seed: bump to e7dd7be0e11a #25

Merged

zach merged 1 commit from automated/seed-bump-e7dd7be0e11a into main

2026-07-23 04:45:34 +00:00

unredacted_bot commented

2026-07-20 04:00:32 +00:00

Owner

Automated seed-bump proposal from tools/bump-seed.sh — the anthraxx commit signature was verified against keys/anthraxx.gpg.

Review before merging: confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and build-kernel.yml's fidelity assertion + hardening-drift guard run on that build.

fetching CURRENT pinned commit (b20a4cf81fae672db36d035e99b9af7a32f01758) for diff baseline...
checking out NEW ref (origin/HEAD)...
  signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8)

==================== summary ====================
  url        : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git
  old commit : b20a4cf81fae672db36d035e99b9af7a32f01758  (sha256 5c9898470d552cb361fc45dd4211ea1758f06cf9b02f78f27aba1f79965b3b65)
  new commit : e7dd7be0e11a483e9cbb5a225b3a9771e879549f  (sha256 dfb67aa3ad8e87b9657988e1df626a092b3b948c6514aa2b5f27ecaf67c2e40e)
  new tag    : 7.1.4.hardened1-1

==================== kconfig delta (hardening-relevant only) ====================
  (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.)

==================== rewriting upstream-seed.toml ====================
updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.1.toml

Next steps:
  git diff configs/seeds/7.1.toml
  # If the kconfig delta above introduced symbols you want pinned in
  # intent.config, add them and re-check policy parity locally.
  git add configs/seeds/7.1.toml [configs/intent.config configs/POLICY.md]
  git commit -m "seed: bump to origin/HEAD (e7dd7be0e11a483e9cbb5a225b3a9771e879549f)"

Automated seed-bump proposal from `tools/bump-seed.sh` — the anthraxx commit signature was verified against `keys/anthraxx.gpg`. **Review before merging:** confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and `build-kernel.yml`'s fidelity assertion + hardening-drift guard run on that build. ``` fetching CURRENT pinned commit (b20a4cf81fae672db36d035e99b9af7a32f01758) for diff baseline... checking out NEW ref (origin/HEAD)... signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8) ==================== summary ==================== url : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git old commit : b20a4cf81fae672db36d035e99b9af7a32f01758 (sha256 5c9898470d552cb361fc45dd4211ea1758f06cf9b02f78f27aba1f79965b3b65) new commit : e7dd7be0e11a483e9cbb5a225b3a9771e879549f (sha256 dfb67aa3ad8e87b9657988e1df626a092b3b948c6514aa2b5f27ecaf67c2e40e) new tag : 7.1.4.hardened1-1 ==================== kconfig delta (hardening-relevant only) ==================== (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.) ==================== rewriting upstream-seed.toml ==================== updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.1.toml Next steps: git diff configs/seeds/7.1.toml # If the kconfig delta above introduced symbols you want pinned in # intent.config, add them and re-check policy parity locally. git add configs/seeds/7.1.toml [configs/intent.config configs/POLICY.md] git commit -m "seed: bump to origin/HEAD (e7dd7be0e11a483e9cbb5a225b3a9771e879549f)" ```

unredacted_bot added 1 commit

2026-07-20 04:00:33 +00:00