kernel/config/6.18: bump yocto-cfg-fragments for netfilter fixes

bumping to pickup the following change:

  commit af4e4301c12e98dc03b8827a44eb29786c1a61a6 (HEAD -> yocto-6.18, origin/yocto-6.18)
  Author: Bruce Ashfield <bruce.ashfield@gmail.com>
  Date:   Mon Jan 5 09:41:06 2026 -0500

      config/netfilter: migrate from legacy NF to NETFILTER_XT_TARGET_MASQUERADE

        - 9fce66583f06c212 ("netfilter: Exclude LEGACY TABLES on PREEMPT_RT.")
           adds NETFILTER_XTABLES_LEGACY and switches the iptables legacy options
           (IP_NF_IPTABLES_LEGACY, IP_NF_NAT, IP6_NF_NAT, IP_NF_TARGET_MASQUERADE,
           etc.) from select to depends on it in net/ipv4/netfilter/Kconfig and
           net/ipv6/netfilter/Kconfig.

      If NETFILTER_XTABLES_LEGACY is left unset, IP_NF_TARGET_MASQUERADE
      becomes unreachable and no longer auto-selects NETFILTER_XT_TARGET_MASQUERADE,
      so the xt_MASQUERADE module vanishes.

        - 25a8b88f000c33a1 ("netfilter: add back NETFILTER_XTABLES dependencies")
          restores depends on NETFILTER_XTABLES for those legacy symbols but keeps
          the new NETFILTER_XTABLES_LEGACY gate in the same Kconfig files.

      Effect: after these patches in the 6.18 cycle, keeping kernel-module-xt-masquerade
      without enabling the legacy iptables stack requires setting
      CONFIG_NETFILTER_XT_TARGET_MASQUERADE directly (as in your fix) or turning on
      NETFILTER_XTABLES_LEGACY in the config.

      Solution: for now, we just enable NETFILTER_XT_TARGET_MASQUERADE to fix a
                specific error, and will start the migration of all the legacy
                options to their new options. If breakage becomes widespread,
                we'll enable NETFILTER_XTABLES_LEGACY.

This avoids a build error in xen-image-minimal due to missing kernel
module packages.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

0 files changed, 0 insertions, 0 deletions