From ec3dd0090d7da896315e54303c00856be6ce0157 Mon Sep 17 00:00:00 2001
From: Benjamin Leggett <benjamin@edera.io>
Date: Thu, 15 Oct 2026 15:28:55 -0400
Subject: [PATCH] chore(libscap): bump to upstream 0.26.1 to get bpf fix for
 newer kernels

---
 build.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.rs b/build.rs
index adbec98..71d1113 100644
--- a/build.rs
+++ b/build.rs
@@ -14,7 +14,7 @@ const BPFTOOL_AMD64_SHA: &str = "51ffd3dd4f46fdc46736433a971e828dc70835c6b18ad20
 const BPFTOOL_RELEASE_URL: &str = "https://github.com/libbpf/bpftool/releases/download";
 
 const LIBSCAP_REPO: &str = "https://github.com/falcosecurity/libs.git";
-const LIBSCAP_CHECKOUT_SHA: &str = "8fc2f1fbfc90f8ce7f68e00cdfa692cc7a9983a3";
+const LIBSCAP_CHECKOUT_SHA: &str = "cea7e1d4fa6f64d3855a8e37d784088ae4846891";
 
 fn main() {
     println!("cargo:rerun-if-env-changed=CARGO_FEATURE_FULL_BINDINGS");