] Fix a deprecation warning from the mw::com runtime initialization API (#563).
• [Change] Log process startup timing for diagnostics (#565).
• [Change] Add release notes for v0.6.0 (#572).

logging

• [Change] Add record_property calls in tests for requirement traceability (#276).

reference_integration

• [Maintenance] Bump Ebclfsa SDK to 2.0.0-beta2 (#315).
• [CI / automation] Retry flaky SDK downloads (e.g. QNX) via Bazel instead of failing builds outright (#316).

score

• [Bug fix] Keep a software verification link mount-relative so it stays valid when the documentation bundle is mounted under a different prefix — needed for the 0.9 release (#3236).

tooling

• [Change] Add a "class" stereotype (#446).

tools

• [New feature] Schedule policy sync and support an apply mode, running a daily drift-detection plan without failing the workflow (#20).
• [New feature] Include policy metadata (IDs, titles, descriptions) in the JSON report (#21).
• [New feature] Ensure Bazel dependencies by adding a policy and operation for declaring the SCORE devcontainer as a direct dependency (#22).

mcp-servers

• 3 automated dependency updates merged (GitHub Actions and pre-commit/ruff bumps).

Elsewhere, 6 additional automated dependency bumps merged across cicd-workflows, inc_someip_gateway, kyron, lifecycle, logging, and time (9 total automated updates).

Issues

• docs-as-code: docs_bundle propagates transitive data to unrelated mount entries bug — opened and closed same day.
• docs-as-code: Public docs_bundle is not self-contained because bundle examples include files outside docs/ bug
• docs-as-code: fix: respect Bazel package boundaries when mounting docs bundles bug
• score: Decision Record for name collision in include paths & file names community:architecture

10 issues opened, 3 closed.

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-09-01

Headline

Eclipse S-CORE merged 23 pull requests across 13 repositories on 2026-09-01, with meeting minutes confirming SCORE v0.9 will ship next week using the existing release workflow while the new DR8 workflow gets polished.

In plain terms

No new module releases went out on 2026-09-01, but a busy day of code review kept several building blocks moving: cleanup work in baselibs, docs-as-code, and lifecycle, plus a QNX test fix in inc_someip_gateway marked as a breaking change. The Release Community's minutes are the headline: SCORE v0.9 is set to be released next week using the current (non-DR8) integration workflow, with a handful of modules (lifecycle_health, logging, time, config) still needing final touches. The SW Dev Process Community continues discussing template ownership and versioning. Two new discussions opened, including a question about building for generic aarch64 Linux targets. Twelve issues closed, several of them wrapping up a multi-part Bazel toolchain refactor.

From the meetings

General SW Dev Process Community (SW Dev Process Community)

Minutes by @masc2023, link

• Agenda for next session (Sep-03): continue discussion on versioning and template ownership, following up on an earlier thread.
• Open PRs to review: module_template#166.
• No decisions or action items were recorded yet for this upcoming meeting.

Release Community Meeting (Release Community)

Minutes by @PiotrKorkus, link

• Decisions:
  • "CPP toolchains v0.5.4 will be used for SCORE v0.9 release."
  • "SCORE release v0.9 will be created next week with the old integration workflow and DR8 will be integrated to main once all issues are fixed."
• Action items:
  • Kai to create a PR pulling cpp toolchains into known_good.json on the main branch.
  • Piotr to check the root cause of the test workflow failing on the release candidate branch.
  • Anton to create a PR for the persistency module verification report.
  • Piotr to check the Rust failures in the DR8 workflow.
• Open questions / tracked items (v0.9 integration checklist, issue #3186, tracking PR reference_integration#320):
  • orchestrator — needs to be deleted.
  • lifecycle_health — PR to bump to 0.6 still pending.
  • logging — release still to be created.
  • time — needs updating in known_good with a new release.
  • config — will be removed from v0.9 if problems persist, otherwise newest main will be integrated with a new release.
  • DR8 workflow (reference_integration#280) needs polishing before merging, to avoid introducing too much chaos.

Discussions worth following

• Generic aarch64 Linux target in reference_integration? (Q&A, @fortunaLim) — asks whether it's possible to build for aarch64 Linux with mainline glibc, outside the existing QNX and Elektrobit ebclfsa SDK paths; relevant to anyone targeting non-QNX aarch64 platforms.
• Logging CFT Weekly [2026-09-01] (Logging FT, @arsibo) — weekly logging feature-team meeting notes covering plans to create a new logging release and v0.9 goals/backlog items.

Code changes

baselibs

• Remove //score/datetime_converter target and functionality — the implementation was error-prone with leap-second bugs, removed before wider adoption (#471).
• Switch to score_cpp_policies for clang-tidy — centralizes linter configuration since bazel-tools-cc is unmaintained (#514).
• Retire unused OS select wrapper — QNX recommends poll() over select() (#536).

cicd-workflows

• Enable access to git repos in workflows — lets downstream users with private repos check them out (#226).

docs-as-code

• Make docs data root bundle data — reworks how documentation bundle files are declared for Sphinx (#785).
• Do not use literalinclude for now — reverted a broken approach pending a proper fix (#787).
• Remove obsolete license-check workflow — no longer providing working CI coverage for about six months (#788).
• Expand downstream compatibility coverage — adds kyron, lifecycle, logging, and time to downstream compatibility tests (#789).

inc_security_crypto

• Add pkcs11 provider backend pkcs11_dynload — loads a PKCS#11 module at runtime via dlopen() (#168).

inc_someip_gateway

• Breaking change: Run tests on QNX and apply fixes — Connect IPC message size reduced to fit QNX's lower IPC limit (#268).
• Run tests with sanitizers — helps catch bugs earlier (#281).
• Add clang-tidy and ruff checks and fixes — aligns tooling with the communication module ahead of a planned migration (#283).

lifecycle

• Remove test end file — control client test driver now sends SIGTERM directly to launch manager instead of polling for a file (#564).
• Add modernize-concat-nested-namespaces to clang-tidy and apply to codebase — collapses nested namespace declarations across 67 C++ files (#569).

mcp-servers

• Local harness apm — adds graphify and context management for local setup (#12).

os_autosd

• Adding warning list — adds a gcc warning list that throws a compilation error by default (#60).

os_images

• Pin cicd-workflows reusable workflows to a commit SHA — part of a large-scale CI refactoring across S-CORE repositories (#9).
• Update Ebclfsa image to 2.0.0-beta2 and enable IPv4 multicast — makes the image more interchangeable with the Ubuntu image (#30).

reference_integration

• Make timeouts more stable for QNX (#322).
• Use Bazel label for config_management patch reference — aligns with the other seven known_good.json entries (#324).
• Remove Orchestrator module — was scheduled for removal in 0.8 (#325).

tools

• Cross-repository apply bug fix — updates generated PR bodies/labels via GitHub REST, and configures bot identity for cached checkouts (#23).

.eclipsefdn

• Adding os_autosd homepage (#222).

7 automated dependency updates were also merged across baselibs, inc_someip_gateway, lifecycle, module_template, and os_images.

Issues

• communication: Bug: SIGABRT when two independent polling proxies use the same LoLa event — closed, tagged p0.
• Multiple bazel_cpp_toolchains issues tracking a feature-composition refactor of Linux/QNX toolchain templates were closed (#86, #87, #88, #89, #90, #91, #92).

5 issues opened, 12 closed.

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-09-02

Headline

Eclipse S-CORE published three releases and merged 22 pull requests across 12 repositories on 2026-09-02, including a coverage-pipeline overhaul for baselibs and a fix for silently-accepted broken documentation links in docs-as-code.

In plain terms

Three modules — docs-as-code, logging, and the core score repo — shipped new versions today, mostly fixes and documentation cleanup rather than new features. The baselibs and logging repositories both adopted a shared, unified way of measuring test coverage across C++ and Rust code, which should make quality reports more consistent project-wide. In docs-as-code, a bug that let documentation reference undeclared or broken links without failing checks was closed. Community meetings covered Rust safety guidelines, code-scanning follow-ups for baselibs, and an interest group session on hardware accelerators/AI. Nothing breaking or urgent stands out; routine maintenance and cleanup dominated the day.

Releases

• docs-as-code v8.1.1 — Bug-fix release: correct handling of bundled documentation data on rebuilds, fixed test-case link reporting, module-verification-report now shows test results, and additional metamodel checks. Compatible with any docs-as-code 8.y.z. (release)
• logging v0.2.3 — Adds dynamic configuration and file-transfer migration, DLT log capture documentation, safety documents for logging, and adoption of the shared LLVM coverage pipeline; several documentation and CI fixes. (release)
• score v0.7.2 — Small documentation fixes (quality manager role assignment, software verification link) and a dependency bump to docs-as-code v8.1.1. (release)

From the meetings

Infrastructure Community — Rust (link)

• Notes: shared links on Rust safety-critical coding guidelines, a rust-sig discussion, and an article on Rust safety certification. No formal decisions or action items recorded.

Base Libs FT (link)

• Action items: upload scanning results to GitHub Code Scanning; unify clippy, ruff, and clang-tidy since all are based on aspect_rules_lint; clean up the clang-tidy infrastructure in score_cpp_policies, currently hampered by misleading documentation.
• Open question: whether to cancel next week's Baselibs weekly meeting (2026-09-09), as two regular attendees are unavailable.

Lifecycle FT (2026-09-16 minutes, 2026-09-23 minutes)

• Placeholder entries for upcoming meetings; no participants, agenda, or minutes recorded yet.

Discussions worth following

• Interest Group: HW Accelerators/AI — weekly meeting notes posted, referencing an AGENTS.md addition to the score repository; worth watching for how AI-agent tooling gets integrated into the project. (comment)

Code changes

.github

• [Bug fix] Clarify policy-sync dashboard status indicators, replacing ambiguous exclamation marks with clear red-X markers so repositories with an open policy PR show correctly as an actionable state (#97)
• [CI / automation] Added shared daily and PR workflows so .github follows the organization's common maintenance and pull-request check setup (#98)

baselibs

• [Change] Adopted the shared LLVM coverage pipeline from score_tooling, replacing the C++-only gcov/genhtml flow with a single report covering both C++ and Rust, line and branch data, and consistent baselines (#533)

bazel_registry

• Automated dependency update merged (1 change, GitHub Actions hardening).

communication

• [Change] Added a test covering an interface with events, fields, and methods together (#1018)
• [Change] Split the generic skeleton and service elements for clearer structure (#1027)
• [Change] Fixed deprecated runtime initialization (#1034)
• Plus 2 automated dependency updates.

docs-as-code

• [New feature] Added explicit support for treating generated bundle documentation as sources, keeping data for supporting/runtime files, and preserving generated source roots through the bundle manifest (#786)
• [Bug fix] Basedpyright warnings are now treated as errors and the existing warning backlog was cleared, closing a gap where 29 warnings had silently accumulated (#792)
• [Bug fix] Undeclared links are now rejected while parsing the metamodel, fixing a case where broken documentation links failed silently (#793)
• [Bug fix] Fixed a needs_json data issue with a reproduction scenario and restructuring (#796)
• [Maintenance] Annotated resolved source files to fix a pre-commit type-checking failure (#795)
• Plus 1 automated dependency update (GitHub Actions, 2 bumps).

inc_someip_gateway

• [Maintenance] Fixed compiler warnings introduced by the LLVM 19→22 upgrade (#284)
• Plus 1 automated dependency update.

lifecycle

• [Bug fix] The daemon now rejects an unrecognized run target instead of aborting entirely, closing a crash risk where an invalid transition request could take down the whole process (#542)
• [Change] Documentation builds now run on pull requests instead of only from main, and unused license-check/reference-integration workflows were removed (#561)

logging

• [Change] Removed persistent configuration and a related flag from the CW_34 export path (#289)
• [Documentation] Fixed cross-references broken by aggregated documentation builds (#290) and renamed the datarouter_backend README to avoid being excluded from aggregated builds (#292)

process_description

• [Change] Clarified references and formatting in the verification-process requirements documentation (#787)

reference_integration

• [Change] Bumped to lifecycle 0.6.0 for a new feature, expected to remain backwards compatible (#321)
• [Change] Extracted bazel_cpp_toolchains to known_good per a team decision, and corrected a command in generated MODULE.bazel files (#326)

Automated dependency updates: 5 merged across communication (2), inc_someip_gateway (1), rules_imagefs (1), and score (1).

Issues

• baselibs: Fix duplicate Sphinx label baselibs_architecture
• communication: Flaky test in move-construct skeleton integration test flaky-test
• score-crates: iceoryx2-pal-posix-qnx8 always needs a C toolchain, breaking hermetic C++ consumers

7 issues opened, 10 closed.

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-09-03

Headline

Eclipse S-CORE shipped four releases and merged 29 pull requests across 15 repositories on 2026-09-03, headlined by a new time v0.0.2 with QNX build support and a breaking docs-as-code cleanup.

In plain terms

Four modules got new releases today, including a first v0.1.0 for rules_imagefs (a tool for building disk images used in testing) and a fresh v0.0.2 for the time module that adds QNX platform support among many other improvements. Documentation tooling (docs-as-code) removed an old, deprecated option — anyone building docs with that option will need to update, so it's flagged as a breaking change. The Tech Lead Circle discussed possibly delaying the v0.9 release by about a week and continued planning for this very newsletter to run automatically. Seventeen new issues were opened, mostly routine cleanup and traceability work in baselibs, and five were closed.

Releases

• config_management — v0.2.0: updated build tooling versions and switched to score_lifecycle v0.5.0.
• logging — v0.2.4: minor fixes removing the need for patches in the reference integration platform, plus documentation fixes.
• rules_imagefs — v0.1.0: adds ext4 disk-image creation for integration testing; first tagged 0.1.x release for this module.
• time — v0.0.2: exposes daemons publicly, adds QNX build support and a devcontainer for it, refactors CI workflows and CodeQL analysis, and improves unit test coverage.

From the meetings

Meeting Minutes - Tech Lead Sync (Technical Lead Circle)

Link

• Decisions / status:
  • v0.9 release status: "in Progress, probably we will need to move the release v0.9 at least by one week"
• Action items:
  • @PhilippM-qorix to send the AI-usage-in-development proposal to the Technical Leads.
  • @BjoernAtBosch to take the Daily Newsletter proposal to the community for announcement.
  • @FScholPer is clarifying with the Eclipse Foundation how to run the newsletter in CI.

Persistency FT Meeting Minutes 2026 (Persistency FT)

Link

• Updates:
  • New issue: persistency#402.
  • persistency#366: @Ahmed-Elsaka-JC will create subtasks.
  • persistency#375: @arkjedrz will provide the correct command for execution (originally raised by @Saumya-R).
  • Note: some changes were merged without linking to issues.
  • PR persistency#383 is approved and needs to be merged.
  • PR persistency#376 was updated.
• Open items:
  • persistency#337: feedback provided by @Ahmed-Elsaka-JC, waiting on the author to address review points.

Discussions worth following

• Generic aarch64 Linux target in reference_integration? — a Q&A thread on whether S-CORE could support a generic aarch64 Linux target; @opajonk discussed which OS dependencies would need to be covered and shared experience testing on a Raspberry Pi 5 (comment, comment).
• S-CORE Daily — the community discussion about this newsletter received a new comment: yesterday's edition was posted for feedback (link).

Code changes

baselibs

• [Change] Add vajson safety artifacts — contributes vector safety artifacts for vaJson, addressing Testing Community: Kick-Off #203.
• [Change] Fix deprecated implicit copy ctor — fixes a rule-of-five violation in a base type; no user-facing impact.
• [Documentation] Lower quick-start heading level and Disambiguate module architecture Sphinx label — documentation structure and duplicate-label fixes.
• [Change] Increase http_connector_retry_max_timeout to 30s — addresses timeout issues occasionally seen when downloading the QNX SDP.

communication

• [Change] mw/com/dependability: split requirements per high-level architecture.
• [Change] Upgrade baselibs to released version 0.2.12 — also locks the lockfile mode to ensure reproducible dependency resolution.

docs-as-code

• Breaking change — Drop deprecated scan_code parameter — simplifies the API; anyone still using this parameter needs to update.
• [Bug fix] Exclude nested bundle mount roots — fixes duplicate document/ID discovery when a documentation bundle is mounted inside another Sphinx source tree.
• [Refactoring] Introduce wrapper for bundle declaration — untangles the public docs-build functions to ease future changes.
• [CI / automation] Try new caching action — replaces an outdated link-check workflow with Bazel caching to speed up CI.

inc_someip_gateway

• [New feature] End to end performance tests — reworks performance/profiling tests to run under Bazel, a first step toward better performance visibility.

kyron

• [Change] Adopt the LLVM coverage pipeline from score_tooling 2.2.1 — replaces the old coverage flow, a prerequisite for future score_tooling upgrades.

lifecycle

• [Bug fix] Enable ASSERT_DBG in unit tests — fixes a missing debug-assert flag that had silently disabled certain checks.
• [Change] Do not skip sanitizer tests in pipeline — re-enables sanitizer tests, fixing Improvement: Document Configuration Management process #538.
• [Documentation] Lower quick start heading.

logging

• [Change] Link detailed design with wp__sw_implementation.

orchestrator

• [Change] Adopt the LLVM coverage pipeline from score_tooling 2.2.1 — introduces Bazel-level code coverage where previously only a Cargo-based job existed.

reference_integration

• [Change] Bump score_logging to v0.2.3 — prep work for the score v0.9 release.
• [Change] Fix docs build after upstream removal of docs_combo_experimental — unblocks the documentation build step.

rules_imagefs

• [New feature] Add ext4 image creation — creates disk images for integration tests (usable with QEMU); also bumps Bazel to 8.6.0.

scrample

• [Maintenance] Keep declared Bazel version at 8.6.0 or newer — aligns with the org-wide minimum-Bazel-version policy.

time

• [Change] Improve time daemon coverage — closes several branch/line coverage gaps and documents justified exceptions.

tooling

• [Change] Class Diagram <-> Sequence Diagram, Add docs for cpp parser, Parse free function — ongoing work on the C++ parsing/diagramming tooling.

Automated dependency updates: 11 automated bumps were merged across baselibs (2), communication (2), inc_someip_gateway (1), logging (3), module_template (1), process_description (1), and time (1).

Issues

• [baselibs] Six new traceability-cleanup issues opened for hash, concurrency, filesystem, safecpp, result, and string_manipulation/utils components (tooling: Integrate standards charts and Correct tests for checks #550–Logging CFT Weekly [2025-03-04] #556, @4og).
• [communication] Flaky test in move-semantics integration test — flaky-test label.
• [inc_security_crypto] openssl-sys patch mismatch in feature-reduced builds.
• [score-crates] Release 0.0.12 unusable.
• [tools] cr_checker silently accepts malformed copyright headers.

17 issues opened, 5 closed.

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-09-06

Headline

Eclipse S-CORE merged 26 pull requests across 12 repositories and shipped a new lifecycle v0.6.1 release over 2026-09-04 to 2026-09-06.

