This release fixes two security issues:
Additionally, there's a fix for an important negative interaction with systemd-gpt-auto-generator and /boot on systems without a separate /boot and using DDI partition types in #3690
What's Changed
- Release 2026.6 by @cgwalters-bot in #3686
- tests: Cover static-delta pulls through direct-I/O FUSE by @cgwalters-bot in #3684
- bootconfig: reject newlines when writing loader entries by @Usamak06 in #3687
- lib/refs: Validate collection IDs read from summaries and repos by @mardgez in #3688
- sysroot: Finalize through the boot fd, not the /boot path by @cgwalters-bot in #3690
Full Changelog: v2026.6...v2026.7