main
boot: import Snapdragon device hwid json files
boot: before starting the random seed logic, let's check if the backing volume is r/o
Rename src/boot/efi to just src/boot
tree-wide: suppress misc-use-internal-linkage warnings
boot: allow BCD fields to end at buffer limit
boot-secret: don't initialize secret mixin file if marked read-only
stub: introduce "boot secret" stored in an EFI variable inaccessible to the OS
boot: guard missing Windows auto entry
chid_match: match UEFI firmware hwid entry with the current smbios data
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
stub: Set up all detected consoles
stub: Determine the correct serial console from the ACPI device path
cpio: move TPM PCR info into CpioTarget
boot: make device_path_next_node() robust against malformed zero-length nodes
boot: fix loop bound and OOB in devicetree_get_compatible()
boot: Clean up includes
boot: initialize return parameters on zero-length EFI variable read
tree-wide: normalize comment style
sd-boot: efi-log: fix `__stack_chk_guard` type
boot: inline a single-use variable
boot: don't unquote an empty value in line_get_key_value()
boot,vconsole: Propagate UEFI HII keyboard layout to the OS
tree-wide: add missing '#pragma once'
fuzz-efi-string: add missing OOM check
ruff: use single quotes for multiline strings
boot: split out line editor
boot: fix MEMMAP_DEVICE_PATH EndingAddress field calculation
measure-smbios: bound type 1 length before zeroing wake-up type
boot: measure select SMBIOS objects explicitly
boot: measure SMBIOS via non-TPM runtime measurements
boot: enable only IMAFDCZicsrZifencei for RISC-V
boot: reject GPT headers with SizeOfPartitionEntry below the minimum
boot: require a minimum PE optional header size in verify_pe()
boot: check PE section against SizeOfImage
boot: skip random seed handling if seed file is marked read-only
random-seed: move seed efi table definitions to header
boot: Try to load UKI from simple filesystem before LoadImage
boot: skip shim-specific logic when running with new shim
sd-boot: use sysfail entry for UEFI firmware update failure
boot: cover BCD offsets past the buffer
tree-wide: Ensure source file names are unique
sd-stub: if we are http booted, query source URL and write to EFI variable
tree-wide: Make sure all headers are standalone
boot: before starting the random seed logic, let's check if the backing volume R/O state (#42379)