In plain terms

Over the last three days the lifecycle module got a new release (v0.6.1) that removes an unmaintained build-tooling dependency and fixes early-termination bugs. Twelve repositories saw merged work, from documentation tooling improvements to safety-requirements refinement for the Time feature. The Time feature team discussed how to balance safety (ASIL-B) qualification with practical scope, and the Technical Lead Circle confirmed the S-CORE release timeline may slip by about a week and touched on plans for this very newsletter. Two new community discussions were opened, including a request for an official S-CORE logo. Nothing breaking was flagged in this window.

Releases

• lifecycle — v0.6.1: removed the unmaintained "Hedron's Compile Commands Extractor for Bazel" dependency and related scripts, and made several dependencies non-dev for easier integration. Not intended for production use (no completed safety assessment).

From the meetings

Base Libs FT (thread)

• No meeting held this week ("No meeting this week").

Time FT (thread)

• Decisions: Proposal to merge score#3020 "how it is now and improve it further after FMEA and FTA done"; merge queues approved by the team for smoother multi-PR merging ("Approved from the Team, @NEOatNHNG will create change for that").
• Action items: @NEOatNHNG to create the change enabling merge queues.
• Open questions: how to scope ASIL-B on requirements — whether it should also cover internal data-integrity guarantees, or stay limited (e.g. QM + FFI toward memory), remains undecided.

Technical Lead Circle (thread)

• Decisions: none formally recorded this round.
• Action items: @PhilippM-qorix to send a proposal for AI usage in the development area to the Tech Leads; @BjoernAtBosch to take the Daily Newsletter forward to announce it to the community; @FScholPer to clarify with the Eclipse Foundation how to run the newsletter in CI.
• Open questions: Status of v0.9 — "in Progress, probably we will need to move the release v0.9 at least by one week."

Discussions worth following

• Logo for S-CORE organization in github (Ideas, by @limdor) — the eclipse-score GitHub org currently has no logo even though the Eclipse Foundation project page does; asks whether one should be added.
• SOME/IP in S-CORE [2026-09-04] (Communication FT, by @LittleHuba) — proposal to use mw::com with LoLa as the IPC mechanism within SOME/IP, plus an updated architectural view for the SOME/IP Gateway and Binding use cases.

Code changes

.github

• [Refactoring] Use shared repo-cache for repository checkouts — unifies checkout caching across registry, reference-integration, and platform repos (#99).

baselibs

• [Change] Add test for flatbuffers array header, characterize InterruptibleState SetValue/SetError, and implement LockedPtr::transform — expand test coverage and add a monadic transform helper for concurrency utilities (#437, #517, #456).
• [Change] Keep going and collect clang-tidy reports on CI, then fix the clang-tidy SARIF upload ref — CI no longer aborts on first clang-tidy failure, and its report upload now works correctly (#538, #559).
• [Change] AGENTS.md: clarify copyright header scope and docs layout (#540).

communication

• [Change] Enable core dump extraction for bigdata integration test — stores core files for easier debugging when they're generated (#739).
• [Change] Remove dummy test that falsely linked a safety requirement, exposing the requirement as genuinely uncovered (#1047).

docs-as-code

• [New feature] Add local Needs exports to documentation bundles — lets each bundle expose a standalone requirements inventory for independent validation (#772).
• [Refactoring] Remove deprecated source code linker cache, consolidating on the Bazel-generated sourcelinks path (#803).

inc_security_crypto

• [Change] Adopt the LLVM coverage pipeline from score_tooling 2.2.1 — first coverage flow for this repo, reporting C++ and Rust line/branch coverage together (#198).

lifecycle

• [Change] Fix incorrect behaviour on early termination, including clearer termination reasons and refactored process-info helpers (#576).
• [Change] Remove "Hedron's Compile Commands Extractor for Bazel" as an unmaintained dependency, mark documentation dependencies public, and remove a duplicate bazelrc import — cleanup enabling patches to be removed from reference_integration (#593, #594, #595).
• [Change] Add release notes for v0.6.1 (#596).

reference_integration

• [Change] Fix documentation builds and modules layout, add a missing doc file, fix Graphviz rendering, and move to lifecycle 0.6.1 (#331, #332, #333, #334).

score

• [Change] [TIME] Add ASIL-related requirements and rework existing ones — defines safety-related stakeholder/feature requirements for Time, including FFI and safe time qualification asks (#3020).

tooling

• [New feature] Group architectural design views in software_arch docs — reorganizes the Sphinx page into clearer Requirements/Design/API/Analysis sub-sections (#455).

tools

• [New feature] Handle empty repositories in organization-wide policy sync, skipping them instead of failing (#27).
• [Bug fix] Configure Git credentials for apply mode so policy-update pushes no longer fail with a missing-username error (#29).
• [CI / automation] Separate hourly plan and daily apply for repository policy sync, giving frequent drift visibility without frequent remote mutations (#30).

Automated dependency updates: 7 bumps merged across baselibs, inc_security_crypto (3), lifecycle, module_template, and time.

Issues

• baselibs: How do we satisfy the process demands described when deviating from MISRA required rules
• inc_someip_gateway: Add CRC Mechanism to gatewayd for ASIL Compliance

10 issues opened, 5 closed.

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-09-07

Headline

Eclipse S-CORE shipped reference_integration v0.9.0 and merged 16 pull requests across 8 repositories on 2026-09-07.

In plain terms

The reference integration project — the demo/reference stack that ties S-CORE modules together — reached version 0.9.0, bundling toolchain updates, a logging demo app, and documentation improvements. The lifecycle module saw the most activity, with several process-supervision refactors landing and one CI change reverted the same day after being found problematic. Community meetings focused on preparing v0.9 release notes and lessons learned, plus a continued discussion on SOME/IP communication design. Anyone tracking reference_integration or lifecycle should check the linked pull requests for details; no breaking changes were flagged today.

Releases

• reference_integration — v0.9.0: release rollup including a dashboard tag-resolution fix, removal of the old autosd toolchain, a new logging demo app, a Bazel 8.6.0 update, README improvements (QNX8 aarch64, RPi guide), and dependency bumps (score_config_management, score_itf v0.5.0).

From the meetings

Infrastructure Community

Minutes by @AlexanderLanin — link

• Decisions: Repo Policy Sync is now running with the first few policies.
• Open questions: Semi Maintained Ticket View shared for review.

Technical Lead Circle — Tech Lead Sync

Minutes by @b-rei — link

• Decisions: Release notes for v0.9 need to be revised; acceptance requested at module owner level.
• Action items: Prepare a lessons-learned covering integration process, release notes, documentation, and patch handling (DR08). @FScholPer will check how to improve automated release-note creation.
• Open questions: Feedback on the AI Usage proposal requested within 2–3 days; ML3 feedback expected after 14.09; RUST strategy and implementation approach needs revision and refinement.

Architecture Community

Minutes by @qor-lb — link

• Decisions: Meeting was cancelled due to an insufficient number of agenda items; next meeting scheduled for Sept 14th.

Technical Lead Circle — TL & Communities & CFTs

Minutes by @antonkri — link

• Open questions: Status of v0.9, tracked via reference_integration#320.

Discussions worth following

• Communication FT Weekly [2026-09-07] — new weekly thread from the Communication feature team covering SOME/IP, Flatbuffers, Rust API, and open CI/infrastructure tickets.
• SOME/IP in S-CORE [2026-09-04] — follow-up meeting notes revisit a SOME/IP binding proposal, with concerns raised about reusability compared to a similar proposal from a year ago, plus a question on mw_com Allocate handling for the SOME/IP binding.
• Diagnostics - Weekly — discussion on reviewing inc_diagnostics#26 and how to proceed with a related proposal.
• Generic aarch64 Linux target in reference_integration? — clarifies that the eb-aarch64 build target is currently general-purpose (not EB-corbos-specific), though this may change in later versions.

Code changes

.eclipsefdn

• [Change] Add coverage_tool repository for the S-CORE coverage pipeline — new infrastructure repo to host the LLVM source-based coverage pipeline, published as Bazel module score_coverage (#223)

bazel_registry

• [Change] Extend baselibs and cfg mgmt maintainers by request (#516)

communication

• [Change] Rust target edition removes and rustfmt fix — Rust targets now use the toolchain's default edition instead of per-target settings (#1050)

docs-as-code

• [Change] Make central viewport usable on all screens — improves documentation readability on larger screens (#805)

lifecycle

• [Change] Processes construct their own supervision — moves alive-supervision construction into the ProcessInfoNode constructor, combining the alive monitor thread and implementation (#522)
• [Change] Alive monitor refactor cleanup — follow-up cleanup after docs: Setup demo repository which can link feature-requirements #522, renaming start/stop methods and restructuring supervision files (#571)
• [Change] Introduce counting and waiting test-utility processes — new test utilities for waiting on process counts via named semaphores (#587, #589)
• [Change] Use //... in test workflow — broadens test coverage now that no failures occur (#604)
• [CI / automation] Use new cache actions, then reverted the same day after issues surfaced (#607, #608)
• 2 automated dependency bumps were also merged in lifecycle.

logging

• [Bug fix] Resolve log bridge FFI stable compiler compatibility — fixes crashes when building score_logging against modern stable Rust toolchains, unblocking related inc_security_crypto issues (#275)

mcp-servers

• 3 automated dependency updates merged (setup-uv, ruff-pre-commit, ruff requirement).

reference_integration

• [Change] Release candidate v0.9 — the large integration PR behind today's v0.9.0 release (#320)

Issues

• .github bug: repo sync overview broken good first issue
• 15 opened, 9 closed across the organization today.

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-09-08

Headline

Eclipse S-CORE merged 22 pull requests across 20 repositories on 2026-09-08, with community meetings covering the v0.9 patch follow-up and security/crypto review backlog.

In plain terms

No new releases shipped today, but the project kept moving fast on the follow-up work from last week's v0.9 release: the reference integration repo updated its module version pins and patch overview, and the website published the v0.9 release notes. Several modules landed sizeable engineering work, including a new diagnostics API, a franca datatype parser for communication metadata, and QNX process configuration for the time module. The Release Community meeting flagged a handful of module areas (communication, lifecycle, platform, tooling) still needing patch review before they're fully aligned with v0.9. The Security & Crypto team continues to have a backlog of pull requests awaiting review — worth watching if you depend on that module.

From the meetings

Security & Crypto FT

• Decisions: None recorded this session.
• Action items:
  • PR review backlog highlighted as a concern — too many topics for one hour, many PRs waiting for review.
  • Access control for Crypto (score#3058) — image recreated after being lost, currently under review by ETAS, owner @christianbe9.
  • Backlog grooming continues via the project board.
• Open questions: Ideas requested to improve the weekly meeting format given the volume of pending PRs.
• Minutes by @sunildevda

Release Community

• Decisions: SCORE v0.9 has been created (release, docs); main branch of reference_integration updated with v0.9 versions (PR #336). For communication, it was agreed the dev_dependency setting stays as-is.
• Action items:
  • @LittleHuba to check visibility of communication examples currently located in tutorial doc pages.
  • @kgraeper to forward and check the 4 pending lifecycle patches.
  • @PiotrKorkus to check the pending platform and tooling patches.
• Open questions: How to handle modules whose examples don't expose the real use case — agreed a separate example directly in reference_integration is acceptable when linking from the module repo isn't a good fit.
• Minutes by @PiotrKorkus

SW Dev Process Community — Safety Team

• Decisions: None — no new points were discussed this session.
• Action items: Discussion points captured from the September 1 meeting to be continued at the next meeting (Sep 15).
• Open questions: None recorded.
• Minutes by @CryptoNutcase

Discussions worth following

• Logging CFT Weekly [2026-09-08] — Logging FT meeting minutes by @arsibo, including a decision to pursue a common code-coverage solution and a CFT logging proxy, with @arsibo noted as owner of AVL's Murathan Güzel taking over that task.
• S-CORE Fortnightly — new recurring thread for a two-week digest of S-CORE activity, aimed at both technical and non-technical readers; subscribe here for future issues.

Code changes

.github

• [Change] Update profile README — automated refresh of the organization profile README from the latest metrics snapshot.

bazel_cpp_toolchains

• [Documentation] Explain QNX SDP version selection — clarifies that SDP 8.0.4 selects a different archive than 8.0.0, reducing confusion for users configuring the QNX toolchain.

bazel_platforms

• [New feature] Add git ignore for the module — housekeeping to keep generated files out of version control.

communication

• [Change] Fix line numbers in literalincludes — tutorial documentation was pointing to the wrong lines of source code after later edits; line references are now corrected.

coverage_tool

• [Change] Bootstrap score_coverage from tooling/coverage with tests, lint and docs — extracts the LLVM source-based coverage pipeline into its own Bazel module, a step toward formal tool qualification under the S-CORE tool-management process (ISO 26262-8 clause 11).

docs-as-code

• [Tests] Add golden outputs for docs.bzl scenarios — replaces hard-to-maintain inline Python assertions with explicit golden-file outputs, making the documentation build's test scenarios easier to understand and update.

eclipse-score-website

• [Change] Milestone 0.9 release — publishes the v0.9 release notes on the public S-CORE website.

inc_diagnostics

• [Change] Add DTC C++ API for diag_lib — introduces a Diagnostic Trouble Code API for reporting fault status and configuring fault/debounce behavior, a building block for the diagnostics module.

inc_ecu_model

• [Change] Franca datatype parser — adds a parser/transformer for the Franca-based communication metadata model, including grammar, metadata class model, and deployment property handling.
• [Change] Fix workflow triggers on merge — CI fix so workflows trigger correctly on merge.

inc_someip_gateway

• [New feature] Replace C assert with S-CORE assert — standardizes on the project's own assertion mechanism instead of the C standard library one, for consistency across the codebase.

kyron

• [CI / automation] Change pin of workflows from main to commit — pins CI/CD workflows to a fixed commit hash instead of a moving branch, reducing the risk of unreviewed workflow changes.

lifecycle

• [Change] Simplify alive monitor time — removes the legacy NanoSecondType, simplifying the alive-monitor timing code (closes issue docs: hide safety and security if empty #483).
• [Change] Get rid of legacy names — renames files/classes and cleans up log messages and doxygen comments to drop outdated naming.

os_autosd

• [Change] Baselibs CI — disables an outdated build_autosd job and adds a nightly baselibs job.

reference_integration

• [Change] Alignment after v0.9 — updates module version pins to match the newly released v0.9.
• [Change] Make docs generated — moves documentation generation into the automated build.

testing_tools

• [Change] Move test scenario libraries under score/ — relocates C++/Rust test scenario libraries to align with the project's standard score/ layout (closes reference_integration#141).

time

• [New feature] Add QNX process configuration, schema, docs for TimeSlave reference integration — adds the QNX configuration, JSON schema, and example needed to build and run the TimeSlave process on QNX.

toolchains_rust

• [CI / automation] Pin workflow to commit not main — same CI hardening pattern as kyron, pinning to a fixed commit hash.

tooling

• [Change] [Puml Parser] fix class diagram grammar — corrects grammar handling in the PlantUML class-diagram parser.

tools

• [New feature] Enable globs & comments in exclude file — lets the exclude-file used by the copyright checker use glob patterns and comments, easing maintenance (closes issue Initial version of stakeholder requirements #24).

8 automated dependency bumps were also merged, in persistency (6), reference_integration (1), and time (1).

Issues

• inc_security_crypto: Support of Certificate parsing API — new feature request from the crypto team.
• inc_security_crypto: Support of get public key API — new feature request from the crypto team.
• lifecycle: Simplify alive monitor time cleanup — closed, resolved by PR QNX Compiler Configuration #603 above.

6 issues opened, 5 closed in this window.

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-09-09

Headline

Eclipse S-CORE merged 16 pull requests across 9 repositories on 2026-09-09, while the Infrastructure and Testing community meetings flagged a proposal to standardize on Rust Edition 2024 and closed out review of the v0.9 release.

In plain terms

No new releases shipped today, but the security/crypto module saw a wave of activity: 20 new issues were opened there, laying out a detailed roadmap for certificate handling, OCSP support, trust stores, and cross-provider key operations — useful context if you're building on that module. The Infrastructure community discussed upgrading the project's Rust code to the newer "Edition 2024" language standard, which would need to be written down as a formal platform requirement. The QNX operating-system integration also came up again, with a private-storage request pending with the Eclipse Foundation. On the code side, communication and docs-as-code had the most substantial changes, including internal refactoring and documentation tooling cleanup.

From the meetings

Testing Community

• Decisions: None recorded this session.
• Action items: None recorded beyond the agenda items — SCORE v0.9 release noted, and a pending review flagged for itf#139.
• Open questions: None recorded.
• Minutes by @PiotrKorkus

Infrastructure Community

• Decisions: None recorded this session.
• Action items:
  • A Rust Edition 2024 upgrade was proposed by @bharatGoswami8, with tickets opened in score_rust_policies#13 and toolchains_rust#42.
  • The Rust edition used in the project needs to be defined as a formal Platform requirement (see score#1499).
• Open questions: None recorded.
• Minutes by @dcalavrezo-qorix

Discussions worth following

• S-CORE & QNX — Infrastructure Community meeting minutes: the exception letter for QDL is done, and the group is re-requesting private storage from the Eclipse Foundation, restricted to S-CORE members (comment).
• S-CORE Daily — the previous day's newsletter thread picked up a follow-up comment (link).

Code changes

baselibs

• [Change] Post-process flatc jsonschema output into rich schema — generates JSON schema from Flatbuffers schema definitions with consistent ordering, easing comparison between generations.
• [Change] Correct requirement linking in flatbuffers tests — fixes traceability links between tests and requirements.

communication

• [Change] Split the generic proxy and service elements — splits genericproxy into separate files by functionality, field, and event, and relinks a previously broken test-to-requirement reference.
• [Change] Fix proxy method extract rvalue — small correctness fix in proxy method handling.
• [Change] Refactor OnProxyMethodUnsubscribe to remove code duplication — merges two near-identical unsubscribe methods into one, reducing duplicated logic.
• [Change] Preparation to enable -Wconversion — groundwork for turning on a stricter compiler warning that catches implicit type-conversion bugs.

docs-as-code

• [Refactoring] Simplify documentation target setup — general cleanup of the documentation build configuration.
• [Refactoring] Reorganize the documentation CLI — moves the documentation command-line tool into its own package, making its build ownership and integration contract clearer.
• [Refactoring] Remove sphinxdocs dependency — drops an external Bazel module dependency, simplifying the docs build and keeping ownership of the "Needs" generation in-repo.

inc_security_crypto

• [Change] Fix QNX build and tests — updates dependencies for QNX-compatible Rust builds and pins a compatible libc version, fixing QNX build/test failures.

lifecycle

• [CI / automation] Use new cache actions (only) — trials an improved Bazel build-cache action as an early adopter, ahead of a possible wider rollout.
• [Change] Compiler warnings from score_cpp_policies — starts migrating to a shared, stricter set of compiler warning policies.
• [Change] Add IdentifierHash::if_exists — adds a helper that constructs an identifier hash only when it already exists, avoiding unnecessary allocation.

module_template

• [Change] Added code and test for example component — adds a working code and test example demonstrating the docs_bundle usage pattern for new modules.

persistency

• [Documentation] README.md updates — removes an obsolete README and updates build/test instructions to reflect Bazel-only test running.

tooling

• [Change] [Puml Parser] Support note alias in class diagram — adds support for note aliases in PlantUML class diagrams.

One automated dependency bump was merged (coverage_tool).

