# Third-party trees this platform is built against, pinned to an exact commit.
#
# WHY A PIN AND NOT A COPY. Between them these are ~21 GB; the vendor SDK alone
# is 21 GB of build tree with absolute paths baked into its host tools. Copying
# that into git would make every clone of this repo unusable and would still not
# make the result reproducible. What makes a build reproducible is knowing
# EXACTLY which tree was used, and that is a commit id -- the same reasoning
# build/fetch-kernel-tarball.sh already applies to the kernel, where a sha256
# pin stands in for vendoring 150 MB of tarball.
#
# So this file is the single place that answers "which LVGL, which vendor SDK",
# and fetch-vendor.sh is the only thing that acts on it. A checkout that has
# drifted off its pin is reported, never silently used.
#
# Format: name<TAB>url<TAB>commit<TAB>description
# Blank lines and lines starting with '#' are ignored.

lvgl	https://github.com/lvgl/lvgl.git	066d8db0b54819223357731f68961a90b3d785b4	LVGL v9.5.0-383-g066d8db0b: the UI toolkit warden-ui links against
luckfox-pico	https://github.com/LuckfoxTECH/luckfox-pico.git	824b817f889c2cbff1d48fcdb18ab494a68f69d1	Vendor RV1106 SDK: buildroot userspace, U-Boot and the host packaging tools. Being replaced by this repo; still the source of the rootfs and the FIT/resource host tools.