[bitbake][wrynose][2.18][PATCH v2 0/8] Patch review

Please review this set of changes for 2.18/wrynose and have comments back by
end of day Friday, June 12.

Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/3975
* the meta-qcom warning is not related to this series and has been
  reported upstream:
  https://github.com/qualcomm-linux/meta-qcom/issues/2436

v1->v2:
* Added security fix "fetch2/wget: limit auth on checkstatus redirects"
  and associated test.

The following changes since commit 294074e65f37822a0f31bb11eb968d311b54a66a:

  toaster: use https for clones, remove cgit in links in defaults (2026-06-06 01:17:50 +0200)

are available in the Git repository at:

  https://git.openembedded.org/bitbake-contrib stable/2.18-nut
  https://git.openembedded.org/bitbake-contrib/log/?h=stable/2.18-nut

for you to fetch changes up to acfe02fa38b5da9e6a36c6cedcf91d4fcbefbfbd:

  tests/fetch: cover checkstatus redirect auth handling (2026-06-11 11:50:29 +0200)

----------------------------------------------------------------

Anders Heimer (2):
  fetch2/wget: limit auth on checkstatus redirects
  tests/fetch: cover checkstatus redirect auth handling

Anthony Squires (1):
  fetch2: reraise IOError during download

João Marcos Costa (1):
  layerindexlib: restapi.py: fix unbound variable

Marcio Henriques (1):
  bitbake: fix issue with varflag exclusion

Thomas Perrot (2):
  fetch2/crate: skip yanked versions when reading cargo index
  fetch2/crate: guard against empty version list

hongxu (1):
  fetch2: allow empty value for params while formatting URI string.

 lib/bb/data.py               |  2 +-
 lib/bb/fetch2/__init__.py    |  8 +++--
 lib/bb/fetch2/crate.py       |  7 ++--
 lib/bb/fetch2/wget.py        | 27 ++++++++++++--
 lib/bb/tests/fetch.py        | 68 ++++++++++++++++++++++++++++++++++--
 lib/layerindexlib/restapi.py |  2 +-
 6 files changed, 102 insertions(+), 12 deletions(-)