seed: bump to e0a6c7c64e6b #62

Merged

zach merged 1 commit from automated/seed-bump-e0a6c7c64e6b into main 2026-09-30 21:59:20 +00:00

Conversation 0 Commits 1 Files changed 1 +3 -3

unredacted_bot commented 2026-09-28 04:00:45 +00:00

Owner

Copy link

Automated seed-bump proposal from tools/bump-seed.sh — the anthraxx commit signature was verified against keys/anthraxx.gpg.

Review before merging: confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and build-kernel.yml's fidelity assertion + hardening-drift guard run on that build.

fetching CURRENT pinned commit (44041df4bebe48b8406b3d141abdc47adcc31bdb) for diff baseline...
checking out NEW ref (origin/HEAD)...
  signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8)

==================== summary ====================
  url        : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git
  old commit : 44041df4bebe48b8406b3d141abdc47adcc31bdb  (sha256 a546907cc59db4489f5768ff12504d6bb214ad6c55e1f8e4757794c715415d37)
  new commit : e0a6c7c64e6b5ae7176751ba653ada7eac673e41  (sha256 e9892daa3afa041b8c6c126b84676f382d3302f5add40a389d8eab36c01b89a2)
  new tag    : 7.2.7.hardened1-1

==================== kconfig delta (hardening-relevant only) ====================
  (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.)

==================== rewriting upstream-seed.toml ====================
updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.2.toml

Next steps:
  git diff configs/seeds/7.2.toml
  # If the kconfig delta above introduced symbols you want pinned in
  # intent.config, add them and re-check policy parity locally.
  git add configs/seeds/7.2.toml [configs/intent.config configs/POLICY.md]
  git commit -m "seed: bump to origin/HEAD (e0a6c7c64e6b5ae7176751ba653ada7eac673e41)"

Automated seed-bump proposal from `tools/bump-seed.sh` — the anthraxx commit signature was verified against `keys/anthraxx.gpg`. **Review before merging:** confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and `build-kernel.yml`'s fidelity assertion + hardening-drift guard run on that build. ``` fetching CURRENT pinned commit (44041df4bebe48b8406b3d141abdc47adcc31bdb) for diff baseline... checking out NEW ref (origin/HEAD)... signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8) ==================== summary ==================== url : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git old commit : 44041df4bebe48b8406b3d141abdc47adcc31bdb (sha256 a546907cc59db4489f5768ff12504d6bb214ad6c55e1f8e4757794c715415d37) new commit : e0a6c7c64e6b5ae7176751ba653ada7eac673e41 (sha256 e9892daa3afa041b8c6c126b84676f382d3302f5add40a389d8eab36c01b89a2) new tag : 7.2.7.hardened1-1 ==================== kconfig delta (hardening-relevant only) ==================== (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.) ==================== rewriting upstream-seed.toml ==================== updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.2.toml Next steps: git diff configs/seeds/7.2.toml # If the kconfig delta above introduced symbols you want pinned in # intent.config, add them and re-check policy parity locally. git add configs/seeds/7.2.toml [configs/intent.config configs/POLICY.md] git commit -m "seed: bump to origin/HEAD (e0a6c7c64e6b5ae7176751ba653ada7eac673e41)" ```

unredacted_bot added 1 commit 2026-09-28 04:00:45 +00:00

seed: bump to e0a6c7c64e6b 96fd7ad80c

zach merged commit ec70e16567 into main 2026-09-30 21:59:20 +00:00

zach deleted branch automated/seed-bump-e0a6c7c64e6b 2026-09-30 21:59:20 +00:00

zach referenced this pull request from a commit 2026-09-30 21:59:21 +00:00

Merge pull request 'seed: bump to e0a6c7c64e6b' (#62) from automated/seed-bump-e0a6c7c64e6b into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

unredacted/linux-hardened-unredacted!62

No description provided.