Request review before merge official branch

.codespell-ignore

@@ -0,0 +1 @@
+re-use

.github/workflows/abi-checker.yml

@@ -1,5 +1,7 @@
 name: ABI Compliance Check
 on: [pull_request]
+permissions:
+  contents: read
 jobs:
   abi-check:
     strategy:
@@ -20,7 +22,7 @@ jobs:
           sudo apt-get install abi-compliance-checker abi-dumper
 
       - name: Checkout merged-base
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.base.ref }}
 
@@ -30,7 +32,7 @@ jobs:
           abi-dumper build/libcsp.so -lver "merged-base" -o ../tmp/libcsp-merged-base.dump
 
       - name: Checkout Current PR
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           ref: ${{github.event.pull_request.head.ref}}
@@ -51,7 +53,7 @@ jobs:
 
       - name: Upload ABI Report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: abi-compliance-report-${{ github.run_id }}
           path: compat_reports

.github/workflows/build-test-freertos.yml

@@ -1,5 +1,10 @@
 name: FreeRTOS Build and Test
 on: [push, pull_request]
+permissions:
+  contents: read
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
 jobs:
   build-freertos:
     runs-on: ubuntu-latest
@@ -12,18 +17,18 @@ jobs:
           sudo apt-get install ninja-build meson tree
 
       - name: Checkout Test App
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: libcsp/libcsp-freertos
 
       - name: Checkout FreeRTOS Kernel
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: FreeRTOS/FreeRTOS-Kernel
           path: freertos
 
       - name: Checkout libcsp under subprojects
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: subprojects/libcsp
 

.github/workflows/build-test-python.yml

@@ -1,26 +1,31 @@
 name: Python Bindings
 on: [push, pull_request]
+permissions:
+  contents: read
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
 jobs:
   build-test-python:
     strategy:
       fail-fast: false
       matrix:
         python-version:
-          - '3.9'
           - '3.10'
           - '3.11'
           - '3.12'
+          - '3.13'
+          - '3.14'
         os:
           - ubuntu-24.04
           - ubuntu-22.04
-          - ubuntu-20.04
         buildsystem:
           - meson
           - cmake
     runs-on: ${{ matrix.os }}
     steps:
       - name: Setup Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -34,7 +39,7 @@ jobs:
           sudo apt-get install ninja-build ${{ matrix.buildsystem }}
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Build libcsp examples
         run: python3 examples/buildall.py --build-system=${{ matrix.buildsystem }}
@@ -46,7 +51,7 @@ jobs:
 
       - name: Install the latest Meson using Pip if Python is 3.12 or later
         # Meson 1.3+ supports Python 3.12 (distutils removed)
-        if: ${{ matrix.buildsystem == 'meson' && matrix.python-version == '3.12' }}
+        if: ${{ matrix.buildsystem == 'meson' && matrix.python-version >= '3.12' }}
         run: |
           pip install meson
           meson --version

.github/workflows/build-test-zephyr.yml

@@ -5,24 +5,30 @@ on:
   schedule:
     - cron: '0 10 * * 0' # Run it every Sunday 10am UTC
 
+permissions:
+  contents: read
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
 jobs:
   build-zephyr:
     runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:
         board:
-          - scobc_module1
+          - scobc_a1
           - qemu_cortex_m3
-          - mps2_an385
+          - mps2/an385
         python-version:
-          - '3.9'
           - '3.10'
           - '3.11'
+          - '3.12'
+          - '3.13'
 
     steps:
       - name: Setup Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -31,7 +37,7 @@ jobs:
           python3 --version
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: libcsp-zephyr
           repository: yashi/libcsp-zephyr

