Weekly portage-stable package updates 2026-09-07 by github-actions[bot] · Pull Request #4263 · flatcar/scripts

github-actions · 2026-09-07T07:26:33Z

CI: https://jenkins.flatcar.org/job/container/job/sdk/194/cldsv/

Closes flatcar/Flatcar#2346
Closes flatcar/Flatcar#2352
Closes flatcar/Flatcar#2359
Closes flatcar/Flatcar#2385
Closes flatcar/Flatcar#2401
Closes flatcar/Flatcar#2402
Closes flatcar/Flatcar#2403
Closes flatcar/Flatcar#2404
Closes flatcar/Flatcar#2406

--

app-admin/etcd-wrapper: [PROD] [DEV]
- from 3.5.16 to 3.5.33
- bumped to match dev-db/etcd
app-arch/unzip: [PROD] [DEV]
- still at 6.0_p31
- package became stable on 'amd64'
- package became stable on 'arm64'
app-arch/zip: [PROD] [DEV]
- still at 3.0_p16
- package became stable on 'amd64'
- package became stable on 'arm64'
app-containers/docker: [SYSEXT-DOCKER]
- from 29.5.2 to 29.8.0
- fixes CVE-2026-46680
  - update: docker Flatcar#2346
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- build dependencies:
  - changes for dev-lang/go:
    - changed version constraint from >=1.25.5 to >=1.26.3
- runtime dependencies:
  - changes for app-containers/docker-cli weak blocker:
    - changed version constraint from <29.5.2 to <29.8.0
- release notes: https://github.com/moby/moby/releases/tag/docker-v29.8.0 https://github.com/moby/moby/releases/tag/docker-v29.7.0 https://github.com/moby/moby/releases/tag/docker-v29.6.0
app-containers/docker-cli: [SYSEXT-DOCKER]
- from 29.5.2 to 29.8.0
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- build dependencies:
  - changes for dev-lang/go:
    - changed version constraint from >=1.25.0 to >=1.26.3
- release notes: https://github.com/moby/moby/releases/tag/docker-v29.8.0 https://github.com/moby/moby/releases/tag/docker-v29.7.0 https://github.com/moby/moby/releases/tag/docker-v29.6.0
app-containers/incus: [SYSEXT-INCUS]
- from 7.3-r1 to 7.4
- fixes CVE-2026-81500, CVE-2026-81501
  - update: app-containers/incus Flatcar#2402
- build dependencies:
  - changes for dev-lang/go:
    - changed version constraint from >=1.25.12 to >=1.26.7
- release notes: https://discuss.linuxcontainers.org/t/incus-7-4-has-been-released/27169
app-crypt/pinentry: [PROD] [DEV]
- from 1.3.2-r1 to 1.3.3
- release notes: https://raw.githubusercontent.com/gpg/pinentry/refs/tags/pinentry-1.3.3/NEWS
app-editors/nano:
- from 9.1 to 9.2
- release notes: https://lists.gnu.org/archive/html/info-gnu/2026-07/msg00007.html
app-portage/gemato:
- from 20.12 to 20.13
- dependencies:
  - added a dependency 'dev-lang/python:3.13[threads(+),ssl(+)]' for USE 'python_targets_python3_13?'
- release notes: https://github.com/gentoo/gemato/commits/v20.13/
dev-db/etcd: [PROD] [DEV]
- from 3.5.18 to 3.5.33
- fixes CVE-2025-22869, CVE-2025-30204, CVE-2026-33186, CVE-2026-73500
  - update: etcdctl / dev-db/etcd Flatcar#2352
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- build dependencies:
  - added a dependency '>=dev-lang/go-1.25.12'
- release notes: https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.5.md#v3533-2026-07-23
dev-lang/python: [AZURE] [DEV] [GCE] [SYSEXT-PYTHON]
- from 3.13.14 to 3.13.15
- fixes CVE-2026-15308
  - update: python Flatcar#2359
- build dependencies:
  - changes for sec-keys/openpgp-keys-python with USE conditionals 'verify-sig?':
    - changed version constraint from >=20221025 to >=20260805
- release notes: https://docs.python.org/release/3.13.15/whatsnew/changelog.html#python-3-13-15-final
dev-lang/rust:
- from 1.96.1 to 1.97.1
- build dependencies:
  - added a dependency 'dev-lang/rust:1.97.1' for USE '||'
  - added a dependency 'dev-lang/rust-bin:1.97.1' for USE '||'
- release notes: https://blog.rust-lang.org/2026/07/16/Rust-1.97.1/ https://blog.rust-lang.org/2026/07/09/Rust-1.97.0/
dev-lang/rust-common:
- from 1.96.1 to 1.97.1
dev-lang/swig:
- from 4.2.1 to 4.3.1
- package became unstable on 'arm64'
- release notes: https://github.com/swig/swig/blob/v4.3.1/RELEASENOTES
dev-libs/expat: [PROD] [DEV]
- from 2.8.3 to 2.8.4
- fixes CVE-2026-66046, CVE-2026-76641, CVE-2026-76957, CVE-2026-76956
  - update: dev-libs/expat Flatcar#2401
- release notes: https://github.com/libexpat/libexpat/blob/R_2_8_4/expat/Changes
dev-libs/glib: [PROD] [DEV]
- still at 2.88.3
- package became stable on 'arm64'
dev-libs/jansson: [PROD] [DEV]
- from 2.14.1 to 2.15.1
- release notes: https://jansson.readthedocs.io/en/latest/changes.html#version-2-15-1
dev-libs/libgcrypt: [PROD] [DEV]
- from 1.12.2 to 1.12.3-r1
- fixes libgcrypt-20260826
  - update: dev-libs/libgcrypt Flatcar#2404
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- release notes: https://lists.gnu.org/archive/html/info-gnu/2026-08/msg00007.html
dev-libs/libksba: [PROD] [DEV]
- from 1.8.0 to 1.8.1
- fixes libksba-20260824
  - update: dev-libs/libksba Flatcar#2406
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- release notes: https://dev.gnupg.org/T8253.html
dev-python/cffi:
- from 2.0.0 to 2.1.1
- licenses:
  - dropped license 'MIT'
  - added license 'MIT-0'
- release notes: https://raw.githubusercontent.com/python-cffi/cffi/refs/tags/v2.1.1/doc/source/whatsnew.rst
dev-python/cryptography:
- from 49.0.0 to 50.0.0
- release notes: https://raw.githubusercontent.com/pyca/cryptography/refs/tags/50.0.0/CHANGELOG.rst
dev-python/flit-core:
- from 3.12.0 to 4.0.2
- dependencies:
  - added a dependency 'dev-lang/python:3.13' for USE 'python_targets_python3_13?'
- release notes: https://raw.githubusercontent.com/pypa/flit/refs/tags/4.0.2/doc/history.rst
