A brown paper bag release for: #3681
Alongside a few other hardening changes and one enhancement to the initramfs mounting path.
What's Changed
- Release 2026.5 by @cgwalters in #3676
- sign: Compare OpenSSL sign results against 1, test more spki cases by @cgwalters-bot in #3677
- core: Reject duplicate names in dirtree objects by @Usamak06 in #3678
- static-delta: Parse superblock files as untrusted by @mardgez in #3679
- prepare-root: Allow /run/ostree to exist already by @alexvarming in #3673
- fetcher-uri: Keep https scheme when dropping default port by @Usamak06 in #3671
- rofiles-fuse: Check hardlinks for O_TRUNC opens and removexattr by @Usamak06 in #3680
- sign-spki: Pass GBytes when looking up revoked keys by @Usamak06 in #3682
- static-delta: Avoid mapping BSPATCH output on FUSE by @cgwalters-bot in #3683
New Contributors
- @mardgez made their first contribution in #3679
- @alexvarming made their first contribution in #3673
Full Changelog: v2026.5...v2026.6