NCS 3.2.0 manifest combo PR #25877

rlubos · 2025-11-28T10:44:53Z

A combined branch with manifest updates and associated changes from the following PRs:

NordicBuilder · 2025-11-28T10:45:47Z

The following west manifest projects have changed revision in this Pull Request:

Name	Old Revision	New Revision	Diff
nrfxlib	nrfconnect/sdk-nrfxlib@`9b969cc`	nrfconnect/sdk-nrfxlib@`3fcb550` (`main`)	nrfconnect/[email protected]
trusted-firmware-m	nrfconnect/sdk-trusted-firmware-m@`cc5a59a`	nrfconnect/sdk-trusted-firmware-m@`df48857` (`main`)	nrfconnect/[email protected]
zephyr	nrfconnect/sdk-zephyr@`428ce9f`	nrfconnect/sdk-zephyr@`56fbb4f` (`main`)	nrfconnect/[email protected]

✅ All manifest checks OK

Note: This message is automatically posted and updated by the Manifest GitHub Action.

NordicBuilder · 2025-11-28T10:49:41Z

CI Information

^{To view the history of this post, click the 'edited' button above}
Build number: 4

Inputs:

Sources:

trusted-firmware-m: PR head: df48857af53909c91e02d75d84e46ce3a37f10b4
sdk-nrf: PR head: 6652a645c65892d1607b4973628f82e368db4e17
nrfxlib: PR head: 3fcb5500a4ba94b5bb89f1552726b93cc7f96b7a
hostap: PR head: 528eb2d95e35c7c9b187a15d2fb7f6e5bb983181
zephyr: PR head: 56fbb4f3c7bba12fb34a5cd111b4ea9f7ad52162

more details

trusted-firmware-m:

PR head: df48857af53909c91e02d75d84e46ce3a37f10b4
merge base: cc5a59a410adc66d3b1b34a24efe00a7ac2fcf5b
Diff

sdk-nrf:

PR head: 6652a645c65892d1607b4973628f82e368db4e17
merge base: 2f953501a364ec71d3b1ef6e6fae418d8f3269f7
target head (main): 2f953501a364ec71d3b1ef6e6fae418d8f3269f7
Diff

nrfxlib:

PR head: 3fcb5500a4ba94b5bb89f1552726b93cc7f96b7a
merge base: 9b969cc34b07d44c8b3ad5bb6fa5cab6646e7ed1
Diff

hostap:

PR head: 528eb2d95e35c7c9b187a15d2fb7f6e5bb983181
merge base: 6086dea5ee7406e1eede7f2ca6dff1b00b0f04e2
Diff

zephyr:

PR head: 56fbb4f3c7bba12fb34a5cd111b4ea9f7ad52162
merge base: 428ce9f27bc368f8023de98cdd494b060374962b
Diff

Github labels

Enabled	Name	Description
	ci-disabled	Disable the ci execution
	ci-all-test	Run all of ci, no test spec filtering will be done
	ci-force-downstream	Force execution of downstream even if twister fails
	ci-run-twister	Force run twister
	ci-run-zephyr-twister	Force run zephyr twister

List of changed files detected by CI (98)

