main
tree-wide: drop gcrypt dependency from all binaries except for unit tests
Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h
test: drop explicit dlopen notes from test executables
ruff: do not warn about too long line and lambda assignment
ask-password: refuse agent requests with unsafe characters in prompt fields
test: Clean up includes
user-util: return malloc'ed strings in get_user_creds
meson: Use .inc for generated code meant to be included in other files
alloc-util: make malloc_sizeof_safe() compatible with clang's _FORTIFY_SOURCE=3
test: ensure all architecture ids we define definitely fit into .v/ patterns
tree-wide: Migrate to pidref_safe_fork()
ask-password-api: add new "hup_fd" field to AskPasswordReq
tests: use new ASSERT_OK_OR macro
binfmt-util: rename binfmt_mounted() -> binfmt_mounted_and_writable()
I made more unit test to use the test macro
tree-wide: normalize comment style
tree-wide: replace for loop with FOREACH_ELEMENT or FOREACH_ARRAY macros (#34893)
core: propagate FDs from store from user to system manager
core/bpf-restrict-fs: merge three functions
core/bpf-restrict-fsaccess: merge bpf_restrict_fsaccess_supported() into bpf_restrict_fsaccess_setup()
test-btrfs: quota test is slow
string-util: Remove utf8.h and alloc-util.h includes
socket: parse message queue size as IEC size
bus-map-properties: reject wrong variant type
calendarspec: warn on weekday/date conflict in systemd-analyze and systemd-run
clang-tidy: Fix all remaining misc-include-cleaner violations
tree-wide: port to prctl_safe()
core: let manager_load_startable_unit_or_warn take a log level
test: do not fail when parsing PID that isn't thread-group leader (#40677)
options: get rid of "on_error" parameter to FOREACH_OPTION
chase: Use ELOOP for CHASE_PROHIBIT_SYMLINKS error
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
color-util: simplify hsv_to_rgb, fix rgb_to_hsv negative-hue wrap
compare-operator:unit test
compress: consolidate all compression into compress.c with dlopen
compress: handle ZSTD_CONTENTSIZE_UNKNOWN when decompressing blobs
virt: support architecture prefixes in CPUFeature
copy: drop COPY_REFLINK
test: build the crashing test binary outside of the test
cpu-set-util: introduce cpus_online().
creds-util: implement TPM2 SRK pinning
shared/crypto-util: add HKDF (RFC 5869) derivation helper
curl-util: bring CurlGlue/CurlSlot in line with sd-bus and qmp-client
test-daemon: add test case for sd_pidfd_get_inode_id()
tree-wide: Use pidref_wait_for_terminate_and_check()
devnum-util: add macros to safely convert dev_t to pointers and back
locale-util: drop libintl dependency
idn: drop support for libidn
string-util: don't miss ANSI sequence at the very end in previous_ansi_sequence()
test: move several test cases to test-env-file.c
env-util: ensure NUL termination of the replace_env_argv() output array
tree-wide: use ERRNO_NAME almost everywhere
ci: Replace codeql PotentiallyDangerousFunction query with clang-tidy
escape: reject UTF-16 surrogates in \u escapes in cunescape_one() (#43079)
ASSERT_STREQ for simple cases
tree-wide: suppress misc-use-internal-linkage warnings
core: quote each exec directory entry when serializing
test-execve: minor simplification
test-fd-util: Replace dup() with fcntl()
test: avoid test-fdstore failing units when exiting
test: fix test-fileio leaving directory behind and failing on rerun
firstboot: add new systemd.firstboot=headless mode
format-table: give mixed cell types a stable sort order (#43129)
repart: tweak byte value output
shared/gpt: add gpt_probe() for GPT header and partition entry reading
test: add NSS alias coverage for user and group records
test-gunicode: add new test to show that unichar_iswide() is borked
tree-wide: Sort includes
tree-wide: add spdx header on all scripts and helpers
tree-wide: use _contains() rather than _get()/_find()
hostname: add ? and $ in systemd.hostname= kernel cmdline
hostname-util: strip all trailing separators in hostname_cleanup() (#43077)
dissect-image: add a concept for "filtering" partitions we dissect
image-policy: add helper to create policy from dissected image
in-addr-util: rename in_addr_prefix_from_string_auto_internal() -> _full()
shared: add userspace cpio writer for credentials
treewide: drop "RUN_" from "RUN_WITH_UMASK"
test: fix typo
tree-wide: basename -> path_extract_filename
test: use assertion macroses
iovec-util: introduce iovec_done_and_memdup()
iovec-wrapper: introduce iovec_split() and iovw_merge()
tree-wide: Remove unused includes
strv: make iterator in STRV_FOREACH() declaread in the loop
dlopen: take log_level argument and log in fallback stubs
label: plumb label_context through LabelOps
libcrypt-util: turn into dlopen() dependency
libmount: make dlopen() dependency
