From 4291d407f182661c146f7ee4720c5e49ff095279 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 19 Oct 2026 13:11:56 +0000 Subject: [PATCH] chore(deps): update keyring images --- targets/aarch64-alarm.conf | 2 +- targets/aarch64-aur.conf | 2 +- targets/aarch64-core.conf | 2 +- targets/aarch64-extra.conf | 2 +- targets/armv7h-alarm.conf | 2 +- targets/armv7h-aur.conf | 2 +- targets/armv7h-core.conf | 2 +- targets/armv7h-extra.conf | 2 +- targets/loong64-core.conf | 2 +- targets/loong64-extra.conf | 2 +- targets/powerpc-base-any.conf | 2 +- targets/powerpc-base.conf | 2 +- targets/powerpc64-base-any.conf | 2 +- targets/powerpc64-base.conf | 2 +- targets/powerpc64le-base-any.conf | 2 +- targets/powerpc64le-base.conf | 2 +- targets/riscv64-core.conf | 2 +- targets/riscv64-extra.conf | 2 +- tests/unit/40-lib.sh | 2 +- 19 files changed, 19 insertions(+), 19 deletions(-) diff --git a/targets/aarch64-alarm.conf b/targets/aarch64-alarm.conf index abfddd2b..2d2d3aae 100644 --- a/targets/aarch64-alarm.conf +++ b/targets/aarch64-alarm.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:4f55dcbacf69dc166612ffa30b35356214bf18a1cd42ecee9f6b0b02d683b3b9 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:da3c0b6848324696acb119d2df1c80f65add9cad16e51ef1e6757f7899d58bd4 keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/aarch64-aur.conf b/targets/aarch64-aur.conf index e7abfdb3..164ea35a 100644 --- a/targets/aarch64-aur.conf +++ b/targets/aarch64-aur.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:4f55dcbacf69dc166612ffa30b35356214bf18a1cd42ecee9f6b0b02d683b3b9 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:da3c0b6848324696acb119d2df1c80f65add9cad16e51ef1e6757f7899d58bd4 keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/aarch64-core.conf b/targets/aarch64-core.conf index 143d0027..4a93002e 100644 --- a/targets/aarch64-core.conf +++ b/targets/aarch64-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:4f55dcbacf69dc166612ffa30b35356214bf18a1cd42ecee9f6b0b02d683b3b9 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:da3c0b6848324696acb119d2df1c80f65add9cad16e51ef1e6757f7899d58bd4 keyring_platform = linux/arm64 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/aarch64-extra.conf b/targets/aarch64-extra.conf index 586ade11..4ecb0b17 100644 --- a/targets/aarch64-extra.conf +++ b/targets/aarch64-extra.conf @@ -34,7 +34,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:4f55dcbacf69dc166612ffa30b35356214bf18a1cd42ecee9f6b0b02d683b3b9 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:da3c0b6848324696acb119d2df1c80f65add9cad16e51ef1e6757f7899d58bd4 keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-alarm.conf b/targets/armv7h-alarm.conf index 45618dd4..4fad8b76 100644 --- a/targets/armv7h-alarm.conf +++ b/targets/armv7h-alarm.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:88847256cd1f522563f0c06b627db8a4f418cebebe5391cc8747e0bf869e2073 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:eb7968e6a9f91406f3b94430bb9775ef7ee86a894151720e8259d5820b6ae800 keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-aur.conf b/targets/armv7h-aur.conf index a997d415..ce906cb6 100644 --- a/targets/armv7h-aur.conf +++ b/targets/armv7h-aur.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:88847256cd1f522563f0c06b627db8a4f418cebebe5391cc8747e0bf869e2073 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:eb7968e6a9f91406f3b94430bb9775ef7ee86a894151720e8259d5820b6ae800 keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-core.conf b/targets/armv7h-core.conf index 76cd77dd..6c25874f 100644 --- a/targets/armv7h-core.conf +++ b/targets/armv7h-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:88847256cd1f522563f0c06b627db8a4f418cebebe5391cc8747e0bf869e2073 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:eb7968e6a9f91406f3b94430bb9775ef7ee86a894151720e8259d5820b6ae800 keyring_platform = linux/arm/v7 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/armv7h-extra.conf b/targets/armv7h-extra.conf index dca26aeb..357ca843 100644 --- a/targets/armv7h-extra.conf +++ b/targets/armv7h-extra.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:88847256cd1f522563f0c06b627db8a4f418cebebe5391cc8747e0bf869e2073 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:eb7968e6a9f91406f3b94430bb9775ef7ee86a894151720e8259d5820b6ae800 keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/loong64-core.conf b/targets/loong64-core.conf index be335097..343ad332 100644 --- a/targets/loong64-core.conf +++ b/targets/loong64-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # of it and never run. The x86_64 image keeps its own archlinux keyring, which # signs the port's any packages. # tag: loong64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:87ea8562e551d289bbbba1908b8a19b37bf8a0ec1e7fbb807bc00a455210d2d0 +keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:5bbde0e9d9d18408e501dcbee489b4c75f68bcb136592083bebd37df85ea40ce keyring_platform = linux/loong64 # Both keyring packages, installed from the snapshot before anything else is diff --git a/targets/loong64-extra.conf b/targets/loong64-extra.conf index 775c12f9..1b944e53 100644 --- a/targets/loong64-extra.conf +++ b/targets/loong64-extra.conf @@ -36,7 +36,7 @@ verify_platform = linux/amd64 # of it and never run. The x86_64 image keeps its own archlinux keyring, which # signs the port's any packages. # tag: loong64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:87ea8562e551d289bbbba1908b8a19b37bf8a0ec1e7fbb807bc00a455210d2d0 +keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:5bbde0e9d9d18408e501dcbee489b4c75f68bcb136592083bebd37df85ea40ce keyring_platform = linux/loong64 # Both keyring packages