v2025.12

```
Alexander Larsson (7):
      build-chunked-oci: Correctly label files
      e2e test: Add test that boots a build-chunked-oci image from a layered image
      test: Clean up images in build-chunked-oci test
      ci: Add some content tests to build-chunked-oci test
      cargo: Update to bootc rev that gets ostree 0.20.5
      OCI chunking: Add composefs digest if it was there before
      Add --sign-commit option to build-chunked-oci

Colin Walters (7):
      ci: Import bootc setup action, use in a few jobs
      tree: Fix Rust 1.89 lifetime lint
      ci: Cut over c9s -> c10s
      ci: drop composepost-checks.sh
      Add generated files to clang-format-ignore
      ci: Use fcos stable to defer porting our tests to Fedora 43
      libdnf: Explicitly enable filelists for non-SKIP_FILELISTS flows

Etienne Champetier (1):
      postprocess: create rpmdb symlink / macro earlier

Joseph Marrero Corchado (4):
      tests: Update remaining stream9 references to stream10
      tests: Increase disk size for container-image test
      ci: Fix FCOS e2e test XDG directories and QEMU image build
      Release 2025.12

Micah Abbott (3):
      man: whitespace cleanup
      man: add entry for update alias
      man: spelling corrections

Timothée Ravier (1):
      Update submodule: libdnf `998efa8` to `8eadf44`

Xiaofeng Wang (1):
      Remove /usr/local/man tempfile create

ckyrouac (2):
      rechunker: Reexec when running in container or as non-root
```

Git-EVTag-v0-SHA512: 780f7e056178cdf976a7642483bbe491d975f19309c115c3225f38f4e097d0ec57b7b0f427682336b5dd0df7a5f321ef38f93937acc556f056a405c9c65b8289

v2025.11

```
Alexander Larsson (1):
      Fix SELinux aliases for /usr/etc/systemd/system (and similar)

Chris Kyrouac (1):
      Update version of afterburn

Colin Walters (3):
      ci: Bump afterburn version
      ci: Update for coreos-assembler API break
      ci: Drop NEVRA override testing

Etienne Champetier (4):
      compose: sort packages before rpmtsOrder()
      treefile: merge 'repo-metadata' config
      treefile,compose: add advisories-metadata option
      compose: allow write-lockfile-to / lockfile / lockfile-strict together

Jonathan Lebon (2):
      compose: Add `--lockfile` to `rpm-ostree compose rootfs`
      compose: Add `--label` for build-chunked-oci

Joseph Marrero Corchado (1):
      Release 2025.11

Marco Hünseler (1):
      fsutil.rs: Make `is_dir` return correct information

ckyrouac (3):
      rechunker: Recursively add directories with user.component xattr
      docs: Update docs with new rechunker features
      rechunker: Parse specific components into (path, checksum)

dependabot[bot] (1):
      build(deps): bump tracing-subscriber from 0.3.19 to 0.3.20

ningmingxiao (1):
      doc:update index.md
```

Git-EVTag-v0-SHA512: 577ed5b2c11fec407abbf63aa66e3383cc7f5dda8b3de80962d9335913350fdc1c5e656d4a21802a825ec5ea51b12536c63a7eebc0c2118f5cb8af060f4d0959

Release 2025.10

v2025.9

```
Alexander Larsson (1):
      postprocess: Don't hardcode "targeted" policy

Colin Walters (16):
      docs: Describe how to map container -> ostree
      main: Silence SELinux log spam
      fix(compose): move usermod sysusers.d fragments to correct directory
      tests: Add a layering-useradd test
      passwd: Accept borrowed value
      passwd: Some basic unit tests for prepare_rpm_layering
      passwd: Make merge take a dfd
      dependabot: Group minor+patch updates
      bindings: Regenerate with newer cxx
      tests: Add a test case for layering with sysusers.d
      Update to bootc 1.3.0
      Add support for skipping lua scripts via a magic comment
      Un-hide finalization APIs
      kernel: Drop check for ostree-container
      gitignore: Don't ignore committed files
      Release 2025.9

Dusty Mabe (5):
      rust/bwrap: child_wait_check: let gio check status
      rust/bwrap: don't swallow STDERR when running commands
      rust/src/composepost: add some emphasis on postprocess scripts
      /tests/compose: reset the submodule after f-c-c freezing
      tests/override-replace-2: increase reliability of selinux override

Etienne Champetier (1):
      rust/src/compose: add --write-lockfile-to / --lockfile-strict

John Eckersberg (3):
      Update to latest bootc/ostree-ext
      rechunker: Add `--format-version=2`
      tests/build-chunked-oci: Add quoting

Jonathan Lebon (10):
      compose: Support separate cache dir for dnf content
      compose: Squash `--workdir` warning in `install` path
      compose: Cache RPMs if cache dir on separate filesystem
      libpriv/kernel: Pass through `DRACUT_NO_XATTR` when running dracut
      core: Run sysusers after doing passwd/group layering dance
      core: Neuter sysusers when writing rpmdb
      libpriv/kernel: Pass through DRACUT_NO_XATTR more cleanly
      passwd: Also save and restore shadow files
      treefile: Add `sysusers:` knob
      vmcheck: bump VM memory to 1.5G

Zbigniew Jędrzejewski-Szmek (1):
      scripts: suppress error about glibc.posttrans scriptlet