dev-python/packaging: [SYSEXT-PYTHON]
- from 26.2 to 26.3
- release notes: https://github.com/pypa/packaging/releases/tag/26.3
dev-python/pygments: [SYSEXT-PYTHON]
- from 2.19.2 to 2.20.0
- dependencies:
  - added a dependency 'dev-lang/python:3.13' for USE 'python_targets_python3_13?'
- release notes: https://github.com/pygments/pygments/releases/tag/2.20.0
dev-python/setuptools-scm: [SYSEXT-PYTHON]
- from 10.1.2 to 10.2.1
- build and runtime dependencies:
  - added a dependency '>=dev-python/vcs-versioning-2.2[python_targets_python3_12(-)?,python_targets_python3_13(-)?,python_targets_python3_14t(-)?,python_targets_python3_14(-)?,python_targets_python3_15t(-)?,python_targets_python3_15(-)?]'
- release notes: https://github.com/pypa/setuptools-scm/releases/tag/setuptools-scm-v10.2.1
dev-python/snakeoil:
- from 0.11.4 to 0.11.5
- release notes: https://github.com/pkgcore/snakeoil/releases/tag/v0.11.5
dev-python/vcs-versioning: [SYSEXT-PYTHON]
- from 2.2.2 to 2.2.4
- build and runtime dependencies:
  - changes for dev-python/packaging:
    - changed version constraint from >=20 to >=26.2
- release notes: https://github.com/pypa/setuptools-scm/releases/tag/vcs-versioning-v2.2.4
dev-util/gdbus-codegen:
- still at 2.88.3
- package became stable on 'arm64'
dev-util/glib-utils:
- still at 2.88.3
- package became stable on 'arm64'
dev-vcs/git: [PROD] [DEV]
- from 2.54.0 to 2.55.0
- IUSE flag 'rust' became enabled by default
  - had to add a user patch fixing cross-compilation issues in rust library
- release notes: https://raw.githubusercontent.com/git/git/refs/tags/v2.55.0/Documentation/RelNotes/2.55.0.adoc
net-dns/bind: [PROD] [DEV]
- still at 9.20.26
- removed IUSE flag 'static-libs'
net-libs/ngtcp2: [PROD] [DEV]
- still at 1.24.0
- build dependencies:
  - added a dependency '>=app-portage/elt-patches-20250306'
net-misc/openssh: [PROD] [DEV]
- still at 10.5_p1
- added IUSE flag 'seccomp'
sys-apps/bubblewrap:
- from 0.11.2-r1 to 0.12.0
- fixes GHSA-pxhw-h44j-8pfx
  - GHSA-pxhw-h44j-8pfx
  - no flatcar issue yet
- package became unstable on 'arm64'
- removed IUSE flag 'suid'
- dependencies and runtime dependencies:
  - dropped a dependency 'sys-libs/libseccomp'
  - changes for sys-libs/libselinux with USE conditionals 'selinux?':
    - changed version constraint from >=2.1.9 to >=2.3
- licenses:
  - dropped license 'LGPL-2+'
  - added license 'LGPL-2.1+'
- release notes: https://github.com/containers/bubblewrap/releases/tag/v0.12.0
sys-apps/pkgcore:
- from 0.12.39 to 0.12.41
- build and runtime dependencies:
  - changes for dev-python/snakeoil:
    - changed version constraint from >=0.11.4 to >=0.11.5
- release notes: https://github.com/pkgcore/pkgcore/releases/tag/v0.12.41
sys-apps/shadow: [PROD] [DEV]
- from 4.19.4 to 4.20.0
- removed IUSE flag 'xattr'
- dependencies:
  - added a dependency 'sys-apps/attr' for USE 'acl?'
- dependencies and runtime dependencies:
  - dropped a dependency 'sys-apps/attr:=' for USE 'xattr?'
- release notes: https://github.com/shadow-maint/shadow/releases/tag/4.20.0
sys-apps/systemd: [PROD] [DEV]
- from 260.4 to 261.2
- package became stable on 'amd64'
- package became stable on 'arm64'
- added IUSE flag 'imds'
- dependencies and runtime dependencies:
  - added a dependency 'sys-libs/libucontext' for USE 'elibc_musl?'
  - changes for sys-libs/musl with USE conditionals 'elibc_musl?':
    - changed version constraint from >=1.2.5-r8 to >=1.2.6
- runtime dependencies:
  - added a dependency 'acct-user/systemd-imds' for USE 'imds?'
- release notes: https://github.com/systemd/systemd/releases/tag/v261
sys-apps/util-linux: [PROD] [DEV]
- from 2.42.2 to 2.42.3
- fixes CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410
  - update: sys-apps/util-linux Flatcar#2403
- package became unstable on 'amd64'
- package became unstable on 'arm64'
- release notes: https://github.com/util-linux/util-linux/blob/v2.42.3/Documentation/releases/v2.42.3-ReleaseNotes
sys-firmware/edk2-bin:
- from 202605 to 202608
- release notes: https://github.com/tianocore/edk2/releases/tag/edk2-stable202608
sys-fs/btrfs-progs: [PROD] [DEV]
- from 7.0 to 7.1
- release notes: https://github.com/kdave/btrfs-progs/releases/tag/v7.1
sys-fs/cryptsetup: [PROD] [DEV]
- from 2.8.6-r2 to 2.8.7
- release notes: https://gitlab.com/cryptsetup/cryptsetup/-/raw/v2.8.7/docs/v2.8.7-ReleaseNotes
sys-fs/zfs: [SYSEXT-ZFS]
- from 2.4.3 to 2.4.4
- fixes CVE-2026-79619
  - update: sys-fs/zfs Flatcar#2385
- runtime dependencies:
  - changes for sys-fs/zfs-kmod weak blocker:
    - dropped version constraint
  - changes for virtual/dist-kernel with USE conditionals 'dist-kernel-cap?' -> 'dist-kernel?':
    - changed version constraint from <7.1 to <7.3
- release notes: https://github.com/openzfs/zfs/releases/tag/zfs-2.4.4
sys-libs/libselinux: [PROD] [DEV]
- from 3.11 to 3.11-r1
- dependencies and runtime dependencies:
  - dropped a dependency 'dev-libs/libpcre2:=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_s390_32(-)?,abi_s390_64(-)?]'
  - added a dependency 'virtual/libpcre2-internals:=[static-libs?,abi_x86_32(-)?,abi_x86_64(-)?,abi_x86_x32(-)?,abi_mips_n32(-)?,abi_mips_n64(-)?,abi_mips_o32(-)?,abi_s390_32(-)?,abi_s390_64(-)?]'
sys-libs/liburing: [PROD] [DEV]
- from 2.9 to 2.12
- package became unstable on 'arm64'
- release notes: https://github.com/axboe/liburing/releases/tag/liburing-2.1{2..0}
sys-process/lsof: [PROD] [DEV]
- from 4.99.6 to 4.99.7
- release notes: https://github.com/lsof-org/lsof/releases/tag/4.99.7

