cairn/pipeline v17.2.2 **Fixed**: with `rechunk: true`, files chunkah cannot attribute to a package (its bigfiles and xattr components: GPU userspace, firmware, out-of-tree kernel modules) kept each build's wall-clock mtime, so their layers got a new digest on every build even when the bytes were unchanged. chunkah v0.7.1 clamps them to SOURCE_DATE_EPOCH like every other file. This is the fix for #14. **Changed**: syft 1.52.0 to 1.54.1 in the buildah image and the supply-chain `syft` default. Migration: none; consumers on `@17` pick this up on their next pipeline.