tests: create test-limits-util.c for limits-util funcs
test: cover DeviceAllow parsing
glyph-util: add more emojis
log: add upper bound to journal iovec accounting
basic/logarithm: add popcount() wrapper
loop-util: shortcut block device fd when it carries no partition table
core: add LUOSession= unit setting
shared: add BindVolume parser in machine-util
fundamental: add ABS_DIFF macro
math-util: round to declared FP precision consistently across architectures
basic: move missing_mman.h -> include/sys/mman.h
tree-wide: insert a space at the end of comments
test-memstream-util.c: Migrate to new assertion macros
mount-util: Compact list of sub mounts after dropping
mountpoint-util: assume MS_NOSYMFOLLOW is available
mountfsd,nsresource: allow recycling mountfsd/nsresourced client connections
namespace-util: Merge namespace_enter_delegated() into namespace_enter()
namespace-util: introduce network_namespace_is_init()
firewall-util: drop FirewallContext
tree-wide: Remove unnecessary SIGCHLD blocking
core: introduce PinnedResource
test: make NSS IPv4 tuple bounds explicit
test-nss-users: quote empty member lists
Rename STRV_MAKE_EMPTY to just STRV_EMPTY
vmspawn: keep parsing options after the first argument
ordered-set: avoid overflow
musl: test: several random fixlets for unit tests
tree-wide: add basic validation of --background argument
tree-wide: Use our own macros instead of fabs()/fmax()/fmin()
test-path-util: add coverage for path edge cases
pe-binary: bound section data against file size, cap UKI zero-padding hash, validate optional header size
pidref: several follow-ups for pidref_wait_for_terminate_full()
pkcs7-util: add helpers for extracting signer info from PKCS7 signatures
ask-password: reject oversized Plymouth prompts (#43102)
test-pressure: set timeout to make not wait forever
test: add test case for masked files in cat_files()
musl: add fallback parse_printf_format() implementation
process-util: introduce proc_set_comm() helper
errno-util: introduce ERRNO_IS_NEG_FS_WRITE_REFUSED()
tree-wide: include unistd.h where necessary
test-qmp-client-qemu: exercise add-fd on the first invoke
test-qmp-client: drop QMP_TEST() macro
test-qr-code: allow specifying the text to encode
basic/math-util: drop libm where possible
basic: move missing_sched.h -> include/sched.h
recurse-dir: optionally, only enumerate dentries of a specific type
rereadpt: implement userspace-based BLKRRPART re-implementation
rm-rf: fail closed when the root check fails
boot: Use hypen in efi-config.h instead of underscore
test-seccomp: Handle environment where sync() is already suppressed
basic: secure_bits_to_strv()
hashmap: honor the value destructor in set_ensure_consume()
tree-wide: Small fixes for various clang-tidy warnings
signal-util: add signal_code_to_string
test: Use TEST macro
sleep-config: make sleep_mode_supported take a path
test: introduce our own sleep command for testing
basic: Use hyphens in missing header names instead of underscores
test-socket-util: convert to new ASSERT macros
test-specifier: update comment to moved file
static-destruct: introduce STATIC_ARRAY_DESTRUCTOR_REGISTER()
musl: stdio: check if stream is writable earlier in fputs() and friends
udev-util: bound leading whitespace skip in udev_replace_whitespace (#42757)
string-util: also check for 0x1b 0x5c ST when stripping ANSI from strings
strv: refuse invalid UTF-8 in strv_rebreak_lines()
core/taint: we know we're always running on cgv2 now
test: add test case for show_menu()
test-user-util: Migrate to new assertion macros
test: ignore fails when the formatted timezone differs from the current one
test: move several test cases to test-tmpfile-util.c
tpm2: Improve how NvPCR protection works.
udev-util: bound leading whitespace skip in udev_replace_whitespace
uid-range: fix out-of-bounds write in uid_range_partition()
test-umask-util: add test for get_process_umask()
udev: drop home-grown udev-ctrl socket
test-unit-serialize.c: Migrate to new assertion macros
user-record: validate JSON shell fields with valid_shell()
user-util: add lookup_groups_in_files
fix ellipsis buffer overflow in xescape_full and utf8 escapers
test: add missing varlink IDL enum tests for Job and ServiceType
logind: add ListInhibitors Varlink method
varlink: add enum types for class and whom fields in io.systemd.Machine
varlink: add enum types for configuration settings in io.systemd.Manager
test: add ServiceContext/Runtime enum and integration tests
tree-wide: get rid of old dispatch_verb
vpick: take separate root_fd and dir_fd arguments
test-web-util.c: Use ASSERT_FALSE() instead of ASSERT_TRUE() where appropriate
errno-util: include -ENOENT in ERRNO_IS_XATTR_ABSENT()
test-xml: Use ASSERT_OK() instead of ASSERT_GE()