seed: bump to 44041df4bebe #60

Merged

zach merged 1 commit from automated/seed-bump-44041df4bebe into main 2026-09-24 19:10:31 +00:00

Conversation 0 Commits 1 Files changed 1 +3 -3

unredacted_bot commented 2026-09-21 04:00:41 +00:00

Owner

Copy link

Automated seed-bump proposal from tools/bump-seed.sh — the anthraxx commit signature was verified against keys/anthraxx.gpg.

Review before merging: confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and build-kernel.yml's fidelity assertion + hardening-drift guard run on that build.

fetching CURRENT pinned commit (37b066fa9489d5c1e1859140d8e1008364bfe5cb) for diff baseline...
checking out NEW ref (origin/HEAD)...
  signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8)

==================== summary ====================
  url        : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git
  old commit : 37b066fa9489d5c1e1859140d8e1008364bfe5cb  (sha256 6faacf4b76f4e49c9290c3dd7a778cb342b4a05b3198244d4ee86cb73fbec023)
  new commit : 44041df4bebe48b8406b3d141abdc47adcc31bdb  (sha256 a546907cc59db4489f5768ff12504d6bb214ad6c55e1f8e4757794c715415d37)
  new tag    : 7.2.6.hardened1-1

==================== kconfig delta (hardening-relevant only) ====================
  (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.)

==================== rewriting upstream-seed.toml ====================
updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.2.toml

Next steps:
  git diff configs/seeds/7.2.toml
  # If the kconfig delta above introduced symbols you want pinned in
  # intent.config, add them and re-check policy parity locally.
  git add configs/seeds/7.2.toml [configs/intent.config configs/POLICY.md]
  git commit -m "seed: bump to origin/HEAD (44041df4bebe48b8406b3d141abdc47adcc31bdb)"

Automated seed-bump proposal from `tools/bump-seed.sh` — the anthraxx commit signature was verified against `keys/anthraxx.gpg`. **Review before merging:** confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and `build-kernel.yml`'s fidelity assertion + hardening-drift guard run on that build. ``` fetching CURRENT pinned commit (37b066fa9489d5c1e1859140d8e1008364bfe5cb) for diff baseline... checking out NEW ref (origin/HEAD)... signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8) ==================== summary ==================== url : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git old commit : 37b066fa9489d5c1e1859140d8e1008364bfe5cb (sha256 6faacf4b76f4e49c9290c3dd7a778cb342b4a05b3198244d4ee86cb73fbec023) new commit : 44041df4bebe48b8406b3d141abdc47adcc31bdb (sha256 a546907cc59db4489f5768ff12504d6bb214ad6c55e1f8e4757794c715415d37) new tag : 7.2.6.hardened1-1 ==================== kconfig delta (hardening-relevant only) ==================== (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.) ==================== rewriting upstream-seed.toml ==================== updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.2.toml Next steps: git diff configs/seeds/7.2.toml # If the kconfig delta above introduced symbols you want pinned in # intent.config, add them and re-check policy parity locally. git add configs/seeds/7.2.toml [configs/intent.config configs/POLICY.md] git commit -m "seed: bump to origin/HEAD (44041df4bebe48b8406b3d141abdc47adcc31bdb)" ```

unredacted_bot added 1 commit 2026-09-21 04:00:41 +00:00

seed: bump to 44041df4bebe 7be4333c95

zach merged commit e6fb59e666 into main 2026-09-24 19:10:31 +00:00

zach deleted branch automated/seed-bump-44041df4bebe 2026-09-24 19:10:31 +00:00

zach referenced this pull request from a commit 2026-09-24 19:10:33 +00:00

Merge pull request 'seed: bump to 44041df4bebe' (#60) from automated/seed-bump-44041df4bebe into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

unredacted/linux-hardened-unredacted!60

No description provided.