sync with upstream
bump shipping kernel version.
use internal cairo as use of system one looks risky atm.
sync with upstream.
using stable and newer version than unstable and starting to get too old and harder to update due xml changes all the time