Fwupd Versions Save

This release adds the following features:

• Add a new device-wait command to fwupdmgr for use in boot-time scripts
• Add a report flag if generated by the OEM which can be used for policy
• Add CCID decoding support to pcap2emulation
• Add fwuptool build-archive cmd to allow building firmware without gcab CLI
• Add support for NVMe CA3 activation
• Allow setting device flags and version numbers from the metadata
• Allow specifying the MTD metadata offset and size
• Allow using basic auth when uploading a report
• Autogenerate enums and structures (with default values) from Rust format
• Delete the obsolete .gz files if the remote is now using .xz
• Read the AGESA Bootloader and TEE versions from the kernel
• Tag releases with an extra flag if they have a report we trust

This release fixes the following bugs:

• Add the latest dbx fixups for BlackLotus
• Allow setting the remote username and password on the CLI
• Be more careful parsing the kernel cmdline
• Convert the man pages to MarkDown format and use a built-in converter
• Enable the vendor-directory remote by default
• De-duplicate releases by the container checksum
• Enable the retimer offline mode depending on HWIDs
• Escape the username and password when using basic authentication
• Fix a pci-mei crash by more carefully converting enums to strings
• Fix Dell dock by triggering passive flow for USB4 subcomponents
• Fix the version detection for SteelSeries Bluetooth mode
• Have fwupd-refresh.timer trigger once per hour on average
• Implement enough of the CFI specification to be able to update a device
• Allow the firmware time to process commands to avoid a Wacom device crash
• Invalidate the XMLb cache when installing new fwupd versions
• Make the config file be called fwupd.conf and add a useful manpage
• Move the expected default plugin config value to the code
• Prefer local remotes when deduplicating releases with the same version

This release adds support for the following hardware:

• CH347 SPI programmer
• Logitech Tap devices
• More Logitech Unifying receivers
• Nordic HID MCUboot direct-xip
• nRF52 Desktop Keyboard
• Wacom Cintiq Pro 27

This stable release fixes the following bugs:

• Add the latest dbx fixups for BlackLotus
• Allow fwupd-refresh.timer trigger once per hour
• Fix a crash when converting HFSTS1 values
• Fix the version detection for SteelSeries Bluetooth mode
• Invalidate the XMLb cache when installing new fwupd versions
• Trigger the passive flow for usb4 from dell-dock

This release adds support for the following hardware:

• More Logitech Unifying receivers
• Nordic MCUboot
• nRF52 Desktop Keyboard

This release fixes the following bugs:

• Fix possible crash when getting UEFI report metadata
• Fix 'fwupdmgr install FILE GUID'

This release adds the following features:

• Add pcap converter which allows emulating devices from a Wireshark dump
• Add the ability to dump TPM firmware for future use
• Optionally retain firmware in a backup remote
• Record the ESP type in the firmware report sent to the LVFS

This release fixes the following bugs:

• Accept application/octet-stream for archives when the mime database is missing
• Add the latest dbx version version fixups as Microsoft removed another entry
• Assume DFU appIDLE if GetStatus is not implemented
• Do not require signatures for local or directory remotes
• Do not use pandoc to build the man pages
• Enhance Qubes functionality to use JCat
• Fix a CCGX 'usbfs: process did not claim interface 1 before use' warning
• Fix a compile warning when using a new libqmi version
• Fix a critical warning when parsing an empty kernel cmdline
• Fix a synaptics-cape regression where the firmware pauses for INTR
• Fix the defines for HFSTS6 enforcement policy
• Fix the i2c name properly for ElanTP hardware
• Fix the name of the MTD Intel SPI controller
• Set the release remote when installing archives
• Use the powerd power type information to better set AC levels

This release adds support for the following hardware:

• Framework Audio Card
• Lenovo ThinkPad TBT3-TR Gen 2
• Wacom Intuos BT S Gen 3

This release fixes the following bugs:

• Allow setting the package user agent before the client has connected
• Fix a small memory leak when refreshing metadata

This release adds the following features:

• Add support for replaying USB devices so they can be emulated in CI
• Allow desktop software to inhibit the system to prevent updates
• Allow using requirements with depth=0 and no parent
• Auto-set the CCGX remove-delay now we parse DMC subcomponents
• Detect and warn users with the broken NVMe firmware 3B2QGXA7
• Print errors as JSON objects when using fwupdmgr --json

This release fixes the following bugs:

