Changelog for nRF Connect SDK v3.5.0-preview1

This changelog reflects the most relevant changes from the latest official release.

Known issues 

Known issues are only tracked for the latest official release. See known issues for nRF Connect SDK v3.3.0 for the list of issues valid for the latest release.

Changelog 

The following sections provide detailed lists of changes by component.

IDE, OS, and tool support 

No changes since the latest nRF Connect SDK release.

Board support 

No changes since the latest nRF Connect SDK release.

Build and configuration system 

No changes since the latest nRF Connect SDK release.

Bootloaders and DFU 

No changes since the latest nRF Connect SDK release.

Developing with nRF91 Series 

No changes since the latest nRF Connect SDK release.

Developing with nRF70 Series 

No changes since the latest nRF Connect SDK release.

Developing with nRF54L Series 

Added:
- The CONFIG_SB_CRACEN_KMU_INVALIDATE_PROTECTED_RAM_SLOTS sysbuild Kconfig option to populate the Key Management Unit (KMU) slots for invalidation of the CRACEN-protected RAM using nrfutil. This option requires nrfutil device version 2.15.4 or later to work. When enabled, the CONFIG_CRACEN_PROVISION_PROT_RAM_INV_SLOTS_ON_INIT and CONFIG_CRACEN_PROVISION_PROT_RAM_INV_SLOTS_WITH_IMPORT Kconfig options become unavailable, as they implement the same feature through alternative provisioning paths.

Developing with nRF54H Series 

No changes since the latest nRF Connect SDK release.

Developing with nRF53 Series 

No changes since the latest nRF Connect SDK release.

Developing with nRF52 Series 

No changes since the latest nRF Connect SDK release.

Developing with Thingy:91 X 

No changes since the latest nRF Connect SDK release.

Developing with Thingy:91 

No changes since the latest nRF Connect SDK release.

Developing with Thingy:53 

No changes since the latest nRF Connect SDK release.

Developing with PMICs 

No changes since the latest nRF Connect SDK release.

Developing with Front-End Modules 

No changes since the latest nRF Connect SDK release.

Developing with custom boards 

No changes since the latest nRF Connect SDK release.

Security 

Added support for the X25519 key pair storage in the Key Management Unit (KMU).
Updated:
- Oberon PSA Crypto from v1.5.4 to v2.0.0. The new version aligns with TF-PSA-Crypto v1.1.0.
- How the CONFIG_NRF_SECURITY and CONFIG_PSA_CRYPTO interact with each other. CONFIG_NRF_SECURITY is now promptless and auto-enabled indirectly by CONFIG_PSA_CRYPTO.
- Approach to store keys in the KMU so that AEAD algorithms with non-default (shortened) tag lengths are supported.
Fixed issues with incorrect support status on the Supported cryptographic operations in the nRF Connect SDK page:
- The CONFIG_PSA_WANT_ALG_GCM Kconfig option is now correctly listed as unsupported for SoCs with Arm CryptoCell CC310.
- The tables for supported AES key wrapping algorithms for nRF54L Series devices now list the nRF54LS05 device (not supported in the CRACEN driver; experimental in the nrf_oberon driver).
- The post-quantum cryptography algorithms for nrf_oberon under Key types and key management are now correctly listed as experimental instead of supported.
- The SPAKE2+ for Matter is now correctly listed as supported instead of experimental.
- The WPA3-SAE hash-to-element algorithm is now correctly listed as a KDF algorithm, not a PAKE algorithm.
- The SHA-256/192 and SHAKE hashing algorithms are now correctly listed as not supported in the CRACEN driver and Experimental in the nrf_oberon driver. The only exception is the SHAKE256 512 bits algorithm, which is supported in both the CRACEN and nrf_oberon drivers.
Removed the CONFIG_NRF_SECURITY_ADVANCED Kconfig option.

Security libraries

nRF Security library:
- Updated the documentation to one library page with sections for PSA Crypto, TLS and X.509, dependencies, and API documentation. The page includes information about how CONFIG_PSA_CRYPTO and CONFIG_MBEDTLS are used after the Mbed TLS v4.1 update.
- Removed the configuration page for the deprecated legacy crypto backend (libraries/security/nrf_security/doc/backend_config). Configure cryptographic features using Configuring PSA Crypto API and Supported cryptographic operations in the nRF Connect SDK instead.