.github/workflows/build-test.yml

@@ -1,5 +1,10 @@
 name: Build and Test
 on: [push, pull_request]
+permissions:
+  contents: read
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
 jobs:
   run-tests:
     strategy:
@@ -8,16 +13,42 @@ jobs:
         os:
           - ubuntu-24.04
           - ubuntu-22.04
-          - ubuntu-20.04
         buildsystem:
           - meson
           - cmake
           - waf
         compiler:
-          - CC: gcc
-            CXX: g++
+          - CC: gcc-10
+            CXX: g++-10
+          - CC: gcc-11
+            CXX: g++-11
+          - CC: gcc-12
+            CXX: g++-12
+          - CC: gcc-13
+            CXX: g++-13
+          - CC: gcc-14
+            CXX: g++-14
           - CC: clang
             CXX: clang++
+        csp_version:
+          - 1
+          - 2
+        exclude:
+          # Ubuntu 22.04 only has GCC 10, 11, 12
+          - os: ubuntu-22.04
+            compiler:
+              CC: gcc-13
+          - os: ubuntu-22.04
+            compiler:
+              CC: gcc-14
+          # Ubuntu 24.04 only has GCC 12, 13, 14
+          - os: ubuntu-24.04
+            compiler:
+              CC: gcc-10
+          - os: ubuntu-24.04
+            compiler:
+              CC: gcc-11
+
     runs-on: ${{ matrix.os }}
     steps:
       - name: Setup packages on Linux
@@ -32,15 +63,8 @@ jobs:
         run: |
           sudo apt-get install ninja-build ${{ matrix.buildsystem }}
 
-      - name: Setup packages on MacOS
-        if: ${{ runner.os == 'macOS' && matrix.buildsystem != 'waf' }}
-        run: |
-          brew update
-          brew install ninja ${{ matrix.buildsystem }}
-          brew install zeromq
-
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Build
         env:
@@ -57,30 +81,30 @@ jobs:
         run: |
           socat -d -d -d pty,raw,echo=0,link=/tmp/pty1 pty,raw,echo=0,link=/tmp/pty2 &
           sleep 1
-          ./build/examples/csp_server -k /tmp/pty1 -a 1 -T 10 &
-          ./build/examples/csp_client -k /tmp/pty2 -a 2 -C 1 -t
+          ./build/examples/csp_server -k /tmp/pty1 -a 1 -T 10 -v ${{ matrix.csp_version }} &
+          ./build/examples/csp_client -k /tmp/pty2 -a 2 -C 1 -t -v ${{ matrix.csp_version }}
           pkill socat
 
       - name: Run KISS Server Test
         run: |
           socat -d -d -d pty,raw,echo=0,link=/tmp/pty1 pty,raw,echo=0,link=/tmp/pty2 &
           sleep 1
-          ./build/examples/csp_client -k /tmp/pty2 -a 2 -C 1 -T 10 &
-          ./build/examples/csp_server -k /tmp/pty1 -a 1 -t
+          ./build/examples/csp_client -k /tmp/pty2 -a 2 -C 1 -T 10 -v ${{ matrix.csp_version }} &
+          ./build/examples/csp_server -k /tmp/pty1 -a 1 -t -v ${{ matrix.csp_version }}
           pkill socat
 
       - name: Run ZMQ Client Test
         run: |
           ./build/examples/zmqproxy &
-          ./build/examples/csp_server -z localhost -a 1 -T 10 &
-          ./build/examples/csp_client -z localhost -a 2 -C 1 -t
+          ./build/examples/csp_server -z localhost -a 1 -T 10 -v ${{ matrix.csp_version }} &
+          ./build/examples/csp_client -z localhost -a 2 -C 1 -t -v ${{ matrix.csp_version }}
           pkill zmqproxy
 
       - name: Run ZMQ Server Test
         run: |
           ./build/examples/zmqproxy &
-          ./build/examples/csp_client -z localhost -a 2 -C 1 -T 10 &
-          ./build/examples/csp_server -z localhost -a 1 -t
+          ./build/examples/csp_client -z localhost -a 2 -C 1 -T 10 -v ${{ matrix.csp_version }} &
+          ./build/examples/csp_server -z localhost -a 1 -t -v ${{ matrix.csp_version }}
           pkill zmqproxy
 
