Add update-ssh-keys 0.3.0 to core repo in azure linux

LICENSES-AND-NOTICES/SPECS/data/licenses.json

@@ -3167,7 +3167,8 @@
         "Source project": {
             "license": "Same as the source project.",
             "specs": [
-                "python-nocaselist"
+                "python-nocaselist",
+                "update-ssh-keys"
             ]
         },
         "Sysbench source": {

SPECS/update-ssh-keys/update-ssh-keys.signatures.json

@@ -0,0 +1,6 @@
+{
+  "Signatures": {
+    "be3ce2acc50313a6826c578e9dbb67e17085d60d.tar.gz": "70a39289dfb4962ff1ede2a12e51f4c7fbeafb36edf7f4ec1182731d2e5844a8",
+    "update-ssh-keys-0.3.0-vendor.tar.gz": "dfeb707b2e0bd52086429d2c3255d498ebcac4124dbc71e58096a9593b5fca60"
+  }
+}

SPECS/update-ssh-keys/update-ssh-keys.spec

@@ -0,0 +1,83 @@
+%global crate update-ssh-keys
+
+# Below is a manually created tarball containing vendored Rust dependencies.
+# The vendored crates are needed because network access is disabled during build time.
+#
+# How to recreate this vendor tarball:
+#   1. Download the update-ssh-keys source tarball
+#   2. Extract it: tar xzf update-ssh-keys-X.Y.Z.tar.gz && cd update-ssh-keys-X.Y.Z
+#   3. Generate vendor directory: cargo vendor > /dev/null
+#   4. Create the vendor tarball: tar czf ../update-ssh-keys-X.Y.Z-vendor.tar.gz vendor/
+#
+# Note: The vendor tarball should be uploaded to the GitHub releases page or stored
+# in the package's source location (using the format update-ssh-keys-VERSION-vendor.tar.gz)
+
+Name:           update-ssh-keys
+Version:        0.3.0
+Release:        1%{?dist}
+Summary:        Utility for managing OpenSSH authorized public keys
+
+License:        Apache-2.0
+URL:            https://github.com/flatcar/update-ssh-keys
+Vendor:         Microsoft Corporation
+Distribution:   Azure Linux
+Group:          System Environment/Base
+Source0:        https://github.com/flatcar/update-ssh-keys/archive/be3ce2acc50313a6826c578e9dbb67e17085d60d.tar.gz
+SOURCE1:        update-ssh-keys-0.3.0-vendor.tar.gz
+BuildRequires:  cargo
+BuildRequires:  rust >= 1.60
+
+# make sure we have a new enough coreos-init that we won't conflict with the
+# old bash script
+Requires: coreos-init
+
+%ifarch x86_64
+%define rust_def_target x86_64-unknown-linux-gnu
+%endif
+%ifarch aarch64
+%define rust_def_target aarch64-unknown-linux-gnu
+%endif
+
+%description
+update-ssh-keys is a command line tool and library for managing OpenSSH
+authorized public keys. It keeps track of sets of keys with names, allows
+for adding additional keys, as well as deleting and disabling them.
+
+The tool is commonly used on Container Linux and Flatcar to manage SSH
+access in cloud environments. It can integrate with cloud-config and other
+provisioning systems to maintain authorized_keys files.
+
+%prep
+%autosetup -n update-ssh-keys-be3ce2acc50313a6826c578e9dbb67e17085d60d -a1
+
+# Extract vendored crates
+tar xf %{SOURCE1}
+mkdir -p .cargo
+
+cat >.cargo/config << EOF
+[source.crates-io]
+replace-with = "vendored-sources"
+
+[source.vendored-sources]
+directory = "vendor"
+EOF
+
+%build
+cargo build --release --target=%{rust_def_target} --offline
+
+%install
+mkdir -p %{buildroot}%{_bindir}
+install -m 755 ./target/%{rust_def_target}/release/%{crate} %{buildroot}%{_bindir}/%{crate}
+
+%check
+cargo test --offline
+
+%files
+%license LICENSE
+%doc README.md
+%{_bindir}/%{crate}
+
+%changelog
+* Wed Feb 19 2026 Akarsh Chaudhary <v-akarshc@microsoft.com> - 0.3.0-1
+- Initial Azure Linux import from the source project (license: same as "License" tag).
+- License verified

cgmanifest.json

@@ -29791,6 +29791,16 @@
         }
       }
     },
+    {
+      "component": {
+        "type": "other",
+        "other": {
+          "name": "update-ssh-keys",
+          "version": "0.3.0",
+          "downloadUrl": "https://github.com/flatcar/update-ssh-keys/archive/be3ce2acc50313a6826c578e9dbb67e17085d60d.tar.gz"
+        }
+      }
+    },
     {
       "component": {
         "type": "other",