Highlights
The big one this release is the kernel moving to 7.3. There's also a ca-certificates refresh that drops the emSign roots tied to the eMudhra key compromise.
Kernel 7.3
- Kernel 7.2.11 -> 7.3 (#761), with the kernel configs refreshed for the upstream renames and removals
CONFIG_OPENVSWITCH_GRE,CONFIG_OPENVSWITCH_VXLANandCONFIG_OPENVSWITCH_GENEVEare gone upstream in 7.3, so the legacy Open vSwitch tunnel vports are no longer available. If you depend on them, test before upgrading- libbpf 1.5.0 -> 1.8.0 (#756), now tracked by updatecli. This is what lets the arm64 build on 7.3 go through: the 7.3 arm64 headers use
__u128, which libbpf 1.8 defines - Dropped the
resolve_btfidskernel patch, not needed anymore (#751)
ca-certificates
ca-certificates 20260611 -> 20261020 (#764). This drops emSign ECC Root CA - G3, the root over the eMudhra intermediates whose keys were compromised (Mozilla removed it in NSS 3.131.1). It also drops the retired emSign Root CA - C1 and emSign ECC Root CA - C3. emSign Root CA - G1 stays.
Also coming from NSS: ePKI Root Certification Authority is removed, and the SECOM 2024 and Telia v3 roots are added.
We also added a distfiles mirror as a fallback source for the tarball.
Other bumps
argp-standalone1.4.1 -> 1.5.0, with a fix for theconfig.hdefines 1.5.0 needs (#763)elfutils0.195 -> 0.197,libelf0.196 -> 0.197freetype2.14.3 -> 2.15.0less704 -> 710ncurses6.5 -> 6.6procps-ng4.0.6 -> 4.0.7python3.15.0 -> 3.15.1pkgconfig3.0.9 -> 3.0.10unifont16.0.04 -> 18.0.01tzcodeis now pinned at 2026e
musl stays at 1.2.6 and systemd at 262.1.
What's Changed
- Automatic version bumps for pkgconfig by @ci-robbot in #747
- Automatic version bumps by @ci-robbot in #748
- Exclude Updatecli-managed source images from Renovate by @Itxaka with @Copilot in #750
- fix(patches): drop resolve_btfids kernel patch by @itxaka-agent in #751
- Automatic version bumps for libelf by @ci-robbot in #753
- build(deps): bump github.com/klauspost/compress from 1.18.0 to 1.18.7 in /tests by @dependabot[bot] in #754
- chore: sync AGENTS.md from kairos-io/community by @mauromorales in #737
- chore(libbpf): bump to 1.8.0 and track it in updatecli by @itxaka-agent in #756
- chore(updatecli): track untracked Dockerfile version ARGs by @itxaka-agent in #757
- fix(argp): supply the config.h defines argp-standalone 1.5.0 needs by @ci-robbot in #763
- Automatic version bumps for python by @ci-robbot in #760
- Automatic version bumps for kernel, unifont by @ci-robbot in #761
- Automatic version bumps for less, ncurses, procps_ng by @ci-robbot in #759
- chore(deps): update alpine docker tag to v3.24.3 by @renovate[bot] in #758
- chore(ca-certificates): bump to 20261020 by @itxaka-agent in #764
- Automatic version bumps for argp_standalone, elfutils, freetype by @ci-robbot in #762
Full Changelog: v0.6.1...v0.6.2
📦 Shipped components
Hadron components — v0.6.2
Commit: 3a693dd
Build Tools
| Component | Version |
|---|---|
| autoconf | 2.73 |