Issues

• inc_security_crypto: 20 new issues opened outlining a roadmap for certificate management (CSR generation/parsing, OCSP, trust stores, cross-provider key operations) and crypto configuration — see #207 onward.
• score: Security for S-CORE Release v0.9 closed.
• tooling: PlantUML parser 2.x rejects standard constructs used in logging's design diagrams closed.

25 issues opened, 8 closed across the organization today.

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-09-10

Headline

Eclipse S-CORE merged 18 pull requests across 15 repositories on 2026-09-10, published a first os_images release, and heard from three feature teams that persistency, time, and safety-process work continues to move forward.

In plain terms

A good amount of routine engineering happened today: infrastructure and tooling improvements, QNX/QEMU test setup work, and a documentation-config refactor. The os_images repository cut its very first release (v0.0.0), bundling groundwork like license layout, Bazel toolchain updates, and new OS image support (Ubuntu, autosd, Ebclfsa). The Persistency feature team closed out several PRs and opened new issues to track follow-up work, including a question about how many snapshots a system should be allowed to keep. The Time feature team wrapped up its v0.9 program-increment tickets, moving anything unfinished to v0.10. Nothing this cycle was flagged as breaking or urgent — mostly steady progress.

Releases

• os_images — v0.0.0: first tagged release of the OS images repository, bundling license/layout setup, an autosd image folder, dependency updates, Bazel 8.6.0 requirement, devcontainer/dependabot setup, and new Ubuntu and Ebclfsa image support. This is a v0.0.0 tag — treat it as an early/pre-release baseline rather than a stable release.

From the meetings

Time FT

• Decisions: "v0.9 PI ticket #3011 is closed. All not closed tickets are moved to #3013."
• Action items: Callbacks API — @florianfueller.
• (link)

Persistency FT

• Updates: 5 new issues opened (persistency #409, #410, #411, #412, #413); persistency#375 closed; 8 PRs merged/closed since the last meeting; 1 new PR (docs: not all plantuml types supported #415) and 2 updated PRs (Technical Lead Circle [2025-02-17] #383, docs: Bugfix in YAML translation #401) still in flight.
• Follow-ups: persistency#337 fixes done, awaiting @umaucher's final review; cleanup of score#3052 moved/updated into score#3111, owned by @umaucher.
• (link)

SW Dev Process Community — S-CORE Safety Team

• Open questions: No participants recorded and nothing done "due lack of participants"; agenda repeats prior open items from the General and Safety threads.
• (link)

Discussions worth following

• S-CORE Daily — the previous day's newsletter (2026-09-09) picked up a new comment; the thread continues to serve as the running community digest (link).

Code changes

.eclipsefdn

• [Change] Replace strict status checks with merge queue — switches the persistency repo's branch protection to a squash merge queue, matching baselibs/communication/inc_someip_gateway (#218).

bazel_cpp_toolchains

• [New feature] Refactor features implementation — moves toolchain features to rule-based definitions instead of implementation-level definitions (#132).

communication

• [Change] Divide tests in public API and impl tests (#1010); Upgrade C++ toolchains in module integration, with mw::com's own toolchain upgrade to follow separately (#1065).

docs-as-code

• [Refactoring] Wrap environment access — centralizes environment-variable reading/parsing for consistent, typed configuration handling and clearer errors on missing config; flagged with a breaking-change note (#815). Add central config class — near no-op change that switches execution-context detection to Bazel variables and adds workspace path validation (#817).

inc_security_crypto

• [Change] Refactor integration tests for QNX ITF execution — adds shared ITF integration-test macro, process-runner utility, x86_64 QNX QEMU environment and IFS configuration (#166); Enable run_under_qemu to avoid the cap_net_raw capability unavailable on GitHub runners (#226).

inc_someip_gateway

• [New feature] Quality pack targets — adds Bazel targets for unit/component tests, code coverage, and module documentation tied to the SOME/IP protocol spec (#277).

itf

• [New feature] Add QEMU disk image parameter — lets integration-test binaries/data be supplied via an extra mounted image instead of modifying a QCOW2 image (#139).

lifecycle

• [Change] Document to_chars async-signal-safety assumption in signal_safe_log, closing out issue Copyright year #385 (#622).

os_images

• [New feature] Automatically mount second disk to /opt — mirrors QNX/Docker image behavior so integration-test data is available without extra manual steps (#29).

persistency

• [Change] Rollback googletest version to restore compatibility with baselibs (#415).

reference_integration

• [Change] Add SBOM — draft PR to generate a software bill of materials from code (#304).

tools

• [New feature] Support glob repository selection — lets Repository Policy Sync target repositories with shell-style glob patterns instead of a manually maintained exact-name allowlist, so new repos can be picked up automatically (#33).

module_template, tooling — 2 automated dependency bumps merged (module_template: actions-template-sync; tooling: devcontainer and github-actions groups), plus 2 more automated dependency updates elsewhere (inc_security_crypto, time).

Issues

• persistency: Maximum number of snapshots — open question on snapshot retention limits.
• tools: repo_policy_sync: support glob patterns for repository selection — opened and closed the same day, implemented via tools#33.
• 4 issues opened, 2 closed today.

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-09-13

Headline

Covering three days (2026-09-11 to 2026-09-13), Eclipse S-CORE merged 24 pull requests across 19 repositories and published two releases, including a first release of the new coverage tool.

In plain terms

This report covers a three-day window (Friday through Sunday) rather than a single day. The most notable news is the first release of coverage_tool (score_coverage), a new code-coverage pipeline for S-CORE, plus a docs-as-code fix that makes generated documentation use the full screen width. Work continued across many modules — lifecycle process handling, the SomeIP gateway, logging's DLT transport design, and repository tooling for managing Bazel dependencies and policy pull requests. Nothing in this window is flagged as breaking. People building on S-CORE should note the new score_coverage module (0.1.0) is now available via the Bazel registry, and that the persistency repository's merge-queue setup got its first verification PR.

Releases

• coverage_tool — v0.1.0: first release, bootstrapping score_coverage (the LLVM source-based code coverage pipeline, successor to score_tooling//coverage) with tests, lint and docs, plus a fix to include virtual-includes and vendored headers in the coverage scope.
• docs-as-code — v8.1.2: fix so generated documentation pages use the full screen width. Compatible with any docs-as-code 8.y.z version.

Discussions worth following

• S-CORE Daily (comment) — the ongoing show-and-tell thread received a new post recapping the 2026-09-10 daily digest.

Code changes

baselibs

• [Change] Add test for flatbuffers vector header — extends test coverage for the flatbuffers vector header (PR #564).

bazel_cpp_toolchains

• [Change] Remove unused feature set — cleans up feature sets left over from the migration to target-defined features (PR #136).

bazel_registry

• [New feature] Drop compatibility-level auto-injection — removes injection of the now-deprecated, no-op compatibility_level setting (PR #517).
• [New feature] Add module with first release 0.1.0 — registers score_coverage in the Bazel registry with periodic-pull enabled (PR #518).

coverage_tool

• [Change] Include virtual-includes and vendored headers in the coverage scope — fixes a bug where headers vendored from an external repository (e.g. flatbuffers) were dropped from coverage reports (PR #3).

inc_ecu_model

• [Change] Fix Franca parsing error when handling annotations and anonymous type collections (PR #8).

inc_someip_gateway

• [Maintenance] Make performance tests packet-loss aware — introduces rate limiting so performance tests no longer count every send as successful regardless of network capacity (PR #288).
• [Bug fix] Fix subscription major version issue — passes the configured service major version to vSomeIP subscriptions, preventing subscriptions from getting stuck pending when a different major version is offered (PR #295).

lifecycle

• [Change] Expose //config:test_image to allow overloading test images, plus a --test_runner pytest argument for running tests with different utilities (PR #525).
• [Change] Remove component-level requirements that are no longer needed (PR #562).

logging

• [Documentation] Add DR-002 design record for DLT network transport, covering DLTv2/IPv4 fragmentation support and header construction (PR #299).

mcp-servers

• [Change] Use the active reusable PR-check workflow instead of a no-op one (PR #21).

module_template

• [Change] Add an example for the auto-generated module verification report, improving traceability between logical interfaces and implementing components (PR #166).
• [Change] Refactor tests and improve the component-example structure, adding unit and integration tests (PR #173).

os_autosd

• [Change] Add module tests — nightly jobs now test the building of feature/target modules (PR #62).

persistency

• [Documentation] Fix README title and trailing whitespace — used as a control PR to verify the new merge-queue setup works as expected (PR #419).

score

• [Change] Export logging feature requirements for consumption by the logging module (PR #3250).

score_cpp_policies

• [Documentation] Add documentation on the sanitizers migration (PR #38).

tooling

• [Change] Add headlines above renderings in the docs build, and add examples to the docs build (PR #465, PR #466).

tools

• [New feature] Manage Bazel dev dependencies, make generated pull-request templates configurable, and record the tool checkout revision used to generate policy PRs (PR #34, PR #36, PR #37).
• [Bug fix] Preserve Git auth for pre-commit hooks so hooks fetching private Bazel dependencies no longer fail with authentication errors (PR #38).

Automated dependency updates: 13 bumps merged across inc_security_crypto (4), inc_someip_gateway (2), lifecycle (1), logging (1), module_template (2), persistency (1), process_description (1), and time (1).

Issues

• bazel_registry: drop compatibility_level auto injection closed — resolved by PR Integrate OpenDUT framework for executing SCORE Tests #517 above.
• score_cpp_policies: Update score_cpp_policies documentation for sanitizer features closed — resolved by PR Improvement: WebPage #38 above.

9 issues opened, 11 closed in this window.

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-09-14

Headline

Eclipse S-CORE merged 21 pull requests across 13 repositories and published a tooling release, while community meetings covered a coverage-tool split, QNX status, and next release planning.

In plain terms

The tooling module reached v2.2.2, mostly parser and documentation improvements for diagram and class-diagram tooling. The bigger structural news came from the Infrastructure Community meeting: the LLVM coverage pipeline has moved out of score_tooling into its own module, score_coverage, so it can be independently qualified under the project's Tool Confidence Level process — baselibs is the first module to migrate, and others (like inc_someip_gateway) are following. Elsewhere, work continued on crypto integration tests, communication's Rust API, lifecycle timing configuration, and persistency's key-value store API. Two new discussions are worth a look: one on Rust certification planning, one on the Communication feature team's weekly status. Nothing in this window is flagged as breaking.

Releases

• tooling — v2.2.2: a batch of parser and documentation improvements, including Graphviz support for Lobster reports, class-diagram/sequence-diagram parsing fixes, free-function parsing, and grouping of architectural design views in generated docs.

From the meetings

Security & Crypto FT (Security & Crypto FT)

Minutes by @sunildevda

• Decisions/updates: three PRs closed since last meeting (QNX build/test fixes, ITF test refactor, run_under_qemu change to avoid cap_net_raw); several PRs remain in progress, tracked by owner.
• Action items: ongoing PR reviews assigned to @ChansAlive, @se-lo, @prabakaranklst, @HeHa112, @ShoroukRamzy, @GuruprasadBhatL; access control for Crypto tracked via score#3058 (@christianbe9); hashing migration from Baselibs to Crypto tracked via inc_security_crypto#125 (@kssim).
• Open questions: how to handle cases where HSM/TEE is busy, continuing a discussion raised by Ugesh (BMW) in the wider SCORE meeting.

Architecture Community (Architecture Community)

Minutes by @arsibo

• Meeting cancelled due to insufficient agenda items; next meeting scheduled for September 21.

Infrastructure Community (Infrastructure Community)

Minutes by @dcalavrezo-qorix

• Decisions: the LLVM coverage pipeline is now its own repo and Bazel module, score_coverage 0.1.0, split out of score_tooling following the Tool Management Plan (tools with TCL LOW need full qualification, not just evaluation); rollout to all modules is underway this week, with the first migration in baselibs#584 (also fixes baselibs#558).
• Action items: @dcalavrezo-qorix to compare the project's tool-classification approach with the Useblocks open-source approach; @AlexanderLanin to talk to the process team about the same comparison, and to merge caching improvements this week; @FScholPer to ask the process community what they expect an SBOM to contain.
• Open questions: review by the process team of open points on the coverage-tool split (TVR location, tool_req vs TRLC, who signs off as approver); QNX status has a new open problem this week.

Meeting Minutes (TL & Communities & CFTs) (Technical Lead Circle)

Minutes by @FScholPer

• Decisions: all modules should switch to the new unified code-coverage tooling (an open PR exists for baselibs); next Tuesday's release meeting will be used for release-lead planning.
• Action items: contributors are asked to link code and unit tests to requirements, link component requirements to features, fill out the inspection checklist, and use the traceability overview — as a wish list for the next release.

Discussions worth following

• Rust certification in S-CORE: gap analysis and plan (September 2026) — Infrastructure Community, by @dcalavrezo-qorix: a proposal for the Rust, tooling, and safety-manager communities assessing what's still needed for a Rust ASIL B module to pass a confirmation review against ISO 26262:2018.
• Communication FT Weekly [2026-09-14] — Communication FT, by @LittleHuba: weekly status covering SOME/IP, Flatbuffers, Rust API, CI/infrastructure, and open bug tickets.

Code changes

baselibs

• [Change] Fix unsafe type conversion in stat — addresses a filesystem type-conversion bug (PR #563).
• [Change] Migrate coverage pipeline to score_coverage 0.1.0 — swaps @score_tooling//coverage for the newly split-out, independently qualified coverage module; only labels change, no interface impact (PR #584).

cicd-workflows

• [Change] Use latest action versions with hash pinning in action.yml, following GitHub's recommended practice (PR #233).

communication

• [Change] Large refactor of the type-erased binding (Mf type erased binding) (PR #897).
• [Change] Update tooling to 2.2.2 for rules_score (PR #1075).
• [Change] Ignore unused QualityType argument, fixing a warnings-as-errors build failure when a constexpr branch leaves the argument unused (PR #1078).

docs-as-code

• [Refactoring] Normalize join_path path segments, adding unit coverage and documenting path-normalization behavior for generated docs (PR #819).
• [Tests] Update module_template test path so downstream compatibility checks pass after tests moved location (PR #822).

inc_someip_gateway

• [Tests] Add shared test-capture helpers and migrate ITF tests, part of a larger TC8 conformance test suite effort (PR #292).
• [Maintenance] Switch to the new coverage tooling repo, following the same change as baselibs (PR #297).

lifecycle

• [Change] Replace floating-point seconds with integer milliseconds in timing configuration, removing floating-point representation from the binary format (PR #388).
• [Change] Give each thread a descriptive name (e.g. worker, health_mon, os_handler, lcm_signal) to aid debugging (PR #631).

persistency

• [Bug fix] Correct spacing in KVS log messages, removing doubled spaces from error output (PR #403).
• [Change] Add remove_all_keys(), discard_pending_changes(), and get_storage_file_size() APIs (PR #421).

reference_integration

• [CI / automation] Save workflow cache only on main-branch pushes, not on PRs or feature branches (PR #341).
• [Change] Remove lifecycle patches that are now applied upstream (PR #344).

sbom-tool

• [Change] Fix a build error affecting the dash-licenses scan (PR #11).

score

• [Change] Fix the copyright header comment in aou_req.rst for the time feature (PR #3245).

tooling

• [Change] Add a maturity argument to the safety-analysis tooling (PR #468).

tools

• [Bug fix] Preserve the aspect_rules_py dependency, keeping it usable outside the development-only dependency context (PR #40).
• [New feature] Add a policy-driven GitHub workflow reference update mechanism, a proof of concept to compare against Renovate (PR #41).

5 automated dependency updates merged across baselibs, inc_someip_gateway, lifecycle, os_autosd, and tools (one each).

Issues

• baselibs: score's llvm_cov integration filters flatbuffers headers out of the report closed — resolved by PR Epic: (Initial) Tooling Detailed Design, Implementation, Unit Verification #584 above.
• persistency: Log messages in kvs.cpp have doubled spaces closed — resolved by PR Logging CFT Weekly [2025-02-18] #403 above.
• reference_integration: ref_int - cache improvements closed — resolved by PR new GitHub teams request for operational team #341 above.

16 issues opened, 11 closed in this window.

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-09-15

Headline

Eclipse S-CORE merged 39 pull requests across 23 repositories, with community meetings covering v0.9 lessons learned, reference-integration frequency, and SBOM plans, while no new releases went out.

In plain terms

No module releases shipped in this window, but a wide spread of maintenance and refactoring work landed across 23 repositories — much of it CI/CD hardening (pinning workflow references to commits instead of @main) following an upcoming cleanup in cicd-workflows. The Release Community meeting set concrete expectations: each module should integrate into reference_integration at least once every two weeks, and module owners are asked to start producing SBOMs. The SW Dev Process Community continued planning for v0.9 and v1.0 milestones, and flagged two process-description issues with no assignee. Baselibs saw substantive work too, including new setenv/unsetenv support and Bazel tooling reorganization. Nothing in this window is flagged as breaking.

From the meetings

Base Libs FT Meeting Minutes 2026 (Base Libs FT)

Follow-up by @4og

• Decisions/updates: documentation of score/memory will be cleaned up via baselibs#522; removal of moved-out content tracked in baselibs#586.

General SW Dev Process Community (SW Dev Process Community)

Minutes by @masc2023

• Decisions: discussion on "Versioning, Template Ownership" postponed — no participants present had the relevant knowledge; module_template#166 remains open and will be discussed again next meeting.
• Action items: resolve assignment gap on process_description's "Audit Findings (14.04.2026)" issue (process_description#652) — no owner yet, to be discussed in the next meeting (15.9.2026); a task for introducing ISO 8800 into the process description has been created (process_description#789).
• Open questions: planning status for v0.9 (score#2961) and v1.0 (score#3257); versioning and template-ownership discussion continues in discussions/2234.

Release Community Meeting Minutes (Release Community)

Minutes by @PiotrKorkus (15.09.2026)

• Decisions: module owners should create a PR in reference_integration bumping their module's version (by hash, no formal release needed) at least once every two weeks; GH stacked PRs may be used when several modules need updating together; an SBOM workflow is already integrated in reference_integration (reference_integration#304), and modules should also produce their own SBOM for inclusion in the module verification report.
• Action items: @PiotrKorkus to hold a v0.9 lessons-learned session next week (22.09) and post details in Slack; @AlexanderLanin extending an initial dev-dependency alignment list (contributions welcome, see the policy file); @antonkri to draft a proof-of-concept using baselibs to separate dev-dependencies from regular ones; @Lukasz-Juranek to raise SBOM-in-verification-report idea in the security meeting.
• Open questions: patches from v0.9 still to be checked for baselibs, communication, and config_management; increase-integration-frequency proposal to be further discussed in Monday's tech alignment call.

Minutes by @PiotrKorkus (22.09.2026)

• Decisions: integrating modules takes significant effort — reaffirmed that each module should integrate to reference_integration at least once every two weeks.

Discussions worth following

• Logging CFT Weekly [2026-09-15] — Logging FT, by @arsibo: weekly status noting logging#301 needs an assignee, logging#299 will be updated after discussion, and a proposed rename from "logging" to "log_and_trace" pending a check with a maintainer.

