seed: bump to 258bb1886e5c #44

Merged

zach merged 1 commit from automated/seed-bump-258bb1886e5c into main 2026-08-13 04:52:09 +00:00

Conversation 0 Commits 1 Files changed 1 +3 -3

unredacted_bot commented 2026-08-10 04:00:48 +00:00

Owner

Copy link

Automated seed-bump proposal from tools/bump-seed.sh — the anthraxx commit signature was verified against keys/anthraxx.gpg.

Review before merging: confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and build-kernel.yml's fidelity assertion + hardening-drift guard run on that build.

fetching CURRENT pinned commit (284a871e22fbd4c01d17a3ce6b84cc2a6d8347d8) for diff baseline...
checking out NEW ref (origin/HEAD)...
  signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8)

==================== summary ====================
  url        : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git
  old commit : 284a871e22fbd4c01d17a3ce6b84cc2a6d8347d8  (sha256 a7a51a8956c22335e6fed694e27881d6cf9b1613fc5576c2443c908ed3309c51)
  new commit : 258bb1886e5c375e345e8144b32a23c044e7e730  (sha256 5ab54eb89767f9d137febb621ec1deb3940194a4694349b63a41bea542bf4e94)
  new tag    : 7.1.7.hardened1-1

==================== kconfig delta (hardening-relevant only) ====================
  (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.)

==================== rewriting upstream-seed.toml ====================
updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.1.toml

Next steps:
  git diff configs/seeds/7.1.toml
  # If the kconfig delta above introduced symbols you want pinned in
  # intent.config, add them and re-check policy parity locally.
  git add configs/seeds/7.1.toml [configs/intent.config configs/POLICY.md]
  git commit -m "seed: bump to origin/HEAD (258bb1886e5c375e345e8144b32a23c044e7e730)"

Automated seed-bump proposal from `tools/bump-seed.sh` — the anthraxx commit signature was verified against `keys/anthraxx.gpg`. **Review before merging:** confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and `build-kernel.yml`'s fidelity assertion + hardening-drift guard run on that build. ``` fetching CURRENT pinned commit (284a871e22fbd4c01d17a3ce6b84cc2a6d8347d8) for diff baseline... checking out NEW ref (origin/HEAD)... signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8) ==================== summary ==================== url : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git old commit : 284a871e22fbd4c01d17a3ce6b84cc2a6d8347d8 (sha256 a7a51a8956c22335e6fed694e27881d6cf9b1613fc5576c2443c908ed3309c51) new commit : 258bb1886e5c375e345e8144b32a23c044e7e730 (sha256 5ab54eb89767f9d137febb621ec1deb3940194a4694349b63a41bea542bf4e94) new tag : 7.1.7.hardened1-1 ==================== kconfig delta (hardening-relevant only) ==================== (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.) ==================== rewriting upstream-seed.toml ==================== updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.1.toml Next steps: git diff configs/seeds/7.1.toml # If the kconfig delta above introduced symbols you want pinned in # intent.config, add them and re-check policy parity locally. git add configs/seeds/7.1.toml [configs/intent.config configs/POLICY.md] git commit -m "seed: bump to origin/HEAD (258bb1886e5c375e345e8144b32a23c044e7e730)" ```

unredacted_bot added 1 commit 2026-08-10 04:00:48 +00:00

seed: bump to 258bb1886e5c c6f4450fba

zach merged commit d29ac9d370 into main 2026-08-13 04:52:09 +00:00

zach deleted branch automated/seed-bump-258bb1886e5c 2026-08-13 04:52:09 +00:00

zach referenced this pull request from a commit 2026-08-13 04:52:10 +00:00

Merge pull request 'seed: bump to 258bb1886e5c' (#44) from automated/seed-bump-258bb1886e5c into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

unredacted/linux-hardened-unredacted!44

No description provided.