From b39c568b23277a6b286db99c29daed83d28ad86e Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 7 Nov 2026 12:59:49 +0000 Subject: [PATCH] chore(deps): update keyring images --- targets/aarch64-alarm.conf | 2 +- targets/aarch64-aur.conf | 2 +- targets/aarch64-core.conf | 2 +- targets/aarch64-extra.conf | 2 +- targets/armv7h-alarm.conf | 2 +- targets/armv7h-aur.conf | 2 +- targets/armv7h-core.conf | 2 +- targets/armv7h-extra.conf | 2 +- targets/loong64-core.conf | 2 +- targets/loong64-extra.conf | 2 +- targets/powerpc-base-any.conf | 2 +- targets/powerpc-base.conf | 2 +- targets/powerpc64-base-any.conf | 2 +- targets/powerpc64-base.conf | 2 +- targets/powerpc64le-base-any.conf | 2 +- targets/powerpc64le-base.conf | 2 +- targets/riscv64-core.conf | 2 +- targets/riscv64-extra.conf | 2 +- tests/unit/40-lib.sh | 2 +- 19 files changed, 19 insertions(+), 19 deletions(-) diff --git a/targets/aarch64-alarm.conf b/targets/aarch64-alarm.conf index a4f980ce..b40afc69 100644 --- a/targets/aarch64-alarm.conf +++ b/targets/aarch64-alarm.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:e662cd178f5a31a31d2618a7fc5343643f801b5a28af20cfa3881bfdd7b44888 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:8dd307f37831cded8f6a8ec4e118d950e07953bf31d6285d82980e17268e4a28 keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/aarch64-aur.conf b/targets/aarch64-aur.conf index 614636a8..e0d832c0 100644 --- a/targets/aarch64-aur.conf +++ b/targets/aarch64-aur.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:e662cd178f5a31a31d2618a7fc5343643f801b5a28af20cfa3881bfdd7b44888 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:8dd307f37831cded8f6a8ec4e118d950e07953bf31d6285d82980e17268e4a28 keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/aarch64-core.conf b/targets/aarch64-core.conf index 09f11e27..179aea8a 100644 --- a/targets/aarch64-core.conf +++ b/targets/aarch64-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:e662cd178f5a31a31d2618a7fc5343643f801b5a28af20cfa3881bfdd7b44888 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:8dd307f37831cded8f6a8ec4e118d950e07953bf31d6285d82980e17268e4a28 keyring_platform = linux/arm64 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/aarch64-extra.conf b/targets/aarch64-extra.conf index ae90a928..ab24eb6c 100644 --- a/targets/aarch64-extra.conf +++ b/targets/aarch64-extra.conf @@ -34,7 +34,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:e662cd178f5a31a31d2618a7fc5343643f801b5a28af20cfa3881bfdd7b44888 +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:8dd307f37831cded8f6a8ec4e118d950e07953bf31d6285d82980e17268e4a28 keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-alarm.conf b/targets/armv7h-alarm.conf index 8e03c71c..9c4383d7 100644 --- a/targets/armv7h-alarm.conf +++ b/targets/armv7h-alarm.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:a7ed5c978f77c6557d16895266ae3fd8fb4a41088d286091a21d1da15297b9df +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:81e9ca009f3a9fe72a2bb5e4411cef98dbebe3a5aa0f24fbb318427a172316cb keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-aur.conf b/targets/armv7h-aur.conf index fbb08048..bd11f3a9 100644 --- a/targets/armv7h-aur.conf +++ b/targets/armv7h-aur.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:a7ed5c978f77c6557d16895266ae3fd8fb4a41088d286091a21d1da15297b9df +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:81e9ca009f3a9fe72a2bb5e4411cef98dbebe3a5aa0f24fbb318427a172316cb keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-core.conf b/targets/armv7h-core.conf index a3e653f6..e82338e0 100644 --- a/targets/armv7h-core.conf +++ b/targets/armv7h-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:a7ed5c978f77c6557d16895266ae3fd8fb4a41088d286091a21d1da15297b9df +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:81e9ca009f3a9fe72a2bb5e4411cef98dbebe3a5aa0f24fbb318427a172316cb keyring_platform = linux/arm/v7 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/armv7h-extra.conf b/targets/armv7h-extra.conf index 164f5e9c..c9f4e1e6 100644 --- a/targets/armv7h-extra.conf +++ b/targets/armv7h-extra.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:a7ed5c978f77c6557d16895266ae3fd8fb4a41088d286091a21d1da15297b9df +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:81e9ca009f3a9fe72a2bb5e4411cef98dbebe3a5aa0f24fbb318427a172316cb keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/loong64-core.conf b/targets/loong64-core.conf index b7ec7072..3c40d816 100644 --- a/targets/loong64-core.conf +++ b/targets/loong64-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # of it and never run. The x86_64 image keeps its own archlinux keyring, which # signs the port's any packages. # tag: loong64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:20e3d44aea16cc768424e40fa77870be4385163da1f41d7092e10e912b8a9930 +keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:1d645dd0c14e5b805b1302fc686b809a89f20fc4298e5b2406cd408e7f93df7c keyring_platform = linux/loong64 # Both keyring packages, installed from the snapshot before anything else is diff --git a/targets/loong64-extra.conf b/targets/loong64-extra.conf index 68387f45..1a4f1aa6 100644 --- a/targets/loong64-extra.conf +++ b/targets/loong64-extra.conf @@ -36,7 +36,7 @@ verify_platform = linux/amd64 # of it and never run. The x86_64 image keeps its own archlinux keyring, which # signs the port's any packages. # tag: loong64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:20e3d44aea16cc768424e40fa77870be4385163da1f41d7092e10e912b8a9930 +keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:1d645dd0c14e5b805b1302fc686b809a89f20fc4298e5b2406cd408e7f93df7c keyring_platform = linux/loong64 # Both keyring packages