Sync csa branch with main

.devcontainer/build.sh

@@ -76,7 +76,7 @@ if [ "$USER_UID" = "0" ]; then
     USER_UID=1000
 fi
 
-docker build \
+docker buildx build \
     -t "$IMAGE_TAG" \
     --pull \
     --build-arg USER_UID="$USER_UID" \

.github/.wordlist.txt

@@ -403,6 +403,8 @@ deployable
 depottools
 deps
 der
+dereference
+dereferencing
 desc
 descheduled
 detokenization
@@ -550,6 +552,7 @@ EvalCode
 EvalCodeWithName
 EvalFrameDefault
 EVB
+EVKBMIMXRT
 EventLogging
 evk
 EVSE
@@ -608,6 +611,7 @@ fsl
 fstab
 fsync
 ftd
+ftr
 fullclean
 fuzzer
 fuzzers
@@ -1118,6 +1122,7 @@ params
 PartNumber
 PASE
 Passcode
+passcodes
 passRetained
 passwd
 Pausable
@@ -1369,6 +1374,7 @@ Silabs's
 SiliconLabs
 SimpleFileExFlags
 SimpleLink
+simw
 SiWx
 sizedb
 sl

.github/ISSUE_TEMPLATE/001-bug-report.yaml

@@ -51,6 +51,7 @@ body:
               - freeRTOS
               - IMX8
               - k32w
+              - linux
               - nrf
               - python
               - raspi

.github/ISSUE_TEMPLATE/002-1.0-issue.yaml

@@ -51,6 +51,7 @@ body:
               - freeRTOS
               - IMX8
               - k32w
+              - linux
               - nrf connect
               - nrf
               - python

.github/ISSUE_TEMPLATE/003-1.1-issue.yaml

@@ -51,6 +51,7 @@ body:
         - freeRTOS
         - IMX8
         - k32w
+        - linux
         - nrf connect
         - nrf
         - python

.github/ISSUE_TEMPLATE/004-1.2-issue.yaml

@@ -51,6 +51,7 @@ body:
         - freeRTOS
         - IMX8
         - k32w
+        - linux
         - nrf connect
         - nrf
         - python

.github/ISSUE_TEMPLATE/005-1.3-issue.yaml

@@ -51,6 +51,7 @@ body:
         - freeRTOS
         - IMX8
         - k32w
+        - linux
         - nrf connect
         - nrf
         - python

.github/ISSUE_TEMPLATE/049-trivial-fix.yaml

@@ -42,6 +42,7 @@ body:
               - freeRTOS
               - IMX8
               - k32w
+              - linux
               - nrf connect
               - nrf
               - python

.github/ISSUE_TEMPLATE/050-tooling-fix.yaml

@@ -37,6 +37,7 @@ body:
               - freeRTOS
               - IMX8
               - k32w
+              - linux
               - nrf connect
               - nrf
               - python

.github/ISSUE_TEMPLATE/060-platform-fix.yaml

@@ -37,6 +37,7 @@ body:
               - freeRTOS
               - IMX8
               - k32w
+              - linux
               - nrf connect
               - nrf
               - python

.github/ISSUE_TEMPLATE/080-feature-request.yaml

@@ -32,6 +32,7 @@ body:
               - freeRTOS
               - IMX8
               - k32w
+              - linux
               - nrf connect
               - nrf
               - python

.github/ISSUE_TEMPLATE/090-sve-issue.yaml

@@ -51,6 +51,7 @@ body:
               - freeRTOS
               - IMX8
               - k32w
+              - linux
               - nrf connect
               - nrf
               - python

.github/ISSUE_TEMPLATE/091-cert-blocker.yaml

@@ -85,6 +85,7 @@ body:
         - freeRTOS
         - IMX8
         - k32w
+        - linux
         - nrf
         - python
         - raspi

.github/ISSUE_TEMPLATE/097-ci-test-failure.yaml

@@ -34,6 +34,7 @@ body:
         - freeRTOS
         - IMX8
         - k32w
+        - linux
         - nrf connect
         - nrf
         - python

.github/ISSUE_TEMPLATE/098-build-issue.yaml

@@ -34,6 +34,7 @@ body:
         - freeRTOS
         - IMX8
         - k32w
+        - linux
         - nrf connect
         - nrf
         - python

.github/ISSUE_TEMPLATE/099-github-workflow-issue.yaml

@@ -34,6 +34,7 @@ body:
               - freeRTOS
               - IMX8
               - k32w
+              - linux
               - nrf connect
               - nrf
               - python

.github/ISSUE_TEMPLATE/100-documentation-issue.yaml

@@ -34,6 +34,7 @@ body:
               - freeRTOS
               - IMX8
               - k32w
+              - linux
               - nrf connect
               - nrf
               - python

.github/workflows/build.yaml

@@ -77,41 +77,45 @@ jobs:
                   languages: "cpp"
                   queries: security-extended, security-and-quality
             - name: Setup Build
+              if: github.event.pull_request.number == null
               run: scripts/build/gn_gen.sh --args="chip_config_memory_debug_checks=true chip_config_memory_debug_dmalloc=false"
             - name: Run Build
+              if: github.event.pull_request.number == null
               run: scripts/run_in_build_env.sh "ninja -C ./out"
             - name: Run Tests
+              if: github.event.pull_request.number == null
               run: scripts/tests/gn_tests.sh
             - name: Clean out build output
+              if: github.event.pull_request.number == null
               run: rm -rf ./out
 