```

Git-EVTag-v0-SHA512: 5e0a96eacc6936cfd54f5bb4c9a662b74b86d3e3a744ce892e3e109b41687f26139e47e01eaf59c01def68619d7b8c62f4e20bbb5e19ee10c547841f467a4c6f

v2025.8

```
Colin Walters (7):
      tree-wide: Run clang-format with clang 20.1.3
      test-container: Update for F42
      tests: Drop testing of ostree-container
      tests/container-image: Rework to handle container base
      tests/cached-sigs: Fix to handle container refspec by default
      tests: Drop override-kernel
      tests/override-replace-2: Update to support f42

Iain Collins (1):
      daemon/transaction-types: pass an empty dictionary instead of NULL to change_origin_refspec

Jonathan Lebon (19):
      treefile: Support inlined conditional includes
      treefile-apply: Add `--var` option
      treefile-apply: Handle `repos` key
      treefile-apply: Enable versionlock plugin when running dnf
      treefile-apply: Tweak `versionlock` hack
      core: Move sysusers docstring to the Rust side
      rust/core: Drop unnecessary Vec
      core: Process ostree layers before running sysusers
      core: Ignore replaced files in rpmdb write transaction
      core: Drop unused variable
      tests/compose: Bump f-c-c commit to f42
      tests/compose: Disable basic test
      tests/compose: Adapt for latest alternatives changes
      tests/compose: Temporarily disable ima test
      tests/compose: Better override opt-usrlocal
      rust/treefile: Fix edition defaulting
      testutils: Stop trying to mutate binaries in /usr/sbin
      libvm: Handle container case when changing refspec to vmcheck
      tests/kolainst: update client-layering-upgrade for f42

Joseph Marrero Corchado (3):
      ci: update cargo-deny-action
      deny.toml: allow LGPL-2.1-or-later WITH GCC-exception-2.0
      Release 2025.8

Timothée Ravier (2):
      rust/src/compose: Show full comment in command line help
      rust/src/compose: Add max-layers opt to compose image
```

* @IainCollins262 made their first contribution in 5c789dc

**Full Changelog**: v2025.7...v2025.8

Git-EVTag-v0-SHA512: 403ca9a3438b773ae9364f1c132fa410a87fd0e39cb1d6f9750b2bbc36f4cea9fc38fdb8652dee99e636965976b0f7a9151fcce2662d4d9eddfd7a8143e04876

Release 2025.7

Release 2025.6

v2025.5

```
Colin Walters (15):
      compose: More error context for container-encapsulate
      chunked-oci: Rework to support --from too
      treefile: Add error context for finalize.d
      core: Ignore xattrs in copyup for rpmfi overrides
      Update bootc
      postprocess: Remove boot/loader
      ci/prow: Add a Dockerfile for build_root
      postprocess: Add an error prefix
      Add `experimental compose rootfs`
      compose: Split off a containers_storage module
      compose: Support buildah too
      compose: Add some error prefixing
      ci: Various fixes
      core: Use source root for repos and dnf vars
      compose-rootfs: Add --source-root-rw

Jonathan Lebon (5):
      rust: Rename `Opt` struct to `ComposeImage`
      rust: Rename `BuildChunkedOCI` struct to `BuildChunkedOCIOpts`
      Add new `treefile-apply` experimental command
      ci/test-container.sh: Make it easier to execute locally
      ci/test-container.sh: Run `treefile-apply` test earlier

Joseph Marrero Corchado (1):
      Release 2025.5
```

**Full Changelog**: v2025.4...v2025.5

Git-EVTag-v0-SHA512: 2a9f0aa3bb7ed56d471b26559f6d03709aeea4ad91523668a001180ed4414a2743c1ed0db8e863ccf7a257f7b52e252d39c58041dc7c724c5cc6c5ea83ac3015

v2025.4

This is a bugfix release with fixes for kernel-install integration and rpmdb cleanup.

When running on package mode systems now we will avoid calling into rpm-ostree kernel-install #5259 and when rpm-ostree kernel-install is called we will check if we are cli wrapping systemctl and unwrap it to allow the initramfs to be created correctly.

When running rpmdb cleanup now we make sure to close any open connection to the rpmdb.  #5247

```
Colin Walters (2):
      container: Do rpmdb cleanup in outer scope
      build-sys: Bump version to 2025.3

Joseph Marrero Corchado (3):
      05-rpmostree.install: check for layout=ostree and install.conf presence
      kernel_install: unwrap systemd if it's wrapped
      packaging/spec: remove kernel_install conditional
```

**Full Changelog**: v2025.3...v2025.4

Git-EVTag-v0-SHA512: a0ec542b918fb9e08e2264a1dc352544206c3d92e23123d8575175b10ba58da87f9643aff98cec40bb468ce71dffdd919d5d44b9f2746e77ab227442874b0a8e

Release 2025.3