boards
│  ├── shields
│  │  ├── nrf7002eb2
│  │  │  ├── Kconfig.shield
│  │  │  ├── boards
│  │  │  │  ├── nrf54l15dk_nrf54l15_cpuapp.overlay
│  │  │  │  │ nrf54lm20dk_nrf54lm20a_cpuapp.overlay
│  │  │  ├── nrf7002eb2.overlay
│  │  │  ├── nrf7002eb2_coex.overlay
│  │  │  ├── nrf7002eb2_common.dtsi
│  │  │  ├── nrf7002eb2_common_5g.dtsi
│  │  │  ├── nrf7002eb2_gpio_pins_1.dtsi
│  │  │  ├── nrf7002eb2_gpio_pins_2.dtsi
│  │  │  ├── nrf7002eb2_nrf7000.overlay
│  │  │  │ nrf7002eb2_nrf7001.overlay
doc
│  ├── nrf
│  │  ├── app_dev
│  │  │  ├── device_guides
│  │  │  │  ├── nrf70
│  │  │  │  │  │ wifi_advanced_security_modes.rst
│  │  ├── protocols
│  │  │  ├── wifi
│  │  │  │  ├── index.rst
│  │  │  │  │ wifi_direct.rst
│  │  ├── releases_and_maturity
│  │  │  ├── releases
│  │  │  │  │ release-notes-changelog.rst
include
│  │ flash_map_pm.h
lib
│  ├── nrf_modem_lib
│  │  │ nrf9x_sockets.c
modules
│  ├── lib
│  │  ├── hostap
│  │  │  ├── src
│  │  │  │  ├── crypto
│  │  │  │  │  │ crypto_mbedtls_alt.c
│  │  │  │  ├── drivers
│  │  │  │  │  ├── driver_zephyr.c
│  │  │  │  │  │ driver_zephyr.h
│  ├── tee
│  │  ├── tf-m
│  │  │  ├── trusted-firmware-m
│  │  │  │  ├── interface
│  │  │  │  │  ├── include
│  │  │  │  │  │  │ tfm_platform_api.h
│  │  │  │  │  ├── src
│  │  │  │  │  │  │ tfm_platform_api.c
│  │  │  │  ├── platform
│  │  │  │  │  ├── ext
│  │  │  │  │  │  ├── target
│  │  │  │  │  │  │  ├── nordic_nrf
│  │  │  │  │  │  │  │  ├── common
│  │  │  │  │  │  │  │  │  ├── core
│  │  │  │  │  │  │  │  │  │  │ CMakeLists.txt
│  │  │  │  │  ├── include
│  │  │  │  │  │  │ tfm_platform_system.h
│  │  │  │  ├── secure_fw
│  │  │  │  │  ├── partitions
│  │  │  │  │  │  ├── platform
│  │  │  │  │  │  │  │ platform_sp.c
│  ├── trusted-firmware-m
│  │  ├── CMakeLists.txt
│  │  ├── Kconfig
│  │  ├── tfm_boards
│  │  │  ├── src
│  │  │  │  │ tfm_platform_system.c
nrfxlib
│  ├── nrf_wifi
│  │  ├── bin
│  │  │  ├── ncs
│  │  │  │  ├── default
│  │  │  │  │  │ nrf70.bin
│  │  │  │  ├── offloaded_raw_tx
│  │  │  │  │  │ nrf70.bin
│  │  │  │  ├── radio_test
│  │  │  │  │  │ nrf70.bin
│  │  │  │  ├── scan_only
│  │  │  │  │  │ nrf70.bin
│  │  │  │  ├── system_with_raw
│  │  │  │  │  │ nrf70.bin
samples
│  ├── wifi
│  │  ├── wfa_qt_app
│  │  │  ├── overlay-enterprise.conf
│  │  │  │ sample.yaml
│  ├── zephyr
│  │  ├── boards
│  │  │  ├── nordic
│  │  │  │  ├── system_off
│  │  │  │  │  ├── boards
│  │  │  │  │  │  ├── nrf54l15dk_nrf54l10_cpuapp_ns.conf
│  │  │  │  │  │  ├── nrf54l15dk_nrf54l15_cpuapp_ns.conf
│  │  │  │  │  │  ├── nrf54lm20dk_nrf54lm20a_cpuapp_ns.conf
│  │  │  │  │  │  │ nrf54lv10dk_nrf54lv10a_cpuapp_ns.conf
snippets
│  ├── wifi-p2p
│  │  ├── snippet.yml
│  │  │ wifi-p2p.conf
subsys
│  ├── mgmt
│  │  ├── mcumgr
│  │  │  ├── grp
│  │  │  │  ├── img_mgmt
│  │  │  │  │  ├── src
