[GIT PULL] Please pull u-boot-dfu-20260728 into main

Hi Tom,

Here is a PR for main with the following:

Android:
* avb: Update libavb to AOSP 1.3.0
* avb: Fix memory leak on mmc_part
* bootmeth_android: Fix memory leaks for AvbOps and verify-data
* bootmeth_android: Fix out-of-bounds access in bootconfig parsing

Usb Gadget:
* cmd: ums: Set serial# on iSerial device descriptor
* dwc2: Set maxpacket_limit and endpoint capabilities to prepare for
  udc core migration
* ci_udc: Fix ep type in ep_enable()
* ci_udc: Set usb request status to handle complete callback
* ci_udc: Ensure dtds are inactive before completing request

CI:
* https://git.u-boot-project.org/u-boot/custodians/u-boot-dfu/-/pipelines/769

Thanks,
Mattijs

The following changes since commit 1b8283bd3220e898d338fb98929f0b06ed63da84:

  cmd: read: fix unsigned overflow bypassing range check (2026-07-21 13:52:50 -0600)

are available in the Git repository at:

  https://git.u-boot-project.org/u-boot/custodians/u-boot-dfu.git tags/u-boot-dfu-20260728

for you to fetch changes up to e6f091a208276db72596c8f7376648856a276d97:

  doc: android: refresh AVB provenance and pin libavb reference (2026-07-27 14:26:32 +0200)

----------------------------------------------------------------
u-boot-dfu-20260728

Android:
* avb: Update libavb to AOSP 1.3.0
* avb: Fix memory leak on mmc_part
* bootmeth_android: Fix memory leaks for AvbOps and verify-data
* bootmeth_android: Fix out-of-bounds access in bootconfig parsing

Usb Gadget:
* cmd: ums: Set serial# on iSerial device descriptor
* dwc2: Set maxpacket_limit and endpoint capabilities to prepare for
  udc core migration
* ci_udc: Fix ep type in ep_enable()
* ci_udc: Set usb request status to handle complete callback
* ci_udc: Ensure dtds are inactive before completing request

----------------------------------------------------------------
Alexey Charkov (1):
      boot: android: fix out-of-bounds access in bootconfig parsing

Igor Opaniuk (4):
      boot: android: fix AvbOps and verify-data leaks in AVB path
      avb: free mmc_part allocated by get_partition()
      libavb: update to AOSP 1.3.0
      doc: android: refresh AVB provenance and pin libavb reference

Jason He (1):
      usb: ci_udc: verify all dtds are inactive before completing request

Marek Vasut (1):
      cmd: ums: Set Device Descriptor iSerial based on serial# env variable

Mattijs Korpershoek (2):
      usb: gadget: dwc2: Use usb_ep_set_maxpacket_limit() for fifo sizes
      usb: gadget: dwc2: Set endpoint capabilities via .caps field

Xu Yang (1):
      usb: ci_udc: set correct ep type in ep_enable()

Ye Li (1):
      usb: ci_udc: Update usb request status

 boot/bootmeth_android.c                     |  37 ++--
 boot/image-android.c                        |  30 ++-
 common/avb_verify.c                         |  29 ++-
 doc/android/avb2.rst                        |   7 +-
 drivers/usb/gadget/ci_udc.c                 |  30 ++-
 drivers/usb/gadget/ci_udc.h                 |   4 +-
 drivers/usb/gadget/dwc2_udc_otg.c           |  26 ++-
 drivers/usb/gadget/f_mass_storage.c         |   8 +
 lib/libavb/avb_chain_partition_descriptor.c |   1 +
 lib/libavb/avb_chain_partition_descriptor.h |  16 +-
 lib/libavb/avb_cmdline.c                    |  42 +---
 lib/libavb/avb_descriptor.c                 |  62 ++++--
 lib/libavb/avb_hashtree_descriptor.h        |   3 +
 lib/libavb/avb_property_descriptor.h        |   8 +-
 lib/libavb/avb_rsa.c                        |   6 +-
 lib/libavb/avb_slot_verify.c                | 313 +++++++++++++++-------------
 lib/libavb/avb_slot_verify.h                |   6 +-
 lib/libavb/avb_util.c                       |  46 +++-
 lib/libavb/avb_util.h                       | 140 +++++++------
 lib/libavb/avb_vbmeta_image.c               |   1 +
 lib/libavb/avb_vbmeta_image.h               |   8 +-
 lib/libavb/avb_version.h                    |   2 +-
 22 files changed, 501 insertions(+), 324 deletions(-)