v2026.07.29

Updates the sandbox rootfs to glibc 2.44 and refreshes all components to their latest upstream releases.

Component updates

• glibc 2.43 → 2.44
• dash 0.5.12 → 0.5.13.5
• busybox 1.37.0 → 1.38.0
• coreutils 9.9 → 9.11
• gcc (libgcc_s) 15.2.0 → 16.1.0
• toybox 0.8.13 → 0.8.14
• gawk 5.3.2 → 5.4.0
• cacert 2026-03-19 → 2026-07-16
• grep unchanged at 3.12 (already latest)
• Build images: alpine 3.23.2 → 3.24.1, fedora 43 → 45

All source checksums were verified against upstream signed or published checksums.

Fixed: macOS SDK artifacts contained the wrong SDK

SDK_PATH was a single global simply-expanded variable reassigned on each eval, while the recipe expanded $(SDK_PATH) at recipe-execution time. Every macos_sdk_* target therefore copied whichever version was evaluated last.

macOS SDK set changed

Now ships 12.1, 14.5, 15.2, 15.4, 26.5.

• 26.2 → 26.5: 26.2 is no longer shipped in the Command Line Tools.
• 15.4 added: newly available.
• 12.3 dropped: the installed SDK is an empty stub containing no headers.

Verification

All 18 artifacts pass shasum -c against SHASUMS256.txt. Both sandbox rootfs images were tested by compiling a dynamically-linked binary and executing it through the bundled loader and libraries, confirming a working glibc 2.44 runtime on each architecture.

cloud-hypervisor_x86_64_linux, vmlinux-x86_64, and vmlinux-aarch64 are carried forward unchanged from v2026.01.26.