│  │  │  │  │  │  │ img_mgmt.c
│  ├── net
│  │  ├── lib
│  │  │  ├── hostap_crypto
│  │  │  │  ├── CMakeLists.txt
│  │  │  │  ├── Kconfig
│  │  │  │  │ wpa3_psa.c
tests
│  ├── lib
│  │  ├── nrf_modem_lib
│  │  │  ├── nrf9x_sockets
│  │  │  │  ├── src
│  │  │  │  │  │ nrf9x_sockets_test.c
west.yml
zephyr
│  ├── boards
│  │  ├── shields
│  │  │  ├── nrf7002eb2
│  │  │  │  ├── Kconfig.shield
│  │  │  │  ├── boards
│  │  │  │  │  ├── nrf54l15dk_nrf54l15_cpuapp.overlay
│  │  │  │  │  │ nrf54lm20dk_nrf54lm20a_cpuapp.overlay
│  │  │  │  ├── doc
│  │  │  │  │  ├── index.rst
│  │  │  │  │  │ nrf7002eb2.jpg
│  │  │  │  ├── nrf7002eb2.overlay
│  │  │  │  ├── nrf7002eb2_coex.overlay
│  │  │  │  ├── nrf7002eb2_common.dtsi
│  │  │  │  ├── nrf7002eb2_common_5g.dtsi
│  │  │  │  ├── nrf7002eb2_gpio_pins_1.dtsi
│  │  │  │  ├── nrf7002eb2_gpio_pins_2.dtsi
│  │  │  │  ├── nrf7002eb2_nrf7000.overlay
│  │  │  │  ├── nrf7002eb2_nrf7001.overlay
│  │  │  │  │ shield.yml
│  ├── doc
│  │  ├── connectivity
│  │  │  ├── networking
│  │  │  │  ├── api
│  │  │  │  │  │ wifi.rst
│  │  ├── releases
│  │  │  │ release-notes-4.4.rst
│  ├── drivers
│  │  ├── usb
│  │  │  ├── udc
│  │  │  │  │ udc_dwc2.c
│  │  ├── wifi
│  │  │  ├── nrf_wifi
│  │  │  │  ├── Kconfig.nrfwifi
│  │  │  │  ├── inc
│  │  │  │  │  ├── fmac_main.h
│  │  │  │  │  │ wpa_supp_if.h
│  │  │  │  ├── src
│  │  │  │  │  ├── fmac_main.c
│  │  │  │  │  ├── net_if.c
│  │  │  │  │  ├── wifi_mgmt.c
│  │  │  │  │  │ wpa_supp_if.c
│  ├── include
│  │  ├── zephyr
│  │  │  ├── net
│  │  │  │  ├── socket_ncs.h
│  │  │  │  │ wifi_mgmt.h
│  │  │  ├── storage
│  │  │  │  │ flash_map.h
│  │  │  ├── usb
│  │  │  │  │ usbd.h
│  ├── modules
│  │  ├── hostap
│  │  │  ├── CMakeLists.txt
│  │  │  ├── Kconfig
│  │  │  ├── src
│  │  │  │  ├── supp_api.c
│  │  │  │  ├── supp_api.h
│  │  │  │  ├── supp_events.c
│  │  │  │  ├── supp_events.h
│  │  │  │  │ supp_main.c
│  ├── soc
│  │  ├── nordic
│  │  │  ├── common
│  │  │  │  │ poweroff.c
│  │  │  ├── ironside
│  │  │  │  ├── CMakeLists.txt
│  │  │  │  ├── Kconfig
│  │  │  │  ├── counter.c
│  │  │  │  ├── include
│  │  │  │  │  ├── nrf_ironside
│  │  │  │  │  │  │ counter.h
│  │  │  ├── nrf54h
│  │  │  │  │ soc.c
│  ├── subsys
│  │  ├── dfu
│  │  │  ├── img_util
│  │  │  │  │ flash_img.c
│  │  ├── mgmt
│  │  │  ├── mcumgr
│  │  │  │  ├── grp
│  │  │  │  │  ├── img_mgmt
│  │  │  │  │  │  ├── src
│  │  │  │  │  │  │  │ img_mgmt.c
│  │  ├── net
│  │  │  ├── l2
│  │  │  │  ├── wifi
│  │  │  │  │  ├── Kconfig
│  │  │  │  │  ├── wifi_mgmt.c
│  │  │  │  │  │ wifi_shell.c
│  │  ├── usb
│  │  │  ├── device_next
│  │  │  │  ├── class
│  │  │  │  │  ├── Kconfig.msc
│  │  │  │  │  │ usbd_msc.c
│  │  │  │  │ usbd_core.c
│  ├── tests
│  │  ├── subsys
│  │  │  ├── dfu
│  │  │  │  ├── img_util
│  │  │  │  │  ├── src
│  │  │  │  │  │  │ main.c
│  │ west.yml

