Skip to content

Update stacked: 2 packages - #527

Merged
twitchyliquid64 merged 2 commits into
mainfrom
update-stacked-2026-07-27-d305e8b9
Jul 27, 2026
Merged

Update stacked: 2 packages#527
twitchyliquid64 merged 2 commits into
mainfrom
update-stacked-2026-07-27-d305e8b9

Conversation

@gominimal-pkgmgr-mgr

Copy link
Copy Markdown
Contributor

Update base-soup (2 packages)

Note

These packages declare replace_on_cycle in their build.ncl, so
they participate in the toolchain rebuild graph and one hash change
cascades through the set. Bundling ensures the cascading rebuild
lands as a single unit, even when only one package is bumping —
avoids back-to-back full rebuilds from singleton PRs.

Warning

Pkgscan: 2 new signals introduced across bundle members.
Each member's diff was compared against its prior version. Review carefully — base-soup updates touch the toolchain core, so a malicious bump here has cascade-wide impact.

Package Severity File Line Capability (MBC) Pattern
binutils MEDIUM binutils (upstream release) 0 metadata/recent-bump upstream release <12h ago
binutils-arm-none-eabi MEDIUM binutils-arm-none-eabi (upstream release) 0 metadata/recent-bump upstream release <12h ago

Note

Build risk — 24 dependents across the tree. Package(s) that
build- or runtime-depend on a member of this bundle may need a rebuild,
or could FTBFS on an API/ABI change. Informational (not blocking) — a
heads-up for the reviewer on what this bump can ripple into.

Bundle member Dependents
binutils 23 — acl, attr, bash, bash-bootstrap, coreutils, diffutils, findutils, gcc (+15 more)
binutils-arm-none-eabi 1 — gcc-arm-none-eabi

Summary

Package Old New Source
binutils 2.46.1 2.47 gnu:binutils:operator-pinned
binutils-arm-none-eabi 2.46.1 2.47 gnu:binutils:operator-pinned

Warning

Touches toolchain core: binutils. These packages rebuild against each other (gcc compiles against glibc headers, glibc links against gcc's runtime, binutils provides the linker both invoke), so the rebuild ordering is more delicate than for the rest of the cycle set. Verify the buildbot rebuilds them in the right order before merging.

Per-package details

binutils 2.46.1 → 2.47
  • SHA256: e127a709cba24c76...154ab23b60070e8f...
  • Size: 28.6 MB → 29.0 MB
  • Source: gs://minimal-staging-archives/binutils-2.46.1.tar.xzgs://minimal-staging-archives/binutils-2.47.tar.xz
  • Released: 10 hours ago (2026-07-26)
  • License: (GPL-2.0-only AND GPL-3.0-only AND LGPL-2.0-only) (source: tarball)
binutils-arm-none-eabi 2.46.1 → 2.47
  • SHA256: e127a709cba24c76...154ab23b60070e8f...
  • Size: 29.0 MB
  • Source: https://mirrors.kernel.org/gnu/binutils/binutils-2.46.1.tar.xzhttps://mirrors.kernel.org/gnu/binutils/binutils-2.47.tar.xz
  • Released: 10 hours ago (2026-07-26)
  • License: (GPL-2.0-only AND GPL-3.0-only AND LGPL-2.0-only) (source: tarball)

Created by pkgmgr

@twitchyliquid64
twitchyliquid64 added this pull request to the merge queue Jul 27, 2026
Merged via the queue into main with commit 0f43a4a Jul 27, 2026
9 checks passed
@twitchyliquid64
twitchyliquid64 deleted the update-stacked-2026-07-27-d305e8b9 branch July 27, 2026 04:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant