From 7b6048a658a03d6b1afc087e61f2f879248c18a0 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 9 Nov 2026 17:52:53 +0000 Subject: [PATCH] chore(deps): update keyring images --- targets/aarch64-alarm.conf | 2 +- targets/aarch64-aur.conf | 2 +- targets/aarch64-core.conf | 2 +- targets/aarch64-extra.conf | 2 +- targets/armv7h-alarm.conf | 2 +- targets/armv7h-aur.conf | 2 +- targets/armv7h-core.conf | 2 +- targets/armv7h-extra.conf | 2 +- targets/loong64-core.conf | 2 +- targets/loong64-extra.conf | 2 +- targets/powerpc-base-any.conf | 2 +- targets/powerpc-base.conf | 2 +- targets/powerpc64-base-any.conf | 2 +- targets/powerpc64-base.conf | 2 +- targets/powerpc64le-base-any.conf | 2 +- targets/powerpc64le-base.conf | 2 +- targets/riscv64-core.conf | 2 +- targets/riscv64-extra.conf | 2 +- tests/unit/40-lib.sh | 2 +- 19 files changed, 19 insertions(+), 19 deletions(-) diff --git a/targets/aarch64-alarm.conf b/targets/aarch64-alarm.conf index 73a51d2e..d5dbc2d9 100644 --- a/targets/aarch64-alarm.conf +++ b/targets/aarch64-alarm.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:cf6ab53960fecf811e282ac9971234e92c9e496f4bffde342b5840123fd6b88a +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:194f420dc71b54eab7dcfef9c9ca0c0b80f1e0f1f00f08ce33d70f01a572132e keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/aarch64-aur.conf b/targets/aarch64-aur.conf index 30ca9ed2..edc8d062 100644 --- a/targets/aarch64-aur.conf +++ b/targets/aarch64-aur.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:cf6ab53960fecf811e282ac9971234e92c9e496f4bffde342b5840123fd6b88a +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:194f420dc71b54eab7dcfef9c9ca0c0b80f1e0f1f00f08ce33d70f01a572132e keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/aarch64-core.conf b/targets/aarch64-core.conf index b8151903..cd4bee0b 100644 --- a/targets/aarch64-core.conf +++ b/targets/aarch64-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:cf6ab53960fecf811e282ac9971234e92c9e496f4bffde342b5840123fd6b88a +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:194f420dc71b54eab7dcfef9c9ca0c0b80f1e0f1f00f08ce33d70f01a572132e keyring_platform = linux/arm64 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/aarch64-extra.conf b/targets/aarch64-extra.conf index 76e50904..d8fa4299 100644 --- a/targets/aarch64-extra.conf +++ b/targets/aarch64-extra.conf @@ -34,7 +34,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: aarch64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:cf6ab53960fecf811e282ac9971234e92c9e496f4bffde342b5840123fd6b88a +keyring_image = ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:194f420dc71b54eab7dcfef9c9ca0c0b80f1e0f1f00f08ce33d70f01a572132e keyring_platform = linux/arm64 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-alarm.conf b/targets/armv7h-alarm.conf index 53d96df4..3a953079 100644 --- a/targets/armv7h-alarm.conf +++ b/targets/armv7h-alarm.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:10c60ccfefeb7684e1cc0df9577da3a829973c41ebb263081200ee9d67c71180 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:ac0a384ef159eb1a1ea986c5410bd32b2497cced3626c41b0a9f241331173611 keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-aur.conf b/targets/armv7h-aur.conf index 59f5d46b..9421e16c 100644 --- a/targets/armv7h-aur.conf +++ b/targets/armv7h-aur.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:10c60ccfefeb7684e1cc0df9577da3a829973c41ebb263081200ee9d67c71180 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:ac0a384ef159eb1a1ea986c5410bd32b2497cced3626c41b0a9f241331173611 keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/armv7h-core.conf b/targets/armv7h-core.conf index 1a7486e3..2cffec86 100644 --- a/targets/armv7h-core.conf +++ b/targets/armv7h-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:10c60ccfefeb7684e1cc0df9577da3a829973c41ebb263081200ee9d67c71180 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:ac0a384ef159eb1a1ea986c5410bd32b2497cced3626c41b0a9f241331173611 keyring_platform = linux/arm/v7 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/armv7h-extra.conf b/targets/armv7h-extra.conf index 3179ad5a..17911af4 100644 --- a/targets/armv7h-extra.conf +++ b/targets/armv7h-extra.