Mbed TLS

Updated Mbed TLS to v4.1.0 (from v3.6.6). For an overview of the changes brought by this update in Mbed TLS and Zephyr, see the following pages:
- The Mbed TLS sections of the Zephyr v4.4 release notes and migration guide.
- The release notes from upstream Mbed TLS:
As part of this update, the following changes were made:
- Removed support for legacy, deprecated Mbed TLS Crypto APIs and related tests.
- Rearranged Kconfig options related to Mbed TLS in various files under nRF Security.
- Removed outdated Kconfig options related to Mbed TLS in various files under nRF Security.
- nRF Security now uses the Mbed TLS integration from Zephyr as-is (CONFIG_MBEDTLS_BUILTIN) while replacing upstream TF-PSA-Crypto with Oberon PSA Crypto (CONFIG_TF_PSA_CRYPTO_CUSTOM).
From this update onwards:
- Enable CONFIG_MBEDTLS only if you use TLS or X.509.
- For cryptographic operations, enable only CONFIG_PSA_CRYPTO.

Trusted Firmware-M (TF-M)

No changes since the latest nRF Connect SDK release.

Protocols 

This section provides detailed lists of changes by protocol. See Samples for lists of changes for the protocol-related samples.

Bluetooth® LE

No changes since the latest nRF Connect SDK release.

Bluetooth Mesh

Added the Configuring sysbuild and partitions guide on how to configure DFU for Bluetooth Mesh samples.

DECT NR+

No changes since the latest nRF Connect SDK release.

Enhanced ShockBurst (ESB)

No changes since the latest nRF Connect SDK release.

Gazell

No changes since the latest nRF Connect SDK release.

Matter

No changes since the latest nRF Connect SDK release.

Matter fork

No changes since the latest nRF Connect SDK release.

nRF IEEE 802.15.4 radio driver

No changes since the latest nRF Connect SDK release.

Thread

No changes since the latest nRF Connect SDK release.

Wi-Fi®

No changes since the latest nRF Connect SDK release.

Applications 

This section provides detailed lists of changes by application.

Connectivity bridge

No changes since the latest nRF Connect SDK release.

High-Performance Framework (HPF)

Added support for the nRF54LC10A SoC.

IPC radio firmware

No changes since the latest nRF Connect SDK release.

Matter bridge

No changes since the latest nRF Connect SDK release.

nRF Audio (formerly nRF5340 Audio)

No changes since the latest nRF Connect SDK release.

nRF Desktop

Added support for the nrf54lc10dk/nrf54lc10a/cpuapp board target.

Thingy:53: Matter weather station

No changes since the latest nRF Connect SDK release.

Installer (MCUboot Firmware Loader installer)

No changes since the latest nRF Connect SDK release.

Samples 

This section provides detailed lists of changes by sample.

Bluetooth samples

Added support for the nrf54lc10dk/nrf54lc10a/cpuapp board target in the Bluetooth: Central HIDS, Bluetooth: Peripheral HIDS keyboard, and Bluetooth: Peripheral HIDS mouse samples.

Bluetooth Mesh samples

No changes since the latest nRF Connect SDK release.

Bluetooth Fast Pair samples

Bluetooth Fast Pair: Locator tag sample:
- Updated the references to the deleted CONFIG_CRACEN_LIB_KMU Kconfig option with the CONFIG_CRACEN_KMU replacement.

Cellular samples

No changes since the latest nRF Connect SDK release.

Cryptography samples

Crypto: PSA TLS sample:
- Updated the TLS version support section after the Mbed TLS v4.1.0 update.

Debug samples

No changes since the latest nRF Connect SDK release.

DFU samples

No changes since the latest nRF Connect SDK release.

DECT NR+ samples

No changes since the latest nRF Connect SDK release.

Edge Impulse samples

No changes since the latest nRF Connect SDK release.

Enhanced ShockBurst samples

Added support for the nrf54lc10dk/nrf54lc10a/cpuapp board target in all samples.

Gazell samples

No changes since the latest nRF Connect SDK release.

IronSide SE samples

No changes since the latest nRF Connect SDK release.

Keys samples

No changes since the latest nRF Connect SDK release.

Matter samples

No changes since the latest nRF Connect SDK release.

Networking samples

No changes since the latest nRF Connect SDK release.

NFC samples

No changes since the latest nRF Connect SDK release.

nRF5340 samples

No changes since the latest nRF Connect SDK release.

Peripheral samples

Added the PPI Sequencer with SPI sample that demonstrates use of PPI Sequencer for I2C/SPI.

PMIC samples

No changes since the latest nRF Connect SDK release.

Protocol serialization samples

No changes since the latest nRF Connect SDK release.

SDFW samples

No changes since the latest nRF Connect SDK release.

Sensor samples

No changes since the latest nRF Connect SDK release.

SUIT samples

No changes since the latest nRF Connect SDK release.

Trusted Firmware-M (TF-M) samples

No changes since the latest nRF Connect SDK release.

Thread samples

No changes since the latest nRF Connect SDK release.

Wi-Fi samples

No changes since the latest nRF Connect SDK release.

