[Broadcom] Upgrade Broadcom xgs SAI version to 15.2.1.0.0.0.26.3 by aaronber0614 · Pull Request #29761 · sonic-net/sonic-buildimage

aaronber0614 · 2026-09-25T05:33:46Z

Why I did it

Upgrade the Broadcom XGS SAI package from 15.2.1.0.0.0.22.3 to
15.2.1.0.0.0.26.3. This synchronizes the product branch through upstream
SAI 15.2.1.0.0.0.26.0 while preserving the Microsoft AN/LT behavior,
serdes ILT 30-second timeout, DNX link-training dispatch support, MACsec
payload, XGS build support, and internal changelog history.

Included release history (the product restamps between the current master
pin 15.2.1.0.0.0.22.3 and this release):

15.2.1.0.0.0.23.3: sync through upstream 15.2.1.0.0.0.23.0 —
SONIC-128554 TH5/TH6 FEC corrected-bit capability reporting.
15.2.1.0.0.0.26.3: sync through upstream 15.2.1.0.0.0.26.0 —
SDKLT-56852 protects bcmptm_rm_alpm_trie_split from a segmentation
fault (upstream .24.0), SONIC-128397 corrects Main TAP validation
during SerDes object creation when higher values are configured
(upstream .25.0), and SONIC-121729 corrects the egress queue drop
counter for dropped mirrored packets (upstream .26.0).

Work item tracking

Microsoft ADO (number only): 39872413

How I did it

Update LIBSAIBCM_XGS_VERSION in platform/broadcom/sai-xgs.mk from
15.2.1.0.0.0.22.3 to 15.2.1.0.0.0.26.3. The SAI branch remains
SAI_15.2.1_GA.

This PR intentionally contains only the platform/broadcom/sai-xgs.mk version
bump. The Broadcom SAI build-cache dependency split (sai-xgs.dep /
sai-dnx.dep, with sai.dep as an include aggregator) that the dpkg cache-key completeness PR gate requires is unrelated build infrastructure and
is tracked separately in PR #29930. #29930 must merge to master first; this
branch is then rebased on top, after which the cache-completeness check passes.
The split is build-cache metadata only and does not change the libsaibcm
package.

How to verify it

Definition 702 builds 1234914, 1234916, and 1234979 succeeded from
official SAI_15.2.1_GA commit
ec0a361de4b98fa1fdebc309246972b68c2f0459. The XGS artifact comes from
canonical automatic build 1234914, DNX evidence comes from build 1234916,
and DNX-internal evidence comes from build 1234979. Every artifact resolves
to the same official source and exact SDK gitlink
cd0c34201f5d764b1a2d4fe5b98e4aad5f8fdd6b.

Each required candidate family package (XGS, DNX, and DNX-internal) passed
the absolute hard-undefined Broadcom symbol gate. These are cross-family
package-safety checks, not DNX hardware qualification. The release-provenance
verifier also confirmed upstream containment, the official SAI and SDK heads,
and all configured AN/LT and ILT source markers.

Publisher build 1234944 published the XGS packages from build 1234914.
The public runtime and development packages are byte-for-byte identical to
the authenticated ADO artifacts, and their Debian version is exactly
15.2.1.0.0.0.26.3.

Which release branch to backport (provide reason below if selected)

The same SAI fixes are required on 202605.

Tracking issue/work item for backport/cherry-pick request (GitHub issue or Microsoft ADO): 39872413
Failure type: SAI version upgrade and bug fixes

Tested branch

Broadcom XGS hardware qualification was run on the master image
SONiC.master-29761.1235027-0881a831d (sonic-buildimage build 1235027) on
Arista 7260CX3 switches. Both topologies ran the full 12-script qualification
and passed with zero dataplane failures and zero errors:

T0 (testbed-bjw2-can-t0-7260-8), plan 6abef745943f09e8e38a8d5d:
1195 tests, 253 passed / 942 conditionally skipped / 0 failures / 0 errors.
T1 (testbed-bjw2-can-t1-7260-12), plan 6abea3bc622441ac54e01442:
1195 tests, 430 passed / 765 conditionally skipped / 0 failures / 0 errors.

All 12 modules (crm, vlan, fdb, fib, vxlan_decap, decap, acl, pfcwd,
nhop_group, everflow_testbed, everflow_per_interface, reboot) passed or
benign-skipped on each topology; the skips are topology-gated collection
skips. The previous 15.2.1.0.0.0.23.3 hardware results are superseded by
this 26.3 qualification. Build 1235027 was produced from the pre-rebase
head that still carried the .dep split; because that split is build-cache
metadata only, the qualified libsaibcm 15.2.1.0.0.0.26.3 package is
byte-identical on the pure-bump head. The delivery guard is re-anchored on the
final post-#29930-rebase build before flip.

