[ONE Original Android Development] hammer-is:
cm-13.0-20161005-SNAPSHOT-ZNH2K+SultanLite-bacon.zip

October security patches have been merged to "stable/cm-13.0-ZNH2K" branch and it builds (http://review.cyanogenmod.org/#/q/status:merged+branch:stable/cm-13.0-ZNH2K)

Sultan has switched his manifest to "stable/cm-13.0-ZNH5Y" (so next official build will likely be from the branch). But that branch does not have the security patches yet so here is my build from the "old" branch.

Upgrading from "cm-13.0-ZNH2K-20160921-STABLE-Sultan-bacon.zip" should be possible without issues.

I call my build SultanLite as I have not applied all sultans patches (details below) and to not confuse the build with any official sultan builds.

Enjoy (Android security patch level October 1, 2016): cm-13.0-20161005-SNAPSHOT-ZNH2K+SultanLite-bacon.zip

Build details below:

patches applied (you can compare with https://github.com/sultanxda/patcher/blob/03a68def3a9cbeaf440575cc7919a6431b194167/patcher.sh if you want to know what I have left out)

frameworks-av0.patch #libmedia: Add 1440p camcorder quality

frameworks-base0.patch #CamcorderProfile: Add 1440p camcorder profile
frameworks-base4.patch #display: Don't animate screen brightness when turning the screen on

packages-apps-Settings0.patch #Settings: Remove 'Update Cyanogen recovery' preference

system-core0.patch #liblog: Silence spammy logs from camera blobs (AEC_PORT and mm-camera)
system-core1.patch #init: Never install Cyanogen recovery

local_manifest.xml (with changes compared to sultans latest manifest.xml in bold)

<?xml version="1.0" encoding="UTF-8"?>
<manifest>

<!--Patcher (run "./patcher/patcher.sh" before each compilation)-->
<project path="patcher" name="sultanxda/patcher" revision="stable/cm-13.0-bacon" />

<!--Repositories to replace-->
<remove-project name="CyanogenMod/android_hardware_qcom_audio" />
<remove-project name="CyanogenMod/android_hardware_qcom_display" />
<remove-project name="CyanogenMod/android_hardware_qcom_media" />
<remove-project name="CyanogenMod/android_hardware_ril" />
<remove-project name="CyanogenMod/android_packages_apps_CMUpdater" />
[b]<!-- <remove-project name="CyanogenMod/android_packages_apps_Eleven" /> -->[/b]
[b]<!-- <remove-project name="CyanogenMod/android_packages_apps_Screencast" /> -->[/b]
<remove-project name="CyanogenMod/android_packages_apps_Snap" />

<!--Repositories to fetch-->
<!--Upstream-->
<project path="device/oppo/common" name="CyanogenMod/android_device_oppo_common" revision="stable/cm-13.0-[b]ZNH2K[/b]" />
<project path="device/qcom/common" name="CyanogenMod/android_device_qcom_common" revision="stable/cm-13.0-[b]ZNH2K[/b]" />
[b]<!-- <project path="packages/apps/Eleven" name="CyanogenMod/android_packages_apps_Eleven" revision="cm-13.0" /> -->[/b]
[b]<!-- <project path="packages/apps/Screencast" name="CyanogenMod/android_packages_apps_Screencast" revision="cm-13.0" /> -->[/b]

<!--Custom-->
<project path="device/oneplus/bacon" name="sultanxda/android_device_oneplus_bacon" revision="cm-13.0-caf" />
<project path="external/sony/boringssl-compat" name="sultanxda/android_external_sony_boringssl-compat" revision="cm-13.0" />
<project path="hardware/qcom/audio-caf/msm8974" name="sultanxda/android_hardware_qcom_audio" revision="cm-13.0-caf" />
<project path="hardware/qcom/display-caf/msm8974" name="sultanxda/android_hardware_qcom_display" revision="cm-13.0-caf" />
<project path="hardware/qcom/media-caf/msm8974" name="sultanxda/android_hardware_qcom_media" revision="cm-13.0-caf" />
<project path="hardware/ril-caf" name="sultanxda/android_hardware_ril" revision="cm-13.0-legacy" />
<project path="kernel/oneplus/msm8974" name="sultanxda/android_kernel_oneplus_msm8974" revision="cm-13.0-caf" />
<project path="packages/apps/CMUpdater" name="sultanxda/android_packages_apps_CMUpdater" revision="cm-13.0-sultan" />
<project path="packages/apps/Snap" name="sultanxda/android_packages_apps_Snap" revision="cm-13.0-sultan" />
<project path="vendor/oneplus" name="sultanxda/proprietary_vendor_oneplus" revision="cm-13.0-sultan" />

<!--Repositories to remove-->
<remove-project name="CyanogenMod/android_packages_apps_CMBugreport" />
<remove-project name="platform/prebuilts/clang/darwin-x86/host/3.6" />
<remove-project name="platform/prebuilts/gcc/darwin-x86/aarch64/aarch64-linux-android-4.9" />
<remove-project name="platform/prebuilts/gcc/darwin-x86/arm/arm-eabi-4.8" />
<remove-project name="platform/prebuilts/gcc/darwin-x86/arm/arm-linux-androideabi-4.9" />
<remove-project name="platform/prebuilts/gcc/darwin-x86/host/i686-apple-darwin-4.2.1" />
<remove-project name="platform/prebuilts/gcc/darwin-x86/mips/mips64el-linux-android-4.9" />
<remove-project name="platform/prebuilts/gcc/darwin-x86/x86/x86_64-linux-android-4.9" />
<remove-project name="platform/prebuilts/gcc/linux-x86/aarch64/aarch64-linux-android-4.9" />
<remove-project name="platform/prebuilts/gcc/linux-x86/mips/mips64el-linux-android-4.9" />
<remove-project name="platform/prebuilts/python/darwin-x86/2.7.5" />
</manifest>