--

changelog
image diff

It's from Gentoo commit 72157e8844ba7933ae6b23595797231b5f16380e. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 28e3b5a6d024c1c62e8c9d1123b13420d7a518fc. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit d132f20e6ee758e894fcc55e7371cfcc4ffd57d7. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 77dfa1c903b015fdc748d092ced95a9336f6c59b. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit dcd5497b828aa60a62ec5e3a755e168a5c054289. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit e059e53bb83ccd45711e780b62dd4bfb55c2bc7e. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit e3f7ce61bb27b7cbb7c07e9f63585faa85cdf4a9. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit d080838b459ddc452974abe3e0babfb1c1496a11. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit d05396eb78e97e7bd82d609d060de0930ef7429c. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit ff98f2a2d8475aff3a50ed072dc3d90a6c8b4c77. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 09cba54c4b58b839dd2708235748af08c7787541. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit eb4d23872005f20bd4120e42830b2cb25aea1478. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit fdfd74547de3d9f241620075c521309cf7fafa17. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 1550c211f367ce19edf661455ef89bca41cc137f. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit ced42c66051a79fab4aacdf69ee98804e32bab7d. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 41dcd426436c76f7bdbe9c689f9a324bd5e3ed67. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit f14fed36dde447bba06df542ef6fbe531f19999f. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 019c0ba7ba3bdf5ee2b2fbea21e70a14db9157b8. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 21d962d352c98f7de83970c0498c18d33fc5a884. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit d0cc1b222106e15c4a2a2dcde26d381e37f2f300. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit f7e9190b2d80d4b66a9f951945538afa9b9308da. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 3cb63a7d2a2ef6d01dddeb543580c49f96ea0b4b. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit b1b1f5cebccca545e0c6e5f4a33abc5e8f57b912. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 429b1aa0b3cf85a6c1092deafb9d3b95a6841999. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit 4b09c65de2da038f0d3e99841eb65c40a700f656. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

It's from Gentoo commit c4fcb2df932af0eaad32ea66ee81027253e9e265. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

But this time yell quite loud about it, so it will be visible in the occurences file. And I will remember to reinstate it next time instead of spending more time to investigate it. But at least the investigation resulted in dropping the patch - it is enough to just regenerate the build system. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

…cs/git Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Also make a tag to include the architecture unconditionally. Such tags exist for both amd64 and arm64. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

krnowak · 2026-09-09T09:42:24Z

CI mostly passed - akamai failures are unrelated (we upload the image, but we get a timeout on getting it ready with an error 404 image not found, see https://jenkins.flatcar.org/job/container/job/test/2939/console and https://jenkins.flatcar.org/job/container/job/test/2946/console)

Copilot

🟡 Changes recommended

It contains at least one hard failure (invalid KEYWORDS syntax in rust-bin ebuilds) and a likely-wrong amd64 tag change in etcd-wrapper that should be corrected before merge.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Weekly sync of the portage-stable vendor tree (plus coreos-overlay deltas) to bring in upstream version bumps, keywording changes, profile mask updates, and related eclass adjustments.

Changes:

Add new packages/versions and refresh Manifests for weekly portage-stable updates (incl. new virtual/libpcre2-internals).
Update numerous ebuilds/profiles/eclasses for dependency/keyword/IUSE changes (systemd, rust, python, bind, zfs, selinux, etc.).
Update coreos-overlay patches and SAC wrapper logic to track upstream changes.

