Skip to content

CONSTRUCT 20261014.2

Choose a tag to compare

@construct-infra construct-infra released this 14 Oct 17:25

CONSTRUCT 20261014.2

Built 2026-10-14 · GNOME Shell 51.0-r2 · Mesa 26.2.4-r2

Changes

8 changes since v20261014.1.

image test

  • Firefox's page is shot once it is open, and an app is gone before the next
  • the hover and pressed shots wait for GTK's frame

keys

  • the variables signed again under the certificates of 5 October
  • the Secure Boot certificates of 5 October, which machines hold

gnome-shell

  • cancel a workspace's pending window additions when it is destroyed

image

  • task release refuses a commit test:usb has not passed here

scan

  • a rule keeps a fix only a third party can ship, listed with its reason

sign

  • a Secure Boot certificate is made once; the variables are signed again under it

Packages

983 packages: 13 updated, 0 added, 0 removed.

Updated

  • bubblewrap 0.13.0-r0 → 0.13.1-r0
  • containerd-2 2.4.1-r2 → 2.4.2-r0
  • containerd-service-2 2.4.1-r2 → 2.4.2-r0
  • containerd-shim-runc-v2-2 2.4.1-r2 → 2.4.2-r0
  • containerd-stress-2 2.4.1-r2 → 2.4.2-r0
  • ctr-2 2.4.1-r2 → 2.4.2-r0
  • curl 8.22.0-r4 → 8.23.0-r0
  • gnome-shell 51.0-r1 → 51.0-r2
  • gnome-shell-lang 51.0-r1 → 51.0-r2
  • libarchive 3.8.9-r3 → 3.8.10-r0
  • libcurl-openssl4 8.22.0-r4 → 8.23.0-r0
  • libzip 1.12-r0 → 1.12.1-r0
  • py3.13-more-itertools 11.1.0-r0 → 11.2.0-r0

Security

Grype over the release's root, on the day it was built:

severity a version fixes it nobody has yet
Critical 0 0
High 0 1
Medium 0 9
Low 0 0
Negligible 0 0
Unknown 0 0

The whole report is grype.md; Grype's own, grype.json; the packages, sbom.spdx.json.

Checked

  • test: 535 of 535 checks passed
  • lifecycle: 65 of 65 checks passed

Get it

An installed machine takes it by itself from its channel, and starts it at its next reboot.
A new machine: the USB stick, https://dl.constructlinux.org/construct_20261014.2.raw.xz, in the signed https://dl.constructlinux.org/SHA256SUMS; how to check it and write it to a stick is the README's Install.

Every file is in SHA256SUMS, signed with the release key (release.pgp):

gpg --import release.pgp && gpg --verify SHA256SUMS.gpg SHA256SUMS && sha256sum -c --ignore-missing SHA256SUMS