1---2name: yocto-recipe-maintenance3description: Yocto recipe maintenance skill for AI coding agents. Use for creating, updating, auditing, or reviewing .bb and .bbappend files; package version bumps; dependency, license, PACKAGECONFIG, configure flag, patch, CVE, runtime dependency, package split, and cross-distro packaging comparisons against OpenEmbedded, Alpine, Buildroot, Debian, or upstream sources.4---56# Yocto Recipe Maintenance78## Workflow9101. Identify the target Yocto release, layer, recipe name, version, provider, and image impact.112. Search local layers and the OpenEmbedded Layer Index before creating new metadata.123. Compare how OE-Core/meta-openembedded, Alpine, Buildroot, Debian, and upstream package the same software when useful.134. Inspect upstream source for build system, license files, tags/releases, dependencies, optional features, and patches.145. Make the smallest metadata change: new recipe, `.bbappend`, version bump, dependency fix, `PACKAGECONFIG`, patch refresh, or package split.156. Validate with BitBake introspection and a targeted build.1617## Maintenance Modes1819- **Create recipe**: choose build class, source, `SRCREV`/checksums, license, dependencies, package config, and install behavior.20- **Update recipe**: bump version/source revision, refresh checksums, inspect release notes, review patches, and test reverse dependencies.21- **Audit recipe**: review missing deps, runtime deps, license, QA risks, package splits, bundled libraries, patch freshness, and security issues.22- **Review append**: ensure the append applies only where intended and does not mask upstream behavior broadly.2324## References2526- [recipe-maintenance-playbook.md](references/recipe-maintenance-playbook.md): create/update/audit workflow and cross-distro checks.2728## Guardrails2930- Do not create a new recipe if a maintained layer already provides the package and a `.bbappend` is enough.31- Do not guess license metadata; inspect upstream files and use exact `LIC_FILES_CHKSUM`.32- Do not disable features just to make a build pass without explaining product impact.33- Do not install missing host tools globally; model them as native dependencies or disable nonessential generated docs/tests.