unredacted/linux-hardened-unredacted
2
1
Fork 0
Code Issues Pull requests 1 Projects Releases 13 Packages Wiki Activity Actions 1

seed: bump to 284a871e22fb #41

Open
unredacted_bot wants to merge 1 commit from automated/seed-bump-284a871e22fb into main
pull from: automated/seed-bump-284a871e22fb
merge into: unredacted:main
Conversation 0 Commits 1 Files changed 1 +3 -3
unredacted_bot commented 2026-07-27 04:00:34 +00:00
Owner
Copy link

Automated seed-bump proposal from tools/bump-seed.sh — the anthraxx commit signature was verified against keys/anthraxx.gpg.

Review before merging: confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and build-kernel.yml's fidelity assertion + hardening-drift guard run on that build.

fetching CURRENT pinned commit (e7dd7be0e11a483e9cbb5a225b3a9771e879549f) for diff baseline...
checking out NEW ref (origin/HEAD)...
  signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8)

==================== summary ====================
  url        : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git
  old commit : e7dd7be0e11a483e9cbb5a225b3a9771e879549f  (sha256 dfb67aa3ad8e87b9657988e1df626a092b3b948c6514aa2b5f27ecaf67c2e40e)
  new commit : 284a871e22fbd4c01d17a3ce6b84cc2a6d8347d8  (sha256 a7a51a8956c22335e6fed694e27881d6cf9b1613fc5576c2443c908ed3309c51)
  new tag    : 7.1.5.hardened1-2

==================== kconfig delta (hardening-relevant only) ====================
  (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.)

==================== rewriting upstream-seed.toml ====================
updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.1.toml

Next steps:
  git diff configs/seeds/7.1.toml
  # If the kconfig delta above introduced symbols you want pinned in
  # intent.config, add them and re-check policy parity locally.
  git add configs/seeds/7.1.toml [configs/intent.config configs/POLICY.md]
  git commit -m "seed: bump to origin/HEAD (284a871e22fbd4c01d17a3ce6b84cc2a6d8347d8)"
Automated seed-bump proposal from `tools/bump-seed.sh` — the anthraxx commit signature was verified against `keys/anthraxx.gpg`. **Review before merging:** confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and `build-kernel.yml`'s fidelity assertion + hardening-drift guard run on that build. ``` fetching CURRENT pinned commit (e7dd7be0e11a483e9cbb5a225b3a9771e879549f) for diff baseline... checking out NEW ref (origin/HEAD)... signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8) ==================== summary ==================== url : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git old commit : e7dd7be0e11a483e9cbb5a225b3a9771e879549f (sha256 dfb67aa3ad8e87b9657988e1df626a092b3b948c6514aa2b5f27ecaf67c2e40e) new commit : 284a871e22fbd4c01d17a3ce6b84cc2a6d8347d8 (sha256 a7a51a8956c22335e6fed694e27881d6cf9b1613fc5576c2443c908ed3309c51) new tag : 7.1.5.hardened1-2 ==================== kconfig delta (hardening-relevant only) ==================== (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.) ==================== rewriting upstream-seed.toml ==================== updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.1.toml Next steps: git diff configs/seeds/7.1.toml # If the kconfig delta above introduced symbols you want pinned in # intent.config, add them and re-check policy parity locally. git add configs/seeds/7.1.toml [configs/intent.config configs/POLICY.md] git commit -m "seed: bump to origin/HEAD (284a871e22fbd4c01d17a3ce6b84cc2a6d8347d8)" ```
seed: bump to 284a871e22fb
All checks were successful
validate / shellcheck (pull_request) Successful in 13s
Details
validate / yamllint (pull_request) Successful in 12s
Details
validate / workflow-expressions (pull_request) Successful in 4s
Details
validate / pycompile (pull_request) Successful in 5s
Details
validate / intent-matches-policy (pull_request) Successful in 5s
Details
validate / dep-list-parity (pull_request) Successful in 4s
Details
validate / seed-pins-well-formed (pull_request) Successful in 8s
Details
validate / workflow-shell (pull_request) Successful in 12s
Details
validate / escape-hatches-are-plumbed (pull_request) Successful in 4s
Details
validate / container-digests-pinned (pull_request) Successful in 4s
Details
8070c1eac5
All checks were successful
validate / shellcheck (pull_request) Successful in 13s
Details
validate / yamllint (pull_request) Successful in 12s
Details
validate / workflow-expressions (pull_request) Successful in 4s
Details
validate / pycompile (pull_request) Successful in 5s
Details
validate / intent-matches-policy (pull_request) Successful in 5s
Details
validate / dep-list-parity (pull_request) Successful in 4s
Details
validate / seed-pins-well-formed (pull_request) Successful in 8s
Details
validate / workflow-shell (pull_request) Successful in 12s
Details
validate / escape-hatches-are-plumbed (pull_request) Successful in 4s
Details
validate / container-digests-pinned (pull_request) Successful in 4s
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin automated/seed-bump-284a871e22fb:automated/seed-bump-284a871e22fb
git switch automated/seed-bump-284a871e22fb

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff automated/seed-bump-284a871e22fb
git switch automated/seed-bump-284a871e22fb
git rebase main
git switch main
git merge --ff-only automated/seed-bump-284a871e22fb
git switch automated/seed-bump-284a871e22fb
git rebase main
git switch main
git merge --no-ff automated/seed-bump-284a871e22fb
git switch main
git merge --squash automated/seed-bump-284a871e22fb
git switch main
git merge --ff-only automated/seed-bump-284a871e22fb
git switch main
git merge automated/seed-bump-284a871e22fb
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
unredacted/linux-hardened-unredacted!41
No description provided.