v2025.5

```
Colin Walters (15):
      compose: More error context for container-encapsulate
      chunked-oci: Rework to support --from too
      treefile: Add error context for finalize.d
      core: Ignore xattrs in copyup for rpmfi overrides
      Update bootc
      postprocess: Remove boot/loader
      ci/prow: Add a Dockerfile for build_root
      postprocess: Add an error prefix
      Add `experimental compose rootfs`
      compose: Split off a containers_storage module
      compose: Support buildah too
      compose: Add some error prefixing
      ci: Various fixes
      core: Use source root for repos and dnf vars
      compose-rootfs: Add --source-root-rw

Jonathan Lebon (5):
      rust: Rename `Opt` struct to `ComposeImage`
      rust: Rename `BuildChunkedOCI` struct to `BuildChunkedOCIOpts`
      Add new `treefile-apply` experimental command
      ci/test-container.sh: Make it easier to execute locally
      ci/test-container.sh: Run `treefile-apply` test earlier

Joseph Marrero Corchado (1):
      Release 2025.5
```

**Full Changelog**: v2025.4...v2025.5

Git-EVTag-v0-SHA512: 2a9f0aa3bb7ed56d471b26559f6d03709aeea4ad91523668a001180ed4414a2743c1ed0db8e863ccf7a257f7b52e252d39c58041dc7c724c5cc6c5ea83ac3015

v2025.4

This is a bugfix release with fixes for kernel-install integration and rpmdb cleanup.

When running on package mode systems now we will avoid calling into rpm-ostree kernel-install #5259 and when rpm-ostree kernel-install is called we will check if we are cli wrapping systemctl and unwrap it to allow the initramfs to be created correctly.

When running rpmdb cleanup now we make sure to close any open connection to the rpmdb.  #5247

```
Colin Walters (2):
      container: Do rpmdb cleanup in outer scope
      build-sys: Bump version to 2025.3

Joseph Marrero Corchado (3):
      05-rpmostree.install: check for layout=ostree and install.conf presence
      kernel_install: unwrap systemd if it's wrapped
      packaging/spec: remove kernel_install conditional
```

**Full Changelog**: v2025.3...v2025.4

Git-EVTag-v0-SHA512: a0ec542b918fb9e08e2264a1dc352544206c3d92e23123d8575175b10ba58da87f9643aff98cec40bb468ce71dffdd919d5d44b9f2746e77ab227442874b0a8e

Release 2025.3

v2025.2

This release introduces an experimental feature `build-chunked-oci` which  allows composes to output chunked OCI images #5222. Rpm-ostree also now prints OSTree signature verification text when pulling OCI images. #5223 signature. A significant bug was fixed on #5241 which fixes a bug introduced on #5135 which always wrapped `kernel-install`.

On top of these main changes, this release includes enhancements to packaging and CI.

```
Colin Walters (7):
      libpriv/rpm: Always copy rpmdb even in user mode checkouts
      Use ostree-ext from bootc
      spec: Add version conditionals
      experimental: Add `build-chunked-oci`
      core/cliwrap: Fix is_ostree_layout() in unit tests
      tests/compose: Canonicalize perms for root
      compose: Move tmpfiles generation into tmpfiles module

Jonathan Lebon (1):
      daemon/upgrader: Print OSTree signature verification text when pulling OCI

Joseph Marrero Corchado (1):
      Release 2025.2

Timothée Ravier (1):
      scripts: Skip kernel-16k posttrans scripts

Xiaofeng Wang (1):
      copr: fix "No matching package to install: 'rust-packaging'" in RHEL and CentOS Stream package building
```

**Full Changelog**: v2025.1...v2025.2

Git-EVTag-v0-SHA512: 9f4c8c4a6c1e1e16b8c34ec8a495d5d285d8b1b6717db188228e7752c195e3470a3a27f8fff111f9cfa1fa050927ed175c5ce7a907f8fa31f2bee5832df6ba0a

