main
shared/help-util: automatically append ":" in sections
analyze: skip SVG-only plot metadata for text output
polkit: check if user authenticated as admin
tree-wide: use device_get_sysattr_unsigned() and friends
core/service: Prevent accidental service termination during reload (#39692)
options: get rid of "on_error" parameter to FOREACH_OPTION
tree-wide: embed dlopen notes into individual executables
boot: cover BCD offsets past the buffer
kernel-install: configurable entry name format (#43290)
bpf: probe generated vmlinux.h for LSM integrity types
Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h
cgtop: use dynamic width for CPU% column (#43286)
clonesetup: check target table size for overflow
meson: fix coverage build
tools: reject invalid inputs and align machine-readable output (#43040)
Manage dlopen notes at beginning of execution, and downgrade priorities in shared libraries (#43060)
cryptsetup: measure via the pcrextend varlink service
conf-files: introduce CONF_FILES_WARN flag and set it at various places
escape: add --stdin input mode
tree-wide: get rid of old dispatch_verb
selinux: wire up LabelContext in tmpfiles, firstboot, sysusers
fsck: don't apply invalid mode or repair values
Revert "macro: EDG compiler frontends doesn't support enum types"
tree-wide: drop DLOPEN_FOO() macros
homed/fscrypt: default new homes to v2 policies (#18280) (#42397)
id128: reject app-specific IDs for new
various: attach errno to structured logs, even if not used in msg
include: update kernel headers from v7.2-rc5
test-kernel-install: tests for entry_name_format=
libc: dlsym the time64 alias for epoll_pwait2() on 32-bit _TIME_BITS=64
test-ndisc-send: correct add_link_layer_address argument order
sd-journal: prefer machine ID from the tail entry
libudev: cache the errno for a failed parent lookup
locale: update Context only on success
properties: Peek the variant value type once
machined: refresh resolve hook addresses per machine
bootctl,mute-console,pcrextend,pcrlock,repart: allow connections from self
network: make VLAN= and friends take multiple names
user-util: return malloc'ed strings in get_user_creds
udev: drop home-grown udev-ctrl socket (#40802)
nss-myhostname: keep IPv6 probe result stable
nss: move definition of NSS_ENTRYPOINT_BEGIN to nss-util.h
nss-resolve: use resolve-varlink-util.h helpers
tools: add -n shortcut for --dry-run
pcrextend: add secret parameter to varlink interface
pcrlock: honor pcr arg for filtering list-components
quotacheck: don't apply an invalid quotacheck.mode= value
basic: update in_first_boot() to return an error
repart: fix shallow_join_strv() dedup scan
tree-wide: Clean up includes
report: replace boolean --sign with signing modes
resolvectl: render DNS errors as JSON
tree-wide: use device_get_sysattr_safe_string()
systemctl: rename enqueue-marked-jobs to enqueue-marked
tree-wide: normalize comment style
run: simplify timer property handling
meson: rework -Dstandalone-binaries= option
meson: rename extract+objects to export+import
socket-proxy: implement PROXY protocol v1
recurse-dir: optionally, only enumerate dentries of a specific type
misc: fix minor error handling issues
tree-wide: Use pidref_wait_for_terminate_and_check()
sysctl: add --verify option to verify sysctl values after write
label: plumb label_context through LabelOps
sysinstall: don't ask whether to erase a disk that contains no partitions
Add ActivatingConcurrencyMax for slice startup pacing
sysupdate: allow long CurrentSymlink= paths
sysusers: gracefully handle existing group in /etc/gshadow
vmspawn: keep parsing options after the first argument
selinux: alternate root support (#42768)
tpm2: Improve how NvPCR protection works.
tree-wide: port to prctl_safe()
udev: derive path ID for PNP devices from ACPI firmware node
update-utmp: shorten comm on boot/shutdown
copy: drop COPY_REFLINK
varlinkctl: add 'list-sockets' verb
vconsole-util: move code to read EFI keyboard layout into generic code
veritysetup: keep parsing after ignored NvPCR options
bpf: move all programs into src/bpf/ and consolidate meson logic
string-util: replace version_is_valid()/version_is_valid_version_spec() by a common call