Code changes

.github

• [Bug fix] Use scheduled reports from main so the Pages dashboard only consumes artifacts from the scheduled policy-sync workflow, not manually dispatched runs (PR #103).
• [Bug fix] Compact policy matrix columns to keep the dashboard's policy table readable when policy IDs are long (PR #104).
• [Bug fix] Prevent category scrollbars, fixing a tooltip sizing issue exposed by the compacted matrix columns (PR #105).

baselibs

• [Documentation] Implement setenv and unsetenv in score::os::Stdlib, closing a long-standing feature request (PR #507).
• [Change] Remove a Linux-only constraint from require_typed_memory that was blocking score_communication from using the config setting (PR #539).
• [CI / automation] Consolidate linting with rules_lint, fixing an issue where sandboxed clang-tidy failures silently dropped build outputs (PR #576).
• [Change] Move dev-only Bazel tooling (copyright, formatting, license checks) out of the root BUILD file into a dedicated tools/BUILD, keeping the root build free of dev dependencies (PR #585).

bazel_cpp_toolchains

• [Maintenance] Pin cicd-workflows references to a commit ahead of an upcoming workflow cleanup (PR #143).
• [Bug fix] Fix the sysroot directory for AArch64 builds on AutoSD, pointing to the whole directory instead of a file list (PR #144).
• [Change] Update the CODEOWNERs list (PR #145).
• [Bug fix] Pass sysroot flags to assembly actions while keeping linker-specific flags limited to link actions (PR #146).

cicd-workflows

• [Change] Fix common checks enabling cache too late in on-PR workflows (PR #232).

communication

• [Change] Resolve locked MISRA package dependencies offline without mutating the real home directory, using a hermetic per-invocation fake HOME for CodeQL (PR #1081).
• [Change] Declare a missing safe_math dependency for lola/messaging that was only resolving transitively (PR #1089).

coverage_tool

• [Change] Pin the license-check workflow reference to a commit for reproducible CI (PR #7).

docs-as-code

• [CI / automation] Try cached workflows based on a new setup-bazel-cache action (PR #816).
• [Refactoring] Derive bundle runtime paths from source_dir, and a related series of path-handling refactors: clarify runtime-to-execroot path conversion (PR #823), expose bundle source paths in execroot form (PR #824), remove unused explicit source metadata (PR #825), and centralize documentation path resolution in one place instead of reconstructing it from raw environment variables (PR #820, PR #827).

inc_diagnostics

• [Maintenance] Pin cicd-workflows references ahead of a planned workflow cleanup (PR #34).
• [Change] Pin the license-check workflow reference to a commit (PR #35).

inc_ecu_model

• [Change] Refactor the data type model, a large restructuring (PR #7).

kyron

• [Change] Pin the QNX workflow reference to a commit for reproducible CI (PR #173).

lifecycle

• [Bug fix] Replace score::cpp::expected with score::Result in launch_manager concurrency types, part of a broader error-handling migration (PR #577).
• [Change] Remove redundant whitespace from log messages caused by mw::log's automatic spacing (PR #636).

mcp-servers

• One dependency bump: ruff-pre-commit to v0.16.6 (PR #25).

module_template

• [Change] Improve clarity and guidance in the module verification report template (PR #178).

persistency

• [Bug fix] Classify KVS unit and integration tests as "small" to remove default-test-size warnings (PR #424).

reference_integration

• [Change] Pin the tests workflow reference to a commit (PR #345).

rules_imagefs

• [Maintenance] Pin cicd-workflows references ahead of a planned cleanup (PR #21).

score

• [Change] Fix broken links to the Baselibs safety manual in the platform safety manual, which pointed to an unpublished path (PR #3242).

score-crates

• [Bug fix] Pin a workflow reference to a commit instead of main (PR #76).

score_rust_policies

• [Bug fix] Pin a workflow reference to a commit instead of main (PR #14).

time

• [Change] Rename the SOCK environment variable to BPF_DEVICE_PREFIX, fixing a QNX startup failure where ClockIdentity resolution could fail on vtnet0 due to env-variable coupling (PR #218).

tooling

• [Change] Add validation support for override, virtual, and noexcept in PlantUML tooling for interface-inheriting classes (PR #469).

tools

• [Bug fix] Use a stable report artifact name so the cross-repository metrics dashboard can reliably retrieve policy-sync reports (PR #43).
• [Bug fix] Recognize tagged newer SHA pins, fixing false policy failures when a minimum-release SHA and current-release SHA diverge in Git history (PR #44).

2 automated dependency updates merged across inc_security_crypto and score (one each).

Issues

• baselibs: Fix unsafe st_uid conversion to int64_t in StatBuffer closed.
• bazel_cpp_toolchains: Missing sysroot flags for assembler actions in 1.0.3 for autosd10 build and Broken --sysroot path generation for aarch64 cross-builds closed — resolved by PR docs: add recommended extensions #146 and PR move docs tooling to _tooling #144 above.
• cicd-workflows: common checks enables cache too late closed — resolved by PR Plan the process community goals realization for safety confirmation measures #232 above.
• time: QNX QEMU time_slave ClockIdentity fails on vtnet0 closed — resolved by PR Document current concept for multi repo dependencies #218 above.

14 issues opened, 8 closed in this window.

Footer

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-10-22

Headline

Two releases (bazel_cpp_toolchains v1.0.5 and docs-as-code v8.5.1) shipped, 27 pull requests merged across 17 repositories, and the Tech Lead Sync reviewed Persistency's compliance status and the open Misra-check question for S-CORE v1.0.

In plain terms

Two building blocks of the project got new releases: the C++ build toolchains (including one removal that may affect users of an old compiler package) and the documentation tooling (a security-motivated dependency refresh). The Tech Lead Sync reported that Persistency, the pilot module for the safety process, shows full traceability to the process, and noted that the set of Misra coding-rule checks (a standard for safe C/C++ code) for S-CORE v1.0 still needs to be agreed. Elsewhere, Lifecycle, mcp-servers and Persistency saw steady engineering work. Several new issues were opened against communication, SOME/IP gateway and time modules; they are worth watching.

Releases

• bazel_cpp_toolchains v1.0.5 — GCC version flag now derived from the resolved toolchain, rules_cc bumped to 0.2.25, support for the io-pkt Driver Development Kit, a new type attribute on the SDP tag class. Breaking: EBclfsa 0.1.0 was removed (superseded by 2.0.0-beta). Release
• docs-as-code v8.5.1 — Maintenance patch release; main reason is updating the certifi Python dependency for security reasons. The release notes state there is no actual indication of risk. No features or fixes for users. Release

From the meetings

Tech Lead Sync (Technical Lead Circle) — minutes by @antonkri

• Decisions / conclusions:
  • Persistency: "All processes are applied." Linkage reported at 100 % (31 of 31 work products realize a process work product); audit Improvement: Add copyright header for all .yml files. #6: 29 clauses OK, 3 actions, 1 open.
  • Communication "does follow its own process, we will do Component Qualification for it."
  • Baselibs: main focus is Result and BitManipulation.
• Action items:
  • "We need to agree on set of Misra checks that will apply for S-Core v1.0 -> @antonkri"
• Open questions:
  • Misra checks with CodeQL are important for S-CORE v1.0; related open discussions are score#3262, score#2984 and score_rust_policies#11.
  • Downloadable images: first PR and # Raspberry Pi 5 (aarch64) Image — Implementation Plan reference_integration#403 are referenced.

Persistency Feature Team — minutes by @umaucher

• Decisions / guidance:
  • PR handling: "avoid rebasing if not needed (requires new approval for the QNX builds) use the 'Update branch' -> 'Update with merge commit' if needed".
  • Outcome of the reset_key discussion is recorded in persistency#527.
• Action items:
  • Push the C++ code-style guideline (namespace matches folder structure) in the Monday TL sync.
  • Raise Dependabot/Renovate setup in the TL sync.
  • persistency#563 needs review plus help with testing/mocking.
• Open questions: Do both Dependabot and Renovate need to be used? Generic setup for all repos? Tagging of cicd-workflows/actions? Meeting time shift to 13:30 is being polled on Slack.
• Status noted: 8 new issues, 11 closed; 20 new PRs, many merged.

Discussions worth following

• S-CORE Daily (Show and tell) — received one comment (link) carrying the 2026-10-21 edition.

Code changes

baselibs

• [Documentation] Remove nlohmann_json from safety planning; add document lists to the start page for the safety package — (#721, #722)

bazel_cpp_toolchains

• [Breaking change] Remove EBclfsa 0.1.0 — superseded months ago by 2.0.0-beta (#165)
• [Change] Migrate copyright checker to score_tools and refresh headers (#166)

cicd-workflows

• [Bug fix] Prefetch QNX SDP during analysis so retries cover a qnx.com timeout (#260)

communication

• [Change] Migrate flags to features; pin CI to Ubuntu 24.04 so builds stay reproducible (#1424, #1428)

devcontainer

• [Bug fix] Renovate configuration and lockfile handling (#171)

docs-as-code

• [Maintenance] Upgrade Python dependencies, keep sphinx-needs on 8.x (#989)

inc_someip_gateway

• [Maintenance] Port IPC benchmarks to the mw::com implementation to help phase out the other IPC (#359)

lifecycle

• [Change] New Component class with pluggable start/stop/ready strategies (#705)
• [Change] Docs for new ControlClient APIs, release notes (#796, #841)
• [Change] More unit tests, including 100 % coverage of the alive worker factory and an empty-sgids sandbox check (#799, #835)

logging

• [Change] Remove a misleading comment in the data router (#368)

mcp-servers

• [Change] Central code-graph caching artifacts, serving from a user cache, and an agent-context devcontainer feature for AI tooling (#47, #49, #50)

persistency

• [CI / automation] Skip the QNX build for Dependabot PRs (it lacks required secrets) and add manual dispatch (#559)

process_description

• [Change] Add AI-supported development process execution concept (pilot) (#809)

score

• [Change] Fix audit findings in PMP-PRM and update process (#3343)

tooling

• [Change] Fix certified-scope violation-detection bugs in Bazel rules (#533)

Automated dependency updates: 17 merged (devcontainer 1, inc_security_crypto 2, inc_someip_gateway 3, kyron 1, mcp-servers 1, module_template 2, persistency 6, process_description 1).

Issues

• communication: first GetNewSamples after Subscribe returns pre-subscription samples; destroying a subscribed proxy aborts
• inc_someip_gateway: wrong payload bytes after gatewayd restart; someipd keeps offering a service after provider stops; gatewayd missing score_com_serializer.so
• time: TimeJumpsValidator vs. time-leap requirements; no separate startup timeout / hard-coded SVT parameters

21 issues opened, 5 closed.

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-10-25

Headline

Over the weekend window (23–25 Oct), lifecycle v0.8.0 and mcp-servers v0.2.0 were released, 22 pull requests merged across 12 repositories, and four meeting-minutes entries were posted.

In plain terms

Two modules shipped new versions: lifecycle (which starts and manages software on a device) gained an interface that lets state managers talk to the launch manager, and mcp-servers (tooling for AI assistants) got its first release pipeline. One change to the SOME/IP gateway is flagged as breaking, so people building on it should check it. The Tech Lead Sync agendas cover pull-request rules, handling of AI-generated content, and dependency-update tooling. The Time team is working on a fix for a data race (two parts of the program touching the same memory at once) in the time daemon. The lifecycle release is marked as not intended for production use.

Releases

• lifecycle v0.8.0 — adds a new ILmControl API so State Managers can communicate with the Launch Manager via mw::com; also lists improvements. Release notes state it is not intended for production use (no safety argumentation or completed safety assessment). (release)
• mcp-servers v0.2.0 — adds a release pipeline and pins MCP sources to commit SHAs, centralizes code graphs as cached artifacts, adds an SDLC harness and an agent-context devcontainer feature. (release)

From the meetings

Tech Lead Sync (Technical Lead Circle) — agenda for 2026-10-26 posted by @anmittag (minutes)

• Decisions: none recorded.
• Agenda / open questions: ITF; PR rules (size, how to review); AI-generated content (how to mark and limit it, certifiability); S-CORE meeting times.
• Follow-up: @odra suggested the topic "AutoSD Functional Platform Updates" (comment).

TL & Communities & CFTs (Technical Lead Circle) — agenda for 2026-10-26 (minutes)

• Decisions: none recorded.
• Open questions (from @umaucher): handling of dev vs non-dev dependencies; whether both dependabot and renovate are needed and a generic config for all repos; need for the C++ coding guidelines (namespace vs folder structure, impact on open PRs, backward compatibility); CodeQL setup differing across modules; design of module examples.

Time FT — weekly 2026-10-23, posted by @lavrovvalera (minutes)

• Decisions / notes: TimeDaemon sub-components to be made public so the project can assemble them; common lifecycle code moves to GenericTimebaseHandler; allow TD to run multiple handlers through a common factory. For the IPC data race fix (in draft): "only 2 slots will simplify the algorithm", each slot has its own seq lock so readers can detect the race and reread, and the writer must never block or wait for a reader.
• Action items: none with named owners. PR ready for review: time#244; merge queue work in time#261 and .eclipsefdn#242.
• Open questions: none recorded.

Testing Community (TST) — @ihebs3ideni attached the presentations shown in the meeting (ITF mental model, ITF pitch) (comment).

Discussions worth following

• S-CORE Daily (Show and tell) — received the previous issue (2026-10-22) as a new comment (comment).

Code changes

Breaking change

inc_someip_gateway

• [Breaking change] mw::com binding takes each gatewayd's configuration and event sizes — each gatewayd loads its own configuration at startup; first part of the move of the gateway daemons onto the mw::com IPC binding (#357).
• [Bug fix] Re-enable and fix mw::com gateway IPC binding tests on QNX (#368).

baselibs

• [Change] Removes deprecated OS API overloads and wrappers (Linux affinity wrapper, QNX channel/timer overloads) (#703).

communication

• [Change] Fix MISRA C++ RULE-7-0-2 implicit conversions to bool, behaviour unchanged (#1436).
• [Change] Re-enable the maybe-uninitialized compiler warning, as the minimum supported gcc is 12 (#1177).
• [Change] Add safety measure for a service that is found but does not exist (#1365).

inc_ecu_model

• [Change] Add scheduling graph (#27).

inc_security_crypto

• [Change] Simplify streaming context interfaces: remove IStreamingOutputContext, keep only Init() and Reset() on the base (#311).

itf

• [Change] Add ssh auth option for QEMU (#144).

lifecycle

• [Change] Fix flaky tests and a mocking issue in process group manager unit tests (#840, #844); fix an assert with side effects (#846).
• [Change] RLIMIT support, part 1: test infrastructure for checking resource limits of started processes (#845).
• [Change] Add component requirements to feature requirements that had none (#808).

mcp-servers

• [New feature] Generate agent context from the docs-as-code metamodel, with a nightly drift report (#52).
• [Maintenance] v0.2.0 release bump (#54).

persistency

• [Change] Remove redundant type member of KvsValue (#563).
• [Change] Update safety manual with corrected tag (#541).
• [Formatting / Bug fix] Apply clang-format and resolve clang-tidy and Ruff findings (#575, #576).

process_description

• [Change] Solves ID naming convention, together with docs-as-code#990 (#841).

score

• [Change] Remove misleading safety plan links (#3357).

Automated dependency updates: 12 merged (.github 5, inc_security_crypto 3, persistency 4).

Issues

• communication — Sending events via mw::com can block? ([Rust API] Finalize Producer API [tbd] #1433); three new flaky-test reports (Tailor in Safety Mechanism to safety plan #1431, Split JSON component requirements into two sets #1432, [Diag] Next steps OpenSOVD contribution to S-CORE [tbd] #1441).
• time — Fix data race in IPC shared memory handler (orchestration: Feature Request #272, bug).
• process_description — Incorporation of external SEooCs (python: enhance Python coding guidelines with type annotation recommendations #840).
• bazel_cpp_toolchains — closed: GCC link order (docs: content width and hide scrolbar (#2) #53) and rules_cc compatibility (Guidance: Feature Flags #160).

15 issues opened, 8 closed.

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-10-26

Headline

Two releases (devcontainer v1.11.3 and module_template v0.2.0) shipped, 51 pull requests merged across 21 repositories, and five meeting-minutes entries were posted, including the Release Community's list of which dependencies must stay regular (non-dev) dependencies.

In plain terms

Two building blocks got new releases: the shared development container (a ready-made working environment) received a maintenance update, and the module template (the starting point for new S-CORE modules) reached v0.2.0 with release notes. The Release Community discussed which build dependencies must remain visible to downstream users and which can be marked development-only, in the context of the DR8 integration workflow, which also merged in the reference integration. Infrastructure discussed how to handle a security certificate refresh for older development containers; no solution was reached for now. Many merged changes focus on code quality (coding-rule findings, locking behaviour, test reliability) and on requirement traceability. Worth watching: the proposed central code-scanning (CodeQL) setup and the next meetings on 2 and 4 November.

Releases

• devcontainer v1.11.3 — bug-fix release with Renovate (automated update bot) configuration and lockfile updates. (release)
• module_template v0.2.0 — template for C++ and Rust Bazel projects; release notes added. The notes state it is not a production release and ships without a safety argumentation or performed safety assessment. (release)

From the meetings

Architecture Community

• The 2026-10-26 weekly was cancelled: "Meeting was cancelled due to an insufficient number of agenda items. The next meeting will take place as scheduled next week on Nov 2th." A placeholder for 2026-11-02 was also posted. (cancellation, next)

Release Community (minutes by @PiotrKorkus, link)

• Agenda: dev_dep overview with DR8; examples – location, implementation, usage in ref_int.
• Decisions: "Must stay NON dev_dependency": score_sbom, score_tools & pip, score_itf, OCI, score_rules_imagefs. "Can go back to dev": GTest, score_rules_imagefs, rules_build_error, json_schema_validator.

Infrastructure Community (minutes by @AlexanderLanin, link)

• Decisions / outcomes: for old devcontainers and the CA certificate update, "deleting old releases not really feasible", "patching all of them is too much effort", "no solution for now". For os_autosd module publishing: rename to score_* and open a registry PR like bazel_registry#526.
• Notes: CodeQL was discussed; for mypy in tooling, infrastructure repos settled on basedpyright for now, and tooling is not maintained by the infrastructure community.
• Action items: review wanted for os_autosd PR #75; follow-up listing in a reply by @odra.

Technical Lead Circle

• Follow-up by @AlexanderLanin on the point "QNX probably will not allow to provide a downloadable image for everyone -> check": "Discussed this some months ago in the bi-weekly QNX meeting. --> Not allowed." (link)

Testing Community (minutes by @clanghans, link)

• Open questions for the 04.11.2026 meeting: What is the migration strategy from ITF to ITF OCTO? Are private ITF plugins compatible with the new approach?

Discussions worth following

• Communication FT Weekly [2026-10-26] — new weekly notes with status updates on SOME/IP, Flatbuffers, Rust API and methods & fields. (link)
• Diagnostics - Weekly — notes cover a pending toolchain PR in inc_diagnostics, waiting on the Bazel build system in opensovd, and aligning docs-as-code artifacts next year. (link)
• S-CORE Daily — the previous edition was synced to this thread. (link)

Code changes

Infrastructure and tooling

.eclipsefdn

• [Bug fix] Temporarily relax a merge-queue requirement so the Time merge-queue rollout is not blocked (#243).

