manifest: tf-m: update to 2.2.2

doc/releases/release-notes-4.4.rst

@@ -41,6 +41,11 @@ The following sections provide detailed lists of changes by component.
 Security Vulnerability Related
 ******************************
 
+The following CVEs are addressed by this release:
+
+* :cve:`2025-53022` `(TF-M) FWU does not check the length of the TLV’s payload
+  <https://trustedfirmware-m.readthedocs.io/en/latest/security/security_advisories/fwu_tlv_payload_out_of_bounds_vulnerability.html>`_
+
 API Changes
 ***********
 
@@ -164,6 +169,11 @@ Libraries / Subsystems
 Other notable changes
 *********************
 
+* TF-M was updated to version 2.2.2 (from 2.2.0). The release notes can be found at:
+
+  * https://trustedfirmware-m.readthedocs.io/en/tf-mv2.2.2/releases/2.2.1.html
+  * https://trustedfirmware-m.readthedocs.io/en/tf-mv2.2.2/releases/2.2.2.html
+
 ..
   Any more descriptive subsystem or driver changes. Do you really want to write
   a paragraph or is it enough to link to the api/driver/Kconfig/board page above?

west.yml

@@ -359,7 +359,7 @@ manifest:
       path: modules/lib/picolibc
       revision: ca8b6ebba5226a75545e57a140443168a26ba664
     - name: psa-arch-tests
-      revision: 87b08682a111ebb085cd8b1ea41d603191d6d146
+      revision: afeed6ed87146d9828e0ff862f3533790df8c421
       path: modules/tee/tf-m/psa-arch-tests
       groups:
         - testing
@@ -370,7 +370,7 @@ manifest:
       groups:
         - debug
     - name: tf-m-tests
-      revision: a90702bcb8fadb6f70daf0ffbb13888dfe63fc99
+      revision: cde5b6ed540d3ff5a09564fded6b39b0a70ad3bf
       path: modules/tee/tf-m/tf-m-tests
       groups:
         - testing
@@ -380,7 +380,7 @@ manifest:
       groups:
         - tee
     - name: trusted-firmware-m
-      revision: c2f9edc77f72838e7d6f5f9c0b95e4318ddfced1
+      revision: 9889df41022c6679b71da55d93f9e3693a804976
       path: modules/tee/tf-m/trusted-firmware-m
       groups:
         - tee