File summaries

File	Description
sdk_container/src/third_party/portage-stable/virtual/libpcre2-internals/metadata.xml	New metadata for `virtual/libpcre2-internals`.
sdk_container/src/third_party/portage-stable/virtual/libpcre2-internals/libpcre2-internals-10.48.ebuild	New virtual ebuild for libpcre2 internals (10.48).
sdk_container/src/third_party/portage-stable/virtual/libpcre2-internals/libpcre2-internals-10.47.ebuild	New virtual ebuild for libpcre2 internals (10.47).
sdk_container/src/third_party/portage-stable/sys-process/lsof/lsof-4.99.7.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/sys-libs/liburing/liburing-2.12.ebuild	KEYWORDS adjustment (arm64 changes).
sdk_container/src/third_party/portage-stable/sys-libs/libunwind/libunwind-1.8.3.ebuild	KEYWORDS adjustments (arm/ppc/ppc64).
sdk_container/src/third_party/portage-stable/sys-libs/libselinux/libselinux-9999.ebuild	Switch RDEPEND from libpcre2 to new virtual; formatting tweaks.
sdk_container/src/third_party/portage-stable/sys-libs/libselinux/libselinux-3.9.ebuild	Switch RDEPEND to new virtual; formatting tweaks.
sdk_container/src/third_party/portage-stable/sys-libs/libselinux/libselinux-3.8.1-r3.ebuild	Switch RDEPEND to new virtual; formatting tweaks.
sdk_container/src/third_party/portage-stable/sys-libs/libselinux/libselinux-3.8.1-r2.ebuild	Copyright year bump + RDEPEND virtual switch; formatting tweaks.
sdk_container/src/third_party/portage-stable/sys-libs/libselinux/libselinux-3.11-r1.ebuild	Switch RDEPEND to new virtual; formatting tweaks.
sdk_container/src/third_party/portage-stable/sys-libs/libselinux/libselinux-3.10.ebuild	Switch RDEPEND to new virtual; formatting tweaks.
sdk_container/src/third_party/portage-stable/sys-libs/libselinux/libselinux-3.10-r3.ebuild	Switch RDEPEND to new virtual; formatting tweaks.
sdk_container/src/third_party/portage-stable/sys-fs/zfs/zfs-9999.ebuild	Kernel max bump; blocker change against `zfs-kmod`.
sdk_container/src/third_party/portage-stable/sys-fs/zfs/zfs-2.4.4.ebuild	KEYWORDS change + blocker change against `zfs-kmod`.
sdk_container/src/third_party/portage-stable/sys-fs/zfs/zfs-2.3.9.ebuild	KEYWORDS change (stable amd64/arm64).
sdk_container/src/third_party/portage-stable/sys-fs/zfs/zfs-2.2.11.ebuild	KEYWORDS change (stable amd64/arm64).
sdk_container/src/third_party/portage-stable/sys-fs/zfs/files/2.1.5-dracut-zfs-missing.patch	Remove obsolete patch.
sdk_container/src/third_party/portage-stable/sys-fs/zfs-kmod/zfs-kmod-2.4.0_rc2-r1.ebuild	Remove obsolete ebuild.
sdk_container/src/third_party/portage-stable/sys-fs/zfs-kmod/zfs-kmod-2.3.9.ebuild	KEYWORDS change (stable amd64/arm64).
sdk_container/src/third_party/portage-stable/sys-fs/zfs-kmod/zfs-kmod-2.2.11.ebuild	KEYWORDS change (stable amd64/arm64).
sdk_container/src/third_party/portage-stable/sys-fs/cryptsetup/cryptsetup-2.8.7.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/sys-fs/btrfs-progs/btrfs-progs-7.1.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/sys-apps/systemd/systemd-9999.ebuild	Add `xdg-utils` usage + mimeinfo DB update in postinst/postrm.
sdk_container/src/third_party/portage-stable/sys-apps/systemd/systemd-260.4.ebuild	Add patch to PATCHES list.
sdk_container/src/third_party/portage-stable/sys-apps/systemd/systemd-260.1-r2.ebuild	Add patch to PATCHES list.
sdk_container/src/third_party/portage-stable/sys-apps/shadow/shadow-4.20.0.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/sys-apps/pkgcore/pkgcore-9999.ebuild	Snakeoil dep bump + amd64-only `py-landlock` dep.
sdk_container/src/third_party/portage-stable/sys-apps/pkgcore/pkgcore-0.12.42.ebuild	KEYWORDS/dep updates + add docutils for tests + `py-landlock` on amd64.
sdk_container/src/third_party/portage-stable/sys-apps/pkgcore/pkgcore-0.12.41.ebuild	Snakeoil dep bump.
sdk_container/src/third_party/portage-stable/sys-apps/pkgcore/pkgcore-0.12.40.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/sys-apps/bubblewrap/Manifest	Add distfile entry for 0.12.0.
sdk_container/src/third_party/portage-stable/sec-policy/selinux-base/selinux-base-9999.ebuild	Update PYTHON_COMPAT range.
sdk_container/src/third_party/portage-stable/sec-policy/selinux-base/selinux-base-2.20260616_p1.ebuild	Update PYTHON_COMPAT range.
sdk_container/src/third_party/portage-stable/profiles/features/wd40/package.mask	Add new masks (hypothesis, celluloid).
sdk_container/src/third_party/portage-stable/profiles/features/musl/package.use.mask	Add new musl USE masks + comment tweak.
sdk_container/src/third_party/portage-stable/profiles/features/musl/package.mask	Remove obsolete game masks.
sdk_container/src/third_party/portage-stable/profiles/default/linux/x86/23.0/i686/time64/hardened/systemd/parent	Add profile parent link.
sdk_container/src/third_party/portage-stable/profiles/default/linux/x86/23.0/i686/time64/hardened/systemd/eapi	Add profile EAPI file.
sdk_container/src/third_party/portage-stable/profiles/default/linux/x86/23.0/i686/musl/systemd/parent	Add profile parent link.
sdk_container/src/third_party/portage-stable/profiles/default/linux/x86/23.0/i686/musl/systemd/eapi	Add profile EAPI file.
sdk_container/src/third_party/portage-stable/profiles/default/linux/x86/23.0/i686/hardened/systemd/parent	Add profile parent link.
sdk_container/src/third_party/portage-stable/profiles/default/linux/x86/23.0/i686/hardened/systemd/eapi	Add profile EAPI file.
sdk_container/src/third_party/portage-stable/profiles/base/use.stable.mask	Move `llvm_slot_23` to stable mask.
sdk_container/src/third_party/portage-stable/profiles/base/use.mask	Remove `llvm_slot_23` from regular mask.
sdk_container/src/third_party/portage-stable/profiles/base/package.use.force	Force jumbo-build for firefox/thunderbird; update rust llvm slot mapping.
sdk_container/src/third_party/portage-stable/profiles/arch/x86/package.use.mask	Remove obsolete mask entry.
sdk_container/src/third_party/portage-stable/profiles/arch/sparc/use.mask	Remove redundant comment block.
sdk_container/src/third_party/portage-stable/profiles/arch/sparc/package.use.mask	Add VIS masks + refresh xwayland/libei comment placement.
sdk_container/src/third_party/portage-stable/profiles/arch/s390/package.use.mask	Refresh xwayland/libei comment placement.
sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/ppc64/package.use.stable.mask	Add xwayland/libei + flatpak stable masks (comment formatting issue present).
sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/ppc64/package.use.mask	Remove obsolete openttd openmedia mask.
sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/ppc32/package.use.stable.mask	Add xwayland/libei stable mask.
sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/ppc32/package.use.mask	Add new USE masks due to unkeyworded deps.
sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/package.use.stable.mask	Add new stable masks; remove older libei mask.
sdk_container/src/third_party/portage-stable/profiles/arch/loong/package.use.stable.mask	Remove obsolete file.
sdk_container/src/third_party/portage-stable/profiles/arch/hppa/package.use.mask	Add new masks (xwayland/libei, openssh seccomp) + cleanup old entry.
sdk_container/src/third_party/portage-stable/profiles/arch/base/use.mask	Remove sparc-specific `vis` comment block.
sdk_container/src/third_party/portage-stable/profiles/arch/arm/package.use.stable.mask	Remove obsolete libei stable mask entry.
sdk_container/src/third_party/portage-stable/profiles/arch/amd64/x32/package.use.mask	Add kgpg mask.
sdk_container/src/third_party/portage-stable/profiles/arch/amd64/package.use.stable.mask	Update openmp mask to include rocm.
sdk_container/src/third_party/portage-stable/profiles/arch/amd64/package.use.mask	Update openmp mask to include -rocm.
sdk_container/src/third_party/portage-stable/profiles/arch/amd64/no-multilib/package.mask	Copyright bump + adjust package masks.
sdk_container/src/third_party/portage-stable/profiles/arch/alpha/package.use.mask	Refresh xwayland/libei comment placement.
