ci: Update sqlite3 version and shasums for noble repro build
What the developer wrote
Authored by ShahanaFarooqui
ci: Update sqlite3 version and shasums for noble repro build
Changelog-Fixed: Reproducible build for Ubuntu noble by updating sqlite3 version and shasums.
What changed, and why it matters
This commit updates a single checksum in a reproducible build script. The script verifies that the exact same SQLite development package is used when building Core Lightning on Ubuntu Noble. Ubuntu released a minor update to the package (from version 3.45.1-1ubuntu2.4 to 3.45.1-1ubuntu2.5), which changed its file hash. The commit simply records the new expected hash so the build can succeed. There is no code change to Core Lightning itself and no security issue introduced or fixed here.
No security action required. Treat as normal build-maintenance commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
tools/repro-build.sh contains pinned SHA-256 checksums for .deb packages used in reproducible builds. The diff replaces the expected checksum for libsqlite3-dev_3.45.1-1ubuntu2.4_amd64.deb with the checksum for libsqlite3-dev_3.45.1-1ubuntu2.5_amd64.deb. This is a routine maintenance change to keep the reproducible build working after a downstream Ubuntu package revision bump.
Changed components
tools/repro-build.shInspect captured patch +1 / −1
diff --git a/tools/repro-build.sh b/tools/repro-build.sh
index c7b6e17f..02cdddd1 100755
--- a/tools/repro-build.sh
+++ b/tools/repro-build.sh
@@ -134,7 +134,7 @@ cc3f9f7a1e576173fb59c36652c0a67c6426feae752b352404ba92dfcb1b26c9 /var/cache/apt
5ae9a98e73545002cd891f028859941af2a3c760cb6190e635c7ef36953912de /var/cache/apt/archives/automake_1%3a1.16.5-1.3ubuntu1_all.deb
0e0bb8b25153ed1c44ab92bc219eed469fcb5820c5c0bc6454b2fd366a33d3ee /var/cache/apt/archives/gcc_4%3a13.2.0-7ubuntu1_amd64.deb
f11b4d687a305dd7ee47a384d82a9bf04de913362df9efa67d2a029ae65051a9 /var/cache/apt/archives/libsodium-dev_1.0.18-1build3_amd64.deb
-f476da62789a23baa8a972973163d88ae96fca1a356f9421728997ae6489ccd0 /var/cache/apt/archives/libsqlite3-dev_3.45.1-1ubuntu2.4_amd64.deb
+5131ce3d7cdb7193bcef1b402741a0e0f436e25a50e65443fffcc7064e2cd780 /var/cache/apt/archives/libsqlite3-dev_3.45.1-1ubuntu2.5_amd64.deb
9d1d707179675d38e024bb13613b1d99e0d33fa6c45e5f3bcba19340781781d3 /var/cache/apt/archives/libtool_2.4.7-7build1_all.deb
1fe6a815b56c7b6e9ce4086a363f09444bbd0a0d30e230c453d0b78e44b57a99 /var/cache/apt/archives/make_4.3-4.1build2_amd64.deb
023cbe9dbf0af87f10e54e342c67571874e412b9950d89c6cd7b010be2e67c3c /var/cache/apt/archives/zlib1g-dev_1%3a1.3.dfsg-3.1ubuntu2.1_amd64.deb
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.