.github

• [Bug fix] Handle commits unrelated to the default branch (#128); [Change] auto-generated profile README refresh (#132).

cicd-workflows

• [Bug fix] Lift the score_tooling version cap in the shared Renovate config so valid updates are no longer blocked (#261).

devcontainer

• [Bug fix] Refresh the system CA trust store and upgrade Python tools (#175); fix readme sync for Renovate updates (#176).

tools

• [New feature] Policy to pin Ubuntu workflow runners to 24.04 instead of ubuntu-latest (#61).

tooling

• [Change] lobster-gtest can derive Given/When/Then test specifications from conventionally named tests (#505).

reference_integration

• [Change] DR8 integration workflow: unit tests are no longer run inside the reference integration's own workspace (#398).

Modules and libraries

baselibs

• [Change] A null LockedPtr no longer holds the lock (#650).
• [Change] JSON writer collapsed into a single serializer (#685); serialization library ported to score/serialization (#710).
• [Change] Fix a race that could make a clock test hang (#720).

communication

• [Documentation] E2E error-handling design proposal (#1148) and a sample (#1291).
• [Change] MISRA C++ findings addressed: explicit constructors, bool conversions, unused function removed (#1437, #1440, #1457).
• [Change] Contributing guide, package and vulnerability updates (#1450, #1454, #1465).
• [Documentation] Tutorial link fixes and literalinclude markers (#1455, #1467).

inc_someip_gateway

• [New feature] Bridged services builder and dynamic service setup for mw::com (#348).

lifecycle

• [Change] Clearer IComponent result types (#797); feature architecture extended with Control API behavior and Recovery Actions (#800); overflow checks added to TimeRange (#827).

logging

• [Documentation] mw::log traceability report integrated into the published docs (#365).

persistency

• [Build] Format/copyright/license checks moved to //tools, and clang-tidy, Clippy and Ruff lint added (#534, #536).
• [Change] Improved constness, including locking in is_value_default (#555); [Bug fix] unit tests pass on QNX targets (#586).

time

• [Change] Docs tooling updated to 8.4.0 (#253); merge-queue validation prepared (#261); component requirement traceability for the time library (#266).

Process and project documents

module_template

• [Change] Release notes v0.2.0 and small module/doc fixes (#213, #216, #217, #218).

process_description

• [Change] Verification report aligned with module template, a platform AoU template, link fixes and metamodel alignment (#794, #842, #843, #844, #845, #846, #847).

score

• [Change] AI platform update on realistic goals (#3260); Liveliness definition rephrased (#3346).

Automated dependency updates: 24 merged across baselibs, cicd-workflows, devcontainer, inc_security_crypto, inc_someip_gateway, infrastructure, lifecycle, logging, module_template, nlohmann_json, persistency, time and tooling.

Issues

• Central code scanning: Setup central SCA/CodeQL opened.
• QNX toolchain: C compiles default to -std=c11 without -D_QNX_SOURCE opened.
• Persistency: is_value_default doesn't lock opened; fixed by Communication CFT Weekly [2025-03-03] #555.
• Lifecycle: Lock free ringbuffer for alive notifications opened.

15 issues opened, 18 closed.

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-10-27

Headline

Six releases landed (baselibs, docs-as-code, process_description, score, testing_tools, tools) and 40 pull requests were merged across 22 repositories.

In plain terms

Several building blocks shipped new versions on the same day: the basic C++ libraries (baselibs), the documentation tooling (docs-as-code), the process description, the platform documentation (score) and two supporting tool packages. The documentation tooling can now show how much of the code is covered by tests directly inside the documentation, which helps with safety and quality evidence. The baselibs release contains a breaking change to how JSON is written, so teams using it should check the release notes. The Security & Crypto team recorded a conclusion on where hashing features will live. Releases remain marked as not intended for production use.

Releases

• baselibs v0.2.16 — Continues the JSON consolidation: vaJson is now the only JSON writer; the json_serialize backend and its build flag were removed, and output formatting changes (for example booleans are written as true/false). Breaking change. Not for production use per the release disclaimer. (release)
• docs-as-code v8.6.0 — Coverage summaries now appear on primary Needs and in module verification reports; adopts process_description v2.2.2 (compatible with v8, new warnings are informational only); fixes validation of safety allocations. (release)
• process_description v2.2.2 — New release of the process model (ASPICE 4.0, ISO 26262, ISO 21434, ISO PAS 8926). Not a "release for production" per its disclaimer. (release)
• score v0.7.4 — Documentation-focused: Quality Management Plan updates, a new section on reference integration in the Software Verification Plan, Lifecycle glossary update, spelling fixes and a design-decision record on AI agent context packaging tooling. (release)
• testing_tools v0.5.0 — Test scenario libraries moved under score/, new clang-tidy and clippy CI checks, higher minimum Bazel version with C++/Rust usage examples, and dependency alignment. (release)
• tools v0.0.4 — score_pytest accepts filegroups as sources; repo policy sync gains managed-block synchronization and a policy pinning Ubuntu workflow runners to 24.04. (release)

From the meetings

Security & Crypto FT (minutes, posted by @sunildevda)

• Decisions: "Core architectural conclusion: Keep the ASIL solution in Baselibs and this will be the permanent home for a fully qualified lib only non FIPS ASIL solution. All other SHA384 and SHA512 to be offered from Security Crypto." The Baselibs hashing solution will not yet be deprecated, since no local crypto provider exists yet.
• Action items / status: Review and rework tracked per pull request in inc_security_crypto (e.g. #197 @ChansAlive, Logging CFT Weekly [2025-01-21] #199 @HeHa112, Aymen soussi 01 adapt checks #237 @kssim, Include the logo on the main score docs website #299 @GuruprasadBhatL). OpenSSL move to its own repository (openssl/pull/1, owner @ShoroukRamzy): review and rework completed, two new findings; score-crates Tooling: Enable C++ development #79 awaits approval from arkjedrz.
• Open questions (agenda): Usage of the IAV_Primula name in SCORE Crypto; standalone PKCS11 crypto provider vs. OpenSSL PKCS11 provider.

SW Dev Process Community (minutes, posted by @masc2023)

• Decisions: "No need to solve this warning" (docs-as-code#998). "NO PROCESS MEETING on 5th Nov 2026, due to parallel Safety Audit".
• Action items: none recorded. Open questions: planning update on score#3257.

Discussions worth following

• Logging CFT Weekly [2026-10-27] — New weekly agenda and minutes from the Logging FT, including requirements-coverage gaps to be addressed. (discussion)
• S-CORE Daily — Yesterday's issue of this digest was posted. (comment)

Code changes

Breaking change

inc_someip_gateway

• [Breaking change] Switch gatewayd and someipd to the mw::com IPC binding — changes how the SOME/IP gateway components communicate internally (depends on OSS/Dash: Enable automatic clearance #348). (PR)

Middleware and communication

communication

• [Change] Return success after replying kSkeletonAlreadyDestroyed on an expired method scope — fixes a provider abort. (PR)
• [Change] Enable MISRA warnings in clang, fix CodeQL findings and use nullptr, remove empty headers — code-quality hardening. (PR, PR, PR, PR, PR)
• [Build] Wire the memory public API diagram into the architectural design build for traceability. (PR)

lifecycle

• [Change] Supervision added to the new Component class. (PR)
• [Change] RLIMIT support part 2 — resource limits added to the launch manager's internal format, not yet configurable. (PR)
• [Change] Close file descriptors immediately for Alive Monitor IPC — speeds up process start on QNX. (PR)
• [Change] Warnings treated as errors for production and integration test code. (PR)
• [Change] docs-as-code 8.5.1 upgrade enabling feature-requirement traceability. (PR)
• [Tests] Unit test now uses a mock of mw::com. (PR)

persistency

• [Change] C++ headers renamed to snake_case .h; old headers remain as deprecated forwarders. (PR)
• [Change] Safety plan FDR prefilled; [Maintenance] test scenarios bumped. (PR, PR)

baselibs

• [Documentation] CODEOWNERS skill check and feature safety work-product tables corrected. (PR, PR)

logging

• [Maintenance] Minimal Bazel module declaration via policy sync. (PR)

Tooling, build and CI

docs-as-code

• [New feature] LCOV coverage summaries on primary Needs and coverage pies in module verification reports. (PR, PR)
• [Bug fix] Safety allocation validation and devcontainer update. (PR)

cicd-workflows

• [New feature] Docs workflow can pass coverage artifacts to documentation builds. (PR)

tooling

• [Change] Safety analysis root-cause assessment and ASIL checks for requirements in TRLC. (PR, PR)

sbom-tool

• [New feature] Rust licenses collected from crate manifests first, with crates.io as fallback. (PR)

testing_tools

• [Change] docs-as-code documentation for test scenarios. (PR)
• [Bug fix] clang_tidy target moved so consuming modules can load the package. (PR)

bazel_registry

• [Bug fix] Integrity hash for score_test_scenarios 0.5.0 updated. (PR)

mcp-servers

• [Bug fix] agent-context feature installs python3 and uv if missing. (PR)

module_template

• [Maintenance] Devcontainer bumped to v1.11.3. (PR)

Platform, process and OS

score

• [Change] Requirements use the valid_inspected state. (PR)
• [Documentation] Module verification workproduct version constraints removed for compatibility with process_description v2.2.2. (PR)
• [Maintenance] Devcontainer bump. (PR)

process_description

• [Change] Release notes for S-CORE release v0.10 (still in work). (PR)

config_management

• [Change] Project import generated by Copybara. (PR)

os_autosd

• [Change] New autosd_rpm rule downloading AutoSD RPMs into the local sysroot. (PR)

Automated dependency updates: 40 bumps merged across 15 repositories (not listed).

Issues

• score — Architecture is not process compliant with safety requirement linkage rules
• docs-as-code — Safety compatibility checks and allocation via satisfied_by (bug)
• communication — API surface lock must also record values of enums

19 issues opened, 14 closed.

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-10-28

Headline

Two releases (logging, mcp-servers) and 53 merged pull requests across 22 repositories, with the Base Libs meeting covering qualifiable components and a JSON parser clean-up.

In plain terms

A new pre-release of the logging module and a small fix release of the MCP servers shipped. Much of the day's work was tidying: the JSON parser in the base libraries lost thousands of lines of unused code, the persistency module aligned its C++ naming with the Rust API, and the platform's documentation and tooling got consistency fixes. The Base Libs meeting noted that tooling is still missing to check that safety-rated (ASIL B) build targets don't depend on non-safety (QM) ones. A new discussion asks how an ASIL B container-runtime requirement in Lifecycle can be satisfied.

Releases

• logging — v0.2.5 (pre-release): fixes log bridge compatibility with stable compilers, adds aarch64 Linux support, adds a decision record for network log transport (DLT), and migrates integration tests. Release
• mcp-servers — v0.2.1: fixes the agent-context feature so it installs python3 and uv when missing, regardless of install order. Release

From the meetings

Base Libs FT — Weekly 2026-10-28, minutes by @4og (comment)

• Decisions / answers
  • Qualifiable components are those with a sphinx-needs comp element carrying a safety ASIL B tag. For score/containers detailed design: "It's enough to have an .md file(s) next to the source code" (per the Process community discussion).
• Action items
  • @4og will create an issue in the score repository about missing tooling to verify that ASIL B Bazel targets do not depend on QM targets.
  • @AlexanderLanin will clarify and raise an issue about missing links to feature requirements in baselibs.
  • @aschemmel-tech together with @AlexanderLanin will think about how to make the module safety plan simpler.
• Open questions
  • Status update on score/json (baselibs issue 642) was on the agenda; the minutes record no outcome.

Discussions worth following

• Architecture Community — How should the ASIL_B OCI requirement in Lifecycle be satisfied? The requirement is rated ASIL B while the related stakeholder requirement is QM, and the author notes no safety-qualified OCI runtime is known to exist today.
• Show and tell — S-CORE Daily received a new comment (the 2026-10-27 issue) (link).

Code changes

Base software and middleware

baselibs

• [Change] JSON parser consolidated into a single implementation, then trimmed to what is actually used (about 5,000 lines removed) — smaller safety-relevant surface (#677, #740)
• [Documentation] Bitmanipulation component failure analysis (DFA) added (#734)

communication

• [New feature] Tutorial chapters 3, 4, 7 and 8 now use marker-based includes so docs stay in sync with code (#1477, #1482)
• [CI / automation] Stabilized CodeQL alert counts that swung by ~500 between days (#1468)
• [Change] Cleanups: removed readthedocs config, deprecated API, dead links and unreachable statements; test dependency cycle fixed; repo bumped to tooling 3.0.1 (#1476, #1487, #1484, #1485, #1491, #1383, #1489)

lifecycle

• [Change] First detailed design of the Launch Manager's graph/transition behavior (#791)
• [Change] Fixed a crash when registering an activation callback before connecting (#849); Alive Monitor now reports when a supervision failure occurred (#857)
• [Change] Compiler warnings fixed, warnings-as-errors in unit tests (#879, #883)

logging

• [Change] Implementation completion for log backend and datarouter, plus a datarouter requirements checklist (#363, #379, #335)
• [Maintenance] Runners pinned to ubuntu-24.04, checkout updated (#385)

persistency

• [Change] C++ naming rules applied and aligned with the Rust API; old names kept as deprecated wrappers; namespace renamed to score::kvs (#564, #566, #614)
• [Tests] Unit tests now use the public API (#593, #594)
• [Change] Initial security plan and manual with security assumptions of use (#539)

Incubation and integration

inc_security_crypto

• [Change] Certificate Management Daemon component (certificate slots, trust store, CRL handling) (#197)

inc_someip_gateway

• [New feature] Component coverage shown in documentation (#381)
• [CI / automation] Integration tests consolidated, faster CI (#369)

reference_integration

• [Change] Baselibs standalone showcase with integration test (#411); release-note agent and v0.10 release note draft (#414)

Platform documentation and process

score

• [Change] Documentation consistency and missing safety links fixed (#3376, #3384, #3385); missing persistency requirement added (#3396)
• [Maintenance] Formatting/header cleanups in preparation for pre-commit checks (#3388, #3389, #3392, #3393, #3394)

Tooling and infrastructure

tooling

• [Bug fix] Fault-tree transfer gates resolve across trees (#545); interface binding syntax recognized (#544); --modified-only honors inputs (#546)
• [Change] Documentation keyed by full label path to avoid name clashes (#542); architecture conflict guard fixed (#543); codeowners updated (#547)

cicd-workflows

• [New feature] Daily check for dead documentation links (#265)

bazel_cpp_toolchains

• [Change] Private GitHub release assets supported as SDP archives (#169)

mcp-servers

• [Maintenance] Prepare release v0.2.1 (#60)

.eclipsefdn

• [Change] Additional bypass actor added (#246)

score-crates

• [Change] Added gitignore file (#85)

29 automated dependency updates were merged across 16 repositories.

Issues

• baselibs: json: make the public data model public, inject the file factory
• docs-as-code: Fix inverted QM architecture fulfilment validation (opened and closed)
• inc_someip_gateway: Unclean shutdown of gatewayd

16 issues opened, 20 closed.

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-10-29

Headline

Six module releases (lifecycle, logging, tooling, config_management, qnx_unit_tests, os_autosd) and 68 merged pull requests across 28 repositories, with the Tech Lead Sync settling the versions for release v0.10.

In plain terms

Several S-CORE modules published new versions today, including a new lifecycle release and a major tooling release that changes how safety analyses are written. The Tech Lead Sync confirmed which shared component versions the upcoming v0.10 release builds on, so modules using other versions will need to upgrade. Work toward downloadable reference images (AutoSD cross-compilation, QEMU and Raspberry Pi images) moved forward. Two merged changes remove older options (an old compiler platform version and an old messaging implementation in the SOME/IP gateway), so teams relying on them should check their builds.

Releases

• lifecycle v0.9.0 — release notes show the ready_recovery_action configuration option is now deprecated in favour of new activation-retry settings; not intended for production use (no safety argumentation or completed safety assessment). Release
• tooling v3.0.2 — contains breaking changes: root causes are now argued by RootCauseAssessment records replacing mitigations and safety measures, so build files, TRLC files or PlantUML diagrams may need edits. Also: failure modes trace to public API methods, formal test specifications, and // / /* */ file headers accepted interchangeably. Release
• logging v0.2.5 — fixes for compiler compatibility of the log bridge, aarch64 Linux support, a decision record for DLT network transport, and migrated integration tests. Release
• config_management v0.3.0 — CI and coverage improvements, QNX build enabled in CI, and a pinned devcontainer version. Release
• qnx_unit_tests 0.3.0 — fixes for passing arguments and environment variables to the QEMU test runner, plus toolchain dependency updates. Release
• os_autosd continuous — rolling release tag, no notes provided. Release

From the meetings

Technical Lead Circle — Tech Lead Sync (minutes by @antonkri)

• Decisions:
  • S-CORE meeting times: "we keep it as it is"
  • Release v0.10 uses common modules: process 2.2.2, platform 0.7.4, docs 8.6.0. "If some functional modules are using incompatible versions, they will need to upgrade."
• Action items:
  • Inactive committers: "Ever TL does clean-up for his colleagues"
  • S-Core Verified: further workshop on Tuesday
• Open topics: downloadable images (AutoSD cross-compilation works; open PR for QEMU images; Vanilla RPI has "a lot of stones ahead of us"); new web page previews shared.

Technical Lead Circle — Meeting Minutes (TL & Communities & CFTs) (minutes by @antonkri)

• Agenda for 2026-11-02: archival of the nlohmann_json repository.

SW Dev Process Community — General meeting (minutes by @anmittag)

• Agenda for Nov-12th: how to ensure completeness from stakeholder requirements to feature requirements, and from platform to feature to unit architecture, including safety analysis (FMEA) depending on architecture.

Persistency FT (minutes by @Ahmed-Elsaka-JC)

• Weekly status for 2026-10-23..2026-10-29: 6 new issues, 9 closed, 19 new PRs and 43 merged or closed. No decisions recorded.

Discussions worth following

• S-CORE Daily — the previous issue was posted there (comment). No new discussions were opened.