sdk_container/src/third_party/portage-stable/net-misc/wget/metadata.xml	Document new `psl` USE flag.
sdk_container/src/third_party/portage-stable/net-misc/openssh/openssh-10.5_p1.ebuild	Add `seccomp` USE flag + configure handling.
sdk_container/src/third_party/portage-stable/net-misc/openssh/openssh-10.4_p1-r1.ebuild	Add `seccomp` USE flag + configure handling.
sdk_container/src/third_party/portage-stable/net-libs/ngtcp2/ngtcp2-9999.ebuild	Add `libtool` inherit.
sdk_container/src/third_party/portage-stable/net-libs/ngtcp2/ngtcp2-1.25.0.ebuild	Add `libtool` inherit + `elibtoolize`.
sdk_container/src/third_party/portage-stable/net-libs/ngtcp2/ngtcp2-1.24.0.ebuild	Add `libtool` inherit.
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.20.27.ebuild	Drop `static-libs` IUSE and always delete `.la` files.
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.20.26.ebuild	Same static-libs removal + `.la` cleanup.
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.20.24.ebuild	Same static-libs removal + `.la` cleanup.
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.20.23.ebuild	Same static-libs removal + `.la` cleanup.
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.20.22.ebuild	Same static-libs removal + `.la` cleanup.
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.20.21.ebuild	Same static-libs removal + `.la` cleanup.
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.18.49.ebuild	Same static-libs removal + `.la` cleanup.
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.18.48.ebuild	Same static-libs removal + `.la` cleanup.
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.18.47.ebuild	Same static-libs removal + `.la` cleanup.
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.18.42.ebuild	Copyright bump + same static-libs removal + `.la` cleanup.
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.18.39.ebuild	Copyright bump + same static-libs removal + `.la` cleanup.
sdk_container/src/third_party/portage-stable/net-dns/bind/bind-9.18.38.ebuild	Copyright bump + same static-libs removal + `.la` cleanup.
sdk_container/src/third_party/portage-stable/eclass/toolchain.eclass	Fix nullglob handling while applying musl patches.
sdk_container/src/third_party/portage-stable/eclass/rust.eclass	Add rust slot 1.98.1 mapping.
sdk_container/src/third_party/portage-stable/eclass/python-utils-r1.eclass	Adjust supported python impl list ordering/ranges.
sdk_container/src/third_party/portage-stable/eclass/perl-module.eclass	Ensure `--prefix ${EPREFIX}/usr` is passed during configure.
sdk_container/src/third_party/portage-stable/dev-vcs/git/git-2.55.0.ebuild	Update PYTHON_COMPAT + KEYWORDS changes.
sdk_container/src/third_party/portage-stable/dev-util/pkgcheck/pkgcheck-9999.ebuild	Bump pkgcore/snakeoil minimums.
sdk_container/src/third_party/portage-stable/dev-util/pkgcheck/Manifest	Add new distfile entry.
sdk_container/src/third_party/portage-stable/dev-util/glib-utils/glib-utils-2.88.3.ebuild	KEYWORDS adjustment (arm64).
sdk_container/src/third_party/portage-stable/dev-util/gdbus-codegen/gdbus-codegen-2.88.3.ebuild	KEYWORDS adjustment (arm64).
sdk_container/src/third_party/portage-stable/dev-python/vcs-versioning/vcs-versioning-2.3.4.ebuild	KEYWORDS and dep adjustments (packaging >=26.2).
sdk_container/src/third_party/portage-stable/dev-python/vcs-versioning/vcs-versioning-2.3.2.ebuild	New ebuild version.
sdk_container/src/third_party/portage-stable/dev-python/vcs-versioning/vcs-versioning-2.2.4.ebuild	KEYWORDS changes.
sdk_container/src/third_party/portage-stable/dev-python/vcs-versioning/vcs-versioning-2.2.3.ebuild	KEYWORDS changes.
sdk_container/src/third_party/portage-stable/dev-python/tree-sitter/tree-sitter-0.26.0.ebuild	Ensure EPYTEST_PLUGINS explicitly set.
sdk_container/src/third_party/portage-stable/dev-python/tree-sitter/tree-sitter-0.25.2-r1.ebuild	Ensure EPYTEST_PLUGINS explicitly set.
sdk_container/src/third_party/portage-stable/dev-python/snakeoil/snakeoil-0.11.6.ebuild	New ebuild version.
sdk_container/src/third_party/portage-stable/dev-python/snakeoil/snakeoil-0.11.5.ebuild	New ebuild version.
sdk_container/src/third_party/portage-stable/dev-python/setuptools-scm/setuptools-scm-10.2.2.ebuild	Add vcs-versioning >=2.3.2 and adjust tests.
sdk_container/src/third_party/portage-stable/dev-python/setuptools-scm/setuptools-scm-10.2.1.ebuild	KEYWORDS changes.
sdk_container/src/third_party/portage-stable/dev-python/pygments/pygments-2.20.0.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-python/platformdirs/platformdirs-4.11.4.ebuild	Switch PEP517 backend + adjust PYTHON_COMPAT/KEYWORDS.
sdk_container/src/third_party/portage-stable/dev-python/packaging/packaging-26.3.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-python/lxml/Manifest	Add distfile entry for 6.1.3.
sdk_container/src/third_party/portage-stable/dev-python/linkify-it-py/linkify-it-py-2.2.0.ebuild	New ebuild version.
sdk_container/src/third_party/portage-stable/dev-python/linkify-it-py/linkify-it-py-2.1.1.ebuild	Fix metadata to match `linkify-it-py` (was inconsistent).
sdk_container/src/third_party/portage-stable/dev-python/gpep517/Manifest	Add distfile entry for 22.
sdk_container/src/third_party/portage-stable/dev-python/flit-core/flit-core-4.0.2.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-python/fastjsonschema/Manifest	Remove old distfile entry.
sdk_container/src/third_party/portage-stable/dev-python/cython/cython-3.3.0.ebuild	Drop gcc workaround block; simplify inherits.
sdk_container/src/third_party/portage-stable/dev-python/cryptography/cryptography-50.0.0.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-python/cffi/cffi-2.1.1.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-libs/libtraceevent/libtraceevent-1.9.0.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-libs/jansson/jansson-2.15.1.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-libs/jansson/files/jansson-2.14-test-symbols.patch	Remove obsolete patch.
sdk_container/src/third_party/portage-stable/dev-libs/glib/glib-2.88.3.ebuild	KEYWORDS adjustment (arm64).
sdk_container/src/third_party/portage-stable/dev-libs/expat/Manifest	Add distfile entry for 2.8.4.
sdk_container/src/third_party/portage-stable/dev-lang/swig/swig-4.3.1.ebuild	KEYWORDS adjustment (arm64).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-9999.ebuild	Switch llvm eclass (`llvm-r2`) + add slot-map sanity checks (message typo present).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.96.1.ebuild	Switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.95.0.ebuild	Switch llvm eclass (`llvm-r2`) + PYTHON_COMPAT update.
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.94.1.ebuild	Switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.94.0.ebuild	Switch llvm eclass (`llvm-r2`) + PYTHON_COMPAT update.
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.93.1.ebuild	Switch llvm eclass (`llvm-r2`) + PYTHON_COMPAT update.
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.93.0.ebuild	Switch llvm eclass (`llvm-r2`) + PYTHON_COMPAT update.
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.92.0_p1-r1.ebuild	Switch llvm eclass (`llvm-r2`) + PYTHON_COMPAT update.
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.91.0.ebuild	Switch llvm eclass (`llvm-r2`) + PYTHON_COMPAT update.
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.90.0-r1.ebuild	Switch llvm eclass (`llvm-r2`) + PYTHON_COMPAT update.