Outputs:

Toolchain

Version: 43683a87ea
Build docker image: docker-dtr.nordicsemi.no/sw-production/ncs-build:43683a87ea_5ea73affbf

Test Spec & Results: ✅ Success; ❌ Failure; 🟠 Queued; 🟡 Progress; ◻️ Skipped; ⚠️ Quarantine

◻️ Toolchain - Skipped: existing toolchain is used
✅ Build twister
- sdk-nrf test count: 3022
- sdk-zephyr test count: 1047
❌ Integration tests
- ✅ test-sdk-audio
- ❌ test-fw-nrfconnect-chip
- ✅ test-fw-nrfconnect-nfc
- ✅ test-fw-nrfconnect-nrf-iot_zephyr_lwm2m
- ✅ test-fw-nrfconnect-nrf-iot_samples
- ❌ test-fw-nrfconnect-nrf-iot_lwm2m
- ❌ test-fw-nrfconnect-nrf-iot_thingy91
- ✅ test-fw-nrfconnect-nrf_crypto
- ✅ test-fw-nrfconnect-rs
- ✅ test-fw-nrfconnect-fem
- ✅ test-fw-nrfconnect-tfm
- ✅ test-fw-nrfconnect-thread-main
- ✅ test-sdk-find-my
- ❌ test-fw-nrfconnect-nrf_lrcs_positioning
- ✅ test-sdk-wifi
- ✅ test-low-level
- ✅ test-sdk-mcuboot
- ✅ test-sdk-dfu
- ⚠️ test_ble_nrf_config
- ⚠️ test-fw-nrfconnect-nrf-iot_cloud
- ⚠️ test-fw-nrfconnect-nrf_lrcs_mosh
- ⚠️ test-fw-nrfconnect-nrf_lrcs_positioning

Disabled integration tests

- desktop52_verification
- test-fw-nrfconnect-apps
- test-fw-nrfconnect-ble_mesh
- test-fw-nrfconnect-ble_samples
- test-fw-nrfconnect-nrf-iot_libmodem-nrf
- test-fw-nrfconnect-ps-main
- test-fw-nrfconnect-rpc
- test-secdom-samples-public

Note: This message is automatically posted and updated by the CI

github-actions · 2025-11-28T11:33:23Z

You can find the documentation preview for this PR here.

Preview links for modified nRF Connect SDK documents:

https://ncsdoc.z6.web.core.windows.net/PR-25877/nrf/app_dev/device_guides/nrf70/wifi_advanced_security_modes.html
https://ncsdoc.z6.web.core.windows.net/PR-25877/nrf/protocols/wifi/index.html
https://ncsdoc.z6.web.core.windows.net/PR-25877/nrf/protocols/wifi/wifi_direct.html
https://ncsdoc.z6.web.core.windows.net/PR-25877/nrf/releases_and_maturity/releases/release-notes-changelog.html

Pull the last minute changes in sdk-zephyr for the 3.2.0 release. Signed-off-by: Robert Lubos <[email protected]>

With updates which allows using system off from TF-M. Signed-off-by: Georgios Vasilakis <[email protected]>