v2025.1

This release has multiple enhancements and bug fixes, the bigger change introduced with this release is integration with `kernel-install` which introduces a way to use DNF and rpm on container builds to install kernel packages #5135.

```
Alex Haydock (1):
      Update timer to be more in-line with dnf-automatic

Colin Walters (13):
      packaging: Add a bcond without ostree_ext
      tree-wide: `cargo clippy --fix` + a few manual warning fixes
      core: stop wrapping kernel-install when layout=ostree is set
      packaging/Dockerfile: This is long since dead
      cliwrap: use `const` over `static`
      ci: Use `cargo install --locked`
      Add `rpm-ostree experimental`
      tree-wide: Import and use cmdutils from bootc
      core: Create usr/sbin -> bin if we detect merged sbin filesystem
      Cargo.lock: Update(*)
      Fix use of deprecated GString::to_str()
      Cargo.lock: Downgrade cxx to avoid missing cxxbridge-cmd during vendoring
      deny.toml: Update allowed licenses

Joseph Marrero Corchado (3):
      docs: Add debug.md
      src/libpriv: Add kernel-install-integration
      Release 2025.1

Xiaofeng Wang (1):
      ci: fix copr build Unknown argument "builddep" for command "dnf5"
```

* @alexhaydock made their first contribution in #5183
* @henrywang made their first contribution in #5202

**Full Changelog**: v2024.9...v2025.1

Git-EVTag-v0-SHA512: 5be8e199619efde142e058e59afb3d2fd3e937e1a60ded9e52323b820d434e01fe726fd57866d98dc680eb7e7201e7cac42246bb4fab3b3d927ef7c63c74bf63

v2024.9

This release has multiple dependency updates and CI fixes, additionally there are 3 notable changes:
* We deprecated cliwrap #5088
* Add initial kickstart support #5119
* Support custom origins for digested pullspecs #5120

```
Aashish Radhakrishnan (1):
      packaging/rpm-ostree.spec: Drop rust_arches

Colin Walters (15):
      sysroot: Add total layer count to output
      Deprecate cliwrap
      Move dracut code from cliwrap to initramfs module
      scripts: Ignore filesystem.transfiletriggerin
      Revert "build(deps): bump regex from 1.10.6 to 1.11.0"
      treefile: Add an `edition`
      treefile: Add finalize.d as experimental
      compose: Initial kickstart support
      treefile: Add ignore-devices
      core: Don't add composefs metadata client side
      Update ostree-ext to 0.15.3
      ci: Adapt to dnf5's builddep incompatibility
      tests: Drop layering-fedorainfra
      core: List all other repos when we fail to find a repo
      spec: Drop rust-toolset requires on RHEL

Emmanuel Ferdman (1):
      docs: update `rpm-ostreed.service` reference

Gerard Ryan (1):
      Fix doc wording & typo

HuijingHei (4):
      spec: Do not build on ix86 for fedora
      spec: %autorelease can't be resolved by COPR
      test: update kolet path to `/usr/local/bin`
      Bump ostree-ext to 0.15.1

Jonathan Lebon (11):
      rust/core: Add util function to check for digest pullspec
      daemon/transaction-types: Lookup custom origin options earlier
      daemon/transaction-types: Support custom origins for digested pullspecs
      daemon/deployment-utils: Always add custom origin to deployment variant
      app/status: Print custom origin for digested pullspecs as well
      tests: Check custom origin with digest pullspec
      compose: Allow missing `repos` key
      compose: add `--source-root` option
      docs/administrator: document `status --json` and requested packages
      compose: Print transaction when composing extensions
      treefile: Support variable substitution in metadata

Joseph Marrero Corchado (7):
      packaging/rpm-ostree.spec: Update fuse conditional
      ci: stop building with clang
      test-container: Bump to f41
      packaging: Require bootc
      tests: Updates for f41
      Revert "packaging: Require bootc"
      Release 2024.9

```

* @aaradhak made their first contribution in #5089
* @emmanuel-ferdman made their first contribution in #5113
* @grdryn made their first contribution in #5099

**Full Changelog**: v2024.8...v2024.9

Git-EVTag-v0-SHA512: aadbe68d74b104ddeb99b8ed15c2bf9da88f4f21f799302d082d5fac396f4b2f52809b3ffbb08e7455d3ba1a13345f7d206c533b96dd51f854625d4f149f948c

Release 2024.8

v2024.7

This is mainly a bugfix release and one new feature:

    #4974 Add `Recommends=` knob in rpm-ostreed.conf

One notable bugfix comming from ostree-rs-ext is ostreedev/ostree-rs-ext#648 related to hardlinks in `/etc`.

````
Benno Rice (1):
      packaging: Use git timestamp as mtime for vendored files

Colin Walters (2):
      Remove all modularity support
      ci: Uninstall kexec harder

Jonathan Lebon (3):
      README: reflect development status
      Add `Recommends=` knob in rpm-ostreed.conf
      ci/test-container: Stop using f38 packages

Jordan Webb (2):
      rust/src/scripts.rs: ignore posttrans for ELRepo's kernel-lt and kernel-ml
      Add `arch` as a parameter to `package_meta`

Mike (1):
      Clarify version query syntax usage in treefile doc

Timothée Ravier (1):
      ci: Add SPDX-License-Identifier: Apache-2.0 OR MIT
```