Code changes

Breaking changes first

• bazel_platforms: [Breaking change] Remove EBcLfSA 0.1.0 and add 2.0.0-beta3 — older compiler platform version retired (link)
• inc_someip_gateway: [Breaking change] Remove the old message_passing-based IPC now that the mw::com one is used (link)

Infrastructure & tooling

tooling

• [New feature] Trace failure modes to public API methods (link)
• [New feature] Formal RST test specifications for complex tests (link)
• [New feature] Accept both // and /* */ headers (link)
• [Change] Template parameter resolution and partial specialization validation (link)

bazel_cpp_toolchains / os_images / os_autosd / bazel_platforms

• [New feature] Switch to EBcLfSA-2.0.0-beta3 toolchain (link); images updated (link)
• [Change] AutoSD cross-compilation platform and toolchain (platform, toolchain)

cicd-actions / devcontainer / qnx_unit_tests / qnx_sdp / .eclipsefdn

• [Change] Only wrap available Bazel commands, avoiding failures when no bazelisk is installed (link)
• [CI / automation] Fix self-hosted Renovate artifact updates (link)
• [Bug fix] Fix intermittent QEMU/QNX test timeouts (link)
• [Change] Enable format and copyright checks for qnx_sdp (link)
• [Change] New contributor_training repository, marked as a template (link, link)

Integration & process

reference_integration

• [Change] Release-wide progress overview replaces the hand-maintained Overall Status page (link)
• [Change] Publish AutoSD image on release (link, cherry-pick)

process_description

• [Change] New AI usage guideline: contributor responsibility, mandatory disclosure and human approval (link)

score

• [Change] Safety plan for communication treated as an external SEooC (link); documentation wording clean-ups for Baselibs, AI Platform, Code Generation and Time (example)

Modules

baselibs

• [Change] or_else added to the monadic interface for LockedPtr; Synchronized::WithLock deprecated (link, link)
• [Documentation] Result component DFA and safety-plan link fixes (link)
• [Change] LLVM coverage included in component documentation (link)

communication

• [Change] Fix unexpected gateway application termination (link)
• [Change] Build clean-ups: Bazel upgrade, copyright headers, toolchain features (example)
• [Change] trlc made a regular dependency so consumers can build (link)
• [New feature] Tutorial chapters 5, 6, 9–11 use literalinclude markers (link, link)

lifecycle

• [Change] ready_recovery_action deprecated, activation_retries introduced (link)
• [Change] Flaky test fixes, CodeQL findings fixed, 0.9.0 release notes (link, link, link)

logging

• [New feature] QNX on-target coverage job (link)
• [Change] New dataRouter unit tests, release workflow and coverage artifact fix (link, link, link)

persistency

• [Change] reset_key renamed to set_value_to_default with matching behaviour (link); C++/Rust internal representation aligned (link)
• [Change] Safety analysis updated; CodeQL workflow added and fixed (link, link, link)

inc_security_crypto

• [Change] SHA-256/384/512 hashing migrated from baselibs (link)

inc_someip_gateway

• [Maintenance] LLVM updated to build on Ubuntu 26.04 (link)

module_template

• [Documentation] Fixed the Bazel dependency example in the user manual (link)

Automated dependency updates: 42 merged across 19 repositories (10 in os_images, 4 each in baselibs and time).

Issues

• nlohmann_json: Archive request after Baselibs parser migration — also on the 2026-11-02 meeting agenda
• lifecycle: Uncompleted slots on LmControl events during shutdown (bug)
• inc_someip_gateway: Old events resent when gatewayd or someipd restarts

23 issues opened, 16 closed.

---

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-11-01

Headline

Over the weekend window (30 Oct – 1 Nov), S-CORE published three releases, merged 53 substantive pull requests across 24 repositories, and the Time team readied a release candidate for v0.10.

In plain terms

Three releases went out, including new versions of the time module and the AutoSD operating-system module. The Time team reported that its release candidate for v0.10 is prepared, with the official release planned for Thursday 5 November. Several repositories fixed their automated code-quality checks (static analysis, the tool that scans code for rule violations) and aligned their build tooling. A new hands-on contributor training repository was added and linked from the process pages. Watch for the v0.10 release and the new committer votes mentioned in the Time minutes.

Releases

• os_autosd — v0.2.0: Bazel rules for AIB, Sphinx documentation, a lockfile enforced in CI, toolchain refactoring and examples (release). A rolling continuous tag was also published (release).
• time — v0.3.0: better time daemon test coverage, QNX process configuration and docs for the TimeSlave reference integration, dependency updates, and a rename of an environment variable to BPF_DEVICE_PREFIX (release).

From the meetings

Time FT — weekly 2026-10-30 (minutes, posted by @lavrovvalera)

• Decisions:
  • "The release candidate is prepared. offitial release - next Thursady the 5th of November"
  • "@BjoernAtBosch , @lavrovvalera and @ryan-steel are put on vting. usually takes around month to make it done"
• Action items:
  • Update dependency score_lifecycle to v0.9.0 time#273 needs to be merged before the release preparation — @BjoernAtBosch
  • Other dependencies are updated by @NEOatNHNG; if something is ready to be merged, ping @NEOatNHNG
  • Team to review the merge-queue PR (FEO Weekly [2025-02-04] #279)
• Open questions:
  • Merge queue is missing; after PR FEO Weekly [2025-02-04] #279 merges, check whether anything else is missing in the global configuration.
  • Release 0.10 has a conflict with lifecycle dependencies; the CodeQL workflow needs a unique name.
  • Stakeholder & feature requirements and feature architecture update: PR is prepared as a draft for a first look.

SW Dev Process Community (S-CORE Safety Team) — follow-up reply by @janis-qorix: "Analysis and proposal in PR #231" (comment)

Discussions worth following

• S-CORE Daily (Show and tell) received a new comment with the 2026-10-29 edition (comment).
• No new discussions were opened.

Code changes

Build tooling and CI

baselibs

• [Change] Update Bazel to 8.8.2 — prompted by a published certificate-authority compromise notice (#764).
• [Change] Macro to suppress deprecation warnings, with example (#751).
• [Documentation] JSON writer: removed code unreachable from the writer that still fell under the ASIL-B claim (#758).

bazel_cpp_toolchains

• [Bug fix] QNX_SOURCE flag added for C compile actions on QNX targets (#177).
• [Change] New AutoSD cross-architecture toolchain (#172); general cleanup (#174).

cicd-actions

• [Bug fix] Bazel cache warmup now uses build --nobuild, so all toolchains are fetched (#64); cache statistics decode logs with Node.js, with Node.js runtime and devcontainer fixes (#67, #68, #66); tests corrected (#53).

cicd-workflows

• [Documentation] Shared concurrency guidance to avoid clashing gh-pages publishes (#268).

devcontainer

• [CI / automation] Renovate restricted to the allowlisted self-hosted runner (#188); opencode bumped to 2.2.1 (#186).

persistency

• [CI / automation] CodeQL CLI and MISRA pack pinned to remove false positives that blocked PRs (#634).

mcp-servers

• [Bug fix] Agent-context install script fix (#62); release 0.2.3 pin (#66).

Platform modules

communication

• [Change] score_cpp_policies is now a regular dependency so consumers can build public targets (#1508).
• [Change] MISRA ref-qualification fixes (#1462), proxy event factory rework (#1418), end-to-end protection allocation proposal (#1241), requirement linking (#1413), README cleanup (#1512).

lifecycle

• [Change] Anonymous shared memory (#867); static code analysis now runs on PRs (#891); slimmer QNX QEMU test image (#887); docs aligned with module_template (#898).

time

• [Change] Fix pip hub name conflict with lifecycle dependency (#289).

os_autosd

• [Bug fix] RPM path and version/release selection fixes (#79, #80).
• [Change] Module renamed to score_os_autosd (#81); added to the Bazel registry (#539).

score-crates

• [Change] crate_repo extension lets consumers choose the crate repository, avoiding duplicate crates (#86).

openssl

• [Change] New standalone OpenSSL 3.6.1 module extracted from score_crypto (#1); QNX build enabled (#252).

Incubation and integration

inc_security_crypto

• [Change] RSA-PSS and Ed25519 signing plus pre-hashing (#299); certificate management configuration parsing (#250).

inc_someip_gateway

• [Tests] More Service Discovery conformance tests (60 new test IDs) (#363).

inc_ecu_model

• [Change] Typedef datatype C++ header generation (#34).

reference_integration

• [Change] Optional Ubuntu snapshot mirror in module tests, also cherry-picked to v0.10 (#428, #429); EBcLfsa bumped to 2.0.0-beta3 (#426).

Process, templates and documentation

process_description

• [Change] Contributor training added to the Trainings page (#854); tool management now requires a version check (#856); tool qualification template fixes (#855).

contributor_training

• [Change] New self-paced, hands-on S-CORE contributor training (#2).

module_template

• [Bug fix] gitlint image prefix fix and removal of broken PR templates (#227, #229); component request template aligned with existing CRs (#231).

score

• [Change] Static code analysis rulesets (#3355); platform architecture reorganised with links (#3380); bug list link for docs-as-code qualification (#3405).

Automated dependency updates: 17 merged across 10 repositories.

Issues

• QNX guest kernel panic during boot in integration tests and the matching intermittent kernel panic report — flaky boot failures.
• Release Notes Approval not done by Project Leads.
• Replace hardcoded toolchain QNX paths.
• Four new flaky-test issues were opened in communication; five KVS tool issues were opened in persistency.

19 issues opened, 13 closed.

---

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-11-02

Headline

On 2 November S-CORE published eight releases (including baselibs, communication, lifecycle and persistency) and moved its repositories to Bazel 8.8.2, the build tool version that carries a security fix.

In plain terms

Eight module releases went out in one day, and the Tech Lead Sync discussed what belongs in the S-CORE v0.10 release. Many repositories updated their build tool (Bazel, the program that compiles and tests the code) to version 8.8.2, which includes a fix for a certificate-trust issue; the shared tooling now requires that version. The communication module also fixed an intermittent test failure caused by shared-memory objects being created at the same moment. Watch for the open v0.10 questions (which modules are part of it) and for the Safety Team's audit timeplan.

Releases

• baselibs — v0.2.17: includes breaking changes — the serialization helpers moved from score::platform to score, so qualified calls must be updated; Synchronized::WithLock is deprecated. Not intended for production use (release).
• communication — v0.6.0: removes the deprecated GenericProxyEvent::GetSampleSize() (use GetDataTypeSizeInfo().Size() instead) — API change for users. Not intended for production use (release).
• devcontainer — v1.11.4: refreshes the system certificate trust store (eMudhra distrust) (release).
• kyron — v0.1.5: more robust waking of tasks, docs fix, new coverage pipeline, pinned workflow references and three first-time contributors (release); v0.1.6: Ubuntu 24.04 CI runners, minimal Bazel module declaration, Bazel 8.8.2 (release).
• lifecycle — v0.10.0: adds configuration of POSIX resource limits (RLIMITS) for processes started by the Launch Manager. Not intended for production use (release).
• persistency — v0.4.0: dependency updates, a fix for the unit-test coverage report, CI pinning fix for fork PRs and a docs rename (release).
• time — v0.3.1: Bazel update to 8.8.2 (release).

From the meetings

Technical Lead Circle — Tech Lead Sync (minutes, by @anmittag)

• Decisions: none recorded.
• Action items:
  • "@chheis will clarify if there are open points" on the Eclipse Release Review
  • "@anmittag will update and create a PR" for the Stakeholder Requirements
• Open questions: for release v0.10, to be clarified in the alignment meeting: crypto (not part?), time (released version?), kyron (really part?), someip-gw (not part?); config management, communication and persistency releases missing. Preparing for 1.0: several downloadable images (RasPI, AutoSD) and maybe a showcase video.

Infrastructure Community — Weekly (minutes, by @AlexanderLanin; follow-up by @odra)

• Decisions:
  • score crates: "not maintained (already addressed in score alignment meeting, no volunteers)"
  • "PRs in unmaintained repos: if copilot is green, we merge PRs"
• Action items: coverage per component — "next step: @AlexanderLanin @dcalavrezo-qorix discussion"; comments on the Sphinx diagnostics issue are invited.
• Open questions: breakdown of coverage from component to file level and implementation for 1.0; the centralized CodeQL proposal to be revisited "once there is a live demo / poc setup"; devcontainer setup (no concrete experience in the round). Not discussed: version checks, consumer tests in the cicd repo, future of the devcontainer.

SW Dev Process Community — S-CORE Safety Team (minutes, by @masc2023)

• Decisions: none recorded.
• Action items: merge the open process_description PR Persistency CFT [2024-04-17, 2:30 - 4:00 pm] #853 ("Patch-Release required, also need some Basline for Audit").
• Open questions: "Timeplan Audit ok?"; status/location mismatches in the safety analysis.

Security & Crypto FT (thread)

• Participation in the "PKCS11 Rust Crypto driver vs C++ implementation" breakout was requested by @SukrutHerookar and @sunildevda confirmed it is planned for the next day (reply).

Discussions worth following

• Communication FT Weekly [2026-11-02] — new weekly notes covering SOME/IP, Flatbuffers, Rust API, Methods & Fields and CI/infrastructure status (discussion).
• Diagnostics - Weekly — @FScholPer's notes: create a poll to change the meeting slot and clean up old toolchain settings from an earlier PR (comment).
• S-CORE Fortnightly and S-CORE Daily — the automated newsletters for the previous period were posted (Fortnightly, Daily).

Code changes

Build tooling: Bazel 8.8.2

• [Change] Requirement raised: tools now requires Bazel 8.8.2 or newer across repositories, to address the eMudhra CA security issue (tools#64).
• [Change] Individual repositories moved to 8.8.2: config_management (#101), inc_someip_gateway (#399, "contains a security fix we want"), lifecycle (#911), persistency (#637), time (#293), baselibs lockfiles (#766).

baselibs

• [Change] JSON parser test targets consolidated now that the nlohmann backend is gone (#754).
• [Documentation] Stale references to the moved memory/shared removed (#767).

communication

• [Change] Shared-memory object creation made atomic — root cause of several flaky test failures on Linux and QNX (#1517).
• [Change] Send/allocate hot-path: trace callback created once (#1254) and a new optimized view of shared-memory event data (#1266).
• [Change] New safety measure "WrongserviceFound" (#1423); warning-feature variable removed (#1506); new unit test (#1521).
• [Documentation] Error-handling guide corrected (#1416); broken tutorial link removed (#1515).

lifecycle

• [Change] Resource limits (RLIMIT) support completed: configurable via JSON, with integration tests (#868).
• [Tests] Unit tests for the alive-supervision monitor (#776).
• [Change] Feature-requirement mapping updated (#886); release CodeQL workflow fixed (#915); unused attribute removed (#916).

logging

• [Documentation] Unit-test work product added for the mw::log backend (#376).

persistency

• [Change] Prevents a potential exception escaping a no-throw conversion (#597); CodeQL MISRA C++:2023 findings fixed (#638); CI moved to Ubuntu 24.04 to fix the lint job (#639).

time

• [Change] Compiler warnings are now treated as errors (#286).

reference_integration

• [Change] Communication updated to v0.6.0 (#440); dependable-element docs published via module test artifacts (#432).
• [Maintenance / Bug fix] Devcontainer 1.11.4 adopted because v1.11.1 was yanked, backported to release v0.10 (#438, #439, #442).

docs-as-code

• [Tests] Pre-commit uses the devcontainer's Buildifier (#919); Python dependencies updated (#1010).

itf

• [Change] Guest restarts if its QNX kernel panics during boot, avoiding hung test runs (#150).

rules_imagefs / openssl

• [Change] QNX diskimage rules fixed (rules_imagefs#27); QNX build workflow added for openssl.

score

• [Change] Tool list corrected (#3406); feature integration test folder documented (#3408); architecture files cleaned up (#3390).

.eclipsefdn

• [Change] Read the Docs webhook removed from the communication repo, which moved to GitHub Pages (#245); repo description updated (#251).

Automated dependency updates: 38 merged across 23 repositories (most in inc_someip_gateway and time, 4 each).

Issues

• Bugs opened: lifecycle — createSupervision() failure crashes on a null pointer; Launch Manager does not exit on SIGTERM in debug builds; cicd-workflows — possible qnx_build run with changed PR content after approval.
• Proposals opened: Centralize CodeQL infrastructure; Decide how to surface Sphinx diagnostics.
• 13 issues opened, 14 closed (including three flaky-test reports in communication).

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-11-03

Headline

On 3 November S-CORE published nine releases ahead of the v0.10 release, and the Release Community meeting looked at module versions, test-coverage reporting and release notes.

In plain terms

Several modules (for example config management, logging and the testing framework ITF) published new versions on the way to the S-CORE v0.10 release. The Release Community meeting noted that only some components have measured test-coverage data in the release report, and that release notes should show all changes since the version used in the previous S-CORE release. Many pull requests simplified or cleaned up the Communication and Lifecycle modules, including the removal of long-deprecated (outdated) interfaces. Dozens of automatically created "flaky test" issues in Communication were closed in one sweep. Worth watching: the remaining modules still pinned to a specific commit instead of a release, and the coverage gaps.

Releases

• bazel_cpp_toolchains v1.0.6-rc1 (pre-release) — build-toolchain update: Bazel 8.8.2, support for private release assets as QNX SDP archives, a new EBcLfSA 2.0.0-beta3 toolchain and an AutoSD cross toolchain. (release)
• config_management v0.3.2 — updated shared tooling (3.0.2) and CI runners. (release)
• config_management v0.3.3 — Bazel version changed to 8.8.2. (release)
• itf v0.7.0 — new SSH authentication support; QEMU guests are restarted if the kernel panics during boot (option --qemu-boot-attempts, default 3); fix for lost early output of commands run in Docker. (release)
• logging v0.2.6 — new release (origin tag v0.2.5). The notes state it is not intended for production use, as it does not include a safety argumentation or completed safety assessment. (release)
• mcp-servers v0.2.3 — fixes to the install step and release pinning. (release)
• mcp-servers v0.2.4 — v0.2.3 changes plus a pre-commit tool bump. (release)
• qnx_sdp_pkg v0.0.1-rc2 (pre-release) — adds a QEMU startup package. (release)
• qnx_sdp_pkg v0.0.1-rc3 (pre-release) — adds virtio driver and libqnxnoexcept packages. (release)

From the meetings

Release Community (minutes by @PiotrKorkus)

• Decisions: none stated explicitly. Proposal: "exclude dashboard from release documentation of ref_int as it shows data unrelated to the release."
• Action items: @antonkri will check and update the modules still on a hash (logging, config management); @PiotrKorkus will review code-coverage data (reference_integration#425); create an issue and plan the move of the dashboard data.
• Open questions: coverage is filled for only a few components (Baselibs 12 of 15, Lifecycle 2 of 2, Persistency 1 of 1, Logging 0 of 2; Kyron/Time have no module verification report; Communication and Config Management not activated). Release notes should show all changes since the release used in the last S-CORE release, not only the module's latest release.

Security & Crypto FT (minutes by @sunildevda)

• Agenda for 04-Nov-26 posted: PR status, renaming score_security_crypto to score_crypto, summary of the breakout on PKCS11 Rust vs C/C++ library, and a roadmap for S-CORE Crypto. No decisions or action items recorded yet.

SW Dev Process Community – Safety Team (minutes by @aschemmel-tech)

• Agenda for Nov-10: planning safety tasks for v1.0 (see score#2465 and score#3418). No decisions recorded yet.

Discussions worth following

• Logging CFT Weekly [2026-11-03] — Logging meeting notes: all modules will try to prepare their v0.10 releases by 03.11.2026, with status checks requested on the logging module.
• Fix the PR preview workflow in eclipse-score-website — Infrastructure Community: a question about the website's pull-request preview workflow, where the build succeeded but a later step has a problem.
• S-CORE Daily — the 2026-11-02 issue of this digest was posted (comment).