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.89.0.ebuild	Copyright/PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.88.0.ebuild	Copyright/PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.87.0-r1.ebuild	Copyright/PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.86.0-r2.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.85.1-r1.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.85.0-r2.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.84.1-r2.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.84.0-r2.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.83.0-r3.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.82.0-r103.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.81.0-r101.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.80.1-r101.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.79.0-r101.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.78.0-r101.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.77.1-r101.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.76.0-r101.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.75.0-r101.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust/rust-1.74.1-r101.ebuild	PYTHON_COMPAT bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-common/rust-common-1.97.1.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-9999.ebuild	Switch llvm eclass (`llvm-r2`) + KEYWORDS line is currently broken.
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.97.1.ebuild	Switch llvm eclass (`llvm-r2`) + KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.96.1.ebuild	Switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.95.0.ebuild	Switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.94.1.ebuild	Switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.94.0.ebuild	Switch llvm eclass (`llvm-r2`) + KEYWORDS line is currently broken.
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.93.1.ebuild	Switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.93.0.ebuild	Switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.92.0.ebuild	Switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.91.0.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.90.0.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.89.0.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.88.0.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.87.0.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.86.0-r1.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.85.1.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.85.0-r1.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.84.1-r2.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.84.0-r2.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.83.0-r2.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.82.0-r103.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.81.0-r103.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.80.1-r103.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.79.0-r103.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.78.0-r102.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.77.1-r102.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.76.0-r101.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.75.0-r102.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/rust-bin/rust-bin-1.74.1-r102.ebuild	Copyright bump + switch llvm eclass (`llvm-r2`).
sdk_container/src/third_party/portage-stable/dev-lang/python/python-3.14.7.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-lang/python/python-3.13.15.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-lang/python/python-3.12.14.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-lang/python/python-3.11.16.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-lang/python/python-3.10.21.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-lang/go/metadata.xml	Add maintainer + whitespace cleanup.
sdk_container/src/third_party/portage-stable/dev-lang/go/go-1.27.1.ebuild	EAPI bump + bootstrap min bump + patch list update.
sdk_container/src/third_party/portage-stable/dev-lang/go/go-1.26.5.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-lang/go/go-1.25.13.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/dev-db/etcd/etcd-3.7.1.ebuild	Add helper comment in vendor tarball instructions.
sdk_container/src/third_party/portage-stable/dev-db/etcd/etcd-3.5.33.ebuild	Update commit + deps tarball guidance + add go BDEPEND + set CGO_ENABLED=1.
sdk_container/src/third_party/portage-stable/dev-build/ninja/ninja-1.13.2-r1.ebuild	Add big-endian test patch.
sdk_container/src/third_party/portage-stable/app-shells/gentoo-bashcomp/Manifest	Add distfile entry for 20260905.
sdk_container/src/third_party/portage-stable/app-shells/gentoo-bashcomp/gentoo-bashcomp-20260905.ebuild	New ebuild version.
sdk_container/src/third_party/portage-stable/app-portage/gentoolkit/Manifest	Add distfile entry for 0.8.1.
sdk_container/src/third_party/portage-stable/app-portage/gemato/gemato-20.13.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/app-editors/nano/nano-9.2.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/app-doc/eclass-manpages/metadata.xml	Maintainer metadata updates + add straight-to-stable marker.
sdk_container/src/third_party/portage-stable/app-doc/eclass-manpages/Manifest	Update distfile entry.
sdk_container/src/third_party/portage-stable/app-doc/eclass-manpages/eclass-manpages-20260426.ebuild	Remove old ebuild version.
sdk_container/src/third_party/portage-stable/app-crypt/tpm2-tss/tpm2-tss-4.1.4.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/app-crypt/tpm2-tools/tpm2-tools-5.7.1.ebuild	Add upstream patch to SRC_URI/PATCHES + KEYWORDS adjustments.
sdk_container/src/third_party/portage-stable/app-crypt/pinentry/pinentry-1.3.3.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/app-containers/incus/incus-9999.ebuild	Bump Go BDEPEND minimum.
sdk_container/src/third_party/portage-stable/app-containers/incus/incus-7.4.ebuild	Bump Go BDEPEND minimum.
sdk_container/src/third_party/portage-stable/app-containers/docker/metadata.xml	Add maintainer.
sdk_container/src/third_party/portage-stable/app-containers/docker/docker-29.5.2.ebuild	Add `<dev-lang/go-1.27` constraint.
sdk_container/src/third_party/portage-stable/app-containers/docker-cli/metadata.xml	Add maintainer + whitespace cleanup.
sdk_container/src/third_party/portage-stable/app-containers/docker-cli/docker-cli-29.5.2.ebuild	Add `<dev-lang/go-1.27` constraint.
sdk_container/src/third_party/portage-stable/app-containers/containers-shortnames/containers-shortnames-2025.03.19_p20260615.ebuild	Adjust KEYWORDS (add ~alpha).
sdk_container/src/third_party/portage-stable/app-arch/zip/zip-3.0_p16.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/portage-stable/app-arch/unzip/unzip-6.0_p31.ebuild	KEYWORDS stabilization adjustments.
sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-apps/systemd/0008-units-Make-multi-user.target-the-default-target.patch	Refresh patch metadata (commit IDs/tool version).
sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-apps/systemd/0007-tmpfiles.d-Fix-DNS-issues-with-default-k8s-configura.patch	Refresh patch metadata (tool version).
sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-apps/systemd/0006-units-Keep-using-old-journal-file-format.patch	Refresh patch metadata (tool version).
sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-apps/systemd/0005-Revert-getty-Pass-tty-to-use-by-agetty-via-stdin.patch	Refresh patch metadata (tool version).
sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-apps/systemd/0004-systemd-Disable-SELinux-permissions-checks.patch	Refresh patch metadata (tool version).
sdk_container/src/third_party/coreos-overlay/coreos/user-patches/sys-apps/systemd/0001-wait-online-set-any-by-default.patch	Refresh patch metadata (index/tool version).
sdk_container/src/third_party/coreos-overlay/coreos/user-patches/dev-vcs/git/README.md	Document why the git cross patch exists.
sdk_container/src/third_party/coreos-overlay/coreos/user-patches/dev-vcs/git/0001-fix-cross.patch	Add patch to fix git rust cross-compilation path handling.
sdk_container/src/third_party/coreos-overlay/app-admin/etcd-wrapper/etcd-wrapper-3.5.33.ebuild	Adjust SAC tag logic (currently makes amd64 use suffixed tag).
.github/workflows/portage-stable-packages-list	Add `virtual/libpcre2-internals` to workflow list.