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # pkgforge-dev/docker-archlinux (archlinuxarm.gpg and its trust), copied out # of it and never run. The x86_64 image keeps its own archlinux keyring. # tag: armv7h -keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:10c60ccfefeb7684e1cc0df9577da3a829973c41ebb263081200ee9d67c71180 +keyring_image = ghcr.io/pkgforge-dev/archlinux:armv7h@sha256:ac0a384ef159eb1a1ea986c5410bd32b2497cced3626c41b0a9f241331173611 keyring_platform = linux/arm/v7 # The keyring package is in core: verify installs it from the promoted diff --git a/targets/loong64-core.conf b/targets/loong64-core.conf index f933c142..37f0e396 100644 --- a/targets/loong64-core.conf +++ b/targets/loong64-core.conf @@ -30,7 +30,7 @@ verify_platform = linux/amd64 # of it and never run. The x86_64 image keeps its own archlinux keyring, which # signs the port's any packages. # tag: loong64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:af2f0b8f5e9fd37cadae154dab31d9029de33abcb74fc1bdddb8d9af78a749fb +keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:bcc7f2dbb9f8ffd09b5b9094babb7dc8ccb9c042fd5fe14cbda193d156e93869 keyring_platform = linux/loong64 # Both keyring packages, installed from the snapshot before anything else is diff --git a/targets/loong64-extra.conf b/targets/loong64-extra.conf index 62960c09..49953505 100644 --- a/targets/loong64-extra.conf +++ b/targets/loong64-extra.conf @@ -36,7 +36,7 @@ verify_platform = linux/amd64 # of it and never run. The x86_64 image keeps its own archlinux keyring, which # signs the port's any packages. # tag: loong64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:af2f0b8f5e9fd37cadae154dab31d9029de33abcb74fc1bdddb8d9af78a749fb +keyring_image = ghcr.io/pkgforge-dev/archlinux:loong64@sha256:bcc7f2dbb9f8ffd09b5b9094babb7dc8ccb9c042fd5fe14cbda193d156e93869 keyring_platform = linux/loong64 # Both keyring packages are in core: verify installs them from the promoted diff --git a/targets/powerpc-base-any.conf b/targets/powerpc-base-any.conf index 1f1469e1..4bd0b7d2 100644 --- a/targets/powerpc-base-any.conf +++ b/targets/powerpc-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:b1c2fe6e717bfd5673af8fc21 verify_platform = linux/amd64 # tag: ppc -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:bf7deb7c4b5780072f16d00f8c20f620fe0213be9dbe78f039910f501fb42196 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:42b5a6db0ce78f1cdfa624c4d64ac719edcdca3830a4a2c58117dd72fad3dc71 keyring_platform = linux/ppc # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc-base.conf b/targets/powerpc-base.conf index a8f666e9..580ba5e0 100644 --- a/targets/powerpc-base.conf +++ b/targets/powerpc-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:b1c2fe6e717bfd5673af8fc21 verify_platform = linux/amd64 # tag: ppc -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:bf7deb7c4b5780072f16d00f8c20f620fe0213be9dbe78f039910f501fb42196 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc@sha256:42b5a6db0ce78f1cdfa624c4d64ac719edcdca3830a4a2c58117dd72fad3dc71 keyring_platform = linux/ppc # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/powerpc64-base-any.conf b/targets/powerpc64-base-any.conf index 932b0a05..4c0bda94 100644 --- a/targets/powerpc64-base-any.conf +++ b/targets/powerpc64-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:b1c2fe6e717bfd5673af8fc21 verify_platform = linux/amd64 # tag: ppc64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:0357f94524cbbce0f35a1d4ef3f4cf8766669055458103ec45f20a59fbfa4be7 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:daa98d5aa8d4836e691248206668f2161da1c701236dd55aa91daa1e3472997d keyring_platform = linux/ppc64 # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc64-base.conf b/targets/powerpc64-base.conf index 3a6a3946..17a99802 100644 --- a/targets/powerpc64-base.conf +++ b/targets/powerpc64-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:b1c2fe6e717bfd5673af8fc21 verify_platform = linux/amd64 # tag: ppc64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:0357f94524cbbce0f35a1d4ef3f4cf8766669055458103ec45f20a59fbfa4be7 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64@sha256:daa98d5aa8d4836e691248206668f2161da1c701236dd55aa91daa1e3472997d keyring_platform = linux/ppc64 # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/powerpc64le-base-any.conf b/targets/powerpc64le-base-any.conf index 3955a6c7..878accb1 100644 --- a/targets/powerpc64le-base-any.conf +++ b/targets/powerpc64le-base-any.conf @@ -18,7 +18,7 @@ verify_image = docker.io/library/archlinux:base@sha256:b1c2fe6e717bfd5673af8fc21 verify_platform = linux/amd64 # tag: ppc64le -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:5fac02ed54c8de97527929e2626ba9b46aeca05113727943c916438752c1f969 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:2d0ec20c48ae3c234ddc85bf3d6b4eba85df02e504d4d7316a27c96906f50294 keyring_platform = linux/ppc64le # The keyring package is in this repository, so no keyring_from. diff --git a/targets/powerpc64le-base.conf b/targets/powerpc64le-base.conf index abe601d2..285a797d 100644 --- a/targets/powerpc64le-base.conf +++ b/targets/powerpc64le-base.conf @@ -17,7 +17,7 @@ verify_image = docker.io/library/archlinux:base@sha256:b1c2fe6e717bfd5673af8fc21 verify_platform = linux/amd64 # tag: ppc64le -keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:5fac02ed54c8de97527929e2626ba9b46aeca05113727943c916438752c1f969 +keyring_image = ghcr.io/pkgforge-dev/archlinux:ppc64le@sha256:2d0ec20c48ae3c234ddc85bf3d6b4eba85df02e504d4d7316a27c96906f50294 keyring_platform = linux/ppc64le # The keyring package is in base-any. keyring_from names that target of this diff --git a/targets/riscv64-core.conf b/targets/riscv64-core.conf index 2588d056..5be5b876 100644 --- a/targets/riscv64-core.conf +++ b/targets/riscv64-core.conf @@ -35,7 +35,7 @@ verify_platform = linux/amd64 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the # x86_64 image keeps as its own; the image follows the port if that changes. # tag: riscv64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:5bbbb85103e4fc74bc828d1a0807b179736ac4acca76f6bc7c24d0acd85e12fe +keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:31265fd851849c15b52fde968566f9e10a076ac22a696f651a9af242753680ec keyring_platform = linux/riscv64 # The keyring package, installed from the snapshot before anything else is diff --git a/targets/riscv64-extra.conf b/targets/riscv64-extra.conf index ac36c0cc..41325afe 100644 --- a/targets/riscv64-extra.conf +++ b/targets/riscv64-extra.conf @@ -40,7 +40,7 @@ verify_platform = linux/amd64 # signature in the port is by a key in archlinux.gpg (2026-10-14), which the # x86_64 image keeps as its own; the image follows the port if that changes. # tag: riscv64 -keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:5bbbb85103e4fc74bc828d1a0807b179736ac4acca76f6bc7c24d0acd85e12fe +keyring_image = ghcr.io/pkgforge-dev/archlinux:riscv64@sha256:31265fd851849c15b52fde968566f9e10a076ac22a696f651a9af242753680ec keyring_platform = linux/riscv64 # The keyring package is in core: verify installs it from the promoted diff --git a/tests/unit/40-lib.sh b/tests/unit/40-lib.sh index 66b97f65..497e644f 100644 --- a/tests/unit/40-lib.sh +++ b/tests/unit/40-lib.sh @@ -72,7 +72,7 @@ refused "a line that is not key = value" "$work/t6/x86_64-core.conf" # The keys that set verify's trust root #---------------------------------------------------------------------------# # tag: aarch64 -IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:cf6ab53960fecf811e282ac9971234e92c9e496f4bffde342b5840123fd6b88a' +IMG='ghcr.io/pkgforge-dev/archlinux:aarch64@sha256:194f420dc71b54eab7dcfef9c9ca0c0b80f1e0f1f00f08ce33d70f01a572132e' # trust NAME LINES...: a target file of x86_64 extra, with x86_64-core beside it trust() { local d="$work/trust-$1"