Update — 202605 backport qualification (PR #29915, sonic-buildimage build
1236395, tested image SONiC.202605-29915.1236395-5f61e4af3): the full
12-script T1 qualification completed green on testbed-bjw-can-t1-7260-8
(plan 6abf8b2250083a6b432da605) — 1214 tests, 447 passed / 767 conditionally
skipped / 0 failures / 0 errors; all 12 modules passed or benign-skipped. On
T0, the same-release baseline smoke (fib, everflow) was clean on
testbed-bjw2-can-t0-7050-2. This confirms the identical
15.2.1.0.0.0.26.3 XGS package on 202605 matches the green master 26.3
T0/T1 results above.

Test result

Broadcom XGS 15.2.1.0.0.0.26.3 is qualified on master: source provenance,
authenticated artifact inventory, cross-family package-safety symbol gates,
public XGS package publication, and XGS T0/T1 hardware qualification on
7260CX3 are all complete and green; the 202605 backport image (build 1236395)
also passed the full 12-script T1 qualification green. The build-cache dependency split required
by CI is tracked in PR #29930, which must merge first.

202605: XGS full 12-script T1 qualification green on 7260CX3 (plan 6abf8b2250083a6b432da605, tested image SONiC.202605-29915.1236395-5f61e4af3) - 1214 tests, 447 passed / 767 conditionally skipped / 0 failures / 0 errors. T0 same-release baseline smoke clean on testbed-bjw2-can-t0-7050-2.

Description for the changelog

[broadcom] Upgrade XGS SAI to 15.2.1.0.0.0.26.3 with the upstream FEC capability reporting, ALPM crash, SerDes TAP validation, and mirrored-packet counter fixes

Link to config_db schema for YANG module changes

N/A - no YANG or config_db schema changes.

A picture of a cute animal (not mandatory but encouraged)

N/A.

Signed-off-by: Aaron Bernardino aaronber@microsoft.com

Include upstream SAI 15.2.1 release 23.0 while retaining the Microsoft product patches. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 551d207b-8ce1-40fb-b69f-291f72e021d3 Signed-off-by: Aaron Bernardino <aaronber@microsoft.com>

azure-pipelines · 2026-09-25T05:33:56Z

Azure Pipelines: There may be pipelines that require an authorized user to comment /azp run to run.

mssonicbld · 2026-09-25T05:34:05Z

/azp run Azure.sonic-buildimage

azure-pipelines · 2026-09-25T05:34:20Z

Azure Pipelines: Successfully started running 1 pipeline(s).

mssonicbld · 2026-09-25T06:12:02Z

This PR has backport request label(s) for branch(es): 202605, but is missing required test information. Please make sure you tick the tested branch(es) in the Tested branch section and provide test evidence (e.g., 202605: <test result>) in the Test result section as well in your PR description.

_{---Powered by SONiC BuildBot}

mssonicbld · 2026-09-29T21:48:10Z

/azp run Azure.sonic-buildimage

azure-pipelines · 2026-09-29T21:48:26Z

Azure Pipelines: Successfully started running 1 pipeline(s).

mssonicbld · 2026-09-30T00:39:35Z

/azp run Azure.sonic-buildimage

azure-pipelines · 2026-09-30T00:39:48Z

Azure Pipelines: Successfully started running 1 pipeline(s).

mssonicbld · 2026-09-30T13:43:54Z

/azp run Azure.sonic-buildimage

azure-pipelines · 2026-09-30T13:44:14Z

Azure Pipelines: Successfully started running 1 pipeline(s).

Sync through upstream 15.2.1.0.0.0.26.0, including the ALPM trie-split crash protection, SerDes Main TAP validation fix, and mirrored-packet egress drop-counter correction. Keep the SAI_15.2.1_GA branch and the existing family-aligned cache dependency fix. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 13abff6a-6f56-4bc8-b9e5-d33e23aec40c Signed-off-by: Aaron Bernardino <aaronber@microsoft.com>

mssonicbld · 2026-10-02T12:43:18Z

/azp run Azure.sonic-buildimage

azure-pipelines · 2026-10-02T12:43:32Z

Azure Pipelines: Successfully started running 1 pipeline(s).

Copilot

Copilot review overview

🔵 Needs a closer look

Final approval depends on external artifact provenance and the prerequisite cache-metadata PR being merged and rebased.

Review effort: Balanced
Findings: None

What changed in this PR

Updates the Broadcom XGS SAI package consumed by SONiC to release 15.2.1.0.0.0.26.3.

Changes:

Advances LIBSAIBCM_XGS_VERSION from .22.3 to .26.3.
Retains the existing SAI_15.2.1_GA branch and package URL structure.

File	Description
`platform/broadcom/sai-xgs.mk`	Updates the XGS SAI package version.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Branch-native 202605 pin update from 15.2.1.0.0.0.17.3 to 15.2.1.0.0.0.26.3, consolidating upstream SAI 15.2.1 releases .19.0 through .26.0 plus the .22.3/.26.3 product restamps, while keeping the SAI_15.2.1_GA branch. This is the branch-native counterpart of master publication PR #29761 (the automatic 202605 cherry-pick cannot apply over the .17.3 pin). Pure platform/broadcom/sai-xgs.mk change; the libsaibcm package is byte-identical to the qualified master and 202605-staging builds. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 13abff6a-6f56-4bc8-b9e5-d33e23aec40c Signed-off-by: Aaron Bernardino <aaronber@microsoft.com>

thisptr-sh

Early approving, thanks!

mssonicbld · 2026-10-02T18:13:15Z

The Tested branch section has been ticked and Test result is provided for branch(es): 202605. Added label(s): Tested for 202605 Branch.