Review details

Files reviewed: 298/405 changed files
Comments generated: 5
Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

chewi

You can drop the git user patch if you sync that again. Or your patch is fine.

github-actions Bot added the main label Sep 7, 2026

krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-09-07 branch from 470c850 to 7130b91 Compare September 7, 2026 15:06

krnowak had a problem deploying to development September 7, 2026 15:06 — with GitHub Actions Error

krnowak added this to Flatcar tactical, release planning, and roadmap Sep 7, 2026

krnowak moved this to ⚒️ In Progress in Flatcar tactical, release planning, and roadmap Sep 7, 2026

krnowak had a problem deploying to development September 8, 2026 09:53 — with GitHub Actions Error

krnowak had a problem deploying to development September 8, 2026 10:16 — with GitHub Actions Error

krnowak had a problem deploying to development September 8, 2026 13:29 — with GitHub Actions Error

Flatcar Buildbot added 22 commits September 8, 2026 15:31

app-arch/gzip: Sync with Gentoo

05cc356

It's from Gentoo commit 72157e8844ba7933ae6b23595797231b5f16380e. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-arch/unzip: Sync with Gentoo

bb8b25d

It's from Gentoo commit 28e3b5a6d024c1c62e8c9d1123b13420d7a518fc. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-arch/zip: Sync with Gentoo

ef29871

It's from Gentoo commit d132f20e6ee758e894fcc55e7371cfcc4ffd57d7. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/containers-shortnames: Sync with Gentoo

c442a5c

It's from Gentoo commit 77dfa1c903b015fdc748d092ced95a9336f6c59b. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/docker: Sync with Gentoo

ffac15f

It's from Gentoo commit dcd5497b828aa60a62ec5e3a755e168a5c054289. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/docker-buildx: Sync with Gentoo

506860d

It's from Gentoo commit e059e53bb83ccd45711e780b62dd4bfb55c2bc7e. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/docker-cli: Sync with Gentoo