• Allow installing battery firmware updates even when the power is too low
• Correctly fall back to the compatible vendor when FDT vendor is missing
• Detect CCGX factory mode and set a non-zero version
• Detect fixed Insyde firmware that can actually use Capsule-on-Disk
• Do not make any of the HWIDs setup failures fatal
• Fix a critical warning when parsing an empty kernel cmdline
• Fix a small memory leak when installing TPS6598x firmware
• Fix compiling with -Dbuild=library for Flathub
• Fix fwupdtool firmware-convert to work with image-less formats
• Fix regression in downloading files in fwupdtool
• Fix SMBIOS struct parsing when the tag section ends with NUL
• Indicate HSI attributes that will only be returned for specific CPU vendors
• Only accept application/x-xz compression for the metadata payload
• Only offset the IPMI user ID when using Lenovo XCC
• Prefer the Intel USB4 plugin over the Thunderbolt plugin when required
• Require at least twice the capsule size in the ESP when updating
• Save all the device flags in the pending database correctly
• Set the device percentage and status for the duration of the update
• Show the 4XX download failure in the CLI error output
• Speed up regenerating the MOTD when installing composite devices
• Use an updated shim if provided during for capsule update
• Use strict snap confinement

This release adds support for the following hardware:

• CalDigit Element Hub
• CalDigit TS4 Dock

This release adds the following features:

• Add a PE/COFF firmware parser to allow reading coSWID SBoM data
• Allow dumping CFI SPI chips using devices like CH341a
• Refactor the HWIDs functionality to include FDT data

This release fixes the following bugs:

• Add back a legacy eMMC GUID to fix a regression
• Always search for uSWID SBoM data in the image
• Do not allow LZX compressed cabinet archives
• Fallback to the checksum if the metadata artifact is invalid
• Improve FDT parsing compatibility with new OpenBMC images
• Never call grub2-probe without arguments
• Respect user requested paths for the ESP even if they are not volumes
• Speed up ChromeOS startup by a huge amount when using directory remotes
• Verify the Synaptics RMI signature in more cases

This release adds support for the following hardware:

• Quectel RM520
• StarBook Mk VI
• System76 launch_heavy_1

This release adds the following features:

• Add an interactive request for re-inserting the USB cable
• Add SHA384 support for TPM hashes
• Add X-FingerprintReader, X-GraphicsTablet, X-Dock and X-UsbDock categories
• Allow specifying OR parent requirements in metadata

This release fixes the following bugs:

• Add the fwupd version to the HSI result if the chassis is invalid
• Allow getting the ESP when there is a block device with no filesystem
• Allow reinstalling on devices with only-version-upgrade set
• Do not require the TPM event log to have all reconstructions
• Fix a tiny memory leak when parsing signed reports
• Ignore failure to mount the ESP if unsupported
• Never allow using SHA-1 for checksum validation
• Return a more useful error if USB recovery failed
• Skip the fwupdx64.efi BootXXXX entry when measuring system integrity
• Speed up daemon startup using prepared XPath queries
• Suggest to turn on ThunderboltAccess for Lenovo systems
• Use better defaults if the config file is missing

This release adds support for the following hardware:

• More Solidigm NVMe devices
• More Synaptics Cape devices
• More Synaptics Prometheus devices
• Most Texas Instruments USB-4 docks
• Scaler support for Wacom USB devices
• Several new Wistron USB-C docks

This release adds the following features:

• Add BIOS rollback protection support for Dell and Lenovo systems
• Generate OVAL rules for openSCAP evaluation
• Show the signed reports from QA teams in client tools

This release fixes the following bugs:

• Add a X-Gpu category for new hardware support
• Add more ChromeOS metadata to the report attributes
• Ensure the device name is set for Intel USB4 devices
• Fix a critical DFU CSR warning when deploying firmware
• Fix a Synaptics RMI issue when updating non-secure devices
• Match more device properties when using GetDetails
• Move AMD platform rollback protection to level 4
• Use the correct AppStream ID for the Key Manifest failure
• Wait for the Intel GPU to come back after updating

This release adds support for the following hardware:

• Logitech Whiteboard cameras
• More Goodix MoC devices
• Several QSI Docks

This release adds the following features:

• Add a new HSI check for the leaked Lenovo 'Key Manifest' hashes
• Measure system integrity when installing UEFI updates
• Record more host DMI data when submitting a report for dbx failures
• Use xz-compressed metadata to reduce bandwidth used by ~25%

This release fixes the following bugs:

• Add documentation for three existing HSI attributes
• Add re-insert requirement for Analogix devices
• Allow parsing metadata more than 1MB in size
• Do not follow symlinks when searching for ESP devices
• Ensure the config file permission is correct for built-in plugins
• Fix a compile failure when compiling without efiboot
• Fix a regression when using fwuptool install-blob with FMAP firmware
• Only count the Microsoft hashes when getting the dbx version
• Only use the IFD when the system is Intel-based
• Support loading CoSWID when only one role has been set

This release adds support for the following hardware:

• Anker Thunderbolt 4 Mini Hub
• ELAN haptic hardware
• Fingerprint lenfy devices
• Goodix GF3258WNC
• Intel discrete GPUs (experimental)
• More Star Labs laptops
• QSI Godzilla Creek Reference Hub