# Third-party trees this platform is built against, pinned to an exact commit.
#
# WHY A PIN AND NOT A COPY. Between them these are ~21 GB; the vendor SDK alone
# is 21 GB of build tree with absolute paths baked into its host tools. Copying
# that into git would make every clone of this repo unusable and would still not
# make the result reproducible. What makes a build reproducible is knowing
# EXACTLY which tree was used, and that is a commit id -- the same reasoning
# build/fetch-kernel-tarball.sh already applies to the kernel, where a sha256
# pin stands in for vendoring 150 MB of tarball.
#
# So this file is the single place that answers "which LVGL, which vendor SDK",
# and fetch-vendor.sh is the only thing that acts on it. A checkout that has
# drifted off its pin is reported, never silently used.
#
# NOT EVERYTHING HERE IS A GIT TREE. Two build inputs are pinned tarballs
# instead, each with its own fetch-and-verify script beside this file, because a
# release tarball has no commit to name:
#
#   linux-6.18.46        build/fetch-kernel-tarball.sh
#   buildroot-2025.02.8  build/fetch-buildroot-tarball.sh
#
# The buildroot one matters more than it looks. The firmware builds against
# sysdrv/source/buildroot/buildroot-2025.02.8 inside the vendor SDK, and the
# vendor SDK ships 2023.02.6 -- so that tree is not in the vendor checkout, was
# not in this manifest, and had no recorded origin at all. A clean rebuild
# silently used the vendor's older buildroot and produced a different userspace
# (flare-edge#135). Our delta on top of it is captured in the flare-edge repo at
# sdk-patches/buildroot/.
#
# Format: name<TAB>url<TAB>commit<TAB>description
# Blank lines and lines starting with '#' are ignored.

lvgl	https://github.com/lvgl/lvgl.git	066d8db0b54819223357731f68961a90b3d785b4	LVGL v9.5.0-383-g066d8db0b: the UI toolkit warden-ui links against
luckfox-pico	https://github.com/LuckfoxTECH/luckfox-pico.git	824b817f889c2cbff1d48fcdb18ab494a68f69d1	Vendor RV1106 SDK: buildroot userspace, U-Boot and the host packaging tools. Being replaced by this repo; still the source of the rootfs and the FIT/resource host tools.