tools: Update libsodium version for Ubuntu Noble
What the developer wrote
Authored by ShahanaFarooqui
tools: Update libsodium version for Ubuntu Noble
Changelog-None: Fixes release process only.
What changed, and why it matters
This commit updates a single recorded checksum for a library package (libsodium-dev) used in Core Lightning's reproducible build script. The old package version no longer exists in the new Ubuntu Noble release environment, so the build script's pinned checksum is being replaced with the one for the updated package. There is no code change, no runtime behavior change, and no security vulnerability being fixed.
No security action required. Treat as routine build-maintenance commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff changes one SHA-256 hash in tools/repro-build.sh, which is part of the reproducible build environment for Ubuntu Noble. The old hash corresponded to libsodium-dev_1.0.18-1build3_amd64.deb; the new hash corresponds to libsodium-dev_1.0.18-1ubuntu0.24.04.1_amd64.deb. This is a release-process maintenance update to match the package now provided by the Ubuntu Noble archive. No cryptographic, protocol, or node logic is modified.
Changed components
tools/repro-build.shInspect captured patch +1 / −1
diff --git a/tools/repro-build.sh b/tools/repro-build.sh
index eaebe873..3a3b3e51 100755
--- a/tools/repro-build.sh
+++ b/tools/repro-build.sh
@@ -134,7 +134,7 @@ EOF
cc3f9f7a1e576173fb59c36652c0a67c6426feae752b352404ba92dfcb1b26c9 /var/cache/apt/archives/autoconf_2.71-3_all.deb
5ae9a98e73545002cd891f028859941af2a3c760cb6190e635c7ef36953912de /var/cache/apt/archives/automake_1%3a1.16.5-1.3ubuntu1_all.deb
0e0bb8b25153ed1c44ab92bc219eed469fcb5820c5c0bc6454b2fd366a33d3ee /var/cache/apt/archives/gcc_4%3a13.2.0-7ubuntu1_amd64.deb
-f11b4d687a305dd7ee47a384d82a9bf04de913362df9efa67d2a029ae65051a9 /var/cache/apt/archives/libsodium-dev_1.0.18-1build3_amd64.deb
+bd3e8cd6ab8cf731d8a8a15333831b9081a94ebefe22236fc8713975fe7a6d3a /var/cache/apt/archives/libsodium-dev_1.0.18-1ubuntu0.24.04.1_amd64.deb
5131ce3d7cdb7193bcef1b402741a0e0f436e25a50e65443fffcc7064e2cd780 /var/cache/apt/archives/libsqlite3-dev_3.45.1-1ubuntu2.5_amd64.deb
9d1d707179675d38e024bb13613b1d99e0d33fa6c45e5f3bcba19340781781d3 /var/cache/apt/archives/libtool_2.4.7-7build1_all.deb
1fe6a815b56c7b6e9ce4086a363f09444bbd0a0d30e230c453d0b78e44b57a99 /var/cache/apt/archives/make_4.3-4.1build2_amd64.deb
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.