main
pull: Verify commits with gpg signatures from detached metadata
core: Associate branches with remotes, move trigger runs into checkout
tree-wide: Run clang-format
Release 2026.3
libostree: add private dependencies to pkg-config
build: Remove G_GNUC_CONST from *_get_type declarations
libostree: Remove compatibility code with GLib < 2.44
ostree-blob-reader: Add error handling for invalid base64 blobs
sign: Factor out logic to read key blobs
sign: Add PEM reading facility
Add missing `:` to the gtk-doc in a few places
tree-wide: Rerun clang-format, update ci
bootconfig: Preserve extension BLS keys across staged deployments
aboot: Use fd and not absolute path
bootloader/grub2: Handle empty static configs
syslinux: Avoid double `/boot` if bootprefix is enabled
zipl: Switch from genprotimg to pvimg for SE boot image generation
Add ostree admin prepare-soft-reboot
core: canonicalize bare-user xattrs
pull: Fix GLib assertion crash on invalid UTF-8 ref names
Increase the metadata size limit to 128MB
soft-reboot: Check for kernel argument changes
sysroot: Fix Since: for soft reboot APIs
Strip trailing whitespace on all C files
Update FSF license notices to use URL instead of address
curl: Add more assertions for curl return values
curl: Also map HTTP errors for retries
generator: Fix soft-reboot for var, sysroot, and boot
kargs: Fix crash on quoted values in /proc/cmdline
Add SPDX-License-Identifier to source files
checkout: Port to C99 style
static-delta: Add resource limits for LZMA decompression
tree: Fix `name` memory leak
checkout: Fix GVariant leak when scanning for opaque whiteouts
lib/commit: Fix min-free-space accounting for reflinked content objects
style: Fix clang-format violation in ostree-repo-finder-mount.c
libarchive: Handle UTF-8 filenames without locale dependency
ostree-repo-pull: add options to configure retry behavior
static-delta: Account for the full part payload consistently
lib/traverse: Fix minor memory leak
repo: Remove leftover OpenSSL includes
ostree-repo: Add a new ostree_repo_verify_local_summary() API
sepolicy: Fix publicity mismatch for ostree_sepolicy_host_enabled
sepolicy: Add ostree_sepolicy_set_null_log
ostree-sign-ed25519: Fix overwriting already-set GErrors
ostree-sign.ed25519/spki: Fix double free in set_sk()
sign: Support generic "spki" type of commit signatures
ostree-soft-reboot: fix sysroot.mount umount
sysroot: Cache deployment device/inode
deploy: Fix enum type mismatch in copy flags
soft-reboot: Many changes
bin/admin-upgrade: add kexec support
Drop `OSTREE_BUILT_FEATURES` from introspection
lib: clang-format `ostree.h`