_{---Powered by SONiC BuildBot}

aaronber0614 · 2026-10-04T02:09:13Z

/azp run

azure-pipelines · 2026-10-04T02:09:32Z

Azure Pipelines: Successfully started running 1 pipeline(s). 2 pipeline(s) were filtered out due to trigger conditions.

thisptr-sh · 2026-10-05T16:21:21Z

This PR is blocked by false CI failure, which can be unblocked once #29930 merges

aaronber0614 · 2026-10-06T14:04:59Z

/azpw retry

mssonicbld · 2026-10-06T14:05:02Z

Retrying failed(or canceled) jobs...

mssonicbld · 2026-10-06T14:05:05Z

Retrying failed(or canceled) stages in build 1238294:

✅Stage CacheKeyLint:

Job Audit PR for untracked build-cache inputs: retried.

aaronber0614 · 2026-10-07T03:21:30Z

/azp run

azure-pipelines · 2026-10-07T03:21:51Z

Azure Pipelines: Successfully started running 1 pipeline(s). 2 pipeline(s) were filtered out due to trigger conditions.

aaronber0614 added the Request for 202605 Branch label Sep 25, 2026

mssonicbld added the Cherry Pick Conflict_202605 label Sep 25, 2026

Merge branch 'master' into bump/sai-15.2.1.0.0.0.23.3

60b6c1e

aaronber0614 changed the title ~~[Broadcom] Upgrade Broadcom xgs SAI version to 15.2.1.0.0.0.23.3~~ [Broadcom] Upgrade Broadcom xgs SAI version to 15.2.1.0.0.0.26.3 Sep 30, 2026

aaronber0614 removed the Cherry Pick Conflict_202605 label Sep 30, 2026

mssonicbld added the Cherry Pick Conflict_202605 label Sep 30, 2026

aaronber0614 mentioned this pull request Oct 1, 2026

[broadcom][202605][test-only] Stage XGS SAI 15.2.1.0.0.0.26.3 #29915

Closed

1 task done

aaronber0614 force-pushed the bump/sai-15.2.1.0.0.0.23.3 branch from ae1b287 to c4e2571 Compare October 2, 2026 12:43

aaronber0614 marked this pull request as ready for review October 2, 2026 15:22

Copilot AI balanced review requested due to automatic review settings October 2, 2026 15:22

Copilot started reviewing on behalf of aaronber0614 October 2, 2026 15:22 View session

Copilot AI reviewed Oct 2, 2026

View reviewed changes

aaronber0614 mentioned this pull request Oct 2, 2026

[202605][broadcom] Upgrade XGS SAI version to 15.2.1.0.0.0.26.3 #29931

Open

1 of 20 tasks

thisptr-sh approved these changes Oct 2, 2026

View reviewed changes

mssonicbld added the Tested for 202605 branch Tested for 202605 branch label Oct 2, 2026

Conversation

aaronber0614 commented Sep 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Why I did it

Work item tracking

How I did it

How to verify it

Which release branch to backport (provide reason below if selected)

Tested branch

Test result

Description for the changelog

Link to config_db schema for YANG module changes

A picture of a cute animal (not mandatory but encouraged)

Uh oh!

azure-pipelines Bot commented Sep 25, 2026

Uh oh!

mssonicbld commented Sep 25, 2026

Uh oh!

azure-pipelines Bot commented Sep 25, 2026

Uh oh!

mssonicbld commented Sep 25, 2026

Uh oh!

mssonicbld commented Sep 29, 2026

Uh oh!

azure-pipelines Bot commented Sep 29, 2026

Uh oh!

mssonicbld commented Sep 30, 2026

Uh oh!

azure-pipelines Bot commented Sep 30, 2026

Uh oh!

mssonicbld commented Sep 30, 2026

Uh oh!

azure-pipelines Bot commented Sep 30, 2026

Uh oh!

mssonicbld commented Oct 2, 2026

Uh oh!

azure-pipelines Bot commented Oct 2, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Copilot review overview

🔵 Needs a closer look

Uh oh!

thisptr-sh left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

mssonicbld commented Oct 2, 2026

Uh oh!

aaronber0614 commented Oct 4, 2026

Uh oh!

azure-pipelines Bot commented Oct 4, 2026

Uh oh!

thisptr-sh commented Oct 5, 2026

Uh oh!

aaronber0614 commented Oct 6, 2026

Uh oh!

mssonicbld commented Oct 6, 2026

Uh oh!

mssonicbld commented Oct 6, 2026

Uh oh!

aaronber0614 commented Oct 7, 2026

Uh oh!

azure-pipelines Bot commented Oct 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

aaronber0614 commented Sep 25, 2026 •

edited

Loading

thisptr-sh left a comment •

edited

Loading