From a36ac86b69a8ea789a5d9ef1bca11e8b6be2b3e4 Mon Sep 17 00:00:00 2001
From: Sunrisepeak <speakshen@163.com>
Date: Tue, 3 Nov 2026 19:09:13 +0900
Subject: [PATCH] feat: index openkal-linux 0.24.1 with read-only confinement
 protection

Co-authored-by: speak-agent <248744407+speak-agent@users.noreply.github.com>
---
 CHANGELOG.md                     |  2 ++
 pkgs/o/openkal-linux.lua         | 21 +++++++++++++++++++++
 tests/examples/openkal/mcpp.toml |  2 +-
 3 files changed, 24 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 64348a26..bec397b1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,8 @@
 
 ### Added
 
+- **openkal-linux 0.24.1.** Read-only confinement requires Landlock ABI 3, which can restrict file truncation; earlier ABIs refuse a confinement request. The ABI probe cache uses atomic accesses. The openkal test member follows the release. GLOBAL and CN archives have the same verified SHA256.
+
 - **mcpplibs.os 0.2.8.** Process options expose granted directories and rights, confinement requests, resource preferences and the system null device. The corrected platform 0.23.2 group is verified on native, hosted and four image hosts. The os test member follows the release. GLOBAL and CN archives have the same verified SHA256.
 
 - **openkal-platform 0.23.2.** The corrected version group pins musl 0.27.2, llvm-runtime 0.18.3 and image tools 0.4.2; the published musl image edge now selects the same loader. It requires mcpp 2026.11.3.1. GLOBAL and CN archives have the same verified SHA256. The older published groups remain unchanged.
diff --git a/pkgs/o/openkal-linux.lua b/pkgs/o/openkal-linux.lua
index 7be6266b..a52b8ebe 100644
--- a/pkgs/o/openkal-linux.lua
+++ b/pkgs/o/openkal-linux.lua
@@ -19,6 +19,13 @@ package = {
 
     xpm = {
         linux = {
+            ["0.24.1"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/openkal-linux/archive/refs/tags/0.24.1.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/openkal-linux/releases/download/0.24.1/openkal-linux-0.24.1.tar.gz",
+                },
+                sha256 = "89fba257970577352071ae18bc28f9fb61384bdb11d46abc3025626c59ff169f",
+            },
             ["0.24.0"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/openkal-linux/archive/refs/tags/0.24.0.tar.gz",
@@ -224,6 +231,13 @@ package = {
             },
         },
         macosx = {
+            ["0.24.1"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/openkal-linux/archive/refs/tags/0.24.1.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/openkal-linux/releases/download/0.24.1/openkal-linux-0.24.1.tar.gz",
+                },
+                sha256 = "89fba257970577352071ae18bc28f9fb61384bdb11d46abc3025626c59ff169f",
+            },
             ["0.24.0"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/openkal-linux/archive/refs/tags/0.24.0.tar.gz",
@@ -429,6 +443,13 @@ package = {
             },
         },
         windows = {
+            ["0.24.1"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/openkal-linux/archive/refs/tags/0.24.1.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/openkal-linux/releases/download/0.24.1/openkal-linux-0.24.1.tar.gz",
+                },
+                sha256 = "89fba257970577352071ae18bc28f9fb61384bdb11d46abc3025626c59ff169f",
+            },
             ["0.24.0"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/openkal-linux/archive/refs/tags/0.24.0.tar.gz",
diff --git a/tests/examples/openkal/mcpp.toml b/tests/examples/openkal/mcpp.toml
index 00573b5f..7ca997e7 100644
--- a/tests/examples/openkal/mcpp.toml
+++ b/tests/examples/openkal/mcpp.toml
@@ -21,7 +21,7 @@ version = "0.1.0"
 openkal = "0.23.0"
 
 [target.'cfg(os = "linux")'.dependencies.mcpplibs]
-openkal-linux = "0.24.0"
+openkal-linux = "0.24.1"
 
 [target.'cfg(os = "macos")'.dependencies.mcpplibs]
 openkal-macos = "0.21.3"