Code changes

Breaking change

inc_someip_gateway

• [Breaking change] Component requirements for socom and the gateway code — adds requirements that did not exist for these parts so tests can be linked to them. (PR)

Middleware and modules

communication

• [Change] Removal of deprecated APIs (including the create-instance-specifier API) and use of non-deprecated ones in examples and tests — cleans up the public interface. (#1538, #1544, #1392, #1535)
• [Change] Constness fix in the API so constant vectors can be passed. (#1536)
• [Change] Release postprocessing fix, bazelisk pinned to 1.30.0, itf bumped to 0.7.0, new FTA for failing to create a proxy. (#1539, #1562, #1545, #1516)

lifecycle

• [Change] Process is killed after a supervision failure that relates to the current component lifetime, instead of always triggering the fallback run target. (#858)
• [Change] Robustness fixes: avoid a crash when supervision construction fails, fix debug-build spin lock from multiple error domains, mark never-returning functions [[noreturn]]. (#913, #930, #912)
• [Documentation] Spelling and grammar fixes. (#906)

persistency

• [Change] kvs_tool basic tests, global logger with clearer logs, clearer C++ names, use-after-move disallowed. (#497, #608, #622, #652)
• [Documentation] Feature documents retitled to "Persistency", obsolete feature-level safety review removed, security attributes aligned. (#650, #648, #651)
• [Build / CI] Root check aliases dropped; CodeQL job no longer runs on merge groups and cron. (#596, #653)

logging

• [Change] Component requirement checklist for backends and fixes from the backend inspection checklist. (#334, #382)

baselibs

• [Change] QNX SDP 8.0.5 configs now used for QNX coverage; code-review fixes. (#737, #741)

time

• [Change] Fixed flaky control-flow divider timeout tests. (#295)

config_management

• [Change / Maintenance] Tooling 3.0.2, Ubuntu 24.04 runners, devcontainer and qnx_unit_tests updates. (#104, #105)

inc_security_crypto

• [New feature] Structured algorithm catalog replacing name-fragment matching to derive algorithm properties. (#344)
• [Change] Coverage workflow pinned to ubuntu-24.04. (#359)

Integration, tooling and infrastructure

reference_integration

• [Change] Coverage reports integrated into release documentation; devcontainer v1.11.4. (#425, #434)

tools

• [Performance] Reuse of shared Bazel dependency downloads. (#66)
• [Bug fix] Policy sync appends missing managed blocks to existing files. (#67)

itf

• [Change] Early output of exec commands no longer lost (fixes flaky nightly failures in Communication). (#151)

devcontainer

• [Refactoring / CI] Shared catalog reader for installer and documentation; renovate commit author set; more code owners. (#196, #194, #197)

bazel_cpp_toolchains / bazel_registry / rules_imagefs / qnx_sdp_pkg / mcp-servers

• [Change] Unused code removed from toolchain features (#179); score_openssl added to the Bazel registry (#540); search_srcs option for qnx_ifs() (#28); QEMU, virtio and libqnxnoexcept packages (#9, #10); release pin workflow fix (#68).

Process and documentation

process_description

• [Change] Stricter test-metadata rules per verification level, and an expanded intro to test specification guidelines. (#853, #859)

score

• [Change] Non-functional requirements verification included; verification methods clarified; tool versions corrected. (#3404, #3419, #3421)
• [Maintenance] Formatting and header cleanup to prepare for pre-commit checks. (#3386, #3395)

Automated dependency updates: 19 merged across 11 repositories (including 6 in persistency and 3 in os_images).

Issues

• Security-related: communication#1537 — same-UID execution bypasses allowedConsumer/allowedProvider validation checks (opened).
• Bugs closed: lifecycle#914 (crash on null pointer), lifecycle#921 (Launch Manager not exiting on SIGTERM in debug builds), score#2943 (broken links in safety plan).
• For v0.10: logging#320 (feature completeness for v0.10) was closed.
• Newly opened planning items: score#3418 (tool verification for v1.0) and a series of documentation-build safety-requirement warning clean-ups (score#3422–#3428).

27 issues opened, 75 closed (most closed issues were automatically created flaky-test reports in communication).

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-11-04

Headline

On 4 November three modules published releases as audit baselines, and a new self-hosted QNX build approach was piloted in Base Libs.

In plain terms

Three releases (module_template, openssl and process_description) went out, two of them explicitly labelled as the baseline for the audit running 4–6 November. In the meetings, the Base Libs team described a new way of building for QNX (a real-time operating system) using an SDP (software development kit) hosted inside the eclipse-score organization, available to Eclipse committers and CI only. Much of the code activity was about making tests more reliable (a batch of flaky-test issues in the communication module was closed) and about QNX test setup in lifecycle. The lifecycle module also opened a set of issues on safety-related review topics. Watch for the next steps on rolling the QNX approach out to other jobs.

Releases

• module_template v0.2.1 — baseline for the audit of 4–6 Nov; includes tooling and docs-as-code version updates, small doc fixes and CI runner updates. Release
• openssl v0.1.0 — first release: a standalone OpenSSL 3.6.1 module for S-CORE, with LICENSE/NOTICE files, devcontainer updates and a QNX build workflow. Includes first-time contributors. Release
• process_description v2.2.3 — baseline for the audit of 4–6 Nov; adds an AI usage guideline, contributor training page, tool qualification template fixes and expanded test specification guidance. Release

From the meetings

Base Libs FT — weekly 2026-11-04 (minutes)

• Decisions: none recorded.
• Agenda item: "New infrastructure for QNX builds with self-hosted QNX SDP. Baselibs is piloting this approach. QNX SDP hosted in eclipse-score Github organization is available for Eclipse committers and CI only. Currently the coverage workflows is already adapted."
• Action items: @nradakovic is improving the setup; roll out for other QNX jobs; present in Infra Community.

Infrastructure Community — Weekly Rust 2026-11-04, by @dcalavrezo-qorix (minutes)

• Participants: @dcalavrezo-qorix and @andrii Schreba (Intellias). Notes: "possible contribution places".

Lifecycle FT — @SimonKozik added agenda templates for 2026-11-18, 2026-11-25 and 2026-12-02 (2026-11-18, 2026-11-25, 2026-12-02). A follow-up notes the minutes had to be recreated after a browser freeze, with thanks to @MilanTripkovic02 and @MaciejKaszynski.

Discussions worth following

• ITF OCTO update — new thread in the Testing Community: a new version of ITF was presented in the testing weekly; the thread is open for Q&A, with slides attached.
• S-CORE & QNX — new meeting notes by @AlexanderLanin: one module follows the new approach via the qnx_sdp and qnx_sdp_pkg repositories.
• Interest Group: HW Accelerators/AI — weekly notes by @FScholPer with an introduction of Intellias and potential contributions.
• S-CORE Daily — the 2026-11-03 issue was posted.

Code changes

31 substantive PRs merged across 15 repositories.

Core libraries and middleware

communication

• [Change] Fixed a race in rollback preparation between proxies — removes a source of flaky tests (#1553).
• [Change] Made a transport test independent of timing, so it no longer fails under load (#1561).
• [Change] API stability checks now include undocumented symbols (#1567).
• [Change] message_passing SEooC (#1051); tooling bump to 3.0.2 (#1510).
• [Tests] Added missing GenericSkeleton coverage (#1564).
• [New feature] Tutorial chapters 12 & 13 use literalinclude markers, with an optional CI verification (#1505).
• [Change] Removed outdated Coverity/AUTOSAR suppressions and added deviations for immutable globals (#1572, #1574).
• [Maintenance] Release added to bug-report template (#1522).

baselibs

• [Change] Reorganized the JSON parser layout to match the C++ style guide (#772).

lifecycle

• [Change] Enum ordering comparisons replaced with explicit switches, so new values force a build error until handled (#905).
• [Change] QNX unit and integration tests now run under QEMU in one invocation (#908); docs on getting a QNX license (#942).
• [Bug fix] Error logs were cut short; now full strings are logged (#924).
• [Change] Sanitizer builds skip tests marked to be skipped again (#932).

persistency

• [Change] Locking now waits for unlock instead of failing when busy; safety docs updated (#633).

Incubation and integration

inc_security_crypto

• [Change] Raw key export/import and ECDSA-P384-SHA512 support (#347).
• [Refactoring] Providers now receive resolved algorithm descriptors (#360).
• [CI / automation] QNX build moved to ubuntu-24.04 (#376).

inc_someip_gateway

• [Build] bridged_services target made public for external consumers (#404).

Tooling, templates and process

cicd-workflows

• [Tests] Consumer compatibility tests so workflow changes cannot silently skip checks (#273).

devcontainer

• [New feature] Agent-context MCP server feature added (#178).

docs-as-code

• [Bug fix] Corrected the mitigated_by check (#1014).

module_template

• [Bug fix] Removed non-working repository issue templates (#228).
• [Change] Security work products aligned with ISO/SAE 21434 (#236).

process_description

• [Change] Fixed formatting of standards references (#860).

score

• [Change] Draft Rust coding rules catalogue (43 rules) (#3262).
• [Change] FEO and DAAL moved up one level; DAAL safety level set to ASIL_B (#3403).
• [CI / automation] Explicit least-privilege permissions for commit-message check (#3353); capitalization fix (#3431).

No breaking changes were flagged. 18 automated dependency updates were merged across 7 repositories (10 of them in communication).

Issues

• lifecycle: #946–#952, #945 — a set of safety-review topics for the Lifecycle Manager/Health Monitor (timing, QNX safe function list, exceptions, heap allocations).
• communication: #1581 — shared-memory layout differs between libstdc++ and libc++; ten flaky-test issues were closed.
• bazel_registry: #541 — yank config management 0.3.2 and 0.3.3.

18 issues opened, 21 closed.

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-11-05

Headline

On 5 November the reference integration v0.10.0 was released, the Tech Lead Sync discussed how to create release notes and which SOME/IP stack to use, and the nlohmann_json fork moved toward archiving.

In plain terms

The reference integration (the repository that brings the S-CORE modules together) published v0.10.0, followed by a fix that pins CI to a supported Ubuntu version after some release-build jobs failed. The Tech Lead Sync weighed several ways to produce reliable release notes and proposed basing the SOME/IP communication stack on an existing solution. Baselibs has moved its JSON parser to vaJson, so the old nlohmann_json fork is being archived. Elsewhere, 50 substantive pull requests were merged, with a lot of work on build tooling, documentation and the communication module. Worth watching: the outcome of the release-notes proposals and the SOME/IP stack decision.

Releases

• reference_integration v0.10.0 — the integration release for the S-CORE modules. It includes an SBOM (software bill of materials) addition, generated docs, CI cache changes and refreshed module pins. A follow-up change (ITF module entry in eclipse-score/bazel_registry #456) pins release CI to Ubuntu 24.04, because five module jobs in the v0.10.0 release run failed to build. Release
• mcp-servers v0.2.5, v0.2.6 and v0.2.7 — three releases published on the same day. Changes include a fix for how a tool is installed, updated release pins, Ubuntu 24.04 runners and dependency bumps. Links: v0.2.5, v0.2.6, v0.2.7

From the meetings

Tech Lead Sync (Technical Lead Circle) — minutes

• Decisions / proposals:
  • Release notes in the reference_integration: "Pure AI based approach will probably never generate 100% valid release notes". Four proposals were listed: (A) a release ticket per module with predefined sections, (B) a template-based release note per module, (C) an automatically generated PR plus scripting, (D) a "prepare for central release" CI job.
  • Some/IP stack — Proposal: "use current LG solution as basis instead of vSOMEIP", to be stored as a separate SCORE-communication module and maintained by the Communication Community.
• Action items:
  • Release notes tasks: template review and adaptation, schema definition, release workflow, CI job. "create issue @anmittag for @FScholPer" (see issue #3440).
  • Join the next Monday's COM Meeting.
  • Collect ideas and participants for an in-person meeting on 2/3 December in Munich (Eclipse SDV community day) until next week.
• Open questions: check with the Eclipse Libersom project; "what happens with someip-gateway?"; "clarify how to deal with DDS".
• Quality-gap burn-down charts were reviewed.

Persistency FT — minutes

• Updates for 2026-10-30..2026-11-05: 6 new issues, 8 closed; 11 new PRs, 34 merged or closed.
• Misc: "Safety analysis: next audit 2026-11-05." Carried over for confirmation: the meeting time shift to 13:30, and C++ coding guidelines, Dependabot/Renovate setup and workflow tagging, to be raised in the Tech Lead Sync.
• No decisions or named action items recorded.

Discussions worth following

• Tech Lead Sync thread — follow-up replies were posted under the minutes, including a short question from the community (link). Replies here are worth watching as the release-notes and SOME/IP proposals develop.
• S-CORE Daily (Show and tell) — the 2026-11-04 issue was posted to the discussion (link).

Code changes

Infrastructure and tooling

.eclipsefdn

• [Change] Archive the nlohmann_json repository — configuration for the decided archive after the Baselibs parser migration (#249)

nlohmann_json

• [Documentation] Add an archive notice to the README, pointing to vaJson in Baselibs (#46)

cicd-actions

• [New feature] Working-directory support for Bazel cache setup, so nested modules get matching caches (#74)

cicd-workflows

• [New feature] Token for the access-controlled QNX SDP, keeping the proprietary SDP out of GitHub Actions caches (#271)

config_management

• [CI / automation] QNX CI now selects unit tests by tag instead of a hand-written list, so new tests are not missed (#107)

devcontainer

• [New feature] Tools are provisioned from declared environment selections, giving one place to see what each environment provides (#198)
• [Tests] Regression coverage for config volume ownership (#200)

tooling

• [New feature] Sequence diagram validation aligned with UML (#548)

tools

• [Refactoring] Policy example fixtures expressed as patches, easier to review (#68)

sbom-tool

• [Change] Better SBOM source tracking and dependency identities for Git overrides and Rust crates (#30)

mcp-servers

• [Change] Setup workflow improvements: generated files and user state now live outside the consumer repository (#72)

docs-as-code

• [New feature] Info-only check that interfaces are included by at least one element (#1024)
• [Maintenance] process_description updated to 2.2.3 (#1025)

Modules and platform

baselibs

• [Change] JSON parser and writer code aligned with the C++ style guide (#778, #780)
• [Documentation] Sync of the log frontend implementation docs (#659)

communication

• [Change] Fixes for flaky partial-restart and add-on loading tests, closing three flaky-test issues (#1571, #1573)
• [Change] SOME/IP stack proxy event work (#1333)
• [Change] Service discovery strategy made generic and unit-testable (#1584)
• [Change] Safety sentinel extended to more unit types (#1174)
• [Change] Global variable cleanup, copyright header and suppressions (#1578, #1579, #1587)

inc_security_crypto

• [Refactoring] Algorithm catalog kept in the daemon, so adding algorithms does not require rebuilding applications (#373)
• [Bug fix] Key management context renamed so providers are selected correctly (#374)

inc_someip_gateway

• [Documentation] Component architecture for socom, gateway_ipc_binding and gatewayd, plus IPC binding bridging description (#385, #403)
• [Bug fix] Pytest 9.2 compatibility and a fixed license check workflow (#406, #407)

lifecycle

• [Change] Release notes converted to Markdown with Pandoc, replacing an old script (#935)
• [Documentation] Synced with module template (#937)

persistency

• [Bug fix] Tests moved to ITF (#647)
• [Change] Removed the Rpi4 QNX test and fixed a doc version number (#665, #666)

time

• [Change] Generic timebase handler in TimeDaemon, so multiple handlers can run, e.g. for vendor ECUs (#244)

reference_integration

• [Change] Release candidate v0.10 (#415)
• [Bug fix] Ubuntu 24.04 runner pinning backported to v0.10 (#456)

Project documentation

score

• [Change] Code coverage guidance switched toward LLVM/clang-based measurement (#3137)
• [Bug fix / Documentation] Several fixes for non-fatal documentation build warnings (#3434, #3435, #3436, #3438)

Automated dependency updates: 12 merged (devcontainer 1, inc_security_crypto 5, mcp-servers 1, persistency 5).

Issues

• score — Release Notes creation in the reference_integration (opened, from the Tech Lead Sync)
• score — Adapt PMP to Module deletion in score repo
• cicd-workflows — Central workflows: purpose, trade-offs and evaluation
• nlohmann_json — Archive request (closed)

16 issues opened, 12 closed.

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-11-09

Headline

Devcontainer v1.12.0 shipped, a Bazel toolchain alignment landed across several modules, and the Infrastructure meeting discussed CodeQL, QNX and SBOM maintenance.

In plain terms

The development container that contributors use for S-CORE got a new release with an AI-assistant (MCP) tool feature and a newer Bazel build tool. Several modules (lifecycle, persistency) had their build configuration aligned so shared settings are easier to maintain, and the website received a full redesign. The Infrastructure meeting covered the CodeQL security scanning rollout (a large pull request still needs reviewers) and a volunteer to maintain the SBOM (software bill of materials) repository. Worth watching: CodeQL reviews and the proposed central CI workflow.

Releases

• devcontainer v1.12.0 — adds an agent-context MCP server feature, bumps Bazel to 8.8.2, and provisions tools from declared environment selections. No breaking or pre-release flag in the briefing. (release)

From the meetings

Infrastructure Community (minutes by @AlexanderLanin)

• Decisions: Discussed https://gitlab.eclipse.org/eclipsefdn/helpdesk/-/work_items/8046 and "agreed to continue". For the unmaintained score sbom repo: "if copilot is green, we merge PRs".
• Action items: @nicu1989 "would volunter to maintain the repo" (define sbom direction, e.g. cargo lock vs module lock; follow up on supply chain). @FScholPer listed: version checks as part of a regular check (rules_cc, bazel..), consumer tests as part of the cicd repo, and the future of the devcontainer (make it smaller, dedicated prebuilds, optional features).
• Open questions: CodeQL "ready to go", but add Bazel based CodeQL static analysis tooling tools#69 "needs reviewers. Unfortunately it's huge." QNX SDP tests running, update next week. Central workflow: "small step with build-qnx, build-linux instead?"; first align on how to run clippy and call toolchains.

Architecture Community

• Weekly 2026-11-09: "Meeting was cancelled due to an insufficient number of agenda items." Next meeting Nov 16th. (minutes)
• Weekly 2026-11-16 agenda: @basheerFZ is asked to present a topic from a communication PR comment that @qor-lb discussed in the TL circle. (agenda)

Discussions worth following

• Logging FT — new thread Logging CFT Weekly [2026-11-10]: agenda on the status of logging issues Improvement: Add ASPICE standard references for process #318 and Improvement: Document General Traceability Concept for the workproducts #319 (move or close) and shifting tasks to the next delivery.
• Diagnostics FT — Diagnostics - Weekly got 2026-11-09 notes: a meeting with OpenSOVD, PRs and a collaboration model; @FScholPer will run a poll in the OpenSOVD Slack channel to find a regular weekly slot for both projects. (comment)

Code changes

cicd-workflows

• [New feature] Modules can pass test reports from several jobs straight to the docs workflow without a merge job (#279)

devcontainer

• [Bug fix] Native tool bumps now refresh complete artifacts for the updated lockfile (#210)
• [New feature] Automated update proposals now cover every native and Python tool pin (#211)

baselibs

• [Documentation] JSON parser layers merged into one StructureParser, public API and behavior unchanged (#787)
• [Change] Simplified lossless-cast code into a single template, checked against the old behavior (#790)
• [CI] QEMU package caching replaced by fast APT mirrors, since the cache could be saved empty (#798)

communication

• [Change/Tests] Coverage justifications, file reorganisation, copyright header fixes and new unit tests (#1565, #1591, #1595, #1596, #1598)

lifecycle

• [Change] New test for supported languages requirements (#934)
• [Maintenance] Bazel toolchain configuration aligned across modules (#962)

logging

• [Change] Comment on non-blocking messages updated (#375)
• [Documentation] Obsolete persistency diagrams removed; Datarouter UML design aligned with the code (#398)

persistency

• [Bug fix] std::filesystem replaced with score::filesystem (#677)
• [Maintenance] Toolchain alignment (#678); logging updated to 0.2.6 (#680)
• [CI] Release workflow now creates a verified draft release with docs and SBOM assets (#679)

reference_integration

• [Change] Deployed platform separated from the showcases that verify it (#401)

score

• [Documentation] AI SDLC / SpecKit tooling comparison matrix (#3140)

tooling

• [Bug fix] Const-qualified member function overloads preserved (#558); [Change] explicit template instantiation (#559); [Maintenance] devcontainer bumped to v1.12.0 (#557)

eclipse-score-website

• [Change] Redesign of the website with new logo and updated project information (#76)

Automated dependency updates: 18 merged across 10 repositories.