are in core: verify installs them from the promoted diff --git a/targets/powerpc-base-any.conf b/targets/powerpc-base-any.conf index 154c9475..55425cf7 100644 --- a/targets/powerpc-base-any.conf +++ b/targets/powerpc-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:3c64b538588416593f69a1aeb verify_platform = linux/amd64 # tag: ppc -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:cf484e871f00b4d840e2cc6e918d3117b9e8d5a66396d98487e9f35c7492905e +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:62452fae4826d982ae7d709a1ee2057ad6b8f79281a71e643a0e88012e9e13c2 keyring_platform = linux/ppc # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc-base.conf b/targets/powerpc-base.conf index ddbc0268..cd2db11e 100644 --- a/targets/powerpc-base.conf +++ b/targets/powerpc-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:3c64b538588416593f69a1aeb verify_platform = linux/amd64 # tag: ppc -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:cf484e871f00b4d840e2cc6e918d3117b9e8d5a66396d98487e9f35c7492905e +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:62452fae4826d982ae7d709a1ee2057ad6b8f79281a71e643a0e88012e9e13c2 keyring_platform = linux/ppc # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/powerpc64-base-any.conf b/targets/powerpc64-base-any.conf index 7be98390..f3471f3a 100644 --- a/targets/powerpc64-base-any.conf +++ b/targets/powerpc64-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:3c64b538588416593f69a1aeb verify_platform = linux/amd64 # tag: ppc64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:fcff0901e12386250da3af86889a00a838e0c82975a385e1ec0127484cbcf526 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:905446bf22114f9b94ce30b5443954e701cc208c2707617a51fb1d2242096eea keyring_platform = linux/ppc64 # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc64-base.conf b/targets/powerpc64-base.conf index 2f33e999..b5873cf2 100644 --- a/targets/powerpc64-base.conf +++ b/targets/powerpc64-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:3c64b538588416593f69a1aeb verify_platform = linux/amd64 # tag: ppc64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:fcff0901e12386250da3af86889a00a838e0c82975a385e1ec0127484cbcf526 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:905446bf22114f9b94ce30b5443954e701cc208c2707617a51fb1d2242096eea keyring_platform = linux/ppc64 # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/powerpc64le-base-any.conf b/targets/powerpc64le-base-any.conf index 6d334fbb..ab3e60b9 100644 --- a/targets/powerpc64le-base-any.conf +++ b/targets/powerpc64le-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:3c64b538588416593f69a1aeb verify_platform = linux/amd64 # tag: ppc64le -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:e112a1ace94c57c64f6fe8f4d1b91896cbf280372afbfec14e26625635480455 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:cf15b6d6855a31dd0be34a0881ff888095b557cbcca7575e000b8d7dfb107bc5 keyring_platform = linux/ppc64le # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc64le-base.conf b/targets/powerpc64le-base.conf index 075f2371..aee8b75f 100644 --- a/targets/powerpc64le-base.conf +++ b/targets/powerpc64le-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:3c64b538588416593f69a1aeb verify_platform = linux/amd64 # tag: ppc64le -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:e112a1ace94c57c64f6fe8f4d1b91896cbf280372afbfec14e26625635480455 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:cf15b6d6855a31dd0be34a0881ff888095b557cbcca7575e000b8d7dfb107bc5 keyring_platform = linux/ppc64le # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/riscv64-core.conf b/targets/riscv64-core.conf index 8dd8d3e5..74ca724a 100644 --- a/targets/riscv64-core.conf +++ b/targets/riscv64-core.conf @@ -35,7 +35,7 @@ verify_platform = linux/amd64 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the # x86_64 image keeps as its own; the image follows the port if that changes. # tag: riscv64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:4f73be803865cade5558d824a0d6f2595fd927539474383ef058d26d8278e42f +keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:23681d447c97fad28ece404e5f5f73ba5330e328317f4fa1b09014d63fd5170a keyring_platform = linux/riscv64 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/riscv64-extra.conf b/targets/riscv64-extra.conf index a114004c..392eb20e 100644 --- a/targets/riscv64-extra.conf +++ b/targets/riscv64-extra.conf @@ -40,7 +40,7 @@ verify_platform = linux/amd64 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the # x86_64 image keeps as its own; the image follows the port if that changes. # tag: riscv64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:4f73be803865cade5558d824a0d6f2595fd927539474383ef058d26d8278e42f +keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:23681d447c97fad28ece404e5f5f73ba5330e328317f4fa1b09014d63fd5170a keyring_platform = linux/riscv64 # The keyring package is in core: verify installs it from the promoted diff --git a/tests/unit/40-lib.sh b/tests/unit/40-lib.sh index 7bf11f8b..10401517 100644 --- a/tests/unit/40-lib.sh +++ b/tests/unit/40-lib.sh @@ -72,7 +72,7 @@ refused "a line that is not key = value" "$work/t6/x86_64-core.conf" # The keys that set verify's trust root #---------------------------------------------------------------------------# # tag: aarch64 -IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:4f55dcbacf69dc166612ffa30b35356214bf18a1cd42ecee9f6b0b02d683b3b9' +IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:da3c0b6848324696acb119d2df1c80f65add9cad16e51ef1e6757f7899d58bd4' # trust NAME LINES...: a target file of x86_64 extra, with x86_64-core beside it trust() { local d="$work/trust-$1"