* @jordemort made their first contribution in #4982
* @mtalexan made their first contribution in #5028

**Full Changelog**: v2024.6...v2024.7

Git-EVTag-v0-SHA512: ba75eb94b82db42f2e2fb8cb0fea9b3498088aaefe5219dc9b87956b668bfe53930f71484ab74f71176a67665a1b45b10978b3d4fdb4b60ed7fc432a7e8be5b6

This is mainly a bugfix release and a couple of new features:

* #4939 daemon: use new finalization APIs.
* #4859 disable downloading filelists by default.
* #4962 container: Add spinner/progress for layer fetches

One notable feature from ostree-rs-ext added with this dependency bump #4946 is initial support for zstd:chunked via ostreedev/ostree-rs-ext#622

```
Colin Walters (2):
      Remove modularity support entrypoints
      container: Add spinner/progress for layer fetches

HuijingHei (1):
      kargs: keep spaces in double quotes

Jonathan Lebon (5):
      docs/treefile.md: Document postprocess script ordering
      daemon: use new finalization APIs
      ci/test-container: move URL definitions to the top
      core: also wrap `kernel-install` for scriptlets
      packaging: drop `.in` extension on `rpm-ostree.spec.in`

Joseph Marrero (2):
      Release 2024.6
      rpm-ostree-fix-shadow-mode.service: don't run if OS is not installed

Luke Yang (3):
      Various Fedora 40 fixes
      Update to f40 kernel
      Disable downloading filelists by default

Timothée Ravier (6):
      docs/HACKING: Add example for ostree-rs-ext crate development
      update-check: Print unreliability warning on stderr
      deployment_utils: Also add version to cached update
      docs/HACKING: Update crate patching example
      container-update-check: Validate version in manifest diff
      deployment_utils: Fix version for cached container update

Yaakov Selkowitz (1):
      rpm-ostree.spec.in: Update rust macro usage
```

* @yselkowitz made their first contribution in #4921

**Full Changelog**: v2024.5...v2024.6

Git-EVTag-v0-SHA512: 56d22780caeef7e2ffc6bbc903867387222ce6dd2722e2e5f92f4fdbab3c0e558dc84c84b548c4871794e2d7f2fb30d36073f8e1b050c321e193d0637fbf7d98

v2024.5

This is mainly a bugfix release with two notable PRs for
GHSA-2m76-cwhg-7wv6 which are:
1. #4911
2. #4913

On the compose side, encapsulating an OSTree commit into a container image is now much faster thanks to a more efficient approach. Encapsulating desktop composes in particular should now be much less painful.

On top of those changes there are several updates to the dependencies, error handling fixes and a CI updates.

```
Colin Walters (6):
      Release 2024.4
      Revert "compose: Inject our static tmpfiles.d dropins earlier"
      Revert "ci: Test `opt-usrlocal-overlays` end-to-end in Prow CI"
      passwd: Don't traverse symlinks when querying metadata
      container: Check that we found packages
      shadow: Adjust all deployments

Fred Tibbitts (1):
      Add kernel-uek-core.posttrans to list of ignored package scripts

HuijingHei (1):
      ci: sync tests with bootloader naming

Jonathan Lebon (1):
      passwd: create `/etc/[g]shadow` with mode 0

Joseph Marrero (1):
      install: specify sub-commands that are container build only.

Tym Lipari (1):
      container-encapsulate: make build_mapping_recurse significantly faster (#4768)

jbtrystram (1):
      unit: chmod /etc/[g]shadow[-] to 0000
```

* @tymlipari made their first contribution in #4768
* @jbtrystram made their first contribution in #4911
* @fredtibbitts made their first contribution in #4912

**Full Changelog**: v2024.4...v2024.5

Git-EVTag-v0-SHA512: 63acb537f024f5d6ce3668ea4085cdfbebb24cd9187e72979ed2d475331263f0f8ee4f602162cae27dc872ffd060e3e352b7e92e9fea3031f75114736d3d57af