       - name: Setup vcan0
@@ -96,10 +120,32 @@ jobs:
 
       - name: Run CAN Server Test
         run: |
-          ./build/examples/csp_server -c vcan0 -a 1 -T 10 &
-          ./build/examples/csp_client -c vcan0 -a 2 -C 1 -t
+          ./build/examples/csp_server -c vcan0 -a 1 -T 10 -v ${{ matrix.csp_version }} &
+          ./build/examples/csp_client -c vcan0 -a 2 -C 1 -t -v ${{ matrix.csp_version }}
 
       - name: Run CAN Client Test
         run: |
-          ./build/examples/csp_client -c vcan0 -a 2 -C 1 -T 10 &
-          ./build/examples/csp_server -c vcan0 -a 1 -t
+          ./build/examples/csp_client -c vcan0 -a 2 -C 1 -T 10 -v ${{ matrix.csp_version }} &
+          ./build/examples/csp_server -c vcan0 -a 1 -t -v ${{ matrix.csp_version }}
+
+      - name: Run UDP Server Test
+        run: |
+          ./build/examples/csp_server -u "127.0.0.1" -a 1 -T 10 -v ${{ matrix.csp_version }} &
+          ./build/examples/csp_client -u "127.0.0.1" -a 2 -C 1 -T 10 -v ${{ matrix.csp_version }}
+          wait "$!"
+
+      - name: Run UDP Client Test
+        run: |
+          ./build/examples/csp_client -u "127.0.0.1" -a 2 -C 1 -T 10 -v ${{ matrix.csp_version }} &
+          ./build/examples/csp_server -u "127.0.0.1" -a 1 -T 10 -v ${{ matrix.csp_version }}
+
+      - name: Run SFP Test
+        run: |
+          ./build/examples/csp_sfp_server_client --mtu 1 --size 1
+          ./build/examples/csp_sfp_server_client --mtu 1 --size 128
+          ./build/examples/csp_sfp_server_client --mtu 128 --size 1
+          ./build/examples/csp_sfp_server_client --mtu 128 --size 10
+          ./build/examples/csp_sfp_server_client --mtu 128 --size 100
+          ./build/examples/csp_sfp_server_client --mtu 128 --size 1000
+          ./build/examples/csp_sfp_server_client --mtu 128 --size 10000
+          ./build/examples/csp_sfp_server_client --mtu 128 --size 100000

.github/workflows/check-merge-commits.yml

@@ -0,0 +1,32 @@
+name: Merge Commits Check
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  check_merge_commits:
+    runs-on: ubuntu-latest
+    steps:
+
+      - name: Checkout PR head
+        uses: actions/checkout@v6
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          fetch-depth: 0
+
+      - name: Print commits for debugging
+        run: git log --graph --oneline -n 50
+
+      - name: Check for merge commits
+        env:
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
+        run: |
+          merges=$(git rev-list --merges --count "${BASE_SHA}..${HEAD_SHA}")
+          if [ "$merges" != "0" ]; then
+            echo "::error ::Merge commits not allowed; please rebase."
+            exit 1
+          fi

.github/workflows/codespell.yml

@@ -0,0 +1,22 @@
+name: Codespell Check
+
+on:  
+  pull_request:
+  push:
+permissions:
+  contents: read
+
+jobs:  
+  spellcheck:  
+    runs-on: ubuntu-latest  
+
+    steps:  
+      - name: Checkout repository  
+        uses: actions/checkout@v6  
+
+      - name: Install codespell  
+        run: pip install codespell  
+
+      - name: Run codespell
+        run: |
+          codespell --skip="waf" --ignore-words=.codespell-ignore --quiet-level=2

.github/workflows/develop-build-sphinx-docs.yml

@@ -5,13 +5,19 @@ on:
   push:
     branches:
       - develop
+permissions:
+  contents: read
 jobs:
   build-docs:
     if: github.repository_owner == 'libcsp'
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup packages on Linux
         if: ${{ runner.os == 'Linux' }}