[gburd]

The release commit for v2026.10.7.3, cut from lts/2026.10.7 at 9441cfa after #270, #265, #267 and #269 merged. Each is a cherry-pick -x of a commit already on master (#261, #264, #266, #268).

The release commit touches only:

• the version sites: dist/RELEASE, meson.build, dist/meson.build and dist/meson/db_subs.json;
• their regenerated outputs, version lines only;
• the upgrade note upgrade_2026_10_7_3.md and its _meta.toml entry;
• the releases.toml line.

It is the same tree that was qualified on all three hosts (git diff against the qualified branch is empty). The per-host output is in test/audit/QUAL-2026.10.7.3-*.txt. The summary QUAL-2026.10.7.3.md follows once this PR's CI gives gates 4 and 5.

Gates: 1–5 and 7, plus L1–L4. Gate 6 (metal benchmark) and gate 8 (soak) are skipped: no fix touches a hot path or resource lifetime.

[github-actions]

ABI diff vs v2026.10.7.2 (libabigail — authoritative)

abidiff exit bitmask: 0

Removed exported symbols (nm -D, _NNNN version suffix normalized)

None.

---

Advisory: libabigail/nm is the authoritative binary-ABI check; Coccinelle is complementary source-level early warning. See dist/cocci/README.md.

[github-actions]

Coccinelle convention checks

No new violations. ✅

Resolved since baseline (3) -- update dist/cocci/baseline.txt to lock these in.

rule_mutex_unbalanced|MUTEX_UNBALANCED|src/btree/bt_curadj.c|return (ret);
rule_mutex_unbalanced|MUTEX_UNBALANCED|src/crypto/mersenne/mt19937db.c|return (ret);
rule_mutex_unbalanced|MUTEX_UNBALANCED|src/mp/mp_register.c|return (ret);