Merge branch 'master' into fix/libsoduim_annex_k_decleartaion_issue

Author: hrushikesh430

.build-test-rules.yml

@@ -79,22 +79,23 @@ esp_lcd_qemu_rgb/examples/lcd_qemu_rgb_panel:
     - if: ((IDF_VERSION_MAJOR == 5 and IDF_VERSION_MINOR >= 3) or (IDF_VERSION_MAJOR > 5)) and (IDF_TARGET in ["esp32", "esp32c3"])
       reason: Example is meant to be run under QEMU, which currently only supports ESP32 and ESP32-C3
 
-spi_nand_flash/examples/nand_flash:
-  disable:
-    - if: IDF_VERSION_MAJOR < 5
-      reason: The spi_nand_flash component is compatible with IDF version v5.0 and above, due to a change in the f_mkfs API in versions above v5.0, which is not supported in older IDF versions.
-
 spi_nand_flash/test_app:
   disable:
     - if: IDF_VERSION_MAJOR < 5
       reason: The spi_nand_flash component is compatible with IDF version v5.0 and above, due to a change in the f_mkfs API in versions above v5.0, which is not supported in older IDF versions.
+    - if: IDF_VERSION_MAJOR < 6 and CONFIG_NAME == "bdl"
+      reason: BDL support requires the esp_blockdev interface, available starting from IDF version v6.0.
 
 spi_nand_flash/host_test:
   enable:
     - if: IDF_TARGET == "linux"
   disable:
     - if: IDF_VERSION_MAJOR < 5
       reason: The spi_nand_flash component is compatible with IDF version v5.0 and above, due to a change in the f_mkfs API in versions above v5.0, which is not supported in older IDF versions.
-  disable:
     - if: IDF_VERSION_MAJOR == 5 and (IDF_VERSION_MINOR < 3)
       reason: Fails to build on older versions of IDF
+
+spi_nand_flash_fatfs/examples/nand_flash:
+  disable:
+    - if: IDF_VERSION_MAJOR < 5
+      reason: The spi_nand_flash component is compatible with IDF version v5.0 and above, due to a change in the f_mkfs API in versions above v5.0, which is not supported in older IDF versions.

.github/ISSUE_TEMPLATE/bug-report.yml

@@ -64,6 +64,7 @@ body:
         - quirc
         - sh2lib
         - spi_nand_flash
+        - spi_nand_flash_fatfs
         - supertinycron
         - thorvg
         - touch_element

.github/workflows/build_and_run_apps.yml

@@ -314,6 +314,9 @@ jobs:
       - run-target-linux
     if: github.repository_owner == 'espressif' && always() && github.event_name == 'pull_request' && needs.prepare.outputs.build_only == '0'
     runs-on: ubuntu-22.04
+    permissions:
+      checks: write
+      pull-requests: write
     steps:
       - name: Download Test results
         uses: actions/download-artifact@v4

.github/workflows/clang-tidy.yml

@@ -7,6 +7,10 @@ on:
     branches:
       - master
 
+permissions:
+  contents: read
+  security-events: write
+
 jobs:
   build:
     name: Run clang-tidy
@@ -61,7 +65,7 @@ jobs:
             results.sarif
             results.sarif.raw
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: results.sarif
           category: clang-tidy

.github/workflows/issue_comment.yml

@@ -1,5 +1,9 @@
 name: Sync issue comments to JIRA
 
+permissions:
+  issues: write
+  pull-requests: write
+
 # This workflow will be triggered when new issue comment is created (including PR comments)
 on: issue_comment
 

.github/workflows/new_issues.yml

@@ -1,5 +1,8 @@
 name: Sync issues to Jira
 
+permissions:
+  issues: write
+
 # This workflow will be triggered when a new issue is opened
 on: issues
 

.github/workflows/new_prs.yml

@@ -1,5 +1,8 @@
 name: Sync remain PRs to Jira
 
+permissions:
+  pull-requests: write
+
 # This workflow will be triggered every hour, to sync remaining PRs (i.e. PRs with zero comment) to Jira project
 # Note that, PRs can also get synced when new PR comment is created
 on:

.github/workflows/upload_component.yml

@@ -66,6 +66,7 @@ jobs:
             quirc
             sh2lib
             spi_nand_flash
+            spi_nand_flash_fatfs
             supertinycron
             thorvg
             touch_element

.idf_build_apps.toml

@@ -43,5 +43,8 @@ check_warnings = true
 
 # build related options
 build_dir = "build_@t_@w"
-config = ["sdkconfig.ci","sdkconfig.ci.*="]
+config_rules = [
+    'sdkconfig.ci=default',
+    'sdkconfig.ci.*=',
+]
 ignore_warning_file = ".ignore_build_warnings.txt"