Skip to content

Locked Runtime assets for CI (2026-09-17)

Pre-release
Pre-release

Choose a tag to compare

View all tags
@dollarser dollarser released this 17 Sep 14:57
runtime-assets-20260917
c961aec

Locked Runtime build input for Helix CI; this is not an application release.

The raw Alpine aarch64 archive exactly matches runtime-lock.json at commit c961aec7:

  • File: alpine-minirootfs-3.22.5-aarch64.tar
  • Size: 137287680 bytes
  • SHA-256: 674aa3ac68200bfe67b01964573fce2c6780c726fe23ca640e998337cf47f509
  • Validation: three locked PRoot dependencies verified; 360 ELF files passed the aarch64 and 16 KiB alignment gate.

CI checks the archive hash before use and runs the asset gate again. This frozen build input avoids relying on rolling Alpine mirrors retaining every older package version. It does not claim that a fresh build from the current mirror reproduces the archive.

The attached ALPINE-README.md, license texts and THIRD_PARTY_NOTICES.md preserve package provenance and redistribution notices; runtime-lock.json records exact package versions. No credentials, device data or application signing keys are included.

Corresponding sources and licenses / 对应源码与许可

The following materials were moved from the application v0.0.6 Release to this
existing resource Release. These are the same verified source/notice bytes; all
15 pre-existing runtime assets, their IDs, content and download URLs remain unchanged.
No runtime versions or application APKs were rebuilt or changed.

原应用 v0.0.6 的对应源码与许可材料归入此资源页；原有 15 个运行时附件及下载地址保持。
这些材料对应 v0.0.6 ARM64 APK 中的实际第三方组件；Alpine 清单覆盖 53 个包 / 38 个 origin。
媒体源码包保留其原构建配方提交，不将附件整理误记为第三方重新编译。

File SHA-256
alpine-corresponding-source.tar.gz 2f137c96a31dff59e4d97b1766dff0e48fbcf0d20d9f30a4d256a9e5828d6703
alpine-source-manifest.json e2a7be6d1741c11385592b9f73af327df86141280c984e3d866ecabfcf4d4f1f
media-corresponding-source.tar.gz 195e6f2ce6204ae64b1830cf4eca0f3bd5a989356ad98e2726f47098f7abd993
helix-v0.0.6-third-party-notices.zip fe246d53b42d30b5180f9044c88bd18bde4becc46012ea8a2a764bf4e8c1fe24

The notice ZIP retains upstream license texts and the resolved dependency inventory
for the v0.0.6 reissue from Helix commit d2d1108458fa50386eb813d93bc855c89771ef75.
A resolved dependency is a build input, not proof that all classes survive R8.
Helix's Apache-2.0 license does not replace any third-party license.

Assets 21
Loading