Pull in changes done to support WPS connection and allowing probe request to be sent to supplicant. Signed-off-by: Ravi Dondaputi <[email protected]>

This socket option is used to enable and disable the DTLS fragmentation extension. Signed-off-by: Robert Lubos <[email protected]> Signed-off-by: Kacper Radoszewski <[email protected]>

Use the upstream shield directly. Signed-off-by: Chaitanya Tata <[email protected]>

Add the tfm_platform_hal_system_off function which puts the device in system off. This only needed for nRF54L devices at the moment and only in TF-M SFN mode. Signed-off-by: Georgios Vasilakis <[email protected]>

Add an overlay for the nRF54L devices which support TF-M with system off. This is needed because the feature is not enabled by default and it also have requirements which deviate from the default TF-M configuration. Signed-off-by: Georgios Vasilakis <[email protected]>

Use absolute addresses while determining a running application partition. Ref: NCSIDB-1773 Signed-off-by: Tomasz Chyrowicz <[email protected]>

Create snippet for P2P build. Signed-off-by: Ravi Dondaputi <[email protected]>

This implements the PSA variant of WPA3, disables the internal WPA3 in the supplicant and uses the nRF Oberon's WPA3 HKDF APIs. Signed-off-by: Chaitanya Tata <[email protected]>

Add Wi-Fi direct (p2p mode) document. Signed-off-by: Kapil Bhatt <[email protected]>

Remove the type, else local twister is ignoring the overlays. Signed-off-by: Chaitanya Tata <[email protected]>

Enable LTO to fix the overflow and also to make room for future increase. Signed-off-by: Chaitanya Tata <[email protected]>

Add an entry for WPA3-SAE PSA experimental support. Signed-off-by: Chaitanya Tata <[email protected]>

NordicBuilder · 2025-11-28T17:24:25Z

Memory footprint analysis revealed the following potential issues

applications.nrf_desktop.zdebug[nrf52840gmouse/nrf52840]: ROM size increased by 968[B] in comparison to the main[29bfe34] branch. - link (cc: @nrfconnect/ncs-si-bluebagel)

Note: This message is automatically posted and updated by the CI (latest/sdk-nrf/PR-25877/4)

rlubos requested review from a team, D-Triveni, jukkar and krish2718 as code owners November 28, 2025 10:44

NordicBuilder added doc-required PR must not be merged without tech writer approval. manifest labels Nov 28, 2025

NordicBuilder requested review from a team November 28, 2025 10:45

NordicBuilder added manifest-nrfxlib manifest-zephyr manifest-trusted-firmware-m DNM labels Nov 28, 2025

rlubos force-pushed the combo-3.2-branch branch from cf089e0 to bed3b00 Compare November 28, 2025 10:49

tomchy approved these changes Nov 28, 2025

View reviewed changes

carlescufi approved these changes Nov 28, 2025

View reviewed changes

rlubos force-pushed the combo-3.2-branch branch from bed3b00 to f672bd4 Compare November 28, 2025 10:54

nordic-segl approved these changes Nov 28, 2025

View reviewed changes

tomi-font approved these changes Nov 28, 2025

View reviewed changes

trantanen approved these changes Nov 28, 2025

View reviewed changes

kacperradoszewski approved these changes Nov 28, 2025

View reviewed changes

krish2718 approved these changes Nov 28, 2025

View reviewed changes

rlubos and others added 14 commits November 28, 2025 17:11

manifest: Update sdk-zephyr revision

942d68a

Pull the last minute changes in sdk-zephyr for the 3.2.0 release. Signed-off-by: Robert Lubos <[email protected]>

manifest: Update TF-M

0f1c8a8

With updates which allows using system off from TF-M. Signed-off-by: Georgios Vasilakis <[email protected]>

manifest: sdk-nrfxlib: Update firmware patch blobs

9ca7b88

Pull in changes done to support WPS connection and allowing probe request to be sent to supplicant. Signed-off-by: Ravi Dondaputi <[email protected]>

