raspberrypi/rpi-imager v2.0.9

on GitHub

What's changed

• Pi Connect for Organisations:
  • New wizard flow for registering devices into a Pi Connect organisation
  • On-device key signing via ConnectDeviceRegistrar (HTTPS)
  • Track org enrolment tokens through ImageWriter
  • Register device identity with Connect after a Fastboot flash
• CM5 / Secure Boot re-provisioning:
  • Rewrite SecureBootProvisioner for in-place re-provisioning
  • New CM5 re-provisioning pipeline in FirmwareManager
  • Add BootloaderImage TLV editor for pieeprom.bin
  • Bootfiles repacking (replaceEntry + writeToFile)
  • Add config-sig, RSA pubkey extraction, bootcode2712 signing
  • Debug toggles for force-secure-boot and signed Fastboot gadget
• Fastboot:
  • Capture INFO/TEXT lines from OEM commands
  • Fix command truncation
  • Normalise custom gadget paths so local files can be used
  • Chunk file_server bulk transfers
  • Resolve cache before flash; pause drive scan during auto-bootstrap
  • Track naked rpiboot devices separately in the drive list
• Cloud-init customisation:
  • Drop enable_ssh; use a systemctl runcmd instead
  • Use user: (singular) for user configuration
  • Fix up serial-if disabled handling
• UI:
  • Reduced-motion option for users sensitive to animation
  • Make AppOptionsDialog scrollable; move Telemetry to the bottom
  • Align Secure Boot step container styling
• Write reliability:
  • Drop the 512-byte alignment requirement
  • Better overflow handling for GPT, MBR, and FAT partition wrappers
  • Handle extremely large sectors_per_fat in the disk formatter
  • Better handling of long filenames in FAT partitions
  • Use a shared_ptr for the write ringbuffer to fix lifetime issues
  • Parse zstd headers to recover the extract size for local archives
  • Fix a TOCTOU on the cache directory existence check
• Windows:
  • Advertise long-path, DPI awareness, and UTF-8 codepage support in the manifest
  • Propagate write errors through FileOperations
  • Geometric backoff for volume lock; wait for clean completion
  • Use secure memory erase for Wi-Fi credentials
  • Uninstaller now preserves user preferences while clearing cache and customisation
• macOS:
  • Use secure memory erase for Wi-Fi credentials
• Linux:
  • Prefer kreadconfig6 with a fallback to kreadconfig5; select via KDE_SESSION_VERSION
  • Use explicit paths in launchDetached and the suspend inhibitor's search paths
  • Use an explicit path for the embedded reboot command
  • Exclude libsystemd, libdbus-1, and libcap from Linux Desktop AppImages
• Device telemetry:
  • Introduce reading of device IO limits
• Licensing:
  • Add nghttp2, libusb, and yescrypt to the bundled licence list
• i18n: Updated French, Turkish, and Irish translation dictionaries; stray-text fixes in French

PRs

• Update French translations by @martignoni in #1586
• i18n Update Irish translation by @aindriu80 in #1591
• fix: prefer kreadconfig6 with fallback to kreadconfig5 by @Ferdinaelectro1 in #1599
• fix(translation): correct typo in French localization by @Nixfo in #1600
• Update Turkish translations by @Sype0 in #1604

New Contributors

• @Nixfo made their first contribution in #1600

Full Changelog: v2.0.8...v2.0.9