are in core: verify installs them from the promoted diff --git a/targets/powerpc-base-any.conf b/targets/powerpc-base-any.conf index bba7bb52..3c480cd7 100644 --- a/targets/powerpc-base-any.conf +++ b/targets/powerpc-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:b1c2fe6e717bfd5673af8fc21 verify_platform = linux/amd64 # tag: ppc -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:e217d5d67773e346a170a9a129d3871a27eaffd2540ae3905d1f07bd433c4308 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:3ede0a6cc899a0f1246ae9df58f44c01018012f8897f1e43061cf43df2aa11e2 keyring_platform = linux/ppc # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc-base.conf b/targets/powerpc-base.conf index 958d35d6..34729763 100644 --- a/targets/powerpc-base.conf +++ b/targets/powerpc-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:b1c2fe6e717bfd5673af8fc21 verify_platform = linux/amd64 # tag: ppc -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:e217d5d67773e346a170a9a129d3871a27eaffd2540ae3905d1f07bd433c4308 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:3ede0a6cc899a0f1246ae9df58f44c01018012f8897f1e43061cf43df2aa11e2 keyring_platform = linux/ppc # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/powerpc64-base-any.conf b/targets/powerpc64-base-any.conf index 316c68fd..37d9174a 100644 --- a/targets/powerpc64-base-any.conf +++ b/targets/powerpc64-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:b1c2fe6e717bfd5673af8fc21 verify_platform = linux/amd64 # tag: ppc64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:ecc01bb30fa22f7940432471c79f23c738c0025aabde3f9778f3d50b39cb00e9 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:55fd0e0cf3513a5bb25c74b031ceae830de12e55dcd595556b13bddc5ecc6fd9 keyring_platform = linux/ppc64 # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc64-base.conf b/targets/powerpc64-base.conf index 79c00659..4511b35c 100644 --- a/targets/powerpc64-base.conf +++ b/targets/powerpc64-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:b1c2fe6e717bfd5673af8fc21 verify_platform = linux/amd64 # tag: ppc64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:ecc01bb30fa22f7940432471c79f23c738c0025aabde3f9778f3d50b39cb00e9 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:55fd0e0cf3513a5bb25c74b031ceae830de12e55dcd595556b13bddc5ecc6fd9 keyring_platform = linux/ppc64 # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/powerpc64le-base-any.conf b/targets/powerpc64le-base-any.conf index 1b8be54c..5b4de562 100644 --- a/targets/powerpc64le-base-any.conf +++ b/targets/powerpc64le-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:b1c2fe6e717bfd5673af8fc21 verify_platform = linux/amd64 # tag: ppc64le -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:b0ce0dcc3248e64740d6f809ffa7756b9579e1a982dfe8ddae1bd81a89ce5f5f +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:13c0d71fb2c0b422eefa926fcbdce591ccfad9aefbe6b17a857f82e0160beb15 keyring_platform = linux/ppc64le # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc64le-base.conf b/targets/powerpc64le-base.conf index 089c1530..f52d08cf 100644 --- a/targets/powerpc64le-base.conf +++ b/targets/powerpc64le-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:b1c2fe6e717bfd5673af8fc21 verify_platform = linux/amd64 # tag: ppc64le -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:b0ce0dcc3248e64740d6f809ffa7756b9579e1a982dfe8ddae1bd81a89ce5f5f +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:13c0d71fb2c0b422eefa926fcbdce591ccfad9aefbe6b17a857f82e0160beb15 keyring_platform = linux/ppc64le # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/riscv64-core.conf b/targets/riscv64-core.conf index a25b7e2b..461dec80 100644 --- a/targets/riscv64-core.conf +++ b/targets/riscv64-core.conf @@ -35,7 +35,7 @@ verify_platform = linux/amd64 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the # x86_64 image keeps as its own; the image follows the port if that changes. # tag: riscv64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:9f73d51b87cb190069dcb2c30fbdb8315967c43061f7491d3d7e65524a1eb652 +keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:6ab2676d72ae24cbd102f07563f2bcd4e7a833619b031cd9d809c245991b2c1f keyring_platform = linux/riscv64 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/riscv64-extra.conf b/targets/riscv64-extra.conf index 2d1ad71c..bdd5e30d 100644 --- a/targets/riscv64-extra.conf +++ b/targets/riscv64-extra.conf @@ -40,7 +40,7 @@ verify_platform = linux/amd64 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the # x86_64 image keeps as its own; the image follows the port if that changes. # tag: riscv64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:9f73d51b87cb190069dcb2c30fbdb8315967c43061f7491d3d7e65524a1eb652 +keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:6ab2676d72ae24cbd102f07563f2bcd4e7a833619b031cd9d809c245991b2c1f keyring_platform = linux/riscv64 # The keyring package is in core: verify installs it from the promoted diff --git a/tests/unit/40-lib.sh b/tests/unit/40-lib.sh index 412f4b97..204f0446 100644 --- a/tests/unit/40-lib.sh +++ b/tests/unit/40-lib.sh @@ -72,7 +72,7 @@ refused "a line that is not key = value" "$work/t6/x86_64-core.conf" # The keys that set verify's trust root #---------------------------------------------------------------------------# # tag: aarch64 -IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:e662cd178f5a31a31d2618a7fc5343643f801b5a28af20cfa3881bfdd7b44888' +IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:8dd307f37831cded8f6a8ec4e118d950e07953bf31d6285d82980e17268e4a28' # trust NAME LINES...: a target file of x86_64 extra, with x86_64-core beside it trust() { local d="$work/trust-$1"