Changelog

• Updated go-uefi dependency
• Ensure sbctl reads --config even if /etc/sbctl/sbctl.conf is present
• Fixed a bug where sbctl would abort if the TPM eventlog contains the same byte multiple times
• Fixed a landlock bug where enroll-keys --export did not work
• Fixed a bug where an ESP mounted to multiple paths would not be detected
• Exporting keys without efivars present work again
• sbctl sign will now use the saved output path if the signed file is enrolled
• enroll-keys --append will now work without --force.

Generated list of changes

What's Changed

• sbctl.8: fix typo in the man page by @acuteenvy in #350
• Allow exporting keys without efivars present and update CI staticcheck by @Cornelicorn in #363
• Morten/fix signing by @Foxboron in #360
• fix esp detection with multiple mountpoints and failing udev info by @Foxboron in #358
• Read output file path from db if output not specified by @bkrochta in #377
• fix: allow -a/--append without force by @tippfehlr in #378
• quirks: Add MS-7D70 as unaffected by @matteodev8 in #382
• add usr/share/**/.efi to paths for pacman hook by @nebrassy in #385
• build.yml: bump actions/upload-artifact@v4 by @pheiduck in #388
• enroll-keys: if --export, add CWD to RWDirs by @ZLima12 in #389
• gitignore: add generated man pages in section 5. by @ZLima12 in #390

New Contributors

• @acuteenvy made their first contribution in #350
• @bkrochta made their first contribution in #377
• @tippfehlr made their first contribution in #378
• @matteodev8 made their first contribution in #382
• @nebrassy made their first contribution in #385
• @ZLima12 made their first contribution in #389

Full Changelog: 0.15.4...0.16