From 302545979b493ab4b5650395bd1dc9bcd13adc4f Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 12 Sep 2026 00:40:05 +0000 Subject: [PATCH 1/2] Update dependency kernel-rt-7.2 to v7.2.5 --- configs/mister_de10nano_defconfig | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configs/mister_de10nano_defconfig b/configs/mister_de10nano_defconfig index b5f98c7..653af8a 100644 --- a/configs/mister_de10nano_defconfig +++ b/configs/mister_de10nano_defconfig @@ -62,4 +62,4 @@ BR2_PACKAGE_MISTER_FIRMWARE=y BR2_PACKAGE_MISTER_DRIVERS=y BR2_PACKAGE_MISTER_USERSPACE=y BR2_PACKAGE_LINUX_RT=y -BR2_PACKAGE_LINUX_RT_VERSION="7.2.4" +BR2_PACKAGE_LINUX_RT_VERSION="7.2.5" From 0f23803ee9b6610083093fc7908101e630f52e7c Mon Sep 17 00:00:00 2001 From: "renovate-hash-sync[bot]" Date: Sat, 12 Sep 2026 00:40:41 +0000 Subject: [PATCH 2/2] renovate-hash-sync: refresh companion hash(es) for this PR Recomputed from a freshly-fetched artifact: - driver/firmware/libchdr package pins: sha256sum of the github archive tarball at the new pinned owner/repo/ref (same "locally computed" practice this tree's own .hash file headers already document) - kernel pins (stable 6.18.y and the RT/beta 7.2 line): kernel.org's signed sha256sums.asc for each pin's own vN.x series. An -rc is never refreshed here -- no signed manifest exists for one - ip7z/7zip pins (lzma-sdk, 7zip): sha256sum of the release ASSET for the new version (upstream publishes no checksums at all -- see package/lzma-sdk/lzma-sdk.hash's header), PLUS the files each package's *_LICENSE_FILES names, hashed from that same asset. A changed license file is refreshed AND diffed into the step log with a ::warning:: -- read that diff before merging; it is the only thing standing between an automated hash refresh and a silent relicense - sdcard payload pins (update_all.sh, wifi.sh): sha256 + size of the raw file at the new pinned commit, rewritten in place in scripts/fetch-sdcard-payload.sh - Buildroot pin (BUILDROOT_SHA256, root Makefile): transcribed from buildroot.org's GPG-signed release manifest (buildroot-.tar.gz.sign) -- the same signed file `make buildroot-showsig` prints, never a locally-computed sha256sum of the tarball (that remains forbidden; see the Makefile's own header comment) - azcopy pin: REBUILT, not fetched. Buildroot's own support/download/go-post-process re-ran `go mod vendor` over the newly pinned tag with the Go version the pinned Buildroot tree pins, and the resulting azcopy--go2.tar.gz was hashed -- the only way this value can be derived, since no URL serves that file (see package/azcopy/azcopy.hash's header). LICENSE and NOTICE.txt were re-hashed from the same tarball --- package/linux-rt/linux-rt.hash | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/linux-rt/linux-rt.hash b/package/linux-rt/linux-rt.hash index 3c2ad83..1151ce5 100644 --- a/package/linux-rt/linux-rt.hash +++ b/package/linux-rt/linux-rt.hash @@ -4,5 +4,5 @@ # header for the full rule; this file carries the same value that file held for the RT # line until Phase C moved the variant into package/linux-rt. scripts/hash-sync-kernel.sh # --pin=rt rewrites this line on a version bump. -sha256 01710ee01737dac492f1bae52becd057e08d20d11589089aa06accff415c28dd linux-7.2.4.tar.xz +sha256 55ddf0df8325d9dad96fcff7bd93977d22e3f50af06527572af59b77c7632b78 linux-7.2.5.tar.xz sha256 fb5a425bd3b3cd6071a3a9aff9909a859e7c1158d54d32e07658398cd67eb6a0 COPYING