Issues

• logging — Requirements for S-Core Release v1.0 opened
• mcp-servers — Roadmap: metamodel graph, SDLC evidence and Graphify follow-ups opened
• baselibs — vajson writer/reader mismatch on \u escapes closed (bug)

4 issues opened, 8 closed.

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-11-10

Headline

Five releases shipped, including a new high-integrity (ASIL-B) toolchain option, while the Release Community asked module owners to prepare pre-releases ahead of the S-CORE v1.0 tooling freeze on 1 December.

In plain terms

Build-environment building blocks (toolchains and platform definitions) got new options for safety-critical applications, and several modules published new versions. The Release Community meeting set concrete dates for S-CORE v1.0: tooling freeze on 1 December and release on 14 December, so module owners were asked to publish pre-releases this week and make sure approvers are available. Documentation tooling also got stricter, with two breaking changes that enforce version and traceability-link rules. Worth watching: the new dependency-classification decision record (which dependencies integrators need versus development-only) and the v1.0 freeze date.

Releases

• bazel_cpp_toolchains v1.0.6-rc2 (pre-release) — adds the EBcLfSA 2.0.0-beta3 toolchain, an AutoSD cross-compilation toolchain, Bazel 8.8.2 and QNX compile-flag support. (release)
• bazel_platforms v1.2.0 — adds an AutoSD aarch64 cross-compilation platform and replaces EBcLfSA 0.1.0 with 2.0.0-beta3 (marked as a breaking change, feat!); one first-time contributor. (release)
• bazel_platforms v1.3.0 — adds the EBcLfSA high-integrity ecosystem for safe applications. (release)
• cicd-actions inter-repo-access/v0.0.1 — first tagged release: new shared actions for cache pruning and improved Bazel caching, input checks, and dependabot enabled. (release)
• persistency v0.4.1 — release with documentation and a module release note available. (release)

From the meetings

Release Community (minutes by @PiotrKorkus)

• Decisions
  • "Tooling for SCORE v1.0 should be frozen 01.12"
  • Proposal to "create a decision record and list which dependencies are public in SCORE and which are development only."
• Action items
  • Module owners: "please create a pre-release of your modules until end of this week."
  • @OliverHeilwagen will prepare a draft PR for the dependency decision record.
  • Make sure CODEOWNERS and module owners are present around the v1.0 release (14.12) so someone can approve for each module.
  • Patches to fix: config_managment (002 persistency, 003 dependable ele) and logging (003 relative docs links, 004 dependable ele).
  • @antonkri will check for updates on SDP 8.0.5.
  • Please review score#3324 (umbrella targets for S-CORE modules).
• Open questions
  • Which dependencies the integrator needs versus development-only; next step is for modules to define tests in their repo covering public interfaces.

Security & Crypto FT (minutes by @sunildevda)

• Agenda included the PKCS11 crypto provider (PIN to be part of the trust zone rather than a config file) and a draft roadmap for S-CORE Crypto. No decisions or action items are recorded in the briefing.

Discussions worth following

• S-CORE Daily (Show and tell) — the previous issue was posted; one new comment. (thread)

Code changes

Breaking changes first

• docs-as-code: [Breaking change] enforce tool_version (#1022) and enforce fulfils links (#1034) — documentation checks now fail where these were previously optional.
• reference_integration: [Breaking change] upgrade process to 2.2.3 and docs-as-code to 8.7.0 (#463).

Documentation and tooling

• docs-as-code: [New feature] prefer a document's belongs_to link for verification reports (#1037); [Bug fix] consistent testing under pytest (#1038); link-check no longer fails when issue creation is disabled (#1033).
• tooling: [New feature] dependable-element reports show the tooling version (#562); [Bug fix] design-vs-implementation check ignores top-level const on parameters (#566); component design name support (#561); Bazel 8.8.2 (#567); Ubuntu snapshot mirror fallback for flaky downloads (#569); feature-flag variant example (#556).
• sbom-tool: [Bug fix] generator version now included in SBOM reports, as SPDX 2.3 requires (#32).
• .github: [New feature] new Workflows tab showing which reusable workflow versions each repository uses (#140); weekly grouped dependency updates (#121).
• process_description: doc_tool attributes aligned with docs-as-code (#870); tool checklist and improvement-process examples refined (#871, #872).
• score: [Change] improved docs-as-code functional description (#3451).

Toolchains and platforms

• bazel_cpp_toolchains: [New feature] EBcLfSA 2.0.0-beta3 high-integrity toolchain for ASIL-B applications (#182).
• bazel_platforms: [New feature] EBcLfSA high-integrity ecosystem (#28).

Modules

• baselibs: toolchain configuration aligned across modules (#796); JSON writer rewritten with plain functions, output unchanged (#802); requirements wording guidance (#800); logging requirement safety levels fixed (#803).
• lifecycle: simplified SafeProcessMap (#749); verification report extension for feature requirements (#895); missing limits and patterns added to the launch manager JSON schema (#953); ACL now taken from baselibs (#959).
• persistency: initial release notes (#540).
• time: module verification report added (#301).

Integration and incubation

• reference_integration: Linux aarch64 platform and showcase packages, e.g. Raspberry Pi (#445); platform info service reporting the S-CORE version (#446); pre-release check agent and script (#468); time verification report linked (#469).
• inc_security_crypto: [New feature] keys that do not fit the context algorithm are now refused (#345).
• inc_diagnostics: first diagnostic gateway integration drafted (#6).

Automated dependency updates: 16 merged across 11 repositories (bazel_cpp_toolchains 1, cicd-actions 1, coverage_tool 2, devcontainer 1, inc_security_crypto 1, inc_someip_gateway 1, module_template 1, os_images 1, persistency 5, reference_integration 1, score 1), plus routine bumps in .github, inc_diagnostics, module_template and score.

Issues

• process_description: Resolve #8 Audit Findings — new; closed alongside it: Safety Audit 8 preparation and #7 audit findings.
• inc_diagnostics: a batch of new bug reports, e.g. SOVD gateway returns HTTP 500 for every UDS error and flaky tests.
• logging: Safety Manual clearly states FFI capability opened.

24 issues opened, 12 closed.

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-11-11

Headline

A safety-audit debrief in the Base Libs meeting, several stricter documentation-tooling checks, and two new toolchain releases marked an active day across S-CORE.

In plain terms

Base Libs discussed feedback from a recent safety audit: development processes look good, but test evidence, bug handling and component qualification need attention. The documentation tooling (docs-as-code) now enforces several link rules that were previously optional, so module teams may see new check failures. Shared CI building blocks and coverage-tool tests were also strengthened. Watch for the QNX 8.0.5 migration update on Monday 16 November and the Reference Integration pre-release status (CW 46).

Releases

• bazel_cpp_toolchains v1.0.6 — maintenance release: copyright checker moved to shared tooling, support for private GitHub release assets as QNX SDP archives, Bazel 8.8.2, new EBcLfSA 2.0.0-beta3 toolchains and an AutoSD cross-compile toolchain. (release)
• bazel_cpp_toolchains v1.1.0-rc1 (pre-release) — the default QNX SDP package is shared across x86_64 and aarch64 targets. (release)

From the meetings

Base Libs FT — weekly 2026-11-11 (minutes)

• Decisions / proposals:
  • "Each bug ticket needs to be confirmed by a safety expert whether it's safety relevant or not (came as a feedback from the safety audit)"
  • "Known bugs should be reported in the release notes"
  • Proposal: a safety manager joins the FT meeting to discuss new bug reports; bug template changes to be discussed in the process community.
• Audit feedback (@aschemmel-tech): development processes already quite good; findings in verification (test hardware, arguing skipped/failed tests, bug handling) and open topics in component qualification. Parts of the report will be published in process_description#869.
• Action items: QNX SDP 8.0.5 integration status to be presented at the S-CORE sync on 16.11.2026.
• Open questions: how to deal with S-CORE modules that don't follow the S-CORE process; how to ensure analysis is put in issue comments.

Technical Lead Circle — agenda for 2026-11-16 (minutes)

• Agenda: Reference Integration Pre-Release // CW 46 (overview of PR status and module versions by @antonkri); QNX v8.0.5 migration status by @4og.

Infrastructure Community — weekly Rust meeting 11-11-2026 (minutes)

• Participants @dcalavrezo-qorix, @PLeVasseur; notes: "novelty in SRCR".

Lifecycle FT — follow-ups to the minutes thread: a diagram shown in the meeting (comment) and a pointer to the current proposal for the weekly run by @FScholPer (comment).

Architecture Community — @basheerFZ: "yes i will do the presentation on 16-11-2026." (comment)

Discussions worth following

• Requirements and checks for Payloads — a Q&A asking whether the "trivially copyable" payload rule documented for methods also applies to events and fields.
• Interest Group: HW Accelerators/AI — weekly notes posted, including improvements to a graph setup (comment).

Code changes

Breaking changes

docs-as-code

• [Breaking change] Enforce tool_req__docs_saf_attrs_mitigated_by — a previously optional safety-link rule is now checked (#1011).
• [Breaking change] Enforce missing satisfies links for guideline requirements (#1023).
• [Breaking change] included_by feature link for logical architecture interfaces is now mandatory (#1041).
• [Change] Removed the deprecated external_needs via data route, keeping only external_needs (#1045); [New feature] info-only check of test fields (#934).

cicd-workflows

• [Breaking change] Test report artifact patterns are now a multiline input instead of JSON (#285).
• [New feature] Reusable build, test and coverage workflow to reduce duplicated CI setup (#284).

Infrastructure and tooling

cicd-actions

• [Bug fix] Bazel working directory is now honored in the sandbox setup (#80).

coverage_tool

• [Tests] Downstream checks extended to logging and persistency (#47); end-to-end checks migrated to pytest (#56).

tooling

• [Change] Requirement text rendered as RST in reports (#574); Bazel lockfile added (#568); all tests added to CI (#576).

bazel_cpp_toolchains

• [New feature] Static linking removed from the EBcLfSA low-integrity toolchain (#185); [Documentation] shared QNX SDP package (#181).

Other infrastructure

• .eclipsefdn: [Change] merge queue required for logging main (#253).
• .github: [Maintenance] better diagnostics for repository collection (#143).
• devcontainer: [CI] version bumps now count as features and trigger releases (#222).
• reference_integration: [CI] fix stuck approval workflows (#470).
• openssl: [Change] dev dependencies no longer leak downstream (#9).
• score-crates: [Change] QNX cross-compile sysroot fix (#84).

Process and documentation

process_description / score

• [Change] Confirmation review requirements tailored out (process_description#873, score#3453); requirement validity wording (#874).
• score: only the Architecture chair or proxy can start/cancel the Final Comment Period (#3432); module structure docs now point to the module template (#3452).
• eclipse-score-website: roadmap links to the stable v0.10 release notes (#77).
• module_template: requirement traceability added (#234).
• config_management: new codeowners (#111).

Platform modules

baselibs

• [Documentation] Generic Trace Library public API requirements (#730).

communication

• [Change] A safety analysis diagram is now registered in the build (#1607).

lifecycle

• [Change] Deprecated ready_recovery_action removed (#919); component factory (#968); non-root test (#940); demo logging config fix (#966); documentation and checklist updates (#821, #980).

logging

• [Change] Dependency reports in docs builds (#393); message-loss detection requirement (#406).

persistency

• [Build] Coverage moved and sanitizer workflow added (#577, #578); [Change] IDE support and C++ cleanups (#500, #571).

time

• [Change] Data race in the TimeDaemon shared memory handler fixed (#271).

Incubation

inc_security_crypto

• [Bug fix] Daemon error codes forwarded and empty input accepted for cipher/HMAC (#381, #384); [Tests] NIST signature-verification vectors (#380).

inc_ecu_model

• [Change] Parsing of the interface part of FIDL (#36).

Automated dependency updates: 18 merged across 10 repositories.

Issues

• time: seven new reports on the time module's robustness (e.g. #310, #311, #315).
• docs-as-code: #1047 (bug) — external data not resolved when execroot link is absent.
• lifecycle: #977 (bug) — missing constructor CodeQL error.

26 issues opened, 19 closed.

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.

[dcalavrezo-qorix]

S-CORE Daily — 2026-11-12

Headline

Five releases — including a baselibs release that drops SHA-1 support — plus a Tech Lead Sync decision on wider CodeQL visibility marked a busy day across S-CORE.

In plain terms

Five modules published releases, among them baselibs v0.2.18, which removes the older SHA-1 hashing method (users should switch to a supported one such as SHA-256). Two documentation-tooling changes are flagged as breaking, so projects using docs-as-code may need to adjust. The Tech Lead Sync agreed to let all contributors, not just committers, see CodeQL (automated code security scan) results, and discussed build dependencies that currently come from the public internet. Much of the code work focused on making continuous integration more reliable and on QNX (an automotive operating system) tooling. Watch for how a possible new persistency implementation is handled via the project's change-proposal process.

Releases

• baselibs v0.2.18 — Breaking change: SHA-1 support removed from the hash component (public API, identification and factories); use a supported alternative such as SHA-256. Not intended for production use (no safety argumentation or completed assessment). (release, PR)
• bazel_cpp_toolchains v1.1.0-rc2 (pre-release) — removes static linking from the EBcLfSA low-integrity toolchain and corrects swapped strip tool targets for QNX SDP 8.0. (release)
• mcp-servers v0.2.8 — installation and release-pin fixes, CI moved to Ubuntu 24.04 runners, plus dependency bumps. (release)
• process_description v2.2.4 — documentation refinements: standards references formatting, improvement-process examples, tailoring out confirmation review requirements, updated requirement validity description. (release)
• qnx_sdp v0.1.0-rc1 (pre-release) — first release candidate: improved QNX SDP generation, refactored credential helper flow, format/copyright checks, and support for clean installations. (release)

From the meetings

Technical Lead Circle — Tech Lead Sync (minutes)

• Decisions:
  • CodeQL results for all contributors instead of committers only: "OK from TLC => @AlexanderLanin" (Eclipse and INF Team have already agreed).
  • Build cache topic: TLC suggests addressing it in the Infrastructure Community => @odra.
  • In-person meeting in Munich: no urgent official topic, so no S-CORE meeting to be planned.
• Action items: @odra to take the build-cache topic to the Infrastructure Community.
• Open questions: How to migrate smoothly if the communities adopt a new persistency implementation (better performance, more functionality, same API); outside dependencies (Ubuntu, QNX, …) have no cache, and archiving them may raise license issues.
• Info: the Eclipse Release Review was successfully completed.
• Follow-up from @masc2023: per the process, a FEP of type Feature Modification is needed, with an impact analysis or attached Decision Record (comment).

Persistency FT (minutes)

• Decisions: none recorded. Action items: none recorded. Open questions: none recorded.
• Weekly status (2026-11-06..2026-11-12): 8 new issues, 3 closed, 5 new PRs, 43 PRs merged or closed.

SW Dev Process Community (minutes)

• Agenda for Nov 19th: "Big Pictures" (from @anmittag) — completeness from stakeholder requirements to feature requirements, architecture from platform to unit, and how to ensure safety without architecture; follow-up on process_description#864.
• No decisions or action items recorded.

Discussions worth following

• S-CORE Daily — the 2026-11-11 edition was posted as a new comment (link).

Code changes

Breaking changes first

• docs-as-code: [Breaking change] enforce the QM-to-safety-requirement link rule (#1052); [Breaking change] remove deprecated data mounts (#1055).

Tooling and CI

docs-as-code

• [New feature] Native PlantUML toolchains per platform — no separate Java install needed for diagrams (#1032).
• [New feature] Compact stacked bar charts in verification reports (#1053).
• [Maintenance] Test cleanup (#1026).

cicd-workflows

• [Bug fix] Retry transient dependency download failures, reducing manual CI restarts (#288); limit dependency preparation to build so test and coverage jobs run again (#290).

coverage_tool

• [Bug fix] Updated persistency coverage justification path to restore the compatibility check (#58).

bazel_cpp_toolchains

• [Bug fix] Corrected swapped strip targets in QNX SDP 8.0 (#186).

qnx_sdp

• [Change] Support for clean QNX SDP installations (#7).

mcp-servers

• [Change] Automatic agent context setup (#74).

Libraries and modules

baselibs

• [Change] JSON writer keeps the target file unchanged if a synced write fails (#806); JSON parser now accepts empty object member names (#811).
• [Documentation] Pilot QNX SDP 8.0.5 in the QNX build workflow, mitigating download timeouts (#769).

communication

• [Tests] More unit tests for SkeletonEvent and FieldTagsStore (#1589, #1597); [Change] ticket linking fix (#1609).

lifecycle

• [Change] Launch manager now links the remote logging backend so DLT output works (#982); CodeQL false positive avoided (#981); requirement/test links added and logging requirements handled by mw::log removed (#978, #988).
• [Documentation] Work product links filled in feature and module safety plans (#973, #974).

persistency

• [CI / automation] Shared Bazel workflow for QNX, integration and release jobs (#708).

inc_ecu_model

• [Change] Header generation for enum/union/array/struct datatypes (#37).

inc_someip_gateway

• [Build] Adopted the global S-CORE toolchain configuration (#391); TC8 conformance targets made public and toolchain extensions marked dev-only for downstream use (#425, #427); [CI / automation] bridged_services added to coverage (#426).

Integration and images

os_images

• [New feature] Clean EBcLfSA image build from Debian packages (#53).

reference_integration

• [Tests] score_time clock integration test (#300); [Change] new S-CORE Platform Run where the launch manager starts platform daemons, then tests, with DLT analysis (#462).

Automated dependency updates: 13 merged across baselibs, cicd-actions, devcontainer, inc_security_crypto, inc_someip_gateway, persistency and score; plus 2 Dependabot bumps in lifecycle and 1 in module_template.

Issues

• score: Contribution Proposal: SOME/IP stack — Eclipse LIBERSOM opened.
• time: Daemon does not end its process when initialization fails opened.
• persistency: Rust KVS: missing API to discard pending changes opened.
• lifecycle: SIGSEGV during launch manager shutdown closed.

10 issues opened, 25 closed.

S-CORE Daily is generated automatically from public eclipse-score activity for the window shown. Links go to the sources; corrections welcome as replies.