seed: bump to b20a4cf81fae #23

Merged

zach merged 1 commit from automated/seed-bump-b20a4cf81fae into main

2026-07-13 10:14:00 +00:00

unredacted_bot commented

2026-07-13 04:01:08 +00:00

Owner

Automated seed-bump proposal from tools/bump-seed.sh — the anthraxx commit signature was verified against keys/anthraxx.gpg.

Review before merging: confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and build-kernel.yml's fidelity assertion + hardening-drift guard run on that build.

fetching CURRENT pinned commit (6beb6172c7a1a5df2d97c22294b03a8495dac78d) for diff baseline...
checking out NEW ref (origin/HEAD)...
  signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8)

==================== summary ====================
  url        : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git
  old commit : 6beb6172c7a1a5df2d97c22294b03a8495dac78d  (sha256 589b58d0fa313de32261e1179a0fe98201c65f6c09685336b37bb98ac4788ed9)
  new commit : b20a4cf81fae672db36d035e99b9af7a32f01758  (sha256 5c9898470d552cb361fc45dd4211ea1758f06cf9b02f78f27aba1f79965b3b65)
  new tag    : 7.1.3.hardened1-2

==================== kconfig delta (hardening-relevant only) ====================
  (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.)

==================== rewriting upstream-seed.toml ====================
updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.1.toml

Next steps:
  git diff configs/seeds/7.1.toml
  # If the kconfig delta above introduced symbols you want pinned in
  # intent.config, add them and re-check policy parity locally.
  git add configs/seeds/7.1.toml [configs/intent.config configs/POLICY.md]
  git commit -m "seed: bump to origin/HEAD (b20a4cf81fae672db36d035e99b9af7a32f01758)"

Automated seed-bump proposal from `tools/bump-seed.sh` — the anthraxx commit signature was verified against `keys/anthraxx.gpg`. **Review before merging:** confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and `build-kernel.yml`'s fidelity assertion + hardening-drift guard run on that build. ``` fetching CURRENT pinned commit (6beb6172c7a1a5df2d97c22294b03a8495dac78d) for diff baseline... checking out NEW ref (origin/HEAD)... signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8) ==================== summary ==================== url : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git old commit : 6beb6172c7a1a5df2d97c22294b03a8495dac78d (sha256 589b58d0fa313de32261e1179a0fe98201c65f6c09685336b37bb98ac4788ed9) new commit : b20a4cf81fae672db36d035e99b9af7a32f01758 (sha256 5c9898470d552cb361fc45dd4211ea1758f06cf9b02f78f27aba1f79965b3b65) new tag : 7.1.3.hardened1-2 ==================== kconfig delta (hardening-relevant only) ==================== (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.) ==================== rewriting upstream-seed.toml ==================== updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.1.toml Next steps: git diff configs/seeds/7.1.toml # If the kconfig delta above introduced symbols you want pinned in # intent.config, add them and re-check policy parity locally. git add configs/seeds/7.1.toml [configs/intent.config configs/POLICY.md] git commit -m "seed: bump to origin/HEAD (b20a4cf81fae672db36d035e99b9af7a32f01758)" ```

unredacted_bot added 1 commit

2026-07-13 04:01:08 +00:00