89b7963

It's from Gentoo commit e3f7ce61bb27b7cbb7c07e9f63585faa85cdf4a9. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-containers/incus: Sync with Gentoo

d95119b

It's from Gentoo commit d080838b459ddc452974abe3e0babfb1c1496a11. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-crypt/gnupg: Sync with Gentoo

de9c3c9

It's from Gentoo commit d05396eb78e97e7bd82d609d060de0930ef7429c. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-crypt/pinentry: Sync with Gentoo

6083544

It's from Gentoo commit ff98f2a2d8475aff3a50ed072dc3d90a6c8b4c77. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-crypt/tpm2-tools: Sync with Gentoo

b1eacd3

It's from Gentoo commit 09cba54c4b58b839dd2708235748af08c7787541. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-crypt/tpm2-tss: Sync with Gentoo

1e1f537

It's from Gentoo commit eb4d23872005f20bd4120e42830b2cb25aea1478. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-doc/eclass-manpages: Sync with Gentoo

31fd1ee

It's from Gentoo commit fdfd74547de3d9f241620075c521309cf7fafa17. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-editors/nano: Sync with Gentoo

5faff50

It's from Gentoo commit 1550c211f367ce19edf661455ef89bca41cc137f. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-emulation/virt-firmware: Sync with Gentoo

feb1258

It's from Gentoo commit ced42c66051a79fab4aacdf69ee98804e32bab7d. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-portage/gemato: Sync with Gentoo

1511673

It's from Gentoo commit 41dcd426436c76f7bdbe9c689f9a324bd5e3ed67. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-portage/gentoolkit: Sync with Gentoo

edf0660

It's from Gentoo commit f14fed36dde447bba06df542ef6fbe531f19999f. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

app-shells/gentoo-bashcomp: Sync with Gentoo

497f1c8

It's from Gentoo commit 019c0ba7ba3bdf5ee2b2fbea21e70a14db9157b8. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-build/cmake: Sync with Gentoo

214ab0c

It's from Gentoo commit 21d962d352c98f7de83970c0498c18d33fc5a884. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-build/ninja: Sync with Gentoo

61b0047

It's from Gentoo commit d0cc1b222106e15c4a2a2dcde26d381e37f2f300. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-db/etcd: Sync with Gentoo

28ddd14

It's from Gentoo commit f7e9190b2d80d4b66a9f951945538afa9b9308da. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

dev-debug/gdb: Sync with Gentoo

6970173

It's from Gentoo commit 3cb63a7d2a2ef6d01dddeb543580c49f96ea0b4b. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

Flatcar Buildbot and others added 15 commits September 8, 2026 15:31

sys-libs/liburing: Sync with Gentoo

21aae5e

It's from Gentoo commit b1b1f5cebccca545e0c6e5f4a33abc5e8f57b912. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

sys-process/lsof: Sync with Gentoo

d29ed34

It's from Gentoo commit 429b1aa0b3cf85a6c1092deafb9d3b95a6841999. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

x11-drivers/nvidia-drivers: Sync with Gentoo

5b611c2

It's from Gentoo commit 4b09c65de2da038f0d3e99841eb65c40a700f656. Signed-off-by: Flatcar Buildbot <buildbot@flatcar-linux.org>

virtual/libpcre2-internals: Add from Gentoo

19c5978

It's from Gentoo commit c4fcb2df932af0eaad32ea66ee81027253e9e265. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

.github: Add virtual/libpcre2-internals to automation

25dd4ad

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Update accept keywords for sys-libs/libselinux

c68e05d

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Add accept keywords for sys-libs/liburing

18f4ecd

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Always take latest docker

4dee883

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay coreos/user-patches: Regenerate patches for sys-apps/systemd

81a393e

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: Add/remove some accept keywords

28a3473

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay coreos/user-patches: Add a patch fixing cross build for dev-v…

f54fde2

…cs/git Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay app-admin/etcd-wrapper: Bump to match dev-db/etcd

98cc325

Also make a tag to include the architecture unconditionally. Such tags exist for both amd64 and arm64. Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

overlay profiles: More accept keywords for security issues

bd292de

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

changelog: Add entries

8598eb1

Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>

krnowak force-pushed the buildbot/weekly-portage-stable-package-updates-2026-09-07 branch from da7dc10 to 8598eb1 Compare September 8, 2026 13:38

krnowak requested a deployment to development September 8, 2026 13:39 — with GitHub Actions Waiting

krnowak marked this pull request as ready for review September 9, 2026 09:41

krnowak requested a review from a team as a code owner September 9, 2026 09:41

Copilot AI lite review requested due to automatic review settings September 9, 2026 09:41

Copilot started reviewing on behalf of krnowak September 9, 2026 09:41 View session

krnowak moved this from ⚒️ In Progress to ✅ Testing / in Review in Flatcar tactical, release planning, and roadmap Sep 9, 2026

Copilot AI reviewed Sep 9, 2026

View reviewed changes

chewi approved these changes Sep 9, 2026

View reviewed changes

krnowak merged commit 8ffb41f into main Sep 10, 2026
34 of 37 checks passed

krnowak deleted the buildbot/weekly-portage-stable-package-updates-2026-09-07 branch September 10, 2026 07:45

github-project-automation Bot moved this from ✅ Testing / in Review to Implemented in Flatcar tactical, release planning, and roadmap Sep 10, 2026

This was referenced Sep 11, 2026

update: sys-apps/bubblewrap flatcar/Flatcar#2417

Closed

changelog: Add entries for bubblewrap #4271

Merged

Navigation Menu

Uh oh!

Weekly portage-stable package updates 2026-09-07 - #4263

Weekly portage-stable package updates 2026-09-07#4263
krnowak merged 107 commits into
mainfrom
buildbot/weekly-portage-stable-package-updates-2026-09-07

github-actions Bot commented Sep 7, 2026 •

edited by krnowak

Loading

Uh oh!

krnowak commented Sep 9, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

chewi left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

github-actions Bot commented Sep 7, 2026 • edited by krnowak Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

krnowak commented Sep 9, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

chewi left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions Bot commented Sep 7, 2026 •

edited by krnowak

Loading