version.properties

# PatchNest module dependencies version config
# Used by build.sh AND .github/workflows/build.yaml to fetch pinned binaries.
patchnest="0.13.5-2"
kernelpatch="0.13.3"
magiskboot="v30.7"

# Pinned SHA256 of upstream release artifacts, used by build.sh AND
# .github/workflows/build.yaml to verify that the downloaded binary
# matches what the maintainer last tested. This blocks:
#   * a compromised upstream or MITM from substituting a malicious
#     kernel-level binary (root RCE on every install),
#   * a maintainer mistake (wrong tag pulled) shipping an untested
#     binary to all users.
#
# The keys are named ${asset//[-.]/_}_${tag} to match the build.sh
# convention (see download_assets()). If you bump a tag, generate a
# new line with:
#   curl -fsSL "<url>" | sha256sum
# then paste the hash below.
kpimg_linux_0.13.3=1a593b7d3f928308b59abf7f26a45d80193050339c3f2886fd34bfa8d17bae6d
kptools_android_0.13.3=80ba475f2a43eb12e16e8e758f80bf5d051ddd50d46d5b8586ee1c4b9f0beadc
kpatch_android_0.13.5-2=4afe7280a1b7aa27bcf392ed806392ecdd7941cf04c8479861df7d81b948553e
Magisk_apk_v30.7=9a7a93ef6bbc76995f61e05a9bd6e4301af120aeafa4f56fb961676ba5357754