seed: bump to feb517ba5973 #65

Merged

zach merged 1 commit from automated/seed-bump-feb517ba5973 into main 2026-10-12 07:05:34 +00:00

Conversation 0 Commits 1 Files changed 1 +3 -3

unredacted_bot commented 2026-10-12 04:01:12 +00:00

Owner

Copy link

Automated seed-bump proposal from tools/bump-seed.sh — the anthraxx commit signature was verified against keys/anthraxx.gpg.

Review before merging: confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and build-kernel.yml's fidelity assertion + hardening-drift guard run on that build.

fetching CURRENT pinned commit (e0a6c7c64e6b5ae7176751ba653ada7eac673e41) for diff baseline...
checking out NEW ref (origin/HEAD)...
  signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8)

==================== summary ====================
  url        : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git
  old commit : e0a6c7c64e6b5ae7176751ba653ada7eac673e41  (sha256 e9892daa3afa041b8c6c126b84676f382d3302f5add40a389d8eab36c01b89a2)
  new commit : feb517ba59735e128c484b2d2d5c500b737d1938  (sha256 6b90537fc69367ecdafd06234a8e73dcb21490297a8a05cf562baf35e8374399)
  new tag    : 7.2.10.hardened1-1

==================== kconfig delta (hardening-relevant only) ====================
  (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.)

==================== rewriting upstream-seed.toml ====================
updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.2.toml

Next steps:
  git diff configs/seeds/7.2.toml
  # If the kconfig delta above introduced symbols you want pinned in
  # intent.config, add them and re-check policy parity locally.
  git add configs/seeds/7.2.toml [configs/intent.config configs/POLICY.md]
  git commit -m "seed: bump to origin/HEAD (feb517ba59735e128c484b2d2d5c500b737d1938)"

Automated seed-bump proposal from `tools/bump-seed.sh` — the anthraxx commit signature was verified against `keys/anthraxx.gpg`. **Review before merging:** confirm the new seed targets the kernel version we build (the seed may legitimately lag) and that the hardening delta below is acceptable. Merging only updates the pinned config seed; the next kernel tag picks it up, and `build-kernel.yml`'s fidelity assertion + hardening-drift guard run on that build. ``` fetching CURRENT pinned commit (e0a6c7c64e6b5ae7176751ba653ada7eac673e41) for diff baseline... checking out NEW ref (origin/HEAD)... signature: OK (signed by E240B57E2C4630BA768E2F26FC1B547C8D8172C8) ==================== summary ==================== url : https://gitlab.archlinux.org/archlinux/packaging/packages/linux-hardened.git old commit : e0a6c7c64e6b5ae7176751ba653ada7eac673e41 (sha256 e9892daa3afa041b8c6c126b84676f382d3302f5add40a389d8eab36c01b89a2) new commit : feb517ba59735e128c484b2d2d5c500b737d1938 (sha256 6b90537fc69367ecdafd06234a8e73dcb21490297a8a05cf562baf35e8374399) new tag : 7.2.10.hardened1-1 ==================== kconfig delta (hardening-relevant only) ==================== (no hardening-relevant changes; only drivers/CC_HAS_*/fs etc.) ==================== rewriting upstream-seed.toml ==================== updated /workspace/unredacted/linux-hardened-unredacted/configs/seeds/7.2.toml Next steps: git diff configs/seeds/7.2.toml # If the kconfig delta above introduced symbols you want pinned in # intent.config, add them and re-check policy parity locally. git add configs/seeds/7.2.toml [configs/intent.config configs/POLICY.md] git commit -m "seed: bump to origin/HEAD (feb517ba59735e128c484b2d2d5c500b737d1938)" ```

unredacted_bot added 1 commit 2026-10-12 04:01:12 +00:00

seed: bump to feb517ba5973 007e4fb18a

zach merged commit da2cb0202c into main 2026-10-12 07:05:34 +00:00

zach deleted branch automated/seed-bump-feb517ba5973 2026-10-12 07:05:34 +00:00

zach referenced this pull request from a commit 2026-10-12 07:05:36 +00:00

Merge pull request 'seed: bump to feb517ba5973' (#65) from automated/seed-bump-feb517ba5973 into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

unredacted/linux-hardened-unredacted!65

No description provided.