Other samples

No changes since the latest nRF Connect SDK release.

Drivers 

This section provides detailed lists of changes by driver.

Added:
- The PPI Sequencer library for triggering periodic hardware tasks using PPI.
- The PPI Sequencer for I2C/SPI driver, which is using PPI Sequencer to perform batches of periodic I2C/SPI transfers without waking up the CPU.

SPI drivers

SPIM:
- RTIO based device driver for SPIM has been introduced. This device driver is selected if CONFIG_SPI_RTIO is enabled.

Wi-Fi drivers

No changes since the latest nRF Connect SDK release.

Flash drivers

No changes since the latest nRF Connect SDK release.

Libraries 

This section provides detailed lists of changes by library.

Binary libraries

No changes since the latest nRF Connect SDK release.

Bluetooth libraries and services

No changes since the latest nRF Connect SDK release.

Common Application Framework

No changes since the latest nRF Connect SDK release.

Debug libraries

No changes since the latest nRF Connect SDK release.

DFU libraries

No changes since the latest nRF Connect SDK release.

Gazell libraries

No changes since the latest nRF Connect SDK release.

Modem libraries

Location library:
- Updated the library to always use the chosen zephyr,wifi node instead of ncs,location-wifi to find the used Wi-Fi device.

Multiprotocol Service Layer libraries

No changes since the latest nRF Connect SDK release.

Libraries for networking

No changes since the latest nRF Connect SDK release.

Libraries for NFC

No changes since the latest nRF Connect SDK release.

nRF RPC libraries

No changes since the latest nRF Connect SDK release.

Other libraries

No changes since the latest nRF Connect SDK release.

Shell libraries

No changes since the latest nRF Connect SDK release.

sdk-nrfxlib

See the changelog for each library in the nrfxlib documentation for additional information.

Scripts 

This section provides detailed lists of changes by script.

No changes since the latest nRF Connect SDK release.

Integrations 

This section provides detailed lists of changes by integration.

Google Fast Pair integration

No changes since the latest nRF Connect SDK release.

Memfault integration

Removed the CONFIG_MEMFAULT_NCS_PROVISION_CERTIFICATES Kconfig option from nRF91x targets. Certificate provisioning for nRF91x targets is now handled automatically by the Memfault firmware SDK. The option remains available for nRF7002 targets, which do not have automatic certificate provisioning.

AVSystem integration

No changes since the latest nRF Connect SDK release.

nRF Cloud integration

No changes since the latest nRF Connect SDK release.

CoreMark integration

No changes since the latest nRF Connect SDK release.

DULT integration

No changes since the latest nRF Connect SDK release.

The MCUboot fork in nRF Connect SDK (sdk-mcuboot) contains all commits from the upstream MCUboot repository up to and including 8d14eebfe0b7402ebdf77ce1b99ba1a3793670e9, with some nRF Connect SDK specific additions.

The code for integrating MCUboot into nRF Connect SDK is located in the ncs/nrf/modules/mcuboot folder.

The following list summarizes both the main changes inherited from upstream MCUboot and the main changes applied to the nRF Connect SDK specific additions:

No changes since the latest nRF Connect SDK release.

The following non-PSA Crypto implementations were deprecated:
- CONFIG_BOOT_ECDSA_NRF_OBERON
- CONFIG_BOOT_ECDSA_TINYCRYPT
- CONFIG_BOOT_ECDSA_CC310
- CONFIG_BOOT_ED25519_TINYCRYPT
- CONFIG_BOOT_ED25519_MBEDTLS
Use their PSA Crypto counterparts instead.

Zephyr 

The Zephyr fork in nRF Connect SDK (sdk-zephyr) contains all commits from the upstream Zephyr repository up to and including 684c9e8f32e4373a21098559f748f06915f950c9, with some nRF Connect SDK specific additions.

For the list of upstream Zephyr commits (not including cherry-picked commits) incorporated into nRF Connect SDK since the most recent release, run the following command from the ncs/zephyr repository (after running west update):

git log --oneline 684c9e8f32 ^911b3da139

For the list of nRF Connect SDK specific commits, including commits cherry-picked from upstream, run:

git log --oneline manifest-rev ^684c9e8f32

The current nRF Connect SDK main branch is based on revision 684c9e8f32 of Zephyr.

Note

For possible breaking changes and changes between the latest Zephyr release and the current Zephyr version, refer to the Zephyr release notes.

Additions specific to nRF Connect SDK

Updated the VERSION file to follow the common version format structure. The common version file format structure is extended with a VERSION_METADATA field for nRF Connect SDK.

zcbor 

No changes since the latest nRF Connect SDK release.

Documentation 

No changes since the latest nRF Connect SDK release.