lib: nrf_modem_lib: add support for TLS_DTLS_FRAG_EXT

1294c09

This socket option is used to enable and disable the DTLS fragmentation extension. Signed-off-by: Robert Lubos <[email protected]> Signed-off-by: Kacper Radoszewski <[email protected]>

boards: shields: nrf7002eb2: Remove from downstream

0915a00

Use the upstream shield directly. Signed-off-by: Chaitanya Tata <[email protected]>

modules: TF-M: Add TF-M HAL function to enable system off

07010db

Add the tfm_platform_hal_system_off function which puts the device in system off. This only needed for nRF54L devices at the moment and only in TF-M SFN mode. Signed-off-by: Georgios Vasilakis <[email protected]>

img_mgmt: Use absolute address while checking app

ad78111

Use absolute addresses while determining a running application partition. Ref: NCSIDB-1773 Signed-off-by: Tomasz Chyrowicz <[email protected]>

snippets: Add snippet for P2P build options

600888b

Create snippet for P2P build. Signed-off-by: Ravi Dondaputi <[email protected]>

net: lib: hostap_crypto: Add support for WPA3-PSA

bf70ac3

This implements the PSA variant of WPA3, disables the internal WPA3 in the supplicant and uses the nRF Oberon's WPA3 HKDF APIs. Signed-off-by: Chaitanya Tata <[email protected]>

doc: wifi: Add Wi-Fi direct document

2a41657

Add Wi-Fi direct (p2p mode) document. Signed-off-by: Kapil Bhatt <[email protected]>

samples: wifi: wfa_qt_app: Fix twister arg

a108422

Remove the type, else local twister is ignoring the overlays. Signed-off-by: Chaitanya Tata <[email protected]>

samples: wifi: wfa_qt_app: Fix Flash overflow for enterprise

b5added

Enable LTO to fix the overflow and also to make room for future increase. Signed-off-by: Chaitanya Tata <[email protected]>

doc: changelog: Add an entry WPA3-SAE PSA

6652a64

Add an entry for WPA3-SAE PSA experimental support. Signed-off-by: Chaitanya Tata <[email protected]>

rlubos force-pushed the combo-3.2-branch branch from f672bd4 to 6652a64 Compare November 28, 2025 16:12

NordicBuilder removed the DNM label Nov 28, 2025

rlubos merged commit 8d3eaf1 into nrfconnect:main Nov 28, 2025
17 of 20 checks passed

This was referenced Nov 28, 2025

wifi: Move EB2 shield to upstream #25840

Closed

modules: TF-M: Add TF-M HAL function to enable system off #25801

Closed

img_mgmt: Verify memory controller node while determining a running application partition. #25704

Closed

P2P support #25346

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

NCS 3.2.0 manifest combo PR #25877

NCS 3.2.0 manifest combo PR #25877

Uh oh!

rlubos commented Nov 28, 2025

Uh oh!

NordicBuilder commented Nov 28, 2025 •

edited

Loading

Uh oh!

NordicBuilder commented Nov 28, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Nov 28, 2025

Uh oh!

Uh oh!

NordicBuilder commented Nov 28, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

12 participants

NCS 3.2.0 manifest combo PR #25877

NCS 3.2.0 manifest combo PR #25877

Uh oh!

Conversation

rlubos commented Nov 28, 2025

Uh oh!

NordicBuilder commented Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

NordicBuilder commented Nov 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

CI Information

Inputs:

Sources:

Github labels

Outputs:

Toolchain

Test Spec & Results: ✅ Success; ❌ Failure; 🟠 Queued; 🟡 Progress; ◻️ Skipped; ⚠️ Quarantine

Uh oh!

github-actions bot commented Nov 28, 2025

Uh oh!

Uh oh!

NordicBuilder commented Nov 28, 2025

Memory footprint analysis revealed the following potential issues

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

12 participants

NordicBuilder commented Nov 28, 2025 •

edited

Loading

NordicBuilder commented Nov 28, 2025 •

edited

Loading