             # Do not run below steps with CodeQL since we are getting "Out of runner space issues" with CodeQL and their added coverage is limited
             - name: Set up Build Without Detail Logging
-              if: inputs.run-codeql != true
+              if: inputs.run-codeql != true && github.event.pull_request.number == null
               run: scripts/build/gn_gen.sh --args="chip_detail_logging=false"
             - name: Run Build Without Detail Logging
-              if: inputs.run-codeql != true
+              if: inputs.run-codeql != true && github.event.pull_request.number == null
               run: scripts/run_in_build_env.sh "ninja -C ./out"
             - name: Cleanout build output
-              if: inputs.run-codeql != true
+              if: inputs.run-codeql != true && github.event.pull_request.number == null
               run: rm -rf ./out
             - name: Set up Build Without Progress Logging
-              if: inputs.run-codeql != true
+              if: inputs.run-codeql != true && github.event.pull_request.number == null
               run: scripts/build/gn_gen.sh --args="chip_detail_logging=false chip_progress_logging=false"
             - name: Run Build Without Progress Logging
-              if: inputs.run-codeql != true
+              if: inputs.run-codeql != true && github.event.pull_request.number == null
               run: scripts/run_in_build_env.sh "ninja -C ./out"
             - name: Clean out build output
-              if: inputs.run-codeql != true
+              if: inputs.run-codeql != true && github.event.pull_request.number == null
               run: rm -rf ./out
             - name: Set up Build Without Error Logging
-              if: inputs.run-codeql != true
+              if: inputs.run-codeql != true && github.event.pull_request.number == null
               run: scripts/build/gn_gen.sh --args="chip_detail_logging=false chip_progress_logging=false chip_error_logging=false"
             - name: Run Build Without Error Logging
-              if: inputs.run-codeql != true
+              if: inputs.run-codeql != true && github.event.pull_request.number == null
               run: scripts/run_in_build_env.sh "ninja -C ./out"
             - name: Clean out build output
-              if: inputs.run-codeql != true
+              if: inputs.run-codeql != true && github.event.pull_request.number == null
               run: rm -rf ./out
             - name: Set up Build Without Logging
               if: inputs.run-codeql != true
@@ -428,7 +432,7 @@ jobs:
 
     build_darwin:
         name: Build on Darwin (clang, simulated)
-        runs-on: macos-26
+        runs-on: namespace-profile-macos-26
         if: github.actor != 'restyled-io[bot]'  && inputs.run-codeql != true
 
         steps:
@@ -518,7 +522,7 @@ jobs:
 
         env:
             TSAN_OPTIONS: "halt_on_error=1 suppressions=scripts/tests/chiptest/tsan-linux-suppressions.txt"
-
+            
         if: github.actor != 'restyled-io[bot]' && inputs.run-codeql != true
         # [SL-ONLY] Use public runner on our ci
         runs-on: ubuntu-latest
@@ -546,6 +550,8 @@ jobs:
                 apt-get update
                 apt-get install -y --no-install-recommends gnupg
             - name: Upload coverage reports to Codecov with GitHub Action
-              uses: codecov/codecov-action@v5
+              uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+              with:
+                fail_ci_if_error: true
               env:
                 CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/check-data-model-directory-updates.yaml

@@ -70,6 +70,11 @@ jobs:
         run: |
           scripts/run_in_python_env.sh out/venv 'python3 scripts/dm_xml_ci_change_enforcement.py data_model/1.5'
 
+      - name: Check for changes to the 1.6 data_model directory without a SHA update
+        if: (!contains(github.event.pull_request.labels.*.name, 'data-model-file-structural-change-dm-tt-use-only'))
+        run: |
+          scripts/run_in_python_env.sh out/venv 'python3 scripts/dm_xml_ci_change_enforcement.py data_model/1.6'
+
   check-data_model-build-file:
     name: Check that all data_model files are listed in the data_model_xmls.gni build file
     runs-on: ubuntu-latest

.github/workflows/chef.yaml

@@ -145,7 +145,7 @@ jobs:
         if: github.actor != 'restyled-io[bot]'
 
         container:
-            image: ghcr.io/project-chip/chip-build-telink:181
+            image: ghcr.io/project-chip/chip-build-telink:185
             volumes:
                 - "/:/runner-root-volume"
             options: --user root

.github/workflows/darwin-tests.yaml

@@ -38,7 +38,7 @@ jobs:
     strategy:
       matrix:
         include:
-        - os: macos-26
+        - os: macos-26    # NOTE: must match `runs-on`
           arch: arm64     # observed, not configured
           dry-run: true
           build_variant: no-ble-no-shell-asan-clang
@@ -56,7 +56,11 @@ jobs:
       LSAN_OPTIONS: detect_leaks=1 malloc_context_size=40 suppressions=scripts/tests/chiptest/lsan-mac-suppressions.txt
 
     if: github.actor != 'restyled-io[bot]'
-    runs-on: ${{matrix.os}}
+    # Namespace MacOS 26 profile is configured as "26.3 with Xcode 26.2" currently
+    # This is not yet enabled since namespace still has high concurrency limit: we have
+    # 48 cores and are forced to 6 cores minimum.
+    # runs-on: namespace-profile-macos-26
+    runs-on: macos-26
 
     steps:
       - name: Checkout