| automake | 1.18.1 |
| binutils | 2.47 |
| bison | 3.8.2 |
| cmake | 4.4.4 |
| flex | 2.6.4 |
| gawk | 5.4.1 |
| libtool | 2.5.4 |
| m4 | 1.4.21 |
| make | 4.4.1 |
| pkgconf | 3.0.10 |
Compiler Tools
| Component | Version |
|---|---|
| gcc | 15.3.0 |
| gmp | 6.3.0 |
| mpc | 1.4.1 |
| mpfr | 4.2.2 |
| perl | 5.44.0 |
Compression Tools
| Component | Version |
|---|---|
| curl | 8.23.0 |
| gzip | 1.15 |
| lz4 | 1.10.0 |
| rsync | 3.5.1 |
| xxhash | 0.8.4 |
| xz | 5.8.3 |
| zlib | 1.3.2 |
| zstd | 1.5.7 |
Core System
| Component | Version |
|---|---|
| bash | 5.3 |
| busybox | 1.38.0 |
| coreutils | 9.12 |
| diffutils | 3.12 |
| findutils | 4.11.0 |
| gperf | 3.3 |
| grep | 3.12 |
| less | 710 |
| musl | 1.2.6 |
| ncurses | 6.6 |
| procps-ng | 4.0.7 |
| readline | 8.3 |
| systemd | 262.1 |
| util-linux | 2.42.4 |
Kernel And Boot
| Component | Version |
|---|---|
| dracut | 112 |
| dwarves | 1.32 |
| grub | 2.14 |
| kbd | 2.10.0 |
| kmod | 34.2 |
| libbpf | 1.8.0 |
| linux | 7.3 |
| shim | 16.1 |
| unifont | 18.0.01 |
| wireless-regdb | 2026.09.03 |
Misc Tools
| Component | Version |
|---|---|
| aports | 3.24.1 |
| bc | 7.1.0 |
| ca-certificates | 20261020 |
| gdb | 18.1 |
| libucontext | 1.5.2 |
| patch | 2.8 |
| pax-utils | 1.3.11 |
| python | 3.15.1 |
| sqlite3 | 3.54.1 |
| tpm2-tss | 4.2.0 |
| tzcode | 2026e |
| tzcode | 2026e |
| tzdata | 2026e |
Network Tools
| Component | Version |
|---|---|
| conntrack-tools | 1.4.9 |
| iptables | 1.8.13 |
| keyutils | 1.6.3 |
| libevent | 2.1.13 |
| libnetfilter_conntrack | 1.1.1 |
| libnetfilter_cthelper | 1.0.1 |
| libnetfilter_cttimeout | 1.0.1 |
| libnetfilter_queue | 1.0.5 |
| libnfnetlink | 1.0.2 |
| libnl | 3.12.0 |
| openscsi | 2.1.13 |
| strace | 7.2 |
Other
| Component | Version |
|---|---|
| musl-toolchain | 1.2.5 |
| mussel | 687d2f5e4d679487209cd9b4bd75091a20cae357 |
| sbat-distro | 1 |
Security Tools
| Component | Version |
|---|---|
| audit | 4.2.1 |
| cracklib | 2.10.3 |
| cryptsetup | 2.8.8 |
| libpwquality | 1.4.5 |
| openssh | 10.6p1 |
| openssl | 3.6.5 |
| openssl-fips | 3.1.2 |
| pam | 1.7.2 |
| shadow | 4.20.3 |
| sudo | 1.9.17p2 |
Storage Tools
| Component | Version |
|---|---|
| dosfstools | 4.2 |
| e2fsprogs | 1.47.4 |
| libtirpc | 1.3.8 |
| lvm2 | 2.03.43 |
| multipath-tools | 0.15.1 |
| nfs-utils | 3.1.1 |
| parted | 3.8 |
| urcu | 0.15.7 |
System Libraries
| Component | Version |
|---|---|
| acl | 2.4.0 |
| argp-standalone | 1.5.0 |
| attr | 2.6.0 |
| dbus | 1.16.2 |
| elfutils | 0.197 |
| expat | 2.9.0 |
| freetype | 2.15.0 |
| json-c | 0.19 |
| libaio | 0.3.113 |
| libcap | 2.78 |
| libelf | 0.197 |
| libffi | 3.8.0 |
| libiconv | 1.19 |
| libkcapi | 1.5.1 |
| libmnl | 1.0.5 |
| libnftnl | 1.3.2 |
| libseccomp | 2.6.1 |
| libxml2 | 2.15.4 |
| musl-fts | 1.2.7 |
| musl-obstack | 1.2.3 |
| pcre2 | 10.49 |
| popt | 1.19 |
Vm Tools
| Component | Version |
|---|---|
| glib | 2.90.1 |
| mspack | 1.11 |
| open-vm-tools | 13.1.0 |
| qemu | 10.1.5 |